chainlesschain 0.162.125 → 0.162.126

package/src/runtime/headless-runner.js

@@ -50,6 +50,11 @@ import { mergeConsecutiveMessages } from "./message-roles.js";
 import { isHeadlessConfigCommand } from "../lib/headless-config-command.js";
 import { withQuietStdout } from "./quiet-stdout.js";
 import { CostBudget } from "../lib/cost-budget.js";
+import {
+  classifyDenial,
+  recordDenial,
+  formatDenials,
+} from "../lib/repl-denials.js";
 
 /** Tools that cannot mutate the filesystem or run commands. */
 export const READ_ONLY_TOOLS = Object.freeze([
@@ -294,17 +299,46 @@ export async function runAgentHeadless(options = {}, deps = {}) {
   let settingsHooks = options.settingsHooks || null;
   if (!settingsHooks) {
     try {
-      const { loadHooks } = await import("../lib/settings-hooks.cjs");
+      const { loadHooks, projectHookTrustNotice } =
+        await import("../lib/settings-hooks.cjs");
       const loaded = loadHooks({ cwd, settingsFile: options.settingsFile });
       settingsHooks =
         loaded.hooks && Object.keys(loaded.hooks).length > 0
           ? loaded.hooks
           : null;
+      // First-run trust notice for an untrusted/cloned repo's shell-running
+      // hooks (Claude-Code 2.1.195 parity). Best-effort, stderr-only.
+      try {
+        const notice = projectHookTrustNotice({
+          cwd,
+          settingsFile: options.settingsFile,
+        });
+        if (notice) process.stderr.write(notice + "\n");
+      } catch {
+        /* trust notice is best-effort */
+      }
     } catch {
       settingsHooks = null; // fail-open
     }
   }
 
+  // autoMode.classifyAllShell (Claude-Code 2.1.193): route the built-in
+  // verification allowlist through the shell-policy classifier instead of
+  // fast-pathing it. Explicit option wins; otherwise read settings.json.
+  let classifyAllShell = options.classifyAllShell || false;
+  if (!classifyAllShell) {
+    try {
+      const { readBooleanSetting } = await import("../lib/settings-loader.cjs");
+      classifyAllShell =
+        readBooleanSetting("autoMode.classifyAllShell", {
+          cwd,
+          settingsFile: options.settingsFile,
+        }) === true;
+    } catch {
+      classifyAllShell = false; // fail-open
+    }
+  }
+
   const runLoop = deps.agentLoop || coreAgentLoop;
   const doBootstrap = deps.bootstrap || bootstrap;
   const getApprovalGate =
@@ -776,6 +810,7 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     approvalGate,
     permissionRules,
     settingsHooks,
+    classifyAllShell,
     enabledToolNames,
     disabledTools,
     iterationBudget: budget,
@@ -847,6 +882,10 @@ export async function runAgentHeadless(options = {}, deps = {}) {
 
   const startedAt = deps.now ? deps.now() : Date.now();
   const toolCalls = [];
+  // Policy denials (blocked tool calls) collected for an end-of-run summary,
+  // so a non-interactive run surfaces what got blocked the way the REPL's
+  // `/permissions denials` does (Claude-Code 2.1.193 denial reasons).
+  const denials = [];
   const usage = {
     input_tokens: 0,
     output_tokens: 0,
@@ -924,6 +963,26 @@ export async function runAgentHeadless(options = {}, deps = {}) {
           if (toolCalls.length > 0) {
             toolCalls[toolCalls.length - 1].is_error = Boolean(err);
           }
+          // Track policy denials (not plain tool failures) for the end-of-run
+          // summary. The preceding tool-executing pushed the args.
+          if (err) {
+            const last = toolCalls[toolCalls.length - 1];
+            const denial = classifyDenial({
+              tool: event.tool,
+              result: event.result,
+              error: event.error,
+              argsSummary:
+                last && last.tool === event.tool
+                  ? formatToolArgs(event.tool, last.args)
+                  : "",
+            });
+            if (denial) {
+              recordDenial(denials, {
+                ...denial,
+                at: deps.now ? deps.now() : Date.now(),
+              });
+            }
+          }
           break;
         }
         case "token-usage": {
@@ -1013,6 +1072,7 @@ export async function runAgentHeadless(options = {}, deps = {}) {
             usage,
             numTurns: budget.consumed,
             durationMs: (deps.now ? deps.now() : Date.now()) - startedAt,
+            denials,
           }),
         ) + "\n",
       );
@@ -1132,6 +1192,21 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     }
   }
 
