pi-web-ui 0.64.4 → 0.64.6

package/README.md

@@ -70,8 +70,8 @@ theme switching, and a full settings panel — tuned for daily development.
 
 ### 🤖 Subagents & templates
 
-- **First-party subagents** — spawn independent background conversations for parallel exploration / implementation / review (`subagent_spawn`); manage them like a chat right in the left panel: view live output, inject follow-ups (steer), abort, dismiss. In-memory sessions — they never touch the history / resume list, and can be nested.
-- **Subagent templates** — configure reusable presets in Settings → Subagent templates: a role system prompt (append or replace) plus skills & extensions whitelists. The AI picks one via the `subagent_templates` tool and `subagent_spawn(template="…")`, or spawns without one (main-session default config). Disabled templates stay in the panel for re-enabling but become invisible to the AI tools (can't be listed or picked). Templates are shared globally across browser clients (`<dataDir>/subagent-templates.json`). Six built-in templates (review / implement / research / scout / audit / delegate, adapted from the pi-subagents community projects) seed the list on first run — marked 「Built-in」, editable and deletable like any other.
+- **First-party subagents** — spawn independent background conversations for parallel exploration / implementation / review (`subagent_spawn`, with optional `model` override or a template's model); collect results without polling via `subagent_wait_all` (blocks until every subagent finishes, then summarizes results/errors). Manage them like a chat right in the left panel: view live output, inject follow-ups (steer), abort, dismiss — failed runs surface a red dot in the running list and an error notice in the main chat. In-memory sessions — they never touch the history / resume list, and can be nested.
+- **Subagent templates** — configure reusable presets in Settings → Subagent templates: a role system prompt (append or replace), skills & extensions whitelists, and an optional per-template model. The AI picks one via the `subagent_templates` tool and `subagent_spawn(template="…")`, or spawns without one (default = follow the main conversation's current model, or the global default subagent model set in the same panel). Disabled templates stay in the panel for re-enabling but become invisible to the AI tools (can't be listed or picked). Templates are shared globally across browser clients (`<dataDir>/subagent-templates.json`). Six built-in templates (review / implement / research / scout / audit / delegate, adapted from the pi-subagents community projects) seed the list on first run — marked 「Built-in」, editable and deletable like any other.
 
