@co0ontty/wand 1.43.6 → 1.43.8

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commit": "8014df702e9f99f37092a386d971bebc57702510",
-  "builtAt": "2026-05-31T08:14:40.260Z",
-  "version": "1.43.6",
+  "commit": "61d4063f143052abb4b0aa245746ab089ce32288",
+  "builtAt": "2026-05-31T12:11:01.894Z",
+  "version": "1.43.8",
   "channel": "stable"
 }

package/dist/env-utils.d.ts

@@ -1,3 +1,5 @@
+/** 是否以 root 身份运行（uid 或 euid 为 0）。供 PTY runner 与 structured runner 共用。 */
+export declare function isRunningAsRoot(): boolean;
 /**
  * 根据 inheritEnv 配置组装子进程的环境变量。
  *

package/dist/env-utils.js

@@ -19,6 +19,10 @@ const MINIMAL_ENV_KEYS = [
     "TEMP",
     "PWD",
 ];
+/** 是否以 root 身份运行（uid 或 euid 为 0）。供 PTY runner 与 structured runner 共用。 */
+export function isRunningAsRoot() {
+    return process.getuid?.() === 0 || process.geteuid?.() === 0;
+}
 /**
  * 根据 inheritEnv 配置组装子进程的环境变量。
  *

package/dist/language-prompt.d.ts

@@ -15,3 +15,8 @@
  * 英文模式（"English"）下 Claude 默认就用英文，只补一句 subagent 透传。
  */
 export declare function buildLanguageDirective(language: string): string;
+/**
+ * 完全托管自主模式的系统提示：供 PTY runner 与 structured runner（CLI + SDK）共用，
+ * 避免两处各抄一份中英双语文案导致改一处漏一处。
+ */
+export declare function buildManagedAutonomyDirective(isChinese: boolean): string;

package/dist/language-prompt.js

@@ -66,3 +66,12 @@ export function buildLanguageDirective(language) {
         `Subagent: when you dispatch a subagent via the Task tool, you MUST explicitly instruct the subagent in its prompt to also respond in ${trimmed}.`,
     ].join("\n");
 }
+/**
+ * 完全托管自主模式的系统提示：供 PTY runner 与 structured runner（CLI + SDK）共用，
+ * 避免两处各抄一份中英双语文案导致改一处漏一处。
+ */
+export function buildManagedAutonomyDirective(isChinese) {
+    return isChinese
+        ? "你正在完全托管的自主模式下运行。用户可能无法及时回复问题或确认。你必须独立做出所有决策——自行选择最佳方案，而不是向用户询问偏好、确认或澄清。如果有多种可行方案，选择你认为最合适的并继续执行。除非任务本身存在根本性的歧义且无法合理推断，否则不要等待用户输入。果断行动，自主决策。"
+        : "You are running in a fully managed, autonomous mode. The user may not be available to respond to questions or confirmations in a timely manner. You MUST make all decisions independently — choose the best approach yourself instead of asking the user for preferences, confirmations, or clarifications. If multiple approaches are viable, pick the one you judge most appropriate and proceed. Never block on user input unless the task is fundamentally ambiguous and cannot be reasonably inferred. Be decisive and self-directed.";
+}

package/dist/models.d.ts

@@ -1,4 +1,4 @@
-import { ClaudeModelInfo, SessionProvider } from "./types.js";
+import { ClaudeModelInfo } from "./types.js";
 interface ModelCache {
     models: ClaudeModelInfo[];
     codexModels: ClaudeModelInfo[];
@@ -7,9 +7,4 @@ interface ModelCache {
 }
 export declare function getCachedModels(): ModelCache;
 export declare function refreshModels(): Promise<ModelCache>;
-export declare function getModelsForProvider(provider: SessionProvider): ClaudeModelInfo[];
-/** 返回可用于 claude CLI 的全部已知 model id（含别名） */
-export declare function knownModelIds(): string[];
-/** 判断传入值是否是已知模型；允许自由文本，因此总是返回 true。保留接口以便将来严格校验。 */
-export declare function isKnownModel(_value: string): boolean;
 export {};

