metame-cli 1.5.12 → 1.5.14

package/README.md

@@ -358,7 +358,7 @@ systemctl --user start metame
 | **Mobile Bridge** | Full Claude/Codex via Telegram/Feishu. Stateful sessions, file transfer both ways, real-time streaming status. |
 | **Skill Evolution** | Queue-driven skill evolution: captures task signals, generates workflow proposals, and supports explicit approval/resolve via `/skill-evo` commands. |
 | **Token Budget** | Daily token usage tracking with per-category breakdown. Configurable daily limit, automatic 80% warning threshold, usage history with rollover. |
-| **Auto-Provisioning** | First run deploys default CLAUDE.md, documentation, and `dispatch_to` to `~/.metame/`. Subsequent runs sync scripts without overwriting user config. |
+| **Auto-Provisioning** | First run deploys default CLAUDE.md, documentation, and runtime copies under `~/.metame/`. Subsequent runs redeploy generated runtime files without overwriting user config in `~/.metame/daemon.yaml`. |
 | **Heartbeat System** | Three-layer programmable nervous system. Layer 0 kernel always-on (zero config). Layer 1 system evolution built-in (5 tasks: distill + memory + skills + nightly reflection + memory index). Layer 2 your custom scheduled tasks with `require_idle`, `precondition`, `notify`, workflows. |
 | **Multi-Agent** | Multiple projects with dedicated chat groups. `/agent bind` for one-tap setup. True parallel execution. |
 | **Team Routing** | Project-level team clones: multiple AI agents work in parallel within a single chat group. Nickname routing, sticky follow, `/stop` per member, broadcast visibility. |
@@ -679,11 +679,13 @@ MetaMe is early-stage and evolving fast. Every issue and PR directly shapes the
 
 **Submit a PR:**
 1. Fork the repo and create a branch from `main`
-2. All source edits go in `scripts/` — run `npm run sync:plugin` to sync to `plugin/scripts/`
+2. All source edits go in `scripts/`. `~/.metame/` is a generated runtime copy, not a source directory. Run `node index.js` to redeploy local runtime files after edits, and use `npm run sync:plugin` only when you need to refresh `plugin/scripts/`
 3. Run `npx eslint scripts/daemon*.js` — zero errors required
 4. Run `npm test` — all tests must pass
 5. Open a PR against `main` with a clear description
 
+Source checkouts and `npm link` installs default `metame-cli` auto-update to off. Published npm installs keep auto-update on. Override with `METAME_AUTO_UPDATE=on|off`.
+
 **Good first contributions:** Windows edge cases, new `/commands`, documentation improvements, test coverage.
 
 ## License

package/index.js

@@ -162,6 +162,25 @@ const DAEMON_CONFIG_FILE = path.join(METAME_DIR, 'daemon.yaml');
 const METAME_START = '<!-- METAME:START -->';
 const METAME_END = '<!-- METAME:END -->';
 
+function resolveAutoUpdateBehavior() {
+  const mode = String(process.env.METAME_AUTO_UPDATE || '').trim().toLowerCase();
+  if (['0', 'false', 'off', 'disable', 'disabled'].includes(mode)) {
+    return { enabled: false, reason: 'env-disabled' };
+  }
+  if (['1', 'true', 'on', 'enable', 'enabled', 'force'].includes(mode)) {
+    return { enabled: true, reason: 'env-forced' };
+  }
+
+  // Linked/source checkouts contain a .git entry (directory in main repo,
+  // file in worktrees). Published npm packages do not.
+  const dotGit = path.join(__dirname, '.git');
+  if (fs.existsSync(dotGit)) {
+    return { enabled: false, reason: 'source-checkout' };
+  }
+
+  return { enabled: true, reason: 'installed-package' };
+}
+
 // ---------------------------------------------------------
 // 1.5 ENSURE METAME DIRECTORY + DEPLOY SCRIPTS
 // ---------------------------------------------------------
@@ -173,23 +192,10 @@ if (!fs.existsSync(METAME_DIR)) {
 // DEPLOY PHASE: sync scripts, docs, bin to ~/.metame/
 // ---------------------------------------------------------
 
