deskbuddy 0.2.0-beta.3 → 0.2.0-beta.4

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/commands/daemon.ts
-import { writeFileSync as writeFileSync14, rmSync as rmSync9 } from "fs";
+import { writeFileSync as writeFileSync17, rmSync as rmSync12 } from "fs";
 
 // src/core/config.ts
 import { randomUUID } from "crypto";
@@ -406,7 +406,7 @@ function pidFilePath() {
 }
 
 // src/daemon/index.ts
-import { randomBytes as randomBytes6 } from "crypto";
+import { randomBytes as randomBytes7 } from "crypto";
 import { existsSync as existsSync10 } from "fs";
 import { basename as basename6 } from "path";
 import WebSocket2 from "ws";
@@ -454,8 +454,8 @@ function isOcPluginInstalled(pluginPath) {
 var OC_NOTICE = "   \u5DF2\u5F00\u7740\u7684 opencode \u7A97\u53E3\u91CD\u5F00\u540E\u751F\u6548";
 
 // src/core/state.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync4, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
-import { join as join4 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync5, readdirSync as readdirSync2, readFileSync as readFileSync5, renameSync as renameSync4, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
+import { join as join5 } from "path";
 
 // src/core/process.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -491,42 +491,167 @@ function isAlive(pid, expectName) {
   return name != null && name.toLowerCase().includes(expectName.toLowerCase());
 }
 
+// src/core/ended.ts
+import { closeSync, mkdirSync as mkdirSync4, openSync, readdirSync, readFileSync as readFileSync4, readSync, realpathSync, renameSync as renameSync3, rmSync as rmSync2, statSync, writeFileSync as writeFileSync4 } from "fs";
+import { join as join4 } from "path";
+var ENDED_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+var SID_RE = /^[A-Za-z0-9_-]{1,64}$/;
+function endedDir(home = deskbuddyHome()) {
+  return join4(home, "ended");
+}
+function writeEnded(s, now = Date.now()) {
+  if (!SID_RE.test(s.sessionId)) return;
+  try {
+    const dir = endedDir();
+    mkdirSync4(dir, { recursive: true, mode: 448 });
+    const rec = { sessionId: s.sessionId, tool: s.tool, cwd: s.cwd ?? "", interactive: s.interactive === true, endedAt: now };
+    const file = join4(dir, `${s.sessionId}.json`);
+    const tmp = `${file}.${process.pid}.tmp`;
+    writeFileSync4(tmp, JSON.stringify(rec), { encoding: "utf8", mode: 384 });
+    renameSync3(tmp, file);
+    for (const n of readdirSync(dir)) {
+      const f = join4(dir, n);
+      try {
+        if (now - statSync(f).mtimeMs > ENDED_TTL_MS) rmSync2(f, { force: true });
+      } catch {
+      }
+    }
+  } catch {
+  }
+}
+function readEnded(sessionId, now = Date.now()) {
+  if (!SID_RE.test(sessionId)) return null;
+  try {
+    const r = JSON.parse(readFileSync4(join4(endedDir(), `${sessionId}.json`), "utf8"));
+    if (!r || r.sessionId !== sessionId || typeof r.endedAt !== "number" || now - r.endedAt > ENDED_TTL_MS) return null;
+    return r;
+  } catch {
+    return null;
+  }
+}
+var TRANSCRIPT_TAIL = 512 * 1024;
+var TRANSCRIPT_HEAD = 64 * 1024;
+function projectDirName(cwd) {
+  return cwd.replace(/[^A-Za-z0-9]/g, "-");
+}
+function readChunk(file, fromEnd, max) {
+  let fd;
+  try {
+    const size = statSync(file).size;
+    const len = Math.min(size, max);
+    const buf = Buffer.alloc(len);
+    fd = openSync(file, "r");
+    readSync(fd, buf, 0, len, fromEnd ? size - len : 0);
+    return buf.toString("utf8");
+  } finally {
+    if (fd !== void 0) closeSync(fd);
+  }
+}
+function cwdsIn(text) {
+  const out = [];
+  for (const line of text.split("\n")) {
+    if (line.indexOf('"cwd"') === -1) continue;
+    try {
+      const o = JSON.parse(line);
+      if (typeof o.cwd === "string" && o.cwd) out.push(o.cwd);
+    } catch {
+    }
+  }
+  return out;
+}
+function claudeTranscriptCwd(sessionId, home = claudeHome()) {
+  if (!SID_RE.test(sessionId)) return "";
+  let dirs = [];
+  try {
+    dirs = readdirSync(join4(home, "projects"));
+  } catch {
+    return "";
+  }
+  for (const d of dirs) {
+    const file = join4(home, "projects", d, `${sessionId}.jsonl`);
+    try {
+      statSync(file);
+    } catch {
+      continue;
+    }
+    try {
+      const tail = cwdsIn(readChunk(file, true, TRANSCRIPT_TAIL));
+      for (let i = tail.length - 1; i >= 0; i--) if (projectDirName(tail[i]).toLowerCase() === d.toLowerCase()) return tail[i];
+      return cwdsIn(readChunk(file, false, TRANSCRIPT_HEAD))[0] ?? "";
+    } catch {
+      return "";
+    }
+  }
+  return "";
+}
+function canonDir(p, platform = process.platform) {
+  if (platform === "win32") return p.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
+  let r = p;
+  try {
+    r = realpathSync(p);
+  } catch {
+  }
+  return r.length > 1 ? r.replace(/\/+$/, "") : r;
+}
+function resolveEndedCwd(sessionId, tool, d) {
+  const rec = d.readEnded(sessionId);
+  const a = rec && rec.tool === tool ? rec.cwd || "" : "";
+  const b = tool === "claude_code" ? d.transcriptCwd(sessionId) : "";
+  const canon = d.canon ?? ((p) => canonDir(p));
+  if (a && b && canon(a) !== canon(b)) return { ok: false, reason: "no_cwd" };
+  const cwd = a || b;
+  if (!cwd) return { ok: false, reason: "no_cwd" };
+  if (!d.isDir(cwd)) return { ok: false, reason: "cwd_gone" };
+  return { ok: true, cwd };
+}
+function isDirSync(p) {
+  try {
+    return statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+}
+
 // src/core/state.ts
 function stateDir() {
-  return join4(deskbuddyHome(), "state");
+  return join5(deskbuddyHome(), "state");
 }
 function statePath(sessionId) {
   const safe = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
-  return join4(stateDir(), `${safe || "unknown"}.json`);
+  return join5(stateDir(), `${safe || "unknown"}.json`);
 }
 function readState(sessionId) {
   try {
-    return JSON.parse(readFileSync4(statePath(sessionId), "utf8"));
+    return JSON.parse(readFileSync5(statePath(sessionId), "utf8"));
   } catch {
     return null;
   }
 }
+function retireState(s, now = Date.now()) {
+  writeEnded(s, now);
+  removeState(s.sessionId);
+}
 function removeState(sessionId) {
   try {
-    rmSync2(statePath(sessionId), { force: true });
+    rmSync3(statePath(sessionId), { force: true });
   } catch {
   }
 }
 function readAliveStates(tool) {
   if (!existsSync4(stateDir())) return [];
   const alive = [];
-  for (const file of readdirSync(stateDir())) {
+  for (const file of readdirSync2(stateDir())) {
     if (!file.endsWith(".json")) continue;
     let s;
     try {
-      s = JSON.parse(readFileSync4(join4(stateDir(), file), "utf8"));
+      s = JSON.parse(readFileSync5(join5(stateDir(), file), "utf8"));
     } catch {
-      rmSync2(join4(stateDir(), file), { force: true });
+      rmSync3(join5(stateDir(), file), { force: true });
       continue;
     }
     if (s.tool !== tool) continue;
     if (s.pid && !isAlive(s.pid, s.pidName)) {
-      removeState(s.sessionId);
+      retireState(s);
       continue;
     }
     alive.push(s);
@@ -534,16 +659,16 @@ function readAliveStates(tool) {
   return alive;
 }
 function noticeDir() {
-  return join4(deskbuddyHome(), "notice");
+  return join5(deskbuddyHome(), "notice");
 }
 function writeNotice(sessionId, text, now = Date.now()) {
   try {
     const safe = sessionId.replace(/[^A-Za-z0-9_-]/g, "");
     if (!safe) return;
-    mkdirSync4(noticeDir(), { recursive: true });
-    const file = join4(noticeDir(), `${safe}.json`);
-    writeFileSync4(file + ".tmp", JSON.stringify({ text, at: now }), "utf8");
-    renameSync3(file + ".tmp", file);
+    mkdirSync5(noticeDir(), { recursive: true });
+    const file = join5(noticeDir(), `${safe}.json`);
+    writeFileSync5(file + ".tmp", JSON.stringify({ text, at: now }), "utf8");
+    renameSync4(file + ".tmp", file);
   } catch {
   }
 }
@@ -552,7 +677,7 @@ var ALIAS_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 function resolveAlias(sessionId, now = Date.now()) {
   let map = {};
   try {
-    map = JSON.parse(readFileSync4(join4(deskbuddyHome(), "alias.json"), "utf8")) || {};
+    map = JSON.parse(readFileSync5(join5(deskbuddyHome(), "alias.json"), "utf8")) || {};
   } catch {
     return sessionId;
   }
@@ -568,22 +693,22 @@ function resolveAlias(sessionId, now = Date.now()) {
 // src/core/api.ts
 import { execFileSync as execFileSync3 } from "child_process";
 import { createHash, randomBytes, randomUUID as randomUUID2 } from "crypto";
-import { readFileSync as readFileSync6 } from "fs";
+import { readFileSync as readFileSync7 } from "fs";
 import { release } from "os";
 
 // src/core/hookFile.ts
-import { copyFileSync, existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync5, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "fs";
+import { copyFileSync, existsSync as existsSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync6, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "fs";
 import { createRequire } from "module";
-import { dirname as dirname3, join as join5 } from "path";
+import { dirname as dirname3, join as join6 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var here = dirname3(fileURLToPath2(import.meta.url));
 function packagedHookPath() {
   const candidates = [
-    join5(here, "hook.cjs"),
+    join6(here, "hook.cjs"),
     // dist/cli.js 旁边（发布形态）
-    join5(here, "..", "hook", "hook.cjs"),
+    join6(here, "..", "hook", "hook.cjs"),
     // dist/../hook/
-    join5(here, "..", "..", "hook", "hook.cjs")
+    join6(here, "..", "..", "hook", "hook.cjs")
     // src/core/../../hook/（开发形态）
   ];
   for (const c of candidates) {
@@ -603,11 +728,11 @@ function packageVersion() {
   return "0.0.0-dev";
 }
 function hookVersionPath(target = installedHookPath()) {
-  return join5(dirname3(target), "hook-version");
+  return join6(dirname3(target), "hook-version");
 }
 function installedHookVersion(target = installedHookPath()) {
   try {
-    return readFileSync5(hookVersionPath(target), "utf8").trim() || null;
+    return readFileSync6(hookVersionPath(target), "utf8").trim() || null;
   } catch {
     return null;
   }
@@ -615,29 +740,29 @@ function installedHookVersion(target = installedHookPath()) {
 function atomicCopy(from, to) {
   const tmp = `${to}.${process.pid}.tmp`;
   copyFileSync(from, tmp);
-  renameSync4(tmp, to);
+  renameSync5(tmp, to);
 }
 function syncHookFile(opts = {}) {
   const target = opts.target ?? installedHookPath();
   const version = opts.version ?? packageVersion();
   const SIBLINGS = ["gate.cjs", "opencode.mjs", "wake.cjs"];
   const siblingMissing = () => SIBLINGS.some((name) => {
-    if (existsSync5(join5(dirname3(target), name))) return false;
+    if (existsSync5(join6(dirname3(target), name))) return false;
     try {
-      return existsSync5(join5(dirname3(opts.source ?? packagedHookPath()), name));
+      return existsSync5(join6(dirname3(opts.source ?? packagedHookPath()), name));
     } catch {
       return false;
     }
   });
   if (installedHookVersion(target) === version && existsSync5(target) && !siblingMissing()) return false;
   const source = opts.source ?? packagedHookPath();
-  mkdirSync5(dirname3(target), { recursive: true });
+  mkdirSync6(dirname3(target), { recursive: true });
   atomicCopy(source, target);
   for (const name of SIBLINGS) {
-    const from = join5(dirname3(source), name);
-    if (existsSync5(from)) atomicCopy(from, join5(dirname3(target), name));
+    const from = join6(dirname3(source), name);
+    if (existsSync5(from)) atomicCopy(from, join6(dirname3(target), name));
   }
-  writeFileSync5(hookVersionPath(target), version, "utf8");
+  writeFileSync6(hookVersionPath(target), version, "utf8");
   return true;
 }
 
@@ -724,7 +849,7 @@ var defaultOsVersionDeps = {
     stdio: ["ignore", "pipe", "ignore"],
     timeout: 2e3
   }),
-  readOsRelease: () => readFileSync6("/etc/os-release", "utf8"),
+  readOsRelease: () => readFileSync7("/etc/os-release", "utf8"),
   kernelRelease: () => release()
 };
 function productOsVersion(platform = process.platform, deps = defaultOsVersionDeps) {
@@ -808,7 +933,7 @@ async function postReport(payload) {
 import { basename as basename2 } from "path";
 var KEEPALIVE_MS = 2 * 60 * 1e3;
 var MAX_SESSIONS = 20;
-var CAPS = ["cmd_result", "window_inject"];
+var CAPS = ["cmd_result", "window_inject", "resume_ended"];
 function buildSnapshot(states, tool, cfg, nowMs, remote) {
   const sessions = states.filter((s) => s.tool === tool).sort((a, b) => b.updatedAt - a.updatedAt).slice(0, MAX_SESSIONS).map((s) => ({
     sessionId: s.sessionId,
@@ -826,23 +951,23 @@ function buildSnapshot(states, tool, cfg, nowMs, remote) {
 
 // src/core/dirs.ts
 import { createHmac, randomBytes as randomBytes2 } from "crypto";
-import { chmodSync, existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
-import { basename as basename3, join as join6 } from "path";
+import { chmodSync, existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
+import { basename as basename3, join as join7 } from "path";
 var DIRS_REPORT_MAX = 10;
 function dirsPath() {
-  return join6(deskbuddyHome(), "dirs.json");
+  return join7(deskbuddyHome(), "dirs.json");
 }
 function dirSecret() {
-  const file = join6(deskbuddyHome(), "dir-secret");
+  const file = join7(deskbuddyHome(), "dir-secret");
   try {
-    const s2 = readFileSync7(file, "utf8").trim();
+    const s2 = readFileSync8(file, "utf8").trim();
     if (s2) return s2;
   } catch {
   }
   const s = randomBytes2(32).toString("hex");
   try {
-    mkdirSync6(deskbuddyHome(), { recursive: true });
-    writeFileSync6(file, s, { encoding: "utf8", mode: 384 });
+    mkdirSync7(deskbuddyHome(), { recursive: true });
+    writeFileSync7(file, s, { encoding: "utf8", mode: 384 });
     chmodSync(file, 384);
   } catch {
   }
@@ -853,7 +978,7 @@ function dirRef(path) {
 }
 function readMap() {
   try {
-    const m = JSON.parse(readFileSync7(dirsPath(), "utf8"));
+    const m = JSON.parse(readFileSync8(dirsPath(), "utf8"));
     const out = {};
     for (const [k, v] of Object.entries(m ?? {})) if (typeof v === "number") out[k] = v;
     return out;
@@ -951,7 +1076,7 @@ function isExpired(cmd, now = Date.now()) {
 // src/daemon/executor.ts
 import { execFile as execFile2, execFileSync as execFileSync4 } from "child_process";
 import { homedir as homedir4 } from "os";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 
 // src/daemon/gate/settings.ts
 import { existsSync as existsSync7 } from "fs";
@@ -1009,16 +1134,16 @@ function codexGateArgs(t) {
 }
 
