chainlesschain 0.162.155 → 0.162.157

package/src/commands/batch.js

@@ -0,0 +1,345 @@
+/**
+ * `cc batch` — dynamic worktree batch (gap-analysis 第四阶段 #4). Split a big
+ * change into independent UNITS, run each in its own git worktree in parallel,
+ * test each, and aggregate diff/test/merge-conflict results.
+ *
+ *   cc batch --units units.json                 # run declared units
+ *   cc batch --units units.json --test "npm test" --concurrency 4 --merge
+ *   cc batch --decompose "migrate all foo() calls to bar()" --parts 8
+ *       # ask an agent to split the goal into a units.json, then run it
+ *   cc batch --decompose "…" --parts 8 --plan-only   # emit units, don't run
+ *
+ * units.json: { "units": [ { "key": "u1", "prompt": "…", "test": "npm test -w a" } ] }
+ *
+ * Real isolation comes from worktree-isolator (the same primitive `cc team
+ * --worktree` uses); the fan-out + aggregation core lives in lib/agent-batch.js
+ * (fully injectable). Branches persist for inspection unless merged.
+ */
+
+import fs from "fs";
+import path from "path";
+import { fileURLToPath } from "url";
+import { spawn } from "child_process";
+import { execFileSync } from "child_process";
+import chalk from "chalk";
+import { logger } from "../lib/logger.js";
+import { runBatch } from "../lib/agent-batch.js";
+import {
+  createWorktree,
+  removeWorktree,
+  previewWorktreeMerge,
+  mergeWorktree,
+} from "../harness/worktree-isolator.js";
+import { findProjectRoot } from "../lib/project-detector.js";
+
+const BIN = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  "..",
+  "..",
+  "bin",
+  "chainlesschain.js",
+);
+
+const DECOMPOSE_SCHEMA = {
+  type: "object",
+  properties: {
+    units: {
+      type: "array",
+      items: {
+        type: "object",
+        properties: {
+          key: { type: "string" },
+          prompt: { type: "string" },
+          test: { type: "string" },
+        },
+        required: ["key", "prompt"],
+      },
+    },
+  },
+  required: ["units"],
+};
+
+export function registerBatchCommand(program) {
+  program
+    .command("batch")
+    .description(
+      "Split a large change into independent units, run each in its own git worktree in parallel, and aggregate results",
+    )
+    .option(
+      "--units <file>",
+      "Units JSON file ({ units: [{key, prompt, test?}] })",
+    )
+    .option(
+      "--decompose <goal>",
+      "Ask an agent to split this goal into units first (structured output)",
+    )
+    .option("--parts <n>", "Target number of units for --decompose", "6")
+    .option(
+      "--plan-only",
+      "With --decompose: print the units and exit (no run)",
+    )
+    .option("--concurrency <n>", "Max worktrees running at once", "4")
+    .option("--test <cmd>", "Default test command run in each worktree")
+    .option("--merge", "Merge clean, passing branches back to base")
+    .option("--model <model>", "Model for agent runs")
+    .option("--json", "Machine-readable JSON output")
+    .action(async (options) => {
+      process.exitCode = await runBatchCommand(options);
+    });
+}
+
+export async function runBatchCommand(options = {}, _deps = {}) {
+  const log = _deps.log || ((m) => console.log(m));
+  const errLog = _deps.err || ((m) => logger.error(m));
+  const repoDir =
+    _deps.repoDir || findProjectRoot(process.cwd()) || process.cwd();
+
+  // 1. Resolve the unit list — from a file, or by decomposing a goal.
+  let units;
+  try {
+    if (options.units) {
+      const doc = JSON.parse(fs.readFileSync(options.units, "utf8"));
+      units = Array.isArray(doc) ? doc : doc.units;
+    } else if (options.decompose) {
+      units = await (_deps.decompose || decomposeGoal)(
+        options.decompose,
+        Number(options.parts) || 6,
+        { model: options.model, repoDir },
+      );
+      if (options.planOnly) {
+        log(JSON.stringify({ units }, null, 2));
+        return 0;
+      }
+    } else {
+      errLog("Provide --units <file> or --decompose <goal>.");
+      return 4;
+    }
+  } catch (err) {
+    errLog(`Failed to resolve units: ${err.message}`);
+    return 4;
+  }
+
+  // 2. Run the batch with real worktree + agent + git deps.
