@weavecode/weave 0.1.1 → 0.1.3

package/node_modules/@weavecode/server/dist/daemon/cron.d.ts

@@ -0,0 +1,20 @@
+/**
+ * 5 字段 cron（分 时 日 月 周，本机时区，无秒/无 @macro）。解析器只在 server：
+ * web 的 cron 构建器结构上只产出合法表达式，不镜像解析逻辑。
+ * 日/周同时受限时按 vixie cron 的 OR 语义（任一命中即算）。
+ */
+export interface CronSchedule {
+    minutes: number[];
+    hours: number[];
+    doms: number[];
+    months: number[];
+    dows: number[];
+    domAny: boolean;
+    dowAny: boolean;
+}
+export declare function parseCron(expr: string): CronSchedule | null;
+export declare function matchesMinute(s: CronSchedule, at: Date): boolean;
+/** 下一次触发时刻（ISO）；一年内无解（如 2 月 30 日）→ null。 */
+export declare function nextRunAt(s: CronSchedule, from?: Date): string | null;
+/** 去重键：本地分钟（`last_cron_at` 落它，同一分钟只 fire 一次）。 */
+export declare function minuteKey(at: Date): string;

package/node_modules/@weavecode/server/dist/daemon/cron.js

@@ -0,0 +1 @@
+const d=[{min:0,max:59},{min:0,max:23},{min:1,max:31},{min:1,max:12},{min:0,max:7}];export function parseCron(n){const t=n.trim().split(/\s+/);if(t.length!==5)return null;const e=[];for(let s=0;s<5;s++){const u=a(t[s],d[s].min,d[s].max);if(!u)return null;e.push(u)}const o=[...new Set(e[4].map(s=>s===7?0:s))].sort((s,u)=>s-u);return{minutes:e[0],hours:e[1],doms:e[2],months:e[3],dows:o,domAny:t[2]==="*",dowAny:t[4]==="*"}}function a(n,t,e){const o=new Set;for(const s of n.split(",")){const[u,c]=s.split("/");if(u===void 0)return null;const m=c===void 0?1:Number(c);if(!Number.isInteger(m)||m<1||m>e)return null;let i,r;if(u==="*")i=t,r=e;else if(u.includes("-")){const[l,f]=u.split("-");i=Number(l),r=Number(f)}else i=Number(u),r=c===void 0?i:e;if(!Number.isInteger(i)||!Number.isInteger(r)||i<t||r>e||i>r)return null;for(let l=i;l<=r;l+=m)o.add(l)}return o.size===0?null:[...o].sort((s,u)=>s-u)}function g(n,t){const e=n.doms.includes(t.getDate()),o=n.dows.includes(t.getDay());return n.domAny&&n.dowAny?!0:n.domAny?o:n.dowAny?e:e||o}export function matchesMinute(n,t){return n.minutes.includes(t.getMinutes())&&n.hours.includes(t.getHours())&&n.months.includes(t.getMonth()+1)&&g(n,t)}export function nextRunAt(n,t=new Date){const e=new Date(t.getTime());e.setSeconds(0,0),e.setMinutes(e.getMinutes()+1);const o=new Date(t.getTime()+366*864e5);for(;e<=o;){if(!n.months.includes(e.getMonth()+1)){e.setMonth(e.getMonth()+1,1),e.setHours(0,0,0,0);continue}if(!g(n,e)){e.setDate(e.getDate()+1),e.setHours(0,0,0,0);continue}if(!n.hours.includes(e.getHours())){e.setHours(e.getHours()+1,0,0,0);continue}if(!n.minutes.includes(e.getMinutes())){e.setMinutes(e.getMinutes()+1,0,0);continue}return e.toISOString()}return null}export function minuteKey(n){const t=e=>String(e).padStart(2,"0");return`${n.getFullYear()}-${t(n.getMonth()+1)}-${t(n.getDate())}T${t(n.getHours())}:${t(n.getMinutes())}`}

package/node_modules/@weavecode/server/dist/daemon/dashboard-auth.js

@@ -1,3 +1,3 @@
-import{createHmac as d,randomBytes as s,randomInt as m,scryptSync as o,timingSafeEqual as w}from"node:crypto";import{chmodSync as g,existsSync as p,mkdirSync as a,readFileSync as y,renameSync as P,rmSync as x,writeFileSync as c}from"node:fs";import h from"node:path";import{getAuthPath as k,getInitialPasswordPath as A}from"../db/paths.js";export const SESSION_COOKIE="weave_session",LOCAL_TOKEN_HEADER="x-weave-local",SESSION_TTL_MS=720*60*60*1e3;const u=64,T=16,l="abcdefghjkmnpqrstuvwxyz23456789";export function generatePassword(){const r=()=>Array.from({length:4},()=>l[m(l.length)]??"a").join("");return[r(),r(),r(),r()].join("-")}function f(r,t){const e=s(T).toString("hex");return{algo:"scrypt",salt:e,hash:o(r,e,u).toString("hex"),updatedAt:t}}function i(r,t){const e=Buffer.from(r),n=Buffer.from(t);return e.length===n.length&&w(e,n)}export function readCookie(r,t){if(r)for(const e of r.split(";")){const n=e.indexOf("=");if(!(n<0)&&e.slice(0,n).trim()===t)return e.slice(n+1).trim()}}export function sessionCookie(r){return`${SESSION_COOKIE}=${r}; HttpOnly; SameSite=Lax; Path=/; Max-Age=${Math.floor(SESSION_TTL_MS/1e3)}`}export function clearedSessionCookie(){return`${SESSION_COOKIE}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`}function O(r){if(!p(r))return null;try{const t=JSON.parse(y(r,"utf8"));return t?.version!==1||typeof t.sessionSecret!="string"||typeof t.localToken!="string"?null:{version:1,password:t.password??null,sessionSecret:t.sessionSecret,localToken:t.localToken,createdAt:typeof t.createdAt=="string"?t.createdAt:new Date().toISOString()}}catch{return null}}function S(r,t){a(h.dirname(r),{recursive:!0});const e=`${r}.tmp`;c(e,`${JSON.stringify(t,null,2)}
-`,{encoding:"utf8",mode:384}),P(e,r);try{g(r,384)}catch{}}export class AuthService{file;authPath;markerPath;now;initialPassword;constructor(t={}){this.authPath=t.authPath??k(),this.markerPath=t.initialPasswordPath??A(),this.now=t.now??Date.now;const e=O(this.authPath);if(e){this.file=e,this.initialPassword=null;return}const n=generatePassword();this.file={version:1,password:f(n,this.nowIso()),sessionSecret:s(32).toString("hex"),localToken:s(24).toString("hex"),createdAt:this.nowIso()},S(this.authPath,this.file),this.writeMarker(n),this.initialPassword=n}isPasswordSet(){return this.file.password!==null}verifyPassword(t){const e=this.file.password;return e?i(o(t,e.salt,u).toString("hex"),e.hash):!1}setPassword(t){this.file={...this.file,password:f(t,this.nowIso()),sessionSecret:s(32).toString("hex")},S(this.authPath,this.file),x(this.markerPath,{force:!0})}getLocalToken(){return this.file.localToken}verifyLocalToken(t){return typeof t=="string"&&t!==""&&i(t,this.file.localToken)}issueSession(){const t=this.now()+SESSION_TTL_MS;return`${t}.${this.sign(t)}`}verifySession(t){if(!t)return!1;const e=t.indexOf(".");if(e<=0)return!1;const n=Number(t.slice(0,e));return!Number.isFinite(n)||n<=this.now()?!1:i(t.slice(e+1),this.sign(n))}isAuthenticated(t){return this.isLocallyTrusted(t)?!0:this.verifySession(readCookie(t.cookie,SESSION_COOKIE))}isLocallyTrusted(t){const e=t[LOCAL_TOKEN_HEADER];return this.verifyLocalToken(typeof e=="string"?e:void 0)}sign(t){return d("sha256",this.file.sessionSecret).update(`weave-session:${t}`).digest("hex")}nowIso(){return new Date(this.now()).toISOString()}writeMarker(t){a(h.dirname(this.markerPath),{recursive:!0}),c(this.markerPath,`${t}
+import{createHmac as d,randomBytes as n,randomInt as m,scryptSync as o,timingSafeEqual as w}from"node:crypto";import{chmodSync as g,existsSync as p,mkdirSync as a,readFileSync as y,renameSync as P,rmSync as k,writeFileSync as c}from"node:fs";import h from"node:path";import{getAuthPath as x,getInitialPasswordPath as v}from"../db/paths.js";export const SESSION_COOKIE="weave_session",LOCAL_TOKEN_HEADER="x-weave-local",SESSION_TTL_MS=720*60*60*1e3;const l=64,O=16,u="abcdefghjkmnpqrstuvwxyz23456789";export function generatePassword(){const s=()=>Array.from({length:4},()=>u[m(u.length)]??"a").join("");return[s(),s(),s(),s()].join("-")}function f(s,t){const e=n(O).toString("hex");return{algo:"scrypt",salt:e,hash:o(s,e,l).toString("hex"),updatedAt:t}}function r(s,t){const e=Buffer.from(s),i=Buffer.from(t);return e.length===i.length&&w(e,i)}export function readCookie(s,t){if(s)for(const e of s.split(";")){const i=e.indexOf("=");if(!(i<0)&&e.slice(0,i).trim()===t)return e.slice(i+1).trim()}}export function sessionCookie(s){return`${SESSION_COOKIE}=${s}; HttpOnly; SameSite=Lax; Path=/; Max-Age=${Math.floor(SESSION_TTL_MS/1e3)}`}export function clearedSessionCookie(){return`${SESSION_COOKIE}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`}function T(s){if(!p(s))return null;try{const t=JSON.parse(y(s,"utf8"));return t?.version!==1||typeof t.sessionSecret!="string"||typeof t.localToken!="string"?null:{version:1,password:t.password??null,sessionSecret:t.sessionSecret,localToken:t.localToken,createdAt:typeof t.createdAt=="string"?t.createdAt:new Date().toISOString()}}catch{return null}}function S(s,t){a(h.dirname(s),{recursive:!0});const e=`${s}.tmp`;c(e,`${JSON.stringify(t,null,2)}
+`,{encoding:"utf8",mode:384}),P(e,s);try{g(s,384)}catch{}}export class AuthService{file;authPath;markerPath;now;initialPassword;constructor(t={}){this.authPath=t.authPath??x(),this.markerPath=t.initialPasswordPath??v(),this.now=t.now??Date.now;const e=T(this.authPath);if(e){this.file=e,this.initialPassword=null;return}const i=generatePassword();this.file={version:1,password:f(i,this.nowIso()),sessionSecret:n(32).toString("hex"),localToken:n(24).toString("hex"),createdAt:this.nowIso()},S(this.authPath,this.file),this.writeMarker(i),this.initialPassword=i}isPasswordSet(){return this.file.password!==null}verifyPassword(t){const e=this.file.password;return e?r(o(t,e.salt,l).toString("hex"),e.hash):!1}setPassword(t){this.file={...this.file,password:f(t,this.nowIso()),sessionSecret:n(32).toString("hex")},S(this.authPath,this.file),k(this.markerPath,{force:!0})}getLocalToken(){return this.file.localToken}verifyLocalToken(t){return typeof t=="string"&&t!==""&&r(t,this.file.localToken)}issueSession(){const t=this.now()+SESSION_TTL_MS;return`${t}.${this.sign(t)}`}verifySession(t){if(!t)return!1;const e=t.indexOf(".");if(e<=0)return!1;const i=Number(t.slice(0,e));return!Number.isFinite(i)||i<=this.now()?!1:r(t.slice(e+1),this.sign(i))}isAuthenticated(t){return this.isLocallyTrusted(t)?!0:this.verifySession(readCookie(t.cookie,SESSION_COOKIE))}isLocallyTrusted(t){const e=t[LOCAL_TOKEN_HEADER];return this.verifyLocalToken(typeof e=="string"?e:void 0)}sign(t){return d("sha256",this.file.sessionSecret).update(`weave-session:${t}`).digest("hex")}nowIso(){return new Date(this.now()).toISOString()}writeMarker(t){a(h.dirname(this.markerPath),{recursive:!0}),c(this.markerPath,`${t}
 `,{encoding:"utf8",mode:384})}}

package/node_modules/@weavecode/server/dist/daemon/dashboard-pusher.d.ts

@@ -0,0 +1,25 @@
+import type { HookEventBus } from '../hooks/bus.js';
+import type { HookEventRepository } from '../repositories/hook-events.js';
+import type { ProjectRepository } from '../repositories/projects.js';
+import type { SessionRepository } from '../repositories/sessions.js';
+import { type DashboardRateCache } from '../hooks/dashboard-rate.js';
+/** 图窗：1 小时 × 10 秒一格。 */
+export declare const DASHBOARD_WINDOW_MS = 3600000;
+export interface DashboardPushDeps {
+    rate: DashboardRateCache;
+    events: Pick<HookEventRepository, 'countAll' | 'countSince' | 'seriesBySecond'>;
+    sessions: Pick<SessionRepository, 'countAll'>;
+    projects: Pick<ProjectRepository, 'list'>;
+    bus: Pick<HookEventBus, 'emit' | 'subscribe'>;
+}
+/**
+ * 仪表盘推送（事件驱动）：
+ * - **连接时**（SseHub 首个订阅者 attach）先推总量，再把一小时历史按 10 分钟分块
+ *   流式推下去——每块一到前端就能画，不等整段查完；
+ * - **之后**只在真有 `event.ingested` 时推增量（1 秒合并），没有数据就不发帧；
+ * - 速率读进程内快照，只有 daemon 起来后第一次 attach 才回填一次库。
+ */
+export declare function startDashboardPusher(deps: DashboardPushDeps): {
+    attach: () => void;
+    stop: () => void;
+};

package/node_modules/@weavecode/server/dist/daemon/dashboard-pusher.js

@@ -0,0 +1 @@
+import{RATE_BUCKET_MS as s}from"../hooks/dashboard-rate.js";export const DASHBOARD_WINDOW_MS=36e5;const w=60,f=1e3,h=6e4;export function startDashboardPusher(e){let o=!1,c={projects:0,sessions:0},a=0;const r=()=>{c={projects:e.projects.list().length,sessions:e.sessions.countAll()},a=Date.now()},l=()=>({...c,...e.rate.totals}),p=()=>{queueMicrotask(()=>{const n=Date.now(),i=DASHBOARD_WINDOW_MS/s,u=Math.floor(n/s)*s-(i-1)*s,S=e.projects.list().map(t=>t.id);e.rate.isSeeded||(e.rate.seed(e.events.seriesBySecond(S,new Date(u).toISOString())),e.rate.seedTotals(e.events.countAll(),e.events.countSince(S,new Date(new Date(n).setHours(0,0,0,0)).toISOString())),r()),Date.now()-a>h&&r();const D=new Date(n).toISOString();e.bus.emit({kind:"dashboard.totals",at:D,totals:l()});for(let t=0;t<i;t+=w){const I=Math.min(w,i-t),b=u+t*s,g=e.rate.bucketsFor(b,I);e.bus.emit({kind:"dashboard.series",at:D,series:g.map((k,O)=>({at:new Date(b+O*s).toISOString().slice(0,19),n:k}))})}})},m=e.bus.subscribe(n=>{n.kind==="event.ingested"&&(o=!0)}),d=setInterval(()=>{o&&(o=!1,Date.now()-a>h&&r(),e.bus.emit({kind:"dashboard.delta",at:new Date().toISOString(),series:e.rate.recentBuckets(12),totals:l()}))},f);return d.unref?.(),{attach:p,stop:()=>{m(),clearInterval(d)}}}

