termdock 1.4.317 → 1.4.319

package/dist/server/agent/collaborationTeam.js

@@ -3,14 +3,21 @@
 export async function ensureTeam(options) {
     const ids = [];
     const labels = [`自动协调者 (${options.agentSlug})`, `自动执行与评审 (${options.agentSlug})`];
-    for (const role of labels) {
+    if (typeof options.coordinatorSessionId === 'string') {
+        const coordinator = options.members().find(member => member.id === options.coordinatorSessionId && member.agentSlug);
+        if (!coordinator)
+            throw new Error('所选协调者已离组或未运行 Agent，请重新选择');
+        ids.push(coordinator.id);
+    }
+    for (const role of labels.slice(ids.length)) {
         const members = options.members();
-        const reserved = members.find(member => member.role?.startsWith(role.split(' (')[0]));
+        const forceNew = ids.length === 0 && options.coordinatorSessionId === null;
+        const reserved = members.find(member => !ids.includes(member.id) && (forceNew && options.coordinatorCreationKey ? member.creationKey === options.coordinatorCreationKey : member.role?.startsWith(role.split(' (')[0])));
         if (reserved && (reserved.role !== role || reserved.cwd !== options.cwd || (reserved.launchProfileKey ?? '') !== (options.launchProfileKey ?? ''))) {
             throw new Error('本组已有自动配置的成员，请使用原 Agent、启动方案和目录，或在成员设置中移出后重新配置');
         }
-        const existing = reserved ?? members.find(member => !ids.includes(member.id) && member.agentSlug === options.agentSlug && member.cwd === options.cwd && (member.launchProfileKey ?? '') === (options.launchProfileKey ?? ''));
-        ids.push(existing?.id ?? await options.spawn(role));
+        const existing = reserved ?? (!forceNew ? members.find(member => !ids.includes(member.id) && member.agentSlug === options.agentSlug && member.cwd === options.cwd && (member.launchProfileKey ?? '') === (options.launchProfileKey ?? '')) : undefined);
+        ids.push(existing?.id ?? await options.spawn(role, forceNew ? options.coordinatorCreationKey : undefined));
     }
     return { coordinatorSessionId: ids[0], reviewerSessionIds: [ids[1]] };
 }