+  const deps = _deps.batchDeps || {
+    createWorktree: (key, branch) => createWorktree(repoDir, branch).path,
+    removeWorktree: (worktreePath, opts) =>
+      removeWorktree(repoDir, worktreePath, opts),
+    runAgent:
+      _deps.runAgent ||
+      ((prompt, cwd) => spawnAgent(prompt, cwd, { model: options.model })),
+    runTest: _deps.runTest || runTestCommand,
+    diffStat: _deps.diffStat || gitDiffStat,
+    commit: _deps.commit || gitCommitAll,
+    previewMerge: (branch) => previewWorktreeMerge(repoDir, branch),
+    mergeBranch: (branch, message) =>
+      mergeWorktree(repoDir, branch, { message }),
+    branchFor: (key) => `batch/${sanitize(key)}`,
+  };
+
+  const onEvent = options.json ? () => {} : (ev) => log(formatEvent(ev));
+
+  let outcome;
+  try {
+    outcome = await runBatch(
+      {
+        units,
+        concurrency: options.concurrency,
+        test: options.test || null,
+        merge: options.merge === true,
+        onEvent,
+      },
+      deps,
+    );
+  } catch (err) {
+    errLog(`Batch failed: ${err.message}`);
+    return 1;
+  }
+
+  if (options.json) {
+    log(JSON.stringify(outcome, null, 2));
+  } else {
+    log("");
+    log(chalk.bold("  Batch summary:"));
+    const s = outcome.summary;
+    log(
+      `  ${s.total} units — ${chalk.green(s.done + " done")}, ` +
+        `${chalk.red(s.testFailed + " test-failed")}, ` +
+        `${chalk.yellow(s.errored + " errored")}, ${s.noChanges} no-change`,
+    );
+    if (options.merge) {
+      log(
+        `  merged ${chalk.green(s.merged)}, conflicts ${chalk.yellow(s.conflicted)}`,
+      );
+    }
+    log("");
+  }
+  // Non-zero when anything failed so CI can gate on it.
+  return outcome.summary.testFailed + outcome.summary.errored > 0 ? 1 : 0;
+}
+
+// ─── real effectful deps ───────────────────────────────────────────────────
+
+function sanitize(key) {
+  return String(key).replace(/[^a-zA-Z0-9._-]/g, "-");
+}
+
+function spawnAgent(prompt, cwd, opts = {}) {
+  return new Promise((resolve, reject) => {
+    const args = [
+      BIN,
+      "agent",
+      "-p",
+      prompt,
+      "--permission-mode",
+      "acceptEdits",
+      "--output-format",
+      "text",
+    ];
+    if (opts.model) args.push("--model", opts.model);
+    const child = spawn(process.execPath, args, {
+      cwd,
+      env: { ...process.env, CLAUDECODE: "1" },
+      windowsHide: true,
+    });
+    let err = "";
+    child.stderr?.on("data", (d) => (err += d.toString("utf8")));
+    child.on("error", (e) => reject(new Error(e.message)));
+    child.on("close", (code) =>
+      code === 0
+        ? resolve({ code })
+        : reject(new Error(err.trim() || `agent exited ${code}`)),
+    );
+  });
+}
+
+function runTestCommand(command, cwd) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, {
+      cwd,
+      shell: true,
+      env: process.env,
+      windowsHide: true,
+    });
+    let err = "";
+    child.stderr?.on("data", (d) => (err += d.toString("utf8")));
+    child.on("error", (e) => reject(new Error(e.message)));
+    child.on("close", (code) =>
+      code === 0
+        ? resolve({ code })
+        : reject(new Error(err.trim() || `test exited ${code}`)),
+    );
+  });
+}
+
+/** `git add -A` staged numstat totals for a worktree. */
+function gitDiffStat(cwd) {
+  try {
+    execFileSync("git", ["add", "-A"], { cwd, stdio: "ignore" });
+    const out = execFileSync("git", ["diff", "--cached", "--numstat"], {
+      cwd,
+      encoding: "utf8",
+    });
+    let insertions = 0;
+    let deletions = 0;
+    let filesChanged = 0;
+    for (const line of out.split("\n")) {
+      const trimmed = line.trim();
+      if (!trimmed) continue;
+      const [add, del] = trimmed.split("\t");
+      filesChanged += 1;
+      insertions += add === "-" ? 0 : parseInt(add, 10) || 0;
+      deletions += del === "-" ? 0 : parseInt(del, 10) || 0;
+    }
+    return { filesChanged, insertions, deletions };
+  } catch {
+    return { filesChanged: 0, insertions: 0, deletions: 0 };
+  }
+}
+
+function gitCommitAll(cwd, message) {
+  try {
+    execFileSync("git", ["add", "-A"], { cwd, stdio: "ignore" });
+    execFileSync("git", ["commit", "-m", message, "--no-verify"], {