+  // End-of-run policy-denial summary so a non-interactive run surfaces what was
+  // blocked (mirrors the REPL's `/permissions denials`). Text → stderr lines;
+  // stream → a `denials_summary` event before the final result.
+  if (denials.length) {
+    if (isText) {
+      writeErr(
+        `\n  ${denials.length} tool call(s) were denied by policy this run:\n` +
+          formatDenials(denials, { now: deps.now ? deps.now() : Date.now() }) +
+          "\n",
+      );
+    } else if (isStream) {
+      emitStream({ type: "denials_summary", count: denials.length, denials });
+    }
+  }
+
   if (isStream) {
     emitStream({
       type: "result",
@@ -1155,6 +1230,7 @@ export async function runAgentHeadless(options = {}, deps = {}) {
           usage,
           numTurns: budget.consumed,
           durationMs,
+          denials,
         }),
       ) + "\n",
     );
@@ -1175,8 +1251,9 @@ function buildResultEnvelope({
   usage,
   numTurns,
   durationMs,
+  denials,
 }) {
-  return {
+  const env = {
     type: "result",
     subtype,
     is_error: isError,
@@ -1187,4 +1264,8 @@ function buildResultEnvelope({
     tool_calls: toolCalls,
     usage,
   };
+  // Only present when something was blocked — keeps the no-denial envelope
+  // byte-identical to before (Claude-Code 2.1.193 denial reasons, json mode).
+  if (Array.isArray(denials) && denials.length) env.denials = denials;
+  return env;
 }

package/src/runtime/headless-stream.js

@@ -318,9 +318,26 @@ export function sanitizeLlmHint(raw) {
 /**
  * Yield NDJSON lines from a byte/string stream (stdin). Splits on "\n" and
  * flushes any trailing partial line when the stream ends.
+ *
+ * A single line with no terminating "\n" must never accumulate without bound:
+ * a stuck / garbage producer (or a runaway multi-MB inline payload) that never
+ * emits a newline would otherwise grow `buf` unbounded and OOM this long-lived
+ * stream process. When a line exceeds the cap, a short head is yielded (so the
+ * caller surfaces it as an invalid-JSON error rather than dropping it silently)
+ * and the rest of that monster line is discarded until its newline — the stream
+ * resyncs cleanly to the next well-formed line. Cap precedence:
+ * `opts.maxLineLength` > `CC_MAX_INPUT_LINE_BYTES` env > 16 MB default.
  */
-export async function* readJsonLines(input) {
+export async function* readJsonLines(input, opts = {}) {
+  const envCap = Number(process.env.CC_MAX_INPUT_LINE_BYTES);
+  const maxLineLength =
+    Number.isFinite(opts.maxLineLength) && opts.maxLineLength > 0
+      ? opts.maxLineLength
+      : Number.isFinite(envCap) && envCap > 0
+        ? envCap
+        : 16 * 1024 * 1024;
   let buf = "";
+  let overflow = false; // discarding the tail of an over-long line until its \n
   // Reuse ONE streaming decoder across chunks so a multi-byte UTF-8 character
   // (e.g. a 3-byte Chinese char) split across two Buffer chunks is reassembled
   // rather than corrupted. process.stdin yields Buffers with no setEncoding, so
@@ -332,14 +349,34 @@ export async function* readJsonLines(input) {
       typeof chunk === "string"
         ? chunk
         : decoder.decode(chunk, { stream: true });
+    // Still skipping past an over-long line: drop everything up to (and
+    // including) the next newline, then resume normal line parsing. While no
+    // newline has arrived, keep `buf` empty so we don't re-grow it.
+    if (overflow) {
+      const nl = buf.indexOf("\n");
+      if (nl < 0) {
+        buf = "";
+        continue;
+      }
+      buf = buf.slice(nl + 1);
+      overflow = false;
+    }
     let idx;
     while ((idx = buf.indexOf("\n")) >= 0) {
       yield buf.slice(0, idx);
       buf = buf.slice(idx + 1);
     }
+    // No newline in the remaining buffer and it has blown past the cap — this is
+    // a pathological unterminated line. Yield a short head (an invalid-JSON
+    // error for the caller) and discard the rest until the next newline.
+    if (buf.length > maxLineLength) {
+      yield buf.slice(0, 200);
+      buf = "";
+      overflow = true;
+    }
   }
   buf += decoder.decode(); // flush any bytes held from a final partial char
-  if (buf.trim()) yield buf;
+  if (!overflow && buf.trim()) yield buf;
 }
 
 /**
@@ -497,17 +534,45 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
   let settingsHooks = options.settingsHooks || null;
   if (!settingsHooks) {
     try {
-      const { loadHooks } = await import("../lib/settings-hooks.cjs");
+      const { loadHooks, projectHookTrustNotice } =
+        await import("../lib/settings-hooks.cjs");
       const loaded = loadHooks({ cwd, settingsFile: options.settingsFile });
       settingsHooks =
         loaded.hooks && Object.keys(loaded.hooks).length > 0
           ? loaded.hooks
           : null;
+      // First-run trust notice for an untrusted/cloned repo's shell-running
+      // hooks (Claude-Code 2.1.195 parity). stderr keeps the NDJSON stdout clean.
+      try {
+        const notice = projectHookTrustNotice({
+          cwd,
+          settingsFile: options.settingsFile,
+        });
+        if (notice) process.stderr.write(notice + "\n");
+      } catch {
+        /* trust notice is best-effort */
+      }
     } catch {
       settingsHooks = null; // fail-open
     }
   }
 
