termdock 1.4.350 → 1.4.352

package/dist/client/sw.js

@@ -1 +1 @@
-if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let c={};const r=e=>n(e,o),d={module:{uri:o},exports:c,require:r};s[o]=Promise.all(i.map(e=>d[e]||r(e))).then(e=>(a(...e),c))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"3168c3a96b6b28066432b083cbf3a4ef"},{url:"assets/app-CKAFlgMD.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-Dea8wJF3.js",revision:null},{url:"assets/index-DtPsPZ7W.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});
+if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let r={};const c=e=>n(e,o),d={module:{uri:o},exports:r,require:c};s[o]=Promise.all(i.map(e=>d[e]||c(e))).then(e=>(a(...e),r))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"d9f1254be198520fd331492bd81d83ec"},{url:"assets/app-BMJesFDU.js",revision:null},{url:"assets/react-XDCjal2T.js",revision:null},{url:"assets/dnd-BCFAPC0L.js",revision:null},{url:"assets/terminal-Dea8wJF3.js",revision:null},{url:"assets/index-CA1fR_jI.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});

package/dist/server/agent/collaborationDeliveryWorker.js

@@ -120,6 +120,17 @@ export class CollaborationDeliveryWorker {
         const pending = store.inbox(id, { pendingOnly: true, limit: 1 });
         if (!pending.length)
             return;
+        // Removal is an observed inventory fact, so this recipient cannot recover
+        // through a network retry. Preserve the message as a failed delivery.
+        if (route.state === 'offline' && (route.reason === 'SESSION_REMOVED' || route.reason === 'SESSION_REMOVED_DURING_RECOVERY')) {
+            const message = pending[0];
+            store.recordTransport(message.id, { ...store.diagnostic(message.id), relay_online: null, peer_reachable: false,
+                attempt_count: store.diagnostic(message.id)?.attempt_count ?? 0, next_retry_at: null,
+                last_error: route.reason, checked_at: Date.now(), route_state: route.state, route_diagnostics: route.diagnostics });
+            store.fail(message.id, route.reason);
+            this.failures.delete(id);
+            return;
+        }
         if (route.state !== 'ready' || !route.write) {
             this.retry(id, pending, route.reason ?? route.state, false, route);
             return;

package/dist/server/agent/collaborationPrompt.js

@@ -89,7 +89,7 @@ export function formatCollaborationDelivery(input) {
         const sourceSession = message.fromSessionId ? sessionsById.get(message.fromSessionId) : null;
         const source = message.fromSessionId
             ? sanitizeCollaborationName(sourceSession?.name ?? message.fromSessionId)
-            : message.integrationOrigin ? `后台接入 ${sanitizeCollaborationName(message.integrationOrigin.integrationId, 80)}` : '用户';
+            : message.integrationOrigin ? message.integrationOrigin.source === 'session-chat' ? '网页对话用户' : `后台接入 ${sanitizeCollaborationName(message.integrationOrigin.integrationId, 80)}` : '用户';
         const token = tokens.get(message.id) ?? message.id;
         const bytes = Buffer.byteLength(message.content);
         // A remote recipient's CLI cannot detect its identity (the session is not
@@ -103,7 +103,9 @@ export function formatCollaborationDelivery(input) {
         const fannedNames = (message.fanOutIds ?? [])
             .map((sessionId) => sanitizeCollaborationName(sessionsById.get(sessionId)?.name ?? sessionId));
         blocks.push(formatCollaborationMessage({ ...message, content: body }, source, fannedNames, fence, token));
-        if (message.integrationOrigin)
+        if (message.integrationOrigin?.source === 'session-chat')
+            blocks.push(`此消息来自用户的普通对话界面。请自然地与用户交流，并用 td collab --session ${input.targetSessionId} reply ${token} \"答复正文\" --response-kind result --idempotency-key <稳定唯一key> --text 将面向用户的答复写回对话。终端中的普通输出不会成为聊天回复。需要补充问题时也使用 reply；不要仅在终端打印答案。`);
+        else if (message.integrationOrigin)
             blocks.push(`此消息来自后台程序，使用原消息 id 回复：td collab --session ${input.targetSessionId} reply ${token} "答复正文" --response-kind result --idempotency-key <稳定唯一key> --text\n需要时用 --response-kind ack|progress 明确回复收到或进展；result 提交结果。回复持久保存为 stored 并主动推送给后台，不创建看板任务，不代表用户验收。`);
     }
     // The shell header names the group only when every block belongs to one;

