termdock 1.4.354 → 1.4.356

package/dist/server/agent/sessionChatRoutes.js

@@ -1,6 +1,8 @@
 import { createHash } from 'node:crypto';
 import { Router } from 'express';
 import { encryptedRequestSubject } from '../federation/requestContext.js';
+import { chatPresentation } from '../shared/chatPresentation.js';
+import { CollaborationError } from './collaborationProtocol.js';
 /** Clients authorized to view this Session share its durable chat history.
  * Per-device delivery addresses remain stable for retries and explicit replies. */
 export function sessionChatRoutes(options) {
@@ -27,10 +29,30 @@ export function sessionChatRoutes(options) {
                 return true;
             const original = message.toPrincipalId && message.replyTo ? options.store.getMessage(message.replyTo) : null;
             return original?.groupId === group.id && message.toPrincipalId === original.integrationOrigin?.integrationId && canSeeRequest(original);
-        }).map(m => ({ id: m.id, role: m.toPrincipalId ? 'assistant' : 'user', content: m.content, createdAt: m.createdAt, status: m.status === 'read' ? 'delivered' : m.status, replyTo: m.replyTo, requestId: m.idempotencyKey, responseKind: m.responseKind })) : [];
+        }).map(m => ({ id: m.id, role: m.toPrincipalId ? 'assistant' : 'user', ...(m.toPrincipalId ? chatPresentation(m.content, m.metadata) : { content: m.content }), ...(m.uiState ? { uiState: m.uiState } : {}), createdAt: m.createdAt, status: m.status === 'read' ? 'delivered' : m.status, replyTo: m.replyTo, requestId: m.idempotencyKey, responseKind: m.responseKind })) : [];
         res.setHeader('Cache-Control', 'no-store');
         res.json({ messages, agentAvailable: !!ctx.session.agent, agent: ctx.session.agent ? { slug: ctx.session.agent.slug, displayName: ctx.session.agent.displayName || ctx.session.agent.slug } : null });
     });
+    router.put('/:sessionId/chat/:messageId/state', (req, res) => {
+        const ctx = context(req), body = req.body;
+        if (!ctx) {
+            res.status(404).json({ error: '会话不可用' });
+            return;
+        }
+        if (!body || typeof body !== 'object' || Object.keys(body).some(key => !['revision', 'values'].includes(key))) {
+            res.status(400).json({ error: '填写内容无效' });
+            return;
+        }
+        try {
+            res.json(options.store.saveChatUIState(String(req.params.messageId), ctx.session.sessionId, body.values, body.revision));
+        }
+        catch (error) {
+            if (error instanceof CollaborationError)
+                res.status(error.httpStatus).json({ error: error.message, ...error.details });
+            else
+                res.status(500).json({ error: '暂时无法保存，填写内容已保留' });
+        }
+    });
     router.post('/:sessionId/chat', (req, res) => {
         const ctx = context(req);
         if (!ctx) {

package/dist/server/cli.js

@@ -1461,6 +1461,11 @@ async function runAutomation(command) {
     });
 }
 async function runCollab(command) {
+    if (command.action === 'ui') {
+        const { chatUIPrompt } = await import('./agent/chatUIPrompt.js');
+        console.log(command.options.text ? chatUIPrompt() : JSON.stringify({ version: 1, instructions: chatUIPrompt() }));
+        return;
+    }
     const runningState = getRunningState();
     if (command.options.principal) {
         process.exitCode = await runIntegrationCollab(command, runningState?.port ?? 9834, { write: line => console.log(line), stdin: readStdinText });

package/dist/server/federation/accessPolicy.js

@@ -93,6 +93,9 @@ export function resolveAccessRequest(method, path) {
     const attachment = /^([^/]+)\/chat\/attachments$/.exec(route);
     if (method === 'POST' && attachment && !reservedSessionIds.has(attachment[1].toLowerCase()))
         return { action: 'session.input', sessionId: attachment[1] };
+    const chatState = /^([^/]+)\/chat\/[^/]+\/state$/.exec(route);
+    if (method === 'PUT' && chatState && !reservedSessionIds.has(chatState[1].toLowerCase()))
+        return { action: 'session.input', sessionId: chatState[1] };
     const session = /^([^/]+)(?:\/(health|attach|stream|input|resize|tmux|restart|agent-resume|chat|view-mode))?$/.exec(route);
     if (session && !reservedSessionIds.has(session[1].toLowerCase())) {
         const sessionId = session[1];

