deskbuddy 0.2.0-beta.15 → 0.2.0-beta.16

package/dist/cli.js

@@ -1484,8 +1484,8 @@ var AutoUpdater = class {
 
 // src/daemon/index.ts
 import { randomBytes as randomBytes7 } from "crypto";
-import { existsSync as existsSync14, statSync as statSync11 } from "fs";
-import { basename as basename9, dirname as dirname11, join as join28 } from "path";
+import { existsSync as existsSync15, statSync as statSync11 } from "fs";
+import { basename as basename9, dirname as dirname12, join as join29 } from "path";
 import WebSocket2 from "ws";
 
 // src/adapters/ocPlugin.ts
@@ -2613,6 +2613,9 @@ function isNotLoggedIn(r, text = "") {
   const err = redactRaw((r.stderr ?? "").trim(), text);
   return err.split("\n").some((l) => NOT_LOGGED_IN.test(l.trim()));
 }
+function isCodexWriterBusy(r, text = "") {
+  return redactRaw((r.stderr ?? "").trim(), text).split("\n").some((l) => /thread-store conflict\b.*already has an active writer/i.test(l));
+}
 function finalResultOf(stdout7) {
   if (!stdout7) return null;
   const pick = (v) => {
@@ -3274,6 +3277,15 @@ var QUESTION_SKIPPED = "\u7528\u6237\u5728\u8BBE\u5907\u4E0A\u9009\u62E9\u4E0D\u
 var QUESTION_UNANSWERABLE = "\u8BBE\u5907\u672A\u7ED9\u51FA\u6709\u6548\u7B54\u6848\uFF08\u8FD9\u4E2A\u95EE\u9898\u6CA1\u6CD5\u5728\u8BBE\u5907\u4E0A\u56DE\u7B54\uFF09\uFF0C\u8BF7\u6309\u4F60\u7684\u5224\u65AD\u7EE7\u7EED\uFF0C\u6216\u5728\u7ED3\u679C\u91CC\u8BF4\u660E\u9700\u8981\u7528\u6237\u51B3\u5B9A\u7684\u4E8B";
 var REMOTE_QUESTION_TOOLS = /* @__PURE__ */ new Set(["workbuddy"]);
 var NO_NOTICE_TOOLS = /* @__PURE__ */ new Set(["qwenwork", "dumate", "workbuddy"]);
+var TRUST_TOOL_NAME = "DeskBuddyTrustFolder";
+var TRUST_SESSION_PREFIX = "trust-";
+function trustSummary(cwd) {
+  const name = cwd.split(/[\\/]+/).filter(Boolean).pop() || cwd;
+  return `\u9996\u6B21\u5728\u300C${name}\u300D\u8FD0\u884C\uFF0C\u9700\u8981\u4FE1\u4EFB\u8FD9\u4E2A\u6587\u4EF6\u5939`;
+}
+function isTrustRecord(rec) {
+  return rec.sessionId.startsWith(TRUST_SESSION_PREFIX);
+}
 function questionNotice(summary2, deviceName = "") {
   const who = deviceName ? `\u300C${deviceName}\u300D` : DEVICE_FALLBACK;
   return `\u2705 \u5DF2\u5728${who}\u4E0A\u56DE\u7B54\uFF1A${summary2}`;
@@ -3438,8 +3450,10 @@ var ApprovalCoordinator = class {
     if (isQuestion && !qv) return none;
     for (const run2 of this.#runs.values()) if (run2.sessionId === sessionId) return none;
     const store = this.#d.store;
-    const { kind, summary: summary2 } = qv ? { kind: "question", summary: qv.summary } : describe(toolName, hook.tool_input, cwd ? cwdForms(cwd) : []);
-    const remember = !qv && REMEMBER_TOOLS.has(tool) ? pickRememberSuggestion(hook.permission_suggestions, { edit: EDIT_TOOLS2.has(toolName) || kind === "edit" }) : null;
+    const trust = toolName === TRUST_TOOL_NAME;
+    if (trust !== sessionId.startsWith(TRUST_SESSION_PREFIX)) return none;
+    const { kind, summary: summary2 } = qv ? { kind: "question", summary: qv.summary } : trust ? { kind: "other", summary: trustSummary(cwd) } : describe(toolName, hook.tool_input, cwd ? cwdForms(cwd) : []);
+    const remember = !qv && !trust && REMEMBER_TOOLS.has(tool) ? pickRememberSuggestion(hook.permission_suggestions, { edit: EDIT_TOOLS2.has(toolName) || kind === "edit" }) : null;
     const rec = {
       approvalId: randomUUID3(),
       runId: "",
@@ -3490,7 +3504,7 @@ var ApprovalCoordinator = class {
     return new Promise((resolve8) => {
       void decided.then(resolve8);
       const onAbort = () => {
-        if (this.#waiters.has(rec.approvalId)) this.#settleWindow(rec, "hook \u5DF2\u7ED3\u675F");
+        if (this.#waiters.has(rec.approvalId)) this.#settleWindow(rec, typeof signal.reason === "string" && signal.reason ? signal.reason : "hook \u5DF2\u7ED3\u675F");
         resolve8(none);
       };
       if (signal.aborted) onAbort();
@@ -3641,7 +3655,7 @@ var ApprovalCoordinator = class {
       this.#d.store.save();
       if (rec.mode === "window") {
         const notice = windowNotice(decision, rec.summary, deviceName) + (always ? "\uFF08\u5DF2\u8BB0\u4F4F\uFF09" : "");
-        if (!NO_NOTICE_TOOLS.has(rec.tool)) {
+        if (!NO_NOTICE_TOOLS.has(rec.tool) && !isTrustRecord(rec)) {
           try {
             ;
             (this.#d.writeNotice ?? writeNotice)(rec.sessionId, notice);
@@ -5218,9 +5232,17 @@ function parseAnswer(m) {
     if (a.decision !== "allow" && a.decision !== "deny") return null;
     return { instructionId, sessionId, expireAt, answer: { kind: "permission", toolName, fingerprint: fingerprint2, decision: a.decision } };
   }
+  if (a.kind === "trust") {
+    if (a.decision !== "allow" && a.decision !== "deny") return null;
+    return { instructionId, sessionId, expireAt, answer: { kind: "trust", decision: a.decision } };
+  }
   if (a.kind === "probe") {
     const toolName = toolNameOf(a.toolName);
     if (!toolName) return null;
+    if (a.trust === true) {
+      if (a.fingerprint !== void 0 || a.questions !== void 0) return null;
+      return { instructionId, sessionId, expireAt, answer: { kind: "probe", toolName, trust: true } };
+    }
     const fingerprint2 = a.fingerprint === void 0 ? void 0 : str3(a.fingerprint, 200);
     if (fingerprint2 === null) return null;
     let questions2;
@@ -5823,11 +5845,502 @@ function defaultSend(windowId, rec, req2) {
   return sendAnswer(channelPath(windowId), secret, req2, { finalTimeoutMs: req2.answer.kind === "probe" ? 5e3 : 60 * 1e3 });
 }
 
