@co0ontty/wand 4.71.0 → 4.71.2-beta.g1a04a06

package/browser-extension/icons/wand.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 108 108"><rect width="108" height="108" rx="24" fill="#E3E8EE"/><g transform="translate(24 24)"><path fill="#6B7B8D" d="M6,0h6v6h-6z M48,0h6v6h-6z M0,6h6v6h-6z M12,6h6v6h-6z M42,6h6v6h-6z M54,6h6v6h-6z M0,12h6v6h-6z M54,12h6v6h-6z M6,36h6v6h-6z M48,36h6v6h-6z M18,48h6v6h-6z M36,48h6v6h-6z"/><path fill="#9EAAB8" d="M6,6h6v6h-6z M48,6h6v6h-6z M6,12h48v6h-48z M0,18h12v6h-12z M24,18h12v6h-12z M48,18h12v6h-12z M0,24h12v6h-12z M24,24h12v6h-12z M48,24h12v6h-12z M0,30h24v6h-24z M36,30h24v6h-24z M0,36h6v6h-6z M12,36h6v6h-6z M24,36h12v6h-12z M42,36h6v6h-6z M54,36h6v6h-6z M6,42h48v6h-48z M12,48h6v6h-6z M24,48h12v6h-12z M42,48h6v6h-6z M18,54h6v6h-6z M36,54h6v6h-6z"/><path fill="#FFFFFF" d="M12,18h6v6h-6z M36,18h6v6h-6z M12,24h12v6h-12z M36,24h12v6h-12z"/><path fill="#7EC88B" d="M18,18h6v6h-6z M42,18h6v6h-6z"/><path fill="#F28B9A" d="M24,30h12v6h-12z"/><path fill="#C5CED8" d="M18,36h6v6h-6z M36,36h6v6h-6z"/></g></svg>

package/browser-extension/manifest.json

@@ -2,7 +2,13 @@
   "manifest_version": 3,
   "name": "Wand Passwords",
   "description": "Wand browser password manager with autofill, save prompts, cards, identities, TOTP, and security checks.",
-  "version": "0.1.0",
+  "version": "0.1.1",
+  "icons": {
+    "16": "icons/wand-16.png",
+    "32": "icons/wand-32.png",
+    "48": "icons/wand-48.png",
+    "128": "icons/wand-128.png"
+  },
   "permissions": [
     "activeTab",
     "clipboardWrite",
@@ -25,7 +31,11 @@
   },
   "action": {
     "default_title": "Wand Passwords",
-    "default_popup": "src/popup.html"
+    "default_popup": "src/popup.html",
+    "default_icon": {
+      "16": "icons/wand-16.png",
+      "32": "icons/wand-32.png"
+    }
   },
   "options_page": "src/options.html",
   "content_scripts": [

package/browser-extension/src/options.css

@@ -30,6 +30,14 @@ body {
   box-shadow: 0 16px 40px rgba(18, 35, 64, .08);
 }
 
+.brand-heading {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+}
+
+.brand-logo { flex: 0 0 auto; }
+
 h1 {
   margin: 0;
   font-size: 22px;

package/browser-extension/src/options.html

@@ -4,14 +4,18 @@
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width,initial-scale=1" />
   <title>Wand Passwords Options</title>
+  <link rel="icon" type="image/svg+xml" href="../icons/wand.svg" />
   <link rel="stylesheet" href="options.css" />
 </head>
 <body>
   <main class="page">
     <section class="panel">
-      <header>
-        <h1>Wand Passwords</h1>
-        <p>Connect this browser extension to your Wand server.</p>
+      <header class="brand-heading">
+        <img src="../icons/wand.svg" class="brand-logo" width="44" height="44" alt="" />
+        <div>
+          <h1>Wand Passwords</h1>
+          <p>Connect this browser extension to your Wand server.</p>
+        </div>
       </header>
       <label class="field">
         <span>Server URL</span>

package/browser-extension/src/popup.css

@@ -29,6 +29,15 @@ body {
   margin-bottom: 12px;
 }
 
+.brand-heading {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  min-width: 0;
+}
+
+.brand-logo { flex: 0 0 auto; }
+
 .top-actions {
   display: flex;
   gap: 6px;

