@clawos-dev/clawd 0.2.151-beta.319.24d7cf9 → 0.2.152-beta.320.c7b0769

package/dist/cli.cjs

@@ -4536,6 +4536,9 @@ var init_persona_schemas = __esm({
         enabled: external_exports.boolean().optional(),
         autoAllowBashIfSandboxed: external_exports.boolean().optional(),
         allowUnsandboxedCommands: external_exports.boolean().optional(),
+        // 命令前缀白名单（CC `sandbox.excludedCommands`）：匹配的命令在沙箱外运行，
+        // 用于需逃出沙箱的工具（如 'docker *' / 'aliyun *' 要访问宿主 socket / 凭证）。
+        excludedCommands: external_exports.array(external_exports.string()).optional(),
         filesystem: external_exports.object({
           denyRead: external_exports.array(external_exports.string()).optional(),
           allowRead: external_exports.array(external_exports.string()).optional(),
@@ -32009,6 +32012,9 @@ function applyProfile(base, profile) {
     if (pn.allowedDomains) n.allowedDomains = unionArr(n.allowedDomains, pn.allowedDomains);
     if (pn.allowLocalBinding !== void 0) n.allowLocalBinding = pn.allowLocalBinding;
   }
+  if (profile.sandbox?.excludedCommands) {
+    base.sandbox.excludedCommands = unionArr(base.sandbox.excludedCommands, profile.sandbox.excludedCommands);
+  }
   return base;
 }
 function composeGuestSandbox(base, userWorkDir, spawnCwd) {
@@ -35695,7 +35701,12 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "doc",
     public: false,
-    sandboxProfile: DEFAULT_BYPASS_PROFILE
+    // 同 DEFAULT_BYPASS_PROFILE（bypassPermissions + 最严格沙箱），额外把 aliyun CLI 放沙箱外跑：
+    // 上传 HTML 演示稿到 OSS 需 aliyun 读宿主凭证 / 外联，沙箱内会被拦。
+    sandboxProfile: {
+      permissions: { defaultMode: "bypassPermissions" },
+      sandbox: { excludedCommands: ["aliyun *"] }
+    }
   }
 ];
 function bundleSiblingFromArgv(argv1, sibling) {
@@ -37161,68 +37172,40 @@ function observeReady(surface, opts) {
     }
   };
 }
-var BYPASS_SETTLE_MS = 300;
 function createBootGate(pty, logger) {
   const stripAnsi = (s) => s.replace(/\x1b\[[0-9;?]*C/g, " ").replace(/\x1b\[[0-9;?]*[a-zA-Z]/g, "").replace(/\x1b\][^\x07]*\x07/g, "").replace(/\x1b[NOPM=>78]/g, "").replace(/[\x00-\x1f\x7f]/g, " ");
   const popups = {
-    trust: {
-      handled: false,
-      fired: false,
-      timer: void 0,
-      regex: /trust\s*this\s*folder/i,
-      accept: "\r",
-      settleMs: 0,
-      label: "trust-folder"
-    },
+    trust: { handled: false, regex: /trust this folder/i, accept: "\r", label: "trust-folder" },
     bypass: {
       handled: false,
-      fired: false,
-      timer: void 0,
-      regex: /Bypass\s*Permissions\s*mode|By\s*proceeding/i,
+      regex: /Bypass Permissions mode|By proceeding/i,
       accept: "2\r",
-      settleMs: BYPASS_SETTLE_MS,
       label: "bypass-warning"
     }
   };
   let scanBuf = "";
-  const press = (popup) => {
-    popup.fired = true;
-    logger?.debug(`${popup.label} popup auto-yes`);
-    try {
-      pty.write(popup.accept);
-    } catch (err) {
-      logger?.warn(`${popup.label} auto-yes write failed`, {
-        error: err.message
-      });
-    }
-  };
-  let disposed = false;
   return {
     feedBytes(data) {
-      if (disposed) return;
       scanBuf += data.toString("utf8");
       const cleanBuf = stripAnsi(scanBuf).replace(/\s+/g, " ");
       for (const popup of Object.values(popups)) {
         if (popup.handled) continue;
         if (popup.regex.test(cleanBuf)) {
           popup.handled = true;
+          logger?.debug(`${popup.label} popup auto-yes`);
+          try {
+            pty.write(popup.accept);
+          } catch (err) {
+            logger?.warn(`${popup.label} auto-yes write failed`, {
+              error: err.message
+            });
+          }
           scanBuf = "";
-          if (popup.settleMs === 0) press(popup);
-        }
-      }
-      for (const popup of Object.values(popups)) {
-        if (popup.handled && popup.settleMs > 0 && !popup.fired) {
-          if (popup.timer) clearTimeout(popup.timer);
-          popup.timer = setTimeout(() => press(popup), popup.settleMs);
         }
       }
       if (scanBuf.length > 8192) scanBuf = scanBuf.slice(-4096);
     },
     dispose() {
-      disposed = true;
-      for (const popup of Object.values(popups)) {
-        if (popup.timer) clearTimeout(popup.timer);
-      }
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.151-beta.319.24d7cf9",
+  "version": "0.2.152-beta.320.c7b0769",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",