wezard 0.3.3

package/dist/shared/paths.js

@@ -0,0 +1,12 @@
+// Path utilities — kept tiny and pure.
+import { homedir } from "node:os";
+import { resolve } from "node:path";
+/** Expand leading `~` and normalize. */
+export const expandHome = (p) => p.startsWith("~") ? resolve(homedir(), p.slice(p.startsWith("~/") ? 2 : 1)) : resolve(p);
+// IM principals ("user:xxx" / "chat:xxx") get pasted around — copy-paste from
+// WeCom UI sometimes drags along zero-width / invisible-separator chars
+// (U+200B-U+200D, U+2060-U+206F, U+FEFF). They render identical but break
+// `===` matches between allowFrom and the wire-side principal.
+const INVISIBLE = /[​-‍⁠-]/g;
+export const sanitizeId = (s) => s.replace(INVISIBLE, "").trim();
+//# sourceMappingURL=paths.js.map

package/dist/shared/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../shared/paths.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,wCAAwC;AACxC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAC9C,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE3F,8EAA8E;AAC9E,wEAAwE;AACxE,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,SAAS,GAAG,YAAY,CAAC;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC"}

package/dist/shared/session-label.js

@@ -0,0 +1,67 @@
+// Stable per-session visual tag. Hash a sessionId to a fixed animal emoji so
+// the same Claude session always shows the same icon — on approval cards and
+// in the /sessions list — letting the user tell sibling sessions apart when
+// several un-mirrored sessions all fall back to the same WeCom chat.
+//
+// Stateless + deterministic: same sessionId → same emoji across daemon
+// restarts, no persistence needed.
+const ANIMALS = [
+    "🦊", "🐬", "🦄", "🐙", "🦉", "🐢", "🦋", "🐝",
+    "🐳", "🦁", "🐯", "🐰", "🦝", "🐼", "🐨", "🦓",
+    "🦔", "🦇", "🐧", "🦜", "🦩", "🐸", "🐺", "🦅",
+    "🐡", "🦞", "🦗", "🐌", "🦚", "🐲",
+];
+// FNV-1a — small, fast, good spread for short ascii ids.
+const hash = (s) => {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return h >>> 0;
+};
+export const labelFor = (sessionId) => {
+    if (!sessionId)
+        return "❔";
+    return ANIMALS[hash(sessionId) % ANIMALS.length] ?? "❔";
+};
+// ── Target-key tagging ──────────────────────────────────────────────────
+// Daemon-internal target keys are `user:xxx[#tag]` / `chat:xxx[#tag]`. Every
+// user-visible artifact bound to a TAGGED session must carry the same visual
+// so a chat hosting parallel sessions stays disambiguated:
+//   • markdown bubbles → `emoji \`#tag\`` header line  (withTagHeader)
+//   • card titles      → `emoji ` badge                 (tagBadge)
+// Untagged (default session) passes through unchanged — single-session users
+// see no extra glyphs. Emoji is keyed on the TAG STRING, not the sessionId,
+// so it survives `/clear` rotations.
+/** `#tag` suffix of a target key, "" when untagged. */
+export const tagOfKey = (target) => {
+    if (!target)
+        return "";
+    const h = target.indexOf("#");
+    return h >= 0 ? target.slice(h + 1) : "";
+};
+/** Drop the `#tag` suffix — collapses a tagged session key to the chat-scoped
+ *  base principal (`user:xxx#foo` → `user:xxx`). Everything shared across a
+ *  chat's sessions (cwd, peer discovery, graph runs) keys off this. */
+export const baseOfKey = (target) => {
+    const h = target.indexOf("#");
+    return h >= 0 ? target.slice(0, h) : target;
+};
+/** Compose a session key from a base principal and a tag ("" → default session). */
+export const keyOf = (base, tag) => (tag ? `${base}#${tag}` : base);
+/** Trailing-space emoji badge for card titles; "" for untagged targets. */
+export const tagBadge = (target) => {
+    const tag = tagOfKey(target);
+    return tag ? `${labelFor(tag)} ` : "";
+};
+/** Prefix markdown content with the `emoji \`#tag\`` header; identity when untagged.
+ *  `seq` ("2/5") marks one piece of a split push — it rides in the same header
+ *  line so every chunk of a long reply is attributable on its own, and shows
+ *  alone when the session is untagged. */
+export const withTagHeader = (target, content, seq) => {
+    const tag = tagOfKey(target);
+    const head = [tag ? `${labelFor(tag)} \`#${tag}\`` : "", seq ? `\`${seq}\`` : ""].filter(Boolean).join(" ");
+    return head ? `${head}\n\n${content}` : content;
+};
+//# sourceMappingURL=session-label.js.map

