u1s1-cli 1.3.0 → 1.3.1

package/dist/api.d.ts

@@ -1,4 +1,10 @@
 import { type ApiThinkingCapabilities, type CliConfig } from "./config.js";
+/** Preserve caller cancellation while always enforcing the operation deadline. */
+export declare function signalWithTimeout(signal: AbortSignal | undefined, timeoutMs: number): AbortSignal;
+/** Read a complete response without allowing a custom or faulty server to exhaust CLI memory. */
+export declare function readResponseTextCapped(resp: Response, maxBytes?: number): Promise<string>;
+/** Parse JSON only after the complete response has passed the shared byte cap. */
+export declare function readJsonResponseCapped<T = unknown>(resp: Response, maxBytes?: number): Promise<T>;
 export interface MeResponse {
     email: string | null;
     signup_credit_usd?: number;

package/dist/api.js

@@ -1,12 +1,67 @@
 import { apiEndpointToCustom, loadEndpointsCache, saveEndpointsCache, setCustomEndpoints, VERSION, } from "./config.js";
 import { authorizedFetch } from "./device-auth.js";
+const MAX_API_RESPONSE_BYTES = 8 * 1024 * 1024;
+const MAX_API_ERROR_BYTES = 64 * 1024;
+const MAX_IMAGE_RESULT_BYTES = 64 * 1024;
+function jsonRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+}
+/** Preserve caller cancellation while always enforcing the operation deadline. */
+export function signalWithTimeout(signal, timeoutMs) {
+    const timeout = AbortSignal.timeout(timeoutMs);
+    return signal ? AbortSignal.any([signal, timeout]) : timeout;
+}
+/** Read a complete response without allowing a custom or faulty server to exhaust CLI memory. */
+export async function readResponseTextCapped(resp, maxBytes = MAX_API_RESPONSE_BYTES) {
+    const limit = Math.max(1, Math.floor(maxBytes));
+    const declaredLength = Number(resp.headers.get("content-length"));
+    if (Number.isFinite(declaredLength) && declaredLength > limit) {
+        void resp.body?.cancel("API response body limit reached").catch(() => { });
+        throw new Error(`API response body exceeds ${limit} bytes`);
+    }
+    if (!resp.body)
+        throw new Error("API response body is missing");
+    const reader = resp.body.getReader();
+    const decoder = new TextDecoder();
+    let bytes = 0;
+    let text = "";
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done) {
+                text += decoder.decode();
+                break;
+            }
+            if (bytes + value.byteLength > limit) {
+                void reader.cancel("API response body limit reached").catch(() => { });
+                throw new Error(`API response body exceeds ${limit} bytes`);
+            }
+            bytes += value.byteLength;
+            text += decoder.decode(value, { stream: true });
+        }
+    }
+    finally {
+        try {
+            reader.releaseLock();
+        }
+        catch { }
+    }
+    return text;
+}
+/** Parse JSON only after the complete response has passed the shared byte cap. */
+export async function readJsonResponseCapped(resp, maxBytes = MAX_API_RESPONSE_BYTES) {
+    return JSON.parse(await readResponseTextCapped(resp, maxBytes));
+}
 /** 401:凭证失效(设备被移除/换过钥匙),调用方应引导重新登录而不是继续硬跑。 */
 export class AuthError extends Error {
 }
 /** 网关错误壳统一是 { error: { message } };解析不出来时回退到状态码提示。 */
 async function errorMessageFromResponse(resp, fallback) {
-    const body = (await resp.json().catch(() => null));
-    return body?.error?.message ?? fallback;
+    const body = jsonRecord(await readJsonResponseCapped(resp, MAX_API_ERROR_BYTES).catch(() => null));
+    const error = jsonRecord(body?.error);
+    return typeof error?.message === "string" ? error.message.slice(0, 2_000) : fallback;
 }
 export async function fetchModels(cfg) {
     let resp;
@@ -23,7 +78,9 @@ export async function fetchModels(cfg) {
         throw new AuthError("登录已失效,请重新运行 u1s1 login");
     if (!resp.ok)
         throw new Error(await errorMessageFromResponse(resp, `服务端返回 ${resp.status},稍后再试`));
-    const body = (await resp.json());
+    const body = await readJsonResponseCapped(resp);
+    if (!body || !Array.isArray(body.data))
+        throw new Error("服务端模型列表格式不正确");
     const token = body.client_attestation?.token;
     return {
         models: body.data,
@@ -49,8 +106,8 @@ export async function fetchUserEndpoints(cfg) {
     }
     if (!resp.ok)
         throw new Error(await errorMessageFromResponse(resp, `服务端返回 ${resp.status}`));
-    const body = (await resp.json());
-    return Array.isArray(body.endpoints) ? body.endpoints : [];
+    const body = jsonRecord(await readJsonResponseCapped(resp));
+    return Array.isArray(body?.endpoints) ? body.endpoints : [];
 }
 /**
  * 拉取云端配置的自定义端点并装载进 CUSTOM_ENDPOINTS;失败(离线/老网关)回退
@@ -79,17 +136,37 @@ export async function searchWeb(cfg, input) {
                 "content-type": "application/json",
             },
             body: JSON.stringify({ query: input.query, max_results: input.maxResults }),
-            signal: input.signal ?? AbortSignal.timeout(60_000),
+            signal: signalWithTimeout(input.signal, 60_000),
         });
     }
-    catch {
-        throw new Error(`连不上 ${cfg.baseUrl},检查一下网络?`);
+    catch (error) {
+        if (input.signal?.aborted)
+            throw error;
+        throw new Error(`连不上 ${cfg.baseUrl},检查一下网络?`, { cause: error });
     }
     if (resp.status === 401)
         throw new Error("登录已失效,请重新运行 u1s1 login");
     if (!resp.ok)
         throw new Error(await errorMessageFromResponse(resp, `搜索服务返回 ${resp.status},稍后再试`));
-    return (await resp.json());
+    const body = jsonRecord(await readJsonResponseCapped(resp));
+    if (!body || !Array.isArray(body.results))
+        throw new Error("搜索服务返回格式不正确");
+    const results = [];
+    for (const value of body.results.slice(0, 10)) {
+        const result = jsonRecord(value);
+        if (!result
+            || typeof result.title !== "string"
+            || typeof result.url !== "string"
+            || typeof result.snippet !== "string") {
+            continue;
+        }
+        results.push({ title: result.title, url: result.url, snippet: result.snippet });
+    }
+    return {
+        query: typeof body.query === "string" ? body.query : input.query,
+        answer: typeof body.answer === "string" ? body.answer : null,
+        results,
+    };
 }
 /** web_fetch 直连失败时的回退:网关用 Cloudflare Browser Rendering 渲染后转 markdown。 */
 export async function renderPage(cfg, url, signal) {
@@ -104,31 +181,40 @@ export async function renderPage(cfg, url, signal) {
                 "content-type": "application/json",
             },
             body: JSON.stringify({ url }),
-            signal: signal ?? AbortSignal.timeout(90_000),
+            signal: signalWithTimeout(signal, 90_000),
         });
     }
-    catch {
-        throw new Error(`连不上 ${cfg.baseUrl}`);
+    catch (error) {
+        if (signal?.aborted)
+            throw error;
+        throw new Error(`连不上 ${cfg.baseUrl}`, { cause: error });
     }
     if (resp.status === 401)
         throw new Error("登录已失效,请重新运行 u1s1 login");
     if (!resp.ok)
         throw new Error(await errorMessageFromResponse(resp, `渲染服务返回 ${resp.status}`));
-    return (await resp.json());
+    const body = jsonRecord(await readJsonResponseCapped(resp));
+    if (!body || typeof body.url !== "string" || typeof body.markdown !== "string") {
+        throw new Error("渲染服务返回格式不正确");
+    }
+    return { url: body.url, markdown: body.markdown };
 }
 const IMAGE_URL_HEADER = "x-u1s1-image-url";
 const IMAGE_SIZE_HEADER = "x-u1s1-image-size";
 function imageResultFromHeaders(resp) {
     const encodedUrl = resp.headers.get(IMAGE_URL_HEADER);
-    if (!encodedUrl)
+    if (!encodedUrl || encodedUrl.length > 8_000)
         return null;
     try {
         const url = decodeURIComponent(encodedUrl);
+        if (/[\u0000-\u001f\u007f]/.test(url))
+            return null;
         const parsed = new URL(url);
         if (parsed.protocol !== "http:" && parsed.protocol !== "https:")
             return null;
         const encodedSize = resp.headers.get(IMAGE_SIZE_HEADER);
-        return { url, size: encodedSize ? decodeURIComponent(encodedSize) : null };
+        const size = encodedSize ? decodeURIComponent(encodedSize) : null;
+        return { url, size: size && size.length <= 100 ? size : null };
     }
     catch {
         return null;
@@ -147,15 +233,28 @@ function responseErrorDetail(error) {
 export async function readGeneratedImageResponse(resp) {
     const headerResult = imageResultFromHeaders(resp);
     if (headerResult) {
-        await resp.body?.cancel().catch(() => undefined);
+        void resp.body?.cancel("image result recovered from response headers").catch(() => undefined);
         return headerResult;
     }
     try {
-        const body = (await resp.json());
-        if (typeof body.url !== "string" || !/^https?:\/\//.test(body.url)) {
+        const body = jsonRecord(await readJsonResponseCapped(resp, MAX_IMAGE_RESULT_BYTES));
+        if (typeof body?.url !== "string") {
+            throw new Error("服务端没有返回图片下载地址");
+        }
+        let parsed;
+        try {
+            parsed = new URL(body.url);
+        }
+        catch {
+            throw new Error("服务端没有返回图片下载地址");
+        }
+        if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
             throw new Error("服务端没有返回图片下载地址");
         }
-        return { url: body.url, size: typeof body.size === "string" ? body.size : null };
+        return {
+            url: body.url,
+            size: typeof body.size === "string" && body.size.length <= 100 ? body.size : null,
+        };
     }
     catch (error) {
         throw new Error(`图片可能已经生成,但客户端下载结果响应失败: ${responseErrorDetail(error)}。` +
@@ -175,7 +274,7 @@ export async function generateImage(cfg, req, signal) {
                 "content-type": "application/json",
             },
             body: JSON.stringify(req),
-            signal: signal ?? AbortSignal.timeout(180_000),
+            signal: signalWithTimeout(signal, 180_000),
         });
     }
     catch (error) {
@@ -206,5 +305,8 @@ export async function fetchMe(cfg) {
         throw new Error("登录已失效,请重新运行 u1s1 login");
     if (!resp.ok)
         throw new Error(await errorMessageFromResponse(resp, `服务端返回 ${resp.status},稍后再试`));
-    return (await resp.json());
+    const body = await readJsonResponseCapped(resp);
+    if (!body || typeof body !== "object")
+        throw new Error("服务端账户响应格式不正确");
+    return body;
 }