package/dist/server/agent/integrationCli.js

@@ -8,9 +8,27 @@ import { COLLAB_HELP, executeCollaborationCommand, duration } from './collaborat
 import { getTermdockVersion } from '../utils/version.js';
 export const INTEGRATION_HELP = `td integration — local scoped integration administration
   groups | list
+  group get <exact-group-id>
+  group rename <exact-group-id> --name <name> --expected-updated-at <N> --idempotency-key <key>
+    Administrator only; minimum CLI/running service 1.4.319;
+    admin_local_group_rename=true covers get/rename and group revision reads.
+    get returns {group:{id,name,updatedAt}}; groups also returns updatedAt.
+    rename returns {group: current metadata, applied: original committed metadata,
+    replayed: boolean}. Only name/updatedAt change; no membership, principal,
+    terminal, launch, message, history or creation-snapshot changes.
+    Read the revision first. GROUP_CHANGED returns currentUpdatedAt; reread and
+    decide again with a new key. Retry uncertain results with the original key
+    and all original parameters; a later rename is never overwritten by replay.
+    Same normalized name is a recorded no-op. Keys are retained, capped at 2000.
+    No terminal source, principal grant, prefix/name lookup or federated group.
+    Errors: INVALID_GROUP_RENAME_REQUEST, INVALID_GROUP_ID, INVALID_GROUP,
+    INVALID_GROUP_VERSION, INVALID_IDEMPOTENCY_KEY, IDEMPOTENCY_CONFLICT,
+    GROUP_CHANGED, GROUP_NOT_FOUND, GROUP_NOT_LOCAL, GROUP_STATE_UNCONFIRMED,
+    GROUP_RENAME_TARGET_UNAVAILABLE, GROUP_RENAME_STATE_UNCONFIRMED,
+    GROUP_RENAME_LIMIT, ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED.
   group create --name <name> --idempotency-key <key>
     Administrator only; create an empty local group without a terminal source.
-    Minimum CLI/running service 1.4.317; admin_local_group_create=true.
+    Minimum CLI/running service 1.4.318; admin_local_group_create=true.
     Returns {group: original creation snapshot}; same key/parameters reuse it.
     Groups may later gain members; the snapshot is not their current membership.
     No IDs, members, federation, launch profiles or principal credentials accepted.
@@ -89,7 +107,7 @@ function request(socketPath, method, route, body, requestHeaders, timeout = 3000
 function parsed(response) {
     const result = JSON.parse(response.body);
     if (response.statusCode >= 300)
-        throw new CollaborationError(result.code ?? 'INTEGRATION_REQUEST_FAILED', result.error ?? 'Integration request failed', response.statusCode);
+        throw new CollaborationError(result.code ?? 'INTEGRATION_REQUEST_FAILED', result.error ?? 'Integration request failed', response.statusCode, result.code === 'GROUP_CHANGED' && Number.isSafeInteger(result.currentUpdatedAt) ? { currentUpdatedAt: result.currentUpdatedAt } : undefined);
     return result;
 }
 export async function runIntegrationAdmin(argv, port, adminToken, write) {
@@ -101,6 +119,31 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
             return 0;
         }
         const socketPath = integrationSocketPath(port);
+        if (action === 'group' && ['get', 'rename'].includes(argv[1])) {
+            const operation = argv[1], id = argv[2], args = {};
+            const usage = 'Usage: td integration group get <exact-id> | group rename <exact-id> --name <name> --expected-updated-at <N> --idempotency-key <key>';
+            if (!id || !/^[a-zA-Z0-9._-]{1,80}$/.test(id))
+                throw new CollaborationError('INVALID_GROUP_ID', usage, 400);
+            if (operation === 'get' && argv.length !== 3)
+                throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
+            if (operation === 'rename') {
+                for (let i = 3; i < argv.length; i += 2) {
+                    if (!['--name', '--expected-updated-at', '--idempotency-key'].includes(argv[i]) || !argv[i + 1] || Object.hasOwn(args, argv[i]))
+                        throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
+                    args[argv[i]] = argv[i + 1];
+                }
+                if (Object.keys(args).length !== 3 || !args['--name']?.trim() || !args['--idempotency-key']?.trim())
+                    throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
+                if (!/^(0|[1-9][0-9]*)$/.test(args['--expected-updated-at']) || !Number.isSafeInteger(Number(args['--expected-updated-at'])))
+                    throw new CollaborationError('INVALID_GROUP_VERSION', usage, 400);
+            }
+            const capabilities = parsed(await request(socketPath, 'GET', '/admin/capabilities', undefined, headers(undefined, adminToken)));
+            if (capabilities.admin_local_group_rename !== true)
+                throw new CollaborationError('ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED', 'CLI and running service must support administrator group metadata operations (minimum 1.4.319)', 409);
+            const body = operation === 'rename' ? { name: args['--name'], expected_updated_at: Number(args['--expected-updated-at']), idempotency_key: args['--idempotency-key'] } : undefined;
+            write(JSON.stringify(parsed(await request(socketPath, body ? 'POST' : 'GET', `/admin/groups/${encodeURIComponent(id)}${body ? '/rename' : ''}`, body, headers(undefined, adminToken)))));
+            return 0;
+        }
         if (action === 'group') {
             const args = {};
             const usage = 'Usage: td integration group create --name <name> --idempotency-key <key>';
@@ -115,7 +158,7 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
                 throw new CollaborationError('INVALID_GROUP_CREATE_REQUEST', usage, 400);
             const capabilities = parsed(await request(socketPath, 'GET', '/admin/capabilities', undefined, headers(undefined, adminToken)));
             if (capabilities.admin_local_group_create !== true)
-                throw new CollaborationError('ADMIN_LOCAL_GROUP_CREATE_UNSUPPORTED', 'CLI and running service must support empty local group creation (minimum 1.4.317)', 409);
+                throw new CollaborationError('ADMIN_LOCAL_GROUP_CREATE_UNSUPPORTED', 'CLI and running service must support empty local group creation (minimum 1.4.318)', 409);
             write(JSON.stringify(parsed(await request(socketPath, 'POST', '/admin/groups', { name: args['--name'], idempotency_key: args['--idempotency-key'] }, headers(undefined, adminToken)))));
             return 0;
         }
@@ -210,7 +253,9 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
     catch (error) {
         if (reserved)
             fs.unlinkSync(reserved);
-        write(JSON.stringify({ ok: false, code: error instanceof CollaborationError ? error.code : 'INTEGRATION_ADMIN_ERROR', error: error instanceof CollaborationError ? error.message : 'Integration administration failed; inspect arguments and private file paths' }));
+        write(JSON.stringify({ ok: false, code: error instanceof CollaborationError ? error.code : 'INTEGRATION_ADMIN_ERROR',
+            ...(error instanceof CollaborationError && error.code === 'GROUP_CHANGED' ? error.details : {}),
+            error: error instanceof CollaborationError ? error.message : 'Integration administration failed; inspect arguments and private file paths' }));
         return 1;
     }
 }

