@weavecode/weave 0.0.0-stage → 0.1.1

package/node_modules/@weavecode/server/dist/daemon/port.d.ts

@@ -0,0 +1,13 @@
+export declare const DEFAULT_PORT = 6420;
+/** 客户端连接目标（CLI / vite 代理）：连本机永远走回环。 */
+export declare const DAEMON_HOST = "127.0.0.1";
+/**
+ * 服务端默认绑定地址（settings `server.bindHost` 可改回 127.0.0.1）。与上面的
+ * DAEMON_HOST 是**两个概念**：那个是「客户端连哪」，这个是「服务端听哪」——
+ * 绑 0.0.0.0 = 局域网可达，由 dashboard 密码认证兜底（见 daemon/auth.ts）。
+ */
+export declare const DEFAULT_BIND_HOST = "0.0.0.0";
+/** Resolve `true` when the port can be bound (no existing listener). */
+export declare function isPortFree(port: number, host?: string): Promise<boolean>;
+/** Find the first free port starting at `start`, scanning up to `maxScan` ports. */
+export declare function findFreePort(start: number, maxScan?: number): Promise<number>;

package/node_modules/@weavecode/server/dist/daemon/port.js

@@ -0,0 +1 @@
+import t from"node:net";export const DEFAULT_PORT=6420,DAEMON_HOST="127.0.0.1",DEFAULT_BIND_HOST="0.0.0.0";export function isPortFree(r,o=DAEMON_HOST){return new Promise(e=>{const n=t.createServer();n.once("error",()=>e(!1)),n.once("listening",()=>n.close(()=>e(!0))),n.listen(r,o)})}export async function findFreePort(r,o=100){for(let e=r;e<r+o;e++)if(await isPortFree(e))return e;throw new Error(`No free port found in range ${r}-${r+o-1}`)}

package/node_modules/@weavecode/server/dist/daemon/project-harnesses.d.ts

@@ -0,0 +1,18 @@
+import { type Harness } from '@weavecode/core';
+import type { HarnessRegistry } from '@weavecode/harness';
+/** 项目行 / 新建会话共用的一个已接入 harness。 */
+export interface ProjectHarness {
+    id: Harness;
+    /** true = 该 harness 有 resume 槽的裸 bin，可「在项目既有终端里新建会话」；
+     *  false（如 codex）只出现在项目卡标签里，不进新建会话的可选项。 */
+    canStartSession: boolean;
+}
+/** 项目的已接入 harness（init 选择结果）+ 各自能否起交互会话（注册表现状）。 */
+export declare function projectHarnesses(projectPath: string, registry?: HarnessRegistry): Promise<ProjectHarness[]>;
+/** 项目行补上 `harnesses` 字段（项目列表 / 归档面）——项目卡标签与新建会话的
+ *  harness 选项同源，不给 web 第二处取数。 */
+export declare function withProjectHarnesses<T extends {
+    path: string;
+}>(rows: T[], registry?: HarnessRegistry): Promise<(T & {
+    harnesses: ProjectHarness[];
+})[]>;

package/node_modules/@weavecode/server/dist/daemon/project-harnesses.js

@@ -0,0 +1,2 @@
+import{readFile as i}from"node:fs/promises";import o from"node:path";import{HARNESS_KEYS as c,isHarness as f}from"@weavecode/core";async function l(e){const r=[c[0]];let t;try{t=await i(o.join(e,".weave","config.yaml"),"utf-8")}catch{return r}const s=t.split(`
+`).find(a=>a.startsWith("harnesses:"));if(!s)return r;try{const a=JSON.parse(s.slice(s.indexOf(":")+1).trim()),n=Array.isArray(a)?a.filter(f):[];return n.length>0?n:r}catch{return r}}export async function projectHarnesses(e,r){return(await l(e)).map(t=>({id:t,canStartSession:!!r?.get(t)?.resume?.bin}))}export async function withProjectHarnesses(e,r){return Promise.all(e.map(async t=>({...t,harnesses:await projectHarnesses(t.path,r)})))}

package/node_modules/@weavecode/server/dist/daemon/project-updates-refresher.d.ts

@@ -0,0 +1,37 @@
+import type { DataBus } from './data-bus.js';
+import type { HookEventBus } from '../hooks/bus.js';
+import type { ProjectUpdateSummary } from '../install/updates.js';
+/**
+ * ProjectUpdatesRefresher — 项目行「有更新待同步」角标的数据面（SSE 推送）。
+ *
+ * 与 InflightCountsRefresher 同形状（无定时器、指纹去重、值变才推**绝对值
+ * 快照**），但触发源有两个：项目插件根变更（plugin-loader 的 watcher 重扫后
+ * 广播 `plugin.reloaded`）与显式对账（新 SSE 客户端接入、同步落地后）——漂移
+ * 只随盘面变化而变，没有轮询的理由。前端零请求：漏帧的客户端在下一次快照
+ * 自我校正；`GET /projects/:id/updates` 仍是权威检测面（hover 兜底同源同算）。
+ */
+export declare class ProjectUpdatesRefresher {
+    /** 现算一份每项目更新摘要（含 0/false）；失败应 throw，由本类吞掉。 */
+    private readonly snapshot;
+    private readonly bus;
+    /** 是否值得重算（一般为「有 SSE 客户端」）。缺省恒真（测试用）。 */
+    private readonly shouldRun;
+    /** 上次取到的快照（null = 还没算过）；新客户端首帧的数据源。 */
+    private lastCounts;
+    /** 上次推送的取值指纹；相同则不再推（只推变化）。 */
+    private lastFingerprint;
+    /** 重算要读盘/算指纹，防重入（并发重算会让快照乱序到达）。 */
+    private running;
+    constructor(
+    /** 现算一份每项目更新摘要（含 0/false）；失败应 throw，由本类吞掉。 */
+    snapshot: () => Promise<Record<number, ProjectUpdateSummary>>, bus: DataBus, hookBus: HookEventBus, 
+    /** 是否值得重算（一般为「有 SSE 客户端」）。缺省恒真（测试用）。 */
+    shouldRun?: () => boolean);
+    /** 显式对账（用户动作/同步落地）：无视「没人看」判定，仍只在值变化时推。 */
+    refreshNow(ignoreSubscribers?: boolean): Promise<void>;
+    /**
+     * 新 SSE 客户端接入：先无条件补一帧上次快照（帧是广播，值没变也得补，
+     * 否则这个连接要等到下一次源变更），再后台对一次账补差量。
+     */
+    onSubscriberJoin(): void;
+}

package/node_modules/@weavecode/server/dist/daemon/project-updates-refresher.js

@@ -0,0 +1 @@
+export class ProjectUpdatesRefresher{snapshot;bus;shouldRun;lastCounts=null;lastFingerprint=null;running=!1;constructor(i,s,t,n=()=>!0){this.snapshot=i,this.bus=s,this.shouldRun=n,t.subscribe(r=>{r.kind==="plugin.reloaded"&&this.refreshNow()})}async refreshNow(i=!1){if(!this.running&&!(!i&&!this.shouldRun())){this.running=!0;try{const s=await this.snapshot();this.lastCounts=s;const t=JSON.stringify(s);if(t===this.lastFingerprint)return;this.lastFingerprint=t,this.bus.emit({key:"updates",payload:{counts:s}})}catch{}finally{this.running=!1}}}onSubscriberJoin(){this.lastCounts!==null&&(this.lastFingerprint=JSON.stringify(this.lastCounts),this.bus.emit({key:"updates",payload:{counts:this.lastCounts}})),this.refreshNow(!0)}}

