feat: ACP 协议版本 remote control (#293)

* fix: 添加 usage 字段缺失时的防御性防护

第三方 API（如智谱 GLM）在某些流式响应中不返回 usage 字段，
导致 usage.input_tokens 访问 undefined 崩溃并连锁影响后续所有请求。

- claude.ts: content_block_stop 创建消息时 fallback 到 EMPTY_USAGE
- LocalAgentTask.tsx: usage 为 undefined 时提前返回
- tokens.ts: getTokenCountFromUsage 加 null guard 和 ?? 0
- cost-tracker.ts: input_tokens/output_tokens 加 ?? 0

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat: ACP Plan 展示 — 支持 session/update plan 类型的可视化

补全 PlanUpdate 类型定义（PlanEntry/Priority/Status），新建 PlanView 组件
渲染进度条、状态图标和优先级标签，在 ChatInterface 中处理 plan 更新逻辑。

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat: 穷鬼模式下跳过 verification agent 以节省 token

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* test: 补充 RCS 后端 + 前端测试覆盖 (+116 tests)

后端新增 3 个测试文件 (70 tests):
- automationState: normalize/snapshot/equals 纯函数
- client-payload: toClientPayload 协议转换
- transport-normalize: normalizePayload + extractContent

前端新增 2 个测试文件 (46 tests):
- utils: formatTime/statusClass/truncate/extractEventText 等
- api-client: getUuid/setUuid/api GET/POST 错误处理

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat: RCS ACP 页面添加权限模式选择器 + 权限响应修复

- 新增权限模式选择器 UI（6种模式：默认/自动接受编辑/跳过权限/规划/不询问/自动判断）
- 权限模式通过 ACP _meta 从 web → acp-link → agent 全链路传递
- 修复 PermissionPanel 点击"允许"发送 cancelled 而非 selected 的 bug
- 权限模式和模型选择持久化到 localStorage
- acp-link 直接连接路径同步支持 permissionMode 透传

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat: RCS Web UI 重构 + QR 修复 + ACP 扫描自动跳转

- RCS Web UI 组件全面重构: Dialog 迁移 Radix UI, lazy loading,
  主题系统改进, 组件样式优化
- IdentityPanel QR 码显示修复: requestAnimationFrame 延迟绘制
  解决 Radix Dialog Portal 挂载时序问题
- ACP QR 扫描自动跳转: IdentityPanel 扫描 ACP 格式 { url, token }
  后存储 sessionStorage 并跳转 /code/?acp=1
- 新增 ACPDirectView 组件: ACP 直连视图, 用 ACPClient 连接并
  渲染 ACPMain 聊天界面

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat: ACP 权限管道改进 — 模式同步 + bypass 检测 + 统一权限流水线

- agent.ts: applySessionMode 同步 appState.toolPermissionContext.mode
- agent.ts: bypassPermissions 可用性检测 (非 root 或 sandbox 环境)
- permissions.ts: createAcpCanUseTool 接入 hasPermissionsToUseTool
  统一权限流水线, 替代原来分散的处理逻辑
- permissions.ts: 支持 onModeChange 回调, 模式变更时实时同步

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: acp-link 支持 permissionMode 默认值传递给 agent

客户端 (Zed/VS Code 等) 的 new_session 不一定携带 permissionMode,
导致 agent 收到 _meta: undefined, permission 回退到 default。

修复: handleNewSession 使用 fallback 链:
  客户端传值 > config.permissionMode > ACP_PERMISSION_MODE 环境变量

