@weavecode/weave 0.1.2 → 0.1.4

package/node_modules/@weavecode/harness/dist/driver.js

@@ -1 +1 @@
-export class HarnessRegistry{drivers=new Map;register(r){if(this.drivers.has(r.id))throw new Error(`harness driver already registered: ${r.id}`);this.drivers.set(r.id,r);let i=!1;return()=>{i||(i=!0,this.drivers.get(r.id)===r&&this.drivers.delete(r.id))}}get(r){return this.drivers.get(r)}all(){return[...this.drivers.values()]}byCapability(r){return this.all().filter(i=>i.capabilities.includes(r))}initFor(r){return this.drivers.get(r)?.init}unregister(r){return this.drivers.delete(r)}}export function supports(e,r){return e.capabilities.includes(r)}
+export class HarnessRegistry{drivers=new Map;register(e){if(this.drivers.has(e.id))throw new Error(`harness driver already registered: ${e.id}`);this.drivers.set(e.id,e);let r=!1;return()=>{r||(r=!0,this.drivers.get(e.id)===e&&this.drivers.delete(e.id))}}get(e){return this.drivers.get(e)}all(){return[...this.drivers.values()]}byCapability(e){return this.all().filter(r=>r.capabilities.includes(e))}initFor(e){return this.drivers.get(e)?.init}unregister(e){return this.drivers.delete(e)}}export function supports(i,e){return i.capabilities.includes(e)}

package/node_modules/@weavecode/harness/dist/index.d.ts

@@ -2,7 +2,9 @@ export * from './driver.js';
 export * from './init/pipeline.js';
 export * from './init/generated.js';
 export * from './registry-wiring.js';
+export * from './install.js';
 export * from './shared/file-specs.js';
 export * from './shared/install-link.js';
+export * from './shared/turn-output.js';
 export * from './claude/index.js';
 export * from './codex/index.js';

package/node_modules/@weavecode/harness/dist/index.js

@@ -1 +1 @@
-export*from"./driver.js";export*from"./init/pipeline.js";export*from"./init/generated.js";export*from"./registry-wiring.js";export*from"./shared/file-specs.js";export*from"./shared/install-link.js";export*from"./claude/index.js";export*from"./codex/index.js";
+export*from"./driver.js";export*from"./init/pipeline.js";export*from"./init/generated.js";export*from"./registry-wiring.js";export*from"./install.js";export*from"./shared/file-specs.js";export*from"./shared/install-link.js";export*from"./shared/turn-output.js";export*from"./claude/index.js";export*from"./codex/index.js";

package/node_modules/@weavecode/harness/dist/init/generated.js

@@ -1,2 +1,2 @@
-import l from"node:path";import{generateHookHandler as i,readUserCapture as c}from"../claude/capture.js";import{generateAutoMemoryHook as u}from"../claude/helpers-gen.js";import{generateMcpJson as m,mergeMcpJson as h}from"../claude/mcp-gen.js";import{generateSettingsJson as f,mergeSettingsJson as g}from"../claude/settings-gen.js";export const WEAVE_CONTENT_MARKER="@version weave@";const d={preToolUse:!1,postToolUse:!1,userPromptSubmit:!1,sessionStart:!1,stop:!1,stopFailure:!1,subagentStop:!1,subagentStart:!1,notification:!1,postToolUseFailure:!1,permissionRequest:!1,permissionDenied:!1,preCompact:!1,sessionEnd:!1,preModelSwitch:!1,timeout:5e3,continueOnError:!0};function a(e){try{const o=JSON.parse(e);return typeof o=="object"&&o!==null&&!Array.isArray(o)?o:null}catch{return null}}function n(e){return JSON.stringify(e,null,2)+`
-`}function p(e){return(o,r)=>{const t=a(o),s=a(r);return t===null||s===null?null:n(e(t,s))}}async function S(e){const o=l.join(e.projectPath,".claude","helpers"),r=(await c({home:e.platform.homeDir})).installed?d:e.hooks,t=[];return e.components.helpers&&t.push({relPath:".claude/helpers/hook-handler.cjs",weaveMarker:WEAVE_CONTENT_MARKER,content:i(e.version)},{relPath:".claude/helpers/auto-memory-hook.mjs",weaveMarker:WEAVE_CONTENT_MARKER,content:u(e.version)}),e.components.settings&&t.push({relPath:".claude/settings.json",content:n(f({components:e.components,hooks:r,platform:e.platform,helpersDir:o})),merge:p(g)}),e.components.mcp&&e.mcp.weave&&t.push({relPath:".mcp.json",content:n(m({platform:e.platform,includeWeaveServer:!0})),merge:p(h)}),t}const v={claude:S,codex:async()=>[]};export function generateInitFiles(e,o){return v[e](o)}
+import i from"node:path";import{generateHookHandler as p,readUserCapture as u}from"../claude/capture.js";import{generateAutoMemoryHook as m}from"../claude/helpers-gen.js";import{generateMcpJson as c,mergeMcpJson as f}from"../claude/mcp-gen.js";import{generateSettingsJson as h,mergeSettingsJson as g}from"../claude/settings-gen.js";export const WEAVE_CONTENT_MARKER="@version weave@";const d={preToolUse:!1,postToolUse:!1,userPromptSubmit:!1,sessionStart:!1,stop:!1,stopFailure:!1,subagentStop:!1,subagentStart:!1,notification:!1,postToolUseFailure:!1,permissionRequest:!1,permissionDenied:!1,preCompact:!1,sessionEnd:!1,preModelSwitch:!1,timeout:5e3,continueOnError:!0};function a(e){try{const o=JSON.parse(e);return typeof o=="object"&&o!==null&&!Array.isArray(o)?o:null}catch{return null}}function t(e){return JSON.stringify(e,null,2)+`
+`}function l(e){return(o,s)=>{const n=a(o),r=a(s);return n===null||r===null?null:t(e(n,r))}}async function S(e){const o=i.join(e.projectPath,".claude","helpers"),n=(await u({home:e.platform.homeDir})).installed?d:e.hooks,r=[];return e.components.helpers&&r.push({relPath:".claude/helpers/hook-handler.cjs",weaveMarker:WEAVE_CONTENT_MARKER,content:p(e.version)},{relPath:".claude/helpers/auto-memory-hook.mjs",weaveMarker:WEAVE_CONTENT_MARKER,content:m(e.version)}),e.components.settings&&r.push({relPath:".claude/settings.json",content:t(h({components:e.components,hooks:n,platform:e.platform,helpersDir:o})),merge:l(g)}),e.components.mcp&&e.mcp.weave&&r.push({relPath:".mcp.json",content:t(c({platform:e.platform,includeWeaveServer:!0})),merge:l(f)}),r}const E={claude:S,codex:async()=>[]};export function generateInitFiles(e,o){return E[e](o)}

package/node_modules/@weavecode/harness/dist/init/pipeline.js

@@ -1,2 +1,2 @@
-import{readdir as h,readFile as p,unlink as g,writeFile as A}from"node:fs/promises";import r from"node:path";import{ensureDir as m,fileExists as S,writeFileIfAbsent as b}from"@weavecode/core";export class InitPipeline{ctx;skipped=[];skipReasons=new Map;constructor(t){this.ctx=t}async runSurface(){await this.ensureDirs(),await this.writeSettings(),await this.writeMcp(),await this.copySkills(),await this.copyCommands(),await this.copyAgents(),await this.injectPluginTemplates(),await this.writeHelpers()}injectPluginTemplates(){}skip(t,i){this.skipped.push(t),this.skipReasons.set(t,i)}async writeOrMergeJson(t,i,n){if(!n&&await S(t)){const s=await D(t);return s===void 0?!1:(await j(t,d(s,i)),!0)}return await j(t,i),!0}async copyDirIfAbsent(t,i,n=!1){let s;try{s=await h(t,{withFileTypes:!0})}catch{return}await m(i);for(const e of s){const o=r.join(t,e.name),c=r.join(i,e.name);if(e.isDirectory())await this.copyDirIfAbsent(o,c,n);else{const u=await p(o,"utf-8");await b(c,u,n)}}}async sweepMarked(t,i,n){const s=new Set(i),e=[],o=async c=>{let u;try{u=await h(c,{withFileTypes:!0})}catch{return}for(const f of u){const w=r.join(c,f.name);if(f.isDirectory()){await o(w);continue}const k=r.relative(t,w).split(r.sep).join("/");if(s.has(k))continue;const y=await p(w,"utf-8").catch(()=>null);y!==null&&y.includes(n)&&(await g(w),e.push(w))}};return await o(t),e}}function d(a,t){const i={...a};for(const[n,s]of Object.entries(t)){const e=i[n];i[n]=l(e)&&l(s)?d(e,s):s}return i}function l(a){return typeof a=="object"&&a!==null&&!Array.isArray(a)}async function D(a){try{const t=await p(a,"utf-8"),i=JSON.parse(t);return l(i)?i:void 0}catch{return}}async function j(a,t){await m(r.dirname(a)),await A(a,JSON.stringify(t,null,2)+`
+import{readdir as d,readFile as p,unlink as g,writeFile as S}from"node:fs/promises";import r from"node:path";import{ensureDir as h,fileExists as b,writeFileIfAbsent as A}from"@weavecode/core";export class InitPipeline{ctx;skipped=[];skipReasons=new Map;constructor(t){this.ctx=t}async runSurface(){await this.ensureDirs(),await this.writeSettings(),await this.writeMcp(),await this.copySkills(),await this.copyCommands(),await this.copyAgents(),await this.injectPluginTemplates(),await this.writeHelpers()}injectPluginTemplates(){}skip(t,e){this.skipped.push(t),this.skipReasons.set(t,e)}async writeOrMergeJson(t,e,s){if(!s&&await b(t)){const n=await x(t);return n===void 0?!1:(await k(t,m(n,e)),!0)}return await k(t,e),!0}async copyDirIfAbsent(t,e,s=!1){let n;try{n=await d(t,{withFileTypes:!0})}catch{return}await h(e);for(const a of n){const o=r.join(t,a.name),c=r.join(e,a.name);if(a.isDirectory())await this.copyDirIfAbsent(o,c,s);else{const w=await p(o,"utf-8");await A(c,w,s)}}}async sweepMarked(t,e,s){const n=new Set(e),a=[],o=async c=>{let w;try{w=await d(c,{withFileTypes:!0})}catch{return}for(const l of w){const u=r.join(c,l.name);if(l.isDirectory()){await o(u);continue}const j=r.relative(t,u).split(r.sep).join("/");if(n.has(j))continue;const y=await p(u,"utf-8").catch(()=>null);y!==null&&y.includes(s)&&(await g(u),a.push(u))}};return await o(t),a}}function m(i,t){const e={...i};for(const[s,n]of Object.entries(t)){const a=e[s];e[s]=f(a)&&f(n)?m(a,n):n}return e}function f(i){return typeof i=="object"&&i!==null&&!Array.isArray(i)}async function x(i){try{const t=await p(i,"utf-8"),e=JSON.parse(t);return f(e)?e:void 0}catch{return}}async function k(i,t){await h(r.dirname(i)),await S(i,JSON.stringify(t,null,2)+`
 `,"utf-8")}

package/node_modules/@weavecode/harness/dist/install.d.ts

@@ -0,0 +1,9 @@
+import type { Harness } from '@weavecode/core';
+/**
+ * 各 harness 的官方安装命令（init 检测到未装时给用户确认后代跑）。安装知识归
+ * harness 包——weave 不捆绑宿主二进制，只代跑官方渠道；探测用 bin 复用
+ * `HARNESS_DRIVERS[h].resume.bin`，不在此重复。
+ */
+export declare const HARNESS_INSTALL: Record<Harness, {
+    command: string;
+}>;

package/node_modules/@weavecode/harness/dist/install.js

@@ -0,0 +1 @@
+export const HARNESS_INSTALL={claude:{command:"npm install -g @anthropic-ai/claude-code"},codex:{command:"npm install -g @openai/codex"}};

package/node_modules/@weavecode/harness/dist/registry-wiring.js

@@ -1 +1 @@
-import{CLAUDE_DRIVER as t}from"./claude/index.js";import{CODEX_DRIVER as o}from"./codex/index.js";import{HarnessRegistry as s}from"./driver.js";export const HARNESS_DRIVERS={claude:t,codex:o};export function registerRuntimeDrivers(r){for(const e of Object.values(HARNESS_DRIVERS))r.register(e)}export function createRuntimeRegistry(){const r=new s;return registerRuntimeDrivers(r),r}
+import{CLAUDE_DRIVER as t}from"./claude/index.js";import{CODEX_DRIVER as o}from"./codex/index.js";import{HarnessRegistry as i}from"./driver.js";export const HARNESS_DRIVERS={claude:t,codex:o};export function registerRuntimeDrivers(r){for(const e of Object.values(HARNESS_DRIVERS))r.register(e)}export function createRuntimeRegistry(){const r=new i;return registerRuntimeDrivers(r),r}

