chainlesschain 0.162.168 → 0.162.170

package/src/lib/background-phase-reporter.js

@@ -95,6 +95,43 @@ export function createBackgroundPhaseReporter(opts = {}) {
         patch({ pendingApprovals: pending });
       }
     },
+    /**
+     * A resumed run found side-effect ops whose outcome is UNKNOWN (the
+     * ledger reconcile "inspect" bucket): surface `uncertain_side_effect` so
+     * the dashboard demands a look before anything is replayed. The worker
+     * clears the count at the next turn/idle boundary (the verify turn has
+     * then run its course), so this is a within-window annotation, not a
+     * sticky flag. Best-effort; returns whether the state was patched.
+     */
+    reportUncertainSideEffects(count) {
+      if (!enabled) return false;
+      const n = Number(count);
+      if (!Number.isFinite(n) || n <= 0) return false;
+      return patch({
+        phase: "uncertain_side_effect",
+        uncertainSideEffects: Math.floor(n),
+      });
+    },
+    /**
+     * The model asked the user a question in a background turn
+     * (`ask_user_question`): there is no live channel to a human mid-turn, so
+     * the question is PARKED — recorded in the shared state as
+     * `pendingQuestion` with `phase: "needs_input"` (distinct from
+     * waiting_permission: this is a question, not an approval). The worker
+     * keeps `needs_input` through the idle boundary while the question is
+     * unanswered and clears it when the user's reply starts the next turn.
+     */
+    reportQuestion(question) {
+      if (!enabled) return false;
+      const q = question && typeof question === "object" ? question : null;
+      return patch({
+        phase: "needs_input",
+        pendingQuestion: {
+          question: typeof q?.question === "string" ? q.question : "",
+          options: Array.isArray(q?.options) ? q.options : null,
+        },
+      });
+    },
     /**
      * Wrap a (potentially human-blocking) confirmer so the pending window is
      * visible in the background state. Disabled → returns `confirmer`

package/src/lib/install-command-policy.js

@@ -279,6 +279,35 @@ export function classifyCodeAcquisition(command) {
   };
 }
 
+/**
+ * Classify a PLUGIN install (`cc plugin add`/`upgrade`) into the unified
+ * "downloading and running third-party code" trail. A plugin ships executable
+ * components (bin/hooks/LSP/MCP servers run as processes), so installing one
+ * is the plugin-runtime sibling of a global package install — same audit
+ * file, same opt-in policy. Pure; returns null for a nameless input.
+ */
+export function classifyPluginInstall({
+  name,
+  version,
+  scope,
+  source,
+  capabilities,
+} = {}) {
+  if (!name || typeof name !== "string") return null;
+  return {
+    manager: "cc-plugin",
+    packages: [version ? `${name}@${version}` : name],
+    // A user-scope plugin loads in EVERY repo the user runs cc in — the
+    // plugin-runtime analogue of `npm install -g`. Project/local scopes stay
+    // confined to one repository.
+    global: scope === "user",
+    ...(source ? { source: String(source) } : {}),
+    ...(Array.isArray(capabilities) && capabilities.length
+      ? { capabilities }
+      : {}),
+  };
+}
+
 /**
  * Resolve the install-command policy from env/settings (opt-in, so the default
  * shell path is byte-unchanged). `audit` enables the audit trail; `riskFloor`

package/src/lib/packer/smoke-runner.js

@@ -111,6 +111,11 @@ export async function smokeTestExe(ctx) {
         // child.kill on Windows doesn't traverse the process tree; taskkill
         // does. We spawned a single exe with no subprocesses so plain kill
         // is enough in practice, but /T protects us if that ever changes.
+        // Skip when the child has ALREADY exited: Windows recycles pids
+        // within seconds, so taskkilling a dead child's pid can murder an
+        // unrelated process tree that inherited the number (on CI: another
+        // vitest worker or a test's helper child).
+        if (child.exitCode !== null || child.signalCode !== null) return;
         spawn("taskkill", ["/F", "/T", "/PID", String(child.pid)], {
           stdio: "ignore",
         }).unref();

package/src/lib/session-lifecycle.js

@@ -86,6 +86,9 @@ const STATE_ALIASES = new Map([
   ["waiting-permission", SESSION_STATES.WAITING_APPROVAL],
   ["waiting_approval", SESSION_STATES.WAITING_APPROVAL],
   ["awaiting_approval", SESSION_STATES.WAITING_APPROVAL],
+  // A resumed turn with UNKNOWN-outcome side effects blocks on confirmation.
+  ["uncertain_side_effect", SESSION_STATES.WAITING_APPROVAL],
+  ["uncertain-side-effect", SESSION_STATES.WAITING_APPROVAL],
   // supervisor liveness — a running process that vanished is a failure.
   ["lost", SESSION_STATES.FAILED],
   // IDE connection / transport