package/dist/server/agent/integrationServer.js

@@ -68,7 +68,16 @@ export class IntegrationRuntime {
             if (!expected.length || given.length !== expected.length || !timingSafeEqual(given, expected))
                 integrationError('INTEGRATION_ADMIN_REQUIRED', 'Local administration credential is required', 401);
         };
-        app.get('/admin/groups', run(req => { admin(req); return { groups: options.messages.list().filter(g => !g.federated).map(g => ({ id: g.id, name: g.name })) }; }));
+        app.get('/admin/groups', run(req => { admin(req); return { groups: options.messages.list().filter(g => !g.federated).map(g => ({ id: g.id, name: g.name, updatedAt: g.updatedAt })) }; }));
+        app.get('/admin/groups/:id', run(req => { admin(req); return { group: options.messages.getLocalGroupMetadata(req.params.id) }; }));
+        app.post('/admin/groups/:id/rename', run(req => {
+            admin(req);
+            const body = req.body;
+            if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(key => !['name', 'expected_updated_at', 'idempotency_key'].includes(key))) {
+                integrationError('INVALID_GROUP_RENAME_REQUEST', 'Specify only name, expected_updated_at and idempotency_key');
+            }
+            return options.messages.renameLocalGroup(req.params.id, body.name, body.expected_updated_at, body.idempotency_key);
+        }));
         app.post('/admin/groups', run(req => {
             admin(req);
             const body = req.body;
@@ -241,7 +250,8 @@ export class IntegrationRuntime {
             session_cold_retry: true, session_cold_retry_min_version: '1.4.314',
             session_rename: true, session_rename_min_version: '1.4.315',
             session_close: true, session_close_min_version: '1.4.315',
-            admin_local_group_create: true, admin_local_group_create_min_version: '1.4.317',
+            admin_local_group_create: true, admin_local_group_create_min_version: '1.4.318',
+            admin_local_group_rename: true, admin_local_group_rename_min_version: '1.4.319',
             integration_policy_update: true,
             session_restore_diagnostics: true,
             native_identity_linux_flock_owner: process.platform === 'linux',
@@ -251,6 +261,8 @@ export class IntegrationRuntime {
     }
     error(error) {
         return { type: 'error', ok: false, code: error instanceof CollaborationError ? error.code : 'INTEGRATION_INTERNAL_ERROR',
+            ...(error instanceof CollaborationError && error.code === 'GROUP_CHANGED' && Number.isSafeInteger(error.details?.currentUpdatedAt)
+                ? { currentUpdatedAt: error.details.currentUpdatedAt } : {}),
             error: error instanceof CollaborationError ? error.message : 'Integration operation failed', retryable: !(error instanceof CollaborationError) || error.httpStatus >= 500 };
     }
     group(id) {

