@co0ontty/wand 2.13.0 → 3.0.0

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commit": "f1b77e3be3f2f0b4a1a158e3fc2020ccbc590c68",
-  "builtAt": "2026-07-12T10:02:57.593Z",
-  "version": "2.13.0",
+  "commit": "433a1530c708f09aa78cf17e229b0c372f63b246",
+  "builtAt": "2026-07-12T12:10:18.456Z",
+  "version": "3.0.0",
   "channel": "stable"
 }

package/dist/cert.js

@@ -9,9 +9,6 @@ function getCertificatePaths(configDir) {
         certPath: path.join(configDir, "server.crt")
     };
 }
-function certificatesExist(paths) {
-    return existsSync(paths.keyPath) && existsSync(paths.certPath);
-}
 function readPair(keyPath, certPath) {
     try {
         if (!existsSync(keyPath) || !existsSync(certPath))

package/dist/claude-pty-bridge.d.ts

@@ -7,7 +7,7 @@
  * 2. Structured messages for chat view (parsed)
  */
 import { EventEmitter } from "node:events";
-import type { ApprovalPolicy, ConversationTurn, EscalationScope, TaskData } from "./types.js";
+import type { ConversationTurn, EscalationScope } from "./types.js";
 interface PermissionState {
     /** Rolling window for prompt detection */
     window: string;
@@ -48,8 +48,6 @@ export interface ClaudePtyBridgeOptions {
     isClaudeCommand?: boolean;
     /** Whether to auto-approve permission prompts */
     autoApprove?: boolean;
-    /** Approval policy for permission handling */
-    approvalPolicy?: ApprovalPolicy;
     /** PTY write function for sending approval input */
     ptyWrite?: (input: string) => void;
 }
@@ -63,7 +61,6 @@ export interface ClaudePtyBridgeOptions {
  * - "permission.prompt" - Permission request detected
  * - "permission.resolved" - Permission resolved
  * - "session.id" - Claude session ID captured
- * - "task" - Task info update
  * - "ended" - Session ended
  */
 export declare class ClaudePtyBridge extends EventEmitter {
@@ -74,12 +71,8 @@ export declare class ClaudePtyBridge extends EventEmitter {
     private permissionState;
     private sessionIdWindow;
     private claudeSessionId;
-    private currentTask;
-    private taskDebounceTimer;
-    private lastEmittedTask;
     private isClaudeCommand;
     private autoApprove;
-    private approvalPolicy;
     private ptyWrite;
     /** Set to true once onExit() has been called; guards against post-exit method calls */
     private _exited;
@@ -112,7 +105,6 @@ export declare class ClaudePtyBridge extends EventEmitter {
     getClaudeSessionId(): string | null;
     isPermissionBlocked(): boolean;
     getPermissionState(): PermissionState;
-    getCurrentTask(): TaskData | null;
     /**
      * Set the PTY write function for sending approval input.
      */

