@co0ontty/wand 4.94.0 → 4.95.0

package/dist/storage/migrations.js

@@ -225,4 +225,14 @@ export const STORAGE_MIGRATIONS = [
       PRIMARY KEY(file_path, session_id)
     );
   `) },
+    { version: 6, name: "conversation-organization-jobs", up: db => db.exec(`
+    CREATE TABLE IF NOT EXISTS conversation_organization_jobs (
+      id TEXT PRIMARY KEY, request_token TEXT NOT NULL UNIQUE, scope_key TEXT NOT NULL,
+      status TEXT NOT NULL, state_json TEXT NOT NULL, updated_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS idx_conversation_organization_running ON conversation_organization_jobs(status);
+    CREATE TABLE IF NOT EXISTS conversation_organization_cache (
+      scope_key TEXT PRIMARY KEY, fingerprint TEXT NOT NULL, updated_at TEXT NOT NULL
+    );
+  `) },
 ];

package/dist/storage/secrets-repository.d.ts

@@ -1,3 +1,5 @@
+import { type EmployeeImConfig } from "../employee-im-types.js";
+import { type EmployeeImSettings } from "../employee-im-config.js";
 import { DatabaseSync } from "node:sqlite";
 import { type PasswordVault, type PasswordVaultItem, type PasswordVaultItemFilter, type PasswordVaultItemInput } from "../password-manager.js";
 import type { ConnectorMeta } from "./mappers.js";
@@ -41,6 +43,11 @@ export declare class SecretsRepository {
      * Rows that cannot be read (no legacy secret, corrupt) are left as they are and counted.
      */
     private reencryptLegacyVaultRows;
+    /** Public configuration is a separate projection: no credential is returned to clients or models. */
+    getEmployeeImConfig(employeeId: string): EmployeeImConfig;
+    /** Server delivery path only; callers must never expose this object over HTTP/WS. */
+    getEmployeeImSettings(employeeId: string): EmployeeImSettings;
+    saveEmployeeImConfig(employeeId: string, input: unknown): EmployeeImConfig;
     /** Encrypt an at-rest secret with the v2 key; empty values stay NULL. */
     private encryptStoredSecret;
     private decryptPasswordItem;

package/dist/storage/secrets-repository.js

@@ -1,4 +1,6 @@
 import crypto from "node:crypto";
+import { emptyEmployeeImConfig } from "../employee-im-types.js";
+import { normalizeStoredEmployeeImConfig, parseEmployeeImConfig } from "../employee-im-config.js";
 import { DEFAULT_PASSWORD_VAULT_ID, VaultDecryptError, decryptVaultSecretTyped, encryptVaultSecretV2, isVaultSecretV2, verifyAdminPassword, DEFAULT_PASSWORD_VAULT_NAME, itemMatchesFilter, normalizePasswordItemInput, normalizeVaultName, nowIso } from "../password-manager.js";
 import { hashAuthToken } from "./auth-token.js";
 import { loadVaultKey } from "./vault-keys.js";
@@ -66,7 +68,9 @@ export class SecretsRepository {
             .get(pattern, pattern, pattern);
         if (item)
             return true;
-        return !!this.db.prepare("SELECT 1 FROM connectors WHERE token LIKE ? LIMIT 1").get(pattern);
+        if (this.db.prepare("SELECT 1 FROM connectors WHERE token LIKE ? LIMIT 1").get(pattern))
+            return true;
+        return !!this.db.prepare("SELECT 1 FROM employee_im_settings WHERE credentials LIKE ? LIMIT 1").get(pattern);
     }
     requireVaultCipherKey() {
         if (this.cipherKey)
@@ -127,6 +131,29 @@ export class SecretsRepository {
             console.warn(`[wand] ${failed} vault value(s) could not be re-encrypted and were left as stored`);
         return converted;
     }
+    /** Public configuration is a separate projection: no credential is returned to clients or models. */
+    getEmployeeImConfig(employeeId) {
+        const row = this.db.prepare("SELECT config_json FROM employee_im_settings WHERE employee_id = ?").get(employeeId);
+        return row ? normalizeStoredEmployeeImConfig(JSON.parse(row.config_json)) : emptyEmployeeImConfig();
+    }
+    /** Server delivery path only; callers must never expose this object over HTTP/WS. */
+    getEmployeeImSettings(employeeId) {
+        const row = this.db.prepare("SELECT credentials FROM employee_im_settings WHERE employee_id = ?").get(employeeId);
+        const raw = row?.credentials ? decryptVaultSecretTyped(row.credentials, this.vaultKeys()) : undefined;
+        return { config: this.getEmployeeImConfig(employeeId), credentials: raw ? JSON.parse(raw) : {} };
+    }
+    saveEmployeeImConfig(employeeId, input) {
+        return this.s.transaction(() => {
+            if (!this.s.getSiliconEmployeeDefinition(employeeId))
+                throw new Error("员工不存在。");
+            const settings = parseEmployeeImConfig(input, this.getEmployeeImSettings(employeeId));
+            const encrypted = this.encryptStoredSecret(JSON.stringify(settings.credentials));
+            this.db.prepare(`INSERT INTO employee_im_settings (employee_id, config_json, credentials) VALUES (?, ?, ?)
+        ON CONFLICT(employee_id) DO UPDATE SET config_json = excluded.config_json, credentials = excluded.credentials`)
+                .run(employeeId, JSON.stringify(settings.config), encrypted);
+            return settings.config;
+        });
+    }
     /** Encrypt an at-rest secret with the v2 key; empty values stay NULL. */
     encryptStoredSecret(value) {
         if (!value)

