@xcanwin/manyoyo 8.6.11 → 8.7.0

package/README.md

@@ -54,7 +54,7 @@ manyoyo init all   # 把本机已有的 Agent 配置搬进来
 manyoyo run -y c   # 在沙箱里以 YOLO 模式启动 Claude Code
 ```
 
-默认镜像 `ghcr.io/xcanwin/manyoyo` 首次使用时自动拉取；需要自定义镜像时再执行 `manyoyo build --iv 2.2.0-common`。更多命令见[命令速查](https://xcanwin.github.io/manyoyo/reference/cli-options)。
+默认镜像 `ghcr.io/xcanwin/manyoyo` 首次使用时自动拉取；需要自定义镜像时再执行 `manyoyo build --iv 2.3.0-common`。更多命令见[命令速查](https://xcanwin.github.io/manyoyo/reference/cli-options)。
 
 ## 它能做什么
 
@@ -110,7 +110,7 @@ manyoyo init all   # import the agent configs already on this machine
 manyoyo run -y c   # start Claude Code in YOLO mode inside the sandbox
 ```
 
-The default image `ghcr.io/xcanwin/manyoyo` is pulled automatically on first use; run `manyoyo build --iv 2.2.0-common` only if you need a custom image. More commands: [CLI reference](https://xcanwin.github.io/manyoyo/en/reference/cli-options).
+The default image `ghcr.io/xcanwin/manyoyo` is pulled automatically on first use; run `manyoyo build --iv 2.3.0-common` only if you need a custom image. More commands: [CLI reference](https://xcanwin.github.io/manyoyo/en/reference/cli-options).
 
 ## What it does
 

package/bin/manyoyo.js

@@ -9,6 +9,7 @@ const net = require('net');
 const readline = require('readline');
 const { Command, Help } = require('commander');
 const { startWebServer } = require('../lib/web/server');
+const { authSessionsFilePath } = require('../lib/web/auth-store');
 const { isSidecarName } = require('../lib/egress-sidecar');
 const { buildContainerRunArgs, buildContainerRunCommand, runWithEnvFile, hasNetworkArg } = require('../lib/container-run');
 const { getManyoyoConfigPath, readManyoyoConfig, syncGlobalImageVersion } = require('../lib/global-config');
@@ -34,7 +35,7 @@ const { launchApp, getAppStatePath, openBrowser } = require('../lib/app-launcher
 const { initAgentConfigs } = require('../lib/init-config');
 const { buildImage } = require('../lib/image-build');
 const { resolveAgentResumeArg, buildAgentResumeCommand } = require('../lib/agent-resume');
-const { resolveYoloCommand } = require('../lib/agent-adapters');
+const { resolveYoloCommand, withCodexBaseUrl } = require('../lib/agent-adapters');
 const { runDoctorChecks, applyDoctorFixes } = require('../lib/doctor');
 const { resolveContainerMode } = require('../lib/container-modes');
 const { runPlaywrightCommand, buildContainerIntegration, mergeIntegration } = require('../lib/plugin');
@@ -60,18 +61,14 @@ const {
     formatServeLogValue,
     getServeProcessSnapshot
 } = require('../lib/serve-log');
+const { formatNow, resolveQuickChatPath, expandTemplate } = require('../lib/name-template');
 const { version: BIN_VERSION, imageVersion: IMAGE_VERSION_DEFAULT } = require('../package.json');
 const IMAGE_VERSION_BASE = String(IMAGE_VERSION_DEFAULT || '1.0.0').split('-')[0];
 const IMAGE_VERSION_HELP_EXAMPLE = IMAGE_VERSION_DEFAULT || `${IMAGE_VERSION_BASE}-common`;
 
-// Helper function to format date like bash $(date +%m%d-%H%M)
+// {now} 与默认容器名用的时间：年月日-时分秒（命令行与网页共用 lib/name-template.js）
 function formatDate() {
-    const now = new Date();
-    const month = String(now.getMonth() + 1).padStart(2, '0');
-    const day = String(now.getDate()).padStart(2, '0');
-    const hour = String(now.getHours()).padStart(2, '0');
-    const minute = String(now.getMinutes()).padStart(2, '0');
-    return `${month}${day}-${hour}${minute}`;
+    return formatNow();
 }
 
