@weavecode/weave 0.0.0-stage → 0.1.1

package/node_modules/@weavecode/core/dist/types.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{HARNESS_EVENTS as i,HARNESS_NAMES as r,INJECTABLE_EVENTS as s}from"./harness.js";export const PresetSchema=e.enum(["minimal","default","full"]),InitComponentsSchema=e.object({settings:e.boolean(),skills:e.boolean(),commands:e.boolean(),agents:e.boolean(),helpers:e.boolean(),mcp:e.boolean(),claudeMd:e.boolean(),agentsMd:e.boolean()}),HooksConfigSchema=e.object({preToolUse:e.boolean(),postToolUse:e.boolean(),userPromptSubmit:e.boolean(),sessionStart:e.boolean(),stop:e.boolean(),stopFailure:e.boolean(),subagentStop:e.boolean(),subagentStart:e.boolean(),notification:e.boolean(),postToolUseFailure:e.boolean(),permissionRequest:e.boolean(),permissionDenied:e.boolean(),preCompact:e.boolean(),sessionEnd:e.boolean(),preModelSwitch:e.boolean(),timeout:e.number().default(5e3),continueOnError:e.boolean().default(!0)}),CLAUDE_HOOK_EVENTS=i.claude,INJECTABLE_HOOK_EVENTS=s.claude;const a=e.enum(r),l=e.enum([...r,"any"]);export const HookRuleSourceSchema=e.discriminatedUnion("kind",[e.object({kind:e.literal("hook-event"),harness:l,event:e.string().min(1)}),e.object({kind:e.literal("webhook"),routeId:e.string().min(1)}),e.object({kind:e.literal("claude-event"),event:e.string().min(1)})]);export function normalizeHookRuleSource(t){return t.kind==="claude-event"?{kind:"hook-event",harness:"claude",event:t.event}:t}export function hookSourceHarness(t){return t.kind==="claude-event"?"claude":t.kind==="hook-event"?t.harness:null}export const HookRuleFilterSchema=e.object({toolNames:e.array(e.string().min(1)).optional(),pathGlobs:e.array(e.string().min(1)).optional(),crossProjectOnly:e.boolean().optional()}),HandlerConfigSchema=e.discriminatedUnion("type",[e.object({type:e.literal("log")}),e.object({type:e.literal("webhook"),url:e.string().url(),secret:e.string().optional(),headers:e.record(e.string(),e.string()).optional()}),e.object({type:e.literal("inject"),template:e.string().min(1)}),e.object({type:e.literal("manual"),template:e.string().min(1)}),e.object({type:e.literal("plugin"),pluginId:e.string().min(1),handlerType:e.string().min(1),config:e.record(e.string(),e.unknown()).optional()})]),HookRuleOriginSchema=e.enum(["user","plugin","builtin"]),HookRuleSchema=e.object({id:e.string().min(1),name:e.string().min(1),enabled:e.boolean(),priority:e.number().int(),projectId:e.number().int().nullable(),source:HookRuleSourceSchema,filter:HookRuleFilterSchema.default({}),handler:HandlerConfigSchema,timeoutMs:e.number().int().positive().default(5e3),record:e.boolean().default(!0),origin:HookRuleOriginSchema.default("user"),pluginId:e.string().min(1).nullable().default(null)}),WEAVE_PLUGIN_MANIFEST="weave-plugin.json",WEAVE_INJECTION_MARKER="[weave] ",PluginRuleEntrySchema=HookRuleSchema.omit({id:!0,projectId:!0}).extend({enabled:e.boolean().optional(),priority:e.number().int().optional()}),WeavePluginManifestSchema=e.object({manifestVersion:e.literal(1),id:e.string().regex(/^[a-z][a-z0-9-]{0,63}$/),name:e.string().min(1),version:e.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/),description:e.string().optional(),author:e.string().optional(),engines:e.object({weave:e.string().optional()}).optional(),rules:e.array(e.string().min(1)).default([]),handlers:e.array(e.object({type:e.string().min(1),entry:e.string().min(1)})).default([]),requires:e.object({events:e.array(e.string().min(1)).optional()}).optional(),templates:e.object({skills:e.array(e.string().min(1)).optional(),commands:e.array(e.string().min(1)).optional(),agents:e.array(e.string().min(1)).optional()}).optional(),mcpServers:e.record(e.string(),e.unknown()).optional(),subscribe:e.object({events:e.array(e.string().min(1)),entry:e.string().min(1)}).optional(),statusline:e.object({entry:e.string().min(1)}).optional(),config:e.record(e.string(),e.unknown()).optional()}),HookDispatchStatusSchema=e.enum(["pending","injected","running","succeeded","failed","timeout"]),HookDispatchModeSchema=e.enum(["auto","manual"]),SkillsConfigSchema=e.object({core:e.boolean()}),CommandsConfigSchema=e.object({core:e.boolean()}),AgentsConfigSchema=e.object({core:e.boolean()}),MCPConfigSchema=e.object({weave:e.boolean(),autoStart:e.boolean().default(!1)}),RuntimeConfigSchema=e.object({initVersion:e.string(),initTimestamp:e.string(),preset:PresetSchema,harnesses:e.array(a).optional(),components:InitComponentsSchema,hooks:HooksConfigSchema.partial().optional(),mcp:MCPConfigSchema.partial().optional()}),PlatformInfoSchema=e.object({os:e.enum(["windows","darwin","linux"]),arch:e.enum(["x64","arm64"]),nodeVersion:e.string(),shell:e.enum(["powershell","cmd","bash","zsh","sh"]),homeDir:e.string(),configDir:e.string()}),InitOptionsSchema=e.object({targetDir:e.string().default(process.cwd()),force:e.boolean().default(!1),interactive:e.boolean().default(!0),preset:PresetSchema.default("default"),harnesses:e.array(a).optional(),components:InitComponentsSchema.partial().default({}),hooks:HooksConfigSchema.partial().default({}),skills:SkillsConfigSchema.partial().default({}),commands:CommandsConfigSchema.partial().default({}),agents:AgentsConfigSchema.partial().default({}),mcp:MCPConfigSchema.partial().default({})}),InitResultSchema=e.object({success:e.boolean(),platform:PlatformInfoSchema,created:e.object({directories:e.array(e.string()),files:e.array(e.string())}),skipped:e.array(e.string()),merged:e.array(e.string()),updated:e.array(e.string()),errors:e.array(e.string()),removed:e.array(e.string()),summary:e.object({skillsCount:e.number(),commandsCount:e.number(),agentsCount:e.number(),hooksEnabled:e.number()})}),MINIMAL_COMPONENTS={settings:!0,skills:!0,commands:!1,agents:!1,helpers:!1,mcp:!1,claudeMd:!0,agentsMd:!0},DEFAULT_COMPONENTS={settings:!0,skills:!0,commands:!1,agents:!1,helpers:!0,mcp:!0,claudeMd:!0,agentsMd:!0},FULL_COMPONENTS={settings:!0,skills:!0,commands:!0,agents:!0,helpers:!0,mcp:!0,claudeMd:!0,agentsMd:!0},DEFAULT_HOOKS={preToolUse:!0,postToolUse:!0,userPromptSubmit:!0,sessionStart:!0,stop:!0,stopFailure:!0,subagentStop:!0,subagentStart:!0,notification:!0,postToolUseFailure:!0,permissionRequest:!0,permissionDenied:!0,preCompact:!0,sessionEnd:!0,preModelSwitch:!0,timeout:5e3,continueOnError:!0},DEFAULT_SKILLS={core:!0},DEFAULT_COMMANDS={core:!0},DEFAULT_AGENTS={core:!0},DEFAULT_MCP={weave:!1,autoStart:!1};export function resolveComponents(t,o){const n=t==="minimal"?MINIMAL_COMPONENTS:t==="full"?FULL_COMPONENTS:DEFAULT_COMPONENTS;return o?{...n,...o}:{...n}}

