chainlesschain 0.162.156 → 0.162.158

package/src/commands/agent.js

@@ -168,6 +168,18 @@ export function registerAgentCommand(program) {
       "--safe-mode",
       "Run bare: disable project memory, settings hooks, memory recall, IDE context, status line and update notice (permission rules STAY active)",
     )
+    .option(
+      "--bare",
+      "Everything --safe-mode disables PLUS skills, plugins and MCP/IDE auto-connect — minimal fast surface for scripted calls (explicit --mcp-config still loads; permission rules STAY active)",
+    )
+    .option(
+      "--disable-slash-commands",
+      "Interactive REPL: don't dispatch '/' input as slash commands — it reaches the model verbatim (/exit and /quit stay live)",
+    )
+    .option(
+      "--ax-screen-reader",
+      "Screen-reader friendly output: no ANSI colors, no in-place status line repaints (also CC_SCREEN_READER=1)",
+    )
     .option(
       "--worktree",
       "Run this session in a fresh git worktree (isolated branch; auto-removed when the session changes nothing)",
@@ -317,7 +329,7 @@ export function registerAgentCommand(program) {
     )
     .option(
       "--remote-control",
-      "Headless: route confirm-tier approvals to paired mobile/web devices — prints a pairing URI/QR, waits for remote allow/deny (fail-closed on timeout)",
+      "Route confirm-tier approvals to paired mobile/web devices — prints a pairing URI/QR. Headless waits for the remote allow/deny (fail-closed on timeout); interactive races the terminal prompt (first answer wins; also /remote-control)",
     )
     .option(
       "--settings <file>",
@@ -371,17 +383,44 @@ export function registerAgentCommand(program) {
       }
       // --safe-mode flag OR CC_SAFE_MODE / CLAUDE_CODE_SAFE_MODE env (Claude-Code
       // 2.1.169 parity): flip every customization kill-switch BEFORE anything
-      // loads. Permission rules stay active.
+      // loads. Permission rules stay active. --bare (CC_BARE) is safe mode
+      // PLUS skills, plugins and MCP/IDE/PDH/JetBrains auto-connect off.
       {
-        const { applySafeMode, safeModeRequested } =
-          await import("../lib/safe-mode.js");
-        if (safeModeRequested(options)) {
+        const {
+          applySafeMode,
+          safeModeRequested,
+          applyBareMode,
+          bareModeRequested,
+        } = await import("../lib/safe-mode.js");
+        if (bareModeRequested(options)) {
+          const applied = applyBareMode();
+          // Ambient auto-connects off; an EXPLICIT --ide/--pdh/--jetbrains
+          // (or --mcp-config, handled downstream) still wins — bare kills
+          // defaults, not explicit input.
+          options.mcp = false;
+          if (options.ide === undefined) options.ide = false;
+          if (options.pdh === undefined) options.pdh = false;
+          if (options.jetbrains === undefined) options.jetbrains = false;
+          process.stderr.write(
+            `bare mode: hooks/skills/plugins/memory/MCP-auto-connect disabled (${applied.join(", ")}) — permission rules stay active.\n`,
+          );
+        } else if (safeModeRequested(options)) {
           const applied = applySafeMode();
           process.stderr.write(
             `safe mode: customizations disabled (${applied.join(", ")}) — permission rules stay active.\n`,
           );
         }
       }
+      // --ax-screen-reader flag OR CC_SCREEN_READER env: linear output for
+      // screen readers (mono theme + no repainting status line). Applied
+      // before anything renders.
+      {
+        const { screenReaderRequested, applyScreenReaderMode } =
+          await import("../lib/accessibility.js");
+        if (screenReaderRequested(options)) {
+          applyScreenReaderMode();
+        }
+      }
       // --project-mcp: opt IN to project-scoped `.mcp.json` discovery, which is
       // off by default (a checked-in .mcp.json can spawn commands). loadProjectMcp
       // reads CC_PROJECT_MCP; set it here so the opt-in reaches every run mode
@@ -1089,6 +1128,11 @@ export function registerAgentCommand(program) {
         pdh: options.pdh,
         // --jetbrains / --no-jetbrains: IDEA built-in MCP for the interactive session
         jetbrains: options.jetbrains,
+        // --disable-slash-commands: REPL sends "/" input to the model verbatim
+        disableSlashCommands: options.disableSlashCommands === true,
+        // --remote-control: start the paired-device approval bridge for the
+        // interactive session too (terminal prompt races the device).
