termdock 1.4.322 → 1.4.325

package/dist/client/sw.js

@@ -1 +1 @@
-if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let r={};const c=e=>n(e,o),d={module:{uri:o},exports:r,require:c};s[o]=Promise.all(i.map(e=>d[e]||c(e))).then(e=>(a(...e),r))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"033016787a43249e62a30135b9e6aa98"},{url:"assets/app-CfqF7_nh.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-B4bEMUyn.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});
+if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let c={};const r=e=>n(e,o),d={module:{uri:o},exports:c,require:r};s[o]=Promise.all(i.map(e=>d[e]||r(e))).then(e=>(a(...e),c))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"140615ef2cf415473ada0b3ab2bce1ae"},{url:"assets/app-VCmiASzh.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-C7X98Amf.js",revision:null},{url:"assets/index-Ctz-IDjR.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});

package/dist/server/agent/collaborationGroupRoutes.js

@@ -9,6 +9,21 @@ export function collaborationGroupRoutes(options) {
         res.json({ federationVersion: 1, capabilities: { groupRevision: 1, groupPromotion: 1, groupMove: 1, serverCollaboration: options.save ? 1 : undefined },
             groups: options.store.list(), sessions: options.sessions() });
     });
+    for (const [verb, archived] of [['archive', true], ['unarchive', false]]) {
+        router.post(`/collaboration-groups/:groupId/${verb}`, (req, res) => {
+            try {
+                const body = req.body ?? {};
+                if (Object.keys(body).some(key => !['expectedUpdatedAt', 'idempotencyKey'].includes(key)))
+                    throw new CollaborationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Only expectedUpdatedAt and idempotencyKey are accepted', 400);
+                const result = options.store.setLocalGroupArchived(req.params.groupId, archived, body.expectedUpdatedAt, body.idempotencyKey);
+                res.json(result);
+            }
+            catch (error) {
+                res.status(error instanceof CollaborationError ? error.httpStatus : 500).json({ code: error instanceof CollaborationError ? error.code : 'GROUP_ARCHIVE_FAILED',
+                    ...(error instanceof CollaborationError && error.details ? error.details : {}), error: error instanceof Error ? error.message : 'Group archive operation failed' });
+            }
+        });
+    }
     router.post('/collaboration-groups', async (req, res) => {
         try {
             const body = req.body ?? {};

package/dist/server/agent/collaborationStore.js

@@ -82,6 +82,7 @@ export class CollaborationStore {
     historyAvailable = true;
     groupCreationAvailable = true;
     groupRenamesAvailable = true;
+    groupArchivesAvailable = true;
     /** `drawId` is the random source behind newCollaborationId. It is a
      *  constructor seam so tests can force a collision and prove the guard
      *  below actually skips it; production always uses the CSPRNG default. */
@@ -126,6 +127,16 @@ export class CollaborationStore {
                         && typeof value.applied.name === 'string' && !!value.applied.name.trim() && value.applied.name.length <= 256
                         && !COLLAB_NAME_FORBIDDEN.test(value.applied.name) && Number.isSafeInteger(value.applied.updatedAt) && value.applied.updatedAt >= 0));
             this.document.localGroupRenames = this.groupRenamesAvailable ? renames ?? {} : {};
+            const archives = parsed.localGroupArchives;
+            this.groupArchivesAvailable = [1, 2].includes(parsed.version ?? 0) && Array.isArray(parsed.groups)
+                && (parsed.localGroupArchivesComplete === undefined || parsed.localGroupArchivesComplete === true)
+                && (archives === undefined || archives !== null && typeof archives === 'object' && !Array.isArray(archives)
+                    && Object.entries(archives).every(([key, value]) => /^[a-f0-9]{64}$/.test(key) && value && typeof value.hash === 'string' && /^[a-f0-9]{64}$/.test(value.hash)
+                        && value.applied && typeof value.applied.id === 'string' && /^[a-zA-Z0-9._-]{1,80}$/.test(value.applied.id)
