@co0ontty/wand 4.93.0 → 4.94.0

package/dist/run-command.js

@@ -1,4 +1,4 @@
-import { execFile, spawnSync, } from "node:child_process";
+import { execFile, spawn, spawnSync, } from "node:child_process";
 import { buildChildEnv } from "./env-utils.js";
 /** Default cap for captured stdout/stderr of one-shot CLI probes (1 MiB). */
 export const RUN_COMMAND_MAX_BUFFER = 1024 * 1024;
@@ -30,6 +30,19 @@ export function runCommandSync(file, args, options = {}) {
         shell: false,
     });
 }
+/** Foreground operations such as sudo: the terminal owns input (including passwords).
+ * No capture, shell, or timeout: cancellation belongs to the user, and Core drain
+ * may legitimately wait longer than the bounded probe timeout.
+ */
+export function runCommandInteractive(file, args) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(file, [...args], {
+            env: commandEnv({}), stdio: "inherit", shell: false,
+        });
+        child.once("error", reject);
+        child.once("exit", (code, signal) => resolve(code ?? (signal === "SIGINT" ? 130 : 1)));
+    });
+}
 /** Async variant with the same env/timeout/output-cap contract; never rejects. */
 export function runCommand(file, args, options = {}) {
     const execOptions = {

package/dist/server-session-lifecycle-routes.js

@@ -38,7 +38,7 @@ export function registerSessionLifecycleRoutes(app, ctx) {
             const selectedEmployeeCandidate = employee ? selectEmployeeCandidate(employee) : null;
             const employeeAgent = selectedEmployeeCandidate?.agent;
             if (body.provider && !isSessionProvider(body.provider)) {
-                res.status(400).json({ error: "结构化会话当前仅支持 Claude、Codex、OpenCode、Grok、Qoder、Pi 或 Gemini provider。" });
+                res.status(400).json({ error: "结构化会话当前仅支持 Claude、Codex、OpenCode、Grok、Qoder 或 Pi provider。" });
                 return;
             }
             const overrideCli = body.overrideCli === true;

package/dist/server-storage-cleanup-routes.d.ts

@@ -0,0 +1,3 @@
+import type { Express, RequestHandler } from "express";
+import type { StorageCleanup } from "./storage-cleanup.js";
+export declare function registerStorageCleanupRoutes(app: Express, cleanup: StorageCleanup, requireAdmin: RequestHandler): void;

package/dist/server-storage-cleanup-routes.js

@@ -0,0 +1,19 @@
+import { asyncRoute } from "./express-async.js";
+import { HttpError } from "./http-error.js";
+export function registerStorageCleanupRoutes(app, cleanup, requireAdmin) {
+    app.use("/api/storage-cleanup", requireAdmin, (_req, res, next) => { res.set("Cache-Control", "no-store"); next(); });
+    app.get("/api/storage-cleanup/status", (_req, res) => { res.json(cleanup.status()); });
+    app.get("/api/storage-cleanup/preview", asyncRoute(async (_req, res) => {
+        if (cleanup.status().running)
+            throw new HttpError(409, "cleanup_busy", "清理正在进行，请稍后重试。");
+        res.json(await cleanup.run());
+    }));
+    app.post("/api/storage-cleanup/run", asyncRoute(async (req, res) => {
+        if (req.body !== undefined && (!req.body || typeof req.body !== "object" || Array.isArray(req.body) || Object.keys(req.body).length)) {
+            throw new HttpError(400, "bad_request", "清理范围和保留期由服务端固定，不接受路径或命令参数。");
+        }
+        if (cleanup.status().running)
+            throw new HttpError(409, "cleanup_busy", "清理正在进行，请稍后重试。");
+        res.json(await cleanup.run(true));
+    }));
+}

package/dist/server-workspace-routes.d.ts

@@ -3,6 +3,7 @@ import type { SessionRegistry } from "./session-registry.js";
 import type { WandStorage } from "./storage.js";
 import { type LayoutNode, type TaskWindowLayout } from "./types.js";
 import { type AutoTaskTitleOptions } from "./task-title-service.js";
+import { type TitleJudge } from "./task-title-organize.js";
 /** 校验并清洗前端提交的布局树；非法输入返回 null（空工作空间）。 */
 export declare function sanitizeLayout(value: unknown): LayoutNode | null;
 /** 校验任务级工作窗口集合；旧版单棵布局会兼容升级成一个 window。 */
@@ -14,4 +15,6 @@ export declare function sanitizeTaskLayout(value: unknown): TaskWindowLayout | n
  * - POST 只建项目实体，**不启动任何会话**；会话由工作空间内「+」标签按需创建并绑定 workspaceId。
  * - 布局树由前端 allotment 构造，PUT 时经 sanitizeLayout 校验/规整后落库。
  */
-export declare function registerWorkspaceRoutes(app: Express, storage: WandStorage, sessions?: SessionRegistry, titleOptions?: AutoTaskTitleOptions): void;
+export declare function registerWorkspaceRoutes(app: Express, storage: WandStorage, sessions?: SessionRegistry, titleOptions?: AutoTaskTitleOptions, organize?: {
+    judge?: TitleJudge;
+}): void;