package/dist/server/routes/terminal.js

@@ -1872,7 +1872,7 @@ async function refreshCollaborationAgentIdentity(backendSessionId, session, fres
 function deliverCollaborationInboxWhenAgentReady(frontendSessionId) {
     collaborationDeliveryWorker.wake(frontendSessionId);
 }
-async function spawnCollaborationAgentSession(req, group, sourceSessionId, input, bootstrapRole) {
+async function spawnCollaborationAgentSession(req, group, sourceSessionId, input, bootstrapRole, creationKey) {
     const { agentSlug, profile } = resolveCollaborationLaunch(group, input);
     const launchers = await listDetectedAgentLaunchers();
     const launcher = launchers.find((candidate) => candidate.slug === agentSlug);
@@ -1924,7 +1924,7 @@ async function spawnCollaborationAgentSession(req, group, sourceSessionId, input
         sessionIds: [...latestGroup.sessionIds, frontendSessionId],
     });
     if (bootstrapRole)
-        collaborationStore.setRole({ groupId: group.id, sessionId: frontendSessionId, role: bootstrapRole });
+        collaborationStore.setRole({ groupId: group.id, sessionId: frontendSessionId, role: bootstrapRole, creationKey });
     if (profile)
         collaborationStore.setMemberLaunchProfile(group.id, frontendSessionId, profile);
     await writeAutomaticTerminalPrompt(frontendSessionId, buildCollaborationSpawnCommand({ slug: launcher.slug, command: profile?.command ?? launcher.command }));
@@ -6409,6 +6409,12 @@ router.post('/operations/collaboration-groups/:groupId/team', async (req, res) =
             return res.status(404).json({ error: '协作组不存在' });
         if (group.federated)
             throw new Error('跨服务组请先从成员设置添加 Agent');
+        const coordinatorSessionId = req.body?.coordinatorSessionId;
+        if (coordinatorSessionId !== undefined && coordinatorSessionId !== null && (typeof coordinatorSessionId !== 'string' || !coordinatorSessionId))
+            throw new Error('请选择有效的协调者');
+        const coordinatorCreationKey = req.body?.coordinatorCreationKey;
+        if (coordinatorCreationKey !== undefined && (typeof coordinatorCreationKey !== 'string' || !/^[a-zA-Z0-9_-]{1,100}$/.test(coordinatorCreationKey)))
+            throw new Error('协调者创建请求无效');
         const { agentSlug, profile } = resolveCollaborationLaunch(group, req.body ?? {});
         if (!(await listDetectedAgentLaunchers()).some(agent => agent.slug === agentSlug))
             throw new Error('所选 Agent 当前不可用');
@@ -6416,7 +6422,7 @@ router.post('/operations/collaboration-groups/:groupId/team', async (req, res) =
             throw new Error('请选择工作目录');
         const cwd = await resolveWorkingDirectory(req, req.body.cwd);
         const previous = preparingTeams.get(group.id) ?? Promise.resolve();
-        const operation = previous.catch(() => { }).then(() => ensureTeam({ agentSlug, cwd, launchProfileKey: launchProfileKey(profile),
+        const operation = previous.catch(() => { }).then(() => ensureTeam({ agentSlug, cwd, launchProfileKey: launchProfileKey(profile), coordinatorSessionId, coordinatorCreationKey,
             members: () => {
                 const current = collaborationStore.getGroup(group.id);
                 if (!current || current.deleted)
@@ -6424,13 +6430,13 @@ router.post('/operations/collaboration-groups/:groupId/team', async (req, res) =
                 if (profile && launchProfileKey(current.launchProfiles?.find(p => p.id === profile.id)) !== launchProfileKey(profile))
                     throw new Error('启动方案已变更，请重新开始协作');
                 return globalSessionState.sessions.filter(record => current.sessionIds.includes(record.sessionId))
-                    .map(record => ({ id: record.sessionId, cwd: record.cwd, role: current.roles?.[record.sessionId], agentSlug: orchestrationSessionSnapshot(record).agent?.slug, launchProfileKey: launchProfileKey(current.memberLaunchProfiles?.[record.sessionId]) }));
+                    .map(record => ({ id: record.sessionId, cwd: record.cwd, role: current.roles?.[record.sessionId], agentSlug: orchestrationSessionSnapshot(record).agent?.slug, launchProfileKey: launchProfileKey(current.memberLaunchProfiles?.[record.sessionId]), creationKey: current.memberCreationKeys?.[record.sessionId] }));
             },
-            spawn: async (role) => {
+            spawn: async (role, creationKey) => {
                 const current = collaborationStore.getGroup(group.id);
                 if (!current || current.deleted)
                     throw new Error('协作组已删除');
-                const result = await spawnCollaborationAgentSession(req, current, null, { agentSlug, launchProfileId: profile?.id ?? '', cwd, mode: 'tmux', name: role.startsWith('自动协调者') ? `协调 ${group.name}` : `执行与评审 ${group.name}` }, role);
+                const result = await spawnCollaborationAgentSession(req, current, null, { agentSlug, launchProfileId: profile?.id ?? '', cwd, mode: 'tmux', name: role.startsWith('自动协调者') ? `协调 ${group.name}` : `执行与评审 ${group.name}` }, role, creationKey);
                 return result.session.sessionId;
             },
         }));

