mocode-ai 1.3.10 → 1.4.0

package/dist/repl/status-bar.js

@@ -0,0 +1,161 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { ui } from '../ui/theme.js';
+import * as layout from '../ui/layout.js';
+import { t } from '../i18n/index.js';
+import { config } from '../config/index.js';
+import { contextState } from '../session/index.js';
+import { DEFAULT_BUDGET_POLICY } from '../context/budget.js';
+import { estimateMessagesTokens, estimatePromptTokens, estimateTokens, chatTools } from '../llm/index.js';
+import { computePruneStats } from '../context/relevance.js';
+import { formatArtifactTokenSources } from '../context/artifacts.js';
+import { getAgentMode } from '../agent/mode.js';
+import { getCurrentSessionId } from '../session/state.js';
+import { getSandboxRoot } from '../sandbox/root.js';
+import { planStepLabel } from '../session/notes.js';
+/** /context 的用量条(详情版,进内容区):只算对话内容(不含 system prompt),方便用户感知自己发了多少、agent 回复了多少。 */
+export function renderContextBar(history) {
+    // 过滤掉 system 消息,只算对话内容
+    const dialog = history.filter((m) => m.role !== 'system');
+    const est = estimateMessagesTokens(dialog);
+    const win = config.contextWindowTokens;
+    const pct = Math.min(1, est / win);
+    const W = 10;
+    const filled = Math.round(pct * W);
+    const bar = '█'.repeat(filled) + '░'.repeat(W - filled);
+    const src = contextState.lastUsage ? t('status.measured') : t('status.estimated');
+    const k = (n) => `${Math.round(n / 1000)}k`;
+    const pctCol = pct >= DEFAULT_BUDGET_POLICY.pressureTriggerRatio ? ui.yellow : ui.accent;
+    const lifecycle = contextState.lifecycleStats;
+    const archived = computePruneStats(history);
+    const artifactStats = contextState.artifactStats;
+    const artifactLine = artifactStats
+        ? `\n  artifacts · fresh ${artifactStats.fresh} · stale ${artifactStats.stale} · stubbed ${archived.stubbed} · tokens ${formatArtifactTokenSources(artifactStats)}`
+        : '\n  artifacts · no file-backed facts recorded';
+    const lifecycleLine = lifecycle
+        ? `\n  lifecycle · live ${lifecycle.live} · referenced ${lifecycle.referenced} · digested ${lifecycle.digested} · stubbed ${lifecycle.stubbed}`
+        : '\n  lifecycle · no active snapshot (run a tool-enabled turn first)';
+    const archiveLine = `\n  archived tool results · ${archived.stubbed}`;
+    return `${ui.gray}[${pctCol}${bar}${ui.reset}] ${Math.round(pct * 100)}%  ${k(est)}/${k(win)} tokens · ${t('status.messages', { count: history.length })} (${src})${ui.reset}${artifactLine}${lifecycleLine}${archiveLine}`;
+}
+/** 状态行用量条(精简版,进底栏):[bar] pct% k/k。
+ * 必须**用全 prompt 估算**(消息 + 工具 schema + 尾部 ephemeral 注入),与压缩触发器
+ * evaluateBudget 的 system+history+toolOld+toolRecent 总账对齐——任何一段漏算都会让
+ * bar 与触发器口径不一致、看着没到 80% 实际已经在压。
+ * 触发器用 `Math.max(rawTotal, total) >= 0.8 * window`,bar 也照搬:校正后和校正前
+ * 哪个大取哪个,确保不会因 correction<1 而低估。ephemeral 文本由 agent/core 每步写入
+ * contextState.ephemeralText(避免在 bar 里再读一次 notes.md)。
+ *
+ * /context 命令仍是 dialog-only(见 renderContextBar):它的设计意图是"我说了多少"而非
+ * "还剩多少空间",两条职责分开。 */
+export function renderContextBarInline(history) {
+    const baseRaw = estimatePromptTokens(history, chatTools, 1);
+    const baseAdj = estimatePromptTokens(history, chatTools, contextState.correction);
+    const ephemeral = contextState.ephemeralText ? estimateTokens(contextState.ephemeralText) : 0;
+    // 与触发器同样的「取大」语义:correction<1 时 raw 更大,bar 不会假装很安全。
+    const est = Math.max(baseRaw, baseAdj) + ephemeral;
+    const win = config.contextWindowTokens;
+    const pct = Math.min(1, est / win);
+    const W = 10;
+    const filled = Math.round(pct * W);
+    const bar = '█'.repeat(filled) + '░'.repeat(W - filled);
+    const k = (n) => `${Math.round(n / 1000)}k`;
