termdock 1.4.245 → 1.4.246

package/dist/client/index.html

@@ -188,7 +188,7 @@
          里为空，不声明，避免无谓的字体回退查找。
          Regular + Bold 两种变体自托管，替代 xterm 合成 bold CJK。 */
     </style>
-    <script type="module" crossorigin src="/assets/app-DiN3Jz4F.js"></script>
+    <script type="module" crossorigin src="/assets/app-6wjgoQbH.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/react-XDCjal2T.js">
     <link rel="modulepreload" crossorigin href="/assets/dnd-BCFAPC0L.js">
     <link rel="modulepreload" crossorigin href="/assets/terminal-C7X98Amf.js">

package/dist/client/sw.js

@@ -1 +1 @@
-if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,o)=>{const a=e||("document"in self?document.currentScript.src:"")||location.href;if(s[a])return;let c={};const r=e=>n(e,a),d={module:{uri:a},exports:c,require:r};s[a]=Promise.all(i.map(e=>d[e]||r(e))).then(e=>(o(...e),c))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"4201c2eac3125164637917ca18f6bcae"},{url:"assets/app-DiN3Jz4F.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-fjWWhVQp.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});
+if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,o)=>{const a=e||("document"in self?document.currentScript.src:"")||location.href;if(s[a])return;let c={};const r=e=>n(e,a),d={module:{uri:a},exports:c,require:r};s[a]=Promise.all(i.map(e=>d[e]||r(e))).then(e=>(o(...e),c))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"1872046314af9b90dace81d014e594da"},{url:"assets/app-6wjgoQbH.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-fjWWhVQp.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});

