@co0ontty/wand 4.63.0 → 4.64.0

package/dist/server-session-routes.js

@@ -8,11 +8,13 @@ import { resolveSessionCwd } from "./session-cwd.js";
 import { resolveCommitAiContext } from "./session-ai-context.js";
 import { getGitStatusAsync, QuickCommitError, runQuickCommitWithFallback, runTagHead, runPush, generateCommitMessageOnly, } from "./git-quick-commit.js";
 import { getErrorMessage } from "./error-utils.js";
+import { inferProviderFromCommand, isSessionProvider, providerCliCommand, SESSION_PROVIDERS } from "./session-provider.js";
 import { buildProviderResumeCommand, isProviderSessionId } from "./resume-policy.js";
 import { parseBoundedInteger } from "./request-limits.js";
 import { asyncRoute } from "./express-async.js";
 import { sendRouteError } from "./server-request.js";
 import { registerStructuredResumeRoutes } from "./server-resume-routes.js";
+import { addHiddenSessionIds, removeHiddenSessionIds } from "./session-registry.js";
 import { enrichStructuredMessages, WAND_PROTOCOL_VERSION } from "./structured-client-protocol.js";
 import { buildDirectoryTree, normalizeSessionDirectory, } from "./session-directory-tree.js";
 import { projectCwdForSession, renameWorkspaceDirectory, resolveWorkspaceIdForNewSession, } from "./workspace-binding.js";
@@ -101,56 +103,6 @@ function getInputDebugMeta(error) {
     }
     return { error };
 }
-function getHiddenClaudeSessionIds(storage) {
-    const raw = storage.getConfigValue("hidden_claude_session_ids");
-    if (!raw)
-        return new Set();
-    try {
-        const parsed = JSON.parse(raw);
-        return new Set(Array.isArray(parsed) ? parsed.filter((value) => typeof value === "string") : []);
-    }
-    catch {
-        return new Set();
-    }
-}
-function saveHiddenClaudeSessionIds(storage, ids) {
-    storage.setConfigValue("hidden_claude_session_ids", JSON.stringify(Array.from(ids)));
-}
-function addToHiddenClaudeSessionIds(storage, ids) {
-    if (ids.length === 0)
-        return;
-    const raw = storage.getConfigValue("hidden_claude_session_ids");
-    let hidden;
-    try {
-        const parsed = raw ? JSON.parse(raw) : [];
-        hidden = new Set(Array.isArray(parsed) ? parsed.filter((value) => typeof value === "string") : []);
-    }
-    catch {
-        hidden = new Set();
-    }
-    let changed = false;
-    for (const id of ids) {
-        if (!hidden.has(id)) {
-            hidden.add(id);
-            changed = true;
-        }
-    }
-    if (changed) {
-        storage.setConfigValue("hidden_claude_session_ids", JSON.stringify(Array.from(hidden)));
-    }
-}
-function removeFromHiddenClaudeSessionIds(storage, ids) {
-    if (ids.length === 0)
-        return;
-    const hidden = getHiddenClaudeSessionIds(storage);
-    let changed = false;
-    for (const id of ids) {
-        changed = hidden.delete(id) || changed;
-    }
-    if (changed) {
-        saveHiddenClaudeSessionIds(storage, hidden);
-    }
-}
 /**
  * A Wand-managed session and its provider-native history represent the same
  * conversation. Delete both in one operation so the native history cannot
@@ -169,11 +121,8 @@ export function deleteSessionWithProviderHistory(processes, structured, storage,
         return;
     const provider = snapshot.provider
         ?? snapshot.structuredState?.provider
-        ?? (/^codex\b/i.test(snapshot.command.trim())
-            ? "codex"
-            : /^opencode\b/i.test(snapshot.command.trim())
-                ? "opencode"
-                : "claude");
+        ?? inferProviderFromCommand(snapshot.command)
+        ?? "claude";
     if (provider === "claude") {
         processes.deleteClaudeHistoryFiles([{
                 claudeSessionId: providerSessionId,
@@ -194,7 +143,7 @@ export function deleteSessionWithProviderHistory(processes, structured, storage,
     }
     // History deletion is intentionally best-effort at the filesystem layer.
