@jack200714/mafw 4.5.2 → 4.10.1

package/gateway/dist/plugins/package-host.js

@@ -0,0 +1,331 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PluginHost = void 0;
+/**
+ * 统一插件包宿主 —— 扫 ~/.mafw/plugins/（单文件包 *.js / 目录包 plugin.json+入口），
+ * 激活后把贡献分发给三个 legacy loader（setPackageEntries）。fail-open。
+ * 优先级（同名）：包 > legacy 目录文件 > 内置。
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logger_1 = require("../core/utils/logger");
+const pi_adapter_1 = require("../media/pi-adapter");
+const VALID_MODALITIES = new Set(['image', 'video', 'audio']);
+class PluginHost {
+    dir;
+    createContext;
+    state = new Map();
+    watcher;
+    dirWatchers = new Map();
+    debounce;
+    /** 当前目录包的子目录绝对路径（refreshDirWatchers 用） */
+    pkgDirs = [];
+    runtimeCb;
+    mediaCb;
+    usageCb;
+    lastRuntime = [];
+    lastMedia = [];
+    lastUsage = [];
+    constructor(dir, createContext) {
+        this.dir = dir;
+        this.createContext = createContext;
+    }
+    bindRuntime(cb) { this.runtimeCb = cb; cb(this.lastRuntime); }
+    bindMedia(cb) { this.mediaCb = cb; cb(this.lastMedia); }
+    bindUsage(cb) { this.usageCb = cb; cb(this.lastUsage); }
+    async init() {
+        this.ensureDir();
+        await this.reload();
+        this.startWatch();
+    }
+    getState() {
+        return [...this.state.values()].sort((a, b) => a.name.localeCompare(b.name));
+    }
+    stop() {
+        this.watcher?.close();
+        for (const w of this.dirWatchers.values())
+            w.close();
+        this.dirWatchers.clear();
+        if (this.debounce)
+            clearTimeout(this.debounce);
+    }
+    ensureDir() {
+        if (!fs.existsSync(this.dir)) {
+            fs.mkdirSync(this.dir, { recursive: true });
+            fs.writeFileSync(path.join(this.dir, 'README.md'), README_CONTENT);
+            logger_1.log.info(`[PluginHost] Created ${this.dir}`);
+        }
+    }
+    /** 全量重扫 + 重新激活 + 一次性推送（跨面原子：先全部激活完再推各 loader）。 */
+    async reload() {
+        const next = new Map();
+        const runtime = [];
+        const media = [];
+        const usage = [];
+        const pkgDirs = [];
+        for (const desc of this.scanDescriptors(next)) {
+            if (desc.pkgDir)
+                pkgDirs.push(desc.pkgDir);
+            try {
+                const c = await this.activate(desc);
+                if (c.runtime)
+                    runtime.push(c.runtime);
+                if (c.media)
+                    media.push(c.media);
+                if (c.usage)
+                    usage.push(c.usage);
+                next.set(desc.name, {
+                    name: desc.name, source: desc.mainFile, status: 'ok',
+                    contributions: c.contributions, version: desc.manifest?.version,
+                });
+            }
+            catch (err) {
+                next.set(desc.name, { name: desc.name, source: desc.mainFile, status: 'error', error: err.message, contributions: [] });
+                logger_1.log.warn(`[PluginHost] ${desc.name} activate error: ${err.message}`);
+            }
+        }
+        this.state = next;
+        this.pkgDirs = pkgDirs;
+        this.lastRuntime = runtime;
+        this.lastMedia = media;
+        this.lastUsage = usage;
+        this.runtimeCb?.(runtime);
+        this.mediaCb?.(media);
+        this.usageCb?.(usage);
+        this.refreshDirWatchers();
+    }
+    /** 每个目录包一个 watcher（跨平台——不用 recursive）。reload 后按当前包集合增删。 */
+    refreshDirWatchers() {
+        if (!this.watcher)
+            return; // 顶层 watch 未建立（init 前手动 reload）则不建
+        const wanted = new Set(this.pkgDirs);
+        for (const [dir, w] of this.dirWatchers) {
+            if (!wanted.has(dir)) {
+                w.close();
+                this.dirWatchers.delete(dir);
+            }
+        }
+        for (const dir of wanted) {
+            if (this.dirWatchers.has(dir))
+                continue;
+            try {
+                const w = fs.watch(dir, () => {
+                    if (this.debounce)