package/dist/shared/session-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-label.js","sourceRoot":"","sources":["../../shared/session-label.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,uEAAuE;AACvE,mCAAmC;AAEnC,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACnC,CAAC;AAEF,yDAAyD;AACzD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;IACjC,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAU,EAAE;IACpD,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC;IAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;AAC1D,CAAC,CAAC;AAEF,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,2DAA2D;AAC3D,uEAAuE;AACvE,mEAAmE;AACnE,6EAA6E;AAC7E,4EAA4E;AAC5E,qCAAqC;AAErC,uDAAuD;AACvD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAA0B,EAAU,EAAE;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC,CAAC;AAEF;;uEAEuE;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE;IAClD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE5F,2EAA2E;AAC3E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAA0B,EAAU,EAAE;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF;;;0CAG0C;AAC1C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAA0B,EAAE,OAAe,EAAE,GAAY,EAAU,EAAE;IACjG,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5G,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAClD,CAAC,CAAC"}

package/dist/shared/web-assets.js

@@ -0,0 +1,51 @@
+// Static web assets (web/*.css, web/*.js) — the front end lives in real files
+// instead of template literals inside TS, so it gets syntax highlighting, no
+// backslash escaping, and edits that don't need a `tsc` pass.
+//
+// 解析路径要同时命中三种布局: 源码跑 (tsx: shared/ → ../web)、编译后跑
+// (dist/shared/ → ../../web)、npm 包安装 (同后者, 见 package.json files[])。
+// 内容按 mtime 缓存: 命中时零 IO, 改文件即时生效 (daemon 不必重启)。
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+const HERE = dirname(fileURLToPath(import.meta.url));
+const WEB_DIR = [join(HERE, "..", "web"), join(HERE, "..", "..", "web")]
+    .find((p) => existsSync(join(p, "chat.js")));
+const TYPES = {
+    css: "text/css; charset=utf-8",
+    js: "text/javascript; charset=utf-8",
+    html: "text/html; charset=utf-8",
+};
+const cache = new Map();
+/** 读一个 web/ 下的资源; 文件缺失 (打包遗漏) 返回 undefined 而不是抛 —— 页面
+ *  少个样式表也好过整个 daemon 起不来。 */
+export const readAsset = (name) => {
+    if (!WEB_DIR || /[/\\]/.test(name))
+        return undefined;
+    const path = join(WEB_DIR, name);
+    let mtimeMs;
+    try {
+        mtimeMs = statSync(path).mtimeMs;
+    }
+    catch {
+        return undefined;
+    }
+    const hit = cache.get(name);
+    if (hit && hit.mtimeMs === mtimeMs)
+        return hit.asset;
+    try {
+        const body = readFileSync(path, "utf8");
+        const ext = name.slice(name.lastIndexOf(".") + 1);
+        const asset = {
+            body,
+            type: TYPES[ext] ?? "application/octet-stream",
+            etag: `W/"${mtimeMs.toString(36)}-${body.length.toString(36)}"`,
+        };
+        cache.set(name, { mtimeMs, asset });
+        return asset;
+    }
+    catch {
+        return undefined;
+    }
+};
+//# sourceMappingURL=web-assets.js.map

