feat: 远程群控 (#243)

* feat: restore pipe IPC, LAN pipes, monitor tool, and PR-package features

Core IPC system (UDS_INBOX):
- PipeServer/PipeClient with UDS + TCP dual transport, NDJSON protocol
- PipeRegistry: machineId-based role assignment, file locking
- Master/slave attach, prompt relay, permission forwarding
- Heartbeat lifecycle with parallel isPipeAlive probes
- Commands: /pipes, /attach, /detach, /send, /claim-main, /pipe-status

LAN Pipes (LAN_PIPES):
- UDP multicast beacon (224.0.71.67:7101) for zero-config LAN discovery
- PipeServer TCP listener, PipeClient TCP connect mode
- Heartbeat auto-attaches LAN peers via TCP
- Cross-machine attach allowed regardless of role
- /pipes shows [LAN] peers with role + hostname/IP
- SendMessageTool supports tcp: scheme with user consent

Architecture — extracted hooks from REPL.tsx (~830 lines → ~20 lines):
- usePipeIpc: lifecycle (bootstrap, handlers, heartbeat, cleanup)
- usePipeRelay: slave→master message relay via module singleton
- usePipePermissionForward: permission request/cancel forwarding
- usePipeRouter: selected pipe input routing with role+IP labels
- Shared ndjsonFramer.ts replaces 3 duplicate NDJSON parsers

Key fixes applied during development:
- Multicast binds to correct LAN interface (not WSL/Docker)
- Beacon ref stored as module singleton (not Zustand state mutation)
- Heartbeat preserves LAN peers in discoveredPipes and selectedPipes
- Disconnect handler calls removeSlaveClient (fixes listener leak)
- cleanupStaleEntries probes without lock, writes briefly under lock
- getMachineId uses async execFile (not blocking execSync)
- globalThis.__pipeSendToMaster replaced with setPipeRelay singleton
- M key only toggles route mode when selector panel is expanded
- User prompt displayed in message list on pipe broadcast
- Broadcast notifications show [role] + hostname/IP for LAN peers

Other restored features:
- Monitor tool: /monitor command, MonitorTool, MonitorMcpTask lifecycle
- Daemon supervisor and remoteControlServer command
- Tools: SnipTool, SleepTool, ListPeersTool, SendUserFileTool,
  WebBrowserTool, WorkflowTool, and 10+ stub→implementation rewrites
- Feature flags: UDS_INBOX, LAN_PIPES, MONITOR_TOOL, FORK_SUBAGENT,
  KAIROS, COORDINATOR_MODE, WORKFLOW_SCRIPTS, HISTORY_SNIP

Tests: 2190 pass / 0 fail (15 new: lanBeacon 7, peerAddress 8)

* fix: resolve merge conflicts and fix all tsc/test errors after main merge

- Export ToolResultBlockParam from Tool.ts (14 tool files fixed)
- Migrate ink imports from ../../ink.js to @anthropic/ink (7 files)
- Fix toolUseID → toolUseId typo in monitor.ts and MonitorTool.tsx
- Add fallback values for string|undefined type errors (8 locations)
- Fix AppState type in assistant.ts, add NewInstallWizard stubs
- Fix ParsedRepository.repo → .name in subscribe-pr.ts
- Fix AgentId/string type mismatch in BackgroundTasksDialog.tsx
- Fix PipeRelayFn return type in pipePermissionRelay.ts
- Use PipeMessage type in usePipeRelay.ts
- Fix lanBeacon.test.ts mock type assertions
- Create missing MouseActionEvent class for ink package
- Use ansi: color format instead of bare "green"/"red"
- Resolve theme.permission access via getTheme()

Result: 0 tsc errors, 2496 tests pass, 0 fail

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: 恢复 /poor 的说明

---------

Co-authored-by: unraid <local@unraid.local>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

src/hooks/toolPermission/handlers/interactiveHandler.ts

@@ -4,6 +4,7 @@ import { randomUUID } from 'crypto'
 import { logForDebugging } from 'src/utils/debug.js'
 import { getAllowedChannels } from '../../../bootstrap/state.js'
 import type { BridgePermissionCallbacks } from '../../../bridge/bridgePermissionCallbacks.js'
+import type { ToolUseConfirm } from '../../../components/permissions/PermissionRequest.js'
 import { getTerminalFocused } from '@anthropic/ink'
 import {
   CHANNEL_PERMISSION_REQUEST_METHOD,
@@ -25,6 +26,11 @@ import {
   setYoloClassifierApproval,
 } from '../../../utils/classifierApprovals.js'
 import { errorMessage } from '../../../utils/errors.js'
+import {
+  forgetPipePermissionRequest,
+  notifyPipePermissionCancel,
+  tryRelayPipePermissionRequest,
+} from '../../../utils/pipePermissionRelay.js'
 import type { PermissionDecision } from '../../../utils/permissions/PermissionResult.js'
 import type { PermissionUpdate } from '../../../utils/permissions/PermissionUpdateSchema.js'
 import { hasPermissionsToUseTool } from '../../../utils/permissions/permissions.js'
@@ -82,6 +88,18 @@ function handleInteractivePermission(
 
   const permissionPromptStartTimeMs = Date.now()
   const displayInput = result.updatedInput ?? ctx.input
+  let pipePermissionRequestId: string | null = null
+
+  function forgetPipePermission(reason?: string): void {
+    notifyPipePermissionCancel(pipePermissionRequestId, reason)
+    forgetPipePermissionRequest(pipePermissionRequestId)
+    pipePermissionRequestId = null
+  }
+
+  function forgetPipePermissionSilently(): void {
+    forgetPipePermissionRequest(pipePermissionRequestId)
+    pipePermissionRequestId = null
+  }
 
   function clearClassifierIndicator(): void {
     if (feature('BASH_CLASSIFIER')) {
@@ -89,7 +107,7 @@ function handleInteractivePermission(
     }
   }
 
