@skylandnpm/octopus-proxy 0.1.63 → 0.1.64

package/dist/{chunk-R73E3EFB.js → chunk-J3ZMMSW2.js}

@@ -8334,6 +8334,7 @@ var Operations = [
   "configuration.get",
   "configuration.patch",
   "configuration.models",
+  "configuration.permissionModes",
   "configuration.agents",
   "configuration.commands",
   "configuration.providers",
@@ -8373,7 +8374,7 @@ var CommandSchema = z.object({
   sessionId: z.string().optional(),
   payload: z.record(z.unknown()).default({})
 }).strict();
-var isReadOperation = (operation) => operation === "desktop.capture" || /\.(status|snapshot|list|get|messages|diff|todos|children|logs|projects|read|search|history|models|agents|commands|providers|mcp)$/.test(operation);
+var isReadOperation = (operation) => operation === "desktop.capture" || /\.(status|snapshot|list|get|messages|diff|todos|children|logs|projects|read|search|history|models|permissionModes|agents|commands|providers|mcp)$/.test(operation);
 
 // src/journal.ts
 var Journal = class {
@@ -11031,6 +11032,10 @@ var OpenCodeAdapter = class {
       await this.session(project, id);
     }
     const base = `/api/session/${encodeURIComponent(id ?? "")}`;
+    if (op === "configuration.permissionModes") return { defaultMode: "ask", modes: [
+      { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u6BCF\u6B21\u4F7F\u7528\u5DE5\u5177\u524D\u8BF7\u6C42\u6279\u51C6" },
+      { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u81EA\u52A8\u5141\u8BB8\u5DE5\u5177\u64CD\u4F5C\uFF1B\u4ECD\u9075\u5B88\u4E3B\u673A\u548C\u5DE5\u5177\u81EA\u8EAB\u7684\u8BBF\u95EE\u9650\u5236" }
+    ] };
     if (op === "sessions.prompt") return this.prompt(project, id, p, base);
     if (op === "sessions.command" || op === "sessions.shell") {
       await this.switchSelection(project, base, p);
@@ -11098,6 +11103,13 @@ var OpenCodeAdapter = class {
     return this.data(project, "POST", `${base}/prompt`, { text, files, delivery: "queue", ...p.messageID ? { id: p.messageID } : {} });
   }
   async switchSelection(project, base, payload) {
+    if (payload.permissionMode !== void 0) {
+      if (!["ask", "full"].includes(String(payload.permissionMode))) throw new Error("Unsupported permission mode");
+      const states = await this.data(project, "GET", "/api/session/active");
+      const state = states?.[decodeURIComponent(base.split("/").at(-1))];
+      if (state && !["idle", "completed", "failed", "interrupted"].includes(state.type)) throw new Error("Wait for the active task before changing permission mode");
+      await this.data(project, "PATCH", base, { permissions: [{ action: "*", resource: "*", effect: payload.permissionMode === "full" ? "allow" : "ask" }] });
+    }
     if (payload.agent) await this.data(project, "POST", `${base}/agent`, { agent: payload.agent });
     if (!payload.model) return;
     let model;
@@ -12129,6 +12141,7 @@ var OPERATIONS = [
   "sessions.abort",
   "sessions.delete",
   "configuration.models",
+  "configuration.permissionModes",
   "permissions.list",
   "permissions.reply",
   "questions.list",
@@ -12403,6 +12416,31 @@ var CodexAdapter = class {
     }
     return { decision: accept ? reply === "always" ? "acceptForSession" : "accept" : "decline" };
   }
+  async permissionModes(project, rpc) {
+    const result = await rpc.request("config/read", { cwd: await this.workspace.root(project), includeLayers: false }).catch(() => void 0);
+    const autoReview = !!result?.config && Object.hasOwn(result.config, "approvals_reviewer");
+    return {
+      defaultMode: "ask",
+      modes: [
+        { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u7F16\u8F91\u9879\u76EE\u5916\u7684\u6587\u4EF6\u548C\u4F7F\u7528\u4E92\u8054\u7F51\u65F6\u8BF7\u6C42\u6279\u51C6" },
