@lobehub/cli 0.0.63 → 0.0.64

package/dist/index.js

@@ -14,7 +14,7 @@ import { finished, pipeline } from "node:stream/promises";
 import { Duplex, PassThrough, Readable, Transform, Writable, getDefaultHighWaterMark, pipeline as pipeline$1 } from "node:stream";
 import readline, { createInterface } from "node:readline";
 import { EventEmitter, addAbortListener, on, once, setMaxListeners } from "node:events";
-import fs$1, { access, chmod, copyFile, cp, lstat, mkdir, open, readFile, readdir, readlink, realpath, rename, rm, stat, unlink as unlink$1, writeFile } from "node:fs/promises";
+import fs$1, { access, chmod, copyFile, cp, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, realpath, rename, rm, stat, unlink as unlink$1, writeFile } from "node:fs/promises";
 import crypto$1, { X509Certificate, createHash, randomBytes, randomUUID, sign } from "node:crypto";
 import { text } from "node:stream/consumers";
 import { ReadableStream as ReadableStream$1 } from "node:stream/web";
@@ -23324,6 +23324,7 @@ const TRPC_NAMESPACE_API_KEY_RULES = {
 	user: rw("user:read", "user:write"),
 	userMemories: rw("user:read", "user:write"),
 	userMemory: rw("user:read", "user:write"),
+	userSkill: rw("agent:read", "agent:write"),
 	verify: "blocked",
 	video: { any: "model:invoke" },
 	waitlist: "blocked",
@@ -292724,21 +292725,56 @@ var init_src = __esmMin((() => {
 //#endregion
 //#region ../../packages/local-file-shell/src/shell/runner.ts
 /**
-* Node reports a missing spawn cwd as `spawn <shell> ENOENT` — blaming the
-* shell binary — so the model goes off debugging a healthy shell. Check the
-* directory first and name the real problem, and the machine it happened on
-* (a cwd pinned on another device is the usual cause).
+* `true` = resolves to a directory; `false` = resolves to a non-directory
+* (a regular file); `undefined` = cannot be resolved at all (missing, an
+* unreadable parent, a symlink loop). Keeping the three cases apart lets the
+* report name what actually happened instead of guessing.
 */
-const checkWorkingDirectory = async (cwd) => {
+const statIsDirectory = async (dir) => {
 	try {
-		if ((await stat(cwd)).isDirectory()) return;
-		return `Working directory is not a directory on ${os.hostname()}: ${cwd}`;
-	} catch (error) {
-		if (error.code !== "ENOENT") return;
-		return `Working directory does not exist on ${os.hostname()}: ${cwd}. The shell is fine — run the command from a directory that exists on this device.`;
+		return (await stat(dir)).isDirectory();
+	} catch {
+		return;
 	}
 };
-async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_background, timeout = DEFAULT_OBSERVATION_TIMEOUT_MS }, { backend: backendOverride, processManager, logger, onSandboxUnavailable, sandboxPolicy, spawnProcess }) {
+/**
+* Resolve a requested cwd to a directory the shell can actually start in.
+*
+* A cwd pinned on another machine (a stale repo path, a moved worktree) would
+* otherwise kill every command in the run: the run cannot change its own pinned
+* cwd, callers strip a model-supplied cwd before dispatch, and re-running
+* `cd` inside the command does not help because the check happens before the
+* shell exists — so the same failure repeats forever. Un-sandboxed runs fall
+* back to a fresh isolated directory created under the OS temp root, and the
+* fallback is reported so nothing downstream mistakes it for the requested
+* directory.
+*
+* Sandboxed runs do NOT fall back: the sandbox fence (`createLocalSandboxPolicy`)
+* is built on the requested cwd, so silently spawning in another directory
+* would grant writes somewhere the user never approved. Those fail loudly.
+*/
+const resolveWorkingDirectory = async (requestedCwd, sandboxRequested, fallbackRoot) => {
+	const usable = await statIsDirectory(requestedCwd);
+	if (usable) return { cwd: requestedCwd };
+	const reason = usable === false ? `Working directory is not a directory on ${os.hostname()}: ${requestedCwd}` : `Working directory does not exist on ${os.hostname()}: ${requestedCwd}`;
+	if (sandboxRequested) return { error: `${reason}. A sandboxed run must start in its requested directory — the sandbox fence is built on it — so the command was not run.` };
+	try {
+		const fallback = await mkdtemp(path.join(fallbackRoot ?? os.tmpdir(), "lobehub-cwd-fallback-"));
+		return {
+			cwd: fallback,
+			notice: `${reason}. Falling back to ${fallback}.`,
+			remove: async () => {
+				await rm(fallback, {
+					force: true,
+					recursive: true
+				});
+			}
+		};
+	} catch {
+		return { error: `${reason}. The shell is fine — run the command from a directory that exists on this device.` };
+	}
+};
+async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_background, timeout = DEFAULT_OBSERVATION_TIMEOUT_MS }, { backend: backendOverride, processManager, logger, onSandboxUnavailable, sandboxPolicy, spawnProcess, tmpdirOverride }) {
 	if (!command) return {
 		error: "command is required",
 		success: false
@@ -292750,12 +292786,18 @@ async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_b
 		cwd,
 		timeout
 	});
+	let effectiveCwd = cwd;
+	let cwdNotice;
+	let removeCwdFallback;
 	if (cwd) {
-		const cwdError = await checkWorkingDirectory(cwd);
-		if (cwdError) return {
-			error: cwdError,
+		const resolution = await resolveWorkingDirectory(cwd, !!sandboxPolicy, tmpdirOverride);
+		if (resolution.error) return {
+			error: resolution.error,
