@co0ontty/wand 4.89.5 → 4.90.0

package/dist/server-employee-routes.js

@@ -1,31 +1,35 @@
 import { employeeAvatarValue, isFixedAvatarEmployee } from "./fixed-employee-avatar.js";
+import { HR_EMPLOYEE_KEY } from "./hr-employee-identity.js";
 import { randomUUID } from "node:crypto";
 import { AI_TEAM_MAX_CANDIDATES, SILICON_EMPLOYEE_AVATAR_MAX_CHARS, agentKey, isBuiltinSiliconEmployee, parseSiliconEmployeeTags, siliconEmployeeTags, } from "./ai-team-types.js";
 import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute } from "./express-async.js";
-import { bodyObject, sendRouteError, text } from "./server-request.js";
+import { parseStoredAvatar } from "./avatar-input.js";
+import { bodyObject, boundedText, sendRouteError, text } from "./server-request.js";
 import { parseTaskAgent } from "./server-task-routes.js";
 import { resolveSystemAiContext } from "./session-ai-context.js";
 import { employeeCliAvailable } from "./silicon-employee-dispatch.js";
 import { EMPLOYEE_CREATION_DEFAULTS_PREF, resolveSiliconEmployeeDefaults, } from "./silicon-employee-defaults.js";
 import { availableEmployeeProviders, generateSiliconEmployeeDraft, SiliconEmployeeDraftError, validateStructuredEmployeeDraft, } from "./silicon-employee-draft.js";
 import { SESSION_PROVIDERS } from "./session-provider.js";
-import { parsePlushAvatar, parsePlushCatAvatar } from "./plush-avatar.js";
 import { DEFAULT_WAND_TASK_AGENT_KIND } from "./task-types.js";
 import { EMPLOYEE_KNOWLEDGE_MAX_ENTRIES } from "./employee-knowledge-types.js";
-/** 员工起草没有会话上下文，按「默认 provider」解析，与任务标题 / 提示词优化一致。 */
-function employeeDraftAiOptions(storage, config, free) {
+/** Recruitment uses HR’s own ordered candidates and persona, never the ops chain. */
+export function employeeDraftAiOptions(storage, config, free) {
     if (!config)
-        return {};
+        throw new Error("招聘需要服务端 AI 配置。");
+    const hr = storage.getSystemSiliconEmployee(HR_EMPLOYEE_KEY);
+    if (!hr)
+        throw new Error("系统 HR 嘟嘟尚未初始化，请重启服务后重试。");
     const provider = config.defaultProvider ?? "claude";
-    return resolveSystemAiContext({
-        provider,
-        structuredState: undefined,
-        runner: undefined,
-        command: provider === "qoder" ? "qodercli" : provider,
-        selectedModel: null,
-        thinkingEffort: config.defaultThinkingEffort,
-    }, config, storage.getSystemSiliconEmployee(), free);
+    return { ...resolveSystemAiContext({
+            provider,
+            structuredState: undefined,
+            runner: undefined,
+            command: provider === "qoder" ? "qodercli" : provider,
+            selectedModel: null,
+            thinkingEffort: config.defaultThinkingEffort,
+        }, config, hr, free), opsPersona: hr.prompt };
 }
 function sendEmployeeError(res, error, context) {
     const message = getErrorMessage(error, "硅基员工操作失败。");
@@ -50,30 +54,8 @@ function rejectSystemEmployeeMutation(existing, action) {
         return;
     throw new Error(`「${existing.name}」是 Wand 内置员工，不能${action}。`);
 }
-function boundedText(value, label, min, max) {
-    const result = text(value);
-    if (result.length < min)
-        throw new Error(`${label}不能为空。`);
-    if (result.length > max)
-        throw new Error(`${label}不能超过 ${max} 个字符。`);
-    return result;
-}
 function parseAvatar(value, name) {
-    if (value !== undefined && value !== null && typeof value !== "string") {
-        throw new Error(`员工「${name}」的头像格式无效。`);
-    }
-    const avatar = text(value);
-    if (!avatar || /^cat:\d{1,2}$/.test(avatar))
-        return avatar;
-    if (parsePlushAvatar(avatar) || parsePlushCatAvatar(avatar))
-        return avatar;
-    if (!/^data:image\/(png|jpeg|webp);base64,[A-Za-z0-9+/=]+$/.test(avatar)) {
-        throw new Error(`员工「${name}」的头像格式无效。`);
-    }
-    if (avatar.length > SILICON_EMPLOYEE_AVATAR_MAX_CHARS) {
-        throw new Error(`员工「${name}」的头像太大。`);
-    }
-    return avatar;
+    return parseStoredAvatar(value, `员工「${name}」`, SILICON_EMPLOYEE_AVATAR_MAX_CHARS);
 }
 /** Other built-ins keep profile locks; the two stable cat identities lock only avatar. */
 const SYSTEM_EMPLOYEE_LOCKED_FIELDS = [
@@ -90,7 +72,7 @@ export function parseSystemEmployeeAgents(value, existing) {
     const body = bodyObject(value);
     for (const field of SYSTEM_EMPLOYEE_LOCKED_FIELDS.filter((field) => !isFixedAvatarEmployee(existing) || field.key === "avatar")) {
         const incoming = body[field.key];
-        if (incoming === undefined || (incoming === null && !isFixedAvatarEmployee(existing)))
+        if (incoming === undefined)
             continue;
         const current = existing[field.key];
         const isSame = typeof incoming === "string" && (incoming === current
@@ -102,7 +84,7 @@ export function parseSystemEmployeeAgents(value, existing) {
     if (body.tags !== undefined && JSON.stringify(body.tags) !== JSON.stringify(siliconEmployeeTags(existing))) {
         throw new Error("该员工是内置的，标签不可修改。");
     }
-    if (isFixedAvatarEmployee(existing) && body.id !== undefined && body.id !== existing.id)
+    if (body.id !== undefined && body.id !== existing.id)
         throw new Error("该员工是内置的，身份不可修改。");
     if (body.systemKey !== undefined && body.systemKey !== existing.systemKey) {
         throw new Error("该员工是内置的，身份不可修改。");