package/node_modules/@weavecode/core/dist/utils/fs.d.ts

@@ -0,0 +1,3 @@
+export declare function ensureDir(dir: string): Promise<void>;
+export declare function writeFileIfAbsent(filePath: string, content: string, force: boolean): Promise<boolean>;
+export declare function fileExists(filePath: string): Promise<boolean>;

package/node_modules/@weavecode/core/dist/utils/fs.js

@@ -0,0 +1 @@
+import{mkdir as i,readFile as a,writeFile as n,stat as u}from"node:fs/promises";import c from"node:path";export async function ensureDir(t){await i(t,{recursive:!0})}export async function writeFileIfAbsent(t,r,e){try{if(await a(t,"utf-8"),!e)return!1}catch{}return await ensureDir(c.dirname(t)),await n(t,r,"utf-8"),!0}export async function fileExists(t){try{return await u(t),!0}catch{return!1}}

package/node_modules/@weavecode/core/dist/utils/logger.d.ts

@@ -0,0 +1,8 @@
+export declare const logger: {
+    info(msg: string): void;
+    success(msg: string): void;
+    warn(msg: string): void;
+    error(msg: string): void;
+    dim(msg: string): void;
+};
+export declare function formatTable(rows: [string, string][]): string;

package/node_modules/@weavecode/core/dist/utils/logger.js

@@ -0,0 +1,2 @@
+const l={reset:"\x1B[0m",bold:"\x1B[1m",dim:"\x1B[2m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",cyan:"\x1B[36m"};function e(o,n){return process.env.NO_COLOR?o:`${l[n]}${o}${l.reset}`}export const logger={info(o){console.log(e(o,"cyan"))},success(o){console.log(e(o,"green"))},warn(o){console.log(e(o,"yellow"))},error(o){console.error(e(o,"red"))},dim(o){console.log(e(o,"dim"))}};export function formatTable(o){const n=Math.max(...o.map(([r])=>r.length));return o.map(([r,c])=>`  ${r.padEnd(n+2)}${c}`).join(`
+`)}

package/node_modules/@weavecode/core/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@weavecode/core",
+  "version": "0.1.1",
+  "description": "Core types, schemas, and utilities for weave",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "development": "./src/index.ts",
+      "import": "./dist/index.js"
+    },
+    "./harness": {
+      "types": "./dist/harness.d.ts",
+      "development": "./src/harness.ts",
+      "import": "./dist/harness.js"
+    },
+    "./tool": {
+      "types": "./dist/tool.d.ts",
+      "development": "./src/tool.ts",
+      "import": "./dist/tool.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "sideEffects": false,
+  "author": "zijing66",
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=22.5.0"
+  },
+  "dependencies": {
+    "zod": "^3.23.0"
+  }
+}