+    const pctCol = pct >= DEFAULT_BUDGET_POLICY.pressureTriggerRatio ? ui.yellow : ui.accent;
+    return `${ui.gray}[${pctCol}${bar}${ui.reset}] ${pctCol}${Math.round(pct * 100)}%${ui.reset} ${ui.dim}${k(est)}/${k(win)}${ui.reset}`;
+}
+// 宿主侧记录已结束轮次最后看到的 plan。notes.md 仍完整保留，只抑制未变化的旧 plan 状态栏，
+// 避免 agent 忘记把 `## Plan:` 改成 `## Done:` 时输入框上方永久悬挂。
+let settledPlanFingerprint;
+/** 读取 notes.md 中唯一活跃的 `## Plan:` 段。进度只统计该段，避免其他笔记 checkbox 污染计数。 */
+export function readPlanStatusFromNotes() {
+    const sessionId = getCurrentSessionId();
+    if (!sessionId)
+        return null;
+    const root = getSandboxRoot() ?? process.cwd();
+    const p = path.join(root, '.mocode', 'sessions', sessionId, 'notes.md');
+    try {
+        const normalized = fs.readFileSync(p, 'utf8').replace(/\r\n?/g, '\n');
+        const lines = normalized.split('\n');
+        const start = lines.findIndex((line) => /^## Plan:\s*.+$/.test(line));
+        if (start < 0)
+            return null;
+        const endOffset = lines.slice(start + 1).findIndex((line) => /^##\s/.test(line));
+        const end = endOffset < 0 ? lines.length : start + 1 + endOffset;
+        const section = lines.slice(start, end).join('\n').trimEnd();
+        const title = lines[start].match(/^## Plan:\s*(.+)$/)?.[1].trim();
+        if (!title)
+            return null;
+        const total = (section.match(/^\s*-\s*\[[ xX]\]\s*\d+\./gm) || []).length;
+        const currentMatch = section.match(/^\s*-\s*\[ \]\s*(\d+)\.\s*(.+)$/m);
+        const current = currentMatch ? planStepLabel(currentMatch[2]) : undefined;
+        // 括号进度 = 「当前执行到的步骤序号/总数」(执行第 1 步显示 1/3),与 `▸ 当前步` 后缀自洽;
+        // 旧语义 done/total 会永远慢一拍(执行第 2 步显示 1/3)。全勾选时显示 total/total(通常已自动结算为 Done,chip 消失)。
+        const activeNo = currentMatch ? Number(currentMatch[1]) : total;
+        const summary = `plan: ${title} (${activeNo}/${total})`;
+        // mtime 让“相同内容被重写为一项新计划”也能重新出现，而不被旧轮次误抑制。
+        const fingerprint = `${sessionId}\0${fs.statSync(p).mtimeMs}\0${section}`;
+        return { fingerprint, summary: current ? `${summary} ▸ ${current}` : summary };
+    }
+    catch {
+        return null;
+    }
+}
+/** 将当前 plan 标记为已结算。只影响状态栏，不修改 agent 的工作笔记。 */
+export function settlePlanStatus() {
+    settledPlanFingerprint = readPlanStatusFromNotes()?.fingerprint;
+}
+/** 从 notes.md 读取活跃 plan 摘要；已结算且未变化的旧 plan 不再显示。 */
+export function readPlanFromNotes() {
+    const plan = readPlanStatusFromNotes();
+    if (!plan || plan.fingerprint === settledPlanFingerprint)
+        return '';
+    return plan.summary;
+}
+/** 状态行基线:模型 / context / cwd / 模式标识 / 活跃 plan chip / 本轮 token。repl 在轮次边界、切模式、plan 变更时调。 */
+export function refreshStatusBase(history, lastTurnUsage) {
+    layout.setStatusBase({
+        model: config.model,
+        contextBar: renderContextBarInline(history),
+        cwd: process.cwd(),
+        modeTag: getAgentMode() === 'plan' ? 'Plan' : 'Auto',
+        planSummary: readPlanFromNotes(),
+        lastTurnUsage,
+    });
+}
+/** 命令 → 运行态状态文字 + 底栏 dim 占位。 */
+export function runningStateFor(cmd) {
+    switch (cmd) {
+        case '/compact':
+            return { status: t('running.compact'), placeholder: t('running.compacting') };
+        case '/resume':
+            return { status: t('running.resume'), placeholder: t('running.chooseSession') };
+        case '/rollback':
+            return { status: t('running.rollback'), placeholder: t('running.chooseTurn') };
+        case '/init':
+            return { status: t('running.init'), placeholder: t('running.generateMemory') };
+        case '/plan':
+            return { status: t('running.plan'), placeholder: '…' };
+        case '/auto':
+            return { status: t('running.auto'), placeholder: '…' };
+        case '/clear':
+            return { status: t('running.clear'), placeholder: '…' };
