@weavecode/weave 0.1.2 → 0.1.3

package/node_modules/@weavecode/server/dist/daemon/ai-context.js

@@ -1,10 +1,10 @@
-import{existsSync as d,readdirSync as h,readFileSync as S}from"node:fs";import c from"node:path";import{builtinMarketDir as b}from"../market/builtin.js";const p=6e4,w=40,y=6;export function findDocsDir(r){let t=c.resolve(r);for(let n=0;n<y;n++){const s=c.join(t,"docs");if(d(c.join(s,"FEATURES.md")))return s;const i=c.dirname(t);if(i===t)break;t=i}return null}export function collectSkillFiles(r,t=w){const n=[],s=(i,a)=>{if(n.length>=t||a>6)return;let u;try{u=h(i,{withFileTypes:!0})}catch{return}for(const l of u){if(n.length>=t)return;const e=c.join(i,l.name);l.isDirectory()?s(e,a+1):l.name==="SKILL.md"&&n.push(e)}};return s(r,0),n.sort()}function m(r){try{return S(r,"utf8")}catch{return null}}export function buildSystemPrompt(r){const t=[],n=findDocsDir(r.cwd??process.cwd());if(n)for(const e of["ARCHITECTURE.md","FEATURES.md"]){const o=c.join(n,e);if(!d(o))continue;const f=m(o);f&&t.push({label:`docs/${e}`,text:f})}const s=b(r.dataDir);for(const e of collectSkillFiles(s)){const o=m(e);o&&t.push({label:c.relative(s,e).split(c.sep).join("/"),text:o})}const i=["\u4F60\u662F weave \u63A7\u5236\u53F0\u5185\u7F6E\u7684 AI \u52A9\u624B\uFF0C**\u53EA\u8D1F\u8D23 weave \u672C\u8EAB**\uFF1A\u5B83\u7684\u529F\u80FD\u3001\u7528\u6CD5\u3001\u914D\u7F6E\u3001\u67B6\u6784\u3001","\u5185\u7F6E\u6280\u80FD\uFF0C\u4EE5\u53CA\u57FA\u4E8E\u4E0B\u9762\u6CE8\u5165\u8D44\u6599\u7684\u6392\u969C\u3002","","\u56DE\u7B54\u8303\u56F4\uFF08\u8D8A\u754C\u7684\u60C5\u51B5\u4E00\u5F8B\u793C\u8C8C\u62D2\u7B54\uFF1A\u7528\u4E00\u53E5\u8BDD\u8BF4\u660E\u4F60\u53EA\u804A weave\uFF0C\u7136\u540E\u628A\u8BDD\u9898\u5F15\u56DE weave\uFF09\uFF1A","- \u53EF\u4EE5\u7B54\uFF1Aweave \u7684\u80FD\u529B\u4E0E\u64CD\u4F5C\uFF08\u547D\u4EE4\u3001\u8BBE\u7F6E\u9879\u3001\u6587\u4EF6\u843D\u70B9\u3001\u63D2\u4EF6/\u6280\u80FD/\u5E02\u573A\u3001hooks\u3001\u4F1A\u8BDD\u4E0E\u4EFB\u52A1\u3001\u8BA4\u8BC1\u7B49\uFF09\uFF0C","  \u4EE5\u53CA\u6CE8\u5165\u8D44\u6599\u91CC\u80FD\u67E5\u5230\u7684\u4E8B\u5B9E\uFF1B","- \u4E0D\u8981\u7B54\uFF1A\u4E0E weave \u65E0\u5173\u7684\u901A\u7528\u7F16\u7A0B\u3001\u5199\u4F5C\u3001\u7FFB\u8BD1\u3001\u95F2\u804A\uFF0C\u5176\u5B83\u4EA7\u54C1\u6216\u670D\u52A1\uFF0C\u4EE5\u53CA\u4EFB\u4F55\u6709\u5BB3\u6216\u8D8A\u754C\u7684\u8BF7\u6C42\uFF1B","- \u8D44\u6599\u672A\u8986\u76D6\u65F6\u660E\u786E\u8BF4\u300C\u4E0D\u786E\u5B9A\u300D\uFF0C\u4E0D\u8981\u7F16\u9020 weave \u7684\u884C\u4E3A\u3001\u547D\u4EE4\u6216\u53C2\u6570\uFF1B","- \u4E0D\u7C98\u8D34\u5927\u6BB5\u6CE8\u5165\u8D44\u6599\u539F\u6587\uFF08\u7528\u6237\u70B9\u540D\u8981\u67D0\u4E00\u6BB5\u65F6\u9664\u5916\uFF09\uFF1B","- \u53EA\u505A\u53EA\u8BFB\u95EE\u7B54\uFF1A\u4E0D\u58F0\u79F0\u5DF2\u6267\u884C\u4EFB\u4F55\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u627F\u8BFA\u4EE3\u66FF\u7528\u6237\u53BB\u6539\u6587\u4EF6\u6216\u8DD1\u547D\u4EE4\u3002","","\u56DE\u7B54\u4F7F\u7528\u4E0E\u63D0\u95EE\u76F8\u540C\u7684\u8BED\u8A00\uFF1B\u6D89\u53CA\u64CD\u4F5C\u65F6\u7ED9\u51FA\u786E\u5207\u547D\u4EE4\u4E0E\u8DEF\u5F84\u3002"].join(`
-`),a=[];let u=i.length;const l=[];for(const e of t){const o=`
+import{existsSync as C,readdirSync as i,readFileSync as a}from"node:fs";import D from"node:path";import{builtinMarketDir as f}from"../market/builtin.js";const l=6e4,p=40,d=6;export function findDocsDir(e){let F=D.resolve(e);for(let E=0;E<d;E++){const o=D.join(F,"docs");if(C(D.join(o,"FEATURES.md")))return o;const n=D.dirname(F);if(n===F)break;F=n}return null}export function collectSkillFiles(e,F=p){const E=[],o=(n,s)=>{if(E.length>=F||s>6)return;let r;try{r=i(n,{withFileTypes:!0})}catch{return}for(const B of r){if(E.length>=F)return;const u=D.join(n,B.name);B.isDirectory()?o(u,s+1):B.name==="SKILL.md"&&E.push(u)}};return o(e,0),E.sort()}function c(e){try{return a(e,"utf8")}catch{return null}}export function buildSystemPrompt(e){const F=[],E=findDocsDir(e.cwd??process.cwd());if(E)for(const u of["ARCHITECTURE.md","FEATURES.md"]){const t=D.join(E,u);if(!C(t))continue;const A=c(t);A&&F.push({label:`docs/${u}`,text:A})}const o=f(e.dataRoot);for(const u of collectSkillFiles(o)){const t=c(u);t&&F.push({label:D.relative(o,u).split(D.sep).join("/"),text:t})}const n=["\u4F60\u662F weave \u63A7\u5236\u53F0\u5185\u7F6E\u7684 AI \u52A9\u624B\uFF0C**\u53EA\u8D1F\u8D23 weave \u672C\u8EAB**\uFF1A\u5B83\u7684\u529F\u80FD\u3001\u7528\u6CD5\u3001\u914D\u7F6E\u3001\u67B6\u6784\u3001","\u5185\u7F6E\u6280\u80FD\uFF0C\u4EE5\u53CA\u57FA\u4E8E\u4E0B\u9762\u6CE8\u5165\u8D44\u6599\u7684\u6392\u969C\u3002","","\u56DE\u7B54\u8303\u56F4\uFF08\u8D8A\u754C\u7684\u60C5\u51B5\u4E00\u5F8B\u793C\u8C8C\u62D2\u7B54\uFF1A\u7528\u4E00\u53E5\u8BDD\u8BF4\u660E\u4F60\u53EA\u804A weave\uFF0C\u7136\u540E\u628A\u8BDD\u9898\u5F15\u56DE weave\uFF09\uFF1A","- \u53EF\u4EE5\u7B54\uFF1Aweave \u7684\u80FD\u529B\u4E0E\u64CD\u4F5C\uFF08\u547D\u4EE4\u3001\u8BBE\u7F6E\u9879\u3001\u6587\u4EF6\u843D\u70B9\u3001\u63D2\u4EF6/\u6280\u80FD/\u5E02\u573A\u3001hooks\u3001\u4F1A\u8BDD\u4E0E\u4EFB\u52A1\u3001\u8BA4\u8BC1\u7B49\uFF09\uFF0C","  \u4EE5\u53CA\u6CE8\u5165\u8D44\u6599\u91CC\u80FD\u67E5\u5230\u7684\u4E8B\u5B9E\uFF1B","- \u4E0D\u8981\u7B54\uFF1A\u4E0E weave \u65E0\u5173\u7684\u901A\u7528\u7F16\u7A0B\u3001\u5199\u4F5C\u3001\u7FFB\u8BD1\u3001\u95F2\u804A\uFF0C\u5176\u5B83\u4EA7\u54C1\u6216\u670D\u52A1\uFF0C\u4EE5\u53CA\u4EFB\u4F55\u6709\u5BB3\u6216\u8D8A\u754C\u7684\u8BF7\u6C42\uFF1B","- \u8D44\u6599\u672A\u8986\u76D6\u65F6\u660E\u786E\u8BF4\u300C\u4E0D\u786E\u5B9A\u300D\uFF0C\u4E0D\u8981\u7F16\u9020 weave \u7684\u884C\u4E3A\u3001\u547D\u4EE4\u6216\u53C2\u6570\uFF1B","- \u4E0D\u7C98\u8D34\u5927\u6BB5\u6CE8\u5165\u8D44\u6599\u539F\u6587\uFF08\u7528\u6237\u70B9\u540D\u8981\u67D0\u4E00\u6BB5\u65F6\u9664\u5916\uFF09\uFF1B","- \u53EA\u505A\u53EA\u8BFB\u95EE\u7B54\uFF1A\u4E0D\u58F0\u79F0\u5DF2\u6267\u884C\u4EFB\u4F55\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u627F\u8BFA\u4EE3\u66FF\u7528\u6237\u53BB\u6539\u6587\u4EF6\u6216\u8DD1\u547D\u4EE4\u3002","","\u56DE\u7B54\u4F7F\u7528\u4E0E\u63D0\u95EE\u76F8\u540C\u7684\u8BED\u8A00\uFF1B\u6D89\u53CA\u64CD\u4F5C\u65F6\u7ED9\u51FA\u786E\u5207\u547D\u4EE4\u4E0E\u8DEF\u5F84\u3002"].join(`
+`),s=[];let r=n.length;const B=[];for(const u of F){const t=`
 
-## \u6CE8\u5165\u8D44\u6599\uFF1A${e.label}
+## \u6CE8\u5165\u8D44\u6599\uFF1A${u.label}
 
-${e.text}`;if(u+o.length>p){const f=p-u;f>500&&(a.push(`
+${u.text}`;if(r+t.length>l){const A=l-r;A>500&&(s.push(`
 
-## \u6CE8\u5165\u8D44\u6599\uFF1A${e.label}\uFF08\u6309\u9884\u7B97\u622A\u65AD\uFF09
+## \u6CE8\u5165\u8D44\u6599\uFF1A${u.label}\uFF08\u6309\u9884\u7B97\u622A\u65AD\uFF09
 
-${e.text.slice(0,f)}`),l.push(`${e.label}(\u622A\u65AD)`));break}u+=o.length,a.push(o),l.push(e.label)}return{prompt:i+a.join(""),labels:l,docsFound:n!==null}}
+${u.text.slice(0,A)}`),B.push(`${u.label}(\u622A\u65AD)`));break}r+=t.length,s.push(t),B.push(u.label)}return{prompt:n+s.join(""),labels:B,docsFound:E!==null}}

