@co0ontty/wand 4.97.0 → 4.98.0

package/dist/server-update-routes.d.ts

@@ -26,11 +26,21 @@ export interface PublicUpdateRoutesDependencies {
     resolveAndroidDownload(channel: "stable" | "beta"): Promise<DownloadAsset | null>;
     /** GitHub 来源由服务端代拉，避免手机直连 CDN。测试 stub 可不实现。 */
     resolveGitHubApkDownload?(): Promise<GitHubApkDownload | null>;
-    /** Beta 包下发时清理分发目录，只保留最新一个 APK（可选，测试 stub 可不实现）。 */
+    /** Beta 包下发时清理分发目录，只保留最新一套产物（可选，测试 stub 可不实现）。 */
     pruneAndroidApkDirectory?(keepFileName?: string): Promise<{
         deleted: string[];
         freedBytes: number;
     }>;
+    /** macOS Beta 包下发时清理分发目录，保留最新一整套 zip/dmg/update.json。 */
+    pruneMacosBetaDirectory?(keepFileName?: string): Promise<{
+        deleted: string[];
+        freedBytes: number;
+    }>;
+    /** iOS IPA 下发时清理分发目录，保留最新一个包。 */
+    pruneIosIpaDirectory?(keepFileName?: string): Promise<{
+        deleted: string[];
+        freedBytes: number;
+    }>;
     /** 计算本地分发文件的 SHA-256（hex）；失败返回 null，下载响应不带哈希头。 */
     computeAssetSha256(asset: DownloadAsset): Promise<string | null>;
     resolveLatestDmg(): Promise<ResolvedUpdateAsset | null>;

package/dist/server-update-routes.js

@@ -13,6 +13,24 @@ import { compareApkInstallOrder, compareSemver, compareWandInstallOrder } from "
 import { HttpError } from "./http-error.js";
 import { canUseDetachedUpdateHelper, readDetachedUpdateStatus, readLatestDetachedUpdate, startDetachedUpdateHelper } from "./update-helper.js";
 const GITHUB_PROXY_TIMEOUT_MS = 5 * 60 * 1000;
+/**
+ * 分发目录清理的共用执行器：清理失败绝不能阻断本次下载或更新检查。
+ * 只在真正开始下发时调用，避免定时扫描去删一个没人要的文件。
+ */
+async function pruneQuietly(prune, keepFileName, label) {
+    if (!prune)
+        return;
+    try {
+        const pruned = await prune(keepFileName);
+        if (pruned.deleted.length > 0) {
+            process.stdout.write(`[wand] 已清理旧版${label}：${pruned.deleted.join(", ")}`
+                + `（释放 ${(pruned.freedBytes / 1024 / 1024).toFixed(1)} MB）\n`);
+        }
+    }
+    catch (error) {
+        process.stdout.write(`[wand] 清理旧版${label}失败：${getErrorMessage(error)}\n`);
+    }
+}
 async function proxyGitHubApk(_req, res, asset, fetchImpl = fetch) {
     let remote;
     try {
@@ -113,18 +131,8 @@ export function registerPublicUpdateRoutes(app, deps, publicOrigin) {
         // Beta 包下发时顺手清理分发目录：debug 构建每次都带独立时间戳版本号，
         // 不清理会按构建次数无限堆积。只保留最新一个；正在下发的文件与
         // currentApkFile 固定指向的文件不会被删。清理失败不阻断本次下载。
-        if (channel === "beta" && deps.pruneAndroidApkDirectory) {
-            try {
-                const pruned = await deps.pruneAndroidApkDirectory(asset.fileName);
-                if (pruned.deleted.length > 0) {
-                    process.stdout.write(`[wand] 已清理旧版安装包：${pruned.deleted.join(", ")}`
-                        + `（释放 ${(pruned.freedBytes / 1024 / 1024).toFixed(1)} MB）\n`);
-                }
-            }
-            catch (error) {
-                process.stdout.write(`[wand] 清理旧版安装包失败：${getErrorMessage(error)}\n`);
-            }
-        }
+        if (channel === "beta")
+            await pruneQuietly(deps.pruneAndroidApkDirectory, asset.fileName, "安装包");
         // 响应头携带实际发送字节的 SHA-256：check 与 download 之间 APK 目录若被
         // 重新构建/覆盖，客户端以响应头为准，避免用过期 check 快照误报校验失败。
         const headers = {};
@@ -175,6 +183,9 @@ export function registerPublicUpdateRoutes(app, deps, publicOrigin) {
             res.status(503).json({ error: "无法校验 macOS Beta 更新包。" });
             return;
         }
+        // 开始下发后再清理：macOS 每次 debug 构建产出独立的 zip+dmg+update.json，
+        // 不清理会按构建次数堆积。清理保留最新一整套，不影响本次传输。
+        await pruneQuietly(deps.pruneMacosBetaDirectory, asset.fileName, " macOS 构建包");
         streamFileWithRange(req, res, {
             filePath: asset.filePath,
             size: asset.size,
@@ -294,6 +305,8 @@ export function registerPublicUpdateRoutes(app, deps, publicOrigin) {
             res.status(404).json({ error: "当前没有可下载的 IPA 文件。" });
             return;
         }
+        // iOS 每次 debug 构建产出独立时间戳的 IPA，不清理会按构建次数堆积。
+        await pruneQuietly(deps.pruneIosIpaDirectory, asset.fileName, " iOS 构建包");
         streamFileWithRange(req, res, {
             filePath: asset.filePath,
             size: asset.size,