+        case '/theme':
+            return { status: t('running.theme'), placeholder: t('running.chooseTheme') };
+        case '/model':
+            return { status: t('running.model'), placeholder: t('running.configuring') };
+        case '/pet':
+            return { status: t('running.pet'), placeholder: t('running.processing') };
+        case '/memory_switch':
+            return { status: t('running.memory'), placeholder: t('running.switching') };
+        case '/memory_status':
+            return { status: t('running.memoryStatus'), placeholder: '…' };
+        case '/subagent':
+            return { status: t('running.subagent'), placeholder: t('running.switching') };
+        case '/language':
+            return { status: t('running.language'), placeholder: t('running.chooseLanguage') };
+        case '/upgrade':
+            return { status: t('running.upgrade'), placeholder: t('running.upgrading') };
+        default:
+            return { status: '', placeholder: '' };
+    }
+}

package/dist/rollback/index.js

@@ -111,9 +111,7 @@ function addSnapshot(next) {
     const existingSequence = existing.sequence ?? Number.MAX_SAFE_INTEGER;
     const nextSequence = next.sequence ?? Number.MAX_SAFE_INTEGER;
     const ops = new Set([...(existing.ops ?? []), ...(next.ops ?? [])]);
-    const latestAfterFingerprint = nextSequence >= existingSequence
-        ? next.afterFingerprint
-        : existing.afterFingerprint;
+    const latestAfterFingerprint = nextSequence >= existingSequence ? next.afterFingerprint : existing.afterFingerprint;
     if (nextSequence < existingSequence) {
         snapshots[existingIndex] = { ...next, ops: [...ops], afterFingerprint: latestAfterFingerprint };
     }
@@ -183,15 +181,48 @@ export function endPathMutation(capture, op) {
 const EXCLUDED_WORKSPACE_DIRS = new Set([
     // VCS / 索引 / mocode 自身运行时状态(会话、trace、dev-server 日志、记忆、截图每轮都在写,
     // 既无回滚意义,又会被误判成模型改动)
-    '.git', '.hg', '.svn', '.codegraph', '.mocode',
+    '.git',
+    '.hg',
+    '.svn',
+    '.codegraph',
+    '.mocode',
     // 依赖树与包管理器缓存
-    'node_modules', 'vendor', 'bower_components', '.yarn', '.pnpm-store', '.venv', 'venv', 'pods',
+    'node_modules',
+    'vendor',
+    'bower_components',
+    '.yarn',
+    '.pnpm-store',
+    '.venv',
+    'venv',
+    'pods',
     // 构建产物
-    'dist', 'build', 'out', 'target', 'coverage', '.output', '.next', '.nuxt', '.vite',
-    '.turbo', '.svelte-kit', '.angular', '.astro', '.docusaurus', '.dart_tool', '.terraform',
+    'dist',
+    'build',
+    'out',
+    'target',
+    'coverage',
+    '.output',
+    '.next',
+    '.nuxt',
+    '.vite',
+    '.turbo',
+    '.svelte-kit',
+    '.angular',
+    '.astro',
+    '.docusaurus',
+    '.dart_tool',
+    '.terraform',
     // 临时与缓存
-    '.tmp', 'tmp', '.cache', '.parcel-cache', '.nyc_output', '__pycache__',
-    '.pytest_cache', '.mypy_cache', '.ruff_cache', '.gradle',
+    '.tmp',
+    'tmp',
+    '.cache',
+    '.parcel-cache',
+    '.nyc_output',
+    '__pycache__',
+    '.pytest_cache',
+    '.mypy_cache',
+    '.ruff_cache',
+    '.gradle',
 ]);
 /** 单文件内容捕获上限：更大的文件只留 stamp(可检测变化,不可恢复),避免把巨型二进制读进内存。 */
 const CAPTURE_FILE_LIMIT = 1024 * 1024;
@@ -498,17 +529,16 @@ export function applyRollback(plan, history, revertPaths) {
         if (snapshot.turnId <= plan.cutoffTurnId || !revertPaths.has(snapshot.path))
             continue;
         const latestSnapshot = latest.get(snapshot.path);
-        if (!latestSnapshot || snapshot.turnId > latestSnapshot.turnId ||
-            (snapshot.turnId === latestSnapshot.turnId &&
-                (snapshot.sequence ?? -1) > (latestSnapshot.sequence ?? -1))) {
+        if (!latestSnapshot ||
+            snapshot.turnId > latestSnapshot.turnId ||
