@znmin/claude-remote-cli 0.3.2 → 0.4.1

package/src/local-mode.js

@@ -1,182 +1,230 @@
-import * as fs from 'node:fs/promises';
-import path from 'node:path';
-import { createHash, randomUUID } from 'node:crypto';
-import { onCleanup, quote, shellJoin, which } from './system.js';
-import { sshArgs } from './ssh.js';
-import { remotePath } from './client.js';
-import { ensureRemoteClaude, remoteEnvironment } from './remote-claude.js';
-import { startLocalServer } from './local/server.js';
-import { installBrowser } from './local/browser.js';
-import { openTunnel } from './local/tunnel.js';
-
-const BOOLEAN_FLAGS = new Set(['--continue', '-c', '--print', '-p', '--verbose', '--no-session-persistence',
-  '--include-partial-messages', '--replay-user-messages']);
-const VALUE_FLAGS = new Set(['--model', '--effort', '--max-turns', '--max-budget-usd', '--output-format',
-  '--input-format', '--session-id', '--append-system-prompt', '--permission-mode', '--name', '-n', '--fallback-model']);
-// --restricted refuses bypassPermissions anyway; reject it before connecting.
-const PERMISSION_MODES = new Set(['default', 'manual', 'acceptEdits', 'plan', 'auto', 'dontAsk']);
-const SUBCOMMANDS = new Set(['auth', 'mcp', 'install', 'update', 'doctor', 'agents', 'attach', 'gateway',
-  'daemon', 'remote-control', 'rc', 'desktop', 'setup-token']);
-// Project instruction files read from the LOCAL project root, in Claude Code's order.
-const INSTRUCTION_FILES = ['CLAUDE.md', path.join('.claude', 'CLAUDE.md'), 'CLAUDE.local.md'];
-const INSTRUCTION_LIMIT = 64 * 1024;
-
-export function validateLocalArguments(args) {
-  for (let i = 0; i < args.length; i++) {
-    const argument = args[i];
-    if (argument === '--') break;
-    if (!argument.startsWith('-')) {
-      if (SUBCOMMANDS.has(argument)) throw new Error('本地模式不执行服务器管理子命令；请用 SSH 管理服务器上的 Claude。');
-      continue;
-    }
-    const name = argument.split('=')[0];
-    if (BOOLEAN_FLAGS.has(name) && argument === name) continue;
-    if (VALUE_FLAGS.has(name) || name === '--resume' || name === '-r') {
-      if (name === '--resume' || name === '-r') {
-        if (!argument.includes('=') && args[i + 1] && !args[i + 1].startsWith('-')) i++;
-        continue;
-      }
-      let value;
-      if (argument.includes('=')) value = argument.slice(argument.indexOf('=') + 1);
-      else {
-        if (args[i + 1] === undefined || args[i + 1].startsWith('-')) throw new Error(`${name} 缺少参数；以短横线开头的值请使用 ${name}=值。`);
-        value = args[++i];
-      }
-      if (name === '--permission-mode' && !PERMISSION_MODES.has(value))
-        throw new Error(`本地模式的 --permission-mode 仅支持 ${[...PERMISSION_MODES].join('、')}。`);
-      continue;
-    }
-    throw new Error(`本地模式暂不支持参数 ${name}；工具配置由本地模式统一管理。`);
-  }
-}
-
-// Pull --append-system-prompt values out of the forwarded arguments. They are
-// merged into the single prompt file so they cannot replace the routing rules.
-export function extractAppendedPrompts(args) {
-  const rest = [], prompts = [];
-  for (let i = 0; i < args.length; i++) {
-    const argument = args[i];
-    if (argument === '--') { rest.push(...args.slice(i)); break; }
-    if (argument === '--append-system-prompt') { prompts.push(args[++i]); continue; }
-    if (argument.startsWith('--append-system-prompt=')) { prompts.push(argument.slice(argument.indexOf('=') + 1)); continue; }
-    rest.push(argument);
-    if (VALUE_FLAGS.has(argument) && i + 1 < args.length) rest.push(args[++i]);
-  }
-  return { rest, prompts };
-}
-
-export async function projectInstructions(root) {
-  const sections = [];
-  let remaining = INSTRUCTION_LIMIT;
-  for (const name of INSTRUCTION_FILES) {
-    if (remaining <= 0) break;
-    let content;
-    try {
-      const file = await fs.realpath(path.join(root, name));
-      if (file !== root && !file.startsWith(root + path.sep)) continue; // Never follow links out of the project.
