@co0ontty/wand 4.93.0 → 4.94.0

package/dist/diagnostic-logs.js

@@ -0,0 +1,121 @@
+import { constants, closeSync, fstatSync, lstatSync, openSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
+import path from "node:path";
+import { assertPlainTempPath } from "./managed-temp.js";
+export const DIAGNOSTIC_LOG_MAX_BYTES = 10 * 1024 * 1024;
+export const DIAGNOSTIC_LOG_ROTATIONS = 3;
+export const DIAGNOSTIC_LOG_RETENTION_DAYS = 14;
+const FILES = new Set(["web.log", "web-error.log", "terminald.log", "terminald-error.log", "structured-stdout.log", "structured-stderr.log", "structured-spawns.jsonl"]);
+export const DIAGNOSTIC_RECEIPT_SUFFIX = ".wand-log-receipt.json";
+function checkFile(file) {
+    assertPlainTempPath(file);
+    try {
+        const stat = lstatSync(file);
+        if (!stat.isFile() || (process.getuid && stat.uid !== process.getuid()))
+            throw new Error("Diagnostic log is not an owned file.");
+        return stat;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+function receipt(file) {
+    const stat = checkFile(file);
+    const target = file + DIAGNOSTIC_RECEIPT_SUFFIX;
+    checkFile(target);
+    writeFileSync(target, JSON.stringify({ app: "wand-diagnostic-log", version: 1, device: stat.dev, inode: stat.ino,
+        size: stat.size, mtimeMs: stat.mtimeMs, ctimeMs: stat.ctimeMs }), { mode: 0o600 });
+}
+export function diagnosticReceiptMatches(file) {
+    const stat = checkFile(file), marker = checkFile(file + DIAGNOSTIC_RECEIPT_SUFFIX);
+    if (!stat || !marker || marker.size > 4096)
+        return false;
+    const fd = openSync(file + DIAGNOSTIC_RECEIPT_SUFFIX, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const value = JSON.parse(readFileSync(fd, "utf8"));
+        return value.app === "wand-diagnostic-log" && value.version === 1 && value.device === stat.dev
+            && value.inode === stat.ino && value.size === stat.size && value.mtimeMs === stat.mtimeMs && value.ctimeMs === stat.ctimeMs;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Only redundant diagnostics: PTY history and native protocol sources never enter this writer. */
+export function appendBoundedDiagnostic(file, data, maxBytes = DIAGNOSTIC_LOG_MAX_BYTES, rotations = DIAGNOSTIC_LOG_ROTATIONS) {
+    if (!FILES.has(path.basename(file)) || !Number.isSafeInteger(maxBytes) || maxBytes < 1 || !Number.isSafeInteger(rotations) || rotations < 1 || rotations > 3) {
+        throw new Error("Unknown diagnostic log or invalid limits.");
+    }
+    const target = path.join(realpathSync(path.dirname(file)), path.basename(file));
+    let bytes = Buffer.isBuffer(data) ? data : Buffer.from(data);
+    if (bytes.length > maxBytes)
+        bytes = bytes.subarray(bytes.length - maxBytes);
+    const stat = checkFile(target);
+    if (stat && stat.size + bytes.length > maxBytes) {
+        // Preflight all slots before renaming: unknown/replaced files are never overwritten.
+        for (let i = 1; i <= rotations; i++) {
+            const old = `${target}.${i}`;
+            const archive = checkFile(old), marker = checkFile(old + DIAGNOSTIC_RECEIPT_SUFFIX);
+            if (archive ? !diagnosticReceiptMatches(old) : marker)
+                throw new Error("Diagnostic archive ownership changed.");
+        }
+        const oldest = `${target}.${rotations}`;
+        if (checkFile(oldest)) {
+            unlinkSync(oldest);
+            unlinkSync(oldest + DIAGNOSTIC_RECEIPT_SUFFIX);
+        }
+        for (let i = rotations - 1; i >= 1; i--) {
+            const from = `${target}.${i}`, to = `${target}.${i + 1}`;
+            if (checkFile(from)) {
+                renameSync(from, to);
+                unlinkSync(from + DIAGNOSTIC_RECEIPT_SUFFIX);
+                receipt(to);
+            }
+        }
+        renameSync(target, `${target}.1`);
+        receipt(`${target}.1`);
+    }
+    const fd = openSync(target, constants.O_WRONLY | constants.O_CREAT | constants.O_APPEND | (constants.O_NOFOLLOW ?? 0), 0o600);
+    try {
+        const current = fstatSync(fd);
+        if (!current.isFile() || (process.getuid && current.uid !== process.getuid()))
+            throw new Error("Diagnostic output changed.");
+        let offset = 0;
+        while (offset < bytes.length)
+            offset += writeSync(fd, bytes, offset, bytes.length - offset);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Attach only to launchd/file redirections matching this instance; keep TTYs and journald untouched. */
+export function installServiceDiagnosticRotation(configDir, kind) {
+    const restore = [];
+    for (const [stream, file, fd] of [[process.stdout, `${kind}.log`, 1], [process.stderr, `${kind}-error.log`, 2]]) {
+        try {
+            const target = path.join(realpathSync(configDir), file), stat = checkFile(target), output = fstatSync(fd);
+            if (!stat || stat.dev !== output.dev || stat.ino !== output.ino)
+                continue;
+            const original = stream.write;
+            stream.write = function (chunk, encoding, callback) {
+                const cb = typeof encoding === "function" ? encoding : callback;
+                try {
+                    appendBoundedDiagnostic(target, typeof chunk === "string" ? Buffer.from(chunk, typeof encoding === "string" ? encoding : "utf8") : Buffer.from(chunk));
+                    if (cb)
+                        queueMicrotask(() => cb(null));
+                    return true;
+                }
+                catch {
+                    return original.apply(stream, arguments);
+                }
+            };
+            restore.push(() => { stream.write = original; });
+        }
+        catch { /* Never prevent startup or redirect unrelated output. */ }
+    }
+    return () => { for (const undo of restore)
+        undo(); };
+}
+export function isDiagnosticArchive(name) {
+    return [...FILES].some(file => [1, 2, 3].some(index => name === `${file}.${index}`));
+}