package/dist/bench.js

@@ -3,7 +3,7 @@ import { join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { homedir } from "node:os";
 import { CUSTOM_ENDPOINTS, loadConfig, MODELS, PROVIDER_ID, } from "./config.js";
-import { loadCustomEndpoints } from "./api.js";
+import { loadCustomEndpoints, readJsonResponseCapped, readResponseTextCapped } from "./api.js";
 import { authorizedFetch, hasDeviceCredential } from "./device-auth.js";
 import { costStr, errorRate, formatDuration, generateReport, renderTable, scoreBar, scoreRate, sortByScore, summarizeByModel, tokPerSec, } from "./bench-report.js";
 import { scoreResponse } from "./bench-scoring.js";
@@ -108,15 +108,32 @@ async function callModel(input) {
             : await fetch(`${baseUrl}/chat/completions`, request);
         const latencyMs = Math.round(performance.now() - start);
         if (!res.ok) {
-            const errBody = await res.text().catch(() => "未知错误");
+            const errBody = await readResponseTextCapped(res, 64 * 1024).catch(() => "未知错误");
             return { response: "", latencyMs, tokensIn: 0, tokensOut: 0, error: `HTTP ${res.status}: ${errBody.slice(0, 200)}` };
         }
-        const data = (await res.json());
+        const value = await readJsonResponseCapped(res);
+        const data = value && typeof value === "object" && !Array.isArray(value)
+            ? value
+            : null;
+        const choices = Array.isArray(data?.choices) ? data.choices : [];
+        const firstChoice = choices[0] && typeof choices[0] === "object" && !Array.isArray(choices[0])
+            ? choices[0]
+            : null;
+        const message = firstChoice?.message && typeof firstChoice.message === "object" && !Array.isArray(firstChoice.message)
+            ? firstChoice.message
+            : null;
+        const usage = data?.usage && typeof data.usage === "object" && !Array.isArray(data.usage)
+            ? data.usage
+            : null;
         return {
-            response: data.choices?.[0]?.message?.content ?? "",
+            response: typeof message?.content === "string" ? message.content : "",
             latencyMs,
-            tokensIn: data.usage?.prompt_tokens ?? 0,
-            tokensOut: data.usage?.completion_tokens ?? 0,
+            tokensIn: typeof usage?.prompt_tokens === "number" && Number.isFinite(usage.prompt_tokens)
+                ? Math.max(0, usage.prompt_tokens)
+                : 0,
+            tokensOut: typeof usage?.completion_tokens === "number" && Number.isFinite(usage.completion_tokens)
+                ? Math.max(0, usage.completion_tokens)
+                : 0,
         };
     }
     catch (e) {

package/dist/deploy.d.ts

@@ -1,4 +1,10 @@
 import { type CliConfig } from "./config.js";
+interface SiteFile {
+    path: string;
+    abs: string;
+    bytes: number;
+}
+export declare function collectFiles(root: string): SiteFile[];
 type SiteVisibility = "public" | "private";
 interface DeployArgs {
     name?: string;