package/docs/integrations.md

@@ -1027,10 +1027,10 @@ TD 生命周期锁不排他控制外部 tmux 命令/手工进程替换，最终
 共享升级/业务适配由接入方后续验收；维护侧验证仅覆盖隔离测试的真实 tmux/Linux
 进程退出与源码回归。macOS 真实 close 路径尚未实机验收。
 
-## 1.4.317：管理员幂等创建空本机组
+## 1.4.317 / 1.4.318：管理员幂等创建空本机组
 
-最低 **CLI / 实际服务均为 1.4.317**，协议仍为 1。管理员回读
-`admin_local_group_create=true`、`admin_local_group_create_min_version=1.4.317`；
+最低 **CLI / 实际服务均为 1.4.318**，协议仍为 1。管理员回读
+`admin_local_group_create=true`、`admin_local_group_create_min_version=1.4.318`；
 旧服务缺少能力时 CLI 返回 `ADMIN_LOCAL_GROUP_CREATE_UNSUPPORTED`，不回退到终端
 成员来源、网页裸 HTTP 或私有文件写入。
 
@@ -1060,13 +1060,15 @@ API 名称非法返回 `INVALID_GROUP`，key 非法返回 `INVALID_IDEMPOTENCY_K
 授权、业务调度或三模型创建。**组创建与后续 principal 授权是两步操作，不是一个事务**。
 后者继续遵循已有凭据落盘、唯一 principal ID、固定授权组和拒绝静默替换规则。
 
+key在同一服务的管理员入口范围内共享，宿主应使用稳定的业务前缀避免互相碰撞。
 同服务存储中，同 key 同参数（名称规范化后）返回原创建快照，包括原 ID、空成员和
 原时间；同 key 异参返回 `IDEMPOTENCY_CONFLICT`。之后给原组加入成员或改名，不会改变
 创建快照，不能把重试响应的空 `sessionIds` 当作当前成员清单；当前名称可用 groups
 回读，成员清单沿现有组管理读接口。HTTP 回执丢失或持久写入结果不明时，保留原 key
 和名称重试对账，不要换新 key “再建一个”。
 