package/dist/models.js

@@ -1,5 +1,6 @@
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
+import { extractSemver } from "./version-utils.js";
 const execAsync = promisify(exec);
 const CLAUDE_MODELS = [
     { id: "default", label: "default（跟随 Claude Code 默认）", alias: true },
@@ -21,8 +22,7 @@ function cloneClaudeModels() {
 async function probeClaudeVersion() {
     try {
         const { stdout } = await execAsync("claude --version", { timeout: 5000 });
-        const match = stdout.match(/\d+\.\d+\.\d+(?:[-+][A-Za-z0-9.-]+)?/);
-        return match ? match[0] : stdout.trim().slice(0, 64) || null;
+        return extractSemver(stdout) ?? (stdout.trim().slice(0, 64) || null);
     }
     catch {
         return null;
@@ -78,15 +78,3 @@ export async function refreshModels() {
     };
     return cache;
 }
-export function getModelsForProvider(provider) {
-    const cached = getCachedModels();
-    return provider === "codex" ? cached.codexModels : cached.models;
-}
-/** 返回可用于 claude CLI 的全部已知 model id（含别名） */
-export function knownModelIds() {
-    return CLAUDE_MODELS.map((m) => m.id);
-}
-/** 判断传入值是否是已知模型；允许自由文本，因此总是返回 true。保留接口以便将来严格校验。 */
-export function isKnownModel(_value) {
-    return true;
-}

package/dist/npm-update-utils.d.ts

@@ -58,4 +58,3 @@ export declare function installPackageGloballySync(pkg: string, timeoutMs: numbe
  * （npm 全局 bin 里的符号链接，node 跟随软链一样能跑）。都找不到返回 null。
  */
 export declare function resolveGlobalWandCli(): string | null;
-export declare const NPM_UPDATE_PACKAGE_NAME = "@co0ontty/wand";

package/dist/npm-update-utils.js

@@ -17,6 +17,7 @@ import os from "node:os";
 import path from "node:path";
 import process from "node:process";
 import { promisify } from "node:util";
+import { whichSync } from "./path-repair.js";
 const execFileAsync = promisify(execFile);
 const PACKAGE_NAME = "@co0ontty/wand";
 const PACKAGE_SCOPE = "@co0ontty";
@@ -407,18 +408,8 @@ export function resolveGlobalWandCli() {
             /* ignore */
         }
     }
-    try {
-        const tool = process.platform === "win32" ? "where" : "which";
-        const r = spawnSync(tool, ["wand"], { encoding: "utf8", timeout: 10_000, env: getChildEnv() });
-        if (r.status === 0) {
-            const first = (r.stdout || "").split(/\r?\n/).find((line) => line.trim().length > 0);
-            if (first)
-                return first.trim();
-        }
-    }
-    catch {
-        /* ignore */
-    }
+    const found = whichSync("wand", { env: getChildEnv(), timeoutMs: 10_000 });
+    if (found)
+        return found;
     return null;
 }
-export const NPM_UPDATE_PACKAGE_NAME = PACKAGE_NAME;

package/dist/path-repair.d.ts

@@ -68,6 +68,10 @@ export declare function deepRepairRuntimePath(result: PathRepairResult, opts?: {
     shell?: string;
     timeoutMs?: number;
 }): Promise<PathRepairResult>;
+export declare function whichSync(cmd: string, options?: {
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+}): string | null;
 /**
  * 把修复结果格式化为一行可读摘要（startServer 启动日志用）。
  *

