@weavecode/weave 0.1.1 → 0.1.3

package/node_modules/@weavecode/harness/dist/init/pipeline.js

@@ -1,2 +1,2 @@
-import{readdir as d,readFile as p,unlink as g,writeFile as S}from"node:fs/promises";import r from"node:path";import{ensureDir as h,fileExists as b,writeFileIfAbsent as A}from"@weavecode/core";export class InitPipeline{ctx;skipped=[];skipReasons=new Map;constructor(t){this.ctx=t}async runSurface(){await this.ensureDirs(),await this.writeSettings(),await this.writeMcp(),await this.copySkills(),await this.copyCommands(),await this.copyAgents(),await this.injectPluginTemplates(),await this.writeHelpers()}injectPluginTemplates(){}skip(t,e){this.skipped.push(t),this.skipReasons.set(t,e)}async writeOrMergeJson(t,e,s){if(!s&&await b(t)){const n=await x(t);return n===void 0?!1:(await k(t,m(n,e)),!0)}return await k(t,e),!0}async copyDirIfAbsent(t,e,s=!1){let n;try{n=await d(t,{withFileTypes:!0})}catch{return}await h(e);for(const a of n){const o=r.join(t,a.name),c=r.join(e,a.name);if(a.isDirectory())await this.copyDirIfAbsent(o,c,s);else{const w=await p(o,"utf-8");await A(c,w,s)}}}async sweepMarked(t,e,s){const n=new Set(e),a=[],o=async c=>{let w;try{w=await d(c,{withFileTypes:!0})}catch{return}for(const l of w){const u=r.join(c,l.name);if(l.isDirectory()){await o(u);continue}const j=r.relative(t,u).split(r.sep).join("/");if(n.has(j))continue;const y=await p(u,"utf-8").catch(()=>null);y!==null&&y.includes(s)&&(await g(u),a.push(u))}};return await o(t),a}}function m(i,t){const e={...i};for(const[s,n]of Object.entries(t)){const a=e[s];e[s]=f(a)&&f(n)?m(a,n):n}return e}function f(i){return typeof i=="object"&&i!==null&&!Array.isArray(i)}async function x(i){try{const t=await p(i,"utf-8"),e=JSON.parse(t);return f(e)?e:void 0}catch{return}}async function k(i,t){await h(r.dirname(i)),await S(i,JSON.stringify(t,null,2)+`
+import{readdir as h,readFile as p,unlink as g,writeFile as A}from"node:fs/promises";import r from"node:path";import{ensureDir as m,fileExists as S,writeFileIfAbsent as b}from"@weavecode/core";export class InitPipeline{ctx;skipped=[];skipReasons=new Map;constructor(t){this.ctx=t}async runSurface(){await this.ensureDirs(),await this.writeSettings(),await this.writeMcp(),await this.copySkills(),await this.copyCommands(),await this.copyAgents(),await this.injectPluginTemplates(),await this.writeHelpers()}injectPluginTemplates(){}skip(t,i){this.skipped.push(t),this.skipReasons.set(t,i)}async writeOrMergeJson(t,i,n){if(!n&&await S(t)){const s=await D(t);return s===void 0?!1:(await j(t,d(s,i)),!0)}return await j(t,i),!0}async copyDirIfAbsent(t,i,n=!1){let s;try{s=await h(t,{withFileTypes:!0})}catch{return}await m(i);for(const e of s){const o=r.join(t,e.name),c=r.join(i,e.name);if(e.isDirectory())await this.copyDirIfAbsent(o,c,n);else{const u=await p(o,"utf-8");await b(c,u,n)}}}async sweepMarked(t,i,n){const s=new Set(i),e=[],o=async c=>{let u;try{u=await h(c,{withFileTypes:!0})}catch{return}for(const f of u){const w=r.join(c,f.name);if(f.isDirectory()){await o(w);continue}const k=r.relative(t,w).split(r.sep).join("/");if(s.has(k))continue;const y=await p(w,"utf-8").catch(()=>null);y!==null&&y.includes(n)&&(await g(w),e.push(w))}};return await o(t),e}}function d(a,t){const i={...a};for(const[n,s]of Object.entries(t)){const e=i[n];i[n]=l(e)&&l(s)?d(e,s):s}return i}function l(a){return typeof a=="object"&&a!==null&&!Array.isArray(a)}async function D(a){try{const t=await p(a,"utf-8"),i=JSON.parse(t);return l(i)?i:void 0}catch{return}}async function j(a,t){await m(r.dirname(a)),await A(a,JSON.stringify(t,null,2)+`
 `,"utf-8")}

package/node_modules/@weavecode/harness/dist/registry-wiring.js

@@ -1 +1 @@
-import{CLAUDE_DRIVER as t}from"./claude/index.js";import{CODEX_DRIVER as o}from"./codex/index.js";import{HarnessRegistry as i}from"./driver.js";export const HARNESS_DRIVERS={claude:t,codex:o};export function registerRuntimeDrivers(r){for(const e of Object.values(HARNESS_DRIVERS))r.register(e)}export function createRuntimeRegistry(){const r=new i;return registerRuntimeDrivers(r),r}
+import{CLAUDE_DRIVER as t}from"./claude/index.js";import{CODEX_DRIVER as o}from"./codex/index.js";import{HarnessRegistry as s}from"./driver.js";export const HARNESS_DRIVERS={claude:t,codex:o};export function registerRuntimeDrivers(r){for(const e of Object.values(HARNESS_DRIVERS))r.register(e)}export function createRuntimeRegistry(){const r=new s;return registerRuntimeDrivers(r),r}

package/node_modules/@weavecode/harness/dist/shared/install-link.js

@@ -1 +1 @@
-import{cp as a,lstat as c,mkdir as s,rm as u,symlink as l,unlink as m}from"node:fs/promises";import o from"node:path";export async function linkOrCopy(r,t){const i=o.resolve(r);await s(o.dirname(t),{recursive:!0});try{return await l(i,t,process.platform==="win32"?"junction":"dir"),"link"}catch(e){const n=e.code;if(n!=="EPERM"&&n!=="EEXIST"&&n!=="ENOTSUP")throw e}return await a(i,t,{recursive:!0}),"copy"}export async function removeInstalled(r){let t;try{t=await c(r)}catch{return"absent"}return t.isSymbolicLink()?(await m(r),"link"):(await u(r,{recursive:!0,force:!0}),"removed")}export async function installForm(r){try{return(await c(r)).isSymbolicLink()?"link":"copy"}catch{return"absent"}}
+import{cp as c,lstat as e,mkdir as s,rm as l,symlink as m,unlink as u}from"node:fs/promises";import o from"node:path";export async function linkOrCopy(r,t){const n=o.resolve(r);await s(o.dirname(t),{recursive:!0});try{return await m(n,t,process.platform==="win32"?"junction":"dir"),"link"}catch(a){const i=a.code;if(i!=="EPERM"&&i!=="EEXIST"&&i!=="ENOTSUP")throw a}return await c(n,t,{recursive:!0}),"copy"}export async function removeInstalled(r){let t;try{t=await e(r)}catch{return"absent"}return t.isSymbolicLink()?(await u(r),"link"):(await l(r,{recursive:!0,force:!0}),"removed")}export async function installForm(r){try{return(await e(r)).isSymbolicLink()?"link":"copy"}catch{return"absent"}}

package/node_modules/@weavecode/harness/dist/shared/json-cap.d.ts

@@ -0,0 +1,11 @@
+/**
+ * 归一化 payload 的叶子上限（各 harness 的 normalize 共用）。
+ *
+ * 工具结果正文动辄整份文件（claude 实测库里 64k 行占 557MB，PostToolUse 一条平均
+ * 14KB、最大 7MB），而消费方只读开头一截（事件链摘要取 90 字符）+ 几个标量键。
+ * 4KB 高于问答预览面的 2000 字符阈值，故不会动到需要保真的字段。
+ */
+export declare const MAX_FIELD_CHARS = 4000;
+export declare const MAX_ARRAY_ITEMS = 200;
+/** 逐层裁掉超限的字符串叶子与数组尾巴（对象结构原样保留，键不丢）。 */
+export declare function capFields(value: unknown): unknown;

package/node_modules/@weavecode/harness/dist/shared/json-cap.js

@@ -0,0 +1 @@
+export const MAX_FIELD_CHARS=4e3,MAX_ARRAY_ITEMS=200;export function capFields(e){if(typeof e=="string")return e.length>4e3?`${e.slice(0,4e3)}\u2026`:e;if(Array.isArray(e))return e.slice(0,200).map(capFields);if(e&&typeof e=="object"){const r={};for(const[n,o]of Object.entries(e))r[n]=capFields(o);return r}return e}

package/node_modules/@weavecode/harness/dist/shared/turn-output.d.ts

@@ -0,0 +1,6 @@
+/**
+ * 每轮收尾事件上带的「这一轮最后说了什么」（`raw.last_assistant_message`）：claude 由
+ * 宿主原样上报，codex 适配器按同一键形归一（`codex/event-source.ts`），故读侧只有这一
+ * 处键形知识。非字符串 / 空 → null（空回合不摆空壳，调用方继续往前找）。
+ */
+export declare function turnOutputOf(raw: unknown): string | null;

package/node_modules/@weavecode/harness/dist/shared/turn-output.js

@@ -0,0 +1 @@
+export function turnOutputOf(n){const t=n?.last_assistant_message;return typeof t=="string"&&t.trim()?t:null}

package/node_modules/@weavecode/harness/dist/zcode/assets.d.ts

@@ -0,0 +1,8 @@
+import type { AssetSurface } from '../driver.js';
+/**
+ * ZCode 资产表面（skills + 两档 MCP）——`skillRootsForBase` 按级别给两根：
+ * `.zcode/skills`（ZCode 原生）与 `.agents/skills`（agents 兼容根，与 codex 共用）。
+ * 单文件资产面（commands/agents/…）ZCode 都没有，`FILE_ASSET_SPECS` 里也就没有
+ * 它的行，`targetDir` 一律抛错。
+ */
+export declare const ZCODE_ASSETS: AssetSurface;

package/node_modules/@weavecode/harness/dist/zcode/assets.js

@@ -0,0 +1 @@
+import c from"node:path";import{readZcodeMcp as l,removeZcodeMcp as n,upsertZcodeMcp as d,zcodeMcpFile as r}from"./mcp.js";const p=o=>c.join(o,".zcode","cli","config.json");export const ZCODE_ASSETS={harness:"zcode",targetDir(o){throw new Error(`"${o}" has no ZCode file-asset surface`)},projectSkillsDir:()=>".zcode/skills",globalSkillsRoots:o=>[c.join(o,...".zcode/skills".split("/")),c.join(o,...".agents/skills".split("/"))],userConfigFile:o=>p(o),mcpScopes:()=>["project","user"],mcpDest:(o,s)=>o==="project"?".zcode/config.json":c.join(s,...".zcode/cli/config.json".split("/")),mcpRead:(o,s,e)=>l(r(o,s,e)),mcpWrite:(o,s,e,i,t)=>d(r(o,s,e),i,t),mcpRemove:(o,s,e,i)=>n(r(o,s,e),i),classify(o){return o===".zcode"||o.startsWith(".zcode/")?!0:o.slice(o.lastIndexOf("/")+1)==="AGENTS.md"},ignore(o){return!(o===".zcode"||o.startsWith(".zcode/")||o==="AGENTS.md")}};

