deskbuddy 0.2.0-beta.5 → 0.2.0-beta.7

package/dist/cli.js

@@ -953,6 +953,42 @@ function buildSnapshot(states, tool, cfg, nowMs, remote) {
 import { createHmac, randomBytes as randomBytes2 } from "crypto";
 import { chmodSync, existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
 import { basename as basename3, join as join7 } from "path";
+
+// src/core/dirFilter.ts
+import { homedir as homedir3, tmpdir } from "os";
+import { posix, win32 } from "path";
+function norm(p, win) {
+  if (win) return win32.resolve(p).replace(/[\\/]+$/, "").toLowerCase();
+  return posix.resolve(p).replace(/\/+$/, "");
+}
+function isUnder(p, base, win) {
+  return p === base || p.startsWith(base + (win ? "\\" : "/"));
+}
+function isAutoWorkspace(p, opts = {}) {
+  if (!p) return false;
+  const win = (opts.platform ?? process.platform) === "win32";
+  const P = win ? win32 : posix;
+  const home = norm(opts.home ?? homedir3(), win);
+  const full = norm(p, win);
+  const name = P.basename(full);
+  const parent = P.dirname(full);
+  if (parent === norm(P.join(home, "WorkBuddy"), win) && /^\d{4}-?\d{2}-?\d{2}/.test(name)) return true;
+  return P.dirname(parent) === norm(P.join(home, "Documents", "Qoder"), win) && /^\d{4}-\d{2}-\d{2}$/.test(P.basename(parent)) && /^[0-9a-f]{8}$/i.test(name);
+}
+function isReportableDir(p, opts = {}) {
+  if (!p) return false;
+  const win = (opts.platform ?? process.platform) === "win32";
+  const P = win ? win32 : posix;
+  const full = norm(p, win);
+  if (full === norm(P.parse(P.resolve(p)).root, win)) return false;
+  if (full === norm(opts.home ?? homedir3(), win)) return false;
+  const tmps = [opts.tmp ?? tmpdir()];
+  if (!win) tmps.push("/tmp", "/private/tmp", "/var/folders", "/private/var/folders");
+  for (const t of tmps) if (t && isUnder(full, norm(t, win), win)) return false;
+  return !isAutoWorkspace(p, opts);
+}
+
+// src/core/dirs.ts
 var DIRS_REPORT_MAX = 10;
 function dirsPath() {
   return join7(deskbuddyHome(), "dirs.json");
@@ -986,8 +1022,8 @@ function readMap() {
     return {};
   }
 }
-function recentDirs(limit = DIRS_REPORT_MAX, exists = existsSync6) {
-  const list = Object.entries(readMap()).filter(([p]) => p && exists(p)).sort((a, b) => b[1] - a[1]).slice(0, limit);
+function recentDirs(limit = DIRS_REPORT_MAX, exists = existsSync6, reportable = (p) => isReportableDir(p)) {
+  const list = Object.entries(readMap()).filter(([p]) => p && reportable(p) && exists(p)).sort((a, b) => b[1] - a[1]).slice(0, limit);
   const counts = /* @__PURE__ */ new Map();
   for (const [p] of list) counts.set(basename3(p), (counts.get(basename3(p)) ?? 0) + 1);
   return list.map(([p, at]) => {
@@ -1074,8 +1110,8 @@ function isExpired(cmd, now = Date.now()) {
 }
 
 // src/daemon/executor.ts
-import { execFile as execFile2, execFileSync as execFileSync4 } from "child_process";
-import { homedir as homedir4 } from "os";
+import { execFile as execFile2, execFileSync as execFileSync5 } from "child_process";
+import { homedir as homedir5 } from "os";
 import { join as join9 } from "path";
 
 // src/daemon/gate/settings.ts
@@ -1134,11 +1170,12 @@ function codexGateArgs(t) {
 }
 
 // src/daemon/locate.ts
+import { execFileSync as execFileSync4 } from "child_process";
 import { accessSync, constants, existsSync as existsSync8, lstatSync, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
-import { homedir as homedir3 } from "os";
-import { delimiter, dirname as dirname4, join as join8 } from "path";
+import { homedir as homedir4 } from "os";
+import { delimiter, dirname as dirname4, join as join8, win32 as win322 } from "path";
 var defaultLocateDeps = () => ({
-  home: homedir3(),
+  home: homedir4(),
   path: process.env.PATH ?? "",
   nodePath: process.execPath,
   isExecutable: (p) => {
@@ -1170,8 +1207,47 @@ var defaultLocateDeps = () => ({
     }
   },
   // 🔴 daemon 自己也不能找到垫片：远程任务要的是真程序（窗口接管 spec 2026-09-30 §3.1）
-  skipDirs: [join8(deskbuddyHome(), "bin")]
+  skipDirs: [join8(deskbuddyHome(), "bin")],
+  winAppHints: (product, exe) => winInstallDirs(product, exe)
 });
+function installDirsFromProcs(procs, exe) {
+  const out = [];
+  for (const p of procs ?? []) {
+    const first = winSplitArgs(p.cmdline)[0] ?? "";
+    if (win322.basename(first).toLowerCase() !== exe.toLowerCase()) continue;
+    const dir = win322.dirname(first);
+    if (win322.isAbsolute(dir) && !out.some((d) => d.toLowerCase() === dir.toLowerCase())) out.push(dir);
+  }
+  return out;
+}
+function parseUninstallDirs(out) {
+  const dirs = [];
+  for (const raw of out.split(/\r?\n/)) {
+    let v = raw.trim().replace(/,\s*-?\d+$/, "").replace(/^"|"$/g, "").trim();
+    if (!v || !win322.isAbsolute(v)) continue;
+    if (/\.exe$/i.test(v)) v = win322.dirname(v);
+    v = v.replace(/[\\/]+$/, "");
+    if (!dirs.some((d) => d.toLowerCase() === v.toLowerCase())) dirs.push(v);
+  }
+  return dirs;
+}
+function winInstallDirs(product, exe) {
+  const fromProcs = installDirsFromProcs(winProcs(), exe);
+  let fromReg = [];
+  try {
+    const name = product.replace(/'/g, "''");
+    const script = `[Console]::OutputEncoding=[Text.Encoding]::UTF8;Get-ItemProperty 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\Software\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object { $_.DisplayName -like '${name}*' } | ForEach-Object { $_.InstallLocation; $_.DisplayIcon }`;
+    const out = execFileSync4("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true,
+      timeout: 1e4
+    });
+    fromReg = parseUninstallDirs(out);
+  } catch {
+  }
+  return [...fromProcs, ...fromReg.filter((d) => !fromProcs.some((p) => p.toLowerCase() === d.toLowerCase()))];
+}
 var isWin = (d) => (d.platform ?? process.platform) === "win32";
 var WIN_EXTS = [".exe", ".cmd", ".bat"];
 function extraBinDirs(home, nodePath = "", win) {
@@ -1251,7 +1327,8 @@ function appDirs(home) {
 function winAppDirs(d, product) {
   return [
     ...d.localAppData ? [join8(d.localAppData, "Programs", product)] : [],
-    join8("C:\\Program Files", product)
+    join8("C:\\Program Files", product),
+    join8("C:\\Program Files (x86)", product)
   ];
 }
 var WORKBUDDY_CLI_IN_WIN_APP = "resources/app.asar.unpacked/cli/bin/codebuddy";
@@ -1277,16 +1354,19 @@ function locateWin(tool, d) {
     case "codex":
       return plain("codex");
     case "workbuddy": {
-      for (const dir of winAppDirs(d, "WorkBuddy")) {
-        for (const ext of [".exe", ".cmd", ""]) {
-          const p = join8(dir, WORKBUDDY_CLI_IN_WIN_APP + ext);
-          if (d.exists(p)) {
-            const r = resolveWinLaunch(p, d);
-            if (r) return r;
+      const inApp = (dirs) => {
+        for (const dir of dirs) {
+          for (const ext of [".exe", ".cmd", ""]) {
+            const p = join8(dir, WORKBUDDY_CLI_IN_WIN_APP + ext);
+            if (d.exists(p)) {
+              const r = resolveWinLaunch(p, d);
+              if (r) return r;
+            }
           }
         }
-      }
-      return plain("codebuddy");
+        return null;
+      };
+      return inApp(winAppDirs(d, "WorkBuddy")) ?? plain("codebuddy") ?? inApp(d.winAppHints?.("WorkBuddy", "WorkBuddy.exe") ?? []);
     }
     case "qoder": {
       for (const dir of winAppDirs(d, "Qoder CN")) {
@@ -1424,7 +1504,7 @@ var TOOL_BINARY = {
   qoder: "qodercli",
   opencode: "opencode"
 };
-function buildSpawnPlan(cmd, cwd, gate, home = homedir4()) {
+function buildSpawnPlan(cmd, cwd, gate, home = homedir5()) {
   const file = TOOL_BINARY[cmd.tool];
   if (!file) return null;
   switch (cmd.tool) {
@@ -1588,7 +1668,7 @@ function killTree(child) {
   if (!child) return;
   if (process.platform === "win32" && child.pid) {
     try {
-      execFileSync4("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
+      execFileSync5("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
       return;
     } catch {
     }
@@ -1861,14 +1941,14 @@ function describe(toolName, toolInput, cwd) {
 }
 