+                        clearTimeout(this.debounce);
+                    this.debounce = setTimeout(() => {
+                        void this.reload().catch((err) => logger_1.log.warn(`[PluginHost] reload error: ${err.message}`));
+                    }, 300);
+                });
+                this.dirWatchers.set(dir, w);
+            }
+            catch { /* 单个目录不可 watch → 跳过，fail-open */ }
+        }
+    }
+    /** 枚举候选包；逐条错误记入 errorStates（不抛出）。 */
+    scanDescriptors(errorStates) {
+        const out = [];
+        if (!fs.existsSync(this.dir))
+            return out;
+        const entries = fs.readdirSync(this.dir, { withFileTypes: true })
+            .sort((a, b) => a.name.localeCompare(b.name));
+        for (const entry of entries) {
+            try {
+                if (entry.isFile() && entry.name.endsWith('.js')) {
+                    out.push({ name: entry.name.replace(/\.js$/, ''), mainFile: path.join(this.dir, entry.name) });
+                }
+                else if (entry.isDirectory()) {
+                    const pkgDir = path.join(this.dir, entry.name);
+                    const manifestPath = path.join(pkgDir, 'plugin.json');
+                    let manifest;
+                    if (fs.existsSync(manifestPath)) {
+                        manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
+                    }
+                    const mainFile = path.join(pkgDir, manifest?.main ?? 'index.js');
+                    if (!fs.existsSync(mainFile))
+                        throw new Error(`main file not found: ${manifest?.main ?? 'index.js'}`);
+                    out.push({ name: manifest?.name ?? entry.name, mainFile, manifest, pkgDir });
+                }
+            }
+            catch (err) {
+                errorStates.set(entry.name, { name: entry.name, source: path.join(this.dir, entry.name), status: 'error', error: err.message, contributions: [] });
+            }
+        }
+        return out;
+    }
+    async activate(desc) {
+        try {
+            delete require.cache[require.resolve(desc.mainFile)];
+        }
+        catch { /* first load */ }
+        const mod = require(desc.mainFile);
+        const modName = mod?.name;
+        if (typeof modName !== 'string' || !modName)
+            throw new Error('missing name');
+        if (modName !== desc.name)
+            throw new Error(`name mismatch: exports '${modName}', package '${desc.name}'`);
+        const ctx = this.createContext(modName);
+        const contribs = typeof mod.activate === 'function' ? ((await mod.activate(ctx)) ?? {}) : pickContributions(mod);
+        const kinds = [];
+        let runtime;
+        let media;
+        let usage;
+        if (contribs.usage) {
+            const u = contribs.usage;
+            if (typeof u.name !== 'string' || !u.name)
+                throw new Error('usage contribution missing name');
+            if (typeof u.fetch !== 'function')
+                throw new Error('usage contribution missing fetch(ctx)');
+            usage = { mod: u, source: desc.mainFile };
+            kinds.push('usage');
+        }
+        if (contribs.media) {
+            const spec = contribs.media;
+            if (!Array.isArray(spec.modalities) || spec.modalities.length === 0
+                || !spec.modalities.every((m) => VALID_MODALITIES.has(m)))
+                throw new Error('media: invalid modalities');
+            const hasCreatePrompt = typeof spec.createPrompt === 'function';
+            const hasPiEngine = spec.engine === 'pi';
+            if (hasCreatePrompt === hasPiEngine)
+                throw new Error('media: createPrompt and engine:"pi" are mutually exclusive');
+            const prompt = hasCreatePrompt
+                ? await spec.createPrompt(ctx)
+                : (0, pi_adapter_1.createPiPromptAdapter)({ fixPayload: spec.fixPayload, credentials: ctx.credentials });
+            if (typeof prompt !== 'function')
+                throw new Error('media: createPrompt did not return a function');