package/node_modules/@weavecode/harness/dist/zcode/capture.d.ts

@@ -0,0 +1,36 @@
+import type { CaptureDeps, CaptureScriptHealth, CaptureState, CaptureSurface } from '../driver.js';
+/**
+ * ZCode 采集面：**入口只能写用户级**。它的项目级 hooks 要过工作区信任，而信任
+ * 开关只有 protocol server 传 true（CLI/TUI 路径不传）⇒ 项目 `.zcode/config.json`
+ * 里的 hooks 在 TUI 里恒被拒。故 weave 的一条 hook 写进 `~/.zcode/cli/config.json`，
+ * 指到一份**全局脚本**；脚本自己按 `CLAUDE_PROJECT_DIR` 认项目、读该项目的
+ * `.weave/token` 算 shard——不是 weave 项目就什么都不写（与 claude 同一份脚本逻辑）。
+ */
+/** `~/.zcode/cli/config.json`（ZCode 的 DEFAULT_BASE_DIR + DEFAULT_CONFIG_FILE）。 */
+export declare const zcodeConfigFile: (home: string) => string;
+/** 全局脚本落点：`<configDir>/weave/hooks/zcode/hook-handler.cjs`（= `<dataDir>/hooks/zcode/`）。 */
+export declare function zcodeHookScript(configDir?: string): string;
+/** 一组 hook 是 weave 的：它的进程要么是那条脚本、要么命令行里写着那个路径。 */
+export declare function groupIsWeave(group: unknown): boolean;
+/** 单事件的 weave hook 组（`type: 'process'` 直起 node，无 shell 转义）。 */
+export declare function captureHookGroup(script: string): Array<Record<string, unknown>>;
+export declare function readUserCapture(deps?: CaptureDeps): Promise<CaptureState>;
+/**
+ * 生效采集脚本的健康（诊断面只读）：zcode 只有用户级这一支，没有项目档可回落。
+ * `reportsInbox` 恒 false——ZCode 没有会话本地 inbox socket 这回事。
+ */
+export declare function readScriptHealth(deps?: CaptureDeps): Promise<CaptureScriptHealth>;
+/**
+ * 用户级采集安装（幂等）：全局脚本 + `~/.zcode/cli/config.json` 的 hooks 组。
+ * `hooks.enabled` 缺省 false（不写就完全不跑），故只在**键缺席**时写 true——
+ * 用户显式关过的不覆盖。
+ */
+export declare function installUserCapture(deps: CaptureDeps & {
+    version: string;
+}): Promise<void>;
+/**
+ * 用户级采集停用（幂等）：摘配置里的 weave 组 + 删脚本（带 weave 标记才删）。
+ * 不动 `hooks.enabled`——用户自己的 hook 还要靠它。
+ */
+export declare function uninstallUserCapture(deps?: CaptureDeps): Promise<void>;
+export declare const ZCODE_CAPTURE: CaptureSurface;

package/node_modules/@weavecode/harness/dist/zcode/capture.js

@@ -0,0 +1,3 @@
+import{access as k,mkdir as y,readFile as l,unlink as A,writeFile as f}from"node:fs/promises";import{homedir as i}from"node:os";import c from"node:path";import{detectPlatform as S,HARNESS_EVENTS as b}from"@weavecode/core";import{generateHookHandler as j}from"../claude/capture.js";export const zcodeConfigFile=e=>c.join(e,".zcode","cli","config.json");export function zcodeHookScript(e=S().configDir){return c.join(e,"weave","hooks","zcode","hook-handler.cjs")}const w="@version weave@",g="weave/hooks/zcode/hook-handler.cjs";function a(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function p(e){return e.replace(/\\/g,"/")}async function x(e){try{return await k(e),!0}catch{return!1}}async function d(e){let r;try{r=await l(e,"utf-8")}catch{return{}}let t;try{t=JSON.parse(r)}catch{throw new Error(`user config is not parseable JSON: ${e}`)}if(!a(t))throw new Error(`user config is not a JSON object: ${e}`);return t}export function groupIsWeave(e){if(!a(e))return!1;const r=e.hooks;return Array.isArray(r)?r.some(t=>{if(!a(t))return!1;const o=Array.isArray(t.args)?t.args.map(n=>p(String(n))):[];return(typeof t.command=="string"?p(t.command):"").includes(g)||o.some(n=>n.includes(g))}):!1}export function captureHookGroup(e){return[{hooks:[{type:"process",command:"node",args:[p(e)]}]}]}function v(e){if(!a(e))return{};const r={};for(const[t,o]of Object.entries(e)){if(!Array.isArray(o)){r[t]=o;continue}const n=o.filter(s=>!groupIsWeave(s));n.length>0&&(r[t]=n)}return r}function C(e){if(!a(e))return!1;const r=e.hooks;if(!a(r))return!1;const t=r.events;return a(t)?Object.values(t).some(o=>Array.isArray(o)&&o.some(groupIsWeave)):!1}export async function readUserCapture(e={}){const r=e.home??i(),t=await d(zcodeConfigFile(r)).catch(()=>({}));return{installed:C(t),helperPresent:await x(zcodeHookScript(e.configDir))}}export async function readScriptHealth(e={}){const r=e.home??i(),t=(await readUserCapture({home:r,configDir:e.configDir})).installed,o=zcodeHookScript(e.configDir);let n=null;try{n=await l(o,"utf-8")}catch{n=null}return{source:t?"user":"none",present:n!==null,weaveOwned:n!==null&&n.includes(w),generatedVersion:n?.match(/@version weave@(\S+)/)?.[1]??null,reportsInbox:!1,reportsPaneEnv:n!==null&&n.includes("terminalEnv()")}}export async function installUserCapture(e){const r=e.home??i(),t=zcodeHookScript(e.configDir);await y(c.dirname(t),{recursive:!0}),await f(t,j(e.version,"zcode"),"utf-8");const o=zcodeConfigFile(r),n=await d(o),s=a(n.hooks)?n.hooks:{};typeof s.enabled!="boolean"&&(s.enabled=!0),typeof s.timeoutMs!="number"&&(s.timeoutMs=5e3);const u=v(s.events);for(const h of b.zcode){const m=u[h];u[h]=Array.isArray(m)?[...m,...captureHookGroup(t)]:captureHookGroup(t)}s.events=u,n.hooks=s,await y(c.dirname(o),{recursive:!0}),await f(o,JSON.stringify(n,null,2)+`
+`,"utf-8")}export async function uninstallUserCapture(e={}){const r=e.home??i(),t=zcodeConfigFile(r);try{const o=await d(t),n=o.hooks;if(a(n)){const s=v(n.events);Object.keys(s).length>0?n.events=s:delete n.events,o.hooks=n,await f(t,JSON.stringify(o,null,2)+`
+`,"utf-8")}}catch{}try{const o=zcodeHookScript(e.configDir);(await l(o,"utf-8")).includes(w)&&await A(o)}catch{}}export const ZCODE_CAPTURE={harness:"zcode",readUserCapture:e=>readUserCapture(e),installUserCapture:e=>installUserCapture(e),uninstallUserCapture:e=>uninstallUserCapture(e),stripProjectCapture:async()=>{},scriptHealth:e=>readScriptHealth(e)};

package/node_modules/@weavecode/harness/dist/zcode/detect.d.ts

@@ -0,0 +1,2 @@
+import type { Detector } from '../driver.js';
+export declare const ZCODE_DETECTOR: Detector;

package/node_modules/@weavecode/harness/dist/zcode/detect.js

@@ -0,0 +1 @@
+import{existsSync as s}from"node:fs";import n from"node:path";const o=[".zcode"];function t(e){return o.some(r=>s(n.join(e,r)))}export const ZCODE_DETECTOR={markers:o,present:t,detect:e=>({harness:"zcode",present:t(e)})};

package/node_modules/@weavecode/harness/dist/zcode/event-source.d.ts

@@ -0,0 +1,8 @@
+import { ClaudeEventSource } from '../claude/event-source.js';
+/**
+ * ZCode 事件接入：它的 hook stdin 是**Claude 兼容形**——`createCompatibleHookStdin`
+ * 在 ZCode 自己的 camelCase 主契约上补了 snake_case alias（`hook_event_name` /
+ * `session_id` / `tool_name` / `tool_input` / `stop_hook_active` …），故归一化与
+ * claude 同一份实现，只有归属 harness 不同。
+ */
+export declare const ZCODE_EVENT_SOURCE: ClaudeEventSource;

package/node_modules/@weavecode/harness/dist/zcode/event-source.js

@@ -0,0 +1 @@
+import{ClaudeEventSource as e}from"../claude/event-source.js";export const ZCODE_EVENT_SOURCE=new e("zcode");

package/node_modules/@weavecode/harness/dist/zcode/index.d.ts

@@ -0,0 +1,13 @@
+import type { HarnessDriver } from '../driver.js';
+export { ZCODE_ASSETS } from './assets.js';
+export { ZCODE_CAPTURE, zcodeConfigFile, zcodeHookScript } from './capture.js';
+export { ZCODE_DETECTOR } from './detect.js';
+export { ZCODE_EVENT_SOURCE } from './event-source.js';
+export { ZCODE_MESSAGING } from './messaging.js';
+export { ZCODE_RESUME } from './resume.js';
+/**
+ * ZCode 接入模块的驱动（P0：只读看板 + 采集）：assets / events / resume /
+ * detect / messaging / capture 已就位，plugins / questions 留 P2——init 槽
+ * 不在此（由 cli init/wiring 携带）。
+ */
+export declare const ZCODE_DRIVER: HarnessDriver;

package/node_modules/@weavecode/harness/dist/zcode/index.js

@@ -0,0 +1 @@
+import{ZCODE_ASSETS as E}from"./assets.js";import{ZCODE_CAPTURE as o}from"./capture.js";import{ZCODE_DETECTOR as e}from"./detect.js";import{ZCODE_EVENT_SOURCE as r}from"./event-source.js";import{ZCODE_MESSAGING as t}from"./messaging.js";import{ZCODE_RESUME as m}from"./resume.js";export{ZCODE_ASSETS}from"./assets.js";export{ZCODE_CAPTURE,zcodeConfigFile,zcodeHookScript}from"./capture.js";export{ZCODE_DETECTOR}from"./detect.js";export{ZCODE_EVENT_SOURCE}from"./event-source.js";export{ZCODE_MESSAGING}from"./messaging.js";export{ZCODE_RESUME}from"./resume.js";export const ZCODE_DRIVER={id:"zcode",displayName:"ZCode",capabilities:["assets","events","resume","detect","messaging","capture"],assets:E,events:r,resume:m,detect:e,messaging:t,capture:o};

package/node_modules/@weavecode/harness/dist/zcode/mcp.d.ts

@@ -0,0 +1,6 @@
+import type { McpServerConfig } from '../driver.js';
+export declare function readZcodeMcp(file: string): Promise<Record<string, McpServerConfig>>;
+export declare function upsertZcodeMcp(file: string, name: string, config: McpServerConfig): Promise<void>;
+export declare function removeZcodeMcp(file: string, name: string): Promise<boolean>;
+/** 某 scope 的 MCP 落点：项目级 `.zcode/config.json`；用户级 `~/.zcode/cli/config.json`。 */
+export declare function zcodeMcpFile(scope: 'project' | 'user', projectPath: string, homedir: string): string;

package/node_modules/@weavecode/harness/dist/zcode/mcp.js

@@ -0,0 +1,2 @@
+import{mkdir as m,readFile as p,writeFile as d}from"node:fs/promises";import a from"node:path";function i(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}async function s(r){let e;try{e=await p(r,"utf-8")}catch{return{}}let t;try{t=JSON.parse(e)}catch(n){throw new Error(`${r} is not valid JSON \u2014 refusing to write: ${n instanceof Error?n.message:String(n)}`)}if(!i(t))throw new Error(`${r} is not a JSON object \u2014 refusing to write`);return t}async function f(r,e){await m(a.dirname(r),{recursive:!0}),await d(r,`${JSON.stringify(e,null,2)}
+`,"utf-8")}function u(r){const e=r.mcp;return i(e)&&i(e.servers)?e.servers:{}}export async function readZcodeMcp(r){const e=u(await s(r)),t={};for(const[n,o]of Object.entries(e)){if(!i(o)||typeof o.command!="string")continue;const c={command:o.command};Array.isArray(o.args)&&(c.args=o.args),i(o.env)&&(c.env=o.env),t[n]=c}return t}export async function upsertZcodeMcp(r,e,t){const n=await s(r),o=i(n.mcp)?n.mcp:{},c={type:"stdio",command:t.command};t.args&&(c.args=t.args),t.env&&(c.env=t.env),o.servers={...u(n),[e]:c},n.mcp=o,await f(r,n)}export async function removeZcodeMcp(r,e){const t=await s(r),n=u(t);if(!(e in n))return!1;delete n[e];const o=i(t.mcp)?t.mcp:{};return o.servers=n,t.mcp=o,await f(r,t),!0}export function zcodeMcpFile(r,e,t){return r==="project"?a.join(e,".zcode","config.json"):a.join(t,".zcode","cli","config.json")}