 ### 🖼️ Files, images & attachments
 

package/dist/server/agent-service.js

@@ -589,8 +589,12 @@ export class ClientSession {
         }
     }
     /** 创建子代理 conversation（inMemory runtime + 独立 terminals），listed 入左栏，
-     *  并在其上触发一次完整回合。返回 convId（= 工具 runId）。 */
-    async spawnSubagentConversation(prompt, type, cwd, apply) {
+     *  并在其上触发一次完整回合。返回 convId（= 工具 runId）。
+     *
+     *  `model`（可选）："provider/id"，显式指定子代理模型。不传时由调用方决定是否
+     *  回退到模板模型 / 设置面板默认模型；null = 跟随主对话当前模型（默认行为，
+     *  runtime 重建时会继承共享 ModelRuntime 的当前默认）。 */
+    async spawnSubagentConversation(prompt, type, cwd, apply, model) {
         const conversationId = `sa-${randomUUID().slice(0, 8)}`;
         const terminals = this.makeTerminalManager(conversationId, cwd);
         const runtime = await createAgentSessionRuntime(this.makeRuntimeFactory(terminals, apply), {
@@ -614,6 +618,41 @@ export class ClientSession {
         catch {
             // 绑定失败不阻断运行。
         }
+        // 指定模型（显式 model 参数 → 模板 model → 设置面板默认）时，在首回合前
+        // 给子代理会话换模型；全都不给 = 跟随主对话：把发起会话当前的模型也
+        // 显式搬过来（新 runtime 的默认模型未必等于主对话刚选的模型）。
+        const resolvedModel = model ?? (apply?.model?.trim() || null) ?? (this.settingsSvc.current.subagentDefaultModel || null);
+        const followModel = resolvedModel ? resolvedModel : this.session.model ? `${this.session.model.provider}/${this.session.model.id}` : null;
+        if (followModel) {
+            const slash = followModel.indexOf("/");
+            const m = slash > 0 && slash < followModel.length - 1
+                ? this.sharedModelRuntime?.getModel(followModel.slice(0, slash), followModel.slice(slash + 1))
+                : undefined;
+            if (m) {
+                try {
+                    // 先恢复该 provider 的项目密钥（setModel 的鉴权检查要用），再换模型。
+                    await this.restoreKeyForModel(followModel, cwd);
+                    await conv.session.setModel(m);
+                }
+                catch (err) {
+                    // 换模型失败不阻断运行——沿用默认模型继续。
+                    this.emit({
+                        type: "notice",
+                        level: "warning",
+                        text: `子代理模型切换失败（将按默认模型运行）：${followModel}（${err.message}）`,
+                        textEn: `Failed to set subagent model, running with default: ${followModel} (${err.message})`,
+                    });
+                }
+            }
+            else {
+                this.emit({
+                    type: "notice",
+                    level: "warning",
+                    text: `子代理模型不存在，将按默认模型运行：${followModel}`,
+                    textEn: `Subagent model not found, running with default: ${followModel}`,
+                });
+            }
+        }
         // 触发回合（后台执行；失败转识为通知）。
         void conv.session.sendUserMessage(prompt).catch((err) => {
             this.emit({
@@ -648,6 +687,7 @@ export class ClientSession {
         catch {
             // session being replaced — report defaults
         }
+        const { error, canceled } = this.subagentRunOutcome(conv);
         return {
             convId: conv.id,
             type: conv.subagentType ?? "general",
@@ -655,11 +695,38 @@ export class ClientSession {
             prompt: "",
             state,
             streaming,
+            error,
+            canceled,
             messageCount,
             model: conv.session.model?.id,
             output: conv.session.getLastAssistantText() ?? "",
         };
     }
+    /** 子代理最近一次运行的结局：最后一条 assistant 消息的 errorMessage / stopReason。
+     *  报错 > 中止 > 正常，三者互斥；无 assistant 消息时返回空。 */
+    subagentRunOutcome(conv) {
+        try {
+            const msgs = conv.session.agent.state.messages;
+            for (let i = msgs.length - 1; i >= 0; i--) {
+                const m = msgs[i];
+                if (m.role !== "assistant")
+                    continue;
