wave-code 0.19.9 → 1.0.0

package/dist/stdio/agentBridge.js

@@ -14,11 +14,12 @@
  * - Implement the canUseTool permission flow over the stdio protocol
  * - Handle config updates by destroying and recreating the Agent
  */
-import { Agent, listSessions, searchFiles, generateRandomName, getDefaultRemoteBranch, getMessageContent, PromptHistoryManager, AuthService, PluginCore, } from "wave-agent-sdk";
+import { Agent, listSessions, searchFiles, generateRandomName, getDefaultRemoteBranch, getMessageContent, PromptHistoryManager, AuthService, PluginCore, validateWorktreeRemovalPath, } from "wave-agent-sdk";
 import { INTERNAL_ERROR as PROTOCOL_INTERNAL_ERROR, METHOD_NOT_FOUND as PROTOCOL_METHOD_NOT_FOUND, } from "./protocol.js";
 import { execFileSync } from "node:child_process";
 import { createWorktree, removeWorktree } from "../utils/worktree.js";
 import { logger } from "../utils/logger.js";
+import { isUserCheckpointMessage } from "../utils/rewindCheckpoints.js";
 export class AgentBridge {
     constructor(options) {
         this.sessions = new Map();
@@ -268,6 +269,28 @@ export class AgentBridge {
         }
     }
     async removeWorktreeSession(params) {
+        // Align with Claude Code v2.1.216+: refuse to remove a worktree whose path
+        // is a symlink or resolves outside the repo root. Already-removed (missing)
+        // paths pass validation so removal stays idempotent.
+        try {
+            validateWorktreeRemovalPath(params.path, params.repoRoot);
+        }
+        catch (e) {
+            throw new RpcError(PROTOCOL_INTERNAL_ERROR, e.message);
+        }
+        // Trigger the WorktreeRemove hook (before git removal, non-blocking) using
+        // the session that runs in this worktree, if it is still registered.
+        for (const entry of this.sessions.values()) {
+            if (entry.agent.workingDirectory === params.path) {
+                try {
+                    await entry.agent.triggerWorktreeRemoveHook(params.path);
+                }
+                catch (e) {
+                    logger.warn("WorktreeRemove hooks execution failed:", e);
+                }
+                break;
+            }
+        }
         // removeWorktree is best-effort/idempotent: already-removed worktrees or
         // branches only log, never throw.
         await removeWorktree({
@@ -381,7 +404,7 @@ export class AgentBridge {
         const entry = this.requireSession(sessionId);
         const { messages } = await entry.agent.getFullMessageThread();
         const checkpoints = messages
-            .filter((m) => m.role === "user" && !m.isMeta && m.id)
+            .filter((m) => isUserCheckpointMessage(m) && m.id)
             .map((m) => ({
             id: m.id,
             content: getMessageContent(m).replace(/\s+/g, " ").trim(),

package/dist/utils/rewindCheckpoints.d.ts

@@ -0,0 +1,8 @@
+import type { Message } from "wave-agent-sdk";
+/**
+ * 判断一条 user 消息能否作为 /rewind 检查点。
+ * 后台任务通知（task_notification）与 hook 注入的消息（source: "hook"）
+ * 都是系统生成、用户不可见的，不能作为回滚点。
+ * CLI 交互式选择器与 stdio listRewindCheckpoints 共用此判定，避免两处漂移。
+ */
+export declare function isUserCheckpointMessage(m: Message): boolean;

package/dist/utils/rewindCheckpoints.js

@@ -0,0 +1,15 @@
+/**
+ * 判断一条 user 消息能否作为 /rewind 检查点。
+ * 后台任务通知（task_notification）与 hook 注入的消息（source: "hook"）
+ * 都是系统生成、用户不可见的，不能作为回滚点。
+ * CLI 交互式选择器与 stdio listRewindCheckpoints 共用此判定，避免两处漂移。
+ */
+export function isUserCheckpointMessage(m) {
+    if (m.role !== "user" || m.isMeta)
+        return false;
+    if (m.blocks.some((b) => b.type === "task_notification"))
+        return false;
+    if (m.blocks.some((b) => b.type === "text" && b.source === "hook"))
+        return false;
+    return true;
+}

package/dist/utils/worktree.d.ts

@@ -7,6 +7,14 @@ export interface WorktreeSession {
     hasNewCommits: boolean;
     isNew: boolean;
 }
+/**
+ * Validate a worktree name before any side effects. Names are slash-separated
+ * slugs: every segment must be non-empty and contain only letters, digits,
+ * dots, underscores, and dashes. The total length is capped at 64 characters
+ * and "." / ".." segments are rejected (path traversal protection).
+ * @throws {Error} When the name is not a valid slug
+ */
+export declare function validateWorktreeSlug(name: string): void;
 /**
  * Create a new git worktree
  * @param name Worktree name

