@i14ks/ccv 0.21.0 → 0.23.0

package/bundle/ccv.mjs

@@ -223,7 +223,7 @@ function workspaceIdRemap(paths, sessionsOf) {
 }
 
 // ../host/dist/session.js
-import { EventEmitter } from "node:events";
+import { EventEmitter as EventEmitter2 } from "node:events";
 import { randomUUID } from "node:crypto";
 import path5 from "node:path";
 import { query, renameSession } from "@anthropic-ai/claude-agent-sdk";
@@ -787,6 +787,173 @@ var Journal = class {
   }
 };
 
+// ../host/dist/network-guard.js
+import { EventEmitter } from "node:events";
+import { request } from "node:https";
+import { networkInterfaces } from "node:os";
+var TRACE_URL = "https://api.anthropic.com/cdn-cgi/trace";
+var NETWORK_CHECK_MS = 5e3;
+var INTERFACES_POLL_MS = 1e3;
+var CHECK_TIMEOUT_MS = 4e3;
+var RETRY_DELAY_MS = 1e3;
+var NETWORK_FRESH_MS = 3e3;
+var UNCHECKED_REASON = "\u041C\u0430\u0440\u0448\u0440\u0443\u0442 \u0434\u043E Anthropic \u0435\u0449\u0451 \u043D\u0435 \u043F\u0440\u043E\u0432\u0435\u0440\u0435\u043D";
+var NetworkGuard = class extends EventEmitter {
+  #enabled = false;
+  #blocked = /* @__PURE__ */ new Set();
+  #state = {
+    status: "ok",
+    country: null,
+    reason: null,
+    checkedAt: null,
+    enabled: false
+  };
+  #checkTimer = null;
+  #interfacesTimer = null;
+  #interfaces = "";
+  #inFlight = null;
+  /** Растёт при каждой смене настроек: ответ проверки, начатой до неё, не применяется. */
+  #generation = 0;
+  get state() {
+    return { ...this.#state };
+  }
+  /** Почему агентам сейчас нельзя в сеть; `null` — можно. */
+  blockedReason() {
+    return this.#state.status === "blocked" ? this.#state.reason ?? UNCHECKED_REASON : null;
+  }
+  /**
+   * Применить настройки. Включение начинает с блока до первой проверки,
+   * выключение снимает блок сразу.
+   */
+  configure(enabled, blockedCountries) {
+    const countries = new Set(blockedCountries);
+    const same = enabled === this.#enabled && countries.size === this.#blocked.size && [...countries].every((c) => this.#blocked.has(c));
+    if (same)
+      return;
+    this.#generation += 1;
+    this.#blocked = countries;
+    const wasEnabled = this.#enabled;
+    this.#enabled = enabled;
+    if (!enabled) {
+      this.#stopTimers();
+      this.#apply({ status: "ok", country: this.#state.country, reason: null, checkedAt: null });
+      return;
+    }
+    if (!wasEnabled) {
+      this.#apply({ status: "blocked", country: null, reason: UNCHECKED_REASON, checkedAt: null });
+      this.#startTimers();
+    }
+    void this.check();
+  }
+  stop() {
+    this.#stopTimers();
+  }
+  /** Проверить сейчас. Параллельные вызовы делят одну проверку. */
+  check() {
+    if (!this.#enabled)
+      return Promise.resolve(this.state);
+    this.#inFlight ??= this.#runCheck().finally(() => {
+      this.#inFlight = null;
+    });
+    return this.#inFlight;
+  }
+  /** Проверить, если последняя проверка старше `NETWORK_FRESH_MS`. */
+  async ensureFresh() {
+    if (!this.#enabled)
+      return this.state;
+    const at = this.#state.checkedAt;
+    if (at !== null && Date.now() - at < NETWORK_FRESH_MS && !this.#inFlight)
+      return this.state;
+    return this.check();
+  }
+  async #runCheck() {
+    const generation = this.#generation;
+    let result = await traceCountry();
+    if (!result.ok && generation === this.#generation) {
+      await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY_MS));
+      result = await traceCountry();
+    }
+    if (generation !== this.#generation || !this.#enabled)
+      return this.state;
+    const checkedAt = Date.now();
+    if (!result.ok) {
+      this.#apply({
+        status: "blocked",
+        country: null,
+        reason: `\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u043F\u0440\u043E\u0432\u0435\u0440\u0438\u0442\u044C \u043C\u0430\u0440\u0448\u0440\u0443\u0442 \u0434\u043E Anthropic: ${result.error}`,
+        checkedAt
+      });
+    } else if (this.#blocked.has(result.country)) {
