@jsonstudio/rcc 0.89.2239 → 0.90.89

package/docs/{clock-client-daemon-design.md → session-client-daemon-design.md}

@@ -1,4 +1,4 @@
-# Clock Client Daemon + Private Clock Marker Design (routecodex-119)
+# Session Client Daemon + Private Clock Marker Design (routecodex-119)
 
 ## 1. Background
 
@@ -49,13 +49,13 @@ We need a controlled path where:
 5. **Daemon auth model**
    - Localhost-only access guard for daemon control endpoints.
 
-6. **Clock inject session binding**
+6. **Session inject session binding**
    - Daemon routing key is `tmuxSessionId` (tmux session domain), not conversation `sessionId`.
    - Conversation `sessionId` is bound separately to a tmux session in server registry (mapping domain separation).
-   - Launcher appends daemon identity suffix to proxied api key (`::rcc-clockd:<daemonId>`).
-   - HTTP auth middleware extracts daemon suffix and attaches `x-routecodex-clock-daemon-id` request hint.
+   - Launcher appends daemon identity suffix to proxied api key (`::rcc-sessiond:<daemonId>`).
+   - HTTP auth middleware extracts daemon suffix and attaches `x-routecodex-session-daemon-id` request hint.
    - Executor metadata binds `conversationSessionId -> daemonId/tmuxSessionId` deterministically before due injection tick.
-   - `/daemon/clock-client/inject` remains strict and never falls back to unrelated alive daemons.
+   - `/daemon/session-client/inject` remains strict and never falls back to unrelated alive daemons.
 
 ## 4. Architecture
 
@@ -64,7 +64,7 @@ We need a controlled path where:
 - **Launcher (`rcc codex/claude`)**
   - Detects tmux capability.
   - Starts/attaches client daemon if available.
-- **Clock Client Daemon**
+- **Session Client Daemon**
   - Maintains registration + heartbeat with server.
   - Executes `tmux send-keys` for injection + Enter.
   - Self-terminates when parent/client exits.
@@ -116,19 +116,19 @@ please remind me
 
 ## 6. Server Daemon Control Endpoints (localhost only)
 
-- `POST /daemon/clock-client/register`
-- `POST /daemon/clock-client/heartbeat`
-- `POST /daemon/clock-client/inject`
-- `POST /daemon/clock-client/unregister`
+- `POST /daemon/session-client/register`
+- `POST /daemon/session-client/heartbeat`
+- `POST /daemon/session-client/inject`
+- `POST /daemon/session-client/unregister`
 
 Payload fields include session/client type/tmux target/request id/injection text as needed.
 
 ### 6.1 External injection CLI
 
-- Command: `routecodex tmux-inject` / `rcc tmux-inject`
+- Command: `routecodex session-inject` / `rcc session-inject`
 - Common usage:
-  - `rcc tmux-inject --port 5520 --list`
-  - `rcc tmux-inject --port 5520 --text "hello" --tmux-session-id <tmuxSessionId>`
+  - `rcc session-inject --port 5520 --list`
+  - `rcc session-inject --port 5520 --text "hello" --tmux-session-id <tmuxSessionId>`
 - Target resolution rules:
   - Prefer explicit `--tmux-session-id` (or legacy `--session-id` alias);
   - else resolve via `--daemon-id`;
@@ -169,7 +169,7 @@ To ensure due tasks are actually delivered to the client input surface (not only
 - Source of truth: `clock/*.json` under server-scoped `ROUTECODEX_SESSION_DIR`.
 - Runtime config parsing: delegated to llmswitch-core `resolveClockConfig` bridge API.
 - Due reservation: delegated to llmswitch-core `reserveDueTasksForRequest` bridge API.
-- Delivery path: host `ClockClientRegistry.inject({ sessionId, ... })`, where `sessionId` can be conversation ID and is resolved to mapped `tmuxSessionId`.
+- Delivery path: host `SessionClientRegistry.inject({ sessionId, ... })`, where `sessionId` can be conversation ID and is resolved to mapped `tmuxSessionId`.
 - Commit rule: call `commitClockReservation` only after successful daemon injection.
 
