chainlesschain 0.162.151 → 0.162.152

package/src/lib/plugin-runtime/signature.js

@@ -7,20 +7,24 @@
  * install records the verification result in a `.plugin-lock.json` inside the
  * immutable version dir; discovery then re-checks it fail-closed.
  *
- * The lock records the manifest's sha256 + the signing key's fingerprint. At
- * load we RE-HASH the on-disk manifest and compare — so a manifest tampered with
- * after install (even inside the version dir) fails the check. The signature
- * itself covers only the manifest file, not every component file — that is a
+ * The lock persists the DETACHED SIGNATURE + PUBLIC KEY themselves (lockVersion
+ * 2), and load-time verification re-runs the actual Ed25519 verify over the
+ * on-disk manifest bytes. The lock file lives in a writable plugin dir, so
+ * nothing in it can be TRUSTED — a recorded boolean or fingerprint could simply
+ * be forged by whoever authored the plugin. What a forger CANNOT do is produce a
+ * signature that verifies under a key the org has pinned via
+ * trustedPluginKeySha256 — which is why the key fingerprint used for the trust
+ * check is COMPUTED from the embedded public key, never read from the lock.
+ * The signature covers only the manifest file, not every component file — a
  * known limitation (documented), an integrity anchor rather than a full
- * supply-chain seal; the immutable version dir + this re-hash catch manifest
- * tampering, which is where the component wiring is declared.
+ * supply-chain seal; the manifest is where the component wiring is declared.
  */
 
-import { createHash } from "node:crypto";
+import { createHash, createPublicKey, verify } from "node:crypto";
 import fs from "fs";
 import path from "path";
 
-const LOCK = ".plugin-lock.json";
+export const LOCK_FILENAME = ".plugin-lock.json";
 
 export const _deps = {
   readFileSync: fs.readFileSync,
@@ -31,18 +35,29 @@ export const _deps = {
 /** Record a verified signature into the version dir. */
 export function writePluginLock(
   versionDir,
-  { manifestFile, sha256, publicKeySha256, signatureVerified },
+  {
+    manifestFile,
+    sha256,
+    publicKeySha256,
+    signatureVerified,
+    signatureBase64,
+    publicKeyPem,
+  },
 ) {
   const rel = path.relative(versionDir, manifestFile).replace(/\\/g, "/");
   const lock = {
-    lockVersion: 1,
+    lockVersion: 2,
     manifest: rel || "plugin.json",
     sha256,
     publicKeySha256: publicKeySha256 || null,
     signatureVerified: signatureVerified === true,
+    // The material load-time enforcement actually re-verifies. Without these a
+    // lock is just self-asserted JSON and counts as unsigned.
+    signatureBase64: signatureBase64 || null,
+    publicKeyPem: publicKeyPem || null,
   };
   _deps.writeFileSync(
-    path.join(versionDir, LOCK),
+    path.join(versionDir, LOCK_FILENAME),
     JSON.stringify(lock, null, 2),
     "utf8",
   );
@@ -51,7 +66,7 @@ export function writePluginLock(
 
 /** Read a version dir's signature lock, or null when absent/unreadable. */
 export function readPluginLock(versionDir) {
-  const p = path.join(versionDir, LOCK);
+  const p = path.join(versionDir, LOCK_FILENAME);
   if (!_deps.existsSync(p)) return null;
   try {
     return JSON.parse(_deps.readFileSync(p, "utf8"));
@@ -62,9 +77,11 @@ export function readPluginLock(versionDir) {
 
