@co0ontty/wand 4.89.0 → 4.89.2-beta.g9f64cf7

package/dist/employee-text.js

@@ -0,0 +1,124 @@
+import { normalizeContext } from "@earendil-works/pi-ai";
+import { coreHarnessRuntime, loadPiAi, resolveCoreModel } from "./harness-engine.js";
+import { agentKey } from "./ai-team-types.js";
+import { getDefaultModelForProvider } from "./config.js";
+import { freeModelOrder, resolveModelGroupModels } from "./model-groups.js";
+import { isOpenRouterFreeSelector, OPENROUTER_FREE_ROUTING } from "./openrouter-free-models.js";
+import { providerCliInstalled } from "./session-provider.js";
+import { thinkingEffortToPiLevel } from "./structured-provider-common.js";
+import { classifyStructuredFailure } from "./structured-failure.js";
+/** Expand each configured slot once; equivalent leaves execute once in first occurrence order. */
+export function employeeTextCandidates(agents, config) {
+    const seen = new Set();
+    return agents.flatMap((candidate, index) => {
+        let models;
+        try {
+            const model = candidate.model === "default" || !candidate.model ? getDefaultModelForProvider(config, candidate.provider) : candidate.model;
+            models = resolveModelGroupModels(config.modelGroups, candidate.provider, model, { preferDefault: !candidate.model || candidate.model === "default" });
+        }
+        catch {
+            return [];
+        } // A removed/empty group has accepted no input and is unavailable.
+        return models.flatMap(model => {
+            const agent = { ...candidate, model, engine: candidate.engine ?? "cli" };
+            const key = agentKey(agent);
+            if (seen.has(key))
+                return [];
+            seen.add(key);
+            return [{ agent, index }];
+        });
+    });
+}
+export async function abortableEmployeeText(pending, signal) {
+    let abort;
+    try {
+        return await Promise.race([pending, new Promise((_resolve, reject) => {
+                abort = () => reject(signal.reason);
+                signal.addEventListener("abort", abort, { once: true });
+                if (signal.aborted)
+                    abort();
+            })]);
+    }
+    finally {
+        if (abort)
+            signal.removeEventListener("abort", abort);
+    }
+}
+export class EmployeeCandidateRejected extends Error {
+    failure;
+    constructor(failure) {
+        super("SDK 候选在执行前被拒绝。");
+        this.failure = failure;
+    }
+}
+function sdkText(message, status) {
+    if (message.stopReason === "error") {
+        const rejection = status === 401 || status === 403 ? "authentication"
+            : status === 402 ? "quota" : status === 429 ? "rate-limit" : status === 404 ? "model-unavailable" : undefined;
+        const progressed = message.content.length > 0 || Object.values(message.usage.cost).some(value => value > 0)
+            || message.usage.input > 0 || message.usage.output > 0;
+        const failure = classifyStructuredFailure({ state: { blocks: [], result: "", sessionId: null }, exitCode: 1,
+            signal: null, stderr: "", primaryError: "SDK 文字生成失败。", rejection,
+            inputAccepted: rejection && !progressed ? false : undefined }, { progress: progressed });
+        if (failure?.retryable)
+            throw new EmployeeCandidateRejected(failure);
+        throw new Error("SDK文字生成失败。");
+    }
+    if (message.stopReason === "aborted" || message.content.some(part => part.type === "toolCall"))
+        throw new Error("SDK文字生成失败。");
+    return message.content.filter(part => part.type === "text").map(part => part.text).join("");
+}
+/** Prepare a configured, no-tool adapter before any user input is accepted. */
+export async function prepareEmployeeTextCandidate(deps, agent, request, signal) {
+    signal.throwIfAborted();
+    const config = deps.config;
+    if (agent.engine !== "sdk") {
+        if (!providerCliInstalled(agent.provider) || isOpenRouterFreeSelector(agent.model))
+            throw new Error("CLI候选不可用。");
+        const { callCliAiText, assertGeminiTextCapability } = await import("./git-quick-commit.js");
+        if (agent.provider === "gemini")
+            assertGeminiTextCapability();
+        // One adapter call, never re-enter the candidate chain.
