@co0ontty/wand 4.82.0 → 4.83.1

package/dist/web-ui/provider-identity.d.ts

@@ -1,17 +1,11 @@
-export declare const PROVIDER_IDS: readonly ["claude", "codex", "opencode", "grok", "qoder", "pi", "gemini"];
-export type ProviderId = (typeof PROVIDER_IDS)[number];
-/** Normalizes a persisted provider id or provider-runner alias. */
-export declare function normalizeProviderId(value: unknown): ProviderId | null;
-/**
- * Infers old sessions from the command's executable only. Arguments and parent
- * directory names must not be allowed to impersonate a different provider.
- */
-export declare function inferProviderIdFromCommand(value: unknown): ProviderId | null;
-/** provider 对应的 CLI 可执行文件名（Qoder 的 CLI 叫 qodercli）。 */
-export declare function providerCliCommand(provider: string): string;
-/** 严格判断：只接受 6 个 provider 字面量，不做别名 / 大小写归一。 */
+import { SESSION_PROVIDERS as PROVIDER_IDS, inferProviderFromCommand, normalizeProviderId, type SessionProvider } from "../provider-catalog.js";
+export { inferProviderFromCommand, providerCliCommand, providerDisplayName, isNativeThinkingEffort, NATIVE_THINKING_EFFORT_PATTERN, PROVIDER_LABELS, } from "../provider-catalog.js";
+export { PROVIDER_IDS, normalizeProviderId };
+export type ProviderId = SessionProvider;
+/** 兼容旧名：浏览器层的调用点叫 inferProviderIdFromCommand。 */
+export declare const inferProviderIdFromCommand: typeof inferProviderFromCommand;
+/** 严格判断：只接受 7 个 provider 字面量，不做别名 / 大小写归一。 */
 export declare function isProviderId(value: unknown): value is ProviderId;
-export declare function providerDisplayName(value: unknown): string;
 export declare const CLAUDE_BRAND_COLOR = "#D97757";
 export declare const CLAUDE_LOGO_PATH = "m4.7144 15.9555 4.7174-2.6471.079-.2307-.079-.1275h-.2307l-.7893-.0486-2.6956-.0729-2.3375-.0971-2.2646-.1214-.5707-.1215-.5343-.7042.0546-.3522.4797-.3218.686.0608 1.5179.1032 2.2767.1578 1.6514.0972 2.4468.255h.3886l.0546-.1579-.1336-.0971-.1032-.0972L6.973 9.8356l-2.55-1.6879-1.3356-.9714-.7225-.4918-.3643-.4614-.1578-1.0078.6557-.7225.8803.0607.2246.0607.8925.686 1.9064 1.4754 2.4893 1.8336.3643.3035.1457-.1032.0182-.0728-.164-.2733-1.3539-2.4467-1.445-2.4893-.6435-1.032-.17-.6194c-.0607-.255-.1032-.4674-.1032-.7285L6.287.1335 6.6997 0l.9957.1336.419.3642.6192 1.4147 1.0018 2.2282 1.5543 3.0296.4553.8985.2429.8318.091.255h.1579v-.1457l.1275-1.706.2368-2.0947.2307-2.6957.0789-.7589.3764-.9107.7468-.4918.5828.2793.4797.686-.0668.4433-.2853 1.8517-.5586 2.9021-.3643 1.9429h.2125l.2429-.2429.9835-1.3053 1.6514-2.0643.7286-.8196.85-.9046.5464-.4311h1.0321l.759 1.1293-.34 1.1657-1.0625 1.3478-.8804 1.1414-1.2628 1.7-.7893 1.36.0729.1093.1882-.0183 2.8535-.607 1.5421-.2794 1.8396-.3157.8318.3886.091.3946-.3278.8075-1.967.4857-2.3072.4614-3.4364.8136-.0425.0304.0486.0607 