package/node_modules/@weavecode/harness/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,63 @@
+# Third-Party Notices
+
+本仓库的 `weave-core`、`weave-cli`、`weave-templates` 的设计理念与部分实现
+参考了以下开源项目。依据各自许可证，在此声明归属。
+
+## JetBrains Mono + Nerd Fonts（随包发布的字体资源）
+
+`@weavecode/server` 的 dashboard bundle（`web/dist/fonts/*.woff`）包含字体：
+
+- **JetBrains Mono**（Version 2.304）— Copyright 2020 The JetBrains Mono
+  Project Authors（<https://github.com/JetBrains/JetBrainsMono>），
+  **SIL Open Font License 1.1**。修改：经 Nerd Fonts 3.4.0 打补丁 + 子集化，
+  文件名改为 `WeaveNerdMono`（原 family 名 `JetBrainsMono NFM`）。JetBrains Mono
+  未声明 Reserved Font Name，改名后仍受 OFL 1.1 约束、随包携带许可全文。
+- **Nerd Fonts 3.4.0**（<https://github.com/ryanoasis/nerd-fonts>）补丁带入的
+  图标字形来自多个符号集（Font Awesome Free、Material Design Icons、
+  Octicons、Codicons、Weather Icons、Devicons 等），各符号集保留原许可
+  （MIT / Apache 2.0 / SIL OFL / CC BY 4.0），权威清单见上游仓库。
+
+许可全文与完整署名随字体一同发布：`web/dist/fonts/OFL.txt`、
+`web/dist/fonts/ATTRIBUTION.md`。
+
+## ruflo (claude-flow)
+
+- **项目**：ruflo — Claude Code 编排框架（claude-flow v3.34.0）
+- **来源**：<https://github.com/ruvnet/claude-flow>
+- **许可证**：MIT License
+- **版权**：Copyright (c) 2024-2026 ruvnet
+- **借鉴范围**：
+  - CLI 参数解析器设计（`parser.ts`）
+  - 初始化执行流程（`init/executor.ts`）
+  - settings / .mcp / CLAUDE.md / helpers 生成器结构
+  - Zod 配置 schema 模式（`types.ts`）
+  - 模板注册机制（`templates/index.ts`）
+
+weave 是上述设计的 TypeScript 重新实现，未逐字复制 ruflo 源码；
+如个别函数或结构与 ruflo 一致，依据 MIT 许可保留原作者版权声明。
+
+### MIT License
+
+```
+MIT License
+
+Copyright (c) 2024-2026 ruvnet
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```

package/node_modules/@weavecode/harness/dist/claude/assets.d.ts

@@ -0,0 +1,7 @@
+import type { AssetSurface } from '../driver.js';
+/**
+ * Claude Code 资产表面（批 4a 迁入）：文件资产目标目录、skills 项目/全局根、
+ * 用户级配置路径、路径归属与 watch 观测集——原 `install/file-assets.ts`、
+ * `installer.ts`、`global-config.ts`、`watch/` 散落的 Claude 侧知识。
+ */
+export declare const CLAUDE_ASSETS: AssetSurface;

package/node_modules/@weavecode/harness/dist/claude/assets.js

@@ -0,0 +1 @@
+import e from"node:path";import{FILE_ASSET_SPECS as t}from"../shared/file-specs.js";export const CLAUDE_ASSETS={harness:"claude",targetDir(s,c,i,o){const r=t[s].dirs.claude;if(c==="user"){if(!r?.user)throw new Error(`"${s}" is project-scoped only (no user-level directory)`);return e.join(o,...r.user.split("/"))}if(!r?.project)throw new Error(`"${s}" has no Claude project surface`);return e.join(i,...r.project.split("/"))},projectSkillsDir:()=>".claude/skills",globalSkillsRoots:s=>[e.join(s,...".claude/skills".split("/"))],userConfigFile:s=>e.join(s,".claude","settings.json"),mcpScopes:()=>["project","user"],mcpDest:(s,c)=>s==="project"?".mcp.json":e.join(c,".claude.json"),pluginCacheDir:s=>e.join(s,".claude","plugins","cache"),classify(s){return s===".claude"||s.startsWith(".claude/")||s===".mcp.json"?!0:s.slice(s.lastIndexOf("/")+1)==="CLAUDE.md"},ignore(s){return s===".claude"||s.startsWith(".claude/")?s===".claude/projects"||s.startsWith(".claude/projects/")||s===".claude/cache"||s.startsWith(".claude/cache/"):s!==".mcp.json"&&s!=="CLAUDE.md"}};