+        remoteControl: options.remoteControl === true,
       });
       await runtime.startAgentSession();
       // Interactive session ended (REPL closed) — settle the worktree.

package/src/commands/artifacts.js

@@ -0,0 +1,161 @@
+/**
+ * `cc artifacts` — browse/manage the agent-published deliverable store
+ * (gap-analysis P1 #10). The `publish_artifact` agent tool copies finished
+ * deliverables (reports/patches/screenshots/logs) into
+ * `~/.chainlesschain/artifacts/`; this command is the user-facing surface:
+ *
+ *   cc artifacts list [--session <id>] [--kind <k>] [--json]
+ *   cc artifacts show <id> [--json]        metadata + stored path
+ *   cc artifacts open <id>                 print the stored path (pipe/open)
+ *   cc artifacts remove <id>
+ *   cc artifacts clean [--json]            drop expired artifacts (TTL)
+ */
+
+import chalk from "chalk";
+import { ArtifactStore } from "../lib/artifact-store.js";
+
+export function registerArtifactsCommand(program) {
+  const cmd = program
+    .command("artifacts")
+    .alias("artifact")
+    .description(
+      "Browse agent-published deliverables (reports/patches/screenshots; see the publish_artifact tool)",
+    );
+
+  cmd
+    .command("list", { isDefault: true })
+    .description("List published artifacts")
+    .option("--session <id>", "Only artifacts from one agent session")
+    .option(
+      "--kind <kind>",
+      "Filter by kind (report|patch|screenshot|log|data|other)",
+    )
+    .option("--json", "Machine-readable JSON output")
+    .action((options) => {
+      process.exitCode = runArtifactsList(options);
+    });
+
+  cmd
+    .command("show <id>")
+    .description("Show one artifact's metadata + stored path")
+    .option("--json", "Machine-readable JSON output")
+    .action((id, options) => {
+      process.exitCode = runArtifactsShow(id, options);
+    });
+
+  cmd
+    .command("open <id>")
+    .description("Print the artifact's stored file path (for piping/opening)")
+    .action((id) => {
+      process.exitCode = runArtifactsOpen(id);
+    });
+
+  cmd
+    .command("remove <id>")
+    .alias("rm")
+    .description("Remove one artifact (stored copy + metadata)")
+    .option("--json", "Machine-readable JSON output")
+    .action((id, options) => {
+      process.exitCode = runArtifactsRemove(id, options);
+    });
+
+  cmd
+    .command("clean")
+    .description("Remove expired artifacts (past their TTL)")
+    .option("--json", "Machine-readable JSON output")
+    .action((options) => {
+      process.exitCode = runArtifactsClean(options);
+    });
+}
+
+export function runArtifactsList(options = {}, deps = {}) {
+  const store = deps.store || new ArtifactStore();
+  let entries = store.list({ sessionId: options.session });
+  if (options.kind) {
+    entries = entries.filter((e) => e.kind === String(options.kind));
+  }
+  if (options.json) {
+    console.log(JSON.stringify({ artifacts: entries }, null, 2));
+    return 0;
+  }
+  if (entries.length === 0) {
+    console.log(
+      chalk.dim(
+        "No artifacts. Agents publish deliverables with the publish_artifact tool.",
+      ),
+    );
+    return 0;
+  }
+  for (const e of entries) {
+    console.log(
+      `${chalk.cyan(e.id)}  ${chalk.bold(e.title)}  ${chalk.dim(
+        `[${e.kind}] ${e.mime} ${e.size}B ${e.createdAt}${
+          e.sessionId ? ` session=${e.sessionId}` : ""
+        }`,
+      )}`,
+    );
+  }
+  console.log(
+    chalk.dim(`${entries.length} artifact(s). cc artifacts show <id>`),
+  );
+  return 0;
