mocode-ai 1.3.9 → 1.4.0

package/dist/mcp/client.js

@@ -28,12 +28,23 @@ class StdioTransport extends McpTransport {
         });
         this.child = child;
         child.stdout?.on('data', (chunk) => this.onData(chunk));
-        child.stderr?.on('data', () => { });
-        child.on('exit', (code, signal) => { this.child = null; if (code !== 0 && signal == null)
-            this.receive({ error: { message: `stdio server 已退出 (${code})` } }); });
+        child.stderr?.on('data', () => {
+            /* MCP stderr 是诊断输出，不混入协议流。 */
+        });
+        child.on('exit', (code, signal) => {
+            this.child = null;
+            if (code !== 0 && signal == null)
+                this.receive({ error: { message: `stdio server 已退出 (${code})` } });
+        });
         await new Promise((resolve, reject) => {
-            const onSpawn = () => { child.off('error', onError); resolve(); };
-            const onError = (error) => { child.off('spawn', onSpawn); reject(error); };
+            const onSpawn = () => {
+                child.off('error', onError);
+                resolve();
+            };
+            const onError = (error) => {
+                child.off('spawn', onSpawn);
+                reject(error);
+            };
             child.once('spawn', onSpawn);
             child.once('error', onError);
         });
@@ -43,7 +54,7 @@ class StdioTransport extends McpTransport {
             throw new Error('MCP stdio server 未连接');
         const body = `${JSON.stringify(message)}\n`;
         // MCP stdio 传输使用 NDJSON；接收端仍兼容 Content-Length，方便接入历史 LSP 风格服务。
-        await new Promise((resolve, reject) => this.child.stdin.write(body, (error) => error ? reject(error) : resolve()));
+        await new Promise((resolve, reject) => this.child.stdin.write(body, (error) => (error ? reject(error) : resolve())));
     }
     async close() {
         const child = this.child;
@@ -83,7 +94,9 @@ class StdioTransport extends McpTransport {
         try {
             this.receive(JSON.parse(raw));
         }
-        catch { /* 忽略 server 的非协议 stdout，避免打断会话。 */ }
+        catch {
+            /* 忽略 server 的非协议 stdout，避免打断会话。 */
+        }
     }
 }
 class StreamableHttpTransport extends McpTransport {
@@ -93,7 +106,9 @@ class StreamableHttpTransport extends McpTransport {
         super(receive);
         this.spec = spec;
     }
-    async start() { }
+    async start() {
+        /* 每个 JSON-RPC 请求自行 POST，无长连接需预热。 */
+    }
     async send(message) {
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), timeoutFor(this.spec));
@@ -106,7 +121,11 @@ class StreamableHttpTransport extends McpTransport {
             if (this.sessionId)
                 headers['mcp-session-id'] = this.sessionId;
             const response = await fetch(this.spec.url, {
-                method: 'POST', headers, body: JSON.stringify(message), signal: controller.signal, redirect: 'error',
+                method: 'POST',
+                headers,
+                body: JSON.stringify(message),
+                signal: controller.signal,
+                redirect: 'error',
             });
             this.captureSession(response);
             if (!response.ok)
@@ -125,12 +144,20 @@ class StreamableHttpTransport extends McpTransport {
             clearTimeout(timer);
         }
     }
-    async close() { this.sessionId = null; }
-    captureSession(response) { this.sessionId = response.headers.get('mcp-session-id') ?? this.sessionId; }
-    receiveEvent(event) { try {
-        this.receive(JSON.parse(event.data));
+    async close() {
+        this.sessionId = null;
+    }
+    captureSession(response) {
+        this.sessionId = response.headers.get('mcp-session-id') ?? this.sessionId;
+    }
+    receiveEvent(event) {
+        try {
+            this.receive(JSON.parse(event.data));
+        }
+        catch {
+            /* 非 JSON SSE event 无法作为 MCP 响应。 */
+        }
     }
-    catch { /* 非 JSON SSE event 无法作为 MCP 响应。 */ } }
 }
 class SseTransport extends McpTransport {
     spec;
@@ -147,7 +174,10 @@ class SseTransport extends McpTransport {