+        return async () => {
+            signal.throwIfAborted();
+            return callCliAiText(request, config.defaultCwd ?? process.cwd(), "", { provider: agent.provider, model: agent.model,
+                thinkingEffort: agent.thinkingEffort, inheritEnv: config.inheritEnv, signal, deadline: Date.now() + 20_000 });
+        };
+    }
+    if (agent.provider !== "pi")
+        throw new Error("Wand Agent只支持Pi provider。");
+    const context = normalizeContext({ systemPrompt: request.system,
+        messages: [{ role: "user", content: request.prompt, timestamp: Date.now() }], tools: [] });
+    const reasoning = thinkingEffortToPiLevel(agent.thinkingEffort ?? "off");
+    if (isOpenRouterFreeSelector(agent.model)) {
+        if (!deps.free)
+            throw new Error("Wand 免费分组尚未连接执行服务。");
+        const order = freeModelOrder(config.modelGroups);
+        const checked = await deps.free.resolveForCall(agent.model, signal, order.length ? { allowedSelectors: order } : {});
+        const { streamSimple } = await import("@earendil-works/pi-ai/api/openai-completions");
+        return async () => {
+            signal.throwIfAborted();
+            let status;
+            const message = await streamSimple(checked.model, context, { apiKey: checked.apiKey, signal,
+                maxRetries: 0, fetch: async (input, init) => { const response = await fetch(input, init); status = response.status; return response; },
+                maxTokens: Math.min(4096, checked.model.maxTokens), reasoning: reasoning === "off" ? undefined : reasoning,
+                toolChoice: "none", onPayload: payload => ({ ...payload, provider: OPENROUTER_FREE_ROUTING }) }).result();
+            const text = sdkText(message, status);
+            deps.onUsage?.({ inputTokens: message.usage.input, outputTokens: message.usage.output, model: `${checked.model.provider}/${checked.model.id}` });
+            return text;
+        };
+    }
+    const resolved = await resolveCoreModel(config.harness, agent.model, { cwd: config.defaultCwd });
+    if (!resolved)
+        throw new Error("Wand Agent模型不可用。");
+    const runtime = await coreHarnessRuntime(config.harness), pi = await loadPiAi();
+    const level = pi.clampThinkingLevel(resolved.model, (reasoning ?? "off"));
+    return async () => {
+        signal.throwIfAborted();
+        const message = await runtime.streamSimple(resolved.model, context, { signal, maxRetries: 0, maxTokens: Math.min(4096, resolved.model.maxTokens),
+            reasoning: level === "off" ? undefined : level, toolChoice: "none" }).result();
+        const text = sdkText(message);
+        deps.onUsage?.({ inputTokens: message.usage.input, outputTokens: message.usage.output, model: `${resolved.model.provider}/${resolved.model.id}` });
+        return text;
+    };
+}

package/dist/fixed-employee-avatar.d.ts

@@ -0,0 +1,19 @@
+export declare const FIXED_EMPLOYEE_AVATARS: readonly [{
+    readonly id: "e_wand_default";
+    readonly systemKey: "wand-default";
+    readonly avatar: "plush-cat:v1:silver";
+}, {
+    readonly id: "e_wand_ops";
+    readonly systemKey: "wand-ops";
+    readonly avatar: "plush-cat:v1:orange";
+}];
+/** Stable identity pairs only: names and source employees never determine policy. */
+export declare function fixedEmployeeAvatar(identity: {
+    id?: string | null;