1.5482.1457.6618.0364h1.621l3.0175.2247.7892.522.4736.6376-.079.4857-1.2142.6193-1.6393-.3886-3.825-.9107-1.3113-.3279h-.1822v.1093l1.0929 1.0686 2.0035 1.8092 2.5075 2.3314.1275.5768-.3218.4554-.34-.0486-2.2039-1.6575-.85-.7468-1.9246-1.621h-.1275v.17l.4432.6496 2.3436 3.5214.1214 1.0807-.17.3521-.6071.2125-.6679-.1214-1.3721-1.9246L14.38 17.959l-1.1414-1.9428-.1397.079-.674 7.2552-.3156.3703-.7286.2793-.6071-.4614-.3218-.7468.3218-1.4753.3886-1.9246.3157-1.53.2853-1.9004.17-.6314-.0121-.0425-.1397.0182-1.4328 1.9672-2.1796 2.9446-1.7243 1.8456-.4128.164-.7164-.3704.0667-.6618.4008-.5889 2.386-3.0357 1.4389-1.882.929-1.0868-.0062-.1579h-.0546l-6.3385 4.1164-1.1293.1457-.4857-.4554.0608-.7467.2307-.2429 1.9064-1.3114Z";
 export declare const CODEX_LOGO_PATH = "M22.2819 9.8211a5.9847 5.9847 0 0 0-.5157-4.9108 6.0462 6.0462 0 0 0-6.5098-2.9A6.0651 6.0651 0 0 0 4.9807 4.1818a5.9847 5.9847 0 0 0-3.9977 2.9 6.0462 6.0462 0 0 0 .7427 7.0966 5.98 5.98 0 0 0 .511 4.9107 6.051 6.051 0 0 0 6.5146 2.9001A5.9847 5.9847 0 0 0 13.2599 24a6.0557 6.0557 0 0 0 5.7718-4.2058 5.9894 5.9894 0 0 0 3.9977-2.9001 6.0557 6.0557 0 0 0-.7475-7.0729zm-9.022 12.6081a4.4755 4.4755 0 0 1-2.8764-1.0408l.1419-.0804 4.7783-2.7582a.7948.7948 0 0 0 .3927-.6813v-6.7369l2.02 1.1686a.071.071 0 0 1 .038.052v5.5826a4.504 4.504 0 0 1-4.4945 4.4944zm-9.6607-4.1254a4.4708 4.4708 0 0 1-.5346-3.0137l.142.0852 4.783 2.7582a.7712.7712 0 0 0 .7806 0l5.8428-3.3685v2.3324a.0804.0804 0 0 1-.0332.0615L9.74 19.9502a4.4992 4.4992 0 0 1-6.1408-1.6464zM2.3408 7.8956a4.485 4.485 0 0 1 2.3655-1.9728V11.6a.7664.7664 0 0 0 .3879.6765l5.8144 3.3543-2.0201 1.1685a.0757.0757 0 0 1-.071 0l-4.8303-2.7865A4.504 4.504 0 0 1 2.3408 7.872zm16.5963 3.8558L13.1038 8.364 15.1192 7.2a.0757.0757 0 0 1 .071 0l4.8303 2.7913a4.4944 4.4944 0 0 1-.6765 8.1042v-5.6772a.79.79 0 0 0-.407-.667zm2.0107-3.0231l-.142-.0852-4.7735-2.7818a.7759.7759 0 0 0-.7854 0L9.409 9.2297V6.8974a.0662.0662 0 0 1 .0284-.0615l4.8303-2.7866a4.4992 4.4992 0 0 1 6.6802 4.66zM8.3065 12.863l-2.02-1.1638a.0804.0804 0 0 1-.038-.0567V6.0742a4.4992 4.4992 0 0 1 7.3757-3.4537l-.142.0805L8.704 5.459a.7948.7948 0 0 0-.3927.6813zm1.0976-2.3654l2.602-1.4998 2.6069 1.4998v2.9994l-2.5974 1.4997-2.6067-1.4997Z";

package/dist/web-ui/provider-identity.js

@@ -1,78 +1,15 @@
-export const PROVIDER_IDS = ["claude", "codex", "opencode", "grok", "qoder", "pi", "gemini"];
+// Provider 的列表 / 别名 / 展示名 / 推断规则统一在 src/provider-catalog.ts（服务端共用）。
+// 这里只补充浏览器层特有的品牌 logo 与 HTML 渲染。
+import { SESSION_PROVIDERS as PROVIDER_IDS, inferProviderFromCommand, normalizeProviderId, } from "../provider-catalog.js";
+export { inferProviderFromCommand, providerCliCommand, providerDisplayName, isNativeThinkingEffort, NATIVE_THINKING_EFFORT_PATTERN, PROVIDER_LABELS, } from "../provider-catalog.js";
+export { PROVIDER_IDS, normalizeProviderId };