+            (snapshot.turnId === latestSnapshot.turnId && (snapshot.sequence ?? -1) > (latestSnapshot.sequence ?? -1))) {
             latest.set(snapshot.path, snapshot);
         }
         const existing = picks.get(snapshot.path);
         if (!existing ||
             snapshot.turnId < existing.turnId ||
             (snapshot.turnId === existing.turnId &&
-                (snapshot.sequence ?? Number.MAX_SAFE_INTEGER) <
-                    (existing.sequence ?? Number.MAX_SAFE_INTEGER))) {
+                (snapshot.sequence ?? Number.MAX_SAFE_INTEGER) < (existing.sequence ?? Number.MAX_SAFE_INTEGER))) {
             picks.set(snapshot.path, snapshot);
         }
     }

package/dist/runtime/browser-manager.js

@@ -244,7 +244,7 @@ export async function readText(opts) {
     let text;
     try {
         text = opts.selector
-            ? (await session.page.textContent(opts.selector, { timeout: DEFAULT_TIMEOUT_MS })) ?? ''
+            ? ((await session.page.textContent(opts.selector, { timeout: DEFAULT_TIMEOUT_MS })) ?? '')
             : await session.page.innerText('body');
     }
     catch (error) {

package/dist/runtime/dev-server-manager.js

@@ -254,7 +254,7 @@ export async function startDevServer(opts) {
                 ready = true;
                 break;
             }
-            if (readyUrl && await probeReady(readyUrl)) {
+            if (readyUrl && (await probeReady(readyUrl))) {
                 ready = true;
                 break;
             }

package/dist/runtime/input-injector.js

@@ -0,0 +1,313 @@
+/**
+ * OS 级输入注入(computer 工具的「手」)。
+ *
+ * 架构:InputInjector 接口与实现解耦——
+ * - 阶段一(MVP,本文件):PowerShell 常驻子进程,stdin 收 NDJSON 动作、stdout 回 NDJSON 结果,
+ *   P/Invoke user32.dll(SendInput / SetCursorPos / GetCursorPos / mouse_event)。零新依赖。
+ * - 阶段二(终态,docs/computer-use-design.md P4,本轮不做):rust/ enigo 二进制,同协议替换。
+ *
+ * 非 Windows 平台 MVP 显式抛错(诚实降级),不静默假装支持。
+ * 键名映射接受 Anthropic 风格键名(Return / Alt_L / ctrl+s),在 TS 侧映射成 VK 码,
+ * PowerShell 只负责按 VK 码发键——映射逻辑留在可单测的 TS 里。
+ */
+import { spawn } from 'node:child_process';
+import { filterEnv } from '../sandbox/index.js';
+// ── Anthropic 键名 → Windows VK 码 ─────────────────────────────────────
+const VK_NAMED = {
+    return: 0x0d, enter: 0x0d, escape: 0x1b, esc: 0x1b, tab: 0x09, space: 0x20,
+    backspace: 0x08, delete: 0x2e, insert: 0x2d, home: 0x24, end: 0x23,
+    page_up: 0x21, pageup: 0x21, page_down: 0x22, pagedown: 0x22, prior: 0x21, next: 0x22,
+    left: 0x25, up: 0x26, right: 0x27, down: 0x28,
+    arrowleft: 0x25, arrowup: 0x26, arrowright: 0x27, arrowdown: 0x28,
+    ctrl: 0x11, control: 0x11, control_l: 0xa2, ctrl_l: 0xa2, control_r: 0xa3, ctrl_r: 0xa3,
+    alt: 0x12, alt_l: 0xa4, alt_r: 0xa5, option: 0x12,
+    shift: 0x10, shift_l: 0xa0, shift_r: 0xa1,
+    super_l: 0x5b, super: 0x5b, meta: 0x5b, win: 0x5b, cmd: 0x5b, command: 0x5b,
+    caps_lock: 0x14, num_lock: 0x90, scroll_lock: 0x91, print_screen: 0x2c, snapshot: 0x2c,
+    minus: 0xbd, equals: 0xbb, comma: 0xbc, period: 0xbe, slash: 0xbf,
+    semicolon: 0xba, quote: 0xde, bracketleft: 0xdb, bracketright: 0xdd, backslash: 0xdc, backquote: 0xc0,
+};
+for (let i = 1; i <= 12; i++)
+    VK_NAMED[`f${i}`] = 0x6f + i;
+/** 把 'ctrl+shift+t' / 'Return' 这类组合键解析为 VK 码数组(修饰键在前)。未知键名抛错。 */
+export function mapKeyComboToVk(combo) {
+    const parts = combo
+        .split('+')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    if (parts.length === 0)
+        throw new Error(`empty key combo: "${combo}"`);
+    return parts.map((part) => {
+        const key = part.toLowerCase();
+        const named = VK_NAMED[key];
+        if (named !== undefined)
+            return named;
+        if (key.length === 1) {
+            const c = key.charCodeAt(0);
+            if (c >= 0x61 && c <= 0x7a)