package/dist/employee-text.js

@@ -74,9 +74,7 @@ export async function prepareEmployeeTextCandidate(deps, agent, request, signal)
     if (agent.engine !== "sdk") {
         if (!providerCliInstalled(agent.provider) || isOpenRouterFreeSelector(agent.model))
             throw new Error("CLI候选不可用。");
-        const { callCliAiText, assertGeminiTextCapability } = await import("./ai-text-runner.js");
-        if (agent.provider === "gemini")
-            assertGeminiTextCapability();
+        const { callCliAiText } = await import("./ai-text-runner.js");
         // One adapter call, never re-enter the candidate chain.
         return async () => {
             signal.throwIfAborted();

package/dist/git-quick-commit.d.ts

@@ -1,7 +1,7 @@
 import { GitStatusResult, PushResult, QuickCommitResult, SessionProvider, SessionSnapshot, TagHeadResult } from "./types.js";
 /** provider 缺省值：无法识别时回落到 Claude。 */
 import { type QuickCommitAiOptions } from "./ai-text-runner.js";
-export { assertGeminiTextCapability, callCliAiText, callConfiguredAiText, withOpsPersona } from "./ai-text-runner.js";
+export { callCliAiText, callConfiguredAiText, withOpsPersona } from "./ai-text-runner.js";
 export type { QuickCommitAiOptions } from "./ai-text-runner.js";
 export { QuickCommitError, type QuickCommitErrorCode } from "./command-error.js";
 /** Non-blocking status implementation used by HTTP routes. */

package/dist/git-quick-commit.js

@@ -2,9 +2,9 @@ import { existsSync } from "node:fs";
 import { getGitErrorMessage, runGitAsync as runGitAsyncBase, runGitRawAsync as runGitRawAsyncBase, } from "./git-utils.js";
 import { thinkingEffortToClaudeCliEffort, thinkingEffortToCodexReasoningEffort, thinkingEffortToOpenCodeVariant } from "./structured-provider-common.js";
 /** provider 缺省值：无法识别时回落到 Claude。 */
-import { buildGeminiTextArgs, buildGrokTextArgs, buildPiTextArgs, buildQoderTextArgs, callConfiguredAiText, contentWithSystemPrompt, defaultProvider, normalizeAiText, runCliText, systemPromptArgsFrom, withOpsPersona } from "./ai-text-runner.js";
+import { buildGrokTextArgs, buildPiTextArgs, buildQoderTextArgs, callConfiguredAiText, contentWithSystemPrompt, defaultProvider, normalizeAiText, runCliText, systemPromptArgsFrom, withOpsPersona } from "./ai-text-runner.js";
 import { QuickCommitError } from "./command-error.js";
-export { assertGeminiTextCapability, callCliAiText, callConfiguredAiText, withOpsPersona } from "./ai-text-runner.js";
+export { callCliAiText, callConfiguredAiText, withOpsPersona } from "./ai-text-runner.js";
 export { QuickCommitError } from "./command-error.js";
 const GIT_TIMEOUT_MS = 1500;
 const GIT_PUSH_TIMEOUT_MS = 30_000;
@@ -929,13 +929,6 @@ async function runQuickCommitFallbackCli(opts, priorError) {
             inheritEnv: opts.inheritEnv,
         });
     }
-    else if (provider === "gemini") {
-        await runCliText("gemini", buildGeminiTextArgs(opts, true), contentWithSystemPrompt("gemini", request), {
-            cwd: opts.cwd,
-            timeoutMs: QUICK_COMMIT_CLI_TIMEOUT_MS,
-            inheritEnv: opts.inheritEnv,
-        });
-    }
     else {
         const args = [
             "-p",