     // Keep a tombstone as a fallback for permission errors or process tail writes.
-    addToHiddenClaudeSessionIds(storage, [providerSessionId]);
+    addHiddenSessionIds(storage, [providerSessionId]);
 }
 function sessionSortTimestamp(snapshot) {
     const timestamp = Date.parse(snapshot.startedAt);
@@ -313,22 +262,10 @@ function getWorktreeMergePayload(error, fallback) {
 function resolvePtyResumeProvider(snapshot) {
     if (snapshot.provider)
         return snapshot.provider;
-    const command = snapshot.command.trim();
-    if (/^codex\b/.test(command))
-        return "codex";
-    if (/^opencode\b/.test(command))
-        return "opencode";
-    if (/^grok\b/.test(command))
-        return "grok";
-    if (/^qodercli\b/.test(command))
-        return "qoder";
-    if (/^pi\b/.test(command))
-        return "pi";
-    return "claude";
+    return inferProviderFromCommand(snapshot.command) ?? "claude";
 }
 function isPtyProviderCommand(provider, command) {
-    const executable = provider === "qoder" ? "qodercli" : provider;
-    return new RegExp(`^${executable}\\b`, "i").test(command.trim());
+    return new RegExp(`^${providerCliCommand(provider)}\\b`, "i").test(command.trim());
 }
 async function startResumedPtySession(processes, storage, existingSession, sessionId, defaultMode, body, initialInput) {
     if ((existingSession.sessionKind ?? "pty") !== "pty") {
@@ -383,8 +320,7 @@ function canAutoResumePtyForInput(snapshot, input) {
     return Boolean(snapshot
         && (snapshot.sessionKind ?? "pty") === "pty"
         && snapshot.status !== "running"
-        && (snapshot.provider === "claude" || snapshot.provider === "codex" || snapshot.provider === "opencode" || snapshot.provider === "grok" || snapshot.provider === "qoder" || snapshot.provider === "pi"
-            || /^(?:claude|codex|opencode|grok|qodercli)\b/.test(snapshot.command.trim()))
+        && (isSessionProvider(snapshot.provider) || Boolean(inferProviderFromCommand(snapshot.command)))
         && snapshot.claudeSessionId
         && input);
 }
@@ -484,11 +420,11 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
     app.post("/api/structured-sessions", asyncRoute(async (req, res) => {
         const body = req.body;
         try {
-            if (body.provider && body.provider !== "claude" && body.provider !== "codex" && body.provider !== "opencode" && body.provider !== "grok" && body.provider !== "qoder" && body.provider !== "pi") {
+            if (body.provider && !isSessionProvider(body.provider)) {
                 res.status(400).json({ error: "结构化会话当前仅支持 Claude、Codex、OpenCode、Grok、Qoder 或 Pi provider。" });
                 return;
             }
-            const provider = body.provider === "codex" || body.provider === "opencode" || body.provider === "grok" || body.provider === "qoder" || body.provider === "pi" ? body.provider : "claude";
+            const provider = isSessionProvider(body.provider) ? body.provider : "claude";
             const rawModel = typeof body.model === "string" ? body.model.trim() : "";
             const origin = parseSessionCreationOrigin(body);
             const cwd = resolveSessionCwd(body.cwd, config.defaultCwd);
@@ -1315,7 +1251,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
 export function registerClaudeHistoryRoutes(app, processes, storage) {
     // Older clients still GET these endpoints. Wand no longer imports provider-native
     // history into its session list, so the supported list response stays empty.