package/dist/server-file-routes.js

@@ -1,7 +1,7 @@
 import crypto from "node:crypto";
 import { exec } from "node:child_process";
 import { createReadStream } from "node:fs";
-import { lstat, mkdir, readdir, readFile, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { lstat, mkdir, readdir, readFile, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import path from "node:path";
 import process from "node:process";
 import { promisify } from "node:util";
@@ -44,6 +44,40 @@ export function recordRecentPath(storage, cwd) {
 }
 export function registerFileRoutes(app, deps) {
     const { storage, defaultCwd } = deps;
+    // Resolve relative artifacts against the stored source session, never a client-supplied cwd.
+    app.get("/api/session-file/:sessionId", asyncRoute(async (req, res) => {
+        const session = storage.getSessionSlim(String(req.params.sessionId));
+        if (!session?.cwd) {
+            res.status(404).json({ error: "文件所属会话不存在。" });
+            return;
+        }
+        const relative = typeof req.query.path === "string" ? req.query.path : "";
+        if (!relative || path.isAbsolute(relative) || /[\u0000-\u001f]/.test(relative) || /^[a-z][a-z\d+.-]*:/i.test(relative)) {
+            res.status(400).json({ error: "文件相对路径无效。" });
+            return;
+        }
+        const resolved = path.resolve(session.cwd, relative);
+        if (!isPathWithinBase(resolved, path.resolve(session.cwd)) || isBlockedFolderPath(resolved)) {
+            res.status(403).json({ error: "文件路径超出会话目录。" });
+            return;
+        }
+        const canonical = await realpath(resolved).catch(() => null);
+        const base = await realpath(session.cwd).catch(() => null);
+        if (canonical && base && (!isPathWithinBase(canonical, base) || isBlockedFolderPath(canonical))) {
+            res.status(403).json({ error: "文件链接目标超出会话目录。" });
+            return;
+        }
+        if (req.query.mode === "preview") {
+            if (!/\.html?$/i.test(resolved)) {
+                res.status(400).json({ error: "目标不是 HTML 文件。" });
+                return;
+            }
+            res.redirect(307, "/api/local-file/" + Buffer.from(resolved).toString("base64url") + "/");
+        }
+        else {
+            res.redirect(307, "/api/file-raw?path=" + encodeURIComponent(resolved) + (req.query.mode === "download" ? "&download=1" : ""));
+        }
+    }));
     app.get("/api/path-suggestions", asyncRoute(async (req, res) => {
         const query = typeof req.query.q === "string" ? req.query.q : "";
         try {
@@ -397,6 +431,7 @@ export function registerFileRoutes(app, deps) {
                 headers: {
                     "Cache-Control": "private, max-age=60",
                     "X-Content-Type-Options": "nosniff",
+                    ...(/\.html?$/i.test(ext) ? { "Content-Security-Policy": "sandbox allow-scripts; connect-src 'none'; form-action 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'" } : {}),
                 },
                 readErrorMessage: "Failed to read file",
             });
@@ -463,6 +498,12 @@ export function registerFileRoutes(app, deps) {
                 res.status(400).json({ error: "目标不是普通文件。" });
                 return;
             }
+            const canonicalBase = await realpath(baseRoot);
+            const canonicalFile = await realpath(filePath);
+            if (!isPathWithinBase(canonicalFile, canonicalBase) || isBlockedFolderPath(canonicalFile)) {
+                res.status(403).json({ error: "访问被拒绝：资源链接目标越界。" });
+                return;
+            }
             const ext = path.extname(filePath).toLowerCase();
             const baseName = path.basename(filePath);
             const encodedName = encodeURIComponent(baseName);
@@ -474,6 +515,8 @@ export function registerFileRoutes(app, deps) {
                 headers: {
                     "Cache-Control": "private, no-cache",
                     "X-Content-Type-Options": "nosniff",
+                    // Even opening the artifact directly must not grant the Wand origin.
+                    ...(/\.html?$/i.test(ext) ? { "Content-Security-Policy": "sandbox allow-scripts; connect-src 'none'; form-action 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'" } : {}),
                 },
                 readErrorMessage: "读取本地文件失败。",
             });

