@co0ontty/wand 4.77.0 → 4.78.0

package/dist/web-ui/index.js

@@ -1,18 +1,14 @@
-// Main entry point for web-ui module
-// Combines CSS and JavaScript into a single HTML document
+// Main entry point for the web UI shell. Only versioned external assets carry JS/CSS.
 import { EMBEDDED_WEB_ASSETS } from "./embedded-assets.js";
-import { getCSSStyles } from "./styles.js";
-import { getScriptContent } from "./scripts.js";
+import { getStylesAsset } from "./styles.js";
+import { getScriptAsset } from "./scripts.js";
 import { WAND_FAVICON_URL } from "./brand-identity.js";
-// Use String.fromCharCode to avoid template literal interpretation of </script>
-const scriptClose = String.fromCharCode(60, 47) + "script>";
-const scriptOpen = "<" + "script";
 function vendorAssetUrl(relPath) {
     return `${relPath}?v=${EMBEDDED_WEB_ASSETS.vendor[relPath].hash}`;
 }
 export function renderApp(configPath) {
-    const cssStyles = getCSSStyles();
-    const scriptContent = getScriptContent(configPath);
+    const stylesHref = `/assets/app.css?v=${getStylesAsset().hash}`;
+    const scriptSrc = `/assets/app.js?v=${getScriptAsset(configPath).hash}`;
     const xtermSrc = vendorAssetUrl("/vendor/xterm/xterm.bundle.js");
     const qrcodeSrc = vendorAssetUrl("/vendor/qrcode/qrcode.bundle.js");
     const xtermCssHref = vendorAssetUrl("/vendor/xterm/xterm.css");
@@ -29,18 +25,14 @@ export function renderApp(configPath) {
   <meta name="format-detection" content="telephone=no" />
   <meta name="msapplication-tap-highlight" content="no" />
   <link rel="stylesheet" href="${xtermCssHref}" />
-  <style>
-${cssStyles}
-  </style>
+  <link rel="stylesheet" href="${stylesHref}" />
 </head>
 <body>
   <div id="app"></div>
   <div id="overlay-root" data-wand-ui-root></div>
-${scriptOpen} src="${xtermSrc}">${scriptClose}
-${scriptOpen} src="${qrcodeSrc}">${scriptClose}
-${scriptOpen}>
-${scriptContent}
-${scriptClose}
+<script src="${xtermSrc}"></script>
+<script src="${qrcodeSrc}"></script>
+<script src="${scriptSrc}"></script>
 </body>
 </html>`;
 }

package/dist/web-ui/scripts.d.ts

@@ -1,9 +1,11 @@
+import { type VersionedWebAsset } from "./asset-version.js";
+export declare function getScriptAsset(configPath: string, requestedHash?: string): VersionedWebAsset;
 export declare function getScriptContent(configPath: string): string;
 /**
  * 按需加载的 AI 团队脚本（content/ai-teams.js）。与 scripts.js 一样优先读磁盘上的新产物，
  * 自更新期间目录消失时退回内嵌副本；hash 进页面 meta 里的地址，长缓存按它失效。
  */
-export declare function getAiTeamsChunk(): {
+export declare function getAiTeamsChunk(requestedHash?: string): {
     content: string;
     hash: string;
 };