-    for (const provider of ["claude", "codex", "opencode", "qoder", "grok", "pi"]) {
+    for (const provider of SESSION_PROVIDERS) {
         app.get(`/api/${provider}-history`, (_req, res) => {
             res.json([]);
         });
@@ -1351,8 +1287,8 @@ export function registerClaudeHistoryRoutes(app, processes, storage) {
         const toDelete = ids.filter((id) => existing.has(id));
         const toHide = ids.filter((id) => !existing.has(id));
         const deleted = historyFiles[provider].remove(toDelete);
-        removeFromHiddenClaudeSessionIds(storage, toDelete);
-        addToHiddenClaudeSessionIds(storage, toHide);
+        removeHiddenSessionIds(storage, toDelete);
+        addHiddenSessionIds(storage, toHide);
         return deleted + toHide.length;
     };
     const registerHistoryMutations = (provider, param, label) => {
@@ -1398,7 +1334,7 @@ export function registerClaudeHistoryRoutes(app, processes, storage) {
                 .filter((session) => session.claudeSessionId && session.cwd === cwd)
                 .map((session) => ({ claudeSessionId: session.claudeSessionId, cwd: session.cwd }));
             const deleted = processes.deleteClaudeHistoryFiles(toDelete);
-            removeFromHiddenClaudeSessionIds(storage, toDelete.map((session) => session.claudeSessionId));
+            removeHiddenSessionIds(storage, toDelete.map((session) => session.claudeSessionId));
             res.json({ ok: true, deleted });
         }
         catch (error) {

package/dist/server-settings-routes.d.ts

@@ -1,4 +1,5 @@
 import type { Express, Request, RequestHandler } from "express";
+import { type BuildInfo } from "./build-info.js";
 import type { ModelCatalogService } from "./models.js";
 import { type RuntimeConfigState } from "./runtime-config.js";
 import type { WandStorage } from "./storage.js";
@@ -9,11 +10,6 @@ interface SettingsDistributionPayload {
     macosDmg: Record<string, unknown>;
     iosIpa: Record<string, unknown>;
 }
-interface SettingsBuildInfo {
-    commit: string | null;
-    builtAt: string | null;
-    channel: string | null;
-}
 export interface ServerSettingsRoutesDependencies {
     storage: WandStorage;
     config: WandConfig;
@@ -28,7 +24,7 @@ export interface ServerSettingsRoutesDependencies {
         nodeVersion: string;
         repoUrl: string;
     };
-    buildInfo: SettingsBuildInfo;
+    buildInfo: BuildInfo;
     getCachedUpdateInfo(): {
         updateAvailable: boolean;
         latest: string | null;

package/dist/server-settings-routes.js

@@ -1,5 +1,6 @@
 import { existsSync, writeFileSync } from "node:fs";
 import path from "node:path";
+import { buildInfoPayload } from "./build-info.js";
 import { buildChildEnv } from "./env-utils.js";
 import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute } from "./express-async.js";
@@ -70,10 +71,7 @@ export function registerSettingsRoutes(app, deps) {
             updateAvailable: cachedUpdate?.updateAvailable ?? false,
             latestVersion: cachedUpdate?.latest ?? null,
             updateChannel: deps.getUpdateChannel(),
-            build: {
-                ...deps.buildInfo,
-                shortCommit: deps.buildInfo.commit ? deps.buildInfo.commit.slice(0, 7) : null,
-            },
+            build: buildInfoPayload(deps.buildInfo),
             ...distribution,
         });
     }));
@@ -96,10 +94,7 @@ export function registerSettingsRoutes(app, deps) {
             updateAvailable: cachedUpdate?.updateAvailable ?? false,
             latestVersion: cachedUpdate?.latest ?? null,
             updateChannel: deps.getUpdateChannel(),
-            build: {
-                ...deps.buildInfo,
-                shortCommit: deps.buildInfo.commit ? deps.buildInfo.commit.slice(0, 7) : null,
-            },
+            build: buildInfoPayload(deps.buildInfo),
             autoUpdate: {
                 web: storage.getConfigValue("autoUpdateWeb") === "true",