package/dist/claude-pty-bridge.js

@@ -40,7 +40,6 @@ function normalizePtyOutput(value) {
  * - "permission.prompt" - Permission request detected
  * - "permission.resolved" - Permission resolved
  * - "session.id" - Claude session ID captured
- * - "task" - Task info update
  * - "ended" - Session ended
  */
 export class ClaudePtyBridge extends EventEmitter {
@@ -55,14 +54,9 @@ export class ClaudePtyBridge extends EventEmitter {
     // Session ID capture
     sessionIdWindow;
     claudeSessionId = null;
-    // Task tracking
-    currentTask = null;
-    taskDebounceTimer = null;
-    lastEmittedTask = null;
     // Options
     isClaudeCommand;
     autoApprove;
-    approvalPolicy;
     ptyWrite;
     /** Set to true once onExit() has been called; guards against post-exit method calls */
     _exited = false;
@@ -84,7 +78,6 @@ export class ClaudePtyBridge extends EventEmitter {
         this.rawOutput = options.initialOutput ?? "";
         this.isClaudeCommand = options.isClaudeCommand ?? false;
         this.autoApprove = options.autoApprove ?? false;
-        this.approvalPolicy = options.approvalPolicy ?? "ask-every-time";
         this.ptyWrite = options.ptyWrite ?? null;
         this.chatState = {
             phase: "idle",
@@ -200,11 +193,6 @@ export class ClaudePtyBridge extends EventEmitter {
             this.chatState.echoSkipped = true; // Force skip echo on exit
             this.finalizeResponse();
         }
-        // Clear task debounce timer
-        if (this.taskDebounceTimer) {
-            clearTimeout(this.taskDebounceTimer);
-            this.taskDebounceTimer = null;
-        }
         // Flush pending chat emit
         if (this.chatEmitTimer) {
             clearTimeout(this.chatEmitTimer);
@@ -240,9 +228,6 @@ export class ClaudePtyBridge extends EventEmitter {
     getPermissionState() {
         return this.permissionState;
     }
-    getCurrentTask() {
-        return this.currentTask;
-    }
     /**
      * Set the PTY write function for sending approval input.
      */
@@ -445,11 +430,9 @@ export class ClaudePtyBridge extends EventEmitter {
         if (!blocked && !this.permissionState.isBlocked && this.autoApprove) {
             const { score, matched } = scorePermissionLikelihood(normalized);
             if (score >= FALLBACK_SCORE_THRESHOLD) {
-                const target = this.extractPermissionTarget(normalized);
-                const scope = this.inferScope(normalized, target);
                 const lines = normalized.split("\n");
                 const tailText = lines.slice(-8).join("\n");
-                this.scheduleFallbackAutoApprove(scope, target, { score, matched, text: tailText });
+                this.scheduleFallbackAutoApprove({ score, matched, text: tailText });
                 return;
             }
         }
@@ -460,7 +443,7 @@ export class ClaudePtyBridge extends EventEmitter {
                 if (prompt !== this.permissionState.lastPrompt) {
                     // New permission prompt while already blocked — update and re-process
                     const target = this.extractPermissionTarget(normalized);
-                    const scope = this.inferScope(normalized, target);
+                    const scope = this.inferScope(normalized);
                     this.permissionState.lastPrompt = prompt;
                     this.permissionState.lastScope = scope;
                     this.permissionState.lastTarget = target ?? null;
@@ -484,7 +467,7 @@ export class ClaudePtyBridge extends EventEmitter {
         if (blocked) {
             const prompt = this.extractPromptText(normalized);
             const target = this.extractPermissionTarget(normalized);
-            const scope = this.inferScope(normalized, target);
+            const scope = this.inferScope(normalized);
             this.permissionState.lastPrompt = prompt;
             this.permissionState.lastScope = scope;
             this.permissionState.lastTarget = target ?? null;
@@ -569,7 +552,7 @@ export class ClaudePtyBridge extends EventEmitter {
      * Schedule a fallback auto-approve with false-positive verification.
      * Similar to scheduleAutoApprove but sets up post-approve monitoring.
      */
-    scheduleFallbackAutoApprove(scope, target, context) {
+    scheduleFallbackAutoApprove(context) {
         const now = Date.now();
         if (now - this.permissionState.lastAutoConfirmAt < 500)
             return;
@@ -702,7 +685,7 @@ export class ClaudePtyBridge extends EventEmitter {
             || normalized.match(/execute\s+([^,.\n]+)/i);
         return match?.[1]?.trim();
     }
-    inferScope(normalized, target) {
+    inferScope(normalized) {
         const lower = normalized.toLowerCase();
         if (lower.includes("write") || lower.includes("redirection") || lower.includes("output redirection")) {
             return "write_file";

package/dist/middleware/path-safety.js

@@ -9,10 +9,7 @@ export function isPathWithinBase(targetPath, basePath) {
 const BLOCKED_FOLDER_PATHS = ["/etc", "/root", "/boot"];
 /** Check if targetPath is inside any blocked system folder. */
 export function isBlockedFolderPath(targetPath) {
-    return BLOCKED_FOLDER_PATHS.some((blockedPath) => {
-        const relativePath = path.relative(blockedPath, targetPath);
-        return relativePath === "" || (!relativePath.startsWith("..") && !path.isAbsolute(relativePath));
-    });
+    return BLOCKED_FOLDER_PATHS.some((blockedPath) => isPathWithinBase(targetPath, blockedPath));
 }
 /** Expand shell-style home shortcuts accepted by the UI. */
 export function expandHomePath(inputPath) {