+    systemKey?: string | null;
+}): string | null;
+/** The avatar exception does not change any other built-in employee's edit policy. */
+export declare function isFixedAvatarEmployee(identity: {
+    id?: string | null;
+    systemKey?: string | null;
+}): boolean;

package/dist/fixed-employee-avatar.js

@@ -0,0 +1,13 @@
+import { DEFAULT_EMPLOYEE_ID, DEFAULT_EMPLOYEE_KEY, SYSTEM_EMPLOYEE_ID, SYSTEM_EMPLOYEE_KEY } from "./ai-team-types.js";
+export const FIXED_EMPLOYEE_AVATARS = [
+    { id: DEFAULT_EMPLOYEE_ID, systemKey: DEFAULT_EMPLOYEE_KEY, avatar: "plush-cat:v1:silver" },
+    { id: SYSTEM_EMPLOYEE_ID, systemKey: SYSTEM_EMPLOYEE_KEY, avatar: "plush-cat:v1:orange" },
+];
+/** Stable identity pairs only: names and source employees never determine policy. */
+export function fixedEmployeeAvatar(identity) {
+    return FIXED_EMPLOYEE_AVATARS.find((entry) => entry.id === identity.id && entry.systemKey === identity.systemKey)?.avatar ?? null;
+}
+/** The avatar exception does not change any other built-in employee's edit policy. */
+export function isFixedAvatarEmployee(identity) {
+    return fixedEmployeeAvatar(identity) !== null;
+}

package/dist/git-quick-commit.d.ts

@@ -1,3 +1,4 @@
+import { type EmployeeTextDeps } from "./employee-text.js";
 import type { AiTextRequest } from "./types.js";
 import { GitStatusResult, PushResult, QuickCommitResult, SessionProvider, SessionSnapshot, TagHeadResult } from "./types.js";
 export type QuickCommitErrorCode = "CWD_MISSING" | "NO_CWD" | "NOT_A_GIT_REPO" | "NO_COMMIT" | "NOTHING_TO_COMMIT" | "NOTHING_TO_PUSH" | "EMPTY_MESSAGE" | "EMPTY_TAG" | "EMPTY_AI_MESSAGE" | "AI_FALLBACK_FAILED" | "INVALID_AI_TAG" | "TAG_EXISTS" | "GIT_ADD_FAILED" | "GIT_DIFF_FAILED" | "GIT_COMMIT_FAILED" | "GIT_TAG_FAILED" | "CLAUDE_CLI_MISSING" | "CLAUDE_CLI_FAILED" | "CLAUDE_TIMEOUT";
@@ -26,12 +27,15 @@ export interface QuickCommitAiOptions {
     inheritEnv?: boolean;
     /** 内置「系统运维」员工的角色设定：作为系统提示前缀注入。 */
     opsPersona?: string;
-    /** CLI 降级链（按顺序）；未设置时只用 provider/model 这一次调用。 */
+    /** 员工候选链（按顺序）；未设置时只用 provider/model 这一次调用。 */
     cliCandidates?: import("./types.js").AiCliCandidate[];
-    /** 系统应用必须经员工渠道；没有可用 CLI 候选时直接失败，不退回默认 provider。 */
+    /** SDK 使用当前实例配置与现有免费分组服务，不创建其他执行渠道。 */
+    employeeText?: EmployeeTextDeps;
+    /** 系统应用必须经员工渠道；没有可用候选时直接失败，不退回默认 provider。 */
     employeeChannelOnly?: boolean;
     /** 整条候选链的时间上限；默认 CLI_CHAIN_BUDGET_MS。第一条消息里的调用要短得多。 */
     budgetMs?: number;
+    signal?: AbortSignal;
 }
 export declare class QuickCommitError extends Error {
     readonly code: QuickCommitErrorCode;
@@ -47,11 +51,16 @@ export interface CommitInputOptions {
     iterationDigest?: string;
     includeDiff?: boolean;
 }
+type CliAiTextOptions = QuickCommitAiOptions & {
+    deadline?: number;
+};
+export declare function assertGeminiTextCapability(): void;
+export declare function callCliAiText(request: AiTextRequest, cwd: string, language: string, opts: CliAiTextOptions): Promise<string>;
 /** 角色设定走系统提示前缀；任务自己的输出格式与约束必须排在后面。 */
 export declare function withOpsPersona(request: AiTextRequest, persona?: string): AiTextRequest;
 /**
- * Run a lightweight AI request through the system employee's CLI chain.
- * 所有 Wand 自有文本调用都走本机已安装的 CLI，没有任何直连 API 分支。
+ * Run a lightweight AI request through the system employee's configured chain.