package/node_modules/@weavecode/server/dist/daemon/data-bus.js

@@ -1 +1 @@
-import{EventEmitter as t}from"node:events";export class DataBus{emitter=new t;subscribers=0;constructor(){this.emitter.setMaxListeners(100)}emit(s){this.emitter.emit("change",s)}hasSubscribers(){return this.subscribers>0}subscribe(s){return this.subscribers+=1,this.emitter.on("change",s),()=>{this.subscribers-=1,this.emitter.off("change",s)}}}
+import{EventEmitter as s}from"node:events";export class DataBus{emitter=new s;subscribers=0;constructor(){this.emitter.setMaxListeners(100)}emit(t){this.emitter.emit("change",t)}hasSubscribers(){return this.subscribers>0}subscribe(t){return this.subscribers+=1,this.emitter.on("change",t),()=>{this.subscribers-=1,this.emitter.off("change",t)}}}

package/node_modules/@weavecode/server/dist/daemon/decision-config.d.ts

@@ -0,0 +1,10 @@
+/**
+ * 决策模型（编排条件边判断）的供应商 API key：落 `<dataDir>/decision.json`（0600），
+ * 与 ai.json 同口径——密钥不进 UI 可读的 settings 表。地址与模型名是非密配置，
+ * 归 settings 表（`decision.baseUrl` / `decision.model`）。
+ */
+/** 读 key；缺失/坏文件 → null（调用方按「未配置」处理，不抛）。 */
+export declare function readDecisionKey(file?: string): string | null;
+/** 写 key（原子写 + 0600）；`null` = 清除（删文件）。 */
+export declare function writeDecisionKey(apiKey: string | null, file?: string): void;
+export declare function hasDecisionKey(file?: string): boolean;

package/node_modules/@weavecode/server/dist/daemon/decision-config.js

@@ -0,0 +1,2 @@
+import{chmodSync as t,existsSync as c,mkdirSync as o,readFileSync as s,renameSync as a,rmSync as y,writeFileSync as u}from"node:fs";import l from"node:path";import{getDecisionKeyPath as n}from"../db/paths.js";export function readDecisionKey(i=n()){if(!c(i))return null;try{const e=JSON.parse(s(i,"utf8"));return typeof e.apiKey=="string"&&e.apiKey!==""?e.apiKey:null}catch{return null}}export function writeDecisionKey(i,e=n()){if(i===null||i===""){y(e,{force:!0});return}o(l.dirname(e),{recursive:!0});const r=`${e}.tmp`;u(r,`${JSON.stringify({apiKey:i},null,2)}
+`,{encoding:"utf8",mode:384}),a(r,e);try{t(e,384)}catch{}}export function hasDecisionKey(i=n()){return readDecisionKey(i)!==null}

package/node_modules/@weavecode/server/dist/daemon/dev-entry.js

@@ -1 +1 @@
-import ee from"node:http";import{openDatabase as se}from"../db/db.js";import{ProjectRepository as oe}from"../repositories/projects.js";import{HookEventRepository as te}from"../repositories/hook-events.js";import{LibraryRepository as re}from"../repositories/libraries.js";import{HookRuleRepository as G}from"../repositories/hook-rules.js";import{HookDispatchRepository as ne}from"../repositories/hook-dispatches.js";import{PluginStateRepository as v}from"../repositories/plugin-states.js";import{SessionRepository as ie}from"../repositories/sessions.js";import{createRuntimeRegistry as ae}from"@weavecode/harness";import{TERMINAL_LOCATOR_ENV_KEYS as le}from"@weavecode/core";import{HookRuleRegistry as ce}from"../hooks/registry.js";import{HookDispatcher as pe}from"../hooks/dispatcher.js";import{HookEventBus as me}from"../hooks/bus.js";import{ResumeRunner as ue}from"../hooks/resume-runner.js";import{HeadlessRunner as de}from"../hooks/headless-runner.js";import{MessageDeliverer as fe}from"../hooks/message-deliverer.js";import{QuestionTracker as he}from"../hooks/question-tracker.js";import{startPromptFlusher as we}from"../hooks/prompt-flusher.js";import{SessionWatchRepository as ge}from"../repositories/session-watches.js";import{PushSubscriptionRepository as Se}from"../repositories/push-subscriptions.js";import{UploadRepository as ve}from"../repositories/uploads.js";import{PushNotifier as be}from"../hooks/push-notify.js";import{SessionSequenceRepository as Re}from"../repositories/session-sequences.js";import{WatchEngine as ke}from"../hooks/watch-engine.js";import{SequenceEngine as De}from"../hooks/sequence-engine.js";import{loadAllPlugins as Pe}from"../hooks/plugin-loader.js";import{ensureBuiltinMarket as Ee,builtinMarketDir as ye}from"../market/builtin.js";import{ToolkitService as Te}from"../hooks/toolkit.js";import{startSessionSweeper as Ie}from"../hooks/session-sweeper.js";import{startStatuslineCacheSweeper as Ae}from"../statusline/cache-sweeper.js";import{WatchService as Ce}from"../watch/watch-service.js";import{weaveRequestHandler as _e}from"./server.js";import{startTlsServer as He}from"./tls.js";import{DataBus as $e}from"./data-bus.js";import{TerminalTopologyRefresher as Oe}from"./terminal-topology-refresher.js";import{SnapshotRefresher as V}from"./snapshot-refresher.js";import{SessionProbe as qe,dbTranscriptPathResolver as Le}from"./session-probe.js";import{InflightCountsRefresher as Me}from"./inflight-counts-refresher.js";import{ProjectUpdatesRefresher as Fe}from"./project-updates-refresher.js";import{FingerprintCache as Ne}from"../install/fingerprint.js";import{detectProjectUpdateCounts as je}from"../install/updates.js";import{claudeLivenessById as Ue,pidAliveOf as Be}from"./claude-liveness.js";import{promptTerminalChannel as We,readTerminalCounts as Ge}from"./opener.js";import{wireHookFilePipeline as Ve}from"./hook-pipeline.js";import{DEFAULT_PORT as H,DAEMON_HOST as xe,DEFAULT_BIND_HOST as Ke,findFreePort as Qe,isPortFree as Ye}from"./port.js";import{writeDaemonState as x}from"./state.js";import{readDaemonSettingsSync as $,setDaemonSettingsDb as ze,DEFAULT_SERVER_SETTINGS as Je}from"./settings.js";import{AuthService as Xe}from"./dashboard-auth.js";import{resolveStaticDir as Ze}from"./static.js";const es="CLAUDE_CODE_CHILD_SESSION"in process.env;delete process.env.CLAUDE_CODE_CHILD_SESSION;for(const a of le)delete process.env[a];async function ss(){const a=await Ye(H)?H:await Qe(H+1);x({pid:process.pid,port:a,startedAt:new Date().toISOString()});const s=se();ze(s);const m=$().server?.bindHost??Ke,b=$().server?.tlsPort??Je.tlsPort,R=new Xe;R.initialPassword&&console.log(`[dev] initial dashboard password: ${R.initialPassword}`);const n=new oe(s),u=new te(s),p=new re(s),k=ae(),K=k.byCapability("events").flatMap(e=>e.events??[]),f=new ce(new G(s)),h=new ne(s),t=new ie(s),r=new me;{const e=await Ee({libraries:p});e.error?console.error(`[dev] builtin market unavailable: ${e.error}`):e.changed&&console.log(`[dev] builtin market ${e.form==="link"?"linked":"copied"} -> ${ye(p.dataDir)}`)}const{loader:l}=await Pe({rules:new G(s),registry:f,states:new v(s),bus:r,libraries:p},n.list());{const e=l.list().filter(o=>o.status==="rejected");console.log(`[dev] plugins loaded: ${l.list().length} (rejected: ${e.length})`);for(const o of e)console.log(`[dev]   rejected ${o.id}: ${o.error}`)}l.watchRoots();const O={list:()=>l.list(),setPluginEnabled:(e,o)=>l.setPluginEnabled(e,o),reloadAll:()=>l.reloadAll(),rescan:()=>l.rescanRoots(n.list(),p)},Q=new Te({projects:n,states:new v(s),plugins:O,libraries:p}),q=new pe({registry:f,dispatches:h,bus:r,projects:n,sessions:t,plugins:l,pluginStates:new v(s)}),D=new de,Y=new ue({dispatches:h,sessions:t,projects:n,bus:r,resumeSpec:k.get("claude")?.resume,headless:D}),c=new fe({sessions:t,projects:n,hookEvents:u,bus:r,headless:D,terminal:We(()=>$().terminal)});we(c);const P=new ge(s),E=new ke({watches:P,deliverer:c,sessions:t,bus:r}),L=new Se(s),y=new ve(s),z=new be({subscriptions:L,sessions:t,bus:r}),T=new Re(s),w=new De({sequences:T,deliverer:c,sessions:t,bus:r});w.rearm();const g=new he({sessions:t,hookEvents:u,onPending:e=>{r.emit({kind:"question.pending",sessionId:e.sessionId,harness:e.harness,count:e.questions.length,at:e.at})}});g.seedFromDb();const M=new Ce(n);M.start();const i=new $e,S=new qe(Le(u)),I=new Oe(async()=>({counts:await Ge(n.list()),terminals:await c.sessionTerminals()}),i,{shouldRun:()=>i.hasSubscribers(),graceMs:1e4});I.start();const A=new V(()=>{const e=Ue(),o={};for(const d of t.listWithCounts()){const W=Be(d,e);W!==null&&(o[d.sessionId]=W)}return{alive:o}},i,{key:"sessionLiveness",shouldRun:()=>i.hasSubscribers()});A.start();const C=new V(()=>{const e={};for(const o of t.listWithCounts()){if(o.turnOpen!==!0)continue;const d=S.interruptedAt(o.sessionId,o.lastSeenAt);d!==null&&(e[o.sessionId]=d)}return{interrupted:e}},i,{key:"sessionInterrupt",intervalMs:5e3,shouldRun:()=>i.hasSubscribers()});C.start();const J=new Me(()=>c.listInflightCounts(),i,r),X=new Ne,Z=new Fe(()=>je(n.list(),p.list(),X),i,r,()=>i.hasSubscribers());Ie({sessions:t,events:u,dispatches:h,deliverer:c,watches:P,sequences:T,watchEngine:E,sequenceEngine:w,questions:g,probe:S,uploads:y}),Ae();const F=Ve({projects:n,rules:f,sessions:t,bus:r,dispatcher:q,watchEngine:E,sequenceEngine:w,messagePipe:c,questionTracker:g,sessionProbe:S,uploads:y}),_=Ze(),N=_e({projects:n,port:a,tlsPort:b,watch:M,hookEvents:u,adapters:K,harnesses:k,libraries:p,staticDir:_,hookRegistry:f,hookDispatches:h,hookSessions:t,hookBus:r,dataBus:i,terminalRefresher:I,interruptRefresher:C,livenessRefresher:A,sessionProbe:S,inflightRefresher:J,updatesRefresher:Z,hookDispatcher:q,hookRunner:Y,messageDeliverer:c,uploads:y,questionTracker:g,sessionWatches:P,watchEngine:E,sessionSequences:T,sequenceEngine:w,pushSubscriptions:L,pushNotifier:z,hookPlugins:O,hookMirror:F.mirror,pluginStates:new v(s),toolkit:Q,auth:R}),j=ee.createServer(N);let U=null;He({port:b,bindHost:m,handler:N}).then(e=>{U=e,e&&console.log(`[dev] weave daemon tls listening on https://${m}:${e.port}`)});const B=()=>{I.stop(),A.stop(),C.stop(),D.killAll(),F.stop(),j.close(),U?.server.close(),process.exit(0)};process.on("SIGTERM",B),process.on("SIGINT",B),j.listen(a,m,()=>{x({pid:process.pid,port:a,startedAt:new Date().toISOString(),host:m,tlsPort:b}),console.log(`[dev] weave daemon listening on http://${m}:${a}`),console.log(`[dev] cli/dashboard local url: http://${xe}:${a}`),console.log(`[dev] child-session marker stripped: ${es}`),console.log(_?`[dev] static: ${_}`:"[dev] static: (web/dist not built \u2014 run pnpm build:web)")})}ss();
+import ds from"node:http";import{openDatabase as hs}from"../db/db.js";import{ProjectRepository as fs}from"../repositories/projects.js";import{HookEventRepository as ws}from"../repositories/hook-events.js";import{LibraryRepository as Ss}from"../repositories/libraries.js";import{HookRuleRepository as os}from"../repositories/hook-rules.js";import{HookDispatchRepository as gs}from"../repositories/hook-dispatches.js";import{PluginStateRepository as D}from"../repositories/plugin-states.js";import{SessionRepository as bs}from"../repositories/sessions.js";import{createRuntimeRegistry as vs}from"@weavecode/harness";import{TERMINAL_LOCATOR_ENV_KEYS as Rs,isHarness as ys}from"@weavecode/core";import{messagingSurfaceFor as ks}from"../surfaces.js";import{syntheticSessionIds as Es}from"../hooks/synthetic-sessions.js";import{createEdgeExtract as Ds}from"../hooks/edge-extract.js";import{HookRuleRegistry as Ps}from"../hooks/registry.js";import{HookDispatcher as Is}from"../hooks/dispatcher.js";import{HookEventBus as Ts}from"../hooks/bus.js";import{ResumeRunner as As}from"../hooks/resume-runner.js";import{HeadlessRunner as Cs}from"../hooks/headless-runner.js";import{MessageDeliverer as Os}from"../hooks/message-deliverer.js";import{QuestionTracker as Hs}from"../hooks/question-tracker.js";import{SideQuestionRepository as $s}from"../repositories/side-questions.js";import{claimSideAnswer as js}from"../hooks/side-questions.js";import{DashboardRateCache as Fs}from"../hooks/dashboard-rate.js";import{startDashboardPusher as _s}from"./dashboard-pusher.js";import{startPromptFlusher as Bs}from"../hooks/prompt-flusher.js";import{SessionWatchRepository as Ls}from"../repositories/session-watches.js";import{PushSubscriptionRepository as Us}from"../repositories/push-subscriptions.js";import{UploadRepository as Ms}from"../repositories/uploads.js";import{defaultUploadSessions as Ns}from"./upload-sessions.js";import{PushNotifier as Ws}from"../hooks/push-notify.js";import{OrchestrationRepository as qs,OrchestrationRunRepository as xs}from"../repositories/orchestrations.js";import{WatchEngine as Qs}from"../hooks/watch-engine.js";import{OrchestrationEngine as Gs,createForkConditionJudge as Js}from"../hooks/orchestration-engine.js";import{createDecisionConditionJudge as Ks}from"../hooks/decision-judge.js";import{readDecisionKey as Vs}from"./decision-config.js";import{openSessionTerminal as Ys}from"./session-open.js";import{loadAllPlugins as zs}from"../hooks/plugin-loader.js";import{ensureBuiltinMarket as Xs,builtinMarketDir as Zs}from"../market/builtin.js";import{ToolkitService as se}from"../hooks/toolkit.js";import{startSessionSweeper as ee}from"../hooks/session-sweeper.js";import{startStatuslineCacheSweeper as oe}from"../statusline/cache-sweeper.js";import{readStatuslineFacts as te}from"../statusline/manager.js";import{WatchService as re}from"../watch/watch-service.js";import{weaveRequestHandler as ne}from"./server.js";import{startTlsServer as ie}from"./tls.js";import{DataBus as ae}from"./data-bus.js";import{TerminalTopologyRefresher as le}from"./terminal-topology-refresher.js";import{SnapshotRefresher as U}from"./snapshot-refresher.js";import{SessionProbe as pe,dbModelFactResolver as ce,dbTranscriptPathResolver as me}from"./session-probe.js";import{InflightCountsRefresher as ue}from"./inflight-counts-refresher.js";import{ProjectUpdatesRefresher as de}from"./project-updates-refresher.js";import{FingerprintCache as he}from"../install/fingerprint.js";import{detectProjectUpdateCounts as fe}from"../install/updates.js";import{claudeLivenessById as ts,pidAliveOf as we}from"./claude-liveness.js";import{promptTerminalChannel as Se,readTerminalCounts as ge}from"./opener.js";import{wireHookFilePipeline as be}from"./hook-pipeline.js";import{DEFAULT_PORT as M,DAEMON_HOST as ve,DEFAULT_BIND_HOST as Re,findFreePort as ye,isPortFree as ke}from"./port.js";import{writeDaemonState as rs}from"./state.js";import{ensureDataLayout as Ee}from"../db/layout.js";import{pruneFileIndexes as De}from"./project-files.js";import{readDaemonSettingsSync as P,setDaemonSettingsDb as Pe,DEFAULT_SERVER_SETTINGS as Ie}from"./settings.js";import{AuthService as Te}from"./dashboard-auth.js";import{resolveStaticDir as Ae}from"./static.js";const Ce="CLAUDE_CODE_CHILD_SESSION"in process.env;delete process.env.CLAUDE_CODE_CHILD_SESSION;for(const c of Rs)delete process.env[c];async function Oe(){Ee();const c=await ke(M)?M:await ye(M+1);rs({pid:process.pid,port:c,startedAt:new Date().toISOString()});const o=hs();Pe(o);const h=P().server?.bindHost??Re,I=P().server?.tlsPort??Ie.tlsPort,T=new Te;T.initialPassword&&console.log(`[dev] initial dashboard password: ${T.initialPassword}`);const r=new fs(o);De(r.list().map(s=>s.id));const a=new ws(o),u=new Ss(o),b=vs(),ns=b.byCapability("events").flatMap(s=>s.events??[]),v=new Ps(new os(o)),R=new gs(o),t=new bs(o),n=new Ts;{const s=await Xs({libraries:u});s.error?console.error(`[dev] builtin market unavailable: ${s.error}`):s.changed&&console.log(`[dev] builtin market ${s.form==="link"?"linked":"copied"} -> ${Zs(u.dataRoot)}`)}const{loader:m}=await zs({rules:new os(o),registry:v,states:new D(o),bus:n,libraries:u},r.list());{const s=m.list().filter(e=>e.status==="rejected");console.log(`[dev] plugins loaded: ${m.list().length} (rejected: ${s.length})`);for(const e of s)console.log(`[dev]   rejected ${e.id}: ${e.error}`)}m.watchRoots();const N={list:()=>m.list(),setPluginEnabled:(s,e)=>m.setPluginEnabled(s,e),reloadAll:()=>m.reloadAll(),rescan:()=>m.rescanRoots(r.list(),u)},is=new se({projects:r,states:new D(o),plugins:N,libraries:u}),A={run:null},W=new Is({registry:v,dispatches:R,bus:n,projects:r,sessions:t,plugins:m,pluginStates:new D(o),classify:s=>A.run?A.run(s):Promise.resolve(null)}),y=new Cs,as=new As({dispatches:R,sessions:t,projects:r,bus:n,resumeSpec:b.get("claude")?.resume,headless:y}),p=new Os({sessions:t,projects:r,hookEvents:a,bus:n,headless:y,terminal:Se(()=>P().terminal),blockedByQuestion:s=>f.get(s)!=null});Bs(p);const C=new Ls(o),O=new Qs({watches:C,deliverer:p,sessions:t,bus:n}),q=new Us(o),H=new Ms(o),ls=new Ws({subscriptions:q,sessions:t,bus:n}),$=new qs(o),x=new xs(o),d=new pe(me(a),ce(a,s=>t.getBySessionId(s)?.harness??null)),f=new Hs({sessions:t,hookEvents:a,onPending:s=>{n.emit({kind:"question.pending",sessionId:s.sessionId,harness:s.harness,count:s.questions.length,at:s.at})},interruptedAt:s=>{const e=t.getBySessionId(s);return e?d.interruptedAt(s,e.lastSeenAt):null}});f.seedFromDb();const Q=new $s(o),G=new Fs,j=_s({rate:G,events:a,sessions:t,projects:r,bus:n}),J={repo:Q,bus:n,settle:s=>{p.interrupt(s.sessionId)}},K=new re(r);K.start();const i=new ae,k=new le(async()=>({counts:await ge(r.list()),terminals:await p.sessionTerminals()}),i,{shouldRun:()=>i.hasSubscribers(),graceMs:1e4});k.start();const F=new U(()=>{const s=ts(),e={};for(const l of t.listWithCounts()){const g=we(l,s);g!==null&&(e[l.sessionId]=g)}return{alive:e}},i,{key:"sessionLiveness",shouldRun:()=>i.hasSubscribers()});F.start();const _=new U(()=>{const s={};for(const e of t.listWithCounts()){if(e.turnOpen!==!0)continue;const l=d.interruptedAt(e.sessionId,e.lastSeenAt);l!==null&&(s[e.sessionId]=l)}return{interrupted:s}},i,{key:"sessionInterrupt",intervalMs:5e3,shouldRun:()=>i.hasSubscribers()});_.start(),new U(()=>{const s={};for(const e of r.list())s[e.id]=te(e.path);return s},i,{key:"statusline",intervalMs:5e3,shouldRun:()=>i.hasSubscribers(),invalidateOnly:!0}).start();const ps=new ue(()=>p.listInflightCounts(),i,n);let V=null;const w=Ds({sessions:t,projects:r,harnessOf:s=>{const e=a.listBySession(s,1),l=e[e.length-1]?.source;return ys(l)?l:null},surfaceFor:ks,headless:y,onSyntheticChange:()=>V?.pushSyntheticSessions(Es())});A.run=s=>w.run(s);const cs=Ks({config:async()=>{const s=P().decision;if(!s?.baseUrl||!s.model)return null;const e=Vs();return e?{baseUrl:s.baseUrl,model:s.model,apiKey:e}:null},fallback:Js({supports:s=>w.supports(s),extract:s=>w.run(s)})}),S=new Gs({orchestrations:$,runs:x,deliverer:p,sessions:t,bus:n,supportsExtract:s=>w.supports(s),extract:s=>w.run(s),conditionJudge:cs,deferWhenUserPresent:!0,ensureOpen:async s=>{const e=a.listBySession(s,1).at(-1)?.id??0,l=await Ys({hookSessions:t,hookEvents:a,projects:r,harnesses:b,sessionProbe:d,terminalRefresher:k},s);if(!l.ok)return l;let g=!1;for(let es=0;es<60;es++){if(a.listBySession(s,20).some(E=>E.id>e&&E.eventType==="SessionStart"))return{ok:!0,ack:"session-start"};ts().get(s)===!0&&(g=!0),await new Promise(E=>setTimeout(E,250))}return g?{ok:!0,ack:"registry"}:{ok:!1,error:"session did not report ready within 15s"}}});S.rearm();const Y=setInterval(()=>S.cronTick(),3e4);Y.unref();const ms=new he,us=new de(()=>fe(r.list(),u.list(),ms),i,n,()=>i.hasSubscribers());ee({sessions:t,events:a,dispatches:R,deliverer:p,watches:C,orchestrations:$,watchEngine:O,orchestrationEngine:S,questions:f,sideQuestions:Q,probe:d,uploads:H,uploadSessions:Ns}),oe();const B=be({projects:r,rules:v,sessions:t,bus:n,dispatcher:W,watchEngine:O,orchestrationEngine:S,messagePipe:p,questionTracker:f,sideQuestions:{onEvent:s=>{js(J,s)}},sessionProbe:d,uploads:H,dashboardRate:G});V=B;const L=Ae(),z=ne({projects:r,port:c,tlsPort:I,watch:K,hookEvents:a,adapters:ns,harnesses:b,libraries:u,staticDir:L,hookRegistry:v,hookDispatches:R,hookSessions:t,hookBus:n,dataBus:i,terminalRefresher:k,interruptRefresher:_,livenessRefresher:F,sessionProbe:d,inflightRefresher:ps,updatesRefresher:us,hookDispatcher:W,hookRunner:as,messageDeliverer:p,uploads:H,questionTracker:f,sideQuestions:J,sessionWatches:C,watchEngine:O,orchestrations:$,orchestrationRuns:x,orchestrationEngine:S,pushSubscriptions:q,pushNotifier:ls,onAttach:j.attach,dashboardRefresh:j.attach,hookPlugins:N,hookMirror:B.mirror,pluginStates:new D(o),toolkit:is,auth:T}),X=ds.createServer(z);let Z=null;ie({port:I,bindHost:h,handler:z}).then(s=>{Z=s,s&&console.log(`[dev] weave daemon tls listening on https://${h}:${s.port}`)});const ss=()=>{k.stop(),F.stop(),_.stop(),y.killAll(),clearInterval(Y),j.stop(),B.stop(),X.close(),Z?.server.close(),process.exit(0)};process.on("SIGTERM",ss),process.on("SIGINT",ss),X.listen(c,h,()=>{rs({pid:process.pid,port:c,startedAt:new Date().toISOString(),host:h,tlsPort:I}),console.log(`[dev] weave daemon listening on http://${h}:${c}`),console.log(`[dev] cli/dashboard local url: http://${ve}:${c}`),console.log(`[dev] child-session marker stripped: ${Ce}`),console.log(L?`[dev] static: ${L}`:"[dev] static: (web/dist not built \u2014 run pnpm build:web)")})}Oe();