+      cwd,
+      stdio: "ignore",
+    });
+    return true;
+  } catch {
+    return false; // nothing to commit / commit failed
+  }
+}
+
+/** Spawn a headless agent that emits a units JSON via --json-schema. */
+async function decomposeGoal(goal, parts, opts = {}) {
+  const prompt =
+    `Split this task into ${parts} INDEPENDENT units that can each be done in a ` +
+    `separate git worktree WITHOUT depending on each other's changes. For each ` +
+    `unit give a short kebab-case "key", a self-contained "prompt" (the full ` +
+    `instruction for an agent working only on that unit), and optionally a "test" ` +
+    `shell command to verify it.\n\nTask: ${goal}`;
+  return new Promise((resolve, reject) => {
+    const args = [
+      BIN,
+      "agent",
+      "-p",
+      prompt,
+      "--json-schema",
+      JSON.stringify(DECOMPOSE_SCHEMA),
+      "--permission-mode",
+      "plan",
+    ];
+    if (opts.model) args.push("--model", opts.model);
+    const child = spawn(process.execPath, args, {
+      cwd: opts.repoDir || process.cwd(),
+      env: { ...process.env, CLAUDECODE: "1" },
+      windowsHide: true,
+    });
+    let out = "";
+    let err = "";
+    child.stdout?.on("data", (d) => (out += d.toString("utf8")));
+    child.stderr?.on("data", (d) => (err += d.toString("utf8")));
+    child.on("error", (e) => reject(new Error(e.message)));
+    child.on("close", (code) => {
+      if (code !== 0) {
+        reject(new Error(err.trim() || `decompose agent exited ${code}`));
+        return;
+      }
+      try {
+        const parsed = JSON.parse(out.trim());
+        resolve(parsed.units);
+      } catch (e) {
+        reject(new Error(`could not parse decomposition output: ${e.message}`));
+      }
+    });
+  });
+}
+
+function formatEvent(ev) {
+  switch (ev.type) {
+    case "batch:start":
+      return chalk.dim(
+        `  batch: ${ev.units} units, concurrency ${ev.concurrency}`,
+      );
+    case "unit:start":
+      return chalk.dim(`  ▶ ${ev.key} (${ev.branch})`);
+    case "unit:done": {
+      const badge =
+        ev.status === "done"
+          ? chalk.green("✓")
+          : ev.status === "test-failed"
+            ? chalk.red("✗ test")
+            : ev.status === "error"
+              ? chalk.red("✗ error")
+              : chalk.gray("·");
+      return `  ${badge} ${ev.key} (${ev.filesChanged} files)`;
+    }
+    case "unit:integrated":
+      return ev.conflicts
+        ? chalk.yellow(`  ⚠ ${ev.key}: ${ev.conflicts} conflict(s)`)
+        : chalk.green(`  ↳ ${ev.key}: ${ev.merged ? "merged" : "clean"}`);
+    default:
+      return "";
+  }
+}
+
+export const _internal = { decomposeGoal, gitDiffStat, DECOMPOSE_SCHEMA };

package/src/commands/browse.js

@@ -168,8 +168,18 @@ export function registerBrowseCommand(program) {
       try {
         const spinner = ora(`Taking screenshot of ${url}...`).start();
         const result = await takeScreenshot(url, options.output, {
-          width: numericOption(options.width, { name: "--width", integer: true, min: 1, fallback: 1280 }),
-          height: numericOption(options.height, { name: "--height", integer: true, min: 1, fallback: 720 }),
+          width: numericOption(options.width, {
+            name: "--width",
+            integer: true,
+            min: 1,
+            fallback: 1280,
+          }),
+          height: numericOption(options.height, {
+            name: "--height",
+            integer: true,
+            min: 1,
+            fallback: 720,
+          }),
           fullPage: !!options.fullPage,
         });
         spinner.stop();
@@ -188,9 +198,201 @@ export function registerBrowseCommand(program) {
       }
     });
 
+  registerBrowseChromeCommand(browse);
   registerBrowseV2Command(browse);
 }
 
+/**
+ * `cc browse chrome` — Chrome connector: attach to the USER'S real Chrome
+ * over CDP so page state (DOM/console/network/screenshot) is captured WITH
+ * their login sessions. `launch` starts a debuggable Chrome (dedicated
+ * profile by default; `--default-profile` reuses the real one but requires
+ * every Chrome window to be closed first); `status` checks the port;
+ * `state` attaches, observes, and prints the page state.
