wezard 0.3.3

package/cli/weclaude.sh

@@ -0,0 +1,236 @@
+#!/usr/bin/env bash
+# weclaude CLI — talks to local weclaude daemon over HTTP and toggles launchd/systemd.
+set -uo pipefail
+
+DAEMON_BASE="${WECLAUDE_DAEMON_BASE:-http://127.0.0.1:17890}"
+LABEL="com.weclaude.daemon"
+HOME_DIR="$HOME"
+OS="$(uname -s)"
+
+# Resolve symlinks so REPO_ROOT points at the real package dir even when this
+# script is invoked via the npm-installed bin symlink (e.g. ~/.npm-global/bin/weclaude).
+# macOS ships BSD readlink without -f, so chase the chain by hand.
+self="${BASH_SOURCE[0]}"
+while [[ -L "$self" ]]; do
+  d="$(cd -P "$(dirname "$self")" && pwd)"
+  t="$(readlink "$self")"
+  [[ "$t" != /* ]] && t="$d/$t"
+  self="$t"
+done
+REPO_ROOT="$(cd -P "$(dirname "$self")/.." && pwd)"
+
+cmd="${1:-status}"
+shift || true
+
+usage() {
+  cat <<'EOF'
+weclaude <subcommand>
+  init                 interactive onboarding (write config, install daemon, claim default chat, run demo)
+  status               daemon health + connection state
+  start                load resident daemon (launchd/systemd)
+  stop                 unload resident daemon
+  restart              stop + start
+  reload               quick: shutdown via HTTP + kickstart
+  mirror [chat]        attach current Claude session for mirror push (target overrides config)
+  mirror-status        show current mirror attachment
+  send <chat> <text>   proactive markdown message
+  pending              list outstanding approval req_ids
+  svr [args...]        run standalone detail relay (deploy on a host chat + cli both reach)
+  logs [-f]            tail daemon log
+  config-path            show resolved config path
+  sync                   write hooks/MCP/env into sync.targets settings.json
+  unsync                 remove our entries from sync.targets settings.json
+  audit [tag]            token/cost breakdown for current Claude session (main + subagents)
+  uninstall              full teardown: stop daemon + unsync + plugin uninstall + remove daemon (run before `npm uninstall -g`)
+                         add `--purge` to also delete ~/.weclaude state
+  version                print weclaude version
+  help
+EOF
+}
+
+http_get() { curl -sS --max-time 5 "$DAEMON_BASE$1"; }
+http_post() { curl -sS --max-time 5 -X POST -H 'content-type: application/json' -d "${2:-{\}}" "$DAEMON_BASE$1"; }
+
+svc_load() {
+  case "$OS" in
+    Darwin) launchctl load -w "$HOME_DIR/Library/LaunchAgents/${LABEL}.plist" ;;
+    Linux)  systemctl --user start weclaude.service ;;
+  esac
+}
+svc_unload() {
+  case "$OS" in
+    Darwin) launchctl unload "$HOME_DIR/Library/LaunchAgents/${LABEL}.plist" ;;
+    Linux)  systemctl --user stop weclaude.service ;;
+  esac
+}
+
+case "$cmd" in
+  init)
+    NODE_BIN="$(command -v node)"
+    SCRIPT="$REPO_ROOT/dist/cli/init.js"
+    if [[ ! -f "$SCRIPT" ]]; then
+      # Dev repo: tsconfig.json present → build. npm install: tarball ships dist/,
+      # so a missing init.js means a broken install — fail clearly instead of
+      # invoking tsc against a non-existent tsconfig.
+      if [[ -f "$REPO_ROOT/tsconfig.json" ]]; then
+        echo "[weclaude init] building..."