 /**
  * Verify an installed plugin's recorded signature against its on-disk manifest.
- * `signed:true` ONLY when a lock exists, was signature-verified, the manifest
- * still hashes to the locked sha256 (tamper detection), and — when trustedKeys
- * is a non-empty Set — the signing key fingerprint is among them.
+ * `signed:true` ONLY when a lock exists, carries real signature material, the
+ * embedded Ed25519 signature VERIFIES over the on-disk manifest bytes, and —
+ * when trustedKeys is a non-empty Set — the signing key's COMPUTED fingerprint
+ * is among them. Every field of the lock is treated as attacker-writable; the
+ * only trust anchors are the cryptographic verify and the caller's trustedKeys.
  *
  * @param {{root:string}} plugin
  * @param {object} [opts] { trustedKeys?: Set<string> }
@@ -96,28 +113,68 @@ export function verifyInstalledSignature(plugin, opts = {}) {
   if (!_deps.existsSync(manifestFile)) {
     return { signed: false, reason: "locked manifest file is missing" };
   }
-  let sha;
+  let bytes;
   try {
-    sha = createHash("sha256")
-      .update(_deps.readFileSync(manifestFile))
-      .digest("hex");
+    bytes = _deps.readFileSync(manifestFile);
   } catch {
     return { signed: false, reason: "manifest unreadable" };
   }
+  const sha = createHash("sha256").update(bytes).digest("hex");
   if (sha.toLowerCase() !== String(lock.sha256 || "").toLowerCase()) {
     return {
       signed: false,
       reason: "manifest tampered since install (sha256 mismatch)",
     };
   }
+  // A lock without real signature material is unverifiable, and therefore
+  // worthless as a signing gate: `signatureVerified:true` is just a JSON field
+  // anyone can write. Legacy (lockVersion 1) locks land here too — reinstalling
+  // the plugin with --signature re-records a verifiable lock.
+  if (!lock.signatureBase64 || !lock.publicKeyPem) {
+    return {
+      signed: false,
+      reason:
+        "lock lacks signature material (legacy or hand-written lock — " +
+        "reinstall the plugin with --signature to re-record it)",
+    };
+  }
+  let keyObject;
+  let publicKeySha256;
+  try {
+    keyObject = createPublicKey(lock.publicKeyPem);
+    // Fingerprint is COMPUTED from the embedded key — the lock's own
+    // publicKeySha256 field is attacker-writable and never used for trust.
+    publicKeySha256 = createHash("sha256")
+      .update(keyObject.export({ type: "spki", format: "der" }))
+      .digest("hex");
+  } catch {
+    return { signed: false, reason: "lock public key is not a valid key" };
+  }
+  let sigOk = false;
+  try {
+    sigOk = verify(
+      null,
+      bytes,
+      keyObject,
+      Buffer.from(String(lock.signatureBase64), "base64"),
+    );
+  } catch {
+    sigOk = false;
+  }
+  if (!sigOk) {
+    return {
+      signed: false,
+      reason: "recorded signature does not verify over the on-disk manifest",
+    };
+  }
   const trustedKeys = opts.trustedKeys;
   if (trustedKeys && trustedKeys.size > 0) {
-    if (!lock.publicKeySha256 || !trustedKeys.has(lock.publicKeySha256)) {
+    if (!trustedKeys.has(publicKeySha256)) {
       return {
         signed: false,
-        reason: `signing key not trusted (${lock.publicKeySha256 || "unsigned"})`,
+        reason: `signing key not trusted (${publicKeySha256})`,
       };
     }
   }
-  return { signed: true, publicKeySha256: lock.publicKeySha256 };
+  return { signed: true, publicKeySha256 };
 }

package/src/lib/plugin-security.js

@@ -80,16 +80,19 @@ export function verifyPluginManifest({
 
   const wantsSignature = requireSignature || signatureFile || publicKeyFile;
   let signatureVerified = false;
+  let signature = null;
+  let publicKeyPem = null;
+  let publicKeySha256 = null;
   if (wantsSignature) {
     if (!signatureFile || !publicKeyFile) {
       throw new Error(
         "plugin signature verification requires --signature and --public-key",
       );
     }
-    const signature = readFileSync(signatureFile);
-    const publicKey = readFileSync(publicKeyFile, "utf8");
-    const keyObject = createPublicKey(publicKey);
-    const publicKeySha256 = createHash("sha256")
+    signature = readFileSync(signatureFile);
+    publicKeyPem = readFileSync(publicKeyFile, "utf8");
+    const keyObject = createPublicKey(publicKeyPem);
+    publicKeySha256 = createHash("sha256")
       .update(keyObject.export({ type: "spki", format: "der" }))
       .digest("hex");
     const trusted = stringSet(trustedKeySha256);
@@ -110,16 +113,12 @@ export function verifyPluginManifest({
     bytes,
     sha256,
     signatureVerified,
-    publicKeySha256: signatureVerified
-      ? createHash("sha256")
-          .update(
-            createPublicKey(readFileSync(publicKeyFile, "utf8")).export({
-              type: "spki",
-              format: "der",
-            }),
-          )
-          .digest("hex")
-      : null,
+    publicKeySha256: signatureVerified ? publicKeySha256 : null,
+    // The raw signature material, so the installer can persist it and load-time
+    // enforcement can CRYPTOGRAPHICALLY re-verify (not merely trust a recorded
+    // boolean, which a hand-written lock file could forge).
+    signatureBase64: signatureVerified ? signature.toString("base64") : null,
+    publicKeyPem: signatureVerified ? publicKeyPem : null,
   };
 }
 