package/src/runtime/agent-core.js

@@ -2210,17 +2210,29 @@ const EDIT_DIAGNOSTICS_WALL_MS = 6000;
  * never cold-starts a server that isn't there) and fully bounded in time.
  * Disable entirely with CC_EDIT_DIAGNOSTICS=0.
  */
-async function _postEditDiagnostics(filePath, cwd) {
+async function _postEditDiagnostics(filePath, cwd, additionalDirectories) {
   if (process.env.CC_EDIT_DIAGNOSTICS === "0") return null;
+  // Multi-root workspace: resolve the server against the root that CONTAINS
+  // the edited file (mirrors the code_intelligence handler) — editing a file
+  // inside an `--add-dir` root probes/uses THAT project's language server
+  // instead of degrading to "no diagnostics" via the cwd root. Single-root
+  // sessions (no additionalDirectories) resolve to cwd exactly as before.
+  let root;
+  try {
+    root = pickRootForFile(
+      path.resolve(cwd || process.cwd(), filePath),
+      workspaceRootsFor(cwd, additionalDirectories),
+    );
+  } catch {
+    root = path.resolve(cwd || process.cwd());
+  }
   let hasServer = false;
   try {
     const { languageIdForFile, resolveServer } =
       await import("../lib/lsp/lsp-server-registry.js");
     const languageId = languageIdForFile(filePath);
     if (!languageId) return null; // unsupported file type — no LSP, no cost
-    hasServer = Boolean(
-      resolveServer(languageId, path.resolve(cwd || process.cwd())),
-    );
+    hasServer = Boolean(resolveServer(languageId, root));
   } catch {
     return null;
   }
@@ -2228,7 +2240,7 @@ async function _postEditDiagnostics(filePath, cwd) {
 
   const query = (async () => {
     try {
-      const ci = await _getSharedCodeIntel(cwd);
+      const ci = await _getSharedCodeIntel(root);
       const res = await ci.refreshFile(filePath, { timeoutMs: 3000 });
       if (!res || res.available === false) return null;
       const diags = (res.diagnostics || []).filter(
@@ -2263,8 +2275,17 @@ async function _postEditDiagnostics(filePath, cwd) {
 }
 
 /** Merge post-edit diagnostics into a successful edit result (no-op if none). */
-async function _withPostEditDiagnostics(result, filePath, cwd) {
-  const newDiagnostics = await _postEditDiagnostics(filePath, cwd);
+async function _withPostEditDiagnostics(
+  result,
+  filePath,
+  cwd,
+  additionalDirectories,
+) {
+  const newDiagnostics = await _postEditDiagnostics(
+    filePath,
+    cwd,
+    additionalDirectories,
+  );
   return newDiagnostics ? { ...result, newDiagnostics } : result;
 }
 
@@ -2570,6 +2591,7 @@ async function executeToolInner(
             { success: true, path: filePath, size: wrote.size },
             filePath,
             cwd,
+            additionalDirectories,
           ),
           filePath,
           cwd,
@@ -2668,6 +2690,7 @@ async function executeToolInner(
             },
             filePath,
             cwd,
+            additionalDirectories,
           ),
           filePath,
           cwd,
@@ -2731,6 +2754,7 @@ async function executeToolInner(
             },
             filePath,
             cwd,
+            additionalDirectories,
           ),
           filePath,
           cwd,

package/src/runtime/headless-runner.js

@@ -703,6 +703,15 @@ export async function runAgentHeadless(options = {}, deps = {}) {
   // mid-flight does NOT blindly replay an effect that may already have landed.
   // Only active when persisting (an ephemeral/one-shot run can't be resumed);
   // the byte-for-byte default path is untouched when no dangerous tool runs.
+  // Background phase reporter (P0 state-machine producer): when this run IS a
+  // background agent's turn child (CC_BACKGROUND_AGENT_ID set by the worker),
+  // human-blocking windows are surfaced into the shared state file. Created
+  // here — before the resume reconcile below — so an UNKNOWN-outcome side
+  // effect found on resume can be reported too. For every non-background run
+  // this is a disabled no-op.
+  const _bgPhase =
+    deps.backgroundPhaseReporter || createBackgroundPhaseReporter();
+
   const sideEffectRunNonce = String(deps.now ? deps.now() : Date.now());
   let sideEffectLedger = new SideEffectLedger({ clock: deps.now || null });
   let sideEffectSeq = 0;
@@ -765,6 +774,11 @@ export async function runAgentHeadless(options = {}, deps = {}) {
           writeErr(
             `⚠ ${plan.inspect.length} interrupted side-effect(s) need verification before replay (resume ${resumeId}).\n`,
           );
+          // P0 state machine: a background child resuming with UNKNOWN-outcome
+          // ops advertises `uncertain_side_effect` (dashboard: Needs input) —
+          // someone must confirm before any replay. No-op unless this run is a
+          // background turn child; best-effort by construction.
+          _bgPhase.reportUncertainSideEffects(plan.inspect.length);
         }
       } catch {
         resumeSideEffectContext = null;
@@ -1156,15 +1170,9 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     // IDE context is optional polish — never fail the run over it.
   }
 
-  // Background phase reporter (P0 state-machine producer): when this run IS a
-  // background agent's turn child (CC_BACKGROUND_AGENT_ID set by the worker),
-  // the human-blocking confirmers below surface their pending window as
-  // `phase: "waiting_permission"` + `pendingApprovals` in the shared state
-  // file so the dashboard's "Needs input" group is real, not inferred. For
-  // every non-background run this is a disabled no-op (wrapConfirmer returns
-  // the same function object).
-  const _bgPhase =
-    deps.backgroundPhaseReporter || createBackgroundPhaseReporter();
+  // (`_bgPhase` — the background phase reporter — is created before the resume
+  // reconcile block above; the confirmers below reuse it to surface their
+  // pending window as `phase: "waiting_permission"` + `pendingApprovals`.)
 