package/node_modules/@weavecode/server/dist/daemon/fs-browser.js

@@ -1 +1 @@
-import{readdir as d,stat as l}from"node:fs/promises";import p from"node:os";import a from"node:path";function f(n,s){return new Promise((r,t)=>{const e=setTimeout(()=>t(new Error("timeout")),s);n.then(i=>{clearTimeout(e),r(i)},i=>{clearTimeout(e),t(i)})})}let c=null;const h=5*6e4;async function w(){if(c&&Date.now()-c.at<h)return c.drives;const n="ABCDEFGHIJKLMNOPQRSTUVWXYZ".split(""),r=(await Promise.all(n.map(async t=>{const e=`${t}:\\`;try{return await f(l(e),4e3),e}catch{return null}}))).filter(t=>t!==null);return c={at:Date.now(),drives:r},r}export async function listBrowseRoots(n){const s=[],r=new Set,t=(o,m)=>{r.has(o)||(r.add(o),s.push({path:o,kind:m}))},e=p.homedir();t(e,"home");const i=[["Desktop","desktop"],["Downloads","downloads"],["Documents","documents"]];for(const[o,m]of i){const u=a.join(e,o);try{await l(u),t(u,m)}catch{}}for(const o of n)typeof o=="string"&&o&&t(a.dirname(o),"library-parent");if(process.platform==="win32")for(const o of await w())t(o,"drive");else t(a.parse(e).root,"root");return s}export async function listDirectoryChildren(n){const r=(await d(n,{withFileTypes:!0})).filter(t=>t.isDirectory()).map(t=>({name:t.name,path:a.join(n,t.name)}));return r.sort((t,e)=>t.name.localeCompare(e.name,void 0,{numeric:!0})),r}
+import{readdir as p,stat as u}from"node:fs/promises";import f from"node:os";import s from"node:path";function d(n,r){return new Promise((t,o)=>{const a=setTimeout(()=>o(new Error("timeout")),r);n.then(i=>{clearTimeout(a),t(i)},i=>{clearTimeout(a),o(i)})})}let c=null;const w=5*6e4;async function h(){if(c&&Date.now()-c.at<w)return c.drives;const n="ABCDEFGHIJKLMNOPQRSTUVWXYZ".split(""),r=(await Promise.all(n.map(async t=>{const o=`${t}:\\`;try{return await d(u(o),4e3),o}catch{return null}}))).filter(t=>t!==null);return c={at:Date.now(),drives:r},r}export async function listBrowseRoots(n){const r=[],t=new Set,o=(e,m)=>{t.has(e)||(t.add(e),r.push({path:e,kind:m}))},a=f.homedir();o(a,"home");const i=[["Desktop","desktop"],["Downloads","downloads"],["Documents","documents"]];for(const[e,m]of i){const l=s.join(a,e);try{await u(l),o(l,m)}catch{}}for(const e of n)typeof e=="string"&&e&&o(s.dirname(e),"library-parent");if(process.platform==="win32")for(const e of await h())o(e,"drive");else o(s.parse(a).root,"root");return r}export async function listDirectoryChildren(n){const r=(await p(n,{withFileTypes:!0})).filter(t=>t.isDirectory()).map(t=>({name:t.name,path:s.join(n,t.name)}));return r.sort((t,o)=>t.name.localeCompare(o.name,void 0,{numeric:!0})),r}