 // src/daemon/gate/procs.ts
-import { execFileSync as execFileSync5 } from "child_process";
+import { execFileSync as execFileSync6 } from "child_process";
 function listDescendants(rootPid) {
   if (process.platform === "win32") {
     return descendantsOf(rootPid, (winProcs() ?? []).map((p) => ({ pid: p.pid, ppid: p.ppid, args: p.cmdline })));
   }
   let out = "";
   try {
-    out = execFileSync5("ps", ["-A", "-ww", "-o", "pid=,ppid=,args="], {
+    out = execFileSync6("ps", ["-A", "-ww", "-o", "pid=,ppid=,args="], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       maxBuffer: 16 * 1024 * 1024
@@ -2746,7 +2826,7 @@ var SeenIds = class _SeenIds {
 };
 
 // src/daemon/codexWatch.ts
-import { execFileSync as execFileSync6 } from "child_process";
+import { execFileSync as execFileSync7 } from "child_process";
 import WebSocket from "ws";
 var TURN_LIMIT_MS = 10 * 60 * 1e3;
 var QUEUE_MAX_MS = 10 * 60 * 1e3;
@@ -2791,7 +2871,7 @@ function discoverAppServers(configured) {
     return parseAppServerUrls((winProcs() ?? []).map((p) => p.cmdline).join("\n"));
   }
   try {
-    const out = execFileSync6("ps", ["-A", "-ww", "-o", "args="], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    const out = execFileSync7("ps", ["-A", "-ww", "-o", "args="], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     return parseAppServerUrls(out);
   } catch {
     return [];
@@ -3428,10 +3508,10 @@ import { chmodSync as chmodSync3, rmSync as rmSync7 } from "fs";
 import { connect, createServer as createServer2 } from "net";
 
 // src/core/wake.ts
-import { execFileSync as execFileSync7 } from "child_process";
+import { execFileSync as execFileSync8 } from "child_process";
 import { createHash as createHash3, createHmac as createHmac2, timingSafeEqual as timingSafeEqual2 } from "crypto";
 import { chmodSync as chmodSync2, closeSync as closeSync2, mkdirSync as mkdirSync14, openSync as openSync2, readdirSync as readdirSync3, readFileSync as readFileSync13, readSync as readSync2, renameSync as renameSync11, rmSync as rmSync6, statSync as statSync4, writeFileSync as writeFileSync13 } from "fs";
-import { tmpdir } from "os";
+import { tmpdir as tmpdir2 } from "os";
 import { join as join17 } from "path";
 function wakeDir(home = deskbuddyHome()) {
   return join17(home, "wake");
@@ -3450,7 +3530,7 @@ function wakeChannelPath(platform = process.platform, home = deskbuddyHome()) {
   const primary = join17(wakeDir(home), "wake.sock");
   if (Buffer.byteLength(primary) <= 103) return primary;
   const uid = typeof process.getuid === "function" ? process.getuid() : 0;
-  return join17(tmpdir(), `deskbuddy-${uid}`, `wake-${homeTag(home)}.sock`);
+  return join17(tmpdir2(), `deskbuddy-${uid}`, `wake-${homeTag(home)}.sock`);
 }
 function pidExists(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
@@ -3521,7 +3601,7 @@ function writeWakeSecret(hex, platform = process.platform) {
   writeFileSync13(tmp, hex, { encoding: "utf8", mode: 384 });
   if (platform === "win32") {
     try {
-      execFileSync7("icacls", [tmp, "/inheritance:r", "/grant:r", `${currentUserSid()}:F`], { stdio: "ignore", windowsHide: true });
+      execFileSync8("icacls", [tmp, "/inheritance:r", "/grant:r", `${currentUserSid()}:F`], { stdio: "ignore", windowsHide: true });
     } catch {
       renameSync11(tmp, file);
       return "\u7A97\u53E3\u5524\u9192\u5BC6\u94A5\u6587\u4EF6\u7684\u6743\u9650\u6CA1\u80FD\u6536\u7D27\uFF08icacls \u5931\u8D25\uFF09";
@@ -3535,7 +3615,7 @@ function writeWakeSecret(hex, platform = process.platform) {
 function restrictToUser(file, platform = process.platform) {
   if (platform !== "win32") return true;
   try {
-    execFileSync7("icacls", [file, "/inheritance:r", "/grant:r", `${currentUserSid()}:F`], { stdio: "ignore", windowsHide: true });
+    execFileSync8("icacls", [file, "/inheritance:r", "/grant:r", `${currentUserSid()}:F`], { stdio: "ignore", windowsHide: true });
     return true;
   } catch {
     return false;
@@ -3543,7 +3623,7 @@ function restrictToUser(file, platform = process.platform) {
 }
 function currentUserSid() {
   try {
-    const out = execFileSync7("whoami", ["/user", "/fo", "csv", "/nh"], { encoding: "utf8", windowsHide: true });
+    const out = execFileSync8("whoami", ["/user", "/fo", "csv", "/nh"], { encoding: "utf8", windowsHide: true });
     const m = /"(S-1-[0-9-]+)"/.exec(out);
     if (m) return `*${m[1]}`;
   } catch {
@@ -3909,7 +3989,7 @@ function boxMatches(view, body) {
 
 // src/core/wrapWindows.ts
 import { chmodSync as chmodSync4, mkdirSync as mkdirSync15, readdirSync as readdirSync4, readFileSync as readFileSync14, renameSync as renameSync12, rmSync as rmSync8, statSync as statSync5, writeFileSync as writeFileSync14 } from "fs";
-import { tmpdir as tmpdir2 } from "os";
+import { tmpdir as tmpdir3 } from "os";
 import { join as join18 } from "path";
 var WINDOW_ID_RE = /^[a-f0-9]{32}$/;
 function windowsDir() {
@@ -4001,7 +4081,7 @@ function channelPath(windowId, platform = process.platform, home = deskbuddyHome
   const primary = join18(home, "win", name);
   if (Buffer.byteLength(primary) <= 103) return primary;
   const uid = typeof process.getuid === "function" ? process.getuid() : 0;
-  return join18(tmpdir2(), `deskbuddy-${uid}`, name);
+  return join18(tmpdir3(), `deskbuddy-${uid}`, name);
 }
 function ensureChannelDir(sockPath) {
   const dir = join18(sockPath, "..");
@@ -4077,7 +4157,7 @@ function launchPending(runId) {
 }
 