+        (cd "$REPO_ROOT" && npm install --silent && npx tsc -p tsconfig.json) || { echo "build failed"; exit 1; }
+      else
+        echo "[weclaude init] missing $SCRIPT — try 'npm install -g weclaude' to reinstall" >&2
+        exit 1
+      fi
+    fi
+    exec "$NODE_BIN" "$SCRIPT" "$@"
+    ;;
+  status)
+    if ! out=$(http_get /status 2>/dev/null); then
+      echo "daemon: down ($DAEMON_BASE)"
+      exit 1
+    fi
+    echo "$out" | jq . 2>/dev/null || echo "$out"
+    ;;
+  start)   svc_load   && echo "daemon: started" ;;
+  stop)    svc_unload && echo "daemon: stopped" ;;
+  restart) svc_unload || true; sleep 1; svc_load && echo "daemon: restarted" ;;
+  reload)
+    # KeepAlive.SuccessfulExit=false, so /shutdown alone won't respawn — kick it.
+    http_post /shutdown >/dev/null 2>&1 || true
+    case "$OS" in
+      Darwin) launchctl kickstart -k "gui/$(id -u)/${LABEL}" >/dev/null && echo "daemon: reloaded" ;;
+      Linux)  systemctl --user restart weclaude.service && echo "daemon: reloaded" ;;
+    esac
+    ;;
+  send)
+    chat="${1:-}"; shift || true
+    text="${*:-}"
+    if [[ -z "$chat" || -z "$text" ]]; then
+      echo "usage: weclaude send <chat> <text>"; exit 1
+    fi
+    body=$(jq -nc --arg c "$chat" --arg t "$text" '{chat:$c,text:$t}')
+    http_post /message "$body"
+    ;;
+  pending) http_get /pending | jq . 2>/dev/null || http_get /pending ;;
+  svr)
+    NODE_BIN="$(command -v node)"
+    SCRIPT="$REPO_ROOT/dist/svr/index.js"
+    [[ -f "$SCRIPT" ]] || { echo "build first: npm run build"; exit 1; }
+    exec "$NODE_BIN" "$SCRIPT" "$@"
+    ;;
+  logs)
+    log_path=$(http_get /status 2>/dev/null | jq -r '.logFile // empty' 2>/dev/null || true)
+    log_path="${log_path:-$HOME_DIR/.weclaude/daemon.log}"
+    if [[ "${1:-}" == "-f" ]]; then tail -f "$log_path"; else tail -n 100 "$log_path"; fi
+    ;;
+  config-path) http_get /status | jq -r '.sourcePath // empty' ;;
+  uninstall)
+    # Order matters: stop the daemon FIRST so it can't rewrite settings/lock
+    # files mid-teardown; then strip MCP/env from agent settings; then remove
+    # the plist/unit + Claude plugin registration. State at ~/.weclaude is
+    # preserved unless `--purge` is given.
+    purge=0
+    [[ "${1:-}" == "--purge" ]] && purge=1
+    http_post /shutdown >/dev/null 2>&1 || true
+    NODE_BIN="$(command -v node)"
+    SYNC_SCRIPT="$REPO_ROOT/dist/cli/sync.js"
+    [[ -f "$SYNC_SCRIPT" ]] && "$NODE_BIN" "$SYNC_SCRIPT" --remove || true
+    bash "$REPO_ROOT/scripts/uninstall.sh"
+    rm -f "$HOME_DIR/.weclaude/sync.lock.json"
+    if (( purge )); then
+      rm -rf "$HOME_DIR/.weclaude"
+      echo "[weclaude] state purged (~/.weclaude removed)"
+    else
+      echo "[weclaude] cleaned. state kept at ~/.weclaude — remove with 'weclaude uninstall --purge' or 'rm -rf ~/.weclaude'"
+    fi
+    echo "[weclaude] safe to 'npm uninstall -g weclaude' now"
+    ;;
+  mirror)
+    cwd="${CLAUDE_PROJECT_DIR:-${CODEBUDDY_PROJECT_DIR:-$(pwd)}}"
+    # claude-internal stores under ~/.claude-internal/projects/, official claude
+    # under ~/.claude/projects/, codebuddy under ~/.codebuddy/projects/. Walk up
+    # parent dirs — caller may be in a subdirectory of the cwd the CLI was
+    # launched in (e.g. monorepo subpackage). Encoding differs: claude keeps a
+    # leading `-` ([/.]→-), codebuddy trims it first (no leading `-`).
