termdock 1.4.347 → 1.4.349

package/dist/server/agent/collaborationCli.js

@@ -95,6 +95,8 @@ export const COLLAB_HELP = `td collab — durable messages; no agent-specific ho
     generation递增；原launch operation_id保持。rename_pending=true时用get对账显示同步。
   session close <id> --generation <N> --idempotency-key <key>
     权限 session.close；显式终止精确自有Agent/原失败空shell，移除活动承载；保留历史与诊断。
+    1.4.349 缺活动终端登记时，Linux 仅凭唯一持久归属、原单pane及实时writer-lock身份核验关闭；
+    管理员用 td integration close-diagnostics <id> 只读核验，不按名称/argv/旧PID强制关闭。
     closed终态拒绝send/reply/restore/retry-cold；release才是保留精确恢复的入口。
     有pending/进行中操作/身份不明确时拒绝；中断只对账不自动再终止，close_pending=true表示结果未确认。
     rename/close最低CLI与实际服务1.4.315；session_rename/session_close=true；两个权限默认不授权。

package/dist/server/agent/integrationCli.js

@@ -66,6 +66,17 @@ export const INTEGRATION_HELP = `td integration — local scoped integration adm
     Minimum CLI/running service 1.4.309; capabilities.session_resume_configuration=true.
     Errors: RESUME_CONFIGURATION_CHANGED, EXACT_RESUME_UNSUPPORTED,
     SESSION_GENERATION_MISMATCH, SESSION_OPERATION_IN_PROGRESS, LAUNCHER_UNAVAILABLE.
+  close-diagnostics <TD-session-id> (fresh read-only close target; administrator only)
+    Minimum CLI/running service 1.4.349; session_close_diagnostics=true.
+    Returns {session_id,operation_id,generation,close_diagnostics:{checked_at,
+    terminal_registration_present,binding_present,runtime_present,pending_messages,
+    target_confirmed,code,target}}. target has exact pane/native/process instance facts,
+    never argv/environment/output. Does not change records, routing or generation,
+    close/restore a session, send keys or grant permission for a later close.
+    Linux session_close_detached_registration=true supports existing session.close
+    when active terminal inventory is missing: unique durable local ownership,
+    original single pane and live writer-lock native identity are still required.
+    No forced close by tmux name, argv UUID, stale PID or shell-only observation.
   diagnostics <TD-session-id> (read stored launch/restore diagnostics; administrator only)
     1.4.314 adds phase/timestamps, paste/submit write facts and target-change
     evidence; no argv/environment/credentials or application readiness claim.
@@ -226,6 +237,15 @@ export async function runIntegrationAdmin(argv, port, adminToken, write) {
             write(JSON.stringify(parsed(await request(socketPath, body ? 'POST' : 'GET', `/admin/sessions/${encodeURIComponent(id)}/resume-configuration`, body, headers(undefined, adminToken)))));
             return 0;
         }
+        if (action === 'close-diagnostics') {
+            if (argv.length !== 2 || !/^[a-zA-Z0-9._-]{1,80}$/.test(argv[1]))
+                throw new Error('close-diagnostics requires one full TD session id');
+            const capabilities = parsed(await request(socketPath, 'GET', '/admin/capabilities', undefined, headers(undefined, adminToken)));
+            if (capabilities.session_close_diagnostics !== true)
+                throw new CollaborationError('SESSION_CLOSE_DIAGNOSTICS_UNSUPPORTED', 'CLI and running service must support live close diagnostics (minimum 1.4.349)', 409);
+            write(JSON.stringify(parsed(await request(socketPath, 'GET', `/admin/sessions/${encodeURIComponent(argv[1])}/close-diagnostics`, undefined, headers(undefined, adminToken)))));
+            return 0;
+        }
         if (action === 'diagnostics') {
             if (argv.length !== 2 || !/^[a-zA-Z0-9._-]{1,80}$/.test(argv[1]))
                 throw new Error('diagnostics requires one TD session id');

package/dist/server/agent/integrationCloseOwnership.js

@@ -0,0 +1,18 @@
+import { integrationError } from './integrationStore.js';
+/** Missing UI inventory is not authority to kill a named tmux session. Require
+ * independent durable ownership first; live pane/native/process proof follows.
+ * No terminal registration, route or group membership is created here. */
+export function assertDetachedCloseOwnership(e) {
+    if (!e.localGroup || !e.sessionId || !e.groupId || !e.principalId
+        || e.descriptorOwners.length !== 1 || e.descriptorOwners[0]?.sessionId !== e.sessionId
+        || e.descriptorOwners[0]?.groupId !== e.groupId || e.descriptorOwners[0]?.principalId !== e.principalId
+        || e.principalOwners.length !== 1 || e.principalOwners[0]?.principalId !== e.principalId
+        || e.principalOwners[0]?.groupId !== e.groupId || e.principalOwners[0]?.revoked
+        || e.groupOwners.length !== 1 || e.groupOwners[0] !== e.groupId) {
+        integrationError('SESSION_CLOSE_OWNERSHIP_UNCONFIRMED', 'Missing terminal registration requires unique durable local session, principal and group ownership', 409);
+    }
+    if (e.terminalClaims || e.backendClaims.length > 1 || e.otherPaneOwner
+        || e.backendClaims.some(b => b.foreignTerminal || b.routeOwner !== null && b.routeOwner !== e.sessionId)) {
+        integrationError('SESSION_IDENTITY_MISMATCH', 'Another terminal, backend or route claims the close target', 409);
+    }
+}

package/dist/server/agent/integrationServer.js

@@ -131,6 +131,7 @@ export class IntegrationRuntime {
         }));
         app.get('/admin/capabilities', run(req => { admin(req); return this.capabilities(); }));
         app.get('/admin/sessions/:id/restore-diagnostics', run(req => { admin(req); return { ...this.sessions.restoreDiagnostics(req.params.id), ...this.sessions.launchDiagnostics(req.params.id) }; }));
+        app.get('/admin/sessions/:id/close-diagnostics', run(async (req) => { admin(req); return this.sessions.closeDiagnostics(req.params.id); }));
         app.get('/admin/sessions/:id/resume-configuration', run(async (req) => { admin(req); return this.sessions.resumeConfiguration(req.params.id); }));
         app.post('/admin/sessions/:id/resume-configuration', run(async (req) => { admin(req); return { session: publicIntegrationSession(await this.sessions.confirmResumeConfiguration(req.params.id, req.body?.generation, req.body?.fingerprint)) }; }));
         app.post('/admin/sessions/:id/startup-input/clear', run(async (req) => {
@@ -307,10 +308,13 @@ export class IntegrationRuntime {
             session_launch_reload_fence: true, session_launch_reload_fence_min_version: '1.4.346',
             session_shell_startup_wait: true, session_shell_startup_wait_min_version: '1.4.346',
             session_profile_native_identity: process.platform === 'linux', session_profile_native_identity_min_version: '1.4.346',
+            session_profile_native_identity_home_aliases: process.platform === 'linux', session_profile_native_identity_home_aliases_min_version: '1.4.348',
             session_launch_diagnostics: true, session_launch_diagnostics_min_version: '1.4.314',
             session_cold_retry: true, session_cold_retry_min_version: '1.4.314',
             session_rename: true, session_rename_min_version: '1.4.315',
             session_close: true, session_close_min_version: '1.4.315',
+            session_close_diagnostics: true, session_close_diagnostics_min_version: '1.4.349',
+            session_close_detached_registration: process.platform === 'linux', session_close_detached_registration_min_version: '1.4.349',
             admin_local_group_create: true, admin_local_group_create_min_version: '1.4.318',
             admin_local_group_rename: true, admin_local_group_rename_min_version: '1.4.319',
             admin_local_group_archive: true, admin_local_group_archive_min_version: '1.4.323',
@@ -570,7 +574,7 @@ export class IntegrationRuntime {
         const key = `${p.id}:${p.groupId}:${consumer}`;
         // Resolve the initial cursor before sending headers so retention gaps
         // and bad consumer names are ordinary machine-readable HTTP errors.
-        const initial = this.store.page(p, consumer);
+        const initial = this.store.streamPage(p, consumer);
         cursor = initial.cursor;
         res.setHeader('Content-Type', 'application/x-ndjson');
         res.setHeader('Cache-Control', 'no-store');
@@ -585,13 +589,13 @@ export class IntegrationRuntime {
             try {
                 this.authorize(p, 'events.read');
                 for (;;) {
-                    const page = this.store.page(p, consumer, cursor);
+                    const page = this.store.streamPage(p, consumer, cursor);
                     if (!page.events.length)
                         break;
                     for (const event of page.events) {
                         if (res.writableLength > 1024 * 1024)
                             integrationError('EVENT_CONSUMER_SLOW', 'Reconnect from the last acknowledged cursor', 503);
-                        res.write(`${JSON.stringify({ type: 'event', ...event })}\n`);
+                        res.write(event.line);
                         cursor = event.cursor;
                         this.sent.set(key, Math.max(this.sent.get(key) ?? 0, event.sequence));
                     }