-文件替换前失败不会提交半个组；替换后 fsync/回执异常可能已经创建，应同键对账。
+1.4.318 补齐异常重试：同键回读前再次 durable 提交当前组和原创建记录；目录
+fsync 持续失败仍返回失败，不以缓存记录冒充成功。文件替换前失败不会提交半个组；替换后 fsync/回执异常可能已经创建，应同键对账。
 服务重启保留 key→原快照映射。原组被明确删除、变成跨服务目标或原 ID 已不存在时，
 同键返回 `GROUP_CREATE_TARGET_UNAVAILABLE`，不新建替代组；全局清理也保留该 key 的
 保留记录。创建 journal 损坏、无法可靠读取或其完整性未确认返回
@@ -1093,3 +1095,77 @@ consumer、task 或看板任务；Case/组/principal/session/message 映射由
 即使普通 send 早于实际订阅建立，保留期内的事实也可重放；宿主按 event_id 持久
 去重/连续 ACK，并按原 message ID/reply_to 用历史对账明确回复。heartbeat 仅是连接
 观测，不表示宿主 inbox 已落盘或业务已完成。
+
+## 1.4.319：管理员查询与改名本机组
+
+最低 **CLI / 实际服务均为 1.4.319**，协议仍为 1。回读
+`admin_local_group_rename=true`、`admin_local_group_rename_min_version=1.4.319`；
+该能力同时覆盖精确查询、改名及管理员列表的 `updatedAt` 回读。旧服务缺少能力时
+CLI 返回 `ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED`，不回退到成员身份、网页接口或私有文件。
+
+```sh
+td integration group get <精确group-id>
+# {"group":{"id":"...","name":"原名称","updatedAt":1790000000000}}
+td integration group rename <精确group-id> --name '短标题' \
+  --expected-updated-at 1790000000000 --idempotency-key stable-group-rename-key
+td integration groups   # 列表保留id/name，追加updatedAt
+```
+
+沿用本机 Unix socket 管理员鉴权，无终端来源、无新 principal 权限。管理路由：
+`GET /admin/groups/:id`；`POST /admin/groups/:id/rename`，只接受
+`{name,expected_updated_at,idempotency_key}`。不接受成员、角色、principal、指定新ID、
+federated 或启动配置。组 ID 必须精确匹配，不解析前缀/名称；仅存活本机组可用。
+GET 返回最小显示元数据 `{id,name,updatedAt}`，不导出启动配置、成员创建请求或凭据。
+
+名称与空组创建复用校验：首尾 trim、非空、最多 256 字符，禁止
+`【】「」`、`·`、C0 控制字符及 DEL。key 非空、最多 256 字符，按原字符串区分并只存
+哈希。改名 key 在同一管理员服务的 **rename 操作范围**共享，与 create key 独立；
+建议使用稳定业务前缀。`expected_updated_at` 必须是非负安全整数。
+
+复用现有组 `updatedAt` 作为并发版本。实际改名严格递增，只有名称相同时是持久记录的
+no-op，不推进版本。网页或成员/配置变更也可能推进组版本；新请求不匹配当前值返回
+`GROUP_CHANGED`（409）及 `currentUpdatedAt`，没有改动或成功回执。宿主重新 get、确认
+当前内容后，再用新版本和新 key 作新的决定；不要静默覆盖刚发生的改动。
+
+返回两个独立快照，均只有 `{id,name,updatedAt}`：
+
+```json
+{
+  "group": {"id":"...","name":"当前名称","updatedAt":1790000000002},
+  "applied": {"id":"...","name":"原操作改成的名称","updatedAt":1790000000001},
+  "replayed": true
+}
+```
+
+首次成功 `replayed=false`，`group` 与 `applied` 相同；同 key、同精确组ID、同规范化名称、
+同原期望版本重试，`replayed=true`，返回原 `applied` 和 **当前** `group`。以后另有网页或
+管理员改名，旧键回读不重新执行，不撤销后来的名称/版本。原参数任意改变返回
+`IDEMPOTENCY_CONFLICT`（409）。原 create 的空组创建快照不变，也不因此创建新组。
