@weavecode/weave 0.1.0 → 0.1.1

package/node_modules/@weavecode/server/dist/install/scanner.js

@@ -1 +1 @@
-import{readdir as p,readFile as k,stat as F}from"node:fs/promises";import{join as c,basename as u,relative as l,dirname as j}from"node:path";import{FILE_ASSET_SPECS as P,FILE_ASSET_CATEGORIES as h}from"./file-assets.js";import{hasNonEmptyModules as L}from"../watch/plugin-mods.js";import{parseToolkitPack as E}from"../hooks/toolkit-scan.js";import{marketIdOf as O}from"../market/identity.js";import{pluginSurfaceFor as T}from"../surfaces.js";function C(e){if(!(!(e.ccPack||e.kind==="mod")||!e.targets.includes("claude")))return T("claude").pluginKey(e.name,O(e.dir))}const y=new Set(["node_modules",".git","dist","build",".next","coverage",".cache"]);async function d(e){try{return(await F(e)).isFile()}catch{return!1}}async function I(e){if(await d(c(e,".claude-plugin","plugin.json"))||await d(c(e,"weave-plugin.json")))return!0;try{const a=JSON.parse(await k(c(e,"hooks","hooks.json"),"utf8"));return L(a)}catch{return!1}}const x=10;export async function scanLibraryPlugins(e){const a=[],n=[],o=async(t,r)=>{if(await I(t)){n.push(l(e,t).replace(/\\/g,"/"));const s=await E(t,{root:e,provenance:"market"},"");if(s){const m=[];for(const w of s.skills)await d(c(t,"skills",w,"SKILL.md"))&&m.push(w);const f=C(s);a.push({name:s.name,version:s.version,...s.description?{description:s.description}:{},...f?{key:f}:{},dirPath:s.dir,relPath:l(e,t).replace(/\\/g,"/"),ccPack:s.ccPack,weavePack:s.weavePack,kind:s.kind,components:s.components,targets:s.targets,skills:m})}return}if(r>=x)return;let i;try{i=await p(t,{withFileTypes:!0})}catch{return}for(const s of i)s.isDirectory()&&(s.name.startsWith(".")||y.has(s.name)||await o(c(t,s.name),r+1))};return await o(e,0),{plugins:a.sort((t,r)=>t.relPath.localeCompare(r.relPath)),packRoots:n.sort((t,r)=>t.localeCompare(r))}}function g(e,a){return!a||a.length===0?!1:a.some(n=>n===""||e===n||e.startsWith(`${n}/`))}export async function scanLibrarySkills(e,a){const n=[];return await b(e,e,n,a),n.sort((o,t)=>o.name.localeCompare(t.name))}async function b(e,a,n,o){if(g(l(e,a).replace(/\\/g,"/"),o))return;let t;try{t=await p(a,{withFileTypes:!0})}catch{return}if(t.some(r=>r.isFile()&&r.name==="SKILL.md")){n.push({name:u(a),dirPath:a,relPath:l(e,a).replace(/\\/g,"/"),group:l(e,j(a)).replace(/\\/g,"/")});return}for(const r of t)r.isDirectory()&&(r.name.startsWith(".")||y.has(r.name)||await b(e,c(a,r.name),n,o))}export async function scanLibraryMcp(e,a){const n=[];await v(e,e,n,a);const o=[];for(const t of n)try{const r=JSON.parse(await k(t.abs,"utf-8"));$(r,t,o)}catch{}return o.sort((t,r)=>t.name.localeCompare(r.name))}async function v(e,a,n,o){if(g(l(e,a).replace(/\\/g,"/"),o))return;let t;try{t=await p(a,{withFileTypes:!0})}catch{return}for(const r of t)if(r.isDirectory()){if(r.name.startsWith(".")||y.has(r.name))continue;await v(e,c(a,r.name),n,o)}else if(r.isFile()){const i=r.name.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,""),s=/\.mcp\.json$/i.test(r.name),m=u(a)==="mcp"&&/\.json$/i.test(r.name);(s||m)&&i&&n.push({abs:c(a,r.name),rel:l(e,c(a,r.name)).replace(/\\/g,"/")})}}function $(e,a,n){const o=a.rel.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,"").replace(/^.*\//,"");if(e&&typeof e=="object"&&!Array.isArray(e)){const t=e,r=t.mcpServers;if(r&&typeof r=="object"&&!Array.isArray(r)){for(const[s,m]of Object.entries(r)){const f=S(s,m);f&&n.push({...f,sourcePath:a.abs,relPath:a.rel})}return}const i=S(o,t);i&&n.push({...i,sourcePath:a.abs,relPath:a.rel})}}function S(e,a){if(!a||typeof a!="object"||Array.isArray(a))return null;const n=a;if(typeof n.command!="string"||!n.command)return null;const o={name:e,command:n.command};if(Array.isArray(n.args)&&(o.args=n.args.filter(t=>typeof t=="string")),n.env&&typeof n.env=="object"&&!Array.isArray(n.env)){const t={};for(const[r,i]of Object.entries(n.env))typeof i=="string"&&(t[r]=i);Object.keys(t).length&&(o.env=t)}return o}const W=Object.fromEntries(h.flatMap(e=>Object.values(P[e].dirs).map(a=>a?.project).filter(a=>a!==void 0).map(a=>[u(a),e])));export async function scanLibraryFileAssets(e,a){const n={};for(const o of h)n[o]=[];await A(e,e,n,a);for(const o of h)n[o].sort((t,r)=>t.name.localeCompare(r.name));return n}async function A(e,a,n,o){if(g(l(e,a).replace(/\\/g,"/"),o))return;let t;try{t=await p(a,{withFileTypes:!0})}catch{return}if(t.some(i=>i.isFile()&&i.name==="SKILL.md"))return;const r=W[u(a)];if(r){const i=P[r];for(const s of t){if(!s.isFile()||!s.name.endsWith(i.ext))continue;const m=s.name.slice(0,-i.ext.length);if(!m)continue;const f=c(a,s.name);n[r].push({name:m,filePath:f,relPath:l(e,f).replace(/\\/g,"/"),group:l(e,j(a)).replace(/\\/g,"/"),category:r})}return}for(const i of t)i.isDirectory()&&(i.name.startsWith(".")||y.has(i.name)||await A(e,c(a,i.name),n,o))}
+import{readdir as l,readFile as j,stat as E}from"node:fs/promises";import{join as o,basename as p,relative as f,dirname as S}from"node:path";import{FILE_ASSET_SPECS as A,FILE_ASSET_CATEGORIES as h}from"./file-assets.js";import{hasNonEmptyModules as L}from"../watch/plugin-mods.js";import{parseToolkitPack as I}from"../hooks/toolkit-scan.js";import{marketIdOf as T}from"../market/identity.js";import{pluginSurfaceFor as d}from"../surfaces.js";function _(t){if(!(!(t.ccPack||t.kind==="mod")||!t.targets.includes("claude")))return d("claude").pluginKey(t.name,T(t.dir))}const y=new Set(["node_modules",".git","dist","build",".next","coverage",".cache"]);async function g(t){try{return(await E(t)).isFile()}catch{return!1}}async function D(t){if(await g(o(t,".claude-plugin","plugin.json"))||await g(o(t,"weave-plugin.json")))return!0;try{const e=JSON.parse(await j(o(t,"hooks","hooks.json"),"utf8"));return L(e)}catch{return!1}}const M=10;export async function scanLibraryPlugins(t){const e=[],r=[],c=async(a,n)=>{if(await D(a)){r.push(f(t,a).replace(/\\/g,"/"));const s=await I(a,{root:t,provenance:"market"},"");if(s){const u=[];for(const k of s.skills)await g(o(a,"skills",k,"SKILL.md"))&&u.push(k);const m=_(s);e.push({name:s.name,version:s.version,...s.description?{description:s.description}:{},...m?{key:m}:{},dirPath:s.dir,relPath:f(t,a).replace(/\\/g,"/"),ccPack:s.ccPack,weavePack:s.weavePack,kind:s.kind,components:s.components,targets:s.targets,skills:u})}return}if(n>=M)return;let i;try{i=await l(a,{withFileTypes:!0})}catch{return}for(const s of i)s.isDirectory()&&(s.name.startsWith(".")||y.has(s.name)||await c(o(a,s.name),n+1))};return await c(t,0),{plugins:e.sort((a,n)=>a.relPath.localeCompare(n.relPath)),packRoots:r.sort((a,n)=>a.localeCompare(n))}}function w(t,e){return!e||e.length===0?!1:e.some(r=>r===""||t===r||t.startsWith(`${r}/`))}export async function scanLibrarySkills(t,e){const r=[];return await P(t,t,r,e),r.sort((c,a)=>c.name.localeCompare(a.name))}async function P(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}if(a.some(n=>n.isFile()&&n.name==="SKILL.md")){r.push({name:p(e),dirPath:e,relPath:f(t,e).replace(/\\/g,"/"),group:f(t,S(e)).replace(/\\/g,"/")});return}for(const n of a)n.isDirectory()&&(n.name.startsWith(".")||y.has(n.name)||await P(t,o(e,n.name),r,c))}export async function scanLibraryMcp(t,e){const r=[];await v(t,t,r,e);const c=[];for(const a of r)try{const n=JSON.parse(await j(a.abs,"utf-8"));O(n,a,c)}catch{}return c.sort((a,n)=>a.name.localeCompare(n.name))}async function v(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}for(const n of a)if(n.isDirectory()){if(n.name.startsWith(".")||y.has(n.name))continue;await v(t,o(e,n.name),r,c)}else if(n.isFile()){const i=n.name.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,""),s=/\.mcp\.json$/i.test(n.name),u=p(e)==="mcp"&&/\.json$/i.test(n.name);(s||u)&&i&&r.push({abs:o(e,n.name),rel:f(t,o(e,n.name)).replace(/\\/g,"/")})}}function O(t,e,r){const c=e.rel.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,"").replace(/^.*\//,"");if(t&&typeof t=="object"&&!Array.isArray(t)){const a=t,n=a.mcpServers;if(n&&typeof n=="object"&&!Array.isArray(n)){for(const[s,u]of Object.entries(n)){const m=F(s,u);m&&r.push({...m,sourcePath:e.abs,relPath:e.rel})}return}const i=F(c,a);i&&r.push({...i,sourcePath:e.abs,relPath:e.rel})}}function F(t,e){if(!e||typeof e!="object"||Array.isArray(e))return null;const r=e;if(typeof r.command!="string"||!r.command)return null;const c={name:t,command:r.command};if(Array.isArray(r.args)&&(c.args=r.args.filter(a=>typeof a=="string")),r.env&&typeof r.env=="object"&&!Array.isArray(r.env)){const a={};for(const[n,i]of Object.entries(r.env))typeof i=="string"&&(a[n]=i);Object.keys(a).length&&(c.env=a)}return c}const C=Object.fromEntries(h.flatMap(t=>Object.values(A[t].dirs).map(e=>e?.project).filter(e=>e!==void 0).map(e=>[p(e),t])));export async function scanLibraryFileAssets(t,e){const r={};for(const c of h)r[c]=[];await b(t,t,r,e);for(const c of h)r[c].sort((a,n)=>a.name.localeCompare(n.name));return r}async function b(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}if(a.some(i=>i.isFile()&&i.name==="SKILL.md"))return;const n=C[p(e)];if(n){const i=A[n];for(const s of a){if(!s.isFile()||!s.name.endsWith(i.ext))continue;const u=s.name.slice(0,-i.ext.length);if(!u)continue;const m=o(e,s.name);r[n].push({name:u,filePath:m,relPath:f(t,m).replace(/\\/g,"/"),group:f(t,S(e)).replace(/\\/g,"/"),category:n})}return}for(const i of a)i.isDirectory()&&(i.name.startsWith(".")||y.has(i.name)||await b(t,o(e,i.name),r,c))}

package/node_modules/@weavecode/server/dist/install/settings-mcp.js

@@ -1,2 +1,2 @@
-import{readFile as f,writeFile as u,mkdir as b,access as p}from"node:fs/promises";import o from"node:path";const c=".claude/settings.json";async function v(r){try{return await p(r),!0}catch{return!1}}async function d(r){const e=o.join(r,c);if(!await v(e))return{};try{const n=JSON.parse(await f(e,"utf-8"));return n&&typeof n=="object"&&!Array.isArray(n)?n:{}}catch{return{}}}async function y(r,e){const n=o.join(r,c);await b(o.dirname(n),{recursive:!0}),await u(n,`${JSON.stringify(e,null,2)}
-`,"utf-8")}export async function readMcpEnableMap(r){const e=await d(r),n=i(e.enabledMcpjsonServers),t=i(e.disabledMcpjsonServers),a={};for(const s of n)a[s]="enabled";for(const s of t)a[s]="disabled";return{overrides:a,enableAll:e.enableAllProjectMcpServers===!0}}const M={enabled:"on",disabled:"off",default:"inherit"},S={on:"enabled",off:"disabled",inherit:"default"};export function mcpOverrideOf(r,e){return M[r.overrides[e]??"default"]}export function resolveMcpEffective(r,e){const n=r.overrides[e];return n==="enabled"?!0:n==="disabled"?!1:r.enableAll}export async function setMcpEnableState(r,e,n){const t=await d(r),a=new Set(i(t.enabledMcpjsonServers)),s=new Set(i(t.disabledMcpjsonServers));a.delete(e),s.delete(e),n==="enabled"?a.add(e):n==="disabled"&&s.add(e),l(t,"enabledMcpjsonServers",a),l(t,"disabledMcpjsonServers",s),await y(r,t)}export function setMcpEnableOverride(r,e,n){return setMcpEnableState(r,e,S[n])}function i(r){return Array.isArray(r)?r.filter(e=>typeof e=="string"):[]}function l(r,e,n){n.size===0?delete r[e]:r[e]=[...n].sort()}
+import{readFile as f,writeFile as u,mkdir as b,access as p}from"node:fs/promises";import o from"node:path";const c=".claude/settings.json";async function S(t){try{return await p(t),!0}catch{return!1}}async function d(t){const e=o.join(t,c);if(!await S(e))return{};try{const r=JSON.parse(await f(e,"utf-8"));return r&&typeof r=="object"&&!Array.isArray(r)?r:{}}catch{return{}}}async function v(t,e){const r=o.join(t,c);await b(o.dirname(r),{recursive:!0}),await u(r,`${JSON.stringify(e,null,2)}
+`,"utf-8")}export async function readMcpEnableMap(t){const e=await d(t),r=i(e.enabledMcpjsonServers),n=i(e.disabledMcpjsonServers),s={};for(const a of r)s[a]="enabled";for(const a of n)s[a]="disabled";return{overrides:s,enableAll:e.enableAllProjectMcpServers===!0}}const y={enabled:"on",disabled:"off",default:"inherit"},M={on:"enabled",off:"disabled",inherit:"default"};export function mcpOverrideOf(t,e){return y[t.overrides[e]??"default"]}export function resolveMcpEffective(t,e){const r=t.overrides[e];return r==="enabled"?!0:r==="disabled"?!1:t.enableAll}export async function setMcpEnableState(t,e,r){const n=await d(t),s=new Set(i(n.enabledMcpjsonServers)),a=new Set(i(n.disabledMcpjsonServers));s.delete(e),a.delete(e),r==="enabled"?s.add(e):r==="disabled"&&a.add(e),l(n,"enabledMcpjsonServers",s),l(n,"disabledMcpjsonServers",a),await v(t,n)}export function setMcpEnableOverride(t,e,r){return setMcpEnableState(t,e,M[r])}function i(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"):[]}function l(t,e,r){r.size===0?delete t[e]:t[e]=[...r].sort()}

