@co0ontty/wand 4.43.0 → 4.45.0-beta.g56ec050

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commit": "c05b4f15f592f2c4f335df60c46208a7e0ea82fc",
-  "builtAt": "2026-08-22T00:47:50.129Z",
-  "version": "4.43.0",
-  "channel": "stable"
+  "commit": "56ec050abeeaae4b9fdebe6234682e02fd73b5e5",
+  "builtAt": "2026-08-22T05:18:43.717Z",
+  "version": "4.45.0-beta.g56ec050",
+  "channel": "beta"
 }

package/dist/cli.js

@@ -177,6 +177,7 @@ async function main() {
         case "session:read":
         case "session:send":
         case "session:wait":
+        case "inbox:list":
         case "mission:list":
         case "mission:create":
         case "mission:diff":
@@ -224,6 +225,7 @@ Commands:
 
 Agent runtime:
   wand session:list         List sessions as JSON
+  wand inbox:list           List mission inbox items as JSON
   wand session:read <id>    Read a complete session snapshot
   wand session:send <id> <text>
   wand session:wait <id> [--timeout 900]
@@ -260,6 +262,7 @@ async function runAgentCliCommand(command, args, configPath) {
         return value;
     };
     switch (command) {
+        case "inbox:list": return output(await api.get("/api/inbox"));
         case "session:list": return output(await api.get("/api/sessions"));
         case "session:read": {
             const id = required(args[1], "wand session:read <id>");

package/dist/config.js

@@ -70,6 +70,7 @@ export const defaultConfig = () => ({
     language: "",
     android: defaultAndroidApkConfig(),
     macos: defaultMacosDmgConfig(),
+    ios: defaultIosIpaConfig(),
     cardDefaults: defaultCardExpandDefaults(),
     defaultModel: "",
     defaultCodexModel: "",
@@ -594,6 +595,28 @@ function normalizeMacosDmgConfig(input) {
             : defaults.currentDmgFile,
     };
 }
+function defaultIosIpaConfig() {
+    return {
+        enabled: false,
+        ipaDir: "ios",
+        currentIpaFile: "",
+    };
+}
+function normalizeIosIpaConfig(input) {
+    if (!input || typeof input !== "object")
+        return undefined;
+    const defaults = defaultIosIpaConfig();
+    const iosInput = input;
+    return {
+        enabled: typeof iosInput.enabled === "boolean" ? iosInput.enabled : defaults.enabled,
+        ipaDir: typeof iosInput.ipaDir === "string" && iosInput.ipaDir.trim()
+            ? iosInput.ipaDir.trim()
+            : defaults.ipaDir,
+        currentIpaFile: typeof iosInput.currentIpaFile === "string"
+            ? iosInput.currentIpaFile.trim()
+            : defaults.currentIpaFile,
+    };
+}
 function normalizeStructuredChatPersona(input) {
     if (!input || typeof input !== "object")
         return undefined;
@@ -664,6 +687,7 @@ function mergeWithDefaults(input) {
             : crypto.randomBytes(32).toString("hex"),
         android: normalizeAndroidApkConfig(input.android) ?? defaults.android,
         macos: normalizeMacosDmgConfig(input.macos) ?? defaults.macos,
+        ios: normalizeIosIpaConfig(input.ios) ?? defaults.ios,
         cardDefaults: normalizeCardDefaults(input.cardDefaults),
         defaultProvider: input.defaultProvider === "codex" || input.defaultProvider === "opencode" || input.defaultProvider === "grok" || input.defaultProvider === "qoder" || input.defaultProvider === "pi" ? input.defaultProvider : "claude",
         defaultSessionKind: input.defaultSessionKind === "pty" ? "pty" : "structured",