package/dist/server-pi-recommendation-routes.js

@@ -1,4 +1,5 @@
-import { DecisionError } from "./decision-types.js";
+import { DECISION_EXPERT_NAME } from "./decision-expert-identity.js";
+import { DECISION_CHAIN_WAIT_MS, DecisionError } from "./decision-types.js";
 import { discoverPiResources, resolvePiResourceSelection } from "./pi-resource-catalog.js";
 import { parsePiRecommendationRequest, recommendPiResources } from "./pi-resource-recommendation.js";
 /** Uses the parent's login + sessions-scope middleware; inference-only tokens cannot enter this route. */
@@ -26,7 +27,7 @@ export function registerPiRecommendationRoute(app, deps) {
             }
             const status = deps.decisions?.status();
             if (!deps.decisions || !status?.enabled || !status.supported || !status.configured || settings.localDecision === false) {
-                const notice = status && "notice" in status && typeof status.notice === "string" ? status.notice : "本地决策未启用或不可用，原选择未改变；请配置「决策专家」调用链。";
+                const notice = status && "notice" in status && typeof status.notice === "string" ? status.notice : `本地决策未启用或不可用，原选择未改变；请配置「${DECISION_EXPERT_NAME}」调用链。`;
                 throw new DecisionError("UNAVAILABLE", notice, 503);
             }
             const input = parsePiRecommendationRequest(req.body);
@@ -34,11 +35,19 @@ export function registerPiRecommendationRoute(app, deps) {
                 throw new DecisionError("BUSY", "本会话正在推荐，请等待当前请求完成。", 409);
             active.add(id);
             owns = true;
-            timer = setTimeout(() => abort.abort(), 15_000);
             const inventory = await discoverPiResources(deps.config, deps.structured.get(id).cwd);
             resolvePiResourceSelection(inventory, input.candidates);
             const result = await recommendPiResources({ ...input, catalog: inventory.catalog,
-                evaluate: (value, caller, signal) => deps.decisions.evaluate(value, caller, signal),
+                evaluate: async (value, caller, signal) => {
+                    const decisionTimer = setTimeout(() => abort.abort(), DECISION_CHAIN_WAIT_MS);
+                    timer = decisionTimer;
+                    try {
+                        return await deps.decisions.evaluate(value, caller, signal);
+                    }
+                    finally {
+                        clearTimeout(decisionTimer);
+                    }
+                },
                 caller: `pi-recommend:${id}`, signal: abort.signal });
             const latest = deps.structured.get(id);
             if (!latest || latest.archived || latest.provider !== "pi" || latest.piSettings?.localDecision === false