 function detectCommandName() {
@@ -94,6 +91,7 @@ const CONFIG = {
 // Default configuration
 let CONTAINER_NAME = `my-${formatDate()}`;
 let HOST_PATH = process.cwd();
+let HOST_PATH_TEMPLATED = false;
 let CONTAINER_PATH = HOST_PATH;
 let IMAGE_NAME = "ghcr.io/xcanwin/manyoyo";
 let IMAGE_VERSION = IMAGE_VERSION_DEFAULT || `${IMAGE_VERSION_BASE}-common`;
@@ -158,11 +156,7 @@ function normalizeCommandSuffix(suffix) {
 }
 
 function resolveContainerNameTemplate(name) {
-    if (typeof name !== 'string') {
-        return name;
-    }
-    const nowValue = formatDate();
-    return name.replace(/\{now\}|\$\{now\}/g, nowValue);
+    return expandTemplate(name, { now: formatDate() }).value;
 }
 
 function pickConfigValue(...values) {
@@ -1597,6 +1591,7 @@ https://github.com/xcanwin/manyoyo
         isServerStopMode,
         pickConfigValue,
         resolveContainerNameTemplate,
+        templateVars: { now: formatDate(), quickChatPath: resolveQuickChatPath(config) },
         normalizeCommandSuffix,
         normalizeJsonEnvMap,
         normalizeCliEnvMap,
@@ -1607,6 +1602,7 @@ https://github.com/xcanwin/manyoyo
     });
 
     HOST_PATH = resolvedRuntime.hostPath;
+    HOST_PATH_TEMPLATED = resolvedRuntime.hostPathTemplated === true;
     CONTAINER_NAME = resolvedRuntime.containerName;
     CONTAINER_PATH = resolvedRuntime.containerPath;
     IMAGE_NAME = resolvedRuntime.imageName;
@@ -1826,6 +1822,7 @@ function createRuntimeContext(modeState = {}) {
     return {
         containerName: CONTAINER_NAME,
         hostPath: HOST_PATH,
+        hostPathTemplated: HOST_PATH_TEMPLATED,
         containerPath: CONTAINER_PATH,
         imageName: IMAGE_NAME,
         imageVersion: IMAGE_VERSION,
@@ -1876,6 +1873,10 @@ function handleRemoveContainer(runtime) {
 }
 
 function validateHostPath(runtime) {
+    // 目录是按模板（{now} / {quickChatPath}）生成的：此刻才建，只在真的要用它的时候建
+    if (runtime.hostPathTemplated && !fs.existsSync(runtime.hostPath)) {
+        fs.mkdirSync(runtime.hostPath, { recursive: true });
+    }
     if (!fs.existsSync(runtime.hostPath)) {
         console.log(`${RED}⚠️  错误: 宿主机路径不存在: ${runtime.hostPath}${NC}`);
         process.exit(1);
@@ -2352,7 +2353,7 @@ async function executeInContainer(runtime, defaultCommand) {
     const exec = buildExecArgs({ homeDir: os.homedir(), dockerExecArgs }, runtime.containerName, {
         interactive: true,
         tty: true,
-        command: runtime.execCommand ? ['/bin/bash', '-c', runtime.execCommand] : ['/bin/bash']
+        command: runtime.execCommand ? ['/bin/bash', '-c', withCodexBaseUrl(runtime.execCommand)] : ['/bin/bash']
     });
     try {
         spawnSync(`${DOCKER_CMD}`, exec.args, { stdio: 'inherit', env: DOCKER_ENV });
@@ -2574,6 +2575,7 @@ async function runWebServerMode(runtime) {
         importState: () => readImportState(),
         updateInfo: () => updateChecker.getInfo(),
         loginTokenDir: getLoginTokenDir(),
+        authSessionsFile: authSessionsFilePath(os.homedir(), runtime.serverHost, runtime.serverPort),
         doctorCheck: async () => runDoctorChecks({
             selectRuntime: () => CONTAINER_RUNTIME,
             runCommand: runRuntimeCommandAsync,

package/docker/manyoyo.Dockerfile

@@ -2,7 +2,7 @@
 # Stage 1: 缓存准备阶段 - 智能检测缓存或下载
 # ==============================================================================
 # 镜像源参数化（默认使用阿里云，可按需覆盖），两个阶段共享同一默认值
-ARG APT_MIRROR=https://mirrors.aliyun.com
+ARG APT_MIRROR=https://mirrors.tencent.com
 ARG NODEJS_MIRROR=https://mirrors.tencent.com/nodejs-release/
 
