@co0ontty/wand 4.77.0 → 4.78.0

package/dist/ai-team-types.d.ts

@@ -71,10 +71,12 @@ export interface AiTeam {
 }
 export type AiTeamRunStatus = "running" | "awaiting_approval" | "waiting_user" | "done" | "failed" | "stopped";
 export declare const AI_TEAM_ACTIVE_RUN_STATUSES: readonly AiTeamRunStatus[];
+/** 终态：不会再有 live 变化，runner 据此清掉该 run 的推送指纹，避免长跑服务按 run 数攒字符串。 */
+export declare const AI_TEAM_TERMINAL_RUN_STATUSES: readonly AiTeamRunStatus[];
 export interface AiTeamRun {
     id: string;
     teamId: string;
-    /** 启动时的团队快照；之后改团队不影响已开始的运行。 */
+    /** 执行快照；仅 runner 在明确续跑/回复边界按规则刷新，展示层改名不写回这里。 */
     team: AiTeam;
     taskId: string;
     objective: string;
@@ -103,6 +105,24 @@ export interface AiTeamRunChatMarker {
     teamName: string;
     memberCount: number;
 }
+/**
+ * 会话列表用的成员步骤标记：`ai_team_steps.session_id` → 这一步的身份（`AiTeamStepSessionMarker` 索引的 value）。
+ * 派发出来的会话没有人类起的标题，列表用 `title` 当短标题；`runFinished` 决定它算进行中还是历史。
+ * 成员名按当前团队定义投影，团队或成员被删时退回运行快照，和群聊署名同一套规则。
+ */
+export interface AiTeamStepSessionMarker {
+    runId: string;
+    stepId: string;
+    kind: AiTeamStepKind;
+    /** 这一步的任务标题，短、稳定。 */
+    title: string;
+    memberId: string;
+    memberName: string;
+    teamName: string;
+    stepStatus: AiTeamStepStatus;
+    runStatus: AiTeamRunStatus;
+    runFinished: boolean;
+}
 export type AiTeamStepKind = "leader" | "work";
 export type AiTeamStepStatus = "queued" | "running" | "done" | "failed" | "skipped";
 export interface AiTeamStep {
@@ -137,11 +157,46 @@ export interface AiTeamRunSummary extends AiTeamRun {
 }
 /** detail() 里群聊回合的截尾条数（§4.4）：面板只给最近这一段，完整会话走「打开群聊」。 */
 export declare const AI_TEAM_DETAIL_CHAT_TURNS = 200;
+/** live 卡片文本的尾部保留上限（§4.9），超出部分回报 omittedChars 给前端显示「已省略前面 N 字」。 */
+export declare const AI_TEAM_LIVE_TEXT_MAX_CHARS = 2000;
+/**
+ * 一个正在干活的运行中步骤的实时快照（§4.9）：Web 走 ai-team-step-live 推送，
+ * 移动端轮询 GET /api/ai-team-runs/:id/live，两边共用这个形状。
+ */
+export interface AiTeamLiveStep {
+    stepId: string;
+    seq: number;
+    memberId: string;
+    memberName: string;
+    /** 该步实际使用候选的 provider（署名口径同 §3.6）。 */
+    provider: WandTaskAgent["provider"];
+    /**
+     * 该步实际使用候选的模型 id（provider 的原生 model id，`"default"` = 跟随服务端默认）；
+     * 取不到候选就不填。中文标签由客户端做。
+     */
+    model?: string;
+    /** 该步实际使用候选的思考深度；同上，取不到不填。 */
+    thinkingEffort?: string;
+    sessionId: string;
+    state: AgentActivityState;
+    /** renderLiveStepText 的渲染结果，尾部保留、至多 AI_TEAM_LIVE_TEXT_MAX_CHARS 字。 */
+    text: string;
+    omittedChars: number;
+    updatedAt: string;
+}
+/** notifyLive 回调与 ai-team-step-live 通知的 payload（§4.9）。 */
+export interface AiTeamLiveUpdate {
+    runId: string;
+    taskId: string;
+    steps: AiTeamLiveStep[];
+}
 export interface AiTeamRunDetail {
     run: AiTeamRun;
     steps: AiTeamStep[];
     /** 运行中步骤所在会话的实时状态（等待授权 / 等待回答等）。 */
     memberStates: Record<string, AgentActivityState>;
-    /** 群聊 relay 会话的消息，截尾 AI_TEAM_DETAIL_CHAT_TURNS 条；没有群聊会话的旧运行为空数组。 */
+    /** 仅供展示：运行时成员顺序/职责保持快照，仍存在的成员按 id 取当前名字/头像。不得用于派工。 */
+    displayTeam?: AiTeam;
+    /** 群聊 relay 会话的原始消息；作者和正文是历史记录，不因改名而改写。 */
     chatTurns: ConversationTurn[];
 }

