chainlesschain 0.162.158 → 0.162.160

package/src/runtime/coding-agent-contract-shared.cjs

@@ -521,7 +521,7 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
     kind: "code",
     tier: "extension",
     description:
-      "Write and execute code in Python, Node.js, or Bash. Use this when the user needs data processing, calculations, file batch operations, API calls, or any task best solved with a script. Scripts are saved for reference. Missing Python packages are auto-installed.",
+      "Write and execute code in Python, Node.js, or Bash. Use this when the user needs data processing, calculations, file batch operations, API calls, or any task best solved with a script. Scripts run from a temp file unless persist:true. Missing Python packages are NOT auto-installed unless the user opted in (settings runCode.autoInstall).",
     inputSchema: {
       type: "object",
       properties: {
@@ -538,7 +538,7 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
         persist: {
           type: "boolean",
           description:
-            "If true (default), save script in .chainlesschain/agent-scripts/. If false, use temp file and clean up.",
+            "If true, save the script in .chainlesschain/agent-scripts/ for reference. Default false: run from a temp file outside the project.",
         },
       },
       required: ["language", "code"],
@@ -599,6 +599,23 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
           description:
             "Run the sub-agent in the BACKGROUND: the call returns immediately with a running handle and you continue working; the sub-agent's result is delivered to you automatically in a later turn (the run waits for stragglers before finishing). Use for independent subtasks you don't need before your next step.",
         },
+        disallowedTools: {
+          type: "array",
+          items: { type: "string" },
+          description:
+            "Optional tool DENY-list for the sub-agent: these are removed from whatever tool set it would otherwise get (explicit `tools`, agent-file allowlist, or all).",
+        },
+        maxTurns: {
+          type: "number",
+          description:
+            "Optional iteration cap for the sub-agent's own loop (positive integer; default 8 or the profile's cap).",
+        },
+        isolation: {
+          type: "string",
+          enum: ["worktree"],
+          description:
+            "Optional isolation mode: \"worktree\" runs the sub-agent in a fresh git worktree so its file edits land on an isolated branch (diff/merge summary comes back with the result).",
+        },
       },
       required: ["task"],
     },
@@ -1058,6 +1075,94 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
       tags: ["tool:browser_state", "contract:coding-agent", "tier:extension"],
     },
   },
+  {
+    name: "browser_act",
+    title: "Browser Actions",
+    kind: "browser",
+    tier: "extension",
+    description:
+      "Perform EXPLICIT actions in the user's connected Chrome over loopback CDP: click, type, press, navigate (http/https only), waitForSelector, screenshot (saved to a generated temp path — never a chosen one), assertText. Approval-gated (HIGH risk): use browser_state first to observe; only act when the task genuinely requires driving the browser. Steps run in order and fail fast unless continue_on_error; each returns {ok, action, detail, durationMs} and every executed step is audit-logged under ~/.chainlesschain/browser-actions/. Requires a debuggable Chrome (`cc browse chrome launch`).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        actions: {
+          type: "array",
+          description:
+            "Ordered action steps. Each item: {type: click|type|press|navigate|waitForSelector|screenshot|assertText} plus its fields — click/waitForSelector/assertText need selector; type needs selector+text; press needs key; navigate needs url (http/https); waitForSelector accepts timeout_ms (capped 30000); assertText needs expected (substring); screenshot takes NO path (generated internally).",
+          items: {
+            type: "object",
+            properties: {
+              type: {
+                type: "string",
+                enum: [
+                  "click",
+                  "type",
+                  "press",
+                  "navigate",
+                  "waitForSelector",
+                  "screenshot",
+                  "assertText",
+                ],
+                description: "Action kind",
+              },
+              selector: {
+                type: "string",
+                description:
+                  "CSS selector (click/type/waitForSelector/assertText)",
+              },
+              text: { type: "string", description: "Text to type (type)" },
+              key: {
+                type: "string",
+                description: "Key to press, e.g. Enter (press)",
+              },
+              url: {
+                type: "string",
+                description: "http(s):// URL to open (navigate)",
+              },
+              timeout_ms: {
+                type: "number",
+                description:
+                  "waitForSelector timeout in ms (default 5000, max 30000)",
+              },
+              expected: {
+                type: "string",
+                description: "Expected substring (assertText)",
+              },
+            },
+            required: ["type"],
+          },
+        },
+        cdp_url: {
+          type: "string",
+          description:
+            "CDP endpoint — loopback-only, e.g. http://127.0.0.1:9222 (default port 9222)",
+        },
+        port: {
+          type: "number",
+          description: "CDP port of the debuggable Chrome (default 9222)",
+        },
+        tab: {
+          type: "number",
+          description: "Tab index to act in (default 0)",
+        },
+        continue_on_error: {
+          type: "boolean",
+          description:
+            "Keep executing remaining steps after a failed one (default false: fail fast)",
+        },
+      },
+      required: ["actions"],
+    },
+    ...TOOL_POLICY_METADATA.browser_act,
+    permissions: {
+      level: "elevated",
+      scopes: ["browser:act"],
+    },
+    telemetry: {
+      category: "browser",
+      tags: ["tool:browser_act", "contract:coding-agent", "tier:extension"],
+    },
+  },
 ]);
 
