deskbuddy 0.2.0-beta.26 → 0.2.0-beta.27

package/dist/cli.js

@@ -716,7 +716,7 @@ var AutoEnabler = class {
 // src/daemon/index.ts
 import { randomBytes as randomBytes7 } from "crypto";
 import { existsSync as existsSync13, statSync as statSync13 } from "fs";
-import { basename as basename10, dirname as dirname10, join as join27 } from "path";
+import { basename as basename10, dirname as dirname10, join as join28 } from "path";
 import WebSocket3 from "ws";
 
 // src/core/state.ts
@@ -1677,7 +1677,7 @@ function mapStatus(s2, decision) {
 import { randomUUID } from "crypto";
 import { lstatSync, readlinkSync, realpathSync as realpathSync2 } from "fs";
 import { homedir as homedir2 } from "os";
-import { basename as basename4, dirname as dirname2, join as join10, posix as posix3, resolve as resolve2, win32 as win323 } from "path";
+import { basename as basename5, dirname as dirname2, join as join10, posix as posix3, resolve as resolve2, win32 as win323 } from "path";
 
 // src/daemon/gate/classify.ts
 import { isAbsolute, relative, resolve, sep } from "path";
@@ -2114,8 +2114,9 @@ var CMD_MATCH_MIN = 6;
 var CMD_MATCH_LEN = 80;
 
 // src/daemon/gate/options.ts
-var OPTION_LABEL_MAX = 120;
-var OPTION_DESC_MAX = 120;
+var OPTIONS_MAX = 16;
+var OPTION_LABEL_MAX = 2e3;
+var OPTION_DESC_MAX = 2e3;
 var ID_RE = /^[a-z0-9_]{1,16}$/;
 var KINDS = /* @__PURE__ */ new Set(["allow", "allow_session", "allow_always", "deny"]);
 function cleanOptionText(s2) {
@@ -2124,9 +2125,8 @@ function cleanOptionText(s2) {
 function checkOptions(set, limits = {}) {
   if (!set || !Array.isArray(set.options)) return null;
   const opts = set.options;
-  const unbounded = limits.unbounded === true;
   const anyKinds = limits.anyKinds === true;
-  if (opts.length < (anyKinds ? 1 : 2) || !unbounded && opts.length > 4) return null;
+  if (opts.length < (anyKinds ? 1 : 2) || opts.length > OPTIONS_MAX) return null;
   const ids = /* @__PURE__ */ new Set();
   const out = [];
   for (const o of opts) {
@@ -2135,8 +2135,9 @@ function checkOptions(set, limits = {}) {
     if (!KINDS.has(o.kind)) return null;
     if (o.input === true && o.kind !== "deny") return null;
     const label = typeof o.label === "string" ? cleanOptionText(o.label) : "";
-    if (!label || !unbounded && label.length > OPTION_LABEL_MAX) return null;
-    const desc = typeof o.description === "string" ? unbounded ? cleanOptionText(o.description) : cleanOptionText(o.description).slice(0, OPTION_DESC_MAX) : "";
+    if (!label || label.length > OPTION_LABEL_MAX) return null;
+    const desc = typeof o.description === "string" ? cleanOptionText(o.description) : "";
+    if (desc.length > OPTION_DESC_MAX) return null;
     const a = set.actions?.[o.id];
     if (!a || a.decision !== (o.kind === "deny" ? "deny" : "allow")) return null;
     if (a.defer === true && o.kind !== "deny") return null;
@@ -2417,13 +2418,10 @@ function qoderCnTuiKnown(toolName, toolInput, suggestions) {
     if (!s2 || s2.type !== "setMode" || s2.mode !== "acceptEdits" || s2.destination !== "session") return null;
     const set = qoderSet(...remember("session", QODER_TEXT.session, "allow_session", "\u89C4\u5219\uFF1A\u672C\u4F1A\u8BDD\u5207\u6362\u5230 acceptEdits\uFF08\u81EA\u52A8\u63A5\u53D7\u6587\u4EF6\u7F16\u8F91\uFF09"));
     if (!set) return null;
-    return checkOptions(
-      {
-        options: [...set.options, { id: "editor", label: QODER_TEXT.editor, description: QODER_TEXT.editorDesc, kind: "deny" }],
-        actions: { ...set.actions, editor: { decision: "deny", defer: true } }
-      },
-      { unbounded: true }
-    );
+    return checkOptions({
+      options: [...set.options, { id: "editor", label: QODER_TEXT.editor, description: QODER_TEXT.editorDesc, kind: "deny" }],
+      actions: { ...set.actions, editor: { decision: "deny", defer: true } }
+    });
   }
   if (toolName === "WebFetch") {
     const rc = s2 ? singleRule(s2, "WebFetch", "localSettings") : null;
@@ -2443,6 +2441,45 @@ function qoderCnTuiKnown(toolName, toolInput, suggestions) {
   }
   return null;
 }
+var QODER_SCREEN_UNKNOWN_DESC = "\u8981\u5728\u7535\u8111\u4E0A\u64CD\u4F5C\uFF0C\u8BBE\u5907\u4E0A\u9009\u8FD9\u4E00\u9879\u540E\u8BF7\u5230\u7535\u8111\u4E0A\u7EE7\u7EED";
+var SCREEN_DENY_RE = /^(?:No\b|Reject\b|Deny\b|Don'?t\b|Do not\b|Cancel\b|拒绝|不)/i;
+var SCREEN_INPUT_RE = /tell .+ what to do|type something|拒绝并说明/i;
+var SCREEN_ALLOW_RE = /^(?:Allow\b|Always\b|Yes\b|允许|始终允许|总是允许)/i;
+function qoderCnScreenOptions(labels, table) {
+  if (!Array.isArray(labels) || labels.length < 2) return null;
+  const main2 = [];
+  const tail3 = [];
+  const ids = /* @__PURE__ */ new Set();
+  const take = (id, n) => ids.has(id) ? `k${n}` : id;
+  for (let i = 0; i < labels.length; i++) {
+    const n = i + 1;
+    const label = cleanOptionText(String(labels[i] ?? ""));
+    if (!label) return null;
+    let pair;
+    const known = table?.options.find((o) => o.label === label);
+    const knownAct = known ? table?.actions[known.id] : void 0;
+    if (label === QODER_TEXT.once) pair = [{ id: take("allow", n), label, kind: "allow" }, { decision: "allow" }];
+    else if (label === QODER_TEXT.no) pair = [{ id: take("no", n), label, kind: "deny" }, { decision: "deny" }];
+    else if (label === QODER_TEXT.rejectInput)
+      pair = [{ id: take("deny", n), label, description: QODER_TEXT.rejectInputDesc, kind: "deny", input: true }, { decision: "deny" }];
+    else if (label === QODER_TEXT.editor)
+      pair = [{ id: take("editor", n), label, description: QODER_TEXT.editorDesc, kind: "deny" }, { decision: "deny", defer: true }];
+    else if (known && knownAct && !knownAct.defer && known.kind !== "allow")
+      pair = [{ ...known, id: take(known.id, n) }, knownAct];
+    else if (SCREEN_DENY_RE.test(label))
+      pair = [{ id: `k${n}`, label, kind: "deny", ...SCREEN_INPUT_RE.test(label) ? { input: true } : {} }, { decision: "deny" }];
+    else if (SCREEN_ALLOW_RE.test(label))
+      pair = [{ id: `k${n}`, label, kind: /session|会话/i.test(label) ? "allow_session" : "allow_always" }, { decision: "allow", screenKey: n }];
+    else pair = [{ id: `k${n}`, label, description: QODER_SCREEN_UNKNOWN_DESC, kind: "deny" }, { decision: "deny", defer: true }];
+    ids.add(pair[0].id);
+    (pair[1].defer ? tail3 : main2).push(pair);
+  }
+  const all = [...main2, ...tail3];
+  const options = all.map(([o]) => o);
+  const actions = {};
+  for (const [o, a] of all) actions[o.id] = a;
+  return checkOptions({ options, actions });
+}
 var QODER_GUI_TEXT = {
   zh: {
     deny: "\u62D2\u7EDD",
@@ -2518,7 +2555,25 @@ function qoderCnGuiOptions(suggestions, lang) {
     options.push({ id, label: v.label, ...v.desc ? { description: v.desc } : {}, kind: "allow_session" });
     actions[id] = { decision: "allow", updatedPermissions: [s2] };
   }
-  return checkOptions({ options, actions }, { unbounded: true });
+  return checkOptions({ options, actions });
+}
+var QWENWORK_TEXT = {
+  zh: { deny: "\u62D2\u7EDD", allow: "\u5141\u8BB8" },
+  "zh-TW": { deny: "\u62D2\u7D55", allow: "\u5141\u8A31" },
+  en: { deny: "Deny", allow: "Allow" }
+};
+var QWENWORK_CONFIRM_TOOLS = /(^|__)qwenwork_pages_publish$/;
+function qwenworkOptions(toolName, lang) {
+  if (QWENWORK_CONFIRM_TOOLS.test(toolName)) return codebuddyNoticeOptions();
+  if (lang !== "zh" && lang !== "en" && lang !== "zh-TW") return null;
+  const t = QWENWORK_TEXT[lang];
+  return checkOptions({
+    options: [
+      { id: "deny", label: t.deny, kind: "deny" },
+      { id: "allow", label: t.allow, kind: "allow" }
+    ],
+    actions: { deny: { decision: "deny" }, allow: { decision: "allow" } }
+  });
 }
 function firstRememberOption(set) {
   return set?.options.find((o) => o.kind === "allow_session" || o.kind === "allow_always");
@@ -2598,10 +2653,537 @@ function codebuddyOptions(toolName, toolInput, product, ctx = {}) {
 function codebuddyNoticeOptions() {
   return checkOptions(
     { options: [{ id: "o0", label: CODEBUDDY_TEXT.noticeButton, kind: "deny" }], actions: { o0: { decision: "deny", defer: true } } },
-    { anyKinds: true, unbounded: true }
+    { anyKinds: true }
   );
 }
 