package/dist/layout-tree.d.ts

@@ -1,6 +1,8 @@
-import type { LayoutNode } from "./types.js";
+import type { LayoutNode, TaskWindowLayout } from "./types.js";
 /**
  * 取布局树中最左上角可用的 tab id：pane 优先用它记住的 active，
  * 否则取第一个 tab；split 递归左侧再右侧。
  */
 export declare function firstLayoutTabId(node: LayoutNode): string | undefined;
+/** Wrap a legacy tree after each caller applies its own write/read acceptance policy. */
+export declare function wrapLegacyTaskLayout(layout: LayoutNode): TaskWindowLayout;

package/dist/layout-tree.js

@@ -7,3 +7,11 @@ export function firstLayoutTabId(node) {
         return node.tabs[node.active]?.id ?? node.tabs[0]?.id;
     return firstLayoutTabId(node.children[0]) ?? firstLayoutTabId(node.children[1]);
 }
+/** Wrap a legacy tree after each caller applies its own write/read acceptance policy. */
+export function wrapLegacyTaskLayout(layout) {
+    return {
+        type: "windows",
+        windows: [{ id: "window-legacy", layout, activeTabId: firstLayoutTabId(layout) }],
+        activeWindowId: "window-legacy",
+    };
+}

package/dist/local-model-process.js

@@ -1,5 +1,6 @@
 import { spawn } from "node:child_process";
 import { buildChildEnv, systemEnvValue } from "./env-utils.js";
+import { registerTemporaryChild } from "./managed-temp.js";
 /** Runs one fixed deployment command. Only whitelisted server code constructs executable/args. */
 export function runModelSetup(executable, args, cwd, signal, progress, timeoutMs = 20 * 60_000) {
     return new Promise((resolve, reject) => {
@@ -13,6 +14,25 @@ export function runModelSetup(executable, args, cwd, signal, progress, timeoutMs
                 HTTPS_PROXY: systemEnvValue("HTTPS_PROXY"), HTTP_PROXY: systemEnvValue("HTTP_PROXY"), NO_PROXY: systemEnvValue("NO_PROXY"),
                 WAND_LAYA_PYTHON_BIN: systemEnvValue("WAND_LAYA_PYTHON_BIN"),
             }) });
+        const workIndex = args.indexOf("--work-dir");
+        if (workIndex !== -1) {
+            try {
+                registerTemporaryChild(args[workIndex + 1], child.pid, grouped);
+            }
+            catch {
+                child.on("error", () => { });
+                child.once("close", () => { reject(new Error("Model setup temporary lease unavailable")); });
+                if (grouped && child.pid) {
+                    try {
+                        process.kill(-child.pid, "SIGKILL");
+                    }
+                    catch { }
+                }
+                else
+                    child.kill("SIGKILL");
+                return;
+            }
+        }
         let failed = false, buffer = "", kill;
         const terminate = () => {
             failed = true;