package/dist/server-workspace-routes.js

@@ -16,9 +16,11 @@ import { attachUnboundSessionsToWorkspace, normalizeProjectCwd, projectCwdForSes
 import { defaultMilestoneIdForWrite, resolvedMilestoneFields, scopedMilestoneId } from "./milestone-scope.js";
 import { isUnnamedWorkspaceTaskName, UNNAMED_WORKSPACE_TASK_NAME } from "./wand-task-sync.js";
 import { isSessionProvider } from "./session-provider.js";
-import { firstLayoutTabId } from "./layout-tree.js";
+import { firstLayoutTabId, wrapLegacyTaskLayout } from "./layout-tree.js";
 import { parentTaskIdFrom } from "./task-agent-parsing.js";
 import { taskTitleService, refreshAutoBoardTaskTitles } from "./task-title-service.js";
+import { organizeSelectedByTitle, titleJudgeForStorage } from "./task-title-organize-service.js";
+import { TITLE_ORGANIZE_MAX_SESSIONS, TITLE_ORGANIZE_MAX_TASKS } from "./task-title-organize.js";
 import { provisionalTaskTitleFromDescription } from "./task-title.js";
 import { badRequest, surfaceDomainError } from "./http-error.js";
 function workspaceSessionTitle(session, names = {}) {
@@ -286,13 +288,8 @@ function layoutHasTab(node, tabId) {
 /** 校验任务级工作窗口集合；旧版单棵布局会兼容升级成一个 window。 */
 export function sanitizeTaskLayout(value) {
     const legacy = sanitizeLayoutNode(value);
-    if (legacy) {
-        return {
-            type: "windows",
-            windows: [{ id: "window-legacy", layout: legacy, activeTabId: firstLayoutTabId(legacy) }],
-            activeWindowId: "window-legacy",
-        };
-    }
+    if (legacy)
+        return wrapLegacyTaskLayout(legacy);
     if (!value || typeof value !== "object")
         return null;
     const record = value;
@@ -327,7 +324,7 @@ export function sanitizeTaskLayout(value) {
  * - POST 只建项目实体，**不启动任何会话**；会话由工作空间内「+」标签按需创建并绑定 workspaceId。
  * - 布局树由前端 allotment 构造，PUT 时经 sanitizeLayout 校验/规整后落库。
  */
-export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {}) {
+export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {}, organize = {}) {
     taskTitleService(storage, titleOptions);
     // 列出所有项目（按创建时间降序：新建在前，打开不会改位置）
     app.get("/api/workspaces", (req, res) => {
@@ -475,6 +472,75 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         res.json({ ok: true, layout });
     });
     // ── 任务（Task = 命名 + 独立 worktree + 一组标签）──
+    // 侧边栏多选后的按标题归类：任务归入同类父任务，会话归入标题对应的任务。
+    // 不确定的不移动。选中任务时，其下会话即使没有被逐条勾选也在范围内。
+    app.post("/api/tasks/organize-by-title", asyncRoute(async (req, res) => {
+        const body = req.body;
+        if (body?.mode !== undefined && body.mode !== "auto" && body.mode !== "all") {
+            res.status(400).json({ error: "归类范围必须是 auto 或 all。" });
+            return;
+        }
+        const ids = (value, limit) => {
+            if (!Array.isArray(value) || value.some((item) => typeof item !== "string"))
+                return null;
+            return [...new Set(value.map((item) => item.trim()).filter(Boolean))].slice(0, limit + 1);
+        };
+        let taskIds = ids(body?.taskIds, TITLE_ORGANIZE_MAX_TASKS);
+        let sessionIds = body?.sessionIds === undefined ? [] : ids(body.sessionIds, TITLE_ORGANIZE_MAX_SESSIONS);
+        if (body?.target !== undefined) {
+            const target = body.target;
+            if (!target || typeof target !== "object" || Array.isArray(target)
+                || typeof target.kind !== "string" || !["all", "workspace", "directory"].includes(target.kind)
+                || (target.kind === "workspace" && (typeof target.workspaceId !== "string" || !storage.getWorkspace(target.workspaceId)))
+                || (target.kind === "directory" && (typeof target.cwd !== "string" || !target.cwd.trim()))
+                || body.taskIds !== undefined || body.sessionIds !== undefined) {
+                res.status(400).json({ error: "归类目标无效。" });
+                return;
+            }
+            const cwd = typeof target.cwd === "string" ? normalizeProjectCwd(target.cwd) : "";
+            taskIds = storage.listAllWorkspaceTasks().filter(task => {
+                if (task.archived)
+                    return false;
+                if (target.kind === "all")
+                    return true;
+                if (target.kind === "workspace")
+                    return task.workspaceId === target.workspaceId;
+                const workspace = storage.getWorkspace(task.workspaceId);
+                // Match the same grouping as GET /api/tasks, including synthetic global directories.
+                return normalizeProjectCwd(workspace && !isGlobalWorkspace(workspace)
+                    ? workspace.cwd : taskRuntimeCwd(task, workspace)) === cwd;
+            }).map(task => task.id);
+            sessionIds = storage.loadSessionsSlim().filter(session => {
+                if (session.archived || session.workspaceTaskId)
+                    return false;
+                if (target.kind === "all")
+                    return true;
+                const directory = target.kind === "workspace" ? storage.getWorkspace(String(target.workspaceId))?.cwd : cwd;
+                return projectCwdForSession(session) === normalizeProjectCwd(directory || "");
+            }).map(session => session.id);
+        }
+        if (!taskIds || !sessionIds) {
+            res.status(400).json({ error: "需要任务 id 列表，会话 id 列表可选。" });
+            return;
+        }
+        if (!taskIds.length && body?.target === undefined) {
+            res.status(400).json({ error: "请选择要归类的任务。" });
+            return;
+        }
+        if (body?.target === undefined && (taskIds.length > TITLE_ORGANIZE_MAX_TASKS || sessionIds.length > TITLE_ORGANIZE_MAX_SESSIONS)) {
+            res.status(400).json({ error: `一次最多归类 ${TITLE_ORGANIZE_MAX_TASKS} 个任务、${TITLE_ORGANIZE_MAX_SESSIONS} 个会话。` });
+            return;
+        }
+        const result = await organizeSelectedByTitle(storage, { taskIds, sessionIds, mode: body?.mode === "all" ? "all" : "auto" }, {
+            judge: organize.judge ?? titleJudgeForStorage(storage, titleOptions),
+            refreshSession: (sessionId) => sessions?.refreshSessionWorkspace(sessionId),
+        });
+        if (!result.foundTasks && body?.target === undefined) {
+            res.status(404).json({ error: "未找到所选任务。" });
+            return;
+        }
+        res.json(result);
+    }));
     // 不依赖项目的独立任务：挂到隐藏的全局空间，目录可省略（使用全局临时目录）。
     app.post("/api/tasks", asyncRoute(async (req, res) => {
         const workspace = storage.ensureGlobalWorkspace();

