@clawos-dev/clawd 0.2.152-beta.320.c7b0769 → 0.2.152-beta.321.8f612f5

package/dist/cli.cjs

@@ -35701,11 +35701,37 @@ var DEFAULT_PERSONAS = [
     model: "opus",
     iconKey: "doc",
     public: false,
-    // 同 DEFAULT_BYPASS_PROFILE（bypassPermissions + 最严格沙箱），额外把 aliyun CLI 放沙箱外跑：
-    // 上传 HTML 演示稿到 OSS 需 aliyun 读宿主凭证 / 外联，沙箱内会被拦。
+    // 与 app-builder 对齐"调用阿里云的工作方式"（owner 2026-06-17 要求）：开发型 profile —— 放开文件/web
+    // 工具 + node/pnpm 工具链精确路径 + 出站 TLD 通配白名单。html-slides 需要联网（git clone frontend-slides
+    // skill、调阿里云 CLI/SDK）。
+    // 阿里云凭证：**复用共享 deploy-kit 单源**（$HOME/.clawd/deploy-kit/.secrets/aliyun.env，全 FC persona 共用、
+    // seedDeployKit 每次安装都铺），不在 persona 目录另存一份。app-builder 的 FC 部署走 daemon 侧脚本（沙箱外）
+    // 故其 profile 无需 carve 这个路径；html-slides 没有 daemon 侧流程、要在 cc 沙箱内直接 `set -a; . $HOME/.clawd/
+    // deploy-kit/.secrets/aliyun.env; set +a` 后调 aliyun CLI（env 凭证绕过沙箱外的 ~/.aliyun/），所以这里**额外**把
+    // 这个凭证文件加进 allowRead（denyRead '~/' 之上的精确凿洞，单文件、最小暴露，同 ~/.npmrc 先例）。
+    // excludedCommands: ['aliyun *'] —— 额外把 aliyun CLI 放沙箱外跑（逃出 seatbelt 直接用宿主凭证/网络），
+    // 与上面沙箱内 env 凭证方案并存，按运行时实际命令前缀匹配生效。
     sandboxProfile: {
-      permissions: { defaultMode: "bypassPermissions" },
-      sandbox: { excludedCommands: ["aliyun *"] }
+      permissions: {
+        defaultMode: "bypassPermissions",
+        allow: ["Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch"]
+      },
+      sandbox: {
+        filesystem: {
+          allowRead: ["~/.npmrc", "~/Library/Preferences/pnpm", "~/.nvm", "~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store", "~/.clawd/deploy-kit/.secrets/aliyun.env"],
+          allowWrite: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"]
+        },
+        network: {
+          allowedDomains: ["*.com", "*.org", "*.io", "*.net", "*.dev", "*.app", "*.cn", "*.co", "*.chat", "*.ai"],
+          allowLocalBinding: true
+        },
+        excludedCommands: ["aliyun *"]
+      }
+    },
+    codexSandbox: {
+      writableRoots: ["~/Library/pnpm", "~/.local/share/pnpm", "~/.local/state/pnpm", "~/.npm", "~/.pnpm-store"],
+      denyRead: [".secrets/**"],
+      network: true
     }
   }
 ];
@@ -37172,40 +37198,68 @@ function observeReady(surface, opts) {
     }
   };
 }
+var BYPASS_SETTLE_MS = 300;
 function createBootGate(pty, logger) {
   const stripAnsi = (s) => s.replace(/\x1b\[[0-9;?]*C/g, " ").replace(/\x1b\[[0-9;?]*[a-zA-Z]/g, "").replace(/\x1b\][^\x07]*\x07/g, "").replace(/\x1b[NOPM=>78]/g, "").replace(/[\x00-\x1f\x7f]/g, " ");
   const popups = {
-    trust: { handled: false, regex: /trust this folder/i, accept: "\r", label: "trust-folder" },
+    trust: {
+      handled: false,
+      fired: false,
+      timer: void 0,
+      regex: /trust\s*this\s*folder/i,
+      accept: "\r",
+      settleMs: 0,
+      label: "trust-folder"
+    },
     bypass: {
       handled: false,
-      regex: /Bypass Permissions mode|By proceeding/i,
+      fired: false,
+      timer: void 0,
+      regex: /Bypass\s*Permissions\s*mode|By\s*proceeding/i,
       accept: "2\r",
+      settleMs: BYPASS_SETTLE_MS,
       label: "bypass-warning"
     }
   };
   let scanBuf = "";
+  const press = (popup) => {
+    popup.fired = true;
+    logger?.debug(`${popup.label} popup auto-yes`);
+    try {
+      pty.write(popup.accept);
+    } catch (err) {
+      logger?.warn(`${popup.label} auto-yes write failed`, {
+        error: err.message
+      });
+    }
+  };
+  let disposed = false;
   return {
     feedBytes(data) {
+      if (disposed) return;
       scanBuf += data.toString("utf8");
       const cleanBuf = stripAnsi(scanBuf).replace(/\s+/g, " ");
       for (const popup of Object.values(popups)) {
         if (popup.handled) continue;
         if (popup.regex.test(cleanBuf)) {
           popup.handled = true;
-          logger?.debug(`${popup.label} popup auto-yes`);
-          try {
-            pty.write(popup.accept);
-          } catch (err) {
-            logger?.warn(`${popup.label} auto-yes write failed`, {
-              error: err.message
-            });
-          }
           scanBuf = "";
+          if (popup.settleMs === 0) press(popup);
+        }
+      }
+      for (const popup of Object.values(popups)) {
+        if (popup.handled && popup.settleMs > 0 && !popup.fired) {
+          if (popup.timer) clearTimeout(popup.timer);
+          popup.timer = setTimeout(() => press(popup), popup.settleMs);
         }
       }
       if (scanBuf.length > 8192) scanBuf = scanBuf.slice(-4096);
     },
     dispose() {
+      disposed = true;
+      for (const popup of Object.values(popups)) {
+        if (popup.timer) clearTimeout(popup.timer);
+      }
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.152-beta.320.c7b0769",
+  "version": "0.2.152-beta.321.8f612f5",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",