package/dist/local-model-setup.js

@@ -1,5 +1,5 @@
 import { existsSync } from "node:fs";
-import { mkdir, mkdtemp, readFile, rm } from "node:fs/promises";
+import { mkdir, readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { DecisionError } from "./decision-types.js";
@@ -11,6 +11,7 @@ import { speechSupport } from "./speech-support.js";
 import { systemEnvValue } from "./env-utils.js";
 import { decisionHardware } from "./decision-hardware.js";
 import { DECISION_EXPERT_ID } from "./decision-expert-identity.js";
+import { configTemporaryRoot, createManagedTemporary } from "./managed-temp.js";
 /** Deployment jobs only; existing inference owners retain their protocols, rate limits and capabilities. */
 export class LocalModelSetupService {
     deps;
@@ -244,12 +245,13 @@ export class LocalModelSetupService {
                             throw new Error("服务器使用自定义语音运行时，请由管理员核对环境配置；不会覆盖它。");
                         phase("runtime", "安装固定 whisper.cpp 运行时（需 Git、CMake、C++工具链；CUDA需已安装Toolkit）");
                         await mkdir(path.join(this.deps.configDir, "speech"), { recursive: true, mode: 0o700 });
-                        const work = await mkdtemp(path.join(this.deps.configDir, "speech", ".setup-work-"));
+                        const temporary = createManagedTemporary("speech-setup", configTemporaryRoot(this.deps.configDir));
+                        const work = temporary.directory;
                         try {
                             await (this.deps.run ?? runModelSetup)(process.execPath, [this.installer("install-speech-runtime.js"), "--dir", path.join(this.deps.configDir, "speech"), "--backend", backend, "--work-dir", work, "--events"], this.deps.configDir, signal, (name, message) => phase(name === "verifying" ? "verifying" : "runtime", message));
                         }
                         finally {
-                            await rm(work, { recursive: true, force: true }).catch(() => { });
+                            await temporary.closeAsync();
                         }
                     }
                     phase("initializing", action === "activate" ? "正在检查语音模型，完成后自动启用。" : "加载所选语音模型并用合成静音检查，未启用识别或重启服务");

package/dist/managed-temp.d.ts

@@ -0,0 +1,32 @@
+export declare const TEMP_ROOT_MARKER = ".wand-temporary-root.json";
+export declare const TEMP_LEASE = ".wand-temporary-lease.json";
+export declare const TEMP_KINDS: readonly ["speech-check", "speech-voice", "speech-setup", "test-run", "upload-stage"];
+export type TempKind = typeof TEMP_KINDS[number];
+export declare function systemTemporaryRoot(): string;
+/** Keep test fixture Unix sockets below the platform path length limit. */
+export declare function testTemporaryRoot(): string;
+export declare function configTemporaryRoot(configDir: string): string;
+/** Never follow a redirect beneath the trusted, canonical deployment/temp path. */
+export declare function assertPlainTempPath(target: string): void;
+export declare function validateTemporaryRoot(root: string): void;
+export interface TempLease {
+    app: "wand-temporary";
+    version: 1;
+    kind: TempKind;
+    id: string;
+    ownerPid: number;
+    children: {
+        pid: number;
+        group: boolean;
+    }[];
+}
+export declare function readTemporaryLease(directory: string): TempLease;
+/** ESRCH alone establishes absence; permissions and unexpected errors fail closed. */
+export declare function temporaryPidAlive(pid: number, group?: boolean): boolean;
+export declare function temporaryChildrenAlive(lease: TempLease): boolean;
+export declare function registerTemporaryChild(directory: string, pid: number | undefined, group?: boolean): void;
+export declare function createManagedTemporary(kind: TempKind, root?: string): {
+    directory: string;
+    close(): boolean;
+    closeAsync(): Promise<boolean>;
+};