+  // autoMode.classifyAllShell (Claude-Code 2.1.193): classify the built-in
+  // verification allowlist through the shell-policy instead of fast-pathing it.
+  let classifyAllShell = options.classifyAllShell || false;
+  if (!classifyAllShell) {
+    try {
+      const { readBooleanSetting } = await import("../lib/settings-loader.cjs");
+      classifyAllShell =
+        readBooleanSetting("autoMode.classifyAllShell", {
+          cwd,
+          settingsFile: options.settingsFile,
+        }) === true;
+    } catch {
+      classifyAllShell = false; // fail-open
+    }
+  }
+
   const input = deps.input || process.stdin;
   const runLoop = deps.agentLoop || coreAgentLoop;
   const doBootstrap = deps.bootstrap || bootstrap;
@@ -914,6 +979,7 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
     approvalGate,
     permissionRules,
     settingsHooks,
+    classifyAllShell,
     enabledToolNames,
     disabledTools,
     // --interactive-approvals: settings/hook `ask` (and, with an IDE bridge,

package/src/runtime/mcp-config.js

@@ -65,6 +65,22 @@ export function mcpToolName(server, tool) {
   return `mcp__${server}__${tool}`;
 }
 
+/**
+ * Case-insensitive "does this header map already carry `name`?". HTTP header
+ * names are case-insensitive, so a caller-supplied `AUTHORIZATION` must count
+ * the same as `Authorization` — otherwise the OAuth-injection guard below would
+ * not see it and would add a SECOND, conflicting auth header, leaking our
+ * stored token where the user explicitly pinned their own credential.
+ */
+export function hasHeaderInsensitive(headers, name) {
+  if (!headers || typeof headers !== "object") return false;
+  const want = String(name).toLowerCase();
+  for (const k of Object.keys(headers)) {
+    if (k.toLowerCase() === want) return true;
+  }
+  return false;
+}
+
 /**
  * When an MCP connect fails with an authentication error (HTTP 401/403, or an
  * explicit Unauthorized/Forbidden) on a URL-based server, return an actionable
@@ -143,7 +159,7 @@ export async function setupMcpFromConfig(servers, deps = {}) {
     // unless the config already supplies an Authorization header. Best-effort:
     // no token / a refresh failure just connects unauthenticated.
     let connectCfg = cfg;
-    if (cfg.url && !cfg.headers?.Authorization && !cfg.headers?.authorization) {
+    if (cfg.url && !hasHeaderInsensitive(cfg.headers, "Authorization")) {
       try {
         const { ensureValidToken } = await import("../lib/mcp-oauth.js");
         const token = await ensureValidToken(cfg.url);
@@ -152,6 +168,31 @@ export async function setupMcpFromConfig(servers, deps = {}) {
             ...cfg,
             headers: { ...cfg.headers, Authorization: `Bearer ${token}` },
           };
+          // Auto-recover from a mid-session 401/403 (server-side token rotation
+          // / revocation while the locally-stored copy still looks unexpired):
+          // register a reconnector that force-refreshes the bearer, so the
+          // mcp-client's callTool retry path reconnects and re-runs the call
+          // once with a fresh token (Claude-Code 2.1.193: "MCP auth re-runs and
+          // reconnects automatically on 401/403"). Best-effort, and skipped for
+          // a server whose config carries its own Authorization header (handled
+          // by the guard above) — an explicit IDE-bridge reconnector registered
+          // after setup still wins on any name clash.
+          if (typeof mcpClient.setReconnector === "function") {
+            const baseCfg = cfg;
+            mcpClient.setReconnector(name, async () => {
+              const { ensureValidToken: reauth } =
+                await import("../lib/mcp-oauth.js");
+              const fresh = await reauth(baseCfg.url, { forceRefresh: true });
+              if (!fresh) return null;
+              return {
+                ...baseCfg,
+                headers: {
+                  ...baseCfg.headers,
+                  Authorization: `Bearer ${fresh}`,
+                },
+              };
+            });
+          }
         }
       } catch {
         // OAuth wiring is best-effort

package/src/runtime/message-roles.js

@@ -64,6 +64,17 @@ function joinContent(a, b) {
  */
 const MERGEABLE_ROLES = new Set(["user", "assistant"]);
 
+/**
+ * Does this message carry tool calls? An assistant turn with `tool_calls` is a
+ * STRUCTURED turn whose calls must stay paired with their `tool` results —
+ * folding it loses one side's tool_calls (orphaning results / unanswered calls)
+ * and the strict-API 400s. Such turns are never merged (left to alternate; the
+ * tool-pair fix lives in sanitizeToolPairs, not here).
+ */
+function hasToolCalls(msg) {
+  return Array.isArray(msg && msg.tool_calls) && msg.tool_calls.length > 0;
+}
+
 /**
  * Merge consecutive same-role messages so the conversation alternates roles for
  * the provider. Only `user`/`assistant` turns fold; `tool` and `system` turns
@@ -85,7 +96,9 @@ export function mergeConsecutiveMessages(messages) {
       msg &&
       typeof msg.role === "string" &&
       MERGEABLE_ROLES.has(msg.role) &&
-      prev.role === msg.role
+      prev.role === msg.role &&
+      !hasToolCalls(prev) && // never fold a structured tool-call turn — merging
+      !hasToolCalls(msg) //     drops one side's tool_calls and breaks pairing
     ) {
       out[out.length - 1] = {
         ...prev,