package/node_modules/@weavecode/server/dist/daemon/ai-routes.js

@@ -1,6 +1,6 @@
-import{getDataDir as I}from"../db/paths.js";import{DEFAULT_AI_SETTINGS as v,readDaemonSettings as N}from"./settings.js";import{hasAiKey as J,readAiKey as O}from"./ai-config.js";import{buildSystemPrompt as P,findDocsDir as j}from"./ai-context.js";import{readJson as k,sendJson as f}from"./http.js";const z=12e4,C=15e3,G=500,L=40,R=2e4;export function normalizeMessages(r){if(!Array.isArray(r)||r.length===0||r.length>L)return null;const e=[];for(const t of r){const o=t;if(o?.role!=="user"&&o?.role!=="assistant")return null;const a=o.content;if(typeof a!="string"||a===""||a.length>R)return null;e.push({role:o.role,content:a})}return e}export function aiConfigured(r,e,t){return r!==""&&e!==""&&t}export async function handleAiRoutes(r,e,t,o){if(o!=="/ai"&&!o.startsWith("/ai/"))return!1;const n=(await N()).ai??v,p=J(t.aiKeyPath);if(o==="/ai/status"&&r.method==="GET")return f(e,200,{configured:aiConfigured(n.baseUrl,n.model,p),baseUrl:n.baseUrl,model:n.model,apiKeySet:p,docsFound:j(process.cwd())!==null}),!0;if(o==="/ai/models"&&r.method==="POST"){let i;try{i=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const u=typeof i.baseUrl=="string"&&i.baseUrl.trim()!==""?i.baseUrl.trim():n.baseUrl,m=typeof i.apiKey=="string"&&i.apiKey!==""?i.apiKey:O(t.aiKeyPath);if(u===""||m===null)return f(e,409,{error:"AI assistant is not configured"}),!0;const l=await B(u,m);return l.ok?(f(e,200,{models:l.models}),!0):(f(e,502,{error:l.error}),!0)}if(o==="/ai/chat"&&r.method==="POST"){const i=O(t.aiKeyPath);if(!aiConfigured(n.baseUrl,n.model,p)||i===null)return f(e,409,{error:"AI assistant is not configured"}),!0;let u;try{u=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const m=normalizeMessages(u.messages);if(!m)return f(e,400,{error:"Invalid messages"}),!0;const l=P({dataDir:t.libraries?.dataDir??I()});return await X({req:r,res:e,baseUrl:n.baseUrl,model:n.model,apiKey:i,messages:m,system:l.prompt}),!0}return f(e,404,{error:"Not found"}),!0}function A(r){const t=r?.choices?.[0],o=t?.delta?.content??t?.message?.content;return typeof o=="string"&&o!==""?o:null}export const STREAM_MEMO_TTL_MS=1440*60*1e3;const S=new Map;export function streamMemoKey(r,e){return`${r}#${e}`}export function streamSupported(r,e=Date.now()){const t=S.get(r);return!t||e-t.checkedAt>STREAM_MEMO_TTL_MS?!0:t.streaming}export function rememberStreamSupport(r,e,t=Date.now()){const o=S.get(r);o!==void 0&&o.streaming!==e&&console.log(`[weave] ai gateway ${e?"supports":"rejects"} streaming: ${r}`),S.set(r,{streaming:e,checkedAt:t})}export function resetStreamMemory(){S.clear()}async function B(r,e){try{const t=await fetch(`${r.replace(/\/+$/,"")}/models`,{headers:{authorization:`Bearer ${e}`},signal:AbortSignal.timeout(C)});if(!t.ok){const n=await t.text().catch(()=>"");return{ok:!1,error:`upstream ${t.status}${n?`: ${n.slice(0,200)}`:""}`}}const o=await t.json().catch(()=>null),a=[...new Set((o?.data??[]).map(n=>n?.id).filter(n=>typeof n=="string"&&n!==""))].sort();return a.length===0?{ok:!1,error:"upstream returned no models"}:{ok:!0,models:a.slice(0,G)}}catch(t){return{ok:!1,error:t instanceof Error?t.message:String(t)}}}async function E(r){try{const e=await fetch(r.url,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.apiKey}`},body:JSON.stringify({model:r.model,stream:!1,messages:r.messages}),signal:r.signal});if(!e.ok){const o=await e.text().catch(()=>"");return{ok:!1,error:`upstream ${e.status}${o?`: ${o.slice(0,300)}`:""}`}}const t=A(await e.json().catch(()=>null));return t===null?{ok:!1,error:"upstream returned no content"}:{ok:!0,content:t}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function X(r){const{req:e,res:t,baseUrl:o,model:a,apiKey:n,messages:p,system:i}=r,u=`${o.replace(/\/+$/,"")}/chat/completions`,m=[{role:"system",content:i},...p],l=new AbortController,_=setTimeout(()=>l.abort(),z);e.on("close",()=>l.abort()),t.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"});let b=!1;const d=s=>{if(!b)try{t.write(`data: ${JSON.stringify(s)}
+import{getDataRoot as J}from"../db/paths.js";import{DEFAULT_AI_SETTINGS as M,readDaemonSettings as P}from"./settings.js";import{hasAiKey as I,readAiKey as T}from"./ai-config.js";import{buildSystemPrompt as j,findDocsDir as R}from"./ai-context.js";import{readJson as O,sendJson as u}from"./http.js";const _=12e4,z=15e3,B=500,C=40,G=2e4;export function normalizeMessages(r){if(!Array.isArray(r)||r.length===0||r.length>C)return null;const t=[];for(const e of r){const n=e;if(n?.role!=="user"&&n?.role!=="assistant")return null;const o=n.content;if(typeof o!="string"||o===""||o.length>G)return null;t.push({role:n.role,content:o})}return t}export function aiConfigured(r,t,e){return r!==""&&t!==""&&e}export async function handleAiRoutes(r,t,e,n){if(n!=="/ai"&&!n.startsWith("/ai/"))return!1;const o=(await P()).ai??M,a=I(e.aiKeyPath);if(n==="/ai/status"&&r.method==="GET")return u(t,200,{configured:aiConfigured(o.baseUrl,o.model,a),baseUrl:o.baseUrl,model:o.model,apiKeySet:a,docsFound:R(process.cwd())!==null}),!0;if(n==="/ai/models"&&r.method==="POST"){let i;try{i=await O(r)}catch{return u(t,400,{error:"Invalid JSON body"}),!0}const d=typeof i.baseUrl=="string"&&i.baseUrl.trim()!==""?i.baseUrl.trim():o.baseUrl,l=typeof i.apiKey=="string"&&i.apiKey!==""?i.apiKey:T(e.aiKeyPath);if(d===""||l===null)return u(t,409,{error:"AI assistant is not configured"}),!0;const m=await L(d,l);return m.ok?(u(t,200,{models:m.models}),!0):(u(t,502,{error:m.error}),!0)}if(n==="/ai/chat"&&r.method==="POST"){const i=T(e.aiKeyPath);if(!aiConfigured(o.baseUrl,o.model,a)||i===null)return u(t,409,{error:"AI assistant is not configured"}),!0;let d;try{d=await O(r)}catch{return u(t,400,{error:"Invalid JSON body"}),!0}const l=normalizeMessages(d.messages);if(!l)return u(t,400,{error:"Invalid messages"}),!0;const m=j({dataRoot:e.libraries?.dataRoot??J()});return await q({req:r,res:t,baseUrl:o.baseUrl,model:o.model,apiKey:i,messages:l,system:m.prompt}),!0}return u(t,404,{error:"Not found"}),!0}function $(r){const t=r?.choices?.[0],e=t?.delta?.content??t?.message?.content;return typeof e=="string"&&e!==""?e:null}export const STREAM_MEMO_TTL_MS=1440*60*1e3;const w=new Map;export function streamMemoKey(r,t){return`${r}#${t}`}export function streamSupported(r,t=Date.now()){const e=w.get(r);return!e||t-e.checkedAt>STREAM_MEMO_TTL_MS?!0:e.streaming}export function rememberStreamSupport(r,t,e=Date.now()){const n=w.get(r);n!==void 0&&n.streaming!==t&&console.log(`[weave] ai gateway ${t?"supports":"rejects"} streaming: ${r}`),w.set(r,{streaming:t,checkedAt:e})}export function resetStreamMemory(){w.clear()}async function L(r,t){try{const e=await fetch(`${r.replace(/\/+$/,"")}/models`,{headers:{authorization:`Bearer ${t}`},signal:AbortSignal.timeout(z)});if(!e.ok){const a=await e.text().catch(()=>"");return{ok:!1,error:`upstream ${e.status}${a?`: ${a.slice(0,200)}`:""}`}}const n=await e.json().catch(()=>null),o=[...new Set((n?.data??[]).map(a=>a?.id).filter(a=>typeof a=="string"&&a!==""))].sort();return o.length===0?{ok:!1,error:"upstream returned no models"}:{ok:!0,models:o.slice(0,B)}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function U(r){try{const t=await fetch(r.url,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.apiKey}`},body:JSON.stringify({model:r.model,stream:!1,messages:r.messages}),signal:r.signal});if(!t.ok){const n=await t.text().catch(()=>"");return{ok:!1,error:`upstream ${t.status}${n?`: ${n.slice(0,300)}`:""}`}}const e=$(await t.json().catch(()=>null));return e===null?{ok:!1,error:"upstream returned no content"}:{ok:!0,content:e}}catch(t){return{ok:!1,error:t instanceof Error?t.message:String(t)}}}async function q(r){const{req:t,res:e,baseUrl:n,model:o,apiKey:a,messages:i,system:d}=r,l=`${n.replace(/\/+$/,"")}/chat/completions`,m=[{role:"system",content:d},...i],g=new AbortController,v=setTimeout(()=>g.abort(),_);t.on("close",()=>g.abort()),e.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"});let b=!1;const f=s=>{if(!b)try{e.write(`data: ${JSON.stringify(s)}
 
-`)}catch{}},K=()=>{if(!b){b=!0;try{t.write(`data: {"done":true}
+`)}catch{}},D=()=>{if(!b){b=!0;try{e.write(`data: {"done":true}
 
-`),t.end()}catch{}}},g=streamMemoKey(u,a),M={url:u,apiKey:n,model:a,messages:m,signal:l.signal};try{if(!streamSupported(g)){const c=await E(M);c.ok?d({delta:c.content}):d({error:c.error});return}const s=await fetch(u,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${n}`},body:JSON.stringify({model:a,stream:!0,messages:m}),signal:l.signal});if(!s.ok||!s.body){const c=await s.text().catch(()=>""),h=await E(M);h.ok?(rememberStreamSupport(g,!1),d({delta:h.content})):d({error:`upstream ${s.status}${c?`: ${c.slice(0,300)}`:""}`});return}if(!(s.headers.get("content-type")??"").includes("text/event-stream")){const c=A(await s.json().catch(()=>null));rememberStreamSupport(g,!1),d(c===null?{error:"upstream returned no content"}:{delta:c});return}rememberStreamSupport(g,!0);const U=s.body.getReader(),D=new TextDecoder;let y="";for(;;){const{done:c,value:h}=await U.read();if(c)break;y+=D.decode(h,{stream:!0});let w;for(;(w=y.indexOf(`
-`))>=0;){const $=y.slice(0,w).trim();if(y=y.slice(w+1),!$.startsWith("data:"))continue;const T=$.slice(5).trim();if(T==="[DONE]")return;try{const x=A(JSON.parse(T));x!==null&&d({delta:x})}catch{}}}}catch(s){d({error:s instanceof Error?s.message:String(s)})}finally{clearTimeout(_),K()}}
+`),e.end()}catch{}}},y=streamMemoKey(l,o),k={url:l,apiKey:a,model:o,messages:m,signal:g.signal};try{if(!streamSupported(y)){const c=await U(k);c.ok?f({delta:c.content}):f({error:c.error});return}const s=await fetch(l,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${a}`},body:JSON.stringify({model:o,stream:!0,messages:m}),signal:g.signal});if(!s.ok||!s.body){const c=await s.text().catch(()=>""),h=await U(k);h.ok?(rememberStreamSupport(y,!1),f({delta:h.content})):f({error:`upstream ${s.status}${c?`: ${c.slice(0,300)}`:""}`});return}if(!(s.headers.get("content-type")??"").includes("text/event-stream")){const c=$(await s.json().catch(()=>null));rememberStreamSupport(y,!1),f(c===null?{error:"upstream returned no content"}:{delta:c});return}rememberStreamSupport(y,!0);const E=s.body.getReader(),N=new TextDecoder;let p="";for(;;){const{done:c,value:h}=await E.read();if(c)break;p+=N.decode(h,{stream:!0});let S;for(;(S=p.indexOf(`
+`))>=0;){const x=p.slice(0,S).trim();if(p=p.slice(S+1),!x.startsWith("data:"))continue;const A=x.slice(5).trim();if(A==="[DONE]")return;try{const K=$(JSON.parse(A));K!==null&&f({delta:K})}catch{}}}}catch(s){f({error:s instanceof Error?s.message:String(s)})}finally{clearTimeout(v),D()}}

package/node_modules/@weavecode/server/dist/daemon/api-log.d.ts

@@ -23,6 +23,8 @@ export interface ApiLogQuery {
     status?: number;
     limit?: number;
 }
+/** 路径里的凭据段脱敏：webhook token 就是一条可直接重放的凭证，绝不落盘。 */
+export declare function maskPath(url: string): string;
 /** 本地小时戳文件名：`api-YYYY-MM-DDTHH.jsonl`。 */
 export declare function logFileFor(dir: string, at: Date): string;
 export declare function noteRequestBody(req: IncomingMessage, text: string): void;

