chainlesschain 0.162.151 → 0.162.152

package/src/assets/web-panel/assets/{useFs-TdW-NgFC.js → useFs-DxxHawzW.js}

@@ -1 +1 @@
-import{u as d}from"./index-BgN5G5vF.js";import{u as c}from"./useShellMode-CgR0wCYM.js";function u({accept:l=""}={}){return new Promise(a=>{if(typeof document>"u"){a({canceled:!0,path:null,content:null});return}const n=document.createElement("input");n.type="file",l&&(n.accept=l),n.style.display="none",document.body.appendChild(n);let o=!1;const i=()=>{n.parentNode&&n.parentNode.removeChild(n)},r=()=>{if(o)return;o=!0;const e=n.files&&n.files[0];if(!e){i(),a({canceled:!0,path:null,content:null});return}const t=new FileReader;t.onload=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:typeof t.result=="string"?t.result:""})},t.onerror=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:null,reason:"read_failed"})},t.readAsText(e)};n.addEventListener("change",r),n.click()})}function f(l,{defaultPath:a="download.txt"}={}){if(typeof document>"u")return{canceled:!0,path:null};const n=new Blob([l],{type:"text/plain"}),o=URL.createObjectURL(n),i=document.createElement("a");return i.href=o,i.download=a,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(o),{canceled:!1,path:a}}function p(l){if(!Array.isArray(l))return"";const a=[];for(const n of l)if(Array.isArray(n.extensions))for(const o of n.extensions)a.push(`.${o.replace(/^\./,"")}`);return a.join(",")}function m(){const l=d();async function a(r={}){if(c().isEmbedded){const e=await l.sendRaw({type:"fs.openDialog",title:r.title,filters:r.filters},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDialog failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,content:t.content??null,size:t.size,reason:t.reason}}return u({accept:p(r.filters)})}async function n(r,e={}){if(typeof r!="string")throw new Error("content must be a string");if(c().isEmbedded){const t=await l.sendRaw({type:"fs.saveDialog",title:e.title,defaultPath:e.defaultPath,filters:e.filters,content:r},6e4);if(t&&t.ok===!1)throw new Error(t.error||"fs.saveDialog failed");const s=t?.result??t;return{canceled:!!s.canceled,path:s.path??null}}return f(r,{defaultPath:e.defaultPath})}async function o(r,e={}){const t=JSON.stringify(r,null,2),s={...e,defaultPath:e.defaultPath||"data.json",filters:e.filters||[{name:"JSON",extensions:["json"]}]};return n(t,s)}async function i(r={}){if(!c().isEmbedded)return{canceled:!0,path:null,initialized:!1,unsupported:!0};const e=await l.sendRaw({type:"fs.openDirectory",title:r.title},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDirectory failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,initialized:!!t.initialized}}return{pickFileText:a,saveText:n,saveJson:o,pickDirectory:i}}export{m as u};
+import{u as d}from"./index-CGqrVLWe.js";import{u as c}from"./useShellMode-CgR0wCYM.js";function u({accept:l=""}={}){return new Promise(a=>{if(typeof document>"u"){a({canceled:!0,path:null,content:null});return}const n=document.createElement("input");n.type="file",l&&(n.accept=l),n.style.display="none",document.body.appendChild(n);let o=!1;const i=()=>{n.parentNode&&n.parentNode.removeChild(n)},r=()=>{if(o)return;o=!0;const e=n.files&&n.files[0];if(!e){i(),a({canceled:!0,path:null,content:null});return}const t=new FileReader;t.onload=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:typeof t.result=="string"?t.result:""})},t.onerror=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:null,reason:"read_failed"})},t.readAsText(e)};n.addEventListener("change",r),n.click()})}function f(l,{defaultPath:a="download.txt"}={}){if(typeof document>"u")return{canceled:!0,path:null};const n=new Blob([l],{type:"text/plain"}),o=URL.createObjectURL(n),i=document.createElement("a");return i.href=o,i.download=a,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(o),{canceled:!1,path:a}}function p(l){if(!Array.isArray(l))return"";const a=[];for(const n of l)if(Array.isArray(n.extensions))for(const o of n.extensions)a.push(`.${o.replace(/^\./,"")}`);return a.join(",")}function m(){const l=d();async function a(r={}){if(c().isEmbedded){const e=await l.sendRaw({type:"fs.openDialog",title:r.title,filters:r.filters},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDialog failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,content:t.content??null,size:t.size,reason:t.reason}}return u({accept:p(r.filters)})}async function n(r,e={}){if(typeof r!="string")throw new Error("content must be a string");if(c().isEmbedded){const t=await l.sendRaw({type:"fs.saveDialog",title:e.title,defaultPath:e.defaultPath,filters:e.filters,content:r},6e4);if(t&&t.ok===!1)throw new Error(t.error||"fs.saveDialog failed");const s=t?.result??t;return{canceled:!!s.canceled,path:s.path??null}}return f(r,{defaultPath:e.defaultPath})}async function o(r,e={}){const t=JSON.stringify(r,null,2),s={...e,defaultPath:e.defaultPath||"data.json",filters:e.filters||[{name:"JSON",extensions:["json"]}]};return n(t,s)}async function i(r={}){if(!c().isEmbedded)return{canceled:!0,path:null,initialized:!1,unsupported:!0};const e=await l.sendRaw({type:"fs.openDirectory",title:r.title},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDirectory failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,initialized:!!t.initialized}}return{pickFileText:a,saveText:n,saveJson:o,pickDirectory:i}}export{m as u};

package/src/assets/web-panel/assets/{usePersonalDataHub-Dyox7wCu.js → usePersonalDataHub-C1HblLrD.js}