package/browser-extension/src/popup.html

@@ -4,14 +4,18 @@
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width,initial-scale=1" />
   <title>Wand Passwords</title>
+  <link rel="icon" type="image/svg+xml" href="../icons/wand.svg" />
   <link rel="stylesheet" href="popup.css" />
 </head>
 <body>
   <main class="shell">
     <header class="topbar">
-      <div>
-        <h1>Wand Passwords</h1>
-        <p id="statusText">Locked</p>
+      <div class="brand-heading">
+        <img src="../icons/wand.svg" class="brand-logo" width="32" height="32" alt="" />
+        <div>
+          <h1>Wand Passwords</h1>
+          <p id="statusText">Locked</p>
+        </div>
       </div>
       <div class="top-actions">
         <button id="siteToggleButton" class="icon-button" type="button" title="Toggle this site">Site</button>

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commit": "fad4d4b5db4c4be548f414c6de249f84700daa33",
-  "builtAt": "2026-09-19T07:12:02.224Z",
-  "version": "4.71.0",
-  "channel": "stable"
+  "commit": "1a04a06e5944858ecf2a357251d46aafdc943e32",
+  "builtAt": "2026-09-20T15:56:10.251Z",
+  "version": "4.71.2-beta.g1a04a06",
+  "channel": "beta"
 }

package/dist/server-workspace-routes.js

@@ -387,14 +387,14 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         if (cascade) {
             deleteSessions(storage, sessions, [
                 ...storage.listSessionsByWorkspace(existing.id).map((session) => session.id),
-                ...tasks.flatMap((task) => storage.listSessionsByWorkspaceTask(task.id).map((session) => session.id)),
+                ...tasks.flatMap((task) => storage.listSessionsByWorkspaceTaskSlim(task.id).map((session) => session.id)),
             ]);
         }
         else {
             // 非级联删除可以保留项目根目录里的会话，但隔离任务的 cwd 会随
             // worktree 一起消失，因此必须删除这些会话，不能留下僵尸记录。
             deleteSessions(storage, sessions, tasks.flatMap((task) => task.worktree
-                ? storage.listSessionsByWorkspaceTask(task.id).map((session) => session.id)
+                ? storage.listSessionsByWorkspaceTaskSlim(task.id).map((session) => session.id)
                 : []));
         }
         for (const task of tasks) {
@@ -467,6 +467,9 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         const taskLimit = parseBoundedCount(req.query.limit);
         const sessionLimit = parseBoundedCount(req.query.maxSessions);
         backfillSessionWorkspaces(storage);
+        // 目录组只需要会话元数据：用 slim 读，否则每次轮询都要把每个会话的
+        // messages 大字段 JSON 解析一遍（单会话可达十几 MB，整表 ~30MB）。
+        const allSessions = storage.loadSessionsSlim();
         const workspaces = storage.listWorkspaces();
         const summarize = (session, names = {}) => workspaceSessionSummary(session, names, sessions);
         // 目录自定义名（工作区名称）：没有项目实体的合成目录也按这个名字显示。
@@ -521,7 +524,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         const taskSessions = (taskId) => {
             let snapshots = sessionsByTask.get(taskId);
             if (!snapshots) {
-                snapshots = storage.listSessionsByWorkspaceTask(taskId);
+                snapshots = storage.listSessionsByWorkspaceTaskSlim(taskId);
                 sessionsByTask.set(taskId, snapshots);
             }
             return snapshots;
@@ -566,7 +569,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
                     taskBoundSessionIds.add(session.id);
             }
         }
-        for (const session of storage.loadSessions()) {
+        for (const session of allSessions) {
             if (taskBoundSessionIds.has(session.id))
                 continue;
             const direct = session.workspaceId ? groups.get(session.workspaceId) : undefined;
@@ -748,7 +751,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         res.json({
             ...task,
             cwd: taskRuntimeCwd(task, workspace),
-            sessions: storage.listSessionsByWorkspaceTask(task.id).map((session) => ({
+            sessions: storage.listSessionsByWorkspaceTaskSlim(task.id).map((session) => ({
                 ...workspaceSessionSummary(session, {
                     taskName: task.name,
                     workspaceName: workspace?.name,
@@ -826,7 +829,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             || req.query.cascade === "true"
             || existing.worktree !== null;
         if (cascade) {
-            deleteSessions(storage, sessions, storage.listSessionsByWorkspaceTask(existing.id).map((session) => session.id));
+            deleteSessions(storage, sessions, storage.listSessionsByWorkspaceTaskSlim(existing.id).map((session) => session.id));
         }
         // 尽力清理 worktree 与分支；失败不阻塞删除任务行。
         if (cascade)