package/dist/utils/worktree.js

@@ -2,11 +2,34 @@ import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as path from "node:path";
 import * as fs from "node:fs";
-import { getDefaultRemoteBranch, getGitMainRepoRoot } from "wave-agent-sdk";
+import { getDefaultRemoteBranch, getGitMainRepoRoot, performPostCreationSetup, } from "wave-agent-sdk";
 // Never use execFileSync here: the shared `wave --stdio` process handles all
 // desktop sessions, so a synchronous git call (especially a multi-second
 // recursive worktree delete or a network fetch) freezes every session.
 const execFileAsync = promisify(execFile);
+// --- Worktree name validation ------------------------------------------------
+const VALID_WORKTREE_SLUG_SEGMENT = /^[a-zA-Z0-9._-]+$/;
+const MAX_WORKTREE_SLUG_LENGTH = 64;
+/**
+ * Validate a worktree name before any side effects. Names are slash-separated
+ * slugs: every segment must be non-empty and contain only letters, digits,
+ * dots, underscores, and dashes. The total length is capped at 64 characters
+ * and "." / ".." segments are rejected (path traversal protection).
+ * @throws {Error} When the name is not a valid slug
+ */
+export function validateWorktreeSlug(name) {
+    if (name.length > MAX_WORKTREE_SLUG_LENGTH) {
+        throw new Error(`Invalid worktree name: "${name}" must be ${MAX_WORKTREE_SLUG_LENGTH} characters or fewer (got ${name.length})`);
+    }
+    for (const segment of name.split("/")) {
+        if (segment === "." || segment === "..") {
+            throw new Error(`Invalid worktree name: "${name}" must not contain "." or ".." path segments`);
+        }
+        if (segment.length === 0 || !VALID_WORKTREE_SLUG_SEGMENT.test(segment)) {
+            throw new Error(`Invalid worktree name: "${name}" each "/"-separated segment must be non-empty and contain only letters, digits, dots, underscores, and dashes`);
+        }
+    }
+}
 /**
  * Create a new git worktree
  * @param name Worktree name
@@ -17,6 +40,14 @@ const execFileAsync = promisify(execFile);
  * @returns Worktree session details
  */
 export async function createWorktree(name, cwd, options) {
+    validateWorktreeSlug(name);
+    const session = await createWorktreeInternal(name, cwd, options);
+    if (session.isNew) {
+        await performPostCreationSetup(session.path, session.repoRoot);
+    }
+    return session;
+}
+async function createWorktreeInternal(name, cwd, options) {
     const repoRoot = getGitMainRepoRoot(cwd);
     const worktreePath = path.join(repoRoot, ".wave", "worktrees", name);
     const branchName = `worktree-${name}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wave-code",
-  "version": "0.19.9",
+  "version": "1.0.0",
   "description": "CLI-based code assistant powered by AI, built with React and Ink",
   "repository": {
     "type": "git",
@@ -41,7 +41,7 @@
     "semver": "^7.7.4",
     "yargs": "^17.7.2",
     "zod": "^3.23.8",
-    "wave-agent-sdk": "0.19.9"
+    "wave-agent-sdk": "1.0.0"
   },
   "devDependencies": {
     "@types/react": "^19.1.8",

package/src/components/ChatInterface.tsx

@@ -100,6 +100,8 @@ export const ChatInterface: React.FC = () => {
           <InputBox
             isLoading={isLoading}
             isCommandRunning={isCommandRunning}
+            isCompacting={isCompacting}
+            isGoalEvaluating={isGoalEvaluating}
             sendMessage={sendMessage}
             abortMessage={abortMessage}
             mcpServers={mcpServers}

package/src/components/HelpView.tsx

@@ -74,11 +74,17 @@ export const HelpView: React.FC<HelpViewProps> = ({
     { key: "Ctrl+B", description: "Background current task" },
     { key: "Ctrl+V", description: "Paste image" },
     { key: "Ctrl+J", description: "Newline" },
+    { key: "Ctrl+A", description: "Cursor to line start" },
+    { key: "Ctrl+E", description: "Cursor to line end" },
+    { key: "Ctrl+U", description: "Delete to line start" },
+    { key: "Ctrl+K", description: "Delete to line end" },
+    { key: "Ctrl+W", description: "Delete word before cursor" },
     { key: "Shift+Tab", description: "Cycle permission mode" },
     {
       key: "Esc",
       description: "Interrupt AI or command / Cancel selector / Close help",
     },
+    { key: "Esc ×2", description: "Clear input (idle)" },
   ];
 
