@weavecode/weave 0.1.1 → 0.1.3

package/node_modules/@weavecode/server/dist/daemon/routes/path-refs.js

@@ -0,0 +1 @@
+import{readFile as E,stat as j}from"node:fs/promises";import H from"node:path";import{isHarness as N}from"@weavecode/core";import{readJson as z,sendJson as n}from"../http.js";import{messagingSurfaceFor as B}from"../../surfaces.js";import{listDirOf as C,matchPaths as M,projectFileIndex as v}from"../project-files.js";import{resolveWithinProject as T}from"../../install/reader.js";const U=4*1024*1024,R=1024*1024,G=8192;function q(r){const e=Number(r);return!Number.isFinite(e)||e<=0?100:Math.min(200,Math.floor(e))}function J(r){switch(r.slice(r.lastIndexOf(".")+1).toLowerCase()){case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";default:return null}}function P(r,e,a){if(!e.hookSessions||!e.hookEvents)return n(r,503,{error:"Hooks subsystem unavailable"}),null;const s=e.hookSessions.getBySessionId(a);return s?s.projectId==null?(n(r,400,{error:"Session is not bound to a project"}),null):e.projects.getById(s.projectId)||(n(r,404,{error:"Project not found"}),null):(n(r,404,{error:"Session not found"}),null)}function A(r,e){if(!r.hookEvents)return null;const a=r.hookEvents.listBySession(e,1),s=a[a.length-1]?.source;return N(s)?s:null}function I(r,e,a){const s=A(e,a),i=s?B(s):null;return(i?.pathRefs??null)||(n(r,409,{error:s?i?.unsupportedReasons?.pathRefs??`Harness "${s}" has no path reference syntax`:"Session has no hook events to determine its harness"}),null)}function $(r){if(r==null||r==="")return null;const e=Number(r);return Number.isInteger(e)&&e>0?e:null}function F(r,e){let a=0,s=r.length-1;for(;a<=s;){const i=a+s>>1,y=r[i];if(y===e)return!0;y<e?a=i+1:s=i-1}return!1}export async function handlePathRefRoutes(r,e,a,s,i){const y=s.match(/^\/sessions\/([^/]+)\/files$/);if(y&&r.method==="GET"){const p=decodeURIComponent(y[1]),o=P(e,a,p);if(!o)return!0;const c=I(e,a,p);if(!c)return!0;const u=await v(o.id,o.path,{fresh:i.searchParams.get("fresh")==="1"}),l=i.searchParams.get("q")??"",f=(i.searchParams.get("dir")??"").replace(/^\/+|\/+$/g,""),t=q(i.searchParams.get("limit")),d=(h,g,k)=>({path:h,name:h.slice(h.lastIndexOf("/")+1),kind:g,ref:c.expression({path:h,kind:g}),...k?{ranges:k}:{}});if(l.trim()){const{hits:h,total:g,capped:k}=await M(u,l,t,f);return n(e,200,{root:o.path,dir:f,total:g,capped:k,truncated:u.truncated,entries:h.map(w=>d(w.path,w.kind,w.ranges))}),!0}const m=C(u,f),O=await Promise.all(m.slice(0,t).map(async h=>{const g=d(h.path,h.kind);if(h.kind!=="file")return g;try{const k=await j(H.join(o.path,h.path));return{...g,size:k.size,mtime:k.mtime.toISOString()}}catch{return g}}));return n(e,200,{root:o.path,dir:f,total:m.length,capped:!1,truncated:u.truncated,entries:O}),!0}const b=s.match(/^\/sessions\/([^/]+)\/ref$/);if(b&&r.method==="GET"){const p=decodeURIComponent(b[1]);if(!P(e,a,p))return!0;const o=I(e,a,p);if(!o)return!0;const c=(i.searchParams.get("path")??"").replace(/^\/+|\/+$/g,"");if(!c)return n(e,400,{error:'Missing "path" query parameter'}),!0;const u=i.searchParams.get("kind")==="dir"?"dir":"file";if(!o.kinds.includes(u))return n(e,409,{error:`Harness does not accept "${u}" references`}),!0;const l=$(i.searchParams.get("start")),f=$(i.searchParams.get("end"));return o.lines?l==null?(n(e,200,{ref:o.expression({path:c,kind:u})}),!0):f!=null&&f<l?(n(e,400,{error:'"end" must not precede "start"'}),!0):(n(e,200,{ref:o.expression({path:c,kind:u,lines:{start:l,end:f??l}})}),!0):(n(e,200,{ref:o.expression({path:c,kind:u})}),!0)}const x=s.match(/^\/sessions\/([^/]+)\/refs\/recognize$/);if(x&&r.method==="POST"){const p=decodeURIComponent(x[1]),o=P(e,a,p);if(!o)return!0;const c=I(e,a,p);if(!c)return!0;let u="";try{const t=await z(r);u=typeof t?.text=="string"?t.text:""}catch{return n(e,400,{error:"Body must be JSON"}),!0}const l=await v(o.id,o.path),f=[];for(const t of c.recognize(u)){const d=t.kind==="dir"&&F(l.dirs,t.path)?"dir":F(l.files,t.path)?"file":null;if(!d||!c.kinds.includes(d))continue;const m=t.lines&&c.lines?t.lines:void 0;f.push({start:t.start,end:t.end,ref:c.expression({path:t.path,kind:d,...m?{lines:m}:{}}),path:t.path,kind:d,...m?{lines:m}:{}})}return n(e,200,{refs:f}),!0}const S=s.match(/^\/sessions\/([^/]+)\/file$/);if(S&&r.method==="GET"){const p=decodeURIComponent(S[1]),o=P(e,a,p);if(!o)return!0;const c=i.searchParams.get("path");if(!c)return n(e,400,{error:'Missing "path" query parameter'}),!0;let u;try{u=T(o.path,c)}catch{return n(e,403,{error:"Path escapes the project"}),!0}let l;try{l=await j(u)}catch{return n(e,404,{error:"File not found"}),!0}if(!l.isFile())return n(e,404,{error:"Not a file"}),!0;if(l.size>U)return n(e,413,{error:"File too large to preview"}),!0;const f=J(c);let t=await E(u);if(!f){if(t.subarray(0,G).includes(0))return n(e,415,{error:"Binary file"}),!0;if(t.length>R){const d=t.subarray(0,R),m=d.lastIndexOf(10);t=m>0?d.subarray(0,m):d,e.setHeader("x-weave-truncated","1")}}return e.writeHead(200,{"content-type":f??"text/plain; charset=utf-8","content-length":String(t.length),"cache-control":"private, max-age=60"}),e.end(t),!0}return!1}

package/node_modules/@weavecode/server/dist/daemon/routes/projects.d.ts

@@ -0,0 +1,12 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from '../server.js';
+/** 项目存储配置（projects.meta.storage）：图片/文件各自的落盘目录，空 = 全局默认。 */
+export interface ProjectStorage {
+    images?: string | null;
+    files?: string | null;
+}
+/**
+ * 项目域路由：目录/终端打开、关终端、唤出终端、新会话、归档/恢复、排序、
+ * pane/终端枚举、终端角标。返回 true = 本路由认领；false = 未命中，主链继续。
+ */
+export declare function handleProjectRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/routes/projects.js

@@ -0,0 +1 @@
+import g from"node:fs";import O from"node:path";import{isHarness as k}from"@weavecode/core";import{readBody as h,sendJson as s}from"../http.js";import{readDaemonSettings as j}from"../settings.js";import{closeTerminalsIn as $,defaultProjectOpener as u,readTerminalCounts as E,terminalBackendFor as J}from"../opener.js";import{purgeProjectPipeline as A}from"../hook-pipeline.js";import{hooksRoot as R}from"../../hooks/mirror.js";import{projectHarnesses as D,withProjectHarnesses as B}from"../project-harnesses.js";import{getUploadsDir as x}from"../../db/paths.js";export async function handleProjectRoutes(c,r,t,p){const y=p.match(/^\/projects\/(\d+)\/open$/);if(y&&c.method==="POST"){const e=t.projects.getById(Number(y[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;let o;try{o=JSON.parse(await h(c))}catch{return s(r,400,{error:"Invalid JSON body"}),!0}if(o.target!=="explorer"&&o.target!=="terminal")return s(r,400,{error:'Invalid "target" (explorer|terminal)'}),!0;const n=t.opener??u;try{if(!(await g.promises.stat(e.path)).isDirectory())throw new Error(`Not a directory: ${e.path}`);if(o.target==="explorer")await n.openExplorer(e.path);else{const a=await j();await n.openTerminal(e.path,a.terminal),setTimeout(()=>{t.terminalRefresher?.refreshNow()},600)}s(r,200,{ok:!0,target:o.target,path:e.path})}catch(a){s(r,400,{error:a instanceof Error?a.message:"Open failed"})}return!0}const w=p.match(/^\/projects\/(\d+)\/close-terminal$/);if(w&&c.method==="POST"){const e=t.projects.getById(Number(w[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;let o;try{o=JSON.parse(await h(c)||"{}")}catch{return s(r,400,{error:"Invalid JSON body"}),!0}if(!Array.isArray(o.paneIds)||o.paneIds.length===0||o.paneIds.some(i=>typeof i!="string"))return s(r,400,{error:"paneIds must be a non-empty array of strings"}),!0;const n=t.opener??u,a=await j();try{const i=await(n.closeTerminals??$)(e.path,a.terminal,o.paneIds);setTimeout(()=>{t.terminalRefresher?.refreshNow()},600),s(r,200,{ok:!0,closed:i})}catch(i){s(r,400,{error:i instanceof Error?i.message:"Close failed"})}return!0}const I=p.match(/^\/projects\/(\d+)\/focus-terminal$/);if(I&&c.method==="POST"){const e=t.projects.getById(Number(I[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;let o;try{o=JSON.parse(await h(c)||"{}")}catch{return s(r,400,{error:"Invalid JSON body"}),!0}if(typeof o.targetId!="string"||!o.targetId)return s(r,400,{error:"targetId must be a non-empty string"}),!0;const n=t.opener??u,a=await j();try{await(n.focusTerminal??u.focusTerminal)(e.path,o.targetId,a.terminal),s(r,200,{ok:!0,targetId:o.targetId})}catch(i){s(r,409,{error:i instanceof Error?i.message:"Cannot focus terminal"})}return!0}const P=p.match(/^\/projects\/(\d+)\/new-session$/);if(P&&c.method==="POST"){const e=t.projects.getById(Number(P[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;let o;try{o=JSON.parse(await h(c)||"{}")}catch{return s(r,400,{error:"Invalid JSON body"}),!0}const n=await D(e.path,t.harnesses);if(o.harness!==void 0&&!k(o.harness))return s(r,400,{error:'Invalid "harness"'}),!0;const a=o.harness;if(a&&!n.some(d=>d.id===a))return s(r,409,{error:`Harness "${a}" is not integrated in this project`}),!0;const i=a?[a]:n.map(d=>d.id),m=n.find(d=>i.includes(d.id)&&d.canStartSession),l=m?t.harnesses?.get(m.id)?.resume:void 0;if(!l?.bin)return s(r,501,{error:`Harness "${i[0]}" cannot start an interactive session`}),!0;const f=t.opener??u;try{if(!(await g.promises.stat(e.path)).isDirectory())throw new Error(`Not a directory: ${e.path}`);const d=await j();await f.runInTerminal(e.path,[l.bin],d.terminal),setTimeout(()=>{t.terminalRefresher?.refreshNow()},600),s(r,200,{ok:!0,command:l.bin,cwd:e.path})}catch(d){s(r,400,{error:d instanceof Error?d.message:"Open failed"})}return!0}if(p==="/projects"&&c.method==="GET")return s(r,200,{projects:await B(t.projects.list(),t.harnesses)}),!0;if(p==="/projects/archived"&&c.method==="GET")return s(r,200,{projects:await B(t.projects.listArchived(),t.harnesses)}),!0;const v=p.match(/^\/projects\/(\d+)\/archive$/);if(v&&c.method==="POST"){const e=t.projects.getById(Number(v[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;if(e.archivedAt)return s(r,200,{project:e,purged:{events:0,dispatches:0,sessions:0,messages:0}}),!0;const o=t.hookDispatches?.deleteByProject(e.id)??0,n=t.hookEvents?.deleteByProject(e.id)??0;t.uploads?.pruneUnreferenced();const a=t.messageDeliverer?.forgetProject(e.id)??0;t.sessionWatches?.deleteByProject(e.id),t.orchestrations?.deleteByProject(e.id),t.orchestrationRuns?.clear("all",e.id),t.sideQuestions?.repo.deleteByProject(e.id);const i=t.hookSessions?.removeByProject(e.id)??0;return t.projects.setArchived(e.id,!0),A(t.hooksDir??R(),e.token),t.watch?.reconcile(),t.dataBus?.emit({key:"projects"}),s(r,200,{project:t.projects.getById(e.id),purged:{events:n,dispatches:o,sessions:i,messages:a}}),!0}const b=p.match(/^\/projects\/(\d+)\/restore$/);if(b&&c.method==="POST"){const e=t.projects.getById(Number(b[1]));return e?e.archivedAt?(t.projects.setArchived(e.id,!1),t.hookMirror?.syncProject(e.id),t.watch?.reconcile(),t.dataBus?.emit({key:"projects"}),s(r,200,{project:t.projects.getById(e.id)}),!0):(s(r,200,{project:e}),!0):(s(r,404,{error:"Project not found"}),!0)}if(p==="/projects/order"&&c.method==="PUT"){let e;try{e=JSON.parse(await h(c))}catch{return s(r,400,{error:"Invalid JSON body"}),!0}return!Array.isArray(e.ids)||!e.ids.every(o=>Number.isInteger(o))?(s(r,400,{error:'Invalid "ids" (integer array expected)'}),!0):(t.projects.setOrder(e.ids),t.dataBus?.emit({key:"projects"}),s(r,200,{projects:t.projects.list()}),!0)}const N=p.match(/^\/projects\/(\d+)\/panes$/);if(N&&c.method==="GET"){const e=t.projects.getById(Number(N[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;const o=await j(),n=t.opener?.listPanes??u.listPanes;try{s(r,200,{projectId:e.id,panes:await n(e.path,o.terminal)})}catch(a){s(r,409,{error:a instanceof Error?a.message:"Cannot list panes"})}return!0}const S=p.match(/^\/projects\/(\d+)\/terminals$/);if(S&&c.method==="GET"){const e=t.projects.getById(Number(S[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;const o=await j(),n=t.opener?.listTerminals??u.listTerminals,a=J(o.terminal).enumerable?await n(e.path,o.terminal):[];return s(r,200,{projectId:e.id,terminals:a}),!0}if(p==="/terminals/counts"&&c.method==="GET"){if(t.terminalRefresher)s(r,200,{counts:t.terminalRefresher.lastSnapshot?.counts??{}}),t.terminalRefresher.tick(!0);else{const e=t.opener??u;s(r,200,{counts:await E(t.projects.list(),e)})}return!0}const T=p.match(/^\/projects\/(\d+)\/storage$/);if(T){const e=t.projects.getById(Number(T[1]));if(!e)return s(r,404,{error:"Project not found"}),!0;const o=t.projects.getMeta(e.id)?.storage??{},n=t.uploads?.defaultDir??x();if(c.method==="GET")return s(r,200,{storage:o,effective:{images:o.images||n,files:o.files||n}}),!0;if(c.method==="PUT"){let a;try{a=JSON.parse(await h(c))}catch{return s(r,400,{error:"Invalid JSON body"}),!0}const i={};for(const m of["images","files"]){const l=a[m];if(l==null||l===""){i[m]=null;continue}if(typeof l!="string")return s(r,400,{error:`"${m}" must be a string or null`}),!0;const f=l.trim();if(!O.isAbsolute(f))return s(r,400,{error:`"${m}" must be an absolute path`}),!0;try{g.mkdirSync(f,{recursive:!0}),g.accessSync(f,g.constants.W_OK)}catch(d){return s(r,400,{error:`"${m}" is not writable: ${d instanceof Error?d.message:String(d)}`}),!0}i[m]=f}return t.projects.setMeta(e.id,{storage:i}),t.dataBus?.emit({key:"projects"}),s(r,200,{storage:i,effective:{images:i.images||n,files:i.files||n}}),!0}return!1}return!1}

package/node_modules/@weavecode/server/dist/daemon/routes/session-control.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from '../server.js';
+/**
+ * 会话控制域路由：中断、关 pane、执行模式/模型/思考强度切换、阻塞问答作答、
+ * 旁路会话（/btw）。全部经 MessageDeliverer 的层② 终端通道打键。返回 true = 本路由
+ * 认领；false = 未命中，主链继续。
+ */
+export declare function handleSessionControlRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string, url: URL): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/routes/session-control.js