   // --permission-prompt-tool: route every CONFIRM-tier approval to an MCP tool
   // (loaded via --mcp-config) instead of headless fail-closed. Overrides the
@@ -1328,6 +1336,31 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     enabledToolNames,
     disabledTools,
     iterationBudget: budget,
+    // `ask_user_question` in a BACKGROUND turn child (P0 state-machine
+    // producer for `needs_input`): there is no live channel to a human
+    // mid-turn, but the question IS the structured needs-input signal. Park
+    // it — record `phase: "needs_input"` + the question in the shared state
+    // file (dashboard "Needs input" gets real data; the user's reply arrives
+    // as the next attach prompt) and tell the model to end the turn. A
+    // non-background run supplies no interaction → the handler's existing
+    // `user_not_reachable` path stays byte-identical.
+    ...(_bgPhase.enabled
+      ? {
+          interaction: {
+            askUser: async ({ question, options: qOptions } = {}) => {
+              _bgPhase.reportQuestion({
+                question: typeof question === "string" ? question : "",
+                options: Array.isArray(qOptions) ? qOptions : null,
+              });
+              throw new Error(
+                "question parked for the user (background session). End this " +
+                  "turn now — the user's reply will arrive as the next " +
+                  "message. Do not repeat the question.",
+              );
+            },
+          },
+        }
+      : {}),
     // --mcp-config wiring: tool defs for the LLM + dispatch map + live client.
     mcpClient: mcp?.mcpClient || null,
     extraToolDefinitions: mcp?.extraToolDefinitions || undefined,

package/src/runtime/headless-stream.js

@@ -75,6 +75,15 @@ import {
   rebuildMessages as jsonlRebuildMessages,
   sessionExists as jsonlSessionExists,
 } from "../harness/jsonl-session-store.js";
+import {
+  reconcileSideEffects,
+  classifyToolSideEffect,
+} from "../lib/side-effect-ledger.js";
+import {
+  loadSideEffectLedger,
+  persistSideEffectLedger,
+} from "../lib/side-effect-ledger-store.js";
+import { operationIdempotencyKey } from "../lib/idempotency.js";
 import { getPlanModeManager } from "../lib/plan-mode.js";
 
 /**
@@ -527,6 +536,46 @@ export async function* readJsonLines(input, opts = {}) {
   if (!overflow && buf.trim()) yield buf;
 }
 
+/**
+ * P0-2: on a stream resume, surface any irreversible tool that was in flight
+ * when the prior run died. Same reconcile + wording as the single-prompt
+ * runner (headless-runner.js) and the WS bridge (session-protocol.js): a
+ * `started`-but-unsettled op's outcome is UNKNOWN, so the model must VERIFY
+ * before any replay rather than silently re-issue the effect. Returns
+ * {count, items, notice} or null when nothing needs verification — a clean
+ * (or absent) ledger keeps the resume byte-identical to today.
+ */
+function buildSideEffectRecovery(ledger) {
+  try {
+    const plan = reconcileSideEffects(ledger);
+    if (!plan.inspect.length) return null;
+    const items = plan.plans
+      .filter((p) => p.action === "inspect")
+      .map((p) => {
+        const op = ledger.get(p.opId) || {};
+        return {
+          kind: op.kind || "unknown",
+          key: op.key || null,
+          reason: p.reason,
+        };
+      });
+    const notice =
+      "Recovery notice — the previous run was interrupted while these " +
+      "irreversible operations were in flight; their outcome is UNKNOWN. Do " +
+      "NOT blindly re-run them. Verify whether each already took effect before " +
+      "repeating it, and ask the user if unsure:\n" +
+      items
+        .map(
+          (it) =>
+            `  • [${it.kind}]${it.key ? ` (${it.key})` : ""} — ${it.reason}`,
+        )
+        .join("\n");
+    return { count: items.length, items, notice };
+  } catch {
+    return null;
+  }
+}
+
 /**
  * Run a single turn through the core agent loop, emitting NDJSON events.
  * Returns the turn outcome so the caller can grow history + the result line.
@@ -534,7 +583,7 @@ export async function* readJsonLines(input, opts = {}) {
 async function runTurn(
   messages,
   loopOptions,
-  { runLoop, emit, costBudget, nextToolUseId },
+  { runLoop, emit, costBudget, nextToolUseId, sideEffects },
 ) {
   const usage = {
     input_tokens: 0,
@@ -546,6 +595,10 @@ async function runTurn(
   let finalText = "";
   let endReason = "complete";
   let stopForCost = false;
+  // P0-2: the side-effect op currently in flight (at most one — the loop runs
+  // tools serially). Non-null only between a dangerous tool's tool-executing
+  // and its tool-result.
+  let currentSideEffectOpId = null;
 
