termdock 1.4.373 → 1.4.375

package/dist/client/sw.js

@@ -1 +1 @@
-if(!self.define){let e,s={};const i=(i,n)=>(i=new URL(i+".js",n).href,s[i]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=i,e.onload=s,document.head.appendChild(e)}else e=i,importScripts(i),s()}).then(()=>{let e=s[i];if(!e)throw new Error(`Module ${i} didn’t register its module`);return e}));self.define=(n,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let c={};const r=e=>i(e,o),d={module:{uri:o},exports:c,require:r};s[o]=Promise.all(n.map(e=>d[e]||r(e))).then(e=>(a(...e),c))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"5f1c94bda5ff80a2e178782ee1c72bec"},{url:"assets/app-window-mac-ClMV30iq.js",revision:null},{url:"assets/app-window-HhRRMsgc.js",revision:null},{url:"assets/app-BckfITLP.js",revision:null},{url:"assets/react-l0sNRNKZ.js",revision:null},{url:"assets/dnd-CYu7YLJF.js",revision:null},{url:"assets/terminal-DaiFCKy_.js",revision:null},{url:"assets/index-BTNj_3HK.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});
+if(!self.define){let e,s={};const n=(n,i)=>(n=new URL(n+".js",i).href,s[n]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=n,e.onload=s,document.head.appendChild(e)}else e=n,importScripts(n),s()}).then(()=>{let e=s[n];if(!e)throw new Error(`Module ${n} didn’t register its module`);return e}));self.define=(i,a)=>{const o=e||("document"in self?document.currentScript.src:"")||location.href;if(s[o])return;let r={};const c=e=>n(e,o),d={module:{uri:o},exports:r,require:c};s[o]=Promise.all(i.map(e=>d[e]||c(e))).then(e=>(a(...e),r))}}define(["./workbox-9845bf53"],function(e){"use strict";importScripts("sw-encrypted-background.js","sw-notifications.js","sw-secure-api.js","sw-downloads.js"),self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),e.clientsClaim(),e.precacheAndRoute([{url:"index.html",revision:"7593aff8298c6028b2a294068f921b2c"},{url:"assets/app-x3GyQcok.js",revision:null},{url:"assets/app-window-mac-BRdzXuuc.js",revision:null},{url:"assets/app-window-C5uAHEFz.js",revision:null},{url:"assets/react-l0sNRNKZ.js",revision:null},{url:"assets/dnd-CYu7YLJF.js",revision:null},{url:"assets/terminal-DaiFCKy_.js",revision:null},{url:"assets/index-CBb0xNS1.css",revision:null},{url:"icons/agents/opencode.svg",revision:"851c2931d95821ba2b39b68587b48976"},{url:"icons/agents/kimi.svg",revision:"5366c710f4f763022fe159a69cf17409"},{url:"icons/agents/grok.svg",revision:"cd745b0b964545bc7a6b4f36021c3298"},{url:"icons/agents/goose.svg",revision:"c79b927278983c19098d77b4b0c11ab3"},{url:"icons/agents/gemini.svg",revision:"7a64f6d6f80a908255e9c0256903882e"},{url:"icons/agents/droid.svg",revision:"f28723b8c5c115e0908ba3c72613e256"},{url:"icons/agents/cursor.svg",revision:"a1528f3d3cda497f75a5db28defb19de"},{url:"icons/agents/copilot.svg",revision:"dd52e96c1eac0b6ec4bedcd0ddd3b52d"},{url:"icons/agents/codex.svg",revision:"608e55babb0b217e1f2da287342b46d3"},{url:"icons/agents/claude.svg",revision:"08af0225b7acdd8e8f573f3247e5e1c3"},{url:"icons/agents/amp.svg",revision:"af12f8b33faa81e4d46ea7b93c7e43f3"},{url:"apple-touch-icon-180x180.png",revision:"628c2e2f28a9b545aa57be1352025643"},{url:"boot-logo.png",revision:"2e3a25efd9b0b8ca1eab53b5f2284556"},{url:"favicon.ico",revision:"2994debfa6f59a0898e24eb0c54d64b5"},{url:"ipad-status-bar.js",revision:"3a8080edb8a5cc658a7908f6ad69537f"},{url:"maskable-icon-512x512.png",revision:"4d489331fd81f0713c400b26426442b9"},{url:"pwa-192x192.png",revision:"4d6f899888cfb8ccd7a1fd3c9e583ad2"},{url:"pwa-512x512.png",revision:"0885dd7ec8932e7f878b013d51a380a4"},{url:"robots.txt",revision:"d9339907142917dee4aac78494ac9cfe"},{url:"sw-downloads.js",revision:"48dab2e78bd93b4eee27fca487eccfde"},{url:"sw-notifications.js",revision:"fde578590ea8b0540d488ef448b48f45"},{url:"sw-secure-api.js",revision:"cf2bdbd03d41d66d60344c0b5a1075de"},{url:"manifest.webmanifest",revision:"83f9a43b74c236012adafb077fb6d774"}],{}),e.cleanupOutdatedCaches(),e.registerRoute(new e.NavigationRoute(e.createHandlerBoundToURL("index.html"),{denylist:[/^\/api\//,/^\/__termdock-download\//,/^\/health$/]})),e.registerRoute(/\/assets\/.*\.(?:js|css)$/,new e.CacheFirst({cacheName:"termdock-lazy-assets-v1",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:96,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/terminal\/[^/]+-[a-f0-9]{12}\.woff2$/,new e.CacheFirst({cacheName:"termdock-fonts-v2",plugins:[new e.CacheableResponsePlugin({statuses:[0,200]}),new e.ExpirationPlugin({maxEntries:384,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/fonts\/.*\.(?:woff2|ttf)$/,new e.StaleWhileRevalidate({cacheName:"termdock-fonts-v1",plugins:[new e.ExpirationPlugin({maxEntries:24,maxAgeSeconds:2592e3})]}),"GET")});