 FROM ubuntu:24.04 AS cache-stage

package/docker/res/claude/settings.json

@@ -7,5 +7,25 @@
     "statusLine": {
         "type": "command",
         "command": "bash /root/.claude/statusline.sh"
+    },
+    "hooks": {
+        "Stop": [
+            {
+                "hooks": [
+                    {
+                        "type": "command",
+                        "command": "[ \"$CLAUDE_CODE_ENTRYPOINT\" = cli ] || exit 0; sleep 0; printf '%s' '{\"terminalSequence\":\"\\u0007\"}'"
+                    },
+                    {
+                        "type": "command",
+                        "command": "[ \"$CLAUDE_CODE_ENTRYPOINT\" = cli ] || exit 0; sleep 0.3; printf '%s' '{\"terminalSequence\":\"\\u0007\"}'"
+                    },
+                    {
+                        "type": "command",
+                        "command": "[ \"$CLAUDE_CODE_ENTRYPOINT\" = cli ] || exit 0; sleep 0.6; printf '%s' '{\"terminalSequence\":\"\\u0007\"}'"
+                    }
+                ]
+            }
+        ]
     }
 }

package/lib/agent-adapters/index.js

@@ -41,7 +41,24 @@ function resolveYoloCommand(yolo) {
     return adapter.yoloCommand;
 }
 
+// Codex 0.160 / 0.164 实测不认环境变量 OPENAI_BASE_URL，只认 `-c openai_base_url=...`。
+// 向导给 Codex 配“兼容服务”写的是环境变量，所以执行 codex 的命令要在容器里由 shell 展开出 -c：
+// 变量没设就一个参数都不多；地址只在容器里从环境变量读，不拼进命令文本（也就不会出现在日志和 ps 里）。
+// 只处理以 codex 开头（可带前置的 KEY=值）的命令；命令里已经写了 openai_base_url 就以用户的为准。
+const CODEX_BASE_URL_FLAGS = '${OPENAI_BASE_URL:+-c "openai_base_url=\\"$OPENAI_BASE_URL\\""}';
+// 有 exec / exec resume 子命令时插在它们后面（codex exec -c … --json …），保持 `codex exec` 连在一起
+const CODEX_COMMAND_START = /^((?:\s*[A-Za-z_][A-Za-z0-9_]*=(?:"(?:\\.|[^"])*"|'(?:\\.|[^'])*'|[^\s]*)\s+)*\s*)codex(?:\s+exec(?:\s+resume)?)?(?=\s|$)/;
+
+function withCodexBaseUrl(command) {
+    const text = String(command || '');
+    if (!text || /openai_base_url/.test(text)) return text;
+    const match = text.match(CODEX_COMMAND_START);
+    if (!match) return text;
+    return `${match[0]} ${CODEX_BASE_URL_FLAGS}${text.slice(match[0].length)}`;
+}
+
 module.exports = {
     AGENT_ADAPTERS,
-    resolveYoloCommand
+    resolveYoloCommand,
+    withCodexBaseUrl
 };

package/lib/container-network.js

@@ -113,6 +113,11 @@ function uniqueBy(items, keyFn) {
     });
 }
 
+// 默认镜像本地没有时各运行时的报错（--pull=never）：podman `image not known`，docker `Unable to find image … locally` / `No such image`
+function isMissingImageError(error) {
+    return /image not known|no such image|unable to find image|image .* not found locally/i.test(String(error && error.message || error));
+}
+
 function createNetworkManager(options) {
     const homeDir = options.homeDir || os.homedir();
     const command = options.command;
@@ -153,8 +158,33 @@ function createNetworkManager(options) {
         });
     }
 