+// src/wrap/trustPrompt.ts
+import { existsSync as existsSync13, realpathSync as realpathSync5 } from "fs";
+import { homedir as homedir8 } from "os";
+import { dirname as dirname11, join as join21 } from "path";
+var TRUST_TOOLS = /* @__PURE__ */ new Set(["claude_code", "workbuddy", "codex"]);
+var CURSOR_CHARS = "\u276F>\u203A";
+var BOX = /[─-╿|]/g;
+function squash2(s2) {
+  return s2.replace(BOX, "").replace(/\s+/g, "");
+}
+function squashLines(lines2) {
+  let body = "";
+  const breaks = [];
+  for (const line of lines2) {
+    for (const ch of line) {
+      if (/\s/.test(ch) || /[\u2500-\u257F|]/.test(ch)) {
+        if (breaks.length) breaks[breaks.length - 1] = true;
+        continue;
+      }
+      body += ch;
+      breaks.push(false);
+    }
+    if (breaks.length) breaks[breaks.length - 1] = true;
+  }
+  return { body, breaks };
+}
+function inner(line) {
+  return line.replace(/^\s*[│|]/, "").replace(/[│|]\s*$/, "");
+}
+var SPECS = {
+  workbuddy: {
+    title: /Do you trust the files in this folder\?/,
+    option: (t) => {
+      const m = t.match(/^\d\.\s+(.*)$/);
+      if (!m) return null;
+      if (/^Trust folder only\b/.test(m[1])) return "folder";
+      if (/^Trust parent folder\b/.test(m[1])) return "parent";
+      if (/^Trust folder and all subdirectories\b/.test(m[1])) return "recursive";
+      if (/^No, exit\b/.test(m[1])) return "no";
+      return null;
+    }
+  },
+  claude_code: {
+    // 新版「Accessing workspace:」；老版「Do you trust the files in this folder?」（screen.ts TRUST_RE 收录的两种）
+    title: /Accessing workspace:|Do you trust the files in this folder\?/,
+    option: (t) => {
+      const s2 = t.replace(/^\d\.\s+/, "");
+      if (/^Yes, (I trust this folder|proceed)\s*$/.test(s2)) return "folder";
+      if (/^No, exit\s*$/.test(s2)) return "no";
+      return null;
+    }
+  },
+  codex: {
+    title: /Trust this folder\?/,
+    option: (t) => {
+      const m = t.match(/^\d\.\s+(.*)$/);
+      if (!m) return null;
+      if (/^Trust and continue\s*$/.test(m[1])) return "folder";
+      if (/^(Back to Agent Command Center|Quit)\s*$/.test(m[1])) return "no";
+      return null;
+    },
+    widened: /subdirectory of a Git project|apply to the repository root/i
+  }
+};
+function inspectTrust(lines2, tool) {
+  const spec = SPECS[tool];
+  if (!spec) return null;
+  let start = -1;
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    if (spec.title.test(lines2[i])) {
+      start = i;
+      break;
+    }
+  }
+  if (start < 0) return null;
+  const top = tool === "codex" ? Math.max(0, start - 8) : start;
+  const options = [];
+  let cursor = -1;
+  let cursors = 0;
+  let last = start;
+  for (let i = start + 1; i < lines2.length; i++) {
+    const raw = inner(lines2[i]).trim();
+    let text = raw;
+    let here2 = false;
+    if (text && CURSOR_CHARS.includes(text[0])) {
+      here2 = true;
+      text = text.slice(1).trim();
+    }
+    const role = spec.option(text);
+    if (!role) continue;
+    if (here2) {
+      cursors++;
+      cursor = options.length;
+    }
+    options.push({ line: i, role });
+    last = i;
+  }
+  if (!options.some((o) => o.role === "folder") || !options.some((o) => o.role === "no")) return null;
+  const region = lines2.slice(top, last + 1);
+  const { body, breaks } = squashLines(region);
+  const widened = !!spec.widened && spec.widened.test(region.join("\n"));
+  const widenedRoot = widened ? noteRoot(region) : "";
+  return { options, cursor: cursors === 1 ? cursor : -1, body, breaks, widened, ...widenedRoot ? { widenedRoot } : {} };
+}
+function noteRoot(region) {
+  const i = region.findIndex((l) => /repository root:\s*$/i.test(l));
+  if (i < 0) return "";
+  const parts = [];
+  for (let j = i + 1; j < region.length; j++) {
+    const t = region[j].trim();
+    if (!t) break;
+    parts.push(t);
+  }
+  return parts.join("");
+}
+function sameDir2(a, b) {
+  const win = (p) => /^[A-Za-z]:[\\/]/.test(p) || p.includes("\\");
+  const norm3 = (p) => {
+    const t = p.replace(/\\/g, "/").replace(/\/+$/, "");
+    return win(a) || win(b) ? t.toLowerCase() : t;
+  };
+  return !!a && !!b && norm3(a) === norm3(b);
+}
+function widenedBeyond(v, forms) {
+  if (!v.widened) return false;
+  const root = v.widenedRoot ?? "";
+  return !root || !forms.some((f) => sameDir2(root, f));
+}
+function pathShown(v, forms) {
+  const body = v.body.toLowerCase();
+  const breaks = v.breaks ?? [];
+  return forms.some((f) => {
+    const q = squash2(f).toLowerCase();
+    if (!q) return false;
+    for (let i = body.indexOf(q); i >= 0; i = body.indexOf(q, i + 1)) {
+      const end = i + q.length;
+      if (end === body.length || breaks[end - 1] || /[\\/)]/.test(body[end])) return true;
+    }
+    return false;
+  });
+}
+function trustCwdForms(cwd, real2 = realpathSync5, home = homedir8()) {
+  const out = /* @__PURE__ */ new Set();
+  const add = (p) => {
+    if (!p) return;
+    const t = p.replace(/[\\/]+$/, "") || p;
+    out.add(t);
+    const h = home.replace(/[\\/]+$/, "");
+    if (h && t.toLowerCase().startsWith(h.toLowerCase() + (t.includes("\\") ? "\\" : "/"))) out.add("~" + t.slice(h.length));
+  };
+  add(cwd);
+  try {
+    add(real2(cwd));
+  } catch {
+  }
+  return [...out];
+}
+function trustWidensToRepo(tool, cwd, exists = existsSync13) {
+  if (tool !== "claude_code" && tool !== "codex") return false;
+  if (!cwd || exists(join21(cwd, ".git"))) return false;
+  let d = cwd;
+  for (let i = 0; i < 64; i++) {
+    const up = dirname11(d);
+    if (up === d) return false;
+    d = up;
+    if (exists(join21(d, ".git"))) return true;
+  }
+  return false;
+}
+function trustAnswerable(v, forms) {
+  return !!v && !widenedBeyond(v, forms) && pathShown(v, forms);
+}
+var SETTLE_MS2 = 800;
+var CONFIRM_MS2 = 4e3;
+var POLL_MS4 = 150;
+var ARROW_GAP_MS2 = 150;
+async function waitUntil2(io, ok, ms = CONFIRM_MS2) {
+  const loops = Math.max(1, Math.ceil(ms / POLL_MS4));
+  for (let i = 0; i < loops; i++) {
+    if (ok(io.screen())) return true;
+    await io.sleep(POLL_MS4);
+  }
+  return ok(io.screen());
+}
+async function answerTrust(io, tool, decision, forms) {
+  const view = (l) => {
+    const v2 = inspectTrust(l, tool);
+    return trustAnswerable(v2, forms) ? v2 : null;
+  };
+  const v0 = view(io.screen());
+  if (!v0) return "not_waiting";
+  await io.sleep(SETTLE_MS2);
+  const v = view(io.screen());
+  if (!v || v.cursor !== 0) return "not_waiting";
+  const role = decision === "allow" ? "folder" : "no";
+  const target = v.options.findIndex((o) => o.role === role);
+  if (target < 0) return "not_waiting";
+  let wrote = false;
+  const key = target > 0 ? KEY_DOWN : KEY_UP;
+  io.hold?.(true);
+  try {
+    for (let i = 0; i < Math.abs(target); i++) {
+      io.write(key);
+      wrote = true;
+      await io.sleep(ARROW_GAP_MS2);
+    }
+    const onTarget = await waitUntil2(io, (l) => {
+      const w = view(l);
+      return !!w && w.cursor >= 0 && w.options[w.cursor].role === role;
+    });
+    if (!onTarget) return wrote ? "partial" : "not_waiting";
+    io.write(KEY_ENTER);
+  } finally {
+    io.hold?.(false);
+  }
+  return await waitUntil2(io, (l) => !inspectTrust(l, tool)) ? "done" : "partial";
+}
+function trustWaiting(lines2, tool) {
+  return inspectTrust(lines2, tool) !== null;
+}
+var TRUST_STABLE_MS = 500;
+var TRUST_RENOTIFY_MS = 3e4;
+var TrustWatcher = class {
+  #d;
+  #forms;
+  #since = null;
+  #reported = false;
+  /** 上次和 daemon 有往来（报给它，或收到它的信任探测 / 答复）的时间；null = 这次出现还没报过（或不能交给设备） */
+  #contactAt = null;
+  constructor(d) {
+    this.#d = d;
+    this.#forms = d.forms ?? trustCwdForms(d.cwd);
+  }
+  get forms() {
+    return this.#forms;
+  }
+  /** 收到 daemon 的信任探测或答复：daemon 还持有这张卡，不用补报 */
+  noteContact() {
+    if (this.#contactAt !== null) this.#contactAt = this.#d.now();
+  }
+  tick(lines2) {
+    const v = lines2 ? inspectTrust(lines2, this.#d.tool) : null;
+    if (!v) {
+      this.#since = null;
+      this.#reported = false;
+      this.#contactAt = null;
+      return;
+    }
+    const now = this.#d.now();
+    if (this.#since === null) this.#since = now;
+    if (this.#reported) {
+      if (this.#contactAt !== null && now - this.#contactAt >= TRUST_RENOTIFY_MS) {
+        this.#contactAt = now;
+        this.#d.log("\u4FE1\u4EFB\u6846\u8FD8\u5728\uFF0Cdaemon 30 \u79D2\u6CA1\u6765\u63A2\u6D4B\uFF0C\u8865\u62A5\u4E00\u6B21");
+        this.#d.notify();
+      }
+      return;
+    }
+    if (now - this.#since < TRUST_STABLE_MS) return;
+    if (this.#d.ready && !this.#d.ready()) return;
+    this.#reported = true;
+    if (widenedBeyond(v, this.#forms) || (this.#d.widensToRepo ?? trustWidensToRepo)(this.#d.tool, this.#d.cwd)) {
+      this.#d.log("\u4FE1\u4EFB\u6846\u4F1A\u628A\u4FE1\u4EFB\u6269\u5927\u5230\u4E0A\u7EA7\uFF08git \u4ED3\u5E93\u6839\uFF09\uFF0C\u4E0D\u63A8\u8BBE\u5907\uFF0C\u8BF7\u5728\u7535\u8111\u4E0A\u786E\u8BA4");
+      return;
+    }
+    if (!pathShown(v, this.#forms)) {
+      this.#d.log("\u4FE1\u4EFB\u6846\u91CC\u7684\u76EE\u5F55\u548C\u7A97\u53E3\u5DE5\u4F5C\u76EE\u5F55\u5BF9\u4E0D\u4E0A\uFF0C\u4E0D\u63A8\u8BBE\u5907");
+      return;
+    }
+    this.#d.log("\u4FE1\u4EFB\u6846\u51FA\u73B0\uFF0C\u63A8\u8BBE\u5907\u786E\u8BA4");
+    this.#contactAt = now;
+    this.#d.notify();
+  }
+};
+
+// src/wrap/trustNotify.ts
+import { readFileSync as readFileSync16 } from "fs";
+import { request } from "http";
+var TRUST_EVENT = "DeskBuddyTrustPrompt";
+var TIMEOUT_MS = 2e3;
+function trustNotifyBody(tool, windowId) {
+  return JSON.stringify({ mode: "notify", tool, hook: { hook_event_name: TRUST_EVENT, deskbuddy_window: windowId } });
+}
+function notifyTrust(tool, windowId, confPath = gateConfPath()) {
+  return new Promise((resolve8) => {
+    let done = false;
+    const finish = (v) => {
+      if (done) return;
+      done = true;
+      resolve8(v);
+    };
+    let conf;
+    try {
+      conf = JSON.parse(readFileSync16(confPath, "utf8"));
+    } catch {
+      return finish(false);
+    }
+    if (!conf || !Number.isInteger(conf.port) || typeof conf.token !== "string") return finish(false);
+    const body = trustNotifyBody(tool, windowId);
+    try {
+      const req2 = request(
+        {
+          host: "127.0.0.1",
+          port: conf.port,
+          path: "/gate",
+          method: "POST",
+          headers: { "content-type": "application/json", "content-length": Buffer.byteLength(body), "x-gate-token": conf.token },
+          timeout: TIMEOUT_MS
+        },
+        (res) => {
+          res.resume();
+          res.on("end", () => finish(res.statusCode === 200));
+          res.on("error", () => finish(false));
+        }
+      );
+      req2.on("timeout", () => req2.destroy());
+      req2.on("error", () => finish(false));
+      req2.on("close", () => finish(false));
+      req2.end(body);
+    } catch {
+      finish(false);
+    }
+  });
+}
+
+// src/daemon/trustBridge.ts
+var POLL_MS5 = 1500;
+var ANSWER_TTL_MS2 = 60 * 1e3;
+var WINDOW_ID = /^[a-f0-9]{32}$/;
+var TRUST_NO_RESPONSE_POLLS = 5;
+var TRUST_QUIET_MS = 2 * 60 * 1e3;
+function isTrustNotify(req2) {
+  return !!req2 && !!req2.hook && req2.hook.hook_event_name === TRUST_EVENT;
+}
+var TrustBridge = class {
+  #d;
+  #cards = /* @__PURE__ */ new Map();
+  /** 窗口号 → 静默到期时间（期间忽略 notify） */
+  #quiet = /* @__PURE__ */ new Map();
+  #timer = null;
+  #stopped = false;
+  #polling = false;
+  constructor(deps2) {
+    this.#d = deps2;
+  }
+  get pending() {
+    return this.#cards.size;
+  }
+  stop() {
+    this.#stopped = true;
+    if (this.#timer) clearInterval(this.#timer);
+    this.#timer = null;
+    for (const c of this.#cards.values()) c.ac.abort();
+    this.#cards.clear();
+  }
+  #now() {
+    return this.#d.now ? this.#d.now() : Date.now();
+  }
+  #window(id, tool) {
+    let rec;
+    try {
+      rec = (this.#d.readWindow ?? readWindow)(id);
+    } catch {
+      return null;
+    }
+    if (!rec || rec.trust !== true || rec.launched !== true || rec.tool !== tool || !rec.cwd) return null;
+    return (this.#d.alive ?? pidAlive3)(rec.pid) ? rec : null;
+  }
+  onNotify(req2) {
+    void this.#onNotify(req2).catch((e) => this.#d.log(`\u4FE1\u4EFB\u6846\u63A8\u5361\u51FA\u9519\uFF1A${e?.message ?? e}`));
+  }
+  async #onNotify(req2) {
+    if (this.#stopped || !isTrustNotify(req2) || !TRUST_TOOLS.has(req2.tool)) return;
+    if (this.#d.enabled && !this.#d.enabled(req2.tool)) return;
+    const windowId = typeof req2.hook.deskbuddy_window === "string" ? req2.hook.deskbuddy_window : "";
+    if (!WINDOW_ID.test(windowId)) return;
+    const rec = this.#window(windowId, req2.tool);
+    if (!rec) return;
+    if (this.#cards.has(windowId)) return;
+    const until = this.#quiet.get(windowId);
+    if (until !== void 0) {
+      if (this.#now() < until) return;
+      this.#quiet.delete(windowId);
+    }
+    const card = { windowId, tool: req2.tool, ac: new AbortController(), misses: 0, fails: 0 };
+    this.#cards.set(windowId, card);
+    this.#ensurePoll();
+    const short = windowId.slice(0, 8);
+    this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${short}\uFF08${req2.tool}\uFF09\u63A8\u8BBE\u5907\u786E\u8BA4`);
+    let reply;
+    try {
+      reply = await this.#d.gate(
+        {
+          window: true,
+          tool: req2.tool,
+          hook: {
+            hook_event_name: "PermissionRequest",
+            session_id: TRUST_SESSION_PREFIX + windowId,
+            cwd: rec.cwd,
+            tool_name: TRUST_TOOL_NAME,
+            tool_input: { cwd: rec.cwd }
+          }
+        },
+        card.ac.signal
+      );
+    } catch {
+      if (this.#cards.get(windowId) === card) this.#cards.delete(windowId);
+      return;
+    }
+    if (this.#cards.get(windowId) !== card || card.ac.signal.aborted) return;
+    this.#cards.delete(windowId);
+    if (reply.decision !== "allow" && reply.decision !== "deny") return;
+    this.#quiet.set(windowId, this.#now() + TRUST_QUIET_MS);
+    const now = this.#window(windowId, req2.tool);
+    if (!now) {
+      this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${short} \u5DF2\u5173\uFF0C\u8BBE\u5907\u7B54\u590D\u4E0D\u518D\u5199\u5165`);
+      return;
+    }
+    const r = await this.#send(windowId, now, {
+      instructionId: `trust-${windowId}`,
+      sessionId: "",
+      expireAt: this.#now() + ANSWER_TTL_MS2,
+      answer: { kind: "trust", decision: reply.decision }
+    });
+    if (!r) this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${short} \u7684\u901A\u9053\u8FDE\u4E0D\u4E0A\uFF0C\u8BBE\u5907\u7B54\u590D\u6CA1\u5199\u8FDB\u53BB`);
+    else if (r.status === "started") this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${short} \u5DF2\u6309\u8BBE\u5907\u7B54\u590D\uFF08${reply.decision === "allow" ? "\u53EA\u4FE1\u4EFB\u5F53\u524D\u76EE\u5F55" : "\u4E0D\u4FE1\u4EFB"}\uFF09\u5199\u5165`);
+    else if (r.reason === "not_waiting") this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${short} \u6846\u5DF2\u4E0D\u5728\u6216\u5BF9\u4E0D\u4E0A\uFF08\u7535\u8111\u4E0A\u5DF2\u5904\u7406 / \u6709\u4EBA\u5728\u52A8\uFF09\uFF0C\u8BBE\u5907\u7B54\u590D\u6CA1\u5199`);
+    else if (r.reason === "partial") this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${short} \u8BBE\u5907\u7B54\u590D\u53EA\u5199\u4E86\u4E00\u534A\u5C31\u5BF9\u4E0D\u4E0A\u4E86\uFF0C\u5DF2\u505C\u6B62\uFF0C\u8BF7\u5230\u7535\u8111\u4E0A\u786E\u8BA4`);
+    else this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${short} \u8BBE\u5907\u7B54\u590D\u88AB\u62D2\uFF08${r.reason ?? ""}\uFF09\uFF0C\u8BF7\u5728\u7535\u8111\u4E0A\u786E\u8BA4`);
+  }
+  #send(windowId, rec, req2) {
+    return (this.#d.send ?? defaultSend2)(windowId, rec, req2);
+  }
+  #ensurePoll() {
+    if (this.#timer || this.#stopped) return;
+    this.#timer = setInterval(() => void this.poll(), this.#d.pollMs ?? POLL_MS5);
+    this.#timer.unref?.();
+  }
+  /** 窗口关了 → 撤卡；包装层连续两次报框不在（电脑上先答了）→ 撤卡；通道连续 5 次连不上 → 窗口无响应，撤卡 */
+  async poll() {
+    if (this.#cards.size === 0) {
+      if (this.#timer) clearInterval(this.#timer);
+      this.#timer = null;
+      return;
+    }
+    if (this.#polling) return;
+    this.#polling = true;
+    try {
+      for (const card of [...this.#cards.values()]) {
+        let why = "";
+        const rec = this.#window(card.windowId, card.tool);
+        if (!rec) why = "\u7A97\u53E3\u5DF2\u5173\u95ED";
+        else {
+          const r = await this.#send(card.windowId, rec, {
+            instructionId: `tprobe-${card.windowId}`,
+            sessionId: "",
+            expireAt: 0,
+            answer: { kind: "probe", toolName: card.tool, trust: true }
+          });
+          if (r === null) card.fails++;
+          else card.fails = 0;
+          if (r?.status === "rejected" && r.reason === "not_waiting") card.misses++;
+          else if (r?.status === "started") card.misses = 0;
+          if (card.misses >= 2) why = "\u7535\u8111\u4E0A\u5DF2\u5904\u7406";
+          else if (card.fails >= TRUST_NO_RESPONSE_POLLS) why = "\u7A97\u53E3\u65E0\u54CD\u5E94";
+        }
+        if (!why || this.#cards.get(card.windowId) !== card) continue;
+        this.#cards.delete(card.windowId);
+        if (why === "\u7A97\u53E3\u65E0\u54CD\u5E94") this.#quiet.set(card.windowId, this.#now() + TRUST_QUIET_MS);
+        this.#d.log(`\u4FE1\u4EFB\u6846\uFF1A\u7A97\u53E3 ${card.windowId.slice(0, 8)} ${why}\uFF0C\u64A4\u5361`);
+        card.ac.abort(why);
+      }
+    } finally {
+      this.#polling = false;
+    }
+  }
+};
+function pidAlive3(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e?.code === "EPERM";
+  }
+}
+function defaultSend2(windowId, rec, req2) {
+  const secret = typeof rec.secret === "string" && /^[0-9a-f]{64}$/.test(rec.secret) ? Buffer.from(rec.secret, "hex") : null;
+  return sendAnswer(channelPath(windowId), secret, req2, { finalTimeoutMs: req2.answer.kind === "probe" ? 5e3 : 60 * 1e3 });
+}
+
 // src/daemon/dumateWatch.ts
 import { execFileSync as execFileSync10, spawn as spawn3 } from "child_process";
-import { readdirSync as readdirSync6, realpathSync as realpathSync5, statSync as statSync9 } from "fs";
+import { readdirSync as readdirSync6, realpathSync as realpathSync6, statSync as statSync9 } from "fs";
 import { request as httpRequest } from "http";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 
 // hook/ocTranslate.mjs
 function toCcTool(tool, args) {
@@ -5927,7 +6440,7 @@ function dirKey(p) {
   let r = realCache.get(p);
   if (r === void 0) {
     try {
-      r = realpathSync5(p);
+      r = realpathSync6(p);
     } catch {
       r = p;
     }
@@ -6053,7 +6566,7 @@ function scanSessionDirs(root, now, maxAgeMs = ACTIVE_DIR_MS) {
   const out = [];
   const list = (p) => {
     try {
-      return readdirSync6(p, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => join21(p, d.name));
+      return readdirSync6(p, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => join22(p, d.name));
     } catch {
       return [];
     }
@@ -6224,11 +6737,11 @@ var DumateWatch = class {
   }
   /** /global/event 的信封 `{directory, payload}`；按目录的 /event 直接是事件 */
   #onEnvelope(raw, dir) {
-    const inner = raw.payload && typeof raw.payload === "object" ? raw.payload : raw;
+    const inner2 = raw.payload && typeof raw.payload === "object" ? raw.payload : raw;
     const d = typeof raw.directory === "string" && raw.directory ? raw.directory : dir;
-    if (dir === void 0 && d && inner.type !== "server.connected" && inner.type !== "server.heartbeat") this.#sseVerified = true;
+    if (dir === void 0 && d && inner2.type !== "server.connected" && inner2.type !== "server.heartbeat") this.#sseVerified = true;
     try {
-      this.onEvent(inner, d);
+      this.onEvent(inner2, d);
     } catch (e) {
       this.#d.log(`\u5904\u7406\u767E\u5EA6\u642D\u5B50\u4E8B\u4EF6\u51FA\u9519\uFF1A${e?.message ?? e}`);
     }
@@ -6512,7 +7025,7 @@ var DumateWatch = class {
       const now = this.#now();
       if (now - this.#scanAt >= SCAN_DIRS_MS) {
         this.#scanAt = now;
-        for (const d of (this.#d.sessionDirs ?? (() => scanSessionDirs(join21(qianfanHome(), "workspace", "sessions"), now)))()) {
+        for (const d of (this.#d.sessionDirs ?? (() => scanSessionDirs(join22(qianfanHome(), "workspace", "sessions"), now)))()) {
           if (!this.#dirs.has(dirKey(d))) this.#touchDir(d, now);
         }
       }
@@ -7565,9 +8078,9 @@ function codexQuestionInput(p) {
 