+        ...autoReview ? [{ id: "auto", label: "\u5E2E\u6211\u6279\u51C6", description: "\u7531 Codex \u81EA\u52A8\u5BA1\u6838\u64CD\u4F5C\u98CE\u9669\uFF0C\u9700\u8981\u4F60\u786E\u8BA4\u65F6\u518D\u8BF7\u6C42\u6279\u51C6" }] : [],
+        { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u5141\u8BB8\u8BBF\u95EE\u4E92\u8054\u7F51\u548C Proxy \u4E3B\u673A\u4E0A\u7684\u4EFB\u4F55\u6587\u4EF6\uFF0C\u65E0\u9700\u64CD\u4F5C\u6279\u51C6" }
+      ],
+      autoReview
+    };
+  }
+  async permissionOverrides(project, rpc, mode) {
+    if (mode === void 0) return {};
+    const options = await this.permissionModes(project, rpc);
+    if (!options.modes.some((entry) => entry.id === mode)) throw new Error("Unsupported permission mode");
+    const reviewer = options.autoReview ? { approvalsReviewer: mode === "auto" ? "guardian_subagent" : "user" } : {};
+    if (mode === "full") return { approvalPolicy: "never", sandboxPolicy: { type: "dangerFullAccess" }, ...reviewer };
+    return {
+      approvalPolicy: "on-request",
+      sandboxPolicy: { type: "workspaceWrite", writableRoots: [await this.workspace.root(project)], networkAccess: false },
+      ...reviewer
+    };
+  }
   async session(project, id) {
     if (!describeTool("codex").sessionPattern.test(id)) throw new Error("Invalid session id");
     const rpc = await this.rpc(project);
@@ -12431,6 +12469,10 @@ var CodexAdapter = class {
     if (op === "auth.poll") return this.auth.poll(project, p);
     if (op === "auth.cancel") return this.auth.cancel(project, p.flowId);
     const rpc = await this.rpc(project);
+    if (op === "configuration.permissionModes") {
+      const { autoReview: _, ...options } = await this.permissionModes(project, rpc);
+      return options;
+    }
     if (op === "auth.status") {
       const result = await rpc.request("account/read", { refreshToken: false });
       return {
@@ -12530,6 +12572,7 @@ var CodexAdapter = class {
     if (op === "sessions.prompt") {
       if (!id) throw new Error("Session required");
       await this.session(project, id);
+      const permissions = await this.permissionOverrides(project, rpc, p.permissionMode);
       await this.resume(project, id, rpc);
       const input = [];
       const lines = [];
@@ -12544,7 +12587,7 @@ var CodexAdapter = class {
       const selectedModel = p.model;
       const model = selectedModel?.providerID === "codex" && typeof selectedModel.modelID === "string" ? selectedModel.modelID : void 0;
       const effort = selectedReasoningLevel(p, "effort");
-      const result = await rpc.request("turn/start", { threadId: id, input, ...model ? { model } : {}, ...effort ? { effort } : {} });
+      const result = await rpc.request("turn/start", { threadId: id, input, ...model ? { model } : {}, ...effort ? { effort } : {}, ...permissions });
       this.activeTurns.set(id, result.turn.id);
       return result;
     }
@@ -12619,6 +12662,7 @@ var OPERATIONS2 = [
   ...DAEMON_OPERATIONS,
   ...AUTH_OPERATIONS,
   "configuration.models",
+  "configuration.permissionModes",
   "sessions.list",
   "sessions.create",
   "sessions.get",
@@ -12811,6 +12855,12 @@ var ZcodeAdapter = class {
     if (op === "auth.poll") return this.auth.poll(project, p);
     if (op === "auth.cancel") return this.auth.cancel(project, p.flowId);
     const rpc = await this.rpc(project);
+    if (op === "configuration.permissionModes") return { defaultMode: "ask", modes: [
+      { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u4F7F\u7528 ZCode build \u6A21\u5F0F\uFF0C\u4FEE\u6539\u6587\u4EF6\u524D\u8BF7\u6C42\u6279\u51C6" },
