@co0ontty/wand 4.105.1 → 4.106.0

package/dist/server-pi-defaults-routes.js

@@ -1,7 +1,7 @@
 import { asyncRoute } from "./express-async.js";
 import { surfaceDomainError } from "./http-error.js";
 import { sendRouteError } from "./server-request.js";
-import { discoverPiResources, resolvePiResourceSelection } from "./pi-resource-catalog.js";
+import { discoverPiResources, resolvePiResourceSettingsPatch } from "./pi-resource-catalog.js";
 import { defaultPiCliSessionSettings, effectivePiSessionSettings, mergePiSessionDefaults, patchPiSessionSettings, } from "./pi-session-settings.js";
 const DOMAIN_MESSAGE = /^(Pi 设置必须是对象。|请选择有效的 Skills \/ MCP 列表。|资源选择不能包含路径、命令或其他设置。|资源选择必须是无重复的已安装资源 ID（每类最多64项）。|锁定技能必须是无重复的已安装 Skill ID（最多64项）。|CodeMode 请选择跟随 Pi、关闭、启用或仅 CodeMode。|CodeMode 必须是 off、on 或 only。|基础工具必须是无重复的 Pi 工具列表。|.+ 必须是是否启用（boolean）。|未知 Pi 设置：.+|所选 Skill 已不存在或已被停用，请重新选择；没有改用其他 Skill。|所选 MCP 已不存在，请重新选择；没有连接其他 MCP。)$/;
 /**
@@ -10,7 +10,7 @@ const DOMAIN_MESSAGE = /^(Pi 设置必须是对象。|请选择有效的 Skills
  * 之前只有「在某个会话里改一次，顺带成为新会话默认」这一条隐式路径，用户在设置页
  * 找不到它；而会话里的写入又只能表达会话本身的选择。这里给出显式入口，语义与
  * `StructuredSessionManager.setPiSettings` 写回默认的那一段保持一致（字段级合并、
- * 资源必须真实存在、不可表达的值直接拒绝）。
+ * 新增资源必须真实存在、不可表达的值直接拒绝）。
  */
 export function registerPiDefaultsRoutes(app, deps) {
     const readDefaults = () => deps.storage.getPiSessionDefaults()
@@ -42,26 +42,19 @@ export function registerPiDefaultsRoutes(app, deps) {
     }));
     app.patch("/api/pi-settings/defaults", asyncRoute(async (req, res) => {
         try {
-            const body = req.body;
+            let patch = req.body;
             const current = readDefaults();
             // 先按现有默认校验字段本身；再按「只合并本次改动」落库，与会话写入同一套语义。
-            const patched = patchPiSessionSettings(current, body);
-            const next = mergePiSessionDefaults(current, body);
-            if (body && typeof body === "object" && !Array.isArray(body)) {
-                const touched = body;
-                if (touched.resources !== undefined || touched.lockedSkills !== undefined) {
-                    const inventory = await discoverPiResources(deps.config, deps.config.defaultCwd);
-                    if (touched.resources !== undefined)
-                        resolvePiResourceSelection(inventory, next.resources ?? { skills: [], mcpServers: [] });
-                    if (touched.lockedSkills !== undefined) {
-                        resolvePiResourceSelection(inventory, { skills: next.lockedSkills ?? [], mcpServers: [] });
-                    }
-                }
-                if (next.autoResources === true) {
-                    const reason = autoResourcesReason(next);
-                    if (reason)
-                        throw new Error(reason);
-                }
+            patchPiSessionSettings(current, patch);
+            if (patch.resources !== undefined || patch.lockedSkills !== undefined) {
+                const inventory = await discoverPiResources(deps.config, deps.config.defaultCwd);
+                patch = resolvePiResourceSettingsPatch(inventory, readDefaults(), patch);
+            }
+            const next = mergePiSessionDefaults(readDefaults(), patch);
+            if (next.autoResources === true) {
+                const reason = autoResourcesReason(next);
+                if (reason)
+                    throw new Error(reason);
             }
             deps.storage.setPiSessionDefaults(next);
             res.json({ settings: effectivePiSessionSettings(next, "cli") });