 // src/daemon/locate.ts
-import { accessSync, constants, existsSync as existsSync8, readFileSync as readFileSync8, statSync } from "fs";
+import { accessSync, constants, existsSync as existsSync8, lstatSync, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { delimiter, dirname as dirname4, join as join7 } from "path";
+import { delimiter, dirname as dirname4, join as join8 } from "path";
 var defaultLocateDeps = () => ({
   home: homedir3(),
   path: process.env.PATH ?? "",
   nodePath: process.execPath,
   isExecutable: (p) => {
     try {
-      if (!statSync(p).isFile()) return false;
+      if (!statSync2(p).isFile()) return false;
       accessSync(p, constants.X_OK);
       return true;
     } catch {
@@ -1026,38 +1151,46 @@ var defaultLocateDeps = () => ({
     }
   },
   exists: (p) => existsSync8(p),
+  lexists: (p) => {
+    try {
+      lstatSync(p);
+      return true;
+    } catch {
+      return false;
+    }
+  },
   platform: process.platform,
   appData: process.env.APPDATA ?? "",
   localAppData: process.env.LOCALAPPDATA ?? "",
   readText: (p) => {
     try {
-      return readFileSync8(p, "utf8");
+      return readFileSync9(p, "utf8");
     } catch {
       return null;
     }
   },
   // 🔴 daemon 自己也不能找到垫片：远程任务要的是真程序（窗口接管 spec 2026-09-30 §3.1）
-  skipDirs: [join7(deskbuddyHome(), "bin")]
+  skipDirs: [join8(deskbuddyHome(), "bin")]
 });
 var isWin = (d) => (d.platform ?? process.platform) === "win32";
 var WIN_EXTS = [".exe", ".cmd", ".bat"];
 function extraBinDirs(home, nodePath = "", win) {
   if (win) {
     return [
-      join7(home, ".local", "bin"),
-      ...win.appData ? [join7(win.appData, "npm")] : [],
-      join7(home, ".bun", "bin"),
-      ...win.localAppData ? [join7(win.localAppData, "Volta", "bin")] : [],
-      join7(home, "scoop", "shims"),
+      join8(home, ".local", "bin"),
+      ...win.appData ? [join8(win.appData, "npm")] : [],
+      join8(home, ".bun", "bin"),
+      ...win.localAppData ? [join8(win.localAppData, "Volta", "bin")] : [],
+      join8(home, "scoop", "shims"),
       ...nodePath ? [dirname4(nodePath)] : []
     ];
   }
   return [
-    join7(home, ".local", "bin"),
-    join7(home, ".claude", "local"),
-    join7(home, ".npm-global", "bin"),
-    join7(home, ".bun", "bin"),
-    join7(home, ".volta", "bin"),
+    join8(home, ".local", "bin"),
+    join8(home, ".claude", "local"),
+    join8(home, ".npm-global", "bin"),
+    join8(home, ".bun", "bin"),
+    join8(home, ".volta", "bin"),
     "/opt/homebrew/bin",
     "/usr/local/bin",
     ...nodePath ? [dirname4(nodePath)] : []
@@ -1071,7 +1204,7 @@ function whichAllIn(name, d) {
   const out = [];
   for (const dir of binDirs(d)) {
     for (const ext of exts) {
-      const p = join7(dir, name + ext);
+      const p = join8(dir, name + ext);
       if (d.isExecutable(p)) out.push(p);
     }
   }
@@ -1095,7 +1228,7 @@ function binDirs(d) {
 function parseNpmCmdShim(shimPath, text) {
   const m = text.match(/"%~?dp0%?\\?([^"%]+)"\s+%\*/i);
   if (!m) return null;
-  return join7(dirname4(shimPath), m[1].replace(/^\\/, ""));
+  return join8(dirname4(shimPath), m[1].replace(/^\\/, ""));
 }
 function resolveWinLaunch(file, d) {
   const lower = file.toLowerCase();
@@ -1113,16 +1246,22 @@ function resolveWinLaunch(file, d) {
   return null;
 }
 function appDirs(home) {
-  return ["/Applications", join7(home, "Applications")];
+  return ["/Applications", join8(home, "Applications")];
 }
 function winAppDirs(d, product) {
   return [
-    ...d.localAppData ? [join7(d.localAppData, "Programs", product)] : [],
-    join7("C:\\Program Files", product)
+    ...d.localAppData ? [join8(d.localAppData, "Programs", product)] : [],
+    join8("C:\\Program Files", product)
   ];
 }
 var WORKBUDDY_CLI_IN_WIN_APP = "resources/app.asar.unpacked/cli/bin/codebuddy";
 var QODER_CN_WORKER_IN_WIN_APP = "resources/app.asar.unpacked/node_modules/@qoder-ai/qoder-cn-agent-sdk/dist/_worker/qoder-worker-runtime.obf.mjs";
+function winClaudeExeCandidates(d) {
+  return [
+    ...d.home ? [join8(d.home, ".local", "bin", "claude.exe")] : [],
+    ...d.appData ? [join8(d.appData, "npm", "node_modules", "@anthropic-ai", "claude-code", "bin", "claude.exe")] : []
+  ];
+}
 function locateWin(tool, d) {
   const plain = (name) => {
     for (const f of whichAllIn(name, d)) {
@@ -1133,13 +1272,14 @@ function locateWin(tool, d) {
   };
   switch (tool) {
     case "claude_code":
+      for (const p of winClaudeExeCandidates(d)) if (d.exists(p)) return { file: p, prefixArgs: [] };
       return plain("claude");
     case "codex":
       return plain("codex");
     case "workbuddy": {
       for (const dir of winAppDirs(d, "WorkBuddy")) {
         for (const ext of [".exe", ".cmd", ""]) {
-          const p = join7(dir, WORKBUDDY_CLI_IN_WIN_APP + ext);
+          const p = join8(dir, WORKBUDDY_CLI_IN_WIN_APP + ext);
           if (d.exists(p)) {
             const r = resolveWinLaunch(p, d);
             if (r) return r;
@@ -1150,13 +1290,13 @@ function locateWin(tool, d) {
     }
     case "qoder": {
       for (const dir of winAppDirs(d, "Qoder CN")) {
-        const p = join7(dir, QODER_CN_WORKER_IN_WIN_APP);
+        const p = join8(dir, QODER_CN_WORKER_IN_WIN_APP);
         if (d.exists(p)) return { file: d.nodePath, prefixArgs: [p] };
       }
       return plain("qodercli");
     }
     case "opencode": {
-      const p = join7(d.home, ".opencode", "bin", "opencode.exe");
+      const p = join8(d.home, ".opencode", "bin", "opencode.exe");
       if (d.exists(p)) return { file: p, prefixArgs: [] };
       return plain("opencode");
     }
@@ -1179,20 +1319,20 @@ function locate(tool, d = defaultLocateDeps()) {
       return plain("codex");
     case "workbuddy": {
       for (const dir of appDirs(d.home)) {
-        const p = join7(dir, WORKBUDDY_CLI_IN_APP);
+        const p = join8(dir, WORKBUDDY_CLI_IN_APP);
         if (d.isExecutable(p)) return { file: p, prefixArgs: [] };
       }
       return plain("codebuddy");
     }
     case "qoder": {
       for (const dir of appDirs(d.home)) {
-        const p = join7(dir, QODER_CN_WORKER_IN_APP);
+        const p = join8(dir, QODER_CN_WORKER_IN_APP);
         if (d.exists(p)) return { file: d.nodePath, prefixArgs: [p] };
       }
       return plain("qodercli");
     }
     case "opencode": {
-      const p = join7(d.home, ".opencode", "bin", "opencode");
+      const p = join8(d.home, ".opencode", "bin", "opencode");
       if (d.isExecutable(p)) return { file: p, prefixArgs: [] };
       return plain("opencode");
     }
@@ -1205,6 +1345,13 @@ function childPath(d = defaultLocateDeps()) {
   const key = (p) => isWin(d) ? p.toLowerCase() : p;
   return binDirs(d).filter((p) => p && !seen.has(key(p)) && (seen.add(key(p)), true)).join(isWin(d) ? ";" : delimiter);
 }
+function findWt(d = defaultLocateDeps()) {
+  if (!isWin(d)) return null;
+  const hit = whichIn("wt", d);
+  if (hit) return hit;
+  const alias = d.localAppData ? join8(d.localAppData, "Microsoft", "WindowsApps", "wt.exe") : "";
+  return alias && (d.exists(alias) || (d.lexists?.(alias) ?? false)) ? alias : null;
+}
 
 // src/daemon/executor.ts
 var EXEC_TIMEOUT_MS = 10 * 60 * 1e3;
@@ -1284,7 +1431,7 @@ function buildSpawnPlan(cmd, cwd, gate, home = homedir4()) {
     case "codex":
       return { file, args: codexPlan(cmd, gate), cwd };
     case "workbuddy":
-      return { file, args: workbuddyPlan(cmd, gate), cwd, env: { CODEBUDDY_CONFIG_DIR: join8(home, ".workbuddy") } };
+      return { file, args: workbuddyPlan(cmd, gate), cwd, env: { CODEBUDDY_CONFIG_DIR: join9(home, ".workbuddy") } };
     case "qoder":
       return gate ? { file, args: qoderPlan(cmd, gate), cwd } : null;
     case "opencode":
@@ -1451,8 +1598,8 @@ function killTree(child) {
 
 // src/daemon/gate/approvals.ts
 import { createHash as createHash2 } from "crypto";
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync9, renameSync as renameSync5, writeFileSync as writeFileSync7 } from "fs";
-import { join as join9 } from "path";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync10, renameSync as renameSync6, writeFileSync as writeFileSync8 } from "fs";
+import { join as join10 } from "path";
 var RETAIN_MS = 7 * 24 * 60 * 60 * 1e3;
 function fingerprint(toolName, toolInput) {
   let input = "";
@@ -1464,7 +1611,7 @@ function fingerprint(toolName, toolInput) {
   return createHash2("sha256").update(toolName).update("\0").update(input).digest("hex");
 }
 function storePath() {
-  return join9(deskbuddyHome(), "approvals.json");
+  return join10(deskbuddyHome(), "approvals.json");
 }
 var ApprovalStore = class _ApprovalStore {
   #records;
@@ -1473,7 +1620,7 @@ var ApprovalStore = class _ApprovalStore {
   }
   static load() {
     try {
-      const raw = JSON.parse(readFileSync9(storePath(), "utf8"));
+      const raw = JSON.parse(readFileSync10(storePath(), "utf8"));
       return new _ApprovalStore(Array.isArray(raw) ? raw : []);
     } catch {
       return new _ApprovalStore();
@@ -1481,10 +1628,10 @@ var ApprovalStore = class _ApprovalStore {
   }
   save() {
     try {
-      mkdirSync7(deskbuddyHome(), { recursive: true });
+      mkdirSync8(deskbuddyHome(), { recursive: true });
       const tmp = storePath() + ".tmp";
-      writeFileSync7(tmp, JSON.stringify(this.#records), { encoding: "utf8", mode: 384 });
-      renameSync5(tmp, storePath());
+      writeFileSync8(tmp, JSON.stringify(this.#records), { encoding: "utf8", mode: 384 });
+      renameSync6(tmp, storePath());
     } catch {
     }
   }
@@ -1565,8 +1712,8 @@ function mapStatus(s) {
 
 // src/daemon/gate/coordinator.ts
 import { randomUUID as randomUUID3 } from "crypto";
-import { existsSync as existsSync9, realpathSync } from "fs";
-import { basename as basename5, dirname as dirname5, join as join10 } from "path";
+import { existsSync as existsSync9, realpathSync as realpathSync2 } from "fs";
+import { basename as basename5, dirname as dirname5, join as join11 } from "path";
 
 // src/daemon/gate/classify.ts
 import { isAbsolute, relative, resolve, sep } from "path";
@@ -1590,11 +1737,11 @@ function str2(v) {
   return typeof v === "string" ? v : "";
 }
 function truncate(s, max = SUMMARY_MAX) {
-  const oneLine = s.replace(/\s+/g, " ").trim();
-  if (oneLine.length <= max) return oneLine;
+  const oneLine2 = s.replace(/\s+/g, " ").trim();
+  if (oneLine2.length <= max) return oneLine2;
   const keep = max - 3;
   const head = Math.ceil(keep * 0.55);
-  return `${oneLine.slice(0, head)} \u2026 ${oneLine.slice(oneLine.length - (keep - head))}`;
+  return `${oneLine2.slice(0, head)} \u2026 ${oneLine2.slice(oneLine2.length - (keep - head))}`;
 }
 var PROTECTED_DIRS = /* @__PURE__ */ new Set([
   ".git",
@@ -2220,7 +2367,7 @@ function realpathNearest(p) {
   const tail = [];
   for (let i = 0; i < 64; i++) {
     try {
-      if (existsSync9(cur)) return join10(realpathSync(cur), ...tail.reverse());
+      if (existsSync9(cur)) return join11(realpathSync2(cur), ...tail.reverse());
     } catch {
       return p;
     }
@@ -2233,7 +2380,7 @@ function realpathNearest(p) {
 }
 function cwdForms(cwd) {
   try {
-    const real2 = realpathSync(cwd);
+    const real2 = realpathSync2(cwd);
     return real2 === cwd ? [cwd] : [cwd, real2];
   } catch {
     return [cwd];
@@ -2243,11 +2390,11 @@ function cwdForms(cwd) {
 // src/daemon/gate/server.ts
 import { randomBytes as randomBytes3, timingSafeEqual } from "crypto";
 import { createServer } from "http";
-import { mkdirSync as mkdirSync8, renameSync as renameSync6, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "fs";
-import { join as join11 } from "path";
+import { mkdirSync as mkdirSync9, renameSync as renameSync7, rmSync as rmSync4, writeFileSync as writeFileSync9 } from "fs";
+import { join as join12 } from "path";
 var MAX_BODY_BYTES = 8 * 1024 * 1024;
 function gateConfPath() {
-  return join11(deskbuddyHome(), "gate.json");
+  return join12(deskbuddyHome(), "gate.json");
 }
 function tokenEquals(a, b) {
   const x = Buffer.from(a);
@@ -2274,18 +2421,18 @@ var GateServer = class {
     this.#server = server;
     const addr = server.address();
     const port = typeof addr === "object" && addr ? addr.port : 0;
-    mkdirSync8(deskbuddyHome(), { recursive: true });
+    mkdirSync9(deskbuddyHome(), { recursive: true });
     const tmp = gateConfPath() + ".tmp";
-    writeFileSync8(tmp, JSON.stringify({ port, token: this.#token, pid: process.pid }), {
+    writeFileSync9(tmp, JSON.stringify({ port, token: this.#token, pid: process.pid }), {
       encoding: "utf8",
       mode: 384
     });
-    renameSync6(tmp, gateConfPath());
+    renameSync7(tmp, gateConfPath());
     return port;
   }
   async stop() {
     try {
-      rmSync3(gateConfPath(), { force: true });
+      rmSync4(gateConfPath(), { force: true });
     } catch {
     }
     const s = this.#server;
@@ -2395,15 +2542,15 @@ function buildHandshakeUrl(cfg, opts = {}) {
 }
 
 // src/daemon/log.ts
-import { appendFileSync, mkdirSync as mkdirSync9, statSync as statSync2, truncateSync } from "fs";
-import { join as join12 } from "path";
+import { appendFileSync, mkdirSync as mkdirSync10, statSync as statSync3, truncateSync } from "fs";
+import { join as join13 } from "path";
 var MAX_LOG_BYTES = 2 * 1024 * 1024;
 function logPath() {
-  return join12(deskbuddyHome(), "daemon.log");
+  return join13(deskbuddyHome(), "daemon.log");
 }
 function rotateIfNeeded(path) {
   try {
-    if (statSync2(path).size > MAX_LOG_BYTES) truncateSync(path, 0);
+    if (statSync3(path).size > MAX_LOG_BYTES) truncateSync(path, 0);
   } catch {
   }
 }
@@ -2411,7 +2558,7 @@ function log(line) {
   const stamped = `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
 `;
   try {
-    mkdirSync9(deskbuddyHome(), { recursive: true });
+    mkdirSync10(deskbuddyHome(), { recursive: true });
     const p = logPath();
     rotateIfNeeded(p);
     appendFileSync(p, stamped, "utf8");
@@ -2469,18 +2616,18 @@ var SessionQueue = class {
 };
 
 // src/daemon/remote.ts
-import { mkdirSync as mkdirSync10, readFileSync as readFileSync10, renameSync as renameSync7, writeFileSync as writeFileSync9 } from "fs";
-import { join as join13 } from "path";
+import { mkdirSync as mkdirSync11, readFileSync as readFileSync11, renameSync as renameSync8, writeFileSync as writeFileSync10 } from "fs";
+import { join as join14 } from "path";
 function handleDir() {
-  return join13(deskbuddyHome(), "remote");
+  return join14(deskbuddyHome(), "remote");
 }
 function handlePath(tool) {
   const safe = (tool || "").replace(/[^0-9a-zA-Z_-]/g, "");
-  return join13(handleDir(), `${safe || "unknown"}.json`);
+  return join14(handleDir(), `${safe || "unknown"}.json`);
 }
 function readHandle(tool) {
   try {
-    const h = JSON.parse(readFileSync10(handlePath(tool), "utf8"));
+    const h = JSON.parse(readFileSync11(handlePath(tool), "utf8"));
     if (typeof h?.sessionId !== "string" || !h.sessionId) return null;
     if (typeof h?.cwd !== "string" || !h.cwd) return null;
     return h;
@@ -2490,10 +2637,10 @@ function readHandle(tool) {
 }
 function writeHandle(tool, handle) {
   try {
-    mkdirSync10(handleDir(), { recursive: true });
+    mkdirSync11(handleDir(), { recursive: true });
     const tmp = handlePath(tool) + ".tmp";
-    writeFileSync9(tmp, JSON.stringify(handle), "utf8");
-    renameSync7(tmp, handlePath(tool));
+    writeFileSync10(tmp, JSON.stringify(handle), "utf8");
+    renameSync8(tmp, handlePath(tool));
   } catch {
   }
 }
@@ -2546,11 +2693,11 @@ function failureMessage(reason) {
 }
 