 // src/core/codexRemote.ts
 import { mkdirSync as mkdirSync16, renameSync as renameSync12, rmSync as rmSync10, writeFileSync as writeFileSync14 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function codexRemotePath() {
-  return join22(deskbuddyHome(), "codex-remote.json");
+  return join23(deskbuddyHome(), "codex-remote.json");
 }
 function writeCodexRemote(threads, pid = process.pid, now = Date.now()) {
   try {
@@ -7647,8 +8160,8 @@ function windowForSession(sessionId) {
 }
 
 // src/core/launch.ts
-import { mkdirSync as mkdirSync17, readFileSync as readFileSync16, renameSync as renameSync13, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "fs";
-import { join as join23 } from "path";
+import { mkdirSync as mkdirSync17, readFileSync as readFileSync17, renameSync as renameSync13, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "fs";
+import { join as join24 } from "path";
 var RUN_ID_RE = /^[a-f0-9]{32}$/;
 var SESSION_UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var LAUNCH_TOOLS = ["claude_code", "codex", "workbuddy"];
@@ -7658,10 +8171,10 @@ function validPlan(p) {
   return true;
 }
 function launchDir(home = deskbuddyHome()) {
-  return join23(home, "launch");
+  return join24(home, "launch");
 }
 function planFile(runId) {
-  return join23(launchDir(), `${runId}.json`);
+  return join24(launchDir(), `${runId}.json`);
 }
 function writeLaunch(runId, plan) {
   if (!RUN_ID_RE.test(runId)) throw new Error("bad runId");
@@ -7674,14 +8187,14 @@ function writeLaunch(runId, plan) {
 }
 function claimLaunch(runId) {
   if (!RUN_ID_RE.test(runId)) return null;
-  const claimed = join23(launchDir(), `${runId}.${process.pid}.claimed`);
+  const claimed = join24(launchDir(), `${runId}.${process.pid}.claimed`);
   try {
     renameSync13(planFile(runId), claimed);
   } catch {
     return null;
   }
   try {
-    const p = JSON.parse(readFileSync16(claimed, "utf8"));
+    const p = JSON.parse(readFileSync17(claimed, "utf8"));
     if (!p || typeof p.cwd !== "string" || typeof p.resume !== "string") return null;
     if (p.tool === void 0) p.tool = "claude_code";
     return validPlan(p) ? p : null;
@@ -7696,7 +8209,7 @@ function claimLaunch(runId) {
 }
 function launchPending(runId) {
   try {
-    readFileSync16(planFile(runId));
+    readFileSync17(planFile(runId));
     return true;
   } catch {
     return false;
@@ -7705,7 +8218,7 @@ function launchPending(runId) {
 
 // src/core/interrupt.ts
 import { closeSync as closeSync6, openSync as openSync6, readdirSync as readdirSync7, readSync as readSync5, statSync as statSync10 } from "fs";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 var TAIL = 64 * 1024;
 var SID_RE2 = /^[A-Za-z0-9_-]{1,64}$/;
 function userText2(content) {
@@ -7766,17 +8279,17 @@ function claudeTranscriptFile(sessionId, cwd, home = claudeHome()) {
     }
   };
   if (cwd) {
-    const f = join24(home, "projects", projectDirName(cwd), name);
+    const f = join25(home, "projects", projectDirName(cwd), name);
     if (exists(f)) return f;
   }
   let dirs = [];
   try {
-    dirs = readdirSync7(join24(home, "projects"));
+    dirs = readdirSync7(join25(home, "projects"));
   } catch {
     return null;
   }
   for (const d of dirs) {
-    const f = join24(home, "projects", d, name);
+    const f = join25(home, "projects", d, name);
     if (exists(f)) return f;
   }
   return null;
@@ -7797,7 +8310,7 @@ function shouldSettleInterrupt(st, markerAt, now) {
 import { execFile as execFile4, execFileSync as execFileSync12, spawn as spawn5 } from "child_process";
 import { chmodSync as chmodSync6, mkdirSync as mkdirSync18, rmSync as rmSync12, writeFileSync as writeFileSync16 } from "fs";
 import { userInfo } from "os";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 function safePath(p) {
   return /^(?:[A-Za-z]:[\\/]|\/)/.test(p) && !/[\r\n\0"'`$%;]/.test(p);
 }
@@ -7897,7 +8410,7 @@ async function openTerminal(t, d) {
   checkTarget(t);
   if (d.platform === "darwin") {
     mkdirSync18(launchDir(t.home), { recursive: true, mode: 448 });
-    const file = join25(launchDir(t.home), `${t.runId}.command`);
+    const file = join26(launchDir(t.home), `${t.runId}.command`);
     writeFileSync16(file, macCommandScript(t), { encoding: "utf8", mode: 448 });
     chmodSync6(file, 448);
     await d.run("open", ["-a", "Terminal", file]);
@@ -7917,7 +8430,7 @@ async function openTerminal(t, d) {
 function removeCommandFile(home, runId) {
   if (!RUN_ID_RE.test(runId)) return;
   try {
-    rmSync12(join25(launchDir(home), `${runId}.command`), { force: true });
+    rmSync12(join26(launchDir(home), `${runId}.command`), { force: true });
   } catch {
   }
 }
@@ -8321,24 +8834,24 @@ function startWakeServer(path, hub, secret, platform = process.platform) {
 }
 
