@ian2018cs/agenthub 0.2.9 → 0.2.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ian2018cs/agenthub",
-  "version": "0.2.9",
+  "version": "0.2.11",
   "description": "A web-based UI for AI Agents",
   "type": "module",
   "main": "server/index.js",
@@ -51,7 +51,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.2.87",
+    "@anthropic-ai/claude-agent-sdk": "^0.2.89",
     "@codemirror/lang-css": "^6.3.1",
     "@codemirror/lang-html": "^6.4.9",
     "@codemirror/lang-javascript": "^6.2.4",

package/server/claude-sdk.js

@@ -250,6 +250,11 @@ function mapCliOptionsToSDK(options = {}) {
     sdkOptions.resume = sessionId;
   }
 
+  // Map per-request environment variables (e.g. CLAUDE_CONFIG_DIR for user isolation)
+  if (options.env) {
+    sdkOptions.env = options.env;
+  }
+
   return sdkOptions;
 }
 
@@ -552,11 +557,18 @@ async function queryClaudeSDK(command, options = {}, ws) {
   let tempDir = null;
   let abortController = null;
 
-  // Set CLAUDE_CONFIG_DIR for user isolation
+  // Set CLAUDE_CONFIG_DIR for user isolation via per-request env (avoids global process.env race condition).
+  // The SDK passes this env object to the Claude CLI subprocess, so each concurrent
+  // request gets its own isolated config directory without overwriting the global env.
   if (userUuid) {
     const userPaths = getUserPaths(userUuid);
-    process.env.CLAUDE_CONFIG_DIR = userPaths.claudeDir;
-    console.log(`Set CLAUDE_CONFIG_DIR to user data directory (contains .claude folder): ${userPaths.claudeDir}`);
+    options = {
+      ...options,
+      env: {
+        ...process.env,
+        CLAUDE_CONFIG_DIR: userPaths.claudeDir,
+      },
+    };
   }
 
   try {

package/server/services/tool-guard/rules.js

@@ -48,6 +48,8 @@ const DANGEROUS_SCRIPT_PATTERNS = [
   // 容器/云平台
   { pattern: /\bdocker\s+(rm|rmi|stop|kill|restart|network|volume|system\s+prune)\b/, reason: '管理 Docker' },
   { pattern: /\bkubectl\b/, reason: '操作 Kubernetes' },
+  { pattern: /\bgcloud\b/, reason: '操作 Google Cloud' },
+  { pattern: /\bbq\b/, reason: '使用 BigQuery CLI（bq）' },
   // Web 服务器
   { pattern: /\bnginx\s+(-s\s+)?(reload|stop|start|restart|quit)\b/, reason: '管理 nginx' },
   { pattern: /\bapachectl\b/, reason: '管理 Apache' },
@@ -379,6 +381,7 @@ const rules = [
           reason: '不允许管理 Docker 容器和资源' },
         { pattern: /\bkubectl\b/, reason: '不允许操作 Kubernetes' },
         { pattern: /\bgcloud\b/, reason: '不允许操作 Google Cloud' },
+        { pattern: /\bbq\b/, reason: '不允许使用 BigQuery CLI（bq）' },
         { pattern: /\baws\s+(?!configure\s+list\b)/, reason: '不允许操作 AWS' },
         { pattern: /\bterraform\s+(apply|destroy|import)\b/, reason: '不允许执行 Terraform 变更' },
 

package/server/services/user-directories.js

@@ -287,7 +287,10 @@ export async function initUserDirectories(userUuid) {
   const settingsConfig = {
     env: {
       ANTHROPIC_AUTH_TOKEN: process.env.ANTHROPIC_AUTH_TOKEN || '',
-      ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL || ''
+      ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL || '',
+      CLAUDE_CODE_ATTRIBUTION_HEADER: '0',
+      CLAUDE_CODE_DISABLE_1M_CONTEXT: '1',
+      DISABLE_PROMPT_CACHING: '1'
     }
   };
   await fs.writeFile(destSettings, JSON.stringify(settingsConfig, null, 2));