 // src/daemon/seen.ts
-import { mkdirSync as mkdirSync11, readFileSync as readFileSync11, renameSync as renameSync8, writeFileSync as writeFileSync10 } from "fs";
-import { join as join14 } from "path";
+import { mkdirSync as mkdirSync12, readFileSync as readFileSync12, renameSync as renameSync9, writeFileSync as writeFileSync11 } from "fs";
+import { join as join15 } from "path";
 var SEEN_CAPACITY = 200;
 function seenPath() {
-  return join14(deskbuddyHome(), "seen.json");
+  return join15(deskbuddyHome(), "seen.json");
 }
 var SeenIds = class _SeenIds {
   #ids = [];
@@ -2581,7 +2728,7 @@ var SeenIds = class _SeenIds {
   }
   static load() {
     try {
-      const raw = JSON.parse(readFileSync11(seenPath(), "utf8"));
+      const raw = JSON.parse(readFileSync12(seenPath(), "utf8"));
       return new _SeenIds(Array.isArray(raw?.ids) ? raw.ids.filter((x) => typeof x === "string") : []);
     } catch {
       return new _SeenIds();
@@ -2589,10 +2736,10 @@ var SeenIds = class _SeenIds {
   }
   save() {
     try {
-      mkdirSync11(deskbuddyHome(), { recursive: true });
+      mkdirSync12(deskbuddyHome(), { recursive: true });
       const tmp = seenPath() + ".tmp";
-      writeFileSync10(tmp, JSON.stringify({ ids: this.#ids }), "utf8");
-      renameSync8(tmp, seenPath());
+      writeFileSync11(tmp, JSON.stringify({ ids: this.#ids }), "utf8");
+      renameSync9(tmp, seenPath());
     } catch {
     }
   }
@@ -3254,30 +3401,236 @@ var CodexWatch = class {
 };
 
 // src/core/codexRemote.ts
-import { mkdirSync as mkdirSync12, renameSync as renameSync9, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "fs";
-import { join as join15 } from "path";
+import { mkdirSync as mkdirSync13, renameSync as renameSync10, rmSync as rmSync5, writeFileSync as writeFileSync12 } from "fs";
+import { join as join16 } from "path";
 function codexRemotePath() {
-  return join15(deskbuddyHome(), "codex-remote.json");
+  return join16(deskbuddyHome(), "codex-remote.json");
 }
 function writeCodexRemote(threads, pid = process.pid, now = Date.now()) {
   try {
-    mkdirSync12(deskbuddyHome(), { recursive: true });
+    mkdirSync13(deskbuddyHome(), { recursive: true });
     const p = codexRemotePath();
-    writeFileSync11(p + ".tmp", JSON.stringify({ pid, threads: [...threads], at: now }), "utf8");
-    renameSync9(p + ".tmp", p);
+    writeFileSync12(p + ".tmp", JSON.stringify({ pid, threads: [...threads], at: now }), "utf8");
+    renameSync10(p + ".tmp", p);
   } catch {
   }
 }
 function removeCodexRemote() {
   try {
-    rmSync4(codexRemotePath(), { force: true });
+    rmSync5(codexRemotePath(), { force: true });
   } catch {
   }
 }
 
 // src/wrap/channel.ts
-import { chmodSync as chmodSync2, rmSync as rmSync5 } from "fs";
+import { randomBytes as randomBytes5 } from "crypto";
+import { chmodSync as chmodSync3, rmSync as rmSync7 } from "fs";
 import { connect, createServer as createServer2 } from "net";
+
+// src/core/wake.ts
+import { execFileSync as execFileSync7 } from "child_process";
+import { createHash as createHash3, createHmac as createHmac2, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { chmodSync as chmodSync2, closeSync as closeSync2, mkdirSync as mkdirSync14, openSync as openSync2, readdirSync as readdirSync3, readFileSync as readFileSync13, readSync as readSync2, renameSync as renameSync11, rmSync as rmSync6, statSync as statSync4, writeFileSync as writeFileSync13 } from "fs";
+import { tmpdir } from "os";
+import { join as join17 } from "path";
+function wakeDir(home = deskbuddyHome()) {
+  return join17(home, "wake");
+}
+function marksDir(home = deskbuddyHome()) {
+  return join17(wakeDir(home), "marks");
+}
+function safeSid(sessionId) {
+  return String(sessionId).replace(/[^A-Za-z0-9_-]/g, "");
+}
+function homeTag(home) {
+  return createHash3("sha1").update(home).digest("hex").slice(0, 16);
+}
+function wakeChannelPath(platform = process.platform, home = deskbuddyHome()) {
+  if (platform === "win32") return `\\\\.\\pipe\\deskbuddy-wake-${homeTag(home)}`;
+  const primary = join17(wakeDir(home), "wake.sock");
+  if (Buffer.byteLength(primary) <= 103) return primary;
+  const uid = typeof process.getuid === "function" ? process.getuid() : 0;
+  return join17(tmpdir(), `deskbuddy-${uid}`, `wake-${homeTag(home)}.sock`);
+}
+function pidExists(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function writeWakeMark(sessionId, agentPid, now = Date.now()) {
+  const safe = safeSid(sessionId);
+  if (!safe) return;
+  try {
+    mkdirSync14(marksDir(), { recursive: true, mode: 448 });
+    const file = join17(marksDir(), `${safe}.json`);
+    const tmp = `${file}.${process.pid}.tmp`;
+    writeFileSync13(tmp, JSON.stringify({ agentPid: agentPid ?? 0, daemonPid: process.pid, at: now }), { encoding: "utf8", mode: 384 });
+    renameSync11(tmp, file);
+  } catch {
+  }
+}
+function removeWakeMark(sessionId) {
+  const safe = safeSid(sessionId);
+  if (!safe) return;
+  try {
+    rmSync6(join17(marksDir(), `${safe}.json`), { force: true });
+  } catch {
+  }
+}
+function clearWakeMarks() {
+  let names = [];
+  try {
+    names = readdirSync3(marksDir());
+  } catch {
+    return;
+  }
+  for (const n of names) {
+    try {
+      rmSync6(join17(marksDir(), n), { force: true });
+    } catch {
+    }
+  }
+}
+function isWakeMarked(sessionId, alive = pidExists) {
+  const safe = safeSid(sessionId);
+  if (!safe) return false;
+  try {
+    const m = JSON.parse(readFileSync13(join17(marksDir(), `${safe}.json`), "utf8"));
+    const daemonPid = Number(m?.daemonPid) || 0;
+    if (!daemonPid || !alive(daemonPid)) return false;
+    const pid = Number(m?.agentPid) || 0;
+    return pid > 0 ? alive(pid) : true;
+  } catch {
+    return false;
+  }
+}
+function withWake(states, alive) {
+  return states.map((s) => s.remoteWindow === true || !isWakeMarked(s.sessionId, alive) ? s : { ...s, remoteWindow: true });
+}
+function wakeSecretPath(home = deskbuddyHome()) {
+  return join17(wakeDir(home), "secret");
+}
+function writeWakeSecret(hex, platform = process.platform) {
+  const file = wakeSecretPath();
+  mkdirSync14(wakeDir(), { recursive: true, mode: 448 });
+  const tmp = `${file}.${process.pid}.tmp`;
+  writeFileSync13(tmp, hex, { encoding: "utf8", mode: 384 });
+  if (platform === "win32") {
+    try {
+      execFileSync7("icacls", [tmp, "/inheritance:r", "/grant:r", `${currentUserSid()}:F`], { stdio: "ignore", windowsHide: true });
+    } catch {
+      renameSync11(tmp, file);
+      return "\u7A97\u53E3\u5524\u9192\u5BC6\u94A5\u6587\u4EF6\u7684\u6743\u9650\u6CA1\u80FD\u6536\u7D27\uFF08icacls \u5931\u8D25\uFF09";
+    }
+  } else {
+    chmodSync2(tmp, 384);
+  }
+  renameSync11(tmp, file);
+  return "";
+}
+function restrictToUser(file, platform = process.platform) {
+  if (platform !== "win32") return true;
+  try {
+    execFileSync7("icacls", [file, "/inheritance:r", "/grant:r", `${currentUserSid()}:F`], { stdio: "ignore", windowsHide: true });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function currentUserSid() {
+  try {
+    const out = execFileSync7("whoami", ["/user", "/fo", "csv", "/nh"], { encoding: "utf8", windowsHide: true });
+    const m = /"(S-1-[0-9-]+)"/.exec(out);
+    if (m) return `*${m[1]}`;
+  } catch {
+  }
+  return String(process.env.USERNAME);
+}
+function canonicalJson(v) {
+  if (Array.isArray(v)) return "[" + v.map(canonicalJson).join(",") + "]";
+  if (v && typeof v === "object") {
+    const o = v;
+    return "{" + Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => JSON.stringify(k) + ":" + canonicalJson(o[k])).join(",") + "}";
+  }
+  return JSON.stringify(v === void 0 ? null : v);
+}
+function wakeMac(secret, ...parts) {
+  return createHmac2("sha256", secret).update(parts.join("|"), "utf8").digest("hex");
+}
+var MAC_RE = /^[0-9a-f]{64}$/;
+function macEqual(a, b) {
+  if (typeof a !== "string" || typeof b !== "string" || !MAC_RE.test(a) || !MAC_RE.test(b)) return false;
+  return timingSafeEqual2(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+}
+var WAKE_MARK_RE = /\[DeskBuddy#([0-9A-Za-z_-]{1,64})(?::[0-9a-f]{32})?\]/;
+var INTERRUPT_RE = /^\[Request interrupted by user/;
+var TRANSCRIPT_TAIL2 = 256 * 1024;
+function userText(content) {
+  if (typeof content === "string") return content;
+  if (!Array.isArray(content)) return "";
+  return content.filter((x) => x && x.type === "text").map((x) => String(x.text ?? "")).join("\n");
+}
+function analyzeTranscript(file) {
+  if (!file) return null;
+  let fd;
+  try {
+    const size = statSync4(file).size;
+    const len = Math.min(size, TRANSCRIPT_TAIL2);
+    const buf = Buffer.alloc(len);
+    fd = openSync2(file, "r");
+    readSync2(fd, buf, 0, len, size - len);
+    const lines2 = buf.toString("utf8").split("\n");
+    let seg = false;
+    let reply = null;
+    let humanAfter = false;
+    let interrupted = null;
+    for (let i = lines2.length - 1; i >= 0; i--) {
+      const line = lines2[i];
+      if (line.indexOf('"assistant"') === -1 && line.indexOf('"user"') === -1) continue;
+      let o;
+      try {
+        o = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      if (!o || !o.message) continue;
+      if (o.type === "assistant") {
+        const t = userText(o.message.content).trim();
+        if (t) {
+          seg = true;
+          if (reply === null) reply = t;
+        }
+        continue;
+      }
+      if (o.type !== "user") continue;
+      const text = userText(o.message.content);
+      if (!text) continue;
+      const m = WAKE_MARK_RE.exec(text);
+      if (!m && (o.isMeta === true || text.trim().startsWith("<"))) continue;
+      if (m) return { id: m[1], answered: seg, humanAfter, interrupted: interrupted === true, reply: reply ?? "" };
+      if (interrupted === null) interrupted = INTERRUPT_RE.test(text.trim());
+      humanAfter = true;
+      seg = false;
+      reply = null;
+    }
+    return interrupted === null ? null : { id: "", answered: false, humanAfter, interrupted, reply: "" };
+  } catch {
+    return null;
+  } finally {
+    if (fd !== void 0) {
+      try {
+        closeSync2(fd);
+      } catch {
+      }
+    }
+  }
+}
+
+// src/wrap/channel.ts
 var MAX_LINE_BYTES = 64 * 1024;
 function lines(sock, onLine) {
   let buf = "";
@@ -3298,46 +3651,81 @@ function lines(sock, onLine) {
 }
 function parseRequest(line) {
   let m;
-  try {
-    m = JSON.parse(line);
-  } catch {
-    return null;
+  if (typeof line === "string") {
+    try {
+      m = JSON.parse(line);
+    } catch {
+      return null;
+    }
+  } else {
+    m = line;
   }
   if (!m || typeof m !== "object") return null;
   const instructionId = typeof m.instructionId === "string" ? m.instructionId : "";
   const sessionId = typeof m.sessionId === "string" ? m.sessionId : "";
-  if (!isValidId(instructionId) || !isValidId(sessionId)) return null;
+  if (!isValidId(instructionId) || sessionId !== "" && !isValidId(sessionId)) return null;
   const text = sanitizeText(typeof m.text === "string" ? m.text : "");
   if (!text || text.length > MAX_TEXT_LENGTH) return null;
   const expireAt = typeof m.expireAt === "number" && Number.isFinite(m.expireAt) ? m.expireAt : 0;
   return { instructionId, sessionId, text, expireAt };
 }
-function startChannelServer(path, onRequest, platform = process.platform) {
+var HEX32 = /^[0-9a-f]{32}$/;
+function replyMac(secret, nonceC, r) {
+  return wakeMac(secret, "r", nonceC, r.instructionId, r.status, r.reason ?? "");
+}
+function startChannelServer(path, secret, onRequest, platform = process.platform) {
   return new Promise((resolve5) => {
     const server = createServer2((sock) => {
       let open = true;
+      let phase = "hello";
+      let nonceC = "";
+      let nonceS = "";
       sock.on("error", () => {
       });
       sock.on("close", () => open = false);
-      const reply = (r) => {
+      const authTimer = setTimeout(() => {
+        if (phase === "hello") sock.destroy();
+      }, 5e3);
+      authTimer.unref?.();
+      const raw = (m) => {
         if (sock.destroyed || !sock.writable) return;
         try {
-          sock.write(JSON.stringify(r) + "\n");
+          sock.write(JSON.stringify(m) + "\n");
         } catch {
         }
       };
+      const reply = (r) => raw({ ...r, mac: replyMac(secret, nonceC, r) });
       lines(sock, (line) => {
-        const req2 = parseRequest(line);
-        if (!req2) {
-          reply({ instructionId: "", status: "rejected", reason: "bad_request" });
-          return;
+        try {
+          const m = JSON.parse(line);
+          if (!m || typeof m !== "object") throw new Error("bad frame");
+          if (phase === "hello") {
+            if (m.t !== "hello" || typeof m.nonceC !== "string" || !HEX32.test(m.nonceC)) throw new Error("bad hello");
+            nonceC = m.nonceC;
+            nonceS = randomBytes5(16).toString("hex");
+            phase = "req";
+            clearTimeout(authTimer);
+            raw({ t: "auth", nonceS, mac: wakeMac(secret, "s", nonceC, nonceS) });
+            return;
+          }
+          if (phase !== "req") return;
+          const { mac, ...body } = m;
+          if (!macEqual(mac, wakeMac(secret, "c", nonceS, canonicalJson(body)))) throw new Error("bad mac");
+          const req2 = parseRequest(body);
+          if (!req2) {
+            reply({ instructionId: typeof body.instructionId === "string" ? body.instructionId : "", status: "rejected", reason: "bad_request" });
+            return;
+          }
+          phase = "done";
+          onRequest(req2, reply, () => open);
+        } catch {
+          sock.destroy();
         }
-        onRequest(req2, reply, () => open);
       });
     });
     if (platform !== "win32") {
       try {
-        rmSync5(path, { force: true });
+        rmSync7(path, { force: true });
       } catch {
       }
     }
@@ -3353,7 +3741,7 @@ function startChannelServer(path, onRequest, platform = process.platform) {
       restore();
       if (platform !== "win32") {
         try {
-          chmodSync2(path, 384);
+          chmodSync3(path, 384);
         } catch {
         }
       }
@@ -3370,17 +3758,23 @@ function closeChannelServer(server, path, platform = process.platform) {
   }
   if (platform !== "win32") {
     try {
-      rmSync5(path, { force: true });
+      rmSync7(path, { force: true });
     } catch {
     }
   }
 }
 var FINAL = /* @__PURE__ */ new Set(["started", "rejected", "failed", "not_here"]);
-function sendToWindow(path, req2, onReply, opts = {}) {
+function sendToWindow(path, secret, req2, onReply, opts = {}) {
   return new Promise((resolve5) => {
+    if (!secret) {
+      resolve5("fallback");
+      return;
+    }
     let settled = false;
     let handled = false;
     let done = false;
+    const nonceC = randomBytes5(16).toString("hex");
+    let nonceS = "";
     const settle = (v) => {
       if (settled) return;
       settled = true;
@@ -3413,16 +3807,33 @@ function sendToWindow(path, req2, onReply, opts = {}) {
       }
     });
     sock.on("connect", () => {
-      sock.write(JSON.stringify(req2) + "\n");
+      sock.write(JSON.stringify({ t: "hello", nonceC }) + "\n");
     });
     lines(sock, (line) => {
-      let r;
+      let m;
       try {
-        r = JSON.parse(line);
+        m = JSON.parse(line);
       } catch {
+        sock.destroy();
         return;
       }
+      if (!nonceS) {
+        if (m.t !== "auth" || typeof m.nonceS !== "string" || !HEX32.test(m.nonceS) || !macEqual(m.mac, wakeMac(secret, "s", nonceC, m.nonceS))) {
+          sock.destroy();
+          return;
+        }
+        nonceS = m.nonceS;
+        const body = { ...req2 };
+        sock.write(JSON.stringify({ ...body, mac: wakeMac(secret, "c", nonceS, canonicalJson(body)) }) + "\n");
+        return;
+      }
+      const { mac, ...rest } = m;
+      const r = rest;
       if (r.instructionId !== req2.instructionId) return;
+      if (!macEqual(mac, replyMac(secret, nonceC, r))) {
+        sock.destroy();
+        return;
+      }
       if (!settled) {
         if (r.status === "ack") {
           settle("handled");
@@ -3444,40 +3855,85 @@ function sendToWindow(path, req2, onReply, opts = {}) {
   });
 }
 