package/dist/web-ui/scripts.js

@@ -3,38 +3,62 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { EMBEDDED_WEB_ASSETS } from "./embedded-assets.js";
-function escapeHtml(value) {
-    return String(value)
-        .replace(/&/g, "&")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;")
-        .replace(/"/g, "&quot;")
-        .replace(/'/g, "&#39;");
-}
+import { versionWebAsset } from "./asset-version.js";
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 let _scriptCache = EMBEDDED_WEB_ASSETS.scriptsJs;
-let _scriptCacheMtimeMs = 0;
-export function getScriptContent(configPath) {
+let _scriptCacheKey = "";
+let _scriptAsset = null;
+let _embeddedScriptAsset = null;
+function readScriptCache() {
     const scriptPath = path.join(__dirname, "content", "scripts.js");
     try {
         const stat = fs.statSync(scriptPath);
-        if (_scriptCache === null || stat.mtimeMs !== _scriptCacheMtimeMs) {
+        const key = `${stat.mtimeMs}:${stat.size}`;
+        if (key !== _scriptCacheKey) {
             _scriptCache = fs.readFileSync(scriptPath, "utf-8");
-            _scriptCacheMtimeMs = stat.mtimeMs;
+            _scriptCacheKey = key;
         }
     }
     catch {
-        // During self-update npm can replace the global package directory while the
-        // old process is still serving requests. The embedded build asset keeps the
-        // app shell renderable even when dist/web-ui/content has disappeared.
+        // An in-flight npm update can remove content/ before the old process exits.
+        // Retain the last disk read, or fall back to the embedded copy.
+    }
+}
+function injectRuntimeValues(source, configPath, chunkHash) {
+    return source
+        // This is a JS string literal, not HTML text. JSON escaping also handles
+        // quotes, backslashes and newlines in nonstandard configuration paths.
+        .replace('"${wandConfigPath}"', JSON.stringify(configPath))
+        .replace("${aiTeamsChunkSrc}", `/assets/ai-teams.js?v=${chunkHash}`);
+}
+export function getScriptAsset(configPath, requestedHash) {
+    readScriptCache();
+    const chunkHash = getAiTeamsChunk().hash;
+    if (!_scriptAsset || _scriptAsset.source !== _scriptCache
+        || _scriptAsset.configPath !== configPath || _scriptAsset.chunkHash !== chunkHash) {
+        _scriptAsset = {
+            ...versionWebAsset(injectRuntimeValues(_scriptCache, configPath, chunkHash)),
+            source: _scriptCache, configPath, chunkHash,
+        };
     }
-    // Inject the config path and the hashed on-demand AI teams script URL
-    return _scriptCache
-        .replace("${escapeHtml(configPath)}", escapeHtml(configPath))
-        .replace("${aiTeamsChunkSrc}", `/assets/ai-teams.js?v=${getAiTeamsChunk().hash}`);
+    if (requestedHash && requestedHash !== _scriptAsset.hash) {
+        if (!_embeddedScriptAsset || _embeddedScriptAsset.configPath !== configPath) {
+            _embeddedScriptAsset = {
+                ...versionWebAsset(injectRuntimeValues(EMBEDDED_WEB_ASSETS.scriptsJs, configPath, embeddedAiTeamsChunk.hash)),
+                configPath,
+            };
+        }
+        if (requestedHash === _embeddedScriptAsset.hash)
+            return _embeddedScriptAsset;
+    }
+    return _scriptAsset;
+}
+export function getScriptContent(configPath) {
+    return getScriptAsset(configPath).content;
 }
-let _aiTeamsChunk = withHash(EMBEDDED_WEB_ASSETS.aiTeamsJs);
-let _aiTeamsChunkMtimeMs = 0;
+const embeddedAiTeamsChunk = withHash(EMBEDDED_WEB_ASSETS.aiTeamsJs);
+let _aiTeamsChunk = embeddedAiTeamsChunk;
+let _aiTeamsChunkKey = "";
 function withHash(content) {
     return { content, hash: createHash("md5").update(content).digest("hex").slice(0, 8) };
 }
@@ -42,17 +66,20 @@ function withHash(content) {
  * 按需加载的 AI 团队脚本（content/ai-teams.js）。与 scripts.js 一样优先读磁盘上的新产物，
  * 自更新期间目录消失时退回内嵌副本；hash 进页面 meta 里的地址，长缓存按它失效。
  */
-export function getAiTeamsChunk() {
+export function getAiTeamsChunk(requestedHash) {
     const chunkPath = path.join(__dirname, "content", "ai-teams.js");
     try {
         const stat = fs.statSync(chunkPath);
-        if (stat.mtimeMs !== _aiTeamsChunkMtimeMs) {
+        const key = `${stat.mtimeMs}:${stat.size}`;
+        if (key !== _aiTeamsChunkKey) {
             _aiTeamsChunk = withHash(fs.readFileSync(chunkPath, "utf-8"));
-            _aiTeamsChunkMtimeMs = stat.mtimeMs;
+            _aiTeamsChunkKey = key;
         }
     }
     catch {
-        // 同 getScriptContent：用内嵌副本兜底。
+        // Same fallback as the main script during self-update.
     }
+    if (requestedHash === embeddedAiTeamsChunk.hash)
+        return embeddedAiTeamsChunk;
     return _aiTeamsChunk;
 }