   // Collapse consecutive same-role turns before the model call ONLY when the
   // caller flags a resume-degenerate transcript (`mergeRoles`): a resumed
@@ -583,10 +636,52 @@ async function runTurn(
           tool: event.tool,
           args: event.args,
         });
+        // P0-2: record an irreversible effect as STARTED (persisted before it
+        // settles) so a crash before the matching tool-result leaves a
+        // reconcilable "in flight" marker instead of a silent replay — mirrors
+        // the single-prompt runner and the WS bridge. `sideEffects` is null
+        // when the session doesn't persist, keeping that path byte-identical.
+        currentSideEffectOpId = null;
+        if (sideEffects) {
+          const se = classifyToolSideEffect(event.tool, event.args);
+          if (se) {
+            const opId = sideEffects.nextOpId();
+            currentSideEffectOpId = opId;
+            sideEffects.ledger
+              .prepare(opId, {
+                kind: se.kind,
+                key: se.key,
+                // Content-addressed key: a resumed replay of the SAME effect
+                // derives the SAME key, so an external provider can de-dupe
+                // and countDuplicateCommittedEffects can measure `0` repeats.
+                meta: {
+                  tool: event.tool,
+                  idempotencyKey: operationIdempotencyKey({
+                    tool: event.tool,
+                    args: event.args,
+                  }),
+                },
+              })
+              .start(opId);
+            sideEffects.persist();
+          }
+        }
         break;
       }
       case "tool-result": {
         const err = event.error || event.result?.error || null;
+        // P0-2: settle the in-flight side-effect (commit on success, fail on
+        // a clean error) and persist the updated ledger snapshot.
+        if (sideEffects && currentSideEffectOpId) {
+          if (err)
+            sideEffects.ledger.fail(
+              currentSideEffectOpId,
+              String(err).slice(0, 200),
+            );
+          else sideEffects.ledger.commit(currentSideEffectOpId);
+          sideEffects.persist();
+          currentSideEffectOpId = null;
+        }
         // The loop runs tools serially, so this result settles the most
         // recent tool_use (same adjacency rule the is_error attribution
         // below has always used).
@@ -846,6 +941,39 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
   // id is kept for event correlation only; nothing is written or replayed).
   const persist = Boolean(options.sessionId) && options.ephemeral !== true;
 
+  // ── P0-2: crash-safe side-effect ledger — the stream twin of the
+  // single-prompt runner (headless-runner.js) and the WS bridge
+  // (ws-agent-handler.js). Dangerous tools (file writes, opaque shell,
+  // git push, publish/schedule/notify/browser actions) are recorded
+  // prepare→start→commit|fail with the snapshot persisted BEFORE the effect
+  // settles, so an IDE chat-panel worker killed mid-flight is surfaced for
+  // verification on resume instead of being blindly replayed. Only active when
+  // persisting (an anonymous/--ephemeral stream can't be resumed); a run that
+  // touches no dangerous tool writes nothing.
+  const loadLedger = deps.loadSideEffectLedger || loadSideEffectLedger;
+  const persistLedger = deps.persistSideEffectLedger || persistSideEffectLedger;
+  let sideEffectLedger = null;
+  if (persist) {
+    try {
+      sideEffectLedger = loadLedger(sessionId);
+    } catch {
+      // ledger is best-effort — never block the stream over it
+      sideEffectLedger = null;
+    }
+  }
+  let sideEffectSeq = 0;
+  // Run-scoped nonce keeps op ids unique even when two runs resume the same
+  // session (prepare() is idempotent on opId, so a collision would silently
+  // drop the newer record).
+  const sideEffectRunNonce = String(deps.now ? deps.now() : Date.now());
+  const sideEffects = sideEffectLedger
+    ? {
+        ledger: sideEffectLedger,
+        persist: () => persistLedger(sessionId, sideEffectLedger),
+        nextOpId: () => `${sideEffectRunNonce}:${sideEffectSeq++}`,
+      }
+    : null;
+
   // ── Interactive approvals (--interactive-approvals; chat-panel UX) ────────
   // CONFIRM-tier decisions (risky shell via the ApprovalGate, settings/hook
   // `ask`) normally fail closed in headless. With this opt-in they become a
@@ -1163,9 +1291,21 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
   // Resume: replay the persisted conversation (fresh system prompt always
   // leads; persisted system turns are dropped, mirroring runAgentHeadless).
   let resumedMessages = 0;
+  let sideEffectRecovery = null;
   if (persist) {
     try {
       if (store.sessionExists(sessionId)) {
+        // P0-2: reconcile the crash-safe ledger on resume (parity with
+        // runAgentHeadless + the WS bridge). The verify-before-replay system
+        // note goes BEFORE the replayed history — the same slot the
+        // single-prompt runner uses — which also keeps the trailing-role
+        // resume-degeneracy check below intact.
+        if (sideEffectLedger) {
+          sideEffectRecovery = buildSideEffectRecovery(sideEffectLedger);
+        }
+        if (sideEffectRecovery) {
+          messages.push({ role: "system", content: sideEffectRecovery.notice });
+        }
         const history = (store.rebuildMessages(sessionId) || []).filter(
           (m) => m && m.role !== "system",
         );
@@ -1225,6 +1365,22 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
     resumed_messages: resumedMessages,
   });
 