-  ctx.pushToQueue({
+  const toolUseConfirm: ToolUseConfirm = {
     assistantMessage: ctx.assistantMessage,
     tool: ctx.tool,
     description,
@@ -136,6 +154,7 @@ function handleInteractivePermission(
     },
     onAbort() {
       if (!claim()) return
+      forgetPipePermission('Permission request was aborted locally in sub.')
       if (bridgeCallbacks && bridgeRequestId) {
         bridgeCallbacks.sendResponse(bridgeRequestId, {
           behavior: 'deny',
@@ -158,6 +177,7 @@ function handleInteractivePermission(
       contentBlocks?: ContentBlockParam[],
     ) {
       if (!claim()) return // atomic check-and-mark before await
+      forgetPipePermission('Permission request was approved locally in sub.')
 
       if (bridgeCallbacks && bridgeRequestId) {
         bridgeCallbacks.sendResponse(bridgeRequestId, {
@@ -182,6 +202,7 @@ function handleInteractivePermission(
     },
     onReject(feedback?: string, contentBlocks?: ContentBlockParam[]) {
       if (!claim()) return
+      forgetPipePermission('Permission request was rejected locally in sub.')
 
       if (bridgeCallbacks && bridgeRequestId) {
         bridgeCallbacks.sendResponse(bridgeRequestId, {
@@ -220,6 +241,7 @@ function handleInteractivePermission(
         // a CCR-initiated mode switch, the very case this callback exists
         // for after useReplBridge started calling it).
         if (!claim()) return
+        forgetPipePermission('Permission request was resolved locally in sub.')
         if (bridgeCallbacks && bridgeRequestId) {
           bridgeCallbacks.cancelRequest(bridgeRequestId)
         }
@@ -229,7 +251,65 @@ function handleInteractivePermission(
         resolveOnce(ctx.buildAllow(freshResult.updatedInput ?? ctx.input))
       }
     },
-  })
+  }
+
+  ctx.pushToQueue(toolUseConfirm)
+  pipePermissionRequestId = tryRelayPipePermissionRequest(
+    toolUseConfirm,
+    response => {
+      if (!claim()) return
+      forgetPipePermissionSilently()
+      clearClassifierChecking(ctx.toolUseID)
+      clearClassifierIndicator()
+      ctx.removeFromQueue()
+      channelUnsubscribe?.()
+      if (bridgeCallbacks && bridgeRequestId) {
+        bridgeCallbacks.cancelRequest(bridgeRequestId)
+      }
+
+      if (response.behavior === 'allow') {
+        void (async () => {
+          if (response.permissionUpdates?.length) {
+            void ctx.persistPermissions(response.permissionUpdates)
+          }
+          ctx.logDecision(
+            {
+              decision: 'accept',
+              source: {
+                type: 'user',
+                permanent: !!response.permissionUpdates?.length,
+              },
+            },
+            { permissionPromptStartTimeMs },
+          )
+          resolveOnce(
+            ctx.buildAllow(response.updatedInput ?? displayInput, {
+              acceptFeedback: response.feedback,
+              contentBlocks: response.contentBlocks,
+            }),
+          )
+        })()
+      } else {
+        ctx.logDecision(
+          {
+            decision: 'reject',
+            source: {
+              type: 'user_reject',
+              hasFeedback: !!response.feedback,
+            },
+          },
+          { permissionPromptStartTimeMs },
+        )
+        resolveOnce(
+          ctx.cancelAndAbort(
+            response.feedback,
+            undefined,
+            response.contentBlocks,
+          ),
+        )
+      }
+    },
+  )
 
   // Race 4: Bridge permission response from CCR (claude.ai)
   // When the bridge is connected, send the permission request to CCR and
@@ -257,6 +337,9 @@ function handleInteractivePermission(
       bridgeRequestId,
       response => {
         if (!claim()) return // Local user/hook/classifier already responded
+        forgetPipePermission(
+          'Permission request was resolved by bridge before pipe response.',
+        )
         signal.removeEventListener('abort', unsubscribe)
         clearClassifierChecking(ctx.toolUseID)
         clearClassifierIndicator()
@@ -364,6 +447,9 @@ function handleInteractivePermission(
         channelRequestId,
         response => {
           if (!claim()) return // Another racer won
+          forgetPipePermission(
+            'Permission request was resolved by channel before pipe response.',
+          )
           channelUnsubscribe?.() // both: map delete + listener remove
           clearClassifierChecking(ctx.toolUseID)
           clearClassifierIndicator()
@@ -421,6 +507,9 @@ function handleInteractivePermission(
         permissionPromptStartTimeMs,
       )
       if (!hookDecision || !claim()) return
+      forgetPipePermission(
+        'Permission request was resolved by hook before pipe response.',
+      )
       if (bridgeCallbacks && bridgeRequestId) {
         bridgeCallbacks.cancelRequest(bridgeRequestId)
       }
@@ -453,6 +542,9 @@ function handleInteractivePermission(
         },
         onAllow: decisionReason => {
           if (!claim()) return
+          forgetPipePermission(
+            'Permission request was auto-approved before pipe response.',
+          )
           if (bridgeCallbacks && bridgeRequestId) {
             bridgeCallbacks.cancelRequest(bridgeRequestId)
           }