package/dist/server/agent/collaborationCli.js

@@ -107,7 +107,12 @@ cleanup without --confirm prints the plan and refuses (also 1);
 Message limit: ${COLLAB_LIMITS.message_bytes} UTF-8 bytes; metadata: ${COLLAB_LIMITS.metadata_bytes} bytes.
 Idempotency retention: 7 days. Terminal delivery, ACK and result never imply each other.
 Delivery semantics: delivered = written to the terminal — never proof of
-reading or task completion; a timeout stops waiting, it does not cancel delivery.`;
+reading or task completion; a timeout stops waiting, it does not cancel delivery.
+The service cannot see whether the recipient's agent consumed a message. To
+judge for yourself, use --wait-until delivered and read the recipient-screen
+snapshot in the receipt: if your message is not visible on that screen, send it
+again (a fresh send is a new message and will be written again); if it is
+visible but unanswered, the recipient may simply not have started yet.`;
 /** One roster row: prefer the member's human name, keep the full session id
  * reachable for role set/unset targeting, mark unset members explicitly. */
 function roleLine(member, role) {
@@ -308,6 +313,25 @@ export function waitSatisfied(receipt, stage, reply) {
     const reached = stage === 'queued' || (stage === 'delivered' && ['delivered', 'read'].includes(receipt.status));
     return reached && (!reply || (reply === 'ack' ? receipt.ack_at != null : reply === 'result' ? receipt.result_ids?.length > 0 : receipt.reply_ids?.length > 0));
 }
+/** Delivery diagnoses a sender can act on. `delivered` means the bytes reached
+ *  the recipient's pty — never that anything consumed them; these map the
+ *  machine reasons onto what the sender should do next, so a settled-but-
+ *  unconsumed message is not mistaken for a lost one (or a good one). */
+const DELIVERY_DIAGNOSTICS = {
+    AGENT_CONSUME_UNCONFIRMED: '消息已写入对方终端，但未确认被对方消费；它可能尚未开始处理，可用 capture 查看当前屏幕或重发',
+    SHELL_CONFIRMATION_REQUIRED: '目标当前是 shell，消息可能被当命令执行；确认请运行 message confirm-shell <id>',
+    DELIVERY_IN_PROGRESS: '投递进行中（写入前的中间标记，正常会在数秒内推进为 delivered 或带原因的重试）',
+    TERMINAL_WRITE_FAILED: '写入对方终端失败，会按重试间隔继续尝试',
+    TMUX_PANE_CHANGED: '目标面板已变化，投递已跳过，等待重新绑定',
+    TMUX_PANE_IN_MODE: '目标面板处于 tmux 模式（如滚动查看），按键已跳过',
+};
+export function deliveryDiagnosticText(lastError) {
+    if (typeof lastError !== 'string' || !lastError)
+        return '';
+    const code = lastError.split(':', 1)[0].trim();
+    const known = DELIVERY_DIAGNOSTICS[code];
+    return known ? `${code}：${known}` : lastError;
+}
 export async function executeCollaborationCommand(command, context, io) {
     const o = command.options;
     const now = io.now ?? Date.now;
@@ -329,6 +353,7 @@ export async function executeCollaborationCommand(command, context, io) {
     };
     const output = (value) => {
         if (o.text) {
+            let diagnosed = false;
             if (Array.isArray(value.messages))
                 for (const message of value.messages) {
                     const fanIds = Array.isArray(message.fanOutIds) ? message.fanOutIds : [];
@@ -346,6 +371,14 @@ export async function executeCollaborationCommand(command, context, io) {
                 if (!o['no-rules'] && value.message.instructions?.text)
                     io.write(`消息附群规版本 ${value.message.instructions.version}；td collab rules get <组id> --text 查看全文`);
                 io.write(`[${value.status}] ${canonicalShortId(String(value.message_id ?? ''))}\n${value.message.content}`);
+                // A pending message keeps retrying by design (the alternative is
+                // dropping it); surface why and when the next attempt is so the sender
+                // can decide to wait or resend instead of guessing.
+                if (value.status === 'pending' && (value.attempt_count || value.last_error)) {
+                    const retryIn = value.next_retry_at ? Math.max(0, Math.ceil((Number(value.next_retry_at) - now()) / 1000)) : null;
+                    io.write(`投递中：第 ${value.attempt_count ?? 0} 次尝试${retryIn !== null ? `，下次重试约 ${retryIn} 秒后` : ''}${value.last_error ? `，最近原因 ${deliveryDiagnosticText(value.last_error)}` : ''}`);
+                    diagnosed = true;
+                }
             }
             else if (value.message_id) {
                 io.write(`${value.status} ${canonicalShortId(String(value.message_id))}${value.thread_id ? ` thread=${canonicalShortId(String(value.thread_id))}` : ''}${value.code ? ` ${value.code}` : ''}${value.failure_reason ? ` ${value.failure_reason}` : ''}`);
@@ -363,8 +396,8 @@ export async function executeCollaborationCommand(command, context, io) {
             }
             else
                 io.write(JSON.stringify(value, null, 2));
-            if (value.last_error)
-                io.write(String(value.last_error));
+            if (value.last_error && !diagnosed)
+                io.write(`诊断：${deliveryDiagnosticText(value.last_error)}`);
             if (value.next_cursor)
                 io.write(`next_cursor=${value.next_cursor} has_more=${value.has_more}`);
         }

package/dist/server/agent/collaborationDeliveryWorker.js

@@ -176,7 +176,12 @@ export class CollaborationDeliveryWorker {
             // Capture the recipient terminal before marking delivered, so a sender
             // waiting on delivered always finds the snapshot present. The capture is
             // strictly best-effort: a failure must never block delivery completion.
+            // Delayed briefly so the pane shows the rendered paste rather than the
+            // input box mid-write.
             if (route.capture) {
+                const snapshotDelay = this.options.snapshotDelayMs ?? 200;
+                if (snapshotDelay > 0)
+                    await new Promise((resolve) => setTimeout(resolve, snapshotDelay));
                 try {
                     const snapshot = await route.capture();
                     if (snapshot)