+  // P0-2 visible recovery notice: same `raw` info-line contract as
+  // provider_fallback / version_skew (the shipped IDE panels map `raw` → an
+  // info line), so both panels render it with zero IDE changes. Emitted right
+  // after `init` so consumers keep seeing init as the first line; absent
+  // entirely on a clean (or ledger-free) resume.
+  if (sideEffectRecovery) {
+    emit({
+      type: "raw",
+      subtype: "side_effect_recovery",
+      text: `⚠️ ${sideEffectRecovery.count} interrupted side-effect(s) need verification before replay (resume ${sessionId}).`,
+      count: sideEffectRecovery.count,
+      items: sideEffectRecovery.items,
+      session_id: sessionId,
+    });
+  }
+
   // Goal binding (cc goal, Phase 1) — resolved once and injected on every turn.
   // `--goal <id>` binds explicitly; `--goal` with no value auto-resolves.
   let goalPrepareCallFn;
@@ -2010,7 +2166,7 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
           // Resume-degenerate role merge for the first live model call only.
           mergeRoles: mergeRolesThisTurn,
         },
-        { runLoop, emit, costBudget, nextToolUseId },
+        { runLoop, emit, costBudget, nextToolUseId, sideEffects },
       );
     } catch (err) {
       currentAbort = null;

package/src/workers/background-agent-worker.js

@@ -24,6 +24,7 @@ import {
   writeBackgroundAgentState,
 } from "../lib/background-agent-supervisor.js";
 import { startBackgroundSessionServer } from "../lib/background-session-transport.js";
+import { idlePhaseFor } from "../lib/background-agent-phase.js";
 
 const jobFile = process.argv[2];
 let job;
@@ -128,6 +129,11 @@ function startTurn(argv, promptText) {
     // if the previous turn's child was hard-killed mid-approval (the child's
     // phase reporter clears on settle, but SIGKILL never settles).
     pendingApprovals: 0,
+    // The incoming prompt IS the user's reply to any parked question, and the
+    // uncertain-side-effect annotation only covers the verify turn it was
+    // raised in — both reset at the turn boundary.
+    pendingQuestion: null,
+    uncertainSideEffects: 0,
     agentPid: child.pid,
     // Identity anchor for the supervisor's orphan reclaim (Gap 2): pairs
     // with agentPid the way startedAt pairs with the worker pid, so a
@@ -167,13 +173,20 @@ function maybeContinue() {
     return;
   }
   if (server && server.clientCount() > 0) {
-    phase = "idle";
+    // Parked between turns. Normally `idle` — but a turn that parked an
+    // unanswered ask_user_question stays `needs_input` until the user's reply
+    // starts the next turn (the reply prompt clears pendingQuestion).
+    phase = idlePhaseFor(current);
     mergeState({
       phase,
-      // Between turns nothing can be pending — the approval-owning child has
-      // exited. Honest zero keeps a killed-mid-approval count from parking
-      // the session in "Needs input" forever.
+      // Between turns no APPROVAL can be pending — the approval-owning child
+      // has exited. Honest zero keeps a killed-mid-approval count from
+      // parking the session in "Needs input" forever. (A parked QUESTION is
+      // different: it awaits the user, so pendingQuestion survives idle.)
       pendingApprovals: 0,
+      // The verify turn for any uncertain side effects has now run its
+      // course — the annotation does not outlive it.
+      uncertainSideEffects: 0,
       agentPid: null,
       agentStartedAt: null,
       heartbeatAt: Date.now(),

package/src/assets/web-panel/assets/ChatBubbleRenderer-BVKEhj_y.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as S,U as n,R as a,S as y,K as C,Q as x,V as w,_ as B,b as s}from"./vendor-Bn1JzzAn.js";import{_ as k}from"./index-D1xIbAxQ.js";import"./icons-DG5UD-6K.js";const N={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),b=String(e.getMonth()+1).padStart(2,"0"),f=String(e.getDate()).padStart(2,"0"),g=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${b}-${f} ${g}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},T={class:"bubble"},M={class:"meta"},O={class:"actor"},R={class:"time"},V={class:"body"};function q(c,d,t,r,i,l){const o=v("a-tag");return u(),S("div",{class:B(["chat-row",{mine:r.isMine}])},[n("div",T,[n("div",M,[n("span",O,a(r.actorLabel),1),n("span",R,a(r.formattedTime),1)]),n("div",V,a(r.messageText),1),t.event.source.adapter?(u(),y(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[x(a(t.event.source.adapter),1)]),_:1},8,["color"])):w("v-if",!0)])],2)}const A=k(N,[["render",q],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-tGOYbB/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{A as default};

package/src/assets/web-panel/assets/MobileProjects-BFs2WljZ.js

@@ -1 +0,0 @@
-import{I as n,J as g,c as l,K as r,N as u,P as h,U as o,R as t,Q as b}from"./vendor-Bn1JzzAn.js";import{_ as v,b as m}from"./index-D1xIbAxQ.js";import{a8 as y,M as B}from"./icons-DG5UD-6K.js";const M={__name:"MobileProjects",setup(p,{expose:i}){i();const c=u(),{t:e}=m();function a(){c.push("/projects")}function _(){c.push("/mobile-bridge")}const s={router:c,t:e,goToProjects:a,goToMobileBridge:_,get useRouter(){return u},get useI18n(){return m},get MobileOutlined(){return B},get FolderOutlined(){return y}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}},O={class:"mobile-projects-placeholder"},x={class:"title"},k={class:"subtitle"},w={class:"explainer"};function T(p,i,c,e,a,_){const s=n("a-alert"),d=n("a-button"),f=n("a-space"),P=n("a-empty"),j=n("a-card");return h(),g("div",O,[l(j,null,{default:r(()=>[l(P,{description:!1},{image:r(()=>[l(e.MobileOutlined,{style:{fontSize:"64px",color:"#bfbfbf"}})]),default:r(()=>[o("h2",x,t(e.t("mobileProjects.title")),1),o("p",k,t(e.t("mobileProjects.subtitle")),1),l(s,{message:e.t("mobileProjects.v02Banner"),type:"info","show-icon":"",class:"banner"},null,8,["message"]),o("div",w,[o("h3",null,t(e.t("mobileProjects.currentDirection")),1),o("p",null,t(e.t("mobileProjects.currentDirectionBody")),1),o("ul",null,[o("li",null,t(e.t("mobileProjects.stepPhone")),1),o("li",null,t(e.t("mobileProjects.stepTap")),1),o("li",null,t(e.t("mobileProjects.stepPull")),1)]),o("h3",null,t(e.t("mobileProjects.reverseDirection")),1),o("p",null,t(e.t("mobileProjects.reverseDirectionBody")),1)]),l(f,{class:"actions"},{default:r(()=>[l(d,{type:"primary",onClick:e.goToProjects},{default:r(()=>[l(e.FolderOutlined),b(" "+t(e.t("mobileProjects.viewLocalProjects")),1)]),_:1}),l(d,{onClick:e.goToMobileBridge},{default:r(()=>[l(e.MobileOutlined),b(" "+t(e.t("mobileProjects.checkBridge")),1)]),_:1})]),_:1})]),_:1})]),_:1})])}const N=v(M,[["render",T],["__scopeId","data-v-9262cc45"],["__file","/tmp/cc-web-panel-tGOYbB/repo/packages/web-panel/src/views/MobileProjects.vue"]]);export{N as default};