package/dist/server-workspace-routes.js

@@ -21,6 +21,7 @@ import { parentTaskIdFrom } from "./task-agent-parsing.js";
 import { taskTitleService, refreshAutoBoardTaskTitles } from "./task-title-service.js";
 import { organizeSelectedByTitle, titleJudgeForStorage } from "./task-title-organize-service.js";
 import { systemAiSessions } from "./system-ai-session-recorder.js";
+import { isSystemAiCall } from "./system-ai-call.js";
 import { registerConversationOrganizeRoutes } from "./server-conversation-organize-routes.js";
 import { TITLE_ORGANIZE_MAX_SESSIONS, TITLE_ORGANIZE_MAX_TASKS } from "./task-title-organize.js";
 import { provisionalTaskTitleFromDescription } from "./task-title.js";
@@ -223,7 +224,7 @@ function workspaceWithCounts(storage, workspace, sessionCounts, includeArchived
     const worktreeCount = storage.listWorkspaceTasks(workspace.id)
         .filter((task) => (includeArchived || !task.archived) && task.worktree !== null)
         .length;
-    const sessionCount = (sessionCounts ?? storage.countSessionsByWorkspace({ includeArchived })).get(workspace.id) ?? 0;
+    const sessionCount = (sessionCounts ?? storage.countSessionsByWorkspace({ includeArchived, excludeSystemAiCalls: true })).get(workspace.id) ?? 0;
     return { ...workspace, worktreeCount, sessionCount };
 }
 // ── Layout validation / sanitization（前端 PUT 与测试共用）──
@@ -337,7 +338,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
     // 列出所有项目（按创建时间降序：新建在前，打开不会改位置）
     app.get("/api/workspaces", (req, res) => {
         const includeArchived = req.query.includeArchived === "1";
-        const sessionCounts = storage.countSessionsByWorkspace({ includeArchived });
+        const sessionCounts = storage.countSessionsByWorkspace({ includeArchived, excludeSystemAiCalls: true });
         res.json(storage.listWorkspaces()
             .filter((workspace) => !isGlobalWorkspace(workspace))
             .map((workspace) => workspaceWithCounts(storage, workspace, sessionCounts, includeArchived)));
@@ -376,7 +377,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         const archivedTaskIds = new Set(storage.listWorkspaceTasks(workspace.id)
             .filter((task) => task.archived).map((task) => task.id));
         const teamMarkers = teamSessionMarkers(storage);
-        const visibleSessions = storage.listSessionsByWorkspaceSlim(workspace.id).map((session) => ({
+        const visibleSessions = storage.listSessionsByWorkspaceSlim(workspace.id).filter((session) => !isSystemAiCall(session)).map((session) => ({
             ...workspaceSessionSummary(session, { workspaceName: workspace.name }, sessions, teamMarkersFor(teamMarkers, session.id)),
             workspaceTaskId: session.workspaceTaskId,
         })).filter((session) => includeArchived || (!session.archived
@@ -590,6 +591,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         const snapshots = sessions?.listSlim();
         const revision = crypto.createHash("sha256").update(JSON.stringify({
             storage: storage.projectionRevision(),
+            projection: "workspace-work-sessions-v1",
             query: { includeArchived, workspaceFilter, taskLimit, sessionLimit },
             runtime: snapshots,
         })).digest("base64url");
@@ -599,7 +601,11 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
         }
         const model = new TaskReadModel(storage, sessions, snapshots);
         const allSessions = model.sessions;
-        const sessionVisible = (session) => includeArchived || !session.archived;
+        // Server-owned one-shot feature logs are not Agent work. Do not filter by employee,
+        // sessionSource=automation or generic automation IDs: those also carry dispatch,
+        // communication and scheduled work. Keep storage and employee audit history intact.
+        const sessionVisible = (session) => !isSystemAiCall(session)
+            && (includeArchived || !session.archived);
         const workspaces = [...model.workspaces.values()];
         // 群聊与成员派发标记一次查全：列表里每条会话只做 Map 命中，不逐个查库。
         const teamMarkers = teamSessionMarkers(storage);
@@ -933,7 +939,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             ...task,
             ...resolvedMilestoneFields(storage, task.milestoneId),
             cwd: taskRuntimeCwd(task, workspace),
-            sessions: storage.listSessionsByWorkspaceTaskSlim(task.id).map((session) => ({
+            sessions: storage.listSessionsByWorkspaceTaskSlim(task.id).filter((session) => !isSystemAiCall(session)).map((session) => ({
                 ...workspaceSessionSummary(session, {
                     taskName: task.name,
                     workspaceName: workspace?.name,