                 apk: storage.getConfigValue("autoUpdateApk") === "true",

package/dist/server-task-routes.d.ts

@@ -1,9 +1,9 @@
-import type { Express, RequestHandler } from "express";
+import type { Express } from "express";
 import { type WandStorage } from "./storage.js";
 import { generateWandTaskTitle } from "./task-title.js";
 import type { SessionRegistry } from "./session-registry.js";
 import type { StructuredSessionManager } from "./structured-session-manager.js";
-import type { WandTaskAgent } from "./task-types.js";
+import type { WandTaskAgent, WandTaskAgentMode } from "./task-types.js";
 import type { WandConfig } from "./types.js";
 /** 任务面板上次选用的 CLI 工具 / 模型 / 思考深度；从未保存过时回落到 Claude 默认。 */
 export declare function readTaskBoardLastAgent(storage: WandStorage): WandTaskAgent;
@@ -13,12 +13,15 @@ export interface TaskRouteDependencies {
     sessions?: SessionRegistry;
     structured?: StructuredSessionManager;
     config?: WandConfig;
-    requireAdmin?: RequestHandler;
     /** 可注入的任务标题生成器；测试里换成同步桩，避免真的起 CLI。 */
     generateTitle?: typeof generateWandTaskTitle;
 }
-/** 任务派发配置：provider / model / thinkingEffort 三者必须同时给出且合法。 */
-export declare function parseTaskAgent(value: unknown): WandTaskAgent | null;
+/**
+ * 任务派发配置：provider / model / thinkingEffort 必须合法；mode 缺省时用 `fallbackMode`。
+ * 老客户端（Android / iOS 尚未发 mode）不传 mode，PATCH / dispatch 时传任务当前值，
+ * 避免把用户在 Web 上选的工作模式悄悄复位成标准。
+ */
+export declare function parseTaskAgent(value: unknown, fallbackMode?: WandTaskAgentMode): WandTaskAgent | null;
 /** 等待排队中的标题生成全部结束；只有测试用，避免用例轮询。 */
 export declare function whenWandTaskTitlesSettled(): Promise<void>;
-export declare function registerTaskRoutes(app: Express, deps: TaskRouteDependencies | WandStorage, sessionsLegacy?: SessionRegistry, requireAdminLegacy?: RequestHandler): void;
+export declare function registerTaskRoutes(app: Express, deps: TaskRouteDependencies): void;

package/dist/server-task-routes.js

@@ -5,15 +5,15 @@ import { bodyObject, sendRouteError, text } from "./server-request.js";
 import { parseWandTaskAgent } from "./storage.js";
 import { generateWandTaskTitle, provisionalTaskTitleFromDescription, TASK_TITLE_MAX_LENGTH } from "./task-title.js";
 import { resolveSystemAiContext } from "./session-ai-context.js";
-import { WAND_MILESTONE_NAME_MAX_LENGTH } from "./task-types.js";
+import { DEFAULT_WAND_TASK_AGENT_MODE, isWandTaskAgentMode, normalizeWandTaskAgentMode, WAND_MILESTONE_NAME_MAX_LENGTH } from "./task-types.js";
 import { archiveBoardTask, syncClosedBoardTask, syncUngroupedSessionsToBoard } from "./wand-task-sync.js";
+import { isSessionProvider } from "./session-provider.js";
 const STATUSES = new Set(["todo", "doing", "done", "archived"]);
 const PRIORITIES = new Set(["none", "low", "medium", "high", "urgent"]);
-const AGENT_PROVIDERS = new Set(["claude", "codex", "opencode", "grok", "qoder", "pi"]);
 const AGENT_EFFORTS = new Set(["off", "standard", "deep", "max"]);
 const TASK_BOARD_LAST_AGENT_KEY = "pref:taskBoardLastAgent";
 function defaultTaskBoardAgent() {
-    return { provider: "claude", model: "default", thinkingEffort: "off" };
+    return { provider: "claude", model: "default", thinkingEffort: "off", mode: DEFAULT_WAND_TASK_AGENT_MODE };
 }
 /** 任务面板上次选用的 CLI 工具 / 模型 / 思考深度；从未保存过时回落到 Claude 默认。 */
 export function readTaskBoardLastAgent(storage) {
@@ -32,6 +32,7 @@ export function writeTaskBoardLastAgent(storage, agent) {
         provider: agent.provider,
         model: agent.model,
         thinkingEffort: agent.thinkingEffort,
+        mode: agent.mode,
     });
 }
 function dateValue(value) {
@@ -67,15 +68,19 @@ function milestoneIdFrom(storage, value) {
         throw new Error("未找到该里程碑。");
     return id;
 }
-/** 任务派发配置：provider / model / thinkingEffort 三者必须同时给出且合法。 */
-export function parseTaskAgent(value) {
+/**
+ * 任务派发配置：provider / model / thinkingEffort 必须合法；mode 缺省时用 `fallbackMode`。