package/node_modules/@weavecode/server/dist/daemon/server.d.ts

@@ -0,0 +1,132 @@
+import type { EventSource, HarnessRegistry, PluginSurface } from '@weavecode/harness';
+import type { IncomingMessage, Server, ServerResponse } from 'node:http';
+import type { ProjectRepository } from '../repositories/projects.js';
+import type { HookEventRepository } from '../repositories/hook-events.js';
+import type { LibraryRepository } from '../repositories/libraries.js';
+import type { HookDispatchRepository } from '../repositories/hook-dispatches.js';
+import type { SessionRepository } from '../repositories/sessions.js';
+import type { HookRuleRegistry } from '../hooks/registry.js';
+import { type MirrorWriter } from '../hooks/mirror.js';
+import type { HookDispatcher } from '../hooks/dispatcher.js';
+import type { HookEventBus } from '../hooks/bus.js';
+import type { DataBus } from './data-bus.js';
+import type { TerminalTopologyRefresher } from './terminal-topology-refresher.js';
+import type { InflightCountsRefresher } from './inflight-counts-refresher.js';
+import type { SnapshotRefresher } from './snapshot-refresher.js';
+import type { SessionProbe } from './session-probe.js';
+import type { ProjectUpdatesRefresher } from './project-updates-refresher.js';
+import type { ResumeRunner } from '../hooks/resume-runner.js';
+import type { MessageDeliverer } from '../hooks/message-deliverer.js';
+import type { QuestionTracker } from '../hooks/question-tracker.js';
+import type { WatchEngine } from '../hooks/watch-engine.js';
+import type { SessionWatchRepository } from '../repositories/session-watches.js';
+import type { PushSubscriptionRepository } from '../repositories/push-subscriptions.js';
+import type { PushNotifier } from '../hooks/push-notify.js';
+import type { SessionSequenceRepository } from '../repositories/session-sequences.js';
+import type { SequenceEngine } from '../hooks/sequence-engine.js';
+import type { PluginManager } from '../hooks/plugin-loader.js';
+import type { PluginStateRepository } from '../repositories/plugin-states.js';
+import type { UploadRepository } from '../repositories/uploads.js';
+import type { WatchService } from '../watch/watch-service.js';
+import { FingerprintCache } from '../install/fingerprint.js';
+import { ApiLogger } from './api-log.js';
+import { type ToolkitService } from '../hooks/toolkit.js';
+import { type ProjectOpener } from './opener.js';
+import type { AuthService } from './dashboard-auth.js';
+export declare const DAEMON_VERSION = "0.1.0";
+export interface WeaveServerDeps {
+    projects: ProjectRepository;
+    port: number;
+    /** 局域网 HTTPS 监听端口（settings server.tlsPort；0/缺省 = 未开，/settings 的访问地址据此派生）。 */
+    tlsPort?: number;
+    /** File watch service; optional so tests can run without chokidar. */
+    watch?: WatchService;
+    /** Hook event repository; optional so non-ingestion tests can omit it. */
+    hookEvents?: HookEventRepository;
+    /**
+     * 事件接入源（批 4b：类型由 HookAdapter 放宽为结构兼容的 EventSource，
+     * `HookAdapter[]` 仍可赋值）；`harnesses` 存在时 POST /hooks 由其派生。
+     */
+    adapters?: EventSource[];
+    /** 批 4b：harness 驱动注册表（图② 装配）——events/resume 等能力槽的运行时来源。 */
+    harnesses?: HarnessRegistry;
+    /** Library registry (asset sources) for the install panel; optional. */
+    libraries?: LibraryRepository;
+    /** Content-fingerprint cache for update detection; created if absent. */
+    fingerprintCache?: FingerprintCache;
+    /** 接口日志（出入参 + 耗时按小时 JSONL；GET /api-logs 查询）；缺省 <dataDir>/logs/api。 */
+    apiLog?: ApiLogger;
+    /** Directory of the built SPA to statically host; optional. */
+    staticDir?: string;
+    /** Directory-opening backend for the project context menu; spied in tests. */
+    opener?: ProjectOpener;
+    /** 开机自启注册器；默认落系统自启动项（PUT /settings 即时生效），测试注入 spy。 */
+    autoStart?: (enabled: boolean) => void;
+    /** In-memory rule index (match candidates + CRUD facade). */
+    hookRegistry?: HookRuleRegistry;
+    /** Dispatch (运行态) store. */
+    hookDispatches?: HookDispatchRepository;
+    /** Session titles (rename 双向). */
+    hookSessions?: SessionRepository;
+    /** Hook event bus — SSE subscribes alongside the watch service. */
+    hookBus?: HookEventBus;
+    /** 数据变更帧总线（SSE 第三订阅源：载荷推送 / 失效键）。 */
+    dataBus?: DataBus;
+    /** 终端世界（角标计数 + 会话所在屏幕）的后端隐藏刷新器；缺省则该角标只能靠前端自拉（兼容旧装配）。 */
+    terminalRefresher?: TerminalTopologyRefresher;
+    /** 会话中断态快照刷新器（ESC 打断后多数连 Stop 都不发）：中断成功后即时补一拍。 */
+    interruptRefresher?: SnapshotRefresher;
+    /** 会话判活快照刷新器（关 pane 后进程死掉同样无 hook 事件）：关完即时补一拍。 */
+    livenessRefresher?: SnapshotRefresher;
+    /** 会话转录探测（中断态判据）：GET /sessions 逐行现算；缺省不带该字段。 */
+    sessionProbe?: SessionProbe;
+    /** 在途消息角标（会话行）的推送器：新 SSE 客户端接入时补一份首帧快照。 */
+    inflightRefresher?: InflightCountsRefresher;
+    /** 项目行「有更新待同步」角标（含项目插件模板漂移）：源变更/同步落地后对账。 */
+    updatesRefresher?: ProjectUpdatesRefresher;
+    /** Event dispatcher; hook 文件化后由 inbox 消费线程（inbox-worker）驱动。 */
+    hookDispatcher?: HookDispatcher;
+    /** 指令池 resume 执行器；POST /hooks/dispatches/:id/run 依赖它。 */
+    hookRunner?: ResumeRunner;
+    /** 消息域投递器（消息域重塑：纯管道裁决 + prompt 三层）；/sessions/:id/messages 依赖它。 */
+    messageDeliverer?: MessageDeliverer;
+    /** 会话图片上传件（内容寻址落盘 + event_images 指针）；/uploads 与 /images/:id 依赖它。 */
+    uploads?: UploadRepository;
+    /** 阻塞问答跟踪器（AskUserQuestion / 计划与权限确认）；/messaging/questions 与 /sessions/:id/answer 依赖它。 */
+    questionTracker?: QuestionTracker;
+    /** 空闲订阅存储（批 2）；POST/DELETE /sessions/:id/watch 与 GET /messaging/watches 依赖它。 */
+    sessionWatches?: SessionWatchRepository;
+    /** Web Push 订阅存储；POST /messaging/push/(un)subscribe 依赖它。 */
+    pushSubscriptions?: PushSubscriptionRepository;
+    /** Web Push 发送器（提醒第三条腿）；GET /messaging/push/key 依赖它。 */
+    pushNotifier?: Pick<PushNotifier, 'publicKey'>;
+    /** 空闲订阅引擎（批 2）；创建即空闲段的 fire 依赖它。 */
+    watchEngine?: Pick<WatchEngine, 'created'>;
+    /** 跨会话序列存储（批 3）；/messaging/sequences 依赖它。 */
+    sessionSequences?: SessionSequenceRepository;
+    /** 序列引擎（批 3）；POST 触发步 0 与 DELETE 取消依赖它。 */
+    sequenceEngine?: Pick<SequenceEngine, 'trigger' | 'cancel'>;
+    /** 插件管理面；GET /hooks/plugins 与 toggle 依赖它（loader 异步就绪前返回空表）。 */
+    hookPlugins?: PluginManager;
+    /** D3 插件全局开关行；GET /hooks/plugins?projectId= 的 effective 回落源。 */
+    pluginStates?: PluginStateRepository;
+    /** hook 注入计划镜像（规则/标题变更后重写 mirror 文件，缺省不同步 = 无注入）。 */
+    hookMirror?: Pick<MirrorWriter, 'syncProject' | 'syncAll'>;
+    /** hook 文件管道根（归档路由焚毁 inbox/mirror/outbox 用；缺省 hooksRoot()，测试注入临时根）。 */
+    hooksDir?: string;
+    /** 批 10 工具包服务；/projects/:id/toolkit 依赖它。 */
+    toolkit?: ToolkitService;
+    /** 插件安装面（plugins/uninstall 依赖它）；缺省经 registry 取 Claude 面，测试注入 fake exec。 */
+    pluginSurface?: PluginSurface;
+    /** dashboard 平面认证（见 auth.ts）。缺省不装 = 开放（存量测试口径），生产由 start/dev-entry 装配。 */
+    auth?: AuthService;
+    /** AI key 文件路径（测试注入）；缺省 `<dataDir>/ai.json`（见 daemon/ai-config.ts）。 */
+    aiKeyPath?: string;
+}
+/**
+ * 请求 handler 工厂（http 与 https 两个监听共享同一份，含 fingerprint 缓存）。
+ * 传给 createServer 前先在这里做一次 deps 缺省补齐，别在两处各建一份缓存。
+ */
+export declare function weaveRequestHandler(deps: WeaveServerDeps): (req: IncomingMessage, res: ServerResponse) => void;
+/** Create the daemon HTTP server (no TLS; 绑定地址由调用方 listen 决定，认证经 deps.auth)。 */
+export declare function createWeaveServer(deps: WeaveServerDeps): Server;