@@ -0,0 +1 @@
+import{z as m}from"zod";import{readJson as f,sendJson as t}from"../http.js";import{composeAnswerAtoms as R}from"../../hooks/answer-keys.js";import{readSideQuestions as C}from"../../hooks/side-questions.js";const M=m.object({question:m.string().min(1).max(4e3)}),Q=m.object({model:m.string().min(1).max(128)}),U=m.object({level:m.string().min(1).max(32)}),$=m.object({answers:m.array(m.object({questionKey:m.string().min(1),options:m.array(m.number().int().min(0)).max(32),text:m.string().max(2e3).optional()})).min(1)}),O=1200;async function P(i,s){await new Promise(a=>setTimeout(a,O));const e=i();return e!==null&&e>s}export async function handleSessionControlRoutes(i,s,e,a,p){const h=a.match(/^\/sessions\/([^/]+)\/interrupt$/);if(h&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(h[1]),o=e.sessionProbe,n=e.hookSessions?.getBySessionId(r)??null,u=!!o&&!!n&&o.transcriptPresent(r)!==null,c=()=>u?o.interruptedAt(r,n.lastSeenAt)??null:null,l=c()??0,d=await e.messageDeliverer.interrupt(r);if(!d.ok)return t(s,d.status,{error:d.error}),!0;let g=null;if(u&&(g=await P(c,l),g===!1)){const q=await e.messageDeliverer.interrupt(r,"heuristic",d.paneId);q.ok&&q.sent&&(g=await P(c,l))}return setTimeout(()=>e.interruptRefresher?.tick(),1500),t(s,200,{ok:!0,sessionId:r,interrupted:g}),!0}const v=a.match(/^\/sessions\/([^/]+)\/close-pane$/);if(v&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(v[1]),o=await e.messageDeliverer.closePane(r);return o.ok?(setTimeout(()=>{e.livenessRefresher?.tick(),e.terminalRefresher?.refreshNow()},600),t(s,200,{ok:!0,sessionId:r}),!0):(t(s,o.status,{error:o.error}),!0)}const k=a.match(/^\/sessions\/([^/]+)\/mode$/);if(k&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(k[1]),o=await e.messageDeliverer.cycleMode(r);return o.ok?(t(s,200,{ok:!0,sessionId:r}),!0):(t(s,o.status,{error:o.error}),!0)}const b=a.match(/^\/sessions\/([^/]+)\/enter$/);if(b&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(b[1]),o=await e.messageDeliverer.pressEnter(r);return o.ok?(t(s,200,{ok:!0,sessionId:r}),!0):(t(s,o.status,{error:o.error}),!0)}const I=a.match(/^\/sessions\/([^/]+)\/ctrl-c$/);if(I&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(I[1]),o=await e.messageDeliverer.pressCtrlC(r);return o.ok?(t(s,200,{ok:!0,sessionId:r}),!0):(t(s,o.status,{error:o.error}),!0)}const w=a.match(/^\/sessions\/([^/]+)\/model$/);if(w&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(w[1]),o=Q.parse(await f(i)),n=await e.messageDeliverer.setModel(r,o.model);return n.ok?(setTimeout(()=>e.interruptRefresher?.tick(),1500),t(s,200,{ok:!0,sessionId:r}),!0):(t(s,n.status,{error:n.error}),!0)}const y=a.match(/^\/sessions\/([^/]+)\/effort$/);if(y&&i.method==="POST"){if(!e.messageDeliverer)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(y[1]),o=U.parse(await f(i)),n=await e.messageDeliverer.setEffort(r,o.level);return n.ok?(t(s,200,{ok:!0,sessionId:r}),!0):(t(s,n.status,{error:n.error}),!0)}if(a==="/messaging/questions"&&i.method==="GET")return e.questionTracker?(t(s,200,{questions:e.questionTracker.snapshot()}),!0):(t(s,503,{error:"Question tracking unavailable"}),!0);const T=a.match(/^\/sessions\/([^/]+)\/answer$/);if(T&&i.method==="POST"){if(!e.questionTracker||!e.messageDeliverer)return t(s,503,{error:"Question tracking unavailable"}),!0;const r=decodeURIComponent(T[1]);let o;try{o=$.parse(await f(i))}catch(l){return t(s,400,{error:l instanceof Error?l.message:"Invalid body"}),!0}const n=e.questionTracker.get(r);if(!n)return t(s,409,{error:"Session has no pending question"}),!0;const u=R(n.questions,o.answers);if(!u.ok)return t(s,400,{error:u.error}),!0;const c=await e.messageDeliverer.answer(r,u.atoms);return c.ok?(e.questionTracker.markAnswered(r),t(s,200,{ok:!0,sessionId:r}),!0):(t(s,c.status,{error:c.error}),!0)}const D=a.match(/^\/sessions\/([^/]+)\/side-question$/);if(D&&i.method==="POST"){if(!e.messageDeliverer||!e.sideQuestions)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(D[1]);let o;try{o=M.parse(await f(i))}catch(c){return t(s,400,{error:c instanceof Error?c.message:"Invalid body"}),!0}const n=await e.messageDeliverer.askSideQuestion(r,o.question);if(!n.ok)return t(s,n.status,{error:n.error}),!0;const u=e.sideQuestions.repo.insert({sessionId:r,projectId:e.hookSessions?.getBySessionId(r)?.projectId??null,question:n.question});return t(s,200,{ok:!0,sideQuestion:u}),!0}const S=a.match(/^\/sessions\/([^/]+)\/side-questions$/);if(S&&i.method==="GET"){if(!e.sideQuestions)return t(s,503,{error:"Messaging subsystem unavailable"}),!0;const r=decodeURIComponent(S[1]),o=Number(p.searchParams.get("limit")),n=Number(p.searchParams.get("beforeId")),u=C(e.sideQuestions,r,{limit:Number.isFinite(o)&&o>0?Math.min(o,100):20,beforeId:Number.isFinite(n)&&n>0?n:void 0});return t(s,200,{sideQuestions:u}),!0}return!1}

package/node_modules/@weavecode/server/dist/daemon/routes/session-insights.d.ts

@@ -0,0 +1,6 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from '../server.js';
+/**
+ * 会话洞察域路由。返回 true = 本路由认领；false = 未命中，主链继续。
+ */
+export declare function handleSessionInsightRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string, url: URL): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/routes/session-insights.js

@@ -0,0 +1 @@
+import{readFileSync as F}from"node:fs";import I from"node:path";import{isHarness as y}from"@weavecode/core";import{sendJson as l}from"../http.js";import{blockingPromptFor as R,commandsSurfaceFor as w,editSurfaceFor as N}from"../../surfaces.js";function E(o,n,t){if(!n.hookSessions||!n.hookEvents)return l(o,503,{error:"Hooks subsystem unavailable"}),null;const s=n.hookSessions.getBySessionId(t);return s?s.projectId==null?(l(o,400,{error:"Session is not bound to a project"}),null):n.projects.getById(s.projectId)||(l(o,404,{error:"Project not found"}),null):(l(o,404,{error:"Session not found"}),null)}function P(o,n){if(!o.hookEvents)return null;const t=o.hookEvents.listBySession(n,1),s=t[t.length-1]?.source;return y(s)?s:null}const x=20,C=2e5;function H(o){try{const n=JSON.parse(o);return[typeof n.toolName=="string"?n.toolName:null,n.toolInput??null,n.toolResponse??null]}catch{return[null,null,null]}}function j(o){if(!o)return null;try{const n=F(o,"utf8");return n.trim()?n:null}catch{return null}}const T=2e5,O=4e6;function G(o,n){const t=I.relative(n,o);return(t&&!t.startsWith("..")&&!I.isAbsolute(t)?t:o).split(I.sep).join("/")}function B(o){if(!o)return null;const n=Date.parse(o);return Number.isFinite(n)?n:null}function U(o,n,t){if(n===null&&t===null)return!0;if(!o)return!1;const s=Date.parse(o);return!(!Number.isFinite(s)||n!==null&&s<=n||t!==null&&s>t)}function $(o,n){const t=[],s=new Map;let d=O,m=0,h=!1;for(const c of o){const p=c.hunk.before.slice(0,T),e=c.hunk.after.slice(0,T),u=p.length<c.hunk.before.length||e.length<c.hunk.after.length;u&&(h=!0);const i=p.length+e.length;if(i>d){h=!0;continue}d-=i;const r=G(c.path,n);let a=s.get(r);a||(a={path:r,hunks:[]},s.set(r,a),t.push(a)),a.hunks.push({before:p,after:e,at:c.at,...u?{clamped:!0}:{}}),m++}return{files:t,hunks:m,truncated:h}}export async function handleSessionInsightRoutes(o,n,t,s,d){const m=s.match(/^\/sessions\/([^/]+)\/plan$/);if(m&&o.method==="GET"){const e=decodeURIComponent(m[1]);if(!t.hookEvents)return l(n,503,{error:"Hook ingestion unavailable"}),!0;const u=t.hookEvents.listBySession(e,1),i=u[u.length-1]?.source,r=y(i)?R(i)?.plan??null:null;if(!r)return l(n,200,{plan:null}),!0;const a=g=>g.flatMap(S=>{const v=r.draftOf(...H(S.payload));return v?[{row:S,draft:v}]:[]}),[f]=a(t.hookEvents.listByTools(e,[r.tool],null,x));if(!f)return l(n,200,{plan:null}),!0;const[k]=a(t.hookEvents.listByTools(e,r.writeTools,r.fileHint,x)).filter(g=>g.row.id<f.row.id),b=f.draft.text??j(f.draft.filePath)??k?.draft.text??j(k?.draft.filePath??null);return b?(l(n,200,{plan:{eventId:f.row.id,at:f.row.createdAt,text:b.slice(0,C)}}),!0):(l(n,200,{plan:null}),!0)}const h=s.match(/^\/sessions\/([^/]+)\/commands$/);if(h&&o.method==="GET"){const e=decodeURIComponent(h[1]),u=E(n,t,e);if(!u)return!0;const i=P(t,e),r=i?w(i):null;return r?(l(n,200,{supported:!0,commands:await r.list({projectPath:u.path})}),!0):(l(n,200,{supported:!1,commands:[]}),!0)}const c=s.match(/^\/sessions\/([^/]+)\/command-executions$/);if(c&&o.method==="GET"){const e=decodeURIComponent(c[1]);if(!E(n,t,e))return!0;const u=P(t,e),i=u?w(u):null;if(!i)return l(n,200,{supported:!1,executions:null}),!0;const r=await i.executions(t.sessionProbe?.transcriptPathOf(e)??null);return l(n,200,{supported:r!==null,executions:r}),!0}const p=s.match(/^\/sessions\/([^/]+)\/edits$/);if(p&&o.method==="GET"){const e=decodeURIComponent(p[1]),u=E(n,t,e);if(!u)return!0;const i=P(t,e),r=i?N(i):null;if(!r)return l(n,200,{files:null,hunks:0,truncated:!1,reason:"unsupported"}),!0;const a=await r.sessionEdits({sessionId:e,transcriptPath:t.sessionProbe?.transcriptPathOf(e)??null});if(!a)return l(n,200,{files:null,hunks:0,truncated:!1,reason:"unreadable"}),!0;const f=B(d.searchParams.get("since")),k=B(d.searchParams.get("until")),b=f!==null||k!==null?a.filter(g=>U(g.at,f,k)):a;return l(n,200,$(b,u.path)),!0}return!1}

package/node_modules/@weavecode/server/dist/daemon/routes/settings-statusline.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from '../server.js';
+/**
+ * 设置/状态栏域路由：daemon settings（含 AI/决策 key 只写面）、目录浏览、
+ * project weave config、statusline 管理、assets/global-file-assets 只读面。
+ * 返回 true = 本路由认领；false = 未命中，主链继续。
+ */
+export declare function handleSettingsRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string, url: URL): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/routes/settings-statusline.js