package/dist/server/agent/collaborationRoutes.js

@@ -162,6 +162,8 @@ export function collaborationRoutes({ store, resolveSession, deliver, rebind, di
     };
     router.get('/capabilities', run((_req, res) => {
         res.json({ protocol_version: 2, server_version: getTermdockVersion(), limits: COLLAB_LIMITS,
+            relay_authorization_errors: true, relay_authorization_errors_min_version: '1.4.351',
+            relay_self_target_guard: true, relay_self_target_guard_min_version: '1.4.351',
             route_diagnostics: !!diagnoseRoute, route_identity_recovery: !!diagnoseRoute, route_identity_recovery_min_version: '1.4.321',
             agent_launch_generation_consistency: true, agent_launch_generation_consistency_min_version: '1.4.322',
             terminal_input_check_diagnostics: true,

package/dist/server/agent/collaborationStore.js

@@ -727,10 +727,16 @@ export class CollaborationStore {
             this.applyContext(incoming, this.context(group.id));
         if (existing && stableJson(existing) === stableJson(incoming))
             return;
+        // Remote directory snapshots contain output/observation timestamps that
+        // change on every poll. Keep them current for readers without rewriting
+        // the complete message journal or notifying durable-change subscribers.
+        const metadataChanged = !existing
+            || stableJson({ ...existing, remoteSessions: undefined }) !== stableJson({ ...incoming, remoteSessions: undefined });
         this.document.groups = [...this.document.groups.filter((item) => item.id !== group.id), incoming];
         if (group.deleted)
             this.document.messages = this.document.messages.filter((item) => item.groupId !== group.id);
-        this.persist();
+        if (metadataChanged)
+            this.persist();
     }
     /** Promote the source group and its complete history in one atomic file replacement. */
     promoteGroup(id, group, expectedUpdatedAt) {

package/dist/server/agent/sessionAttachmentRoutes.js

@@ -0,0 +1,39 @@
+import { createHash } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { Router } from 'express';
+import { encryptedRequestSubject } from '../federation/requestContext.js';
+import { handleFileUpload } from '../routes/filesystem.js';
+/** A Session input capability may add new attachments, never choose a server path. */
+export function sessionAttachmentRoutes(directory, resolve) {
+    const router = Router();
+    router.post('/:sessionId/chat/attachments', async (req, res) => {
+        const subject = encryptedRequestSubject(req), session = subject && resolve(req.params.sessionId);
+        if (!session) {
+            res.status(404).json({ error: '会话不可用' });
+            return;
+        }
+        if (Object.keys(req.query).some(key => key !== 'fileCount')) {
+            res.status(400).json({ error: '附件不能指定服务端保存目录' });
+            return;
+        }
+        let destination;
+        try {
+            const root = path.resolve(directory, createHash('sha256').update(session).digest('hex'));
+            await fs.mkdir(root, { recursive: true, mode: 0o700 });
+            if (await fs.realpath(root) !== root)
+                throw new Error('附件目录不可用');
+            destination = await fs.mkdtemp(path.join(root, 'upload-'));
+            await handleFileUpload(req, res, destination);
+        }
+        catch {
+            if (!res.headersSent && !res.destroyed)
+                res.status(500).json({ error: '附件上传失败，请重试' });
+        }
+        finally {
+            if (destination)
+                await fs.rmdir(destination).catch(() => { });
+        }
+    });
+    return router;
+}