package/dist/storage/tasks-repository.js

@@ -2,6 +2,7 @@ import crypto from "node:crypto";
 import { firstLayoutTabId } from "../layout-tree.js";
 import { nowIso } from "../password-manager.js";
 import { isSessionProvider } from "../session-provider.js";
+import { isSystemAiCall } from "../system-ai-call.js";
 import { isThinkingEffort } from "../structured-provider-common.js";
 import { DEFAULT_ITERATION_NAME, DEFAULT_WAND_TASK_PRIORITY, isTaskExecutionSubject, normalizeWandTaskAgentMode } from "../task-types.js";
 import { GLOBAL_WORKSPACE_ID } from "../types.js";
@@ -475,6 +476,8 @@ export class TaskRepository {
     }
     /** Atomic exclusive ownership change; cwd, output and execution are untouched. */
     moveSessionToWorkspaceTask(sessionId, taskId) {
+        if (taskId && isSystemAiCall(this.s.getSessionSlim(sessionId)))
+            throw new Error("系统调用记录不能绑定到业务任务。");
         this.s.notifyTaskTitleChange();
         this.s.transaction(() => {
             const session = this.s.getSessionWorkspace(sessionId);
@@ -521,6 +524,7 @@ export class TaskRepository {
         const provider = session.provider;
         const agent = isSessionProvider(provider) ? {
             provider,
+            ...(session.structuredState?.engine === "core" ? { engine: "sdk" } : session.sessionKind === "pty" || session.structuredState?.engine === "cli" ? { engine: "cli" } : {}),
             model: session.selectedModel || session.structuredState?.model || "default",
             thinkingEffort: isThinkingEffort(session.thinkingEffort) ? session.thinkingEffort : "off",
             mode: normalizeWandTaskAgentMode(provider, session.mode),