+ */
+export function registerBrowseChromeCommand(browse) {
+  const chrome = browse
+    .command("chrome")
+    .description(
+      "Chrome connector — capture page state from YOUR logged-in Chrome over CDP",
+    );
+
+  chrome
+    .command("status")
+    .description("Is a debuggable Chrome listening on the CDP port?")
+    .option("-p, --port <port>", "CDP port", "9222")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { discoverCdp } = await import("../lib/chrome-connector.js");
+      const port = numericOption(options.port, {
+        name: "--port",
+        integer: true,
+        min: 1,
+        fallback: 9222,
+      });
+      const res = await discoverCdp({ port });
+      if (options.json) {
+        console.log(JSON.stringify(res, null, 2));
+        return;
+      }
+      if (res.ok) {
+        logger.success(`Debuggable Chrome on port ${port}: ${res.browser}`);
+      } else {
+        logger.info(
+          `No debuggable Chrome on port ${port}. Start one: cc browse chrome launch`,
+        );
+      }
+    });
+
+  chrome
+    .command("launch")
+    .description(
+      "Launch a debuggable Chrome (dedicated profile; sign in once there and it persists)",
+    )
+    .option("-p, --port <port>", "CDP port", "9222")
+    .option("-u, --url <url>", "Open this URL")
+    .option(
+      "--default-profile",
+      "Reuse your REAL Chrome profile (requires ALL Chrome windows closed; the CDP port then controls your logged-in browser)",
+    )
+    .option("--profile <dir>", "Custom profile directory")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { discoverCdp, launchChrome } =
+        await import("../lib/chrome-connector.js");
+      const port = numericOption(options.port, {
+        name: "--port",
+        integer: true,
+        min: 1,
+        fallback: 9222,
+      });
+      const existing = await discoverCdp({ port });
+      if (existing.ok) {
+        if (options.json) {
+          console.log(
+            JSON.stringify({ ok: true, already: true, port }, null, 2),
+          );
+        } else {
+          logger.success(
+            `A debuggable Chrome is already on port ${port} (${existing.browser})`,
+          );
+        }
+        return;
+      }
+      const res = launchChrome({
+        port,
+        url: options.url,
+        defaultProfile: options.defaultProfile === true,
+        profileDir: options.profile,
+      });
+      if (options.json) {
+        console.log(JSON.stringify({ ...res, port }, null, 2));
+        return;
+      }
+      if (!res.ok) {
+        logger.error(res.error);
+        process.exitCode = 1;
+        return;
+      }
+      logger.success(`Launched ${res.executable} (CDP port ${port})`);
+      if (options.defaultProfile) {
+        logger.info(
+          "Default profile requested — if the window did NOT get the debug port, close every Chrome window and retry.",
+        );
+      } else {
+        logger.info(