package/node_modules/@weavecode/server/dist/install/updates.d.ts

@@ -4,6 +4,7 @@ import { type LibraryIndex } from './library-index.js';
 import { readGlobalSkills } from './global-config.js';
 import type { FileAssetCategory } from './file-assets.js';
 import { type PluginTemplateUpdate } from './plugin-templates.js';
+import { type InitFileUpdate } from './init-files.js';
 import type { LibraryRow } from '../repositories/libraries.js';
 /**
  * Update detection — compares installed assets against their library sources.
@@ -65,8 +66,12 @@ export interface UpdateReport {
     files: FileAssetUpdate[];
     /** 项目自有 weave 源（`.weave/plugins` 的 manifest.templates）的物化漂移。 */
     pluginTemplates: PluginTemplateUpdate[];
-    /** Count of outdated, non-custom assets (plugin templates included). */
+    /** init 生成物的漂移（不进 git 的可自愈；会进 git 的只报不写）。 */
+    initFiles: InitFileUpdate[];
+    /** Count of outdated assets sync can actually apply（含 auto 归类的 init 文件）。 */
     available: number;
+    /** 会进 git 的 init 文件有漂移 → dashboard 提醒用户跑 `weave init`。 */
+    needsInit: boolean;
 }
 /**
  * Detect skill + MCP + file-asset updates for a project against the registered
@@ -74,15 +79,22 @@ export interface UpdateReport {
  * rebuild it.
  */
 export declare function detectUpdates(projectPath: string, libraries: LibraryRow[], cache: FingerprintCache, index?: LibraryIndex): Promise<UpdateReport>;
+/** 项目行推送面的一行摘要：角标条数 + 「待 init」提醒（同一次检测的两个面）。 */
+export interface ProjectUpdateSummary {
+    /** 可代写同步的过期项数（含 auto 归类的 init 文件）。 */
+    available: number;
+    /** 会进 git 的 init 文件有漂移 → 提醒用户跑 `weave init`。 */
+    needsInit: boolean;
+}
 /**
- * 全项目「有更新待同步」计数（projectId → available，含 0）：项目行角标推送面
- * 的数据源。与 `GET /projects/:id/updates` 同一检测函数（同源不双算），库索引
- * 一轮构建一次、整轮复用。
+ * 全项目更新摘要（projectId → 摘要，含 0/false）：项目行角标推送面的数据源。
+ * 与 `GET /projects/:id/updates` 同一检测函数（同源不双算），库索引一轮构建
+ * 一次、整轮复用。
  */
 export declare function detectProjectUpdateCounts(projects: ReadonlyArray<{
     id: number;
     path: string;
-}>, libraries: LibraryRow[], cache: FingerprintCache): Promise<Record<number, number>>;
+}>, libraries: LibraryRow[], cache: FingerprintCache): Promise<Record<number, ProjectUpdateSummary>>;
 /** Detect skill updates (project + user, Claude + Codex) against the index. */
 export declare function detectSkillUpdates(projectPath: string, cache: FingerprintCache, idx: LibraryIndex): Promise<SkillUpdate[]>;
 /** Detect single-file asset updates (commands/agents/workflows/rules/output-styles). */

package/node_modules/@weavecode/server/dist/install/updates.js

@@ -1 +1 @@
-import{readdir as g,stat as I}from"node:fs/promises";import{homedir as k}from"node:os";import u from"node:path";import{hashMcpConfig as l}from"./fingerprint.js";import{buildLibraryIndex as h,findSkillSource as y,findMcpSource as f,findFileAssetSource as b}from"./library-index.js";import{readMcpServers as x}from"./installer.js";import{readGlobalMcpServers as F,readGlobalSkills as P}from"./global-config.js";import{readCodexMcpServers as E}from"./codex-toml.js";import{FILE_ASSET_CATEGORIES as T,FILE_ASSET_SPECS as v}from"./file-assets.js";import{assetSurfaces as j}from"../surfaces.js";import{readInstalledLedger as C}from"./install-ledger.js";import{detectPluginTemplateUpdates as A}from"./plugin-templates.js";export async function detectUpdates(r,a,i,o){const s=o??await h(a),t=await detectSkillUpdates(r,i,s),e=await U(r,s),n=await detectFileAssetUpdates(r,i,s);await L(r,{skills:t,mcp:e,files:n},s);const c=await A(r,i),p=t.filter(m=>!m.custom&&m.outdated).length+e.filter(m=>!m.custom&&m.outdated).length+n.filter(m=>!m.custom&&m.outdated).length+c.filter(m=>m.outdated).length;return{skills:t,mcp:e,files:n,pluginTemplates:c,available:p}}export async function detectProjectUpdateCounts(r,a,i){const o=await h(a),s={};for(const t of r){const e=await detectUpdates(t.path,a,i,o);s[t.id]=e.available}return s}async function L(r,a,i){for(const o of await C(r)){if(o.category==="skill"){if(!y(i,o.name)||a.skills.some(t=>t.scope==="project"&&t.name===o.name&&t.agent===o.agent))continue;a.skills.push({name:o.name,scope:"project",agent:o.agent,outdated:!0,custom:!1,missing:!0});continue}if(o.category==="mcp"){if(!f(i,o.name)||a.mcp.some(t=>t.scope==="project"&&t.name===o.name))continue;a.mcp.push({name:o.name,scope:"project",outdated:!0,custom:!1,missing:!0});continue}const s=o.assetCategory;s===void 0||!b(i,s,o.name)||a.files.some(t=>t.scope==="project"&&t.category===s&&t.name===o.name)||a.files.push({category:s,name:o.name,scope:"project",outdated:!0,custom:!1,missing:!0})}}async function M(r){let a;try{a=await g(r,{withFileTypes:!0})}catch{return[]}const i=[];for(const o of a)if(!(!o.isDirectory()&&!o.isSymbolicLink()))try{(await I(u.join(r,o.name))).isDirectory()&&i.push(o.name)}catch{}return i}export async function detectSkillUpdates(r,a,i){const o=k(),s=[...j().map(e=>({dir:u.join(r,...e.projectSkillsDir().split("/")),scope:"project",agent:e.harness})),...j().map(e=>({dir:e.globalSkillsRoots(o)[0],scope:"user",agent:e.harness}))],t=[];for(const e of s)for(const n of await M(e.dir)){const c=u.join(e.dir,n),p=y(i,n);if(!p){t.push({name:n,scope:e.scope,agent:e.agent,outdated:!1,custom:!0});continue}const[m,d]=await Promise.all([a.get(c),a.get(p.dirPath)]);t.push({name:n,scope:e.scope,agent:e.agent,outdated:m!==d,custom:!1,sourceDir:p.dirPath,libraryId:p.libraryId})}return t}export async function detectFileAssetUpdates(r,a,i){const o=[];for(const s of T){const t=v[s],e=t.dirs.claude?.project;if(!e)continue;const n=u.join(r,...e.split("/"));let c;try{c=(await g(n,{withFileTypes:!0})).filter(p=>p.isFile()&&p.name.endsWith(t.ext)).map(p=>p.name)}catch{continue}for(const p of c){const m=p.slice(0,-t.ext.length),d=b(i,s,m);if(!d){o.push({category:s,name:m,scope:"project",outdated:!1,custom:!0});continue}const[S,w]=await Promise.all([a.getFile(u.join(n,p)),a.getFile(d.filePath)]);o.push({category:s,name:m,scope:"project",outdated:S!==w,custom:!1,libraryId:d.libraryId})}}return o}async function U(r,a){const[i,o,s]=await Promise.all([x(r).catch(()=>({})),F().catch(()=>({})),E().catch(()=>({}))]),t=[];for(const[e,n]of Object.entries(i)){const c=f(a,e);c?t.push({name:e,scope:"project",outdated:l(n)!==l(c.config),custom:!1,libraryId:c.libraryId}):t.push({name:e,scope:"project",outdated:!1,custom:!0})}for(const[e,n]of Object.entries(o)){const c=f(a,e);c?t.push({name:e,scope:"user",outdated:l(n)!==l(c.config),custom:!1,libraryId:c.libraryId}):t.push({name:e,scope:"user",outdated:!1,custom:!0})}for(const[e,n]of Object.entries(s)){const c=f(a,e);c?t.push({name:e,scope:"user",agent:"codex",outdated:l(n)!==l(c.config),custom:!1,libraryId:c.libraryId}):t.push({name:e,scope:"user",agent:"codex",outdated:!1,custom:!0})}return t}export{P as readGlobalSkills};
+import{readdir as g,stat as w}from"node:fs/promises";import{homedir as F}from"node:os";import f from"node:path";import{hashMcpConfig as p}from"./fingerprint.js";import{buildLibraryIndex as h,findSkillSource as y,findMcpSource as m,findFileAssetSource as S}from"./library-index.js";import{readMcpServers as k}from"./installer.js";import{readGlobalMcpServers as x,readGlobalSkills as v}from"./global-config.js";import{readCodexMcpServers as C}from"./codex-toml.js";import{FILE_ASSET_CATEGORIES as E,FILE_ASSET_SPECS as M}from"./file-assets.js";import{assetSurfaces as b}from"../surfaces.js";import{readInstalledLedger as T}from"./install-ledger.js";import{detectPluginTemplateUpdates as U}from"./plugin-templates.js";import{detectInitFileUpdates as D,needsInit as L}from"./init-files.js";export async function detectUpdates(a,o,l,t){const n=t??await h(o),[s,e,r,i,u]=await Promise.all([detectSkillUpdates(a,l,n),H(a,n),detectFileAssetUpdates(a,l,n),U(a,l),D(a)]);await A(a,{skills:s,mcp:e,files:r},n);const d=s.filter(c=>!c.custom&&c.outdated).length+e.filter(c=>!c.custom&&c.outdated).length+r.filter(c=>!c.custom&&c.outdated).length+i.filter(c=>c.outdated).length+u.filter(c=>c.outdated&&c.syncClass==="auto").length;return{skills:s,mcp:e,files:r,pluginTemplates:i,initFiles:u,available:d,needsInit:L(u)}}export async function detectProjectUpdateCounts(a,o,l){const t=await h(o),n={};for(const s of a){const e=await detectUpdates(s.path,o,l,t);n[s.id]={available:e.available,needsInit:e.needsInit}}return n}async function A(a,o,l){for(const t of await T(a)){if(t.category==="skill"){if(!y(l,t.name)||o.skills.some(r=>r.scope==="project"&&r.name===t.name&&r.agent===t.agent))continue;o.skills.push({name:t.name,scope:"project",agent:t.agent,outdated:!0,custom:!1,missing:!0});continue}if(t.category==="mcp"){if(!m(l,t.name)||o.mcp.some(e=>e.scope==="project"&&e.name===t.name))continue;o.mcp.push({name:t.name,scope:"project",outdated:!0,custom:!1,missing:!0});continue}const n=t.assetCategory;n===void 0||!S(l,n,t.name)||o.files.some(e=>e.scope==="project"&&e.category===n&&e.name===t.name)||o.files.push({category:n,name:t.name,scope:"project",outdated:!0,custom:!1,missing:!0})}}async function P(a){let o;try{o=await g(a,{withFileTypes:!0})}catch{return[]}const l=[];for(const t of o)if(!(!t.isDirectory()&&!t.isSymbolicLink()))try{(await w(f.join(a,t.name))).isDirectory()&&l.push(t.name)}catch{}return l}export async function detectSkillUpdates(a,o,l){const t=F(),n=[...b().map(e=>({dir:f.join(a,...e.projectSkillsDir().split("/")),scope:"project",agent:e.harness})),...b().map(e=>({dir:e.globalSkillsRoots(t)[0],scope:"user",agent:e.harness}))],s=[];for(const e of n)for(const r of await P(e.dir)){const i=f.join(e.dir,r),u=y(l,r);if(!u){s.push({name:r,scope:e.scope,agent:e.agent,outdated:!1,custom:!0});continue}const[d,c]=await Promise.all([o.get(i),o.get(u.dirPath)]);s.push({name:r,scope:e.scope,agent:e.agent,outdated:d!==c,custom:!1,sourceDir:u.dirPath,libraryId:u.libraryId})}return s}export async function detectFileAssetUpdates(a,o,l){const t=[];for(const n of E){const s=M[n],e=s.dirs.claude?.project;if(!e)continue;const r=f.join(a,...e.split("/"));let i;try{i=(await g(r,{withFileTypes:!0})).filter(u=>u.isFile()&&u.name.endsWith(s.ext)).map(u=>u.name)}catch{continue}for(const u of i){const d=u.slice(0,-s.ext.length),c=S(l,n,d);if(!c){t.push({category:n,name:d,scope:"project",outdated:!1,custom:!0});continue}const[j,I]=await Promise.all([o.getFile(f.join(r,u)),o.getFile(c.filePath)]);t.push({category:n,name:d,scope:"project",outdated:j!==I,custom:!1,libraryId:c.libraryId})}}return t}async function H(a,o){const[l,t,n]=await Promise.all([k(a).catch(()=>({})),x().catch(()=>({})),C().catch(()=>({}))]),s=[];for(const[e,r]of Object.entries(l)){const i=m(o,e);i?s.push({name:e,scope:"project",outdated:p(r)!==p(i.config),custom:!1,libraryId:i.libraryId}):s.push({name:e,scope:"project",outdated:!1,custom:!0})}for(const[e,r]of Object.entries(t)){const i=m(o,e);i?s.push({name:e,scope:"user",outdated:p(r)!==p(i.config),custom:!1,libraryId:i.libraryId}):s.push({name:e,scope:"user",outdated:!1,custom:!0})}for(const[e,r]of Object.entries(n)){const i=m(o,e);i?s.push({name:e,scope:"user",agent:"codex",outdated:p(r)!==p(i.config),custom:!1,libraryId:i.libraryId}):s.push({name:e,scope:"user",agent:"codex",outdated:!1,custom:!0})}return s}export{v as readGlobalSkills};