package/node_modules/@weavecode/harness/dist/claude/capture.d.ts

@@ -0,0 +1,66 @@
+import type { CaptureDeps, CaptureScriptHealth, CaptureState, CaptureSurface } from '../driver.js';
+/**
+ * weave 采集集成（hook-handler 脚本 + settings hooks 组）的 claude 实现——
+ * tool-object-model §2.6 基石：user 档安装/启用面（跨项目采集，不依赖逐项目
+ * init）。项目档的同一套组形/清扫判据也出自这里（cli settings-gen 委托），
+ * 单源不留第二份。
+ */
+/**
+ * hook-handler 脚本（跨端契约正文见脚本头注释）。version 只作脚本内的 weave
+ * 版本标记（`@version weave@<version>`，weave 特性文件的覆写判据），由调用方
+ * 传入——harness 包不依赖 server（版本常量在那边）。
+ */
+export declare function generateHookHandler(version: string): string;
+/**
+ * weave 采集组的路径段判据：weave 的 hook 命令永远指向某个 `.claude/helpers/
+ * hook-handler.cjs`（项目档与 user 档同形），命令含该段即 weave 组；用户
+ * 自写脚本仅撞文件名（如 my-hook-handler.cjs）不匹配。
+ */
+export declare const HOOK_HANDLER_MARKER = ".claude/helpers/hook-handler.cjs";
+/** A hooks group is weave's when any of its commands invokes the hook-handler helper. */
+export declare function groupIsWeave(group: unknown): boolean;
+/**
+ * 单事件的 weave 采集 hook 组（Claude Code 三层形：`hooks.<Event> = [{matcher:
+ * '*', hooks: [{type, command}]}]`）。采集类（不可注入）事件标 `async: true`：
+ * 宿主 fire-and-forget，不必等 hook 进程往返；口径与 INJECTABLE_EVENTS.claude
+ * 同源（能注入的 = PostToolUse/UserPromptSubmit/SessionStart/Stop/SubagentStop，
+ * 故 PreToolUse / Notification 异步）。
+ */
+export declare function captureHookGroup(event: string, helpersDir: string): Array<Record<string, unknown>>;
+/**
+ * hooks 子图清掉 weave 采集组：用户组不动；事件清空删键；非数组形状属用户，
+ * 原样保留。返回清扫后的新子图；hooks 清空时 undefined（调用方删键）。
+ */
+export declare function sweepWeaveHookEvents(hooks: unknown): Record<string, unknown> | undefined;
+/** settings 里是否已有 weave 采集组（user 档 installed 判据）。 */
+export declare function captureGroupsPresent(settings: unknown): boolean;
+export declare function readUserCapture(deps?: CaptureDeps): Promise<CaptureState>;
+/**
+ * 生效采集脚本的健康（诊断面只读）：与运行时同判据取「哪一支在 firing」——
+ * user settings 里有采集组 = user 档脚本；否则项目档（给了 `projectPath` 才看得到）；
+ * 两支都指不到 = none。`source` 是**生效分支**（不是「文件在不在」，后者是 `present`）。
+ * 判的是正文「会不会上报」而非「能不能跑」：脚本是旧版 weave 生成的（升级 npm
+ * 包不会重写它）就不含凭据上报，dashboard 于是永远收不到 inbox 目标。
+ */
+export declare function readScriptHealth(deps?: CaptureDeps & {
+    projectPath?: string;
+}): Promise<CaptureScriptHealth>;
+/**
+ * user 档采集安装（幂等）：user 级 hook-handler 脚本 + `~/.claude/settings.json`
+ * 的 weave 采集组（marker 清扫后并入，用户其余键永不动）。脚本锚点在 cwd/token，
+ * 与落点无关——同一脚本项目档/user 档通用。
+ */
+export declare function installUserCapture(deps: CaptureDeps & {
+    version: string;
+}): Promise<void>;
+/**
+ * user 档采集停用（幂等）：清扫 user settings 的采集组 + 删 user 级脚本（带
+ * weave 标记才删，用户文件不动）。
+ */
+export declare function uninstallUserCapture(deps?: CaptureDeps): Promise<void>;
+/**
+ * 项目档去重：user 档接管时清扫项目 `.claude/settings.json` 的 weave 采集组
+ * （同一事件 user+project 双注册 = 双采集）。缺文件/坏文件 = 已达目的。
+ */
+export declare function stripProjectCapture(projectPath: string): Promise<void>;
+export declare const CLAUDE_CAPTURE: CaptureSurface;