         if (this.connecting)
             return this.connecting;
         this.controller = new AbortController();
-        this.connecting = new Promise((resolve, reject) => { this.resolveEndpoint = resolve; this.rejectEndpoint = reject; });
+        this.connecting = new Promise((resolve, reject) => {
+            this.resolveEndpoint = resolve;
+            this.rejectEndpoint = reject;
+        });
         void this.open();
         return this.connecting;
     }
@@ -161,7 +191,9 @@ class SseTransport extends McpTransport {
             const response = await fetch(this.endpoint, {
                 method: 'POST',
                 headers: { 'content-type': 'application/json', ...this.spec.headers },
-                body: JSON.stringify(message), signal: controller.signal, redirect: 'error',
+                body: JSON.stringify(message),
+                signal: controller.signal,
+                redirect: 'error',
             });
             if (!response.ok)
                 throw new Error(`HTTP ${response.status}: ${(await response.text()).slice(0, 500)}`);
@@ -179,7 +211,9 @@ class SseTransport extends McpTransport {
     async open() {
         try {
             const response = await fetch(this.spec.url, {
-                headers: { accept: 'text/event-stream', ...this.spec.headers }, signal: this.controller?.signal, redirect: 'error',
+                headers: { accept: 'text/event-stream', ...this.spec.headers },
+                signal: this.controller?.signal,
+                redirect: 'error',
             });
             if (!response.ok)
                 throw new Error(`HTTP ${response.status}: ${(await response.text()).slice(0, 500)}`);
@@ -192,7 +226,9 @@ class SseTransport extends McpTransport {
                 try {
                     this.receive(JSON.parse(event.data));
                 }
-                catch { /* 忽略非 MCP SSE event。 */ }
+                catch {
+                    /* 忽略非 MCP SSE event。 */
+                }
             }, this.controller?.signal);
             if (!this.endpoint)
                 throw new Error('SSE MCP server 在连接关闭前未提供 endpoint');
@@ -218,13 +254,16 @@ export class McpClient {
         this.spec = spec;
         const receive = (message) => this.onMessage(message);
         // 向后兼容早期仅提供 command/args 的 stdio 配置；新配置显式写 transport 更清晰。
-        this.transport = spec.transport === 'stdio' || ('command' in spec && typeof spec.command === 'string')
-            ? new StdioTransport(receive, spec)
-            : spec.transport === 'sse'
-                ? new SseTransport(receive, spec)
-                : new StreamableHttpTransport(receive, spec);
+        this.transport =
+            spec.transport === 'stdio' || ('command' in spec && typeof spec.command === 'string')
+                ? new StdioTransport(receive, spec)
+                : spec.transport === 'sse'
+                    ? new SseTransport(receive, spec)
+                    : new StreamableHttpTransport(receive, spec);
+    }
+    isReady() {
+        return this.initialized && !this.closed;
     }
-    isReady() { return this.initialized && !this.closed; }
     async initialize() {
         if (this.isReady())
             return;
@@ -353,7 +392,13 @@ async function consumeSse(body, onEvent, signal) {
             let boundary;
             while ((boundary = buffered.search(/\r?\n\r?\n/)) !== -1) {
                 const block = buffered.slice(0, boundary);
-                const separatorLength = buffered[boundary] === '\r' ? (buffered[boundary + 2] === '\r' ? 4 : 3) : (buffered[boundary + 1] === '\r' ? 3 : 2);
+                const separatorLength = buffered[boundary] === '\r'
+                    ? buffered[boundary + 2] === '\r'
+                        ? 4
+                        : 3
+                    : buffered[boundary + 1] === '\r'
+                        ? 3
+                        : 2;
                 buffered = buffered.slice(boundary + separatorLength);
                 const event = parseSseBlock(block);
                 if (event)