 // src/core/appended.ts
-import { chmodSync as chmodSync7, mkdirSync as mkdirSync19, readFileSync as readFileSync17, renameSync as renameSync14, rmSync as rmSync14, writeFileSync as writeFileSync17 } from "fs";
-import { join as join26 } from "path";
+import { chmodSync as chmodSync7, mkdirSync as mkdirSync19, readFileSync as readFileSync18, renameSync as renameSync14, rmSync as rmSync14, writeFileSync as writeFileSync17 } from "fs";
+import { join as join27 } from "path";
 var APPENDED_MAX_ITEMS = 5;
 var APPENDED_TEXT_MAX = 500;
 var APPENDED_RESULT_MAX = 800;
 var APPENDED_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 function appendedDir() {
-  return join26(deskbuddyHome(), "appended");
+  return join27(deskbuddyHome(), "appended");
 }
 function appendedPath(sessionId) {
   const safe = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
-  return safe ? join26(appendedDir(), `${safe}.json`) : null;
+  return safe ? join27(appendedDir(), `${safe}.json`) : null;
 }
 function readAppended(sessionId) {
   const file = appendedPath(sessionId);
   if (!file) return [];
   try {
-    const d = JSON.parse(readFileSync17(file, "utf8"));
+    const d = JSON.parse(readFileSync18(file, "utf8"));
     return Array.isArray(d.items) ? d.items : [];
   } catch {
     return [];
@@ -8362,13 +8875,13 @@ function writeAppended(sessionId, item) {
 var RUNNING_TTL_MS = 60 * 60 * 1e3;
 function runningPath(sessionId) {
   const safe = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
-  return safe ? join26(deskbuddyHome(), "running", `${safe}.json`) : null;
+  return safe ? join27(deskbuddyHome(), "running", `${safe}.json`) : null;
 }
 function writeRunning(sessionId, now = Date.now()) {
   const file = runningPath(sessionId);
   if (!file) return;
   try {
-    mkdirSync19(join26(deskbuddyHome(), "running"), { recursive: true, mode: 448 });
+    mkdirSync19(join27(deskbuddyHome(), "running"), { recursive: true, mode: 448 });
     writeFileSync17(`${file}.tmp`, JSON.stringify({ at: now, pid: process.pid }), { encoding: "utf8", mode: 384 });
     renameSync14(`${file}.tmp`, file);
   } catch {
@@ -8415,8 +8928,8 @@ function resultSummary(tool, stdout7) {
 }
 
 // src/core/dshMailbox.ts
-import { chmodSync as chmodSync8, existsSync as existsSync13, mkdirSync as mkdirSync20, readdirSync as readdirSync8, readFileSync as readFileSync18, renameSync as renameSync15, rmSync as rmSync15, writeFileSync as writeFileSync18 } from "fs";
-import { join as join27 } from "path";
+import { chmodSync as chmodSync8, existsSync as existsSync14, mkdirSync as mkdirSync20, readdirSync as readdirSync8, readFileSync as readFileSync19, renameSync as renameSync15, rmSync as rmSync15, writeFileSync as writeFileSync18 } from "fs";
+import { join as join28 } from "path";
 var DSH_HEARTBEAT_FRESH_MS = 5 * 1e3;
 var DSH_ACK_TIMEOUT_MS = 8 * 1e3;
 var ACK_POLL_MS = 200;
@@ -8427,10 +8940,10 @@ var REVOKE_RETRY_MS = 50;
 var SID_RE3 = /^[A-Za-z0-9_-]{1,128}$/;
 var IID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 function dshMailboxDir(home = deskbuddyHome()) {
-  return join27(home, "dsh");
+  return join28(home, "dsh");
 }
 function sub(home, name) {
-  return join27(dshMailboxDir(home), name);
+  return join28(dshMailboxDir(home), name);
 }
 function ensureDir2(p) {
   mkdirSync20(p, { recursive: true, mode: 448 });
@@ -8468,7 +8981,7 @@ function dshLiveFor(sessionId, d0 = {}) {
     if (!/^\d+\.json$/.test(n)) continue;
     let hb;
     try {
-      hb = JSON.parse(readFileSync18(join27(sub(d.home, "alive"), n), "utf8"));
+      hb = JSON.parse(readFileSync19(join28(sub(d.home, "alive"), n), "utf8"));
     } catch {
       continue;
     }
@@ -8488,9 +9001,9 @@ async function dshDeliver(sessionId, msg, d0 = {}) {
   const ackDir = sub(d.home, "ack");
   ensureDir2(inbox);
   ensureDir2(ackDir);
-  const letter = join27(inbox, `${sessionId}.${msg.instructionId}.json`);
-  const ackPath = join27(ackDir, `${msg.instructionId}.json`);
-  if (existsSync13(letter)) return { ok: false, reason: "inbox_busy" };
+  const letter = join28(inbox, `${sessionId}.${msg.instructionId}.json`);
+  const ackPath = join28(ackDir, `${msg.instructionId}.json`);
+  if (existsSync14(letter)) return { ok: false, reason: "inbox_busy" };
   const writtenAt = d.now();
   writeJson(letter, { instructionId: msg.instructionId, text: msg.text, at: writtenAt });
   const sleep3 = d0.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
@@ -8498,10 +9011,10 @@ async function dshDeliver(sessionId, msg, d0 = {}) {
   let claimed = false;
   let revokeFailed = false;
   for (; ; ) {
-    if (existsSync13(ackPath)) {
+    if (existsSync14(ackPath)) {
       let ack = { ok: false, reason: "bad_ack" };
       try {
-        const v = JSON.parse(readFileSync18(ackPath, "utf8"));
+        const v = JSON.parse(readFileSync19(ackPath, "utf8"));
         if (v && typeof v.ok === "boolean") ack = v;
       } catch {
       }
@@ -8510,7 +9023,7 @@ async function dshDeliver(sessionId, msg, d0 = {}) {
     }
     if (d.now() >= deadline) {
       if (revokeFailed) {
-        if (existsSync13(letter)) return { ok: false, reason: "revoke_failed" };
+        if (existsSync14(letter)) return { ok: false, reason: "revoke_failed" };
         revokeFailed = false;
         claimed = true;
         deadline = d.now() + DSH_ACK_GRACE_MS;
@@ -8544,7 +9057,7 @@ async function revoke(letter, sleep3) {
       if (i < REVOKE_RETRIES) await sleep3(REVOKE_RETRY_MS);
     }
   }
-  return existsSync13(letter) ? "failed" : "claimed";
+  return existsSync14(letter) ? "failed" : "claimed";
 }
 function dshClearInbox(home = deskbuddyHome()) {
   const inbox = sub(home, "inbox");
@@ -8557,7 +9070,7 @@ function dshClearInbox(home = deskbuddyHome()) {
   let n = 0;
   for (const f of names) {
     try {
-      rmSync15(join27(inbox, f), { force: true });
+      rmSync15(join28(inbox, f), { force: true });
       n++;
     } catch {
     }
@@ -8588,7 +9101,7 @@ function defaultCodexAppServers() {
 }
 function opencodeReady() {
   const mod = ocPluginModule(installedHookPath());
-  return isOcPluginInstalled(opencodePluginPath()) && existsSync14(mod) && existsSync14(join28(dirname11(mod), "ocTranslate.mjs"));
+  return isOcPluginInstalled(opencodePluginPath()) && existsSync15(mod) && existsSync15(join29(dirname12(mod), "ocTranslate.mjs"));
 }
 var INTERNAL_PROMPT_MARK = "[DeskBuddy]";
 function orphanResumeText(summary2) {
@@ -8664,6 +9177,7 @@ var Daemon = class {
   #qwenwork;
   /** daemon 开窗的 WorkBuddy 窗口：授权框 / 选择题推设备、答复写成按键（Bug 176） */
   #workbuddy;
+  #trust;
   /** 百度搭子（spec 2026-10-03 §3.2）：直连 dumate-opencode 的 HTTP，状态上报 + 选择题 / 授权推设备 */
   #dumate;
   #dumateTimer = null;
@@ -8757,6 +9271,11 @@ var Daemon = class {
       log,
       enabled: () => loadConfig().enabledTools.includes("workbuddy")
     });
+    this.#trust = new TrustBridge({
+      gate: (req2, signal) => this.#coord.onGate(req2, signal),
+      log,
+      enabled: (tool) => loadConfig().enabledTools.includes(tool)
+    });
     this.#qwenwork = new QwenWorkBridge({
       gate: (req2, signal) => this.#coord.onGate(req2, signal),
       log,
@@ -8770,7 +9289,7 @@ var Daemon = class {
     });
     this.#gate = new GateServer(
       (req2, signal) => this.#coord.onGate(req2, signal),
-      (req2) => req2.tool === "workbuddy" ? this.#workbuddy.onNotify(req2) : this.#qwenwork.onNotify(req2)
+      (req2) => isTrustNotify(req2) ? this.#trust.onNotify(req2) : req2.tool === "workbuddy" ? this.#workbuddy.onNotify(req2) : this.#qwenwork.onNotify(req2)
     );
   }
   /** 起本地授权端点。必须在执行任何指令之前起好 —— 否则 gate 连不上，全部 exit 2 */
@@ -8930,9 +9449,9 @@ var Daemon = class {
   }
   /** 会话的 transcript：hook 记在状态里的优先；没有再按目录找，找不到的一段时间内不再找 */
   #transcriptOf(st, now) {
-    if (st.transcriptPath && existsSync14(st.transcriptPath)) return st.transcriptPath;
+    if (st.transcriptPath && existsSync15(st.transcriptPath)) return st.transcriptPath;
     const cached = this.#transcripts.get(st.sessionId);
-    if (cached && existsSync14(cached)) return cached;
+    if (cached && existsSync15(cached)) return cached;
     const missAt = this.#transcriptMiss.get(st.sessionId);
     if (missAt !== void 0 && now - missAt < TRANSCRIPT_MISS_TTL_MS) return null;
     const f = claudeTranscriptFile(st.sessionId, st.cwd);
@@ -9095,6 +9614,7 @@ var Daemon = class {
     this.#codex.clear();
     this.#qwenwork.stop();
     this.#workbuddy.stop();
+    this.#trust.stop();
     if (this.#dumateTimer) clearInterval(this.#dumateTimer);
     if (this.#interruptTimer) clearInterval(this.#interruptTimer);
     this.#dumate.stop();
@@ -9716,6 +10236,7 @@ var Daemon = class {
       writeRunning(sid, this.#deps.now());
       try {
         await this.#execute(cmd, sid, runCwd, true, (r) => {
+          if (cmd.tool === "codex" && !r.ok && isCodexWriterBusy(r, cmd.text)) return;
           const now = readState(sid);
           if (!now || now.interactive !== true && now.embedded !== true || !now.pid || !isAlive(now.pid, now.pidName)) return;
           writeAppended(sid, { text: cmd.text, result: resultSummary(cmd.tool, r.stdout), ok: r.ok, at: this.#deps.now() });
@@ -9772,7 +10293,15 @@ var Daemon = class {
       log(
         `\u6307\u4EE4 ${cmd.instructionId} \u6267\u884C\u5931\u8D25\uFF1A${result.error ?? "\u672A\u77E5"}` + (notLoggedIn ? `\uFF08${cmd.tool} \u7684\u547D\u4EE4\u884C\u6CA1\u767B\u5F55\uFF1A\u684C\u9762 App \u7684\u767B\u5F55\u4E0D\u5171\u4EAB\u7ED9\u547D\u4EE4\u884C\uFF0C\u9700\u8981\u5728\u7EC8\u7AEF\u91CC\u767B\u5F55\u4E00\u6B21\uFF09` : "") + (head ? `\uFF1B\u8F93\u51FA\u5F00\u5934\uFF1A${head}` : "") + (tail2 ? `\uFF1B\u8F93\u51FA\u672B\u5C3E\uFF1A${tail2}` : "")
       );
-      this.#report(cmd, sessionId || result.sessionId || "", "failed", "headless", notLoggedIn ? AGENT_NOT_LOGGED_IN : "exec_failed");
+      const writerBusy = cmd.tool === "codex" && isCodexWriterBusy(result, cmd.text);
+      if (writerBusy) log(`\u6307\u4EE4 ${cmd.instructionId} Codex \u4F1A\u8BDD\u6B63\u5F00\u5728\u7535\u8111\u7A97\u53E3\u91CC\uFF08\u5360\u7740\u5199\uFF09\uFF0C\u540E\u53F0\u7EED\u4E0D\u4E86`);
+      this.#report(
+        cmd,
+        sessionId || result.sessionId || "",
+        "failed",
+        "headless",
+        notLoggedIn ? AGENT_NOT_LOGGED_IN : writerBusy ? "window_open" : "exec_failed"
+      );
     }
     if (!sessionId) {
       const newId = result.sessionId ?? parseSessionId(cmd.tool, result.stdout);
@@ -9881,7 +10410,7 @@ var Daemon = class {
    * 起不了（关卡不可用 / 找不到可执行文件）返回 {fail}；进程起来那一刻调 onStarted
    */
   async #run(plan, tool, runId, sessionId, cwd, onStarted) {
-    if (!existsSync14(this.#deps.nodePath) || !existsSync14(this.#deps.gateScript)) {
+    if (!existsSync15(this.#deps.nodePath) || !existsSync15(this.#deps.gateScript)) {
       log(`\u6388\u6743\u5173\u5361\u4E0D\u53EF\u7528\uFF08node \u6216 gate.cjs \u627E\u4E0D\u5230\uFF09\uFF0C\u62D2\u7EDD\u6267\u884C ${tool}`);
       return { fail: "gate_unavailable" };
     }
@@ -10013,8 +10542,8 @@ async function runDaemonCommand(opts = {}) {
 }
 