package/dist/server/agent/integrationSessions.js

@@ -263,6 +263,20 @@ export class IntegrationSessions {
         return structuredClone({ launch_diagnostics: record.launch_diagnostics ?? null,
             launch_diagnostics_history: record.launch_diagnostics_history ?? [] });
     }
+    async closeDiagnostics(id) {
+        const record = structuredClone(this.doc.sessions.find(s => s.session_id === id));
+        if (!record)
+            return integrationError('INTEGRATION_SESSION_NOT_FOUND', 'Integration session does not exist', 404);
+        if (!this.adapter.closeDiagnostics)
+            integrationError('SESSION_CLOSE_DIAGNOSTICS_UNSUPPORTED', 'Live close diagnostics are unavailable', 409);
+        const report = await this.adapter.closeDiagnostics(record);
+        if (JSON.stringify(this.doc.sessions.find(s => s.session_id === id)) !== JSON.stringify(record)) {
+            report.target_confirmed = false;
+            report.target = null;
+            report.code = 'SESSION_CLOSE_TARGET_CHANGED';
+        }
+        return { session_id: id, operation_id: record.operation_id, generation: record.generation, close_diagnostics: report };
+    }
     assertRuntimeMessage(id) {
         const record = this.doc.sessions.find(s => s.session_id === id);
         if (this.closingOperations.has(id))
@@ -714,10 +728,12 @@ export class IntegrationSessions {
             return record;
         }));
     }
-    async refresh(id, allowBindingReconciliation = true) {
+    async refresh(id, allowBindingReconciliation = true, presence) {
         const record = structuredClone(this.doc.sessions.find(s => s.session_id === id));
         if (!record)
             return;
+        const runtimePresent = () => presence && JSON.stringify(record) === JSON.stringify(presence.record)
+            ? Promise.resolve(presence.present) : this.adapter.runtimePresent?.(record);
         if (record.rename_pending) {
             if (this.lifecycle.active(id))
                 return;
@@ -744,7 +760,7 @@ export class IntegrationSessions {
                         integrationError('SESSION_CLOSE_UNSUPPORTED', 'Close reconciliation is unavailable', 409);
                     await this.adapter.closeRuntime(record, true);
                 }
-                if (!this.adapter.runtimePresent || await this.adapter.runtimePresent(record))
+                if (!this.adapter.runtimePresent || await runtimePresent())
                     integrationError('OPERATION_OUTCOME_UNCONFIRMED', 'Runtime exists for a closed or closing session', 409);
                 const next = { ...record, state: 'closed', runtime_present: false, terminal_binding: null, close_intent: undefined,
                     operation_uncertain: false, error_code: null, startup_input: undefined };
@@ -772,7 +788,7 @@ export class IntegrationSessions {
             try {
                 if (record.state !== 'released')
                     await this.adapter.release?.(record, true);
-                const present = await this.adapter.runtimePresent?.(record);
+                const present = await runtimePresent();
                 if (present === undefined)
                     integrationError('SESSION_RELEASE_UNSUPPORTED', 'Runtime presence is unavailable', 409);
                 if (record.state !== 'released') {
@@ -998,8 +1014,21 @@ export class IntegrationSessions {
         this.observing = true;
         this.observeAgain = false;
         try {
-            for (const record of this.snapshot())
-                await this.refresh(record.session_id);
+            const records = this.snapshot();
+            const dormant = records.filter(record => ['closed', 'released'].includes(record.state) && record.runtime_present === false
+                && !record.operation_uncertain && !record.close_intent && !record.rename_pending && !record.cold_retry_pending);
+            let presence;
+            if (dormant.length && this.adapter.runtimePresenceBatch) {
+                try {
+                    presence = await this.adapter.runtimePresenceBatch(dormant);
+                }
+                catch { /* Failed batch observations fall back to fresh per-record checks. */ }
+            }
+            const candidates = new Map(dormant.map(record => [record.session_id, record]));
+            for (const record of records) {
+                const candidate = candidates.get(record.session_id), present = presence?.get(record.session_id);
+                await this.refresh(record.session_id, true, candidate && typeof present === 'boolean' ? { record: candidate, present } : undefined);
+            }
         }
         finally {
             this.observing = false;