package/dist/storage-schedules.d.ts

@@ -1,5 +1,8 @@
 import type { DatabaseSync } from "node:sqlite";
-import type { ScheduledTask, ScheduledTaskRun } from "./scheduled-task-types.js";
+import type { ScheduledTask, ScheduledTaskRun, ScheduledTaskRunFact } from "./scheduled-task-types.js";
+/** Guard legacy non-ISO values before indexing: SQLite's special `now` input
+ * must never make a read timestamp depend on the current clock. */
+export declare const SCHEDULED_CLAIM_DATE_SQL = "CASE WHEN json_extract(run_json, '$.claimedAt') GLOB '????-??-??T*' THEN julianday(json_extract(run_json, '$.claimedAt')) ELSE NULL END";
 /** Same SQLite connection and transaction owner as WandStorage; no separate lifecycle. */
 export declare class ScheduledTaskRepository {
     private db;
@@ -16,5 +19,9 @@ export declare class ScheduledTaskRepository {
     getScheduledTaskRun(id: string): ScheduledTaskRun | null;
     listOpenScheduledTaskRuns(taskId?: string): ScheduledTaskRun[];
     getOpenScheduledTaskRunsForSession(sessionId: string): ScheduledTaskRun[];
+    /** Date-indexed, lightweight facts; prompts never enter calendar/activity payloads. */
+    listScheduledTaskRunFacts(from: string, to: string, taskId?: string, limit?: number): ScheduledTaskRunFact[];
+    countInvalidScheduledTaskRunDates(taskId?: string): number;
+    latestScheduledTaskRun(taskId: string): ScheduledTaskRun | null;
     listScheduledTaskRuns(taskId?: string, limit?: number): ScheduledTaskRun[];
 }

package/dist/storage-schedules.js

@@ -1,3 +1,6 @@
+/** Guard legacy non-ISO values before indexing: SQLite's special `now` input
+ * must never make a read timestamp depend on the current clock. */
+export const SCHEDULED_CLAIM_DATE_SQL = "CASE WHEN json_extract(run_json, '$.claimedAt') GLOB '????-??-??T*' THEN julianday(json_extract(run_json, '$.claimedAt')) ELSE NULL END";
 /** Same SQLite connection and transaction owner as WandStorage; no separate lifecycle. */
 export class ScheduledTaskRepository {
     db;
@@ -68,6 +71,27 @@ export class ScheduledTaskRepository {
             .all(sessionId);
         return rows.map(row => JSON.parse(row.run_json));
     }
+    /** Date-indexed, lightweight facts; prompts never enter calendar/activity payloads. */
+    listScheduledTaskRunFacts(from, to, taskId, limit = 1001) {
+        const bounded = Math.max(1, Math.min(5001, Math.floor(limit)));
+        const date = SCHEDULED_CLAIM_DATE_SQL;
+        const where = `${taskId ? "task_id = ? AND " : ""}${date} >= julianday(?) AND ${date} <= julianday(?)`;
+        const args = taskId ? [taskId, from, to, bounded] : [from, to, bounded];
+        const rows = this.db.prepare(`SELECT json_remove(run_json, '$.prompt') AS fact_json FROM scheduled_task_runs
+      WHERE ${where} ORDER BY ${date} DESC, id DESC LIMIT ?`).all(...args);
+        return rows.map(row => JSON.parse(row.fact_json));
+    }
+    countInvalidScheduledTaskRunDates(taskId) {
+        const where = `(${SCHEDULED_CLAIM_DATE_SQL}) IS NULL`;
+        const row = (taskId ? this.db.prepare(`SELECT COUNT(*) AS count FROM scheduled_task_runs WHERE task_id = ? AND ${where}`).get(taskId)
+            : this.db.prepare(`SELECT COUNT(*) AS count FROM scheduled_task_runs WHERE ${where}`).get());
+        return row.count;
+    }
+    latestScheduledTaskRun(taskId) {
+        const row = this.db.prepare(`SELECT run_json FROM scheduled_task_runs WHERE task_id = ?
+      ORDER BY (${SCHEDULED_CLAIM_DATE_SQL}) DESC, id DESC LIMIT 1`).get(taskId);
+        return row ? JSON.parse(row.run_json) : null;
+    }
     listScheduledTaskRuns(taskId, limit = 50) {
         const bounded = Math.max(1, Math.min(500, Number.isFinite(limit) ? Math.floor(limit) : 50));
         const rows = (taskId