package/dist/server/agent/sessionChatRoutes.js

@@ -0,0 +1,64 @@
+import { createHash } from 'node:crypto';
+import { Router } from 'express';
+import { encryptedRequestSubject } from '../federation/requestContext.js';
+/** Clients authorized to view this Session share its durable chat history.
+ * Per-device delivery addresses remain stable for retries and explicit replies. */
+export function sessionChatRoutes(options) {
+    const router = Router();
+    const context = (req) => {
+        const session = options.resolve(String(req.params.sessionId));
+        const subject = encryptedRequestSubject(req);
+        if (!session || !subject)
+            return null;
+        const principal = `webchat-${createHash('sha256').update(subject).digest('hex').slice(0, 48)}`;
+        const groupName = `Session 对话 ${session.sessionId}`;
+        return { session, principal, groupName };
+    };
+    router.get('/:sessionId/chat', (req, res) => {
+        const ctx = context(req);
+        if (!ctx) {
+            res.status(404).json({ error: '会话不可用，请刷新连接' });
+            return;
+        }
+        const group = options.store.list().find(g => g.name === ctx.groupName && !g.federated && g.sessionIds.length === 1 && g.sessionIds[0] === ctx.session.sessionId);
+        const canSeeRequest = (message) => message?.integrationOrigin?.source === 'session-chat';
+        const messages = group ? options.store.listMessages(group.id, 500).filter(message => {
+            if (canSeeRequest(message))
+                return true;
+            const original = message.toPrincipalId && message.replyTo ? options.store.getMessage(message.replyTo) : null;
+            return original?.groupId === group.id && message.toPrincipalId === original.integrationOrigin?.integrationId && canSeeRequest(original);
+        }).map(m => ({ id: m.id, role: m.toPrincipalId ? 'assistant' : 'user', content: m.content, createdAt: m.createdAt, status: m.status === 'read' ? 'delivered' : m.status, replyTo: m.replyTo, requestId: m.idempotencyKey, responseKind: m.responseKind })) : [];
+        res.setHeader('Cache-Control', 'no-store');
+        res.json({ messages, agentAvailable: !!ctx.session.agent, agent: ctx.session.agent ? { slug: ctx.session.agent.slug, displayName: ctx.session.agent.displayName || ctx.session.agent.slug } : null });
+    });
+    router.post('/:sessionId/chat', (req, res) => {
+        const ctx = context(req);
+        if (!ctx) {
+            res.status(404).json({ error: '会话不可用，请刷新连接' });
+            return;
+        }
+        if (!ctx.session.agent) {
+            res.status(409).json({ error: '当前会话未识别到 Agent，请切换终端确认 Agent 已启动' });
+            return;
+        }
+        const body = req.body;
+        if (!body || Object.keys(body).some(k => !['content', 'requestId'].includes(k)) || typeof body.content !== 'string' || !body.content.trim() || Buffer.byteLength(body.content) > 32000 || typeof body.requestId !== 'string' || !/^[a-zA-Z0-9_-]{16,100}$/.test(body.requestId)) {
+            res.status(400).json({ error: '消息为空、过长或请求无效' });
+            return;
+        }
+        try {
+            let group = options.store.list().find(g => g.name === ctx.groupName && !g.federated && g.sessionIds.length === 1 && g.sessionIds[0] === ctx.session.sessionId);
+            if (!group) {
+                group = options.store.save({ name: ctx.groupName, sessionIds: [ctx.session.sessionId] });
+                options.store.setLocalGroupArchived(group.id, true, group.updatedAt, `chat-${group.id}`);
+            }
+            const [message] = options.store.send({ groupId: group.id, fromSessionId: null, toSessionIds: [ctx.session.sessionId], kind: 'ask', content: body.content.trim(), integrationOrigin: { integrationId: ctx.principal, source: 'session-chat' }, idempotencyKey: body.requestId, threadId: ctx.principal });
+            options.deliver(ctx.session.sessionId);
+            res.json({ id: message.id, status: message.status, createdAt: message.createdAt });
+        }
+        catch (error) {
+            res.status(409).json({ error: error instanceof Error ? error.message : '发送失败，草稿已保留' });
+        }
+    });
+    return router;
+}