package/dist/server/agent/integrationStore.js

@@ -7,12 +7,18 @@ export const INTEGRATION_PROTOCOL = 1;
 export const INTEGRATION_OPERATIONS = ['message.send', 'message.read', 'task.read', 'task.create', 'task.configure', 'task.assign', 'task.comment', 'task.revise', 'task.answer', 'events.read', 'session.create', 'session.read', 'session.restore', 'session.release', 'session.rename', 'session.close'];
 export function integrationError(code, message, status = 400) { throw new CollaborationError(code, message, status); }
 export function atomicJson(file, value) {
+    atomicJsonText(file, JSON.stringify(value));
+}
+function atomicJsonText(file, serialized) {
+    atomicJsonWrite(file, descriptor => fs.writeFileSync(descriptor, serialized));
+}
+function atomicJsonWrite(file, write) {
     fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
     const temporary = `${file}.${process.pid}.tmp`;
     const descriptor = fs.openSync(temporary, 'w', 0o600);
     try {
         fs.fchmodSync(descriptor, 0o600);
-        fs.writeFileSync(descriptor, JSON.stringify(value));
+        write(descriptor);
         fs.fsyncSync(descriptor);
     }
     finally {
@@ -27,6 +33,42 @@ export function atomicJson(file, value) {
         fs.closeSync(directory);
     }
 }
+function atomicJsonBuffers(file, parts) {
+    atomicJsonWrite(file, descriptor => {
+        let index = 0, offset = 0;
+        while (index < parts.length) {
+            // Bound vectors below platform IOV_MAX, and handle short writes without
+            // replaying or dropping any byte of the checked JSON document.
+            const vectors = parts.slice(index, index + 512);
+            if (offset)
+                vectors[0] = vectors[0].subarray(offset);
+            let written;
+            try {
+                written = fs.writevSync(descriptor, vectors);
+            }
+            catch (error) {
+                if (error.code === 'EINTR')
+                    continue;
+                throw error;
+            }
+            if (written <= 0)
+                throw new Error('Integration journal write made no progress');
+            while (index < parts.length) {
+                const available = parts[index].length - offset;
+                if (written < available) {
+                    offset += written;
+                    break;
+                }
+                written -= available;
+                index++;
+                offset = 0;
+                if (!written)
+                    break;
+            }
+        }
+    });
+}
+const JSON_OPEN = Buffer.from('{'), JSON_CLOSE = Buffer.from('}'), JSON_COMMA = Buffer.from(','), ARRAY_OPEN = Buffer.from('['), ARRAY_CLOSE = Buffer.from(']'), EVENT_PREFIX = Buffer.from('{"type":"event",'), NEWLINE = Buffer.from('\n');
 const hash = (value) => createHash('sha256').update(value).digest('hex');
 function identifier(value, label) {
     if (typeof value !== 'string' || !/^[a-zA-Z0-9._-]{1,80}$/.test(value))
@@ -77,6 +119,11 @@ export class IntegrationStore {
     retention;
     doc = { version: 1, principals: [], events: [], sequences: {}, prunedThrough: {}, sources: {}, consumers: {} };
     listeners = new Set();
+    // Committed events and metadata are immutable inside the store. Keep the
+    // encoded event fragments, not another deep copy of their payloads. Pruned
+    // objects become collectible with their encodings.
+    encoded = new WeakMap();
+    groupEvents = new Map();
     constructor(file, retention = 10000) {
         this.file = file;
         this.retention = retention;
@@ -90,12 +137,52 @@ export class IntegrationStore {
             if (error.code !== 'ENOENT')
                 throw error;
         }
+        this.indexEvents();
+    }
+    indexEvents() {
+        this.groupEvents = new Map();
+        for (const event of this.doc.events) {
+            const events = this.groupEvents.get(event.group_id) ?? [];
+            events.push(event);
+            this.groupEvents.set(event.group_id, events);
+        }
+    }
+    encode(value) {
+        if (!value || typeof value !== 'object')
+            return Buffer.from(JSON.stringify(value));
+        const cached = this.encoded.get(value);
+        if (cached !== undefined)
+            return cached;
+        const serialized = Buffer.from(JSON.stringify(value));
+        this.encoded.set(value, serialized);
+        return serialized;
     }
     write(next) {
-        if (Buffer.byteLength(JSON.stringify(next)) > 64 * 1024 * 1024)
+        const parts = [JSON_OPEN];
+        for (const [index, [key, value]] of Object.entries(next).entries()) {
+            if (index)
+                parts.push(JSON_COMMA);
+            parts.push(Buffer.from(`${JSON.stringify(key)}:`));
+            if (key === 'events') {
+                parts.push(ARRAY_OPEN);
+                for (const [index, event] of next.events.entries()) {
+                    if (index)
+                        parts.push(JSON_COMMA);
+                    parts.push(this.encode(event));
+                }
+                parts.push(ARRAY_CLOSE);
+            }
+            else
+                parts.push(this.encode(value));
+        }
+        parts.push(JSON_CLOSE);
+        if (parts.reduce((bytes, part) => bytes + part.length, 0) > 64 * 1024 * 1024)
             integrationError('EVENT_STORAGE_FULL', 'Integration journal is full; no event was acknowledged', 503);
-        atomicJson(this.file, next);
+        atomicJsonBuffers(this.file, parts);
+        const eventsChanged = next.events !== this.doc.events;
         this.doc = next;
+        if (eventsChanged)
+            this.indexEvents();
         for (const listener of this.listeners) {
             try {
                 listener();
@@ -110,13 +197,12 @@ export class IntegrationStore {
         if (this.doc.principals.some(p => p.id === checked.id))
             integrationError('INTEGRATION_EXISTS', 'Use a new id; credentials cannot be silently replaced', 409);
         const token = randomBytes(32).toString('base64url');
-        const next = structuredClone(this.doc);
-        next.principals.push({ ...checked, tokenHash: hash(token), revoked: false });
+        const next = { ...this.doc, principals: [...this.doc.principals, { ...checked, tokenHash: hash(token), revoked: false }] };
         this.write(next);
-        return { principal: checked, token };
+        return { principal: structuredClone(checked), token };
     }
     update(policy) {
-        const checked = validatePolicy(policy), next = structuredClone(this.doc);
+        const checked = validatePolicy(policy), next = { ...this.doc, principals: [...this.doc.principals] };
         const index = next.principals.findIndex(principal => principal.id === checked.id);
         if (index < 0)
             integrationError('INTEGRATION_NOT_FOUND', 'Integration does not exist', 404);
@@ -129,11 +215,12 @@ export class IntegrationStore {
         this.write(next);
     }
     revoke(id) {
-        const next = structuredClone(this.doc), principal = next.principals.find(p => p.id === id);
+        const principal = this.doc.principals.find(p => p.id === id);
         if (!principal)
             integrationError('INTEGRATION_NOT_FOUND', 'Integration does not exist', 404);
-        principal.revoked = true;
-        this.write(next);
+        if (principal.revoked)
+            return;
+        this.write({ ...this.doc, principals: this.doc.principals.map(p => p.id === id ? { ...p, revoked: true } : p) });
     }
     authenticate(id, token) {
         const principal = this.doc.principals.find(p => p.id === id);
@@ -158,9 +245,10 @@ export class IntegrationStore {
         for (const update of updates) {
             if ((next ?? this.doc).sources[update.sourceKey] === update.sourceVersion)
                 continue;
-            next ??= structuredClone(this.doc);
+            next ??= { ...this.doc, events: [...this.doc.events], sequences: { ...this.doc.sequences },
+                sources: { ...this.doc.sources }, prunedThrough: { ...this.doc.prunedThrough } };
             const group = update.event.group_id, sequence = (next.sequences[group] ?? 0) + 1;
-            next.events.push({ ...update.event, event_id: update.eventId ?? randomUUID(), sequence, cursor: this.cursor(group, sequence) });
+            next.events.push({ ...structuredClone(update.event), event_id: update.eventId ?? randomUUID(), sequence, cursor: this.cursor(group, sequence) });
             next.sequences[group] = sequence;
             next.sources[update.sourceKey] = update.sourceVersion;
         }
@@ -191,21 +279,39 @@ export class IntegrationStore {
         return value.sequence;
     }
     key(principal, consumer) { identifier(consumer, 'consumer'); return `${principal.id}:${principal.groupId}:${consumer}`; }
-    page(principal, consumer, cursor) {
+    selectPage(principal, consumer, cursor) {
         this.authorize(principal, 'events.read');
         const key = this.key(principal, consumer), group = principal.groupId;
         const floor = this.doc.prunedThrough[group] ?? 0;
         // A new consumer explicitly starts at the earliest retained fact. Existing
         // consumers never silently skip a retention gap.
         if (this.doc.consumers[key] === undefined) {
-            const next = structuredClone(this.doc);
-            next.consumers[key] = floor;
-            this.write(next);
+            this.write({ ...this.doc, consumers: { ...this.doc.consumers, [key]: floor } });
         }
         const after = cursor ? this.decode(group, cursor) : this.doc.consumers[key];
         if (after < floor)
             integrationError('EVENT_RETENTION_GAP', 'Confirmed cursor is older than retained history; reconcile task/session snapshots and use a new consumer', 409);
-        return { events: structuredClone(this.doc.events.filter(e => e.group_id === group && e.sequence > after).slice(0, 100)), cursor: this.cursor(group, after) };
+        const events = this.groupEvents.get(group) ?? [];
+        let lo = 0, hi = events.length;
+        while (lo < hi) {
+            const mid = (lo + hi) >>> 1;
+            if (events[mid].sequence <= after)
+                lo = mid + 1;
+            else
+                hi = mid;
+        }
+        return { events: events.slice(lo, lo + 100), cursor: this.cursor(group, after) };
+    }
+    page(principal, consumer, cursor) {
+        return structuredClone(this.selectPage(principal, consumer, cursor));
+    }
+    /** Push uses immutable encoded facts rather than copying and re-encoding
+     * every retained payload for each consumer. No mutable record escapes. */
+    streamPage(principal, consumer, cursor) {
+        const page = this.selectPage(principal, consumer, cursor);
+        return { cursor: page.cursor, events: page.events.map(event => ({ sequence: event.sequence, cursor: event.cursor,
+                line: Object.hasOwn(event, 'type') ? Buffer.from(`${JSON.stringify({ type: 'event', ...event })}\n`)
+                    : Buffer.concat([EVENT_PREFIX, this.encode(event).subarray(1), NEWLINE]) })) };
     }
     ack(principal, consumer, cursor) {
         this.authorize(principal, 'events.read');
@@ -218,9 +324,8 @@ export class IntegrationStore {
             integrationError('EVENT_RETENTION_GAP', 'Consumer has a retention gap', 409);
         // Cursor is a cumulative declaration that every preceding event is safely
         // in the bridge inbox. The subscription server separately checks it was sent.
-        const next = structuredClone(this.doc);
-        next.consumers[key] = sequence;
-        this.write(next);
+        if (sequence !== confirmed)
+            this.write({ ...this.doc, consumers: { ...this.doc.consumers, [key]: sequence } });
         return { cursor, ack_semantics: 'durable_received' };
     }
     cursorSequence(group, cursor) { return this.decode(group, cursor); }