-      content = await fs.readFile(file, 'utf8');
-    } catch (error) {
-      if (['ENOENT', 'ENOTDIR', 'EISDIR'].includes(error.code)) continue;
-      throw error;
-    }
-    if (!content.trim()) continue;
-    const clipped = content.length > remaining ? content.slice(0, remaining) + `\n…[已截断，完整内容请用 read_file 读取 ${name}]` : content;
-    remaining -= clipped.length;
-    sections.push(`Contents of LOCAL ${name}:\n\n${clipped}`);
-  }
-  return sections.join('\n\n');
-}
-
-export function localPrompt(root, { instructions = '', appended = [], platform = 'posix' } = {}) {
-  const parts = [`All project operations run on the developer's LOCAL computer through the local MCP server. ` +
-    `The LOCAL project root is ${JSON.stringify(root)}. The server working directory is only for session metadata, not project files. ` +
-    'Call workspace_info before working. Use only local tools for file access, shell commands and browser operations. ' +
-    'For public information research, use the server-side WebSearch and WebFetch tools first; do not open the local browser for ordinary searches or reading public documentation. ' +
-    'Use the LOCAL browser for local development pages, localhost/loopback or developer LAN addresses, interactive UI testing, screenshots, or pages requiring interactive sign-in. ' +
-    'Never send local development URLs to server-side WebFetch. If WebSearch or WebFetch is unavailable or fails for ordinary public research, report it and ask before using the local browser as a fallback. ' +
-    'Project instructions from the LOCAL CLAUDE.md files are included below when present; also read CLAUDE.md files in LOCAL subdirectories with read_file when working there. ' +
-    'Use background commands for development servers, inspect their logs, and stop owned processes when finished. ' +
-    'If the local connection fails, report it and stop local project operations; never fall back to server filesystem, shell or browser tools.' +
-    (platform === 'win32' ? ' The LOCAL computer runs Windows while the server runs Linux: use Windows paths for local tools and check workspace_info for the shell used by run_command.' : '')];
-  if (instructions) parts.push('# Project instructions (LOCAL)\n\n' + instructions);
-  if (appended.length) parts.push('# Additional instructions from the user\n\n' + appended.join('\n\n'));
-  return parts.join('\n\n');
-}
-
-export function localClaudeArguments(configFile, promptFile, extra) {
-  validateLocalArguments(extra);
-  const { rest } = extractAppendedPrompts(extra);
-  return ['--restricted', '--tools', 'WebSearch,WebFetch', '--strict-mcp-config', '--mcp-config', configFile,
-    // Keep built-in UI commands (/config, /model, /help) available. Disable
-    // skill shell expansion separately instead of disabling the entire menu.
-    '--setting-sources', '', '--settings', JSON.stringify({ disableAllHooks: true,
-      disableSkillShellExecution: true, disableBundledSkills: true, enabledPlugins: {} }),
-    '--append-system-prompt-file', promptFile, ...rest];
-}
-
-export function supportsLocalMode(output) {
-  const match = output.match(/\b(\d+)\.(\d+)\.(\d+)\b/);
-  if (!match) return false;
-  const [major, minor, patch] = match.slice(1).map(Number);
-  return major > 2 || major === 2 && (minor > 1 || minor === 1 && patch >= 248);
-}
-
-export async function launchLocal(client, config, extra, dependencies = {}) {
-  validateLocalArguments(extra);
-  if (!await which('ssh', client.env.PATH)) throw new Error('找不到系统 SSH 客户端。');
-  const root = await fs.realpath(client.cwd), home = await fs.realpath(client.home);
-  if (root === home || root === path.parse(root).root) throw new Error('请进入具体项目目录，不允许以用户目录或磁盘根目录作为项目。');
-  const prompt = localPrompt(root, { instructions: await projectInstructions(root), appended: extractAppendedPrompts(extra).prompts,
-    platform: client.platform });
-  // Prepare the browser while SSH connects; it is only needed before Claude starts.
-  const browserReady = (dependencies.installBrowser || installBrowser)(client.log, { debug: client.debug, env: client.env });
-  browserReady.catch(() => {}); // Reported when awaited below.