package/src/assets/web-panel/assets/ChatBubbleRenderer-Pg7dIsiE.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as y,U as a,R as n,S,K as C,Q as x,V as w,_ as B,b as s}from"./vendor-BvqAck49.js";import{_ as k}from"./index-BWgNn9As.js";import"./icons-DP3uiYxy.js";const T={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),f=String(e.getMonth()+1).padStart(2,"0"),g=String(e.getDate()).padStart(2,"0"),b=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${f}-${g} ${b}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},N={class:"bubble"},R={class:"meta"},M={class:"actor"},O={class:"time"},V={class:"body"};function q(c,d,t,r,i,l){const o=v("a-tag");return u(),y("div",{class:B(["chat-row",{mine:r.isMine}])},[a("div",N,[a("div",R,[a("span",M,n(r.actorLabel),1),a("span",O,n(r.formattedTime),1)]),a("div",V,n(r.messageText),1),t.event.source.adapter?(u(),S(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[x(n(t.event.source.adapter),1)]),_:1},8,["color"])):w("v-if",!0)])],2)}const A=k(T,[["render",q],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-aRyQTO/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{A as default};

package/src/assets/web-panel/assets/PdhVaultBrowser-D26Bz5gS.js

@@ -1,7 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["./ChatBubbleRenderer-Pg7dIsiE.js","./vendor-BvqAck49.js","./index-BWgNn9As.js","./icons-DP3uiYxy.js","./index-Cq93VfoF.css","./ChatBubbleRenderer-gy5SDGw2.css","./OrderTableRenderer-BtrR7anf.js","./OrderTableRenderer-CfrDjSHT.css","./TimelineRenderer-acXS5N5h.js","./TimelineRenderer-BlTAtkOc.css","./EmailListRenderer-C890uErx.js","./EmailListRenderer-DTPZPx_S.css","./GenericCardRenderer-C80DK4W7.js","./GenericCardRenderer-o85VDYQS.css"])))=>i.map(i=>d[i]);
-import{E as ue,r as E,b as w,I as g,P as u,J as S,U as v,c,S as C,V as R,_ as M,F as V,Z as se,a0 as ae,R as x,K as m,Q as b,W as A,o as Q}from"./vendor-BvqAck49.js";import{u as J}from"./usePersonalDataHub-lQOvCvCr.js";import{_ as F,e as L,d as P}from"./index-BWgNn9As.js";import{a9 as q,af as U,M as z,aH as G,u as H,aG as K,ap as W,ab as Y,e as de,d as fe,k as pe,ah as me,az as _e,R as ye}from"./icons-DP3uiYxy.js";const I=Object.freeze({q:"",category:null,adapter:null,subtype:null,since:null,until:null}),B=50,Z=300,X=ue("pdhBrowser",()=>{const r=E({...I}),t=E([]),n=E(null),e=E(!1),o=E(!1),a=E(null),l=E(null),s=E(!1),i=E({byCategory:{},byAdapter:{},bySubtype:{},total:0});let d=0,_=null;const T=w(()=>t.value.length>0),j=w(()=>n.value!=null);function h(O={}){const p={},f=r.value;return f.q&&f.q.trim()&&(p.q=f.q.trim()),f.category&&(p.category=f.category),f.adapter&&(p.adapter=f.adapter),f.subtype&&(p.subtype=f.subtype),Number.isFinite(f.since)&&(p.since=f.since),Number.isFinite(f.until)&&(p.until=f.until),{...p,...O}}async function y(){const O=++d;e.value=!0,a.value=null;const p=J();try{const[f,D]=await Promise.all([p.searchEvents(h({limit:B})),p.facetCounts({...r.value.q&&r.value.q.trim()?{q:r.value.q.trim()}:{},...Number.isFinite(r.value.since)?{since:r.value.since}:{},...Number.isFinite(r.value.until)?{until:r.value.until}:{}})]);if(O!==d)return;t.value=f.rows||[],n.value=f.nextCursor||null,l.value=f.mode||"like",s.value=!!f.shortQuery,i.value={byCategory:D.byCategory||{},byAdapter:D.byAdapter||{},bySubtype:D.bySubtype||{},total:D.total||0}}catch(f){if(O!==d)return;a.value=f&&f.message?f.message:String(f),t.value=[],n.value=null}finally{O===d&&(e.value=!1)}}async function k(){if(!n.value||o.value)return;o.value=!0,a.value=null;const O=J();try{const p=await O.searchEvents(h({cursor:n.value,limit:B}));t.value=t.value.concat(p.rows||[]),n.value=p.nextCursor||null,l.value=p.mode||l.value}catch(p){a.value=p&&p.message?p.message:String(p)}finally{o.value=!1}}function le(O,p){if(!