+      this.#apply({
+        status: "blocked",
+        country: result.country,
+        reason: `\u0417\u0430\u043F\u0440\u043E\u0441\u044B \u043A Anthropic \u0438\u0434\u0443\u0442 \u0438\u0437 ${result.country} \u2014 \u043F\u043E\u0445\u043E\u0436\u0435, VPN \u043D\u0435 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442`,
+        checkedAt
+      });
+    } else {
+      this.#apply({ status: "ok", country: result.country, reason: null, checkedAt });
+    }
+    return this.state;
+  }
+  #apply(next) {
+    const previous = this.#state;
+    this.#state = { ...next, enabled: this.#enabled };
+    const changed = previous.status !== next.status || previous.country !== next.country || previous.reason !== next.reason || previous.enabled !== this.#enabled;
+    if (changed)
+      this.emit("change", this.state);
+  }
+  #startTimers() {
+    this.#stopTimers();
+    this.#interfaces = interfacesSignature();
+    this.#checkTimer = setInterval(() => void this.check(), NETWORK_CHECK_MS);
+    this.#checkTimer.unref();
+    this.#interfacesTimer = setInterval(() => {
+      const signature = interfacesSignature();
+      if (signature === this.#interfaces)
+        return;
+      this.#interfaces = signature;
+      void this.check();
+    }, INTERFACES_POLL_MS);
+    this.#interfacesTimer.unref();
+  }
+  #stopTimers() {
+    if (this.#checkTimer)
+      clearInterval(this.#checkTimer);
+    if (this.#interfacesTimer)
+      clearInterval(this.#interfacesTimer);
+    this.#checkTimer = null;
+    this.#interfacesTimer = null;
+  }
+};
+var networkGuard = new NetworkGuard();
+function traceCountry() {
+  return new Promise((resolve) => {
+    const req = request(TRACE_URL, { method: "GET", agent: false, timeout: CHECK_TIMEOUT_MS, headers: { "cache-control": "no-store" } }, (res) => {
+      let body = "";
+      res.setEncoding("utf8");
+      res.on("data", (chunk) => {
+        body += chunk;
+        if (body.length > 16e3)
+          req.destroy(new Error("\u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0434\u043B\u0438\u043D\u043D\u044B\u0439 \u043E\u0442\u0432\u0435\u0442"));
+      });
+      res.on("end", () => {
+        const country = /^loc=([A-Z]{2})$/m.exec(body)?.[1];
+        if (res.statusCode === 200 && country)
+          resolve({ ok: true, country });
+        else
+          resolve({ ok: false, error: `\u043D\u0435\u043E\u0436\u0438\u0434\u0430\u043D\u043D\u044B\u0439 \u043E\u0442\u0432\u0435\u0442 (HTTP ${res.statusCode ?? "\u2014"})` });
+      });
+      res.on("error", (error) => resolve({ ok: false, error: error.message }));
+    });
+    req.on("timeout", () => req.destroy(new Error("\u043D\u0435\u0442 \u043E\u0442\u0432\u0435\u0442\u0430")));
+    req.on("error", (error) => resolve({ ok: false, error: error.message }));
+    req.end();
+  });
+}
+function interfacesSignature() {
+  return Object.entries(networkInterfaces()).map(([name, addresses]) => `${name}:${(addresses ?? []).map((a) => a.address).sort().join(",")}`).sort().join("|");
+}
+
 // ../host/dist/settings.js
 import { readFile as readFile3 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
@@ -1176,7 +1343,7 @@ var INTERRUPT_SETTLE_MS = 15e3;
 var TASK_STOP_TIMEOUT_MS = 5e3;
 var TASK_WAKE_MS = 5e3;
 var CONTEXT_MIN_INTERVAL_MS = 5e3;
-var ClaudeSession = class extends EventEmitter {
+var ClaudeSession = class extends EventEmitter2 {
   id;
   workspaceId;
   cwd;
@@ -1484,6 +1651,8 @@ var ClaudeSession = class extends EventEmitter {
    * умолчанию) — обычное поведение, ничего не меняется.
    */
   #spawn(restarted, resumeAt) {
+    if (this.#refuseOffRoute())
+      return;
     const options2 = {
       cwd: this.cwd,
       // Без этого SDK не читает с диска ничего: ни CLAUDE.md, ни кастомные
@@ -1668,6 +1837,56 @@ var ClaudeSession = class extends EventEmitter {
     this.#query = null;
     this.#resetTasks();
   }
+  /**
+   * Погасить процесс CLI, не закрывая сессию: упал VPN (см. network-guard.ts).