   const footerText = [

package/src/components/InputBox.tsx

@@ -31,6 +31,8 @@ export const INPUT_PLACEHOLDER_TEXT_PREFIX = INPUT_PLACEHOLDER_TEXT.substring(
 export interface InputBoxProps {
   isLoading?: boolean;
   isCommandRunning?: boolean;
+  isCompacting?: boolean;
+  isGoalEvaluating?: boolean;
   workdir?: string;
   sendMessage?: (
     message: string,
@@ -54,6 +56,10 @@ export interface InputBoxProps {
 }
 
 export const InputBox: React.FC<InputBoxProps> = ({
+  isLoading,
+  isCommandRunning,
+  isCompacting,
+  isGoalEvaluating,
   sendMessage = () => {},
   abortMessage = () => {},
   mcpServers = [],
@@ -92,6 +98,15 @@ export const InputBox: React.FC<InputBoxProps> = ({
 
   const hasQueuedMessages = (queuedMessages?.length ?? 0) > 0;
 
+  // Idle means no AI work in flight. Esc double-press clear only applies when
+  // idle; while busy, Esc keeps its abort semantics.
+  const isIdle = !(
+    isLoading ||
+    isCommandRunning ||
+    isCompacting ||
+    isGoalEvaluating
+  );
+
   const onRecallQueuedMessage = useCallback(() => {
     const msg = recallQueuedMessage();
     if (msg) {
@@ -146,6 +161,8 @@ export const InputBox: React.FC<InputBoxProps> = ({
     setPermissionMode,
     // BTW state
     btwState,
+    // Esc double-press clear pending
+    escClearPending,
     // Main handler
     handleInput,
     // Manager ready state
@@ -166,6 +183,7 @@ export const InputBox: React.FC<InputBoxProps> = ({
     workdir: workingDirectory,
     getFullMessageThread,
     hasQueuedMessages,
+    isIdle,
     onRecallQueuedMessage,
   });
 
@@ -342,6 +360,7 @@ export const InputBox: React.FC<InputBoxProps> = ({
           showPluginManager ||
           showWorkflowManager || (
             <Box flexDirection="column">
+              {escClearPending && <Text color="gray">再次按 Esc 清空输入</Text>}
               <Box
                 borderStyle="single"
                 borderColor="gray"

package/src/components/RewindCommand.tsx

@@ -3,6 +3,7 @@ import { Box, Text, useInput } from "ink";
 import type { Message } from "wave-agent-sdk";
 import { getMessageContent } from "wave-agent-sdk";
 import { rewindSelectorReducer } from "../reducers/rewindSelectorReducer.js";
+import { isUserCheckpointMessage } from "../utils/rewindCheckpoints.js";
 
 export interface RewindCommandProps {
   messages: Message[];
@@ -32,10 +33,11 @@ export const RewindCommand: React.FC<RewindCommandProps> = ({
     }
   }, [getFullMessageThread]);
 
-  // Filter user messages as checkpoints, excluding meta messages
+  // Filter user messages as checkpoints, excluding meta messages and
+  // system-generated user-role messages (task notifications, hook injections)
   const checkpoints = messages
     .map((msg, index) => ({ msg, index }))
-    .filter(({ msg }) => msg.role === "user" && !msg.isMeta);
+    .filter(({ msg }) => isUserCheckpointMessage(msg));
 
   const MAX_VISIBLE_ITEMS = 3;
 

package/src/hooks/useInputManager.ts

@@ -4,6 +4,7 @@ import {
   inputReducer,
   initialState,
   InputManagerCallbacks,
+  ESC_DOUBLE_PRESS_TIMEOUT_MS,
 } from "../managers/inputReducer.js";
 import {
   searchFiles as searchFilesUtil,
@@ -48,6 +49,7 @@ export const useInputManager = (
     onClearMessages,
     onCompact,
     onGoalCommand,
+    isIdle: isIdleProp,
   } = callbacks;
 
   // Handle debounced file search
@@ -70,25 +72,15 @@ export const useInputManager = (
     }
   }, [state.showFileSelector, state.fileSearchQuery]);
 