package/src/lib/telemetry/span-recorder.js

@@ -22,12 +22,19 @@ function spanId() {
 
 // One trace per recorder (a "run"). The OTLP/OTel spec treats an ALL-ZERO
 // traceId as INVALID, so a strict collector would drop every span exported with
-// `"0".repeat(32)` — defeating toOtlp()'s purpose. Derive a non-zero, monotonic
-// (RNG-free, snapshot-replayable) 32-hex traceId per recorder instead.
+// `"0".repeat(32)` — defeating toOtlp()'s purpose. A bare counter is non-zero
+// but resets every PROCESS, so successive CLI runs all exported trace
+// `000…001` and a collector merged them into one giant trace. Prefix the
+// counter with per-process entropy (start time + pid — RNG-free, so ids stay
+// deterministic WITHIN a run) to make traces practically unique ACROSS runs.
+const _traceBase = (
+  Date.now().toString(16).padStart(12, "0") +
+  (process.pid >>> 0).toString(16).padStart(8, "0")
+).slice(0, 20);
 let _traceSeq = 0;
 function newTraceId() {
   _traceSeq = (_traceSeq + 1) % Number.MAX_SAFE_INTEGER;
-  return _traceSeq.toString(16).padStart(32, "0"); // never all-zero (starts at 1)
+  return _traceBase + _traceSeq.toString(16).padStart(12, "0"); // 32 hex, never all-zero
 }
 
 export class TelemetryRecorder {
@@ -186,8 +193,12 @@ export class TelemetryRecorder {
                 spanId: s.id,
                 parentSpanId: s.parentId || "",
                 name: s.name,
-                startTimeUnixNano: s.startTime * 1e6,
-                endTimeUnixNano: s.endTime * 1e6,
+                // proto3 JSON mapping: (s)fixed64/(u)int64 fields MUST be
+                // decimal STRINGS — ms×1e6 ≈ 1.8e18 exceeds 2^53, so a JSON
+                // number both violates the OTLP/JSON spec (strict collectors
+                // reject the span) and quantizes (~256 ns spacing).
+                startTimeUnixNano: String(Math.round(s.startTime * 1e6)),
+                endTimeUnixNano: String(Math.round(s.endTime * 1e6)),
                 status: { code: s.status === "error" ? 2 : 1 },
                 attributes: Object.entries(s.attributes).map(([k, v]) => ({
                   key: k,
@@ -200,7 +211,7 @@ export class TelemetryRecorder {
                 })),
                 events: s.events.map((e) => ({
                   name: e.name,
-                  timeUnixNano: e.time * 1e6,
+                  timeUnixNano: String(Math.round(e.time * 1e6)),
                   attributes: Object.entries(e.attributes).map(([k, v]) => ({
                     key: k,
                     value: { stringValue: String(v) },

package/src/repl/agent-repl.js

@@ -64,7 +64,10 @@ import {
   PromptCompressor,
   getContextWindow,
 } from "../harness/prompt-compressor.js";
-import { buildAutoPinPredicate } from "../runtime/auto-pin.js";
+import {
+  buildAutoPinPredicate,
+  resolveAutoPinOption,
+} from "../runtime/auto-pin.js";
 import { feature } from "../lib/feature-flags.js";
 import { recordCompressionMetric } from "../lib/compression-telemetry.js";
 import {
@@ -417,15 +420,16 @@ export async function startAgentRepl(options = {}) {
   // Unset → agent-core's 180s default (matches cc chat/ask). Set to 0 to
   // disable. Left undefined here means "use the default".
   let _streamStallTimeoutMs;
-  // Auto-pin (OPT-IN, off by default): when set, compaction pins the original
-  // task. Resolved from config `context.autoPin` or CC_AUTO_PIN=1; falsy → the
-  // compress calls below pass no pin predicate (byte-identical default).
-  let _autoPinOpt;
+  // Auto-pin (default ON since 2026-07-07): compaction pins the original task
+  // (first user turn) so it survives context compression. Resolution order:
+  // CC_AUTO_PIN env ("1"/"0") > config `context.autoPin` (true/false/object) >
+  // default on. See resolveAutoPinOption.
+  let _autoPinCfgValue;
   try {
     const { loadConfig } = await import("../lib/config-manager.js");
     const _cfg = loadConfig();
     _visionModel = _cfg?.llm?.visionModel || undefined;
-    _autoPinOpt = _cfg?.context?.autoPin;
+    _autoPinCfgValue = _cfg?.context?.autoPin;
     const raw = _cfg?.llm?.streamStallTimeoutMs;
     const t = Number(raw);
     // Accept 0 (explicit disable) — only ignore absent/invalid values.
@@ -483,8 +487,8 @@ export async function startAgentRepl(options = {}) {
   if (feature("PROMPT_COMPRESSOR")) {
     _compressor = new PromptCompressor({ model, provider });
   }
-  if (process.env.CC_AUTO_PIN === "1") _autoPinOpt = _autoPinOpt || true;
-  // Compaction options shared by /compact + auto-compact. Adds the opt-in
+  const _autoPinOpt = resolveAutoPinOption({ config: _autoPinCfgValue });
+  // Compaction options shared by /compact + auto-compact. Adds the
   // pin predicate only when auto-pin is enabled; otherwise byte-identical.
   const _compactOpts = (msgs) => {
     const base = { preserveToolPairs: true };