package/dist/server/agent/collaborationDeliveryWorker.js

@@ -156,6 +156,10 @@ export class CollaborationDeliveryWorker {
             return;
         }
         const message = pending[0];
+        if (message.metadata?.chatOnly === true && (this.options.authorizeMessage?.(message) === false || route.isShell || !route.agentSlug)) {
+            store.fail(message.id, 'SHARED_CHAT_ACCESS_OR_AGENT_UNAVAILABLE');
+            return;
+        }
         if (route.isShell && message.shellConfirmed !== true) {
             if (route.capture && !message.direct) {
                 try {

package/dist/server/agent/collaborationEndpoints.js

@@ -0,0 +1,27 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+/** Persisted collaboration origins name sessions. Dial only the administrator's
+ * current pinned addresses when available, without weakening their trust mode. */
+export async function withPeerEndpoint(peer, targets, baseDir, connect) {
+    const configured = targets.filter(target => target.serviceId === peer.serviceId);
+    if (!configured.length) {
+        const hostname = new URL(peer.origin).hostname;
+        if (['localhost', '127.0.0.1', '[::1]'].includes(hostname) || hostname.endsWith('.localhost'))
+            throw new Error('WAITING_FOR_PEER_CONNECTION');
+        return connect(peer);
+    }
+    let failure;
+    for (const target of configured) {
+        try {
+            const origin = new URL(target.url.replace(/^wss:/, 'https:')).origin;
+            const node = { serviceId: peer.serviceId, origin, ...(target.caFingerprint256 ? { caFingerprint256: target.caFingerprint256 } : {}) };
+            const ca = target.caPath ? readFileSync(resolve(baseDir, target.caPath)) : undefined;
+            return await connect(node, ca, target.certificateFingerprint256);
+        }
+        catch (error) {
+            failure = error;
+        }
+    }
+    // An explicit saved pin supersedes the legacy origin, including on failure.
+    throw failure;
+}

package/dist/server/agent/collaborationPeerTransport.js

@@ -26,6 +26,14 @@ function localSession(origin, id) {
     const prefix = `remote:${encodeURIComponent(origin)}:`;
     return id.startsWith(prefix) ? decodeURIComponent(id.slice(prefix.length)) : id;
 }
+function mapAlias(id, source, target, peer, local) {
+    for (const [from, to] of [[source, peer], [target, local]]) {
+        const prefix = `remote:${encodeURIComponent(from)}:`;
+        if (id.startsWith(prefix))
+            return remoteSession(to, decodeURIComponent(id.slice(prefix.length)));
+    }
+    return id;
+}
 export function validateCollaborationNode(input) {
     const url = new URL(input.origin);
     if (url.protocol !== 'https:' || url.origin !== input.origin || url.username || url.password
@@ -264,6 +272,16 @@ export class CollaborationPeerTransport {
     receive(subjectId, packet) {
         const b = this.binding(subjectId, String(packet.groupId));
         const store = this.options.store;
+        if (packet.targetServiceId !== undefined) {
+            if (packet.targetServiceId !== this.options.serviceId || typeof packet.sourceOrigin !== 'string' || typeof packet.targetOrigin !== 'string')
+                throw new Error('INVALID_PEER_MESSAGE');
+            validateCollaborationNode({ serviceId: subjectId, origin: packet.sourceOrigin });
+            validateCollaborationNode({ serviceId: this.options.serviceId, origin: packet.targetOrigin });
+            const source = packet.sourceOrigin, target = packet.targetOrigin;
+            const map = (id) => mapAlias(id, source, target, b.peer.origin, b.localOrigin);
+            packet = { ...packet, ...(packet.context ? { context: mapContext(packet.context, map) } : {}),
+                ...(packet.message ? { message: { ...packet.message, toSessionId: map(packet.message.toSessionId) } } : {}) };
+        }
         if (packet.context)
             store.mergeContext(b.groupId, mapContext(packet.context, id => localSession(b.localOrigin, id)));
         if (packet.message) {
@@ -311,7 +329,8 @@ export class CollaborationPeerTransport {
         });
         const group = store.getGroup(b.groupId);
         const activity = this.options.activity?.().filter(item => group.sessionIds.includes(item.sessionId) && !item.sessionId.startsWith('remote:')) ?? [];
-        return { activity, context: mapContext(store.context(b.groupId), id => id.startsWith('remote:') ? id : remoteSession(b.localOrigin, id)), receipts, receivedIds: packet.ids.filter(id => {
+        return { sourceOrigin: b.localOrigin, targetOrigin: b.peer.origin, targetServiceId: b.peer.serviceId,
+            activity, context: mapContext(store.context(b.groupId), id => id.startsWith('remote:') ? id : remoteSession(b.localOrigin, id)), receipts, receivedIds: packet.ids.filter(id => {
                 const message = store.getMessage(id);
                 return message?.groupId === b.groupId && message.fromSessionId?.startsWith(`remote:${encodeURIComponent(b.peer.origin)}:`) && !message.toSessionId.startsWith('remote:');
             }) };
@@ -393,6 +412,7 @@ export class CollaborationPeerTransport {
                 const payloads = requests.length ? requests : [undefined];
                 for (const message of payloads) {
                     const result = await client.request({ type: 'collaboration-exchange', groupId: b.groupId,
+                        sourceOrigin: b.localOrigin, targetOrigin: b.peer.origin, targetServiceId: b.peer.serviceId,
                         context: mapContext(store.context(b.groupId), id => id.startsWith('remote:') ? id : remoteSession(b.localOrigin, id)),
                         ids: batch.map(m => m.id), known: batch.map(m => ({ id: m.id, status: m.status, deliveredAt: m.deliveredAt, hasSnapshot: !!m.snapshot, shellConfirmed: m.shellConfirmed, last_error: store.diagnostic(m.id)?.last_error ?? null })), ...(message ? { message } : {}) });
                     if (Array.isArray(result.activity))
@@ -403,8 +423,18 @@ export class CollaborationPeerTransport {
                             if (store.getGroup(b.groupId)?.sessionIds.includes(id))
                                 store.recordPeerActivity(id, item.last_terminal_output_at, item.activity_observed_at);
                         }
-                    if (result.context)
-                        store.mergeContext(b.groupId, mapContext(result.context, id => localSession(b.localOrigin, id)));
+                    if (result.context) {
+                        let context = result.context;
+                        if (result.targetServiceId !== undefined) {
+                            if (result.targetServiceId !== this.options.serviceId || typeof result.sourceOrigin !== 'string' || typeof result.targetOrigin !== 'string')
+                                throw new Error('INVALID_PEER_MESSAGE');
+                            validateCollaborationNode({ serviceId: b.peer.serviceId, origin: result.sourceOrigin });
+                            validateCollaborationNode({ serviceId: this.options.serviceId, origin: result.targetOrigin });
+                            const source = result.sourceOrigin, target = result.targetOrigin;
+                            context = mapContext(context, id => mapAlias(id, source, target, b.peer.origin, b.localOrigin));
+                        }
+                        store.mergeContext(b.groupId, mapContext(context, id => localSession(b.localOrigin, id)));
+                    }
                     if (Array.isArray(result.receivedIds))
                         for (const item of batch) {
                             if (result.receivedIds.includes(item.id))