package/dist/server-session-lifecycle-routes.js

@@ -11,7 +11,7 @@ import { toSessionDetailDTO } from "./session-transport.js";
 import { compactToolMessagesForTransport, windowMessagesForTransport } from "./message-truncator.js";
 import { enrichStructuredMessages } from "./structured-client-protocol.js";
 import { installedPiExtensions } from "./pi-extension-resources.js";
-import { discoverPiResources, resolvePiResourceSelection } from "./pi-resource-catalog.js";
+import { discoverPiResources, resolvePiResourceSettingsPatch } from "./pi-resource-catalog.js";
 import { effectivePiSessionSettings, patchPiSessionSettings } from "./pi-session-settings.js";
 import { isProviderSessionId } from "./resume-policy.js";
 import { sendRouteError } from "./server-request.js";
@@ -64,7 +64,7 @@ export function registerSessionLifecycleRoutes(app, ctx) {
                 if (body.mode !== undefined && !isExecutionMode(body.mode))
                     throw badRequest(`无效执行模式: ${String(body.mode)}`);
                 const initialInput = body.initialInput?.trim();
-                const origin = parseSessionCreationOrigin(body);
+                const origin = parseSessionCreationOrigin(body, interactiveShell);
                 const rawModel = typeof body.model === "string" ? body.model.trim() : "";
                 const rawCommand = body.command?.trim() ?? "";
                 const provider = interactiveShell
@@ -208,6 +208,14 @@ export function registerSessionLifecycleRoutes(app, ctx) {
             sendRouteError(res, surfaceDomainError(error, /Wand Agent|harness|core/i) ?? error, "无法启动结构化会话。");
         }
     }));
+    app.put("/api/sessions/:id/quick-terminal", (req, res) => {
+        try {
+            res.json(sessionResponseDTO(sessions.claimQuickTerminal(req.params.id), req));
+        }
+        catch (error) {
+            sendRouteError(res, error, "无法连接快捷终端。");
+        }
+    });
     app.post("/api/sessions/:id/directory", (req, res) => {
         const cwd = req.body?.cwd;
         if (typeof cwd !== "string" || !cwd.trim()) {
@@ -306,6 +314,7 @@ export function registerSessionLifecycleRoutes(app, ctx) {
             requirePiSession(id);
             const { settings } = structured.getPiSettings(id);
             const next = patchPiSessionSettings(settings, req.body);
+            let patch = req.body;
             if (req.body.autoResources === true) {
                 const capabilities = await piSettingsResponse(id);
                 const runtime = decisions?.status();
@@ -315,26 +324,17 @@ export function registerSessionLifecycleRoutes(app, ctx) {
                         : capabilities.autoResourcesReason || "自动选择暂不可用。");
                 }
             }
-            if (req.body.resources !== undefined || req.body.lockedSkills !== undefined) {
-                const inventory = await discoverPiResources(config, structured.get(id).cwd);
-                // Removed resources may be retained only when already selected, so users can deselect stale
-                // items one at a time. Any NEW ID must resolve; the runner always revalidates the full list.
-                if (req.body.resources !== undefined)
-                    resolvePiResourceSelection(inventory, {
-                        skills: next.resources.skills.filter((id) => !settings.resources?.skills.includes(id)),
-                        mcpServers: next.resources.mcpServers.filter((id) => !settings.resources?.mcpServers.includes(id)),
-                    });
-                if (req.body.lockedSkills !== undefined)
-                    resolvePiResourceSelection(inventory, {
-                        skills: next.lockedSkills.filter((id) => !settings.lockedSkills?.includes(id)), mcpServers: [],
-                    });
-            }
             if (next.goalMode && !settings.goalMode) {
                 const installed = await installedPiExtensions(config, structured.get(id).cwd);
                 if (!installed.some((item) => item.goal))
                     throw badRequest("目标模式不可用：请先在 Pi 中安装并启用 pi-goal。");
             }
-            structured.setPiSettings(id, req.body);
+            if (req.body.resources !== undefined || req.body.lockedSkills !== undefined) {
+                const inventory = await discoverPiResources(config, structured.get(id).cwd);
+                // A lock-only patch must release from the latest selection after asynchronous discovery.
+                patch = resolvePiResourceSettingsPatch(inventory, structured.getPiSettings(id).settings, patch);
+            }
+            structured.setPiSettings(id, patch);
             // 回复「实际生效」的设置（CLI 的 CodeMode 只归一到 off/on），不把存库原值当生效值展示。
             const saved = structured.getPiSettings(id);
             res.json({ settings: effectivePiSessionSettings(saved.settings, saved.resolution.engine) });