package/dist/shared/web-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-assets.js","sourceRoot":"","sources":["../../shared/web-assets.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,8DAA8D;AAC9D,EAAE;AACF,kDAAkD;AAClD,oEAAoE;AACpE,gDAAgD;AAChD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAErD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;KACrE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAI/C,MAAM,KAAK,GAA2B;IACpC,GAAG,EAAE,yBAAyB;IAC9B,EAAE,EAAE,gCAAgC;IACpC,IAAI,EAAE,0BAA0B;CACjC,CAAC;AAEF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;AAEnE;6BAC6B;AAC7B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAqB,EAAE;IAC3D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IACrE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,KAAK,GAAU;YACnB,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,0BAA0B;YAC9C,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG;SAChE,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC"}

package/dist/svr/index.js

@@ -0,0 +1,246 @@
+#!/usr/bin/env node
+// weclaude svr — 独立的 detail 中转服务。部署到 chat + cli 都可达的网络机器上,
+// cli/daemon 端把 tool/approval 详情 POST 过来, chat 用户点卡片链接直连本机浏览。
+//
+// 只有两条业务路由:
+//   • POST /d           bearer 鉴权, body = DetailRecord JSON → 存入 store
+//   • GET  /detail?id=  从 store 取, 用 shared/detail-render 渲染 HTML
+// 加上 GET /healthz 便于反代/监控探活。
+//
+// 存储直接复用 daemon 的 createDetailStore (append-only JSONL + LRU + 24h TTL)。
+// 信任模型: token 相同 = 可写; 读端不签名 (拿到 id 即可读)。id 是 uuid, 不可枚举。
+import { createServer } from "node:http";
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+import { dirname } from "node:path";
+import pino from "pino";
+import { expandHome } from "../shared/paths.js";
+import { createDetailStore } from "../shared/detail-store.js";
+import { renderDetailPage, renderNotFound } from "../shared/detail-render.js";
+import { createChatRoutes, chatRouteTable } from "../shared/chat-http.js";
+import { resolvePublicHost } from "../shared/lan-ip.js";
+import { loadConfig } from "../shared/config.js";
+// Defaults: config.svr.* > 硬编码兜底。CLI 参数在 parseArgs 里再覆盖上去。
+// Config 加载失败 (缺 bot.botId 之类) 不该阻塞 svr 启动 —— svr 与 daemon 解耦。
+const buildDefaults = () => {
+    const fallback = {
+        host: "0.0.0.0",
+        port: 17891,
+        stateDir: "~/.weclaude/svr",
+        tokenFile: "~/.weclaude/svr-token",
+        logLevel: "info",
+    };
+    try {
+        const { config } = loadConfig();
+        const s = config.svr;
+        return {
+            host: s.host || fallback.host,
+            port: s.port || fallback.port,
+            stateDir: s.stateDir || fallback.stateDir,
+            tokenFile: s.tokenFile || fallback.tokenFile,
+            token: s.token || undefined,
+            logLevel: s.logLevel || fallback.logLevel,
+        };
+    }
+    catch {
+        return fallback;
+    }
+};
+const parseArgs = (argv) => {
+    const a = buildDefaults();
+    for (let i = 0; i < argv.length; i++) {
+        const k = argv[i];
+        const v = argv[i + 1];
+        switch (k) {
+            case "--host":
+                a.host = v;
+                i++;
+                break;
+            case "--port":
+                a.port = Number(v);
+                i++;
+                break;
+            case "--state":
+                a.stateDir = v;
+                i++;
+                break;
+            case "--token":
+                a.token = v;
+                i++;
+                break;
+            case "--token-file":
+                a.tokenFile = v;
+                i++;
+                break;
+            case "--log-level":
+                a.logLevel = v;
+                i++;
+                break;
+            case "--help":
+            case "-h":
+                printHelp();
+                process.exit(0);
+        }
+    }
+    return a;
+};
+const printHelp = () => {
+    // eslint-disable-next-line no-console
+    console.log(`weclaude svr — standalone detail relay
+
+Defaults come from ~/.weclaude/config.jsonc (svr.*) when present; CLI overrides.
+
+  --host <ip>        bind address (default 0.0.0.0)
+  --port <n>         listen port  (default 17891)
+  --state <dir>      state dir    (default ~/.weclaude/svr)
+  --token <t>        bearer token (default: generate + persist to --token-file)
+  --token-file <p>   token persist path (default ~/.weclaude/svr-token)
+  --log-level <lvl>  pino level   (default info)
+`);
+};
+const loadOrCreateToken = (explicit, tokenFile) => {
+    if (explicit && explicit.length > 0)