package/dist/distribution-manager.d.ts

@@ -22,6 +22,7 @@ export interface ResolvedDistributionAsset {
 export interface DistributionSettings {
     androidApk: Record<string, unknown>;
     macosDmg: Record<string, unknown>;
+    iosIpa: Record<string, unknown>;
 }
 export interface DistributionManagerOptions {
     configDir: string;
@@ -46,6 +47,8 @@ export declare class DistributionManager {
     resolveAndroidDownload(channel?: ApkUpdateChannel): Promise<LocalDistributionAsset | null>;
     resolveLatestDmg(): Promise<ResolvedDistributionAsset | null>;
     resolveMacosDownload(): Promise<LocalDistributionAsset | null>;
+    resolveLatestIpa(): Promise<ResolvedDistributionAsset | null>;
+    resolveIosDownload(): Promise<LocalDistributionAsset | null>;
     getSettings(): Promise<DistributionSettings>;
     private readonly sha256Cache;
     /**

package/dist/distribution-manager.js

@@ -114,18 +114,49 @@ export class DistributionManager {
             compareVersions: compareSemver,
         });
     }
+    async resolveLatestIpa() {
+        const localIpa = await this.resolveIosDownload();
+        if (localIpa?.version) {
+            return {
+                version: localIpa.version,
+                downloadUrl: localIpa.downloadUrl,
+                fileName: localIpa.fileName,
+                size: localIpa.size,
+                source: "local",
+            };
+        }
+        const github = await this.fetchGitHubAsset(".ipa");
+        return github ? { ...github, source: "github" } : null;
+    }
+    async resolveIosDownload() {
+        await this.refreshConfig();
+        const { config, configDir } = this.options;
+        if (config.ios?.enabled !== true)
+            return null;
+        return this.resolveLocalAsset({
+            directory: resolveConfiguredDir(configDir, config.ios.ipaDir, "ios"),
+            extension: ".ipa",
+            configuredFile: config.ios.currentIpaFile,
+            downloadUrl: "/ios/download",
+            compareVersions: compareSemver,
+        });
+    }
     async getSettings() {
-        const [localApk, githubApk, localDmg, githubDmg] = await Promise.all([
+        const [localApk, githubApk, localDmg, githubDmg, localIpa, githubIpa] = await Promise.all([
             this.resolveAndroidDownload("beta"),
             this.fetchGitHubAsset(".apk"),
             this.resolveMacosDownload(),
             this.fetchGitHubAsset(".dmg"),
+            this.resolveIosDownload(),
+            this.fetchGitHubAsset(".ipa"),
         ]);
         const apkDir = resolveConfiguredDir(this.options.configDir, this.options.config.android?.apkDir, "android");
         const dmgDir = resolveConfiguredDir(this.options.configDir, this.options.config.macos?.dmgDir, "macos");
+        const ipaDir = resolveConfiguredDir(this.options.configDir, this.options.config.ios?.ipaDir, "ios");
         return {
             androidApk: this.buildSettings("apk", apkDir, this.options.config.android?.enabled === true, localApk, githubApk),
             macosDmg: this.buildSettings("dmg", dmgDir, this.options.config.macos?.enabled === true, localDmg, githubDmg),
+            iosIpa: this.buildSettings("ipa", ipaDir, this.options.config.ios?.enabled === true, localIpa, githubIpa),
         };
     }
     sha256Cache = new Map();
@@ -181,6 +212,18 @@ export class DistributionManager {
                 config.macos.currentDmgFile = typeof macos.currentDmgFile === "string" ? macos.currentDmgFile.trim() : "";
             }
         }
+        const ios = asRecord(raw.ios);
+        if (ios) {
+            config.ios = { ...(config.ios ?? {}) };
+            if (typeof ios.enabled === "boolean")
+                config.ios.enabled = ios.enabled;
+            if (Object.hasOwn(ios, "ipaDir")) {
+                config.ios.ipaDir = typeof ios.ipaDir === "string" && ios.ipaDir.trim() ? ios.ipaDir.trim() : "ios";
+            }
+            if (Object.hasOwn(ios, "currentIpaFile")) {
+                config.ios.currentIpaFile = typeof ios.currentIpaFile === "string" ? ios.currentIpaFile.trim() : "";
+            }
+        }
     }
     async resolveLocalAsset(options) {
         await mkdir(options.directory, { recursive: true });
@@ -295,8 +338,8 @@ export class DistributionManager {
             : github
                 ? { ...github, updatedAt: null, source: "github" }
                 : null;
-        const hasKey = kind === "apk" ? "hasApk" : "hasDmg";
-        const dirKey = kind === "apk" ? "apkDir" : "dmgDir";
+        const hasKey = kind === "apk" ? "hasApk" : kind === "dmg" ? "hasDmg" : "hasIpa";
+        const dirKey = kind === "apk" ? "apkDir" : kind === "dmg" ? "dmgDir" : "ipaDir";
         return {
             enabled,
             [dirKey]: directory,