package/dist/storage.d.ts

@@ -168,6 +168,13 @@ export declare class WandStorage {
     bindGithubIssueSession(owner: string, repo: string, issueNumber: number, sessionId: string): void;
     unbindGithubIssueSession(owner: string, repo: string, issueNumber: number, sessionId: string): void;
     listSessionsByWorkspaceTask(taskId: string): SessionSnapshot[];
+    /**
+     * 同 `listSessionsByWorkspaceTask`，但不读 `output`/`messages` 大字段。
+     *
+     * 侧栏的目录组、任务详情、自动命名只需要元数据；完整行会把整个会话消息
+     * 历史 JSON 解析一遍（单会话可达十几 MB），每轮轮询都会卡住事件循环。
+     */
+    listSessionsByWorkspaceTaskSlim(taskId: string): SessionSnapshot[];
     setSessionWorkspaceTaskId(sessionId: string, taskId: string | null): void;
     /** Get password from database */
     getPassword(): string | null;
@@ -234,6 +241,8 @@ export declare class WandStorage {
      */
     checkpointSessionMessages(id: string, messages: ConversationTurn[], structuredState?: StructuredSessionState | null, output?: string, ptyOutputSeq?: number): void;
     getSession(id: string): SessionSnapshot | null;
+    /** 同 `getSession`，但不读 `output`/`messages` 大字段（只取元数据的路径用）。 */
+    getSessionSlim(id: string): SessionSnapshot | null;
     getLatestSessionByClaudeSessionId(claudeSessionId: string): SessionSnapshot | null;
     loadSessions(): SessionSnapshot[];
     /** List durable metadata without reading or parsing output/messages payloads. */

package/dist/storage.js

@@ -1372,6 +1372,21 @@ export class WandStorage {
             .all(taskId);
         return rows.map((row) => this.mapSessionRow(row));
     }
+    /**
+     * 同 `listSessionsByWorkspaceTask`，但不读 `output`/`messages` 大字段。
+     *
+     * 侧栏的目录组、任务详情、自动命名只需要元数据；完整行会把整个会话消息
+     * 历史 JSON 解析一遍（单会话可达十几 MB），每轮轮询都会卡住事件循环。
+     */
+    listSessionsByWorkspaceTaskSlim(taskId) {
+        const rows = this.db
+            .prepare(`SELECT ${sessionSelectFields(true)}
+         FROM command_sessions
+         WHERE workspace_task_id = ?
+         ORDER BY started_at DESC`)
+            .all(taskId);
+        return rows.map((row) => this.mapSessionRow(row));
+    }
     setSessionWorkspaceTaskId(sessionId, taskId) {
         this.db.prepare("UPDATE command_sessions SET workspace_task_id = ? WHERE id = ?").run(taskId, sessionId);
     }
@@ -1769,6 +1784,15 @@ export class WandStorage {
             .get(id);
         return row ? this.mapSessionRow(row) : null;
     }
+    /** 同 `getSession`，但不读 `output`/`messages` 大字段（只取元数据的路径用）。 */
+    getSessionSlim(id) {
+        const row = this.db
+            .prepare(`SELECT ${sessionSelectFields(true)}
+         FROM command_sessions
+         WHERE id = ?`)
+            .get(id);
+        return row ? this.mapSessionRow(row) : null;
+    }
     getLatestSessionByClaudeSessionId(claudeSessionId) {
         const row = this.db
             .prepare(`${sessionRowQuery("SELECT")}
@@ -1949,6 +1973,13 @@ function ensureCommandSessionSchema(db) {
             db.exec(sql);
         }
     }
+    if (columns.length > 0) {
+        // 侧栏 / 任务面板按 workspace_task_id 反复拉会话：没有索引时每次都是
+        // 46MB 表全扫（单次 ~500ms），而 command_sessions 里有 10MB+ 的 output/
+        // messages 溢出行。索引只加不删，老库首次启动时建一次。
+        db.exec("CREATE INDEX IF NOT EXISTS idx_command_sessions_workspace_task ON command_sessions(workspace_task_id)");
+        db.exec("CREATE INDEX IF NOT EXISTS idx_command_sessions_workspace ON command_sessions(workspace_id)");
+    }
 }
 const AUTH_SCOPES = new Set([
     "admin",