+}
+
+export function runArtifactsShow(id, options = {}, deps = {}) {
+  const store = deps.store || new ArtifactStore();
+  const entry = store.get(id);
+  if (!entry) {
+    console.error(chalk.red(`No artifact with id "${id}".`));
+    return 1;
+  }
+  const payload = { ...entry, storedPath: store.storedPath(entry) };
+  if (options.json) {
+    console.log(JSON.stringify(payload, null, 2));
+    return 0;
+  }
+  for (const [k, v] of Object.entries(payload)) {
+    console.log(`${chalk.dim(k.padEnd(11))} ${v == null ? "" : v}`);
+  }
+  return 0;
+}
+
+export function runArtifactsOpen(id, deps = {}) {
+  const store = deps.store || new ArtifactStore();
+  const entry = store.get(id);
+  if (!entry) {
+    console.error(chalk.red(`No artifact with id "${id}".`));
+    return 1;
+  }
+  console.log(store.storedPath(entry));
+  return 0;
+}
+
+export function runArtifactsRemove(id, options = {}, deps = {}) {
+  const store = deps.store || new ArtifactStore();
+  const found = store.remove(id);
+  if (options.json) {
+    console.log(JSON.stringify({ removed: found ? id : null, found }));
+    return found ? 0 : 1;
+  }
+  if (!found) {
+    console.error(chalk.red(`No artifact with id "${id}".`));
+    return 1;
+  }
+  console.log(chalk.green(`Removed ${id}.`));
+  return 0;
+}
+
+export function runArtifactsClean(options = {}, deps = {}) {
+  const store = deps.store || new ArtifactStore();
+  const { removed } = store.cleanupExpired();
+  if (options.json) {
+    console.log(JSON.stringify({ removed }));
+    return 0;
+  }
+  console.log(
+    removed > 0
+      ? chalk.green(`Removed ${removed} expired artifact(s).`)
+      : chalk.dim("Nothing expired."),
+  );
+  return 0;
+}

package/src/commands/browse.js

@@ -168,8 +168,18 @@ export function registerBrowseCommand(program) {
       try {
         const spinner = ora(`Taking screenshot of ${url}...`).start();
         const result = await takeScreenshot(url, options.output, {
-          width: numericOption(options.width, { name: "--width", integer: true, min: 1, fallback: 1280 }),
-          height: numericOption(options.height, { name: "--height", integer: true, min: 1, fallback: 720 }),
+          width: numericOption(options.width, {
+            name: "--width",
+            integer: true,
+            min: 1,
+            fallback: 1280,
+          }),
+          height: numericOption(options.height, {
+            name: "--height",
+            integer: true,
+            min: 1,
+            fallback: 720,
+          }),
           fullPage: !!options.fullPage,
         });
         spinner.stop();
@@ -188,9 +198,201 @@ export function registerBrowseCommand(program) {
       }
     });
 
+  registerBrowseChromeCommand(browse);
   registerBrowseV2Command(browse);
 }
 
+/**
+ * `cc browse chrome` — Chrome connector: attach to the USER'S real Chrome
+ * over CDP so page state (DOM/console/network/screenshot) is captured WITH
+ * their login sessions. `launch` starts a debuggable Chrome (dedicated
+ * profile by default; `--default-profile` reuses the real one but requires
+ * every Chrome window to be closed first); `status` checks the port;
+ * `state` attaches, observes, and prints the page state.
+ */
+export function registerBrowseChromeCommand(browse) {
+  const chrome = browse
+    .command("chrome")
+    .description(
+      "Chrome connector — capture page state from YOUR logged-in Chrome over CDP",
+    );
+
+  chrome
+    .command("status")
+    .description("Is a debuggable Chrome listening on the CDP port?")