使用: ACP_PERMISSION_MODE=auto acp-link claude

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* docs: 更新文档及说明

* fix: 修复类型错误

* chore: 提交脚本

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

packages/remote-control-server/web/src/__tests__/api-client.test.ts

@@ -0,0 +1,143 @@
+import { describe, test, expect, mock, beforeEach } from "bun:test";
+
+// In-memory localStorage mock
+let store: Record<string, string> = {};
+
+beforeEach(() => {
+  store = {};
+  (globalThis as any).localStorage = {
+    getItem: (k: string) => store[k] ?? null,
+    setItem: (k: string, v: string) => { store[k] = v; },
+    removeItem: (k: string) => { delete store[k]; },
+    clear: () => { store = {}; },
+    get length() { return Object.keys(store).length; },
+    key: () => null,
+  };
+});
+
+// Mock fetch
+const fetchMock = {
+  lastUrl: "",
+  lastOpts: {} as RequestInit,
+  response: { ok: true, status: 200, statusText: "OK" },
+  responseData: {} as any,
+};
+
+beforeEach(() => {
+  fetchMock.lastUrl = "";
+  fetchMock.lastOpts = {};
+  fetchMock.response = { ok: true, status: 200, statusText: "OK" };
+  fetchMock.responseData = {};
+});
+
+(globalThis as any).fetch = async (url: string, opts: RequestInit) => {
+  fetchMock.lastUrl = url;
+  fetchMock.lastOpts = opts;
+  return {
+    ok: fetchMock.response.ok,
+    status: fetchMock.response.status,
+    statusText: fetchMock.response.statusText,
+    json: async () => fetchMock.responseData,
+  } as Response;
+};
+
+// Mock crypto.randomUUID
+(globalThis as any).crypto = {
+  randomUUID: () => "test-uuid-12345678",
+};
+
+const { getUuid, setUuid } = await import("../api/client");
+
+// Import api* functions - they depend on getUuid and fetch
+const client = await import("../api/client");
+
+// =============================================================================
+// getUuid()
+// =============================================================================
+
+describe("getUuid", () => {
+  test("returns existing UUID from localStorage", () => {
+    store["rcs_uuid"] = "existing-uuid";
+    expect(getUuid()).toBe("existing-uuid");
+  });
+
+  test("generates and stores new UUID when none exists", () => {
+    const uuid = getUuid();
+    expect(uuid).toBe("test-uuid-12345678");
+    expect(store["rcs_uuid"]).toBe("test-uuid-12345678");
+  });
+
+  test("returns same UUID on subsequent calls", () => {
+    const a = getUuid();
+    const b = getUuid();
+    expect(a).toBe(b);
+  });
+});
+
+// =============================================================================
+// setUuid()
+// =============================================================================
+
+describe("setUuid", () => {
+  test("writes UUID to localStorage", () => {
+    setUuid("custom-uuid-999");
+    expect(store["rcs_uuid"]).toBe("custom-uuid-999");
+  });
+
+  test("getUuid returns the set UUID", () => {
+    setUuid("my-uuid");
+    expect(getUuid()).toBe("my-uuid");
+  });
+});
+
+// =============================================================================
+// api() — tested via apiFetchSession (GET) and apiBind (POST)
+// =============================================================================
+
+describe("api functions", () => {
+  test("GET request appends uuid to URL", async () => {
+    store["rcs_uuid"] = "test-uuid";
+    fetchMock.responseData = [];
+    await client.apiFetchSessions();
+    expect(fetchMock.lastUrl).toContain("uuid=test-uuid");
+    expect(fetchMock.lastOpts.method).toBe("GET");
+  });
+
+  test("GET request uses ? for URL without existing query params", async () => {
+    store["rcs_uuid"] = "test-uuid";
+    fetchMock.responseData = [];
+    await client.apiFetchSessions();
+    expect(fetchMock.lastUrl).toContain("?uuid=");
+  });
+
+  test("GET request uses & for URL with existing query params", async () => {
+    store["rcs_uuid"] = "test-uuid";
+    fetchMock.responseData = [];
+    await client.apiFetchAllSessions();
+    // apiFetchAllSessions calls GET /web/sessions/all
+    expect(fetchMock.lastUrl).toContain("?uuid=");
+  });
+
+  test("POST request includes JSON body", async () => {
+    store["rcs_uuid"] = "test-uuid";
+    fetchMock.responseData = {};
+    await client.apiBind("sess-1");
+    expect(fetchMock.lastOpts.method).toBe("POST");
+    expect(fetchMock.lastOpts.body).toBe(JSON.stringify({ sessionId: "sess-1" }));
+    expect(fetchMock.lastOpts.headers).toEqual({ "Content-Type": "application/json" });
+  });
+
+  test("throws error on non-ok response", async () => {
+    store["rcs_uuid"] = "test-uuid";
+    fetchMock.response = { ok: false, status: 401, statusText: "Unauthorized" };
+    fetchMock.responseData = { error: { type: "auth", message: "Invalid UUID" } };
+    await expect(client.apiFetchSessions()).rejects.toThrow("Invalid UUID");
+  });
+
+  test("throws with statusText when error message is missing", async () => {
+    store["rcs_uuid"] = "test-uuid";
+    fetchMock.response = { ok: false, status: 500, statusText: "Internal Server Error" };
+    fetchMock.responseData = {};
+    await expect(client.apiFetchSessions()).rejects.toThrow("Internal Server Error");
+  });
+});