+                return c - 0x20; // a-z → 0x41-0x5A
+            if (c >= 0x30 && c <= 0x39)
+                return c; // 0-9
+            const punct = VK_NAMED[{ '-': 'minus', '=': 'equals', ',': 'comma', '.': 'period', '/': 'slash', ';': 'semicolon', "'": 'quote', '[': 'bracketleft', ']': 'bracketright', '\\': 'backslash', '`': 'backquote' }[key] ?? ''];
+            if (punct !== undefined)
+                return punct;
+        }
+        throw new Error(`unknown key name: "${part}" in combo "${combo}"`);
+    });
+}
+// ── PowerShell 常驻进程协议 ─────────────────────────────────────────────
+/** PowerShell 侧脚本:加载 P/Invoke 声明一次,然后 NDJSON 循环收动作。 */
+const PS_INJECTOR_SCRIPT = [
+    '$ErrorActionPreference = "Stop"',
+    '[Console]::InputEncoding = [System.Text.Encoding]::UTF8',
+    '[Console]::OutputEncoding = [System.Text.Encoding]::UTF8',
+    'Add-Type -TypeDefinition @"',
+    'using System;',
+    'using System.Runtime.InteropServices;',
+    'public class Inject {',
+    '  [DllImport("user32.dll")] public static extern bool SetCursorPos(int X, int Y);',
+    '  [DllImport("user32.dll")] public static extern bool GetCursorPos(out POINT lpPoint);',
+    '  [DllImport("user32.dll")] public static extern uint SendInput(uint nInputs, INPUT[] pInputs, int cbSize);',
+    '  [DllImport("user32.dll")] public static extern void mouse_event(uint dwFlags, uint dx, uint dy, int dwData, UIntPtr dwExtraInfo);',
+    '  public struct POINT { public int X; public int Y; }',
+    '  [StructLayout(LayoutKind.Sequential)] public struct INPUT { public uint type; public INPUTUNION U; }',
+    '  [StructLayout(LayoutKind.Explicit)] public struct INPUTUNION { [FieldOffset(0)] public MOUSEINPUT mi; [FieldOffset(0)] public KEYBDINPUT ki; }',
+    '  [StructLayout(LayoutKind.Sequential)] public struct MOUSEINPUT { public int dx; public int dy; public uint mouseData; public uint dwFlags; public uint time; public UIntPtr dwExtraInfo; }',
+    '  [StructLayout(LayoutKind.Sequential)] public struct KEYBDINPUT { public ushort wVk; public ushort wScan; public uint dwFlags; public uint time; public UIntPtr dwExtraInfo; }',
+    '}',
+    '"@',
+    'function Send-VkCombo([int[]]$vks) {',
+    '  $size = [Runtime.InteropServices.Marshal]::SizeOf([type]"Inject+INPUT")',
+    '  foreach ($vk in $vks) {',
+    '    $inp = New-Object "Inject+INPUT"',
+    '    $inp.type = 1',
+    '    $inp.U.ki.wVk = $vk',
+    '    $inp.U.ki.dwFlags = 0',
+    '    [Inject]::SendInput(1, [Inject+INPUT[]]@($inp), $size) | Out-Null',
+    '  }',
+    '  [array]::Reverse($vks)',
+    '  foreach ($vk in $vks) {',
+    '    $inp = New-Object "Inject+INPUT"',
+    '    $inp.type = 1',
+    '    $inp.U.ki.wVk = $vk',
+    '    $inp.U.ki.dwFlags = 2',
+    '    [Inject]::SendInput(1, [Inject+INPUT[]]@($inp), $size) | Out-Null',
+    '  }',
+    '}',
+    'function Send-UnicodeText([string]$text) {',
+    '  $size = [Runtime.InteropServices.Marshal]::SizeOf([type]"Inject+INPUT")',
+    '  for ($i = 0; $i -lt $text.Length; $i++) {',
+    '    $code = [int][char]$text[$i]',
+    '    foreach ($flag in @(4, 6)) {',
+    '      $inp = New-Object "Inject+INPUT"',
+    '      $inp.type = 1',
+    '      $inp.U.ki.wVk = 0',
+    '      $inp.U.ki.wScan = $code',
+    '      $inp.U.ki.dwFlags = $flag',
+    '      [Inject]::SendInput(1, [Inject+INPUT[]]@($inp), $size) | Out-Null',
+    '    }',
+    '  }',
+    '}',
+    'while ($null -ne ($line = [Console]::In.ReadLine())) {',
+    '  $resp = @{ id = 0; ok = $false; detail = "" }',
+    '  try {',
+    '    $req = $line | ConvertFrom-Json',
+    '    $resp.id = $req.id',
+    '    switch ($req.op) {',
+    '      "ping" { $resp.ok = $true }',
+    '      "move" { [Inject]::SetCursorPos([int]$req.x, [int]$req.y) | Out-Null; $resp.ok = $true }',