+    .option("-p, --port <port>", "CDP port", "9222")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { discoverCdp } = await import("../lib/chrome-connector.js");
+      const port = numericOption(options.port, {
+        name: "--port",
+        integer: true,
+        min: 1,
+        fallback: 9222,
+      });
+      const res = await discoverCdp({ port });
+      if (options.json) {
+        console.log(JSON.stringify(res, null, 2));
+        return;
+      }
+      if (res.ok) {
+        logger.success(`Debuggable Chrome on port ${port}: ${res.browser}`);
+      } else {
+        logger.info(
+          `No debuggable Chrome on port ${port}. Start one: cc browse chrome launch`,
+        );
+      }
+    });
+
+  chrome
+    .command("launch")
+    .description(
+      "Launch a debuggable Chrome (dedicated profile; sign in once there and it persists)",
+    )
+    .option("-p, --port <port>", "CDP port", "9222")
+    .option("-u, --url <url>", "Open this URL")
+    .option(
+      "--default-profile",
+      "Reuse your REAL Chrome profile (requires ALL Chrome windows closed; the CDP port then controls your logged-in browser)",
+    )
+    .option("--profile <dir>", "Custom profile directory")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { discoverCdp, launchChrome } =
+        await import("../lib/chrome-connector.js");
+      const port = numericOption(options.port, {
+        name: "--port",
+        integer: true,
+        min: 1,
+        fallback: 9222,
+      });
+      const existing = await discoverCdp({ port });
+      if (existing.ok) {
+        if (options.json) {
+          console.log(
+            JSON.stringify({ ok: true, already: true, port }, null, 2),
+          );
+        } else {
+          logger.success(
+            `A debuggable Chrome is already on port ${port} (${existing.browser})`,
+          );
+        }
+        return;
+      }
+      const res = launchChrome({
+        port,
+        url: options.url,
+        defaultProfile: options.defaultProfile === true,
+        profileDir: options.profile,
+      });
+      if (options.json) {
+        console.log(JSON.stringify({ ...res, port }, null, 2));
+        return;
+      }
+      if (!res.ok) {
+        logger.error(res.error);
+        process.exitCode = 1;
+        return;
+      }
+      logger.success(`Launched ${res.executable} (CDP port ${port})`);
+      if (options.defaultProfile) {
+        logger.info(
+          "Default profile requested — if the window did NOT get the debug port, close every Chrome window and retry.",
+        );
+      } else {
+        logger.info(
+          "Dedicated connector profile — sign in to your sites once there; the login state persists.",
+        );
+      }
+      logger.warn(
+        "The CDP port is an unauthenticated local control channel — close this Chrome when you are done.",