@@ -0,0 +1 @@
+import{readBody as u,sendJson as r}from"../http.js";import{DEFAULT_AI_SETTINGS as T,DEFAULT_DECISION_SETTINGS as b,readDaemonSettings as m,writeDaemonSettings as E,terminalPresetsFor as K}from"../settings.js";import{readAiKey as G,writeAiKey as N}from"../ai-config.js";import{readDecisionKey as I,writeDecisionKey as U}from"../decision-config.js";import{accessUrls as j}from"../tls.js";import{applyLaunchOnLogin as A}from"../auto-start.js";import{readProjectConfig as h,writeProjectConfig as O}from"../../install/project-config.js";import{readStatuslineConfig as y,readStatuslineScript as C,readStatuslineFacts as v,applyStatuslineConfig as g,readGlobalStatuslineConfig as S,writeGlobalStatuslineConfig as D}from"../../statusline/manager.js";import{DEFAULT_STATUSLINE_CONFIG as J}from"../../statusline/config.js";import{listBrowseRoots as F,listDirectoryChildren as B}from"../fs-browser.js";import{projectFileNamespaces as L}from"../../hooks/toolkit.js";import{listGlobalFileAssets as _}from"../../install/global-file-assets.js";function w(i,e,s){const n=i.ai??T,l=i.decision??b,p=G(e),d=I(s);return{...i,ai:{baseUrl:n.baseUrl,model:n.model,apiKey:p,apiKeySet:p!==null},decision:{baseUrl:l.baseUrl,model:l.model,apiKey:d,apiKeySet:d!==null}}}function P(i){if(!i)return;const{apiKey:e,...s}=i;return s}export async function handleSettingsRoutes(i,e,s,n,l){if(n==="/settings"){if(i.method==="GET")return r(e,200,{settings:w(await m(),s.aiKeyPath,s.decisionKeyPath),presets:K(process.platform),platform:process.platform,urls:j(s.port,s.tlsPort??0)}),!0;if(i.method==="PUT"){let t;try{t=JSON.parse(await u(i))}catch{return r(e,400,{error:"Invalid JSON body"}),!0}const a=t.ai?.apiKey;a!==void 0&&N(typeof a=="string"?a:null,s.aiKeyPath);const o=t.decision?.apiKey;o!==void 0&&U(typeof o=="string"?o:null,s.decisionKeyPath);const c=await m(),f=await E({...c,...t,ai:t.ai?P(t.ai):c.ai,decision:t.decision?P(t.decision):c.decision});return s.hookEvents?.resetPrune(),(s.autoStart??A)(f.startup?.launchOnLogin??!1),s.dataBus?.emit({key:"settings"}),r(e,200,w(f,s.aiKeyPath,s.decisionKeyPath)),!0}}if(n==="/fs/roots"&&i.method==="GET"){const t=s.libraries?s.libraries.list().map(o=>o.path):[],a=await F(t);return r(e,200,{roots:a}),!0}if(n==="/fs/children"&&i.method==="GET"){const t=l.searchParams.get("path");if(!t)return r(e,400,{error:'Missing "path" query parameter'}),!0;try{const a=await B(t);r(e,200,{children:a})}catch(a){r(e,400,{error:`Cannot list directory: ${String(a)}`})}return!0}const p=n.match(/^\/projects\/(\d+)\/config$/);if(p){const t=s.projects.getById(Number(p[1]));if(!t)return r(e,404,{error:"Project not found"}),!0;if(i.method==="GET")return r(e,200,await h(t.path)),!0;if(i.method==="PUT"){let a;try{a=JSON.parse(await u(i))}catch{return r(e,400,{error:"Invalid JSON body"}),!0}const o=await h(t.path),c={lastSyncAt:a.lastSyncAt??o.lastSyncAt};return await O(t.path,c),r(e,200,c),!0}}if(n==="/statusline/global"){if(i.method==="GET")return r(e,200,{config:await S()}),!0;if(i.method==="PUT"){let t;try{t=JSON.parse(await u(i))}catch{return r(e,400,{error:"Invalid JSON body"}),!0}try{await D(t);for(const a of s.projects.list()){const o=await y(a.path);o.source==="global"&&await g(a.path,o)}s.dataBus?.emit({key:"statusline"}),r(e,200,{ok:!0})}catch(a){r(e,400,{error:a instanceof Error?a.message:"Global statusline update failed"})}return!0}}if(n==="/statusline/default"&&i.method==="GET")return r(e,200,{config:J}),!0;const d=n.match(/^\/projects\/(\d+)\/statusline$/);if(d){const t=s.projects.getById(Number(d[1]));if(!t)return r(e,404,{error:"Project not found"}),!0;if(i.method==="GET"){const[a,o,c]=await Promise.all([y(t.path),C(t.path),S()]);return r(e,200,{config:a,script:o,globalConfig:c,facts:v(t.path)}),!0}if(i.method==="PUT"){let a;try{a=JSON.parse(await u(i))}catch{return r(e,400,{error:"Invalid JSON body"}),!0}try{await g(t.path,a),s.dataBus?.emit({key:"statusline",projectPath:t.path}),r(e,200,{ok:!0})}catch(o){r(e,400,{error:o instanceof Error?o.message:"Statusline update failed"})}return!0}}if(n==="/assets"&&i.method==="GET"){const t=l.searchParams.get("path");if(!t)return r(e,400,{error:'Missing "path" query parameter'}),!0;if(!s.watch)return r(e,503,{error:"Watch service unavailable"}),!0;const a=await L(t),o=s.watch.getAssets(t).map(c=>{const f=a.get(c.relPath);return f?{...c,namespace:f}:c});return r(e,200,{projectPath:t,assets:o}),!0}return n==="/global-file-assets"&&i.method==="GET"?(r(e,200,{assets:await _()}),!0):!1}

package/node_modules/@weavecode/server/dist/daemon/routes/uploads.d.ts

@@ -0,0 +1,7 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from '../server.js';
+/**
+ * 上传域路由：分块上传（断点续传 begin → PUT → finish）、一次性上传、
+ * 会话附件统计/清理、图片回显。返回 true = 本路由认领；false = 未命中，主链继续。
+ */
+export declare function handleUploadRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string, url: URL): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/routes/uploads.js

@@ -0,0 +1 @@
+import{createReadStream as w}from"node:fs";import{z as u}from"zod";import{readJson as c,readRawBody as E,sendJson as o}from"../http.js";import{isImageMediaType as I,maxUploadBytes as b}from"../../repositories/uploads.js";import{defaultUploadSessions as S}from"../upload-sessions.js";const z=u.object({name:u.string().min(1).max(200),mediaType:u.string().min(1).max(100),data:u.string().min(1),projectId:u.number().int().positive().optional()}),B=u.object({name:u.string().min(1).max(200),mediaType:u.string().min(1).max(100),size:u.number().int().positive(),projectId:u.number().int().positive().optional()});function j(s,e){return(I(e)?s?.images:s?.files)??null}const x=16*1024*1024;function f(s){return{id:s.id,name:s.name,mediaType:s.mediaType,size:s.size}}function g(s,e,a){if(!s.projects.getById(e))return null;const d=s.projects.getMeta(e);return j(d?.storage,a)}export async function handleUploadRoutes(s,e,a,d,h){const l=a.uploadSessions??S;if(d==="/uploads/begin"&&s.method==="POST"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;let r;try{r=B.parse(await c(s))}catch(n){return o(e,400,{error:n instanceof Error?n.message:"Invalid body"}),!0}if(r.size>b(r.mediaType))return o(e,413,{error:"File too large"}),!0;const t=r.projectId?g(a,r.projectId,r.mediaType):null,i=await l.begin({...r,dir:t});return o(e,201,{uploadId:i.id,received:0,size:i.size}),!0}const p=d.match(/^\/uploads\/([0-9a-f-]{36})\/finish$/);if(p&&s.method==="POST"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;const r=await l.finish(p[1]);if(!r)return o(e,409,{error:"Upload incomplete"}),!0;const t=await a.uploads.adoptFromFile(r);return await l.abort(p[1]),o(e,201,{upload:f(t)}),!0}const y=d.match(/^\/uploads\/([0-9a-f-]{36})$/);if(y){const r=y[1];if(s.method==="GET"){const t=await l.get(r);return t?(o(e,200,{received:t.received,size:t.size,name:t.name,mediaType:t.mediaType}),!0):(o(e,404,{error:"Upload not found"}),!0)}if(s.method==="PUT"){const t=Number(h.searchParams.get("offset")??"");if(!Number.isInteger(t)||t<0)return o(e,400,{error:"Invalid offset"}),!0;const i=await E(s,x).catch(()=>null);if(!i)return o(e,413,{error:"Chunk too large"}),!0;const n=await l.append(r,t,i);return n.kind==="missing"?(o(e,404,{error:"Upload not found"}),!0):n.kind==="conflict"?(o(e,409,{received:n.received}),!0):n.kind==="overflow"?(o(e,413,{received:n.received,error:"Exceeds declared size"}),!0):(o(e,200,{received:n.received}),!0)}if(s.method==="DELETE")return await l.abort(r),o(e,200,{ok:!0}),!0}if(d==="/uploads"&&s.method==="POST"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;let r;try{r=z.parse(await c(s))}catch(n){return o(e,400,{error:n instanceof Error?n.message:"Invalid body"}),!0}const t=Buffer.from(r.data,"base64");if(t.length===0)return o(e,400,{error:"Empty upload"}),!0;if(t.length>b(r.mediaType))return o(e,413,{error:"File too large"}),!0;const i=a.uploads.save({name:r.name,mediaType:r.mediaType,bytes:t,dir:r.projectId?g(a,r.projectId,r.mediaType):null});return o(e,201,{upload:f(i)}),!0}const m=d.match(/^\/sessions\/([^/]+)\/uploads$/);if(m&&s.method==="GET"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;const r=a.uploads.uploadsBySession(decodeURIComponent(m[1]));return o(e,200,{uploads:(r??[]).map(t=>({...f(t),createdAt:t.createdAt})),totalBytes:(r??[]).reduce((t,i)=>t+i.size,0)}),!0}if(m&&s.method==="DELETE"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;const r=a.uploads.uploadsBySession(decodeURIComponent(m[1]));if(!r)return o(e,200,{removed:0,freedBytes:0}),!0;const t=r.reduce((n,U)=>n+U.size,0),i=a.uploads.removeMany(r.map(n=>n.id));return a.dataBus?.emit({key:"sessions"}),o(e,200,{removed:i,freedBytes:t}),!0}if(d==="/uploads/unreferenced"&&s.method==="GET")return a.uploads?(o(e,200,a.uploads.unreferencedStats()),!0):(o(e,503,{error:"Upload subsystem unavailable"}),!0);if(d==="/uploads/overview"&&s.method==="GET")return a.uploads?(o(e,200,a.uploads.overview()),!0):(o(e,503,{error:"Upload subsystem unavailable"}),!0);const T=u.object({ids:u.array(u.string().regex(/^[a-f0-9]{64}$/)).min(1).max(500)});if(d==="/uploads/remove"&&s.method==="POST"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;let r;try{r=T.parse(await c(s))}catch(i){return o(e,400,{error:i instanceof Error?i.message:"Invalid body"}),!0}const t=a.uploads.removeMany(r.ids);return a.dataBus?.emit({key:"sessions"}),o(e,200,{removed:t}),!0}if(d==="/uploads/usage"&&s.method==="GET")return a.uploads?(o(e,200,{sessions:a.uploads.usageBySession()}),!0):(o(e,503,{error:"Upload subsystem unavailable"}),!0);if(d==="/uploads/unreferenced"&&s.method==="POST"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;let r={done:0,total:0};const t=a.uploads.cleanupUnreferenced((i,n)=>{r={done:i,total:n}});return a.dataBus?.emit({key:"sessions"}),o(e,200,{removed:t,...r}),!0}const v=d.match(/^\/images\/([a-f0-9]{64})$/);if(v&&s.method==="GET"){if(!a.uploads)return o(e,503,{error:"Upload subsystem unavailable"}),!0;const r=a.uploads.fileStatOf(v[1]);if(!r)return o(e,404,{error:"Image not found"}),!0;e.writeHead(200,{"content-type":r.row.mediaType,"content-length":String(r.size),"cache-control":"private, max-age=31536000, immutable"});const t=w(r.file);return t.on("error",()=>{typeof e.destroy=="function"&&e.destroy()}),t.pipe(e),!0}return!1}

package/node_modules/@weavecode/server/dist/daemon/routes/watches.d.ts

@@ -0,0 +1,7 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from '../server.js';
+/**
+ * 提醒域路由：空闲订阅（one-shot「空闲时提醒我」）+ Web Push（提醒第三条腿）。
+ * 返回 true = 本路由认领；false = 未命中，主链继续。
+ */
+export declare function handleWatchRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/routes/watches.js

@@ -0,0 +1 @@
+import{z as o}from"zod";import{isHarness as I}from"@weavecode/core";import{readJson as m,sendJson as e}from"../http.js";import{messagingSurfaceFor as v}from"../../surfaces.js";import{DEFAULT_WATCH_ON as E}from"../../repositories/session-watches.js";const k=o.object({watcherSessionId:o.string().min(1).nullable().optional(),notify:o.string().min(1).max(2e4).nullable().optional(),on:o.array(o.enum(["idle","turnEnd","messageFailed"])).min(1).optional(),times:o.number().int().min(1).max(100).nullable().optional()}),W=o.object({watchId:o.number().int().positive()}),T=o.object({endpoint:o.string().url(),keys:o.object({p256dh:o.string().min(1),auth:o.string().min(1)})}),B=o.object({endpoint:o.string().url()});function P(i,s){return i.queuedPrompt!==null||i.prompt!==null||s}export async function handleWatchRoutes(i,s,t,d){const f=d.match(/^\/sessions\/([^/]+)\/watch$/);if(f){const n=decodeURIComponent(f[1]);if(i.method==="POST"){if(!t.sessionWatches||!t.hookSessions||!t.hookEvents)return e(s,503,{error:"Messaging subsystem unavailable"}),!0;let r;try{r=k.parse(await m(i))}catch(u){return e(s,400,{error:u instanceof Error?u.message:"Invalid body"}),!0}if(!t.hookSessions.getBySessionId(n))return e(s,404,{error:"Session not found"}),!0;const c=t.hookEvents.listBySession(n,1),a=c[c.length-1]?.source;if(!I(a))return e(s,400,{error:"Session has no hook events to determine its harness"}),!0;const h=v(a),l=r.on??[...E];if((l.includes("idle")||l.includes("turnEnd"))&&h.idleSignals.length===0)return e(s,409,{error:h.unsupportedReasons?.watch??`Harness "${a}" does not support idle watching`}),!0;if(l.includes("messageFailed")&&!(P(h,t.messageDeliverer?.hasTerminalChannel()??!1)||h.inject!==null||h.headless!==null))return e(s,409,{error:h.unsupportedReasons?.prompt??`Harness "${a}" supports no messaging channel`}),!0;if(r.watcherSessionId){if(!t.hookSessions.getBySessionId(r.watcherSessionId))return e(s,404,{error:"Watcher session not found"}),!0;const u=t.hookEvents.listBySession(r.watcherSessionId,1),g=u[u.length-1]?.source;if(!I(g))return e(s,400,{error:"Watcher session has no hook events to determine its harness"}),!0;const w=v(g);if(!w.inject)return e(s,409,{error:w.unsupportedReasons?.inject??`Harness "${g}" cannot receive watch notifications`}),!0}const b=r.times===void 0?1:r.times,y=(r.watcherSessionId??null)===null?t.sessionWatches.listPendingByTarget(n).find(u=>u.watcherSessionId===null):void 0,S=y?t.sessionWatches.updateById(y.id,{onEvents:l,remaining:b}):void 0,p=S??t.sessionWatches.insert({watcherSessionId:r.watcherSessionId??null,targetSessionId:n,notify:r.notify??null,onEvents:l,times:b});return t.watchEngine?.created(p),e(s,S?200:201,{ok:!0,watchId:p.id,watch:p}),!0}if(i.method==="DELETE"){if(!t.sessionWatches)return e(s,503,{error:"Messaging subsystem unavailable"}),!0;let r;try{r=W.parse(await m(i))}catch(a){return e(s,400,{error:a instanceof Error?a.message:"Invalid body"}),!0}const c=t.sessionWatches.getById(r.watchId);return!c||c.targetSessionId!==n||c.firedAt!==null?(e(s,404,{error:"Watch not found"}),!0):(t.sessionWatches.deleteById(r.watchId),e(s,200,{ok:!0,watchId:r.watchId}),!0)}}if(d==="/messaging/watches"&&i.method==="GET")return t.sessionWatches?(e(s,200,{watches:t.sessionWatches.listPending()}),!0):(e(s,503,{error:"Messaging subsystem unavailable"}),!0);if(d==="/messaging/push/key"&&i.method==="GET")return t.pushNotifier?(e(s,200,{publicKey:t.pushNotifier.publicKey()}),!0):(e(s,503,{error:"Push subsystem unavailable"}),!0);if(d==="/messaging/push/subscribe"&&i.method==="POST"){if(!t.pushSubscriptions)return e(s,503,{error:"Push subsystem unavailable"}),!0;try{const n=T.parse(await m(i)),r=t.pushSubscriptions.upsert({endpoint:n.endpoint,p256dh:n.keys.p256dh,auth:n.keys.auth,userAgent:i.headers["user-agent"]??null});e(s,201,{ok:!0,subscription:r})}catch(n){e(s,400,{error:n instanceof Error?n.message:"Invalid body"})}return!0}if(d==="/messaging/push/unsubscribe"&&i.method==="POST"){if(!t.pushSubscriptions)return e(s,503,{error:"Push subsystem unavailable"}),!0;try{const n=B.parse(await m(i));t.pushSubscriptions.deleteByEndpoint(n.endpoint),e(s,200,{ok:!0})}catch(n){e(s,400,{error:n instanceof Error?n.message:"Invalid body"})}return!0}return!1}

