@clawos-dev/clawd 0.2.150-beta.318.cdc6d2f → 0.2.151-beta.319.24d7cf9

package/dist/cli.cjs

@@ -35695,35 +35695,7 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "doc",
     public: false,
-    // 与 app-builder 对齐"调用阿里云的工作方式"（owner 2026-06-17 要求）：开发型 profile —— 放开文件/web
-    // 工具 + node/pnpm 工具链精确路径 + 出站 TLD 通配白名单。html-slides 需要联网（git clone frontend-slides
-    // skill、调阿里云 CLI/SDK）。
-    // 阿里云凭证：**复用共享 deploy-kit 单源**（$HOME/.clawd/deploy-kit/.secrets/aliyun.env，全 FC persona 共用、
-    // seedDeployKit 每次安装都铺），不在 persona 目录另存一份。app-builder 的 FC 部署走 daemon 侧脚本（沙箱外）
-    // 故其 profile 无需 carve 这个路径；html-slides 没有 daemon 侧流程、要在 cc 沙箱内直接 `set -a; . $HOME/.clawd/
-    // deploy-kit/.secrets/aliyun.env; set +a` 后调 aliyun CLI（env 凭证绕过沙箱外的 ~/.aliyun/），所以这里**额外**把
-    // 这个凭证文件加进 allowRead（denyRead '~/' 之上的精确凿洞，单文件、最小暴露，同 ~/.npmrc 先例）。
-    sandboxProfile: {
-      permissions: {
-        defaultMode: "bypassPermissions",
-        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"]
-      },
-      sandbox: {
-        filesystem: {
-          allowRead: ["~/.npmrc", "~/Library/Preferences/pnpm", "~/.nvm", "~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store", "~/.clawd/deploy-kit/.secrets/aliyun.env"],
-          allowWrite: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"]
-        },
-        network: {
-          allowedDomains: ["*.com", "*.org", "*.io", "*.net", "*.dev", "*.app", "*.cn", "*.co", "*.chat", "*.ai"],
-          allowLocalBinding: true
-        }
-      }
-    },
-    codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
-      denyRead: [".secrets/**"],
-      network: true
-    }
+    sandboxProfile: DEFAULT_BYPASS_PROFILE
   }
 ];
 function bundleSiblingFromArgv(argv1, sibling) {
@@ -37189,40 +37161,68 @@ function observeReady(surface, opts) {
     }
   };
 }
+var BYPASS_SETTLE_MS = 300;
 function createBootGate(pty, logger) {
   const stripAnsi = (s) => s.replace(/\x1b\[[0-9;?]*C/g, " ").replace(/\x1b\[[0-9;?]*[a-zA-Z]/g, "").replace(/\x1b\][^\x07]*\x07/g, "").replace(/\x1b[NOPM=>78]/g, "").replace(/[\x00-\x1f\x7f]/g, " ");
   const popups = {
-    trust: { handled: false, regex: /trust this folder/i, accept: "\r", label: "trust-folder" },
+    trust: {
+      handled: false,
+      fired: false,
+      timer: void 0,
+      regex: /trust\s*this\s*folder/i,
+      accept: "\r",
+      settleMs: 0,
+      label: "trust-folder"
+    },
     bypass: {
       handled: false,
-      regex: /Bypass Permissions mode|By proceeding/i,
+      fired: false,
+      timer: void 0,
+      regex: /Bypass\s*Permissions\s*mode|By\s*proceeding/i,
       accept: "2\r",
+      settleMs: BYPASS_SETTLE_MS,
       label: "bypass-warning"
     }
   };
   let scanBuf = "";
+  const press = (popup) => {
+    popup.fired = true;
+    logger?.debug(`${popup.label} popup auto-yes`);
+    try {
+      pty.write(popup.accept);
+    } catch (err) {
+      logger?.warn(`${popup.label} auto-yes write failed`, {
+        error: err.message
+      });
+    }
+  };
+  let disposed = false;
   return {
     feedBytes(data) {
+      if (disposed) return;
       scanBuf += data.toString("utf8");
       const cleanBuf = stripAnsi(scanBuf).replace(/\s+/g, " ");
       for (const popup of Object.values(popups)) {
         if (popup.handled) continue;
         if (popup.regex.test(cleanBuf)) {
           popup.handled = true;
-          logger?.debug(`${popup.label} popup auto-yes`);
-          try {
-            pty.write(popup.accept);
-          } catch (err) {
-            logger?.warn(`${popup.label} auto-yes write failed`, {
-              error: err.message
-            });
-          }
           scanBuf = "";
+          if (popup.settleMs === 0) press(popup);
+        }
+      }
+      for (const popup of Object.values(popups)) {
+        if (popup.handled && popup.settleMs > 0 && !popup.fired) {
+          if (popup.timer) clearTimeout(popup.timer);
+          popup.timer = setTimeout(() => press(popup), popup.settleMs);
         }
       }
       if (scanBuf.length > 8192) scanBuf = scanBuf.slice(-4096);
     },
     dispose() {
+      disposed = true;
+      for (const popup of Object.values(popups)) {
+        if (popup.timer) clearTimeout(popup.timer);
+      }
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.150-beta.318.cdc6d2f",
+  "version": "0.2.151-beta.319.24d7cf9",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",