(O in I))throw new Error(`pdhBrowser.setFilter: unknown key "${O}"`);r.value={...r.value,[O]:p},_&&clearTimeout(_),_=setTimeout(()=>{_=null,y()},Z)}function ie(O){return r.value={...I,...O},_&&(clearTimeout(_),_=null),y()}function ce(){r.value={...I},t.value=[],n.value=null,a.value=null,i.value={byCategory:{},byAdapter:{},bySubtype:{},total:0}}return{filters:r,results:t,cursor:n,isLoading:e,isAppending:o,error:a,mode:l,shortQuery:s,facets:i,hasResults:T,canLoadMore:j,search:y,loadMore:k,setFilter:le,setFilters:ie,reset:ce,PAGE_SIZE:B,SEARCH_DEBOUNCE_MS:Z}}),ge=Object.freeze(["chat","social","email","shopping","travel","system","ai-chat","other"]),ve=Object.freeze({chat:"社交聊天",social:"内容平台",email:"邮件",shopping:"支付订单",travel:"出行",system:"系统数据","ai-chat":"AI 对话",other:"其他"});function N(r){return ve[r]||r||"未知"}const be=Object.freeze([["wechat","chat"],["messaging-","chat"],["social-","social"],["email-","email"],["shopping-","shopping"],["alipay-","shopping"],["travel-","travel"],["system-data","system"],["browser-","system"],["vscode","system"],["win-recent","system"],["git-activity","system"],["shell-history","system"],["local-files","system"],["ai-chat-","ai-chat"]]);function $(r){if(typeof r!="string"||r.length===0)return"other";for(const[t,n]of be)if(t.endsWith("-")||t==="system-data"){if(r.startsWith(t))return n}else if(r===t)return n;return"other"}const he={__name:"CategorySidebar",props:{selected:{type:String,default:null},facets:{type:Object,default:()=>({byCategory:{},total:0})}},emits:["select"],setup(r,{expose:t}){t();const n=r,e=w(()=>n.facets.total||0),o={chat:Y,social:W,email:K,shopping:H,travel:G,system:z,"ai-chat":U,other:q};function a(i){return o[i]||q}function l(i){return i?{backgroundColor:"#fff",color:"#1677ff"}:{backgroundColor:"#f0f0f0",color:"#666"}}const s={props:n,total:e,ICONS:o,iconFor:a,badgeStyle:l,computed:w,get AppstoreOutlined(){return q},get MessageOutlined(){return Y},get PlayCircleOutlined(){return W},get MailOutlined(){return K},get ShoppingOutlined(){return H},get CarOutlined(){return G},get MobileOutlined(){return z},get RobotOutlined(){return U},get CATEGORIES(){return ge},get categoryLabel(){return N}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}},Oe={class:"pdh-sidebar"},Se=["onClick"],we={class:"label"};function Ce(r,t,n,e,o,a){const l=g("a-badge");return u(),S("div",Oe,[t[2]||(t[2]=v("div",{class:"sidebar-title"},"数据类型",-1)),v("div",{class:M(["cat-item",{active:n.selected===null}]),onClick:t[0]||(t[0]=s=>r.$emit("select",null))},[c(e.AppstoreOutlined,{class:"icon"}),t[1]||(t[1]=v("span",{class:"label"},"全部",-1)),e.total>0?(u(),C(l,{key:0,count:e.total,"number-style":e.badgeStyle(n.selected===null),"overflow-count":9999},null,8,["count","number-style"])):R("v-if",!0)],2),(u(!0),S(V,null,se(e.CATEGORIES,s=>(u(),S("div",{key:s,class:M(["cat-item",{active:n.selected===s,dim:!n.facets.byCategory[s]}]),onClick:i=>r.$emit("select",s)},[(u(),C(ae(e.iconFor(s)),{class:"icon"})),v("span",we,x(e.categoryLabel(s)),1),n.facets.byCategory[s]?(u(),C(l,{key:0,count:n.facets.byCategory[s],"number-style":e.badgeStyle(n.selected===s),"overflow-count":9999},null,8,["count","number-style"])):R("v-if",!0)],10,Se))),128))])}const ke=F(he,[["render",Ce],["__scopeId","data-v-6b62a22e"],["__file","/tmp/cc-web-panel-aRyQTO/repo/packages/web-panel/src/components/pdh/CategorySidebar.vue"]]),Re={__name:"SearchFilterBar",props:{filters:{type:Object,required:!0},facets:{type:Object,default:()=>({byAdapter:{}})},isLoading:{type:Boolean,default:!1},mode:{type:String,default:null},shortQuery:{type:Boolean,default:!1}},emits:["set-filter","reset"],setup(r,{expose:t,emit:n}){t();const e=r,o=n,a=w(()=>e.filters.category?`在「${e.filters.category}」类目内搜索…`:"搜索关键词（如：支付宝、罗技、Kotlin）…"),l=w(()=>Object.entries(e.facets.byAdapter||{}).sort((y,k)=>k[1]-y[1]).map(([y,k])=>({value:y,label:`${y} (${k})`}))),s=w(()=>!e.filters.since&&!e.filters.until?null:[e.filters.since?new Date(e.filters.since):null,e.filters.until?new Date(e.filters.until):null]),i=w(()=>!!