+   *
+   * Идущий ход обрывается вместе с процессом, отложенное переподключение
+   * отменяется, накопленные для повтора промпты забываются — повторить их сам
+   * хост не вправе, решать человеку. Разговор цел: следующий промпт после
+   * возвращения VPN поднимет процесс, продолжающий ту же сессию.
+   */
+  suspend(reason) {
+    if (this.#closing || this.#state === "closed")
+      return;
+    if (this.#reconnectTimer) {
+      clearTimeout(this.#reconnectTimer);
+      this.#reconnectTimer = null;
+    }
+    this.#pendingRetry = [];
+    if (!this.#query) {
+      if (this.#state === "reconnecting")
+        this.#setState("error");
+      return;
+    }
+    const busy = this.#state !== "idle";
+    this.#teardown(reason);
+    this.#inbox = new AsyncQueue();
+    this.#streamMessageId = null;
+    this.#blockCounts.clear();
+    if (busy)
+      this.#lastTurn = "interrupted";
+    this.#record({
+      kind: "error",
+      message: `${reason}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Claude \u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D${busy ? ", \u0445\u043E\u0434 \u043F\u0440\u0435\u0440\u0432\u0430\u043D" : ""}. \u0420\u0430\u0437\u0433\u043E\u0432\u043E\u0440 \u0441\u043E\u0445\u0440\u0430\u043D\u0451\u043D \u2014 \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F, \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u0438 \u0441\u0435\u0441\u0441\u0438\u044F \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442.`
+    });
+    this.#setState("error");
+  }
+  /**
+   * Нет VPN — процесс не поднимаем: пишем об этом в ленту и оставляем сессию
+   * без процесса. Следующий промпт попробует снова.
+   */
+  #refuseOffRoute() {
+    const blocked = networkGuard.blockedReason();
+    if (!blocked)
+      return false;
+    this.#pendingRetry = [];
+    this.#record({
+      kind: "error",
+      message: `${blocked}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Claude \u043D\u0435 \u0437\u0430\u043F\u0443\u0449\u0435\u043D \u2014 \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F.`
+    });
+    this.#setState("error");
+    return true;
+  }
   // -------------------------------------------------------------------------
   // Переподключение
   // -------------------------------------------------------------------------
@@ -1697,6 +1916,8 @@ var ClaudeSession = class extends EventEmitter {
       clearTimeout(this.#reconnectTimer);
       this.#reconnectTimer = null;
     }
+    if (this.#refuseOffRoute())
+      return;
     this.#setState("reconnecting");
     this.#teardown("\u043F\u0435\u0440\u0435\u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0435\u043D\u0438\u0435");
     this.#inbox = new AsyncQueue();
@@ -1751,6 +1972,9 @@ var ClaudeSession = class extends EventEmitter {
   sendPrompt(text, images, service = false) {
     if (this.#closing)
       throw new Error("session is closed");
+    const blocked = networkGuard.blockedReason();
+    if (blocked)
+      throw new Error(`${blocked}. \u041F\u0440\u043E\u043C\u043F\u0442 \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D.`);
     this.#record({ kind: "user.message", text, images });
     if (!service && (!this.#title || this.#titleIsDefault)) {
       this.#title = text.slice(0, 80);
@@ -1788,6 +2012,9 @@ var ClaudeSession = class extends EventEmitter {
   async editPrompt(userIndex, text, images) {
     if (this.#closing)
       throw new Error("session is closed");
+    const blocked = networkGuard.blockedReason();
+    if (blocked)
+      throw new Error(`${blocked}. \u041F\u0440\u0430\u0432\u043A\u0430 \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D\u0430.`);
     if (this.#state === "running")
       await this.interrupt();
     const source = this.#claudeSessionId ?? this.#options.resume;
@@ -2154,6 +2381,41 @@ var ClaudeSession = class extends EventEmitter {
       throw new Error("\u0421\u0435\u0441\u0441\u0438\u044F \u0435\u0449\u0451 \u043D\u0435 \u0437\u0430\u043F\u0443\u0449\u0435\u043D\u0430");
     await this.#query.reconnectMcpServer(name);
   }
+  /**
+   * Начать OAuth-вход сервера в `needs-auth`.
+   *
+   * `mcpAuthenticate` есть в `Query`, но не в `sdk.d.ts` — отсюда приведение.