package/dist/server/agent/collaborationService.js

@@ -95,6 +95,38 @@ export class CollaborationService {
         this.persist();
     }
     descriptor() { return { ...this.options.node(), ...(this.document.origin ? { origin: this.document.origin } : {}) }; }
+    /** Origins in persisted session ids are local aliases, not service identities.
+     * Retain those aliases across address changes; service id and CA stay pinned.
+     * Namespace loopback peers so two different Macs never share one alias. */
+    canonicalNodes(nodes, origin) {
+        const ids = new Set();
+        return nodes.map(node => {
+            validateCollaborationNode(node);
+            if (ids.has(node.serviceId))
+                throw new Error('DUPLICATE_SERVICE_DIRECTORY');
+            ids.add(node.serviceId);
+            if (node.serviceId === this.options.node().serviceId) {
+                if (node.caFingerprint256 !== this.options.node().caFingerprint256)
+                    throw new Error('LOCAL_NODE_MISMATCH');
+                return { ...node, origin };
+            }
+            const old = this.document.peers.find(peer => peer.serviceId === node.serviceId);
+            if (old) {
+                if (old.caFingerprint256 !== node.caFingerprint256)
+                    throw new Error('PEER_IDENTITY_CHANGED');
+                return { ...old };
+            }
+            const host = new URL(node.origin).hostname;
+            const loopbackCollision = ['localhost', '127.0.0.1', '[::1]'].includes(host)
+                && (node.origin === origin || this.document.peers.some(peer => peer.origin === node.origin)
+                    || nodes.some(other => other.serviceId !== node.serviceId && other.origin === node.origin));
+            const alias = loopbackCollision
+                ? `https://${node.serviceId.toLowerCase()}.localhost` : node.origin;
+            if (alias === origin || this.document.peers.some(peer => peer.origin === alias))
+                throw new Error('PEER_IDENTITY_CHANGED');
+            return { ...node, origin: alias };
+        });
+    }
     /** Only fully paired directory peers may route opaque encrypted traffic to
      * another fully paired peer. A shared-session registration never qualifies. */
     canRoute(subject, target) {
@@ -126,6 +158,17 @@ export class CollaborationService {
     receiveDirect(peer, packet) {
         if (!this.options.deliver || this.effectiveScope(peer.serviceId) !== undefined)
             throw new Error('SESSION_SCOPE_DENIED');
+        if (packet.targetServiceId !== undefined) {
+            if (packet.targetServiceId !== this.options.node().serviceId || typeof packet.targetOrigin !== 'string')
+                throw new Error('INVALID_DIRECT_MESSAGE');
+            validateCollaborationNode({ serviceId: packet.targetServiceId, origin: packet.targetOrigin });
+            const normalize = (id) => {
+                const target = directRemoteAddress(id);
+                return target && target.origin === packet.targetOrigin ? remoteSession(this.node().origin, target.id) : id;
+            };
+            packet = { ...packet, ...(typeof packet.targetSessionId === 'string' ? { targetSessionId: normalize(packet.targetSessionId) } : {}),
+                ...(packet.message ? { message: { ...packet.message, toSessionId: normalize(packet.message.toSessionId) } } : {}) };
+        }
         if (!packet.message) {
             const target = typeof packet.targetSessionId === 'string' ? directRemoteAddress(packet.targetSessionId) : null;
             if (!target || target.origin !== this.node().origin || !directLocalId(packet.fromSessionId)
@@ -198,8 +241,10 @@ export class CollaborationService {
                     try {
                         const client = await this.client(peer);
                         const body = { type: 'collaboration-service', action: 'direct-message', message,
+                            targetServiceId: peer.serviceId, targetOrigin: peer.origin,
                             sourceName: this.options.sessions().find(session => session.sessionId === message.fromSessionId)?.name };
                         let result = previous?.remote_received_at ? await client.request({ type: 'collaboration-service', action: 'direct-message',
+                            targetServiceId: peer.serviceId, targetOrigin: peer.origin,
                             messageId: message.id, fromSessionId: message.fromSessionId, targetSessionId: message.toSessionId, shellConfirmed: message.shellConfirmed === true })
