@clawos-dev/clawd 0.2.102 → 0.2.103-beta.198.c756b33

package/dist/cli.cjs

@@ -5367,6 +5367,20 @@ var init_received_capability = __esm({
 });
 
 // ../protocol/src/extension.ts
+function isAllowedHostedUrl(raw) {
+  let u;
+  try {
+    u = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (u.protocol === "https:") return true;
+  if (u.protocol === "http:" && LOCALHOST_HOSTS.has(u.hostname)) return true;
+  return false;
+}
+function manifestMode(m2) {
+  return m2.entry?.url ? "hosted" : "local";
+}
 function ownerNamespace(ownerPrincipalId) {
   let h = 2166136261;
   for (let i = 0; i < ownerPrincipalId.length; i++) {
@@ -5408,7 +5422,7 @@ function parseOrThrow(v2) {
   const [a, b2, c] = v2.split(".").map((p2) => parseInt(p2, 10));
   return [a, b2, c];
 }
-var EXT_ID_REGEX, ExtensionStateSchema, ExtensionManifestSchema, ExtensionRecordSchema, PublishedSnapshotSchema, ChannelRefSchema, SourceRefSchema, PublishedExtensionRecordSchema, PublishCheckSchema, PublishStatusResultSchema;
+var EXT_ID_REGEX, ExtensionStateSchema, LOCALHOST_HOSTS, ExtensionManifestSchema, ExtensionTargetSchema, ExtensionRecordSchema, PublishedSnapshotSchema, ChannelRefSchema, SourceRefSchema, PublishedExtensionRecordSchema, PublishCheckSchema, PublishStatusResultSchema;
 var init_extension = __esm({
   "../protocol/src/extension.ts"() {
     "use strict";
@@ -5421,18 +5435,38 @@ var init_extension = __esm({
       "crashed",
       "invalid"
     ]);
+    LOCALHOST_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1"]);
     ExtensionManifestSchema = external_exports.object({
       id: external_exports.string().regex(EXT_ID_REGEX),
       name: external_exports.string().min(1),
       version: external_exports.string().min(1),
       apiVersion: external_exports.literal("1"),
+      runtime: external_exports.object({ startCommand: external_exports.string().min(1) }).passthrough().optional(),
       entry: external_exports.object({
-        ui: external_exports.string().min(1).optional()
-      }).strict().optional(),
-      runtime: external_exports.object({
-        startCommand: external_exports.string().min(1)
-      }).passthrough()
-    }).passthrough();
+        url: external_exports.string().url().refine(isAllowedHostedUrl, {
+          message: "INVALID_URL_SCHEME: only https or http://localhost is allowed"
+        })
+      }).strict().optional()
+    }).passthrough().superRefine((m2, ctx) => {
+      const hasRuntime = !!m2.runtime;
+      const hasUrl = !!m2.entry?.url;
+      if (hasRuntime && hasUrl) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          message: "INVALID_MANIFEST: entry.url and runtime cannot coexist"
+        });
+      }
+      if (!hasRuntime && !hasUrl) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          message: "INVALID_MANIFEST: must have either entry.url or runtime"
+        });
+      }
+    });
+    ExtensionTargetSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({ kind: external_exports.literal("local"), port: external_exports.number().int().min(1).max(65535) }),
+      external_exports.object({ kind: external_exports.literal("hosted"), url: external_exports.string().url() })
+    ]);
     ExtensionRecordSchema = external_exports.discriminatedUnion("state", [
       external_exports.object({
         extId: external_exports.string(),
@@ -5448,7 +5482,7 @@ var init_extension = __esm({
         extId: external_exports.string(),
         manifest: ExtensionManifestSchema,
         state: external_exports.literal("running"),
-        port: external_exports.number().int().min(1).max(65535)