+            media = { name: spec.name ?? modName, prompt, modalities: spec.modalities, source: desc.mainFile };
+            kinds.push('media');
+        }
+        if (contribs.runtime) {
+            const spec = contribs.runtime;
+            if (typeof spec.createRuntime !== 'function')
+                throw new Error('runtime: missing createRuntime(ctx)');
+            runtime = {
+                name: spec.name ?? modName,
+                // 包 runtime 一律拿统一 ctx（忽略 loader 传入的 legacy ctx）
+                createRuntime: (_ignored) => spec.createRuntime(ctx),
+                capabilities: spec.capabilities ?? {},
+                external: spec.external !== false,
+                source: desc.mainFile,
+            };
+            kinds.push('runtime');
+        }
+        if (contribs.uiTools) {
+            // 声明期字段级校验：桌面 validateCard 是运行时兜底，形状错位应在激活期暴露
+            if (typeof contribs.uiTools !== 'object' || Array.isArray(contribs.uiTools)) {
+                throw new Error(`uiTools must be an object (got ${typeof contribs.uiTools})`);
+            }
+            for (const [tool, def] of Object.entries(contribs.uiTools)) {
+                if (!def || typeof def !== 'object' || Array.isArray(def)) {
+                    throw new Error(`uiTools.${tool} must be an object (got ${Array.isArray(def) ? 'array' : typeof def})`);
+                }
+            }
+            kinds.push('uiTools');
+        }
+        if (kinds.length === 0)
+            throw new Error('no contributions (usage/media/runtime/uiTools)');
+        return { contributions: kinds, runtime, media, usage };
+    }
+    startWatch() {
+        if (!fs.existsSync(this.dir))
+            return;
+        try {
+            this.watcher = fs.watch(this.dir, () => {
+                if (this.debounce)
+                    clearTimeout(this.debounce);
+                this.debounce = setTimeout(() => {
+                    if (!fs.existsSync(this.dir)) {
+                        this.watcher?.close();
+                        this.watcher = undefined;
+                        return;
+                    }
+                    void this.reload().catch((err) => logger_1.log.warn(`[PluginHost] reload error: ${err.message}`));
+                }, 300);
+            });
+            // init 的 reload 跑在本方法之前（当时 watcher 未建，refreshDirWatchers 早退）
+            // ——这里补建目录包子目录的 watcher。
+            this.refreshDirWatchers();
+        }
+        catch (err) {
+            logger_1.log.warn(`[PluginHost] watch failed: ${err.message}`);
+        }
+    }
+}
+exports.PluginHost = PluginHost;
+function pickContributions(mod) {
+    const out = {};
+    if (mod.usage)
+        out.usage = mod.usage;
+    if (mod.media)
+        out.media = mod.media;
+    if (mod.runtime)
+        out.runtime = mod.runtime;
+    if (mod.uiTools)
+        out.uiTools = mod.uiTools;
+    return out;
+}
+const README_CONTENT = `# MAFW Plugin Packages
+
+一个插件包可以同时贡献多种能力（usage 配额 / media 引擎 / runtime / UI 工具卡）。
+
+## 形态
+
+- 单文件包：\`my-vendor.js\`（包名 = 文件名）
+- 目录包：\`my-vendor/plugin.json\`（\`{ "name", "version"?, "main"? }\`，main 缺省 index.js）
+
+## 模块形状（二选一）
+
+\`\`\`js
+module.exports = {
+  name: "my-vendor",
+  usage:   { name: "my-vendor", type: "api", plan: "P", async fetch(ctx) {} },
+  media:   { modalities: ["image"], engine: "pi", fixPayload(p) {} },
+  runtime: { capabilities: {}, async createRuntime(ctx) {} },
+  uiTools: {},  // v1 仅在插件中心展示登记，桌面侧加载仍走 ~/.mafw/ui-plugins/
+};
+// 或：module.exports = { name, async activate(ctx) { return { usage: {...} }; } };
+\`\`\`
+
+## ctx（三个 legacy ctx 的超集）
+
+- \`ctx.apiKey(provider)\` / \`ctx.fetch(url, opts)\`（60s）/ \`ctx.log\`
+- \`ctx.pluginConfig()\` —— 读 config.yaml \`plugins.<name>.config\`（回退 legacy 三段 pluginConfig）
+- \`ctx.projectDir\` / \`ctx.gatewayPort\` / \`ctx.usage.modelStats({sinceMs?, provider?})\`
+
+## 优先级
+
+同名时：**包 > legacy 目录文件（usage-plugins/ media-plugins/ runtime-plugins/）> 内置**。
+legacy 目录行为不变。reload 只清主文件的 require.cache——改包内 lib/ 共享代码需 \`mafw restart\`。
+`;

