termdock 1.4.355 → 1.4.357

package/dist/server/shared/programStatus.js

@@ -0,0 +1,174 @@
+import { incompleteOscSuffix } from '../utils/oscBuffer.js';
+export const PROGRAM_STATUS_REPLY = '\x1b]7501;?:states=idle,working,done,blocked,error:kinds=permission,question,auth\x1b\\';
+const STATES = new Set(['idle', 'working', 'blocked', 'done', 'error', 'clear']);
+const RANK = { idle: 0, done: 1, working: 2, error: 3, blocked: 4, clear: 0 };
+function text(value, encodedLimit, decodedLimit) {
+    if (value === undefined)
+        return undefined;
+    if (value.length > encodedLimit || !/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 === 1
+        || value.includes('=') && value.length % 4 !== 0)
+        throw new Error('invalid text');
+    const decoded = Buffer.from(value, 'base64');
+    if (decoded.length > decodedLimit || decoded.toString('base64').replace(/=+$/, '') !== value.replace(/=+$/, ''))
+        throw new Error('invalid text');
+    const result = new TextDecoder('utf-8', { fatal: true }).decode(decoded);
+    if (/[\u0000-\u001f\u007f-\u009f]/.test(result))
+        throw new Error('invalid text');
+    return result.replace(/\p{Cf}/gu, '');
+}
+/** Independent implementation of the public OSC 7501 protocol, revision 0.4:
+ * https://www.superlogical.com/rex/docs/build/program-status */
+export function parseProgramStatus(body) {
+    if (Buffer.byteLength(body) + 9 > 4096)
+        return null;
+    const pairs = Object.create(null);
+    for (const pair of body.split(':')) {
+        const index = pair.indexOf('=');
+        if (index < 1)
+            continue;
+        const key = pair.slice(0, index).trim(), value = pair.slice(index + 1).trim();
+        if (key.length > 16)
+            return null;
+        if (/^[a-z]+$/.test(key) && /^[A-Za-z0-9_.,+/=-]*$/.test(value))
+            pairs[key] = value;
+    }
+    if (!STATES.has(pairs.state))
+        return null;
+    const id = pairs.id ?? '';
+    if (id.length > 128 || (id && (id.split('/').length > 8 || !id.split('/').every(segment => /^[A-Za-z0-9_.+-]{1,32}$/.test(segment)))))
+        return null;
+    try {
+        const state = pairs.state;
+        const progress = /^(?:100|[0-9]{1,2})$/.test(pairs.progress ?? '') ? Number(pairs.progress) : undefined;
+        return { id, state, app: /^[A-Za-z0-9_.+-]{1,32}$/.test(pairs.app ?? '') ? pairs.app : undefined,
+            msg: text(pairs.msg, 2732, 2048), title: text(pairs.title, 256, 192),
+            progress: state === 'working' || state === 'blocked' ? progress : undefined,
+            kind: state === 'blocked' && ['permission', 'question', 'auth'].includes(pairs.kind) ? pairs.kind : undefined };
+    }
+    catch {
+        return null;
+    }
+}
+export function parseLegacyProgress(body) {
+    const match = /^4;([0-4])(?:;([0-9]+))?$/.exec(body);
+    if (!match)
+        return null;
+    const states = ['remove', 'set', 'error', 'indeterminate', 'pause'];
+    const state = states[Number(match[1])];
+    const progress = match[2] !== undefined && ['set', 'error', 'pause'].includes(state)
+        ? Math.min(100, Number(match[2])) : null;
+    return { state, progress };
+}
+/** State belongs to a PTY, not a browser. Native progress never mutates an
+ * Agent lifecycle, activity counter, permission decision, or notification. */
+export class ProgramStatusTracker {
+    remaining = '';
+    native = false;
+    records = new Map();
+    legacy = null;
+    current = null;
+    feed(data) {
+        const previouslyActive = this.activeApps();
+        const explicitEnd = new Set();
+        const buffer = this.remaining + data;
+        const pattern = /\x1bc|\x1b\](7501|133|9);([^\x07\x1b]*)(?:\x07|\x1b\\)/g;
+        let match, consumed = 0, query = false;
+        while ((match = pattern.exec(buffer))) {
+            consumed = pattern.lastIndex;
+            if (match[0] === '\x1bc') {
+                this.records.clear();
+                this.native = false;
+                this.legacy = null;
+                continue;
+            }
+            if (match[1] === '7501') {
+                if (match[2] === '?') {
+                    query = true;
+                    continue;
+                }
+                const record = parseProgramStatus(match[2]);