+ * provider 与引擎由候选决定；SDK 与 CLI 均保留各自适配和身份。
  * parseOutput 在候选链内解析/校验结果；失败后继续下一条，而非提前宣布成功。
  */
 export declare function callConfiguredAiText(request: AiTextRequest, cwd: string, language: string, opts: QuickCommitAiOptions): Promise<string>;

package/dist/git-quick-commit.js

@@ -1,5 +1,9 @@
-import { existsSync } from "node:fs";
+import { existsSync, mkdtempSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { spawn } from "node:child_process";
+import { abortableEmployeeText, prepareEmployeeTextCandidate } from "./employee-text.js";
 import { buildChildEnv } from "./env-utils.js";
 import { buildLanguageDirective } from "./language-prompt.js";
 import { isSessionProvider, providerCliInstalled } from "./session-provider.js";
@@ -306,7 +310,7 @@ async function callClaudeText(request, cwd, language, opts) {
     const stdout = await runCliText("claude", args, request.prompt, {
         cwd,
         timeoutMs: cliTextTimeoutMs(CLAUDE_MESSAGE_TIMEOUT_MS, opts),
-        inheritEnv: opts.inheritEnv,
+        inheritEnv: opts.inheritEnv, signal: opts.signal,
     });
     const text = stdout.trim();
     if (!text)
@@ -538,6 +542,8 @@ function buildGrokTextArgs(request, opts, allowTools = false) {
     args.push(...systemPromptArgsFrom("grok", request.system));
     if (allowTools)
         args.push("--always-approve");
+    else
+        args.push("--tools", "", "--disallowed-tools", "run_terminal_cmd,read_file,search_replace,grep,list_dir,web_search,web_fetch,todo_write,task,Agent", "--deny", "MCPTool", "--disable-web-search", "--no-subagents");
     return args;
 }
 /**
@@ -568,6 +574,8 @@ function buildQoderTextArgs(request, opts, allowTools = false) {
     args.push(...systemPromptArgsFrom("qoder", request.system));
     if (allowTools)
         args.push("--permission-mode", "bypass_permissions");
+    else
+        args.push("--tools", "", "--strict-mcp-config");
     return args;
 }
 /** provider 自己的系统提示开关 + 规则文本；没有开关的 provider 返回空。 */
@@ -583,35 +591,48 @@ function contentWithSystemPrompt(provider, request) {
     return systemPromptFlag(provider) ? request.prompt : composeSystemFallback(request.system, request.prompt);
 }
 function runCliText(command, args, prompt, opts) {
+    opts.signal?.throwIfAborted();
     return new Promise((resolve, reject) => {
+        const baseEnv = buildChildEnv(opts.inheritEnv !== false);
         const child = spawn(command, args, {
             cwd: opts.cwd,
-            env: buildChildEnv(opts.inheritEnv !== false),
+            env: opts.env ? opts.env(baseEnv) : baseEnv,
             stdio: ["pipe", "pipe", "pipe"],
         });
         let stdout = "";
         let stderr = "";
         let settled = false;
+        const cancelled = () => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            child.kill("SIGTERM");
+            reject(opts.signal?.reason ?? new Error("AI 文本请求已取消。"));
+        };
+        const cleanup = () => { clearTimeout(timeout); opts.signal?.removeEventListener("abort", cancelled); };
         const timeout = setTimeout(() => {
             settled = true;
+            opts.signal?.removeEventListener("abort", cancelled);
             child.kill("SIGTERM");
             reject(new QuickCommitError(`${command} 调用超时。`, "CLAUDE_TIMEOUT"));
         }, opts.timeoutMs);
+        opts.signal?.addEventListener("abort", cancelled, { once: true });
         child.stdout?.on("data", (chunk) => { stdout += chunk.toString(); });
         child.stderr?.on("data", (chunk) => { stderr += chunk.toString(); });
         child.on("error", (error) => {
             if (settled)
                 return;
             settled = true;
-            clearTimeout(timeout);
+            cleanup();
             const code = error.code === "ENOENT" ? "CLAUDE_CLI_MISSING" : "CLAUDE_CLI_FAILED";
             reject(new QuickCommitError(error.code === "ENOENT" ? `未找到 ${command} CLI。` : `${command} CLI 失败：${error.message}`, code));
         });
         child.on("close", (code) => {
+            cleanup();
             if (settled)
                 return;
             settled = true;
-            clearTimeout(timeout);
             if (code === 0) {
                 resolve(stdout);
                 return;
@@ -632,7 +653,7 @@ function runCliText(command, args, prompt, opts) {
             if (settled || !expectsStdin)
                 return;
             settled = true;
-            clearTimeout(timeout);
+            cleanup();
             child.kill("SIGTERM");
             reject(new QuickCommitError(`${command} CLI stdin failed: ${error.code ?? "write error"}`, "CLAUDE_CLI_FAILED"));
         });
@@ -654,7 +675,7 @@ async function callCodexText(request, cwd, opts) {
     const stdout = await runCliText("codex", args, contentWithSystemPrompt("codex", request), {
         cwd,
         timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts),
-        inheritEnv: opts.inheritEnv,
+        inheritEnv: opts.inheritEnv, signal: opts.signal,
     });
     const text = extractCodexText(stdout);
     if (!text) {
@@ -663,7 +684,8 @@ async function callCodexText(request, cwd, opts) {
     return text;
 }
 async function callOpenCodeText(request, cwd, opts) {
-    const args = ["run", "--format", "json"];
+    const agent = `wand-text-${randomUUID()}`;
+    const args = ["run", "--format", "json", "--pure", "--agent", agent];
     const model = opts.model?.trim();
     if (model && model !== "default")
         args.push("--model", model);
@@ -673,7 +695,18 @@ async function callOpenCodeText(request, cwd, opts) {
     const stdout = await runCliText("opencode", args, contentWithSystemPrompt("opencode", request), {
         cwd,
         timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts),
-        inheritEnv: opts.inheritEnv,
+        inheritEnv: opts.inheritEnv, signal: opts.signal,
+        // A dedicated per-invocation agent and scalar deny replace rather than merge
+        // wildcard/specific allow rules. Preserve inherited provider/model config.
