codebee 0.1.95 → 0.1.97

package/app/ui/style.css

@@ -344,6 +344,52 @@ html[data-skin="hermes"][data-theme="light"] {
   --uc-ca: #b0763f;
   --uc-out: #3d8f5f;
 }
+/* 简白（Codex 式极简）：日间=纯白画布 + 浅灰分区 + 发丝分隔 + 克制蓝，素面无装饰；
+ * 夜间=近黑画布 + 深灰分区同构。装饰性渐变/网格在下方统一压掉（与 contrast 同款规则）。 */
+html[data-skin="paper"] {
+  --bg: #0f0f0e;
+  --sidebar: #161615;
+  --panel: #1d1d1c;
+  --panel2: #272726;
+  --border: rgba(255, 255, 255, .10);
+  --border-strong: rgba(255, 255, 255, .22);
+  --text: #ecebe8;
+  --muted: #9a998f;
+  --accent: #6ea8fe;
+  --accent2: #94c1ff;
+  --ok: #3fbf8a;
+  --warn: #e2b34a;
+  --bad: #ef6a6a;
+  --chip-queued-bg: #272726;
+  --log-bg: #0b0b0a;
+  --log-text: #c9c8c2;
+  --shadow: 0 10px 30px rgba(0, 0, 0, .5);
+  --uc-in: #6ea8fe;
+  --uc-ca: #2fc6b1;
+  --uc-out: #e2b34a;
+}
+html[data-skin="paper"][data-theme="light"] {
+  --bg: #ffffff;
+  --sidebar: #f7f7f5;
+  --panel: #ffffff;
+  --panel2: #f5f5f3;
+  --border: #e8e8e4;
+  --border-strong: #d7d7d2;
+  --text: #21201e;
+  --muted: #87867f;
+  --accent: #2563eb;
+  --accent2: #1d4ed8;
+  --ok: #1a7f37;
+  --warn: #9a6700;
+  --bad: #cf222e;
+  --chip-queued-bg: #f5f5f3;
+  --log-bg: #f6f7f8;
+  --log-text: #3c3f43;
+  --shadow: 0 10px 30px rgba(0, 0, 0, .06);
+  --uc-in: #2563eb;
+  --uc-ca: #0d9488;
+  --uc-out: #d97706;
+}
 * { box-sizing: border-box; }
 html, body { height: 100%; }
 body {
@@ -369,8 +415,6 @@ body.side-collapsed #app { grid-template-columns: 0 1fr; }
   background: var(--sidebar); border-right: 1px solid var(--border);
   padding: 14px 12px 12px; min-width: 0; overflow: hidden;
   transition: opacity .15s;
-}  padding: 14px 12px 12px; min-width: 0; overflow: hidden;
-  transition: opacity .15s;
   position: relative;
 }
 body.side-collapsed #sidebar { border-right: none; padding-left: 0; padding-right: 0; opacity: 0; pointer-events: none; }
@@ -1235,9 +1279,8 @@ body.inspector-open #inspector { display: flex; }
 /* 手机抽屉遮罩：抽屉展开时盖住内容区，点击关闭抽屉 */
 #drawer-mask { display: none; }
 @media (max-width: 900px) {
-  #app { grid-template-columns: 1fr; }
-  body.side-collapsed #app { grid-template-columns: 1fr; }
-  body.side-collapsed #app { grid-template-columns: 1fr; }
+  /* 保留 42px 导航轨列：纯 1fr 单列会让 .side-rail（grid 首子）独占一行变顶部横条 */
+  #app { grid-template-columns: 42px minmax(0, 1fr); }
   #side-resizer { display: none; }
   #sidebar {
     position: fixed; z-index: 60; top: 0; left: 0; bottom: 0;
@@ -3142,7 +3185,10 @@ body {
     var(--bg);
   background-attachment: fixed;
 }
-html[data-skin="contrast"] body { background-image: none; }
+html[data-skin="contrast"] body,
+html[data-skin="paper"] body { background-image: none; }
+/* 简白连角落的网格纹理一起收掉：纯白画布上任何底纹都是脏 */
+html[data-skin="paper"] body::before { content: none; }
 
 /* 2) 品牌字标：主色字 + 底部发丝分隔线（仍是纯文字品牌，无任何图片） */
 .brand-name { color: var(--accent); letter-spacing: .02em; }
@@ -3480,7 +3526,9 @@ button.primary:hover { filter: brightness(.96); }
 
 @media (max-width: 860px) {
   #app { grid-template-columns: 42px minmax(0, 1fr); }
-  #sidebar { position: fixed; z-index: 30; left: 42px; top: 0; bottom: 0; width: 228px; transform: translateX(0); box-shadow: 16px 0 34px rgba(30,40,50,.12); }
+  /* z-index 必须压过 #drawer-mask(55)：低于遮罩时抽屉整层被半透明遮罩盖住，
+   * 抽屉里点什么都是点到遮罩（=关抽屉），主区也同时被盖——手机端「无法操作」实案 */
+  #sidebar { position: fixed; z-index: 60; left: 42px; top: 0; bottom: 0; width: 228px; transform: translateX(0); box-shadow: 16px 0 34px rgba(30,40,50,.12); }