+                        && typeof value.applied.name === 'string' && !!value.applied.name.trim() && value.applied.name.length <= 256
+                        && !COLLAB_NAME_FORBIDDEN.test(value.applied.name) && Number.isSafeInteger(value.applied.updatedAt) && value.applied.updatedAt >= 0
+                        && (value.applied.archivedAt === undefined || Number.isSafeInteger(value.applied.archivedAt) && value.applied.archivedAt >= 0)));
+            this.document.localGroupArchives = this.groupArchivesAvailable ? archives ?? {} : {};
             this.document.sequence = Math.max(parsed.sequence ?? 0, this.document.sequence ?? 0);
             this.document.idempotency = parsed.idempotency ?? {};
             this.document.consumers = parsed.consumers ?? {};
@@ -138,10 +149,12 @@ export class CollaborationStore {
             this.historyAvailable = error.code === 'ENOENT';
             this.groupCreationAvailable = this.historyAvailable;
             this.groupRenamesAvailable = this.historyAvailable;
+            this.groupArchivesAvailable = this.historyAvailable;
         }
         this.document.terminalHistoryComplete = this.historyAvailable;
         this.document.localGroupRequestsComplete = this.groupCreationAvailable;
         this.document.localGroupRenamesComplete = this.groupRenamesAvailable;
+        this.document.localGroupArchivesComplete = this.groupArchivesAvailable;
         this.persistedDocument = JSON.stringify(this.document);
     }
     list() {
@@ -248,7 +261,54 @@ export class CollaborationStore {
             throw new CollaborationError('GROUP_NOT_LOCAL', 'Administrator metadata operations require a local group', 409);
         if (!Number.isSafeInteger(group.updatedAt) || group.updatedAt < 0)
             throw new CollaborationError('GROUP_STATE_UNCONFIRMED', 'Group revision is unavailable', 409);
-        return { id: group.id, name: group.name, updatedAt: group.updatedAt };
+        return { id: group.id, name: group.name, updatedAt: group.updatedAt, ...(group.archivedAt !== undefined ? { archivedAt: group.archivedAt } : {}) };
+    }
+    listLocalGroupMetadata(includeArchived = false) {
+        return this.list().filter(group => !group.federated && (includeArchived || group.archivedAt === undefined))
+            .map(group => ({ id: group.id, name: group.name, updatedAt: group.updatedAt,
+            ...(group.archivedAt !== undefined ? { archivedAt: group.archivedAt } : {}) }));
+    }
+    /** Archive is a reversible discovery flag; it never changes membership or message routing. */
+    setLocalGroupArchived(id, archived, expectedUpdatedAt, key) {
+        if (typeof id !== 'string' || !/^[a-zA-Z0-9._-]{1,80}$/.test(id))
+            throw new CollaborationError('INVALID_GROUP_ID', 'An exact group ID is required', 400);
+        if (typeof archived !== 'boolean')
+            throw new CollaborationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Archive state must be explicit', 400);
+        if (!Number.isSafeInteger(expectedUpdatedAt) || expectedUpdatedAt < 0)
+            throw new CollaborationError('INVALID_GROUP_VERSION', 'expected_updated_at must be a non-negative safe integer', 400);
+        const requestKey = localGroupRequestKey(key);
+        if (!this.groupArchivesAvailable)
+            throw new CollaborationError('GROUP_ARCHIVE_STATE_UNCONFIRMED', 'Archive journal is unavailable; reconcile persisted state before changing group visibility', 409);
+        const hash = crypto.createHash('sha256').update(JSON.stringify(['archive-local-group', id, archived, expectedUpdatedAt])).digest('hex');
+        const previous = this.document.localGroupArchives?.[requestKey];
+        if (previous) {
+            if (previous.hash !== hash)
+                throw new CollaborationError('IDEMPOTENCY_CONFLICT', 'This administrator archive key was used with different parameters', 409);
+            const target = this.getGroup(id);
+            if (!target || target.deleted || target.federated)
+                throw new CollaborationError('GROUP_ARCHIVE_TARGET_UNAVAILABLE', 'Original local archive target is unavailable; no replacement is created', 409);
+            const group = this.getLocalGroupMetadata(id);
+            this.persist(true);