package/node_modules/@weavecode/server/dist/daemon/api-log.js

@@ -1,3 +1,3 @@
-import{appendFile as F,mkdir as L,readdir as T,readFile as N,rm as j}from"node:fs/promises";import g from"node:path";import{getApiLogsDir as x}from"../db/paths.js";const w=8*1024,C=2e3,b=50,D=6;export const MAX_LOG_FILES=24;const I=200,O=1e3,H=new Set(["password","apikey","token","secret","authorization","cookie","x-weave-local"]);function y(n,t=0){if(typeof n=="string")return n.length>C?`[truncated ${n.length} chars]`:n;if(Array.isArray(n)){if(t>=D)return"[depth-limited]";const e=n.slice(0,b).map(i=>y(i,t+1));return n.length>b&&e.push(`[truncated ${n.length-b} items]`),e}if(n&&typeof n=="object"){if(t>=D)return"[depth-limited]";const e={};for(const[i,a]of Object.entries(n))e[i]=H.has(i.toLowerCase())?"[redacted]":y(a,t+1);return e}return n}function M(n,t){if(t>w)return`[truncated body ${t} bytes]`;try{return y(JSON.parse(n))}catch{return y(n)}}export function logFileFor(n,t){const e=a=>String(a).padStart(2,"0"),i=`${t.getFullYear()}-${e(t.getMonth()+1)}-${e(t.getDate())}T${e(t.getHours())}`;return g.join(n,`api-${i}.jsonl`)}function _(n){const t=g.basename(n).match(/^api-(\d{4}-\d{2}-\d{2}T\d{2})\.jsonl$/);return t?t[1]:null}const E=new WeakMap;export function noteRequestBody(n,t){E.get(n)?.(t)}export class ApiLogger{dir;chain=Promise.resolve();constructor(t={}){this.dir=t.dir??x()}begin(t,e){const i=Date.now(),a=[];let u=0,c=0,d="",h=0,l=!1;E.set(t,r=>{d=r,h=Buffer.byteLength(r,"utf8")});const f=r=>{const o=Buffer.isBuffer(r)?r:Buffer.from(typeof r=="string"?r:String(r??""),"utf8");if(c+=o.length,u<w){const s=o.subarray(0,w-u);a.push(s),u+=s.length}},m=e.write.bind(e),$=e.end.bind(e);let A="";const B=e.writeHead.bind(e);e.writeHead=((...r)=>{const o=r[1];if(o&&typeof o=="object"&&!Array.isArray(o)){const s=o,p=s["content-type"]??s["Content-Type"];typeof p=="string"&&(A=p)}return B(...r)}),e.write=((r,...o)=>(f(r),m(r,...o))),e.end=((r,...o)=>(typeof r!="function"&&r!=null&&f(r),$(r,...o)));const S=()=>{if(l)return;l=!0;const o=(String(e.getHeader("content-type")??"")||A).includes("event-stream"),s={ts:new Date(i).toISOString(),method:t.method??"GET",path:t.url??"/",status:e.statusCode,durationMs:Date.now()-i,ip:(t.socket?.remoteAddress??"").replace(/^::ffff:/,""),resBytes:c},p=t.headers["user-agent"];typeof p=="string"&&p&&(s.ua=p.slice(0,120)),h&&(s.req=M(d,h)),o?s.stream=!0:c&&(s.res=M(Buffer.concat(a).toString("utf8"),c)),e.writableEnded||(s.aborted=!0),this.write(logFileFor(this.dir,new Date(i)),`${JSON.stringify(s)}
-`)};e.on("finish",S),e.on("close",S)}write(t,e){this.chain=this.chain.then(async()=>{try{await L(this.dir,{recursive:!0}),await F(t,e,"utf8"),await this.purge()}catch{}})}async purge(){const t=(await T(this.dir)).filter(e=>_(e)!=null);if(!(t.length<=MAX_LOG_FILES)){t.sort();for(const e of t.slice(0,t.length-MAX_LOG_FILES))await j(g.join(this.dir,e),{force:!0})}}onIdle(){return this.chain}async query(t){const e=(await T(this.dir).catch(()=>[])).filter(d=>_(d)!=null).sort().reverse(),i=Math.min(Math.max(t.limit??I,1),O),a=t.from?Date.parse(t.from):NaN,u=t.to?Date.parse(t.to):NaN,c=[];for(const d of e){if(c.length>=i)break;const h=await N(g.join(this.dir,d),"utf8").catch(()=>"");for(const l of h.split(`
-`).reverse()){if(!l.trim())continue;let f;try{f=JSON.parse(l)}catch{continue}const m=Date.parse(f.ts);if(!(Number.isFinite(a)&&m<a)&&!(Number.isFinite(u)&&m>u)&&!(t.status!=null&&f.status!==t.status)&&!(t.method&&f.method.toUpperCase()!==t.method.toUpperCase())&&!(t.path&&!f.path.includes(t.path))&&(c.push(f),c.length>=i))break}}return{entries:c,files:e.length}}}
+import{appendFile as B,mkdir as L,readdir as k,readFile as M,rm as O}from"node:fs/promises";import g from"node:path";import{getApiLogsDir as v}from"../db/paths.js";const y=8*1024,C=2e3,w=50,D=6;export const MAX_LOG_FILES=24;const H=200,T=1e3,E=new Set(["password","apikey","token","secret","authorization","cookie","x-weave-local"]);function m(r,t=0){if(typeof r=="string")return r.length>C?`[truncated ${r.length} chars]`:r;if(Array.isArray(r)){if(t>=D)return"[depth-limited]";const e=r.slice(0,w).map(n=>m(n,t+1));return r.length>w&&e.push(`[truncated ${r.length-w} items]`),e}if(r&&typeof r=="object"){if(t>=D)return"[depth-limited]";const e={};for(const[n,o]of Object.entries(r))e[n]=E.has(n.toLowerCase())?"[redacted]":m(o,t+1);return e}return r}function N(r,t){if(t>y)return`[truncated body ${t} bytes]`;try{return m(JSON.parse(r))}catch{return m(r)}}export function maskPath(r){return r.replace(/^(\/webhooks\/orchestrate\/)[^?]+/,"$1[redacted]")}export function logFileFor(r,t){const e=o=>String(o).padStart(2,"0"),n=`${t.getFullYear()}-${e(t.getMonth()+1)}-${e(t.getDate())}T${e(t.getHours())}`;return g.join(r,`api-${n}.jsonl`)}function j(r){const t=g.basename(r).match(/^api-(\d{4}-\d{2}-\d{2}T\d{2})\.jsonl$/);return t?t[1]:null}const A=new WeakMap;export function noteRequestBody(r,t){A.get(r)?.(t)}export class ApiLogger{dir;chain=Promise.resolve();constructor(t={}){this.dir=t.dir??v()}begin(t,e){const n=Date.now(),o=[];let f=0,a=0,h="",d=0,l=!1;A.set(t,i=>{h=i,d=Buffer.byteLength(i,"utf8")});const c=i=>{const s=Buffer.isBuffer(i)?i:Buffer.from(typeof i=="string"?i:String(i??""),"utf8");if(a+=s.length,f<y){const u=s.subarray(0,y-f);o.push(u),f+=u.length}},p=e.write.bind(e),F=e.end.bind(e);let b="";const x=e.writeHead.bind(e);e.writeHead=((...i)=>{const s=i[1];if(s&&typeof s=="object"&&!Array.isArray(s)){const u=s,$=u["content-type"]??u["Content-Type"];typeof $=="string"&&(b=$)}return x(...i)}),e.write=((i,...s)=>(c(i),p(i,...s))),e.end=((i,...s)=>(typeof i!="function"&&i!=null&&c(i),F(i,...s)));const S=()=>{if(l)return;l=!0;const i=(String(e.getHeader("content-type")??"")||b).includes("event-stream"),s={ts:new Date(n).toISOString(),method:t.method??"GET",path:maskPath(t.url??"/"),status:e.statusCode,durationMs:Date.now()-n,ip:(t.socket?.remoteAddress??"").replace(/^::ffff:/,""),resBytes:a},u=t.headers["user-agent"];typeof u=="string"&&u&&(s.ua=u.slice(0,120)),d&&(s.req=N(h,d)),i?s.stream=!0:a&&(s.res=N(Buffer.concat(o).toString("utf8"),a)),e.writableEnded||(s.aborted=!0),this.write(logFileFor(this.dir,new Date(n)),`${JSON.stringify(s)}
+`)};e.on("finish",S),e.on("close",S)}write(t,e){this.chain=this.chain.then(async()=>{try{await L(this.dir,{recursive:!0}),await B(t,e,"utf8"),await this.purge()}catch{}})}async purge(){const t=(await k(this.dir)).filter(e=>j(e)!=null);if(!(t.length<=MAX_LOG_FILES)){t.sort();for(const e of t.slice(0,t.length-MAX_LOG_FILES))await O(g.join(this.dir,e),{force:!0})}}onIdle(){return this.chain}async query(t){const e=(await k(this.dir).catch(()=>[])).filter(h=>j(h)!=null).sort().reverse(),n=Math.min(Math.max(t.limit??H,1),T),o=t.from?Date.parse(t.from):NaN,f=t.to?Date.parse(t.to):NaN,a=[];for(const h of e){if(a.length>=n)break;const d=await M(g.join(this.dir,h),"utf8").catch(()=>"");for(const l of d.split(`
+`).reverse()){if(!l.trim())continue;let c;try{c=JSON.parse(l)}catch{continue}const p=Date.parse(c.ts);if(!(Number.isFinite(o)&&p<o)&&!(Number.isFinite(f)&&p>f)&&!(t.status!=null&&c.status!==t.status)&&!(t.method&&c.method.toUpperCase()!==t.method.toUpperCase())&&!(t.path&&!c.path.includes(t.path))&&(a.push(c),a.length>=n))break}}return{entries:a,files:e.length}}}

package/node_modules/@weavecode/server/dist/daemon/auth-routes.js

@@ -1 +1 @@
-import{clearedSessionCookie as c,sessionCookie as h}from"./dashboard-auth.js";import{readJson as i,sendJson as r}from"./http.js";const l=300,n=6,f=e=>new Promise(t=>setTimeout(t,e));export async function handleAuthRoutes(e,t,d,u){if(u!=="/auth"&&!u.startsWith("/auth/"))return!1;const o=d.auth;if(!o)return r(t,503,{error:"Auth subsystem unavailable"}),!0;if(u==="/auth/status"&&e.method==="GET")return r(t,200,{passwordSet:o.isPasswordSet(),authenticated:o.isAuthenticated(e.headers)}),!0;if(u==="/auth/login"&&e.method==="POST"){let s;try{s=await i(e)}catch{return r(t,400,{error:"Invalid JSON body"}),!0}const a=typeof s.password=="string"?s.password:"";return!a||!o.verifyPassword(a)?(await f(l),r(t,401,{error:"Invalid password"}),!0):(t.setHeader("set-cookie",h(o.issueSession())),r(t,200,{ok:!0}),!0)}if(u==="/auth/logout"&&e.method==="POST")return t.setHeader("set-cookie",c()),r(t,200,{ok:!0}),!0;if(u==="/auth/password"&&e.method==="PUT"){if(!o.isLocallyTrusted(e.headers))return r(t,401,{error:"Unauthorized (local token required)"}),!0;let s;try{s=await i(e)}catch{return r(t,400,{error:"Invalid JSON body"}),!0}const a=typeof s.next=="string"?s.next:"";return a.length<n?(r(t,400,{error:`Password must be at least ${n} characters`}),!0):(o.setPassword(a),r(t,200,{ok:!0}),!0)}return r(t,404,{error:"Not found"}),!0}
+import{clearedSessionCookie as h,sessionCookie as c}from"./dashboard-auth.js";import{readJson as i,sendJson as e}from"./http.js";const l=300,d=6,f=s=>new Promise(r=>setTimeout(r,s));export async function handleAuthRoutes(s,r,u,a){if(a!=="/auth"&&!a.startsWith("/auth/"))return!1;const t=u.auth;if(!t)return e(r,503,{error:"Auth subsystem unavailable"}),!0;if(a==="/auth/status"&&s.method==="GET")return e(r,200,{passwordSet:t.isPasswordSet(),authenticated:t.isAuthenticated(s.headers)}),!0;if(a==="/auth/login"&&s.method==="POST"){let o;try{o=await i(s)}catch{return e(r,400,{error:"Invalid JSON body"}),!0}const n=typeof o.password=="string"?o.password:"";return!n||!t.verifyPassword(n)?(await f(l),e(r,401,{error:"Invalid password"}),!0):(r.setHeader("set-cookie",c(t.issueSession())),e(r,200,{ok:!0}),!0)}if(a==="/auth/logout"&&s.method==="POST")return r.setHeader("set-cookie",h()),e(r,200,{ok:!0}),!0;if(a==="/auth/password"&&s.method==="PUT"){if(!t.isLocallyTrusted(s.headers))return e(r,401,{error:"Unauthorized (local token required)"}),!0;let o;try{o=await i(s)}catch{return e(r,400,{error:"Invalid JSON body"}),!0}const n=typeof o.next=="string"?o.next:"";return n.length<d?(e(r,400,{error:`Password must be at least ${d} characters`}),!0):(t.setPassword(n),e(r,200,{ok:!0}),!0)}return e(r,404,{error:"Not found"}),!0}

package/node_modules/@weavecode/server/dist/daemon/auto-start.js

@@ -1,17 +1,17 @@
-import{spawnSync as u}from"node:child_process";import{fileURLToPath as l}from"node:url";import{mkdirSync as a,writeFileSync as i,unlinkSync as s}from"node:fs";import{homedir as m}from"node:os";import r from"node:path";import{getDataDir as p}from"../db/paths.js";import{readDaemonSettingsSync as f}from"./settings.js";const o="weave-daemon",c="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";export function relaunchArgs(){return[process.execPath,...process.execArgv.map(t=>{if(t!=="tsx"&&!t.startsWith("tsx/"))return t;try{return l(import.meta.resolve(t))}catch{return t}}),r.resolve(process.argv[1]??process.argv[0])]}function d(t){return{platform:t.platform??process.platform,dataDir:t.dataDir??p(),home:t.home??m(),run:t.run??((e,n)=>({status:u(e,n,{stdio:"ignore"}).status}))}}function h(t){return t.map(e=>`"${e}"`).join(" ")}function y(t){const e=r.join(t.dataDir,"weave-autostart.vbs");a(t.dataDir,{recursive:!0});const n=h(relaunchArgs());i(e,`' Generated by weave \u2014 daemon auto-start. Do not edit.
-CreateObject("WScript.Shell").Run "${n.replace(/"/g,'""')}", 0, False
-`),t.run("reg",["add",c,"/v",o,"/t","REG_SZ","/d",`wscript.exe "${e}"`,"/f"])}function g(t){t.run("reg",["delete",c,"/v",o,"/f"]);try{s(r.join(t.dataDir,"weave-autostart.vbs"))}catch{}}function v(t){const e=n=>n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");return`<?xml version="1.0" encoding="UTF-8"?>
+import{spawnSync as p}from"node:child_process";import{fileURLToPath as m}from"node:url";import{mkdirSync as a,writeFileSync as i,unlinkSync as c}from"node:fs";import{homedir as l}from"node:os";import n from"node:path";import{getAutoStartScriptPath as s,getDataDir as d}from"../db/paths.js";import{readDaemonSettingsSync as f}from"./settings.js";const o="weave-daemon",u="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";export function relaunchArgs(){return[process.execPath,...process.execArgv.map(e=>{if(e!=="tsx"&&!e.startsWith("tsx/"))return e;try{return m(import.meta.resolve(e))}catch{return e}}),n.resolve(process.argv[1]??process.argv[0])]}function g(e){return{platform:e.platform??process.platform,dataDir:e.dataDir??d(),home:e.home??l(),run:e.run??((r,t)=>({status:p(r,t,{stdio:"ignore"}).status}))}}function h(e){return e.map(r=>`"${r}"`).join(" ")}function y(e){const r=s(e.dataDir);a(n.dirname(r),{recursive:!0});const t=h(relaunchArgs());i(r,`' Generated by weave \u2014 daemon auto-start. Do not edit.
+CreateObject("WScript.Shell").Run "${t.replace(/"/g,'""')}", 0, False
+`),e.run("reg",["add",u,"/v",o,"/t","REG_SZ","/d",`wscript.exe "${r}"`,"/f"])}function v(e){e.run("reg",["delete",u,"/v",o,"/f"]);try{c(s(e.dataDir))}catch{}}function w(e){const r=t=>t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");return`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
   <key>Label</key><string>com.weave.daemon</string>
   <key>ProgramArguments</key>
   <array>
-`+t.map(n=>`    <string>${e(n)}</string>`).join(`
+`+e.map(t=>`    <string>${r(t)}</string>`).join(`
 `)+`
   </array>
   <key>RunAtLoad</key><true/>
 </dict>
 </plist>
-`}function w(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");a(r.dirname(e),{recursive:!0}),i(e,v(relaunchArgs())),t.run("launchctl",["unload",e]),t.run("launchctl",["load",e])}function L(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");t.run("launchctl",["unload",e]);try{s(e)}catch{}}function D(t){return t.map(e=>/[\s"]/.test(e)?`"${e}"`:e).join(" ")}function b(t){const e=r.join(t.home,".config","autostart",`${o}.desktop`);a(r.dirname(e),{recursive:!0}),i(e,["[Desktop Entry]","Type=Application","Name=weave daemon",`Exec=${D(relaunchArgs())}`,"X-GNOME-Autostart-enabled=true",""].join(`
-`))}function k(t){try{s(r.join(t.home,".config","autostart",`${o}.desktop`))}catch{}}export function applyLaunchOnLogin(t,e={}){try{const n=d(e);n.platform==="win32"?t?y(n):g(n):n.platform==="darwin"?t?w(n):L(n):t?b(n):k(n)}catch(n){console.error(`[weave] auto-start ${t?"enable":"disable"} failed:`,n)}}export function syncLaunchOnLogin(t={}){const e=f().startup;applyLaunchOnLogin(e?.launchOnLogin??!1,t)}
+`}function L(e){const r=n.join(e.home,"Library","LaunchAgents","com.weave.daemon.plist");a(n.dirname(r),{recursive:!0}),i(r,w(relaunchArgs())),e.run("launchctl",["unload",r]),e.run("launchctl",["load",r])}function D(e){const r=n.join(e.home,"Library","LaunchAgents","com.weave.daemon.plist");e.run("launchctl",["unload",r]);try{c(r)}catch{}}function S(e){return e.map(r=>/[\s"]/.test(r)?`"${r}"`:r).join(" ")}function k(e){const r=n.join(e.home,".config","autostart",`${o}.desktop`);a(n.dirname(r),{recursive:!0}),i(r,["[Desktop Entry]","Type=Application","Name=weave daemon",`Exec=${S(relaunchArgs())}`,"X-GNOME-Autostart-enabled=true",""].join(`
+`))}function x(e){try{c(n.join(e.home,".config","autostart",`${o}.desktop`))}catch{}}export function applyLaunchOnLogin(e,r={}){try{const t=g(r);t.platform==="win32"?e?y(t):v(t):t.platform==="darwin"?e?L(t):D(t):e?k(t):x(t)}catch(t){console.error(`[weave] auto-start ${e?"enable":"disable"} failed:`,t)}}export function syncLaunchOnLogin(e={}){const r=f().startup;applyLaunchOnLogin(r?.launchOnLogin??!1,e)}