-  let gateway, tunnel, configFile, promptFile, cleaning;
-  const hash = createHash('sha256').update(config.client_id + '\0' + root).digest('hex').slice(0, 24);
-  const remoteDirectory = config.root + '/local-' + hash;
-  const remote = (script, { interactive = false, input, capture = !interactive, timeout = 30000, check = true } = {}) =>
-    client.execute('ssh', sshArgs(config, script, { interactive, tty: interactive && client.tty,
-      input: input !== undefined, controlPath: tunnel.controlPath }), { env: client.env, capture, input,
-      timeout: interactive ? 0 : timeout, check });
-  const cleanup = () => cleaning ||= (async () => {
-    if (tunnel && configFile)
-      await remote('rm -f -- ' + remotePath(configFile) + ' ' + remotePath(promptFile), { timeout: 5000, check: false }).catch(() => {});
-    await gateway?.close();
-    await tunnel?.close();
-  })();
-  const removeCleanup = onCleanup(cleanup);
-  try {
-    gateway = await (dependencies.startLocalServer || startLocalServer)({ root, env: client.env,
-      headless: client.env.CLAUDE_REMOTE_HEADLESS === undefined ? Boolean(config.browserHeadless) : client.env.CLAUDE_REMOTE_HEADLESS === '1', log: client.log });
-    tunnel = await (dependencies.openTunnel || openTunnel)(config, gateway.port, { env: client.env, run: client.execute });
-    const session = randomUUID();
-    configFile = remoteDirectory + '/.local-mcp-' + session + '.json';
-    promptFile = remoteDirectory + '/.local-prompt-' + session + '.md';
-    const mcp = { mcpServers: { local: { type: 'http', url: `http://127.0.0.1:${tunnel.port}/mcp`,
-      headers: { Authorization: 'Bearer ' + gateway.token }, timeout: 180000 } } };
-    // One round trip: install Claude if missing, store the token-bearing MCP
-    // config (first stdin line) and the prompt (the rest), then report the version.
-    // `read` consumes the pipe byte by byte, so nothing is lost between the two files.
-    const version = await remote(ensureRemoteClaude(config.claude) +
-      'umask 077; mkdir -p -- ' + remotePath(remoteDirectory) + '\n' +
-      'IFS= read -r line; printf \'%s\\n\' "$line" > ' + remotePath(configFile) + '\n' +
-      'cat > ' + remotePath(promptFile) + '\n' +
-      shellJoin([config.claude, '--version']) + ' </dev/null',
-    { input: JSON.stringify(mcp) + '\n' + prompt, timeout: 600000 });
+import * as fs from 'node:fs/promises';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { onCleanup, quote, shellJoin, which } from './system.js';
+import { sshArgs } from './ssh.js';
+import { remotePath } from './client.js';
+import { ensureRemoteClaude, remoteEnvironment } from './remote-claude.js';
+import { ALT_V_BINDING, ensureAltVBinding, installClipboardShim, KEYBINDING_MISSING } from './remote-clipboard.js';
+import { startLocalServer } from './local/server.js';
+import { installBrowser } from './local/browser.js';
+import { openTunnel } from './local/tunnel.js';
+import { approveServers, describeServer, loadServers, McpStore } from './local/mcp-config.js';
+import { CALL_TIMEOUT, closeUpstreams, connectUpstreams } from './local/mcp-proxy.js';
+import { createInterface } from 'node:readline/promises';
+
+const BOOLEAN_FLAGS = new Set(['--continue', '-c', '--print', '-p', '--verbose', '--no-session-persistence',
+  '--include-partial-messages', '--replay-user-messages']);
+const VALUE_FLAGS = new Set(['--model', '--effort', '--max-turns', '--max-budget-usd', '--output-format',
+  '--input-format', '--session-id', '--append-system-prompt', '--permission-mode', '--name', '-n', '--fallback-model']);
+// --restricted refuses bypassPermissions anyway; reject it before connecting.
+const PERMISSION_MODES = new Set(['default', 'manual', 'acceptEdits', 'plan', 'auto', 'dontAsk']);
+const SUBCOMMANDS = new Set(['auth', 'mcp', 'install', 'update', 'doctor', 'agents', 'attach', 'gateway',
+  'daemon', 'remote-control', 'rc', 'desktop', 'setup-token']);
+// Project instruction files read from the LOCAL project root, in Claude Code's order.