 const CODING_AGENT_MVP_TOOL_NAMES = Object.freeze(

package/src/runtime/coding-agent-policy.cjs

@@ -320,6 +320,23 @@ const TOOL_POLICY_METADATA = Object.freeze({
     approvalFlow: "auto",
     isReadOnly: true,
   },
+  // DRIVES the user's connected Chrome over loopback CDP — clicks, typing,
+  // key presses, navigation, screenshots, text assertions. Unlike
+  // browser_state (pure observation, the default) this mutates the page and
+  // acts inside whatever session that browser is logged into, so it carries
+  // the same gating as run_shell/run_code: HIGH risk (the ApprovalGate
+  // CONFIRMs HIGH even on the trusted/auto tier, so auto mode still prompts),
+  // blocked in plan mode, plan approval + explicit confirmation required.
+  browser_act: {
+    riskLevel: RISK_LEVELS.HIGH,
+    category: TOOL_CATEGORIES.EXECUTE,
+    availableInPlanMode: false,
+    planModeBehavior: "blocked",
+    requiresPlanApproval: true,
+    requiresConfirmation: true,
+    approvalFlow: "policy",
+    isReadOnly: false,
+  },
 });
 
 function normalizeGitCommand(command) {

package/src/runtime/headless-runner.js

@@ -42,16 +42,30 @@ import {
   appendUserMessage as jsonlAppendUserMessage,
   appendAssistantMessage as jsonlAppendAssistantMessage,
   appendTokenUsage as jsonlAppendTokenUsage,
+  appendToolCallCompact as jsonlAppendToolCallCompact,
   appendCompactEvent as jsonlAppendCompactEvent,
   rebuildMessages as jsonlRebuildMessages,
   sessionExists as jsonlSessionExists,
   getLastSessionId as jsonlGetLastSessionId,
+  verifySession as jsonlVerifySession,
 } from "../harness/jsonl-session-store.js";
 import { expandFileRefsAsync } from "./file-ref-expander.js";
 import { composeSystemPrompt } from "./system-prompt.js";
 import { buildUserContent } from "../lib/image-input.js";
 import { mergeConsecutiveMessages } from "./message-roles.js";
 import { isHeadlessConfigCommand } from "../lib/headless-config-command.js";
+import {
+  STREAM_PROTOCOL_VERSION,
+  computePolicyDigest,
+  computeToolsHash,
+  buildLoadedSources,
+} from "../lib/headless-manifest.js";
+import {
+  HEADLESS_EXIT_CODES,
+  classifyLoopError,
+  exitCodeForEndReason,
+} from "../lib/exit-codes.cjs";
+import { isolationLevel } from "../lib/agent-sandbox.js";
 import { withQuietStdout } from "./quiet-stdout.js";
 import { CostBudget } from "../lib/cost-budget.js";
 import {
@@ -198,13 +212,18 @@ export function parseToolList(value) {
  * Persistence is intentionally OFF unless a resume/continue/persist intent is
  * present, so a plain one-shot `cc agent -p "..."` writes nothing to disk.
  *
- * @param {object} options { resume, continueSession, sessionId, persistSession }
+ * `--ephemeral` forces persistence OFF regardless of the above: a resume id
+ * still REPLAYS prior history into context, but nothing new is written — the
+ * deterministic-CI shape ("read context, leave no trace").
+ *
+ * @param {object} options { resume, continueSession, sessionId, persistSession, ephemeral }
  * @param {object} store   { getLastSessionId }  (injection seam)
  * @param {string} fallbackId  used when nothing is being resumed
  * @returns {{ sessionId:string, resumeId:string|null, persist:boolean, wantLatest:boolean }}
  */
 export function resolveHeadlessSession(options = {}, store = {}, fallbackId) {
-  const { resume, continueSession, sessionId, persistSession } = options;
+  const { resume, continueSession, sessionId, persistSession, ephemeral } =
+    options;
   const wantLatest = continueSession === true || resume === true;
   let resumeId = null;
   if (wantLatest) {
@@ -215,7 +234,10 @@ export function resolveHeadlessSession(options = {}, store = {}, fallbackId) {
   } else if (typeof resume === "string" && resume.trim()) {
     resumeId = resume.trim();
   }
-  const persist = persistSession === true || resumeId != null || wantLatest;
+  const persist =
+    ephemeral === true
+      ? false
+      : persistSession === true || resumeId != null || wantLatest;
   const id = resumeId || sessionId || fallbackId;
   return { sessionId: id, resumeId, persist, wantLatest };
 }
@@ -436,8 +458,11 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     appendAssistantMessage:
       deps.appendAssistantMessage || jsonlAppendAssistantMessage,
     appendTokenUsage: deps.appendTokenUsage || jsonlAppendTokenUsage,
+    appendToolCallCompact:
+      deps.appendToolCallCompact || jsonlAppendToolCallCompact,
     appendCompactEvent: deps.appendCompactEvent || jsonlAppendCompactEvent,
     getLastSessionId: deps.getLastSessionId || jsonlGetLastSessionId,
+    verifySession: deps.verifySession || jsonlVerifySession,
   };
   const isStream = outputFormat === "stream-json";
   const isJson = outputFormat === "json";
@@ -626,6 +651,30 @@ export async function runAgentHeadless(options = {}, deps = {}) {
   // never duplicated.
   let history = [];
   if (resumeId && store.sessionExists(resumeId)) {
+    // Tamper gate: a broken transcript hash chain means the file was edited
+    // outside the store. Headless runs fail closed — a tampered transcript is
+    // never silently rebuilt into trusted model context. Escape hatch:
+    // CC_ALLOW_TAMPERED_RESUME=1 resumes with a stderr warning.
+    let trust = null;
+    try {
+      trust = store.verifySession(resumeId);
+    } catch {
+      trust = null; // verification unavailable → keep legacy behaviour
+    }
+    if (trust && trust.status === "tampered") {
+      if (process.env.CC_ALLOW_TAMPERED_RESUME !== "1") {
+        const msg =
+          `Session ${resumeId} transcript failed integrity verification (${trust.reason}` +
+          (trust.firstInvalidLine ? ` at line ${trust.firstInvalidLine}` : "") +
+          `). Refusing to resume tampered context; run 'cc session verify ${resumeId}', or set CC_ALLOW_TAMPERED_RESUME=1 to override.`;
+        emitHeadlessError(msg);
+        writeErr(msg + "\n");
+        return { exitCode: 1, result: msg, isError: true };
+      }
+      writeErr(
+        `⚠ Resuming a TAMPERED transcript (${trust.reason}) — restored context is untrusted.\n`,
+      );
+    }
     try {
       history = (store.rebuildMessages(resumeId) || []).filter(
         (m) => m && m.role !== "system",
@@ -871,7 +920,12 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     } catch (err) {
       writeErr(`Error: ${err.message}\n`);
       emitHeadlessError(err.message);
-      return { exitCode: 1, result: err.message, isError: true };
+      // Bad --mcp-config / MCP wiring is a CONFIG error, not a run failure.
+      return {
+        exitCode: HEADLESS_EXIT_CODES.CONFIG_ERROR,
+        result: err.message,
+        isError: true,
+      };
     }
   }
 