package/node_modules/@weavecode/server/dist/daemon/server.js

@@ -0,0 +1,11 @@
+import dt from"node:http";import{WEAVE_VERSION as pt}from"../version.js";import{checkHarness as gt,isHarness as M}from"@weavecode/core";import j from"node:fs";import S from"node:path";import{hooksRoot as yt}from"../hooks/mirror.js";import{syncPlugins as bt}from"../hooks/plugin-project-state.js";import{getLibraryScan as rt,invalidateScan as k}from"../install/scan-cache.js";import{installSkill as wt,uninstallSkill as kt,installMcp as jt,uninstallMcp as St,installFileAsset as vt,uninstallFileAsset as Pt,InstallConflictError as at,AssetNotFoundError as B}from"../install/installer.js";import{isFileAssetCategory as it}from"../install/file-assets.js";import{installCapabilities as It}from"../install/capabilities.js";import{readMcpRows as Nt}from"../install/mcp-rows.js";import{writeGlobalMcpServer as Et,removeGlobalMcpServer as Tt,installGlobalSkill as Ot,uninstallGlobalSkill as Mt,readGlobalSkillGroups as Bt,resolveGlobalSkillDir as ot,listGlobalSkillFiles as Ct,readGlobalSkillFile as Gt,ClaudeJsonCorruptError as Jt}from"../install/global-config.js";import{writeCodexMcpServer as At,removeCodexMcpServer as Dt,codexMcpExists as $t,CodexTomlCorruptError as Ft}from"../install/codex-toml.js";import{setMcpEnableOverride as xt}from"../install/settings-mcp.js";import{readProjectConfig as nt,writeProjectConfig as Lt}from"../install/project-config.js";import{applyUpdate as Rt,syncAll as Ut}from"../install/apply-update.js";import{buildLibraryIndex as Ht}from"../install/library-index.js";import{importFromDir as Kt,importFromGit as Wt,importLibraryIntoMarket as zt}from"../market/import.js";import{marketDir as C,readManifest as _t}from"../market/manifest.js";import{marketIdOf as Vt}from"../market/identity.js";import{isInsideDir as G,toRelPosix as Qt}from"../market/resolve.js";import{checkMarketUpdates as Xt}from"../market/updates.js";import{refreshMarketItems as Yt}from"../market/refresh.js";import{ensureBuiltinMarket as Zt,isBuiltinMarketDir as I}from"../market/builtin.js";import{removeInstalled as qt}from"../market/install-link.js";import{readProjectFile as te,readGlobalFile as ee,PathEscapeError as re,FileTooLargeError as ae}from"../install/reader.js";import{listGlobalFileAssets as ie}from"../install/global-file-assets.js";import{readStatuslineConfig as st,readStatuslineScript as oe,applyStatuslineConfig as ct,readGlobalStatuslineConfig as lt,writeGlobalStatuslineConfig as ne}from"../statusline/manager.js";import{DEFAULT_STATUSLINE_CONFIG as se}from"../statusline/config.js";import{FingerprintCache as J}from"../install/fingerprint.js";import{detectUpdates as ce}from"../install/updates.js";import{detectPluginTemplateUpdates as le}from"../install/plugin-templates.js";import{detectInitFileUpdates as ue,needsInit as me}from"../install/init-files.js";import{readBody as d,sendJson as i}from"./http.js";import{ApiLogger as fe}from"./api-log.js";import{handleHooksRoutes as he}from"./hooks-routes.js";import{handleToolkitRoutes as de}from"./toolkit-routes.js";import{handleCaptureRoutes as pe}from"./capture-routes.js";import{purgeProjectPipeline as ge}from"./hook-pipeline.js";import{projectFileNamespaces as ye}from"../hooks/toolkit.js";import{listBrowseRoots as be,listDirectoryChildren as we}from"./fs-browser.js";import{DEFAULT_AI_SETTINGS as ke,readDaemonSettings as v,writeDaemonSettings as je,terminalPresetsFor as Se}from"./settings.js";import{closeTerminalsIn as ve,defaultProjectOpener as P,readTerminalCounts as Pe,terminalBackendFor as Ie}from"./opener.js";import{applyLaunchOnLogin as Ne}from"./auto-start.js";import{DAEMON_HOST as Ee}from"./port.js";import{pluginStateSurfaces as Te,pluginSurfaces as ut,pluginSurfaceFor as mt}from"../surfaces.js";import{readPluginRows as Oe}from"../install/plugin-rows.js";import{installPluginPack as Me}from"../install/plugin-install.js";import{handleAuthRoutes as Be}from"./auth-routes.js";import{handleAiRoutes as Ce}from"./ai-routes.js";import{hasAiKey as Ge,writeAiKey as Je}from"./ai-config.js";import{accessUrls as Ae}from"./tls.js";import{projectHarnesses as De,withProjectHarnesses as ft}from"./project-harnesses.js";export const DAEMON_VERSION=pt;export function weaveRequestHandler(o){const t=o.fingerprintCache??new J,r=o.apiLog??new fe,u={...o,fingerprintCache:t,apiLog:r};return(s,g)=>{r.begin(s,g),$e(s,g,u)}}export function createWeaveServer(o){return dt.createServer(weaveRequestHandler(o))}async function $e(o,t,r){const u=new URL(o.url??"/",`http://${Ee}`);let s=u.pathname;if(s.startsWith("/api/")?s=s.slice(4):s==="/api"&&(s="/"),s==="/health"&&o.method==="GET"){i(t,200,{service:"weave-daemon",version:DAEMON_VERSION,pid:process.pid,port:r.port,uptimeMs:Math.round(process.uptime()*1e3)});return}if(await Be(o,t,r,s)||await Ce(o,t,r,s))return;if(r.auth&&!xe(o,s,r)&&!r.auth.isAuthenticated(o.headers)){i(t,401,{error:"Unauthorized"});return}if(s==="/api-logs"&&o.method==="GET"){if(!r.apiLog){i(t,503,{error:"API log unavailable"});return}const a=u.searchParams.get("status"),e=u.searchParams.get("limit"),n=await r.apiLog.query({from:u.searchParams.get("from")??void 0,to:u.searchParams.get("to")??void 0,path:u.searchParams.get("path")??void 0,method:u.searchParams.get("method")??void 0,status:a==null?void 0:Number(a),limit:e==null?void 0:Number(e)});i(t,200,n);return}if(await he(o,t,r,s,u)||await de(o,t,r,s,u)||await pe(o,t,r,s))return;const g=s.match(/^\/projects\/(\d+)\/hooks$/);if(g&&o.method==="GET"){if(!r.hookEvents){i(t,503,{error:"Hook ingestion unavailable"});return}const a=Number(g[1]),e=Ke(u.searchParams.get("limit")),n=u.searchParams.get("sessionId"),c=u.searchParams.get("beforeId"),l=c?Number(c):void 0,m=(u.searchParams.get("types")??"").split(",").map(p=>p.trim()).filter(Boolean);if(n){const p=r.hookEvents.listBySession(n,e??300,l,m),h=r.uploads?.imagesBySession(n);i(t,200,{events:p.map(f=>{const N=h?.get(f.id);return N?.length?{...f,images:N.map(O=>({id:O.id,name:O.name,mediaType:O.mediaType}))}:f})});return}i(t,200,{events:r.hookEvents.listByProject(a,e)});return}if(s==="/settings"){if(o.method==="GET"){i(t,200,{settings:ht(await v(),r.aiKeyPath),presets:Se(process.platform),platform:process.platform,urls:Ae(r.port,r.tlsPort??0)});return}if(o.method==="PUT"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}const e=a.ai?.apiKey;e!==void 0&&Je(typeof e=="string"?e:null,r.aiKeyPath);const n=await je({...a,ai:Ue(a.ai)});r.hookEvents?.resetPrune(),(r.autoStart??Ne)(n.startup?.launchOnLogin??!1),r.dataBus?.emit({key:"settings"}),i(t,200,ht(n,r.aiKeyPath));return}}const b=s.match(/^\/projects\/(\d+)\/open$/);if(b&&o.method==="POST"){const a=r.projects.getById(Number(b[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(e.target!=="explorer"&&e.target!=="terminal"){i(t,400,{error:'Invalid "target" (explorer|terminal)'});return}const n=r.opener??P;try{if(!(await j.promises.stat(a.path)).isDirectory())throw new Error(`Not a directory: ${a.path}`);if(e.target==="explorer")await n.openExplorer(a.path);else{const l=await v();await n.openTerminal(a.path,l.terminal),setTimeout(()=>{r.terminalRefresher?.refreshNow()},600)}i(t,200,{ok:!0,target:e.target,path:a.path})}catch(c){i(t,400,{error:c instanceof Error?c.message:"Open failed"})}return}const y=s.match(/^\/projects\/(\d+)\/close-terminal$/);if(y&&o.method==="POST"){const a=r.projects.getById(Number(y[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o)||"{}")}catch{i(t,400,{error:"Invalid JSON body"});return}if(!Array.isArray(e.paneIds)||e.paneIds.length===0||e.paneIds.some(l=>typeof l!="string")){i(t,400,{error:"paneIds must be a non-empty array of strings"});return}const n=r.opener??P,c=await v();try{const m=await(n.closeTerminals??ve)(a.path,c.terminal,e.paneIds);setTimeout(()=>{r.terminalRefresher?.refreshNow()},600),i(t,200,{ok:!0,closed:m})}catch(l){i(t,400,{error:l instanceof Error?l.message:"Close failed"})}return}const w=s.match(/^\/projects\/(\d+)\/new-session$/);if(w&&o.method==="POST"){const a=r.projects.getById(Number(w[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o)||"{}")}catch{i(t,400,{error:"Invalid JSON body"});return}const n=await De(a.path,r.harnesses);if(e.harness!==void 0&&!M(e.harness)){i(t,400,{error:'Invalid "harness"'});return}const c=e.harness;if(c&&!n.some(f=>f.id===c)){i(t,409,{error:`Harness "${c}" is not integrated in this project`});return}const l=c?[c]:n.map(f=>f.id),m=l.map(f=>({id:f,spec:r.harnesses?.get(f)?.resume})).find(f=>f.spec?.bin);if(!m){i(t,501,{error:`Harness "${l[0]}" cannot start an interactive session`});return}const p=m.spec,h=r.opener??P;try{if(!(await j.promises.stat(a.path)).isDirectory())throw new Error(`Not a directory: ${a.path}`);const N=await v();await h.runInTerminal(a.path,[p.bin],N.terminal),setTimeout(()=>{r.terminalRefresher?.refreshNow()},600),i(t,200,{ok:!0,command:p.bin,cwd:a.path})}catch(f){i(t,400,{error:f instanceof Error?f.message:"Open failed"})}return}if(s==="/fs/roots"&&o.method==="GET"){const a=r.libraries?r.libraries.list().map(n=>n.path):[],e=await be(a);i(t,200,{roots:e});return}if(s==="/fs/children"&&o.method==="GET"){const a=u.searchParams.get("path");if(!a){i(t,400,{error:'Missing "path" query parameter'});return}try{const e=await we(a);i(t,200,{children:e})}catch(e){i(t,400,{error:`Cannot list directory: ${String(e)}`})}return}if(s==="/capabilities"&&o.method==="GET"){i(t,200,It());return}if(s==="/libraries"&&o.method==="GET"){i(t,200,{libraries:r.libraries?r.libraries.list():[]});return}if(s==="/libraries"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!a.path||!a.kind){i(t,400,{error:'Missing "path" or "kind"'});return}if(!