                             : await client.request(body);
                         if (result.directContacts === 1 && result.missing === message.id)
@@ -269,17 +314,9 @@ export class CollaborationService {
         const own = nodes.find(node => node?.serviceId === self.serviceId);
         if (!own || own.origin !== origin || own.caFingerprint256 !== self.caFingerprint256)
             throw new Error('LOCAL_NODE_MISMATCH');
-        const ids = new Set(), origins = new Set();
-        for (const node of nodes) {
-            validateCollaborationNode(node);
-            if (ids.has(node.serviceId) || origins.has(node.origin))
-                throw new Error('DUPLICATE_SERVICE_DIRECTORY');
-            ids.add(node.serviceId);
-            origins.add(node.origin);
-            const old = this.document.peers.find(peer => peer.serviceId === node.serviceId || peer.origin === node.origin);
-            if (old && (old.serviceId !== node.serviceId || old.origin !== node.origin || old.caFingerprint256 !== node.caFingerprint256))
-                throw new Error('PEER_IDENTITY_CHANGED');
-        }
+        nodes = this.canonicalNodes(nodes, origin);
+        if (new Set(nodes.map(node => node.origin)).size !== nodes.length)
+            throw new Error('DUPLICATE_SERVICE_DIRECTORY');
         const removed = new Set(this.document.removedPeers?.map(peer => peer.serviceId));
         const eligible = nodes.filter(node => node.serviceId !== self.serviceId && !removed.has(node.serviceId));
         if (new Set([...this.document.peers.map(peer => peer.serviceId), ...eligible.map(node => node.serviceId)]).size > 63)
@@ -448,7 +485,10 @@ export class CollaborationService {
         }
         if (packet.action === 'group') {
             const canonical = packet.group;
-            if (!canonical?.sessionIds?.some(id => address(id)?.origin === peer.origin) && !this.document.replicas?.[canonical?.id]?.includes(peer.origin))
+            const sender = Array.isArray(packet.nodes) ? packet.nodes.find(node => node.serviceId === subject) : undefined;
+            if (!sender || sender.caFingerprint256 !== peer.caFingerprint256)
+                throw new Error('PEER_IDENTITY_CHANGED');
+            if (!canonical?.sessionIds?.some(id => address(id)?.origin === sender.origin) && !this.document.replicas?.[canonical?.id]?.includes(peer.origin))
                 throw new Error('GROUP_SENDER_NOT_MEMBER');
             this.merge(canonical, packet.nodes, peer);
             return { ok: true };
@@ -474,12 +514,17 @@ export class CollaborationService {
             || canonical.sessionIds.length < 2 || canonical.sessionIds.length > 500 || typeof canonical.name !== 'string' || !canonical.name.trim() || COLLAB_NAME_FORBIDDEN.test(canonical.name)
             || !Number.isFinite(canonical.updatedAt) || canonical.updatedAt > Date.now() + 60_000 || !Array.isArray(nodes) || nodes.length > 65)
             throw new Error('INVALID_GROUP');
-        for (const node of nodes) {
-            validateCollaborationNode(node);
-            const trusted = this.document.peers.find(peer => peer.serviceId === node.serviceId || peer.origin === node.origin);
-            if (trusted && (trusted.serviceId !== node.serviceId || trusted.origin !== node.origin || trusted.caFingerprint256 !== node.caFingerprint256))
-                throw new Error('PEER_IDENTITY_CHANGED');
-        }
+        // Convert the sender's unambiguous aliases through pinned service ids before
+        // comparing membership. Never rewrite stored messages or another peer's CA.
+        if (new Set(nodes.map(node => node?.origin)).size !== nodes.length)
+            throw new Error('DUPLICATE_SERVICE_DIRECTORY');
+        const normalized = this.canonicalNodes(nodes, this.node().origin);
+        const aliases = new Map(nodes.map((node, index) => [node.origin, normalized[index].origin]));
+        canonical = mapGroup(canonical, id => {
+            const target = address(id);
+            return target && aliases.has(target.origin) ? remoteSession(aliases.get(target.origin), target.id) : id;
+        });
+        nodes = normalized;
         const self = this.node(), own = nodes.find(node => node.serviceId === self.serviceId);
         if (!own || own.origin !== self.origin || own.caFingerprint256 !== self.caFingerprint256)
             throw new Error('LOCAL_NODE_MISMATCH');