+      { id: "edit", label: "\u81EA\u52A8\u7F16\u8F91", description: "\u81EA\u52A8\u7F16\u8F91\u76F8\u5173\u6587\u4EF6\uFF0C\u5176\u4ED6\u64CD\u4F5C\u6309 ZCode \u539F\u751F\u89C4\u5219\u5BA1\u6279" },
+      { id: "plan", label: "\u53EA\u8BFB\u89C4\u5212", description: "\u4F7F\u7528 ZCode plan \u6A21\u5F0F\uFF0C\u68C0\u67E5\u9879\u76EE\u5E76\u5236\u5B9A\u8BA1\u5212" },
+      { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u4F7F\u7528 ZCode yolo \u6A21\u5F0F\uFF0C\u51CF\u5C11\u5DE5\u5177\u64CD\u4F5C\u786E\u8BA4" }
+    ] };
     if (op === "configuration.models" || op === "auth.status") {
       const snapshot = await rpc.request("session/create", { workspace: await this.workspaceRef(project), persistence: "deferred", titleGenerationEnabled: false, toolAllowlist: [] });
       try {
@@ -12886,7 +12936,8 @@ var ZcodeAdapter = class {
     }
     if (op === "sessions.prompt") {
       if (!id) throw new Error("Session required");
-      await this.session(project, id);
+      const session = await this.session(project, id);
+      if (p.permissionMode !== void 0 && typeof session.status === "string" && !["idle", "completed", "stopped", "closed", "failed", "error"].includes(session.status.toLowerCase())) throw new Error("Wait for the active task before changing permission mode");
       await this.watch(project, rpc, id);
       const lines = [];
       if (typeof p.text === "string" && p.text.trim()) lines.push(screenshotPrompt(p.text));
@@ -12895,6 +12946,12 @@ var ZcodeAdapter = class {
         lines.push(`Attached file: ${upload.destination} (${upload.name}, ${upload.mime}). Read this file if relevant to the task.`);
       }
       if (!lines.length) throw new Error("Message or attachments required");
+      if (p.permissionMode !== void 0) {
+        const modes = { ask: "build", edit: "edit", plan: "plan", full: "yolo" };
+        const mode = typeof p.permissionMode === "string" && Object.hasOwn(modes, p.permissionMode) ? modes[p.permissionMode] : void 0;
+        if (!mode) throw new Error("Unsupported permission mode");
+        await rpc.request("session/setMode", { sessionId: id, mode });
+      }
       const selected = p.model;
       if (selected?.providerID && selected.modelID) {
         let level = selectedReasoningLevel(p, "model.options.reasoningLevel");
@@ -12986,6 +13043,22 @@ var ZcodeAdapter = class {
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { readFile as readFile8, readdir as readdir3, rm as rm2 } from "node:fs/promises";
 import { dirname as dirname5 } from "node:path";
+
+// src/tools/pi-permissions.ts
+var PI_PERMISSION_TITLE = "Octopus \u5DE5\u5177\u6388\u6743";
+var PI_PERMISSION_EXTENSION = `
+export default function (pi) {
+  const ready = process.env.OCTOPUS_PI_PERMISSION_READY;
+  pi.on('session_start', (_event, ctx) => ctx.ui.notify(ready, 'info'));
+  pi.on('tool_call', async (event, ctx) => {
+    if (!ctx.hasUI) return { block: true, reason: '\u5DE5\u5177\u64CD\u4F5C\u9700\u8981\u7528\u6237\u6279\u51C6' };
+    const allowed = await ctx.ui.confirm(${JSON.stringify(PI_PERMISSION_TITLE)}, JSON.stringify({ toolName: event.toolName, input: event.input }));
+    if (allowed !== true) return { block: true, reason: '\u7528\u6237\u62D2\u7EDD\u4E86\u5DE5\u5177\u64CD\u4F5C' };
+  });
+}
+`;
+
+// src/tools/pi.ts
 var OPERATIONS3 = [
   ...DAEMON_OPERATIONS,
   "sessions.list",
@@ -12998,7 +13071,9 @@ var OPERATIONS3 = [
   "sessions.delete",
   "auth.status",
   "configuration.models",
+  "configuration.permissionModes",
   "permissions.list",
+  "permissions.reply",
   "questions.list",
   "questions.reply",
   "questions.reject"
@@ -13018,6 +13093,7 @@ var PiAdapter = class {
   questions = /* @__PURE__ */ new Map();
   mutations = /* @__PURE__ */ new Map();