+                const err = m.errorMessage;
+                if (typeof err === "string" && err.trim()) {
+                    return { error: err.trim() };
+                }
+                const stop = m.stopReason;
+                if (stop === "aborted" || stop === "cancelled") {
+                    return { canceled: true };
+                }
+                break;
+            }
+        }
+        catch {
+            // session being replaced — treat as no outcome yet
+        }
+        return {};
+    }
     emitTerminal(conversationId, msg) {
         // Background conversations keep collecting output in their own PTY buffer.
         // Do not stream it into the active xterm; push the retained window on switch.
@@ -738,13 +805,14 @@ export class ClientSession {
      * 切换查看 / 输入补充（steer）/ 中止（abort）/ 移出全部复用现有对话机制。
      */
     subagentHost = {
-        spawnSubagent: (prompt, type, cwd, templateName) => {
+        spawnSubagent: (prompt, type, cwd, templateName, model) => {
             // 模板：存在且启用时应用；传了名字但不可用 → 抛错让工具转给 AI。
             const tpl = templateName ? this.subagentTemplates.get(templateName) : undefined;
             if (templateName && (!tpl || !tpl.enabled)) {
                 throw new Error(`子代理模板不可用：${templateName}（不存在或已停用）`);
             }
-            return this.spawnSubagentConversation(prompt, type, cwd, tpl);
+            // 模型优先级：显式 model 参数 > 模板自带模型 > 设置面板默认模型；都不给 = 跟随主对话。
+            return this.spawnSubagentConversation(prompt, type, cwd, tpl, model);
         },
         getSubagent: (convId) => this.getSubagentSnapshot(convId),
         listSubagents: () => this.listSubagentSnapshots(),
@@ -764,7 +832,7 @@ export class ClientSession {
         listTemplates: () => this.subagentTemplates
             .list()
             .filter((t) => t.enabled)
-            .map((t) => ({ name: t.name, description: t.description })),
+            .map((t) => ({ name: t.name, description: t.description, model: t.model })),
         isTemplateUsable: (name) => {
             const t = this.subagentTemplates.get(name);
             return !!t && t.enabled;
@@ -1456,6 +1524,26 @@ export class ClientSession {
                     }
                     break;
                 }
+                // 子代理运行报错（provider 400 / 超时等）→ 通知主对话，让用户/AI 知道
+                // 拿回的结果可能是空或无意义的（否则子代理只是安静地停在「done」，
+                // 主对话永远收不到失败信号）。错误文本变化时允许再次通知（去重）。
+                if (conv.isSubagent) {
+                    const { error } = this.subagentRunOutcome(conv);
+                    if (error && error !== conv.subagentErrorNotified) {
+                        conv.subagentError = error;
+                        conv.subagentErrorNotified = error;
+                        this.emit({
+                            type: "notice",
+                            level: "error",
+                            text: `子代理 ${conv.id.slice(0, 8)}（${conv.subagentType ?? "general"}）运行失败：${error}`,
+                            textEn: `Subagent ${conv.id.slice(0, 8)} (${conv.subagentType ?? "general"}) failed: ${error}`,
+                        });
+                    }
+                    else if (error) {
+                        conv.subagentError = error;
+                    }
+                    this.emitConversations();
+                }
                 // Goal review hook lives in GoalService.onAgentEnd(conv, false).
                 this.goalSvc.onAgentEnd(conv, false);
                 // Deferred settings reload: settings (system prompt / skills /
@@ -2907,6 +2995,8 @@ export class ClientSession {
                 messageCount,
                 isStreaming,
                 isSubagent: !!conv.isSubagent,
+                // 子代理带 error 标记：左栏红点提示（普通对话不参与）。
+                ...(conv.isSubagent ? this.subagentRunOutcome(conv) : {}),
             });
         }
         this.emit({