package/dist/server.js

@@ -16,7 +16,7 @@ import { createExtensionCors } from "./middleware/cors.js";
 import { ensureCertificates } from "./cert.js";
 import { getDefaultModelForProvider, getProviderDefaultModels, isExecutionMode, resolveConfigDir, writePreferenceToStorage, } from "./config.js";
 import { ModelCatalogService } from "./models.js";
-import { fallbackProviderModel, sessionEmployeeFields } from "./session-model.js";
+import { fallbackProviderModel, readProviderModelPreferences, sessionEmployeeFields } from "./session-model.js";
 import { ProcessManager } from "./process-manager.js";
 import { SessionLogger } from "./session-logger.js";
 import { coreHarnessAgentDir } from "./harness-engine.js";
@@ -35,6 +35,8 @@ import { registerSpeechRoutes } from "./server-speech-routes.js";
 import { SpeechPolisherService } from "./speech-polisher-service.js";
 import { SPEECH_POLISHER_KEY } from "./speech-polisher-identity.js";
 import { registerLocalModelRoutes } from "./server-local-model-routes.js";
+import { createStorageCleanup } from "./storage-cleanup.js";
+import { registerStorageCleanupRoutes } from "./server-storage-cleanup-routes.js";
 import { LocalModelSetupService } from "./local-model-setup.js";
 import { DecisionExpertService } from "./decision-expert-service.js";
 import { DECISION_EXPERT_KEY } from "./decision-expert-identity.js";
@@ -80,7 +82,9 @@ import { safeServiceInstalled } from "./tui/runtime-utils.js";
 import { toSessionDetailDTO } from "./session-transport.js";
 import { compactToolMessagesForTransport, windowMessagesForTransport } from "./message-truncator.js";
 import { enrichStructuredMessages } from "./structured-client-protocol.js";
-import { registerUploadRoutes } from "./upload-routes.js";
+import { registerUploadRoutes, invalidateUploadUsage } from "./upload-routes.js";
+import { uploadReferenceGuard } from "./upload-reference-guard.js";
+import { configTemporaryRoot } from "./managed-temp.js";
 import { optimizePrompt, PromptOptimizeError } from "./prompt-optimizer.js";
 import { resolveDatabasePath, WandStorage } from "./storage.js";
 import { deepRepairRuntimePath, formatPathRepairSummary, repairRuntimePath } from "./path-repair.js";
@@ -250,19 +254,9 @@ export async function startServer(config, configPath, options = {}) {
     const decisions = new DecisionService(config.localDecision);
     const decisionExpert = new DecisionExpertService({ local: decisions, free: openRouter, config,
         employee: () => storage.getSystemSiliconEmployee(DECISION_EXPERT_KEY) });
-    // 默认模型优先读存储（UI 改设置后实时生效），未设置时由 getPreference 回落到 config。
-    const getCurrentDefaultModels = () => ({
-        claude: storage.getPreference("pref:defaultModel", config.defaultModel ?? ""),
-        codex: storage.getPreference("pref:defaultCodexModel", config.defaultCodexModel ?? ""),
-        opencode: storage.getPreference("pref:defaultOpenCodeModel", config.defaultOpenCodeModel ?? ""),
-        grok: storage.getPreference("pref:defaultGrokModel", config.defaultGrokModel ?? ""),
-        qoder: storage.getPreference("pref:defaultQoderModel", config.defaultQoderModel ?? ""),
-        pi: storage.getPreference("pref:defaultPiModel", config.defaultPiModel ?? ""),
-        gemini: storage.getPreference("pref:defaultGeminiModel", config.defaultGeminiModel ?? ""),
-    });
     const getModelRefreshOptions = () => {
         const injected = options.modelRefreshOptions?.() ?? {};
-        const currentDefaults = getCurrentDefaultModels();
+        const currentDefaults = readProviderModelPreferences(config, storage);
         return {
             storage,
             managedPiModels: () => openRouter.catalog(),
@@ -284,6 +278,9 @@ export async function startServer(config, configPath, options = {}) {
     // Clients receive its persisted snapshot via GET /api/models.