package/dist/server-request.d.ts

@@ -7,6 +7,8 @@
  */
 /** 取字符串并 trim；非字符串一律当缺省处理。 */
 export declare function text(value: unknown, fallback?: string): string;
+/** Shared length check for employee and team name fields. */
+export declare function boundedText(value: unknown, label: string, min: number, max: number): string;
 /** Express query 值可能是数组，取第一个字符串。 */
 export declare function firstQueryStringValue(value: unknown): string | undefined;
 /** 请求头可能是数组（重复头），取第一个值。 */

package/dist/server-request.js

@@ -10,6 +10,15 @@ import { getErrorMessage } from "./error-utils.js";
 export function text(value, fallback = "") {
     return typeof value === "string" ? value.trim() : fallback;
 }
+/** Shared length check for employee and team name fields. */
+export function boundedText(value, label, min, max) {
+    const result = text(value);
+    if (result.length < min)
+        throw new Error(`${label}不能为空。`);
+    if (result.length > max)
+        throw new Error(`${label}不能超过 ${max} 个字符。`);
+    return result;
+}
 /** Express query 值可能是数组，取第一个字符串。 */
 export function firstQueryStringValue(value) {
     if (typeof value === "string")

package/dist/server-resume-routes.js

@@ -11,7 +11,7 @@
 import { asyncRoute } from "./express-async.js";
 import { getErrorMessage } from "./error-utils.js";
 import { isProviderSessionId, isSafeProviderSessionId } from "./resume-policy.js";
-import { parseExecutionMode, parseSessionCreationOrigin } from "./server-session-routes.js";
+import { parseExecutionMode, parseSessionCreationOrigin } from "./session-request.js";
 import { resolveWorkspaceIdForNewSession } from "./workspace-binding.js";
 const STRUCTURED_RESUME_SPECS = [
     {

package/dist/server-scheduled-task-routes.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from "express";
+import { type ScheduledTaskService } from "./scheduled-task-service.js";
+/** Authentication and the sessions capability are enforced by the server route family. */
+export declare function registerScheduledTaskRoutes(app: Express, service: ScheduledTaskService): void;

package/dist/server-scheduled-task-routes.js

@@ -0,0 +1,34 @@
+import { ScheduledTaskConflictError, ScheduledTaskNotFoundError } from "./scheduled-task-service.js";
+import { sendRouteError } from "./server-request.js";
+function failure(res, error) {
+    sendRouteError(res, error, "定时任务操作失败。", error instanceof ScheduledTaskNotFoundError ? 404
+        : error instanceof ScheduledTaskConflictError ? 409 : 400);
+}
+/** Authentication and the sessions capability are enforced by the server route family. */
+export function registerScheduledTaskRoutes(app, service) {
+    app.get("/api/scheduled-tasks", (req, res) => { res.json({ tasks: service.list(req.query.includeCancelled === "1") }); });
+    app.get("/api/scheduled-tasks/:id", (req, res) => {
+        try {
+            res.json(service.get(req.params.id));
+        }
+        catch (error) {
+            failure(res, error);
+        }
+    });
+    app.post("/api/scheduled-tasks", (req, res) => {
+        try {
+            res.status(201).json({ task: service.create(req.body) });
+        }
+        catch (error) {
+            failure(res, error);
+        }
+    });
+    app.patch("/api/scheduled-tasks/:id", (req, res) => {
+        try {
+            res.json({ task: service.update(req.params.id, req.body) });
+        }
+        catch (error) {
+            failure(res, error);
+        }
+    });
+}