package/node_modules/@weavecode/server/dist/daemon/capture-routes.js

@@ -1 +1 @@
-import{z as n}from"zod";import{isHarness as f}from"@weavecode/core";import{WEAVE_VERSION as p}from"../version.js";import{readJson as d,sendJson as s}from"./http.js";import{captureSurfaces as i}from"../surfaces.js";const l=n.object({harness:n.string(),enabled:n.boolean()});export async function handleCaptureRoutes(o,t,u,c){if(c!=="/capture")return!1;if(o.method==="GET"){const e=await Promise.all(i().map(async({harness:a,surface:r})=>({harness:a,...await r.readUserCapture()})));return s(t,200,{rows:e}),!0}if(o.method==="PUT"){let e;try{e=l.parse(await d(o))}catch(r){return s(t,400,{error:r instanceof Error?r.message:"Invalid body"}),!0}if(!f(e.harness))return s(t,400,{error:`Unknown harness: ${e.harness}`}),!0;const a=i().find(r=>r.harness===e.harness);if(!a)return s(t,400,{error:`No capture surface for harness: ${e.harness}`}),!0;try{if(e.enabled){await a.surface.installUserCapture({version:p});for(const r of u.projects.list())await a.surface.stripProjectCapture(r.path)}else await a.surface.uninstallUserCapture();u.dataBus?.emit({key:"capture"}),s(t,200,{harness:a.harness,...await a.surface.readUserCapture()})}catch(r){s(t,400,{error:r instanceof Error?r.message:"Capture update failed"})}return!0}return s(t,405,{error:"Method not allowed"}),!0}
+import{z as o}from"zod";import{isHarness as f}from"@weavecode/core";import{WEAVE_VERSION as p}from"../version.js";import{readJson as h,sendJson as t}from"./http.js";import{captureSurfaces as u}from"../surfaces.js";const d=o.object({harness:o.string(),enabled:o.boolean()});export async function handleCaptureRoutes(n,s,i,c){if(c!=="/capture")return!1;if(n.method==="GET"){const e=await Promise.all(u().map(async({harness:a,surface:r})=>({harness:a,...await r.readUserCapture()})));return t(s,200,{rows:e}),!0}if(n.method==="PUT"){let e;try{e=d.parse(await h(n))}catch(r){return t(s,400,{error:r instanceof Error?r.message:"Invalid body"}),!0}if(!f(e.harness))return t(s,400,{error:`Unknown harness: ${e.harness}`}),!0;const a=u().find(r=>r.harness===e.harness);if(!a)return t(s,400,{error:`No capture surface for harness: ${e.harness}`}),!0;try{if(e.enabled){await a.surface.installUserCapture({version:p});for(const r of i.projects.list())await a.surface.stripProjectCapture(r.path)}else await a.surface.uninstallUserCapture();i.dataBus?.emit({key:"capture"}),t(s,200,{harness:a.harness,...await a.surface.readUserCapture()})}catch(r){t(s,400,{error:r instanceof Error?r.message:"Capture update failed"})}return!0}return t(s,405,{error:"Method not allowed"}),!0}

package/node_modules/@weavecode/server/dist/daemon/claude-liveness.d.ts

@@ -24,7 +24,7 @@ export declare const CLAUDE_REG_GRACE_MS = 90000;
  *   即进程已死；豁免窗内不猜（新会话文件可能还没落盘）；
  * - 「仅一条 SessionStart」的空壳行不判：/continue、compact 会各留一行
  *   幽灵会话（事件跟在新 id 后面流），判死会把活着的会谈错标 terminated；
- *   它们反正由 SessionSweeper 在保活期后清走；
+ *   它们交给 SessionSweeper 清（宿主丢弃的见 shellDiscardedByClaude，其余保活期后）；
  * - 其余（codex/未知 harness/新鲜会话）→ null，上游不判。
  */
 export declare function pidAliveOf(row: {
@@ -34,6 +34,21 @@ export declare function pidAliveOf(row: {
     lastEventType?: string | null;
     eventCount?: number;
 }, liveness: Map<string, boolean>, now?: number): boolean | null;
+/**
+ * 空壳会话（仅一条 SessionStart）是否已被宿主整个丢弃：claude 一句没说就退出时会把
+ * session id 连转录一起删——不发 SessionEnd、注册表自清。于是「查无登记 + 已过豁免窗」
+ * 就是再没有进程会以这个 id 发事件的证据，不必等满 1 小时保活期（用户原话：claude 那边
+ * 会话没了，weave 的会话列表却还留着）。
+ * 与 pidAliveOf 的「空壳不判」不冲突：那是状态面不猜，这里只决定清扫时机。
+ * 仍有登记的（活着的空闲会话 / 崩溃残留）一律不动，照旧走保活期。
+ */
+export declare function shellDiscardedByClaude(row: {
+    sessionId: string;
+    harness?: string | null;
+    lastSeenAt: string;
+    lastEventType?: string | null;
+    eventCount?: number;
+}, liveness: Map<string, boolean>, now?: number): boolean;
 /**
  * sessionId → 是否活着 的映射。只覆盖注册表里有登记的（claude 会话）；
  * codex/旧会话/他机会话不进图——上游把「查不到」当未知，不许误判死。

package/node_modules/@weavecode/server/dist/daemon/claude-liveness.js

@@ -1 +1 @@
-import{readdirSync as c,readFileSync as l}from"node:fs";import{join as u}from"node:path";export function parseClaudeSessionReg(e){let t;try{t=JSON.parse(e)}catch{return null}const n=t;return typeof n?.pid!="number"||!Number.isInteger(n.pid)||n.pid<0||typeof n.sessionId!="string"||!n.sessionId?null:{pid:n.pid,sessionId:n.sessionId}}export function pidAlive(e){try{return process.kill(e,0),!0}catch(t){return t.code!=="ESRCH"}}function a(){const e=process.platform==="win32"?process.env.USERPROFILE:process.env.HOME;return e?u(e,".claude","sessions"):null}export const CLAUDE_REG_GRACE_MS=9e4;export function pidAliveOf(e,t,n=Date.now()){const r=t.get(e.sessionId);if(r!==void 0)return r;if(e.harness!=="claude"||e.lastEventType==="SessionStart"&&(e.eventCount??0)<=1)return null;const s=Date.parse(e.lastSeenAt);return!Number.isFinite(s)||n-s<CLAUDE_REG_GRACE_MS?null:!1}export function claudeLivenessById(e=null){const t=e??a(),n=new Map;if(!t)return n;let r;try{r=c(t)}catch{return n}for(const s of r){if(!/^\d+\.json$/.test(s))continue;let o;try{o=l(u(t,s),"utf8")}catch{continue}const i=parseClaudeSessionReg(o);i&&n.set(i.sessionId,pidAlive(i.pid))}return n}
+import{readdirSync as c,readFileSync as a}from"node:fs";import{join as u}from"node:path";export function parseClaudeSessionReg(e){let n;try{n=JSON.parse(e)}catch{return null}const t=n;return typeof t?.pid!="number"||!Number.isInteger(t.pid)||t.pid<0||typeof t.sessionId!="string"||!t.sessionId?null:{pid:t.pid,sessionId:t.sessionId}}export function pidAlive(e){try{return process.kill(e,0),!0}catch(n){return n.code!=="ESRCH"}}function l(){const e=process.platform==="win32"?process.env.USERPROFILE:process.env.HOME;return e?u(e,".claude","sessions"):null}export const CLAUDE_REG_GRACE_MS=9e4;export function pidAliveOf(e,n,t=Date.now()){const s=n.get(e.sessionId);if(s!==void 0)return s;if(e.harness!=="claude"||e.lastEventType==="SessionStart"&&(e.eventCount??0)<=1)return null;const r=Date.parse(e.lastSeenAt);return!Number.isFinite(r)||t-r<CLAUDE_REG_GRACE_MS?null:!1}export function shellDiscardedByClaude(e,n,t=Date.now()){if(e.harness!=="claude"||e.lastEventType!=="SessionStart"||(e.eventCount??0)>1||n.has(e.sessionId))return!1;const s=Date.parse(e.lastSeenAt);return Number.isFinite(s)&&t-s>=CLAUDE_REG_GRACE_MS}export function claudeLivenessById(e=null){const n=e??l(),t=new Map;if(!n)return t;let s;try{s=c(n)}catch{return t}for(const r of s){if(!/^\d+\.json$/.test(r))continue;let i;try{i=a(u(n,r),"utf8")}catch{continue}const o=parseClaudeSessionReg(i);o&&t.set(o.sessionId,pidAlive(o.pid))}return t}

package/node_modules/@weavecode/server/dist/daemon/config-routes.d.ts

@@ -0,0 +1,10 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from './server.js';
+/**
+ * 资源管理 · harness 配置面（`/harness-config/*`）。
+ *
+ * 词表/落点/托管键/模型接口文法全归 harness 的 config 槽；这里只做「取档 → 读改写 →
+ * 快照与漂移」的装配。profile 快照落 `local/harness-config/<harness>/`，
+ * 写盘一律留备份。
+ */
+export declare function handleConfigRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string, url: URL): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/config-routes.js