package/node_modules/@weavecode/server/dist/daemon/server.d.ts

@@ -6,10 +6,11 @@ import type { LibraryRepository } from '../repositories/libraries.js';
 import type { HookDispatchRepository } from '../repositories/hook-dispatches.js';
 import type { SessionRepository } from '../repositories/sessions.js';
 import type { HookRuleRegistry } from '../hooks/registry.js';
-import { type MirrorWriter } from '../hooks/mirror.js';
+import type { MirrorWriter } from '../hooks/mirror.js';
 import type { HookDispatcher } from '../hooks/dispatcher.js';
 import type { HookEventBus } from '../hooks/bus.js';
 import type { DataBus } from './data-bus.js';
+import { SseHub } from './sse-hub.js';
 import type { TerminalTopologyRefresher } from './terminal-topology-refresher.js';
 import type { InflightCountsRefresher } from './inflight-counts-refresher.js';
 import type { SnapshotRefresher } from './snapshot-refresher.js';
@@ -18,20 +19,22 @@ import type { ProjectUpdatesRefresher } from './project-updates-refresher.js';
 import type { ResumeRunner } from '../hooks/resume-runner.js';
 import type { MessageDeliverer } from '../hooks/message-deliverer.js';
 import type { QuestionTracker } from '../hooks/question-tracker.js';
+import type { SideQuestionDeps } from '../hooks/side-questions.js';
 import type { WatchEngine } from '../hooks/watch-engine.js';
 import type { SessionWatchRepository } from '../repositories/session-watches.js';
 import type { PushSubscriptionRepository } from '../repositories/push-subscriptions.js';
 import type { PushNotifier } from '../hooks/push-notify.js';
-import type { SessionSequenceRepository } from '../repositories/session-sequences.js';
-import type { SequenceEngine } from '../hooks/sequence-engine.js';
+import type { OrchestrationRepository, OrchestrationRunRepository } from '../repositories/orchestrations.js';
+import type { OrchestrationEngine } from '../hooks/orchestration-engine.js';
 import type { PluginManager } from '../hooks/plugin-loader.js';
 import type { PluginStateRepository } from '../repositories/plugin-states.js';
 import type { UploadRepository } from '../repositories/uploads.js';
+import type { UploadSessions } from './upload-sessions.js';
 import type { WatchService } from '../watch/watch-service.js';
 import { FingerprintCache } from '../install/fingerprint.js';
 import { ApiLogger } from './api-log.js';
-import { type ToolkitService } from '../hooks/toolkit.js';
-import { type ProjectOpener } from './opener.js';
+import type { ToolkitService } from '../hooks/toolkit.js';
+import type { ProjectOpener } from './opener.js';
 import type { AuthService } from './dashboard-auth.js';
 export declare const DAEMON_VERSION = "0.1.0";
 export interface WeaveServerDeps {
@@ -54,7 +57,7 @@ export interface WeaveServerDeps {
     libraries?: LibraryRepository;
     /** Content-fingerprint cache for update detection; created if absent. */
     fingerprintCache?: FingerprintCache;
-    /** 接口日志（出入参 + 耗时按小时 JSONL；GET /api-logs 查询）；缺省 <dataDir>/logs/api。 */
+    /** 接口日志（出入参 + 耗时按小时 JSONL；GET /api-logs 查询）；缺省 `<cache>/logs/api`。 */
     apiLog?: ApiLogger;
     /** Directory of the built SPA to statically host; optional. */
     staticDir?: string;
@@ -72,6 +75,12 @@ export interface WeaveServerDeps {
     hookBus?: HookEventBus;
     /** 数据变更帧总线（SSE 第三订阅源：载荷推送 / 失效键）。 */
     dataBus?: DataBus;
+    /** 事件流中枢（编号 + 环形缓冲 + 扇出）：weaveRequestHandler 建一份，两监听共享。 */
+    sseHub?: SseHub;
+    /** SSE 首连回调（仪表盘在连接时流式补发历史）。 */
+    onAttach?: () => void;
+    /** POST /dashboard/refresh：仪表盘挂载时让服务端重推一次快照（数据仍走 SSE）。 */
+    dashboardRefresh?: () => void;
     /** 终端世界（角标计数 + 会话所在屏幕）的后端隐藏刷新器；缺省则该角标只能靠前端自拉（兼容旧装配）。 */
     terminalRefresher?: TerminalTopologyRefresher;
     /** 会话中断态快照刷新器（ESC 打断后多数连 Stop 都不发）：中断成功后即时补一拍。 */
@@ -90,10 +99,15 @@ export interface WeaveServerDeps {
     hookRunner?: ResumeRunner;
     /** 消息域投递器（消息域重塑：纯管道裁决 + prompt 三层）；/sessions/:id/messages 依赖它。 */
     messageDeliverer?: MessageDeliverer;
-    /** 会话图片上传件（内容寻址落盘 + event_images 指针）；/uploads 与 /images/:id 依赖它。 */
+    /** 会话上传件（内容寻址落盘 + event_images 指针）；/uploads 与 /images/:id 依赖它。 */
     uploads?: UploadRepository;
+    /** 分块上传的半截件（cache/tmp）；/uploads/begin 等依赖它（缺省用进程内默认落点）。 */
+    uploadSessions?: UploadSessions;
     /** 阻塞问答跟踪器（AskUserQuestion / 计划与权限确认）；/messaging/questions 与 /sessions/:id/answer 依赖它。 */
     questionTracker?: QuestionTracker;
+    /** 旁路会话历史（claude = /btw）：问句只有 weave 自己发过才知道，故得自己记；
+     *  `/sessions/:id/side-question(s)` 与删会话级联依赖它。 */
+    sideQuestions?: SideQuestionDeps;
     /** 空闲订阅存储（批 2）；POST/DELETE /sessions/:id/watch 与 GET /messaging/watches 依赖它。 */
     sessionWatches?: SessionWatchRepository;
     /** Web Push 订阅存储；POST /messaging/push/(un)subscribe 依赖它。 */
@@ -102,10 +116,12 @@ export interface WeaveServerDeps {
     pushNotifier?: Pick<PushNotifier, 'publicKey'>;
     /** 空闲订阅引擎（批 2）；创建即空闲段的 fire 依赖它。 */
     watchEngine?: Pick<WatchEngine, 'created'>;
-    /** 跨会话序列存储（批 3）；/messaging/sequences 依赖它。 */
-    sessionSequences?: SessionSequenceRepository;
-    /** 序列引擎（批 3）；POST 触发步 0 与 DELETE 取消依赖它。 */
-    sequenceEngine?: Pick<SequenceEngine, 'trigger' | 'cancel'>;
+    /** 跨会话编排定义存储；/messaging/orchestrations 依赖它。 */
+    orchestrations?: OrchestrationRepository;
+    /** 编排运行日志（统一视图 + 保留清理）；/messaging/orchestration-runs 依赖它。 */
+    orchestrationRuns?: OrchestrationRunRepository;
+    /** 编排引擎；触发 / 取消 / webhook 入口依赖它。 */
+    orchestrationEngine?: Pick<OrchestrationEngine, 'start' | 'cancel'>;
     /** 插件管理面；GET /hooks/plugins 与 toggle 依赖它（loader 异步就绪前返回空表）。 */
     hookPlugins?: PluginManager;
     /** D3 插件全局开关行；GET /hooks/plugins?projectId= 的 effective 回落源。 */
@@ -120,8 +136,10 @@ export interface WeaveServerDeps {
     pluginSurface?: PluginSurface;
     /** dashboard 平面认证（见 auth.ts）。缺省不装 = 开放（存量测试口径），生产由 start/dev-entry 装配。 */
     auth?: AuthService;
-    /** AI key 文件路径（测试注入）；缺省 `<dataDir>/ai.json`（见 daemon/ai-config.ts）。 */
+    /** AI key 文件路径（测试注入）；缺省 `<local>/ai.json`（见 daemon/ai-config.ts）。 */
     aiKeyPath?: string;
+    /** Decision-model key file override (tests); default `<local>/decision.json`. */
+    decisionKeyPath?: string;
 }
 /**
  * 请求 handler 工厂（http 与 https 两个监听共享同一份，含 fingerprint 缓存）。