+          "Dedicated connector profile — sign in to your sites once there; the login state persists.",
+        );
+      }
+      logger.warn(
+        "The CDP port is an unauthenticated local control channel — close this Chrome when you are done.",
+      );
+    });
+
+  chrome
+    .command("state")
+    .description(
+      "Attach to the connected Chrome and capture a tab's state (DOM/console/network/screenshot)",
+    )
+    .option("-p, --port <port>", "CDP port", "9222")
+    .option("-t, --tab <n>", "Tab index (see the tabs list in the output)", "0")
+    .option(
+      "--watch-ms <ms>",
+      "Observe console/network for this long (collected from attach time)",
+      "3000",
+    )
+    .option(
+      "--reload",
+      "Reload the tab first so load-time console/network is captured",
+    )
+    .option("--no-dom", "Skip the DOM snapshot")
+    .option("--dom-cap <chars>", "DOM snapshot cap", "150000")
+    .option("--screenshot <file>", "Also write a screenshot")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { captureState } = await import("../lib/chrome-connector.js");
+      const state = await captureState({
+        port: numericOption(options.port, {
+          name: "--port",
+          integer: true,
+          min: 1,
+          fallback: 9222,
+        }),
+        tab: numericOption(options.tab, {
+          name: "--tab",
+          integer: true,
+          min: 0,
+          fallback: 0,
+        }),
+        watchMs: numericOption(options.watchMs, {
+          name: "--watch-ms",
+          integer: true,
+          min: 0,
+          fallback: 3000,
+        }),
+        reload: options.reload === true,
+        includeDom: options.dom !== false,
+        domCap: numericOption(options.domCap, {
+          name: "--dom-cap",
+          integer: true,
+          min: 1000,
+          fallback: 150000,
+        }),
+        screenshotPath: options.screenshot || null,
+      });
+      if (options.json) {
+        console.log(JSON.stringify(state, null, 2));
+        return;
+      }
+      if (!state.ok) {
+        logger.error(state.error);
+        process.exitCode = 1;
+        return;
+      }
+      logger.log(
+        chalk.bold(`Tab ${state.tab}: ${state.title || "(untitled)"}`),
+      );
+      logger.log(`  ${chalk.cyan(state.url)}`);
+      logger.log(
+        `  tabs: ${state.tabs.length}  console: ${state.console.length}  network issues: ${state.network.length}` +
+          (state.html
+            ? `  dom: ${state.html.length}${state.htmlTruncated ? "+ (truncated)" : ""} chars`
+            : ""),
+      );
+      for (const c of state.console.slice(0, 20)) {
+        logger.log(`  [console:${c.type}] ${c.text}`);
+      }
+      for (const nw of state.network.slice(0, 20)) {
+        logger.log(
+          `  [net:${nw.kind}] ${nw.url}${nw.status ? ` → ${nw.status}` : ""}${nw.error ? ` (${nw.error})` : ""}`,
+        );
+      }
+      if (state.screenshotPath) {
+        logger.success(`Screenshot: ${state.screenshotPath}`);