@@ -914,7 +968,12 @@ export async function runAgentHeadless(options = {}, deps = {}) {
       writeErr(`Error: ${err.message}\n`);
       if (mcp?.mcpClient) await mcp.mcpClient.disconnectAll().catch(() => {});
       emitHeadlessError(err.message);
-      return { exitCode: 1, result: err.message, isError: true };
+      // A bad --permission-prompt-tool reference is a CONFIG error.
+      return {
+        exitCode: HEADLESS_EXIT_CODES.CONFIG_ERROR,
+        result: err.message,
+        isError: true,
+      };
     }
     if (approvalGate && typeof approvalGate.setConfirmer === "function") {
       approvalGate.setConfirmer(
@@ -1114,6 +1173,12 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     cache_read_input_tokens: 0,
     cache_creation_input_tokens: 0,
   };
+  // 用量归因: attributed child-loop usage (spawn_sub_agent / isolated
+  // run_skill). Kept OUT of the `usage` accumulator above so the result
+  // envelope and the end-of-run aggregate token_usage event keep their
+  // long-standing "main loop only" semantics — the attributed records are
+  // persisted as their own token_usage events instead (no double count).
+  const attributedUsage = [];
   let finalText = "";
   let endReason = "complete";
   let stopForCost = false;
@@ -1140,11 +1205,32 @@ export async function runAgentHeadless(options = {}, deps = {}) {
   emitStream({
     type: "system",
     subtype: "init",
+    // Deterministic-headless manifest (gap-analysis 2026-07-11): protocol
+    // version + persistence + live sources + policy/tool digests so CI can
+    // assert the run shape. Mirrors agent-sdk PROTOCOL_VERSION.
+    protocol_version: STREAM_PROTOCOL_VERSION,
     session_id: sessionId,
+    session_persistence: persist,
     model,
     provider,
     permission_mode: options.permissionMode || "default",
     tools: enabledToolNames,
+    tools_hash: computeToolsHash(enabledToolNames),
+    policy_digest: computePolicyDigest({
+      permissionMode: options.permissionMode,
+      allowedTools: options.allowedTools,
+      disallowedTools: options.disallowedTools,
+      permissionRules,
+    }),
+    loaded_sources: buildLoadedSources({
+      permissionRules,
+      settingsHooks,
+      mcp: Boolean(mcp),
+      enabledToolNames,
+    }),
+    // True isolation level for tool subprocesses: os-sandbox (bwrap) /
+    // container (docker) / policy-only (no sandbox — rules are pre-execution).
+    isolation_level: isolationLevel(options.sandbox),
     max_turns: budget.limit,
     resumed_from: resumeId,
     history_messages: history.length,
@@ -1274,13 +1360,26 @@ export async function runAgentHeadless(options = {}, deps = {}) {
             break;
           }
           case "token-usage": {
-            usage.input_tokens += event.usage?.input_tokens || 0;
-            usage.output_tokens += event.usage?.output_tokens || 0;
-            // Carry prompt-cache tokens into accumulated usage (cost accuracy).
-            usage.cache_read_input_tokens +=
-              event.usage?.cache_read_input_tokens || 0;
-            usage.cache_creation_input_tokens +=
-              event.usage?.cache_creation_input_tokens || 0;
+            if (event.attribution) {
+              // Child-loop (sub-agent / isolated-skill) spend: excluded from
+              // the main `usage` envelope, persisted with its attribution
+              // frame below, but still counted toward the cost budget — it
+              // is real money on the same key.
+              attributedUsage.push({
+                provider: event.provider ?? null,
+                model: event.model ?? null,
+                usage: event.usage || null,
+                attribution: event.attribution,
+              });
+            } else {
+              usage.input_tokens += event.usage?.input_tokens || 0;
+              usage.output_tokens += event.usage?.output_tokens || 0;
+              // Carry prompt-cache tokens into accumulated usage (cost accuracy).
+              usage.cache_read_input_tokens +=
+                event.usage?.cache_read_input_tokens || 0;
+              usage.cache_creation_input_tokens +=
+                event.usage?.cache_creation_input_tokens || 0;
+            }
             emitStream({ type: "token_usage", usage: event.usage });
             if (costBudget) {
               costBudget.add({
@@ -1423,7 +1522,9 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     } else {
       writeErr(`Error: ${message}\n`);
     }
-    return { exitCode: 1, result: message, isError: true };
+    // Provider/transport failures get their own exit code (5) so CI can tell
+    // "the model call failed" from "the run itself errored" (1).
+    return { exitCode: classifyLoopError(err), result: message, isError: true };
   } finally {
     // Drop the signal handlers first — a normal return must not leave a
     // process-wide SIGINT/SIGTERM listener behind (a later Ctrl-C would wrongly
@@ -1539,6 +1640,22 @@ export async function runAgentHeadless(options = {}, deps = {}) {
   if (persist && !isError) {
     try {
       if (finalText) store.appendAssistantMessage(sessionId, finalText);
+      // 用量归因: compact per-tool records (name + error flag + skill hint —
+      // never args) so `cc session usage --by tool|mcp` can aggregate
+      // headless sessions too.
+      for (const tc of toolCalls) {
+        store.appendToolCallCompact(sessionId, {
+          tool: tc.tool,
+          isError: Boolean(tc.is_error),
+          skill:
+            tc.tool === "run_skill" ? tc.args?.skill_name || null : undefined,
+        });
+      }
+      // Attributed child-loop usage first (chronology: it happened during
+      // the run), then the unchanged main-loop aggregate.
+      for (const au of attributedUsage) {
+        store.appendTokenUsage(sessionId, au);
+      }
       store.appendTokenUsage(sessionId, usage);
     } catch {
       // Persistence is best-effort — never fail the run over it.
@@ -1675,7 +1792,13 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     }
   }
 