+        target: ExtensionTargetSchema
       }),
       external_exports.object({
         extId: external_exports.string(),
@@ -32546,12 +32580,11 @@ var SessionManager = class {
   // 新 client 通过 session:subscribe 接入时由 onSubscribe hook 取 getPtyReplay(sessionId)
   // 把屏幕快照定向 emit，解决"刷新页面 / 第二个 tab 接入时 xterm 白屏"
   ptyReplaysByToolSid = /* @__PURE__ */ new Map();
-  // TUI 模式：toolSessionId → @xterm/headless TerminalSurface（单一虚拟终端，popup / ready
-  // observer 都从这一份 buffer 派生状态）。ClaudeTuiAdapter spawn 时通过 onSurfaceRegister
-  // callback 写入；exit 时 onSurfaceUnregister 清理。
-  // manager.resizePty 用此映射把 UI 的 session:pty:resize 同步到 surface 内部 buffer，
+  // TUI 模式：toolSessionId → @xterm/headless PopupDetector。
+  // ClaudeTuiAdapter spawn 时通过 onDetectorRegister callback 写入；exit 时 onDetectorUnregister 清理。
+  // manager.resizePty 用此映射把 UI 的 session:pty:resize 同步到 detector 内部 buffer，
   // 保证 snapshot serialize 时 cursor positioning 与 UI xterm 实际尺寸一致。
-  surfacesByToolSid = /* @__PURE__ */ new Map();
+  detectorsByToolSid = /* @__PURE__ */ new Map();
   // 仅 mode='tui' 需要：index.ts 装配阶段在 observer 构造后注入。
   // observer.onEvent 要回灌 manager.feedObserverEvents，所以 observer 必须晚于 manager
   // 构造；反过来 manager 又要在 mode='tui' 下 spawn session 时 attach observer。setter 解循环
@@ -33825,18 +33858,18 @@ var SessionManager = class {
     if (!tsid) return void 0;
     return this.ptyTransports.get(tsid);
   }
-  /** ClaudeTuiAdapter spawn 时注册 surface ref；同一 tsid 重 spawn 会覆盖 */
-  registerSurface(toolSessionId, surface) {
-    this.surfacesByToolSid.set(toolSessionId, surface);
+  /** ClaudeTuiAdapter spawn 时注册 detector ref；同一 tsid 重 spawn 会覆盖 */
+  registerDetector(toolSessionId, detector) {
+    this.detectorsByToolSid.set(toolSessionId, detector);
   }
   /** spawn 进程 exit 时清理 */
-  unregisterSurface(toolSessionId) {
-    this.surfacesByToolSid.delete(toolSessionId);
+  unregisterDetector(toolSessionId) {
+    this.detectorsByToolSid.delete(toolSessionId);
   }
   /**
-   * 同时 resize pty 子进程和 surface buffer：UI session:pty:resize 入口走这个。
-   * 顺序：pty.resize 在前，surface.resize 在后 —— pty 是真正的 CC 子进程视图，必须先成功；
-   * surface 只是 daemon 端镜像，任一步失败都返 false。
+   * 同时 resize pty 子进程和 detector buffer：UI session:pty:resize 入口走这个。
+   * 顺序：pty.resize 在前，detector.resize 在后 —— pty 是真正的 CC 子进程视图，必须先成功；
+   * detector 只是 daemon 端镜像，任一步失败都返 false。
    * 找不到 runner / toolSessionId / pty 任一缺失 → 返 false，handler 静默给 UI 报 ok=false 不抛错。
    */
   resizePty(sessionId, cols, rows) {
@@ -33851,8 +33884,8 @@ var SessionManager = class {
     } catch {
       return false;
     }
-    const surface = this.surfacesByToolSid.get(tsid);
-    if (surface) surface.resize(cols, rows);
+    const detector = this.detectorsByToolSid.get(tsid);
+    if (detector) detector.resize(cols, rows);
     return true;
   }
   /**
@@ -35150,30 +35183,59 @@ var POPUP_FOOTER_PATTERNS = [
   { kind: "permission", regex: /Tab to amend|Do you want to proceed/i },
   { kind: "question", regex: /Enter to select|↑\/↓ to navigate/i }
 ];
-function createTerminalSurface(opts) {
+function createPopupDetector(opts) {
   const term = new Terminal({
-    cols: opts?.cols ?? 120,
-    rows: opts?.rows ?? 40,
-    scrollback: opts?.scrollback ?? 1e3,
+    cols: opts.cols ?? 120,
+    rows: opts.rows ?? 40,
+    scrollback: 1e3,
     allowProposedApi: true
   });
   const serializeAddon = new D();
   term.loadAddon(serializeAddon);
+  let visible = null;
+  let pendingClear = null;
   let parseSeq = 0;
   let pendingParse = 0;
   let drainWaiters = [];
   let disposed = false;
-  const observers = [];