package/gateway/dist/plugins/package-types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/gateway/dist/recall/gateway-db-migrate.js

@@ -112,9 +112,12 @@ function migrateGatewayDb(memoryDir, managerSessions, cursorFile, registrySnapsh
                 logger_1.log.warn(`[gateway-db] cursor import failed: ${err.message}`);
             }
         }
-        // ④ registry snapshot (refreshed every start)
+        // ④ registry snapshot (refreshed every start) — scope/key aligned with the
+        // live read/write path (index.ts 'registry/snapshot'/'default'); the legacy
+        // 'registry' scope is removed idempotently.
         if (registrySnapshot !== null) {
-            db.kvSet('registry', 'snapshot', registrySnapshot);
+            db.kvSet('registry/snapshot', 'default', registrySnapshot);
+            db.kvDelete('registry', 'snapshot');
             result.registrySnapshot = true;
         }
         db.close();

package/gateway/dist/recall/redact.js

@@ -0,0 +1,53 @@
+"use strict";
+// Secret redaction for the observation pipeline. Applied once at capture time
+// (before t1_observations insert) so every downstream consumer (turnCompress
+// transcripts, worker prompts, archives) only ever sees redacted content.
+// Deterministic regex pass — no LLM, no false-negative risk beyond pattern
+// coverage; deliberately conservative about false positives (prose like
+// "token budget" or "the secret sauce" must survive).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactSecrets = redactSecrets;
+const PLACEHOLDER = '[REDACTED]';
+// Ordered: specific token formats first, generic key=value forms last.
+const PATTERNS = [
+    // Bearer tokens in Authorization-style headers
+    /(Bearer\s+)[A-Za-z0-9._~+/=-]{8,}/g,
+    // OpenAI / DashScope / OpenRouter / Anthropic style: sk-..., sk-or-v1-..., sk-ant-...
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    // GitHub tokens
+    /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{16,}\b/g,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
+    // Google API keys
+    /\bAIza[0-9A-Za-z_-]{35}\b/g,
+    // AWS access key ids
+    /\bAKIA[0-9A-Z]{16}\b/g,
+    // Slack tokens
+    /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+    // JWTs (header.payload.signature)
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{4,}\b/g,
+    // Generic key=value / "key": "value" secret forms. Keys are explicit
+    // (optionally wrapped in quotes); values must be >= 8 non-delimiter chars so
+    // prose ("password length", short numerics) is untouched. Quoted values
+    // keep their quotes.
+    // group1 keeps everything through the opening value quote; the closing
+    // quote stays outside the match so it survives in place.
+    /((?:"?)\b(?:api[_-]?key|apikey|api[_-]?secret|secret[_-]?key|access[_-]?token|auth[_-]?token|private[_-]?key|client[_-]?secret|password|passwd)\b"?\s*[=:]\s*")[^"\s]{8,}/gi,
+    // "[" excluded from values so an already-written [REDACTED] placeholder is
+    // never re-matched by this pass.
+    /((?:"?)\b(?:api[_-]?key|apikey|api[_-]?secret|secret[_-]?key|access[_-]?token|auth[_-]?token|private[_-]?key|client[_-]?secret|password|passwd)\b"?\s*[=:]\s*)[^\s"',\][]{8,}/gi,
+];
+function redactSecrets(content) {
+    if (!content)
+        return content;
+    let out = content;
+    for (const pattern of PATTERNS) {
+        out = out.replace(pattern, (match, ...rest) => {
+            // Group-free patterns: first rest arg is the numeric offset, replace
+            // wholesale. Patterns with one capture group keep the captured prefix
+            // (e.g. "Bearer ", "api_key=").
+            const group1 = rest[0];
+            return typeof group1 === 'string' ? `${group1}${PLACEHOLDER}` : PLACEHOLDER;
+        });
+    }
+    return out;
+}

package/gateway/dist/recall/turn-pipeline.js

@@ -14,6 +14,8 @@ Rules:
 - every cue_anchors list MUST include the topic entity names (project, module, person, API, feature) so the memory can be retrieved across sessions
 - for preferences or constraints, include a machine-readable anchor like "pref:<dimension>=<value>" (e.g., "pref:ui-language=chinese") in addition to the entity
 - skip redundant or trivial content; do not repeat entries that are obviously already known
+- pointer over fulltext: if the durable content is already carried by a repo artifact (code, docs, ADR, issue, config), record a POINTER (path/URL + one-line gist) instead of restating the full content — the artifact is the source of truth, the memory is only its index
+- for procedural memories, end memory_value with a next-time pointer when applicable: which skill, tool, or command the next agent should reach for (e.g., "→ next time: use the /tdd skill") — a memory should be a signpost, not just an archive
 - for every memory you write, include an explicit importance score via the mafw_add_memory importance parameter: 1=trivial routine, 5=ordinary fact, 9-10=architecture-level decision or serious incident
 - if nothing is worth saving, do not call the tool
 Division of labor: your job is the FACT LAYER of this session — concrete facts, decisions, preferences, event outcomes, and specific technical pitfalls (which API does what). Do NOT attempt cross-session pattern generalization — that is the daily reflection pipeline's job.