+                if (!record)
+                    continue;
+                this.native = true;
+                if (record.app && ['idle', 'done', 'error', 'clear'].includes(record.state))
+                    explicitEnd.add(record.app);
+                if (record.state === 'clear') {
+                    for (const id of this.records.keys())
+                        if (!record.id || id === record.id || id.startsWith(`${record.id}/`))
+                            this.records.delete(id);
+                }
+                else {
+                    this.records.delete(record.id);
+                    this.records.set(record.id, record);
+                    if (this.records.size > 256)
+                        this.records.delete(this.records.keys().next().value);
+                }
+            }
+            else if (match[1] === '133' && /^(?:A|P)(?:;|$)/.test(match[2])) {
+                this.legacy = null;
+                this.dropActive();
+            }
+            else if (match[1] === '9' && !this.native) {
+                const progress = parseLegacyProgress(match[2]);
+                if (progress)
+                    this.legacy = progress.state === 'remove' ? null : progress;
+            }
+        }
+        this.remaining = incompleteOscSuffix(buffer, consumed, 4096);
+        const active = this.activeApps();
+        return { ...this.update(), query, endedApps: [...new Set([...previouslyActive, ...explicitEnd])].filter(app => !active.includes(app)) };
+    }
+    activeApps() {
+        const apps = new Set();
+        for (const record of this.records.values()) {
+            if (!['working', 'blocked'].includes(record.state))
+                continue;
+            const app = this.appFor(record);
+            if (app)
+                apps.add(app);
+        }
+        return [...apps];
+    }
+    appFor(record) {
+        let app = record.app, parent = record.id;
+        while (!app && parent) {
+            parent = parent.includes('/') ? parent.slice(0, parent.lastIndexOf('/')) : '';
+            app = this.records.get(parent)?.app;
+        }
+        return app;
+    }
+    exit() {
+        this.dropActive();
+        this.legacy = null;
+        return this.update();
+    }
+    dropActive() {
+        for (const [id, record] of this.records)
+            if (['working', 'blocked', 'idle'].includes(record.state))
+                this.records.delete(id);
+    }
+    update() {
+        let selected;
+        for (const record of this.records.values())
+            if (RANK[record.state] > 0 && (!selected || RANK[record.state] >= RANK[selected.state]))
+                selected = record;
+        let progress = this.native ? null : this.legacy;
+        if (selected) {
+            const app = this.appFor(selected);
+            progress = { source: 'osc7501', state: selected.state === 'working' ? selected.progress === undefined ? 'indeterminate' : 'set' : selected.state,
+                progress: selected.progress ?? null, app, message: selected.msg ?? selected.title, kind: selected.kind };
+        }
+        const changed = JSON.stringify(progress) !== JSON.stringify(this.current);
+        this.current = progress;
+        return { changed, progress };
+    }
+}
+const trackers = new WeakMap();
+export function terminalProgramStatus(terminal) {
+    let tracker = trackers.get(terminal);
+    if (!tracker) {
+        tracker = new ProgramStatusTracker();
+        trackers.set(terminal, tracker);
+    }
+    return tracker;
+}

package/dist/server/shared/shareResources.js

@@ -1,3 +1,4 @@
+import { isValidAndroidSerial, androidRouteAccess } from './androidDevices.js';
 const record = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
 const text = (v, max) => typeof v === 'string' && v.length > 0 && v.length <= max && !/[\x00-\x1f\x7f]/.test(v);
 export function validShareResources(value) {
@@ -7,14 +8,14 @@ export function validShareResources(value) {
         if (!record(item))
             return false;
         if (key === 'android')
-            return Object.keys(item).every(k => ['serial', 'access'].includes(k)) && text(item.serial, 128) && /^(?:[0-9a-zA-Z_.:\-]+|\[[0-9a-fA-F:.]+\]:\d{1,5})$/.test(item.serial) && ['view', 'control'].includes(String(item.access));