@@ -1 +1 @@
-import{u as f}from"./index-BgN5G5vF.js";function d(n){if(!n)return n;if(n.error)throw new Error(n.error);return n.result!==void 0?n.result:n}function p(n,t,a,e,r){return typeof n.onMessage!="function"||typeof n.sendRaw!="function"?n.sendRaw({type:t,...a},r).then(d):new Promise((u,s)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${t}.event`,g=`${t}.end`;let c=!1,y=()=>{};const o=(i,b)=>{if(!c){c=!0,clearTimeout(m);try{y()}catch{}i(b)}},m=setTimeout(()=>{o(s,new Error(`stream timeout (${r}ms): ${t}`))},r),h=n.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof e=="function")try{e(i.event||i)}catch{}return}if(i.type===g){o(u,d(i));return}i.type==="error"&&o(s,new Error(i.message||"stream error"))}});y=typeof h=="function"?h:()=>{},Promise.resolve(n.sendRaw({id:l,type:t,...a},r)).catch(()=>{})})}function D(){const n=f(),t=(a,e={},r=3e4)=>n.sendRaw({type:a,...e},r).then(d);return{async health(){return await t("personal-data-hub.health",{},8e3)},async stats(){return await t("personal-data-hub.stats",{},8e3)},async listAdapters(){return await t("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const e=await n.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),r=e&&e.result!==void 0?e.result:e;return r&&r.ok&&typeof r.filePath=="string"?r.filePath:null}catch{return null}},async adapterReadiness(a){return await t("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,e={}){return await t("personal-data-hub.sync-adapter",{name:a,options:e},12e4)},async syncAll(a={}){return await t("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:e=20,seed:r=1}={}){return await t("personal-data-hub.register-mock",{name:a,count:e,seed:r})},async unregister(a){return await t("personal-data-hub.unregister",{name:a})},async ask(a,e={}){return await t("personal-data-hub.ask",{question:a,options:e},18e4)},async queryEvents(a={}){return await t("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await t("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await t("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await t("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await t("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,e={}){return await t("personal-data-hub.register-email",{account:a,opts:e},15e3)},async unregisterEmail(a){return await t("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await t("personal-data-hub.list-email-accounts",{},5e3)},async eventDetail(a){return await t("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,e={},r){return await p(n,"personal-data-hub.sync-adapter-stream",{name:a,options:e},r,6e5)},async syncAllStream(a={},e){return await p(n,"personal-data-hub.sync-all-stream",{options:a},e,9e5)},async registerAlipay(a,e={}){return await t("personal-data-hub.register-alipay",{account:a,opts:e},15e3)},async unregisterAlipay(a){return await t("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await t("personal-data-hub.list-alipay-accounts",{},5e3)},async importAlipayBill({zipPath:a,csvPath:e,zipPassword:r}={}){return await t("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:e,zipPassword:r},3e5)},async reviewQueueList(a=50){return await t("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,e){return await t("personal-data-hub.review-decision",{reviewId:a,decision:e},5e3)},async manualMerge(a,e){return await t("personal-data-hub.manual-merge",{aId:a,bId:e},5e3)},async manualUnmerge(a){return await t("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await t("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await t("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await t("personal-data-hub.skills-list",{},5e3)},async runSkill(a,e={}){return await t("personal-data-hub.run-skill",{name:a,options:e},12e4)},async openAichatLogin(a,e={}){return await t("personal-data-hub.aichat-open-login",{vendor:a,opts:e},1e4)},async probeAichatCookies(a,e){return await t("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:e},1e4)},async registerAichatVendor(a,e,r={}){return await t("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:e,opts:r},3e4)},async rotateAichatLogin(a){return await t("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await t("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await t("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await t("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await t("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s}={}){return await t("personal-data-hub.register-wechat",{account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s},45e3)},async listWechatAccounts(){return await t("personal-data-hub.list-wechat-accounts",{},5e3)},async unregisterWechat(a){return await t("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await t("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await t("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await t("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await t("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await t("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await t("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await t("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await t("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{D as u};
+import{u as f}from"./index-CGqrVLWe.js";function d(n){if(!n)return n;if(n.error)throw new Error(n.error);return n.result!==void 0?n.result:n}function p(n,t,a,e,r){return typeof n.onMessage!="function"||typeof n.sendRaw!="function"?n.sendRaw({type:t,...a},r).then(d):new Promise((u,s)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${t}.event`,g=`${t}.end`;let c=!1,y=()=>{};const o=(i,b)=>{if(!c){c=!0,clearTimeout(m);try{y()}catch{}i(b)}},m=setTimeout(()=>{o(s,new Error(`stream timeout (${r}ms): ${t}`))},r),h=n.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof e=="function")try{e(i.event||i)}catch{}return}if(i.type===g){o(u,d(i));return}i.type==="error"&&o(s,new Error(i.message||"stream error"))}});y=typeof h=="function"?h:()=>{},Promise.resolve(n.sendRaw({id:l,type:t,...a},r)).catch(()=>{})})}function D(){const n=f(),t=(a,e={},r=3e4)=>n.sendRaw({type:a,...e},r).then(d);return{async health(){return await t("personal-data-hub.health",{},8e3)},async stats(){return await t("personal-data-hub.stats",{},8e3)},async listAdapters(){return await t("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const e=await n.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),r=e&&e.result!==void 0?e.result:e;return r&&r.ok&&typeof r.filePath=="string"?r.filePath:null}catch{return null}},async adapterReadiness(a){return await t("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,e={}){return await t("personal-data-hub.sync-adapter",{name:a,options:e},12e4)},async syncAll(a={}){return await t("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:e=20,seed:r=1}={}){return await t("personal-data-hub.register-mock",{name:a,count:e,seed:r})},async unregister(a){return await t("personal-data-hub.unregister",{name:a})},async ask(a,e={}){return await t("personal-data-hub.ask",{question:a,options:e},18e4)},async queryEvents(a={}){return await t("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await t("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await t("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await t("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await t("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,e={}){return await t("personal-data-hub.register-email",{account:a,opts:e},15e3)},async unregisterEmail(a){return await t("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await t("personal-data-hub.list-email-accounts",{},5e3)},async eventDetail(a){return await t("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,e={},r){return await p(n,"personal-data-hub.sync-adapter-stream",{name:a,options:e},r,6e5)},async syncAllStream(a={},e){return await p(n,"personal-data-hub.sync-all-stream",{options:a},e,9e5)},async registerAlipay(a,e={}){return await t("personal-data-hub.register-alipay",{account:a,opts:e},15e3)},async unregisterAlipay(a){return await t("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await t("personal-data-hub.list-alipay-accounts",{},5e3)},async importAlipayBill({zipPath:a,csvPath:e,zipPassword:r}={}){return await t("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:e,zipPassword:r},3e5)},async reviewQueueList(a=50){return await t("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,e){return await t("personal-data-hub.review-decision",{reviewId:a,decision:e},5e3)},async manualMerge(a,e){return await t("personal-data-hub.manual-merge",{aId:a,bId:e},5e3)},async manualUnmerge(a){return await t("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await t("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await t("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await t("personal-data-hub.skills-list",{},5e3)},async runSkill(a,e={}){return await t("personal-data-hub.run-skill",{name:a,options:e},12e4)},async openAichatLogin(a,e={}){return await t("personal-data-hub.aichat-open-login",{vendor:a,opts:e},1e4)},async probeAichatCookies(a,e){return await t("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:e},1e4)},async registerAichatVendor(a,e,r={}){return await t("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:e,opts:r},3e4)},async rotateAichatLogin(a){return await t("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await t("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await t("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await t("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await t("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s}={}){return await t("personal-data-hub.register-wechat",{account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s},45e3)},async listWechatAccounts(){return await t("personal-data-hub.list-wechat-accounts",{},5e3)},async unregisterWechat(a){return await t("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await t("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await t("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await t("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await t("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await t("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await t("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await t("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await t("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{D as u};