+   * CLI сам слушает колбэк на `localhost` и сам переподключает сервер после
+   * входа; нам отдаёт только ссылку. Без `redirectUri` — тогда CLI выбирает
+   * локальный колбэк, единственный, что работает без своего домена.
+   */
+  async authenticateMcpServer(name) {
+    if (!this.#query)
+      throw new Error("\u0421\u0435\u0441\u0441\u0438\u044F \u0435\u0449\u0451 \u043D\u0435 \u0437\u0430\u043F\u0443\u0449\u0435\u043D\u0430");
+    const q = this.#query;
+    if (typeof q.mcpAuthenticate !== "function") {
+      throw new Error("\u042D\u0442\u0430 \u0432\u0435\u0440\u0441\u0438\u044F Agent SDK \u043D\u0435 \u0443\u043C\u0435\u0435\u0442 \u0430\u0432\u0442\u043E\u0440\u0438\u0437\u043E\u0432\u0430\u0442\u044C MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u044B");
+    }
+    const response = await q.mcpAuthenticate(name) ?? {};
+    return {
+      url: typeof response.authUrl === "string" ? response.authUrl : "",
+      requiresUserAction: response.requiresUserAction === true,
+      callbackExpected: response.callbackExpected === true
+    };
+  }
+  /**
+   * Отдать CLI адрес редиректа, вставленный руками, — когда браузер не на этой
+   * машине и до `localhost` хоста не достучался. Резолвится после входа.
+   */
+  async submitMcpOAuthCallback(name, callbackUrl) {
+    if (!this.#query)
+      throw new Error("\u0421\u0435\u0441\u0441\u0438\u044F \u0435\u0449\u0451 \u043D\u0435 \u0437\u0430\u043F\u0443\u0449\u0435\u043D\u0430");
+    const q = this.#query;
+    if (typeof q.mcpSubmitOAuthCallbackUrl !== "function") {
+      throw new Error("\u042D\u0442\u0430 \u0432\u0435\u0440\u0441\u0438\u044F Agent SDK \u043D\u0435 \u0443\u043C\u0435\u0435\u0442 \u0430\u0432\u0442\u043E\u0440\u0438\u0437\u043E\u0432\u0430\u0442\u044C MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u044B");
+    }
+    await q.mcpSubmitOAuthCallbackUrl(name, callbackUrl);
+  }
   /** Включить или выключить сервер — тот же обход слэш-команды, что выше. */
   async toggleMcpServer(name, enabled) {
     if (!this.#query)
@@ -2870,7 +3132,7 @@ function contentToText2(content) {
 }
 
 // ../host/dist/antigravity-session.js
-import { EventEmitter as EventEmitter2 } from "node:events";
+import { EventEmitter as EventEmitter3 } from "node:events";
 import { spawn as spawn2, execFile as execFile3 } from "node:child_process";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "node:fs/promises";
@@ -3090,7 +3352,7 @@ function agyContextWindow(model) {
 
 // ../host/dist/antigravity-session.js
 var TRANSIENT = /* @__PURE__ */ new Set(["assistant.delta", "thinking.delta", "state"]);
-var AntigravitySession = class extends EventEmitter2 {
+var AntigravitySession = class extends EventEmitter3 {
   id;
   workspaceId;
   cwd;
@@ -3230,6 +3492,8 @@ var AntigravitySession = class extends EventEmitter2 {
     }
     this.#capabilities = this.#baseCapabilities();
     this.emit("capabilities");
+    if (this.#refuseOffRoute())
+      return;
     void agyModels(this.#executable).then((models) => {
       if (!this.#capabilities || models.length === 0)
         return;
@@ -3288,6 +3552,8 @@ var AntigravitySession = class extends EventEmitter2 {
   #spawn() {
     if (!this.#executable || this.#closing)
       return;
+    if (this.#refuseOffRoute())
+      return;
     let child;
     try {
       child = spawn2(this.#executable, this.#args(), {
@@ -3385,12 +3651,48 @@ var AntigravitySession = class extends EventEmitter2 {
   reconnect(_reason) {
     this.#restart();
   }
+  /**
+   * Погасить процесс `agy`, не закрывая сессию: упал VPN (см.
+   * network-guard.ts). Следующий промпт после его возвращения поднимет
+   * процесс на том же разговоре.