package/dist/missions.d.ts

@@ -1,4 +1,4 @@
-import type { CreateMissionInput, CreateReviewCommentInput, MissionDetails, MissionDiff, MissionReviewComment } from "./mission-types.js";
+import type { AgentActivityItem, CreateMissionInput, CreateReviewCommentInput, MissionDetails, MissionDiff, MissionReviewComment } from "./mission-types.js";
 import type { SessionRegistry } from "./session-registry.js";
 import type { StructuredSessionManager } from "./structured-session-manager.js";
 import type { WandStorage } from "./storage.js";
@@ -16,6 +16,8 @@ export declare class Missions {
     get(id: string): MissionDetails | null;
     create(input: CreateMissionInput): MissionDetails;
     ingest(event: ProcessEvent): void;
+    inbox(): AgentActivityItem[];
+    markInboxRead(sessionId?: string): void;
     diff(missionId: string, attemptId: string): MissionDiff;
     addReviewComment(missionId: string, attemptId: string, input: CreateReviewCommentInput): MissionReviewComment;
     sendReview(missionId: string, attemptId: string, commentIds?: string[]): MissionReviewComment[];

package/dist/missions.js

@@ -165,8 +165,26 @@ export class Missions {
             error: state === "failed" ? snapshot.structuredState?.lastError ?? "任务执行失败" : null,
             updatedAt,
         });
+        this.storage.upsertAgentActivity({
+            sessionId: event.sessionId,
+            missionId: attempt.missionId,
+            attemptId: attempt.id,
+            state,
+            title: snapshot.title?.trim() || snapshot.summary?.trim() || firstPromptLine(this.storage.getMission(attempt.missionId)?.prompt ?? ""),
+            summary: sessionSummary(snapshot),
+            provider: snapshot.provider ?? attempt.provider,
+            cwd: snapshot.cwd,
+            updatedAt,
+            readAt: null,
+        });
         this.refreshMissionStatus(attempt.missionId);
     }
+    inbox() {
+        return this.storage.listAgentActivity();
+    }
+    markInboxRead(sessionId) {
+        this.storage.markAgentActivityRead(sessionId);
+    }
     diff(missionId, attemptId) {
         const attempt = this.requireAttempt(missionId, attemptId);
         if (!attempt.worktreePath || !attempt.baseRef)

package/dist/password-manager.d.ts

@@ -77,6 +77,10 @@ export interface PasswordGeneratorOptions {
     digits?: boolean;
     symbols?: boolean;
 }
+/** AES-256-GCM at-rest wrapper. Legacy plaintext values pass through on read. */
+export declare function encryptVaultSecret(plaintext: string, secret: string): string;
+export declare function decryptVaultSecret(value: string | undefined, secret: string | null): string | undefined;
+export declare function isEncryptedVaultSecret(value: string | undefined): boolean;
 export declare function generatePassword(options?: PasswordGeneratorOptions): string;
 export declare function generateTotpCode(secret: string, timeMs?: number, digits?: number, period?: number): string;
 export declare function decodeTotpSecret(secret: string): Buffer;