package/node_modules/@weavecode/server/dist/daemon/server.js

@@ -1,11 +1,13 @@
-import dt from"node:http";import{WEAVE_VERSION as pt}from"../version.js";import{checkHarness as gt,isHarness as M}from"@weavecode/core";import j from"node:fs";import S from"node:path";import{hooksRoot as yt}from"../hooks/mirror.js";import{syncPlugins as bt}from"../hooks/plugin-project-state.js";import{getLibraryScan as rt,invalidateScan as k}from"../install/scan-cache.js";import{installSkill as wt,uninstallSkill as kt,installMcp as jt,uninstallMcp as St,installFileAsset as vt,uninstallFileAsset as Pt,InstallConflictError as at,AssetNotFoundError as B}from"../install/installer.js";import{isFileAssetCategory as it}from"../install/file-assets.js";import{installCapabilities as It}from"../install/capabilities.js";import{readMcpRows as Nt}from"../install/mcp-rows.js";import{writeGlobalMcpServer as Et,removeGlobalMcpServer as Tt,installGlobalSkill as Ot,uninstallGlobalSkill as Mt,readGlobalSkillGroups as Bt,resolveGlobalSkillDir as ot,listGlobalSkillFiles as Ct,readGlobalSkillFile as Gt,ClaudeJsonCorruptError as Jt}from"../install/global-config.js";import{writeCodexMcpServer as At,removeCodexMcpServer as Dt,codexMcpExists as $t,CodexTomlCorruptError as Ft}from"../install/codex-toml.js";import{setMcpEnableOverride as xt}from"../install/settings-mcp.js";import{readProjectConfig as nt,writeProjectConfig as Lt}from"../install/project-config.js";import{applyUpdate as Rt,syncAll as Ut}from"../install/apply-update.js";import{buildLibraryIndex as Ht}from"../install/library-index.js";import{importFromDir as Kt,importFromGit as Wt,importLibraryIntoMarket as zt}from"../market/import.js";import{marketDir as C,readManifest as _t}from"../market/manifest.js";import{marketIdOf as Vt}from"../market/identity.js";import{isInsideDir as G,toRelPosix as Qt}from"../market/resolve.js";import{checkMarketUpdates as Xt}from"../market/updates.js";import{refreshMarketItems as Yt}from"../market/refresh.js";import{ensureBuiltinMarket as Zt,isBuiltinMarketDir as I}from"../market/builtin.js";import{removeInstalled as qt}from"../market/install-link.js";import{readProjectFile as te,readGlobalFile as ee,PathEscapeError as re,FileTooLargeError as ae}from"../install/reader.js";import{listGlobalFileAssets as ie}from"../install/global-file-assets.js";import{readStatuslineConfig as st,readStatuslineScript as oe,applyStatuslineConfig as ct,readGlobalStatuslineConfig as lt,writeGlobalStatuslineConfig as ne}from"../statusline/manager.js";import{DEFAULT_STATUSLINE_CONFIG as se}from"../statusline/config.js";import{FingerprintCache as J}from"../install/fingerprint.js";import{detectUpdates as ce}from"../install/updates.js";import{detectPluginTemplateUpdates as le}from"../install/plugin-templates.js";import{detectInitFileUpdates as ue,needsInit as me}from"../install/init-files.js";import{readBody as d,sendJson as i}from"./http.js";import{ApiLogger as fe}from"./api-log.js";import{handleHooksRoutes as he}from"./hooks-routes.js";import{handleToolkitRoutes as de}from"./toolkit-routes.js";import{handleCaptureRoutes as pe}from"./capture-routes.js";import{purgeProjectPipeline as ge}from"./hook-pipeline.js";import{projectFileNamespaces as ye}from"../hooks/toolkit.js";import{listBrowseRoots as be,listDirectoryChildren as we}from"./fs-browser.js";import{DEFAULT_AI_SETTINGS as ke,readDaemonSettings as v,writeDaemonSettings as je,terminalPresetsFor as Se}from"./settings.js";import{closeTerminalsIn as ve,defaultProjectOpener as P,readTerminalCounts as Pe,terminalBackendFor as Ie}from"./opener.js";import{applyLaunchOnLogin as Ne}from"./auto-start.js";import{DAEMON_HOST as Ee}from"./port.js";import{pluginStateSurfaces as Te,pluginSurfaces as ut,pluginSurfaceFor as mt}from"../surfaces.js";import{readPluginRows as Oe}from"../install/plugin-rows.js";import{installPluginPack as Me}from"../install/plugin-install.js";import{handleAuthRoutes as Be}from"./auth-routes.js";import{handleAiRoutes as Ce}from"./ai-routes.js";import{hasAiKey as Ge,writeAiKey as Je}from"./ai-config.js";import{accessUrls as Ae}from"./tls.js";import{projectHarnesses as De,withProjectHarnesses as ft}from"./project-harnesses.js";export const DAEMON_VERSION=pt;export function weaveRequestHandler(o){const t=o.fingerprintCache??new J,r=o.apiLog??new fe,u={...o,fingerprintCache:t,apiLog:r};return(s,g)=>{r.begin(s,g),$e(s,g,u)}}export function createWeaveServer(o){return dt.createServer(weaveRequestHandler(o))}async function $e(o,t,r){const u=new URL(o.url??"/",`http://${Ee}`);let s=u.pathname;if(s.startsWith("/api/")?s=s.slice(4):s==="/api"&&(s="/"),s==="/health"&&o.method==="GET"){i(t,200,{service:"weave-daemon",version:DAEMON_VERSION,pid:process.pid,port:r.port,uptimeMs:Math.round(process.uptime()*1e3)});return}if(await Be(o,t,r,s)||await Ce(o,t,r,s))return;if(r.auth&&!xe(o,s,r)&&!r.auth.isAuthenticated(o.headers)){i(t,401,{error:"Unauthorized"});return}if(s==="/api-logs"&&o.method==="GET"){if(!r.apiLog){i(t,503,{error:"API log unavailable"});return}const a=u.searchParams.get("status"),e=u.searchParams.get("limit"),n=await r.apiLog.query({from:u.searchParams.get("from")??void 0,to:u.searchParams.get("to")??void 0,path:u.searchParams.get("path")??void 0,method:u.searchParams.get("method")??void 0,status:a==null?void 0:Number(a),limit:e==null?void 0:Number(e)});i(t,200,n);return}if(await he(o,t,r,s,u)||await de(o,t,r,s,u)||await pe(o,t,r,s))return;const g=s.match(/^\/projects\/(\d+)\/hooks$/);if(g&&o.method==="GET"){if(!r.hookEvents){i(t,503,{error:"Hook ingestion unavailable"});return}const a=Number(g[1]),e=Ke(u.searchParams.get("limit")),n=u.searchParams.get("sessionId"),c=u.searchParams.get("beforeId"),l=c?Number(c):void 0,m=(u.searchParams.get("types")??"").split(",").map(p=>p.trim()).filter(Boolean);if(n){const p=r.hookEvents.listBySession(n,e??300,l,m),h=r.uploads?.imagesBySession(n);i(t,200,{events:p.map(f=>{const N=h?.get(f.id);return N?.length?{...f,images:N.map(O=>({id:O.id,name:O.name,mediaType:O.mediaType}))}:f})});return}i(t,200,{events:r.hookEvents.listByProject(a,e)});return}if(s==="/settings"){if(o.method==="GET"){i(t,200,{settings:ht(await v(),r.aiKeyPath),presets:Se(process.platform),platform:process.platform,urls:Ae(r.port,r.tlsPort??0)});return}if(o.method==="PUT"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}const e=a.ai?.apiKey;e!==void 0&&Je(typeof e=="string"?e:null,r.aiKeyPath);const n=await je({...a,ai:Ue(a.ai)});r.hookEvents?.resetPrune(),(r.autoStart??Ne)(n.startup?.launchOnLogin??!1),r.dataBus?.emit({key:"settings"}),i(t,200,ht(n,r.aiKeyPath));return}}const b=s.match(/^\/projects\/(\d+)\/open$/);if(b&&o.method==="POST"){const a=r.projects.getById(Number(b[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(e.target!=="explorer"&&e.target!=="terminal"){i(t,400,{error:'Invalid "target" (explorer|terminal)'});return}const n=r.opener??P;try{if(!(await j.promises.stat(a.path)).isDirectory())throw new Error(`Not a directory: ${a.path}`);if(e.target==="explorer")await n.openExplorer(a.path);else{const l=await v();await n.openTerminal(a.path,l.terminal),setTimeout(()=>{r.terminalRefresher?.refreshNow()},600)}i(t,200,{ok:!0,target:e.target,path:a.path})}catch(c){i(t,400,{error:c instanceof Error?c.message:"Open failed"})}return}const y=s.match(/^\/projects\/(\d+)\/close-terminal$/);if(y&&o.method==="POST"){const a=r.projects.getById(Number(y[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o)||"{}")}catch{i(t,400,{error:"Invalid JSON body"});return}if(!Array.isArray(e.paneIds)||e.paneIds.length===0||e.paneIds.some(l=>typeof l!="string")){i(t,400,{error:"paneIds must be a non-empty array of strings"});return}const n=r.opener??P,c=await v();try{const m=await(n.closeTerminals??ve)(a.path,c.terminal,e.paneIds);setTimeout(()=>{r.terminalRefresher?.refreshNow()},600),i(t,200,{ok:!0,closed:m})}catch(l){i(t,400,{error:l instanceof Error?l.message:"Close failed"})}return}const w=s.match(/^\/projects\/(\d+)\/new-session$/);if(w&&o.method==="POST"){const a=r.projects.getById(Number(w[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o)||"{}")}catch{i(t,400,{error:"Invalid JSON body"});return}const n=await De(a.path,r.harnesses);if(e.harness!==void 0&&!M(e.harness)){i(t,400,{error:'Invalid "harness"'});return}const c=e.harness;if(c&&!n.some(f=>f.id===c)){i(t,409,{error:`Harness "${c}" is not integrated in this project`});return}const l=c?[c]:n.map(f=>f.id),m=l.map(f=>({id:f,spec:r.harnesses?.get(f)?.resume})).find(f=>f.spec?.bin);if(!m){i(t,501,{error:`Harness "${l[0]}" cannot start an interactive session`});return}const p=m.spec,h=r.opener??P;try{if(!(await j.promises.stat(a.path)).isDirectory())throw new Error(`Not a directory: ${a.path}`);const N=await v();await h.runInTerminal(a.path,[p.bin],N.terminal),setTimeout(()=>{r.terminalRefresher?.refreshNow()},600),i(t,200,{ok:!0,command:p.bin,cwd:a.path})}catch(f){i(t,400,{error:f instanceof Error?f.message:"Open failed"})}return}if(s==="/fs/roots"&&o.method==="GET"){const a=r.libraries?r.libraries.list().map(n=>n.path):[],e=await be(a);i(t,200,{roots:e});return}if(s==="/fs/children"&&o.method==="GET"){const a=u.searchParams.get("path");if(!a){i(t,400,{error:'Missing "path" query parameter'});return}try{const e=await we(a);i(t,200,{children:e})}catch(e){i(t,400,{error:`Cannot list directory: ${String(e)}`})}return}if(s==="/capabilities"&&o.method==="GET"){i(t,200,It());return}if(s==="/libraries"&&o.method==="GET"){i(t,200,{libraries:r.libraries?r.libraries.list():[]});return}if(s==="/libraries"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!a.path||!a.kind){i(t,400,{error:'Missing "path" or "kind"'});return}if(!["skill","mcp","both"].includes(a.kind)){i(t,400,{error:'Invalid "kind" (skill|mcp|both)'});return}const e=r.libraries.add({path:a.path,kind:a.kind});r.dataBus?.emit({key:"libraries"}),i(t,201,e);return}const D=s.match(/^\/libraries\/(\d+)\/assets$/);if(D&&o.method==="GET"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=r.libraries.getById(Number(D[1]));if(!a){i(t,404,{error:"Library not found"});return}const{plugins:e,skills:n,mcp:c,files:l}=await rt(a.path),m=a.kind==="skill"||a.kind==="both"?e:[],p=a.kind==="mcp"||a.kind==="both"?c:[],h=a.kind==="skill"||a.kind==="both"?Object.values(l).flat():null;i(t,200,{library:a,skills:n,mcp:p,files:h,plugins:m});return}const $=s.match(/^\/libraries\/(\d+)$/);if($&&o.method==="DELETE"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=Number($[1]),e=r.libraries.getById(a);e&&await k(e.path),r.libraries.remove(a),r.dataBus?.emit({key:"libraries"}),r.dataBus?.emit({key:"market"}),i(t,200,{ok:!0});return}if(s==="/market"&&o.method==="GET"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=await Promise.all(r.libraries.list().map(e=>T(e,r.libraries.dataDir)));i(t,200,{items:a});return}if(s==="/market"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}const e={libraries:r.libraries,dataDir:r.libraries.dataDir};try{if(a.kind==="dir"&&a.path){const n=await Kt(a.path,e);n.refreshed&&r.fingerprintCache?.invalidate(n.dir),await k(n.dir),r.dataBus?.emit({key:"market"}),i(t,201,{item:await T(r.libraries.getById(n.libraryId),r.libraries.dataDir)})}else if(a.kind==="git"&&a.url){const n=await Wt(a.url,e);n.refreshed&&r.fingerprintCache?.invalidate(n.dir),await k(n.dir),r.dataBus?.emit({key:"market"}),i(t,201,{item:await T(r.libraries.getById(n.libraryId),r.libraries.dataDir)})}else i(t,400,{error:'Invalid body (kind: "dir" + path | "git" + url)'})}catch(n){i(t,400,{error:n instanceof Error?n.message:"Import failed"})}return}if(s==="/market/check-updates"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a={};const e=(await d(o)).trim();if(e)try{a=JSON.parse(e)}catch{i(t,400,{error:"Invalid JSON body"});return}const n=r.libraries.list().filter(l=>!I(l.path,r.libraries.dataDir)).filter(l=>!a.ids?.length||a.ids.includes(l.id));for(const l of n)await k(l.path);const c=await Xt(n.map(l=>({id:l.id,dir:l.path})));r.dataBus?.emit({key:"market"}),i(t,200,{results:c});return}if(s==="/market/refresh"&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let a={};const e=(await d(o)).trim();if(e)try{a=JSON.parse(e)}catch{i(t,400,{error:"Invalid JSON body"});return}const n=r.libraries.list().filter(h=>!a.ids?.length||a.ids.includes(h.id)),c=[];for(const h of n.filter(f=>I(f.path,r.libraries.dataDir))){const f=await Zt({libraries:r.libraries});c.push({id:h.id,status:f.error?"failed":"refreshed"})}const l=n.filter(h=>!I(h.path,r.libraries.dataDir)).map(h=>({id:h.id,dir:h.path})),m=[...await Yt(l,{libraries:r.libraries,dataDir:r.libraries.dataDir}),...c],p=new Map(l.map(h=>[h.id,h.dir]));for(const h of m)if(h.status==="refreshed"){const f=p.get(h.id);f&&(r.fingerprintCache?.invalidate(f),await k(f))}r.dataBus?.emit({key:"market"}),i(t,200,{results:m});return}const F=s.match(/^\/market\/(\d+)$/);if(F&&o.method==="DELETE"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=r.libraries.getById(Number(F[1]));if(!a){i(t,404,{error:"Library not found"});return}if(I(a.path,r.libraries.dataDir)){i(t,409,{error:"Built-in market is owned by weave and cannot be deleted",note:"It is re-materialized from @weavecode/templates on every daemon start."});return}if(!G(a.path,C(r.libraries.dataDir))){i(t,400,{error:"Not a market resource (legacy row \u2014 use DELETE /libraries/:id)"});return}let e;try{await(r.pluginSurface??mt("claude")).removeMarketplace(a.path)}catch(n){e=`Host marketplace deregistration failed: ${n instanceof Error?n.message:String(n)}`}await qt(a.path),r.libraries.remove(a.id),await k(a.path),r.dataBus?.emit({key:"market"}),r.dataBus?.emit({key:"libraries"}),i(t,200,{ok:!0,removed:a.path,installedCopiesKept:!0,...e?{warning:e}:{},note:"The host cascade-uninstalls plugins installed from this market; other installed copies are kept."});return}const x=s.match(/^\/libraries\/(\d+)\/market-import$/);if(x&&o.method==="POST"){if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}const a=r.libraries.getById(Number(x[1]));if(!a){i(t,404,{error:"Library not found"});return}try{const e=a.path,n=await zt(a,{libraries:r.libraries,dataDir:r.libraries.dataDir});await k(e),await k(n.dir),i(t,200,{item:await T(r.libraries.getById(n.libraryId),r.libraries.dataDir)})}catch(e){i(t,400,{error:e instanceof Error?e.message:"Import failed"})}return}const L=s.match(/^\/projects\/(\d+)\/install$/);if(L&&o.method==="POST"){const a=r.projects.getById(Number(L[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{if(e.category==="skill"){if(!e.name||!e.sourceDir){i(t,400,{error:'Missing "name" or "sourceDir"'});return}const n=e.agent??"claude",c=e.scope==="user"?await Ot(e.sourceDir,e.name,n):await wt(a.path,e.sourceDir,e.name,n);i(t,201,{category:"skill",name:e.name,scope:e.scope??"project",agent:n,path:c})}else if(e.category&&it(e.category)){if(!e.name||!e.sourceFile){i(t,400,{error:'Missing "name" or "sourceFile"'});return}const n=e.agent??"claude",c=e.scope??"project",l=await vt(a.path,e.category,e.name,e.sourceFile,n,c);i(t,201,{category:e.category,name:e.name,scope:c,agent:n,path:l})}else if(e.category==="mcp"){if(!e.name||!e.mcpConfig){i(t,400,{error:'Missing "name" or "mcpConfig"'});return}if(e.agent==="codex"){if(e.scope==="project"){i(t,400,{error:'Codex MCP servers are user-level (~/.codex/config.toml) \u2014 use scope "user"'});return}if(await $t(e.name)){E(t,new at(`MCP server "${e.name}" is already configured in ~/.codex/config.toml`));return}await At(e.name,e.mcpConfig)}else e.scope==="user"?await Et(e.name,e.mcpConfig):await jt(a.path,e.name,e.mcpConfig);i(t,201,{category:"mcp",name:e.name,scope:e.agent==="codex"?"user":e.scope??"project",agent:e.agent??"claude"})}else if(e.category==="plugin"){if(!e.name||!e.sourceDir){i(t,400,{error:'Missing "name" or "sourceDir"'});return}if(e.scope&&e.scope!