["skill","mcp","both"].includes(a.kind)){i(t,400,{error:'Invalid "kind" (skill|mcp|both)'});return}const e=r.libraries.add({path:a.path,kind:a.kind});r.dataBus?.emit({key:"libraries"}),i(t,201,e);return}const D=s.match(/^\/libraries\/(\d+)\/assets$/);if(D&&o.method==="GET"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=r.libraries.getById(Number(D[1]));if(!a){i(t,404,{error:"Library not found"});return}const{plugins:e,skills:n,mcp:c,files:l}=await rt(a.path),m=a.kind==="skill"||a.kind==="both"?e:[],p=a.kind==="mcp"||a.kind==="both"?c:[],h=a.kind==="skill"||a.kind==="both"?Object.values(l).flat():null;i(t,200,{library:a,skills:n,mcp:p,files:h,plugins:m});return}const $=s.match(/^\/libraries\/(\d+)$/);if($&&o.method==="DELETE"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=Number($[1]),e=r.libraries.getById(a);e&&await k(e.path),r.libraries.remove(a),r.dataBus?.emit({key:"libraries"}),r.dataBus?.emit({key:"market"}),i(t,200,{ok:!0});return}if(s==="/market"&&o.method==="GET"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=await Promise.all(r.libraries.list().map(e=>T(e,r.libraries.dataDir)));i(t,200,{items:a});return}if(s==="/market"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}const e={libraries:r.libraries,dataDir:r.libraries.dataDir};try{if(a.kind==="dir"&&a.path){const n=await Kt(a.path,e);n.refreshed&&r.fingerprintCache?.invalidate(n.dir),await k(n.dir),r.dataBus?.emit({key:"market"}),i(t,201,{item:await T(r.libraries.getById(n.libraryId),r.libraries.dataDir)})}else if(a.kind==="git"&&a.url){const n=await Wt(a.url,e);n.refreshed&&r.fingerprintCache?.invalidate(n.dir),await k(n.dir),r.dataBus?.emit({key:"market"}),i(t,201,{item:await T(r.libraries.getById(n.libraryId),r.libraries.dataDir)})}else i(t,400,{error:'Invalid body (kind: "dir" + path | "git" + url)'})}catch(n){i(t,400,{error:n instanceof Error?n.message:"Import failed"})}return}if(s==="/market/check-updates"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a={};const e=(await d(o)).trim();if(e)try{a=JSON.parse(e)}catch{i(t,400,{error:"Invalid JSON body"});return}const n=r.libraries.list().filter(l=>!I(l.path,r.libraries.dataDir)).filter(l=>!a.ids?.length||a.ids.includes(l.id));for(const l of n)await k(l.path);const c=await Xt(n.map(l=>({id:l.id,dir:l.path})));r.dataBus?.emit({key:"market"}),i(t,200,{results:c});return}if(s==="/market/refresh"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a={};const e=(await d(o)).trim();if(e)try{a=JSON.parse(e)}catch{i(t,400,{error:"Invalid JSON body"});return}const n=r.libraries.list().filter(h=>!a.ids?.length||a.ids.includes(h.id)),c=[];for(const h of n.filter(f=>I(f.path,r.libraries.dataDir))){const f=await Zt({libraries:r.libraries});c.push({id:h.id,status:f.error?"failed":"refreshed"})}const l=n.filter(h=>!I(h.path,r.libraries.dataDir)).map(h=>({id:h.id,dir:h.path})),m=[...await Yt(l,{libraries:r.libraries,dataDir:r.libraries.dataDir}),...c],p=new Map(l.map(h=>[h.id,h.dir]));for(const h of m)if(h.status==="refreshed"){const f=p.get(h.id);f&&(r.fingerprintCache?.invalidate(f),await k(f))}r.dataBus?.emit({key:"market"}),i(t,200,{results:m});return}const F=s.match(/^\/market\/(\d+)$/);if(F&&o.method==="DELETE"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=r.libraries.getById(Number(F[1]));if(!a){i(t,404,{error:"Library not found"});return}if(I(a.path,r.libraries.dataDir)){i(t,409,{error:"Built-in market is owned by weave and cannot be deleted",note:"It is re-materialized from @weavecode/templates on every daemon start."});return}if(!G(a.path,C(r.libraries.dataDir))){i(t,400,{error:"Not a market resource (legacy row \u2014 use DELETE /libraries/:id)"});return}let e;try{await(r.pluginSurface??mt("claude")).removeMarketplace(a.path)}catch(n){e=`Host marketplace deregistration failed: ${n instanceof Error?n.message:String(n)}`}await qt(a.path),r.libraries.remove(a.id),await k(a.path),r.dataBus?.emit({key:"market"}),r.dataBus?.emit({key:"libraries"}),i(t,200,{ok:!0,removed:a.path,installedCopiesKept:!0,...e?{warning:e}:{},note:"The host cascade-uninstalls plugins installed from this market; other installed copies are kept."});return}const x=s.match(/^\/libraries\/(\d+)\/market-import$/);if(x&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=r.libraries.getById(Number(x[1]));if(!a){i(t,404,{error:"Library not found"});return}try{const e=a.path,n=await zt(a,{libraries:r.libraries,dataDir:r.libraries.dataDir});await k(e),await k(n.dir),i(t,200,{item:await T(r.libraries.getById(n.libraryId),r.libraries.dataDir)})}catch(e){i(t,400,{error:e instanceof Error?e.message:"Import failed"})}return}const L=s.match(/^\/projects\/(\d+)\/install$/);if(L&&o.method==="POST"){const a=r.projects.getById(Number(L[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{if(e.category==="skill"){if(!e.name||!e.sourceDir){i(t,400,{error:'Missing "name" or "sourceDir"'});return}const n=e.agent??"claude",c=e.scope==="user"?await Ot(e.sourceDir,e.name,n):await wt(a.path,e.sourceDir,e.name,n);i(t,201,{category:"skill",name:e.name,scope:e.scope??"project",agent:n,path:c})}else if(e.category&&it(e.category)){if(!e.name||!e.sourceFile){i(t,400,{error:'Missing "name" or "sourceFile"'});return}const n=e.agent??"claude",c=e.scope??"project",l=await vt(a.path,e.category,e.name,e.sourceFile,n,c);i(t,201,{category:e.category,name:e.name,scope:c,agent:n,path:l})}else if(e.category==="mcp"){if(!e.name||!e.mcpConfig){i(t,400,{error:'Missing "name" or "mcpConfig"'});return}if(e.agent==="codex"){if(e.scope==="project"){i(t,400,{error:'Codex MCP servers are user-level (~/.codex/config.toml) \u2014 use scope "user"'});return}if(await $t(e.name)){E(t,new at(`MCP server "${e.name}" is already configured in ~/.codex/config.toml`));return}await At(e.name,e.mcpConfig)}else e.scope==="user"?await Et(e.name,e.mcpConfig):await jt(a.path,e.name,e.mcpConfig);i(t,201,{category:"mcp",name:e.name,scope:e.agent==="codex"?"user":e.scope??"project",agent:e.agent??"claude"})}else if(e.category==="plugin"){if(!e.name||!e.sourceDir){i(t,400,{error:'Missing "name" or "sourceDir"'});return}if(e.scope&&e.scope!=="user"){i(t,400,{error:'Plugin install currently only supports scope "user"'});return}const n=e.agent??"claude",c=ut().find(p=>p.harness===n);if(!c){i(t,400,{error:`No plugin install surface for runtime: ${n}`});return}const l=n==="claude"&&r.pluginSurface?r.pluginSurface:c.surface,m=await Me(l,{dir:e.sourceDir,name:e.name,version:e.version,description:e.description});r.dataBus?.emit({key:"toolkit"}),i(t,201,{category:"plugin",key:m.key,scope:"user",agent:n,alreadyInstalled:m.alreadyInstalled})}else i(t,400,{error:'Invalid "category" (skill|mcp|plugin|command|agent|workflow|rule|output-style)'})}catch(n){E(t,n)}return}const R=s.match(/^\/projects\/(\d+)\/uninstall$/);if(R&&o.method==="POST"){const a=r.projects.getById(Number(R[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{if(e.category==="skill"){if(!e.name){i(t,400,{error:'Missing "name"'});return}const n=e.agent??"claude";e.scope==="user"?await Mt(e.name,n):await kt(a.path,e.name,n)}else if(e.category&&it(e.category)){if(!e.name){i(t,400,{error:'Missing "name"'});return}await Pt(a.path,e.category,e.name,e.agent??"claude",e.scope??"project")}else if(e.category==="mcp"){if(!e.name){i(t,400,{error:'Missing "name"'});return}if(e.agent==="codex"){if(!await Dt(e.name)){E(t,new B(`MCP server "${e.name}" is not configured in ~/.codex/config.toml`));return}}else e.scope==="user"?await Tt(e.name):await St(a.path,e.name)}else{i(t,400,{error:'Invalid "category" (skill|mcp|command|agent|workflow|rule|output-style)'});return}i(t,200,{ok:!0})}catch(n){E(t,n)}return}const U=s.match(/^\/projects\/(\d+)\/file$/);if(U&&o.method==="GET"){const a=r.projects.getById(Number(U[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=u.searchParams.get("path");if(!e){i(t,400,{error:'Missing "path" query parameter'});return}try{const n=await te(a.path,e);i(t,200,{path:e,content:n.content,size:n.size})}catch(n){A(t,n)}return}if(s==="/global-file"&&o.method==="GET"){const a=u.searchParams.get("path");if(!a){i(t,400,{error:'Missing "path" query parameter'});return}try{const e=await ee(a);i(t,200,{path:a,content:e.content,size:e.size})}catch(e){A(t,e)}return}const H=s.match(/^\/projects\/(\d+)\/mcp$/);if(H&&o.method==="GET"){const a=r.projects.getById(Number(H[1]));if(!a){i(t,404,{error:"Project not found"});return}i(t,200,{rows:await Nt(a.path)});return}const K=s.match(/^\/projects\/(\d+)\/harness-checks$/);if(K&&o.method==="GET"){const a=r.projects.getById(Number(K[1]));if(!a){i(t,404,{error:"Project not found"});return}i(t,200,{checks:await gt(a.path)});return}if(s.match(/^\/projects\/(\d+)\/skills\/global$/)&&o.method==="GET"){i(t,200,{groups:await Bt()});return}if(s.match(/^\/projects\/(\d+)\/skills\/global\/files$/)&&o.method==="GET"){const a=u.searchParams.get("source"),e=u.searchParams.get("name"),n=u.searchParams.get("pluginKey")??void 0;if(!a||!e){i(t,400,{error:'Missing "source" or "name" query parameter'});return}const c=await ot(a,e,n);if(!c){i(t,404,{error:"Skill not found"});return}i(t,200,{files:await Ct(c)});return}if(s.match(/^\/projects\/(\d+)\/skills\/global\/file$/)&&o.method==="GET"){const a=u.searchParams.get("source"),e=u.searchParams.get("name"),n=u.searchParams.get("pluginKey")??void 0,c=u.searchParams.get("path");if(!a||!e||!c){i(t,400,{error:'Missing "source", "name" or "path" query parameter'});return}const l=await ot(a,e,n);if(!l){i(t,404,{error:"Skill not found"});return}try{const m=await Gt(l,c);i(t,200,{path:c,content:m.content,size:m.size})}catch(m){A(t,m)}return}const W=s.match(/^\/projects\/(\d+)\/plugins\/state$/);if(W){const a=r.projects.getById(Number(W[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="GET"){i(t,200,{rows:await Oe(a.path)});return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!M(e.runtime)||!e.key||!e.scope||!["user","project","local"].includes(e.scope)||!e.state||!["on","off","inherit"].includes(e.state)){i(t,400,{error:'Missing or invalid "runtime"/"key"/"scope" (user|project|local)/"state" (on|off|inherit)'});return}const n=e.scope,c=e.state;try{const l=ut().find(m=>m.harness===e.runtime);if(l)await(e.runtime==="claude"&&r.pluginSurface?r.pluginSurface:l.surface).setEnabledOverride(a.path,n,e.key,c);else{const m=Te().find(p=>p.harness===e.runtime);if(!m||n!=="user"||c==="inherit"){i(t,400,{error:"This runtime only supports user-scope on/off overrides"});return}await m.state.writeGlobalEnabled(e.key,c==="on")}r.dataBus?.emit({key:"toolkit"}),i(t,200,{ok:!0})}catch(l){i(t,400,{error:l instanceof Error?l.message:"Plugin state write failed"})}return}}if(s.match(/^\/projects\/(\d+)\/plugins\/uninstall$/)&&o.method==="POST"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!M(a.runtime)||!a.key){i(t,400,{error:'Missing or invalid "runtime"/"key"'});return}try{const e=a.runtime==="claude"&&r.pluginSurface?r.pluginSurface:mt(a.runtime),{name:n,market:c}=e.parsePluginKey(a.key);await e.uninstall(n,c),i(t,200,{ok:!0})}catch(e){i(t,400,{error:e instanceof Error?e.message:"Plugin uninstall failed"})}return}const z=s.match(/^\/projects\/(\d+)\/mcp\/enable$/);if(z){const a=r.projects.getById(Number(z[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!e.name||!e.state){i(t,400,{error:'Missing "name" or "state"'});return}if(!