package/dist/server/agent/sessionViewModeRoutes.js

@@ -0,0 +1,72 @@
+import { Router } from 'express';
+import { readFileSync, mkdirSync, writeFileSync, renameSync, unlinkSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { encryptedRequestSubject } from '../federation/requestContext.js';
+export class SessionViewModeStore {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    read() {
+        try {
+            const data = JSON.parse(readFileSync(this.filePath, 'utf8'));
+            if (data.version !== 1 || !data.sessions || typeof data.sessions !== 'object' || Array.isArray(data.sessions))
+                throw new Error('Invalid session view preferences');
+            for (const value of Object.values(data.sessions))
+                if (!value || !['terminal', 'chat'].includes(value.mode) || !Number.isSafeInteger(value.updatedAt))
+                    throw new Error('Invalid session view preference');
+            return data.sessions;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return {};
+            throw error;
+        }
+    }
+    get(id) { const records = this.read(); return Object.prototype.hasOwnProperty.call(records, id) ? records[id] : null; }
+    set(id, mode) {
+        const records = this.read(), previous = Object.prototype.hasOwnProperty.call(records, id) ? records[id] : null;
+        const next = { mode, updatedAt: Math.max(Date.now(), (previous?.updatedAt || 0) + 1) };
+        mkdirSync(dirname(this.filePath), { recursive: true, mode: 0o700 });
+        const temporary = `${this.filePath}.${randomUUID()}.tmp`;
+        try {
+            writeFileSync(temporary, JSON.stringify({ version: 1, sessions: { ...records, [id]: next } }), { mode: 0o600, flag: 'wx' });
+            renameSync(temporary, this.filePath);
+        }
+        finally {
+            try {
+                unlinkSync(temporary);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        return next;
+    }
+}
+export function sessionViewModeRoutes(store, resolve) {
+    const router = Router();
+    router.route('/:sessionId/view-mode').get((req, res) => {
+        const id = encryptedRequestSubject(req) && resolve(req.params.sessionId);
+        if (!id) {
+            res.status(404).json({ error: '会话不可用' });
+            return;
+        }
+        res.setHeader('Cache-Control', 'no-store');
+        res.json(store.get(id) || { mode: null, updatedAt: 0 });
+    }).put((req, res) => {
+        const id = encryptedRequestSubject(req) && resolve(req.params.sessionId);
+        if (!id) {
+            res.status(404).json({ error: '会话不可用' });
+            return;
+        }
+        if (!req.body || Object.keys(req.body).some(key => key !== 'mode') || !['chat', 'terminal'].includes(req.body.mode)) {
+            res.status(400).json({ error: '显示模式无效' });
+            return;
+        }
+        res.json(store.set(id, req.body.mode));
+    });
+    return router;
+}