+   */
+  suspend(reason) {
+    if (this.#closing || this.#state === "closed" || !this.#child)
+      return;
+    const busy = this.#pendingTurns > 0;
+    this.#restartPending = false;
+    this.#kill();
+    this.#closeOpenSteps();
+    this.#pendingTurns = 0;
+    if (busy)
+      this.#lastTurn = "interrupted";
+    this.#record_({
+      kind: "error",
+      message: `${reason}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Antigravity \u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D${busy ? ", \u0445\u043E\u0434 \u043F\u0440\u0435\u0440\u0432\u0430\u043D" : ""}. \u0420\u0430\u0437\u0433\u043E\u0432\u043E\u0440 \u0441\u043E\u0445\u0440\u0430\u043D\u0451\u043D \u2014 \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F, \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u0438 \u0441\u0435\u0441\u0441\u0438\u044F \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442.`
+    });
+    this.#setState("error");
+  }
+  /** Нет VPN — процесс не поднимаем, пишем об этом в ленту. */
+  #refuseOffRoute() {
+    const blocked = networkGuard.blockedReason();
+    if (!blocked)
+      return false;
+    this.#record_({
+      kind: "error",
+      message: `${blocked}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Antigravity \u043D\u0435 \u0437\u0430\u043F\u0443\u0449\u0435\u043D \u2014 \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F.`
+    });
+    this.#setState("error");
+    return true;
+  }
   // -------------------------------------------------------------------------
   // Ввод
   // -------------------------------------------------------------------------
   sendPrompt(text, images) {
     if (this.#closing)
       throw new Error("session is closed");
+    const blocked = networkGuard.blockedReason();
+    if (blocked)
+      throw new Error(`${blocked}. \u041F\u0440\u043E\u043C\u043F\u0442 \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D.`);
     const command = /^\/([\w-]+)(?:\s+([\s\S]*))?$/.exec(text.trim());
     if (command && AGY_CLI_COMMANDS.has(command[1]) && (!images || images.length === 0)) {
       void this.#runCliCommand(text, command[1], command[2]?.trim() ?? "");
@@ -3607,7 +3909,7 @@ Attached image${paths.length > 1 ? "s" : ""} (view them with your file viewing t
   }
   /** Квота `agy` (`/usage`) — общая на аккаунт, кэш один на хост. */
   async refreshUsage(force = false) {
-    if (!this.#executable)
+    if (!this.#executable || networkGuard.blockedReason())
       return;
     const usage = await agyUsage(this.#executable, force);
     if (!usage)
@@ -3647,6 +3949,12 @@ Attached image${paths.length > 1 ? "s" : ""} (view them with your file viewing t
   async toggleMcpServer(_name, _enabled) {
     throw new Error("MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u044B Antigravity \u043D\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044E\u0442\u0441\u044F \u0432 \u0441\u0430\u043C\u043E\u043C agy (`agy mcp`)");
   }
+  async authenticateMcpServer(_name) {
+    throw new Error("MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u044B Antigravity \u043D\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044E\u0442\u0441\u044F \u0432 \u0441\u0430\u043C\u043E\u043C agy (`agy mcp`)");
+  }
+  async submitMcpOAuthCallback(_name, _callbackUrl) {
+    throw new Error("MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u044B Antigravity \u043D\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044E\u0442\u0441\u044F \u0432 \u0441\u0430\u043C\u043E\u043C agy (`agy mcp`)");
+  }
   setTitle(title) {
     this.#record.title = title;
     this.#titleIsDefault = false;
@@ -6114,6 +6422,7 @@ var MIN_AUTO_ARCHIVE_AFTER_MS = 60 * 60 * 1e3;
 var DEFAULT_AUTO_STOP_AFTER_MS = 10 * 60 * 1e3;
 var MIN_AUTO_STOP_AFTER_MS = 60 * 1e3;
 var MIN_AUTO_SAVE_AFTER_PAUSE_MS = 500;
+var DEFAULT_BLOCKED_COUNTRIES = ["RU", "BY", "CN", "IR", "KP", "SY", "CU"];
 var FOLDER_ACCESS = ["all", "projects", "project"];
 var PROVIDERS = ["claude", "antigravity"];
 var PERMISSION_MODES = [
@@ -6150,7 +6459,11 @@ var DEFAULT_APP_SETTINGS = {
   limitStopFiveHourPct: 95,
   limitStopSevenDayPct: 99,
   // Оба: до появления настройки приложение предлагало обоих агентов.
-  enabledProviders: ["claude", "antigravity"]
+  enabledProviders: ["claude", "antigravity"],
+  // Включено: запрос без VPN может стоить аккаунта, а тому, у кого маршрут и
+  // так из разрешённой страны, защита ничем не мешает.