package/dist/npm-update-utils.d.ts

@@ -58,8 +58,9 @@ export declare function requiredUpdateFreeBytes(currentInstallBytes: number): nu
  * @param pkg 包名带版本，例如 `@co0ontty/wand@latest`
  * @param timeoutMs 单次 npm 调用超时
  * @param log 可选 logger，用来把过程写入控制台或前端日志
+ * @returns 与本次安装使用同一个 npm root 校验出的 dist/cli.js 绝对路径
  */
-export declare function installPackageGloballyAsync(pkg: string, timeoutMs: number, log?: (line: string) => void): Promise<void>;
+export declare function installPackageGloballyAsync(pkg: string, timeoutMs: number, log?: (line: string) => void): Promise<string>;
 /**
  * 同步版本，给 TUI installUpdate 用。
  *

package/dist/npm-update-utils.js

@@ -402,6 +402,7 @@ function assertGlobalWandInstallComplete() {
     if (!result.ok) {
         throw new Error(result.message);
     }
+    return path.join(result.packageDir, "dist", "cli.js");
 }
 function createGlobalInstallBackup(note) {
     const packageDir = getGlobalPackageDir();
@@ -641,6 +642,7 @@ function releaseGlobalUpdateLock(lock) {
  * @param pkg 包名带版本，例如 `@co0ontty/wand@latest`
  * @param timeoutMs 单次 npm 调用超时
  * @param log 可选 logger，用来把过程写入控制台或前端日志
+ * @returns 与本次安装使用同一个 npm root 校验出的 dist/cli.js 绝对路径
  */
 export async function installPackageGloballyAsync(pkg, timeoutMs, log) {
     const note = (line) => {
@@ -658,9 +660,9 @@ export async function installPackageGloballyAsync(pkg, timeoutMs, log) {
         }
         try {
             await npmInstallGlobalAsync(pkg, timeoutMs);
-            assertGlobalWandInstallComplete();
+            const installedCli = assertGlobalWandInstallComplete();
             success = true;
-            return;
+            return installedCli;
         }
         catch (error) {
             const msg = getErrorMessage(error);
@@ -675,9 +677,9 @@ export async function installPackageGloballyAsync(pkg, timeoutMs, log) {
                 cleanupNpmLeftovers();
                 try {
                     await npmInstallGlobalAsync(pkg, timeoutMs);
-                    assertGlobalWandInstallComplete();
+                    const installedCli = assertGlobalWandInstallComplete();
                     success = true;
-                    return;
+                    return installedCli;
                 }
                 catch (retryError) {
                     const retryMsg = getErrorMessage(retryError);
@@ -699,8 +701,9 @@ export async function installPackageGloballyAsync(pkg, timeoutMs, log) {
         }
         cleanupNpmLeftovers();
         await npmInstallGlobalAsync(pkg, timeoutMs, ["--force"]);
-        assertGlobalWandInstallComplete();
+        const installedCli = assertGlobalWandInstallComplete();
         success = true;
+        return installedCli;
     }
     finally {
         try {

package/dist/pidfile.d.ts

@@ -34,5 +34,3 @@ export declare function readPidfile(configPath: string): PidInfo | null;
 export declare function isPidAlive(pid: number): boolean;
 export declare function removePidfile(configPath: string): void;
 export declare function removeSocketFile(configPath: string): void;
-/** 读取 pidfile 并校验进程是否还活着。Stale 文件会自动清理。 */
-export declare function readLiveInstance(configPath: string): PidInfo | null;