+// src/wrap/answerKeys.ts
+var KEY_DOWN = "\x1B[B";
+var KEY_UP = "\x1B[A";
+var KEY_ENTER = "\r";
+var ARROW_GAP_MS = 150;
+var CONFIRM_MS = 4e3;
+var POLL_MS = 150;
+var FINGERPRINT_CHARS = 40;
+var FINGERPRINT_TAIL = 30;
+var FP_SEP = "\u2026";
+var CURSOR = "[\u276F>\u203A]";
+function joined(lines3) {
+  return lines3.join("\n");
+}
+function squash(s2) {
+  return s2.replace(/[\s\u2500-\u257F]+/g, "");
+}
+function basename4(p) {
+  const parts = p.split(/[\\/]+/).filter(Boolean);
+  return parts[parts.length - 1] ?? "";
+}
+function displayFingerprint(toolName, input) {
+  const a = input && typeof input === "object" ? input : {};
+  const s2 = (v) => typeof v === "string" ? v : "";
+  const headTail = (v) => {
+    const q = squash(v);
+    return q.length > FINGERPRINT_CHARS + FINGERPRINT_TAIL ? q.slice(0, FINGERPRINT_CHARS) + FP_SEP + q.slice(-FINGERPRINT_TAIL) : q;
+  };
+  if (toolName === "Bash") return headTail(s2(a.command));
+  if (toolName === "Write") {
+    const name = squash(basename4(s2(a.file_path)));
+    const body = squash(s2(a.content)).slice(0, 20);
+    return name ? body ? name + FP_SEP + body : name : "";
+  }
+  if (["Edit", "MultiEdit", "Read", "NotebookEdit"].includes(toolName)) return squash(basename4(s2(a.file_path) || s2(a.notebook_path)));
+  return headTail(Object.values(a).find((v) => typeof v === "string" && v.trim() !== "") ?? "").slice(0, 200);
+}
+var SETTLE_MS = 800;
+async function settled(io, ok) {
+  if (!ok(io.screen())) return false;
+  await io.sleep(SETTLE_MS);
+  return ok(io.screen());
+}
+async function waitUntil(io, ok, ms = CONFIRM_MS) {
+  const loops = Math.max(1, Math.ceil(ms / POLL_MS));
+  for (let i = 0; i < loops; i++) {
+    if (ok(io.screen())) return true;
+    await io.sleep(POLL_MS);
+  }
+  return ok(io.screen());
+}
+function permissionRegion(lines3, toolName) {
+  let q = -1;
+  for (let i = lines3.length - 1; i >= 0; i--) {
+    if (/^\s*Do you want to .+\?\s*$/.test(lines3[i])) {
+      q = i;
+      break;
+    }
+  }
+  if (q < 0 || !toolName) return null;
+  const head = new RegExp(`^\\s*\u25CF\\s*${toolName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\(`);
+  let h = -1;
+  for (let i = q - 1; i >= 0; i--) {
+    if (head.test(lines3[i])) {
+      h = i;
+      break;
+    }
+    if (/^\s*●/.test(lines3[i])) return null;
+  }
+  if (h < 0) return null;
+  const after = joined(lines3.slice(q + 1, q + 6));
+  if (!new RegExp(`^\\s*(?:${CURSOR}\\s*)?1\\.\\s+Yes\\s*$`, "m").test(after)) return null;
+  if (!/^\s*(?:[❯>›]\s*)?3\.\s+No\b/m.test(after)) return null;
+  return lines3.slice(h, q + 1);
+}
+function isPermissionDialog(lines3, toolName, fingerprint2) {
+  if (!fingerprint2) return false;
+  const region = permissionRegion(lines3, toolName);
+  if (!region) return false;
+  const text = squash(joined(region));
+  return fingerprint2.split(FP_SEP).every((part) => !!part && text.includes(squash(part)));
+}
+async function answerPermission(io, toolName, fingerprint2, decision) {
+  const ok = (l) => isPermissionDialog(l, toolName, fingerprint2);
+  if (!await settled(io, ok)) return "not_waiting";
+  io.write(decision === "allow" ? "1" : "3");
+  return await waitUntil(io, (l) => !ok(l)) ? "done" : "partial";
+}
+var TAB_ROW = /←.*[☐☒].*Submit.*→/;
+function isQuestionDialog(lines3) {
+  return lines3.some((l) => TAB_ROW.test(l));
+}
+function onQuestion(lines3, q) {
+  const start = questionStart(lines3);
+  if (start < 0) return false;
+  const t = squash(q.question);
+  return !!t && squash(joined(lines3.slice(start))).includes(t);
+}
+function isReviewPage(lines3) {
+  const t = joined(lines3);
+  return /Review your answers/.test(t) && /Submit answers/.test(t);
+}
+function questionStart(lines3) {
+  for (let i = lines3.length - 1; i >= 0; i--) if (TAB_ROW.test(lines3[i])) return i + 1;
+  return -1;
+}
+function optionLine(lines3, n, label) {
+  const lab = squash(label).slice(0, 6);
+  const start = questionStart(lines3);
+  if (start < 0) return -1;
+  for (let i = start; i < lines3.length; i++) {
+    const m = lines3[i].match(/^\s*(?:[❯>›]\s*)?[☐☒]?\s*(\d+)\.\s+(.*)$/);
+    if (m && Number(m[1]) === n && squash(m[2]).startsWith(lab)) return i;
+  }
+  return -1;
+}
+function checked(lines3, line) {
+  return line >= 0 && /^\s*☒/.test(lines3[line]);
+}
+function singleCursor(lines3, q) {
+  const n = q.options.length;
+  const start = questionStart(lines3);
+  if (start < 0) return -1;
+  for (let i = start; i < lines3.length; i++) {
+    const l = lines3[i];
+    const m = l.match(new RegExp(`^\\s*${CURSOR}\\s*(\\d+)\\.\\s+(.*)$`));
+    if (m) {
+      const k = Number(m[1]) - 1;
+      if (k >= 0 && k < n) return squash(m[2]).startsWith(squash(q.options[k].label).slice(0, 6)) ? k : -1;
+      if (k === n) return /^Typesomething/.test(squash(m[2])) ? n : -1;
+      return -1;
+    }
+    if (new RegExp(`^\\s*${CURSOR}\\s*(Next|Submit)\\s*$`).test(l)) return n + 1;
+  }
+  return -1;
+}
+async function move(io, delta) {
+  const key = delta > 0 ? KEY_DOWN : KEY_UP;
+  for (let i = 0; i < Math.abs(delta); i++) {
+    io.write(key);
+    await io.sleep(ARROW_GAP_MS);
+  }
+}
+async function answerQuestions(io, questions, selections) {
+  if (questions.length === 0 || selections.length !== questions.length) return "not_waiting";
+  for (let qi = 0; qi < questions.length; qi++) {
+    const sel = selections[qi];
+    const q = questions[qi];
+    if (sel.length === 0 || sel.some((i) => !Number.isInteger(i) || i < 0 || i >= q.options.length)) return "not_waiting";
+    if (q.multiSelect !== true && sel.length !== 1) return "not_waiting";
+  }
+  if (!await settled(io, (l) => onQuestion(l, questions[0]))) return "not_waiting";
+  if (questions.some((q) => q.multiSelect === true) && (!io.cursorLine || io.cursorLine() === null)) return "unsupported";
+  let wrote = false;
+  const fail = () => wrote ? "partial" : "not_waiting";
+  for (let qi = 0; qi < questions.length; qi++) {
+    const q = questions[qi];
+    const n = q.options.length;
+    const sel = [...selections[qi]].sort((a, b) => a - b);
+    if (!await waitUntil(io, (l) => onQuestion(l, q))) return fail();
+    if (q.multiSelect === true) {
+      const lines0 = io.screen();
+      for (let i = 0; i < n; i++) if (checked(lines0, optionLine(lines0, i + 1, q.options[i].label))) return fail();
+      const first = optionLine(lines0, 1, q.options[0].label);
+      if (first < 0 || io.cursorLine?.() !== first) return fail();
+      let cur = 0;
+      for (const t of sel) {
+        await move(io, t - cur);
+        cur = t;
+        const onTarget = await waitUntil(io, (l) => {
+          const ln = optionLine(l, t + 1, q.options[t].label);
+          return ln >= 0 && io.cursorLine?.() === ln;
+        });
+        if (!onTarget) return fail();
+        io.write(KEY_ENTER);
+        wrote = true;
+        if (!await waitUntil(io, (l) => checked(l, optionLine(l, t + 1, q.options[t].label)))) return fail();
+      }
+      await move(io, n + 1 - cur);
+      if (!await waitUntil(io, (l) => questionStart(l) >= 0 && new RegExp(`^\\s*${CURSOR}\\s*(Submit|Next)\\s*$`, "m").test(joined(l.slice(questionStart(l)))))) return fail();
+      io.write(KEY_ENTER);
+      wrote = true;
+    } else {
+      const t = sel[0];
+      const cur = singleCursor(io.screen(), q);
+      if (cur < 0) return fail();
+      await move(io, t - cur);
+      if (!await waitUntil(io, (l) => singleCursor(l, q) === t && optionLine(l, t + 1, q.options[t].label) >= 0)) return fail();
+      io.write(KEY_ENTER);
+      wrote = true;
+    }
+    const next = questions[qi + 1];
+    const moved = await waitUntil(io, (l) => next ? onQuestion(l, next) : isReviewPage(l) || !isQuestionDialog(l));
+    if (!moved) return fail();
+  }
+  const s2 = io.screen();
+  if (!isReviewPage(s2)) return isQuestionDialog(s2) ? fail() : "done";
+  if (!new RegExp(`^\\s*${CURSOR}\\s*1\\.\\s+Submit answers`, "m").test(joined(s2))) return fail();
+  io.write(KEY_ENTER);
+  return await waitUntil(io, (l) => !isReviewPage(l) && !isQuestionDialog(l)) ? "done" : "partial";
+}
+function stillWaiting(lines3, probe) {
+  if (probe.questions && probe.questions.length > 0) return probe.questions.some((q) => onQuestion(lines3, q)) || isReviewPage(lines3);
+  return isPermissionDialog(lines3, probe.toolName, probe.fingerprint ?? "");
+}
+
+// src/wrap/screen.ts
+var ESC = "\x1B";
+var PASTE_BEGIN = ESC + "[200~";
+var PASTE_END = ESC + "[201~";
+function sanitize(text) {
+  return String(text).replace(/\r\n?/g, "\n").replace(/[\x00-\x08\x0b-\x1f\x7f-\x9f]/g, "");
+}
+var MAX_INJECT_CHARS = 800;
+var TEXT_TOO_LONG = "text_too_long";
+function oneLine(text) {
+  return sanitize(text).replace(/\s*\n\s*/g, " ").trim();
+}
+function tooLongToInject(text) {
+  return oneLine(text).length > MAX_INJECT_CHARS;
+}
+function prepare(text) {
+  return " " + oneLine(text);
+}
+var TRUST_RE = /trust (the files in )?this folder|Yes, I trust this folder/i;
+var PLACEHOLDER_RE = /^Try ".*"$/;
+function isTerminalReport(s2) {
+  if (!s2) return true;
+  const rest = s2.replace(/\x1b\[[IO]/g, "").replace(/\x1b\[\d+;\d+R/g, "").replace(/\x1b\[[?>][\d;]*\$?[a-zA-Z]/g, "").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, "").replace(/\x1bP[^\x1b]*\x1b\\/g, "");
+  return rest === "";
+}
+var PERMISSION_RE = /Do you want to (proceed|make|create|run|allow)|[❯>]\s*1\. Yes/;
+function inspectLines(lines3, undimmed) {
+  const text = lines3.join("\n");
+  const trust = TRUST_RE.test(text);
+  const permission = PERMISSION_RE.test(text);
+  const rules = [];
+  lines3.forEach((l, i) => {
+    if (/^─{20,}/.test(l.trim())) rules.push(i);
+  });
+  let input = null;
+  if (rules.length >= 2) {
+    const a = rules[rules.length - 2];
+    const b = rules[rules.length - 1];
+    const src = undimmed && undimmed.length === lines3.length ? undimmed : lines3;
+    input = src.slice(a + 1, b).map((l) => l.trimEnd()).join("\n").replace(/^\s*[❯>]\s?/, "").trimEnd();
+  }
+  const v = { permission, input };
+  if (trust) v.trust = true;
+  if (input !== null && PLACEHOLDER_RE.test(input.trim())) v.placeholder = true;
+  return v;
+}
+function boxMatches(view, body) {
+  if (view.input === null || view.permission) return false;
+  const flat2 = (x) => x.replace(/\s+/g, "");
+  return flat2(view.input) === flat2(body) || /\[Pasted text #\d+/.test(view.input);
+}
+
+// src/wrap/screenRules.ts
+var Q_RULE_RE = /^(?:─{20,}|-{20,})$/;
+var Q_TRUST_RE = /Do you trust the files in this folder\?/;
+var Q_PERMISSION_RE = /Permission Required|Apply this change\?|\d\. Allow once|\d\. Allow for this session/;
+var Q_LOGIN_RE = /Sign in to continue|Login with QoderCN|How would you like to authenticate/;
+var Q_BUSY_RE = /\(esc to cancel\b/;
+var Q_PLACEHOLDER_RE = /^Type your message or @\S*$/;
+var Q_FOOTER_RE = /· ctx\b/;
+function bottomRegion(lines3, rules) {
+  const anchor = rules.length >= 3 ? rules[rules.length - 3] : rules[rules.length - 1];
+  return lines3.slice(Math.max(0, anchor - 1)).join("\n");
+}
+function qoderCnRule(lines3) {
+  const rules = [];
+  lines3.forEach((l, i) => {
+    if (Q_RULE_RE.test(l.trim())) rules.push(i);
+  });
+  if (rules.length === 0) return { permission: false, input: null };
+  const text = bottomRegion(lines3, rules);
+  if (Q_TRUST_RE.test(text)) return { permission: false, input: null, trust: true };
+  if (Q_LOGIN_RE.test(text)) return { permission: false, input: null, dialog: "login" };
+  const permission = Q_PERMISSION_RE.test(text);
+  let input = null;
+  if (rules.length >= 2) {
+    const a = rules[rules.length - 2];
+    const b = rules[rules.length - 1];
+    const box = lines3.slice(a + 1, b).map((l) => l.trimEnd());
+    if (box.length > 0 && /^\s*>/.test(box[0])) input = box.join("\n").replace(/^\s*>\s?/, "").trim();
+  }
+  const v = { permission, input };
+  if (Q_BUSY_RE.test(text)) v.busy = true;
+  if (input !== null && Q_PLACEHOLDER_RE.test(input)) v.placeholder = true;
+  else if (input !== null && input.startsWith("/")) v.dialog = "slash-menu";
+  if (!v.dialog && lines3.slice(rules[rules.length - 1] + 1).some((l) => l.trim() !== "" && !Q_FOOTER_RE.test(l))) v.dialog = "popup";
+  return v;
+}
+function textRejectFor(tool) {
+  if (tool !== "qoder_cn") return void 0;
+  return (text) => /^[/!]/.test(oneLine(text)) ? "slash_command" : null;
+}
+var RULES = {
+  claude_code: inspectLines,
+  qoder_cn: qoderCnRule
+};
+function screenRuleFor(tool) {
+  return RULES[tool] ?? (() => null);
+}
+var INJECT_READY = {
+  claude_code: true,
+  qoder_cn: true
+};
+function injectReady(tool) {
+  return INJECT_READY[tool] === true;
+}
+
+// src/wrap/qoderPermBox.ts
+var TITLE_RE = /^\s*Permission Required\s*$/;
+var TOOL_RE = /^\s*Tool:\s*(\S.*?)\s*$/;
+var FILE_RE = /^\s*File:\s*(\S.*?)\s*$/;
+var OPTION_RE = /^(\s*)(?:([❯>])\s*)?(\d+)\.\s+(\S.*?)\s*$/;
+var HINT_RE = /\b(?:esc|enter|tab|ctrl|shift)\b|[↑↓←→]|\bto (?:cancel|select|confirm|navigate|choose)\b|按\s*\S+\s*(?:取消|确认|选择)/i;
+function squash2(s2) {
+  return s2.replace(/[\s─-╿|+]+/g, "");
+}
+function slash(p) {
+  return p.replace(/\\/g, "/").replace(/\/+/g, "/");
+}
+function qoderBoxFingerprint(toolName, input) {
+  const a = input && typeof input === "object" ? input : {};
+  const s2 = (v) => typeof v === "string" ? v : "";
+  if (toolName === "Bash") {
+    const c = squash2(s2(a.command));
+    return c ? `cmd:${c}` : "";
+  }
+  if (["Write", "Edit", "MultiEdit", "Read", "NotebookEdit"].includes(toolName)) {
+    const p = s2(a.file_path) || s2(a.notebook_path);
+    return p.trim() ? `file:${slash(p.trim())}` : "";
+  }
+  return "";
+}
+function parseQoderPermissionBox(lines3) {
+  const view = qoderCnRule(lines3);
+  if (!view || !view.permission || view.trust) return null;
+  let title = -1;
+  for (let i = lines3.length - 1; i >= 0; i--) {
+    if (TITLE_RE.test(lines3[i])) {
+      title = i;
+      break;
+    }
+  }
+  if (title < 0) return null;
+  const region = lines3.slice(title);
+  let tool = "";
+  let file3;
+  for (const l of region) {
+    const m = l.match(TOOL_RE);
+    if (m && !tool) tool = m[1];
+    const f = l.match(FILE_RE);
+    if (f && file3 === void 0) file3 = f[1];
+  }
+  if (!tool) return null;
+  let best = null;
+  let cur = [];
+  const close = () => {
+    if (cur.length >= 2) best = cur;
+    cur = [];
+  };
+  region.forEach((l, idx) => {
+    const m = l.match(OPTION_RE);
+    if (m) {
+      const n = Number(m[3]);
+      if (n === 1) close();
+      else if (cur.length === 0 || n !== cur[cur.length - 1].n + 1) {
+        close();
+        return;
+      }
+      const col = l.length - l.trimStart().length + (m[2] ? m[2].length : 0);
+      cur.push({ n, label: m[4], selected: !!m[2], col: l.indexOf(m[4], col), rows: [idx] });
+      return;
+    }
+    const last = cur[cur.length - 1];
+    if (last && l.trim() !== "" && l.length - l.trimStart().length >= last.col && !HINT_RE.test(l)) {
+      last.label = `${last.label} ${l.trim()}`;
+      last.rows.push(idx);
+      return;
+    }
+    close();
+  });
+  close();
+  const opts = best;
+  if (!opts || opts.filter((o) => o.selected).length !== 1) return null;
+  const optRows = new Set(opts.flatMap((o) => o.rows));
+  return {
+    tool,
+    ...file3 !== void 0 ? { file: file3 } : {},
+    options: opts.map(({ n, label, selected }) => ({ n, label, selected })),
+    body: squash2(region.filter((_, i) => !optRows.has(i)).join("\n"))
+  };
+}
+function boxIsFor(box, toolName, fingerprint2) {
+  if (!box || box.tool !== toolName) return false;
+  if (!fingerprint2) return true;
+  if (fingerprint2.startsWith("cmd:")) return box.body.includes(fingerprint2.slice(4));
+  if (fingerprint2.startsWith("file:")) {
+    const full = fingerprint2.slice(5);
+    const shown = box.file ? slash(box.file.trim()) : "";
+    return !!shown && (full === shown || full.endsWith(shown.startsWith("/") ? shown : `/${shown}`));
+  }
+  return false;
+}
+function sameLabels(box, labels) {
+  return box.options.length === labels.length && box.options.every((o, i) => o.label === labels[i]);
+}
+var QoderBoxTracker = class {
+  #id = 0;
+  #sig = null;
+  #box = null;
+  update(lines3) {
+    const box = lines3 ? parseQoderPermissionBox(lines3) : null;
+    const sig = box ? JSON.stringify([box.tool, box.file ?? "", box.body, box.options.map((o) => o.label)]) : null;
+    if (sig !== null && sig !== this.#sig) this.#id++;
+    this.#sig = sig;
+    this.#box = box;
+  }
+  current() {
+    return this.#box ? { id: this.#id, box: this.#box } : null;
+  }
+};
+function snap(io) {
+  io.track.update(io.screen());
+  return io.track.current();
+}
+var READ_POLL_MS = 250;
+var READ_WAIT_MS = 2500;
+async function readQoderBox(io, toolName, fingerprint2, waitMs = READ_WAIT_MS) {
+  const loops = Math.max(2, Math.ceil(waitMs / READ_POLL_MS) + 1);
+  let prev = null;
+  let prevOther = null;
+  for (let i = 0; i < loops; i++) {
+    const cur = snap(io);
+    if (cur && boxIsFor(cur.box, toolName, fingerprint2)) {
+      prevOther = null;
+      const labels = cur.box.options.map((o) => o.label);
+      const key = JSON.stringify([cur.id, labels]);
+      if (key === prev) return { labels, box: cur.id };
+      prev = key;
+    } else {
+      prev = null;
+      if (cur && prevOther === cur.id) return null;
+      prevOther = cur ? cur.id : null;
+    }
+    if (i < loops - 1) await io.sleep(READ_POLL_MS);
+  }
+  return null;
+}
+var KEY_GAP_MS = 120;
+var CONFIRM_MS2 = 3e3;
+var SETTLE_MS2 = 300;
+async function waitUntil2(io, ok, ms = CONFIRM_MS2) {
+  const loops = Math.max(1, Math.ceil(ms / 150));
+  for (let i = 0; i < loops; i++) {
+    if (ok()) return true;
+    await io.sleep(150);
+  }
+  return ok();
+}
+var dropAnswerKeys = (s2) => /[\r\n]/.test(s2) || /^[0-9]+$/.test(s2);
+async function pressQoderOption(io, toolName, fingerprint2, labels, n, boxId) {
+  if (!Number.isInteger(n) || n < 1 || n > labels.length) return "not_waiting";
+  const box = () => {
+    const c = snap(io);
+    return c && c.id === boxId && boxIsFor(c.box, toolName, fingerprint2) && sameLabels(c.box, labels) ? c.box : null;
+  };
+  if (!box()) return "not_waiting";
+  await io.sleep(SETTLE_MS2);
+  const b0 = box();
+  if (!b0) return "not_waiting";
+  const from = b0.options.findIndex((o) => o.selected) + 1;
+  if (from < 1) return "not_waiting";
+  io.hold?.(true);
+  let drop;
+  try {
+    const delta = n - from;
+    const key = delta > 0 ? KEY_DOWN : KEY_UP;
+    const back = delta > 0 ? KEY_UP : KEY_DOWN;
+    let moved = 0;
+    for (let i = 0; i < Math.abs(delta); i++) {
+      io.write(key);
+      moved++;
+      await io.sleep(KEY_GAP_MS);
+    }
+    const onTarget = await waitUntil2(io, () => box()?.options[n - 1].selected === true);
+    if (!onTarget) {
+      if (moved === 0) return "not_waiting";
+      for (let i = 0; i < moved; i++) {
+        io.write(back);
+        await io.sleep(KEY_GAP_MS);
+      }
+      return await waitUntil2(io, () => box()?.options[from - 1].selected === true) ? "restored" : "cursor_moved";
+    }
+    io.write(KEY_ENTER);
+    if (!await waitUntil2(io, () => !box())) return "unconfirmed";
+    drop = dropAnswerKeys;
+    return "done";
+  } finally {
+    io.hold?.(false, drop);
+  }
+}
+async function applyQoderAnswer(req, io) {
+  const a = req.answer;
+  if (a.kind !== "qoder-read" && a.kind !== "qoder-key") return null;
+  const id = req.instructionId;
+  if (req.expireAt > 0 && Date.now() > req.expireAt) return { instructionId: id, status: "rejected", reason: "expired" };
+  if (!io.screen()) return { instructionId: id, status: "rejected", reason: "no_screen" };
+  if (a.kind === "qoder-read") {
+    const r2 = await readQoderBox(io, a.toolName, a.fingerprint ?? "");
+    return r2 ? { instructionId: id, status: "started", mode: "window", options: r2.labels, box: r2.box } : { instructionId: id, status: "rejected", reason: "not_waiting" };
+  }
+  let r;
+  try {
+    r = await pressQoderOption(io, a.toolName, a.fingerprint ?? "", a.labels, a.n, a.box);
+  } catch {
+    r = "unconfirmed";
+  }
+  if (r === "done") return { instructionId: id, status: "started", mode: "window" };
+  if (r === "not_waiting" || r === "restored" || r === "cursor_moved") return { instructionId: id, status: "rejected", reason: r };
+  return { instructionId: id, status: "failed", mode: "window", reason: "unconfirmed" };
+}
+
 // src/daemon/gate/coordinator.ts
 var REMEMBER_TOOLS = /* @__PURE__ */ new Set([
   "claude_code",
@@ -2620,7 +3202,7 @@ var REMEMBER_SCOPE = {
 };
 function rememberScopeOf(tool, ui) {
   if (tool === "claude_code") return "all";
-  if (tool === "qoder_cn" && ui === "tui") return "local";
+  if ((tool === "qoder_cn" || tool === "qoder") && ui === "tui") return "local";
   return "session";
 }
 function pickRememberSuggestion(suggestions, opts = {}) {
@@ -2685,12 +3267,14 @@ function rememberUpdatesOf(rec) {
 function windowOptions(tool, toolName, hook, viaGate, host = {}) {
   const ui = host.ui;
   if (!viaGate && hook.deskbuddy_options !== void 0)
-    return checkOptions(hook.deskbuddy_options, tool === "workbuddy" ? { anyKinds: true, unbounded: true } : {});
+    return checkOptions(hook.deskbuddy_options, tool === "workbuddy" ? { anyKinds: true } : {});
   if (tool === "claude_code")
     return claudeOptions(toolName, hook.permission_suggestions, { autoModeAllowed: host.ccAutoMode === "on", permissionMode: hook.permission_mode });
   if (tool === "opencode") return opencodeOptions(hook.oc_permission, hook.oc_always, hook.oc_child);
-  if (tool === "qoder_cn" && ui === "tui") return qoderCnTuiOptions(toolName, hook.tool_input, hook.permission_suggestions);
-  if (tool === "qoder_cn" && ui === "gui") return qoderCnGuiOptions(hook.permission_suggestions, host.lang);
+  const isQoder = tool === "qoder_cn" || tool === "qoder";
+  if (isQoder && ui === "tui") return qoderCnTuiOptions(toolName, hook.tool_input, hook.permission_suggestions);
+  if (isQoder && ui === "gui") return qoderCnGuiOptions(hook.permission_suggestions, host.lang);
+  if (tool === "qwenwork" && !viaGate) return qwenworkOptions(toolName, host.lang);
   if (tool === "workbuddy" && hook.deskbuddy_cb_product !== void 0)
     return codebuddyOptions(toolName, hook.tool_input, hook.deskbuddy_cb_product, { truncated: hook.deskbuddy_cb_truncated === true, sandbox: hook.deskbuddy_cb_box === "sandbox" });
   return null;
@@ -2930,7 +3514,33 @@ var ApprovalCoordinator = class {
     const cardSummary = ownSummary || summary2;
     const inProject = kind === "edit" && !qv && !trust && !!cwd && editInProject(toolName, hook.tool_input, cwdForms(cwd), { real: realpathNearest });
     const remember = qv || trust ? null : tool === "codex" ? codexRemember(hook.deskbuddy_remember) : REMEMBER_TOOLS.has(tool) ? pickRememberSuggestion(hook.permission_suggestions, { edit: EDIT_TOOLS2.has(toolName) || kind === "edit", scope: rememberScopeOf(tool, host.ui) }) : null;
-    const optSet = qv || trust ? null : windowOptions(tool, toolName, hook, viaGate, host);
+    let appSet = null;
+    const appByInput = !(typeof hook.tool_use_id === "string" && hook.tool_use_id);
+    const twin = appByInput && this.#d.store.pendingForSession(sessionId).some((r) => r.mode === "window" && r.fingerprint === fingerprint(toolName, hook.tool_input));
+    if (!qv && !trust && !twin && viaGate && (tool === "qoder_cn" || tool === "qoder") && host.ui !== "tui" && this.#d.qoderApp) {
+      appSet = await this.#d.qoderApp.options(tool, hook, signal).catch(() => null);
+      if (signal.aborted) return none;
+    }
+    let optSet = qv || trust ? null : appSet ?? windowOptions(tool, toolName, hook, viaGate, host);
+    let screenBox;
+    const sameToolPending = this.#d.store.pending().some((r) => r.mode === "window" && r.sessionId === sessionId && this.#windows.get(r.approvalId)?.toolName === toolName);
+    if (!qv && !trust && tool === "qoder_cn" && host.ui === "tui" && this.#d.qoderScreen && !sameToolPending) {
+      const fp = qoderBoxFingerprint(toolName, hook.tool_input);
+      let got = null;
+      try {
+        got = await this.#d.qoderScreen.read(sessionId, toolName, fp);
+      } catch {
+        got = null;
+      }
+      const taken = !!got && this.#d.store.pending().some((r) => r.mode === "window" && r.sessionId === sessionId && r.screenBox?.box === got?.box);
+      const s2 = got && !taken ? qoderCnScreenOptions(got.labels, optSet) : null;
+      if (s2 && got) {
+        optSet = s2;
+        screenBox = { toolName, fingerprint: fp, labels: got.labels, box: got.box };
+      } else if (taken) this.#d.log(`Qoder \u6388\u6743\u6846\u5B9E\u4F8B ${got?.box} \u5DF2\u5C5E\u4E8E\u522B\u7684\u5F85\u6279\u51C6\u5361\uFF0C\u6309\u5DE5\u5177\u67E5\u8868`);
+      else if (got) this.#d.log(`Qoder \u6388\u6743\u6846\u539F\u6587\u6620\u5C04\u4E0D\u8FC7\u81EA\u68C0\uFF0C\u6309\u5DE5\u5177\u67E5\u8868\uFF1A${got.labels.join(" / ").slice(0, 200)}`);
+      if (signal.aborted) return none;
+    }
     const rec = {
       approvalId: randomUUID(),
       runId: "",
@@ -2945,6 +3555,7 @@ var ApprovalCoordinator = class {
       createdAt: this.#now(),
       ...remember ? { remember: remember.text, rememberUpdates: remember.updates } : {},
       ...optSet ? { options: optSet.options, optionActions: optSet.actions, ...optSet.pcAllowAmbiguous ? { pcAllowAmbiguous: true } : {} } : {},
+      ...screenBox ? { screenBox } : {},
       ...inProject ? { inProject: true } : {},
       ...qv ? (() => {
         const context = lastAssistantText(hook.transcript_path);
@@ -3299,6 +3910,10 @@ var ApprovalCoordinator = class {
       }
       rec.optionId = optionId;
     }
+    if (action?.screenKey !== void 0 && decision === "allow" && rec.mode === "window") {
+      this.#pressScreenKey(rec, action.screenKey, deviceName, remembered);
+      return;
+    }
     const updates = optionId === void 0 ? rememberUpdatesOf(rec) : null;
     const always = optionId === void 0 && decision === "allow_always" && rec.mode === "window" && updates !== null;
     if (always) remembered = true;
@@ -3327,7 +3942,20 @@ var ApprovalCoordinator = class {
         };
         if (decision === "allow") {
           const perms = action ? action.updatedPermissions : always && updates ? updates : void 0;
-          waiter({ decision: "allow", notice, ...perms && perms.length > 0 ? { updatedPermissions: perms } : {}, ...opt });
+          const reply = {
+            decision: "allow",
+            notice,
+            ...perms && perms.length > 0 ? { updatedPermissions: perms } : {},
+            ...action?.updatedInput ? { updatedInput: action.updatedInput } : {},
+            ...opt
+          };
+          const viaApp = action?.qoderApp;
+          if (viaApp && this.#d.qoderApp) {
+            void this.#d.qoderApp.respond(rec.tool, rec.sessionId, viaApp.toolUseId, viaApp.permissionSuggestionId).catch(() => "failed").then((r) => {
+              this.#d.log(`\u7A97\u53E3\u6388\u6743 ${approvalId} \u5207\u6A21\u5F0F\u5EFA\u8BAE\u7ECF App \u56DE\u7B54\uFF1A${r}`);
+              waiter(r === "failed" ? reply : { decision: "none" });
+            });
+          } else waiter(reply);
         } else {
           waiter({
             decision: "deny",
@@ -3358,6 +3986,48 @@ var ApprovalCoordinator = class {
     if (decision === "allow") this.#d.resume(rec, "orphan");
   }
   /** 窗口待批准按「不表态」收掉：本地作废、放掉挂着的 hook（回 none，框留给电脑前的人）。服务端那条已有结果，不撤 */
+  /**
+   * 设备选了只能写键的屏幕选项（spec 2026-10-09 qodercn-tui-screen-options §4.3）：
+   * 先把记录标成已决定、取走 waiter（重复下发 / 撤卡扫描都碰不到它），再经窗口通道写键；不管成败 hook 都回 none。
+   * 写不成（框变了 / 电脑上已处理 / hook 已不在）→ 一个键不写，电脑上的框照旧等人，记录改 cancelled
+   */
+  #pressScreenKey(rec, n, deviceName, remembered) {
+    rec.status = "approved";
+    rec.decidedAt = this.#now();
+    rec.consumed = true;
+    this.#windows.delete(rec.approvalId);
+    const waiter = this.#waiters.get(rec.approvalId);
+    this.#waiters.delete(rec.approvalId);
+    const box = rec.screenBox;
+    const qs = this.#d.qoderScreen;
+    const fail = (why) => {
+      rec.status = "cancelled";
+      this.#d.store.save();
+      this.#d.log(`\u7A97\u53E3\u6388\u6743 ${rec.approvalId} \u8BBE\u5907\u9009\u4E86\u7B2C ${n} \u9879\uFF0C${why}\uFF1A\u6CA1\u6709\u56DE\u8F66\uFF0C\u7535\u8111\u4E0A\u7167\u65E7\u7B49\u4EBA\u5904\u7406`);
+      void this.#cancelRemote(rec.approvalId, "\u8BBE\u5907\u4E0A\u7684\u9009\u62E9\u672A\u751F\u6548\uFF0C\u8BF7\u5230\u7535\u8111\u4E0A\u5904\u7406");
+    };
+    this.#d.store.save();
+    if (!waiter || !box || !qs) {
+      fail(!waiter ? "hook \u5DF2\u4E0D\u5728" : "\u6CA1\u6709\u8BFB\u5C4F\u8BB0\u5F55");
+      waiter?.({ decision: "none" });
+      return;
+    }
+    void qs.press(rec.sessionId, box, n).catch(() => "uncertain").then((r) => {
+      if (r === "done") {
+        this.#d.log(`\u7A97\u53E3\u6388\u6743 ${rec.approvalId} \u8BBE\u5907\u9009\u4E86\u7B2C ${n} \u9879\uFF0C\u5DF2\u5199\u952E\u4F5C\u7B54`);
+        try {
+          ;
+          (this.#d.writeNotice ?? writeNotice)(rec.sessionId, windowNotice("allow", rec.summary, deviceName) + (remembered ? "\uFF08\u5DF2\u8BB0\u4F4F\uFF09" : ""));
+        } catch {
+        }
+      } else if (r === "not_written") fail("\u5C4F\u4E0A\u5DF2\u4E0D\u662F\u540C\u4E00\u4E2A\u6388\u6743\u6846");
+      else {
+        this.#d.log(`\u7A97\u53E3\u6388\u6743 ${rec.approvalId} \u8BBE\u5907\u9009\u4E86\u7B2C ${n} \u9879\uFF0C\u5DF2\u5199\u56DE\u8F66\u4F46\u6CA1\u786E\u8BA4\u6846\u5173\u95ED\uFF0C\u7ED3\u679C\u672A\u786E\u8BA4`);
+        void this.#cancelRemote(rec.approvalId, "\u8BBE\u5907\u4E0A\u7684\u9009\u62E9\u53EF\u80FD\u672A\u751F\u6548\uFF0C\u8BF7\u5230\u7535\u8111\u4E0A\u786E\u8BA4");
+      }
+      waiter({ decision: "none" });
+    });
+  }
   #dropWindow(rec) {
     rec.status = "cancelled";
     rec.decidedAt = this.#now();
@@ -3547,7 +4217,7 @@ function realpathNearest(p) {
     }
     const parent = dirname2(cur);
     if (parent === cur) return "";
-    tail3.push(basename4(cur));
+    tail3.push(basename5(cur));
     cur = parent;
   }
   return "";
@@ -3906,8 +4576,8 @@ var SeenIds = class _SeenIds {
 
