deskbuddy 0.2.0-beta.21 → 0.2.0-beta.22

package/dist/cli.js

@@ -13345,11 +13345,11 @@ var REVOKE_RETRIES = 3;
 var REVOKE_RETRY_MS = 50;
 var SID_RE3 = /^[A-Za-z0-9_-]{1,128}$/;
 var IID_RE = /^[A-Za-z0-9_-]{1,128}$/;
-function dshMailboxDir(home = deskbuddyHome()) {
-  return join40(home, "dsh");
+function dshMailboxDir(home = deskbuddyHome(), channel = "dsh") {
+  return join40(home, channel);
 }
-function sub(home, name) {
-  return join40(dshMailboxDir(home), name);
+function sub(home, name, channel = "dsh") {
+  return join40(dshMailboxDir(home, channel), name);
 }
 function ensureDir2(p) {
   mkdirSync28(p, { recursive: true, mode: 448 });
@@ -13372,22 +13372,24 @@ var defaultPidAlive = (pid) => {
   }
 };
 function deps(d) {
-  return { home: d.home ?? deskbuddyHome(), now: d.now ?? Date.now, pidAlive: d.pidAlive ?? defaultPidAlive };
+  return { home: d.home ?? deskbuddyHome(), now: d.now ?? Date.now, pidAlive: d.pidAlive ?? defaultPidAlive, channel: d.channel ?? "dsh" };
 }
-function dshLiveFor(sessionId, d0 = {}) {
-  if (!SID_RE3.test(sessionId)) return null;
+function liveHeartbeats(sessionId, d0 = {}) {
+  if (!SID_RE3.test(sessionId)) return [];
   const d = deps(d0);
+  const dir = sub(d.home, "alive", d.channel);
   let names;
   try {
-    names = readdirSync11(sub(d.home, "alive"));
+    names = readdirSync11(dir);
   } catch {
-    return null;
+    return [];
   }
+  const out = [];
   for (const n of names) {
     if (!/^\d+\.json$/.test(n)) continue;
     let hb;
     try {
-      hb = JSON.parse(readFileSync29(join40(sub(d.home, "alive"), n), "utf8"));
+      hb = JSON.parse(readFileSync29(join40(dir, n), "utf8"));
     } catch {
       continue;
     }
@@ -13395,23 +13397,27 @@ function dshLiveFor(sessionId, d0 = {}) {
     if (d.now() - hb.at > DSH_HEARTBEAT_FRESH_MS) continue;
     if (!hb.sessions.includes(sessionId)) continue;
     if (!d.pidAlive(hb.pid)) continue;
-    return hb;
+    out.push(hb);
   }
-  return null;
+  return out;
+}
+function dshLiveFor(sessionId, d0 = {}) {
+  return liveHeartbeats(sessionId, d0)[0] ?? null;
 }
 async function dshDeliver(sessionId, msg, d0 = {}) {
   const d = deps(d0);
   if (!SID_RE3.test(sessionId) || !IID_RE.test(msg.instructionId)) return { ok: false, reason: "bad_id" };
-  if (!dshLiveFor(sessionId, d)) return { ok: false, reason: "not_live" };
-  const inbox = sub(d.home, "inbox");
-  const ackDir = sub(d.home, "ack");
+  const hb = (d0.pick ?? dshLiveFor)(sessionId, d);
+  if (!hb) return { ok: false, reason: "not_live" };
+  const inbox = sub(d.home, "inbox", d.channel);
+  const ackDir = sub(d.home, "ack", d.channel);
   ensureDir2(inbox);
   ensureDir2(ackDir);
   const letter = join40(inbox, `${sessionId}.${msg.instructionId}.json`);
   const ackPath = join40(ackDir, `${msg.instructionId}.json`);
   if (existsSync24(letter)) return { ok: false, reason: "inbox_busy" };
   const writtenAt = d.now();
-  writeJson(letter, { instructionId: msg.instructionId, text: msg.text, at: writtenAt });
+  writeJson(letter, { instructionId: msg.instructionId, text: msg.text, at: writtenAt, ...d0.addressed ? { pid: hb.pid } : {} });
   const sleep3 = d0.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   let deadline = writtenAt + (d0.timeoutMs ?? DSH_ACK_TIMEOUT_MS);
   let claimed = false;
@@ -13465,8 +13471,13 @@ async function revoke(letter, sleep3) {
   }
   return existsSync24(letter) ? "failed" : "claimed";
 }
-function dshClearInbox(home = deskbuddyHome()) {
-  const inbox = sub(home, "inbox");
+function dshClearInbox(home = deskbuddyHome(), channel = "dsh") {
+  return clearDir(sub(home, "inbox", channel));
+}
+function dshClearAcks(home = deskbuddyHome(), channel = "dsh") {
+  return clearDir(sub(home, "ack", channel));
+}
+function clearDir(inbox) {
   let names;
   try {
     names = readdirSync11(inbox);
@@ -13484,6 +13495,29 @@ function dshClearInbox(home = deskbuddyHome()) {
   return n;
 }
 