package/dist/mcp/config.js

@@ -114,9 +114,7 @@ function positiveNumber(value) {
     return Number.isFinite(n) && n > 0 ? Math.floor(n) : undefined;
 }
 function stringArray(value) {
-    return Array.isArray(value) && value.every((item) => typeof item === 'string')
-        ? value.map(expandEnv)
-        : undefined;
+    return Array.isArray(value) && value.every((item) => typeof item === 'string') ? value.map(expandEnv) : undefined;
 }
 function stringRecord(value) {
     if (!isRecord(value))

package/dist/mcp/index.js

@@ -68,7 +68,9 @@ export async function closeAllMcp() {
     clients.clear();
     await Promise.allSettled(active.map((client) => client.close()));
 }
-export function getMcpWarnings() { return [...startupWarnings]; }
+export function getMcpWarnings() {
+    return [...startupWarnings];
+}
 function shouldRegisterTool(spec, remoteName) {
     if (spec.excludeTools?.includes(remoteName))
         return false;

package/dist/memory/reflect.js

@@ -12,7 +12,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import path from 'node:path';
 import { chat } from '../llm/index.js';
 import { config, isMemoryEnabled } from '../config/index.js';
-import { saveEntry, updateEntry, forgetEntry, loadAll, gcMemories, } from './store.js';
+import { saveEntry, updateEntry, forgetEntry, loadAll, gcMemories } from './store.js';
 import { addTriple } from './graph.js';
 // ── 日志(静默容错,裁尾保最近)─────────────────────────────────────────────
 function logPath() {
@@ -41,9 +41,7 @@ function textOf(c) {
     if (c == null)
         return '';
     if (Array.isArray(c)) {
-        return c
-            .map((p) => (typeof p === 'string' ? p : p?.text ?? ''))
-            .join('');
+        return c.map((p) => (typeof p === 'string' ? p : (p?.text ?? ''))).join('');
     }
     return String(c);
 }
@@ -56,8 +54,7 @@ export function snapshotTranscript(history, K) {
     const lines = convo.map((m) => {
         const role = m.role ?? '?';
         let line = `${role}: ${textOf(m.content)}`;
-        const tcs = m
-            .tool_calls;
+        const tcs = m.tool_calls;
         if (Array.isArray(tcs)) {
             for (const tc of tcs) {
                 line += `\n  [tool_call ${tc?.function?.name ?? ''}] ${tc?.function?.arguments ?? ''}`;

package/dist/memory/store.js

@@ -11,7 +11,7 @@
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { MAX_ACTIVE, MAX_INDEX_ENTRIES, MAX_MEMORY_ENTRY, DECAY_DAYS, GC_DAYS, } from '../tools/constants.js';
+import { MAX_ACTIVE, MAX_INDEX_ENTRIES, MAX_MEMORY_ENTRY, DECAY_DAYS, GC_DAYS } from '../tools/constants.js';
 // ── 路径 ──────────────────────────────────────────────────────────────────
 function globalPath() {
     return path.join(os.homedir(), '.mocode', 'memory.jsonl');
@@ -163,12 +163,11 @@ function scoreEntry(e, terms) {
 export function searchEntries(query, opts = {}) {
     const all = loadAll();
     const status = opts.status ?? 'active';
-    const pool = all.filter((e) => (status === 'any' ? true : e.status === status))
+    const pool = all
+        .filter((e) => (status === 'any' ? true : e.status === status))
         .filter((e) => (opts.type ? e.type === opts.type : true));
     const terms = query.toLowerCase().split(/\s+/).filter(Boolean);
-    const scored = pool
-        .map((e) => ({ e, s: scoreEntry(e, terms) }))
-        .filter((x) => x.s > 0);
+    const scored = pool.map((e) => ({ e, s: scoreEntry(e, terms) })).filter((x) => x.s > 0);
     scored.sort((a, b) => b.s - a.s);
     const limit = Math.max(1, Math.min(opts.limit ?? 5, 20));
     const top = scored.slice(0, limit);
@@ -324,10 +323,9 @@ export function gcMemories() {
  * 封顶 MAX_INDEX_ENTRIES;尾部标 hidden 数量,引导用 memory_list/memory_search 兜底。
  * 真正「陈旧」被滤掉时也明示(让 LLM 知道有内容存在但被策略隐藏,而不是误以为空)。
  *
- * memoryEnabled=false 时(记忆子系统总开关关闭)直接返空串:Memory Index 段
- * 不进系统提示,LLM 看不到工具使用提示;配合 tools/builtins 屏蔽 memory_* 工具,
- * 实现「关闭时零侵入」(默认行为)。传参由 repl 的 buildSystemMessage 在拼装前调
- * isMemoryEnabled() 注入(本文件是叶子,避免直接引 config 起环)。
+ * memoryEnabled=false 时直接返空串，使 Memory Index 零注入；memory 工具仍在 registry 中，
+ * 但官方主 Agent 是否看见它们由独立的 per-turn ToolPolicy route gate 决定。传参由 repl
+ * 在拼装 system message 前调用 isMemoryEnabled() 得到(本文件保持叶子依赖)。
  */
 export function buildMemoryIndexSection(memoryEnabled = true) {
     if (!memoryEnabled)
@@ -372,9 +370,9 @@ export function buildMemoryIndexSection(memoryEnabled = true) {
         '',
         '',
         '## Memory Index (retrieve full body via memory_search)',
-        'The following are saved memory entries (title/summary only). Retrieve full body via memory_search (pass id or keyword); use memory_list to see all,'
-            + ' memory_update to modify, memory_forget to archive. This list is a startup snapshot; entries added during the session are not listed here — use memory_list/memory_search to find them.'
-            + ' Index policy: pinned + recently-recalled always shown; long-untouched active entries are hidden to keep this section lean.',
+        'The following are saved memory entries (title/summary only). Retrieve full body via memory_search (pass id or keyword); use memory_list to see all,' +
+            ' memory_update to modify, memory_forget to archive. This list is a startup snapshot; entries added during the session are not listed here — use memory_list/memory_search to find them.' +
+            ' Index policy: pinned + recently-recalled always shown; long-untouched active entries are hidden to keep this section lean.',
         ...lines,
         tail,
     ].join('\n');