 // src/daemon/openWindow.ts
-import { execFile as execFile3, execFileSync as execFileSync8, spawn as spawn2 } from "child_process";
+import { execFile as execFile3, execFileSync as execFileSync9, spawn as spawn2 } from "child_process";
 import { chmodSync as chmodSync5, mkdirSync as mkdirSync17, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "fs";
 import { userInfo } from "os";
 import { join as join20 } from "path";
@@ -4128,14 +4208,14 @@ var defaultGuiDeps = () => ({
   env: process.env,
   macManager: () => {
     try {
-      return execFileSync8("launchctl", ["managername"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 3e3 });
+      return execFileSync9("launchctl", ["managername"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 3e3 });
     } catch {
       return "";
     }
   },
   macConsoleUser: () => {
     try {
-      return execFileSync8("stat", ["-f", "%Su", "/dev/console"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 3e3 });
+      return execFileSync9("stat", ["-f", "%Su", "/dev/console"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 3e3 });
     } catch {
       return "";
     }
@@ -4149,7 +4229,7 @@ var defaultGuiDeps = () => ({
   },
   winSessionId: () => {
     try {
-      const out = execFileSync8("tasklist", ["/FI", `PID eq ${process.pid}`, "/FO", "CSV", "/NH"], {
+      const out = execFileSync9("tasklist", ["/FI", `PID eq ${process.pid}`, "/FO", "CSV", "/NH"], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         windowsHide: true,
@@ -5567,8 +5647,8 @@ var FALLBACK = {
       format: "codex-toml",
       processNames: ["codex"],
       // codex-thread-name 是机会主义的一级：session_index.jsonl 里的 thread_name
-      // 原生只有 /rename 手动设，多数用户是空的，取不到就往下回落
-      titleSources: ["codex-thread-name", "git-branch", "project"],
+      // 只有 /rename 或 VS Code 扩展起过名的才有，多数是空的，取不到用首条指令
+      titleSources: ["codex-thread-name", "first-prompt", "git-branch", "project"],
       events: {
         UserPromptSubmit: "watch",
         PreToolUse: "watch",
@@ -5581,7 +5661,9 @@ var FALLBACK = {
     workbuddy: {
       format: "cc-hook",
       processNames: ["WorkBuddy"],
-      titleSources: ["git-branch", "project"],
+      // WorkBuddy 的 transcript 与 Claude Code 同格式，也写 ai-title（2026-10-01 WorkBuddy 5.6.2 实测）；
+      // 工作目录是按时间自动建的，目录名不能当标题
+      titleSources: ["cc-ai-title", "first-prompt", "git-branch", "project"],
       events: {
         UserPromptSubmit: "watch",
         PreToolUse: "watch",
@@ -5594,7 +5676,9 @@ var FALLBACK = {
     qoder: {
       format: "cc-hook",
       processNames: ["Qoder CN"],
-      titleSources: ["git-branch", "project"],
+      // 桌面端会话库里的标题（先是首条指令，后被换成 AI 摘要）；qodercli 命令行版的会话不在库里，落到首条指令
+      // （CLI 1.1.61 实测 transcript 里没有 ai-title，UserPromptSubmit 带 prompt）
+      titleSources: ["qoder-session-title", "first-prompt", "git-branch", "project"],
       events: {
         UserPromptSubmit: "watch",
         PreToolUse: "watch",
@@ -5607,8 +5691,8 @@ var FALLBACK = {
     opencode: {
       format: "oc-plugin",
       processNames: ["opencode"],
-      // opencode 自带的会话标题是模型对提问的摘要，违反隐私约束（spec §6.4），不用
-      titleSources: ["git-branch", "project"],
+      // opencode 自己生成的会话标题（插件从 session.updated 取，随事件传 oc_session_title），没有就用首条指令
+      titleSources: ["oc-session-title", "first-prompt", "git-branch", "project"],
       events: {
         UserPromptSubmit: "watch",
         PreToolUse: "watch",
@@ -5952,9 +6036,9 @@ function subscribedEvents(registry, tool, fallback) {
 import { dirname as dirname9, join as join26 } from "path";
 
 // src/wrap/shim.ts
-import { execFileSync as execFileSync9 } from "child_process";
+import { execFileSync as execFileSync10 } from "child_process";
 import { chmodSync as chmodSync8, existsSync as existsSync14, mkdirSync as mkdirSync21, readdirSync as readdirSync5, readFileSync as readFileSync20, rmdirSync, rmSync as rmSync14, writeFileSync as writeFileSync21 } from "fs";
-import { homedir as homedir5 } from "os";
+import { homedir as homedir6 } from "os";
 import { delimiter as delimiter2, join as join24, resolve as resolve2 } from "path";
 var SHIM_FALLBACK_EXIT = 213;
 var WIN_SHIM_ENABLED = false;
@@ -6122,7 +6206,7 @@ function removePathEntry(value, dir) {
 var PS_READ = "$k=[Microsoft.Win32.Registry]::CurrentUser.OpenSubKey('Environment');$v='';if($k){$v=$k.GetValue('Path','',[Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)};[Console]::Out.Write([Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes([string]$v)))";
 var PS_WRITE = "$k=[Microsoft.Win32.Registry]::CurrentUser.CreateSubKey('Environment');$kind=[Microsoft.Win32.RegistryValueKind]::ExpandString;try{$kind=$k.GetValueKind('Path')}catch{};if([string]::IsNullOrEmpty($env:DESKBUDDY_NEW_PATH)){$k.DeleteValue('Path',$false)}else{$k.SetValue('Path',$env:DESKBUDDY_NEW_PATH,$kind)};[Environment]::SetEnvironmentVariable('DESKBUDDY_PATH_REFRESH','1','User');[Environment]::SetEnvironmentVariable('DESKBUDDY_PATH_REFRESH',$null,'User')";
 function psWinPath() {
-  const ps = (script, env) => execFileSync9("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", script], {
+  const ps = (script, env) => execFileSync10("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", script], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"],
     windowsHide: true,
@@ -6145,7 +6229,7 @@ function psWinPath() {
 function defaultShimEnv(nodePath, cliPath) {
   const env = process.env;
   const isolated = !!env.VITEST || !!env.DESKBUDDY_HOME;
-  const rcHome = env.DESKBUDDY_RC_HOME || (isolated ? null : homedir5());
+  const rcHome = env.DESKBUDDY_RC_HOME || (isolated ? null : homedir6());
   return {
     platform: process.platform,
     binDir: shimDir(),
@@ -6563,9 +6647,9 @@ import qrcode from "qrcode-terminal";
 // src/commands/remoteCwd.ts
 import { existsSync as existsSync17, statSync as statSync9 } from "fs";
 import { createInterface } from "readline";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir7 } from "os";
 import { isAbsolute as isAbsolute2, resolve as resolve3 } from "path";
-function normalizePath(raw, home = homedir6()) {
+function normalizePath(raw, home = homedir7()) {
   const s = (raw || "").trim();
   if (!s) return null;
   const expanded = s === "~" ? home : s.startsWith("~/") || process.platform === "win32" && s.startsWith("~\\") ? resolve3(home, s.slice(2)) : s;
@@ -6747,8 +6831,8 @@ var TOOL_LABELS = {
   opencode: "opencode"
 };
 function checkApiBase(raw, env = process.env) {
-  const norm2 = raw.replace(/\/+$/, "");
-  return norm2 === PROD_API_BASE || norm2 === TEST_API_BASE || env.DESKBUDDY_ALLOW_CUSTOM_API === "1";
+  const norm3 = raw.replace(/\/+$/, "");
+  return norm3 === PROD_API_BASE || norm3 === TEST_API_BASE || env.DESKBUDDY_ALLOW_CUSTOM_API === "1";
 }
 function parseCode(argv) {
   const eq = argv.find((a) => a.startsWith("--code="));
@@ -7407,7 +7491,7 @@ function passthroughReason(i) {
   if (firstPositional !== null && CLAUDE_SUBCOMMANDS.has(firstPositional)) return "subcommand";
   return null;
 }
-function norm(p, win) {
+function norm2(p, win) {
   const r = resolve4(p).replace(/[\\/]+$/, "");
   return win ? r.replace(/\//g, "\\").toLowerCase() : r;
 }
@@ -7420,8 +7504,8 @@ function real(p) {
 }
 function findReal(tool, d = defaultLocateDeps(), skip = shimDir()) {
   const win = (d.platform ?? process.platform) === "win32";
-  const skipKeys = /* @__PURE__ */ new Set([norm(skip, win), norm(real(skip), win)]);
-  const inSkip = (file) => skipKeys.has(norm(dirname11(file), win)) || skipKeys.has(norm(dirname11(real(file)), win));
+  const skipKeys = /* @__PURE__ */ new Set([norm2(skip, win), norm2(real(skip), win)]);
+  const inSkip = (file) => skipKeys.has(norm2(dirname11(file), win)) || skipKeys.has(norm2(dirname11(real(file)), win));
   const dd = { ...d, skipDirs: [...d.skipDirs ?? [], skip] };
   const name = SHIM_COMMANDS[tool];
   if (!name) {
@@ -7507,14 +7591,14 @@ import { createServer as createServer4 } from "net";
 import { join as join28 } from "path";
 