+        return explicit;
+    const abs = expandHome(tokenFile);
+    if (existsSync(abs)) {
+        const t = readFileSync(abs, "utf8").trim();
+        if (t.length > 0)
+            return t;
+    }
+    const t = randomBytes(24).toString("hex");
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, `${t}\n`, { mode: 0o600 });
+    return t;
+};
+const readBody = async (req) => {
+    const chunks = [];
+    for await (const c of req)
+        chunks.push(c);
+    return Buffer.concat(chunks);
+};
+const json = (res, status, body) => {
+    res.statusCode = status;
+    res.setHeader("content-type", "application/json");
+    res.end(JSON.stringify(body));
+};
+const isDetailRecord = (v) => {
+    if (!v || typeof v !== "object")
+        return false;
+    const r = v;
+    if (typeof r.id !== "string" || !r.id)
+        return false;
+    if (r.kind !== "tool" && r.kind !== "approval" && r.kind !== "turn")
+        return false;
+    if (typeof r.createdAt !== "number")
+        return false;
+    return true;
+};
+const main = async () => {
+    const args = parseArgs(process.argv.slice(2));
+    const log = pino({ level: args.logLevel, name: "weclaude-svr" });
+    const stateDir = expandHome(args.stateDir);
+    mkdirSync(stateDir, { recursive: true });
+    const token = loadOrCreateToken(args.token, args.tokenFile);
+    const store = createDetailStore({ stateDir, log });
+    // Chat 视图 (SPA + JSON API + SSE) 与 daemon 完全同源 —— svr 侧的记录是 POST /d
+    // 推过来的, store.subscribe 一样会触发, 所以远端浏览也是实时的。
+    const chat = chatRouteTable(createChatRoutes(store));
+    const server = createServer(async (req, res) => {
+        const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+        try {
+            if (req.method === "GET" && url.pathname === "/healthz") {
+                json(res, 200, { ok: true });
+                return;
+            }
+            const chatHandler = chat[`${req.method ?? "GET"} ${url.pathname}`];
+            if (chatHandler) {
+                chatHandler(req, res, url);
+                return;
+            }
+            if (req.method === "GET" && url.pathname === "/detail") {
+                const id = url.searchParams.get("id") ?? "";
+                if (!id) {
+                    res.statusCode = 400;
+                    res.setHeader("content-type", "text/plain; charset=utf-8");
+                    res.end("missing ?id=");
+                    return;
+                }
+                const rec = store.get(id);
+                if (!rec) {
+                    res.statusCode = 404;
+                    res.setHeader("content-type", "text/html; charset=utf-8");
+                    res.end(renderNotFound(id));
+                    return;
+                }
+                res.statusCode = 200;
+                res.setHeader("content-type", "text/html; charset=utf-8");
+                res.setHeader("cache-control", "no-store");
+                res.end(renderDetailPage(rec));
+                return;
+            }
+            if (req.method === "POST" && url.pathname === "/d") {
+                const auth = req.headers.authorization ?? "";
+                if (!auth.startsWith("Bearer ") || auth.slice(7) !== token) {
+                    json(res, 401, { ok: false, error: "unauthorized" });
+                    return;
+                }
+                const body = await readBody(req);
+                let parsed;
+                try {
+                    parsed = JSON.parse(body.toString("utf8"));
+                }
+                catch {
+                    json(res, 400, { ok: false, error: "invalid json" });
+                    return;
+                }
+                if (!isDetailRecord(parsed)) {
+                    json(res, 400, { ok: false, error: "invalid detail record" });
+                    return;
+                }
+                store.put(parsed);
+                log.debug({ id: parsed.id, kind: parsed.kind }, "record stored");
+                json(res, 200, { ok: true, id: parsed.id });
+                return;
+            }
+            res.statusCode = 404;
+            res.end("not found");
+        }
+        catch (e) {
+            log.error({ err: e.message }, "handler failed");
+            try {
+                json(res, 500, { ok: false, error: e.message });
+            }
+            catch { /* ignore */ }
+        }
+    });
+    server.listen(args.port, args.host, () => {
+        const displayHost = resolvePublicHost(args.host);