+        env: base => {
+            const configured = base.OPENCODE_CONFIG_CONTENT ? JSON.parse(base.OPENCODE_CONFIG_CONTENT) : {};
+            if (!configured || typeof configured !== "object" || Array.isArray(configured))
+                throw new Error("OpenCode 内联配置无效。");
+            return { ...base, OPENCODE_PERMISSION: JSON.stringify("deny"), OPENCODE_CONFIG_CONTENT: JSON.stringify({
+                    ...configured, permission: "deny", autoupdate: false, share: "disabled",
+                    agent: { ...configured.agent, [agent]: { mode: "primary", permission: "deny", prompt: "Return only the requested text. Do not use tools." } },
+                }) };
+        },
     });
     const text = extractOpenCodeText(stdout);
     if (!text)
@@ -684,7 +717,7 @@ async function callGrokText(request, cwd, opts) {
     const stdout = await runCliText("grok", buildGrokTextArgs(request, opts), "", {
         cwd,
         timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts),
-        inheritEnv: opts.inheritEnv,
+        inheritEnv: opts.inheritEnv, signal: opts.signal,
     });
     const text = extractGrokText(stdout);
     if (!text)
@@ -695,7 +728,7 @@ async function callQoderText(request, cwd, opts) {
     const stdout = await runCliText("qodercli", buildQoderTextArgs(request, opts), "", {
         cwd,
         timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts),
-        inheritEnv: opts.inheritEnv,
+        inheritEnv: opts.inheritEnv, signal: opts.signal,
     });
     const text = extractQoderText(stdout);
     if (!text)
@@ -704,25 +737,42 @@ async function callQoderText(request, cwd, opts) {
 }
 async function callPiText(request, cwd, opts) {
     const stdout = await runCliText("pi", buildPiTextArgs(request, opts), "", {
-        cwd, timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts), inheritEnv: opts.inheritEnv,
+        cwd, timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts), inheritEnv: opts.inheritEnv, signal: opts.signal,
     });
     const text = extractPiText(stdout);
     if (!text)
         throw new QuickCommitError("Pi 返回了空的 commit message。", "EMPTY_AI_MESSAGE");
     return text;
 }
+export function assertGeminiTextCapability() {
+    // Gemini ignores supplemental admin policy when a central policy exists.
+    // Refuse that unsupported text-only path rather than launching without deny.