package/dist/server/federation/authorization.js

@@ -2,6 +2,7 @@ import { validShareResources, resourceSubset } from '../shared/shareResources.js
 import { randomUUID } from 'node:crypto';
 import { mkdirSync, readFileSync, openSync, writeFileSync, fsyncSync, closeSync, renameSync, unlinkSync } from 'node:fs';
 import { dirname } from 'node:path';
+import { validSessionAppearances, restrictSessionAppearances } from '../shared/sessionAppearance.js';
 const id = (v) => typeof v === 'string' && v.length > 0 && v.length <= 512 && !/[\s\x00-\x1f]/.test(v);
 const action = (v) => typeof v === 'string' && (v === 'service:*' || /^[a-z][a-z0-9_-]*\.[a-z][a-z0-9_-]*$/.test(v));
 const object = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
@@ -20,6 +21,7 @@ function validateInput(v) {
         keys(v.scope, ['kind', 'sessionIds']);
     }
     assert(v.resources === undefined || validShareResources(v.resources), 'shared resources');
+    assert(v.sessionAppearance === undefined || validSessionAppearances(v.sessionAppearance, v.scope), 'session appearance');
     assert(Array.isArray(v.actions) && v.actions.length > 0 && v.actions.length <= 256 && v.actions.every(action) && new Set(v.actions).size === v.actions.length, 'actions');
     if (v.scope.kind === 'sessions')
         assert(v.actions.every(a => a.startsWith('session.')), 'session scope cannot grant service or file capabilities');
@@ -88,7 +90,7 @@ export class AuthorizationStore {
         for (const value of data.grants) {
             validateInput(value);
             const g = value;
-            keys(g, ['id', 'serviceId', 'createdAt', 'parentGrantId', 'revokedAt', 'subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'passwordCredential', 'resources']);
+            keys(g, ['id', 'serviceId', 'createdAt', 'parentGrantId', 'revokedAt', 'subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'passwordCredential', 'resources', 'sessionAppearance']);
             assert(id(g.id) && g.serviceId === this.options.serviceId && Number.isSafeInteger(g.createdAt) && g.createdAt >= 0, 'grant metadata');
             assert(g.parentGrantId === undefined || id(g.parentGrantId), 'parent identity');
             assert(g.revokedAt === undefined || (Number.isSafeInteger(g.revokedAt) && g.revokedAt >= 0), 'revocation');
@@ -124,7 +126,7 @@ export class AuthorizationStore {
     }
     create(input) {
         validateInput(input);
-        keys(input, ['subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'resources']);
+        keys(input, ['subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'resources', 'sessionAppearance']);
         const now = this.now();
         assert(input.expiresAt === undefined || input.expiresAt > now, 'already expired');
         return { ...structuredClone(input), id: randomUUID(), serviceId: this.options.serviceId, createdAt: now };
@@ -185,8 +187,10 @@ export class AuthorizationStore {
             changed++;
             if (!remaining.length)
                 grant.revokedAt = this.now();
-            else
+            else {
                 grant.scope = { kind: 'sessions', sessionIds: remaining };
+                grant.sessionAppearance = restrictSessionAppearances(grant.sessionAppearance, remaining);
+            }
         }
         if (changed)
             this.save(grants);