 // src/daemon/qwenworkBridge.ts
 import { closeSync as closeSync4, openSync as openSync4, readdirSync as readdirSync8, readFileSync as readFileSync9, readSync as readSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { basename as basename5, dirname as dirname3, join as join15, resolve as resolve3 } from "path";
+import { homedir as homedir4 } from "os";
+import { basename as basename6, dirname as dirname3, join as join16, resolve as resolve3 } from "path";
 
 // src/daemon/dumateWatch.ts
 import { execFileSync as execFileSync5, spawn as spawn2 } from "child_process";
@@ -4759,40 +5429,192 @@ var DumateWatch = class {
       this.#reconciling = false;
     }
   }
-};
-function runHook(node, input, agentPid) {
+};
+function runHook(node, input, agentPid) {
+  return new Promise((resolve10) => {
+    let child;
+    try {
+      child = spawn2(node, [installedHookPath(), "dumate"], {
+        stdio: ["pipe", "ignore", "ignore"],
+        env: { ...process.env, DESKBUDDY_AGENT_PID: String(agentPid) }
+      });
+    } catch {
+      resolve10();
+      return;
+    }
+    const timer = setTimeout(() => child.kill("SIGKILL"), HOOK_KILL_MS);
+    timer.unref?.();
+    child.on("error", () => {
+      clearTimeout(timer);
+      resolve10();
+    });
+    child.on("close", () => {
+      clearTimeout(timer);
+      resolve10();
+    });
+    child.stdin.on("error", () => {
+    });
+    child.stdin.end(JSON.stringify(input));
+  });
+}
+
+// src/daemon/qwenworkLang.ts
+import { execFile as execFile2 } from "child_process";
+import { open } from "fs/promises";
+import { homedir as homedir3 } from "os";
+import { join as join15 } from "path";
+var DATA_DIR = "QwenWorkCN";
+var MAX_SCAN = 16 * 1024 * 1024;
+var LANG_RE = /(?<![A-Za-z0-9_:.-])language"(zh-TW|zh|en)"/g;
+var CACHE_MS = 30 * 1e3;
+function qwenworkUserDataDir() {
+  const forced = process.env.DESKBUDDY_QWENWORK_DATA;
+  if (forced) return forced;
+  if (process.platform === "darwin") return join15(homedir3(), "Library", "Application Support", DATA_DIR);
+  if (process.platform === "win32") return join15(process.env.APPDATA?.trim() || join15(homedir3(), "AppData", "Roaming"), DATA_DIR);
+  return join15(process.env.XDG_CONFIG_HOME?.trim() || join15(homedir3(), ".config"), DATA_DIR);
+}
+async function readAll(p) {
+  let fh;
+  try {
+    fh = await open(p, "r");
+  } catch (e) {
+    return e?.code === "ENOENT" ? "missing" : "error";
+  }
+  try {
+    const size = (await fh.stat()).size;
+    if (size > MAX_SCAN) return "error";
+    const buf = Buffer.alloc(size);
+    let off = 0;
+    while (off < size) {
+      const { bytesRead } = await fh.read(buf, off, size - off, off);
+      if (bytesRead <= 0) break;
+      off += bytesRead;
+    }
+    return buf.subarray(0, off);
+  } catch {
+    return "error";
+  } finally {
+    await fh.close().catch(() => {
+    });
+  }
+}
+function matches(buf) {
+  const out = [];
+  const s2 = buf.toString("latin1");
+  LANG_RE.lastIndex = 0;
+  let m;
+  while (m = LANG_RE.exec(s2)) out.push(m[1]);
+  return out;
+}
+function varint(b, at) {
+  let v = 0;
+  for (let i = 0; i < 9; i++) {
+    if (at + i >= b.length) return null;
+    const c = b[at + i];
+    if (i === 8) return [v * 256 + c, at + 9];
+    v = v * 128 + (c & 127);
+    if (!(c & 128)) return [v, at + i + 1];
+  }
+  return null;
+}
+function pageLangs(page, first = false) {
+  const h = first ? 100 : 0;
+  if (page.length < h + 8 || page[h] !== 13) return [];
+  const n = page.readUInt16BE(h + 3);
+  const out = [];
+  for (let i = 0; i < n; i++) {
+    const p = h + 8 + 2 * i;
+    if (p + 2 > page.length) break;
+    const cell = page.readUInt16BE(p);
+    if (cell < h + 8 || cell >= page.length) continue;
+    const len = varint(page, cell);
+    const rowid = len ? varint(page, len[1]) : null;
+    if (!len || !rowid) continue;
+    out.push(...matches(page.subarray(rowid[1], Math.min(page.length, rowid[1] + Math.min(len[0], 256)))));
+  }
+  return out;
+}
+function langFromWal(wal) {
+  if (!wal || wal.length < 32) return "";
+  const magic = wal.readUInt32BE(0);
+  if (magic !== 931071618 && magic !== 931071619) return "";
+  const pageSize = wal.readUInt32BE(8);
+  if (pageSize < 512 || pageSize > 65536) return "";
+  const salt1 = wal.readUInt32BE(16);
+  const salt2 = wal.readUInt32BE(20);
+  let last = "";
+  for (let off = 32; off + 24 + pageSize <= wal.length; off += 24 + pageSize) {
+    if (wal.readUInt32BE(off + 8) !== salt1 || wal.readUInt32BE(off + 12) !== salt2) break;
+    const found = pageLangs(wal.subarray(off + 24, off + 24 + pageSize), wal.readUInt32BE(off) === 1);
+    if (found.length > 0) last = found[found.length - 1];
+  }
+  return last;
+}
+function langFromDb(db) {
+  if (db && db.length === 0) return "";
+  if (!db || db.length < 100 || db.toString("latin1", 0, 16) !== "SQLite format 3\0") return "invalid";
+  const raw = db.readUInt16BE(16);
+  const pageSize = raw === 1 ? 65536 : raw;
+  if (pageSize < 512 || pageSize > 65536 || (pageSize & pageSize - 1) !== 0) return "invalid";
+  const set = /* @__PURE__ */ new Set();
+  for (let off = 0; off + pageSize <= db.length; off += pageSize) for (const v of pageLangs(db.subarray(off, off + pageSize), off === 0)) set.add(v);
+  if (set.size === 1) return [...set][0];
+  return set.size > 1 ? "ambiguous" : "";
+}
+function systemLang() {
   return new Promise((resolve10) => {
-    let child;
-    try {
-      child = spawn2(node, [installedHookPath(), "dumate"], {
-        stdio: ["pipe", "ignore", "ignore"],
-        env: { ...process.env, DESKBUDDY_AGENT_PID: String(agentPid) }
+    const done = (first) => resolve10(!first ? "" : first.toLowerCase().startsWith("zh") ? "zh" : "en");
+    if (process.platform === "darwin") {
+      execFile2("defaults", ["read", "-g", "AppleLanguages"], { encoding: "utf8", timeout: 3e3 }, (err, out) => {
+        if (err) return done("");
+        const m = /"?([A-Za-z]{2,3}(?:[-_][A-Za-z0-9]+)*)"?/.exec(out);
+        done(m ? m[1] : "");
       });
-    } catch {
-      resolve10();
       return;
     }
-    const timer = setTimeout(() => child.kill("SIGKILL"), HOOK_KILL_MS);
-    timer.unref?.();
-    child.on("error", () => {
-      clearTimeout(timer);
-      resolve10();
-    });
-    child.on("close", () => {
-      clearTimeout(timer);
-      resolve10();
-    });
-    child.stdin.on("error", () => {
-    });
-    child.stdin.end(JSON.stringify(input));
+    try {
+      done(Intl.DateTimeFormat().resolvedOptions().locale || "");
+    } catch {
+      done("");
+    }
   });
 }
+async function qwenworkLang(deps2 = {}) {
+  const dir3 = (deps2.dataDir ?? qwenworkUserDataDir)();
+  const read = deps2.readFile ?? readAll;
+  const db = join15(dir3, "data", "agents.db");
+  const wal = await read(`${db}-wal`);
+  if (wal === "error") return "";
+  if (wal !== "missing") {
+    const fromWal = langFromWal(wal);
+    if (fromWal) return fromWal;
+  }
+  const main2 = await read(db);
+  if (main2 === "error") return "";
+  if (main2 !== "missing") {
+    const fromDb = langFromDb(main2);
+    if (fromDb === "ambiguous" || fromDb === "invalid") return "";
+    if (fromDb) return fromDb;
+  }
+  if (process.env.DESKBUDDY_QWENWORK_DATA && !deps2.systemLang) return "";
+  return (deps2.systemLang ?? systemLang)();
+}
+function cachedQwenworkLang(now = Date.now) {
+  let hit = null;
+  return async () => {
+    if (hit && now() - hit.at < CACHE_MS) return hit.v;
+    const v = await qwenworkLang();
+    hit = { at: now(), v };
+    return v;
+  };
+}
 
 // src/daemon/qwenworkBridge.ts
 var SUBMIT_TOOL = "qwenwork_task_submit_response";
 var DETAIL_TOOL = "qwenwork_task_get_detail";
 var SEND_TOOL = "qwenwork_task_send_message";
-var POLL_MS = 2e3;
+var POLL_MS2 = 2e3;
 var REQUEST_TIMEOUT_MS2 = 5e3;
 var EARLY_WINDOW_MS = 10 * 1e3;
 var EARLY_RETRY_MS = 1e3;
@@ -4852,12 +5674,12 @@ function chatIdOf(cwd, root) {
   if (typeof cwd !== "string" || !cwd) return null;
   const dir3 = resolve3(cwd);
   if (!sameDir(dirname3(dir3), resolve3(root))) return null;
-  const id = basename5(dir3);
+  const id = basename6(dir3);
   return /^[A-Za-z0-9_-]{1,64}$/.test(id) ? id : null;
 }
 function transcriptCwdOf(sessionId, home = qwenworkHome()) {
   if (!/^[A-Za-z0-9_-]{1,128}$/.test(sessionId)) return null;
-  const base = join15(home, "projects");
+  const base = join16(home, "projects");
   let dirs;
   try {
     dirs = readdirSync8(base);
@@ -4867,7 +5689,7 @@ function transcriptCwdOf(sessionId, home = qwenworkHome()) {
   for (const d of dirs) {
     let fd;
     try {
-      fd = openSync4(join15(base, d, `${sessionId}.jsonl`), "r");
+      fd = openSync4(join16(base, d, `${sessionId}.jsonl`), "r");
     } catch {
       continue;
     }
@@ -5034,6 +5856,7 @@ var QwenWorkMcp = class {
 var QwenWorkBridge = class {
   #d;
   #mcp;
+  #lang;
   /** chatId → 正在等设备的那张卡（同一 chatId 同时只推一张） */
   #cards = /* @__PURE__ */ new Map();
   /** 推过的 (chatId, toolUseId) → 时间：同一道题 / 同一个授权框只推一次 */
@@ -5045,9 +5868,10 @@ var QwenWorkBridge = class {
   #stopped = false;
   constructor(deps2) {
     this.#d = deps2;
-    const read = deps2.readConfig ?? (() => readConfigFile(join15(qwenworkHome(), "mcp-adaptor.config")));
+    const read = deps2.readConfig ?? (() => readConfigFile(join16(qwenworkHome(), "mcp-adaptor.config")));
     const f = deps2.fetch ?? globalThis.fetch;
     this.#mcp = new QwenWorkMcp(read, f, deps2.log);
+    this.#lang = deps2.lang ?? cachedQwenworkLang();
   }
   #now() {
     return this.#d.now ? this.#d.now() : Date.now();
@@ -5064,7 +5888,7 @@ var QwenWorkBridge = class {
   async reply(cwd, text, sessionId = "") {
     const notSent = (reason, message) => ({ status: "not_sent", reason, message });
     if (this.#d.enabled && !this.#d.enabled()) return notSent("tool_unsupported", "\u5343\u95EE\u529E\u516C\u6CA1\u6709\u63A5\u5165");
-    const root = this.#d.workspaceRoot ?? join15(homedir3(), ".qwenworkcn", "workspace");
+    const root = this.#d.workspaceRoot ?? join16(homedir4(), ".qwenworkcn", "workspace");
     let dir3 = typeof cwd === "string" ? cwd : "";
     if (!dir3 && sessionId) dir3 = (this.#d.transcriptCwd ?? transcriptCwdOf)(sessionId) ?? "";
     if (!dir3) return notSent("session_gone", "\u7535\u8111\u4E0A\u627E\u4E0D\u5230\u8FD9\u4E2A\u4F1A\u8BDD\u7684\u8BB0\u5F55");
@@ -5117,7 +5941,7 @@ var QwenWorkBridge = class {
       toolUseId = typeof det.toolUseId === "string" ? det.toolUseId : "";
       if (!toolName) return;
     } else return;
-    const root = this.#d.workspaceRoot ?? join15(homedir3(), ".qwenworkcn", "workspace");
+    const root = this.#d.workspaceRoot ?? join16(homedir4(), ".qwenworkcn", "workspace");
     const chatId = chatIdOf(h.cwd, root);
     if (!chatId) {
       this.#d.log("\u5343\u95EE\u529E\u516C\uFF1A\u8FD9\u9053\u9898 / \u6388\u6743\u4E0D\u5728\u4EFB\u52A1\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF08\u53EF\u80FD\u662F\u5B50\u4EE3\u7406\uFF09\uFF0C\u4E0D\u63A8\u8BBE\u5907");
@@ -5135,6 +5959,14 @@ var QwenWorkBridge = class {
     if (this.#seen.has(key)) return;
     this.#seen.set(key, this.#now());
     this.#replaceOld(chatId, toolUseId);
+    let lang = "";
+    if (kind === "permission") {
+      try {
+        lang = await this.#lang();
+      } catch {
+        lang = "";
+      }
+    }
     const e = await this.#mcp.ensure();
     if (!e.ok) {
       if (e.why !== "unsupported") this.#d.log(`\u5343\u95EE\u529E\u516C\uFF1A${e.message}\uFF0C\u8FD9\u4E00\u6761\u4E0D\u63A8\u8BBE\u5907`);
@@ -5148,6 +5980,7 @@ var QwenWorkBridge = class {
     const gateReq = {
       window: true,
       tool: "qwenwork",
+      ...lang ? { lang } : {},
       hook: {
         hook_event_name: "PermissionRequest",
         session_id: sessionId,
@@ -5240,7 +6073,7 @@ var QwenWorkBridge = class {
   }
   #ensurePoll() {
     if (this.#timer || this.#stopped) return;
-    this.#timer = setInterval(() => void this.poll(), this.#d.pollMs ?? POLL_MS);
+    this.#timer = setInterval(() => void this.poll(), this.#d.pollMs ?? POLL_MS2);
     this.#timer.unref?.();
   }
   /**
@@ -5341,21 +6174,21 @@ function sleep(ms) {
 }
 