+/** 兼容旧名：浏览器层的调用点叫 inferProviderIdFromCommand。 */
+export const inferProviderIdFromCommand = inferProviderFromCommand;
 const PROVIDER_ID_SET = new Set(PROVIDER_IDS);
-const PROVIDER_LABELS = {
-    claude: "Claude",
-    codex: "Codex",
-    opencode: "OpenCode",
-    grok: "Grok",
-    qoder: "Qoder",
-    pi: "Pi",
-    gemini: "Gemini",
-};
-const PROVIDER_ALIASES = {
-    anthropic: "claude",
-    claude: "claude",
-    "claude-cli": "claude",
-    "claude-cli-print": "claude",
-    codex: "codex",
-    "codex-cli": "codex",
-    "codex-cli-exec": "codex",
-    grok: "grok",
-    "grok-cli": "grok",
-    "grok-cli-headless": "grok",
-    "open-code": "opencode",
-    open_code: "opencode",
-    opencode: "opencode",
-    "opencode-cli-run": "opencode",
-    qoder: "qoder",
-    "qoder-cli": "qoder",
-    "qoder-cli-print": "qoder",
-    qodercli: "qoder",
-    pi: "pi",
-    "pi-cli": "pi",
-    "pi-cli-json": "pi",
-    gemini: "gemini",
-    "gemini-cli": "gemini",
-    "gemini-cli-json": "gemini",
-};
-/** Normalizes a persisted provider id or provider-runner alias. */
-export function normalizeProviderId(value) {
-    if (typeof value !== "string")
-        return null;
-    const normalized = value.trim().toLowerCase();
-    return normalized ? PROVIDER_ALIASES[normalized] ?? null : null;
-}
-/**
- * Infers old sessions from the command's executable only. Arguments and parent
- * directory names must not be allowed to impersonate a different provider.
- */
-export function inferProviderIdFromCommand(value) {
-    if (typeof value !== "string")
-        return null;
-    const command = value.trim();
-    if (!command)
-        return null;
-    const match = command.match(/^(?:"([^"]+)"|'([^']+)'|(\S+))/);
-    const executablePath = match?.[1] ?? match?.[2] ?? match?.[3] ?? "";
-    const executable = executablePath.split(/[\\/]/).pop()?.replace(/\.(?:cmd|exe)$/i, "") ?? "";
-    return normalizeProviderId(executable);
-}
-/** provider 对应的 CLI 可执行文件名（Qoder 的 CLI 叫 qodercli）。 */
-export function providerCliCommand(provider) {
-    return provider === "qoder" ? "qodercli" : provider;
-}
-/** 严格判断：只接受 6 个 provider 字面量，不做别名 / 大小写归一。 */
+/** 严格判断：只接受 7 个 provider 字面量，不做别名 / 大小写归一。 */
 export function isProviderId(value) {
     return typeof value === "string" && PROVIDER_ID_SET.has(value);
 }
-export function providerDisplayName(value) {
-    if (typeof value === "string" && value.trim().toLowerCase() === "terminal")
-        return "终端";
-    const provider = normalizeProviderId(value);
-    if (provider)
-        return PROVIDER_LABELS[provider];
-    return typeof value === "string" && value.trim() ? value.trim() : "AI";
-}
 // Claude/Codex paths match the existing Android BrandLogos source (simple-icons,
 // CC0). Grok uses xAI's mark path already shipped by the Web new-session view.