+ * 老客户端（Android / iOS 尚未发 mode）不传 mode，PATCH / dispatch 时传任务当前值，
+ * 避免把用户在 Web 上选的工作模式悄悄复位成标准。
+ */
+export function parseTaskAgent(value, fallbackMode = DEFAULT_WAND_TASK_AGENT_MODE) {
     if (value === null)
         return null;
     if (!value || typeof value !== "object" || Array.isArray(value))
         throw new Error("Agent 配置必须是对象。");
     const body = value;
     const provider = text(body.provider);
-    if (!AGENT_PROVIDERS.has(provider))
+    if (!isSessionProvider(provider))
         throw new Error("请选择有效的 CLI 工具。");
     const model = text(body.model) || "default";
     if (model.length > 128)
@@ -83,7 +88,12 @@ export function parseTaskAgent(value) {
     const thinkingEffort = (text(body.thinkingEffort) || "off");
     if (!AGENT_EFFORTS.has(thinkingEffort))
         throw new Error("思考深度无效。");
-    return { provider, model, thinkingEffort };
+    const rawMode = body.mode === undefined || body.mode === null || body.mode === "" ? fallbackMode : body.mode;
+    if (!isWandTaskAgentMode(rawMode))
+        throw new Error("工作模式无效。");
+    // Codex 之类只认一种模式的 provider 在这里夹到有效值，落库值与实际执行保持一致。
+    const mode = normalizeWandTaskAgentMode(provider, rawMode);
+    return { provider, model, thinkingEffort, mode };
 }
 function taskDto({ storage, sessions }, task) {
     if (!task)
@@ -115,11 +125,10 @@ function taskSessionSummary(session) {
         cwd: session.cwd,
         model: session.selectedModel || session.structuredState?.model || "",
         thinkingEffort: session.thinkingEffort || "off",
+        // 会话实际跑的执行模式；旧会话没有该字段时留空，前端回落到任务上的配置。
+        mode: session.mode || "",
     };
 }
-function sendTaskError(res, error, fallback) {
-    sendRouteError(res, error, fallback);
-}
 /**
  * 用户没写标题时，先用描述首行当占位标题，再由后台模型总结一个更好的。
  * 全程不阻塞创建请求：失败只是保留占位标题，不返回错误、也不覆盖用户后来改的标题。
@@ -166,15 +175,10 @@ function taskTitleAiOptions(config) {
     // resolveSystemAiContext 会在直连 API 可用且已启用时优先走 API，否则回落到 CLI。
     return resolveSystemAiContext(defaultSession, config);
 }
-export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy) {
-    // 兼容旧的 positional 调用；新代码统一用对象形式的依赖。
-    const resolved = deps && typeof deps === "object" && "storage" in deps
-        ? deps
-        : { storage: deps, sessions: sessionsLegacy, requireAdmin: requireAdminLegacy };
-    const { storage, sessions, structured, config } = resolved;
-    const guard = resolved.requireAdmin ?? ((_req, _res, next) => next());
-    const dto = (task) => taskDto(resolved, task);
-    app.get("/api/wand-tasks", guard, (req, res) => {
+export function registerTaskRoutes(app, deps) {
+    const { storage, sessions, structured, config } = deps;
+    const dto = (task) => taskDto(deps, task);
+    app.get("/api/wand-tasks", (req, res) => {
         try {
             syncUngroupedSessionsToBoard(storage);
         }
@@ -185,11 +189,11 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
         // 数组顺序即展示顺序：created_at 倒序，新创建的在上面。
         res.json(storage.listWandTasks(workspaceId).map((task) => dto(task)));
     });
-    app.get("/api/wand-task-agent-defaults", guard, (_req, res) => {
+    app.get("/api/wand-task-agent-defaults", (_req, res) => {
         res.json(readTaskBoardLastAgent(storage));
     });
     // ── 里程碑：跨项目全局列表，所有任务面板的「新建任务」共用 ──
-    app.get("/api/wand-milestones", guard, (_req, res) => {
+    app.get("/api/wand-milestones", (_req, res) => {
         const counts = storage.countWandTasksByMilestone();
         res.json({
             milestones: storage.listWandMilestones().map((milestone) => ({
@@ -198,7 +202,7 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             })),
         });
     });
-    app.post("/api/wand-milestones", guard, (req, res) => {
+    app.post("/api/wand-milestones", (req, res) => {
         try {
             const body = bodyObject(req.body);
             const name = milestoneNameFrom(body.name);
