feat: 远程群控 (#243)

* feat: restore pipe IPC, LAN pipes, monitor tool, and PR-package features

Core IPC system (UDS_INBOX):
- PipeServer/PipeClient with UDS + TCP dual transport, NDJSON protocol
- PipeRegistry: machineId-based role assignment, file locking
- Master/slave attach, prompt relay, permission forwarding
- Heartbeat lifecycle with parallel isPipeAlive probes
- Commands: /pipes, /attach, /detach, /send, /claim-main, /pipe-status

LAN Pipes (LAN_PIPES):
- UDP multicast beacon (224.0.71.67:7101) for zero-config LAN discovery
- PipeServer TCP listener, PipeClient TCP connect mode
- Heartbeat auto-attaches LAN peers via TCP
- Cross-machine attach allowed regardless of role
- /pipes shows [LAN] peers with role + hostname/IP
- SendMessageTool supports tcp: scheme with user consent

Architecture — extracted hooks from REPL.tsx (~830 lines → ~20 lines):
- usePipeIpc: lifecycle (bootstrap, handlers, heartbeat, cleanup)
- usePipeRelay: slave→master message relay via module singleton
- usePipePermissionForward: permission request/cancel forwarding
- usePipeRouter: selected pipe input routing with role+IP labels
- Shared ndjsonFramer.ts replaces 3 duplicate NDJSON parsers

Key fixes applied during development:
- Multicast binds to correct LAN interface (not WSL/Docker)
- Beacon ref stored as module singleton (not Zustand state mutation)
- Heartbeat preserves LAN peers in discoveredPipes and selectedPipes
- Disconnect handler calls removeSlaveClient (fixes listener leak)
- cleanupStaleEntries probes without lock, writes briefly under lock
- getMachineId uses async execFile (not blocking execSync)
- globalThis.__pipeSendToMaster replaced with setPipeRelay singleton
- M key only toggles route mode when selector panel is expanded
- User prompt displayed in message list on pipe broadcast
- Broadcast notifications show [role] + hostname/IP for LAN peers

Other restored features:
- Monitor tool: /monitor command, MonitorTool, MonitorMcpTask lifecycle
- Daemon supervisor and remoteControlServer command
- Tools: SnipTool, SleepTool, ListPeersTool, SendUserFileTool,
  WebBrowserTool, WorkflowTool, and 10+ stub→implementation rewrites
- Feature flags: UDS_INBOX, LAN_PIPES, MONITOR_TOOL, FORK_SUBAGENT,
  KAIROS, COORDINATOR_MODE, WORKFLOW_SCRIPTS, HISTORY_SNIP

Tests: 2190 pass / 0 fail (15 new: lanBeacon 7, peerAddress 8)

* fix: resolve merge conflicts and fix all tsc/test errors after main merge

- Export ToolResultBlockParam from Tool.ts (14 tool files fixed)
- Migrate ink imports from ../../ink.js to @anthropic/ink (7 files)
- Fix toolUseID → toolUseId typo in monitor.ts and MonitorTool.tsx
- Add fallback values for string|undefined type errors (8 locations)
- Fix AppState type in assistant.ts, add NewInstallWizard stubs
- Fix ParsedRepository.repo → .name in subscribe-pr.ts
- Fix AgentId/string type mismatch in BackgroundTasksDialog.tsx
- Fix PipeRelayFn return type in pipePermissionRelay.ts
- Use PipeMessage type in usePipeRelay.ts
- Fix lanBeacon.test.ts mock type assertions
- Create missing MouseActionEvent class for ink package
- Use ansi: color format instead of bare "green"/"red"
- Resolve theme.permission access via getTheme()

Result: 0 tsc errors, 2496 tests pass, 0 fail

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: 恢复 /poor 的说明

---------

Co-authored-by: unraid <local@unraid.local>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