     const modelCatalog = new ModelCatalogService(getModelRefreshOptions);
     const configDir = resolveConfigDir(configPath);
+    const storageCleanup = createStorageCleanup(configDir, { uploads: storage.uploads,
+        uploadsActive: () => sessionRegistry.listSlim().some(session => (session.sessionKind === "structured" && session.status === "running") || (session.queuedMessages?.length ?? 0) > 0),
+        onUploadRemoved: invalidateUploadUsage });
     const speech = new SpeechService(storage, configDir);
     const localModels = new LocalModelSetupService({ configDir, speech, decisions,
         decisionConfig: () => config.localDecision ?? { enabled: false, pythonPath: "", modelPath: "" },
@@ -348,7 +345,6 @@ export async function startServer(config, configPath, options = {}) {
             grok: "grokModels",
             qoder: "qoderModels",
             pi: "piModels",
-            gemini: "geminiModels",
         }[provider];
         return cache[key].map((entry) => entry.id);
     };
@@ -454,6 +450,7 @@ export async function startServer(config, configPath, options = {}) {
     // Every /api family declares its scope in src/middleware/api-scope.ts; unlisted
     // paths are admin-only for connected apps (default-deny).
     app.use("/api", createApiScopeMiddleware());
+    app.use("/api", uploadReferenceGuard(storage.uploads));
     app.use(userMemoryOperationLog(storage));
     const userMemory = new UserMemoryService({
         storage, config, free: openRouter,
@@ -583,11 +580,12 @@ export async function startServer(config, configPath, options = {}) {
         free: openRouter,
     });
     registerClaudeHistoryRoutes(app, { processes, storage });
-    registerWorkspaceRoutes(app, storage, sessionRegistry, { config });
+    registerWorkspaceRoutes(app, storage, sessionRegistry, { config, free: openRouter });
     registerMissionRoutes(app, missions);
-    registerUploadRoutes(app, sessionRegistry);
+    registerUploadRoutes(app, sessionRegistry, { uploads: storage.uploads, temporaryRoot: configTemporaryRoot(configDir) });
     registerSpeechRoutes(app, { speech, requireSessions, requireAdmin, polisher: speechPolisher });
     registerLocalModelRoutes(app, { models: localModels, requireSessions, requireAdmin });
+    registerStorageCleanupRoutes(app, storageCleanup, requireAdmin);
     app.post("/api/optimize-prompt", asyncRoute(async (req, res) => {
         const body = (req.body ?? {});
         const text = typeof body.text === "string" ? body.text : "";
@@ -633,6 +631,10 @@ export async function startServer(config, configPath, options = {}) {
             res.status(400).json({ error: "PTY 只能选择 CLI 工具。" });
             return;
         }
+        if (body.provider !== undefined && !isSessionProvider(body.provider)) {
+            res.status(400).json({ error: "请选择有效的执行工具。" });
+            return;
+        }
         const interactiveShell = body.shell === true;
         // 连接应用只能启动 Provider CLI 会话（provider 字段 + 该 CLI 的标准可执行名）。
         // 任意自定义命令字符串需要 admin。shell:true 是原生客户端“空白终端”（服务端配置的
@@ -1012,6 +1014,8 @@ export async function startServer(config, configPath, options = {}) {
     // preferences, or stop a live execution. Startup recovery is already attached.
     if (!testMode)
         daemonMaintenance.start();
+    if (!testMode && config.autoCleanupTemporaryFiles !== false)
+        storageCleanup.start();
     // ── Auto-update logic ──
     // 同一目标版本自动安装失败后指数退避（30 分钟起，最长 6 小时），避免每轮轮询都重试
     // 同一个必失败的安装并刷屏；用户主动触发（切通道/打开开关）时清零重试。
@@ -1136,6 +1140,7 @@ export async function startServer(config, configPath, options = {}) {
             const teamShutdown = aiTeams.dispose();
             await scheduledTasks.dispose();
             await daemonMaintenance.stop();
+            await storageCleanup.stop();
             decisions.dispose();
             openRouter.dispose();
             await userMemory.dispose();