package/dist/server/android/recording.js

@@ -43,28 +43,29 @@ export class AndroidRecordings {
             }
         })();
     }
-    async list(serial) {
+    async list(serial, ownerId) {
         await this.load();
-        return [...this.jobs.values()].filter(job => job.info.serial === serial && !job.info.savedPath).map(job => ({ ...job.info }));
+        return [...this.jobs.values()].filter(job => job.info.serial === serial && !job.info.savedPath && job.info.ownerId === ownerId).map(job => ({ ...job.info }));
     }
-    start(serial) {
-        const pending = this.starts.get(serial);
+    start(serial, ownerId) {
+        const key = JSON.stringify([serial, ownerId]);
+        const pending = this.starts.get(key);
         if (pending)
             return pending;
-        const promise = this.startNew(serial).finally(() => this.starts.delete(serial));
-        this.starts.set(serial, promise);
+        const promise = this.startNew(serial, ownerId).finally(() => this.starts.delete(key));
+        this.starts.set(key, promise);
         return promise;
     }
-    async startNew(serial) {
+    async startNew(serial, ownerId) {
         await this.load();
-        const active = [...this.jobs.values()].find(job => job.info.serial === serial && job.child);
+        const active = [...this.jobs.values()].find(job => job.info.serial === serial && job.info.ownerId === ownerId && job.child);
         if (active)
             return { ...active.info };
         const { bin, serverJar } = await resolveScrcpyBinaries();
         if ([...this.jobs.values()].filter(job => ['starting', 'recording', 'stopping'].includes(job.info.status)).length >= 3)
             throw new Error('同时最多录制三个设备');
         const id = randomUUID();
-        const job = { info: { id, serial, name: `termdock-recording-${id}.mp4`, size: 0, startedAt: Date.now(), status: 'starting' } };
+        const job = { info: { id, serial, name: `termdock-recording-${id}.mp4`, size: 0, startedAt: Date.now(), status: 'starting', ...(ownerId ? { ownerId } : {}) } };
         this.jobs.set(id, job);
         await this.persist(job);
         const child = spawn(bin, [
@@ -120,15 +121,16 @@ export class AndroidRecordings {
         await this.persist(job);
         return { ...job.info };
     }
-    async get(id) {
+    async get(id, ownerId) {
         await this.load();
         const job = this.jobs.get(id);
-        if (!job)
+        if (!job || ownerId && job.info.ownerId !== ownerId)
             throw new Error('录像不存在');
         return job;
     }
-    async stop(id) {
-        const job = await this.get(id);
+    async info(id, ownerId) { return { ...(await this.get(id, ownerId)).info }; }
+    async stop(id, ownerId) {
+        const job = await this.get(id, ownerId);
         if (job.child && job.info.status !== 'stopping') {
             job.info.status = 'stopping';
             job.child.kill('SIGINT');
@@ -139,8 +141,8 @@ export class AndroidRecordings {
         await job.done;
         return { ...job.info };
     }
-    async save(id, directory) {
-        const job = await this.get(id);
+    async save(id, directory, ownerId) {
+        const job = await this.get(id, ownerId);
         if (job.info.savedPath) {
             if (directory && join(directory, job.info.name) !== job.info.savedPath)
                 throw new Error(`录像已保存到 ${job.info.savedPath}`);
@@ -158,11 +160,11 @@ export class AndroidRecordings {
             await fs.rm(source, { force: true }).catch(() => { });
         return destination;
     }
-    async discard(id) {
+    async discard(id, ownerId) {
         await this.load();
         if (!this.jobs.has(id))
             return;
-        const job = await this.get(id);
+        const job = await this.get(id, ownerId);
         if (job.info.savedPath) {
             await fs.rm(join(this.directory, `${id}.json`), { force: true });
             this.jobs.delete(id);