+回执丢失或 fsync 失败时保留原全部参数/key 重试，不换 key 掩盖不确定结果。
+
+名称/版本与幂等回执在同一个协作存储中 durable 原子提交，包含文件及父目录 fsync。
+替换前失败回滚；替换后 fsync 失败可能已改名，但不能宣称成功。同键重试再次 durable
+提交当前存储以确认结果，持续失败仍返回错误；不会第二次推进版本。重启保留原回执。
+rename journal 完整性不明返回 `GROUP_RENAME_STATE_UNCONFIRMED`，普通写入/全局清理不
+解除该阻断。最多保留 2,000 条 rename 回执（删除目标的 key 也保留）；达到上限新 key
+返回 `GROUP_RENAME_LIMIT`，已有 key 可回读。没有 TTL/forget；调用者管理保留预算。
+保证范围仍是同持久存储唯一服务写入，不提供多进程共享文件事务，也不保证旧写入器
+降级后能保留新 journal。
+
+新请求目标不存在/删除返回 `GROUP_NOT_FOUND`（404），跨服务组 `GROUP_NOT_LOCAL`
+（409）；已有成功 key 的目标删除/变跨服务后重试 `GROUP_RENAME_TARGET_UNAVAILABLE`
+（409），不复活或新建替代。非法精确 ID `INVALID_GROUP_ID`，非法名称 `INVALID_GROUP`，
+非法版本 `INVALID_GROUP_VERSION`，非法 key `INVALID_IDEMPOTENCY_KEY`，多余/错误请求参数
+`INVALID_GROUP_RENAME_REQUEST`（以上 400）。当前组版本无法可靠读取/递增时
+`GROUP_STATE_UNCONFIRMED`（409）。存储 IO 失败为 `INTEGRATION_INTERNAL_ERROR`（500），
+不是成功回执；沿原键对账。
+
+只修改 `name/updatedAt`；保留组 ID、成员/角色/配置、principal 归属及凭据、
+TD/native session ID、消息/reply、事件/consumer 历史。没有 Agent 启动/恢复/终端写入、
+迁组或业务 Case/裁判逻辑。网页组列表与管理员入口读同一个 store，名称通过现有侧栏
+刷新（定时约 10 秒及焦点刷新）显示，不承诺瞬时推送，也不把名称更新当 Agent 状态。
+
+验收包含真实临时文件原子替换、file/dir fsync 失败和同键恢复、重启、旧快照回读、
+并发不同键竞争/同键重放、删除/跨服务、管理员 Unix 路由/CLI 权限及 JSON、网页列表
+回读和旧网页表单版本冲突。DevBox 业务组及真实 macOS/iOS 显示尚待接入方实机验收，
+不以源码/模拟回归代替其运行现场。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termdock",
-  "version": "1.4.317",
+  "version": "1.4.319",
   "description": "A complete web-based terminal application with modern UI",
   "type": "module",
   "main": ".desktop-dist/main.js",

package/runtime-manifest.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 1,
   "packageName": "termdock",
-  "version": "1.4.317",
+  "version": "1.4.319",
   "runtimeProtocolVersion": 1,
   "minimumDesktopVersion": "1.4.46",
   "nodeMajor": 22,
   "dependencyHash": "sha256-oaGYi/P5ob8sd6VnNBOwshKozjhdV+hYiCmLAsn5x00=",
-  "serverBundleHash": "sha256-1pRiIEg4Lpi8gtQSmaiVWgjK0PZrrA+QobxZC5+PEWc=",
-  "clientBundleHash": "sha256-iwZyAmz8pDZptAaDUwHHnAqZlIvu6R9xpWhvQhPz3xY=",
+  "serverBundleHash": "sha256-aIgdB+VZkOBFzs7DT4Slt/9Rm5pdM1mMkJXe3/FZxPM=",
+  "clientBundleHash": "sha256-WCUoxmf/ziVtU3GXXqX1A7M84gFLPv/RWWFcBBVtcfQ=",
   "entrypoint": "dist/server/cli.js",
   "clientEntrypoint": "dist/client/index.html"
 }