package/node_modules/@weavecode/harness/dist/shared/install-link.js

@@ -1 +1 @@
-import{cp as c,lstat as e,mkdir as s,rm as l,symlink as m,unlink as u}from"node:fs/promises";import o from"node:path";export async function linkOrCopy(r,t){const n=o.resolve(r);await s(o.dirname(t),{recursive:!0});try{return await m(n,t,process.platform==="win32"?"junction":"dir"),"link"}catch(a){const i=a.code;if(i!=="EPERM"&&i!=="EEXIST"&&i!=="ENOTSUP")throw a}return await c(n,t,{recursive:!0}),"copy"}export async function removeInstalled(r){let t;try{t=await e(r)}catch{return"absent"}return t.isSymbolicLink()?(await u(r),"link"):(await l(r,{recursive:!0,force:!0}),"removed")}export async function installForm(r){try{return(await e(r)).isSymbolicLink()?"link":"copy"}catch{return"absent"}}
+import{cp as a,lstat as c,mkdir as s,rm as u,symlink as l,unlink as m}from"node:fs/promises";import o from"node:path";export async function linkOrCopy(r,t){const i=o.resolve(r);await s(o.dirname(t),{recursive:!0});try{return await l(i,t,process.platform==="win32"?"junction":"dir"),"link"}catch(e){const n=e.code;if(n!=="EPERM"&&n!=="EEXIST"&&n!=="ENOTSUP")throw e}return await a(i,t,{recursive:!0}),"copy"}export async function removeInstalled(r){let t;try{t=await c(r)}catch{return"absent"}return t.isSymbolicLink()?(await m(r),"link"):(await u(r,{recursive:!0,force:!0}),"removed")}export async function installForm(r){try{return(await c(r)).isSymbolicLink()?"link":"copy"}catch{return"absent"}}

package/node_modules/@weavecode/harness/dist/shared/json-cap.d.ts

@@ -0,0 +1,11 @@
+/**
+ * 归一化 payload 的叶子上限（各 harness 的 normalize 共用）。
+ *
+ * 工具结果正文动辄整份文件（claude 实测库里 64k 行占 557MB，PostToolUse 一条平均
+ * 14KB、最大 7MB），而消费方只读开头一截（事件链摘要取 90 字符）+ 几个标量键。
+ * 4KB 高于问答预览面的 2000 字符阈值，故不会动到需要保真的字段。
+ */
+export declare const MAX_FIELD_CHARS = 4000;
+export declare const MAX_ARRAY_ITEMS = 200;
+/** 逐层裁掉超限的字符串叶子与数组尾巴（对象结构原样保留，键不丢）。 */
+export declare function capFields(value: unknown): unknown;

package/node_modules/@weavecode/harness/dist/shared/json-cap.js

@@ -0,0 +1 @@
+export const MAX_FIELD_CHARS=4e3,MAX_ARRAY_ITEMS=200;export function capFields(t){if(typeof t=="string")return t.length>4e3?`${t.slice(0,4e3)}\u2026`:t;if(Array.isArray(t))return t.slice(0,200).map(capFields);if(t&&typeof t=="object"){const r={};for(const[o,A]of Object.entries(t))r[o]=capFields(A);return r}return t}

package/node_modules/@weavecode/harness/dist/shared/turn-output.d.ts

@@ -0,0 +1,6 @@
+/**
+ * 每轮收尾事件上带的「这一轮最后说了什么」（`raw.last_assistant_message`）：claude 由
+ * 宿主原样上报，codex 适配器按同一键形归一（`codex/event-source.ts`），故读侧只有这一
+ * 处键形知识。非字符串 / 空 → null（空回合不摆空壳，调用方继续往前找）。
+ */
+export declare function turnOutputOf(raw: unknown): string | null;

package/node_modules/@weavecode/harness/dist/shared/turn-output.js

@@ -0,0 +1 @@
+export function turnOutputOf(n){const t=n?.last_assistant_message;return typeof t=="string"&&t.trim()?t:null}

package/node_modules/@weavecode/harness/dist/zcode/assets.js

@@ -1 +1 @@
-import c from"node:path";import{readZcodeMcp as l,removeZcodeMcp as n,upsertZcodeMcp as d,zcodeMcpFile as r}from"./mcp.js";const p=o=>c.join(o,".zcode","cli","config.json");export const ZCODE_ASSETS={harness:"zcode",targetDir(o){throw new Error(`"${o}" has no ZCode file-asset surface`)},projectSkillsDir:()=>".zcode/skills",globalSkillsRoots:o=>[c.join(o,...".zcode/skills".split("/")),c.join(o,...".agents/skills".split("/"))],userConfigFile:o=>p(o),mcpScopes:()=>["project","user"],mcpDest:(o,s)=>o==="project"?".zcode/config.json":c.join(s,...".zcode/cli/config.json".split("/")),mcpRead:(o,s,e)=>l(r(o,s,e)),mcpWrite:(o,s,e,i,t)=>d(r(o,s,e),i,t),mcpRemove:(o,s,e,i)=>n(r(o,s,e),i),classify(o){return o===".zcode"||o.startsWith(".zcode/")?!0:o.slice(o.lastIndexOf("/")+1)==="AGENTS.md"},ignore(o){return!(o===".zcode"||o.startsWith(".zcode/")||o==="AGENTS.md")}};
+import c from"node:path";import{readZcodeMcp as l,removeZcodeMcp as n,upsertZcodeMcp as d,zcodeMcpFile as r}from"./mcp.js";const p=e=>c.join(e,".zcode","cli","config.json");export const ZCODE_ASSETS={harness:"zcode",targetDir(e){throw new Error(`"${e}" has no ZCode file-asset surface`)},projectSkillsDir:()=>".zcode/skills",globalSkillsRoots:e=>[c.join(e,...".zcode/skills".split("/")),c.join(e,...".agents/skills".split("/"))],userConfigFile:e=>p(e),mcpScopes:()=>["project","user"],mcpDest:(e,s)=>e==="project"?".zcode/config.json":c.join(s,...".zcode/cli/config.json".split("/")),mcpRead:(e,s,o)=>l(r(e,s,o)),mcpWrite:(e,s,o,i,t)=>d(r(e,s,o),i,t),mcpRemove:(e,s,o,i)=>n(r(e,s,o),i),classify(e){return e===".zcode"||e.startsWith(".zcode/")?!0:e.slice(e.lastIndexOf("/")+1)==="AGENTS.md"},ignore(e){return!(e===".zcode"||e.startsWith(".zcode/")||e==="AGENTS.md")}};

package/node_modules/@weavecode/harness/dist/zcode/capture.js

@@ -1,3 +1,3 @@
-import{access as k,mkdir as y,readFile as l,unlink as A,writeFile as f}from"node:fs/promises";import{homedir as i}from"node:os";import c from"node:path";import{detectPlatform as S,HARNESS_EVENTS as b}from"@weavecode/core";import{generateHookHandler as j}from"../claude/capture.js";export const zcodeConfigFile=e=>c.join(e,".zcode","cli","config.json");export function zcodeHookScript(e=S().configDir){return c.join(e,"weave","hooks","zcode","hook-handler.cjs")}const w="@version weave@",g="weave/hooks/zcode/hook-handler.cjs";function a(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function p(e){return e.replace(/\\/g,"/")}async function x(e){try{return await k(e),!0}catch{return!1}}async function d(e){let r;try{r=await l(e,"utf-8")}catch{return{}}let t;try{t=JSON.parse(r)}catch{throw new Error(`user config is not parseable JSON: ${e}`)}if(!a(t))throw new Error(`user config is not a JSON object: ${e}`);return t}export function groupIsWeave(e){if(!a(e))return!1;const r=e.hooks;return Array.isArray(r)?r.some(t=>{if(!a(t))return!1;const o=Array.isArray(t.args)?t.args.map(n=>p(String(n))):[];return(typeof t.command=="string"?p(t.command):"").includes(g)||o.some(n=>n.includes(g))}):!1}export function captureHookGroup(e){return[{hooks:[{type:"process",command:"node",args:[p(e)]}]}]}function v(e){if(!a(e))return{};const r={};for(const[t,o]of Object.entries(e)){if(!Array.isArray(o)){r[t]=o;continue}const n=o.filter(s=>!groupIsWeave(s));n.length>0&&(r[t]=n)}return r}function C(e){if(!a(e))return!1;const r=e.hooks;if(!a(r))return!1;const t=r.events;return a(t)?Object.values(t).some(o=>Array.isArray(o)&&o.some(groupIsWeave)):!1}export async function readUserCapture(e={}){const r=e.home??i(),t=await d(zcodeConfigFile(r)).catch(()=>({}));return{installed:C(t),helperPresent:await x(zcodeHookScript(e.configDir))}}export async function readScriptHealth(e={}){const r=e.home??i(),t=(await readUserCapture({home:r,configDir:e.configDir})).installed,o=zcodeHookScript(e.configDir);let n=null;try{n=await l(o,"utf-8")}catch{n=null}return{source:t?"user":"none",present:n!==null,weaveOwned:n!==null&&n.includes(w),generatedVersion:n?.match(/@version weave@(\S+)/)?.[1]??null,reportsInbox:!1,reportsPaneEnv:n!==null&&n.includes("terminalEnv()")}}export async function installUserCapture(e){const r=e.home??i(),t=zcodeHookScript(e.configDir);await y(c.dirname(t),{recursive:!0}),await f(t,j(e.version,"zcode"),"utf-8");const o=zcodeConfigFile(r),n=await d(o),s=a(n.hooks)?n.hooks:{};typeof s.enabled!="boolean"&&(s.enabled=!0),typeof s.timeoutMs!="number"&&(s.timeoutMs=5e3);const u=v(s.events);for(const h of b.zcode){const m=u[h];u[h]=Array.isArray(m)?[...m,...captureHookGroup(t)]:captureHookGroup(t)}s.events=u,n.hooks=s,await y(c.dirname(o),{recursive:!0}),await f(o,JSON.stringify(n,null,2)+`
-`,"utf-8")}export async function uninstallUserCapture(e={}){const r=e.home??i(),t=zcodeConfigFile(r);try{const o=await d(t),n=o.hooks;if(a(n)){const s=v(n.events);Object.keys(s).length>0?n.events=s:delete n.events,o.hooks=n,await f(t,JSON.stringify(o,null,2)+`
-`,"utf-8")}}catch{}try{const o=zcodeHookScript(e.configDir);(await l(o,"utf-8")).includes(w)&&await A(o)}catch{}}export const ZCODE_CAPTURE={harness:"zcode",readUserCapture:e=>readUserCapture(e),installUserCapture:e=>installUserCapture(e),uninstallUserCapture:e=>uninstallUserCapture(e),stripProjectCapture:async()=>{},scriptHealth:e=>readScriptHealth(e)};
+import{access as k,mkdir as y,readFile as l,unlink as A,writeFile as f}from"node:fs/promises";import{homedir as i}from"node:os";import c from"node:path";import{detectPlatform as S,HARNESS_EVENTS as b}from"@weavecode/core";import{generateHookHandler as j}from"../claude/capture.js";export const zcodeConfigFile=r=>c.join(r,".zcode","cli","config.json");export function zcodeHookScript(r=S().configDir){return c.join(r,"weave","hooks","zcode","hook-handler.cjs")}const w="@version weave@",g="weave/hooks/zcode/hook-handler.cjs";function a(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function p(r){return r.replace(/\\/g,"/")}async function x(r){try{return await k(r),!0}catch{return!1}}async function d(r){let o;try{o=await l(r,"utf-8")}catch{return{}}let t;try{t=JSON.parse(o)}catch{throw new Error(`user config is not parseable JSON: ${r}`)}if(!a(t))throw new Error(`user config is not a JSON object: ${r}`);return t}export function groupIsWeave(r){if(!a(r))return!1;const o=r.hooks;return Array.isArray(o)?o.some(t=>{if(!a(t))return!1;const n=Array.isArray(t.args)?t.args.map(e=>p(String(e))):[];return(typeof t.command=="string"?p(t.command):"").includes(g)||n.some(e=>e.includes(g))}):!1}export function captureHookGroup(r){return[{hooks:[{type:"process",command:"node",args:[p(r)]}]}]}function v(r){if(!a(r))return{};const o={};for(const[t,n]of Object.entries(r)){if(!Array.isArray(n)){o[t]=n;continue}const e=n.filter(s=>!groupIsWeave(s));e.length>0&&(o[t]=e)}return o}function C(r){if(!a(r))return!1;const o=r.hooks;if(!a(o))return!1;const t=o.events;return a(t)?Object.values(t).some(n=>Array.isArray(n)&&n.some(groupIsWeave)):!1}export async function readUserCapture(r={}){const o=r.home??i(),t=await d(zcodeConfigFile(o)).catch(()=>({}));return{installed:C(t),helperPresent:await x(zcodeHookScript(r.configDir))}}export async function readScriptHealth(r={}){const o=r.home??i(),t=(await readUserCapture({home:o,configDir:r.configDir})).installed,n=zcodeHookScript(r.configDir);let e=null;try{e=await l(n,"utf-8")}catch{e=null}return{source:t?"user":"none",present:e!==null,weaveOwned:e!==null&&e.includes(w),generatedVersion:e?.match(/@version weave@(\S+)/)?.[1]??null,reportsInbox:!1,reportsPaneEnv:e!==null&&e.includes("terminalEnv()")}}export async function installUserCapture(r){const o=r.home??i(),t=zcodeHookScript(r.configDir);await y(c.dirname(t),{recursive:!0}),await f(t,j(r.version,"zcode"),"utf-8");const n=zcodeConfigFile(o),e=await d(n),s=a(e.hooks)?e.hooks:{};typeof s.enabled!="boolean"&&(s.enabled=!0),typeof s.timeoutMs!="number"&&(s.timeoutMs=5e3);const u=v(s.events);for(const h of b.zcode){const m=u[h];u[h]=Array.isArray(m)?[...m,...captureHookGroup(t)]:captureHookGroup(t)}s.events=u,e.hooks=s,await y(c.dirname(n),{recursive:!0}),await f(n,JSON.stringify(e,null,2)+`
+`,"utf-8")}export async function uninstallUserCapture(r={}){const o=r.home??i(),t=zcodeConfigFile(o);try{const n=await d(t),e=n.hooks;if(a(e)){const s=v(e.events);Object.keys(s).length>0?e.events=s:delete e.events,n.hooks=e,await f(t,JSON.stringify(n,null,2)+`
+`,"utf-8")}}catch{}try{const n=zcodeHookScript(r.configDir);(await l(n,"utf-8")).includes(w)&&await A(n)}catch{}}export const ZCODE_CAPTURE={harness:"zcode",readUserCapture:r=>readUserCapture(r),installUserCapture:r=>installUserCapture(r),uninstallUserCapture:r=>uninstallUserCapture(r),stripProjectCapture:async()=>{},scriptHealth:r=>readScriptHealth(r)};