package/dist/server-session-routes.d.ts

@@ -1,21 +1,14 @@
 import type { Express } from "express";
+import type { OpenRouterFreeModelsService } from "./openrouter-free-models.js";
 import { ProcessManager } from "./process-manager.js";
-import { StructuredSessionManager } from "./structured-session-manager.js";
 import { WandStorage } from "./storage.js";
-import { ExecutionMode, ProcessEvent, SessionSnapshot, SessionSource, WandConfig } from "./types.js";
-import type { OpenRouterFreeModelsService } from "./openrouter-free-models.js";
+import { StructuredSessionManager } from "./structured-session-manager.js";
+import { ExecutionMode, ProcessEvent, SessionSnapshot, WandConfig } from "./types.js";
 import { toSessionListItemDTO } from "./session-transport.js";
-import { type ProviderHistoryDeleter, SessionRegistry } from "./session-registry.js";
 import { type PiRecommendationRuntime } from "./server-pi-recommendation-routes.js";
 import { type SessionDirectoryNode } from "./session-directory-tree.js";
-export declare function parseExecutionMode(value: unknown, fallback: ExecutionMode): ExecutionMode;
-export declare function parseSessionCreationOrigin(body: {
-    sessionSource?: unknown;
-    automationId?: unknown;
-} | null | undefined): {
-    sessionSource: SessionSource;
-    automationId?: string;
-};
+import { SessionRegistry, type ProviderHistoryDeleter } from "./session-registry.js";
+export { parseExecutionMode, parseSessionCreationOrigin } from "./session-request.js";
 type SessionDeletionProcesses = Pick<ProcessManager, "get" | "delete"> & ProviderHistoryDeleter;
 type SessionDeletionStructured = Pick<StructuredSessionManager, "get" | "delete">;
 /**
@@ -49,4 +42,3 @@ export declare function buildSessionListPage(sessions: SessionSnapshot[], offset
 export declare function buildSessionDirectoryTree(sessions: SessionSnapshot[], customNames?: ReadonlyMap<string, string>): SessionDirectoryTreeResponse;
 export declare function registerSessionRoutes(app: Express, processes: ProcessManager, structured: StructuredSessionManager, storage: WandStorage, defaultMode: ExecutionMode, config: WandConfig, sessions: SessionRegistry, onSessionCreated?: (cwd: string | undefined | null) => void, onCompletionViewed?: (event: ProcessEvent) => void, decisions?: PiRecommendationRuntime, free?: Pick<OpenRouterFreeModelsService, "resolveForCall">): void;
 export declare function registerClaudeHistoryRoutes(app: Express, processes: ProcessManager, storage: WandStorage): void;
-export {};