package/node_modules/@weavecode/harness/dist/zcode/messaging.d.ts

@@ -0,0 +1,13 @@
+import type { MessagingSurface } from '../driver.js';
+/**
+ * ZCode 消息能力面：投递全走既有通用机制，只在两条 claude 专有通道上声明 null。
+ *
+ * prompt **恒 null**：两层都不通——ZCode 同名的 `SendMessage` 只发给本会话的
+ * 子 agent（不是 peer），而层② 终端要的 pane 不存在：会话跑在 ZCode 桌面应用
+ * 里（`zcode-agent` 子进程 + 应用自己的渲染面），不是任何终端模拟器的 pane。
+ *
+ * inject 骑 `INJECTABLE_EVENTS.zcode`（HookSpecificOutput 支持 additionalContext），
+ * 走 weave 既有的 outbox 镜像；watch 靠 `Stop`。headless 未接：`-p` 是字符串选项、
+ * 不吃 stdin，且 shell 模式与 detached 的组合在 win32 上丢管道（见 CLAUDE.md）。
+ */
+export declare const ZCODE_MESSAGING: MessagingSurface;

package/node_modules/@weavecode/harness/dist/zcode/messaging.js

@@ -0,0 +1 @@
+import{HARNESS_LIFECYCLE as e,INJECTABLE_EVENTS as s}from"@weavecode/core";export const ZCODE_MESSAGING={harness:"zcode",discovery:!0,prompt:null,promptInbox:null,inject:{rideEvents:s.zcode},headless:null,idleSignals:[...e.zcode.close],imageAttach:null,sideQuestion:null,unsupportedReasons:{prompt:"ZCode sessions run inside the ZCode desktop app, not in a terminal pane, so there is no channel to type a prompt into (its SendMessage only reaches sub-agents of the same session)",headless:"ZCode's -p takes the prompt on the command line and does not read stdin; headless delivery is not wired",sideQuestion:"ZCode has no side-chat (btw) mechanism"}};

package/node_modules/@weavecode/harness/dist/zcode/resume.d.ts

@@ -0,0 +1,7 @@
+import type { ResumeCommandSpec } from '../driver.js';
+/**
+ * ZCode resume 命令规格：`zcode --resume <sessionId>` 接回既有会话（会话行在
+ * SQLite 里，`--resume` 按 id 取）。`-p` 只吃命令行字符串、不从 stdin 读 prompt，
+ * 故 headless 投递不给 zcode 开（messaging.headless = null）——`args` 只为形态完整。
+ */
+export declare const ZCODE_RESUME: ResumeCommandSpec;

package/node_modules/@weavecode/harness/dist/zcode/resume.js

@@ -0,0 +1 @@
+export const ZCODE_RESUME={supported:!0,bin:"zcode",args:(e,r)=>["--resume",e,"-p",r],openArgs:e=>["--resume",e]};

package/node_modules/@weavecode/harness/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@weavecode/harness",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Pluggable harness drivers — registry, init pipeline template method, and harness integration modules",
   "type": "module",
   "main": "./dist/index.js",
@@ -20,7 +20,7 @@
     "node": ">=22.5.0"
   },
   "dependencies": {
-    "@weavecode/core": "^0.1.1",
+    "@weavecode/core": "^0.1.3",
     "smol-toml": "^1.3.0"
   }
 }

package/node_modules/@weavecode/server/dist/config/dotted.d.ts

@@ -0,0 +1,10 @@
+/** 配置表单的一次改动：`path` 是点号路径（`sandbox.filesystem.allowWrite`）。 */
+export interface ConfigUpdate {
+    path: string;
+    value?: unknown;
+    remove?: boolean;
+}
+/** 点号路径取值（不存在 → undefined）。 */
+export declare function getDotted(root: Record<string, unknown>, dotted: string): unknown;
+/** 批量落值/删键，返回新对象（不改入参）。 */
+export declare function applyUpdates(root: Record<string, unknown>, updates: readonly ConfigUpdate[]): Record<string, unknown>;

package/node_modules/@weavecode/server/dist/config/dotted.js

@@ -0,0 +1 @@
+function s(o){return o==="__proto__"||o==="constructor"||o==="prototype"}function f(o){const r=o.split(".");if(r.some(t=>!t||s(t)))throw new Error(`\u975E\u6CD5\u914D\u7F6E\u952E\uFF1A${o}`);return r}function u(o){return typeof o=="object"&&o!==null&&!Array.isArray(o)}const c=Symbol("absent");function i(o,r){let t=o;for(const n of r){if(!u(t))return c;t=t[n]}return t===void 0?c:t}function l(o,r){let t=o;for(const n of r.slice(0,-1)){const e=t[n];if(!u(e))return;t=e}delete t[r[r.length-1]]}function p(o,r,t){let n=o;for(const e of r.slice(0,-1))u(n[e])||(n[e]={}),n=n[e];n[r[r.length-1]]=t}export function getDotted(o,r){const t=i(o,f(r));return t===c?void 0:t}export function applyUpdates(o,r){const t=structuredClone(o);for(const n of r){const e=f(n.path);n.remove?l(t,e):p(t,e,n.value)}return t}

package/node_modules/@weavecode/server/dist/config/profiles.d.ts

@@ -0,0 +1,30 @@
+import type { ConfigFileId } from '@weavecode/harness';
+/**
+ * 配置快照的落盘面。`root` = `local/harness-config`（由调用方给，测试用临时目录）：
+ * 快照里可能带 API key ⇒ 本机专属、不进 settings 表、不随迁移带走。
+ */
+export interface ConfigProfileMeta {
+    id: string;
+    name: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ConfigProfileState {
+    activeId: string | null;
+    profiles: ConfigProfileMeta[];
+}
+export declare function listProfiles(root: string, harness: string, file: ConfigFileId): Promise<ConfigProfileState>;
+/** 落一份快照（整份 JSON）。 */
+export declare function writeSnapshot(root: string, harness: string, file: ConfigFileId, id: string, values: Record<string, unknown>): Promise<void>;
+export declare function readSnapshot(root: string, harness: string, file: ConfigFileId, id: string): Promise<Record<string, unknown> | null>;
+export declare function createProfile(root: string, harness: string, file: ConfigFileId, name: string, values: Record<string, unknown>): Promise<ConfigProfileMeta>;
+/** 覆盖某份快照的内容并刷新 updatedAt。 */
+export declare function saveProfile(root: string, harness: string, file: ConfigFileId, id: string, values: Record<string, unknown>): Promise<void>;
+export declare function renameProfile(root: string, harness: string, file: ConfigFileId, id: string, name: string): Promise<void>;
+export declare function removeProfile(root: string, harness: string, file: ConfigFileId, id: string): Promise<void>;
+export declare function setActive(root: string, harness: string, file: ConfigFileId, id: string | null): Promise<void>;
+/** 写盘前把当前活配置存一份（每档留最新 20 份，超出按时间删旧）。 */
+export declare function pushBackup(root: string, harness: string, file: ConfigFileId, values: Record<string, unknown>): Promise<void>;
+/** 备份列表（新 → 旧）。 */
+export declare function listBackups(root: string, harness: string, file: ConfigFileId): Promise<string[]>;
+export declare function readBackup(root: string, harness: string, file: ConfigFileId, id: string): Promise<Record<string, unknown> | null>;

package/node_modules/@weavecode/server/dist/config/profiles.js

@@ -0,0 +1,2 @@
+import s from"node:fs/promises";import u from"node:path";import{randomUUID as v}from"node:crypto";const A=20;function d(n,t){return u.join(n,t)}function h(n,t){return u.join(d(n,t),"profiles.json")}function w(n,t,i,r){return u.join(d(n,t),`${i}-${r}.json`)}function l(n,t){return u.join(d(n,t),"backups")}function j(n,t,i,r){return u.join(l(n,t),`${i}-${r}.json`)}async function y(n){try{const t=JSON.parse(await s.readFile(n,"utf8"));return typeof t=="object"&&t!==null&&!Array.isArray(t)?t:null}catch{return null}}async function m(n,t){await s.mkdir(u.dirname(n),{recursive:!0});const i=`${n}.${process.pid}.${Date.now()}.tmp`;await s.writeFile(i,`${JSON.stringify(t,null,2)}
+`,"utf8"),await s.rename(i,n)}async function x(n,t){return await y(h(n,t))??{}}function I(){return{activeId:null,profiles:[]}}function $(n,t){return n[t]??I()}export async function listProfiles(n,t,i){return $(await x(n,t),i)}async function f(n,t,i,r){const a=await x(n,t),e=$(a,i);return r(e),a[i]=e,await m(h(n,t),a),e}function p(){return new Date().toISOString()}export async function writeSnapshot(n,t,i,r,a){await m(w(n,t,i,r),a)}export async function readSnapshot(n,t,i,r){return y(w(n,t,i,r))}export async function createProfile(n,t,i,r,a){const e={id:v().slice(0,8),name:r,createdAt:p(),updatedAt:p()};return await writeSnapshot(n,t,i,e.id,a),await f(n,t,i,o=>{o.profiles.push(e)}),e}export async function saveProfile(n,t,i,r,a){await writeSnapshot(n,t,i,r,a),await f(n,t,i,e=>{const o=e.profiles.find(c=>c.id===r);o&&(o.updatedAt=p())})}export async function renameProfile(n,t,i,r,a){await f(n,t,i,e=>{const o=e.profiles.find(c=>c.id===r);o&&(o.name=a,o.updatedAt=p())})}export async function removeProfile(n,t,i,r){await f(n,t,i,a=>{a.profiles=a.profiles.filter(e=>e.id!==r),a.activeId===r&&(a.activeId=null)}),await s.rm(w(n,t,i,r),{force:!0})}export async function setActive(n,t,i,r){await f(n,t,i,a=>{a.activeId=r})}export async function pushBackup(n,t,i,r){const a=p().replace(/[:.]/g,"-");await m(j(n,t,i,a),r);const e=`${i}-`,o=(await s.readdir(l(n,t)).catch(()=>[])).filter(c=>c.startsWith(e)&&c.endsWith(".json")).sort().reverse();for(const c of o.slice(A))await s.rm(u.join(l(n,t),c),{force:!0})}export async function listBackups(n,t,i){const r=`${i}-`;return(await s.readdir(l(n,t)).catch(()=>[])).filter(a=>a.startsWith(r)&&a.endsWith(".json")).sort().reverse().map(a=>a.slice(r.length,-5))}export async function readBackup(n,t,i,r){return/^[A-Za-z0-9-]+$/.test(r)?y(j(n,t,i,r)):null}

package/node_modules/@weavecode/server/dist/daemon/ai-config.js

@@ -1,2 +1,2 @@
-import{chmodSync as o,existsSync as c,mkdirSync as i,readFileSync as u,renameSync as y,rmSync as m,writeFileSync as p}from"node:fs";import a from"node:path";import{getAiKeyPath as n}from"../db/paths.js";export function readAiKey(t=n()){if(!c(t))return null;try{const r=JSON.parse(u(t,"utf8"));return typeof r.apiKey=="string"&&r.apiKey!==""?r.apiKey:null}catch{return null}}export function writeAiKey(t,r=n()){if(t===null||t===""){m(r,{force:!0});return}i(a.dirname(r),{recursive:!0});const e=`${r}.tmp`;p(e,`${JSON.stringify({apiKey:t},null,2)}
-`,{encoding:"utf8",mode:384}),y(e,r);try{o(r,384)}catch{}}export function hasAiKey(t=n()){return readAiKey(t)!==null}
+import{chmodSync as t,existsSync as a,mkdirSync as c,readFileSync as o,renameSync as y,rmSync as u,writeFileSync as s}from"node:fs";import l from"node:path";import{getAiKeyPath as r}from"../db/paths.js";export function readAiKey(n=r()){if(!a(n))return null;try{const e=JSON.parse(o(n,"utf8"));return typeof e.apiKey=="string"&&e.apiKey!==""?e.apiKey:null}catch{return null}}export function writeAiKey(n,e=r()){if(n===null||n===""){u(e,{force:!0});return}c(l.dirname(e),{recursive:!0});const i=`${e}.tmp`;s(i,`${JSON.stringify({apiKey:n},null,2)}
+`,{encoding:"utf8",mode:384}),y(i,e);try{t(e,384)}catch{}}export function hasAiKey(n=r()){return readAiKey(n)!==null}

package/node_modules/@weavecode/server/dist/daemon/ai-context.d.ts

@@ -12,6 +12,6 @@ export declare function findDocsDir(start: string): string | null;
 export declare function collectSkillFiles(root: string, limit?: number): string[];
 /** 装配系统提示词（三源 + 固定前言）。 */
 export declare function buildSystemPrompt(deps: {
-    dataDir: string;
+    dataRoot: string;
     cwd?: string;
 }): AiContextResult;