package/node_modules/@weavecode/harness/dist/zcode/mcp.js

@@ -1,2 +1,2 @@
-import{mkdir as m,readFile as p,writeFile as d}from"node:fs/promises";import a from"node:path";function i(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}async function s(r){let e;try{e=await p(r,"utf-8")}catch{return{}}let t;try{t=JSON.parse(e)}catch(n){throw new Error(`${r} is not valid JSON \u2014 refusing to write: ${n instanceof Error?n.message:String(n)}`)}if(!i(t))throw new Error(`${r} is not a JSON object \u2014 refusing to write`);return t}async function f(r,e){await m(a.dirname(r),{recursive:!0}),await d(r,`${JSON.stringify(e,null,2)}
-`,"utf-8")}function u(r){const e=r.mcp;return i(e)&&i(e.servers)?e.servers:{}}export async function readZcodeMcp(r){const e=u(await s(r)),t={};for(const[n,o]of Object.entries(e)){if(!i(o)||typeof o.command!="string")continue;const c={command:o.command};Array.isArray(o.args)&&(c.args=o.args),i(o.env)&&(c.env=o.env),t[n]=c}return t}export async function upsertZcodeMcp(r,e,t){const n=await s(r),o=i(n.mcp)?n.mcp:{},c={type:"stdio",command:t.command};t.args&&(c.args=t.args),t.env&&(c.env=t.env),o.servers={...u(n),[e]:c},n.mcp=o,await f(r,n)}export async function removeZcodeMcp(r,e){const t=await s(r),n=u(t);if(!(e in n))return!1;delete n[e];const o=i(t.mcp)?t.mcp:{};return o.servers=n,t.mcp=o,await f(r,t),!0}export function zcodeMcpFile(r,e,t){return r==="project"?a.join(e,".zcode","config.json"):a.join(t,".zcode","cli","config.json")}
+import{mkdir as m,readFile as p,writeFile as d}from"node:fs/promises";import a from"node:path";function i(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}async function s(n){let e;try{e=await p(n,"utf-8")}catch{return{}}let r;try{r=JSON.parse(e)}catch(t){throw new Error(`${n} is not valid JSON \u2014 refusing to write: ${t instanceof Error?t.message:String(t)}`)}if(!i(r))throw new Error(`${n} is not a JSON object \u2014 refusing to write`);return r}async function f(n,e){await m(a.dirname(n),{recursive:!0}),await d(n,`${JSON.stringify(e,null,2)}
+`,"utf-8")}function u(n){const e=n.mcp;return i(e)&&i(e.servers)?e.servers:{}}export async function readZcodeMcp(n){const e=u(await s(n)),r={};for(const[t,o]of Object.entries(e)){if(!i(o)||typeof o.command!="string")continue;const c={command:o.command};Array.isArray(o.args)&&(c.args=o.args),i(o.env)&&(c.env=o.env),r[t]=c}return r}export async function upsertZcodeMcp(n,e,r){const t=await s(n),o=i(t.mcp)?t.mcp:{},c={type:"stdio",command:r.command};r.args&&(c.args=r.args),r.env&&(c.env=r.env),o.servers={...u(t),[e]:c},t.mcp=o,await f(n,t)}export async function removeZcodeMcp(n,e){const r=await s(n),t=u(r);if(!(e in t))return!1;delete t[e];const o=i(r.mcp)?r.mcp:{};return o.servers=t,r.mcp=o,await f(n,r),!0}export function zcodeMcpFile(n,e,r){return n==="project"?a.join(e,".zcode","config.json"):a.join(r,".zcode","cli","config.json")}

package/node_modules/@weavecode/harness/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@weavecode/harness",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Pluggable harness drivers — registry, init pipeline template method, and harness integration modules",
   "type": "module",
   "main": "./dist/index.js",
@@ -20,7 +20,7 @@
     "node": ">=22.5.0"
   },
   "dependencies": {
-    "@weavecode/core": "^0.1.2",
+    "@weavecode/core": "^0.1.4",
     "smol-toml": "^1.3.0"
   }
 }

package/node_modules/@weavecode/server/dist/config/dotted.d.ts

@@ -0,0 +1,10 @@
+/** 配置表单的一次改动：`path` 是点号路径（`sandbox.filesystem.allowWrite`）。 */
+export interface ConfigUpdate {
+    path: string;
+    value?: unknown;
+    remove?: boolean;
+}
+/** 点号路径取值（不存在 → undefined）。 */
+export declare function getDotted(root: Record<string, unknown>, dotted: string): unknown;
+/** 批量落值/删键，返回新对象（不改入参）。 */
+export declare function applyUpdates(root: Record<string, unknown>, updates: readonly ConfigUpdate[]): Record<string, unknown>;

package/node_modules/@weavecode/server/dist/config/dotted.js

@@ -0,0 +1 @@
+function i(n){return n==="__proto__"||n==="constructor"||n==="prototype"}function f(n){const e=n.split(".");if(e.some(t=>!t||i(t)))throw new Error(`\u975E\u6CD5\u914D\u7F6E\u952E\uFF1A${n}`);return e}function c(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}const u=Symbol("absent");function s(n,e){let t=n;for(const o of e){if(!c(t))return u;t=t[o]}return t===void 0?u:t}function l(n,e){let t=n;for(const o of e.slice(0,-1)){const r=t[o];if(!c(r))return;t=r}delete t[e[e.length-1]]}function p(n,e,t){let o=n;for(const r of e.slice(0,-1))c(o[r])||(o[r]={}),o=o[r];o[e[e.length-1]]=t}export function getDotted(n,e){const t=s(n,f(e));return t===u?void 0:t}export function applyUpdates(n,e){const t=structuredClone(n);for(const o of e){const r=f(o.path);o.remove?l(t,r):p(t,r,o.value)}return t}

package/node_modules/@weavecode/server/dist/config/profiles.d.ts

@@ -0,0 +1,39 @@
+import type { ConfigFileId } from '@weavecode/harness';
+/**
+ * 配置快照的落盘面。`root` = `local/harness-config`（由调用方给，测试用临时目录）：
+ * 快照里可能带 API key ⇒ 本机专属、不进 settings 表、不随迁移带走。
+ */
+export interface ConfigProfileMeta {
+    id: string;
+    name: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ConfigProfileState {
+    activeId: string | null;
+    profiles: ConfigProfileMeta[];
+}
+export declare function listProfiles(root: string, harness: string, file: ConfigFileId): Promise<ConfigProfileState>;
+/** 落一份快照（整份 JSON）。 */
+export declare function writeSnapshot(root: string, harness: string, file: ConfigFileId, id: string, values: Record<string, unknown>): Promise<void>;
+export declare function readSnapshot(root: string, harness: string, file: ConfigFileId, id: string): Promise<Record<string, unknown> | null>;
+export declare function createProfile(root: string, harness: string, file: ConfigFileId, name: string, values: Record<string, unknown>): Promise<ConfigProfileMeta>;
+/** 覆盖某份快照的内容并刷新 updatedAt。 */
+export declare function saveProfile(root: string, harness: string, file: ConfigFileId, id: string, values: Record<string, unknown>): Promise<void>;
+export declare function renameProfile(root: string, harness: string, file: ConfigFileId, id: string, name: string): Promise<void>;
+export declare function removeProfile(root: string, harness: string, file: ConfigFileId, id: string): Promise<void>;
+export declare function setActive(root: string, harness: string, file: ConfigFileId, id: string | null): Promise<void>;
+/**
+ * 无活跃快照档位的自动基线（project/projectLocal 不支持快照、user/global 可能还没建）：
+ * 首次查看立基线、写入口同步——没有它这些档位的外部改动永远判不出漂移。
+ */
+export declare const LASTSEEN_ID = "_lastseen";
+/** 漂移基线：活跃快照优先，缺省落自动基线。 */
+export declare function baselineSnapshot(root: string, harness: string, file: ConfigFileId, state: ConfigProfileState): Promise<Record<string, unknown> | null>;
+/** 写入口同步基线：有活跃快照同步它；`_lastseen` 恒跟着写（删掉活跃快照后基线不复活旧值）。 */
+export declare function syncBaseline(root: string, harness: string, file: ConfigFileId, state: ConfigProfileState, values: Record<string, unknown>): Promise<void>;
+/** 写盘前把当前活配置存一份（每档留最新 20 份，超出按时间删旧）。 */
+export declare function pushBackup(root: string, harness: string, file: ConfigFileId, values: Record<string, unknown>): Promise<void>;
+/** 备份列表（新 → 旧）。同秒序号（`-2`）比无后缀的更新——按「时刻 + 序号」排，不按裸字典序。 */
+export declare function listBackups(root: string, harness: string, file: ConfigFileId): Promise<string[]>;
+export declare function readBackup(root: string, harness: string, file: ConfigFileId, id: string): Promise<Record<string, unknown> | null>;