+      }
+    });
+}
+
 import {
   BROWSE_TARGET_MATURITY_V2,
   BROWSE_ACTION_LIFECYCLE_V2,

package/src/data/changelog.json

@@ -3,20 +3,31 @@
   "releases": [
     {
       "productVersion": "Unreleased",
-      "cliVersion": "0.162.155",
+      "cliVersion": "0.162.157",
       "cliVersions": [
         "0.4.46",
+        "0.4.51",
         "0.37.4",
         "0.162.150",
         "0.162.151",
         "0.162.152",
         "0.162.153",
         "0.162.154",
-        "0.162.155"
+        "0.162.155",
+        "0.162.156",
+        "0.162.157"
       ],
       "date": null,
       "title": "",
       "sections": [
+        {
+          "heading": "Added — cc CLI 0.162.157：diff 审阅修订摘要 + plan 审阅快照 + Chrome 连接器 + Artifacts + Windows/PowerShell 一等 + --bare/无斜杠/读屏模式（CLI-only npm 发版）",
+          "body": "> `chainlesschain` 0.162.156 → **0.162.157** 发 npm `latest`（经 `npm-publish.yml`，`--provenance --access public`）。纯 `packages/cli/src` + 依赖指针（`@chainlesschain/personal-data-hub` 0.4.50→**0.4.51**，交易短信→金额事件，已先行在 npm）；命令数 **172 → 173**（新增顶层 `cc artifacts`，13 文档面已扫）；无 Android cc bundle rollover / 无 USR_VERSION 改动。agent-sdk 0.1.1（plan review payload additive 类型）此前已在 npm。\n\n- **Artifacts v1：`publish_artifact` agent 工具 + `cc artifacts` 命令**：agent 完成的交付物（报告/图表/构建产物）发布到 `~/.chainlesschain/artifacts`（index.jsonl + 按 id 存文件，title/kind/mime/sha256/session/TTL 元数据，100MB 守卫）——**只有元数据进对话/transcript**，大产物不再撑爆上下文；`cc artifacts list|show|open|remove|clean`（别名 `artifact`）管理与打开；工具 LOW 风险、plan 模式禁用（AGENT_TOOLS 23→24）。\n- **Windows/PowerShell 一等公民（批 22）**：run_shell 新增可选 `shell` 参数（`default|cmd|powershell|pwsh`），选择链 per-call > settings `shell.windowsDefault`（win32-only 分层，`CC_WINDOWS_SHELL` env 胜出）> 平台默认（未配置路径字节不变）；PowerShell 经**显式 argv** 运行（`-NoProfile [-ExecutionPolicy <enum 校验>] -Command`，防 argv 走私）；权限规则新增 `PowerShell(...)` 伞形族与 `shell:pwsh` 参数域；settings hooks 每 hook 可声明 `shell: powershell|pwsh`。结果携带 `shell`/`shell_note`。\n\n- **IDE diff 审阅：agent 能看到你改了什么（gap #4 收口的 CLI 面）**：在 IDE diff 里编辑 proposed content 后 Accept，工具结果此前只带 `userEdited: true` 布尔——agent 不知道你具体改了什么，其对文件的心智模型仍是它自己的原提案。现在新增 `userAmendments`：新纯核 `summarizeUserAmendments`（`lib/ide-context.js`）产出提案→实际写入的 -/+ 行级摘要，按最终文件 1-based 行锚定分块（复用 note-versioning 的 simpleDiff LCS；纯插入/删除直排防幻影空行；1M cell 守卫降级粗块；行数/字符双 cap）。配合 JetBrains 0.4.55（可编辑右栏回读）/ VS Code 0.37.x（原生支持）形成端到端闭环。\n- **plan 审阅快照写入会话（IDE plan review 的 CLI 协议面）**：`{type:\"plan\", action:\"approve\"|\"reject\"}` 控制消息现可携带 `review` 载荷（IDE 端 Markdown 审阅文档的快照 + 元数据，24k cap），CLI 把它写进会话 transcript——计划批准/拒绝留档可审计可回放（headless-stream.js；agent-sdk 0.1.1 `PlanControlInput.review` 类型同步）。\n- **`--bare`（`CC_BARE`）裸模式**：`--safe-mode` 全开关之上再关 skills（`CC_SKILLS=0`）、plugins（`CC_PLUGINS=0`）与 MCP/IDE/PDH/JetBrains 自动连接——两个新 env 各在单一咽喉点生效（skill-loader `loadAll` / plugin-runtime `discoverPlugins`）；显式 `--mcp-config/--ide/--pdh/--jetbrains` 仍胜出；权限规则不放松。最小攻击面/最快启动的干净 agent 环境。