+// src/core/ocMailbox.ts
+var OC_CHANNEL = "opencode";
+function pickOcHeartbeat(hbs, sessionId) {
+  if (hbs.length === 0) return null;
+  const rank = (hb) => {
+    const i = Array.isArray(hb.active) ? hb.active.indexOf(sessionId) : -1;
+    return i < 0 ? Number.MAX_SAFE_INTEGER : i;
+  };
+  return [...hbs].sort((a, b) => rank(a) - rank(b) || b.at - a.at || a.pid - b.pid)[0];
+}
+function ocLiveFor(sessionId, d0 = {}) {
+  return pickOcHeartbeat(liveHeartbeats(sessionId, { ...d0, channel: OC_CHANNEL }), sessionId);
+}
+function ocDeliver(sessionId, msg, d0 = {}) {
+  return dshDeliver(sessionId, msg, { ...d0, channel: OC_CHANNEL, addressed: true, pick: (sid, d) => ocLiveFor(sid, d) });
+}
+function ocClearInbox(home = deskbuddyHome()) {
+  return dshClearInbox(home, OC_CHANNEL);
+}
+function ocClearAcks(home = deskbuddyHome()) {
+  return dshClearAcks(home, OC_CHANNEL);
+}
+
 // src/daemon/index.ts
 var UPDATING_REASON = "updating";
 var AGENT_NOT_LOGGED_IN = "agent_not_logged_in";
@@ -13652,6 +13686,8 @@ var Daemon = class {
       qoderAppSync: deps2.qoderAppSync ?? ((job) => syncQoderApp(job)),
       dshLive: deps2.dshLive ?? ((sid) => dshLiveFor(sid) != null),
       dshDeliver: deps2.dshDeliver ?? ((sid, msg) => dshDeliver(sid, msg)),
+      ocLive: deps2.ocLive ?? ((sid) => ocLiveFor(sid) != null),
+      ocDeliver: deps2.ocDeliver ?? ((sid, msg) => ocDeliver(sid, msg)),
       loginGuide: deps2.loginGuide ?? defaultLoginGuide(log, deps2.now ?? (() => Date.now()), () => {
         const offer = defaultWorkbuddyOffer(log);
         if (offer) void offer.maybeAsk("runtime").catch(() => {
@@ -14267,6 +14303,18 @@ var Daemon = class {
           return;
         }
       }
+      if (cmd.tool === "opencode" && !this.#queue.busy(sid)) {
+        let live = false;
+        try {
+          live = this.#deps.ocLive(sid);
+        } catch {
+          live = false;
+        }
+        if (live) {
+          void this.#track(this.#toOcWindow(cmd, sid));
+          return;
+        }
+      }
     }
     this.#afterPty(cmd);
   }
@@ -14568,6 +14616,32 @@ var Daemon = class {
     const gone = ack.reason === "not_live" || ack.reason === "stale";
     this.#report(cmd, sid, gone ? "rejected" : "failed", "window", gone ? "session_gone" : "window_failed");
   }
+  /**
+   * 经插件信箱往开着这个会话的 opencode 进程里发一句话（spec 2026-10-08）。回报同 dsh：空闲 started / 正忙 queued（mode=window）。
+   * 确定没发出去（not_live：心跳刚失效 / 进程里没这个会话；no_ack：没人认领、信已收回）→ 退回原来的后台续跑。
+   * 🔴 其余失败（认领后没回执、promptAsync 出错 / 超时）不退回：可能已经发出去了，再跑一遍 = 执行两次
+   */
+  async #toOcWindow(cmd, sid) {
+    let ack;
+    try {
+      ack = await this.#deps.ocDeliver(sid, { instructionId: cmd.instructionId, text: cmd.text });
+    } catch (e) {
+      log(`\u6307\u4EE4 ${cmd.instructionId} \u6295\u9012\u7ED9 opencode \u51FA\u9519\uFF1A${e.message}`);
+      ack = { ok: false, reason: "deliver_error" };
+    }
+    if (ack.ok) {
+      log(`\u6307\u4EE4 ${cmd.instructionId} \u5DF2\u7ECF\u63D2\u4EF6\u53D1\u8FDB opencode \u4F1A\u8BDD ${sid.slice(0, 12)}${ack.busy ? "\uFF08\u6B63\u5FD9\uFF0C\u6392\u8FDB\u4E0B\u4E00\u8F6E\uFF09" : ""} len=${cmd.text.length}`);
+      this.#report(cmd, sid, ack.busy ? "queued" : "started", "window");
+      return;
+    }
+    if (ack.reason === "not_live" || ack.reason === "no_ack") {
+      log(`\u6307\u4EE4 ${cmd.instructionId} opencode \u7A97\u53E3\u6CA1\u63A5\uFF08${ack.reason}\uFF09\uFF0C\u6539\u8D70\u540E\u53F0\u7EED\u8DD1`);
+      this.#afterPty(cmd);
+      return;
+    }
+    log(`\u6307\u4EE4 ${cmd.instructionId} \u6CA1\u80FD\u53D1\u8FDB opencode \u4F1A\u8BDD\uFF08${ack.reason ?? "\u672A\u77E5"}\uFF09`);
+    this.#report(cmd, sid, "failed", "window", "window_failed");
+  }
   /** 回报一条指令的处理结果。2 秒超时、失败不重试，只记日志（seen 去重命中的不会走到这里） */
   #report(cmd, sessionId, status, mode, reason = "") {
     const payload = {
@@ -14991,6 +15065,10 @@ async function runDaemon(deps2 = {}) {
   try {
     const n = dshClearInbox();
     if (n > 0) log(`\u6E05\u6389 ${n} \u5C01\u4E0A\u6B21\u9057\u7559\u7684 dsh \u4FE1`);
+    const m = ocClearInbox();
+    if (m > 0) log(`\u6E05\u6389 ${m} \u5C01\u4E0A\u6B21\u9057\u7559\u7684 opencode \u4FE1`);
+    dshClearAcks();
+    ocClearAcks();
   } catch {
   }
   await d.startGate();
@@ -15879,6 +15957,15 @@ var Injector = class {
       job.reply(job.finalMsg);
       return;
     }
+    const unsafe = this.#d.rejectText?.(job.text) ?? null;
+    if (unsafe) {
+      this.#remember(job);
+      job.done = true;
+      this.#d.log?.(`\u4E0D\u5199 ${job.instructionId}\uFF1A${unsafe}`);
+      job.finalMsg = { instructionId: job.instructionId, status: "rejected", mode: "window", reason: unsafe };
+      job.reply(job.finalMsg);
+      return;
+    }
     if (!this.#owns(job.sessionId)) {
       this.#remember(job);
       job.done = true;
@@ -15910,6 +15997,8 @@ var Injector = class {
       this.#sawTrust = true;
     }
     if (v.permission) why.push("permission");
+    if (v.busy) why.push("generating");
+    if (v.dialog) why.push("dialog:" + v.dialog);
     const pristine = this.#d.startupIdle === true && !this.#userKeyed && !this.#injectedOnce && !last;
     if (v.input === null) why.push("no-input-box");
     else if (v.input !== "" && !v.placeholder && !pristine) why.push("user-typing");
@@ -15980,8 +16069,9 @@ var Injector = class {
       await this.#d.sleep(PASTE_SETTLE_MS);
       if (job.done) return;
       const v = this.#d.view();
-      if (!v || !boxMatches(v, body)) {
-        this.#d.log?.("\u7C98\u8D34\u540E\u8F93\u5165\u6846\u5BF9\u4E0D\u4E0A\uFF0C\u653E\u5F03\u8FD9\u6761");
+      const blocked = !!v && (!!v.dialog || v.busy === true || v.trust === true);
+      if (!v || blocked || !boxMatches(v, body)) {
+        this.#d.log?.(blocked ? `\u7C98\u8D34\u540E\u5C4F\u5E55\u4E0D\u53EF\u5199\uFF08${v?.dialog ? "dialog:" + v.dialog : v?.busy ? "generating" : "trust-dialog"}\uFF09\uFF0C\u653E\u5F03\u8FD9\u6761` : "\u7C98\u8D34\u540E\u8F93\u5165\u6846\u5BF9\u4E0D\u4E0A\uFF0C\u653E\u5F03\u8FD9\u6761");
         this.#final(job, { status: "failed", mode: "window", reason: "window_failed" });
         return;
       }
@@ -16174,6 +16264,61 @@ function runDirect(real2, args, env = process.env) {
   });
 }
 