-// Dev mode: when running from the real git repo, symlink instead of copy.
-// This ensures source files and runtime files are always the same,
-// preventing agents from accidentally editing copies instead of source.
-// IMPORTANT: git worktrees have a `.git` FILE (not directory) pointing to the main repo.
-// They must NOT be treated as dev mode — deploying from a worktree would overwrite
-// production symlinks with stale code. Only a real .git directory qualifies.
-const IS_DEV_MODE = (() => {
-  const dotGit = path.join(__dirname, '.git');
-  try {
-    return fs.statSync(dotGit).isDirectory();
-  } catch { return false; }
-})();
-
 /**
  * Sync files from srcDir to destDir.
- * - Dev mode (git repo): creates symlinks so source === runtime.
- * - Production (npm install): copies files, only writes when content differs.
+ * Always copies from source to runtime. Runtime files under ~/.metame are
+ * deploy artifacts, never editable sources.
  * @param {string} srcDir - source directory
  * @param {string} destDir - destination directory
  * @param {object} [opts]
@@ -207,35 +213,18 @@ function syncDirFiles(srcDir, destDir, { fileList, chmod } = {}) {
     const dest = path.join(destDir, f);
     try {
       if (!fs.existsSync(src)) continue;
-
-      if (IS_DEV_MODE) {
-        // Dev mode: symlink dest → src (replace copy/stale symlink if needed)
-        const srcReal = fs.realpathSync(src);
-        let needLink = true;
-        try {
-          const existing = fs.lstatSync(dest);
-          if (existing.isSymbolicLink()) {
-            if (fs.realpathSync(dest) === srcReal) needLink = false;
-            else fs.unlinkSync(dest);
-          } else {
-            // Replace regular file with symlink
-            fs.unlinkSync(dest);
-          }
-        } catch { /* dest doesn't exist */ }
-        if (needLink) {
-          fs.symlinkSync(srcReal, dest);
-          if (chmod) try { fs.chmodSync(dest, chmod); } catch { /* Windows */ }
-          updated = true;
-        }
-      } else {
-        // Production: copy when content differs
-        const srcContent = fs.readFileSync(src, 'utf8');
-        const destContent = fs.existsSync(dest) ? fs.readFileSync(dest, 'utf8') : '';
-        if (srcContent !== destContent) {
-          fs.writeFileSync(dest, srcContent, 'utf8');
-          if (chmod) try { fs.chmodSync(dest, chmod); } catch { /* Windows */ }
-          updated = true;
-        }
+      // Runtime deploy is always copy-based. Replace any legacy symlink with
+      // a regular file so ~/.metame never masquerades as the source of truth.
+      try {
+        const existing = fs.lstatSync(dest);
+        if (existing.isSymbolicLink()) fs.unlinkSync(dest);
+      } catch { /* dest doesn't exist */ }
+      const srcContent = fs.readFileSync(src, 'utf8');
+      const destContent = fs.existsSync(dest) ? fs.readFileSync(dest, 'utf8') : '';
+      if (srcContent !== destContent) {
+        fs.writeFileSync(dest, srcContent, 'utf8');
+        if (chmod) try { fs.chmodSync(dest, chmod); } catch { /* Windows */ }
+        updated = true;
       }
     } catch { /* non-fatal per file */ }
   }
@@ -454,7 +443,7 @@ if (syntaxErrors.length > 0) {
 } else {
   scriptsUpdated = syncDirFiles(scriptsDir, METAME_DIR, { fileList: BUNDLED_SCRIPTS });
   if (scriptsUpdated) {
-    console.log(`${icon("pkg")} Scripts ${IS_DEV_MODE ? 'symlinked' : 'synced'} to ~/.metame/.`);
+    console.log(`${icon("pkg")} Scripts synced to ~/.metame/.`);
   }
 }
 