package/dist/server-session-list-routes.js

@@ -88,7 +88,7 @@ export function registerSessionListRoutes(app, ctx) {
         }
     });
     app.get("/api/sessions", (req, res) => {
-        res.json(sessions.listSlim().map((session) => toSessionListItemDTO(session)));
+        res.json(sessions.listSlim().filter(session => session.sessionSource !== "quick-terminal").map((session) => toSessionListItemDTO(session)));
     });
     app.get("/api/sessions/provider-usage", (_req, res) => {
         res.json(storage.countInteractiveSessionsByProvider());

package/dist/server-task-routes.js

@@ -17,6 +17,7 @@ import { parseWandTaskAgent } from "./storage.js";
 import { compactTransportAvatar } from "./fixed-employee-avatar.js";
 import { canArchiveTask } from "./task-archive-policy.js";
 import { TaskReadModel } from "./task-read-model.js";
+import { readTaskActions } from "./task-actions.js";
 import { refreshAutoBoardTaskTitles, taskTitleService } from "./task-title-service.js";
 import { provisionalTaskTitleFromDescription } from "./task-title.js";
 import { isWandTaskStatus, statusAfterWandTaskDispatch } from "./task-types.js";
@@ -217,6 +218,11 @@ export function registerTaskRoutes(app, deps) {
         res.json(model.tasks.filter(task => workspaceId === undefined || task.workspaceId === workspaceId)
             .map(task => taskDto(deps, task, model)));
     });
+    app.get("/api/wand-task-actions", (req, res) => {
+        const workspaceId = typeof req.query.workspaceId === "string" ? req.query.workspaceId : undefined;
+        res.set("Cache-Control", "no-store");
+        res.json(readTaskActions(storage, sessions, workspaceId));
+    });
     registerTaskCommentRoutes(app, deps);
     app.get("/api/wand-task-agent-defaults", (_req, res) => {
         res.json(readTaskBoardLastAgent(storage));

package/dist/server-update-routes.d.ts

@@ -49,6 +49,7 @@ export interface PublicUpdateRoutesDependencies {
     resolveMacosBetaDownload(fileName: string): Promise<DownloadAsset | null>;
     resolveLatestIpa(): Promise<ResolvedUpdateAsset | null>;
     resolveIosDownload(): Promise<DownloadAsset | null>;
+    resolveIosAppDownload?(appId: string, fileName?: string): Promise<DownloadAsset | null>;
 }
 export declare function registerPublicUpdateRoutes(app: Express, deps: PublicUpdateRoutesDependencies, publicOrigin?: string): void;
 export declare class ServerUpdateState {