+            return Object.keys(item).every(k => ['serial', 'access'].includes(k)) && text(item.serial, 128) && isValidAndroidSerial(item.serial) && ['view', 'control'].includes(String(item.access));
         if (key === 'computers')
             return Object.keys(item).every(k => ['host', 'protocol', 'port', 'access'].includes(k)) && text(item.host, 253) && /^[a-zA-Z0-9:.\-]+$/.test(item.host) && ['vnc', 'rdp'].includes(String(item.protocol)) && Number.isInteger(item.port) && Number(item.port) > 0 && Number(item.port) <= 65535 && (item.protocol !== 'vnc' || item.port === 5900) && ['view', 'control'].includes(String(item.access));
         return Object.keys(item).every(k => ['path', 'access'].includes(k)) && text(item.path, 4096) && (item.path.startsWith('/') || /^[A-Za-z]:[\\/]/.test(item.path)) && ['read', 'write'].includes(String(item.access));
     }));
 }
 export function resourceSubset(child, parent) {
-    return (!child?.android?.length || child.android.every(c => parent?.android?.some(p => p.serial === c.serial && (p.access === 'control' || c.access === 'view'))))
+    return (!child?.android?.length || child.android.every(c => androidRouteAccess(parent?.android, c.serial) === 'control' || c.access === 'view' && androidRouteAccess(parent?.android, c.serial) === 'view'))
         && (!child?.computers?.length || child.computers.every(c => parent?.computers?.some(p => p.host === c.host && p.protocol === c.protocol && p.port === c.port && (p.access === 'control' || c.access === 'view'))))
         && (!child?.directories?.length || child.directories.every(c => parent?.directories?.some(p => p.path === c.path && (p.access === 'write' || c.access === 'read'))));
 }

package/dist/server/todos/routes.js

@@ -1,5 +1,11 @@
 import { Router } from 'express';
 import { launchConfig, TodoError } from './store.js';
+export function handoffPrompt(store, run) {
+    return [run.handoff.todoIds.length === 1 ? '请处理这条待办：' : '请一起处理这些待办：',
+        ...run.handoff.todoIds.map((id, index) => { const todo = store.get(id); return `${index + 1}. ${todo.title}\n${todo.description}\n来源：${todo.source}${todo.sourceUrl ? `\n参考来源：${todo.sourceUrl}` : ''}`; }),
+        run.handoff.note ? `我的补充要求：\n${run.handoff.note}` : '',
+    ].filter(Boolean).join('\n\n');
+}
 function shellQuote(value) { return "'" + value.replace(/'/g, "'\"'\"'") + "'"; }
 export function todoPrompt(store, run) {
     const report = `完成或受阻时，请将结果写入一个 UTF-8 文件，并调用 td todo report ${run.id} --status complete --file <文件路径>；受阻时将 complete 换为 blocked，失败时换为 failed。报告只记录本次结果，由用户决定待办是否完成。`;
@@ -26,6 +32,35 @@ export class TodoRunner {
                 .catch(error => { this.store.mark(run.id, { status: 'failed', error: error instanceof Error ? error.message : String(error) }); });
         return run;
     }
+    async handoff(body, req) {
+        if (!body || !Array.isArray(body.todoIds) || !body.todoIds.length || body.todoIds.length > 50 || body.todoIds.some(id => typeof id !== 'string')
+            || typeof body.note !== 'string' || body.note.length > 4000 || body.note.includes('\0') || typeof body.idempotencyKey !== 'string'
+            || (body.sessionId !== undefined && (typeof body.sessionId !== 'string' || !body.sessionId || body.sessionId.length > 200))
+            || (body.sessionId && body.config))
+            throw new TodoError('请选择待办和目标会话，补充要求最多 4000 字');
+        const input = { todoIds: [...new Set(body.todoIds)], note: body.note.trim(), idempotencyKey: body.idempotencyKey,
+            ...(body.sessionId ? { sessionId: body.sessionId } : { config: launchConfig(body.config ?? {}, this.store.snapshot().defaults) }) };
+        const previous = this.store.previousHandoff(input);
+        if (previous)
+            return previous;
+        if (input.todoIds.some(id => this.store.get(id).status !== 'open'))
+            throw new TodoError('请先重新打开这条待办', 409);
+        const target = input.sessionId ? await this.runtime.target?.(input.sessionId, req) : undefined;
+        if (input.sessionId && (!target || !this.runtime.deliver))
+            throw new TodoError('目标会话不可用，请重新选择', 409);
+        const config = target?.config ?? await this.runtime.validate(input.config, req);
+        // Target validation can await; recheck the durable request before reserving any side effect.