@@ -1400,38 +1389,43 @@ try {
 // 4.9 AUTO-UPDATE CHECK (non-blocking)
 // ---------------------------------------------------------
 const CURRENT_VERSION = pkgVersion;
+const AUTO_UPDATE = resolveAutoUpdateBehavior();
 
-// Fire-and-forget: check npm for newer version and auto-update
-(async () => {
-  try {
-    const https = require('https');
-    const latest = await new Promise((resolve, reject) => {
-      https.get('https://registry.npmjs.org/metame-cli/latest', { timeout: 5000 }, res => {
-        let data = '';
-        res.on('data', c => data += c);
-        res.on('end', () => {
-          try { resolve(JSON.parse(data).version); } catch { reject(); }
-        });
-      }).on('error', reject).on('timeout', function () { this.destroy(); reject(); });
-    });
+// Fire-and-forget: check npm for newer version and auto-update.
+// Only enabled for published npm installs; source checkouts and npm-link
+// development setups are opt-out by default to avoid overwriting local work.
+if (AUTO_UPDATE.enabled) {
+  (async () => {
+    try {
+      const https = require('https');
+      const latest = await new Promise((resolve, reject) => {
+        https.get('https://registry.npmjs.org/metame-cli/latest', { timeout: 5000 }, res => {
+          let data = '';
+          res.on('data', c => data += c);
+          res.on('end', () => {
+            try { resolve(JSON.parse(data).version); } catch { reject(); }
+          });
+        }).on('error', reject).on('timeout', function () { this.destroy(); reject(); });
+      });
 
-    if (latest && latest !== CURRENT_VERSION) {
-      console.log(`${icon("pkg")} MetaMe ${latest} available (current ${CURRENT_VERSION}), updating...`);
-      const { execSync } = require('child_process');
-      try {
-        execSync('npm install -g metame-cli@latest', {
-          stdio: 'pipe',
-          timeout: 60000,
-          ...(process.platform === 'win32' ? { shell: process.env.COMSPEC || true } : {}),
-        });
-        console.log(`${icon("ok")} Updated to ${latest}. Restart metame to use the new version.`);
-      } catch (e) {
-        const msg = e.stderr ? e.stderr.toString().trim().split('\n').pop() : '';
-        console.log(`${icon("warn")} Auto-update failed${msg ? ': ' + msg : ''}. Run manually: npm install -g metame-cli`);
+      if (latest && latest !== CURRENT_VERSION) {
+        console.log(`${icon("pkg")} MetaMe ${latest} available (current ${CURRENT_VERSION}), updating...`);
+        const { execSync } = require('child_process');
+        try {
+          execSync('npm install -g metame-cli@latest', {
+            stdio: 'pipe',
+            timeout: 60000,
+            ...(process.platform === 'win32' ? { shell: process.env.COMSPEC || true } : {}),
+          });
+          console.log(`${icon("ok")} Updated to ${latest}. Restart metame to use the new version.`);
+        } catch (e) {
+          const msg = e.stderr ? e.stderr.toString().trim().split('\n').pop() : '';
+          console.log(`${icon("warn")} Auto-update failed${msg ? ': ' + msg : ''}. Run manually: npm install -g metame-cli`);
+        }
       }
-    }
-  } catch { /* network unavailable, skip silently */ }
-})();
+    } catch { /* network unavailable, skip silently */ }
+  })();
+}
 
 // ---------------------------------------------------------
 // 4.95 QMD OPTIONAL INSTALL PROMPT (one-time)
@@ -2574,8 +2568,8 @@ if (isSync) {
 if (process.env.METAME_ACTIVE_SESSION === 'true') {
   console.error(`\n${icon("stop")} ACTION BLOCKED: Nested Session Detected`);
   console.error("   You are actively running inside a MetaMe session.");
-  console.error("   To hot-reload daemon code from this session, run: \x1b[36mtouch ~/.metame/daemon.js\x1b[0m");
-  console.error("   In this dev workspace, \x1b[36mtouch scripts/daemon.js\x1b[0m works too because ~/.metame/daemon.js is symlinked.\n");
+  console.error("   Edit source files under \x1b[36mscripts/\x1b[0m only, then redeploy with \x1b[36mnode index.js\x1b[0m.");
+  console.error("   Do not edit \x1b[36m~/.metame/\x1b[0m directly; it is a generated runtime copy.\n");
   process.exit(1);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "metame-cli",
-    "version": "1.5.12",
+    "version": "1.5.14",
     "description": "The Cognitive Profile Layer for Claude Code. Knows how you think, not just what you said.",
     "main": "index.js",
     "bin": {
@@ -42,5 +42,8 @@
     },
     "engines": {
         "node": ">=22.5"
+    },
+    "devDependencies": {
+        "qrcode": "^1.5.4"
     }
 }