+    const systemPolicies = process.platform === "darwin" ? "/Library/Application Support/GeminiCli/policies"
+        : process.platform === "win32" ? join(process.env.ProgramData ?? "C:\\ProgramData", "gemini-cli", "policies") : "/etc/gemini-cli/policies";
+    if (existsSync(systemPolicies) && readdirSync(systemPolicies).some(file => file.endsWith(".toml"))) {
+        throw new QuickCommitError("Gemini 中央策略阻止注入纯文本工具边界，请配置可用的文本候选。", "AI_FALLBACK_FAILED");
+    }
+}
 async function callGeminiText(request, cwd, opts) {
-    const stdout = await runCliText("gemini", buildGeminiTextArgs(opts), contentWithSystemPrompt("gemini", request), {
-        cwd,
-        timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts),
-        inheritEnv: opts.inheritEnv,
-    });
-    const text = extractGeminiText(stdout);
-    if (!text)
-        throw new QuickCommitError("Gemini 返回了空的 commit message。", "EMPTY_AI_MESSAGE");
-    return text;
+    assertGeminiTextCapability();
+    const root = mkdtempSync(join(tmpdir(), "wand-gemini-text-"));
+    try {
+        const policy = join(root, "text-only.toml");
+        writeFileSync(policy, '[[rule]]\ntoolName = "*"\ndecision = "deny"\npriority = 999\n', { mode: 0o600 });
+        const args = [...buildGeminiTextArgs(opts), "--admin-policy", policy, "--extensions", "none", "--allowed-mcp-server-names", ""];
+        const stdout = await runCliText("gemini", args, contentWithSystemPrompt("gemini", request), {
+            cwd, timeoutMs: cliTextTimeoutMs(CODEX_MESSAGE_TIMEOUT_MS, opts), inheritEnv: opts.inheritEnv, signal: opts.signal,
+        });
+        const text = extractGeminiText(stdout);
+        if (!text)
+            throw new QuickCommitError("Gemini 返回了空的 commit message。", "EMPTY_AI_MESSAGE");
+        return text;
+    }
+    finally {
+        rmSync(root, { recursive: true, force: true });
+    }
 }
-async function callCliAiText(request, cwd, language, opts) {
+export async function callCliAiText(request, cwd, language, opts) {
     const provider = defaultProvider(opts.provider);
     if (provider === "codex") {
         return callCodexText(request, cwd, opts);
@@ -774,28 +824,56 @@ function singleCandidate(opts) {
  * 只有一条候选时保持原行为（错误原样抛出，不摘要）。
  * 仅用于一次性文本生成；执行工具的任务不能使用这条无条件重试路径。
  */
-async function callCliCandidates(request, cwd, language, opts, parseOutput) {
+async function callTextCandidates(request, cwd, language, opts, parseOutput) {
+    opts.signal?.throwIfAborted();
     const { resolveModelGroupModels } = await import("./model-groups.js");
+    const modelGroups = opts.modelGroups ?? opts.employeeText?.config.modelGroups;
+    const seen = new Set();
     const chain = (opts.cliCandidates?.length ? opts.cliCandidates : [singleCandidate(opts)])
-        .flatMap((candidate) => resolveModelGroupModels(opts.modelGroups, candidate.provider, candidate.model, { preferDefault: !candidate.model || candidate.model === "default" })
-        .map((model) => ({ ...candidate, model: model || undefined })));
+        .flatMap((candidate) => resolveModelGroupModels(modelGroups, candidate.provider, candidate.model, { preferDefault: !candidate.model || candidate.model === "default" })
+        .map((model) => ({ ...candidate, model: model || undefined })))
+        .filter(candidate => {
+        const key = JSON.stringify([candidate.provider, candidate.engine ?? "cli", candidate.model ?? "", candidate.thinkingEffort ?? opts.thinkingEffort]);
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
     if (opts.employeeChannelOnly && !opts.cliCandidates?.length) {
-        throw new QuickCommitError("系统员工没有可用的 CLI 候选，已跳过 Wand Agent。", "AI_FALLBACK_FAILED");
+        throw new QuickCommitError("系统员工没有可用的执行候选。", "AI_FALLBACK_FAILED");
     }
     const deadline = Date.now() + Math.max(1, opts.budgetMs ?? CLI_CHAIN_BUDGET_MS);
-    if (chain.length === 1) {
-        return parseOutput(await callCliAiText(request, cwd, language, { ...candidateOptions(opts, chain[0]), deadline }));
-    }
-    const installed = chain.filter((candidate) => providerCliInstalled(candidate.provider));
+    const call = async (candidate) => {
+        if (candidate.engine !== "sdk")
+            return callCliAiText(request, cwd, language, { ...candidateOptions(opts, candidate), deadline });
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(new QuickCommitError("Wand Agent 调用超时。", "CLAUDE_TIMEOUT")), Math.max(1, deadline - Date.now()));