+        const concurrent = this.store.previousHandoff(input);
+        if (concurrent)
+            return concurrent;
+        const run = this.store.beginHandoff(input, config, target?.name ?? `待办 · ${this.store.get(input.todoIds[0]).title}`.slice(0, 120));
+        const prompt = handoffPrompt(this.store, run);
+        void (input.sessionId ? this.runtime.deliver(run, prompt, req)
+            : this.runtime.launch(run, prompt, sessionId => this.store.mark(run.id, { sessionId }), req))
+            .then(() => this.store.mark(run.id, { status: 'delivered' }))
+            .catch(error => this.store.mark(run.id, { status: 'failed', error: error instanceof Error ? error.message : String(error) }));
+        return this.store.run(run.id);
+    }
     async tick() {
         for (const collector of this.store.due()) {
             try {
@@ -59,6 +94,7 @@ export function todoRoutes(store, runner, runtime) {
     router.get('/', route((_req, res) => res.json(store.snapshot())));
     router.post('/', route((req, res) => res.json({ todo: store.create(req.body ?? {}) })));
     router.post('/defaults', route(async (req, res) => res.json({ defaults: store.defaults(await runtime.validate(launchConfig(req.body ?? {}), req)) })));
+    router.post('/handoff', route(async (req, res) => res.json({ run: await runner.handoff(req.body, req) })));
     router.post('/collectors', route(async (req, res) => {
         const input = req.body ?? {};
         const config = await runtime.validate(launchConfig(input.config ?? {}), req);

package/dist/server/todos/store.js

@@ -183,7 +183,7 @@ export class TodoStore {
         const item = kind === 'execute' ? this.get(id) : this.collector(id);
         if (kind === 'execute' && item.status !== 'open')
             throw new TodoError('请先重新打开这条待办', 409);
-        if (this.doc.runs.some(r => r.status === 'launching' && (kind === 'execute' ? r.todoId === id : r.collectorId === id)))
+        if (this.doc.runs.some(r => r.status === 'launching' && (kind === 'execute' ? r.todoId === id || r.handoff?.todoIds.includes(id) : r.collectorId === id)))
             throw new TodoError('此项正在启动，请稍候', 409);
         return this.transaction(doc => {
             const now = Date.now();
@@ -200,6 +200,36 @@ export class TodoStore {
             return { run, fresh: true };
         });
     }
+    previousHandoff(input) {
+        if (!input.idempotencyKey || input.idempotencyKey.length > 200)
+            throw new TodoError('缺少有效的请求标识');
+        const previous = this.doc.requests[`handoff:${input.idempotencyKey}`];
+        if (!previous)
+            return;
+        if (previous.hash !== this.handoffHash(input))
+            throw new TodoError('同一请求标识的内容不一致', 409);
+        return this.run(previous.id);
+    }
+    beginHandoff(input, config, sessionName) {
+        const todos = input.todoIds.map(id => this.get(id));
+        if (todos.some(todo => todo.status !== 'open'))
+            throw new TodoError('请先重新打开已完成或忽略的待办', 409);
+        if (this.doc.runs.some(run => run.status === 'launching' && input.todoIds.some(id => run.todoId === id || run.handoff?.todoIds.includes(id))))
+            throw new TodoError('这些待办正在发送，请稍候', 409);
+        return this.transaction(doc => {
+            const now = Date.now();
+            const run = { id: randomUUID(), kind: 'execute', todoId: todos[0].id, collectorId: null,
+                name: todos.length === 1 ? todos[0].title : `${todos.length} 条待办`, config, createdAt: now, updatedAt: now,
+                status: 'launching', sessionId: input.sessionId ?? null, result: '', error: '',
+                handoff: { todoIds: input.todoIds, note: input.note, targetSessionId: input.sessionId ?? null, sessionName } };
+            doc.runs.push(run);
+            doc.requests[`handoff:${input.idempotencyKey}`] = { hash: this.handoffHash(input), id: run.id };
+            return run;
+        });
+    }
+    handoffHash(input) {
+        return this.hash({ todoIds: input.todoIds, note: input.note, sessionId: input.sessionId ?? null, config: input.sessionId ? null : input.config });
+    }