package/scripts/daemon-admin-commands.js

@@ -17,6 +17,10 @@ const {
 } = require('./daemon-remote-dispatch');
 let mentorEngine = null;
 try { mentorEngine = require('./mentor-engine'); } catch { /* optional */ }
+let weixinApiMod = null;
+let weixinAuthMod = null;
+try { weixinApiMod = require('./daemon-weixin-api'); } catch { /* optional */ }
+try { weixinAuthMod = require('./daemon-weixin-auth'); } catch { /* optional */ }
 
 function createAdminCommandHandler(deps) {
   const {
@@ -45,6 +49,7 @@ function createAdminCommandHandler(deps) {
     getDefaultEngine = () => 'claude',
     setDefaultEngine = () => {},
     getDistillModel = () => 'haiku',
+    weixinAuthStore = null,
   } = deps;
 
   // resolveProjectKey: imported from daemon-team-dispatch.js (shared with dispatch_to and daemon.js)
@@ -262,6 +267,48 @@ function createAdminCommandHandler(deps) {
     }
   }
 
+  function getWeixinStore() {
+    if (weixinAuthStore) return weixinAuthStore;
+    if (!weixinApiMod || !weixinAuthMod) return null;
+    try {
+      const apiClient = weixinApiMod.createWeixinApiClient({ log });
+      return weixinAuthMod.createWeixinAuthStore({ apiClient, log });
+    } catch {
+      return null;
+    }
+  }
+
+  function parseWeixinCommand(raw) {
+    const src = String(raw || '').trim();
+    const tail = src.replace(/^\/weixin\b/i, '').trim();
+    if (!tail) return { action: 'status' };
+    const parts = tail.split(/\s+/).filter(Boolean);
+    const main = String(parts[0] || '').toLowerCase();
+    const sub = String(parts[1] || '').toLowerCase();
+    const rest = parts.slice(2);
+    const flags = {};
+    for (let i = 0; i < rest.length; i += 1) {
+      const token = rest[i];
+      if (!token.startsWith('--')) continue;
+      const key = token.slice(2);
+      const next = rest[i + 1];
+      if (!next || next.startsWith('--')) {
+        flags[key] = true;
+      } else {
+        flags[key] = next;
+        i += 1;
+      }
+    }
+    if (main === 'status') return { action: 'status' };
+    if (main === 'login' && (sub === 'start' || sub === 'wait')) {
+      return { action: `login:${sub}`, flags };
+    }
+    if (main === 'login' && !sub) {
+      return { action: 'usage' };
+    }
+    return { action: 'usage' };
+  }
+
   async function sendLocalDispatchReceipt(bot, chatId, targetKey, projInfo, result, preview) {
     if (!result || !result.success) return;
     const icon = projInfo && projInfo.icon ? projInfo.icon : '🤖';
@@ -345,6 +392,108 @@ function createAdminCommandHandler(deps) {
       return { handled: true, config };
     }
 