+// src/wrap/screenRules.ts
+var Q_RULE_RE = /^─{20,}$/;
+var Q_TRUST_RE = /Do you trust the files in this folder\?/;
+var Q_PERMISSION_RE = /Permission Required|Apply this change\?|\d\. Allow once|\d\. Allow for this session/;
+var Q_LOGIN_RE = /Sign in to continue|Login with QoderCN|How would you like to authenticate/;
+var Q_BUSY_RE = /\(esc to cancel\b/;
+var Q_PLACEHOLDER_RE = /^Type your message or @\S*$/;
+var Q_FOOTER_RE = /· ctx\b/;
+function bottomRegion(lines3, rules) {
+  const anchor = rules.length >= 3 ? rules[rules.length - 3] : rules[rules.length - 1];
+  return lines3.slice(Math.max(0, anchor - 1)).join("\n");
+}
+function qoderCnRule(lines3) {
+  const rules = [];
+  lines3.forEach((l, i) => {
+    if (Q_RULE_RE.test(l.trim())) rules.push(i);
+  });
+  if (rules.length === 0) return { permission: false, input: null };
+  const text = bottomRegion(lines3, rules);
+  if (Q_TRUST_RE.test(text)) return { permission: false, input: null, trust: true };
+  if (Q_LOGIN_RE.test(text)) return { permission: false, input: null, dialog: "login" };
+  const permission = Q_PERMISSION_RE.test(text);
+  let input = null;
+  if (rules.length >= 2) {
+    const a = rules[rules.length - 2];
+    const b = rules[rules.length - 1];
+    const box = lines3.slice(a + 1, b).map((l) => l.trimEnd());
+    if (box.length > 0 && /^\s*>/.test(box[0])) input = box.join("\n").replace(/^\s*>\s?/, "").trim();
+  }
+  const v = { permission, input };
+  if (Q_BUSY_RE.test(text)) v.busy = true;
+  if (input !== null && Q_PLACEHOLDER_RE.test(input)) v.placeholder = true;
+  else if (input !== null && input.startsWith("/")) v.dialog = "slash-menu";
+  if (!v.dialog && lines3.slice(rules[rules.length - 1] + 1).some((l) => l.trim() !== "" && !Q_FOOTER_RE.test(l))) v.dialog = "popup";
+  return v;
+}
+function textRejectFor(tool) {
+  if (tool !== "qoder_cn") return void 0;
+  return (text) => /^[/!]/.test(oneLine(text)) ? "slash_command" : null;
+}
+var RULES = {
+  claude_code: inspectLines,
+  qoder_cn: qoderCnRule
+};
+function screenRuleFor(tool) {
+  return RULES[tool] ?? (() => null);
+}
+var INJECT_READY = {
+  claude_code: true,
+  qoder_cn: true
+};
+function injectReady(tool) {
+  return INJECT_READY[tool] === true;
+}
+
 // src/wrap/codexLaunch.ts
 import { execFileSync as execFileSync16, spawn as spawn8 } from "child_process";
 import { closeSync as closeSync10, mkdirSync as mkdirSync30, openSync as openSync10, readdirSync as readdirSync12, readFileSync as readFileSync30, rmSync as rmSync23, statSync as statSync19, truncateSync as truncateSync2, writeFileSync as writeFileSync29, renameSync as renameSync20 } from "fs";
@@ -17040,13 +17185,14 @@ var TICK_MS = 300;
 var MAX_LOG_BYTES3 = 512 * 1024;
 var WRAP_HINT = "DeskBuddy \u5305\u88C5\u51FA\u9519\uFF0C\u8BF7\u8BBE DESKBUDDY_WRAP_OFF=1 \u4E34\u65F6\u7ED5\u5F00\uFF08\u4F8B\u5982 DESKBUDDY_WRAP_OFF=1 claude\uFF09";
 var SESSION_ENV = ["DESKBUDDY_SHIM", "CLAUDECODE", "CLAUDE_CODE_CHILD_SESSION", "CLAUDE_CODE_SESSION_ID", "CLAUDE_PID", "CLAUDE_CODE_ENTRYPOINT"];
-function childEnv(src, windowId) {
+function childEnv(src, windowId, takeover = true) {
   const env = {};
   for (const [k, v] of Object.entries(src)) {
     if (SESSION_ENV.includes(k)) continue;
     env[k] = v;
   }
-  env.DESKBUDDY_WINDOW = windowId;
+  if (takeover) env.DESKBUDDY_WINDOW = windowId;
+  else delete env.DESKBUDDY_WINDOW;
   env.DESKBUDDY_WRAPPED = "1";
   return scrubAgentEnv(env);
 }
@@ -17191,6 +17337,7 @@ function defaultPromptDeps(deps2, cwd, launchId) {
           })
         );
       }
+      if (tool === "qoder_cn") return runQoderCnWindow(real2, args, env, cwd, deps2);
       return runDirect(real2, args, env);
     },
     env: deps2.env,
@@ -17202,6 +17349,18 @@ function defaultPromptDeps(deps2, cwd, launchId) {
     transcriptReady: (tool, sid) => launchTranscriptReady(tool, sid)
   };
 }
+async function runQoderCnWindow(real2, args, env, cwd, deps2, impl = {}) {
+  const direct = impl.direct ?? runDirect;
+  if (deps2.platform === "win32") return direct(real2, args, env);
+  let r = null;
+  try {
+    r = await (impl.wrap ?? wrapInPty)("qoder_cn", real2, args, { ...deps2, env, cwd: () => cwd }, { launched: false, takeover: impl.takeover ?? injectReady("qoder_cn") });
+  } catch (e) {
+    deps2.log(`Qoder CN \u7A97\u53E3\u5305\u88C5\u5931\u8D25\uFF0C\u76F4\u63A5\u8FD0\u884C\uFF1A${e.message}`);
+    r = null;
+  }
+  return r !== null ? r : direct(real2, args, env);
+}
 async function runLaunch(argv, deps2 = defaultWrapDeps(), ld = defaultLaunchDeps()) {
   const runId = argv[0] ?? "";
   const hi = argv.indexOf("--home");
@@ -17269,15 +17428,15 @@ async function wrapInPty(tool, real2, args, deps2, opts = {}) {
       cols,
       rows,
       cwd: deps2.cwd(),
-      env: childEnv(deps2.env, windowId)
+      env: childEnv(deps2.env, windowId, opts.takeover !== false)
     });
   } catch (e) {
     deps2.log(`pty \u8D77\u4E0D\u6765\uFF0C\u653E\u884C\u76F4\u8DD1\uFF1A${e.message}`);
     return null;
   }
-  return runAttached(tool, p, term, windowId, deps2, opts.launched === true);
+  return runAttached(tool, p, term, windowId, deps2, opts.launched === true, opts.takeover !== false);
 }
-function runAttached(tool, p, term0, windowId, deps2, launched = false) {
+function runAttached(tool, p, term0, windowId, deps2, launched = false, takeover = true) {
   const { stdin, stdout: stdout7 } = deps2;
   let term = term0;
   let finished = false;
@@ -17307,13 +17466,15 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
   };
   const injector = new Injector({
     now: () => Date.now(),
-    view: () => term ? inspectLines(screenLines(term), screenLinesUndimmed(term)) : null,
+    // 按工具取读屏规则（screenRules.ts）；判断不了返回 null = 不可写
+    view: () => term ? screenRuleFor(tool)(screenLines(term), screenLinesUndimmed(term)) : null,
     lastEvent: () => readLastEvent(windowId),
     write: toPty,
     sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
     holdKeys,
     log: (m) => deps2.log(`[${windowId.slice(0, 8)}] ${m}`),
-    startupIdle: launched
+    startupIdle: launched,
+    rejectText: textRejectFor(tool)
   });
   p.onData((d) => {
     try {
@@ -17381,7 +17542,7 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
   const trustCtx = trust ? trustContext(tool, trust.forms, deps2.cwd()) : void 0;
   let answerChain = Promise.resolve();
   const secret = randomBytes10(32);
-  try {
+  if (takeover) try {
     writeWindow(windowId, {
       pid: process.pid,
       childPid: p.pid,
@@ -17395,7 +17556,7 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
   } catch (e) {
     deps2.log(`\u767B\u8BB0\u7A97\u53E3\u5931\u8D25\uFF1A${e.message}`);
   }
-  const channelOk = deps2.platform === "win32" || ensureChannelDir(sock);
+  const channelOk = takeover && (deps2.platform === "win32" || ensureChannelDir(sock));
   if (channelOk) {
     void startChannelServer(
       sock,
@@ -17442,7 +17603,7 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false) {
       if (!s2) deps2.log("\u901A\u9053\u8D77\u4E0D\u6765\uFF0C\u8FD9\u4E2A\u7A97\u53E3\u6536\u4E0D\u5230\u8BBE\u5907\u6307\u4EE4");
     });
   }
-  timer = setInterval(() => {
+  if (takeover) timer = setInterval(() => {
     injector.tick().catch(() => {
     });
     if (trust) {

package/dist/opencode.mjs

@@ -21,7 +21,8 @@
 // 🔴 窗口模式反过来：任何失败都不表态，授权框照常由人处理。
 
 import { spawn } from 'node:child_process'
-import { appendFileSync } from 'node:fs'
+import { randomBytes } from 'node:crypto'
+import { appendFileSync, chmodSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { alwaysSuggestions, askToCc, isPlainQuestion, ocReplyOf, questionToCc, rememberTitle, supportsPermissionReply, toCcTool } from './ocTranslate.mjs'
@@ -52,6 +53,329 @@ export const OC_GATED_KEYS = [
   'external_directory', 'todowrite', 'todoread', 'lsp', 'skill', 'doom_loop', 'patch', 'apply_patch',
 ]
 