package/dist/server/bg-servers.js

@@ -1,7 +1,68 @@
-import { killPidTree, lookupProcessName, lookupProcessCommandLine, snapshotListeningPorts } from "./process-utils.js";
+import { killPidTree, lookupProcessName, lookupProcessCommandLine, snapshotListeningPorts, snapshotProcessParents, } from "./process-utils.js";
 const BG_REFRESH_INTERVAL_MS = 30_000;
 /** bash 结束后等这么久再拍「后」快照——给后台服务绑定端口的时间。 */
 const BG_BIND_WAIT_MS = 1500;
+/**
+ * 基本不可能由 AI 启动的常驻桌面软件进程名（小写）。命中即跳过，避免面板被
+ * 微信/QQ 等本地软件的动态监听端口污染。注意 Chrome 不进黑名单：AI 会用
+ * Playwright 拉浏览器做模拟，它靠下方父链回溯判定（Playwright 起的 chrome
+ * 能回溯到服务器进程，自己开的 chrome 父链是 explorer，分得开）。
+ */
+export const NON_AGENT_PROCESS_NAMES = new Set([
+    "wechat.exe",
+    "weixin.exe",
+    "wechatappex.exe",
+    "qq.exe",
+    "tim.exe",
+    "telegram.exe",
+    "dingtalk.exe",
+    "explorer.exe",
+    "searchhost.exe",
+    "searchapp.exe",
+    "svchost.exe",
+    "winlogon.exe",
+    "dwm.exe",
+    "csrss.exe",
+    "conhost.exe",
+]);
+/**
+ * 判定 bash 后新出现的监听端口进程是否该记入后台任务列表（即「AI 启动的」）。
+ * 判定规则（查不到就保守记录，宁多勿漏）：
+ * 1. 进程名命中黑名单（如 WeChat.exe，AI 不会去启动微信）→ 跳过；
+ * 2. 进程树可查时沿父链向上回溯：
+ *    - 撞上服务器进程（serverPid，AI 的任何 bash/execFile 都从它 spawn）→ 记录；
+ *    - 撞上本次 diff 出的其他新 pid（bash 留下的中间层，如 concurrently/npm
+ *      一类进程，它自己不监听端口所以没进 diff，但子进程监听）→ 记录；
+ *    - 完整回溯到系统根（pid 0/1）都未命中 → 桌面软件自启（如自己开的 Chrome，
+ *      父链 explorer→…→0），跳过；
+ * 3. 父链断链（父进程已退出/reparent，快照里查不到级联）→ 保守记录。
+ * @param parents 全量 pid→ppid 映射，undefined = 查询失败（跳过父链判定，只留黑名单）。
+ * @param newPids 本次 bash 前后 diff 出的全部新监听 pid。
+ */
+export function shouldTrackBackgroundServer(pid, parents, newPids, serverPid, name) {
+    if (name && NON_AGENT_PROCESS_NAMES.has(name.toLowerCase()))
+        return false;
+    if (!parents)
+        return true; // 进程树查不到 → 保守记录
+    const seen = new Set();
+    let cur = pid;
+    while (cur !== undefined && !seen.has(cur)) {
+        seen.add(cur);
+        if (cur === serverPid)
+            return true;
+        if (cur !== pid && newPids.has(cur))
+            return true;
+        const next = parents.get(cur);
+        if (next === undefined) {
+            // 到达系统根（0/1）→ 完整链，桌面软件；否则是断链 → 保守记录
+            return cur <= 1 ? false : true;
+        }
+        if (next === cur)
+            return false; // 自引用根，同样视为完整链终点
+        cur = next;
+    }
+    return false;
+}
 export class BgServerTracker {
     opts;
     servers = new Map();
@@ -38,38 +99,62 @@ export class BgServerTracker {
             return;
         await new Promise((r) => setTimeout(r, BG_BIND_WAIT_MS));
         const after = await snapshotListeningPorts();
-        let added = false;
+        const fresh = [];
         for (const [port, pid] of after) {
             if (!before.has(port) && !this.servers.has(port)) {
-                this.servers.set(port, { pid, since: Date.now() });
-                added = true;
-                // Best-effort process name + full command line so the panel shows
-                // something readable (name) AND what is actually running (command).
-                void lookupProcessName(pid).then((name) => {
-                    const cur = this.servers.get(port);
-                    if (cur && cur.pid === pid && name) {
-                        cur.name = name;
-                        this.push();
-                    }
-                });
-                void lookupProcessCommandLine(pid).then((command) => {
-                    const cur = this.servers.get(port);
-                    if (cur && cur.pid === pid && command) {
-                        cur.command = command;
-                        this.push();
-                    }
-                });
-                this.opts.emit({
-                    type: "notice",
-                    level: "info",
-                    text: `检测到 AI 启动的后台服务：端口 ${port}（pid ${pid}）——可在顶栏「后台任务」里单独停止或全部关闭`,
-                    textEn: `Detected an AI-started background service: port ${port} (pid ${pid}) — stop it individually or all at once under Background tasks in the top bar`,
-                });
+                fresh.push({ port, pid });
             }
         }
+        if (fresh.length === 0)
+            return;
+        // 剔除桌面软件误报（微信等）后，剩下的才是 AI 启动的后台服务。
+        const keep = await this.filterAgentSpawned(fresh);
+        let added = false;
+        for (const { port, pid } of keep) {
+            if (this.servers.has(port))
+                continue;
+            this.servers.set(port, { pid, since: Date.now() });
+            added = true;
+            // Best-effort process name + full command line so the panel shows
+            // something readable (name) AND what is actually running (command).
+            void lookupProcessName(pid).then((name) => {
+                const cur = this.servers.get(port);
+                if (cur && cur.pid === pid && name) {
+                    cur.name = name;
+                    this.push();
+                }
+            });
+            void lookupProcessCommandLine(pid).then((command) => {
+                const cur = this.servers.get(port);
+                if (cur && cur.pid === pid && command) {
+                    cur.command = command;
+                    this.push();
+                }
+            });
+            this.opts.emit({
+                type: "notice",
+                level: "info",
+                text: `检测到 AI 启动的后台服务：端口 ${port}（pid ${pid}）——可在顶栏「后台任务」里单独停止或全部关闭`,
+                textEn: `Detected an AI-started background service: port ${port} (pid ${pid}) — stop it individually or all at once under Background tasks in the top bar`,
+            });
+        }
         if (added)
             this.push();
     }
+    /** 并行拉进程树与各进程名，用黑名单 + 父链回溯剔除桌面软件误报。 */
+    async filterAgentSpawned(fresh) {
+        const parents = await snapshotProcessParents();
+        const names = await Promise.all(fresh.map((f) => lookupProcessName(f.pid)));
+        const newPids = new Set(fresh.map((f) => f.pid));
+        const out = [];
+        for (let i = 0; i < fresh.length; i++) {
+            const { port, pid } = fresh[i];
+            if (shouldTrackBackgroundServer(pid, parents, newPids, process.pid, names[i])) {
+                out.push({ port, pid });
+            }
+        }
+        return out;
+    }
     /** The current background-server list, oldest first. 合并插件任务。 */
     list() {
         const out = [...this.servers.entries()]