 // src/core/codexServer.ts
-import { execFileSync as execFileSync10 } from "child_process";
+import { execFileSync as execFileSync11 } from "child_process";
 function isAppServerArgs(args, url) {
   return /\bapp-server\b/.test(args) && new RegExp(`--listen[= ]${url.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?:\\s|$)`).test(args);
 }
 function processArgs(pid) {
   if (process.platform === "win32") return null;
   try {
-    const out = execFileSync10("ps", ["-ww", "-o", "args=", "-p", String(pid)], {
+    const out = execFileSync11("ps", ["-ww", "-o", "args=", "-p", String(pid)], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });

package/dist/hook.cjs

@@ -86,8 +86,8 @@ const FALLBACK_REGISTRY = {
       format: 'codex-toml',
       processNames: ['codex'],
       // codex-thread-name 是机会主义的一级：session_index.jsonl 里的 thread_name
-      // 原生只有 /rename 手动设，多数用户是空的，取不到就往下回落
-      titleSources: ['codex-thread-name', 'git-branch', 'project'],
+      // 只有 /rename 或 VS Code 扩展起过名的才有，多数是空的，取不到用首条指令
+      titleSources: ['codex-thread-name', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -100,7 +100,9 @@ const FALLBACK_REGISTRY = {
     workbuddy: {
       format: 'cc-hook',
       processNames: ['WorkBuddy'],
-      titleSources: ['git-branch', 'project'],
+      // WorkBuddy 的 transcript 与 Claude Code 同格式，也写 ai-title（2026-10-01 WorkBuddy 5.6.2 实测）；
+      // 工作目录是按时间自动建的，目录名不能当标题
+      titleSources: ['cc-ai-title', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -113,7 +115,9 @@ const FALLBACK_REGISTRY = {
     qoder: {
       format: 'cc-hook',
       processNames: ['Qoder CN'],
-      titleSources: ['git-branch', 'project'],
+      // 桌面端会话库里的标题（先是首条指令，后被换成 AI 摘要）；qodercli 命令行版的会话不在库里，落到首条指令
+      // （CLI 1.1.61 实测 transcript 里没有 ai-title，UserPromptSubmit 带 prompt）
+      titleSources: ['qoder-session-title', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -126,8 +130,8 @@ const FALLBACK_REGISTRY = {
     opencode: {
       format: 'oc-plugin',
       processNames: ['opencode'],
-      // opencode 自带的会话标题是模型对提问的摘要，违反隐私约束（spec §6.4），不用
-      titleSources: ['git-branch', 'project'],
+      // opencode 自己生成的会话标题（插件从 session.updated 取，随事件传 oc_session_title），没有就用首条指令
+      titleSources: ['oc-session-title', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -321,7 +325,137 @@ function readGitBranch(cwd, maxUp) {
   return null
 }
 
-/** 按 registry 给的顺序逐级回落。所有来源都不碰 prompt 原文。 */
+/** 首条指令当标题时的最大字数（按字符），与 src/core/title.ts 一致 */
+const FIRST_PROMPT_MAX = 30
+
+/** 用户指令 → 可上屏的短标题，与 src/core/title.ts 的 cleanPrompt 一致 */
+function cleanPrompt(text) {
+  if (typeof text !== 'string') return ''
+  // eslint-disable-next-line no-control-regex
+  const flat = text.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]+/g, ' ').replace(/\s+/g, ' ').trim()
+  const chars = Array.from(flat)
+  return chars.length > FIRST_PROMPT_MAX ? chars.slice(0, FIRST_PROMPT_MAX).join('').trimEnd() + '…' : flat
+}
+
+/** 会话库标题的最大字数，与 src/core/title.ts 一致 */
+const SESSION_TITLE_MAX = 100
+
+/** 外部来的标题清洗，与 src/core/title.ts 的 cleanTitle 一致 */
+function cleanTitle(text) {
+  if (typeof text !== 'string') return ''
+  // eslint-disable-next-line no-control-regex
+  const flat = text.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]+/g, ' ').replace(/\s+/g, ' ').trim()
+  return Array.from(flat).slice(0, SESSION_TITLE_MAX).join('').trimEnd()
+}
+
+/**
+ * node:sqlite 是 Node 内置模块（22.13+ / 23.4+ 免 flag），更老的 Node require 直接抛，调用方跳过。
+ * 加载时的 ExperimentalWarning 吞掉，免得打进智能体的 hook 输出
+ */
+function loadNodeSqlite() {
+  const orig = process.emitWarning
+  process.emitWarning = function () {
+    if (String(arguments[0] == null ? '' : arguments[0]).indexOf('SQLite') !== -1) return
+    return orig.apply(process, arguments)
+  }
+  try {
+    return require('node:sqlite')
+  } finally {
+    process.emitWarning = orig
+  }
+}
+
+/** Qoder 桌面端会话库候选路径，与 src/core/title.ts 的 qoderDbPaths 一致（来源与未核对项见那边注释） */
+function qoderDbPaths(platform, home, env) {
+  const pf = platform || process.platform
+  const h = home || os.homedir()
+  const e = env || process.env
+  let root
+  if (pf === 'darwin') root = path.join(h, 'Library', 'Application Support')
+  else if (pf === 'win32') root = e.APPDATA || path.join(h, 'AppData', 'Roaming')
+  else root = e.XDG_CONFIG_HOME || path.join(h, '.config')
+  return ['com.qodercn.app.stable', 'com.qoder.app.stable'].map((d) => path.join(root, d, 'main.sqlite'))
+}
+
+/** Qoder 桌面端的会话标题（chat_sessions.title），与 src/core/title.ts 一致。任何失败返回 null */
+function readQoderSessionTitle(sessionId, paths, load) {
+  if (!sessionId) return null
+  const existing = (paths || qoderDbPaths()).filter((p) => fs.existsSync(p))
+  if (existing.length === 0) return null
+  let mod
+  try {
+    mod = (load || loadNodeSqlite)()
+  } catch (e) {
+    return null
+  }
+  for (const p of existing) {
+    let db
+    try {
+      db = new mod.DatabaseSync(p, { readOnly: true })
+      const row = db.prepare('select title from chat_sessions where session_id = ?').get(sessionId)
+      const t = cleanTitle(row && row.title)
+      if (t) return t
+    } catch (e) {
+      /* 这个库读不了，试下一个 */
+    } finally {
+      try {
+        if (db) db.close()
+      } catch (e) {
+        /* ignore */
+      }
+    }
+  }
+  return null
+}
+
+// ---------- 非项目目录（与 src/core/dirFilter.ts 同构） ----------
+
+function dirNorm(p, win) {
+  if (win) return path.win32.resolve(p).replace(/[\\/]+$/, '').toLowerCase()
+  return path.posix.resolve(p).replace(/\/+$/, '')
+}
+
+function dirUnder(p, base, win) {
+  return p === base || p.startsWith(base + (win ? '\\' : '/'))
+}
+
+/**
+ * 智能体按时间自动建的工作区。WorkBuddy：<主目录>/WorkBuddy/<日期开头>（5.6.2 实测 2026-09-24-18-50-03 /
+ * 20260430143452 / 2026-05-16-task-1）；Qoder CN：<主目录>/Documents/Qoder/<YYYY-MM-DD>/<8 位十六进制>
+ */
+function isAutoWorkspace(p, opts) {
+  if (!p) return false
+  const o = opts || {}
+  const win = (o.platform || process.platform) === 'win32'
+  const P = win ? path.win32 : path.posix
+  const home = dirNorm(o.home || os.homedir(), win)
+  const full = dirNorm(p, win)
+  const name = P.basename(full)
+  const parent = P.dirname(full)
+  if (parent === dirNorm(P.join(home, 'WorkBuddy'), win) && /^\d{4}-?\d{2}-?\d{2}/.test(name)) return true
+  return (
+    P.dirname(parent) === dirNorm(P.join(home, 'Documents', 'Qoder'), win) &&
+    /^\d{4}-\d{2}-\d{2}$/.test(P.basename(parent)) &&
+    /^[0-9a-f]{8}$/i.test(name)
+  )
+}
+
+/** 能不能作为最近项目目录上报：主目录 / 根目录 / 临时目录及其下 / 自动工作区都不报 */
+function isReportableDir(p, opts) {
+  if (!p) return false
+  const o = opts || {}
+  const win = (o.platform || process.platform) === 'win32'
+  const P = win ? path.win32 : path.posix
+  const full = dirNorm(p, win)
+  if (full === dirNorm(P.parse(P.resolve(p)).root, win)) return false
+  if (full === dirNorm(o.home || os.homedir(), win)) return false
+  const tmps = [o.tmp || os.tmpdir()]
+  if (!win) tmps.push('/tmp', '/private/tmp', '/var/folders', '/private/var/folders')
+  for (const t of tmps) if (t && dirUnder(full, dirNorm(t, win), win)) return false
+  return !isAutoWorkspace(p, o)
+}
+
+/** 按 registry 给的顺序逐级回落。只有 first-prompt 用到 prompt（首条指令前 30 字），其余来源不碰 prompt 原文。 */
 function resolveTitle(sources, ctx) {
   const list = sources || []
   for (const source of list) {
@@ -329,7 +463,10 @@ function resolveTitle(sources, ctx) {
     if (source === 'cc-ai-title') value = readAiTitle(ctx.transcriptPath)
     else if (source === 'codex-thread-name') value = readCodexThreadName(ctx.sessionId, ctx.codexHome)
     else if (source === 'git-branch') value = readGitBranch(ctx.cwd)
-    else if (source === 'project') value = path.basename(ctx.cwd || '') || null
+    else if (source === 'first-prompt') value = ctx.firstPrompt || null
+    else if (source === 'qoder-session-title') value = readQoderSessionTitle(ctx.sessionId, ctx.qoderDbPaths, ctx.loadSqlite)
+    else if (source === 'oc-session-title') value = typeof ctx.ocSessionTitle === 'string' ? ctx.ocSessionTitle.trim() || null : null
+    else if (source === 'project') value = ctx.cwd && !isAutoWorkspace(ctx.cwd) ? path.basename(ctx.cwd) || null : null
     // 不认识的来源直接跳过：新来源应该先发版再进 registry
     if (value) return value
   }
@@ -949,7 +1086,8 @@ const DIRS_KEEP = 30
 