package/dist/storage-schema.js

@@ -3,6 +3,7 @@ import { chmodSync, existsSync, mkdirSync } from "node:fs";
 import path from "node:path";
 import { DatabaseSync } from "node:sqlite";
 import { STORAGE_MIGRATIONS } from "./storage/migrations.js";
+import { SCHEDULED_CLAIM_DATE_SQL } from "./storage-schedules.js";
 /** Additive schema only. Domain migrations and transactions remain owned by WandStorage. */
 const INIT_SQL = `
   CREATE TABLE IF NOT EXISTS auth_sessions (
@@ -300,6 +301,12 @@ const INIT_SQL = `
   );
   CREATE INDEX IF NOT EXISTS idx_silicon_employees_archived ON silicon_employees(archived_at);
 
+  CREATE TABLE IF NOT EXISTS employee_im_settings (
+    employee_id TEXT PRIMARY KEY REFERENCES silicon_employees(id) ON DELETE CASCADE,
+    config_json TEXT NOT NULL,
+    credentials TEXT
+  );
+
   CREATE TABLE IF NOT EXISTS employee_knowledge (
     id TEXT PRIMARY KEY,
     employee_id TEXT NOT NULL REFERENCES silicon_employees(id) ON DELETE CASCADE,
@@ -586,6 +593,8 @@ function applyBaselineSchema(db) {
       CREATE INDEX IF NOT EXISTS idx_scheduled_task_runs ON scheduled_task_runs(task_id, scheduled_at DESC);
       CREATE INDEX IF NOT EXISTS idx_scheduled_task_runs_session ON scheduled_task_runs(json_extract(run_json, '$.receipt.sessionId'));
       CREATE INDEX IF NOT EXISTS idx_scheduled_task_runs_open ON scheduled_task_runs(json_extract(run_json, '$.executionFinishedAt'), json_extract(run_json, '$.state'));
+      CREATE INDEX IF NOT EXISTS idx_scheduled_task_runs_claimed ON scheduled_task_runs((${SCHEDULED_CLAIM_DATE_SQL}), id);
+      CREATE INDEX IF NOT EXISTS idx_scheduled_task_runs_task_claimed ON scheduled_task_runs(task_id, (${SCHEDULED_CLAIM_DATE_SQL}), id);
     `);
     ensureAuthSessionSchema(db);
     ensureCommandSessionSchema(db);