\n- **`--disable-slash-commands`（`CC_DISABLE_SLASH_COMMANDS`）**：REPL 里 `/` 开头输入原样送模型（纯谓词 + NUL 哨兵，`lib/slash-dispatch`）；`/exit`、`/quit` 保留；TAB 补全不再提示斜杠命令；宏与 MCP prompt 展开一并旁路。粘贴含 `/` 行首文本不再误触发。\n- **`--ax-screen-reader`（`CC_SCREEN_READER`）读屏友好模式**：mono 主题（零 ANSI 色）+ 状态栏关闭（新 `lib/accessibility.js`）——读屏器不再逐字念转义序列与高频刷新的状态行。\n- **`cc browse chrome status|launch|state`**：与 `browse fetch/scrape`（每次冷启空白 headless 浏览器）不同，连接器经 CDP attach 到**用户自己的 Chrome**，页面状态带着登录会话。`launch` 启动可调试 Chrome（默认**专用配置目录** `~/.chainlesschain/chrome-profile`——登录一次持久复用；`--default-profile` 可选复用真实配置但要求所有 Chrome 窗口先关闭）；`status` 探测 CDP 端口；`state` attach 后观察窗口期内的 console 消息与失败/4xx-5xx 网络请求（CDP 无追溯历史，`--reload` 可捕获加载期输出），快照 URL/标题/DOM（默认 150k cap）/可选截图，断开不杀浏览器。安全注记：CDP 端口是本机无鉴权控制通道，仅绑 loopback，用完关闭该 Chrome。查找 Chrome/Edge 可执行文件跨三平台（`CHROME_PATH` 优先）。attach 后 page targets 有挂载延迟——轮询 3s 而非误报\"无标签页\"。6 单测（注入 deps）+ 真 Chrome 145 live e2e（discover→attach→console/network 捕获→DOM→截图→干净断开）。两 IDE 插件入口（VS `ChainlessChain: Chrome Connector` / JB Tools 同名）已随 VS Code 0.37.10 / JetBrains 0.4.53 上市场——本版补上其依赖的 CLI 端命令。"
+        },
+        {
+          "heading": "Added — cc CLI 0.162.156：agenda/batch 双命令（第四阶段收口）+ @chainlesschain/agent-sdk 0.1.0 npm 首发（CLI-only npm 发版）",
+          "body": "> `chainlesschain` 0.162.155 → **0.162.156** 发 npm `latest`（经 `npm-publish.yml`，`--provenance --access public`）；**`@chainlesschain/agent-sdk` 0.1.0 同 run 首发 npm**（平台化第三阶段产物，npm-publish.yml / release.yml 均已加发布 step，防 trap #127 漏发）。纯 `packages/cli/src`（+web-panel dist 随包）+ 新独立包，未触 `pdh/lib` → 无 Android cc bundle rollover / 无 USR_VERSION 改动。命令数 **170 → 172**（新增顶层 `agenda`/`batch`，清单已重生，13 文档面已扫）。\n\n- **`cc agenda` + notify/schedule 双 agent 工具（第四阶段批19）**：Monitor/Cron/Push 暴露为 agent 可调工具（AGENT_TOOLS 21→23）——`notify` 推送到用户已配置的多通道通知器（Telegram/企业微信/钉钉/飞书）；`schedule` 一工具五动作（wakeup/cron/monitor/list/cancel），单轮进程持不住定时器 → 意图持久化到 `~/.chainlesschain/agent-schedule/*.jsonl`（0600），由 `cc agenda list|run|cancel` 消费触发（wakeup/cron 到期 spawn `cc agent -p`，monitor 跑命令匹配 stop_when 即通知）。两工具 LOW 风险、plan 模式禁用；29 单测 + 真进程 smoke。\n- **`cc batch` 动态 worktree 批处理（第四阶段批20，第四阶段全收口）**：把大改动拆成独立单元并行跑——`--units <file>` 或 `--decompose <goal> --parts N`（agent 经 `--json-schema` 产单元 JSON，`--plan-only` 只打印）；每单元独立 git worktree（复用 `cc team --worktree` 的 worktree-isolator），`--test` 门控、`--merge` 顺序集成（后合分支与已合冲突时报告不强合、测试失败单元永不合并）；15 单测 + 2 真 git/worktree 集成测试。\n- **`@chainlesschain/agent-sdk` 0.1.0 首发**：`cc agent` stream-json 双工协议的 TypeScript 正式契约（Agent Protocol v1）——流式事件全词汇 + 审批回调（fail-closed）+ 检查点 + 会话恢复；`AgentSession` spawn 客户端（Windows `cmd.exe /c` shim + `NoDefaultCurrentDirectoryInExePath` 反劫持 + `taskkill /T` 进程树回收内置）、`attachBackgroundSession` 后台管道接管、`/browser` 浏览器安全入口（web-panel bg-\\* 帧）、`/protocol` 纯类型入口；双构建 ESM+CJS，零运行时依赖，36 测试（单元+真管道集成+真 CLI e2e）。VS Code 扩展（vendored）与 web-panel（vite alias）已消费；JetBrains 对齐语言中立 `docs/PROTOCOL.md`。用户文档 `docs-site/docs/chainlesschain/agent-sdk.md`。\n- 修复（随本版仓内，不在 cli 包面）：SDK 真 CLI e2e 抓出的两 IDE 首会话不落盘洞（IDE 重载后 resume 静默空会话）已在两插件修复，随各自下次插件发版出货。"
+        },
         {