package/dist/deploy.js

@@ -1,8 +1,9 @@
-import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { basename, join, relative, resolve, sep } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { VERSION, u1s1Dir } from "./config.js";
 import { authorizedFetch } from "./device-auth.js";
+import { readJsonResponseCapped } from "./api.js";
 /**
  * u1s1 deploy publishes a static site to <project>.<account-code>.u1s1.app.
  * Detect the site root, ask for a project slug, and remember it in ~/.u1s1/deploys.json.
@@ -12,6 +13,8 @@ const deploysFile = join(u1s1Dir, "deploys.json");
 /** 构建产物目录优先:Vite/Next 等项目根的 index.html 是源码,不是能直接上线的产物。 */
 const BUILD_DIRS = ["dist", "build", "out", "_site", "public"];
 const SKIP_DIRS = new Set(["node_modules", "__pycache__"]);
+const MAX_DEPLOY_API_RESPONSE_BYTES = 256 * 1024;
+const MAX_DEPLOY_ERROR_RESPONSE_BYTES = 64 * 1024;
 function readDeploys() {
     try {
         return JSON.parse(readFileSync(deploysFile, "utf8"));
@@ -56,14 +59,18 @@ function resolveSiteDir(explicit) {
         "  在网站目录里运行 u1s1 deploy,或指定目录:u1s1 deploy <目录>\n" +
         "  如果项目需要构建(如 Vite/Next),先跑构建再部署 dist/ 等产物目录");
 }
-function collectFiles(root) {
+export function collectFiles(root) {
     const files = [];
     const walk = (dir) => {
         for (const name of readdirSync(dir)) {
             if (name.startsWith(".") || SKIP_DIRS.has(name))
                 continue;
             const abs = join(dir, name);
-            const st = statSync(abs);
+            const st = lstatSync(abs);
+            // Never upload or recurse through links: a project-controlled link could
+            // escape the selected root, expose credentials, or create a directory cycle.
+            if (st.isSymbolicLink())
+                continue;
             if (st.isDirectory())
                 walk(abs);
             else if (st.isFile()) {
@@ -136,12 +143,25 @@ async function api(cfg, request) {
     catch {
         throw new Error(`连不上 ${cfg.baseUrl},检查一下网络?`);
     }
-    const data = (await resp.json().catch(() => null));
+    const value = await readJsonResponseCapped(resp, MAX_DEPLOY_API_RESPONSE_BYTES).catch(() => null);
+    const data = value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
     if (!resp.ok) {
-        const e = new Error(data?.error?.message ?? `服务端返回 ${resp.status},稍后再试`);
-        e.code = data?.error?.code;
+        const detail = data?.error && typeof data.error === "object"
+            ? data.error
+            : undefined;
+        const message = typeof detail?.message === "string"
+            ? detail.message.slice(0, 2_000)
+            : `服务端返回 ${resp.status},稍后再试`;
+        const e = new Error(message);
+        if (typeof detail?.code === "string" && detail.code.length <= 100) {
+            e.code = detail.code;
+        }
         throw e;
     }
+    if (!data)
+        throw new Error("服务端部署响应格式不正确");
     return data;
 }
 /** 逐个上传,失败重试一次;并发数保守取 6。 */
@@ -157,12 +177,24 @@ async function uploadAll(cfg, start, files) {
             signal: AbortSignal.timeout(120_000),
         });
         let resp = await put().catch(() => null);
-        if (!resp?.ok)
+        if (resp && !resp.ok) {
+            void resp.body?.cancel("retrying rejected deploy upload").catch(() => { });
             resp = await put().catch(() => null);
+        }
+        else if (!resp) {
+            resp = await put().catch(() => null);
+        }
         if (!resp?.ok) {
-            const body = resp ? (await resp.json().catch(() => null)) : null;
-            throw new Error(`上传 ${f.path} 失败:${body?.error?.message ?? "网络错误"}`);
+            const value = resp
+                ? await readJsonResponseCapped(resp, MAX_DEPLOY_ERROR_RESPONSE_BYTES).catch(() => null)
+                : null;
+            const body = value && typeof value === "object" && !Array.isArray(value) ? value : null;
+            const message = body?.error && typeof body.error === "object" && typeof body.error.message === "string"
+                ? body.error.message.slice(0, 2_000)
+                : "网络错误";
+            throw new Error(`上传 ${f.path} 失败:${message}`);
         }
+        void resp.body?.cancel("deploy upload completed").catch(() => { });
         done++;
         process.stdout.write(`\r  上传中 ${done}/${files.length}  ${f.path.slice(0, 48).padEnd(48)}`);
     };

package/dist/device-auth.d.ts

@@ -1,4 +1,5 @@
 import { webcrypto } from "node:crypto";
+import { type IncomingMessage } from "node:http";
 import { type CliConfig } from "./config.js";
 export declare function hasDeviceCredential(cfg: CliConfig): boolean;
 export declare function generateDeviceKeyPair(): Promise<{
@@ -8,6 +9,8 @@ export declare function generateDeviceKeyPair(): Promise<{
 export declare function dpopHeaders(cfg: CliConfig, method: string, url: string): Promise<Record<string, string>>;
 /** Fetch a gateway route with a fresh proof; generic keys remain a read-only compatibility fallback. */
 export declare function authorizedFetch(cfg: CliConfig, input: string | URL, init?: RequestInit): Promise<Response>;
+/** Buffer a loopback request only up to the same JSON limit enforced by Gateway. */
+export declare function readSigningProxyRequestBody(request: IncomingMessage, maxBytes?: number): Promise<Buffer | undefined>;
 interface SigningProxy {
     baseUrl: string;
     localKey: string;