@@ -210,10 +214,10 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             res.status(201).json({ ...created, taskCount: 0 });
         }
         catch (error) {
-            sendTaskError(res, error, "无法创建里程碑。");
+            sendRouteError(res, error, "无法创建里程碑。");
         }
     });
-    app.patch("/api/wand-milestones/:id", guard, (req, res) => {
+    app.patch("/api/wand-milestones/:id", (req, res) => {
         try {
             const body = bodyObject(req.body);
             const current = storage.getWandMilestone(req.params.id);
@@ -236,15 +240,15 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             res.json({ ...updated, taskCount: storage.countWandTasksByMilestone()[current.id] ?? 0 });
         }
         catch (error) {
-            sendTaskError(res, error, "无法更新里程碑。");
+            sendRouteError(res, error, "无法更新里程碑。");
         }
     });
-    app.delete("/api/wand-milestones/:id", guard, (req, res) => {
+    app.delete("/api/wand-milestones/:id", (req, res) => {
         // 只解绑任务，不删任务；已经删过的 id 幂等返回 ok。
         storage.deleteWandMilestone(req.params.id);
         res.json({ ok: true });
     });
-    app.put("/api/wand-task-agent-defaults", guard, (req, res) => {
+    app.put("/api/wand-task-agent-defaults", (req, res) => {
         try {
             const agent = parseTaskAgent(req.body);
             if (!agent)
@@ -253,10 +257,10 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             res.json(agent);
         }
         catch (error) {
-            sendTaskError(res, error, "无法保存 Agent 默认选项。");
+            sendRouteError(res, error, "无法保存 Agent 默认选项。");
         }
     });
-    app.post("/api/wand-tasks", guard, (req, res) => {
+    app.post("/api/wand-tasks", (req, res) => {
         try {
             const body = bodyObject(req.body);
             const workspaceId = body.workspaceId === null ? null : text(body.workspaceId) || null;
@@ -293,16 +297,16 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
                 scheduleWandTaskTitleGeneration(storage, task.id, description, {
                     cwd: workspaceId ? storage.getWorkspace(workspaceId)?.cwd : undefined,
                     config,
-                    generateTitle: resolved.generateTitle ?? generateWandTaskTitle,
+                    generateTitle: deps.generateTitle ?? generateWandTaskTitle,
                 });
             }
             res.status(201).json(dto(task));
         }
         catch (error) {
-            sendTaskError(res, error, "无法创建任务。");
+            sendRouteError(res, error, "无法创建任务。");
         }
     });
-    app.patch("/api/wand-tasks/:id", guard, (req, res) => {
+    app.patch("/api/wand-tasks/:id", (req, res) => {
         try {
             const body = bodyObject(req.body);
             const patch = {};
@@ -339,7 +343,9 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
                 patch.workspaceId = workspaceId || null;
             }
             if (body.agent !== undefined) {
-                patch.agent = parseTaskAgent(body.agent);
+                // 老客户端不传 mode：沿用任务当前的工作模式，而不是复位成标准。
+                const current = storage.getWandTask(req.params.id);
+                patch.agent = parseTaskAgent(body.agent, current?.agent?.mode);
                 if (patch.agent)
                     writeTaskBoardLastAgent(storage, patch.agent);
             }
@@ -356,10 +362,10 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             res.json(dto(storage.getWandTask(task.id) ?? task));
         }
         catch (error) {
-            sendTaskError(res, error, "无法更新任务。");
+            sendRouteError(res, error, "无法更新任务。");
         }
     });
-    app.delete("/api/wand-tasks/:id", guard, (req, res) => {
+    app.delete("/api/wand-tasks/:id", (req, res) => {
         const archived = archiveBoardTask(storage, req.params.id);
         if (!archived) {
             res.status(404).json({ error: "未找到该任务。" });