package/node_modules/@weavecode/server/dist/daemon/ai-context.js

@@ -1,10 +1,10 @@
-import{existsSync as d,readdirSync as h,readFileSync as S}from"node:fs";import c from"node:path";import{builtinMarketDir as b}from"../market/builtin.js";const p=6e4,w=40,y=6;export function findDocsDir(r){let t=c.resolve(r);for(let n=0;n<y;n++){const s=c.join(t,"docs");if(d(c.join(s,"FEATURES.md")))return s;const i=c.dirname(t);if(i===t)break;t=i}return null}export function collectSkillFiles(r,t=w){const n=[],s=(i,a)=>{if(n.length>=t||a>6)return;let u;try{u=h(i,{withFileTypes:!0})}catch{return}for(const l of u){if(n.length>=t)return;const e=c.join(i,l.name);l.isDirectory()?s(e,a+1):l.name==="SKILL.md"&&n.push(e)}};return s(r,0),n.sort()}function m(r){try{return S(r,"utf8")}catch{return null}}export function buildSystemPrompt(r){const t=[],n=findDocsDir(r.cwd??process.cwd());if(n)for(const e of["ARCHITECTURE.md","FEATURES.md"]){const o=c.join(n,e);if(!d(o))continue;const f=m(o);f&&t.push({label:`docs/${e}`,text:f})}const s=b(r.dataDir);for(const e of collectSkillFiles(s)){const o=m(e);o&&t.push({label:c.relative(s,e).split(c.sep).join("/"),text:o})}const i=["\u4F60\u662F weave \u63A7\u5236\u53F0\u5185\u7F6E\u7684 AI \u52A9\u624B\uFF0C**\u53EA\u8D1F\u8D23 weave \u672C\u8EAB**\uFF1A\u5B83\u7684\u529F\u80FD\u3001\u7528\u6CD5\u3001\u914D\u7F6E\u3001\u67B6\u6784\u3001","\u5185\u7F6E\u6280\u80FD\uFF0C\u4EE5\u53CA\u57FA\u4E8E\u4E0B\u9762\u6CE8\u5165\u8D44\u6599\u7684\u6392\u969C\u3002","","\u56DE\u7B54\u8303\u56F4\uFF08\u8D8A\u754C\u7684\u60C5\u51B5\u4E00\u5F8B\u793C\u8C8C\u62D2\u7B54\uFF1A\u7528\u4E00\u53E5\u8BDD\u8BF4\u660E\u4F60\u53EA\u804A weave\uFF0C\u7136\u540E\u628A\u8BDD\u9898\u5F15\u56DE weave\uFF09\uFF1A","- \u53EF\u4EE5\u7B54\uFF1Aweave \u7684\u80FD\u529B\u4E0E\u64CD\u4F5C\uFF08\u547D\u4EE4\u3001\u8BBE\u7F6E\u9879\u3001\u6587\u4EF6\u843D\u70B9\u3001\u63D2\u4EF6/\u6280\u80FD/\u5E02\u573A\u3001hooks\u3001\u4F1A\u8BDD\u4E0E\u4EFB\u52A1\u3001\u8BA4\u8BC1\u7B49\uFF09\uFF0C","  \u4EE5\u53CA\u6CE8\u5165\u8D44\u6599\u91CC\u80FD\u67E5\u5230\u7684\u4E8B\u5B9E\uFF1B","- \u4E0D\u8981\u7B54\uFF1A\u4E0E weave \u65E0\u5173\u7684\u901A\u7528\u7F16\u7A0B\u3001\u5199\u4F5C\u3001\u7FFB\u8BD1\u3001\u95F2\u804A\uFF0C\u5176\u5B83\u4EA7\u54C1\u6216\u670D\u52A1\uFF0C\u4EE5\u53CA\u4EFB\u4F55\u6709\u5BB3\u6216\u8D8A\u754C\u7684\u8BF7\u6C42\uFF1B","- \u8D44\u6599\u672A\u8986\u76D6\u65F6\u660E\u786E\u8BF4\u300C\u4E0D\u786E\u5B9A\u300D\uFF0C\u4E0D\u8981\u7F16\u9020 weave \u7684\u884C\u4E3A\u3001\u547D\u4EE4\u6216\u53C2\u6570\uFF1B","- \u4E0D\u7C98\u8D34\u5927\u6BB5\u6CE8\u5165\u8D44\u6599\u539F\u6587\uFF08\u7528\u6237\u70B9\u540D\u8981\u67D0\u4E00\u6BB5\u65F6\u9664\u5916\uFF09\uFF1B","- \u53EA\u505A\u53EA\u8BFB\u95EE\u7B54\uFF1A\u4E0D\u58F0\u79F0\u5DF2\u6267\u884C\u4EFB\u4F55\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u627F\u8BFA\u4EE3\u66FF\u7528\u6237\u53BB\u6539\u6587\u4EF6\u6216\u8DD1\u547D\u4EE4\u3002","","\u56DE\u7B54\u4F7F\u7528\u4E0E\u63D0\u95EE\u76F8\u540C\u7684\u8BED\u8A00\uFF1B\u6D89\u53CA\u64CD\u4F5C\u65F6\u7ED9\u51FA\u786E\u5207\u547D\u4EE4\u4E0E\u8DEF\u5F84\u3002"].join(`
-`),a=[];let u=i.length;const l=[];for(const e of t){const o=`
+import{existsSync as C,readdirSync as i,readFileSync as a}from"node:fs";import D from"node:path";import{builtinMarketDir as f}from"../market/builtin.js";const l=6e4,p=40,d=6;export function findDocsDir(e){let F=D.resolve(e);for(let E=0;E<d;E++){const o=D.join(F,"docs");if(C(D.join(o,"FEATURES.md")))return o;const n=D.dirname(F);if(n===F)break;F=n}return null}export function collectSkillFiles(e,F=p){const E=[],o=(n,s)=>{if(E.length>=F||s>6)return;let r;try{r=i(n,{withFileTypes:!0})}catch{return}for(const B of r){if(E.length>=F)return;const u=D.join(n,B.name);B.isDirectory()?o(u,s+1):B.name==="SKILL.md"&&E.push(u)}};return o(e,0),E.sort()}function c(e){try{return a(e,"utf8")}catch{return null}}export function buildSystemPrompt(e){const F=[],E=findDocsDir(e.cwd??process.cwd());if(E)for(const u of["ARCHITECTURE.md","FEATURES.md"]){const t=D.join(E,u);if(!C(t))continue;const A=c(t);A&&F.push({label:`docs/${u}`,text:A})}const o=f(e.dataRoot);for(const u of collectSkillFiles(o)){const t=c(u);t&&F.push({label:D.relative(o,u).split(D.sep).join("/"),text:t})}const n=["\u4F60\u662F weave \u63A7\u5236\u53F0\u5185\u7F6E\u7684 AI \u52A9\u624B\uFF0C**\u53EA\u8D1F\u8D23 weave \u672C\u8EAB**\uFF1A\u5B83\u7684\u529F\u80FD\u3001\u7528\u6CD5\u3001\u914D\u7F6E\u3001\u67B6\u6784\u3001","\u5185\u7F6E\u6280\u80FD\uFF0C\u4EE5\u53CA\u57FA\u4E8E\u4E0B\u9762\u6CE8\u5165\u8D44\u6599\u7684\u6392\u969C\u3002","","\u56DE\u7B54\u8303\u56F4\uFF08\u8D8A\u754C\u7684\u60C5\u51B5\u4E00\u5F8B\u793C\u8C8C\u62D2\u7B54\uFF1A\u7528\u4E00\u53E5\u8BDD\u8BF4\u660E\u4F60\u53EA\u804A weave\uFF0C\u7136\u540E\u628A\u8BDD\u9898\u5F15\u56DE weave\uFF09\uFF1A","- \u53EF\u4EE5\u7B54\uFF1Aweave \u7684\u80FD\u529B\u4E0E\u64CD\u4F5C\uFF08\u547D\u4EE4\u3001\u8BBE\u7F6E\u9879\u3001\u6587\u4EF6\u843D\u70B9\u3001\u63D2\u4EF6/\u6280\u80FD/\u5E02\u573A\u3001hooks\u3001\u4F1A\u8BDD\u4E0E\u4EFB\u52A1\u3001\u8BA4\u8BC1\u7B49\uFF09\uFF0C","  \u4EE5\u53CA\u6CE8\u5165\u8D44\u6599\u91CC\u80FD\u67E5\u5230\u7684\u4E8B\u5B9E\uFF1B","- \u4E0D\u8981\u7B54\uFF1A\u4E0E weave \u65E0\u5173\u7684\u901A\u7528\u7F16\u7A0B\u3001\u5199\u4F5C\u3001\u7FFB\u8BD1\u3001\u95F2\u804A\uFF0C\u5176\u5B83\u4EA7\u54C1\u6216\u670D\u52A1\uFF0C\u4EE5\u53CA\u4EFB\u4F55\u6709\u5BB3\u6216\u8D8A\u754C\u7684\u8BF7\u6C42\uFF1B","- \u8D44\u6599\u672A\u8986\u76D6\u65F6\u660E\u786E\u8BF4\u300C\u4E0D\u786E\u5B9A\u300D\uFF0C\u4E0D\u8981\u7F16\u9020 weave \u7684\u884C\u4E3A\u3001\u547D\u4EE4\u6216\u53C2\u6570\uFF1B","- \u4E0D\u7C98\u8D34\u5927\u6BB5\u6CE8\u5165\u8D44\u6599\u539F\u6587\uFF08\u7528\u6237\u70B9\u540D\u8981\u67D0\u4E00\u6BB5\u65F6\u9664\u5916\uFF09\uFF1B","- \u53EA\u505A\u53EA\u8BFB\u95EE\u7B54\uFF1A\u4E0D\u58F0\u79F0\u5DF2\u6267\u884C\u4EFB\u4F55\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u627F\u8BFA\u4EE3\u66FF\u7528\u6237\u53BB\u6539\u6587\u4EF6\u6216\u8DD1\u547D\u4EE4\u3002","","\u56DE\u7B54\u4F7F\u7528\u4E0E\u63D0\u95EE\u76F8\u540C\u7684\u8BED\u8A00\uFF1B\u6D89\u53CA\u64CD\u4F5C\u65F6\u7ED9\u51FA\u786E\u5207\u547D\u4EE4\u4E0E\u8DEF\u5F84\u3002"].join(`
+`),s=[];let r=n.length;const B=[];for(const u of F){const t=`
 
-## \u6CE8\u5165\u8D44\u6599\uFF1A${e.label}
+## \u6CE8\u5165\u8D44\u6599\uFF1A${u.label}
 
-${e.text}`;if(u+o.length>p){const f=p-u;f>500&&(a.push(`
+${u.text}`;if(r+t.length>l){const A=l-r;A>500&&(s.push(`
 
-## \u6CE8\u5165\u8D44\u6599\uFF1A${e.label}\uFF08\u6309\u9884\u7B97\u622A\u65AD\uFF09
+## \u6CE8\u5165\u8D44\u6599\uFF1A${u.label}\uFF08\u6309\u9884\u7B97\u622A\u65AD\uFF09
 