-  const collectLines = () => {
+  const scanFooter = () => {
     const buf = term.buffer.active;
-    const lines = new Array(buf.length);
     for (let i = 0; i < buf.length; i++) {
       const line = buf.getLine(i);
-      lines[i] = line ? line.translateToString(true) : "";
+      if (!line) continue;
+      const text = line.translateToString(true);
+      if (!text) continue;
+      for (const p2 of POPUP_FOOTER_PATTERNS) {
+        if (p2.regex.test(text)) return p2.kind;
+      }
+    }
+    return null;
+  };
+  const tick = () => {
+    const matched = scanFooter();
+    if (matched && visible === null) {
+      visible = matched;
+      opts.onTransition(matched, true);
+    } else if (matched && visible !== null) {
+      if (pendingClear) {
+        clearTimeout(pendingClear);
+        pendingClear = null;
+      }
+    } else if (!matched && visible !== null && !pendingClear) {
+      const toClear = visible;
+      pendingClear = setTimeout(() => {
+        pendingClear = null;
+        if (visible === toClear) {
+          visible = null;
+          opts.onTransition(toClear, false);
+        }
+      }, opts.clearQuietMs);
     }
-    return lines;
   };
   return {
+    get visibleKind() {
+      return visible;
+    },
     get parseSeq() {
       return parseSeq;
     },
@@ -35187,10 +35249,7 @@ function createTerminalSurface(opts) {
           }
           if (typeof seq === "number" && seq > parseSeq) parseSeq = seq;
           pendingParse--;
-          if (observers.length > 0) {
-            const lines = collectLines();
-            for (const cb of [...observers]) cb(lines);
-          }
+          tick();
           if (pendingParse === 0 && drainWaiters.length > 0) {
             const waiters = drainWaiters;
             drainWaiters = [];
@@ -35212,93 +35271,42 @@ function createTerminalSurface(opts) {
       } catch {
       }
     },
-    serialize() {
-      return serializeAddon.serialize({ scrollback: 1e3 });
-    },
     dispose() {
       disposed = true;
-      pendingParse = 0;
+      if (pendingClear) {
+        clearTimeout(pendingClear);
+        pendingClear = null;
+      }
       const waiters = drainWaiters;
       drainWaiters = [];
       for (const w2 of waiters) w2();
-      observers.length = 0;
       serializeAddon.dispose();
       term.dispose();
     },
-    onTick(cb) {
-      observers.push(cb);
-      return () => {
-        const i = observers.indexOf(cb);
-        if (i >= 0) observers.splice(i, 1);
-      };
+    serialize() {
+      return serializeAddon.serialize({ scrollback: 1e3 });
     }
   };
 }
-function observePopup(surface, opts) {
-  let visible = null;
-  let pendingClear = null;
-  const scanFooter = (lines) => {
-    for (const text of lines) {
-      if (!text) continue;
-      for (const p2 of POPUP_FOOTER_PATTERNS) {
-        if (p2.regex.test(text)) return p2.kind;
-      }
-    }
-    return null;
-  };
-  const unsubscribe = surface.onTick((lines) => {
-    const matched = scanFooter(lines);
-    const inputFrameVisible = opts.getInputFrameVisible();
-    if (visible === null) {
-      if (matched && !inputFrameVisible) {
-        visible = matched;
-        opts.onTransition(matched, true);
-      }
-      return;
-    }
-    if (!inputFrameVisible) {
-      if (pendingClear) {
-        clearTimeout(pendingClear);
-        pendingClear = null;
-      }
-      return;
-    }
-    if (!pendingClear) {
-      const toClear = visible;
-      pendingClear = setTimeout(() => {
-        pendingClear = null;
-        if (visible === toClear) {