package/dist/path-repair.js

@@ -1,4 +1,5 @@
 import { existsSync, readdirSync } from "node:fs";
+import { compareSemver } from "./version-utils.js";
 import os from "node:os";
 import path from "node:path";
 import process from "node:process";
@@ -84,24 +85,13 @@ function listLatestVersions(base, limit) {
         const entries = readdirSync(base);
         return entries
             .filter((e) => /^v?\d+\.\d+\.\d+/.test(e))
-            .sort((a, b) => semverCompare(b, a))
+            .sort((a, b) => compareSemver(b, a))
             .slice(0, limit);
     }
     catch {
         return [];
     }
 }
-function semverCompare(a, b) {
-    const pa = a.replace(/^v/, "").split(/[.\-+]/).map((x) => Number(x) || 0);
-    const pb = b.replace(/^v/, "").split(/[.\-+]/).map((x) => Number(x) || 0);
-    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-        const da = pa[i] ?? 0;
-        const db = pb[i] ?? 0;
-        if (da !== db)
-            return da - db;
-    }
-    return 0;
-}
 /**
  * 把候选目录中"存在 + 未在 PATH 中"的追加到 process.env.PATH。
  *
@@ -328,12 +318,12 @@ function probeCommands() {
     }
     return out;
 }
-function whichSync(cmd) {
-    // Windows 用 `where`，POSIX 用 `which`；都走 process.env.PATH，因此一定要在
-    // repairRuntimePath() 追加完 PATH 之后再调。
+export function whichSync(cmd, options) {
+    // Windows 用 `where`，POSIX 用 `which`。默认走 process.env.PATH（因此一定要在
+    // repairRuntimePath() 追加完 PATH 之后再调）；options.env 可覆盖（如用 buildChildEnv 的 PATH）。
     const tool = process.platform === "win32" ? "where" : "which";
     try {
-        const res = spawnSync(tool, [cmd], { encoding: "utf8" });
+        const res = spawnSync(tool, [cmd], { encoding: "utf8", env: options?.env, timeout: options?.timeoutMs });
         if (res.status !== 0)
             return null;
         const first = (res.stdout || "").split(/\r?\n/).find((line) => line.trim().length > 0);

package/dist/process-manager.d.ts

@@ -144,8 +144,6 @@ export declare class ProcessManager extends EventEmitter {
      * Handle events from ClaudePtyBridge
      */
     private handleBridgeEvent;
-    /** Check if a command is a Claude CLI command */
-    private isClaudeCommand;
     private mustGet;
     private buildShellArgs;
     private shouldAutoApprovePermissions;

package/dist/process-manager.js

@@ -9,17 +9,14 @@ import { SessionLogger } from "./session-logger.js";
 import { ClaudePtyBridge } from "./claude-pty-bridge.js";
 import { truncateMessagesForTransport } from "./message-truncator.js";
 import { appendWindow, hasExplicitConfirmSyntax, hasPermissionActionContext, normalizePromptText, PTY_OUTPUT_MAX_SIZE } from "./pty-text-utils.js";
-import { buildChildEnv } from "./env-utils.js";
-import { buildLanguageDirective } from "./language-prompt.js";
+import { buildChildEnv, isRunningAsRoot } from "./env-utils.js";
+import { buildLanguageDirective, buildManagedAutonomyDirective } from "./language-prompt.js";
 import { prepareSessionWorktree } from "./git-worktree.js";
 import { getCodexResumeCommandSessionId, getResumeCommandSessionId } from "./resume-policy.js";
 import { applyThinkingEffortToPrompt, normalizeThinkingEffort } from "./structured-session-manager.js";
 function resolveProviderFromCommand(command) {
     return /^codex\b/.test(command.trim()) ? "codex" : "claude";
 }
-function isRunningAsRoot() {
-    return typeof process.getuid === "function" && process.getuid() === 0;
-}
 export class SessionInputError extends Error {
     code;
     sessionId;
@@ -1866,11 +1863,6 @@ export class ProcessManager extends EventEmitter {
                 break;
         }
     }
-    /** Check if a command is a Claude CLI command */
-    isClaudeCommand(command) {
-        const trimmed = command.trim();
-        return /^claude\b/.test(trimmed);
-    }
     mustGet(id) {
         const record = this.sessions.get(id);
         if (!record) {
@@ -1953,9 +1945,7 @@ export class ProcessManager extends EventEmitter {
         const language = this.config.language?.trim();
         const isChinese = language === "中文";
         if (mode === "managed") {
-            const autonomousPrompt = isChinese
-                ? "你正在完全托管的自主模式下运行。用户可能无法及时回复问题或确认。你必须独立做出所有决策——自行选择最佳方案，而不是向用户询问偏好、确认或澄清。如果有多种可行方案，选择你认为最合适的并继续执行。除非任务本身存在根本性的歧义且无法合理推断，否则不要等待用户输入。果断行动，自主决策。"
-                : "You are running in a fully managed, autonomous mode. The user may not be available to respond to questions or confirmations in a timely manner. You MUST make all decisions independently — choose the best approach yourself instead of asking the user for preferences, confirmations, or clarifications. If multiple approaches are viable, pick the one you judge most appropriate and proceed. Never block on user input unless the task is fundamentally ambiguous and cannot be reasonably inferred. Be decisive and self-directed.";
+            const autonomousPrompt = buildManagedAutonomyDirective(isChinese);
             const escaped = autonomousPrompt.replace(/'/g, "'\\''");
             result += ` --append-system-prompt '${escaped}'`;
         }