package/dist/ai-team-types.js

@@ -28,5 +28,9 @@ export function agentKey(agent) {
 /** 上传头像在前端缩成小图后的上限（data URL 字符数）。 */
 export const AI_TEAM_AVATAR_MAX_CHARS = 60_000;
 export const AI_TEAM_ACTIVE_RUN_STATUSES = ["running", "awaiting_approval", "waiting_user"];
+/** 终态：不会再有 live 变化，runner 据此清掉该 run 的推送指纹，避免长跑服务按 run 数攒字符串。 */
+export const AI_TEAM_TERMINAL_RUN_STATUSES = ["done", "failed", "stopped"];
 /** detail() 里群聊回合的截尾条数（§4.4）：面板只给最近这一段，完整会话走「打开群聊」。 */
 export const AI_TEAM_DETAIL_CHAT_TURNS = 200;
+/** live 卡片文本的尾部保留上限（§4.9），超出部分回报 omittedChars 给前端显示「已省略前面 N 字」。 */
+export const AI_TEAM_LIVE_TEXT_MAX_CHARS = 2000;

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commit": "6c4df97957956df8033a9691d42023ff53089519",
-  "builtAt": "2026-09-27T07:05:14.345Z",
-  "version": "4.77.0",
+  "commit": "a1e4f594e3431de8d5d816fba8ed84c8c4611dbf",
+  "builtAt": "2026-09-29T11:29:24.761Z",
+  "version": "4.78.0",
   "channel": "stable"
 }

package/dist/commit-task-archive.js

@@ -22,22 +22,18 @@ export function archiveCommitTasks(storage, session, entryIds) {
         if (taskId)
             related.add(taskId);
     }
-    return storage.transaction(() => {
-        const archived = [];
-        for (const id of related) {
-            const task = storage.getWandTask(id);
-            if (task?.status !== "done")
-                continue;
-            // The workspace is the authoritative directory for a card. Worktree sessions use the
-            // parent project directory; a global/unassigned card only qualifies via this very session.
-            const workspace = task.workspaceId ? storage.getWorkspace(task.workspaceId) : null;
-            const sameDirectory = !!workspace && workspace.kind !== "global"
-                && !!directory && normalizeProjectCwd(workspace.cwd) === directory;
-            if (!sameDirectory && !(id === currentTaskId && (!workspace || workspace.kind === "global")))
-                continue;
-            storage.updateWandTask(id, { status: "archived" });
-            archived.push(id);
-        }
-        return archived;
-    });
+    const completed = [];
+    for (const id of related) {
+        const task = storage.getWandTask(id);
+        if (task?.status !== "done")
+            continue;
+        // Project directory constrains selected history; standalone cards qualify via this session.
+        const workspace = task.workspaceId ? storage.getWorkspace(task.workspaceId) : null;
+        const sameDirectory = !!workspace && workspace.kind !== "global"
+            && !!directory && normalizeProjectCwd(workspace.cwd) === directory;
+        if (!sameDirectory && !(id === currentTaskId && (!workspace || workspace.kind === "global")))
+            continue;
+        completed.push(id);
+    }
+    return storage.archiveCompletedWandTasks(completed);
 }