package/dist/managed-temp.js

@@ -0,0 +1,176 @@
+import { randomUUID } from "node:crypto";
+import { constants, chownSync, closeSync, fstatSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { rm } from "node:fs/promises";
+export const TEMP_ROOT_MARKER = ".wand-temporary-root.json";
+export const TEMP_LEASE = ".wand-temporary-lease.json";
+export const TEMP_KINDS = ["speech-check", "speech-voice", "speech-setup", "test-run", "upload-stage"];
+const uid = () => process.getuid?.() ?? null;
+export function systemTemporaryRoot() {
+    return path.join(realpathSync(os.tmpdir()), `wand-transient-${uid() ?? "user"}`);
+}
+/** Keep test fixture Unix sockets below the platform path length limit. */
+export function testTemporaryRoot() {
+    return process.platform === "win32" ? systemTemporaryRoot()
+        : path.join(realpathSync("/tmp"), `wand-transient-${uid() ?? "user"}`);
+}
+export function configTemporaryRoot(configDir) {
+    let base = path.resolve(configDir);
+    const missing = [];
+    for (;;) {
+        try {
+            base = realpathSync(base);
+            break;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT" || base === path.dirname(base))
+                throw error;
+            missing.unshift(path.basename(base));
+            base = path.dirname(base);
+        }
+    }
+    return path.join(base, ...missing, "cache", "temporary");
+}
+/** Never follow a redirect beneath the trusted, canonical deployment/temp path. */
+export function assertPlainTempPath(target) {
+    for (let current = path.resolve(target);; current = path.dirname(current)) {
+        try {
+            if (lstatSync(current).isSymbolicLink())
+                throw new Error("Temporary path contains a symbolic link.");
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        if (current === path.dirname(current))
+            break;
+    }
+}
+function readMarker(file) {
+    const fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > 4096 || (uid() !== null && stat.uid !== uid()))
+            throw new Error("Invalid temporary marker.");
+        const value = JSON.parse(readFileSync(fd, "utf8"));
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new Error("Invalid temporary marker.");
+        return value;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function validateTemporaryRoot(root) {
+    assertPlainTempPath(root);
+    const stat = lstatSync(root);
+    if (!stat.isDirectory() || (uid() !== null && (stat.uid !== uid() || (stat.mode & 0o077) !== 0))) {
+        throw new Error("Temporary root is not private to this user.");
+    }
+    const marker = readMarker(path.join(root, TEMP_ROOT_MARKER));
+    if (marker.app !== "wand-temporary" || marker.version !== 1 || marker.uid !== uid())
+        throw new Error("Unmanaged temporary root.");
+}
+export function readTemporaryLease(directory) {
+    assertPlainTempPath(directory);
+    const value = readMarker(path.join(directory, TEMP_LEASE));
+    if (value.app !== "wand-temporary" || value.version !== 1 || !TEMP_KINDS.includes(value.kind)
+        || !path.basename(directory).startsWith(`${value.kind}-`) || typeof value.id !== "string"
+        || !/^[a-f0-9-]{36}$/.test(value.id) || !Number.isSafeInteger(value.ownerPid) || value.ownerPid <= 0
+        || !Array.isArray(value.children) || value.children.length > 16
+        || value.children.some(child => !child || !Number.isSafeInteger(child.pid) || child.pid <= 0 || typeof child.group !== "boolean")) {
+        throw new Error("Invalid temporary lease.");
+    }
+    return value;
+}
+/** ESRCH alone establishes absence; permissions and unexpected errors fail closed. */
+export function temporaryPidAlive(pid, group = false) {
+    try {
+        process.kill(group && process.platform !== "win32" ? -pid : pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code !== "ESRCH";
+    }
+}
+export function temporaryChildrenAlive(lease) {
+    return lease.children.some(child => temporaryPidAlive(child.pid, child.group));
+}
+export function registerTemporaryChild(directory, pid, group = false) {
+    if (!pid)
+        return;
+    validateTemporaryRoot(path.dirname(directory));
+    const lease = readTemporaryLease(directory);
+    if (lease.ownerPid !== process.pid)
+        throw new Error("Temporary lease belongs to another process.");
+    lease.children = lease.children.filter(child => temporaryPidAlive(child.pid, child.group));
+    if (!lease.children.some(child => child.pid === pid))
+        lease.children.push({ pid, group });
+    const file = path.join(directory, TEMP_LEASE);
+    const pending = path.join(directory, `${TEMP_LEASE}.${randomUUID()}.tmp`);
+    writeFileSync(pending, JSON.stringify(lease), { mode: 0o600, flag: "wx" });
+    renameSync(pending, file);
+}
+export function createManagedTemporary(kind, root = systemTemporaryRoot()) {
+    if (!TEMP_KINDS.includes(kind))
+        throw new Error("Unknown temporary purpose.");
+    assertPlainTempPath(root);
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    const marker = path.join(root, TEMP_ROOT_MARKER);
+    try {
+        writeFileSync(marker, JSON.stringify({ app: "wand-temporary", version: 1, uid: uid() }), { mode: 0o600, flag: "wx" });
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+    }
+    validateTemporaryRoot(root);
+    // macOS inherits /private/tmp's wheel group; fixtures should retain the caller's group semantics.
+    if (process.getgid && uid() !== null && lstatSync(root).gid !== process.getgid())
+        chownSync(root, uid(), process.getgid());
+    const directory = mkdtempSync(path.join(root, `${kind}-`));
+    const lease = { app: "wand-temporary", version: 1, kind, id: randomUUID(), ownerPid: process.pid, children: [] };
+    try {
+        writeFileSync(path.join(directory, TEMP_LEASE), JSON.stringify(lease), { mode: 0o600, flag: "wx" });
+    }
+    catch (error) {
+        rmSync(directory, { recursive: true, force: true });
+        throw error;
+    }
+    const removable = () => {
+        validateTemporaryRoot(root);
+        const current = readTemporaryLease(directory);
+        return current.id === lease.id && current.ownerPid === process.pid && !temporaryChildrenAlive(current);
+    };
+    const absent = () => {
+        try {
+            lstatSync(directory);
+            return false;
+        }
+        catch (error) {
+            return error.code === "ENOENT";
+        }
+    };
+    return { directory, close() {
+            try {
+                if (!removable())
+                    return false;
+                rmSync(directory, { recursive: true, force: true });
+                return true;
+            }
+            catch {
+                return absent();
+            }
+        }, async closeAsync() {
+            try {
+                if (!removable())
+                    return false;
+                await rm(directory, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
+                return true;
+            }
+            catch {
+                return absent();
+            }
+        } };
+}