package/dist/device-auth.js

@@ -2,7 +2,14 @@ import { createHash, randomBytes, randomUUID, webcrypto } from "node:crypto";
 import { createServer } from "node:http";
 import { VERSION } from "./config.js";
 const enc = new TextEncoder();
+const SIGNING_PROXY_REQUEST_LIMIT_BYTES = 32 * 1024 * 1024;
 let cachedPrivate;
+class SigningProxyRequestTooLargeError extends Error {
+    constructor(maxBytes) {
+        super(`local signing proxy request exceeds ${maxBytes} bytes`);
+        this.name = "SigningProxyRequestTooLargeError";
+    }
+}
 function b64url(value) {
     const bytes = typeof value === "string" ? enc.encode(value) : value;
     return Buffer.from(bytes).toString("base64url");
@@ -86,6 +93,23 @@ function requestHeaders(input) {
     }
     return headers;
 }
+/** Buffer a loopback request only up to the same JSON limit enforced by Gateway. */
+export async function readSigningProxyRequestBody(request, maxBytes = SIGNING_PROXY_REQUEST_LIMIT_BYTES) {
+    const declaredLength = Number(request.headers["content-length"]);
+    if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
+        throw new SigningProxyRequestTooLargeError(maxBytes);
+    }
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of request.iterator({ destroyOnReturn: false })) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        total += bytes.byteLength;
+        if (total > maxBytes)
+            throw new SigningProxyRequestTooLargeError(maxBytes);
+        chunks.push(bytes);
+    }
+    return chunks.length ? Buffer.concat(chunks, total) : undefined;
+}
 let signingProxy;
 function clientSurface(fallback) {
     const explicit = process.env["U1S1_CLIENT"];
@@ -123,37 +147,55 @@ export async function ensureSigningProxy(cfg, fallbackClient = "terminal", clien
                 res.end(JSON.stringify({ error: { message: "signing proxy only serves /v1/*" } }));
                 return;
             }
+            const upstreamAbort = new AbortController();
+            const abortUpstream = () => {
+                if (!res.writableEnded) {
+                    upstreamAbort.abort(new Error("local signing proxy client disconnected"));
+                }
+            };
+            res.once("close", abortUpstream);
             const target = new URL(`${localUrl.pathname}${localUrl.search}`, upstreamOrigin).toString();
-            const chunks = [];
-            for await (const chunk of req)
-                chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-            const body = chunks.length ? Buffer.concat(chunks) : undefined;
-            const outboundHeaders = requestHeaders(req.headers);
-            // Set these at the final local hop so model calls and extension tools share
-            // exactly the same attribution, regardless of their upstream SDK defaults.
-            outboundHeaders.set("x-u1s1-client", client);
-            outboundHeaders.set("x-u1s1-version", VERSION);
-            outboundHeaders.set("x-u1s1-platform", `${process.platform}-${process.arch}`);
-            if (clientAttestation)
-                outboundHeaders.set("x-u1s1-attestation", clientAttestation);
-            const upstream = await authorizedFetch(cfg, target, {
-                method: req.method ?? "GET",
-                headers: outboundHeaders,
-                body,
-            });
-            const headers = {};
-            upstream.headers.forEach((value, name) => {
-                if (!["content-length", "transfer-encoding", "connection"].includes(name))
-                    headers[name] = value;
-            });
-            res.writeHead(upstream.status, headers);
-            if (upstream.body) {
-                for await (const chunk of upstream.body)
-                    res.write(chunk);
+            try {
+                const body = await readSigningProxyRequestBody(req);
+                const outboundHeaders = requestHeaders(req.headers);
+                // Set these at the final local hop so model calls and extension tools share
+                // exactly the same attribution, regardless of their upstream SDK defaults.
+                outboundHeaders.set("x-u1s1-client", client);
+                outboundHeaders.set("x-u1s1-version", VERSION);
+                outboundHeaders.set("x-u1s1-platform", `${process.platform}-${process.arch}`);
+                if (clientAttestation)
+                    outboundHeaders.set("x-u1s1-attestation", clientAttestation);
+                const upstream = await authorizedFetch(cfg, target, {
+                    method: req.method ?? "GET",
+                    headers: outboundHeaders,
+                    body,
+                    signal: upstreamAbort.signal,
+                });
+                const headers = {};
+                upstream.headers.forEach((value, name) => {
+                    if (!["content-length", "transfer-encoding", "connection"].includes(name))
+                        headers[name] = value;
+                });
+                res.writeHead(upstream.status, headers);
+                if (upstream.body) {
+                    for await (const chunk of upstream.body)
+                        res.write(chunk);
+                }
+                res.end();
+            }
+            finally {
+                res.off("close", abortUpstream);
             }
-            res.end();
         }
         catch (error) {
+            if (error instanceof SigningProxyRequestTooLargeError && !res.destroyed) {
+                req.resume();
+                res.writeHead(413, { "content-type": "application/json" });
+                res.end(JSON.stringify({ error: { message: "local signing proxy request body is too large" } }));
+                return;
+            }
+            if (res.destroyed)
+                return;
             if (res.headersSent)
                 return void res.destroy(error);
             res.writeHead(502, { "content-type": "application/json" });

package/dist/index.js

@@ -8,7 +8,7 @@ import { registerLoopCommand } from "./loop.js";
 import { ensureSearchTools } from "./search-tools.js";
 import { ensureUsableShell } from "./shell-doctor.js";
 import { applyBrandUi, setAnnouncement, setUpdateNotice } from "./style.js";
-import { AuthError, fetchModels, loadCustomEndpoints } from "./api.js";
+import { AuthError, fetchModels, loadCustomEndpoints, readJsonResponseCapped } from "./api.js";
 import { ensureSigningProxy } from "./device-auth.js";
 const PACKAGE_NAME = "u1s1-cli";
 /** 启动时检测到的可自动安装的新版;TUI 退出后才装(见 installPendingUpdate)。 */
@@ -32,8 +32,12 @@ async function checkForUpdate() {
             signal: AbortSignal.timeout(5_000),
         });
         if (res.ok) {
-            const body = (await res.json());
-            latest = body.version;
+            const body = await readJsonResponseCapped(res, 64 * 1024);
+            latest = typeof body.version === "string"
+                && body.version.length <= 100
+                && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(body.version)
+                ? body.version
+                : undefined;
         }
     }
     catch {