package/node_modules/@weavecode/server/dist/config/profiles.js

@@ -0,0 +1,2 @@
+import s from"node:fs/promises";import f from"node:path";import{randomUUID as I}from"node:crypto";const h=20;function l(t,n){return f.join(t,n)}function S(t,n){return f.join(l(t,n),"profiles.json")}function w(t,n,e,a){return f.join(l(t,n),`${e}-${a}.json`)}function m(t,n){return f.join(l(t,n),"backups")}function $(t,n,e,a){return f.join(m(t,n),`${e}-${a}.json`)}async function y(t){try{const n=JSON.parse(await s.readFile(t,"utf8"));return typeof n=="object"&&n!==null&&!Array.isArray(n)?n:null}catch{return null}}async function x(t,n){await s.mkdir(f.dirname(t),{recursive:!0});const e=`${t}.${process.pid}.${Date.now()}.tmp`;await s.writeFile(e,`${JSON.stringify(n,null,2)}
+`,"utf8"),await s.rename(e,t)}async function j(t,n){return await y(S(t,n))??{}}function g(){return{activeId:null,profiles:[]}}function v(t,n){return t[n]??g()}export async function listProfiles(t,n,e){return v(await j(t,n),e)}async function p(t,n,e,a){const r=await j(t,n),c=v(r,e);return a(c),r[e]=c,await x(S(t,n),r),c}function d(){return new Date().toISOString()}export async function writeSnapshot(t,n,e,a,r){await x(w(t,n,e,a),r)}export async function readSnapshot(t,n,e,a){return y(w(t,n,e,a))}export async function createProfile(t,n,e,a,r){const c={id:I().slice(0,8),name:a,createdAt:d(),updatedAt:d()};return await writeSnapshot(t,n,e,c.id,r),await p(t,n,e,i=>{i.profiles.push(c)}),c}export async function saveProfile(t,n,e,a,r){await writeSnapshot(t,n,e,a,r),await p(t,n,e,c=>{const i=c.profiles.find(o=>o.id===a);i&&(i.updatedAt=d())})}export async function renameProfile(t,n,e,a,r){await p(t,n,e,c=>{const i=c.profiles.find(o=>o.id===a);i&&(i.name=r,i.updatedAt=d())})}export async function removeProfile(t,n,e,a){await p(t,n,e,r=>{r.profiles=r.profiles.filter(c=>c.id!==a),r.activeId===a&&(r.activeId=null)}),await s.rm(w(t,n,e,a),{force:!0})}export async function setActive(t,n,e,a){await p(t,n,e,r=>{r.activeId=a})}export const LASTSEEN_ID="_lastseen";export async function baselineSnapshot(t,n,e,a){if(a.activeId){const r=await readSnapshot(t,n,e,a.activeId);if(r)return r}return readSnapshot(t,n,e,LASTSEEN_ID)}export async function syncBaseline(t,n,e,a,r){a.activeId&&await saveProfile(t,n,e,a.activeId,r),await writeSnapshot(t,n,e,LASTSEEN_ID,r)}function A(t){const n=e=>String(e).padStart(2,"0");return`${t.getFullYear()}-${n(t.getMonth()+1)}-${n(t.getDate())}-${n(t.getHours())}${n(t.getMinutes())}${n(t.getSeconds())}`}export async function pushBackup(t,n,e,a){const r=A(new Date),c=new Set((await s.readdir(m(t,n)).catch(()=>[])).filter(u=>u.startsWith(`${e}-${r}`)));let i=r;for(let u=2;c.has(`${e}-${i}.json`);u++)i=`${r}-${u}`;await x($(t,n,e,i),a);const o=(await listBackups(t,n,e)).slice(h);for(const u of o)await s.rm($(t,n,e,u),{force:!0})}export async function listBackups(t,n,e){const a=`${e}-`,r=i=>{const o=/^(\d{4}-\d{2}-\d{2}-\d{6})(?:-(\d+))?$/.exec(i);return o?+`${o[1].replace(/-/g,"")}${o[2]??"1"}`:0};return(await s.readdir(m(t,n)).catch(()=>[])).filter(i=>i.startsWith(a)&&i.endsWith(".json")).map(i=>i.slice(a.length,-5)).sort((i,o)=>r(i)-r(o)).reverse()}export async function readBackup(t,n,e,a){return/^[A-Za-z0-9-]+$/.test(a)?y($(t,n,e,a)):null}

package/node_modules/@weavecode/server/dist/daemon/ai-context.d.ts

@@ -12,6 +12,6 @@ export declare function findDocsDir(start: string): string | null;
 export declare function collectSkillFiles(root: string, limit?: number): string[];
 /** 装配系统提示词（三源 + 固定前言）。 */
 export declare function buildSystemPrompt(deps: {
-    dataDir: string;
+    dataRoot: string;
     cwd?: string;
 }): AiContextResult;

package/node_modules/@weavecode/server/dist/daemon/ai-context.js

@@ -1,10 +1,10 @@
-import{existsSync as d,readdirSync as h,readFileSync as S}from"node:fs";import c from"node:path";import{builtinMarketDir as b}from"../market/builtin.js";const p=6e4,w=40,y=6;export function findDocsDir(r){let t=c.resolve(r);for(let n=0;n<y;n++){const s=c.join(t,"docs");if(d(c.join(s,"FEATURES.md")))return s;const i=c.dirname(t);if(i===t)break;t=i}return null}export function collectSkillFiles(r,t=w){const n=[],s=(i,a)=>{if(n.length>=t||a>6)return;let u;try{u=h(i,{withFileTypes:!0})}catch{return}for(const l of u){if(n.length>=t)return;const e=c.join(i,l.name);l.isDirectory()?s(e,a+1):l.name==="SKILL.md"&&n.push(e)}};return s(r,0),n.sort()}function m(r){try{return S(r,"utf8")}catch{return null}}export function buildSystemPrompt(r){const t=[],n=findDocsDir(r.cwd??process.cwd());if(n)for(const e of["ARCHITECTURE.md","FEATURES.md"]){const o=c.join(n,e);if(!d(o))continue;const f=m(o);f&&t.push({label:`docs/${e}`,text:f})}const s=b(r.dataDir);for(const e of collectSkillFiles(s)){const o=m(e);o&&t.push({label:c.relative(s,e).split(c.sep).join("/"),text:o})}const i=["\u4F60\u662F weave \u63A7\u5236\u53F0\u5185\u7F6E\u7684 AI \u52A9\u624B\uFF0C**\u53EA\u8D1F\u8D23 weave \u672C\u8EAB**\uFF1A\u5B83\u7684\u529F\u80FD\u3001\u7528\u6CD5\u3001\u914D\u7F6E\u3001\u67B6\u6784\u3001","\u5185\u7F6E\u6280\u80FD\uFF0C\u4EE5\u53CA\u57FA\u4E8E\u4E0B\u9762\u6CE8\u5165\u8D44\u6599\u7684\u6392\u969C\u3002","","\u56DE\u7B54\u8303\u56F4\uFF08\u8D8A\u754C\u7684\u60C5\u51B5\u4E00\u5F8B\u793C\u8C8C\u62D2\u7B54\uFF1A\u7528\u4E00\u53E5\u8BDD\u8BF4\u660E\u4F60\u53EA\u804A weave\uFF0C\u7136\u540E\u628A\u8BDD\u9898\u5F15\u56DE weave\uFF09\uFF1A","- \u53EF\u4EE5\u7B54\uFF1Aweave \u7684\u80FD\u529B\u4E0E\u64CD\u4F5C\uFF08\u547D\u4EE4\u3001\u8BBE\u7F6E\u9879\u3001\u6587\u4EF6\u843D\u70B9\u3001\u63D2\u4EF6/\u6280\u80FD/\u5E02\u573A\u3001hooks\u3001\u4F1A\u8BDD\u4E0E\u4EFB\u52A1\u3001\u8BA4\u8BC1\u7B49\uFF09\uFF0C","  \u4EE5\u53CA\u6CE8\u5165\u8D44\u6599\u91CC\u80FD\u67E5\u5230\u7684\u4E8B\u5B9E\uFF1B","- \u4E0D\u8981\u7B54\uFF1A\u4E0E weave \u65E0\u5173\u7684\u901A\u7528\u7F16\u7A0B\u3001\u5199\u4F5C\u3001\u7FFB\u8BD1\u3001\u95F2\u804A\uFF0C\u5176\u5B83\u4EA7\u54C1\u6216\u670D\u52A1\uFF0C\u4EE5\u53CA\u4EFB\u4F55\u6709\u5BB3\u6216\u8D8A\u754C\u7684\u8BF7\u6C42\uFF1B","- \u8D44\u6599\u672A\u8986\u76D6\u65F6\u660E\u786E\u8BF4\u300C\u4E0D\u786E\u5B9A\u300D\uFF0C\u4E0D\u8981\u7F16\u9020 weave \u7684\u884C\u4E3A\u3001\u547D\u4EE4\u6216\u53C2\u6570\uFF1B","- \u4E0D\u7C98\u8D34\u5927\u6BB5\u6CE8\u5165\u8D44\u6599\u539F\u6587\uFF08\u7528\u6237\u70B9\u540D\u8981\u67D0\u4E00\u6BB5\u65F6\u9664\u5916\uFF09\uFF1B","- \u53EA\u505A\u53EA\u8BFB\u95EE\u7B54\uFF1A\u4E0D\u58F0\u79F0\u5DF2\u6267\u884C\u4EFB\u4F55\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u627F\u8BFA\u4EE3\u66FF\u7528\u6237\u53BB\u6539\u6587\u4EF6\u6216\u8DD1\u547D\u4EE4\u3002","","\u56DE\u7B54\u4F7F\u7528\u4E0E\u63D0\u95EE\u76F8\u540C\u7684\u8BED\u8A00\uFF1B\u6D89\u53CA\u64CD\u4F5C\u65F6\u7ED9\u51FA\u786E\u5207\u547D\u4EE4\u4E0E\u8DEF\u5F84\u3002"].join(`
-`),a=[];let u=i.length;const l=[];for(const e of t){const o=`
+import{existsSync as d,readdirSync as h,readFileSync as S}from"node:fs";import i from"node:path";import{builtinMarketDir as b}from"../market/builtin.js";const p=6e4,w=40,y=6;export function findDocsDir(r){let e=i.resolve(r);for(let n=0;n<y;n++){const s=i.join(e,"docs");if(d(i.join(s,"FEATURES.md")))return s;const c=i.dirname(e);if(c===e)break;e=c}return null}export function collectSkillFiles(r,e=w){const n=[],s=(c,a)=>{if(n.length>=e||a>6)return;let u;try{u=h(c,{withFileTypes:!0})}catch{return}for(const l of u){if(n.length>=e)return;const t=i.join(c,l.name);l.isDirectory()?s(t,a+1):l.name==="SKILL.md"&&n.push(t)}};return s(r,0),n.sort()}function m(r){try{return S(r,"utf8")}catch{return null}}export function buildSystemPrompt(r){const e=[],n=findDocsDir(r.cwd??process.cwd());if(n)for(const t of["ARCHITECTURE.md","FEATURES.md"]){const o=i.join(n,t);if(!d(o))continue;const f=m(o);f&&e.push({label:`docs/${t}`,text:f})}const s=b(r.dataRoot);for(const t of collectSkillFiles(s)){const o=m(t);o&&e.push({label:i.relative(s,t).split(i.sep).join("/"),text:o})}const c=["\u4F60\u662F weave \u63A7\u5236\u53F0\u5185\u7F6E\u7684 AI \u52A9\u624B\uFF0C**\u53EA\u8D1F\u8D23 weave \u672C\u8EAB**\uFF1A\u5B83\u7684\u529F\u80FD\u3001\u7528\u6CD5\u3001\u914D\u7F6E\u3001\u67B6\u6784\u3001","\u5185\u7F6E\u6280\u80FD\uFF0C\u4EE5\u53CA\u57FA\u4E8E\u4E0B\u9762\u6CE8\u5165\u8D44\u6599\u7684\u6392\u969C\u3002","","\u56DE\u7B54\u8303\u56F4\uFF08\u8D8A\u754C\u7684\u60C5\u51B5\u4E00\u5F8B\u793C\u8C8C\u62D2\u7B54\uFF1A\u7528\u4E00\u53E5\u8BDD\u8BF4\u660E\u4F60\u53EA\u804A weave\uFF0C\u7136\u540E\u628A\u8BDD\u9898\u5F15\u56DE weave\uFF09\uFF1A","- \u53EF\u4EE5\u7B54\uFF1Aweave \u7684\u80FD\u529B\u4E0E\u64CD\u4F5C\uFF08\u547D\u4EE4\u3001\u8BBE\u7F6E\u9879\u3001\u6587\u4EF6\u843D\u70B9\u3001\u63D2\u4EF6/\u6280\u80FD/\u5E02\u573A\u3001hooks\u3001\u4F1A\u8BDD\u4E0E\u4EFB\u52A1\u3001\u8BA4\u8BC1\u7B49\uFF09\uFF0C","  \u4EE5\u53CA\u6CE8\u5165\u8D44\u6599\u91CC\u80FD\u67E5\u5230\u7684\u4E8B\u5B9E\uFF1B","- \u4E0D\u8981\u7B54\uFF1A\u4E0E weave \u65E0\u5173\u7684\u901A\u7528\u7F16\u7A0B\u3001\u5199\u4F5C\u3001\u7FFB\u8BD1\u3001\u95F2\u804A\uFF0C\u5176\u5B83\u4EA7\u54C1\u6216\u670D\u52A1\uFF0C\u4EE5\u53CA\u4EFB\u4F55\u6709\u5BB3\u6216\u8D8A\u754C\u7684\u8BF7\u6C42\uFF1B","- \u8D44\u6599\u672A\u8986\u76D6\u65F6\u660E\u786E\u8BF4\u300C\u4E0D\u786E\u5B9A\u300D\uFF0C\u4E0D\u8981\u7F16\u9020 weave \u7684\u884C\u4E3A\u3001\u547D\u4EE4\u6216\u53C2\u6570\uFF1B","- \u4E0D\u7C98\u8D34\u5927\u6BB5\u6CE8\u5165\u8D44\u6599\u539F\u6587\uFF08\u7528\u6237\u70B9\u540D\u8981\u67D0\u4E00\u6BB5\u65F6\u9664\u5916\uFF09\uFF1B","- \u53EA\u505A\u53EA\u8BFB\u95EE\u7B54\uFF1A\u4E0D\u58F0\u79F0\u5DF2\u6267\u884C\u4EFB\u4F55\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u627F\u8BFA\u4EE3\u66FF\u7528\u6237\u53BB\u6539\u6587\u4EF6\u6216\u8DD1\u547D\u4EE4\u3002","","\u56DE\u7B54\u4F7F\u7528\u4E0E\u63D0\u95EE\u76F8\u540C\u7684\u8BED\u8A00\uFF1B\u6D89\u53CA\u64CD\u4F5C\u65F6\u7ED9\u51FA\u786E\u5207\u547D\u4EE4\u4E0E\u8DEF\u5F84\u3002"].join(`
+`),a=[];let u=c.length;const l=[];for(const t of e){const o=`
 