   body.side-collapsed #app { grid-template-columns: 42px minmax(0, 1fr); }
   body.side-collapsed #sidebar { transform: translateX(-110%); opacity: 0; }
   main { padding: 20px 16px 58px; }
@@ -3833,6 +3881,21 @@ body.inspector-open #run-detail #rd-log.rd-logdrawer {
 #run-detail .rd-pane[data-pane="bookmeta"] #rd-bookmeta {
   padding-top: 4px;
 }
+.rd-checkpoints, .rd-project-memory {
+  margin: 8px 0 14px; padding: 12px 14px; border: 1px solid var(--border);
+  border-radius: 12px; background: color-mix(in srgb, var(--panel) 72%, transparent);
+}
+.rd-checkpoints-head { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; margin-bottom: 8px; }
+.rd-checkpoints-head strong { margin-right: auto; }
+.rd-checkpoint-row, .rd-memory-row { padding: 9px 0; border-top: 1px solid var(--border); }
+.rd-checkpoint-row > strong { margin-right: 8px; overflow-wrap: anywhere; }
+.rd-checkpoint-row pre, .rd-memory-row pre {
+  max-height: 240px; overflow: auto; white-space: pre-wrap; overflow-wrap: anywhere;
+  margin: 8px 0 0; padding: 9px; border-radius: 8px; background: var(--bg);
+  color: var(--text); font: 12px/1.5 ui-monospace, Consolas, monospace;
+}
+.rd-memory-row > div:first-child { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+.rd-memory-actions { display: flex; gap: 6px; margin-top: 8px; }
 #run-detail .rd-pane[data-pane="git"] #rd-git,
 #run-detail .rd-pane[data-pane="bible"] #rd-bible,
 #run-detail .rd-pane[data-pane="bookmeta"] #rd-bookmeta {
@@ -5109,6 +5172,9 @@ main.chat-fill #run-detail.chat-mode > .rd-main { overflow: hidden; }
     max-height: none;
     margin-bottom: 12px;
   }
+  /* 浮卡让位 padding 只属于 ≥980 的桌面浮卡布局：窄屏对话态吃满主区，
+     32px 左右留白在 390 视口里白吃 64px（对话列只剩 284px）实案 */
+  main.chat-fill { padding: 12px 14px; }
   #rd-rail > .detail-head > .rd-actions #btn-delete {
     grid-column: auto;
     justify-self: stretch;
@@ -6583,7 +6649,8 @@ button.primary { background:var(--accent); box-shadow:0 3px 10px color-mix(in sr
 button.primary:hover { filter:brightness(.96); }
 @media (max-width:860px) {
   #app, body.side-collapsed #app { grid-template-columns:42px minmax(0,1fr); }
-  #sidebar { position:fixed; z-index:30; left:42px; top:0; bottom:0; width:228px; transform:translateX(0); box-shadow:16px 0 34px rgba(30,40,50,.12); }
+  /* z-index 必须压过 #drawer-mask(55)：低于遮罩时抽屉整层被盖、手机端无法操作（同 3528 层注释） */
+  #sidebar { position:fixed; z-index:60; left:42px; top:0; bottom:0; width:228px; transform:translateX(0); box-shadow:16px 0 34px rgba(30,40,50,.12); }
   body.side-collapsed #sidebar { transform:translateX(-110%); opacity:0; }
   main { padding:20px 16px 58px; }
   .topbar { padding:9px 14px; }
@@ -6605,7 +6672,7 @@ button.primary:hover { filter:brightness(.96); }
    inherit ocean/forest/amber/violet/contrast choices instead of imposing a new
    brand color. */
 html[data-skin="ocean"][data-theme="light"] {
-  --bg: #fff; --sidebar: #eff5fd; --panel: #fff; --panel2: #f0f6fd;
+  --bg: #ffffff; --sidebar: #eff5fd; --panel: #fff; --panel2: #f0f6fd;
   --border: #d7e3f4; --border-strong: #b9cde8; --text: #0c1a2c; --muted: #526983;
   --accent: #1f6fd0; --accent2: #5b4fe0; --ok: #0d9a72; --warn: #a9761a;
   --bad: #d23c58; --chip-queued-bg: #f0f6fd; --log-bg: #f4f8fe; --log-text: #33475f;
@@ -7096,3 +7163,116 @@ main.browser-page-active #page-settings > #sub-browser .browser-shell {
   font-size: 12.5px; line-height: 1.65; white-space: pre-wrap; word-break: break-word;