package/dist/login.js

@@ -1,11 +1,25 @@
 import { createRequire } from "node:module";
 import { hostname, platform } from "node:os";
-import { fetchMe } from "./api.js";
+import { fetchMe, readJsonResponseCapped } from "./api.js";
 import { printConsoleBanner } from "./brand.js";
 import { loadConfig, saveConfig } from "./config.js";
 import { generateDeviceKeyPair, hasDeviceCredential } from "./device-auth.js";
 const require = createRequire(import.meta.url);
 const VERSION = require("../package.json").version;
+const MAX_DEVICE_AUTH_RESPONSE_BYTES = 64 * 1024;
+function boundedInteger(value, fallback, min, max) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= min && value <= max
+        ? value
+        : fallback;
+}
+function boundedCredential(value, prefix) {
+    return typeof value === "string"
+        && value.startsWith(prefix)
+        && value.length <= 4_096
+        && !/[\u0000-\u001f\u007f]/.test(value)
+        ? value
+        : null;
+}
 function tryOpenBrowser(url) {
     import("node:child_process")
         .then(({ spawn }) => {
@@ -36,16 +50,26 @@ export async function startDeviceLogin(origin) {
             }),
             signal: AbortSignal.timeout(15_000),
         });
-        if (!resp.ok)
+        if (!resp.ok) {
+            void resp.body?.cancel("device login start rejected").catch(() => { });
             return null;
-        const data = (await resp.json());
-        if (typeof data.verify_url !== "string" || typeof data.poll_secret !== "string")
+        }
+        const data = await readJsonResponseCapped(resp, MAX_DEVICE_AUTH_RESPONSE_BYTES);
+        if (typeof data.verify_url !== "string"
+            || data.verify_url.length > 2_048
+            || typeof data.poll_secret !== "string"
+            || !data.poll_secret
+            || data.poll_secret.length > 4_096
+            || /[\u0000-\u001f\u007f]/.test(data.poll_secret))
+            return null;
+        const verifyUrl = new URL(data.verify_url);
+        if (!["http:", "https:"].includes(verifyUrl.protocol) || verifyUrl.username || verifyUrl.password)
             return null;
         return {
-            verify_url: data.verify_url,
+            verify_url: verifyUrl.toString(),
             poll_secret: data.poll_secret,
-            interval: data.interval || 2,
-            expires_in: data.expires_in || 900,
+            interval: boundedInteger(data.interval, 2, 1, 30),
+            expires_in: boundedInteger(data.expires_in, 900, 1, 1_800),
             private_jwk: pair.privateJwk,
             public_jwk: pair.publicJwk,
         };
@@ -56,9 +80,11 @@ export async function startDeviceLogin(origin) {
 }
 /** 轮询等浏览器批准；只接受带设备凭证的新网关响应。outcome 可带出失败原因。 */
 export async function pollDeviceLogin(origin, start, outcome) {
-    const deadline = Date.now() + start.expires_in * 1000;
+    const interval = boundedInteger(start.interval, 2, 1, 30);
+    const expiresIn = boundedInteger(start.expires_in, 900, 1, 1_800);
+    const deadline = Date.now() + expiresIn * 1000;
     while (Date.now() < deadline) {
-        await sleep(start.interval * 1000);
+        await sleep(interval * 1000);
         try {
             const resp = await fetch(`${origin}/auth/device/poll`, {
                 method: "POST",
@@ -66,14 +92,22 @@ export async function pollDeviceLogin(origin, start, outcome) {
                 body: JSON.stringify({ poll_secret: start.poll_secret }),
                 signal: AbortSignal.timeout(10_000),
             });
-            if (!resp.ok)
+            if (!resp.ok) {
+                void resp.body?.cancel("device login poll rejected").catch(() => { });
                 continue;
-            const data = (await resp.json());
-            if (data.status === "ok" && data.api_key && data.device_token) {
+            }
+            const data = await readJsonResponseCapped(resp, MAX_DEVICE_AUTH_RESPONSE_BYTES);
+            const apiKey = boundedCredential(data.api_key, "u1s1-");
+            const deviceToken = boundedCredential(data.device_token, "u1s1d-");
+            if (data.status === "ok" && apiKey && deviceToken) {
                 return {
-                    apiKey: data.api_key,
-                    deviceToken: data.device_token,
-                    deviceId: data.device_id,
+                    apiKey,
+                    deviceToken,
+                    deviceId: typeof data.device_id === "number"
+                        && Number.isSafeInteger(data.device_id)
+                        && data.device_id > 0
+                        ? data.device_id
+                        : undefined,
                     devicePrivateJwk: start.private_jwk,
                     devicePublicJwk: start.public_jwk,
                 };

package/dist/model.d.ts

@@ -1 +1,7 @@
+import { type ModelsResponse } from "./api.js";
+import { type CliConfig } from "./config.js";
+type ModelFetcher = (cfg: CliConfig) => Promise<ModelsResponse>;
+/** Refresh official models while preserving the built-in list as an explicit offline fallback. */
+export declare function refreshOfficialModels(cfg: CliConfig, fetcher?: ModelFetcher): Promise<string | null>;
 export declare function modelCommand(nameOrAlias?: string): Promise<void>;
+export {};

package/dist/model.js

@@ -1,9 +1,28 @@
-import { loadCustomEndpoints } from "./api.js";
-import { CUSTOM_ENDPOINTS, findModel, loadConfig, MODELS, persistPreferredModel, PROVIDER_ID, resolvePreferredModel, } from "./config.js";
+import { fetchModels, loadCustomEndpoints } from "./api.js";
+import { apiModelToDef, CUSTOM_ENDPOINTS, findModel, loadConfig, MODELS, persistPreferredModel, PROVIDER_ID, resolvePreferredModel, setModelsFromApi, } from "./config.js";
+/** Refresh official models while preserving the built-in list as an explicit offline fallback. */
+export async function refreshOfficialModels(cfg, fetcher = fetchModels) {
+    try {
+        const { models } = await fetcher(cfg);
+        if (models.length === 0)
+            return "线上模型列表为空";
+        setModelsFromApi(models.map(apiModelToDef));
+        return null;
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
+}
 export async function modelCommand(nameOrAlias) {
     const cfg = loadConfig();
-    // 云端可能刚改过端点配置;拉一次(失败回退本地缓存),再解析当前默认
-    await loadCustomEndpoints(cfg);
+    // Fetch both live catalogues before resolving the persisted default.
+    const [officialModelsError] = await Promise.all([
+        refreshOfficialModels(cfg),
+        loadCustomEndpoints(cfg),
+    ]);
+    if (officialModelsError) {
+        console.error(`  获取线上模型列表失败，使用内置列表：${officialModelsError}`);
+    }
     const current = resolvePreferredModel(cfg);
     if (!nameOrAlias) {
         console.log("");
@@ -26,7 +45,7 @@ export async function modelCommand(nameOrAlias) {
             }
         }
         console.log("");
-        console.log("  切换:u1s1 model grok / u1s1 model deepseek(对话里 /model 同样会记住)");
+        console.log("  切换:u1s1 model <model-id>(对话里 /model 同样会记住)");
         if (CUSTOM_ENDPOINTS.length) {
             console.log("  端点模型重名时可加限定:u1s1 model 端点名:模型id");
         }

package/dist/search-tools.js

@@ -2,7 +2,7 @@ import { spawnSync } from "node:child_process";
 import { chmodSync, createWriteStream, existsSync, mkdirSync, readdirSync, renameSync, rmSync } from "node:fs";
 import { arch, platform } from "node:os";
 import { join } from "node:path";
-import { Readable } from "node:stream";
+import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { agentDir } from "./config.js";
 /**
@@ -24,6 +24,7 @@ const TOOLS = [
 ];
 const binDir = join(agentDir, "bin");
 const DOWNLOAD_TIMEOUT_MS = 60_000;
+const MAX_TOOL_ARCHIVE_BYTES = 64 * 1024 * 1024;
 function archStr() {
     const a = arch();
     return a === "arm64" ? "aarch64" : a === "x64" ? "x86_64" : null;
@@ -110,11 +111,23 @@ async function install(tool, baseUrl, binName) {
     });
     if (!res.ok || !res.body)
         throw new Error(`HTTP ${res.status}`);
+    const declaredLength = Number(res.headers.get("content-length"));
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_TOOL_ARCHIVE_BYTES) {
+        void res.body.cancel("tool archive exceeded limit").catch(() => { });
+        throw new Error(`下载文件超过 ${MAX_TOOL_ARCHIVE_BYTES} bytes`);
+    }
     const archive = join(binDir, asset);
     // fd/rg 并行安装,解压目录按工具名+pid 隔离,避免互踩
     const extractDir = join(binDir, `preseed_${tool.bin}_${process.pid}`);
     try {
-        await pipeline(Readable.fromWeb(res.body), createWriteStream(archive));
+        let received = 0;
+        const limiter = new Transform({
+            transform(chunk, _encoding, callback) {
+                received += chunk.byteLength;
+                callback(received > MAX_TOOL_ARCHIVE_BYTES ? new Error("tool archive exceeded limit") : null, received > MAX_TOOL_ARCHIVE_BYTES ? undefined : chunk);
+            },
+        });
+        await pipeline(Readable.fromWeb(res.body), limiter, createWriteStream(archive));
         mkdirSync(extractDir, { recursive: true });
         if (!extract(archive, extractDir))
             throw new Error(`解压失败 ${asset}`);