package/dist/service-command-privilege.d.ts

@@ -0,0 +1,17 @@
+import { type ServiceScope } from "./service-manager/index.js";
+export declare function resolveServiceCommandScope(command: string, args: string[]): ServiceScope;
+export interface ServicePrivilegeRuntime {
+    platform: NodeJS.Platform;
+    uid: number | undefined;
+    interactive: boolean;
+    node: string;
+    cli: string;
+    execArgv: string[];
+    run(file: string, args: readonly string[]): Promise<number>;
+    report(message: string): void;
+}
+/** null means continue in this process; a number is the elevated child's exit code.
+ * Re-enter the same CLI (not a PATH-resolved wand) before loading service code.
+ * Scope/config are pinned so sudo's HOME/PATH cannot target a different service.
+ */
+export declare function elevateServiceCommand(command: string, args: string[], configPath: string, scope: ServiceScope, runtime?: ServicePrivilegeRuntime): Promise<number | null>;

package/dist/service-command-privilege.js

@@ -0,0 +1,55 @@
+import path from "node:path";
+import process from "node:process";
+import { DEFAULT_SERVICE_SCOPE, detectInstalledScope } from "./service-manager/index.js";
+import { runCommandInteractive } from "./run-command.js";
+const MUTATING_SERVICE_COMMANDS = new Set([
+    "service:install", "service:uninstall", "service:start", "service:stop", "service:restart",
+]);
+export function resolveServiceCommandScope(command, args) {
+    if (args.includes("--user"))
+        return "user";
+    if (args.includes("--system"))
+        return "system";
+    return command === "service:install" ? DEFAULT_SERVICE_SCOPE : detectInstalledScope() ?? DEFAULT_SERVICE_SCOPE;
+}
+/** null means continue in this process; a number is the elevated child's exit code.
+ * Re-enter the same CLI (not a PATH-resolved wand) before loading service code.
+ * Scope/config are pinned so sudo's HOME/PATH cannot target a different service.
+ */
+export async function elevateServiceCommand(command, args, configPath, scope, runtime = {
+    platform: process.platform, uid: process.getuid?.(),
+    interactive: Boolean(process.stdin.isTTY && process.stderr.isTTY),
+    node: process.execPath, cli: process.argv[1], execArgv: process.execArgv,
+    run: runCommandInteractive, report: (message) => process.stderr.write(`[wand] ${message}\n`),
+}) {
+    if (!MUTATING_SERVICE_COMMANDS.has(command) || scope !== "system" || runtime.uid === 0
+        || !["darwin", "linux"].includes(runtime.platform))
+        return null;
+    const forwarded = [];
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--user" || args[i] === "--system")
+            continue;
+        if (args[i] === "-c" || args[i] === "--config") {
+            i++;
+            continue;
+        }
+        forwarded.push(args[i]);
+    }
+    if (runtime.interactive)
+        runtime.report("系统服务操作需要管理员权限，正在申请 sudo；请在终端输入密码（输入不会显示）。");
+    try {
+        const code = await runtime.run("sudo", [
+            ...(runtime.interactive ? [] : ["-n"]), "--", runtime.node, ...runtime.execArgv,
+            path.resolve(runtime.cli), ...forwarded, "--system", "-c", path.resolve(configPath),
+        ]);
+        if (code !== 0)
+            runtime.report(runtime.interactive
+                ? "管理员授权或服务操作未完成；服务命令已停止，请查看上方错误。"
+                : "当前没有交互终端，无法输入 sudo 密码。请在终端运行同一命令以自动申请授权。");
+        return code;
+    }
+    catch (error) {
+        runtime.report(`无法申请 sudo：${error instanceof Error ? error.message : String(error)}`);
+        return 1;
+    }
+}