 ### 10.1 Lifecycle
@@ -195,10 +195,10 @@ Fix:
 - `sharedmodule/llmswitch-core`: `npm run build` ✅
 - RouteCodex targeted suite (via `npm run jest:run -- --runTestsByPath ...`) ✅
   - `tests/servertool/servertool-clock.spec.ts` (includes new provider pin regression)
-  - `tests/server/http-server/clock-client-routes.spec.ts`
+  - `tests/server/http-server/session-client-routes.spec.ts`
   - `tests/server/http-server/hub-policy-injection.spec.ts`
   - `tests/server/http-server/quota-view-injection.spec.ts`
-  - `tests/cli/tmux-inject-command.spec.ts`
+  - `tests/cli/session-inject-command.spec.ts`
   - `tests/cli/codex-command.spec.ts`
   - `tests/cli/claude-command.spec.ts`
 - `npm run build:dev` ✅
@@ -212,11 +212,11 @@ Using a temporary server on port `5630` + mock callback daemon:
 2. Schedule one due task for `conv_clock_live` in task-store.
 3. Observe callback payload auto-arrival from server loop:
 
-- `source: "clock.daemon.inject"`
+- `source: "session.daemon.inject"`
 - `tmuxSessionId: "rcc_test_tmux"`
 - text includes `[Clock Reminder]` and scheduled task details.
 
-4. `/daemon/clock-client/list` shows `lastInjectAtMs` updated.
+4. `/daemon/session-client/list` shows `lastInjectAtMs` updated.
 
 ## 13. Submit-key reliability hardening (routecodex-128)
 
@@ -234,13 +234,13 @@ Fix applied in launcher daemon path:
 
 Validation:
 
-- `npm run jest:run -- --runInBand --runTestsByPath tests/cli/codex-command.spec.ts tests/cli/claude-command.spec.ts tests/cli/tmux-inject-command.spec.ts` ✅
-- `npm run jest:run -- --runInBand --runTestsByPath tests/server/http-server/clock-client-routes.spec.ts tests/server/http-server/executor-metadata.spec.ts tests/server/http-server/httpserver-apikey-env-resolution.spec.ts tests/utils/clock-client-token.spec.ts` ✅
+- `npm run jest:run -- --runInBand --runTestsByPath tests/cli/codex-command.spec.ts tests/cli/claude-command.spec.ts tests/cli/session-inject-command.spec.ts` ✅
+- `npm run jest:run -- --runInBand --runTestsByPath tests/server/http-server/session-client-routes.spec.ts tests/server/http-server/executor-metadata.spec.ts tests/server/http-server/httpserver-apikey-env-resolution.spec.ts tests/utils/session-client-token.spec.ts` ✅
 - `npx tsc --noEmit` ✅
 
 ## 14. Precise trigger mode (routecodex-129)
 
-Clock daemon delivery now runs in exact due-time mode by default:
+Session daemon delivery now runs in exact due-time mode by default:
 
 - host daemon inject loop rewrites effective clock config to `dueWindowMs=0` before reservation;
 - this prevents early-fire behavior from legacy wide due windows in request-driven paths;
@@ -305,21 +305,21 @@ Cleanup behavior:
 
 Added management endpoints:
 
-- `GET /daemon/clock/tasks` (list)
-- `POST /daemon/clock/tasks` (create)
-- `PATCH /daemon/clock/tasks` (update)
-- `DELETE /daemon/clock/tasks` (delete one / clear session)
-- `POST /daemon/clock/cleanup` (`mode=dead_tmux|unbind`)
+- `GET /daemon/session/tasks` (list)
+- `POST /daemon/session/tasks` (create)
+- `PATCH /daemon/session/tasks` (update)
+- `DELETE /daemon/session/tasks` (delete one / clear session)
+- `POST /daemon/session/cleanup` (`mode=dead_tmux|unbind`)
 
 CLI management command:
 