@@ -367,7 +373,7 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
         }
         res.json({ ok: true, ...dto(archived) });
     });
-    app.post("/api/wand-tasks/:id/sessions", guard, (req, res) => {
+    app.post("/api/wand-tasks/:id/sessions", (req, res) => {
         try {
             const sessionId = text(bodyObject(req.body).sessionId);
             if (!sessionId)
@@ -378,10 +384,10 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             res.status(201).json(dto(storage.getWandTask(req.params.id)));
         }
         catch (error) {
-            sendTaskError(res, error, "无法绑定会话。");
+            sendRouteError(res, error, "无法绑定会话。");
         }
     });
-    app.delete("/api/wand-tasks/:id/sessions/:sessionId", guard, (req, res) => {
+    app.delete("/api/wand-tasks/:id/sessions/:sessionId", (req, res) => {
         storage.unbindWandTaskSession(req.params.id, req.params.sessionId);
         res.json({ ok: true });
     });
@@ -389,7 +395,7 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
      * 用选定的 CLI 工具开一个结构化会话，把这次派发的 prompt 作为首条消息，
      * 并把会话绑定回该任务。cwd 取任务所属项目目录；未指定项目时用全局默认目录。
      */
-    app.post("/api/wand-tasks/:id/dispatch", guard, asyncRoute(async (req, res) => {
+    app.post("/api/wand-tasks/:id/dispatch", asyncRoute(async (req, res) => {
         try {
             let task = storage.getWandTask(req.params.id);
             if (!task) {
@@ -401,7 +407,7 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             const body = bodyObject(req.body);
             const agent = body.agent === undefined
                 ? task.agent ?? parseWandTaskAgent(JSON.stringify(body))
-                : parseTaskAgent(body.agent);
+                : parseTaskAgent(body.agent, task.agent?.mode);
             if (!agent)
                 throw new Error("请先为该任务选择 CLI 工具。");
             writeTaskBoardLastAgent(storage, agent);
@@ -423,7 +429,7 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
             const model = agent.model === "default" ? "" : agent.model;
             const session = structured.createSession({
                 cwd,
-                mode: "agent",
+                mode: agent.mode,
                 provider: agent.provider,
                 model: model || getDefaultModelForProvider(config, agent.provider) || undefined,
                 thinkingEffort: agent.thinkingEffort,
@@ -445,15 +451,16 @@ export function registerTaskRoutes(app, deps, sessionsLegacy, requireAdminLegacy
                     provider: session.provider,
                     model: session.selectedModel,
                     thinkingEffort: session.thinkingEffort,
+                    mode: session.mode,
                     cwd: session.cwd,
                 },
             });
         }
         catch (error) {
-            sendTaskError(res, error, "无法派发 Agent。");
+            sendRouteError(res, error, "无法派发 Agent。");
         }
     }));
-    app.get("/api/wand-tasks/:id", guard, asyncRoute(async (req, res) => {
+    app.get("/api/wand-tasks/:id", asyncRoute(async (req, res) => {
         const task = dto(storage.getWandTask(req.params.id));
         if (!task) {
             res.status(404).json({ error: "未找到该任务。" });

package/dist/server-update-routes.d.ts

@@ -1,4 +1,5 @@
 import type { Express, RequestHandler } from "express";
+import { type BuildInfo } from "./build-info.js";
 import type { GitHubApkDownload } from "./distribution-manager.js";
 import type { ModelCatalogService } from "./models.js";
 import type { PackageUpdateInfo, UpdateChannel } from "./npm-update-utils.js";
@@ -63,11 +64,7 @@ export interface AdminUpdateRoutesDependencies {
     modelCatalog: ModelCatalogService;
     getUpdateChannel(): UpdateChannel;
     checkLatestPackageVersion(channel: UpdateChannel, forceRefresh?: boolean): Promise<PackageUpdateInfo>;
-    buildInfo: {
-        commit: string | null;
-        builtAt: string | null;
-        channel: string | null;