package/dist/pidfile.js

@@ -98,24 +98,6 @@ export function removeSocketFile(configPath) {
         /* noop */
     }
 }
-/** 读取 pidfile 并校验进程是否还活着。Stale 文件会自动清理。 */
-export function readLiveInstance(configPath) {
-    const info = readPidfile(configPath);
-    if (!info)
-        return null;
-    if (info.pid === process.pid)
-        return null; // 自身（防御性）
-    if (!isPidAlive(info.pid)) {
-        // stale，顺手清理
-        removePidfile(configPath);
-        removeSocketFile(configPath);
-        return null;
-    }
-    // 进程活着但 socket 不在 → 多半是异常崩溃后被某种监控拉起。视为不可用。
-    if (info.socket && !existsSync(info.socket))
-        return null;
-    return info;
-}
 function applyConfigDirOwnership(filePath, configPath, mode) {
     try {
         const owner = statSync(path.dirname(configPath));

package/dist/process-manager.d.ts

@@ -2,11 +2,6 @@ import { EventEmitter } from "node:events";
 import { WandStorage } from "./storage.js";
 import { ExecutionMode, ProcessEventHandler, SessionProvider, SessionSnapshot, SessionSource, WandConfig } from "./types.js";
 export type { ProcessEvent, ProcessEventHandler } from "./types.js";
-/** Human-readable task information for the UI */
-export interface TaskInfo {
-    title: string;
-    tool?: string;
-}
 export declare class SessionInputError extends Error {
     readonly code: "SESSION_NOT_FOUND" | "SESSION_NOT_RUNNING" | "SESSION_NO_PTY";
     readonly sessionId: string;
@@ -53,7 +48,7 @@ export declare class ProcessManager extends EventEmitter {
     private orphanRecoveredCount;
     private readonly topicRequests;
     constructor(config: WandConfig, storage: WandStorage, configDir?: string);
-    on(event: "process", listener: ProcessEventHandler): this;
+    on(_event: "process", listener: ProcessEventHandler): this;
     /** 启动时被识别为孤儿 PTY 并标记为 exited 的旧会话数量（仅用于启动摘要展示）。 */
     getOrphanRecoveredCount(): number;
     private emitEvent;
@@ -110,8 +105,6 @@ export declare class ProcessManager extends EventEmitter {
      */
     setSessionMode(id: string, mode: ExecutionMode): SessionSnapshot;
     sendInput(id: string, input: string, view?: "chat" | "terminal", shortcutKey?: string): SessionSnapshot;
-    /** Emit a task event for a session, debounced to avoid flooding */
-    private emitTask;
     resize(id: string, cols: number, rows: number): SessionSnapshot;
     stop(id: string): SessionSnapshot;
     private cleanupRecord;