-  return { exitCode: isError ? 1 : 0, result: finalText, isError };
+  // Exit-code taxonomy: max-turns → 3, cost cap → 4 (both still non-zero, so
+  // "any failure" checks keep working; scripts can now tell exhaustion apart).
+  return {
+    exitCode: exitCodeForEndReason(endReason, isError),
+    result: finalText,
+    isError,
+  };
 }
 
 function buildResultEnvelope({

package/src/runtime/headless-stream.js

@@ -43,6 +43,12 @@ import {
   makePermissionPromptConfirmer,
 } from "./mcp-config.js";
 import { maybeApplyToolSearch } from "./mcp-tool-search.js";
+import {
+  STREAM_PROTOCOL_VERSION,
+  computePolicyDigest,
+  computeToolsHash,
+  buildLoadedSources,
+} from "../lib/headless-manifest.js";
 import { IterationBudget } from "../lib/iteration-budget.js";
 import { CostBudget } from "../lib/cost-budget.js";
 import {
@@ -494,14 +500,20 @@ async function runTurn(messages, loopOptions, { runLoop, emit, costBudget }) {
         break;
       }
       case "token-usage":
-        usage.input_tokens += event.usage?.input_tokens || 0;
-        usage.output_tokens += event.usage?.output_tokens || 0;
-        // Carry prompt-cache tokens into the turn's accumulated usage so the
-        // final `result` envelope (read by IDE panels) reflects caching too.
-        usage.cache_read_input_tokens +=
-          event.usage?.cache_read_input_tokens || 0;
-        usage.cache_creation_input_tokens +=
-          event.usage?.cache_creation_input_tokens || 0;
+        // 用量归因: attributed child-loop usage (sub-agent / isolated skill)
+        // is forwarded on the stream (same wire shape) and counted toward the
+        // cost budget, but stays out of the turn's `usage` envelope, which
+        // keeps its long-standing main-loop-only semantics.
+        if (!event.attribution) {
+          usage.input_tokens += event.usage?.input_tokens || 0;
+          usage.output_tokens += event.usage?.output_tokens || 0;
+          // Carry prompt-cache tokens into the turn's accumulated usage so the
+          // final `result` envelope (read by IDE panels) reflects caching too.
+          usage.cache_read_input_tokens +=
+            event.usage?.cache_read_input_tokens || 0;
+          usage.cache_creation_input_tokens +=
+            event.usage?.cache_creation_input_tokens || 0;
+        }
         emit({ type: "token_usage", usage: event.usage });
         if (costBudget) {
           costBudget.add({
@@ -712,7 +724,9 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
       deps.appendAssistantMessage || jsonlAppendAssistantMessage,
     rebuildMessages: deps.rebuildMessages || jsonlRebuildMessages,
   };
-  const persist = Boolean(options.sessionId);
+  // --ephemeral forces persistence OFF even with an explicit session id (the
+  // id is kept for event correlation only; nothing is written or replayed).
+  const persist = Boolean(options.sessionId) && options.ephemeral !== true;
 