package/dist/server.js

@@ -16,9 +16,9 @@ import { authenticateBearerAppToken, createRequireAuth, getEffectivePassword, re
 import { createApiScopeMiddleware } from "./middleware/api-scope.js";
 import { createExtensionCors } from "./middleware/cors.js";
 import { ensureCertificates } from "./cert.js";
-import { getDefaultModelForProvider, getProviderDefaultModels, isExecutionMode, resolveConfigDir, writePreferenceToStorage, } from "./config.js";
+import { getDefaultModelForProvider, getProviderDefaultModels, resolveConfigDir, writePreferenceToStorage, } from "./config.js";
 import { ModelCatalogService } from "./models.js";
-import { fallbackProviderModel, readProviderModelPreferences, sessionEmployeeFields } from "./session-model.js";
+import { readProviderModelPreferences } from "./session-model.js";
 import { ProcessManager } from "./process-manager.js";
 import { SessionLogger } from "./session-logger.js";
 import { coreHarnessAgentDir } from "./harness-engine.js";
@@ -34,21 +34,17 @@ import { registerFileRoutes } from "./server-file-routes.js";
 import { recordRecentPath } from "./recent-paths.js";
 import { registerLocalPreviewRoutes } from "./server-local-preview-routes.js";
 import { registerSettingsRoutes } from "./server-settings-routes.js";
-import { registerSpeechRoutes } from "./server-speech-routes.js";
-import { SpeechPolisherService } from "./speech-polisher-service.js";
-import { SPEECH_POLISHER_KEY } from "./speech-polisher-identity.js";
 import { registerLocalModelRoutes } from "./server-local-model-routes.js";
-import { createStorageCleanup } from "./storage-cleanup.js";
+import { createStorageCleanup, STORAGE_CLEANUP_RETENTION_DAYS } from "./storage-cleanup.js";
+import { pruneMigrationBackups } from "./migration-backup-retention.js";
 import { registerStorageCleanupRoutes } from "./server-storage-cleanup-routes.js";
 import { LocalModelSetupService } from "./local-model-setup.js";
 import { DecisionExpertService } from "./decision-expert-service.js";
 import { DECISION_EXPERT_KEY } from "./decision-expert-identity.js";
-import { SpeechService } from "./speech-service.js";
 import { buildStructuredChatPersonaPayload, resolveAppConnectCode, } from "./server-app-connect.js";
 import { resolveTrustProxy, sendRouteError } from "./server-request.js";
 import { registerAuthRoutes } from "./server-auth-routes.js";
 import { WebLoginTickets } from "./web-login-tickets.js";
-import { inferProviderFromCommand, isSessionProvider, providerCliCommand } from "./session-provider.js";
 import { registerVaultRoutes } from "./server-vault-routes.js";
 import { registerGithubRoutes } from "./server-github-routes.js";
 import { registerTaskRoutes } from "./server-task-routes.js";
@@ -69,16 +65,13 @@ import { registerSiliconEmployeeRoutes } from "./server-employee-routes.js";
 import { EmployeeImService } from "./employee-im.js";
 import { EmployeeImLifecycle } from "./employee-im-lifecycle.js";
 import { registerEmployeeImRoutes } from "./server-employee-im-routes.js";
-import { defaultRoleForCli } from "./default-employee.js";
 import { UserMemoryService } from "./user-memory.js";
 import { registerUserMemoryRoutes, userMemoryOperationLog } from "./server-user-memory.js";
 import { registerAttentionRoutes } from "./server-attention-routes.js";
 import { refreshProviderCliUpdateState, registerAdminUpdateRoutes, launchServerUpdate, registerPublicUpdateRoutes, ServerUpdateState, } from "./server-update-routes.js";
 import { registerClaudeHistoryRoutes, registerSessionRoutes } from "./server-session-routes.js";
-import { parseSessionCreationOrigin } from "./session-request.js";
 import { registerWorkspaceRoutes } from "./server-workspace-routes.js";
-import { resolveSessionCwd } from "./session-cwd.js";
-import { backfillSessionWorkspaces, resolveWorkspaceIdForNewSession } from "./workspace-binding.js";
+import { backfillSessionWorkspaces } from "./workspace-binding.js";
 import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute, jsonErrorHandler } from "./express-async.js";
 import { FeedbackReceiver, FeedbackReporter } from "./feedback.js";
@@ -89,9 +82,6 @@ import { computeRelaunch } from "./relaunch.js";
 import { createRetentionSweep, startRetentionTimer } from "./retention.js";
 import { RuntimeConfigState } from "./runtime-config.js";
 import { safeServiceInstalled } from "./tui/runtime-utils.js";
-import { toSessionDetailDTO } from "./session-transport.js";
-import { compactToolMessagesForTransport, windowMessagesForTransport } from "./message-truncator.js";
-import { enrichStructuredMessages } from "./structured-client-protocol.js";
 import { registerUploadRoutes, invalidateUploadUsage } from "./upload-routes.js";
 import { uploadReferenceGuard } from "./upload-reference-guard.js";
 import { configTemporaryRoot } from "./managed-temp.js";
@@ -162,15 +152,6 @@ function readBuildInfo() {
 const BUILD_INFO = readBuildInfo();
 const DISPLAY_VERSION = BUILD_INFO.version || PKG_VERSION;
 const SERVER_INSTANCE_ID = crypto.randomUUID();
-/**
- * 解析 PTY 会话的 provider：显式 `provider` 字段优先，其次按命令前缀识别；
- * 都识别不出时回落到 Claude，与旧版客户端行为保持一致。
- */
-function resolveProviderForCommand(provider, command) {
-    if (isSessionProvider(provider))
-        return provider;
-    return inferProviderFromCommand(command) ?? "claude";
-}
 // ── Startup error handling ──
 let activeFeedback = null;