-${e.text.slice(0,f)}`),l.push(`${e.label}(\u622A\u65AD)`));break}u+=o.length,a.push(o),l.push(e.label)}return{prompt:i+a.join(""),labels:l,docsFound:n!==null}}
+${u.text.slice(0,A)}`),B.push(`${u.label}(\u622A\u65AD)`));break}r+=t.length,s.push(t),B.push(u.label)}return{prompt:n+s.join(""),labels:B,docsFound:E!==null}}

package/node_modules/@weavecode/server/dist/daemon/ai-routes.js

@@ -1,6 +1,6 @@
-import{getDataDir as I}from"../db/paths.js";import{DEFAULT_AI_SETTINGS as v,readDaemonSettings as N}from"./settings.js";import{hasAiKey as J,readAiKey as O}from"./ai-config.js";import{buildSystemPrompt as P,findDocsDir as j}from"./ai-context.js";import{readJson as k,sendJson as f}from"./http.js";const z=12e4,C=15e3,G=500,L=40,R=2e4;export function normalizeMessages(r){if(!Array.isArray(r)||r.length===0||r.length>L)return null;const e=[];for(const t of r){const o=t;if(o?.role!=="user"&&o?.role!=="assistant")return null;const a=o.content;if(typeof a!="string"||a===""||a.length>R)return null;e.push({role:o.role,content:a})}return e}export function aiConfigured(r,e,t){return r!==""&&e!==""&&t}export async function handleAiRoutes(r,e,t,o){if(o!=="/ai"&&!o.startsWith("/ai/"))return!1;const n=(await N()).ai??v,p=J(t.aiKeyPath);if(o==="/ai/status"&&r.method==="GET")return f(e,200,{configured:aiConfigured(n.baseUrl,n.model,p),baseUrl:n.baseUrl,model:n.model,apiKeySet:p,docsFound:j(process.cwd())!==null}),!0;if(o==="/ai/models"&&r.method==="POST"){let i;try{i=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const u=typeof i.baseUrl=="string"&&i.baseUrl.trim()!==""?i.baseUrl.trim():n.baseUrl,m=typeof i.apiKey=="string"&&i.apiKey!==""?i.apiKey:O(t.aiKeyPath);if(u===""||m===null)return f(e,409,{error:"AI assistant is not configured"}),!0;const l=await B(u,m);return l.ok?(f(e,200,{models:l.models}),!0):(f(e,502,{error:l.error}),!0)}if(o==="/ai/chat"&&r.method==="POST"){const i=O(t.aiKeyPath);if(!aiConfigured(n.baseUrl,n.model,p)||i===null)return f(e,409,{error:"AI assistant is not configured"}),!0;let u;try{u=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const m=normalizeMessages(u.messages);if(!m)return f(e,400,{error:"Invalid messages"}),!0;const l=P({dataDir:t.libraries?.dataDir??I()});return await X({req:r,res:e,baseUrl:n.baseUrl,model:n.model,apiKey:i,messages:m,system:l.prompt}),!0}return f(e,404,{error:"Not found"}),!0}function A(r){const t=r?.choices?.[0],o=t?.delta?.content??t?.message?.content;return typeof o=="string"&&o!==""?o:null}export const STREAM_MEMO_TTL_MS=1440*60*1e3;const S=new Map;export function streamMemoKey(r,e){return`${r}#${e}`}export function streamSupported(r,e=Date.now()){const t=S.get(r);return!t||e-t.checkedAt>STREAM_MEMO_TTL_MS?!0:t.streaming}export function rememberStreamSupport(r,e,t=Date.now()){const o=S.get(r);o!==void 0&&o.streaming!==e&&console.log(`[weave] ai gateway ${e?"supports":"rejects"} streaming: ${r}`),S.set(r,{streaming:e,checkedAt:t})}export function resetStreamMemory(){S.clear()}async function B(r,e){try{const t=await fetch(`${r.replace(/\/+$/,"")}/models`,{headers:{authorization:`Bearer ${e}`},signal:AbortSignal.timeout(C)});if(!t.ok){const n=await t.text().catch(()=>"");return{ok:!1,error:`upstream ${t.status}${n?`: ${n.slice(0,200)}`:""}`}}const o=await t.json().catch(()=>null),a=[...new Set((o?.data??[]).map(n=>n?.id).filter(n=>typeof n=="string"&&n!==""))].sort();return a.length===0?{ok:!1,error:"upstream returned no models"}:{ok:!0,models:a.slice(0,G)}}catch(t){return{ok:!1,error:t instanceof Error?t.message:String(t)}}}async function E(r){try{const e=await fetch(r.url,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.apiKey}`},body:JSON.stringify({model:r.model,stream:!1,messages:r.messages}),signal:r.signal});if(!e.ok){const o=await e.text().catch(()=>"");return{ok:!1,error:`upstream ${e.status}${o?`: ${o.slice(0,300)}`:""}`}}const t=A(await e.json().catch(()=>null));return t===null?{ok:!1,error:"upstream returned no content"}:{ok:!0,content:t}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function X(r){const{req:e,res:t,baseUrl:o,model:a,apiKey:n,messages:p,system:i}=r,u=`${o.replace(/\/+$/,"")}/chat/completions`,m=[{role:"system",content:i},...p],l=new AbortController,_=setTimeout(()=>l.abort(),z);e.on("close",()=>l.abort()),t.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"});let b=!1;const d=s=>{if(!b)try{t.write(`data: ${JSON.stringify(s)}
+import{getDataRoot as J}from"../db/paths.js";import{DEFAULT_AI_SETTINGS as M,readDaemonSettings as P}from"./settings.js";import{hasAiKey as I,readAiKey as T}from"./ai-config.js";import{buildSystemPrompt as j,findDocsDir as R}from"./ai-context.js";import{readJson as O,sendJson as u}from"./http.js";const _=12e4,z=15e3,B=500,C=40,G=2e4;export function normalizeMessages(r){if(!Array.isArray(r)||r.length===0||r.length>C)return null;const t=[];for(const e of r){const n=e;if(n?.role!=="user"&&n?.role!=="assistant")return null;const o=n.content;if(typeof o!="string"||o===""||o.length>G)return null;t.push({role:n.role,content:o})}return t}export function aiConfigured(r,t,e){return r!==""&&t!==""&&e}export async function handleAiRoutes(r,t,e,n){if(n!=="/ai"&&!n.startsWith("/ai/"))return!1;const o=(await P()).ai??M,a=I(e.aiKeyPath);if(n==="/ai/status"&&r.method==="GET")return u(t,200,{configured:aiConfigured(o.baseUrl,o.model,a),baseUrl:o.baseUrl,model:o.model,apiKeySet:a,docsFound:R(process.cwd())!==null}),!0;if(n==="/ai/models"&&r.method==="POST"){let i;try{i=await O(r)}catch{return u(t,400,{error:"Invalid JSON body"}),!0}const d=typeof i.baseUrl=="string"&&i.baseUrl.trim()!==""?i.baseUrl.trim():o.baseUrl,l=typeof i.apiKey=="string"&&i.apiKey!==""?i.apiKey:T(e.aiKeyPath);if(d===""||l===null)return u(t,409,{error:"AI assistant is not configured"}),!0;const m=await L(d,l);return m.ok?(u(t,200,{models:m.models}),!0):(u(t,502,{error:m.error}),!0)}if(n==="/ai/chat"&&r.method==="POST"){const i=T(e.aiKeyPath);if(!aiConfigured(o.baseUrl,o.model,a)||i===null)return u(t,409,{error:"AI assistant is not configured"}),!0;let d;try{d=await O(r)}catch{return u(t,400,{error:"Invalid JSON body"}),!0}const l=normalizeMessages(d.messages);if(!l)return u(t,400,{error:"Invalid messages"}),!0;const m=j({dataRoot:e.libraries?.dataRoot??J()});return await q({req:r,res:t,baseUrl:o.baseUrl,model:o.model,apiKey:i,messages:l,system:m.prompt}),!0}return u(t,404,{error:"Not found"}),!0}function $(r){const t=r?.choices?.[0],e=t?.delta?.content??t?.message?.content;return typeof e=="string"&&e!==""?e:null}export const STREAM_MEMO_TTL_MS=1440*60*1e3;const w=new Map;export function streamMemoKey(r,t){return`${r}#${t}`}export function streamSupported(r,t=Date.now()){const e=w.get(r);return!e||t-e.checkedAt>STREAM_MEMO_TTL_MS?!0:e.streaming}export function rememberStreamSupport(r,t,e=Date.now()){const n=w.get(r);n!==void 0&&n.streaming!==t&&console.log(`[weave] ai gateway ${t?"supports":"rejects"} streaming: ${r}`),w.set(r,{streaming:t,checkedAt:e})}export function resetStreamMemory(){w.clear()}async function L(r,t){try{const e=await fetch(`${r.replace(/\/+$/,"")}/models`,{headers:{authorization:`Bearer ${t}`},signal:AbortSignal.timeout(z)});if(!e.ok){const a=await e.text().catch(()=>"");return{ok:!1,error:`upstream ${e.status}${a?`: ${a.slice(0,200)}`:""}`}}const n=await e.json().catch(()=>null),o=[...new Set((n?.data??[]).map(a=>a?.id).filter(a=>typeof a=="string"&&a!==""))].sort();return o.length===0?{ok:!1,error:"upstream returned no models"}:{ok:!0,models:o.slice(0,B)}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function U(r){try{const t=await fetch(r.url,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.apiKey}`},body:JSON.stringify({model:r.model,stream:!1,messages:r.messages}),signal:r.signal});if(!t.ok){const n=await t.text().catch(()=>"");return{ok:!1,error:`upstream ${t.status}${n?`: ${n.slice(0,300)}`:""}`}}const e=$(await t.json().catch(()=>null));return e===null?{ok:!1,error:"upstream returned no content"}:{ok:!0,content:e}}catch(t){return{ok:!1,error:t instanceof Error?t.message:String(t)}}}async function q(r){const{req:t,res:e,baseUrl:n,model:o,apiKey:a,messages:i,system:d}=r,l=`${n.replace(/\/+$/,"")}/chat/completions`,m=[{role:"system",content:d},...i],g=new AbortController,v=setTimeout(()=>g.abort(),_);t.on("close",()=>g.abort()),e.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"});let b=!1;const f=s=>{if(!b)try{e.write(`data: ${JSON.stringify(s)}
 
-`)}catch{}},K=()=>{if(!b){b=!0;try{t.write(`data: {"done":true}
+`)}catch{}},D=()=>{if(!b){b=!0;try{e.write(`data: {"done":true}
 
-`),t.end()}catch{}}},g=streamMemoKey(u,a),M={url:u,apiKey:n,model:a,messages:m,signal:l.signal};try{if(!streamSupported(g)){const c=await E(M);c.ok?d({delta:c.content}):d({error:c.error});return}const s=await fetch(u,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${n}`},body:JSON.stringify({model:a,stream:!0,messages:m}),signal:l.signal});if(!s.ok||!s.body){const c=await s.text().catch(()=>""),h=await E(M);h.ok?(rememberStreamSupport(g,!1),d({delta:h.content})):d({error:`upstream ${s.status}${c?`: ${c.slice(0,300)}`:""}`});return}if(!(s.headers.get("content-type")??"").includes("text/event-stream")){const c=A(await s.json().catch(()=>null));rememberStreamSupport(g,!1),d(c===null?{error:"upstream returned no content"}:{delta:c});return}rememberStreamSupport(g,!0);const U=s.body.getReader(),D=new TextDecoder;let y="";for(;;){const{done:c,value:h}=await U.read();if(c)break;y+=D.decode(h,{stream:!0});let w;for(;(w=y.indexOf(`
-`))>=0;){const $=y.slice(0,w).trim();if(y=y.slice(w+1),!$.startsWith("data:"))continue;const T=$.slice(5).trim();if(T==="[DONE]")return;try{const x=A(JSON.parse(T));x!==null&&d({delta:x})}catch{}}}}catch(s){d({error:s instanceof Error?s.message:String(s)})}finally{clearTimeout(_),K()}}
+`),e.end()}catch{}}},y=streamMemoKey(l,o),k={url:l,apiKey:a,model:o,messages:m,signal:g.signal};try{if(!streamSupported(y)){const c=await U(k);c.ok?f({delta:c.content}):f({error:c.error});return}const s=await fetch(l,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${a}`},body:JSON.stringify({model:o,stream:!0,messages:m}),signal:g.signal});if(!s.ok||!s.body){const c=await s.text().catch(()=>""),h=await U(k);h.ok?(rememberStreamSupport(y,!1),f({delta:h.content})):f({error:`upstream ${s.status}${c?`: ${c.slice(0,300)}`:""}`});return}if(!(s.headers.get("content-type")??"").includes("text/event-stream")){const c=$(await s.json().catch(()=>null));rememberStreamSupport(y,!1),f(c===null?{error:"upstream returned no content"}:{delta:c});return}rememberStreamSupport(y,!0);const E=s.body.getReader(),N=new TextDecoder;let p="";for(;;){const{done:c,value:h}=await E.read();if(c)break;p+=N.decode(h,{stream:!0});let S;for(;(S=p.indexOf(`
+`))>=0;){const x=p.slice(0,S).trim();if(p=p.slice(S+1),!x.startsWith("data:"))continue;const A=x.slice(5).trim();if(A==="[DONE]")return;try{const K=$(JSON.parse(A));K!==null&&f({delta:K})}catch{}}}}catch(s){f({error:s instanceof Error?s.message:String(s)})}finally{clearTimeout(v),D()}}