package/dist/server/federation/invitations.js

@@ -2,6 +2,7 @@ import { validShareResources } from '../shared/shareResources.js';
 import { createHash, randomBytes, randomUUID } from 'node:crypto';
 import { mkdirSync, readFileSync, openSync, writeFileSync, fsyncSync, closeSync, renameSync, unlinkSync, chmodSync } from 'node:fs';
 import { dirname } from 'node:path';
+import { validSessionAppearances, restrictSessionAppearances } from '../shared/sessionAppearance.js';
 const TTL = 10 * 60 * 1000;
 const actions = new Set(['session.view', 'session.input', 'session.resize', 'session.terminate']);
 const identity = (v) => typeof v === 'string' && v.length > 0 && v.length <= 512 && !/[\s\x00-\x1f]/.test(v);
@@ -9,9 +10,10 @@ const record = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
 function requireValid(ok) { if (!ok)
     throw new Error('INVALID_INVITATION'); }
 export function validateInvitation(input) {
-    requireValid(record(input) && Object.keys(input).every(k => ['scope', 'actions', 'label', 'expiresAt', 'resources'].includes(k)));
+    requireValid(record(input) && Object.keys(input).every(k => ['scope', 'actions', 'label', 'expiresAt', 'resources', 'sessionAppearance'].includes(k)));
     requireValid(record(input.scope) && Array.isArray(input.actions) && input.actions.length > 0 && new Set(input.actions).size === input.actions.length);
     requireValid(input.resources === undefined || validShareResources(input.resources));
+    requireValid(input.sessionAppearance === undefined || validSessionAppearances(input.sessionAppearance, input.scope));
     const scope = input.scope;
     if (scope.kind === 'service') {
         requireValid(Object.keys(scope).length === 1 && ((input.actions.length === 1 && input.actions[0] === 'service:*') || input.actions.every(a => typeof a === 'string' && actions.has(a))));
@@ -52,9 +54,9 @@ export class InvitationStore {
         requireValid(record(data) && data.version === 1 && data.serviceId === this.options.serviceId && Array.isArray(data.invitations) && data.invitations.length <= 2048);
         const seen = new Set();
         for (const item of data.invitations) {
-            requireValid(record(item) && Object.keys(item).every(k => ['scope', 'actions', 'label', 'expiresAt', 'hash', 'issuerId', 'createdAt', 'invitationExpiresAt', 'consumedAt', 'consumedBy', 'resources'].includes(k)));
-            const { scope, actions, resources, label, expiresAt, hash, issuerId, createdAt, invitationExpiresAt, consumedAt, consumedBy } = item;
-            validateInvitation({ scope, actions, ...(resources === undefined ? {} : { resources }), ...(label === undefined ? {} : { label }), ...(expiresAt === undefined ? {} : { expiresAt }) });
+            requireValid(record(item) && Object.keys(item).every(k => ['scope', 'actions', 'label', 'expiresAt', 'hash', 'issuerId', 'createdAt', 'invitationExpiresAt', 'consumedAt', 'consumedBy', 'resources', 'sessionAppearance'].includes(k)));
+            const { scope, actions, resources, sessionAppearance, label, expiresAt, hash, issuerId, createdAt, invitationExpiresAt, consumedAt, consumedBy } = item;
+            validateInvitation({ scope, actions, ...(resources === undefined ? {} : { resources }), ...(sessionAppearance === undefined ? {} : { sessionAppearance }), ...(label === undefined ? {} : { label }), ...(expiresAt === undefined ? {} : { expiresAt }) });