package/dist/server-session-routes.js

@@ -1,41 +1,36 @@
 import { createHash } from "node:crypto";
-import { PtyInputDeliveryError, SessionInputError } from "./process-manager.js";
-import { getDefaultModelForProvider, isExecutionMode } from "./config.js";
+import { parseExecutionMode, parseSessionCreationOrigin } from "./session-request.js";
+import { isExecutionMode } from "./config.js";
+import { DECISION_EXPERT_NAME } from "./decision-expert-identity.js";
 import { defaultRoleForCli } from "./default-employee.js";
-import { defaultModelGroupSelector } from "./model-groups.js";
-import { inspectPiExecution } from "./pi-execution.js";
-import { alignedBlockStart, blockWindowMessagesForTransport, compactToolMessagesForTransport, messageWindowByteBudget, sliceTurnBlocksForTransport, truncateMessagesForTransport, visibleBlockCount, windowMessagesForTransport } from "./message-truncator.js";
-import { toSessionDetailDTO, toSessionListItemDTO } from "./session-transport.js";
+import { fallbackProviderModel, resolveExplicitOrFallbackModel, sessionEmployeeFields } from "./session-model.js";
+import { PtyInputDeliveryError, SessionInputError } from "./process-manager.js";
+import { generateCommitMessageOnly, getGitStatusAsync, QuickCommitError, runPush, runQuickCommitWithFallback, runTagHead, } from "./git-quick-commit.js";
 import { checkSessionWorktreeMergeabilityAsync, cleanupSessionWorktreeAsync, getWorktreeMergeErrorCode, mergeSessionWorktreeAsync, WorktreeMergeError, } from "./git-worktree.js";
-import { resolveSessionCwd } from "./session-cwd.js";
+import { alignedBlockStart, blockWindowMessagesForTransport, compactToolMessagesForTransport, messageWindowByteBudget, sliceTurnBlocksForTransport, truncateMessagesForTransport, visibleBlockCount, windowMessagesForTransport } from "./message-truncator.js";
+import { inspectPiExecution } from "./pi-execution.js";
 import { resolveSystemAiContext } from "./session-ai-context.js";
-import { getGitStatusAsync, QuickCommitError, runQuickCommitWithFallback, runTagHead, runPush, generateCommitMessageOnly, } from "./git-quick-commit.js";
+import { resolveSessionCwd } from "./session-cwd.js";
+import { toSessionDetailDTO, toSessionListItemDTO } from "./session-transport.js";
 import { getErrorMessage } from "./error-utils.js";
+import { asyncRoute } from "./express-async.js";
 import { buildIterationCommitContext, COMMIT_CONTEXT_MODE_PREF_KEY, isCommitContextMode, readCommitContextMode, resolveCommitContextInput, } from "./iteration-log.js";
-import { inferProviderFromCommand, isSessionProvider, providerCliCommand, SESSION_PROVIDERS } from "./session-provider.js";
-import { selectEmployeeCandidate } from "./silicon-employee-dispatch.js";
-import { buildProviderResumeCommand, isProviderSessionId } from "./resume-policy.js";
+import { installedPiExtensions } from "./pi-extension-resources.js";
+import { discoverPiResources, resolvePiResourceSelection } from "./pi-resource-catalog.js";
+import { effectivePiSessionSettings, patchPiSessionSettings } from "./pi-session-settings.js";
 import { parseBoundedInteger } from "./request-limits.js";
-import { asyncRoute } from "./express-async.js";
+import { buildProviderResumeCommand, isProviderSessionId } from "./resume-policy.js";
+import { registerPiRecommendationRoute } from "./server-pi-recommendation-routes.js";
 import { sendRouteError } from "./server-request.js";
 import { registerStructuredResumeRoutes } from "./server-resume-routes.js";
-import { addHiddenSessionIds, deleteProviderNativeHistory, removeHiddenSessionIds } from "./session-registry.js";
+import { buildDirectoryTree, normalizeSessionDirectory, } from "./session-directory-tree.js";
+import { inferProviderFromCommand, isSessionProvider, providerCliCommand, SESSION_PROVIDERS } from "./session-provider.js";
+import { addHiddenSessionIds, deleteOwnedSessionWithHistory, removeHiddenSessionIds } from "./session-registry.js";
+import { selectEmployeeCandidate } from "./silicon-employee-dispatch.js";
 import { enrichStructuredMessages, WAND_PROTOCOL_VERSION } from "./structured-client-protocol.js";
 import { asRecord, isStructuredImagePart } from "./structured-content.js";
-import { installedPiExtensions } from "./pi-extension-resources.js";
-import { registerPiRecommendationRoute } from "./server-pi-recommendation-routes.js";
-import { discoverPiResources, resolvePiResourceSelection } from "./pi-resource-catalog.js";
-import { effectivePiSessionSettings, patchPiSessionSettings } from "./pi-session-settings.js";
-import { buildDirectoryTree, normalizeSessionDirectory, } from "./session-directory-tree.js";
 import { projectCwdForSession, renameWorkspaceDirectory, resolveWorkspaceIdForNewSession, } from "./workspace-binding.js";
-export function parseExecutionMode(value, fallback) {
-    if (value === undefined)
-        return fallback;
-    if (!isExecutionMode(value)) {
-        throw new Error(`无效执行模式: ${String(value)}`);
-    }
-    return value;
-}
+export { parseExecutionMode, parseSessionCreationOrigin } from "./session-request.js";
 /** 提交输入模式：query 覆盖 > 记住的偏好 > 默认（有提示词就优先用提示词）。 */
 function commitModeForRead(storage, override) {
     return readCommitContextMode(storage, override);
@@ -53,24 +48,6 @@ async function iterationCommitInput(storage, snapshot, body) {
 function commitMessageFromIteration(body) {
     return body.autoMessage !== false && !body.customMessage?.trim();
 }
-export function parseSessionCreationOrigin(body) {
-    const rawSource = body?.sessionSource;
-    if (rawSource !== undefined && rawSource !== "interactive" && rawSource !== "automation" && rawSource !== "startup") {