(e.filters.q||e.filters.adapter||e.filters.subtype||e.filters.since||e.filters.until));function d(h){o("set-filter","q",h||"")}function _(h){o("set-filter","q",h||"")}function T(h){if(!h||h.length===0){o("set-filter","since",null),o("set-filter","until",null);return}const[y,k]=h;o("set-filter","since",y?+y:null),o("set-filter","until",k?+k:null)}const j={props:e,emit:o,placeholderText:a,adapterOptions:l,dateRangeValue:s,hasActiveFilters:i,onQInput:d,onSearch:_,onDateChange:T,computed:w,get SearchOutlined(){return pe},get CloseCircleOutlined(){return fe},get InfoCircleOutlined(){return de}};return Object.defineProperty(j,"__isScriptSetup",{enumerable:!1,value:!0}),j}},Ee={class:"pdh-filter-bar"},xe={key:1,class:"hint"},Te={key:2,class:"hint"};function je(r,t,n,e,o,a){const l=g("a-input-search"),s=g("a-select"),i=g("a-range-picker"),d=g("a-button");return u(),S("div",Ee,[c(l,{value:n.filters.q,placeholder:e.placeholderText,"enter-button":"搜索","allow-clear":"",loading:n.isLoading,style:{flex:"1","max-width":"480px"},"onUpdate:value":e.onQInput,onSearch:e.onSearch},{prefix:m(()=>[c(e.SearchOutlined)]),_:1},8,["value","placeholder","loading"]),c(s,{value:n.filters.adapter,placeholder:"所有 adapter","allow-clear":"",options:e.adapterOptions,style:{width:"200px"},"onUpdate:value":t[0]||(t[0]=_=>r.$emit("set-filter","adapter",_||null))},null,8,["value","options"]),c(i,{value:e.dateRangeValue,placeholder:["开始日期","结束日期"],style:{width:"280px"},"onUpdate:value":e.onDateChange},null,8,["value"]),e.hasActiveFilters?(u(),C(d,{key:0,type:"link",danger:"",onClick:t[1]||(t[1]=_=>r.$emit("reset"))},{icon:m(()=>[c(e.CloseCircleOutlined)]),default:m(()=>[t[2]||(t[2]=b(" 清空筛选 ",-1))]),_:1})):R("v-if",!0),n.shortQuery?(u(),S("span",xe,[c(e.InfoCircleOutlined),t[3]||(t[3]=b(" 关键词需至少 3 字 (FTS5 trigram 限制) ",-1))])):n.mode==="like"?(u(),S("span",Te,[c(e.InfoCircleOutlined),t[4]||(t[4]=b(" 当前为 LIKE 兜底模式 ",-1))])):R("v-if",!0)])}const Ae=F(Re,[["render",je],["__scopeId","data-v-d7cce6e9"],["__file","/tmp/cc-web-panel-aRyQTO/repo/packages/web-panel/src/components/pdh/SearchFilterBar.vue"]]),Le={__name:"RendererDispatcher",props:{event:{type:Object,required:!0}},setup(r,{expose:t}){t();const n=A(()=>L(()=>import("./ChatBubbleRenderer-Pg7dIsiE.js"),__vite__mapDeps([0,1,2,3,4,5]),import.meta.url)),e=A(()=>L(()=>import("./OrderTableRenderer-BtrR7anf.js"),__vite__mapDeps([6,1,2,3,4,7]),import.meta.url)),o=A(()=>L(()=>import("./TimelineRenderer-acXS5N5h.js"),__vite__mapDeps([8,1,2,3,4,9]),import.meta.url)),a=A(()=>L(()=>import("./EmailListRenderer-C890uErx.js"),__vite__mapDeps([10,1,2,3,4,11]),import.meta.url)),l=A(()=>L(()=>import("./GenericCardRenderer-C80DK4W7.js"),__vite__mapDeps([12,1,2,3,4,13]),import.meta.url));function s(d){const _=d&&d.source&&d.source.adapter;switch($(_)){case"chat":case"ai-chat":return n;case"shopping":return e;case"travel":return o;case"email":return a;default:return l}}const i={ChatBubbleRenderer:n,OrderTableRenderer:e,TimelineRenderer:o,EmailListRenderer:a,GenericCardRenderer:l,rendererFor:s,defineAsyncComponent:A,get getCategory(){return $}};return Object.defineProperty(i,"__isScriptSetup",{enumerable:!1,value:!0}),i}};function Fe(r,t,n,e,o,a){return u(),C(ae(e.rendererFor(n.event)),{event:n.event},null,8,["event"])}const De=F(Le,[["render",Fe],["__file","/tmp/cc-web-panel-aRyQTO/repo/packages/web-panel/src/components/pdh/renderers/RendererDispatcher.vue"]]);function ee(r){return JSON.stringify(r,null,2)}function te(r){return r.map(t=>JSON.stringify(t)).join(`
-`)+`