 process.on("uncaughtException", (err) => {
@@ -263,7 +244,8 @@ export async function startServer(config, configPath, options = {}) {
     // Explicit and bounded: login/bearer limits key on req.ip, so forwarded headers are only
     // honoured for the configured proxy hops (see resolveTrustProxy).
     app.set("trust proxy", resolveTrustProxy(config.trustProxy));
-    const storage = new WandStorage(resolveDatabasePath(configPath));
+    const databasePath = resolveDatabasePath(configPath);
+    const storage = new WandStorage(databasePath);
     const systemCalls = systemAiSessions(storage);
     systemCalls.recoverInterrupted();
     if (!storage.getConfigValue("migration:session-workspaces:v1")) {
@@ -273,9 +255,6 @@ export async function startServer(config, configPath, options = {}) {
     const taskTitles = taskTitleService(storage, { config });
     const runtimeConfig = new RuntimeConfigState(config);
     const openRouter = new OpenRouterFreeModelsService(storage, options.openRouterFetch);
-    const speechPolisher = new SpeechPolisherService({ config, free: openRouter,
-        employee: () => storage.getSystemSiliconEmployee(SPEECH_POLISHER_KEY),
-        trace: employee => systemCalls.forEmployee(employee) });
     const authService = new AuthService(storage);
     const webLoginTickets = new WebLoginTickets();
     const settingsAccess = new SettingsWebAccess();
@@ -345,9 +324,27 @@ export async function startServer(config, configPath, options = {}) {
     }
     const storageCleanup = createStorageCleanup(configDir, { uploads: storage.uploads,
         uploadsActive: () => sessionRegistry.listSlim().some(session => (session.sessionKind === "structured" && session.status === "running") || (session.queuedMessages?.length ?? 0) > 0),
-        onUploadRemoved: invalidateUploadUsage });
-    const speech = new SpeechService(storage, configDir);
-    const localModels = new LocalModelSetupService({ configDir, speech, decisions,
+        onUploadRemoved: invalidateUploadUsage,
+        // 历史构建包也会持续堆积（每次 debug 构建一个新版本号），跟着同一轮定时回收走。
+        pruneDistributionArtifacts: async () => {
+            const results = await Promise.all([
+                distributionManager.pruneAndroidApkDirectory(),
+                distributionManager.pruneMacosBetaDirectory(),
+                distributionManager.pruneIosIpaDirectory(),
+            ]);
+            return {
+                deleted: results.flatMap((result) => result.deleted),
+                freedBytes: results.reduce((total, result) => total + result.freedBytes, 0),
+            };
+        },
+        // Pi 原生回合目录（pi-native/）按回合数增长，同样交给同一轮定时回收。
+        collectNativeArtifacts: () => structuredSessions.collectNativeGarbage({
+            liveSessionIds: new Set(sessionRegistry.listSlim().map((session) => session.id)),
+            retentionMs: STORAGE_CLEANUP_RETENTION_DAYS * 24 * 60 * 60 * 1000,
+        }),
+        // 旧版本遗留的迁移前快照：无上限堆积。迁移成功路径已在 storage-schema 修剪。
+        pruneMigrationSnapshots: () => pruneMigrationBackups(databasePath, { dryRun: false }) });
+    const localModels = new LocalModelSetupService({ configDir, decisions,
         decisionConfig: () => config.localDecision ?? { enabled: false, pythonPath: "", modelPath: "" },
         configureDecision(next) {
             decisions.assertConfigurable();
@@ -676,7 +673,6 @@ export async function startServer(config, configPath, options = {}) {
     registerWorkspaceRoutes(app, storage, sessionRegistry, { config, free: openRouter });
     registerMissionRoutes(app, missions);
     registerUploadRoutes(app, sessionRegistry, { uploads: storage.uploads, temporaryRoot: configTemporaryRoot(configDir) });
-    registerSpeechRoutes(app, { speech, requireSessions, requireAdmin, polisher: speechPolisher });
     registerLocalModelRoutes(app, { models: localModels, requireSessions, requireAdmin });
     registerStorageCleanupRoutes(app, storageCleanup, requireAdmin);
     app.post("/api/optimize-prompt", asyncRoute(async (req, res) => {
@@ -723,99 +719,6 @@ export async function startServer(config, configPath, options = {}) {
     }));
     registerFileRoutes(app, { storage, defaultCwd: config.defaultCwd });
     // ── Session control ──
-    app.post("/api/commands", asyncRoute(async (req, res) => {
-        const body = req.body;
-        if (body.employeeId !== undefined || body.teamId !== undefined
-            || (body.subject !== undefined && body.subject?.type !== "cli")) {
-            res.status(400).json({ error: "PTY 只能选择 CLI 工具。" });
-            return;
-        }
-        if (body.provider !== undefined && !isSessionProvider(body.provider)) {
-            res.status(400).json({ error: "请选择有效的执行工具。" });
-            return;
-        }
-        const interactiveShell = body.shell === true;
-        // 连接应用只能启动 Provider CLI 会话（provider 字段 + 该 CLI 的标准可执行名）。
-        // 任意自定义命令字符串需要 admin。shell:true 是原生客户端“空白终端”（服务端配置的
-        // 登录 shell，不接受外部命令）：为保持现有客户端可用而保留，见 AGENTS 与报告。
-        if (!principalHasScope(req.principal, "admin") && !interactiveShell) {
-            // Provider CLI only: the executable must be the provider's own CLI name (old clients send
-            // the provider id as the command, so an absent provider is inferred from it).
-            const rawCommand = typeof body.command === "string" ? body.command.trim() : "";