             requireValid(typeof hash === 'string' && /^[a-f0-9]{64}$/.test(hash) && !seen.has(hash) && identity(issuerId));
             seen.add(hash);
             requireValid(Number.isSafeInteger(createdAt) && Number.isSafeInteger(invitationExpiresAt) && Number(invitationExpiresAt) === Number(createdAt) + TTL);
@@ -89,7 +91,7 @@ export class InvitationStore {
     listPending() {
         const now = this.now();
         return this.read().filter(i => i.consumedAt === undefined && i.invitationExpiresAt > now && (i.expiresAt === undefined || i.expiresAt > now))
-            .map(({ hash, scope, actions, resources, label, expiresAt, createdAt, invitationExpiresAt }) => ({ id: hash, scope, actions, ...(resources === undefined ? {} : { resources }), ...(label ? { label } : {}), ...(expiresAt === undefined ? {} : { expiresAt }), createdAt, invitationExpiresAt }));
+            .map(({ hash, scope, actions, resources, sessionAppearance, label, expiresAt, createdAt, invitationExpiresAt }) => ({ id: hash, scope, actions, ...(resources === undefined ? {} : { resources }), ...(sessionAppearance === undefined ? {} : { sessionAppearance }), ...(label ? { label } : {}), ...(expiresAt === undefined ? {} : { expiresAt }), createdAt, invitationExpiresAt }));
     }
     revoke(id) {
         const current = this.read();
@@ -113,6 +115,7 @@ export class InvitationStore {
             if (!remaining.length)
                 return false;
             invitation.scope = { kind: 'sessions', sessionIds: remaining };
+            invitation.sessionAppearance = restrictSessionAppearances(invitation.sessionAppearance, remaining);
             return true;
         });
         if (changed)
@@ -145,12 +148,16 @@ export class InvitationStore {
             throw new Error('PAIRING_DENIED');
         const current = this.read(), hash = this.hash(code), now = this.now();
         const invite = current.find(i => i.hash === hash);
-        if (!invite || invite.consumedAt !== undefined || invite.invitationExpiresAt <= now || (invite.expiresAt !== undefined && invite.expiresAt <= now) || !issuerAllowed(invite.issuerId))
+        if (!invite || !issuerAllowed(invite.issuerId))
             throw new Error('PAIRING_DENIED');
+        if (invite.consumedAt !== undefined)
+            throw new Error('INVITATION_USED');
+        if (invite.invitationExpiresAt <= now || (invite.expiresAt !== undefined && invite.expiresAt <= now))
+            throw new Error('INVITATION_EXPIRED');
         invite.consumedAt = now;
         invite.consumedBy = subjectId;
         this.save(current);
-        return { subjectId, ...(invite.resources ? { resources: structuredClone(invite.resources) } : {}), scope: structuredClone(invite.scope), actions: [...invite.actions], ...(invite.expiresAt === undefined ? {} : { expiresAt: invite.expiresAt }), canDelegate: false };
+        return { subjectId, ...(invite.resources ? { resources: structuredClone(invite.resources) } : {}), ...(invite.sessionAppearance ? { sessionAppearance: structuredClone(invite.sessionAppearance) } : {}), scope: structuredClone(invite.scope), actions: [...invite.actions], ...(invite.expiresAt === undefined ? {} : { expiresAt: invite.expiresAt }), canDelegate: false };
     }
     subjectLabels() {
         return Object.fromEntries(this.read().filter(i => i.consumedBy && i.label).map(i => [i.consumedBy, i.label]));