-`}function ne(r){const n=["id","subtype","occurredAt","occurredAtIso","actor","place","adapter","summary","contentJson","extraJson"].join(","),e=r.map(o=>{const a=Number.isFinite(o.occurredAt)?o.occurredAt:null,l=a?new Date(a).toISOString():"",s=o.source&&o.source.adapter||"",i=o.content&&(o.content.text||o.content.title||o.content.subject)||"";return[o.id||"",o.subtype||"",a!=null?String(a):"",l,o.actor||"",o.place||"",s,i,o.content?JSON.stringify(o.content):"",o.extra?JSON.stringify(o.extra):""].map(Ie).join(",")});return[n,...e].join(`
-`)+`
-`}function Ie(r){const t=String(r??"");return t.includes(",")||t.includes('"')||t.includes(`
-`)||t.includes("\r")?'"'+t.replace(/"/g,'""')+'"':t}function re(r,t,n="application/octet-stream"){if(typeof window>"u"||typeof document>"u")return t;const e=new Blob([r],{type:n}),o=URL.createObjectURL(e),a=document.createElement("a");return a.href=o,a.download=t,document.body.appendChild(a),a.click(),document.body.removeChild(a),setTimeout(()=>URL.revokeObjectURL(o),1e3),t}function oe(r,t=null){const n=new Date,e=n.getFullYear(),o=String(n.getMonth()+1).padStart(2,"0"),a=String(n.getDate()).padStart(2,"0"),l=r==="ndjson"?"ndjson":r,s=t?`-${t}`:"";return`pdh-events-${e}-${o}-${a}${s}.${l}`}const Pe={__name:"ExportDropdown",props:{events:{type:Array,required:!0},category:{type:String,default:null}},setup(r,{expose:t}){t();const n=r,e=w(()=>n.events.length>0),o={json:"application/json;charset=utf-8",ndjson:"application/x-ndjson;charset=utf-8",csv:"text/csv;charset=utf-8"};function a(i){switch(i){case"json":return ee(n.events);case"ndjson":return te(n.events);case"csv":return ne(n.events);default:throw new Error(`unknown format: ${i}`)}}function l({key:i}){try{const d=a(i),_=oe(i,n.category);re(d,_,o[i]),P.success(`已导出 ${n.events.length} 条到 ${_}`)}catch(d){P.error(`导出失败: ${d.message||d}`)}}const s={props:n,hasResults:e,MIME:o,serialize:a,onClick:l,computed:w,get DownloadOutlined(){return _e},get DownOutlined(){return me},get message(){return P},get eventsToJson(){return ee},get eventsToNdjson(){return te},get eventsToCsv(){return ne},get downloadAs(){return re},get suggestFilename(){return oe}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}};function qe(r,t,n,e,o,a){const l=g("a-button"),s=g("a-menu-item"),i=g("a-menu"),d=g("a-dropdown");return u(),C(d,{disabled:!e.hasResults},{overlay:m(()=>[c(i,{onClick:e.onClick},{default:m(()=>[c(s,{key:"json"},{default:m(()=>[...t[0]||(t[0]=[b("JSON (.json)",-1)])]),_:1}),c(s,{key:"ndjson"},{default:m(()=>[...t[1]||(t[1]=[b("NDJSON (.ndjson)",-1)])]),_:1}),c(s,{key:"csv"},{default:m(()=>[...t[2]||(t[2]=[b("CSV (.csv)",-1)])]),_:1})]),_:1})]),default:m(()=>[c(l,{disabled:!e.hasResults},{icon:m(()=>[c(e.DownloadOutlined)]),default:m(()=>[b(" 导出 ("+x(n.events.length)+") ",1),c(e.DownOutlined)]),_:1},8,["disabled"])]),_:1},8,["disabled"])}const Be=F(Pe,[["render",qe],["__file","/tmp/cc-web-panel-aRyQTO/repo/packages/web-panel/src/components/pdh/ExportDropdown.vue"]]),Ve={__name:"PdhVaultBrowser",setup(r,{expose:t}){t();const n=X(),e=w(()=>n.filters.q?`没有匹配 "${n.filters.q}" 的事件 — 试试更短的关键词或换个类目`:n.filters.category?`「${N(n.filters.category)}」类目下还没有数据 — 去采集页同步对应 adapter`:"Vault 里还没有数据 — 去「个人数据中台」页面同步任意 adapter");function o(s){n.filters.category=s,n.search()}function a(s,i){n.setFilter(s,i)}Q(()=>{!n.hasResults&&!n.isLoading&&n.search()});const l={store:n,emptyHint:e,onCategorySelect:o,onSetFilter:a,onMounted:Q,computed:w,get ReloadOutlined(){return ye},get usePdhBrowserStore(){return X},get categoryLabel(){return N},CategorySidebar:ke,SearchFilterBar:Ae,RendererDispatcher:De,ExportDropdown:Be};return Object.defineProperty(l,"__isScriptSetup",{enumerable:!1,value:!0}),l}},Ne={class:"pdh-browser-page"},Me={class:"page-header"},Qe={class:"main-pane"},Je={class:"results-summary"},Ue={key:0},ze={key:0},Ge={key:1},He={class:"loaded-of"},Ke={class:"results-list"},We={key:2,class:"load-more"};function Ye(r,t,n,e,o,a){const l=g("a-tag"),s=g("a-button"),i=g("a-space"),d=g("a-col"),_=g("a-spin"),T=g("a-alert"),j=g("a-empty"),h=g("a-row");return u(),S("div",Ne,[v("div",Me,[t[6]||(t[6]=v("div",null,[v("h2",{class:"page-title"},"数据浏览器"),v("p",{class:"page-sub"}," Vault 里所有已采集的数据，按类目浏览 / 全文检索 / 时间窗口筛选。 