package/dist/pty-text-utils.d.ts

@@ -22,8 +22,6 @@ export declare function isNoiseLine(line: string): boolean;
  * The returned buffer may be slightly shorter than maxSize.
  */
 export declare function appendWindow(buffer: string, chunk: string, maxSize: number): string;
-/** Slice keeping the last ~maxSize chars on a safe boundary. Exported for tests. */
-export declare function safeSliceTail(text: string, maxSize: number): string;
 /**
  * Strip a string down to the printable codepoints used for echo matching.
  * Removes control characters, whitespace and ANSI escapes; keeps all other

package/dist/pty-text-utils.js

@@ -137,8 +137,8 @@ export function appendWindow(buffer, chunk, maxSize) {
         return next;
     return safeSliceTail(next, maxSize);
 }
-/** Slice keeping the last ~maxSize chars on a safe boundary. Exported for tests. */
-export function safeSliceTail(text, maxSize) {
+/** Slice keeping the last ~maxSize chars on a safe boundary. */
+function safeSliceTail(text, maxSize) {
     if (text.length <= maxSize)
         return text;
     let start = text.length - maxSize;

package/dist/resume-policy.d.ts

@@ -1,4 +1,2 @@
-import { ConversationTurn } from "./types.js";
-export declare function hasRealConversationMessages(messages: ConversationTurn[] | undefined): boolean;
 export declare function getResumeCommandSessionId(command: string): string | null;
 export declare function getCodexResumeCommandSessionId(command: string): string | null;

package/dist/resume-policy.js

@@ -1,17 +1,6 @@
-const REAL_CONVERSATION_MIN_MESSAGES = 2;
 const UUID_PATTERN = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
 const RESUME_COMMAND_ID_PATTERN = new RegExp(`(?:^|\\s)--resume\\s+(${UUID_PATTERN})(?:\\s|$)`, "i");
 const CODEX_RESUME_COMMAND_ID_PATTERN = new RegExp(`(?:^|\\s)resume\\s+(${UUID_PATTERN})(?:\\s|$)`, "i");
-export function hasRealConversationMessages(messages) {
-    if (!messages || messages.length < REAL_CONVERSATION_MIN_MESSAGES) {
-        return false;
-    }
-    const hasUser = messages.some((turn) => turn.role === "user"
-        && turn.content.some((block) => block.type === "text" && block.text.trim().length > 0));
-    const hasAssistant = messages.some((turn) => turn.role === "assistant"
-        && turn.content.some((block) => block.type === "text" && block.text.trim().length > 0));
-    return hasUser && hasAssistant;
-}
 export function getResumeCommandSessionId(command) {
     const match = RESUME_COMMAND_ID_PATTERN.exec(command);
     return match?.[1] ?? null;