 // Claude keeps the official Anthropic orange instead of inheriting Wand accent.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@co0ontty/wand",
-  "version": "4.82.0",
+  "version": "4.83.1",
   "description": "A web console for Claude Code, Codex, OpenCode, and other local CLI tools.",
   "type": "module",
   "bin": {
@@ -13,6 +13,7 @@
   },
   "files": [
     "dist",
+    "skills/wand-decision",
     "browser-extension",
     "scripts/install-render-binary.js",
     "scripts/stage-render-binaries.js"
@@ -21,7 +22,7 @@
   "scripts": {
     "generate:web-assets": "node scripts/generate-web-assets.js",
     "build": "node scripts/check-node-version.js && rm -rf dist && node scripts/bundle-tailwind.js && node scripts/bundle-xterm.js && node scripts/bundle-qrcode.js && node scripts/bundle-browser.js && npm run generate:web-assets && tsc -p tsconfig.json && npm run build:copy-content && node scripts/check-bundle-budget.js && (npm run build:render-bin || echo '[wand] WARNING: build:render-bin failed; dist/native/ has no wand-render (run: npm run build:render-bin)' >&2) && node scripts/stamp-build-info.js && node scripts/fix-dist-permissions.js",
-    "build:copy-content": "cp -r src/web-ui/content dist/web-ui/ && node scripts/minify-dist-content.js",
+    "build:copy-content": "cp -r src/web-ui/content dist/web-ui/ && cp src/decision-worker.py dist/decision-worker.py && node scripts/minify-dist-content.js",
     "build:render-bin": "node scripts/stage-render-binaries.js --all",
     "build:render-native": "cargo build --release --manifest-path render/Cargo.toml -p wand-renderd",
     "build:structured-render-native": "cargo build --release --manifest-path render/Cargo.toml -p wand-structured-renderd",

package/skills/wand-decision/SKILL.md

@@ -0,0 +1,61 @@
+---
+name: wand-decision
+description: Use Wand's local, offline decision model for bounded classification, candidate selection, rubric scoring, or yes/no judgments over supplied evidence. Useful for quick semantic checks and small repeated judgments, not open-ended reasoning, execution authorization, or authoritative verification.
+license: Apache-2.0
+compatibility: Wand-managed structured CLI session with command execution permission, Node.js, and an enabled local decision runtime.
+---
+
+# Wand local decisions
+
+This is an optional inference tool, not a replacement for your main model. Only call it when a small typed judgment helps the user's task. Do not force it into every turn. Its decision quality is experimental: a local Chinese routing evaluation scored 24/44 and some wrong answers had near-1 probabilities. High probability is not correctness or permission.
+
+## Call the shared HTTP service
+
+Use the bundled `scripts/decide.mjs`, resolved relative to this skill directory:
+
+```sh
+node /absolute/path/to/this/skill/scripts/decide.mjs --stdin <<'JSON'
+{
+  "state": "The customer was billed twice and requests a refund.",
+  "questions": {
+    "department": {
+      "type": "choice",
+      "instructions": "Which department handles this request?",
+      "criteria": {
+        "billing": "Payments, invoices and refunds",
+        "technical": "Software faults and outages",
+        "none": "No matching department or insufficient information"
+      }
+    }
+  }
+}
+JSON
+```
+
+Replace the example skill path with the actual installed path. `--status` checks whether the shared service is enabled and ready without loading the model. The helper calls `wand decide` through the current session's bound executable and uses HTTP; it does not load Python or model weights in the CLI process.
+
+Do not print, copy, persist, or inspect `WAND_DECISION_*` credential values. Never place a token in command arguments, SKILL.md, generated code, or the chat. The runtime binds the service and a short-lived inference-only capability; no caller-selected employee/config overrides are accepted. If unbound, ask to run through an enabled Wand structured session; never read admin passwords or another session's credentials. Installing this skill does not grant shell/MCP/network permissions: when command execution is disallowed, do not bypass that restriction.