-## \u6CE8\u5165\u8D44\u6599\uFF1A${e.label}
+## \u6CE8\u5165\u8D44\u6599\uFF1A${t.label}
 
-${e.text}`;if(u+o.length>p){const f=p-u;f>500&&(a.push(`
+${t.text}`;if(u+o.length>p){const f=p-u;f>500&&(a.push(`
 
-## \u6CE8\u5165\u8D44\u6599\uFF1A${e.label}\uFF08\u6309\u9884\u7B97\u622A\u65AD\uFF09
+## \u6CE8\u5165\u8D44\u6599\uFF1A${t.label}\uFF08\u6309\u9884\u7B97\u622A\u65AD\uFF09
 
-${e.text.slice(0,f)}`),l.push(`${e.label}(\u622A\u65AD)`));break}u+=o.length,a.push(o),l.push(e.label)}return{prompt:i+a.join(""),labels:l,docsFound:n!==null}}
+${t.text.slice(0,f)}`),l.push(`${t.label}(\u622A\u65AD)`));break}u+=o.length,a.push(o),l.push(t.label)}return{prompt:c+a.join(""),labels:l,docsFound:n!==null}}

package/node_modules/@weavecode/server/dist/daemon/ai-routes.js

@@ -1,4 +1,4 @@
-import{getDataDir as I}from"../db/paths.js";import{DEFAULT_AI_SETTINGS as v,readDaemonSettings as N}from"./settings.js";import{hasAiKey as J,readAiKey as O}from"./ai-config.js";import{buildSystemPrompt as P,findDocsDir as j}from"./ai-context.js";import{readJson as k,sendJson as f}from"./http.js";const z=12e4,C=15e3,G=500,L=40,R=2e4;export function normalizeMessages(r){if(!Array.isArray(r)||r.length===0||r.length>L)return null;const e=[];for(const t of r){const o=t;if(o?.role!=="user"&&o?.role!=="assistant")return null;const a=o.content;if(typeof a!="string"||a===""||a.length>R)return null;e.push({role:o.role,content:a})}return e}export function aiConfigured(r,e,t){return r!==""&&e!==""&&t}export async function handleAiRoutes(r,e,t,o){if(o!=="/ai"&&!o.startsWith("/ai/"))return!1;const n=(await N()).ai??v,p=J(t.aiKeyPath);if(o==="/ai/status"&&r.method==="GET")return f(e,200,{configured:aiConfigured(n.baseUrl,n.model,p),baseUrl:n.baseUrl,model:n.model,apiKeySet:p,docsFound:j(process.cwd())!==null}),!0;if(o==="/ai/models"&&r.method==="POST"){let i;try{i=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const u=typeof i.baseUrl=="string"&&i.baseUrl.trim()!==""?i.baseUrl.trim():n.baseUrl,m=typeof i.apiKey=="string"&&i.apiKey!==""?i.apiKey:O(t.aiKeyPath);if(u===""||m===null)return f(e,409,{error:"AI assistant is not configured"}),!0;const l=await B(u,m);return l.ok?(f(e,200,{models:l.models}),!0):(f(e,502,{error:l.error}),!0)}if(o==="/ai/chat"&&r.method==="POST"){const i=O(t.aiKeyPath);if(!aiConfigured(n.baseUrl,n.model,p)||i===null)return f(e,409,{error:"AI assistant is not configured"}),!0;let u;try{u=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const m=normalizeMessages(u.messages);if(!m)return f(e,400,{error:"Invalid messages"}),!0;const l=P({dataDir:t.libraries?.dataDir??I()});return await X({req:r,res:e,baseUrl:n.baseUrl,model:n.model,apiKey:i,messages:m,system:l.prompt}),!0}return f(e,404,{error:"Not found"}),!0}function A(r){const t=r?.choices?.[0],o=t?.delta?.content??t?.message?.content;return typeof o=="string"&&o!==""?o:null}export const STREAM_MEMO_TTL_MS=1440*60*1e3;const S=new Map;export function streamMemoKey(r,e){return`${r}#${e}`}export function streamSupported(r,e=Date.now()){const t=S.get(r);return!t||e-t.checkedAt>STREAM_MEMO_TTL_MS?!0:t.streaming}export function rememberStreamSupport(r,e,t=Date.now()){const o=S.get(r);o!==void 0&&o.streaming!==e&&console.log(`[weave] ai gateway ${e?"supports":"rejects"} streaming: ${r}`),S.set(r,{streaming:e,checkedAt:t})}export function resetStreamMemory(){S.clear()}async function B(r,e){try{const t=await fetch(`${r.replace(/\/+$/,"")}/models`,{headers:{authorization:`Bearer ${e}`},signal:AbortSignal.timeout(C)});if(!t.ok){const n=await t.text().catch(()=>"");return{ok:!1,error:`upstream ${t.status}${n?`: ${n.slice(0,200)}`:""}`}}const o=await t.json().catch(()=>null),a=[...new Set((o?.data??[]).map(n=>n?.id).filter(n=>typeof n=="string"&&n!==""))].sort();return a.length===0?{ok:!1,error:"upstream returned no models"}:{ok:!0,models:a.slice(0,G)}}catch(t){return{ok:!1,error:t instanceof Error?t.message:String(t)}}}async function E(r){try{const e=await fetch(r.url,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.apiKey}`},body:JSON.stringify({model:r.model,stream:!1,messages:r.messages}),signal:r.signal});if(!e.ok){const o=await e.text().catch(()=>"");return{ok:!1,error:`upstream ${e.status}${o?`: ${o.slice(0,300)}`:""}`}}const t=A(await e.json().catch(()=>null));return t===null?{ok:!1,error:"upstream returned no content"}:{ok:!0,content:t}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function X(r){const{req:e,res:t,baseUrl:o,model:a,apiKey:n,messages:p,system:i}=r,u=`${o.replace(/\/+$/,"")}/chat/completions`,m=[{role:"system",content:i},...p],l=new AbortController,_=setTimeout(()=>l.abort(),z);e.on("close",()=>l.abort()),t.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"});let b=!1;const d=s=>{if(!b)try{t.write(`data: ${JSON.stringify(s)}
+import{getDataRoot as I}from"../db/paths.js";import{DEFAULT_AI_SETTINGS as v,readDaemonSettings as N}from"./settings.js";import{hasAiKey as J,readAiKey as O}from"./ai-config.js";import{buildSystemPrompt as P,findDocsDir as R}from"./ai-context.js";import{readJson as k,sendJson as f}from"./http.js";const j=12e4,z=15e3,C=500,G=40,L=2e4;export function normalizeMessages(r){if(!Array.isArray(r)||r.length===0||r.length>G)return null;const e=[];for(const t of r){const o=t;if(o?.role!=="user"&&o?.role!=="assistant")return null;const a=o.content;if(typeof a!="string"||a===""||a.length>L)return null;e.push({role:o.role,content:a})}return e}export function aiConfigured(r,e,t){return r!==""&&e!==""&&t}export async function handleAiRoutes(r,e,t,o){if(o!=="/ai"&&!o.startsWith("/ai/"))return!1;const n=(await N()).ai??v,p=J(t.aiKeyPath);if(o==="/ai/status"&&r.method==="GET")return f(e,200,{configured:aiConfigured(n.baseUrl,n.model,p),baseUrl:n.baseUrl,model:n.model,apiKeySet:p,docsFound:R(process.cwd())!==null}),!0;if(o==="/ai/models"&&r.method==="POST"){let i;try{i=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const u=typeof i.baseUrl=="string"&&i.baseUrl.trim()!==""?i.baseUrl.trim():n.baseUrl,m=typeof i.apiKey=="string"&&i.apiKey!==""?i.apiKey:O(t.aiKeyPath);if(u===""||m===null)return f(e,409,{error:"AI assistant is not configured"}),!0;const l=await B(u,m);return l.ok?(f(e,200,{models:l.models}),!0):(f(e,502,{error:l.error}),!0)}if(o==="/ai/chat"&&r.method==="POST"){const i=O(t.aiKeyPath);if(!aiConfigured(n.baseUrl,n.model,p)||i===null)return f(e,409,{error:"AI assistant is not configured"}),!0;let u;try{u=await k(r)}catch{return f(e,400,{error:"Invalid JSON body"}),!0}const m=normalizeMessages(u.messages);if(!m)return f(e,400,{error:"Invalid messages"}),!0;const l=P({dataRoot:t.libraries?.dataRoot??I()});return await X({req:r,res:e,baseUrl:n.baseUrl,model:n.model,apiKey:i,messages:m,system:l.prompt}),!0}return f(e,404,{error:"Not found"}),!0}function A(r){const t=r?.choices?.[0],o=t?.delta?.content??t?.message?.content;return typeof o=="string"&&o!==""?o:null}export const STREAM_MEMO_TTL_MS=1440*60*1e3;const S=new Map;export function streamMemoKey(r,e){return`${r}#${e}`}export function streamSupported(r,e=Date.now()){const t=S.get(r);return!t||e-t.checkedAt>STREAM_MEMO_TTL_MS?!0:t.streaming}export function rememberStreamSupport(r,e,t=Date.now()){const o=S.get(r);o!==void 0&&o.streaming!==e&&console.log(`[weave] ai gateway ${e?"supports":"rejects"} streaming: ${r}`),S.set(r,{streaming:e,checkedAt:t})}export function resetStreamMemory(){S.clear()}async function B(r,e){try{const t=await fetch(`${r.replace(/\/+$/,"")}/models`,{headers:{authorization:`Bearer ${e}`},signal:AbortSignal.timeout(z)});if(!t.ok){const n=await t.text().catch(()=>"");return{ok:!1,error:`upstream ${t.status}${n?`: ${n.slice(0,200)}`:""}`}}const o=await t.json().catch(()=>null),a=[...new Set((o?.data??[]).map(n=>n?.id).filter(n=>typeof n=="string"&&n!==""))].sort();return a.length===0?{ok:!1,error:"upstream returned no models"}:{ok:!0,models:a.slice(0,C)}}catch(t){return{ok:!1,error:t instanceof Error?t.message:String(t)}}}async function E(r){try{const e=await fetch(r.url,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.apiKey}`},body:JSON.stringify({model:r.model,stream:!1,messages:r.messages}),signal:r.signal});if(!e.ok){const o=await e.text().catch(()=>"");return{ok:!1,error:`upstream ${e.status}${o?`: ${o.slice(0,300)}`:""}`}}const t=A(await e.json().catch(()=>null));return t===null?{ok:!1,error:"upstream returned no content"}:{ok:!0,content:t}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function X(r){const{req:e,res:t,baseUrl:o,model:a,apiKey:n,messages:p,system:i}=r,u=`${o.replace(/\/+$/,"")}/chat/completions`,m=[{role:"system",content:i},...p],l=new AbortController,_=setTimeout(()=>l.abort(),j);e.on("close",()=>l.abort()),t.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-accel-buffering":"no"});let b=!1;const d=s=>{if(!b)try{t.write(`data: ${JSON.stringify(s)}
 