package/dist/middleware/api-scope.js

@@ -23,6 +23,7 @@ export const API_ROUTE_RULES = [
     { prefix: "/api/check-update", scope: "admin" },
     { prefix: "/api/auto-update", scope: "admin" },
     { prefix: "/api/provider-cli-updates", scope: "admin" },
+    { prefix: "/api/storage-cleanup", scope: "admin" },
     { prefix: "/api/android-apk", scope: "admin" },
     { prefix: "/api/macos-dmg", scope: "admin" },
     { prefix: "/api/ios-ipa", scope: "admin" },

package/dist/models/shared.d.ts

@@ -8,11 +8,5 @@ export declare const OPENCODE_FALLBACK_MODELS: ClaudeModelInfo[];
 export declare const GROK_FALLBACK_MODELS: ClaudeModelInfo[];
 export declare const QODER_FALLBACK_MODELS: ClaudeModelInfo[];
 export declare const PI_FALLBACK_MODELS: ClaudeModelInfo[];
-/**
- * Gemini CLI 没有列模型的子命令，只能给出稳定别名（`packages/core/src/config/models.ts`
- * 里的 GEMINI_MODEL_ALIAS_*）。具体版本名随发布滚动，不适合写死在这里；
- * 设置页的模型输入框是自由文本，用户可以自己填完整模型名。
- */
-export declare const GEMINI_FALLBACK_MODELS: ClaudeModelInfo[];
 export declare function cloneModels(models: readonly ClaudeModelInfo[]): ClaudeModelInfo[];
 export { isRecord } from "../object-utils.js";

package/dist/models/shared.js

@@ -38,18 +38,6 @@ export const QODER_FALLBACK_MODELS = [
 export const PI_FALLBACK_MODELS = [
     { id: "default", label: "跟随 Pi 默认", alias: true },
 ];
-/**
- * Gemini CLI 没有列模型的子命令，只能给出稳定别名（`packages/core/src/config/models.ts`
- * 里的 GEMINI_MODEL_ALIAS_*）。具体版本名随发布滚动，不适合写死在这里；
- * 设置页的模型输入框是自由文本，用户可以自己填完整模型名。
- */
-export const GEMINI_FALLBACK_MODELS = [
-    { id: "default", label: "跟随 Gemini 默认", alias: true },
-    { id: "auto", label: "Auto（按任务自动选模型）" },
-    { id: "pro", label: "Pro" },
-    { id: "flash", label: "Flash" },
-    { id: "flash-lite", label: "Flash Lite" },
-];
 export function cloneModels(models) {
     return models.map((model) => ({
         ...model,

package/dist/models/thinking.d.ts

@@ -11,8 +11,6 @@ export interface ProviderThinkingEfforts {
     grok: ThinkingEffortLevel[];
     qoder: ThinkingEffortLevel[];
     pi: ThinkingEffortLevel[];
-    /** Gemini CLI 没有思考档位开关，只保留「不覆盖」一项，不假装能调。 */
-    gemini: ThinkingEffortLevel[];
 }
 /** 探针失败时的已知档位。下一次 CLI 成功应答会把它换掉。 */
 export declare const FALLBACK_PROVIDER_THINKING: ProviderThinkingEfforts;