package/dist/server/federation/routeInvitations.js

@@ -110,9 +110,13 @@ export class RouteInvitationStore {
         const invitation = current.find(item => item.hash === hash);
         if (invitation?.subjectId === actualSubjectId && invitation.revokedAt === undefined && this.available(invitation.issuerId, invitation.targetServiceId))
             return { serviceId: invitation.targetServiceId };
-        if (!invitation || invitation.revokedAt !== undefined || invitation.subjectId !== undefined || invitation.createdAt > now || invitation.expiresAt <= now
+        if (!invitation || invitation.revokedAt !== undefined || invitation.createdAt > now
             || !this.available(invitation.issuerId, invitation.targetServiceId))
             throw new Error('ROUTE_PAIRING_DENIED');
+        if (invitation.subjectId !== undefined)
+            throw new Error('ROUTE_INVITATION_USED');
+        if (invitation.expiresAt <= now)
+            throw new Error('ROUTE_INVITATION_EXPIRED');
         invitation.subjectId = actualSubjectId;
         invitation.consumedAt = now;
         this.save(current);

package/dist/server/federation/runtime.js

@@ -407,14 +407,18 @@ export async function createFederationRuntime(app, directory, handlers, options
                     }
                     else if (packet.type === 'session-list') {
                         const inventory = await sessionInventory();
+                        const displayGrants = store.listEffective({ subjectId, serviceId }).filter(grant => grant.actions.includes('session.view')).reverse().sort((a, b) => b.createdAt - a.createdAt);
                         const seen = new Set();
                         const items = inventory.flatMap(session => {
                             const sessionId = session.backendSessionId;
                             if (typeof sessionId !== 'string' || !sessionId || seen.has(sessionId) || !allowed(subjectId, 'session.view', sessionId))
                                 return [];
                             seen.add(sessionId);
+                            const matches = (id) => id === session.sessionId || id === sessionId || stableSessionId(id) === session.sessionId;
+                            const displayGrant = displayGrants.find(grant => grant.scope.kind === 'service' || grant.scope.sessionIds.some(matches));
+                            const appearance = Object.entries(displayGrant?.sessionAppearance || {}).find(([id]) => matches(id))?.[1];
                             return [{ sessionId, ...(typeof session.sessionId === 'string' ? { sourceSessionId: session.sessionId } : {}),
-                                    name: collaborationSessionDisplayName({ ...session, name: typeof session.name === 'string' ? session.name : sessionId }), live: session.live === true,
+                                    name: appearance?.name || collaborationSessionDisplayName({ ...session, name: typeof session.name === 'string' ? session.name : sessionId }), ...(appearance?.icon ? { icon: appearance.icon } : {}), live: session.live === true,
                                     canWrite: allowed(subjectId, 'session.input', sessionId), canResize: allowed(subjectId, 'session.resize', sessionId) }];
                         });
                         send({ type: 'result', id: packet.id, items });
@@ -491,6 +495,7 @@ export async function createFederationRuntime(app, directory, handlers, options
                     else if (packet.type === 'invite-create') {
                         check('authorization.manage');
                         const invitation = { scope: packet.scope, actions: packet.actions, ...(packet.resources === undefined ? {} : { resources: packet.resources }),
+                            ...(packet.sessionAppearance === undefined ? {} : { sessionAppearance: packet.sessionAppearance }),
                             ...(packet.label === undefined ? {} : { label: packet.label }),
                             ...(packet.expiresAt === undefined ? {} : { expiresAt: packet.expiresAt }) };
                         validateInvitation(invitation);
@@ -514,6 +519,8 @@ export async function createFederationRuntime(app, directory, handlers, options
                             const sessionIds = invitation.scope.sessionIds.map(id => stable.get(id)).filter((id) => typeof id === 'string');
                             if (sessionIds.length !== invitation.scope.sessionIds.length || new Set(sessionIds).size !== sessionIds.length)
                                 throw new Error('UNKNOWN_SESSION');
+                            if (invitation.sessionAppearance)
+                                invitation.sessionAppearance = Object.fromEntries(Object.entries(invitation.sessionAppearance).map(([id, appearance]) => [stable.get(id), appearance]));
                             invitation.scope = { kind: 'sessions', sessionIds };
                         }
                         check('authorization.manage');

package/dist/server/shared/chatPresentation.js

@@ -0,0 +1,36 @@
+/** TD reply body stays readable to old clients; rich content is an explicit,
+ * versioned opt-in, never guessed from terminal output or ordinary code fences. */
+export const CHAT_UI_VERSION = 1;
+const record = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+export function chatPresentation(content, metadata) {
+    if (!record(metadata?.openui))
+        return { content };
+    try {
+        const body = JSON.parse(content);
+        if (!record(body) || typeof body.text !== 'string' || !body.text.trim() || body.text.length > 32000)
+            return { content: '这条回复暂时无法显示，请让对方重新发送文字说明。' };
+        if (metadata.openui.version !== CHAT_UI_VERSION || typeof body.ui !== 'string' || !body.ui.trim() || body.ui.length > 64000)
+            return { content: body.text };
+        return { content: body.text, ui: { version: CHAT_UI_VERSION, code: body.ui } };
+    }
+    catch {
+        return { content: '这条回复暂时无法显示，请让对方重新发送文字说明。' };
+    }
+}
+export function validChatUIValues(value) {
+    let nodes = 0;
+    const valid = (item, depth) => {
+        if (++nodes > 2000 || depth > 8)
+            return false;
+        if (item === null || typeof item === 'boolean')
+            return true;
+        if (typeof item === 'number')
+            return Number.isFinite(item);
+        if (typeof item === 'string')
+            return item.length <= 8000;
+        if (Array.isArray(item))
+            return item.length <= 300 && item.every(child => valid(child, depth + 1));
+        return record(item) && Object.keys(item).length <= 100 && Object.entries(item).every(([key, child]) => key.length <= 128 && !['__proto__', 'prototype', 'constructor'].includes(key) && valid(child, depth + 1));
+    };
+    return record(value) && valid(value, 0) && new TextEncoder().encode(JSON.stringify(value)).length <= 32000;
+}