+    # Prioritize the base matching the active CLI (detected via env vars) so a
+    # codebuddy session doesn't fall through to a stale claude project dir.
+    if [[ -n "${CODEBUDDY_SESSION_ID:-}" ]]; then
+      bases=("$HOME/.codebuddy/projects" "$HOME/.claude-internal/projects" "$HOME/.claude/projects")
+    else
+      bases=("$HOME/.claude-internal/projects" "$HOME/.claude/projects" "$HOME/.codebuddy/projects")
+    fi
+    proj=""
+    probe="$cwd"
+    while [[ -z "$proj" && -n "$probe" ]]; do
+      for base in "${bases[@]}"; do
+        if [[ "$base" == *codebuddy* ]]; then
+          enc="$(printf %s "$probe" | sed 's|^[/]*||; s|[/.]|-|g')"
+        else
+          enc="$(printf %s "$probe" | sed 's|[/.]|-|g')"
+        fi
+        if [[ -d "$base/$enc" ]]; then proj="$base/$enc"; break; fi
+      done
+      [[ "$probe" == "/" ]] && break
+      probe="$(dirname "$probe")"
+    done
+    if [[ -z "$proj" ]]; then
+      echo "no claude/codebuddy project dir for cwd: $cwd (or any ancestor)"
+      echo "tried encodings up to $HOME/.claude{,-internal}/projects/ + $HOME/.codebuddy/projects/<encoded-ancestor>"
+      exit 1
+    fi
+    # Resolve the *calling* session via env var the CLI injects into every
+    # child process. Both Claude Code and CodeBuddy export CLAUDE_SESSION_ID
+    # (back-compat); CODEBUDDY_SESSION_ID is the codebuddy-native name.
+    sid="${CLAUDE_CODE_SESSION_ID:-${CLAUDE_SESSION_ID:-${CODEBUDDY_SESSION_ID:-}}}"
+    latest=""
+    if [[ -n "$sid" && -f "$proj/$sid.jsonl" ]]; then
+      latest="$proj/$sid.jsonl"
+    fi
+    # Fallback for setups that don't propagate the env var: most-recent mtime.
+    [[ -z "$latest" ]] && latest=$(ls -t "$proj"/*.jsonl 2>/dev/null | head -1)
+    if [[ -z "$latest" ]]; then
+      echo "no .jsonl under $proj"; exit 1
+    fi
+    sid="$(basename "$latest" .jsonl)"
+    # Accept user-friendly prefixes: vid:<id> → user:<id>, chatid:<id> → chat:<id>.
+    # Pass anything else through (already in user:/chat:/group: form, or empty).
+    raw="${1:-}"
+    case "$raw" in
+      vid:*)    target="user:${raw#vid:}" ;;
+      chatid:*) target="chat:${raw#chatid:}" ;;
+      *)        target="$raw" ;;
+    esac
+    body=$(jq -nc --arg s "$sid" --arg p "$latest" --arg t "$target" --arg tp "${TMUX_PANE:-}" \
+      '{sessionId:$s, jsonlPath:$p}
+        + (if $t == "" then {} else {target:$t} end)
+        + (if $tp == "" then {} else {tmuxPane:$tp} end)')
+    http_post /mirror/attach "$body" | jq . 2>/dev/null || true
+    ;;
+  mirror-status)
+    http_get /mirror/status | jq . 2>/dev/null || http_get /mirror/status
+    ;;
+  sync)
+    NODE_BIN="$(command -v node)"
+    SCRIPT="$REPO_ROOT/dist/cli/sync.js"
+    [[ -f "$SCRIPT" ]] || { echo "build first: npm run build"; exit 1; }
+    exec "$NODE_BIN" "$SCRIPT" "$@"
+    ;;
+  unsync)
+    NODE_BIN="$(command -v node)"
+    SCRIPT="$REPO_ROOT/dist/cli/sync.js"
+    [[ -f "$SCRIPT" ]] || { echo "build first: npm run build"; exit 1; }
+    exec "$NODE_BIN" "$SCRIPT" --remove "$@"
+    ;;
+  audit)
+    NODE_BIN="$(command -v node)"
+    SCRIPT="$REPO_ROOT/dist/cli/audit.js"
+    [[ -f "$SCRIPT" ]] || { echo "build first: npm run build"; exit 1; }
+    exec "$NODE_BIN" "$SCRIPT" "$@"
+    ;;
+  help|-h|--help) usage ;;
+  version|-v|--version)
+    # Read version straight from the package manifest — no jq dep, regex is enough.