package/dist/server/client-state.js

@@ -193,6 +193,7 @@ export class ClientStateStore {
             visionBridgeModel: s?.settings?.visionBridgeModel ?? null,
             visionBridgePromptMode: s?.settings?.visionBridgePromptMode === "replace" ? "replace" : "append",
             visionBridgePrompt: s?.settings?.visionBridgePrompt ?? "",
+            subagentDefaultModel: s?.settings?.subagentDefaultModel ?? null,
             reviewPrompt: s?.settings?.reviewPrompt ?? "",
             reviewDisabledSkills: s?.settings?.reviewDisabledSkills ?? [],
             disabledPlugins: s?.settings?.disabledPlugins ?? [],
@@ -215,6 +216,7 @@ export class ClientStateStore {
             toolsWrap: settings.toolsWrap ?? cur.toolsWrap ?? true,
             visionBridgeEnabled: settings.visionBridgeEnabled ?? cur.visionBridgeEnabled ?? true,
             visionBridgeModel: settings.visionBridgeModel ?? cur.visionBridgeModel ?? null,
+            subagentDefaultModel: settings.subagentDefaultModel ?? cur.subagentDefaultModel ?? null,
             visionBridgePromptMode: settings.visionBridgePromptMode ?? cur.visionBridgePromptMode ?? "append",
             visionBridgePrompt: settings.visionBridgePrompt ?? cur.visionBridgePrompt ?? "",
             reviewPrompt: settings.reviewPrompt ?? cur.reviewPrompt ?? "",