["on","off","inherit"].includes(e.state)){i(t,400,{error:'Invalid "state" (on|off|inherit)'});return}await xt(a.path,e.name,e.state),i(t,200,{ok:!0});return}}const _=s.match(/^\/projects\/(\d+)\/updates$/);if(_&&o.method==="GET"){const a=r.projects.getById(Number(_[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=r.fingerprintCache??new J;if(!r.libraries){const c=await le(a.path,e),l=await ue(a.path);i(t,200,{skills:[],mcp:[],files:[],pluginTemplates:c,initFiles:l,available:c.filter(m=>m.outdated).length+l.filter(m=>m.outdated&&m.syncClass==="auto").length,needsInit:me(l)});return}const n=await ce(a.path,r.libraries.list(),e);i(t,200,n);return}const V=s.match(/^\/projects\/(\d+)\/update$/);if(V&&o.method==="POST"){const a=r.projects.getById(Number(V[1]));if(!a){i(t,404,{error:"Project not found"});return}if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!e.category||!e.name||!e.scope){i(t,400,{error:'Missing "category", "name", or "scope"'});return}if(!["skill","mcp","command","agent","workflow","rule","output-style"].includes(e.category)){i(t,400,{error:'Invalid "category"'});return}try{const c=await Ht(r.libraries.list());await Rt(a.path,{category:e.category,name:e.name,scope:e.scope,agent:e.agent},c),i(t,200,{ok:!0,category:e.category,name:e.name,scope:e.scope})}catch(c){i(t,400,{error:c instanceof Error?c.message:"Update failed"})}return}const Q=s.match(/^\/projects\/(\d+)\/sync-all$/);if(Q&&o.method==="POST"){const a=r.projects.getById(Number(Q[1]));if(!a){i(t,404,{error:"Project not found"});return}if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}try{const e=r.fingerprintCache??new J,n=await Ut(a.path,r.libraries.list(),e);let c=n;try{const l=r.hookPlugins?.list().map(p=>p.id)??[],m=bt(a,l,{projects:r.projects});c={...n,pluginSync:{syncedAt:m}}}catch{}i(t,200,c),r.updatesRefresher?.refreshNow(!0)}catch(e){i(t,400,{error:e instanceof Error?e.message:"Sync failed"})}return}const X=s.match(/^\/projects\/(\d+)\/config$/);if(X){const a=r.projects.getById(Number(X[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="GET"){i(t,200,await nt(a.path));return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}const n=await nt(a.path),c={lastSyncAt:e.lastSyncAt??n.lastSyncAt};await Lt(a.path,c),i(t,200,c);return}}if(s==="/statusline/global"){if(o.method==="GET"){i(t,200,{config:await lt()});return}if(o.method==="PUT"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{await ne(a);for(const e of r.projects.list()){const n=await st(e.path);n.source==="global"&&await ct(e.path,n)}r.dataBus?.emit({key:"statusline"}),i(t,200,{ok:!0})}catch(e){i(t,400,{error:e instanceof Error?e.message:"Global statusline update failed"})}return}}if(s==="/statusline/default"&&o.method==="GET"){i(t,200,{config:se});return}const Y=s.match(/^\/projects\/(\d+)\/statusline$/);if(Y){const a=r.projects.getById(Number(Y[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="GET"){const[e,n,c]=await Promise.all([st(a.path),oe(a.path),lt()]);i(t,200,{config:e,script:n,globalConfig:c});return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{await ct(a.path,e),r.dataBus?.emit({key:"statusline",projectPath:a.path}),i(t,200,{ok:!0})}catch(n){i(t,400,{error:n instanceof Error?n.message:"Statusline update failed"})}return}}if(s==="/events"&&o.method==="GET"){Fe(o,t,r);return}if(s==="/assets"&&o.method==="GET"){const a=u.searchParams.get("path");if(!a){i(t,400,{error:'Missing "path" query parameter'});return}if(!r.watch){i(t,503,{error:"Watch service unavailable"});return}const e=await ye(a),n=r.watch.getAssets(a).map(c=>{const l=e.get(c.relPath);return l?{...c,namespace:l}:c});i(t,200,{projectPath:a,assets:n});return}if(s==="/global-file-assets"&&o.method==="GET"){i(t,200,{assets:await ie()});return}if(s==="/projects"&&o.method==="GET"){i(t,200,{projects:await ft(r.projects.list(),r.harnesses)});return}if(s==="/projects/archived"&&o.method==="GET"){i(t,200,{projects:await ft(r.projects.listArchived(),r.harnesses)});return}const Z=s.match(/^\/projects\/(\d+)\/archive$/);if(Z&&o.method==="POST"){const a=r.projects.getById(Number(Z[1]));if(!a){i(t,404,{error:"Project not found"});return}if(a.archivedAt){i(t,200,{project:a,purged:{events:0,dispatches:0,sessions:0,messages:0}});return}const e=r.hookDispatches?.deleteByProject(a.id)??0,n=r.hookEvents?.deleteByProject(a.id)??0;r.uploads?.pruneUnreferenced();const c=r.messageDeliverer?.forgetProject(a.id)??0;r.sessionWatches?.deleteByProject(a.id),r.sessionSequences?.deleteByProject(a.id);const l=r.hookSessions?.removeByProject(a.id)??0;r.projects.setArchived(a.id,!0),ge(r.hooksDir??yt(),a.token),r.watch?.reconcile(),r.dataBus?.emit({key:"projects"}),i(t,200,{project:r.projects.getById(a.id),purged:{events:n,dispatches:e,sessions:l,messages:c}});return}const q=s.match(/^\/projects\/(\d+)\/restore$/);if(q&&o.method==="POST"){const a=r.projects.getById(Number(q[1]));if(!a){i(t,404,{error:"Project not found"});return}if(!a.archivedAt){i(t,200,{project:a});return}r.projects.setArchived(a.id,!1),r.hookMirror?.syncProject(a.id),r.watch?.reconcile(),r.dataBus?.emit({key:"projects"}),i(t,200,{project:r.projects.getById(a.id)});return}if(s==="/projects/order"&&o.method==="PUT"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!Array.isArray(a.ids)||!a.ids.every(e=>Number.isInteger(e))){i(t,400,{error:'Invalid "ids" (integer array expected)'});return}r.projects.setOrder(a.ids),r.dataBus?.emit({key:"projects"}),i(t,200,{projects:r.projects.list()});return}const tt=s.match(/^\/projects\/(\d+)\/panes$/);if(tt&&o.method==="GET"){const a=r.projects.getById(Number(tt[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=await v(),n=r.opener?.listPanes??P.listPanes;try{i(t,200,{projectId:a.id,panes:await n(a.path,e.terminal)})}catch(c){i(t,409,{error:c instanceof Error?c.message:"Cannot list panes"})}return}const et=s.match(/^\/projects\/(\d+)\/terminals$/);if(et&&o.method==="GET"){const a=r.projects.getById(Number(et[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=await v(),n=r.opener?.listTerminals??P.listTerminals,c=Ie(e.terminal).enumerable?await n(a.path,e.terminal):[];i(t,200,{projectId:a.id,terminals:c});return}if(s==="/terminals/counts"&&o.method==="GET"){if(r.terminalRefresher)i(t,200,{counts:r.terminalRefresher.lastSnapshot?.counts??{}}),r.terminalRefresher.tick(!0);else{const a=r.opener??P;i(t,200,{counts:await Pe(r.projects.list(),a)})}return}if(o.method==="GET"&&r.staticDir){Re(t,s,r.staticDir);return}i(t,404,{error:"Not found"})}function Fe(o,t,r){if(!r.watch&&!r.hookBus&&!r.dataBus){t.statusCode=503,t.setHeader("content-type","application/json"),t.end(JSON.stringify({error:"Event stream unavailable"}));return}t.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"}),t.write(`: connected
+
+`);const u=[];r.watch&&(u.push(r.watch.subscribe(s=>{t.write(`data: ${JSON.stringify({type:"asset",...s})}
+
+`)})),u.push(r.watch.subscribeProjects(s=>{t.write(`data: ${JSON.stringify({type:"project",...s})}
+
+`)}))),r.hookBus&&u.push(r.hookBus.subscribe(s=>{t.write(`data: ${JSON.stringify({type:"hook",...s})}
+
+`)})),r.dataBus&&u.push(r.dataBus.subscribe(s=>{const g=s.payload===void 0?"invalidate":"push";t.write(`data: ${JSON.stringify({type:g,...s})}
+
+`)})),r.inflightRefresher?.refreshNow(),r.terminalRefresher?.onSubscriberJoin(),r.updatesRefresher?.onSubscriberJoin(),o.on("close",()=>{for(const s of u)s()})}function xe(o,t,r){if(t==="/health")return!0;if(o.method!=="GET")return!1;if((o.headers.accept??"").includes("text/html"))return!0;if(!r.staticDir)return!1;const u=S.normalize(t).replace(/^([/\\]\.\.[/\\])+/,""),s=S.join(r.staticDir,u);return s.startsWith(r.staticDir)&&j.existsSync(s)&&j.statSync(s).isFile()}function Le(o,t){o.setHeader("cache-control",t.startsWith("/assets/")?"public, max-age=31536000, immutable":"no-cache")}function Re(o,t,r){const u=S.normalize(t).replace(/^([/\\]\.\.[/\\])+/,""),s=S.join(r,u);if(!s.startsWith(r)){o.statusCode=403,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:"Forbidden"}));return}j.stat(s,(g,b)=>{if(!g&&b.isFile()){o.setHeader("content-type",He(s)),Le(o,t),o.setHeader("content-length",String(b.size)),j.createReadStream(s).pipe(o);return}j.readFile(S.join(r,"index.html"),(y,w)=>{if(y){o.statusCode=404,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:"Not found"}));return}o.setHeader("content-type","text/html"),o.setHeader("cache-control","no-cache"),o.end(w)})})}function ht(o,t){const r=o.ai??ke;return{...o,ai:{baseUrl:r.baseUrl,model:r.model,apiKeySet:Ge(t)}}}function Ue(o){if(!o)return;const{apiKey:t,...r}=o;return r}function He(o){return o.endsWith(".js")?"text/javascript":o.endsWith(".css")?"text/css":o.endsWith(".html")?"text/html":o.endsWith(".svg")?"image/svg+xml":o.endsWith(".json")?"application/json":"application/octet-stream"}function Ke(o){const t=Number(o??"100");return!Number.isFinite(t)||t<=0?100:Math.min(Math.floor(t),500)}function E(o,t){t instanceof at?o.statusCode=409:t instanceof B?o.statusCode=404:t instanceof Jt||t instanceof Ft?o.statusCode=500:o.statusCode=400,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:t instanceof Error?t.message:"Install failed"}))}async function T(o,t){const r=G(o.path,C(t)),u=r?await _t(o.path):null,s=I(o.path,t);return{id:o.id,kind:o.kind,addedAt:o.addedAt,path:o.path,relPath:G(o.path,t)?Qt(o.path,t):null,resourceId:r?S.basename(o.path):null,managed:r,builtin:s,namespace:r?Vt(o.path,C(t)):void 0,legacy:!u&&!s,source:s?"builtin":u?.source??"legacy",origin:u?.origin??null,importedAt:u?.importedAt??null,commit:u?.commit??null,tags:await _e(o.path)}}const We={command:"command",agent:"agent",workflow:"workflow",rule:"rules","output-style":"output-style"};async function ze(o){const{plugins:t,skills:r,mcp:u,files:s}=await rt(o),g={},b=(y,w)=>{w>0&&(g[y]=(g[y]??0)+w)};b("skill",r.length),b("mcp",u.length);for(const[y,w]of Object.entries(s))b(We[y]??y,w.length);return b("plugin",t.length),b("mods",t.filter(y=>y.kind==="mod"||y.components.includes("mod")).length),g}async function _e(o){try{return await ze(o)}catch{return{}}}function A(o,t){t instanceof re?o.statusCode=403:t instanceof ae?o.statusCode=413:t instanceof B?o.statusCode=404:o.statusCode=400,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:t instanceof Error?t.message:"Read failed"}))}