-            const provider = isSessionProvider(body.provider) ? body.provider : inferProviderFromCommand(rawCommand);
-            const isProviderCli = !!provider && (!rawCommand || rawCommand === provider || rawCommand === providerCliCommand(provider));
-            if (!isProviderCli) {
-                res.status(403).json({ error: "当前连接只能启动已配置的 CLI 工具，不能执行自定义命令。", code: "forbidden" });
-                return;
-            }
-        }
-        if (!interactiveShell && !body.command?.trim()) {
-            res.status(400).json({ error: "请输入要执行的命令。" });
-            return;
-        }
-        if (body.mode !== undefined && !isExecutionMode(body.mode)) {
-            res.status(400).json({ error: `无效执行模式: ${String(body.mode)}` });
-            return;
-        }
-        const initialInput = body.initialInput?.trim();
-        try {
-            const origin = parseSessionCreationOrigin(body);
-            const rawModel = typeof body.model === "string" ? body.model.trim() : "";
-            const rawCommand = body.command?.trim() ?? "";
-            const provider = interactiveShell
-                ? undefined
-                : resolveProviderForCommand(body.provider, rawCommand);
-            // Older clients used the provider id as the PTY command. Qoder's executable
-            // is named qodercli, so keep those clients working while preserving custom commands.
-            const command = provider === "qoder" && rawCommand === "qoder"
-                ? "qodercli"
-                : rawCommand;
-            const effectiveModel = provider ? rawModel || fallbackProviderModel(config, provider) : undefined;
-            const reqCols = typeof body.cols === "number" && Number.isFinite(body.cols) ? body.cols : undefined;
-            const reqRows = typeof body.rows === "number" && Number.isFinite(body.rows) ? body.rows : undefined;
-            const sessionCwd = resolveSessionCwd(body.cwd, config.defaultCwd);
-            const workspaceId = resolveWorkspaceIdForNewSession(storage, sessionCwd, body.workspaceId);
-            const role = !interactiveShell && !body.systemPrompt?.trim() && origin.sessionSource === "interactive"
-                && (isSessionProvider(body.provider) || inferProviderFromCommand(command))
-                ? defaultRoleForCli(storage, provider) : null;
-            const snapshot = await (interactiveShell
-                ? processes.startShell(sessionCwd, body.mode ?? "default", {
-                    worktreeEnabled: body.worktreeEnabled === true,
-                    cols: reqCols,
-                    rows: reqRows,
-                    workspaceId,
-                    workspaceTaskId: body.workspaceTaskId,
-                    ...origin,
-                })
-                : processes.start(command, sessionCwd, body.mode ?? config.defaultMode, initialInput || undefined, {
-                    worktreeEnabled: body.worktreeEnabled === true,
-                    provider,
-                    model: effectiveModel,
-                    cols: reqCols,
-                    rows: reqRows,
-                    thinkingEffort: body.thinkingEffort ?? config.defaultThinkingEffort,
-                    systemPrompt: body.systemPrompt?.trim() || role?.prompt,
-                    ...sessionEmployeeFields(role),
-                    workspaceId,
-                    workspaceTaskId: body.workspaceTaskId,
-                    ...origin,
-                }));
-            recordRecentPath(storage, snapshot.cwd);
-            const compactTools = req.get("X-Wand-Tool-Projection") === "compact"
-                || req.query.compactTools === "1";
-            if (compactTools) {
-                const messages = compactToolMessagesForTransport(enrichStructuredMessages(snapshot.messages ?? [], snapshot.id));
-                const windowed = windowMessagesForTransport(messages, config.cardDefaults ?? {});
-                res.status(201).json(toSessionDetailDTO(snapshot, windowed));
-            }
-            else {
-                res.status(201).json(toSessionDetailDTO(snapshot));
-            }
-        }
-        catch (error) {
-            sendRouteError(res, error, "无法启动命令。请检查命令是否安装。");
-        }
-    }));
     // ── WebSocket broadcast layer ──
     let activeSslCertPath = null;
     const server = useHttps
@@ -891,6 +794,7 @@ export async function startServer(config, configPath, options = {}) {
     });
     structuredSessions.setEventEmitter((event) => {
         taskTitles.ingest(event);
+        storage.recordTaskCommentSessionEvent(event);
         conversationService.ingestSessionEvent(event);
         scheduledTasks.ingestSessionEvent(event);
         sessionCompletions.ingest(event);
@@ -990,8 +894,6 @@ export async function startServer(config, configPath, options = {}) {
             catch { /* noop */ }
             conversationService.dispose();
             localModels.dispose();
-            speech.dispose();
-            speechPolisher.dispose();
             try {
                 structuredSessions.dispose();
             }
@@ -1322,8 +1224,6 @@ export async function startServer(config, configPath, options = {}) {
             catch { /* best-effort shutdown */ }
             conversationService.dispose();
             localModels.dispose();
-            speech.dispose();
-            speechPolisher.dispose();
             try {
                 structuredSessions.dispose();
             }