 /** UserPromptSubmit 时记下工作目录：{全路径: 最近使用毫秒}。🔴 全路径只留本机 */
 function recordDir(cwd, now) {
-  if (!cwd) return
+  // 主目录 / 临时目录 / 自动工作区不记，免得把真正的项目挤出 DIRS_KEEP
+  if (!cwd || !isReportableDir(cwd)) return
   const file = path.join(deskbuddyHome(), 'dirs.json')
   let map = {}
   try {
@@ -1077,6 +1215,19 @@ function codexRemoteHas(sessionId) {
   return !!r && r.has(sessionId)
 }
 
+/** 并发 hook 的先后差不会超过一次 hook 的执行时长；超出这个差值说明是时钟回拨，不能当作「更晚的事件」 */
+const SUPERSEDE_MAX_MS = 2 * 60 * 1000
+
+/**
+ * 状态里已是比这次事件更晚发生的事件写的（hook 并发、先发生的后写完），这次不能再覆盖。
+ * 🔴 差值带上限（评审）：开机后校时往回拨时，状态里的 updatedAt 落在「未来」，不设上限的话在墙钟追上之前该会话的事件全被丢掉
+ */
+function superseded(cur, eventAt) {
+  if (!cur || typeof cur.updatedAt !== 'number') return false
+  const ahead = cur.updatedAt - eventAt
+  return ahead > 0 && ahead < SUPERSEDE_MAX_MS
+}
+
 async function main(argv) {
   // 同一份 hook 被 Claude Code 与 Codex 复用，靠命令行参数区分是哪个工具
   const tool = (argv && argv[2]) || 'claude_code'
@@ -1084,6 +1235,10 @@ async function main(argv) {
   const event = payload.hook_event_name || ''
   const sessionId = payload.session_id || ''
   if (!sessionId) return
+  // 🔴 事件时间取在任何慢操作之前：Codex 的 hook 是 async（不等跑完），一轮很短时 UserPromptSubmit 与 Stop
+  //    的 hook 并发跑；Windows 上新会话首个 hook 要起 PowerShell 查进程，常比 Stop 晚写完，
+  //    按写完先后落盘就会把 done 覆盖回 watch，屏上一直「进行中」直到窗口关掉（10-01 WIN-LVT5M8H5670 实测）
+  const eventAt = Date.now()
 
   if (NOTICE_EVENTS[event]) {
     const notice = takeNotice(sessionId)
@@ -1140,6 +1295,13 @@ async function main(argv) {
   const prev = readState(sessionId)
   const now = Date.now()
   if (event === 'UserPromptSubmit') recordDir(payload.cwd, now)
+  // 首条指令（标题来源 first-prompt）：只记第一次
+  const firstPrompt = (prev && prev.firstPrompt) || (event === 'UserPromptSubmit' ? cleanPrompt(payload.prompt) : '') || undefined
+  if (superseded(prev, eventAt)) {
+    // 被并发的更晚事件（多半是同一轮的 Stop）抢先写了：状态不覆盖，但首条指令要补上，不然标题就成了第二条指令
+    if (firstPrompt && !prev.firstPrompt) writeState(Object.assign({}, prev, { firstPrompt: firstPrompt }))
+    return
+  }
   // 状态里记的进程还活着才沿用（评审）：先远程 -p 跑过、后又在窗口 resume 同一会话时，
   // 不能拿死掉的 -p 进程的 interactive=false 挡不住窗口
   const prevAlive = !!(prev && prev.pid && pidExists(prev.pid))
@@ -1158,8 +1320,9 @@ async function main(argv) {
     //    ⚠️ 只落本机，绝不上报：快照里发出去的仍然只有 basename。
     cwd: payload.cwd || (prev && prev.cwd) || '',
     state: action,
-    startedAt: (prev && prev.startedAt) || now,
-    updatedAt: now,
+    startedAt: (prev && prev.startedAt) || eventAt,
+    // 记事件发生时间而不是写完时间，后来的事件才比得过先发生、却后写完的那个
+    updatedAt: eventAt,
     pid: pid,
     pidName: pid ? (prevAlive && prev.pidName) || processName(pid) || undefined : undefined,
     // 二期 P1：窗口开着的会话，设备不能再往里下指令（两个进程会互相吞掉对话）。每个会话只判一次
@@ -1177,11 +1340,19 @@ async function main(argv) {
         at: now,
       },
     ])).slice(-RECENT_MAX),
+    firstPrompt: firstPrompt,
   }
 
   // 进 / 出 DeskBuddy 窗口不一定伴随状态跃迁（窗口里 --resume 一个已完成的会话），要立刻报，否则设备最长 2 分钟仍被 8348 挡
   const windowChanged = !!(prev && prev.remoteWindow) !== !!next.remoteWindow
-  if (!windowChanged && !shouldReport(prev, next, now)) {
+  // 跃迁要跟磁盘上的最新状态比，不能只跟开头读到的 prev 比（评审）：上一轮停在 done 时 Stop 读到的 prev 是旧 done，
+  // 并发的 UserPromptSubmit 已把 watch 写盘并上报了，Stop 若按 done→done 静默落盘，设备收到的最后一份就是 watch
+  const latest = readState(sessionId)
+  if (superseded(latest, eventAt)) {
+    if (next.firstPrompt && !latest.firstPrompt) writeState(Object.assign({}, latest, { firstPrompt: next.firstPrompt }))
+    return
+  }
+  if (!windowChanged && !shouldReport(latest || prev, next, now)) {
     writeState(next)
     return
   }
@@ -1193,10 +1364,18 @@ async function main(argv) {
       transcriptPath: payload.transcript_path,
       cwd: next.project,
       sessionId: sessionId,
+      firstPrompt: next.firstPrompt,
+      ocSessionTitle: payload.oc_session_title,
     }) ||
     next.title ||
     ''
   next.lastReportAt = now
+  // 取标题 / 查进程期间可能已有更晚发生的事件写完了：那份更新，这次既不落盘也不上报
+  const last = readState(sessionId)
+  if (superseded(last, eventAt)) {
+    if (next.firstPrompt && !last.firstPrompt) writeState(Object.assign({}, last, { firstPrompt: next.firstPrompt }))
+    return
+  }
   writeState(next)
 