package/src/runtime/__tests__/auto-pin.test.js

@@ -1,13 +1,14 @@
 /**
- * auto-pin policy tests — the OPT-IN compaction pin policy. Verifies it is off
- * by default (returns null → caller passes no predicate → byte-identical), and
- * when enabled pins the original task (first user turn) plus explicit pins,
- * honoring the token cap.
+ * auto-pin policy tests. The PREDICATE layer stays opt-valued (null when the
+ * resolved option is falsy → byte-identical compaction); the EFFECTIVE default
+ * is decided by resolveAutoPinOption — ON since 2026-07-07, opt out via
+ * CC_AUTO_PIN=0 or config context.autoPin=false.
  */
 
 import { describe, it, expect } from "vitest";
 import {
   resolveAutoPinConfig,
+  resolveAutoPinOption,
   buildAutoPinPredicate,
   describeAutoPin,
 } from "../auto-pin.js";
@@ -102,3 +103,25 @@ describe("describeAutoPin", () => {
     );
   });
 });
+
+describe("resolveAutoPinOption (effective default — ON since 2026-07-07)", () => {
+  it("defaults ON when nothing is set", () => {
+    expect(resolveAutoPinOption({ env: undefined, config: undefined })).toBe(
+      true,
+    );
+  });
+  it("CC_AUTO_PIN=0 opts out; =1 forces on over a config false", () => {
+    expect(resolveAutoPinOption({ env: "0", config: true })).toBe(false);
+    expect(resolveAutoPinOption({ env: "1", config: false })).toBe(true);
+  });
+  it("config false opts out; a config object passes through", () => {
+    expect(resolveAutoPinOption({ env: undefined, config: false })).toBe(false);
+    const cfg = { maxPinTokens: 99 };
+    expect(resolveAutoPinOption({ env: undefined, config: cfg })).toBe(cfg);
+  });
+  it("an explicit --auto-pin flag wins over everything", () => {
+    expect(resolveAutoPinOption({ flag: true, env: "0", config: false })).toBe(
+      true,
+    );
+  });
+});

package/src/runtime/auto-pin.js

@@ -23,6 +23,25 @@
 
 const DEFAULT_MAX_PIN_TOKENS = 2000;
 
+/**
+ * Resolve the EFFECTIVE auto-pin setting from (highest precedence first):
+ *   1. an explicit CLI flag (`--auto-pin` → force on),
+ *   2. the CC_AUTO_PIN env var ("1" on / "0" off),
+ *   3. the config value (`context.autoPin`: true | false | {…}),
+ *   4. the default — **ON** (product decision 2026-07-07): pinning the
+ *      original task through compaction costs a bounded slice of context
+ *      (maxPinTokens, default 2000) but prevents goal drift in long sessions.
+ * Opt out with CC_AUTO_PIN=0 or `context.autoPin: false` in config.
+ */
+export function resolveAutoPinOption({ flag, env, config } = {}) {
+  if (flag === true) return true;
+  const e = env !== undefined ? env : process.env.CC_AUTO_PIN;
+  if (e === "0") return false;
+  if (e === "1") return true;
+  if (config !== undefined && config !== null) return config;
+  return true;
+}
+
 /**
  * Normalize the opt-in value into a config object, or null when auto-pin is off.
  * Accepts: falsy (off), `true` (defaults on), or a config object

package/src/runtime/headless-runner.js

@@ -890,6 +890,24 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     }
   }
 