+    '      "click" {',
+    '        $flags = switch ($req.button) { "right" { @(8, 16) } "middle" { @(32, 64) } default { @(2, 4) } }',
+    '        for ($n = 0; $n -lt [int]$req.count; $n++) {',
+    '          [Inject]::mouse_event($flags[0], 0, 0, 0, [UIntPtr]::Zero)',
+    '          [Inject]::mouse_event($flags[1], 0, 0, 0, [UIntPtr]::Zero)',
+    '          if ($n -lt [int]$req.count - 1) { Start-Sleep -Milliseconds 40 }',
+    '        }',
+    '        $resp.ok = $true',
+    '      }',
+    '      "mousedown" {',
+    '        $flag = switch ($req.button) { "right" { 8 } "middle" { 32 } default { 2 } }',
+    '        [Inject]::mouse_event($flag, 0, 0, 0, [UIntPtr]::Zero); $resp.ok = $true',
+    '      }',
+    '      "mouseup" {',
+    '        $flag = switch ($req.button) { "right" { 16 } "middle" { 64 } default { 4 } }',
+    '        [Inject]::mouse_event($flag, 0, 0, 0, [UIntPtr]::Zero); $resp.ok = $true',
+    '      }',
+    '      "type" { Send-UnicodeText([string]$req.text); $resp.ok = $true }',
+    '      "key" { Send-VkCombo([int[]]$req.vks); $resp.ok = $true }',
+    '      "scroll" {',
+    '        $amt = [int]$req.amount * 120',
+    '        if ($req.direction -eq "down" -or $req.direction -eq "left") { $amt = -$amt }',
+    '        $flag = if ($req.direction -eq "left" -or $req.direction -eq "right") { 4096 } else { 2048 }',
+    '        [Inject]::mouse_event($flag, 0, 0, $amt, [UIntPtr]::Zero); $resp.ok = $true',
+    '      }',
+    '      "cursor" {',
+    '        $p = New-Object "Inject+POINT"',
+    '        [Inject]::GetCursorPos([ref]$p) | Out-Null',
+    '        $resp.x = $p.X; $resp.y = $p.Y; $resp.ok = $true',
+    '      }',
+    '      default { $resp.detail = "unknown op: $($req.op)" }',
+    '    }',
+    '  } catch {',
+    '    $resp.ok = $false',
+    '    $resp.detail = $_.Exception.Message',
+    '  }',
+    '  [Console]::Out.WriteLine(($resp | ConvertTo-Json -Compress))',
+    '  [Console]::Out.Flush()',
+    '}',
+].join('\n');
+const OP_TIMEOUT_MS = 10000;
+class PowerShellInjector {
+    child = null;
+    nextId = 1;
+    pending = new Map();
+    stdoutBuf = '';
+    lastError = '';
+    ensureProcess() {
+        if (this.child && this.child.exitCode === null && !this.child.killed)
+            return this.child;
+        this.child = spawn('powershell.exe', ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', PS_INJECTOR_SCRIPT], { env: filterEnv(process.env), windowsHide: true, stdio: ['pipe', 'pipe', 'pipe'] });
+        this.stdoutBuf = '';
+        this.lastError = '';
+        this.child.stdout.on('data', (chunk) => this.onStdout(chunk.toString('utf8')));
+        this.child.stderr.on('data', (chunk) => {
+            this.lastError = (this.lastError + chunk.toString('utf8')).slice(-2000);
+        });
+        this.child.on('exit', () => this.failAll(new Error(`injector process exited${this.lastError ? `: ${this.lastError.trim()}` : ''}`)));
+        this.child.on('error', (err) => this.failAll(err));
+        return this.child;
+    }
+    onStdout(text) {
+        this.stdoutBuf += text;
+        let idx;
+        while ((idx = this.stdoutBuf.indexOf('\n')) >= 0) {
+            const line = this.stdoutBuf.slice(0, idx).trim();
+            this.stdoutBuf = this.stdoutBuf.slice(idx + 1);
+            if (!line)
+                continue;
+            let msg;
+            try {
+                msg = JSON.parse(line);
+            }
+            catch {
+                continue; // 非协议行(Add-Type 警告等),忽略
+            }
+            const id = typeof msg.id === 'number' ? msg.id : -1;
+            const op = this.pending.get(id);
+            if (!op)
+                continue;
+            this.pending.delete(id);