+            return { group, applied: { ...previous.applied }, replayed: true };
+        }
+        const current = this.getLocalGroupMetadata(id);
+        if (current.updatedAt !== expectedUpdatedAt)
+            throw new CollaborationError('GROUP_CHANGED', 'Group changed; read its current revision before deciding again', 409, { currentUpdatedAt: current.updatedAt });
+        if (Object.keys(this.document.localGroupArchives ?? {}).length >= 2000)
+            throw new CollaborationError('GROUP_ARCHIVE_LIMIT', 'Administrator archive journal has reached its 2000-record limit', 409);
+        const target = this.getGroup(id);
+        const currentlyArchived = target.archivedAt !== undefined;
+        const changed = currentlyArchived !== archived;
+        const updatedAt = changed ? Math.max(Date.now(), current.updatedAt + 1) : current.updatedAt;
+        if (!Number.isSafeInteger(updatedAt))
+            throw new CollaborationError('GROUP_STATE_UNCONFIRMED', 'Group revision cannot advance safely', 409);
+        const archivedAt = archived ? currentlyArchived ? target.archivedAt : Date.now() : undefined;
+        const applied = { id, name: target.name, updatedAt, ...(archivedAt !== undefined ? { archivedAt } : {}) };
+        this.document = { ...this.document, groups: this.document.groups.map(group => group.id === id
+                ? { ...group, updatedAt, ...(archivedAt !== undefined ? { archivedAt } : { archivedAt: undefined }) } : group),
+            localGroupArchives: { ...this.document.localGroupArchives, [requestKey]: { hash, applied } } };
+        this.persist(true);
+        return { group: { ...applied }, applied: { ...applied }, replayed: false };
     }
     /** Display metadata and its original receipt share a durable commit. */
     renameLocalGroup(id, value, expectedUpdatedAt, key) {
@@ -282,7 +342,8 @@ export class CollaborationStore {
         const updatedAt = name === current.name ? current.updatedAt : Math.max(Date.now(), current.updatedAt + 1);
         if (!Number.isSafeInteger(updatedAt))
             throw new CollaborationError('GROUP_STATE_UNCONFIRMED', 'Group revision cannot advance safely', 409);
-        const applied = { id, name, updatedAt };
+        const target = this.getGroup(id);
+        const applied = { id, name, updatedAt, ...(target.archivedAt !== undefined ? { archivedAt: target.archivedAt } : {}) };
         this.document = { ...this.document, groups: this.document.groups.map(group => group.id === id ? { ...group, name, updatedAt } : group),
             localGroupRenames: { ...this.document.localGroupRenames, [requestKey]: { hash, applied } } };
         this.persist(true);

package/dist/server/agent/collaborationTaskRoutes.js

@@ -1,6 +1,7 @@
 import { Router } from 'express';
 import { CollaborationError } from './collaborationProtocol.js';
 import { assertPeerRegistrationAuthority } from './collaborationPeerTransport.js';
+import { hasEncryptedServiceAccess } from '../federation/requestContext.js';
 export function collaborationTaskRoutes(options) {
     const router = Router();
     const groupId = (value) => {
@@ -15,8 +16,11 @@ export function collaborationTaskRoutes(options) {
         if (!tasks || !peers)
             throw new CollaborationError('TASK_SERVICE_STARTING', '任务服务正在启动，请稍后重试', 503);
         if (!options.agent) {
+            // Reading the inbox does not register peers or create durable authority.
+            // Open-mode full-service viewers may read; mutations still require admin.
             try {
-                assertPeerRegistrationAuthority(req);
+                if (!(['GET', 'HEAD'].includes(req.method) && hasEncryptedServiceAccess(req)))
+                    assertPeerRegistrationAuthority(req);
             }
             catch {
                 throw new CollaborationError('TASK_PERMISSION_DENIED', '当前连接无权处理协作任务', 403);

package/dist/server/agent/integrationCli.js

@@ -26,6 +26,14 @@ export const INTEGRATION_HELP = `td integration — local scoped integration adm
     GROUP_CHANGED, GROUP_NOT_FOUND, GROUP_NOT_LOCAL, GROUP_STATE_UNCONFIRMED,
     GROUP_RENAME_TARGET_UNAVAILABLE, GROUP_RENAME_STATE_UNCONFIRMED,
     GROUP_RENAME_LIMIT, ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED.