+// src/wrap/screen.ts
+var ESC = "\x1B";
+var PASTE_BEGIN = ESC + "[200~";
+var PASTE_END = ESC + "[201~";
+function sanitize(text) {
+  return String(text).replace(/\r\n?/g, "\n").replace(/[\x00-\x08\x0b-\x1f\x7f-\x9f]/g, "");
+}
+var MAX_INJECT_CHARS = 800;
+var TEXT_TOO_LONG = "text_too_long";
+function oneLine(text) {
+  return sanitize(text).replace(/\s*\n\s*/g, " ").trim();
+}
+function tooLongToInject(text) {
+  return oneLine(text).length > MAX_INJECT_CHARS;
+}
+function prepare(text) {
+  return " " + oneLine(text);
+}
+var PERMISSION_RE = /Do you want to (proceed|make|create|run|allow)|[❯>]\s*1\. Yes/;
+function inspectLines(lines2) {
+  const text = lines2.join("\n");
+  const permission = PERMISSION_RE.test(text);
+  const rules = [];
+  lines2.forEach((l, i) => {
+    if (/^─{20,}/.test(l.trim())) rules.push(i);
+  });
+  let input = null;
+  if (rules.length >= 2) {
+    const a = rules[rules.length - 2];
+    const b = rules[rules.length - 1];
+    input = lines2.slice(a + 1, b).join("\n").replace(/^\s*[❯>]\s?/, "").trimEnd();
+  }
+  return { permission, input };
+}
+function boxMatches(view, body) {
+  if (view.input === null || view.permission) return false;
+  const flat = (x) => x.replace(/\s+/g, "");
+  return flat(view.input) === flat(body) || /\[Pasted text #\d+/.test(view.input);
+}
+
 // src/core/wrapWindows.ts
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync13, readdirSync as readdirSync2, readFileSync as readFileSync12, renameSync as renameSync10, rmSync as rmSync6, statSync as statSync3, writeFileSync as writeFileSync12 } from "fs";
-import { tmpdir } from "os";
-import { join as join16 } from "path";
+import { chmodSync as chmodSync4, mkdirSync as mkdirSync15, readdirSync as readdirSync4, readFileSync as readFileSync14, renameSync as renameSync12, rmSync as rmSync8, statSync as statSync5, writeFileSync as writeFileSync14 } from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join18 } from "path";
 var WINDOW_ID_RE = /^[a-f0-9]{32}$/;
 function windowsDir() {
-  return join16(deskbuddyHome(), "windows");
+  return join18(deskbuddyHome(), "windows");
 }
 function bySessionDir() {
-  return join16(windowsDir(), "by-session");
+  return join18(windowsDir(), "by-session");
 }
-function safeSid(sessionId) {
+function safeSid2(sessionId) {
   return String(sessionId).replace(/[^A-Za-z0-9_-]/g, "");
 }
 function ensureDir(dir) {
-  mkdirSync13(dir, { recursive: true, mode: 448 });
+  mkdirSync15(dir, { recursive: true, mode: 448 });
 }
 function atomicWrite(file, text) {
   const tmp = `${file}.${process.pid}.tmp`;
-  writeFileSync12(tmp, text, { encoding: "utf8", mode: 384 });
-  renameSync10(tmp, file);
+  writeFileSync14(tmp, text, { encoding: "utf8", mode: 384 });
+  renameSync12(tmp, file);
 }
 function windowFile(windowId) {
-  return join16(windowsDir(), `${windowId}.json`);
+  return join18(windowsDir(), `${windowId}.json`);
 }
 function writeWindow(windowId, rec) {
   if (!WINDOW_ID_RE.test(windowId)) return;
   ensureDir(windowsDir());
   atomicWrite(windowFile(windowId), JSON.stringify(rec));
+  restrictToUser(windowFile(windowId));
+}
+function windowSecret(windowId) {
+  const s = readWindow(windowId)?.secret;
+  return typeof s === "string" && /^[0-9a-f]{64}$/.test(s) ? Buffer.from(s, "hex") : null;
 }
 function readWindow(windowId) {
   if (!WINDOW_ID_RE.test(windowId)) return null;
   try {
-    const r = JSON.parse(readFileSync12(windowFile(windowId), "utf8"));
+    const r = JSON.parse(readFileSync14(windowFile(windowId), "utf8"));
     return r && typeof r.pid === "number" ? r : null;
   } catch {
     return null;
@@ -3487,41 +3943,41 @@ function removeWindow(windowId) {
   if (!WINDOW_ID_RE.test(windowId)) return;
   for (const f of [windowFile(windowId), lastEventFile(windowId)]) {
     try {
-      rmSync6(f, { force: true });
+      rmSync8(f, { force: true });
     } catch {
     }
   }
   let names = [];
   try {
-    names = readdirSync2(bySessionDir());
+    names = readdirSync4(bySessionDir());
   } catch {
     return;
   }
   for (const n of names) {
-    const f = join16(bySessionDir(), n);
+    const f = join18(bySessionDir(), n);
     try {
-      if (readFileSync12(f, "utf8").trim() === windowId) rmSync6(f, { force: true });
+      if (readFileSync14(f, "utf8").trim() === windowId) rmSync8(f, { force: true });
     } catch {
     }
   }
 }
 function readBySession(sessionId) {
-  const safe = safeSid(sessionId);
+  const safe = safeSid2(sessionId);
   if (!safe) return null;
   try {
-    const id = readFileSync12(join16(bySessionDir(), safe), "utf8").trim();
+    const id = readFileSync14(join18(bySessionDir(), safe), "utf8").trim();
     return WINDOW_ID_RE.test(id) ? id : null;
   } catch {
     return null;
   }
 }
 function lastEventFile(windowId) {
-  return join16(windowsDir(), `${windowId}.last`);
+  return join18(windowsDir(), `${windowId}.last`);
 }
 function readLastEvent(windowId) {
   if (!WINDOW_ID_RE.test(windowId)) return null;
   try {
-    const e = JSON.parse(readFileSync12(lastEventFile(windowId), "utf8"));
+    const e = JSON.parse(readFileSync14(lastEventFile(windowId), "utf8"));
     return e && typeof e.ev === "string" && typeof e.at === "number" ? { ev: e.ev, sid: String(e.sid ?? ""), at: e.at } : null;
   } catch {
     return null;
@@ -3530,18 +3986,18 @@ function readLastEvent(windowId) {
 function channelPath(windowId, platform = process.platform, home = deskbuddyHome()) {
   if (platform === "win32") return `\\\\.\\pipe\\deskbuddy-${windowId}`;
   const name = `${windowId.slice(0, 16)}.sock`;
-  const primary = join16(home, "win", name);
+  const primary = join18(home, "win", name);
   if (Buffer.byteLength(primary) <= 103) return primary;
   const uid = typeof process.getuid === "function" ? process.getuid() : 0;
-  return join16(tmpdir(), `deskbuddy-${uid}`, name);
+  return join18(tmpdir2(), `deskbuddy-${uid}`, name);
 }
 function ensureChannelDir(sockPath) {
-  const dir = join16(sockPath, "..");
+  const dir = join18(sockPath, "..");
   try {
-    mkdirSync13(dir, { recursive: true, mode: 448 });
-    const st = statSync3(dir);
+    mkdirSync15(dir, { recursive: true, mode: 448 });
+    const st = statSync5(dir);
     if (typeof process.getuid === "function" && st.uid !== process.getuid()) return false;
-    chmodSync3(dir, 448);
+    chmodSync4(dir, 448);
     return true;
   } catch {
     return false;
@@ -3557,203 +4013,189 @@ function windowForSession(sessionId) {
   return id;
 }
 
-// src/core/wake.ts
-import { execFileSync as execFileSync7 } from "child_process";
-import { createHash as createHash3, createHmac as createHmac2, timingSafeEqual as timingSafeEqual2 } from "crypto";
-import { chmodSync as chmodSync4, closeSync, mkdirSync as mkdirSync14, openSync, readdirSync as readdirSync3, readFileSync as readFileSync13, readSync, renameSync as renameSync11, rmSync as rmSync7, statSync as statSync4, writeFileSync as writeFileSync13 } from "fs";
-import { tmpdir as tmpdir2 } from "os";
-import { join as join17 } from "path";
-function wakeDir(home = deskbuddyHome()) {
-  return join17(home, "wake");
-}
-function marksDir(home = deskbuddyHome()) {
-  return join17(wakeDir(home), "marks");
-}
-function safeSid2(sessionId) {
-  return String(sessionId).replace(/[^A-Za-z0-9_-]/g, "");
-}
-function homeTag(home) {
-  return createHash3("sha1").update(home).digest("hex").slice(0, 16);
-}
-function wakeChannelPath(platform = process.platform, home = deskbuddyHome()) {
-  if (platform === "win32") return `\\\\.\\pipe\\deskbuddy-wake-${homeTag(home)}`;
-  const primary = join17(wakeDir(home), "wake.sock");
-  if (Buffer.byteLength(primary) <= 103) return primary;
-  const uid = typeof process.getuid === "function" ? process.getuid() : 0;
-  return join17(tmpdir2(), `deskbuddy-${uid}`, `wake-${homeTag(home)}.sock`);
-}
-function pidExists(pid) {
-  if (!Number.isInteger(pid) || pid <= 0) return false;
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function writeWakeMark(sessionId, agentPid, now = Date.now()) {
-  const safe = safeSid2(sessionId);
-  if (!safe) return;
-  try {
-    mkdirSync14(marksDir(), { recursive: true, mode: 448 });
-    const file = join17(marksDir(), `${safe}.json`);
-    const tmp = `${file}.${process.pid}.tmp`;
-    writeFileSync13(tmp, JSON.stringify({ agentPid: agentPid ?? 0, daemonPid: process.pid, at: now }), { encoding: "utf8", mode: 384 });
-    renameSync11(tmp, file);
-  } catch {
-  }
-}
-function removeWakeMark(sessionId) {
-  const safe = safeSid2(sessionId);
-  if (!safe) return;
-  try {
-    rmSync7(join17(marksDir(), `${safe}.json`), { force: true });
-  } catch {
-  }
-}
-function clearWakeMarks() {
-  let names = [];
+// src/core/launch.ts
+import { mkdirSync as mkdirSync16, readFileSync as readFileSync15, renameSync as renameSync13, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "fs";
+import { join as join19 } from "path";
+var RUN_ID_RE = /^[a-f0-9]{32}$/;
+var SESSION_UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+function launchDir(home = deskbuddyHome()) {
+  return join19(home, "launch");
+}
+function planFile(runId) {
+  return join19(launchDir(), `${runId}.json`);
+}
+function writeLaunch(runId, plan) {
+  if (!RUN_ID_RE.test(runId)) throw new Error("bad runId");
+  if (plan.resume && !SESSION_UUID_RE.test(plan.resume)) throw new Error("bad session id");
+  mkdirSync16(launchDir(), { recursive: true, mode: 448 });
+  const tmp = `${planFile(runId)}.${process.pid}.tmp`;
+  writeFileSync15(tmp, JSON.stringify(plan), { encoding: "utf8", mode: 384 });
+  restrictToUser(tmp);
+  renameSync13(tmp, planFile(runId));
+}
+function claimLaunch(runId) {
+  if (!RUN_ID_RE.test(runId)) return null;
+  const claimed = join19(launchDir(), `${runId}.${process.pid}.claimed`);
   try {
-    names = readdirSync3(marksDir());
+    renameSync13(planFile(runId), claimed);
   } catch {
-    return;
-  }
-  for (const n of names) {
-    try {
-      rmSync7(join17(marksDir(), n), { force: true });
-    } catch {
-    }
+    return null;
   }
-}
-function isWakeMarked(sessionId, alive = pidExists) {
-  const safe = safeSid2(sessionId);
-  if (!safe) return false;
   try {
-    const m = JSON.parse(readFileSync13(join17(marksDir(), `${safe}.json`), "utf8"));
-    const daemonPid = Number(m?.daemonPid) || 0;
-    if (!daemonPid || !alive(daemonPid)) return false;
-    const pid = Number(m?.agentPid) || 0;
-    return pid > 0 ? alive(pid) : true;
+    const p = JSON.parse(readFileSync15(claimed, "utf8"));
+    if (!p || typeof p.cwd !== "string" || typeof p.resume !== "string") return null;
+    if (p.resume && !SESSION_UUID_RE.test(p.resume)) return null;
+    return p;
   } catch {
-    return false;
-  }
-}
-function withWake(states, alive) {
-  return states.map((s) => s.remoteWindow === true || !isWakeMarked(s.sessionId, alive) ? s : { ...s, remoteWindow: true });
-}
-function wakeSecretPath(home = deskbuddyHome()) {
-  return join17(wakeDir(home), "secret");
-}
-function writeWakeSecret(hex, platform = process.platform) {
-  const file = wakeSecretPath();
-  mkdirSync14(wakeDir(), { recursive: true, mode: 448 });
-  const tmp = `${file}.${process.pid}.tmp`;
-  writeFileSync13(tmp, hex, { encoding: "utf8", mode: 384 });
-  if (platform === "win32") {
+    return null;
+  } finally {
     try {
-      execFileSync7("icacls", [tmp, "/inheritance:r", "/grant:r", `${currentUserSid()}:F`], { stdio: "ignore", windowsHide: true });
+      rmSync9(claimed, { force: true });
     } catch {
-      renameSync11(tmp, file);
-      return "\u7A97\u53E3\u5524\u9192\u5BC6\u94A5\u6587\u4EF6\u7684\u6743\u9650\u6CA1\u80FD\u6536\u7D27\uFF08icacls \u5931\u8D25\uFF09";
     }
-  } else {
-    chmodSync4(tmp, 384);
   }
-  renameSync11(tmp, file);
-  return "";
 }
-function currentUserSid() {
+function launchPending(runId) {
   try {
-    const out = execFileSync7("whoami", ["/user", "/fo", "csv", "/nh"], { encoding: "utf8", windowsHide: true });
-    const m = /"(S-1-[0-9-]+)"/.exec(out);
-    if (m) return `*${m[1]}`;
-  } catch {
-  }
-  return String(process.env.USERNAME);
-}
-function canonicalJson(v) {
-  if (Array.isArray(v)) return "[" + v.map(canonicalJson).join(",") + "]";
-  if (v && typeof v === "object") {
-    const o = v;
-    return "{" + Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => JSON.stringify(k) + ":" + canonicalJson(o[k])).join(",") + "}";
+    readFileSync15(planFile(runId));
+    return true;
+  } catch {
+    return false;
   }
-  return JSON.stringify(v === void 0 ? null : v);
 }
-function wakeMac(secret, ...parts) {
-  return createHmac2("sha256", secret).update(parts.join("|"), "utf8").digest("hex");
+
+// src/daemon/openWindow.ts
+import { execFile as execFile3, execFileSync as execFileSync8, spawn as spawn2 } from "child_process";
+import { chmodSync as chmodSync5, mkdirSync as mkdirSync17, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "fs";
+import { userInfo } from "os";
+import { join as join20 } from "path";
+function safePath(p) {
+  return /^(?:[A-Za-z]:[\\/]|\/)/.test(p) && !/[\r\n\0"'`$%;]/.test(p);
+}
+function checkTarget(t) {
+  if (!RUN_ID_RE.test(t.runId)) throw new Error("bad runId");
+  for (const p of [t.node, t.cli, t.home]) if (!safePath(p)) throw new Error("\u8DEF\u5F84\u91CC\u6709\u4E0D\u80FD\u8FDB\u547D\u4EE4\u884C\u7684\u5B57\u7B26");
+}
+var shq = (s) => `'${s}'`;
+function macCommandScript(t) {
+  checkTarget(t);
+  return `#!/bin/sh
+exec ${shq(t.node)} ${shq(t.cli)} wrap --launch ${t.runId} --home ${shq(t.home)}
+`;
 }
-var MAC_RE = /^[0-9a-f]{64}$/;
-function macEqual(a, b) {
-  if (typeof a !== "string" || typeof b !== "string" || !MAC_RE.test(a) || !MAC_RE.test(b)) return false;
-  return timingSafeEqual2(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+function winWtArgs(t) {
+  checkTarget(t);
+  return ["-w", "new", t.node, t.cli, "wrap", "--launch", t.runId, "--home", t.home];
 }
-var WAKE_MARK_RE = /\[DeskBuddy#([0-9A-Za-z_-]{1,64})(?::[0-9a-f]{32})?\]/;
-var INTERRUPT_RE = /^\[Request interrupted by user/;
-var TRANSCRIPT_TAIL = 256 * 1024;
-function userText(content) {
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return "";
-  return content.filter((x) => x && x.type === "text").map((x) => String(x.text ?? "")).join("\n");
+var psq = (s) => `'${s.replace(/'/g, "''")}'`;
+function winStartProcessScript(t) {
+  checkTarget(t);
+  const arg = (s) => psq(/\s/.test(s) ? `"${s}"` : s);
+  return `Start-Process -FilePath ${psq(t.node)} -ArgumentList @(${[t.cli, "wrap", "--launch", t.runId, "--home", t.home].map(arg).join(",")})`;
 }
-function analyzeTranscript(file) {
-  if (!file) return null;
-  let fd;
-  try {
-    const size = statSync4(file).size;
-    const len = Math.min(size, TRANSCRIPT_TAIL);
-    const buf = Buffer.alloc(len);
-    fd = openSync(file, "r");
-    readSync(fd, buf, 0, len, size - len);
-    const lines2 = buf.toString("utf8").split("\n");
-    let seg = false;
-    let reply = null;
-    let humanAfter = false;
-    let interrupted = null;
-    for (let i = lines2.length - 1; i >= 0; i--) {
-      const line = lines2[i];
-      if (line.indexOf('"assistant"') === -1 && line.indexOf('"user"') === -1) continue;
-      let o;
-      try {
-        o = JSON.parse(line);
-      } catch {
-        continue;
-      }
-      if (!o || !o.message) continue;
-      if (o.type === "assistant") {
-        const t = userText(o.message.content).trim();
-        if (t) {
-          seg = true;
-          if (reply === null) reply = t;
-        }
-        continue;
-      }
-      if (o.type !== "user") continue;
-      const text = userText(o.message.content);
-      if (!text) continue;
-      const m = WAKE_MARK_RE.exec(text);
-      if (!m && (o.isMeta === true || text.trim().startsWith("<"))) continue;
-      if (m) return { id: m[1], answered: seg, humanAfter, interrupted: interrupted === true, reply: reply ?? "" };
-      if (interrupted === null) interrupted = INTERRUPT_RE.test(text.trim());
-      humanAfter = true;
-      seg = false;
-      reply = null;
+function encodePs(script) {
+  return Buffer.from(script, "utf16le").toString("base64");
+}
+function guiAvailable(d) {
+  if (d.env.SSH_CONNECTION || d.env.SSH_TTY) return false;
+  if (d.platform === "darwin") {
+    const m = d.macManager().trim();
+    if (m === "Aqua") return true;
+    if (m !== "Background") return false;
+    const me = d.userName?.() ?? "";
+    return !!me && (d.macConsoleUser?.() ?? "").trim() === me;
+  }
+  if (d.platform === "win32") {
+    const s = d.winSessionId();
+    return s !== null && s > 0;
+  }
+  return false;
+}
+var defaultGuiDeps = () => ({
+  platform: process.platform,
+  env: process.env,
+  macManager: () => {
+    try {
+      return execFileSync8("launchctl", ["managername"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 3e3 });
+    } catch {
+      return "";
     }
-    return interrupted === null ? null : { id: "", answered: false, humanAfter, interrupted, reply: "" };
-  } catch {
-    return null;
-  } finally {
-    if (fd !== void 0) {
-      try {
-        closeSync(fd);
-      } catch {
-      }
+  },
+  macConsoleUser: () => {
+    try {
+      return execFileSync8("stat", ["-f", "%Su", "/dev/console"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 3e3 });
+    } catch {
+      return "";
+    }
+  },
+  userName: () => {
+    try {
+      return userInfo().username;
+    } catch {
+      return "";
+    }
+  },
+  winSessionId: () => {
+    try {
+      const out = execFileSync8("tasklist", ["/FI", `PID eq ${process.pid}`, "/FO", "CSV", "/NH"], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        windowsHide: true,
+        timeout: 5e3
+      });
+      const cols = out.trim().split("\n")[0]?.match(/"([^"]*)"/g)?.map((c) => c.slice(1, -1)) ?? [];
+      const n = Number(cols[3]);
+      return Number.isInteger(n) ? n : null;
+    } catch {
+      return null;
     }
   }
+});
+var defaultOpenerDeps = (findWt2) => ({
+  platform: process.platform,
+  findWt: findWt2,
+  run: (file, args) => new Promise((resolve5, reject) => {
+    execFile3(file, args, { windowsHide: true, timeout: 15e3 }, (err) => err ? reject(err) : resolve5());
+  }),
+  spawnDetached: (file, args) => {
+    const c = spawn2(file, args, { detached: true, stdio: "ignore", shell: false, windowsHide: false });
+    c.on("error", () => {
+    });
+    c.unref();
+  }
+});
+async function openTerminal(t, d) {
+  checkTarget(t);
+  if (d.platform === "darwin") {
+    mkdirSync17(launchDir(t.home), { recursive: true, mode: 448 });
+    const file = join20(launchDir(t.home), `${t.runId}.command`);
+    writeFileSync16(file, macCommandScript(t), { encoding: "utf8", mode: 448 });
+    chmodSync5(file, 448);
+    await d.run("open", ["-a", "Terminal", file]);
+    return "terminal";
+  }
+  if (d.platform === "win32") {
+    const wt = d.findWt();
+    if (wt) {
+      d.spawnDetached(wt, winWtArgs(t));
+      return "wt";
+    }
+    await d.run("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", encodePs(winStartProcessScript(t))]);
+    return "powershell";
+  }
+  throw new Error(`\u6682\u4E0D\u652F\u6301\u5728 ${d.platform} \u4E0A\u5F00\u7A97`);
+}
+function removeCommandFile(home, runId) {
+  if (!RUN_ID_RE.test(runId)) return;
+  try {
+    rmSync10(join20(launchDir(home), `${runId}.command`), { force: true });
+  } catch {
+  }
 }
 