package/dist/config.js

@@ -804,14 +804,22 @@ function mergeWithDefaults(input) {
 export function isExecutionMode(value) {
     return value === "assist" || value === "agent" || value === "agent-max" || value === "auto-edit" || value === "default" || value === "full-access" || value === "native" || value === "managed";
 }
+/**
+ * 配置里的默认模型 id：`default` 是「跟随 CLI 默认」的哨兵值、不是模型 id，
+ * 历史设置里可能存过它（会一路传成 `--model default`），读到就当没配。
+ */
+function configuredModelId(value) {
+    const trimmed = (value ?? "").trim();
+    return trimmed === "default" ? "" : trimmed;
+}
 export function getProviderDefaultModels(config) {
     return {
-        claude: (config.defaultModel ?? "").trim(),
-        codex: (config.defaultCodexModel ?? "").trim(),
-        opencode: (config.defaultOpenCodeModel ?? "").trim(),
-        grok: (config.defaultGrokModel ?? "").trim(),
-        qoder: (config.defaultQoderModel ?? "").trim(),
-        pi: (config.defaultPiModel ?? "").trim(),
+        claude: configuredModelId(config.defaultModel),
+        codex: configuredModelId(config.defaultCodexModel),
+        opencode: configuredModelId(config.defaultOpenCodeModel),
+        grok: configuredModelId(config.defaultGrokModel),
+        qoder: configuredModelId(config.defaultQoderModel),
+        pi: configuredModelId(config.defaultPiModel),
     };
 }
 export function getDefaultModelForProvider(config, provider) {

package/dist/git-quick-commit.js

@@ -768,7 +768,7 @@ function sanitizeSuggestedTag(value) {
     return cleaned;
 }
 async function generateCommitMessageWithTag(cwd, language, ai = {}, options = {}) {
-    const { input, usedIteration } = await buildCommitPromptInput(cwd, options);
+    const { input } = await buildCommitPromptInput(cwd, options);
     let latestTag;
     try {
         latestTag = await runGitAsync(["describe", "--tags", "--abbrev=0"], cwd) || undefined;

package/dist/middleware/rate-limit.d.ts

@@ -1,7 +1,21 @@
 /**
- * Login rate limiter — tracks failed attempts per IP.
+ * Login rate limiter — tracks failed admin-password attempts per IP.
  * In-memory only; resets on process restart.
+ *
+ * Only human-typed passwords count. An app token is a machine-held credential the
+ * user cannot "type correctly", so a stale connect code must not lock out the whole
+ * shared IP bucket (that is what kept the web console answering 429).
  */
-export declare function checkRateLimit(ip: string): boolean;
-export declare function recordFailedLogin(ip: string): void;
-export declare function resetRateLimit(ip: string): void;
+export interface LoginLimitState {
+    lockedUntil: number;
+    /** Seconds to advertise via Retry-After; 0 when not locked. */
+    retryAfter: number;
+}
+export declare function checkPasswordRateLimit(ip: string, now?: number): LoginLimitState | null;
+/**
+ * Records one wrong admin password. Returns the lock that was just imposed, if any.
+ * A previous lock that has already expired starts a fresh window instead of being
+ * topped up by the first typo after it.
+ */
+export declare function recordFailedPassword(ip: string, now?: number): LoginLimitState | null;
+export declare function resetPasswordRateLimit(ip: string): void;