package/node_modules/@weavecode/server/dist/daemon/api-log.d.ts

@@ -23,6 +23,8 @@ export interface ApiLogQuery {
     status?: number;
     limit?: number;
 }
+/** 路径里的凭据段脱敏：webhook token 就是一条可直接重放的凭证，绝不落盘。 */
+export declare function maskPath(url: string): string;
 /** 本地小时戳文件名：`api-YYYY-MM-DDTHH.jsonl`。 */
 export declare function logFileFor(dir: string, at: Date): string;
 export declare function noteRequestBody(req: IncomingMessage, text: string): void;

package/node_modules/@weavecode/server/dist/daemon/api-log.js

@@ -1,3 +1,3 @@
-import{appendFile as F,mkdir as L,readdir as T,readFile as N,rm as j}from"node:fs/promises";import g from"node:path";import{getApiLogsDir as x}from"../db/paths.js";const w=8*1024,C=2e3,b=50,D=6;export const MAX_LOG_FILES=24;const I=200,O=1e3,H=new Set(["password","apikey","token","secret","authorization","cookie","x-weave-local"]);function y(n,t=0){if(typeof n=="string")return n.length>C?`[truncated ${n.length} chars]`:n;if(Array.isArray(n)){if(t>=D)return"[depth-limited]";const e=n.slice(0,b).map(i=>y(i,t+1));return n.length>b&&e.push(`[truncated ${n.length-b} items]`),e}if(n&&typeof n=="object"){if(t>=D)return"[depth-limited]";const e={};for(const[i,a]of Object.entries(n))e[i]=H.has(i.toLowerCase())?"[redacted]":y(a,t+1);return e}return n}function M(n,t){if(t>w)return`[truncated body ${t} bytes]`;try{return y(JSON.parse(n))}catch{return y(n)}}export function logFileFor(n,t){const e=a=>String(a).padStart(2,"0"),i=`${t.getFullYear()}-${e(t.getMonth()+1)}-${e(t.getDate())}T${e(t.getHours())}`;return g.join(n,`api-${i}.jsonl`)}function _(n){const t=g.basename(n).match(/^api-(\d{4}-\d{2}-\d{2}T\d{2})\.jsonl$/);return t?t[1]:null}const E=new WeakMap;export function noteRequestBody(n,t){E.get(n)?.(t)}export class ApiLogger{dir;chain=Promise.resolve();constructor(t={}){this.dir=t.dir??x()}begin(t,e){const i=Date.now(),a=[];let u=0,c=0,d="",h=0,l=!1;E.set(t,r=>{d=r,h=Buffer.byteLength(r,"utf8")});const f=r=>{const o=Buffer.isBuffer(r)?r:Buffer.from(typeof r=="string"?r:String(r??""),"utf8");if(c+=o.length,u<w){const s=o.subarray(0,w-u);a.push(s),u+=s.length}},m=e.write.bind(e),$=e.end.bind(e);let A="";const B=e.writeHead.bind(e);e.writeHead=((...r)=>{const o=r[1];if(o&&typeof o=="object"&&!Array.isArray(o)){const s=o,p=s["content-type"]??s["Content-Type"];typeof p=="string"&&(A=p)}return B(...r)}),e.write=((r,...o)=>(f(r),m(r,...o))),e.end=((r,...o)=>(typeof r!="function"&&r!=null&&f(r),$(r,...o)));const S=()=>{if(l)return;l=!0;const o=(String(e.getHeader("content-type")??"")||A).includes("event-stream"),s={ts:new Date(i).toISOString(),method:t.method??"GET",path:t.url??"/",status:e.statusCode,durationMs:Date.now()-i,ip:(t.socket?.remoteAddress??"").replace(/^::ffff:/,""),resBytes:c},p=t.headers["user-agent"];typeof p=="string"&&p&&(s.ua=p.slice(0,120)),h&&(s.req=M(d,h)),o?s.stream=!0:c&&(s.res=M(Buffer.concat(a).toString("utf8"),c)),e.writableEnded||(s.aborted=!0),this.write(logFileFor(this.dir,new Date(i)),`${JSON.stringify(s)}
-`)};e.on("finish",S),e.on("close",S)}write(t,e){this.chain=this.chain.then(async()=>{try{await L(this.dir,{recursive:!0}),await F(t,e,"utf8"),await this.purge()}catch{}})}async purge(){const t=(await T(this.dir)).filter(e=>_(e)!=null);if(!(t.length<=MAX_LOG_FILES)){t.sort();for(const e of t.slice(0,t.length-MAX_LOG_FILES))await j(g.join(this.dir,e),{force:!0})}}onIdle(){return this.chain}async query(t){const e=(await T(this.dir).catch(()=>[])).filter(d=>_(d)!=null).sort().reverse(),i=Math.min(Math.max(t.limit??I,1),O),a=t.from?Date.parse(t.from):NaN,u=t.to?Date.parse(t.to):NaN,c=[];for(const d of e){if(c.length>=i)break;const h=await N(g.join(this.dir,d),"utf8").catch(()=>"");for(const l of h.split(`
-`).reverse()){if(!l.trim())continue;let f;try{f=JSON.parse(l)}catch{continue}const m=Date.parse(f.ts);if(!(Number.isFinite(a)&&m<a)&&!(Number.isFinite(u)&&m>u)&&!(t.status!=null&&f.status!==t.status)&&!(t.method&&f.method.toUpperCase()!==t.method.toUpperCase())&&!(t.path&&!f.path.includes(t.path))&&(c.push(f),c.length>=i))break}}return{entries:c,files:e.length}}}
+import{appendFile as B,mkdir as L,readdir as k,readFile as M,rm as O}from"node:fs/promises";import g from"node:path";import{getApiLogsDir as v}from"../db/paths.js";const y=8*1024,C=2e3,w=50,D=6;export const MAX_LOG_FILES=24;const H=200,T=1e3,E=new Set(["password","apikey","token","secret","authorization","cookie","x-weave-local"]);function m(r,t=0){if(typeof r=="string")return r.length>C?`[truncated ${r.length} chars]`:r;if(Array.isArray(r)){if(t>=D)return"[depth-limited]";const e=r.slice(0,w).map(n=>m(n,t+1));return r.length>w&&e.push(`[truncated ${r.length-w} items]`),e}if(r&&typeof r=="object"){if(t>=D)return"[depth-limited]";const e={};for(const[n,o]of Object.entries(r))e[n]=E.has(n.toLowerCase())?"[redacted]":m(o,t+1);return e}return r}function N(r,t){if(t>y)return`[truncated body ${t} bytes]`;try{return m(JSON.parse(r))}catch{return m(r)}}export function maskPath(r){return r.replace(/^(\/webhooks\/orchestrate\/)[^?]+/,"$1[redacted]")}export function logFileFor(r,t){const e=o=>String(o).padStart(2,"0"),n=`${t.getFullYear()}-${e(t.getMonth()+1)}-${e(t.getDate())}T${e(t.getHours())}`;return g.join(r,`api-${n}.jsonl`)}function j(r){const t=g.basename(r).match(/^api-(\d{4}-\d{2}-\d{2}T\d{2})\.jsonl$/);return t?t[1]:null}const A=new WeakMap;export function noteRequestBody(r,t){A.get(r)?.(t)}export class ApiLogger{dir;chain=Promise.resolve();constructor(t={}){this.dir=t.dir??v()}begin(t,e){const n=Date.now(),o=[];let f=0,a=0,h="",d=0,l=!1;A.set(t,i=>{h=i,d=Buffer.byteLength(i,"utf8")});const c=i=>{const s=Buffer.isBuffer(i)?i:Buffer.from(typeof i=="string"?i:String(i??""),"utf8");if(a+=s.length,f<y){const u=s.subarray(0,y-f);o.push(u),f+=u.length}},p=e.write.bind(e),F=e.end.bind(e);let b="";const x=e.writeHead.bind(e);e.writeHead=((...i)=>{const s=i[1];if(s&&typeof s=="object"&&!Array.isArray(s)){const u=s,$=u["content-type"]??u["Content-Type"];typeof $=="string"&&(b=$)}return x(...i)}),e.write=((i,...s)=>(c(i),p(i,...s))),e.end=((i,...s)=>(typeof i!="function"&&i!=null&&c(i),F(i,...s)));const S=()=>{if(l)return;l=!0;const i=(String(e.getHeader("content-type")??"")||b).includes("event-stream"),s={ts:new Date(n).toISOString(),method:t.method??"GET",path:maskPath(t.url??"/"),status:e.statusCode,durationMs:Date.now()-n,ip:(t.socket?.remoteAddress??"").replace(/^::ffff:/,""),resBytes:a},u=t.headers["user-agent"];typeof u=="string"&&u&&(s.ua=u.slice(0,120)),d&&(s.req=N(h,d)),i?s.stream=!0:a&&(s.res=N(Buffer.concat(o).toString("utf8"),a)),e.writableEnded||(s.aborted=!0),this.write(logFileFor(this.dir,new Date(n)),`${JSON.stringify(s)}
+`)};e.on("finish",S),e.on("close",S)}write(t,e){this.chain=this.chain.then(async()=>{try{await L(this.dir,{recursive:!0}),await B(t,e,"utf8"),await this.purge()}catch{}})}async purge(){const t=(await k(this.dir)).filter(e=>j(e)!=null);if(!(t.length<=MAX_LOG_FILES)){t.sort();for(const e of t.slice(0,t.length-MAX_LOG_FILES))await O(g.join(this.dir,e),{force:!0})}}onIdle(){return this.chain}async query(t){const e=(await k(this.dir).catch(()=>[])).filter(h=>j(h)!=null).sort().reverse(),n=Math.min(Math.max(t.limit??H,1),T),o=t.from?Date.parse(t.from):NaN,f=t.to?Date.parse(t.to):NaN,a=[];for(const h of e){if(a.length>=n)break;const d=await M(g.join(this.dir,h),"utf8").catch(()=>"");for(const l of d.split(`
+`).reverse()){if(!l.trim())continue;let c;try{c=JSON.parse(l)}catch{continue}const p=Date.parse(c.ts);if(!(Number.isFinite(o)&&p<o)&&!(Number.isFinite(f)&&p>f)&&!(t.status!=null&&c.status!==t.status)&&!(t.method&&c.method.toUpperCase()!==t.method.toUpperCase())&&!(t.path&&!c.path.includes(t.path))&&(a.push(c),a.length>=n))break}}return{entries:a,files:e.length}}}

package/node_modules/@weavecode/server/dist/daemon/auth-routes.js

@@ -1 +1 @@
-import{clearedSessionCookie as c,sessionCookie as h}from"./dashboard-auth.js";import{readJson as i,sendJson as r}from"./http.js";const l=300,n=6,f=e=>new Promise(t=>setTimeout(t,e));export async function handleAuthRoutes(e,t,d,u){if(u!=="/auth"&&!u.startsWith("/auth/"))return!1;const o=d.auth;if(!o)return r(t,503,{error:"Auth subsystem unavailable"}),!0;if(u==="/auth/status"&&e.method==="GET")return r(t,200,{passwordSet:o.isPasswordSet(),authenticated:o.isAuthenticated(e.headers)}),!0;if(u==="/auth/login"&&e.method==="POST"){let s;try{s=await i(e)}catch{return r(t,400,{error:"Invalid JSON body"}),!0}const a=typeof s.password=="string"?s.password:"";return!a||!o.verifyPassword(a)?(await f(l),r(t,401,{error:"Invalid password"}),!0):(t.setHeader("set-cookie",h(o.issueSession())),r(t,200,{ok:!0}),!0)}if(u==="/auth/logout"&&e.method==="POST")return t.setHeader("set-cookie",c()),r(t,200,{ok:!0}),!0;if(u==="/auth/password"&&e.method==="PUT"){if(!o.isLocallyTrusted(e.headers))return r(t,401,{error:"Unauthorized (local token required)"}),!0;let s;try{s=await i(e)}catch{return r(t,400,{error:"Invalid JSON body"}),!0}const a=typeof s.next=="string"?s.next:"";return a.length<n?(r(t,400,{error:`Password must be at least ${n} characters`}),!0):(o.setPassword(a),r(t,200,{ok:!0}),!0)}return r(t,404,{error:"Not found"}),!0}
+import{clearedSessionCookie as h,sessionCookie as c}from"./dashboard-auth.js";import{readJson as i,sendJson as e}from"./http.js";const l=300,d=6,f=s=>new Promise(r=>setTimeout(r,s));export async function handleAuthRoutes(s,r,u,a){if(a!=="/auth"&&!a.startsWith("/auth/"))return!1;const t=u.auth;if(!t)return e(r,503,{error:"Auth subsystem unavailable"}),!0;if(a==="/auth/status"&&s.method==="GET")return e(r,200,{passwordSet:t.isPasswordSet(),authenticated:t.isAuthenticated(s.headers)}),!0;if(a==="/auth/login"&&s.method==="POST"){let o;try{o=await i(s)}catch{return e(r,400,{error:"Invalid JSON body"}),!0}const n=typeof o.password=="string"?o.password:"";return!n||!t.verifyPassword(n)?(await f(l),e(r,401,{error:"Invalid password"}),!0):(r.setHeader("set-cookie",c(t.issueSession())),e(r,200,{ok:!0}),!0)}if(a==="/auth/logout"&&s.method==="POST")return r.setHeader("set-cookie",h()),e(r,200,{ok:!0}),!0;if(a==="/auth/password"&&s.method==="PUT"){if(!t.isLocallyTrusted(s.headers))return e(r,401,{error:"Unauthorized (local token required)"}),!0;let o;try{o=await i(s)}catch{return e(r,400,{error:"Invalid JSON body"}),!0}const n=typeof o.next=="string"?o.next:"";return n.length<d?(e(r,400,{error:`Password must be at least ${d} characters`}),!0):(t.setPassword(n),e(r,200,{ok:!0}),!0)}return e(r,404,{error:"Not found"}),!0}