           "heading": "Added — cc CLI 0.162.155：权限模式/auto 分类器 + 后台会话可交互接管全家桶（第一阶段收口，CLI-only npm 发版）",
           "body": "> `chainlesschain` 0.162.154 → **0.162.155** 已发 npm `latest`（经 `npm-publish.yml`，`--provenance --access public`）。纯 `packages/cli/src`（+web-panel dist 随包）增量，未触 `pdh/lib` → 无 Android cc bundle rollover / 无 USR_VERSION 改动。gap-analysis「第一阶段：安全与可运营性」4 项全部落地（批 1-15，9 commit `e3ab46c73f..1618a3ca83`）。命令数 **165 → 170**（新增顶层 `attach`/`auto-mode`/`daemon`/`logs`/`remote-control`，清单已重生）。发版前本机三层全绿（unit 21808 / integration 除 1 已知 real-spawn flake 隔离 3 连绿 / e2e 628）。\n\n- **权限模式补齐 `manual`/`auto`/`dontAsk`**（headless + 交互 REPL 双面）：`manual`=default 别名；`auto`=可配置分类器——settings `autoMode.decisions` 按 riskLevel（对象/数组形）与 tool/commandPattern 细粒度规则（`*` glob，声明序优先）映射 allow/ask/deny，未配置时字节不变映射 trusted；`dontAsk`=需确认动作直接 deny 不弹审批（REPL 两处 confirmer 全覆盖）。REPL `/permissions auto|dontask` 中途切换，Shift+Tab 循环兼容；`cc agent --permission-mode` 对交互式会话生效（顺带修 `resolveAgentPolicy` 白名单静默丢弃 `--vim/--think/--fallback-model/--pdh` 等交互 flag 的预存 bug）。\n- **`cc auto-mode defaults|config [--json]`**：内置分类默认值文档 + user/project/local/managed 分层合并后的有效配置（含细粒度规则展示）；修 `mergeSandboxSettings` 数组分支把数组形 decisions 毁成 `\"[object Object]\"` 的潜伏 bug（新 `mergeAutoModeSettings`，decisions=有序规则集 closer 层整体替换）。\n- **`cc permissions recent|denials [--json|--clear]` + 决策逐层解释链**：跨会话持久 denial ring buffer（headless + REPL 双源）；被拒 run_shell 附带 `permissionChain`（settings-rules→shell-policy→approval-gate 各层判定+理由），`/permissions denials` 与 `cc permissions recent` 渲染紧凑链——一眼看清「allow 规则为何没生效」。\n- **后台会话可运营全家桶**：顶层 `cc logs <id>` / `cc attach <id>` / `cc daemon status|view|stop|rename|resume`。worker heartbeat + workerPid/agentPid 分离 + stale-heartbeat/PID-reuse 防误杀（可靠标 `lost`）；`cc daemon resume <id> <prompt>` 把崩溃/终态会话按 sessionId 续接为新后台运行（原 argv 有意不持久化防 secrets 落盘）。\n- **`cc attach` 可交互接管（session transport）**：worker 每会话托管本地 NDJSON 控制通道（Win named pipe / POSIX socket，随机 token 存 0600 state 文件）；attach 后键入即发 follow-up prompt（同 `--session` 自动续接对话史，多轮 turn 循环），`/stop` 截断当前轮，turn 运行中断开任务照跑、idle 断开会话收尾；transport 不可用自动回退日志流，`--no-input` 强制纯日志。\n- **web-panel「后台 Agent」面板**：新 `bg-*` WS 协议（list/view/attach/prompt/stop-turn/detach/stop/rename/resume，attach 期间推送 worker 事件与日志增量）；takeover token 永不过 WS 边界。面板含列表/接管卡片/日志流/重命名/续跑。\n- 修复：后台 rename 与 worker read-modify-write 竞态（写后校验+有界重试）；`settingsVerdict` 未传入 executeToolInner 的解释链断点；launcher/worker 状态竞写（先写 state 后 spawn + heartbeat 重申 transport）。\n- **`cc remote-control`（第四阶段批17，随本版一同发布）**：统一远控入口（别名 `rc`）——start/status/stop 组合既有 remote-session 栈（WS server + E2EE relay + registry + ledger + push + audit），配对 URI 双模式（relay E2EE / 直连 LAN），跨进程 0600 state 发现；顺带修 `cc serve --remote-session-relay-url` 白名单丢参从未生效的预存 bug。\n- **MCP tool search（第二阶段批16，随本版一同发布）**：大规模 MCP 面下工具定义超上下文阈值（默认窗口 10%，`mcp.toolSearch` settings / `CC_TOOL_SEARCH` env 可配）时自动换成 `[deferred]` stub + 内部 `tool_search` 检索工具；完整 schema 经 tool result 返回（append-only，保 prompt cache 稳定）；REPL `/context` 新增 MCP tool schemas 占用与优化建议一节。未超阈值/关闭时行为字节不变。"