   max-height: 180px; overflow: auto; color: var(--text);
 }
+
+/* 关于页「交流与支持」二维码卡（追加尾防并行重排）：白底垫卡保证暗色皮肤下
+ * 黑白二维码仍清晰，两卡并排窄屏自动换行。 */
+.qr-row { display: flex; flex-wrap: wrap; gap: 14px; margin: 8px 0 4px; }
+.qr-card {
+  margin: 0; background: #fff; border: 1px solid var(--border); border-radius: 10px;
+  padding: 8px 8px 4px; text-align: center;
+}
+.qr-card img { display: block; width: 132px; height: auto; border-radius: 6px; }
+.qr-card .hint { margin: 4px 0 2px; color: var(--muted); max-width: 140px; }
+
+/* Reference office: artwork and live screens always share one aspect ratio. */
+#rd-hive .sec-title { margin-bottom: 10px; }
+.hive-scene-tools { display: flex; align-items: center; gap: 7px; min-height: 38px; margin-bottom: 8px; color: var(--muted); font-size: 11px; }
+.hive-view-switch { display: inline-flex; gap: 2px; padding: 3px; border: 1px solid var(--border); border-radius: 9px; background: var(--panel); }
+.hive-view-btn, .hive-scene-btn {
+  min-height: 28px; padding: 4px 10px; border: 1px solid transparent; border-radius: 6px;
+  background: transparent; color: var(--muted); font: inherit; cursor: pointer;
+}
+.hive-view-btn:hover, .hive-scene-btn:hover { color: var(--text); background: color-mix(in srgb, var(--accent) 8%, transparent); }
+.hive-view-btn.active { border-color: color-mix(in srgb, var(--accent) 32%, var(--border)); background: color-mix(in srgb, var(--accent) 12%, var(--panel)); color: var(--accent); }
+.hive-scene-hint { margin-left: 8px; }
+.hive-scene-spacer { flex: 1; }
+.hive-scene-btn { min-width: 31px; border-color: var(--border); background: var(--panel); font-size: 13px; }
+.hive-scene-btn:disabled { opacity: .4; cursor: default; }
+.hive-scene-reset { font-size: 11px; }
+.hive-scene-pager { display: flex; align-items: center; gap: 5px; }
+.hive-scene-pager[hidden] { display: none; }
+.hive-scene-page-label { white-space: nowrap; font-family: var(--mono); }
+.hive-viewport {
+  position: relative; width: 100%; aspect-ratio: 2848 / 1600; overflow: hidden;
+  container-type: inline-size; border: 1px solid var(--border); border-radius: 12px;
+  background: #d4e7f7; cursor: grab; touch-action: pan-y;
+}
+.hive-viewport.is-dragging { cursor: grabbing; }
+.hive-reference-layer { position: absolute; inset: 0; transform-origin: center; }
+.hive-reference-layer[hidden] { display: none; }
+.hive-reference { position: absolute; inset: 0; display: block; width: 100%; height: 100%; user-select: none; pointer-events: none; }
+.hive-gl { display: none; }
+.hive-gl-overlay { position: absolute; inset: 0; pointer-events: none; }
+#rd-hive-viewport.hive-mode-3d #rd-hive-cells { display: none; }
+#rd-hive-viewport.hive-mode-2d { height: auto; aspect-ratio: auto; overflow: visible; border: 0; border-radius: 0; background: transparent; cursor: auto; }
+#rd-hive-viewport.hive-mode-2d .hive-reference-layer { display: none; }
+.hg-badge {
+  position: absolute; transform: translate(-50%, -50%); width: 10.8%; height: 7.6%;
+  display: flex; flex-direction: column; align-items: center; justify-content: center; gap: .4cqw;
+  padding: .3cqw; border: 0; border-radius: 1.4cqw; pointer-events: auto; cursor: pointer;
+  color: #101c29; background: rgba(255,255,255,.98); box-shadow: 0 .35cqw .9cqw rgba(14,55,88,.22);
+  text-align: center; font-family: "Microsoft YaHei", sans-serif;
+}