src/utils/pipePermissionRelay.ts

@@ -0,0 +1,156 @@
+import { randomUUID } from 'crypto'
+import type { ContentBlockParam } from '@anthropic-ai/sdk/resources/messages.mjs'
+import type { ToolUseConfirm } from '../components/permissions/PermissionRequest.js'
+import type {
+  PipeMessage,
+  PipePermissionRequestPayload,
+  PipePermissionResponsePayload,
+} from './pipeTransport.js'
+import type { PermissionUpdate } from './permissions/PermissionUpdateSchema.js'
+
+type PendingPipePermission = {
+  onResponse: (payload: PipePermissionResponsePayload) => void
+}
+
+const pendingPipePermissions = new Map<string, PendingPipePermission>()
+
+// Module-level singleton for the relay function to master.
+// Replaces the old (globalThis as any).__pipeSendToMaster pattern.
+type PipeRelayFn = (message: PipeMessage) => void
+let _pipeRelay: PipeRelayFn | null = null
+
+export function setPipeRelay(fn: PipeRelayFn | null): void {
+  _pipeRelay = fn
+}
+
+export function getPipeRelay(): PipeRelayFn | null {
+  return _pipeRelay
+}
+
+function getPipeSender():
+  | ((message: PipeMessage) => void)
+  | null {
+  return _pipeRelay ?? null
+}
+
+export function tryRelayPipePermissionRequest(
+  toolUseConfirm: ToolUseConfirm,
+  onResponse: (payload: PipePermissionResponsePayload) => void,
+): string | null {
+  const send = getPipeSender()
+  if (!send) return null
+
+  const requestId = randomUUID()
+  const payload: PipePermissionRequestPayload = {
+    requestId,
+    toolName: toolUseConfirm.tool.name,
+    toolUseID: toolUseConfirm.toolUseID,
+    description: toolUseConfirm.description,
+    input: toolUseConfirm.input as Record<string, unknown>,
+    permissionResult: toolUseConfirm.permissionResult,
+    permissionPromptStartTimeMs: toolUseConfirm.permissionPromptStartTimeMs,
+  }
+
+  pendingPipePermissions.set(requestId, { onResponse })
+  send({ type: 'permission_request', data: JSON.stringify(payload) })
+  return requestId
+}
+
+export function resolvePipePermissionResponse(
+  payload: PipePermissionResponsePayload,
+): boolean {
+  const pending = pendingPipePermissions.get(payload.requestId)
+  if (!pending) return false
+  pendingPipePermissions.delete(payload.requestId)
+  pending.onResponse(payload)
+  return true
+}
+
+export function cancelPipePermissionRequest(
+  requestId: string,
+  reason?: string,
+): boolean {
+  const pending = pendingPipePermissions.get(requestId)
+  if (!pending) return false
+  pendingPipePermissions.delete(requestId)
+  pending.onResponse({
+    requestId,
+    behavior: 'deny',
+    feedback: reason ?? 'Permission request was cancelled by main.',
+  })
+  return true
+}
+
+export function forgetPipePermissionRequest(
+  requestId: string | null | undefined,
+): void {
+  if (!requestId) return
+  pendingPipePermissions.delete(requestId)
+}
+
+export function notifyPipePermissionCancel(
+  requestId: string | null | undefined,
+  reason?: string,
+): void {
+  if (!requestId) return
+  const send = getPipeSender()
+  if (!send) return
+  send({
+    type: 'permission_cancel',
+    data: JSON.stringify({ requestId, reason }),
+  })
+}
+
+export function clearPendingPipePermissions(
+  reason = 'Pipe permission relay was disconnected.',
+): void {
+  for (const requestId of [...pendingPipePermissions.keys()]) {
+    cancelPipePermissionRequest(requestId, reason)
+  }
+}
+
+export function makePipePermissionResponsePayload(
+  requestId: string,
+  behavior: 'allow',
+  updatedInput: Record<string, unknown>,
+  permissionUpdates: PermissionUpdate[],
+  feedback?: string,
+  contentBlocks?: ContentBlockParam[],
+): PipePermissionResponsePayload
+export function makePipePermissionResponsePayload(
+  requestId: string,
+  behavior: 'deny',
+  feedback?: string,
+  contentBlocks?: ContentBlockParam[],
+): PipePermissionResponsePayload
+export function makePipePermissionResponsePayload(
+  requestId: string,
+  behavior: 'allow' | 'deny',
+  updatedInputOrFeedback?: Record<string, unknown> | string,
+  permissionUpdatesOrContentBlocks?: PermissionUpdate[] | ContentBlockParam[],
+  feedback?: string,
+  contentBlocks?: ContentBlockParam[],
+): PipePermissionResponsePayload {
+  if (behavior === 'allow') {
+    return {
+      requestId,
+      behavior,
+      updatedInput:
+        (updatedInputOrFeedback as Record<string, unknown> | undefined) ?? {},
+      permissionUpdates:
+        (permissionUpdatesOrContentBlocks as PermissionUpdate[] | undefined) ??
+        [],
+      feedback,
+      contentBlocks,
+    }
+  }
+
+  return {
+    requestId,
+    behavior,
+    feedback: updatedInputOrFeedback as string | undefined,
+    contentBlocks: permissionUpdatesOrContentBlocks as
+      | ContentBlockParam[]
+      | undefined,
+  }
+}