package/src/assets/web-panel/assets/{vnode-XUn5S8CP.js → vnode-Dex0jy4T.js}

@@ -1 +1 @@
-import{N as i,h as a,w as l}from"./index-BgN5G5vF.js";import{a8 as o,k as g,C as d,F as f,A as p}from"./vendor-BMxUs6UX.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};
+import{N as i,h as a,w as l}from"./index-CGqrVLWe.js";import{a8 as o,k as g,C as d,F as f,A as p}from"./vendor-BMxUs6UX.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};

package/src/assets/web-panel/assets/{zoom-Ls77i8hn.js → zoom-Bk1MScAD.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-BgN5G5vF.js";import{i as f}from"./motion-DUZgCpn6.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-CGqrVLWe.js";import{i as f}from"./motion-DmvaRoVv.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-BgN5G5vF.js"></script>
+  <script type="module" crossorigin src="./assets/index-CGqrVLWe.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-BMxUs6UX.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-BsDmGpcT.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/commands/agent.js

@@ -187,7 +187,7 @@ export function registerAgentCommand(program) {
     )
     .option(
       "--auto-pin",
-      "During auto-compaction, pin the original task (first user turn) so it always survives compaction (off by default)",
+      "Force-pin the original task (first user turn) through compaction (ON by default; disable with CC_AUTO_PIN=0 or config context.autoPin=false)",
     )
     .option(
       "--max-rewakes <n>",
@@ -347,6 +347,13 @@ export function registerAgentCommand(program) {
       false,
     )
     .action(async (task, options, command) => {
+      // CC_API_KEY env fallback for --api-key: lets callers (IDE plugins,
+      // scripts) pass the key via the environment instead of argv, where it
+      // is visible to every local process (/proc/<pid>/cmdline, Win32_Process).
+      // An explicit --api-key still wins.
+      if (!options.apiKey && process.env.CC_API_KEY) {
+        options.apiKey = process.env.CC_API_KEY;
+      }
       const bypassPermissions = !!(
         options.allowDangerousBypass ||
         options.yolo ||

package/src/commands/eval.js

@@ -11,7 +11,7 @@
 import fs from "fs";
 import path from "path";
 import { fileURLToPath } from "url";
-import { spawn } from "child_process";
+import { spawn, spawnSync } from "child_process";
 import { runEvalSuite } from "../lib/eval/runner.js";
 import { getSuite } from "../lib/eval/tasks.js";
 import {
@@ -45,6 +45,40 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 // This file is src/commands/eval.js → the CLI entry is bin/chainlesschain.js.
 const BIN = path.resolve(__dirname, "..", "..", "bin", "chainlesschain.js");
 