@@ -0,0 +1 @@
+import{homedir as j}from"node:os";import{access as U}from"node:fs/promises";import{isHarness as E}from"@weavecode/core";import{configSurfaceFor as v}from"../surfaces.js";import{applyUpdates as S}from"../config/dotted.js";import{createProfile as T,listBackups as N,listProfiles as h,readBackup as O,readSnapshot as b,removeProfile as x,renameProfile as J,pushBackup as k,saveProfile as B,setActive as C}from"../config/profiles.js";import{readBody as K,sendJson as a}from"./http.js";import{getHarnessConfigDir as $}from"../db/paths.js";const L=["user","project","projectLocal","global"];function I(s){return typeof s=="string"&&L.includes(s)?s:null}function P(s,e){return s.serializeRaw(e)}function R(s,e,l){const p=s.files(l).find(d=>d.id===e);return p?p.path(l):""}async function A(s){try{const e=JSON.parse(await K(s));return typeof e=="object"&&e!==null&&!Array.isArray(e)?e:null}catch{return null}}async function V(s){if(!s)return!1;try{return await U(s),!0}catch{return!1}}async function F(s,e,l,p,d){const i=R(l,p,d),n=await l.read(p,d),t=P(l,n),r=await h(s,e,p),u=r.activeId?await b(s,e,p,r.activeId):null,o=u?P(l,u):null;return{harness:e,file:p,path:i,exists:await V(i),values:n,managedKeys:l.managedKeys(n),managedEntries:l.managedEntries(n),profiles:r.profiles,activeId:r.activeId,liveText:t,activeText:o,drifted:o!==null&&o!==t,backups:await N(s,e,p)}}function D(s,e,l){let p=null;if(e==="project"||e==="projectLocal"){const d=Number(l);if(!Number.isInteger(d)||d<=0)return"\u9700\u8981 projectId";const i=s.projects.getById(d);if(!i)return"\u9879\u76EE\u4E0D\u5B58\u5728";p=i.path}return{projectPath:p,homedir:j()}}export async function handleConfigRoutes(s,e,l,p,d){if(!p.startsWith("/harness-config"))return!1;const i=$();if(p==="/harness-config/catalog"&&s.method==="GET"){const n=d.searchParams.get("harness");if(!E(n))return a(e,400,{error:"Unknown harness"}),!0;const t=v(n);if(!t)return a(e,200,{supported:!1}),!0;const r=I(d.searchParams.get("file"))??"user",u={projectPath:null,homedir:j()},o=t.catalog(r);return a(e,200,{supported:!0,harness:n,file:r,rawFormat:t.rawFormat,files:t.files(u).map(c=>({id:c.id,profiles:c.profiles})),groups:o.groups,keys:o.keys,envVars:o.envVars}),!0}if(p==="/harness-config"&&s.method==="GET"){const n=d.searchParams.get("harness"),t=I(d.searchParams.get("file"));if(!E(n)||!t)return a(e,400,{error:"Unknown harness or file"}),!0;const r=v(n);if(!r)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const u=D(l,t,d.searchParams.get("projectId"));return typeof u=="string"?(a(e,400,{error:u}),!0):(a(e,200,await F(i,n,r,t,u)),!0)}if(p==="/harness-config/values"&&s.method==="PUT"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file);if(!E(t)||!r)return a(e,400,{error:"Unknown harness or file"}),!0;const u=v(t);if(!u)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=D(l,r,n.projectId);if(typeof o=="string")return a(e,400,{error:o}),!0;const c=Array.isArray(n.updates)?n.updates:null;if(!c)return a(e,400,{error:'Missing "updates"'}),!0;try{const f=await u.read(r,o),m=S(f,c);await k(i,t,r,f),await u.write(r,o,m);const w=await h(i,t,r);w.activeId&&await B(i,t,r,w.activeId,m)}catch(f){return a(e,400,{error:f.message}),!0}return a(e,200,await F(i,t,u,r,o)),!0}if(p==="/harness-config/raw"&&s.method==="PUT"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file);if(!E(t)||!r)return a(e,400,{error:"Unknown harness or file"}),!0;const u=v(t);if(!u)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=D(l,r,n.projectId);if(typeof o=="string")return a(e,400,{error:o}),!0;let c;try{c=u.parseRaw(String(n.text??""))}catch(f){return a(e,400,{error:`\u4E0D\u662F\u5408\u6CD5${u.rawFormat==="toml"?" TOML":" JSON"}\uFF1A${f.message}`}),!0}try{const f=await u.read(r,o);await k(i,t,r,f),await u.write(r,o,c);const m=await h(i,t,r);m.activeId&&await B(i,t,r,m.activeId,await u.read(r,o))}catch(f){return a(e,400,{error:f.message}),!0}return a(e,200,await F(i,t,u,r,o)),!0}if(p==="/harness-config/profile"&&s.method==="POST"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file),u=n.action;if(!E(t)||!r||typeof u!="string")return a(e,400,{error:"Unknown harness, file or action"}),!0;const o=v(t);if(!o)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const c=D(l,r,n.projectId);if(typeof c=="string")return a(e,400,{error:c}),!0;const f=typeof n.id=="string"?n.id:"",m=typeof n.name=="string"?n.name.trim():"";switch(u){case"list":{const w=await h(i,t,r);return a(e,200,w),!0}case"create":{const w=await h(i,t,r),g=await T(i,t,r,m||`\u914D\u7F6E ${w.profiles.length+1}`,await o.read(r,c));return a(e,200,{profile:g,state:await h(i,t,r)}),!0}case"save":return(await h(i,t,r)).profiles.some(w=>w.id===f)?(await B(i,t,r,f,await o.read(r,c)),a(e,200,await h(i,t,r)),!0):(a(e,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0);case"duplicate":{const w=await b(i,t,r,f);if(!w)return a(e,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0;const g=await h(i,t,r),y=await T(i,t,r,m||`\u914D\u7F6E ${g.profiles.length+1}`,w);return a(e,200,{profile:y,state:await h(i,t,r)}),!0}case"rename":return m?(await J(i,t,r,f,m),a(e,200,await h(i,t,r)),!0):(a(e,400,{error:"\u7F3A\u5C11\u540D\u79F0"}),!0);case"remove":return await x(i,t,r,f),a(e,200,await h(i,t,r)),!0;case"activate":{const w=await b(i,t,r,f);if(!w)return a(e,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0;const g=await o.read(r,c);if(n.confirm!==!0)return a(e,200,{requiresConfirm:!0,liveText:P(o,g),profileText:P(o,w)}),!0;try{await k(i,t,r,g),await o.write(r,c,w),await C(i,t,r,f)}catch(y){return a(e,400,{error:y.message}),!0}return a(e,200,await F(i,t,o,r,c)),!0}case"acceptDrift":return await B(i,t,r,f,await o.read(r,c)),a(e,200,await F(i,t,o,r,c)),!0;case"restoreBackup":{const w=typeof n.backupId=="string"?n.backupId:"",g=await O(i,t,r,w);if(!g)return a(e,404,{error:"\u5907\u4EFD\u4E0D\u5B58\u5728"}),!0;try{await k(i,t,r,await o.read(r,c)),await o.write(r,c,g);const y=await h(i,t,r);y.activeId&&await B(i,t,r,y.activeId,g)}catch(y){return a(e,400,{error:y.message}),!0}return a(e,200,await F(i,t,o,r,c)),!0}default:return a(e,400,{error:`\u672A\u77E5\u52A8\u4F5C\uFF1A${u}`}),!0}}if(p==="/harness-config/models"&&s.method==="POST"){const n=await A(s);if(!n)return a(e,400,{error:"Invalid JSON body"}),!0;const t=n.harness,r=I(n.file)??"user";if(!E(t))return a(e,400,{error:"Unknown harness"}),!0;const u=v(t);if(!u)return a(e,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=D(l,r,n.projectId);if(typeof o=="string")return a(e,400,{error:o}),!0;try{const c=await u.read(r,o),f=await u.models({values:c,baseUrl:typeof n.baseUrl=="string"?n.baseUrl:null,apiKey:typeof n.apiKey=="string"?n.apiKey:null,authToken:typeof n.authToken=="string"?n.authToken:null});a(e,200,f)}catch(c){a(e,502,{error:c.message})}return!0}return a(e,404,{error:"Not found"}),!0}

package/node_modules/@weavecode/server/dist/daemon/cron.d.ts

@@ -0,0 +1,20 @@
+/**
+ * 5 字段 cron（分 时 日 月 周，本机时区，无秒/无 @macro）。解析器只在 server：
+ * web 的 cron 构建器结构上只产出合法表达式，不镜像解析逻辑。
+ * 日/周同时受限时按 vixie cron 的 OR 语义（任一命中即算）。
+ */
+export interface CronSchedule {
+    minutes: number[];
+    hours: number[];
+    doms: number[];
+    months: number[];
+    dows: number[];
+    domAny: boolean;
+    dowAny: boolean;
+}
+export declare function parseCron(expr: string): CronSchedule | null;
+export declare function matchesMinute(s: CronSchedule, at: Date): boolean;
+/** 下一次触发时刻（ISO）；一年内无解（如 2 月 30 日）→ null。 */
+export declare function nextRunAt(s: CronSchedule, from?: Date): string | null;
+/** 去重键：本地分钟（`last_cron_at` 落它，同一分钟只 fire 一次）。 */
+export declare function minuteKey(at: Date): string;

package/node_modules/@weavecode/server/dist/daemon/cron.js

@@ -0,0 +1 @@
+const d=[{min:0,max:59},{min:0,max:23},{min:1,max:31},{min:1,max:12},{min:0,max:7}];export function parseCron(n){const t=n.trim().split(/\s+/);if(t.length!==5)return null;const e=[];for(let s=0;s<5;s++){const u=a(t[s],d[s].min,d[s].max);if(!u)return null;e.push(u)}const o=[...new Set(e[4].map(s=>s===7?0:s))].sort((s,u)=>s-u);return{minutes:e[0],hours:e[1],doms:e[2],months:e[3],dows:o,domAny:t[2]==="*",dowAny:t[4]==="*"}}function a(n,t,e){const o=new Set;for(const s of n.split(",")){const[u,c]=s.split("/");if(u===void 0)return null;const m=c===void 0?1:Number(c);if(!Number.isInteger(m)||m<1||m>e)return null;let i,r;if(u==="*")i=t,r=e;else if(u.includes("-")){const[l,f]=u.split("-");i=Number(l),r=Number(f)}else i=Number(u),r=c===void 0?i:e;if(!Number.isInteger(i)||!Number.isInteger(r)||i<t||r>e||i>r)return null;for(let l=i;l<=r;l+=m)o.add(l)}return o.size===0?null:[...o].sort((s,u)=>s-u)}function g(n,t){const e=n.doms.includes(t.getDate()),o=n.dows.includes(t.getDay());return n.domAny&&n.dowAny?!0:n.domAny?o:n.dowAny?e:e||o}export function matchesMinute(n,t){return n.minutes.includes(t.getMinutes())&&n.hours.includes(t.getHours())&&n.months.includes(t.getMonth()+1)&&g(n,t)}export function nextRunAt(n,t=new Date){const e=new Date(t.getTime());e.setSeconds(0,0),e.setMinutes(e.getMinutes()+1);const o=new Date(t.getTime()+366*864e5);for(;e<=o;){if(!n.months.includes(e.getMonth()+1)){e.setMonth(e.getMonth()+1,1),e.setHours(0,0,0,0);continue}if(!g(n,e)){e.setDate(e.getDate()+1),e.setHours(0,0,0,0);continue}if(!n.hours.includes(e.getHours())){e.setHours(e.getHours()+1,0,0,0);continue}if(!n.minutes.includes(e.getMinutes())){e.setMinutes(e.getMinutes()+1,0,0);continue}return e.toISOString()}return null}export function minuteKey(n){const t=e=>String(e).padStart(2,"0");return`${n.getFullYear()}-${t(n.getMonth()+1)}-${t(n.getDate())}T${t(n.getHours())}:${t(n.getMinutes())}`}

package/node_modules/@weavecode/server/dist/daemon/dashboard-auth.js

@@ -1,3 +1,3 @@
-import{createHmac as d,randomBytes as s,randomInt as m,scryptSync as o,timingSafeEqual as w}from"node:crypto";import{chmodSync as g,existsSync as p,mkdirSync as a,readFileSync as y,renameSync as P,rmSync as x,writeFileSync as c}from"node:fs";import h from"node:path";import{getAuthPath as k,getInitialPasswordPath as A}from"../db/paths.js";export const SESSION_COOKIE="weave_session",LOCAL_TOKEN_HEADER="x-weave-local",SESSION_TTL_MS=720*60*60*1e3;const u=64,T=16,l="abcdefghjkmnpqrstuvwxyz23456789";export function generatePassword(){const r=()=>Array.from({length:4},()=>l[m(l.length)]??"a").join("");return[r(),r(),r(),r()].join("-")}function f(r,t){const e=s(T).toString("hex");return{algo:"scrypt",salt:e,hash:o(r,e,u).toString("hex"),updatedAt:t}}function i(r,t){const e=Buffer.from(r),n=Buffer.from(t);return e.length===n.length&&w(e,n)}export function readCookie(r,t){if(r)for(const e of r.split(";")){const n=e.indexOf("=");if(!(n<0)&&e.slice(0,n).trim()===t)return e.slice(n+1).trim()}}export function sessionCookie(r){return`${SESSION_COOKIE}=${r}; HttpOnly; SameSite=Lax; Path=/; Max-Age=${Math.floor(SESSION_TTL_MS/1e3)}`}export function clearedSessionCookie(){return`${SESSION_COOKIE}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`}function O(r){if(!p(r))return null;try{const t=JSON.parse(y(r,"utf8"));return t?.version!==1||typeof t.sessionSecret!="string"||typeof t.localToken!="string"?null:{version:1,password:t.password??null,sessionSecret:t.sessionSecret,localToken:t.localToken,createdAt:typeof t.createdAt=="string"?t.createdAt:new Date().toISOString()}}catch{return null}}function S(r,t){a(h.dirname(r),{recursive:!0});const e=`${r}.tmp`;c(e,`${JSON.stringify(t,null,2)}
-`,{encoding:"utf8",mode:384}),P(e,r);try{g(r,384)}catch{}}export class AuthService{file;authPath;markerPath;now;initialPassword;constructor(t={}){this.authPath=t.authPath??k(),this.markerPath=t.initialPasswordPath??A(),this.now=t.now??Date.now;const e=O(this.authPath);if(e){this.file=e,this.initialPassword=null;return}const n=generatePassword();this.file={version:1,password:f(n,this.nowIso()),sessionSecret:s(32).toString("hex"),localToken:s(24).toString("hex"),createdAt:this.nowIso()},S(this.authPath,this.file),this.writeMarker(n),this.initialPassword=n}isPasswordSet(){return this.file.password!==null}verifyPassword(t){const e=this.file.password;return e?i(o(t,e.salt,u).toString("hex"),e.hash):!1}setPassword(t){this.file={...this.file,password:f(t,this.nowIso()),sessionSecret:s(32).toString("hex")},S(this.authPath,this.file),x(this.markerPath,{force:!0})}getLocalToken(){return this.file.localToken}verifyLocalToken(t){return typeof t=="string"&&t!==""&&i(t,this.file.localToken)}issueSession(){const t=this.now()+SESSION_TTL_MS;return`${t}.${this.sign(t)}`}verifySession(t){if(!t)return!1;const e=t.indexOf(".");if(e<=0)return!1;const n=Number(t.slice(0,e));return!Number.isFinite(n)||n<=this.now()?!1:i(t.slice(e+1),this.sign(n))}isAuthenticated(t){return this.isLocallyTrusted(t)?!0:this.verifySession(readCookie(t.cookie,SESSION_COOKIE))}isLocallyTrusted(t){const e=t[LOCAL_TOKEN_HEADER];return this.verifyLocalToken(typeof e=="string"?e:void 0)}sign(t){return d("sha256",this.file.sessionSecret).update(`weave-session:${t}`).digest("hex")}nowIso(){return new Date(this.now()).toISOString()}writeMarker(t){a(h.dirname(this.markerPath),{recursive:!0}),c(this.markerPath,`${t}
+import{createHmac as d,randomBytes as n,randomInt as m,scryptSync as o,timingSafeEqual as w}from"node:crypto";import{chmodSync as g,existsSync as p,mkdirSync as a,readFileSync as y,renameSync as P,rmSync as k,writeFileSync as c}from"node:fs";import h from"node:path";import{getAuthPath as x,getInitialPasswordPath as v}from"../db/paths.js";export const SESSION_COOKIE="weave_session",LOCAL_TOKEN_HEADER="x-weave-local",SESSION_TTL_MS=720*60*60*1e3;const l=64,O=16,u="abcdefghjkmnpqrstuvwxyz23456789";export function generatePassword(){const s=()=>Array.from({length:4},()=>u[m(u.length)]??"a").join("");return[s(),s(),s(),s()].join("-")}function f(s,t){const e=n(O).toString("hex");return{algo:"scrypt",salt:e,hash:o(s,e,l).toString("hex"),updatedAt:t}}function r(s,t){const e=Buffer.from(s),i=Buffer.from(t);return e.length===i.length&&w(e,i)}export function readCookie(s,t){if(s)for(const e of s.split(";")){const i=e.indexOf("=");if(!(i<0)&&e.slice(0,i).trim()===t)return e.slice(i+1).trim()}}export function sessionCookie(s){return`${SESSION_COOKIE}=${s}; HttpOnly; SameSite=Lax; Path=/; Max-Age=${Math.floor(SESSION_TTL_MS/1e3)}`}export function clearedSessionCookie(){return`${SESSION_COOKIE}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`}function T(s){if(!p(s))return null;try{const t=JSON.parse(y(s,"utf8"));return t?.version!==1||typeof t.sessionSecret!="string"||typeof t.localToken!="string"?null:{version:1,password:t.password??null,sessionSecret:t.sessionSecret,localToken:t.localToken,createdAt:typeof t.createdAt=="string"?t.createdAt:new Date().toISOString()}}catch{return null}}function S(s,t){a(h.dirname(s),{recursive:!0});const e=`${s}.tmp`;c(e,`${JSON.stringify(t,null,2)}
+`,{encoding:"utf8",mode:384}),P(e,s);try{g(s,384)}catch{}}export class AuthService{file;authPath;markerPath;now;initialPassword;constructor(t={}){this.authPath=t.authPath??x(),this.markerPath=t.initialPasswordPath??v(),this.now=t.now??Date.now;const e=T(this.authPath);if(e){this.file=e,this.initialPassword=null;return}const i=generatePassword();this.file={version:1,password:f(i,this.nowIso()),sessionSecret:n(32).toString("hex"),localToken:n(24).toString("hex"),createdAt:this.nowIso()},S(this.authPath,this.file),this.writeMarker(i),this.initialPassword=i}isPasswordSet(){return this.file.password!==null}verifyPassword(t){const e=this.file.password;return e?r(o(t,e.salt,l).toString("hex"),e.hash):!1}setPassword(t){this.file={...this.file,password:f(t,this.nowIso()),sessionSecret:n(32).toString("hex")},S(this.authPath,this.file),k(this.markerPath,{force:!0})}getLocalToken(){return this.file.localToken}verifyLocalToken(t){return typeof t=="string"&&t!==""&&r(t,this.file.localToken)}issueSession(){const t=this.now()+SESSION_TTL_MS;return`${t}.${this.sign(t)}`}verifySession(t){if(!t)return!1;const e=t.indexOf(".");if(e<=0)return!1;const i=Number(t.slice(0,e));return!Number.isFinite(i)||i<=this.now()?!1:r(t.slice(e+1),this.sign(i))}isAuthenticated(t){return this.isLocallyTrusted(t)?!0:this.verifySession(readCookie(t.cookie,SESSION_COOKIE))}isLocallyTrusted(t){const e=t[LOCAL_TOKEN_HEADER];return this.verifyLocalToken(typeof e=="string"?e:void 0)}sign(t){return d("sha256",this.file.sessionSecret).update(`weave-session:${t}`).digest("hex")}nowIso(){return new Date(this.now()).toISOString()}writeMarker(t){a(h.dirname(this.markerPath),{recursive:!0}),c(this.markerPath,`${t}
 `,{encoding:"utf8",mode:384})}}