   deleting = /* @__PURE__ */ new Set();
+  reconfiguring = /* @__PURE__ */ new Set();
   supportedOperations() {
     return OPERATIONS3;
   }
@@ -13072,7 +13148,7 @@ var PiAdapter = class {
         this.partials.delete(this.key(project, id));
         this.active.delete(this.key(project, id));
         this.clearQuestions(project, id);
-        this.emit(project, "session.error", { sessionID: id, message: "Pi connection closed; reconnect to resume the saved session" });
+        if (!this.reconfiguring.has(this.key(project, id))) this.emit(project, "session.error", { sessionID: id, message: "Pi connection closed; reconnect to resume the saved session" });
       }
     });
   }
@@ -13090,16 +13166,20 @@ var PiAdapter = class {
         question.timer.unref();
       }
       this.questions.set(id, question);
-      this.emit(project, "question.request", { sessionID: sessionId, requestId: id });
+      this.emit(project, this.isPermission(question) ? "permission.request" : "question.request", { sessionID: sessionId, requestId: id });
     }).catch(() => {
     });
   }
   clearQuestions(project, id) {
     for (const [key, question] of this.questions) if (question.project === project && question.sessionId === id) {
       clearTimeout(question.timer);
+      if (!question.rpc.exited) question.rpc.notify("extension_ui_response", { id: question.detail.id, cancelled: true });
       this.questions.delete(key);
     }
   }
+  isPermission(question) {
+    return question.detail.method === "confirm" && question.detail.title === PI_PERMISSION_TITLE;
+  }
   close() {
     for (const question of this.questions.values()) {
       clearTimeout(question.timer);
@@ -13157,6 +13237,10 @@ var PiAdapter = class {
   async execute(command, project) {
     const op = command.operation, p = command.payload, id = command.sessionId;
     if (!OPERATIONS3.includes(op)) unsupportedOperation("pi", op);
+    if (op === "configuration.permissionModes") return { defaultMode: "ask", modes: [
+      { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u901A\u8FC7 Pi \u5DE5\u5177\u6388\u6743\u6269\u5C55\uFF0C\u5728\u6BCF\u6B21\u5DE5\u5177\u6267\u884C\u524D\u8BF7\u6C42\u6279\u51C6" },
+      { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u6309 Pi \u539F\u751F\u6743\u9650\u6267\u884C\u5DE5\u5177\uFF0C\u4E0D\u542F\u7528\u9010\u6B21\u5BA1\u6279\uFF1B\u4E0D\u63D0\u4F9B\u7CFB\u7EDF\u6C99\u7BB1" }
+    ] };
     if (op === "auth.status") {
       const rpc2 = await this.runtime.connect(project);
       const result = await rpc2.request("get_available_models");
@@ -13198,11 +13282,26 @@ var PiAdapter = class {
     }
     if (op === "permissions.list") {
       if (id) await this.session(project, id);
-      return [];
+      return [...this.questions.values()].filter((q) => q.project === project && (!id || q.sessionId === id) && this.isPermission(q)).map((q) => ({
+        id: q.id,
+        sessionID: q.sessionId,
+        permission: "Pi \u5DE5\u5177\u64CD\u4F5C",
+        patterns: [q.detail.message ?? ""],
+        replies: ["once", "reject"]
+      }));
+    }
+    if (op === "permissions.reply") {
+      const question = this.questions.get(String(p.requestId));
+      if (!question || !this.isPermission(question) || question.project !== project || id && id !== question.sessionId) throw new Error("Request is no longer pending in this session");
+      if (p.reply !== "once" && p.reply !== "reject") throw new Error("Invalid permission reply");
+      question.rpc.notify("extension_ui_response", { id: question.detail.id, confirmed: p.reply === "once" });
+      clearTimeout(question.timer);
+      this.questions.delete(question.id);
+      return { ok: true };
     }