 // src/daemon/workbuddyApp/keeper.ts
-import { execFile as execFile3, spawn as spawn3 } from "child_process";
+import { execFile as execFile4, spawn as spawn3 } from "child_process";
 import { existsSync as existsSync8, mkdirSync as mkdirSync13, readdirSync as readdirSync10, readFileSync as readFileSync12, renameSync as renameSync8, writeFileSync as writeFileSync12 } from "fs";
-import { delimiter, join as join18, resolve as resolve4 } from "path";
+import { delimiter, join as join19, resolve as resolve4 } from "path";
 
 // src/daemon/workbuddyAppDb.ts
-import { execFile as execFile2 } from "child_process";
+import { execFile as execFile3 } from "child_process";
 import { closeSync as closeSync6, existsSync as existsSync7, mkdirSync as mkdirSync12, openSync as openSync6, readdirSync as readdirSync9, readFileSync as readFileSync11, readSync as readSync5, renameSync as renameSync7, rmSync as rmSync8, statSync as statSync7, writeFileSync as writeFileSync11 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { basename as basename7, dirname as dirname5, isAbsolute as isAbsolute3, join as join17 } from "path";
+import { basename as basename8, dirname as dirname5, isAbsolute as isAbsolute3, join as join18 } from "path";
 
 // src/core/title.ts
 import { closeSync as closeSync5, existsSync as existsSync6, openSync as openSync5, readFileSync as readFileSync10, readSync as readSync4, statSync as statSync6 } from "fs";
 import { createRequire } from "module";
-import { homedir as homedir4 } from "os";
-import { basename as basename6, dirname as dirname4, isAbsolute as isAbsolute2, join as join16 } from "path";
+import { homedir as homedir5 } from "os";
+import { basename as basename7, dirname as dirname4, isAbsolute as isAbsolute2, join as join17 } from "path";
 var TRANSCRIPT_TAIL_BYTES = 64 * 1024;
 var SESSION_TITLE_MAX = 100;
 function cleanTitle(text) {
@@ -5366,14 +6199,14 @@ function cleanTitle(text) {
 var requireHere = createRequire(import.meta.url);
 var QODER_DATA_DIRS = { qoder_cn: "com.qodercn.app.stable", qoder: "com.qoder.app.stable" };
 var QODER_APP_DIR_ENV = { qoder_cn: "DESKBUDDY_QODER_CN_APP_DIR", qoder: "DESKBUDDY_QODER_APP_DIR" };
-function qoderDbPaths(tool, platform = process.platform, home = homedir4(), env = process.env) {
+function qoderDbPaths(tool, platform = process.platform, home = homedir5(), env = process.env) {
   let root;
-  if (platform === "darwin") root = join16(home, "Library", "Application Support");
-  else if (platform === "win32") root = env.APPDATA || join16(home, "AppData", "Roaming");
-  else root = env.XDG_CONFIG_HOME || join16(home, ".config");
+  if (platform === "darwin") root = join17(home, "Library", "Application Support");
+  else if (platform === "win32") root = env.APPDATA || join17(home, "AppData", "Roaming");
+  else root = env.XDG_CONFIG_HOME || join17(home, ".config");
   const one = tool ? QODER_DATA_DIRS[tool] : void 0;
   const tools = one ? [tool] : ["qoder_cn", "qoder"];
-  return tools.map((t) => join16(env[QODER_APP_DIR_ENV[t] ?? ""] || join16(root, QODER_DATA_DIRS[t] ?? ""), "main.sqlite"));
+  return tools.map((t) => join17(env[QODER_APP_DIR_ENV[t] ?? ""] || join17(root, QODER_DATA_DIRS[t] ?? ""), "main.sqlite"));
 }
 
 // src/daemon/workbuddyAppDb.ts
@@ -5439,12 +6272,12 @@ function findWbTranscript(configDir, sessionId) {
   if (!SESSION_UUID_RE.test(sessionId)) return null;
   let dirs;
   try {
-    dirs = readdirSync9(join17(configDir, "projects"));
+    dirs = readdirSync9(join18(configDir, "projects"));
   } catch {
     return null;
   }
   for (const d of dirs) {
-    const p = join17(configDir, "projects", d, `${sessionId}.jsonl`);
+    const p = join18(configDir, "projects", d, `${sessionId}.jsonl`);
     if (existsSync7(p)) return p;
   }
   return null;
@@ -5530,8 +6363,8 @@ function wbElectronCandidates(appCliPath) {
   const m = /^(.*?)[\\/]resources[\\/]app\.asar\.unpacked[\\/]/i.exec(appCliPath);
   if (!m) return [];
   const root = m[1];
-  if (/\.app[\\/]Contents$/.test(root)) return [join17(root, "MacOS", "Electron"), join17(root, "MacOS", "WorkBuddy")];
-  return [join17(root, "WorkBuddy.exe")];
+  if (/\.app[\\/]Contents$/.test(root)) return [join18(root, "MacOS", "Electron"), join18(root, "MacOS", "WorkBuddy")];
+  return [join18(root, "WorkBuddy.exe")];
 }
 function defaultWbElectron(d = defaultLocateDeps()) {
   if ((d.platform ?? process.platform) === "win32") return null;
@@ -5550,14 +6383,14 @@ function defaultAppRunning(platform = process.platform) {
   return new Promise((resolve10) => {
     try {
       if (platform === "darwin") {
-        execFile2("pgrep", ["-f", "WorkBuddy.app/Contents/MacOS/"], { timeout: 5e3 }, (err) => {
+        execFile3("pgrep", ["-f", "WorkBuddy.app/Contents/MacOS/"], { timeout: 5e3 }, (err) => {
           const code = err?.code;
           resolve10(!err ? true : code === 1 ? false : true);
         });
         return;
       }
       if (platform === "win32") {
-        execFile2(
+        execFile3(
           "tasklist",
           ["/FI", "IMAGENAME eq WorkBuddy.exe", "/FO", "CSV", "/NH"],
           { timeout: 1e4, windowsHide: true, encoding: "utf8" },
@@ -5574,7 +6407,7 @@ function defaultAppRunning(platform = process.platform) {
 var PENDING_MAX = 20;
 var PENDING_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 function pendingPath() {
-  return join17(deskbuddyHome(), "workbuddy-pending.json");
+  return join18(deskbuddyHome(), "workbuddy-pending.json");
 }
 function loadPendingFile() {
   try {
@@ -5604,7 +6437,7 @@ var defaultWbAppDbDeps = () => ({
   electron: () => defaultWbElectron(),
   runElectron: (bin, script, input) => new Promise((resolve10, reject) => {
     const env = { ...process.env, ELECTRON_RUN_AS_NODE: "1" };
-    const c = execFile2(
+    const c = execFile3(
       bin,
       ["-e", script],
       { env, timeout: 15e3, windowsHide: true, maxBuffer: 1024 * 1024 },
@@ -5702,7 +6535,7 @@ async function registerNow(job, d) {
     const tp = findWbTranscript(d.configDir(), job.sessionId);
     if (!tp) return "skip no_transcript";
     const info = wbTranscriptInfo(tp);
-    const title = info.title || cleanTitle(job.fallbackTitle ?? "") || basename7(job.cwd) || job.cwd;
+    const title = info.title || cleanTitle(job.fallbackTitle ?? "") || basename8(job.cwd) || job.cwd;
     const r = await runDb({ db, sessionId: job.sessionId, cwd: job.cwd, title, createdAt: info.createdAt, updatedAt: info.updatedAt }, d);
     if (r === "no_sqlite") return "skip no_sqlite";
     if (r.status === "schema") return `skip schema ${r.detail ?? ""}`.trim();
@@ -5744,7 +6577,7 @@ function loopbackWsUrl(wsUrl, port) {
 async function connectCdp(port, d = {}) {
   const fetchJson = d.fetchJson ?? defaultFetchJson;
   const target = pickMainTarget(await fetchJson(`http://127.0.0.1:${port}/json/list`, 3e3));
-  if (!target?.webSocketDebuggerUrl) throw new Error("\u627E\u4E0D\u5230 WorkBuddy \u4E3B\u7A97\u53E3");
+  if (!target?.webSocketDebuggerUrl) throw new Error("\u627E\u4E0D\u5230 App \u4E3B\u7A97\u53E3");
   const url = loopbackWsUrl(target.webSocketDebuggerUrl, port);
   if (!url) throw new Error("\u4E3B\u7A97\u53E3\u7684\u8C03\u8BD5\u5730\u5740\u4E0D\u5BF9");
   const ws = (d.ws ?? ((u) => new WebSocket(u, { handshakeTimeout: 5e3 })))(url);
@@ -5842,7 +6675,7 @@ var VERIFY_MIN_MS = 30 * 1e3;
 var VERIFY_MAX_MS = 60 * 1e3;
 var VERIFY_STEP_MS = 5 * 1e3;
 var defaultExec2 = (file3, args, timeoutMs = 1e4) => new Promise((done) => {
-  execFile3(file3, args, { timeout: timeoutMs, windowsHide: true, encoding: "utf8", maxBuffer: 8 * 1024 * 1024 }, (err, stdout6) => {
+  execFile4(file3, args, { timeout: timeoutMs, windowsHide: true, encoding: "utf8", maxBuffer: 8 * 1024 * 1024 }, (err, stdout6) => {
     const code = err ? typeof err.code === "number" ? err.code : -1 : 0;
     done({ code, stdout: String(stdout6 ?? "") });
   });
@@ -5892,7 +6725,7 @@ function cleanLaunchEnv(src = process.env, shim = shimDir()) {
 }
 var REMEMBER_EXE_MS = 30 * 60 * 1e3;
 var AWAY_IDLE_MS = 5 * 60 * 1e3;
-var keeperThrottleFile = () => join18(deskbuddyHome(), "wbapp", "keeper.json");
+var keeperThrottleFile = () => join19(deskbuddyHome(), "wbapp", "keeper.json");
 var filePersist = {
   load: () => {
     try {
@@ -5903,7 +6736,7 @@ var filePersist = {
   },
   save: (s2) => {
     try {
-      mkdirSync13(join18(deskbuddyHome(), "wbapp"), { recursive: true });
+      mkdirSync13(join19(deskbuddyHome(), "wbapp"), { recursive: true });
       const f = keeperThrottleFile();
       writeFileSync12(f + ".tmp", JSON.stringify(s2));
       renameSync8(f + ".tmp", f);
@@ -5987,7 +6820,7 @@ function workbuddyBusy(now = Date.now(), dir3 = stateDir(), alive = isAlive) {
   for (const f of readdirSync10(dir3)) {
     if (!f.endsWith(".json")) continue;
     try {
-      const s2 = JSON.parse(readFileSync12(join18(dir3, f), "utf8"));
+      const s2 = JSON.parse(readFileSync12(join19(dir3, f), "utf8"));
       if (s2.tool !== "workbuddy" || s2.state !== "watch" && s2.state !== "ask_approval") continue;
       if (typeof s2.pid === "number" && s2.pid > 0) {
         if (alive(s2.pid, s2.pidName)) return true;
@@ -6610,7 +7443,7 @@ function choicesToSet(choices) {
     options.push({ id, label: c.label, kind, ...c.description ? { description: c.description } : {} });
     actions[id] = { decision: kind === "deny" ? "deny" : "allow", native: c.native ?? { reject: true } };
   });
-  return checkOptions({ options, actions }, { anyKinds: true, unbounded: true });
+  return checkOptions({ options, actions }, { anyKinds: true });
 }
 function asNative(v) {
   if (!v || typeof v !== "object") return null;
@@ -6642,7 +7475,7 @@ var WB_OWN_TEXT = {
 var str3 = (v) => typeof v === "string" ? v.trim() : "";
 function noticeCard(title, lang, why) {
   const O = WB_OWN_TEXT[lang];
-  const set = checkOptions({ options: [{ id: "o0", label: O.noticeButton, kind: "deny" }], actions: { o0: { decision: "deny" } } }, { anyKinds: true, unbounded: true });
+  const set = checkOptions({ options: [{ id: "o0", label: O.noticeButton, kind: "deny" }], actions: { o0: { decision: "deny" } } }, { anyKinds: true });
   return { type: "notice", options: set, summary: `${O.noticePrefix}${title || O.pending}`, why };
 }
 function rawChoices(p, lang) {
@@ -6749,7 +7582,7 @@ function wbCard(p, lang) {
 }
 function fallbackCard(p, lang) {
   const O = WB_OWN_TEXT[lang];
-  const set = checkOptions({ options: [{ id: "o0", label: O.reject, kind: "deny" }], actions: { o0: { decision: "deny", native: { reject: true } } } }, { anyKinds: true, unbounded: true });
+  const set = checkOptions({ options: [{ id: "o0", label: O.reject, kind: "deny" }], actions: { o0: { decision: "deny", native: { reject: true } } } }, { anyKinds: true });
   const tool = str3(p.toolName);
   return { type: "options", options: set, toolName: tool || "WorkBuddy", toolInput: {}, summary: tool ? `${tool} ${O.pending}` : O.pending };
 }
@@ -6990,7 +7823,7 @@ function domOptions(labels, lang) {
     const first = options.find((o) => o.kind !== "deny");
     if (first) first.kind = "allow";
   }
-  return checkOptions({ options, actions }, { anyKinds: true, unbounded: true });
+  return checkOptions({ options, actions }, { anyKinds: true });
 }
 var WorkbuddyAppWatch = class {
   #d;
@@ -7245,25 +8078,25 @@ var WorkbuddyAppWatch = class {
     }
   }
   async #sdkRound() {
-    const snap = await this.#eval(SNAPSHOT);
-    if (!snap || !Array.isArray(snap.sessions)) return;
-    this.#snapshotBusy = snap.busy === true;
+    const snap2 = await this.#eval(SNAPSHOT);
+    if (!snap2 || !Array.isArray(snap2.sessions)) return;
+    this.#snapshotBusy = snap2.busy === true;
     this.#snapshotBusyAt = this.#now();
     const present = /* @__PURE__ */ new Set();
     const current = /* @__PURE__ */ new Map();
-    for (const s2 of snap.sessions) {
+    for (const s2 of snap2.sessions) {
       if (!s2?.id) continue;
       present.add(s2.id);
       if (s2.pending?.id) current.set(s2.id, s2.pending.id);
     }
     this.#withdrawStale(present, current);
     this.#prune();
-    const lang = wbLang(snap.locale);
+    const lang = wbLang(snap2.locale);
     for (const sid of [...this.#missingSince.keys()]) {
-      const sp = snap.sessions.find((x) => x?.id === sid)?.pending;
+      const sp = snap2.sessions.find((x) => x?.id === sid)?.pending;
       if (!sp || sp.category !== "pendingMissing") this.#missingSince.delete(sid);
     }
-    for (const s2 of snap.sessions) {
+    for (const s2 of snap2.sessions) {
       const p = s2?.pending;
       if (!s2?.id || !p?.id) continue;
       const key = `${s2.id}:${p.id}`;
@@ -7273,7 +8106,7 @@ var WorkbuddyAppWatch = class {
         this.#missingSince.set(s2.id, since);
         if (this.#now() - since < MISSING_STABLE_MS) continue;
       }
-      if (!lang) this.#skipLog(`lang:${snap.locale}`, `WorkBuddy \u754C\u9762\u8BED\u8A00 ${snap.locale || "(\u672A\u77E5)"} \u6CA1\u6709\u539F\u6587\u8868\uFF0C\u5F85\u786E\u8BA4\u53EA\u63A8\u63D0\u793A\u5361`);
+      if (!lang) this.#skipLog(`lang:${snap2.locale}`, `WorkBuddy \u754C\u9762\u8BED\u8A00 ${snap2.locale || "(\u672A\u77E5)"} \u6CA1\u6709\u539F\u6587\u8868\uFF0C\u5F85\u786E\u8BA4\u53EA\u63A8\u63D0\u793A\u5361`);
       const c = wbCard(p, lang);
       if (c.type === "notice") {
         this.#skipLog(key, `WorkBuddy \u4F1A\u8BDD ${s2.id.slice(0, 8)} \u7684\u5F85\u786E\u8BA4\uFF08${c.why}\uFF09\u5728\u8BBE\u5907\u4E0A\u53EA\u63A8\u63D0\u793A\u5361`);
@@ -7286,11 +8119,11 @@ var WorkbuddyAppWatch = class {
     }
   }
   async #domRound() {
-    const snap = await this.#eval(DOM_SNAPSHOT);
-    if (!snap) return;
-    const sid = snap.sessionId ?? "";
-    const labels = Array.isArray(snap.card?.labels) ? snap.card.labels.filter((l) => typeof l === "string") : null;
-    const rawText = typeof snap.card?.text === "string" ? snap.card.text.slice(0, 2e3) : "";
+    const snap2 = await this.#eval(DOM_SNAPSHOT);
+    if (!snap2) return;
+    const sid = snap2.sessionId ?? "";
+    const labels = Array.isArray(snap2.card?.labels) ? snap2.card.labels.filter((l) => typeof l === "string") : null;
+    const rawText = typeof snap2.card?.text === "string" ? snap2.card.text.slice(0, 2e3) : "";
     const textNorm = normalizeDomText(rawText);
     const fp = labels ? `dom:${labels.join("|")}::${textNorm}` : "";
     const present = /* @__PURE__ */ new Set();
@@ -7310,9 +8143,9 @@ var WorkbuddyAppWatch = class {
       else this.#domFp.delete(sid);
     }
     if (!sid || !labels) return;
-    const lang = wbLang(snap.locale);
+    const lang = wbLang(snap2.locale);
     if (!lang) {
-      this.#skipLog(`lang:${snap.locale}`, `WorkBuddy \u754C\u9762\u8BED\u8A00 ${snap.locale || "(\u672A\u77E5)"} \u6CA1\u6709\u539F\u6587\u8868\uFF0C\u5F85\u786E\u8BA4\u4E0D\u63A8\u8BBE\u5907`);
+      this.#skipLog(`lang:${snap2.locale}`, `WorkBuddy \u754C\u9762\u8BED\u8A00 ${snap2.locale || "(\u672A\u77E5)"} \u6CA1\u6709\u539F\u6587\u8868\uFF0C\u5F85\u786E\u8BA4\u4E0D\u63A8\u8BBE\u5907`);
       return;
     }
     const key = `${sid}:${fp}`;
@@ -7463,8 +8296,8 @@ function isQoderDesktopPid(pidName) {
 