package/dist/server-update-routes.js

@@ -253,11 +253,15 @@ export function registerPublicUpdateRoutes(app, deps, publicOrigin) {
             });
             return;
         }
-        const updateAvailable = compareWandInstallOrder(payload.latestVersion, currentVersion) > 0;
+        const versionOrder = compareWandInstallOrder(payload.latestVersion, currentVersion);
+        const currentBuild = text(req.query.currentBuild);
+        const updateAvailable = versionOrder > 0 || (versionOrder === 0 && !!currentBuild
+            && compareWandInstallOrder(payload.bundleBuild, currentBuild) > 0);
         res.json({
             updateAvailable,
             currentVersion,
             latestVersion: payload.latestVersion,
+            latestBuild: payload.bundleBuild,
             downloadUrl: updateAvailable ? payload.downloadUrl : null,
             installUrl: updateAvailable ? payload.installUrl : null,
             manifestUrl: payload.manifestUrl,
@@ -291,22 +295,27 @@ export function registerPublicUpdateRoutes(app, deps, publicOrigin) {
         res.setHeader("Cache-Control", "no-cache");
         res.send(buildIosInstallPage({
             title: payload.title,
-            version: payload.latestVersion,
+            version: iosAppId(req) ? `${payload.latestVersion}（${payload.bundleBuild}）` : payload.latestVersion,
             sizeLabel: formatIosAssetSize(payload.size),
             installUrl: payload.installUrl ?? "#",
             downloadUrl: payload.downloadUrl,
             signed: payload.signed,
             https: payload.origin.startsWith("https://"),
+            apps: await resolveIosInstallLinks(req, deps, publicOrigin),
         }));
     }));
     app.get("/ios/download", asyncRoute(async (req, res) => {
-        const asset = await deps.resolveIosDownload();
+        const appId = iosAppId(req);
+        const asset = appId
+            ? await deps.resolveIosAppDownload?.(appId, text(req.query.fileName) || undefined)
+            : await deps.resolveIosDownload();
         if (!asset) {
             res.status(404).json({ error: "当前没有可下载的 IPA 文件。" });
             return;
         }
         // iOS 每次 debug 构建产出独立时间戳的 IPA，不清理会按构建次数堆积。
-        await pruneQuietly(deps.pruneIosIpaDirectory?.bind(deps), asset.fileName, " iOS 构建包");
+        if (!appId)
+            await pruneQuietly(deps.pruneIosIpaDirectory?.bind(deps), asset.fileName, " iOS 构建包");
         streamFileWithRange(req, res, {
             filePath: asset.filePath,
             size: asset.size,
@@ -316,9 +325,19 @@ export function registerPublicUpdateRoutes(app, deps, publicOrigin) {
         });
     }));
 }
-async function resolveIosOtaPayload(req, deps, publicOrigin) {
-    const latest = await deps.resolveLatestIpa();
-    const local = await deps.resolveIosDownload();
+function iosAppId(req) {
+    if (req.query.app === undefined)
+        return undefined;
+    if (req.query.app !== "huniu-helper")
+        throw new HttpError(404, "unknown_app", "未知的 iOS 应用。");
+    return "huniu-helper";
+}
+async function resolveIosOtaPayload(req, deps, publicOrigin, selection) {
+    const appId = selection ? selection.appId : iosAppId(req);
+    const local = appId
+        ? await deps.resolveIosAppDownload?.(appId, selection ? undefined : text(req.query.fileName) || undefined)
+        : await deps.resolveIosDownload();
+    const latest = appId ? null : await deps.resolveLatestIpa();
     if (!latest && !local)
         return null;
     // Explicit ?origin= wins; then the deployment's configured publicOrigin
@@ -334,13 +353,17 @@ async function resolveIosOtaPayload(req, deps, publicOrigin) {
     const size = local?.size ?? latest?.size ?? 0;
     const latestVersion = latest?.version ?? "0.0.0";
     const metadata = local
-        ? await inspectIpa(local.filePath, { version: latestVersion }).catch(() => ({
-            bundleId: "com.wand.app",
-            bundleVersion: latestVersion,
-            bundleBuild: latestVersion,
-            title: "Wand",
-            signed: false,
-        }))
+        ? await inspectIpa(local.filePath, { version: latestVersion }).catch((error) => {
+            if (appId)
+                throw error;
+            return {
+                bundleId: "com.wand.app",
+                bundleVersion: latestVersion,
+                bundleBuild: latestVersion,
+                title: "Wand",
+                signed: false,
+            };
+        })
         : {
             bundleId: "com.wand.app",
             bundleVersion: latestVersion,
@@ -348,10 +371,17 @@ async function resolveIosOtaPayload(req, deps, publicOrigin) {
             title: "Wand",
             signed: false,
         };
-    const downloadPath = latest?.downloadUrl ?? "/ios/download";
+    if (appId && metadata.bundleId !== "dev.tigertools.PlaylistBridge") {
+        throw new HttpError(503, "invalid_app_package", "所选 iOS 安装包身份不匹配。");
+    }
+    // Pin both manifest and IPA: publishing a new build must not change an in-flight install.
+    const suffix = appId ? `?app=${appId}&fileName=${encodeURIComponent(fileName)}` : "";
+    const downloadPath = appId ? `/ios/download${suffix}` : (latest?.downloadUrl ?? "/ios/download");
     const downloadUrl = origin ? absoluteUrl(origin, downloadPath) : downloadPath;
-    const manifestUrl = origin ? absoluteUrl(origin, "/ios/manifest.plist") : "/ios/manifest.plist";
-    const installPageUrl = origin ? absoluteUrl(origin, "/ios/install") : "/ios/install";
+    const manifestPath = `/ios/manifest.plist${suffix}`;
+    const installPath = appId ? `/ios/install?app=${appId}` : "/ios/install";
+    const manifestUrl = origin ? absoluteUrl(origin, manifestPath) : manifestPath;
+    const installPageUrl = origin ? absoluteUrl(origin, installPath) : installPath;
     const blockers = collectIosOtaBlockers({
         signed: metadata.signed,
         origin,
@@ -367,6 +397,7 @@ async function resolveIosOtaPayload(req, deps, publicOrigin) {
     });
     return {
         latestVersion: metadata.bundleVersion || latestVersion,
+        bundleBuild: metadata.bundleBuild,
         downloadUrl,
         installUrl: origin ? buildItmsServicesUrl(manifestUrl) : null,
         manifestUrl,
@@ -383,6 +414,20 @@ async function resolveIosOtaPayload(req, deps, publicOrigin) {
         manifest,
     };
 }
+async function resolveIosInstallLinks(req, deps, publicOrigin) {
+    const currentApp = iosAppId(req);
+    const selections = [{}, { appId: "huniu-helper" }];
+    // One missing/broken package must not hide the other app's valid installer.
+    const results = await Promise.allSettled(selections.map(selection => resolveIosOtaPayload(req, deps, publicOrigin, selection)));
+    return results.flatMap((result, index) => {
+        if (result.status !== "fulfilled" || !result.value?.otaReady)
+            return [];
+        return [{
+                title: result.value.title, url: result.value.installPageUrl,
+                current: selections[index].appId === currentApp,
+            }];
+    });
+}
 export class ServerUpdateState {
     providerCliUpdateCache = null;
     providerCliUpdateInFlight = false;