package/dist/permissions/index.js

@@ -27,12 +27,36 @@ function canonicalProjectRoot(root) {
     const resolved = path.resolve(root);
     return process.platform === 'win32' ? resolved.toLowerCase() : resolved;
 }
+/**
+ * computer 工具的 type/key 文本内容审查(docs/computer-use-design.md §1.3):
+ * 命中 URL / 密码形态 / 支付关键词时,无论是否已授权都强制 once 级确认——
+ * 这类文本是「把内容敲进任意应用」的载体,不能因 session/项目授权而放行后续所有输入。
+ * 纯函数,独立可单测。
+ */
+export function computerTextNeedsReview(text) {
+    const s = text.toLowerCase();
+    if (/https?:\/\/|www\.[a-z0-9-]+\.[a-z]{2,}/i.test(s))
+        return true;
+    if (/\b(pass(word)?|passwd|pwd|secret|token|api[_-]?key|credential)\b\s*[:=]/i.test(s))
+        return true;
+    if (/\b(card\s*number|cvv|cvc|expiry)\b/i.test(s))
+        return true;
+    // CJK 关键词没有 \b 词边界概念(\b 只在 \w 与非 \w 之间成立,中文不是 \w),用普通子串匹配。
+    if (/信用卡|卡号|密码|支付|付款|验证码/.test(s))
+        return true;
+    return false;
+}
 /** A grant is bound to the actual command or logical resources, never merely a tool name. */
 export function permissionFingerprint(tool, args) {
     let subject;
     if (tool.name === 'run_command' && typeof args.command === 'string') {
         subject = { command: args.command.trim() };
     }
+    else if (tool.name === 'computer') {
+        // computer:坐标/文本每次不同,进指纹会让每次点击都弹窗(功能上等同不可用)。
+        // 按动作粒度授权:允许一次 left_click = 本会话允许任意坐标的左键(docs/computer-use-design.md §3.6)。
+        subject = { computer: typeof args.action === 'string' ? args.action : 'unknown' };
+    }
     else {
         let resources;
         try {
@@ -43,9 +67,7 @@ export function permissionFingerprint(tool, args) {
         }
         // File mutations may be granted by their concrete resource. Coarse resources such as
         // "workspace" must retain arguments so task/process-like calls cannot become tool-wide.
-        subject = resources?.length && typeof args.path === 'string'
-            ? { resources }
-            : stable(args);
+        subject = resources?.length && typeof args.path === 'string' ? { resources } : stable(args);
     }
     return crypto.createHash('sha256').update(JSON.stringify(subject)).digest('hex');
 }
@@ -53,10 +75,10 @@ function validGrant(value) {
     if (!value || typeof value !== 'object')
         return false;
     const grant = value;
-    return typeof grant.tool === 'string'
-        && typeof grant.fingerprint === 'string'
-        && grant.fingerprint.length > 0
-        && (grant.scope === 'project' || grant.scope === 'session' || grant.scope === 'once');
+    return (typeof grant.tool === 'string' &&
+        typeof grant.fingerprint === 'string' &&
+        grant.fingerprint.length > 0 &&
+        (grant.scope === 'project' || grant.scope === 'session' || grant.scope === 'once'));
 }
 function loadPermanent() {
     if (permanentLoaded)
@@ -69,9 +91,10 @@ function loadPermanent() {
             : [];
         // Only the explicit v3 field enables broad grants. The retired legacy allowForever
         // field remains ignored so upgrades cannot silently restore old authorization.
-        permanentToolAllows = parsed.version === PERMISSIONS_VERSION && Array.isArray(parsed.alwaysAllowTools)
-            ? new Set(parsed.alwaysAllowTools.filter((tool) => typeof tool === 'string' && tool.length > 0))
-            : new Set();
+        permanentToolAllows =
+            parsed.version === PERMISSIONS_VERSION && Array.isArray(parsed.alwaysAllowTools)
+                ? new Set(parsed.alwaysAllowTools.filter((tool) => typeof tool === 'string' && tool.length > 0))
+                : new Set();
     }
     catch {
         permanentGrants = [];
@@ -102,6 +125,17 @@ function summarizeArgs(args) {
         lines.push(t('permission.path', { value: args.path }));
     if (typeof args.command === 'string')
         lines.push(t('permission.command', { value: args.command }));
+    if (typeof args.action === 'string') {
+        // computer 工具:动作名 + 坐标/文本预览(文本截断防长串刷屏)。
+        const parts = [args.action];
+        if (Array.isArray(args.coordinate))
+            parts.push(`@(${args.coordinate.join(', ')})`);