packages/remote-control-server/web/src/__tests__/utils.test.ts

@@ -0,0 +1,221 @@
+import { describe, test, expect } from "bun:test";
+
+const {
+  formatTime,
+  statusClass,
+  isClosedSessionStatus,
+  truncate,
+  generateMessageUuid,
+  extractEventText,
+  isConversationClearedStatus,
+} = await import("../lib/utils");
+
+// =============================================================================
+// formatTime()
+// =============================================================================
+
+describe("formatTime", () => {
+  test("returns empty string for null", () => {
+    expect(formatTime(null)).toBe("");
+  });
+
+  test("returns empty string for undefined", () => {
+    expect(formatTime(undefined)).toBe("");
+  });
+
+  test("returns empty string for 0", () => {
+    expect(formatTime(0)).toBe("");
+  });
+
+  test("formats valid unix timestamp", () => {
+    const result = formatTime(1700000000);
+    expect(result).toContain("2023");
+  });
+});
+
+// =============================================================================
+// statusClass()
+// =============================================================================
+
+describe("statusClass", () => {
+  test("maps known statuses correctly", () => {
+    expect(statusClass("active")).toBe("active");
+    expect(statusClass("running")).toBe("running");
+    expect(statusClass("idle")).toBe("idle");
+    expect(statusClass("inactive")).toBe("inactive");
+    expect(statusClass("requires_action")).toBe("requires_action");
+    expect(statusClass("archived")).toBe("archived");
+    expect(statusClass("error")).toBe("error");
+  });
+
+  test("returns default for unknown status", () => {
+    expect(statusClass("unknown")).toBe("default");
+  });
+
+  test("returns default for null", () => {
+    expect(statusClass(null)).toBe("default");
+  });
+
+  test("returns default for undefined", () => {
+    expect(statusClass(undefined)).toBe("default");
+  });
+
+  test("returns default for empty string", () => {
+    expect(statusClass("")).toBe("default");
+  });
+});
+
+// =============================================================================
+// isClosedSessionStatus()
+// =============================================================================
+
+describe("isClosedSessionStatus", () => {
+  test("returns true for archived", () => {
+    expect(isClosedSessionStatus("archived")).toBe(true);
+  });
+
+  test("returns true for inactive", () => {
+    expect(isClosedSessionStatus("inactive")).toBe(true);
+  });
+
+  test("returns false for active", () => {
+    expect(isClosedSessionStatus("active")).toBe(false);
+  });
+
+  test("returns false for null", () => {
+    expect(isClosedSessionStatus(null)).toBe(false);
+  });
+
+  test("returns false for undefined", () => {
+    expect(isClosedSessionStatus(undefined)).toBe(false);
+  });
+});
+
+// =============================================================================
+// truncate()
+// =============================================================================
+
+describe("truncate", () => {
+  test("returns empty string for null", () => {
+    expect(truncate(null, 10)).toBe("");
+  });
+
+  test("returns empty string for undefined", () => {
+    expect(truncate(undefined, 10)).toBe("");
+  });
+
+  test("returns original string when shorter than max", () => {
+    expect(truncate("hello", 10)).toBe("hello");
+  });
+
+  test("returns original string when exactly max length", () => {
+    expect(truncate("12345", 5)).toBe("12345");
+  });
+
+  test("truncates and appends ... when longer than max", () => {
+    expect(truncate("hello world", 5)).toBe("hello...");
+  });
+});
+
+// =============================================================================
+// generateMessageUuid()
+// =============================================================================
+
+describe("generateMessageUuid", () => {
+  test("returns a non-empty string", () => {
+    const uuid = generateMessageUuid();
+    expect(typeof uuid).toBe("string");
+    expect(uuid.length).toBeGreaterThan(0);
+  });
+});
+
+// =============================================================================
+// extractEventText()
+// =============================================================================
+
+describe("extractEventText", () => {
+  test("returns empty string for null", () => {
+    expect(extractEventText(null)).toBe("");
+  });
+
+  test("returns empty string for undefined", () => {
+    expect(extractEventText(undefined)).toBe("");
+  });
+
+  test("returns empty string for non-object", () => {
+    expect(extractEventText("string" as any)).toBe("");
+  });
+
+  test("extracts payload.content string", () => {
+    expect(extractEventText({ content: "hello" })).toBe("hello");
+  });
+
+  test("extracts from message.content text blocks array", () => {
+    const payload = {
+      message: {
+        content: [
+          { type: "text", text: "line 1" },
+          { type: "text", text: "line 2" },
+        ],
+      },
+    };
+    expect(extractEventText(payload)).toBe("line 1\nline 2");
+  });
+
+  test("ignores non-text blocks", () => {
+    const payload = {
+      message: {
+        content: [
+          { type: "image", data: "base64..." },
+          { type: "text", text: "only text" },
+        ],
+      },
+    };
+    expect(extractEventText(payload)).toBe("only text");
+  });
+
+  test("returns empty string when message.content has no text blocks", () => {
+    const payload = {
+      message: { content: [{ type: "image", data: "base64" }] },
+    };
+    expect(extractEventText(payload)).toBe("");
+  });
+
+  test("returns empty string for empty object", () => {
+    expect(extractEventText({})).toBe("");
+  });
+});
+
+// =============================================================================
+// isConversationClearedStatus()
+// =============================================================================
+
+describe("isConversationClearedStatus", () => {
+  test("returns true when payload.status is conversation_cleared", () => {
+    expect(isConversationClearedStatus({ status: "conversation_cleared" })).toBe(true);
+  });
+
+  test("returns true when payload.raw.status is conversation_cleared", () => {
+    expect(isConversationClearedStatus({ raw: { status: "conversation_cleared" } })).toBe(true);
+  });
+
+  test("returns false for null", () => {
+    expect(isConversationClearedStatus(null)).toBe(false);
+  });
+
+  test("returns false for undefined", () => {
+    expect(isConversationClearedStatus(undefined)).toBe(false);
+  });
+
+  test("returns false for other status", () => {
+    expect(isConversationClearedStatus({ status: "active" })).toBe(false);
+  });
+
+  test("returns false when raw has different status", () => {
+    expect(isConversationClearedStatus({ raw: { status: "running" } })).toBe(false);
+  });
+
+  test("returns false for empty object", () => {
+    expect(isConversationClearedStatus({})).toBe(false);
+  });
+});