package/node_modules/@weavecode/server/dist/daemon/hook-pipeline.d.ts

@@ -1,10 +1,11 @@
 import type { HookEventBus } from '../hooks/bus.js';
 import type { HookDispatcher } from '../hooks/dispatcher.js';
 import type { WatchEngine } from '../hooks/watch-engine.js';
-import type { SequenceEngine } from '../hooks/sequence-engine.js';
+import type { OrchestrationEngine } from '../hooks/orchestration-engine.js';
 import { MirrorWriter } from '../hooks/mirror.js';
 import type { MessageDeliverer } from '../hooks/message-deliverer.js';
 import type { QuestionTracker } from '../hooks/question-tracker.js';
+import type { SideQuestionEvent } from '../hooks/side-questions.js';
 import type { HookRuleRegistry } from '../hooks/registry.js';
 import type { ProjectRepository } from '../repositories/projects.js';
 import type { SessionRepository } from '../repositories/sessions.js';
@@ -17,15 +18,26 @@ export interface HookPipelineDeps {
     /** 空闲订阅引擎（批 2）：透传给 handleIngestedRecords（与 dispatcher 平行触发）。 */
     watchEngine?: Pick<WatchEngine, 'onEvent'>;
     /** 序列引擎（批 3）：同透传——inject 步完成判据挂在 ingest 消费路径。 */
-    sequenceEngine?: Pick<SequenceEngine, 'onEvent'>;
+    orchestrationEngine?: Pick<OrchestrationEngine, 'onEvent'>;
     /** prompt 队列冲洗（消息域重塑）：ingest 事件 = 会话活着，即时试递队列行。 */
     messagePipe?: Pick<MessageDeliverer, 'hasQueued' | 'flushSession'>;
     /** 阻塞式问答跟踪（AskUserQuestion/计划/权限确认）：ingest 事件派生待答面。 */
     questionTracker?: Pick<QuestionTracker, 'onEvent'>;
-    /** 会话转录路径上报（中断态探测；同 pane env 口径）+ 换模型落定（`PostModelSwitch`）。 */
+    /** 旁路会话回答认领（claude = /btw）：同透传（判据归 harness 能力面）。 */
+    sideQuestions?: {
+        onEvent(input: SideQuestionEvent): void;
+    };
+    /** 仪表盘速率快照（ingest 路径累加；读侧见 /dashboard/stats）。 */
+    dashboardRate?: {
+        record(): void;
+    };
+    /** 会话转录路径上报（中断态探测；同 pane env 口径）+ 换模型落定（`PostModelSwitch`）+ 推理档位。 */
     sessionProbe?: {
         noteTranscript(sessionId: string, path: string | null): void;
         noteModel(sessionId: string, model: string): void;
+        sessionStarted(sessionId: string, model: string | null): void;
+        noteEffort(sessionId: string, level: string): void;
+        noteMode(sessionId: string, mode: string): void;
     };
     /** 上传件落库面：回执命中时把消息的随附图挂到开轮事件（对话气泡缩略图）。 */
     uploads?: {
@@ -51,6 +63,8 @@ export declare function purgeOrphanPipelineFiles(deps: {
 export interface HookPipeline {
     /** 交给 createWeaveServer：会话改名/删除后即时重写镜像。 */
     mirror: MirrorWriter;
+    /** 登记合成会话（编排 fork 提取）：全量快照推给消费线程，drain 侧即焚。 */
+    pushSyntheticSessions(ids: readonly string[]): void;
     stop(): Promise<void>;
 }
 /**

package/node_modules/@weavecode/server/dist/daemon/hook-pipeline.js

@@ -1 +1 @@
-import{readdirSync as f,unlinkSync as a}from"node:fs";import{join as c}from"node:path";import{getDbPath as m}from"../db/paths.js";import{MirrorWriter as b,hookShardId as l,hooksRoot as h,mirrorPathOf as g,outboxPathOf as x}from"../hooks/mirror.js";import{promptboxPathOf as P}from"../hooks/promptbox.js";import{startInboxWorker as j,handleIngestedRecords as k,unparkFailedInbox as $,INBOX_CLAIM_SUFFIX as p,INBOX_FAILED_SUFFIX as u}from"../hooks/inbox-worker.js";function w(e,o){return[c(e,"inbox",`${o}.jsonl`),c(e,"inbox",`${o}${p}`),c(e,"inbox",`${o}${u}`),g(e,o),x(e,o),P(e,o)]}export function purgeProjectPipeline(e,o){for(const n of w(e,l(o)))try{a(n)}catch{}}function F(e){return(e.endsWith(".tmp")?e.slice(0,-4):e).replace(new RegExp(`(${p}|${u})$`),"").replace(/\.(jsonl|json)$/,"")}const v=/^[0-9a-f]{16}$/;export function purgeOrphanPipelineFiles(e){const o=new Set(e.projects.list().map(r=>l(r.token)));let n=0;for(const r of["inbox","mirror","outbox","promptbox"]){let t;try{t=f(c(e.hooksDir,r))}catch{continue}for(const i of t){const s=F(i);if(!(!v.test(s)||o.has(s)))try{a(c(e.hooksDir,r,i)),n++}catch{}}}return n}export function wireHookFilePipeline(e){const o=h(),n=purgeOrphanPipelineFiles({projects:e.projects,hooksDir:o});n>0&&console.log(`[weave] hook pipeline: purged ${n} orphan file(s)`);const r=$(o);r>0&&console.log(`[weave] hook pipeline: revived ${r} parked inbox file(s)`);const t=new b({projects:e.projects,rules:e.rules,sessions:e.sessions});e.rules.onChange=()=>t.syncAll(),t.attachToBus(e.bus),t.syncAll();const i=j({dbPath:m(),hooksDir:o});return i.on("message",s=>{k({projects:e.projects,hooksDir:o,bus:e.bus,dispatcher:e.dispatcher,watchEngine:e.watchEngine,sequenceEngine:e.sequenceEngine,messagePipe:e.messagePipe,questionTracker:e.questionTracker,sessionProbe:e.sessionProbe,uploads:e.uploads},s)}),i.on("error",s=>console.error("[weave] inbox worker failed:",s)),{mirror:t,stop:()=>i.terminate().then(()=>{})}}
+import{readdirSync as u,unlinkSync as c}from"node:fs";import{join as a}from"node:path";import{getDbPath as f}from"../db/paths.js";import{MirrorWriter as d,hookShardId as p,hooksRoot as m,mirrorPathOf as b,outboxPathOf as k}from"../hooks/mirror.js";import{promptboxPathOf as g}from"../hooks/promptbox.js";import{startInboxWorker as x,handleIngestedRecords as P,unparkFailedInbox as j,INBOX_CLAIM_SUFFIX as h,INBOX_FAILED_SUFFIX as l}from"../hooks/inbox-worker.js";function $(e,s){return[a(e,"inbox",`${s}.jsonl`),a(e,"inbox",`${s}${h}`),a(e,"inbox",`${s}${l}`),b(e,s),k(e,s),g(e,s)]}export function purgeProjectPipeline(e,s){for(const r of $(e,p(s)))try{c(r)}catch{}}function w(e){return(e.endsWith(".tmp")?e.slice(0,-4):e).replace(new RegExp(`(${h}|${l})$`),"").replace(/\.(jsonl|json)$/,"")}const y=/^[0-9a-f]{16}$/;export function purgeOrphanPipelineFiles(e){const s=new Set(e.projects.list().map(t=>p(t.token)));let r=0;for(const t of["inbox","mirror","outbox","promptbox"]){let n;try{n=u(a(e.hooksDir,t))}catch{continue}for(const i of n){const o=w(i);if(!(!y.test(o)||s.has(o)))try{c(a(e.hooksDir,t,i)),r++}catch{}}}return r}export function wireHookFilePipeline(e){const s=m(),r=purgeOrphanPipelineFiles({projects:e.projects,hooksDir:s});r>0&&console.log(`[weave] hook pipeline: purged ${r} orphan file(s)`);const t=j(s);t>0&&console.log(`[weave] hook pipeline: revived ${t} parked inbox file(s)`);const n=new d({projects:e.projects,rules:e.rules,sessions:e.sessions});e.rules.onChange=()=>n.syncAll(),n.attachToBus(e.bus),n.syncAll();const i=x({dbPath:f(),hooksDir:s});return i.on("message",o=>{P({projects:e.projects,hooksDir:s,bus:e.bus,dispatcher:e.dispatcher,watchEngine:e.watchEngine,orchestrationEngine:e.orchestrationEngine,messagePipe:e.messagePipe,questionTracker:e.questionTracker,sideQuestions:e.sideQuestions,dashboardRate:e.dashboardRate,sessionProbe:e.sessionProbe,uploads:e.uploads},o)}),i.on("error",o=>console.error("[weave] inbox worker failed:",o)),{mirror:n,pushSyntheticSessions:o=>i.postMessage({type:"synthetic-sessions",ids:o}),stop:()=>i.terminate().then(()=>{})}}