+/**
+ * Kill an agent child AND its tool grandchildren. A bare child.kill("SIGTERM")
+ * only reaches the direct child (and on Windows TerminateProcess never reaches
+ * grandchildren), leaving tools alive and still WRITING into the workspace.
+ * POSIX children are spawned detached (own process group) so -pid reaps the
+ * whole tree; Windows uses taskkill /T /F. Same pattern as the async-hook
+ * supervisor's _killChildTree.
+ */
+function killAgentTree(child) {
+  if (!child || !child.pid) return;
+  if (process.platform === "win32") {
+    try {
+      spawnSync("taskkill", ["/PID", String(child.pid), "/T", "/F"], {
+        windowsHide: true,
+        timeout: 10000,
+      });
+    } catch {
+      /* fall through to the direct kill below */
+    }
+  } else {
+    try {
+      process.kill(-child.pid, "SIGKILL"); // negative pid = process group
+      return;
+    } catch {
+      /* not a group leader / already gone — fall through */
+    }
+  }
+  try {
+    child.kill("SIGKILL");
+  } catch {
+    /* already gone */
+  }
+}
+
 /**
  * Build a runAgent that shells out to a headless `cc agent -p` in the task's
  * workspace. acceptEdits lets it write files without an interactive prompt.
@@ -52,42 +86,59 @@ const BIN = path.resolve(__dirname, "..", "..", "bin", "chainlesschain.js");
 function makeHeadlessRunAgent(opts = {}) {
   return function runAgent({ prompt, cwd, timeoutMs }) {
     return new Promise((resolve) => {
-      const args = [
-        BIN,
-        "agent",
-        "-p",
-        prompt,
-        "--permission-mode",
-        "acceptEdits",
-        "--output-format",
-        "text",
-      ];
-      if (opts.model) args.push("--model", opts.model);
-      if (opts.provider) args.push("--provider", opts.provider);
+      let args;
+      if (opts._argv) {
+        // Test seam: run an arbitrary node argv instead of the real agent, so
+        // the timeout/tree-kill path is testable offline.
+        args = opts._argv;
+      } else {
+        args = [
+          BIN,
+          "agent",
+          "-p",
+          prompt,
+          "--permission-mode",
+          "acceptEdits",
+          "--output-format",
+          "text",
+        ];
+        if (opts.model) args.push("--model", opts.model);
+        if (opts.provider) args.push("--provider", opts.provider);
+      }
       const child = spawn(process.execPath, args, {
         cwd,
         env: { ...process.env, CLAUDECODE: "1" },
         windowsHide: true,
+        // Own process group on POSIX so a timeout can reap the whole tree.
+        detached: process.platform !== "win32",
       });
       let out = "";
       let err = "";
       let settled = false;
+      let timedOut = false;
+      let graceTimer = null;
       const done = (result) => {
         if (settled) return;
         settled = true;
+        clearTimeout(graceTimer);
         resolve(result);
       };
       const timer = setTimeout(() => {
-        try {
-          child.kill("SIGTERM");
-        } catch {
-          /* already gone */
-        }
-        done({
-          ok: false,
-          output: out,
-          error: `timed out after ${timeoutMs || 120000}ms`,
-        });
+        // Kill the WHOLE tree, then settle on `close` — resolving immediately
+        // would race a still-live agent against the runner's after-snapshot,
+        // check() and workspace rmSync (nondeterministic scores + EBUSY leaks).
+        timedOut = true;
+        killAgentTree(child);
+        // Last resort if the process is unkillable and `close` never fires —
+        // don't hang the whole suite on one stuck task.
+        graceTimer = setTimeout(() => {
+          done({
+            ok: false,
+            output: out,
+            error: `timed out after ${timeoutMs || 120000}ms (process did not exit after kill)`,
+          });
+        }, 10000);
+        if (typeof graceTimer.unref === "function") graceTimer.unref();
       }, timeoutMs || 120000);
       if (typeof timer.unref === "function") timer.unref();
       child.stdout?.on("data", (d) => (out += d.toString("utf8")));
@@ -98,12 +149,23 @@ function makeHeadlessRunAgent(opts = {}) {
       });
       child.on("close", (code) => {
         clearTimeout(timer);
+        if (timedOut) {
+          done({
+            ok: false,
+            output: out,
+            error: `timed out after ${timeoutMs || 120000}ms`,
+          });
+          return;
+        }
         done({ ok: code === 0, output: out, error: code === 0 ? null : err });
       });
     });
   };
 }
 
+// For tests: the timeout/tree-kill path needs a real spawned process.
+export { makeHeadlessRunAgent, killAgentTree };
+
 export function registerEvalCommand(program, { logger } = {}) {
   const log = logger || console;
   program
@@ -215,6 +277,9 @@ export function registerEvalCommand(program, { logger } = {}) {
           appendHistory(options.history, {
             ranAt: new Date().toISOString(),
             label: options.label || null,
+            // Tagged so --trend can exclude it: a dry-run is always 0% and
+            // would otherwise report every passing task as a regression.
+            ...(options.dryRun ? { dryRun: true } : {}),
             passed: summary.passed,
             total: summary.total,
             passRate: summary.passRate,