package/dist/server/cli.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { parseTodoCommand, executeTodoCommand, TODO_HELP } from './todos/cli.js';
 // libuv 线程池默认只有 4 个线程，慢/挂起的异步 IO（fs.promises、crypto 等）
 // 会把池耗尽，表现为整个服务的 IO 全部卡死。必须在任何异步 fs 调用之前
 // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。
@@ -213,6 +214,7 @@ Short commands:
   pi                 Same as agent-plugin
   n [message]       Progress reminder; run td n for help and Agent instructions
   notify [message]  Same as n (see td n --prompt)
+  todo               Manage todos (see td todo --help)
   automation         Manage scheduled tasks (see td automation --help)
   integration       Manage local scoped integrations (see integration help)
   collab status      Show this Session's collaboration groups and peers
@@ -669,6 +671,7 @@ function parseArgs(argv) {
     let integration;
     let collab;
     let automation;
+    let todo;
     let notify;
     // Short command aliases for the common path. Keep these positional-only so
     // long-form flags remain the single source of truth for option semantics.
@@ -796,6 +799,16 @@ function parseArgs(argv) {
             }
             argv = [];
         }
+        else if (command === 'todo') {
+            try {
+                todo = parseTodoCommand(argv.slice(1));
+            }
+            catch (error) {
+                console.error(JSON.stringify({ ok: false, error: getMessage(error) }));
+                process.exit(1);
+            }
+            argv = [];
+        }
         else if (command === 'automation') {
             try {
                 automation = parseAutomationCommand(argv.slice(1));
@@ -1199,6 +1212,7 @@ function parseArgs(argv) {
         integration,
         collab,
         automation,
+        todo,
         notify,
     };
 }
@@ -3489,6 +3503,26 @@ async function main() {
         await runNotify(options.notify);
         return;
     }
+    if (options.todo) {
+        if (options.todo.action === 'help') {
+            console.log(TODO_HELP);
+            return;
+        }
+        const state = getRunningState();
+        if (!state?.localApiToken) {
+            console.error(JSON.stringify({ ok: false, error: 'Termdock is not running' }));
+            process.exitCode = 1;
+            return;
+        }
+        const baseUrl = state.localUrl ?? `${state.scheme ?? 'http'}://${state.host === '0.0.0.0' ? 'localhost' : state.host}:${state.port}`;
+        process.exitCode = await executeTodoCommand(options.todo, {
+            request: (method, endpoint, body) => method === 'POST'
+                ? postLocalJson(baseUrl, state.localApiToken, endpoint, body)
+                : getLocalJson(baseUrl, state.localApiToken, endpoint),
+            stdin: readStdinText, write: line => console.log(line),
+        });
+        return;
+    }
     if (options.automation) {
         await runAutomation(options.automation);
         return;