+  group archive|unarchive <exact-group-id> --expected-updated-at <N> --idempotency-key <key>
+    Administrator only; minimum CLI/running service 1.4.323; admin_local_group_archive=true.
+    Reversible discovery metadata only. Default groups list hides archived groups;
+    groups --include-archived lists them. group get always includes archivedAt when set.
+    Membership, principals, sessions, runtime, messages and history are unchanged.
+    Retry uncertain results with the same operation, revision and key; GROUP_CHANGED
+    requires rereading current metadata and choosing a new key. Archive receipts are
+    retained separately from the immutable group-create snapshot.
   group create --name <name> --idempotency-key <key>
     Administrator only; create an empty local group without a terminal source.
     Minimum CLI/running service 1.4.318; admin_local_group_create=true.
@@ -125,29 +133,33 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
             return 0;
         }
         const socketPath = integrationSocketPath(port);
-        if (action === 'group' && ['get', 'rename'].includes(argv[1])) {
+        if (action === 'group' && ['get', 'rename', 'archive', 'unarchive'].includes(argv[1])) {
             const operation = argv[1], id = argv[2], args = {};
-            const usage = 'Usage: td integration group get <exact-id> | group rename <exact-id> --name <name> --expected-updated-at <N> --idempotency-key <key>';
+            const usage = 'Usage: td integration group get <exact-id> | group rename <exact-id> --name <name> --expected-updated-at <N> --idempotency-key <key> | group archive|unarchive <exact-id> --expected-updated-at <N> --idempotency-key <key>';
             if (!id || !/^[a-zA-Z0-9._-]{1,80}$/.test(id))
                 throw new CollaborationError('INVALID_GROUP_ID', usage, 400);
             if (operation === 'get' && argv.length !== 3)
                 throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
-            if (operation === 'rename') {
+            if (operation !== 'get') {
                 for (let i = 3; i < argv.length; i += 2) {
-                    if (!['--name', '--expected-updated-at', '--idempotency-key'].includes(argv[i]) || !argv[i + 1] || Object.hasOwn(args, argv[i]))
-                        throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
+                    const allowed = operation === 'rename' ? ['--name', '--expected-updated-at', '--idempotency-key'] : ['--expected-updated-at', '--idempotency-key'];
+                    if (!allowed.includes(argv[i]) || !argv[i + 1] || Object.hasOwn(args, argv[i]))
+                        throw new CollaborationError(operation === 'rename' ? 'INVALID_GROUP_RENAME_REQUEST' : 'INVALID_GROUP_ARCHIVE_REQUEST', usage, 400);
                     args[argv[i]] = argv[i + 1];
                 }
-                if (Object.keys(args).length !== 3 || !args['--name']?.trim() || !args['--idempotency-key']?.trim())
-                    throw new CollaborationError('INVALID_GROUP_RENAME_REQUEST', usage, 400);
+                if (operation === 'rename' ? Object.keys(args).length !== 3 || !args['--name']?.trim() || !args['--idempotency-key']?.trim()
+                    : Object.keys(args).length !== 2 || !args['--idempotency-key']?.trim())
+                    throw new CollaborationError(operation === 'rename' ? 'INVALID_GROUP_RENAME_REQUEST' : 'INVALID_GROUP_ARCHIVE_REQUEST', usage, 400);
                 if (!/^(0|[1-9][0-9]*)$/.test(args['--expected-updated-at']) || !Number.isSafeInteger(Number(args['--expected-updated-at'])))
                     throw new CollaborationError('INVALID_GROUP_VERSION', usage, 400);
             }
             const capabilities = parsed(await request(socketPath, 'GET', '/admin/capabilities', undefined, headers(undefined, adminToken)));
-            if (capabilities.admin_local_group_rename !== true)
-                throw new CollaborationError('ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED', 'CLI and running service must support administrator group metadata operations (minimum 1.4.319)', 409);
-            const body = operation === 'rename' ? { name: args['--name'], expected_updated_at: Number(args['--expected-updated-at']), idempotency_key: args['--idempotency-key'] } : undefined;
-            write(JSON.stringify(parsed(await request(socketPath, body ? 'POST' : 'GET', `/admin/groups/${encodeURIComponent(id)}${body ? '/rename' : ''}`, body, headers(undefined, adminToken)))));