-          visible = null;
-          opts.onTransition(toClear, false);
-        }
-      }, opts.clearQuietMs);
-    }
+function createReadyDetector(opts) {
+  const term = new Terminal({
+    cols: opts.cols ?? 120,
+    rows: opts.rows ?? 40,
+    scrollback: 200,
+    allowProposedApi: true
   });
-  return {
-    get visibleKind() {
-      return visible;
-    },
-    dispose() {
-      unsubscribe();
-      if (pendingClear) {
-        clearTimeout(pendingClear);
-        pendingClear = null;
-      }
-    }
-  };
-}
-function observeReady(surface, opts) {
-  let prevReady = false;
   let quietTimer = null;
-  let unsubscribed = false;
-  let latestLines = [];
-  const scanReadyFrame = (lines) => {
+  let disposed = false;
+  const scanReadyFrame = () => {
+    const buf = term.buffer.active;
     let prevHasDivider = false;
-    for (const text of lines) {
-      if (!text) {
+    for (let i = 0; i < buf.length; i++) {
+      const line = buf.getLine(i);
+      if (!line) {
         prevHasDivider = false;
         continue;
       }
+      const text = line.translateToString(true);
       const hasPrompt = /^❯/.test(text);
       const hasDivider = /─{20,}/.test(text);
       if (hasPrompt && prevHasDivider) return true;
@@ -35321,18 +35329,18 @@ function observeReady(surface, opts) {
   };
   const quietFire = () => {
     quietTimer = null;
-    if (unsubscribed) return;
-    if (!scanReadyFrame(latestLines)) {
+    if (disposed) return;
+    if (!scanReadyFrame()) {
       dbg({ event: "quiet-fire-but-not-ready-anymore" });
       return;
     }
     dbg({ event: "quiet-fire \u2192 onReady" });
     opts.onReady();
   };
-  const unsubscribe = surface.onTick((lines) => {
-    if (unsubscribed) return;
-    latestLines = lines;
-    const ready = scanReadyFrame(lines);
+  let prevReady = false;
+  const tick = () => {
+    if (disposed) return;
+    const ready = scanReadyFrame();
     if (!ready) {
       clearQuiet();
       if (prevReady) {
@@ -35347,15 +35355,19 @@ function observeReady(surface, opts) {
     }
     clearQuiet();
     quietTimer = setTimeout(quietFire, opts.quietMs);
-  });
+  };
   return {
-    get inputFrameVisible() {
-      return prevReady;
+    writeBytes(data) {
+      if (disposed) return;
+      term.write(data, () => {
+        if (disposed) return;
+        tick();
+      });
     },
     dispose() {
-      unsubscribed = true;
-      unsubscribe();
+      disposed = true;
       clearQuiet();
+      term.dispose();
     }
   };
 }
@@ -35437,18 +35449,7 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
       tag: ctx.toolSessionId ?? "no-tsid"
     });
     const bootGate = createBootGate(pty, this.tuiLogger);
-    const surface = createTerminalSurface();
-    const readyObserver = observeReady(surface, {
-      quietMs: 500,
-      onReady: () => {
-        if (!ctx.toolSessionId || !this.tuiOpts.onReady) return;
-        this.tuiLogger?.debug("ready-detected", { toolSessionId: ctx.toolSessionId });
-        this.tuiOpts.onReady(ctx.toolSessionId);
-      },
-      // [RG-DBG] 排查 ReadyGate 偶现卡输入用；定位完跟所有 [RG] 日志一起删
-      logger: this.tuiLogger
-    });
-    const popupObserver = observePopup(surface, {
+    const detector = createPopupDetector({
       clearQuietMs: 200,
       onTransition: (kind, visible) => {
         if (!ctx.toolSessionId || !this.tuiOpts.onPopupTransition) return;
@@ -35458,21 +35459,29 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
           visible
         });
         this.tuiOpts.onPopupTransition(ctx.toolSessionId, kind, visible);
+      }