完全离线，不外传。 ")],-1)),c(i,null,{default:m(()=>[e.store.mode==="fts5"?(u(),C(l,{key:0,color:"green"},{default:m(()=>[...t[3]||(t[3]=[b("FTS5 trigram",-1)])]),_:1})):e.store.mode==="like"?(u(),C(l,{key:1,color:"orange"},{default:m(()=>[...t[4]||(t[4]=[b("LIKE 兜底",-1)])]),_:1})):R("v-if",!0),c(e.ExportDropdown,{events:e.store.results,category:e.store.filters.category},null,8,["events","category"]),c(s,{onClick:t[0]||(t[0]=y=>e.store.search()),loading:e.store.isLoading},{icon:m(()=>[c(e.ReloadOutlined)]),default:m(()=>[t[5]||(t[5]=b(" 刷新 ",-1))]),_:1},8,["loading"])]),_:1})]),c(h,{gutter:16,class:"browser-layout"},{default:m(()=>[c(d,{xs:24,sm:24,md:6,lg:5,xl:4},{default:m(()=>[c(e.CategorySidebar,{selected:e.store.filters.category,facets:e.store.facets,onSelect:e.onCategorySelect},null,8,["selected","facets"])]),_:1}),c(d,{xs:24,sm:24,md:18,lg:19,xl:20},{default:m(()=>[v("div",Qe,[c(e.SearchFilterBar,{filters:e.store.filters,facets:e.store.facets,"is-loading":e.store.isLoading,mode:e.store.mode,"short-query":e.store.shortQuery,onSetFilter:e.onSetFilter,onReset:t[1]||(t[1]=y=>{e.store.reset(),e.store.search()})},null,8,["filters","facets","is-loading","mode","short-query"]),v("div",Je,[e.store.isLoading&&e.store.results.length===0?(u(),S("span",Ue,[c(_,{size:"small"}),t[7]||(t[7]=b(" 载入中… ",-1))])):(u(),S(V,{key:1},[v("strong",null,x(e.store.facets.total),1),t[11]||(t[11]=b(" 条事件 ",-1)),e.store.filters.category?(u(),S("span",ze,[t[8]||(t[8]=b(" / 当前类目 ",-1)),v("strong",null,x(e.categoryLabel(e.store.filters.category)),1),v("strong",null,x(e.store.facets.byCategory[e.store.filters.category]||0),1)])):R("v-if",!0),e.store.filters.q?(u(),S("span",Ge,[t[9]||(t[9]=b(' / 关键词 "',-1)),v("em",null,x(e.store.filters.q),1),t[10]||(t[10]=b('"',-1))])):R("v-if",!0),v("span",He," / 已显示 "+x(e.store.results.length),1)],64))]),e.store.error?(u(),C(T,{key:0,type:"error","show-icon":"",message:e.store.error,closable:"",style:{margin:"12px 0"}},null,8,["message"])):R("v-if",!0),!e.store.isLoading&&e.store.results.length===0&&!e.store.error?(u(),C(j,{key:1,description:e.emptyHint,style:{"margin-top":"40px"}},null,8,["description"])):R("v-if",!0),v("div",Ke,[(u(!0),S(V,null,se(e.store.results,(y,k)=>(u(),C(e.RendererDispatcher,{key:`r-${k}-${y.id}`,event:y},null,8,["event"]))),128))]),e.store.canLoadMore?(u(),S("div",We,[c(s,{loading:e.store.isAppending,onClick:t[2]||(t[2]=y=>e.store.loadMore()),block:""},{default:m(()=>[...t[12]||(t[12]=[b(" 加载下一页 (50 条) ",-1)])]),_:1},8,["loading"])])):R("v-if",!0)])]),_:1})]),_:1})])}const tt=F(Ve,[["render",Ye],["__scopeId","data-v-0f7c02cd"],["__file","/tmp/cc-web-panel-aRyQTO/repo/packages/web-panel/src/views/PdhVaultBrowser.vue"]]);export{tt as default};

package/src/assets/web-panel/assets/devWarning-D_lwLZ6O.js

@@ -1 +0,0 @@
-import{R as r}from"./index-BWgNn9As.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-CEwuCM44.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-BHonE9fU.js";import{a0 as t}from"./index-BWgNn9As.js";import"./vendor-BvqAck49.js";import"./index-BSpFe6j5.js";import"./icons-DP3uiYxy.js";const s=t(o);export{s as default};

package/src/assets/web-panel/assets/index-DzzgU4IU.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-1MEtrgtF.js";import{a0 as t}from"./index-BWgNn9As.js";import"./vendor-BvqAck49.js";import"./responsiveObserve-BQFRzFeZ.js";import"./useFlexGapSupport-Q7bDZ3EI.js";import"./styleChecker-B-Suj978.js";import"./index-BSpFe6j5.js";import"./icons-DP3uiYxy.js";const l=t(o);export{l as default};