package/node_modules/@weavecode/harness/dist/claude/capture.js

@@ -0,0 +1,380 @@
+import{homedir as u}from"node:os";import{access as w,mkdir as f,readFile as h,unlink as j,writeFile as v}from"node:fs/promises";import i from"node:path";import{HARNESS_DIRS as d,HARNESS_EVENTS as b,INJECTABLE_EVENTS as _,TERMINAL_LOCATOR_ENV_KEYS as T}from"@weavecode/core";import{CLAUDE_PROMPT_INBOX as m}from"./prompt-inbox.js";export function generateHookHandler(e){return`#!/usr/bin/env node
+/**
+ * weave hook-handler \u2014 collects Claude Code hook events into the global weave
+ * data directory and renders locally-mirrored injections. No network, no
+ * daemon dependency: daemon down = collection + static injection still work.
+ *
+ *   <configDir>/weave/hooks/inbox/<shard>.jsonl   events (append-only; daemon
+ *       worker claims, ingests, then deletes)
+ *   <configDir>/weave/hooks/mirror/<shard>.json   injection plan written by
+ *       the daemon (static inject rules + pending session titles)
+ *   <configDir>/weave/hooks/outbox/<shard>.jsonl  deferred injections (plugin
+ *       output from the previous event; consumed by this script)
+ *
+ * shard = sha256(project token).slice(0,16). Dependency-free and designed to
+ * NEVER block Claude Code: every code path is local file I/O and exits 0.
+ * Directory names / shard algorithm / document shape are a cross-end contract
+ * with the daemon side (weave-server src/hooks/mirror.ts + inbox-worker.ts).
+ * Generated by weave \u2014 do not edit manually.
+ * @version weave@${e}
+ */
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const crypto = require('crypto');
+
+const HOOK_GUARD_MS = 2000;
+// Events that can carry additionalContext back via hook output (Claude Code
+// contract; mirrors INJECTABLE_EVENTS.claude server-side).
+const INJECTABLE_EVENTS = ['PostToolUse', 'UserPromptSubmit', 'SessionStart', 'Stop', 'SubagentStop'];
+// Claude Code applies hookSpecificOutput.sessionTitle ONLY on these events
+// (mirrors TITLE_EFFECTIVE_EVENTS.claude) \u2014 tool events record hook_success
+// but drop the field (verified against 2.1.296).
+const TITLE_EVENTS = ['SessionStart', 'UserPromptSubmit'];
+// Terminal pane locator env (mirrors TERMINAL_LOCATOR_ENV_KEYS in @weavecode/core):
+// captured in the pane's own child process and reported on the inbox line's side
+// channel, so the daemon can address THIS session's pane exactly.
+const TERMINAL_ENV_KEYS = ${JSON.stringify(T)};
+const INBOX_MAX_BYTES = 4 * 1024 * 1024;
+const INBOX_MAX_LINES = 1000;
+const OUTBOX_MAX_LINES = 200;
+const DEDUPE_WINDOW_MS = 60000;
+const DISPATCH_MARKER = '<!--weave-dispatch-->';
+const MIRROR_VERSION = 1;
+
+// Ultimate safety net: never let this process outlive the hook window.
+const GUARD = setTimeout(function () { process.exit(0); }, HOOK_GUARD_MS);
+GUARD.unref();
+
+function configDir() {
+  if (process.platform === 'win32') {
+    return process.env.APPDATA || path.join(os.homedir(), 'AppData', 'Roaming');
+  }
+  if (process.platform === 'darwin') {
+    return path.join(os.homedir(), 'Library', 'Application Support');
+  }
+  return process.env.XDG_CONFIG_HOME || path.join(os.homedir(), '.config');
+}
+
+function readProjectToken(projectDir) {
+  try {
+    var tok = fs.readFileSync(path.join(projectDir, '.weave', 'token'), 'utf8').trim();
+    return tok || null;
+  } catch {
+    return null;
+  }
+}
+
+function shardId(token) {
+  return crypto.createHash('sha256').update(token).digest('hex').slice(0, 16);
+}
+
+function hooksDir() {
+  return path.join(configDir(), 'weave', 'hooks');
+}
+
+// \u4F1A\u8BDD\u81EA\u5DF1\u7684 inbox \u76F4\u6295\u51ED\u636E\uFF08Claude Code \u5728\u6BCF\u4E2A\u542F\u7528\u8DE8\u4F1A\u8BDD\u6D88\u606F\u7684\u4F1A\u8BDD\u91CC\u5BFC\u51FA\u7ED9
+// \u8BE5\u4F1A\u8BDD\u7684 hooks \u4E0E Bash\uFF09\uFF1Adaemon \u4FA7\u53EA\u653E\u5185\u5B58\u3001\u4E0D\u843D\u5E93\u4E0D\u8FDB UI \u2014\u2014 \u4E0A\u62A5\u8D70 inbox
+// \u884C\u7684\u65C1\u8DEF\u5B57\u6BB5\uFF08\u4E0D\u8FDB report/payload\uFF09\u3002
+function messagingEnv() {
+  var sock = process.env.${m.socketEnv};
+  if (!sock) return null;
+  return { socket: sock, token: process.env.${m.tokenEnv} || null };
+}
+
+// \u7EC8\u7AEF\u628A\u300C\u672C pane\u300D\u5BFC\u51FA\u7684\u73AF\u5883\u53D8\u91CF\uFF08wezterm \u7B49\uFF09\u3002\u672C\u8FDB\u7A0B\u751F\u5728\u4F1A\u8BDD\u81EA\u5DF1\u7684 pane \u91CC\uFF0C
+// \u7EE7\u627F\u5F97\u5230\uFF1Bdaemon \u4FA7\u636E\u6B64\u7CBE\u786E\u5B9A\u4F4D\u4F1A\u8BDD\u7684 pane\uFF08\u5C42\u2461 \u6CE8\u5165 / \u4F5C\u7B54\u7684\u76EE\u6807\uFF09\uFF0C
+// \u6807\u9898+cwd \u53EA\u662F\u56DE\u843D\u3002\u6CA1\u6709\u4E00\u4E2A\u952E\u53EF\u89C1 = \u8BE5\u7EC8\u7AEF\u65E0\u5B9A\u4F4D\u80FD\u529B \u2192 \u4E0A\u62A5 null\uFF08\u4E0D\u731C\uFF09\u3002
+function terminalEnv() {
+  var out = {};
+  var any = false;