package/dist/middleware/rate-limit.js

@@ -1,35 +1,67 @@
 /**
- * Login rate limiter — tracks failed attempts per IP.
+ * Login rate limiter — tracks failed admin-password attempts per IP.
  * In-memory only; resets on process restart.
+ *
+ * Only human-typed passwords count. An app token is a machine-held credential the
+ * user cannot "type correctly", so a stale connect code must not lock out the whole
+ * shared IP bucket (that is what kept the web console answering 429).
  */
-const RATE_LIMIT_WINDOW = 15 * 60 * 1000; // 15 minutes
-const RATE_LIMIT_MAX = 10; // 10 attempts per window
-const loginAttempts = new Map();
-export function checkRateLimit(ip) {
-    const now = Date.now();
-    const record = loginAttempts.get(ip);
-    if (!record || now > record.resetAt) {
-        return true;
-    }
-    return record.count < RATE_LIMIT_MAX;
+const PASSWORD_WINDOW = 15 * 60 * 1000; // failures are counted over a sliding window
+const PASSWORD_MAX = 10; // allowed failures inside the window
+const LOCKOUT = 15 * 60 * 1000; // fixed cooldown once the window is exhausted
+const passwordAttempts = new Map();
+function prune(attempts, now) {
+    const cutoff = now - PASSWORD_WINDOW;
+    let start = 0;
+    while (start < attempts.length && attempts[start] <= cutoff)
+        start++;
+    return start === 0 ? attempts : attempts.slice(start);
 }
-export function recordFailedLogin(ip) {
-    const now = Date.now();
-    const record = loginAttempts.get(ip);
-    if (!record || now > record.resetAt) {
-        loginAttempts.set(ip, { count: 1, resetAt: now + RATE_LIMIT_WINDOW });
-        return;
+function lockedState(lockedUntil, now) {
+    return { lockedUntil, retryAfter: Math.ceil((lockedUntil - now) / 1000) };
+}
+export function checkPasswordRateLimit(ip, now = Date.now()) {
+    const record = passwordAttempts.get(ip);
+    if (!record)
+        return null;
+    if (now < record.lockedUntil)
+        return lockedState(record.lockedUntil, now);
+    record.attempts = prune(record.attempts, now);
+    if (!record.attempts.length)
+        passwordAttempts.delete(ip);
+    return null;
+}
+/**
+ * Records one wrong admin password. Returns the lock that was just imposed, if any.
+ * A previous lock that has already expired starts a fresh window instead of being
+ * topped up by the first typo after it.
+ */
+export function recordFailedPassword(ip, now = Date.now()) {
+    const existing = passwordAttempts.get(ip);
+    // A lock that has already expired must not leave its failures behind to tip the new
+    // window over the limit on the first typo; `lockedUntil` 0 means "never locked".
+    const expiredLock = !!existing && existing.lockedUntil > 0 && now >= existing.lockedUntil;
+    const record = !existing || expiredLock ? { attempts: [], lockedUntil: 0 } : existing;
+    record.attempts = prune(record.attempts, now);
+    record.attempts.push(now);
+    let lock = null;
+    if (record.attempts.length >= PASSWORD_MAX) {
+        record.lockedUntil = now + LOCKOUT;
+        record.attempts = [];
+        lock = lockedState(record.lockedUntil, now);
     }
-    record.count++;
+    passwordAttempts.set(ip, record);
+    return lock;
 }
-export function resetRateLimit(ip) {
-    loginAttempts.delete(ip);
+export function resetPasswordRateLimit(ip) {
+    passwordAttempts.delete(ip);
 }
 function cleanupRateLimiter() {
     const now = Date.now();
-    for (const [ip, record] of loginAttempts.entries()) {
-        if (now > record.resetAt) {
-            loginAttempts.delete(ip);
+    for (const [ip, record] of passwordAttempts.entries()) {
+        record.attempts = prune(record.attempts, now);
+        if (!record.attempts.length && now >= record.lockedUntil) {
+            passwordAttempts.delete(ip);
         }
     }
 }

package/dist/missions.js

@@ -4,7 +4,6 @@ import path from "node:path";
 import { buildMissionDiff } from "./mission-diff.js";
 import { recordIterationPromptForTask } from "./iteration-log.js";
 import { isSessionProvider } from "./session-provider.js";
-import { syncWorkspaceTaskToBoard } from "./wand-task-sync.js";
 const MAX_ATTEMPTS = 6;
 function nowIso() {
     return new Date().toISOString();
@@ -334,8 +333,6 @@ export class Missions {
                 sessionSource: "automation",
                 automationId: mission.id,
             });
-            // 关联任务的派发会话立刻落到任务卡片上，不等下一次看板列表的兜底同步。
-            syncWorkspaceTaskToBoard(this.storage, mission.taskId);
             attempt = {
                 ...attempt,
                 sessionId: session.id,