package/src/assets/web-panel/assets/Terminal-B2Qq38XP.js

@@ -1,3 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["./xterm-BZcWGsqw.js","./markdown-CsiA8-E5.js","./markdown-Dfs9RUU9.css","./addon-fit-CK6X9sAG.js","./xterm-DFuMZ0ql.css"])))=>i.map(i=>d[i]);
-import{u as fe,_ as me,d as V,e as U}from"./index-D1xIbAxQ.js";import{I as z,J as x,U as _,Q as B,S as J,K as T,V as R,c as A,F as K,Z as Q,R as E,o as Z,f as H,w as $,n as D,b as ee,r as S,P as y,_ as ve,a2 as we,a3 as he,a4 as _e}from"./vendor-Bn1JzzAn.js";import{R as ye,b as pe,at as ge}from"./icons-DG5UD-6K.js";const k=new Map,C=new Map,N=new Set,F=new Set;let te=!1;function xe(c){te||(te=!0,c.onMessage(o=>{if(!(!o||typeof o.type!="string")){if(o.type==="terminal.stdout"){const{sessionId:s,data:e,seq:i}=o.payload||{};if(!s)return;let w;try{const d=atob(e||""),f=new Uint8Array(d.length);for(let n=0;n<d.length;n++)f[n]=d.charCodeAt(n);w=new TextDecoder("utf-8").decode(f)}catch{w=""}const u={sessionId:s,data:w,seq:i};k.get(s)?.forEach(d=>d(u)),N.forEach(d=>d(u))}else if(o.type==="terminal.exit"){const{sessionId:s,exitCode:e,signal:i}=o.payload||{};if(!s)return;const w={sessionId:s,exitCode:e,signal:i};C.get(s)?.forEach(u=>u(w)),F.forEach(u=>u(w))}}}))}function ne(c){const o=new TextEncoder().encode(c);let s="";for(let e=0;e<o.length;e++)s+=String.fromCharCode(o[e]);return btoa(s)}function ae(c){const o=atob(c||""),s=new Uint8Array(o.length);for(let e=0;e<o.length;e++)s[e]=o.charCodeAt(e);return new TextDecoder("utf-8").decode(s)}function oe(){const c=fe();xe(c);async function o(n={}){const a=await c.sendRaw({type:"terminal.create",payload:{shell:n.shell,cwd:n.cwd,env:n.env,cols:n.cols,rows:n.rows}});if(a.ok===!1)throw new Error(a.error||"terminal_create_failed");return a.result??a}async function s(){const n=await c.sendRaw({type:"terminal.list",payload:{}});if(n.ok===!1)throw new Error(n.error||"terminal_list_failed");const a=n.result??n;return Array.isArray(a.sessions)?a.sessions:[]}async function e(n,a){const r=await c.sendRaw({type:"terminal.stdin",payload:{sessionId:n,data:ne(String(a))}});if(r.ok===!1)throw new Error(r.error||"terminal_stdin_failed");return r.result??r}async function i(n,a,r){const h=await c.sendRaw({type:"terminal.resize",payload:{sessionId:n,cols:a,rows:r}});if(h.ok===!1)throw new Error(h.error||"terminal_resize_failed");return h.result??h}async function w(n){const a=await c.sendRaw({type:"terminal.close",payload:{sessionId:n}});if(a.ok===!1)throw new Error(a.error||"terminal_close_failed");return a.result??a}async function u(n,a=0){const r=await c.sendRaw({type:"terminal.history",payload:{sessionId:n,fromSeq:a}});if(r.ok===!1)throw new Error(r.error||"terminal_history_failed");const h=r.result??r;return{truncated:!!h.truncated,chunks:(h.chunks||[]).map(L=>({seq:L.seq,data:ae(L.data)}))}}function d(n,a){return n?(k.has(n)||k.set(n,new Set),k.get(n).add(a),()=>{k.get(n)?.delete(a),k.get(n)?.size===0&&k.delete(n)}):(N.add(a),()=>N.delete(a))}function f(n,a){return n?(C.has(n)||C.set(n,new Set),C.get(n).add(a),()=>{C.get(n)?.delete(a),C.get(n)?.size===0&&C.delete(n)}):(F.add(a),()=>F.delete(a))}return{create:o,list:s,stdin:e,resize:i,close:w,history:u,onStdout:d,onExit:f,_internal:{stdoutSubs:k,exitSubs:C,toBase64Utf8:ne,fromBase64Utf8:ae}}}const Se={__name:"Terminal",setup(c,{expose:o}){o();const s=oe(),e=S([]),i=S(null),w=S("pwsh"),u=S(!1),d=S(!1),f=S(""),n=S(""),a=S([]),r=[{value:"pwsh",label:"PowerShell"},{value:"cmd",label:"CMD"},{value:"bash",label:"Bash"},{value:"wsl",label:"WSL"}],h=ee(()=>e.value.find(t=>t.id===i.value));function