package/dist/server-workspace-routes.js

@@ -227,7 +227,7 @@ function workspaceWithCounts(storage, workspace, sessionCounts, includeArchived
     const worktreeCount = storage.listWorkspaceTasks(workspace.id)
         .filter((task) => (includeArchived || !task.archived) && task.worktree !== null)
         .length;
-    const sessionCount = (sessionCounts ?? storage.countSessionsByWorkspace({ includeArchived, excludeSystemAiCalls: true })).get(workspace.id) ?? 0;
+    const sessionCount = (sessionCounts ?? storage.countSessionsByWorkspace({ includeArchived, excludeSystemAiCalls: true, excludeQuickTerminals: true })).get(workspace.id) ?? 0;
     return { ...workspace, worktreeCount, sessionCount };
 }
 // ── Layout validation / sanitization（前端 PUT 与测试共用）──
@@ -341,7 +341,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
     // 列出所有项目（按创建时间降序：新建在前，打开不会改位置）
     app.get("/api/workspaces", (req, res) => {
         const includeArchived = req.query.includeArchived === "1";
-        const sessionCounts = storage.countSessionsByWorkspace({ includeArchived, excludeSystemAiCalls: true });
+        const sessionCounts = storage.countSessionsByWorkspace({ includeArchived, excludeSystemAiCalls: true, excludeQuickTerminals: true });
         res.json(storage.listWorkspaces()
             .filter((workspace) => !isGlobalWorkspace(workspace))
             .map((workspace) => workspaceWithCounts(storage, workspace, sessionCounts, includeArchived)));
@@ -380,7 +380,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         const archivedTaskIds = new Set(storage.listWorkspaceTasks(workspace.id)
             .filter((task) => task.archived).map((task) => task.id));
         const teamMarkers = teamSessionMarkers(storage);
-        const visibleSessions = storage.listSessionsByWorkspaceSlim(workspace.id).filter((session) => !isSystemAiCall(session)).map((session) => ({
+        const visibleSessions = storage.listSessionsByWorkspaceSlim(workspace.id).filter((session) => !isSystemAiCall(session) && session.sessionSource !== "quick-terminal").map((session) => ({
             ...workspaceSessionSummary(session, { workspaceName: workspace.name }, sessions, teamMarkersFor(teamMarkers, session.id)),
             workspaceTaskId: session.workspaceTaskId,
         })).filter((session) => includeArchived || (!session.archived
@@ -614,7 +614,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         // Server-owned one-shot feature logs are not Agent work. Do not filter by employee,
         // sessionSource=automation or generic automation IDs: those also carry dispatch,
         // communication and scheduled work. Keep storage and employee audit history intact.
-        const sessionVisible = (session) => !isSystemAiCall(session)
+        const sessionVisible = (session) => !isSystemAiCall(session) && session.sessionSource !== "quick-terminal"
             && (includeArchived || !session.archived);
         const workspaces = [...model.workspaces.values()];
         // 群聊与成员派发标记一次查全：列表里每条会话只做 Map 命中，不逐个查库。
@@ -925,7 +925,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         const workspace = storage.getWorkspace(task.workspaceId);
         const teamMarkers = teamSessionMarkers(storage);
         const card = storage.getWandTaskByWorkspaceTaskId(task.id);
-        const taskSessions = storage.listSessionsByWorkspaceTaskSlim(task.id).filter(session => !isSystemAiCall(session))
+        const taskSessions = storage.listSessionsByWorkspaceTaskSlim(task.id).filter(session => !isSystemAiCall(session) && session.sessionSource !== "quick-terminal")
             .map(session => liveSession(session, sessions));
         res.json({
             ...task,