+// ---- 窗口回复信箱（spec 2026-10-08 opencode-window-reply）：与 src/core/ocMailbox.ts / dshMailbox.ts 的约定一致，改一边必须改另一边 ----
+const OC_HEARTBEAT_MS = 1000
+const OC_INBOX_POLL_MS = 500
+/** 会话列表多久刷一次（session.list 读盘，不必每秒） */
+const OC_LIST_MS = 10 * 1000
+/** 只列最近这么久更新过的顶层会话、最多这么多个 */
+const OC_LIST_MAX_AGE_MS = 7 * 24 * 3600 * 1000
+const OC_LIST_MAX = 200
+const OC_ACTIVE_MAX = 20
+/** 与 src/core/dshMailbox.ts 的 DSH_STALE_MS 一致：daemon 早已按超时回报过的信不再投 */
+export const OC_STALE_LETTER_MS = 12 * 1000
+/** 判忙闲只决定回报 started 还是 queued，最多等这么久 */
+const OC_STATUS_WAIT_MS = 1000
+/** promptAsync 是立即返回的（204），最多等这么久 */
+const OC_PROMPT_WAIT_MS = 3 * 1000
+/**
+ * 回执最晚在信龄这么久时写出：daemon 8 秒没回执去收回、发现已被认领再宽限 3 秒（= 11 秒报 ack_timeout），
+ * 这里留 1 秒余量。同一会话的信串行发，排在后面的信剩余时间不够发一次就不发、回 backlog（确定没发出去）
+ */
+export const OC_ACK_BUDGET_MS = 10 * 1000
+/** 剩余时间少于这个就不再发（至少够 promptAsync 等 1 秒 + 写回执） */
+const OC_MIN_SEND_MS = 1500
+const OC_ID_RE = /^[A-Za-z0-9_-]{1,128}$/
+export const OC_LETTER_RE = /^([A-Za-z0-9_-]{1,128})\.([A-Za-z0-9_-]{1,128})\.json$/
+/** 同一进程里插件会被加载两次（实测 1.18.34）：信箱只起一份，挂在进程全局上 */
+export const OC_MAILBOX_KEY = Symbol.for('deskbuddy.opencode.mailbox')
+
+/** 不是 TUI 的子命令：这些进程里不起信箱（serve / web / acp 等由别的前端驱动，界面不归我们管；attach 的插件跑在它连的 server 里） */
+const OC_NON_TUI_COMMANDS = new Set([
+  'completion', 'acp', 'mcp', 'attach', 'run', 'debug', 'providers', 'auth', 'agent', 'upgrade', 'uninstall',
+  'serve', 'web', 'models', 'stats', 'export', 'import', 'github', 'session', 'plugin', 'plug', 'db',
+])
+/** 带值的全局 / TUI 选项（`--port 4096` 的 4096 不是子命令）。`--x=v` 写法不占下一个参数 */
+const OC_VALUE_FLAGS = new Set(['--log-level', '--port', '--hostname', '--mdns-domain', '--cors', '-m', '--model', '-s', '--session', '--prompt', '--agent', '--replay-limit'])
+
+/**
+ * 是不是 TUI 形态（`opencode`、`opencode <项目目录>`、`opencode pr <n>`）：`--` 之前第一个位置参数不是非 TUI 子命令。
+ * 编译版 argv = [bun, 入口, …]
+ */
+export function isTuiProcess(argv = process.argv) {
+  const args = argv.slice(2)
+  const end = args.indexOf('--')
+  const head = end >= 0 ? args.slice(0, end) : args
+  for (let i = 0; i < head.length; i++) {
+    const a = String(head[i])
+    if (a.startsWith('-')) {
+      if (OC_VALUE_FLAGS.has(a)) i++
+      continue
+    }
+    return !OC_NON_TUI_COMMANDS.has(a)
+  }
+  return true
+}
+
+/** 同一类失败一分钟只记一行（心跳 / 轮询每秒都在跑，失败别刷屏） */
+export function throttledLog(write, windowMs = 60 * 1000, now = Date.now) {
+  const last = new Map()
+  return (line) => {
+    const key = String(line).replace(/[：:].*$/, '')
+    const t = now()
+    if (last.has(key) && t - last.get(key) < windowMs) return
+    last.set(key, t)
+    try {
+      write(line)
+    } catch (_) {
+      /* 日志写不了不影响 */
+    }
+  }
+}
+
+function ocDebugLog(line) {
+  appendFileSync(join(HERE, 'hook-debug.log'), `${new Date().toISOString()} [opencode] ${line}\n`, 'utf8')
+}
+
+export function ocMailboxHome(env = process.env) {
+  return (env && env.DESKBUDDY_HOME) || HERE
+}
+
+/** session.list 的结果 → 能续写的顶层会话（新的在前），顺带记下各自目录 */
+export function listableSessions(list, now, dirs) {
+  if (!Array.isArray(list)) return []
+  const out = []
+  for (const s of list) {
+    if (!s || typeof s.id !== 'string' || !OC_ID_RE.test(s.id) || s.parentID) continue
+    const t = s.time && typeof s.time.updated === 'number' ? s.time.updated : 0
+    if (now - t > OC_LIST_MAX_AGE_MS) continue
+    if (dirs && typeof s.directory === 'string' && s.directory) dirs.set(s.id, s.directory)
+    out.push({ id: s.id, t })
+  }
+  return out.sort((a, b) => b.t - a.t).slice(0, OC_LIST_MAX).map((x) => x.id)
+}
+
+/** SDK 调用的结果判定：没抛、没有 error、HTTP < 400 才算成 */
+function sdkOk(r) {
+  if (!r || r.error) return false
+  const st = r.response && typeof r.response.status === 'number' ? r.response.status : 200
+  return st < 400
+}
+
+/**
+ * 心跳：每秒写 alive/<pid>.json；取信：≤1 秒扫一次 inbox，地址是本进程、会话是自己列着的才 rename 认领
+ * （认领名带本实例随机串；与 daemon 收回、同进程另一份插件实例互斥）→ 读 → 删 → promptAsync → 写 ack。
+ * opts：client（opencode SDK）、directory、home、pid、now、log。返回句柄（测试用；进程退出时自动清心跳）
+ */
+export function startOcMailbox(opts) {
+  const client = opts.client
+  const home = opts.home || ocMailboxHome()
+  const pid = opts.pid || process.pid
+  const now = opts.now || Date.now
+  const log = opts.log || (() => {})
+  const directory = opts.directory || process.cwd()
+  const token = randomBytes(4).toString('hex')
+  const dir = (name) => join(home, 'opencode', name)
+  const alivePath = join(dir('alive'), `${pid}.json`)
+  const ensure = (p) => {
+    mkdirSync(p, { recursive: true, mode: 0o700 })
+    try {
+      chmodSync(p, 0o700)
+    } catch (_) {
+      /* 改不了权限也不挡 */
+    }
+  }
+  const writeJson = (path, value) => {
+    const tmp = `${path}.${pid}.${token}.tmp`
+    writeFileSync(tmp, JSON.stringify(value), { encoding: 'utf8', mode: 0o600 })
+    renameSync(tmp, path)
+  }
+  let listed = []
+  const dirs = new Map() // sessionID → 目录
+  const active = [] // 新的在前
+  const children = new Set()
+  const done = new Set() // 处理过的 instructionId：同一封信绝不发第二次
+  const known = (sid) => listed.includes(sid) || active.includes(sid)
+
+  const noteActive = (sid, directory2) => {
+    if (typeof sid !== 'string' || !OC_ID_RE.test(sid) || children.has(sid)) return
+    if (typeof directory2 === 'string' && directory2) dirs.set(sid, directory2)
+    const i = active.indexOf(sid)
+    if (i >= 0) active.splice(i, 1)
+    active.unshift(sid)
+    if (active.length > OC_ACTIVE_MAX) active.length = OC_ACTIVE_MAX
+  }
+  const noteChild = (sid) => {
+    if (typeof sid !== 'string') return
+    children.add(sid)
+    const i = active.indexOf(sid)
+    if (i >= 0) active.splice(i, 1)
+  }
+  let listing = false
+  const refresh = async () => {
+    if (listing) return // 上一次还没回来（读盘慢）：不叠请求
+    listing = true
+    try {
+      const r = await client.session.list({ query: { directory } })
+      if (sdkOk(r)) listed = listableSessions(r.data, now(), dirs)
+      else log(`读会话列表失败：status=${(r && r.response && r.response.status) || '?'}`)
+    } catch (e) {
+      log(`读会话列表失败：${(e && e.message) || e}`)
+    } finally {
+      listing = false
+    }
+  }
+  const beat = () => {
+    try {
+      ensure(dir('alive'))
+      const sessions = [...new Set([...active, ...listed])]
+      writeJson(alivePath, { pid, at: now(), sessions, active: [...active] })
+    } catch (e) {
+      log(`写心跳失败：${(e && e.message) || e}`)
+    }
+  }
+  const writeAck = (iid, ack) => {
+    try {
+      ensure(dir('ack'))
+      writeJson(join(dir('ack'), `${iid}.json`), ack)
+    } catch (e) {
+      log(`写回执失败：${(e && e.message) || e}`)
+    }
+  }
+  const withTimeout = (p, ms) => {
+    let timer = null
+    return Promise.race([p, new Promise((x) => (timer = setTimeout(() => x('timeout'), ms)))]).finally(() => timer && clearTimeout(timer))
+  }
+  /** deadline：这封信的回执最晚要在这时写出（信龄 OC_ACK_BUDGET_MS） */
+  const deliver = async (sid, text, deadline) => {
+    if (!text.trim()) return { ok: false, reason: 'empty' }
+    const d = dirs.get(sid) || directory
+    const left = () => deadline - now()
+    let busy = false
+    // 判忙闲只影响 started / queued：时间不宽裕就不判，按闲报
+    if (left() >= OC_STATUS_WAIT_MS + OC_PROMPT_WAIT_MS + 500) {
+      try {
+        const st = await withTimeout(client.session.status({ query: { directory: d } }), OC_STATUS_WAIT_MS)
+        const t = st && st !== 'timeout' && st.data && st.data[sid] && st.data[sid].type
+        busy = t === 'busy' || t === 'retry'
+      } catch (_) {
+        busy = false
+      }
+    }
+    // 剩余时间不够发一次：不发（确定没发出去），daemon 那头按失败回报
+    if (left() < OC_MIN_SEND_MS) return { ok: false, reason: 'backlog' }
+    try {
+      const r = await withTimeout(
+        client.session.promptAsync({ path: { id: sid }, query: { directory: d }, body: { parts: [{ type: 'text', text }] } }),
+        Math.min(OC_PROMPT_WAIT_MS, left() - 500)
+      )
+      if (r === 'timeout') return { ok: false, reason: 'prompt_timeout' }
+      if (!sdkOk(r)) {
+        // 404 = 这个进程里没有这个会话，确定没发出去，daemon 可以改走后台续跑
+        const st = r && r.response && r.response.status
+        return { ok: false, reason: st === 404 ? 'not_live' : 'prompt_failed' }
+      }
+      noteActive(sid)
+      return { ok: true, busy }
+    } catch (e) {
+      log(`promptAsync 失败：${(e && e.message) || e}`)
+      return { ok: false, reason: 'prompt_failed' }
+    }
+  }
+  /** 会话 → 这个会话上一封信的处理链：同一会话的信串行发，前一封 promptAsync 返回了才发下一封（保证先后） */
+  const chains = new Map()
+  const enqueue = (sid, iid, text, at) => {
+    const prev = chains.get(sid) || Promise.resolve()
+    const next = prev
+      .then(() => deliver(sid, text, at + OC_ACK_BUDGET_MS))
+      .then(
+        (ack) => writeAck(iid, ack),
+        () => writeAck(iid, { ok: false, reason: 'prompt_failed' })
+      )
+    chains.set(sid, next)
+    next.finally(() => {
+      if (chains.get(sid) === next) chains.delete(sid)
+    })
+  }
+  const poll = () => {
+    let names
+    try {
+      names = readdirSync(dir('inbox'))
+    } catch (_) {
+      return
+    }
+    const got = [] // 这一轮认领到的信，按信里的 at 排序后再入链
+    for (const n of names.sort()) {
+      const m = OC_LETTER_RE.exec(n)
+      if (!m || !known(m[1])) continue
+      const sid = m[1]
+      const src = join(dir('inbox'), n)
+      // 先看地址：不是给本进程的不认领（同一会话可能被同项目的另一个 TUI 也列着）
+      let peek = null
+      try {
+        peek = JSON.parse(readFileSync(src, 'utf8'))
+      } catch (_) {
+        continue // 刚被收回 / 别人认领了 / 还没写完（原子写不会出现）
+      }
+      if (!peek || (peek.pid !== undefined && peek.pid !== pid)) continue
+      const claim = `${src}.${pid}.${token}.claim`
+      try {
+        renameSync(src, claim)
+      } catch (_) {
+        continue // daemon 收回了 / 另一份实例认领了
+      }
+      let letter = null
+      try {
+        letter = JSON.parse(readFileSync(claim, 'utf8'))
+      } catch (_) {
+        letter = null
+      }
+      try {
+        unlinkSync(claim)
+      } catch (_) {
+        /* 删不掉也不影响 */
+      }
+      if (!letter || letter.instructionId !== m[2] || !OC_ID_RE.test(letter.instructionId)) continue
+      const iid = letter.instructionId
+      if (done.has(iid)) continue
+      done.add(iid)
+      if (done.size > 500) done.delete(done.values().next().value)
+      const at = typeof letter.at === 'number' ? letter.at : 0
+      if (now() - at > OC_STALE_LETTER_MS) {
+        writeAck(iid, { ok: false, reason: 'stale' })
+        continue
+      }
+      got.push({ sid, iid, at, text: typeof letter.text === 'string' ? letter.text : '' })
+    }
+    got.sort((a, b) => a.at - b.at)
+    for (const x of got) enqueue(x.sid, x.iid, x.text, x.at)
+  }
+  let t1 = null
+  let t2 = null
+  let t3 = null
+  const stop = () => {
+    if (t1) clearInterval(t1)
+    if (t2) clearInterval(t2)
+    if (t3) clearInterval(t3)
+    t1 = t2 = t3 = null
+    try {
+      unlinkSync(alivePath)
+    } catch (_) {
+      /* 已经没了 */
+    }
+  }
+  const handle = { noteActive, noteChild, refresh, beat, poll, stop, pid, token }
+  if (opts.timers !== false) {
+    refresh().finally(beat)
+    t1 = setInterval(beat, OC_HEARTBEAT_MS)
+    t2 = setInterval(poll, OC_INBOX_POLL_MS)
+    t3 = setInterval(() => void refresh(), OC_LIST_MS)
+    for (const t of [t1, t2, t3]) if (t.unref) t.unref()
+    process.once('exit', stop)
+  }
+  return handle
+}
+
+/** 进程里只起一份信箱（插件实测会被加载两次）；已有就复用。能力不够（老 SDK 没有 promptAsync）返回 null */
+export function ensureOcMailbox(ctx, g = globalThis, log = throttledLog(ocDebugLog)) {
+  const client = ctx && ctx.client
+  if (!client || !client.session || typeof client.session.promptAsync !== 'function' || typeof client.session.list !== 'function') return null
+  if (g[OC_MAILBOX_KEY]) return g[OC_MAILBOX_KEY]
+  const h = startOcMailbox({ client, log, directory: (ctx && (ctx.directory || ctx.worktree)) || process.cwd() })
+  g[OC_MAILBOX_KEY] = h
+  return h
+}
+
 function runIdFromEnv() {
   const v = process.env.DESKBUDDY_GATE_RUN || ''
   return /^[0-9a-zA-Z_-]{1,64}$/.test(v) ? v : ''
@@ -193,6 +517,16 @@ export function make(opts = {}) {
     const cwd = (ctx && (ctx.directory || ctx.worktree)) || process.cwd()
     const runId = runIdFromEnv()
     const headless = isHeadless()
+    // 窗口回复信箱：只在交互进程里起（远程 run / 一次性 run 里不收信）
+    // 只在 TUI 形态里起：serve / web / acp 等由别的前端驱动，不归我们（评审 2026-10-08 第 3 条）
+    const mailbox = runId || headless || opts.mailbox === false || !isTuiProcess(opts.argv || process.argv) ? null : ensureOcMailbox(ctx)
+    const touch = (sid, d) => {
+      try {
+        if (mailbox) mailbox.noteActive(sid, d)
+      } catch (_) {
+        /* 不影响别的 */
+      }
+    }
 