package/dist/wand-task-sync.js

@@ -44,12 +44,27 @@ function taskNamingSessions(storage, card) {
         if (session && !sessions.has(session.id))
             sessions.set(session.id, session);
     };
+    const needsMessageFallback = [];
+    const addSlim = (session) => {
+        if (!session)
+            return;
+        add(session);
+        // boardTitleFromSession 只在 title/description 都缺时才翻 messages 找首条用户输入。
+        if (!session.title?.trim() && !session.description?.trim())
+            needsMessageFallback.push(session.id);
+    };
     if (card.workspaceTaskId) {
-        for (const session of storage.listSessionsByWorkspaceTask(card.workspaceTaskId))
-            add(session);
+        for (const session of storage.listSessionsByWorkspaceTaskSlim(card.workspaceTaskId))
+            addSlim(session);
     }
     for (const sessionId of storage.listWandTaskSessionIds(card.id))
-        add(storage.getSession(sessionId));
+        addSlim(storage.getSessionSlim(sessionId));
+    // 只有真的需要 messages 的那几个会话才去解析大字段。
+    for (const sessionId of needsMessageFallback) {
+        const full = storage.getSession(sessionId);
+        if (full && (full.messages?.length ?? 0) > 0)
+            sessions.set(sessionId, full);
+    }
     return [...sessions.values()].sort((left, right) => (right.startedAt ?? "").localeCompare(left.startedAt ?? ""));
 }
 /**
@@ -184,7 +199,8 @@ export function syncSidebarTasksFromBoard(storage) {
                 continue;
             const task = ensureWorkspaceTaskForBoardTask(storage, card);
             for (const sessionId of storage.listWandTaskSessionIds(card.id)) {
-                const session = storage.getSession(sessionId);
+                // 只需要归属两列：不要用 getSession()，那会解析十几 MB 的 messages。
+                const session = storage.getSessionWorkspace(sessionId);
                 if (!session)
                     continue;
                 if (session.workspaceTaskId && session.workspaceTaskId !== task.id) {
@@ -202,7 +218,7 @@ export function syncSidebarTasksFromBoard(storage) {
 function syncTaskSessionsToBoard(storage, task, workspace) {
     storage.transaction(() => {
         let card = ensureBoardTaskForWorkspaceTask(storage, task, workspace);
-        const sessions = storage.listSessionsByWorkspaceTask(task.id);
+        const sessions = storage.listSessionsByWorkspaceTaskSlim(task.id);
         const agent = sessions.map(agentFromSession).find((value) => value !== null);
         const bound = new Set(storage.listWandTaskSessionIds(card.id));
         const started = card.status === "todo" && sessions.some((session) => !bound.has(session.id));

package/dist/web-ui/brand-identity.d.ts

@@ -0,0 +1,3 @@
+/** Wand's Android pixel cat, shared by favicon, legacy login and React chrome. */
+export declare function renderWandBrandMarkup(className?: string): string;
+export declare const WAND_FAVICON_URL: string;

package/dist/web-ui/brand-identity.js

@@ -0,0 +1,13 @@
+import { WAND_BRAND } from "./brand-logo-data.js";
+/** Wand's Android pixel cat, shared by favicon, legacy login and React chrome. */
+export function renderWandBrandMarkup(className = "wand-brand-mark") {
+    const safeClass = className.replace(/&/g, "&").replace(/"/g, """)
+        .replace(/</g, "&lt;").replace(/>/g, "&gt;");
+    const { viewport, inset, background, paths } = WAND_BRAND;
+    return `<svg class="${safeClass}" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 ${viewport} ${viewport}" aria-hidden="true" focusable="false" data-wand-brand="pixel-cat">` +
+        `<rect width="${viewport}" height="${viewport}" rx="24" fill="${background}"/>` +
+        `<g transform="translate(${inset} ${inset})">` +
+        paths.map(({ fill, d }) => `<path fill="${fill}" d="${d}"/>`).join("") +
+        "</g></svg>";
+}
+export const WAND_FAVICON_URL = "data:image/svg+xml," + encodeURIComponent(renderWandBrandMarkup());