   await reportIfAuthorized(tool, now)
@@ -1236,6 +1415,14 @@ module.exports = {
   readAliveStates,
   readCodexThreadName,
   readGitBranch,
+  cleanPrompt,
+  cleanTitle,
+  FIRST_PROMPT_MAX,
+  SESSION_TITLE_MAX,
+  qoderDbPaths,
+  readQoderSessionTitle,
+  isAutoWorkspace,
+  isReportableDir,
   readState,
   removeState,
   retireState,
@@ -1248,6 +1435,7 @@ module.exports = {
   markClear,
   pairClear,
   shouldReport,
+  superseded,
   sign,
   titleSources,
   writeState,

package/dist/opencode.mjs

@@ -130,6 +130,26 @@ export function openPermissions(cfg) {
   if (build && build.permission && typeof build.permission === 'object') open(build.permission)
 }
 
+/** chat.message 的 output（{ message, parts }）里用户自己打的字：text 类 part，跳过 synthetic（插件 / 系统补的） */
+export function userText(output) {
+  const parts = output && Array.isArray(output.parts) ? output.parts : []
+  return parts
+    .filter((p) => p && p.type === 'text' && !p.synthetic && typeof p.text === 'string')
+    .map((p) => p.text)
+    .join('\n')
+}
+
+/** opencode 起标题前的占位名（1.18.32 isDefaultTitle：`New session - ` / `Child session - ` + ISO 时间），不当标题 */
+const OC_DEFAULT_TITLE_RE = /^(New session - |Child session - )\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/
+
+/** session.updated 的 info → 记下自动标题。子会话（subagent，带 parentID）、占位名不记 */
+export function rememberTitle(titles, info) {
+  if (!info || typeof info.id !== 'string' || !info.id || info.parentID) return
+  const t = typeof info.title === 'string' ? info.title.trim() : ''
+  if (!t || OC_DEFAULT_TITLE_RE.test(t)) return
+  titles.set(info.id, t.slice(0, 100))
+}
+
 /** 活着的子进程；opencode 退出时一并结束，不留孤儿 gate 挂着设备卡片（评审） */
 const LIVE = new Set()
 process.on('exit', () => {
@@ -183,9 +203,12 @@ export function make(opts = {}) {
 
     // ---- 状态上报：串行喂 hook.cjs，保证 PreToolUse / PostToolUse / Stop 的先后 ----
     let queue = Promise.resolve()
+    const titles = new Map() // sessionID → opencode 自动生成的标题（session.updated 里来）
     const report = (event, sessionID, extra) => {
       if (!sessionID) return
       const input = { hook_event_name: event, session_id: sessionID, cwd, ...extra }
+      const title = titles.get(sessionID)
+      if (title) input.oc_session_title = title
       queue = queue.then(() => runChild(node, HOOK, [TOOL], input, HOOK_KILL_MS)).catch(() => {})
     }
 
@@ -273,8 +296,9 @@ export function make(opts = {}) {
         if (runId) openPermissions(cfg)
       },
 
-      'chat.message': async (input) => {
-        report('UserPromptSubmit', input && input.sessionID)
+      'chat.message': async (input, output) => {
+        // prompt 给 hook 的 first-prompt 标题来源用（只记首条，见 hook.cjs）
+        report('UserPromptSubmit', input && input.sessionID, { prompt: userText(output) })
       },
 
       'tool.execute.before': async (input, output) => {
@@ -318,6 +342,9 @@ export function make(opts = {}) {
           case 'session.idle':
             report('Stop', p.sessionID)
             break
+          case 'session.updated':
+            rememberTitle(titles, p.info)
+            break
           case 'session.deleted':
             report('SessionEnd', (p.info && p.info.id) || p.sessionID)
             break

package/hook/hook.cjs

@@ -86,8 +86,8 @@ const FALLBACK_REGISTRY = {
       format: 'codex-toml',
       processNames: ['codex'],
       // codex-thread-name 是机会主义的一级：session_index.jsonl 里的 thread_name
-      // 原生只有 /rename 手动设，多数用户是空的，取不到就往下回落
-      titleSources: ['codex-thread-name', 'git-branch', 'project'],
+      // 只有 /rename 或 VS Code 扩展起过名的才有，多数是空的，取不到用首条指令
+      titleSources: ['codex-thread-name', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -100,7 +100,9 @@ const FALLBACK_REGISTRY = {
     workbuddy: {
       format: 'cc-hook',
       processNames: ['WorkBuddy'],
-      titleSources: ['git-branch', 'project'],
+      // WorkBuddy 的 transcript 与 Claude Code 同格式，也写 ai-title（2026-10-01 WorkBuddy 5.6.2 实测）；
+      // 工作目录是按时间自动建的，目录名不能当标题
+      titleSources: ['cc-ai-title', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -113,7 +115,9 @@ const FALLBACK_REGISTRY = {
     qoder: {
       format: 'cc-hook',
       processNames: ['Qoder CN'],
-      titleSources: ['git-branch', 'project'],
+      // 桌面端会话库里的标题（先是首条指令，后被换成 AI 摘要）；qodercli 命令行版的会话不在库里，落到首条指令
+      // （CLI 1.1.61 实测 transcript 里没有 ai-title，UserPromptSubmit 带 prompt）
+      titleSources: ['qoder-session-title', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -126,8 +130,8 @@ const FALLBACK_REGISTRY = {
     opencode: {
       format: 'oc-plugin',
       processNames: ['opencode'],
-      // opencode 自带的会话标题是模型对提问的摘要，违反隐私约束（spec §6.4），不用
-      titleSources: ['git-branch', 'project'],
+      // opencode 自己生成的会话标题（插件从 session.updated 取，随事件传 oc_session_title），没有就用首条指令
+      titleSources: ['oc-session-title', 'first-prompt', 'git-branch', 'project'],
       events: {
         UserPromptSubmit: 'watch',
         PreToolUse: 'watch',
@@ -321,7 +325,137 @@ function readGitBranch(cwd, maxUp) {
   return null
 }
 