+        const base = `http://${displayHost}:${args.port}`;
+        // eslint-disable-next-line no-console
+        console.log(`[weclaude-svr] listening on ${args.host}:${args.port}`);
+        // eslint-disable-next-line no-console
+        console.log(`[weclaude-svr] base URL: ${base}`);
+        // eslint-disable-next-line no-console
+        console.log(`[weclaude-svr] token:    ${token}`);
+        // eslint-disable-next-line no-console
+        console.log(`\nAdd to ~/.weclaude/config.jsonc on every daemon host:
+  "daemon": {
+    "detailRemoteBase":  "${base}",
+    "detailRemoteToken": "${token}"
+  }
+`);
+    });
+    const shutdown = (sig) => {
+        log.info({ sig }, "shutdown");
+        server.close(() => process.exit(0));
+        setTimeout(() => process.exit(0), 3000).unref();
+    };
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+};
+main().catch((e) => {
+    // eslint-disable-next-line no-console
+    console.error("[weclaude-svr] fatal:", e);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/svr/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../svr/index.ts"],"names":[],"mappings":";AACA,2DAA2D;AAC3D,8DAA8D;AAC9D,EAAE;AACF,YAAY;AACZ,uEAAuE;AACvE,kEAAkE;AAClE,6BAA6B;AAC7B,EAAE;AACF,yEAAyE;AACzE,0DAA0D;AAC1D,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAqB,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAWjD,2DAA2D;AAC3D,+DAA+D;AAC/D,MAAM,aAAa,GAAG,GAAS,EAAE;IAC/B,MAAM,QAAQ,GAAS;QACrB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,iBAAiB;QAC3B,SAAS,EAAE,uBAAuB;QAClC,QAAQ,EAAE,MAAM;KACjB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;YAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;YAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YACzC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;YAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;YAC3B,QAAQ,EAAG,CAAC,CAAC,QAAuB,IAAI,QAAQ,CAAC,QAAQ;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,IAAuB,EAAQ,EAAE;IAClD,MAAM,CAAC,GAAS,aAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,QAAQ,CAAC,EAAE,CAAC;YACV,KAAK,QAAQ;gBAAE,CAAC,CAAC,IAAI,GAAG,CAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,MAAM;YACvC,KAAK,QAAQ;gBAAE,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,CAAE,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,MAAM;YAC/C,KAAK,SAAS;gBAAE,CAAC,CAAC,QAAQ,GAAG,CAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,MAAM;YAC5C,KAAK,SAAS;gBAAE,CAAC,CAAC,KAAK,GAAG,CAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,MAAM;YACzC,KAAK,cAAc;gBAAE,CAAC,CAAC,SAAS,GAAG,CAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,MAAM;YAClD,KAAK,aAAa;gBAAE,CAAC,CAAC,QAAQ,GAAG,CAAgB,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,MAAM;YAC9D,KAAK,QAAQ,CAAC;YAAC,KAAK,IAAI;gBACtB,SAAS,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,GAAS,EAAE;IAC3B,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUb,CAAC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,QAA4B,EAAE,SAAiB,EAAU,EAAE;IACpF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAAmB,EAAE;IAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAQ,EAAE;IACxE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,CAAU,EAAqB,EAAE;IACvD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,oEAAoE;IACpE,4CAA4C;IAC5C,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACxD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACnE,IAAI,WAAW,EAAE,CAAC;gBAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACvD,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;oBAC1D,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC5B,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACnD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC3D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACnD,MAAM,CAAC;oBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACvE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBAC9D,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;gBACjE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAC3D,IAAI,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;QACvC,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,UAAU,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClD,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QAChD,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;QACjD,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC;;4BAEY,IAAI;4BACJ,KAAK;;CAEhC,CAAC,CAAC;IACD,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAQ,EAAE;QACrC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/hooks/hooks.json