-  // Handle paste debouncing
+  // Auto-expire the double-Esc clear pending flag after the timeout window
+  // (aligned with Claude Code's useDoublePress timeout-based expiry).
   useEffect(() => {
-    if (state.isPasting) {
-      const pasteDebounceDelay = parseInt(
-        process.env.PASTE_DEBOUNCE_MS || "30",
-        10,
-      );
-      const timer = setTimeout(() => {
-        const processedInput = state.pasteBuffer.replace(/\r/g, "\n");
-        dispatch({
-          type: "INSERT_TEXT_WITH_PLACEHOLDER",
-          payload: processedInput,
-        });
-        dispatch({ type: "END_PASTE" });
-        dispatch({ type: "RESET_HISTORY_NAVIGATION" });
-      }, pasteDebounceDelay);
-      return () => clearTimeout(timer);
-    }
-  }, [state.isPasting, state.pasteBuffer]);
+    if (!state.escClearPending) return;
+    const timer = setTimeout(() => {
+      dispatch({ type: "RESET_ESC_CLEAR_PENDING" });
+    }, ESC_DOUBLE_PRESS_TIMEOUT_MS);
+    return () => clearTimeout(timer);
+  }, [state.escClearPending]);
 
   // Sync state changes with callbacks
   useEffect(() => {
@@ -127,6 +119,16 @@ export const useInputManager = (
           case "ABORT_MESSAGE":
             onAbortMessage?.();
             break;
+          case "SAVE_PROMPT_HISTORY":
+            PromptHistoryManager.addEntry(
+              effect.content,
+              sessionId,
+              effect.longTextMap,
+              workdir,
+            ).catch((err: unknown) => {
+              logger?.error("Failed to save prompt history", err);
+            });
+            break;
           case "BACKGROUND_CURRENT_TASK":
             onBackgroundCurrentTask?.();
             break;
@@ -501,10 +503,11 @@ export const useInputManager = (
           key: {} as Key,
           hasSlashCommand: (cmd) => !!onHasSlashCommand?.(cmd),
           hasQueuedMessages: hasQueuedMessagesProp ?? false,
+          isIdle: isIdleProp ?? false,
         },
       });
     },
-    [onHasSlashCommand, hasQueuedMessagesProp],
+    [onHasSlashCommand, hasQueuedMessagesProp, isIdleProp],
   );
 
   const handleSubmit = useCallback(async () => {
@@ -515,9 +518,10 @@ export const useInputManager = (
         key: { return: true } as Key,
         hasSlashCommand: (cmd) => !!onHasSlashCommand?.(cmd),
         hasQueuedMessages: hasQueuedMessagesProp ?? false,
+        isIdle: isIdleProp ?? false,
       },
     });
-  }, [onHasSlashCommand, hasQueuedMessagesProp]);
+  }, [onHasSlashCommand, hasQueuedMessagesProp, isIdleProp]);
 
   const expandLongTextPlaceholders = useCallback(
     (text: string) => {
@@ -539,11 +543,12 @@ export const useInputManager = (
           key,
           hasSlashCommand: (cmd) => !!onHasSlashCommand?.(cmd),
           hasQueuedMessages: hasQueuedMessagesProp ?? false,
+          isIdle: isIdleProp ?? false,
         },
       });
       return true;
     },
-    [onHasSlashCommand, hasQueuedMessagesProp],
+    [onHasSlashCommand, hasQueuedMessagesProp, isIdleProp],
   );
 
   return {
@@ -572,6 +577,7 @@ export const useInputManager = (
     permissionMode: state.permissionMode,
     attachedImages: state.attachedImages,
     btwState: state.btwState,
+    escClearPending: state.escClearPending,
     isManagerReady: true,
 
     // Methods

package/src/managers/inputHandlers.ts

@@ -292,17 +292,13 @@ export const handlePasteInput = (
   input: string,
 ): void => {
   const inputString = input;
-  const isPasteOperation =
-    inputString.length > 1 ||
-    inputString.includes("\n") ||
-    inputString.includes("\r");
-
-  if (isPasteOperation) {
-    // Dispatch a single action type; the reducer determines start vs append
-    // by checking pasteBuffer, avoiding stale state issues
+
+  if (inputString.length > 1) {
+    // Multi-char chunk: insert immediately (\r → \n normalizes CRLF
+    // terminals), matching the reducer's HANDLE_KEY path.
     dispatch({
-      type: "APPEND_PASTE_CHUNK",
-      payload: { chunk: inputString, cursorPosition: state.cursorPosition },
+      type: "INSERT_TEXT_WITH_PLACEHOLDER",
+      payload: inputString.replace(/\r/g, "\n"),
     });
   } else {
     let char = inputString;