+    if (text === '/weixin' || text.startsWith('/weixin ')) {
+      const store = getWeixinStore();
+      if (!store) {
+        await bot.sendMessage(chatId, '❌ weixin 模块不可用');
+        return { handled: true, config };
+      }
+
+      const parsed = parseWeixinCommand(text);
+      const weixinCfg = (config && config.weixin) || {};
+
+      if (parsed.action === 'usage') {
+        await bot.sendMessage(chatId, [
+          '用法:',
+          '/weixin',
+          '/weixin status',
+          '/weixin login start [--bot-type 3] [--session <key>]',
+          '/weixin login wait --session <key>',
+        ].join('\n'));
+        return { handled: true, config };
+      }
+
+      if (parsed.action === 'status') {
+        const accountIds = store.listAccounts();
+        const activeAccountId = String(weixinCfg.account_id || accountIds[0] || '').trim();
+        const lines = [
+          '💬 Weixin',
+          `enabled: ${weixinCfg.enabled ? 'yes' : 'no'}`,
+          `base_url: ${weixinCfg.base_url || (weixinApiMod && weixinApiMod.DEFAULT_BASE_URL) || 'https://ilinkai.weixin.qq.com'}`,
+          `bot_type: ${weixinCfg.bot_type || '3'}`,
+          `linked_accounts: ${accountIds.length}`,
+          `active_account: ${activeAccountId || '(none)'}`,
+        ];
+        if (accountIds.length > 0) {
+          for (const id of accountIds.slice(0, 5)) {
+            const account = store.loadAccount(id) || {};
+            const label = id === activeAccountId ? ' (active)' : '';
+            lines.push(`- ${id}${label} user=${account.userId || '-'} linked=${account.linkedAt || account.savedAt || '-'}`);
+          }
+        } else {
+          lines.push('- no linked account');
+        }
+        await bot.sendMessage(chatId, lines.join('\n'));
+        return { handled: true, config };
+      }
+
+      if (parsed.action === 'login:start') {
+        const flags = parsed.flags || {};
+        const botType = String(flags['bot-type'] || weixinCfg.bot_type || '3').trim();
+        const sessionKey = String(flags.session || `${Date.now()}-${botType}`).trim();
+        try {
+          const session = await store.startQrLogin({
+            sessionKey,
+            botType,
+            baseUrl: weixinCfg.base_url || undefined,
+            routeTag: weixinCfg.route_tag || undefined,
+          });
+          const lines = [
+            '✅ 微信登录二维码已生成',
+            `session: ${session.sessionKey}`,
+            `bot_type: ${session.botType}`,
+            '',
+            `${session.qrcodeUrl || '(no qrcode url returned)'}`,
+            '',
+            `下一步: /weixin login wait --session ${session.sessionKey}`,
+          ];
+          await bot.sendMessage(chatId, lines.join('\n'));
+        } catch (e) {
+          await bot.sendMessage(chatId, `❌ 微信登录启动失败: ${e.message}`);
+        }
+        return { handled: true, config };
+      }
+
+      if (parsed.action === 'login:wait') {
+        const flags = parsed.flags || {};
+        const sessionKey = String(flags.session || '').trim();
+        if (!sessionKey) {
+          await bot.sendMessage(chatId, '❌ 缺少 session\n用法: /weixin login wait --session <key>');
+          return { handled: true, config };
+        }
+        try {
+          const result = await store.waitForQrLogin({ sessionKey });
+          if (result.connected) {
+            await bot.sendMessage(chatId, [
+              '✅ 微信账号已绑定',
+              `account: ${result.account.accountId}`,
+              `user: ${result.account.userId || '-'}`,
+              `base_url: ${result.account.baseUrl || '-'}`,
+            ].join('\n'));
+          } else if (result.expired) {
+            await bot.sendMessage(chatId, '⚠️ 二维码已过期，请重新执行 /weixin login start');
+          } else if (result.timeout) {
+            await bot.sendMessage(chatId, '⏳ 仍在等待扫码确认，可稍后再次执行 /weixin login wait --session <key>');
+          } else {
+            await bot.sendMessage(chatId, '⚠️ 登录未完成');
+          }
+        } catch (e) {
+          await bot.sendMessage(chatId, `❌ 微信登录等待失败: ${e.message}`);
+        }
+        return { handled: true, config };
+      }
+    }
+
     // /skill-evo — inspect and resolve skill evolution queue
     if (text === '/skill-evo' || text.startsWith('/skill-evo ')) {
       if (!skillEvolution) {