-        throw new Error("sessionSource 必须是 interactive、automation 或 startup。");
-    }
-    const rawAutomationId = body?.automationId;
-    if (rawAutomationId !== undefined && typeof rawAutomationId !== "string") {
-        throw new Error("automationId 必须是非空字符串。");
-    }
-    const automationId = rawAutomationId?.trim();
-    if (rawAutomationId !== undefined && !automationId) {
-        throw new Error("automationId 必须是非空字符串。");
-    }
-    return {
-        sessionSource: rawSource ?? "interactive",
-        ...(automationId ? { automationId } : {}),
-    };
-}
 function getInputErrorResponse(error, sessionId) {
     if (error instanceof PtyInputDeliveryError) {
         return {
@@ -129,24 +106,14 @@ function getInputDebugMeta(error) {
  * immediately reappear as a "non-Wand" session after the Wand row is removed.
  */
 export function deleteSessionWithProviderHistory(processes, structured, storage, id) {
-    const snapshot = structured.get(id) ?? processes.get(id);
-    if (snapshot && (snapshot.sessionKind ?? "pty") === "structured") {
-        structured.delete(id);
-    }
-    else {
-        processes.delete(id);
-    }
-    const providerSessionId = snapshot?.claudeSessionId?.trim();
-    if (!snapshot || !providerSessionId)
-        return;
-    const provider = snapshot.provider
-        ?? snapshot.structuredState?.provider
-        ?? inferProviderFromCommand(snapshot.command)
-        ?? "claude";
-    deleteProviderNativeHistory(processes, provider, providerSessionId, snapshot.cwd);
-    // History deletion is intentionally best-effort at the filesystem layer.
-    // Keep a tombstone as a fallback for permission errors or process tail writes.
-    addHiddenSessionIds(storage, [providerSessionId]);
+    deleteOwnedSessionWithHistory(() => {
+        const snapshot = structured.get(id) ?? processes.get(id);
+        if (snapshot?.sessionKind === "structured")
+            structured.delete(id);
+        else
+            processes.delete(id);
+        return snapshot;
+    }, processes, storage);
 }
 function sessionSortTimestamp(snapshot) {
     const timestamp = Date.parse(snapshot.startedAt);
@@ -157,7 +124,7 @@ function buildSessionListEntries(sessions) {
         type: "managed",
         key: `session-${session.id}`,
         sortTimestamp: sessionSortTimestamp(session),
-        session: toSessionListItemDTO(session),
+        session: toSessionListItemDTO(session, { avatar: "compact" }),
     })).sort((left, right) => {
         const timestampOrder = right.sortTimestamp - left.sortTimestamp;
         return timestampOrder || left.key.localeCompare(right.key);
@@ -454,7 +421,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
         }
     });
     app.get("/api/sessions", (_req, res) => {
-        res.json(sessions.listSlim().map(toSessionListItemDTO));
+        res.json(sessions.listSlim().map((session) => toSessionListItemDTO(session)));
     });
     app.get("/api/sessions/provider-usage", (_req, res) => {
         res.json(storage.countInteractiveSessionsByProvider());
@@ -524,8 +491,8 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 model: rawModel && rawModel !== "default"
                     ? rawModel
                     : (employeeAgent && !requestedProvider
-                        ? employeeAgent.model === "default" ? defaultModelGroupSelector(config.modelGroups, provider, getDefaultModelForProvider(config, provider)) || getDefaultModelForProvider(config, provider) || undefined : employeeAgent.model
-                        : rawModel || defaultModelGroupSelector(config.modelGroups, provider, getDefaultModelForProvider(config, provider)) || getDefaultModelForProvider(config, provider) || undefined),
+                        ? resolveExplicitOrFallbackModel(config, provider, employeeAgent.model)
+                        : rawModel || fallbackProviderModel(config, provider)),
                 thinkingEffort: employeeAgent?.thinkingEffort ?? (typeof body.thinkingEffort === "string"
                     ? body.thinkingEffort
                     : config.defaultThinkingEffort),
@@ -533,9 +500,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
                 workspaceTaskId: body.workspaceTaskId,
                 // 角色与规则走系统提示通道，不拼进 prompt（见 AGENTS.md「Session 输入契约」）。
                 systemPrompt: role?.prompt ?? body.systemPrompt,
-                employeeId: role?.id,
-                employeeName: role?.name,
-                employeeAvatar: role?.avatar,
+                ...sessionEmployeeFields(role),
                 employeeCandidates: employee?.agents,
                 employeeCandidateIndex: requestedProvider ? undefined : selectedEmployeeCandidate?.index,
                 ...(engineDecision ? { engine: engineDecision.engine } : {}),
@@ -679,7 +644,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
             && status?.enabled === true && status.supported && status.configured;
         const recommendationReason = !resourceCatalog.supported ? resourceCatalog.reason
             : settings.localDecision === false ? "本会话已关闭本地决策。"
-                : !recommendationAvailable ? status && "notice" in status && typeof status.notice === "string" ? status.notice : "本地决策未启用或运行环境不可用；请配置「决策专家」调用链。" : "";
+                : !recommendationAvailable ? status && "notice" in status && typeof status.notice === "string" ? status.notice : `本地决策未启用或运行环境不可用；请配置「${DECISION_EXPERT_NAME}」调用链。` : "";
         return { recommendationAvailable, recommendationReason,
             autoResourcesAvailable: recommendationAvailable, autoResourcesReason: recommendationReason,
             autoCodemodeAvailable: recommendationAvailable, skillLocksAvailable: resourceCatalog.supported,

