@clawos-dev/clawd 0.2.151-beta.319.24d7cf9 → 0.2.151

package/dist/cli.cjs

@@ -35695,7 +35695,35 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "doc",
     public: false,
-    sandboxProfile: DEFAULT_BYPASS_PROFILE
+    // 与 app-builder 对齐"调用阿里云的工作方式"（owner 2026-06-17 要求）：开发型 profile —— 放开文件/web
+    // 工具 + node/pnpm 工具链精确路径 + 出站 TLD 通配白名单。html-slides 需要联网（git clone frontend-slides
+    // skill、调阿里云 CLI/SDK）。
+    // 阿里云凭证：**复用共享 deploy-kit 单源**（$HOME/.clawd/deploy-kit/.secrets/aliyun.env，全 FC persona 共用、
+    // seedDeployKit 每次安装都铺），不在 persona 目录另存一份。app-builder 的 FC 部署走 daemon 侧脚本（沙箱外）
+    // 故其 profile 无需 carve 这个路径；html-slides 没有 daemon 侧流程、要在 cc 沙箱内直接 `set -a; . $HOME/.clawd/
+    // deploy-kit/.secrets/aliyun.env; set +a` 后调 aliyun CLI（env 凭证绕过沙箱外的 ~/.aliyun/），所以这里**额外**把
+    // 这个凭证文件加进 allowRead（denyRead '~/' 之上的精确凿洞，单文件、最小暴露，同 ~/.npmrc 先例）。
+    sandboxProfile: {
+      permissions: {
+        defaultMode: "bypassPermissions",
+        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"]
+      },
+      sandbox: {
+        filesystem: {
+          allowRead: ["~/.npmrc", "~/Library/Preferences/pnpm", "~/.nvm", "~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store", "~/.clawd/deploy-kit/.secrets/aliyun.env"],
+          allowWrite: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"]
+        },
+        network: {
+          allowedDomains: ["*.com", "*.org", "*.io", "*.net", "*.dev", "*.app", "*.cn", "*.co", "*.chat", "*.ai"],
+          allowLocalBinding: true
+        }
+      }
+    },
+    codexSandbox: {
+      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      denyRead: [".secrets/**"],
+      network: true
+    }
   }
 ];
 function bundleSiblingFromArgv(argv1, sibling) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.151-beta.319.24d7cf9",
+  "version": "0.2.151",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",