     // ---- 状态上报：串行喂 hook.cjs，保证 PreToolUse / PostToolUse / Stop 的先后 ----
     let queue = Promise.resolve()
@@ -401,6 +735,7 @@ export function make(opts = {}) {
       'chat.message': async (input, output) => {
         // prompt 给 hook 的 first-prompt 标题来源用（只记首条，见 hook.cjs）
         report('UserPromptSubmit', input && input.sessionID, { prompt: userText(output) })
+        touch(input && input.sessionID)
         // 切片 C：设备在这个窗口之外追加、daemon 后台跑完的轮次，同步取出补进这条消息（常规 report 是异步的，输出不读）
         // daemon 起的远程 run（runId）不取：那是留给用户窗口的（hook 侧还有 DESKBUDDY_HEADLESS 兜一层）
         if (runId || !(input && input.sessionID)) return
@@ -463,10 +798,16 @@ export function make(opts = {}) {
           case 'session.idle':
             report('Stop', p.sessionID)
             break
+          case 'session.status':
+            if (p.status && p.status.type === 'busy' && !children.has(p.sessionID)) touch(p.sessionID)
+            break
           case 'session.created':
           case 'session.updated':
             if (event.type === 'session.updated') rememberTitle(titles, p.info)
-            if (p.info && typeof p.info.id === 'string' && p.info.parentID) children.add(p.info.id)
+            if (p.info && typeof p.info.id === 'string' && p.info.parentID) {
+              children.add(p.info.id)
+              if (mailbox) mailbox.noteChild(p.info.id)
+            }
             break
           case 'session.deleted':
             children.delete((p.info && p.info.id) || p.sessionID)