package/dist/web-ui/brand-logo-data.d.ts

@@ -0,0 +1,24 @@
+export declare const WAND_BRAND: {
+    readonly viewport: 108;
+    readonly inset: 24;
+    readonly background: "#E3E8EE";
+    readonly paths: readonly [{
+        readonly fill: "#6B7B8D";
+        readonly d: "M6,0h6v6h-6z M48,0h6v6h-6z M0,6h6v6h-6z M12,6h6v6h-6z M42,6h6v6h-6z M54,6h6v6h-6z M0,12h6v6h-6z M54,12h6v6h-6z M6,36h6v6h-6z M48,36h6v6h-6z M18,48h6v6h-6z M36,48h6v6h-6z";
+    }, {
+        readonly fill: "#9EAAB8";
+        readonly d: "M6,6h6v6h-6z M48,6h6v6h-6z M6,12h48v6h-48z M0,18h12v6h-12z M24,18h12v6h-12z M48,18h12v6h-12z M0,24h12v6h-12z M24,24h12v6h-12z M48,24h12v6h-12z M0,30h24v6h-24z M36,30h24v6h-24z M0,36h6v6h-6z M12,36h6v6h-6z M24,36h12v6h-12z M42,36h6v6h-6z M54,36h6v6h-6z M6,42h48v6h-48z M12,48h6v6h-6z M24,48h12v6h-12z M42,48h6v6h-6z M18,54h6v6h-6z M36,54h6v6h-6z";
+    }, {
+        readonly fill: "#FFFFFF";
+        readonly d: "M12,18h6v6h-6z M36,18h6v6h-6z M12,24h12v6h-12z M36,24h12v6h-12z";
+    }, {
+        readonly fill: "#7EC88B";
+        readonly d: "M18,18h6v6h-6z M42,18h6v6h-6z";
+    }, {
+        readonly fill: "#F28B9A";
+        readonly d: "M24,30h12v6h-12z";
+    }, {
+        readonly fill: "#C5CED8";
+        readonly d: "M18,36h6v6h-6z M36,36h6v6h-6z";
+    }];
+};

package/dist/web-ui/brand-logo-data.js

@@ -0,0 +1,32 @@
+// Generated from Android launcher vectors by npm run sync:brand-assets. Do not edit.
+export const WAND_BRAND = {
+    "viewport": 108,
+    "inset": 24,
+    "background": "#E3E8EE",
+    "paths": [
+        {
+            "fill": "#6B7B8D",
+            "d": "M6,0h6v6h-6z M48,0h6v6h-6z M0,6h6v6h-6z M12,6h6v6h-6z M42,6h6v6h-6z M54,6h6v6h-6z M0,12h6v6h-6z M54,12h6v6h-6z M6,36h6v6h-6z M48,36h6v6h-6z M18,48h6v6h-6z M36,48h6v6h-6z"
+        },
+        {
+            "fill": "#9EAAB8",
+            "d": "M6,6h6v6h-6z M48,6h6v6h-6z M6,12h48v6h-48z M0,18h12v6h-12z M24,18h12v6h-12z M48,18h12v6h-12z M0,24h12v6h-12z M24,24h12v6h-12z M48,24h12v6h-12z M0,30h24v6h-24z M36,30h24v6h-24z M0,36h6v6h-6z M12,36h6v6h-6z M24,36h12v6h-12z M42,36h6v6h-6z M54,36h6v6h-6z M6,42h48v6h-48z M12,48h6v6h-6z M24,48h12v6h-12z M42,48h6v6h-6z M18,54h6v6h-6z M36,54h6v6h-6z"
+        },
+        {
+            "fill": "#FFFFFF",
+            "d": "M12,18h6v6h-6z M36,18h6v6h-6z M12,24h12v6h-12z M36,24h12v6h-12z"
+        },
+        {
+            "fill": "#7EC88B",
+            "d": "M18,18h6v6h-6z M42,18h6v6h-6z"
+        },
+        {
+            "fill": "#F28B9A",
+            "d": "M24,30h12v6h-12z"
+        },
+        {
+            "fill": "#C5CED8",
+            "d": "M18,36h6v6h-6z M36,36h6v6h-6z"
+        }
+    ]
+};