cc-claw 0.20.13 → 0.20.14

package/dist/cli.js

@@ -33,7 +33,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = true ? "0.20.13" : (() => {
+    VERSION = true ? "0.20.14" : (() => {
       try {
         return JSON.parse(readFileSync(join(process.cwd(), "package.json"), "utf-8")).version ?? "unknown";
       } catch {
@@ -8088,8 +8088,11 @@ function revokeSubAgentToken(agentId) {
 function authenticateRequest(req, url) {
   const authHeader = req.headers.authorization ?? "";
   const bearerToken = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : "";
-  const isMainToken = bearerToken === DASHBOARD_TOKEN;
-  const subEntry = subAgentTokens.get(bearerToken);
+  const queryToken = url.searchParams.get("token") ?? "";
+  const isBrowserRoute = BROWSER_ROUTES.has(url.pathname) || url.pathname.startsWith("/files");
+  const effectiveToken = bearerToken || (isBrowserRoute ? queryToken : "");
+  const isMainToken = effectiveToken === DASHBOARD_TOKEN;
+  const subEntry = subAgentTokens.get(effectiveToken);
   const isSubAgentToken = !!subEntry && subEntry.expiresAt > Date.now();
   if (!isMainToken && !isSubAgentToken) {
     return { authenticated: false, isSubAgent: false };
@@ -8136,7 +8139,7 @@ function validateAgentIdentity(req, body) {
     throw new Error(`IDENTITY_MISMATCH: Token bound to agent ${boundAgentId}, but request claims ${callerAgentId}`);
   }
 }
-var PORT, DASHBOARD_TOKEN, SUB_AGENT_TOKEN_TTL_MS, subAgentTokens, SUB_AGENT_ALLOWED_PATHS, MAX_BODY_BYTES;
+var PORT, DASHBOARD_TOKEN, SUB_AGENT_TOKEN_TTL_MS, subAgentTokens, SUB_AGENT_ALLOWED_PATHS, BROWSER_ROUTES, MAX_BODY_BYTES;
 var init_middleware = __esm({
   "src/dashboard/middleware.ts"() {
     "use strict";
@@ -8172,6 +8175,7 @@ var init_middleware = __esm({
       "/api/memory/history",
       "/api/memory/summaries"
     ]);
+    BROWSER_ROUTES = /* @__PURE__ */ new Set(["/", "/index.html", "/upload"]);
     MAX_BODY_BYTES = 1048576;
   }
 });
@@ -17871,7 +17875,7 @@ function makeToolActionCallback(chatId, channel, level) {
   };
 }
 async function processFileSends2(chatId, channel, text) {
-  const fileSendPattern = /\[SEND_FILE:(.+?)\]/g;
+  const fileSendPattern = /\[\s*SEND_FILE:\s*(.+?)\s*\]/g;
   const filePaths = [];
   for (const match of text.matchAll(fileSendPattern)) {
     filePaths.push(match[1].trim());
@@ -17892,7 +17896,7 @@ async function processFileSends2(chatId, channel, text) {
   return text.replace(fileSendPattern, "").trim();
 }
 async function processImageGenerations(chatId, channel, text) {
-  const pattern = /\[GENERATE_IMAGE:(.+?)\]/g;
+  const pattern = /\[\s*GENERATE_IMAGE:\s*(.+?)\s*\]/g;
   const prompts = [];
   for (const match of text.matchAll(pattern)) {
     prompts.push(match[1].trim());
@@ -17920,7 +17924,7 @@ async function processImageGenerations(chatId, channel, text) {
   return text.replace(pattern, "").trim();
 }
 async function processReaction(chatId, channel, text, messageId) {
-  const reactPatternGlobal = /\[REACT:(.+?)\]/g;
+  const reactPatternGlobal = /\[\s*REACT:\s*(.+?)\s*\]/g;
   if (!reactPatternGlobal.test(text)) return text;
   let reacted = false;
   reactPatternGlobal.lastIndex = 0;
@@ -17934,7 +17938,7 @@ async function processReaction(chatId, channel, text, messageId) {
       reacted = true;
     }
   }
-  return text.replace(/\[REACT:(.+?)\]/g, "").trim();
+  return text.replace(/\[\s*REACT:\s*(.+?)\s*\]/g, "").trim();
 }
 async function sendResponse(chatId, channel, text, messageId, replyToMessageId) {
   text = await processReaction(chatId, channel, text, messageId);
@@ -17947,9 +17951,9 @@ async function sendResponse(chatId, channel, text, messageId, replyToMessageId)
     }
   }
   let afterHistory = afterUpdates;
-  const historySearchMatch = afterHistory.match(/\[HISTORY_SEARCH:([^\]]+)\]/);
+  const historySearchMatch = afterHistory.match(/\[\s*HISTORY_SEARCH:\s*([^\]]+?)\s*\]/);
   if (historySearchMatch) {
-    afterHistory = afterHistory.replace(/\[HISTORY_SEARCH:[^\]]+\]/g, "").trim();
+    afterHistory = afterHistory.replace(/\[\s*HISTORY_SEARCH:\s*[^\]]+?\s*\]/g, "").trim();
     const hsQuery = historySearchMatch[1].trim();
     const hsResults = searchMessageLog(chatId, hsQuery, 10);
     if (hsResults.length > 0) {
@@ -27660,6 +27664,8 @@ var init_telegram2 = __esm({
           { command: "newchat", description: "Start a fresh conversation" },
           { command: "summarize", description: "Save session to memory (or 'all' for pre-restart)" },
           { command: "stop", description: "Cancel the current running task" },
+          { command: "debug", description: "Toggle session debug logging" },
+          { command: "imagine", description: "Generate an image from a prompt" },
           // Backend & model
           { command: "backend", description: "Switch AI backend (Claude/Gemini/Codex/Cursor)" },
           { command: "claude", description: "Switch to Claude backend" },
@@ -27708,6 +27714,8 @@ var init_telegram2 = __esm({
           { command: "mcp", description: "List MCP servers across all backends" },
           // Skills & profile
           { command: "skills", description: "List and invoke skills" },
+          { command: "extract_skill", description: "Extract a reusable skill from this session" },
+          { command: "skill_install", description: "Install a skill from GitHub" },
           { command: "voice", description: "Toggle voice responses" },
           { command: "voice_config", description: "Configure voice provider and voice" },
           { command: "response_style", description: "Set the AI response style (concise/normal/detailed)" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-claw",
-  "version": "0.20.13",
+  "version": "0.20.14",
   "description": "CC-Claw: Personal AI assistant on Telegram — multi-backend (Claude, Gemini, Codex, Cursor), sub-agent orchestration, MCP management",
   "type": "module",
   "main": "dist/cli.js",