package/dist/server/shared/chatUILibrary.js

@@ -0,0 +1,26 @@
+import { action, createLibrary, defineComponent } from '@openuidev/lang-core';
+import { z } from 'zod/v4';
+const text = z.string().max(16000), short = z.string().max(160), name = z.string().regex(/^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/);
+const cell = z.union([z.string().max(4000), z.number().finite(), z.boolean(), z.null()]);
+export const chatUISchemas = {
+    Text: z.object({ content: text }),
+    Metric: z.object({ label: short, value: short, detail: short.optional() }),
+    Callout: z.object({ title: short, content: text, tone: z.enum(['info', 'success', 'warning']).optional() }),
+    Table: z.object({ columns: z.array(short).min(1).max(12), rows: z.array(z.array(cell).max(12)).max(300), caption: short.optional() }),
+    Chart: z.object({ title: short, labels: z.array(short).min(1).max(30), series: z.array(z.object({ name: short, values: z.array(z.number().finite()).max(30) })).min(1).max(6), kind: z.enum(['bar', 'line']).optional() }),
+    Checklist: z.object({ title: short, items: z.array(z.object({ label: short, detail: short.optional(), done: z.boolean() })).max(30) }),
+    Input: z.object({ name, label: short, placeholder: short.optional(), required: z.boolean().optional() }),
+    Select: z.object({ name, label: short, options: z.array(short).min(1).max(50), required: z.boolean().optional() }),
+    Checkbox: z.object({ name, label: short }),
+    Button: z.object({ label: short, action: action().optional() }),
+    Resource: z.object({ label: short, kind: z.enum(['file', 'link']), target: z.string().max(4096), description: short.optional() }),
+};
+const components = Object.entries(chatUISchemas).map(([key, props]) => defineComponent({ name: key, props, component: null, description: {
+        Text: 'Markdown prose using the shared preview renderer.', Metric: 'A known metric with label, value and optional context.', Callout: 'An important explanation; tone info/success/warning.', Table: 'A comparison table with horizontally scrollable, filterable and sortable rows.', Chart: 'A chart of supplied factual values. Do not invent values.', Checklist: 'Explicitly reported checklist items, never inferred Agent activity.',
+        Input: 'Text field inside Form; name must be unique in that form.', Select: 'Selection field inside Form.', Checkbox: 'Checkbox inside Form.', Button: 'Clickable action. @ToAssistant(message) continues this same conversation; inside Form also sends the form values.', Resource: 'User-opened file preview or external web link. Use an authorized absolute path for files.',
+    }[key] }));
+const refs = z.union(components.map(component => component.ref));
+const Form = defineComponent({ name: 'Form', description: 'User question form. Include Input/Select/Checkbox and a Button with @ToAssistant. Never nest forms.', props: z.object({ name, title: short, fields: z.array(refs).max(30) }), component: null });
+const Card = defineComponent({ name: 'Card', description: 'A titled result card, with text, metrics, charts, tables or a form.', props: z.object({ title: short, content: z.array(z.union([refs, Form.ref])).max(30) }), component: null });
+const Stack = defineComponent({ name: 'Stack', description: 'Root vertical layout of answer components.', props: z.object({ content: z.array(z.union([refs, Form.ref, Card.ref])).max(40) }), component: null });
+export const chatUILibrary = createLibrary({ id: 'termdock-chat@1', root: 'Stack', components: [...components, Form, Card, Stack] });