-- `rcc clock-admin --list`
-- `rcc clock-admin --create --session-id <sid> --due-at <iso> --task <text> --recurrence interval --every-minutes 5 --max-runs 10`
-- `rcc clock-admin --update --session-id <sid> --task-id <tid> --due-at <iso> --task "..."`
-- `rcc clock-admin --delete --session-id <sid> --task-id <tid>`
-- `rcc clock-admin --clear --session-id <sid>`
-- `rcc clock-admin --cleanup-dead-tmux`
-- `rcc clock-admin --unbind-session <conversationSessionId> [--clear-tasks]`
+- `rcc session-admin --list`
+- `rcc session-admin --create --session-id <sid> --due-at <iso> --task <text> --recurrence interval --every-minutes 5 --max-runs 10`
+- `rcc session-admin --update --session-id <sid> --task-id <tid> --due-at <iso> --task "..."`
+- `rcc session-admin --delete --session-id <sid> --task-id <tid>`
+- `rcc session-admin --clear --session-id <sid>`
+- `rcc session-admin --cleanup-dead-tmux`
+- `rcc session-admin --unbind-session <conversationSessionId> [--clear-tasks]`
 
 WebUI management entry:
 
@@ -332,7 +332,7 @@ Clock tool now supports `action=update` (with `taskId` + `items[0]`) so models c
 
 ### 15.6 Trigger precision and reminder guidance
 
-Clock daemon inject loop uses exact due matching (`dueWindowMs=0`) to avoid early delivery.
+Session daemon inject loop uses exact due matching (`dueWindowMs=0`) to avoid early delivery.
 Reminder payload includes guidance text:
 