+  for (var i = 0; i < TERMINAL_ENV_KEYS.length; i++) {
+    var v = process.env[TERMINAL_ENV_KEYS[i]];
+    if (v) { out[TERMINAL_ENV_KEYS[i]] = v; any = true; }
+  }
+  return any ? out : null;
+}
+
+function readStdin() {
+  return new Promise(function (resolve) {
+    var data = '';
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', function (c) { data += c; });
+    process.stdin.on('end', function () { resolve(data); });
+    // Fallback if stdin never closes (e.g. manual invocation).
+    setTimeout(function () { resolve(data); }, 500).unref();
+  });
+}
+
+// ---- inbox (collection) ----
+
+// Collection is best-effort: losing a single event must never break the hook.
+function appendInbox(dir, token, report) {
+  try {
+    fs.mkdirSync(dir, { recursive: true });
+    var file = path.join(dir, shardId(token) + '.jsonl');
+    try {
+      if (fs.statSync(file).size > INBOX_MAX_BYTES) trimFile(file, INBOX_MAX_LINES);
+    } catch {}
+    fs.appendFileSync(file, JSON.stringify({ v: 1, token: token, report: report, messaging: messagingEnv(), terminal: terminalEnv() }) + '\\n');
+  } catch {}
+}
+
+// Backlog is bounded: past the cap keep only the newest lines (drop-oldest).
+function trimFile(file, maxLines) {
+  try {
+    var lines = fs.readFileSync(file, 'utf8').split('\\n');
+    var kept = [];
+    for (var i = lines.length - 1; i >= 0 && kept.length < maxLines; i--) {
+      if (lines[i].trim()) kept.unshift(lines[i]);
+    }
+    fs.writeFileSync(file, kept.join('\\n') + (kept.length ? '\\n' : ''));
+  } catch {}
+}
+
+// ---- mirror (daemon-written injection plan; missing/corrupt = no injection) ----
+
+function readMirror(dir, token) {
+  try {
+    var doc = JSON.parse(
+      fs.readFileSync(path.join(dir, 'mirror', shardId(token) + '.json'), 'utf8')
+    );
+    return doc && doc.version === MIRROR_VERSION && Array.isArray(doc.rules) ? doc : null;
+  } catch {
+    return null;
+  }
+}
+
+// ---- local rule matching (mirrors weave-server src/hooks/match.ts semantics) ----
+
+const globCache = new Map();
+
+function normalizePosix(p) {
+  return p.replace(/\\\\/g, '/');
+}
+
+function escapeRegex(c) {
+  return /[a-zA-Z0-9]/.test(c) ? c : '\\\\' + c;
+}
+
+function globToRegex(glob) {
+  var cached = globCache.get(glob);
+  if (cached) return cached;
+  var re = '';
+  for (var i = 0; i < glob.length; i++) {
+    var c = glob[i];
+    if (c === '*') {
+      if (glob[i + 1] === '*') {
+        i++;
+        if (glob[i + 1] === '/') {
+          i++;
+          re += '(?:.*/)?';
+        } else {
+          re += '.*';
+        }
+      } else {
+        re += '[^/]*';
+      }
+    } else if (c === '?') {
+      re += '[^/]';
+    } else {
+      re += escapeRegex(c);
+    }
+  }
+  var compiled = new RegExp('^' + re + '$', 'i');
+  globCache.set(glob, compiled);
+  return compiled;
+}
+
+function matchAnyGlob(filePath, globs) {
+  var p = normalizePosix(filePath);
+  for (var i = 0; i < globs.length; i++) {
+    if (globToRegex(globs[i]).test(p)) return true;
+  }
+  return false;
+}
+
+function extractFilePath(toolInput) {
+  if (typeof toolInput !== 'object' || toolInput === null) return null;
+  var keys = ['file_path', 'notebook_path', 'filePath'];
+  for (var i = 0; i < keys.length; i++) {
+    var v = toolInput[keys[i]];
+    if (typeof v === 'string' && v.length > 0) return v;
+  }
+  return null;
+}
+
+function renderTemplate(template, vars) {
+  return template.replace(/\\{(\\w+)\\}/g, function (m, k) {
+    var v = vars[k];
+    return v === undefined || v === null ? m : String(v);
+  });
+}
+
+// ---- 60s dedupe (same window as the server-side dispatcher): prevents an
+// injected instruction from re-triggering itself through subsequent events ----
+
+function dedupeStatePath(projectDir) {
+  return path.join(projectDir, '.weave', 'dispatch-state.json');
+}
+
+function loadDedupe(projectDir, now) {
+  var kept = {};
+  try {
+    var state = JSON.parse(fs.readFileSync(dedupeStatePath(projectDir), 'utf8')) || {};
+    for (var k in state) {
+      if (typeof state[k] === 'number' && now - state[k] < DEDUPE_WINDOW_MS) kept[k] = state[k];
+    }
+  } catch {}
+  return kept;
+}
+
+function saveDedupe(projectDir, state) {
+  try {
+    var dir = path.join(projectDir, '.weave');
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(dedupeStatePath(projectDir), JSON.stringify(state));
+  } catch {}
+}
+
+// ---- outbox (deferred injections for this session; daemon-written) ----
+
+function consumeOutbox(dir, token, sessionId) {
+  var parts = [];
+  try {
+    var file = path.join(dir, 'outbox', shardId(token) + '.jsonl');
+    var lines = fs.readFileSync(file, 'utf8').split('\\n');
+    var kept = [];
+    for (var i = 0; i < lines.length; i++) {
+      var line = lines[i].trim();
+      if (!line) continue;
+      try {
+        var entry = JSON.parse(line);