+  networkGuardEnabled: true,
+  networkGuardBlockedCountries: DEFAULT_BLOCKED_COUNTRIES
 };
 var AppSettingsStore = class {
   #settings = { ...DEFAULT_APP_SETTINGS };
@@ -6235,6 +6548,15 @@ function sanitize2(value, fallback) {
     if (picked.length > 0)
       result.enabledProviders = picked;
   }
+  if (typeof record.networkGuardEnabled === "boolean") {
+    result.networkGuardEnabled = record.networkGuardEnabled;
+  }
+  const countries = record.networkGuardBlockedCountries;
+  if (Array.isArray(countries)) {
+    result.networkGuardBlockedCountries = [
+      ...new Set(countries.filter((c) => typeof c === "string").map((c) => c.trim().toUpperCase()).filter((c) => /^[A-Z]{2}$/.test(c)))
+    ];
+  }
   return result;
 }
 function claudeHome() {
@@ -6594,7 +6916,7 @@ function authorName(raw) {
 }
 
 // ../host/dist/auth.js
-import { EventEmitter as EventEmitter3 } from "node:events";
+import { EventEmitter as EventEmitter4 } from "node:events";
 var QUICK_TIMEOUT_MS = 3e4;
 var LOGIN_TIMEOUT_MS = 10 * 6e4;
 var URL_RE = /https:\/\/\S*\/oauth\/authorize\S*/;
@@ -6606,7 +6928,7 @@ var IDLE = {
   output: "",
   error: null
 };
-var AuthCli = class extends EventEmitter3 {
+var AuthCli = class extends EventEmitter4 {
   #child = null;
   #state = IDLE;
   #timer = null;
@@ -6791,7 +7113,7 @@ function describe5(error) {
 }
 
 // ../host/dist/relay-link.js
-import { EventEmitter as EventEmitter4 } from "node:events";
+import { EventEmitter as EventEmitter5 } from "node:events";
 import { readFile as readFile15, writeFile as writeFile13, rm as rm5, mkdir as mkdir12 } from "node:fs/promises";
 import path20 from "node:path";
 import { hostname } from "node:os";
@@ -6810,7 +7132,7 @@ var SILENCE_TIMEOUT_MS = 95e3;
 function jitter(delay2) {
   return Math.round(delay2 * (0.8 + Math.random() * 0.4));
 }
-var RelayLink = class extends EventEmitter4 {
+var RelayLink = class extends EventEmitter5 {
   #credentials = null;
   #socket = null;
   #retry = RETRY_MIN_MS;
@@ -7198,14 +7520,14 @@ function humanize(error) {
 }
 
 // ../host/dist/terminal.js
-import { EventEmitter as EventEmitter5 } from "node:events";
+import { EventEmitter as EventEmitter6 } from "node:events";
 import { access as access2, constants as constants2 } from "node:fs/promises";
 import path21 from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 var SCROLLBACK_BYTES = 256 * 1024;
 var FLUSH_MS = 12;
 var MAX_TERMINALS = 24;
-var TerminalHub = class extends EventEmitter5 {
+var TerminalHub = class extends EventEmitter6 {
   #terminals = /* @__PURE__ */ new Map();
   #module = null;
   list(workspaceId) {
@@ -7506,6 +7828,8 @@ var FINDER_TITLE = "\xB7 \u043F\u043E\u0438\u0441\u043A \u043F\u0440\u043E\u0435
 var HISTORY_PAGE = 250;
 var HISTORY_PAGE_MAX = 500;
 var AUTO_STOP_SWEEP_MS = 30 * 1e3;
+var MCP_AUTH_POLL_MS = 2 * 1e3;
+var MCP_AUTH_TIMEOUT_MS = 10 * 60 * 1e3;
 var BUSY_STATES2 = /* @__PURE__ */ new Set([
   "running",
   "waiting_permission",
@@ -7521,6 +7845,8 @@ var HostServer = class {
   #settings;
   #finder;
   #sessions = /* @__PURE__ */ new Map();
+  /** Опросы статуса для идущих OAuth-входов MCP, ключ — сессия и сервер. */
+  #mcpAuthWatch = /* @__PURE__ */ new Map();
   #antigravity;
   /** Боковые сессии («вопрос на полях») по id родителя — не больше одной на разговор. */
   #sides = /* @__PURE__ */ new Map();
@@ -7635,6 +7961,7 @@ var HostServer = class {
     await this.#folders.load();
     await this.#carryOverWorkspaceIds();
     await this.#settings.load();
+    this.#wireNetworkGuard();
     await this.#limitStop.load();
     await this.#github.load();
     await warmClaudeLauncher();
@@ -7663,7 +7990,25 @@ var HostServer = class {
     this.#limitTimer = setInterval(() => this.#sweepUsage(), LIMIT_SWEEP_MS);
     this.#limitTimer.unref();
   }
+  /**
+   * Защита от запросов без VPN (см. network-guard.ts): при блоке гасим
+   * процессы всех живых сессий — идущий ход шлёт запрос за запросом, и
+   * дожидаться его конца нельзя.