package/hook/hook-debug.log

@@ -66,3 +66,13 @@
 2026-10-05T02:23:41.812Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
 2026-10-05T02:23:41.898Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
 2026-10-05T02:23:41.898Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-08T04:16:45.340Z [opencode] 回填选择题失败：/question/{requestID}/reply status=404
+2026-10-08T04:16:45.767Z [opencode] opencode 版本 1.4.3：带说明的拒绝不走新路由
+2026-10-08T04:16:45.767Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-08T04:16:45.863Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
+2026-10-08T04:16:45.863Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-08T05:57:20.374Z [opencode] 回填选择题失败：/question/{requestID}/reply status=404
+2026-10-08T05:57:20.845Z [opencode] opencode 版本 1.4.3：带说明的拒绝不走新路由
+2026-10-08T05:57:20.845Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型
+2026-10-08T05:57:21.097Z [opencode] opencode 版本 读不出：带说明的拒绝不走新路由
+2026-10-08T05:57:21.097Z [opencode] opencode 版本不确定支持带说明的拒绝，设备上的反馈没有带给模型

package/hook/opencode.d.mts

@@ -6,7 +6,7 @@ export function openPermissions(cfg: unknown): void
 export const OC_GATED_KEYS: string[]
 export function userText(output: unknown): string
 export function rememberTitle(titles: Map<string, string>, info: unknown): void
-export function make(opts?: { node?: string; env?: Record<string, string | undefined>; execPath?: string }): (ctx: unknown) => Promise<Record<string, unknown>>
+export function make(opts?: { node?: string; env?: Record<string, string | undefined>; execPath?: string; mailbox?: boolean; argv?: string[] }): (ctx: unknown) => Promise<Record<string, unknown>>
 export function isDumateHost(env?: Record<string, string | undefined>, execPath?: string): boolean
 export function injectAppended(output: unknown, raw: string): string
 export function alwaysSuggestions(props: unknown): Array<Record<string, unknown>> | undefined
@@ -14,3 +14,23 @@ export function questionToCc(props: unknown): { tool_name: string; tool_input: {
 export function isPlainQuestion(props: unknown, callTool: unknown): boolean
 export function ocReplyOf(out: unknown): { reply: 'once' | 'always' | 'reject'; message?: string } | null
 export function supportsPermissionReply(version: unknown): boolean
+export const OC_STALE_LETTER_MS: number
+export const OC_LETTER_RE: RegExp
+export const OC_MAILBOX_KEY: symbol
+export function ocMailboxHome(env?: Record<string, string | undefined>): string
+export function listableSessions(list: unknown, now: number, dirs?: Map<string, string>): string[]
+export interface OcMailboxHandle {
+  noteActive(sid: string, directory?: string): void
+  noteChild(sid: string): void
+  refresh(): Promise<void>
+  beat(): void
+  poll(): void
+  stop(): void
+  pid: number
+  token: string
+}
+export function startOcMailbox(opts: { client: unknown; directory?: string; home?: string; pid?: number; now?: () => number; log?: (m: string) => void; timers?: boolean }): OcMailboxHandle
+export function ensureOcMailbox(ctx: unknown, g?: Record<symbol, unknown>, log?: (m: string) => void): OcMailboxHandle | null
+export const OC_ACK_BUDGET_MS: number
+export function isTuiProcess(argv?: string[]): boolean
+export function throttledLog(write: (line: string) => void, windowMs?: number, now?: () => number): (line: string) => void

package/hook/opencode.mjs

@@ -21,7 +21,8 @@
 // 🔴 窗口模式反过来：任何失败都不表态，授权框照常由人处理。
 
 import { spawn } from 'node:child_process'
-import { appendFileSync } from 'node:fs'
+import { randomBytes } from 'node:crypto'
+import { appendFileSync, chmodSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { alwaysSuggestions, askToCc, isPlainQuestion, ocReplyOf, questionToCc, rememberTitle, supportsPermissionReply, toCcTool } from './ocTranslate.mjs'
@@ -52,6 +53,329 @@ export const OC_GATED_KEYS = [
   'external_directory', 'todowrite', 'todoread', 'lsp', 'skill', 'doom_loop', 'patch', 'apply_patch',
 ]
 