 `)}catch{}},K=()=>{if(!b){b=!0;try{t.write(`data: {"done":true}
 

package/node_modules/@weavecode/server/dist/daemon/api-log.d.ts

@@ -23,6 +23,8 @@ export interface ApiLogQuery {
     status?: number;
     limit?: number;
 }
+/** 路径里的凭据段脱敏：webhook token 就是一条可直接重放的凭证，绝不落盘。 */
+export declare function maskPath(url: string): string;
 /** 本地小时戳文件名：`api-YYYY-MM-DDTHH.jsonl`。 */
 export declare function logFileFor(dir: string, at: Date): string;
 export declare function noteRequestBody(req: IncomingMessage, text: string): void;

package/node_modules/@weavecode/server/dist/daemon/api-log.js

@@ -1,3 +1,3 @@
-import{appendFile as F,mkdir as L,readdir as T,readFile as N,rm as j}from"node:fs/promises";import g from"node:path";import{getApiLogsDir as x}from"../db/paths.js";const w=8*1024,C=2e3,b=50,D=6;export const MAX_LOG_FILES=24;const I=200,O=1e3,H=new Set(["password","apikey","token","secret","authorization","cookie","x-weave-local"]);function y(n,t=0){if(typeof n=="string")return n.length>C?`[truncated ${n.length} chars]`:n;if(Array.isArray(n)){if(t>=D)return"[depth-limited]";const e=n.slice(0,b).map(i=>y(i,t+1));return n.length>b&&e.push(`[truncated ${n.length-b} items]`),e}if(n&&typeof n=="object"){if(t>=D)return"[depth-limited]";const e={};for(const[i,a]of Object.entries(n))e[i]=H.has(i.toLowerCase())?"[redacted]":y(a,t+1);return e}return n}function M(n,t){if(t>w)return`[truncated body ${t} bytes]`;try{return y(JSON.parse(n))}catch{return y(n)}}export function logFileFor(n,t){const e=a=>String(a).padStart(2,"0"),i=`${t.getFullYear()}-${e(t.getMonth()+1)}-${e(t.getDate())}T${e(t.getHours())}`;return g.join(n,`api-${i}.jsonl`)}function _(n){const t=g.basename(n).match(/^api-(\d{4}-\d{2}-\d{2}T\d{2})\.jsonl$/);return t?t[1]:null}const E=new WeakMap;export function noteRequestBody(n,t){E.get(n)?.(t)}export class ApiLogger{dir;chain=Promise.resolve();constructor(t={}){this.dir=t.dir??x()}begin(t,e){const i=Date.now(),a=[];let u=0,c=0,d="",h=0,l=!1;E.set(t,r=>{d=r,h=Buffer.byteLength(r,"utf8")});const f=r=>{const o=Buffer.isBuffer(r)?r:Buffer.from(typeof r=="string"?r:String(r??""),"utf8");if(c+=o.length,u<w){const s=o.subarray(0,w-u);a.push(s),u+=s.length}},m=e.write.bind(e),$=e.end.bind(e);let A="";const B=e.writeHead.bind(e);e.writeHead=((...r)=>{const o=r[1];if(o&&typeof o=="object"&&!Array.isArray(o)){const s=o,p=s["content-type"]??s["Content-Type"];typeof p=="string"&&(A=p)}return B(...r)}),e.write=((r,...o)=>(f(r),m(r,...o))),e.end=((r,...o)=>(typeof r!="function"&&r!=null&&f(r),$(r,...o)));const S=()=>{if(l)return;l=!0;const o=(String(e.getHeader("content-type")??"")||A).includes("event-stream"),s={ts:new Date(i).toISOString(),method:t.method??"GET",path:t.url??"/",status:e.statusCode,durationMs:Date.now()-i,ip:(t.socket?.remoteAddress??"").replace(/^::ffff:/,""),resBytes:c},p=t.headers["user-agent"];typeof p=="string"&&p&&(s.ua=p.slice(0,120)),h&&(s.req=M(d,h)),o?s.stream=!0:c&&(s.res=M(Buffer.concat(a).toString("utf8"),c)),e.writableEnded||(s.aborted=!0),this.write(logFileFor(this.dir,new Date(i)),`${JSON.stringify(s)}
+import{appendFile as F,mkdir as L,readdir as T,readFile as N,rm as j}from"node:fs/promises";import g from"node:path";import{getApiLogsDir as x}from"../db/paths.js";const w=8*1024,C=2e3,b=50,D=6;export const MAX_LOG_FILES=24;const I=200,O=1e3,H=new Set(["password","apikey","token","secret","authorization","cookie","x-weave-local"]);function y(n,t=0){if(typeof n=="string")return n.length>C?`[truncated ${n.length} chars]`:n;if(Array.isArray(n)){if(t>=D)return"[depth-limited]";const e=n.slice(0,b).map(i=>y(i,t+1));return n.length>b&&e.push(`[truncated ${n.length-b} items]`),e}if(n&&typeof n=="object"){if(t>=D)return"[depth-limited]";const e={};for(const[i,a]of Object.entries(n))e[i]=H.has(i.toLowerCase())?"[redacted]":y(a,t+1);return e}return n}function M(n,t){if(t>w)return`[truncated body ${t} bytes]`;try{return y(JSON.parse(n))}catch{return y(n)}}export function maskPath(n){return n.replace(/^(\/webhooks\/orchestrate\/)[^?]+/,"$1[redacted]")}export function logFileFor(n,t){const e=a=>String(a).padStart(2,"0"),i=`${t.getFullYear()}-${e(t.getMonth()+1)}-${e(t.getDate())}T${e(t.getHours())}`;return g.join(n,`api-${i}.jsonl`)}function _(n){const t=g.basename(n).match(/^api-(\d{4}-\d{2}-\d{2}T\d{2})\.jsonl$/);return t?t[1]:null}const $=new WeakMap;export function noteRequestBody(n,t){$.get(n)?.(t)}export class ApiLogger{dir;chain=Promise.resolve();constructor(t={}){this.dir=t.dir??x()}begin(t,e){const i=Date.now(),a=[];let u=0,c=0,d="",h=0,l=!1;$.set(t,r=>{d=r,h=Buffer.byteLength(r,"utf8")});const f=r=>{const o=Buffer.isBuffer(r)?r:Buffer.from(typeof r=="string"?r:String(r??""),"utf8");if(c+=o.length,u<w){const s=o.subarray(0,w-u);a.push(s),u+=s.length}},m=e.write.bind(e),E=e.end.bind(e);let A="";const B=e.writeHead.bind(e);e.writeHead=((...r)=>{const o=r[1];if(o&&typeof o=="object"&&!Array.isArray(o)){const s=o,p=s["content-type"]??s["Content-Type"];typeof p=="string"&&(A=p)}return B(...r)}),e.write=((r,...o)=>(f(r),m(r,...o))),e.end=((r,...o)=>(typeof r!="function"&&r!=null&&f(r),E(r,...o)));const S=()=>{if(l)return;l=!0;const o=(String(e.getHeader("content-type")??"")||A).includes("event-stream"),s={ts:new Date(i).toISOString(),method:t.method??"GET",path:maskPath(t.url??"/"),status:e.statusCode,durationMs:Date.now()-i,ip:(t.socket?.remoteAddress??"").replace(/^::ffff:/,""),resBytes:c},p=t.headers["user-agent"];typeof p=="string"&&p&&(s.ua=p.slice(0,120)),h&&(s.req=M(d,h)),o?s.stream=!0:c&&(s.res=M(Buffer.concat(a).toString("utf8"),c)),e.writableEnded||(s.aborted=!0),this.write(logFileFor(this.dir,new Date(i)),`${JSON.stringify(s)}
 `)};e.on("finish",S),e.on("close",S)}write(t,e){this.chain=this.chain.then(async()=>{try{await L(this.dir,{recursive:!0}),await F(t,e,"utf8"),await this.purge()}catch{}})}async purge(){const t=(await T(this.dir)).filter(e=>_(e)!=null);if(!(t.length<=MAX_LOG_FILES)){t.sort();for(const e of t.slice(0,t.length-MAX_LOG_FILES))await j(g.join(this.dir,e),{force:!0})}}onIdle(){return this.chain}async query(t){const e=(await T(this.dir).catch(()=>[])).filter(d=>_(d)!=null).sort().reverse(),i=Math.min(Math.max(t.limit??I,1),O),a=t.from?Date.parse(t.from):NaN,u=t.to?Date.parse(t.to):NaN,c=[];for(const d of e){if(c.length>=i)break;const h=await N(g.join(this.dir,d),"utf8").catch(()=>"");for(const l of h.split(`
 `).reverse()){if(!l.trim())continue;let f;try{f=JSON.parse(l)}catch{continue}const m=Date.parse(f.ts);if(!(Number.isFinite(a)&&m<a)&&!(Number.isFinite(u)&&m>u)&&!(t.status!=null&&f.status!==t.status)&&!(t.method&&f.method.toUpperCase()!==t.method.toUpperCase())&&!(t.path&&!f.path.includes(t.path))&&(c.push(f),c.length>=i))break}}return{entries:c,files:e.length}}}

package/node_modules/@weavecode/server/dist/daemon/auto-start.js

@@ -1,6 +1,6 @@
-import{spawnSync as u}from"node:child_process";import{fileURLToPath as l}from"node:url";import{mkdirSync as a,writeFileSync as i,unlinkSync as s}from"node:fs";import{homedir as m}from"node:os";import r from"node:path";import{getDataDir as p}from"../db/paths.js";import{readDaemonSettingsSync as f}from"./settings.js";const o="weave-daemon",c="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";export function relaunchArgs(){return[process.execPath,...process.execArgv.map(t=>{if(t!=="tsx"&&!t.startsWith("tsx/"))return t;try{return l(import.meta.resolve(t))}catch{return t}}),r.resolve(process.argv[1]??process.argv[0])]}function d(t){return{platform:t.platform??process.platform,dataDir:t.dataDir??p(),home:t.home??m(),run:t.run??((e,n)=>({status:u(e,n,{stdio:"ignore"}).status}))}}function h(t){return t.map(e=>`"${e}"`).join(" ")}function y(t){const e=r.join(t.dataDir,"weave-autostart.vbs");a(t.dataDir,{recursive:!0});const n=h(relaunchArgs());i(e,`' Generated by weave \u2014 daemon auto-start. Do not edit.
+import{spawnSync as l}from"node:child_process";import{fileURLToPath as m}from"node:url";import{mkdirSync as a,writeFileSync as i,unlinkSync as c}from"node:fs";import{homedir as p}from"node:os";import r from"node:path";import{getAutoStartScriptPath as s,getDataDir as f}from"../db/paths.js";import{readDaemonSettingsSync as d}from"./settings.js";const o="weave-daemon",u="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";export function relaunchArgs(){return[process.execPath,...process.execArgv.map(t=>{if(t!=="tsx"&&!t.startsWith("tsx/"))return t;try{return m(import.meta.resolve(t))}catch{return t}}),r.resolve(process.argv[1]??process.argv[0])]}function h(t){return{platform:t.platform??process.platform,dataDir:t.dataDir??f(),home:t.home??p(),run:t.run??((e,n)=>({status:l(e,n,{stdio:"ignore"}).status}))}}function g(t){return t.map(e=>`"${e}"`).join(" ")}function y(t){const e=s(t.dataDir);a(r.dirname(e),{recursive:!0});const n=g(relaunchArgs());i(e,`' Generated by weave \u2014 daemon auto-start. Do not edit.
 CreateObject("WScript.Shell").Run "${n.replace(/"/g,'""')}", 0, False
-`),t.run("reg",["add",c,"/v",o,"/t","REG_SZ","/d",`wscript.exe "${e}"`,"/f"])}function g(t){t.run("reg",["delete",c,"/v",o,"/f"]);try{s(r.join(t.dataDir,"weave-autostart.vbs"))}catch{}}function v(t){const e=n=>n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");return`<?xml version="1.0" encoding="UTF-8"?>
+`),t.run("reg",["add",u,"/v",o,"/t","REG_SZ","/d",`wscript.exe "${e}"`,"/f"])}function v(t){t.run("reg",["delete",u,"/v",o,"/f"]);try{c(s(t.dataDir))}catch{}}function w(t){const e=n=>n.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");return`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
@@ -13,5 +13,5 @@ CreateObject("WScript.Shell").Run "${n.replace(/"/g,'""')}", 0, False
   <key>RunAtLoad</key><true/>
 </dict>
 </plist>
-`}function w(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");a(r.dirname(e),{recursive:!0}),i(e,v(relaunchArgs())),t.run("launchctl",["unload",e]),t.run("launchctl",["load",e])}function L(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");t.run("launchctl",["unload",e]);try{s(e)}catch{}}function D(t){return t.map(e=>/[\s"]/.test(e)?`"${e}"`:e).join(" ")}function b(t){const e=r.join(t.home,".config","autostart",`${o}.desktop`);a(r.dirname(e),{recursive:!0}),i(e,["[Desktop Entry]","Type=Application","Name=weave daemon",`Exec=${D(relaunchArgs())}`,"X-GNOME-Autostart-enabled=true",""].join(`
-`))}function k(t){try{s(r.join(t.home,".config","autostart",`${o}.desktop`))}catch{}}export function applyLaunchOnLogin(t,e={}){try{const n=d(e);n.platform==="win32"?t?y(n):g(n):n.platform==="darwin"?t?w(n):L(n):t?b(n):k(n)}catch(n){console.error(`[weave] auto-start ${t?"enable":"disable"} failed:`,n)}}export function syncLaunchOnLogin(t={}){const e=f().startup;applyLaunchOnLogin(e?.launchOnLogin??!1,t)}
+`}function L(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");a(r.dirname(e),{recursive:!0}),i(e,w(relaunchArgs())),t.run("launchctl",["unload",e]),t.run("launchctl",["load",e])}function D(t){const e=r.join(t.home,"Library","LaunchAgents","com.weave.daemon.plist");t.run("launchctl",["unload",e]);try{c(e)}catch{}}function k(t){return t.map(e=>/[\s"]/.test(e)?`"${e}"`:e).join(" ")}function x(t){const e=r.join(t.home,".config","autostart",`${o}.desktop`);a(r.dirname(e),{recursive:!0}),i(e,["[Desktop Entry]","Type=Application","Name=weave daemon",`Exec=${k(relaunchArgs())}`,"X-GNOME-Autostart-enabled=true",""].join(`
+`))}function S(t){try{c(r.join(t.home,".config","autostart",`${o}.desktop`))}catch{}}export function applyLaunchOnLogin(t,e={}){try{const n=h(e);n.platform==="win32"?t?y(n):v(n):n.platform==="darwin"?t?L(n):D(n):t?x(n):S(n)}catch(n){console.error(`[weave] auto-start ${t?"enable":"disable"} failed:`,n)}}export function syncLaunchOnLogin(t={}){const e=d().startup;applyLaunchOnLogin(e?.launchOnLogin??!1,t)}