 			success: false
 		};
+		effectiveCwd = resolution.cwd;
+		cwdNotice = resolution.notice;
+		removeCwdFallback = resolution.remove;
 	}
 	const requestedEnv = extraEnv ? {
 		...process.env,
@@ -292763,6 +292805,7 @@ async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_b
 	} : process.env;
 	const shellConfig = await getShellConfig(process.platform === "win32" ? normalizeEnvVarRefs(command, requestedEnv, (await detectWindowsShell()).type) : command);
 	let outputFiles;
+	let registered = false;
 	let releaseSandbox;
 	let sandboxed;
 	try {
@@ -292774,7 +292817,7 @@ async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_b
 			try {
 				launchPlan = await createSandboxLaunchPlan({
 					command: shellConfig,
-					cwd,
+					cwd: effectiveCwd,
 					env: requestedEnv,
 					policy: sandboxPolicy
 				});
@@ -292794,7 +292837,7 @@ async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_b
 			args: launchCommand.args,
 			cmd: launchCommand.cmd
 		}, {
-			cwd,
+			cwd: effectiveCwd,
 			env: launchEnv,
 			outputFiles: shellOutputFiles,
 			shellId
@@ -292818,21 +292861,27 @@ async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_b
 			shellProcess.spawnError = new Error(`Failed to start command${cwdContext}: ${error.message}`, { cause: error });
 			shellProcess.exitCode = 1;
 		});
-		handle.once("close", () => releaseSandbox?.());
+		handle.once("close", () => {
+			releaseSandbox?.();
+			if (removeCwdFallback) removeCwdFallback().catch((error) => {
+				logger?.debug(`${logPrefix} Fallback directory cleanup failed`, { error });
+			});
+		});
 		processManager.register(shellId, shellProcess);
+		registered = true;
 		processManager.closeOutputFiles(shellOutputFiles);
 		logger?.info?.(`${logPrefix} Started session`, {
 			background: run_in_background,
 			shellId
 		});
 		if (run_in_background) return {
-			output: "",
+			output: cwdNotice ?? "",
 			output_files: processManager.getOutputFilesInfo(shellOutputFiles),
 			sandboxed,
 			shell_id: shellId,
 			success: true
 		};
-		return {
+		const result = {
 			...await processManager.getRunCommandOutput({
 				shell_id: shellId,
 				timeout
@@ -292840,9 +292889,17 @@ async function runCommand$1({ command, cwd, description, env: extraEnv, run_in_b
 			sandboxed,
 			shell_id: shellId
 		};
+		if (!cwdNotice) return result;
+		const prefix = `${cwdNotice}\n\n`;
+		return {
+			...result,
+			output: `${prefix}${result.output ?? ""}`,
+			stdout: `${prefix}${result.stdout ?? ""}`
+		};
 	} catch (error) {
 		releaseSandbox?.();
 		if (outputFiles) processManager.closeOutputFiles(outputFiles);
+		if (removeCwdFallback && !registered) await removeCwdFallback().catch(() => {});
 		return {
 			error: error.message,
 			success: false
@@ -512440,6 +512497,7 @@ const admissionHint = {
 	pending_decision: "a decision gate is still waiting on an answer",
 	review_changed: "task review feedback changed after this turn started",
 	stale_input: "the graph moved after this turn started, so the plan would apply to stale input",
+	started_from_draft: "the Goal was started from its draft, which settled this turn; the next turn plans further work",
 	turn_owner: "this Goal has no matching planning turn",
 	turn_settled: "this turn's run is no longer running",
 	wait_unsettled: "unfinished work must be settled before waiting",
@@ -512695,10 +512753,12 @@ function registerGoalCommand$1(program) {
 		};
 		const result = fromTopic ? hasOperationToken() ? await client.goal.createConversationGoal.mutate({
 			...goalInput,
+			draft: true,
 			operationId
 		}) : await client.goal.create.mutate({
 			...goalInput,
 			agentId: process.env.LOBEHUB_AGENT_ID,
+			draft: true,
 			conversationOperationId: operationId,
 			conversationTopicId: process.env.LOBEHUB_TOPIC_ID
 		}) : await client.goal.create.mutate({
@@ -512726,7 +512786,11 @@ function registerGoalCommand$1(program) {
 		"first; every other seed task (or only --units) leaves the graph as a roster unit, its description",
 		"kept as that unit's note, and is released wave by wave once the probes ran through without a person.",
 		"A rejection revises the recipe and re-probes. Tasks that differ only in names, files or details are",
-		"one recipe; tasks whose steps differ are not, so start those without --rollout."
+		"one recipe; tasks whose steps differ are not, so start those without --rollout.",
+		"Inside a batch a seed may depend only on a probe, and folded seeds need distinct titles.",
+		"",
+		"Starting a draft that holds tasks settles the planning turn that created it: submit any plan with",
+		"lh goal plan before starting, not after."
 	].join("\n")).option("--rollout <mode>", "Fold the seed tasks into a batch: canary or full").option("--probes <nodeIds...>", "Seed task node ids that run first (2-5 for canary)").option("--units <nodeIds...>", "Seed task node ids that become batch units (default: every other seed)").option("--recipe <text>", "The procedure every unit follows").option("--recipe-file <path>", "Read the recipe from a markdown file").option("--variant <axis=values...>", "An axis the units differ along, e.g. mechanism=replica,swr (repeatable); the gate holds until the probes cover each value").option("--operation <id>", "Defaults to LOBEHUB_OPERATION_ID").option("--json", "Output JSON").action(async (id, options) => {
 		let rollout;
 		if (options.rollout) {