+.hg-badge .hg-name { font-size: 1.25cqw; font-weight: 800; line-height: 1.15; white-space: nowrap; }
+.hg-badge .hg-meta { font-size: .58cqw; color: #536d7d; line-height: 1; white-space: nowrap; }
+.hg-badge:disabled { cursor: default; opacity: 1; }
+.hg-badge:hover:not(:disabled), .hg-badge:focus-visible { outline: .12cqw solid #71eaf9; outline-offset: .2cqw; }
+.hg-badge.hg-active { box-shadow: 0 0 1.1cqw rgba(0, 236, 255, .65); }
+.hg-monitor {
+  position: absolute; display: grid; grid-template-columns: 1fr auto; grid-template-rows: auto auto 1fr;
+  padding: .12cqw .3cqw; gap: .08cqw .18cqw; overflow: hidden; border: 0; border-radius: 0;
+  pointer-events: auto; cursor: pointer; text-align: left; color: #d8f9ff; background: #06244a;
+  font-family: var(--mono); font-size: .57cqw; line-height: 1.15;
+}
+.hg-monitor:disabled { opacity: 1; cursor: default; }
+.hg-monitor:hover:not(:disabled), .hg-monitor:focus-visible { outline: .12cqw solid #91f6ff; outline-offset: .1cqw; z-index: 1; }
+.hg-monitor-role { grid-column: 1 / -1; font-size: .69cqw; line-height: 1.16; font-weight: 700; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.hg-monitor-status { color: #94deee; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.hg-monitor-time { grid-column: 2; grid-row: 2; color: #9dd8e4; white-space: nowrap; }
+.hg-monitor-tail { grid-column: 1 / -1; color: #b3e7f2; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.hg-monitor.st-running { box-shadow: inset 0 -.1cqw #52edf5; }
+.hg-monitor.st-running .hg-monitor-status { color: #5cf5fc; }
+.hg-monitor.st-done .hg-monitor-status { color: #99f3bf; }
+.hg-monitor.st-failed .hg-monitor-status, .hg-monitor.st-timeout .hg-monitor-status { color: #ffa2a2; }
+.hg-monitor.st-idle { color: #9abccf; }
+.hive-scene-tools.hive-2d .hive-scene-hint, .hive-scene-tools.hive-2d .hive-scene-pager { display: none; }
+.hg-chip, .hg-tip { display: none; }
+@media (prefers-reduced-motion: reduce) {
+  .hive-reference-layer { transition: none; }
+}
+
+.hive-detail-dialog {
+  width: min(800px, calc(100vw - 32px)); max-height: 84vh; padding: 0; overflow: hidden;
+  border: 1px solid var(--border); border-radius: 14px; color: var(--text); background: var(--panel);
+  box-shadow: 0 24px 90px #0005;
+}
+.hive-detail-dialog::backdrop { background: #04182c66; backdrop-filter: blur(3px); }
+.hive-detail-head { display: flex; align-items: center; gap: 12px; padding: 18px 22px; border-bottom: 1px solid var(--border); }
+.hive-detail-head h3 { margin: 0; flex: 1; overflow-wrap: anywhere; font-size: 17px; }
+.hive-detail-close { min-width: 32px; min-height: 32px; border: 1px solid var(--border); border-radius: 6px; background: var(--panel2); color: var(--text); cursor: pointer; }
+.hive-detail-meta { display: flex; flex-wrap: wrap; gap: 8px 16px; padding: 12px 22px; font-size: 12px; color: var(--muted); }
+.hive-detail-status { color: var(--accent); font-weight: 600; }
+.hive-detail-log { margin: 0; padding: 18px 22px; min-height: 160px; max-height: 56vh; overflow: auto; white-space: pre-wrap; overflow-wrap: anywhere; color: var(--log-text); background: var(--log-bg); font: 12px/1.7 var(--mono); }
+.hive-detail-error { margin: 0; padding: 8px 22px; color: var(--bad); font-size: 12px; }
+.hive-detail-error:empty { display: none; }
+@media (max-width: 720px) {
+  .hive-scene-tools { flex-wrap: wrap; }
+  .hive-scene-hint { order: 2; width: 100%; margin: 0 0 3px; }