package/dist/subagent.d.ts

@@ -30,6 +30,19 @@ export interface SubagentOutcome {
     text: string;
     usage: SubagentUsage;
 }
+type PromptSession = {
+    prompt(task: string): Promise<void>;
+    abort(): Promise<void>;
+};
+/**
+ * Run one prompt while preserving the reason that stopped it. AgentSession.abort()
+ * resolves the active prompt normally, so the caller must not infer success merely
+ * because prompt() settled after a timeout or parent cancellation.
+ */
+export declare function promptSubagentSession(session: PromptSession, task: string, options: {
+    timeoutMs: number;
+    signal?: AbortSignal;
+}): Promise<void>;
 /**
  * Spawn 一个独立上下文的子 agent 执行任务,返回其最终文本输出。
  * 模型解析:"provider/id" 精确匹配;裸 id(如 deepseek-v4-flash)先按原样找,
@@ -47,3 +60,4 @@ export declare function runPool<T>(input: {
     run: (item: T, index: number) => Promise<void>;
     signal?: AbortSignal;
 }): Promise<void>;
+export {};

package/dist/subagent.js

@@ -6,6 +6,45 @@ export const SUBAGENT_CONCURRENCY = 4;
 export const SUBAGENT_TIMEOUT_MS = 15 * 60_000;
 /** ModelRuntime 进程内只建一次(auth/models 解析有启动开销)。 */
 let sharedModelRuntime;
+function cancelledError(signal) {
+    return new Error("已取消", { cause: signal.reason });
+}
+/**
+ * Run one prompt while preserving the reason that stopped it. AgentSession.abort()
+ * resolves the active prompt normally, so the caller must not infer success merely
+ * because prompt() settled after a timeout or parent cancellation.
+ */
+export async function promptSubagentSession(session, task, options) {
+    if (options.signal?.aborted)
+        throw cancelledError(options.signal);
+    let timedOut = false;
+    let promptError;
+    const abortSession = () => {
+        void session.abort().catch(() => { });
+    };
+    const timer = setTimeout(() => {
+        timedOut = true;
+        abortSession();
+    }, options.timeoutMs);
+    const onParentAbort = abortSession;
+    options.signal?.addEventListener("abort", onParentAbort, { once: true });
+    try {
+        await session.prompt(task);
+    }
+    catch (error) {
+        promptError = error;
+    }
+    finally {
+        clearTimeout(timer);
+        options.signal?.removeEventListener("abort", onParentAbort);
+    }
+    if (options.signal?.aborted)
+        throw cancelledError(options.signal);
+    if (timedOut)
+        throw new Error(`子任务超时(${options.timeoutMs}ms)`, { cause: promptError });
+    if (promptError)
+        throw promptError;
+}
 /** 从会话消息里取最后一条非空 assistant 文本作为子 agent 的最终输出。 */
 function extractFinalText(messages) {
     for (let i = messages.length - 1; i >= 0; i--) {
@@ -59,6 +98,8 @@ function extractUsage(messages, model) {
  * 失败(模型错误/超时/取消)抛错,由调用方决定容错语义。
  */
 export async function runSubagent(opts) {
+    if (opts.signal?.aborted)
+        throw cancelledError(opts.signal);
     sharedModelRuntime ??= await ModelRuntime.create();
     let model;
     if (opts.model) {
@@ -98,22 +139,17 @@ export async function runSubagent(opts) {
         ...(model ? { model } : {}),
         ...(opts.noTools ? { noTools: "all" } : {}),
     });
-    const timeoutMs = opts.timeoutMs ?? SUBAGENT_TIMEOUT_MS;
-    const timer = setTimeout(() => void session.abort(), timeoutMs);
-    const onParentAbort = () => void session.abort();
-    opts.signal?.addEventListener("abort", onParentAbort, { once: true });
     try {
-        await session.prompt(opts.task);
+        await promptSubagentSession(session, opts.task, {
+            timeoutMs: opts.timeoutMs ?? SUBAGENT_TIMEOUT_MS,
+            signal: opts.signal,
+        });
+        const messages = session.messages;
+        return { ok: true, text: extractFinalText(messages), usage: extractUsage(messages, model) };
     }
     finally {
-        clearTimeout(timer);
-        opts.signal?.removeEventListener("abort", onParentAbort);
         session.dispose();
     }
-    if (opts.signal?.aborted)
-        throw new Error("已取消");
-    const messages = session.messages;
-    return { ok: true, text: extractFinalText(messages), usage: extractUsage(messages, model) };
 }
 /**
  * 固定并发的工作池:limit 个工人依次领任务跑完一个补位一个。

package/dist/tools.d.ts

@@ -3,6 +3,8 @@ import { Text } from "@earendil-works/pi-tui";
 import { Type } from "typebox";
 import type { CliConfig } from "./config.js";
 export declare function truncate(text: string): string;
+/** 只下载前 maxBytes 就断流,超大页面不用整个拉完再丢。 */
+export declare function readBodyCapped(resp: Response, maxBytes: number): Promise<Uint8Array>;
 /** 联网工具通用渲染:调用行不占位,收起时只显一行摘要,ctrl+o 展开全文,出错显一行 ✗ */
 export declare function compactResultRender(input: {
     result: {
@@ -43,6 +45,8 @@ export declare function downloadGeneratedImage(url: string, signal: AbortSignal,
     attempts?: number;
     retryDelayMs?: number;
     fetchImpl?: typeof fetch;
+    maxBytes?: number;
+    attemptTimeoutMs?: number;
 }): Promise<Uint8Array>;
 /** 生图工具:走 u1s1 网关代理火山方舟 Seedream,上游 key 不落到用户机器上。 */
 export declare function createImageTool(cfg: Pick<CliConfig, "baseUrl" | "apiKey">): import("@earendil-works/pi-coding-agent").ToolDefinition<Type.TObject<{