package/dist/server.js

@@ -1,3 +1,4 @@
+import { registerKnowledgeRoutes } from "./server-knowledge-routes.js";
 import { OpenRouterFreeModelsService } from "./openrouter-free-models.js";
 import { OpenCodeFreeModelsService, registerOpenCodeFreePool, adoptSystemOpenCodeFreeDefault } from "./opencode-system-fallback.js";
 import { OPENCODE_FREE_GROUP_ID, OPENCODE_FREE_GROUP_NAME } from "./opencode-free-selection.js";
@@ -419,7 +420,7 @@ export async function startServer(config, configPath, options = {}) {
         storage, config, structured: structuredSessions, processes, sessions: sessionRegistry,
     });
     structuredSessions.setEmployeeInputAdmission({
-        canStart: (session, scheduling) => taskExecutionQueue.canStartSession(session, scheduling),
+        canStart: (session, scheduling, immediate) => taskExecutionQueue.canStartSession(session, scheduling, immediate),
         schedule: employeeId => taskExecutionQueue.scheduleDrain(employeeId),
     });
     let apnsConfiguration = null;
@@ -688,6 +689,7 @@ export async function startServer(config, configPath, options = {}) {
         executionQueue: taskExecutionQueue,
         notifyEmployeeChanged: (employeeId) => notifyAiTeamRun({ kind: "silicon-employee-definition", employeeId }),
     });
+    registerKnowledgeRoutes(app, storage);
     registerEmployeeImRoutes(app, { storage, im: employeeIm, requireAdmin });
     registerDingTalkRoutes(app, { service: dingtalk, requireAdmin, install: () => dingtalkDws.install() });
     registerAttentionRoutes(app, { sessions: sessionRegistry, runner: aiTeams });
@@ -1074,7 +1076,7 @@ export async function startServer(config, configPath, options = {}) {
         }, MODEL_CATALOG_AUTO_REFRESH_INTERVAL_MS);
         modelCatalogRefreshTimer.unref();
     }
-    // 会话仍按固定 7 天归档再清理；任务窗口每次扫描读取当前设置。
+    // 每次扫描读取当前保留窗口；未完成、待验收和升级前任务归档不进入自动清理。
     // 保存任务保留设置后走同一条扫描，不等下一小时。
     const retentionDeps = {
         storage,

package/dist/session-questions.d.ts

@@ -0,0 +1,7 @@
+import type { ConversationTurn, SessionSnapshot, StructuredQuestion, ToolUseBlock } from "./types.js";
+export declare function sessionToolQuestions(block: ToolUseBlock): StructuredQuestion[];
+/** One source session, latest assistant request only. Historical cards stay read-only. */
+export declare function pendingSessionQuestions(session: Pick<SessionSnapshot, "status"> & {
+    archived?: boolean;
+    messages?: ConversationTurn[];
+}): ToolUseBlock[];