package/dist/storage/conversations-repository.d.ts

@@ -42,6 +42,8 @@ export declare class ConversationRepository {
     acceptConversationSession(instance: ConversationInstance, createSession: () => string, title: string, input: string, request: ConversationRequest): void;
     /** Attach an independent interactive session, without copying its transcript or executing it. */
     linkEmployeeSession(instance: ConversationInstance, session: SessionSnapshot): void;
+    /** Remove only the canonical system/employee link, never a user's chat message. */
+    unlinkEmployeeSession(sessionId: string): void;
     employeeConversationForSession(sessionId: string): string | null;
     conversationSessionIds(id: string): string[];
     conversationTaskStartup(taskId: string): ConversationRequest["receipt"] | null;

package/dist/storage/conversations-repository.js

@@ -163,6 +163,10 @@ export class ConversationRepository {
                 .run(messageId, instance.id, JSON.stringify(turn), session.startedAt);
         });
     }
+    /** Remove only the canonical system/employee link, never a user's chat message. */
+    unlinkEmployeeSession(sessionId) {
+        this.db.prepare("DELETE FROM conversation_messages WHERE id = ?").run(`employee-session:${sessionId}`);
+    }
     employeeConversationForSession(sessionId) {
         const row = this.db.prepare("SELECT conversation_id FROM conversation_messages WHERE id = ?")
             .get(`employee-session:${sessionId}`);

package/dist/storage/employees-repository.d.ts

@@ -26,8 +26,8 @@ export declare class EmployeeRepository {
     ensureSystemSiliconEmployee(seed?: SystemEmployeeSeed): SiliconEmployee;
     /** Stable built-in decision employee; seed once and retain the user's ordered call chain. */
     ensureDecisionExpertEmployee(): SiliconEmployee;
-    /** Seed the SDK free group once, then preserve independent user choices. */
-    ensureSpeechPolisherEmployee(): SiliconEmployee;
+    /** The speech polisher built-in was removed; archive (never delete) a leftover row so history stays readable. */
+    retireLegacySpeechPolisherEmployee(): void;
     /** HR owns recruitment independently; seed from configured system candidates once. */
     ensureHrEmployee(seedAgents?: WandTaskAgent[]): SiliconEmployee;
     saveSiliconEmployee(employee: SiliconEmployee): void;