package/node_modules/@weavecode/server/dist/daemon/dashboard-pusher.d.ts

@@ -0,0 +1,25 @@
+import type { HookEventBus } from '../hooks/bus.js';
+import type { HookEventRepository } from '../repositories/hook-events.js';
+import type { ProjectRepository } from '../repositories/projects.js';
+import type { SessionRepository } from '../repositories/sessions.js';
+import { type DashboardRateCache } from '../hooks/dashboard-rate.js';
+/** 图窗：1 小时 × 10 秒一格。 */
+export declare const DASHBOARD_WINDOW_MS = 3600000;
+export interface DashboardPushDeps {
+    rate: DashboardRateCache;
+    events: Pick<HookEventRepository, 'countAll' | 'countSince' | 'seriesBySecond'>;
+    sessions: Pick<SessionRepository, 'countAll'>;
+    projects: Pick<ProjectRepository, 'list'>;
+    bus: Pick<HookEventBus, 'emit' | 'subscribe'>;
+}
+/**
+ * 仪表盘推送（事件驱动）：
+ * - **连接时**（SseHub 首个订阅者 attach）先推总量，再把一小时历史按 10 分钟分块
+ *   流式推下去——每块一到前端就能画，不等整段查完；
+ * - **之后**只在真有 `event.ingested` 时推增量（1 秒合并），没有数据就不发帧；
+ * - 速率读进程内快照，只有 daemon 起来后第一次 attach 才回填一次库。
+ */
+export declare function startDashboardPusher(deps: DashboardPushDeps): {
+    attach: () => void;
+    stop: () => void;
+};

package/node_modules/@weavecode/server/dist/daemon/dashboard-pusher.js

@@ -0,0 +1 @@
+import{RATE_BUCKET_MS as s}from"../hooks/dashboard-rate.js";export const DASHBOARD_WINDOW_MS=36e5;const w=60,f=1e3,h=6e4;export function startDashboardPusher(e){let o=!1,c={projects:0,sessions:0},a=0;const r=()=>{c={projects:e.projects.list().length,sessions:e.sessions.countAll()},a=Date.now()},l=()=>({...c,...e.rate.totals}),p=()=>{queueMicrotask(()=>{const n=Date.now(),i=DASHBOARD_WINDOW_MS/s,u=Math.floor(n/s)*s-(i-1)*s,S=e.projects.list().map(t=>t.id);e.rate.isSeeded||(e.rate.seed(e.events.seriesBySecond(S,new Date(u).toISOString())),e.rate.seedTotals(e.events.countAll(),e.events.countSince(S,new Date(new Date(n).setHours(0,0,0,0)).toISOString())),r()),Date.now()-a>h&&r();const D=new Date(n).toISOString();e.bus.emit({kind:"dashboard.totals",at:D,totals:l()});for(let t=0;t<i;t+=w){const I=Math.min(w,i-t),b=u+t*s,g=e.rate.bucketsFor(b,I);e.bus.emit({kind:"dashboard.series",at:D,series:g.map((k,O)=>({at:new Date(b+O*s).toISOString().slice(0,19),n:k}))})}})},m=e.bus.subscribe(n=>{n.kind==="event.ingested"&&(o=!0)}),d=setInterval(()=>{o&&(o=!1,Date.now()-a>h&&r(),e.bus.emit({kind:"dashboard.delta",at:new Date().toISOString(),series:e.rate.recentBuckets(12),totals:l()}))},f);return d.unref?.(),{attach:p,stop:()=>{m(),clearInterval(d)}}}

package/node_modules/@weavecode/server/dist/daemon/data-bus.js

@@ -1 +1 @@
-import{EventEmitter as t}from"node:events";export class DataBus{emitter=new t;subscribers=0;constructor(){this.emitter.setMaxListeners(100)}emit(s){this.emitter.emit("change",s)}hasSubscribers(){return this.subscribers>0}subscribe(s){return this.subscribers+=1,this.emitter.on("change",s),()=>{this.subscribers-=1,this.emitter.off("change",s)}}}
+import{EventEmitter as s}from"node:events";export class DataBus{emitter=new s;subscribers=0;constructor(){this.emitter.setMaxListeners(100)}emit(t){this.emitter.emit("change",t)}hasSubscribers(){return this.subscribers>0}subscribe(t){return this.subscribers+=1,this.emitter.on("change",t),()=>{this.subscribers-=1,this.emitter.off("change",t)}}}

package/node_modules/@weavecode/server/dist/daemon/decision-config.d.ts

@@ -0,0 +1,10 @@
+/**
+ * 决策模型（编排条件边判断）的供应商 API key：落 `<dataDir>/decision.json`（0600），
+ * 与 ai.json 同口径——密钥不进 UI 可读的 settings 表。地址与模型名是非密配置，
+ * 归 settings 表（`decision.baseUrl` / `decision.model`）。
+ */
+/** 读 key；缺失/坏文件 → null（调用方按「未配置」处理，不抛）。 */
+export declare function readDecisionKey(file?: string): string | null;
+/** 写 key（原子写 + 0600）；`null` = 清除（删文件）。 */
+export declare function writeDecisionKey(apiKey: string | null, file?: string): void;
+export declare function hasDecisionKey(file?: string): boolean;

package/node_modules/@weavecode/server/dist/daemon/decision-config.js

@@ -0,0 +1,2 @@
+import{chmodSync as t,existsSync as c,mkdirSync as o,readFileSync as s,renameSync as a,rmSync as y,writeFileSync as u}from"node:fs";import l from"node:path";import{getDecisionKeyPath as n}from"../db/paths.js";export function readDecisionKey(i=n()){if(!c(i))return null;try{const e=JSON.parse(s(i,"utf8"));return typeof e.apiKey=="string"&&e.apiKey!==""?e.apiKey:null}catch{return null}}export function writeDecisionKey(i,e=n()){if(i===null||i===""){y(e,{force:!0});return}o(l.dirname(e),{recursive:!0});const r=`${e}.tmp`;u(r,`${JSON.stringify({apiKey:i},null,2)}
+`,{encoding:"utf8",mode:384}),a(r,e);try{t(e,384)}catch{}}export function hasDecisionKey(i=n()){return readDecisionKey(i)!==null}