package/node_modules/@weavecode/server/dist/daemon/hooks-routes.js

@@ -1 +1 @@
-import{stat as V}from"node:fs/promises";import{z as i}from"zod";import{HARNESS_SESSION_CONTROL as J,HookRuleFilterSchema as Y,HookRuleSourceSchema as X,HandlerConfigSchema as Z,HookDispatchStatusSchema as q,isHarness as w}from"@weavecode/core";import{aliasOfModel as ee,modelAliasTargets as te}from"@weavecode/harness";import{readJson as k,sendJson as r}from"./http.js";import{installPlugin as re,uninstallPlugin as oe}from"../hooks/plugin-installer.js";import{purgeSession as ne}from"../hooks/session-purge.js";import{composeAnswerAtoms as se}from"../hooks/answer-keys.js";import{effective as ie,setProjectEnabled as ae}from"../hooks/plugin-project-state.js";import{readDaemonSettings as ue,readDaemonSettingsSync as le,readHooksEnabled as ce}from"./settings.js";import{defaultProjectOpener as me,terminalBackendFor as de}from"./opener.js";import{claudeLivenessById as F,pidAliveOf as K}from"./claude-liveness.js";import{captureSurfaces as he,messagingSurfaceFor as E,messagingSurfaces as ge}from"../surfaces.js";import{getDataDir as fe}from"../db/paths.js";import{UPLOAD_MAX_BYTES as be,UPLOAD_MEDIA_TYPES as ye}from"../repositories/uploads.js";import{WEAVE_VERSION as pe}from"../version.js";import{DEFAULT_WATCH_ON as ke}from"../repositories/session-watches.js";import{SEQUENCE_HOP_LIMIT as z}from"../hooks/sequence-engine.js";const Q=i.object({name:i.string().min(1),enabled:i.boolean().optional(),priority:i.number().int().optional(),projectId:i.number().int().nullable(),source:X,filter:Y.optional(),handler:Z,timeoutMs:i.number().int().positive().optional(),record:i.boolean().optional()}),ve=Q.partial(),Ie=i.object({enabled:i.boolean()}),Se=i.object({enabled:i.boolean(),projectId:i.number().int().optional()}),we=i.object({title:i.string().min(1).max(200)}),Pe=i.object({sessionId:i.string().min(1)}),Ee=i.object({text:i.string().max(2e4),fromKind:i.enum(["dashboard","session"]).optional(),fromSessionId:i.string().min(1).nullable().optional(),images:i.array(i.string().regex(/^[a-f0-9]{64}$/)).max(8).optional(),forceTerminal:i.boolean().optional()}),Te=i.object({name:i.string().min(1).max(200),mediaType:i.enum(ye),data:i.string().min(1)});function je(s){return{id:s.id,name:s.name,mediaType:s.mediaType,size:s.size}}const Re=i.object({answers:i.array(i.object({questionKey:i.string().min(1),options:i.array(i.number().int().min(0)).max(32),text:i.string().max(2e3).optional()})).min(1)}),Me=i.object({watcherSessionId:i.string().min(1).nullable().optional(),notify:i.string().min(1).max(2e4).nullable().optional(),on:i.array(i.enum(["idle","turnEnd","messageFailed"])).min(1).optional(),times:i.number().int().min(1).max(100).nullable().optional()}),De=i.object({watchId:i.number().int().positive()}),Oe=i.object({model:i.string().min(1).max(128)}),Be=i.object({endpoint:i.string().url(),keys:i.object({p256dh:i.string().min(1),auth:i.string().min(1)})}),Ce=i.object({endpoint:i.string().url()}),$e=i.object({name:i.string().max(200).optional(),steps:i.array(i.object({to:i.string().min(1),text:i.string().min(1).max(2e4),mode:i.enum(["prompt","inject","headless","auto"]).optional()})).min(1)}),Ae=i.object({src:i.string().min(1)});function T(s,e){return s.prompt!==null||e}function xe(s){const{diag:e,capture:t,eventCount:l}=s,g=[];return!t||t.source==="none"||!t.present?g.push("no-hook-script"):t.weaveOwned?t.reportsInbox||g.push("hook-script-stale"):g.push("hook-script-not-weave"),l===0&&g.push("no-events"),e&&(e.alive===!1&&g.push("not-running"),e.inbox.reason==="no-credentials"&&t?.reportsInbox===!0&&g.push("no-inbox-credentials"),e.inbox.reason==="auth-token-required"&&g.push("inbox-token-required"),e.relay.reason==="no-peer-name"&&g.push("no-peer-name"),e.terminal.reason==="no-backend"&&g.push("terminal-no-backend"),e.terminal.reason==="no-pane-env"&&g.push("terminal-no-pane-env"),e.pending>0&&g.push("queued"),e.stalled&&g.push("stalled")),g}export async function handleHooksRoutes(s,e,t,l,g){if(!(l.startsWith("/hooks/")||l==="/sessions"||l.startsWith("/sessions/")||l.startsWith("/messaging")||l==="/uploads"||l.startsWith("/images/")))return!1;if(l==="/hooks/rules"){if(!t.hookRegistry)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;if(s.method==="GET"){const o=g.searchParams.get("projectId"),n=o!=null&&o!==""?Number(o):void 0;return r(e,200,{rules:t.hookRegistry.list(n)}),!0}if(s.method==="POST"){try{const o=Q.parse(await k(s)),n=t.hookRegistry.create(o);r(e,201,{rule:n})}catch(o){r(e,400,{error:o instanceof Error?o.message:"Invalid rule body"})}return!0}}const j=l.match(/^\/hooks\/rules\/([^/]+)$/);if(j){if(!t.hookRegistry)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;const o=decodeURIComponent(j[1]);if(s.method==="PUT"){try{const n=ve.parse(await k(s)),a=t.hookRegistry.update(o,n);if(!a)return r(e,404,{error:"Rule not found"}),!0;r(e,200,{rule:a})}catch(n){r(e,400,{error:n instanceof Error?n.message:"Invalid rule body"})}return!0}if(s.method==="DELETE")return t.hookRegistry.remove(o)?(r(e,200,{ok:!0}),!0):(r(e,404,{error:"Rule not found"}),!0)}const R=l.match(/^\/hooks\/rules\/([^/]+)\/toggle$/);if(R&&s.method==="POST"){if(!t.hookRegistry)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;try{const o=Ie.parse(await k(s)),n=t.hookRegistry.setEnabled(decodeURIComponent(R[1]),o.enabled);if(!n)return r(e,404,{error:"Rule not found"}),!0;r(e,200,{rule:n})}catch(o){r(e,400,{error:o instanceof Error?o.message:"Invalid body"})}return!0}if(l==="/hooks/plugins"){if(s.method==="GET"){const o=g.searchParams.get("projectId");if(o==null||o==="")return r(e,200,{plugins:t.hookPlugins?.list()??[]}),!0;const n=t.projects.getById(Number(o));if(!n)return r(e,404,{error:"Project not found"}),!0;if(!t.pluginStates)return r(e,503,{error:"Plugin states unavailable"}),!0;const a=t.pluginStates;return r(e,200,{plugins:(t.hookPlugins?.list()??[]).map(u=>{if(u.status==="rejected")return u;const c=ie(n,u.id,{states:a})?"active":"disabled";return c===u.status?u:{...u,status:c}})}),!0}if(s.method==="POST"){if(!t.hookPlugins)return r(e,503,{error:"Plugin loader unavailable"}),!0;try{const o=Ae.parse(await k(s)),n=await re(o.src);await t.hookPlugins.reloadAll(),r(e,201,n)}catch(o){r(e,400,{error:o instanceof Error?o.message:"Install failed"})}return!0}}const M=l.match(/^\/hooks\/plugins\/([^/]+)\/uninstall$/);if(M&&s.method==="POST"){if(!t.hookPlugins)return r(e,503,{error:"Plugin loader unavailable"}),!0;const o=decodeURIComponent(M[1]);return await oe(o)?(await t.hookPlugins.reloadAll(),r(e,200,{ok:!0}),!0):(r(e,404,{error:"Plugin directory not found"}),!0)}if(l==="/hooks/plugins/rescan"&&s.method==="POST"){if(!t.hookPlugins)return r(e,503,{error:"Plugin loader unavailable"}),!0;try{await t.hookPlugins.rescan(),r(e,200,{ok:!0,plugins:t.hookPlugins.list().length})}catch(o){r(e,500,{error:o instanceof Error?o.message:"Rescan failed"})}return!0}const D=l.match(/^\/hooks\/plugins\/([^/]+)\/toggle$/);if(D&&s.method==="POST"){if(!t.hookPlugins)return r(e,503,{error:"Plugin loader unavailable"}),!0;try{const o=Se.parse(await k(s)),n=decodeURIComponent(D[1]);if(o.projectId!==void 0){const u=t.projects.getById(o.projectId);return u?t.hookPlugins.list().some(c=>c.id===n)?(ae(u,n,o.enabled,{projects:t.projects}),r(e,200,{ok:!0}),!0):(r(e,404,{error:"Plugin not found"}),!0):(r(e,404,{error:"Project not found"}),!0)}if(!t.hookPlugins.setPluginEnabled(n,o.enabled))return r(e,404,{error:"Plugin not found"}),!0;r(e,200,{ok:!0})}catch(o){r(e,400,{error:o instanceof Error?o.message:"Invalid body"})}return!0}if(l==="/hooks/dispatches"&&s.method==="GET"){if(!t.hookDispatches)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;const o=g.searchParams.get("ruleId")??void 0,n=g.searchParams.get("status"),a=n?q.parse(n):void 0,u=g.searchParams.get("sessionId")??void 0,c=g.searchParams.get("limit"),d=c?Number(c):void 0;return r(e,200,{dispatches:t.hookDispatches.list({ruleId:o,status:a,sessionId:u,limit:Number.isFinite(d)?d:void 0})}),!0}const O=l.match(/^\/hooks\/dispatches\/(\d+)\/run$/);if(O&&s.method==="POST"){if(!t.hookRunner)return r(e,503,{error:"Resume runner unavailable"}),!0;let o;try{o=Pe.parse(await k(s)).sessionId}catch(a){return r(e,400,{error:a instanceof Error?a.message:"Invalid body"}),!0}const n=await t.hookRunner.run(Number(O[1]),o);return n.ok?r(e,200,{ok:!0,dispatchId:n.dispatchId}):r(e,n.status,{error:n.error}),!0}if(l==="/sessions"&&s.method==="GET"){if(!t.hookSessions)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;const o=g.searchParams.get("projectId"),n=o!=null&&o!==""?Number(o):void 0,a=t.hookSessions.listWithCounts(n),u=F(),c=t.terminalRefresher?.lastSnapshot?.terminals??{},d={};for(const h of a){const b=h.harness??"";b in d||(d[b]=te(J[h.harness]?.modelNames??[]))}return r(e,200,{sessions:a.map(h=>{const b=t.sessionProbe?.currentModel(h.sessionId)??null;return{...h,pidAlive:K(h,u),terminal:c[h.sessionId]??null,interruptedAt:h.turnOpen===!0?t.sessionProbe?.interruptedAt(h.sessionId,h.lastSeenAt)??null:null,model:b,modelAlias:ee(d[h.harness??""]??[],b),mode:t.sessionProbe?.currentMode(h.sessionId)??null,transcriptPresent:t.sessionProbe?.transcriptPresent(h.sessionId)??null}}),modelCatalog:d}),!0}const S=l.match(/^\/sessions\/([^/]+)$/);if(S&&s.method==="PATCH"){if(!t.hookSessions)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;const o=decodeURIComponent(S[1]);if(!t.hookSessions.getBySessionId(o))return r(e,404,{error:"Session not found"}),!0;try{const n=we.parse(await k(s)),a=t.hookSessions.setPendingTitle(o,n.title);a?.projectId!=null&&t.hookMirror?.syncProject(a.projectId),r(e,200,{session:a})}catch(n){r(e,400,{error:n instanceof Error?n.message:"Invalid body"})}return!0}if(S&&s.method==="DELETE"){if(!t.hookSessions||!t.hookEvents)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;const o=decodeURIComponent(S[1]),n=t.hookSessions.getBySessionId(o);if(!n)return r(e,404,{error:"Session not found"}),!0;const a=ne({sessions:t.hookSessions,events:t.hookEvents,dispatches:t.hookDispatches,deliverer:t.messageDeliverer,watches:t.sessionWatches,questions:t.questionTracker,probe:t.sessionProbe,uploads:t.uploads},o);return n.projectId!=null&&t.hookMirror?.syncProject(n.projectId),r(e,200,{ok:!0,sessionId:o,...a}),!0}const B=l.match(/^\/sessions\/([^/]+)\/open-terminal$/);if(B&&s.method==="POST"){const o=decodeURIComponent(B[1]);if(!t.hookSessions)return r(e,503,{error:"Hooks subsystem unavailable"}),!0;const n=t.hookSessions.getBySessionId(o);if(!n)return r(e,404,{error:"Session not found"}),!0;if(!t.hookEvents)return r(e,503,{error:"Hook ingestion unavailable"}),!0;const a=t.hookEvents.listBySession(o,1),u=a[a.length-1]?.source;if(!w(u))return r(e,400,{error:"Session has no hook events to determine its harness"}),!0;const c=t.harnesses?.get(u)?.resume;if(!c?.supported||!c.openArgs)return r(e,501,{error:`Harness "${u}" does not support interactive resume`}),!0;if(!n.projectId)return r(e,400,{error:"Session is not bound to a project"}),!0;const d=t.projects.getById(n.projectId);if(!d)return r(e,404,{error:"Project not found"}),!0;if(t.sessionProbe?.transcriptPresent(o)===!1)return r(e,409,{error:"Session transcript is missing \u2014 nothing to resume"}),!0;const h=t.opener??me;let b;if(s.method==="POST")try{const y=await k(s);typeof y?.target=="string"&&y.target&&(b=y.target)}catch{}try{if(!(await V(d.path)).isDirectory())throw new Error(`Not a directory: ${d.path}`);const m=await ue(),f=[c.bin,...c.openArgs(o)];if(b){if(!de(m.terminal).enumerable)throw new Error(`Terminal preset "${m.terminal.preset}" cannot attach to a chosen pane \u2014 pick wezterm, wt or Terminal.app in settings`);const p=h.runInTerminalAt;if(!p)throw new Error("Targeted attach is unavailable");await p(d.path,f,b,m.terminal)}else await h.runInTerminal(d.path,f,m.terminal);setTimeout(()=>{t.terminalRefresher?.refreshNow()},600),r(e,200,{ok:!0,sessionId:o,command:f.join(" "),cwd:d.path,...b?{target:b}:{}})}catch(y){r(e,400,{error:y instanceof Error?y.message:"Open failed"})}return!0}if(l==="/uploads"&&s.method==="POST"){if(!t.uploads)return r(e,503,{error:"Upload subsystem unavailable"}),!0;let o;try{o=Te.parse(await k(s))}catch(u){return r(e,400,{error:u instanceof Error?u.message:"Invalid body"}),!0}const n=Buffer.from(o.data,"base64");if(n.length===0)return r(e,400,{error:"Empty image"}),!0;if(n.length>be)return r(e,413,{error:"Image too large"}),!0;const a=t.uploads.save({name:o.name,mediaType:o.mediaType,bytes:n});return r(e,201,{upload:je(a)}),!0}const C=l.match(/^\/images\/([a-f0-9]{64})$/);if(C&&s.method==="GET"){if(!t.uploads)return r(e,503,{error:"Upload subsystem unavailable"}),!0;const o=t.uploads.fileOf(C[1]);return o?(e.writeHead(200,{"content-type":o.row.mediaType,"content-length":String(o.bytes.length),"cache-control":"private, max-age=31536000, immutable"}),e.end(o.bytes),!0):(r(e,404,{error:"Image not found"}),!0)}const $=l.match(/^\/sessions\/([^/]+)\/messages$/);if($){const o=decodeURIComponent($[1]);if(s.method==="GET")return t.messageDeliverer?t.hookSessions?.getBySessionId(o)?(r(e,200,{messages:t.messageDeliverer.listVisible(o)}),!0):(r(e,404,{error:"Session not found"}),!0):(r(e,503,{error:"Messaging subsystem unavailable"}),!0);if(s.method==="POST"){if(!t.messageDeliverer||!t.hookSessions)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;let n;try{n=Ee.parse(await k(s))}catch(d){return r(e,400,{error:d instanceof Error?d.message:"Invalid body"}),!0}const a=n.images??[];if(!n.text.trim()&&a.length===0)return r(e,400,{error:"Message is empty"}),!0;let u=[];if(a.length>0){const d=t.uploads?.refsOf(a)??null;if(!d)return r(e,404,{error:"Image not found"}),!0;u=d}const c=await t.messageDeliverer.send({toSessionId:o,text:n.text,...u.length>0?{images:u}:{},...n.forceTerminal===!0?{forceTerminal:!0}:{},mode:"prompt",fromKind:n.fromKind??"dashboard",fromSessionId:n.fromSessionId??null,oneWay:!0});return c.ok?r(e,201,{ok:!0,messageId:c.messageId,status:c.status,message:c.message}):r(e,c.status,{error:c.error}),!0}}const A=l.match(/^\/sessions\/([^/]+)\/messages\/([^/]+)\/resend$/);if(A&&s.method==="POST"){if(!t.messageDeliverer)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;const o=await t.messageDeliverer.resend(decodeURIComponent(A[2]));return o.ok?r(e,200,{ok:!0,messageId:o.messageId,status:o.status,message:o.message}):r(e,o.status,{error:o.error}),!0}const P=l.match(/^\/sessions\/([^/]+)\/messages\/([^/]+)\/dismiss$/);if(P&&s.method==="POST"){if(!t.messageDeliverer)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;const o=t.messageDeliverer.dismiss(decodeURIComponent(P[1]),decodeURIComponent(P[2]));return o.ok?r(e,200,{ok:!0}):r(e,o.status,{error:o.error}),!0}if(l==="/messaging/questions"&&s.method==="GET")return t.questionTracker?(r(e,200,{questions:t.questionTracker.snapshot()}),!0):(r(e,503,{error:"Question tracking unavailable"}),!0);const x=l.match(/^\/sessions\/([^/]+)\/answer$/);if(x&&s.method==="POST"){if(!t.questionTracker||!t.messageDeliverer)return r(e,503,{error:"Question tracking unavailable"}),!0;const o=decodeURIComponent(x[1]);let n;try{n=Re.parse(await k(s))}catch(d){return r(e,400,{error:d instanceof Error?d.message:"Invalid body"}),!0}const a=t.questionTracker.get(o);if(!a)return r(e,409,{error:"Session has no pending question"}),!0;const u=se(a.questions,n.answers);if(!u.ok)return r(e,400,{error:u.error}),!0;const c=await t.messageDeliverer.answer(o,u.atoms);return c.ok?(t.questionTracker.markAnswered(o),r(e,200,{ok:!0,sessionId:o}),!0):(r(e,c.status,{error:c.error}),!0)}const H=l.match(/^\/sessions\/([^/]+)\/interrupt$/);if(H&&s.method==="POST"){if(!t.messageDeliverer)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;const o=decodeURIComponent(H[1]),n=await t.messageDeliverer.interrupt(o);return n.ok?(setTimeout(()=>t.interruptRefresher?.tick(),1500),r(e,200,{ok:!0,sessionId:o}),!0):(r(e,n.status,{error:n.error}),!0)}const U=l.match(/^\/sessions\/([^/]+)\/close-pane$/);if(U&&s.method==="POST"){if(!t.messageDeliverer)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;const o=decodeURIComponent(U[1]),n=await t.messageDeliverer.closePane(o);return n.ok?(setTimeout(()=>{t.livenessRefresher?.tick(),t.terminalRefresher?.refreshNow()},600),r(e,200,{ok:!0,sessionId:o}),!0):(r(e,n.status,{error:n.error}),!0)}const W=l.match(/^\/sessions\/([^/]+)\/mode$/);if(W&&s.method==="POST"){if(!t.messageDeliverer)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;const o=decodeURIComponent(W[1]),n=await t.messageDeliverer.cycleMode(o);return n.ok?