@@ -0,0 +1,16 @@
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PLUGIN_ROOT:-${CODEBUDDY_PLUGIN_ROOT}}/hooks/pre-tool-use.sh",
+            "timeout": 43220
+          }
+        ]
+      }
+    ]
+  }
+}

package/hooks/pre-tool-use.sh

@@ -0,0 +1,167 @@
+#!/usr/bin/env bash
+# weclaude PreToolUse hook: forward to local daemon → long-poll → emit decision.
+# Any failure → ask (never break workflow).
+set -uo pipefail
+
+DAEMON_URL="${WECLAUDE_DAEMON_URL:-http://127.0.0.1:17890/approve}"
+# 必须严格大于 daemon 的 approval.longPollSec (默认 43200) 且小于 hooks.json
+# 的 timeout, 否则卡在 WeCom 里挂 >30min 后 curl 先死, 用户的点击写进死 socket。
+HOOK_TIMEOUT="${WECLAUDE_HOOK_TIMEOUT:-43210}"
+STATE_DIR="${WECLAUDE_STATE_DIR:-$HOME/.weclaude/state}"
+# Fallback policy when the daemon is unreachable / replies garbage. ask|allow|deny.
+# Default keeps the safe behavior; set to `allow` in trusted local-only setups.
+FALLBACK="${WECLAUDE_HOOK_FALLBACK:-ask}"
+
+emit() {
+  local decision="$1" reason="${2:-}"
+  # 用 jq 拼 JSON: reason 可能含字面引号(askq deny 把答案塞进 reason),
+  # printf 直接拼会漏出内层 " 把 JSON 撕烂, Claude Code 解析失败 fallback
+  # 弹原生 picker → askq 失效。
+  if command -v jq >/dev/null 2>&1; then
+    jq -cn --arg d "$decision" --arg r "weclaude: $reason" \
+      '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$d,permissionDecisionReason:$r}}'
+  else
+    # jq 缺失兜底: 手动转义 \ 和 " (足够覆盖 reason 里的字面引号)。
+    local esc="${reason//\\/\\\\}"; esc="${esc//\"/\\\"}"
+    printf '%s\n' "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"${decision}\",\"permissionDecisionReason\":\"weclaude: ${esc}\"}}"
+  fi
+  exit 0
+}
+ask() { emit "ask" "${1:-bridge unreachable}"; }
+
+# Daemon-down fallback. Consults the persisted auto-approve window first so a
+# session-level "allow N min" survives daemon restart / outage; otherwise falls
+# back to FALLBACK. SESSION_ID must already be parsed.
+bridge_down() {
+  local reason="$1"
+  local sf="$STATE_DIR/auto-windows.json"
+  if [[ -n "${SESSION_ID:-}" && -r "$sf" ]] && command -v jq >/dev/null 2>&1; then
+    local active
+    active=$(jq -r --arg s "$SESSION_ID" \
+      'if (.windows[$s].until // 0) > (now * 1000) then "1" else "0" end' \
+      "$sf" 2>/dev/null) || active=""
+    if [[ "$active" == "1" ]]; then
+      emit "allow" "auto-window (offline): $reason"
+    fi
+  fi
+  case "$FALLBACK" in
+    allow|deny|ask) emit "$FALLBACK" "$reason" ;;
+    *) emit "ask" "$reason" ;;
+  esac
+}
+
+PAYLOAD=$(cat) || ask "stdin read failed"
+command -v jq >/dev/null 2>&1 || ask "jq missing"
+
+SESSION_ID=$(printf '%s' "$PAYLOAD" | jq -r '.session_id // empty')
+TOOL_NAME=$(printf '%s' "$PAYLOAD" | jq -r '.tool_name // empty')
+TOOL_INPUT=$(printf '%s' "$PAYLOAD" | jq -c '.tool_input // {}')
+CWD=$(printf '%s' "$PAYLOAD" | jq -r '.cwd // ""')