package/dist/password-manager.js

@@ -240,6 +240,43 @@ export function buildPasswordSecurityReport(items, now = Date.now()) {
         issues: issues.sort((a, b) => issueRank(b.severity) - issueRank(a.severity)),
     };
 }
+const VAULT_CIPHER_PREFIX = "enc:v1:";
+function deriveVaultKey(secret) {
+    return crypto.createHash("sha256").update(secret, "utf8").digest();
+}
+/** AES-256-GCM at-rest wrapper. Legacy plaintext values pass through on read. */
+export function encryptVaultSecret(plaintext, secret) {
+    if (!plaintext || !secret)
+        return plaintext;
+    if (plaintext.startsWith(VAULT_CIPHER_PREFIX))
+        return plaintext;
+    const iv = crypto.randomBytes(12);
+    const cipher = crypto.createCipheriv("aes-256-gcm", deriveVaultKey(secret), iv);
+    const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+    return `${VAULT_CIPHER_PREFIX}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}`;
+}
+export function decryptVaultSecret(value, secret) {
+    if (!value)
+        return undefined;
+    if (!value.startsWith(VAULT_CIPHER_PREFIX))
+        return value;
+    if (!secret)
+        return undefined;
+    try {
+        const [ivB64, tagB64, dataB64] = value.slice(VAULT_CIPHER_PREFIX.length).split(".");
+        if (!ivB64 || !tagB64 || !dataB64)
+            return undefined;
+        const decipher = crypto.createDecipheriv("aes-256-gcm", deriveVaultKey(secret), Buffer.from(ivB64, "base64url"));
+        decipher.setAuthTag(Buffer.from(tagB64, "base64url"));
+        return Buffer.concat([decipher.update(Buffer.from(dataB64, "base64url")), decipher.final()]).toString("utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+export function isEncryptedVaultSecret(value) {
+    return typeof value === "string" && value.startsWith(VAULT_CIPHER_PREFIX);
+}
 export function generatePassword(options = {}) {
     const length = clampInteger(options.length ?? 20, 8, 80);
     const lower = "abcdefghijkmnopqrstuvwxyz";

package/dist/server-file-routes.js

@@ -7,7 +7,7 @@ import process from "node:process";
 import { promisify } from "node:util";
 import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute } from "./express-async.js";
-import { isBlockedFolderPath, isPathWithinBase, normalizeFolderPath } from "./middleware/path-safety.js";
+import { isBlockedFolderPath, normalizeFolderPath } from "./middleware/path-safety.js";
 import { parseBoundedInteger } from "./request-limits.js";
 const execAsync = promisify(exec);
 const DIRECTORY_MAX_ITEMS = 200;
@@ -493,15 +493,21 @@ export function registerFileRoutes(app, deps) {
     }));
     app.get("/api/file-search", asyncRoute(async (req, res) => {
         const query = typeof req.query.q === "string" ? req.query.q.trim().slice(0, 256) : "";
-        const cwd = typeof req.query.cwd === "string" ? req.query.cwd : process.cwd();
+        const cwd = typeof req.query.cwd === "string" ? req.query.cwd : defaultCwd;
         const maxDepth = parseBoundedInteger(req.query.depth, 5, 0, 8);
         const maxResults = parseBoundedInteger(req.query.limit, 50, 1, 200);
         const ignoredDirectories = new Set([".git", "node_modules", ".next", "dist", "build", "coverage", ".wand-uploads"]);
         const maxVisitedEntries = 20_000;
-        const allowedBase = process.cwd();
-        const resolvedCwd = path.resolve(allowedBase, cwd);
-        if (!isPathWithinBase(resolvedCwd, allowedBase)) {
-            res.status(403).json({ error: "访问被拒绝：路径必须在项目目录内。" });
+        let resolvedCwd;
+        try {
+            resolvedCwd = normalizeFolderPath(cwd);
+        }
+        catch {
+            res.status(400).json({ error: "无效的搜索目录。" });
+            return;
+        }
+        if (isBlockedFolderPath(resolvedCwd)) {
+            res.status(403).json({ error: "访问被拒绝：不能搜索系统目录。" });
             return;
         }
         if (!query) {

package/dist/server-mission-routes.js

@@ -6,9 +6,11 @@ function sendMissionError(res, error) {
 }
 export function registerMissionRoutes(app, missions) {
     app.get("/api/inbox", (_req, res) => {
-        res.json({ items: [] });
+        res.json({ items: missions.inbox() });
     });
-    app.post("/api/inbox/read", (_req, res) => {
+    app.post("/api/inbox/read", (req, res) => {
+        const sessionId = typeof req.body?.sessionId === "string" ? req.body.sessionId.trim() : "";
+        missions.markInboxRead(sessionId || undefined);
         res.json({ ok: true });
     });
     app.get("/api/missions", (_req, res) => {