package/node_modules/@weavecode/server/dist/market/builtin.js

@@ -1 +1 @@
-import i from"node:path";import{lstat as u,realpath as s}from"node:fs/promises";import{builtinMarketRoot as c}from"@weavecode/templates";import{WEAVE_MARKETPLACE as m}from"@weavecode/harness";import{marketDir as f}from"./manifest.js";import{linkOrCopy as p,removeInstalled as h}from"./install-link.js";export const BUILTIN_MARKET_ID=m;export function builtinMarketDir(r){return i.join(f(r),BUILTIN_MARKET_ID)}export function builtinPacksDir(r){return i.join(builtinMarketDir(r),"plugins")}export function builtinRulesDir(r){return i.join(builtinMarketDir(r),"rules")}export function isBuiltinMarketDir(r,n){return i.resolve(r)===i.resolve(builtinMarketDir(n))}export async function ensureBuiltinMarket(r){const n=r.libraries.dataDir,o=c(),t=builtinMarketDir(n);r.libraries.add({path:t,kind:"both"});const l=await s(o),e=await u(t).catch(()=>null);if(e){if(e.isSymbolicLink()&&await s(t).catch(()=>null)===l)return{changed:!1,form:"link"};await h(t)}try{return{changed:!0,form:await p(o,t)}}catch(a){return{changed:!1,error:a instanceof Error?a.message:String(a)}}}
+import n from"node:path";import{lstat as l,realpath as s}from"node:fs/promises";import{builtinMarketRoot as u}from"@weavecode/templates";import{WEAVE_MARKETPLACE as f}from"@weavecode/harness";import{marketDir as m}from"./manifest.js";import{linkOrCopy as p,removeInstalled as h}from"./install-link.js";export const BUILTIN_MARKET_ID=f;export function builtinMarketDir(t){return n.join(m(t),BUILTIN_MARKET_ID)}export function builtinPacksDir(t){return n.join(builtinMarketDir(t),"plugins")}export function builtinRulesDir(t){return n.join(builtinMarketDir(t),"rules")}export function isBuiltinMarketDir(t,o){return n.resolve(t)===n.resolve(builtinMarketDir(o))}export async function ensureBuiltinMarket(t){const o=t.libraries.dataDir,e=u(),r=builtinMarketDir(o);t.libraries.add({path:r,kind:"both"});const c=await s(e),a=await l(r).catch(()=>null);if(a){if(a.isSymbolicLink()&&await s(r).catch(()=>null)===c)return{changed:!1,form:"link"};await h(r)}try{return{changed:!0,form:await p(e,r)}}catch(i){return{changed:!1,error:i instanceof Error?i.message:String(i)}}}

package/node_modules/@weavecode/server/dist/market/identity.js

@@ -1 +1 @@
-import t from"node:path";import{marketDir as s}from"./manifest.js";export function marketIdOf(e,o=s()){const r=t.relative(t.resolve(o),t.resolve(e));return r===""||r.startsWith("..")||t.isAbsolute(r)?void 0:r.split(t.sep)[0]||void 0}
+import e from"node:path";import{marketDir as n}from"./manifest.js";export function marketIdOf(i,o=n()){const r=e.relative(e.resolve(o),e.resolve(i));if(r===""||r.startsWith("..")||e.isAbsolute(r))return;const t=r.split(e.sep)[0];return t||void 0}

package/node_modules/@weavecode/server/dist/market/import.js

@@ -1,2 +1,2 @@
-import{execFile as M}from"node:child_process";import{cp as F,mkdir as v,readdir as P,rename as b,rm as p,stat as I}from"node:fs/promises";import s from"node:path";import{promisify as z}from"node:util";import{getDataDir as h}from"../db/paths.js";import{isInsideDir as A,toRelPosix as g}from"./resolve.js";import{isBuiltinMarketDir as C}from"./builtin.js";import{marketDir as D,readManifest as y,writeManifest as w}from"./manifest.js";const O=z(M),k=6e4,B=2e3;export function slugifyResourceId(r){const t=r.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"");return/^[a-z0-9][a-z0-9-]*$/.test(t)?t:"resource"}export function assertSafeGitUrl(r){const t=r.trim();if(!t)throw new Error("Missing git URL");if(t.includes("--upload-pack"))throw new Error("Invalid git URL (--upload-pack rejected)");if(!(t.startsWith("https://")||t.startsWith("ssh://")||/^git@[^:/\s]+:/.test(t)))throw new Error(`Unsupported git URL (allowed: https/ssh): ${t}`);if(/[\s\r\n\t]/.test(t))throw new Error("Invalid git URL (whitespace)");return t}function l(){return new Date().toISOString()}function S(r){return r.length>B?`${r.slice(0,B)}\u2026(truncated)`:r}function d(r,t){if(!A(r,t))throw new Error(`Import target escapes the market directory: ${r}`)}async function j(r){try{return await I(r),!0}catch{return!1}}async function x(r,t){let a=s.join(t,r),i=1;for(;await j(a);)i+=1,a=s.join(t,`${r}-${i}`);return a}async function L(r,t){let a;try{a=await P(r,{withFileTypes:!0})}catch{return null}for(const i of a){if(!i.isDirectory())continue;const e=s.join(r,i.name);if((await y(e))?.origin===t)return e}return null}async function E(r,t,a,i,e=!1){const n=a.dataDir??h(),o=g(r,n),u=a.libraries.add({path:o,kind:"both"});return{id:s.basename(r),dir:r,relPath:o,manifest:t,libraryId:u.id,reused:i,refreshed:e}}async function H(r,t,a){const i=`${t}.refresh-tmp`;await p(i,{recursive:!0,force:!0}),await F(r,i,{recursive:!0}),d(s.resolve(i),a),await p(t,{recursive:!0,force:!0}),await b(i,t)}export async function importFromDir(r,t){const a=t.dataDir??h(),i=s.resolve(r);if(!(await I(i).catch(()=>null))?.isDirectory())throw new Error(`Not a directory: ${r}`);const e=D(a),n=await L(e,i);if(n){const c=await y(n);await H(i,n,e);const f={...c,importedAt:l()};return await w(n,f),E(n,f,t,!0,!0)}const o=await x(slugifyResourceId(s.basename(i)),e);d(o,e),await v(s.dirname(o),{recursive:!0}),await F(i,o,{recursive:!0});const u={source:"dir",origin:i,importedAt:l()};return await w(o,u),d(s.resolve(o),e),E(o,u,t,!1)}export async function importFromGit(r,t){const a=t.dataDir??h(),i=assertSafeGitUrl(r),e=D(a),n=await L(e,i);if(n){const f=await y(n),m=`${n}.refresh-tmp`;await p(m,{recursive:!0,force:!0});const U=["clone","--depth","1",i,m];try{await(t.execGit??defaultGitExec)("git",U,{timeout:k,maxBuffer:4*1024*1024,windowsHide:!0})}catch(G){throw new Error(`git clone failed: ${S(R(G))}`)}d(s.resolve(m),e),await p(n,{recursive:!0,force:!0}),await b(m,n);const $={...f,importedAt:l()};return await w(n,$),E(n,$,t,!0,!0)}const o=await x(slugifyResourceId(T(i)),e);d(o,e),await v(e,{recursive:!0});const u=["clone","--depth","1",i,o];try{await(t.execGit??defaultGitExec)("git",u,{timeout:k,maxBuffer:4*1024*1024,windowsHide:!0})}catch(f){throw new Error(`git clone failed: ${S(R(f))}`)}d(s.resolve(o),e);const c={source:"git",origin:i,importedAt:l()};return await w(o,c),E(o,c,t,!1)}export async function importLibraryIntoMarket(r,t){const a=t.dataDir??h(),i=s.isAbsolute(r.path)?r.path:s.join(a,r.path),e=s.resolve(i),n=D(a);if(!await j(e))throw new Error(`Source directory not found: ${e}`);if(C(e,a))throw new Error("\u5185\u7F6E\u4ED3\u4E0D\u53EF\u8FC1\u5165\uFF1A\u5B83\u968F\u5305\u53D1\u5E03\u3001\u65E0\u5916\u90E8\u6765\u6E90\uFF0C\u4E14\u843D\u70B9\u662F\u94FE\u63A5\uFF08\u5199\u5165\u4F1A\u6539\u5230\u5305\u5185\u5BB9\uFF09");if(A(e,n)){let c=await y(e);return c||(c={source:"dir",origin:e,importedAt:l()},await w(e,c)),{id:s.basename(e),dir:e,relPath:g(e,a),manifest:c,libraryId:r.id,reused:!0,refreshed:!1}}const o=await x(slugifyResourceId(s.basename(e)),n);d(o,n),await v(s.dirname(o),{recursive:!0}),await F(e,o,{recursive:!0});const u={source:"dir",origin:e,importedAt:l()};return await w(o,u),t.libraries.setPath(r.id,g(o,a)),{id:s.basename(o),dir:o,relPath:g(o,a),manifest:u,libraryId:r.id,reused:!1,refreshed:!1}}function T(r){const t=r.split(/[?#]/)[0],a=t.lastIndexOf("/"),i=t.lastIndexOf(":");return(a>i?t.slice(a+1):t.slice(i+1)).replace(/\.git$/,"")||"repo"}function R(r){const t=r,a=[t?.stderr,t?.stdout].filter(Boolean).map(String);return(a.length?a.join(`
-`):r instanceof Error?r.message:String(r)).trim()||"unknown error"}export const defaultGitExec=async(r,t,a)=>{const{stdout:i,stderr:e}=await O(r,t,a);return{stdout:String(i),stderr:String(e)}};
+import{execFile as G}from"node:child_process";import{cp as x,mkdir as D,readdir as R,rename as k,rm as p,stat as A}from"node:fs/promises";import s from"node:path";import{promisify as _}from"node:util";import{getDataDir as h}from"../db/paths.js";import{isInsideDir as E,toRelPosix as g}from"./resolve.js";import{isBuiltinMarketDir as B}from"./builtin.js";import{marketDir as I,readManifest as y,writeManifest as d}from"./manifest.js";const C=_(G),M=6e4,S=2e3;export function slugifyResourceId(r){const t=r.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"");return/^[a-z0-9][a-z0-9-]*$/.test(t)?t:"resource"}export function assertSafeGitUrl(r){const t=r.trim();if(!t)throw new Error("Missing git URL");if(t.includes("--upload-pack"))throw new Error("Invalid git URL (--upload-pack rejected)");if(!(t.startsWith("https://")||t.startsWith("ssh://")||/^git@[^:/\s]+:/.test(t)))throw new Error(`Unsupported git URL (allowed: https/ssh): ${t}`);if(/[\s\r\n\t]/.test(t))throw new Error("Invalid git URL (whitespace)");return t}function w(){return new Date().toISOString()}function U(r){return r.length>S?`${r.slice(0,S)}\u2026(truncated)`:r}function l(r,t){if(!E(r,t))throw new Error(`Import target escapes the market directory: ${r}`)}async function L(r){try{return await A(r),!0}catch{return!1}}async function b(r,t){let i=s.join(t,r),e=1;for(;await L(i);)e+=1,i=s.join(t,`${r}-${e}`);return i}async function O(r,t){let i;try{i=await R(r,{withFileTypes:!0})}catch{return null}for(const e of i){if(!e.isDirectory())continue;const a=s.join(r,e.name);if((await y(a))?.origin===t)return a}return null}async function v(r,t,i,e,a=!1){const o=i.dataDir??h(),n=g(r,o),c=i.libraries.add({path:n,kind:"both"});return{id:s.basename(r),dir:r,relPath:n,manifest:t,libraryId:c.id,reused:e,refreshed:a}}async function P(r,t,i){const e=`${t}.refresh-tmp`;await p(e,{recursive:!0,force:!0}),await x(r,e,{recursive:!0}),l(s.resolve(e),i),await p(t,{recursive:!0,force:!0}),await k(e,t)}export async function importFromDir(r,t){const i=t.dataDir??h(),e=s.resolve(r);if(!(await A(e).catch(()=>null))?.isDirectory())throw new Error(`Not a directory: ${r}`);const o=I(i);if(E(e,o))throw new Error("\u4E0D\u80FD\u628A\u8D44\u6E90\u5E02\u573A\u7684\u5B58\u50A8\u76EE\u5F55\u5F53\u6765\u6E90\u5BFC\u5165\uFF1A\u5176\u4E2D\u7684\u8D44\u6E90\u5DF2\u5728\u5217\u8868\u4E2D\uFF08\u5185\u7F6E\u4ED3\u843D\u70B9 / \u5DF2\u5BFC\u5165\u7684\u526F\u672C\uFF09");const n=await O(o,e);if(n){const m=await y(n);await P(e,n,o);const f={...m,importedAt:w()};return await d(n,f),v(n,f,t,!0,!0)}const c=await b(slugifyResourceId(s.basename(e)),o);l(c,o),await D(s.dirname(c),{recursive:!0}),await x(e,c,{recursive:!0});const u={source:"dir",origin:e,importedAt:w()};return await d(c,u),l(s.resolve(c),o),v(c,u,t,!1)}export async function importFromGit(r,t){const i=t.dataDir??h(),e=assertSafeGitUrl(r),a=I(i),o=await O(a,e);if(o){const m=await y(o),f=`${o}.refresh-tmp`;await p(f,{recursive:!0,force:!0});const j=["clone","--depth","1",e,f];try{await(t.execGit??defaultGitExec)("git",j,{timeout:M,maxBuffer:4*1024*1024,windowsHide:!0})}catch(F){throw new Error(`git clone failed: ${U(T(F))}`)}l(s.resolve(f),a),await p(o,{recursive:!0,force:!0}),await k(f,o);const $={...m,importedAt:w()};return await d(o,$),v(o,$,t,!0,!0)}const n=await b(slugifyResourceId(z(e)),a);l(n,a),await D(a,{recursive:!0});const c=["clone","--depth","1",e,n];try{await(t.execGit??defaultGitExec)("git",c,{timeout:M,maxBuffer:4*1024*1024,windowsHide:!0})}catch(m){throw new Error(`git clone failed: ${U(T(m))}`)}l(s.resolve(n),a);const u={source:"git",origin:e,importedAt:w()};return await d(n,u),v(n,u,t,!1)}export async function importLibraryIntoMarket(r,t){const i=t.dataDir??h(),e=s.isAbsolute(r.path)?r.path:s.join(i,r.path),a=s.resolve(e),o=I(i);if(!await L(a))throw new Error(`Source directory not found: ${a}`);if(B(a,i))throw new Error("\u5185\u7F6E\u4ED3\u4E0D\u53EF\u8FC1\u5165\uFF1A\u5B83\u968F\u5305\u53D1\u5E03\u3001\u65E0\u5916\u90E8\u6765\u6E90\uFF0C\u4E14\u843D\u70B9\u662F\u94FE\u63A5\uFF08\u5199\u5165\u4F1A\u6539\u5230\u5305\u5185\u5BB9\uFF09");if(E(a,o)){let u=await y(a);return u||(u={source:"dir",origin:a,importedAt:w()},await d(a,u)),{id:s.basename(a),dir:a,relPath:g(a,i),manifest:u,libraryId:r.id,reused:!0,refreshed:!1}}const n=await b(slugifyResourceId(s.basename(a)),o);l(n,o),await D(s.dirname(n),{recursive:!0}),await x(a,n,{recursive:!0});const c={source:"dir",origin:a,importedAt:w()};return await d(n,c),t.libraries.setPath(r.id,g(n,i)),{id:s.basename(n),dir:n,relPath:g(n,i),manifest:c,libraryId:r.id,reused:!1,refreshed:!1}}function z(r){const t=r.split(/[?#]/)[0],i=t.lastIndexOf("/"),e=t.lastIndexOf(":");return(i>e?t.slice(i+1):t.slice(e+1)).replace(/\.git$/,"")||"repo"}function T(r){const t=r,i=[t?.stderr,t?.stdout].filter(Boolean).map(String);return(i.length?i.join(`
+`):r instanceof Error?r.message:String(r)).trim()||"unknown error"}export const defaultGitExec=async(r,t,i)=>{const{stdout:e,stderr:a}=await C(r,t,i);return{stdout:String(e),stderr:String(a)}};