package/dist/storage.d.ts

@@ -3,6 +3,7 @@ import type { ConnectorMeta } from "./storage/mappers.js";
 import { parseWandTaskAgent } from "./storage/mappers.js";
 export * from "./storage/internal.js";
 import { ConversationRepository } from "./storage/conversations-repository.js";
+import { ConversationOrganizationRepository } from "./storage/conversation-organization-repository.js";
 import { PreferencesRepository } from "./storage/preferences-repository.js";
 import { WorkspaceRepository } from "./storage/workspaces-repository.js";
 import { TaskRepository } from "./storage/tasks-repository.js";
@@ -20,10 +21,11 @@ export { ensureDatabaseFile } from "./storage-schema.js";
 type RepositoryMethods<T> = Pick<T, {
     [K in keyof T]: T[K] extends (...args: never[]) => unknown ? K : never;
 }[keyof T]>;
-export interface WandStorage extends RepositoryMethods<ConversationRepository>, RepositoryMethods<PreferencesRepository>, RepositoryMethods<WorkspaceRepository>, RepositoryMethods<TaskRepository>, RepositoryMethods<SecretsRepository>, RepositoryMethods<EmployeeRepository>, RepositoryMethods<UserMemoryRepository>, RepositoryMethods<AiTeamRepository>, RepositoryMethods<MissionRepository>, RepositoryMethods<SessionRepository>, RepositoryMethods<UploadRepository> {
+export interface WandStorage extends RepositoryMethods<ConversationRepository>, RepositoryMethods<ConversationOrganizationRepository>, RepositoryMethods<PreferencesRepository>, RepositoryMethods<WorkspaceRepository>, RepositoryMethods<TaskRepository>, RepositoryMethods<SecretsRepository>, RepositoryMethods<EmployeeRepository>, RepositoryMethods<UserMemoryRepository>, RepositoryMethods<AiTeamRepository>, RepositoryMethods<MissionRepository>, RepositoryMethods<SessionRepository>, RepositoryMethods<UploadRepository> {
 }
 export declare class WandStorage {
     readonly conversations: ConversationRepository;
+    readonly conversationOrganizations: ConversationOrganizationRepository;
     readonly preferences: PreferencesRepository;
     readonly workspaces: WorkspaceRepository;
     readonly tasks: TaskRepository;
@@ -83,4 +85,7 @@ export declare class WandStorage {
     listOpenScheduledTaskRuns(...args: Parameters<ScheduledTaskRepository["listOpenScheduledTaskRuns"]>): ReturnType<ScheduledTaskRepository["listOpenScheduledTaskRuns"]>;
     getOpenScheduledTaskRunsForSession(...args: Parameters<ScheduledTaskRepository["getOpenScheduledTaskRunsForSession"]>): ReturnType<ScheduledTaskRepository["getOpenScheduledTaskRunsForSession"]>;
     listScheduledTaskRuns(...args: Parameters<ScheduledTaskRepository["listScheduledTaskRuns"]>): ReturnType<ScheduledTaskRepository["listScheduledTaskRuns"]>;
+    listScheduledTaskRunFacts(...args: Parameters<ScheduledTaskRepository["listScheduledTaskRunFacts"]>): ReturnType<ScheduledTaskRepository["listScheduledTaskRunFacts"]>;
+    countInvalidScheduledTaskRunDates(...args: Parameters<ScheduledTaskRepository["countInvalidScheduledTaskRunDates"]>): ReturnType<ScheduledTaskRepository["countInvalidScheduledTaskRunDates"]>;
+    latestScheduledTaskRun(...args: Parameters<ScheduledTaskRepository["latestScheduledTaskRun"]>): ReturnType<ScheduledTaskRepository["latestScheduledTaskRun"]>;
 }

package/dist/storage.js

@@ -6,6 +6,7 @@ import { openStorageDatabase } from "./storage-schema.js";
 import { parseWandTaskAgent } from "./storage/mappers.js";
 export * from "./storage/internal.js";
 import { ConversationRepository } from "./storage/conversations-repository.js";
+import { ConversationOrganizationRepository } from "./storage/conversation-organization-repository.js";
 import { PreferencesRepository } from "./storage/preferences-repository.js";
 import { WorkspaceRepository } from "./storage/workspaces-repository.js";
 import { TaskRepository } from "./storage/tasks-repository.js";
@@ -20,6 +21,7 @@ export { parseWandTaskAgent };
 export { ensureDatabaseFile } from "./storage-schema.js";
 export class WandStorage {
     conversations;
+    conversationOrganizations;
     preferences;
     workspaces;
     tasks;
@@ -81,6 +83,7 @@ export class WandStorage {
         this.dbPath = dbPath;
         this.db = openStorageDatabase(dbPath);
         this.conversations = new ConversationRepository(this.db, this);
+        this.conversationOrganizations = new ConversationOrganizationRepository(this.db);
         this.preferences = new PreferencesRepository(this.db, this);
         this.workspaces = new WorkspaceRepository(this.db, this);
         this.tasks = new TaskRepository(this.db, this);
@@ -221,9 +224,19 @@ export class WandStorage {
     listScheduledTaskRuns(...args) {
         return this.schedules.listScheduledTaskRuns(...args);
     }
+    listScheduledTaskRunFacts(...args) {
+        return this.schedules.listScheduledTaskRunFacts(...args);
+    }
+    countInvalidScheduledTaskRunDates(...args) {
+        return this.schedules.countInvalidScheduledTaskRunDates(...args);
+    }
+    latestScheduledTaskRun(...args) {
+        return this.schedules.latestScheduledTaskRun(...args);
+    }
 }
 const REPOSITORY_FORWARDS = [
     ["conversations", ConversationRepository],
+    ["conversationOrganizations", ConversationOrganizationRepository],
     ["preferences", PreferencesRepository],
     ["workspaces", WorkspaceRepository],
     ["tasks", TaskRepository],