+        if (typeof args.text === 'string' && args.text) {
+            const preview = args.text.slice(0, 80);
+            parts.push(`"${preview}${args.text.length > 80 ? '…' : ''}"`);
+        }
+        lines.push(t('permission.computerAction', { value: parts.join(' ') }));
+    }
     if (typeof args.prompt === 'string') {
         const preview = args.prompt.slice(0, 100);
         lines.push(t('permission.task', { value: `${preview}${args.prompt.length > 100 ? '…' : ''}` }));
@@ -109,9 +143,9 @@ function summarizeArgs(args) {
     return lines.length ? lines.join('\n') : t('permission.noArgs');
 }
 function matches(grant, tool, fingerprint, projectRoot) {
-    return grant.tool === tool
-        && grant.fingerprint === fingerprint
-        && (grant.scope !== 'project' || grant.projectRoot === projectRoot);
+    return (grant.tool === tool &&
+        grant.fingerprint === fingerprint &&
+        (grant.scope !== 'project' || grant.projectRoot === projectRoot));
 }
 export async function checkPermission(tool, args, signal, options = {}) {
     if (!config.permissionEnabled || getToolRisk(tool) === 'safe')
@@ -121,12 +155,21 @@ export async function checkPermission(tool, args, signal, options = {}) {
     loadPermanent();
     if (permanentToolAllows.has(tool.name))
         return 'allow';
+    // computer 的 type/key 命中敏感内容(URL/密码/支付)时强制 once 级确认:
+    // 不看任何授权缓存,也不提供 session/项目/永久授权选项——这类文本是「敲进任意应用」的载体,
+    // 一旦放行不该沿用到下一次输入(docs/computer-use-design.md §1.3/§3.6)。
+    const forceOnce = tool.name === 'computer' &&
+        (args.action === 'type' || args.action === 'key') &&
+        typeof args.text === 'string' &&
+        computerTextNeedsReview(args.text);
     const fingerprint = permissionFingerprint(tool, args);
     const projectRoot = canonicalProjectRoot(options.projectRoot ?? getSandboxRoot() ?? process.cwd());
-    if (sessionGrants.some((grant) => matches(grant, tool.name, fingerprint, projectRoot)))
-        return 'allow';
-    if (permanentGrants.some((grant) => matches(grant, tool.name, fingerprint, projectRoot)))
-        return 'allow';
+    if (!forceOnce) {
+        if (sessionGrants.some((grant) => matches(grant, tool.name, fingerprint, projectRoot)))
+            return 'allow';
+        if (permanentGrants.some((grant) => matches(grant, tool.name, fingerprint, projectRoot)))
+            return 'allow';
+    }
     // CI/pipes must fail closed. Operators can deliberately restore unattended behavior.
     if (!process.stdin.isTTY && !config.permissionNonInteractiveAllow && !options.prompt)
         return 'deny';
@@ -138,10 +181,14 @@ export async function checkPermission(tool, args, signal, options = {}) {
     const alwaysOption = t('permission.allowForever');
     const denyOption = t('permission.deny');
     const dangerous = getToolRisk(tool) === 'dangerous';
-    const choices = [onceOption, sessionOption, projectOption, alwaysOption, denyOption];
+    const choices = forceOnce
+        ? [onceOption, denyOption]
+        : [onceOption, sessionOption, projectOption, alwaysOption, denyOption];
     // 新手首次审批引导:第一次弹出确认面板时附一段说明(每个用户只出现一次,
     // ~/.mocode/config 的 onboarding_approval_hint 标记;读写失败静默,不阻断审批)。
     let detail = summarizeArgs(args) + (dangerous ? `\n\n${t('permission.dangerWarning')}` : '');
+    if (forceOnce)
+        detail += `\n\n${t('permission.computerSensitiveReview')}`;
     const ONBOARDING_KEY = 'onboarding_approval_hint';
     try {
         if (!readConfigFile()[ONBOARDING_KEY]) {
@@ -205,10 +252,7 @@ export function listPermanentToolAllows() {
 /** Compatibility API: returns tools having any persistent resource or tool-wide grant. */
 export function listPermanentAllow() {
     loadPermanent();
-    return [...new Set([
-            ...permanentGrants.map((grant) => grant.tool),
-            ...permanentToolAllows,
-        ])].sort();
+    return [...new Set([...permanentGrants.map((grant) => grant.tool), ...permanentToolAllows])].sort();
 }
 export function clearSessionPermissionGrants() {
     sessionGrants.length = 0;