+const INSTRUCTION_FILES = ['CLAUDE.md', path.join('.claude', 'CLAUDE.md'), 'CLAUDE.local.md'];
+const INSTRUCTION_LIMIT = 64 * 1024;
+
+export function validateLocalArguments(args) {
+  for (let i = 0; i < args.length; i++) {
+    const argument = args[i];
+    if (argument === '--') break;
+    if (!argument.startsWith('-')) {
+      if (argument === 'mcp') throw new Error('本地模式的 MCP 由本机管理，请使用 claude-remote mcp。');
+      if (SUBCOMMANDS.has(argument)) throw new Error('本地模式不执行服务器管理子命令；请用 SSH 管理服务器上的 Claude。');
+      continue;
+    }
+    const name = argument.split('=')[0];
+    if (BOOLEAN_FLAGS.has(name) && argument === name) continue;
+    if (VALUE_FLAGS.has(name) || name === '--resume' || name === '-r') {
+      if (name === '--resume' || name === '-r') {
+        if (!argument.includes('=') && args[i + 1] && !args[i + 1].startsWith('-')) i++;
+        continue;
+      }
+      let value;
+      if (argument.includes('=')) value = argument.slice(argument.indexOf('=') + 1);
+      else {
+        if (args[i + 1] === undefined || args[i + 1].startsWith('-')) throw new Error(`${name} 缺少参数；以短横线开头的值请使用 ${name}=值。`);
+        value = args[++i];
+      }
+      if (name === '--permission-mode' && !PERMISSION_MODES.has(value))
+        throw new Error(`本地模式的 --permission-mode 仅支持 ${[...PERMISSION_MODES].join('、')}。`);
+      continue;
+    }
+    throw new Error(`本地模式暂不支持参数 ${name}；工具配置由本地模式统一管理。`);
+  }
+}
+
+// Pull --append-system-prompt values out of the forwarded arguments. They are
+// merged into the single prompt file so they cannot replace the routing rules.
+export function extractAppendedPrompts(args) {
+  const rest = [], prompts = [];
+  for (let i = 0; i < args.length; i++) {
+    const argument = args[i];
+    if (argument === '--') { rest.push(...args.slice(i)); break; }
+    if (argument === '--append-system-prompt') { prompts.push(args[++i]); continue; }
+    if (argument.startsWith('--append-system-prompt=')) { prompts.push(argument.slice(argument.indexOf('=') + 1)); continue; }
+    rest.push(argument);
+    if (VALUE_FLAGS.has(argument) && i + 1 < args.length) rest.push(args[++i]);
+  }
+  return { rest, prompts };
+}
+
+export async function projectInstructions(root) {
+  const sections = [];
+  let remaining = INSTRUCTION_LIMIT;
+  for (const name of INSTRUCTION_FILES) {
+    if (remaining <= 0) break;
+    let content;
+    try {
+      const file = await fs.realpath(path.join(root, name));
+      if (file !== root && !file.startsWith(root + path.sep)) continue; // Never follow links out of the project.
+      content = await fs.readFile(file, 'utf8');
+    } catch (error) {
+      if (['ENOENT', 'ENOTDIR', 'EISDIR'].includes(error.code)) continue;
+      throw error;
+    }
+    if (!content.trim()) continue;
+    const clipped = content.length > remaining ? content.slice(0, remaining) + `\n…[已截断，完整内容请用 read_file 读取 ${name}]` : content;
+    remaining -= clipped.length;
+    sections.push(`Contents of LOCAL ${name}:\n\n${clipped}`);
+  }
+  return sections.join('\n\n');
+}
+
+export function localPrompt(root, { instructions = '', appended = [], platform = 'posix', mcpServers = [] } = {}) {
+  const parts = [`All project operations run on the developer's LOCAL computer through the local MCP server. ` +
+    `The LOCAL project root is ${JSON.stringify(root)}. The server working directory is only for session metadata, not project files. ` +
+    'Call workspace_info before working. Use only local tools for file access, shell commands and browser operations. ' +
+    'For public information research, use the server-side WebSearch and WebFetch tools first; do not open the local browser for ordinary searches or reading public documentation. ' +
+    'Use the LOCAL browser for local development pages, localhost/loopback or developer LAN addresses, interactive UI testing, screenshots, or pages requiring interactive sign-in. ' +
+    'Never send local development URLs to server-side WebFetch. If WebSearch or WebFetch is unavailable or fails for ordinary public research, report it and ask before using the local browser as a fallback. ' +
+    'Project instructions from the LOCAL CLAUDE.md files are included below when present; also read CLAUDE.md files in LOCAL subdirectories with read_file when working there. ' +
+    'Use background commands for development servers, inspect their logs, and stop owned processes when finished. ' +
+    'If the local connection fails, report it and stop local project operations; never fall back to server filesystem, shell or browser tools.' +
+    (platform === 'win32' ? ' The LOCAL computer runs Windows while the server runs Linux: use Windows paths for local tools and check workspace_info for the shell used by run_command.' : '')];
+  if (mcpServers.length) parts.push('# Developer MCP servers (LOCAL)\n\n' +
+    'These MCP servers come from the developer\'s configuration. They run on, or connect from, the LOCAL computer, ' +
+    'so they can reach the developer\'s intranet and local services. Use their tools directly (named mcp__<server>__<tool>); ' +
+    'do not try to reach those services with server-side WebFetch.\n\n' + mcpServers.map(name => '- ' + name).join('\n'));
+  if (instructions) parts.push('# Project instructions (LOCAL)\n\n' + instructions);
+  if (appended.length) parts.push('# Additional instructions from the user\n\n' + appended.join('\n\n'));
+  return parts.join('\n\n');
+}
+
+export function localClaudeArguments(configFile, promptFile, extra) {
+  validateLocalArguments(extra);
+  const { rest } = extractAppendedPrompts(extra);
+  return ['--restricted', '--tools', 'WebSearch,WebFetch', '--strict-mcp-config', '--mcp-config', configFile,
+    // Keep built-in UI commands (/config, /model, /help) available. Disable
+    // skill shell expansion separately instead of disabling the entire menu.