+    });
+    const readyDetector = createReadyDetector({
+      quietMs: 500,
+      onReady: () => {
+        if (!ctx.toolSessionId || !this.tuiOpts.onReady) return;
+        this.tuiLogger?.debug("ready-detected", { toolSessionId: ctx.toolSessionId });
+        this.tuiOpts.onReady(ctx.toolSessionId);
       },
-      // popup_close 信号源：ready observer 扫到 ❯ + ─{20,} 输入框结构 → 输入框可见 → popup 已关
-      getInputFrameVisible: () => readyObserver.inputFrameVisible
+      // [RG-DBG] 排查 ReadyGate 偶现卡输入用；定位完跟所有 [RG] 日志一起删
+      logger: this.tuiLogger
     });
-    if (ctx.toolSessionId && this.tuiOpts.onSurfaceRegister) {
-      this.tuiOpts.onSurfaceRegister(ctx.toolSessionId, surface);
+    if (ctx.toolSessionId && this.tuiOpts.onDetectorRegister) {
+      this.tuiOpts.onDetectorRegister(ctx.toolSessionId, detector);
     }
     let chunkSeq = 0;
     if (ctx.toolSessionId && this.tuiOpts.onPtyReplayRegister) {
       this.tuiOpts.onPtyReplayRegister(ctx.toolSessionId, async () => {
-        await surface.drain();
+        await detector.drain();
         return {
-          data: surface.serialize(),
-          popupKind: popupObserver.visibleKind,
-          atSeq: surface.parseSeq
+          data: detector.serialize(),
+          popupKind: detector.visibleKind,
+          atSeq: detector.parseSeq
         };
       });
     }
@@ -35489,7 +35498,8 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
         this.tuiOpts.onPtyData(ctx.toolSessionId, merged.toString("base64"), seq);
       }
       bootGate.feedBytes(merged);
-      void surface.writeBytes(merged.toString("utf8"), seq);
+      void detector.writeBytes(merged.toString("utf8"), seq);
+      readyDetector.writeBytes(merged.toString("utf8"));
       if (ctx.toolSessionId) {
         probePtyDataThrottled(ctx.toolSessionId, merged.length, merged);
       }
@@ -35507,15 +35517,14 @@ var ClaudeTuiAdapter = class extends ClaudeAdapter {
         flushCoalesced();
       }
       bootGate.dispose();
-      readyObserver.dispose();
-      popupObserver.dispose();
-      if (ctx.toolSessionId && this.tuiOpts.onSurfaceUnregister) {
-        this.tuiOpts.onSurfaceUnregister(ctx.toolSessionId);
+      readyDetector.dispose();
+      if (ctx.toolSessionId && this.tuiOpts.onDetectorUnregister) {
+        this.tuiOpts.onDetectorUnregister(ctx.toolSessionId);
       }
       if (ctx.toolSessionId && this.tuiOpts.onPtyUnregister) {
         this.tuiOpts.onPtyUnregister(ctx.toolSessionId);
       }
-      surface.dispose();
+      detector.dispose();
     });
     return ptyChild;
   }
@@ -37791,12 +37800,6 @@ async function importZip(buf, root) {
   } catch (e) {
     throw new ImportError("INVALID_MANIFEST", `manifest.json: ${e.message}`);
   }
-  if (manifestJson && typeof manifestJson === "object" && "entry" in manifestJson && manifestJson.entry?.url !== void 0) {
-    throw new ImportError(
-      "REMOTE_NOT_SUPPORTED",
-      "entry.url (remote mode) is not supported in v1"
-    );
-  }
   const result = ExtensionManifestSchema.safeParse(manifestJson);
   if (!result.success) {
     throw new ImportError(
@@ -37805,6 +37808,16 @@ async function importZip(buf, root) {
     );
   }
   const manifest = result.data;
+  if (manifestMode(manifest) === "hosted") {
+    const filenames = Object.keys(zip.files).filter((n) => !zip.files[n].dir);
+    const extras = filenames.filter((n) => n !== "manifest.json");
+    if (extras.length > 0) {
+      throw new ImportError(
+        "HOSTED_ZIP_EXTRA_FILES",
+        `hosted extension may only contain manifest.json (extra: ${extras.join(", ")})`