package/dist/tools.js

@@ -8,6 +8,8 @@ import { generateImage, renderPage, searchWeb } from "./api.js";
 const FETCH_TIMEOUT_MS = 20_000;
 const MAX_FETCH_BYTES = 2_000_000;
 const MAX_TEXT_CHARS = 30_000;
+const MAX_GENERATED_IMAGE_BYTES = 64 * 1024 * 1024;
+const IMAGE_DOWNLOAD_TIMEOUT_MS = 60_000;
 /** 云端渲染是真开浏览器,比直连慢得多,给宽裕些。 */
 const RENDER_TIMEOUT_MS = 45_000;
 /** 200 但榨出的正文比这还短,多半是 JS 渲染的空壳页,值得上浏览器再试。 */
@@ -39,31 +41,37 @@ export function truncate(text) {
     return `${text.slice(0, MAX_TEXT_CHARS)}\n\n…（内容过长已截断，共 ${text.length} 字符）`;
 }
 /** 只下载前 maxBytes 就断流,超大页面不用整个拉完再丢。 */
-async function readBodyCapped(resp, maxBytes) {
+export async function readBodyCapped(resp, maxBytes) {
     if (!resp.body)
         return new Uint8Array(await resp.arrayBuffer()).subarray(0, maxBytes);
     const reader = resp.body.getReader();
     const chunks = [];
     let total = 0;
-    for (;;) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        chunks.push(value);
-        total += value.byteLength;
-        if (total >= maxBytes) {
-            void reader.cancel().catch(() => { });
-            break;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            chunks.push(value);
+            total += value.byteLength;
+            if (total >= maxBytes) {
+                void reader.cancel("web fetch body limit reached").catch(() => { });
+                break;
+            }
         }
     }
+    finally {
+        reader.releaseLock();
+    }
     const out = new Uint8Array(Math.min(total, maxBytes));
     let offset = 0;
     for (const chunk of chunks) {
         const room = out.byteLength - offset;
         if (room <= 0)
             break;
-        out.set(room < chunk.byteLength ? chunk.subarray(0, room) : chunk, offset);
-        offset += chunk.byteLength;
+        const copied = Math.min(room, chunk.byteLength);
+        out.set(copied < chunk.byteLength ? chunk.subarray(0, copied) : chunk, offset);
+        offset += copied;
     }
     return out;
 }
@@ -316,6 +324,44 @@ async function abortableDelay(ms, signal) {
         signal.addEventListener("abort", onAbort, { once: true });
     });
 }
+class GeneratedImageTooLargeError extends Error {
+}
+async function readGeneratedImageBody(resp, maxBytes) {
+    const declaredLength = Number(resp.headers.get("content-length"));
+    if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
+        if (resp.body)
+            void resp.body.cancel("generated image body limit reached").catch(() => { });
+        throw new GeneratedImageTooLargeError(`图片文件超过下载上限 ${Math.floor(maxBytes / 1024 / 1024)} MiB`);
+    }
+    if (!resp.body)
+        return new Uint8Array();
+    const reader = resp.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (total + value.byteLength > maxBytes) {
+                void reader.cancel("generated image body limit reached").catch(() => { });
+                throw new GeneratedImageTooLargeError(`图片文件超过下载上限 ${Math.floor(maxBytes / 1024 / 1024)} MiB`);
+            }
+            chunks.push(value);
+            total += value.byteLength;
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
 /**
  * 下载方舟返回的同一个临时 URL。fetch() 拿到响应头后,body 仍可能在
  * arrayBuffer() 阶段以 Undici `terminated` 断流,所以两步必须放在同一个
@@ -325,17 +371,27 @@ export async function downloadGeneratedImage(url, signal, options = {}) {
     const attempts = Math.max(1, Math.floor(options.attempts ?? IMAGE_DOWNLOAD_ATTEMPTS));
     const retryDelayMs = Math.max(0, options.retryDelayMs ?? IMAGE_DOWNLOAD_RETRY_DELAY_MS);
     const fetchImpl = options.fetchImpl ?? fetch;
+    const maxBytes = Math.max(1, Math.floor(options.maxBytes ?? MAX_GENERATED_IMAGE_BYTES));
+    const attemptTimeoutMs = Math.max(1, Math.floor(options.attemptTimeoutMs ?? IMAGE_DOWNLOAD_TIMEOUT_MS));
     let lastError;
     for (let attempt = 1; attempt <= attempts; attempt++) {
         try {
-            const resp = await fetchImpl(url, { signal });
-            if (!resp.ok)
+            const resp = await fetchImpl(url, {
+                signal: AbortSignal.any([signal, AbortSignal.timeout(attemptTimeoutMs)]),
+            });
+            if (!resp.ok) {
+                if (resp.body)
+                    void resp.body.cancel("generated image HTTP error").catch(() => { });
                 throw new Error(`HTTP ${resp.status}`);
-            return new Uint8Array(await resp.arrayBuffer());
+            }
+            return await readGeneratedImageBody(resp, maxBytes);
         }
         catch (error) {
             if (signal.aborted)
                 throw error;
+            if (error instanceof GeneratedImageTooLargeError) {
+                throw new Error(`图片已经生成,但${error.message}。不要重新调用 generate_image,可在 24 小时内手动下载: ${url}`, { cause: error });
+            }
             lastError = error;
             if (attempt < attempts)
                 await abortableDelay(retryDelayMs * attempt, signal);
@@ -425,13 +481,25 @@ async function fetchDirect(url, signal) {
         throw new DirectFetchError(`打不开 ${url.href}: ${e.message}`, true);
     }
     if (!resp.ok) {
+        void resp.body?.cancel("web fetch rejected HTTP response").catch(() => undefined);
         throw new DirectFetchError(`${url.href} 返回 ${resp.status} ${resp.statusText}`, RENDER_WORTHY_STATUS.has(resp.status));
     }
     const type = resp.headers.get("content-type") ?? "";
     if (!/text\/|json|xml|javascript/i.test(type)) {
+        void resp.body?.cancel("web fetch rejected non-text response").catch(() => undefined);
         throw new DirectFetchError(`${url.href} 不是文本内容 (${type || "unknown"}),读不了`, false);
     }
-    const raw = decodeBody(await readBodyCapped(resp, MAX_FETCH_BYTES), type);
+    let bytes;
+    try {
+        bytes = await readBodyCapped(resp, MAX_FETCH_BYTES);
+    }
+    catch (error) {
+        if (signal?.aborted)
+            throw error;
+        const detail = error instanceof Error ? error.message : String(error);
+        throw new DirectFetchError(`${url.href} 正文读取失败: ${detail}`, true);
+    }
+    const raw = decodeBody(bytes, type);
     const isHtml = /html|xml/i.test(type);
     return { text: isHtml ? htmlToText(raw) : raw.trim(), contentType: type, isHtml };
 }