package/dist/server/dsh/dsh-agent-service.js

@@ -1554,29 +1554,37 @@ export class DshClientSession {
         await this.pushSessions();
     }
     async pushSessions() {
-        const files = findSessionFilesForCwd(this.sessionRoot, this.cwd);
-        const summaries = [];
-        for (const file of files) {
-            try {
-                const sessionId = basename(dirname(file));
-                // 审查会话（review-*）是内部工作会话，不进历史列表。
-                if (sessionId.startsWith("review-"))
-                    continue;
-                const { events } = readSessionLog(file);
-                summaries.push({
-                    path: file,
-                    name: sessionId,
-                    firstMessage: firstUserText(events),
-                    messageCount: events.filter((e) => e.type === "user/message" || e.type === "assistant/message" || e.type === "tool/result").length,
-                    modified: statSync(file).mtimeMs,
-                    source: "web",
-                });
-            }
-            catch {
-                /* skip unreadable */
+        try {
+            // 目录/会话文件被删除、改名或不可读都不许把异常抛出去：本方法以
+            // fire-and-forget（void …）方式调用，未处理的 rejection 会杀死服务进程
+            // （issue #74 同类）。失败降级为空列表，面板显示“暂无历史”。
+            const files = findSessionFilesForCwd(this.sessionRoot, this.cwd);
+            const summaries = [];
+            for (const file of files) {
+                try {
+                    const sessionId = basename(dirname(file));
+                    // 审查会话（review-*）是内部工作会话，不进历史列表。
+                    if (sessionId.startsWith("review-"))
+                        continue;
+                    const { events } = readSessionLog(file);
+                    summaries.push({
+                        path: file,
+                        name: sessionId,
+                        firstMessage: firstUserText(events),
+                        messageCount: events.filter((e) => e.type === "user/message" || e.type === "assistant/message" || e.type === "tool/result").length,
+                        modified: statSync(file).mtimeMs,
+                        source: "web",
+                    });
+                }
+                catch {
+                    /* skip unreadable */
+                }
             }
+            this.emit({ type: "sessions", sessions: summaries });
+        }
+        catch {
+            this.emit({ type: "sessions", sessions: [] });
         }
-        this.emit({ type: "sessions", sessions: summaries });
     }
     async renameSession(_path, _name) {
         this.emit({
@@ -2067,6 +2075,8 @@ export class DshClientSession {
             markers: [],
             subagentTemplates: [],
             subagentDefaultTemplates: [],
+            subagentDefaultModel: null,
+            subagentModels: [],
         };
         this.emit({ type: "settings_state", settings });
     }

package/dist/server/dsh/dsh-sessions.js

@@ -145,7 +145,17 @@ export function findSessionFiles(root) {
         }
     };
     walk(root);
-    return out.sort((a, b) => statSync(b).mtimeMs - statSync(a).mtimeMs);
+    return out.sort(sessionFileNewest);
+}
+/** 排序比较器：文件在扫描与排序之间被删除/改名时 statSync 会抛 ENOENT
+ *  （issue #74 同类：列表刷新不能因一次正常的删除把服务进程打死）。 */
+function sessionFileNewest(a, b) {
+    try {
+        return statSync(b).mtimeMs - statSync(a).mtimeMs;
+    }
+    catch {
+        return 0;
+    }
 }
 /** 一个工作区的会话文件：官方布局（root/--<cwd>--）+ 旧版 per-cwd 布局。 */
 export function findSessionFilesForCwd(sessionRoot, cwd) {
@@ -153,7 +163,7 @@ export function findSessionFilesForCwd(sessionRoot, cwd) {
     const out = [];
     for (const d of dirs)
         out.push(...findSessionFiles(d));
-    return out.sort((a, b) => statSync(b).mtimeMs - statSync(a).mtimeMs);
+    return out.sort(sessionFileNewest);
 }
 /** 第一个用户文本（会话标题素材）。 */
 export function firstUserText(events) {