package/node_modules/@weavecode/server/dist/daemon/dev-entry.js

@@ -1 +1 @@
-import oe from"node:http";import{openDatabase as te}from"../db/db.js";import{ProjectRepository as re}from"../repositories/projects.js";import{HookEventRepository as ne}from"../repositories/hook-events.js";import{LibraryRepository as ie}from"../repositories/libraries.js";import{HookRuleRepository as x}from"../repositories/hook-rules.js";import{HookDispatchRepository as ae}from"../repositories/hook-dispatches.js";import{PluginStateRepository as v}from"../repositories/plugin-states.js";import{SessionRepository as le}from"../repositories/sessions.js";import{createRuntimeRegistry as ce}from"@weavecode/harness";import{TERMINAL_LOCATOR_ENV_KEYS as pe}from"@weavecode/core";import{HookRuleRegistry as me}from"../hooks/registry.js";import{HookDispatcher as ue}from"../hooks/dispatcher.js";import{HookEventBus as de}from"../hooks/bus.js";import{ResumeRunner as fe}from"../hooks/resume-runner.js";import{HeadlessRunner as he}from"../hooks/headless-runner.js";import{MessageDeliverer as we}from"../hooks/message-deliverer.js";import{QuestionTracker as Se}from"../hooks/question-tracker.js";import{SideQuestionRepository as ge}from"../repositories/side-questions.js";import{claimSideAnswer as ve}from"../hooks/side-questions.js";import{startPromptFlusher as be}from"../hooks/prompt-flusher.js";import{SessionWatchRepository as Re}from"../repositories/session-watches.js";import{PushSubscriptionRepository as ke}from"../repositories/push-subscriptions.js";import{UploadRepository as De}from"../repositories/uploads.js";import{PushNotifier as ye}from"../hooks/push-notify.js";import{SessionSequenceRepository as Ee}from"../repositories/session-sequences.js";import{WatchEngine as Pe}from"../hooks/watch-engine.js";import{SequenceEngine as Ie}from"../hooks/sequence-engine.js";import{loadAllPlugins as Te}from"../hooks/plugin-loader.js";import{ensureBuiltinMarket as Ae,builtinMarketDir as Ce}from"../market/builtin.js";import{ToolkitService as _e}from"../hooks/toolkit.js";import{startSessionSweeper as He}from"../hooks/session-sweeper.js";import{startStatuslineCacheSweeper as $e}from"../statusline/cache-sweeper.js";import{readStatuslineFacts as Oe}from"../statusline/manager.js";import{WatchService as Me}from"../watch/watch-service.js";import{weaveRequestHandler as qe}from"./server.js";import{startTlsServer as Le}from"./tls.js";import{DataBus as Fe}from"./data-bus.js";import{TerminalTopologyRefresher as Ne}from"./terminal-topology-refresher.js";import{SnapshotRefresher as H}from"./snapshot-refresher.js";import{SessionProbe as je,dbTranscriptPathResolver as Ue}from"./session-probe.js";import{InflightCountsRefresher as Be}from"./inflight-counts-refresher.js";import{ProjectUpdatesRefresher as Qe}from"./project-updates-refresher.js";import{FingerprintCache as We}from"../install/fingerprint.js";import{detectProjectUpdateCounts as Ge}from"../install/updates.js";import{claudeLivenessById as Ve,pidAliveOf as xe}from"./claude-liveness.js";import{promptTerminalChannel as Ke,readTerminalCounts as Ye}from"./opener.js";import{wireHookFilePipeline as ze}from"./hook-pipeline.js";import{DEFAULT_PORT as $,DAEMON_HOST as Je,DEFAULT_BIND_HOST as Xe,findFreePort as Ze,isPortFree as es}from"./port.js";import{writeDaemonState as K}from"./state.js";import{readDaemonSettingsSync as O,setDaemonSettingsDb as ss,DEFAULT_SERVER_SETTINGS as os}from"./settings.js";import{AuthService as ts}from"./dashboard-auth.js";import{resolveStaticDir as rs}from"./static.js";const ns="CLAUDE_CODE_CHILD_SESSION"in process.env;delete process.env.CLAUDE_CODE_CHILD_SESSION;for(const l of pe)delete process.env[l];async function is(){const l=await es($)?$:await Ze($+1);K({pid:process.pid,port:l,startedAt:new Date().toISOString()});const o=te();ss(o);const m=O().server?.bindHost??Xe,b=O().server?.tlsPort??os.tlsPort,R=new ts;R.initialPassword&&console.log(`[dev] initial dashboard password: ${R.initialPassword}`);const r=new re(o),u=new ne(o),p=new ie(o),k=ce(),Y=k.byCapability("events").flatMap(e=>e.events??[]),f=new me(new x(o)),h=new ae(o),n=new le(o),t=new de;{const e=await Ae({libraries:p});e.error?console.error(`[dev] builtin market unavailable: ${e.error}`):e.changed&&console.log(`[dev] builtin market ${e.form==="link"?"linked":"copied"} -> ${Ce(p.dataDir)}`)}const{loader:c}=await Te({rules:new x(o),registry:f,states:new v(o),bus:t,libraries:p},r.list());{const e=c.list().filter(s=>s.status==="rejected");console.log(`[dev] plugins loaded: ${c.list().length} (rejected: ${e.length})`);for(const s of e)console.log(`[dev]   rejected ${s.id}: ${s.error}`)}c.watchRoots();const M={list:()=>c.list(),setPluginEnabled:(e,s)=>c.setPluginEnabled(e,s),reloadAll:()=>c.reloadAll(),rescan:()=>c.rescanRoots(r.list(),p)},z=new _e({projects:r,states:new v(o),plugins:M,libraries:p}),q=new ue({registry:f,dispatches:h,bus:t,projects:r,sessions:n,plugins:c,pluginStates:new v(o)}),D=new he,J=new fe({dispatches:h,sessions:n,projects:r,bus:t,resumeSpec:k.get("claude")?.resume,headless:D}),a=new we({sessions:n,projects:r,hookEvents:u,bus:t,headless:D,terminal:Ke(()=>O().terminal)});be(a);const y=new Re(o),E=new Pe({watches:y,deliverer:a,sessions:n,bus:t}),L=new ke(o),P=new De(o),X=new ye({subscriptions:L,sessions:n,bus:t}),I=new Ee(o),w=new Ie({sequences:I,deliverer:a,sessions:n,bus:t});w.rearm();const S=new Se({sessions:n,hookEvents:u,onPending:e=>{t.emit({kind:"question.pending",sessionId:e.sessionId,harness:e.harness,count:e.questions.length,at:e.at})}});S.seedFromDb();const F=new ge(o),N={repo:F,bus:t},j=new Me(r);j.start();const i=new Fe,g=new je(Ue(u)),T=new Ne(async()=>({counts:await Ye(r.list()),terminals:await a.sessionTerminals()}),i,{shouldRun:()=>i.hasSubscribers(),graceMs:1e4});T.start();const A=new H(()=>{const e=Ve(),s={};for(const d of n.listWithCounts()){const V=xe(d,e);V!==null&&(s[d.sessionId]=V)}return{alive:s}},i,{key:"sessionLiveness",shouldRun:()=>i.hasSubscribers()});A.start();const C=new H(()=>{const e={};for(const s of n.listWithCounts()){if(s.turnOpen!==!0)continue;const d=g.interruptedAt(s.sessionId,s.lastSeenAt);d!==null&&(e[s.sessionId]=d)}return{interrupted:e}},i,{key:"sessionInterrupt",intervalMs:5e3,shouldRun:()=>i.hasSubscribers()});C.start(),new H(()=>{const e={};for(const s of r.list())e[s.id]=Oe(s.path);return e},i,{key:"statusline",intervalMs:5e3,shouldRun:()=>i.hasSubscribers(),invalidateOnly:!0}).start();const Z=new Be(()=>a.listInflightCounts(),i,t),ee=new We,se=new Qe(()=>Ge(r.list(),p.list(),ee),i,t,()=>i.hasSubscribers());He({sessions:n,events:u,dispatches:h,deliverer:a,watches:y,sequences:I,watchEngine:E,sequenceEngine:w,questions:S,sideQuestions:F,probe:g,uploads:P}),$e();const U=ze({projects:r,rules:f,sessions:n,bus:t,dispatcher:q,watchEngine:E,sequenceEngine:w,messagePipe:a,questionTracker:S,sideQuestions:{onEvent:e=>{const s=ve(N,e);s&&a.interrupt(s.sessionId)}},sessionProbe:g,uploads:P}),_=rs(),B=qe({projects:r,port:l,tlsPort:b,watch:j,hookEvents:u,adapters:Y,harnesses:k,libraries:p,staticDir:_,hookRegistry:f,hookDispatches:h,hookSessions:n,hookBus:t,dataBus:i,terminalRefresher:T,interruptRefresher:C,livenessRefresher:A,sessionProbe:g,inflightRefresher:Z,updatesRefresher:se,hookDispatcher:q,hookRunner:J,messageDeliverer:a,uploads:P,questionTracker:S,sideQuestions:N,sessionWatches:y,watchEngine:E,sessionSequences:I,sequenceEngine:w,pushSubscriptions:L,pushNotifier:X,hookPlugins:M,hookMirror:U.mirror,pluginStates:new v(o),toolkit:z,auth:R}),Q=oe.createServer(B);let W=null;Le({port:b,bindHost:m,handler:B}).then(e=>{W=e,e&&console.log(`[dev] weave daemon tls listening on https://${m}:${e.port}`)});const G=()=>{T.stop(),A.stop(),C.stop(),D.killAll(),U.stop(),Q.close(),W?.server.close(),process.exit(0)};process.on("SIGTERM",G),process.on("SIGINT",G),Q.listen(l,m,()=>{K({pid:process.pid,port:l,startedAt:new Date().toISOString(),host:m,tlsPort:b}),console.log(`[dev] weave daemon listening on http://${m}:${l}`),console.log(`[dev] cli/dashboard local url: http://${Je}:${l}`),console.log(`[dev] child-session marker stripped: ${ns}`),console.log(_?`[dev] static: ${_}`:"[dev] static: (web/dist not built \u2014 run pnpm build:web)")})}is();
+import ds from"node:http";import{openDatabase as hs}from"../db/db.js";import{ProjectRepository as fs}from"../repositories/projects.js";import{HookEventRepository as ws}from"../repositories/hook-events.js";import{LibraryRepository as Ss}from"../repositories/libraries.js";import{HookRuleRepository as os}from"../repositories/hook-rules.js";import{HookDispatchRepository as gs}from"../repositories/hook-dispatches.js";import{PluginStateRepository as D}from"../repositories/plugin-states.js";import{SessionRepository as bs}from"../repositories/sessions.js";import{createRuntimeRegistry as vs}from"@weavecode/harness";import{TERMINAL_LOCATOR_ENV_KEYS as Rs,isHarness as ys}from"@weavecode/core";import{messagingSurfaceFor as ks}from"../surfaces.js";import{syntheticSessionIds as Es}from"../hooks/synthetic-sessions.js";import{createEdgeExtract as Ds}from"../hooks/edge-extract.js";import{HookRuleRegistry as Ps}from"../hooks/registry.js";import{HookDispatcher as Is}from"../hooks/dispatcher.js";import{HookEventBus as Ts}from"../hooks/bus.js";import{ResumeRunner as As}from"../hooks/resume-runner.js";import{HeadlessRunner as Cs}from"../hooks/headless-runner.js";import{MessageDeliverer as Os}from"../hooks/message-deliverer.js";import{QuestionTracker as Hs}from"../hooks/question-tracker.js";import{SideQuestionRepository as $s}from"../repositories/side-questions.js";import{claimSideAnswer as js}from"../hooks/side-questions.js";import{DashboardRateCache as Fs}from"../hooks/dashboard-rate.js";import{startDashboardPusher as _s}from"./dashboard-pusher.js";import{startPromptFlusher as Bs}from"../hooks/prompt-flusher.js";import{SessionWatchRepository as Ls}from"../repositories/session-watches.js";import{PushSubscriptionRepository as Us}from"../repositories/push-subscriptions.js";import{UploadRepository as Ms}from"../repositories/uploads.js";import{defaultUploadSessions as Ns}from"./upload-sessions.js";import{PushNotifier as Ws}from"../hooks/push-notify.js";import{OrchestrationRepository as qs,OrchestrationRunRepository as xs}from"../repositories/orchestrations.js";import{WatchEngine as Qs}from"../hooks/watch-engine.js";import{OrchestrationEngine as Gs,createForkConditionJudge as Js}from"../hooks/orchestration-engine.js";import{createDecisionConditionJudge as Ks}from"../hooks/decision-judge.js";import{readDecisionKey as Vs}from"./decision-config.js";import{openSessionTerminal as Ys}from"./session-open.js";import{loadAllPlugins as zs}from"../hooks/plugin-loader.js";import{ensureBuiltinMarket as Xs,builtinMarketDir as Zs}from"../market/builtin.js";import{ToolkitService as se}from"../hooks/toolkit.js";import{startSessionSweeper as ee}from"../hooks/session-sweeper.js";import{startStatuslineCacheSweeper as oe}from"../statusline/cache-sweeper.js";import{readStatuslineFacts as te}from"../statusline/manager.js";import{WatchService as re}from"../watch/watch-service.js";import{weaveRequestHandler as ne}from"./server.js";import{startTlsServer as ie}from"./tls.js";import{DataBus as ae}from"./data-bus.js";import{TerminalTopologyRefresher as le}from"./terminal-topology-refresher.js";import{SnapshotRefresher as U}from"./snapshot-refresher.js";import{SessionProbe as pe,dbModelFactResolver as ce,dbTranscriptPathResolver as me}from"./session-probe.js";import{InflightCountsRefresher as ue}from"./inflight-counts-refresher.js";import{ProjectUpdatesRefresher as de}from"./project-updates-refresher.js";import{FingerprintCache as he}from"../install/fingerprint.js";import{detectProjectUpdateCounts as fe}from"../install/updates.js";import{claudeLivenessById as ts,pidAliveOf as we}from"./claude-liveness.js";import{promptTerminalChannel as Se,readTerminalCounts as ge}from"./opener.js";import{wireHookFilePipeline as be}from"./hook-pipeline.js";import{DEFAULT_PORT as M,DAEMON_HOST as ve,DEFAULT_BIND_HOST as Re,findFreePort as ye,isPortFree as ke}from"./port.js";import{writeDaemonState as rs}from"./state.js";import{ensureDataLayout as Ee}from"../db/layout.js";import{pruneFileIndexes as De}from"./project-files.js";import{readDaemonSettingsSync as P,setDaemonSettingsDb as Pe,DEFAULT_SERVER_SETTINGS as Ie}from"./settings.js";import{AuthService as Te}from"./dashboard-auth.js";import{resolveStaticDir as Ae}from"./static.js";const Ce="CLAUDE_CODE_CHILD_SESSION"in process.env;delete process.env.CLAUDE_CODE_CHILD_SESSION;for(const c of Rs)delete process.env[c];async function Oe(){Ee();const c=await ke(M)?M:await ye(M+1);rs({pid:process.pid,port:c,startedAt:new Date().toISOString()});const o=hs();Pe(o);const h=P().server?.bindHost??Re,I=P().server?.tlsPort??Ie.tlsPort,T=new Te;T.initialPassword&&console.log(`[dev] initial dashboard password: ${T.initialPassword}`);const r=new fs(o);De(r.list().map(s=>s.id));const a=new ws(o),u=new Ss(o),b=vs(),ns=b.byCapability("events").flatMap(s=>s.events??[]),v=new Ps(new os(o)),R=new gs(o),t=new bs(o),n=new Ts;{const s=await Xs({libraries:u});s.error?console.error(`[dev] builtin market unavailable: ${s.error}`):s.changed&&console.log(`[dev] builtin market ${s.form==="link"?"linked":"copied"} -> ${Zs(u.dataRoot)}`)}const{loader:m}=await zs({rules:new os(o),registry:v,states:new D(o),bus:n,libraries:u},r.list());{const s=m.list().filter(e=>e.status==="rejected");console.log(`[dev] plugins loaded: ${m.list().length} (rejected: ${s.length})`);for(const e of s)console.log(`[dev]   rejected ${e.id}: ${e.error}`)}m.watchRoots();const N={list:()=>m.list(),setPluginEnabled:(s,e)=>m.setPluginEnabled(s,e),reloadAll:()=>m.reloadAll(),rescan:()=>m.rescanRoots(r.list(),u)},is=new se({projects:r,states:new D(o),plugins:N,libraries:u}),A={run:null},W=new Is({registry:v,dispatches:R,bus:n,projects:r,sessions:t,plugins:m,pluginStates:new D(o),classify:s=>A.run?A.run(s):Promise.resolve(null)}),y=new Cs,as=new As({dispatches:R,sessions:t,projects:r,bus:n,resumeSpec:b.get("claude")?.resume,headless:y}),p=new Os({sessions:t,projects:r,hookEvents:a,bus:n,headless:y,terminal:Se(()=>P().terminal),blockedByQuestion:s=>f.get(s)!=null});Bs(p);const C=new Ls(o),O=new Qs({watches:C,deliverer:p,sessions:t,bus:n}),q=new Us(o),H=new Ms(o),ls=new Ws({subscriptions:q,sessions:t,bus:n}),$=new qs(o),x=new xs(o),d=new pe(me(a),ce(a,s=>t.getBySessionId(s)?.harness??null)),f=new Hs({sessions:t,hookEvents:a,onPending:s=>{n.emit({kind:"question.pending",sessionId:s.sessionId,harness:s.harness,count:s.questions.length,at:s.at})},interruptedAt:s=>{const e=t.getBySessionId(s);return e?d.interruptedAt(s,e.lastSeenAt):null}});f.seedFromDb();const Q=new $s(o),G=new Fs,j=_s({rate:G,events:a,sessions:t,projects:r,bus:n}),J={repo:Q,bus:n,settle:s=>{p.interrupt(s.sessionId)}},K=new re(r);K.start();const i=new ae,k=new le(async()=>({counts:await ge(r.list()),terminals:await p.sessionTerminals()}),i,{shouldRun:()=>i.hasSubscribers(),graceMs:1e4});k.start();const F=new U(()=>{const s=ts(),e={};for(const l of t.listWithCounts()){const g=we(l,s);g!==null&&(e[l.sessionId]=g)}return{alive:e}},i,{key:"sessionLiveness",shouldRun:()=>i.hasSubscribers()});F.start();const _=new U(()=>{const s={};for(const e of t.listWithCounts()){if(e.turnOpen!==!0)continue;const l=d.interruptedAt(e.sessionId,e.lastSeenAt);l!==null&&(s[e.sessionId]=l)}return{interrupted:s}},i,{key:"sessionInterrupt",intervalMs:5e3,shouldRun:()=>i.hasSubscribers()});_.start(),new U(()=>{const s={};for(const e of r.list())s[e.id]=te(e.path);return s},i,{key:"statusline",intervalMs:5e3,shouldRun:()=>i.hasSubscribers(),invalidateOnly:!0}).start();const ps=new ue(()=>p.listInflightCounts(),i,n);let V=null;const w=Ds({sessions:t,projects:r,harnessOf:s=>{const e=a.listBySession(s,1),l=e[e.length-1]?.source;return ys(l)?l:null},surfaceFor:ks,headless:y,onSyntheticChange:()=>V?.pushSyntheticSessions(Es())});A.run=s=>w.run(s);const cs=Ks({config:async()=>{const s=P().decision;if(!s?.baseUrl||!s.model)return null;const e=Vs();return e?{baseUrl:s.baseUrl,model:s.model,apiKey:e}:null},fallback:Js({supports:s=>w.supports(s),extract:s=>w.run(s)})}),S=new Gs({orchestrations:$,runs:x,deliverer:p,sessions:t,bus:n,supportsExtract:s=>w.supports(s),extract:s=>w.run(s),conditionJudge:cs,deferWhenUserPresent:!0,ensureOpen:async s=>{const e=a.listBySession(s,1).at(-1)?.id??0,l=await Ys({hookSessions:t,hookEvents:a,projects:r,harnesses:b,sessionProbe:d,terminalRefresher:k},s);if(!l.ok)return l;let g=!1;for(let es=0;es<60;es++){if(a.listBySession(s,20).some(E=>E.id>e&&E.eventType==="SessionStart"))return{ok:!0,ack:"session-start"};ts().get(s)===!0&&(g=!0),await new Promise(E=>setTimeout(E,250))}return g?{ok:!0,ack:"registry"}:{ok:!1,error:"session did not report ready within 15s"}}});S.rearm();const Y=setInterval(()=>S.cronTick(),3e4);Y.unref();const ms=new he,us=new de(()=>fe(r.list(),u.list(),ms),i,n,()=>i.hasSubscribers());ee({sessions:t,events:a,dispatches:R,deliverer:p,watches:C,orchestrations:$,watchEngine:O,orchestrationEngine:S,questions:f,sideQuestions:Q,probe:d,uploads:H,uploadSessions:Ns}),oe();const B=be({projects:r,rules:v,sessions:t,bus:n,dispatcher:W,watchEngine:O,orchestrationEngine:S,messagePipe:p,questionTracker:f,sideQuestions:{onEvent:s=>{js(J,s)}},sessionProbe:d,uploads:H,dashboardRate:G});V=B;const L=Ae(),z=ne({projects:r,port:c,tlsPort:I,watch:K,hookEvents:a,adapters:ns,harnesses:b,libraries:u,staticDir:L,hookRegistry:v,hookDispatches:R,hookSessions:t,hookBus:n,dataBus:i,terminalRefresher:k,interruptRefresher:_,livenessRefresher:F,sessionProbe:d,inflightRefresher:ps,updatesRefresher:us,hookDispatcher:W,hookRunner:as,messageDeliverer:p,uploads:H,questionTracker:f,sideQuestions:J,sessionWatches:C,watchEngine:O,orchestrations:$,orchestrationRuns:x,orchestrationEngine:S,pushSubscriptions:q,pushNotifier:ls,onAttach:j.attach,dashboardRefresh:j.attach,hookPlugins:N,hookMirror:B.mirror,pluginStates:new D(o),toolkit:is,auth:T}),X=ds.createServer(z);let Z=null;ie({port:I,bindHost:h,handler:z}).then(s=>{Z=s,s&&console.log(`[dev] weave daemon tls listening on https://${h}:${s.port}`)});const ss=()=>{k.stop(),F.stop(),_.stop(),y.killAll(),clearInterval(Y),j.stop(),B.stop(),X.close(),Z?.server.close(),process.exit(0)};process.on("SIGTERM",ss),process.on("SIGINT",ss),X.listen(c,h,()=>{rs({pid:process.pid,port:c,startedAt:new Date().toISOString(),host:h,tlsPort:I}),console.log(`[dev] weave daemon listening on http://${h}:${c}`),console.log(`[dev] cli/dashboard local url: http://${ve}:${c}`),console.log(`[dev] child-session marker stripped: ${Ce}`),console.log(L?`[dev] static: ${L}`:"[dev] static: (web/dist not built \u2014 run pnpm build:web)")})}Oe();