package/dist/process-manager.js

@@ -568,20 +568,7 @@ function snapshotMessages(record) {
 const MAX_SESSIONS = 200;
 const ARCHIVE_AFTER_MS = 1000 * 60 * 60 * 24;
 const CONFIRM_WINDOW_SIZE = 800;
-// Claude 会话 ID 格式：UUID v4
-const CLAUDE_SESSION_ID_PATTERN = /"session_id"\s*:\s*"([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})"/i;
 const UUID_V4_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function listClaudeTaskIds() {
-    const tasksDir = path.join(os.homedir(), ".claude", "tasks");
-    try {
-        return readdirSync(tasksDir, { withFileTypes: true })
-            .filter((entry) => entry.isDirectory() && UUID_V4_PATTERN.test(entry.name))
-            .map((entry) => entry.name);
-    }
-    catch {
-        return [];
-    }
-}
 function getClaudeProjectDir(cwd) {
     // Claude Code encodes the project dir by replacing every non-alphanumeric
     // character (slash, dot, underscore, etc.) with "-", not just "/". Mirroring
@@ -590,23 +577,6 @@ function getClaudeProjectDir(cwd) {
     const normalized = path.resolve(cwd).replace(/[^a-zA-Z0-9]/g, "-");
     return path.join(os.homedir(), ".claude", "projects", normalized);
 }
-function getLatestClaudeTaskId(excludeIds) {
-    const tasksDir = path.join(os.homedir(), ".claude", "tasks");
-    try {
-        const candidates = readdirSync(tasksDir, { withFileTypes: true })
-            .filter((entry) => entry.isDirectory() && UUID_V4_PATTERN.test(entry.name) && !excludeIds.has(entry.name))
-            .map((entry) => {
-            const fullPath = path.join(tasksDir, entry.name);
-            const stats = statSync(fullPath);
-            return { id: entry.name, mtimeMs: stats.mtimeMs };
-        })
-            .sort((a, b) => b.mtimeMs - a.mtimeMs);
-        return candidates[0]?.id ?? null;
-    }
-    catch {
-        return null;
-    }
-}
 /** Derive a short summary for a session from user messages or current task. */
 function getLastMessageSignature(messages) {
     const last = messages[messages.length - 1];
@@ -634,7 +604,7 @@ function shouldPersistMessages(lastState, nextMessages) {
 function recoverMessagesFromSnapshot(snapshot) {
     return snapshot.messages ?? [];
 }
-function deriveSessionSummary(messages, currentTaskTitle) {
+function deriveSessionSummary(messages) {
     // Prefer first user message as summary
     for (const msg of messages) {
         if (msg.role !== "user")
@@ -646,8 +616,6 @@ function deriveSessionSummary(messages, currentTaskTitle) {
         }
         break;
     }
-    if (currentTaskTitle)
-        return currentTaskTitle.slice(0, 120);
     return undefined;
 }
 export class ProcessManager extends EventEmitter {
@@ -739,9 +707,6 @@ export class ProcessManager extends EventEmitter {
                     messages: snapshot.messages ?? [],
                     childProcess: null,
                     ptyBridge: null,
-                    currentTask: null,
-                    taskDebounceTimer: null,
-                    lastEmittedTask: null,
                     knownClaudeTaskIds: undefined,
                     claudeTaskDiscoveryTimer: null,
                     knownClaudeProjectMtimes: isClaudeCmd ? listClaudeProjectSessionMtimes(updated.cwd) : undefined,
@@ -785,9 +750,6 @@ export class ProcessManager extends EventEmitter {
                     messages: snapshot.messages ?? [],
                     childProcess: null,
                     ptyBridge: null,
-                    currentTask: null,
-                    taskDebounceTimer: null,
-                    lastEmittedTask: null,
                     knownClaudeTaskIds: undefined,
                     claudeTaskDiscoveryTimer: null,
                     knownClaudeProjectMtimes: isClaudeCmd ? listClaudeProjectSessionMtimes(updated.cwd) : undefined,
@@ -811,7 +773,7 @@ export class ProcessManager extends EventEmitter {
         }, 60 * 1000);
         this.archiveTimer.unref?.();
     }
-    on(event, listener) {
+    on(_event, listener) {
         return super.on("process", listener);
     }
     /** 启动时被识别为孤儿 PTY 并标记为 exited 的旧会话数量（仅用于启动摘要展示）。 */
@@ -956,9 +918,6 @@ export class ProcessManager extends EventEmitter {
             messages: priorMessages,
             childProcess: null,
             ptyBridge: null,
-            currentTask: null,
-            taskDebounceTimer: null,
-            lastEmittedTask: null,
             knownClaudeTaskIds: knownClaudeTaskIds ?? undefined,
             claudeTaskDiscoveryTimer: null,
             knownClaudeProjectMtimes: knownClaudeProjectMtimes ?? undefined,
@@ -978,7 +937,6 @@ export class ProcessManager extends EventEmitter {
                 sessionId: id,