 // src/core/registry.ts
-import { mkdirSync as mkdirSync21, readFileSync as readFileSync19, writeFileSync as writeFileSync20 } from "fs";
-import { join as join29 } from "path";
+import { mkdirSync as mkdirSync21, readFileSync as readFileSync20, writeFileSync as writeFileSync20 } from "fs";
+import { join as join30 } from "path";
 var FALLBACK = {
   version: "builtin",
   tools: {
@@ -10171,7 +10700,7 @@ var FALLBACK = {
   }
 };
 function registryCachePath() {
-  return join29(deskbuddyHome(), "tool-registry.json");
+  return join30(deskbuddyHome(), "tool-registry.json");
 }
 function withFallbackTools(registry) {
   if (!registry || typeof registry !== "object" || !registry.tools || typeof registry.tools !== "object") return FALLBACK;
@@ -10179,7 +10708,7 @@ function withFallbackTools(registry) {
 }
 function loadRegistry() {
   try {
-    return withFallbackTools(JSON.parse(readFileSync19(registryCachePath(), "utf8")));
+    return withFallbackTools(JSON.parse(readFileSync20(registryCachePath(), "utf8")));
   } catch {
     return FALLBACK;
   }
@@ -10194,8 +10723,8 @@ async function refreshRegistry() {
 }
 
 // src/adapters/ccHook.ts
-import { chmodSync as chmodSync9, existsSync as existsSync15, mkdirSync as mkdirSync22, readFileSync as readFileSync20, renameSync as renameSync16, rmSync as rmSync17, statSync as statSync12, writeFileSync as writeFileSync21 } from "fs";
-import { dirname as dirname12, join as join30 } from "path";
+import { chmodSync as chmodSync9, existsSync as existsSync16, mkdirSync as mkdirSync22, readFileSync as readFileSync21, renameSync as renameSync16, rmSync as rmSync17, statSync as statSync12, writeFileSync as writeFileSync21 } from "fs";
+import { dirname as dirname13, join as join31 } from "path";
 var CC_EVENTS = [
   "UserPromptSubmit",
   "PreToolUse",
@@ -10205,8 +10734,8 @@ var CC_EVENTS = [
   "SessionEnd"
 ];
 function readSettings(path) {
-  if (!existsSync15(path)) return {};
-  const raw = readFileSync20(path, "utf8");
+  if (!existsSync16(path)) return {};
+  const raw = readFileSync21(path, "utf8");
   if (raw.trim() === "") return {};
   try {
     return JSON.parse(raw);
@@ -10215,7 +10744,7 @@ function readSettings(path) {
   }
 }
 function writeSettings(path, settings) {
-  mkdirSync22(dirname12(path), { recursive: true });
+  mkdirSync22(dirname13(path), { recursive: true });
   let mode;
   try {
     mode = statSync12(path).mode & 511;
@@ -10326,7 +10855,7 @@ function installCcRewake(settingsPath, wakePath, platform = process.platform) {
   if (changed) writeSettings(settingsPath, settings);
 }
 function retagCcHook(settingsPath, scripts, from, to) {
-  if (!existsSync15(settingsPath)) return false;
+  if (!existsSync16(settingsPath)) return false;
   const settings = readSettings(settingsPath);
   if (!settings.hooks) return false;
   const tail2 = new RegExp(`(\\s)${from.replace(/[^a-z0-9_]/gi, "")}$`);
@@ -10347,8 +10876,8 @@ function retagCcHook(settingsPath, scripts, from, to) {
 function uninstallCcHook(settingsPath, hookPath) {
   const settings = readSettings(settingsPath);
   if (!settings.hooks) return;
-  const gatePath = join30(dirname12(hookPath), "gate.cjs");
-  const wakePath = join30(dirname12(hookPath), "wake.cjs");
+  const gatePath = join31(dirname13(hookPath), "gate.cjs");
+  const wakePath = join31(dirname13(hookPath), "wake.cjs");
   for (const event of Object.keys(settings.hooks)) {
     const groups = settings.hooks[event] ?? [];
     const kept = [];
@@ -10362,14 +10891,14 @@ function uninstallCcHook(settingsPath, hookPath) {
   }
   writeSettings(settingsPath, settings);
   try {
-    rmSync17(join30(dirname12(hookPath), "wake", "tokens"), { recursive: true, force: true });
+    rmSync17(join31(dirname13(hookPath), "wake", "tokens"), { recursive: true, force: true });
   } catch {
   }
 }
 
 // src/adapters/codexHook.ts
-import { chmodSync as chmodSync10, existsSync as existsSync16, mkdirSync as mkdirSync23, readFileSync as readFileSync21, renameSync as renameSync17, statSync as statSync13, writeFileSync as writeFileSync22 } from "fs";
-import { dirname as dirname13, join as join31 } from "path";
+import { chmodSync as chmodSync10, existsSync as existsSync17, mkdirSync as mkdirSync23, readFileSync as readFileSync22, renameSync as renameSync17, statSync as statSync13, writeFileSync as writeFileSync22 } from "fs";
+import { dirname as dirname14, join as join32 } from "path";
 var CODEX_MARKER_BEGIN = "# >>> deskbuddy >>>";
 var CODEX_MARKER_END = "# <<< deskbuddy <<<";
 var CODEX_EVENTS = [
@@ -10382,7 +10911,7 @@ var CODEX_EVENTS = [
 ];
 var CODEX_TRUST_NOTICE = "\u26A0\uFE0F  \u4E0B\u6B21\u542F\u52A8 Codex \u65F6\u4F1A\u8981\u6C42\u4F60\u786E\u8BA4\u4FE1\u4EFB\u8FD9\u4E2A hook\uFF0C\u8BF7\u9009\u62E9\u540C\u610F\u2014\u2014\u4E0D\u786E\u8BA4\u7684\u8BDD Codex \u4E0D\u4F1A\u6267\u884C\u5B83\u3002\n   DeskBuddy \u5347\u7EA7\uFF08\u542B\u81EA\u52A8\u5347\u7EA7\uFF09\u65B0\u589E hook \u6761\u76EE\u65F6\uFF0CCodex \u53EA\u4F1A\u5C31\u65B0\u6761\u76EE\u518D\u95EE\u4E00\u6B21\uFF0C\u540C\u6837\u9009\u540C\u610F\uFF1B\u539F\u6709\u6761\u76EE\u4E0D\u53D7\u5F71\u54CD\u3001\u72B6\u6001\u7167\u5E38\u4E0A\u62A5\u3002\n   Codex \u7ECF `--remote` \u8FDE\u5E38\u9A7B app-server \u4F7F\u7528\u65F6\uFF0C\u7A97\u53E3\u91CC\u7684\u6388\u6743\u6846\u4E5F\u80FD\u5728\u8BBE\u5907\u4E0A\u786E\u8BA4\uFF08\u5B88\u62A4\u8FDB\u7A0B\u5728\u8DD1\u65F6\u751F\u6548\uFF09";
 function codexConfigPath() {
-  return join31(codexHome(), "config.toml");
+  return join32(codexHome(), "config.toml");
 }
 var CODEX_APPENDED_TIMEOUT_S = 3;
 function renderBlock(hookPath, events, tool, platform) {
@@ -10401,7 +10930,7 @@ function renderBlock(hookPath, events, tool, platform) {
   return lines2.join("\n");
 }
 function writeAtomic(path, content) {
-  mkdirSync23(dirname13(path), { recursive: true });
+  mkdirSync23(dirname14(path), { recursive: true });
   let mode;
   try {
     mode = statSync13(path).mode & 511;
@@ -10421,7 +10950,7 @@ function assertSafeToAppend(raw, path) {
   }
 }
 function installCodexHook(configPath2, hookPath, events = CODEX_EVENTS, tool = "codex", platform = process.platform) {
-  const raw = existsSync16(configPath2) ? readFileSync21(configPath2, "utf8") : "";
+  const raw = existsSync17(configPath2) ? readFileSync22(configPath2, "utf8") : "";
   const block = renderBlock(hookPath, events, tool, platform);
   if (raw.includes(CODEX_MARKER_BEGIN)) {
     const lines2 = raw.split("\n");
@@ -10438,8 +10967,8 @@ function installCodexHook(configPath2, hookPath, events = CODEX_EVENTS, tool = "
   writeAtomic(configPath2, head + block + "\n");
 }
 function uninstallCodexHook(configPath2) {
-  if (!existsSync16(configPath2)) return;
-  const raw = readFileSync21(configPath2, "utf8");
+  if (!existsSync17(configPath2)) return;
+  const raw = readFileSync22(configPath2, "utf8");
   const lines2 = raw.split("\n");
   const begin = lines2.findIndex((l) => l.trim() === CODEX_MARKER_BEGIN);
   if (begin === -1) return;
@@ -10453,14 +10982,14 @@ function uninstallCodexHook(configPath2) {
 }
 