+    '--setting-sources', '', '--settings', JSON.stringify({ disableAllHooks: true,
+      disableSkillShellExecution: true, disableBundledSkills: true, enabledPlugins: {} }),
+    '--append-system-prompt-file', promptFile, ...rest];
+}
+
+export function supportsLocalMode(output) {
+  const match = output.match(/\b(\d+)\.(\d+)\.(\d+)\b/);
+  if (!match) return false;
+  const [major, minor, patch] = match.slice(1).map(Number);
+  return major > 2 || major === 2 && (minor > 1 || minor === 1 && patch >= 248);
+}
+
+// Project .mcp.json entries start local programs; ask before the first use.
+async function confirmServer(server) {
+  const prompt = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const answer = await prompt.question(`项目 .mcp.json 中的 MCP「${server.name}」将在本机运行或从本机连接：\n  ${describeServer(server.config)}\n是否启用？[y/N] `);
+    return /^y(es)?$/i.test(answer.trim());
+  } finally { prompt.close(); }
+}
+
+export async function launchLocal(client, config, extra, dependencies = {}) {
+  validateLocalArguments(extra);
+  if (!await which('ssh', client.env.PATH)) throw new Error('找不到系统 SSH 客户端。');
+  const root = await fs.realpath(client.cwd), home = await fs.realpath(client.home);
+  if (root === home || root === path.parse(root).root) throw new Error('请进入具体项目目录，不允许以用户目录或磁盘根目录作为项目。');
+  const store = new McpStore({ directory: client.directory, lockFile: client.lockFile, root });
+  const loaded = await (dependencies.loadServers || loadServers)(store);
+  for (const warning of loaded.warnings) client.warn(warning);
+  const servers = await approveServers(store, loaded.servers,
+    { confirm: client.tty ? dependencies.confirmServer || confirmServer : null, warn: client.warn });
+  // Prepare the browser while SSH connects; it is only needed before Claude starts.
+  const browserReady = (dependencies.installBrowser || installBrowser)(client.log, { debug: client.debug, env: client.env });
+  browserReady.catch(() => {}); // Reported when awaited below.
+  let gateway, tunnel, configFile, promptFile, clipboardDirectory, cleaning;
+  const upstreams = new Map(), abort = new AbortController();
+  let connecting = Promise.resolve();
+  const hash = createHash('sha256').update(config.client_id + '\0' + root).digest('hex').slice(0, 24);
+  const remoteDirectory = config.root + '/local-' + hash;
+  const remote = (script, { interactive = false, input, capture = !interactive, timeout = 30000, check = true } = {}) =>
+    client.execute('ssh', sshArgs(config, script, { interactive, tty: interactive && client.tty,
+      input: input !== undefined, controlPath: tunnel.controlPath }), { env: client.env, capture, input,
+      timeout: interactive ? 0 : timeout, check });
+  const cleanup = () => cleaning ||= (async () => {
+    if (tunnel && configFile)
+      await remote('rm -rf -- ' + remotePath(configFile) + ' ' + remotePath(promptFile) + ' ' + remotePath(clipboardDirectory),
+        { timeout: 5000, check: false }).catch(() => {});
+    abort.abort();
+    await gateway?.close();
+    await connecting;
+    await closeUpstreams(upstreams);
+    await tunnel?.close();
+  })();
+  const removeCleanup = onCleanup(cleanup);
+  try {
+    // Developer MCP servers connect while the gateway and SSH tunnel start.