package/dist/pet/bridge.js

@@ -27,7 +27,7 @@ let lastSentState = null;
 let heartbeatTimer = null;
 let heartbeatTimeoutTimer = null;
 /** list_skins 请求的等待队列(先进先出;桌宠单连接场景下不会有并发歧义)。 */
-let pendingSkinListResolvers = [];
+const pendingSkinListResolvers = [];
 function clearHeartbeat() {
     if (heartbeatTimer)
         clearInterval(heartbeatTimer);
@@ -117,7 +117,7 @@ export function spawnPetProcess() {
             const require = createRequire(import.meta.url);
             binPath = require.resolve('mocode-pet-app/bin/pet-app.js');
         }
-        catch (e) {
+        catch {
             reject(new Error('mocode-pet-app 未安装,请运行 npm install mocode-pet-app'));
             return;
         }

package/dist/repl/commands/appearance.js

@@ -0,0 +1,72 @@
+/**
+ * 外观命令组:/theme [name|list]
+ *
+ * 无参开菜单(↑↓ 选,Enter 切换,Esc 取消);/theme <name> 直切;/theme list 或未知名 → 列出。
+ *
+ * 切换路径:setTheme → 重算状态行(新色)→ 清内容重绘(历史 / 横幅,镜像启动 + /resume)→
+ * 确认 → 持久化。markdown MEMO 按 themeVersion 自动失效,故 renderHistory 取新色;
+ * 状态栏 / 输入框由 next 回 INPUT 态时读 getter 刷。
+ */
+import * as layout from '../../ui/layout.js';
+import { ui, setTheme, getTheme, listThemes, themeExists } from '../../ui/theme.js';
+import { bannerLines } from '../../ui/render.js';
+import { t } from '../../i18n/index.js';
+import { config } from '../../config/index.js';
+import { updateConfigKey } from '../../config/file.js';
+import { promptThemePicker } from '../../ui/prompt.js';
+import { themeDescription } from '../commands.js';
+import { renderHistory } from '../message-format.js';
+import { unhandled, next } from './types.js';
+export const appearanceCommands = [
+    async (ctx) => {
+        const { line } = ctx;
+        if (line !== '/theme' && !line.startsWith('/theme '))
+            return unhandled();
+        const arg = line.startsWith('/theme ') ? line.slice('/theme '.length).trim() : '';
+        let name;
+        if (arg === '') {
+            // 无参:菜单选(仿 /resume /rollback 的 picker)
+            const items = listThemes().map((th) => ({
+                id: th,
+                title: th,
+                subtitle: themeDescription(th),
+            }));
+            let pick;
+            try {
+                pick = await promptThemePicker(items);
+            }
+            catch {
+                return next(); // Ctrl+C(SIGINT)→ 取消
+            }
+            name = pick?.id ?? null;
+        }
+        else if (arg === 'list' || !themeExists(arg)) {
+            layout.contentWrite(`${ui.dim}${t('repl.themeList')}${ui.reset}\n`);
+            for (const theme of listThemes()) {
+                layout.contentWrite(`  ${ui.accent}${theme}${ui.reset}  ${ui.dim}${themeDescription(theme)}${ui.reset}\n`);
+            }
+            layout.contentWrite(`${ui.dim}${t('repl.themeCurrent', { theme: getTheme() })}${ui.reset}\n`);
+            return next();
+        }
+        else {
+            name = arg;
+        }
+        if (name === null)
+            return next(); // Esc / Ctrl+D 取消
+        setTheme(name);
+        ctx.refreshStatusBase(ctx.history);
+        layout.clearContent();
+        if (ctx.history.some((m) => m.role === 'user')) {
+            renderHistory(ctx.history);
+        }
+        else {
+            layout.writeBanner(bannerLines(ctx.banner()));
+        }
+        layout.contentWrite(`${ui.dim}${t('repl.themeChanged', { theme: name })}${ui.reset}\n`);
+        updateConfigKey('MOCODE_THEME', name);
+        if (config.themeFromShell) {
+            layout.contentWrite(`${ui.dim}(shell 环境变量 MOCODE_THEME 已设,文件写入下次启动被其覆盖;取消该 shell 设置后生效)${ui.reset}\n`);
+        }
+        return next();
+    },
+];