                 isClaudeCommand: true,
                 autoApprove: record.autoApprovePermissions,
-                approvalPolicy: record.approvalPolicy,
                 initialMessages: priorMessages,
             });
             record.ptyBridge.on("event", (event) => {
@@ -1454,33 +1412,6 @@ export class ProcessManager extends EventEmitter {
         this.persist(record);
         return this.snapshot(record);
     }
-    /** Emit a task event for a session, debounced to avoid flooding */
-    emitTask(record, task) {
-        // Clear existing debounce timer
-        if (record.taskDebounceTimer) {
-            clearTimeout(record.taskDebounceTimer);
-            record.taskDebounceTimer = null;
-        }
-        // Don't re-emit the same task
-        if (task && task.title === record.lastEmittedTask)
-            return;
-        if (task === null) {
-            // Clear task after a delay — allows a brief display of "idle" state
-            record.taskDebounceTimer = setTimeout(() => {
-                record.currentTask = null;
-                record.lastEmittedTask = null;
-                this.emitEvent({ type: "task", sessionId: record.id, data: null });
-            }, 2000);
-            return;
-        }
-        // Debounce task changes by 100ms to avoid flickering on rapid tool switches
-        record.taskDebounceTimer = setTimeout(() => {
-            record.taskDebounceTimer = null;
-            record.currentTask = task;
-            record.lastEmittedTask = task.title;
-            this.emitEvent({ type: "task", sessionId: record.id, data: task });
-        }, 100);
-    }
     resize(id, cols, rows) {
         const record = this.mustGet(id);
         if (!record.ptyProcess || record.status !== "running") {
@@ -1509,11 +1440,6 @@ export class ProcessManager extends EventEmitter {
         if (record.status !== "running") {
             return this.snapshot(record);
         }
-        // Clear any pending task debounce timer
-        if (record.taskDebounceTimer) {
-            clearTimeout(record.taskDebounceTimer);
-            record.taskDebounceTimer = null;
-        }
         if (record.claudeTaskDiscoveryTimer) {
             clearTimeout(record.claudeTaskDiscoveryTimer);
             record.claudeTaskDiscoveryTimer = null;
@@ -1555,10 +1481,6 @@ export class ProcessManager extends EventEmitter {
         return this.snapshot(record);
     }
     cleanupRecord(record) {
-        if (record.taskDebounceTimer) {
-            clearTimeout(record.taskDebounceTimer);
-            record.taskDebounceTimer = null;
-        }
         if (record.claudeTaskDiscoveryTimer) {
             clearTimeout(record.claudeTaskDiscoveryTimer);
             record.claudeTaskDiscoveryTimer = null;
@@ -1595,10 +1517,6 @@ export class ProcessManager extends EventEmitter {
     delete(id) {
         const record = this.mustGet(id);
         // Always clear pending timers
-        if (record.taskDebounceTimer) {
-            clearTimeout(record.taskDebounceTimer);
-            record.taskDebounceTimer = null;
-        }
         if (record.claudeTaskDiscoveryTimer) {
             clearTimeout(record.claudeTaskDiscoveryTimer);
             record.claudeTaskDiscoveryTimer = null;
@@ -1721,10 +1639,9 @@ export class ProcessManager extends EventEmitter {
             autoRecovered: record.autoRecovered ?? false,
             autoApprovePermissions: record.autoApprovePermissions || undefined,
             approvalStats: record.approvalStats.total > 0 ? record.approvalStats : undefined,
-            summary: record.description ?? deriveSessionSummary(messages, record.currentTask?.title ?? null),
+            summary: record.description ?? deriveSessionSummary(messages),
             title: record.title,
             description: record.description,
-            currentTaskTitle: record.status === "running" ? record.currentTask?.title ?? undefined : undefined,
             selectedModel: record.selectedModel ?? null,
             thinkingEffort: record.thinkingEffort ?? null,
             ptyCols: record.ptyCols,

package/dist/server-session-routes.d.ts

@@ -1,10 +1,8 @@
-import { Express } from "express";
+import type { Express } from "express";
 import { ProcessManager } from "./process-manager.js";
 import { StructuredSessionManager } from "./structured-session-manager.js";
 import { WandStorage } from "./storage.js";
 import { ExecutionMode, SessionSource, WandConfig } from "./types.js";
-import { getErrorMessage } from "./error-utils.js";
-export { getErrorMessage };
 export declare function parseSessionCreationOrigin(body: {
     sessionSource?: unknown;
     automationId?: unknown;