+    pkg="$REPO_ROOT/package.json"
+    [[ -f "$pkg" ]] || { echo "package.json not found at $pkg" >&2; exit 1; }
+    sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$pkg" | head -1
+    ;;
+  *) echo "unknown subcommand: $cmd"; usage; exit 2 ;;
+esac

package/commands/audit.md

@@ -0,0 +1,7 @@
+---
+description: 统计当前会话（含子会话）的 token 用量与成本，不跨 /clear
+allowed-tools: Bash(${CLAUDE_PLUGIN_ROOT}/cli/weclaude.sh:*)
+argument-hint: [tag]
+---
+
+!`${CLAUDE_PLUGIN_ROOT}/cli/weclaude.sh audit $ARGUMENTS`

package/commands/wrc.md

@@ -0,0 +1,7 @@
+---
+description: WeCom remote control — mirror current Claude session to WeCom
+allowed-tools: Bash(${CLAUDE_PLUGIN_ROOT}/cli/weclaude.sh:*)
+argument-hint: [user:<userid>|chat:<chatid>]
+---
+
+!`${CLAUDE_PLUGIN_ROOT}/cli/weclaude.sh mirror $ARGUMENTS`

package/config.example.jsonc

@@ -0,0 +1,102 @@
+// Declarative config for weclaude. Copy to ~/.weclaude/config.jsonc and edit.
+// All paths support `~`. Secrets (botId/secret) can also live in ~/.weclaude/secrets.json
+// (same shape, deep-merged on top — keep secrets out of dotfile repos).
+{
+  "$schema": "./schema.json",
+
+  // ── WeCom bot credentials ─────────────────────────────────────────
+  "bot": {
+    "botId": "",                 // 智能机器人 ID
+    "secret": "",                // 智能机器人 secret
+    "websocketUrl": "wss://openws.work.weixin.qq.com"
+  },
+
+  // ── Default chat target for proactive outbound ────────────────────
+  // Format: "user:<userid>" | "chat:<chatid>" | "group:<groupid>"
+  "defaultChat": "",
+
+  // ── Daemon (resident process) ─────────────────────────────────────
+  "daemon": {
+    "host": "127.0.0.1",
+    "port": 17890,
+    "stateDir": "~/.weclaude/state",
+    "logFile": "~/.weclaude/daemon.log",
+    "logLevel": "info"           // trace|debug|info|warn|error
+  },
+
+  // ── /wrc remote-control behavior ──────────────────────────────────
+  "wrc": {
+    // Allow which WeCom users / chats to drive CC. Empty = deny all.
+    "allowFrom": [],             // ["user:zhangsan", "chat:wcXXXX"]
+    // headless: spawn `claude -p` per msg with per-principal session map.
+    // mirror : attach to an existing interactive `claude` session by injecting
+    //          via `claude --resume <sid> -p` AND tailing the same session
+    //          jsonl, pushing live assistant output to WeCom.
+    "mode": "headless",
+    "claudeBin": "claude",
+    // CLI backend selection. Three built-ins: "claude" / "claude-internal" /
+    // "codebuddy". Empty/omitted → inferred from claudeBin basename (back-compat).