+TRANSCRIPT_PATH=$(printf '%s' "$PAYLOAD" | jq -r '.transcript_path // ""')
+PERMISSION_MODE=$(printf '%s' "$PAYLOAD" | jq -r '.permission_mode // ""')
+
+# 权限模式短路: 只对用户主动选的"完全跳过"模式放掉, 其它一律走 daemon 发 IM
+# 卡, 让 weclaude 远端用户能在 IM 上点决策。
+#   - bypassPermissions: 用户已经主动选了"全跳", emit allow 直接放, 不打 daemon。
+#   - auto: 不在此短路。第一次发卡用户点 10min 后, daemon 的 isAutoWindowActive
+#     会接管, 后续 tool 自动放行不再发卡, 既不丢 IM 控制权也不会变成"卡刷屏"。
+#     若 emit "ask" 让 Claude 自己处理, 不安全 tool 会弹本地 CLI picker, 远端用户
+#     完全看不见也答不了 — 那是 v0.1.35 的回退原因。
+#   - dontAsk: Claude 默认拒, 但 weclaude 用户可能希望从 IM 端覆盖, 不在此短路。
+# acceptEdits / default / plan 不在此列, 维持 daemon 流程。AskUserQuestion 始终
+# 走卡 (远端用户的主动决策), 故任何 mode 都不在此短路。
+# WECLAUDE_HONOR_AUTO_MODE=0 关掉本段对齐行为。
+if [[ "$TOOL_NAME" != "AskUserQuestion" ]] && [[ "${WECLAUDE_HONOR_AUTO_MODE:-1}" != "0" ]]; then
+  case "$PERMISSION_MODE" in
+    bypassPermissions)
+      emit "allow" "bypass-mode passthrough" ;;
+  esac
+fi
+
+# ExitPlanMode 只是把 plan mode 的产出交给用户确认, 本地 CLI 会再弹一次原生
+# 确认框, 走 IM 审批纯属多此一举, 直接放行。
+if [[ "$TOOL_NAME" == "ExitPlanMode" ]]; then
+  emit "allow" "ExitPlanMode passthrough"
+fi
+
+# weclaude 自家 MCP 工具全部走 loopback 到本 daemon, 自审会把 /wrc 首次绑定卡死
+# (还没 defaultChat, 卡片无处可推 → 鸡生蛋), 直接放行。
+# 命名两条路径:
+#   1. cli/sync.ts (legacy claude-internal): mcp__weclaude__<tool>
+#   2. .claude-plugin/plugin.json:           mcp__plugin_weclaude_weclaude__<tool>
+# 用 *weclaude__* 同时覆盖两种前缀。
+if [[ "$TOOL_NAME" == mcp__*weclaude__* ]]; then
+  emit "allow" "weclaude mcp self-call bypass"
+fi
+
+# weclaude 自家 Skill (slash commands like /wrc) 也是本地插件代码, 无须审批。
+# tool_input.skill 形如 "weclaude:wrc"; plugin 命名空间用冒号分隔。
+if [[ "$TOOL_NAME" == "Skill" ]]; then
+  SKILL_NAME=$(printf '%s' "$TOOL_INPUT" | jq -r '.skill // ""')
+  if [[ "$SKILL_NAME" == weclaude:* ]]; then
+    emit "allow" "weclaude skill self-call bypass"
+  fi
+fi
+
+# Bash read-only fast-path: bypass cards for grep / rg etc.
+if [[ "$TOOL_NAME" == "Bash" ]]; then
+  CMD=$(printf '%s' "$TOOL_INPUT" | jq -r '.command // ""')
+  if [[ "$CMD" =~ ^[[:space:]]*(grep|egrep|fgrep|rg|ls|cat|head|tail|wc|file)([[:space:]]|$) ]] \
+     && [[ ! "$CMD" =~ [\;\|\&\>\<\`\$\(] ]]; then
+    emit "allow" "read-only bypass"
+  fi
+  # weclaude CLI 同理: /wrc /cd 这些 slash command 的 ! bash 都打到本 daemon,
+  # 自己审自己没意义, 也避免首次绑定时无处推卡。
+  if [[ "$CMD" =~ (^|/|[[:space:]])weclaude(\.sh)?([[:space:]]|$) ]]; then
+    emit "allow" "weclaude self-call bypass"
+  fi
+fi
+
+# Tail of recent user messages for context on the card.
+# 注意 .message.content 可能是 string 或 content blocks 数组；过滤 tool_result 与
+# Claude Code 注入的 <system-reminder>/<command-*>/<local-command-*> 包裹标签。
+TRANSCRIPT_TAIL=""
+if [[ -n "$TRANSCRIPT_PATH" && -r "$TRANSCRIPT_PATH" ]]; then
+  TRANSCRIPT_TAIL=$(tail -n 200 "$TRANSCRIPT_PATH" 2>/dev/null \
+    | jq -r '
+        select(.type == "user" or .role == "user")