package/dist/server-session-routes.js

@@ -146,12 +146,10 @@ function isMergeActionAllowed(snapshot) {
 export function registerSessionRoutes(app, processes, structured, storage, defaultMode, config, onSessionCreated) {
     app.get("/api/sessions", (_req, res) => {
         const all = listAllSessionsSlim(processes, structured);
-        console.log("[WAND] GET /api/sessions count:", all.length, "sessions:", all.map(s => ({ id: s.id.substring(0, 8), kind: s.sessionKind, runner: s.runner, status: s.status })));
         res.json(all);
     });
     app.post("/api/structured-sessions", express.json(), async (req, res) => {
         const body = req.body;
-        console.log("[WAND] POST /api/structured-sessions body:", JSON.stringify({ cwd: body.cwd, mode: body.mode, runner: body.runner, provider: body.provider, worktreeEnabled: body.worktreeEnabled === true, hasPrompt: !!body.prompt, model: body.model, thinkingEffort: body.thinkingEffort }));
         try {
             if (body.provider && body.provider !== "claude" && body.provider !== "codex") {
                 res.status(400).json({ error: "结构化会话当前仅支持 Claude 或 Codex provider。" });
@@ -169,7 +167,6 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                     ? body.thinkingEffort
                     : undefined,
             });
-            console.log("[WAND] structured session created:", JSON.stringify({ id: snapshot.id, sessionKind: snapshot.sessionKind, runner: snapshot.runner, status: snapshot.status }));
             onSessionCreated?.(body.cwd ?? snapshot.cwd);
             const prompt = body.prompt?.trim();
             if (prompt) {
@@ -244,7 +241,6 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
         // 让退出 handler 不要把剩余 queuedMessages 清空（默认行为是清空）。
         const preserveQueue = !!req.body?.preserveQueue;
         const idempotencyKey = typeof req.body?.idempotencyKey === "string" ? req.body.idempotencyKey : undefined;
-        console.log("[WAND] POST /api/structured-sessions/:id/messages id:", req.params.id, "input:", input.substring(0, 50), "interrupt:", interrupt, "preserveQueue:", preserveQueue, "idempotencyKey:", idempotencyKey);
         try {
             const snapshot = await structured.sendMessage(req.params.id, input, { interrupt, preserveQueue, idempotencyKey });
             res.json(snapshot);
@@ -591,10 +587,8 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/sessions/:id/resume", (req, res) => {
         const sessionId = req.params.id;
         const body = req.body;
-        console.log("[WAND] POST /api/sessions/:id/resume sessionId:", sessionId);
         try {
             const existingSession = processes.get(sessionId) || storage.getSession(sessionId);
-            console.log("[WAND] resume lookup: found:", !!existingSession, "sessionKind:", existingSession?.sessionKind, "claudeSessionId:", existingSession?.claudeSessionId);
             if (!existingSession) {
                 res.status(404).json({ error: "会话不存在。" });
                 return;
@@ -644,7 +638,6 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/claude-sessions/:claudeSessionId/resume", (req, res) => {
         const claudeSessionId = String(req.params.claudeSessionId || "").trim();
         const body = req.body;
-        console.log("[WAND] POST /api/claude-sessions/:claudeSessionId/resume claudeSessionId:", claudeSessionId, "cwd:", body.cwd);
         try {
             if (!claudeSessionId) {
                 res.status(400).json({ error: "Claude 会话 ID 不能为空。" });
@@ -722,7 +715,6 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/codex-sessions/:threadId/resume", express.json(), async (req, res) => {
         const threadId = String(req.params.threadId || "").trim();
         const body = req.body;
-        console.log("[WAND] POST /api/codex-sessions/:threadId/resume threadId:", threadId, "cwd:", body.cwd);
         try {
             if (!threadId) {
                 res.status(400).json({ error: "Codex 会话 ID 不能为空。" });