 // src/daemon/wake.ts
-import { randomBytes as randomBytes5 } from "crypto";
-import { rmSync as rmSync8 } from "fs";
+import { randomBytes as randomBytes6 } from "crypto";
+import { rmSync as rmSync11 } from "fs";
 import { createServer as createServer3 } from "net";
 var BUSY_STATES = /* @__PURE__ */ new Set(["watch", "ask_approval"]);
 var STOP_MIN_MS = 1500;
@@ -4040,7 +4482,7 @@ function startWakeServer(path, hub, secret, platform = process.platform) {
   if (platform !== "win32") {
     if (!ensureChannelDir(path)) return Promise.resolve(null);
     try {
-      rmSync8(path, { force: true });
+      rmSync11(path, { force: true });
     } catch {
     }
   }
@@ -4092,7 +4534,7 @@ function startWakeServer(path, hub, secret, platform = process.platform) {
             return;
           }
           nonceW = m.nonceW;
-          nonceD = randomBytes5(16).toString("hex");
+          nonceD = randomBytes6(16).toString("hex");
           phase = "auth2";
           raw({ t: "auth", nonceD, mac: wakeMac(secret, "d", nonceW, nonceD) });
           return;
@@ -4147,6 +4589,8 @@ var POLICY_VIOLATION = 1008;
 var PING_FRAME_SERVICE = "ping";
 var PONG_FRAME = JSON.stringify({ service: "pong", version: "1.0" });
 var CODEX_REMOTE_REFRESH_MS = 30 * 1e3;
+var CLAIM_WAIT_MS = 15 * 1e3;
+var WINDOW_READY_MS = 30 * 1e3;
 var CODEX_WATCH_MS = 5 * 1e3;
 function defaultCodexAppServers() {
   const cfg = loadConfig();
@@ -4176,6 +4620,11 @@ var Daemon = class {
   #aliveReport = null;
   #codexTimer = null;
   #wake;
+  /**
+   * 会话号 → 这个会话正在进行的开窗流程（开窗、等认领、交首句；降级后台时一直到后台那次跑完）。
+   * 🔴 同一会话不能被两个进程同时续跑（实测会静默丢一整轮）：后到的指令等它结束再路由
+   */
+  #opening = /* @__PURE__ */ new Map();
   #wakeServer = null;
   #wakeTimer = null;
   #wakeReport = null;
@@ -4199,7 +4648,16 @@ var Daemon = class {
       codexRoute: deps.codexRoute ?? ((tid) => this.#codexRouteFor(tid)),
       report: deps.report ?? ((p) => api.commandResult(p)),
       windowFor: deps.windowFor ?? windowForSession,
-      sendToWindow: deps.sendToWindow ?? ((id, req2, onReply) => sendToWindow(channelPath(id), req2, onReply)),
+      sendToWindow: deps.sendToWindow ?? ((id, req2, onReply) => sendToWindow(channelPath(id), windowSecret(id), req2, onReply)),
+      gui: deps.gui ?? (() => guiAvailable(defaultGuiDeps())),
+      openWindow: deps.openWindow ?? ((runId) => this.#openTerminal(runId)),
+      endedCwd: deps.endedCwd ?? ((sid, tool, stateCwd) => resolveEndedCwd(sid, tool, {
+        readEnded: (s) => readEnded(s) ?? (stateCwd ? { sessionId: s, tool, cwd: stateCwd, interactive: false, endedAt: 0 } : null),
+        transcriptCwd: (s) => claudeTranscriptCwd(s),
+        isDir: isDirSync
+      })),
+      claimWaitMs: deps.claimWaitMs ?? CLAIM_WAIT_MS,
+      windowReadyMs: deps.windowReadyMs ?? WINDOW_READY_MS,
       wakePath: deps.wakePath === void 0 ? wakeChannelPath() : deps.wakePath,
       onWindowDone: deps.onWindowDone ?? (() => {
       })
@@ -4253,7 +4711,7 @@ var Daemon = class {
     const path = this.#deps.wakePath;
     if (!path) return;
     clearWakeMarks();
-    const secret = randomBytes6(32);
+    const secret = randomBytes7(32);
     let warn = "";
     try {
       warn = writeWakeSecret(secret.toString("hex"));
@@ -4515,6 +4973,22 @@ var Daemon = class {
       return;
     }
     this.#seen.save();
+    this.#route(cmd);
+  }
+  /**
+   * 指令分派（去重之后）。同一会话的开窗流程还没走完时，后到的指令等它结束再从头路由一遍
+   * （届时窗口已登记 → 走窗口写入；降级后台了 → 按原来的按会话串行排队）
+   */
+  #route(cmd) {
+    if (cmd.tool === "claude_code" && cmd.sessionId) {
+      const sid = resolveAlias(cmd.sessionId);
+      const pending = this.#opening.get(sid);
+      if (pending) {
+        log(`\u6307\u4EE4 ${cmd.instructionId} \u7B49\u540C\u4E00\u4F1A\u8BDD\u7684\u5F00\u7A97\u6D41\u7A0B\u7ED3\u675F\u540E\u518D\u5206\u6D3E`);
+        void pending.then(() => this.#route(cmd));
+        return;
+      }
+    }
     if (cmd.sessionId && !isExpired(cmd, this.#deps.now())) {
       const sid = resolveAlias(cmd.sessionId);
       let win = null;
@@ -4556,8 +5030,197 @@ var Daemon = class {
       const sid = resolveAlias(cmd.sessionId);
       if (this.#wake.submit(cmd, sid)) return;
     }
+    if (cmd.tool === "claude_code" && !isExpired(cmd, this.#deps.now())) {
+      void this.#openOrDispatch(cmd).catch((e) => {
+        log(`\u6307\u4EE4 ${cmd.instructionId} \u5F00\u7A97\u6D41\u7A0B\u51FA\u9519\uFF1A${e?.stack ?? String(e)}`);
+        this.#report(cmd, cmd.sessionId, "failed", "", "window_failed");
+      });
+      return;
+    }
+    if (cmd.sessionId && !isExpired(cmd, this.#deps.now())) {
+      const sid = resolveAlias(cmd.sessionId);
+      if (!readState(sid) && readEnded(sid)?.tool === cmd.tool) {
+        const r = this.#deps.endedCwd(sid, cmd.tool, "");
+        if (!r.ok) {
+          log(`\u6307\u4EE4 ${cmd.instructionId} \u4F1A\u8BDD\u5DF2\u7ED3\u675F\u4F46${r.reason === "no_cwd" ? "\u53D6\u4E0D\u5230\u53EF\u9760\u7684\u5DE5\u4F5C\u76EE\u5F55" : "\u5DE5\u4F5C\u76EE\u5F55\u5DF2\u4E0D\u5728"}\uFF0C\u4E0D\u6267\u884C`);
+          this.#report(cmd, sid, "rejected", "", r.reason);
+          return;
+        }
+        log(`\u6307\u4EE4 ${cmd.instructionId} \u4F1A\u8BDD\u5DF2\u7ED3\u675F\uFF0C\u540E\u53F0\u7EED\u8DD1`);
+        void this.#headless(cmd, sid, r.cwd);
+        return;
+      }
+    }
     this.#dispatch(cmd);
   }
+  /**
+   * 新建任务、会话已结束 → 开窗；会话还活着（后台 -p 在跑、或在用户自己开的窗口里）→ 原来的路径（排队 / window_open）
+   */
+  async #openOrDispatch(cmd) {
+    if (tooLongToInject(cmd.text)) {
+      log(`\u6307\u4EE4 ${cmd.instructionId} \u592A\u957F\uFF08${cmd.text.length} \u5B57\uFF09\uFF0C\u4E0D\u6267\u884C`);
+      this.#report(cmd, cmd.sessionId ? resolveAlias(cmd.sessionId) : "", "rejected", "", TEXT_TOO_LONG);
+      return;
+    }
+    if (!cmd.sessionId) {
+      let cwd = "";
+      if (cmd.dirRef) {
+        cwd = dirOf(cmd.dirRef);
+        if (!cwd) {
+          this.#report(cmd, "", "rejected", "", "dir_gone");
+          return;
+        }
+      } else {
+        cwd = loadConfig().remoteCwd || "";
+        if (!cwd) {
+          this.#report(cmd, "", "rejected", "", "no_remote_cwd");
+          return;
+        }
+      }
+      await this.#openWindowFor(cmd, "", cwd);
+      return;
+    }
+    const sid = resolveAlias(cmd.sessionId);
+    for (let p = this.#opening.get(sid); p; p = this.#opening.get(sid)) await p;
+    let release2;
+    this.#opening.set(sid, new Promise((r) => release2 = r));
+    try {
+      if (this.#queue.busy(sid)) await this.#queue.enqueue(sid, async () => {
+      });
+      const st = readState(sid);
+      if (st && (!st.pid || isAlive(st.pid, st.pidName))) {
+        this.#dispatch(cmd);
+        return;
+      }
+      if (!SESSION_UUID_RE.test(sid)) {
+        this.#dispatch(cmd);
+        return;
+      }
+      const r = this.#deps.endedCwd(sid, cmd.tool, st?.cwd ?? "");
+      if (!r.ok) {
+        log(`\u6307\u4EE4 ${cmd.instructionId} \u4F1A\u8BDD\u5DF2\u7ED3\u675F\u4F46${r.reason === "no_cwd" ? "\u53D6\u4E0D\u5230\u53EF\u9760\u7684\u5DE5\u4F5C\u76EE\u5F55" : "\u5DE5\u4F5C\u76EE\u5F55\u5DF2\u4E0D\u5728"}\uFF0C\u4E0D\u6267\u884C`);
+        this.#report(cmd, sid, "rejected", "", r.reason);
+        return;
+      }
+      await this.#openWindowFor(cmd, sid, r.cwd);
+    } finally {
+      this.#opening.delete(sid);
+      release2();
+    }
+  }
+  /**
+   * 开窗 → 等认领 → 首句经通道交给窗口；任何一步起不来 → 后台 -p（回报 started/headless）。
+   * 返回时：窗口已收下首句 / 已按失败回报 / 降级的后台那次已跑完
+   */
+  async #openWindowFor(cmd, sid, cwd) {
+    const headless = (why) => {
+      log(`\u6307\u4EE4 ${cmd.instructionId} ${why}\uFF0C\u6539\u540E\u53F0\u6267\u884C`);
+      return this.#headless(cmd, sid, cwd);
+    };
+    let gui = false;
+    try {
+      gui = this.#deps.gui();
+    } catch {
+      gui = false;
+    }
+    if (!gui) return headless("\u6CA1\u6709\u56FE\u5F62\u4F1A\u8BDD\uFF08SSH / \u9501\u5B9A\u7684\u670D\u52A1\u4F1A\u8BDD / Linux\uFF09");
+    const runId = randomBytes7(16).toString("hex");
+    try {
+      writeLaunch(runId, { tool: "claude_code", cwd, resume: sid, at: this.#deps.now() });
+    } catch (e) {
+      return headless(`\u5199\u4EA4\u63A5\u5355\u5931\u8D25\uFF1A${e.message}`);
+    }
+    try {
+      await this.#deps.openWindow(runId);
+    } catch (e) {
+      if (claimLaunch(runId)) {
+        removeCommandFile(deskbuddyHome(), runId);
+        return headless(`\u5F00\u7A97\u5931\u8D25\uFF1A${e.message}`);
+      }
+      log(`\u6307\u4EE4 ${cmd.instructionId} \u5F00\u7A97\u547D\u4EE4\u62A5\u9519\uFF08${e.message}\uFF09\uFF0C\u4F46\u7A97\u53E3\u5DF2\u8BA4\u9886\uFF0C\u6309\u7A97\u53E3\u7EE7\u7EED`);
+    }
+    const sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
+    const claimDeadline = this.#deps.now() + this.#deps.claimWaitMs;
+    while (launchPending(runId) && this.#deps.now() < claimDeadline) await sleep2(300);
+    removeCommandFile(deskbuddyHome(), runId);
+    if (launchPending(runId) && claimLaunch(runId)) return headless(`${Math.round(this.#deps.claimWaitMs / 1e3)} \u79D2\u5185\u7A97\u53E3\u6CA1\u8D77\u6765`);
+    log(`\u6307\u4EE4 ${cmd.instructionId} \u7A97\u53E3\u5DF2\u8D77\u6765\uFF08${runId.slice(0, 8)}\uFF09\uFF0C\u7B49\u5B83\u5C31\u7EEA\u540E\u5199\u5165\u9996\u53E5`);
+    const req2 = { instructionId: cmd.instructionId, sessionId: "", text: cmd.text, expireAt: cmd.expireAt };
+    const fb = { p: null, final: false };
+    const readyDeadline = this.#deps.now() + this.#deps.windowReadyMs;
+    while (this.#deps.now() < readyDeadline) {
+      let r = "fallback";
+      try {
+        r = await this.#deps.sendToWindow(runId, req2, (reply) => {
+          if (reply.status === "ack") return;
+          if (reply.status !== "queued") fb.final = true;
+          if (reply.status === "not_here") {
+            if (!fb.p) fb.p = headless("\u9996\u53E5\u5199\u5165\u524D\u7A97\u53E3\u5DF2\u5173\u95ED");
+            return;
+          }
+          log(`\u6307\u4EE4 ${cmd.instructionId} \u7A97\u53E3 ${reply.status}${reply.reason ? " " + reply.reason : ""}`);
+          this.#report(cmd, sid, reply.status, "window", reply.reason ?? "");
+        });
+      } catch {
+        r = "fallback";
+      }
+      if (r === "handled") {
+        log(`\u6307\u4EE4 ${cmd.instructionId} \u9996\u53E5\u5DF2\u4EA4\u7ED9\u65B0\u7A97\u53E3 len=${cmd.text.length}`);
+        if (sid) {
+          const left = cmd.expireAt > 0 ? Math.max(cmd.expireAt - this.#deps.now(), 0) : 10 * 60 * 1e3;
+          const cap = this.#deps.now() + left + this.#deps.windowReadyMs;
+          while (!fb.final && this.#deps.now() < cap) {
+            let found = null;
+            try {
+              found = this.#deps.windowFor(sid);
+            } catch {
+              found = null;
+            }
+            if (found) break;
+            await sleep2(200);
+          }
+        }
+        await sleep2(50);
+        if (fb.p) await fb.p;
+        return;
+      }
+      await sleep2(1e3);
+    }
+    log(`\u6307\u4EE4 ${cmd.instructionId} \u65B0\u7A97\u53E3\u7684\u901A\u9053\u4E00\u76F4\u6CA1\u5C31\u7EEA`);
+    this.#report(cmd, sid, "failed", "window", "window_failed");
+  }
+  /**
+   * 后台 -p：新建任务走原来的路径；续跑已结束会话用解析出的 cwd，不再查状态文件（它已被删）。
+   * 返回的 promise 在后台那次跑完时落定（开窗流程的会话锁要一直占到那时）
+   */
+  #headless(cmd, sid, cwd) {
+    if (isExpired(cmd, this.#deps.now())) {
+      log(`\u6307\u4EE4 ${cmd.instructionId} \u5DF2\u8FC7\u671F\uFF0C\u4E0D\u518D\u540E\u53F0\u6267\u884C`);
+      this.#report(cmd, sid, "rejected", "", "expired");
+      return Promise.resolve();
+    }
+    if (!sid) {
+      this.#dispatch(cmd);
+      return Promise.resolve();
+    }
+    return this.#queue.enqueue(
+      sid,
+      () => this.#execute(cmd, sid, cwd, cmd.tool, true),
+      (e) => {
+        log(`\u6307\u4EE4 ${cmd.instructionId} \u6267\u884C\u65F6\u51FA\u9519\uFF1A${e?.stack ?? String(e)}`);
+        this.#report(cmd, sid, "failed", "", "exec_failed");
+      }
+    );
+  }
+  /** 真的弹窗口（测试环境绝不弹：vitest 下直接当开窗失败） */
+  async #openTerminal(runId) {
+    if (process.env.VITEST) throw new Error("\u6D4B\u8BD5\u73AF\u5883\u4E0D\u5F00\u7A97");
+    const how = await openTerminal(
+      { node: this.#deps.nodePath, cli: defaultCliPath(), home: deskbuddyHome(), runId },
+      defaultOpenerDeps(() => findWt())
+    );
+    log(`\u5F00\u7A97 ${runId.slice(0, 8)} \u65B9\u5F0F=${how}`);
+  }
   /**
    * 经 app-server 往 Codex 会话里发一轮（切片 B）。回报语义与 Claude 窗口一致（mode=window）：
    * 排队 queued → 发出 started；排队中过期 rejected/expired。
@@ -4685,8 +5348,8 @@ var Daemon = class {
       }
     );
   }
-  async #execute(cmd, sessionId, cwd, handleKey = cmd.tool) {
-    if (sessionId) {
+  async #execute(cmd, sessionId, cwd, handleKey = cmd.tool, ended = false) {
+    if (sessionId && !ended) {
       const fresh = readState(sessionId);
       if (!fresh) {
         log(`\u6307\u4EE4 ${cmd.instructionId} \u653E\u5F03\uFF1A\u4F1A\u8BDD ${sessionId} \u5728\u6267\u884C\u524D\u5DF2\u6D88\u5931`);
@@ -4810,7 +5473,7 @@ var Daemon = class {
   }
 };
 function newRunId() {
-  return randomBytes6(12).toString("hex");
+  return randomBytes7(12).toString("hex");
 }
 async function runDaemon(deps = {}) {
   const d = new Daemon(deps);
@@ -4828,7 +5491,7 @@ async function runDaemonCommand(opts = {}) {
   }
   if (opts.foreground) process.env.DESKBUDDY_DAEMON_FOREGROUND = "1";
   try {
-    writeFileSync14(pidFilePath(), String(process.pid), "utf8");
+    writeFileSync17(pidFilePath(), String(process.pid), "utf8");
   } catch {
   }
   let daemon;
@@ -4844,7 +5507,7 @@ async function runDaemonCommand(opts = {}) {
     log(`\u6536\u5230 ${sig}\uFF0C\u9000\u51FA`);
     daemon.stop();
     try {
-      rmSync9(pidFilePath(), { force: true });
+      rmSync12(pidFilePath(), { force: true });
     } catch {
     }
     process.exit(0);
@@ -4861,8 +5524,8 @@ async function runDaemonCommand(opts = {}) {
 }
 