+// ---- 窗口回复信箱（spec 2026-10-08 opencode-window-reply）：与 src/core/ocMailbox.ts / dshMailbox.ts 的约定一致，改一边必须改另一边 ----
+const OC_HEARTBEAT_MS = 1000
+const OC_INBOX_POLL_MS = 500
+/** 会话列表多久刷一次（session.list 读盘，不必每秒） */
+const OC_LIST_MS = 10 * 1000
+/** 只列最近这么久更新过的顶层会话、最多这么多个 */
+const OC_LIST_MAX_AGE_MS = 7 * 24 * 3600 * 1000
+const OC_LIST_MAX = 200
+const OC_ACTIVE_MAX = 20
+/** 与 src/core/dshMailbox.ts 的 DSH_STALE_MS 一致：daemon 早已按超时回报过的信不再投 */
+export const OC_STALE_LETTER_MS = 12 * 1000
+/** 判忙闲只决定回报 started 还是 queued，最多等这么久 */
+const OC_STATUS_WAIT_MS = 1000
+/** promptAsync 是立即返回的（204），最多等这么久 */
+const OC_PROMPT_WAIT_MS = 3 * 1000
+/**
+ * 回执最晚在信龄这么久时写出：daemon 8 秒没回执去收回、发现已被认领再宽限 3 秒（= 11 秒报 ack_timeout），
+ * 这里留 1 秒余量。同一会话的信串行发，排在后面的信剩余时间不够发一次就不发、回 backlog（确定没发出去）
+ */
+export const OC_ACK_BUDGET_MS = 10 * 1000
+/** 剩余时间少于这个就不再发（至少够 promptAsync 等 1 秒 + 写回执） */
+const OC_MIN_SEND_MS = 1500
+const OC_ID_RE = /^[A-Za-z0-9_-]{1,128}$/
+export const OC_LETTER_RE = /^([A-Za-z0-9_-]{1,128})\.([A-Za-z0-9_-]{1,128})\.json$/
+/** 同一进程里插件会被加载两次（实测 1.18.34）：信箱只起一份，挂在进程全局上 */
+export const OC_MAILBOX_KEY = Symbol.for('deskbuddy.opencode.mailbox')
+
+/** 不是 TUI 的子命令：这些进程里不起信箱（serve / web / acp 等由别的前端驱动，界面不归我们管；attach 的插件跑在它连的 server 里） */
+const OC_NON_TUI_COMMANDS = new Set([
+  'completion', 'acp', 'mcp', 'attach', 'run', 'debug', 'providers', 'auth', 'agent', 'upgrade', 'uninstall',
+  'serve', 'web', 'models', 'stats', 'export', 'import', 'github', 'session', 'plugin', 'plug', 'db',
+])
+/** 带值的全局 / TUI 选项（`--port 4096` 的 4096 不是子命令）。`--x=v` 写法不占下一个参数 */
+const OC_VALUE_FLAGS = new Set(['--log-level', '--port', '--hostname', '--mdns-domain', '--cors', '-m', '--model', '-s', '--session', '--prompt', '--agent', '--replay-limit'])
+
+/**
+ * 是不是 TUI 形态（`opencode`、`opencode <项目目录>`、`opencode pr <n>`）：`--` 之前第一个位置参数不是非 TUI 子命令。
+ * 编译版 argv = [bun, 入口, …]
+ */
+export function isTuiProcess(argv = process.argv) {
+  const args = argv.slice(2)
+  const end = args.indexOf('--')
+  const head = end >= 0 ? args.slice(0, end) : args
+  for (let i = 0; i < head.length; i++) {
+    const a = String(head[i])
+    if (a.startsWith('-')) {
+      if (OC_VALUE_FLAGS.has(a)) i++
+      continue
+    }
+    return !OC_NON_TUI_COMMANDS.has(a)
+  }
+  return true
+}
+
+/** 同一类失败一分钟只记一行（心跳 / 轮询每秒都在跑，失败别刷屏） */
+export function throttledLog(write, windowMs = 60 * 1000, now = Date.now) {
+  const last = new Map()
+  return (line) => {
+    const key = String(line).replace(/[：:].*$/, '')
+    const t = now()
+    if (last.has(key) && t - last.get(key) < windowMs) return
+    last.set(key, t)
+    try {
+      write(line)
+    } catch (_) {
+      /* 日志写不了不影响 */
+    }
+  }
+}
+
+function ocDebugLog(line) {
+  appendFileSync(join(HERE, 'hook-debug.log'), `${new Date().toISOString()} [opencode] ${line}\n`, 'utf8')
+}
+
+export function ocMailboxHome(env = process.env) {
+  return (env && env.DESKBUDDY_HOME) || HERE
+}
+
+/** session.list 的结果 → 能续写的顶层会话（新的在前），顺带记下各自目录 */
+export function listableSessions(list, now, dirs) {
+  if (!Array.isArray(list)) return []
+  const out = []
+  for (const s of list) {
+    if (!s || typeof s.id !== 'string' || !OC_ID_RE.test(s.id) || s.parentID) continue
+    const t = s.time && typeof s.time.updated === 'number' ? s.time.updated : 0
+    if (now - t > OC_LIST_MAX_AGE_MS) continue
+    if (dirs && typeof s.directory === 'string' && s.directory) dirs.set(s.id, s.directory)
+    out.push({ id: s.id, t })
+  }
+  return out.sort((a, b) => b.t - a.t).slice(0, OC_LIST_MAX).map((x) => x.id)
+}
+
+/** SDK 调用的结果判定：没抛、没有 error、HTTP < 400 才算成 */
+function sdkOk(r) {
+  if (!r || r.error) return false
+  const st = r.response && typeof r.response.status === 'number' ? r.response.status : 200
+  return st < 400
+}
+
+/**
+ * 心跳：每秒写 alive/<pid>.json；取信：≤1 秒扫一次 inbox，地址是本进程、会话是自己列着的才 rename 认领
+ * （认领名带本实例随机串；与 daemon 收回、同进程另一份插件实例互斥）→ 读 → 删 → promptAsync → 写 ack。
+ * opts：client（opencode SDK）、directory、home、pid、now、log。返回句柄（测试用；进程退出时自动清心跳）
+ */
+export function startOcMailbox(opts) {
+  const client = opts.client
+  const home = opts.home || ocMailboxHome()
+  const pid = opts.pid || process.pid
+  const now = opts.now || Date.now
+  const log = opts.log || (() => {})
+  const directory = opts.directory || process.cwd()
+  const token = randomBytes(4).toString('hex')
+  const dir = (name) => join(home, 'opencode', name)
+  const alivePath = join(dir('alive'), `${pid}.json`)
+  const ensure = (p) => {
+    mkdirSync(p, { recursive: true, mode: 0o700 })
+    try {
+      chmodSync(p, 0o700)
+    } catch (_) {
+      /* 改不了权限也不挡 */
+    }
+  }
+  const writeJson = (path, value) => {
+    const tmp = `${path}.${pid}.${token}.tmp`
+    writeFileSync(tmp, JSON.stringify(value), { encoding: 'utf8', mode: 0o600 })
+    renameSync(tmp, path)
+  }
+  let listed = []
+  const dirs = new Map() // sessionID → 目录
+  const active = [] // 新的在前
+  const children = new Set()
+  const done = new Set() // 处理过的 instructionId：同一封信绝不发第二次
+  const known = (sid) => listed.includes(sid) || active.includes(sid)
+
+  const noteActive = (sid, directory2) => {
+    if (typeof sid !== 'string' || !OC_ID_RE.test(sid) || children.has(sid)) return
+    if (typeof directory2 === 'string' && directory2) dirs.set(sid, directory2)
+    const i = active.indexOf(sid)
+    if (i >= 0) active.splice(i, 1)
+    active.unshift(sid)
+    if (active.length > OC_ACTIVE_MAX) active.length = OC_ACTIVE_MAX
+  }
+  const noteChild = (sid) => {
+    if (typeof sid !== 'string') return
+    children.add(sid)
+    const i = active.indexOf(sid)
+    if (i >= 0) active.splice(i, 1)
+  }
+  let listing = false
+  const refresh = async () => {
+    if (listing) return // 上一次还没回来（读盘慢）：不叠请求
+    listing = true
+    try {
+      const r = await client.session.list({ query: { directory } })
+      if (sdkOk(r)) listed = listableSessions(r.data, now(), dirs)
+      else log(`读会话列表失败：status=${(r && r.response && r.response.status) || '?'}`)
+    } catch (e) {
+      log(`读会话列表失败：${(e && e.message) || e}`)
+    } finally {
+      listing = false
+    }
+  }
+  const beat = () => {
+    try {
+      ensure(dir('alive'))
+      const sessions = [...new Set([...active, ...listed])]
+      writeJson(alivePath, { pid, at: now(), sessions, active: [...active] })
+    } catch (e) {
+      log(`写心跳失败：${(e && e.message) || e}`)
+    }
+  }
+  const writeAck = (iid, ack) => {
+    try {
+      ensure(dir('ack'))
+      writeJson(join(dir('ack'), `${iid}.json`), ack)
+    } catch (e) {
+      log(`写回执失败：${(e && e.message) || e}`)
+    }
+  }
+  const withTimeout = (p, ms) => {
+    let timer = null
+    return Promise.race([p, new Promise((x) => (timer = setTimeout(() => x('timeout'), ms)))]).finally(() => timer && clearTimeout(timer))
+  }
+  /** deadline：这封信的回执最晚要在这时写出（信龄 OC_ACK_BUDGET_MS） */
+  const deliver = async (sid, text, deadline) => {
+    if (!text.trim()) return { ok: false, reason: 'empty' }
+    const d = dirs.get(sid) || directory
+    const left = () => deadline - now()
+    let busy = false
+    // 判忙闲只影响 started / queued：时间不宽裕就不判，按闲报
+    if (left() >= OC_STATUS_WAIT_MS + OC_PROMPT_WAIT_MS + 500) {
+      try {
+        const st = await withTimeout(client.session.status({ query: { directory: d } }), OC_STATUS_WAIT_MS)
+        const t = st && st !== 'timeout' && st.data && st.data[sid] && st.data[sid].type
+        busy = t === 'busy' || t === 'retry'
+      } catch (_) {
+        busy = false
+      }
+    }
+    // 剩余时间不够发一次：不发（确定没发出去），daemon 那头按失败回报
+    if (left() < OC_MIN_SEND_MS) return { ok: false, reason: 'backlog' }
+    try {
+      const r = await withTimeout(
+        client.session.promptAsync({ path: { id: sid }, query: { directory: d }, body: { parts: [{ type: 'text', text }] } }),
+        Math.min(OC_PROMPT_WAIT_MS, left() - 500)
+      )
+      if (r === 'timeout') return { ok: false, reason: 'prompt_timeout' }
+      if (!sdkOk(r)) {
+        // 404 = 这个进程里没有这个会话，确定没发出去，daemon 可以改走后台续跑
+        const st = r && r.response && r.response.status
+        return { ok: false, reason: st === 404 ? 'not_live' : 'prompt_failed' }
+      }
+      noteActive(sid)
+      return { ok: true, busy }
+    } catch (e) {
+      log(`promptAsync 失败：${(e && e.message) || e}`)
+      return { ok: false, reason: 'prompt_failed' }
+    }
+  }
+  /** 会话 → 这个会话上一封信的处理链：同一会话的信串行发，前一封 promptAsync 返回了才发下一封（保证先后） */
+  const chains = new Map()
+  const enqueue = (sid, iid, text, at) => {
+    const prev = chains.get(sid) || Promise.resolve()
+    const next = prev
+      .then(() => deliver(sid, text, at + OC_ACK_BUDGET_MS))
+      .then(
+        (ack) => writeAck(iid, ack),
+        () => writeAck(iid, { ok: false, reason: 'prompt_failed' })
+      )
+    chains.set(sid, next)
+    next.finally(() => {
+      if (chains.get(sid) === next) chains.delete(sid)
+    })
+  }
+  const poll = () => {
+    let names
+    try {
+      names = readdirSync(dir('inbox'))
+    } catch (_) {
+      return
+    }
+    const got = [] // 这一轮认领到的信，按信里的 at 排序后再入链
+    for (const n of names.sort()) {
+      const m = OC_LETTER_RE.exec(n)
+      if (!m || !known(m[1])) continue
+      const sid = m[1]
+      const src = join(dir('inbox'), n)
+      // 先看地址：不是给本进程的不认领（同一会话可能被同项目的另一个 TUI 也列着）
+      let peek = null
+      try {
+        peek = JSON.parse(readFileSync(src, 'utf8'))
+      } catch (_) {
+        continue // 刚被收回 / 别人认领了 / 还没写完（原子写不会出现）
+      }
+      if (!peek || (peek.pid !== undefined && peek.pid !== pid)) continue
+      const claim = `${src}.${pid}.${token}.claim`
+      try {
+        renameSync(src, claim)
+      } catch (_) {
+        continue // daemon 收回了 / 另一份实例认领了
+      }
+      let letter = null
+      try {
+        letter = JSON.parse(readFileSync(claim, 'utf8'))
+      } catch (_) {
+        letter = null
+      }
+      try {
+        unlinkSync(claim)
+      } catch (_) {
+        /* 删不掉也不影响 */
+      }
+      if (!letter || letter.instructionId !== m[2] || !OC_ID_RE.test(letter.instructionId)) continue
+      const iid = letter.instructionId
+      if (done.has(iid)) continue
+      done.add(iid)
+      if (done.size > 500) done.delete(done.values().next().value)
+      const at = typeof letter.at === 'number' ? letter.at : 0
+      if (now() - at > OC_STALE_LETTER_MS) {
+        writeAck(iid, { ok: false, reason: 'stale' })
+        continue
+      }
+      got.push({ sid, iid, at, text: typeof letter.text === 'string' ? letter.text : '' })
+    }
+    got.sort((a, b) => a.at - b.at)
+    for (const x of got) enqueue(x.sid, x.iid, x.text, x.at)
+  }
+  let t1 = null
+  let t2 = null
+  let t3 = null
+  const stop = () => {
+    if (t1) clearInterval(t1)
+    if (t2) clearInterval(t2)
+    if (t3) clearInterval(t3)
+    t1 = t2 = t3 = null
+    try {
+      unlinkSync(alivePath)
+    } catch (_) {
+      /* 已经没了 */
+    }
+  }
+  const handle = { noteActive, noteChild, refresh, beat, poll, stop, pid, token }
+  if (opts.timers !== false) {
+    refresh().finally(beat)
+    t1 = setInterval(beat, OC_HEARTBEAT_MS)
+    t2 = setInterval(poll, OC_INBOX_POLL_MS)
+    t3 = setInterval(() => void refresh(), OC_LIST_MS)
+    for (const t of [t1, t2, t3]) if (t.unref) t.unref()
+    process.once('exit', stop)
+  }
+  return handle
+}
+
+/** 进程里只起一份信箱（插件实测会被加载两次）；已有就复用。能力不够（老 SDK 没有 promptAsync）返回 null */
+export function ensureOcMailbox(ctx, g = globalThis, log = throttledLog(ocDebugLog)) {
+  const client = ctx && ctx.client
+  if (!client || !client.session || typeof client.session.promptAsync !== 'function' || typeof client.session.list !== 'function') return null
+  if (g[OC_MAILBOX_KEY]) return g[OC_MAILBOX_KEY]
+  const h = startOcMailbox({ client, log, directory: (ctx && (ctx.directory || ctx.worktree)) || process.cwd() })
+  g[OC_MAILBOX_KEY] = h
+  return h
+}
+
 function runIdFromEnv() {
   const v = process.env.DESKBUDDY_GATE_RUN || ''
   return /^[0-9a-zA-Z_-]{1,64}$/.test(v) ? v : ''
@@ -193,6 +517,16 @@ export function make(opts = {}) {
     const cwd = (ctx && (ctx.directory || ctx.worktree)) || process.cwd()
     const runId = runIdFromEnv()
     const headless = isHeadless()
+    // 窗口回复信箱：只在交互进程里起（远程 run / 一次性 run 里不收信）
+    // 只在 TUI 形态里起：serve / web / acp 等由别的前端驱动，不归我们（评审 2026-10-08 第 3 条）
+    const mailbox = runId || headless || opts.mailbox === false || !isTuiProcess(opts.argv || process.argv) ? null : ensureOcMailbox(ctx)
+    const touch = (sid, d) => {
+      try {
+        if (mailbox) mailbox.noteActive(sid, d)
+      } catch (_) {
+        /* 不影响别的 */
+      }
+    }
 