+      );
+    });
+
+  chrome
+    .command("state")
+    .description(
+      "Attach to the connected Chrome and capture a tab's state (DOM/console/network/screenshot)",
+    )
+    .option("-p, --port <port>", "CDP port", "9222")
+    .option("-t, --tab <n>", "Tab index (see the tabs list in the output)", "0")
+    .option(
+      "--watch-ms <ms>",
+      "Observe console/network for this long (collected from attach time)",
+      "3000",
+    )
+    .option(
+      "--reload",
+      "Reload the tab first so load-time console/network is captured",
+    )
+    .option("--no-dom", "Skip the DOM snapshot")
+    .option("--dom-cap <chars>", "DOM snapshot cap", "150000")
+    .option("--screenshot <file>", "Also write a screenshot")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { captureState } = await import("../lib/chrome-connector.js");
+      const state = await captureState({
+        port: numericOption(options.port, {
+          name: "--port",
+          integer: true,
+          min: 1,
+          fallback: 9222,
+        }),
+        tab: numericOption(options.tab, {
+          name: "--tab",
+          integer: true,
+          min: 0,
+          fallback: 0,
+        }),
+        watchMs: numericOption(options.watchMs, {
+          name: "--watch-ms",
+          integer: true,
+          min: 0,
+          fallback: 3000,
+        }),
+        reload: options.reload === true,
+        includeDom: options.dom !== false,
+        domCap: numericOption(options.domCap, {
+          name: "--dom-cap",
+          integer: true,
+          min: 1000,
+          fallback: 150000,
+        }),
+        screenshotPath: options.screenshot || null,
+      });
+      if (options.json) {
+        console.log(JSON.stringify(state, null, 2));
+        return;
+      }
+      if (!state.ok) {
+        logger.error(state.error);
+        process.exitCode = 1;
+        return;
+      }
+      logger.log(
+        chalk.bold(`Tab ${state.tab}: ${state.title || "(untitled)"}`),
+      );
+      logger.log(`  ${chalk.cyan(state.url)}`);
+      logger.log(
+        `  tabs: ${state.tabs.length}  console: ${state.console.length}  network issues: ${state.network.length}` +
+          (state.html
+            ? `  dom: ${state.html.length}${state.htmlTruncated ? "+ (truncated)" : ""} chars`
+            : ""),
+      );
+      for (const c of state.console.slice(0, 20)) {
+        logger.log(`  [console:${c.type}] ${c.text}`);
+      }
+      for (const nw of state.network.slice(0, 20)) {
+        logger.log(
+          `  [net:${nw.kind}] ${nw.url}${nw.status ? ` → ${nw.status}` : ""}${nw.error ? ` (${nw.error})` : ""}`,
+        );
+      }
+      if (state.screenshotPath) {
+        logger.success(`Screenshot: ${state.screenshotPath}`);
+      }
+    });
+}
+
 import {
   BROWSE_TARGET_MATURITY_V2,