+    // 一次性 helper（改规则的 nft、读 /etc/hosts）和 sidecar 用哪个镜像：
+    // 优先用 serve 的默认镜像——它一定有 nft、node 和 sidecar 要的文件（2.1.x 及更早的镜像里没有 nft，
+    // 用户可能拿旧镜像建过容器，不能默认用容器自己的镜像）。只有默认镜像本地没有（--pull=never 下报“镜像不存在”）时，
+    // 才退回目标容器自己的镜像。判断靠运行失败的输出，不额外起进程：
+    // podman 报 `<镜像>: image not known`；docker 报 `Unable to find image '<镜像>' locally` 或 `No such image: <镜像>`
+    function ownImageOf(info) {
+        return info && info.Config && typeof info.Config.Image === 'string' ? info.Config.Image : '';
+    }
+
+    async function runWithFallbackImage(info, makeArgs, runOptions) {
+        const primary = getImageRef();
+        const own = ownImageOf(info);
+        try {
+            return await run(makeArgs(primary), runOptions);
+        } catch (e) {
+            if (!isMissingImageError(e) || !own || own === primary) throw e;
+            try {
+                return await run(makeArgs(own), runOptions);
+            } catch (e2) {
+                if (isMissingImageError(e2)) throw new Error(`默认镜像 ${primary} 和容器自己的镜像 ${own} 本地都没有: ${e2.message}`);
+                throw e2;
+            }
+        }
+    }
+
     // 域名规则的过滤代理：manyoyo 网络里的 sidecar 容器，按来源 IP 认容器（见 egress-sidecar.js）
-    const sidecar = createSidecarManager({ run, command, homeDir, imageRef: getImageRef, networkName: NETWORK_NAME, ensureNetwork: ensureBridgeNetwork, getUpstream });
+    const sidecar = createSidecarManager({ run, command, homeDir, imageRef: getImageRef, isMissingImageError, networkName: NETWORK_NAME, ensureNetwork: ensureBridgeNetwork, getUpstream });
 
     // buildExecArgs 只需要同步 inspect 取 id；这里 withEnv:false 不会用到
     const execCtx = { homeDir, dockerExecArgs: () => '' };
@@ -236,8 +266,7 @@ function createNetworkManager(options) {
         const hostConfig = info.HostConfig || {};
         (hostConfig.Dns || []).filter(ip => net.isIP(ip)).forEach(ip => args.push('--dns', ip));
         (hostConfig.ExtraHosts || []).filter(entry => /^[A-Za-z0-9._-]+:(?:host-gateway|[0-9a-fA-F:.]+)$/.test(entry)).forEach(entry => args.push('--add-host', entry));
-        args.push('--entrypoint', 'cat', getImageRef(), '/etc/hosts', '/etc/resolv.conf');
-        return await run(args, { timeout: 30000 });
+        return await runWithFallbackImage(info, image => [...args, '--entrypoint', 'cat', image, '/etc/hosts', '/etc/resolv.conf'], { timeout: 30000 });
     }
 
     // 容器间：别的容器入站规则里允许了本容器（来源写 @containers 或 @container:<本容器>），本容器才能出去到它（派生行）。
@@ -303,7 +332,7 @@ function createNetworkManager(options) {
         if (proxied) {
             const selfBridge = safeBridge(self.info);
             if (!selfBridge) throw new Error('域名规则需要容器在 manyoyo 网络里，这个容器的网络不支持');
-            const proxy = await sidecar.ensure();
+            const proxy = await sidecar.ensure({ fallbackImage: ownImageOf(self.info) });
             allow.push({ ip: proxy.ip, ports: String(proxy.port), proto: 'tcp' });
             antiSpoof.push({ daddr: proxy.ip, saddr: selfBridge.ip });
             const url = `http://${proxy.ip}:${proxy.port}`;
@@ -363,8 +392,8 @@ function createNetworkManager(options) {
         sidecar.writeClients(clients);
     }
 