package/node_modules/@weavecode/server/dist/daemon/fs-browser.js

@@ -1 +1 @@
-import{readdir as d,stat as l}from"node:fs/promises";import p from"node:os";import a from"node:path";function f(n,s){return new Promise((r,t)=>{const e=setTimeout(()=>t(new Error("timeout")),s);n.then(i=>{clearTimeout(e),r(i)},i=>{clearTimeout(e),t(i)})})}let c=null;const h=5*6e4;async function w(){if(c&&Date.now()-c.at<h)return c.drives;const n="ABCDEFGHIJKLMNOPQRSTUVWXYZ".split(""),r=(await Promise.all(n.map(async t=>{const e=`${t}:\\`;try{return await f(l(e),4e3),e}catch{return null}}))).filter(t=>t!==null);return c={at:Date.now(),drives:r},r}export async function listBrowseRoots(n){const s=[],r=new Set,t=(o,m)=>{r.has(o)||(r.add(o),s.push({path:o,kind:m}))},e=p.homedir();t(e,"home");const i=[["Desktop","desktop"],["Downloads","downloads"],["Documents","documents"]];for(const[o,m]of i){const u=a.join(e,o);try{await l(u),t(u,m)}catch{}}for(const o of n)typeof o=="string"&&o&&t(a.dirname(o),"library-parent");if(process.platform==="win32")for(const o of await w())t(o,"drive");else t(a.parse(e).root,"root");return s}export async function listDirectoryChildren(n){const r=(await d(n,{withFileTypes:!0})).filter(t=>t.isDirectory()).map(t=>({name:t.name,path:a.join(n,t.name)}));return r.sort((t,e)=>t.name.localeCompare(e.name,void 0,{numeric:!0})),r}
+import{readdir as p,stat as u}from"node:fs/promises";import f from"node:os";import s from"node:path";function d(n,r){return new Promise((t,o)=>{const a=setTimeout(()=>o(new Error("timeout")),r);n.then(i=>{clearTimeout(a),t(i)},i=>{clearTimeout(a),o(i)})})}let c=null;const w=5*6e4;async function h(){if(c&&Date.now()-c.at<w)return c.drives;const n="ABCDEFGHIJKLMNOPQRSTUVWXYZ".split(""),r=(await Promise.all(n.map(async t=>{const o=`${t}:\\`;try{return await d(u(o),4e3),o}catch{return null}}))).filter(t=>t!==null);return c={at:Date.now(),drives:r},r}export async function listBrowseRoots(n){const r=[],t=new Set,o=(e,m)=>{t.has(e)||(t.add(e),r.push({path:e,kind:m}))},a=f.homedir();o(a,"home");const i=[["Desktop","desktop"],["Downloads","downloads"],["Documents","documents"]];for(const[e,m]of i){const l=s.join(a,e);try{await u(l),o(l,m)}catch{}}for(const e of n)typeof e=="string"&&e&&o(s.dirname(e),"library-parent");if(process.platform==="win32")for(const e of await h())o(e,"drive");else o(s.parse(a).root,"root");return r}export async function listDirectoryChildren(n){const r=(await p(n,{withFileTypes:!0})).filter(t=>t.isDirectory()).map(t=>({name:t.name,path:s.join(n,t.name)}));return r.sort((t,o)=>t.name.localeCompare(o.name,void 0,{numeric:!0})),r}

package/node_modules/@weavecode/server/dist/daemon/hook-pipeline.d.ts

@@ -1,7 +1,7 @@
 import type { HookEventBus } from '../hooks/bus.js';
 import type { HookDispatcher } from '../hooks/dispatcher.js';
 import type { WatchEngine } from '../hooks/watch-engine.js';
-import type { SequenceEngine } from '../hooks/sequence-engine.js';
+import type { OrchestrationEngine } from '../hooks/orchestration-engine.js';
 import { MirrorWriter } from '../hooks/mirror.js';
 import type { MessageDeliverer } from '../hooks/message-deliverer.js';
 import type { QuestionTracker } from '../hooks/question-tracker.js';
@@ -18,7 +18,7 @@ export interface HookPipelineDeps {
     /** 空闲订阅引擎（批 2）：透传给 handleIngestedRecords（与 dispatcher 平行触发）。 */
     watchEngine?: Pick<WatchEngine, 'onEvent'>;
     /** 序列引擎（批 3）：同透传——inject 步完成判据挂在 ingest 消费路径。 */
-    sequenceEngine?: Pick<SequenceEngine, 'onEvent'>;
+    orchestrationEngine?: Pick<OrchestrationEngine, 'onEvent'>;
     /** prompt 队列冲洗（消息域重塑）：ingest 事件 = 会话活着，即时试递队列行。 */
     messagePipe?: Pick<MessageDeliverer, 'hasQueued' | 'flushSession'>;
     /** 阻塞式问答跟踪（AskUserQuestion/计划/权限确认）：ingest 事件派生待答面。 */
@@ -27,12 +27,17 @@ export interface HookPipelineDeps {
     sideQuestions?: {
         onEvent(input: SideQuestionEvent): void;
     };
+    /** 仪表盘速率快照（ingest 路径累加；读侧见 /dashboard/stats）。 */
+    dashboardRate?: {
+        record(): void;
+    };
     /** 会话转录路径上报（中断态探测；同 pane env 口径）+ 换模型落定（`PostModelSwitch`）+ 推理档位。 */
     sessionProbe?: {
         noteTranscript(sessionId: string, path: string | null): void;
         noteModel(sessionId: string, model: string): void;
         sessionStarted(sessionId: string, model: string | null): void;
         noteEffort(sessionId: string, level: string): void;
+        noteMode(sessionId: string, mode: string): void;
     };
     /** 上传件落库面：回执命中时把消息的随附图挂到开轮事件（对话气泡缩略图）。 */
     uploads?: {
@@ -58,6 +63,8 @@ export declare function purgeOrphanPipelineFiles(deps: {
 export interface HookPipeline {
     /** 交给 createWeaveServer：会话改名/删除后即时重写镜像。 */
     mirror: MirrorWriter;
+    /** 登记合成会话（编排 fork 提取）：全量快照推给消费线程，drain 侧即焚。 */
+    pushSyntheticSessions(ids: readonly string[]): void;
     stop(): Promise<void>;
 }
 /**

package/node_modules/@weavecode/server/dist/daemon/hook-pipeline.js

@@ -1 +1 @@
-import{readdirSync as f,unlinkSync as a}from"node:fs";import{join as c}from"node:path";import{getDbPath as m}from"../db/paths.js";import{MirrorWriter as b,hookShardId as l,hooksRoot as h,mirrorPathOf as g,outboxPathOf as x}from"../hooks/mirror.js";import{promptboxPathOf as P}from"../hooks/promptbox.js";import{startInboxWorker as j,handleIngestedRecords as k,unparkFailedInbox as $,INBOX_CLAIM_SUFFIX as u,INBOX_FAILED_SUFFIX as p}from"../hooks/inbox-worker.js";function w(e,o){return[c(e,"inbox",`${o}.jsonl`),c(e,"inbox",`${o}${u}`),c(e,"inbox",`${o}${p}`),g(e,o),x(e,o),P(e,o)]}export function purgeProjectPipeline(e,o){for(const n of w(e,l(o)))try{a(n)}catch{}}function F(e){return(e.endsWith(".tmp")?e.slice(0,-4):e).replace(new RegExp(`(${u}|${p})$`),"").replace(/\.(jsonl|json)$/,"")}const v=/^[0-9a-f]{16}$/;export function purgeOrphanPipelineFiles(e){const o=new Set(e.projects.list().map(r=>l(r.token)));let n=0;for(const r of["inbox","mirror","outbox","promptbox"]){let t;try{t=f(c(e.hooksDir,r))}catch{continue}for(const i of t){const s=F(i);if(!(!v.test(s)||o.has(s)))try{a(c(e.hooksDir,r,i)),n++}catch{}}}return n}export function wireHookFilePipeline(e){const o=h(),n=purgeOrphanPipelineFiles({projects:e.projects,hooksDir:o});n>0&&console.log(`[weave] hook pipeline: purged ${n} orphan file(s)`);const r=$(o);r>0&&console.log(`[weave] hook pipeline: revived ${r} parked inbox file(s)`);const t=new b({projects:e.projects,rules:e.rules,sessions:e.sessions});e.rules.onChange=()=>t.syncAll(),t.attachToBus(e.bus),t.syncAll();const i=j({dbPath:m(),hooksDir:o});return i.on("message",s=>{k({projects:e.projects,hooksDir:o,bus:e.bus,dispatcher:e.dispatcher,watchEngine:e.watchEngine,sequenceEngine:e.sequenceEngine,messagePipe:e.messagePipe,questionTracker:e.questionTracker,sideQuestions:e.sideQuestions,sessionProbe:e.sessionProbe,uploads:e.uploads},s)}),i.on("error",s=>console.error("[weave] inbox worker failed:",s)),{mirror:t,stop:()=>i.terminate().then(()=>{})}}
+import{readdirSync as u,unlinkSync as c}from"node:fs";import{join as a}from"node:path";import{getDbPath as f}from"../db/paths.js";import{MirrorWriter as d,hookShardId as p,hooksRoot as m,mirrorPathOf as b,outboxPathOf as k}from"../hooks/mirror.js";import{promptboxPathOf as g}from"../hooks/promptbox.js";import{startInboxWorker as x,handleIngestedRecords as P,unparkFailedInbox as j,INBOX_CLAIM_SUFFIX as h,INBOX_FAILED_SUFFIX as l}from"../hooks/inbox-worker.js";function $(e,s){return[a(e,"inbox",`${s}.jsonl`),a(e,"inbox",`${s}${h}`),a(e,"inbox",`${s}${l}`),b(e,s),k(e,s),g(e,s)]}export function purgeProjectPipeline(e,s){for(const r of $(e,p(s)))try{c(r)}catch{}}function w(e){return(e.endsWith(".tmp")?e.slice(0,-4):e).replace(new RegExp(`(${h}|${l})$`),"").replace(/\.(jsonl|json)$/,"")}const y=/^[0-9a-f]{16}$/;export function purgeOrphanPipelineFiles(e){const s=new Set(e.projects.list().map(t=>p(t.token)));let r=0;for(const t of["inbox","mirror","outbox","promptbox"]){let n;try{n=u(a(e.hooksDir,t))}catch{continue}for(const i of n){const o=w(i);if(!(!y.test(o)||s.has(o)))try{c(a(e.hooksDir,t,i)),r++}catch{}}}return r}export function wireHookFilePipeline(e){const s=m(),r=purgeOrphanPipelineFiles({projects:e.projects,hooksDir:s});r>0&&console.log(`[weave] hook pipeline: purged ${r} orphan file(s)`);const t=j(s);t>0&&console.log(`[weave] hook pipeline: revived ${t} parked inbox file(s)`);const n=new d({projects:e.projects,rules:e.rules,sessions:e.sessions});e.rules.onChange=()=>n.syncAll(),n.attachToBus(e.bus),n.syncAll();const i=x({dbPath:f(),hooksDir:s});return i.on("message",o=>{P({projects:e.projects,hooksDir:s,bus:e.bus,dispatcher:e.dispatcher,watchEngine:e.watchEngine,orchestrationEngine:e.orchestrationEngine,messagePipe:e.messagePipe,questionTracker:e.questionTracker,sideQuestions:e.sideQuestions,dashboardRate:e.dashboardRate,sessionProbe:e.sessionProbe,uploads:e.uploads},o)}),i.on("error",o=>console.error("[weave] inbox worker failed:",o)),{mirror:n,pushSyntheticSessions:o=>i.postMessage({type:"synthetic-sessions",ids:o}),stop:()=>i.terminate().then(()=>{})}}