     if (op === "questions.list") {
       if (id) await this.session(project, id);
-      return [...this.questions.values()].filter((q) => q.project === project && (!id || q.sessionId === id)).map((q) => ({
+      return [...this.questions.values()].filter((q) => q.project === project && (!id || q.sessionId === id) && !this.isPermission(q)).map((q) => ({
         id: q.id,
         sessionID: q.sessionId,
         questions: [{
@@ -13216,7 +13315,7 @@ var PiAdapter = class {
     }
     if (op === "questions.reply" || op === "questions.reject") {
       const question = this.questions.get(String(p.requestId));
-      if (!question || question.project !== project || id && id !== question.sessionId) throw new Error("Request is no longer pending in this session");
+      if (!question || this.isPermission(question) || question.project !== project || id && id !== question.sessionId) throw new Error("Request is no longer pending in this session");
       const answers = Array.isArray(p.answers) ? p.answers : [];
       const first = Array.isArray(answers[0]) ? answers[0][0] : answers[0];
       const value = typeof first === "string" ? first : "";
@@ -13234,13 +13333,14 @@ var PiAdapter = class {
         await this.runtime.closeSession(project, id);
         await rm2(this.runtime.sessionFile(project, id), { force: true });
         await rm2(this.metadataPath(project, id));
+        await rm2(this.runtime.sessionFile(project, id).replace(/\.jsonl$/, ".permission.ts"), { force: true });
         this.clearQuestions(project, id);
       } finally {
         this.deleting.delete(this.key(project, id));
       }
       return { ok: true };
     }
-    const rpc = await this.rpc(project, id);
+    let rpc = await this.rpc(project, id);
     if (op === "sessions.status") {
       const state = await rpc.request("get_state");
       return { [id]: { type: this.active.has(this.key(project, id)) || state.isStreaming || state.isCompacting || (state.pendingMessageCount ?? 0) > 0 ? "busy" : "idle" } };
@@ -13256,6 +13356,7 @@ var PiAdapter = class {
       return this.media.messages(project, id, this.messages(messages, this.key(project, id)));
     }
     if (op === "sessions.abort") {
+      this.clearQuestions(project, id);
       await rpc.request("clear_queue");
       await rpc.request("abort");
       return { ok: true };
@@ -13270,6 +13371,22 @@ var PiAdapter = class {
         } else lines.push(`Attached file: ${upload.destination} (${upload.name}, ${upload.mime}). Read this file if relevant to the task.`);
       }
       if (!lines.length && !images.length) throw new Error("Message or attachments required");
+      if (p.permissionMode !== void 0) {
+        if (p.permissionMode !== "ask" && p.permissionMode !== "full") throw new Error("Unsupported permission mode");
+        if (p.permissionMode !== (session.permissionMode ?? "full")) {
+          const state = await rpc.request("get_state");
+          if (this.active.has(this.key(project, id)) || state.isStreaming || state.isCompacting || (state.pendingMessageCount ?? 0) > 0) throw new Error("Wait for the active task before changing permission mode");
+          session.permissionMode = p.permissionMode;
+          await atomicJson(this.metadataPath(project, id), session);
+          this.reconfiguring.add(this.key(project, id));
+          try {
+            await this.runtime.closeSession(project, id);
+            rpc = await this.rpc(project, id);
+          } finally {
+            this.reconfiguring.delete(this.key(project, id));
+          }
+        }
+      }
       const model = p.model;
       const level = selectedReasoningLevel(p, "level");