package/node_modules/@weavecode/server/dist/market/refresh.js

@@ -1 +1 @@
-import{stat as d}from"node:fs/promises";import{defaultGitExec as u,importFromDir as c,importFromGit as m}from"./import.js";import{readManifest as n,writeManifest as f}from"./manifest.js";async function w(i){try{return(await d(i)).isDirectory()}catch{return!1}}export async function refreshMarketItems(i,a){return Promise.all(i.map(async t=>{const r=await n(t.dir);if(!r)return{id:t.id,status:"skipped"};if(r.source==="dir"&&!await w(r.origin))return{id:t.id,status:"origin-missing"};try{if(r.source==="git"){const s=await m(r.origin,a),e=await p(s.dir,a.execGit??u);if(e){const o={...await n(s.dir),commit:e};return await f(s.dir,o),{id:t.id,status:"refreshed",commit:e}}return{id:t.id,status:"refreshed"}}return await c(r.origin,a),{id:t.id,status:"refreshed"}}catch{return{id:t.id,status:"failed"}}}))}async function p(i,a){try{return(await a("git",["-C",i,"rev-parse","HEAD"],{timeout:15e3,maxBuffer:1048576,windowsHide:!0})).stdout.trim()||void 0}catch{return}}
+import{stat as d}from"node:fs/promises";import{defaultGitExec as u,importFromDir as c,importFromGit as f}from"./import.js";import{readManifest as n,writeManifest as m}from"./manifest.js";async function w(t){try{return(await d(t)).isDirectory()}catch{return!1}}export async function refreshMarketItems(t,e){return Promise.all(t.map(async i=>{const r=await n(i.dir);if(!r)return{id:i.id,status:"skipped"};if(r.source==="dir"&&!await w(r.origin))return{id:i.id,status:"origin-missing"};try{if(r.source==="git"){const a=await f(r.origin,e),s=await h(a.dir,e.execGit??u);if(s){const o={...await n(a.dir),commit:s};return await m(a.dir,o),{id:i.id,status:"refreshed",commit:s}}return{id:i.id,status:"refreshed"}}return await c(r.origin,e),{id:i.id,status:"refreshed"}}catch{return{id:i.id,status:"failed"}}}))}async function h(t,e){try{return(await e("git",["-C",t,"rev-parse","HEAD"],{timeout:15e3,maxBuffer:1048576,windowsHide:!0})).stdout.trim()||void 0}catch{return}}

package/node_modules/@weavecode/server/dist/market/resolve.js

@@ -1 +1 @@
-import r from"node:path";import{getDataDir as i}from"../db/paths.js";import{marketDir as l}from"./manifest.js";import{isBuiltinMarketDir as p}from"./builtin.js";export function resolveLibraryPath(t,o=i()){if(!r.isAbsolute(t.path))return r.join(o,t.path);const e=r.resolve(t.path);return isInsideDir(e,o)?e:t.path}export function isInsideDir(t,o){const e=r.relative(r.resolve(o),r.resolve(t));return r.isAbsolute(e)?!1:e===""||e!==".."&&!e.startsWith(`..${r.sep}`)}export function toRelPosix(t,o=i()){return r.relative(r.resolve(o),r.resolve(t)).split(r.sep).join("/")}export function marketLibraryRoots(t,o=i()){const e=r.resolve(l(o)),n=new Set;for(const a of t.list()){const s=r.resolve(a.path);s===e||p(s,o)||isInsideDir(s,e)&&n.add(s)}return[...n]}
+import t from"node:path";import{getDataDir as s}from"../db/paths.js";import{marketDir as a}from"./manifest.js";import{isBuiltinMarketDir as p}from"./builtin.js";export function resolveLibraryPath(e,o=s()){if(!t.isAbsolute(e.path))return t.join(o,e.path);const r=t.resolve(e.path);return isInsideDir(r,o)?r:e.path}export function isInsideDir(e,o){const r=t.relative(t.resolve(o),t.resolve(e));return t.isAbsolute(r)?!1:r===""||r!==".."&&!r.startsWith(`..${t.sep}`)}export function toRelPosix(e,o=s()){return t.relative(t.resolve(o),t.resolve(e)).split(t.sep).join("/")}export function marketLibraryRoots(e,o=s()){const r=t.resolve(a(o)),n=new Set;for(const l of e.list()){const i=t.resolve(l.path);i===r||p(i,o)||isInsideDir(i,r)&&n.add(i)}return[...n]}

package/node_modules/@weavecode/server/dist/market/updates.js

@@ -1 +1 @@
-import{stat as u}from"node:fs/promises";import m from"node:path";import{hashSkillDir as c}from"../install/fingerprint.js";import{defaultGitExec as d}from"./import.js";import{readManifest as w}from"./manifest.js";const l=15e3;export const MARKET_SKIP_NAMES=new Set([".weave",".git","node_modules",".weave-market.json"]);async function p(e){try{return(await u(e)).isDirectory()}catch{return!1}}async function f(e,n){const r=m.resolve(n);if(!await p(r))return"origin-missing";const[t,a]=await Promise.all([c(e,MARKET_SKIP_NAMES),c(r,MARKET_SKIP_NAMES)]);return t===a?"uptodate":"update-available"}async function g(e,n,r){const t={timeout:l,maxBuffer:1048576,windowsHide:!0};try{const a=await r("git",["-C",e,"rev-parse","HEAD"],t),i=await r("git",["ls-remote",n,"HEAD"],t),o=a.stdout.trim(),s=i.stdout.trim().split(/\s+/)[0]??"";return!o||!s?"unknown":o===s?"uptodate":"update-available"}catch{return"unknown"}}export async function checkMarketUpdates(e,n){const r=n?.execGit??d;return Promise.all(e.map(async t=>{const a=await w(t.dir);let i;return a?a.source==="git"?i=await g(t.dir,a.origin,r):i=await f(t.dir,a.origin):i="unknown",{id:t.id,status:i,checkedAt:new Date().toISOString()}}))}
+import{stat as u}from"node:fs/promises";import m from"node:path";import{hashSkillDir as c}from"../install/fingerprint.js";import{defaultGitExec as l}from"./import.js";import{readManifest as d}from"./manifest.js";const f=15e3;export const MARKET_SKIP_NAMES=new Set([".weave",".git","node_modules",".weave-market.json"]);async function p(i){try{return(await u(i)).isDirectory()}catch{return!1}}async function w(i,o){const r=m.resolve(o);if(!await p(r))return"origin-missing";const[t,e]=await Promise.all([c(i,MARKET_SKIP_NAMES),c(r,MARKET_SKIP_NAMES)]);return t===e?"uptodate":"update-available"}async function h(i,o,r){const t={timeout:f,maxBuffer:1048576,windowsHide:!0};try{const e=await r("git",["-C",i,"rev-parse","HEAD"],t),a=await r("git",["ls-remote",o,"HEAD"],t),n=e.stdout.trim(),s=a.stdout.trim().split(/\s+/)[0]??"";return!n||!s?"unknown":n===s?"uptodate":"update-available"}catch{return"unknown"}}export async function checkMarketUpdates(i,o){const r=o?.execGit??l;return Promise.all(i.map(async t=>{const e=await d(t.dir);let a;return e?e.source==="git"?a=await h(t.dir,e.origin,r):a=await w(t.dir,e.origin):a="unknown",{id:t.id,status:a,checkedAt:new Date().toISOString()}}))}

package/node_modules/@weavecode/server/dist/registry.js

@@ -1,2 +1,2 @@
-import{basename as y,join as a,resolve as d}from"node:path";import{mkdirSync as l,writeFileSync as u}from"node:fs";import{openDatabase as m}from"./db/db.js";import{ProjectRepository as p}from"./repositories/projects.js";import{HookDispatchRepository as h}from"./repositories/hook-dispatches.js";import{HookEventRepository as P}from"./repositories/hook-events.js";import{SessionRepository as k}from"./repositories/sessions.js";import{generateToken as g}from"./daemon/auth.js";import{purgeProjectPipeline as j}from"./daemon/hook-pipeline.js";import{hooksRoot as v}from"./hooks/mirror.js";export function registerProject(t,n,s){const o=m(s);try{const r=new p(o),e=r.getByPath(t)?.token??g(),i=r.register({path:t,name:y(t),token:e,source:n});return l(a(t,".weave"),{recursive:!0}),u(a(t,".weave","token"),e+`
-`,"utf-8"),{id:i.id,token:e,path:i.path}}finally{o.close()}}export function unregisterProject(t,n,s){const o=m(n);try{const r=new p(o),e=r.getByPath(t)??r.getByPath(d(t));if(!e)return null;const i=new h(o).deleteByProject(e.id),c=new P(o).deleteByProject(e.id),f=new k(o).removeByProject(e.id);return j(s??v(),e.token),r.remove(e.id),{id:e.id,name:e.name,path:e.path,purged:{events:c,dispatches:i,sessions:f}}}finally{o.close()}}
+import{basename as d,join as p}from"node:path";import{mkdirSync as y,writeFileSync as l}from"node:fs";import{openDatabase as m}from"./db/db.js";import{ProjectRepository as a}from"./repositories/projects.js";import{HookDispatchRepository as u}from"./repositories/hook-dispatches.js";import{HookEventRepository as h}from"./repositories/hook-events.js";import{SessionRepository as j}from"./repositories/sessions.js";import{generateToken as w}from"./daemon/auth.js";import{purgeProjectPipeline as P}from"./daemon/hook-pipeline.js";import{hooksRoot as k}from"./hooks/mirror.js";export function registerProject(t,s,c){const o=m(c);try{const r=new a(o),n=r.getByPath(t)?.token??w(),i=r.register({path:t,name:d(t),token:n,source:s});return y(p(t,".weave"),{recursive:!0}),l(p(t,".weave","token"),n+`
+`,"utf-8"),{id:i.id,token:n,path:i.path}}finally{o.close()}}export function unregisterProject(t,s,c){const o=m(s);try{const r=new a(o),e=r.getByPath(t);if(!e)return null;const n=new u(o).deleteByProject(e.id),i=new h(o).deleteByProject(e.id),f=new j(o).removeByProject(e.id);return P(c??k(),e.token),r.remove(e.id),{id:e.id,name:e.name,path:e.path,purged:{events:i,dispatches:n,sessions:f}}}finally{o.close()}}

package/node_modules/@weavecode/server/dist/repositories/hook-dispatches.js

@@ -1,8 +1,8 @@
-export class HookDispatchRepository{db;constructor(t){this.db=t}insert(t){const s=this.db.prepare(`INSERT INTO hook_dispatches (rule_id, event_id, session_id, prompt, status, mode, started_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?)`).run(t.ruleId,t.eventId??null,t.sessionId??null,t.prompt,t.status,t.mode,new Date().toISOString());return this.getById(Number(s.lastInsertRowid))}getById(t){const s=this.db.prepare("SELECT * FROM hook_dispatches WHERE id = ?").get(t);return s?n(s):void 0}updateStatus(t,s){const r=new Date().toISOString();return this.db.prepare(`UPDATE hook_dispatches
+export class HookDispatchRepository{db;constructor(t){this.db=t}insert(t){const e=this.db.prepare(`INSERT INTO hook_dispatches (rule_id, event_id, session_id, prompt, status, mode, started_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`).run(t.ruleId,t.eventId??null,t.sessionId??null,t.prompt,t.status,t.mode,new Date().toISOString());return this.getById(Number(e.lastInsertRowid))}getById(t){const e=this.db.prepare("SELECT * FROM hook_dispatches WHERE id = ?").get(t);return e?r(e):void 0}updateStatus(t,e){const n=new Date().toISOString();return this.db.prepare(`UPDATE hook_dispatches
          SET status = ?, output = COALESCE(?, output), error = COALESCE(?, error),
              finished_at = CASE WHEN ? = 1 THEN ? ELSE finished_at END
-         WHERE id = ?`).run(s.status,s.output??null,s.error??null,s.finished?1:0,r,t),this.getById(t)}list(t={}){const s=Math.min(Math.max(t.limit??50,1),200),r=[],i=[];t.ruleId&&(r.push("rule_id = ?"),i.push(t.ruleId)),t.status&&(r.push("status = ?"),i.push(t.status)),t.sessionId&&(r.push("session_id = ?"),i.push(t.sessionId));const d=r.length>0?`WHERE ${r.join(" AND ")}`:"";return this.db.prepare(`SELECT * FROM hook_dispatches ${d} ORDER BY started_at DESC, id DESC LIMIT ?`).all(...i,s).map(n)}deleteBySession(t){return Number(this.db.prepare("DELETE FROM hook_dispatches WHERE session_id = ?").run(t).changes)}deleteByProject(t){return Number(this.db.prepare(`DELETE FROM hook_dispatches WHERE session_id IN (SELECT session_id FROM sessions WHERE project_id = ?)
-             OR event_id IN (SELECT id FROM hook_events WHERE project_id = ?)`).run(t,t).changes)}findRecentAuto(t,s,r){const i=this.db.prepare(`SELECT * FROM hook_dispatches
+         WHERE id = ?`).run(e.status,e.output??null,e.error??null,e.finished?1:0,n,t),this.getById(t)}list(t={}){const e=Math.min(Math.max(t.limit??50,1),200),n=[],i=[];t.ruleId&&(n.push("rule_id = ?"),i.push(t.ruleId)),t.status&&(n.push("status = ?"),i.push(t.status)),t.sessionId&&(n.push("session_id = ?"),i.push(t.sessionId));const d=n.length>0?`WHERE ${n.join(" AND ")}`:"";return this.db.prepare(`SELECT * FROM hook_dispatches ${d} ORDER BY started_at DESC, id DESC LIMIT ?`).all(...i,e).map(r)}deleteBySession(t){return Number(this.db.prepare("DELETE FROM hook_dispatches WHERE session_id = ?").run(t).changes)}deleteByProject(t){return Number(this.db.prepare(`DELETE FROM hook_dispatches WHERE session_id IN (SELECT session_id FROM sessions WHERE project_id = ?)
+             OR event_id IN (SELECT id FROM hook_events WHERE project_id = ?)`).run(t,t).changes)}findRecentAuto(t,e,n){const i=this.db.prepare(`SELECT * FROM hook_dispatches
          WHERE rule_id = ? AND session_id = ? AND mode = 'auto' AND started_at >= ?
-         ORDER BY started_at DESC LIMIT 1`).get(t,s,r);return i?n(i):void 0}}function n(e){return{id:Number(e.id),ruleId:String(e.rule_id),eventId:e.event_id==null?null:Number(e.event_id),sessionId:e.session_id==null?null:String(e.session_id),prompt:String(e.prompt),status:String(e.status),mode:String(e.mode),output:e.output==null?null:String(e.output),error:e.error==null?null:String(e.error),startedAt:String(e.started_at),finishedAt:e.finished_at==null?null:String(e.finished_at)}}
+         ORDER BY started_at DESC LIMIT 1`).get(t,e,n);return i?r(i):void 0}}function r(s){return{id:Number(s.id),ruleId:String(s.rule_id),eventId:s.event_id==null?null:Number(s.event_id),sessionId:s.session_id==null?null:String(s.session_id),prompt:String(s.prompt),status:String(s.status),mode:String(s.mode),output:s.output==null?null:String(s.output),error:s.error==null?null:String(s.error),startedAt:String(s.started_at),finishedAt:s.finished_at==null?null:String(s.finished_at)}}