+            clearTimeout(op.timer);
+            op.resolve(msg);
+        }
+    }
+    failAll(error) {
+        for (const [, op] of this.pending) {
+            clearTimeout(op.timer);
+            op.reject(error);
+        }
+        this.pending.clear();
+        if (this.child) {
+            try {
+                this.child.kill();
+            }
+            catch {
+                /* 进程已退出 */
+            }
+            this.child = null;
+        }
+    }
+    call(op, params, signal) {
+        const child = this.ensureProcess();
+        const id = this.nextId++;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                this.failAll(new Error(`injector op "${op}" timed out after ${OP_TIMEOUT_MS}ms`));
+                reject(new Error(`injector op "${op}" timed out`));
+            }, OP_TIMEOUT_MS);
+            this.pending.set(id, { resolve, reject, timer });
+            const onAbort = () => {
+                this.pending.delete(id);
+                clearTimeout(timer);
+                this.failAll(new Error('aborted'));
+                reject(new Error('Input injection aborted.'));
+            };
+            if (signal) {
+                if (signal.aborted)
+                    return onAbort();
+                signal.addEventListener('abort', onAbort, { once: true });
+            }
+            try {
+                child.stdin.write(`${JSON.stringify({ id, op, ...params })}\n`, 'utf8');
+            }
+            catch (err) {
+                this.pending.delete(id);
+                clearTimeout(timer);
+                reject(err instanceof Error ? err : new Error(String(err)));
+            }
+        }).then(async (resp) => {
+            if (resp.ok !== true) {
+                throw new Error(`injector op "${op}" failed: ${String(resp.detail ?? 'unknown error')}`);
+            }
+            return resp;
+        });
+    }
+    signal;
+    /** 每次动作批次绑定一次 signal(computer 工具 execute 时设置)。 */
+    bindSignal(signal) {
+        this.signal = signal;
+    }
+    async moveTo(x, y) {
+        await this.call('move', { x, y }, this.signal);
+    }
+    async click(button, count) {
+        await this.call('click', { button, count }, this.signal);
+    }
+    async mouseDown(button) {
+        await this.call('mousedown', { button }, this.signal);
+    }
+    async mouseUp(button) {
+        await this.call('mouseup', { button }, this.signal);
+    }
+    async dragTo(x, y) {
+        await this.call('move', { x, y }, this.signal);
+    }
+    async typeText(text) {
+        await this.call('type', { text }, this.signal);
+    }
+    async pressKey(combo) {
+        const vks = mapKeyComboToVk(combo);
+        await this.call('key', { vks }, this.signal);
+    }
+    async scroll(direction, amount) {
+        await this.call('scroll', { direction, amount }, this.signal);
+    }
+    async cursorPosition() {
+        const resp = await this.call('cursor', {}, this.signal);
+        return { x: Number(resp.x) || 0, y: Number(resp.y) || 0 };
+    }
+    async dispose() {
+        this.failAll(new Error('injector disposed'));
+    }
+}
+let singleton = null;
+/**
+ * 取当前平台的 InputInjector。Windows 用 PowerShell 常驻进程(惰性启动);
+ * 其它平台显式抛错——宁可诚实报「不支持」,也不静默失败。
+ */
+export function createInputInjector() {
+    if (process.platform !== 'win32') {
+        throw new Error(`computer use input injection is not yet supported on ${process.platform} ` +
+            '(Windows MVP via PowerShell; Rust enigo injector is the planned cross-platform path).');
+    }
+    singleton ??= new PowerShellInjector();
+    return singleton;
+}
+/** 关闭常驻注入进程(REPL 退出 / /cu off 时调用)。 */
+export async function disposeInputInjector() {
+    if (singleton) {
+        await singleton.dispose();