-    async function sendRuleset(name, text) {
-        await run([
+    async function sendRuleset(name, text, info) {
+        await runWithFallbackImage(info, image => [
             'run', '--rm', '-i',
             '--network', `container:${name}`,
             '--user', 'root',
@@ -372,7 +401,7 @@ function createNetworkManager(options) {
             '--security-opt', 'no-new-privileges',
             '--entrypoint', 'nft',
             '--pull=never',
-            getImageRef(),
+            image,
             '-f', '-'
         ], { input: text, timeout: 30000 });
     }
@@ -419,7 +448,7 @@ function createNetworkManager(options) {
             if (endpoints.proxyPolicy && selfBridge) clientCache.set(self.id, { ip: selfBridge.ip, entry: { id: self.id, ...endpoints.proxyPolicy } });
             else clientCache.delete(self.id);
             syncEgressClients(all); // 先让代理认得这个容器，再放行门闩
-            await sendRuleset(name, policyLib.buildNftRuleset(policy, endpoints));
+            await sendRuleset(name, policyLib.buildNftRuleset(policy, endpoints), self.info);
             await execInContainer(name, ['/bin/sh', '-c', `mkdir -p ${path.posix.dirname(GATE_READY)} && : > ${GATE_READY}`]);
             const privileged = Boolean(self.info.HostConfig && self.info.HostConfig.Privileged);
             const status = {
@@ -479,7 +508,7 @@ function createNetworkManager(options) {
             if (policyLib.usesProxy(policy)) {
                 try {
                     if (!await sidecar.isHealthy()) {
-                        await sidecar.ensure();
+                        await sidecar.ensure({ fallbackImage: ownImageOf(info) });
                         syncEgressClients(await listManaged());
                     }
                 } catch (e) { warn(`域名规则代理恢复失败: ${e.message}`); }
@@ -534,6 +563,15 @@ function createNetworkManager(options) {
         });
     }
 
+    // 没有“触发它的那个容器”时（定时自愈），用第一个要用代理的容器的镜像当退路
+    function fallbackImageOfProxied(all) {
+        const item = all.find(entry => {
+            if (!state.stateExists(homeDir, entry.id)) return false;
+            try { return policyLib.usesProxy(loadPolicy(entry.id)); } catch (e) { return false; }
+        });
+        return item ? ownImageOf(item.info) : '';
+    }
+
     // 过滤代理容器自己退出 / 被删：有用到它的容器就拉起来，并重写映射
     let lastHealAt = 0;
     let healTimer = null;
@@ -554,7 +592,7 @@ function createNetworkManager(options) {
         lastHealAt = Date.now();
         const all = await listManaged();
         if (!await needsSidecar(all)) return;
-        await sidecar.ensure();
+        await sidecar.ensure({ fallbackImage: fallbackImageOfProxied(all) });
         syncEgressClients(all);
     }
 
@@ -663,5 +701,6 @@ module.exports = {
     parseHostsAndResolv,
     parseUrlHostPort,
     isHostTarget,
+    isMissingImageError,
     createNetworkManager
 };

package/lib/egress-sidecar.js

@@ -111,6 +111,7 @@ function appFileContents() {
  * @param {string} options.command 运行时命令名（docker / podman，用来判断宿主机别名）
  * @param {string} options.homeDir
  * @param {() => string} options.imageRef 当前镜像
+ * @param {(error: Error) => boolean} [options.isMissingImageError] 运行失败是不是“镜像本地不存在”（决定要不要换备用镜像重试）
  * @param {string} options.networkName manyoyo 网络名
  * @param {() => Promise<void>} options.ensureNetwork
  * @param {() => string} [options.getUpstream] 上游代理（宿主机视角）
@@ -180,7 +181,7 @@ function createSidecarManager(options) {
         throw new Error(`域名规则代理没有起来${tail ? `: ${String(tail).trim().split('\n').slice(-2).join(' ')}` : ''}`);
     }
 
-    async function doEnsure() {
+    async function doEnsure(fallbackImage = '') {
         await options.ensureNetwork();
         const subnet = subnetOfNetwork(JSON.parse((await run(['network', 'inspect', networkName, '--format', '{{json .}}'])).trim().split('\n')[0] || 'null'));
         const ip = chooseSidecarIp(subnet, homeDir);
@@ -213,9 +214,22 @@ function createSidecarManager(options) {
             '--env', `EGRESS_PORT=${SIDECAR_PORT}`, '--env', `EGRESS_HOST_ALIAS=${hostAlias}`
         ];
         if (isDocker) args.push('--add-host', 'host.docker.internal:host-gateway');
-        args.push('--entrypoint', 'node', options.imageRef(), '/app/egress-sidecar-main.js');
+        const tail = ['/app/egress-sidecar-main.js'];
+        const runWith = image => run([...args, '--entrypoint', 'node', image, ...tail], { timeout: 60000 });
         try {
-            await run(args, { timeout: 60000 });
+            try {
+                await runWith(options.imageRef());
+            } catch (first) {
+                // 默认镜像本地没有（--pull=never）：用触发它的那个容器的镜像（只要里面有 node 就行，程序文件是从宿主机只读挂进去的）
+                const isMissing = options.isMissingImageError || (() => false);
+                if (!fallbackImage || fallbackImage === options.imageRef() || !isMissing(first)) throw first;
+                try {
+                    await runWith(fallbackImage);
+                } catch (second) {
+                    if (isMissing(second)) throw new Error(`默认镜像 ${options.imageRef()} 和容器自己的镜像 ${fallbackImage} 本地都没有: ${second.message}`);
+                    throw second;
+                }
+            }
         } catch (e) {
             const message = String(e.message);
             // 另一个进程（CLI / serve）刚好同时建好了它：直接用现成的
@@ -235,8 +249,8 @@ function createSidecarManager(options) {
     }
 