+   */
+  #wireNetworkGuard() {
+    networkGuard.on("change", (state) => {
+      this.#broadcast({ type: "network.state", state });
+      if (state.status !== "blocked")
+        return;
+      const reason = state.reason ?? "VPN \u043D\u0435 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442";
+      for (const session of this.#sessions.values())
+        session.suspend(reason);
+    });
+    const { networkGuardEnabled, networkGuardBlockedCountries } = this.#settings.current;
+    networkGuard.configure(networkGuardEnabled, networkGuardBlockedCountries);
+  }
   async shutdown() {
+    networkGuard.stop();
     if (this.#autoStopTimer)
       clearInterval(this.#autoStopTimer);
     this.#autoStopTimer = null;
@@ -7831,6 +8176,7 @@ var HostServer = class {
         this.#sendLive(socket);
         this.#auth.status().then((status) => this.#send(socket, { type: "auth.status", status })).catch(() => void 0);
         this.#send(socket, { type: "relay.state", state: this.#relay.state });
+        this.#send(socket, { type: "network.state", state: networkGuard.state });
         return;
       case "ping":
         this.#send(socket, { type: "pong", nonce: frame.nonce });
@@ -7876,6 +8222,7 @@ var HostServer = class {
         return;
       }
       case "workspace.find.agent":
+        await networkGuard.ensureFresh();
         this.#findWithAgent(frame.query);
         return;
       case "workspace.roots":
@@ -8090,10 +8437,12 @@ var HostServer = class {
         return;
       }
       case "prompt.send":
+        await networkGuard.ensureFresh();
         this.#approveAfterLimit(frame.sessionId);
         this.#requireSession(frame.sessionId).sendPrompt(frame.text, frame.images);
         return;
       case "prompt.edit":
+        await networkGuard.ensureFresh();
         this.#approveAfterLimit(frame.sessionId);
         await this.#requireSession(frame.sessionId).editPrompt(frame.userIndex, frame.text, frame.images);
         return;
@@ -8101,6 +8450,7 @@ var HostServer = class {
         this.#requireSession(frame.sessionId).respondPermission(frame.requestId, frame.decision, frame.reason, frame.answers, frame.annotations, frame.plan);
         return;
       case "side.ask":
+        await networkGuard.ensureFresh();
         this.#ensureSide(this.#requireSession(frame.sessionId)).sendPrompt(frame.text);
         return;
       // Поднять форк, ничего не спрашивая: клиенту нужен его id, чтобы
@@ -8182,6 +8532,56 @@ var HostServer = class {
         await this.#sendMcpList(frame.sessionId);
         return;
       }
+      case "mcp.auth": {
+        const session = this.#requireSession(frame.sessionId);
+        const { name } = frame;
+        const base = { name, url: "", callbackExpected: false, done: false };
+        try {
+          const start = await session.authenticateMcpServer(name);
+          this.#broadcast({
+            type: "mcp.auth",
+            sessionId: frame.sessionId,
+            state: {
+              ...base,
+              active: true,
+              url: start.requiresUserAction ? start.url : "",
+              callbackExpected: start.callbackExpected,
+              error: null
+            }
+          });
+          this.#watchMcpAuth(frame.sessionId, name);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          this.#broadcast({
+            type: "mcp.auth",
+            sessionId: frame.sessionId,
+            state: { ...base, active: false, error: message }
+          });
+          this.#reportOperation(frame.sessionId, "mcp", false, message);
+        }
+        return;
+      }
+      case "mcp.auth_callback": {
+        const session = this.#requireSession(frame.sessionId);
+        try {
+          await session.submitMcpOAuthCallback(frame.name, frame.callbackUrl.trim());
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          this.#broadcast({
+            type: "mcp.auth",
+            sessionId: frame.sessionId,
+            state: {
+              name: frame.name,
+              active: true,
+              url: "",
+              callbackExpected: true,
+              done: false,
+              error: message
+            }
+          });
+        }
+        return;
+      }
       case "plugin.list":
         await this.#sendPluginList(frame.sessionId);