package/dist/storage/employees-repository.js

@@ -8,8 +8,6 @@ import { EMPLOYEE_KNOWLEDGE_MAX_ENTRIES } from "../employee-knowledge-types.js";
 import { FIXED_EMPLOYEE_AVATARS, employeeAvatarValue, fixedEmployeeAvatar, isFixedAvatarEmployee } from "../fixed-employee-avatar.js";
 import { HR_EMPLOYEE_KEY } from "../hr-employee-identity.js";
 import { hrEmployeeDefinition } from "../hr-employee.js";
-import { speechPolisherDefinition } from "../speech-polisher-employee.js";
-import { SPEECH_POLISHER_KEY } from "../speech-polisher-identity.js";
 import { SYSTEM_EMPLOYEE_KEY, systemEmployeeDefinition, systemEmployeeDefaultAgents, systemEmployeeSeedAgents } from "../system-employee.js";
 import { LOCKED_SYSTEM_EMPLOYEE_DEFINITIONS, mapSiliconEmployeeRow } from "./internal.js";
 /** Employee storage: one domain of the WandStorage facade. Shares the connection and the facade's transaction. */
@@ -87,16 +85,10 @@ export class EmployeeRepository {
         }
         return existing;
     }
-    /** Seed the SDK free group once, then preserve independent user choices. */
-    ensureSpeechPolisherEmployee() {
-        const existing = this.getSystemSiliconEmployee(SPEECH_POLISHER_KEY);
-        const definition = speechPolisherDefinition(new Date().toISOString(), existing);
-        if (!existing || existing.name !== definition.name || existing.duty !== definition.duty || existing.prompt !== definition.prompt
-            || existing.avatar !== definition.avatar || existing.archivedAt || !existing.agents.length) {
-            this.saveSiliconEmployee(definition);
-            return definition;
-        }
-        return existing;
+    /** The speech polisher built-in was removed; archive (never delete) a leftover row so history stays readable. */
+    retireLegacySpeechPolisherEmployee() {
+        const now = new Date().toISOString();
+        this.db.prepare("UPDATE silicon_employees SET archived_at = ?, updated_at = ? WHERE system_key = 'wand-speech-polisher' AND archived_at IS NULL").run(now, now);
     }
     /** HR owns recruitment independently; seed from configured system candidates once. */
     ensureHrEmployee(seedAgents) {
@@ -141,9 +133,13 @@ export class EmployeeRepository {
         const tags = isBuiltinSiliconEmployee(employee)
             ? siliconEmployeeTags(employee)
             : parseSiliconEmployeeTags(employee.tags ?? []);
+        const systemSessionLimit = employee.systemSessionLimit === undefined ? existing?.systemSessionLimit ?? null : employee.systemSessionLimit;
+        if (systemSessionLimit !== null && (!Number.isInteger(systemSessionLimit) || systemSessionLimit < 0 || systemSessionLimit > 10_000)) {
+            throw new Error("系统调用历史保留上限必须是 0 到 10000 的整数，或 null（不限）。");
+        }
         this.db.prepare(`INSERT INTO silicon_employees (
-         id, name, duty, prompt, avatar, agents_json, system_key, archived_at, created_at, updated_at, tags_json
-       ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         id, name, duty, prompt, avatar, agents_json, system_key, archived_at, created_at, updated_at, tags_json, system_session_limit
+       ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        ON CONFLICT(id) DO UPDATE SET
          name = excluded.name,
          duty = excluded.duty,
@@ -151,11 +147,12 @@ export class EmployeeRepository {
          avatar = excluded.avatar,
          agents_json = excluded.agents_json,
          tags_json = excluded.tags_json,
+         system_session_limit = excluded.system_session_limit,
          system_key = excluded.system_key,
          archived_at = excluded.archived_at,
          updated_at = excluded.updated_at`).run(employee.id, employee.name, employee.duty, employee.prompt, 
         // Accept a canonical read echo without persisting a display projection over a legacy value.
-        target && existing ? existing.avatar : employee.avatar, JSON.stringify(employee.agents), employee.systemKey ?? null, employee.archivedAt ?? null, employee.createdAt, employee.updatedAt, JSON.stringify(tags));
+        target && existing ? existing.avatar : employee.avatar, JSON.stringify(employee.agents), employee.systemKey ?? null, employee.archivedAt ?? null, employee.createdAt, employee.updatedAt, JSON.stringify(tags), systemSessionLimit);
     }
     /** Explicit, atomic migration; not called from GET, config load, seeds, or ordinary saves.
      * Compare all expected avatar values first; change only avatar, including preserving timestamps.

package/dist/storage/internal.js

@@ -4,14 +4,13 @@ import { AI_TEAM_DEFAULT_MAX_STEPS, isTeamMemberRole, memberAgents, siliconEmplo
 import { decisionExpertDefinition } from "../decision-expert-employee.js";
 import { hrEmployeeDefinition } from "../hr-employee.js";
 import { isSessionProvider } from "../session-provider.js";
-import { speechPolisherDefinition } from "../speech-polisher-employee.js";
 import { isWandTaskAgentKind } from "../task-types.js";
 import { GLOBAL_WORKSPACE_ID } from "../types.js";
 import { safeJsonParse } from "./mappers.js";
 import { parseWandTaskAgent } from "./mappers.js";
 // Shared module-level helpers for the storage repositories (moved verbatim from storage.ts).
 // These system profiles are code-owned; candidates and timestamps are not part of the lock.
-export const LOCKED_SYSTEM_EMPLOYEE_DEFINITIONS = [decisionExpertDefinition(""), speechPolisherDefinition(""), hrEmployeeDefinition("")];
+export const LOCKED_SYSTEM_EMPLOYEE_DEFINITIONS = [decisionExpertDefinition(""), hrEmployeeDefinition("")];
 export const DEFAULT_DB_FILE = "wand.db";
 export function resolveDatabasePath(configPath) {
     return path.resolve(path.dirname(configPath), DEFAULT_DB_FILE);
@@ -64,6 +63,7 @@ export function mapSiliconEmployeeRow(row) {
         agents,
         systemKey,
         tags: siliconEmployeeTags({ systemKey, tags }),
+        systemSessionLimit: typeof row.system_session_limit === "number" ? row.system_session_limit : null,
         archivedAt: typeof row.archived_at === "string" && row.archived_at ? row.archived_at : undefined,
         createdAt: String(row.created_at),
         updatedAt: String(row.updated_at),