package/dist/repl/commands/compact.js

@@ -0,0 +1,114 @@
+/**
+ * 压缩命令组:/compact [focus] · /compact --no-force [focus]
+ *
+ * 摘要是几十秒的 LLM 调用:包一层 startRunningListener 让 Ctrl+C 能掐断
+ * (信号透传 manualCompact → maybeCompact → compactHistory → chat)。
+ * 中断时 history 未被改动(重建发生在摘要成功之后),直接提示回输入态。
+ *
+ * 会话状态(plan + 笔记段)不在此处回写 history[0]:agent/core 每步都在
+ * requestHistory 末尾注入最新副本(buildSessionStateReminder),压缩后下一步
+ * 自然恢复,且系统提示保持逐字节稳定以命中 prompt 缓存。
+ */
+import * as layout from '../../ui/layout.js';
+import { ui } from '../../ui/theme.js';
+import { t } from '../../i18n/index.js';
+import { manualCompact, appendCurrentSessionRuntimeEvent, hashTraceValue } from '../../session/index.js';
+import { startRunningListener, stopRunningListener } from '../running-input.js';
+import { unhandled, next } from './types.js';
+export const compactCommands = [
+    async (ctx) => {
+        const { line } = ctx;
+        if (line !== '/compact' && !line.startsWith('/compact '))
+            return unhandled();
+        // /compact 默认强制压缩(force=true),不受阈值/保护区限制
+        const rest = line.slice('/compact'.length).trim();
+        let force = true; // 默认强制
+        let focus;
+        if (rest === '--no-force')
+            force = false;
+        else if (rest.startsWith('--no-force ')) {
+            force = false;
+            focus = rest.slice('--no-force '.length).trim() || undefined;
+        }
+        else if (rest)
+            focus = rest;
+        // 走调度器路径:与自动每步压缩完全一致——五区按 ROI 压(cold tools 优先 → history 摘要最后)。
+        // focus 透传到 compact_history action 的 LLM 摘要 prompt。
+        // 返回 SchedulerRunLog 给 UI 显示决策;退化路径(开关关时)在 manualCompact 内部走 compactHistory。
+        const log = await (async () => {
+            const signal = startRunningListener(t('running.compacting'));
+            try {
+                return await manualCompact(ctx.history, focus, { force, signal });
+            }
+            finally {
+                stopRunningListener();
+            }
+        })().catch((e) => {
+            // 中断:history 未被改动(重建在摘要成功之后),直接提示并回到输入态。
+            if (e instanceof Error && (e.name === 'AbortError' || e.name === 'APIUserAbortError')) {
+                layout.contentWrite(`${ui.dim}(已取消压缩)${ui.reset}\n`);
+                return null;
+            }
+            throw e;
+        });
+        if (!log)
+            return next();
+        const d = log.compactDetail;
+        appendCurrentSessionRuntimeEvent('compact', {
+            source: 'manual',
+            force,
+            called: log.compactHistoryCalled,
+            reason: d?.reason ?? 'unknown',
+            estimateBefore: d?.estimateBefore,