package/dist/server-session-routes.js

@@ -433,6 +433,16 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 res.status(409).json({ error: "会话列表已更新，请重新加载。", revision: page.revision });
                 return;
             }
+            if (offset === 0 && requestedRevision && requestedRevision === page.revision) {
+                res.json({
+                    unchanged: true,
+                    entries: [],
+                    offset: 0,
+                    total: page.total,
+                    revision: page.revision,
+                });
+                return;
+            }
             res.json(page);
         }
         catch (error) {
@@ -1067,7 +1077,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 return;
             }
             const newSnapshot = await startResumedPtySession(processes, storage, existingSession, sessionId, defaultMode, body);
-            res.status(201).json(newSnapshot);
+            res.status(201).json(sessionResponseDTO(newSnapshot));
         }
         catch (error) {
             res.status(400).json({ error: getErrorMessage(error, "无法恢复会话。") });
@@ -1316,6 +1326,50 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
             res.status(400).json({ error: getErrorMessage(error, "无法按 Qoder 会话 ID 恢复会话。") });
         }
     });
+    const resumeNamedStructuredSession = (req, res, spec) => {
+        const sessionId = String(req.params.sessionId || "").trim();
+        const body = req.body;
+        try {
+            if (!isSafeProviderSessionId(sessionId)) {
+                res.status(400).json({ error: `${spec.label} 会话 ID 格式无效。` });
+                return;
+            }
+            const cwd = body.cwd?.trim();
+            if (!cwd) {
+                res.status(400).json({ error: "无法确定工作目录 (cwd)，无法恢复。" });
+                return;
+            }
+            const snapshot = structured.createSession({
+                cwd,
+                mode: parseExecutionMode(body.mode, defaultMode),
+                provider: spec.provider,
+                runner: spec.runner,
+                worktreeEnabled: body.worktreeEnabled === true,
+                claudeSessionId: sessionId,
+                workspaceId: resolveWorkspaceIdForNewSession(storage, cwd),
+                ...parseSessionCreationOrigin(body),
+            });
+            onSessionCreated?.(cwd);
+            res.status(201).json({ resumedClaudeSessionId: sessionId, ...sessionResponseDTO(snapshot) });
+        }
+        catch (error) {
+            res.status(400).json({ error: getErrorMessage(error, `无法按 ${spec.label} 会话 ID 恢复会话。`) });
+        }
+    };
+    app.post("/api/grok-sessions/:sessionId/resume", (req, res) => {
+        resumeNamedStructuredSession(req, res, {
+            provider: "grok",
+            runner: "grok-cli-headless",
+            label: "Grok",
+        });
+    });
+    app.post("/api/pi-sessions/:sessionId/resume", (req, res) => {
+        resumeNamedStructuredSession(req, res, {
+            provider: "pi",
+            runner: "pi-cli-json",
+            label: "Pi",
+        });
+    });
     app.post("/api/sessions/:id/resize", (req, res) => {
         const body = req.body;
         try {
@@ -1333,7 +1387,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/sessions/:id/approve-permission", (req, res) => {
         try {
             if (sessions.ownerOf(req.params.id) === "structured") {
-                res.status(400).json({ error: "结构化会话不需要终端权限操作。" });
+                res.status(404).json({ error: "结构化会话没有运行时授权请求。" });
                 return;
             }
             const snapshot = sessions.get(req.params.id);
@@ -1341,7 +1395,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 res.status(400).json({ error: "Codex provider 不支持权限批准操作。" });
                 return;
             }
-            res.json(processes.approvePermission(req.params.id));
+            res.json(sessionResponseDTO(processes.approvePermission(req.params.id)));
         }
         catch (error) {
             res.status(400).json({ error: getErrorMessage(error, "无法批准该授权请求。") });
@@ -1350,7 +1404,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/sessions/:id/deny-permission", (req, res) => {
         try {
             if (sessions.ownerOf(req.params.id) === "structured") {