+    "defaultCli": "claude",
+    // Per-backend binary overrides (when the executable isn't on $PATH under
+    // its canonical name). Missing entry → built-in default.
+    // "cliBackends": {
+    //   "codebuddy": { "bin": "/usr/local/bin/codebuddy" }
+    // },
+    "cwd": "~",                  // workdir (mirror: must match the running claude's cwd)
+    "sessionMapFile": "~/.weclaude/sessions.json",
+    "extraArgs": [],             // appended to `claude -p`
+    "mirror": {
+      // Pin a session id; empty → auto-pick latest .jsonl mtime under
+      // ~/.claude/projects/<encoded(cwd)>/.
+      "sessionId": "",
+      // Where to push live assistant output. Empty → defaultChat.
+      "pushChat": "",            // "user:<userid>" | "chat:<chatid>"
+      "chunkChars": 1800,
+      // Brief 模式: 每个 turn 群里只发两条 —— 「🧵 [本轮详情](url)」+ finish 文本。
+      // 中间 tool_use / tool_result / thinking 只写进详情页 (可折叠, Claude 网页风格)。
+      // 授权卡照常发群。
+      "brief": false
+    }
+  },
+
+  // ── PreToolUse approval (all tools → button card; align with auth-helper) ─
+  "approval": {
+    "enabled": true,
+    "matcher": ".*",             // 全量拦截；Bash 只读命令(grep/ls/cat/...)走脚本 fast-path
+    "approvers": [],             // ["user:zhangsan"] empty → defaultChat
+    "hookTimeoutSec": 43210,     // hook curl --max-time (12h + 10s)
+    "longPollSec": 43200,        // daemon long-poll (12h)
+    "sessionCacheMinutes": 30,   // (session_id, tool, cmd_prefix_hash) → decision
+    "windowMinutes": 5,          // 「⏱ N 分钟」按钮：开窗口期间所有请求自动 allow
+    "sensitiveArgRedact": true,  // mask password/token-like values before sending to IM
+    "fallbackOnError": "ask"     // never "deny" — never break workflow
+  },
+
+  // ── claude / codebuddy wrapper sync ───────────────────────────────
+  // `weclaude sync` writes hooks/MCP/permissions into every target settings.json
+  // listed below. Multi-CLI setups (claude + codebuddy 同时装) 列多项即可。
+  // kind: "claude" (含 claude-internal 等 fork) | "codebuddy"
+  //   • claude-internal 通过 settingsPath: "~/.claude-internal/settings.json" 表达
+  "sync": {
+    "targets": [
+      {
+        "kind": "claude",
+        "settingsPath": "~/.claude/settings.json",
+        "scope": "user"          // user | project | local
+      }
+      // 多 CLI 并存示例 (取消注释即可):
+      // ,{ "kind": "codebuddy", "settingsPath": "~/.codebuddy/settings.json", "scope": "user" }
+      // ,{ "kind": "claude", "settingsPath": "~/.claude-internal/settings.json", "scope": "user" }
+    ]
+  },
+
+  // ── Standalone detail relay (weclaude svr) ────────────────────────
+  // `weclaude svr` 读这里作为默认参数, CLI --host/--port 仍可覆盖。省略整段等于
+  // 用硬编码兜底 (0.0.0.0:17891)。改到 80 让详情页 URL 用标准端口 (需 root)。
+  "svr": {
+    "host": "0.0.0.0",
+    "port": 17891,
+    "stateDir": "~/.weclaude/svr",
+    "tokenFile": "~/.weclaude/svr-token"
+  }
+}

package/dist/cli/audit.js

@@ -0,0 +1,156 @@
+// Slash-command entry: `weclaude audit [tag]`.
+//   - With a tag: ask the daemon for the newest-by-mtime mirror whose target
+//     carries `#<tag>` and audit THAT session (regardless of which CLI/pane
+//     the command was fired from). Fails hard when the daemon is down or no
+//     match — falling back to "current session" would silently mis-answer.