 // src/adapters/dshPlugin.ts
-import { copyFileSync as copyFileSync2, existsSync as existsSync17, mkdirSync as mkdirSync24, readFileSync as readFileSync22, renameSync as renameSync18, unlinkSync as unlinkSync2, writeFileSync as writeFileSync23 } from "fs";
-import { dirname as dirname14, join as join32 } from "path";
+import { copyFileSync as copyFileSync2, existsSync as existsSync18, mkdirSync as mkdirSync24, readFileSync as readFileSync23, renameSync as renameSync18, unlinkSync as unlinkSync2, writeFileSync as writeFileSync23 } from "fs";
+import { dirname as dirname15, join as join33 } from "path";
 var DSH_MARKER_BEGIN = "# >>> deskbuddy:dsh-plugin";
 var DSH_MARKER_END = "# <<< deskbuddy:dsh-plugin";
 var CREATED_FLAG = "created-file";
 var DSH_ENTRY_ID = "deskbuddy-cli";
 function dshPluginModule(hookPath) {
-  return join32(dirname14(hookPath), "deskbuddy-dsh.mjs");
+  return join33(dirname15(hookPath), "deskbuddy-dsh.mjs");
 }
 function dshBlock(pluginModule, nodePath, created) {
   return [
@@ -10499,7 +11028,7 @@ function patchShape(text) {
   return "block";
 }
 function atomicWrite2(path, text) {
-  mkdirSync24(dirname14(path), { recursive: true });
+  mkdirSync24(dirname15(path), { recursive: true });
   const tmp = `${path}.deskbuddy.tmp`;
   writeFileSync23(tmp, text, "utf8");
   renameSync18(tmp, path);
@@ -10511,12 +11040,12 @@ function dropFlowEmpty(text) {
   return text.split("\n").filter((l) => l.trim() !== "[]").join("\n");
 }
 function readPatch(path) {
-  const t = readFileSync22(path, "utf8");
+  const t = readFileSync23(path, "utf8");
   return t.charCodeAt(0) === 65279 ? t.slice(1) : t;
 }
 function installDshPlugin(patchPath, hookPath, nodePath, now = Date.now()) {
-  const exists = existsSync17(patchPath);
-  const raw = exists ? readFileSync22(patchPath, "utf8") : "";
+  const exists = existsSync18(patchPath);
+  const raw = exists ? readFileSync23(patchPath, "utf8") : "";
   const original = raw.charCodeAt(0) === 65279 ? raw.slice(1) : raw;
   const { rest, found, created: wasCreated, broken } = splitOurs(original);
   if (broken) {
@@ -10565,11 +11094,11 @@ function isDshPluginInstalled(patchPath) {
 var DSH_NOTICE = "   \u5DF2\u5F00\u7740\u7684 DeepSeek Harness\uFF08dsh web / \u684C\u9762\u7AEF\uFF09\u91CD\u542F\u540E\u751F\u6548";
 
 // src/commands/tools.ts
-import { existsSync as existsSync18, readFileSync as readFileSync23 } from "fs";
+import { existsSync as existsSync19, readFileSync as readFileSync24 } from "fs";
 function fileContains(path, needle) {
   try {
-    if (!existsSync18(path)) return false;
-    return readFileSync23(path, "utf8").includes(needle);
+    if (!existsSync19(path)) return false;
+    return readFileSync24(path, "utf8").includes(needle);
   } catch {
     return false;
   }
@@ -10648,7 +11177,7 @@ ADAPTERS["dumate-http"] = {
   },
   isInstalled: (p) => {
     try {
-      const enabled = JSON.parse(readFileSync23(p, "utf8")).enabledTools;
+      const enabled = JSON.parse(readFileSync24(p, "utf8")).enabledTools;
       return Array.isArray(enabled) && enabled.includes("dumate");
     } catch {
       return false;
@@ -10679,13 +11208,13 @@ function subscribedEvents(registry, tool, fallback) {
 }
 
 // src/commands/enable.ts
-import { dirname as dirname17, join as join35 } from "path";
+import { dirname as dirname18, join as join36 } from "path";
 
 // src/wrap/shim.ts
 import { execFileSync as execFileSync13 } from "child_process";
-import { chmodSync as chmodSync11, existsSync as existsSync19, mkdirSync as mkdirSync25, readdirSync as readdirSync9, readFileSync as readFileSync24, rmdirSync, rmSync as rmSync18, writeFileSync as writeFileSync24 } from "fs";
-import { homedir as homedir8 } from "os";
-import { delimiter as delimiter2, join as join33, resolve as resolve5 } from "path";
+import { chmodSync as chmodSync11, existsSync as existsSync20, mkdirSync as mkdirSync25, readdirSync as readdirSync9, readFileSync as readFileSync25, rmdirSync, rmSync as rmSync18, writeFileSync as writeFileSync24 } from "fs";
+import { homedir as homedir9 } from "os";
+import { delimiter as delimiter2, join as join34, resolve as resolve5 } from "path";
 var SHIM_FALLBACK_EXIT = 213;
 var WIN_SHIM_ENABLED = false;
 var SHIM_COMMANDS = { claude_code: "claude", codex: "codex" };
@@ -10695,10 +11224,10 @@ var RC_END = "# <<< deskbuddy <<<";
 var RC_FILES = [".zshrc", ".bashrc"];
 var WIN_PENDING = "Windows \u7A97\u53E3\u63A5\u7BA1\u5F85\u9A8C\u8BC1\uFF0C\u6682\u672A\u5F00\u542F";
 function shimDir() {
-  return join33(deskbuddyHome(), "bin");
+  return join34(deskbuddyHome(), "bin");
 }
 function shimFile(binDir, command, platform = process.platform) {
-  return join33(binDir, platform === "win32" ? `${command}.cmd` : command);
+  return join34(binDir, platform === "win32" ? `${command}.cmd` : command);
 }
 function shQuote3(s2) {
   return `'${s2.replace(/'/g, `'\\''`)}'`;
@@ -10827,7 +11356,7 @@ function removeRcBlock(content) {
   return content.slice(0, start) + content.slice(end);
 }
 function readRc(p) {
-  return readFileSync24(p).toString("latin1");
+  return readFileSync25(p).toString("latin1");
 }
 function writeRc(p, latin1) {
   writeFileSync24(p, Buffer.from(latin1, "latin1"));
@@ -10875,7 +11404,7 @@ function psWinPath() {
 function defaultShimEnv(nodePath, cliPath) {
   const env = process.env;
   const isolated = !!env.VITEST || !!env.DESKBUDDY_HOME;
-  const rcHome = env.DESKBUDDY_RC_HOME || (isolated ? null : homedir8());
+  const rcHome = env.DESKBUDDY_RC_HOME || (isolated ? null : homedir9());
   return {
     platform: process.platform,
     binDir: shimDir(),
@@ -10918,8 +11447,8 @@ function installShim(tool, e) {
   } else if (e.rcHome) {
     const block = toLatin1(rcBlock(e.binDir, e.rcHome));
     for (const name of RC_FILES) {
-      const rc = join33(e.rcHome, name);
-      if (!existsSync19(rc)) continue;
+      const rc = join34(e.rcHome, name);
+      if (!existsSync20(rc)) continue;
       const next = addRcBlock(readRc(rc), block);
       if (next !== null) writeRc(rc, next);
       touched.push(`~/${name}`);
@@ -10945,7 +11474,7 @@ function ourShims(binDir) {
   }
   return names.filter((n) => {
     try {
-      return readFileSync24(join33(binDir, n), "utf8").includes(SHIM_MARKER);
+      return readFileSync25(join34(binDir, n), "utf8").includes(SHIM_MARKER);
     } catch {
       return false;
     }
@@ -10957,7 +11486,7 @@ function uninstallShim(tool, e) {
   let removed = false;
   const file = shimFile(e.binDir, command, e.platform);
   try {
-    if (existsSync19(file) && readFileSync24(file, "utf8").includes(SHIM_MARKER)) {
+    if (existsSync20(file) && readFileSync25(file, "utf8").includes(SHIM_MARKER)) {
       rmSync18(file, { force: true });
       removed = true;
     }
@@ -10976,8 +11505,8 @@ function uninstallShim(tool, e) {
     }
   } else if (e.rcHome) {
     for (const name of RC_FILES) {
-      const rc = join33(e.rcHome, name);
-      if (!existsSync19(rc)) continue;
+      const rc = join34(e.rcHome, name);
+      if (!existsSync20(rc)) continue;
       const next = removeRcBlock(readRc(rc));
       if (next !== null) {
         writeRc(rc, next);
@@ -10986,7 +11515,7 @@ function uninstallShim(tool, e) {
     }
   }
   try {
-    if (existsSync19(e.binDir) && readdirSync9(e.binDir).length === 0) rmdirSync(e.binDir);
+    if (existsSync20(e.binDir) && readdirSync9(e.binDir).length === 0) rmdirSync(e.binDir);
   } catch {
   }
   if (!removed && touched.length === 0) return { ok: true, message: "" };
@@ -10998,7 +11527,7 @@ function shimState(tool, binDir, pathEnv, platform = process.platform) {
   const file = shimFile(binDir, command, platform);
   let installed = false;
   try {
-    installed = readFileSync24(file, "utf8").includes(SHIM_MARKER);
+    installed = readFileSync25(file, "utf8").includes(SHIM_MARKER);
   } catch {
     installed = false;
   }
@@ -11009,11 +11538,11 @@ function shimState(tool, binDir, pathEnv, platform = process.platform) {
 }
 
 // src/commands/migrateQoder.ts
-import { dirname as dirname16, join as join34 } from "path";
+import { dirname as dirname17, join as join35 } from "path";
 
 // src/core/detect.ts
-import { existsSync as existsSync20 } from "fs";
-import { dirname as dirname15 } from "path";
+import { existsSync as existsSync21 } from "fs";
+import { dirname as dirname16 } from "path";
 var ALL_TOOLS = ["claude_code", "codex", "workbuddy", "qoder_cn", "qoder", "opencode", "qwenwork", "dumate", "deepseek_harness"];
 function toolConfigDir(tool) {
   switch (tool) {
@@ -11022,13 +11551,13 @@ function toolConfigDir(tool) {
     case "codex":
       return codexHome();
     case "workbuddy":
-      return dirname15(workbuddySettingsPath());
+      return dirname16(workbuddySettingsPath());
     case "qoder_cn":
-      return dirname15(qoderCnSettingsPath());
+      return dirname16(qoderCnSettingsPath());
     case "qoder":
-      return dirname15(qoderSettingsPath());
+      return dirname16(qoderSettingsPath());
     case "opencode":
-      return dirname15(dirname15(opencodePluginPath()));
+      return dirname16(dirname16(opencodePluginPath()));
     case "qwenwork":
       return qwenworkHome();
     case "deepseek_harness":
@@ -11043,7 +11572,7 @@ function toolDetectDir(tool) {
 }
 var defaultDetectDeps = () => ({
   located: (tool) => locate(tool) != null,
-  exists: existsSync20,
+  exists: existsSync21,
   env: process.env
 });
 function callerTool(env) {
@@ -11065,7 +11594,7 @@ function migrateLegacyQoder(out, detect = () => detectTools()) {
   try {
     const cfg = loadConfig();
     const hookPath = installedHookPath();
-    const scripts = [hookPath, join34(dirname16(hookPath), "gate.cjs")];
+    const scripts = [hookPath, join35(dirname17(hookPath), "gate.cjs")];
     if (!retagCcHook(qoderCnSettingsPath(), scripts, "qoder", "qoder_cn")) return false;
     const hadQoder = cfg.enabledTools.includes("qoder");
     let intl = false;
@@ -11158,14 +11687,14 @@ function installTools(tools, out, shim = defaultShimEnvForInstall()) {
     installed.push(tool);
     out(`\u2705 ${tool}\uFF1Ahook \u5DF2\u88C5\u8FDB ${configPath2}\uFF08${events.length} \u4E2A\u4E8B\u4EF6\uFF09`);
     try {
-      if (adapter.installWindowGate?.(configPath2, join35(dirname17(hookPath), "gate.cjs"), tool)) {
+      if (adapter.installWindowGate?.(configPath2, join36(dirname18(hookPath), "gate.cjs"), tool)) {
         out(`   \u7A97\u53E3\u91CC\u5F39\u6388\u6743\u6846\u65F6\uFF0C\u8BBE\u5907\u4E0A\u4E5F\u80FD\u786E\u8BA4\uFF08\u5B88\u62A4\u8FDB\u7A0B\u5728\u8DD1\u65F6\u751F\u6548\uFF09`);
       }
     } catch (e) {
       out(`\u26A0\uFE0F  ${tool}\uFF1A\u8BBE\u5907\u786E\u8BA4\u6388\u6743\u6CA1\u88C5\u4E0A\uFF1A${e.message}`);
     }
     try {
-      if (adapter.installRewake?.(configPath2, join35(dirname17(hookPath), "wake.cjs"), tool)) {
+      if (adapter.installRewake?.(configPath2, join36(dirname18(hookPath), "wake.cjs"), tool)) {
         out(`   \u7A97\u53E3\u5F00\u7740\u65F6\uFF0C\u8BBE\u5907\u6307\u4EE4\u76F4\u63A5\u5728\u8FD9\u4E2A\u7A97\u53E3\u91CC\u6267\u884C\uFF08\u5B88\u62A4\u8FDB\u7A0B\u5728\u8DD1\u65F6\u751F\u6548\uFF09`);
       }
     } catch (e) {
@@ -11267,17 +11796,17 @@ async function runDisable(tools, opts = {}) {
 
