@clawos-dev/clawd 0.2.151 → 0.2.152-beta.320.c7b0769

package/dist/cli.cjs

@@ -4536,6 +4536,9 @@ var init_persona_schemas = __esm({
         enabled: external_exports.boolean().optional(),
         autoAllowBashIfSandboxed: external_exports.boolean().optional(),
         allowUnsandboxedCommands: external_exports.boolean().optional(),
+        // 命令前缀白名单（CC `sandbox.excludedCommands`）：匹配的命令在沙箱外运行，
+        // 用于需逃出沙箱的工具（如 'docker *' / 'aliyun *' 要访问宿主 socket / 凭证）。
+        excludedCommands: external_exports.array(external_exports.string()).optional(),
         filesystem: external_exports.object({
           denyRead: external_exports.array(external_exports.string()).optional(),
           allowRead: external_exports.array(external_exports.string()).optional(),
@@ -32009,6 +32012,9 @@ function applyProfile(base, profile) {
     if (pn.allowedDomains) n.allowedDomains = unionArr(n.allowedDomains, pn.allowedDomains);
     if (pn.allowLocalBinding !== void 0) n.allowLocalBinding = pn.allowLocalBinding;
   }
+  if (profile.sandbox?.excludedCommands) {
+    base.sandbox.excludedCommands = unionArr(base.sandbox.excludedCommands, profile.sandbox.excludedCommands);
+  }
   return base;
 }
 function composeGuestSandbox(base, userWorkDir, spawnCwd) {
@@ -35695,34 +35701,11 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "doc",
     public: false,
-    // 与 app-builder 对齐"调用阿里云的工作方式"（owner 2026-06-17 要求）：开发型 profile —— 放开文件/web
-    // 工具 + node/pnpm 工具链精确路径 + 出站 TLD 通配白名单。html-slides 需要联网（git clone frontend-slides
-    // skill、调阿里云 CLI/SDK）。
-    // 阿里云凭证：**复用共享 deploy-kit 单源**（$HOME/.clawd/deploy-kit/.secrets/aliyun.env，全 FC persona 共用、
-    // seedDeployKit 每次安装都铺），不在 persona 目录另存一份。app-builder 的 FC 部署走 daemon 侧脚本（沙箱外）
-    // 故其 profile 无需 carve 这个路径；html-slides 没有 daemon 侧流程、要在 cc 沙箱内直接 `set -a; . $HOME/.clawd/
-    // deploy-kit/.secrets/aliyun.env; set +a` 后调 aliyun CLI（env 凭证绕过沙箱外的 ~/.aliyun/），所以这里**额外**把
-    // 这个凭证文件加进 allowRead（denyRead '~/' 之上的精确凿洞，单文件、最小暴露，同 ~/.npmrc 先例）。
+    // 同 DEFAULT_BYPASS_PROFILE（bypassPermissions + 最严格沙箱），额外把 aliyun CLI 放沙箱外跑：
+    // 上传 HTML 演示稿到 OSS 需 aliyun 读宿主凭证 / 外联，沙箱内会被拦。
     sandboxProfile: {
-      permissions: {
-        defaultMode: "bypassPermissions",
-        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"]
-      },
-      sandbox: {
-        filesystem: {
-          allowRead: ["~/.npmrc", "~/Library/Preferences/pnpm", "~/.nvm", "~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store", "~/.clawd/deploy-kit/.secrets/aliyun.env"],
-          allowWrite: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"]
-        },
-        network: {
-          allowedDomains: ["*.com", "*.org", "*.io", "*.net", "*.dev", "*.app", "*.cn", "*.co", "*.chat", "*.ai"],
-          allowLocalBinding: true
-        }
-      }
-    },
-    codexSandbox: {
-      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
-      denyRead: [".secrets/**"],
-      network: true
+      permissions: { defaultMode: "bypassPermissions" },
+      sandbox: { excludedCommands: ["aliyun *"] }
     }
   }
 ];
@@ -37189,68 +37172,40 @@ function observeReady(surface, opts) {
     }
   };
 }
-var BYPASS_SETTLE_MS = 300;
 function createBootGate(pty, logger) {
   const stripAnsi = (s) => s.replace(/\x1b\[[0-9;?]*C/g, " ").replace(/\x1b\[[0-9;?]*[a-zA-Z]/g, "").replace(/\x1b\][^\x07]*\x07/g, "").replace(/\x1b[NOPM=>78]/g, "").replace(/[\x00-\x1f\x7f]/g, " ");
   const popups = {
-    trust: {
-      handled: false,
-      fired: false,
-      timer: void 0,
-      regex: /trust\s*this\s*folder/i,
-      accept: "\r",
-      settleMs: 0,
-      label: "trust-folder"
-    },
+    trust: { handled: false, regex: /trust this folder/i, accept: "\r", label: "trust-folder" },
     bypass: {
       handled: false,
-      fired: false,
-      timer: void 0,
-      regex: /Bypass\s*Permissions\s*mode|By\s*proceeding/i,
+      regex: /Bypass Permissions mode|By proceeding/i,
       accept: "2\r",
-      settleMs: BYPASS_SETTLE_MS,
       label: "bypass-warning"
     }
   };
   let scanBuf = "";
-  const press = (popup) => {
-    popup.fired = true;
-    logger?.debug(`${popup.label} popup auto-yes`);
-    try {
-      pty.write(popup.accept);
-    } catch (err) {
-      logger?.warn(`${popup.label} auto-yes write failed`, {
-        error: err.message
-      });
-    }
-  };
-  let disposed = false;
   return {
     feedBytes(data) {
-      if (disposed) return;
       scanBuf += data.toString("utf8");
       const cleanBuf = stripAnsi(scanBuf).replace(/\s+/g, " ");
       for (const popup of Object.values(popups)) {
         if (popup.handled) continue;
         if (popup.regex.test(cleanBuf)) {
           popup.handled = true;
+          logger?.debug(`${popup.label} popup auto-yes`);
+          try {
+            pty.write(popup.accept);
+          } catch (err) {
+            logger?.warn(`${popup.label} auto-yes write failed`, {
+              error: err.message
+            });
+          }
           scanBuf = "";
-          if (popup.settleMs === 0) press(popup);
-        }
-      }
-      for (const popup of Object.values(popups)) {
-        if (popup.handled && popup.settleMs > 0 && !popup.fired) {
-          if (popup.timer) clearTimeout(popup.timer);
-          popup.timer = setTimeout(() => press(popup), popup.settleMs);
         }
       }
       if (scanBuf.length > 8192) scanBuf = scanBuf.slice(-4096);
     },
     dispose() {
-      disposed = true;
-      for (const popup of Object.values(popups)) {
-        if (popup.timer) clearTimeout(popup.timer);
-      }
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.151",
+  "version": "0.2.152-beta.320.c7b0769",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",