package/dist/server/entry.js

@@ -52,10 +52,12 @@ import { isAllowedHost, isUpgradeOriginAllowed, validateHostMiddleware, validate
 import { getCookieSecurityOptions, setSecureCookieMode } from './utils/cookieSecurity.js';
 import { requestDeadlineMiddleware } from './utils/requestDeadline.js';
 import { RuntimeMonitor } from './utils/runtimeMonitor.js';
+import { serverCleanup } from './utils/serverCleanup.js';
 import { startOnboardingServer, stopOnboardingServer, getOnboardingServerUrl } from './onboardingServer.js';
 import { CertificateWatcher } from './certificateWatcher.js';
 import { startTermdockLogMaintenance, writeDiffTraceLog, writeErrorLog, writeJsonLog, writeTextLog, } from './utils/serverLogger.js';
-import { indexRetainedClientModules, pinBundledRuntimeClientDist } from './utils/runtimeClient.js';
+import { indexRetainedClientModules, pinBundledRuntimeClientDist, resolveRetainedClientModule } from './utils/runtimeClient.js';
+import { startGeneratedStorageMaintenance } from './utils/storageMaintenance.js';
 import { installCrashForensics } from './utils/crashForensics.js';
 import { getTermdockVersion, TERMDOCK_CAPABILITIES, TERMDOCK_PROTOCOL_VERSION, } from './utils/version.js';
 import { PORT, DEFAULT_HOST } from './config.js';
@@ -363,6 +365,7 @@ export function createApp(options = {}) {
     app.use('/api/computer', computerRoutes);
     if (fs.existsSync(bundledClientIndexPath)) {
         const clientPath = pinBundledRuntimeClientDist(bundledClientDistPath);
+        app.locals.runtimeClientPath = clientPath;
         const compression = createStaticCompressionMiddleware(clientPath);
         const staticFiles = express.static(clientPath, {
             setHeaders: (res, filePath, stat) => {
@@ -395,7 +398,7 @@ export function createApp(options = {}) {
         });
         const retainedModules = indexRetainedClientModules();
         app.get(/^\/assets\//, (req, res, next) => {
-            const retainedPath = retainedModules.get(req.path);
+            const retainedPath = resolveRetainedClientModule(retainedModules, req.path);
             if (!retainedPath) {
                 // Never cache a missing module or return the SPA HTML as JavaScript.
                 res.setHeader('Cache-Control', 'no-store');
@@ -403,7 +406,7 @@ export function createApp(options = {}) {
                 return;
             }
             setStaticCacheHeaders(req, res);
-            res.sendFile(retainedPath, error => {
+            res.sendFile(path.basename(retainedPath), { root: path.dirname(retainedPath) }, error => {
                 if (!error)
                     return;
                 if (res.headersSent)
@@ -414,7 +417,7 @@ export function createApp(options = {}) {
         });
         app.get(/^(?!\/api(?:\/|$)|\/health$|\/onboarding(?:\/|$)|\/ca(?:\/|$)).*/, (req, res) => {
             setStaticCacheHeaders(req, res);
-            res.sendFile(path.join(clientPath, 'index.html'));
+            res.sendFile('index.html', { root: clientPath });
         });
     }
     // Never expose parser errors, submitted passwords, or stack traces to callers.
@@ -471,9 +474,14 @@ export function startServer(options = {}) {
         runtimeMonitor,
     });
     const { server, scheme } = createServerForApp(app, options);
+    const onServerClose = serverCleanup(server);
+    if (typeof app.locals.runtimeClientPath === 'string')
+        onServerClose(startGeneratedStorageMaintenance({
+            stateDirectory: path.join(homedir(), '.termdock'), clientDirectory: app.locals.runtimeClientPath,
+        }));
     let webTransport;
     const webTransportDescriptor = () => webTransport?.descriptor();
-    server.once('close', () => webTransport?.close());
+    onServerClose(() => webTransport?.close());
     const collaborationChannels = new Map();
     const reverseCollaboration = (id) => [...(collaborationChannels.get(id) ?? [])].find(rpc => !rpc.closed);
     let collaborationService;
@@ -485,6 +493,7 @@ export function startServer(options = {}) {
     const desktopTargets = () => desktopDirectTargets(path.join(homedir(), '.termdock', 'desktop.json'), federationServiceId);
     const routeAccess = new RouteAccess(path.join(homedir(), '.termdock', 'federation', 'routes.json'), Date.now, (subjectId, targetServiceId) => routeInvitations?.allows(subjectId, targetServiceId) === true || collaborationTransport?.canRoute(subjectId, targetServiceId) === true, desktopTargets, () => activeRouteIds());
     const relayRouter = new RelayRouter({
+        isLocalTarget: id => id === federationServiceId,
         authenticate: context => context,
         allowRegister: (principal, serviceId) => routeAccess.allowRegister(principal, serviceId),
         allowRoute: (principal, serviceId) => routeAccess.allowRoute(principal, serviceId),
@@ -511,11 +520,11 @@ export function startServer(options = {}) {
     refreshDirectTargets();
     const desktopRoutesTimer = setInterval(refreshDirectTargets, 2000);
     desktopRoutesTimer.unref();
-    server.once('close', () => { clearInterval(desktopRoutesTimer); for (const target of dynamicDirectTargets.values())
+    onServerClose(() => { clearInterval(desktopRoutesTimer); for (const target of dynamicDirectTargets.values())
         target.close(); });
-    server.once('close', () => relayRouter.close());
-    server.once('close', () => { void stopAllScrcpySessions(); void androidRecordings.stopAll(); });
-    server.once('close', stopComputerBridges);
+    onServerClose(() => relayRouter.close());
+    onServerClose(() => { void stopAllScrcpySessions(); void androidRecordings.stopAll(); });
+    onServerClose(stopComputerBridges);
     const federation = createFederationRuntime(app, path.join(homedir(), '.termdock', 'federation'), {
         terminal: handleTerminalWebSocket, control: handleControlWebSocket, android: handleAndroidWebSocket, computer: handleComputerWebSocket,
     }, {
@@ -654,7 +663,7 @@ export function startServer(options = {}) {
                     messages: collaborationStore, taskStore: collaborationTaskStore, tasks: collaborationTasks, peers: collaborationService, sessions: integrationSessionAdapter });
                 await integration.listen();
                 app.locals.integrationRuntime = integration;
-                server.once('close', () => { void integration?.close(); });
+                onServerClose(() => { void integration?.close(); });
             }
             catch {
                 await integration?.close();
@@ -662,11 +671,11 @@ export function startServer(options = {}) {
             }
         }
         collaborationTasks.start();
-        server.once('close', () => collaborationTasks.close());
+        onServerClose(() => collaborationTasks.close());
         collaborationService.start();
-        server.once('close', () => collaborationService?.close());
+        onServerClose(() => collaborationService?.close());
         collaborationTransport.start();
-        server.once('close', () => collaborationTransport?.close());
+        onServerClose(() => collaborationTransport?.close());
         entrySubjectAllowed = subjectId => runtime.store.authorize({ subjectId, serviceId: runtime.serviceId, action: 'authorization.manage' }).allowed;
         routeInvitations = new RouteInvitationStore({
             filePath: path.join(homedir(), '.termdock', 'federation', 'route-invitations.json'), serviceId: runtime.serviceId,
@@ -687,10 +696,10 @@ export function startServer(options = {}) {
             localOrigin: `${scheme}://${localAuthority}:${port}`, ...(localCa ? { localCa } : {}),
         });
         selfRelay.start();
-        server.once('close', () => selfRelay.close());
+        onServerClose(() => selfRelay.close());
     }).catch(() => console.error('Route invitations unavailable; uninitialized route grants remain denied.'));
     void federation.catch(() => console.error('Encrypted access initialization failed; business access remains closed.'));
-    server.once('close', () => { void federation.then(runtime => runtime.close()).catch(() => { }); });
+    onServerClose(() => { void federation.then(runtime => runtime.close()).catch(() => { }); });
     server.headersTimeout = 10_000;
     server.requestTimeout = 120_000;
     server.keepAliveTimeout = 5_000;
@@ -698,7 +707,7 @@ export function startServer(options = {}) {
     server.maxRequestsPerSocket = 1000;
     server.maxConnections = 1024;
     server.on('connection', (socket) => runtimeMonitor.trackSocket(socket));
-    server.once('close', () => runtimeMonitor.stop());
+    onServerClose(() => runtimeMonitor.stop());
     setSecureCookieMode(scheme === 'https');
     const certWatcher = new CertificateWatcher({
         enabled: scheme === 'https' && Boolean(options.httpsCertPath && options.httpsKeyPath),
@@ -864,7 +873,7 @@ export function startServer(options = {}) {
         console.error('Server error:', error);
         process.exit(1);
     });
-    server.on('close', () => {
+    onServerClose(() => {
         stopLogMaintenance();
         crashForensics.dispose();
         certWatcher.stop();