L(t){return t?t.slice(0,8):""}let O=null,M=null;async function I(){if(O)return{xtermMod:O,fitAddonMod:M};try{O=await U(()=>import("./xterm-BZcWGsqw.js").then(t=>t.x),__vite__mapDeps([0,1,2]),import.meta.url),M=await U(()=>import("./addon-fit-CK6X9sAG.js").then(t=>t.a),__vite__mapDeps([3,1,2]),import.meta.url),await U(()=>Promise.resolve({}),__vite__mapDeps([4]),import.meta.url)}catch(t){throw n.value="xterm 资源加载失败："+(t?.message||"未知错误"),t}return{xtermMod:O,fitAddonMod:M}}async function q(t){await D();const{xtermMod:l,fitAddonMod:p}=await I(),b=a.value.find(v=>v?.dataset?.sessionId===t.id);if(!b)return;const m=new l.Terminal({cursorBlink:!0,fontFamily:'Consolas, "Courier New", monospace',fontSize:13,theme:{background:"#1e1e1e",foreground:"#d4d4d4"},convertEol:!1}),P=new p.FitAddon;m.loadAddon(P),m.open(b);try{P.fit()}catch{}t.xterm=m,t.fitAddon=P;const ie=m.onData(v=>{s.stdin(t.id,v).catch(g=>{String(g?.message||"").includes("dangerous_keyword_blocked")?V.warning("该命令被桌面端拦截（高危关键字）"):V.error("stdin 失败: "+(g?.message||g))})}),ce=s.onStdout(t.id,({data:v,seq:g})=>{t.lastSeq=g,m.write(v)}),de=s.onExit(t.id,({exitCode:v,signal:g})=>{t.alive=!1,t.exitCode=v,t.signal=g,m.writeln(`\r
-\x1B[33m[session exited, code=${v}, signal=${g??"-"}]\x1B[0m`)});t.offs=()=>{try{ie.dispose?.()}catch{}ce(),de()};try{const{chunks:v,truncated:g}=await s.history(t.id,0);g&&m.writeln("\x1B[2m[history truncated — earlier output was evicted]\x1B[0m");for(const G of v)m.write(G.data),t.lastSeq=G.seq}catch(v){m.writeln(`\x1B[31m[history fetch failed: ${v?.message||v}]\x1B[0m`)}const j=new ResizeObserver(()=>{try{P.fit(),s.resize(t.id,m.cols,m.rows).catch(()=>{})}catch{}});j.observe(b);const ue=t.offs;t.offs=()=>{try{j.disconnect()}catch{}ue()}}async function re(){u.value=!0,f.value="";try{const t=await s.create({shell:w.value,cols:80,rows:24}),l={id:t.sessionId,shell:t.shell,cwd:"",alive:!0,lastSeq:0,exitCode:null,xterm:null,fitAddon:null,offs:()=>{}};e.value.push(l),i.value=l.id,await q(l)}catch(t){f.value=t?.message||String(t)}finally{u.value=!1}}async function se(t){try{await s.close(t)}catch(l){f.value=l?.message||String(l)}setTimeout(()=>W(t),500)}function W(t){const l=e.value.findIndex(b=>b.id===t);if(l===-1)return;const p=e.value[l];try{p.offs?.()}catch{}try{p.xterm?.dispose?.()}catch{}e.value.splice(l,1),i.value===t&&(i.value=e.value[0]?.id||null)}function le(t){i.value=t,D(()=>{const l=e.value.find(p=>p.id===t);try{l?.fitAddon?.fit()}catch{}})}async function X(){d.value=!0,f.value="";try{const t=await s.list();for(const l of t){const p=e.value.find(m=>m.id===l.id);if(p){p.alive=l.alive,p.lastSeq=l.lastSeq;continue}const b={id:l.id,shell:l.shell,cwd:l.cwd,alive:l.alive,lastSeq:l.lastSeq,exitCode:null,xterm:null,fitAddon:null,offs:()=>{}};e.value.push(b),await q(b)}!i.value&&e.value.length>0&&(i.value=e.value[0].id)}catch(t){f.value=t?.message||String(t)}finally{d.value=!1}}Z(async()=>{await X()}),H(()=>{for(const t of e.value){try{t.offs?.()}catch{}try{t.xterm?.dispose?.