(r(e,200,{ok:!0,sessionId:o}),!0):(r(e,n.status,{error:n.error}),!0)}const N=l.match(/^\/sessions\/([^/]+)\/model$/);if(N&&s.method==="POST"){if(!t.messageDeliverer)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;const o=decodeURIComponent(N[1]),n=Oe.parse(await k(s)),a=await t.messageDeliverer.setModel(o,n.model);return a.ok?(setTimeout(()=>t.interruptRefresher?.tick(),1500),r(e,200,{ok:!0,sessionId:o}),!0):(r(e,a.status,{error:a.error}),!0)}const _=l.match(/^\/sessions\/([^/]+)\/watch$/);if(_){const o=decodeURIComponent(_[1]);if(s.method==="POST"){if(!t.sessionWatches||!t.hookSessions||!t.hookEvents)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;let n;try{n=Me.parse(await k(s))}catch(p){return r(e,400,{error:p instanceof Error?p.message:"Invalid body"}),!0}if(!t.hookSessions.getBySessionId(o))return r(e,404,{error:"Session not found"}),!0;const u=t.hookEvents.listBySession(o,1),c=u[u.length-1]?.source;if(!w(c))return r(e,400,{error:"Session has no hook events to determine its harness"}),!0;const d=E(c),h=n.on??[...ke];if((h.includes("idle")||h.includes("turnEnd"))&&d.idleSignals.length===0)return r(e,409,{error:d.unsupportedReasons?.watch??`Harness "${c}" does not support idle watching`}),!0;if(h.includes("messageFailed")&&!(T(d,t.messageDeliverer?.hasTerminalChannel()??!1)||d.inject!==null||d.headless!==null))return r(e,409,{error:d.unsupportedReasons?.prompt??`Harness "${c}" supports no messaging channel`}),!0;if(n.watcherSessionId){if(!t.hookSessions.getBySessionId(n.watcherSessionId))return r(e,404,{error:"Watcher session not found"}),!0;const v=t.hookEvents.listBySession(n.watcherSessionId,1),I=v[v.length-1]?.source;if(!w(I))return r(e,400,{error:"Watcher session has no hook events to determine its harness"}),!0;const L=E(I);if(!L.inject)return r(e,409,{error:L.unsupportedReasons?.inject??`Harness "${I}" cannot receive watch notifications`}),!0}const b=n.times===void 0?1:n.times,y=(n.watcherSessionId??null)===null?t.sessionWatches.listPendingByTarget(o).find(p=>p.watcherSessionId===null):void 0,m=y?t.sessionWatches.updateById(y.id,{onEvents:h,remaining:b}):void 0,f=m??t.sessionWatches.insert({watcherSessionId:n.watcherSessionId??null,targetSessionId:o,notify:n.notify??null,onEvents:h,times:b});return t.watchEngine?.created(f),r(e,m?200:201,{ok:!0,watchId:f.id,watch:f}),!0}if(s.method==="DELETE"){if(!t.sessionWatches)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;let n;try{n=De.parse(await k(s))}catch(u){return r(e,400,{error:u instanceof Error?u.message:"Invalid body"}),!0}const a=t.sessionWatches.getById(n.watchId);return!a||a.targetSessionId!==o||a.firedAt!==null?(r(e,404,{error:"Watch not found"}),!0):(t.sessionWatches.deleteById(n.watchId),r(e,200,{ok:!0,watchId:n.watchId}),!0)}}if(l==="/messaging/watches"&&s.method==="GET")return t.sessionWatches?(r(e,200,{watches:t.sessionWatches.listPending()}),!0):(r(e,503,{error:"Messaging subsystem unavailable"}),!0);if(l==="/messaging/push/key"&&s.method==="GET")return t.pushNotifier?(r(e,200,{publicKey:t.pushNotifier.publicKey()}),!0):(r(e,503,{error:"Push subsystem unavailable"}),!0);if(l==="/messaging/push/subscribe"&&s.method==="POST"){if(!t.pushSubscriptions)return r(e,503,{error:"Push subsystem unavailable"}),!0;try{const o=Be.parse(await k(s)),n=t.pushSubscriptions.upsert({endpoint:o.endpoint,p256dh:o.keys.p256dh,auth:o.keys.auth,userAgent:s.headers["user-agent"]??null});r(e,201,{ok:!0,subscription:n})}catch(o){r(e,400,{error:o instanceof Error?o.message:"Invalid body"})}return!0}if(l==="/messaging/push/unsubscribe"&&s.method==="POST"){if(!t.pushSubscriptions)return r(e,503,{error:"Push subsystem unavailable"}),!0;try{const o=Ce.parse(await k(s));t.pushSubscriptions.deleteByEndpoint(o.endpoint),r(e,200,{ok:!0})}catch(o){r(e,400,{error:o instanceof Error?o.message:"Invalid body"})}return!0}if(l==="/messaging/sequences"){if(s.method==="GET")return t.sessionSequences?(r(e,200,{sequences:t.sessionSequences.list()}),!0):(r(e,503,{error:"Messaging subsystem unavailable"}),!0);if(s.method==="POST"){if(!t.sessionSequences||!t.sequenceEngine||!t.hookSessions||!t.hookEvents)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;let o;try{o=$e.parse(await k(s))}catch(u){return r(e,400,{error:u instanceof Error?u.message:"Invalid body"}),!0}if(o.steps.length>z)return r(e,400,{error:`Sequences are capped at ${z} steps (hop limit)`}),!0;const n=t.messageDeliverer?.hasTerminalChannel()??!1;for(let u=0;u<o.steps.length;u++){const c=o.steps[u];if(!t.hookSessions.getBySessionId(c.to))return r(e,404,{error:`Step ${u+1}: session not found`}),!0;const h=t.hookEvents.listBySession(c.to,1),b=h[h.length-1]?.source;if(!w(b))return r(e,400,{error:`Step ${u+1}: session has no hook events to determine its harness`}),!0;const y=E(b),m=c.mode??"auto";if(!(m==="prompt"?T(y,n):m==="inject"?y.inject!==null:m==="headless"?y.headless!==null:y.inject!==null||y.headless!==null)){const p=m==="auto"?y.unsupportedReasons?.inject??`Harness "${b}" supports no messaging channel`:y.unsupportedReasons?.[m]??`Harness "${b}" does not support the ${m} channel`;return r(e,409,{error:`Step ${u+1}: ${p}`}),!0}}const a=t.sessionSequences.insert({name:o.name??"",steps:o.steps.map(u=>({...u,mode:u.mode??"auto"}))});return await t.sequenceEngine.trigger(a),r(e,201,{ok:!0,sequence:t.sessionSequences.getById(a.id)??a}),!0}}const G=l.match(/^\/messaging\/sequences\/(\d+)$/);if(G&&s.method==="DELETE"){if(!t.sessionSequences)return r(e,503,{error:"Messaging subsystem unavailable"}),!0;const o=t.sessionSequences.getById(Number(G[1]));return o?o.status!=="running"?(r(e,409,{error:`Sequence already ${o.status}`}),!0):(t.sequenceEngine?t.sequenceEngine.cancel(o.id):t.sessionSequences.finish(o.id,"cancelled"),r(e,200,{ok:!0,sequenceId:o.id}),!0):(r(e,404,{error:"Sequence not found"}),!0)}if(l==="/messaging/capabilities"&&s.method==="GET"){const o=t.messageDeliverer?.hasTerminalChannel()??!1;return r(e,200,{capabilities:ge().map(({harness:n,surface:a})=>({harness:n,discovery:a.discovery,prompt:T(a,o),inject:a.inject!==null,headless:a.headless!==null,watch:a.idleSignals.length>0,imageAttach:a.imageAttach!==null,unsupportedReasons:a.unsupportedReasons??null}))}),!0}if(l==="/messaging/diagnostics"&&s.method==="GET"){if(!t.messageDeliverer||!t.hookSessions)return r(e,503,{error:"Message subsystem unavailable"}),!0;const o=g.searchParams.get("session"),n=g.searchParams.get("project"),a=he(),u=t.projects.list(),c=await Promise.all(u.map(async m=>({id:m.id,name:m.name,path:m.path,captures:await Promise.all(a.map(async({harness:f,surface:p})=>({harness:f,...await p.scriptHealth({projectPath:m.path})})))}))),d=(m,f)=>c.find(p=>p.id===m)?.captures.find(p=>p.harness===f)??null,h=F(),y=t.hookSessions.listWithCounts(o?void 0:n?Number(n):void 0).filter(m=>o?m.sessionId===o:K(m,h)!==!1).map(m=>{const f=t.messageDeliverer.diagnose(m.sessionId),p=d(m.projectId,m.harness??null),v={inbox:f.inbox,relay:f.relay,terminal:f.terminal};return{sessionId:m.sessionId,projectId:m.projectId,harness:m.harness??null,title:m.title,lastSeenAt:m.lastSeenAt,eventCount:m.eventCount??0,lastEventType:m.lastEventType??null,alive:f.alive,paneEnvReported:f.paneEnvReported,channels:v,queue:{pending:f.pending,stalled:f.stalled},reachable:Object.values(v).some(I=>I.status==="ready"),hints:xe({diag:f,capture:p,eventCount:m.eventCount??0})}});return r(e,200,{daemon:{version:pe,platform:process.platform,dataDir:fe(),uptimeMs:Math.round(process.uptime()*1e3),terminalPreset:le().terminal.preset,terminalTextChannel:t.messageDeliverer.hasTerminalChannel(),hooksEnabled:ce()},projects:c,sessions:y}),!0}return!1}
+import{z as f}from"zod";import{HARNESS_SESSION_CONTROL as E,isHarness as C}from"@weavecode/core";import{aliasOfModel as j,modelAliasTargets as D}from"@weavecode/harness";import{readJson as I,sendJson as t}from"./http.js";import{purgeSession as O}from"../hooks/session-purge.js";import{readDaemonSettingsSync as A,readHooksEnabled as M}from"./settings.js";import{handleOrchestrationRoutes as W}from"./routes/orchestration.js";import{handleHookAdminRoutes as H}from"./routes/hooks-admin.js";import{handleUploadRoutes as q}from"./routes/uploads.js";import{handleSessionControlRoutes as U}from"./routes/session-control.js";import{handlePathRefRoutes as N}from"./routes/path-refs.js";import{handleSessionInsightRoutes as $}from"./routes/session-insights.js";import{handleWatchRoutes as K}from"./routes/watches.js";import{openSessionTerminal as B,transcriptState as G}from"./session-open.js";import{claudeLivenessById as T,pidAliveOf as w}from"./claude-liveness.js";import{captureSurfaces as L,messagingSurfaces as Q}from"../surfaces.js";import{getDataDir as V}from"../db/paths.js";import{WEAVE_VERSION as _}from"../version.js";const J=f.object({title:f.string().min(1).max(200)}),z=f.object({text:f.string().max(2e4),fromKind:f.enum(["dashboard","session"]).optional(),fromSessionId:f.string().min(1).nullable().optional(),attachments:f.array(f.string().regex(/^[a-f0-9]{64}$/)).max(8).optional(),images:f.array(f.string().regex(/^[a-f0-9]{64}$/)).max(8).optional(),forceTerminal:f.boolean().optional()});function F(i,s){return i.queuedPrompt!==null||i.prompt!==null||s}function X(i){const{diag:s,capture:e,eventCount:r}=i,l=[];return!e||e.source==="none"||!e.present?l.push("no-hook-script"):e.weaveOwned?!e.reportsInbox&&s?.inbox.reason!=="no-mechanism"&&l.push("hook-script-stale"):l.push("hook-script-not-weave"),r===0&&l.push("no-events"),s&&(s.alive===!1&&l.push("not-running"),s.inbox.reason==="no-credentials"&&e?.reportsInbox===!0&&l.push("no-inbox-credentials"),s.inbox.reason==="auth-token-required"&&l.push("inbox-token-required"),s.relay.reason==="no-peer-name"&&l.push("no-peer-name"),s.terminal.reason==="no-backend"&&l.push("terminal-no-backend"),s.terminal.reason==="no-pane-env"&&l.push("terminal-no-pane-env"),s.pending>0&&l.push("queued"),s.stalled&&l.push("stalled")),l}export async function handleHooksRoutes(i,s,e,r,l){if(!(r.startsWith("/hooks/")||r==="/dashboard/refresh"||r==="/sessions"||r.startsWith("/sessions/")||r.startsWith("/messaging")||r.startsWith("/webhooks/orchestrate/")||r==="/uploads"||r.startsWith("/uploads/")||r.startsWith("/images/")))return!1;if(await H(i,s,e,r,l))return!0;if(r==="/dashboard/refresh"&&i.method==="POST")return e.dashboardRefresh?.(),t(s,200,{ok:!0}),!0;if(r==="/sessions"&&i.method==="GET"){if(!e.hookSessions)return t(s,503,{error:"Hooks subsystem unavailable"}),!0;const n=l.searchParams.get("projectId"),a=n!=null&&n!==""?Number(n):void 0,o=e.hookSessions.listWithCounts(a),p=T(),c=e.terminalRefresher?.lastSnapshot?.terminals??{},h={};for(const m of o){const g=m.harness??"";g in h||(h[g]=D(E[m.harness]?.modelNames??[]))}return t(s,200,{sessions:o.map(m=>{const g=e.sessionProbe?.currentModel(m.sessionId)??null,d=e.sessionProbe?.transcriptPresent(m.sessionId)??null,u=C(m.harness)?e.harnesses?.get(m.harness)?.resume:void 0;return{...m,pidAlive:w(m,p),canOpenTerminal:!!(u?.supported&&u.openArgs),terminal:c[m.sessionId]??null,interruptedAt:m.turnOpen===!0?e.sessionProbe?.interruptedAt(m.sessionId,m.lastSeenAt)??null:null,model:g,modelAlias:j(h[m.harness??""]??[],g),mode:e.sessionProbe?.currentMode(m.sessionId)??null,effort:e.sessionProbe?.currentEffort(m.sessionId)??null,contextTokens:e.sessionProbe?.currentContextTokens(m.sessionId)??null,transcriptPresent:G(d,m.hasRun)}}),modelCatalog:h}),!0}const v=r.match(/^\/sessions\/([^/]+)$/);if(v&&i.method==="PATCH"){if(!e.hookSessions)return t(s,503,{error:"Hooks subsystem unavailable"}),!0;const n=decodeURIComponent(v[1]);if(!e.hookSessions.getBySessionId(n))return t(s,404,{error:"Session not found"}),!0;try{const a=J.parse(await I(i)),o=e.hookSessions.setPendingTitle(n,a.title);o?.projectId!=null&&e.hookMirror?.syncProject(o.projectId),t(s,200,{session:o})}catch(a){t(s,400,{error:a instanceof Error?a.message:"Invalid body"})}return!0}if(v&&i.method==="DELETE"){if(!e.hookSessions||!e.hookEvents)return t(s,503,{error:"Hooks subsystem unavailable"}),!0;const n=decodeURIComponent(v[1]),a=e.hookSessions.getBySessionId(n);if(!a)return t(s,404,{error:"Session not found"}),!0;const o=O({sessions:e.hookSessions,events:e.hookEvents,dispatches:e.hookDispatches,deliverer:e.messageDeliverer,watches:e.sessionWatches,orchestrations:e.orchestrations,questions:e.questionTracker,sideQuestions:e.sideQuestions?.repo,probe:e.sessionProbe,uploads:e.uploads},n);return a.projectId!=null&&e.hookMirror?.syncProject(a.projectId),t(s,200,{ok:!0,sessionId:n,...o}),!0}const S=r.match(/^\/sessions\/([^/]+)\/open-terminal$/);if(S&&i.method==="POST"){const n=decodeURIComponent(S[1]);let a;try{const p=await I(i);typeof p?.target=="string"&&p.target&&(a=p.target)}catch{}const o=await B(e,n,a);return o.ok?(t(s,200,{ok:!0,sessionId:o.sessionId,command:o.command,cwd:o.cwd,...o.target?{target:o.target}:{}}),!0):(t(s,o.status,{error:o.error}),!0)}if(await q(i,s,e,r,l))return!0;const y=r.match(/^\/sessions\/([^/]+)\/messages$/);if(y){const n=decodeURIComponent(y[1]);if(i.method==="GET")return e.messageDeliverer?e.hookSessions?.getBySessionId(n)?(t(s,200,{messages:e.messageDeliverer.listVisible(n)}),!0):(t(s,404,{error:"Session not found"}),!0):(t(s,503,{error:"Messaging subsystem unavailable"}),!0);if(i.method==="POST"){if(!e.messageDeliverer||!e.hookSessions)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;let a;try{a=z.parse(await I(i))}catch(h){return t(s,400,{error:h instanceof Error?h.message:"Invalid body"}),!0}const o=[...a.attachments??[],...a.images??[]];if(!a.text.trim()&&o.length===0)return t(s,400,{error:"Message is empty"}),!0;let p=[];if(o.length>0){const h=e.uploads?.refsOf(o)??null;if(!h)return t(s,404,{error:"Attachment not found"}),!0;p=h}const c=await e.messageDeliverer.send({toSessionId:n,text:a.text,...p.length>0?{attachments:p}:{},...a.forceTerminal===!0?{forceTerminal:!0}:{},mode:"prompt",fromKind:a.fromKind??"dashboard",fromSessionId:a.fromSessionId??null,oneWay:!0});return c.ok?t(s,201,{ok:!0,messageId:c.messageId,status:c.status,message:c.message}):t(s,c.status,{error:c.error}),!0}}if(await $(i,s,e,r,l)||await N(i,s,e,r,l))return!0;const R=r.match(/^\/sessions\/([^/]+)\/messages\/([^/]+)\/resend$/);if(R&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const n=await e.messageDeliverer.resend(decodeURIComponent(R[2]));return n.ok?t(s,200,{ok:!0,messageId:n.messageId,status:n.status,message:n.message}):t(s,n.status,{error:n.error}),!0}const k=r.match(/^\/sessions\/([^/]+)\/messages\/([^/]+)\/dismiss$/);if(k&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const n=e.messageDeliverer.dismiss(decodeURIComponent(k[1]),decodeURIComponent(k[2]));return n.ok?t(s,200,{ok:!0}):t(s,n.status,{error:n.error}),!0}if(await U(i,s,e,r,l)||await K(i,s,e,r)||await W(i,s,e,r,l))return!0;if(r==="/messaging/capabilities"&&i.method==="GET"){const n=e.messageDeliverer?.hasTerminalChannel()??!1;return t(s,200,{capabilities:Q().map(({harness:a,surface:o})=>({harness:a,discovery:o.discovery,prompt:F(o,n),inject:o.inject!==null,headless:o.headless!==null,watch:o.idleSignals.length>0,attachKinds:o.attach?.kinds??[],pathRefs:o.pathRefs!==null,pathRefLines:o.pathRefs?.lines===!0,pathRefKinds:o.pathRefs?.kinds??[],sideQuestion:o.sideQuestion!==null,unsupportedReasons:o.unsupportedReasons??null}))}),!0}if(r==="/messaging/diagnostics"&&i.method==="GET"){if(!e.messageDeliverer||!e.hookSessions)return t(s,503,{error:"Message subsystem unavailable"}),!0;const n=l.searchParams.get("session"),a=l.searchParams.get("project"),o=L(),p=e.projects.list(),c=await Promise.all(p.map(async d=>({id:d.id,name:d.name,path:d.path,captures:await Promise.all(o.map(async({harness:u,surface:b})=>({harness:u,...await b.scriptHealth({projectPath:d.path})})))}))),h=(d,u)=>c.find(b=>b.id===d)?.captures.find(b=>b.harness===u)??null,m=T(),g=e.hookSessions.listWithCounts(n?void 0:a?Number(a):void 0).filter(d=>n?d.sessionId===n:w(d,m)!==!1).map(d=>{const u=e.messageDeliverer.diagnose(d.sessionId),b=h(d.projectId,d.harness??null),P={inbox:u.inbox,queue:u.queue,relay:u.relay,terminal:u.terminal};return{sessionId:d.sessionId,projectId:d.projectId,harness:d.harness??null,title:d.title,lastSeenAt:d.lastSeenAt,eventCount:d.eventCount??0,lastEventType:d.lastEventType??null,alive:u.alive,paneEnvReported:u.paneEnvReported,channels:P,queue:{pending:u.pending,stalled:u.stalled},reachable:Object.values(P).some(x=>x.status==="ready"),hints:X({diag:u,capture:b,eventCount:d.eventCount??0})}});return t(s,200,{daemon:{version:_,platform:process.platform,dataDir:V(),uptimeMs:Math.round(process.uptime()*1e3),terminalPreset:A().terminal.preset,terminalTextChannel:e.messageDeliverer.hasTerminalChannel(),hooksEnabled:M()},projects:c,sessions:g}),!0}return!1}