package/node_modules/@weavecode/server/dist/daemon/claude-liveness.d.ts

@@ -1,42 +1,6 @@
 /**
- * claude 会话存活判定：claude 自己维护 `~/.claude/sessions/<pid>.json`
- * 注册表（会话活动期持续刷新，进程死即停），sessionId↔pid 零埋点可得。
- * 判据 = 注册表存在 + `kill(pid, 0)`。pid 复用的残留误差（claude 死后
- * pid 被别的进程复用 → 误判活）用注册表里的 procStart 复核需要
- * WMI/NAPI 取进程启动时间，开销不值——留作已知残差。
+ * claude 判活的唯一实现已迁 harness（`@weavecode/harness` 的 claude/liveness.ts
+ * ——判据是 harness 专属知识，server 不自拼）。本文件只剩 re-export 壳：
+ * 存量 import 点（hooks 域 6 文件 + daemon 域 4 文件 + 测试）不动。
  */
-/** 注册表一行（只取判活相关字段）。 */
-export interface ClaudeSessionReg {
-    pid: number;
-    sessionId: string;
-}
-/** 解析一个登记文件；坏输入 null。 */
-export declare function parseClaudeSessionReg(jsonText: string): ClaudeSessionReg | null;
-/** signal 0 探活：ESRCH = 进程不在；EPERM 等 = 存在但无权，按活算。 */
-export declare function pidAlive(pid: number): boolean;
-/** 新会话启动竞态豁免：lastSeen 在此窗口内且查无登记 → 当未知，不判死。 */
-export declare const CLAUDE_REG_GRACE_MS = 90000;
-/**
- * 单条会话的 pidAlive 三态：
- * - 登记命中 → 直接是 kill(pid,0) 的结果（true/false）；
- * - 查无登记 + harness=claude + lastSeen 已过豁免窗 → false——claude 的登记
- *   文件随进程死被清（正常退出自清/崩溃后由后续启动 GC），旧会话查无登记
- *   即进程已死；豁免窗内不猜（新会话文件可能还没落盘）；
- * - 「仅一条 SessionStart」的空壳行不判：/continue、compact 会各留一行
- *   幽灵会话（事件跟在新 id 后面流），判死会把活着的会谈错标 terminated；
- *   它们反正由 SessionSweeper 在保活期后清走；
- * - 其余（codex/未知 harness/新鲜会话）→ null，上游不判。
- */
-export declare function pidAliveOf(row: {
-    sessionId: string;
-    harness?: string | null;
-    lastSeenAt: string;
-    lastEventType?: string | null;
-    eventCount?: number;
-}, liveness: Map<string, boolean>, now?: number): boolean | null;
-/**
- * sessionId → 是否活着 的映射。只覆盖注册表里有登记的（claude 会话）；
- * codex/旧会话/他机会话不进图——上游把「查不到」当未知，不许误判死。
- * 目录读不到（claude 没装过）同样给空图。
- */
-export declare function claudeLivenessById(dir?: string | null): Map<string, boolean>;
+export { type ClaudeSessionReg, parseClaudeSessionReg, pidAlive, CLAUDE_REG_GRACE_MS, pidAliveOf, shellDiscardedByClaude, claudeLivenessById, } from '@weavecode/harness';

package/node_modules/@weavecode/server/dist/daemon/claude-liveness.js

@@ -1 +1 @@
-import{readdirSync as c,readFileSync as l}from"node:fs";import{join as u}from"node:path";export function parseClaudeSessionReg(e){let t;try{t=JSON.parse(e)}catch{return null}const n=t;return typeof n?.pid!="number"||!Number.isInteger(n.pid)||n.pid<0||typeof n.sessionId!="string"||!n.sessionId?null:{pid:n.pid,sessionId:n.sessionId}}export function pidAlive(e){try{return process.kill(e,0),!0}catch(t){return t.code!=="ESRCH"}}function a(){const e=process.platform==="win32"?process.env.USERPROFILE:process.env.HOME;return e?u(e,".claude","sessions"):null}export const CLAUDE_REG_GRACE_MS=9e4;export function pidAliveOf(e,t,n=Date.now()){const r=t.get(e.sessionId);if(r!==void 0)return r;if(e.harness!=="claude"||e.lastEventType==="SessionStart"&&(e.eventCount??0)<=1)return null;const s=Date.parse(e.lastSeenAt);return!Number.isFinite(s)||n-s<CLAUDE_REG_GRACE_MS?null:!1}export function claudeLivenessById(e=null){const t=e??a(),n=new Map;if(!t)return n;let r;try{r=c(t)}catch{return n}for(const s of r){if(!/^\d+\.json$/.test(s))continue;let o;try{o=l(u(t,s),"utf8")}catch{continue}const i=parseClaudeSessionReg(o);i&&n.set(i.sessionId,pidAlive(i.pid))}return n}
+export{parseClaudeSessionReg,pidAlive,CLAUDE_REG_GRACE_MS,pidAliveOf,shellDiscardedByClaude,claudeLivenessById}from"@weavecode/harness";

package/node_modules/@weavecode/server/dist/daemon/config-routes.d.ts

@@ -0,0 +1,10 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { WeaveServerDeps } from './server.js';
+/**
+ * 资源管理 · harness 配置面（`/harness-config/*`）。
+ *
+ * 词表/落点/托管键/模型接口文法全归 harness 的 config 槽；这里只做「取档 → 读改写 →
+ * 快照与漂移」的装配。profile 快照落 `local/harness-config/<harness>/`，
+ * 写盘一律留备份。
+ */
+export declare function handleConfigRoutes(req: IncomingMessage, res: ServerResponse, deps: WeaveServerDeps, pathname: string, url: URL): Promise<boolean>;

package/node_modules/@weavecode/server/dist/daemon/config-routes.js

@@ -0,0 +1 @@
+import{homedir as B}from"node:os";import{access as F}from"node:fs/promises";import{isHarness as I}from"@weavecode/core";import{configSurfaceFor as k}from"../surfaces.js";import{baselineSnapshot as U,createProfile as J,LASTSEEN_ID as C,listBackups as K,listProfiles as h,readBackup as E,readSnapshot as N,removeProfile as L,renameProfile as $,pushBackup as j,saveProfile as D,setActive as V,syncBaseline as P,writeSnapshot as M}from"../config/profiles.js";import{readBody as R,sendJson as a}from"./http.js";import{getHarnessConfigDir as G}from"../db/paths.js";const H=["user","project","projectLocal","global"];function x(c){return typeof c=="string"&&H.includes(c)?c:null}function y(c,r){return c.serializeRaw(r)}function _(c,r,p){const w=c.files(p).find(m=>m.id===r);return w?w.path(p):""}async function O(c){try{const r=JSON.parse(await R(c));return typeof r=="object"&&r!==null&&!Array.isArray(r)?r:null}catch{return null}}async function z(c){if(!c)return!1;try{return await F(c),!0}catch{return!1}}async function T(c,r,p,w,m){const i=_(p,w,m),n=await p.read(w,m),e=y(p,n),t=await h(c,r,w),s=await U(c,r,w,t);s||await M(c,r,w,C,n);const o=s?y(p,s):y(p,n);return{harness:r,file:w,path:i,exists:await z(i),values:n,managedKeys:p.managedKeys(n),managedEntries:p.managedEntries(n),profiles:t.profiles,activeId:t.activeId,liveText:e,activeText:o,drifted:o!==e,backups:await K(c,r,w)}}function S(c,r,p){let w=null;if(r==="project"||r==="projectLocal"){const m=Number(p);if(!Number.isInteger(m)||m<=0)return"\u9700\u8981 projectId";const i=c.projects.getById(m);if(!i)return"\u9879\u76EE\u4E0D\u5B58\u5728";w=i.path}return{projectPath:w,homedir:B()}}export async function handleConfigRoutes(c,r,p,w,m){if(!w.startsWith("/harness-config"))return!1;const i=G();if(w==="/harness-config/catalog"&&c.method==="GET"){const n=m.searchParams.get("harness");if(!I(n))return a(r,400,{error:"Unknown harness"}),!0;const e=k(n);if(!e)return a(r,200,{supported:!1}),!0;const t=x(m.searchParams.get("file"))??"user",s={projectPath:null,homedir:B()},o=e.catalog(t);return a(r,200,{supported:!0,harness:n,file:t,rawFormat:e.rawFormat,files:e.files(s).map(u=>({id:u.id,profiles:u.profiles})),groups:o.groups,keys:o.keys,envVars:o.envVars}),!0}if(w==="/harness-config"&&c.method==="GET"){const n=m.searchParams.get("harness"),e=x(m.searchParams.get("file"));if(!I(n)||!e)return a(r,400,{error:"Unknown harness or file"}),!0;const t=k(n);if(!t)return a(r,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const s=S(p,e,m.searchParams.get("projectId"));return typeof s=="string"?(a(r,400,{error:s}),!0):(a(r,200,await T(i,n,t,e,s)),!0)}if(w==="/harness-config/values"&&c.method==="PUT"){const n=await O(c);if(!n)return a(r,400,{error:"Invalid JSON body"}),!0;const e=n.harness,t=x(n.file);if(!I(e)||!t)return a(r,400,{error:"Unknown harness or file"}),!0;const s=k(e);if(!s)return a(r,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=S(p,t,n.projectId);if(typeof o=="string")return a(r,400,{error:o}),!0;const u=n.values;if(typeof u!="object"||u===null||Array.isArray(u))return a(r,400,{error:'Missing "values"'}),!0;try{const f=await s.read(t,o);await j(i,e,t,f),await s.write(t,o,u);const v=await h(i,e,t);await P(i,e,t,v,await s.read(t,o))}catch(f){return a(r,400,{error:f.message}),!0}return a(r,200,await T(i,e,s,t,o)),!0}if(w==="/harness-config/raw"&&c.method==="PUT"){const n=await O(c);if(!n)return a(r,400,{error:"Invalid JSON body"}),!0;const e=n.harness,t=x(n.file);if(!I(e)||!t)return a(r,400,{error:"Unknown harness or file"}),!0;const s=k(e);if(!s)return a(r,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=S(p,t,n.projectId);if(typeof o=="string")return a(r,400,{error:o}),!0;let u;try{u=s.parseRaw(String(n.text??""))}catch(f){return a(r,400,{error:`\u4E0D\u662F\u5408\u6CD5${s.rawFormat==="toml"?" TOML":" JSON"}\uFF1A${f.message}`}),!0}try{const f=await s.read(t,o);await j(i,e,t,f),await s.write(t,o,u);const v=await h(i,e,t);await P(i,e,t,v,await s.read(t,o))}catch(f){return a(r,400,{error:f.message}),!0}return a(r,200,await T(i,e,s,t,o)),!0}if(w==="/harness-config/profile"&&c.method==="POST"){const n=await O(c);if(!n)return a(r,400,{error:"Invalid JSON body"}),!0;const e=n.harness,t=x(n.file),s=n.action;if(!I(e)||!t||typeof s!="string")return a(r,400,{error:"Unknown harness, file or action"}),!0;const o=k(e);if(!o)return a(r,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const u=S(p,t,n.projectId);if(typeof u=="string")return a(r,400,{error:u}),!0;const f=typeof n.id=="string"?n.id:"",v=typeof n.name=="string"?n.name.trim():"",A=typeof n.values=="object"&&n.values!==null&&!Array.isArray(n.values)?n.values:null;switch(s){case"list":{const d=await h(i,e,t);return a(r,200,d),!0}case"create":{const d=await h(i,e,t),l=await J(i,e,t,v||`\u914D\u7F6E ${d.profiles.length+1}`,A??await o.read(t,u));return a(r,200,{profile:l,state:await h(i,e,t)}),!0}case"save":return(await h(i,e,t)).profiles.some(l=>l.id===f)?(await D(i,e,t,f,A??await o.read(t,u)),a(r,200,await h(i,e,t)),!0):(a(r,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0);case"compare":{const d=n.target;if(d==="live")return a(r,200,{text:y(o,await o.read(t,u))}),!0;if(d==="backup"){const g=typeof n.backupId=="string"?n.backupId:"",b=await E(i,e,t,g);return b?(a(r,200,{text:y(o,b)}),!0):(a(r,404,{error:"\u5907\u4EFD\u4E0D\u5B58\u5728"}),!0)}const l=await N(i,e,t,f);return l?(a(r,200,{text:y(o,l)}),!0):(a(r,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0)}case"duplicate":{const d=await N(i,e,t,f);if(!d)return a(r,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0;const l=await h(i,e,t),g=await J(i,e,t,v||`\u914D\u7F6E ${l.profiles.length+1}`,d);return a(r,200,{profile:g,state:await h(i,e,t)}),!0}case"rename":return v?(await $(i,e,t,f,v),a(r,200,await h(i,e,t)),!0):(a(r,400,{error:"\u7F3A\u5C11\u540D\u79F0"}),!0);case"remove":return await L(i,e,t,f),a(r,200,await h(i,e,t)),!0;case"activate":{const d=await N(i,e,t,f);if(!d)return a(r,404,{error:"\u914D\u7F6E\u4E0D\u5B58\u5728"}),!0;const l=await o.read(t,u);if(n.confirm!==!0)return a(r,200,{requiresConfirm:!0,liveText:y(o,l),profileText:y(o,d)}),!0;try{await j(i,e,t,l),await o.write(t,u,d),await V(i,e,t,f)}catch(g){return a(r,400,{error:g.message}),!0}return a(r,200,await T(i,e,o,t,u)),!0}case"acceptDrift":{const d=await h(i,e,t),l=await U(i,e,t,d);return l&&await j(i,e,t,l),await P(i,e,t,d,await o.read(t,u)),a(r,200,await T(i,e,o,t,u)),!0}case"restoreBaseline":{const d=await h(i,e,t),l=await U(i,e,t,d);if(!l)return a(r,404,{error:"\u6CA1\u6709\u53EF\u6062\u590D\u7684\u57FA\u7EBF"}),!0;const g=await o.read(t,u);if(n.confirm!==!0)return a(r,200,{requiresConfirm:!0,liveText:y(o,g),baselineText:y(o,l)}),!0;try{await j(i,e,t,g),await o.write(t,u,l),await P(i,e,t,d,l)}catch(b){return a(r,400,{error:b.message}),!0}return a(r,200,await T(i,e,o,t,u)),!0}case"restoreBackup":{const d=typeof n.backupId=="string"?n.backupId:"",l=await E(i,e,t,d);if(!l)return a(r,404,{error:"\u5907\u4EFD\u4E0D\u5B58\u5728"}),!0;const g=await o.read(t,u);if(n.confirm!==!0)return a(r,200,{requiresConfirm:!0,liveText:y(o,g),backupText:y(o,l)}),!0;try{await j(i,e,t,g),await o.write(t,u,l);const b=await h(i,e,t);await P(i,e,t,b,l)}catch(b){return a(r,400,{error:b.message}),!0}return a(r,200,await T(i,e,o,t,u)),!0}default:return a(r,400,{error:`\u672A\u77E5\u52A8\u4F5C\uFF1A${s}`}),!0}}if(w==="/harness-config/models"&&c.method==="POST"){const n=await O(c);if(!n)return a(r,400,{error:"Invalid JSON body"}),!0;const e=n.harness,t=x(n.file)??"user";if(!I(e))return a(r,400,{error:"Unknown harness"}),!0;const s=k(e);if(!s)return a(r,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=S(p,t,n.projectId);if(typeof o=="string")return a(r,400,{error:o}),!0;try{const u=await s.read(t,o),f=await s.models({values:u,file:t,homedir:o.homedir,baseUrl:typeof n.baseUrl=="string"?n.baseUrl:null,apiKey:typeof n.apiKey=="string"?n.apiKey:null,authToken:typeof n.authToken=="string"?n.authToken:null});a(r,200,f)}catch(u){a(r,502,{error:u.message})}return!0}if(w==="/harness-config/preview"&&c.method==="POST"){const n=await O(c);if(!n)return a(r,400,{error:"Invalid JSON body"}),!0;const e=n.harness,t=x(n.file);if(!I(e)||!t)return a(r,400,{error:"Unknown harness or file"}),!0;const s=k(e);if(!s)return a(r,400,{error:"\u914D\u7F6E\u9762\u672A\u5B9E\u73B0"}),!0;const o=S(p,t,n.projectId);if(typeof o=="string")return a(r,400,{error:o}),!0;const u=n.values;if(typeof u!="object"||u===null||Array.isArray(u))return a(r,400,{error:'Missing "values"'}),!0;try{const f=await s.read(t,o);a(r,200,{before:y(s,f),after:y(s,u)})}catch(f){a(r,400,{error:f.message})}return!0}return a(r,404,{error:"Not found"}),!0}