package/dist/server/agent/nativeProcessIdentity.js

@@ -11,8 +11,23 @@ export function nativeIdentityDirectory(config) {
     const expanded = c.directory.startsWith('~/') ? path.join(os.homedir(), c.directory.slice(2)) : c.directory;
     if (!path.isAbsolute(expanded))
         return null;
-    const directory = path.resolve(expanded), relative = path.relative(os.homedir(), directory);
-    return relative && relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative) ? directory : null;
+    const directory = path.resolve(expanded), home = os.homedir();
+    const within = (root) => {
+        const relative = path.relative(root, directory);
+        return !!relative && relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
+    };
+    if (within(home))
+        return directory;
+    // cwd is canonicalized before launch. A symlinked home may therefore have
+    // two legitimate spellings even before the lock directory is created.
+    // Accept only the real home alias; the live provider still verifies the
+    // actual directory ownership, realpath, FD/inode, starttime and kernel lock.
+    try {
+        return within(fs.realpathSync(home)) ? directory : null;
+    }
+    catch {
+        return null;
+    }
 }
 /** Administrator-declared profile scope, never inferred from process env.
  * {cwd} is permitted only as a leading directory anchor and cannot escape it. */

package/dist/server/routes/terminal.js

@@ -77,6 +77,8 @@ import { CollaborationError } from '../agent/collaborationProtocol.js';
 import { resolveCollaborationBackend, resolveCollaborationSessionId } from '../agent/sessionBindingRecovery.js';
 import { CollaborationRoutingStore, selectCollaborationPane, selectDrivePane, assessCollaborationRouteIdentity } from '../agent/collaborationRouting.js';
 import { selectRecoveredIntegrationBinding } from '../agent/integrationRecoveryBinding.js';
+import { assertDetachedCloseOwnership } from '../agent/integrationCloseOwnership.js';
+import { readTmuxLayout, readTmuxLayouts } from '../utils/tmuxLayoutReader.js';
 import { CollaborationDeliveryWorker } from '../agent/collaborationDeliveryWorker.js';
 import { approveCollaborationDialog, captureTmuxPaneHistory, captureTmuxPaneText, sendTmuxPaneKey, writeCollaborationTmuxPane } from '../agent/collaborationTmuxDelivery.js';
 import { listAllHookAgents, refreshStaleHooksAtLaunch, installHooksForSlug, uninstallHooksForSlug, } from '../agent/installers.js';
@@ -1724,9 +1726,9 @@ function formatLocalCollaborationMessages(frontendSessionId, messages) {
 async function inspectCollaborationTmux(binding, requestedPane, allowPlainPane = false, nativeProcessIdentity = false, freshProcess = false, describeNativeFailure = false, identityOverride) {
     if (!binding.tmuxSessionName)
         return { state: 'offline', reason: 'TMUX_BINDING_MISSING' };
-    const name = `=${binding.tmuxSessionName}`;
+    let layout;
     try {
-        await runTmux(['has-session', '-t', name]);
+        layout = await getTmuxLayout(binding.tmuxSessionName);
     }
     catch (error) {
         if (/can't find session|no server running|no sessions|error connecting.*No such file/i.test(getErrorMessage(error))) {
@@ -1734,10 +1736,9 @@ async function inspectCollaborationTmux(binding, requestedPane, allowPlainPane =
         }
         throw error;
     }
-    const layout = await getTmuxLayout(binding.tmuxSessionName);
     if (layout.sessionName !== binding.tmuxSessionName)
         throw new Error('TMUX_SESSION_IDENTITY_CHANGED');
-    const serverPid = Number((await runTmux(['display-message', '-p', '#{pid}'])).trim());
+    const serverPid = Number(layout.serverPid);
     if (!Number.isInteger(serverPid) || serverPid <= 0)
         throw new Error('TMUX_SERVER_IDENTITY_UNAVAILABLE');
     if ((nativeProcessIdentity || freshProcess) && process.platform === 'linux')
@@ -2150,11 +2151,16 @@ async function integrationTmuxPresent(record) {
         throw error;
     }
 }
+function integrationRuntimeRegistered(record) {
+    return !!integrationTerminalRecord(record)
+        || [...terminalSessions.values()].some(s => s.mode === 'tmux' && s.tmuxSessionName === `wt-integration-${record.session_id}`)
+        || !!collaborationStore.getGroup(record.group_id)?.sessionIds.includes(record.session_id);
+}
 async function verifyIntegrationRuntimeOwnership(record) {
     await integrationSessionAdapter.prepareRelease(record);
     const terminal = integrationTerminalRecord(record);
-    if (terminal && globalSessionState.sessions.some(other => other.sessionId !== record.session_id
-        && (other.tmuxSessionName === terminal.tmuxSessionName || terminal.backendSessionId && other.backendSessionId === terminal.backendSessionId))) {
+    if (globalSessionState.sessions.some(other => other.sessionId !== record.session_id
+        && (other.tmuxSessionName === `wt-integration-${record.session_id}` || terminal?.backendSessionId && other.backendSessionId === terminal.backendSessionId))) {
         integrationError('SESSION_IDENTITY_MISMATCH', 'Runtime has another logical owner', 409);
     }
 }
@@ -2174,14 +2180,36 @@ async function forgetIntegrationRuntime(record) {
 async function observeIntegrationCloseTarget(record) {
     await verifyIntegrationRuntimeOwnership(record);
     const terminal = integrationTerminalRecord(record);
-    if (!terminal || !record.terminal_binding)
-        integrationError('SESSION_CLOSE_TARGET_UNCONFIRMED', 'Original runtime binding is unavailable', 409);
-    const inspected = await inspectCollaborationTmux({ sessionId: record.session_id, backendSessionId: terminal.backendSessionId,
-        mode: 'tmux', tmuxSessionName: terminal.tmuxSessionName, agentSlug: record.agent_slug,
-        nativeSessionId: record.agent_native_session_id, pane: record.terminal_binding }, undefined, false, true);
+    const detached = !terminal;
+    const sessionName = terminal?.tmuxSessionName ?? `wt-integration-${record.session_id}`;
+    let backendSessionId = terminal?.backendSessionId ?? null;
+    if (!record.terminal_binding)
+        integrationError('SESSION_CLOSE_TARGET_UNCONFIRMED', 'Original persisted pane binding is unavailable', 409);
+    if (!terminal) {
+        if (process.platform !== 'linux' || !record.agent_native_session_id)
+            integrationError('SESSION_CLOSE_TARGET_UNCONFIRMED', 'Missing terminal registration requires a current Linux writer-lock native identity', 409);
+        const owners = await integrationRecoveryOwnership(record);
+        collaborationRouting.assertReadable();
+        const backends = [...terminalSessions].filter(([, backend]) => backend.mode === 'tmux' && backend.tmuxSessionName === sessionName);
+        const group = collaborationStore.getGroup(record.group_id);
+        assertDetachedCloseOwnership({ sessionId: record.session_id, groupId: record.group_id, principalId: record.principal_id,
+            ...owners, localGroup: !!group && !group.deleted && !group.federated,