     mark(id, update) {
         return this.transaction(doc => {
             const run = doc.runs.find(r => r.id === id);

package/dist/server/utils/bootCheck.js

@@ -1,293 +1,63 @@
 import { ensureNodePty } from './ensureNodePty.js';
-/**
- * Termdock 启动自检 — 确保原生模块和系统依赖在启动时可用
- *
- * 设计目标：覆盖 npm 全局安装不跑 postinstall 的缺口。
- * 每次 CLI 启动时检查，通过后写 marker 避免重复检查。
- *
- * 检查项目：
- *   1. node-pty : 实际 spawn 测试 → 失败则从源码重编译
- *   2. tmux     : 检测是否安装 → 缺失则尝试自动安装
- *
- * —— 如何新增检查项 ——
- *   在 BootChecks 接口加字段，在 runBootChecks() 加 step，
- *   在 formatBootCheckReport() 加对应的输出行。
- */
-import { execSync, spawnSync } from 'child_process';
-import fs from 'fs';
-import os from 'os';
-import path from 'path';
-import { createRequire } from 'module';
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { createRequire } from 'node:module';
+const require = createRequire(import.meta.url);
+const tools = require('../../../scripts/install-utils.cjs');
+const { rebuildNodePty } = require('../../../scripts/ensure-node-pty.cjs');
 const MARKER_FILE = path.join(os.homedir(), '.termdock', '.boot-check-ok');
-function which(bin) {
-    // 先查 PATH
-    try {
-        const result = execSync(`command -v ${bin} 2>/dev/null`, { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-        if (result)
-            return result;
-    }
-    catch { /* not in PATH */ }
-    // macOS non-interactive SSH 的 PATH 不包含 Homebrew 路径，手动检查
-    const extraPaths = [
-        '/opt/homebrew/bin',
-        '/usr/local/bin',
-        '/opt/local/bin', // MacPorts
-    ];
-    for (const dir of extraPaths) {
-        const fullPath = path.join(dir, bin);
-        try {
-            fs.accessSync(fullPath, fs.constants.X_OK);
-            return fullPath;
-        }
-        catch { /* not here */ }
-    }
-    return null;
-}
-function runQuiet(cmd, timeoutMs = 30_000) {
-    try {
-        const r = spawnSync(cmd, [], {
-            shell: true,
-            timeout: timeoutMs,
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        });
-        return { ok: r.status === 0, stdout: r.stdout, stderr: r.stderr };
-    }
-    catch {
-        return { ok: false, stdout: '', stderr: '' };
-    }
-}
-// ---------------------------------------------------------------------------
-// 1. node-pty 验证 + 重建
-// ---------------------------------------------------------------------------
 function checkNodePty() {
-    const result = { ok: false, rebuilt: false };
+    let ptyPath;
     try {
-        const require_ = createRequire(import.meta.url);
-        let ptyPath;
-        try {
-            ptyPath = require_.resolve('node-pty/package.json').replace('/package.json', '');
-        }
-        catch {
-            result.error = 'node-pty not found in module resolution path';
-            return result;
-        }
-        const pty = require_(ptyPath);
-        // 修复 spawn-helper 可能因 npm 安装丢失的执行权限
-        try {
-            const prebuildsDir = path.join(ptyPath, 'prebuilds');
-            if (fs.existsSync(prebuildsDir)) {
-                for (const entry of fs.readdirSync(prebuildsDir, { withFileTypes: true })) {
-                    if (!entry.isDirectory())
-                        continue;
-                    const helperPath = path.join(prebuildsDir, entry.name, 'spawn-helper');
-                    if (!fs.existsSync(helperPath))
-                        continue;
-                    try {
-                        const mode = fs.statSync(helperPath).mode;
-                        if ((mode & 0o111) === 0)
-                            fs.chmodSync(helperPath, mode | 0o111);
-                    }
-                    catch { /* skip */ }
-                }
-            }
-        }
-        catch { /* prebuilds dir may not exist (compiled from source) */ }
-        // 实际 spawn 测试（不仅仅是 require，macOS ARM 预编译包可能 require 成功但 spawn 失败）
-        const proc = pty.spawn(process.env.SHELL || '/bin/bash', [], { name: 'xterm', cols: 80, rows: 24 });
-        proc.kill();
-        result.ok = true;
-        return result;
+        // Never bypass the Darwin FD patch after a repair failure.