+            const isArchive = operation === 'archive' || operation === 'unarchive';
+            if (capabilities[isArchive ? 'admin_local_group_archive' : 'admin_local_group_rename'] !== true)
+                throw new CollaborationError(isArchive ? 'ADMIN_LOCAL_GROUP_ARCHIVE_UNSUPPORTED' : 'ADMIN_LOCAL_GROUP_RENAME_UNSUPPORTED', `CLI and running service must support this operation (minimum 1.4.${isArchive ? '323' : '319'})`, 409);
+            const body = operation === 'get' ? undefined : { ...(operation === 'rename' ? { name: args['--name'] } : {}), expected_updated_at: Number(args['--expected-updated-at']), idempotency_key: args['--idempotency-key'] };
+            const suffix = operation === 'get' ? '' : `/${operation}`;
+            write(JSON.stringify(parsed(await request(socketPath, body ? 'POST' : 'GET', `/admin/groups/${encodeURIComponent(id)}${suffix}`, body, headers(undefined, adminToken)))));
             return 0;
         }
         if (action === 'group') {
@@ -213,16 +225,22 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
             write(JSON.stringify(parsed(await request(socketPath, 'GET', `/admin/sessions/${encodeURIComponent(argv[1])}/restore-diagnostics`, undefined, headers(undefined, adminToken)))));
             return 0;
         }
-        for (let index = 1; index < argv.length; index += 2) {
-            const flag = argv[index];
-            if (!['--file', '--credential-file'].includes(flag) || !argv[index + 1] || options[flag])
-                throw new Error('Invalid integration arguments');
-            options[flag] = argv[index + 1];
-        }
+        if (action !== 'groups' && action !== 'list')
+            for (let index = 1; index < argv.length; index += 2) {
+                const flag = argv[index];
+                if (!['--file', '--credential-file'].includes(flag) || !argv[index + 1] || options[flag])
+                    throw new Error('Invalid integration arguments');
+                options[flag] = argv[index + 1];
+            }
         if (action === 'groups' || action === 'list') {
-            if (argv.length !== 1)
-                throw new Error('Unexpected arguments');
-            write(JSON.stringify(parsed(await request(socketPath, 'GET', action === 'groups' ? '/admin/groups' : '/admin/principals', undefined, headers(undefined, adminToken)))));
+            if (action === 'list' && argv.length !== 1 || action === 'groups' && argv.length > 2 || action === 'groups' && argv.length === 2 && argv[1] !== '--include-archived')
+                throw new Error('Usage: td integration groups [--include-archived] | list');
+            if (action === 'groups' && argv[1] === '--include-archived') {
+                const capabilities = parsed(await request(socketPath, 'GET', '/admin/capabilities', undefined, headers(undefined, adminToken)));
+                if (capabilities.admin_local_group_archive !== true)
+                    throw new CollaborationError('ADMIN_LOCAL_GROUP_ARCHIVE_UNSUPPORTED', 'CLI and running service must support archived group discovery (minimum 1.4.323)', 409);
+            }
+            write(JSON.stringify(parsed(await request(socketPath, 'GET', action === 'groups' ? `/admin/groups${argv[1] ? '?include_archived=true' : ''}` : '/admin/principals', undefined, headers(undefined, adminToken)))));
             return 0;
         }
         if (action === 'update') {

package/dist/server/agent/integrationServer.js

@@ -3,10 +3,10 @@ import { createServer } from 'node:http';
 import fs from 'node:fs';
 import path from 'node:path';
 import { homedir } from 'node:os';
-import { timingSafeEqual } from 'node:crypto';
+import { createHash, randomUUID, timingSafeEqual } from 'node:crypto';
 import { CollaborationError, resolveIdPrefix } from './collaborationProtocol.js';
 import { terminalMessage } from './collaborationStore.js';
-import { IntegrationStore, INTEGRATION_PROTOCOL, INTEGRATION_OPERATIONS, integrationError } from './integrationStore.js';
+import { IntegrationStore, INTEGRATION_PROTOCOL, INTEGRATION_OPERATIONS, atomicJson, integrationError } from './integrationStore.js';
 import { IntegrationSessions, publicIntegrationSession } from './integrationSessions.js';
 import { getTermdockVersion } from '../utils/version.js';
 export function integrationSocketPath(port) { return path.join(homedir(), '.termdock', `integration-${port}.sock`); }
@@ -30,10 +30,32 @@ export class IntegrationRuntime {