package/dist/models.d.ts

@@ -64,7 +64,12 @@ export interface ModelCache {
 }
 /** 探针失败时的已知档位。下一次 CLI 成功应答会把它换掉。 */
 export declare const FALLBACK_PROVIDER_THINKING: ProviderThinkingEfforts;
-/** Immutable-looking snapshot returned to API clients. */
+/**
+ * 目录里 `default` 项（「不传 --model」那一项）的标签补上服务端配置的默认模型名：
+ * CLI 自己报的文案（「跟随 Claude Code 默认」）看不出真正会跑哪个模型，两端选择器只能显示占位。
+ * 没配置、列表里没有这一项、或标签里已经写了这个 id 时原样返回（引用不变，便于上游比对缓存）。
+ */
+export declare function withConfiguredDefaultModelLabels<T extends object>(catalog: T, defaults: Readonly<Record<string, string>>): T;
 export interface ModelCatalogSnapshot extends ModelCache {
     /** SHA-256 of the catalog excluding `refreshedAt`. Changes only with content. */
     revision: string;

package/dist/models.js

@@ -79,6 +79,41 @@ function cloneThinkingEfforts(efforts) {
         pi: copy(efforts.pi),
     };
 }
+/** Immutable-looking snapshot returned to API clients. */
+/** provider → 目录里的模型列表字段（与 `/api/models` 的 payload 同源）。 */
+const PROVIDER_MODEL_LIST_FIELDS = {
+    claude: "models",
+    codex: "codexModels",
+    opencode: "opencodeModels",
+    grok: "grokModels",
+    qoder: "qoderModels",
+    pi: "piModels",
+};
+/**
+ * 目录里 `default` 项（「不传 --model」那一项）的标签补上服务端配置的默认模型名：
+ * CLI 自己报的文案（「跟随 Claude Code 默认」）看不出真正会跑哪个模型，两端选择器只能显示占位。
+ * 没配置、列表里没有这一项、或标签里已经写了这个 id 时原样返回（引用不变，便于上游比对缓存）。
+ */
+export function withConfiguredDefaultModelLabels(catalog, defaults) {
+    let next = null;
+    for (const [provider, field] of Object.entries(PROVIDER_MODEL_LIST_FIELDS)) {
+        const list = catalog[field];
+        const configured = (defaults[provider] ?? "").trim();
+        if (!configured || !Array.isArray(list))
+            continue;
+        const at = list.findIndex((entry) => (!!entry && typeof entry === "object" && entry.id === "default"));
+        if (at < 0)
+            continue;
+        const entry = list[at];
+        if (String(entry.label ?? "").includes(configured))
+            continue;
+        const updated = [...list];
+        updated[at] = { ...entry, label: `跟随服务端默认（${configured}）` };
+        next ??= { ...catalog };
+        next[field] = updated;
+    }
+    return (next ?? catalog);
+}
 function cloneModels(models) {
     return models.map((model) => ({
         ...model,

package/dist/path-repair.d.ts

@@ -15,9 +15,10 @@
  * 修复分两层（都在 startServer() 开头跑）：
  *   1. repairRuntimePath()（同步、cheap）：扫常见工具链 bin 目录，把存在但 PATH
  *      里缺的"追加"到 process.env.PATH 末尾。
- *   2. deepRepairRuntimePath()（异步、贵一点）：起一个 login shell 拉用户实际的
- *      PATH（覆盖 ~/.bashrc、~/.zshrc、nvm/fnm/volta 的 shell-init 等所有动态
- *      逻辑），把里面 PATH 里我们还没的目录"前插"到 process.env.PATH 前面。这
+ *   2. deepRepairRuntimePath()（异步、贵一点）：起一个交互式 login shell 拉用户实际的
+ *      PATH（与 provider PTY 的 -lic 一致，覆盖 ~/.bashrc、~/.zshrc、
+ *      nvm/fnm/volta 的 shell-init 等动态逻辑），把里面 PATH 里我们还没的目录
+ *      "前插"到 process.env.PATH 前面。这
  *      是真正能修好"unit 里 PATH 太旧、用户 shell 里却好好的"这种场景的关键。
  *
  * 设计决策：
@@ -27,7 +28,7 @@
  *   - 用 path.delimiter：Windows 用 `;`，POSIX 用 `:`，跨平台安全。
  *   - 不重写 service unit：那需要 sudo，且语义太重；只在 install.sh 主动调
  *     `wand service:install` 时才重新烧 PATH。
- *   - login shell 用 -lc 跑，4 秒超时；失败就静默走同步路径，不阻塞启动。
+ *   - provider PTY 用 -lic，PATH 探测也用 -lic（不是 -lc）；4 秒超时，失败走同步路径。
  *
  * WAND_PATH_REPAIR_DISABLE=1 可以彻底关掉同步那层（极端情况下用户想完全控制 PATH 时用）。
  * WAND_PATH_REPAIR_DEEP_DISABLE=1 只关掉 login shell 探测，但保留同步追加。
@@ -57,7 +58,7 @@ export declare function repairRuntimePath(): PathRepairResult;
  * 这种动态注入的 PATH。
  *
  * 行为：
- *   - 跑 `${shell} -l -c '...'` 拉 $PATH 和 command -v claude/codex/opencode（4s 超时）
+ *   - 跑 `${shell} -lic '...'` 拉 $PATH 和 command -v claude/codex/opencode（4s 超时）
  *   - 按 login shell 的 PATH 顺序重排 process.env.PATH，再把仅存在于 service 的
  *     目录追加回去。不能只前插新增目录：同一个 CLI 同时装在 nvm 和 Homebrew 时，
  *     两个目录本来都存在，旧实现不会重排，structured 与 PTY 会命中不同版本。