+    if (servers.length) connecting = (dependencies.connectUpstreams || connectUpstreams)(servers,
+      { root, env: client.env, debug: client.debug, warn: client.warn, signal: abort.signal })
+      .then(connected => { for (const [name, upstream] of connected) upstreams.set(name, upstream); })
+      .catch(error => client.warn('MCP 连接失败：' + error.message));
+    gateway = await (dependencies.startLocalServer || startLocalServer)({ root, env: client.env, upstreams,
+      readClipboard: dependencies.readClipboard,
+      headless: client.env.CLAUDE_REMOTE_HEADLESS === undefined ? Boolean(config.browserHeadless) : client.env.CLAUDE_REMOTE_HEADLESS === '1', log: client.log });
+    tunnel = await (dependencies.openTunnel || openTunnel)(config, gateway.port, { env: client.env, run: client.execute });
+    const session = randomUUID();
+    configFile = remoteDirectory + '/.local-mcp-' + session + '.json';
+    promptFile = remoteDirectory + '/.local-prompt-' + session + '.md';
+    clipboardDirectory = remoteDirectory + '/.local-clipboard-' + session;
+    await connecting;
+    const endpoint = suffix => ({ type: 'http', url: `http://127.0.0.1:${tunnel.port}/mcp${suffix}`,
+      headers: { Authorization: 'Bearer ' + gateway.token }, timeout: CALL_TIMEOUT });
+    const mcp = { mcpServers: { local: endpoint('') } };
+    for (const name of upstreams.keys()) mcp.mcpServers[name] = endpoint('/' + name);
+    if (upstreams.size) client.debug('本机 MCP：' + [...upstreams.values()].map(item => `${item.name}（${item.describe()}）`).join('，'));
+    const prompt = localPrompt(root, { instructions: await projectInstructions(root), appended: extractAppendedPrompts(extra).prompts,
+      platform: client.platform, mcpServers: [...upstreams.keys()] });
+    // One round trip: install Claude if missing, store the token-bearing MCP
+    // config (first stdin line), the clipboard stand-in with its Authorization
+    // header (second line) and the prompt (the rest), then report the version.
+    // `read` consumes the pipe byte by byte, so nothing is lost between the files.
+    const version = await remote(ensureRemoteClaude(config.claude) +
+      'umask 077; mkdir -p -- ' + remotePath(remoteDirectory) + '\n' +
+      'IFS= read -r line; printf \'%s\\n\' "$line" > ' + remotePath(configFile) + '\n' +
+      installClipboardShim(remotePath(clipboardDirectory), quote(`http://127.0.0.1:${tunnel.port}/clipboard/image`)) +
+      (client.platform === 'win32' ? ensureAltVBinding() : '') +
+      'cat > ' + remotePath(promptFile) + '\n' +
+      shellJoin([config.claude, '--version']) + ' </dev/null',
+    { input: JSON.stringify(mcp) + '\nAuthorization: Bearer ' + gateway.token + '\n' + prompt, timeout: 600000 });
     if (!supportsLocalMode(version.stdout)) throw new Error('本地工具模式需要服务器 Claude Code 2.1.248 或更高版本。请先在服务器运行 claude update。');
-    await browserReady;
-    client.debug(`本地执行模式：${root}\n文件、命令和浏览器在本机运行；项目文件不通过本模式同步。`);
-    const args = localClaudeArguments(path.posix.basename(configFile), path.posix.basename(promptFile), extra);
-    // Keep the parent shell so EXIT can remove the token-bearing temporary files.
-    const script = remoteEnvironment + 'cd -- ' + remotePath(remoteDirectory) + ' || exit 1; ' +
-      'trap ' + quote('rm -f -- ' + remotePath(configFile) + ' ' + remotePath(promptFile)) + ' EXIT; ' +
-      shellJoin([config.claude, ...args]);
-    const code = (await remote(script, { interactive: true, check: false })).code;
-    // A dropped connection leaves the remote UI's terminal modes switched on.