package/dist/models/thinking.js

@@ -7,7 +7,6 @@ export const FALLBACK_PROVIDER_THINKING = {
     grok: effortLevelsFromIds(["low", "medium", "high", "xhigh"]),
     qoder: effortLevelsFromIds(["auto", "none", "low", "medium", "high", "xhigh", "max", "ultracode"]),
     pi: effortLevelsFromIds(["minimal", "low", "medium", "high", "xhigh", "max"]),
-    gemini: effortLevelsFromIds(["off"]),
 };
 export function cloneThinkingEfforts(efforts) {
     const copy = (levels) => levels.map((level) => ({ ...level }));
@@ -17,7 +16,6 @@ export function cloneThinkingEfforts(efforts) {
         grok: copy(efforts.grok),
         qoder: copy(efforts.qoder),
         pi: copy(efforts.pi),
-        gemini: copy(efforts.gemini),
     };
 }
 export function effortLevelsFromIds(ids) {

package/dist/models.d.ts

@@ -64,7 +64,6 @@ export interface ModelCache {
     grokModels: ClaudeModelInfo[];
     qoderModels: ClaudeModelInfo[];
     piModels: ClaudeModelInfo[];
-    geminiModels: ClaudeModelInfo[];
     thinkingEfforts: ProviderThinkingEfforts;
     claudeVersion: string | null;
     opencodeVersion: string | null;

package/dist/models.js

@@ -9,7 +9,7 @@ import { resolveChildEnv } from "./env-utils.js";
 import { discoverPiEndpointModels } from "./pi-model-discovery.js";
 import { extractSemver } from "./version-utils.js";
 import { AUTO_ASSIGN_LABEL, AUTO_ASSIGN_SELECTOR, FREE_MODEL_GROUP_ID, isAutoAssignSelector, isModelGroupSelector, modelGroupSelector, orderModelIds } from "./model-groups.js";
-import { MODEL_ID_PATTERN, QODER_MODEL_ID_PATTERN, CLAUDE_BUILTIN_MODELS, CODEX_FALLBACK_MODELS, OPENCODE_FALLBACK_MODELS, GROK_FALLBACK_MODELS, QODER_FALLBACK_MODELS, PI_FALLBACK_MODELS, GEMINI_FALLBACK_MODELS, cloneModels, isRecord } from "./models/shared.js";
+import { MODEL_ID_PATTERN, QODER_MODEL_ID_PATTERN, CLAUDE_BUILTIN_MODELS, CODEX_FALLBACK_MODELS, OPENCODE_FALLBACK_MODELS, GROK_FALLBACK_MODELS, QODER_FALLBACK_MODELS, PI_FALLBACK_MODELS, cloneModels, isRecord } from "./models/shared.js";
 import { EFFORT_ID_PATTERN, FALLBACK_PROVIDER_THINKING, cloneThinkingEfforts, effortLevelsFromIds, unionModelEfforts, parseCliEffortList } from "./models/thinking.js";
 import { parseOpenCodeModelCatalog } from "./models/parsers/opencode.js";
 import { parseGrokModels } from "./models/parsers/grok.js";
@@ -45,7 +45,6 @@ const PROVIDER_MODEL_LIST_FIELDS = {
     grok: "grokModels",
     qoder: "qoderModels",
     pi: "piModels",
-    gemini: "geminiModels",
 };
 /**
  * 目录里 `default` 项（「不传 --model」那一项）的标签补上服务端配置的默认模型名：
@@ -84,7 +83,6 @@ function cloneCache(cache) {
         grokModels: cloneModels(cache.grokModels),
         qoderModels: cloneModels(cache.qoderModels),
         piModels: cloneModels(cache.piModels),
-        geminiModels: cloneModels(cache.geminiModels),
         thinkingEfforts: cloneThinkingEfforts(cache.thinkingEfforts),
         claudeVersion: cache.claudeVersion,
         opencodeVersion: cache.opencodeVersion,
@@ -253,7 +251,6 @@ function createInitialCache(options) {
         grokModels: cloneModels(GROK_FALLBACK_MODELS),
         qoderModels: cloneModels(QODER_FALLBACK_MODELS),
         piModels: cloneModels(PI_FALLBACK_MODELS),
-        geminiModels: cloneModels(GEMINI_FALLBACK_MODELS),
         thinkingEfforts: cloneThinkingEfforts(FALLBACK_PROVIDER_THINKING),
         claudeVersion: null,
         opencodeVersion: null,
@@ -485,7 +482,6 @@ function catalogRevision(cache) {
         grokModels: cache.grokModels,
         qoderModels: cache.qoderModels,
         piModels: cache.piModels,
-        geminiModels: cache.geminiModels,
         thinkingEfforts: cache.thinkingEfforts,
         claudeVersion: cache.claudeVersion,
         opencodeVersion: cache.opencodeVersion,
@@ -560,7 +556,7 @@ function parsePersistedThinkingEfforts(value) {
     const fallback = cloneThinkingEfforts(FALLBACK_PROVIDER_THINKING);
     if (!isRecord(value))
         return fallback;
-    const providers = ["claude", "opencode", "grok", "qoder", "pi", "gemini"];
+    const providers = ["claude", "opencode", "grok", "qoder", "pi"];
     for (const provider of providers) {
         const levels = parsePersistedEffortLevels(value[provider]);
         if (levels)
@@ -595,9 +591,8 @@ function parsePersistedModelCatalog(value) {
     const grokModels = parsePersistedModelList(catalog.grokModels);
     const qoderModels = parsePersistedModelList(catalog.qoderModels);
     const piModels = parsePersistedModelList(catalog.piModels);
-    const geminiModels = parsePersistedModelList(catalog.geminiModels);
     const refreshedAt = safePersistedString(catalog.refreshedAt, 64);
-    if (!models || !codexModels || !opencodeModels || !grokModels || !qoderModels || !piModels || !geminiModels
+    if (!models || !codexModels || !opencodeModels || !grokModels || !qoderModels || !piModels
         || !refreshedAt || Number.isNaN(Date.parse(refreshedAt))) {
         return null;
     }
@@ -613,7 +608,6 @@ function parsePersistedModelCatalog(value) {
         grokModels,
         qoderModels,
         piModels,
-        geminiModels,
         thinkingEfforts: parsePersistedThinkingEfforts(catalog.thinkingEfforts),
         claudeVersion,
         opencodeVersion,
@@ -704,7 +698,6 @@ async function discoverModelCache(options, previous) {
         grokModels: grokProbe.ok ? grokProbe.value : cloneModels(previous.grokModels),
         qoderModels: qoderProbe.ok ? qoderProbe.value : cloneModels(previous.qoderModels),
         piModels: piProbe.ok ? piProbe.value : cloneModels(previous.piModels),
-        geminiModels: cloneModels(previous.geminiModels),
         thinkingEfforts: {
             claude: claudeEffortProbe.ok ? claudeEffortProbe.value : cloneThinkingEfforts(previous.thinkingEfforts).claude,
             opencode: opencodeProbe.models.ok && unionModelEfforts(opencodeProbe.models.value).length
@@ -717,7 +710,6 @@ async function discoverModelCache(options, previous) {
                 : piEffortProbe.ok
                     ? piEffortProbe.value
                     : cloneThinkingEfforts(previous.thinkingEfforts).pi,
-            gemini: cloneThinkingEfforts(previous.thinkingEfforts).gemini,
         },
         claudeVersion,
         opencodeVersion: opencodeProbe.version.ok ? opencodeProbe.version.value : previous.opencodeVersion,