     sent = new Map();
     syncing = false;
     retry;
+    releaseBatchFile;
+    releaseBatchOperations = [];
+    releaseBatchRunning = false;
     constructor(options) {
         this.options = options;
         this.store = new IntegrationStore(path.join(options.directory, 'integrations.json'));
         this.sessions = new IntegrationSessions(path.join(options.directory, 'integration-sessions.json'), options.sessions);
+        this.releaseBatchFile = path.join(options.directory, 'session-release-batches.json');
+        try {
+            const saved = JSON.parse(fs.readFileSync(this.releaseBatchFile, 'utf8'));
+            if (!Array.isArray(saved))
+                throw new Error('Invalid batch release journal');
+            this.releaseBatchOperations = saved;
+            for (const operation of this.releaseBatchOperations) {
+                if (operation.state === 'running')
+                    operation.state = 'queued';
+                for (const item of operation.items)
+                    if (item.state === 'running')
+                        item.state = 'queued';
+            }
+            atomicJson(this.releaseBatchFile, this.releaseBatchOperations);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
         this.stops.push(options.messages.registerRuntimeGuard(id => this.sessions.assertRuntimeMessage(id)));
         const changed = () => { try {
             this.sync();
@@ -68,7 +90,7 @@ export class IntegrationRuntime {
             if (!expected.length || given.length !== expected.length || !timingSafeEqual(given, expected))
                 integrationError('INTEGRATION_ADMIN_REQUIRED', 'Local administration credential is required', 401);
         };
-        app.get('/admin/groups', run(req => { admin(req); return { groups: options.messages.list().filter(g => !g.federated).map(g => ({ id: g.id, name: g.name, updatedAt: g.updatedAt })) }; }));
+        app.get('/admin/groups', run(req => { admin(req); return { groups: options.messages.listLocalGroupMetadata(req.query.include_archived === 'true') }; }));
         app.get('/admin/groups/:id', run(req => { admin(req); return { group: options.messages.getLocalGroupMetadata(req.params.id) }; }));
         app.post('/admin/groups/:id/rename', run(req => {
             admin(req);
@@ -78,6 +100,22 @@ export class IntegrationRuntime {
             }
             return options.messages.renameLocalGroup(req.params.id, body.name, body.expected_updated_at, body.idempotency_key);
         }));
+        app.post('/admin/groups/:id/archive', run(req => {
+            admin(req);
+            const body = req.body;
+            if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(key => !['expected_updated_at', 'idempotency_key'].includes(key))) {
+                integrationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Specify only expected_updated_at and idempotency_key');
+            }
+            return options.messages.setLocalGroupArchived(req.params.id, true, body.expected_updated_at, body.idempotency_key);
+        }));
+        app.post('/admin/groups/:id/unarchive', run(req => {
+            admin(req);
+            const body = req.body;
+            if (!body || typeof body !== 'object' || Array.isArray(body) || Object.keys(body).some(key => !['expected_updated_at', 'idempotency_key'].includes(key))) {
+                integrationError('INVALID_GROUP_ARCHIVE_REQUEST', 'Specify only expected_updated_at and idempotency_key');
+            }
+            return options.messages.setLocalGroupArchived(req.params.id, false, body.expected_updated_at, body.idempotency_key);
+        }));
         app.post('/admin/groups', run(req => {
             admin(req);
             const body = req.body;
@@ -216,6 +254,19 @@ export class IntegrationRuntime {
         app.post('/sessions/:id/restore', run(async (req) => { const p = principal(req); this.authorize(p, 'session.restore'); const session = await this.sessions.restore(p, req.params.id, req.body?.idempotency_key); this.sync(); return { session: publicIntegrationSession(session) }; }));
         app.post('/sessions/:id/retry-cold', run(async (req) => { const p = principal(req); this.authorize(p, 'session.create'); const session = await this.sessions.retryCold(p, req.params.id, req.body?.generation, req.body?.idempotency_key); this.sync(); return { session: publicIntegrationSession(session) }; }));