-    if (code !== 0) client.restoreTerminal();
-    return code;
-  } finally {
-    removeCleanup();
-    await cleanup();
-  }
-}
+    if (version.stdout.includes(KEYBINDING_MISSING))
+      client.warn('服务器的 ~/.claude/keybindings.json 已存在但未绑定 Alt+V，按 Alt+V 无法粘贴本机截图。' +
+        '请在其 "bindings" 数组中加入：' + JSON.stringify(ALT_V_BINDING));
+    await browserReady;
+    client.debug(`本地执行模式：${root}\n文件、命令和浏览器在本机运行；项目文件不通过本模式同步。`);
+    const args = localClaudeArguments(path.posix.basename(configFile), path.posix.basename(promptFile), extra);
+    // Keep the parent shell so EXIT can remove the token-bearing temporary files.
+    // The clipboard stand-in goes first on PATH for Claude only, so pasting an
+    // image reads this computer's clipboard.
+    const script = remoteEnvironment + 'cd -- ' + remotePath(remoteDirectory) + ' || exit 1; ' +
+      'trap ' + quote('rm -rf -- ' + remotePath(configFile) + ' ' + remotePath(promptFile) + ' ' + remotePath(clipboardDirectory)) + ' EXIT; ' +
+      'PATH=' + remotePath(clipboardDirectory) + ':"$PATH" ' + shellJoin([config.claude, ...args]);
+    const code = (await remote(script, { interactive: true, check: false })).code;
+    // A dropped connection leaves the remote UI's terminal modes switched on.
+    if (code !== 0) client.restoreTerminal();
+    return code;
+  } finally {
+    removeCleanup();
+    await cleanup();
+  }
+}

package/src/powershell-conflicts.js

@@ -1,67 +1,67 @@
-import path from 'node:path';
-import { execute, which } from './system.js';
-
-const MARKER = 'CLAUDE_REMOTE_JSON:';
-
-// Runs with the user's profile loaded, as an interactive window would. Only
-// aliases and functions are reported: they win over programs on PATH, so a
-// leftover `function claude` hides this tool while where.exe shows nothing wrong.
-const SCRIPT = [
-  "$ErrorActionPreference = 'SilentlyContinue'",
-  'try { [Console]::OutputEncoding = [System.Text.Encoding]::UTF8 } catch {}',
-  '$items = @(Get-Command claude -All -CommandType Alias,Function,Filter | ForEach-Object {',
-  "  $alias = $_.CommandType -eq 'Alias'",
-  '  [pscustomobject]@{ type = [string]$_.CommandType; target = $(if ($alias) { [string]$_.Definition } else { $null });',
-  '    file = $(if ($alias) { $null } else { [string]$_.ScriptBlock.File }); module = [string]$_.ModuleName }',
-  '})',
-  `'${MARKER}' + (ConvertTo-Json -Compress -Depth 3 -InputObject ([pscustomobject]@{ profile = [string]$PROFILE; items = $items }))`
-].join('\n');
-
-const encoded = Buffer.from(SCRIPT, 'utf16le').toString('base64');
-
-export async function powershellHosts(env = process.env) {
-  const hosts = [{ name: 'Windows PowerShell',
-    file: path.win32.join(env.SystemRoot || env.SYSTEMROOT || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe') }];
-  const pwsh = await which('pwsh', env.PATH || env.Path || '', { platform: 'win32' });
-  if (pwsh) hosts.push({ name: 'PowerShell 7', file: pwsh });
-  return hosts;
-}
-
-export function parseConflicts(stdout) {
-  const line = stdout.split(/\r?\n/).reverse().find(text => text.startsWith(MARKER));
-  if (!line) throw new Error('没有得到检查结果');
-  const result = JSON.parse(line.slice(MARKER.length));
-  const items = result.items == null ? [] : [].concat(result.items);
-  return { profile: result.profile || '', items };
-}
-
-export async function findClaudeConflicts(host, { env = process.env, run = execute, timeout = 20000 } = {}) {
-  const { stdout } = await run(host.file, ['-NoLogo', '-NonInteractive', '-EncodedCommand', encoded],
-    { capture: true, check: false, timeout, env });
-  return parseConflicts(stdout);
-}
-
-export function describeConflict(item) {
-  if (item.type === 'Alias') return `别名 → ${item.target}`;
-  const kind = item.type === 'Filter' ? '筛选器' : '函数';
-  if (item.file) return `${kind}（定义于 ${item.file}）`;
-  if (item.module) return `${kind}（来自模块 ${item.module}）`;
-  return kind;
-}
-
-// Lines for `claude-remote doctor`.