package/dist/session-questions.js

@@ -0,0 +1,25 @@
+export function sessionToolQuestions(block) {
+    if (block.semantic?.kind === "question_request")
+        return block.semantic.questions;
+    // Legacy Claude recordings predate the semantic projection.
+    if (block.name === "AskUserQuestion" && Array.isArray(block.input.questions))
+        return block.input.questions;
+    return [];
+}
+/** One source session, latest assistant request only. Historical cards stay read-only. */
+export function pendingSessionQuestions(session) {
+    if (session.archived || ["failed", "stopped", "exited"].includes(session.status))
+        return [];
+    const turns = session.messages ?? [];
+    const results = new Set(turns.flatMap(turn => turn.content.flatMap(block => block.type === "tool_result" ? [block.tool_use_id] : [])));
+    for (let index = turns.length - 1; index >= 0; index--) {
+        const turn = turns[index];
+        if (turn.role === "user" && turn.content.some(block => block.type === "text" && block.text.trim()))
+            return [];
+        if (turn.role !== "assistant")
+            continue;
+        return turn.content.filter((block) => block.type === "tool_use"
+            && sessionToolQuestions(block).length > 0 && !results.has(block.id));
+    }
+    return [];
+}

package/dist/session-registry.d.ts

@@ -39,6 +39,9 @@ export declare class SessionRegistry {
     ownerOf(id: string): SessionOwner | null;
     get(id: string): SessionSnapshot | null;
     getLatest(id: string): SessionSnapshot | null;
+    claimQuickTerminal(id: string): SessionSnapshot;
+    /** Read-only runtime owner. Never hydrate a stored transcript to discover actions. */
+    getRuntimeSnapshot(id: string): SessionSnapshot | null;
     /** Runtime facts and membership only; list/policy reads must not hydrate transcripts. */
     getSlim(id: string): SessionSnapshot | null;
     listSlim(options?: {

package/dist/session-registry.js

@@ -6,6 +6,8 @@ import { systemAiSessions } from "./system-ai-session-recorder.js";
 import { cleanupWorktreeSync } from "./git-worktree.js";
 import { inferProviderFromCommand } from "./session-provider.js";
 import { enrichStructuredMessages } from "./structured-client-protocol.js";
+import { canClaimQuickTerminal } from "./quick-terminal-session.js";
+import { badRequest, notFound } from "./http-error.js";
 export function deleteProviderNativeHistory(deleter, provider, providerSessionId, cwd) {
     const id = providerSessionId.trim();
     if (!id)
@@ -168,6 +170,21 @@ export class SessionRegistry {
     getLatest(id) {
         return this.get(id);
     }
+    claimQuickTerminal(id) {
+        const snapshot = this.get(id);
+        if (!snapshot)
+            throw notFound("未找到该终端，可能已被删除。");
+        if (!canClaimQuickTerminal(snapshot))
+            throw badRequest("只有普通空白终端可以作为快捷终端。");
+        const updated = this.storage.claimQuickTerminal(id);
+        if (this.processes.getOwned(id))
+            this.processes.setSessionSource(id, updated.sessionSource);
+        return this.get(id);
+    }
+    /** Read-only runtime owner. Never hydrate a stored transcript to discover actions. */
+    getRuntimeSnapshot(id) {
+        return this.structured.get(id) ?? this.processes.getOwned(id) ?? null;
+    }
     /** Runtime facts and membership only; list/policy reads must not hydrate transcripts. */
     getSlim(id) {
         const snapshot = this.structured.getSlim(id) ?? this.processes.getOwnedSlim(id) ?? this.storage.getSessionSlim(id);

package/dist/session-request.d.ts

@@ -3,7 +3,7 @@ export declare function parseExecutionMode(value: unknown, fallback: ExecutionMo
 export declare function parseSessionCreationOrigin(body: {
     sessionSource?: unknown;
     automationId?: unknown;
-} | null | undefined): {
+} | null | undefined, allowQuickTerminal?: boolean): {
     sessionSource: SessionSource;
     automationId?: string;
 };

package/dist/session-request.js

@@ -1,5 +1,6 @@
 import { isExecutionMode } from "./config.js";
 import { isSystemAiCall } from "./system-ai-call.js";
+import { badRequest } from "./http-error.js";
 export function parseExecutionMode(value, fallback) {
     if (value === undefined)
         return fallback;
@@ -8,9 +9,12 @@ export function parseExecutionMode(value, fallback) {
     }
     return value;
 }
-export function parseSessionCreationOrigin(body) {
+export function parseSessionCreationOrigin(body, allowQuickTerminal = false) {
     const rawSource = body?.sessionSource;
-    if (rawSource !== undefined && rawSource !== "interactive" && rawSource !== "automation" && rawSource !== "startup") {
+    if (rawSource === "quick-terminal" && (!allowQuickTerminal || body?.automationId !== undefined)) {
+        throw badRequest("快捷终端只允许无自动化绑定的空白 PTY shell。");
+    }
+    if (rawSource !== undefined && rawSource !== "interactive" && rawSource !== "automation" && rawSource !== "startup" && rawSource !== "quick-terminal") {
         throw new Error("sessionSource 必须是 interactive、automation 或 startup。");
     }
     const rawAutomationId = body?.automationId;