package/dist/server/shared/sessionAppearance.js

@@ -0,0 +1,17 @@
+export const SESSION_ICONS = ['message', 'sparkles', 'bot', 'code', 'file', 'briefcase', 'lightbulb', 'rocket'];
+const record = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+export function validSessionIcon(value) {
+    return typeof value === 'string' && value.length <= 32 && (SESSION_ICONS.includes(value)
+        || /^(?:\p{Regional_Indicator}{2}|[#*0-9]\uFE0F?\u20E3|\p{Extended_Pictographic}[\uFE0F\p{Emoji_Modifier}]*(?:\u200D\p{Extended_Pictographic}[\uFE0F\p{Emoji_Modifier}]*)*)$/u.test(value));
+}
+export function validSessionAppearances(value, scope) {
+    if (!record(scope) || scope.kind !== 'sessions' || !Array.isArray(scope.sessionIds))
+        return false;
+    const ids = scope.sessionIds;
+    return record(value) && Object.keys(value).length <= 256 && Object.entries(value).every(([id, appearance]) => ids.includes(id) && record(appearance) && Object.keys(appearance).length > 0 && Object.keys(appearance).every(key => ['name', 'icon'].includes(key))
+        && (appearance.name === undefined || typeof appearance.name === 'string' && appearance.name.trim().length > 0 && appearance.name.length <= 80 && !/[\x00-\x1f\x7f\u202a-\u202e\u2066-\u2069]/.test(appearance.name))
+        && (appearance.icon === undefined || validSessionIcon(appearance.icon)));
+}
+export function restrictSessionAppearances(value, ids) {
+    return value && Object.fromEntries(Object.entries(value).filter(([id]) => ids.includes(id)));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termdock",
-  "version": "1.4.354",
+  "version": "1.4.356",
   "description": "A complete web-based terminal application with modern UI",
   "type": "module",
   "main": ".desktop-dist/main.js",
@@ -66,6 +66,8 @@
     "@libp2p/utils": "7.0.7",
     "@noble/hashes": "2.4.0",
     "@novnc/novnc": "^1.7.0",
+    "@openuidev/lang-core": "1.0.1",
+    "@openuidev/react-lang": "1.0.1",
     "@peculiar/x509": "2.2.0",
     "@serenity-kit/opaque": "1.1.0",
     "@types/cookie-parser": "^1.4.10",
@@ -111,6 +113,7 @@
     "web-push": "^3.6.7",
     "ws": "^8.21.0",
     "yaml": "^2.9.1",
+    "zod": "4.6.7",
     "zustand": "^4.5.0"
   },
   "devDependencies": {

package/runtime-manifest.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 1,
   "packageName": "termdock",
-  "version": "1.4.354",
+  "version": "1.4.356",
   "runtimeProtocolVersion": 1,
   "minimumDesktopVersion": "1.4.46",
   "nodeMajor": 22,
-  "dependencyHash": "sha256-ObG1OGq7e7fMFQmYoPxPp3jRodEusYHulVNa5mT1aW8=",
-  "serverBundleHash": "sha256-BytBn+wZV+5Djv9XYLw86ORzRirpOjdtlg/oM+wPdWs=",
-  "clientBundleHash": "sha256-WZsLgBHIwqpKOiCPDz+7avZBlO8N11O2Nz0xqptny1U=",
+  "dependencyHash": "sha256-uodaeckvlR6JDQ73ORIEefAICJ13wyApaFoGn2b0/GA=",
+  "serverBundleHash": "sha256-EleaQUnsAD9SVsw4yzpj1baMo/wPvtGD+nxHeqQJMFw=",
+  "clientBundleHash": "sha256-JdYvt3n9O/BJP9I3C9SqhKgOGybj4C++jnfeyaQhd5I=",
   "entrypoint": "dist/server/cli.js",
   "clientEntrypoint": "dist/client/index.html"
 }

package/scripts/ensure-node-pty.cjs

@@ -6,6 +6,26 @@ const { spawnSync } = require('node:child_process');
 const hash = data => createHash('sha256').update(data).digest('hex');
 const upstreamHash = '5e1005d6bdcfbe97b486ee415419fe7adae99035047f07340fbad36419e0bae6';
 