package/node_modules/@weavecode/server/dist/repositories/hook-events.js

@@ -1,2 +1,2 @@
-import{readDaemonSettingsSync as u,DEFAULT_EVENT_RETENTION_DAYS as d}from"../daemon/settings.js";export class HookEventRepository{db;lastPruneDay=-1;insertEvent;pruneByCutoff;constructor(e){this.db=e,this.insertEvent=e.prepare(`INSERT INTO hook_events (project_id, source, event_type, session_id, payload, created_at)
-       VALUES (?, ?, ?, ?, ?, ?)`),this.pruneByCutoff=e.prepare("DELETE FROM hook_events WHERE created_at < ?")}resetPrune(){this.lastPruneDay=-1}insert(e){this.pruneExpired();const r=this.insertEvent.run(e.projectId,e.source,e.eventType,e.sessionId??null,e.payload,new Date().toISOString());return Number(r.lastInsertRowid)}insertMany(e){this.pruneExpired();const r=[];this.db.exec("BEGIN");try{for(const t of e){const n=this.insertEvent.run(t.projectId,t.source,t.eventType,t.sessionId??null,t.payload,new Date().toISOString());r.push(Number(n.lastInsertRowid))}this.db.exec("COMMIT")}catch(t){throw this.db.exec("ROLLBACK"),t}return r}pruneExpired(){const e=Math.floor(Date.now()/864e5);if(e===this.lastPruneDay)return;this.lastPruneDay=e;const r=u().events?.retentionDays??d,t=new Date((e-r)*864e5).toISOString();this.pruneByCutoff.run(t)}listByProject(e,r=100){return this.db.prepare("SELECT * FROM hook_events WHERE project_id = ? ORDER BY created_at DESC LIMIT ?").all(e,r).map(t=>a(t))}deleteBySession(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE session_id = ?").run(e).changes)}deleteByProject(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE project_id = ?").run(e).changes)}listBySession(e,r=300,t,n){const o=["session_id = ?"],i=[e];return t!=null&&(o.push("id < ?"),i.push(t)),n?.length&&(o.push(`event_type IN (${n.map(()=>"?").join(",")})`),i.push(...n)),this.db.prepare(`SELECT * FROM hook_events WHERE ${o.join(" AND ")} ORDER BY id DESC LIMIT ?`).all(...i,r).map(p=>a(p)).reverse()}}function a(s){return{id:Number(s.id),projectId:Number(s.project_id),source:String(s.source),eventType:String(s.event_type),sessionId:s.session_id==null?null:String(s.session_id),payload:String(s.payload),createdAt:String(s.created_at)}}
+import{readDaemonSettingsSync as d,DEFAULT_EVENT_RETENTION_DAYS as p}from"../daemon/settings.js";export class HookEventRepository{db;lastPruneDay=-1;insertEvent;pruneByCutoff;constructor(e){this.db=e,this.insertEvent=e.prepare(`INSERT INTO hook_events (project_id, source, event_type, session_id, payload, created_at)
+       VALUES (?, ?, ?, ?, ?, ?)`),this.pruneByCutoff=e.prepare("DELETE FROM hook_events WHERE created_at < ?")}resetPrune(){this.lastPruneDay=-1}insert(e){this.pruneExpired();const s=this.insertEvent.run(e.projectId,e.source,e.eventType,e.sessionId??null,e.payload,new Date().toISOString());return Number(s.lastInsertRowid)}insertMany(e){this.pruneExpired();const s=[];this.db.exec("BEGIN");try{for(const t of e){const r=this.insertEvent.run(t.projectId,t.source,t.eventType,t.sessionId??null,t.payload,new Date().toISOString());s.push(Number(r.lastInsertRowid))}this.db.exec("COMMIT")}catch(t){throw this.db.exec("ROLLBACK"),t}return s}pruneExpired(){const e=Math.floor(Date.now()/864e5);if(e===this.lastPruneDay)return;this.lastPruneDay=e;const s=d().events?.retentionDays??p,t=new Date((e-s)*864e5).toISOString();this.pruneByCutoff.run(t)}listByProject(e,s=100){return this.db.prepare("SELECT * FROM hook_events WHERE project_id = ? ORDER BY created_at DESC LIMIT ?").all(e,s).map(t=>a(t))}deleteBySession(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE session_id = ?").run(e).changes)}deleteByProject(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE project_id = ?").run(e).changes)}listBySession(e,s=300,t,r){const o=["session_id = ?"],i=[e];return t!=null&&(o.push("id < ?"),i.push(t)),r?.length&&(o.push(`event_type IN (${r.map(()=>"?").join(",")})`),i.push(...r)),this.db.prepare(`SELECT * FROM hook_events WHERE ${o.join(" AND ")} ORDER BY id DESC LIMIT ?`).all(...i,s).map(u=>a(u)).reverse()}}function a(n){return{id:Number(n.id),projectId:Number(n.project_id),source:String(n.source),eventType:String(n.event_type),sessionId:n.session_id==null?null:String(n.session_id),payload:String(n.payload),createdAt:String(n.created_at)}}

package/node_modules/@weavecode/server/dist/repositories/hook-rules.js

@@ -1,8 +1,8 @@
-import{randomUUID as s}from"node:crypto";import{HookRuleSchema as d}from"@weavecode/core";export class HookRuleRepository{db;constructor(r){this.db=r}create(r){const e=new Date().toISOString(),o=d.parse({id:s(),name:r.name,enabled:r.enabled??!0,priority:r.priority??0,projectId:r.projectId,source:r.source,filter:r.filter??{},handler:r.handler,timeoutMs:r.timeoutMs??1e4,record:r.record??r.handler.type!=="log",origin:r.origin??"user",pluginId:r.pluginId??null});return this.insertRow(o,e,e),o}upsertPluginRule(r){const e=new Date().toISOString(),o=this.getById(r.id);if(!o)return this.insertRow(r,e,e),r;const t=d.parse({...r,enabled:o.enabled});return this.db.prepare(`UPDATE hook_rules SET name = ?, enabled = ?, priority = ?, project_id = ?,
+import{randomUUID as s}from"node:crypto";import{HookRuleSchema as o}from"@weavecode/core";export class HookRuleRepository{db;constructor(e){this.db=e}create(e){const t=new Date().toISOString(),i=o.parse({id:s(),name:e.name,enabled:e.enabled??!0,priority:e.priority??0,projectId:e.projectId,source:e.source,filter:e.filter??{},handler:e.handler,timeoutMs:e.timeoutMs??1e4,record:e.record??e.handler.type!=="log",origin:e.origin??"user",pluginId:e.pluginId??null});return this.insertRow(i,t,t),i}upsertPluginRule(e){const t=new Date().toISOString(),i=this.getById(e.id);if(!i)return this.insertRow(e,t,t),e;const r=o.parse({...e,enabled:i.enabled});return this.db.prepare(`UPDATE hook_rules SET name = ?, enabled = ?, priority = ?, project_id = ?,
            source = ?, filter = ?, handler = ?, timeout_ms = ?, record = ?,
            origin = ?, plugin_id = ?, updated_at = ?
-         WHERE id = ?`).run(t.name,t.enabled?1:0,t.priority,t.projectId,JSON.stringify(t.source),JSON.stringify(t.filter),JSON.stringify(t.handler),t.timeoutMs,t.record?1:0,t.origin,t.pluginId,e,t.id),t}removeByPlugin(r){const e=this.db.prepare("DELETE FROM hook_rules WHERE plugin_id = ?").run(r);return Number(e.changes)}listByPlugin(r){return this.db.prepare("SELECT * FROM hook_rules WHERE plugin_id = ? ORDER BY created_at ASC").all(r).map(n).filter(e=>e!==void 0)}getById(r){const e=this.db.prepare("SELECT * FROM hook_rules WHERE id = ?").get(r);return e?n(e):void 0}list(r){return(r===void 0?this.db.prepare("SELECT * FROM hook_rules ORDER BY priority DESC, created_at ASC").all():this.db.prepare("SELECT * FROM hook_rules WHERE project_id IS NULL OR project_id = ? ORDER BY priority DESC, created_at ASC").all(r)).map(n).filter(e=>e!==void 0)}update(r,e){const o=this.getById(r);if(!o)return;const t=d.parse({...o,...e,id:r,projectId:"projectId"in e?e.projectId:o.projectId});return this.db.prepare(`UPDATE hook_rules SET name = ?, enabled = ?, priority = ?, project_id = ?,
+         WHERE id = ?`).run(r.name,r.enabled?1:0,r.priority,r.projectId,JSON.stringify(r.source),JSON.stringify(r.filter),JSON.stringify(r.handler),r.timeoutMs,r.record?1:0,r.origin,r.pluginId,t,r.id),r}removeByPlugin(e){const t=this.db.prepare("DELETE FROM hook_rules WHERE plugin_id = ?").run(e);return Number(t.changes)}listByPlugin(e){return this.db.prepare("SELECT * FROM hook_rules WHERE plugin_id = ? ORDER BY created_at ASC").all(e).map(d).filter(i=>i!==void 0)}getById(e){const t=this.db.prepare("SELECT * FROM hook_rules WHERE id = ?").get(e);return t?d(t):void 0}list(e){return(e===void 0?this.db.prepare("SELECT * FROM hook_rules ORDER BY priority DESC, created_at ASC").all():this.db.prepare("SELECT * FROM hook_rules WHERE project_id IS NULL OR project_id = ? ORDER BY priority DESC, created_at ASC").all(e)).map(d).filter(i=>i!==void 0)}update(e,t){const i=this.getById(e);if(!i)return;const r=o.parse({...i,...t,id:e,projectId:"projectId"in t?t.projectId:i.projectId});return this.db.prepare(`UPDATE hook_rules SET name = ?, enabled = ?, priority = ?, project_id = ?,
            source = ?, filter = ?, handler = ?, timeout_ms = ?, record = ?, updated_at = ?
-         WHERE id = ?`).run(t.name,t.enabled?1:0,t.priority,t.projectId,JSON.stringify(t.source),JSON.stringify(t.filter),JSON.stringify(t.handler),t.timeoutMs,t.record?1:0,new Date().toISOString(),r),t}setEnabled(r,e){const o=this.db.prepare("UPDATE hook_rules SET enabled = ?, updated_at = ? WHERE id = ?").run(e?1:0,new Date().toISOString(),r);if(Number(o.changes)!==0)return this.getById(r)}remove(r){const e=this.db.prepare("DELETE FROM hook_rules WHERE id = ?").run(r);return Number(e.changes)>0}insertRow(r,e,o){this.db.prepare(`INSERT INTO hook_rules (id, name, enabled, priority, project_id, source, filter, handler,
+         WHERE id = ?`).run(r.name,r.enabled?1:0,r.priority,r.projectId,JSON.stringify(r.source),JSON.stringify(r.filter),JSON.stringify(r.handler),r.timeoutMs,r.record?1:0,new Date().toISOString(),e),r}setEnabled(e,t){const i=this.db.prepare("UPDATE hook_rules SET enabled = ?, updated_at = ? WHERE id = ?").run(t?1:0,new Date().toISOString(),e);if(Number(i.changes)!==0)return this.getById(e)}remove(e){const t=this.db.prepare("DELETE FROM hook_rules WHERE id = ?").run(e);return Number(t.changes)>0}insertRow(e,t,i){this.db.prepare(`INSERT INTO hook_rules (id, name, enabled, priority, project_id, source, filter, handler,
            timeout_ms, record, origin, plugin_id, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(r.id,r.name,r.enabled?1:0,r.priority,r.projectId,JSON.stringify(r.source),JSON.stringify(r.filter),JSON.stringify(r.handler),r.timeoutMs,r.record?1:0,r.origin,r.pluginId,e,o)}}function n(i){try{return d.parse({id:String(i.id),name:String(i.name),enabled:Number(i.enabled)===1,priority:Number(i.priority),projectId:i.project_id==null?null:Number(i.project_id),source:JSON.parse(String(i.source)),filter:JSON.parse(String(i.filter??"{}")),handler:JSON.parse(String(i.handler)),timeoutMs:Number(i.timeout_ms),record:Number(i.record)===1,origin:i.origin??"user",pluginId:i.plugin_id==null?null:String(i.plugin_id)})}catch{return}}
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(e.id,e.name,e.enabled?1:0,e.priority,e.projectId,JSON.stringify(e.source),JSON.stringify(e.filter),JSON.stringify(e.handler),e.timeoutMs,e.record?1:0,e.origin,e.pluginId,t,i)}}function d(n){try{return o.parse({id:String(n.id),name:String(n.name),enabled:Number(n.enabled)===1,priority:Number(n.priority),projectId:n.project_id==null?null:Number(n.project_id),source:JSON.parse(String(n.source)),filter:JSON.parse(String(n.filter??"{}")),handler:JSON.parse(String(n.handler)),timeoutMs:Number(n.timeout_ms),record:Number(n.record)===1,origin:n.origin??"user",pluginId:n.plugin_id==null?null:String(n.plugin_id)})}catch{return}}