=="user"){i(t,400,{error:'Plugin install currently only supports scope "user"'});return}const n=e.agent??"claude",c=ut().find(p=>p.harness===n);if(!c){i(t,400,{error:`No plugin install surface for runtime: ${n}`});return}const l=n==="claude"&&r.pluginSurface?r.pluginSurface:c.surface,m=await Me(l,{dir:e.sourceDir,name:e.name,version:e.version,description:e.description});r.dataBus?.emit({key:"toolkit"}),i(t,201,{category:"plugin",key:m.key,scope:"user",agent:n,alreadyInstalled:m.alreadyInstalled})}else i(t,400,{error:'Invalid "category" (skill|mcp|plugin|command|agent|workflow|rule|output-style)'})}catch(n){E(t,n)}return}const R=s.match(/^\/projects\/(\d+)\/uninstall$/);if(R&&o.method==="POST"){const a=r.projects.getById(Number(R[1]));if(!a){i(t,404,{error:"Project not found"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{if(e.category==="skill"){if(!e.name){i(t,400,{error:'Missing "name"'});return}const n=e.agent??"claude";e.scope==="user"?await Mt(e.name,n):await kt(a.path,e.name,n)}else if(e.category&&it(e.category)){if(!e.name){i(t,400,{error:'Missing "name"'});return}await Pt(a.path,e.category,e.name,e.agent??"claude",e.scope??"project")}else if(e.category==="mcp"){if(!e.name){i(t,400,{error:'Missing "name"'});return}if(e.agent==="codex"){if(!await Dt(e.name)){E(t,new B(`MCP server "${e.name}" is not configured in ~/.codex/config.toml`));return}}else e.scope==="user"?await Tt(e.name):await St(a.path,e.name)}else{i(t,400,{error:'Invalid "category" (skill|mcp|command|agent|workflow|rule|output-style)'});return}i(t,200,{ok:!0})}catch(n){E(t,n)}return}const U=s.match(/^\/projects\/(\d+)\/file$/);if(U&&o.method==="GET"){const a=r.projects.getById(Number(U[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=u.searchParams.get("path");if(!e){i(t,400,{error:'Missing "path" query parameter'});return}try{const n=await te(a.path,e);i(t,200,{path:e,content:n.content,size:n.size})}catch(n){A(t,n)}return}if(s==="/global-file"&&o.method==="GET"){const a=u.searchParams.get("path");if(!a){i(t,400,{error:'Missing "path" query parameter'});return}try{const e=await ee(a);i(t,200,{path:a,content:e.content,size:e.size})}catch(e){A(t,e)}return}const H=s.match(/^\/projects\/(\d+)\/mcp$/);if(H&&o.method==="GET"){const a=r.projects.getById(Number(H[1]));if(!a){i(t,404,{error:"Project not found"});return}i(t,200,{rows:await Nt(a.path)});return}const K=s.match(/^\/projects\/(\d+)\/harness-checks$/);if(K&&o.method==="GET"){const a=r.projects.getById(Number(K[1]));if(!a){i(t,404,{error:"Project not found"});return}i(t,200,{checks:await gt(a.path)});return}if(s.match(/^\/projects\/(\d+)\/skills\/global$/)&&o.method==="GET"){i(t,200,{groups:await Bt()});return}if(s.match(/^\/projects\/(\d+)\/skills\/global\/files$/)&&o.method==="GET"){const a=u.searchParams.get("source"),e=u.searchParams.get("name"),n=u.searchParams.get("pluginKey")??void 0;if(!a||!e){i(t,400,{error:'Missing "source" or "name" query parameter'});return}const c=await ot(a,e,n);if(!c){i(t,404,{error:"Skill not found"});return}i(t,200,{files:await Ct(c)});return}if(s.match(/^\/projects\/(\d+)\/skills\/global\/file$/)&&o.method==="GET"){const a=u.searchParams.get("source"),e=u.searchParams.get("name"),n=u.searchParams.get("pluginKey")??void 0,c=u.searchParams.get("path");if(!a||!e||!c){i(t,400,{error:'Missing "source", "name" or "path" query parameter'});return}const l=await ot(a,e,n);if(!l){i(t,404,{error:"Skill not found"});return}try{const m=await Gt(l,c);i(t,200,{path:c,content:m.content,size:m.size})}catch(m){A(t,m)}return}const W=s.match(/^\/projects\/(\d+)\/plugins\/state$/);if(W){const a=r.projects.getById(Number(W[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="GET"){i(t,200,{rows:await Oe(a.path)});return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!M(e.runtime)||!e.key||!e.scope||!["user","project","local"].includes(e.scope)||!e.state||!["on","off","inherit"].includes(e.state)){i(t,400,{error:'Missing or invalid "runtime"/"key"/"scope" (user|project|local)/"state" (on|off|inherit)'});return}const n=e.scope,c=e.state;try{const l=ut().find(m=>m.harness===e.runtime);if(l)await(e.runtime==="claude"&&r.pluginSurface?r.pluginSurface:l.surface).setEnabledOverride(a.path,n,e.key,c);else{const m=Te().find(p=>p.harness===e.runtime);if(!m||n!=="user"||c==="inherit"){i(t,400,{error:"This runtime only supports user-scope on/off overrides"});return}await m.state.writeGlobalEnabled(e.key,c==="on")}r.dataBus?.emit({key:"toolkit"}),i(t,200,{ok:!0})}catch(l){i(t,400,{error:l instanceof Error?l.message:"Plugin state write failed"})}return}}if(s.match(/^\/projects\/(\d+)\/plugins\/uninstall$/)&&o.method==="POST"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!M(a.runtime)||!a.key){i(t,400,{error:'Missing or invalid "runtime"/"key"'});return}try{const e=a.runtime==="claude"&&r.pluginSurface?r.pluginSurface:mt(a.runtime),{name:n,market:c}=e.parsePluginKey(a.key);await e.uninstall(n,c),i(t,200,{ok:!0})}catch(e){i(t,400,{error:e instanceof Error?e.message:"Plugin uninstall failed"})}return}const z=s.match(/^\/projects\/(\d+)\/mcp\/enable$/);if(z){const a=r.projects.getById(Number(z[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!e.name||!e.state){i(t,400,{error:'Missing "name" or "state"'});return}if(!["on","off","inherit"].includes(e.state)){i(t,400,{error:'Invalid "state" (on|off|inherit)'});return}await xt(a.path,e.name,e.state),i(t,200,{ok:!0});return}}const _=s.match(/^\/projects\/(\d+)\/updates$/);if(_&&o.method==="GET"){const a=r.projects.getById(Number(_[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=r.fingerprintCache??new J;if(!r.libraries){const c=await le(a.path,e),l=await ue(a.path);i(t,200,{skills:[],mcp:[],files:[],pluginTemplates:c,initFiles:l,available:c.filter(m=>m.outdated).length+l.filter(m=>m.outdated&&m.syncClass==="auto").length,needsInit:me(l)});return}const n=await ce(a.path,r.libraries.list(),e);i(t,200,n);return}const V=s.match(/^\/projects\/(\d+)\/update$/);if(V&&o.method==="POST"){const a=r.projects.getById(Number(V[1]));if(!a){i(t,404,{error:"Project not found"});return}if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!e.category||!e.name||!e.scope){i(t,400,{error:'Missing "category", "name", or "scope"'});return}if(!["skill","mcp","command","agent","workflow","rule","output-style"].includes(e.category)){i(t,400,{error:'Invalid "category"'});return}try{const c=await Ht(r.libraries.list());await Rt(a.path,{category:e.category,name:e.name,scope:e.scope,agent:e.agent},c),i(t,200,{ok:!0,category:e.category,name:e.name,scope:e.scope})}catch(c){i(t,400,{error:c instanceof Error?c.message:"Update failed"})}return}const Q=s.match(/^\/projects\/(\d+)\/sync-all$/);if(Q&&o.method==="POST"){const a=r.projects.getById(Number(Q[1]));if(!a){i(t,404,{error:"Project not found"});return}if(!r.libraries){i(t,503,{error:"Libraries unavailable"});return}try{const e=r.fingerprintCache??new J,n=await Ut(a.path,r.libraries.list(),e);let c=n;try{const l=r.hookPlugins?.list().map(p=>p.id)??[],m=bt(a,l,{projects:r.projects});c={...n,pluginSync:{syncedAt:m}}}catch{}i(t,200,c),r.updatesRefresher?.refreshNow(!0)}catch(e){i(t,400,{error:e instanceof Error?e.message:"Sync failed"})}return}const X=s.match(/^\/projects\/(\d+)\/config$/);if(X){const a=r.projects.getById(Number(X[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="GET"){i(t,200,await nt(a.path));return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}const n=await nt(a.path),c={lastSyncAt:e.lastSyncAt??n.lastSyncAt};await Lt(a.path,c),i(t,200,c);return}}if(s==="/statusline/global"){if(o.method==="GET"){i(t,200,{config:await lt()});return}if(o.method==="PUT"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{await ne(a);for(const e of r.projects.list()){const n=await st(e.path);n.source==="global"&&await ct(e.path,n)}r.dataBus?.emit({key:"statusline"}),i(t,200,{ok:!0})}catch(e){i(t,400,{error:e instanceof Error?e.message:"Global statusline update failed"})}return}}if(s==="/statusline/default"&&o.method==="GET"){i(t,200,{config:se});return}const Y=s.match(/^\/projects\/(\d+)\/statusline$/);if(Y){const a=r.projects.getById(Number(Y[1]));if(!a){i(t,404,{error:"Project not found"});return}if(o.method==="GET"){const[e,n,c]=await Promise.all([st(a.path),oe(a.path),lt()]);i(t,200,{config:e,script:n,globalConfig:c});return}if(o.method==="PUT"){let e;try{e=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}try{await ct(a.path,e),r.dataBus?.emit({key:"statusline",projectPath:a.path}),i(t,200,{ok:!0})}catch(n){i(t,400,{error:n instanceof Error?n.message:"Statusline update failed"})}return}}if(s==="/events"&&o.method==="GET"){Fe(o,t,r);return}if(s==="/assets"&&o.method==="GET"){const a=u.searchParams.get("path");if(!a){i(t,400,{error:'Missing "path" query parameter'});return}if(!r.watch){i(t,503,{error:"Watch service unavailable"});return}const e=await ye(a),n=r.watch.getAssets(a).map(c=>{const l=e.get(c.relPath);return l?{...c,namespace:l}:c});i(t,200,{projectPath:a,assets:n});return}if(s==="/global-file-assets"&&o.method==="GET"){i(t,200,{assets:await ie()});return}if(s==="/projects"&&o.method==="GET"){i(t,200,{projects:await ft(r.projects.list(),r.harnesses)});return}if(s==="/projects/archived"&&o.method==="GET"){i(t,200,{projects:await ft(r.projects.listArchived(),r.harnesses)});return}const Z=s.match(/^\/projects\/(\d+)\/archive$/);if(Z&&o.method==="POST"){const a=r.projects.getById(Number(Z[1]));if(!a){i(t,404,{error:"Project not found"});return}if(a.archivedAt){i(t,200,{project:a,purged:{events:0,dispatches:0,sessions:0,messages:0}});return}const e=r.hookDispatches?.deleteByProject(a.id)??0,n=r.hookEvents?.deleteByProject(a.id)??0;r.uploads?.pruneUnreferenced();const c=r.messageDeliverer?.forgetProject(a.id)??0;r.sessionWatches?.deleteByProject(a.id),r.sessionSequences?.deleteByProject(a.id);const l=r.hookSessions?.removeByProject(a.id)??0;r.projects.setArchived(a.id,!0),ge(r.hooksDir??yt(),a.token),r.watch?.reconcile(),r.dataBus?.emit({key:"projects"}),i(t,200,{project:r.projects.getById(a.id),purged:{events:n,dispatches:e,sessions:l,messages:c}});return}const q=s.match(/^\/projects\/(\d+)\/restore$/);if(q&&o.method==="POST"){const a=r.projects.getById(Number(q[1]));if(!a){i(t,404,{error:"Project not found"});return}if(!a.archivedAt){i(t,200,{project:a});return}r.projects.setArchived(a.id,!1),r.hookMirror?.syncProject(a.id),r.watch?.reconcile(),r.dataBus?.emit({key:"projects"}),i(t,200,{project:r.projects.getById(a.id)});return}if(s==="/projects/order"&&o.method==="PUT"){let a;try{a=JSON.parse(await d(o))}catch{i(t,400,{error:"Invalid JSON body"});return}if(!Array.isArray(a.ids)||!a.ids.every(e=>Number.isInteger(e))){i(t,400,{error:'Invalid "ids" (integer array expected)'});return}r.projects.setOrder(a.ids),r.dataBus?.emit({key:"projects"}),i(t,200,{projects:r.projects.list()});return}const tt=s.match(/^\/projects\/(\d+)\/panes$/);if(tt&&o.method==="GET"){const a=r.projects.getById(Number(tt[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=await v(),n=r.opener?.listPanes??P.listPanes;try{i(t,200,{projectId:a.id,panes:await n(a.path,e.terminal)})}catch(c){i(t,409,{error:c instanceof Error?c.message:"Cannot list panes"})}return}const et=s.match(/^\/projects\/(\d+)\/terminals$/);if(et&&o.method==="GET"){const a=r.projects.getById(Number(et[1]));if(!a){i(t,404,{error:"Project not found"});return}const e=await v(),n=r.opener?.listTerminals??P.listTerminals,c=Ie(e.terminal).enumerable?await n(a.path,e.terminal):[];i(t,200,{projectId:a.id,terminals:c});return}if(s==="/terminals/counts"&&o.method==="GET"){if(r.terminalRefresher)i(t,200,{counts:r.terminalRefresher.lastSnapshot?.counts??{}}),r.terminalRefresher.tick(!0);else{const a=r.opener??P;i(t,200,{counts:await Pe(r.projects.list(),a)})}return}if(o.method==="GET"&&r.staticDir){Re(t,s,r.staticDir);return}i(t,404,{error:"Not found"})}function Fe(o,t,r){if(!r.watch&&!r.hookBus&&!r.dataBus){t.statusCode=503,t.setHeader("content-type","application/json"),t.end(JSON.stringify({error:"Event stream unavailable"}));return}t.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"}),t.write(`: connected
+import y from"node:http";import{WEAVE_VERSION as S}from"../version.js";import{isHarness as E}from"@weavecode/core";import h from"node:fs";import l from"node:path";import{SseHub as H}from"./sse-hub.js";import{importPromptImagesOnce as N,needsImageImport as R}from"./prompt-images.js";import{sendJson as m}from"./http.js";import{FingerprintCache as P}from"../install/fingerprint.js";import{ApiLogger as k}from"./api-log.js";import{handleHooksRoutes as j}from"./hooks-routes.js";import{handleMcpRequest as x}from"./mcp-orchestration.js";import{handleToolkitRoutes as W}from"./toolkit-routes.js";import{handleCaptureRoutes as O}from"./capture-routes.js";import{handleConfigRoutes as T}from"./config-routes.js";import{handleMarketRoutes as A}from"./routes/market.js";import{handleProjectRoutes as I}from"./routes/projects.js";import{handleSettingsRoutes as M}from"./routes/settings-statusline.js";import{DAEMON_HOST as C}from"./port.js";import{handleAuthRoutes as D}from"./auth-routes.js";import{handleAiRoutes as J}from"./ai-routes.js";export const DAEMON_VERSION=S;export function weaveRequestHandler(e){const r=e.fingerprintCache??new P,t=e.apiLog??new k,o=e.sseHub??new H(e),a={...e,fingerprintCache:r,apiLog:t,sseHub:o};return(n,s)=>{t.begin(n,s),$(n,s,a)}}export function createWeaveServer(e){return y.createServer(weaveRequestHandler(e))}async function $(e,r,t){const o=new URL(e.url??"/",`http://${C}`);let a=o.pathname;if(a.startsWith("/api/")?a=a.slice(4):a==="/api"&&(a="/"),a==="/health"&&e.method==="GET"){m(r,200,{service:"weave-daemon",version:DAEMON_VERSION,pid:process.pid,port:t.port,uptimeMs:Math.round(process.uptime()*1e3)});return}if(await D(e,r,t,a)||await J(e,r,t,a))return;if(t.auth&&!z(e,a,t)&&!t.auth.isAuthenticated(e.headers)){m(r,401,{error:"Unauthorized"});return}if(a==="/mcp"){await x(e,r,{port:t.port,token:t.auth?.getLocalToken()??null});return}if(a==="/api-logs"&&e.method==="GET"){if(!t.apiLog){m(r,503,{error:"API log unavailable"});return}const s=o.searchParams.get("status"),c=o.searchParams.get("limit"),i=await t.apiLog.query({from:o.searchParams.get("from")??void 0,to:o.searchParams.get("to")??void 0,path:o.searchParams.get("path")??void 0,method:o.searchParams.get("method")??void 0,status:s==null?void 0:Number(s),limit:c==null?void 0:Number(c)});m(r,200,i);return}if(await j(e,r,t,a,o)||await W(e,r,t,a,o)||await O(e,r,t,a)||await T(e,r,t,a,o))return;const n=a.match(/^\/projects\/(\d+)\/hooks$/);if(n&&e.method==="GET"){if(!t.hookEvents){m(r,503,{error:"Hook ingestion unavailable"});return}const s=Number(n[1]),c=q(o.searchParams.get("limit")),i=o.searchParams.get("sessionId"),f=o.searchParams.get("beforeId"),u=f?Number(f):void 0,w=(o.searchParams.get("types")??"").split(",").map(p=>p.trim()).filter(Boolean);if(i){const p=t.hookEvents.listBySession(i,c??300,u,w);let v=t.uploads?.imagesBySession(i);if(R(p,v)){const d=t.projects.getMeta(s);await N({hookEvents:t.hookEvents,uploads:t.uploads,sessionProbe:t.sessionProbe,uploadDir:d?.storage?.images??null},i,_(p))&&(v=t.uploads?.imagesBySession(i))}m(r,200,{events:p.map(d=>{const b=v?.get(d.id);return b?.length?{...d,images:b.map(g=>({id:g.id,name:g.name,mediaType:g.mediaType,size:g.size}))}:d})});return}m(r,200,{events:t.hookEvents.listByProject(s,c)});return}if(!await A(e,r,t,a,o)&&!await M(e,r,t,a,o)){if(a==="/events"&&e.method==="GET"){L(e,r,t,o);return}if(!await I(e,r,t,a)){if(e.method==="GET"&&t.staticDir){G(r,a,t.staticDir);return}m(r,404,{error:"Not found"})}}}const B=25e3;function L(e,r,t,o){const a=t.sseHub;if(!a||!t.watch&&!t.hookBus&&!t.dataBus){r.statusCode=503,r.setHeader("content-type","application/json"),r.end(JSON.stringify({error:"Event stream unavailable"}));return}const n=e.headers["last-event-id"],s=(Array.isArray(n)?n[0]:n)??o.searchParams.get("since")??null,c=a.replay(s);r.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"}),r.write(`: connected
 