+            groupOwners: collaborationStore.groupsForSession(record.session_id).map(g => g.id),
+            terminalClaims: globalSessionState.sessions.filter(s => s.sessionId === record.session_id || s.tmuxSessionName === sessionName).length,
+            backendClaims: backends.map(([id]) => ({ routeOwner: collaborationRouting.ownerOfBackend(id),
+                foreignTerminal: globalSessionState.sessions.some(s => s.backendSessionId === id && s.sessionId !== record.session_id) })),
+            otherPaneOwner: collaborationRouting.hasOtherPaneOwner(record.session_id, record.terminal_binding),
+        });
+        // Local observation context only: never insert/adopt a global terminal or
+        // backend, revive a released session, or alter delivery routing.
+        backendSessionId = backends[0]?.[0] ?? null;
+    }
+    const inspected = await inspectCollaborationTmux({ sessionId: record.session_id, backendSessionId,
+        mode: 'tmux', tmuxSessionName: sessionName, agentSlug: record.agent_slug,
+        nativeSessionId: record.agent_native_session_id, pane: record.terminal_binding }, undefined, false, true, true, false, integrationNativeIdentity(record));
     if (inspected.state !== 'ready' || !inspected.pane)
         integrationError('SESSION_CLOSE_TARGET_UNCONFIRMED', 'Original pinned pane cannot be verified', 409);
-    const layout = await getTmuxLayout(terminal.tmuxSessionName);
+    const layout = await getTmuxLayout(sessionName);
     const panes = layout.windows.flatMap(window => window.panes);
     if (panes.length !== 1 || layout.activePaneId !== record.terminal_binding.paneId)
         integrationError('SESSION_IDENTITY_MISMATCH', 'Only the single original owned pane can be closed', 409);
@@ -2201,11 +2229,15 @@ async function observeIntegrationCloseTarget(record) {
         const identity = await observeProgramNativeIdentity(agent, program, integrationNativeIdentity(record));
         if (identity.failure || identity.nativeId !== record.agent_native_session_id)
             integrationError('SESSION_IDENTITY_MISMATCH', 'Current Agent native identity differs from the owned record', 409);
+        if (detached && identity.source !== 'linux-flock-owner')
+            integrationError('SESSION_CLOSE_TARGET_UNCONFIRMED', 'Missing terminal registration requires independent live writer-lock proof, not argv or a cached UUID', 409);
         kind = 'agent';
         pid = program.processPid;
         nativeId = identity.nativeId;
     }
     else {
+        if (detached)
+            integrationError('SESSION_CLOSE_TARGET_UNCONFIRMED', 'Missing terminal registration cannot authorize closing an unproven shell or another program', 409);
         if (!await integrationPaneIsIdleShell(inspected.pane))
             integrationError('SESSION_CLOSE_TARGET_UNCONFIRMED', 'Current runtime is not a verified foreground shell', 409);
         kind = 'shell';
@@ -2246,6 +2278,25 @@ export const integrationSessionAdapter = {
         await verifyIntegrationRuntimeOwnership(record);
         return await integrationTmuxPresent(record) ? observeIntegrationCloseTarget(record) : null;
     },
+    async closeDiagnostics(record) {
+        const report = { checked_at: Date.now(), terminal_registration_present: false, binding_present: !!record.terminal_binding,
+            runtime_present: null, target_confirmed: false, pending_messages: collaborationStore.pendingCount(record.session_id),
+            code: null, target: null };
+        try {
+            report.terminal_registration_present = !!integrationTerminalRecord(record);
+            report.runtime_present = await integrationSessionAdapter.runtimePresent(record);
+            if (await integrationTmuxPresent(record)) {
+                report.target = await observeIntegrationCloseTarget(record);
+                report.target_confirmed = true;
+            }
+            else
+                report.code = report.runtime_present ? 'SESSION_CLOSE_TARGET_UNCONFIRMED' : 'SESSION_RUNTIME_ABSENT';
+        }
+        catch (error) {
+            report.code = typeof error.code === 'string' ? error.code : 'SESSION_CLOSE_OBSERVATION_FAILED';
+        }
+        return report;
+    },
     async closeRuntime(record, reconcile) {
         await closeSessionRuntime({
             barrier: action => collaborationDeliveryWorker.reconfigure(record.session_id, action),
@@ -2290,14 +2341,22 @@ export const integrationSessionAdapter = {
             resume: getPluginResumeConfig(agent.slug) ?? command, nativeIdentity: integrationNativeIdentity(record) ?? getPluginNativeIdentityConfig(agent.slug) ?? null };
     },
     async runtimePresent(record) {
-        if (integrationTerminalRecord(record))
-            return true;
-        if ([...terminalSessions.values()].some(s => s.mode === 'tmux' && s.tmuxSessionName === `wt-integration-${record.session_id}`))
-            return true;
-        if (collaborationStore.getGroup(record.group_id)?.sessionIds.includes(record.session_id))
+        if (integrationRuntimeRegistered(record))
             return true;
         return integrationTmuxPresent(record);
     },
+    async runtimePresenceBatch(records) {
+        let names;
+        try {
+            names = new Set((await runTmux(['list-sessions', '-F', '#{session_name}'])).trimEnd().split('\n'));
+        }
+        catch (error) {
+            if (!/no server running|no sessions|error connecting.*No such file/i.test(getErrorMessage(error)))
+                throw error;
+            names = new Set();
+        }
+        return new Map(records.map(record => [record.session_id, integrationRuntimeRegistered(record) || names.has(`wt-integration-${record.session_id}`)]));
+    },
     async release(record, reconcile) {
         await releaseSessionRuntime({
             barrier: action => collaborationDeliveryWorker.reconfigure(record.session_id, action),
@@ -2339,8 +2398,11 @@ export const integrationSessionAdapter = {
     },
     async inspect(record) {
         const terminal = integrationTerminalRecord(record);
-        if (!terminal)
+        if (!terminal) {
+            if (await integrationTmuxPresent(record))
+                integrationError('SESSION_TERMINAL_REGISTRATION_MISSING', 'Owned tmux exists but its active TD terminal registration is missing; use administrator close-diagnostics', 409);
             return { exists: false, running: false, shell: false, agentSlug: null, nativeId: null };
+        }
         const binding = { sessionId: record.session_id, backendSessionId: terminal.backendSessionId,
             mode: 'tmux', tmuxSessionName: terminal.tmuxSessionName, agentSlug: record.agent_slug,
             nativeSessionId: record.agent_native_session_id, pane: record.terminal_binding ?? null };
@@ -5069,166 +5131,12 @@ async function prepareManagedTmuxSession(sessionName, cwd) {
     await tmuxLifecycle.run(`prepare:${sessionName}`, () => prepareManagedTmuxSessionUnlocked(sessionName, cwd));