 // src/commands/install.ts
 import { mkdirSync as mkdirSync26, rmSync as rmSync19, writeFileSync as writeFileSync25 } from "fs";
-import { join as join36 } from "path";
+import { join as join37 } from "path";
 
 // src/commands/setup.ts
 import qrcode from "qrcode-terminal";
 
 // src/commands/remoteCwd.ts
-import { existsSync as existsSync21, statSync as statSync14 } from "fs";
+import { existsSync as existsSync22, statSync as statSync14 } from "fs";
 import { createInterface } from "readline";
-import { homedir as homedir9 } from "os";
+import { homedir as homedir10 } from "os";
 import { isAbsolute as isAbsolute2, resolve as resolve6 } from "path";
-function normalizePath(raw, home = homedir9()) {
+function normalizePath(raw, home = homedir10()) {
   const s2 = (raw || "").trim();
   if (!s2) return null;
   const expanded = s2 === "~" ? home : s2.startsWith("~/") || process.platform === "win32" && s2.startsWith("~\\") ? resolve6(home, s2.slice(2)) : s2;
@@ -11285,7 +11814,7 @@ function normalizePath(raw, home = homedir9()) {
   return abs;
 }
 function checkPath(abs) {
-  if (!existsSync21(abs)) return "missing";
+  if (!existsSync22(abs)) return "missing";
   try {
     return statSync14(abs).isDirectory() ? "ok" : "not_a_dir";
   } catch {
@@ -11495,7 +12024,7 @@ function inSandbox(env) {
 }
 function precheckWritable(dirs) {
   for (const dir of dirs) {
-    const probe = join36(dir, `.deskbuddy-probe-${process.pid}`);
+    const probe = join37(dir, `.deskbuddy-probe-${process.pid}`);
     try {
       mkdirSync26(dir, { recursive: true });
       writeFileSync25(probe, "");
@@ -11628,7 +12157,7 @@ async function runInstall(opts, deps2 = defaultInstallDeps()) {
 
 // src/commands/logout.ts
 import { createInterface as createInterface2 } from "readline";
-import { existsSync as existsSync22, rmSync as rmSync20 } from "fs";
+import { existsSync as existsSync23, rmSync as rmSync20 } from "fs";
 function stdout4(line) {
   process.stdout.write(line + "\n");
 }
@@ -11659,7 +12188,7 @@ async function runLogout(opts = {}) {
     }
   }
   await runDisable([], { out, brief: true, keepAutostart: opts.keepAutostart });
-  if (existsSync22(home)) {
+  if (existsSync23(home)) {
     rmSync20(home, { recursive: true, force: true });
   }
   out("");
@@ -11857,7 +12386,7 @@ async function runAutoSwitch(opts) {
 // src/wrap/run.ts
 import { randomBytes as randomBytes10 } from "crypto";
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync28, statSync as statSync16, truncateSync as truncateSync3 } from "fs";
-import { join as join39 } from "path";
+import { join as join40 } from "path";
 import { StringDecoder as StringDecoder2 } from "string_decoder";
 
 // src/wrap/injector.ts
@@ -12106,9 +12635,9 @@ var Injector = class {
 
 // src/wrap/passthrough.ts
 import { spawn as spawn6 } from "child_process";
-import { realpathSync as realpathSync6 } from "fs";
+import { realpathSync as realpathSync7 } from "fs";
 import { constants as constants2 } from "os";
-import { dirname as dirname18, resolve as resolve7 } from "path";
+import { dirname as dirname19, resolve as resolve7 } from "path";
 var CLAUDE_SUBCOMMANDS = /* @__PURE__ */ new Set([
   "agents",
   "attach",
@@ -12164,7 +12693,7 @@ function norm2(p, win) {
 }
 function real(p) {
   try {
-    return realpathSync6(p);
+    return realpathSync7(p);
   } catch {
     return p;
   }
@@ -12172,7 +12701,7 @@ function real(p) {
 function findReal(tool, d = defaultLocateDeps(), skip = shimDir()) {
   const win = (d.platform ?? process.platform) === "win32";
   const skipKeys = /* @__PURE__ */ new Set([norm2(skip, win), norm2(real(skip), win)]);
-  const inSkip = (file) => skipKeys.has(norm2(dirname18(file), win)) || skipKeys.has(norm2(dirname18(real(file)), win));
+  const inSkip = (file) => skipKeys.has(norm2(dirname19(file), win)) || skipKeys.has(norm2(dirname19(real(file)), win));
   const dd = { ...d, skipDirs: [...d.skipDirs ?? [], skip] };
   const name = SHIM_COMMANDS[tool];
   if (!name) {
@@ -12252,10 +12781,10 @@ function runDirect(real2, args, env = process.env) {
 
 // src/wrap/codexLaunch.ts
 import { spawn as spawn7 } from "child_process";
-import { closeSync as closeSync7, mkdirSync as mkdirSync27, openSync as openSync7, readdirSync as readdirSync10, readFileSync as readFileSync25, rmSync as rmSync21, statSync as statSync15, truncateSync as truncateSync2, writeFileSync as writeFileSync26, renameSync as renameSync19 } from "fs";
-import { request } from "http";
+import { closeSync as closeSync7, mkdirSync as mkdirSync27, openSync as openSync7, readdirSync as readdirSync10, readFileSync as readFileSync26, rmSync as rmSync21, statSync as statSync15, truncateSync as truncateSync2, writeFileSync as writeFileSync26, renameSync as renameSync19 } from "fs";
+import { request as request2 } from "http";
 import { createServer as createServer4 } from "net";
-import { join as join37 } from "path";
+import { join as join38 } from "path";
 
 // src/core/codexServer.ts
 import { execFileSync as execFileSync14 } from "child_process";
@@ -12423,12 +12952,12 @@ async function runCodexWindow(real2, args, d) {
 }
 var MAX_LOG_BYTES2 = 1024 * 1024;
 function appServerLogPath() {
-  return join37(deskbuddyHome(), "codex-app-server.log");
+  return join38(deskbuddyHome(), "codex-app-server.log");
 }
 function windowsDir2() {
-  return join37(deskbuddyHome(), "codex-windows");
+  return join38(deskbuddyHome(), "codex-windows");
 }
-function pidAlive3(pid) {
+function pidAlive4(pid) {
   try {
     process.kill(pid, 0);
     return true;
@@ -12439,18 +12968,18 @@ function pidAlive3(pid) {
 function daemonAlive(pidFile = pidFilePath(), args = processArgs) {
   let pid = 0;
   try {
-    pid = Number(readFileSync25(pidFile, "utf8").trim());
+    pid = Number(readFileSync26(pidFile, "utf8").trim());
   } catch {
     return false;
   }
-  if (!Number.isInteger(pid) || pid <= 0 || !pidAlive3(pid)) return false;
+  if (!Number.isInteger(pid) || pid <= 0 || !pidAlive4(pid)) return false;
   const a = args(pid);
   return !!a && /cli\.js daemon(?:\s|$)/.test(a);
 }
 function probeReady(url) {
   const port = Number(url.slice(url.lastIndexOf(":") + 1));
   return new Promise((resolve8) => {
-    const req2 = request({ host: "127.0.0.1", port, path: "/readyz", method: "GET", timeout: 800 }, (res) => {
+    const req2 = request2({ host: "127.0.0.1", port, path: "/readyz", method: "GET", timeout: 800 }, (res) => {
       res.resume();
       resolve8((res.statusCode ?? 0) >= 200 && (res.statusCode ?? 0) < 300);
     });
@@ -12507,7 +13036,7 @@ function killOwnServer(pid, url) {
   if (a && isAppServerArgs(a, url)) killServer(pid);
 }
 function recordPath(rec) {
-  return join37(windowsDir2(), `${rec.server}.json`);
+  return join38(windowsDir2(), `${rec.server}.json`);
 }
 function writeRecord(rec) {
   try {
@@ -12524,7 +13053,7 @@ function removeRecord(rec) {
   } catch {
   }
 }
-function reapWindows(dir = windowsDir2(), alive = pidAlive3, args = processArgs, kill = killServer) {
+function reapWindows(dir = windowsDir2(), alive = pidAlive4, args = processArgs, kill = killServer) {
   let names = [];
   try {
     names = readdirSync10(dir).filter((n) => n.endsWith(".json"));
@@ -12532,10 +13061,10 @@ function reapWindows(dir = windowsDir2(), alive = pidAlive3, args = processArgs,
     return;
   }
   for (const n of names) {
-    const p = join37(dir, n);
+    const p = join38(dir, n);
     let rec;
     try {
-      rec = JSON.parse(readFileSync25(p, "utf8"));
+      rec = JSON.parse(readFileSync26(p, "utf8"));
     } catch {
       rmSync21(p, { force: true });
       continue;
@@ -12555,7 +13084,7 @@ function reapWindows(dir = windowsDir2(), alive = pidAlive3, args = processArgs,
 function launchLog(line) {
   try {
     mkdirSync27(deskbuddyHome(), { recursive: true });
-    writeFileSync26(join37(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
+    writeFileSync26(join38(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
 `, { flag: "a" });
   } catch {
   }
@@ -12579,8 +13108,8 @@ function defaultCodexWindowDeps(base) {
 