 // src/daemon/qoderApp/keeper.ts
 import { existsSync as existsSync9, mkdirSync as mkdirSync14, readdirSync as readdirSync11, readFileSync as readFileSync13, renameSync as renameSync9, writeFileSync as writeFileSync13 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join19 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join20 } from "path";
 var WAKE_LAUNCH_GAP_MS2 = 60 * 1e3;
 var RESTART_GAP_MS2 = 30 * 60 * 1e3;
 var RESTART_DAILY_MAX2 = 3;
@@ -7503,7 +8336,7 @@ function toolBusy(tool, now = Date.now(), dir3 = stateDir(), alive = isAlive) {
   for (const f of readdirSync11(dir3)) {
     if (!f.endsWith(".json")) continue;
     try {
-      const s2 = JSON.parse(readFileSync13(join19(dir3, f), "utf8"));
+      const s2 = JSON.parse(readFileSync13(join20(dir3, f), "utf8"));
       if (s2.tool !== tool || s2.state !== "watch" && s2.state !== "ask_approval") continue;
       if (typeof s2.pid === "number" && s2.pid > 0) {
         if (alive(s2.pid, s2.pidName)) return true;
@@ -7516,7 +8349,7 @@ function toolBusy(tool, now = Date.now(), dir3 = stateDir(), alive = isAlive) {
   return false;
 }
 function defaultThrottleFile() {
-  return join19(deskbuddyHome(), "qoderapp", "keeper.json");
+  return join20(deskbuddyHome(), "qoderapp", "keeper.json");
 }
 var QoderCdpKeeper = class {
   #d;
@@ -7563,7 +8396,7 @@ var QoderCdpKeeper = class {
         all = {};
       }
       all[this.#d.brand.tool] = t;
-      mkdirSync14(join19(f, ".."), { recursive: true });
+      mkdirSync14(join20(f, ".."), { recursive: true });
       writeFileSync13(f + ".tmp", JSON.stringify(all));
       renameSync9(f + ".tmp", f);
     } catch {
@@ -7601,7 +8434,7 @@ var QoderCdpKeeper = class {
     if (this.#d.appPath) return this.#d.appPath();
     if (this.#platform() !== "darwin") return null;
     const name = this.#d.brand.macApp.split("/").pop() ?? "";
-    for (const p of [this.#d.brand.macApp, join19(homedir5(), "Applications", name)]) if (existsSync9(p)) return p;
+    for (const p of [this.#d.brand.macApp, join20(homedir6(), "Applications", name)]) if (existsSync9(p)) return p;
     return null;
   }
   /** 一轮：健康检查 → 活着核对属主。🔴 平时不重启 App */
@@ -7710,7 +8543,7 @@ var PROBE2 = `(() => {
   return { ok: missing.length === 0, missing };
 })()`;
 function sendExpr(i) {
-  const payload = { sessionId: i.sessionId, agentId: "agent:default", inputId: i.inputId, prompt: i.prompt };
+  const payload = { sessionId: i.sessionId, agentId: "agent:default", inputId: i.inputId, prompt: i.prompt, permissionMode: "default" };
   if (i.isNew) {
     payload.turnId = i.inputId;
     payload.executionKind = "local";
@@ -7837,12 +8670,13 @@ var QoderAppConn = class {
     this.#keeperAt = 0;
     this.#retryAt = 0;
   }
-  async eval(expr) {
+  /** timeoutMs：设备授权卡查选项要快，单独给短超时（缺省 EVAL_TIMEOUT_MS） */
+  async eval(expr, timeoutMs = EVAL_TIMEOUT_MS) {
     if (!this.available()) return null;
     const c = this.#client;
     if (!c) return null;
     try {
-      return await c.evaluate(expr, EVAL_TIMEOUT_MS);
+      return await c.evaluate(expr, timeoutMs);
     } catch (e) {
       this.#d.log(`${this.#d.brand.label} App \u4EFB\u52A1\u811A\u672C\u51FA\u9519\uFF1A${e?.message ?? e}`);
       return null;
@@ -7941,6 +8775,224 @@ var QoderAppConn = class {
   }
 };
 