package/node_modules/@weavecode/server/dist/repositories/libraries.js

@@ -1 +1 @@
-import e from"node:path";import{getDataDir as o}from"../db/paths.js";import{isInsideDir as d,resolveLibraryPath as p,toRelPosix as h}from"../market/resolve.js";export class LibraryRepository{db;dataDir;constructor(r,t=o()){this.db=r,this.dataDir=t}add(r){return this.getByPath(r.path)||(this.db.prepare("INSERT OR IGNORE INTO libraries (path, kind, added_at) VALUES (?, ?, ?)").run(this.writeForm(r.path),r.kind,new Date().toISOString()),this.getByPath(r.path))}getByPath(r){for(const t of new Set([r,this.writeForm(r)])){const s=this.db.prepare("SELECT * FROM libraries WHERE path = ?").get(t);if(s)return this.resolveRow(a(s))}}getById(r){const t=this.db.prepare("SELECT * FROM libraries WHERE id = ?").get(r);return t?this.resolveRow(a(t)):void 0}list(){return this.db.prepare("SELECT * FROM libraries ORDER BY added_at DESC").all().map(r=>this.resolveRow(a(r)))}setPath(r,t){this.db.prepare("UPDATE libraries SET path = ? WHERE id = ?").run(this.writeForm(t),r)}remove(r){this.db.prepare("DELETE FROM libraries WHERE id = ?").run(r)}writeForm(r){return e.isAbsolute(r)&&d(r,this.dataDir)?h(r,this.dataDir):r}resolveRow(r){if(!e.isAbsolute(r.path))return{...r,path:p(r,this.dataDir)};const t=e.resolve(r.path);return d(t,this.dataDir)?(this.db.prepare("UPDATE libraries SET path = ? WHERE id = ?").run(h(t,this.dataDir),r.id),{...r,path:t}):r}}function a(i){return{id:Number(i.id),path:String(i.path),kind:i.kind,addedAt:String(i.added_at)}}
+import e from"node:path";import{getDataDir as n}from"../db/paths.js";import{isInsideDir as d,resolveLibraryPath as o,toRelPosix as h}from"../market/resolve.js";export class LibraryRepository{db;dataDir;constructor(t,r=n()){this.db=t,this.dataDir=r}add(t){const r=this.getByPath(t.path);return r||(this.db.prepare("INSERT OR IGNORE INTO libraries (path, kind, added_at) VALUES (?, ?, ?)").run(this.writeForm(t.path),t.kind,new Date().toISOString()),this.getByPath(t.path))}getByPath(t){for(const r of new Set([t,this.writeForm(t)])){const s=this.db.prepare("SELECT * FROM libraries WHERE path = ?").get(r);if(s)return this.resolveRow(a(s))}}getById(t){const r=this.db.prepare("SELECT * FROM libraries WHERE id = ?").get(t);return r?this.resolveRow(a(r)):void 0}list(){return this.db.prepare("SELECT * FROM libraries ORDER BY added_at DESC").all().map(t=>this.resolveRow(a(t)))}setPath(t,r){this.db.prepare("UPDATE libraries SET path = ? WHERE id = ?").run(this.writeForm(r),t)}remove(t){this.db.prepare("DELETE FROM libraries WHERE id = ?").run(t)}writeForm(t){return e.isAbsolute(t)&&d(t,this.dataDir)?h(t,this.dataDir):t}resolveRow(t){if(!e.isAbsolute(t.path))return{...t,path:o(t,this.dataDir)};const r=e.resolve(t.path);return d(r,this.dataDir)?(this.db.prepare("UPDATE libraries SET path = ? WHERE id = ?").run(h(r,this.dataDir),t.id),{...t,path:r}):t}}function a(i){return{id:Number(i.id),path:String(i.path),kind:i.kind,addedAt:String(i.added_at)}}

package/node_modules/@weavecode/server/dist/repositories/plugin-states.js

@@ -1 +1 @@
-export class PluginStateRepository{db;constructor(t){this.db=t}get(t){const e=this.db.prepare("SELECT * FROM plugin_states WHERE id = ?").get(t);if(e)return{id:String(e.id),enabled:Number(e.enabled)===1,config:JSON.parse(String(e.config??"{}")),updatedAt:String(e.updated_at)}}list(){return this.db.prepare("SELECT * FROM plugin_states ORDER BY id ASC").all().map(t=>({id:String(t.id),enabled:Number(t.enabled)===1,config:JSON.parse(String(t.config??"{}")),updatedAt:String(t.updated_at)}))}setEnabled(t,e){this.upsert(t,{enabled:e})}setConfig(t,e){this.upsert(t,{config:e})}remove(t){this.db.prepare("DELETE FROM plugin_states WHERE id = ?").run(t)}upsert(t,e){const i=this.get(t),n=new Date().toISOString(),r=e.enabled??i?.enabled??!0,d=e.config??i?.config??{};i?this.db.prepare("UPDATE plugin_states SET enabled = ?, config = ?, updated_at = ? WHERE id = ?").run(r?1:0,JSON.stringify(d),n,t):this.db.prepare("INSERT INTO plugin_states (id, enabled, config, updated_at) VALUES (?, ?, ?, ?)").run(t,r?1:0,JSON.stringify(d),n)}}
+export class PluginStateRepository{db;constructor(t){this.db=t}get(t){const e=this.db.prepare("SELECT * FROM plugin_states WHERE id = ?").get(t);if(e)return{id:String(e.id),enabled:Number(e.enabled)===1,config:JSON.parse(String(e.config??"{}")),updatedAt:String(e.updated_at)}}list(){return this.db.prepare("SELECT * FROM plugin_states ORDER BY id ASC").all().map(e=>({id:String(e.id),enabled:Number(e.enabled)===1,config:JSON.parse(String(e.config??"{}")),updatedAt:String(e.updated_at)}))}setEnabled(t,e){this.upsert(t,{enabled:e})}setConfig(t,e){this.upsert(t,{config:e})}remove(t){this.db.prepare("DELETE FROM plugin_states WHERE id = ?").run(t)}upsert(t,e){const n=this.get(t),i=new Date().toISOString(),s=e.enabled??n?.enabled??!0,r=e.config??n?.config??{};n?this.db.prepare("UPDATE plugin_states SET enabled = ?, config = ?, updated_at = ? WHERE id = ?").run(s?1:0,JSON.stringify(r),i,t):this.db.prepare("INSERT INTO plugin_states (id, enabled, config, updated_at) VALUES (?, ?, ?, ?)").run(t,s?1:0,JSON.stringify(r),i)}}

package/node_modules/@weavecode/server/dist/repositories/projects.d.ts

@@ -19,6 +19,13 @@ export interface RegisterProjectInput {
     token: string;
     source: 'init' | 'scan';
 }
+/**
+ * 项目注册键：绝对化 + 归一分隔符/尾斜杠，落**原生**形态。`D:/a/b` 与 `D:\a\b`
+ * 必须同键——否则 `ON CONFLICT(path)` 认不出、重复登记还会另发 token 把 hook 事件
+ * 拐到新行上。刻意保留原生分隔符：项目根要拿去和 payload / 请求里的 file_path 做
+ * 包含判断（asset 越界闸、crossProjectOnly），折成 posix 会让那些闸把合法路径判越界。
+ */
+export declare function projectKey(path: string): string;
 export declare class ProjectRepository {
     private readonly db;
     constructor(db: DatabaseSync);

package/node_modules/@weavecode/server/dist/repositories/projects.js

@@ -1,3 +1,3 @@
-export class ProjectRepository{db;constructor(t){this.db=t}register(t){const e=new Date().toISOString();return this.db.prepare(`INSERT INTO projects (path, name, token, source, registered_at, last_seen_at)
+import{resolve as o}from"node:path";export function projectKey(r){return o(r)}export class ProjectRepository{db;constructor(e){this.db=e}register(e){const t=new Date().toISOString(),s=projectKey(e.path);return this.db.prepare(`INSERT INTO projects (path, name, token, source, registered_at, last_seen_at)
          VALUES (?, ?, ?, ?, ?, ?)
-         ON CONFLICT(path) DO UPDATE SET last_seen_at = excluded.last_seen_at`).run(t.path,t.name,t.token,t.source,e,e),this.getByPath(t.path)}getByPath(t){const e=this.db.prepare("SELECT * FROM projects WHERE path = ?").get(t);return e?a(e):void 0}getByToken(t){const e=this.db.prepare("SELECT * FROM projects WHERE token = ?").get(t);return e?a(e):void 0}getById(t){const e=this.db.prepare("SELECT * FROM projects WHERE id = ?").get(t);return e?a(e):void 0}list(){return this.db.prepare("SELECT * FROM projects WHERE archived_at IS NULL ORDER BY sort_order IS NULL, sort_order ASC, registered_at DESC").all().map(t=>a(t))}listArchived(){return this.db.prepare("SELECT * FROM projects WHERE archived_at IS NOT NULL ORDER BY archived_at DESC").all().map(t=>a(t))}setOrder(t){this.db.exec("BEGIN");try{this.db.exec("UPDATE projects SET sort_order = NULL");const e=this.db.prepare("UPDATE projects SET sort_order = ? WHERE id = ?");t.forEach((s,n)=>{e.run(n,s)}),this.db.exec("COMMIT")}catch(e){throw this.db.exec("ROLLBACK"),e}}touch(t){this.db.prepare("UPDATE projects SET last_seen_at = ? WHERE id = ?").run(new Date().toISOString(),t)}remove(t){this.db.prepare("DELETE FROM projects WHERE id = ?").run(t)}setArchived(t,e){return(e?this.db.prepare("UPDATE projects SET archived_at = ?, sort_order = NULL WHERE id = ?").run(new Date().toISOString(),t):this.db.prepare("UPDATE projects SET archived_at = NULL WHERE id = ?").run(t)).changes>0}getMeta(t){const e=this.db.prepare("SELECT meta FROM projects WHERE id = ?").get(t);if(!e||e.meta==null)return null;try{const s=JSON.parse(String(e.meta));return s&&typeof s=="object"&&!Array.isArray(s)?s:null}catch{return null}}setMeta(t,e){const s={...this.getMeta(t)??{},...e};this.db.prepare("UPDATE projects SET meta = ? WHERE id = ?").run(JSON.stringify(s),t)}}function a(r){return{id:Number(r.id),path:String(r.path),name:String(r.name),token:String(r.token),source:r.source,registeredAt:String(r.registered_at),lastSeenAt:r.last_seen_at==null?null:String(r.last_seen_at),meta:r.meta==null?null:String(r.meta),sortOrder:r.sort_order==null?null:Number(r.sort_order),archivedAt:r.archived_at==null?null:String(r.archived_at)}}
+         ON CONFLICT(path) DO UPDATE SET last_seen_at = excluded.last_seen_at`).run(s,e.name,e.token,e.source,t,t),this.getByPath(s)}getByPath(e){const t=this.db.prepare("SELECT * FROM projects WHERE path = ?").get(projectKey(e));return t?n(t):void 0}getByToken(e){const t=this.db.prepare("SELECT * FROM projects WHERE token = ?").get(e);return t?n(t):void 0}getById(e){const t=this.db.prepare("SELECT * FROM projects WHERE id = ?").get(e);return t?n(t):void 0}list(){return this.db.prepare("SELECT * FROM projects WHERE archived_at IS NULL ORDER BY sort_order IS NULL, sort_order ASC, registered_at DESC").all().map(e=>n(e))}listArchived(){return this.db.prepare("SELECT * FROM projects WHERE archived_at IS NOT NULL ORDER BY archived_at DESC").all().map(e=>n(e))}setOrder(e){this.db.exec("BEGIN");try{this.db.exec("UPDATE projects SET sort_order = NULL");const t=this.db.prepare("UPDATE projects SET sort_order = ? WHERE id = ?");e.forEach((s,a)=>{t.run(a,s)}),this.db.exec("COMMIT")}catch(t){throw this.db.exec("ROLLBACK"),t}}touch(e){this.db.prepare("UPDATE projects SET last_seen_at = ? WHERE id = ?").run(new Date().toISOString(),e)}remove(e){this.db.prepare("DELETE FROM projects WHERE id = ?").run(e)}setArchived(e,t){return(t?this.db.prepare("UPDATE projects SET archived_at = ?, sort_order = NULL WHERE id = ?").run(new Date().toISOString(),e):this.db.prepare("UPDATE projects SET archived_at = NULL WHERE id = ?").run(e)).changes>0}getMeta(e){const t=this.db.prepare("SELECT meta FROM projects WHERE id = ?").get(e);if(!t||t.meta==null)return null;try{const s=JSON.parse(String(t.meta));return s&&typeof s=="object"&&!Array.isArray(s)?s:null}catch{return null}}setMeta(e,t){const s={...this.getMeta(e)??{},...t};this.db.prepare("UPDATE projects SET meta = ? WHERE id = ?").run(JSON.stringify(s),e)}}function n(r){return{id:Number(r.id),path:String(r.path),name:String(r.name),token:String(r.token),source:r.source,registeredAt:String(r.registered_at),lastSeenAt:r.last_seen_at==null?null:String(r.last_seen_at),meta:r.meta==null?null:String(r.meta),sortOrder:r.sort_order==null?null:Number(r.sort_order),archivedAt:r.archived_at==null?null:String(r.archived_at)}}

package/node_modules/@weavecode/server/dist/repositories/push-subscriptions.js

@@ -1,4 +1,4 @@
-export class PushSubscriptionRepository{db;constructor(t){this.db=t}upsert(t){return this.db.prepare(`INSERT INTO push_subscriptions (endpoint, p256dh, auth, user_agent, created_at)
+export class PushSubscriptionRepository{db;constructor(e){this.db=e}upsert(e){return this.db.prepare(`INSERT INTO push_subscriptions (endpoint, p256dh, auth, user_agent, created_at)
          VALUES (?, ?, ?, ?, ?)
          ON CONFLICT(endpoint) DO UPDATE SET p256dh = excluded.p256dh, auth = excluded.auth,
-           user_agent = excluded.user_agent`).run(t.endpoint,t.p256dh,t.auth,t.userAgent??null,new Date().toISOString()),this.getById(t.endpoint)}getById(t){const n=this.db.prepare("SELECT * FROM push_subscriptions WHERE endpoint = ?").get(t);return n?r(n):void 0}list(){return this.db.prepare("SELECT * FROM push_subscriptions ORDER BY created_at, endpoint").all().map(r)}deleteByEndpoint(t){return Number(this.db.prepare("DELETE FROM push_subscriptions WHERE endpoint = ?").run(t).changes)===1}}function r(e){return{endpoint:String(e.endpoint),p256dh:String(e.p256dh),auth:String(e.auth),userAgent:e.user_agent==null?null:String(e.user_agent),createdAt:String(e.created_at)}}
+           user_agent = excluded.user_agent`).run(e.endpoint,e.p256dh,e.auth,e.userAgent??null,new Date().toISOString()),this.getById(e.endpoint)}getById(e){const n=this.db.prepare("SELECT * FROM push_subscriptions WHERE endpoint = ?").get(e);return n?r(n):void 0}list(){return this.db.prepare("SELECT * FROM push_subscriptions ORDER BY created_at, endpoint").all().map(r)}deleteByEndpoint(e){return Number(this.db.prepare("DELETE FROM push_subscriptions WHERE endpoint = ?").run(e).changes)===1}}function r(t){return{endpoint:String(t.endpoint),p256dh:String(t.p256dh),auth:String(t.auth),userAgent:t.user_agent==null?null:String(t.user_agent),createdAt:String(t.created_at)}}