 - `MANDATORY: if waiting is needed, use the clock tool to schedule wake-up (clock.schedule) now; do not only promise to wait.`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsonstudio/rcc",
-  "version": "0.89.2239",
+  "version": "0.90.089",
   "description": "Multi-provider OpenAI proxy server with anthropic/responses/chat support (release)",
   "type": "module",
   "main": "dist/index.js",
@@ -29,9 +29,11 @@
     "node": ">=20 <26"
   },
   "scripts": {
-    "build": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs && npm run fix:cli-permission",
-    "build:dev": "bash -lc 'export BUILD_MODE=dev; npm run cleanup:stale-server-pids || true; trap \"npm run cleanup:stale-server-pids >/dev/null 2>&1 || true\" EXIT; npm run build && npm run fix:cli-permission && npm run test:unified-hub-shadow && npm run verify:e2e-toolcall && npm run verify:apply-patch && npm run verify:apply-patch-regressions && npm run verify:exec-command && npm run test:routing-instructions && npm run test:cli && npm run install:global && npm run mock:regressions && npm run test:blackbox-antigravity-parity && npm run verify:errorsamples && npm run verify:e2e-gemini-followup-sample'",
-    "build:min": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs && npm run fix:cli-permission",
+    "build": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && npm run build:webui && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs && npm run fix:cli-permission",
+    "build:dev": "bash -lc 'export BUILD_MODE=dev ROUTECODEX_BUILD_RESTART_ONLY=1; npm run build && npm run fix:cli-permission && npm run install:global'",
+    "build:dev:full": "bash -lc 'export BUILD_MODE=dev ROUTECODEX_BUILD_RESTART_ONLY=1; npm run cleanup:stale-server-pids || true; trap \"npm run cleanup:stale-server-pids >/dev/null 2>&1 || true\" EXIT; npm run build && npm run fix:cli-permission && npm run test:unified-hub-shadow && npm run verify:e2e-toolcall && npm run verify:apply-patch && npm run verify:apply-patch-regressions && npm run verify:exec-command && npm run test:routing-instructions && npm run test:cli && npm run install:global && npm run mock:regressions && npm run test:blackbox-antigravity-parity && npm run verify:errorsamples && npm run verify:e2e-gemini-followup-sample'",
+    "build:min": "npm run llmswitch:ensure && node scripts/build-core.mjs && node scripts/vendor-core.mjs && npm run clean && node scripts/gen-build-info.mjs && tsc && npm run build:webui && node scripts/copy-compat-assets.mjs && node scripts/copy-modules-config.mjs && npm run fix:cli-permission",
+    "build:webui": "vite build --config webui/vite.config.ts",
     "prepack": "echo skip-prepack",
     "postbuild": "node scripts/ensure-cli-executable.mjs",
     "build:watch": "tsc --watch",
@@ -39,6 +41,7 @@
     "dev": "tsx watch src/index.ts",
     "jest:run": "node --experimental-vm-modules ./node_modules/jest/bin/jest.js",
     "test": "npm run test:routing-instructions && npm run mock:regressions",
+    "test:regressions": "npm run test:unified-hub-shadow && npm run mock:regressions && npm run test:blackbox-antigravity-parity && npm run verify:errorsamples",
     "test:blackbox-antigravity-parity": "node scripts/tests/blackbox-rcc-vs-routecodex-antigravity.mjs",
     "test:ci:jest": "node scripts/tests/ci-jest.mjs",
     "test:ci:jest:coverage": "node scripts/tests/ci-jest.mjs --coverage",
@@ -47,12 +50,14 @@
     "verify:repo-sanity": "node scripts/ci/repo-sanity.mjs",
     "verify:file-line-limit": "node scripts/ci/check-file-line-limit.mjs",
     "vr:dryrun": "node scripts/virtual-router-dryrun.mjs",