package/dist/structured-session-manager.d.ts

@@ -102,6 +102,7 @@ export declare class StructuredSessionManager {
      */
     private readonly seenIdempotencyKeys;
     private readonly relayHandlers;
+    private readonly systemCallDrainReleases;
     private emitEvent;
     /**
      * 静默期心跳：回合在飞且连续 TURN_QUIET_HEARTBEAT_MS 没有任何事件时，用现有的

package/dist/structured-session-manager.js

@@ -25,6 +25,7 @@ import { resolveSessionCwd } from "./session-cwd.js";
 import { isScheduledConversationSession } from "./conversation-session-preview.js";
 import { isSessionProvider, providerCliCommand } from "./session-provider.js";
 import { resolveSessionProvider, resolveSystemAiContext } from "./session-ai-context.js";
+import { isSystemAiCall, SYSTEM_AI_READ_ONLY } from "./system-ai-call.js";
 import { CodexRunner } from "./structured-codex-adapter.js";
 import { ClaudeCliRunner } from "./structured-claude-adapter.js";
 import { OpenCodeRunner } from "./structured-opencode-adapter.js";
@@ -124,6 +125,7 @@ export class StructuredSessionManager {
      */
     seenIdempotencyKeys = new BoundedKeySet(IDEMPOTENCY_KEY_LIMIT);
     relayHandlers = new Map();
+    systemCallDrainReleases = new Set();
     emitEvent = null;
     /**
      * 静默期心跳：回合在飞且连续 TURN_QUIET_HEARTBEAT_MS 没有任何事件时，用现有的
@@ -194,7 +196,7 @@ export class StructuredSessionManager {
         });
         // SDK capability is probed only when Wand Agent is explicitly selected.
         for (const snapshot of this.storage.loadSessions()) {
-            if ((snapshot.sessionKind ?? "pty") !== "structured")
+            if (isSystemAiCall(snapshot) || (snapshot.sessionKind ?? "pty") !== "structured")
                 continue;
             const restoredStatus = snapshot.status === "running" ? "idle" : snapshot.status;
             let provider;
@@ -295,12 +297,16 @@ export class StructuredSessionManager {
         if (this.disposed)
             throw new Error("StructuredSessionManager has been disposed.");
         this.coreRestartDrains += 1;
+        const releaseSystemCalls = CoreTurnTracker.beginSystemCallDrain();
+        this.systemCallDrainReleases.add(releaseSystemCalls);
         let released = false;
         return () => {
             if (released)
                 return;
             released = true;
             this.coreRestartDrains -= 1;
+            releaseSystemCalls();
+            this.systemCallDrainReleases.delete(releaseSystemCalls);
             if (this.coreRestartDrains === 0)
                 this.resumeQueuedPiMessages();
         };
@@ -322,6 +328,9 @@ export class StructuredSessionManager {
         if (this.disposed)
             return;
         this.disposed = true;
+        for (const release of this.systemCallDrainReleases)
+            release();
+        this.systemCallDrainReleases.clear();
         this.unacceptedTeamStarts.clear();
         // 静默心跳不跨服务关闭存活（会话级 timer 不允许泄漏）。
         this.turnHeartbeat.dispose();
@@ -1115,6 +1124,8 @@ export class StructuredSessionManager {
         this.metadata.generateTopicForPrompt(id, input);
     }
     createSession(options) {
+        if (isSystemAiCall(options))
+            throw new Error(SYSTEM_AI_READ_ONLY);
         if (this.disposed)
             throw new Error("StructuredSessionManager has been disposed.");
         const id = randomUUID();
@@ -1546,7 +1557,7 @@ export class StructuredSessionManager {
                 prompt,
                 groups: this.config.modelGroups,
                 evaluate: this.autoAssignEvaluate(),
-                ai: resolveSystemAiContext(session, this.config, this.storage.getSystemSiliconEmployee(), this.openRouter),
+                ai: resolveSystemAiContext(session, this.config, this.storage.getSystemSiliconEmployee(), this.openRouter, { storage: this.storage }),
                 cwd: session.cwd,
                 language: this.config.language,
             });
@@ -2232,7 +2243,9 @@ export class StructuredSessionManager {
         }
         this.saveAuthoritativeSession(cancelled);
         // 仍发 "ended" 事件让各端停掉"回复中"指示 / 灵动岛，但携带的 status 是 idle。
-        this.emitStructuredSnapshot(cancelled, "ended");
+        this.emitStructuredSnapshot(cancelled, "ended", {
+            ...(session.structuredState?.inFlight || session.status === "running" ? { turnOutcome: "stopped" } : {}),
+        });
         return cancelled;
     }
     delete(id) {
@@ -2339,7 +2352,7 @@ export class StructuredSessionManager {
         });
         return true;
     }
-    emitStructuredSnapshot(session, eventType = "output") {
+    emitStructuredSnapshot(session, eventType = "output", outcome = {}) {
         // 排队消息只通过 payload.queuedMessages 单独下发，由各端在消息卡片外的「排队条」
         // 里纵向渲染——绝不再把它们当成 __queued 占位 turn 混进 messages 消息流里，否则会
         // 和排队条重复显示（旧的「显示异常」根因）。
@@ -2348,6 +2361,7 @@ export class StructuredSessionManager {
             ...payload,
             status: session.status,
             exitCode: session.exitCode,
+            ...outcome,
         };
         this.emit({
             type: eventType,