package/node_modules/@weavecode/server/dist/daemon/auto-start.js

@@ -1,17 +1,17 @@
-import{spawnSync as u}from"node:child_process";import{fileURLToPath as l}from"node:url";import{mkdirSync as a,writeFileSync as i,unlinkSync as s}from"node:fs";import{homedir as m}from"node:os";import r from"node:path";import{getDataDir as p}from"../db/paths.js";import{readDaemonSettingsSync as f}from"./settings.js";const o="weave-daemon",c="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";export function relaunchArgs(){return[process.execPath,...process.execArgv.map(t=>{if(t!=="tsx"&&!t.startsWith("tsx/"))return t;try{return l(import.meta.resolve(t))}catch{return t}}),r.resolve(process.argv[1]??process.argv[0])]}function d(t){return{platform:t.platform??process.platform,dataDir:t.dataDir??p(),home:t.home??m(),run:t.run??((e,n)=>({status:u(e,n,{stdio:"ignore"}).status}))}}function h(t){return t.map(e=>`"${e}"`).join(" ")}function y(t){const e=r.join(t.dataDir,"weave-autostart.vbs");a(t.dataDir,{recursive:!0});const n=h(relaunchArgs());i(e,`' Generated by weave \u2014 daemon auto-start. Do not edit.
-CreateObject("WScript.Shell").Run "${n.replace(/"/g,'""')}", 0, False
-`),t.run("reg",["add",c,"/v",o,"/t","REG_SZ","/d",`wscript.exe "${e}"`,"/f"])}function g(t){t.run("reg",["delete",c,"/v",o,"/f"]);try{s(r.join(t.dataDir,"weave-autostart.vbs"))}catch{}}function v(t){const e=n=>n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");return`<?xml version="1.0" encoding="UTF-8"?>
+import{spawnSync as p}from"node:child_process";import{fileURLToPath as m}from"node:url";import{mkdirSync as a,writeFileSync as i,unlinkSync as c}from"node:fs";import{homedir as l}from"node:os";import n from"node:path";import{getAutoStartScriptPath as s,getDataDir as d}from"../db/paths.js";import{readDaemonSettingsSync as f}from"./settings.js";const o="weave-daemon",u="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";export function relaunchArgs(){return[process.execPath,...process.execArgv.map(e=>{if(e!=="tsx"&&!e.startsWith("tsx/"))return e;try{return m(import.meta.resolve(e))}catch{return e}}),n.resolve(process.argv[1]??process.argv[0])]}function g(e){return{platform:e.platform??process.platform,dataDir:e.dataDir??d(),home:e.home??l(),run:e.run??((r,t)=>({status:p(r,t,{stdio:"ignore"}).status}))}}function h(e){return e.map(r=>`"${r}"`).join(" ")}function y(e){const r=s(e.dataDir);a(n.dirname(r),{recursive:!0});const t=h(relaunchArgs());i(r,`' Generated by weave \u2014 daemon auto-start. Do not edit.
+CreateObject("WScript.Shell").Run "${t.replace(/"/g,'""')}", 0, False
+`),e.run("reg",["add",u,"/v",o,"/t","REG_SZ","/d",`wscript.exe "${r}"`,"/f"])}function v(e){e.run("reg",["delete",u,"/v",o,"/f"]);try{c(s(e.dataDir))}catch{}}function w(e){const r=t=>t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");return`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
   <key>Label</key><string>com.weave.daemon</string>
   <key>ProgramArguments</key>
   <array>
-`+t.map(n=>`    <string>${e(n)}</string>`).join(`
+`+e.map(t=>`    <string>${r(t)}</string>`).join(`
 `)+`
   </array>
   <key>RunAtLoad</key><true/>
 </dict>
 </plist>
-`}function w(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");a(r.dirname(e),{recursive:!0}),i(e,v(relaunchArgs())),t.run("launchctl",["unload",e]),t.run("launchctl",["load",e])}function L(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");t.run("launchctl",["unload",e]);try{s(e)}catch{}}function D(t){return t.map(e=>/[\s"]/.test(e)?`"${e}"`:e).join(" ")}function b(t){const e=r.join(t.home,".config","autostart",`${o}.desktop`);a(r.dirname(e),{recursive:!0}),i(e,["[Desktop Entry]","Type=Application","Name=weave daemon",`Exec=${D(relaunchArgs())}`,"X-GNOME-Autostart-enabled=true",""].join(`
-`))}function k(t){try{s(r.join(t.home,".config","autostart",`${o}.desktop`))}catch{}}export function applyLaunchOnLogin(t,e={}){try{const n=d(e);n.platform==="win32"?t?y(n):g(n):n.platform==="darwin"?t?w(n):L(n):t?b(n):k(n)}catch(n){console.error(`[weave] auto-start ${t?"enable":"disable"} failed:`,n)}}export function syncLaunchOnLogin(t={}){const e=f().startup;applyLaunchOnLogin(e?.launchOnLogin??!1,t)}
+`}function L(e){const r=n.join(e.home,"Library","LaunchAgents","com.weave.daemon.plist");a(n.dirname(r),{recursive:!0}),i(r,w(relaunchArgs())),e.run("launchctl",["unload",r]),e.run("launchctl",["load",r])}function D(e){const r=n.join(e.home,"Library","LaunchAgents","com.weave.daemon.plist");e.run("launchctl",["unload",r]);try{c(r)}catch{}}function S(e){return e.map(r=>/[\s"]/.test(r)?`"${r}"`:r).join(" ")}function k(e){const r=n.join(e.home,".config","autostart",`${o}.desktop`);a(n.dirname(r),{recursive:!0}),i(r,["[Desktop Entry]","Type=Application","Name=weave daemon",`Exec=${S(relaunchArgs())}`,"X-GNOME-Autostart-enabled=true",""].join(`
+`))}function x(e){try{c(n.join(e.home,".config","autostart",`${o}.desktop`))}catch{}}export function applyLaunchOnLogin(e,r={}){try{const t=g(r);t.platform==="win32"?e?y(t):v(t):t.platform==="darwin"?e?L(t):D(t):e?k(t):x(t)}catch(t){console.error(`[weave] auto-start ${e?"enable":"disable"} failed:`,t)}}export function syncLaunchOnLogin(e={}){const r=f().startup;applyLaunchOnLogin(r?.launchOnLogin??!1,e)}

package/node_modules/@weavecode/server/dist/daemon/capture-routes.js

@@ -1 +1 @@
-import{z as n}from"zod";import{isHarness as f}from"@weavecode/core";import{WEAVE_VERSION as p}from"../version.js";import{readJson as d,sendJson as s}from"./http.js";import{captureSurfaces as i}from"../surfaces.js";const l=n.object({harness:n.string(),enabled:n.boolean()});export async function handleCaptureRoutes(o,t,u,c){if(c!=="/capture")return!1;if(o.method==="GET"){const e=await Promise.all(i().map(async({harness:a,surface:r})=>({harness:a,...await r.readUserCapture()})));return s(t,200,{rows:e}),!0}if(o.method==="PUT"){let e;try{e=l.parse(await d(o))}catch(r){return s(t,400,{error:r instanceof Error?r.message:"Invalid body"}),!0}if(!f(e.harness))return s(t,400,{error:`Unknown harness: ${e.harness}`}),!0;const a=i().find(r=>r.harness===e.harness);if(!a)return s(t,400,{error:`No capture surface for harness: ${e.harness}`}),!0;try{if(e.enabled){await a.surface.installUserCapture({version:p});for(const r of u.projects.list())await a.surface.stripProjectCapture(r.path)}else await a.surface.uninstallUserCapture();u.dataBus?.emit({key:"capture"}),s(t,200,{harness:a.harness,...await a.surface.readUserCapture()})}catch(r){s(t,400,{error:r instanceof Error?r.message:"Capture update failed"})}return!0}return s(t,405,{error:"Method not allowed"}),!0}
+import{z as o}from"zod";import{isHarness as f}from"@weavecode/core";import{WEAVE_VERSION as p}from"../version.js";import{readJson as h,sendJson as t}from"./http.js";import{captureSurfaces as u}from"../surfaces.js";const d=o.object({harness:o.string(),enabled:o.boolean()});export async function handleCaptureRoutes(n,s,i,c){if(c!=="/capture")return!1;if(n.method==="GET"){const e=await Promise.all(u().map(async({harness:a,surface:r})=>({harness:a,...await r.readUserCapture()})));return t(s,200,{rows:e}),!0}if(n.method==="PUT"){let e;try{e=d.parse(await h(n))}catch(r){return t(s,400,{error:r instanceof Error?r.message:"Invalid body"}),!0}if(!f(e.harness))return t(s,400,{error:`Unknown harness: ${e.harness}`}),!0;const a=u().find(r=>r.harness===e.harness);if(!a)return t(s,400,{error:`No capture surface for harness: ${e.harness}`}),!0;try{if(e.enabled){await a.surface.installUserCapture({version:p});for(const r of i.projects.list())await a.surface.stripProjectCapture(r.path)}else await a.surface.uninstallUserCapture();i.dataBus?.emit({key:"capture"}),t(s,200,{harness:a.harness,...await a.surface.readUserCapture()})}catch(r){t(s,400,{error:r instanceof Error?r.message:"Capture update failed"})}return!0}return t(s,405,{error:"Method not allowed"}),!0}

package/node_modules/@weavecode/server/dist/daemon/claude-liveness.d.ts

@@ -24,7 +24,7 @@ export declare const CLAUDE_REG_GRACE_MS = 90000;
  *   即进程已死；豁免窗内不猜（新会话文件可能还没落盘）；
  * - 「仅一条 SessionStart」的空壳行不判：/continue、compact 会各留一行
  *   幽灵会话（事件跟在新 id 后面流），判死会把活着的会谈错标 terminated；
- *   它们反正由 SessionSweeper 在保活期后清走；
+ *   它们交给 SessionSweeper 清（宿主丢弃的见 shellDiscardedByClaude，其余保活期后）；
  * - 其余（codex/未知 harness/新鲜会话）→ null，上游不判。
  */
 export declare function pidAliveOf(row: {
@@ -34,6 +34,21 @@ export declare function pidAliveOf(row: {
     lastEventType?: string | null;
     eventCount?: number;
 }, liveness: Map<string, boolean>, now?: number): boolean | null;
+/**
+ * 空壳会话（仅一条 SessionStart）是否已被宿主整个丢弃：claude 一句没说就退出时会把
+ * session id 连转录一起删——不发 SessionEnd、注册表自清。于是「查无登记 + 已过豁免窗」
+ * 就是再没有进程会以这个 id 发事件的证据，不必等满 1 小时保活期（用户原话：claude 那边
+ * 会话没了，weave 的会话列表却还留着）。
+ * 与 pidAliveOf 的「空壳不判」不冲突：那是状态面不猜，这里只决定清扫时机。
+ * 仍有登记的（活着的空闲会话 / 崩溃残留）一律不动，照旧走保活期。
+ */
+export declare function shellDiscardedByClaude(row: {
+    sessionId: string;
+    harness?: string | null;
+    lastSeenAt: string;
+    lastEventType?: string | null;
+    eventCount?: number;
+}, liveness: Map<string, boolean>, now?: number): boolean;
 /**
  * sessionId → 是否活着 的映射。只覆盖注册表里有登记的（claude 会话）；
  * codex/旧会话/他机会话不进图——上游把「查不到」当未知，不许误判死。