-    "test:routing-instructions": "npm run jest:run -- --runTestsByPath tests/token-daemon/token-daemon.auto-refresh-noninteractive.spec.ts tests/token-daemon/token-daemon.refresh-ahead.spec.ts tests/commands/oauth-command.qwen-auto.spec.ts tests/token-daemon/interactive-refresh.spec.ts tests/server/runtime/request-executor.single-attempt.spec.ts tests/server/runtime/executor-provider.retryable.spec.ts tests/server/runtime/http-server/executor/usage-aggregator.spec.ts tests/providers/auth/tokenfile-auth.iflow.spec.ts tests/providers/auth/antigravity-user-agent.unit.test.ts tests/providers/auth/antigravity-fingerprint.unit.test.ts tests/providers/auth/antigravity-warmup.unit.test.ts tests/providers/core/runtime/gemini-cli-http-provider.unit.test.ts tests/providers/core/runtime/deepseek-http-provider.unit.test.ts tests/providers/core/runtime/antigravity-quota-client.unit.test.ts tests/manager/quota/provider-quota-center.spec.ts tests/manager/quota/provider-quota-store.spec.ts tests/manager/quota/quota-manager-refresh.spec.ts tests/manager/quota/provider-quota-daemon-module.spec.ts tests/manager/quota/provider-key-normalization.spec.ts tests/server/http-server/daemon-admin.e2e.spec.ts tests/server/http-server/clock-client-routes.spec.ts tests/server/http-server/quota-view-injection.spec.ts tests/server/http-server/quota-refresh-triggers.e2e.spec.ts tests/server/http-server/hub-policy-injection.spec.ts tests/server/http-server/session-header-injection.spec.ts tests/server/http-server/session-dir.spec.ts tests/server/handlers/sse-timeout.spec.ts tests/utils/is-direct-execution.test.ts tests/utils/windows-netstat.test.ts tests/servertool/virtual-router-context-fallback.spec.ts tests/servertool/virtual-router-longcontext-fallback.spec.ts tests/servertool/virtual-router-series-cooldown.spec.ts tests/servertool/recursive-detection-guard.spec.ts tests/servertool/routing-instructions.spec.ts tests/servertool/stop-message-auto.spec.ts tests/servertool/stopmessage-session-scope.spec.ts tests/servertool/stopmessage-anthropic-stop-sequence.spec.ts tests/servertool/stopmessage-compaction-false-positive.spec.ts tests/servertool/servertool-progress-logging.spec.ts tests/servertool/servertool-clock.spec.ts tests/servertool/antigravity-thought-signature-bootstrap.spec.ts tests/compat/tabglm-claude-code-profile.spec.ts tests/compat/antigravity-thought-signature.spec.ts tests/sharedmodule/mcp-tool-descriptions.spec.ts tests/sharedmodule/virtual-router-hit-log.spec.ts tests/sharedmodule/virtual-router-routing-model-validation.spec.ts tests/unified-hub/hub-v1-single-path-imports.spec.ts",
+    "test:routing-instructions": "npm run jest:run -- --runTestsByPath tests/token-daemon/token-daemon.auto-refresh-noninteractive.spec.ts tests/token-daemon/token-daemon.refresh-ahead.spec.ts tests/commands/oauth-command.qwen-auto.spec.ts tests/token-daemon/interactive-refresh.spec.ts tests/server/runtime/request-executor.single-attempt.spec.ts tests/server/runtime/executor-provider.retryable.spec.ts tests/server/runtime/http-server/executor/usage-aggregator.spec.ts tests/providers/auth/tokenfile-auth.iflow.spec.ts tests/providers/auth/antigravity-user-agent.unit.test.ts tests/providers/auth/antigravity-fingerprint.unit.test.ts tests/providers/auth/antigravity-warmup.unit.test.ts tests/providers/core/runtime/gemini-cli-http-provider.unit.test.ts tests/providers/core/runtime/deepseek-http-provider.unit.test.ts tests/providers/core/runtime/antigravity-quota-client.unit.test.ts tests/manager/quota/provider-quota-center.spec.ts tests/manager/quota/provider-quota-store.spec.ts tests/manager/quota/quota-manager-refresh.spec.ts tests/manager/quota/provider-quota-daemon-module.spec.ts tests/manager/quota/provider-key-normalization.spec.ts tests/server/http-server/daemon-admin.e2e.spec.ts tests/server/http-server/session-client-routes.spec.ts tests/server/http-server/quota-view-injection.spec.ts tests/server/http-server/quota-refresh-triggers.e2e.spec.ts tests/server/http-server/hub-policy-injection.spec.ts tests/server/http-server/session-header-injection.spec.ts tests/server/http-server/session-dir.spec.ts tests/server/handlers/sse-timeout.spec.ts tests/utils/is-direct-execution.test.ts tests/utils/windows-netstat.test.ts tests/servertool/virtual-router-context-fallback.spec.ts tests/servertool/virtual-router-longcontext-fallback.spec.ts tests/servertool/virtual-router-series-cooldown.spec.ts tests/servertool/recursive-detection-guard.spec.ts tests/servertool/routing-instructions.spec.ts tests/servertool/stop-message-sample-replay.spec.ts tests/servertool/stop-message-auto.spec.ts tests/servertool/stopmessage-session-scope.spec.ts tests/servertool/stopmessage-anthropic-stop-sequence.spec.ts tests/servertool/stopmessage-compaction-false-positive.spec.ts tests/servertool/servertool-progress-logging.spec.ts tests/servertool/servertool-clock.spec.ts tests/servertool/antigravity-thought-signature-bootstrap.spec.ts tests/compat/tabglm-claude-code-profile.spec.ts tests/compat/antigravity-thought-signature.spec.ts tests/sharedmodule/mcp-tool-descriptions.spec.ts tests/sharedmodule/virtual-router-hit-log.spec.ts tests/sharedmodule/virtual-router-routing-model-validation.spec.ts tests/unified-hub/hub-v1-single-path-imports.spec.ts",