package/dist/path-repair.js

@@ -154,7 +154,7 @@ export function repairRuntimePath() {
  * 这种动态注入的 PATH。
  *
  * 行为：
- *   - 跑 `${shell} -l -c '...'` 拉 $PATH 和 command -v claude/codex/opencode（4s 超时）
+ *   - 跑 `${shell} -lic '...'` 拉 $PATH 和 command -v claude/codex/opencode（4s 超时）
  *   - 按 login shell 的 PATH 顺序重排 process.env.PATH，再把仅存在于 service 的
  *     目录追加回去。不能只前插新增目录：同一个 CLI 同时装在 nvm 和 Homebrew 时，
  *     两个目录本来都存在，旧实现不会重排，structured 与 PTY 会命中不同版本。
@@ -254,7 +254,7 @@ function pickProbeShell(configured) {
     return null;
 }
 /**
- * 用 login shell 跑一段最小脚本，拿到用户实际的 PATH 和 provider CLI 解析路径。
+ * 用与 PTY provider 相同的交互式 login shell 跑最小脚本，拿到实际的 PATH 和 CLI 路径。
  * 用 \x1f（ASCII Unit Separator）作字段分隔符避免和路径里的字符冲突。
  */
 function probeLoginShell(shell, timeoutMs) {
@@ -265,7 +265,7 @@ function probeLoginShell(shell, timeoutMs) {
         `printf 'GROK\\x1f%s\\n' "$(command -v grok 2>/dev/null)"; ` +
         `printf 'QODERCLI\\x1f%s\\n' "$(command -v qodercli 2>/dev/null)"`;
     return new Promise((resolve, reject) => {
-        const child = spawn(shell, ["-l", "-c", script], {
+        const child = spawn(shell, ["-lic", script], {
             env: {
                 ...process.env,
                 // 防止 PROMPT_COMMAND / PS1 等钩子往 stdout 喷东西干扰解析

package/dist/render-protocol.d.ts

@@ -1,7 +1,7 @@
 /**
  * Render 协议 v1 的 TS 镜像。Rust 单一真源在
  * `render/crates/wand-render-protocol/src/lib.rs`，契约文档在
- * `render/docs/render-protocol.md`（本仓库 `docs/render-protocol.md` 只是指针）。
+ * `render/docs/render-protocol.md`。
  *
  * 两侧常量与字段名必须逐一对齐；任一侧改动都要同时提升版本号并更新文档。
  */

package/dist/render-protocol.js

@@ -5,7 +5,7 @@ import path from "node:path";
 /**
  * Render 协议 v1 的 TS 镜像。Rust 单一真源在
  * `render/crates/wand-render-protocol/src/lib.rs`，契约文档在
- * `render/docs/render-protocol.md`（本仓库 `docs/render-protocol.md` 只是指针）。
+ * `render/docs/render-protocol.md`。
  *
  * 两侧常量与字段名必须逐一对齐；任一侧改动都要同时提升版本号并更新文档。
  */