     // ---- 状态上报：串行喂 hook.cjs，保证 PreToolUse / PostToolUse / Stop 的先后 ----
     let queue = Promise.resolve()
@@ -401,6 +735,7 @@ export function make(opts = {}) {
       'chat.message': async (input, output) => {
         // prompt 给 hook 的 first-prompt 标题来源用（只记首条，见 hook.cjs）
         report('UserPromptSubmit', input && input.sessionID, { prompt: userText(output) })
+        touch(input && input.sessionID)
         // 切片 C：设备在这个窗口之外追加、daemon 后台跑完的轮次，同步取出补进这条消息（常规 report 是异步的，输出不读）
         // daemon 起的远程 run（runId）不取：那是留给用户窗口的（hook 侧还有 DESKBUDDY_HEADLESS 兜一层）
         if (runId || !(input && input.sessionID)) return
@@ -463,10 +798,16 @@ export function make(opts = {}) {
           case 'session.idle':
             report('Stop', p.sessionID)
             break
+          case 'session.status':
+            if (p.status && p.status.type === 'busy' && !children.has(p.sessionID)) touch(p.sessionID)
+            break
           case 'session.created':
           case 'session.updated':
             if (event.type === 'session.updated') rememberTitle(titles, p.info)
-            if (p.info && typeof p.info.id === 'string' && p.info.parentID) children.add(p.info.id)
+            if (p.info && typeof p.info.id === 'string' && p.info.parentID) {
+              children.add(p.info.id)
+              if (mailbox) mailbox.noteChild(p.info.id)
+            }
             break
           case 'session.deleted':
             children.delete((p.info && p.info.id) || p.sessionID)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deskbuddy",
-  "version": "0.2.0-beta.21",
+  "version": "0.2.0-beta.22",
   "description": "把 Claude Code、Codex 等 AI 编码智能体每个会话窗口的状态，实时同步到桌面硬件屏幕",
   "keywords": [
     "ai",