package/dist/server/agent/sessionChatRoutes.js

@@ -1,6 +1,6 @@
 import { createHash } from 'node:crypto';
 import { Router } from 'express';
-import { encryptedRequestSubject, hasEncryptedServiceAccess } from '../federation/requestContext.js';
+import { encryptedRequestSubject, hasEncryptedServiceAccess, isRestrictedChatRequest } from '../federation/requestContext.js';
 import { chatPresentation } from '../shared/chatPresentation.js';
 import { chatReplyExcerpt } from '../shared/chatReplyContext.js';
 import { CollaborationError, hasUnconfirmedTerminalWrite } from './collaborationProtocol.js';
@@ -219,8 +219,12 @@ export function sessionChatRoutes(options) {
                     throw new CollaborationError('SESSION_SCOPE_DENIED', '无权提及该会话；分享入口不开放协作发现与联系', 403);
                 }
             }
+            const restricted = isRestrictedChatRequest(req);
+            const content = body.content.replace(/\r\n?/g, '\n').trim();
+            if (restricted && (/[\x00-\x08\x0b-\x1f\x7f-\x9f]/.test(content) || content.startsWith('/')))
+                throw new CollaborationError('SHARED_CHAT_TEXT_REQUIRED', '此分享仅允许普通消息，不支持终端按键或 Agent 命令', 403);
             const group = options.store.ensureSessionChat(ctx.session.sessionId);
-            const [message] = options.store.send({ groupId: group.id, fromSessionId: null, toSessionIds: [ctx.session.sessionId], kind: 'ask', content: body.content.trim(), integrationOrigin: { integrationId: ctx.principal, source: 'session-chat' }, idempotencyKey: body.requestId, threadId: ctx.principal });
+            const [message] = options.store.send({ groupId: group.id, fromSessionId: null, toSessionIds: [ctx.session.sessionId], kind: 'ask', content, ...(restricted ? { metadata: { chatOnly: true, chatSubject: encryptedRequestSubject(req) } } : {}), integrationOrigin: { integrationId: ctx.principal, source: 'session-chat' }, idempotencyKey: body.requestId, threadId: ctx.principal });
             options.deliver(ctx.session.sessionId);
             res.json({ id: message.id, status: message.status, createdAt: message.createdAt });
         }

package/dist/server/agent/sharedChatTarget.js

@@ -0,0 +1,10 @@
+/** Recheck inside the actual input queue, immediately before paste and submit. */
+export async function validateSharedChatTarget(pinned, allowed, inspect, validateRecovered) {
+    await validateRecovered?.();
+    if (!allowed())
+        throw new Error('SHARED_CHAT_AUTHORIZATION_UNAVAILABLE');
+    const observed = await inspect(), current = observed.pane;
+    if (observed.state !== 'ready' || !current || current.isShell || !current.agentSlug || current.agentSlug !== pinned.agentSlug
+        || current.serverPid !== pinned.serverPid || current.sessionId !== pinned.sessionId || current.paneId !== pinned.paneId || current.panePid !== pinned.panePid)
+        throw new Error('SHARED_CHAT_AGENT_UNAVAILABLE');
+}