+        if (sessionId && entry.sessionId === sessionId && typeof entry.text === 'string' && entry.text) {
+          parts.push(entry.text);
+        } else {
+          kept.push(line);
+        }
+      } catch {}
+    }
+    if (parts.length > 0) {
+      // Consumed lines are removed here; the daemon caps the file on append.
+      var remaining = kept.slice(-OUTBOX_MAX_LINES);
+      var tmp = file + '.tmp';
+      fs.writeFileSync(tmp, remaining.length ? remaining.join('\\n') + '\\n' : '');
+      fs.renameSync(tmp, file);
+    }
+  } catch {}
+  return parts;
+}
+
+// ---- main ----
+
+async function main() {
+  var raw = await readStdin();
+  var parsed = {};
+  try { parsed = JSON.parse(raw); } catch {}
+
+  var projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
+  var token = readProjectToken(projectDir);
+  // No token = project not registered \u2014 nothing to attribute the event to.
+  if (!token) { process.exit(0); }
+
+  var eventType = parsed.hook_event_name || parsed.event || 'unknown';
+  var sessionId = parsed.session_id || parsed.sessionId || null;
+
+  // Stop/SubagentStop \u7EED\u8DD1\u5B88\u536B\uFF1A\u5BBF\u4E3B\u5728\u300C\u4E0A\u4E00\u67AA\u5DF2\u7ECF\u8BA9 agent \u7EE7\u7EED\u4E86\u300D\u4E4B\u540E\uFF0C\u4F1A\u5E26\u7740
+  // stop_hook_active=true \u518D\u95EE\u4E00\u6B21\uFF1B\u6B64\u65F6\u5FC5\u987B\u95ED\u5634\u8FD4\u56DE\u6210\u529F\uFF0C\u5426\u5219\u4F1A\u628A"\u505C\u6B62"\u4E00\u76F4\u5224\u6210
+  // \u88AB\u963B\u65AD\uFF0Cagent \u7A7A\u8F6C\uFF08\u5BBF\u4E3B\u8FDE\u7EED 9 \u6B21\u540E\u5F3A\u5236\u7ED3\u675F\u5E76\u544A\u8B66\uFF09\u3002Claude Code \u7684\u663E\u5F0F\u8981\u6C42\uFF1A
+  // "For Stop/SubagentStop hooks, check stop_hook_active in the input and return
+  // success while it's true." \u5224\u65AD\u63D0\u524D\uFF08\u56DE\u6267\u4E0E\u4E0B\u53D1\u5171\u7528\u540C\u4E00\u6761\u4EF6\uFF09\uFF0C\u9000\u51FA\u4ECD\u5728
+  // \u91C7\u96C6\u4E4B\u540E\u2014\u2014\u4E8B\u4EF6\u7167\u6536\uFF0C\u53EA\u662F\u4E0D\u518D\u6CE8\u5165\u3002
+  var silenced =
+    (eventType === 'Stop' || eventType === 'SubagentStop') &&
+    parsed.stop_hook_active === true;
+  var injectable = INJECTABLE_EVENTS.indexOf(eventType) !== -1;
+
+  // \u6539\u540D\u4EA4\u4ED8\u56DE\u6267\uFF1A\u672C\u4E8B\u4EF6\u786E\u4F1A\u628A pendingTitle \u968F\u54CD\u5E94\u4E0B\u53D1\u2014\u2014\u4EC5\u6807\u9898\u751F\u6548\u4E8B\u4EF6
+  // \uFF08SessionStart/UserPromptSubmit\uFF0CClaude Code \u53EA\u5728\u6B64\u5E94\u7528 sessionTitle\uFF0C
+  // \u5DE5\u5177\u4E8B\u4EF6\u4E0B\u53D1\u5373\u5F03\uFF09\uFF0C\u4E14 injectable \u672A\u88AB\u9759\u9ED8\u3001\u8BFB\u5F97\u5230 mirror\u3002daemon \u62FF\u56DE\u6267
+  // \u843D\u5B9A pending_title\u2014\u2014\u300C\u6539\u540D\u5F85\u751F\u6548\u300D\u5FBD\u6807\u5728\u751F\u6548\u5F53\u62CD\u6E05\u9664\u3002\u975E\u6807\u9898\u4E8B\u4EF6\u7167\u5E38
+  // \u4E0B\u53D1 additionalContext\uFF08\u6CE8\u5165\u4E0D\u53D7\u5F71\u54CD\uFF09\u3002
+  var titleEvent = TITLE_EVENTS.indexOf(eventType) !== -1;
+  var deliveredTitle = null;
+  var mirror = injectable && !silenced ? readMirror(hooksDir(), token) : null;
+  if (titleEvent && mirror && sessionId && mirror.pendingTitles) {
+    var pending = mirror.pendingTitles[sessionId];
+    if (typeof pending === 'string' && pending) deliveredTitle = pending;
+  }
+
+  // 1. Collection first: a kill mid-injection still leaves the event on disk.
+  appendInbox(path.join(hooksDir(), 'inbox'), token, {
+    source: 'claude',
+    eventType: eventType,
+    sessionId: sessionId,
+    cwd: parsed.cwd || projectDir,
+    payload: raw,
+    deliveredTitle: deliveredTitle
+  });
+
+  if (silenced) { process.exit(0); }
+  if (!injectable) { process.exit(0); }
+
+  var parts = [];
+  var toolName = parsed.tool_name || parsed.toolName || null;
+  var filePath = extractFilePath(parsed.tool_input || parsed.toolInput || null);
+
+  // 2. Locally mirrored inject rules (events \u2192 tool \u2192 globs; array order =
+  // priority order, already sorted by the daemon when it wrote the mirror).
+  if (mirror && mirror.rules.length > 0) {
+    var now = Date.now();
+    var dedupe = loadDedupe(projectDir, now);
+    var dirty = false;
+    for (var i = 0; i < mirror.rules.length; i++) {
+      var rule = mirror.rules[i];
+      if (!rule || !Array.isArray(rule.events) || rule.events.indexOf(eventType) === -1) continue;
+      if (rule.tools && (!toolName || rule.tools.indexOf(toolName) === -1)) continue;
+      if (rule.globs && rule.globs.length > 0) {
+        if (!filePath || !matchAnyGlob(filePath, rule.globs)) continue;
+      }
+      var key = rule.id + ':' + (sessionId || '');
+      if (dedupe[key] !== undefined) continue;
+      dedupe[key] = now;
+      dirty = true;
+      parts.push(
+        renderTemplate(String(rule.template || ''), {
+          event: eventType,