+  // Resolve auto-pin (flag > env > config > default-on). Config read is
+  // best-effort — a broken config file must not take headless down.
+  let _autoPinResolved;
+  {
+    const { resolveAutoPinOption } = await import("./auto-pin.js");
+    let _autoPinCfg;
+    try {
+      const { loadConfig } = await import("../lib/config-manager.js");
+      _autoPinCfg = loadConfig()?.context?.autoPin;
+    } catch {
+      _autoPinCfg = undefined;
+    }
+    _autoPinResolved = resolveAutoPinOption({
+      flag: options.autoPin === true,
+      config: _autoPinCfg,
+    });
+  }
+
   const loopOptions = {
     model,
     provider,
@@ -906,11 +924,11 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     additionalDirectories,
     sandbox: options.sandbox || null,
     sessionId,
-    // Auto-pin (OPT-IN, off by default): pin the original task through
-    // compaction. Enable via --auto-pin or CC_AUTO_PIN=1. Falsy → agent-core
-    // passes no pin predicate and compaction is byte-identical.
-    autoPin:
-      options.autoPin === true || process.env.CC_AUTO_PIN === "1" || undefined,
+    // Auto-pin (default ON since 2026-07-07): pin the original task through
+    // compaction. Precedence: --auto-pin flag > CC_AUTO_PIN ("1"/"0") >
+    // config context.autoPin > default on. Falsy → agent-core passes no pin
+    // predicate and compaction is byte-identical.
+    autoPin: _autoPinResolved,
     autoCheckpoint: options.autoCheckpoint || false,
     checkpointSession: options.checkpointSession || sessionId,
     hookDb: db,

package/src/assets/web-panel/assets/ChatBubbleRenderer-Bg2FTW6A.js

@@ -1 +0,0 @@
-import{I as h,P as u,J as S,U as n,R as a,S as y,K as C,Q as w,V as x,_ as B,b as s}from"./vendor-BMxUs6UX.js";import{_ as k}from"./index-BgN5G5vF.js";import"./icons-BsDmGpcT.js";const N={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),f=String(e.getMonth()+1).padStart(2,"0"),g=String(e.getDate()).padStart(2,"0"),b=String(e.getHours()).padStart(2,"0"),v=String(e.getMinutes()).padStart(2,"0");return`${p}-${f}-${g} ${b}:${v}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},T={class:"bubble"},q={class:"meta"},M={class:"actor"},R={class:"time"},V={class:"body"};function D(c,d,t,r,i,l){const o=h("a-tag");return u(),S("div",{class:B(["chat-row",{mine:r.isMine}])},[n("div",T,[n("div",q,[n("span",M,a(r.actorLabel),1),n("span",R,a(r.formattedTime),1)]),n("div",V,a(r.messageText),1),t.event.source.adapter?(u(),y(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[w(a(t.event.source.adapter),1)]),_:1},8,["color"])):x("v-if",!0)])],2)}const A=k(N,[["render",D],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-v9Hwrq/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{A as default};