   // ── Interactive approvals (--interactive-approvals; chat-panel UX) ────────
   // CONFIRM-tier decisions (risky shell via the ApprovalGate, settings/hook
@@ -955,11 +969,31 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
   emit({
     type: "system",
     subtype: "init",
+    // Deterministic-headless manifest (gap-analysis 2026-07-11): protocol
+    // version + persistence + live sources + policy/tool digests. The init
+    // event fires BEFORE MCP resolution here (stream consumers expect it
+    // promptly), so `mcp` in loaded_sources reflects the run's MCP intent
+    // (config file / registry auto-connect enabled), not connection outcome.
+    protocol_version: STREAM_PROTOCOL_VERSION,
     session_id: sessionId,
+    session_persistence: persist,
     model,
     provider,
     permission_mode: options.permissionMode || "default",
     tools: enabledToolNames,
+    tools_hash: computeToolsHash(enabledToolNames),
+    policy_digest: computePolicyDigest({
+      permissionMode: options.permissionMode,
+      allowedTools: options.allowedTools,
+      disallowedTools: disabledTools,
+      permissionRules,
+    }),
+    loaded_sources: buildLoadedSources({
+      permissionRules,
+      settingsHooks,
+      mcp: Boolean(options.mcpConfig) || options.useRegisteredMcp !== false,
+      enabledToolNames,
+    }),
     input_format: "stream-json",
     additional_directories: additionalDirectories,
     resumed_messages: resumedMessages,

package/src/runtime/mcp-config.js

@@ -631,17 +631,48 @@ export async function loadProjectMcp(opts = {}, deps = {}) {
   if (root) files.push(path.join(root, ".mcp.json"));
   files.push(path.join(cwd, ".mcp.json"));
 
+  // Fingerprint trust (gap 2026-07-11): the --project-mcp opt-in covers the
+  // file as last seen. First use records a sha256; a CHANGED file is refused
+  // (fail-closed) until re-trusted via CC_PROJECT_MCP_TRUST=1 or
+  // `cc mcp trust-project`. Injectable for tests.
+  const trust =
+    deps.projectMcpTrust ||
+    (await import("../lib/project-mcp-trust.js").catch(() => null));
+
   const servers = {};
   const seenFiles = [];
   for (const file of files) {
     if (!fileExists(file)) continue;
+    let content;
     let raw;
     try {
-      raw = JSON.parse(readFile(file));
+      content = readFile(file);
+      raw = JSON.parse(content);
     } catch (err) {
       writeErr(`  mcp: ignoring malformed ${file} (${err.message})\n`);
       continue;
     }
+    if (trust) {
+      try {
+        const check = trust.checkProjectMcpTrust(file, content);
+        if (check.status === "changed") {
+          if (trust.projectMcpRetrustRequested(env)) {
+            trust.recordProjectMcpTrust(file, content);
+            writeErr(`  mcp: ${file} re-trusted (CC_PROJECT_MCP_TRUST).\n`);
+          } else {
+            writeErr(
+              `  mcp: SKIPPING ${file} — its content changed since it was last trusted. ` +
+                `Review the diff, then re-trust with CC_PROJECT_MCP_TRUST=1 or \`cc mcp trust-project\`.\n`,
+            );
+            continue;
+          }
+        } else if (check.status === "first-use") {
+          trust.recordProjectMcpTrust(file, content);
+        }
+      } catch {
+        /* trust bookkeeping is best-effort; the opt-in gate above still holds */
+      }
+    }
     const parsed = parseMcpServers(raw);
     if (Object.keys(parsed).length > 0) {
       Object.assign(servers, parsed); // later file (cwd) overrides earlier (root)

package/src/runtime/policies/agent-policy.js

@@ -59,6 +59,9 @@ export function resolveAgentPolicy({
     // --remote-control also applies interactively: the REPL starts the
     // paired-device approval bridge at startup (批26).
     remoteControl: overrides.remoteControl === true,
+    // --channels: inbound channel listeners (webhook/telegram) whose events
+    // become user turns in the interactive session (gap-2026-07-11 P0#5).
+    channels: overrides.channels || null,
   };
 }
 