package/dist/update.js

@@ -1,14 +1,24 @@
-import { execSync, spawnSync } from "node:child_process";
+import { execFileSync, spawnSync } from "node:child_process";
 import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";
 import { createRequire } from "node:module";
 import { tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { isPortableInstall } from "./config.js";
+import { readJsonResponseCapped, readResponseTextCapped } from "./api.js";
 const require = createRequire(import.meta.url);
 const pkg = require("../package.json");
 export const VERSION = pkg.version;
 export const PACKAGE_NAME = "u1s1-cli";
+const MAX_NPM_METADATA_BYTES = 64 * 1024;
+const MAX_INSTALL_SCRIPT_BYTES = 1024 * 1024;
+function publishedVersion(value) {
+    return typeof value === "string"
+        && value.length <= 100
+        && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(value)
+        ? value
+        : undefined;
+}
 /** engines.node 里要求的最低版本(如 ">=22.19.0" → "22.19.0");解析不出返回 undefined。 */
 function requiredNodeVersion() {
     const m = /(\d+\.\d+\.\d+)/.exec(pkg.engines?.node ?? "");
@@ -36,8 +46,8 @@ export async function getLatestVersion() {
         });
         if (!res.ok)
             return undefined;
-        const body = (await res.json());
-        return body.version;
+        const body = await readJsonResponseCapped(res, MAX_NPM_METADATA_BYTES);
+        return publishedVersion(body.version);
     }
     catch {
         return undefined;
@@ -97,7 +107,7 @@ async function portableSelfUpdate(latest) {
         });
         if (!res.ok)
             throw new Error(`HTTP ${res.status}`);
-        script = await res.text();
+        script = await readResponseTextCapped(res, MAX_INSTALL_SCRIPT_BYTES);
     }
     catch {
         console.error("安装脚本下载失败。请手动运行:");
@@ -107,7 +117,7 @@ async function portableSelfUpdate(latest) {
     const tmp = join(mkdtempSync(join(tmpdir(), "u1s1-update-")), "install.sh");
     writeFileSync(tmp, script, { mode: 0o755 });
     try {
-        execSync(`bash ${JSON.stringify(tmp)}`, { stdio: "inherit" });
+        execFileSync("bash", [tmp], { stdio: "inherit" });
     }
     catch {
         console.error("\n自动升级失败。请手动运行:");
@@ -171,8 +181,10 @@ export async function update() {
     console.log(`正在用 ${pm} 更新 ${PACKAGE_NAME}…`);
     try {
         // npm 压掉 EBADENGINE 等警告墙,对新手只有噪音;出错时 error 仍会显示
-        const installCmd = pm === "npm" ? `npm install -g --loglevel=error ${PACKAGE_NAME}@latest` : `${pm} add -g ${PACKAGE_NAME}@latest`;
-        execSync(installCmd, { stdio: "inherit" });
+        const args = pm === "npm"
+            ? ["install", "-g", "--loglevel=error", `${PACKAGE_NAME}@latest`]
+            : ["add", "-g", `${PACKAGE_NAME}@latest`];
+        execFileSync(pm, args, { stdio: "inherit" });
         console.log(`\n✅ 已更新到 v${latest}，重启 u1s1 后生效。`);
     }
     catch {

package/dist/workflow/runner.d.ts

@@ -3,6 +3,22 @@ import { type ParentModelRef } from "../subagent.js";
 export declare const WORKFLOW_TIMEOUT_MS: number;
 /** 默认整个 run 的 token 预算;0 或负数表示不设限。 */
 export declare const WORKFLOW_DEFAULT_BUDGET_TOKENS = 20000000;
+interface ProgressEntry {
+    key: string;
+    /** 任务摘要(前 120 字),调试/排查用,key 才是身份。 */
+    task: string;
+    ok: boolean;
+    text: string;
+    ms: number;
+}
+/** JSONL 进度存档:一行一个已完成的子任务,断点续跑时按 key 跳过。 */
+export declare class ProgressStore {
+    #private;
+    readonly path: string;
+    constructor(path: string);
+    getSuccessful(key: string): ProgressEntry | undefined;
+    append(entry: ProgressEntry): void;
+}
 /** 静态白名单校验:语法能编译 + 不碰沙箱之外的任何能力。 */
 export declare function validateScript(code: string): string[];
 export interface WorkflowRunResult {
@@ -46,3 +62,4 @@ export declare function runWorkflow(opts: WorkflowRunOptions): Promise<WorkflowR
 export declare function workflowsDir(): string;
 /** 内联脚本落盘,返回脚本路径(进度存档按同名约定派生)。 */
 export declare function saveWorkflowScript(code: string): string;
+export {};

package/dist/workflow/runner.js

@@ -15,7 +15,7 @@ const MAX_LOG_LINES = 60;
 /** 默认整个 run 的 token 预算;0 或负数表示不设限。 */
 export const WORKFLOW_DEFAULT_BUDGET_TOKENS = 20_000_000;
 /** JSONL 进度存档:一行一个已完成的子任务,断点续跑时按 key 跳过。 */
-class ProgressStore {
+export class ProgressStore {
     path;
     #cache = new Map();
     constructor(path) {
@@ -36,8 +36,9 @@ class ProgressStore {
             }
         }
     }
-    get(key) {
-        return this.#cache.get(key);
+    getSuccessful(key) {
+        const entry = this.#cache.get(key);
+        return entry?.ok === true && typeof entry.text === "string" ? entry : undefined;
     }
     append(entry) {
         this.#cache.set(entry.key, entry);
@@ -154,14 +155,12 @@ export async function runWorkflow(opts) {
         }
         const key = taskKey(task, model);
         if (opts.resume) {
-            const prev = store.get(key);
+            const prev = store.getSuccessful(key);
             if (prev) {
                 stats.cached++;
                 progress.cached = stats.cached;
                 reportProgress();
-                if (prev.ok)
-                    return prev.text;
-                throw new Error(prev.text);
+                return prev.text;
             }
         }
         stats.spawns++;

package/dist/workflow/templates.js

@@ -127,14 +127,14 @@ return { synthesis };
     },
     refactor: {
         name: "refactor",
-        description: "批量重构/迁移:先由一个 agent 读代表文件制定统一规则,然后每个文件一个子 agent 在独立 worktree 里套用规则,互不冲突",
+        description: "批量重构/迁移:先由一个 agent 读代表文件制定统一规则,然后每个文件一个子 agent 在当前工作区套用规则",
         inputHint: '{ "instruction": "把所有 var 改为 const", "files": ["src/a.ts", ...] } — files 省略时用 git diff 改动文件',
         build(input) {
             const instruction = str(input.instruction);
             if (!instruction)
                 throw new Error('refactor 模板需要 instruction,例如 { "instruction": "把 var 全部改为 const" }');
             // 与 review 模板一致:构建期取 git 改动文件,不花一个 subagent 在沙箱里跑 git
-            let files = strArray(input.files);
+            let files = [...new Set(strArray(input.files))];
             if (files.length === 0)
                 files = gitDiffFiles();
             if (files.length === 0)
@@ -150,8 +150,8 @@ const rule = await subagent({
 });
 const results = await parallel(targetFiles.map(f => () =>
   subagent({
-    task: "按以下重构规则处理文件 " + f + ",改完检查该文件语法正确(必要时运行 tsc 或构建验证)。\\n\\n重构规则:\\n" + rule,
-    worktree: true
+    task: "按以下重构规则处理文件 " + f + "。只修改这个目标文件,不要改动其他文件,避免与并行任务冲突。" +
+      "改完检查该文件语法正确(必要时运行 tsc 或构建验证)。\\n\\n重构规则:\\n" + rule
   })
 ));
 const done = targetFiles.filter((_, i) => results[i] !== null);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "u1s1-cli",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "u1s1 — 有一说一,最省心的 AI 编程搭子。终端里用中文说需求,AI 帮你读文件、改代码、跑命令。",
   "type": "module",
   "bin": {