package/dist/server/entry.js

@@ -29,7 +29,7 @@ import { homedir } from 'os';
 import cookieParser from 'cookie-parser';
 import { fileURLToPath } from 'url';
 import { WebSocketServer } from 'ws';
-import terminalRoutes, { handleTerminalWebSocket, handleControlWebSocket } from './routes/terminal.js';
+import terminalRoutes, { handleTerminalWebSocket, handleControlWebSocket, resolveStableFederationSessionId } from './routes/terminal.js';
 import filesystemRoutes from './routes/filesystem.js';
 import authRoutes from './routes/auth.js';
 import notificationRoutes from './routes/notifications.js';
@@ -452,6 +452,7 @@ export function startServer(options = {}) {
     const federation = createFederationRuntime(app, path.join(homedir(), '.termdock', 'federation'), {
         terminal: handleTerminalWebSocket, control: handleControlWebSocket,
     }, {
+        resolveSessionId: resolveStableFederationSessionId,
         collaborationConnected: (subjectId, rpc) => {
             const channels = collaborationChannels.get(subjectId) ?? new Set();
             channels.add(rpc);

package/dist/server/federation/runtime.js

@@ -126,7 +126,25 @@ export async function createFederationRuntime(app, directory, handlers, options
         let collaborationRpc;
         let unregisterCollaboration;
         const open = (action) => openAccessAllowed(context.allowOpenAccess === true, isAuthEnabled(), action);
-        const allowed = (subjectId, action, sessionId) => open(action) || store.authorize({ subjectId, serviceId, action, sessionId }).allowed;
+        const stableSessionId = (id) => {
+            try {
+                const resolved = options.resolveSessionId?.(id);
+                return typeof resolved === 'string' && resolved && resolved !== id ? resolved : undefined;
+            }
+            catch {
+                return undefined;
+            }
+        };
+        const allowed = (subjectId, action, sessionId) => {
+            if (open(action) || store.authorize({ subjectId, serviceId, action, sessionId }).allowed)
+                return true;
+            // The wire may still carry the transient backend PTY id while the grant
+            // is bound to the stable client session id (or an older backend id).
+            if (sessionId === undefined)
+                return false;
+            const stable = stableSessionId(sessionId);
+            return stable !== undefined && store.authorize({ subjectId, serviceId, action, sessionId: stable }).allowed;
+        };
         const full = (subjectId) => open() || store.hasFullServiceAccess({ subjectId, serviceId });
         let channel;
         const operations = new Map();
@@ -411,9 +429,24 @@ export async function createFederationRuntime(app, directory, handlers, options
                             ...(packet.expiresAt === undefined ? {} : { expiresAt: packet.expiresAt }) };
                         validateInvitation(invitation);
                         if (invitation.scope.kind === 'sessions') {
-                            const known = new Set((await sessionInventory()).filter(session => session.live === true).map(session => session.backendSessionId));
-                            if (!invitation.scope.sessionIds.every(id => known.has(id)))
+                            // Bind to the stable client session id, never the transient backend
+                            // PTY id: backends are replaced on restart, tmux recovery or
+                            // re-attach, which would otherwise invalidate the whole grant.
+                            const stable = new Map();
+                            for (const session of await sessionInventory()) {
+                                if (session.live !== true)
+                                    continue;
+                                const frontendSessionId = typeof session.sessionId === 'string' ? session.sessionId : '';
+                                if (!frontendSessionId)
+                                    continue;
+                                stable.set(frontendSessionId, frontendSessionId);
+                                if (typeof session.backendSessionId === 'string' && session.backendSessionId)
+                                    stable.set(session.backendSessionId, frontendSessionId);
+                            }
+                            const sessionIds = invitation.scope.sessionIds.map(id => stable.get(id)).filter((id) => typeof id === 'string');
+                            if (sessionIds.length !== invitation.scope.sessionIds.length || new Set(sessionIds).size !== sessionIds.length)
                                 throw new Error('UNKNOWN_SESSION');
+                            invitation.scope = { kind: 'sessions', sessionIds };
                         }
                         check('authorization.manage');
                         send({ type: 'result', id: packet.id, serviceId, ...invitations.create(subjectId, invitation) });