+  .hive-scene-spacer { flex: 1 1 0; }
+  .hive-detail-head, .hive-detail-meta, .hive-detail-log { padding-inline: 14px; }
+}
+
+/* ---- 发布台·批量选择（pb-pend）：待发章号 chips + 全选/清空 + 发布所选/直发所选 ---- */
+.pb-pend { width: 100%; margin-top: 6px; padding: 6px 8px; border: 1px solid var(--line);
+  border-radius: 8px; font-size: 12px; }
+.pb-pend-head { display: flex; gap: 10px; align-items: center; color: var(--muted); }
+.pb-pend-head a { color: var(--accent, #4a7dbe); text-decoration: none; }
+.pb-pend-chips { display: flex; flex-wrap: wrap; gap: 4px; margin-top: 5px;
+  max-height: 96px; overflow: auto; }
+.pb-chip { display: inline-flex; align-items: center; gap: 3px; padding: 1px 6px;
+  border: 1px solid var(--line); border-radius: 10px; cursor: pointer;
+  color: var(--muted); user-select: none; }
+.pb-chip.on { border-color: var(--accent, #4a7dbe); color: var(--text); }
+.pb-chip input { margin: 0; }
+.pb-pend-btns { display: flex; gap: 8px; margin-top: 6px; }
+.pb-vol { font-size: 11px; color: var(--accent, #4a7dbe); margin-top: 5px; font-weight: 600; }

package/bin/tutti.js

@@ -1,147 +1,147 @@
-#!/usr/bin/env node
-'use strict';
-/*
- * CodeBee 启动垫片：在本机找 Python 3.8+，以子进程方式运行包内 app/main.py。
- * npm 只负责分发与版本管理，不携带解释器——所以运行时才探测 python，
- * 找不到就报错并给出安装指引（不写 postinstall，避免在别人机器上制造环境事故）。
- *
- * 安全边界：
- *  - 子进程可执行文件全部是本文件内的字面量（py / python / python3）——包括
- *    TUTTI_PYTHON 覆盖时：它只允许在这三个字面量里选一个，绝不拼接任意路径；
- *  - 参数数组全由字面量常量拼成，不启用 shell；
- *  - 探测只传 `--version`（不向解释器传递任何代码）；Windows 商店的 python.exe
- *    假占位会非零退出，被 catch 后自然跳过；
- *  - 用户参数逐个过白名单校验（仅字母数字与 _ - . : = / @ % 空格），
- *    含 shell 元字符/控制字符的参数直接拒绝。
- */
-const { execFileSync, spawn } = require('child_process');
-const path = require('path');
-
-const MIN_MAJOR = 3;
-const MIN_MINOR = 8;
-const MAIN = path.join(__dirname, '..', 'app', 'main.py');
-const SAFE_ARG = /^[A-Za-z0-9_\-.:=/@% ]+$/;
-
-// 解析 `--version` 输出：形如 "Python 3.12.4"，返回 {ver, major, minor} 或 null。
-// 纯字符串切分，不用正则匹配执行路径。
-function parseVersion(text) {
-  const at = String(text).indexOf('Python ');
-  if (at === -1) return null;
-  const parts = String(text).slice(at + 7).trim().split(' ')[0].split('.');
-  const major = Number(parts[0]);
-  const minor = Number(parts[1]);
-  if (!Number.isFinite(major) || !Number.isFinite(minor)) return null;
-  return { ver: major + '.' + minor, major: major, minor: minor };
-}
-
-function probePy() {
-  try {
-    return parseVersion(execFileSync('py', ['-3', '--version'],
-      { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }));
-  } catch (e) { return null; }
-}
-function probePython() {
-  try {
-    return parseVersion(execFileSync('python', ['--version'],
-      { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }));
-  } catch (e) { return null; }
-}
-function probePython3() {
-  try {
-    return parseVersion(execFileSync('python3', ['--version'],
-      { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }));
-  } catch (e) { return null; }
-}
-
-// 探测顺序：win32 优先 py 启动器（跨版本选真 3.x），其余按 python3 → python。
-function resolvePython() {
-  const order = process.platform === 'win32'
-    ? [['py', probePy], ['python', probePython], ['python3', probePython3]]
-    : [['python3', probePython3], ['python', probePython]];
-  for (const [name, probe] of order) {
-    const hit = probe();
-    if (!hit) continue;
-    if (hit.major > MIN_MAJOR || (hit.major === MIN_MAJOR && hit.minor >= MIN_MINOR)) {