package/src/assets/web-panel/assets/Artifacts-DQvJoQ6E.js

@@ -1 +0,0 @@
-import{E as J,b as z,r as C,I as k,J as y,U as _,c as r,K as o,S,V as B,o as V,f as D,P as d,Q as f,R as p,F as j}from"./vendor-Bn1JzzAn.js";import{M as Q}from"./MarkdownRenderer-7agE3Or1.js";import{u as F,_ as W,d as R}from"./index-DV-Rfmfx.js";import{R as q}from"./icons-DG5UD-6K.js";import"./markdown-Yo_c6Krv.js";import"./markdown-CsiA8-E5.js";const K=J("artifacts",()=>{const h=C([]),t=C(!1),u=C(""),e=C(""),w=C(null),b=C(!1),A=z(()=>[...new Set(h.value.map(a=>a.kind).filter(Boolean))].sort());async function l(){const n=F();t.value=!0;try{const a={type:"artifact-list"};u.value&&(a.kind=u.value),e.value&&(a.session=e.value);const s=await n.sendRaw(a);s&&Array.isArray(s.artifacts)&&(h.value=[...s.artifacts].reverse())}catch{}finally{t.value=!1}}async function g(n){const a=F();b.value=!0,w.value={entry:n,previewable:!1};try{const s=await a.sendRaw({type:"artifact-content",artifactId:n.id});w.value={entry:n,previewable:s?.previewable===!0,encoding:s?.encoding||null,content:s?.content||"",truncated:s?.truncated===!0,reason:s?.reason||null}}catch(s){w.value={entry:n,previewable:!1,reason:s?.message||"preview failed"}}finally{b.value=!1}}function i(){w.value=null}const m=z(()=>{const n=w.value;return!n?.previewable||n.encoding!=="base64"?null:`data:${n.entry?.mime||"image/png"};base64,${n.content}`}),O=z(()=>{const n=w.value;return n?.previewable===!0&&n.encoding==="utf8"&&String(n.entry?.mime||"").toLowerCase()==="text/markdown"});async function P(n,a={}){if(!n?.id)return!1;const s=a.fetch||globalThis.fetch,L=a.document||globalThis.document,T=a.URL||globalThis.URL,N=(a.config||globalThis.window?.__CC_CONFIG__)??{};try{const U=await s(`/api/artifacts/${n.id}/download`,{headers:N.wsToken?{Authorization:`Bearer ${N.wsToken}`}:{}});if(!U.ok)return!1;const G=await U.blob(),E=T.createObjectURL(G),I=L.createElement("a");return I.href=E,I.download=n.title||n.id,L.body.appendChild(I),I.click(),I.remove(),T.revokeObjectURL(E),!0}catch{return!1}}async function M(n){const a=F();if(!n)return!1;try{const s=await a.sendRaw({type:"artifact-remove",artifactId:n});return w.value?.entry?.id===n&&(w.value=null),await l(),s?.found===!0}catch{return!1}}async function c(){const n=F();try{const a=await n.sendRaw({type:"artifact-clean"});return await l(),Number(a?.removed)||0}catch{return 0}}function v(n){const a=Number(n)||0;return a<1024?`${a} B`:a<1024*1024?`${(a/1024).toFixed(1)} KB`:`${(a/(1024*1024)).toFixed(1)} MB`}function x(n){switch(n){case"report":return"blue";case"patch":return"purple";case"screenshot":return"cyan";case"log":return"default";case"data":return"green";default:return"default"}}return{artifacts:h,loading:t,kindFilter:u,sessionFilter:e,kinds:A,preview:w,previewLoading:b,previewImageSrc:m,previewIsMarkdown:O,fetchArtifacts:l,openPreview:g,closePreview:i,removeArtifact:M,cleanExpired:c,downloadArtifact:P,formatSize:v,kindColor:x}}),H={__name:"Artifacts",setup(h,{expose:t}){t();const u=K(),e=[{title:"标题",key:"title",dataIndex:"title",ellipsis:!0},{title:"类型",key:"kind",dataIndex:"kind",width:110},{title:"MIME",dataIndex:"mime",width:160,ellipsis:!0},{title:"大小",key:"size",dataIndex:"size",width:90},{title:"发布时间",key:"createdAt",dataIndex:"createdAt",width:170},{title:"会话",dataIndex:"sessionId",width:160,ellipsis:!0},{title:"操作",key:"actions",width:150}],w=z(()=>u.kinds.map(i=>({label:i,value:i})));async function b(i){await u.removeArtifact(i)?R.success("已删除"):R.error("删除失败")}async function A(){const i=await u.cleanExpired();R.info(i>0?