+//   - Without a tag: resolve the caller's own session (via
+//     $CLAUDE_CODE_SESSION_ID or newest-mtime jsonl under the project dir),
+//     print locally, and — when the daemon is up and this session is
+//     mirrored — also push the report into WeCom.
+// WeCom-side `/audit` doesn't go through here; daemon/inbound.ts intercepts
+// it and calls computeAuditReport directly (bypasses the flaky tmux paste path).
+import { readdirSync, statSync, existsSync } from "node:fs";
+import { basename, join } from "node:path";
+import { homedir } from "node:os";
+import { computeAuditReport } from "../daemon/audit.js";
+const DAEMON_BASE = process.env.WECLAUDE_DAEMON_BASE || "http://127.0.0.1:17890";
+const PROJECT_BASES = [
+    join(homedir(), ".claude-internal", "projects"),
+    join(homedir(), ".claude", "projects"),
+    join(homedir(), ".codebuddy", "projects"),
+];
+// Encoding differs by backend: Claude Code uses `/`/`.`→`-` (leading `-` kept);
+// CodeBuddy strips the leading separator first (no leading `-`).
+const encodeFor = (base, probe) => {
+    if (base.includes(".codebuddy"))
+        return probe.replace(/^[/]+/, "").replace(/[/.]/g, "-");
+    return probe.replace(/[/.]/g, "-");
+};
+const findProjectDir = (cwd) => {
+    let probe = cwd;
+    while (probe) {
+        for (const base of PROJECT_BASES) {
+            const p = join(base, encodeFor(base, probe));
+            if (existsSync(p))
+                return p;
+        }
+        if (probe === "/")
+            break;
+        const parent = probe.slice(0, probe.lastIndexOf("/")) || "/";
+        if (parent === probe)
+            break;
+        probe = parent;
+    }
+    return null;
+};
+const resolveSessionId = (proj) => {
+    const envSid = process.env.CLAUDE_CODE_SESSION_ID || process.env.CLAUDE_SESSION_ID;
+    if (envSid && existsSync(join(proj, `${envSid}.jsonl`)))
+        return envSid;
+    let latest = null;
+    for (const f of readdirSync(proj)) {
+        if (!f.endsWith(".jsonl"))
+            continue;
+        const fp = join(proj, f);
+        try {
+            const st = statSync(fp);
+            if (!latest || st.mtimeMs > latest.mtime) {
+                latest = { sid: basename(f, ".jsonl"), mtime: st.mtimeMs };
+            }
+        }
+        catch { /* ignore */ }
+    }
+    return latest?.sid ?? null;
+};
+const expandHome = (p) => (p.startsWith("~/") ? join(homedir(), p.slice(2)) : p);
+// Ask daemon for all live mirrors, then filter to targets carrying `#<tag>`
+// and pick the newest by jsonl mtime. Returns null when daemon is unreachable
+// or no mirror matches.
+const findMirrorByTag = async (tag) => {
+    const wanted = tag.replace(/^#/, "");
+    try {
+        const res = await fetch(`${DAEMON_BASE}/mirror/status`, { signal: AbortSignal.timeout(2000) });
+        if (!res.ok)
+            return null;
+        const status = (await res.json());
+        const matches = (status.mirrors ?? []).filter((m) => (m.target.split("#")[1] ?? "") === wanted);
+        if (matches.length === 0)
+            return null;
+        const ranked = matches
+            .map((m) => {
+            let mt = 0;
+            try {
+                mt = statSync(expandHome(m.jsonlPath)).mtimeMs;
+            }
+            catch { /* ignore */ }
+            return { m, mt };
+        })
+            .sort((a, b) => b.mt - a.mt);
+        return ranked[0]?.m ?? null;
+    }
+    catch {
+        return null;
+    }
+};
+// Slash-command output goes into the jsonl as a `tool_result` under a user turn;
+// mirror-bridge only tails `assistant` lines, so WeCom never sees it. Ask the
+// daemon to push directly to whichever chat mirrors this session. Silent-fail
+// when the daemon is down or no mirror is bound — local stdout is enough.