     /** 保证 sidecar 在运行，返回 {name, ip, port}；多处同时调用合并成一次。 */
-    function ensure() {
-        if (!inflight) inflight = doEnsure().finally(() => { inflight = null; });
+    function ensure({ fallbackImage = '' } = {}) {
+        if (!inflight) inflight = doEnsure(fallbackImage).finally(() => { inflight = null; });
         return inflight;
     }
 

package/lib/image-agents.js

@@ -0,0 +1,45 @@
+'use strict';
+
+const PROBE_AGENTS = ['claude', 'codex', 'gemini', 'opencode'];
+const PROBE_SCRIPT = `for c in ${PROBE_AGENTS.join(' ')}; do command -v "$c" >/dev/null 2>&1 && echo "$c"; done`;
+const PROBE_TIMEOUT_MS = 30000;
+
+/**
+ * 探测镜像里装了哪些 Agent CLI。结果按镜像 ID 缓存，同一镜像只探测一次；
+ * 同时到来的请求共用一次探测。拿不到结果时返回 null（未知，不缓存）。
+ * exec(args, { timeout }) → Promise<stdout>，抛错表示失败。
+ */
+function createImageAgentProbe(exec) {
+    const cache = new Map();
+    const inflight = new Map();
+
+    async function run(imageRef) {
+        let imageId = '';
+        try {
+            imageId = String(await exec(['image', 'inspect', '--format', '{{.Id}}', imageRef], { timeout: 10000 })).trim();
+        } catch (e) {
+            return null;
+        }
+        if (!imageId) return null;
+        if (cache.has(imageId)) return cache.get(imageId);
+        try {
+            const out = await exec([
+                'run', '--rm', '--network', 'none', '--entrypoint', '/bin/sh', imageRef, '-c', PROBE_SCRIPT
+            ], { timeout: PROBE_TIMEOUT_MS });
+            const found = String(out).split('\n').map(line => line.trim()).filter(line => PROBE_AGENTS.includes(line));
+            cache.set(imageId, found);
+            return found;
+        } catch (e) {
+            return null;
+        }
+    }
+
+    return function probeImageAgents(imageRef) {
+        if (inflight.has(imageRef)) return inflight.get(imageRef);
+        const promise = run(imageRef).finally(() => inflight.delete(imageRef));
+        inflight.set(imageRef, promise);
+        return promise;
+    };
+}
+
+module.exports = { createImageAgentProbe, PROBE_AGENTS };

package/lib/init-config.js

@@ -13,11 +13,12 @@ const AGENT_ENV_SCHEMA = {
         label: 'Claude Code',
         yolo: 'c',
         modelKey: 'ANTHROPIC_MODEL',
-        requiredAnyOf: ['ANTHROPIC_AUTH_TOKEN', 'CLAUDE_CODE_OAUTH_TOKEN'],
+        requiredAnyOf: ['ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_API_KEY', 'CLAUDE_CODE_OAUTH_TOKEN'],
         baseUrlKey: 'ANTHROPIC_BASE_URL',
         baseUrlPresets: [{ label: 'Anthropic 官方', value: 'https://api.anthropic.com' }],
         env: [
             { name: 'ANTHROPIC_AUTH_TOKEN', description: 'Anthropic API Key 或兼容服务的令牌', secret: true },
+            { name: 'ANTHROPIC_API_KEY', description: '部分服务商（如 Kimi Code）要求用 API Key 方式', secret: true },
             { name: 'CLAUDE_CODE_OAUTH_TOKEN', description: 'Claude Code OAuth 令牌（订阅登录）', secret: true },
             { name: 'ANTHROPIC_BASE_URL', description: 'API 地址（使用官方服务可留空）', secret: false },
             { name: 'ANTHROPIC_MODEL', description: '默认模型', secret: false },