-      return { name: name };
-    }
-    return { tooOld: true, name: name, ver: hit.ver };
-  }
-  return null;
-}
-
-function guide() {
-  const url = { win32: 'https://www.python.org/downloads/windows/',
-    darwin: 'https://www.python.org/downloads/macos/',
-    linux: 'https://docs.python.org/3/using/unix.html' }[process.platform]
-    || 'https://www.python.org/downloads/';
-  return 'CodeBee 需要本机安装 Python 3.8+（npm 包不含解释器）。\n'
-    + '  · 安装：' + url + '\n'
-    + '  · Windows 安装时勾选 “Add python.exe to PATH”（自带 py 启动器）\n'
-    + '装好后重新运行：codebee';
-}
-
-const py = resolvePython();
-if (!py) {
-  console.error('[CodeBee] 未找到可用的 Python。\n' + guide());
-  process.exit(1);
-}
-if (py.tooOld) {
-  console.error('[CodeBee] 找到 ' + py.name + '（' + py.ver + '），但版本过低。\n' + guide());
-  process.exit(1);
-}
-
-const userArgs = [];
-for (const a of process.argv.slice(2)) {
-  if (typeof a === 'string' && SAFE_ARG.test(a)) {
-    userArgs.push(a);
-  } else {
-    console.error('[CodeBee] 参数含非法字符，已拒绝：' + String(a).slice(0, 80));
-    process.exit(2);
-  }
-}
-
-// CLI 转发契约：codebee 之后的用户参数（已过白名单）原样作为 main.py 的 argv。
-// 控制台日志即见：GBK 控制台下强制 UTF-8 输出（否则中文 print 触发 UnicodeEncodeError 静默卡死）。
-const childEnv = Object.assign({}, process.env, { PYTHONIOENCODING: 'utf-8', PYTHONUTF8: '1', PYTHONUNBUFFERED: '1' });
-// TUTTI_PYTHON 覆盖解释器：只允许在三个字面量里选（py/python/python3，.exe
-// 后缀可选、大小写不限）——环境变量永远只做「选择题」，不做「填空题」；
-// 机器上有多个解释器且探测选错时，用它切换。
-let exe = py.name;
-const ovRaw = String(process.env.TUTTI_PYTHON || '').trim().toLowerCase();
-const ov = ovRaw.endsWith('.exe') ? ovRaw.slice(0, -4) : ovRaw;
-if (ov === 'python') {
-  exe = 'python';
-} else if (ov === 'python3') {
-  exe = 'python3';
-} else if (ov === 'py') {
-  exe = 'py';
-}
-
-let child;
-if (exe === 'py') {
-  child = spawn('py', ['-3', MAIN, ...userArgs], { stdio: 'inherit', env: childEnv });
-} else if (exe === 'python') {
-  child = spawn('python', [MAIN, ...userArgs], { stdio: 'inherit', env: childEnv });
-} else {
-  child = spawn('python3', [MAIN, ...userArgs], { stdio: 'inherit', env: childEnv });
-}
-console.log('[CodeBee] 正在启动（Python: ' + exe + '）… 浏览器将自动打开 http://127.0.0.1:8765；'
-  + '本窗口保持开着就是服务，Ctrl+C 退出。');
-
-for (const sig of ['SIGINT', 'SIGTERM']) {
-  process.on(sig, () => { try { child.kill(sig); } catch (e) { /* 已退出 */ } });
-}
-const t0 = Date.now();
-child.on('exit', (code, signal) => {
-  if (!signal && code != null && code !== 0 && Date.now() - t0 < 4000) {
-    // 秒退：多半是 py 启动器指到了坏解释器（如损坏的 Anaconda）。给排障出口。
-    console.error('[CodeBee] 启动失败：Python 进程 ' + (code ? '退出码 ' + code : '异常终止') + '。'
-      + '\n  · 运行 python --version 确认可用且为 3.8+'
-      + '\n  · 若装有多个 Python，可设环境变量 TUTTI_PYTHON 切换（cmd：set TUTTI_PYTHON=python）');
-  }
-  process.exit(signal ? 1 : (code == null ? 0 : code));
-});
-child.on('error', (e) => {
-  console.error('[CodeBee] 无法启动 Python：' + e.message);
-  process.exit(1);
-});
+#!/usr/bin/env node
+'use strict';
+/*
+ * CodeBee 启动垫片：在本机找 Python 3.8+，以子进程方式运行包内 app/main.py。
+ * npm 只负责分发与版本管理，不携带解释器——所以运行时才探测 python，
+ * 找不到就报错并给出安装指引（不写 postinstall，避免在别人机器上制造环境事故）。
+ *
+ * 安全边界：
+ *  - 子进程可执行文件全部是本文件内的字面量（py / python / python3）——包括
+ *    TUTTI_PYTHON 覆盖时：它只允许在这三个字面量里选一个，绝不拼接任意路径；
+ *  - 参数数组全由字面量常量拼成，不启用 shell；
+ *  - 探测只传 `--version`（不向解释器传递任何代码）；Windows 商店的 python.exe
+ *    假占位会非零退出，被 catch 后自然跳过；
+ *  - 用户参数逐个过白名单校验（仅字母数字与 _ - . : = / @ % 空格），
+ *    含 shell 元字符/控制字符的参数直接拒绝。
+ */