package/dist/server/entry.js

@@ -19,6 +19,7 @@ import { DirectTargetRegistry } from './federation/directTargetRegistry.js';
 import { secureChannelOriginAllowed } from './federation/originPolicy.js';
 import { RelayRouter } from './federation/relay.js';
 import { DesktopSelfRelay } from './federation/selfRelay.js';
+import { withPeerEndpoint } from './agent/collaborationEndpoints.js';
 import { assertPublicSecurity, securityHeaders } from './utils/publicSecurity.js';
 import { apiCachePolicy } from './utils/apiCachePolicy.js';
 import 'dotenv/config';
@@ -33,7 +34,7 @@ import { homedir } from 'os';
 import cookieParser from 'cookie-parser';
 import { fileURLToPath } from 'url';
 import { WebSocketServer } from 'ws';
-import terminalRoutes, { handleTerminalWebSocket, handleControlWebSocket, resolveStableFederationSessionId } from './routes/terminal.js';
+import terminalRoutes, { handleTerminalWebSocket, handleControlWebSocket, resolveStableFederationSessionId, configureSharedChatAccess } from './routes/terminal.js';
 import androidRoutes, { handleAndroidWebSocket } from './routes/android.js';
 import computerRoutes, { handleComputerWebSocket, stopComputerBridges } from './routes/computer.js';
 import { exitWithStartupFailure } from './utils/startupFailure.js';
@@ -552,7 +553,11 @@ export function startServer(options = {}) {
         },
         listRouteTargets: () => {
             refreshDirectTargets();
-            return routeAccess.configuredTargets().map(target => directTargetRegistry.describe(target));
+            return routeAccess.configuredTargets().map(target => {
+                const description = directTargetRegistry.describe(target);
+                const metadata = routeAccess.selfRelayMetadata(target.serviceId);
+                return { ...metadata, ...description, ...(description.label || metadata.hostname ? { label: description.label || metadata.hostname } : {}) };
+            });
         },
         listRouteAccess: () => routeInvitations?.list() || [],
         grantRouteAccess: async (issuerId, targetServiceId, subjectId, url) => {
@@ -581,12 +586,12 @@ export function startServer(options = {}) {
                 throw new Error(failure);
             return routeAccess.issueRouteTicket(subjectId, serviceId);
         },
-        issueSelfRelayTicket: (serviceId) => routeAccess.issueSelfRelayTicket(serviceId),
+        issueSelfRelayTicket: (serviceId, metadata) => routeAccess.issueSelfRelayTicket(serviceId, metadata),
         hasRouteGrant: (subjectId, serviceId) => routeInvitations?.allows(subjectId, serviceId) === true || collaborationTransport?.canRoute(subjectId, serviceId) === true || collaborationService?.canRoute(subjectId, serviceId) === true,
-        createRouteInvitation: (issuerId, serviceId) => {
+        createRouteInvitation: (issuerId, serviceId, settings) => {
             if (!routeInvitations)
                 throw new Error('ROUTE_NOT_AVAILABLE');
-            return routeInvitations.create(issuerId, serviceId);
+            return routeInvitations.create(issuerId, serviceId, settings);
         },
         consumeRouteInvitation: (code, subjectId) => {
             if (!routeInvitations)
@@ -595,6 +600,8 @@ export function startServer(options = {}) {
         },
     });
     void federation.then(async (runtime) => {
+        configureSharedChatAccess((subjectId, sessionId) => runtime.store.authorize({ subjectId, serviceId: runtime.serviceId, action: 'session.chat-send', sessionId: resolveStableFederationSessionId(sessionId) || sessionId }).allowed);
+        onServerClose(() => configureSharedChatAccess(undefined));
         federationServiceId = runtime.serviceId;
         setPushTargetPeerId(runtime.serviceId);
         refreshDirectTargets();
@@ -606,25 +613,24 @@ export function startServer(options = {}) {
                 return collaborationTransport.receive(subjectId, packet);
             throw new Error('COLLABORATION_UNAVAILABLE');
         };
-        const connectPeer = (peer) => {
-            if (['localhost', '127.0.0.1', '[::1]'].includes(new URL(peer.origin).hostname))
-                throw new Error('WAITING_FOR_PEER_CONNECTION');
-            return connectCollaborationRpc(runtime.identity, peer, undefined, packet => receiveCollaboration(peer.serviceId, packet));
-        };
+        const peerEndpoint = (peer, connect) => withPeerEndpoint(peer, routeAccess.configuredDirectTargets(), path.join(homedir(), '.termdock', 'federation'), connect);
+        const connectPeer = (peer) => peerEndpoint(peer, (node, ca, pin) => connectCollaborationRpc(runtime.identity, node, undefined, packet => receiveCollaboration(peer.serviceId, packet), ca, pin));
         const connectVia = async (peer, via) => {
-            const entry = await connectCollaborationRpc(runtime.identity, via);
-            try {
-                const ticket = await entry.request({ type: 'route-ticket', serviceId: peer.serviceId });
-                if (typeof ticket.routeToken !== 'string')
-                    throw new Error('ROUTE_UNAVAILABLE');
-                const url = new URL('/api/federation/relay', via.origin.replace(/^https:/, 'wss:'));
-                url.searchParams.set('routeToken', ticket.routeToken);
-                // TLS authenticates the entry; Noise pins the final destination.
-                return await connectCollaborationRpc(runtime.identity, { ...via, serviceId: peer.serviceId }, url.href, packet => receiveCollaboration(peer.serviceId, packet));
-            }
-            finally {
-                entry.close();
-            }
+            return peerEndpoint(via, async (endpoint, ca, pin) => {
+                const entry = await connectCollaborationRpc(runtime.identity, endpoint, undefined, undefined, ca, pin);
+                try {
+                    const ticket = await entry.request({ type: 'route-ticket', serviceId: peer.serviceId });
+                    if (typeof ticket.routeToken !== 'string')
+                        throw new Error('ROUTE_UNAVAILABLE');
+                    const url = new URL('/api/federation/relay', endpoint.origin.replace(/^https:/, 'wss:'));
+                    url.searchParams.set('routeToken', ticket.routeToken);
+                    // TLS authenticates the entry; Noise pins the final destination.
+                    return await connectCollaborationRpc(runtime.identity, { ...endpoint, serviceId: peer.serviceId }, url.href, packet => receiveCollaboration(peer.serviceId, packet), ca, pin);
+                }
+                finally {
+                    entry.close();
+                }
+            });
         };
         collaborationTransport = new CollaborationPeerTransport({
             reverse: reverseCollaboration,
@@ -860,7 +866,12 @@ export function startServer(options = {}) {
             }).catch(error => console.warn('[quic] Encrypted WebSocket remains available:', error instanceof Error ? error.message : 'Transport unavailable'));
         }
         const onboardingServerState = scheme === 'https'
-            ? startOnboardingServer({ httpsPort: listeningPort, caCertPath: options.httpsCaPath })
+            ? startOnboardingServer({ httpsPort: listeningPort, caCertPath: options.httpsCaPath,
+                clientPath: app.locals.runtimeClientPath,
+                acceptEncrypted: ws => { void federation.then(runtime => runtime.accept(ws, { allowOpenAccess: false })).catch(() => ws.close(1011, 'Encrypted access unavailable')); },
+                relayPrincipal: token => routeAccess.authenticate(undefined, token),
+                acceptRelay: (ws, principal) => relayRouter.attach(ws, principal),
+            })
             : { server: null, url: null };
         void localAccessManager.start({ host: listeningHost, port: listeningPort, scheme, caCertPath: options.httpsCaPath, onboardingPort: options.onboardingPort ?? listeningPort }).then((state) => {
             const publishState = () => {