`清理了 ${i} 个过期交付物`:"没有过期交付物")}async function l(i){await u.downloadArtifact(i)||R.error("下载失败")}V(()=>{u.fetchArtifacts()}),D(()=>{u.closePreview()});const g={store:u,columns:e,kindOptions:w,onRemove:b,onClean:A,onDownload:l,computed:z,onBeforeUnmount:D,onMounted:V,get ReloadOutlined(){return q},get message(){return R},MarkdownRenderer:Q,get useArtifactsStore(){return K}};return Object.defineProperty(g,"__isScriptSetup",{enumerable:!1,value:!0}),g}},X={class:"page-header"},Y=["onClick"],Z=["src"],$={key:1,class:"preview-markdown"},ee={key:2,class:"preview-text"},te={class:"preview-meta"},ne={key:0};function ae(h,t,u,e,w,b){const A=k("a-select"),l=k("a-button"),g=k("a-popconfirm"),i=k("a-space"),m=k("a-tag"),O=k("a-table"),P=k("a-empty"),M=k("a-card");return d(),y("div",null,[_("div",X,[t[7]||(t[7]=_("div",null,[_("h2",{class:"page-title"},"交付物"),_("p",{class:"page-sub"}," agent 用 publish_artifact 发布的交付物（报告 / patch / 截图 / 日志），在这里预览与管理（cc artifacts 同源）。 ")],-1)),r(i,null,{default:o(()=>[r(A,{value:e.store.kindFilter,"onUpdate:value":t[0]||(t[0]=c=>e.store.kindFilter=c),style:{"min-width":"120px"},placeholder:"全部类型","allow-clear":"",options:e.kindOptions,onChange:t[1]||(t[1]=c=>e.store.fetchArtifacts())},null,8,["value","options"]),r(g,{title:"删除所有过期交付物？",onConfirm:e.onClean},{default:o(()=>[r(l,null,{default:o(()=>[...t[5]||(t[5]=[f("清理过期",-1)])]),_:1})]),_:1}),r(l,{ghost:"",loading:e.store.loading,onClick:t[2]||(t[2]=c=>e.store.fetchArtifacts())},{icon:o(()=>[r(e.ReloadOutlined)]),default:o(()=>[t[6]||(t[6]=f(" 刷新 ",-1))]),_:1},8,["loading"])]),_:1})]),r(O,{"data-source":e.store.artifacts,columns:e.columns,"row-key":"id",size:"small",pagination:{pageSize:10,hideOnSinglePage:!0}},{bodyCell:o(({column:c,record:v})=>[c.key==="title"?(d(),y("a",{key:0,onClick:x=>e.store.openPreview(v)},p(v.title),9,Y)):c.key==="kind"?(d(),S(m,{key:1,color:e.store.kindColor(v.kind)},{default:o(()=>[f(p(v.kind),1)]),_:2},1032,["color"])):c.key==="size"?(d(),y(j,{key:2},[f(p(e.store.formatSize(v.size)),1)],64)):c.key==="createdAt"?(d(),y(j,{key:3},[f(p((v.createdAt||"").replace("T"," ").slice(0,19)),1)],64)):c.key==="actions"?(d(),S(i,{key:4},{default:o(()=>[r(l,{size:"small",onClick:x=>e.store.openPreview(v)},{default:o(()=>[...t[8]||(t[8]=[f("预览",-1)])]),_:1},8,["onClick"]),r(l,{size:"small",onClick:x=>e.onDownload(v)},{default:o(()=>[...t[9]||(t[9]=[f("下载",-1)])]),_:1},8,["onClick"]),r(g,{title:"删除该交付物？",onConfirm:x=>e.onRemove(v.id)},{default:o(()=>[r(l,{size:"small",danger:""},{default:o(()=>[...t[10]||(t[10]=[f("删除",-1)])]),_:1})]),_:1},8,["onConfirm"])]),_:2},1024)):B("v-if",!0)]),_:1},8,["data-source"]),e.store.preview?(d(),S(M,{key:0,size:"small",class:"preview-card",loading:e.store.previewLoading},{title:o(()=>[r(i,null,{default:o(()=>[_("span",null,p(e.store.preview.entry?.title),1),r(m,{color:e.store.kindColor(e.store.preview.entry?.kind)},{default:o(()=>[f(p(e.store.preview.entry?.kind),1)]),_:1},8,["color"]),r(m,{color:"default"},{default:o(()=>[f(p(e.store.preview.entry?.mime),1)]),_:1}),e.store.preview.truncated?(d(),S(m,{key:0,color:"warning"},{default:o(()=>[...t[11]||(t[11]=[f("已截断预览",-1)])]),_:1})):B("v-if",!0)]),_:1})]),extra:o(()=>[r(i,null,{default:o(()=>[r(l,{size:"small",onClick:t[3]||(t[3]=c=>e.onDownload(e.store.preview.entry))},{default:o(()=>[...t[12]||(t[12]=[f("下载",-1)])]),_:1}),r(l,{size:"small",onClick:t[4]||(t[4]=c=>e.store.closePreview())},{default:o(()=>[...t[13]||(t[13]=[f("关闭",-1)])]),_:1})]),_:1})]),default:o(()=>[e.store.previewImageSrc?(d(),y("img",{key:0,src:e.store.previewImageSrc,class:"preview-image",alt:"artifact preview"},null,8,Z)):e.store.previewIsMarkdown?(d(),y("div",$,[r(e.MarkdownRenderer,{content:e.store.preview.content||""},null,8,["content"])])):e.store.preview.previewable?(d(),y("pre",ee,p(e.store.preview.content||"（空文件）"),1)):(d(),S(P,{key:3,description:e.store.preview.reason||"该类型不支持在线预览，可在本机用 cc artifacts open <id> 打开"},null,8,["description"])),_("div",te,[_("span",null,p(e.store.preview.entry?.id),1),e.store.preview.entry?.sessionId?(d(),y("span",ne," · session "+p(e.store.preview.entry.sessionId),1)):B("v-if",!0),_("span",null," · sha256 "+p((e.store.preview.entry?.sha256||"").slice(0,12))+"…",1)])]),_:1},8,["loading"])):B("v-if",!0)])}const de=W(H,[["render",ae],["__scopeId","data-v-c8b48f8c"],["__file","/tmp/cc-web-panel-StwILP/repo/packages/web-panel/src/views/Artifacts.vue"]]);export{de as default};