     "test:cli": "npm run jest:run -- --runTestsByPath tests/cli/camoufox-command.spec.ts tests/cli/clean-command.spec.ts tests/cli/code-command.spec.ts tests/cli/config-command.spec.ts tests/cli/env-command.spec.ts tests/cli/env-output.spec.ts tests/cli/examples-command.spec.ts tests/cli/port-command.spec.ts tests/cli/port-utils.spec.ts tests/cli/restart-command.spec.ts tests/cli/smoke.spec.ts tests/cli/start-command.spec.ts tests/cli/status-command.spec.ts tests/cli/stop-command.spec.ts",
     "test:watch": "npm run jest:run -- --watch",
     "test:coverage": "npm run jest:run -- --coverage",
     "test:integration": "npm run jest:run -- --testPathPattern=integration",
     "test:e2e": "npm run jest:run -- --testPathPattern=e2e",
+    "test:webui": "npm run jest:run -- --runTestsByPath tests/frontend/webui-app.utils.spec.ts tests/frontend/webui-app.render.spec.tsx tests/frontend/webui-app.integration.spec.tsx tests/frontend/webui-app.pages.spec.tsx tests/frontend/webui-app.edge.spec.tsx",
+    "test:webui:coverage": "npm run jest:run -- --runTestsByPath tests/frontend/webui-app.utils.spec.ts tests/frontend/webui-app.render.spec.tsx tests/frontend/webui-app.integration.spec.tsx tests/frontend/webui-app.pages.spec.tsx tests/frontend/webui-app.edge.spec.tsx --coverage --collectCoverageFrom=webui/src/App.tsx",
     "test:performance": "npm run jest:run -- --testPathPattern=performance",
     "test:protocol": "npm run jest:run -- --testPathPattern=protocol-tools-e2e.spec.ts --runInBand --detectOpenHandles --forceExit",
     "test:dry-run": "node tests/basic-dry-run.mjs",
@@ -71,6 +76,7 @@
     "verify:apply-patch-regressions": "node scripts/verify-apply-patch-regressions.mjs",
     "verify:exec-command": "node scripts/tests/exec-command-loop.mjs",
     "verify:errorsamples": "node scripts/verify-codex-error-samples.mjs",
+    "triage:errorsamples": "node scripts/triage-errorsamples.mjs",
     "verify:e2e-gemini-followup-sample": "node scripts/verify-e2e-gemini-followup-sample.mjs",
     "install:global": "./scripts/install-global.sh",
     "install:release": "./scripts/install-release.sh",
@@ -151,7 +157,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.65.0",
-    "@jsonstudio/llms": "^0.6.2172",
+    "@jsonstudio/llms": "0.6.3214",
     "@lmstudio/sdk": "^1.5.0",
     "@radix-ui/react-switch": "^1.2.6",
     "@types/socket.io": "^3.0.1",
@@ -188,28 +194,38 @@
   },
   "devDependencies": {
     "@jest/globals": "^30.1.2",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.2",
+    "@testing-library/user-event": "^14.6.1",
     "@types/cors": "^2.8.13",
     "@types/express": "^4.17.17",
     "@types/jest": "^29.5.5",
     "@types/node": "^20.19.25",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
     "@typescript-eslint/eslint-plugin": "^6.7.4",
     "@typescript-eslint/parser": "^6.7.4",
     "@typescript-eslint/typescript-estree": "^6.7.4",
+    "@vitejs/plugin-react": "^5.1.0",
     "complexity-report": "^2.0.0-alpha",
     "depcheck": "^1.4.7",
     "eslint": "^8.50.0",
     "eslint-plugin-complexity": "^1.0.2",
     "husky": "^9.0.0",
     "jest": "^29.7.0",
+    "jest-environment-jsdom": "^30.2.0",
     "jscpd": "^4.0.5",
     "lint-staged": "^15.0.0",
     "npm-check-updates": "^18.3.0",
     "package-json-validator": "^0.30.0",
     "prettier": "^3.6.2",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
     "ts-jest": "^29.1.1",
     "ts-node": "^10.9.2",
     "tsx": "^4.0.0",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "vite": "^7.1.12"
   },
   "bundleDependencies": []
 }