-    };
+    buildInfo: BuildInfo;
     serverInstanceId: string;
     emitSystemNotification(data: Record<string, unknown>): void;
 }

package/dist/server-update-routes.js

@@ -1,8 +1,9 @@
 import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
+import { buildInfoPayload } from "./build-info.js";
 import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute } from "./express-async.js";
-import { sendRouteError, stringQuery } from "./server-request.js";
+import { sendRouteError, text } from "./server-request.js";
 import { checkProviderCliUpdates, updateProviderClis, verifyProviderCliUpdateResults, } from "./provider-cli-updater.js";
 import { absoluteUrl, buildIosInstallPage, buildIosOtaManifest, buildItmsServicesUrl, collectIosOtaBlockers, formatIosAssetSize, inspectIpa, normalizePublicOrigin, publicOriginFromRequest, } from "./ios-ota.js";
 import { streamFileWithRange } from "./server-file-routes.js";
@@ -54,7 +55,7 @@ async function proxyGitHubApk(_req, res, asset, fetchImpl = fetch) {
  * 用 400 + 固定的英文文案（老客户端按字符串匹配）。
  */
 function requireCurrentVersion(req, res) {
-    const currentVersion = stringQuery(req.query.currentVersion);
+    const currentVersion = text(req.query.currentVersion);
     if (!currentVersion) {
         res.status(400).json({ error: "Missing currentVersion query parameter." });
         return null;
@@ -385,13 +386,7 @@ export function registerAdminUpdateRoutes(app, deps) {
     app.get("/api/check-update", requireAdmin, asyncRoute(async (_req, res) => {
         try {
             const info = await deps.checkLatestPackageVersion(deps.getUpdateChannel(), true);
-            res.json({
-                ...info,
-                build: {
-                    ...deps.buildInfo,
-                    shortCommit: deps.buildInfo.commit ? deps.buildInfo.commit.slice(0, 7) : null,
-                },
-            });
+            res.json({ ...info, build: buildInfoPayload(deps.buildInfo) });
         }
         catch (error) {
             sendRouteError(res, error, "检查更新失败。", 500);
@@ -450,4 +445,42 @@ export function registerAdminUpdateRoutes(app, deps) {
             state.updateInFlight = false;
         }
     }));
+    // ── 自动更新开关（Web / APK / DMG / provider CLI） ──
+    const readAutoUpdatePrefs = () => ({
+        web: storage.getConfigValue("autoUpdateWeb") === "true",
+        apk: storage.getConfigValue("autoUpdateApk") === "true",
+        dmg: storage.getConfigValue("autoUpdateDmg") === "true",
+        cli: storage.getConfigValue("autoUpdateProviderClis") === "true",
+    });
+    app.get("/api/auto-update", requireAdmin, (_req, res) => {
+        res.json(readAutoUpdatePrefs());
+    });
+    app.post("/api/auto-update", requireAdmin, (req, res) => {
+        const body = (req.body ?? {});
+        const writes = [];
+        if (typeof body.web === "boolean")
+            writes.push(["autoUpdateWeb", String(body.web)]);
+        if (typeof body.apk === "boolean")
+            writes.push(["autoUpdateApk", String(body.apk)]);
+        if (typeof body.dmg === "boolean")
+            writes.push(["autoUpdateDmg", String(body.dmg)]);
+        if (typeof body.cli === "boolean")
+            writes.push(["autoUpdateProviderClis", String(body.cli)]);
+        for (const [key, value] of writes)
+            storage.setConfigValue(key, value);
+        res.json(readAutoUpdatePrefs());
+    });
+    // ── 更新通道（stable / beta） ──
+    app.get("/api/update-channel", requireAdmin, (_req, res) => {
+        res.json({
+            channel: deps.getUpdateChannel(),
+            build: buildInfoPayload(deps.buildInfo),
+        });
+    });
+    app.post("/api/update-channel", requireAdmin, (req, res) => {
+        const body = (req.body ?? {});
+        const channel = body.channel === "beta" ? "beta" : "stable";
+        storage.setConfigValue("updateChannel", channel);
+        res.json({ channel });
+    });
 }