package/dist/web-ui/styles.d.ts

@@ -1 +1,3 @@
+import { type VersionedWebAsset } from "./asset-version.js";
 export declare function getCSSStyles(): string;
+export declare function getStylesAsset(requestedHash?: string): VersionedWebAsset;

package/dist/web-ui/styles.js

@@ -2,6 +2,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { EMBEDDED_WEB_ASSETS } from "./embedded-assets.js";
+import { versionWebAsset } from "./asset-version.js";
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 // 顺序即层叠顺序：Tailwind/Appica 编译产物在前，手写 styles.css 在后。
 //
@@ -41,3 +42,14 @@ export function getCSSStyles() {
     }
     return _cssCache;
 }
+let _stylesAsset = null;
+const embeddedStylesAsset = versionWebAsset(EMBEDDED_WEB_ASSETS.stylesCss);
+export function getStylesAsset(requestedHash) {
+    const content = getCSSStyles();
+    if (!_stylesAsset || _stylesAsset.content !== content) {
+        _stylesAsset = versionWebAsset(content);
+    }
+    if (requestedHash === embeddedStylesAsset.hash)
+        return embeddedStylesAsset;
+    return _stylesAsset;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@co0ontty/wand",
-  "version": "4.77.0",
+  "version": "4.78.0",
   "description": "A web console for Claude Code, Codex, OpenCode, and other local CLI tools.",
   "type": "module",
   "bin": {
@@ -20,18 +20,19 @@
   "preferGlobal": true,
   "scripts": {
     "generate:web-assets": "node scripts/generate-web-assets.js",
-    "build": "rm -rf dist && node scripts/bundle-tailwind.js && node scripts/bundle-xterm.js && node scripts/bundle-qrcode.js && node scripts/bundle-browser.js && npm run generate:web-assets && tsc -p tsconfig.json && npm run build:copy-content && node scripts/check-bundle-budget.js && (npm run build:render-bin || echo '[wand] WARNING: build:render-bin failed; dist/native/ has no wand-render (run: npm run build:render-bin)' >&2) && node scripts/stamp-build-info.js && node scripts/fix-dist-permissions.js",
+    "build": "node scripts/check-node-version.js && rm -rf dist && node scripts/bundle-tailwind.js && node scripts/bundle-xterm.js && node scripts/bundle-qrcode.js && node scripts/bundle-browser.js && npm run generate:web-assets && tsc -p tsconfig.json && npm run build:copy-content && node scripts/check-bundle-budget.js && (npm run build:render-bin || echo '[wand] WARNING: build:render-bin failed; dist/native/ has no wand-render (run: npm run build:render-bin)' >&2) && node scripts/stamp-build-info.js && node scripts/fix-dist-permissions.js",
     "build:copy-content": "cp -r src/web-ui/content dist/web-ui/ && node scripts/minify-dist-content.js",
     "build:render-bin": "node scripts/stage-render-binaries.js --all",
     "build:render-native": "cargo build --release --manifest-path render/Cargo.toml -p wand-renderd",
     "build:structured-render-native": "cargo build --release --manifest-path render/Cargo.toml -p wand-structured-renderd",
-    "dev": "node scripts/bundle-tailwind.js && node scripts/bundle-xterm.js && node scripts/bundle-browser.js --development && npm run generate:web-assets && tsx src/cli.ts web",
-    "check": "node scripts/bundle-tailwind.js && node scripts/bundle-xterm.js && node scripts/bundle-browser.js && npm run generate:web-assets && tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.browser.json && tsc --noEmit -p tsconfig.react.json",
-    "test": "node --test --import tsx tests/*.test.ts",
-    "check:bundle-budget": "node scripts/check-bundle-budget.js",
+    "dev": "node scripts/check-node-version.js && node scripts/bundle-tailwind.js && node scripts/bundle-xterm.js && node scripts/bundle-qrcode.js && node scripts/bundle-browser.js --development && npm run generate:web-assets && tsx src/cli.ts web",
+    "check": "node scripts/check-node-version.js && node scripts/bundle-tailwind.js && node scripts/bundle-xterm.js && node scripts/bundle-qrcode.js && node scripts/bundle-browser.js && npm run generate:web-assets && tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.browser.json && tsc --noEmit -p tsconfig.react.json",
+    "test": "node scripts/check-node-version.js && node --test --import tsx tests/*.test.ts",
+    "check:bundle-budget": "node scripts/check-node-version.js && node scripts/check-bundle-budget.js",
     "sync:brand-assets": "node scripts/sync-brand-assets.js",
     "check:brand-assets": "node scripts/sync-brand-assets.js --check",
     "audit:remnants": "node scripts/audit-legacy-remnants.js",
+    "clean:build-cache": "node scripts/clean-build-cache.js",
     "prepublishOnly": "VER=${WAND_PUBLISH_VERSION:-$(git tag --sort=-v:refname --list 'v*' | head -1)} && VER=${VER#v} && npm version \"$VER\" --no-git-tag-version --allow-same-version && npm run build",
     "bundle:tailwind": "node scripts/bundle-tailwind.js"
   },
@@ -43,27 +44,23 @@
   ],
   "license": "MIT",
   "engines": {
-    "node": ">=22.5.0"
+    "node": ">=26.10.0"
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.138",
     "@anthropic-ai/sdk": "^0.81.0",
-    "@appica/ui-react": "^1.1.0",
-    "@xterm/addon-fit": "^0.11.0",
     "@xterm/addon-serialize": "^0.14.0",
     "@xterm/addon-unicode11": "^0.9.0",
     "@xterm/headless": "^6.0.0",
-    "@xterm/xterm": "^6.0.0",
     "compression": "^1.8.1",
     "express": "^4.21.2",
     "multer": "^2.1.1",
     "neo-blessed": "^0.2.0",
     "node-pty": "^1.1.0",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
     "ws": "^8.19.0"
   },
   "devDependencies": {
+    "@appica/ui-react": "^1.1.0",
     "@tailwindcss/cli": "^4.3.3",
     "@types/compression": "^1.8.1",
     "@types/express": "^4.17.21",
@@ -72,8 +69,12 @@
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "@types/ws": "^8.18.1",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/xterm": "^6.0.0",
     "esbuild": "^0.28.0",
     "qrcode": "^1.5.4",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
     "tailwindcss": "^4.3.3",
     "tsx": "^4.19.3",
     "typescript": "^5.8.2"