package/node_modules/@weavecode/server/dist/daemon/http.d.ts

@@ -3,5 +3,10 @@ import type { IncomingMessage, ServerResponse } from 'node:http';
 export declare function readBody(req: IncomingMessage): Promise<string>;
 /** Parse the request body as JSON; callers catch parse errors themselves. */
 export declare function readJson(req: IncomingMessage): Promise<unknown>;
+/**
+ * 原始字节（分块上传）：不转字符串（二进制会被 UTF-8 解坏），超上限即断流拒绝。
+ * 不走 `noteRequestBody`——请求体日志只记可读文本，二进制分块没有记录价值。
+ */
+export declare function readRawBody(req: IncomingMessage, maxBytes: number): Promise<Buffer>;
 /** Write a JSON response with status. */
 export declare function sendJson(res: ServerResponse, status: number, data: unknown): void;

package/node_modules/@weavecode/server/dist/daemon/http.js

@@ -1 +1 @@
-import{noteRequestBody as s}from"./api-log.js";export function readBody(n){return new Promise((o,e)=>{const r=[];n.on("data",t=>r.push(t)),n.on("end",()=>{const t=Buffer.concat(r).toString("utf8");s(n,t),o(t)}),n.on("error",e)})}export async function readJson(n){return JSON.parse(await readBody(n))}export function sendJson(n,o,e){n.statusCode=o,n.setHeader("content-type","application/json"),n.end(JSON.stringify(e))}
+import{noteRequestBody as d}from"./api-log.js";export function readBody(o){return new Promise((t,r)=>{const n=[];o.on("data",e=>n.push(e)),o.on("end",()=>{const e=Buffer.concat(n).toString("utf8");d(o,e),t(e)}),o.on("error",r)})}export async function readJson(o){return JSON.parse(await readBody(o))}export function readRawBody(o,t){return new Promise((r,n)=>{const e=[];let a=0;o.on("data",s=>{if(a+=s.length,a>t){o.destroy(),n(new Error("body too large"));return}e.push(s)}),o.on("end",()=>r(Buffer.concat(e))),o.on("error",n)})}export function sendJson(o,t,r){o.statusCode=t,o.setHeader("content-type","application/json"),o.end(JSON.stringify(r))}

package/node_modules/@weavecode/server/dist/daemon/mcp-orchestration.d.ts

@@ -0,0 +1,20 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/**
+ * 编排内置 MCP（Streamable HTTP，daemon 托管）：工具面只转发 daemon 自己的 HTTP
+ * API，**不缓存任何编排状态**——编排的唯一事实源仍是 daemon 的仓储，web 画布、
+ * CLI、MCP 三处修改互相立刻可见。
+ *
+ * 生命周期 = daemon 的启停（无子进程、无 CLI 命令）；端点固定 `/mcp`，无状态模式，
+ * 认证沿用本机令牌（MCP 客户端配置里带 `x-weave-local` 头）。诊断走 stderr。
+ */
+export interface McpHttpContext {
+    /** daemon 自己的监听端口（工具调用转回自己的 API）。 */
+    port: number;
+    /** 本机令牌；null = 未装认证（测试/开放口），调用不带令牌。 */
+    token: string | null;
+}
+/**
+ * `/mcp` 的 HTTP 入口（无状态）：每个请求建一套 server+transport，响应完即回收。
+ * 无状态模式不带会话 id、不做会话校验——工具都是「一问一答」，不需要长连接状态。
+ */
+export declare function handleMcpRequest(req: IncomingMessage, res: ServerResponse, ctx: McpHttpContext): Promise<void>;

package/node_modules/@weavecode/server/dist/daemon/mcp-orchestration.js

@@ -0,0 +1 @@
+import{Server as g}from"@modelcontextprotocol/sdk/server/index.js";import{StreamableHTTPServerTransport as b}from"@modelcontextprotocol/sdk/server/streamableHttp.js";import{CallToolRequestSchema as f,ListToolsRequestSchema as S}from"@modelcontextprotocol/sdk/types.js";import{readBody as j,sendJson as w}from"./http.js";async function a(t,s,e,r){const n=await fetch(`http://127.0.0.1:${t.port}/api${e}`,{method:s,headers:{...t.token?{"x-weave-local":t.token}:{},...r===void 0?{}:{"content-type":"application/json"}},...r===void 0?{}:{body:JSON.stringify(r)}}),i=await n.text(),p=(()=>{try{return JSON.parse(i)}catch{return{raw:i}}})();if(!n.ok){const l=p&&typeof p=="object"&&"error"in p?String(p.error):`HTTP ${n.status}`;throw new Error(l)}return p}const d=t=>{const s=new URLSearchParams;for(const[r,n]of Object.entries(t))n!==void 0&&n!==""&&s.set(r,String(n));const e=s.toString();return e?`?${e}`:""},u={type:"object",required:["id","kind"],properties:{id:{type:"string",description:'session id, or "w:<uuid>" for a webhook node'},kind:{type:"string",enum:["session","webhook"]},webhookToken:{type:"string"},url:{type:"string",description:"webhook exit: outbound URL"},secret:{type:"string",description:"webhook exit: optional HMAC secret"}}},m={type:"object",required:["id","from","to","text"],properties:{id:{type:"string"},from:{type:"string"},to:{type:"string"},text:{type:"string",description:"message body; {upstream}/{summary}/{session} are substituted"},extract:{type:"string",description:"optional extraction prompt for {summary}"}}},c={type:"object",additionalProperties:!0},y={type:"object",additionalProperties:!0},I=[{name:"list_orchestrations",description:"List orchestrations (optionally by project). Returns { orchestrations: OrchestrationRow[] }; each row has id/name/projectId/startText/nodes/edges/enabled/cron/nextRunAt.",inputSchema:{type:"object",properties:{projectId:{type:"number"}}},outputSchema:{type:"object",properties:{orchestrations:{type:"array",items:c}},required:["orchestrations"]}},{name:"get_orchestration",description:"Get one orchestration definition (nodes, edges, startText, cron, enabled). Returns { orchestration }.",inputSchema:{type:"object",required:["id"],properties:{id:{type:"number"}}},outputSchema:{type:"object",properties:{orchestration:c},required:["orchestration"]}},{name:"create_orchestration",description:"Create an orchestration. enabled defaults to true, which makes the entry session auto-fire the graph on EVERY natural turn \u2014 pass enabled:false when the run should be triggered manually. Edges support {upstream}/{summary}/{session}; a cycle is rejected. Returns { ok, orchestration }.",inputSchema:{type:"object",required:["name","nodes","edges"],properties:{name:{type:"string"},startText:{type:"string",description:"first message for session entries (manual trigger)"},projectId:{type:"number",description:"webhook-only orchestrations"},nodes:{type:"array",items:u},edges:{type:"array",items:m},cron:{type:["string","null"]},enabled:{type:"boolean"}}},outputSchema:{type:"object",properties:{ok:{type:"boolean"},orchestration:c},required:["ok","orchestration"]}},{name:"update_orchestration",description:"Update part of an orchestration (omit fields to keep them; changing the graph does not affect a run already in flight). Returns { ok, orchestration }.",inputSchema:{type:"object",required:["id"],properties:{id:{type:"number"},name:{type:"string"},startText:{type:"string"},nodes:{type:"array",items:u},edges:{type:"array",items:m},cron:{type:["string","null"]},enabled:{type:"boolean"}}},outputSchema:{type:"object",properties:{ok:{type:"boolean"},orchestration:c},required:["ok","orchestration"]}},{name:"delete_orchestration",description:"Delete a definition. Run history (orchestration_runs) is kept. Returns { ok, orchestrationId }.",inputSchema:{type:"object",required:["id"],properties:{id:{type:"number"}}},outputSchema:{type:"object",properties:{ok:{type:"boolean"},orchestrationId:{type:"number"}},required:["ok","orchestrationId"]}},{name:"trigger_orchestration",description:"Start a run. Manual trigger works even when enabled=false. Optional text overrides startText; entries restricts which entry nodes run. Dead target sessions are opened automatically, and delivery waits for their SessionStart. Returns { ok, runId }.",inputSchema:{type:"object",required:["id"],properties:{id:{type:"number"},text:{type:"string"},entries:{type:"array",items:{type:"string"}}}},outputSchema:{type:"object",properties:{ok:{type:"boolean"},runId:{type:"number"}},required:["ok","runId"]}},{name:"list_runs",description:"List runs, newest first. Returns { runs: RunSummary[], nextBefore }. RunSummary has id/orchestrationId/name/status/deliveries/pendingCounts/createdAt.",inputSchema:{type:"object",properties:{orchestrationId:{type:"number"},projectId:{type:"number"},status:{type:"string"},limit:{type:"number"},before:{type:"number"}}},outputSchema:{type:"object",properties:{runs:{type:"array",items:y},nextBefore:{type:["number","null"]}},required:["runs"]}},{name:"get_run",description:'Get a run with state.events (deliveries and stage:"ensure" opens) and state.pending per session. Returns { run }. status becomes interrupted when the daemon restarts (runs are not resumed).',inputSchema:{type:"object",required:["id"],properties:{id:{type:"number"}}},outputSchema:{type:"object",properties:{run:y},required:["run"]}},{name:"cancel_run",description:"Cancel a running run. Returns { ok, runId }.",inputSchema:{type:"object",required:["id"],properties:{id:{type:"number"}}},outputSchema:{type:"object",properties:{ok:{type:"boolean"},runId:{type:"number"}},required:["ok","runId"]}},{name:"list_sessions",description:"List sessions for picking graph nodes; minimal fields only (sessionId/projectId/title/harness/lastSeenAt/turnOpen/pidAlive). Returns { sessions }.",inputSchema:{type:"object",properties:{projectId:{type:"number"}}},outputSchema:{type:"object",properties:{sessions:{type:"array",items:{type:"object",additionalProperties:!0}}},required:["sessions"]}}],o=t=>typeof t=="number"?t:void 0,h=t=>typeof t=="string"?t:void 0;async function k(t,s,e){switch(s){case"list_orchestrations":return a(t,"GET",`/messaging/orchestrations${d({projectId:o(e.projectId)})}`);case"get_orchestration":{const r=(await a(t,"GET","/messaging/orchestrations")).orchestrations.find(n=>n.id===o(e.id));if(!r)throw new Error(`Orchestration not found: ${String(e.id)}`);return{orchestration:r}}case"create_orchestration":return a(t,"POST","/messaging/orchestrations",{name:e.name,startText:e.startText,projectId:o(e.projectId),nodes:e.nodes,edges:e.edges,cron:e.cron??null,enabled:e.enabled});case"update_orchestration":{const r=o(e.id);return a(t,"PUT",`/messaging/orchestrations/${r}`,{...e.name===void 0?{}:{name:e.name},...e.startText===void 0?{}:{startText:e.startText},...e.nodes===void 0?{}:{nodes:e.nodes},...e.edges===void 0?{}:{edges:e.edges},...e.cron===void 0?{}:{cron:e.cron},...e.enabled===void 0?{}:{enabled:e.enabled}})}case"delete_orchestration":return a(t,"DELETE",`/messaging/orchestrations/${o(e.id)}`);case"trigger_orchestration":return a(t,"POST",`/messaging/orchestrations/${o(e.id)}/trigger`,{...h(e.text)?{text:e.text}:{},...Array.isArray(e.entries)?{entries:e.entries}:{}});case"list_runs":return a(t,"GET",`/messaging/orchestration-runs${d({orchestrationId:o(e.orchestrationId),projectId:o(e.projectId),status:h(e.status),limit:o(e.limit),before:o(e.before)})}`);case"get_run":return a(t,"GET",`/messaging/orchestration-runs/${o(e.id)}`);case"cancel_run":return a(t,"POST",`/messaging/orchestration-runs/${o(e.id)}/cancel`);case"list_sessions":return{sessions:(await a(t,"GET",`/sessions${d({projectId:o(e.projectId)})}`)).sessions.map(r=>({sessionId:r.sessionId,projectId:r.projectId,title:r.title,harness:r.harness,lastSeenAt:r.lastSeenAt,turnOpen:r.turnOpen,pidAlive:r.pidAlive}))};default:throw new Error(`Unknown tool: ${s}`)}}function x(t){const s=new g({name:"weave-orchestration",version:"0.1.0"},{capabilities:{tools:{}}});return s.setRequestHandler(S,async()=>({tools:I})),s.setRequestHandler(f,async e=>{const{name:r,arguments:n}=e.params;try{const i=await k(t,r,n??{});return{content:[{type:"text",text:JSON.stringify(i,null,2)}],structuredContent:i}}catch(i){return{isError:!0,content:[{type:"text",text:i instanceof Error?i.message:String(i)}]}}}),s}export async function handleMcpRequest(t,s,e){const r=x(e),n=new b({sessionIdGenerator:void 0,enableJsonResponse:!0});s.on("close",()=>{n.close(),r.close()}),await r.connect(n);let i;if(t.method==="POST"){const p=await j(t);try{i=p.trim()?JSON.parse(p):void 0}catch{w(s,400,{error:"Invalid JSON body"});return}}await n.handleRequest(t,s,i)}