+const { execFileSync, spawn } = require('child_process');
+const path = require('path');
+
+const MIN_MAJOR = 3;
+const MIN_MINOR = 8;
+const MAIN = path.join(__dirname, '..', 'app', 'main.py');
+const SAFE_ARG = /^[A-Za-z0-9_\-.:=/@% ]+$/;
+
+// 解析 `--version` 输出：形如 "Python 3.12.4"，返回 {ver, major, minor} 或 null。
+// 纯字符串切分，不用正则匹配执行路径。
+function parseVersion(text) {
+  const at = String(text).indexOf('Python ');
+  if (at === -1) return null;
+  const parts = String(text).slice(at + 7).trim().split(' ')[0].split('.');
+  const major = Number(parts[0]);
+  const minor = Number(parts[1]);
+  if (!Number.isFinite(major) || !Number.isFinite(minor)) return null;
+  return { ver: major + '.' + minor, major: major, minor: minor };
+}
+
+function probePy() {
+  try {
+    return parseVersion(execFileSync('py', ['-3', '--version'],
+      { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }));
+  } catch (e) { return null; }
+}
+function probePython() {
+  try {
+    return parseVersion(execFileSync('python', ['--version'],
+      { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }));
+  } catch (e) { return null; }
+}
+function probePython3() {
+  try {
+    return parseVersion(execFileSync('python3', ['--version'],
+      { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }));
+  } catch (e) { return null; }
+}
+
+// 探测顺序：win32 优先 py 启动器（跨版本选真 3.x），其余按 python3 → python。
+function resolvePython() {
+  const order = process.platform === 'win32'
+    ? [['py', probePy], ['python', probePython], ['python3', probePython3]]
+    : [['python3', probePython3], ['python', probePython]];
+  for (const [name, probe] of order) {
+    const hit = probe();
+    if (!hit) continue;
+    if (hit.major > MIN_MAJOR || (hit.major === MIN_MAJOR && hit.minor >= MIN_MINOR)) {
+      return { name: name };
+    }
+    return { tooOld: true, name: name, ver: hit.ver };
+  }
+  return null;
+}
+
+function guide() {
+  const url = { win32: 'https://www.python.org/downloads/windows/',
+    darwin: 'https://www.python.org/downloads/macos/',
+    linux: 'https://docs.python.org/3/using/unix.html' }[process.platform]
+    || 'https://www.python.org/downloads/';
+  return 'CodeBee 需要本机安装 Python 3.8+（npm 包不含解释器）。\n'
+    + '  · 安装：' + url + '\n'
+    + '  · Windows 安装时勾选 “Add python.exe to PATH”（自带 py 启动器）\n'
+    + '装好后重新运行：codebee';
+}
+
+const py = resolvePython();
+if (!py) {
+  console.error('[CodeBee] 未找到可用的 Python。\n' + guide());
+  process.exit(1);
+}
+if (py.tooOld) {
+  console.error('[CodeBee] 找到 ' + py.name + '（' + py.ver + '），但版本过低。\n' + guide());
+  process.exit(1);
+}
+
+const userArgs = [];
+for (const a of process.argv.slice(2)) {
+  if (typeof a === 'string' && SAFE_ARG.test(a)) {
+    userArgs.push(a);
+  } else {
+    console.error('[CodeBee] 参数含非法字符，已拒绝：' + String(a).slice(0, 80));
+    process.exit(2);
+  }
+}
+
+// CLI 转发契约：codebee 之后的用户参数（已过白名单）原样作为 main.py 的 argv。
+// 控制台日志即见：GBK 控制台下强制 UTF-8 输出（否则中文 print 触发 UnicodeEncodeError 静默卡死）。
+const childEnv = Object.assign({}, process.env, { PYTHONIOENCODING: 'utf-8', PYTHONUTF8: '1', PYTHONUNBUFFERED: '1' });
+// TUTTI_PYTHON 覆盖解释器：只允许在三个字面量里选（py/python/python3，.exe
+// 后缀可选、大小写不限）——环境变量永远只做「选择题」，不做「填空题」；
+// 机器上有多个解释器且探测选错时，用它切换。
+let exe = py.name;
+const ovRaw = String(process.env.TUTTI_PYTHON || '').trim().toLowerCase();
+const ov = ovRaw.endsWith('.exe') ? ovRaw.slice(0, -4) : ovRaw;
+if (ov === 'python') {