package/node_modules/@weavecode/server/dist/daemon/cron.d.ts

@@ -0,0 +1,20 @@
+/**
+ * 5 字段 cron（分 时 日 月 周，本机时区，无秒/无 @macro）。解析器只在 server：
+ * web 的 cron 构建器结构上只产出合法表达式，不镜像解析逻辑。
+ * 日/周同时受限时按 vixie cron 的 OR 语义（任一命中即算）。
+ */
+export interface CronSchedule {
+    minutes: number[];
+    hours: number[];
+    doms: number[];
+    months: number[];
+    dows: number[];
+    domAny: boolean;
+    dowAny: boolean;
+}
+export declare function parseCron(expr: string): CronSchedule | null;
+export declare function matchesMinute(s: CronSchedule, at: Date): boolean;
+/** 下一次触发时刻（ISO）；一年内无解（如 2 月 30 日）→ null。 */
+export declare function nextRunAt(s: CronSchedule, from?: Date): string | null;
+/** 去重键：本地分钟（`last_cron_at` 落它，同一分钟只 fire 一次）。 */
+export declare function minuteKey(at: Date): string;

package/node_modules/@weavecode/server/dist/daemon/cron.js

@@ -0,0 +1 @@
+const d=[{min:0,max:59},{min:0,max:23},{min:1,max:31},{min:1,max:12},{min:0,max:7}];export function parseCron(t){const n=t.trim().split(/\s+/);if(n.length!==5)return null;const e=[];for(let u=0;u<5;u++){const r=a(n[u],d[u].min,d[u].max);if(!r)return null;e.push(r)}const s=[...new Set(e[4].map(u=>u===7?0:u))].sort((u,r)=>u-r);return{minutes:e[0],hours:e[1],doms:e[2],months:e[3],dows:s,domAny:n[2]==="*",dowAny:n[4]==="*"}}function a(t,n,e){const s=new Set;for(const u of t.split(",")){const[r,m]=u.split("/");if(r===void 0)return null;const c=m===void 0?1:Number(m);if(!Number.isInteger(c)||c<1||c>e)return null;let i,o;if(r==="*")i=n,o=e;else if(r.includes("-")){const[l,g]=r.split("-");i=Number(l),o=Number(g)}else i=Number(r),o=m===void 0?i:e;if(!Number.isInteger(i)||!Number.isInteger(o)||i<n||o>e||i>o)return null;for(let l=i;l<=o;l+=c)s.add(l)}return s.size===0?null:[...s].sort((u,r)=>u-r)}function f(t,n){const e=t.doms.includes(n.getDate()),s=t.dows.includes(n.getDay());return t.domAny&&t.dowAny?!0:t.domAny?s:t.dowAny?e:e||s}export function matchesMinute(t,n){return t.minutes.includes(n.getMinutes())&&t.hours.includes(n.getHours())&&t.months.includes(n.getMonth()+1)&&f(t,n)}export function nextRunAt(t,n=new Date){const e=new Date(n.getTime());e.setSeconds(0,0),e.setMinutes(e.getMinutes()+1);const s=new Date(n.getTime()+366*864e5);for(;e<=s;){if(!t.months.includes(e.getMonth()+1)){e.setMonth(e.getMonth()+1,1),e.setHours(0,0,0,0);continue}if(!f(t,e)){e.setDate(e.getDate()+1),e.setHours(0,0,0,0);continue}if(!t.hours.includes(e.getHours())){e.setHours(e.getHours()+1,0,0,0);continue}if(!t.minutes.includes(e.getMinutes())){e.setMinutes(e.getMinutes()+1,0,0);continue}return e.toISOString()}return null}export function minuteKey(t){const n=e=>String(e).padStart(2,"0");return`${t.getFullYear()}-${n(t.getMonth()+1)}-${n(t.getDate())}T${n(t.getHours())}:${n(t.getMinutes())}`}

package/node_modules/@weavecode/server/dist/daemon/dashboard-pusher.d.ts

@@ -0,0 +1,25 @@
+import type { HookEventBus } from '../hooks/bus.js';
+import type { HookEventRepository } from '../repositories/hook-events.js';
+import type { ProjectRepository } from '../repositories/projects.js';
+import type { SessionRepository } from '../repositories/sessions.js';
+import { type DashboardRateCache } from '../hooks/dashboard-rate.js';
+/** 图窗：1 小时 × 10 秒一格。 */
+export declare const DASHBOARD_WINDOW_MS = 3600000;
+export interface DashboardPushDeps {
+    rate: DashboardRateCache;
+    events: Pick<HookEventRepository, 'countAll' | 'countSince' | 'seriesBySecond'>;
+    sessions: Pick<SessionRepository, 'countAll'>;
+    projects: Pick<ProjectRepository, 'list'>;
+    bus: Pick<HookEventBus, 'emit' | 'subscribe'>;
+}
+/**
+ * 仪表盘推送（事件驱动）：
+ * - **连接时**（SseHub 首个订阅者 attach）先推总量，再把一小时历史按 10 分钟分块
+ *   流式推下去——每块一到前端就能画，不等整段查完；
+ * - **之后**只在真有 `event.ingested` 时推增量（1 秒合并），没有数据就不发帧；
+ * - 速率读进程内快照，只有 daemon 起来后第一次 attach 才回填一次库。
+ */
+export declare function startDashboardPusher(deps: DashboardPushDeps): {
+    attach: () => void;
+    stop: () => void;
+};

package/node_modules/@weavecode/server/dist/daemon/dashboard-pusher.js

@@ -0,0 +1 @@
+import{RATE_BUCKET_MS as s}from"../hooks/dashboard-rate.js";export const DASHBOARD_WINDOW_MS=36e5;const b=60,d=1e3,h=6e4;export function startDashboardPusher(t){let o=!1,i={projects:0,sessions:0},a=0;const r=()=>{i={projects:t.projects.list().length,sessions:t.sessions.countAll()},a=Date.now()},l=()=>({...i,...t.rate.totals}),m=()=>{queueMicrotask(()=>{const n=Date.now(),c=DASHBOARD_WINDOW_MS/s,u=Math.floor(n/s)*s-(c-1)*s,f=t.projects.list().map(e=>e.id);t.rate.isSeeded||(t.rate.seed(t.events.seriesBySecond(f,new Date(u).toISOString())),t.rate.seedTotals(t.events.countAll(),t.events.countSince(f,new Date(new Date(n).setHours(0,0,0,0)).toISOString())),r()),Date.now()-a>h&&r();const D=new Date(n).toISOString();t.bus.emit({kind:"dashboard.totals",at:D,totals:l()});for(let e=0;e<c;e+=b){const E=Math.min(b,c-e),_=u+e*s,I=t.rate.bucketsFor(_,E);t.bus.emit({kind:"dashboard.series",at:D,series:I.map((A,M)=>({at:new Date(_+M*s).toISOString().slice(0,19),n:A}))})}})},w=t.bus.subscribe(n=>{n.kind==="event.ingested"&&(o=!0)}),S=setInterval(()=>{o&&(o=!1,Date.now()-a>h&&r(),t.bus.emit({kind:"dashboard.delta",at:new Date().toISOString(),series:t.rate.recentBuckets(12),totals:l()}))},d);return S.unref?.(),{attach:m,stop:()=>{w(),clearInterval(S)}}}

package/node_modules/@weavecode/server/dist/daemon/decision-config.d.ts

@@ -0,0 +1,10 @@
+/**
+ * 决策模型（编排条件边判断）的供应商 API key：落 `<dataDir>/decision.json`（0600），
+ * 与 ai.json 同口径——密钥不进 UI 可读的 settings 表。地址与模型名是非密配置，
+ * 归 settings 表（`decision.baseUrl` / `decision.model`）。
+ */
+/** 读 key；缺失/坏文件 → null（调用方按「未配置」处理，不抛）。 */
+export declare function readDecisionKey(file?: string): string | null;
+/** 写 key（原子写 + 0600）；`null` = 清除（删文件）。 */
+export declare function writeDecisionKey(apiKey: string | null, file?: string): void;
+export declare function hasDecisionKey(file?: string): boolean;

package/node_modules/@weavecode/server/dist/daemon/decision-config.js

@@ -0,0 +1,2 @@
+import{chmodSync as o,existsSync as c,mkdirSync as i,readFileSync as u,renameSync as y,rmSync as m,writeFileSync as s}from"node:fs";import p from"node:path";import{getDecisionKeyPath as t}from"../db/paths.js";export function readDecisionKey(n=t()){if(!c(n))return null;try{const r=JSON.parse(u(n,"utf8"));return typeof r.apiKey=="string"&&r.apiKey!==""?r.apiKey:null}catch{return null}}export function writeDecisionKey(n,r=t()){if(n===null||n===""){m(r,{force:!0});return}i(p.dirname(r),{recursive:!0});const e=`${r}.tmp`;s(e,`${JSON.stringify({apiKey:n},null,2)}
+`,{encoding:"utf8",mode:384}),y(e,r);try{o(r,384)}catch{}}export function hasDecisionKey(n=t()){return readDecisionKey(n)!==null}