package/node_modules/@weavecode/server/dist/daemon/claude-liveness.js

@@ -1 +1 @@
-import{readdirSync as c,readFileSync as l}from"node:fs";import{join as u}from"node:path";export function parseClaudeSessionReg(e){let t;try{t=JSON.parse(e)}catch{return null}const n=t;return typeof n?.pid!="number"||!Number.isInteger(n.pid)||n.pid<0||typeof n.sessionId!="string"||!n.sessionId?null:{pid:n.pid,sessionId:n.sessionId}}export function pidAlive(e){try{return process.kill(e,0),!0}catch(t){return t.code!=="ESRCH"}}function a(){const e=process.platform==="win32"?process.env.USERPROFILE:process.env.HOME;return e?u(e,".claude","sessions"):null}export const CLAUDE_REG_GRACE_MS=9e4;export function pidAliveOf(e,t,n=Date.now()){const r=t.get(e.sessionId);if(r!==void 0)return r;if(e.harness!=="claude"||e.lastEventType==="SessionStart"&&(e.eventCount??0)<=1)return null;const s=Date.parse(e.lastSeenAt);return!Number.isFinite(s)||n-s<CLAUDE_REG_GRACE_MS?null:!1}export function claudeLivenessById(e=null){const t=e??a(),n=new Map;if(!t)return n;let r;try{r=c(t)}catch{return n}for(const s of r){if(!/^\d+\.json$/.test(s))continue;let o;try{o=l(u(t,s),"utf8")}catch{continue}const i=parseClaudeSessionReg(o);i&&n.set(i.sessionId,pidAlive(i.pid))}return n}
+import{readdirSync as c,readFileSync as a}from"node:fs";import{join as u}from"node:path";export function parseClaudeSessionReg(e){let n;try{n=JSON.parse(e)}catch{return null}const t=n;return typeof t?.pid!="number"||!Number.isInteger(t.pid)||t.pid<0||typeof t.sessionId!="string"||!t.sessionId?null:{pid:t.pid,sessionId:t.sessionId}}export function pidAlive(e){try{return process.kill(e,0),!0}catch(n){return n.code!=="ESRCH"}}function l(){const e=process.platform==="win32"?process.env.USERPROFILE:process.env.HOME;return e?u(e,".claude","sessions"):null}export const CLAUDE_REG_GRACE_MS=9e4;export function pidAliveOf(e,n,t=Date.now()){const s=n.get(e.sessionId);if(s!==void 0)return s;if(e.harness!=="claude"||e.lastEventType==="SessionStart"&&(e.eventCount??0)<=1)return null;const r=Date.parse(e.lastSeenAt);return!Number.isFinite(r)||t-r<CLAUDE_REG_GRACE_MS?null:!1}export function shellDiscardedByClaude(e,n,t=Date.now()){if(e.harness!=="claude"||e.lastEventType!=="SessionStart"||(e.eventCount??0)>1||n.has(e.sessionId))return!1;const s=Date.parse(e.lastSeenAt);return Number.isFinite(s)&&t-s>=CLAUDE_REG_GRACE_MS}export function claudeLivenessById(e=null){const n=e??l(),t=new Map;if(!n)return t;let s;try{s=c(n)}catch{return t}for(const r of s){if(!/^\d+\.json$/.test(r))continue;let i;try{i=a(u(n,r),"utf8")}catch{continue}const o=parseClaudeSessionReg(i);o&&t.set(o.sessionId,pidAlive(o.pid))}return t}

package/node_modules/@weavecode/server/dist/daemon/config-routes.d.ts

@@ -0,0 +1,10 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from './server.js';
+/**
+ * 资源管理 · harness 配置面（`/harness-config/*`）。
+ *
+ * 词表/落点/托管键/模型接口文法全归 harness 的 config 槽；这里只做「取档 → 读改写 →
+ * 快照与漂移」的装配。profile 快照落 `local/harness-config/<harness>/`，
+ * 写盘一律留备份。
+ */
+export declare function handleConfigRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string, url: URL): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/config-routes.js

@@ -0,0 +1 @@
+import{homedir as j}from"node:os";import{access as U}from"node:fs/promises";import{isHarness as E}from"@weavecode/core";import{configSurfaceFor as v}from"../surfaces.js";import{applyUpdates as S}from"../config/dotted.js";import{createProfile as T,listBackups as N,listProfiles as h,readBackup as O,readSnapshot as b,removeProfile as x,renameProfile as J,pushBackup as k,saveProfile as B,setActive as C}from"../config/profiles.js";import{readBody as K,sendJson as a}from"./http.js";import{getHarnessConfigDir as $}from"../db/paths.js";const L=["user","project","projectLocal","global"];function I(s){return typeof s=="string"&&L.includes(s)?s:null}function P(s,e){return s.serializeRaw(e)}function R(s,e,l){const p=s.files(l).find(d=>d.id===e);return p?p.path(l):""}async function A(s){try{const e=JSON.parse(await K(s));return typeof e=="object"&&e!==null&&!Array.isArray(e)?e:null}catch{return null}}async function V(s){if(!s)return!1;try{return await U(s),!0}catch{return!1}}async function F(s,e,l,p,d){const i=R(l,p,d),n=await l.read(p,d),t=P(l,n),r=await h(s,e,p),u=r.activeId?await b(s,e,p,r.activeId):null,o=u?P(l,u):null;return{harness:e,file:p,path:i,exists:await V(i),values:n,managedKeys:l.managedKeys(n),managedEntries:l.managedEntries(n),profiles:r.profiles,activeId:r.activeId,liveText:t,activeText:o,drifted:o!==null&&o!==t,backups:await N(s,e,p)}}function D(s,e,l){let p=null;if(e==="project"||e==="projectLocal"){const d=Number(l);if(!Number.isInteger(d)||d<=0)return"\u9700\u8981 projectId";const i=s.projects.getById(d);if(!i)return"\u9879\u76EE\u4E0D\u5B58\u5728";p=i.path}return{projectPath:p,homedir:j()}}export async function handleConfigRoutes(s,e,l,p,d){if(!p.startsWith("/harness-config"))return!1;const i=$();if(p==="/harness-config/catalog"&&s.method==="GET"){const n=d.searchParams.get("harness");if(!E(n))return a(e,400,{error:"Unknown harness"}),!0;const t=v(n);if(!t)return a(e,200,{supported:!1}),!0;const r=I(d.searchParams.get("file"))??"user",u={projectPath:null,homedir:j()},o=t.catalog(r);return a(e,200,{supported:!0,harness:n,file:r,rawFormat:t.rawFormat,files:t.files(u).map(c=>({id:c.id,profiles:c.profiles})),groups:o.groups,keys:o.keys,envVars:o.envVars}),!0}if(p==="/harness-config"&&s.method==="GET"){const n=d.searchParams.get("harness"),t=I(d.searchParams.get("file"));if(!E(n)||!t)return a(e,400,{error:"Unknown harness or file"}),!0;const r=v(n);if(!r)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const u=D(l,t,d.searchParams.get("projectId"));return typeof u=="string"?(a(e,400,{error:u}),!0):(a(e,200,await F(i,n,r,t,u)),!0)}if(p==="/harness-config/values"&&s.method==="PUT"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file);if(!E(t)||!r)return a(e,400,{error:"Unknown harness or file"}),!0;const u=v(t);if(!u)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=D(l,r,n.projectId);if(typeof o=="string")return a(e,400,{error:o}),!0;const c=Array.isArray(n.updates)?n.updates:null;if(!c)return a(e,400,{error:'Missing "updates"'}),!0;try{const f=await u.read(r,o),m=S(f,c);await k(i,t,r,f),await u.write(r,o,m);const w=await h(i,t,r);w.activeId&&await B(i,t,r,w.activeId,m)}catch(f){return a(e,400,{error:f.message}),!0}return a(e,200,await F(i,t,u,r,o)),!0}if(p==="/harness-config/raw"&&s.method==="PUT"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file);if(!E(t)||!r)return a(e,400,{error:"Unknown harness or file"}),!0;const u=v(t);if(!u)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=D(l,r,n.projectId);if(typeof o=="string")return a(e,400,{error:o}),!0;let c;try{c=u.parseRaw(String(n.text??""))}catch(f){return a(e,400,{error:`\u4E0D\u662F\u5408\u6CD5${u.rawFormat==="toml"?" TOML":" JSON"}\uFF1A${f.message}`}),!0}try{const f=await u.read(r,o);await k(i,t,r,f),await u.write(r,o,c);const m=await h(i,t,r);m.activeId&&await B(i,t,r,m.activeId,await u.read(r,o))}catch(f){return a(e,400,{error:f.message}),!0}return a(e,200,await F(i,t,u,r,o)),!0}if(p==="/harness-config/profile"&&s.method==="POST"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file),u=n.action;if(!E(t)||!r||typeof u!="string")return a(e,400,{error:"Unknown harness, file or action"}),!0;const o=v(t);if(!o)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const c=D(l,r,n.projectId);if(typeof c=="string")return a(e,400,{error:c}),!0;const f=typeof n.id=="string"?n.id:"",m=typeof n.name=="string"?n.name.trim():"";switch(u){case"list":{const w=await h(i,t,r);return a(e,200,w),!0}case"create":{const w=await h(i,t,r),g=await T(i,t,r,m||`\u914D\u7F6E ${w.profiles.length+1}`,await o.read(r,c));return a(e,200,{profile:g,state:await h(i,t,r)}),!0}case"save":return(await h(i,t,r)).profiles.some(w=>w.id===f)?(await B(i,t,r,f,await o.read(r,c)),a(e,200,await h(i,t,r)),!0):(a(e,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0);case"duplicate":{const w=await b(i,t,r,f);if(!w)return a(e,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0;const g=await h(i,t,r),y=await T(i,t,r,m||`\u914D\u7F6E ${g.profiles.length+1}`,w);return a(e,200,{profile:y,state:await h(i,t,r)}),!0}case"rename":return m?(await J(i,t,r,f,m),a(e,200,await h(i,t,r)),!0):(a(e,400,{error:"\u7F3A\u5C11\u540D\u79F0"}),!0);case"remove":return await x(i,t,r,f),a(e,200,await h(i,t,r)),!0;case"activate":{const w=await b(i,t,r,f);if(!w)return a(e,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0;const g=await o.read(r,c);if(n.confirm!==!0)return a(e,200,{requiresConfirm:!0,liveText:P(o,g),profileText:P(o,w)}),!0;try{await k(i,t,r,g),await o.write(r,c,w),await C(i,t,r,f)}catch(y){return a(e,400,{error:y.message}),!0}return a(e,200,await F(i,t,o,r,c)),!0}case"acceptDrift":return await B(i,t,r,f,await o.read(r,c)),a(e,200,await F(i,t,o,r,c)),!0;case"restoreBackup":{const w=typeof n.backupId=="string"?n.backupId:"",g=await O(i,t,r,w);if(!g)return a(e,404,{error:"\u5907\u4EFD\u4E0D\u5B58\u5728"}),!0;try{await k(i,t,r,await o.read(r,c)),await o.write(r,c,g);const y=await h(i,t,r);y.activeId&&await B(i,t,r,y.activeId,g)}catch(y){return a(e,400,{error:y.message}),!0}return a(e,200,await F(i,t,o,r,c)),!0}default:return a(e,400,{error:`\u672A\u77E5\u52A8\u4F5C\uFF1A${u}`}),!0}}if(p==="/harness-config/models"&&s.method==="POST"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file)??"user";if(!E(t))return a(e,400,{error:"Unknown harness"}),!0;const u=v(t);if(!u)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=D(l,r,n.projectId);if(typeof o=="string")return a(e,400,{error:o}),!0;try{const c=await u.read(r,o),f=await u.models({values:c,baseUrl:typeof n.baseUrl=="string"?n.baseUrl:null,apiKey:typeof n.apiKey=="string"?n.apiKey:null,authToken:typeof n.authToken=="string"?n.authToken:null});a(e,200,f)}catch(c){a(e,502,{error:c.message})}return!0}return a(e,404,{error:"Not found"}),!0}