package/man/man1/lh.1

@@ -1,6 +1,6 @@
 .\" Code generated by `npm run man:generate`; DO NOT EDIT.
 .\" Manual command details come from the Commander command tree.
-.TH LH 1 "" "@lobehub/cli 0.0.63" "User Commands"
+.TH LH 1 "" "@lobehub/cli 0.0.64" "User Commands"
 .SH NAME
 lh \- LobeHub CLI \- manage and connect to LobeHub services
 .SH SYNOPSIS

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lobehub/cli",
-  "version": "0.0.63",
+  "version": "0.0.64",
   "type": "module",
   "bin": {
     "lh": "dist/index.js",
@@ -41,18 +41,18 @@
     "url-join": "^5.0.0",
     "vitest": "5.0.0",
     "@lobechat/const": "1.0.0",
-    "@lobechat/device-control": "1.0.0",
     "@lobechat/agent-gateway-client": "1.0.0",
     "@lobechat/agent-tracing": "1.0.0",
-    "@lobechat/eval-rubric": "1.0.0",
     "@lobechat/device-gateway-client": "1.0.0",
     "@lobechat/device-identity": "1.0.0",
+    "@lobechat/eval-rubric": "1.0.0",
+    "@lobechat/device-control": "1.0.0",
+    "@lobechat/heterogeneous-agents": "1.0.0",
     "@lobechat/html-artifact": "1.0.0",
     "@lobechat/local-file-shell": "1.0.0",
-    "@lobechat/heterogeneous-agents": "1.0.0",
     "@lobechat/tool-runtime": "1.0.0",
-    "@lobechat/types": "1.0.0",
-    "@lobechat/utils": "1.0.0"
+    "@lobechat/utils": "1.0.0",
+    "@lobechat/types": "1.0.0"
   },
   "engines": {
     "node": ">=22.15"