+
+## Contract
+
+Input is a JSON object with exactly `state` and `questions`:
+
+- `state`: relevant text, JSON object, or list. Supply evidence, not a demand for a predetermined answer. No automatic access to files, private employee knowledge, history, or external facts.
+- `questions`: 1–8 named questions. Each has `type`, `instructions` (nonempty, at most500 characters), and the appropriate `criteria`.
+- `choice`: 2–8 unique labels mapped to short descriptions, or a list of labels. Labels at most80 characters, descriptions at most300. Prefer meaningful labels; map them back to stable IDs in your own code. Include an explicit no-match option when appropriate.
+- `score`: 2–8 ordered, concrete rubric descriptions. The result is an expected zero-based level, not a newly generated rating scale.
+- `noul`: a yes/no proposition, with optional `criteria` keyed only `false`/`true`. Returns P(true); a value near0.5 is uncertainty, not medium intensity.
+
+One request can ask independent questions together; they do not see one another's answers. Maximum body32KiB. The multilingual model's **1024-token limit includes state, instructions and options per question**; character limits do not guarantee token fit. Keep inputs much shorter than a chat transcript. Overlength state, instructions/options that would be truncated, or indistinguishable options are rejected rather than silently used.
+
+Output includes `answers`, per-option probabilities where applicable, `usage`, `runtime`, and `experimental: true`. It does not generate prose, rationales, code, arbitrary strings, or new candidate values. Do not invent an explanation the model did not return. Confidence summarizes a distribution and is not necessarily calibrated for your task or compatible with Jev's formula.
+
+## Use the result safely
+
+- Validate that answers belong to the supplied options and make sense against the actual evidence.
+- Do not use this model to approve permissions, destructive commands, credentials, payments, release/publish actions, or automatic task dispatch. Existing user authorization and project rules remain authoritative.
+- Hard facts, exact comparisons and eligibility checks belong in ordinary code. Complex planning, ambiguous requests and unsupported topics belong with the main model or the user.
+- Do not automatically supply another employee's private knowledge, whole files or unneeded sensitive data. Only provide the minimum evidence you are already authorized to use.
+- For `CONTEXT_LIMIT`, `QUESTION_LIMIT` or `OPTIONS_COLLAPSED`, reduce the input while retaining the relevant constraints. Do not drop negations or the actual requested action just to fit.
+- For `UNAVAILABLE`, `UNBOUND`, authorization failures, `BUSY`, rate limits or timeouts, state the limitation and continue without this auxiliary judgment or ask the user. No endless retries and no cloud fallback.
+- To claim the service was used, require an actual successful tool response. Skill discovery alone is not a successful inference.

package/skills/wand-decision/scripts/decide.mjs

@@ -0,0 +1,16 @@
+import { spawn } from "node:child_process";
+import { isAbsolute } from "node:path";
+
+const cli = process.env.WAND_DECISION_CLI;
+const node = process.env.WAND_DECISION_NODE;
+const args = process.argv.slice(2);
+if (!cli || !node || !isAbsolute(cli) || !isAbsolute(node)
+  || !process.env.WAND_DECISION_TOKEN || args.length !== 1 || !["--stdin", "--status"].includes(args[0])) {
+  process.stderr.write("wand-decision: call --stdin or --status inside an enabled Wand structured session; no admin credential fallback.\n");
+  process.exitCode = 1;
+} else {
+  const child = spawn(node, [...(cli.endsWith(".ts") ? ["--import", "tsx"] : []), cli, "decide", ...args], { stdio: "inherit" });
+  child.on("error", () => { process.stderr.write("wand-decision: client could not start.\n"); process.exitCode = 1; });
+  child.on("exit", (code) => { process.exitCode = code ?? 1; });
+  for (const signal of ["SIGINT", "SIGTERM"]) process.on(signal, () => child.kill(signal));
+}