package/dist/session-service.js

@@ -102,7 +102,7 @@ export function sessionSortTimestamp(snapshot) {
     return Number.isFinite(timestamp) ? timestamp : 0;
 }
 export function buildSessionListEntries(sessions) {
-    return sessions.map((session) => ({
+    return sessions.filter(session => session.sessionSource !== "quick-terminal").map((session) => ({
         type: "managed",
         key: `session-${session.id}`,
         sortTimestamp: sessionSortTimestamp(session),

package/dist/storage/employees-repository.js

@@ -262,15 +262,18 @@ export class EmployeeRepository {
             if (accessToken && this.resolveEmployeeKnowledgeAccess(accessToken) !== employeeId) {
                 throw new Error("知识库访问已失效，请等待新的会话执行。");
             }
-            return this.db.prepare("DELETE FROM employee_knowledge WHERE employee_id = ? AND id = ?")
+            const deleted = this.db.prepare("DELETE FROM employee_knowledge WHERE employee_id = ? AND id = ?")
                 .run(employeeId, entryId).changes === 1;
+            if (deleted)
+                this.s.invalidateKnowledgeNamespace("personal", employeeId);
+            return deleted;
         });
     }
     clearEmployeeKnowledge(employeeId) {
         this.s.transaction(() => {
             this.requireKnowledgeEmployee(employeeId);
             this.db.prepare("DELETE FROM employee_knowledge WHERE employee_id = ?").run(employeeId);
-            this.db.prepare("DELETE FROM employee_knowledge_access WHERE employee_id = ?").run(employeeId);
+            this.s.invalidateKnowledgeNamespace("personal", employeeId);
         });
     }
     /** Opaque per-execution capability: no employee selector, app token or DB secret in model prompts. */

package/dist/storage/knowledge-repository.d.ts

@@ -0,0 +1,35 @@
+import type { DatabaseSync } from "node:sqlite";
+import type { WandStorage } from "../storage.js";
+import { type KnowledgeAccess, type KnowledgeDocument, type KnowledgeDocumentInput, type KnowledgeLibrary, type KnowledgeScope } from "../knowledge-types.js";
+export declare class KnowledgeRepository {
+    #private;
+    private readonly db;
+    private readonly s;
+    constructor(db: DatabaseSync, s: WandStorage);
+    knowledgeOwners(): {
+        employees: Array<{
+            id: string;
+            name: string;
+        }>;
+        projects: Array<{
+            id: string;
+            name: string;
+            readOnly: boolean;
+        }>;
+    };
+    readKnowledgeLibrary(scope: KnowledgeScope, ownerId: string, query?: string, accessToken?: string): KnowledgeLibrary;
+    getKnowledgeDocument(scope: KnowledgeScope, ownerId: string, id: string, accessToken?: string): KnowledgeDocument;
+    createKnowledgeDocument(scope: KnowledgeScope, ownerId: string, input: KnowledgeDocumentInput, accessToken?: string): {
+        entry: KnowledgeDocument;
+        created: boolean;
+    };
+    updateKnowledgeDocument(scope: KnowledgeScope, ownerId: string, id: string, revision: number, input: KnowledgeDocumentInput, accessToken?: string): KnowledgeDocument;
+    deleteKnowledgeDocument(scope: KnowledgeScope, ownerId: string, id: string, revision: number, accessToken?: string): void;
+    invalidateKnowledgeNamespace(scope: KnowledgeScope, ownerId: string): void;
+    /** Only persisted bindings count; legacy UI identity projections are not authority. */
+    knowledgeSessionScope(sessionId: string): KnowledgeAccess | null;
+    issueKnowledgeAccess(sessionId: string, now?: number): string;
+    resolveKnowledgeAccess(token: string, now?: number): KnowledgeAccess | null;
+    revokeKnowledgeAccess(token: string): void;
+    revokeSessionKnowledgeAccess(sessionId: string): void;
+}