package/node_modules/@weavecode/server/dist/repositories/session-watches.js

@@ -1,5 +1,5 @@
-export const WATCH_ON_VALUES=["idle","turnEnd","messageFailed"],DEFAULT_WATCH_ON=["idle"];export class SessionWatchRepository{db;constructor(e){this.db=e}insert(e){const t=this.db.prepare(`INSERT INTO session_watches (watcher_session_id, target_session_id, notify, on_events, remaining, created_at)
-         VALUES (?, ?, ?, ?, ?, ?)`).run(e.watcherSessionId,e.targetSessionId,e.notify,JSON.stringify(e.onEvents?.length?e.onEvents:DEFAULT_WATCH_ON),e.times===void 0?1:e.times,new Date().toISOString());return this.getById(Number(t.lastInsertRowid))}getById(e){const t=this.db.prepare("SELECT * FROM session_watches WHERE id = ?").get(e);return t?n(t):void 0}listPendingByTarget(e){return this.db.prepare("SELECT * FROM session_watches WHERE target_session_id = ? AND fired_at IS NULL").all(e).map(n)}listPending(){return this.db.prepare("SELECT * FROM session_watches WHERE fired_at IS NULL ORDER BY id").all().map(n)}consumeHit(e){if(Number(this.db.prepare(`UPDATE session_watches SET remaining = remaining - 1
-           WHERE id = ? AND fired_at IS NULL AND remaining > 0`).run(e).changes)===1)return this.db.prepare("UPDATE session_watches SET fired_at = ? WHERE id = ? AND remaining = 0 AND fired_at IS NULL").run(new Date().toISOString(),e),this.getById(e)??null;const t=this.getById(e);return t&&t.remaining===null&&t.firedAt===null?t:null}updateById(e,t){const i=this.getById(e);if(!(!i||i.firedAt!==null))return this.db.prepare("UPDATE session_watches SET on_events = ?, remaining = ? WHERE id = ? AND fired_at IS NULL").run(JSON.stringify(t.onEvents??i.onEvents),t.remaining,e),this.getById(e)}deleteById(e){return Number(this.db.prepare("DELETE FROM session_watches WHERE id = ?").run(e).changes)===1}deleteBySession(e){return Number(this.db.prepare("DELETE FROM session_watches WHERE target_session_id = ? OR watcher_session_id = ?").run(e,e).changes)}deleteByProject(e){return Number(this.db.prepare(`DELETE FROM session_watches
+export const WATCH_ON_VALUES=["idle","turnEnd","messageFailed"],DEFAULT_WATCH_ON=["idle"];export class SessionWatchRepository{db;constructor(e){this.db=e}insert(e){const s=this.db.prepare(`INSERT INTO session_watches (watcher_session_id, target_session_id, notify, on_events, remaining, created_at)
+         VALUES (?, ?, ?, ?, ?, ?)`).run(e.watcherSessionId,e.targetSessionId,e.notify,JSON.stringify(e.onEvents?.length?e.onEvents:DEFAULT_WATCH_ON),e.times===void 0?1:e.times,new Date().toISOString());return this.getById(Number(s.lastInsertRowid))}getById(e){const s=this.db.prepare("SELECT * FROM session_watches WHERE id = ?").get(e);return s?i(s):void 0}listPendingByTarget(e){return this.db.prepare("SELECT * FROM session_watches WHERE target_session_id = ? AND fired_at IS NULL").all(e).map(i)}listPending(){return this.db.prepare("SELECT * FROM session_watches WHERE fired_at IS NULL ORDER BY id").all().map(i)}consumeHit(e){if(Number(this.db.prepare(`UPDATE session_watches SET remaining = remaining - 1
+           WHERE id = ? AND fired_at IS NULL AND remaining > 0`).run(e).changes)===1)return this.db.prepare("UPDATE session_watches SET fired_at = ? WHERE id = ? AND remaining = 0 AND fired_at IS NULL").run(new Date().toISOString(),e),this.getById(e)??null;const t=this.getById(e);return t&&t.remaining===null&&t.firedAt===null?t:null}updateById(e,s){const t=this.getById(e);if(!(!t||t.firedAt!==null))return this.db.prepare("UPDATE session_watches SET on_events = ?, remaining = ? WHERE id = ? AND fired_at IS NULL").run(JSON.stringify(s.onEvents??t.onEvents),s.remaining,e),this.getById(e)}deleteById(e){return Number(this.db.prepare("DELETE FROM session_watches WHERE id = ?").run(e).changes)===1}deleteBySession(e){return Number(this.db.prepare("DELETE FROM session_watches WHERE target_session_id = ? OR watcher_session_id = ?").run(e,e).changes)}deleteByProject(e){return Number(this.db.prepare(`DELETE FROM session_watches
            WHERE target_session_id IN (SELECT session_id FROM sessions WHERE project_id = ?)
-              OR watcher_session_id IN (SELECT session_id FROM sessions WHERE project_id = ?)`).run(e,e).changes)}}function n(s){return{id:Number(s.id),watcherSessionId:s.watcher_session_id==null?null:String(s.watcher_session_id),targetSessionId:String(s.target_session_id),onEvents:parseOn(s.on_events),remaining:s.remaining==null?null:Number(s.remaining),notify:s.notify==null?null:String(s.notify),firedAt:s.fired_at==null?null:String(s.fired_at),createdAt:String(s.created_at)}}export function parseOn(s){if(typeof s!="string"||!s)return[...DEFAULT_WATCH_ON];try{const e=JSON.parse(s);if(!Array.isArray(e))return[...DEFAULT_WATCH_ON];const t=e.filter(i=>WATCH_ON_VALUES.includes(i));return t.length?t:[...DEFAULT_WATCH_ON]}catch{return[...DEFAULT_WATCH_ON]}}
+              OR watcher_session_id IN (SELECT session_id FROM sessions WHERE project_id = ?)`).run(e,e).changes)}}function i(n){return{id:Number(n.id),watcherSessionId:n.watcher_session_id==null?null:String(n.watcher_session_id),targetSessionId:String(n.target_session_id),onEvents:parseOn(n.on_events),remaining:n.remaining==null?null:Number(n.remaining),notify:n.notify==null?null:String(n.notify),firedAt:n.fired_at==null?null:String(n.fired_at),createdAt:String(n.created_at)}}export function parseOn(n){if(typeof n!="string"||!n)return[...DEFAULT_WATCH_ON];try{const e=JSON.parse(n);if(!Array.isArray(e))return[...DEFAULT_WATCH_ON];const s=e.filter(t=>WATCH_ON_VALUES.includes(t));return s.length?s:[...DEFAULT_WATCH_ON]}catch{return[...DEFAULT_WATCH_ON]}}

package/node_modules/@weavecode/server/dist/repositories/sessions.d.ts

@@ -19,12 +19,13 @@ export interface SessionRow {
     /** 最新一条 hook 事件类型（listWithCounts 查询填充）——web 状态总线判「关闭」
      *  （SessionEnd）不必再为每个会话拉事件。 */
     lastEventType?: string | null;
-    /** 无 prompt 幽灵会话的自动清理时刻（= lastSeenAt + 保活窗；listWithCounts
-     *  派生，null = 收到过 prompt 的正常会话，只走全局事件保留期）。 */
+    /** 自动移除时刻（= lastSeenAt + 该档保留窗；listWithCounts 派生，两档——没等到
+     *  用户 prompt 的新会话快过期，收到过 prompt 的走设置页「无操作会话 n 天后自动
+     *  移除」那条线；会话行剩余存活倒计时即读它）。 */
     autoDeleteAt?: string | null;
 }
-/** 无 prompt（纯会话引导事件）会话的保活窗：静默超过该窗即自动清理——刚开的
- *  会话在第一条 prompt 落下前正是这个形状，窗口就是「延迟删除」的分界线。 */
+/** 没等到用户 prompt 的新会话快过期窗（ms）= 1 小时：新建会话要看得见，但无 prompt
+ *  的会话不配占 90 天窗口。 */
 export declare const PROMPTLESS_GRACE_MS: number;
 /**
  * sessions 表：daemon 自存的会话标题（不写回 Claude Code 内部文件）。
@@ -48,6 +49,18 @@ export declare class SessionRepository {
      * 会话不存在 → null；存在但零事件 → false（同列表口径：无 ups 即不判开）。
      */
     turnOpenOf(sessionId: string): boolean | null;
+    /**
+     * 单会话判活输入（`daemon/claude-liveness.ts` 的 `pidAliveOf` 消费形状）——
+     * harness / lastEventType / eventCount 都是 listWithCounts 的计算字段，单行版与
+     * 列表版同源同判据（同 turnOpenOf 的先例）。会话不存在 → null。
+     */
+    livenessRowOf(sessionId: string): {
+        sessionId: string;
+        harness: Harness | null;
+        lastSeenAt: string;
+        lastEventType: string | null;
+        eventCount: number;
+    } | null;
     /**
      * dashboard 改名：display 名（title）立即落，pending_title 负责把新名同步给
      * Claude 侧（下次 SessionStart(resume)/UserPromptSubmit 经 hook 下发）——dashboard

package/node_modules/@weavecode/server/dist/repositories/sessions.js

@@ -1,5 +1,5 @@
-import{isHarness as E}from"@weavecode/core";export const PROMPTLESS_GRACE_MS=10*6e4;export class SessionRepository{db;constructor(e){this.db=e}touch(e,s){const t=new Date().toISOString();return this.db.prepare(`INSERT INTO sessions (session_id, project_id, last_seen_at, created_at)
+import{isHarness as _}from"@weavecode/core";import{readDaemonSettingsSync as a,DEFAULT_SESSION_IDLE_DAYS as u}from"../daemon/settings.js";export const PROMPTLESS_GRACE_MS=60*6e4;function p(){return(a().sessions?.idleDays??u)*864e5}export class SessionRepository{db;constructor(e){this.db=e}touch(e,s){const t=new Date().toISOString();return this.db.prepare(`INSERT INTO sessions (session_id, project_id, last_seen_at, created_at)
          VALUES (?, ?, ?, ?)
          ON CONFLICT(session_id) DO UPDATE SET
            last_seen_at = excluded.last_seen_at,
-           project_id = COALESCE(sessions.project_id, excluded.project_id)`).run(e,s??null,t,t),this.getBySessionId(e)}getBySessionId(e){const s=this.db.prepare("SELECT * FROM sessions WHERE session_id = ?").get(e);return s?o(s):void 0}list(e){return(e===void 0?this.db.prepare("SELECT * FROM sessions ORDER BY created_at DESC LIMIT 200").all():this.db.prepare("SELECT * FROM sessions WHERE project_id = ? ORDER BY created_at DESC LIMIT 200").all(e)).map(o)}listWithCounts(e){const s="SELECT s.*, COUNT(e.id) AS event_count, (SELECT e2.source FROM hook_events e2 WHERE e2.session_id = s.session_id ORDER BY e2.id DESC LIMIT 1) AS harness, (SELECT e5.event_type FROM hook_events e5 WHERE e5.session_id = s.session_id ORDER BY e5.id DESC LIMIT 1) AS last_event_type, (SELECT MAX(e3.id) FROM hook_events e3 WHERE e3.session_id = s.session_id AND e3.event_type = 'UserPromptSubmit') AS last_ups, (SELECT MAX(e4.id) FROM hook_events e4 WHERE e4.session_id = s.session_id AND e4.event_type IN ('Stop', 'SessionEnd')) AS last_stop FROM sessions s LEFT JOIN hook_events e ON e.session_id = s.session_id";return(e===void 0?this.db.prepare(`${s} GROUP BY s.session_id ORDER BY s.created_at DESC LIMIT 200`).all():this.db.prepare(`${s} WHERE s.project_id = ? GROUP BY s.session_id ORDER BY s.created_at DESC LIMIT 200`).all(e)).map(t=>{const i=t.harness,r=t.last_ups,l=t.last_stop,d=t.last_event_type;return{...o(t),eventCount:Number(t.event_count??0),harness:E(i)?i:null,turnOpen:r!=null&&(l==null||Number(r)>Number(l)),lastEventType:d??null,autoDeleteAt:r==null?new Date(Date.parse(String(t.last_seen_at))+PROMPTLESS_GRACE_MS).toISOString():null}})}turnOpenOf(e){const s=this.db.prepare("SELECT (SELECT MAX(e3.id) FROM hook_events e3 WHERE e3.session_id = ? AND e3.event_type = 'UserPromptSubmit') AS last_ups, (SELECT MAX(e4.id) FROM hook_events e4 WHERE e4.session_id = ? AND e4.event_type IN ('Stop', 'SessionEnd')) AS last_stop").get(e,e);if(!this.getBySessionId(e))return null;const t=s?.last_ups??null,i=s?.last_stop??null;return t!=null&&(i==null||Number(t)>Number(i))}setPendingTitle(e,s){const t=this.getBySessionId(e);if(t)return t.pendingTitle===s?t:t.title===s?(t.pendingTitle!=null&&this.db.prepare("UPDATE sessions SET pending_title = NULL WHERE session_id = ?").run(e),this.getBySessionId(e)):(this.db.prepare("UPDATE sessions SET title = ?, pending_title = ? WHERE session_id = ?").run(s,s,e),this.getBySessionId(e))}applyReportedTitle(e,s){const t=this.getBySessionId(e);return t?t.pendingTitle!=null?s===t.pendingTitle?(this.db.prepare("UPDATE sessions SET title = ?, pending_title = NULL WHERE session_id = ?").run(s,e),t.title!==s):!1:s!=null&&s!==t.title?(this.db.prepare("UPDATE sessions SET title = ? WHERE session_id = ?").run(s,e),!0):!1:!1}confirmPendingTitle(e,s){return this.db.prepare("UPDATE sessions SET title = ?, pending_title = NULL WHERE session_id = ? AND pending_title = ?").run(s,e,s).changes>0}remove(e){this.db.prepare("DELETE FROM sessions WHERE session_id = ?").run(e)}removeByProject(e){return Number(this.db.prepare("DELETE FROM sessions WHERE project_id = ?").run(e).changes)}}function o(n){return{sessionId:String(n.session_id),projectId:n.project_id==null?null:Number(n.project_id),title:n.title==null?null:String(n.title),pendingTitle:n.pending_title==null?null:String(n.pending_title),lastSeenAt:String(n.last_seen_at),createdAt:String(n.created_at)}}
+           project_id = COALESCE(sessions.project_id, excluded.project_id)`).run(e,s??null,t,t),this.getBySessionId(e)}getBySessionId(e){const s=this.db.prepare("SELECT * FROM sessions WHERE session_id = ?").get(e);return s?o(s):void 0}list(e){return(e===void 0?this.db.prepare("SELECT * FROM sessions ORDER BY created_at DESC LIMIT 200").all():this.db.prepare("SELECT * FROM sessions WHERE project_id = ? ORDER BY created_at DESC LIMIT 200").all(e)).map(o)}listWithCounts(e){const s="SELECT s.*, COUNT(e.id) AS event_count, (SELECT e2.source FROM hook_events e2 WHERE e2.session_id = s.session_id ORDER BY e2.id DESC LIMIT 1) AS harness, (SELECT e5.event_type FROM hook_events e5 WHERE e5.session_id = s.session_id ORDER BY e5.id DESC LIMIT 1) AS last_event_type, (SELECT MAX(e3.id) FROM hook_events e3 WHERE e3.session_id = s.session_id AND e3.event_type = 'UserPromptSubmit') AS last_ups, (SELECT MAX(e4.id) FROM hook_events e4 WHERE e4.session_id = s.session_id AND e4.event_type IN ('Stop', 'StopFailure', 'SessionEnd')) AS last_stop FROM sessions s LEFT JOIN hook_events e ON e.session_id = s.session_id";return(e===void 0?this.db.prepare(`${s} GROUP BY s.session_id ORDER BY s.created_at DESC LIMIT 200`).all():this.db.prepare(`${s} WHERE s.project_id = ? GROUP BY s.session_id ORDER BY s.created_at DESC LIMIT 200`).all(e)).map(i=>{const l=i.harness,r=i.last_ups,E=i.last_stop,d=i.last_event_type;return{...o(i),eventCount:Number(i.event_count??0),harness:_(l)?l:null,turnOpen:r!=null&&(E==null||Number(r)>Number(E)),lastEventType:d??null,autoDeleteAt:new Date(Date.parse(String(i.last_seen_at))+(r==null?PROMPTLESS_GRACE_MS:p())).toISOString()}})}turnOpenOf(e){const s=this.db.prepare("SELECT (SELECT MAX(e3.id) FROM hook_events e3 WHERE e3.session_id = ? AND e3.event_type = 'UserPromptSubmit') AS last_ups, (SELECT MAX(e4.id) FROM hook_events e4 WHERE e4.session_id = ? AND e4.event_type IN ('Stop', 'StopFailure', 'SessionEnd')) AS last_stop").get(e,e);if(!this.getBySessionId(e))return null;const t=s?.last_ups??null,i=s?.last_stop??null;return t!=null&&(i==null||Number(t)>Number(i))}livenessRowOf(e){const s=this.db.prepare("SELECT s.session_id, s.last_seen_at, COUNT(e.id) AS event_count, (SELECT e2.source FROM hook_events e2 WHERE e2.session_id = s.session_id ORDER BY e2.id DESC LIMIT 1) AS harness, (SELECT e5.event_type FROM hook_events e5 WHERE e5.session_id = s.session_id ORDER BY e5.id DESC LIMIT 1) AS last_event_type FROM sessions s LEFT JOIN hook_events e ON e.session_id = s.session_id WHERE s.session_id = ? GROUP BY s.session_id").get(e);if(!s)return null;const t=s.harness;return{sessionId:String(s.session_id),harness:_(t)?t:null,lastSeenAt:String(s.last_seen_at),lastEventType:s.last_event_type==null?null:String(s.last_event_type),eventCount:Number(s.event_count??0)}}setPendingTitle(e,s){const t=this.getBySessionId(e);if(t)return t.pendingTitle===s?t:t.title===s?(t.pendingTitle!=null&&this.db.prepare("UPDATE sessions SET pending_title = NULL WHERE session_id = ?").run(e),this.getBySessionId(e)):(this.db.prepare("UPDATE sessions SET title = ?, pending_title = ? WHERE session_id = ?").run(s,s,e),this.getBySessionId(e))}applyReportedTitle(e,s){const t=this.getBySessionId(e);return t?t.pendingTitle!=null?s===t.pendingTitle?(this.db.prepare("UPDATE sessions SET title = ?, pending_title = NULL WHERE session_id = ?").run(s,e),t.title!==s):!1:s!=null&&s!==t.title?(this.db.prepare("UPDATE sessions SET title = ? WHERE session_id = ?").run(s,e),!0):!1:!1}confirmPendingTitle(e,s){return this.db.prepare("UPDATE sessions SET title = ?, pending_title = NULL WHERE session_id = ? AND pending_title = ?").run(s,e,s).changes>0}remove(e){this.db.prepare("DELETE FROM sessions WHERE session_id = ?").run(e)}removeByProject(e){return Number(this.db.prepare("DELETE FROM sessions WHERE project_id = ?").run(e).changes)}}function o(n){return{sessionId:String(n.session_id),projectId:n.project_id==null?null:Number(n.project_id),title:n.title==null?null:String(n.title),pendingTitle:n.pending_title==null?null:String(n.pending_title),lastSeenAt:String(n.last_seen_at),createdAt:String(n.created_at)}}