package/scripts/build-core.mjs

@@ -10,6 +10,7 @@ const buildMode = buildModeRaw === 'dev' ? 'dev' : 'release';
 const tsc = path.join(root, 'node_modules', 'typescript', 'bin', 'tsc');
 const proj = path.join(root, 'sharedmodule', 'llmswitch-core', 'tsconfig.json');
 const coreRoot = path.join(root, 'sharedmodule', 'llmswitch-core');
+const nativeBuildScript = path.join(coreRoot, 'scripts', 'build-native-hotpath.mjs');
 const outDir = path.join(coreRoot, 'dist');
 const requiredOutputs = [
   path.join(outDir, 'bridge', 'routecodex-adapter.js'),
@@ -75,6 +76,16 @@ function shouldSkipBuild() {
   return distMtime >= srcMtime;
 }
 
+function runNativeBuild() {
+  if (!fs.existsSync(nativeBuildScript)) {
+    fail(`native build script missing: ${nativeBuildScript}`);
+  }
+  const res = spawnSync(process.execPath, [nativeBuildScript], { stdio: 'inherit', cwd: coreRoot });
+  if ((res.status ?? 0) !== 0) {
+    fail('native build failed for llmswitch-core');
+  }
+}
+
 if (!fs.existsSync(tsc)) fail('TypeScript not installed in root node_modules. Run npm i.');
 if (!fs.existsSync(proj)) {
   console.log('[build-core] llmswitch-core source not found under sharedmodule; skip local core build (依赖包将用于运行/打包)');
@@ -92,6 +103,7 @@ if (skip === '1' || skip === 'true' || skip === 'yes') {
   console.log('[build-core] skip requested by env (ROUTECODEX_SKIP_CORE_BUILD/SKIP_CORE_BUILD)');
   process.exit(0);
 }
+runNativeBuild();
 if (shouldSkipBuild()) {
   console.log('[build-core] dist up-to-date; skip rebuild:', outDir);
   process.exit(0);

package/scripts/camoufox/launch-auth.mjs

@@ -13,6 +13,30 @@ function isTruthy(value) {
   return v === '1' || v === 'true' || v === 'yes' || v === 'on';
 }
 
+function isFalsy(value) {
+  if (!value) return false;
+  const v = String(value).trim().toLowerCase();
+  return v === '0' || v === 'false' || v === 'no' || v === 'off';
+}
+
+function resolveIflowHeadlessMode(devMode) {
+  if (devMode) {
+    return false;
+  }
+  const raw = String(
+    process.env.ROUTECODEX_CAMOUFOX_IFLOW_HEADLESS ||
+    process.env.RCC_CAMOUFOX_IFLOW_HEADLESS ||
+    ''
+  ).trim();
+  if (!raw) {
+    return false;
+  }
+  if (isFalsy(raw)) {
+    return false;
+  }
+  return isTruthy(raw);
+}
+
 function parseArgs(argv) {
   const args = { profile: 'default', url: '', autoMode: '', devMode: false };
   const list = argv.slice(2);
@@ -260,13 +284,44 @@ function cleanupExistingCamoufox(profileDir) {
   if (!profileDir) {
     return;
   }
-  console.log('[camoufox-launch-auth] Ensuring Camoufox profile is clean before launch...');
-  const pkillArgs = ['-f', profileDir];
+  // 清理已知进程，不使用 pkill 普杀
+  // 使用 pgrep 查找匹配的进程，然后逐个验证后终止
   try {
-    spawnSync('pkill', pkillArgs, { stdio: 'ignore' });
+    const probe = spawnSync('pgrep', ['-f', profileDir], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore']
+    });
+    
+    if (probe.status === 0 && probe.stdout) {
+      const selfPid = process.pid;
+      const lines = String(probe.stdout).split(/\r?\n/).filter(Boolean);
+      
+      for (const line of lines) {
+        const pid = Number.parseInt(line.trim(), 10);
+        if (!Number.isFinite(pid) || pid <= 0 || pid === selfPid) {
+          continue;
+        }
+        // 验证进程命令包含 camoufox
+        try {
+          const cmdProbe = spawnSync('ps', ['-p', String(pid), '-o', 'command='], { encoding: 'utf8' });
+          const cmd = String(cmdProbe.stdout || '').toLowerCase();
+          if (cmd.includes('camoufox')) {
+            console.log(`[camoufox-launch-auth] Stopping known Camoufox process PID ${pid}`);
+            try {
+              process.kill(pid, 'SIGTERM');
+            } catch {
+              // 忽略终止失败
+            }
+          }
+        } catch {
+          // 忽略 ps 查询失败
+        }
+      }
+    }
   } catch {
-    // pkill may not exist; ignore
+    // pgrep 可能不存在，忽略
   }
+  console.log('[camoufox-launch-auth] Ensuring Camoufox profile is clean before launch...');
   const lockNames = ['.parentlock', 'parent.lock', 'lock'];
   for (const name of lockNames) {
     const target = path.join(profileDir, name);
@@ -754,7 +809,9 @@ async function runIflowAutoFlow({ url, profileDir, profileId, camoufoxBinary, de
     );
   }
 