package/lib/name-template.js

@@ -0,0 +1,52 @@
+'use strict';
+
+const os = require('os');
+const path = require('path');
+
+// 配置里 containerName / hostPath / containerPath 的占位符，命令行与网页共用这一个展开函数：
+//   {now}（也认 ${now}）→ 年月日-时分秒，如 20261024-230915
+//   {quickChatPath}      → 快捷对话目录（serve.quickChat.path），没配置就是默认工作目录 ~/.manyoyo/work
+const NOW_TOKEN = /\{now\}|\$\{now\}/g;
+const QUICK_CHAT_PATH_TOKEN = /\{quickChatPath\}/g;
+
+function formatNow(date = new Date()) {
+    const pad = value => String(value).padStart(2, '0');
+    return `${date.getFullYear()}${pad(date.getMonth() + 1)}${pad(date.getDate())}-${pad(date.getHours())}${pad(date.getMinutes())}${pad(date.getSeconds())}`;
+}
+
+function expandHome(value, homeDir = os.homedir()) {
+    const text = String(value || '').trim();
+    if (text === '~') return homeDir;
+    if (text.startsWith('~/')) return path.join(homeDir, text.slice(2));
+    return text;
+}
+
+/** 快捷对话目录的绝对路径（去掉末尾斜杠）；没配置返回 defaultDir */
+function resolveQuickChatPath(config, { homeDir = os.homedir(), defaultDir = path.join(os.homedir(), '.manyoyo', 'work') } = {}) {
+    const quickChat = config && config.serve && typeof config.serve === 'object' ? config.serve.quickChat : null;
+    const raw = quickChat && typeof quickChat.path === 'string' ? quickChat.path.trim() : '';
+    if (!raw) return defaultDir;
+    const resolved = path.resolve(expandHome(raw, homeDir));
+    return resolved;
+}
+
+/**
+ * 展开占位符。返回 { value, templated }：templated 表示原文里确实有占位符
+ * （调用方据此决定要不要替用户建目录：只有按模板生成的目录才自动建）。
+ */
+function expandTemplate(value, vars = {}) {
+    if (typeof value !== 'string') return { value, templated: false };
+    const now = vars.now === undefined ? formatNow() : vars.now;
+    let templated = false;
+    let result = value.replace(NOW_TOKEN, () => {
+        templated = true;
+        return now;
+    });
+    result = result.replace(QUICK_CHAT_PATH_TOKEN, () => {
+        templated = true;
+        return String(vars.quickChatPath || '').replace(/\/+$/, '');
+    });
+    return { value: result, templated };
+}
+
+module.exports = { formatNow, expandHome, resolveQuickChatPath, expandTemplate };

package/lib/network-endpoints.js

@@ -4,6 +4,7 @@ const dns = require('dns').promises;
 const net = require('net');
 const { normalizePolicy, normalizeDomain, isUnrestricted } = require('./network-policy');
 const { isRestrictedAddress } = require('./egress-proxy');
+const { AGENT_ENV_SCHEMA } = require('./init-config');
 
 // 新建容器时从用户在创建时填写的 env 里推断“Agent 要访问的端点”（如 ANTHROPIC_BASE_URL、OPENAI_BASE_URL 指向宿主机上的
 // Ollama 或局域网网关），把落在私有网段的写进网络策略，否则默认收紧会让 Agent 一上来就连不上自己配置的模型服务。
@@ -43,6 +44,60 @@ function envUrlDomains(envLines) {
     return out;
 }
 