package/dist/service-manager/index.d.ts

@@ -11,6 +11,8 @@ export interface ServiceManager {
     unitPath(scope: ServiceScope): string;
     /** Command the installed unit runs, or null when absent/unreadable. */
     readEntrypoint(scope: ServiceScope): string | null;
+    /** Config used by the installed Server; restart must drain this exact process. */
+    readConfigPath(scope: ServiceScope): string | null;
 }
 /** The manager for the current platform, or null where Wand has no service integration. */
 export declare function currentServiceManager(platform?: NodeJS.Platform): ServiceManager | null;
@@ -20,3 +22,4 @@ export declare function detectInstalledServiceScopes(): ServiceScope[];
 /** Auto-detect an installed scope; system preferred. */
 export declare function detectInstalledScope(): ServiceScope | null;
 export declare function readServiceEntrypoint(scope: ServiceScope): string | null;
+export declare function readServiceConfigPath(scope: ServiceScope): string | null;

package/dist/service-manager/index.js

@@ -34,3 +34,6 @@ export function detectInstalledScope() {
 export function readServiceEntrypoint(scope) {
     return currentServiceManager()?.readEntrypoint(scope) ?? null;
 }
+export function readServiceConfigPath(scope) {
+    return currentServiceManager()?.readConfigPath(scope) ?? null;
+}

package/dist/service-manager/launchd.d.ts

@@ -2,6 +2,7 @@ import type { ServiceManager, ServiceScope } from "./index.js";
 export declare class LaunchdServiceManager implements ServiceManager {
     readonly platform: "darwin";
     unitPath(scope: ServiceScope): string;
+    readConfigPath(scope: ServiceScope): string | null;
     readEntrypoint(scope: ServiceScope): string | null;
 }
 /** PID of the loaded com.wand.web job in a launchd domain ("system" or "gui/<uid>"), or null. */

package/dist/service-manager/launchd.js

@@ -8,6 +8,21 @@ export class LaunchdServiceManager {
             ? path.join(os.homedir(), "Library/LaunchAgents/com.wand.web.plist")
             : "/Library/LaunchDaemons/com.wand.web.plist";
     }
+    readConfigPath(scope) {
+        const result = runCommandSync("plutil", ["-extract", "ProgramArguments", "json", "-o", "-", this.unitPath(scope)], { timeout: 5_000 });
+        if (result.status !== 0)
+            return null;
+        try {
+            const args = JSON.parse(result.stdout);
+            if (!Array.isArray(args) || !args.every((arg) => typeof arg === "string"))
+                return null;
+            const at = args.findIndex((arg) => arg === "-c" || arg === "--config");
+            return at >= 0 && args[at + 1] ? path.resolve(args[at + 1]) : null;
+        }
+        catch {
+            return null;
+        }
+    }
     readEntrypoint(scope) {
         const result = runCommandSync("plutil", ["-extract", "ProgramArguments.1", "raw", "-o", "-", this.unitPath(scope)], { timeout: 5_000 });
         return result.status === 0 ? (result.stdout || "").trim() || null : null;

package/dist/service-manager/systemd.d.ts

@@ -2,5 +2,6 @@ import type { ServiceManager, ServiceScope } from "./index.js";
 export declare class SystemdServiceManager implements ServiceManager {
     readonly platform: "linux";
     unitPath(scope: ServiceScope): string;
+    readConfigPath(scope: ServiceScope): string | null;
     readEntrypoint(scope: ServiceScope): string | null;
 }