-  const headless = !devMode;
+  // iFlow OAuth has poor reliability under headless mode (often returns anti-bot/garbled pages).
+  // Keep default headed to match camo CLI behavior; allow opt-in headless via env.
+  const headless = resolveIflowHeadlessMode(devMode);
   const timeoutMs = Number(process.env.ROUTECODEX_CAMOUFOX_IFLOW_TIMEOUT_MS || 300_000);
   console.log(`[camoufox-launch-auth] Launching Camoufox in ${headless ? 'headless' : 'headed'} mode...`);
   cleanupExistingCamoufox(profileDir);
@@ -1172,6 +1229,8 @@ async function runQwenAutoFlow({ url, profileDir, camoufoxBinary, devMode }) {
   }
 
   const timeoutMs = Number(process.env.ROUTECODEX_CAMOUFOX_QWEN_TIMEOUT_MS || 120_000);
+  const accountPreference = (process.env.ROUTECODEX_CAMOUFOX_ACCOUNT_TEXT || '').trim();
+  const accountWaitMs = Number(process.env.ROUTECODEX_CAMOUFOX_QWEN_ACCOUNT_TIMEOUT_MS || 15_000);
   cleanupExistingCamoufox(profileDir);
   const context = await firefox.launchPersistentContext(profileDir, {
     executablePath: camoufoxBinary,
@@ -1231,6 +1290,54 @@ async function runQwenAutoFlow({ url, profileDir, camoufoxBinary, devMode }) {
       await authPage.waitForLoadState('domcontentloaded', { timeout: pageLoadTimeoutMs }).catch(() => {});
     }
 
+    const qwenAccountSelectors = [
+      'div.yAlK0b[jsname="bQIQze"]',
+      'div.pGzURd[jsname="V1ur5d"]',
+      'span.accountName--ZKlffRBc',
+      'span[class^="accountName--"]',
+      'span[class*="accountName--"]',
+      '.account-item',
+      '[class*="account-item"]',
+      '[class*="accountItem"]',
+      '[data-testid*="account"]',
+      '[data-test*="account"]'
+    ];
+    const accountResult = await waitForAnyElementInPages(context, qwenAccountSelectors, accountWaitMs);
+    if (accountResult) {
+      let targetAccount = accountResult.locator.first();
+      if (accountPreference) {
+        const preferred = accountResult.locator.filter({ hasText: accountPreference });
+        if (await preferred.count()) {
+          console.log(`[camoufox-launch-auth] Qwen selecting account matching preference "${accountPreference}"`);
+          targetAccount = preferred.first();
+        } else {
+          console.warn(
+            `[camoufox-launch-auth] Qwen preferred account text "${accountPreference}" not found; falling back to first account`
+          );
+        }
+      }
+      await targetAccount.scrollIntoViewIfNeeded().catch(() => {});
+      await targetAccount.hover({ force: true }).catch(() => {});
+      const handle = await targetAccount.elementHandle();
+      const accountText = await targetAccount.innerText().catch(() => '');
+      if (handle) {
+        console.log(
+          `[camoufox-launch-auth] Qwen account element detected (${accountText || 'unknown label'}), clicking...`
+        );
+        await accountResult.page.evaluate((el) => {
+          const events = ['mouseenter', 'mouseover', 'mousemove', 'mousedown', 'mouseup', 'click'];
+          for (const type of events) {
+            el.dispatchEvent(new MouseEvent(type, { bubbles: true, cancelable: true, view: window }));
+          }
+        }, handle);
+      } else {
+        await targetAccount.click({ timeout: Math.min(timeoutMs, 10_000) }).catch(() => {});
+      }
+      await accountResult.page.waitForLoadState('domcontentloaded', { timeout: Math.min(timeoutMs, 15_000) }).catch(() => {});
+    } else {
+      console.log('[camoufox-launch-auth] Qwen account selector not detected; proceeding to confirm step...');
+    }
+
     console.log('[camoufox-launch-auth] Qwen authorize page loaded, waiting for confirm button...');
     const confirmSelector = 'button.qwen-confirm-btn';
     const confirmResult = await waitForElementInPages(context, confirmSelector, timeoutMs);

package/scripts/ci/repo-sanity.mjs

@@ -91,6 +91,7 @@ function checkRootLayout() {
     'task.md',
     'tests',
     'tmp',
+    'tsconfig.jest.json',
     'tsconfig.json',
     'vendor',
   ]);