+        ensureNodePty();
+        ptyPath = path.dirname(require.resolve('node-pty/package.json'));
     }
-    catch (e) {
-        // require 失败或 spawn 失败 → 尝试重编译
+    catch (error) {
+        return { ok: false, rebuilt: false, error: String(error) };
     }
     try {
-        const require_ = createRequire(import.meta.url);
-        let ptyPath;
-        try {
-            ptyPath = require_.resolve('node-pty/package.json').replace('/package.json', '');
-        }
-        catch {
-            result.error = 'node-pty not found in module resolution path';
-            return result;
-        }
-        // 清除预编译二进制缓存
-        const prebuildsDir = path.join(ptyPath, 'prebuilds');
-        if (fs.existsSync(prebuildsDir)) {
-            fs.rmSync(prebuildsDir, { recursive: true, force: true });
-        }
-        const rebuild = runQuiet(`cd ${ptyPath} && npx --yes node-gyp rebuild`, 120_000);
-        if (rebuild.ok) {
-            // 重试 spawn
-            try {
-                const pty = require_(ptyPath);
-                const proc = pty.spawn(process.env.SHELL || '/bin/bash', [], { name: 'xterm', cols: 80, rows: 24 });
-                proc.kill();
-                result.ok = true;
-                result.rebuilt = true;
-                return result;
-            }
-            catch {
-                result.error = 'node-pty 重编译成功但 spawn 仍然失败';
-                return result;
-            }
-        }
-        result.error = `node-pty 重编译失败: ${rebuild.stderr.slice(0, 200)}`;
-        return result;
-    }
-    catch (e) {
-        result.error = `node-pty 未找到或无法初始化: ${String(e).slice(0, 200)}`;
-        return result;
-    }
-}
-// ---------------------------------------------------------------------------
-// 2. tmux 检测 + 自动安装
-// ---------------------------------------------------------------------------
-function checkTmux() {
-    const result = { ok: false, installed: false };
-    // 先检查是否已安装
-    const tmuxPath = which('tmux');
-    if (tmuxPath) {
-        try {
-            result.version = execSync('tmux -V', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-        }
-        catch { /* ignore */ }
-        result.ok = true;
-        result.installed = false; // 没有新安装
-        return result;
+        tools.probeNodePty(ptyPath);
+        return { ok: true, rebuilt: false };
     }
-    // —— 尝试自动安装 ——
-    const platform = process.platform;
-    if (platform === 'darwin') {
-        // macOS: 尝试多个包管理器
-        const brew = which('brew');
-        if (brew) {
-            const r = runQuiet(`${brew} install tmux 2>&1`, 120_000);
-            if (r.ok || which('tmux')) {
-                try {
-                    result.version = execSync('tmux -V', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-                }
-                catch { /* ignore */ }
-                result.ok = true;
-                result.installed = true;
-                return result;
-            }
-        }
-        const port = which('port'); // MacPorts
-        if (port) {
-            const r = runQuiet(`${port} install tmux 2>&1`, 120_000);
-            if (r.ok || which('tmux')) {
-                try {
-                    result.version = execSync('tmux -V', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-                }
-                catch { /* ignore */ }
-                result.ok = true;
-                result.installed = true;
-                return result;
-            }
-        }
-        const nixEnv = which('nix-env');
-        if (nixEnv) {
-            const r = runQuiet(`${nixEnv} -iA nixpkgs.tmux 2>&1`, 120_000);
-            if (r.ok || which('tmux')) {
-                try {
-                    result.version = execSync('tmux -V', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-                }
-                catch { /* ignore */ }
-                result.ok = true;
-                result.installed = true;
-                return result;
-            }
-        }
-        result.error = 'tmux 未安装且未找到包管理器 (brew/port/nix)。请安装 Homebrew: https://brew.sh';
-        return result;
+    catch { /* An incompatible addon needs a rebuild in a non-global npx. */ }
+    try {
+        fs.rmSync(path.join(ptyPath, 'prebuilds'), { recursive: true, force: true });
+        rebuildNodePty(ptyPath, { timeout: 120_000 });
+        tools.clearPtyModuleCache(ptyPath);