-`);const u=[];r.watch&&(u.push(r.watch.subscribe(s=>{t.write(`data: ${JSON.stringify({type:"asset",...s})}
+`);const i=setInterval(()=>{r.writableEnded||r.write(`data: ${JSON.stringify({type:"ping"})}
 
-`)})),u.push(r.watch.subscribeProjects(s=>{t.write(`data: ${JSON.stringify({type:"project",...s})}
+`)},B);i.unref?.(),c.gap&&r.write(`data: ${JSON.stringify({type:"resync"})}
 
-`)}))),r.hookBus&&u.push(r.hookBus.subscribe(s=>{t.write(`data: ${JSON.stringify({type:"hook",...s})}
+`);for(const u of c.frames)r.write(`id: ${u.id}
+data: ${u.data}
 
-`)})),r.dataBus&&u.push(r.dataBus.subscribe(s=>{const g=s.payload===void 0?"invalidate":"push";t.write(`data: ${JSON.stringify({type:g,...s})}
+`);const f=a.subscribe(u=>{r.write(`id: ${u.id}
+data: ${u.data}
 
-`)})),r.inflightRefresher?.refreshNow(),r.terminalRefresher?.onSubscriberJoin(),r.updatesRefresher?.onSubscriberJoin(),o.on("close",()=>{for(const s of u)s()})}function xe(o,t,r){if(t==="/health")return!0;if(o.method!=="GET")return!1;if((o.headers.accept??"").includes("text/html"))return!0;if(!r.staticDir)return!1;const u=S.normalize(t).replace(/^([/\\]\.\.[/\\])+/,""),s=S.join(r.staticDir,u);return s.startsWith(r.staticDir)&&j.existsSync(s)&&j.statSync(s).isFile()}function Le(o,t){o.setHeader("cache-control",t.startsWith("/assets/")?"public, max-age=31536000, immutable":"no-cache")}function Re(o,t,r){const u=S.normalize(t).replace(/^([/\\]\.\.[/\\])+/,""),s=S.join(r,u);if(!s.startsWith(r)){o.statusCode=403,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:"Forbidden"}));return}j.stat(s,(g,b)=>{if(!g&&b.isFile()){o.setHeader("content-type",He(s)),Le(o,t),o.setHeader("content-length",String(b.size)),j.createReadStream(s).pipe(o);return}j.readFile(S.join(r,"index.html"),(y,w)=>{if(y){o.statusCode=404,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:"Not found"}));return}o.setHeader("content-type","text/html"),o.setHeader("cache-control","no-cache"),o.end(w)})})}function ht(o,t){const r=o.ai??ke;return{...o,ai:{baseUrl:r.baseUrl,model:r.model,apiKeySet:Ge(t)}}}function Ue(o){if(!o)return;const{apiKey:t,...r}=o;return r}function He(o){return o.endsWith(".js")?"text/javascript":o.endsWith(".css")?"text/css":o.endsWith(".html")?"text/html":o.endsWith(".svg")?"image/svg+xml":o.endsWith(".json")?"application/json":"application/octet-stream"}function Ke(o){const t=Number(o??"100");return!Number.isFinite(t)||t<=0?100:Math.min(Math.floor(t),500)}function E(o,t){t instanceof at?o.statusCode=409:t instanceof B?o.statusCode=404:t instanceof Jt||t instanceof Ft?o.statusCode=500:o.statusCode=400,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:t instanceof Error?t.message:"Install failed"}))}async function T(o,t){const r=G(o.path,C(t)),u=r?await _t(o.path):null,s=I(o.path,t);return{id:o.id,kind:o.kind,addedAt:o.addedAt,path:o.path,relPath:G(o.path,t)?Qt(o.path,t):null,resourceId:r?S.basename(o.path):null,managed:r,builtin:s,namespace:r?Vt(o.path,C(t)):void 0,legacy:!u&&!s,source:s?"builtin":u?.source??"legacy",origin:u?.origin??null,importedAt:u?.importedAt??null,commit:u?.commit??null,tags:await _e(o.path)}}const We={command:"command",agent:"agent",workflow:"workflow",rule:"rules","output-style":"output-style"};async function ze(o){const{plugins:t,skills:r,mcp:u,files:s}=await rt(o),g={},b=(y,w)=>{w>0&&(g[y]=(g[y]??0)+w)};b("skill",r.length),b("mcp",u.length);for(const[y,w]of Object.entries(s))b(We[y]??y,w.length);return b("plugin",t.length),b("mods",t.filter(y=>y.kind==="mod"||y.components.includes("mod")).length),g}async function _e(o){try{return await ze(o)}catch{return{}}}function A(o,t){t instanceof re?o.statusCode=403:t instanceof ae?o.statusCode=413:t instanceof B?o.statusCode=404:o.statusCode=400,o.setHeader("content-type","application/json"),o.end(JSON.stringify({error:t instanceof Error?t.message:"Read failed"}))}
+`)});t.inflightRefresher?.refreshNow(),t.terminalRefresher?.onSubscriberJoin(),t.updatesRefresher?.onSubscriberJoin(),e.on("close",()=>{clearInterval(i),f()})}function z(e,r,t){if(r==="/health"||r.startsWith("/webhooks/orchestrate/"))return!0;if(e.method!=="GET")return!1;if((e.headers.accept??"").includes("text/html"))return!0;if(!t.staticDir)return!1;const o=l.normalize(r).replace(/^([/\\]\.\.[/\\])+/,""),a=l.join(t.staticDir,o);return a.startsWith(t.staticDir)&&h.existsSync(a)&&h.statSync(a).isFile()}function F(e,r){e.setHeader("cache-control",r.startsWith("/assets/")?"public, max-age=31536000, immutable":"no-cache")}function G(e,r,t){const o=l.normalize(r).replace(/^([/\\]\.\.[/\\])+/,""),a=l.join(t,o);if(!a.startsWith(t)){e.statusCode=403,e.setHeader("content-type","application/json"),e.end(JSON.stringify({error:"Forbidden"}));return}h.stat(a,(n,s)=>{if(!n&&s.isFile()){e.setHeader("content-type",V(a)),F(e,r),e.setHeader("content-length",String(s.size)),h.createReadStream(a).pipe(e);return}h.readFile(l.join(t,"index.html"),(c,i)=>{if(c){e.statusCode=404,e.setHeader("content-type","application/json"),e.end(JSON.stringify({error:"Not found"}));return}e.setHeader("content-type","text/html"),e.setHeader("cache-control","no-cache"),e.end(i)})})}function V(e){return e.endsWith(".js")?"text/javascript":e.endsWith(".css")?"text/css":e.endsWith(".html")?"text/html":e.endsWith(".svg")?"image/svg+xml":e.endsWith(".json")?"application/json":"application/octet-stream"}function _(e){for(let r=e.length-1;r>=0;r--){const t=e[r].source;if(E(t))return t}return null}function q(e){const r=Number(e??"100");return!Number.isFinite(r)||r<=0?100:Math.min(Math.floor(r),500)}

package/node_modules/@weavecode/server/dist/daemon/session-open.d.ts

@@ -0,0 +1,26 @@
+import type { WeaveServerDeps } from './server.js';
+/**
+ * 转录状态的判定（列表与打开门禁共用）：探测只答「那文件里有没有内容」，而没内容
+ * 有两种成因：①刚建的会话宿主先建空文件（或缺席），首条消息写进去才有内容；②曾经
+ * 写过又被清理/删掉。只有 ② 接不回来。判据 = 这个会话确实跑过（有 prompt 或收尾
+ * 事件）——没跑过的会话没有可失去的转录，判不动（null），免得刚建出来就挂「转录已
+ * 丢失」。false 因此只有一种含义：真丢了。
+ */
+export declare function transcriptState(present: boolean | null, hasRun: boolean | undefined): boolean | null;
+export type SessionOpenDeps = Pick<WeaveServerDeps, 'hookSessions' | 'hookEvents' | 'projects' | 'harnesses' | 'sessionProbe' | 'opener' | 'terminalRefresher'>;
+export type SessionOpenResult = {
+    ok: true;
+    sessionId: string;
+    command: string;
+    cwd: string;
+    target?: string;
+} | {
+    ok: false;
+    status: 400 | 404 | 409 | 501 | 503;
+    error: string;
+};
+/**
+ * 在默认终端打开会话（spawn 独立终端跑 harness 交互式 resume，如 `claude --resume <id>`）。
+ * 路由与编排引擎的「目标会话没开就拉起来」共用这一份：判据、能力面取法与错误码只有一处。
+ */
+export declare function openSessionTerminal(deps: SessionOpenDeps, sessionId: string, target?: string): Promise<SessionOpenResult>;

package/node_modules/@weavecode/server/dist/daemon/session-open.js

@@ -0,0 +1 @@
+import{stat as f}from"node:fs/promises";import{isHarness as h}from"@weavecode/core";import{readDaemonSettings as k}from"./settings.js";import{defaultProjectOpener as d,terminalBackendFor as g}from"./opener.js";export function transcriptState(t,e){return t!==!1?t:e===!0?!1:null}export async function openSessionTerminal(t,e,o){if(!t.hookSessions)return{ok:!1,status:503,error:"Hooks subsystem unavailable"};const a=t.hookSessions.getBySessionId(e);if(!a)return{ok:!1,status:404,error:"Session not found"};if(!t.hookEvents)return{ok:!1,status:503,error:"Hook ingestion unavailable"};const c=t.hookEvents.listBySession(e,1),i=c[c.length-1]?.source;if(!h(i))return{ok:!1,status:400,error:"Session has no hook events to determine its harness"};const n=t.harnesses?.get(i)?.resume;if(!n?.supported||!n.openArgs)return{ok:!1,status:501,error:`Harness "${i}" does not support interactive resume`};if(!a.projectId)return{ok:!1,status:400,error:"Session is not bound to a project"};const s=t.projects?.getById(a.projectId);if(!s)return{ok:!1,status:404,error:"Project not found"};const l=t.sessionProbe?.transcriptPresent(e)??null;if(transcriptState(l,t.hookSessions.hasRunOf(e))===!1)return{ok:!1,status:409,error:"Session transcript is missing \u2014 nothing to resume"};const p=t.opener??d;try{if(!(await f(s.path)).isDirectory())throw new Error(`Not a directory: ${s.path}`);const r=await k(),u=[n.bin,...n.openArgs(e)];if(o){if(!g(r.terminal).enumerable)throw new Error(`Terminal preset "${r.terminal.preset}" cannot attach to a chosen pane \u2014 pick wezterm, wt or Terminal.app in settings`);const m=p.runInTerminalAt;if(!m)throw new Error("Targeted attach is unavailable");await m(s.path,u,o,r.terminal)}else await p.runInTerminal(s.path,u,r.terminal);return setTimeout(()=>{t.terminalRefresher?.refreshNow()},600),{ok:!0,sessionId:e,command:u.join(" "),cwd:s.path,...o?{target:o}:{}}}catch(r){return{ok:!1,status:400,error:r instanceof Error?r.message:"Open failed"}}}