package/dist/server.js

@@ -1,4 +1,5 @@
 import crypto from "node:crypto";
+import { compareSemver, extractSemver } from "./version-utils.js";
 import compression from "compression";
 import express from "express";
 import { createReadStream, existsSync, readFileSync, writeFileSync } from "node:fs";
@@ -70,56 +71,6 @@ async function checkNpmLatestVersion(forceRefresh = false) {
         updateAvailable: latest !== PKG_VERSION && compareSemver(latest, PKG_VERSION) > 0,
     };
 }
-function compareSemver(a, b) {
-    const parse = (v) => {
-        const [main, ...rest] = v.split("-");
-        const pre = rest.join("-");
-        const mainParts = main.split(".").map((n) => Number(n) || 0);
-        return { mainParts, pre };
-    };
-    const pa = parse(a);
-    const pb = parse(b);
-    for (let i = 0; i < 3; i++) {
-        const diff = (pa.mainParts[i] || 0) - (pb.mainParts[i] || 0);
-        if (diff !== 0)
-            return diff;
-    }
-    // Main version equal — apply semver prerelease rule: no prerelease > with prerelease.
-    if (!pa.pre && pb.pre)
-        return 1;
-    if (pa.pre && !pb.pre)
-        return -1;
-    if (!pa.pre && !pb.pre)
-        return 0;
-    // Both have prerelease: 按 . 分段比较 (数字段数值比, 非数字段字典序), 贴近标准 semver,
-    // 避免跨月/跨年的 debug.MMDDHHMM 后缀因纯字典序而排反。
-    const segA = pa.pre.split(".");
-    const segB = pb.pre.split(".");
-    const segLen = Math.max(segA.length, segB.length);
-    for (let i = 0; i < segLen; i++) {
-        const sa = segA[i];
-        const sb = segB[i];
-        if (sa === undefined)
-            return -1; // 段少者更小
-        if (sb === undefined)
-            return 1;
-        const na = Number(sa);
-        const nb = Number(sb);
-        const aIsNum = sa !== "" && !Number.isNaN(na);
-        const bIsNum = sb !== "" && !Number.isNaN(nb);
-        if (aIsNum && bIsNum) {
-            if (na !== nb)
-                return na < nb ? -1 : 1;
-        }
-        else if (aIsNum !== bIsNum) {
-            return aIsNum ? -1 : 1; // 数字段 < 非数字段
-        }
-        else if (sa !== sb) {
-            return sa < sb ? -1 : 1;
-        }
-    }
-    return 0;
-}
 /** 读取 dist/build-info.json（由 scripts/stamp-build-info.js 在 build 时生成）。 */
 function readBuildInfo() {
     try {
@@ -382,15 +333,6 @@ async function buildStructuredChatPersonaPayload(configPath, config) {
     return { user, assistant };
 }
 // ── Git helpers ──
-async function isGitRepo(dirPath) {
-    try {
-        await execAsync("git rev-parse --is-inside-work-tree", { cwd: dirPath });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 async function getGitRepoRoot(dirPath) {
     try {
         const { stdout } = await execAsync("git rev-parse --show-toplevel", { cwd: dirPath });
@@ -576,10 +518,6 @@ function normalizeMode(input, fallback) {
     return isExecutionMode(input) ? input : fallback;
 }
 /** Match a semver-looking token in a file name (with optional pre-release / build metadata). */
-function extractSemverFromName(name) {
-    const match = name.match(/(\d+\.\d+\.\d+(?:[-+][A-Za-z0-9.-]+)?)/);
-    return match ? match[1] : null;
-}
 function resolveAndroidApkDir(configDir, config) {
     const configuredDir = config.android?.apkDir?.trim();
     if (!configuredDir) {
@@ -588,7 +526,7 @@ function resolveAndroidApkDir(configDir, config) {
     return path.isAbsolute(configuredDir) ? configuredDir : path.resolve(configDir, configuredDir);
 }
 function extractAndroidApkVersion(fileName) {
-    return extractSemverFromName(fileName.replace(/\.apk$/i, ""));
+    return extractSemver(fileName.replace(/\.apk$/i, ""));
 }
 async function resolveAndroidApkAsset(configDir, config) {
     if (config.android?.enabled !== true)
@@ -666,7 +604,7 @@ function resolveMacosDmgDir(configDir, config) {
     return path.isAbsolute(configuredDir) ? configuredDir : path.resolve(configDir, configuredDir);
 }
 function extractMacosDmgVersion(fileName) {
-    return extractSemverFromName(fileName.replace(/\.dmg$/i, ""));
+    return extractSemver(fileName.replace(/\.dmg$/i, ""));
 }
 async function resolveMacosDmgAsset(configDir, config) {
     if (config.macos?.enabled !== true)