package/dist/server-ai-team-routes.d.ts

@@ -8,4 +8,5 @@ export declare function parseAiTeamInput(value: unknown, existing: AiTeam | null
 export declare function registerAiTeamRoutes(app: Express, deps: {
     storage: WandStorage;
     runner: AiTeamRunner;
+    notifyTeamChanged?: (teamId: string) => void;
 }): void;

package/dist/server-ai-team-routes.js

@@ -7,7 +7,6 @@ import { defaultMilestoneIdForWrite, scopedMilestoneId } from "./milestone-scope
 import { bodyObject, sendRouteError, text } from "./server-request.js";
 import { parseTaskAgent } from "./server-task-routes.js";
 import { provisionalTaskTitleFromDescription } from "./task-title.js";
-import { ensureWorkspaceTaskForBoardTask } from "./wand-task-sync.js";
 const NOT_FOUND = /不存在/;
 /** 团队页「直接开工」自动建卡的标记（§4.2 / Q3）：看板靠它区分团队卡与手写卡。 */
 export const TEAM_DIRECT_LABEL = "team_direct";
@@ -134,6 +133,14 @@ export function parseAiTeamInput(value, existing, now) {
 }
 export function registerAiTeamRoutes(app, deps) {
     const { storage, runner } = deps;
+    const notifyTeam = (teamId) => {
+        try {
+            deps.notifyTeamChanged?.(teamId);
+        }
+        catch (error) {
+            console.error("[AiTeam] notify definition failed:", getErrorMessage(error));
+        }
+    };
     app.get("/api/ai-teams", (_req, res) => {
         res.json(storage.listAiTeams());
     });
@@ -154,6 +161,7 @@ export function registerAiTeamRoutes(app, deps) {
                 throw new Error("团队不存在。");
             const team = parseAiTeamInput(req.body, existing, new Date().toISOString());
             storage.saveAiTeam(team);
+            notifyTeam(team.id);
             res.json(team);
         }
         catch (error) {
@@ -162,6 +170,7 @@ export function registerAiTeamRoutes(app, deps) {
     });
     app.delete("/api/ai-teams/:id", (req, res) => {
         storage.deleteAiTeam(req.params.id);
+        notifyTeam(req.params.id);
         res.json({ ok: true });
     });
     /** 团队详情：团队对象 + 该团队的运行摘要（修正 B14，Android AiTeamDetailScreen 与 Web 面板共用）。 */
@@ -203,19 +212,15 @@ export function registerAiTeamRoutes(app, deps) {
             const preferredMember = team.members.find((member) => member.isLeader) ?? team.members[0];
             const agent = preferredMember ? memberAgents(preferredMember)[0] ?? null : null;
             const milestoneId = defaultMilestoneIdForWrite(storage);
-            const task = storage.transaction(() => {
-                const card = storage.createWandTask({
-                    workspaceId: workspace.id,
-                    title: provisionalTaskTitleFromDescription(note) || team.name,
-                    description: note,
-                    // 团队开工即进行中（§4.2 的 "processing" 对应看板列 doing；runner.start 不再回退它）。
-                    status: "doing",
-                    labels: [TEAM_DIRECT_LABEL],
-                    milestoneId: scopedMilestoneId(storage, milestoneId, workspace.id) ?? milestoneId,
-                    agent,
-                });
-                ensureWorkspaceTaskForBoardTask(storage, card);
-                return storage.getWandTask(card.id);
+            const task = storage.createWandTask({
+                workspaceId: workspace.id,
+                title: provisionalTaskTitleFromDescription(note) || team.name,
+                description: note,
+                // 团队开工即进行中（§4.2 的 "processing" 对应看板列 doing；runner.start 不再回退它）。
+                status: "doing",
+                labels: [TEAM_DIRECT_LABEL],
+                milestoneId: scopedMilestoneId(storage, milestoneId, workspace.id) ?? milestoneId,
+                agent,
             });
             try {
                 const detail = await runner.start({ teamId: team.id, taskId: task.id, note });
@@ -264,6 +269,15 @@ export function registerAiTeamRoutes(app, deps) {
             sendTeamError(res, error);
         }
     });
+    /** 运行中步骤的 live 文本（§4.9）：Web 走 ai-team-step-live 推送，移动端轻量轮询这个端点。 */
+    app.get("/api/ai-team-runs/:id/live", (req, res) => {
+        try {
+            res.json({ runId: req.params.id, steps: runner.live(req.params.id) });
+        }
+        catch (error) {
+            sendTeamError(res, error);
+        }
+    });
     const action = (path, handler) => {
         app.post(path, asyncRoute(async (req, res) => {
             try {