 // src/core/registry.ts
-import { mkdirSync as mkdirSync15, readFileSync as readFileSync14, writeFileSync as writeFileSync15 } from "fs";
-import { join as join18 } from "path";
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync16, writeFileSync as writeFileSync18 } from "fs";
+import { join as join21 } from "path";
 var FALLBACK = {
   version: "builtin",
   tools: {
@@ -4940,11 +5603,11 @@ var FALLBACK = {
   }
 };
 function registryCachePath() {
-  return join18(deskbuddyHome(), "tool-registry.json");
+  return join21(deskbuddyHome(), "tool-registry.json");
 }
 function loadRegistry() {
   try {
-    return JSON.parse(readFileSync14(registryCachePath(), "utf8"));
+    return JSON.parse(readFileSync16(registryCachePath(), "utf8"));
   } catch {
     return FALLBACK;
   }
@@ -4952,15 +5615,15 @@ function loadRegistry() {
 async function refreshRegistry() {
   try {
     const registry = await api.toolRegistry();
-    mkdirSync15(deskbuddyHome(), { recursive: true });
-    writeFileSync15(registryCachePath(), JSON.stringify(registry, null, 2), "utf8");
+    mkdirSync18(deskbuddyHome(), { recursive: true });
+    writeFileSync18(registryCachePath(), JSON.stringify(registry, null, 2), "utf8");
   } catch {
   }
 }
 
 // src/adapters/ccHook.ts
-import { chmodSync as chmodSync5, existsSync as existsSync11, mkdirSync as mkdirSync16, readFileSync as readFileSync15, renameSync as renameSync12, rmSync as rmSync10, statSync as statSync5, writeFileSync as writeFileSync16 } from "fs";
-import { dirname as dirname6, join as join19 } from "path";
+import { chmodSync as chmodSync6, existsSync as existsSync11, mkdirSync as mkdirSync19, readFileSync as readFileSync17, renameSync as renameSync14, rmSync as rmSync13, statSync as statSync6, writeFileSync as writeFileSync19 } from "fs";
+import { dirname as dirname6, join as join22 } from "path";
 var CC_EVENTS = [
   "UserPromptSubmit",
   "PreToolUse",
@@ -4971,7 +5634,7 @@ var CC_EVENTS = [
 ];
 function readSettings(path) {
   if (!existsSync11(path)) return {};
-  const raw = readFileSync15(path, "utf8");
+  const raw = readFileSync17(path, "utf8");
   if (raw.trim() === "") return {};
   try {
     return JSON.parse(raw);
@@ -4980,17 +5643,17 @@ function readSettings(path) {
   }
 }
 function writeSettings(path, settings) {
-  mkdirSync16(dirname6(path), { recursive: true });
+  mkdirSync19(dirname6(path), { recursive: true });
   let mode;
   try {
-    mode = statSync5(path).mode & 511;
+    mode = statSync6(path).mode & 511;
   } catch {
     mode = void 0;
   }
   const tmp = path + ".deskbuddy.tmp";
-  writeFileSync16(tmp, JSON.stringify(settings, null, 2), "utf8");
-  if (mode !== void 0) chmodSync5(tmp, mode);
-  renameSync12(tmp, path);
+  writeFileSync19(tmp, JSON.stringify(settings, null, 2), "utf8");
+  if (mode !== void 0) chmodSync6(tmp, mode);
+  renameSync14(tmp, path);
 }
 function mentions(command, script) {
   return !!command && (command.includes(script) || command.includes(fwdSlash(script)));
@@ -5093,8 +5756,8 @@ function installCcRewake(settingsPath, wakePath, platform = process.platform) {
 function uninstallCcHook(settingsPath, hookPath) {
   const settings = readSettings(settingsPath);
   if (!settings.hooks) return;
-  const gatePath = join19(dirname6(hookPath), "gate.cjs");
-  const wakePath = join19(dirname6(hookPath), "wake.cjs");
+  const gatePath = join22(dirname6(hookPath), "gate.cjs");
+  const wakePath = join22(dirname6(hookPath), "wake.cjs");
   for (const event of Object.keys(settings.hooks)) {
     const groups = settings.hooks[event] ?? [];
     const kept = [];
@@ -5108,14 +5771,14 @@ function uninstallCcHook(settingsPath, hookPath) {
   }
   writeSettings(settingsPath, settings);
   try {
-    rmSync10(join19(dirname6(hookPath), "wake", "tokens"), { recursive: true, force: true });
+    rmSync13(join22(dirname6(hookPath), "wake", "tokens"), { recursive: true, force: true });
   } catch {
   }
 }
 
 // src/adapters/codexHook.ts
-import { chmodSync as chmodSync6, existsSync as existsSync12, mkdirSync as mkdirSync17, readFileSync as readFileSync16, renameSync as renameSync13, statSync as statSync6, writeFileSync as writeFileSync17 } from "fs";
-import { dirname as dirname7, join as join20 } from "path";
+import { chmodSync as chmodSync7, existsSync as existsSync12, mkdirSync as mkdirSync20, readFileSync as readFileSync18, renameSync as renameSync15, statSync as statSync7, writeFileSync as writeFileSync20 } from "fs";
+import { dirname as dirname7, join as join23 } from "path";
 var CODEX_MARKER_BEGIN = "# >>> deskbuddy >>>";
 var CODEX_MARKER_END = "# <<< deskbuddy <<<";
 var CODEX_EVENTS = [
@@ -5128,7 +5791,7 @@ var CODEX_EVENTS = [
 ];
 var CODEX_TRUST_NOTICE = "\u26A0\uFE0F  \u4E0B\u6B21\u542F\u52A8 Codex \u65F6\u4F1A\u8981\u6C42\u4F60\u786E\u8BA4\u4FE1\u4EFB\u8FD9\u4E2A hook\uFF0C\u8BF7\u9009\u62E9\u540C\u610F\u2014\u2014\u4E0D\u786E\u8BA4\u7684\u8BDD Codex \u4E0D\u4F1A\u6267\u884C\u5B83\u3002\n   Codex \u7ECF `--remote` \u8FDE\u5E38\u9A7B app-server \u4F7F\u7528\u65F6\uFF0C\u7A97\u53E3\u91CC\u7684\u6388\u6743\u6846\u4E5F\u80FD\u5728\u8BBE\u5907\u4E0A\u786E\u8BA4\uFF08\u5B88\u62A4\u8FDB\u7A0B\u5728\u8DD1\u65F6\u751F\u6548\uFF09";
 function codexConfigPath() {
-  return join20(codexHome(), "config.toml");
+  return join23(codexHome(), "config.toml");
 }
 function renderBlock(hookPath, events, tool, platform) {
   const command = JSON.stringify(`node ${platform === "win32" ? winPsPath(hookPath) : hookPath} ${tool}`);
@@ -5147,17 +5810,17 @@ function renderBlock(hookPath, events, tool, platform) {
   return lines2.join("\n");
 }
 function writeAtomic(path, content) {
-  mkdirSync17(dirname7(path), { recursive: true });
+  mkdirSync20(dirname7(path), { recursive: true });
   let mode;
   try {
-    mode = statSync6(path).mode & 511;
+    mode = statSync7(path).mode & 511;
   } catch {
     mode = void 0;
   }
   const tmp = path + ".deskbuddy.tmp";
-  writeFileSync17(tmp, content, "utf8");
-  if (mode !== void 0) chmodSync6(tmp, mode);
-  renameSync13(tmp, path);
+  writeFileSync20(tmp, content, "utf8");
+  if (mode !== void 0) chmodSync7(tmp, mode);
+  renameSync15(tmp, path);
 }
 function assertSafeToAppend(raw, path) {
   for (const quote of ['"""', "'''"]) {
@@ -5167,7 +5830,7 @@ function assertSafeToAppend(raw, path) {
   }
 }
 function installCodexHook(configPath2, hookPath, events = CODEX_EVENTS, tool = "codex", platform = process.platform) {
-  const raw = existsSync12(configPath2) ? readFileSync16(configPath2, "utf8") : "";
+  const raw = existsSync12(configPath2) ? readFileSync18(configPath2, "utf8") : "";
   if (raw.includes(CODEX_MARKER_BEGIN)) return;
   assertSafeToAppend(raw, configPath2);
   const block = renderBlock(hookPath, events, tool, platform);
@@ -5176,7 +5839,7 @@ function installCodexHook(configPath2, hookPath, events = CODEX_EVENTS, tool = "
 }
 function uninstallCodexHook(configPath2) {
   if (!existsSync12(configPath2)) return;
-  const raw = readFileSync16(configPath2, "utf8");
+  const raw = readFileSync18(configPath2, "utf8");
   const lines2 = raw.split("\n");
   const begin = lines2.findIndex((l) => l.trim() === CODEX_MARKER_BEGIN);
   if (begin === -1) return;
@@ -5190,11 +5853,11 @@ function uninstallCodexHook(configPath2) {
 }
 
 // src/commands/tools.ts
-import { existsSync as existsSync13, readFileSync as readFileSync17 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync19 } from "fs";
 function fileContains(path, needle) {
   try {
     if (!existsSync13(path)) return false;
-    return readFileSync17(path, "utf8").includes(needle);
+    return readFileSync19(path, "utf8").includes(needle);
   } catch {
     return false;
   }
@@ -5268,13 +5931,13 @@ function subscribedEvents(registry, tool, fallback) {
 }
 
 // src/commands/enable.ts
-import { dirname as dirname9, join as join23 } from "path";
+import { dirname as dirname9, join as join26 } from "path";
 