package/node_modules/@weavecode/server/dist/daemon/session-liveness-refresher.d.ts

@@ -0,0 +1,33 @@
+import type { DataBus } from './data-bus.js';
+/**
+ * SessionLivenessRefresher — 会话行「打开终端」图标的存活数据面（pidAlive）。
+ *
+ * 为什么需要它：claude 进程死掉不一定有事件（终端窗口被关 / 进程被杀 =
+ * 无 SessionEnd hook），GET /sessions 里算好的 pidAlive 卡在旧值、图标常绿。
+ * 判活本身零 spawn（`~/.claude/sessions` 注册表读 + kill(pid,0)），周期可以
+ * 比终端角标（要 spawn wezterm cli，30s）短——只在**有人看**（有 SSE 客户端）
+ * 时探，且**只在值变化时**推绝对值快照；null 态（codex/新鲜会话，判不动）
+ * 不进快照，前端不猜。
+ */
+export interface SessionLivenessRefresherOptions {
+    /** 扫描周期，ms。默认 15s——判活零子进程，图标滞后一个周期即可接受。 */
+    intervalMs?: number;
+    /** 是否值得探测（一般为「有 SSE 客户端」）。缺省恒真（测试用）。 */
+    shouldRun?: () => boolean;
+}
+export declare class SessionLivenessRefresher {
+    /** 现算一份 sessionId → 判得动的存活值（true/false；null 不进图）。 */
+    private readonly snapshot;
+    private readonly bus;
+    private readonly options;
+    private timer;
+    /** 上次推送的取值指纹；相同则不再推（只推变化）。 */
+    private lastFingerprint;
+    constructor(
+    /** 现算一份 sessionId → 判得动的存活值（true/false；null 不进图）。 */
+    snapshot: () => Record<string, boolean>, bus: DataBus, options?: SessionLivenessRefresherOptions);
+    start(): void;
+    stop(): void;
+    /** 一次扫描（同步：注册表读 + kill 0，无 spawn 无重入风险）。 */
+    tick(): void;
+}

package/node_modules/@weavecode/server/dist/daemon/session-probe.d.ts

@@ -0,0 +1,74 @@
+/** 读文件尾部（读不到 → null，不猜）。 */
+export declare function readTail(path: string, bytes?: number): string | null;
+/**
+ * 装配用兜底：路径从库里该会话最近一条事件的旁路字段补回（与入站侧读同一个
+ * `transcriptPath`）。每个会话在 daemon 生命周期里最多查一次——查到即写回内存。
+ */
+export declare function dbTranscriptPathResolver(events: {
+    listBySession(sessionId: string, limit?: number): Array<{
+        payload: string;
+    }>;
+}): (sessionId: string) => string | null;
+export declare class SessionProbe {
+    /**
+     * 路径的内存副本没了以后的兜底（daemon 重启后第一拍）：不补的话，重启后**没有
+     * 新事件**的会话（已收尾 / 闲置中的那些）模型与模式会一直显示「未知」。
+     */
+    private readonly fallbackPath?;
+    constructor(
+    /**
+     * 路径的内存副本没了以后的兜底（daemon 重启后第一拍）：不补的话，重启后**没有
+     * 新事件**的会话（已收尾 / 闲置中的那些）模型与模式会一直显示「未知」。
+     */
+    fallbackPath?: ((sessionId: string) => string | null) | undefined);
+    /** sessionId → 转录路径（内存态；hook 事件每次上报都覆盖刷新）。 */
+    private readonly paths;
+    /** 路径 → 上次读到的事实（按文件大小缓存：没长过就不重读）。 */
+    private readonly marks;
+    /** sessionId → 最后已知的模型/模式（读到就记；见 `latched`）。 */
+    private readonly known;
+    /**
+     * sessionId → 宿主落定的换模型（`PostModelSwitch`）+ 记下的那一刻转录里还是哪个
+     * 模型。转录只在 assistant 消息上照会模型，切完不跑一轮就永远读不到新值——故
+     * 换模型这件事得由事件先说，等转录自己跟上（照会的值不再是 `stale`）才交还给它。
+     */
+    private readonly switched;
+    noteTranscript(sessionId: string, path: string | null): void;
+    private pathOf;
+    forget(sessionId: string): void;
+    /** 宿主落定的换模型（`PostModelSwitch` 的 `to_model`）：立刻生效，见 `switched`。 */
+    noteModel(sessionId: string, model: string): void;
+    /**
+     * 转录还在不在：true/false；路径都不知道 → null（不猜）。
+     *
+     * 会话行是采集出来的、与转录那份文件同生不同死——转录被清理/删掉后列表照旧
+     * 有行，`claude --resume <id>` 却在 pane 里当场报 "No conversation found"。
+     * 故「打开」前与列表渲染前都得先问这一句。空文件也算没有（没有可接的对话）。
+     */
+    transcriptPresent(sessionId: string): boolean | null;
+    /**
+     * 单会话的中断时刻（ms）：转录最后一条中断标记**晚于**最后一条 hook 事件才算
+     * ——之后任何事件（用户又发了一条、工具收尾）都会把它盖过去，故是自愈的；
+     * 未知路径/读不到/没标记一律 null（不猜）。
+     */
+    interruptedAt(sessionId: string, lastSeenAt: string): number | null;
+    /** 最近一轮真跑过的模型（转录 `message.model`）；未知/读不到一律 null（不猜）。 */
+    currentModel(sessionId: string): string | null;
+    /** 最后一次活动时的执行模式（转录 `permissionMode`）；Shift+Tab 不留痕，故是「最后已知」。 */
+    currentMode(sessionId: string): string | null;
+    /**
+     * 模型/模式在 UI 上承诺的是**最后已知**，不是「此刻尾窗里有没有」：尾窗只有 64KB，
+     * 一轮的尾巴若被一条大记录占满、或刚压缩完还没有 assistant 条目，这一拍就什么
+     * 都读不到。更要命的是读空的那一拍会按文件大小被缓存住——会话一完成文件不再
+     * 增长，那口 null 就钉死了，界面上直接掉回「未知」。故读到就记住，读空沿用：
+     * 值只会被**更新的值**替换，不会被读空擦掉。中断标记不参与闩（它按「晚于最后
+     * 一条事件」判，陈旧标记必须能被新事件盖过）。
+     */
+    private latched;
+    /**
+     * 换模型事件压过转录：只要转录照会的还是切换前那个模型（切完还没真跑一轮），
+     * 就答事件说的新值；转录自己跟上（照会别的值）即交还给它。
+     */
+    private switchedModel;
+    private factsOf;
+}