+      );
+    }
+  }
   const destDir = import_node_path19.default.join(root, manifest.id);
   let destExists = false;
   try {
@@ -40963,10 +40976,17 @@ function pickExtId(frame) {
 }
 function composeState(rec, running, crashed, getPort) {
   if (rec.state === "invalid") return rec;
+  if (manifestMode(rec.manifest) === "hosted") {
+    return {
+      ...rec,
+      state: "running",
+      target: { kind: "hosted", url: rec.manifest.entry.url }
+    };
+  }
   if (running.has(rec.extId)) {
     const port = getPort(rec.extId);
     if (port == null) return rec;
-    return { ...rec, state: "running", port };
+    return { ...rec, state: "running", target: { kind: "local", port } };
   }
   if (crashed.has(rec.extId)) return { ...rec, state: "crashed" };
   return rec;
@@ -40988,8 +41008,8 @@ function buildExtensionHandlers(deps) {
   const open = async (frame, _client, ctx) => {
     assertOwner(ctx);
     const extId = pickExtId(frame);
-    const { port } = await deps.runtime.open(extId);
-    return { response: { port } };
+    const target = await deps.runtime.open(extId);
+    return { response: target };
   };
   const close = async (frame, _client, ctx) => {
     assertOwner(ctx);
@@ -41539,16 +41559,20 @@ var Runtime = class {
   }
   async open(extId) {
     const existing = this.handles.get(extId);
-    if (existing) return { port: existing.port };
+    if (existing) return { kind: "local", port: existing.port };
     const records = await loadAll(this.root);
     const rec = records.find((r) => r.extId === extId);
     if (!rec) throw new RuntimeError("NOT_FOUND", `extension ${extId} not installed`);
     if (rec.state === "invalid")
       throw new RuntimeError("INVALID_MANIFEST", rec.invalidReason);
+    if (manifestMode(rec.manifest) === "hosted") {
+      return { kind: "hosted", url: rec.manifest.entry.url };
+    }
     const port = await this.allocator.allocate().catch(() => {
       throw new RuntimeError("PORT_EXHAUSTED", "no free port in configured range");
     });
-    const cmd = rec.manifest.runtime.startCommand.replace(
+    const startCommand = rec.manifest.runtime.startCommand;
+    const cmd = startCommand.replace(
       /\$CLAWOS_EXT_PORT/g,
       String(port)
     );
@@ -41586,7 +41610,7 @@ var Runtime = class {
     try {
       await this.waitForHealthz(port, () => earlyExit, handle);
       this.crashed.delete(extId);
-      return { port };
+      return { kind: "local", port };
     } catch (e) {
       if (this.handles.get(extId) === handle) {
         this.handles.delete(extId);
@@ -41968,8 +41992,8 @@ async function startDaemon(config) {
     onPtyData: (tsid, b64, seq) => manager.emitPtyChunk(tsid, b64, seq),
     onPopupTransition: (tsid, kind, visible) => manager.emitPopupTransition(tsid, kind, visible),
     onPtyReplayRegister: (tsid, replay) => manager.registerPtyReplay(tsid, replay),
-    onSurfaceRegister: (tsid, surface) => manager.registerSurface(tsid, surface),
-    onSurfaceUnregister: (tsid) => manager.unregisterSurface(tsid),
+    onDetectorRegister: (tsid, detector) => manager.registerDetector(tsid, detector),
+    onDetectorUnregister: (tsid) => manager.unregisterDetector(tsid),
     // ReadyGate v2：ReadyDetector emit ready 时投递 reducer 'ready-detected' input
     onReady: (tsid) => manager.dispatchReadyDetected(tsid)
   }) : new ClaudeAdapter({ logger, historyReader: new ClaudeHistoryReader() });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.102",
+  "version": "0.2.103-beta.198.c756b33",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",