       if (model && typeof model.providerID === "string" && typeof model.modelID === "string") await rpc.request("set_model", { provider: model.providerID, modelId: model.modelID });
@@ -13286,7 +13403,8 @@ var PiAdapter = class {
 
 // src/tools/pi-runtime.ts
 import { execFile as execFile5, spawn as spawn5 } from "node:child_process";
-import { mkdir as mkdir8, open as open8 } from "node:fs/promises";
+import { mkdir as mkdir8, open as open8, writeFile as writeFile6 } from "node:fs/promises";
+import { randomUUID as randomUUID16 } from "node:crypto";
 import { join as join13 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 var run3 = promisify5(execFile5);
@@ -13405,32 +13523,58 @@ ${bytes.toString("utf8")}`);
     await this.kill(key);
     const directory = this.project(projectId).directory;
     await mkdir8(join13(this.config.stateDirectory, "pi-sessions", projectId), { recursive: true, mode: 448 });
+    const sessionFile = sessionId ? this.sessionFile(projectId, sessionId) : void 0;
+    const policy = sessionFile ? await readJson(sessionFile.replace(/\.jsonl$/, ".json")) : void 0;
+    const gated = policy?.permissionMode === "ask";
+    const extension = sessionFile?.replace(/\.jsonl$/, ".permission.ts");
+    if (gated) await writeFile6(extension, PI_PERMISSION_EXTENSION, { mode: 384 });
+    const readyToken = gated ? `octopus-permissions-ready:${randomUUID16()}` : "";
     const logPath = join13(this.config.stateDirectory, `pi-${key}.log`);
     const log = await open8(logPath, "a", 384);
     if (generation !== this.generation) {
       await log.close();
       throw new Error("Pi runtime stopped during startup");
     }
-    const args = [...describeTool("pi").serverArgs, ...sessionId ? ["--session", this.sessionFile(projectId, sessionId)] : ["--no-session"]];
-    const child = spawn5(this.config.tool.command, args, { cwd: directory, env: { ...process.env }, stdio: ["pipe", "pipe", log.fd] });
+    const args = [...describeTool("pi").serverArgs, ...sessionFile ? ["--session", sessionFile] : ["--no-session"], ...gated ? ["--extension", extension] : []];
+    const child = spawn5(this.config.tool.command, args, { cwd: directory, env: { ...process.env, OCTOPUS_PI_PERMISSION_READY: readyToken }, stdio: ["pipe", "pipe", log.fd] });
     child.once("close", () => {
       void log.close();
     });
     this.logPaths.add(logPath);
+    let resolveReady = () => {
+    }, rejectReady = (_error) => {
+    };
+    let readyTimeout;
+    const ready = gated ? new Promise((resolve5, reject) => {
+      resolveReady = resolve5;
+      rejectReady = reject;
+      readyTimeout = setTimeout(() => reject(new Error("Pi \u5DE5\u5177\u6388\u6743\u6269\u5C55\u672A\u5C31\u7EEA\uFF0C\u5DF2\u505C\u6B62\u4F1A\u8BDD\u4EE5\u907F\u514D\u8DF3\u8FC7\u5BA1\u6279")), 1e4);
+    }) : Promise.resolve();
     const rpc = new LineRpc(child, {
       ...handlers,
+      onNotification: (type, data) => {
+        const detail = data;
+        if (gated && type === "extension_ui_request" && detail.method === "notify" && detail.message === readyToken) {
+          resolveReady();
+          return;
+        }
+        handlers.onNotification?.(type, data);
+      },
       onClose: (reason) => {
+        rejectReady(new Error("Pi \u5DE5\u5177\u6388\u6743\u8FDE\u63A5\u5DF2\u5173\u95ED"));
         handlers.onClose?.(reason);
       }
     }, "pi");
     this.processes.set(key, { child, rpc, projectId, sessionId });
     try {
-      await rpc.request("get_state");
+      await Promise.all([rpc.request("get_state"), ready]);
       if (generation !== this.generation) throw new Error("Pi runtime stopped during startup");
       return rpc;
     } catch (error) {
       await this.kill(key);
       throw error;