+          tool: toolName,
+          file: filePath ? normalizePosix(filePath) : null,
+          cwd: normalizePosix(parsed.cwd || projectDir),
+          session: sessionId,
+          project: mirror.project || null,
+          rule: rule.name
+        }) + '\\n' + DISPATCH_MARKER
+      );
+    }
+    if (dirty) saveDedupe(projectDir, dedupe);
+  }
+
+  // 3. Deferred injections produced after this session's previous event.
+  parts = parts.concat(consumeOutbox(hooksDir(), token, sessionId));
+
+  // 4. Pending session rename (dashboard rename lands here via the mirror).
+  var title = deliveredTitle;
+
+  var specific = {};
+  if (parts.length > 0) specific.additionalContext = parts.join('\\n\\n');
+  if (typeof title === 'string' && title) specific.sessionTitle = title;
+  if (Object.keys(specific).length > 0) {
+    specific.hookEventName = eventType;
+    process.stdout.write(JSON.stringify({ hookSpecificOutput: specific }));
+  }
+  process.exit(0);
+}
+
+main().catch(function () { process.exit(0); });
+`}export const HOOK_HANDLER_MARKER=".claude/helpers/hook-handler.cjs";function l(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function k(e){return e.replace(/\\/g,"/")}export function groupIsWeave(e){if(!l(e))return!1;const t=e.hooks;return Array.isArray(t)?t.some(r=>l(r)&&typeof r.command=="string"&&k(r.command).includes(HOOK_HANDLER_MARKER)):!1}export function captureHookGroup(e,t){const r=`node "${k(t)}/hook-handler.cjs"`,n=!_.claude.includes(e);return[{matcher:"*",hooks:[{type:"command",command:r,...n?{async:!0}:{}}]}]}export function sweepWeaveHookEvents(e){if(!l(e))return;const t={};for(const[r,n]of Object.entries(e)){if(!Array.isArray(n)){t[r]=n;continue}const s=n.filter(a=>!groupIsWeave(a));s.length>0&&(t[r]=s)}return Object.keys(t).length>0?t:void 0}export function captureGroupsPresent(e){if(!l(e))return!1;const t=e.hooks;return l(t)?Object.values(t).some(r=>Array.isArray(r)&&r.some(groupIsWeave)):!1}function y(e){return i.join(e,d.claude.userDir,"settings.json")}function p(e){return i.join(e,d.claude.userDir,"helpers")}const E="@version weave@";async function N(e){try{return await w(e),!0}catch{return!1}}async function g(e){let t;try{t=await h(e,"utf-8")}catch{return{}}let r;try{r=JSON.parse(t)}catch{throw new Error(`user settings is not parseable JSON: ${e}`)}if(!l(r))throw new Error(`user settings is not a JSON object: ${e}`);return r}async function S(e){let t;try{t=await g(e)}catch{return}const r=sweepWeaveHookEvents(t.hooks);r===void 0?delete t.hooks:t.hooks=r,await f(i.dirname(e),{recursive:!0}),await v(e,JSON.stringify(t,null,2)+`
+`,"utf-8")}export async function readUserCapture(e={}){const t=e.home??u(),r=await g(y(t));return{installed:captureGroupsPresent(r),helperPresent:await N(i.join(p(t),"hook-handler.cjs"))}}export async function readScriptHealth(e={}){const t=e.home??u(),r=i.join(p(t),"hook-handler.cjs"),n=e.projectPath?i.join(e.projectPath,d.claude.projectDir,"helpers","hook-handler.cjs"):null,s=(await readUserCapture({home:t})).installed,a=s?"user":n?"project":"none",c=s?r:n??r;let o=null;try{o=await h(c,"utf-8")}catch{o=null}return{source:a,present:o!==null,weaveOwned:o!==null&&o.includes(E),generatedVersion:o?.match(/@version weave@(\S+)/)?.[1]??null,reportsInbox:o!==null&&o.includes(m.socketEnv),reportsPaneEnv:o!==null&&o.includes("terminalEnv()")}}export async function installUserCapture(e){const t=e.home??u(),r=p(t);await f(r,{recursive:!0}),await v(i.join(r,"hook-handler.cjs"),generateHookHandler(e.version),"utf-8");const n=y(t),s=await g(n),a=sweepWeaveHookEvents(s.hooks)??{};for(const c of b.claude){const o=a[c];a[c]=Array.isArray(o)?[...o,...captureHookGroup(c,r)]:captureHookGroup(c,r)}s.hooks=a,await f(i.dirname(n),{recursive:!0}),await v(n,JSON.stringify(s,null,2)+`
+`,"utf-8")}export async function uninstallUserCapture(e={}){const t=e.home??u();await S(y(t));const r=i.join(p(t),"hook-handler.cjs");try{(await h(r,"utf-8")).includes(E)&&await j(r)}catch{}}export async function stripProjectCapture(e){await S(i.join(e,d.claude.projectDir,"settings.json"))}export const CLAUDE_CAPTURE={harness:"claude",readUserCapture:e=>readUserCapture(e),installUserCapture:e=>installUserCapture(e),uninstallUserCapture:e=>uninstallUserCapture(e),stripProjectCapture,scriptHealth:e=>readScriptHealth(e)};

package/node_modules/@weavecode/harness/dist/claude/detect.d.ts

@@ -0,0 +1,3 @@
+import type { Detector } from '../driver.js';
+/** Claude Detector（批 5 实现，markers：`.claude` / `CLAUDE.md`）。 */
+export declare const CLAUDE_DETECTOR: Detector;

package/node_modules/@weavecode/harness/dist/claude/detect.js

@@ -0,0 +1 @@
+import{existsSync as o}from"node:fs";import s from"node:path";const t=[".claude","CLAUDE.md"];function r(e){return t.some(n=>o(s.join(e,n)))}export const CLAUDE_DETECTOR={markers:t,present:r,detect:e=>({harness:"claude",present:r(e)})};