package/node_modules/@weavecode/server/dist/daemon/session-probe.d.ts

@@ -1,3 +1,4 @@
+import { type ModelSwitchFact } from '@weavecode/harness';
 /** 读文件尾部（读不到 → null，不猜）。 */
 export declare function readTail(path: string, bytes?: number): string | null;
 /**
@@ -9,23 +10,40 @@ export declare function dbTranscriptPathResolver(events: {
         payload: string;
     }>;
 }): (sessionId: string) => string | null;
+/**
+ * 装配用兜底：换模型那把闩只在内存，daemon 一重启就没了，而转录**只**在 assistant
+ * 消息上照会模型——换完没再跑一轮的会话（「切了就放着」最常见）会一直显示切换前
+ * 那个模型。于是回读库里这条会话最近一条「模型落定」事件（换模型 / 重开会话）：
+ * 是换模型就答得出新值，是重开则什么都不补（宿主把模型交还重定了，不猜）。
+ * 每个会话在 daemon 生命周期里最多查一次（见 `SessionProbe.switchOf`）。
+ */
+export declare function dbModelFactResolver(events: {
+    listBySession(sessionId: string, limit?: number, beforeId?: number, types?: readonly string[]): Array<{
+        eventType: string;
+        payload: string;
+    }>;
+}, harnessOf: (sessionId: string) => string | null): (sessionId: string) => ModelSwitchFact | null;
 export declare class SessionProbe {
     /**
      * 路径的内存副本没了以后的兜底（daemon 重启后第一拍）：不补的话，重启后**没有
      * 新事件**的会话（已收尾 / 闲置中的那些）模型与模式会一直显示「未知」。
      */
     private readonly fallbackPath?;
+    /** 重启后补换模型闩（见 {@link dbModelFactResolver}）。 */
+    private readonly fallbackSwitch?;
     constructor(
     /**
      * 路径的内存副本没了以后的兜底（daemon 重启后第一拍）：不补的话，重启后**没有
      * 新事件**的会话（已收尾 / 闲置中的那些）模型与模式会一直显示「未知」。
      */
-    fallbackPath?: ((sessionId: string) => string | null) | undefined);
+    fallbackPath?: ((sessionId: string) => string | null) | undefined, 
+    /** 重启后补换模型闩（见 {@link dbModelFactResolver}）。 */
+    fallbackSwitch?: ((sessionId: string) => ModelSwitchFact | null) | undefined);
     /** sessionId → 转录路径（内存态；hook 事件每次上报都覆盖刷新）。 */
     private readonly paths;
     /** 路径 → 上次读到的事实（按文件大小缓存：没长过就不重读）。 */
     private readonly marks;
-    /** sessionId → 最后已知的模型/模式（读到就记；见 `latched`）。 */
+    /** sessionId → 最后已知的模型/模式/上下文占用（读到就记；见 `latched`）。 */
     private readonly known;
     /**
      * sessionId → 宿主落定的换模型（`PostModelSwitch`）+ 记下的那一刻转录里还是哪个
@@ -33,11 +51,42 @@ export declare class SessionProbe {
      * 换模型这件事得由事件先说，等转录自己跟上（照会的值不再是 `stale`）才交还给它。
      */
     private readonly switched;
+    /** sessionId → 已经向库要过换模型闩了（库里那条事件不会变，问一次就够）。 */
+    private readonly probed;
+    /** sessionId → 推理档位（每次带 `effort` 的事件覆盖）：状态栏 `thinking` 块的事实在 hook 里。 */
+    private readonly efforts;
+    /** sessionId → 事件自带的执行模式（每条事件覆盖）：比转录早一步，见 `noteMode`。 */
+    private readonly modes;
     noteTranscript(sessionId: string, path: string | null): void;
     private pathOf;
+    /**
+     * 该会话的转录路径（没登记过 → null）：按需读**全量**转录的地方用（改动汇总要
+     * 从头扫 tool_use，尾窗读不到），路径归一处，别处不自己拼 projects 目录。
+     */
+    transcriptPathOf(sessionId: string): string | null;
     forget(sessionId: string): void;
+    /** 推理档位（`effort.level`，事件自带）：逐条覆盖，与模型/模式同口径只放内存。 */
+    noteEffort(sessionId: string, level: string): void;
+    /** 最后已知的推理档位：事件优先、转录兜底；两者都没有即 null（不猜）。
+     *  兜底是为了 daemon 重启那一拍——事件只有工具/回合类才带 effort，重启后
+     *  若一直只有通知类事件，没这层就会长期显「未知」。 */
+    currentEffort(sessionId: string): string | null;
+    /**
+     * 上下文窗口占用（token 数）：转录最后一条 assistant 的 usage 四项之和，语义是
+     * 「上一轮完成时」——与模型/模式同为「最后已知」。没有转录 / 还没跑过一轮 →
+     * null（不猜）。
+     */
+    currentContextTokens(sessionId: string): number | null;
     /** 宿主落定的换模型（`PostModelSwitch` 的 `to_model`）：立刻生效，见 `switched`。 */
     noteModel(sessionId: string, model: string): void;
+    /**
+     * 宿主开 / 恢复会话（`SessionStart`）：模型由宿主重新决定，此前的「最后已知」与
+     * 换模型闩一律作废、下一次问重新读——`--resume` 起来会落回默认模型，而转录里还
+     * 只有上一轮的照会，旧答案既可能不是此刻的模型、也会让 `switched` 的 stale 对照
+     * 永远对不上（新照会恰好等于 stale 时标签就再也改不回来）。带了值就以它为准
+     * （claude 的 resume 也带：全局配置里的默认模型，见 harness 的 `startedModelOf`）。
+     */
+    sessionStarted(sessionId: string, model: string | null): void;
     /**
      * 转录还在不在：true/false；路径都不知道 → null（不猜）。
      *
@@ -54,7 +103,13 @@ export declare class SessionProbe {
     interruptedAt(sessionId: string, lastSeenAt: string): number | null;
     /** 最近一轮真跑过的模型（转录 `message.model`）；未知/读不到一律 null（不猜）。 */
     currentModel(sessionId: string): string | null;
-    /** 最后一次活动时的执行模式（转录 `permissionMode`）；Shift+Tab 不留痕，故是「最后已知」。 */
+    /**
+     * 事件自带的执行模式（`raw.permission_mode`）：每条事件都带、答的是「此刻」，故压过
+     * 转录——宿主切模式（Shift+Tab）既不落转录也没有专门事件，转录那条只能追到上一次
+     * 写条目的那一刻。没有事件（daemon 重启后的第一拍）才回落转录。
+     */
+    noteMode(sessionId: string, mode: string): void;
+    /** 最后一次活动时的执行模式：事件优先、转录兜底；两者都没有即 null（不猜）。 */
     currentMode(sessionId: string): string | null;
     /**
      * 模型/模式在 UI 上承诺的是**最后已知**，不是「此刻尾窗里有没有」：尾窗只有 64KB，
@@ -70,5 +125,11 @@ export declare class SessionProbe {
      * 就答事件说的新值；转录自己跟上（照会别的值）即交还给它。
      */
     private switchedModel;
+    /**
+     * 换模型闩：内存里有就用内存的；没有（daemon 刚重启）就向库要一次——拿事件的
+     * `from_model` 与转录此刻照会的值比（剥网关前缀，`custom_openai/ftm` 对 `ftm`），
+     * 相同即宿主还没跑过新一轮，闩才成立；不同则事件早于转录，交还转录。
+     */
+    private switchOf;
     private factsOf;
 }

package/node_modules/@weavecode/server/dist/daemon/session-probe.js

@@ -1 +1 @@
-import{closeSync as o,openSync as c,readSync as i,statSync as a}from"node:fs";import{currentModelAt as h,currentModeAt as u,interruptMarkerAt as f}from"@weavecode/harness";const d=64*1024,m={model:null,mode:null};export function readTail(s,t=d){try{const e=a(s).size,n=Math.max(0,e-t),r=c(s,"r");try{const l=Buffer.alloc(e-n);return i(r,l,0,l.length,n),l.toString("utf8")}finally{o(r)}}catch{return null}}export function dbTranscriptPathResolver(s){return t=>{try{const e=JSON.parse(s.listBySession(t,1)[0]?.payload??"");return typeof e.transcriptPath=="string"&&e.transcriptPath?e.transcriptPath:null}catch{return null}}}export class SessionProbe{fallbackPath;constructor(t){this.fallbackPath=t}paths=new Map;marks=new Map;known=new Map;switched=new Map;noteTranscript(t,e){e&&this.paths.set(t,e)}pathOf(t){const e=this.paths.get(t);if(e)return e;const n=this.fallbackPath?.(t)??null;return n&&this.paths.set(t,n),n}forget(t){this.paths.delete(t),this.known.delete(t),this.switched.delete(t)}noteModel(t,e){const n=this.pathOf(t);this.switched.set(t,{stale:n?this.factsOf(n).model:null,model:e})}transcriptPresent(t){const e=this.pathOf(t);return e?this.factsOf(e).size>0:null}interruptedAt(t,e){const n=this.pathOf(t);if(!n)return null;const r=this.factsOf(n).markerAt;if(r===null)return null;const l=Date.parse(e);return Number.isFinite(l)&&r>l?r:null}currentModel(t){return this.latched(t).model}currentMode(t){return this.latched(t).mode}latched(t){const e=this.pathOf(t),n=e?this.factsOf(e):m,r=this.known.get(t),l={model:this.switchedModel(t,n.model)??r?.model??null,mode:n.mode??r?.mode??null};return(!r||r.model!==l.model||r.mode!==l.mode)&&this.known.set(t,l),l}switchedModel(t,e){const n=this.switched.get(t);return n&&e===n.stale?n.model:e}factsOf(t){let e;try{e=a(t).size}catch{return{size:-1,markerAt:null,model:null,mode:null}}const n=this.marks.get(t);if(n&&n.size===e)return n;const r=readTail(t),l={size:e,markerAt:r===null?null:f(r),model:r===null?null:h(r),mode:r===null?null:u(r)};return this.marks.set(t,l),l}}
+import{closeSync as h,openSync as u,readSync as f,statSync as a}from"node:fs";import{bareModelName as i,codexInterruptMarkerAt as d,currentContextTokensAt as p,currentEffortAt as m,currentModelAt as k,currentModeAt as w,interruptMarkerAt as M,switchedModelOf as O}from"@weavecode/harness";import{HARNESS_SESSION_CONTROL as S,isHarness as x}from"@weavecode/core";const b=64*1024,y={model:null,mode:null,effort:null,contextTokens:null};export function readTail(l,t=b){try{const e=a(l).size,s=Math.max(0,e-t),n=u(l,"r");try{const r=Buffer.alloc(e-s);return f(n,r,0,r.length,s),r.toString("utf8")}finally{h(n)}}catch{return null}}export function dbTranscriptPathResolver(l){return t=>{try{const e=JSON.parse(l.listBySession(t,1)[0]?.payload??"");return typeof e.transcriptPath=="string"&&e.transcriptPath?e.transcriptPath:null}catch{return null}}}export function dbModelFactResolver(l,t){return e=>{const s=t(e),n=s&&x(s)?S[s].modelFactEvents:[];if(n.length===0)return null;const r=l.listBySession(e,1,void 0,n),o=r[r.length-1];if(!o)return null;try{const c=JSON.parse(o.payload).raw;return O(o.eventType,c)}catch{return null}}}function T(l){const t=M(l),e=d(l);return t===null?e:e===null?t:Math.max(t,e)}export class SessionProbe{fallbackPath;fallbackSwitch;constructor(t,e){this.fallbackPath=t,this.fallbackSwitch=e}paths=new Map;marks=new Map;known=new Map;switched=new Map;probed=new Set;efforts=new Map;modes=new Map;noteTranscript(t,e){e&&this.paths.set(t,e)}pathOf(t){const e=this.paths.get(t);if(e)return e;const s=this.fallbackPath?.(t)??null;return s&&this.paths.set(t,s),s}transcriptPathOf(t){return this.pathOf(t)}forget(t){this.paths.delete(t),this.known.delete(t),this.switched.delete(t),this.probed.delete(t),this.efforts.delete(t),this.modes.delete(t)}noteEffort(t,e){this.efforts.set(t,e)}currentEffort(t){return this.efforts.get(t)??this.latched(t).effort}currentContextTokens(t){return this.latched(t).contextTokens}noteModel(t,e){const s=this.pathOf(t);this.switched.set(t,{stale:s?this.factsOf(s).model:null,model:e})}sessionStarted(t,e){this.known.delete(t),this.switched.delete(t),this.probed.delete(t),e&&this.noteModel(t,e)}transcriptPresent(t){const e=this.pathOf(t);return e?this.factsOf(e).size>0:null}interruptedAt(t,e){const s=this.pathOf(t);if(!s)return null;const n=this.factsOf(s).markerAt;if(n===null)return null;const r=Date.parse(e);return Number.isFinite(r)&&n>r?n:null}currentModel(t){return this.latched(t).model}noteMode(t,e){this.modes.set(t,e)}currentMode(t){return this.modes.get(t)??this.latched(t).mode}latched(t){const e=this.pathOf(t),s=e?this.factsOf(e):y,n=this.known.get(t),r={model:this.switchedModel(t,s.model)??n?.model??null,mode:s.mode??n?.mode??null,effort:s.effort??n?.effort??null,contextTokens:s.contextTokens??n?.contextTokens??null};return(!n||n.model!==r.model||n.mode!==r.mode||n.effort!==r.effort||n.contextTokens!==r.contextTokens)&&this.known.set(t,r),r}switchedModel(t,e){const s=this.switchOf(t,e);return s&&e===s.stale?s.model:e}switchOf(t,e){const s=this.switched.get(t);if(s||!e||this.probed.has(t))return s;this.probed.add(t);const n=this.fallbackSwitch?.(t);if(!n||n.from===null||i(n.from)!==i(e))return;const r={stale:e,model:n.to};return this.switched.set(t,r),r}factsOf(t){let e;try{e=a(t).size}catch{return{size:-1,markerAt:null,model:null,mode:null,effort:null,contextTokens:null}}const s=this.marks.get(t);if(s&&s.size===e)return s;const n=readTail(t),r={size:e,markerAt:n===null?null:T(n),model:n===null?null:k(n),mode:n===null?null:w(n),effort:n===null?null:m(n),contextTokens:n===null?null:p(n)};return this.marks.set(t,r),r}}