 // src/wrap/shim.ts
-import { execFileSync as execFileSync8 } from "child_process";
-import { chmodSync as chmodSync7, existsSync as existsSync14, mkdirSync as mkdirSync18, readdirSync as readdirSync4, readFileSync as readFileSync18, rmdirSync, rmSync as rmSync11, writeFileSync as writeFileSync18 } from "fs";
+import { execFileSync as execFileSync9 } from "child_process";
+import { chmodSync as chmodSync8, existsSync as existsSync14, mkdirSync as mkdirSync21, readdirSync as readdirSync5, readFileSync as readFileSync20, rmdirSync, rmSync as rmSync14, writeFileSync as writeFileSync21 } from "fs";
 import { homedir as homedir5 } from "os";
-import { delimiter as delimiter2, join as join21, resolve as resolve2 } from "path";
+import { delimiter as delimiter2, join as join24, resolve as resolve2 } from "path";
 var SHIM_FALLBACK_EXIT = 213;
 var WIN_SHIM_ENABLED = false;
 var SHIM_COMMANDS = { claude_code: "claude", codex: "codex" };
@@ -5284,10 +5947,10 @@ var RC_END = "# <<< deskbuddy <<<";
 var RC_FILES = [".zshrc", ".bashrc"];
 var WIN_PENDING = "Windows \u7A97\u53E3\u63A5\u7BA1\u5F85\u9A8C\u8BC1\uFF0C\u6682\u672A\u5F00\u542F";
 function shimDir() {
-  return join21(deskbuddyHome(), "bin");
+  return join24(deskbuddyHome(), "bin");
 }
 function shimFile(binDir, command, platform = process.platform) {
-  return join21(binDir, platform === "win32" ? `${command}.cmd` : command);
+  return join24(binDir, platform === "win32" ? `${command}.cmd` : command);
 }
 function shQuote3(s) {
   return `'${s.replace(/'/g, `'\\''`)}'`;
@@ -5416,10 +6079,10 @@ function removeRcBlock(content) {
   return content.slice(0, start) + content.slice(end);
 }
 function readRc(p) {
-  return readFileSync18(p).toString("latin1");
+  return readFileSync20(p).toString("latin1");
 }
 function writeRc(p, latin1) {
-  writeFileSync18(p, Buffer.from(latin1, "latin1"));
+  writeFileSync21(p, Buffer.from(latin1, "latin1"));
 }
 function toLatin1(utf8) {
   return Buffer.from(utf8, "utf8").toString("latin1");
@@ -5441,7 +6104,7 @@ function removePathEntry(value, dir) {
 var PS_READ = "$k=[Microsoft.Win32.Registry]::CurrentUser.OpenSubKey('Environment');$v='';if($k){$v=$k.GetValue('Path','',[Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)};[Console]::Out.Write([Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes([string]$v)))";
 var PS_WRITE = "$k=[Microsoft.Win32.Registry]::CurrentUser.CreateSubKey('Environment');$kind=[Microsoft.Win32.RegistryValueKind]::ExpandString;try{$kind=$k.GetValueKind('Path')}catch{};if([string]::IsNullOrEmpty($env:DESKBUDDY_NEW_PATH)){$k.DeleteValue('Path',$false)}else{$k.SetValue('Path',$env:DESKBUDDY_NEW_PATH,$kind)};[Environment]::SetEnvironmentVariable('DESKBUDDY_PATH_REFRESH','1','User');[Environment]::SetEnvironmentVariable('DESKBUDDY_PATH_REFRESH',$null,'User')";
 function psWinPath() {
-  const ps = (script, env) => execFileSync8("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", script], {
+  const ps = (script, env) => execFileSync9("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", script], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"],
     windowsHide: true,
@@ -5488,12 +6151,12 @@ function installShim(tool, e) {
     if (!node || !cli || !bin) {
       return { ok: false, message: "\u7A97\u53E3\u63A5\u7BA1\u6CA1\u88C5\uFF1A\u5B89\u88C5\u8DEF\u5F84\u91CC\u6709\u975E ASCII \u5B57\u7B26\uFF0CWindows \u7684 .cmd \u8BFB\u4E0D\u4E86\uFF08\u4E0D\u5F71\u54CD\u5176\u5B83\u529F\u80FD\uFF09" };
     }
-    mkdirSync18(e.binDir, { recursive: true });
-    writeFileSync18(file, cmdScript(tool, command, node, cli, bin), "utf8");
+    mkdirSync21(e.binDir, { recursive: true });
+    writeFileSync21(file, cmdScript(tool, command, node, cli, bin), "utf8");
   } else {
-    mkdirSync18(e.binDir, { recursive: true, mode: 448 });
-    writeFileSync18(file, shScript(tool, command, e.nodePath, e.cliPath, e.binDir), { encoding: "utf8", mode: 493 });
-    chmodSync7(file, 493);
+    mkdirSync21(e.binDir, { recursive: true, mode: 448 });
+    writeFileSync21(file, shScript(tool, command, e.nodePath, e.cliPath, e.binDir), { encoding: "utf8", mode: 493 });
+    chmodSync8(file, 493);
   }
   const touched = [];
   if (e.platform === "win32") {
@@ -5507,7 +6170,7 @@ function installShim(tool, e) {
   } else if (e.rcHome) {
     const block = toLatin1(rcBlock(e.binDir, e.rcHome));
     for (const name of RC_FILES) {
-      const rc = join21(e.rcHome, name);
+      const rc = join24(e.rcHome, name);
       if (!existsSync14(rc)) continue;
       const next = addRcBlock(readRc(rc), block);
       if (next !== null) writeRc(rc, next);
@@ -5528,13 +6191,13 @@ function installShim(tool, e) {
 function ourShims(binDir) {
   let names;
   try {
-    names = readdirSync4(binDir);
+    names = readdirSync5(binDir);
   } catch {
     return [];
   }
   return names.filter((n) => {
     try {
-      return readFileSync18(join21(binDir, n), "utf8").includes(SHIM_MARKER);
+      return readFileSync20(join24(binDir, n), "utf8").includes(SHIM_MARKER);
     } catch {
       return false;
     }
@@ -5546,8 +6209,8 @@ function uninstallShim(tool, e) {
   let removed = false;
   const file = shimFile(e.binDir, command, e.platform);
   try {
-    if (existsSync14(file) && readFileSync18(file, "utf8").includes(SHIM_MARKER)) {
-      rmSync11(file, { force: true });
+    if (existsSync14(file) && readFileSync20(file, "utf8").includes(SHIM_MARKER)) {
+      rmSync14(file, { force: true });
       removed = true;
     }
   } catch {
@@ -5565,7 +6228,7 @@ function uninstallShim(tool, e) {
     }
   } else if (e.rcHome) {
     for (const name of RC_FILES) {
-      const rc = join21(e.rcHome, name);
+      const rc = join24(e.rcHome, name);
       if (!existsSync14(rc)) continue;
       const next = removeRcBlock(readRc(rc));
       if (next !== null) {
@@ -5575,7 +6238,7 @@ function uninstallShim(tool, e) {
     }
   }
   try {
-    if (existsSync14(e.binDir) && readdirSync4(e.binDir).length === 0) rmdirSync(e.binDir);
+    if (existsSync14(e.binDir) && readdirSync5(e.binDir).length === 0) rmdirSync(e.binDir);
   } catch {
   }
   if (!removed && touched.length === 0) return { ok: true, message: "" };
@@ -5587,7 +6250,7 @@ function shimState(tool, binDir, pathEnv, platform = process.platform) {
   const file = shimFile(binDir, command, platform);
   let installed = false;
   try {
-    installed = readFileSync18(file, "utf8").includes(SHIM_MARKER);
+    installed = readFileSync20(file, "utf8").includes(SHIM_MARKER);
   } catch {
     installed = false;
   }
@@ -5598,16 +6261,16 @@ function shimState(tool, binDir, pathEnv, platform = process.platform) {
 }
 
 // src/wrap/pty.ts
-import { chmodSync as chmodSync8, existsSync as existsSync15, statSync as statSync7 } from "fs";
+import { chmodSync as chmodSync9, existsSync as existsSync15, statSync as statSync8 } from "fs";
 import { createRequire as createRequire2 } from "module";
-import { dirname as dirname8, join as join22 } from "path";
+import { dirname as dirname8, join as join25 } from "path";
 var req = createRequire2(import.meta.url);
 function fixSpawnHelper() {
   if (process.platform !== "darwin") return;
   try {
-    const dir = join22(dirname8(req.resolve("node-pty/package.json")), "prebuilds", `darwin-${process.arch}`);
-    const helper = join22(dir, "spawn-helper");
-    if (existsSync15(helper) && (statSync7(helper).mode & 73) === 0) chmodSync8(helper, 493);
+    const dir = join25(dirname8(req.resolve("node-pty/package.json")), "prebuilds", `darwin-${process.arch}`);
+    const helper = join25(dir, "spawn-helper");
+    if (existsSync15(helper) && (statSync8(helper).mode & 73) === 0) chmodSync9(helper, 493);
   } catch {
   }
 }
@@ -5702,14 +6365,14 @@ function installTools(tools, out, shim = defaultShimEnvForInstall()) {
     installed.push(tool);
     out(`\u2705 ${tool}\uFF1Ahook \u5DF2\u88C5\u8FDB ${configPath2}\uFF08${events.length} \u4E2A\u4E8B\u4EF6\uFF09`);
     try {
-      if (adapter.installWindowGate?.(configPath2, join23(dirname9(hookPath), "gate.cjs"), tool)) {
+      if (adapter.installWindowGate?.(configPath2, join26(dirname9(hookPath), "gate.cjs"), tool)) {
         out(`   \u7A97\u53E3\u91CC\u5F39\u6388\u6743\u6846\u65F6\uFF0C\u8BBE\u5907\u4E0A\u4E5F\u80FD\u786E\u8BA4\uFF08\u5B88\u62A4\u8FDB\u7A0B\u5728\u8DD1\u65F6\u751F\u6548\uFF09`);
       }
     } catch (e) {
       out(`\u26A0\uFE0F  ${tool}\uFF1A\u8BBE\u5907\u786E\u8BA4\u6388\u6743\u6CA1\u88C5\u4E0A\uFF1A${e.message}`);
     }
     try {
-      if (adapter.installRewake?.(configPath2, join23(dirname9(hookPath), "wake.cjs"), tool)) {
+      if (adapter.installRewake?.(configPath2, join26(dirname9(hookPath), "wake.cjs"), tool)) {
         out(`   \u7A97\u53E3\u5F00\u7740\u65F6\uFF0C\u8BBE\u5907\u6307\u4EE4\u76F4\u63A5\u5728\u8FD9\u4E2A\u7A97\u53E3\u91CC\u6267\u884C\uFF08\u5B88\u62A4\u8FDB\u7A0B\u5728\u8DD1\u65F6\u751F\u6548\uFF09`);
       }
     } catch (e) {
@@ -5809,8 +6472,8 @@ async function runDisable(tools, opts = {}) {
 }
 
 // src/commands/install.ts
-import { mkdirSync as mkdirSync19, rmSync as rmSync12, writeFileSync as writeFileSync19 } from "fs";
-import { join as join24 } from "path";
+import { mkdirSync as mkdirSync22, rmSync as rmSync15, writeFileSync as writeFileSync22 } from "fs";
+import { join as join27 } from "path";
 
 // src/core/detect.ts
 import { existsSync as existsSync16 } from "fs";
@@ -5855,7 +6518,7 @@ function detectTools(d = defaultDetectDeps()) {
 import qrcode from "qrcode-terminal";
 
 // src/commands/remoteCwd.ts
-import { existsSync as existsSync17, statSync as statSync8 } from "fs";
+import { existsSync as existsSync17, statSync as statSync9 } from "fs";
 import { createInterface } from "readline";
 import { homedir as homedir6 } from "os";
 import { isAbsolute as isAbsolute2, resolve as resolve3 } from "path";
@@ -5869,7 +6532,7 @@ function normalizePath(raw, home = homedir6()) {
 function checkPath(abs) {
   if (!existsSync17(abs)) return "missing";
   try {
-    return statSync8(abs).isDirectory() ? "ok" : "not_a_dir";
+    return statSync9(abs).isDirectory() ? "ok" : "not_a_dir";
   } catch {
     return "missing";
   }
@@ -6071,11 +6734,11 @@ function inSandbox(env) {
 }
 function precheckWritable(dirs) {
   for (const dir of dirs) {
-    const probe = join24(dir, `.deskbuddy-probe-${process.pid}`);
+    const probe = join27(dir, `.deskbuddy-probe-${process.pid}`);
     try {
-      mkdirSync19(dir, { recursive: true });
-      writeFileSync19(probe, "");
-      rmSync12(probe, { force: true });
+      mkdirSync22(dir, { recursive: true });
+      writeFileSync22(probe, "");
+      rmSync15(probe, { force: true });
     } catch (e) {
       return { ok: false, dir, error: e.message };
     }
@@ -6204,7 +6867,7 @@ async function runInstall(opts, deps = defaultInstallDeps()) {
 
 // src/commands/logout.ts
 import { createInterface as createInterface2 } from "readline";
-import { existsSync as existsSync18, rmSync as rmSync13 } from "fs";
+import { existsSync as existsSync18, rmSync as rmSync16 } from "fs";
 function stdout4(line) {
   process.stdout.write(line + "\n");
 }
@@ -6236,7 +6899,7 @@ async function runLogout(opts = {}) {
   }
   await runDisable([], { out, brief: true, keepAutostart: opts.keepAutostart });
   if (existsSync18(home)) {
-    rmSync13(home, { recursive: true, force: true });
+    rmSync16(home, { recursive: true, force: true });
   }
   out("");
   out("\u2705 \u5DF2\u6E05\u9664\u672C\u673A\u7684 DeskBuddy \u6570\u636E\u3002");
@@ -6396,45 +7059,15 @@ async function runUpdate(opts = {}) {
 }
 
 // src/wrap/run.ts
-import { randomBytes as randomBytes7 } from "crypto";
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync21, statSync as statSync10, truncateSync as truncateSync3 } from "fs";
-import { join as join26 } from "path";
+import { randomBytes as randomBytes8 } from "crypto";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync24, statSync as statSync11, truncateSync as truncateSync3 } from "fs";
+import { join as join29 } from "path";
 import { StringDecoder } from "string_decoder";
 
-// src/wrap/screen.ts
-var ESC = "\x1B";
-var PASTE_BEGIN = ESC + "[200~";
-var PASTE_END = ESC + "[201~";
-function sanitize(text) {
-  return String(text).replace(/\r\n?/g, "\n").replace(/[\x00-\x08\x0b-\x1f\x7f-\x9f]/g, "");
-}
-function prepare(text) {
-  return " " + sanitize(text).trim();
-}
-var PERMISSION_RE = /Do you want to (proceed|make|create|run|allow)|[❯>]\s*1\. Yes/;
-function inspectLines(lines2) {
-  const text = lines2.join("\n");
-  const permission = PERMISSION_RE.test(text);
-  const rules = [];
-  lines2.forEach((l, i) => {
-    if (/^─{20,}/.test(l.trim())) rules.push(i);
-  });
-  let input = null;
-  if (rules.length >= 2) {
-    const a = rules[rules.length - 2];
-    const b = rules[rules.length - 1];
-    input = lines2.slice(a + 1, b).join("\n").replace(/^\s*[❯>]\s?/, "").trimEnd();
-  }
-  return { permission, input };
-}
-function boxMatches(view, body) {
-  if (view.input === null || view.permission) return false;
-  const flat = (x) => x.replace(/\s+/g, "");
-  return flat(view.input) === flat(body) || /\[Pasted text #\d+/.test(view.input);
-}
-
 // src/wrap/injector.ts
+var SEEN_MAX = 200;
 var QUIET_MS = 1500;
+var STARTUP_QUIET_MS = 3e3;
 var KEY_QUIET_MS = 3e3;
 var PASTE_SETTLE_MS = 400;
 var SUBMIT_WAIT_MS = 1e4;
@@ -6446,6 +7079,8 @@ var Injector = class {
   #lastKey = 0;
   #busy = false;
   #closed = false;
+  /** instructionId → 那一条（去重：daemon 等 ack 超时重送时，不能写进窗口两遍） */
+  #seen = /* @__PURE__ */ new Map();
   constructor(deps) {
     this.#d = deps;
     this.#lastOut = deps.now();
@@ -6465,7 +7100,27 @@ var Injector = class {
     if (i >= 0) this.#queue.splice(i, 1);
     if (job.done) return;
     job.done = true;
-    job.reply({ instructionId: job.instructionId, ...msg });
+    job.finalMsg = { instructionId: job.instructionId, ...msg };
+    job.reply(job.finalMsg);
+  }
+  /** 记下这条，超过上限丢最早的 */
+  #remember(job) {
+    this.#seen.set(job.instructionId, job);
+    while (this.#seen.size > SEEN_MAX) this.#seen.delete(this.#seen.keys().next().value);
+  }
+  /**
+   * 同一 instructionId 又送来了（daemon 没等到 ack 重送、而第一次其实已收下）：不再排队，
+   * 把后续进展改回给新连接；已有终态的原样再回一次
+   */
+  #rebind(old, job) {
+    job.reply({ instructionId: job.instructionId, status: "ack" });
+    if (old.done) {
+      if (old.finalMsg) job.reply(old.finalMsg);
+      return;
+    }
+    old.reply = job.reply;
+    old.alive = job.alive;
+    if (old.queuedSent) job.reply({ instructionId: job.instructionId, status: "queued", mode: "window", reason: "" });
   }
   /**
    * 这个会话还是不是本窗口当前的会话。
@@ -6476,19 +7131,35 @@ var Injector = class {
   #owns(sessionId) {
     const last = this.#d.lastEvent();
     if (!last) return true;
+    if (!sessionId) return last.ev !== "SessionEnd";
     return last.sid === sessionId && last.ev !== "SessionEnd";
   }
   /** 通道收到一条指令 */
   submit(job) {
+    const seen = this.#seen.get(job.instructionId);
+    if (seen) {
+      this.#rebind(seen, job);
+      return;
+    }
     if (this.#closed) {
       job.reply({ instructionId: job.instructionId, status: "not_here" });
       return;
     }
+    if (tooLongToInject(job.text)) {
+      this.#remember(job);
+      job.done = true;
+      job.finalMsg = { instructionId: job.instructionId, status: "rejected", mode: "window", reason: TEXT_TOO_LONG };
+      job.reply(job.finalMsg);
+      return;
+    }
     if (!this.#owns(job.sessionId)) {
+      this.#remember(job);
       job.done = true;
-      job.reply({ instructionId: job.instructionId, status: "rejected", mode: "window", reason: "session_gone" });
+      job.finalMsg = { instructionId: job.instructionId, status: "rejected", mode: "window", reason: "session_gone" };
+      job.reply(job.finalMsg);
       return;
     }
+    this.#remember(job);
     job.phase = "queued";
     job.reply({ instructionId: job.instructionId, status: "ack" });
     this.#queue.push(job);
@@ -6509,10 +7180,11 @@ var Injector = class {
     if (v.input === null) why.push("no-input-box");
     else if (v.input !== "") why.push("user-typing");
     const last = this.#d.lastEvent();
-    if (!last) why.push("hook:none");
-    else if (!IDLE_EVENTS.has(last.ev)) why.push("hook:" + last.ev);
+    if (!last) {
+      if (!this.#d.startupIdle) why.push("hook:none");
+    } else if (!IDLE_EVENTS.has(last.ev)) why.push("hook:" + last.ev);
     const now = this.#d.now();
-    if (now - this.#lastOut < QUIET_MS) why.push("screen-busy");
+    if (now - this.#lastOut < (last ? QUIET_MS : STARTUP_QUIET_MS)) why.push("screen-busy");
     if (now - this.#lastKey < KEY_QUIET_MS) why.push("recent-key");
     return why;
   }
@@ -6523,6 +7195,7 @@ var Injector = class {
     if (job.alive && !job.alive()) {
       this.#queue.shift();
       job.done = true;
+      this.#seen.delete(job.instructionId);
       this.#d.log?.("daemon \u8FDE\u63A5\u5DF2\u65AD\uFF0C\u4E22\u5F03\u672A\u5199\u5165\u7684\u4E00\u6761");
       return;
     }
@@ -6609,8 +7282,8 @@ var Injector = class {
 };
 