         app.post('/sessions/:id/release', run(async (req) => { const p = principal(req); this.authorize(p, 'session.release'); const session = await this.sessions.release(p, req.params.id, req.body?.generation, req.body?.idempotency_key); this.sync(); return { session: publicIntegrationSession(session) }; }));
+        app.post('/sessions/release-batch', run(async (req) => {
+            const p = principal(req);
+            this.authorize(p, 'session.release');
+            return this.createReleaseBatch(p, req.body?.session_ids, req.body?.idempotency_key);
+        }));
+        app.get('/sessions/release-batches/:id', run(req => {
+            const p = principal(req);
+            this.authorize(p, 'session.release');
+            const operation = this.releaseBatchOperations.find(item => item.id === req.params.id && item.principal_id === p.id && item.group_id === p.groupId);
+            if (!operation)
+                integrationError('RELEASE_BATCH_NOT_FOUND', 'Batch release operation was not found', 404);
+            return { operation: structuredClone(operation) };
+        }));
         app.post('/sessions/:id/rename', run(async (req) => { const p = principal(req); this.authorize(p, 'session.rename'); const session = await this.sessions.rename(p, req.params.id, req.body?.generation, req.body?.name, req.body?.idempotency_key); this.sync(); return { session: publicIntegrationSession(session) }; }));
         app.post('/sessions/:id/close', run(async (req) => { const p = principal(req); this.authorize(p, 'session.close'); const session = await this.sessions.closeSession(p, req.params.id, req.body?.generation, req.body?.idempotency_key); this.sync(); return { session: publicIntegrationSession(session) }; }));
         app.get('/events', run((req, res) => {
@@ -254,13 +305,103 @@ export class IntegrationRuntime {
             session_close: true, session_close_min_version: '1.4.315',
             admin_local_group_create: true, admin_local_group_create_min_version: '1.4.318',
             admin_local_group_rename: true, admin_local_group_rename_min_version: '1.4.319',
+            admin_local_group_archive: true, admin_local_group_archive_min_version: '1.4.323',
             integration_policy_update: true,
             session_restore_diagnostics: true,
             native_identity_linux_flock_owner: process.platform === 'linux',
             background_task_records: true, task_purpose_configuration: true, explicit_execution_state: true,
             integration_message_send: true, integration_message_reply: true, integration_message_history: true,
+            session_release_batch: true, session_release_batch_min_version: getTermdockVersion(),
             permissions: INTEGRATION_OPERATIONS };
     }
+    async createReleaseBatch(principal, rawSessionIds, rawKey) {
+        if (!Array.isArray(rawSessionIds) || rawSessionIds.length < 1 || rawSessionIds.length > 100
+            || rawSessionIds.some(id => typeof id !== 'string' || !/^[a-zA-Z0-9._-]{1,80}$/.test(id))) {
+            integrationError('INVALID_RELEASE_BATCH', 'session_ids must contain 1–100 exact session IDs');
+        }
+        if (typeof rawKey !== 'string' || !rawKey.trim() || rawKey.length > 160)
+            integrationError('INVALID_IDEMPOTENCY_KEY', 'A 1–160 character idempotency_key is required');
+        const sessionIds = [...new Set(rawSessionIds)].sort();
+        const keyHash = createHash('sha256').update(`${principal.id}:${rawKey}`).digest('hex');
+        const requestHash = createHash('sha256').update(JSON.stringify([principal.groupId, sessionIds])).digest('hex');
+        const existing = this.releaseBatchOperations.find(operation => operation.idempotency_key === keyHash);
+        if (existing) {
+            if (existing.request_hash !== requestHash)
+                integrationError('IDEMPOTENCY_CONFLICT', 'This batch release key was used with different sessions', 409);
+            return { accepted: true, operation: structuredClone(existing), replayed: true };
+        }
+        if (this.releaseBatchOperations.length >= 1000)
+            integrationError('RELEASE_BATCH_HISTORY_FULL', 'Batch release history is full; reconcile retained operations before creating another', 503);
+        const items = [];
+        for (const sessionId of sessionIds) {
+            const session = await this.sessions.get(principal, sessionId);
+            items.push({ session_id: sessionId, generation: session.generation ?? 1, state: 'queued' });
+        }
+        const now = Date.now();