package/src/commands/plugin.js

@@ -608,6 +608,10 @@ export function registerPluginCommand(program) {
       "Plugin name to select from a multi-plugin registry",
     )
     .option("--token <token>", "Bearer token for a private registry")
+    .option(
+      "--allow-insecure-registry",
+      "Allow a plain-HTTP registry URL (MITM risk — trusted networks only)",
+    )
     .option("--json", "Output as JSON")
     .action(async (source, options) => {
       const { installFromSource } =
@@ -636,6 +640,7 @@ export function registerPluginCommand(program) {
             name,
             token: options.token,
             config,
+            allowInsecure: options.allowInsecureRegistry === true,
           });
           installSource = resolved.source;
           integritySha = resolved.sha256;
@@ -694,6 +699,10 @@ export function registerPluginCommand(program) {
     )
     .requiredOption("--registry <url>", "Registry/manifest URL to browse")
     .option("--token <token>", "Bearer token for a private registry")
+    .option(
+      "--allow-insecure-registry",
+      "Allow a plain-HTTP registry URL (MITM risk — trusted networks only)",
+    )
     .option("--json", "Output as JSON")
     .action(async (query, options) => {
       const { fetchRegistry, listRegistryPlugins, resolveRegistryToken } =
@@ -712,6 +721,7 @@ export function registerPluginCommand(program) {
         });
         const { registry, fromCache } = await fetchRegistry(options.registry, {
           token,
+          allowInsecure: options.allowInsecureRegistry === true,
         });
         let rows = listRegistryPlugins(registry);
         if (query) {

package/src/commands/team.js

@@ -29,7 +29,7 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const BIN = path.resolve(__dirname, "..", "..", "bin", "chainlesschain.js");
 
 /** Load + validate a task-graph file into a registry (throws on bad input). */
-function loadRegistry(file, { ttlMs } = {}) {
+export function loadRegistry(file, { ttlMs } = {}) {
   const abs = path.resolve(process.cwd(), file);
   let doc;
   try {
@@ -41,6 +41,19 @@ function loadRegistry(file, { ttlMs } = {}) {
   if (!Array.isArray(tasks) || tasks.length === 0) {
     throw new Error("task file must have a non-empty `tasks` array");
   }
+  // Reject unknown dependency keys up front: a typo'd dependsOn ("biuld") makes
+  // a task permanently unclaimable — the run silently exits 1 and `plan` drops
+  // it from the waves with no diagnosis.
+  const keys = new Set(tasks.map((t) => t.key));
+  for (const t of tasks) {
+    for (const d of t.dependsOn || t.deps || []) {
+      if (!keys.has(d)) {
+        throw new Error(
+          `task "${t.key}" depends on unknown task "${d}" (typo in dependsOn?)`,
+        );
+      }
+    }
+  }
   const reg = new TaskLeaseRegistry({ defaultTtlMs: ttlMs });
   for (const t of tasks) {
     const r = reg.addTask({
@@ -266,7 +279,12 @@ export function registerTeamCommand(program, { logger } = {}) {
           for (const t of reg.list()) {
             if (t.lease && t.lease.holder) lostHolders.add(t.lease.holder);
           }
-          const freed = reg.reclaimExpired();
+          // Reclaim ALL dangling leases, not just expired ones: every holder in
+          // the persisted snapshot is from the now-dead prior process, so a lease
+          // still inside its TTL (a crash seconds after acquiring) must be
+          // reclaimed too — reclaimExpired() would skip it and strand the task,
+          // yet we already reported its holder LOST above.
+          const freed = reg.reclaimAll();
           for (const h of lostHolders) {
             if (options.json)
               console.log(JSON.stringify({ type: "teammate:lost", holder: h }));
@@ -296,8 +314,12 @@ export function registerTeamCommand(program, { logger } = {}) {
       const persist = () => {
         if (!options.state) return;
         try {
+          // Atomic write (tmp + rename): a crash mid-write must not truncate
+          // the ONLY resume file — a torn snapshot makes --resume throw and
+          // loses all progress.
+          const tmp = `${options.state}.tmp`;
           fs.writeFileSync(
-            options.state,
+            tmp,
             JSON.stringify(
               {
                 version: 2,
@@ -311,6 +333,7 @@ export function registerTeamCommand(program, { logger } = {}) {
             ),
             "utf8",
           );
+          fs.renameSync(tmp, options.state);
         } catch (e) {
           (log.error || console.error)(`  state write failed: ${e.message}`);
         }