+    } finally {
+      clearTimeout(readyTimeout);
     }
   }
   async kill(key) {
@@ -13594,7 +13738,7 @@ var ProjectRegistry = class {
 };
 
 // src/terminal.ts
-import { randomUUID as randomUUID16 } from "node:crypto";
+import { randomUUID as randomUUID17 } from "node:crypto";
 import { access as access2, stat as stat9 } from "node:fs/promises";
 import { constants as constants5 } from "node:fs";
 import { platform as platform3, userInfo as userInfo3 } from "node:os";
@@ -13680,7 +13824,7 @@ var TerminalManager = class {
         throw new Error(`\u7EC8\u7AEF Shell \u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u6267\u884C\uFF1A${shell}\uFF1B\u8BF7\u4FEE\u6B63 Proxy \u670D\u52A1\u7684 SHELL \u73AF\u5883\u53D8\u91CF`);
       }
       const { helper } = await ensureTerminalSupport();
-      const id = randomUUID16();
+      const id = randomUUID17();
       const path = [
         process.env.PATH,
         "/usr/bin",
@@ -13779,7 +13923,7 @@ var PlatformDesktopSession = class {
 
 // src/remote-manager.ts
 import { fork } from "node:child_process";
-import { randomBytes as randomBytes2, randomUUID as randomUUID17 } from "node:crypto";
+import { randomBytes as randomBytes2, randomUUID as randomUUID18 } from "node:crypto";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/remote-stun.ts
@@ -13913,7 +14057,7 @@ var RemoteManager = class {
     if (this.current) throw new Error("\u4E3B\u673A\u6B63\u5728\u88AB\u63A7\u5236");
     const quality = RemoteQualitySchema.parse(payload.quality ?? "hd");
     const budget = remoteSessionBudget(this.config, quality, payload.quality === void 0);
-    const session = { remoteId: randomUUID17(), owner, closed: false, signaling: Promise.resolve(), signals: 0, signalWindow: Date.now(), candidates: 0 };
+    const session = { remoteId: randomUUID18(), owner, closed: false, signaling: Promise.resolve(), signals: 0, signalWindow: Date.now(), candidates: 0 };
     this.current = session;
     try {
       const [permissions, stunUrls] = await Promise.all([
@@ -13992,7 +14136,7 @@ var RemoteManager = class {
 };
 
 // src/tool-selection.ts
-import { randomBytes as randomBytes3, randomUUID as randomUUID18 } from "node:crypto";
+import { randomBytes as randomBytes3, randomUUID as randomUUID19 } from "node:crypto";
 import { access as access3, constants as constants6, readFile as readFile10 } from "node:fs/promises";
 import { platform as platform5 } from "node:os";
 import { isDeepStrictEqual } from "node:util";
@@ -14136,7 +14280,7 @@ var ToolSelection = class {
     });
   }
   modelCommand(projectId) {
-    return { type: "command", id: randomUUID18(), botId: this.config.botId, operation: "configuration.models", projectId, payload: {} };
+    return { type: "command", id: randomUUID19(), botId: this.config.botId, operation: "configuration.models", projectId, payload: {} };
   }
   profiles(raw) {
     return raw.toolProfiles && typeof raw.toolProfiles === "object" && !Array.isArray(raw.toolProfiles) ? raw.toolProfiles : {};

package/dist/cli.js

@@ -35,7 +35,7 @@ import {
   supportedPlatform,
   systemdUnitPath,
   toolSearchDirs
-} from "./chunk-R73E3EFB.js";
+} from "./chunk-J3ZMMSW2.js";
 import {
   DESKTOP_PERMISSION_GUIDANCE,
   PlatformDesktop,

package/dist/main.js

@@ -2,7 +2,7 @@
 import {
   ConfigError,
   runDaemon
-} from "./chunk-R73E3EFB.js";
+} from "./chunk-J3ZMMSW2.js";
 import "./chunk-GS3Q6EU5.js";
 
 // src/main.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skylandnpm/octopus-proxy",
-  "version": "0.1.63",
+  "version": "0.1.64",
   "type": "module",
   "description": "Octopus host proxy: OpenCode, Codex, ZCode and Pi adapters with service installer CLI",
   "bin": {