package/dist/server/federation/accessPolicy.js

@@ -92,22 +92,28 @@ export function resolveAccessRequest(method, path) {
         return { action: 'service.create-session' };
     const attachment = /^([^/]+)\/chat\/attachments(?:\/recording)?$/.exec(route);
     if (method === 'POST' && attachment && !reservedSessionIds.has(attachment[1].toLowerCase()))
-        return { action: 'session.input', sessionId: attachment[1] };
+        return { action: 'session.chat-send', sessionId: attachment[1] };
     const chatState = /^([^/]+)\/chat\/[^/]+\/state$/.exec(route);
     const chatViewed = /^([^/]+)\/chat\/viewed$/.exec(route);
     if (method === 'POST' && chatViewed && !reservedSessionIds.has(chatViewed[1].toLowerCase()))
-        return { action: 'session.view', sessionId: chatViewed[1] };
+        return { action: 'session.chat-view', sessionId: chatViewed[1] };
     if (method === 'PUT' && chatState && !reservedSessionIds.has(chatState[1].toLowerCase()))
-        return { action: 'session.input', sessionId: chatState[1] };
+        return { action: 'session.chat-send', sessionId: chatState[1] };
     const session = /^([^/]+)(?:\/(health|attach|stream|input|input-check|resize|tmux|restart|agent-resume|chat|view-mode))?$/.exec(route);
     if (session && !reservedSessionIds.has(session[1].toLowerCase())) {
         const sessionId = session[1];
         const op = session[2];
-        if (read && ['health', 'attach', 'stream', 'agent-resume', 'chat', 'view-mode'].includes(op))
-            return { action: 'session.view', sessionId };
+        if (read && op === 'chat')
+            return { action: 'session.chat-view', sessionId };
+        if (read && op === 'view-mode')
+            return { action: 'session.metadata', sessionId };
+        if (read && ['health', 'attach', 'stream', 'agent-resume'].includes(op))
+            return { action: 'session.terminal-view', sessionId };
         if (method === 'PUT' && op === 'view-mode')
             return { action: 'session.view', sessionId };
-        if (method === 'POST' && (op === 'input' || op === 'input-check' || op === 'chat'))
+        if (method === 'POST' && op === 'chat')
+            return { action: 'session.chat-send', sessionId };
+        if (method === 'POST' && (op === 'input' || op === 'input-check'))
             return { action: 'session.input', sessionId };
         if (method === 'POST' && op === 'resize')
             return { action: 'session.resize', sessionId };
@@ -129,11 +135,11 @@ export function terminalMessageAction(type, action) {
         case 'focus':
         case 'agent-review-ack': return 'session.input';
         case 'resize': return 'session.resize';
-        case 'tmux': return action === 'copy-selection' ? 'session.view' : 'service.configure';
+        case 'tmux': return action === 'copy-selection' ? 'session.terminal-view' : 'service.configure';
         case 'ping':
         case 'viewing':
         case 'output-subscription':
-        case 'output-ack': return 'session.view';
+        case 'output-ack': return 'session.terminal-view';
         // Legacy flow-control can pause the shared PTY; grant only to controllers.
         case 'flow-control': return 'session.input';
         default: return null;