+  exe = 'python';
+} else if (ov === 'python3') {
+  exe = 'python3';
+} else if (ov === 'py') {
+  exe = 'py';
+}
+
+let child;
+if (exe === 'py') {
+  child = spawn('py', ['-3', MAIN, ...userArgs], { stdio: 'inherit', env: childEnv });
+} else if (exe === 'python') {
+  child = spawn('python', [MAIN, ...userArgs], { stdio: 'inherit', env: childEnv });
+} else {
+  child = spawn('python3', [MAIN, ...userArgs], { stdio: 'inherit', env: childEnv });
+}
+console.log('[CodeBee] 正在启动（Python: ' + exe + '）… 浏览器将自动打开 http://127.0.0.1:8765；'
+  + '本窗口保持开着就是服务，Ctrl+C 退出。');
+
+for (const sig of ['SIGINT', 'SIGTERM']) {
+  process.on(sig, () => { try { child.kill(sig); } catch (e) { /* 已退出 */ } });
+}
+const t0 = Date.now();
+child.on('exit', (code, signal) => {
+  if (!signal && code != null && code !== 0 && Date.now() - t0 < 4000) {
+    // 秒退：多半是 py 启动器指到了坏解释器（如损坏的 Anaconda）。给排障出口。
+    console.error('[CodeBee] 启动失败：Python 进程 ' + (code ? '退出码 ' + code : '异常终止') + '。'
+      + '\n  · 运行 python --version 确认可用且为 3.8+'
+      + '\n  · 若装有多个 Python，可设环境变量 TUTTI_PYTHON 切换（cmd：set TUTTI_PYTHON=python）');
+  }
+  process.exit(signal ? 1 : (code == null ? 0 : code));
+});
+child.on('error', (e) => {
+  console.error('[CodeBee] 无法启动 Python：' + e.message);
+  process.exit(1);
+});

package/package.json

@@ -1,48 +1,49 @@
-{
-  "name": "codebee",
-  "version": "0.1.95",
-  "description": "CodeBee · 多智能体编排台 — 统一编排本机 AI 编码 CLI（Codex / Claude Code / QwenCode / OpenCode / Aider…）：目标→拆解→路由→执行→验证→跨厂商评审→修复→报告。纯 Python 标准库实现，本地 Web UI。",
-  "license": "MIT",
-  "bin": {
-    "codebee": "bin/tutti.js"
-  },
-  "files": [
-    "app",
-    "!app/tests",
-    "bin",
-    "tools/wx_reader.py",
-    "CHANGELOG.md",
-    "README.md",
-    "LICENSE"
-  ],
-  "engines": {
-    "node": ">=14"
-  },
-  "os": [
-    "win32",
-    "darwin",
-    "linux"
-  ],
-  "keywords": [
-    "agent",
-    "orchestration",
-    "codex",
-    "claude",
-    "llm",
-    "cli",
-    "multi-agent"
-  ],
-  "scripts": {
-    "release:gate": "python scripts/release_gate.py",
-    "release": "python scripts/release_gate.py --publish",
-    "prepublishOnly": "python scripts/release_gate.py",
-    "release:clean": "python scripts/prune_release_debris.py"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Vercel-By-WXP/CodeBee.git"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "codebee",
+  "version": "0.1.97",
+  "description": "CodeBee · 多智能体编排台 — 统一编排本机 AI 编码 CLI（Codex / Claude Code / QwenCode / OpenCode / Aider…）：目标→拆解→路由→执行→验证→跨厂商评审→修复→报告。纯 Python 标准库实现，本地 Web UI。",
+  "license": "MIT",
+  "bin": {
+    "codebee": "bin/tutti.js"
+  },
+  "files": [
+    "app",
+    "!app/tests",
+    "bin",
+    "tools/wx_reader.py",
+    "CHANGELOG.md",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=14"
+  },
+  "os": [
+    "win32",
+    "darwin",
+    "linux"
+  ],
+  "keywords": [
+    "agent",
+    "orchestration",
+    "codex",
+    "claude",
+    "llm",
+    "cli",
+    "multi-agent"
+  ],
+  "scripts": {
+    "release:gate": "python scripts/release_gate.py",
+    "release": "python scripts/release_gate.py --publish",
+    "prepublishOnly": "python scripts/release_gate.py",
+    "release:clean": "python scripts/prune_release_debris.py",
+    "postpublish": "node scripts/postpublish_tag.cjs"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Vercel-By-WXP/CodeBee.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}