package/dist/native-session-title.d.ts

@@ -10,7 +10,7 @@ export interface NativeTitleHomes {
  * provider 自己在运行期写下的会话标题：
  * codex `session_index.jsonl` 的 thread_name、qoder 转录里的 ai-title、
  * OpenCode SQLite 的 session.title、grok `summary.json` 的 generated_title。
- * Claude / Pi / Gemini 没有这个入口，返回空串让调用方回退系统硅基员工。
+ * Claude / Pi 没有这个入口，返回空串让调用方回退系统硅基员工。
  */
 export declare function readNativeSessionTitle(provider: SessionProvider, providerSessionId: string | null | undefined, cwd: string, homes?: NativeTitleHomes): Promise<string>;
 /** 只用于测试与降级：清掉按文件指纹缓存的原生标题。 */

package/dist/native-session-title.js

@@ -11,7 +11,7 @@ const GROK_WALK_LIMIT = 4_000;
  * provider 自己在运行期写下的会话标题：
  * codex `session_index.jsonl` 的 thread_name、qoder 转录里的 ai-title、
  * OpenCode SQLite 的 session.title、grok `summary.json` 的 generated_title。
- * Claude / Pi / Gemini 没有这个入口，返回空串让调用方回退系统硅基员工。
+ * Claude / Pi 没有这个入口，返回空串让调用方回退系统硅基员工。
  */
 export async function readNativeSessionTitle(provider, providerSessionId, cwd, homes = {}) {
     const id = providerSessionId?.trim() ?? "";