package/dist/server-task-routes.d.ts

@@ -1,11 +1,11 @@
 import type { Express } from "express";
-import { type WandStorage } from "./storage.js";
-import { generateWandTaskTitle } from "./task-title.js";
+import type { AiTeamRunner } from "./ai-team-runner.js";
 import type { OpenRouterFreeModelsService } from "./openrouter-free-models.js";
+import type { ProcessManager } from "./process-manager.js";
 import type { SessionRegistry } from "./session-registry.js";
+import { type WandStorage } from "./storage.js";
 import type { StructuredSessionManager } from "./structured-session-manager.js";
-import type { ProcessManager } from "./process-manager.js";
-import type { AiTeamRunner } from "./ai-team-runner.js";
+import { generateWandTaskTitle } from "./task-title.js";
 import type { WandTaskAgent, WandTaskAgentKind, WandTaskAgentMode } from "./task-types.js";
 import type { WandConfig } from "./types.js";
 /** 任务面板上次选用的 CLI 工具 / 模型 / 思考深度；从未保存过时回落到 Claude 默认。 */
@@ -31,21 +31,6 @@ export declare function parentTaskIdFrom(storage: WandStorage, value: unknown, w
  * 避免把用户在 Web 上选的工作模式悄悄复位成标准。
  */
 export declare function parseTaskAgent(value: unknown, fallbackMode?: WandTaskAgentMode, fallbackKind?: WandTaskAgentKind): WandTaskAgent | null;
-/** 等待排队中的标题生成全部结束；只有测试用，避免用例轮询。 */
-export declare function whenWandTaskTitlesSettled(): Promise<void>;
-export interface AutoTaskTitleOptions {
-    config?: WandConfig;
-    free?: Pick<OpenRouterFreeModelsService, "resolveForCall">;
-    /** 可注入的标题生成器；测试里换成同步桩，避免真的起 CLI。 */
-    generateTitle?: typeof generateWandTaskTitle;
-    /** 未从任务所属工作区解析到目录时的兜底 cwd。 */
-    cwd?: string;
-}
-/**
- * 扫描标题仍可自动命名的看板任务（titleSource=auto，或仍是占位名的历史卡片）：
- * 先用任务描述 + 所有绑定会话的内容立即改掉占位名，再交给后台模型总结更贴切的标题。
- * 同一个输入指纹只处理一次：内容没变就跳过，也避免自动标题与模型结果来回震荡。
- * 用户建任务时写了名字、或事后改过名（titleSource=user 且不是占位名）的任务永不进入这里。
- */
-export declare function refreshAutoBoardTaskTitles(storage: WandStorage, options?: AutoTaskTitleOptions): void;
+export { refreshAutoBoardTaskTitles, whenWandTaskTitlesSettled } from "./task-title-service.js";
+export type { AutoTaskTitleOptions } from "./task-title-service.js";
 export declare function registerTaskRoutes(app: Express, deps: TaskRouteDependencies): void;