-                res.status(400).json({ error: "结构化会话不需要终端权限操作。" });
+                res.status(404).json({ error: "结构化会话没有运行时授权请求。" });
                 return;
             }
             const snapshot = sessions.get(req.params.id);
@@ -1358,7 +1412,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 res.status(400).json({ error: "Codex provider 不支持权限拒绝操作。" });
                 return;
             }
-            res.json(processes.denyPermission(req.params.id));
+            res.json(sessionResponseDTO(processes.denyPermission(req.params.id)));
         }
         catch (error) {
             res.status(400).json({ error: getErrorMessage(error, "无法拒绝该授权请求。") });
@@ -1367,7 +1421,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/sessions/:id/toggle-auto-approve", (req, res) => {
         try {
             if (sessions.ownerOf(req.params.id) === "structured") {
-                res.status(400).json({ error: "结构化会话不需要切换终端自动批准。" });
+                res.status(404).json({ error: "结构化会话没有运行时授权请求。" });
                 return;
             }
             const snapshot = sessions.get(req.params.id);
@@ -1375,7 +1429,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 res.status(400).json({ error: "Codex provider 不支持自动批准切换。" });
                 return;
             }
-            res.json(processes.toggleAutoApprove(req.params.id));
+            res.json(sessionResponseDTO(processes.toggleAutoApprove(req.params.id)));
         }
         catch (error) {
             res.status(400).json({ error: getErrorMessage(error, "无法切换自动批准状态。") });
@@ -1391,10 +1445,10 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 return;
             }
             if (sessions.ownerOf(req.params.id) === "structured") {
-                res.json(structured.resolveEscalation(req.params.id, requestId, resolution));
+                res.status(404).json({ error: "结构化会话没有运行时授权请求。" });
                 return;
             }
-            res.json(processes.resolveEscalation(req.params.id, requestId, resolution));
+            res.json(sessionResponseDTO(processes.resolveEscalation(req.params.id, requestId, resolution)));
         }
         catch (error) {
             res.status(400).json({ error: getErrorMessage(error, "无法处理该授权请求。") });
@@ -1403,10 +1457,10 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/sessions/:id/stop", (req, res) => {
         try {
             if (sessions.ownerOf(req.params.id) === "structured") {
-                res.json(structured.stop(req.params.id));
+                res.json(sessionResponseDTO(structured.stop(req.params.id)));
                 return;
             }
-            res.json(processes.stop(req.params.id));
+            res.json(sessionResponseDTO(processes.stop(req.params.id)));
         }
         catch (error) {
             res.status(400).json({ error: getErrorMessage(error, "无法停止会话。") });
@@ -1423,8 +1477,9 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     });
 }
 export function registerClaudeHistoryRoutes(app, processes, _structured, storage, _sessionRegistry) {
-    // Kept as an empty compatibility endpoint for older native clients. Wand no
-    // longer imports provider-native history into its session list.
+    // Intentional compatibility stub: older native clients still GET these
+    // endpoints. Wand no longer imports provider-native history into its session
+    // list, so the supported response remains an empty array.
     app.get("/api/claude-history", (_req, res) => {
         res.json([]);
     });
@@ -1595,6 +1650,11 @@ export function registerClaudeHistoryRoutes(app, processes, _structured, storage
             remove: (ids) => processes.deleteQoderHistoryFiles(ids),
         },
     ];
+    for (const provider of ["grok", "pi"]) {
+        app.get(`/api/${provider}-history`, (_req, res) => {
+            res.json([]);
+        });
+    }
     for (const config of externalHistoryProviders) {
         app.get(`/api/${config.provider}-history`, (_req, res) => {
             res.json([]);

package/dist/server-settings-routes.d.ts

@@ -6,6 +6,7 @@ import type { WandConfig } from "./types.js";
 interface SettingsDistributionPayload {
     androidApk: Record<string, unknown>;
     macosDmg: Record<string, unknown>;
+    iosIpa: Record<string, unknown>;
 }
 interface SettingsBuildInfo {
     commit: string | null;

