@xiashe/cli 0.1.33 → 0.1.34

package/README.md

@@ -57,4 +57,4 @@ Production defaults:
 
 An Agent must never add `--confirm` before the user has explicitly agreed to the displayed purpose. If the wallet is unavailable, obtain permission before running the official `@alipay/agent-payment` setup, then run `payment doctor` again.
 
-For a clean Codex Task, the XiaShe MCP response provides a version-pinned ephemeral command such as `npx -y @xiashe/cli@0.1.33 payment bridge-info`. No global `xiashe` installation is required for that path. Do not run preflight before requesting payment confirmation: it is a read-only diagnostic only. After explicit confirmation, the host injects `XIASHE_HOST_BUSINESS_SESSION` only into the supplied payment command’s foreground child process and runs the command exactly as supplied. The Agent must inspect bridge JSON instead of suppressing output or guessing status from shell text. Failed attempts include a redacted `diagnosis` object and `userVisible` next step; do not replace them with a generic payment-failed message.
+For a clean Codex Task, the XiaShe MCP response provides a version-pinned ephemeral command such as `npx -y @xiashe/cli@0.1.34 payment bridge-info`. No global `xiashe` installation is required for that path. Do not run preflight before requesting payment confirmation: it is a read-only diagnostic only. After explicit confirmation, ordinary hosts inject `XIASHE_HOST_BUSINESS_SESSION` only into the supplied payment command’s foreground child process. Codex Node REPL uses the private MCP response’s stdin-only adapter because its spawned child does not inherit request metadata. The Agent must inspect bridge JSON instead of suppressing output or guessing status from shell text. Failed attempts include a redacted `diagnosis` object and `userVisible` next step; do not replace them with a generic payment-failed message.

package/bin/xiashe.mjs

@@ -57,6 +57,8 @@ const PRODUCT_ENV = COMMAND_NAME === 'agentpie' ? 'global' : 'cn';
 // local state, stdout, or a model-visible command argument.
 const PAYMENT_HOST_CONTRACT_VERSION = 'xiashe.payment-host.v1';
 const PAYMENT_HOST_SESSION_ENV = 'XIASHE_HOST_BUSINESS_SESSION';
+const PAYMENT_HOST_STDIN_FLAG = 'host-session-stdin';
+const PAYMENT_HOST_STDIN_MAX_BYTES = 256;
 // These are compatibility adapters for known OpenAI/Codex hosts while their
 // runtimes adopt the portable environment contract. Unknown host variables
 // are deliberately not guessed: other Agents must inject the standard name.
@@ -278,13 +280,51 @@ function hostSessionContractStatus(resolution = null) {
   };
 }
 
-function resolvePaymentBusinessSession(flags) {
+async function readPaymentBusinessSessionFromStdin() {
+  return await new Promise((resolve) => {
+    let received = '';
+    let settled = false;
+    const finish = (value = null) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
+      process.stdin.pause();
+      resolve(value);
+    };
+    const timeout = setTimeout(() => finish(null), 5_000);
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (chunk) => {
+      received += chunk;
+      if (Buffer.byteLength(received, 'utf8') > PAYMENT_HOST_STDIN_MAX_BYTES) {
+        finish(null);
+      }
+    });
+    process.stdin.once('end', () => finish(received.trim()));
+    process.stdin.once('error', () => finish(null));
+    process.stdin.resume();
+  });
+}
+
+async function resolvePaymentBusinessSession(flags) {
   // A model-visible command-line session is not an acceptable trust boundary.
   // Hosts that cannot inject the standard environment must implement the v1
   // adapter rather than asking a user or model to provide a replacement.
   if (flags['session-id'] !== undefined || flags.sessionId !== undefined) {
     return { error: 'host_session_override_forbidden' };
   }
+  if (flags[PAYMENT_HOST_STDIN_FLAG] !== undefined) {
+    if (flags[PAYMENT_HOST_STDIN_FLAG] !== true) {
+      return { error: 'host_session_override_forbidden' };
+    }
+    const candidate = await readPaymentBusinessSessionFromStdin();
+    if (HOST_BUSINESS_SESSION_PATTERN.test(String(candidate || '').trim())) {
+      return {
+        sessionId: String(candidate).trim(),
+        provider: 'codex_node_repl_request_metadata'
+      };
+    }
+    return null;
+  }
   const standardCandidate = String(process.env[PAYMENT_HOST_SESSION_ENV] || '').trim();
   if (HOST_BUSINESS_SESSION_PATTERN.test(standardCandidate)) {
     return {
@@ -320,8 +360,8 @@ function hostBusinessSessionUnavailableResult() {
   };
 }
 
-function hostBusinessSessionOverrideForbiddenResult() {
-  const hostResolution = resolvePaymentBusinessSession({});
+async function hostBusinessSessionOverrideForbiddenResult() {
+  const hostResolution = await resolvePaymentBusinessSession({});
   return {
     ok: false,
     status: 'host_session_override_forbidden',
@@ -1270,7 +1310,7 @@ async function cmdPayment(sub, args, global) {
   const flags = parseFlags(args);
   if (sub === 'bridge-info' || sub === 'bridge' || sub === 'prepare') {
     const result = await getAlipayWalletBridgeInfo({ timeoutMs: global.timeoutMs });
-    const businessSession = resolvePaymentBusinessSession({});
+    const businessSession = await resolvePaymentBusinessSession({});
     print({
       ...result,
       hostSessionContract: hostSessionContractStatus(businessSession?.error ? null : businessSession)
@@ -1298,9 +1338,9 @@ async function cmdPayment(sub, args, global) {
   if (sub === 'pay') {
     const resourceUrl = requireArg(flags['resource-url'] || flags.resourceUrl || flags.r, '--resource-url');
     const intentSummary = requireArg(flags['intent-summary'] || flags.intentSummary || flags.i, '--intent-summary');
-    const businessSession = resolvePaymentBusinessSession(flags);
+    const businessSession = await resolvePaymentBusinessSession(flags);
     if (businessSession?.error === 'host_session_override_forbidden') {
-      print(hostBusinessSessionOverrideForbiddenResult(), global);
+      print(await hostBusinessSessionOverrideForbiddenResult(), global);
       process.exitCode = EXIT_RUNTIME;
       return;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiashe/cli",
-  "version": "0.1.33",
+  "version": "0.1.34",
   "type": "module",
   "bin": {
     "xiashe": "bin/xiashe.mjs"
@@ -10,7 +10,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@xiashe/sdk": "0.1.33"
+    "@xiashe/sdk": "0.1.34"
   },
   "engines": {
     "node": ">=20"