package/src/assets/web-panel/assets/Terminal-BoZvaYAl.js

@@ -1,3 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["./xterm-BZcWGsqw.js","./markdown-CsiA8-E5.js","./markdown-Dfs9RUU9.css","./addon-fit-CK6X9sAG.js","./xterm-DFuMZ0ql.css"])))=>i.map(i=>d[i]);
-import{u as fe,_ as me,d as V,e as U}from"./index-BgN5G5vF.js";import{I as z,J as x,U as _,Q as q,S as K,K as T,V as R,c as A,F as Q,Z as Y,R as E,o as Z,f as G,w as $,n as D,b as ee,r as S,P as y,_ as ve,a2 as we,a3 as he,a4 as _e}from"./vendor-BMxUs6UX.js";import{R as ye,b as pe,as as ge}from"./icons-BsDmGpcT.js";const k=new Map,C=new Map,N=new Set,F=new Set;let te=!1;function xe(c){te||(te=!0,c.onMessage(o=>{if(!(!o||typeof o.type!="string")){if(o.type==="terminal.stdout"){const{sessionId:s,data:e,seq:i}=o.payload||{};if(!s)return;let w;try{const d=atob(e||""),f=new Uint8Array(d.length);for(let n=0;n<d.length;n++)f[n]=d.charCodeAt(n);w=new TextDecoder("utf-8").decode(f)}catch{w=""}const u={sessionId:s,data:w,seq:i};k.get(s)?.forEach(d=>d(u)),N.forEach(d=>d(u))}else if(o.type==="terminal.exit"){const{sessionId:s,exitCode:e,signal:i}=o.payload||{};if(!s)return;const w={sessionId:s,exitCode:e,signal:i};C.get(s)?.forEach(u=>u(w)),F.forEach(u=>u(w))}}}))}function ne(c){const o=new TextEncoder().encode(c);let s="";for(let e=0;e<o.length;e++)s+=String.fromCharCode(o[e]);return btoa(s)}function ae(c){const o=atob(c||""),s=new Uint8Array(o.length);for(let e=0;e<o.length;e++)s[e]=o.charCodeAt(e);return new TextDecoder("utf-8").decode(s)}function oe(){const c=fe();xe(c);async function o(n={}){const a=await c.sendRaw({type:"terminal.create",payload:{shell:n.shell,cwd:n.cwd,env:n.env,cols:n.cols,rows:n.rows}});if(a.ok===!1)throw new Error(a.error||"terminal_create_failed");return a.result??a}async function s(){const n=await c.sendRaw({type:"terminal.list",payload:{}});if(n.ok===!1)throw new Error(n.error||"terminal_list_failed");const a=n.result??n;return Array.isArray(a.sessions)?a.sessions:[]}async function e(n,a){const r=await c.sendRaw({type:"terminal.stdin",payload:{sessionId:n,data:ne(String(a))}});if(r.ok===!1)throw new Error(r.error||"terminal_stdin_failed");return r.result??r}async function i(n,a,r){const h=await c.sendRaw({type:"terminal.resize",payload:{sessionId:n,cols:a,rows:r}});if(h.ok===!1)throw new Error(h.error||"terminal_resize_failed");return h.result??h}async function w(n){const a=await c.sendRaw({type:"terminal.close",payload:{sessionId:n}});if(a.ok===!1)throw new Error(a.error||"terminal_close_failed");return a.result??a}async function u(n,a=0){const r=await c.sendRaw({type:"terminal.history",payload:{sessionId:n,fromSeq:a}});if(r.ok===!1)throw new Error(r.error||"terminal_history_failed");const h=r.result??r;return{truncated:!!h.truncated,chunks:(h.chunks||[]).map(L=>({seq:L.seq,data:ae(L.data)}))}}function d(n,a){return n?(k.has(n)||k.set(n,new Set),k.get(n).add(a),()=>{k.get(n)?.delete(a),k.get(n)?.size===0&&k.delete(n)}):(N.add(a),()=>N.delete(a))}function f(n,a){return n?(C.has(n)||C.set(n,new Set),C.get(n).add(a),()=>{C.get(n)?.delete(a),C.get(n)?.size===0&&C.delete(n)}):(F.add(a),()=>F.delete(a))}return{create:o,list:s,stdin:e,resize:i,close:w,history:u,onStdout:d,onExit:f,_internal:{stdoutSubs:k,exitSubs:C,toBase64Utf8:ne,fromBase64Utf8:ae}}}const Se={__name:"Terminal",setup(c,{expose:o}){o();const s=oe(),e=S([]),i=S(null),w=S("pwsh"),u=S(!1),d=S(!1),f=S(""),n=S(""),a=S([]),r=[{value:"pwsh",label:"PowerShell"},{value:"cmd",label:"CMD"},{value:"bash",label:"Bash"},{value:"wsl",label:"WSL"}],h=ee(()=>e.value.find(t=>t.id===i.value));function