package/dist/server/federation/accessPolicy.js

@@ -90,13 +90,18 @@ export function resolveAccessRequest(method, path) {
         return { action: 'file.read' };
     if (method === 'POST' && route === 'create')
         return { action: 'service.create-session' };
-    const session = /^([^/]+)(?:\/(health|attach|stream|input|resize|tmux|restart|agent-resume))?$/.exec(route);
+    const attachment = /^([^/]+)\/chat\/attachments$/.exec(route);
+    if (method === 'POST' && attachment && !reservedSessionIds.has(attachment[1].toLowerCase()))
+        return { action: 'session.input', sessionId: attachment[1] };
+    const session = /^([^/]+)(?:\/(health|attach|stream|input|resize|tmux|restart|agent-resume|chat|view-mode))?$/.exec(route);
     if (session && !reservedSessionIds.has(session[1].toLowerCase())) {
         const sessionId = session[1];
         const op = session[2];
-        if (read && ['health', 'attach', 'stream', 'agent-resume'].includes(op))
+        if (read && ['health', 'attach', 'stream', 'agent-resume', 'chat', 'view-mode'].includes(op))
             return { action: 'session.view', sessionId };
-        if (method === 'POST' && op === 'input')
+        if (method === 'PUT' && op === 'view-mode')
+            return { action: 'session.view', sessionId };
+        if (method === 'POST' && (op === 'input' || op === 'chat'))
             return { action: 'session.input', sessionId };
         if (method === 'POST' && op === 'resize')
             return { action: 'session.resize', sessionId };