+const pushToWeCom = async (sid, markdown) => {
+    try {
+        const statusRes = await fetch(`${DAEMON_BASE}/mirror/status`, { signal: AbortSignal.timeout(2000) });
+        if (!statusRes.ok)
+            return;
+        const status = (await statusRes.json());
+        const target = (status.mirrors ?? []).find((m) => m.sessionId === sid)?.target;
+        if (!target)
+            return;
+        await fetch(`${DAEMON_BASE}/message`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ chat: target, markdown }),
+            signal: AbortSignal.timeout(5000),
+        });
+    }
+    catch { /* daemon unreachable — local stdout is enough */ }
+};
+const main = async () => {
+    const tag = (process.argv.slice(2).join(" ") || "").trim().replace(/^#/, "");
+    if (tag) {
+        const mirror = await findMirrorByTag(tag);
+        if (!mirror) {
+            console.error(`no mirror found for tag \`${tag}\` (daemon down or session not attached)`);
+            process.exit(1);
+        }
+        const jsonlPath = expandHome(mirror.jsonlPath);
+        if (!existsSync(jsonlPath)) {
+            console.error(`mirror jsonl missing: ${jsonlPath}`);
+            process.exit(1);
+        }
+        const report = computeAuditReport({ sessionId: mirror.sessionId, jsonlPath, tag });
+        console.log(report);
+        await pushToWeCom(mirror.sessionId, report);
+        return;
+    }
+    const cwd = process.env.CLAUDE_PROJECT_DIR || process.cwd();
+    const proj = findProjectDir(cwd);
+    if (!proj) {
+        console.error(`no claude project dir for cwd: ${cwd}`);
+        process.exit(1);
+    }
+    const sid = resolveSessionId(proj);
+    if (!sid) {
+        console.error(`no .jsonl under ${proj}`);
+        process.exit(1);
+    }
+    const jsonlPath = join(proj, `${sid}.jsonl`);
+    if (!existsSync(jsonlPath)) {
+        console.error(`main jsonl missing: ${jsonlPath}`);
+        process.exit(1);
+    }
+    const report = computeAuditReport({ sessionId: sid, jsonlPath });
+    console.log(report);
+    await pushToWeCom(sid, report);
+};
+main();
+//# sourceMappingURL=audit.js.map

package/dist/cli/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../cli/audit.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,2DAA2D;AAC3D,4EAA4E;AAC5E,qEAAqE;AACrE,kDAAkD;AAClD,4EAA4E;AAC5E,iFAAiF;AACjF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,wBAAwB,CAAC;AAEjF,MAAM,aAAa,GAAG;IACpB,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,EAAE,UAAU,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC;CAC1C,CAAC;AAEF,gFAAgF;AAChF,iEAAiE;AACjE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE;IACxD,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,GAAW,EAAiB,EAAE;IACpD,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,OAAO,KAAK,EAAE,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7C,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,KAAK,GAAG;YAAE,MAAM;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;QAC7D,IAAI,MAAM,KAAK,KAAK;YAAE,MAAM;QAC5B,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAiB,EAAE;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACnF,IAAI,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACvE,IAAI,MAAM,GAA0C,IAAI,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAIjG,4EAA4E;AAC5E,8EAA8E;AAC9E,wBAAwB;AACxB,MAAM,eAAe,GAAG,KAAK,EAAE,GAAW,EAA6B,EAAE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,gBAAgB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;QAC/D,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC;QAChG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,EAAE,GAAG,CAAC,CAAC;YACX,IAAI,CAAC;gBAAC,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC9E,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,iFAAiF;AACjF,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAE,QAAgB,EAAiB,EAAE;IACzE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,gBAAgB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO;QAC1B,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAA8B,CAAC;QACrE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC;QAC/E,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,KAAK,CAAC,GAAG,WAAW,UAAU,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAChD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;IACrC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE7E,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,0CAA0C,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC"}