+// src/daemon/qoderApp/approval.ts
+var APP_LOOKUP_TIMEOUT_MS = 3e3;
+var APP_LOOKUP_RETRY_MS = [250, 500, 1e3];
+function pendingCardExpr(q) {
+  const want = { sessionId: q.sessionId, toolName: q.toolName, toolUseId: q.toolUseId ?? "", input: q.toolUseId ? null : q.toolInput ?? null };
+  return `(async () => {
+  const q = globalThis.qoderDesktop;
+  if (!q || typeof q.watchChatSessionControl !== 'function' || typeof q.unwatchChatSessionControl !== 'function') return { ok: false, why: 'nobridge' };
+  const NR = new RegExp(${JSON.stringify(NOT_REGISTERED_RE_SRC)}, 'i');
+  const msg = (e) => String((e && e.message) || e).slice(0, 300);
+  const want = ${JSON.stringify(want)};
+  const wid = 'deskbuddy:perm:' + Date.now().toString(36) + ':' + Math.random().toString(36).slice(2);
+  let st = null;
+  try { const r = await q.watchChatSessionControl(want.sessionId, wid); st = r && r.state; }
+  catch (e) { return { ok: false, why: NR.test(msg(e)) ? 'gone' : 'error', message: msg(e) }; }
+  finally { try { await q.unwatchChatSessionControl(want.sessionId, wid); } catch (e) {} }
+  if (!st || typeof st !== 'object') return { ok: false, why: 'error', message: 'no state' };
+  const busy = st.runtimeState === 'running' || st.runtimeState === 'opening' || st.runtimeState === 'waiting-user' || !!st.activeTurn;
+  const list = Array.isArray(st.pendingInteractions) ? st.pendingInteractions.filter((p) => p && p.type === 'permission') : [];
+  const canon = (v) => JSON.stringify(v, (k, x) => (x && typeof x === 'object' && !Array.isArray(x) ? Object.keys(x).sort().reduce((o, k2) => ((o[k2] = x[k2]), o), {}) : x));
+  const hits = want.toolUseId ? list.filter((p) => p.toolUseId === want.toolUseId) : list.filter((p) => p.toolName === want.toolName && canon(p.input) === canon(want.input));
+  if (hits.length === 0) return { ok: false, why: 'not_found', busy };
+  // \u6309\u53C2\u6570\u5339\u914D\uFF1AApp \u91CC\u540C\u540D\u540C\u53C2\u7684\u5F85\u786E\u8BA4\u4E0D\u6B62\u4E00\u6761\uFF08\u4E0D\u7BA1\u662F\u5426\u5DF2\u88AB\u522B\u7684\u8BBE\u5907\u5361\u5BF9\u4E0A\uFF09\u5C31\u5206\u4E0D\u6E05\u662F\u54EA\u4E00\u6B21\u8C03\u7528 \u2192 \u9000\u56DE\u67E5\u8868
+  if (hits.length > 1) return { ok: false, why: 'ambiguous' };
+  const p = hits[0];
+  if (p.toolName !== want.toolName) return { ok: false, why: 'mismatch' };
+  const isI18n = (v) => v && typeof v === 'object' && typeof v.getFixedT === 'function' && typeof v.t === 'function' && typeof v.exists === 'function';
+  const findI18n = () => {
+    const roots = [document.getElementById('root'), ...Array.from(document.body ? document.body.children : [])];
+    for (const el of roots) {
+      if (!el) continue;
+      const ck = Object.keys(el).find((k) => k.startsWith('__reactContainer$'));
+      if (!ck) continue;
+      const stack = [el[ck]];
+      let n = 0;
+      while (stack.length && n < 50000) {
+        const f = stack.pop();
+        if (!f) continue;
+        n++;
+        let h = f.memoizedState, m = 0;
+        while (h && typeof h === 'object' && m < 80) {
+          const ms = h.memoizedState;
+          const c = [ms, Array.isArray(ms) ? ms[0] : null, Array.isArray(ms) && ms[0] ? ms[0].i18n : null];
+          for (const v of c) { const real = v && typeof v === 'object' && isI18n(v.__original) ? v.__original : v; if (isI18n(real)) return real; }
+          h = h.next;
+          m++;
+        }
+        if (f.sibling) stack.push(f.sibling);
+        if (f.child) stack.push(f.child);
+      }
+    }
+    return null;
+  };
+  const input = p.input && typeof p.input === 'object' && !Array.isArray(p.input) ? p.input : {};
+  const mode = typeof input.mode === 'string' ? input.mode : '';
+  if ((p.toolName === 'CollaborationAuthorizeProjectAccess' && mode === 'collaboration_access_authorization') || (p.toolName === 'LarkAuthorize' && mode === 'lark_authorization') || p.toolName === 'EnterPlanMode' || p.toolName === 'ExitPlanMode')
+    return { ok: false, why: 'unsupported', message: p.toolName };
+  const i18n = findI18n();
+  if (!i18n) return { ok: false, why: 'no_i18n' };
+  const T = (k, o) => { if (!i18n.exists(k)) throw new Error('missing ' + k); const s = i18n.t(k, o); if (typeof s !== 'string' || !s) throw new Error('empty ' + k); return s; };
+  const modeLabel = (m) => (m === 'default' ? T('composer.permission.acceptEdits.label') : m === 'acceptEdits' || m === 'auto' || m === 'bypassPermissions' ? T('composer.permission.' + m + '.label') : m);
+  const ruleScope = (r) => ((r.ruleContent && String(r.ruleContent).endsWith(':*') ? String(r.ruleContent).slice(0, -2) : r.ruleContent) || '').trim() || r.toolName;
+  const suggLabel = (s) => s.type === 'mode' ? T('permission.suggestion.mode', { mode: modeLabel(s.mode) })
+    : s.type === 'directories' ? T('permission.suggestion.directories.' + s.operation, { scope: s.directories.join(', ') })
+    : s.operation === 'add' ? T('permission.suggestion.rules.add.' + s.behavior, { scope: s.rules.map(ruleScope).join(', ') })
+    : T('permission.suggestion.rules.' + s.operation, { behavior: T('permission.suggestion.behavior.' + s.behavior), scope: s.rules.map(ruleScope).join(', ') });
+  const items = [];
+  let variant = 'default';
+  try {
+    if (p.toolName === 'dws_bash' && mode === 'pat_authorization') {
+      variant = 'pat';
+      const g = Array.isArray(input.grantOptions) ? input.grantOptions.filter((x) => typeof x === 'string') : [];
+      items.push({ key: 'deny', label: T('permission.deny') });
+      if (!(g.length > 0) || g.includes('once')) items.push({ key: 'patOnce', label: T('permission.pat.allowOnce') });
+      if (g.includes('session')) items.push({ key: 'patSession', label: T('permission.pat.allowSession') });
+      if (g.includes('permanent')) items.push({ key: 'patAlways', label: T('permission.pat.allowAlways') });
+    } else if (p.toolName === 'RequestDirectory' && mode === 'directory_connection') {
+      variant = 'directory';
+      items.push({ key: 'deny', label: T('permission.deny') }, { key: 'allowOnce', label: T('permission.allow') });
+    } else if (p.reason && p.reason.kind === 'repeatedToolCall') {
+      // \u300C\u7EC8\u6B62\u4EFB\u52A1\u300D\u5728\u6E32\u67D3\u5C42\u5C31\u662F onClick=V1 \u2192 respondPermission(deny)\uFF0C\u53EA\u62D2\u8FD9\u4E00\u6B21\u8C03\u7528\uFF08\u4E0E hook deny \u540C\u4E49\uFF09\uFF0C\u5E76\u4E0D\u4E2D\u65AD\u4F1A\u8BDD
+      variant = 'repeated';
+      items.push({ key: 'deny', label: T('permission.repeatedTool.stopTask') }, { key: 'allowOnce', label: T('permission.repeatedTool.allowOnce') });
+    } else {
+      items.push({ key: 'deny', label: T('permission.deny') }, { key: 'allowOnce', label: T('permission.allowOnce') });
+      for (const s of Array.isArray(p.permissionSuggestions) ? p.permissionSuggestions : []) {
+        if (!s || typeof s.id !== 'string') return { ok: false, why: 'bad_suggestion' };
+        items.push({ key: 'suggestion', label: suggLabel(s), suggestion: s });
+      }
+    }
+  } catch (e) {
+    return { ok: false, why: 'no_i18n', message: msg(e) };
+  }
+  return { ok: true, toolUseId: p.toolUseId, toolName: p.toolName, matchedBy: want.toolUseId ? 'id' : 'input', variant, lang: String(i18n.resolvedLanguage || i18n.language || ''), items };
+})()`;
+}
+function respondSuggestionExpr(sessionId, toolUseId, permissionSuggestionId) {
+  const payload = { type: "permission", sessionId, toolUseId, decision: "allow", permissionSuggestionId };
+  return `(async () => {
+  const q = globalThis.qoderDesktop;
+  if (!q || typeof q.respondChatInteraction !== 'function') return { ok: false, why: 'nobridge' };
+  const msg = (e) => String((e && e.message) || e).slice(0, 300);
+  try { await q.respondChatInteraction(${JSON.stringify(payload)}); return { ok: true }; }
+  catch (e) { const m = msg(e); return { ok: false, why: /\u786E\u8BA4\u8BF7\u6C42\u5DF2\u7ECF\u5931\u6548|not pending|no longer pending/i.test(m) ? 'gone' : 'error', message: m }; }
+})()`;
+}
+var RULE_BEHAVIOR_ZH2 = { allow: "\u5141\u8BB8", deny: "\u62D2\u7EDD", ask: "\u8BE2\u95EE" };
+function sameJson(a, b) {
+  const canon = (v) => JSON.stringify(
+    v,
+    (_k, x) => x && typeof x === "object" && !Array.isArray(x) ? Object.keys(x).sort().reduce((o, k) => (o[k] = x[k], o), {}) : x
+  );
+  return canon(a) === canon(b);
+}
+function suggestionUpdate(s2, hookSuggestions) {
+  const m = /^session-(\d+)$/.exec(s2.id);
+  const orig = m && Array.isArray(hookSuggestions) ? hookSuggestions[Number(m[1])] : void 0;
+  const rebuilt = s2.type === "rules" ? { type: s2.operation === "add" ? "addRules" : s2.operation === "replace" ? "replaceRules" : "removeRules", behavior: s2.behavior, rules: s2.rules, destination: "session" } : s2.type === "mode" ? { type: "setMode", mode: s2.mode, destination: "session" } : { type: s2.operation === "add" ? "addDirectories" : "removeDirectories", directories: s2.directories, destination: "session" };
+  if (orig && typeof orig === "object" && orig.destination === "session" && orig.type === rebuilt.type) {
+    const same = s2.type === "rules" ? orig.behavior === s2.behavior && sameJson(orig.rules, s2.rules) : s2.type === "mode" ? orig.mode === s2.mode : sameJson(orig.directories, s2.directories);
+    if (same) return orig;
+  }
+  return rebuilt;
+}
+function ruleDesc(s2) {
+  if (s2.type !== "rules" || !Array.isArray(s2.rules) || s2.rules.length === 0) return "";
+  const op = s2.operation === "add" ? "" : s2.operation === "replace" ? "\u66FF\u6362\u4E3A" : "\u79FB\u9664";
+  const scope = s2.rules.map((r) => typeof r.ruleContent === "string" && r.ruleContent ? `${r.toolName}(${r.ruleContent})` : `\u6574\u4E2A ${r.toolName} \u5DE5\u5177`).join("\u3001");
+  const kindText = s2.operation === "add" && s2.behavior === "allow" ? "" : `${RULE_BEHAVIOR_ZH2[s2.behavior] ?? s2.behavior}`;
+  return `${kindText}\u89C4\u5219${op}\uFF1A${scope} \u2192 session`;
+}
+function appCardOptions(card, hook) {
+  const options = [];
+  const actions = {};
+  const input = hook.tool_input && typeof hook.tool_input === "object" && !Array.isArray(hook.tool_input) ? hook.tool_input : {};
+  let n = 0;
+  for (const it of card.items) {
+    if (!it || typeof it.label !== "string") return null;
+    if (it.key === "deny") {
+      options.push({ id: "deny", label: it.label, kind: "deny" });
+      actions.deny = { decision: "deny" };
+    } else if (it.key === "allowOnce") {
+      options.push({ id: "allow", label: it.label, kind: "allow" });
+      actions.allow = { decision: "allow" };
+    } else if (it.key === "patOnce" || it.key === "patSession" || it.key === "patAlways") {
+      const [id, kind, grantType] = it.key === "patOnce" ? ["allow", "allow", "once"] : it.key === "patSession" ? ["session", "allow_session", "session"] : ["always", "allow_always", "permanent"];
+      options.push({ id, label: it.label, kind });
+      actions[id] = { decision: "allow", updatedInput: { ...input, grantType } };
+    } else if (it.key === "suggestion" && it.suggestion) {
+      const s2 = it.suggestion;
+      const id = `s${n++}`;
+      const desc = ruleDesc(s2);
+      options.push({ id, label: it.label, ...desc ? { description: desc } : {}, kind: "allow_session" });
+      actions[id] = {
+        decision: "allow",
+        updatedPermissions: [suggestionUpdate(s2, hook.permission_suggestions)],
+        // 🔴 只有按 tool_use_id 精确对上的卡才经 App 回答：按参数匹配到的可能是同名同参的另一次调用，答错对象
+        ...s2.type === "mode" && card.matchedBy === "id" ? { qoderApp: { toolUseId: card.toolUseId, permissionSuggestionId: s2.id } } : {}
+      };
+    } else return null;
+  }
+  return checkOptions({ options, actions });
+}
+var QoderAppApprovals = class {
+  #d;
+  constructor(deps2) {
+    this.#d = deps2;
+  }
+  #conn(tool) {
+    if (tool !== "qoder_cn" && tool !== "qoder") return null;
+    try {
+      const c = this.#d.conn(tool);
+      return c && c.available() ? c : null;
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * 这条 hook 请求在 App 里对应的确认卡 → 设备选项。拿不到返回 null（调用方退回查表）。
+   * 会话在 App 里跑着、但还没看到这一条时短暂重看（App 收 worker 的确认请求与 hook 进程起来几乎同时）
+   */
+  async options(tool, hook, signal) {
+    const conn = this.#conn(tool);
+    if (!conn) return null;
+    const sessionId = typeof hook.session_id === "string" ? hook.session_id : "";
+    const toolName = typeof hook.tool_name === "string" ? hook.tool_name : "";
+    if (!sessionId || !toolName) return null;
+    const toolUseId = typeof hook.tool_use_id === "string" && hook.tool_use_id ? hook.tool_use_id : void 0;
+    const expr = pendingCardExpr({ sessionId, toolName, toolUseId, toolInput: hook.tool_input });
+    const sleep3 = this.#d.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    let last = "";
+    for (let i = 0; ; i++) {
+      if (signal?.aborted) return null;
+      const r = await conn.eval(expr, APP_LOOKUP_TIMEOUT_MS);
+      if (r && r.ok === true) {
+        const set = appCardOptions(r, hook);
+        if (!set) this.#d.log(`${tool} App \u6388\u6743\u5361\u9009\u9879\u81EA\u68C0\u4E0D\u8FC7\uFF08${r.variant}\uFF09\uFF0C\u9000\u56DE\u67E5\u8868`);
+        return set;
+      }
+      last = r ? `${r.why}${r.message ? `:${r.message}` : ""}` : "timeout";
+      if (!r || r.why !== "not_found" || !r.busy || i >= APP_LOOKUP_RETRY_MS.length) break;
+      await sleep3(APP_LOOKUP_RETRY_MS[i]);
+    }
+    this.#d.log(`${tool} App \u6388\u6743\u5361\u6CA1\u53D6\u5230\u771F\u5B9E\u9009\u9879\uFF08${last}\uFF09\uFF0C\u9000\u56DE\u67E5\u8868`);
+    return null;
+  }
+  /** 设备选了「本次任务使用 X 模式」：经 App 回答。ok = App 接了；gone = 这条已不在待确认（电脑上已处理）；failed = 没回成 */
+  async respond(tool, sessionId, toolUseId, permissionSuggestionId) {
+    const conn = this.#conn(tool);
+    if (!conn) return "failed";
+    const r = await conn.eval(respondSuggestionExpr(sessionId, toolUseId, permissionSuggestionId), APP_LOOKUP_TIMEOUT_MS);
+    if (r?.ok === true) return "ok";
+    if (r?.why === "gone") return "gone";
+    this.#d.log(`${tool} App \u56DE\u7B54\u6388\u6743\u5931\u8D25\uFF08${r ? `${r.why}${r.message ? `:${r.message}` : ""}` : "timeout"}\uFF09\uFF0C\u6539\u7531 hook \u56DE\u7B54`);
+    return "failed";
+  }
+};
+
 // src/daemon/qoderApp/task.ts
 import { createHash as createHash3 } from "crypto";
 import { realpathSync as realpathSync4 } from "fs";
@@ -8859,7 +9911,7 @@ import { dirname as dirname6, sep as sep2 } from "path";
 // src/core/wrapWindows.ts
 import { chmodSync as chmodSync2, mkdirSync as mkdirSync15, readdirSync as readdirSync12, readFileSync as readFileSync14, renameSync as renameSync10, rmSync as rmSync9, statSync as statSync8, writeFileSync as writeFileSync14 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 var WINDOW_ID_RE = /^[a-f0-9]{32}$/;
 var WINDOW_EVENTS = [
   "SessionStart",
@@ -8872,10 +9924,10 @@ var WINDOW_EVENTS = [
   "SessionEnd"
 ];
 function windowsDir() {
-  return join20(deskbuddyHome(), "windows");
+  return join21(deskbuddyHome(), "windows");
 }
 function bySessionDir() {
-  return join20(windowsDir(), "by-session");
+  return join21(windowsDir(), "by-session");
 }
 function safeSid(sessionId) {
   return String(sessionId).replace(/[^A-Za-z0-9_-]/g, "");
@@ -8889,7 +9941,7 @@ function atomicWrite(file3, text) {
   renameSync10(tmp, file3);
 }
 function windowFile(windowId) {
-  return join20(windowsDir(), `${windowId}.json`);
+  return join21(windowsDir(), `${windowId}.json`);
 }
 function writeWindow(windowId, rec) {
   if (!WINDOW_ID_RE.test(windowId)) return;
@@ -8925,7 +9977,7 @@ function removeWindow(windowId) {
     return;
   }
   for (const n of names) {
-    const f = join20(bySessionDir(), n);
+    const f = join21(bySessionDir(), n);
     try {
       if (readFileSync14(f, "utf8").trim() === windowId) rmSync9(f, { force: true });
     } catch {
@@ -8936,14 +9988,14 @@ function readBySession(sessionId) {
   const safe2 = safeSid(sessionId);
   if (!safe2) return null;
   try {
-    const id = readFileSync14(join20(bySessionDir(), safe2), "utf8").trim();
+    const id = readFileSync14(join21(bySessionDir(), safe2), "utf8").trim();
     return WINDOW_ID_RE.test(id) ? id : null;
   } catch {
     return null;
   }
 }
 function lastEventFile(windowId) {
-  return join20(windowsDir(), `${windowId}.last`);
+  return join21(windowsDir(), `${windowId}.last`);
 }
 function readLastEvent(windowId) {
   if (!WINDOW_ID_RE.test(windowId)) return null;
@@ -8951,239 +10003,33 @@ function readLastEvent(windowId) {
     const e = JSON.parse(readFileSync14(lastEventFile(windowId), "utf8"));
     return e && typeof e.ev === "string" && typeof e.at === "number" ? { ev: e.ev, sid: String(e.sid ?? ""), at: e.at } : null;
   } catch {
-    return null;
-  }
-}
-function writeLastEvent(windowId, ev, sid, at) {
-  if (!WINDOW_ID_RE.test(windowId) || !WINDOW_EVENTS.includes(ev)) return;
-  ensureDir(windowsDir());
-  atomicWrite(lastEventFile(windowId), JSON.stringify({ ev, sid, at }));
-}
-function channelPath(windowId, platform = process.platform, home = deskbuddyHome()) {
-  if (platform === "win32") return `\\\\.\\pipe\\deskbuddy-${windowId}`;
-  const name = `${windowId.slice(0, 16)}.sock`;
-  const primary = join20(home, "win", name);
-  if (Buffer.byteLength(primary) <= 103) return primary;
-  const uid = typeof process.getuid === "function" ? process.getuid() : 0;
-  return join20(tmpdir2(), `deskbuddy-${uid}`, name);
-}
-function ensureChannelDir(sockPath) {
-  const dir3 = join20(sockPath, "..");
-  try {
-    mkdirSync15(dir3, { recursive: true, mode: 448 });
-    const st = statSync8(dir3);
-    if (typeof process.getuid === "function" && st.uid !== process.getuid()) return false;
-    chmodSync2(dir3, 448);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-// src/wrap/answerKeys.ts
-var KEY_DOWN = "\x1B[B";
-var KEY_UP = "\x1B[A";
-var KEY_ENTER = "\r";
-var ARROW_GAP_MS = 150;
-var CONFIRM_MS = 4e3;
-var POLL_MS2 = 150;
-var FINGERPRINT_CHARS = 40;
-var FINGERPRINT_TAIL = 30;
-var FP_SEP = "\u2026";
-var CURSOR = "[\u276F>\u203A]";
-function joined(lines3) {
-  return lines3.join("\n");
-}
-function squash(s2) {
-  return s2.replace(/[\s\u2500-\u257F]+/g, "");
-}
-function basename8(p) {
-  const parts = p.split(/[\\/]+/).filter(Boolean);
-  return parts[parts.length - 1] ?? "";
-}
-function displayFingerprint(toolName, input) {
-  const a = input && typeof input === "object" ? input : {};
-  const s2 = (v) => typeof v === "string" ? v : "";
-  const headTail = (v) => {
-    const q = squash(v);
-    return q.length > FINGERPRINT_CHARS + FINGERPRINT_TAIL ? q.slice(0, FINGERPRINT_CHARS) + FP_SEP + q.slice(-FINGERPRINT_TAIL) : q;
-  };
-  if (toolName === "Bash") return headTail(s2(a.command));
-  if (toolName === "Write") {
-    const name = squash(basename8(s2(a.file_path)));
-    const body = squash(s2(a.content)).slice(0, 20);
-    return name ? body ? name + FP_SEP + body : name : "";
-  }
-  if (["Edit", "MultiEdit", "Read", "NotebookEdit"].includes(toolName)) return squash(basename8(s2(a.file_path) || s2(a.notebook_path)));
-  return headTail(Object.values(a).find((v) => typeof v === "string" && v.trim() !== "") ?? "").slice(0, 200);
-}
-var SETTLE_MS = 800;
-async function settled(io, ok) {
-  if (!ok(io.screen())) return false;
-  await io.sleep(SETTLE_MS);
-  return ok(io.screen());
-}
-async function waitUntil(io, ok, ms = CONFIRM_MS) {
-  const loops = Math.max(1, Math.ceil(ms / POLL_MS2));
-  for (let i = 0; i < loops; i++) {
-    if (ok(io.screen())) return true;
-    await io.sleep(POLL_MS2);
-  }
-  return ok(io.screen());
-}
-function permissionRegion(lines3, toolName) {
-  let q = -1;
-  for (let i = lines3.length - 1; i >= 0; i--) {
-    if (/^\s*Do you want to .+\?\s*$/.test(lines3[i])) {
-      q = i;
-      break;
-    }
-  }
-  if (q < 0 || !toolName) return null;
-  const head = new RegExp(`^\\s*\u25CF\\s*${toolName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\(`);
-  let h = -1;
-  for (let i = q - 1; i >= 0; i--) {
-    if (head.test(lines3[i])) {
-      h = i;
-      break;
-    }
-    if (/^\s*●/.test(lines3[i])) return null;
-  }
-  if (h < 0) return null;
-  const after = joined(lines3.slice(q + 1, q + 6));
-  if (!new RegExp(`^\\s*(?:${CURSOR}\\s*)?1\\.\\s+Yes\\s*$`, "m").test(after)) return null;
-  if (!/^\s*(?:[❯>›]\s*)?3\.\s+No\b/m.test(after)) return null;
-  return lines3.slice(h, q + 1);
-}
-function isPermissionDialog(lines3, toolName, fingerprint2) {
-  if (!fingerprint2) return false;
-  const region = permissionRegion(lines3, toolName);
-  if (!region) return false;
-  const text = squash(joined(region));
-  return fingerprint2.split(FP_SEP).every((part) => !!part && text.includes(squash(part)));
-}
-async function answerPermission(io, toolName, fingerprint2, decision) {
-  const ok = (l) => isPermissionDialog(l, toolName, fingerprint2);
-  if (!await settled(io, ok)) return "not_waiting";
-  io.write(decision === "allow" ? "1" : "3");
-  return await waitUntil(io, (l) => !ok(l)) ? "done" : "partial";
-}
-var TAB_ROW = /←.*[☐☒].*Submit.*→/;
-function isQuestionDialog(lines3) {
-  return lines3.some((l) => TAB_ROW.test(l));
-}
-function onQuestion(lines3, q) {
-  const start = questionStart(lines3);
-  if (start < 0) return false;
-  const t = squash(q.question);
-  return !!t && squash(joined(lines3.slice(start))).includes(t);
-}
-function isReviewPage(lines3) {
-  const t = joined(lines3);
-  return /Review your answers/.test(t) && /Submit answers/.test(t);
-}
-function questionStart(lines3) {
-  for (let i = lines3.length - 1; i >= 0; i--) if (TAB_ROW.test(lines3[i])) return i + 1;
-  return -1;
-}
-function optionLine(lines3, n, label) {
-  const lab = squash(label).slice(0, 6);
-  const start = questionStart(lines3);
-  if (start < 0) return -1;
-  for (let i = start; i < lines3.length; i++) {
-    const m = lines3[i].match(/^\s*(?:[❯>›]\s*)?[☐☒]?\s*(\d+)\.\s+(.*)$/);
-    if (m && Number(m[1]) === n && squash(m[2]).startsWith(lab)) return i;
-  }
-  return -1;
-}
-function checked(lines3, line) {
-  return line >= 0 && /^\s*☒/.test(lines3[line]);
-}
-function singleCursor(lines3, q) {
-  const n = q.options.length;
-  const start = questionStart(lines3);
-  if (start < 0) return -1;
-  for (let i = start; i < lines3.length; i++) {
-    const l = lines3[i];
-    const m = l.match(new RegExp(`^\\s*${CURSOR}\\s*(\\d+)\\.\\s+(.*)$`));
-    if (m) {
-      const k = Number(m[1]) - 1;
-      if (k >= 0 && k < n) return squash(m[2]).startsWith(squash(q.options[k].label).slice(0, 6)) ? k : -1;
-      if (k === n) return /^Typesomething/.test(squash(m[2])) ? n : -1;
-      return -1;
-    }
-    if (new RegExp(`^\\s*${CURSOR}\\s*(Next|Submit)\\s*$`).test(l)) return n + 1;
+    return null;
   }
-  return -1;
 }
-async function move(io, delta) {
-  const key = delta > 0 ? KEY_DOWN : KEY_UP;
-  for (let i = 0; i < Math.abs(delta); i++) {
-    io.write(key);
-    await io.sleep(ARROW_GAP_MS);
-  }
+function writeLastEvent(windowId, ev, sid, at) {
+  if (!WINDOW_ID_RE.test(windowId) || !WINDOW_EVENTS.includes(ev)) return;
+  ensureDir(windowsDir());
+  atomicWrite(lastEventFile(windowId), JSON.stringify({ ev, sid, at }));
 }
-async function answerQuestions(io, questions, selections) {
-  if (questions.length === 0 || selections.length !== questions.length) return "not_waiting";
-  for (let qi = 0; qi < questions.length; qi++) {
-    const sel = selections[qi];
-    const q = questions[qi];
-    if (sel.length === 0 || sel.some((i) => !Number.isInteger(i) || i < 0 || i >= q.options.length)) return "not_waiting";
-    if (q.multiSelect !== true && sel.length !== 1) return "not_waiting";
-  }
-  if (!await settled(io, (l) => onQuestion(l, questions[0]))) return "not_waiting";
-  if (questions.some((q) => q.multiSelect === true) && (!io.cursorLine || io.cursorLine() === null)) return "unsupported";
-  let wrote = false;
-  const fail = () => wrote ? "partial" : "not_waiting";
-  for (let qi = 0; qi < questions.length; qi++) {
-    const q = questions[qi];
-    const n = q.options.length;
-    const sel = [...selections[qi]].sort((a, b) => a - b);
-    if (!await waitUntil(io, (l) => onQuestion(l, q))) return fail();
-    if (q.multiSelect === true) {
-      const lines0 = io.screen();
-      for (let i = 0; i < n; i++) if (checked(lines0, optionLine(lines0, i + 1, q.options[i].label))) return fail();
-      const first = optionLine(lines0, 1, q.options[0].label);
-      if (first < 0 || io.cursorLine?.() !== first) return fail();
-      let cur = 0;
-      for (const t of sel) {
-        await move(io, t - cur);
-        cur = t;
-        const onTarget = await waitUntil(io, (l) => {
-          const ln = optionLine(l, t + 1, q.options[t].label);
-          return ln >= 0 && io.cursorLine?.() === ln;
-        });
-        if (!onTarget) return fail();
-        io.write(KEY_ENTER);
-        wrote = true;
-        if (!await waitUntil(io, (l) => checked(l, optionLine(l, t + 1, q.options[t].label)))) return fail();
-      }
-      await move(io, n + 1 - cur);
-      if (!await waitUntil(io, (l) => questionStart(l) >= 0 && new RegExp(`^\\s*${CURSOR}\\s*(Submit|Next)\\s*$`, "m").test(joined(l.slice(questionStart(l)))))) return fail();
-      io.write(KEY_ENTER);
-      wrote = true;
-    } else {
-      const t = sel[0];
-      const cur = singleCursor(io.screen(), q);
-      if (cur < 0) return fail();
-      await move(io, t - cur);
-      if (!await waitUntil(io, (l) => singleCursor(l, q) === t && optionLine(l, t + 1, q.options[t].label) >= 0)) return fail();
-      io.write(KEY_ENTER);
-      wrote = true;
-    }
-    const next = questions[qi + 1];
-    const moved = await waitUntil(io, (l) => next ? onQuestion(l, next) : isReviewPage(l) || !isQuestionDialog(l));
-    if (!moved) return fail();
-  }
-  const s2 = io.screen();
-  if (!isReviewPage(s2)) return isQuestionDialog(s2) ? fail() : "done";
-  if (!new RegExp(`^\\s*${CURSOR}\\s*1\\.\\s+Submit answers`, "m").test(joined(s2))) return fail();
-  io.write(KEY_ENTER);
-  return await waitUntil(io, (l) => !isReviewPage(l) && !isQuestionDialog(l)) ? "done" : "partial";
+function channelPath(windowId, platform = process.platform, home = deskbuddyHome()) {
+  if (platform === "win32") return `\\\\.\\pipe\\deskbuddy-${windowId}`;
+  const name = `${windowId.slice(0, 16)}.sock`;
+  const primary = join21(home, "win", name);
+  if (Buffer.byteLength(primary) <= 103) return primary;
+  const uid = typeof process.getuid === "function" ? process.getuid() : 0;
+  return join21(tmpdir2(), `deskbuddy-${uid}`, name);
 }
-function stillWaiting(lines3, probe) {
-  if (probe.questions && probe.questions.length > 0) return probe.questions.some((q) => onQuestion(lines3, q)) || isReviewPage(lines3);
-  return isPermissionDialog(lines3, probe.toolName, probe.fingerprint ?? "");
+function ensureChannelDir(sockPath) {
+  const dir3 = join21(sockPath, "..");
+  try {
+    mkdirSync15(dir3, { recursive: true, mode: 448 });
+    const st = statSync8(dir3);
+    if (typeof process.getuid === "function" && st.uid !== process.getuid()) return false;
+    chmodSync2(dir3, 448);
+    return true;
+  } catch {
+    return false;
+  }
 }
 