package/src/data/changelog.json

@@ -3,11 +3,21 @@
   "releases": [
     {
       "productVersion": "Unreleased",
-      "cliVersion": "0.162.151",
-      "cliVersions": ["0.162.150", "0.162.151"],
+      "cliVersion": "0.162.152",
+      "cliVersions": [
+        "0.4.46",
+        "0.37.4",
+        "0.162.150",
+        "0.162.151",
+        "0.162.152"
+      ],
       "date": null,
       "title": "",
       "sections": [
+        {
+          "heading": "Fixed — cc CLI 0.162.152：全面体检 13 修复 + auto-pin 默认开 + 远控幂等激活 + 多语言 LSP/内核沙箱 CI 真机验证（CLI-only npm 发版）",
+          "body": "> `chainlesschain` 0.162.151 → **0.162.152** 已发 npm `latest`（经 `npm-publish.yml`，`--provenance --access public`）。纯 `packages/cli/src` + `packages/web-panel`（随 `prepublishOnly build:web-panel` 打入包）增量，未触 `pdh/lib` → 无 Android cc bundle rollover / 无 USR_VERSION 改动。发版前本机三层全绿（unit+integration+e2e 23,167 passed / 0 fail）+ 新 `env-blocked-verification.yml` CI 门（真 gopls/rust-analyzer/jdtls 三语言 LSP + 真 bubblewrap 内核隔离，ubuntu）跑通。命令数不变（164）。\n\n- **安全（HIGH）插件签名锁可伪造绕过 `requireSignedPlugins`**：`.plugin-lock.json` 原是可写目录里的自断言 JSON（布尔字段+自选哈希，load 只重哈希不验签；install 还会把源目录自带的伪造 lock 原样拷入；组织没配 `trustedPluginKeySha256` 时 key 检查整个跳过）。改为 lock v2 落真 Ed25519 签名+公钥、load 时**真验签**、trust 指纹从嵌入公钥现算（永不信 lock 字段）、install 无条件剥离源自带 lock、`requireSignedPlugins`+空 key 名单 fail-closed 全拒。3 条 ATTACK 回归测试。\n- **安全：插件远程 registry 拒纯 HTTP**（registry 同时供 source+sha256，MITM 二者全控=完整性检查空转；loopback 豁免、`--allow-insecure-registry`/`CC_PLUGIN_REGISTRY_ALLOW_HTTP=1` 显式 opt-in）+ **fetchGitRepo 拒 `-` 开头 url/ref**（git argv 注入：registry 供的 ref=\"-f\" 在 full-clone retry 路径被 `checkout` 当选项；注意 `checkout -- <ref>` 是错修——`--` 后是 pathspec）。\n- **eval 反作弊三连**：`fix-failing-test`/`fix-build`/`upgrade-dependency` 的 do-not-edit harness 文件从 presence-regex（可被「文本还在但不执行」绕过：前插 `ALL OK`+exit(0)、重写 build.mjs 自定义 banner、run.mjs 干脆零守卫）改为逐字节比对模块常量；4 条作弊回归全在 pre-fix 代码上验 RED。\n- **远控账本双修**：`_perDeviceSeq` 乱序完成回退水位（新 commandId 复用旧 seq 本应拒 stale 实际 applied，真机复现）改 advance-only `Math.max`；`_applied/_order` 随 `cc serve` 无界涨（实测 5 万条 snapshot 14.3MB）加保留窗口（默认 1 万条、分块淘汰、`_baseIndex` 保 applyIndex 全局单调、snapshot 兼容旧格式，实测封顶 4.3MB）。\n- **`cc team` 三修**：runner 层 lease 心跳（内建 shell/agent executor 从不 renew → 超 TTL 长任务被 peer steal **并发双跑**，真时钟回归测试 pre-fix 红）；`dependsOn` 拼错 key 现在 load 时报错（原静默 exit 1 + plan 波次悄悄少块）；`--state` 快照 tmp+rename 原子写（写中崩溃不再截断唯一 resume 文件）。\n- **eval 基建双修**：超时改整树击杀（POSIX detached 组 / Win `taskkill /T /F`）+ 等 `close` 再 settle（原 kill 后立即 resolve，agent 还活着写文件时就快照/check/删目录）；`--dry-run --history` 记录打 `dryRun:true` 且 `--trend` 排除（dry-run 恒 0%，原污染 CI 回归门造成全任务假回归）。\n- **OTLP 合规双修**：`*UnixNano` 时间戳改十进制字符串（ms×1e6≈1.8e18 超 2^53，JSON number 违 proto3 mapping、严格 collector 拒收）；traceId 掺进程启动时间+pid（原裸计数器每进程重置 → 连续 run 全是 `0…01` 被 collector 并成一条 trace）。\n- **LSP 双修（多语言 CI 真机验证抓获）**：`normalizeUri` 统一盘符冒号编码（gopls 把 publish URI 重写成裸 `C:/` 而客户端 didOpen 用 `C%3A/`，诊断 Map key 永不相遇 → **Go 诊断恒空**；tsserver/pyright 原样回显故此前未暴露）；读查询（def/refs/hover/symbols/diag/rename-preview）对 LSP `-32801 ContentModified` 有界重试（rust-analyzer 索引未稳时高频抛出，语义即「请重试」）。\n- **bwrap 沙箱挂载顺序**：`--tmpfs /tmp` 原在工作区 bind 之后挂载，遮蔽任何位于 /tmp 下的工作区（chdir 直接失败、沙箱不可用）；tmpfs 移到 bind 之前（bwrap 顺序挂载、后挂者胜）。\n- **Added：auto-pin 默认开启（产品拍板）**：compaction 现在默认 pin 原始任务（首个 user 轮，token 上限 2000）防长会话跑偏；优先级 `--auto-pin` flag > `CC_AUTO_PIN`(\"1\"/\"0\") > config `context.autoPin` > 默认开；关= `CC_AUTO_PIN=0` 或 config false。\n- **Added：远控客户端发送 commandId/seq，Phase 5 幂等保护端到端激活**：web-panel 直连 `execute` 带顶层 uuid commandId + 抗页面重载单调 seq + per-TAB deviceId，断线后**同 id 重发一次**（服务端 ledger 保至多一次，`replayed` ack 如实上报）；web/Android 的 E2EE 控制事件（prompt/approval/interrupt）把 commandId+per-pairing seq 打进加密明文（relay 本身 at-least-once 补投 offline-message——无 id 时补投的 prompt 会多跑一整个 agent turn）。勘误：所谓 Terminal 远程客户端不存在（cli 包内无此进程），客户端发送侧已全覆盖。\n- **Added：`env-blocked-verification.yml` CI 门**：ubuntu 真机跑三语言 LSP live 套（gopls/rust-analyzer/jdtls 各 def/refs/diag，`CC_LSP_LIVE_REQUIRE` 使装失败=红而非静默 skip）+ 真 bubblewrap 内核隔离套（netns 断网证明「无视 proxy env 的工具」也被拦、rootfs 只读、denyRead tmpfs 掩蔽）；零 `continue-on-error`。\n- **desktop（不随 npm 包，同批落 main）**：SSO IPC 四 handler 端到端修复（refresh-token 传参形状错+读错 store、logout 把 providerId 当 sessionId 致 provider 侧撤销从未发生、handle-callback 会话 id 不达 renderer、get-sessions 恒空——统一路由到权威 SSOManager store）。"
+        },
         {
           "heading": "Added — cc CLI `cc changelog`（别名 `cc whatsnew`）命令：npm 包每版更新说明离线可查",
           "body": "> CLI-only 发版（`chainlesschain` 0.162.150 → **0.162.151**，经 `npm-publish.yml` 发 npm `latest`，`--provenance --access public`）。纯 `packages/cli/src` 增量（新增 `commands/changelog.js` + `lib/changelog.js` 解析器 + `scripts/build-changelog.mjs` 构建器 + 生成的 `src/data/changelog.json`），未触 `pdh/lib` → 无 Android cc bundle rollover / 无 USR_VERSION 改动。命令数 163 → **164**（清单已重生）。新增解析器 + 命令共 39 项单测本机全绿。\n\n- **命令**：`cc changelog` 显示当前版本 + 最近 5 条 CLI 更新（`← installed` 标出装机版）；`--all` 全部历史、`<version>` 指定版本（吃 CLI 版本 `0.162.150` 或产品版本 `v5.0.3.134` / 裸 `134`）、`-n/--limit` 控制条数、`--json` 机器可读。数据**离线随包**，无网络依赖、永远和装机版本对齐。\n- **数据源与「只显示 CLI 相关条目」**：唯一权威更新记录是根 `CHANGELOG.md`（按**产品版本** `v5.0.3.x` 组织），解析器把它蒸馏成 **CLI 专属**子集。难点是区分「真·CLI 发版」与「只捎带 bump 了 cli 版本号的 PDH/安卓采集器发版」，三道闸：① CLI npm 在 `0.x` alpha 轨、产品在 `5.x` → 版本 token 只取 `0.x`，天然滤掉 `v5.0.3.x` 误抓；② 大小写敏感的 `CLI` → 真 CLI 标题写大写「CLI/cc CLI」，捎带的 bundle note 写小写「cli 0.162.x」；③ 无 `###` 子标题的块只看 `##` 标题（每块都有 `Version surfaces: CLI 0.x` 样板行，信正文会全放行）。从 112 个产品版本块精准抽出 11 个真 CLI 发版（拼多多采集 / 浏览历史等 PDH 发版正确排除）。\n- **打包**：`build:changelog` 脚本在发版时（挂进 `prepublishOnly`）把 CHANGELOG 解析成 `src/data/changelog.json`（~30KB，CLI 子集），随 `src/` 一起发 npm；in-repo dev 无 JSON 时 `loadChangelog()` 回退直接解析根 CHANGELOG。"