package/gateway/dist/routes/event-publish.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleEventPublish = handleEventPublish;
+const event_broadcast_1 = require("../runtime/event-broadcast");
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        req.on('data', (c) => body += c);
+        req.on('end', () => resolve(body));
+        req.on('error', reject);
+    });
+}
+async function handleEventPublish(deps, req, res) {
+    const send = (status, payload) => {
+        res.writeHead(status, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify(payload));
+    };
+    try {
+        const body = JSON.parse(await readBody(req));
+        if (!body || typeof body !== 'object' || Array.isArray(body)) {
+            send(400, { error: 'body must be a JSON object' });
+            return;
+        }
+        if (typeof body.type !== 'string' || !body.type) {
+            send(400, { error: "body.type must be a non-empty string (recommended namespace: 'plugin:<name>:<event>')" });
+            return;
+        }
+        if (body.type === 'opencode_event') {
+            // 信封旁路：data 形状守卫（data.type 缺失 → 400，不发半成品事件）
+            if (!body.data || typeof body.data !== 'object' || typeof body.data.type !== 'string' || !body.data.type) {
+                send(400, { error: 'opencode_event envelope requires data.type (non-empty string)' });
+                return;
+            }
+            deps.broadcast((0, event_broadcast_1.opencodeBroadcast)(body.data, body.data.internal === true));
+            send(200, { ok: true });
+            return;
+        }
+        deps.broadcast(body);
+        send(200, { ok: true });
+    }
+    catch (err) {
+        send(400, { error: `invalid JSON body: ${err.message}` });
+    }
+}

package/gateway/dist/routes/plugins.js

@@ -15,6 +15,14 @@ function readBody(req) {
         req.on('error', reject);
     });
 }
+function readBodyBuffer(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on('data', (c) => chunks.push(c));
+        req.on('end', () => resolve(Buffer.concat(chunks)));
+        req.on('error', reject);
+    });
+}
 async function readJsonBody(req) {
     const raw = await readBody(req);
     try {
@@ -43,15 +51,20 @@ async function guarded(res, fn) {
     }
 }
 async function handlePluginsList(_req, res, deps) {
-    await guarded(res, async () => ({ plugins: (0, hub_1.listPlugins)(deps.hub) }));
+    await guarded(res, async () => ({
+        plugins: (0, hub_1.listPlugins)(deps.hub),
+        packages: deps.hub.getPackages?.() ?? [],
+    }));
 }
 async function handlePluginsInstall(req, res, deps) {
     await guarded(res, async () => {
-        const body = await readJsonBody(req);
-        const entry = await (0, hub_1.installPlugin)(deps.hub, {
-            type: body.type, filename: body.filename, contentBase64: body.contentBase64, overwrite: !!body.overwrite,
-        });
-        logger_1.log.info(`[PluginsHub] installed ${body.type}/${body.filename}`);
+        const url = new URL(req.url || '/', 'http://localhost');
+        const filename = url.searchParams.get('filename') || '';
+        const type = (url.searchParams.get('type') || undefined);
+        const overwrite = url.searchParams.get('overwrite') === '1' || url.searchParams.get('overwrite') === 'true';
+        const bytes = await readBodyBuffer(req);
+        const entry = await (0, hub_1.installPlugin)(deps.hub, { filename, type, bytes, overwrite });
+        logger_1.log.info(`[PluginsHub] installed ${entry.type}/${filename}`);
         return entry;
     });
 }