package/dist/server/routes/terminal.js

@@ -1436,6 +1436,19 @@ async function runAgentAutomation(automation, req) {
 function resolveFrontendSessionId(input) {
     return resolveCollaborationSessionId(input, globalSessionState.sessions, collaborationRouting);
 }
+/** Stable-id resolver for encrypted client authorization: accepts either the
+ * stable client session id or a transient backend PTY id and returns the stable
+ * one, so session-scoped grants survive backend replacement. */
+export function resolveStableFederationSessionId(id) {
+    if (!id)
+        return null;
+    try {
+        return resolveFrontendSessionId({ sessionId: id, backendSessionId: id });
+    }
+    catch {
+        return null;
+    }
+}
 function collaborationRemoteSessions() {
     return Array.from(new Map(collaborationStore.list().flatMap((group) => group.remoteSessions ?? [])
         .map((session) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termdock",
-  "version": "1.4.245",
+  "version": "1.4.246",
   "description": "A complete web-based terminal application with modern UI",
   "type": "module",
   "main": ".desktop-dist/main.js",

package/runtime-manifest.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 1,
   "packageName": "termdock",
-  "version": "1.4.245",
+  "version": "1.4.246",
   "runtimeProtocolVersion": 1,
   "minimumDesktopVersion": "1.4.46",
   "nodeMajor": 22,
   "dependencyHash": "sha256-K4KyYJuVoQDpZsBM8ZX1Rw3MddOxAzVdp/cPm0iGZz0=",
-  "serverBundleHash": "sha256-5EHTPHBzYbhXiki7HYAUodtWvNgxb7mxs+XD1yM1sXo=",
-  "clientBundleHash": "sha256-+bCKIDDFWs3O4xXhcKsruZaYoCDM0PJDAJI6F7I5A3I=",
+  "serverBundleHash": "sha256-a+JBWli3x+B9vkurW+AxoXHOWxm6vpx6BdHKNzqnXaI=",
+  "clientBundleHash": "sha256-eolMa/ut/D5OGEvG0VBd1FYrdYefGWrXLXExCAYRNfo=",
   "entrypoint": "dist/server/cli.js",
   "clientEntrypoint": "dist/client/index.html"
 }

package/dist/client/assets/channel-DXQeuo6Q.js

@@ -1 +0,0 @@
-import{c as a,C as n}from"./mermaid.core-filx9uhD.js";const t=(r,o)=>a.lang.round(n.parse(r)[o]);export{t as c};

package/dist/client/assets/classDiagram-ZZMXUADV-u-fQC4d0.js

@@ -1 +0,0 @@
-import{s as a,a as s,c as t,C as e}from"./chunk-TICWLB2K-8e9Sd9jU.js";import{d as i}from"./mermaid.core-filx9uhD.js";import"./chunk-5VM5RSS4-DdwZ_Ooa.js";import"./chunk-XXDRQBXY-DECwND6H.js";import"./chunk-POPQ4Y6H-C7p1ptYd.js";import"./chunk-F27PBJKO-CyDTfLmz.js";import"./purify.es-4eNOHKSq.js";import"./app-DiN3Jz4F.js";import"./react-XDCjal2T.js";import"./dnd-BCFAPC0L.js";import"./terminal-C7X98Amf.js";var g={parser:t,get db(){return new e},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{g as diagram};

package/dist/client/assets/classDiagram-v2-VYDZK3BY-u-fQC4d0.js

@@ -1 +0,0 @@
-import{s as a,a as s,c as t,C as e}from"./chunk-TICWLB2K-8e9Sd9jU.js";import{d as i}from"./mermaid.core-filx9uhD.js";import"./chunk-5VM5RSS4-DdwZ_Ooa.js";import"./chunk-XXDRQBXY-DECwND6H.js";import"./chunk-POPQ4Y6H-C7p1ptYd.js";import"./chunk-F27PBJKO-CyDTfLmz.js";import"./purify.es-4eNOHKSq.js";import"./app-DiN3Jz4F.js";import"./react-XDCjal2T.js";import"./dnd-BCFAPC0L.js";import"./terminal-C7X98Amf.js";var g={parser:t,get db(){return new e},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{g as diagram};