-/** 按 registry 给的顺序逐级回落。所有来源都不碰 prompt 原文。 */
+/** 首条指令当标题时的最大字数（按字符），与 src/core/title.ts 一致 */
+const FIRST_PROMPT_MAX = 30
+
+/** 用户指令 → 可上屏的短标题，与 src/core/title.ts 的 cleanPrompt 一致 */
+function cleanPrompt(text) {
+  if (typeof text !== 'string') return ''
+  // eslint-disable-next-line no-control-regex
+  const flat = text.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]+/g, ' ').replace(/\s+/g, ' ').trim()
+  const chars = Array.from(flat)
+  return chars.length > FIRST_PROMPT_MAX ? chars.slice(0, FIRST_PROMPT_MAX).join('').trimEnd() + '…' : flat
+}
+
+/** 会话库标题的最大字数，与 src/core/title.ts 一致 */
+const SESSION_TITLE_MAX = 100
+
+/** 外部来的标题清洗，与 src/core/title.ts 的 cleanTitle 一致 */
+function cleanTitle(text) {
+  if (typeof text !== 'string') return ''
+  // eslint-disable-next-line no-control-regex
+  const flat = text.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]+/g, ' ').replace(/\s+/g, ' ').trim()
+  return Array.from(flat).slice(0, SESSION_TITLE_MAX).join('').trimEnd()
+}
+
+/**
+ * node:sqlite 是 Node 内置模块（22.13+ / 23.4+ 免 flag），更老的 Node require 直接抛，调用方跳过。
+ * 加载时的 ExperimentalWarning 吞掉，免得打进智能体的 hook 输出
+ */
+function loadNodeSqlite() {
+  const orig = process.emitWarning
+  process.emitWarning = function () {
+    if (String(arguments[0] == null ? '' : arguments[0]).indexOf('SQLite') !== -1) return
+    return orig.apply(process, arguments)
+  }
+  try {
+    return require('node:sqlite')
+  } finally {
+    process.emitWarning = orig
+  }
+}
+
+/** Qoder 桌面端会话库候选路径，与 src/core/title.ts 的 qoderDbPaths 一致（来源与未核对项见那边注释） */
+function qoderDbPaths(platform, home, env) {
+  const pf = platform || process.platform
+  const h = home || os.homedir()
+  const e = env || process.env
+  let root
+  if (pf === 'darwin') root = path.join(h, 'Library', 'Application Support')
+  else if (pf === 'win32') root = e.APPDATA || path.join(h, 'AppData', 'Roaming')
+  else root = e.XDG_CONFIG_HOME || path.join(h, '.config')
+  return ['com.qodercn.app.stable', 'com.qoder.app.stable'].map((d) => path.join(root, d, 'main.sqlite'))
+}
+
+/** Qoder 桌面端的会话标题（chat_sessions.title），与 src/core/title.ts 一致。任何失败返回 null */
+function readQoderSessionTitle(sessionId, paths, load) {
+  if (!sessionId) return null
+  const existing = (paths || qoderDbPaths()).filter((p) => fs.existsSync(p))
+  if (existing.length === 0) return null
+  let mod
+  try {
+    mod = (load || loadNodeSqlite)()
+  } catch (e) {
+    return null
+  }
+  for (const p of existing) {
+    let db
+    try {
+      db = new mod.DatabaseSync(p, { readOnly: true })
+      const row = db.prepare('select title from chat_sessions where session_id = ?').get(sessionId)
+      const t = cleanTitle(row && row.title)
+      if (t) return t
+    } catch (e) {
+      /* 这个库读不了，试下一个 */
+    } finally {
+      try {
+        if (db) db.close()
+      } catch (e) {
+        /* ignore */
+      }
+    }
+  }
+  return null
+}
+
+// ---------- 非项目目录（与 src/core/dirFilter.ts 同构） ----------
+
+function dirNorm(p, win) {
+  if (win) return path.win32.resolve(p).replace(/[\\/]+$/, '').toLowerCase()
+  return path.posix.resolve(p).replace(/\/+$/, '')
+}
+
+function dirUnder(p, base, win) {
+  return p === base || p.startsWith(base + (win ? '\\' : '/'))
+}
+
+/**
+ * 智能体按时间自动建的工作区。WorkBuddy：<主目录>/WorkBuddy/<日期开头>（5.6.2 实测 2026-09-24-18-50-03 /
+ * 20260430143452 / 2026-05-16-task-1）；Qoder CN：<主目录>/Documents/Qoder/<YYYY-MM-DD>/<8 位十六进制>
+ */
+function isAutoWorkspace(p, opts) {
+  if (!p) return false
+  const o = opts || {}
+  const win = (o.platform || process.platform) === 'win32'
+  const P = win ? path.win32 : path.posix
+  const home = dirNorm(o.home || os.homedir(), win)
+  const full = dirNorm(p, win)
+  const name = P.basename(full)
+  const parent = P.dirname(full)
+  if (parent === dirNorm(P.join(home, 'WorkBuddy'), win) && /^\d{4}-?\d{2}-?\d{2}/.test(name)) return true
+  return (
+    P.dirname(parent) === dirNorm(P.join(home, 'Documents', 'Qoder'), win) &&
+    /^\d{4}-\d{2}-\d{2}$/.test(P.basename(parent)) &&
+    /^[0-9a-f]{8}$/i.test(name)
+  )
+}
+
+/** 能不能作为最近项目目录上报：主目录 / 根目录 / 临时目录及其下 / 自动工作区都不报 */
+function isReportableDir(p, opts) {
+  if (!p) return false
+  const o = opts || {}
+  const win = (o.platform || process.platform) === 'win32'
+  const P = win ? path.win32 : path.posix
+  const full = dirNorm(p, win)
+  if (full === dirNorm(P.parse(P.resolve(p)).root, win)) return false
+  if (full === dirNorm(o.home || os.homedir(), win)) return false
+  const tmps = [o.tmp || os.tmpdir()]
+  if (!win) tmps.push('/tmp', '/private/tmp', '/var/folders', '/private/var/folders')
+  for (const t of tmps) if (t && dirUnder(full, dirNorm(t, win), win)) return false
+  return !isAutoWorkspace(p, o)
+}
+
+/** 按 registry 给的顺序逐级回落。只有 first-prompt 用到 prompt（首条指令前 30 字），其余来源不碰 prompt 原文。 */
 function resolveTitle(sources, ctx) {
   const list = sources || []
   for (const source of list) {
@@ -329,7 +463,10 @@ function resolveTitle(sources, ctx) {
     if (source === 'cc-ai-title') value = readAiTitle(ctx.transcriptPath)
     else if (source === 'codex-thread-name') value = readCodexThreadName(ctx.sessionId, ctx.codexHome)
     else if (source === 'git-branch') value = readGitBranch(ctx.cwd)
-    else if (source === 'project') value = path.basename(ctx.cwd || '') || null
+    else if (source === 'first-prompt') value = ctx.firstPrompt || null
+    else if (source === 'qoder-session-title') value = readQoderSessionTitle(ctx.sessionId, ctx.qoderDbPaths, ctx.loadSqlite)
+    else if (source === 'oc-session-title') value = typeof ctx.ocSessionTitle === 'string' ? ctx.ocSessionTitle.trim() || null : null
+    else if (source === 'project') value = ctx.cwd && !isAutoWorkspace(ctx.cwd) ? path.basename(ctx.cwd) || null : null
     // 不认识的来源直接跳过：新来源应该先发版再进 registry
     if (value) return value
   }
@@ -949,7 +1086,8 @@ const DIRS_KEEP = 30
 
 /** UserPromptSubmit 时记下工作目录：{全路径: 最近使用毫秒}。🔴 全路径只留本机 */
 function recordDir(cwd, now) {
-  if (!cwd) return
+  // 主目录 / 临时目录 / 自动工作区不记，免得把真正的项目挤出 DIRS_KEEP
+  if (!cwd || !isReportableDir(cwd)) return
   const file = path.join(deskbuddyHome(), 'dirs.json')
   let map = {}
   try {
@@ -1077,6 +1215,19 @@ function codexRemoteHas(sessionId) {
   return !!r && r.has(sessionId)
 }
 
+/** 并发 hook 的先后差不会超过一次 hook 的执行时长；超出这个差值说明是时钟回拨，不能当作「更晚的事件」 */
+const SUPERSEDE_MAX_MS = 2 * 60 * 1000
+
+/**
+ * 状态里已是比这次事件更晚发生的事件写的（hook 并发、先发生的后写完），这次不能再覆盖。
+ * 🔴 差值带上限（评审）：开机后校时往回拨时，状态里的 updatedAt 落在「未来」，不设上限的话在墙钟追上之前该会话的事件全被丢掉
+ */
+function superseded(cur, eventAt) {
+  if (!cur || typeof cur.updatedAt !== 'number') return false
+  const ahead = cur.updatedAt - eventAt
+  return ahead > 0 && ahead < SUPERSEDE_MAX_MS
+}
+
 async function main(argv) {
   // 同一份 hook 被 Claude Code 与 Codex 复用，靠命令行参数区分是哪个工具
   const tool = (argv && argv[2]) || 'claude_code'
@@ -1084,6 +1235,10 @@ async function main(argv) {
   const event = payload.hook_event_name || ''
   const sessionId = payload.session_id || ''
   if (!sessionId) return
+  // 🔴 事件时间取在任何慢操作之前：Codex 的 hook 是 async（不等跑完），一轮很短时 UserPromptSubmit 与 Stop
+  //    的 hook 并发跑；Windows 上新会话首个 hook 要起 PowerShell 查进程，常比 Stop 晚写完，
+  //    按写完先后落盘就会把 done 覆盖回 watch，屏上一直「进行中」直到窗口关掉（10-01 WIN-LVT5M8H5670 实测）
+  const eventAt = Date.now()
 