package/dist/server/files-service.js

@@ -100,8 +100,10 @@ export function workspacePath(root, raw) {
  * Read a directory for the file panel. The two platforms intentionally use
  * different strategies — do NOT unify them:
  *
- * darwin/linux (posix): original behavior — hide build/dependency noise,
- * small cap, hard error notice when the directory itself is unreadable.
+ * darwin/linux (posix): hide build/dependency noise, small cap; a listing
+ * failure (deleted/renamed dir → ENOENT/ENOTDIR, permission → EACCES/EPERM)
+ * degrades to an empty listing plus a notice chosen by errorCode — the server
+ * must NEVER crash on a vanished directory (issue #74).
  *
  * win32: stability and completeness first, preview second. ACL-protected
  * system dirs (C:\$Recycle.Bin, Program Files internals, OneDrive placeholders)
@@ -121,11 +123,14 @@ async function readDirForUI(abs, rel) {
         dirents = await fs.readdir(abs, { withFileTypes: true });
     }
     catch (err) {
-        if (!IS_WIN32)
-            throw err;
-        // Windows ACL-protected/system dirs throw EPERM/EACCES on open —
-        // degrade to an empty listing; listFiles turns this into a warning.
-        return { entries: [], truncated: false, error: err.message };
+        // 任何 readdir 失败都降级为“空列表 + notice”，绝不向上抛：listFiles 以
+        // fire-and-forget（void …）调用，未处理的 rejection 会成为 unhandled
+        // rejection 直接杀掉整个服务进程（issue #74：目录被删除/改名后刷新即崩）。
+        // 缺失（ENOENT/ENOTDIR）、权限拒绝（EACCES/EPERM）、系统 ACL 目录全部归此，
+        // 文案由 listFiles 按 errorCode 分类：缺失 = 软提示“目录不存在”，
+        // 权限/其余 = posix 硬错误 notice / win32 软提示（ACL 系统目录是常态）。
+        const e = err;
+        return { entries: [], truncated: false, error: e.message, errorCode: e.code };
     }
     const out = [];
     for (const d of dirents) {
@@ -204,6 +209,35 @@ export class FilesService {
         }
         return [{ name: "/", path: "/", type: "dir" }];
     }
+    /** 目录列表失败的 notice：缺失路径（ENOENT/ENOTDIR）是删除/改名等正常场景，
+     *  软提示“目录不存在”；其余（权限拒绝等）保留原平台语义——win32 软提示
+     *  （ACL 系统目录常见），posix 硬错误（error 级 notice，取代曾经的 throw）。 */
+    emitListError(path, error, code) {
+        if (code === "ENOENT") {
+            this.host.emit({
+                type: "notice",
+                level: "warning",
+                text: `目录不存在：${path}`,
+                textEn: `Directory not found: ${path}`,
+            });
+            return;
+        }
+        if (code === "ENOTDIR") {
+            this.host.emit({
+                type: "notice",
+                level: "warning",
+                text: `不是目录：${path}`,
+                textEn: `Not a directory: ${path}`,
+            });
+            return;
+        }
+        this.host.emit({
+            type: "notice",
+            level: IS_WIN32 ? "warning" : "error",
+            text: `目录不可读：${error}`,
+            textEn: `Directory is not readable: ${error}`,
+        });
+    }
     async listFiles(relPath) {
         const { resolve, sep, relative } = await import("node:path");
         const root = resolve(this.host.getCwd());
@@ -226,7 +260,7 @@ export class FilesService {
         if (isAbsoluteWirePath(raw)) {
             const wire = normWirePath(raw);
             const abs = wireToAbs(wire);
-            const { entries, truncated, error } = await readDirForUI(abs, wire);
+            const { entries, truncated, error, errorCode } = await readDirForUI(abs, wire);
             this.host.emit({
                 type: "files",
                 path: wire,
@@ -235,14 +269,8 @@ export class FilesService {
                 truncated,
                 absolute: true,
             });
-            if (error) {
-                this.host.emit({
-                    type: "notice",
-                    level: "warning",
-                    text: `目录不可读：${error}`,
-                    textEn: `Directory is not readable: ${error}`,
-                });
-            }
+            if (error)
+                this.emitListError(wire, error, errorCode);
             return;
         }
         // ---- 工作区相对视图（原有行为） ----
@@ -260,19 +288,14 @@ export class FilesService {
         // Normalize to forward slashes: the wire protocol and the frontend
         // always use "/", but relative() returns "\\" on Windows.
         const rel = rawRel.split(sep).join("/");
-        const { entries, truncated, error } = await readDirForUI(target, rel);
-        // Watch the listed directory (only after a successful read — a missing
-        // dir throws above and must not create a watcher on a phantom path).
-        this.watchDir(target, rel);
+        const { entries, truncated, error, errorCode } = await readDirForUI(target, rel);
+        // Watch the listed directory only after a successful read — a missing
+        // dir must not create a watcher on a phantom path (issue #74).
         if (error) {
-            // Windows-only: unreadable system dirs degrade to an empty list
-            // with a warning instead of a hard error — the panel stays usable.
-            this.host.emit({
-                type: "notice",
-                level: "warning",
-                text: `目录不可读：${error}`,
-                textEn: `Directory is not readable: ${error}`,
-            });
+            this.emitListError(rel === "" ? root : rel, error, errorCode);
+        }
+        else {
+            this.watchDir(target, rel);
         }
         this.host.emit({
             type: "files",