+        tools.probeNodePty(ptyPath);
+        return { ok: true, rebuilt: true };
     }
-    if (platform === 'linux') {
-        // 尝试多种 Linux 包管理器
-        const managers = [
-            { bin: 'apt-get', cmd: 'apt-get install -y tmux' },
-            { bin: 'dnf', cmd: 'dnf install -y tmux' },
-            { bin: 'yum', cmd: 'yum install -y tmux' },
-            { bin: 'apk', cmd: 'apk add tmux' },
-            { bin: 'pacman', cmd: 'pacman -S --noconfirm tmux' },
-            { bin: 'zypper', cmd: 'zypper install -y tmux' },
-        ];
-        for (const m of managers) {
-            if (!which(m.bin))
-                continue;
-            // 需要 root 权限
-            const r = runQuiet(`sudo ${m.cmd} 2>&1`, 120_000);
-            if (r.ok || which('tmux')) {
-                try {
-                    result.version = execSync('tmux -V', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-                }
-                catch { /* ignore */ }
-                result.ok = true;
-                result.installed = true;
-                return result;
-            }
-            // 也试一下不用 sudo
-            const r2 = runQuiet(`${m.cmd} 2>&1`, 120_000);
-            if (r2.ok || which('tmux')) {
-                try {
-                    result.version = execSync('tmux -V', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-                }
-                catch { /* ignore */ }
-                result.ok = true;
-                result.installed = true;
-                return result;
-            }
-        }
-        result.error = 'tmux 未安装。请用系统包管理器安装，例如: sudo apt install tmux';
-        return result;
+    catch (error) {
+        return { ok: false, rebuilt: false, error: String(error) };
     }
-    // 其他平台
-    result.error = `不支持在 ${platform} 上自动安装 tmux。请手动安装。`;
-    return result;
 }
-// ---------------------------------------------------------------------------
-// 主入口
-// ---------------------------------------------------------------------------
-let _cachedResult = null;
+let cachedResult = null;
 export function runBootChecks() {
-    ensureNodePty(); // Must precede the global marker and any native module load.
-    if (_cachedResult)
-        return _cachedResult;
-    // 如果 marker 存在且有效，读取缓存的检查结果
-    if (fs.existsSync(MARKER_FILE)) {
+    if (cachedResult)
+        return cachedResult;
+    // The on-disk marker is diagnostic only. Node upgrades, a removed tmux, or
+    // another installation must never be accepted solely because it says "ok".
+    const nodePty = checkNodePty(), tmux = tools.checkTmux();
+    cachedResult = { nodePty, tmux };
+    if (nodePty.ok && tmux.ok) {
         try {
-            const cached = JSON.parse(fs.readFileSync(MARKER_FILE, 'utf-8'));
-            if (cached.nodePty?.ok && cached.tmux?.ok) {
-                _cachedResult = {
-                    nodePty: cached.nodePty,
-                    tmux: cached.tmux,
-                };
-                return _cachedResult;
-            }
-            // marker 存在但状态不完整（例如 postinstall 部分失败）→ 重新检查
+            fs.mkdirSync(path.dirname(MARKER_FILE), { recursive: true, mode: 0o700 });
+            fs.writeFileSync(MARKER_FILE, JSON.stringify({ checkedAt: new Date().toISOString(), nodePty, tmux,
+                runtime: { node: process.version, abi: process.versions.modules, platform: process.platform, arch: process.arch } }), { mode: 0o600 });
         }
-        catch { /* marker 损坏 → 重新检查 */ }
+        catch { /* A read-only home does not prevent running the terminal. */ }
     }
-    const nodePty = checkNodePty();
-    const tmux = checkTmux();
-    _cachedResult = { nodePty, tmux };
-    // 全部通过则写 marker
-    if (nodePty.ok && tmux.ok) {
+    else {
         try {
-            fs.mkdirSync(path.dirname(MARKER_FILE), { recursive: true });
-            fs.writeFileSync(MARKER_FILE, JSON.stringify({ checkedAt: new Date().toISOString(), nodePty, tmux }), 'utf-8');
+            fs.rmSync(MARKER_FILE, { force: true });
         }
-        catch { /* 非关键 */ }
+        catch { /* Diagnostic only. */ }
     }
-    return _cachedResult;
-}
-export function getBootChecks() {
-    return _cachedResult ?? runBootChecks();
+    return cachedResult;
 }
+export function getBootChecks() { return cachedResult ?? runBootChecks(); }
 /**
  * 格式化启动检查报告，用于 CLI 启动时显示给用户。
  */