package/dist/storage.d.ts

@@ -32,7 +32,6 @@ export declare class WandStorage {
     getAppSecret(): string | null;
     /** Persist appSecret in database (DB is the authoritative source after first migration) */
     setAppSecret(value: string): void;
-    hasAppSecret(): boolean;
     saveAuthSession(token: string, expiresAt: number): void;
     getAuthSession(token: string): PersistedAuthSession | null;
     deleteAuthSession(token: string): void;

package/dist/storage.js

@@ -310,9 +310,6 @@ export class WandStorage {
     setAppSecret(value) {
         this.setConfigValue("appSecret", value);
     }
-    hasAppSecret() {
-        return this.getAppSecret() !== null;
-    }
     // ============ Auth Session Methods ============
     saveAuthSession(token, expiresAt) {
         this.db

package/dist/structured-session-manager.d.ts

@@ -88,10 +88,6 @@ export declare class StructuredSessionManager {
         idempotencyKey?: string;
         preserveQueue?: boolean;
     }): Promise<SessionSnapshot>;
-    /** Approve a pending permission request. */
-    approvePermission(sessionId: string): SessionSnapshot;
-    /** Deny a pending permission request. */
-    denyPermission(sessionId: string): SessionSnapshot;
     /**
      * Reorder the pending queued messages. `order` is a permutation of the current
      * indices, e.g. `[2, 0, 1]` means "move the third queued message to the front,
@@ -125,7 +121,6 @@ export declare class StructuredSessionManager {
     private emitStructuredSnapshot;
     private flushNextQueuedMessage;
     private emit;
-    private resolvePermission;
     private incrementApprovalStats;
     private buildCodexArgs;
     private runCodexStreaming;