   BROWSE_ACTION_LIFECYCLE_V2,

package/src/data/changelog.json

@@ -3,9 +3,10 @@
   "releases": [
     {
       "productVersion": "Unreleased",
-      "cliVersion": "0.162.156",
+      "cliVersion": "0.162.158",
       "cliVersions": [
         "0.4.46",
+        "0.4.51",
         "0.37.4",
         "0.162.150",
         "0.162.151",
@@ -13,11 +14,21 @@
         "0.162.153",
         "0.162.154",
         "0.162.155",
-        "0.162.156"
+        "0.162.156",
+        "0.162.157",
+        "0.162.158"
       ],
       "date": null,
       "title": "",
       "sections": [
+        {
+          "heading": "Added — cc CLI 0.162.158：browser_state agent 工具 + REPL /remote-control + web-panel 直连配对/审批卡片 + 交付物预览下载（CLI-only npm 发版）",
+          "body": "> `chainlesschain` 0.162.157 → **0.162.158** 发 npm `latest`（经 `npm-publish.yml`，`--provenance --access public`）。纯 `packages/cli/src` + web-panel dist 随包；未触 `pdh/lib` → 无 Android cc bundle rollover / 无 USR_VERSION 改动。命令数不变（**173**）；AGENT_TOOLS **24 → 25**（新增 `browser_state`）。\n\n- **`browser_state` 一等 agent 工具（IDE gap P1 #8 收口）**：Chrome CDP 连接器（`cc browse chrome`）暴露为第 25 个 agent 工具——URL/标题/标签页 + 观察窗口 console/失败网络请求 + DOM 快照（agent 面 40k cap，CLI 命令面 150k）+ 可选截图（**生成的**临时路径，防 agent 自选路径经读工具覆盖任意文件）；LOW/READ/plan 模式可用，纯观察不点击不输入不导航，仅 loopback CDP。\n- **REPL `/remote-control`（别名 `/rc`）on|off|status（批 26）**：交互式会话内起自托管 WS + RemoteApprovalBridge 配对（URI + 可选二维码），TAB 补全 + /help；`cc agent --remote-control` 对交互式会话同样生效（启动失败降级 local-only 不中断会话）。**交互式远程审批赛跑语义**（新 `src/repl/remote-approval.js`）：两个交互 confirmer（ApprovalGate + settings/hook ask）把终端 prompt 与已配对设备赛跑，先答先赢；与 headless 刻意不同——远端超时/断开**不是决定**（静默的手机永不代键盘用户 auto-deny），设备先答则取消本地 readline 并压掉其搁浅的 idle-timeout。\n- **web-panel 直连（direct-LAN）配对 + `permission.request` 审批卡片（批 28）**：remoteSession store 自动识别双 URI 方案——relay E2EE 路径不变，新增 `chainlesschain://remote-control/pair#` 直连 transport（browser 版 parseDirectPairingUri + 客户端过期检查）；直连控制走 remote-session-publish **顶层 commandId+seq**（applyControlIdempotent direct-client 契约）；一次性 pairing token → 直连断开**刻意不自动重连**（重 join 必失败，诚实 disconnected 态 + 重配对提示）；两种 transport 喂同一 pendingApprovals 卡片（requestId 去重 + permission.resolved 任意裁决方清除 + 首等公民审批卡列表批准/拒绝）。\n- **交付物 Markdown 预览 + 浏览器下载（批 25）**：面板 text/markdown 预览走既有 MarkdownRenderer（marked+DOMPurify+hljs，零新依赖）；新 `GET /api/artifacts/<id>/download` 流式下载完整存档副本（WS 预览仍 cap）——Content-Disposition（RFC 5987）+ no-store/nosniff + 配置 wsToken 时同 WS 强度 token 门（sha256+timingSafeEqual，Bearer 头不进 URL）+ basename 防篡改守卫。\n- **安全修复 ×2**：① **直连配对信任边界**——直连（LAN）配对无密码学主机身份（区别 relay E2EE），钓鱼配对 URI 可把面板指向任意公网 ws:// 端点导走 serverToken/prompt/审批决定；两端 parser（web-panel + CLI 孪生）现拒绝指向非私网主机的明文 ws://（仅 loopback/RFC-1918/link-local/ULA，即 pickLanAddress 可能产出的全集；wss:// 不限），IPv6 括号 + IPv4-mapped 点分/hex 双形态识别，RED 反证过。② **chrome-connector launch-arg 加固**——launch URL 曾逐字进 Chrome argv（`--` 开头值被 Chrome 当开关解析=潜在命令执行面），现限 http(s)://、about:（URL parse 校验字节原样透传）+ CDP 端口处处整型边界校验。\n- **健壮性**：web-panel 审批卡发送失败恢复——approve() 乐观清除后若答复未离开本端（直连 publish 拒绝/socket 断/relay 未配对）恢复卡片并浮错，可重新裁决；失败窗口内别设备已 resolved 则抑制恢复（无僵尸卡）。RED 反证 + web-panel 全套 2512 绿。\n- **测试稳健性（仓库面，不进 npm 包）**：checkpoint-store `vi.setConfig 30s` + web-panel doctor 90s 两处负载敏感预算加固（trap #31 形态）；ai-doc-creator 集成测试改 chdir tmpDir，不再向仓库根泄漏 12 个产物文件。"