+        const signal = opts.signal ? AbortSignal.any([opts.signal, controller.signal]) : controller.signal;
+        try {
+            const generate = await abortableEmployeeText(prepareEmployeeTextCandidate({
+                ...opts.employeeText,
+                config: { ...opts.employeeText?.config, defaultCwd: cwd, inheritEnv: opts.inheritEnv ?? opts.employeeText?.config.inheritEnv, modelGroups },
+            }, { ...candidate, model: candidate.model ?? "default", thinkingEffort: candidate.thinkingEffort ?? opts.thinkingEffort ?? "off", mode: "default", kind: "structured" }, request, signal), signal);
+            signal.throwIfAborted();
+            return await abortableEmployeeText(generate(), signal);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+    if (chain.length === 1)
+        return parseOutput(await call(chain[0]));
+    const installed = chain.filter((candidate) => candidate.engine === "sdk" || providerCliInstalled(candidate.provider));
     const attempts = installed.length ? installed : chain;
     const errors = [];
     for (const candidate of attempts) {
+        opts.signal?.throwIfAborted();
         if (Date.now() >= deadline) {
             errors.push("已超过等待上限");
             break;
         }
         try {
-            const text = await callCliAiText(request, cwd, language, { ...candidateOptions(opts, candidate), deadline });
+            const text = await call(candidate);
             const result = await parseOutput(text);
             if (candidate !== attempts[0]) {
                 console.info(`[SystemAi] 候选 ${chain.indexOf(candidate) + 1}/${chain.length} (${candidate.provider}) 成功`);
@@ -803,16 +881,17 @@ async function callCliCandidates(request, cwd, language, opts, parseOutput) {
             return result;
         }
         catch (error) {
+            opts.signal?.throwIfAborted();
             errors.push(`${candidate.provider}: ${getGitErrorMessage(error)}`);
             // 不记录提示词、路径、CLI 原始响应或可能带鉴权信息的错误正文。
             const code = error instanceof QuickCommitError ? error.code : "INVALID_AI_RESULT";
             console.warn(`[SystemAi] 候选 ${chain.indexOf(candidate) + 1}/${chain.length} (${candidate.provider}) 失败: ${code}`);
         }
     }
-    throw new QuickCommitError(`所有 CLI 候选均失败：${errors.join("；")}`, "AI_FALLBACK_FAILED");
+    throw new QuickCommitError(`所有执行候选均失败：${errors.join("；")}`, "AI_FALLBACK_FAILED");
 }
 export async function callConfiguredAiText(request, cwd, language, opts, parseOutput = (raw) => raw) {
-    return callCliCandidates(withOpsPersona(request, opts.opsPersona), cwd, language, opts, parseOutput);
+    return callTextCandidates(withOpsPersona(request, opts.opsPersona), cwd, language, opts, parseOutput);
 }
 /** Read the unstaged + staged tree without touching the index. */
 async function collectWorkingTreeDiff(cwd) {

package/dist/local-model-setup.d.ts

@@ -3,6 +3,7 @@ import type { DecisionService } from "./decision-service.js";
 import { type ModelFile } from "./laya-model-manifest.js";
 import { runModelSetup } from "./model-setup-process.js";
 import type { SpeechService } from "./speech-service.js";
+import { type SpeechSupport } from "./speech-support.js";
 import type { LocalModelKind, LocalModelsStatus } from "./local-model-types.js";
 export interface LocalModelSetupDeps {
     configDir: string;
@@ -17,6 +18,7 @@ export interface LocalModelSetupDeps {
     run?: typeof runModelSetup;
     checkRuntime?: (python: string, signal: AbortSignal) => Promise<boolean>;
     timeoutMs?: number;
+    speechSupport?: (runtimeAvailable: boolean) => Promise<SpeechSupport>;
 }
 /** Deployment jobs only; existing inference owners retain their protocols, rate limits and capabilities. */
 export declare class LocalModelSetupService {
@@ -28,14 +30,18 @@ export declare class LocalModelSetupService {
     private readonly jobs;
     private sequence;
     private disposed;
+    private speechEnableRevision;
+    private supportCache;
     constructor(deps: LocalModelSetupDeps);
     private supported;
     private managedModel;
     private layaModel;
     private python;
     status(): Promise<LocalModelsStatus>;
+    private speechSupport;
+    setSpeechEnabled(enabled: boolean): Promise<void>;
     private parse;
-    start(kind: LocalModelKind, action: "download" | "initialize", raw: unknown): void;
+    start(kind: LocalModelKind, action: "download" | "initialize" | "activate", raw: unknown): void;
     private update;
     private work;
     private checkRuntime;