 }
 async function getTmuxLayout(sessionName) {
-    const sessionInfoRaw = (await runTmux([
-        'display-message',
-        '-t',
-        sessionName,
-        '-p',
-        `#{session_id}${TMUX_DELIMITER}#{session_name}${TMUX_DELIMITER}#{window_id}${TMUX_DELIMITER}#{pane_id}${TMUX_DELIMITER}#{pane_in_mode}`,
-    ])).trim();
-    const sessionInfo = parseDelimitedRow(sessionInfoRaw, 5);
-    if (!sessionInfo) {
-        throw new Error(`Failed to parse tmux session info: ${sessionInfoRaw}`);
-    }
-    const [sessionId, resolvedSessionName, activeWindowId, activePaneId, paneInMode] = sessionInfo;
-    const windowsRaw = await runTmux([
-        'list-windows',
-        '-t',
-        sessionName,
-        '-F',
-        `#{window_id}${TMUX_DELIMITER}#{window_name}${TMUX_DELIMITER}#{window_index}${TMUX_DELIMITER}#{window_active}`,
-    ]);
-    const windows = [];
-    for (const line of windowsRaw.trim().split('\n')) {
-        if (!line) {
-            continue;
-        }
-        const row = parseDelimitedRow(line, 4);
-        if (!row) {
-            continue;
-        }
-        const [windowId, windowName, windowIndexRaw, windowActiveRaw] = row;
-        const panesRaw = await runTmux([
-            'list-panes',
-            '-t',
-            windowId,
-            '-F',
-            `#{pane_id}${TMUX_DELIMITER}#{pane_index}${TMUX_DELIMITER}#{pane_active}${TMUX_DELIMITER}#{pane_width}${TMUX_DELIMITER}#{pane_height}${TMUX_DELIMITER}#{pane_top}${TMUX_DELIMITER}#{pane_left}${TMUX_DELIMITER}#{pane_current_command}${TMUX_DELIMITER}#{pane_pid}${TMUX_DELIMITER}#{pane_tty}${TMUX_DELIMITER}#{pane_title}${TMUX_DELIMITER}#{pane_current_path}`,
-        ]);
-        const panes = panesRaw.trim().split('\n').filter(Boolean).map((paneLine) => {
-            const paneRow = parseDelimitedRow(paneLine, 12);
-            if (!paneRow) {
-                return null;
-            }
-            const [paneId, paneIndexRaw, paneActiveRaw, widthRaw, heightRaw, topRaw, leftRaw, command, pidRaw, tty, title, currentPath] = paneRow;
-            return {
-                id: paneId,
-                index: parseInt(paneIndexRaw || '0', 10),
-                active: paneActiveRaw === '1',
-                width: parseInt(widthRaw || '0', 10),
-                height: parseInt(heightRaw || '0', 10),
-                top: parseInt(topRaw || '0', 10),
-                left: parseInt(leftRaw || '0', 10),
-                command: command || '',
-                pid: parseInt(pidRaw || '0', 10) || 0,
-                tty: tty || '',
-                title: title || '',
-                currentPath: currentPath || '',
-            };
-        }).filter((pane) => pane !== null);
-        windows.push({
-            id: windowId,
-            name: windowName || '',
-            index: parseInt(windowIndexRaw || '0', 10),
-            active: windowActiveRaw === '1',
-            panes,
-        });
-    }
-    return {
-        sessionId,
-        sessionName: resolvedSessionName,
-        windows,
-        activeWindowId,
-        activePaneId,
-        inCopyMode: paneInMode === '1',
-    };
+    return readTmuxLayout(runTmux, sessionName);
 }
 let tmuxLayoutsSnapshot = null;
 let tmuxLayoutsSnapshotPromise = null;
 async function buildTmuxLayoutsSnapshot() {
-    const [sessionsRaw, windowsRaw, panesRaw] = await Promise.all([
-        runTmux([
-            'list-sessions',
-            '-F',
-            `#{session_id}${TMUX_DELIMITER}#{session_name}${TMUX_DELIMITER}#{window_id}${TMUX_DELIMITER}#{pane_id}${TMUX_DELIMITER}#{pane_in_mode}`,
-        ]),
-        runTmux([
-            'list-windows',
-            '-a',
-            '-F',
-            `#{session_name}${TMUX_DELIMITER}#{window_id}${TMUX_DELIMITER}#{window_name}${TMUX_DELIMITER}#{window_index}${TMUX_DELIMITER}#{window_active}`,
-        ]),
-        runTmux([
-            'list-panes',
-            '-a',
-            '-F',
-            `#{session_name}${TMUX_DELIMITER}#{window_id}${TMUX_DELIMITER}#{pane_id}${TMUX_DELIMITER}#{pane_index}${TMUX_DELIMITER}#{pane_active}${TMUX_DELIMITER}#{pane_width}${TMUX_DELIMITER}#{pane_height}${TMUX_DELIMITER}#{pane_top}${TMUX_DELIMITER}#{pane_left}${TMUX_DELIMITER}#{pane_current_command}${TMUX_DELIMITER}#{pane_pid}${TMUX_DELIMITER}#{pane_tty}${TMUX_DELIMITER}#{pane_title}${TMUX_DELIMITER}#{pane_current_path}`,
-        ]),
-    ]);
-    const layouts = new Map();
-    for (const line of sessionsRaw.trim().split('\n')) {
-        if (!line)
-            continue;
-        const row = parseDelimitedRow(line, 5);
-        if (!row)
-            continue;
-        const [sessionId, sessionName, activeWindowId, activePaneId, paneInMode] = row;
-        layouts.set(sessionName, {
-            sessionId,
-            sessionName,
-            windows: [],
-            activeWindowId,
-            activePaneId,
-            inCopyMode: paneInMode === '1',
-        });
-    }
-    const windowsById = new Map();
-    for (const line of windowsRaw.trim().split('\n')) {
-        if (!line)
-            continue;
-        const row = parseDelimitedRow(line, 5);
-        if (!row)
-            continue;
-        const [sessionName, windowId, windowName, windowIndexRaw, windowActiveRaw] = row;
-        const layout = layouts.get(sessionName);
-        if (!layout)
-            continue;
-        const window = {
-            id: windowId,
-            name: windowName || '',
-            index: parseInt(windowIndexRaw || '0', 10),
-            active: windowActiveRaw === '1',
-            panes: [],
-        };
-        layout.windows.push(window);
-        windowsById.set(`${sessionName}\0${windowId}`, window);
-    }
-    for (const line of panesRaw.trim().split('\n')) {
-        if (!line)
-            continue;
-        const row = parseDelimitedRow(line, 14);
-        if (!row)
-            continue;
-        const [sessionName, windowId, paneId, paneIndexRaw, paneActiveRaw, widthRaw, heightRaw, topRaw, leftRaw, command, pidRaw, tty, title, currentPath] = row;
-        const window = windowsById.get(`${sessionName}\0${windowId}`);
-        if (!window)
-            continue;
-        window.panes.push({
-            id: paneId,
-            index: parseInt(paneIndexRaw || '0', 10),
-            active: paneActiveRaw === '1',
-            width: parseInt(widthRaw || '0', 10),
-            height: parseInt(heightRaw || '0', 10),
-            top: parseInt(topRaw || '0', 10),
-            left: parseInt(leftRaw || '0', 10),
-            command: command || '',
-            pid: parseInt(pidRaw || '0', 10) || 0,
-            tty: tty || '',
-            title: title || '',
-            currentPath: currentPath || '',
-        });
-    }
-    return layouts;
+    return readTmuxLayouts(runTmux);
 }
 async function getCachedTmuxLayout(sessionName) {
     if (tmuxLayoutsSnapshot && Date.now() - tmuxLayoutsSnapshot.fetchedAt < TMUX_LAYOUT_CACHE_TTL_MS) {