package/node_modules/@weavecode/server/dist/repositories/uploads.d.ts

@@ -0,0 +1,66 @@
+import type { DatabaseSync } from 'node:sqlite';
+/**
+ * 会话图片上传：文件内容寻址（sha256 = id）落 `<dataDir>/uploads/<id>.<ext>`，
+ * 行只记展示名与媒体类型。**上传 ≠ 投递**——资源不因消息发送而搬家，harness
+ * 拿到的是这个稳定绝对路径（claude 的粘贴处理器按扩展名认出它是图）。
+ * 收的四种类型 = claude 路径识别集 `\.(png|jpe?g|gif|webp)$`（别的类型即使能进
+ * content block 也不进路径文法，v1 不收）。
+ */
+export declare const UPLOAD_MEDIA_TYPES: readonly ["image/png", "image/jpeg", "image/gif", "image/webp"];
+export type UploadMediaType = (typeof UPLOAD_MEDIA_TYPES)[number];
+/** 单张上限：对齐 claude 自己贴图的粘贴缓存上限（~10MB）。 */
+export declare const UPLOAD_MAX_BYTES: number;
+/**
+ * 孤儿回收的宽限期：编辑器里选了图、还没发出去的那份此刻同样「无引用」，
+ * 清理不能把它从用户手上抽走。
+ */
+export declare const UPLOAD_ORPHAN_GRACE_MS: number;
+export interface UploadRow {
+    id: string;
+    mediaType: UploadMediaType;
+    name: string;
+    size: number;
+    createdAt: string;
+}
+export declare class UploadRepository {
+    private readonly db;
+    private readonly dir;
+    constructor(db: DatabaseSync, dir?: string);
+    /**
+     * 落盘 + 登记（内容寻址，重复上传即 no-op）。返回已存行。
+     * 调用方先验过媒体类型与大小，这里只按类型定扩展名。
+     */
+    save(input: {
+        name: string;
+        mediaType: UploadMediaType;
+        bytes: Buffer;
+    }): UploadRow;
+    getById(id: string): UploadRow | undefined;
+    /** 磁盘绝对路径（harness 的 `composePrompt` 引用的就是它）。 */
+    filePath(id: string, mediaType: UploadMediaType): string;
+    /** 投递引用（id + 展示名 + 落盘绝对路径）；任一 id 查不到即 null（整条拒绝）。 */
+    refsOf(ids: readonly string[]): Array<{
+        id: string;
+        name: string;
+        mediaType: string;
+        path: string;
+    }> | null;
+    /** 按行里记的媒体类型反查文件（serve 用；行不存在 / 文件被删 = undefined）。 */
+    fileOf(id: string): {
+        row: UploadRow;
+        bytes: Buffer;
+    } | undefined;
+    /** 挂到开轮事件上（对话气泡的缩略图指针；事件删则级联删）。 */
+    linkToEvent(eventId: number, uploadIds: readonly string[]): void;
+    /**
+     * 孤儿回收：没有任何 `event_images` 引用的上传件（文件 + 行）。图只被会话事件
+     * 引用——事件随会话/项目一起清掉之后就再没有展示面（对话弹窗是事件的投影）。
+     * 返清掉的条数。
+     */
+    pruneUnreferenced(olderThanMs?: number, now?: number): number;
+    /**
+     * 会话各开轮事件随附的图（一次查询，不逐行 join）。
+     * 返回 eventId → 指针表，web 据此把缩略图装到对话条目上。
+     */
+    imagesBySession(sessionId: string): Map<number, UploadRow[]>;
+}

package/node_modules/@weavecode/server/dist/repositories/uploads.js

@@ -0,0 +1,7 @@
+import{createHash as p}from"node:crypto";import{mkdirSync as m,readFileSync as c,writeFileSync as u,existsSync as o,rmSync as g}from"node:fs";import f from"node:path";import{getUploadsDir as h}from"../db/paths.js";export const UPLOAD_MEDIA_TYPES=["image/png","image/jpeg","image/gif","image/webp"],UPLOAD_MAX_BYTES=10*1024*1024,UPLOAD_ORPHAN_GRACE_MS=60*6e4;const l={"image/png":".png","image/jpeg":".jpg","image/gif":".gif","image/webp":".webp"};export class UploadRepository{db;dir;constructor(t,e=h()){this.db=t,this.dir=e}save(t){const e=p("sha256").update(t.bytes).digest("hex");m(this.dir,{recursive:!0});const i=this.filePath(e,t.mediaType);return o(i)||u(i,t.bytes),this.db.prepare(`INSERT INTO uploads (id, media_type, name, size, created_at) VALUES (?, ?, ?, ?, ?)
+         ON CONFLICT(id) DO NOTHING`).run(e,t.mediaType,t.name,t.bytes.length,new Date().toISOString()),this.getById(e)}getById(t){const e=this.db.prepare("SELECT * FROM uploads WHERE id = ?").get(t);return e?a(e):void 0}filePath(t,e){return f.join(this.dir,`${t}${l[e]}`)}refsOf(t){const e=[];for(const i of t){const r=this.getById(i);if(!r)return null;e.push({id:r.id,name:r.name,mediaType:r.mediaType,path:this.filePath(r.id,r.mediaType)})}return e}fileOf(t){const e=this.getById(t);if(!e)return;const i=this.filePath(e.id,e.mediaType);if(o(i))return{row:e,bytes:c(i)}}linkToEvent(t,e){const i=this.db.prepare("INSERT INTO event_images (event_id, upload_id) VALUES (?, ?) ON CONFLICT DO NOTHING");for(const r of e)i.run(t,r)}pruneUnreferenced(t=UPLOAD_ORPHAN_GRACE_MS,e=Date.now()){const i=this.db.prepare(`SELECT id, media_type FROM uploads
+          WHERE created_at <= ? AND id NOT IN (SELECT upload_id FROM event_images)`).all(new Date(e-t).toISOString()),r=this.db.prepare("DELETE FROM uploads WHERE id = ?");for(const d of i)g(this.filePath(d.id,d.media_type),{force:!0}),r.run(d.id);return i.length}imagesBySession(t){const e=this.db.prepare(`SELECT e.event_id AS eventId, u.* FROM event_images e
+           JOIN uploads u ON u.id = e.upload_id
+           JOIN hook_events h ON h.id = e.event_id
+          WHERE h.session_id = ?
+          ORDER BY e.event_id, u.created_at`).all(t),i=new Map;for(const r of e){const d=Number(r.eventId),s=i.get(d)??[];s.push(a(r)),i.set(d,s)}return i}}function a(n){return{id:String(n.id),mediaType:String(n.media_type),name:String(n.name),size:Number(n.size),createdAt:String(n.created_at)}}

package/node_modules/@weavecode/server/dist/statusline/cache-sweeper.js

@@ -1 +1 @@
-import{existsSync as l,readdirSync as w,readFileSync as d,statSync as m,unlinkSync as L,writeFileSync as j}from"node:fs";import E from"node:os";import S from"node:path";import{statuslineCacheDir as _}from"./generator.js";export const SWEEP_INTERVAL_MS=10*6e4,FILE_STALE_MS=1440*6e4,TMP_STALE_MS=60*6e4;const x=["weave-sl-","weave-slc-"];export const LEGACY_STALE_MS=60*6e4;export class StatuslineCacheSweeper{dir;tmpDir;now;constructor(t=_(),e=E.tmpdir(),n=Date.now){this.dir=t,this.tmpDir=e,this.now=n}sweep(){return this.sweepCacheDir()+this.sweepLegacyTmp()}sweepCacheDir(){if(!l(this.dir))return 0;const t=this.now();let e=0;for(const n of y(this.dir)){const r=S.join(this.dir,n);if(n.endsWith(".tmp")){f(r,t,TMP_STALE_MS)&&(c(r),e++);continue}if(!n.endsWith(".json"))continue;if(f(r,t,FILE_STALE_MS)){c(r),e++;continue}let i;try{i=JSON.parse(d(r,"utf8"))}catch{c(r),e++;continue}const o=i.git??{},a=i.tokens??{};let p=!1;for(const[h,u]of Object.entries(o))(!u||typeof u.expires!="number"||u.expires<t)&&(delete o[h],p=!0);for(const h of Object.keys(a))this.transcriptLive(h,t)||(delete a[h],p=!0);if(Object.keys(o).length===0&&Object.keys(a).length===0){c(r),e++;continue}if(p)try{j(r,JSON.stringify({...i,git:o,tokens:a}))}catch{}}return e}transcriptLive(t,e){try{return e-m(t).mtimeMs<=FILE_STALE_MS}catch{return!1}}sweepLegacyTmp(){const t=this.now();let e=0;for(const n of y(this.tmpDir)){if(!n.endsWith(".json")||!x.some(i=>n.startsWith(i)))continue;const r=S.join(this.tmpDir,n);f(r,t,LEGACY_STALE_MS)&&(c(r),e++)}return e}start(){this.sweep();const t=setInterval(()=>this.sweep(),SWEEP_INTERVAL_MS);return t.unref(),t}}export function startStatuslineCacheSweeper(){return new StatuslineCacheSweeper().start()}function y(s){try{return w(s)}catch{return[]}}function f(s,t,e){try{return t-m(s).mtimeMs>e}catch{return!1}}function c(s){try{L(s)}catch{}}
+import{existsSync as y,readdirSync as d,readFileSync as w,renameSync as _,statSync as m,unlinkSync as E,writeFileSync as L}from"node:fs";import x from"node:os";import l from"node:path";import{statuslineCacheDir as j}from"./generator.js";export const SWEEP_INTERVAL_MS=10*6e4,FILE_STALE_MS=1440*6e4,TMP_STALE_MS=60*6e4;const D=["weave-sl-","weave-slc-"];export const LEGACY_STALE_MS=60*6e4;export class StatuslineCacheSweeper{dir;tmpDir;now;constructor(t=j(),e=x.tmpdir(),n=Date.now){this.dir=t,this.tmpDir=e,this.now=n}sweep(){return this.sweepCacheDir()+this.sweepLegacyTmp()}sweepCacheDir(){if(!y(this.dir))return 0;const t=this.now();let e=0;for(const n of S(this.dir)){const r=l.join(this.dir,n);if(n.endsWith(".tmp")){u(r,t,TMP_STALE_MS)&&(c(r),e++);continue}if(!n.endsWith(".json"))continue;if(u(r,t,FILE_STALE_MS)){c(r),e++;continue}let o;try{o=JSON.parse(w(r,"utf8"))}catch{c(r),e++;continue}const a=o.git??{},p=o.tokens??{};let f=!1;for(const[i,h]of Object.entries(a))(!h||typeof h.expires!="number"||h.expires<t)&&(delete a[i],f=!0);for(const i of Object.keys(p))this.transcriptLive(i,t)||(delete p[i],f=!0);if(Object.keys(a).length===0&&Object.keys(p).length===0){c(r),e++;continue}if(f){const i=`${r}.${process.pid}.tmp`;try{L(i,JSON.stringify({...o,git:a,tokens:p})),_(i,r)}catch{}}}return e}transcriptLive(t,e){try{return e-m(t).mtimeMs<=FILE_STALE_MS}catch{return!1}}sweepLegacyTmp(){const t=this.now();let e=0;for(const n of S(this.tmpDir)){if(!n.endsWith(".json")||!D.some(o=>n.startsWith(o)))continue;const r=l.join(this.tmpDir,n);u(r,t,LEGACY_STALE_MS)&&(c(r),e++)}return e}start(){this.sweep();const t=setInterval(()=>this.sweep(),SWEEP_INTERVAL_MS);return t.unref(),t}}export function startStatuslineCacheSweeper(){return new StatuslineCacheSweeper().start()}function S(s){try{return d(s)}catch{return[]}}function u(s,t,e){try{return t-m(s).mtimeMs>e}catch{return!1}}function c(s){try{E(s)}catch{}}