package/dist/system-ai-call.d.ts

@@ -0,0 +1,49 @@
+import type { AiCliCandidate, AiTextRequest } from "./types.js";
+/** Reserved server-owned provenance. These are real one-shot calls, not resumable conversations. */
+export declare const SYSTEM_AI_CALL_PREFIX = "system-ai:";
+export declare const SYSTEM_AI_READ_ONLY = "\u8FD9\u662F\u7CFB\u7EDF\u8C03\u7528\u8BB0\u5F55\uFF0C\u53EA\u80FD\u67E5\u770B\u65E5\u5FD7\uFF0C\u4E0D\u80FD\u7EE7\u7EED\u53D1\u9001\u6216\u6062\u590D\u6267\u884C\u3002";
+export declare function isSystemAiCall(session: {
+    automationId?: unknown;
+} | null | undefined): boolean;
+export declare const SYSTEM_AI_PURPOSES: {
+    readonly "system-text": "系统文本生成";
+    readonly "session-title": "会话标题生成";
+    readonly "task-title": "任务标题生成";
+    readonly "task-organize": "旧版任务标题归类";
+    readonly "conversation-organize-job": "会话自动归类作业";
+    readonly "conversation-organize": "会话内容任务规划";
+    readonly "conversation-summary": "长会话内容摘要";
+    readonly "prompt-optimize": "提示词优化";
+    readonly "git-commit": "提交说明生成";
+    readonly "git-tag": "版本说明生成";
+    readonly "git-fallback": "提交执行兜底";
+    readonly "model-auto-assign": "模型分组选择";
+    readonly "user-memory": "短期习惯分析";
+    readonly "employee-draft": "员工招聘草稿";
+    readonly decision: "有界决策";
+    readonly "speech-polish": "口述文字整理";
+};
+export type SystemAiPurpose = keyof typeof SYSTEM_AI_PURPOSES;
+export interface AiCallTrace {
+    readonly sessionId: string;
+    candidateStarted(candidate: AiCliCandidate): void;
+    localStarted(model: string): void;
+    candidateSkipped(candidate: AiCliCandidate, reason: string): void;
+    candidateFailed(candidate: AiCliCandidate, error: unknown, phase: "availability" | "execution" | "result"): void;
+    candidateSucceeded(raw: string, parsed: unknown): void;
+    usageReported(usage: {
+        inputTokens: number;
+        outputTokens: number;
+        model: string;
+    }): void;
+    applicationResult(value: unknown): void;
+    complete(): void;
+    fail(error: unknown, cancelled?: boolean): void;
+}
+export interface AiCallTraceFactory {
+    start(purpose: SystemAiPurpose, request: AiTextRequest, cwd: string): AiCallTrace;
+}
+/** Audit failure is not a provider refusal and must never trigger another paid candidate. */
+export declare class AiCallTraceError extends Error {
+    constructor();
+}