 // src/wrap/promptLaunch.ts
 import { randomBytes as randomBytes8 } from "crypto";
-import { homedir as homedir10 } from "os";
-import { join as join38 } from "path";
+import { homedir as homedir11 } from "os";
+import { join as join39 } from "path";
 var FIRST_LINE_WAIT_MS2 = 2 * 60 * 1e3;
 function promptArgs(text) {
   return text ? ["--", prepare(text)] : [];
@@ -12588,7 +13117,7 @@ function promptArgs(text) {
 function promptEnv(tool, env, launcherPid = process.pid, answerWindowId = "") {
   const out = { ...env };
   if (tool === "workbuddy") {
-    if (!out.CODEBUDDY_CONFIG_DIR) out.CODEBUDDY_CONFIG_DIR = join38(homedir10(), ".workbuddy");
+    if (!out.CODEBUDDY_CONFIG_DIR) out.CODEBUDDY_CONFIG_DIR = join39(homedir11(), ".workbuddy");
     out.DESKBUDDY_LAUNCHER_PID = String(launcherPid);
     out.DESKBUDDY_LAUNCHED_TOOL = tool;
     if (answerWindowId) out.DESKBUDDY_LAUNCHED_WINDOW = answerWindowId;
@@ -12639,7 +13168,7 @@ async function runPromptLaunch(tool, windowId, cwd, d) {
   } else {
     d.log(`[${windowId.slice(0, 8)}] \u6CA1\u7B49\u5230\u9996\u53E5\uFF0C\u8D77\u4E00\u4E2A\u7A7A\u7684 ${tool}`);
   }
-  const answerWindowId = tool === "workbuddy" ? randomBytes8(16).toString("hex") : "";
+  const answerWindowId = tool === "workbuddy" || tool === "codex" ? randomBytes8(16).toString("hex") : "";
   return d.run(tool, real2, [...launchArgs(tool, d.platform), ...promptArgs(text)], promptEnv(tool, d.env, process.pid, answerWindowId), answerWindowId);
 }
 function receiveFirstLine(windowId, tool, cwd, opts = {}) {
@@ -12722,18 +13251,24 @@ var FINAL_LINGER_MS = 5e3;
 // src/wrap/answerWindow.ts
 import { randomBytes as randomBytes9 } from "crypto";
 import { StringDecoder } from "string_decoder";
-async function applyAnswer(req2, io) {
+var TRUST_TICK_MS = 300;
+async function applyAnswer(req2, io, trust) {
   const id = req2.instructionId;
   if (req2.expireAt > 0 && Date.now() > req2.expireAt) return { instructionId: id, status: "rejected", reason: "expired" };
-  if (!io.screen()) return { instructionId: id, status: "rejected", reason: "no_screen" };
   const a = req2.answer;
+  if ((a.kind === "trust" || a.kind === "probe" && a.trust) && !trust) return { instructionId: id, status: "rejected", reason: "unsupported" };
+  if (!io.screen()) return { instructionId: id, status: "rejected", reason: "no_screen" };
   if (a.kind === "probe") {
-    return stillWaiting(io.screen() ?? [], a) ? { instructionId: id, status: "started", mode: "window" } : { instructionId: id, status: "rejected", reason: "not_waiting" };
+    const waiting = a.trust ? trustWaiting(io.screen() ?? [], trust?.tool ?? "") : stillWaiting(io.screen() ?? [], a);
+    return waiting ? { instructionId: id, status: "started", mode: "window" } : { instructionId: id, status: "rejected", reason: "not_waiting" };
   }
-  const keys = { screen: () => io.screen() ?? [], cursorLine: () => io.cursorLine(), write: io.write, sleep: io.sleep };
+  const keys = { screen: () => io.screen() ?? [], cursorLine: () => io.cursorLine(), write: io.write, sleep: io.sleep, hold: io.hold };
   let r;
   try {
-    r = a.kind === "permission" ? await answerPermission(keys, a.toolName, a.fingerprint, a.decision) : await answerQuestions(keys, a.questions, a.selections);
+    if (a.kind === "trust" && trust?.widens) r = "not_waiting";
+    else if (a.kind === "trust") r = await answerTrust(keys, trust?.tool ?? "", a.decision, trust?.forms ?? []);
+    else if (a.kind === "permission") r = await answerPermission(keys, a.toolName, a.fingerprint, a.decision);
+    else r = await answerQuestions(keys, a.questions, a.selections);
   } catch {
     r = "partial";
   }
@@ -12810,8 +13345,24 @@ async function runAnswerWindow(tool, real2, args, env, windowId, d) {
   let server = null;
   let finished = false;
   let chain = Promise.resolve();
+  const trust = new TrustWatcher({
+    tool,
+    cwd: d.cwd,
+    now: () => Date.now(),
+    notify: () => void (d.notifyTrust ?? notifyTrust)(tool, windowId).then((ok) => ok || d.log(`[${windowId.slice(0, 8)}] \u4FE1\u4EFB\u6846\u6CA1\u80FD\u62A5\u7ED9 daemon\uFF08daemon \u4E0D\u5728\uFF1F\uFF09\uFF0C\u8BF7\u5728\u7535\u8111\u4E0A\u786E\u8BA4`)),
+    log: (m) => d.log(`[${windowId.slice(0, 8)}] ${m}`),
+    ready: () => server !== null
+  });
+  const trustCtx = { tool, forms: trust.forms, widens: trustWidensToRepo(tool, d.cwd) };
+  const trustTimer = setInterval(() => {
+    try {
+      trust.tick(term && !finished ? screenLines(term) : null);
+    } catch {
+    }
+  }, TRUST_TICK_MS);
+  trustTimer.unref?.();
   try {
-    writeWindow(windowId, { pid: process.pid, childPid: p.pid, sock, tool, cwd: d.cwd, at: Date.now(), secret: secret.toString("hex"), launched: true, answer: true });
+    writeWindow(windowId, { pid: process.pid, childPid: p.pid, sock, tool, cwd: d.cwd, at: Date.now(), secret: secret.toString("hex"), launched: true, answer: true, trust: true });
   } catch (e) {
     d.log(`\u767B\u8BB0\u7A97\u53E3\u5931\u8D25\uFF1A${e.message}`);
   }
@@ -12824,6 +13375,12 @@ async function runAnswerWindow(tool, real2, args, env, windowId, d) {
       d.platform,
       (req2, reply) => {
         reply({ instructionId: req2.instructionId, status: "ack" });
+        const a = req2.answer;
+        if (a.kind === "trust" || a.kind === "probe" && a.trust) trust.noteContact();
+        if (tool !== "workbuddy" && a.kind !== "trust" && !(a.kind === "probe" && a.trust)) {
+          reply({ instructionId: req2.instructionId, status: "rejected", reason: "unsupported" });
+          return;
+        }
         chain = chain.then(async () => {
           const r = await applyAnswer(req2, {
             screen: () => term && !finished ? screenLines(term) : null,
@@ -12836,7 +13393,7 @@ async function runAnswerWindow(tool, real2, args, env, windowId, d) {
             },
             write: toPty,
             sleep: (ms) => new Promise((res) => setTimeout(res, ms))
-          });
+          }, trustCtx);
           if (req2.answer.kind !== "probe") d.log(`[${windowId.slice(0, 8)}] \u8BBE\u5907\u7B54\u590D\uFF08${req2.answer.kind}\uFF09\uFF1A${r.status}${r.reason ? " " + r.reason : ""}`);
           reply(r);
         });
@@ -12864,6 +13421,7 @@ async function runAnswerWindow(tool, real2, args, env, windowId, d) {
   return new Promise((resolve8) => {
     p.onExit(({ exitCode, signal }) => {
       finished = true;
+      clearInterval(trustTimer);
       for (const [s2, h] of sigs) process.removeListener(s2, h);
       process.removeListener("SIGINT", ignoreInt);
       closeChannelServer(server, sock, d.platform);
@@ -12901,7 +13459,7 @@ function childEnv(src, windowId) {
 }
 function wrapLog(line) {
   try {
-    const p = join39(deskbuddyHome(), "wrap.log");
+    const p = join40(deskbuddyHome(), "wrap.log");
     mkdirSync28(deskbuddyHome(), { recursive: true });
     try {
       if (statSync16(p).size > MAX_LOG_BYTES3) truncateSync3(p, 0);
@@ -12989,6 +13547,18 @@ var defaultLaunchDeps = () => ({
   isDir: isDirSync,
   chdir: (p) => process.chdir(p)
 });
+function answerDeps(deps2, cwd) {
+  return {
+    platform: deps2.platform,
+    stdin: deps2.stdin,
+    stdout: deps2.stdout,
+    cwd,
+    loadPty: deps2.loadPty,
+    loadHeadless: deps2.loadHeadless,
+    log: deps2.log,
+    ...deps2.notifyTrust ? { notifyTrust: deps2.notifyTrust } : {}
+  };
+}
 function defaultPromptDeps(deps2, cwd) {
   return {
     platform: deps2.platform,
@@ -12999,19 +13569,18 @@ function defaultPromptDeps(deps2, cwd) {
     receive: (id, tool, c) => receiveFirstLine(id, tool, c, { platform: deps2.platform, log: deps2.log }),
     run: async (tool, real2, args, env, answerWindowId) => {
       if (tool === "workbuddy" && answerWindowId) {
-        const r = await runAnswerWindow(tool, real2, args, env, answerWindowId, {
-          platform: deps2.platform,
-          stdin: deps2.stdin,
-          stdout: deps2.stdout,
-          cwd,
-          loadPty: deps2.loadPty,
-          loadHeadless: deps2.loadHeadless,
-          log: deps2.log
-        });
+        const r = await runAnswerWindow(tool, real2, args, env, answerWindowId, answerDeps(deps2, cwd));
         if (r !== null) return r;
         return runDirect(real2, args, env);
       }
       if (tool === "codex") {
+        const ptyRun = async (r, a) => {
+          if (answerWindowId) {
+            const code = await runAnswerWindow(tool, r, a, env, answerWindowId, answerDeps(deps2, cwd));
+            if (code !== null) return code;
+          }
+          return runDirect(r, a, env);
+        };
         return runCodexWindow(
           real2,
           args,
@@ -13021,7 +13590,7 @@ function defaultPromptDeps(deps2, cwd) {
             stdinTTY: !!deps2.stdin.isTTY,
             stdoutTTY: !!deps2.stdout.isTTY,
             cwd: () => cwd,
-            runDirect: (r, a) => runDirect(r, a, env)
+            runDirect: ptyRun
           })
         );
       }
@@ -13121,21 +13690,26 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
     } catch {
     }
   };
+  let holdDepth = 0;
+  const holdKeys = (on) => {
+    if (on) {
+      holdDepth++;
+      held = held ?? [];
+      return;
+    }
+    holdDepth = Math.max(0, holdDepth - 1);
+    if (holdDepth > 0) return;
+    const h = held ?? [];
+    held = null;
+    for (const s2 of h) toPty(s2);
+  };
   const injector = new Injector({
     now: () => Date.now(),
     view: () => term ? inspectLines(screenLines(term), screenLinesUndimmed(term)) : null,
     lastEvent: () => readLastEvent(windowId),
     write: toPty,
     sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
-    holdKeys: (on) => {
-      if (on) {
-        held = held ?? [];
-        return;
-      }
-      const h = held ?? [];
-      held = null;
-      for (const s2 of h) toPty(s2);
-    },
+    holdKeys,
     log: (m) => deps2.log(`[${windowId.slice(0, 8)}] ${m}`),
     startupIdle: launched
   });
@@ -13194,6 +13768,16 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
   } catch (e) {
     deps2.log(`\u63A5\u7BA1\u7EC8\u7AEF\u51FA\u9519\uFF1A${e.message}`);
   }
+  const trust = launched ? new TrustWatcher({
+    tool,
+    cwd: deps2.cwd(),
+    now: () => Date.now(),
+    notify: () => void (deps2.notifyTrust ?? notifyTrust)(tool, windowId).then((ok) => ok || deps2.log(`[${windowId.slice(0, 8)}] \u4FE1\u4EFB\u6846\u6CA1\u80FD\u62A5\u7ED9 daemon\uFF0C\u8BF7\u5728\u7535\u8111\u4E0A\u786E\u8BA4`)),
+    log: (m) => deps2.log(`[${windowId.slice(0, 8)}] ${m}`),
+    ready: () => server !== null
+  }) : null;
+  const trustCtx = trust ? { tool, forms: trust.forms, widens: trustWidensToRepo(tool, deps2.cwd()) } : void 0;
+  let answerChain = Promise.resolve();
   const secret = randomBytes10(32);
   try {
     writeWindow(windowId, {
@@ -13204,7 +13788,7 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
       cwd: deps2.cwd(),
       at: Date.now(),
       secret: secret.toString("hex"),
-      ...launched ? { launched: true } : {}
+      ...launched ? { launched: true, trust: true } : {}
     });
   } catch (e) {
     deps2.log(`\u767B\u8BB0\u7A97\u53E3\u5931\u8D25\uFF1A${e.message}`);
@@ -13221,7 +13805,32 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
           deps2.log(`\u6536\u6307\u4EE4\u51FA\u9519\uFF1A${e.message}`);
         }
       },
-      deps2.platform
+      deps2.platform,
+      // 设备答复只收信任框（授权框走 hook 的 PermissionRequest，不经这里）；用户自己开的窗口一律不收
+      (req2, reply) => {
+        reply({ instructionId: req2.instructionId, status: "ack" });
+        const a = req2.answer;
+        if (trust && (a.kind === "trust" || a.kind === "probe" && a.trust)) trust.noteContact();
+        if (!trustCtx || !(a.kind === "trust" || a.kind === "probe" && a.trust)) {
+          reply({ instructionId: req2.instructionId, status: "rejected", reason: "unsupported" });
+          return;
+        }
+        answerChain = answerChain.then(async () => {
+          const r = await applyAnswer(
+            req2,
+            {
+              screen: () => term && !finished ? screenLines(term) : null,
+              cursorLine: () => null,
+              write: toPty,
+              sleep: (ms) => new Promise((res) => setTimeout(res, ms)),
+              hold: holdKeys
+            },
+            trustCtx
+          );
+          if (a.kind !== "probe") deps2.log(`[${windowId.slice(0, 8)}] \u8BBE\u5907\u4FE1\u4EFB\u7B54\u590D\uFF08${a.decision}\uFF09\uFF1A${r.status}${r.reason ? " " + r.reason : ""}`);
+          reply(r);
+        });
+      }
     ).then((s2) => {
       if (finished) {
         closeChannelServer(s2, sock, deps2.platform);
@@ -13234,6 +13843,12 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
   timer = setInterval(() => {
     injector.tick().catch(() => {
     });
+    if (trust) {
+      try {
+        trust.tick(term ? screenLines(term) : null);
+      } catch {
+      }
+    }
   }, TICK_MS);
   return new Promise((resolve8) => {
     let degraded = false;