package/dist/server/utils/tmuxLayoutReader.js

@@ -0,0 +1,74 @@
+const separator = '\x1f';
+export const TMUX_LAYOUT_FORMAT = [
+    'pid', 'session_id', 'session_name', 'window_id', 'window_name', 'window_index', 'window_active',
+    'pane_id', 'pane_index', 'pane_active', 'pane_width', 'pane_height', 'pane_top', 'pane_left',
+    'pane_current_command', 'pane_pid', 'pane_tty', 'pane_title', 'pane_in_mode', 'pane_current_path',
+].map(field => `#{${field}}`).join(separator);
+export function parseTmuxLayout(stdout, requestedName) {
+    let layout;
+    const windows = new Map(), ids = new Set();
+    for (const line of stdout.trimEnd().split('\n')) {
+        if (!line)
+            continue;
+        const columns = line.replaceAll('\\037', separator).replaceAll('\\x1f', separator).split(separator);
+        if (columns.length < 20)
+            throw new Error('TMUX_LAYOUT_UNAVAILABLE');
+        const [server, sessionId, sessionName, windowId, name, windowIndex, windowActive, id, index, active, width, height, top, left, command, pid, tty, title, inMode] = columns;
+        const serverPid = Number(server);
+        if (!Number.isSafeInteger(serverPid) || serverPid <= 0 || sessionName !== requestedName || !sessionId || !windowId || !id
+            || ids.has(id) || layout && (layout.serverPid !== serverPid || layout.sessionId !== sessionId))
+            throw new Error('TMUX_SESSION_IDENTITY_CHANGED');
+        ids.add(id);
+        layout ??= { serverPid, sessionId, sessionName, windows: [], activeWindowId: '', activePaneId: '', inCopyMode: false };
+        let window = windows.get(windowId);
+        if (!window) {
+            window = { id: windowId, name, index: Number(windowIndex), active: windowActive === '1', panes: [] };
+            windows.set(windowId, window);
+            layout.windows.push(window);
+        }
+        else if (window.name !== name || window.index !== Number(windowIndex) || window.active !== (windowActive === '1')) {
+            throw new Error('TMUX_SESSION_IDENTITY_CHANGED');
+        }
+        const pane = { id, index: Number(index), active: active === '1', width: Number(width), height: Number(height),
+            top: Number(top), left: Number(left), command, pid: Number(pid), tty, title, currentPath: columns.slice(19).join(separator) };
+        if (![window.index, pane.index, pane.width, pane.height, pane.top, pane.left, pane.pid].every(Number.isSafeInteger)
+            || pane.pid <= 0)
+            throw new Error('TMUX_LAYOUT_UNAVAILABLE');
+        window.panes.push(pane);
+        if (window.active && pane.active) {
+            if (layout.activePaneId)
+                throw new Error('TMUX_SESSION_IDENTITY_CHANGED');
+            layout.activeWindowId = window.id;
+            layout.activePaneId = pane.id;
+            layout.inCopyMode = inMode === '1';
+        }
+    }
+    if (!layout || !layout.activePaneId)
+        throw new Error('TMUX_LAYOUT_UNAVAILABLE');
+    layout.windows.sort((a, b) => a.index - b.index);
+    for (const window of layout.windows)
+        window.panes.sort((a, b) => a.index - b.index);
+    return layout;
+}
+export async function readTmuxLayout(run, sessionName) {
+    return parseTmuxLayout(await run(['list-panes', '-s', '-t', `=${sessionName}:`, '-F', TMUX_LAYOUT_FORMAT]), sessionName);
+}
+export async function readTmuxLayouts(run) {
+    const rows = new Map();
+    for (const row of (await run(['list-panes', '-a', '-F', TMUX_LAYOUT_FORMAT])).trimEnd().split('\n')) {
+        const name = row.replaceAll('\\037', separator).replaceAll('\\x1f', separator).split(separator)[2];
+        if (!name)
+            continue;
+        const lines = rows.get(name) ?? [];
+        lines.push(row);
+        rows.set(name, lines);
+    }
+    const layouts = new Map();
+    for (const [name, lines] of rows) {
+        try {
+            layouts.set(name, parseTmuxLayout(lines.join('\n'), name));
+        }
+        catch { /* UI discovery can fall back to an exact fresh read of that session. */ }
+    }
+    return layouts;
+}

package/docs/integrations.md

@@ -1394,3 +1394,80 @@ wrapper 负责实际设置 Agent 自己的数据目录、准备 hooks/参数，
 - 终端输出触发的后台会话观察按 250ms 窗口合并；一轮观察期间的新通知安排到后续一轮，不连续抢占。显式 `session get`、生命周期操作及投递前核验保留原路径，不以此窗口判断 Agent 可输入；不延迟业务输入来猜测应用状态。同一次 integration 观察复用其新鲜 tmux layout，下一次观察重新读取，不把缓存用作身份写入凭据。
 