         return;
@@ -8465,6 +8865,7 @@ var HostServer = class {
             await this.#sendSessionList(workspace.id);
           }
         }
+        networkGuard.configure(settings.networkGuardEnabled, settings.networkGuardBlockedCountries);
         if (before.terminalEnabled && !settings.terminalEnabled) {
           for (const terminal of this.#terminals.list()) {
             this.#terminals.close(terminal.id);
@@ -8477,9 +8878,13 @@ var HostServer = class {
         this.#send(socket, { type: "auth.status", status: await this.#auth.status() });
         this.#send(socket, { type: "auth.login", state: this.#auth.loginState });
         return;
-      case "auth.login":
+      case "auth.login": {
+        const blocked = (await networkGuard.ensureFresh()).status === "blocked";
+        if (blocked)
+          throw new Error(`${networkGuard.blockedReason()}. \u0412\u0445\u043E\u0434 \u043E\u0442\u043B\u043E\u0436\u0435\u043D.`);
         await this.#auth.login(frame.mode, frame.switchAccount === true);
         return;
+      }
       case "auth.code":
         this.#auth.submitCode(frame.code);
         return;
@@ -8629,6 +9034,66 @@ var HostServer = class {
     this.#reportOperation(sessionId, "plugin", ok, message);
     await this.#sendPluginList(sessionId);
   }
+  /**
+   * Дождаться, пока сервер выйдет из `needs-auth`.
+   *
+   * О конце входа CLI не сообщает ничем: после колбэка он молча меняет токены
+   * и переподключает сервер у себя. Остаётся спрашивать статус, пока не
+   * изменится, — недолго, потому что вход человек либо проходит за минуты,
+   * либо бросает.
+   */
+  #watchMcpAuth(sessionId, name) {
+    const key = `${sessionId}/${name}`;
+    clearInterval(this.#mcpAuthWatch.get(key));
+    const startedAt = Date.now();
+    const finish = () => {
+      clearInterval(this.#mcpAuthWatch.get(key));
+      this.#mcpAuthWatch.delete(key);
+    };
+    const timer = setInterval(() => {
+      void (async () => {
+        const session = this.#sessions.get(sessionId);
+        if (!session)
+          return finish();
+        if (Date.now() - startedAt > MCP_AUTH_TIMEOUT_MS) {
+          finish();
+          this.#broadcast({
+            type: "mcp.auth",
+            sessionId,
+            state: {
+              name,
+              active: false,
+              url: "",
+              callbackExpected: false,
+              done: false,
+              error: "\u0412\u0445\u043E\u0434 \u043D\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0451\u043D \u2014 \u0438\u0441\u0442\u0435\u043A\u043B\u043E \u0432\u0440\u0435\u043C\u044F \u043E\u0436\u0438\u0434\u0430\u043D\u0438\u044F"
+            }
+          });
+          return;
+        }
+        const status = (await session.mcpServerStatus()).find((s) => s.name === name)?.status;
+        if (status === "needs-auth" || status === "pending")
+          return;
+        finish();
+        const ok = status === "connected";
+        this.#broadcast({
+          type: "mcp.auth",
+          sessionId,
+          state: {
+            name,
+            active: false,
+            url: "",
+            callbackExpected: false,
+            done: ok,
+            error: ok ? null : `\u0421\u0435\u0440\u0432\u0435\u0440 \xAB${name}\xBB \u043F\u043E\u0441\u043B\u0435 \u0432\u0445\u043E\u0434\u0430 \u0432 \u0441\u0442\u0430\u0442\u0443\u0441\u0435 ${status ?? "\u043D\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043D\u043E"}`
+          }
+        });
+        this.#reportOperation(sessionId, "mcp", ok, ok ? `\u0421\u0435\u0440\u0432\u0435\u0440 \xAB${name}\xBB \u0430\u0432\u0442\u043E\u0440\u0438\u0437\u043E\u0432\u0430\u043D \u0438 \u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0451\u043D` : `\u0421\u0435\u0440\u0432\u0435\u0440 \xAB${name}\xBB \u043D\u0435 \u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0438\u043B\u0441\u044F \u043F\u043E\u0441\u043B\u0435 \u0432\u0445\u043E\u0434\u0430`);
+        await this.#sendMcpList(sessionId);
+      })().catch(() => finish());
+    }, MCP_AUTH_POLL_MS);
+    this.#mcpAuthWatch.set(key, timer);
+  }
   #reportOperation(sessionId, scope, ok, message) {
     this.#broadcast({ type: "operation.result", sessionId, result: { scope, ok, message } });
   }