+        },
+        {
+          "heading": "Added — cc CLI 0.162.157：diff 审阅修订摘要 + plan 审阅快照 + Chrome 连接器 + Artifacts + Windows/PowerShell 一等 + --bare/无斜杠/读屏模式（CLI-only npm 发版）",
+          "body": "> `chainlesschain` 0.162.156 → **0.162.157** 发 npm `latest`（经 `npm-publish.yml`，`--provenance --access public`）。纯 `packages/cli/src` + 依赖指针（`@chainlesschain/personal-data-hub` 0.4.50→**0.4.51**，交易短信→金额事件，已先行在 npm）；命令数 **172 → 173**（新增顶层 `cc artifacts`，13 文档面已扫）；无 Android cc bundle rollover / 无 USR_VERSION 改动。agent-sdk 0.1.1（plan review payload additive 类型）此前已在 npm。\n\n- **Artifacts v1：`publish_artifact` agent 工具 + `cc artifacts` 命令**：agent 完成的交付物（报告/图表/构建产物）发布到 `~/.chainlesschain/artifacts`（index.jsonl + 按 id 存文件，title/kind/mime/sha256/session/TTL 元数据，100MB 守卫）——**只有元数据进对话/transcript**，大产物不再撑爆上下文；`cc artifacts list|show|open|remove|clean`（别名 `artifact`）管理与打开；工具 LOW 风险、plan 模式禁用（AGENT_TOOLS 23→24）。\n- **Windows/PowerShell 一等公民（批 22）**：run_shell 新增可选 `shell` 参数（`default|cmd|powershell|pwsh`），选择链 per-call > settings `shell.windowsDefault`（win32-only 分层，`CC_WINDOWS_SHELL` env 胜出）> 平台默认（未配置路径字节不变）；PowerShell 经**显式 argv** 运行（`-NoProfile [-ExecutionPolicy <enum 校验>] -Command`，防 argv 走私）；权限规则新增 `PowerShell(...)` 伞形族与 `shell:pwsh` 参数域；settings hooks 每 hook 可声明 `shell: powershell|pwsh`。结果携带 `shell`/`shell_note`。\n\n- **IDE diff 审阅：agent 能看到你改了什么（gap #4 收口的 CLI 面）**：在 IDE diff 里编辑 proposed content 后 Accept，工具结果此前只带 `userEdited: true` 布尔——agent 不知道你具体改了什么，其对文件的心智模型仍是它自己的原提案。现在新增 `userAmendments`：新纯核 `summarizeUserAmendments`（`lib/ide-context.js`）产出提案→实际写入的 -/+ 行级摘要，按最终文件 1-based 行锚定分块（复用 note-versioning 的 simpleDiff LCS；纯插入/删除直排防幻影空行；1M cell 守卫降级粗块；行数/字符双 cap）。配合 JetBrains 0.4.55（可编辑右栏回读）/ VS Code 0.37.x（原生支持）形成端到端闭环。\n- **plan 审阅快照写入会话（IDE plan review 的 CLI 协议面）**：`{type:\"plan\", action:\"approve\"|\"reject\"}` 控制消息现可携带 `review` 载荷（IDE 端 Markdown 审阅文档的快照 + 元数据，24k cap），CLI 把它写进会话 transcript——计划批准/拒绝留档可审计可回放（headless-stream.js；agent-sdk 0.1.1 `PlanControlInput.review` 类型同步）。\n- **`--bare`（`CC_BARE`）裸模式**：`--safe-mode` 全开关之上再关 skills（`CC_SKILLS=0`）、plugins（`CC_PLUGINS=0`）与 MCP/IDE/PDH/JetBrains 自动连接——两个新 env 各在单一咽喉点生效（skill-loader `loadAll` / plugin-runtime `discoverPlugins`）；显式 `--mcp-config/--ide/--pdh/--jetbrains` 仍胜出；权限规则不放松。最小攻击面/最快启动的干净 agent 环境。\n- **`--disable-slash-commands`（`CC_DISABLE_SLASH_COMMANDS`）**：REPL 里 `/` 开头输入原样送模型（纯谓词 + NUL 哨兵，`lib/slash-dispatch`）；`/exit`、`/quit` 保留；TAB 补全不再提示斜杠命令；宏与 MCP prompt 展开一并旁路。