 // src/wrap/channel.ts
@@ -9211,6 +10057,20 @@ function parseAnswer(m) {
     if (a.decision !== "allow" && a.decision !== "deny") return null;
     return { instructionId, sessionId, expireAt, answer: { kind: "permission", toolName, fingerprint: fingerprint2, decision: a.decision } };
   }
+  if (a.kind === "qoder-read" || a.kind === "qoder-key") {
+    const toolName = toolNameOf(a.toolName);
+    const fp = a.fingerprint === void 0 ? void 0 : str4(a.fingerprint, 4e3);
+    if (!toolName || fp === null) return null;
+    const f = fp ? { fingerprint: fp } : {};
+    if (a.kind === "qoder-read") return { instructionId, sessionId, expireAt, answer: { kind: "qoder-read", toolName, ...f } };
+    const labels = Array.isArray(a.labels) ? a.labels : [];
+    if (labels.length < 2 || labels.length > 16 || !labels.every((l) => str4(l, 1e3) !== null)) return null;
+    const n = a.n;
+    if (typeof n !== "number" || !Number.isInteger(n) || n < 1 || n > labels.length) return null;
+    const box = a.box;
+    if (typeof box !== "number" || !Number.isInteger(box) || box < 1) return null;
+    return { instructionId, sessionId, expireAt, answer: { kind: "qoder-key", toolName, ...f, labels, n, box } };
+  }
   if (a.prompt !== void 0 && a.prompt !== "hooks") return null;
   const hooks = a.prompt === "hooks" ? { prompt: "hooks" } : {};
   if (a.kind === "trust") {
@@ -9319,18 +10179,19 @@ function parseRequest(line) {
 }
 var HEX32 = /^[0-9a-f]{32}$/;
 function replyMac(secret, nonceC, r) {
-  return wakeMac(secret, "r", nonceC, r.instructionId, r.status, r.reason ?? "");
+  const extra = r.options !== void 0 || r.box !== void 0 ? [canonicalJson({ options: r.options, box: r.box })] : [];
+  return wakeMac(secret, "r", nonceC, r.instructionId, r.status, r.reason ?? "", ...extra);
 }
 function startChannelServer(path, secret, onRequest, platform = process.platform, onAnswer) {
   return new Promise((resolve10) => {
     const server = createServer3((sock) => {
-      let open2 = true;
+      let open3 = true;
       let phase = "hello";
       let nonceC = "";
       let nonceS = "";
       sock.on("error", () => {
       });
-      sock.on("close", () => open2 = false);
+      sock.on("close", () => open3 = false);
       const authTimer = setTimeout(() => {
         if (phase === "hello") sock.destroy();
       }, 5e3);
@@ -9375,7 +10236,7 @@ function startChannelServer(path, secret, onRequest, platform = process.platform
             return;
           }
           phase = "done";
-          onRequest(req, reply, () => open2);
+          onRequest(req, reply, () => open3);
         } catch {
           sock.destroy();
         }
@@ -9615,10 +10476,10 @@ function toolOfMessage(message) {
 }
 function pendingCall(text, toolName) {
   const { calls, done } = scanTranscript(text);
-  const open2 = calls.filter((c) => !done.has(c.callId));
-  const last = open2[open2.length - 1];
+  const open3 = calls.filter((c) => !done.has(c.callId));
+  const last = open3[open3.length - 1];
   if (!last || last.name !== toolName) return null;
-  if (open2.filter((c) => c.name === toolName).length > 1) return null;
+  if (open3.filter((c) => c.name === toolName).length > 1) return null;
   return last;
 }
 function selectionsOf(input, lists) {
@@ -9896,6 +10757,62 @@ function defaultSend(windowId, rec, req) {
   return sendAnswer(channelPath(windowId), secret, req, { finalTimeoutMs: req.answer.kind === "probe" ? 5e3 : 60 * 1e3 });
 }
 
+// src/daemon/qoderScreen.ts
+import { randomUUID as randomUUID2 } from "crypto";
+
+// src/daemon/window.ts
+function windowForSession(sessionId, tool) {
+  const id = readBySession(sessionId);
+  if (!id) return null;
+  const rec = readWindow(id);
+  if (!rec || !isAlive(rec.pid)) return null;
+  if (tool && rec.tool && rec.tool !== tool) return null;
+  return id;
+}
+
+// src/daemon/qoderScreen.ts
+var READ_TIMEOUT_MS = 5e3;
+var PRESS_TIMEOUT_MS = 15e3;
+var EXPIRE_MS = 3e4;
+var defaultDeps = {
+  windowFor: windowForSession,
+  readWindow,
+  send: (windowId, req, finalTimeoutMs) => sendAnswer(channelPath(windowId), windowSecret(windowId), req, { finalTimeoutMs })
+};
+function qoderScreen(d = defaultDeps) {
+  const target = (sessionId) => {
+    const id = d.windowFor(sessionId, "qoder_cn");
+    if (!id) return null;
+    const rec = d.readWindow(id);
+    return rec && rec.tool === "qoder_cn" && rec.answer !== true ? id : null;
+  };
+  const req = (sessionId, answer) => ({
+    instructionId: randomUUID2().replace(/-/g, ""),
+    sessionId,
+    expireAt: Date.now() + EXPIRE_MS,
+    answer
+  });
+  return {
+    async read(sessionId, toolName, fingerprint2) {
+      const win = target(sessionId);
+      if (!win) return null;
+      const r = await d.send(win, req(sessionId, { kind: "qoder-read", toolName, ...fingerprint2 ? { fingerprint: fingerprint2 } : {} }), READ_TIMEOUT_MS);
+      if (!r || r.status !== "started" || !Array.isArray(r.options) || typeof r.box !== "number" || !Number.isInteger(r.box) || r.box < 1) return null;
+      const labels = r.options.filter((x) => typeof x === "string" && x.length > 0);
+      return labels.length === r.options.length && labels.length >= 2 ? { labels, box: r.box } : null;
+    },
+    async press(sessionId, box, n) {
+      const win = target(sessionId);
+      if (!win) return "not_written";
+      const answer = { kind: "qoder-key", toolName: box.toolName, ...box.fingerprint ? { fingerprint: box.fingerprint } : {}, labels: box.labels, n, box: box.box };
+      const r = await d.send(win, req(sessionId, answer), PRESS_TIMEOUT_MS);
+      if (r?.status === "started") return "done";
+      if (!r || r.status === "rejected" || r.status === "not_here") return "not_written";
+      return "uncertain";
+    }
+  };
+}
+
 // src/daemon/codebuddyTerminal.ts
 import { closeSync as closeSync8, openSync as openSync8, readSync as readSync7, statSync as statSync10 } from "fs";
 var ANNOUNCE_TTL_MS = 5 * 1e3;
@@ -10172,12 +11089,12 @@ var CodebuddyTerminal = class {
 
 // src/wrap/trustPrompt.ts
 import { existsSync as existsSync10, realpathSync as realpathSync7, statSync as statSync11 } from "fs";
-import { homedir as homedir6 } from "os";
-import { dirname as dirname7, join as join21, resolve as resolve7 } from "path";
+import { homedir as homedir7 } from "os";
+import { dirname as dirname7, join as join22, resolve as resolve7 } from "path";
 var TRUST_TOOLS = /* @__PURE__ */ new Set(["claude_code", "workbuddy", "codex"]);
 var CURSOR_CHARS = "\u276F>\u203A";
 var BOX = /[─-╿|]/g;
-function squash2(s2) {
+function squash3(s2) {
   return s2.replace(BOX, "").replace(/\s+/g, "");
 }
 function squashLines(lines3) {
@@ -10330,7 +11247,7 @@ function pathShown(v, forms) {
   const body = v.body.toLowerCase();
   const breaks = v.breaks ?? [];
   return forms.some((f) => {
-    const q = squash2(f).toLowerCase();
+    const q = squash3(f).toLowerCase();
     if (!q) return false;
     for (let i = body.indexOf(q); i >= 0; i = body.indexOf(q, i + 1)) {
       const end = i + q.length;
@@ -10339,7 +11256,7 @@ function pathShown(v, forms) {
     return false;
   });
 }
-function trustCwdForms(cwd, real2 = realpathSync7, home = homedir6()) {
+function trustCwdForms(cwd, real2 = realpathSync7, home = homedir7()) {
   const out = /* @__PURE__ */ new Set();
   const add = (p) => {
     if (!p) return;
@@ -10363,7 +11280,7 @@ function gitStat(p) {
     return null;
   }
 }
-function findRepoScope(tool, cwd, stat2 = gitStat, home = homedir6(), real2 = realpathSync7) {
+function findRepoScope(tool, cwd, stat2 = gitStat, home = homedir7(), real2 = realpathSync7) {
   if (tool !== "claude_code" && tool !== "codex" || !cwd) return null;
   const logical = resolve7(cwd);
   const a = scanRepo(logical, stat2, home);
@@ -10381,7 +11298,7 @@ function scanRepo(start, stat2, home) {
   let d = start.replace(/[\\/]+$/, "") || start;
   let aboveHome = false;
   for (let i = 0; i < 64; i++) {
-    const g = stat2(join21(d, ".git"));
+    const g = stat2(join22(d, ".git"));
     if (g) {
       if (aboveHome) return { kind: "unknown" };
       if (g === "file") return { kind: "worktree", at: d };
@@ -10421,11 +11338,11 @@ function trustAnswerable(v, forms) {
   if (v.kind === "hooks") return true;
   return !widenedBeyond(v, forms) && pathShown(v, forms);
 }
-var SETTLE_MS2 = 800;
-var CONFIRM_MS2 = 4e3;
+var SETTLE_MS3 = 800;
+var CONFIRM_MS3 = 4e3;
 var POLL_MS4 = 150;
 var ARROW_GAP_MS2 = 150;
-async function waitUntil2(io, ok, ms = CONFIRM_MS2) {
+async function waitUntil3(io, ok, ms = CONFIRM_MS3) {
   const loops = Math.max(1, Math.ceil(ms / POLL_MS4));
   for (let i = 0; i < loops; i++) {
     if (ok(io.screen())) return true;
@@ -10441,7 +11358,7 @@ async function answerTrust(io, tool, decision, forms, kind = "trust", repoRoot)
   };
   const v0 = view(io.screen());
   if (!v0) return "not_waiting";
-  await io.sleep(SETTLE_MS2);
+  await io.sleep(SETTLE_MS3);
   const v = view(io.screen());
   if (!v || v.cursor !== 0) return "not_waiting";
   const role = decision === "allow" ? "folder" : "no";
@@ -10456,7 +11373,7 @@ async function answerTrust(io, tool, decision, forms, kind = "trust", repoRoot)
       wrote = true;
       await io.sleep(ARROW_GAP_MS2);
     }
-    const onTarget = await waitUntil2(io, (l) => {
+    const onTarget = await waitUntil3(io, (l) => {
       const w = view(l);
       return !!w && w.cursor >= 0 && w.options[w.cursor].role === role;
     });
@@ -10465,7 +11382,7 @@ async function answerTrust(io, tool, decision, forms, kind = "trust", repoRoot)
   } finally {
     io.hold?.(false);
   }
-  return await waitUntil2(io, (l) => !inspectTrust(l, tool, kind)) ? "done" : "partial";
+  return await waitUntil3(io, (l) => !inspectTrust(l, tool, kind)) ? "done" : "partial";
 }
 function trustWaiting(lines3, tool, kind = "trust") {
   return inspectTrust(lines3, tool, kind) !== null;
@@ -11972,9 +12889,9 @@ function codexQuestionInput(p) {
 
 // src/core/codexRemote.ts
 import { mkdirSync as mkdirSync16, renameSync as renameSync11, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function codexRemotePath() {
-  return join22(deskbuddyHome(), "codex-remote.json");
+  return join23(deskbuddyHome(), "codex-remote.json");
 }
 function writeCodexRemote(threads, pid = process.pid, now = Date.now()) {
   try {
@@ -11992,71 +12909,9 @@ function removeCodexRemote() {
   }
 }
 
-// src/wrap/screen.ts
-var ESC = "\x1B";
-var PASTE_BEGIN = ESC + "[200~";
-var PASTE_END = ESC + "[201~";
-function sanitize(text) {
-  return String(text).replace(/\r\n?/g, "\n").replace(/[\x00-\x08\x0b-\x1f\x7f-\x9f]/g, "");
-}
-var MAX_INJECT_CHARS = 800;
-var TEXT_TOO_LONG = "text_too_long";
-function oneLine(text) {
-  return sanitize(text).replace(/\s*\n\s*/g, " ").trim();
-}
-function tooLongToInject(text) {
-  return oneLine(text).length > MAX_INJECT_CHARS;
-}
-function prepare(text) {
-  return " " + oneLine(text);
-}
-var TRUST_RE = /trust (the files in )?this folder|Yes, I trust this folder/i;
-var PLACEHOLDER_RE = /^Try ".*"$/;
-function isTerminalReport(s2) {
-  if (!s2) return true;
-  const rest = s2.replace(/\x1b\[[IO]/g, "").replace(/\x1b\[\d+;\d+R/g, "").replace(/\x1b\[[?>][\d;]*\$?[a-zA-Z]/g, "").replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, "").replace(/\x1bP[^\x1b]*\x1b\\/g, "");
-  return rest === "";
-}
-var PERMISSION_RE = /Do you want to (proceed|make|create|run|allow)|[❯>]\s*1\. Yes/;
-function inspectLines(lines3, undimmed) {
-  const text = lines3.join("\n");
-  const trust = TRUST_RE.test(text);
-  const permission = PERMISSION_RE.test(text);
-  const rules = [];
-  lines3.forEach((l, i) => {
-    if (/^─{20,}/.test(l.trim())) rules.push(i);
-  });
-  let input = null;
-  if (rules.length >= 2) {
-    const a = rules[rules.length - 2];
-    const b = rules[rules.length - 1];
-    const src = undimmed && undimmed.length === lines3.length ? undimmed : lines3;
-    input = src.slice(a + 1, b).map((l) => l.trimEnd()).join("\n").replace(/^\s*[❯>]\s?/, "").trimEnd();
-  }
-  const v = { permission, input };
-  if (trust) v.trust = true;
-  if (input !== null && PLACEHOLDER_RE.test(input.trim())) v.placeholder = true;
-  return v;
-}
-function boxMatches(view, body) {
-  if (view.input === null || view.permission) return false;
-  const flat2 = (x) => x.replace(/\s+/g, "");
-  return flat2(view.input) === flat2(body) || /\[Pasted text #\d+/.test(view.input);
-}
-
-// src/daemon/window.ts
-function windowForSession(sessionId, tool) {
-  const id = readBySession(sessionId);
-  if (!id) return null;
-  const rec = readWindow(id);
-  if (!rec || !isAlive(rec.pid)) return null;
-  if (tool && rec.tool && rec.tool !== tool) return null;
-  return id;
-}
-
 // src/core/interrupt.ts
 import { closeSync as closeSync9, openSync as openSync9, readdirSync as readdirSync13, readSync as readSync8, statSync as statSync12 } from "fs";
-import { dirname as dirname8, join as join23 } from "path";
+import { dirname as dirname8, join as join24 } from "path";
 var INTERRUPT_TOOLS = ["claude_code", "qoder_cn", "qoder"];
 function transcriptHome(tool) {
   if (tool === "claude_code") return claudeHome();
@@ -12162,17 +13017,17 @@ function claudeTranscriptFile(sessionId, cwd, home = claudeHome()) {
     }
   };
   if (cwd) {
-    const f = join23(home, "projects", projectDirName(cwd), name);
+    const f = join24(home, "projects", projectDirName(cwd), name);
     if (exists(f)) return f;
   }
   let dirs = [];
   try {
-    dirs = readdirSync13(join23(home, "projects"));
+    dirs = readdirSync13(join24(home, "projects"));
   } catch {
     return null;
   }
   for (const d of dirs) {
-    const f = join23(home, "projects", d, name);
+    const f = join24(home, "projects", d, name);
     if (exists(f)) return f;
   }
   return null;
@@ -12190,12 +13045,12 @@ function shouldSettleInterrupt(st, markerAt, now) {
 }
 
 // src/daemon/qoderAppDb.ts
-import { execFile as execFile4 } from "child_process";
+import { execFile as execFile5 } from "child_process";
 import { createHash as createHash4 } from "crypto";
 import { existsSync as existsSync11 } from "fs";
-import { access, open, readdir, stat } from "fs/promises";
+import { access, open as open2, readdir, stat } from "fs/promises";
 import { createRequire as createRequire3 } from "module";
-import { basename as basename9, dirname as dirname9, isAbsolute as isAbsolute4, join as join24 } from "path";
+import { basename as basename9, dirname as dirname9, isAbsolute as isAbsolute4, join as join25 } from "path";
 var QODER_APP_TOOLS = ["qoder_cn", "qoder"];
 var DB_SCRIPT = String.raw`
 const { DatabaseSync } = require('node:sqlite');
@@ -12272,7 +13127,7 @@ function qoderConfigDir(tool) {
 }
 async function findTranscript(configDir, sessionId) {
   if (!SESSION_UUID_RE.test(sessionId)) return null;
-  const root = join24(configDir, "projects");
+  const root = join25(configDir, "projects");
   let dirs;
   try {
     dirs = await readdir(root);
@@ -12280,7 +13135,7 @@ async function findTranscript(configDir, sessionId) {
     return null;
   }
   for (const d of dirs) {
-    const p = join24(root, d, `${sessionId}.jsonl`);
+    const p = join25(root, d, `${sessionId}.jsonl`);
     try {
       await access(p);
       return p;
@@ -12291,7 +13146,7 @@ async function findTranscript(configDir, sessionId) {
 }
 var SLICE2 = 64 * 1024;
 async function readSlice2(p, from) {
-  const fh = await open(p, "r");
+  const fh = await open2(p, "r");
   try {
     const size = (await fh.stat()).size;
     const len = Math.min(size, SLICE2);
@@ -12373,7 +13228,7 @@ var defaultQoderAppDeps = () => ({
   },
   runElectron: (bin, script, input) => new Promise((resolve10, reject) => {
     const env = { ...process.env, ELECTRON_RUN_AS_NODE: "1" };
-    const c = execFile4(
+    const c = execFile5(
       bin,
       ["-e", script],
       { env, timeout: 15e3, windowsHide: true, maxBuffer: 1024 * 1024 },
@@ -12852,17 +13707,17 @@ function startWakeServer(path, hub, secret, platform = process.platform) {
 
 // src/core/appended.ts
 import { chmodSync as chmodSync4, mkdirSync as mkdirSync17, readFileSync as readFileSync16, renameSync as renameSync12, rmSync as rmSync13, writeFileSync as writeFileSync16 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 var APPENDED_MAX_ITEMS = 5;
 var APPENDED_TEXT_MAX = 500;
 var APPENDED_RESULT_MAX = 800;
 var APPENDED_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 function appendedDir() {
-  return join25(deskbuddyHome(), "appended");
+  return join26(deskbuddyHome(), "appended");
 }
 function appendedPath(sessionId) {
   const safe2 = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
-  return safe2 ? join25(appendedDir(), `${safe2}.json`) : null;
+  return safe2 ? join26(appendedDir(), `${safe2}.json`) : null;
 }
 function readAppended(sessionId) {
   const file3 = appendedPath(sessionId);
@@ -12892,13 +13747,13 @@ function writeAppended(sessionId, item) {
 var RUNNING_TTL_MS = 60 * 60 * 1e3;
 function runningPath(sessionId) {
   const safe2 = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
-  return safe2 ? join25(deskbuddyHome(), "running", `${safe2}.json`) : null;
+  return safe2 ? join26(deskbuddyHome(), "running", `${safe2}.json`) : null;
 }
 function writeRunning(sessionId, now = Date.now()) {
   const file3 = runningPath(sessionId);
   if (!file3) return;
   try {
-    mkdirSync17(join25(deskbuddyHome(), "running"), { recursive: true, mode: 448 });
+    mkdirSync17(join26(deskbuddyHome(), "running"), { recursive: true, mode: 448 });
     writeFileSync16(`${file3}.tmp`, JSON.stringify({ at: now, pid: process.pid }), { encoding: "utf8", mode: 384 });
     renameSync12(`${file3}.tmp`, file3);
   } catch {
@@ -12946,7 +13801,7 @@ function resultSummary(tool, stdout6) {
 