   if (NOTICE_EVENTS[event]) {
     const notice = takeNotice(sessionId)
@@ -1140,6 +1295,13 @@ async function main(argv) {
   const prev = readState(sessionId)
   const now = Date.now()
   if (event === 'UserPromptSubmit') recordDir(payload.cwd, now)
+  // 首条指令（标题来源 first-prompt）：只记第一次
+  const firstPrompt = (prev && prev.firstPrompt) || (event === 'UserPromptSubmit' ? cleanPrompt(payload.prompt) : '') || undefined
+  if (superseded(prev, eventAt)) {
+    // 被并发的更晚事件（多半是同一轮的 Stop）抢先写了：状态不覆盖，但首条指令要补上，不然标题就成了第二条指令
+    if (firstPrompt && !prev.firstPrompt) writeState(Object.assign({}, prev, { firstPrompt: firstPrompt }))
+    return
+  }
   // 状态里记的进程还活着才沿用（评审）：先远程 -p 跑过、后又在窗口 resume 同一会话时，
   // 不能拿死掉的 -p 进程的 interactive=false 挡不住窗口
   const prevAlive = !!(prev && prev.pid && pidExists(prev.pid))
@@ -1158,8 +1320,9 @@ async function main(argv) {
     //    ⚠️ 只落本机，绝不上报：快照里发出去的仍然只有 basename。
     cwd: payload.cwd || (prev && prev.cwd) || '',
     state: action,
-    startedAt: (prev && prev.startedAt) || now,
-    updatedAt: now,
+    startedAt: (prev && prev.startedAt) || eventAt,
+    // 记事件发生时间而不是写完时间，后来的事件才比得过先发生、却后写完的那个
+    updatedAt: eventAt,
     pid: pid,
     pidName: pid ? (prevAlive && prev.pidName) || processName(pid) || undefined : undefined,
     // 二期 P1：窗口开着的会话，设备不能再往里下指令（两个进程会互相吞掉对话）。每个会话只判一次
@@ -1177,11 +1340,19 @@ async function main(argv) {
         at: now,
       },
     ])).slice(-RECENT_MAX),
+    firstPrompt: firstPrompt,
   }
 
   // 进 / 出 DeskBuddy 窗口不一定伴随状态跃迁（窗口里 --resume 一个已完成的会话），要立刻报，否则设备最长 2 分钟仍被 8348 挡
   const windowChanged = !!(prev && prev.remoteWindow) !== !!next.remoteWindow
-  if (!windowChanged && !shouldReport(prev, next, now)) {
+  // 跃迁要跟磁盘上的最新状态比，不能只跟开头读到的 prev 比（评审）：上一轮停在 done 时 Stop 读到的 prev 是旧 done，
+  // 并发的 UserPromptSubmit 已把 watch 写盘并上报了，Stop 若按 done→done 静默落盘，设备收到的最后一份就是 watch
+  const latest = readState(sessionId)
+  if (superseded(latest, eventAt)) {
+    if (next.firstPrompt && !latest.firstPrompt) writeState(Object.assign({}, latest, { firstPrompt: next.firstPrompt }))
+    return
+  }
+  if (!windowChanged && !shouldReport(latest || prev, next, now)) {
     writeState(next)
     return
   }
@@ -1193,10 +1364,18 @@ async function main(argv) {
       transcriptPath: payload.transcript_path,
       cwd: next.project,
       sessionId: sessionId,
+      firstPrompt: next.firstPrompt,
+      ocSessionTitle: payload.oc_session_title,
     }) ||
     next.title ||
     ''
   next.lastReportAt = now
+  // 取标题 / 查进程期间可能已有更晚发生的事件写完了：那份更新，这次既不落盘也不上报
+  const last = readState(sessionId)
+  if (superseded(last, eventAt)) {
+    if (next.firstPrompt && !last.firstPrompt) writeState(Object.assign({}, last, { firstPrompt: next.firstPrompt }))
+    return
+  }
   writeState(next)
 
   await reportIfAuthorized(tool, now)
@@ -1236,6 +1415,14 @@ module.exports = {
   readAliveStates,
   readCodexThreadName,
   readGitBranch,
+  cleanPrompt,
+  cleanTitle,
+  FIRST_PROMPT_MAX,
+  SESSION_TITLE_MAX,
+  qoderDbPaths,
+  readQoderSessionTitle,
+  isAutoWorkspace,
+  isReportableDir,
   readState,
   removeState,
   retireState,
@@ -1248,6 +1435,7 @@ module.exports = {
   markClear,
   pairClear,
   shouldReport,
+  superseded,
   sign,
   titleSources,
   writeState,

package/hook/opencode.d.mts

@@ -4,4 +4,6 @@ export function toCcTool(tool: string, args: unknown): { tool_name: string; tool
 export function askToCc(props: unknown): { tool_name: string; tool_input: Record<string, unknown> }
 export function openPermissions(cfg: unknown): void
 export const OC_GATED_KEYS: string[]
+export function userText(output: unknown): string
+export function rememberTitle(titles: Map<string, string>, info: unknown): void
 export function make(opts?: { node?: string }): (ctx: unknown) => Promise<Record<string, unknown>>

package/hook/opencode.mjs

@@ -130,6 +130,26 @@ export function openPermissions(cfg) {
   if (build && build.permission && typeof build.permission === 'object') open(build.permission)
 }
 
+/** chat.message 的 output（{ message, parts }）里用户自己打的字：text 类 part，跳过 synthetic（插件 / 系统补的） */
+export function userText(output) {
+  const parts = output && Array.isArray(output.parts) ? output.parts : []
+  return parts
+    .filter((p) => p && p.type === 'text' && !p.synthetic && typeof p.text === 'string')
+    .map((p) => p.text)
+    .join('\n')
+}
+
+/** opencode 起标题前的占位名（1.18.32 isDefaultTitle：`New session - ` / `Child session - ` + ISO 时间），不当标题 */
+const OC_DEFAULT_TITLE_RE = /^(New session - |Child session - )\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/
+
+/** session.updated 的 info → 记下自动标题。子会话（subagent，带 parentID）、占位名不记 */
+export function rememberTitle(titles, info) {
+  if (!info || typeof info.id !== 'string' || !info.id || info.parentID) return
+  const t = typeof info.title === 'string' ? info.title.trim() : ''
+  if (!t || OC_DEFAULT_TITLE_RE.test(t)) return
+  titles.set(info.id, t.slice(0, 100))
+}
+
 /** 活着的子进程；opencode 退出时一并结束，不留孤儿 gate 挂着设备卡片（评审） */
 const LIVE = new Set()
 process.on('exit', () => {
@@ -183,9 +203,12 @@ export function make(opts = {}) {
 
     // ---- 状态上报：串行喂 hook.cjs，保证 PreToolUse / PostToolUse / Stop 的先后 ----
     let queue = Promise.resolve()
+    const titles = new Map() // sessionID → opencode 自动生成的标题（session.updated 里来）
     const report = (event, sessionID, extra) => {
       if (!sessionID) return
       const input = { hook_event_name: event, session_id: sessionID, cwd, ...extra }
+      const title = titles.get(sessionID)
+      if (title) input.oc_session_title = title
       queue = queue.then(() => runChild(node, HOOK, [TOOL], input, HOOK_KILL_MS)).catch(() => {})
     }
 
@@ -273,8 +296,9 @@ export function make(opts = {}) {
         if (runId) openPermissions(cfg)
       },
 
-      'chat.message': async (input) => {
-        report('UserPromptSubmit', input && input.sessionID)
+      'chat.message': async (input, output) => {
+        // prompt 给 hook 的 first-prompt 标题来源用（只记首条，见 hook.cjs）
+        report('UserPromptSubmit', input && input.sessionID, { prompt: userText(output) })
       },
 
       'tool.execute.before': async (input, output) => {
@@ -318,6 +342,9 @@ export function make(opts = {}) {
           case 'session.idle':
             report('Stop', p.sessionID)
             break
+          case 'session.updated':
+            rememberTitle(titles, p.info)
+            break
           case 'session.deleted':
             report('SessionEnd', (p.info && p.info.id) || p.sessionID)
             break

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deskbuddy",
-  "version": "0.2.0-beta.5",
+  "version": "0.2.0-beta.7",
   "description": "把 Claude Code、Codex 等 AI 编码智能体每个会话窗口的状态，实时同步到桌面硬件屏幕",
   "keywords": [
     "ai",