package/dist/service-manager/systemd.js

@@ -8,6 +8,17 @@ export class SystemdServiceManager {
             ? path.join(os.homedir(), ".config/systemd/user/wand.service")
             : "/etc/systemd/system/wand.service";
     }
+    readConfigPath(scope) {
+        try {
+            const execStart = readFileSync(this.unitPath(scope), "utf8").split("\n").find((line) => line.startsWith("ExecStart="));
+            const match = execStart?.match(/(?:^|\s)(?:-c|--config)(?:=|\s+)(?:"([^"\\]+)"|'([^'\\]+)'|([^\s"'\\]+))(?=\s|$)/);
+            const config = match?.[1] ?? match?.[2] ?? match?.[3];
+            return config ? path.resolve(config) : null;
+        }
+        catch {
+            return null;
+        }
+    }
     readEntrypoint(scope) {
         try {
             const execStart = readFileSync(this.unitPath(scope), "utf8").split("\n").find((line) => line.startsWith("ExecStart="));

package/dist/session-ai-context.js

@@ -8,13 +8,24 @@ import { inferProviderFromCommand, inferProviderFromRunner } from "./session-pro
  * still identify Codex through structuredState, runner, or command.
  */
 export function resolveSessionProvider(snapshot) {
-    if (isSessionProvider(snapshot.provider))
-        return snapshot.provider;
-    const structuredProvider = snapshot.structuredState?.provider;
-    if (isSessionProvider(structuredProvider))
-        return structuredProvider;
+    for (const provider of [snapshot.provider, snapshot.structuredState?.provider]) {
+        if (provider == null)
+            continue;
+        if (!isSessionProvider(provider))
+            throw new Error(`不支持的会话 provider：${String(provider)}`);
+        return provider;
+    }
     const runner = snapshot.runner ?? snapshot.structuredState?.runner;
-    return inferProviderFromRunner(runner) ?? inferProviderFromCommand(snapshot.command) ?? "claude";
+    if (runner && runner !== "pty") {
+        const provider = inferProviderFromRunner(runner);
+        if (!provider)
+            throw new Error(`不支持的会话 runner：${String(runner)}`);
+        return provider;
+    }
+    const provider = inferProviderFromCommand(snapshot.command);
+    if (!provider)
+        throw new Error("不支持的会话命令，无法选择 AI provider。");
+    return provider;
 }
 function normalizeModel(value) {
     const model = value?.trim();

package/dist/session-completion-state.d.ts

@@ -7,7 +7,9 @@ export interface SessionCompletionState {
 export declare function createSessionCompletionViewIntent(): {
     open(id: string): void;
     clear(): void;
+    loaded(id: string): void;
     isOpen(id: string): boolean;
+    isLoaded(id: string): boolean;
 };
 /** Delayed HTTP/WS projections may advance generations, but must never move them backwards. */
 export declare function mergeSessionCompletionState(current: SessionCompletionState | null | undefined, incoming: SessionCompletionState): SessionCompletionState;

package/dist/session-completion-state.js

@@ -1,10 +1,14 @@
 /** Explicit navigation, not a list refresh choosing its preferred/default session. */
 export function createSessionCompletionViewIntent() {
     let openedId = null;
+    let loaded = false;
     return {
-        open(id) { openedId = id; },
-        clear() { openedId = null; },
+        open(id) { openedId = id; loaded = false; },
+        clear() { openedId = null; loaded = false; },
+        loaded(id) { if (openedId === id)
+            loaded = true; },
         isOpen(id) { return openedId === id; },
+        isLoaded(id) { return openedId === id && loaded; },
     };
 }
 /** Delayed HTTP/WS projections may advance generations, but must never move them backwards. */

package/dist/session-logger.js

@@ -1,6 +1,7 @@
 import { mkdirSync, rmSync, appendFileSync, writeFileSync, readFileSync, existsSync, statSync, renameSync, unlinkSync, openSync, readSync, closeSync } from "node:fs";
 import path from "node:path";
 import process from "node:process";
+import { appendBoundedDiagnostic } from "./diagnostic-logs.js";
 // ── Constants ──
 /** Max size for a single PTY log file before rotation (50 MB) */
 const PTY_LOG_MAX_SIZE = 50 * 1024 * 1024;
@@ -52,7 +53,12 @@ export class SessionLogger {
         this.totalBufferMaxBytes = positiveInteger(options.totalBufferMaxBytes, DEFAULT_TOTAL_BUFFER_MAX_BYTES);
         this.ptyLogMaxBytes = positiveInteger(options.ptyLogMaxBytes, PTY_LOG_MAX_SIZE);
         this.ptyLogMaxRotations = positiveInteger(options.ptyLogMaxRotations, PTY_LOG_MAX_ROTATIONS);
-        this.appendFile = options.appendFile ?? ((filePath, data) => appendFileSync(filePath, data));
+        this.appendFile = options.appendFile ?? ((filePath, data) => {
+            if (["structured-stdout.log", "structured-stderr.log", "structured-spawns.jsonl"].includes(path.basename(filePath)))
+                appendBoundedDiagnostic(filePath, data);
+            else
+                appendFileSync(filePath, data);
+        });
         try {
             mkdirSync(this.baseDir, { recursive: true });
         }