package/dist/server-local-preview-routes.js

@@ -71,7 +71,7 @@ function proxyLocation(value, target) {
  * uploads and other content types that Express does not need to inspect.
  */
 export function registerLocalPreviewRoutes(app, dependencies) {
-    const handler = asyncRoute(async (req, res, next) => {
+    const handler = asyncRoute(async (req, res) => {
         const target = parseLocalPreviewTarget(String(req.params.host ?? ""), String(req.params.port ?? ""), req.url || "/");
         if (!target) {
             res.status(400).json({ error: "只允许预览本机（localhost）HTTP 服务。" });

package/dist/server-session-routes.js

@@ -19,7 +19,6 @@ import { registerStructuredResumeRoutes } from "./server-resume-routes.js";
 import { addHiddenSessionIds, removeHiddenSessionIds } from "./session-registry.js";
 import { enrichStructuredMessages, WAND_PROTOCOL_VERSION } from "./structured-client-protocol.js";
 import { asRecord, isStructuredImagePart } from "./structured-content.js";
-import { syncWorkspaceTaskToBoard } from "./wand-task-sync.js";
 import { buildDirectoryTree, normalizeSessionDirectory, } from "./session-directory-tree.js";
 import { projectCwdForSession, renameWorkspaceDirectory, resolveWorkspaceIdForNewSession, } from "./workspace-binding.js";
 export function parseExecutionMode(value, fallback) {
@@ -485,8 +484,6 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 ...origin,
             });
             onSessionCreated?.(snapshot.cwd);
-            // 会话一落地就挂到任务的看板卡片上，不等下一次看板列表的兜底同步。
-            syncWorkspaceTaskToBoard(storage, snapshot.workspaceTaskId);
             const prompt = body.prompt?.trim();
             if (prompt) {
                 if (body.respondImmediately === true) {

package/dist/server-settings-routes.d.ts

@@ -1,6 +1,6 @@
 import type { Express, Request, RequestHandler } from "express";
 import { type BuildInfo } from "./build-info.js";
-import type { ModelCatalogService } from "./models.js";
+import { type ModelCatalogService } from "./models.js";
 import { type RuntimeConfigState } from "./runtime-config.js";
 import type { WandStorage } from "./storage.js";
 import type { WandConfig } from "./types.js";

package/dist/server-settings-routes.js

@@ -6,6 +6,7 @@ import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute } from "./express-async.js";
 import { sendRouteError } from "./server-request.js";
 import { getProviderDefaultModels, PREFERENCE_KEYS, saveConfig, validateCommitAiConfig, writePreferenceToStorage, } from "./config.js";
+import { withConfiguredDefaultModelLabels } from "./models.js";
 import { DEPLOYMENT_CONFIG_KEYS } from "./runtime-config.js";
 import { callSystemAiText, discoverCliSystemAiConfigs, mergeSystemAiConfigs, normalizeSystemAiConfig, } from "./system-ai.js";
 function systemAiRouteIdentity(profile) {
@@ -399,7 +400,7 @@ export function registerSettingsRoutes(app, deps) {
         const cached = deps.modelCatalog.snapshot();
         const defaults = getProviderDefaultModels(config);
         res.json({
-            ...cached,
+            ...withConfiguredDefaultModelLabels(cached, defaults),
             defaultModel: defaults.claude,
             defaultCodexModel: defaults.codex,
             defaultOpenCodeModel: defaults.opencode,
@@ -414,7 +415,7 @@ export function registerSettingsRoutes(app, deps) {
             const refreshed = await deps.modelCatalog.refresh({ verifyClaudeCandidates: true });
             const defaults = getProviderDefaultModels(config);
             res.json({
-                ...refreshed,
+                ...withConfiguredDefaultModelLabels(refreshed, defaults),
                 defaultModel: defaults.claude,
                 defaultCodexModel: defaults.codex,
                 defaultOpenCodeModel: defaults.opencode,