package/node_modules/@weavecode/server/dist/daemon/session-probe.js

@@ -0,0 +1 @@
+import{closeSync as o,openSync as c,readSync as i,statSync as a}from"node:fs";import{currentModelAt as h,currentModeAt as u,interruptMarkerAt as f}from"@weavecode/harness";const d=64*1024,m={model:null,mode:null};export function readTail(s,t=d){try{const e=a(s).size,n=Math.max(0,e-t),r=c(s,"r");try{const l=Buffer.alloc(e-n);return i(r,l,0,l.length,n),l.toString("utf8")}finally{o(r)}}catch{return null}}export function dbTranscriptPathResolver(s){return t=>{try{const e=JSON.parse(s.listBySession(t,1)[0]?.payload??"");return typeof e.transcriptPath=="string"&&e.transcriptPath?e.transcriptPath:null}catch{return null}}}export class SessionProbe{fallbackPath;constructor(t){this.fallbackPath=t}paths=new Map;marks=new Map;known=new Map;switched=new Map;noteTranscript(t,e){e&&this.paths.set(t,e)}pathOf(t){const e=this.paths.get(t);if(e)return e;const n=this.fallbackPath?.(t)??null;return n&&this.paths.set(t,n),n}forget(t){this.paths.delete(t),this.known.delete(t),this.switched.delete(t)}noteModel(t,e){const n=this.pathOf(t);this.switched.set(t,{stale:n?this.factsOf(n).model:null,model:e})}transcriptPresent(t){const e=this.pathOf(t);return e?this.factsOf(e).size>0:null}interruptedAt(t,e){const n=this.pathOf(t);if(!n)return null;const r=this.factsOf(n).markerAt;if(r===null)return null;const l=Date.parse(e);return Number.isFinite(l)&&r>l?r:null}currentModel(t){return this.latched(t).model}currentMode(t){return this.latched(t).mode}latched(t){const e=this.pathOf(t),n=e?this.factsOf(e):m,r=this.known.get(t),l={model:this.switchedModel(t,n.model)??r?.model??null,mode:n.mode??r?.mode??null};return(!r||r.model!==l.model||r.mode!==l.mode)&&this.known.set(t,l),l}switchedModel(t,e){const n=this.switched.get(t);return n&&e===n.stale?n.model:e}factsOf(t){let e;try{e=a(t).size}catch{return{size:-1,markerAt:null,model:null,mode:null}}const n=this.marks.get(t);if(n&&n.size===e)return n;const r=readTail(t),l={size:e,markerAt:r===null?null:f(r),model:r===null?null:h(r),mode:r===null?null:u(r)};return this.marks.set(t,l),l}}

package/node_modules/@weavecode/server/dist/daemon/settings.d.ts

@@ -0,0 +1,120 @@
+import type { DatabaseSync } from 'node:sqlite';
+/**
+ * Daemon-level settings (as opposed to per-project or harness settings):
+ * machine-local preferences for the dashboard itself.
+ *
+ * Stored in the daemon database — a generic `settings` key-value table
+ * (config unified into the DB; no config files are written or read).
+ * Values are text; reads run mergeDefaults so missing/corrupt entries
+ * heal to the defaults. Keys are declared in KEYS and written as a full set.
+ */
+/** Which terminal "open in terminal" launches. `auto` probes per platform. */
+export type TerminalPreset = 'auto' | 'wt' | 'powershell' | 'cmd' | 'terminal' | 'iterm' | 'gnome' | 'konsole' | 'wezterm' | 'ghostty' | 'custom';
+export interface TerminalSettings {
+    preset: TerminalPreset;
+    /** Template for `custom`; `{path}` is replaced with the quoted directory. */
+    customCommand: string;
+}
+/**
+ * UI/CLI language. Machine-level and stored in the daemon settings table so
+ * the dashboard and the `weave` CLI read the same value.
+ *
+ * Extending: add the tag here and to SUPPORTED_LOCALES, then provide the
+ * matching web/CLI dictionaries — both are `Record<Locale, …>`, so a new
+ * locale without dictionaries fails to compile (by design).
+ */
+export type Locale = 'zh-CN' | 'en';
+/** Registration point for future locales (ja, ko, …). */
+export declare const SUPPORTED_LOCALES: readonly Locale[];
+export declare const DEFAULT_LOCALE: Locale;
+export interface DaemonSettings {
+    terminal: TerminalSettings;
+    locale: Locale;
+    /** D3 hooks 系统总开关（规则级 enabled 另控；关掉后 dispatcher 全量短路）。 */
+    hooks: HooksSettings;
+    /** 事件日志（hook_events）保留策略——缺省走默认值（读时归一化）。 */
+    events?: EventsSettings;
+    /** 会话闲置移除策略（无操作 n 天后自动移除）——缺省走默认值（读时归一化）。 */
+    sessions?: SessionsSettings;
+    /** 开机自启动 daemon（系统级自启动项；缺省关闭——读时归一化）。 */
+    startup?: StartupSettings;
+    /** 监听面（绑定地址；缺省放开 0.0.0.0——读时归一化）。 */
+    server?: ServerSettings;
+    /** AI 助手（地址/模型；缺省空 = 未配置——读时归一化）。 */
+    ai?: AiSettings;
+}
+export interface HooksSettings {
+    enabled: boolean;
+}
+/** hook_events 被动清理保留天数（跨天首条写入时删除更早日志）。 */
+export interface EventsSettings {
+    retentionDays: number;
+}
+/** 会话闲置移除保留天数（= lastSeenAt 起算的无操作窗，到期自动移除会话行）。 */
+export interface SessionsSettings {
+    idleDays: number;
+}
+/** daemon 是否随系统登录自启（默认关）。 */
+export interface StartupSettings {
+    launchOnLogin: boolean;
+}
+/** 监听面设置：绑定地址（默认放开 0.0.0.0，由 dashboard 密码认证兜底；可改回 127.0.0.1）+ HTTPS 端口。 */
+export interface ServerSettings {
+    bindHost: string;
+    /** 局域网 HTTPS 监听端口（自签证书，手机浏览器通知的前提）；0 = 关闭。 */
+    tlsPort: number;
+}
+/**
+ * AI 助手（OpenAI 兼容端点）的非密配置。**api key 不在这里**——它落
+ * `<dataDir>/ai.json`（0600，见 daemon/ai-config.ts），本表是 UI 可读面。
+ */
+export interface AiSettings {
+    baseUrl: string;
+    model: string;
+}
+export declare const DEFAULT_TERMINAL_SETTINGS: TerminalSettings;
+export declare const DEFAULT_HOOKS_SETTINGS: HooksSettings;
+/** 保留 90 天：与总览「大于30天」档兼容，留足回溯窗口。 */
+export declare const DEFAULT_EVENT_RETENTION_DAYS = 90;
+export declare const DEFAULT_EVENTS_SETTINGS: EventsSettings;
+/** 闲置 90 天移除：与事件日志同界（会话行连同其事件一起走），总览「大于30天」
+ *  档仍留有 30-90 天窗口可看；新会话随首个事件即建档，不会被快清误伤。 */
+export declare const DEFAULT_SESSION_IDLE_DAYS = 90;
+export declare const DEFAULT_SESSIONS_SETTINGS: SessionsSettings;
+export declare const DEFAULT_STARTUP_SETTINGS: StartupSettings;
+/** 默认放开绑定（局域网可达）：dashboard 密码认证是这层的兜底。HTTPS 与 HTTP 并存（见 daemon/tls.ts）。 */
+export declare const DEFAULT_SERVER_SETTINGS: ServerSettings;
+/** 缺省未配置（地址/模型皆空）——助手按钮此时不显示。 */
+export declare const DEFAULT_AI_SETTINGS: AiSettings;
+export declare const DEFAULT_DAEMON_SETTINGS: DaemonSettings;
+/** Coerce a stored locale to a supported one (whitelist, never throws). */
+export declare function resolveLocale(raw: unknown): Locale;
+export declare const ALL_TERMINAL_PRESETS: TerminalPreset[];
+/** Dropdown entry for the settings modal; only the current platform's
+ * presets are offered, so `terminal`/`iterm` never appear on Windows. */
+export interface TerminalPresetMeta {
+    id: TerminalPreset;
+    label: string;
+}
+/** Presets selectable on the given platform (ordered for the dropdown).
+ *
+ * The list is a superset of what is installed — a preset is offered whenever
+ * the terminal *can* run on that platform, since the machine running the
+ * dashboard is not necessarily the one the choice is for. Ghostty is macOS and
+ * Linux only (no official Windows build), so it is omitted on win32. */
+export declare function terminalPresetsFor(platform: NodeJS.Platform): TerminalPresetMeta[];
+export declare function setDaemonSettingsDb(db: DatabaseSync | null): void;
+/** Read daemon settings; missing/corrupt entries fall back to defaults. */
+export declare function readDaemonSettings(): Promise<DaemonSettings>;
+/**
+ * 同步读（hook_events 被动清理用：insert 是同步写路径，且仅跨天首条
+ * 写入时读一次）。语义与 readDaemonSettings 一致。
+ */
+export declare function readDaemonSettingsSync(): DaemonSettings;
+/**
+ * hooks.enabled 快速读（POST /hooks 每事件调用）：进程内唯一写点是
+ * writeDaemonSettings（写即失效），故缓存与全量读等值，省一次 SELECT+merge。
+ */
+export declare function readHooksEnabled(): boolean;
+/** Persist daemon settings (defaults merged over the input). */
+export declare function writeDaemonSettings(settings: DaemonSettings): Promise<DaemonSettings>;