package/dist/structured-session-manager.js

@@ -7,8 +7,8 @@ import path from "node:path";
 import { query as sdkQuery } from "@anthropic-ai/claude-agent-sdk";
 import { prepareSessionWorktree } from "./git-worktree.js";
 import { truncateMessagesForTransport } from "./message-truncator.js";
-import { buildChildEnv } from "./env-utils.js";
-import { buildLanguageDirective } from "./language-prompt.js";
+import { buildChildEnv, isRunningAsRoot } from "./env-utils.js";
+import { buildLanguageDirective, buildManagedAutonomyDirective } from "./language-prompt.js";
 function defaultStructuredRunner(provider) {
     return provider === "codex" ? "codex-cli-exec" : "claude-cli-print";
 }
@@ -169,9 +169,6 @@ const STREAM_EMIT_DEBOUNCE_MS = 16;
  *  authoritative final snapshot. */
 const STREAM_SAVE_THROTTLE_MS = 200;
 const ARCHIVE_AFTER_MS = 1000 * 60 * 60 * 24;
-function isRunningAsRoot() {
-    return process.getuid?.() === 0 || process.geteuid?.() === 0;
-}
 /**
  * 检测当前系统是否使用 musl libc（Alpine Linux 等）。
  * Node.js 进程报告中 glibcVersionRuntime 仅在 glibc 系统存在；musl 系统为 undefined。
@@ -385,9 +382,7 @@ function buildAppendSystemPromptParts(language, mode) {
     const isChinese = trimmedLanguage === "中文";
     const parts = [];
     if (mode === "managed") {
-        parts.push(isChinese
-            ? "你正在完全托管的自主模式下运行。用户可能无法及时回复问题或确认。你必须独立做出所有决策——自行选择最佳方案，而不是向用户询问偏好、确认或澄清。如果有多种可行方案，选择你认为最合适的并继续执行。除非任务本身存在根本性的歧义且无法合理推断，否则不要等待用户输入。果断行动，自主决策。"
-            : "You are running in a fully managed, autonomous mode. The user may not be available to respond to questions or confirmations in a timely manner. You MUST make all decisions independently — choose the best approach yourself instead of asking the user for preferences, confirmations, or clarifications. If multiple approaches are viable, pick the one you judge most appropriate and proceed. Never block on user input unless the task is fundamentally ambiguous and cannot be reasonably inferred. Be decisive and self-directed.");
+        parts.push(buildManagedAutonomyDirective(isChinese));
     }
     if (trimmedLanguage) {
         const directive = buildLanguageDirective(trimmedLanguage);
@@ -610,7 +605,6 @@ export class StructuredSessionManager {
         if (opts?.idempotencyKey) {
             const mapKey = `${id}:${opts.idempotencyKey}`;
             if (this.seenIdempotencyKeys.has(mapKey)) {
-                console.log("[WAND] sendMessage: duplicate idempotency key rejected", { id, key: opts.idempotencyKey });
                 const err = new Error("检测到重复发送，已拦截。");
                 err.code = "duplicate_idempotency_key";
                 throw err;
@@ -773,17 +767,6 @@ export class StructuredSessionManager {
             throw error;
         }
     }
-    // ---------------------------------------------------------------------------
-    // Permission resolution (called from server routes)
-    // ---------------------------------------------------------------------------
-    /** Approve a pending permission request. */
-    approvePermission(sessionId) {
-        return this.resolvePermission(sessionId, true);
-    }
-    /** Deny a pending permission request. */
-    denyPermission(sessionId) {
-        return this.resolvePermission(sessionId, false);
-    }
     /**
      * Reorder the pending queued messages. `order` is a permutation of the current
      * indices, e.g. `[2, 0, 1]` means "move the third queued message to the front,
@@ -1055,31 +1038,6 @@ export class StructuredSessionManager {
             this.emitEvent(event);
         }
     }
-    resolvePermission(sessionId, approved) {
-        const session = this.requireSession(sessionId);
-        const scope = session.pendingEscalation?.scope;
-        if (approved && scope) {
-            this.incrementApprovalStats(session, scope);
-        }
-        const updated = {
-            ...session,
-            pendingEscalation: null,
-            permissionBlocked: false,
-            lastEscalationResult: session.pendingEscalation ? {
-                requestId: session.pendingEscalation.requestId,
-                resolution: approved ? "approve_once" : "deny",
-                reason: approved ? "user_approved" : "user_denied",
-            } : session.lastEscalationResult ?? null,
-        };
-        this.sessions.set(sessionId, updated);
-        this.storage.saveSession(updated);
-        this.emit({
-            type: "status",
-            sessionId,
-            data: { permissionBlocked: false, approvalStats: updated.approvalStats, sessionKind: "structured" },
-        });
-        return updated;
-    }
     incrementApprovalStats(session, scope) {
         const prev = session.approvalStats ?? { tool: 0, command: 0, file: 0, total: 0 };
         const stats = { ...prev };
@@ -2417,7 +2375,7 @@ export class StructuredSessionManager {
             output: turnState.result,
             claudeSessionId: turnState.sessionId ?? current.claudeSessionId,
             messages: msgs,
-            queuedMessages: interruptPrompt ? [] : current.queuedMessages,
+            queuedMessages: interruptPrompt && !this.preserveQueueOnInterrupt.has(sessionId) ? [] : current.queuedMessages,
             pendingEscalation: null,
             permissionBlocked: false,
             structuredState: {
@@ -2437,6 +2395,8 @@ export class StructuredSessionManager {
             return;
         if (interruptPrompt) {
             this.interruptedWith.delete(sessionId);
+            // 与 codex/cli runner 对齐：清掉"保留队列"标记，避免 stale flag 影响下一次普通 interrupt。
+            this.preserveQueueOnInterrupt.delete(sessionId);
             setImmediate(() => {
                 this.sendMessage(sessionId, interruptPrompt).catch((err) => {
                     console.error("[WAND] sdk interrupt-and-send failed:", err);