+        const operation = { id: randomUUID(), principal_id: principal.id, group_id: principal.groupId,
+            idempotency_key: keyHash, request_hash: requestHash, state: 'queued', created_at: now, updated_at: now, items };
+        this.releaseBatchOperations.push(operation);
+        try {
+            atomicJson(this.releaseBatchFile, this.releaseBatchOperations);
+        }
+        catch (error) {
+            this.releaseBatchOperations = this.releaseBatchOperations.filter(item => item.id !== operation.id);
+            throw error;
+        }
+        void this.pumpReleaseBatches();
+        return { accepted: true, operation: structuredClone(operation), replayed: false };
+    }
+    async pumpReleaseBatches() {
+        if (this.releaseBatchRunning)
+            return;
+        this.releaseBatchRunning = true;
+        try {
+            for (;;) {
+                const operation = this.releaseBatchOperations.find(item => item.state === 'queued' || item.state === 'running');
+                if (!operation)
+                    break;
+                operation.state = 'running';
+                operation.updated_at = Date.now();
+                atomicJson(this.releaseBatchFile, this.releaseBatchOperations);
+                for (const item of operation.items) {
+                    if (item.state !== 'queued')
+                        continue;
+                    item.state = 'running';
+                    operation.updated_at = Date.now();
+                    atomicJson(this.releaseBatchFile, this.releaseBatchOperations);
+                    try {
+                        const policy = this.store.policies().find(candidate => candidate.id === operation.principal_id && candidate.groupId === operation.group_id && !candidate.revoked);
+                        if (!policy)
+                            throw Object.assign(new Error('Integration principal was revoked before release'), { code: 'INTEGRATION_REVOKED' });
+                        const activePrincipal = policy;
+                        this.store.authorize(activePrincipal, 'session.release');
+                        const session = await this.sessions.release(activePrincipal, item.session_id, item.generation, `${operation.idempotency_key}:${item.session_id}`);
+                        if (session.state !== 'released')
+                            throw Object.assign(new Error(session.error_code ?? 'Session release did not reach released state'), { code: session.error_code ?? 'SESSION_RELEASE_FAILED' });
+                        item.state = 'released';
+                    }
+                    catch (error) {
+                        const value = error;
+                        item.state = 'failed';
+                        item.error_code = typeof value?.code === 'string' ? value.code : 'SESSION_RELEASE_FAILED';
+                        item.error = (error instanceof Error ? error.message : String(error)).slice(0, 500);
+                    }
+                    operation.updated_at = Date.now();
+                    atomicJson(this.releaseBatchFile, this.releaseBatchOperations);
+                }
+                operation.state = operation.items.some(item => item.state === 'failed') ? 'partial_failure' : 'succeeded';
+                operation.updated_at = Date.now();
+                atomicJson(this.releaseBatchFile, this.releaseBatchOperations);
+                this.sync();
+            }
+        }
+        catch (error) {
+            console.error('[integration-release-batch] worker stopped; persisted operation will reconcile on restart:', error);
+        }
+        finally {
+            this.releaseBatchRunning = false;
+        }
+    }
     error(error) {
         return { type: 'error', ok: false, code: error instanceof CollaborationError ? error.code : 'INTEGRATION_INTERNAL_ERROR',
             ...(error instanceof CollaborationError && error.code === 'GROUP_CHANGED' && Number.isSafeInteger(error.details?.currentUpdatedAt)
@@ -458,6 +599,7 @@ export class IntegrationRuntime {
         await new Promise((resolve, reject) => { this.server.once('error', reject); this.server.listen(this.options.socketPath, () => { this.server.removeListener('error', reject); fs.chmodSync(this.options.socketPath, 0o600); resolve(); }); });
         this.sync();
         await this.sessions.refreshAll();
+        void this.pumpReleaseBatches();
     }
     async close() {
         for (const stop of this.stops)