+            estimateAfter: d?.estimateAfter,
+            focusHash: focus ? hashTraceValue(focus) : undefined,
+        });
+        if (!d) {
+            // 兜底(旧调用):只显示 old 文案
+            if (!log.compactHistoryCalled) {
+                layout.contentWrite(`${ui.dim}(无需压缩:没有可压缩的旧消息)${ui.reset}\n`);
+            }
+            else if (focus) {
+                layout.contentWrite(`${ui.dim}(带焦点压缩:${focus})${ui.reset}\n`);
+            }
+            return next();
+        }
+        // 详细文案:按 reason 分类
+        const reason = d.reason;
+        const before = d.estimateBefore;
+        const after = d.estimateAfter;
+        const proto = d.protectedRatio !== undefined ? `保护区占比 ${(d.protectedRatio * 100).toFixed(0)}%` : '';
+        const oldCt = d.oldGroupCount !== undefined ? `旧区组数 ${d.oldGroupCount}` : '';
+        const focusNote = focus ? `焦点:${focus}` : '';
+        const stats = [proto, oldCt].filter(Boolean).join(' · ');
+        if (reason === 'microcompact') {
+            layout.contentWrite(`${ui.cyan}✓ 微压缩:${ui.reset} ${before} → ${after} tokens${stats ? `  (${ui.dim}${stats}${ui.reset})` : ''}\n`);
+        }
+        else if (reason === 'summarize') {
+            layout.contentWrite(`${ui.cyan}✓ LLM 摘要:${ui.reset} ${before} → ${after} tokens${focusNote ? `  (${ui.dim}${focusNote}${ui.reset})` : ''}\n`);
+        }
+        else if (reason === 'noop-empty') {
+            layout.contentWrite(`${ui.dim}(history 太短,只有 system 提示,无可压旧区)${ui.reset}\n`);
+        }
+        else if (reason === 'noop-protected') {
+            layout.contentWrite(`${ui.dim}(无可压旧区:全部在保护区 system + 当前轮)${ui.reset}${stats ? `  ${ui.dim}(${stats})${ui.reset}` : ''}\n`);
+            layout.contentWrite(`${ui.dim}提示:/compact --force 强行把早期对话压成摘要${ui.reset}\n`);
+        }
+        else if (reason === 'noop-ml-only') {
+            layout.contentWrite(`${ui.dim}(LLM 摘要失败,且无超大单条可微压;可能是后端不可用)${ui.reset}\n`);
+            layout.contentWrite(`${ui.dim}回退:只跑了 keep-current 结构,history 未变${ui.reset}\n`);
+        }
+        else if (reason === 'noop-shrunk-too-large') {
+            layout.contentWrite(`${ui.yellow}● 上下文已超阈但无可压缩项(全在保护区),建议 /clear 或缩短输入。${ui.reset}\n`);
+            if (stats)
+                layout.contentWrite(`${ui.dim}(${stats})${ui.reset}\n`);
+        }
+        else if (reason === 'noop-noold-noop') {
+            layout.contentWrite(`${ui.dim}(无需压缩:没有可压缩的旧消息,且不在手动触发)${ui.reset}\n`);
+        }
+        else {
+            layout.contentWrite(`${ui.dim}(reason=${reason},${before} → ${after} tokens)${ui.reset}\n`);
+        }
+        return next();
+    },
+];