L(t){return t?t.slice(0,8):""}let O=null,M=null;async function I(){if(O)return{xtermMod:O,fitAddonMod:M};try{O=await U(()=>import("./xterm-BZcWGsqw.js").then(t=>t.x),__vite__mapDeps([0,1,2]),import.meta.url),M=await U(()=>import("./addon-fit-CK6X9sAG.js").then(t=>t.a),__vite__mapDeps([3,1,2]),import.meta.url),await U(()=>Promise.resolve({}),__vite__mapDeps([4]),import.meta.url)}catch(t){throw n.value="xterm 资源加载失败："+(t?.message||"未知错误"),t}return{xtermMod:O,fitAddonMod:M}}async function B(t){await D();const{xtermMod:l,fitAddonMod:p}=await I(),b=a.value.find(v=>v?.dataset?.sessionId===t.id);if(!b)return;const m=new l.Terminal({cursorBlink:!0,fontFamily:'Consolas, "Courier New", monospace',fontSize:13,theme:{background:"#1e1e1e",foreground:"#d4d4d4"},convertEol:!1}),P=new p.FitAddon;m.loadAddon(P),m.open(b);try{P.fit()}catch{}t.xterm=m,t.fitAddon=P;const ie=m.onData(v=>{s.stdin(t.id,v).catch(g=>{String(g?.message||"").includes("dangerous_keyword_blocked")?V.warning("该命令被桌面端拦截（高危关键字）"):V.error("stdin 失败: "+(g?.message||g))})}),ce=s.onStdout(t.id,({data:v,seq:g})=>{t.lastSeq=g,m.write(v)}),de=s.onExit(t.id,({exitCode:v,signal:g})=>{t.alive=!1,t.exitCode=v,t.signal=g,m.writeln(`\r
-\x1B[33m[session exited, code=${v}, signal=${g??"-"}]\x1B[0m`)});t.offs=()=>{try{ie.dispose?.()}catch{}ce(),de()};try{const{chunks:v,truncated:g}=await s.history(t.id,0);g&&m.writeln("\x1B[2m[history truncated — earlier output was evicted]\x1B[0m");for(const J of v)m.write(J.data),t.lastSeq=J.seq}catch(v){m.writeln(`\x1B[31m[history fetch failed: ${v?.message||v}]\x1B[0m`)}const H=new ResizeObserver(()=>{try{P.fit(),s.resize(t.id,m.cols,m.rows).catch(()=>{})}catch{}});H.observe(b);const ue=t.offs;t.offs=()=>{try{H.disconnect()}catch{}ue()}}async function re(){u.value=!0,f.value="";try{const t=await s.create({shell:w.value,cols:80,rows:24}),l={id:t.sessionId,shell:t.shell,cwd:"",alive:!0,lastSeq:0,exitCode:null,xterm:null,fitAddon:null,offs:()=>{}};e.value.push(l),i.value=l.id,await B(l)}catch(t){f.value=t?.message||String(t)}finally{u.value=!1}}async function se(t){try{await s.close(t)}catch(l){f.value=l?.message||String(l)}setTimeout(()=>W(t),500)}function W(t){const l=e.value.findIndex(b=>b.id===t);if(l===-1)return;const p=e.value[l];try{p.offs?.()}catch{}try{p.xterm?.dispose?.()}catch{}e.value.splice(l,1),i.value===t&&(i.value=e.value[0]?.id||null)}function le(t){i.value=t,D(()=>{const l=e.value.find(p=>p.id===t);try{l?.fitAddon?.fit()}catch{}})}async function X(){d.value=!0,f.value="";try{const t=await s.list();for(const l of t){const p=e.value.find(m=>m.id===l.id);if(p){p.alive=l.alive,p.lastSeq=l.lastSeq;continue}const b={id:l.id,shell:l.shell,cwd:l.cwd,alive:l.alive,lastSeq:l.lastSeq,exitCode:null,xterm:null,fitAddon:null,offs:()=>{}};e.value.push(b),await B(b)}!i.value&&e.value.length>0&&(i.value=e.value[0].id)}catch(t){f.value=t?.message||String(t)}finally{d.value=!1}}Z(async()=>{await X()}),G(()=>{for(const t of e.value){try{t.offs?.()}catch{}try{t.xterm?.dispose?.