package/dist/storage/migrations.js

@@ -272,4 +272,24 @@ export const STORAGE_MIGRATIONS = [
             if (!columns.some(column => column.name === "acceptance_json"))
                 db.exec("ALTER TABLE wand_tasks ADD COLUMN acceptance_json TEXT");
         } },
+    { version: 11, name: "task-comment-dispatch", up: db => db.exec(`
+    CREATE TABLE IF NOT EXISTS wand_task_comment_dispatches (
+      comment_id TEXT PRIMARY KEY REFERENCES wand_task_comments(id) ON DELETE CASCADE,
+      task_id TEXT NOT NULL REFERENCES wand_tasks(id) ON DELETE CASCADE,
+      request_id TEXT NOT NULL, signature TEXT NOT NULL, source_comment_id TEXT,
+      employee_id TEXT, employee_name TEXT, instruction TEXT NOT NULL,
+      task_version TEXT NOT NULL, state TEXT NOT NULL, session_id TEXT, error TEXT, execution_status TEXT,
+      UNIQUE(task_id, request_id)
+    );
+    CREATE INDEX IF NOT EXISTS idx_comment_dispatch_session ON wand_task_comment_dispatches(session_id);
+  `) },
+    { version: 12, name: "employee-system-session-limit", up: db => {
+            const columns = db.prepare("PRAGMA table_info(silicon_employees)").all();
+            if (!columns.some(column => column.name === "system_session_limit")) {
+                db.exec("ALTER TABLE silicon_employees ADD COLUMN system_session_limit INTEGER");
+            }
+            db.exec(`CREATE INDEX IF NOT EXISTS idx_system_ai_employee_history
+      ON command_sessions(json_extract(session_options, '$.employeeId'), started_at DESC)
+      WHERE automation_id GLOB 'system-ai:*'`);
+        } },
 ];

package/dist/storage/readonly.js

@@ -3,6 +3,9 @@ import { decryptVaultSecretTyped } from "../password-manager.js";
 import { readVaultKey } from "./vault-keys.js";
 export function openStorageReadonly(dbPath) {
     const db = new DatabaseSync(dbPath, { readOnly: true });
+    // Local CLI readers share the file with the Server writer. Configure only this connection;
+    // a transient exclusive/schema lock is not proof of a missing/revoked capability.
+    db.exec("PRAGMA busy_timeout = 5000");
     const readConfig = (key) => {
         const value = db.prepare("SELECT value FROM app_config WHERE key = ?").get(key)?.value;
         return typeof value === "string" ? value : null;

package/dist/storage/sessions-repository.d.ts

@@ -54,5 +54,7 @@ export declare class SessionRepository {
     /** List durable metadata without reading or parsing output/messages payloads. */
     loadSessionsSlim(): SessionSnapshot[];
     mapSessionRow(row: SessionRow): SessionSnapshot;
+    /** Metadata-only indexed scan. Running or ambiguous records never count toward the history cap. */
+    excessSystemAiSessionIds(employeeId: string, keep: number): string[];
     deleteSession(id: string): void;
 }

package/dist/storage/sessions-repository.js

@@ -2,6 +2,8 @@ import { sessionPersistValues } from "./mappers.js";
 import { sessionRuntimeMetadataValues } from "./mappers.js";
 import { nowIso } from "../password-manager.js";
 import { sessionSelectFields, sessionPersistFields, sessionPersistAssignments, sessionRuntimeMetadataAssignments, mapSessionCore, sessionRowQuery } from "./mappers.js";
+import { SYSTEM_AI_AUXILIARY_PURPOSES, SYSTEM_AI_CALL_PREFIX } from "../system-ai-call.js";
+const AUXILIARY_HISTORY_PATTERNS = SYSTEM_AI_AUXILIARY_PURPOSES.map(purpose => `${SYSTEM_AI_CALL_PREFIX}${purpose}:?*`);
 /** Session storage: one domain of the WandStorage facade. Shares the connection and the facade's transaction. */
 export class SessionRepository {
     db;
@@ -216,6 +218,17 @@ export class SessionRepository {
     mapSessionRow(row) {
         return mapSessionCore(row);
     }
+    /** Metadata-only indexed scan. Running or ambiguous records never count toward the history cap. */
+    excessSystemAiSessionIds(employeeId, keep) {
+        if (!Number.isInteger(keep) || keep < 0 || keep > 10_000)
+            return [];
+        const rows = this.db.prepare(`SELECT id FROM command_sessions
+      WHERE (${AUXILIARY_HISTORY_PATTERNS.map(() => "automation_id GLOB ?").join(" OR ")})
+        AND json_extract(session_options, '$.employeeId') = ?
+        AND status IN ('exited', 'failed', 'stopped') AND ended_at IS NOT NULL
+      ORDER BY started_at DESC, rowid DESC LIMIT -1 OFFSET ?`).all(...AUXILIARY_HISTORY_PATTERNS, employeeId, keep);
+        return rows.map(row => row.id);
+    }
     deleteSession(id) {
         this.db.prepare("DELETE FROM command_sessions WHERE id = ?").run(id);
     }