粘贴含 `/` 行首文本不再误触发。\n- **`--ax-screen-reader`（`CC_SCREEN_READER`）读屏友好模式**：mono 主题（零 ANSI 色）+ 状态栏关闭（新 `lib/accessibility.js`）——读屏器不再逐字念转义序列与高频刷新的状态行。\n- **`cc browse chrome status|launch|state`**：与 `browse fetch/scrape`（每次冷启空白 headless 浏览器）不同，连接器经 CDP attach 到**用户自己的 Chrome**，页面状态带着登录会话。`launch` 启动可调试 Chrome（默认**专用配置目录** `~/.chainlesschain/chrome-profile`——登录一次持久复用；`--default-profile` 可选复用真实配置但要求所有 Chrome 窗口先关闭）；`status` 探测 CDP 端口；`state` attach 后观察窗口期内的 console 消息与失败/4xx-5xx 网络请求（CDP 无追溯历史，`--reload` 可捕获加载期输出），快照 URL/标题/DOM（默认 150k cap）/可选截图，断开不杀浏览器。安全注记：CDP 端口是本机无鉴权控制通道，仅绑 loopback，用完关闭该 Chrome。查找 Chrome/Edge 可执行文件跨三平台（`CHROME_PATH` 优先）。attach 后 page targets 有挂载延迟——轮询 3s 而非误报\"无标签页\"。6 单测（注入 deps）+ 真 Chrome 145 live e2e（discover→attach→console/network 捕获→DOM→截图→干净断开）。两 IDE 插件入口（VS `ChainlessChain: Chrome Connector` / JB Tools 同名）已随 VS Code 0.37.10 / JetBrains 0.4.53 上市场——本版补上其依赖的 CLI 端命令。"
+        },
         {
           "heading": "Added — cc CLI 0.162.156：agenda/batch 双命令（第四阶段收口）+ @chainlesschain/agent-sdk 0.1.0 npm 首发（CLI-only npm 发版）",
           "body": "> `chainlesschain` 0.162.155 → **0.162.156** 发 npm `latest`（经 `npm-publish.yml`，`--provenance --access public`）；**`@chainlesschain/agent-sdk` 0.1.0 同 run 首发 npm**（平台化第三阶段产物，npm-publish.yml / release.yml 均已加发布 step，防 trap #127 漏发）。纯 `packages/cli/src`（+web-panel dist 随包）+ 新独立包，未触 `pdh/lib` → 无 Android cc bundle rollover / 无 USR_VERSION 改动。命令数 **170 → 172**（新增顶层 `agenda`/`batch`，清单已重生，13 文档面已扫）。\n\n- **`cc agenda` + notify/schedule 双 agent 工具（第四阶段批19）**：Monitor/Cron/Push 暴露为 agent 可调工具（AGENT_TOOLS 21→23）——`notify` 推送到用户已配置的多通道通知器（Telegram/企业微信/钉钉/飞书）；`schedule` 一工具五动作（wakeup/cron/monitor/list/cancel），单轮进程持不住定时器 → 意图持久化到 `~/.chainlesschain/agent-schedule/*.jsonl`（0600），由 `cc agenda list|run|cancel` 消费触发（wakeup/cron 到期 spawn `cc agent -p`，monitor 跑命令匹配 stop_when 即通知）。两工具 LOW 风险、plan 模式禁用；29 单测 + 真进程 smoke。\n- **`cc batch` 动态 worktree 批处理（第四阶段批20，第四阶段全收口）**：把大改动拆成独立单元并行跑——`--units <file>` 或 `--decompose <goal> --parts N`（agent 经 `--json-schema` 产单元 JSON，`--plan-only` 只打印）；每单元独立 git worktree（复用 `cc team --worktree` 的 worktree-isolator），`--test` 门控、`--merge` 顺序集成（后合分支与已合冲突时报告不强合、测试失败单元永不合并）；15 单测 + 2 真 git/worktree 集成测试。\n- **`@chainlesschain/agent-sdk` 0.1.0 首发**：`cc agent` stream-json 双工协议的 TypeScript 正式契约（Agent Protocol v1）——流式事件全词汇 + 审批回调（fail-closed）+ 检查点 + 会话恢复；`AgentSession` spawn 客户端（Windows `cmd.exe /c` shim + `NoDefaultCurrentDirectoryInExePath` 反劫持 + `taskkill /T` 进程树回收内置）、`attachBackgroundSession` 后台管道接管、`/browser` 浏览器安全入口（web-panel bg-\\* 帧）、`/protocol` 纯类型入口；双构建 ESM+CJS，零运行时依赖，36 测试（单元+真管道集成+真 CLI e2e）。VS Code 扩展（vendored）与 web-panel（vite alias）已消费；JetBrains 对齐语言中立 `docs/PROTOCOL.md`。用户文档 `docs-site/docs/chainlesschain/agent-sdk.md`。\n- 修复（随本版仓内，不在 cli 包面）：SDK 真 CLI e2e 抓出的两 IDE 首会话不落盘洞（IDE 重载后 resume 静默空会话）已在两插件修复，随各自下次插件发版出货。"