package/scripts/install-render-binary.js

@@ -12,7 +12,7 @@
  *   - 不读 config.json 内容（只取其所在目录）：既避免把配置里的密钥带进日志，
  *     也允许「配置还没生成」时就能把二进制放好。
  *
- * 用法见 `--help`；设计与回滚见 `docs/render-upgrade-path.md`。
+ * 用法见 `--help`；设计与回滚见 AGENTS.md 的 Server / Render 一节。
  *
  * 依赖的外部约定（与 Node 侧集成方共享，改这里要同步改文档）：
  *   `wand-render --version` 必须打印含语义化版本号的一行（形如 `wand-render 0.1.0`）并以 0 退出，
@@ -465,7 +465,7 @@ const USAGE = `用法：node scripts/install-render-binary.js [选项]
   3  就位失败（只读盘 / 无写权限 / 磁盘满）
   4  --check 判定需要就位
 
-设计说明与升级/回滚流程：docs/render-upgrade-path.md`;
+设计说明与升级/回滚流程见仓库 AGENTS.md 的 Server / Render 一节。`;
 
 /**
  * @param {string[]} argv

package/scripts/stage-render-binaries.js

@@ -13,7 +13,7 @@
  *   - `render-bin` 子模块没初始化时要**警告并跳过**（退出码 0）：没拉子模块的开发机上
  *     `npm run build` 不该因此失败；`--strict` 才是「必须内嵌」的场景（CI 发布链路）。
  *
- * 用法见 `--help`；布局与升级路径见 `docs/render-upgrade-path.md`。
+ * 用法见 `--help`；布局与升级路径见 AGENTS.md 的 Server / Render 一节。
  */
 import { spawnSync } from "node:child_process";
 import { createHash, randomBytes } from "node:crypto";