+function rebuildNodePty(ptyRoot, { timeout = 180_000, patched = false } = {}) {
+  // npm install -g passes npm_config_global=true to lifecycle scripts. Do not
+  // let it turn npx's temporary dependency installation into a global install.
+  const result = spawnSync('npx', ['--global=false', '--yes', 'node-gyp', 'rebuild'], {
+    cwd: ptyRoot, stdio: 'inherit', timeout,
+  });
+  if (result.error || result.status !== 0) {
+    const context = [
+      `cwd=${ptyRoot}`,
+      `exit status=${result.status ?? 'none'}`,
+      ...(result.signal ? [`signal=${result.signal}`] : []),
+      ...(result.error ? [`${result.error.code || 'spawn error'}: ${result.error.message}`] : []),
+    ].join('; ');
+    throw new Error(`${patched ? 'Patched node-pty' : 'node-pty'} rebuild failed (${context}). `
+      + 'See the npx/node-gyp output above for the cause. Check npm/cache errors before changing build tools; '
+      + 'on macOS, compiler/linker errors may require matching Xcode Command Line Tools and SDK versions.',
+    result.error ? { cause: result.error } : undefined);
+  }
+}
+
 function patchSource(source) {
   if (hash(source) !== upstreamHash) throw new Error('Unrecognized node-pty source; review the macOS FD patch before upgrading');
   const start = source.indexOf('static void\npty_posix_spawn(char** argv', source.indexOf('pty_getproc(int fd)'));
@@ -49,15 +69,10 @@ function ensureNodePty(ptyRoot = path.dirname(require.resolve('node-pty/package.
   fs.rmSync(path.join(ptyRoot, 'prebuilds', `darwin-${process.arch}`), { recursive: true, force: true });
   fs.rmSync(path.join(ptyRoot, 'build/Debug'), { recursive: true, force: true });
   console.log('Rebuilding node-pty with the Termdock macOS FD cleanup fix...');
-  const result = spawnSync('npx', ['--yes', 'node-gyp', 'rebuild'], {
-    cwd: ptyRoot, stdio: 'inherit', timeout: 180_000,
-  });
-  if (result.error || result.status !== 0) {
-    throw new Error('Patched node-pty rebuild failed; install Xcode Command Line Tools and retry. ' + (result.error?.message || ''));
-  }
+  rebuildNodePty(ptyRoot, { patched: true });
   fs.chmodSync(helperPath, fs.statSync(helperPath).mode | 0o111);
   fs.writeFileSync(markerPath, JSON.stringify({ source: sourceHash, binary: hash(fs.readFileSync(binaryPath)) }));
   checked.add(ptyRoot);
 }
-module.exports = { ensureNodePty, patchSource };
+module.exports = { ensureNodePty, patchSource, rebuildNodePty };
 if (require.main === module) ensureNodePty(process.argv[2]);

package/scripts/postinstall.mjs

@@ -13,9 +13,10 @@ import { createRequire } from 'module';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
+import { fileURLToPath } from 'node:url';
 
 const require_ = createRequire(import.meta.url);
-const pkgRoot = new URL('..', import.meta.url).pathname;
+const pkgRoot = fileURLToPath(new URL('..', import.meta.url));
 
 function run(cmd, opts = {}) {
   console.log(`  $ ${cmd}`);
@@ -48,7 +49,7 @@ function which(bin) {
 // —— native modules: 实际 spawn 测试，不只是 require ——
 console.log('\n=== Rebuilding native modules ===');
 
-const { ensureNodePty } = require_('./ensure-node-pty.cjs');
+const { ensureNodePty, rebuildNodePty } = require_('./ensure-node-pty.cjs');
 const PTY_PATH = require_.resolve('node-pty/package.json', { paths: [pkgRoot] }).replace('/package.json', '');
 
 ensureNodePty(PTY_PATH);
@@ -91,8 +92,8 @@ if (testPty()) {
   console.log('  node-pty OK');
 } else {
   console.log('  node-pty needs rebuild (prebuilt binary incompatible with this OS/Node version)...');
-  runOk(`rm -rf ${PTY_PATH}/prebuilds/*`);
-  run(`cd ${PTY_PATH} && npx --yes node-gyp rebuild`, { timeout: 120_000 });
+  fs.rmSync(path.join(PTY_PATH, 'prebuilds'), { recursive: true, force: true });
+  rebuildNodePty(PTY_PATH, { timeout: 120_000 });
   if (testPty()) {
     console.log('  ✓ node-pty rebuilt successfully');
   } else {