package/dist/server/index.js

@@ -823,6 +823,7 @@ wss.on("connection", (ws) => {
                     visionBridgeModel: msg.visionBridgeModel,
                     visionBridgePromptMode: msg.visionBridgePromptMode,
                     visionBridgePrompt: msg.visionBridgePrompt,
+                    subagentDefaultModel: msg.subagentDefaultModel,
                     reviewPrompt: msg.reviewPrompt,
                     reviewDisabledSkills: msg.reviewDisabledSkills,
                     markersEnabled: msg.markersEnabled,

package/dist/server/process-utils.js

@@ -45,6 +45,47 @@ export async function snapshotListeningPorts() {
     }
     return m;
 }
+/**
+ * Snapshot every process's parent pid → Map<pid, ppid>. Windows: one
+ * PowerShell CIM pass (avoids spawning PowerShell once per pid); POSIX:
+ * one `ps -Ao pid=,ppid=` pass. Returns undefined when the whole query
+ * fails — callers should treat that as "cannot verify, stay conservative".
+ */
+export async function snapshotProcessParents() {
+    try {
+        const { execFile } = await import("node:child_process");
+        const m = new Map();
+        if (process.platform === "win32") {
+            const out = await new Promise((resolve, reject) => execFile("powershell.exe", [
+                "-NoProfile",
+                "-NonInteractive",
+                "-Command",
+                'Get-CimInstance Win32_Process | ForEach-Object { "$($_.ProcessId):$($_.ParentProcessId)" }',
+            ], { windowsHide: true, timeout: 10000 }, (err, stdout) => (err ? reject(err) : resolve(stdout))));
+            for (const line of out.split(/\r?\n/)) {
+                const [pid, ppid] = line.trim().split(":").map(Number);
+                if (Number.isFinite(pid) && Number.isFinite(ppid))
+                    m.set(pid, ppid);
+            }
+        }
+        else {
+            const out = await new Promise((resolve, reject) => execFile("ps", ["-Ao", "pid=,ppid="], { timeout: 5000 }, (err, stdout) => err ? reject(err) : resolve(stdout)));
+            for (const line of out.split(/\r?\n/)) {
+                const p = line.trim().split(/\s+/);
+                if (p.length >= 2) {
+                    const pid = Number(p[0]);
+                    const ppid = Number(p[1]);
+                    if (Number.isFinite(pid) && Number.isFinite(ppid))
+                        m.set(pid, ppid);
+                }
+            }
+        }
+        return m;
+    }
+    catch {
+        return undefined;
+    }
+}
 /** Kill a pid and its whole process tree (cross-platform). */
 export function killPidTree(pid) {
     try {

package/dist/server/protocol-version.js

@@ -8,4 +8,4 @@
  * its own copy in web/src/protocol-version.ts; scripts/check-protocol-sync.mjs
  * verifies the two never drift.
  */
-export const PROTOCOL_VERSION = 11;
+export const PROTOCOL_VERSION = 12;