 // src/core/dshMailbox.ts
 import { chmodSync as chmodSync5, existsSync as existsSync12, mkdirSync as mkdirSync18, readdirSync as readdirSync14, readFileSync as readFileSync17, renameSync as renameSync13, rmSync as rmSync14, writeFileSync as writeFileSync17 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 var DSH_HEARTBEAT_FRESH_MS = 5 * 1e3;
 var DSH_ACK_TIMEOUT_MS = 8 * 1e3;
 var ACK_POLL_MS = 200;
@@ -12957,10 +13812,10 @@ var REVOKE_RETRY_MS = 50;
 var SID_RE3 = /^[A-Za-z0-9_-]{1,128}$/;
 var IID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 function dshMailboxDir(home = deskbuddyHome(), channel = "dsh") {
-  return join26(home, channel);
+  return join27(home, channel);
 }
 function sub(home, name, channel = "dsh") {
-  return join26(dshMailboxDir(home, channel), name);
+  return join27(dshMailboxDir(home, channel), name);
 }
 function ensureDir2(p) {
   mkdirSync18(p, { recursive: true, mode: 448 });
@@ -13000,7 +13855,7 @@ function liveHeartbeats(sessionId, d0 = {}) {
     if (!/^\d+\.json$/.test(n)) continue;
     let hb;
     try {
-      hb = JSON.parse(readFileSync17(join26(dir3, n), "utf8"));
+      hb = JSON.parse(readFileSync17(join27(dir3, n), "utf8"));
     } catch {
       continue;
     }
@@ -13024,8 +13879,8 @@ async function dshDeliver(sessionId, msg, d0 = {}) {
   const ackDir = sub(d.home, "ack", d.channel);
   ensureDir2(inbox);
   ensureDir2(ackDir);
-  const letter = join26(inbox, `${sessionId}.${msg.instructionId}.json`);
-  const ackPath = join26(ackDir, `${msg.instructionId}.json`);
+  const letter = join27(inbox, `${sessionId}.${msg.instructionId}.json`);
+  const ackPath = join27(ackDir, `${msg.instructionId}.json`);
   if (existsSync12(letter)) return { ok: false, reason: "inbox_busy" };
   const writtenAt = d.now();
   writeJson(letter, { instructionId: msg.instructionId, text: msg.text, at: writtenAt, ...d0.addressed ? { pid: hb.pid } : {} });
@@ -13098,7 +13953,7 @@ function clearDir(inbox) {
   let n = 0;
   for (const f of names) {
     try {
-      rmSync14(join26(inbox, f), { force: true });
+      rmSync14(join27(inbox, f), { force: true });
       n++;
     } catch {
     }
@@ -13164,7 +14019,7 @@ function defaultCodexAppServers() {
 }
 function opencodeReady() {
   const mod = ocPluginModule(installedHookPath());
-  return isOcPluginInstalled(opencodePluginPath()) && existsSync13(mod) && existsSync13(join27(dirname10(mod), "ocTranslate.mjs"));
+  return isOcPluginInstalled(opencodePluginPath()) && existsSync13(mod) && existsSync13(join28(dirname10(mod), "ocTranslate.mjs"));
 }
 var INTERNAL_PROMPT_MARK = "[DeskBuddy]";
 function orphanResumeText(summary2) {
@@ -13370,7 +14225,10 @@ var Daemon = class {
       policy: () => loadConfig().approvalPolicy ?? "commands",
       resume: (r, kind) => this.#scheduleResume(r, kind),
       log,
-      now: this.#deps.now
+      now: this.#deps.now,
+      qoderScreen: qoderScreen(),
+      // Qoder / Qoder CN 桌面 App 里的确认卡用 App 的真实选项（连接在下面按品牌建好，这里按需取）
+      qoderApp: new QoderAppApprovals({ conn: (tool) => this.#qoderConns.find((c) => c.tool === tool) ?? null, log })
     });
     this.#workbuddy = new WorkbuddyBridge({
       gate: (req, signal) => this.#coord.onGate(req, signal),
@@ -15309,7 +16167,7 @@ async function runDisable(tools, opts = {}) {
 
 // src/commands/install.ts
 import { mkdirSync as mkdirSync19, rmSync as rmSync16, writeFileSync as writeFileSync19 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 
 // src/commands/setup.ts
 import qrcode from "qrcode-terminal";
@@ -15317,9 +16175,9 @@ import qrcode from "qrcode-terminal";
 // src/commands/remoteCwd.ts
 import { existsSync as existsSync14, statSync as statSync14 } from "fs";
 import { createInterface } from "readline";
-import { homedir as homedir7 } from "os";
+import { homedir as homedir8 } from "os";
 import { isAbsolute as isAbsolute5, resolve as resolve8 } from "path";
-function normalizePath(raw, home = homedir7()) {
+function normalizePath(raw, home = homedir8()) {
   const s2 = (raw || "").trim();
   if (!s2) return null;
   const expanded = s2 === "~" ? home : s2.startsWith("~/") || process.platform === "win32" && s2.startsWith("~\\") ? resolve8(home, s2.slice(2)) : s2;
@@ -15526,7 +16384,7 @@ function inSandbox(env) {
 }
 function precheckWritable(dirs) {
   for (const dir3 of dirs) {
-    const probe = join28(dir3, `.deskbuddy-probe-${process.pid}`);
+    const probe = join29(dir3, `.deskbuddy-probe-${process.pid}`);
     try {
       mkdirSync19(dir3, { recursive: true });
       writeFileSync19(probe, "");
@@ -15936,7 +16794,7 @@ async function runAutoSwitch(opts) {
 // src/wrap/run.ts
 import { randomBytes as randomBytes10 } from "crypto";
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync21, statSync as statSync16, truncateSync as truncateSync3 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 import { StringDecoder as StringDecoder2 } from "string_decoder";
 
 // src/wrap/injector.ts
@@ -16405,67 +17263,12 @@ function runDirect(real2, args, env = process.env) {
   });
 }
 
-// src/wrap/screenRules.ts
-var Q_RULE_RE = /^(?:─{20,}|-{20,})$/;
-var Q_TRUST_RE = /Do you trust the files in this folder\?/;
-var Q_PERMISSION_RE = /Permission Required|Apply this change\?|\d\. Allow once|\d\. Allow for this session/;
-var Q_LOGIN_RE = /Sign in to continue|Login with QoderCN|How would you like to authenticate/;
-var Q_BUSY_RE = /\(esc to cancel\b/;
-var Q_PLACEHOLDER_RE = /^Type your message or @\S*$/;
-var Q_FOOTER_RE = /· ctx\b/;
-function bottomRegion(lines3, rules) {
-  const anchor = rules.length >= 3 ? rules[rules.length - 3] : rules[rules.length - 1];
-  return lines3.slice(Math.max(0, anchor - 1)).join("\n");
-}
-function qoderCnRule(lines3) {
-  const rules = [];
-  lines3.forEach((l, i) => {
-    if (Q_RULE_RE.test(l.trim())) rules.push(i);
-  });
-  if (rules.length === 0) return { permission: false, input: null };
-  const text = bottomRegion(lines3, rules);
-  if (Q_TRUST_RE.test(text)) return { permission: false, input: null, trust: true };
-  if (Q_LOGIN_RE.test(text)) return { permission: false, input: null, dialog: "login" };
-  const permission = Q_PERMISSION_RE.test(text);
-  let input = null;
-  if (rules.length >= 2) {
-    const a = rules[rules.length - 2];
-    const b = rules[rules.length - 1];
-    const box = lines3.slice(a + 1, b).map((l) => l.trimEnd());
-    if (box.length > 0 && /^\s*>/.test(box[0])) input = box.join("\n").replace(/^\s*>\s?/, "").trim();
-  }
-  const v = { permission, input };
-  if (Q_BUSY_RE.test(text)) v.busy = true;
-  if (input !== null && Q_PLACEHOLDER_RE.test(input)) v.placeholder = true;
-  else if (input !== null && input.startsWith("/")) v.dialog = "slash-menu";
-  if (!v.dialog && lines3.slice(rules[rules.length - 1] + 1).some((l) => l.trim() !== "" && !Q_FOOTER_RE.test(l))) v.dialog = "popup";
-  return v;
-}
-function textRejectFor(tool) {
-  if (tool !== "qoder_cn") return void 0;
-  return (text) => /^[/!]/.test(oneLine(text)) ? "slash_command" : null;
-}
-var RULES = {
-  claude_code: inspectLines,
-  qoder_cn: qoderCnRule
-};
-function screenRuleFor(tool) {
-  return RULES[tool] ?? (() => null);
-}
-var INJECT_READY = {
-  claude_code: true,
-  qoder_cn: true
-};
-function injectReady(tool) {
-  return INJECT_READY[tool] === true;
-}
-
 // src/wrap/codexLaunch.ts
 import { execFileSync as execFileSync7, spawn as spawn6 } from "child_process";
 import { closeSync as closeSync10, mkdirSync as mkdirSync20, openSync as openSync10, readdirSync as readdirSync15, readFileSync as readFileSync19, rmSync as rmSync18, statSync as statSync15, truncateSync as truncateSync2, writeFileSync as writeFileSync20, renameSync as renameSync14 } from "fs";
 import { request as request2 } from "http";
 import { createServer as createServer5 } from "net";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 var TAKEOVER_VALUE_OPTS = /* @__PURE__ */ new Set(["-c", "--config", "-m", "--model", "-s", "--sandbox", "-a", "--ask-for-approval", "-C", "--cd", "--enable", "--disable"]);
 var SHORT_VALUE_OPTS = /* @__PURE__ */ new Set(["-c", "-m", "-s", "-a", "-C"]);
 var TAKEOVER_FLAGS = /* @__PURE__ */ new Set(["--search", "--no-alt-screen", "--dangerously-bypass-approvals-and-sandbox"]);
@@ -16634,10 +17437,10 @@ async function runCodexWindow(real2, args, d) {
 }
 var MAX_LOG_BYTES2 = 1024 * 1024;
 function appServerLogPath() {
-  return join29(deskbuddyHome(), "codex-app-server.log");
+  return join30(deskbuddyHome(), "codex-app-server.log");
 }
 function windowsDir2() {
-  return join29(deskbuddyHome(), "codex-windows");
+  return join30(deskbuddyHome(), "codex-windows");
 }
 function pidAlive5(pid) {
   try {
@@ -16727,7 +17530,7 @@ function killOwnServer(pid, url, args = freshArgs, kill = (p) => killServer(p))
   if (a && isAppServerArgs(a, url)) kill(pid);
 }
 function recordPath(rec) {
-  return join29(windowsDir2(), `${rec.server}.json`);
+  return join30(windowsDir2(), `${rec.server}.json`);
 }
 function writeRecord(rec) {
   try {
@@ -16752,7 +17555,7 @@ function reapWindows(dir3 = windowsDir2(), alive = pidAlive5, args = freshArgs,
     return;
   }
   for (const n of names) {
-    const p = join29(dir3, n);
+    const p = join30(dir3, n);
     let rec;
     try {
       rec = JSON.parse(readFileSync19(p, "utf8"));
@@ -16775,7 +17578,7 @@ function reapWindows(dir3 = windowsDir2(), alive = pidAlive5, args = freshArgs,
 function launchLog(line) {
   try {
     mkdirSync20(deskbuddyHome(), { recursive: true });
-    writeFileSync20(join29(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
+    writeFileSync20(join30(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
 `, { flag: "a" });
   } catch {
   }
@@ -16798,9 +17601,9 @@ function defaultCodexWindowDeps(base) {
 }
 
 // src/wrap/promptLaunch.ts
-import { randomBytes as randomBytes8, randomUUID as randomUUID2 } from "crypto";
-import { homedir as homedir8 } from "os";
-import { join as join30 } from "path";
+import { randomBytes as randomBytes8, randomUUID as randomUUID3 } from "crypto";
+import { homedir as homedir9 } from "os";
+import { join as join31 } from "path";
 var FIRST_LINE_WAIT_MS2 = 2 * 60 * 1e3;
 function promptArgs(text) {
   return text ? ["--", prepare(text)] : [];
@@ -16808,7 +17611,7 @@ function promptArgs(text) {
 function promptEnv(tool, env, launcherPid = process.pid, answerWindowId = "") {
   const out = { ...env };
   if (tool === "workbuddy") {
-    if (!out.CODEBUDDY_CONFIG_DIR) out.CODEBUDDY_CONFIG_DIR = join30(homedir8(), ".workbuddy");
+    if (!out.CODEBUDDY_CONFIG_DIR) out.CODEBUDDY_CONFIG_DIR = join31(homedir9(), ".workbuddy");
     out.DESKBUDDY_LAUNCHER_PID = String(launcherPid);
     out.DESKBUDDY_LAUNCHED_TOOL = tool;
     if (answerWindowId) out.DESKBUDDY_LAUNCHED_WINDOW = answerWindowId;
@@ -16915,7 +17718,7 @@ async function runPromptLaunch(tool, windowId, cwd, d) {
     d.log(`[${windowId.slice(0, 8)}] \u6CA1\u7B49\u5230\u9996\u53E5\uFF0C\u8D77\u4E00\u4E2A\u7A7A\u7684 ${tool}`);
   }
   const answerWindowId = tool === "workbuddy" || tool === "codex" ? randomBytes8(16).toString("hex") : "";
-  const sid = REGISTER_TOOLS.has(tool) ? (d.newSessionId ?? randomUUID2)() : "";
+  const sid = REGISTER_TOOLS.has(tool) ? (d.newSessionId ?? randomUUID3)() : "";
   const env = tool === "qoder_cn" ? { ...promptEnv(tool, d.env), ...real2.env ?? {} } : promptEnv(tool, d.env, process.pid, answerWindowId);
   const args = [...launchArgs(tool, d.platform, void 0, sid), ...promptArgs(text)];
   const early = sid ? startEarlyRegister(tool, sid, cwd, text, d) : null;
@@ -17073,6 +17876,7 @@ async function applyAnswer(req, io, trust) {
   const id = req.instructionId;
   if (req.expireAt > 0 && Date.now() > req.expireAt) return { instructionId: id, status: "rejected", reason: "expired" };
   const a = req.answer;
+  if (a.kind === "qoder-read" || a.kind === "qoder-key") return { instructionId: id, status: "rejected", reason: "unsupported" };
   if ((a.kind === "trust" || a.kind === "probe" && a.trust) && !trust) return { instructionId: id, status: "rejected", reason: "unsupported" };
   if (a.kind === "probe" && a.login) {
     if (!io.loginOnScreen) return { instructionId: id, status: "rejected", reason: "unsupported" };
@@ -17310,8 +18114,8 @@ async function launchTranscriptReady(tool, sessionId) {
     return false;
   }
 }
-var defaultDeps = { qoder: (j) => syncQoderApp(j), workbuddy: (j) => registerWorkbuddySession(j) };
-async function launchRegister(tool, sessionId, cwd, firstLine, final, d = defaultDeps) {
+var defaultDeps2 = { qoder: (j) => syncQoderApp(j), workbuddy: (j) => registerWorkbuddySession(j) };
+async function launchRegister(tool, sessionId, cwd, firstLine, final, d = defaultDeps2) {
   if (tool === "workbuddy") return d.workbuddy({ sessionId, cwd, fallbackTitle: firstLine ?? "" });
   if (tool !== "qoder_cn") return "skip tool";
   const r = await d.qoder({ tool, kind: "register", sessionId, cwd, fallbackTitle: firstLine ?? "" });
@@ -17339,7 +18143,7 @@ function childEnv(src, windowId, takeover = true) {
 }
 function wrapLog(line) {
   try {
-    const p = join31(deskbuddyHome(), "wrap.log");
+    const p = join32(deskbuddyHome(), "wrap.log");
     mkdirSync21(deskbuddyHome(), { recursive: true });
     try {
       if (statSync16(p).size > MAX_LOG_BYTES3) truncateSync3(p, 0);
@@ -17643,17 +18447,29 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false, takeover
     }
   };
   let holdDepth = 0;
-  const holdKeys = (on) => {
+  let holdDrop;
+  const holdKeys = (on, drop) => {
     if (on) {
       holdDepth++;
       held = held ?? [];
       return;
     }
+    if (drop) holdDrop = drop;
     holdDepth = Math.max(0, holdDepth - 1);
     if (holdDepth > 0) return;
     const h = held ?? [];
+    const d = holdDrop;
     held = null;
-    for (const s2 of h) toPty(s2);
+    holdDrop = void 0;
+    for (const s2 of h) if (!d || !d(s2)) toPty(s2);
+  };
+  const qoderBoxes = takeover && tool === "qoder_cn" ? new QoderBoxTracker() : null;
+  let boxTimer = null;
+  const trackBoxes = () => {
+    try {
+      qoderBoxes?.update(term && !finished ? screenLines(term) : null);
+    } catch {
+    }
   };
   const injector = new Injector({
     now: () => Date.now(),
@@ -17681,6 +18497,13 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false, takeover
       }
     }
     injector.noteOutput();
+    if (qoderBoxes && !boxTimer) {
+      boxTimer = setTimeout(() => {
+        boxTimer = null;
+        trackBoxes();
+      }, 30);
+      boxTimer.unref?.();
+    }
   });
   const onStdin = (b) => {
     const s2 = typeof b === "string" ? b : decoder.write(b);
@@ -17762,10 +18585,32 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false, takeover
         }
       },
       deps2.platform,
-      // 设备答复只收信任框（授权框走 hook 的 PermissionRequest，不经这里）；用户自己开的窗口一律不收
+      // 设备答复收信任框，以及 Qoder CN 授权框的读屏 / 写键（spec 2026-10-09 qodercn-tui-screen-options）；
+      // 其余授权框走 hook 的 PermissionRequest，不经这里
       (req, reply) => {
         reply({ instructionId: req.instructionId, status: "ack" });
         const a = req.answer;
+        if (a.kind === "qoder-read" || a.kind === "qoder-key") {
+          if (!qoderBoxes) {
+            reply({ instructionId: req.instructionId, status: "rejected", reason: "unsupported" });
+            return;
+          }
+          const io = {
+            screen: () => term && !finished ? screenLines(term) : null,
+            write: toPty,
+            sleep: (ms) => new Promise((res) => setTimeout(res, ms)),
+            hold: holdKeys,
+            track: qoderBoxes
+          };
+          const run = () => applyQoderAnswer(req, io).then((r) => {
+            const out = r ?? { instructionId: req.instructionId, status: "rejected", reason: "unsupported" };
+            if (a.kind === "qoder-key") deps2.log(`[${windowId.slice(0, 8)}] \u8BBE\u5907\u6388\u6743\u9009\u9879\u7B2C ${a.n} \u9879\u5199\u952E\uFF1A${out.status}${out.reason ? " " + out.reason : ""}`);
+            reply(out);
+          });
+          if (a.kind === "qoder-read") void run().catch(() => reply({ instructionId: req.instructionId, status: "rejected", reason: "no_screen" }));
+          else answerChain = answerChain.then(run).catch(() => reply({ instructionId: req.instructionId, status: "failed", mode: "window", reason: "partial" }));
+          return;
+        }
         if (trust && (a.kind === "trust" || a.kind === "probe" && a.trust)) trust.noteContact(a.prompt ?? "trust");
         if (!trustCtx || !(a.kind === "trust" || a.kind === "probe" && a.trust)) {
           reply({ instructionId: req.instructionId, status: "rejected", reason: "unsupported" });
@@ -17799,6 +18644,7 @@ function runAttached(tool, p, term0, windowId, deps2, launched = false, takeover
   if (takeover) timer = setInterval(() => {
     injector.tick().catch(() => {
     });
+    trackBoxes();
     try {
       withdraw?.tick();
     } catch {