()}catch{}}}),$(i,()=>{D(()=>{const t=h.value;try{t?.fitAddon?.fit()}catch{}})});const Y={term:s,sessions:e,activeId:i,newShell:w,creating:u,loadingList:d,error:f,warning:n,xtermContainers:a,shellOptions:r,active:h,shortId:L,get xtermMod(){return O},set xtermMod(t){O=t},get fitAddonMod(){return M},set fitAddonMod(t){M=t},loadXterm:I,mountXterm:q,onCreate:re,onClose:se,removeSession:W,activate:le,refreshList:X,ref:S,computed:ee,onMounted:Z,onBeforeUnmount:H,nextTick:D,watch:$,get message(){return V},get PlusOutlined(){return ge},get CloseOutlined(){return pe},get ReloadOutlined(){return ye},get useTerminal(){return oe}};return Object.defineProperty(Y,"__isScriptSetup",{enumerable:!1,value:!0}),Y}},be={class:"terminal-page"},ke={class:"terminal-header"},Ce={class:"page-sub"},Ae={class:"terminal-body"},Ee={class:"session-tabs"},Oe=["onClick"],Te={class:"session-shell"},Re={class:"session-id"},Me={key:0,class:"session-empty"},ze={class:"xterm-host"},Le=["data-session-id"],Pe={key:0,class:"xterm-placeholder"},Be={key:1,class:"terminal-footer"},De={key:0,class:"footer-exit"};function qe(c,o,s,e,i,w){const u=z("a-tag"),d=z("a-select"),f=z("a-button"),n=z("a-space"),a=z("a-alert");return y(),x("div",be,[_("div",ke,[_("div",null,[o[3]||(o[3]=_("h2",{class:"page-title"},"远程终端",-1)),_("p",Ce,[o[2]||(o[2]=B(" 桌面端托管的 PTY 会话；Android 端可远程操控同一通道 ",-1)),e.warning?(y(),J(u,{key:0,color:"orange",style:{"margin-left":"8px"}},{default:T(()=>[B(E(e.warning),1)]),_:1})):R("v-if",!0)])]),A(n,null,{default:T(()=>[A(d,{value:e.newShell,"onUpdate:value":o[0]||(o[0]=r=>e.newShell=r),style:{width:"130px"},size:"small",options:e.shellOptions},null,8,["value"]),A(f,{type:"primary",size:"small",loading:e.creating,onClick:e.onCreate},{icon:T(()=>[A(e.PlusOutlined)]),default:T(()=>[o[4]||(o[4]=B(" 新会话 ",-1))]),_:1},8,["loading"]),A(f,{size:"small",loading:e.loadingList,onClick:e.refreshList},{icon:T(()=>[A(e.ReloadOutlined)]),default:T(()=>[o[5]||(o[5]=B(" 刷新 ",-1))]),_:1},8,["loading"])]),_:1})]),e.error?(y(),J(a,{key:0,message:e.error,type:"error","show-icon":"",closable:"",style:{"margin-bottom":"12px"},onClose:o[1]||(o[1]=r=>e.error="")},null,8,["message"])):R("v-if",!0),_("div",Ae,[_("div",Ee,[(y(!0),x(K,null,Q(e.sessions,r=>(y(),x("div",{key:r.id,class:ve(["session-tab",{active:r.id===e.activeId,dead:!r.alive}]),onClick:h=>e.activate(r.id)},[_("span",Te,E(r.shell),1),_("span",Re,E(e.shortId(r.id)),1),A(e.CloseOutlined,{class:"session-close",onClick:we(h=>e.onClose(r.id),["stop"])},null,8,["onClick"])],10,Oe))),128)),e.sessions.length===0?(y(),x("div",Me,' 点击 "新会话" 创建第一个终端 ')):R("v-if",!0)]),_("div",ze,[(y(!0),x(K,null,Q(e.sessions,r=>he((y(),x("div",{key:r.id,ref_for:!0,ref:"xtermContainers","data-session-id":r.id,class:"xterm-container"},null,8,Le)),[[_e,r.id===e.activeId]])),128)),e.sessions.length===0?(y(),x("div",Pe,[...o[6]||(o[6]=[_("span",null,"无活跃会话",-1)])])):R("v-if",!0)])]),e.active?(y(),x("div",Be,[_("span",null,E(e.active.shell)+" · "+E(e.active.cwd||"(默认 cwd)")+" · seq "+E(e.active.lastSeq),1),e.active.alive?R("v-if",!0):(y(),x("span",De,"已退出 (code="+E(e.active.exitCode??"-")+")",1))])):R("v-if",!0)])}const Fe=me(Se,[["render",qe],["__scopeId","data-v-65366a29"],["__file","/tmp/cc-web-panel-tGOYbB/repo/packages/web-panel/src/views/Terminal.vue"]]);export{Fe as default};

package/src/assets/web-panel/assets/devWarning-DaDlyVDY.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-D1xIbAxQ.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-BtsLExcc.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-stTnDJ9y.js";import{a0 as t}from"./index-D1xIbAxQ.js";import"./vendor-Bn1JzzAn.js";import"./responsiveObserve-DUafj9pU.js";import"./useFlexGapSupport-ChecYwC8.js";import"./styleChecker-qO5aCjyk.js";import"./index-DhZgULsY.js";import"./icons-DG5UD-6K.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-C3qDvvIb.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-1GP8MvKL.js";import{a0 as t}from"./index-D1xIbAxQ.js";import"./vendor-Bn1JzzAn.js";import"./index-DhZgULsY.js";import"./icons-DG5UD-6K.js";const s=t(o);export{s as default};