package/gateway/dist/routes/waitwhat-command.js

@@ -0,0 +1,43 @@
+"use strict";
+// /waitwhat command (UI-driven, via /api/mafw-commands/run): the user signals
+// "that last reply didn't land" and the agent re-pitches its own last message
+// in simplified language, using the project's CONTEXT.md glossary when one
+// exists. Inspired by mattpocock/skills wait-what (MIT).
+//
+// The re-pitch is prompted INTO THE SAME session so every connected client
+// (desktop / TUI / opencode) sees the answer inline via the event stream.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildWaitwhatPrompt = buildWaitwhatPrompt;
+exports.runWaitwhat = runWaitwhat;
+function buildWaitwhatPrompt(original) {
+    return [
+        '[/waitwhat] 用户没看懂你上一条回复。请把它重述一遍：',
+        '1. 先用一两句补上"我们在做什么、刚才说到哪"的上下文定位；',
+        '2. 然后用简明语言重述：短句、一次一个概念、避免嵌套行话（STE100 简化技术英语的风格）；',
+        '3. 如果项目根目录有 CONTEXT.md，先读它并用其中的项目术语（ubiquitous language）来表达；',
+        '4. 只是重述，不要新增内容、不引入新话题。',
+        '',
+        '—— 需要重述的上一条回复原文 ——',
+        original,
+    ].join('\n');
+}
+/**
+ * Re-pitch the last assistant message of the session. Returns ok:false with
+ * an error string (without prompting) when there is nothing to re-pitch.
+ */
+async function runWaitwhat(sessionID, deps) {
+    const messages = await deps.listMessages(sessionID);
+    const lastAssistant = [...(Array.isArray(messages) ? messages : [])]
+        .reverse()
+        .find((m) => m?.info?.role === 'assistant');
+    const original = (lastAssistant?.parts || [])
+        .filter((p) => p?.type === 'text' && typeof p?.text === 'string')
+        .map((p) => p.text)
+        .join('\n')
+        .trim();
+    if (!original) {
+        return { ok: false, error: 'no assistant message to re-pitch' };
+    }
+    await deps.promptAsync(sessionID, buildWaitwhatPrompt(original));
+    return { ok: true };
+}

package/gateway/dist/runtime/contract.js

@@ -15,7 +15,10 @@ function fullCapabilities() {
         agentProcessApi: true,
         completionApi: true,
         sessionBranchApi: true,
-        turnBudgetApi: true,
+        // opencode 适配器不转发 maxTurns/maxCostUsd（SDK 无对应字段）——预算由
+        // gateway 侧 BudgetGuard 承担；声明 true 会让 attachBudgetGuardForGoal
+        // 跳过挂载，goal 预算在默认 runtime 上完全失效。
+        turnBudgetApi: false,
         questionApi: true,
     };
 }

package/gateway/dist/runtime/event-broadcast.js

@@ -0,0 +1,41 @@
+"use strict";
+/**
+ * Mode A 全局广播信封构造器（MafwScheduler.broadcast 的载荷形状）。
+ *
+ * wire 契约（桌面 renderer / TUI 均按此解析）：
+ *   { type: 'opencode_event', data: { type, properties?, sessionID?, directory?, error?, internal? } }
+ *
+ * 规则：可选字段缺失时不得出现在 data 上（key 稳定性，消费方用
+ * `'x' in data` 判定时不受缺省值污染）。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.opencodeBroadcast = opencodeBroadcast;
+exports.projectRegisteredEvent = projectRegisteredEvent;
+function opencodeBroadcast(data, internal) {
+    if (typeof data?.type !== 'string' || !data.type) {
+        // 形状守卫（fail-open）：信封照常返回，但给出可定位诊断——畸形事件
+        // 在桌面/TUI 是"静默忽略"，没有这行日志时插件作者无从排查。
+        // eslint-disable-next-line no-console
+        console.error(`[EventBroadcast] malformed opencode_event data: 'type' must be a non-empty string ` +
+            `(got ${JSON.stringify(data?.type)}); payload keys: ${data ? Object.keys(data).join(',') : '(null)'} ` +
+            `— downstream (desktop/TUI) will ignore this event`);
+    }
+    return {
+        type: 'opencode_event',
+        data: {
+            ...data,
+            ...(data.directory === undefined ? {} : { directory: data.directory }),
+            ...(internal ? { internal: true } : {}),
+        },
+    };
+}
+/**
+ * 项目注册广播（桌面 renderer 依此刷新 Rail 项目列表）。
+ *
+ * 顶层广播必须扁平（无 `data` 键）：desktop 剥壳逻辑 `event = raw?.data || raw`
+ * 会把 `data` 当作 opencode_event 的内层载荷，`type` 随之丢失——与
+ * runtime_switched / user_question 同一约定。
+ */
+function projectRegisteredEvent(projectDir) {
+    return { type: 'project_registered', projectDir };
+}