()}catch{}}}),$(i,()=>{D(()=>{const t=h.value;try{t?.fitAddon?.fit()}catch{}})});const j={term:s,sessions:e,activeId:i,newShell:w,creating:u,loadingList:d,error:f,warning:n,xtermContainers:a,shellOptions:r,active:h,shortId:L,get xtermMod(){return O},set xtermMod(t){O=t},get fitAddonMod(){return M},set fitAddonMod(t){M=t},loadXterm:I,mountXterm:B,onCreate:re,onClose:se,removeSession:W,activate:le,refreshList:X,ref:S,computed:ee,onMounted:Z,onBeforeUnmount:G,nextTick:D,watch:$,get message(){return V},get PlusOutlined(){return ge},get CloseOutlined(){return pe},get ReloadOutlined(){return ye},get useTerminal(){return oe}};return Object.defineProperty(j,"__isScriptSetup",{enumerable:!1,value:!0}),j}},be={class:"terminal-page"},ke={class:"terminal-header"},Ce={class:"page-sub"},Ae={class:"terminal-body"},Ee={class:"session-tabs"},Oe=["onClick"],Te={class:"session-shell"},Re={class:"session-id"},Me={key:0,class:"session-empty"},ze={class:"xterm-host"},Le=["data-session-id"],Pe={key:0,class:"xterm-placeholder"},qe={key:1,class:"terminal-footer"},De={key:0,class:"footer-exit"};function Be(c,o,s,e,i,w){const u=z("a-tag"),d=z("a-select"),f=z("a-button"),n=z("a-space"),a=z("a-alert");return y(),x("div",be,[_("div",ke,[_("div",null,[o[3]||(o[3]=_("h2",{class:"page-title"},"远程终端",-1)),_("p",Ce,[o[2]||(o[2]=q(" 桌面端托管的 PTY 会话；Android 端可远程操控同一通道 ",-1)),e.warning?(y(),K(u,{key:0,color:"orange",style:{"margin-left":"8px"}},{default:T(()=>[q(E(e.warning),1)]),_:1})):R("v-if",!0)])]),A(n,null,{default:T(()=>[A(d,{value:e.newShell,"onUpdate:value":o[0]||(o[0]=r=>e.newShell=r),style:{width:"130px"},size:"small",options:e.shellOptions},null,8,["value"]),A(f,{type:"primary",size:"small",loading:e.creating,onClick:e.onCreate},{icon:T(()=>[A(e.PlusOutlined)]),default:T(()=>[o[4]||(o[4]=q(" 新会话 ",-1))]),_:1},8,["loading"]),A(f,{size:"small",loading:e.loadingList,onClick:e.refreshList},{icon:T(()=>[A(e.ReloadOutlined)]),default:T(()=>[o[5]||(o[5]=q(" 刷新 ",-1))]),_:1},8,["loading"])]),_:1})]),e.error?(y(),K(a,{key:0,message:e.error,type:"error","show-icon":"",closable:"",style:{"margin-bottom":"12px"},onClose:o[1]||(o[1]=r=>e.error="")},null,8,["message"])):R("v-if",!0),_("div",Ae,[_("div",Ee,[(y(!0),x(Q,null,Y(e.sessions,r=>(y(),x("div",{key:r.id,class:ve(["session-tab",{active:r.id===e.activeId,dead:!r.alive}]),onClick:h=>e.activate(r.id)},[_("span",Te,E(r.shell),1),_("span",Re,E(e.shortId(r.id)),1),A(e.CloseOutlined,{class:"session-close",onClick:we(h=>e.onClose(r.id),["stop"])},null,8,["onClick"])],10,Oe))),128)),e.sessions.length===0?(y(),x("div",Me,' 点击 "新会话" 创建第一个终端 ')):R("v-if",!0)]),_("div",ze,[(y(!0),x(Q,null,Y(e.sessions,r=>he((y(),x("div",{key:r.id,ref_for:!0,ref:"xtermContainers","data-session-id":r.id,class:"xterm-container"},null,8,Le)),[[_e,r.id===e.activeId]])),128)),e.sessions.length===0?(y(),x("div",Pe,[...o[6]||(o[6]=[_("span",null,"无活跃会话",-1)])])):R("v-if",!0)])]),e.active?(y(),x("div",qe,[_("span",null,E(e.active.shell)+" · "+E(e.active.cwd||"(默认 cwd)")+" · seq "+E(e.active.lastSeq),1),e.active.alive?R("v-if",!0):(y(),x("span",De,"已退出 (code="+E(e.active.exitCode??"-")+")",1))])):R("v-if",!0)])}const Fe=me(Se,[["render",Be],["__scopeId","data-v-65366a29"],["__file","/tmp/cc-web-panel-v9Hwrq/repo/packages/web-panel/src/views/Terminal.vue"]]);export{Fe as default};

package/src/assets/web-panel/assets/devWarning-CqbHYuRc.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-BgN5G5vF.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-CKBI1U5K.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-Eq98LRtU.js";import{a0 as t}from"./index-BgN5G5vF.js";import"./vendor-BMxUs6UX.js";import"./responsiveObserve-D7Xz2y-R.js";import"./useFlexGapSupport-BoMCTNyu.js";import"./styleChecker-qHmJjV62.js";import"./index-C_MfcrLf.js";import"./icons-BsDmGpcT.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-CkLp6DTO.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-BfbHu1xI.js";import{a0 as t}from"./index-BgN5G5vF.js";import"./vendor-BMxUs6UX.js";import"./index-C_MfcrLf.js";import"./icons-BsDmGpcT.js";const s=t(o);export{s as default};