package/dist/system-ai-call.js

@@ -0,0 +1,28 @@
+/** Reserved server-owned provenance. These are real one-shot calls, not resumable conversations. */
+export const SYSTEM_AI_CALL_PREFIX = "system-ai:";
+export const SYSTEM_AI_READ_ONLY = "这是系统调用记录，只能查看日志，不能继续发送或恢复执行。";
+export function isSystemAiCall(session) {
+    return typeof session?.automationId === "string" && session.automationId.startsWith(SYSTEM_AI_CALL_PREFIX);
+}
+export const SYSTEM_AI_PURPOSES = {
+    "system-text": "系统文本生成",
+    "session-title": "会话标题生成",
+    "task-title": "任务标题生成",
+    "task-organize": "旧版任务标题归类",
+    "conversation-organize-job": "会话自动归类作业",
+    "conversation-organize": "会话内容任务规划",
+    "conversation-summary": "长会话内容摘要",
+    "prompt-optimize": "提示词优化",
+    "git-commit": "提交说明生成",
+    "git-tag": "版本说明生成",
+    "git-fallback": "提交执行兜底",
+    "model-auto-assign": "模型分组选择",
+    "user-memory": "短期习惯分析",
+    "employee-draft": "员工招聘草稿",
+    "decision": "有界决策",
+    "speech-polish": "口述文字整理",
+};
+/** Audit failure is not a provider refusal and must never trigger another paid candidate. */
+export class AiCallTraceError extends Error {
+    constructor() { super("系统调用日志无法保存，已停止后续模型调用。"); this.name = "AiCallTraceError"; }
+}

package/dist/system-ai-session-recorder.d.ts

@@ -0,0 +1,30 @@
+import type { SiliconEmployee } from "./employee-types.js";
+import { type ConversationSessionUpdate } from "./conversation-types.js";
+import type { SessionLogger } from "./session-logger.js";
+import type { WandStorage } from "./storage.js";
+import type { ProcessEvent } from "./types.js";
+import { type AiCallTraceFactory } from "./system-ai-call.js";
+/** Only copies business text. Never logs credential commands, runtime config, or provider error bodies. */
+export declare function redactSystemAiText(value: string): string;
+export declare class SystemAiSessionRecorder {
+    private readonly storage;
+    private closed;
+    private readonly active;
+    private logger?;
+    private emit?;
+    private notifyConversation?;
+    constructor(storage: WandStorage);
+    attach(options: {
+        logger?: SessionLogger;
+        emit?: (event: ProcessEvent) => void;
+        notifyConversation?: (update: ConversationSessionUpdate) => void;
+    }): void;
+    /** A server-owned one-shot has no detached runner to adopt after a restart. Never replay it. */
+    recoverInterrupted(): void;
+    forEmployee(employee: SiliconEmployee, sourceSessionId?: string): AiCallTraceFactory;
+    remove(sessionId: string): void;
+    appendOutcome(sessionId: string, label: string, value: unknown): void;
+    private persist;
+    private start;
+}
+export declare function systemAiSessions(storage: WandStorage): SystemAiSessionRecorder;