package/node_modules/@weavecode/server/dist/daemon/opener/launch.d.ts

@@ -0,0 +1,20 @@
+import type { TerminalSettings, TerminalLaunch } from '../opener.js';
+/**
+ * Resolve the spawn candidates that would open a terminal at `dir`. 兼容入口：
+ * 候选解析已归后端（`TerminalBackend.candidates`），这里只做分发。
+ *
+ * `run` = argv of a command to execute inside the new terminal (e.g.
+ * `['claude', '--resume', id]`); omitted = just open the directory.
+ */
+export declare function resolveTerminalLaunch(dir: string, terminal: TerminalSettings, platform?: NodeJS.Platform, run?: string[]): TerminalLaunch[];
+/** File-manager command that opens `dir` (per platform). */
+export declare function resolveExplorerLaunch(dir: string, platform?: NodeJS.Platform): TerminalLaunch;
+/** Spawn detached and forget: the child outlives the daemon, its window is
+ * its own, and I/O is dropped so a GUI process never blocks on pipes. */
+export declare function trySpawn(launch: TerminalLaunch): Promise<boolean>;
+/** Try candidates in order until one launches (auto-probe fallback). */
+/** Open the OS file manager at `dir`. */
+export declare function openInExplorer(dir: string): Promise<void>;
+/** Open a terminal at `dir` following the configured preset. `auto` tries the
+ * platform candidates in order until one launches. */
+export declare function openInTerminal(dir: string, terminal: TerminalSettings): Promise<void>;

package/node_modules/@weavecode/server/dist/daemon/opener/launch.js

@@ -0,0 +1 @@
+import{spawn as a}from"node:child_process";export function resolveTerminalLaunch(e,n,r=process.platform,o){return terminalBackendFor(n,r).candidates(e,o)}export function resolveExplorerLaunch(e,n=process.platform){return n==="win32"?{command:"explorer.exe",args:[e]}:n==="darwin"?{command:"open",args:[e]}:{command:"xdg-open",args:[e]}}export function trySpawn(e){return new Promise(n=>{let r;try{r=a(e.command,e.args,{cwd:e.cwd,shell:e.shell,detached:!0,stdio:"ignore"})}catch{n(!1);return}r.on("error",()=>n(!1)),r.on("spawn",()=>{r.unref(),n(!0)})})}export async function openInExplorer(e){const n=resolveExplorerLaunch(e);if(!await trySpawn(n))throw new Error(`Failed to open file manager (${n.command})`)}export async function openInTerminal(e,n){await terminalBackendFor(n).open(e)}

package/node_modules/@weavecode/server/dist/daemon/opener/pty-terminals.d.ts

@@ -0,0 +1,52 @@
+import type { AttachTarget } from './wezterm-mux.js';
+/** Terminal.app 一个 tab（整面）：窗口/序号/tty + 窗口是否最前/tab 是否聚焦。 */
+export interface TerminalAppSurface {
+    /** AppleScript window id——会话期稳定，不受窗口顺序/焦点变化影响。 */
+    windowId: number;
+    /** 窗口内 tab 序号（1 起）。 */
+    tabIndex: number;
+    /** tty 设备路径（/dev/ttysNNN）——cwd 桥接键。 */
+    tty: string;
+    selected: boolean;
+    frontmost: boolean;
+    /** 根进程 cwd；取不到 = null（tab 在但不进任何目录匹配）。 */
+    cwd: string | null;
+}
+/** dump 文本 → surface 列表（cwd 另行桥接）；坏行跳过，不整体失败。 */
+export declare function parseTerminalAppDump(text: string): Omit<TerminalAppSurface, 'cwd'>[];
+/**
+ * `ps -axo pid=,ppid=,tty=` → tty（ps 形如 ttys004，无 /dev/ 前缀）→ 进程树
+ * 根 pid。根 = 父进程不在同一 tty 上的那个（shell 的父是 launchd，claude 的
+ * 父是 shell）；被 exec 替换成 claude 时根就是 claude，cwd 口径不变。
+ */
+export declare function parsePsRootPids(psText: string): Map<string, number>;
+/** `lsof -Fn` 输出 → pid → cwd（`p<pid>` 行后随 `n<路径>` 行）。 */
+export declare function parseLsofCwds(lsofText: string): Map<number, string>;
+/** 实时枚举（不吃缓存——落点决策必须看实时世界，同 wezterm 口径）。 */
+export declare function listTerminalAppSurfaces(platform: NodeJS.Platform): Promise<TerminalAppSurface[]>;
+export declare function terminalAppSurfacesCached(platform: NodeJS.Platform): Promise<TerminalAppSurface[]>;
+export declare function terminalAppTargetId(windowId: number, tabIndex: number): string;
+/** 目标 id ↔ (window, tab) 解码；坏 id → null。 */
+export declare function parseTerminalAppTargetId(id: string): {
+    windowId: number;
+    tabIndex: number;
+} | null;
+export declare function terminalAppMatches(surfaces: readonly TerminalAppSurface[], dir: string, platform: NodeJS.Platform): TerminalAppSurface[];
+/**
+ * 目标列表（纯函数）：只列本项目名下的 tab。排序（最近活跃从上往下）：
+ * ① 最前窗口的 tab 在前（Terminal.app 无 mux idle 信号，frontmost 是最近
+ * 活跃的最佳代理）；② 窗口内聚焦 tab 在前；③ 其余按 tabIndex 降序（越晚开
+ * 越可能更近用过）。matchCount/paneCount 恒 1/1——一个 tab 就一个面。
+ */
+export declare function terminalAppTargets(dir: string, surfaces: readonly TerminalAppSurface[], platform?: NodeJS.Platform): AttachTarget[];
+/** run 的落点：同项目已开的窗口（frontmost 优先，否则最大 windowId——越晚
+ * 创建越可能更近用过）；tab 只用于定位窗口（do script 落点本来就是窗口级
+ * 新 tab，tab 顺序变动无害）。没有 → null（走新窗）。 */
+export declare function pickTerminalAppWindow(surfaces: readonly TerminalAppSurface[], dir: string, platform?: NodeJS.Platform): {
+    windowId: number;
+    tabIndex: number;
+} | null;
+/** 目标列表（实时枚举入口）。 */
+export declare function listTerminalAppTargets(dir: string, platform: NodeJS.Platform): Promise<AttachTarget[]>;
+/** 在指定窗口开新 tab 跑命令；false = AppleScript 失败（窗口没了/无授权）。 */
+export declare function doScriptInTerminalWindow(dir: string, argv: string[], windowId: number): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/opener/pty-terminals.js

@@ -0,0 +1,5 @@
+import{captureCommand as p,normalizeDirKey as d}from"./wezterm-mux.js";import{joinCmd as l,quotePath as f}from"./shared.js";const m=['if application "Terminal" is not running then return ""','tell application "Terminal"','  set out to ""',"  repeat with w in windows","    set wid to id of w","    set fm to frontmost of w as text","    repeat with t in tabs of w",'      set out to out & wid & "\\t" & (index of t) & "\\t" & tty of t & "\\t" & (selected of t as text) & "\\t" & fm & linefeed',"    end repeat","  end repeat","  return out","end tell"].join(`
+`);export function parseTerminalAppDump(r){const t=[];for(const o of r.split(`
+`)){const e=o.trim().split("	");if(e.length!==5)continue;const n=Number(e[0]),i=Number(e[1]);!Number.isInteger(n)||!Number.isInteger(i)||t.push({windowId:n,tabIndex:i,tty:e[2],selected:e[3]==="true",frontmost:e[4]==="true"})}return t}export function parsePsRootPids(r){const t=new Map,o=new Map;for(const n of r.split(`
+`)){const i=/^\s*(\d+)\s+(\d+)\s+(\S+)/.exec(n);if(!i)continue;const s=Number(i[1]),c=i[3];if(c==="??")continue;const a=t.get(c)??new Set;a.add(s),t.set(c,a),o.set(s,Number(i[2]))}const e=new Map;for(const[n,i]of t)for(const s of i)if(!i.has(o.get(s)??-1)){e.set(n,s);break}return e}export function parseLsofCwds(r){const t=new Map;let o=-1;for(const e of r.split(`
+`))e.startsWith("p")&&/^\d+$/.test(e.slice(1))?o=Number(e.slice(1)):e.startsWith("n")&&o!==-1&&(t.set(o,e.slice(1)),o=-1);return t}export async function listTerminalAppSurfaces(r){if(r!=="darwin")return[];const t=await p("osascript",["-e",m]);if(!t?.ok)return[];const o=parseTerminalAppDump(t.out);if(o.length===0)return[];const e=await p("ps",["-axo","pid=,ppid=,tty="]);if(!e?.ok)return o.map(a=>({...a,cwd:null}));const n=parsePsRootPids(e.out),i=[...new Set(o.map(a=>n.get(a.tty.replace(/^\/dev\//,""))??-1))].filter(a=>a!==-1),s=i.length>0?await p("lsof",["-a","-p",i.join(","),"-d","cwd","-Fn"]):null,c=parseLsofCwds(s?.out??"");return o.map(a=>({...a,cwd:c.get(n.get(a.tty.replace(/^\/dev\//,""))??-1)??null}))}let u=null;export async function terminalAppSurfacesCached(r){if(u&&Date.now()-u.at<1e4)return u.surfaces;const t=await listTerminalAppSurfaces(r);return u={at:Date.now(),surfaces:t},t}export function terminalAppTargetId(r,t){return`terminal:${r}:${t}`}export function parseTerminalAppTargetId(r){const t=/^terminal:(\d+):(\d+)$/.exec(r);return t?{windowId:Number(t[1]),tabIndex:Number(t[2])}:null}export function terminalAppMatches(r,t,o){const e=d(t,o);return e?r.filter(n=>n.cwd!==null&&d(n.cwd,o)===e):[]}export function terminalAppTargets(r,t,o=process.platform){const e=terminalAppMatches(t,r,o);return e.sort((n,i)=>Number(i.frontmost)-Number(n.frontmost)||Number(i.selected)-Number(n.selected)||i.tabIndex-n.tabIndex),e.map(n=>({id:terminalAppTargetId(n.windowId,n.tabIndex),windowId:n.windowId,tabId:n.tabIndex,title:null,matchCount:1,paneCount:1,active:n.frontmost&&n.selected,full:!1}))}export function pickTerminalAppWindow(r,t,o=process.platform){const e=terminalAppMatches(r,t,o);return e.length===0?null:(e.sort((n,i)=>Number(i.frontmost)-Number(n.frontmost)||i.windowId-n.windowId),{windowId:e[0].windowId,tabIndex:e[0].tabIndex})}export async function listTerminalAppTargets(r,t){return terminalAppTargets(r,await listTerminalAppSurfaces(t),t)}export async function doScriptInTerminalWindow(r,t,o){const e=`cd ${f(r,"darwin")} && ${l(t,"darwin")}`.replace(/\\/g,"\\\\").replace(/"/g,'\\"');return(await p("osascript",["-e",`tell application "Terminal" to do script "${e}" in window id ${o}`]))?.ok===!0}

package/node_modules/@weavecode/server/dist/daemon/opener/shared.d.ts

@@ -0,0 +1,18 @@
+/**
+ * shell 引用工具域：路径/参数引用与 argv 拼接（custom 命令模板与 win32 转发共用）。
+ * 启动恒走参数数组 spawn（绝不拼 shell 串），目录名无法注入命令；唯一的例外是
+ * `custom` preset——用户自己写的命令模板，刻意经 shell（daemon 只听本机且有令牌）。
+ */
+/** Quote a path for interpolation into a custom shell command. */
+export declare function quotePath(dir: string, platform: NodeJS.Platform): string;
+/** Quote one argv entry for a shell command line (win32: cmd/PowerShell; posix: sh). */
+export declare function quoteArg(arg: string, platform: NodeJS.Platform): string;
+/** Join argv into one shell command line for presets that take a command string. */
+export declare function joinCmd(argv: string[], platform: NodeJS.Platform): string;
+/**
+ * win32：`wt.exe` / `wezterm` 是直接 CreateProcess 派发，**不做 PATHEXT 解析** ——
+ * 裸 `claude`（Windows 上只有 .cmd/.ps1 shim，没有同名 .exe）会报
+ * `0x80070002 找不到文件`。统一经 cmd.exe 转发（cmd/powershell 预设本来就经 shell，
+ * 所以只有这几个直发的预设需要）。`/k` 保留窗口：启动失败时用户看得见原因。
+ */
+export declare function throughCmd(run: string[] | undefined, win: boolean): string[] | undefined;

package/node_modules/@weavecode/server/dist/daemon/opener/shared.js

@@ -0,0 +1 @@
+export function quotePath(t,n){return n==="win32"?`"${t}"`:`'${t.replace(/'/g,"'\\''")}'`}export function quoteArg(t,n){return n==="win32"?t!==""&&!/[\s"&|<>^%]/.test(t)?t:`"${t.replace(/"/g,'\\"')}"`:/^[A-Za-z0-9_@%+=:,./-]+$/.test(t)?t:`'${t.replace(/'/g,"'\\''")}'`}export function joinCmd(t,n){return t.map(r=>quoteArg(r,n)).join(" ")}export function throughCmd(t,n){return!n||!t||t.length===0?t:["cmd.exe","/k",joinCmd(t,"win32")]}