package/scripts/daemon-bridges.js

@@ -6,6 +6,7 @@ const { findTeamMember: _findTeamMember } = require('./daemon-team-dispatch');
 const { isRemoteMember } = require('./daemon-remote-dispatch');
 const imessageIO = (() => { try { return require('./daemon-siri-imessage'); } catch { return null; } })();
 const siriBridgeMod = (() => { try { return require('./daemon-siri-bridge'); } catch { return null; } })();
+const weixinBridgeMod = (() => { try { return require('./daemon-weixin-bridge'); } catch { return null; } })();
 
 function createBridgeStarter(deps) {
   const {
@@ -159,6 +160,7 @@ function createBridgeStarter(deps) {
     const map = {
       ...(cfg.telegram  ? cfg.telegram.chat_agent_map  || {} : {}),
       ...(cfg.feishu    ? cfg.feishu.chat_agent_map    || {} : {}),
+      ...(cfg.weixin    ? cfg.weixin.chat_agent_map    || {} : {}),
       ...(cfg.imessage  ? cfg.imessage.chat_agent_map  || {} : {}),
     };
     const key = map[String(chatId)];
@@ -1177,7 +1179,19 @@ function createBridgeStarter(deps) {
     return bridge.startSiriBridge(config, executeTaskByName);
   }
 
-  return { startTelegramBridge, startFeishuBridge, startImessageBridge, startSiriBridge };
+  function startWeixinBridge(config, executeTaskByName) {
+    if (!weixinBridgeMod) { log('WARN', '[WEIXIN] daemon-weixin-bridge module not found'); return null; }
+    const bridge = weixinBridgeMod.createWeixinBridge({
+      HOME,
+      log,
+      sleep,
+      loadConfig,
+      pipeline,
+    });
+    return bridge.startWeixinBridge(config, executeTaskByName);
+  }
+
+  return { startTelegramBridge, startFeishuBridge, startWeixinBridge, startImessageBridge, startSiriBridge };
 }
 
 module.exports = { createBridgeStarter };

package/scripts/daemon-claude-engine.js

@@ -2431,12 +2431,6 @@ ${mentorRadarHint}
             } catch { /* non-critical — memory module may not be available */ }
           });
         }
-        // Speculatively save card for pipeline post-resume flush reuse.
-        // If no follow-up arrives, the card expires (30s TTL in _pausedCards consumer).
-        const _replyMsgId = replyMsg && replyMsg.message_id;
-        if (_replyMsgId && _ackCardHeader) {
-          _pausedCards.set(chatId, { statusMsgId: _replyMsgId, cardHeader: _ackCardHeader, savedAt: Date.now() });
-        }
         return { ok: !timedOut };
       } else {
         const errMsg = error || 'Unknown error';

package/scripts/daemon-default.yaml

@@ -19,6 +19,16 @@ feishu:
     chat_id: ""
     secret: ""
 
+weixin:
+  enabled: false
+  base_url: "https://ilinkai.weixin.qq.com"
+  bot_type: "3"
+  account_id: ""
+  route_tag: null
+  allowed_chat_ids: []
+  chat_agent_map: {}
+  poll_timeout_ms: 35000
+
 projects:
   # Per-project heartbeat tasks. Each project's tasks are isolated and
   # notifications arrive as colored Feishu cards (visually distinct).

package/scripts/daemon-utils.js

@@ -44,6 +44,7 @@ function mergeAgentMaps(cfg) {
   return {
     ...(cfg.telegram ? cfg.telegram.chat_agent_map : {}),
     ...(cfg.feishu ? cfg.feishu.chat_agent_map : {}),
+    ...(cfg.weixin ? cfg.weixin.chat_agent_map : {}),
     ...(cfg.imessage ? cfg.imessage.chat_agent_map : {}),
     ...(cfg.siri_bridge ? cfg.siri_bridge.chat_agent_map : {}),
   };