+        singleton = null;
+    }
+}

package/dist/runtime/screen-capture.js

@@ -0,0 +1,89 @@
+/**
+ * 跨平台桌面截图捕获:从 tools/builtins/screenshot.ts 抽出的可复用底层。
+ * screenshot 工具与 computer 工具的闭环重截屏共用同一份平台逻辑,零重复。
+ * 只做「抓屏 → 写 PNG 文件」,不做缩放/坐标/回灌(那是 screen-pipeline 的职责)。
+ */
+import { spawn } from 'node:child_process';
+import { filterEnv } from '../sandbox/index.js';
+function runCaptureProcess(program, args, env, signal) {
+    return new Promise((resolve) => {
+        const child = spawn(program, args, {
+            env,
+            windowsHide: true,
+            stdio: ['ignore', 'ignore', 'pipe'],
+        });
+        let stderr = '';
+        let finished = false;
+        const finish = (result) => {
+            if (finished)
+                return;
+            finished = true;
+            signal?.removeEventListener('abort', onAbort);
+            resolve(result);
+        };
+        const onAbort = () => {
+            child.kill();
+            finish({ status: 'aborted', detail: 'Screenshot capture was aborted.' });
+        };
+        child.stderr.on('data', (chunk) => {
+            stderr = (stderr + chunk.toString('utf8')).slice(-4000);
+        });
+        child.on('error', (error) => finish({ status: 'spawn_error', detail: error.message }));
+        child.on('close', (code) => finish({
+            status: code === 0 ? 'passed' : 'failed',
+            detail: stderr.trim() || `Capture process exited with code ${code ?? 'null'}.`,
+        }));
+        if (signal) {
+            if (signal.aborted)
+                onAbort();
+            else
+                signal.addEventListener('abort', onAbort, { once: true });
+        }
+    });
+}
+const WINDOWS_CAPTURE_SCRIPT = [
+    'Add-Type -AssemblyName System.Windows.Forms',
+    'Add-Type -AssemblyName System.Drawing',
+    "$bounds = if ($env:MOCODE_SCREENSHOT_TARGET -eq 'all') { [System.Windows.Forms.SystemInformation]::VirtualScreen } else { [System.Windows.Forms.Screen]::PrimaryScreen.Bounds }",
+    '$bitmap = [System.Drawing.Bitmap]::new($bounds.Width, $bounds.Height)',
+    '$graphics = [System.Drawing.Graphics]::FromImage($bitmap)',
+    'try {',
+    '  $graphics.CopyFromScreen($bounds.X, $bounds.Y, 0, 0, $bounds.Size)',
+    '  $bitmap.Save($env:MOCODE_SCREENSHOT_PATH, [System.Drawing.Imaging.ImageFormat]::Png)',
+    '} finally {',
+    '  $graphics.Dispose()',
+    '  $bitmap.Dispose()',
+    '}',
+].join('\n');
+/** 抓屏并写入 outputPath。target=primary 主屏,all 整个虚拟桌面。 */
+export async function captureDesktop(outputPath, target, signal) {
+    const env = {
+        ...filterEnv(process.env),
+        MOCODE_SCREENSHOT_PATH: outputPath,
+        MOCODE_SCREENSHOT_TARGET: target,
+    };
+    if (process.platform === 'win32') {
+        return runCaptureProcess('powershell.exe', ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', WINDOWS_CAPTURE_SCRIPT], env, signal);
+    }
+    if (process.platform === 'darwin') {
+        const args = ['-x', ...(target === 'primary' ? ['-m'] : []), outputPath];
+        return runCaptureProcess('/usr/sbin/screencapture', args, env, signal);
+    }
+    const candidates = [
+        ['gnome-screenshot', ['-f', outputPath]],
+        ['grim', [outputPath]],
+        ['scrot', [outputPath]],
+        ['import', ['-window', 'root', outputPath]],
+    ];
+    const failures = [];
+    for (const [program, args] of candidates) {
+        const result = await runCaptureProcess(program, args, env, signal);
+        if (result.status === 'passed' || result.status === 'aborted')
+            return result;
+        failures.push(`${program}: ${result.detail}`);
+    }
+    return {
+        status: 'failed',
+        detail: `No supported Linux screenshot command succeeded. ${failures.join(' | ')}`,
+    };
+}