+        | select((.isMeta // false) == false)
+        | (.message.content // .content) as $c
+        | ( if ($c | type) == "string" then $c
+            elif ($c | type) == "array" then
+              ([ $c[]? | select(.type == "text") | .text ] | join("\n"))
+            else "" end )
+        | gsub("(?s)<system-reminder>.*?</system-reminder>"; "")
+        | gsub("(?s)<command-name>.*?</command-name>"; "")
+        | gsub("(?s)<command-message>.*?</command-message>"; "")
+        | gsub("(?s)<command-args>.*?</command-args>"; "")
+        | gsub("(?s)<local-command-stdout>.*?</local-command-stdout>"; "")
+        | gsub("(?s)<local-command-caveat>.*?</local-command-caveat>"; "")
+        | gsub("\\s+"; " ")
+        | sub("^\\s+"; "") | sub("\\s+$"; "")
+        | select(length > 0)
+      ' 2>/dev/null \
+    | tail -n 3 \
+    | head -c 800 || true)
+fi
+
+BODY=$(jq -nc \
+  --arg sid "$SESSION_ID" \
+  --arg tn "$TOOL_NAME" \
+  --argjson ti "$TOOL_INPUT" \
+  --arg cwd "$CWD" \
+  --arg tail "$TRANSCRIPT_TAIL" \
+  '{session_id:$sid,tool_name:$tn,tool_input:$ti,cwd:$cwd,transcript_tail:$tail}')
+
+RESP=$(curl -sS --max-time "$HOOK_TIMEOUT" \
+  -H 'Content-Type: application/json' \
+  -d "$BODY" \
+  "$DAEMON_URL" 2>/dev/null) || bridge_down "daemon curl failed"
+
+DECISION=$(printf '%s' "$RESP" | jq -r '.decision // "ask"' 2>/dev/null) || bridge_down "bad daemon response"
+REASON=$(printf '%s' "$RESP" | jq -r '.reason // ""' 2>/dev/null)
+
+case "$DECISION" in
+  allow|deny|ask) emit "$DECISION" "$REASON" ;;
+  *) bridge_down "unknown decision: $DECISION" ;;
+esac

package/launchd/com.weclaude.daemon.plist.template

@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<!-- Generated template — `scripts/install-launchd.sh` materializes the
+     real plist into ~/Library/LaunchAgents with absolute paths. -->
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>com.weclaude.daemon</string>
+
+    <key>ProgramArguments</key>
+    <array>
+        <string>__NODE__</string>
+        <string>__REPO__/dist/daemon/index.js</string>
+    </array>
+
+    <key>WorkingDirectory</key>
+    <string>__REPO__</string>
+
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>PATH</key>
+        <string>/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin</string>
+        <key>NODE_ENV</key>
+        <string>production</string>
+    </dict>
+
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <dict>
+        <key>SuccessfulExit</key>
+        <false/>
+        <key>Crashed</key>
+        <true/>
+    </dict>
+
+    <key>ThrottleInterval</key>
+    <integer>10</integer>
+
+    <key>StandardOutPath</key>
+    <string>__HOME__/.weclaude/daemon.stdout.log</string>
+    <key>StandardErrorPath</key>
+    <string>__HOME__/.weclaude/daemon.stderr.log</string>
+</dict>
+</plist>