+/**
+ * Agent 的模型域名：env 里的 URL 域名，再加官方默认域名（取自 AGENT_ENV_SCHEMA 的 baseUrlPresets）。
+ * 官方域名只在该 Agent 没配 BASE_URL 时才算；给了 agentId 就只看这个 Agent，没给则只看配了 Key 的 Agent。
+ */
+function modelDomains(envLines, agentId) {
+    const out = envUrlDomains(envLines);
+    const env = {};
+    for (const line of envLines || []) {
+        const text = String(line);
+        const i = text.indexOf('=');
+        if (i > 0) env[text.slice(0, i)] = text.slice(i + 1);
+    }
+    const agents = agentId ? [agentId] : Object.keys(AGENT_ENV_SCHEMA);
+    for (const id of agents) {
+        const spec = AGENT_ENV_SCHEMA[id];
+        if (!spec || env[spec.baseUrlKey]) continue;
+        if (!agentId && !spec.requiredAnyOf.some(key => env[key])) continue;
+        for (const preset of spec.baseUrlPresets) {
+            const target = urlOf(preset.value);
+            if (!target) continue;
+            let domain;
+            try { domain = normalizeDomain(target.host); } catch (e) { continue; }
+            if (!out.includes(domain)) out.push(domain);
+        }
+    }
+    return out;
+}
+
+/**
+ * 判断“被拦的是不是这个 Agent 自己的模型地址”用的：只认该 Agent 的 BASE_URL 变量（配了）或官方默认域名（没配）。
+ * 比 modelDomains 窄：env 里别的 URL（npm 源、pip 源……）被拦不能当成模型地址去中止一轮。
+ */
+function agentModelDomains(envLines, agentId) {
+    const spec = AGENT_ENV_SCHEMA[agentId];
+    if (!spec) return [];
+    const out = [];
+    let configured = '';
+    for (const line of envLines || []) {
+        const text = String(line);
+        const i = text.indexOf('=');
+        if (i > 0 && text.slice(0, i) === spec.baseUrlKey) configured = text.slice(i + 1);
+    }
+    const urls = configured ? [configured] : spec.baseUrlPresets.map(item => item.value);
+    for (const value of urls) {
+        const target = urlOf(value);
+        if (!target || net.isIP(target.host) || HOST_ALIASES.has(target.host)) continue;
+        try {
+            const domain = normalizeDomain(target.host);
+            if (!out.includes(domain)) out.push(domain);
+        } catch (e) { /* 非法域名忽略 */ }
+    }
+    return out;
+}
+
 /**
  * @param {string[]} envLines KEY=VALUE（创建时的用户 env）
  * @param {(host: string) => Promise<string[]>} [lookup]
@@ -95,4 +150,4 @@ async function withEnvEndpoints(policy, envLines, lookup) {
     return normalizePolicy({ ...policy, outbound: [...policy.outbound, ...added] });
 }
 
-module.exports = { inferEnvEndpoints, withEnvEndpoints, envUrlDomains };
+module.exports = { inferEnvEndpoints, withEnvEndpoints, envUrlDomains, modelDomains, agentModelDomains };

package/lib/plugin/playwright.js

@@ -935,12 +935,19 @@ class PlaywrightPlugin {
         const runtimeCommand = this.runtimeCommand();
         const integration = await this.buildContainerIntegration({ runtimeCommand });
         const name = `manyoyo-probe-${process.pid}`;
-        const args = ['run', '--rm', '--init', '--name', name, '--shm-size=1g', ...integration.extraArgs];
-        for (const volume of integration.volumes) args.push('--volume', volume);
-        for (const entry of integration.env) args.push('--env', entry);
-        args.push(image, 'sh', '-c', CONTAINER_PROBE_SCRIPT);
+        const buildArgs = withInit => {
+            const args = ['run', '--rm', ...(withInit ? ['--init'] : []), '--name', name, '--shm-size=1g', ...integration.extraArgs];
+            for (const volume of integration.volumes) args.push('--volume', volume);
+            for (const entry of integration.env) args.push('--env', entry);
+            args.push(image, 'sh', '-c', CONTAINER_PROBE_SCRIPT);
+            return args;
+        };
         const started = Date.now();
-        const result = this.runtimeCall(args, { timeout: CONTAINER_PROBE_TIMEOUT_MS });
+        let result = this.runtimeCall(buildArgs(true), { timeout: CONTAINER_PROBE_TIMEOUT_MS });
+        // podman 的 --init 要宿主机装了 catatonit（没装报 `lookup init binary`），不是浏览器的问题：不带 --init 再来一次
+        if (result.status !== 0 && /catatonit|init binary/i.test(`${result.stdout}${result.stderr}`)) {
+            result = this.runtimeCall(buildArgs(false), { timeout: CONTAINER_PROBE_TIMEOUT_MS });
+        }
         if (result.status !== 0) this.runtimeCall(['rm', '-f', name]); // 超时时容器客户端被杀，容器本身可能还在
         if (result.status === 0 && /manyoyo-ok/.test(result.stdout)) {
             this.out(`真实探测: 通过（default，${Date.now() - started}ms）`);