 无删除消息/事件、缩短历史、停用消费者、额外 Enter 或正文重发。`pty_written` 仍只代表终端写入调用完成，不代表应用提交或任务完成。回归包含约 26 MB journal 的空/重复追加零克隆、相同群同步零写入、真实变化/持久化失败重试、授权后历史补收、通知洪峰合并、换 pane/原生身份冲突拒绝。生产 CPU、事件循环延迟和 health 改善须在实际维护窗升级后对比采样，不能用隔离基准代替实机验收。
+
+## 1.4.348：真实提交、事件推送与 tmux 查询
+
+本轮透明性能优化不改变现有接口、JSON journal 格式、保留策略、权限、消息/ACK 语义或默认交互。实际运行服务需升级到 **1.4.348**；不是仅替换 CLI 文件。性能修复无新增权限或配置。
+
+- 真实事件/ACK/授权变更采用 copy-on-write，仅复制发生变化的容器与新事件，不再深拷贝整个 journal。内部已提交事实由 store 独占且不修改，公共 page/policy 返回独立副本；调用者修改输入或返回值不影响历史或编码缓存。
+- 未变化事件与元数据复用 UTF-8 编码，按有界向量写入临时文件，不再为大小检查和落盘重复生成全库 JSON，也避免临时巨型 UTF-16 字符串。64 MiB 上限检查覆盖实际待写全部字节。短写、Unicode 字节边界与 EINTR 均保留位置；文件 fsync → 原子 rename → 目录 fsync 后才发布提交结果。中途失败不推进内存 source/consumer 状态，不向订阅者报告成功；重试仍沿原来源/游标。
+- 同 cursor 重复 ACK 在权限、consumer、cursor、rewind、retention 检查后 no-op；HTTP 的已发送连续前缀检查仍先执行。此前已持久确认的进度不再次克隆/写盘/fsync，不能借相等游标绕过撤权或保留缺口。重复 revoke 也不重写未变化状态。
+- 事件按组建引用索引，并按 sequence 二分定位 page；仅公开 page 复制最多 100 条返回事实。主动推送复用已编码事实，不为每个 consumer 重复制/重编码历史 payload，保留原 NDJSON 字段、顺序、背压、授权复核及断线重放边界。
+- 新鲜 session layout 由一次只读 `list-panes -s` 获取 server/session/window/pane 元数据；常见单窗口的 integration 观察从 5 次 tmux 命令降到 1 次，另行原生进程/锁核验保持。侧栏原有多会话 layout 缓存的数据获取也由 3 次全局查询改为 1 次；缓存仍只服务原有发现用途。没有启用持久 attach/control client，不新增 client、改尺寸、焦点、copy-mode 或发送输入。
+- 同轮已关闭/释放且已确认零承载的后台存在性观察用一次新鲜会话名查询合并。结果仅用于该轮、且 descriptor 完整快照不变时才复用；批量查询失败、记录改变、操作不确定或进行中的生命周期走原逐项核验。显式 get、close/release/restore、实际投递前身份核验不使用该后台结果。
+
+仍是兼容的全量 JSON 快照落盘：真实提交的物理写入量和同步 fsync 等待未变为增量日志或异步存储，慢磁盘仍可能阻塞。不能把隔离基准解释为所有 HTTPS 长尾已解决。服务重启会重建内存索引/编码缓存，首次提交需编码保留事实；不会删除历史换取速度，也不会暂停业务消费者。
+
+回归覆盖重复 ACK 零克隆/编码/写入、真实持久提交与中途写入/fsync 失败后重试、短写与 Unicode、64 MiB 精确字节上限、输入/输出不可修改历史、分页/保留缺口/撤权、推送事实等价，以及隔离真实 tmux 的多窗口/分屏/激活 pane/copy-mode 与 client/PID/尺寸不变。Linux 维护机验证不代替 macOS 实机或私有 Agent 的业务验收。生产升级须与共享服务的在途任务和维护窗协调，不能因为收到版本通知就自动重启别人的实验。
+
+同时修复独立 profile 目录的 home 别名误拒：当逻辑 home 指向真实 home，规范化 cwd 下的 `{cwd}` 路径可匹配逻辑 home 或 `realpath(home)` 的严格子目录；不会将同名前缀兄弟目录视为 home，不创建尚不存在的锁目录。实际 provider 继续核验 canonicalHome、目录权限、精确进程实例、FD/inode 和内核持锁关系。Linux capabilities 新增 `session_profile_native_identity_home_aliases=true` 及 `session_profile_native_identity_home_aliases_min_version="1.4.348"`。旧 profile 快照不迁移，不自动 retry/create；347 的 `~/` 每 job 精确路径声明仍可沿原契约使用，更新同一 profile 与捕获快照需要由接入方串行协调。
+
+## 1.4.349：活动终端登记缺失时的受限关闭与只读诊断
+
+问题是三个不同的事实层可能不一致：持久 IntegrationSession 仍有原 native UUID 与完整 pane 绑定，tmux/Agent 仍存在，但全局活动终端登记已经缺失。348 的 close 先依赖该登记，因而在真实身份核验之前拒绝；inspect 也可能将登记缺失表现为 `AGENT_NOT_RUNNING`。349 对仍存在 tmux 的缺登记观察改报 `SESSION_TERMINAL_REGISTRATION_MISSING`，不据此推断程序退出。这不解释或修复所有登记丢失的起因，也不自动重建 UI 记录、恢复会话或认领未知进程。
+
+最低 CLI / 实际服务 **1.4.349**，管理员和所属 principal capabilities：
+
+- `session_close_diagnostics=true`、`session_close_diagnostics_min_version="1.4.349"`。
+- Linux 上 `session_close_detached_registration=true`、`session_close_detached_registration_min_version="1.4.349"`；其它平台 false。没有新增 principal 权限，关闭仍需原 `session.close`，诊断仅管理员。
+
+管理员正式只读入口：
+
+```sh
+td integration close-diagnostics <原TD-session-id>
+```
+
+走原本机管理员 Unix socket，`GET /admin/sessions/:id/close-diagnostics`，返回：
+
+```json
+{
+  "session_id": "原逻辑ID",
+  "operation_id": "当前operation",
+  "generation": 2,
+  "close_diagnostics": {
+    "checked_at": 1790000000000,
+    "terminal_registration_present": false,
+    "binding_present": true,
+    "runtime_present": true,
+    "pending_messages": 0,
+    "target_confirmed": true,
+    "code": null,
+    "target": {
+      "binding": {"serverPid": 101, "sessionId": "$2", "paneId": "%2", "panePid": 102, "agentSlug": "已登记Agent", "nativeSessionId": "原UUID"},
+      "tmux_server_start_id": "linux:1000",
+      "kind": "agent",
+      "process_pid": 103,
+      "process_start_id": "linux:1001",
+      "native_id": "原UUID"
+    }
+  }
+}
+```
+
+这是字段示例，不代表某一现场已核验。诊断不调用 session get/refresh、不改变 descriptor/代次/路由/组，不启动或终止进程、不输入按键。`target` 只包含原 pane、当前进程实例和已证明 UUID，不读/返回 argv、环境或终端正文。记录在异步观察期间变化时丢弃 target，返回 `SESSION_CLOSE_TARGET_CHANGED`。`target_confirmed` 只表示本次目标核验通过，不等于后续关闭授权/成功；pending、进行中生命周期、当前代次等仍由真正 close 独立检查。观察失败保留 `target=null` 和准确 code；无法观察运行存在性时为 null，不假装已消失。已有 `td integration diagnostics` 仍只读原 launch/restore 持久诊断。
+
+缺活动登记时，现有显式 `session close` 只在以下证据全部满足后工作：
+
+1. 全机持久 IntegrationSession 只有一个 descriptor 声明该 session/principal/组；principal 未撤销且归属唯一；当前本机组仍存在且该成员只归属此组。组的 archived 显示元数据不影响此核验；缺组、跨服务组、重复/跨组归属拒绝。
+2. 无其它全局终端声明该逻辑 ID 或保留 tmux 名，无重复 backend、其它逻辑 owner 或冲突 route/pane owner；routing 不可读也拒绝。
+3. 保留名精确为 `wt-integration-<原ID>`，实时 server/session/pane/PID 全部等于持久原绑定，只有一个 pane，且未链接到其它 tmux session。不是仅凭名称、cwd、显示名、短 pane ID 或 PID 存在认领。
+4. 当前实际前台是原 Agent 类型，当前 Linux `linux-flock-owner` provider 独立证明原 UUID，并核验进程 starttime、FD/inode、权限及 kernel flock。argv/resume UUID、旧缓存或单纯 shell 观察不能给缺登记会话授权关闭；未安装相应只读身份 provider 时继续拒绝，不扩大为任意 Agent 黑盒支持。
+5. 沿原生命周期串行、worker 屏障、pending 检查、generation/CAS 和稳定幂等键，先持久化 close intent，再重新核验完整目标与进程实例，使用不可变 tmux session ID 终止一次。失败/重启结果不明沿现有 close 对账，不重复终止。并发外部 tmux 操作仍有系统级竞争边界，连续核验不能宣称绝对原子。
+
+无活动登记不再单独阻止已充分证明的目标关闭；未提供 force/裸 UUID/按名清理入口。没有补建 active terminal、backend 或网页客户端，没有修改旧 profile/启动配置、投递正文、重放消息或重新打开归档组。`closed` 仍保留逻辑记录、诊断、消息、工作目录和原生历史并拒绝 send/reply/restore；不是 release。
+
+现场接入先升级并核验 **实际服务** 两项 capability，再对原 ID 运行管理员 close-diagnostics。确认归属与 `target_confirmed` 后，由原 principal 正式 get 读当前 generation；若仍与原请求一致，沿原 generation/原 key 重试原 close。若 generation 已改变，先对账原请求，不擅自换 key；无历史 intent 的新关闭需据新代次明确生成新操作键。最终 get 必须确认 `closed/runtime_present=false/terminal_binding=null/close_pending=false`，并核对旧 pane/进程确已消失；诊断通过或 API 请求成功本身不代替回收验证。
+
+错误包括 `SESSION_CLOSE_OWNERSHIP_UNCONFIRMED`（持久 owner/本机组不唯一或缺失）、`SESSION_IDENTITY_MISMATCH`（其它声明或实际 native 冲突）、`SESSION_CLOSE_TARGET_UNCONFIRMED`（原绑定/实时 writer-lock/前台实例不足）、`SESSION_CLOSE_TARGET_CHANGED`、`SESSION_PENDING_MESSAGES` 及原有代次/权限/生命周期错误。管理员报告不能越过这些检查。
+
+回归包含唯一及重复/撤销/跨组/跨服务归属、缺登记精确关闭、argv-only/错误 UUID/换 pane/换进程拒绝、缺登记准确错误、诊断无副作用及代次变化丢弃、Unix 管理权限与 CLI capability 门控、原关闭意图/幂等/重启和失败 shell 兼容；隔离真实 tmux 验证只终止精确目标并保留邻接会话。该 tmux 测试用可控身份夹具，Linux 原生 writer-lock provider 另有真实内核/FD/starttime 回归；私有 TraeX 和上述远端目标仍须由接入方在维护窗实机验收，不以合成测试冒充。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termdock",
-  "version": "1.4.347",
+  "version": "1.4.349",
   "description": "A complete web-based terminal application with modern UI",
   "type": "module",
   "main": ".desktop-dist/main.js",

package/runtime-manifest.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": 1,
   "packageName": "termdock",
-  "version": "1.4.347",
+  "version": "1.4.349",
   "runtimeProtocolVersion": 1,
   "minimumDesktopVersion": "1.4.46",
   "nodeMajor": 22,
   "dependencyHash": "sha256-ObG1OGq7e7fMFQmYoPxPp3jRodEusYHulVNa5mT1aW8=",
-  "serverBundleHash": "sha256-FXUdT0eV3/+rgHBnc0Jg9dn2sAb4hcLY83xScGapcKQ=",
+  "serverBundleHash": "sha256-2vXkNt6WtThYWY+7lOPI2qTULTqt2YLY6DEiMlTBb7k=",
   "clientBundleHash": "sha256-kn3Tg+BTj+H4rZe0g9OE5JUEQNsBGiUSGew8Epm5A38=",
   "entrypoint": "dist/server/cli.js",
   "clientEntrypoint": "dist/client/index.html"