 // src/wrap/passthrough.ts
-import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync2 } from "fs";
+import { spawn as spawn3 } from "child_process";
+import { realpathSync as realpathSync3 } from "fs";
 import { constants as constants2 } from "os";
 import { dirname as dirname11, resolve as resolve4 } from "path";
 var CLAUDE_SUBCOMMANDS = /* @__PURE__ */ new Set([
@@ -6668,7 +7341,7 @@ function norm(p, win) {
 }
 function real(p) {
   try {
-    return realpathSync2(p);
+    return realpathSync3(p);
   } catch {
     return p;
   }
@@ -6683,6 +7356,9 @@ function findReal(tool, d = defaultLocateDeps(), skip = shimDir()) {
     const loc = locate(tool, dd);
     return loc && !inSkip(loc.prefixArgs[0] && /\.(?:c|m)?js$/i.test(loc.prefixArgs[0]) ? loc.prefixArgs[0] : loc.file) ? loc : null;
   }
+  if (win && tool === "claude_code") {
+    for (const p of winClaudeExeCandidates(dd)) if (dd.exists(p) && !inSkip(p)) return { file: p, prefixArgs: [] };
+  }
   for (const f of whichAllIn(name, dd)) {
     if (inSkip(f)) continue;
     const loc = win ? resolveWinLaunch(f, dd) : { file: f, prefixArgs: [] };
@@ -6702,7 +7378,7 @@ function runDirect(real2, args, env = process.env) {
   return new Promise((done) => {
     let child;
     try {
-      child = spawn2(real2.file, [...real2.prefixArgs, ...args], {
+      child = spawn3(real2.file, [...real2.prefixArgs, ...args], {
         stdio: "inherit",
         // 🔴 再经过垫片也直接放行，不会绕回来
         env: withoutShimFlag({ ...env, DESKBUDDY_WRAPPED: "1" }),
@@ -6752,21 +7428,21 @@ function runDirect(real2, args, env = process.env) {
 }
 
 // src/wrap/codexLaunch.ts
-import { spawn as spawn3 } from "child_process";
-import { closeSync as closeSync2, mkdirSync as mkdirSync20, openSync as openSync2, readdirSync as readdirSync5, readFileSync as readFileSync19, rmSync as rmSync14, statSync as statSync9, truncateSync as truncateSync2, writeFileSync as writeFileSync20, renameSync as renameSync14 } from "fs";
+import { spawn as spawn4 } from "child_process";
+import { closeSync as closeSync3, mkdirSync as mkdirSync23, openSync as openSync3, readdirSync as readdirSync6, readFileSync as readFileSync21, rmSync as rmSync17, statSync as statSync10, truncateSync as truncateSync2, writeFileSync as writeFileSync23, renameSync as renameSync16 } from "fs";
 import { request } from "http";
 import { createServer as createServer4 } from "net";
-import { join as join25 } from "path";
+import { join as join28 } from "path";
 
 // src/core/codexServer.ts
-import { execFileSync as execFileSync9 } from "child_process";
+import { execFileSync as execFileSync10 } from "child_process";
 function isAppServerArgs(args, url) {
   return /\bapp-server\b/.test(args) && new RegExp(`--listen[= ]${url.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?:\\s|$)`).test(args);
 }
 function processArgs(pid) {
   if (process.platform === "win32") return null;
   try {
-    const out = execFileSync9("ps", ["-ww", "-o", "args=", "-p", String(pid)], {
+    const out = execFileSync10("ps", ["-ww", "-o", "args=", "-p", String(pid)], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -6924,10 +7600,10 @@ async function runCodexWindow(real2, args, d) {
 }
 var MAX_LOG_BYTES2 = 1024 * 1024;
 function appServerLogPath() {
-  return join25(deskbuddyHome(), "codex-app-server.log");
+  return join28(deskbuddyHome(), "codex-app-server.log");
 }
 function windowsDir2() {
-  return join25(deskbuddyHome(), "codex-windows");
+  return join28(deskbuddyHome(), "codex-windows");
 }
 function pidAlive(pid) {
   try {
@@ -6940,7 +7616,7 @@ function pidAlive(pid) {
 function daemonAlive(pidFile = pidFilePath(), args = processArgs) {
   let pid = 0;
   try {
-    pid = Number(readFileSync19(pidFile, "utf8").trim());
+    pid = Number(readFileSync21(pidFile, "utf8").trim());
   } catch {
     return false;
   }
@@ -6974,16 +7650,16 @@ function freePort() {
 }
 function startServer(real2, url, env, cwd) {
   const logPath2 = appServerLogPath();
-  mkdirSync20(deskbuddyHome(), { recursive: true });
+  mkdirSync23(deskbuddyHome(), { recursive: true });
   try {
-    if (statSync9(logPath2).size > MAX_LOG_BYTES2) truncateSync2(logPath2, 0);
+    if (statSync10(logPath2).size > MAX_LOG_BYTES2) truncateSync2(logPath2, 0);
   } catch {
   }
-  const fd = openSync2(logPath2, "a");
+  const fd = openSync3(logPath2, "a");
   try {
     const childEnv2 = { ...env, DESKBUDDY_WRAPPED: "1" };
     delete childEnv2.DESKBUDDY_SHIM;
-    const child = spawn3(real2.file, [...real2.prefixArgs, "app-server", "--listen", url], {
+    const child = spawn4(real2.file, [...real2.prefixArgs, "app-server", "--listen", url], {
       detached: true,
       stdio: ["ignore", fd, fd],
       cwd,
@@ -6994,7 +7670,7 @@ function startServer(real2, url, env, cwd) {
     child.unref();
     return child.pid ?? null;
   } finally {
-    closeSync2(fd);
+    closeSync3(fd);
   }
 }
 function killServer(pid) {
@@ -7008,41 +7684,41 @@ function killOwnServer(pid, url) {
   if (a && isAppServerArgs(a, url)) killServer(pid);
 }
 function recordPath(rec) {
-  return join25(windowsDir2(), `${rec.server}.json`);
+  return join28(windowsDir2(), `${rec.server}.json`);
 }
 function writeRecord(rec) {
   try {
-    mkdirSync20(windowsDir2(), { recursive: true, mode: 448 });
+    mkdirSync23(windowsDir2(), { recursive: true, mode: 448 });
     const p = recordPath(rec);
-    writeFileSync20(p + ".tmp", JSON.stringify(rec), { encoding: "utf8", mode: 384 });
-    renameSync14(p + ".tmp", p);
+    writeFileSync23(p + ".tmp", JSON.stringify(rec), { encoding: "utf8", mode: 384 });
+    renameSync16(p + ".tmp", p);
   } catch {
   }
 }
 function removeRecord(rec) {
   try {
-    rmSync14(recordPath(rec), { force: true });
+    rmSync17(recordPath(rec), { force: true });
   } catch {
   }
 }
 function reapWindows(dir = windowsDir2(), alive = pidAlive, args = processArgs, kill = killServer) {
   let names = [];
   try {
-    names = readdirSync5(dir).filter((n) => n.endsWith(".json"));
+    names = readdirSync6(dir).filter((n) => n.endsWith(".json"));
   } catch {
     return;
   }
   for (const n of names) {
-    const p = join25(dir, n);
+    const p = join28(dir, n);
     let rec;
     try {
-      rec = JSON.parse(readFileSync19(p, "utf8"));
+      rec = JSON.parse(readFileSync21(p, "utf8"));
     } catch {
-      rmSync14(p, { force: true });
+      rmSync17(p, { force: true });
       continue;
     }
     if (typeof rec.supervisor !== "number" || typeof rec.server !== "number" || typeof rec.url !== "string") {
-      rmSync14(p, { force: true });
+      rmSync17(p, { force: true });
       continue;
     }
     if (alive(rec.supervisor)) continue;
@@ -7050,13 +7726,13 @@ function reapWindows(dir = windowsDir2(), alive = pidAlive, args = processArgs,
       const a = args(rec.server);
       if (a && isAppServerArgs(a, rec.url)) kill(rec.server);
     }
-    rmSync14(p, { force: true });
+    rmSync17(p, { force: true });
   }
 }
 function launchLog(line) {
   try {
-    mkdirSync20(deskbuddyHome(), { recursive: true });
-    writeFileSync20(join25(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
+    mkdirSync23(deskbuddyHome(), { recursive: true });
+    writeFileSync23(join28(deskbuddyHome(), "wrap.log"), `${(/* @__PURE__ */ new Date()).toISOString()} [codex ${process.pid}] ${line}
 `, { flag: "a" });
   } catch {
   }
@@ -7096,10 +7772,10 @@ function childEnv(src, windowId) {
 }
 function wrapLog(line) {
   try {
-    const p = join26(deskbuddyHome(), "wrap.log");
-    mkdirSync21(deskbuddyHome(), { recursive: true });
+    const p = join29(deskbuddyHome(), "wrap.log");
+    mkdirSync24(deskbuddyHome(), { recursive: true });
     try {
-      if (statSync10(p).size > MAX_LOG_BYTES3) truncateSync3(p, 0);
+      if (statSync11(p).size > MAX_LOG_BYTES3) truncateSync3(p, 0);
     } catch {
     }
     appendFileSync2(p, `${(/* @__PURE__ */ new Date()).toISOString()} [${process.pid}] ${line}
@@ -7121,6 +7797,7 @@ var defaultWrapDeps = () => ({
   log: wrapLog
 });
 async function runWrap(argv, deps = defaultWrapDeps()) {
+  if (argv[0] === "--launch") return runLaunch(argv.slice(1), deps);
   const viaShim = deps.env.DESKBUDDY_SHIM === "1";
   const r = await runWrapInner(argv, deps);
   if (r === "not_found") {
@@ -7178,7 +7855,59 @@ async function runWrapInner(argv, deps) {
   if (r !== null) return r;
   return deps.runDirect(real2, args);
 }
-async function wrapInPty(tool, real2, args, deps) {
+var defaultLaunchDeps = () => ({
+  claim: claimLaunch,
+  isDir: isDirSync,
+  chdir: (p) => process.chdir(p)
+});
+async function runLaunch(argv, deps = defaultWrapDeps(), ld = defaultLaunchDeps()) {
+  const runId = argv[0] ?? "";
+  const hi = argv.indexOf("--home");
+  const home = hi >= 0 ? argv[hi + 1] ?? "" : "";
+  if (!RUN_ID_RE.test(runId)) {
+    deps.stderr.write("deskbuddy: \u542F\u52A8\u53C2\u6570\u4E0D\u5BF9\n");
+    return 2;
+  }
+  if (home) {
+    if (!/^(?:[A-Za-z]:[\\/]|\/)/.test(home)) {
+      deps.stderr.write("deskbuddy: \u542F\u52A8\u53C2\u6570\u4E0D\u5BF9\n");
+      return 2;
+    }
+    process.env.DESKBUDDY_HOME = home;
+    deps.env.DESKBUDDY_HOME = home;
+  }
+  const plan = ld.claim(runId);
+  if (!plan) {
+    deps.stderr.write("deskbuddy: \u8FD9\u4E2A\u7A97\u53E3\u8981\u505A\u7684\u4E8B\u5DF2\u7ECF\u53D6\u6D88\u6216\u6539\u5728\u540E\u53F0\u6267\u884C\u4E86\uFF0C\u53EF\u4EE5\u5173\u6389\u8FD9\u4E2A\u7A97\u53E3\n");
+    return 1;
+  }
+  if (!ld.isDir(plan.cwd)) {
+    deps.stderr.write("deskbuddy: \u5DE5\u4F5C\u76EE\u5F55\u5DF2\u7ECF\u4E0D\u5728\u4E86\n");
+    return 1;
+  }
+  ld.chdir(plan.cwd);
+  const args = plan.resume ? ["--resume", plan.resume] : [];
+  let real2 = null;
+  try {
+    real2 = deps.findReal("claude_code");
+  } catch {
+    real2 = null;
+  }
+  if (!real2) {
+    deps.stderr.write("deskbuddy: \u627E\u4E0D\u5230 claude\n");
+    return 127;
+  }
+  const d2 = { ...deps, cwd: () => plan.cwd };
+  let r = null;
+  try {
+    r = await wrapInPty("claude_code", real2, args, d2, { windowId: runId, launched: true });
+  } catch (e) {
+    deps.log(`\u5F00\u7A97\u5305\u88C5\u5931\u8D25\uFF0C\u76F4\u63A5\u8FD0\u884C\uFF1A${e.message}`);
+  }
+  if (r !== null) return r;
+  return deps.runDirect(real2, args);
+}
+async function wrapInPty(tool, real2, args, deps, opts = {}) {
   const pty = deps.loadPty();
   const Headless = deps.loadHeadless();
   if (!pty || !Headless) {
@@ -7186,7 +7915,7 @@ async function wrapInPty(tool, real2, args, deps) {
     return null;
   }
   const { stdout: stdout7 } = deps;
-  const windowId = randomBytes7(16).toString("hex");
+  const windowId = opts.windowId ?? randomBytes8(16).toString("hex");
   const cols = stdout7.columns || 80;
   const rows = stdout7.rows || 24;
   const term = new Headless({ cols, rows, allowProposedApi: true });
@@ -7203,9 +7932,9 @@ async function wrapInPty(tool, real2, args, deps) {
     deps.log(`pty \u8D77\u4E0D\u6765\uFF0C\u653E\u884C\u76F4\u8DD1\uFF1A${e.message}`);
     return null;
   }
-  return runAttached(tool, p, term, windowId, deps);
+  return runAttached(tool, p, term, windowId, deps, opts.launched === true);
 }
-function runAttached(tool, p, term0, windowId, deps) {
+function runAttached(tool, p, term0, windowId, deps, launched = false) {
   const { stdin, stdout: stdout7 } = deps;
   let term = term0;
   let finished = false;
@@ -7235,7 +7964,8 @@ function runAttached(tool, p, term0, windowId, deps) {
       held = null;
       for (const s of h) toPty(s);
     },
-    log: (m) => deps.log(`[${windowId.slice(0, 8)}] ${m}`)
+    log: (m) => deps.log(`[${windowId.slice(0, 8)}] ${m}`),
+    startupIdle: launched
   });
   p.onData((d) => {
     try {
@@ -7292,8 +8022,18 @@ function runAttached(tool, p, term0, windowId, deps) {
   } catch (e) {
     deps.log(`\u63A5\u7BA1\u7EC8\u7AEF\u51FA\u9519\uFF1A${e.message}`);
   }
+  const secret = randomBytes8(32);
   try {
-    writeWindow(windowId, { pid: process.pid, childPid: p.pid, sock, tool, cwd: deps.cwd(), at: Date.now() });
+    writeWindow(windowId, {
+      pid: process.pid,
+      childPid: p.pid,
+      sock,
+      tool,
+      cwd: deps.cwd(),
+      at: Date.now(),
+      secret: secret.toString("hex"),
+      ...launched ? { launched: true } : {}
+    });
   } catch (e) {
     deps.log(`\u767B\u8BB0\u7A97\u53E3\u5931\u8D25\uFF1A${e.message}`);
   }
@@ -7301,6 +8041,7 @@ function runAttached(tool, p, term0, windowId, deps) {
   if (channelOk) {
     void startChannelServer(
       sock,
+      secret,
       (req2, reply, alive) => {
         try {
           injector.submit({ ...req2, expireAt: req2.expireAt || Date.now() + DEFAULT_TTL_MS, reply, alive });