-export async function conflictReport(env = process.env, options = {}) {
-  const lines = [];
-  for (const host of await powershellHosts(env)) {
-    try {
-      const { profile, items } = await findClaudeConflicts(host, { env, ...options });
-      if (!items.length) { lines.push(`${host.name} 中的 claude：无冲突`); continue; }
-      lines.push(`${host.name} 中的 claude：被占用，在该终端输入 claude 不会运行本工具`);
-      for (const item of items) lines.push('  - ' + describeConflict(item));
-      lines.push(`  处理：删除上述定义（配置文件 ${profile}，可用 notepad $PROFILE 打开）后重新打开终端；临时可运行 claude.cmd`);
-    } catch (error) {
-      lines.push(`${host.name} 中的 claude：无法检查（${error.message}）`);
-    }
-  }
-  return lines;
-}
+import path from 'node:path';
+import { execute, which } from './system.js';
+
+const MARKER = 'CLAUDE_REMOTE_JSON:';
+
+// Runs with the user's profile loaded, as an interactive window would. Only
+// aliases and functions are reported: they win over programs on PATH, so a
+// leftover `function claude` hides this tool while where.exe shows nothing wrong.
+const SCRIPT = [
+  "$ErrorActionPreference = 'SilentlyContinue'",
+  'try { [Console]::OutputEncoding = [System.Text.Encoding]::UTF8 } catch {}',
+  '$items = @(Get-Command claude -All -CommandType Alias,Function,Filter | ForEach-Object {',
+  "  $alias = $_.CommandType -eq 'Alias'",
+  '  [pscustomobject]@{ type = [string]$_.CommandType; target = $(if ($alias) { [string]$_.Definition } else { $null });',
+  '    file = $(if ($alias) { $null } else { [string]$_.ScriptBlock.File }); module = [string]$_.ModuleName }',
+  '})',
+  `'${MARKER}' + (ConvertTo-Json -Compress -Depth 3 -InputObject ([pscustomobject]@{ profile = [string]$PROFILE; items = $items }))`
+].join('\n');
+
+const encoded = Buffer.from(SCRIPT, 'utf16le').toString('base64');
+
+export async function powershellHosts(env = process.env) {
+  const hosts = [{ name: 'Windows PowerShell',
+    file: path.win32.join(env.SystemRoot || env.SYSTEMROOT || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe') }];
+  const pwsh = await which('pwsh', env.PATH || env.Path || '', { platform: 'win32' });
+  if (pwsh) hosts.push({ name: 'PowerShell 7', file: pwsh });
+  return hosts;
+}
+
+export function parseConflicts(stdout) {
+  const line = stdout.split(/\r?\n/).reverse().find(text => text.startsWith(MARKER));
+  if (!line) throw new Error('没有得到检查结果');
+  const result = JSON.parse(line.slice(MARKER.length));
+  const items = result.items == null ? [] : [].concat(result.items);
+  return { profile: result.profile || '', items };
+}
+
+export async function findClaudeConflicts(host, { env = process.env, run = execute, timeout = 20000 } = {}) {
+  const { stdout } = await run(host.file, ['-NoLogo', '-NonInteractive', '-EncodedCommand', encoded],
+    { capture: true, check: false, timeout, env });
+  return parseConflicts(stdout);
+}
+
+export function describeConflict(item) {
+  if (item.type === 'Alias') return `别名 → ${item.target}`;
+  const kind = item.type === 'Filter' ? '筛选器' : '函数';
+  if (item.file) return `${kind}（定义于 ${item.file}）`;
+  if (item.module) return `${kind}（来自模块 ${item.module}）`;
+  return kind;
+}
+
+// Lines for `claude-remote doctor`.
+export async function conflictReport(env = process.env, options = {}) {
+  const lines = [];
+  for (const host of await powershellHosts(env)) {
+    try {
+      const { profile, items } = await findClaudeConflicts(host, { env, ...options });
+      if (!items.length) { lines.push(`${host.name} 中的 claude：无冲突`); continue; }
+      lines.push(`${host.name} 中的 claude：被占用，在该终端输入 claude 不会运行本工具`);
+      for (const item of items) lines.push('  - ' + describeConflict(item));
+      lines.push(`  处理：删除上述定义（配置文件 ${profile}，可用 notepad $PROFILE 打开）后重新打开终端；临时可运行 claude.cmd`);
+    } catch (error) {
+      lines.push(`${host.name} 中的 claude：无法检查（${error.message}）`);
+    }
+  }
+  return lines;
+}