package/dist/server-settings-routes.js

@@ -47,11 +47,13 @@ function publicSystemAi(systemAi) {
 function publicDistributionInfo(distribution) {
     const androidApk = { ...distribution.androidApk };
     const macosDmg = { ...distribution.macosDmg };
+    const iosIpa = { ...distribution.iosIpa };
     // These server filesystem paths are useful to administrators, but the About
     // panel only needs versions, sizes, and download URLs.
     delete androidApk.apkDir;
     delete macosDmg.dmgDir;
-    return { androidApk, macosDmg };
+    delete iosIpa.ipaDir;
+    return { androidApk, macosDmg, iosIpa };
 }
 export function registerSettingsRoutes(app, deps) {
     const { storage, config, runtimeConfig, configPath, configDir, requireAdmin, requireAdminOrSessionPreferences, } = deps;

package/dist/server-update-routes.d.ts

@@ -23,6 +23,8 @@ export interface PublicUpdateRoutesDependencies {
     resolveAndroidDownload(channel: "stable" | "beta"): Promise<DownloadAsset | null>;
     resolveLatestDmg(): Promise<ResolvedUpdateAsset | null>;
     resolveMacosDownload(): Promise<DownloadAsset | null>;
+    resolveLatestIpa(): Promise<ResolvedUpdateAsset | null>;
+    resolveIosDownload(): Promise<DownloadAsset | null>;
 }
 export declare function registerPublicUpdateRoutes(app: Express, deps: PublicUpdateRoutesDependencies): void;
 export declare class ServerUpdateState {
@@ -46,6 +48,7 @@ export interface AdminUpdateRoutesDependencies {
     getDistributionSettings(): Promise<{
         androidApk: Record<string, unknown>;
         macosDmg: Record<string, unknown>;
+        iosIpa: Record<string, unknown>;
     }>;
     modelCatalog: ModelCatalogService;
     getUpdateChannel(): UpdateChannel;

package/dist/server-update-routes.js

@@ -36,7 +36,7 @@ export function registerPublicUpdateRoutes(app, deps) {
         });
     }));
     app.get("/android/download", asyncRoute(async (req, res) => {
-        const channel = req.query.channel === "stable" ? "stable" : "beta";
+        const channel = req.query.channel === "beta" ? "beta" : "stable";
         const asset = await deps.resolveAndroidDownload(channel);
         if (!asset) {
             res.status(404).json({ error: "当前没有可下载的 APK 文件。" });
@@ -86,6 +86,20 @@ export function registerPublicUpdateRoutes(app, deps) {
             readErrorMessage: "读取 DMG 文件失败。",
         });
     }));
+    app.get("/ios/download", asyncRoute(async (req, res) => {
+        const asset = await deps.resolveIosDownload();
+        if (!asset) {
+            res.status(404).json({ error: "当前没有可下载的 IPA 文件。" });
+            return;
+        }
+        streamFileWithRange(req, res, {
+            filePath: asset.filePath,
+            size: asset.size,
+            contentType: "application/octet-stream",
+            disposition: `attachment; filename="${encodeURIComponent(asset.fileName)}"`,
+            readErrorMessage: "读取 IPA 文件失败。",
+        });
+    }));
 }
 export class ServerUpdateState {
     providerCliUpdateCache = null;
@@ -106,6 +120,9 @@ export function registerAdminUpdateRoutes(app, deps) {
     app.get("/api/macos-dmg", requireAdmin, asyncRoute(async (_req, res) => {
         res.json((await deps.getDistributionSettings()).macosDmg);
     }));
+    app.get("/api/ios-ipa", requireAdmin, asyncRoute(async (_req, res) => {
+        res.json((await deps.getDistributionSettings()).iosIpa);
+    }));
     app.get("/api/provider-cli-updates", requireAdmin, asyncRoute(async (req, res) => {
         try {
             const force = req.query.refresh === "1" || !state.providerCliUpdateCache;