package/dist/server/federation/authorization.js

@@ -22,6 +22,7 @@ function validateInput(v) {
     }
     assert(v.resources === undefined || validShareResources(v.resources), 'shared resources');
     assert(v.sessionAppearance === undefined || validSessionAppearances(v.sessionAppearance, v.scope), 'session appearance');
+    assert(v.invitationId === undefined || (typeof v.invitationId === 'string' && /^[a-f0-9]{64}$/.test(v.invitationId)), 'invitation identity');
     assert(Array.isArray(v.actions) && v.actions.length > 0 && v.actions.length <= 256 && v.actions.every(action) && new Set(v.actions).size === v.actions.length, 'actions');
     if (v.scope.kind === 'sessions')
         assert(v.actions.every(a => a.startsWith('session.')), 'session scope cannot grant service or file capabilities');
@@ -50,16 +51,18 @@ function isSubset(child, parent) {
     }
     return true;
 }
-function active(g, grants, now, seen = new Set(), passwordCredential) {
+function active(g, grants, now, seen = new Set(), passwordCredential, invitationActive) {
     if (seen.has(g.id) || g.createdAt > now || g.revokedAt !== undefined || (g.expiresAt !== undefined && g.expiresAt <= now))
         return false;
     if (g.passwordCredential && g.passwordCredential !== passwordCredential)
         return false;
+    if (g.invitationId && invitationActive?.(g.invitationId) !== true)
+        return false;
     seen.add(g.id);
     if (!g.parentGrantId)
         return true;
     const parent = grants.find(p => p.id === g.parentGrantId);
-    return !!parent && isSubset(g, parent) && active(parent, grants, now, seen, passwordCredential);
+    return !!parent && isSubset(g, parent) && active(parent, grants, now, seen, passwordCredential, invitationActive);
 }
 /** Target-service authority. Root mutations must only be exposed to authenticated administrators.
  * Every operation reloads disk; synchronous atomic writes support one owning server process.
@@ -90,7 +93,7 @@ export class AuthorizationStore {
         for (const value of data.grants) {
             validateInput(value);
             const g = value;
-            keys(g, ['id', 'serviceId', 'createdAt', 'parentGrantId', 'revokedAt', 'subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'passwordCredential', 'resources', 'sessionAppearance']);
+            keys(g, ['id', 'serviceId', 'createdAt', 'parentGrantId', 'revokedAt', 'subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'passwordCredential', 'resources', 'sessionAppearance', 'invitationId']);
             assert(id(g.id) && g.serviceId === this.options.serviceId && Number.isSafeInteger(g.createdAt) && g.createdAt >= 0, 'grant metadata');
             assert(g.parentGrantId === undefined || id(g.parentGrantId), 'parent identity');
             assert(g.revokedAt === undefined || (Number.isSafeInteger(g.revokedAt) && g.revokedAt >= 0), 'revocation');
@@ -101,6 +104,7 @@ export class AuthorizationStore {
         return grants;
     }
     save(grants) {
+        assert(grants.length <= 10000, 'grant capacity');
         mkdirSync(dirname(this.options.filePath), { recursive: true, mode: 0o700 });
         const temp = `${this.options.filePath}.${randomUUID()}.tmp`;
         let fd;
@@ -126,7 +130,7 @@ export class AuthorizationStore {
     }
     create(input) {
         validateInput(input);
-        keys(input, ['subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'resources', 'sessionAppearance']);
+        keys(input, ['subjectId', 'scope', 'actions', 'expiresAt', 'canDelegate', 'conditions', 'resources', 'sessionAppearance', 'invitationId']);
         const now = this.now();
         assert(input.expiresAt === undefined || input.expiresAt > now, 'already expired');
         return { ...structuredClone(input), id: randomUUID(), serviceId: this.options.serviceId, createdAt: now };
@@ -155,7 +159,7 @@ export class AuthorizationStore {
     delegate(parentGrantId, authenticatedSubjectId, input) {
         const grants = this.read();
         const parent = grants.find(g => g.id === parentGrantId);
-        assert(parent && parent.subjectId === authenticatedSubjectId && active(parent, grants, this.now(), new Set(), this.options.passwordCredential?.()), 'inactive or unowned parent');
+        assert(parent && parent.subjectId === authenticatedSubjectId && active(parent, grants, this.now(), new Set(), this.options.passwordCredential?.(), this.options.invitationActive), 'inactive or unowned parent');
         const child = { ...this.create(input), parentGrantId };
         assert(isSubset(child, parent), 'delegation exceeds parent');
         grants.push(child);
@@ -173,7 +177,19 @@ export class AuthorizationStore {
         return true;
     }
     list() { return this.read(); }
-    listActive() { const grants = this.read(); return grants.filter(grant => active(grant, grants, this.now(), new Set(), this.options.passwordCredential?.())); }
+    revokeInvitation(invitationId) {
+        const grants = this.read();
+        let count = 0;
+        for (const grant of grants)
+            if (grant.invitationId === invitationId && grant.revokedAt === undefined) {
+                grant.revokedAt = this.now();
+                count++;
+            }
+        if (count)
+            this.save(grants);
+        return count;
+    }
+    listActive() { const grants = this.read(); return grants.filter(grant => active(grant, grants, this.now(), new Set(), this.options.passwordCredential?.(), this.options.invitationActive)); }
     /** Narrow only this Session, preserving sibling Session grants and descendant checks. */
     revokeSession(sessionId, normalize = id => id) {
         const grants = this.read();
@@ -207,7 +223,7 @@ export class AuthorizationStore {
             return [];
         }
         const now = this.now();
-        return grants.filter(g => g.subjectId === request.subjectId && active(g, grants, now, new Set(), this.options.passwordCredential?.())
+        return grants.filter(g => g.subjectId === request.subjectId && active(g, grants, now, new Set(), this.options.passwordCredential?.(), this.options.invitationActive)
             && (!g.conditions?.entryServiceIds || (!!request.entryServiceId && g.conditions.entryServiceIds.includes(request.entryServiceId)))
             && (!g.conditions?.relayIds || (!!request.relayId && g.conditions.relayIds.includes(request.relayId))));
     }
@@ -236,9 +252,15 @@ export class AuthorizationStore {
         }
         const now = this.now();
         const grantIds = grants.filter(g => {
-            if (g.subjectId !== request.subjectId || !active(g, grants, now, new Set(), this.options.passwordCredential?.()))
+            if (g.subjectId !== request.subjectId || !active(g, grants, now, new Set(), this.options.passwordCredential?.(), this.options.invitationActive))
                 return false;
-            if (!g.actions.includes('service:*') && !g.actions.includes(request.action))
+            // Existing view/input grants retain their full original behavior. New
+            // grants can independently allow chat, terminal preview and chat sends.
+            const legacy = ['session.chat-view', 'session.terminal-view'].includes(request.action) ? 'session.view'
+                : ['session.chat-send', 'session.terminal-input'].includes(request.action) ? 'session.input'
+                    : request.action === 'session.input' ? 'session.terminal-input' : undefined;
+            const metadata = request.action === 'session.metadata' && g.actions.some(a => ['session.view', 'session.chat-view', 'session.terminal-view'].includes(a));
+            if (!g.actions.includes('service:*') && !g.actions.includes(request.action) && !(legacy && g.actions.includes(legacy)) && !metadata)
                 return false;
             if (g.scope.kind === 'sessions' && (!request.action.startsWith('session.') || !request.sessionId || !g.scope.sessionIds.includes(request.sessionId)))
                 return false;

package/dist/server/federation/connectionModel.js

@@ -9,9 +9,8 @@ export function normalizeServiceAddress(value) {
         url.protocol = 'https:';
     if (url.protocol === 'ws:')
         url.protocol = 'http:';
-    const loopback = ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
-    if (!['https:', 'http:'].includes(url.protocol) || url.protocol === 'http:' && !loopback)
-        throw new Error('请使用 HTTPS 服务地址。');
+    if (!['https:', 'http:'].includes(url.protocol))
+        throw new Error('请使用 HTTP 或 HTTPS 服务地址。');
     if (url.username || url.password || url.search || url.hash || !['/', '/api/federation/secure'].includes(url.pathname))
         throw new Error('请输入服务首页地址，不要包含账号或额外参数。');
     return url.origin;