package/node_modules/@weavecode/server/dist/daemon/settings.js

@@ -0,0 +1,2 @@
+import{openDatabase as y}from"../db/db.js";import{getDbPath as b}from"../db/paths.js";import{DEFAULT_BIND_HOST as E}from"./port.js";export const SUPPORTED_LOCALES=["zh-CN","en"],DEFAULT_LOCALE="zh-CN",DEFAULT_TERMINAL_SETTINGS={preset:"auto",customCommand:""},DEFAULT_HOOKS_SETTINGS={enabled:!0},DEFAULT_EVENT_RETENTION_DAYS=90,DEFAULT_EVENTS_SETTINGS={retentionDays:DEFAULT_EVENT_RETENTION_DAYS},DEFAULT_SESSION_IDLE_DAYS=90,DEFAULT_SESSIONS_SETTINGS={idleDays:DEFAULT_SESSION_IDLE_DAYS},DEFAULT_STARTUP_SETTINGS={launchOnLogin:!1},DEFAULT_SERVER_SETTINGS={bindHost:E,tlsPort:6443},DEFAULT_AI_SETTINGS={baseUrl:"",model:""},DEFAULT_DAEMON_SETTINGS={terminal:DEFAULT_TERMINAL_SETTINGS,locale:DEFAULT_LOCALE,hooks:DEFAULT_HOOKS_SETTINGS,events:DEFAULT_EVENTS_SETTINGS,sessions:DEFAULT_SESSIONS_SETTINGS,startup:DEFAULT_STARTUP_SETTINGS,server:DEFAULT_SERVER_SETTINGS,ai:DEFAULT_AI_SETTINGS};export function resolveLocale(e){return SUPPORTED_LOCALES.includes(e)?e:DEFAULT_LOCALE}export const ALL_TERMINAL_PRESETS=["auto","wt","powershell","cmd","terminal","iterm","gnome","konsole","wezterm","ghostty","custom"];const L={auto:"\u81EA\u52A8\uFF08\u63A2\u6D4B\u53EF\u7528\u7EC8\u7AEF\uFF09",wt:"Windows Terminal",powershell:"PowerShell",cmd:"\u547D\u4EE4\u63D0\u793A\u7B26 (cmd)",terminal:"Terminal.app",iterm:"iTerm2",gnome:"gnome-terminal",konsole:"Konsole",wezterm:"WezTerm",ghostty:"Ghostty",custom:"\u81EA\u5B9A\u4E49\u547D\u4EE4"};export function terminalPresetsFor(e){return(e==="win32"?["auto","wt","wezterm","powershell","cmd","custom"]:e==="darwin"?["auto","terminal","iterm","wezterm","ghostty","custom"]:["auto","gnome","konsole","wezterm","ghostty","custom"]).map(o=>({id:o,label:L[o]}))}function p(e){return Number.isInteger(e)&&e>=0&&e<=65535?e:DEFAULT_SERVER_SETTINGS.tlsPort}function T(e){const n=e??{},o=n.terminal??{},s=n.hooks??{},r=n.events??{},u=n.sessions??{},d=n.startup??{},l=n.server??{},i=n.ai??{},h=Number.isInteger(r.retentionDays)&&r.retentionDays>=1?r.retentionDays:DEFAULT_EVENTS_SETTINGS.retentionDays,S=Number.isInteger(u.idleDays)&&u.idleDays>=1?u.idleDays:DEFAULT_SESSIONS_SETTINGS.idleDays;return{terminal:{preset:ALL_TERMINAL_PRESETS.includes(o.preset)?o.preset:DEFAULT_TERMINAL_SETTINGS.preset,customCommand:typeof o.customCommand=="string"?o.customCommand:""},locale:resolveLocale(n.locale),hooks:{enabled:typeof s.enabled=="boolean"?s.enabled:DEFAULT_HOOKS_SETTINGS.enabled},events:{retentionDays:h},sessions:{idleDays:S},startup:{launchOnLogin:typeof d.launchOnLogin=="boolean"?d.launchOnLogin:DEFAULT_STARTUP_SETTINGS.launchOnLogin},server:{bindHost:typeof l.bindHost=="string"&&l.bindHost.trim()!==""?l.bindHost.trim():DEFAULT_SERVER_SETTINGS.bindHost,tlsPort:p(l.tlsPort)},ai:{baseUrl:typeof i.baseUrl=="string"?i.baseUrl.trim():"",model:typeof i.model=="string"?i.model.trim():""}}}const t={terminalPreset:"terminal.preset",terminalCustomCommand:"terminal.customCommand",locale:"locale",hooksEnabled:"hooks.enabled",eventRetentionDays:"events.retentionDays",sessionIdleDays:"sessions.idleDays",startupLaunchOnLogin:"startup.launchOnLogin",serverBindHost:"server.bindHost",serverTlsPort:"server.tlsPort",aiBaseUrl:"ai.baseUrl",aiModel:"ai.model"};let a=null,c=null;export function setDaemonSettingsDb(e){a=e,c=null}function D(e){if(a)return e(a);const n=y(b());try{return e(n)}finally{n.close()}}function g(e){const n=e.prepare("SELECT key, value FROM settings").all();return new Map(n.map(o=>[o.key,o.value]))}function v(e){return T({terminal:{preset:e.get(t.terminalPreset),customCommand:e.get(t.terminalCustomCommand)},locale:e.get(t.locale),...e.has(t.hooksEnabled)?{hooks:{enabled:e.get(t.hooksEnabled)==="true"}}:{},...e.has(t.eventRetentionDays)?{events:{retentionDays:Number(e.get(t.eventRetentionDays))}}:{},...e.has(t.sessionIdleDays)?{sessions:{idleDays:Number(e.get(t.sessionIdleDays))}}:{},...e.has(t.startupLaunchOnLogin)?{startup:{launchOnLogin:e.get(t.startupLaunchOnLogin)==="true"}}:{},...e.has(t.serverBindHost)||e.has(t.serverTlsPort)?{server:{...e.has(t.serverBindHost)?{bindHost:e.get(t.serverBindHost)}:{},...e.has(t.serverTlsPort)?{tlsPort:Number(e.get(t.serverTlsPort))}:{}}}:{},...e.has(t.aiBaseUrl)||e.has(t.aiModel)?{ai:{baseUrl:e.get(t.aiBaseUrl)??"",model:e.get(t.aiModel)??""}}:{}})}function f(e){return[[t.terminalPreset,e.terminal.preset],[t.terminalCustomCommand,e.terminal.customCommand],[t.locale,e.locale],[t.hooksEnabled,String(e.hooks.enabled)],[t.eventRetentionDays,String(e.events?.retentionDays??DEFAULT_EVENT_RETENTION_DAYS)],[t.sessionIdleDays,String(e.sessions?.idleDays??DEFAULT_SESSION_IDLE_DAYS)],[t.startupLaunchOnLogin,String(e.startup?.launchOnLogin??!1)],[t.serverBindHost,e.server?.bindHost??E],[t.serverTlsPort,String(e.server?.tlsPort??DEFAULT_SERVER_SETTINGS.tlsPort)],[t.aiBaseUrl,e.ai?.baseUrl??""],[t.aiModel,e.ai?.model??""]]}function N(e,n){const o=e.prepare(`INSERT INTO settings (key, value) VALUES (?, ?)
+     ON CONFLICT(key) DO UPDATE SET value = excluded.value`);e.exec("BEGIN");try{for(const[s,r]of n)o.run(s,r);e.exec("COMMIT")}catch(s){throw e.exec("ROLLBACK"),s}}function m(){try{return D(e=>v(g(e)))}catch{return DEFAULT_DAEMON_SETTINGS}}export async function readDaemonSettings(){return m()}export function readDaemonSettingsSync(){return m()}export function readHooksEnabled(){const e=c;if(e&&e.db===a)return e.value;const n=m().hooks.enabled;return c={db:a,value:n},n}export async function writeDaemonSettings(e){const n=T(e);return D(o=>N(o,f(n))),c=null,n}

package/node_modules/@weavecode/server/dist/daemon/snapshot-refresher.d.ts

@@ -0,0 +1,34 @@
+import type { DataBus, DataKey } from './data-bus.js';
+/**
+ * SnapshotRefresher — 「前端不轮询，后端有人看时定期探、只在值变化时推绝对值快照」
+ * 的通用骨架（两个使用者：会话存活 pidAlive、会话中断态）。
+ *
+ * 为什么要有它：这两类事实都可能**没有** hook 事件来触发变化（claude 进程被杀 =
+ * 无 SessionEnd；用户按 ESC 打断 = 无任何事件），GET /sessions 里算好的值于是卡在
+ * 旧值上。探测本身零子进程（读注册表 / 读转录尾），周期可以短；只在**有人看**
+ * （有 SSE 客户端）时探，且**只在值变化时**推——漏帧由下一次推自我校正。
+ */
+export interface SnapshotRefresherOptions {
+    /** 帧键（前端按 key 写状态）。 */
+    key: DataKey;
+    /** 扫描周期，ms。默认 15s。 */
+    intervalMs?: number;
+    /** 是否值得探测（一般为「有 SSE 客户端」）。缺省恒真（测试用）。 */
+    shouldRun?: () => boolean;
+}
+export declare class SnapshotRefresher {
+    /** 现算一份载荷（前端直接写状态的那份绝对值快照）。 */
+    private readonly snapshot;
+    private readonly bus;
+    private readonly options;
+    private timer;
+    /** 上次推送的取值指纹；相同则不再推（只推变化）。 */
+    private lastFingerprint;
+    constructor(
+    /** 现算一份载荷（前端直接写状态的那份绝对值快照）。 */
+    snapshot: () => unknown, bus: DataBus, options: SnapshotRefresherOptions);
+    start(): void;
+    stop(): void;
+    /** 一次扫描（同步；调用方保证探测自身无重入风险）。 */
+    tick(): void;
+}

package/node_modules/@weavecode/server/dist/daemon/snapshot-refresher.js

@@ -0,0 +1 @@
+export class SnapshotRefresher{snapshot;bus;options;timer;lastFingerprint=null;constructor(t,s,i){this.snapshot=t,this.bus=s,this.options=i}start(){this.timer||(this.timer=setInterval(()=>this.tick(),this.options.intervalMs??15e3))}stop(){this.timer&&(clearInterval(this.timer),this.timer=void 0)}tick(){if(!(this.options.shouldRun&&!this.options.shouldRun()))try{const t=this.snapshot(),s=JSON.stringify(t);if(s===this.lastFingerprint)return;this.lastFingerprint=s,this.bus.emit({key:this.options.key,payload:t})}catch{}}}

package/node_modules/@weavecode/server/dist/daemon/start.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Start the daemon in the current process. Reads port from the daemon state
+ * file (written by `weave daemon start`), binds the HTTP server on the
+ * configured host (settings `server.bindHost`，默认 0.0.0.0——由 dashboard
+ * 密码认证兜底，见 auth.ts), starts watching all registered projects, wires up
+ * hook ingestion, and statically hosts the built SPA if present.
+ */
+export declare function startDaemon(): void;