package/src/harness/remote-command-ledger.js

@@ -22,10 +22,21 @@
  */
 
 export class RemoteCommandLedger {
-  constructor({ now = () => Date.now(), revokedDevices = [] } = {}) {
+  constructor({
+    now = () => Date.now(),
+    revokedDevices = [],
+    maxApplied = 10000,
+  } = {}) {
     this._now = typeof now === "function" ? now : () => now;
     this._applied = new Map(); // commandId → { applyIndex, result, deviceId, ts }
-    this._order = []; // applyIndex → commandId (total order)
+    this._order = []; // retained tail; applyIndex of _order[i] = _baseIndex + i
+    this._baseIndex = 0; // applyIndex of _order[0] (advances as old entries evict)
+    // Retention window: a long-lived `cc serve` would otherwise grow the ledger
+    // (and its snapshot) without bound — ~14 MB per 50k commands measured. The
+    // window must stay large relative to the reconnect-redelivery horizon: a
+    // commandId evicted from the window loses idempotency protection and would
+    // re-execute if re-delivered afterwards.
+    this._maxApplied = Math.max(1, Number(maxApplied) || 10000);
     this._revoked = new Set(revokedDevices);
     this._perDeviceSeq = new Map(); // deviceId → highest accepted seq
     this._inFlight = new Map(); // commandId → Promise<record> for an in-progress apply
@@ -113,13 +124,22 @@ export class RemoteCommandLedger {
     // on success and rejects on failure (so a retry can re-run the side effect).
     const runPromise = (async () => {
       const result = await execute(command);
-      const applyIndex = this._order.length;
+      const applyIndex = this._baseIndex + this._order.length;
       const rec = { applyIndex, result, deviceId, ts: this._now() };
       this._applied.set(commandId, rec);
       this._order.push(commandId);
       if (deviceId != null && Number.isFinite(command.seq)) {
-        this._perDeviceSeq.set(deviceId, command.seq);
+        // Advance-only watermark. Two in-flight commands from one device can
+        // RECORD out of order (seq 6 settles before seq 5 — both passed the
+        // stale check while nothing was recorded); a plain set() would regress
+        // the watermark to 5 and let a NEW commandId reuse seq 6.
+        const cur = this._perDeviceSeq.get(deviceId);
+        this._perDeviceSeq.set(
+          deviceId,
+          cur == null ? command.seq : Math.max(cur, command.seq),
+        );
       }
+      this._evictBeyondWindow();
       return rec;
     })();
     this._inFlight.set(commandId, runPromise);
@@ -140,15 +160,31 @@ export class RemoteCommandLedger {
     }
   }
 