package/src/assets/web-panel/assets/ChatBubbleRenderer-BAV9V-t-.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as S,U as n,R as a,S as y,K as C,Q as w,V as x,_ as B,b as s}from"./vendor-Bn1JzzAn.js";import{_ as k}from"./index-DV-Rfmfx.js";import"./icons-DG5UD-6K.js";const N={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),f=String(e.getMonth()+1).padStart(2,"0"),g=String(e.getDate()).padStart(2,"0"),b=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${f}-${g} ${b}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},T={class:"bubble"},L={class:"meta"},M={class:"actor"},R={class:"time"},V={class:"body"};function q(c,d,t,r,i,l){const o=v("a-tag");return u(),S("div",{class:B(["chat-row",{mine:r.isMine}])},[n("div",T,[n("div",L,[n("span",M,a(r.actorLabel),1),n("span",R,a(r.formattedTime),1)]),n("div",V,a(r.messageText),1),t.event.source.adapter?(u(),y(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[w(a(t.event.source.adapter),1)]),_:1},8,["color"])):x("v-if",!0)])],2)}const P=k(N,[["render",q],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-StwILP/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{P as default};

package/src/assets/web-panel/assets/GenericCardRenderer-DxxEdn2r.js

@@ -1 +0,0 @@
-import{I as x,P as s,J as i,U as l,R as n,c as g,K as u,Q as _,V as m,F as C,Z as N,S as T,b as p}from"./vendor-Bn1JzzAn.js";import{_ as w}from"./index-DV-Rfmfx.js";import"./icons-DG5UD-6K.js";const V={__name:"GenericCardRenderer",props:{event:{type:Object,required:!0}},setup(v,{expose:f}){f();const t=v,o=p(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),c=e.getFullYear(),r=String(e.getMonth()+1).padStart(2,"0"),k=String(e.getDate()).padStart(2,"0"),b=String(e.getHours()).padStart(2,"0"),S=String(e.getMinutes()).padStart(2,"0");return`${c}-${r}-${k} ${b}:${S}`}catch{return""}}),h=p(()=>{const e=t.event.content||{};return e.text||e.title||e.subject||e.name||e.prompt||JSON.stringify(e).slice(0,200)}),y=p(()=>{const e=t.event.content||{};return e.body||e.snippet||e.description||e.from||e.counterparty||null}),d=p(()=>{const e=t.event.content||{},c=t.event.extra||{},r=[];return e.amount!=null&&r.push({k:"金额",v:e.amount,color:"gold"}),c.merchant&&r.push({k:"商户",v:c.merchant,color:"green"}),c.orderNo&&r.push({k:"订单",v:c.orderNo,color:"purple"}),e.from&&e.to&&r.push({k:"路线",v:`${e.from} → ${e.to}`,color:"cyan"}),e.trainNo&&r.push({k:"车次",v:e.trainNo,color:"cyan"}),e.model&&r.push({k:"模型",v:e.model,color:"magenta"}),t.event.place&&r.push({k:"地点",v:t.event.place,color:"geekblue"}),r}),a={props:t,formattedTime:o,primaryText:h,secondaryText:y,metaChips:d,computed:p};return Object.defineProperty(a,"__isScriptSetup",{enumerable:!1,value:!0}),a}},B={class:"event-card"},R={class:"card-head"},j={class:"time"},D={key:0,class:"actor"},F={class:"card-body"},G={class:"primary"},I={key:0,class:"secondary"},O={key:0,class:"card-meta"},P={class:"meta-k"};function A(v,f,t,o,h,y){const d=x("a-tag");return s(),i("div",B,[l("div",R,[l("span",j,n(o.formattedTime),1),g(d,{color:"blue",class:"adapter"},{default:u(()=>[_(n(t.event.source.adapter),1)]),_:1}),g(d,{class:"subtype"},{default:u(()=>[_(n(t.event.subtype),1)]),_:1}),t.event.actor?(s(),i("span",D,"@"+n(t.event.actor),1)):m("v-if",!0)]),l("div",F,[l("div",G,n(o.primaryText),1),o.secondaryText?(s(),i("div",I,n(o.secondaryText),1)):m("v-if",!0)]),o.metaChips.length>0?(s(),i("div",O,[(s(!0),i(C,null,N(o.metaChips,a=>(s(),T(d,{key:a.k,color:a.color},{default:u(()=>[l("span",P,n(a.k)+":",1),_(" "+n(a.v),1)]),_:2},1032,["color"]))),128))])):m("v-if",!0)])}const q=w(V,[["render",A],["__scopeId","data-v-c52d08ab"],["__file","/tmp/cc-web-panel-StwILP/repo/packages/web-panel/src/components/pdh/renderers/GenericCardRenderer.vue"]]);export{q as default};

package/src/assets/web-panel/assets/MobileProjects-CVtTqgtg.js

@@ -1 +0,0 @@
-import{I as n,J as g,c as l,K as r,N as u,P as h,U as o,R as t,Q as b}from"./vendor-Bn1JzzAn.js";import{_ as v,b as m}from"./index-DV-Rfmfx.js";import{a8 as y,M}from"./icons-DG5UD-6K.js";const B={__name:"MobileProjects",setup(p,{expose:i}){i();const c=u(),{t:e}=m();function a(){c.push("/projects")}function _(){c.push("/mobile-bridge")}const s={router:c,t:e,goToProjects:a,goToMobileBridge:_,get useRouter(){return u},get useI18n(){return m},get MobileOutlined(){return M},get FolderOutlined(){return y}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}},x={class:"mobile-projects-placeholder"},O={class:"title"},w={class:"subtitle"},k={class:"explainer"};function T(p,i,c,e,a,_){const s=n("a-alert"),d=n("a-button"),f=n("a-space"),P=n("a-empty"),j=n("a-card");return h(),g("div",x,[l(j,null,{default:r(()=>[l(P,{description:!1},{image:r(()=>[l(e.MobileOutlined,{style:{fontSize:"64px",color:"#bfbfbf"}})]),default:r(()=>[o("h2",O,t(e.t("mobileProjects.title")),1),o("p",w,t(e.t("mobileProjects.subtitle")),1),l(s,{message:e.t("mobileProjects.v02Banner"),type:"info","show-icon":"",class:"banner"},null,8,["message"]),o("div",k,[o("h3",null,t(e.t("mobileProjects.currentDirection")),1),o("p",null,t(e.t("mobileProjects.currentDirectionBody")),1),o("ul",null,[o("li",null,t(e.t("mobileProjects.stepPhone")),1),o("li",null,t(e.t("mobileProjects.stepTap")),1),o("li",null,t(e.t("mobileProjects.stepPull")),1)]),o("h3",null,t(e.t("mobileProjects.reverseDirection")),1),o("p",null,t(e.t("mobileProjects.reverseDirectionBody")),1)]),l(f,{class:"actions"},{default:r(()=>[l(d,{type:"primary",onClick:e.goToProjects},{default:r(()=>[l(e.FolderOutlined),b(" "+t(e.t("mobileProjects.viewLocalProjects")),1)]),_:1}),l(d,{onClick:e.goToMobileBridge},{default:r(()=>[l(e.MobileOutlined),b(" "+t(e.t("mobileProjects.checkBridge")),1)]),_:1})]),_:1})]),_:1})]),_:1})])}const C=v(B,[["render",T],["__scopeId","data-v-9262cc45"],["__file","/tmp/cc-web-panel-StwILP/repo/packages/web-panel/src/views/MobileProjects.vue"]]);export{C as default};