package/dist/session-model.d.ts

@@ -1,4 +1,8 @@
+import { type ProviderModelField } from "./config.js";
 import type { SessionProvider, WandConfig } from "./types.js";
+import type { WandStorage } from "./storage.js";
+/** Read raw live preferences without the configured-model trim/default projection. */
+export declare function readProviderModelPreferences(config: Pick<WandConfig, ProviderModelField>, storage: Pick<WandStorage, "getPreference">): Record<SessionProvider, string>;
 /** The repeated `group selector || provider default` tail. Callers keep their own explicit-model precedence. */
 export declare function fallbackProviderModel(config: WandConfig, provider: SessionProvider): string | undefined;
 /** Employee and conversation creates treat blank and `default` as the configured fallback. */

package/dist/session-model.js

@@ -1,10 +1,19 @@
-import { getDefaultModelForProvider } from "./config.js";
+import { getDefaultModelForProvider, PROVIDER_MODEL_PREFERENCE_FIELDS } from "./config.js";
 import { defaultModelGroupSelector } from "./model-groups.js";
+import { SESSION_PROVIDERS } from "./session-provider.js";
+/** Read raw live preferences without the configured-model trim/default projection. */
+export function readProviderModelPreferences(config, storage) {
+    const models = {};
+    for (const provider of SESSION_PROVIDERS) {
+        const field = PROVIDER_MODEL_PREFERENCE_FIELDS[provider];
+        models[provider] = storage.getPreference(`pref:${field}`, config[field] ?? "");
+    }
+    return models;
+}
 /** The repeated `group selector || provider default` tail. Callers keep their own explicit-model precedence. */
 export function fallbackProviderModel(config, provider) {
-    return defaultModelGroupSelector(config.modelGroups, provider, getDefaultModelForProvider(config, provider))
-        || getDefaultModelForProvider(config, provider)
-        || undefined;
+    const defaultModel = getDefaultModelForProvider(config, provider);
+    return defaultModelGroupSelector(config.modelGroups, provider, defaultModel) || defaultModel || undefined;
 }
 /** Employee and conversation creates treat blank and `default` as the configured fallback. */
 export function resolveExplicitOrFallbackModel(config, provider, explicit) {

package/dist/session-registry.d.ts

@@ -3,7 +3,7 @@ import type { WandStorage } from "./storage.js";
 import type { StructuredSessionManager } from "./structured-session-manager.js";
 import type { ExecutionMode, SessionSnapshot } from "./types.js";
 export type SessionOwner = "structured" | "pty" | "storage";
-export type ProviderHistoryDeleter = Pick<ProcessManager, "deleteClaudeHistoryFiles" | "deleteCodexHistoryFiles" | "deleteOpenCodeHistorySessions" | "deleteQoderHistoryFiles" | "deletePiHistoryFiles" | "deleteGrokHistoryFiles" | "deleteGeminiHistoryFiles">;
+export type ProviderHistoryDeleter = Pick<ProcessManager, "deleteClaudeHistoryFiles" | "deleteCodexHistoryFiles" | "deleteOpenCodeHistorySessions" | "deleteQoderHistoryFiles" | "deletePiHistoryFiles" | "deleteGrokHistoryFiles">;
 export declare function deleteProviderNativeHistory(deleter: ProviderHistoryDeleter, provider: string, providerSessionId: string, cwd: string): void;
 type HiddenSessionStore = Pick<WandStorage, "getConfigValue" | "setConfigValue">;
 /** The owner deletes the managed session first; native history/tombstones have one implementation. */

package/dist/session-registry.js

@@ -24,9 +24,6 @@ export function deleteProviderNativeHistory(deleter, provider, providerSessionId
         case "grok":
             deleter.deleteGrokHistoryFiles([id]);
             break;
-        case "gemini":
-            deleter.deleteGeminiHistoryFiles([id]);
-            break;
         default:
             break;
     }

package/dist/silicon-employee-draft.js

@@ -27,7 +27,6 @@ const PROVIDER_LABELS = {
     grok: "Grok Build CLI",
     qoder: "Qoder CLI",
     pi: "Pi coding agent",
-    gemini: "Gemini CLI",
 };
 /** 硅基员工只能跑结构化会话；候选沿用看板的「跟随服务端默认」。 */
 export function employeeAgentFor(provider) {