+  /** Chunked eviction of the oldest applied entries beyond the window. */
+  _evictBeyondWindow() {
+    // Amortized: only compact once we're 50% past the cap, then cut back to
+    // exactly the cap — avoids an O(n) splice on every insert at steady state.
+    if (this._order.length <= this._maxApplied * 1.5) return;
+    const excess = this._order.length - this._maxApplied;
+    const evicted = this._order.splice(0, excess);
+    for (const id of evicted) this._applied.delete(id);
+    this._baseIndex += excess;
+  }
+
   /**
    * The ordered tail of applied commands after `cursor` (an applyIndex), so a
    * reconnecting endpoint can replay missed state in the one agreed order.
+   * Entries older than the retention window are gone — a caller can detect the
+   * gap by comparing the first element's applyIndex against its cursor+1 (see
+   * `oldestRetainedIndex()`), and should then resync full state instead.
    * @returns {Array<{applyIndex, commandId, result, deviceId}>}
    */
   appliedSince(cursor = -1) {
     const out = [];
-    for (let i = cursor + 1; i < this._order.length; i++) {
-      const commandId = this._order[i];
+    const start = Math.max(cursor + 1, this._baseIndex);
+    const end = this._baseIndex + this._order.length;
+    for (let i = start; i < end; i++) {
+      const commandId = this._order[i - this._baseIndex];
       const rec = this._applied.get(commandId);
       out.push({
         applyIndex: i,
@@ -160,27 +196,41 @@ export class RemoteCommandLedger {
     return out;
   }
 
+  /** Lowest applyIndex still retained (entries below it were evicted). */
+  oldestRetainedIndex() {
+    return this._baseIndex;
+  }
+
   /** Highest assigned applyIndex (−1 when nothing applied). */
   cursor() {
-    return this._order.length - 1;
+    return this._baseIndex + this._order.length - 1;
   }
 
+  /** Total commands ever applied (including evicted ones). */
   appliedCount() {
-    return this._order.length;
+    return this._baseIndex + this._order.length;
   }
 
   snapshot() {
     return {
       order: [...this._order],
+      baseIndex: this._baseIndex,
+      maxApplied: this._maxApplied,
       applied: Array.from(this._applied.entries()),
       revoked: Array.from(this._revoked),
       perDeviceSeq: Array.from(this._perDeviceSeq.entries()),
     };
   }
 
-  static restore(snap, { now = () => Date.now() } = {}) {
-    const l = new RemoteCommandLedger({ now });
+  static restore(snap, { now = () => Date.now(), maxApplied } = {}) {
+    const l = new RemoteCommandLedger({
+      now,
+      // Restore keeps the snapshot's window unless the caller overrides it;
+      // old (pre-window) snapshots fall back to the default.
+      maxApplied: maxApplied ?? snap?.maxApplied,
+    });
     l._order = [...(snap?.order || [])];
+    l._baseIndex = Number.isFinite(snap?.baseIndex) ? snap.baseIndex : 0;
     l._applied = new Map(snap?.applied || []);
     l._revoked = new Set(snap?.revoked || []);
     l._perDeviceSeq = new Map(snap?.perDeviceSeq || []);

package/src/lib/agent-sandbox.js

@@ -151,6 +151,12 @@ export function executeSandboxedShell(command, sandbox, options = {}) {
 }
 
 function executeBubblewrapShell(command, sandbox, options, hostCwd, policy) {
+  // Mount ORDER matters: bwrap applies mounts sequentially and a later mount
+  // shadows an earlier one. `--tmpfs /tmp` must come BEFORE the workspace
+  // bind — with the old order (bind first, tmpfs last) any workspace living
+  // UNDER /tmp was wiped by the tmpfs overlay and the --chdir failed with
+  // "Can't chdir …: No such file or directory" (caught by the live bwrap CI
+  // suite, whose temp workspace is exactly such a directory).
   const args = [
     "--die-with-parent",
     "--new-session",
@@ -158,17 +164,17 @@ function executeBubblewrapShell(command, sandbox, options, hostCwd, policy) {
     "--ro-bind",
     "/",
     "/",
-    "--bind",
-    hostCwd,
-    hostCwd,
-    "--chdir",
-    hostCwd,
     "--proc",
     "/proc",
     "--dev",
     "/dev",
     "--tmpfs",
     "/tmp",
+    "--bind",
+    hostCwd,
+    hostCwd,
+    "--chdir",
+    hostCwd,
   ];
   if (sandbox.network) args.push("--share-net");
   for (const target of policy.allowWrite) args.push("--bind", target, target);

package/src/lib/agent-team/task-lease.js

@@ -324,6 +324,34 @@ export class TaskLeaseRegistry {
     return reclaimed;
   }
 
+  /**
+   * Reclaim EVERY task that currently holds a lease back to PENDING, regardless
+   * of expiry. Used on RESUME: a persisted snapshot comes from a prior process,
+   * so every lease holder is by definition dead. `reclaimExpired` alone would
+   * SKIP a lease still inside its TTL window (a crash seconds after acquiring) —
+   * that task is then neither claimable (the "valid" lease blocks it) nor
+   * reclaimed, so it strands forever and the run can never reach `allDone`.
+   * Returns the reclaimed keys.
+   */
+  reclaimAll() {
+    const reclaimed = [];
+    for (const t of this._tasks.list()) {
+      const lease = t.metadata?.lease || null;
+      if (!lease) continue;
+      const fresh = this._tasks.get(t.id); // re-read for current rev
+      if (
+        this._write(fresh, {
+          status: TASK_STATUS.PENDING,
+          assignee: null,
+          metadata: { ...fresh.metadata, lease: null },
+        })
+      ) {
+        reclaimed.push(fresh.metadata?.key);
+      }
+    }
+    return reclaimed;
+  }
+
   stats({ now = this._now() } = {}) {
     const base = this._tasks.stats();
     let leased = 0;