chainlesschain 0.162.175 → 0.162.176

package/src/lib/update-notice.js

@@ -5,12 +5,12 @@
 import fsDefault from "fs";
 import pathDefault from "path";
 import osDefault from "os";
-import { spawn as spawnDefault } from "child_process";
 import { fileURLToPath } from "url";
 import chalk from "chalk";
 import semver from "semver";
 import { VERSION } from "../constants.js";
 import { readDiskVersion } from "./version-skew.js";
+import { executionBroker } from "./process-execution-broker/index.js";
 
 export const CACHE_TTL_MS = 24 * 60 * 60 * 1000;
 export const NPM_LATEST_URL =
@@ -19,7 +19,7 @@ export const _deps = {
   fs: fsDefault,
   path: pathDefault,
   os: osDefault,
-  spawn: spawnDefault,
+  spawn: (...args) => executionBroker.spawn(...args),
 };
 
 export function cachePath(deps = _deps) {
@@ -95,6 +95,10 @@ export function maybeNotifyUpdate(opts = {}) {
         detached: true,
         stdio: "ignore",
         windowsHide: true,
+        origin: "update:notice-refresh",
+        policy: "allow",
+        scope: "update",
+        shell: false,
       });
       if (child && typeof child.unref === "function") child.unref();
       out.spawned = true;

package/src/lib/with-file-lock.js

@@ -26,6 +26,7 @@ export function withFileLock(targetPath, fn, opts = {}) {
     _fs = defaultFs,
     _now = () => Date.now(),
     _sleep = sleepSync,
+    failIfUnavailable = false,
   } = opts;
 
   const lockDir = `${targetPath}.lock`;
@@ -54,6 +55,12 @@ export function withFileLock(targetPath, fn, opts = {}) {
     }
   }
 
+  if (!held && failIfUnavailable) {
+    const error = new Error(`Could not acquire state lock: ${targetPath}`);
+    error.code = "STATE_LOCK_UNAVAILABLE";
+    throw error;
+  }
+
   try {
     return fn({ locked: held });
   } finally {

package/src/lib/ws-server.js

@@ -14,4 +14,5 @@ export {
   ChainlessChainWSServer,
   tokenizeCommand,
   isCommandBlocked,
+  _deps,
 } from "../gateways/ws/ws-server.js";

package/src/repl/agent-repl.js

@@ -1762,6 +1762,38 @@ export async function startAgentRepl(options = {}) {
   // "close" cleanup instead of a bare exit.
   _replRl = rl;
 
+  // MCP elicitation in the interactive REPL uses the same readline surface as
+  // approvals, while MCPClient retains the protocol-level response shape.
+  const mcpElicitationClients = [
+    _adhocMcp?.mcpClient,
+    _bundleMcpClient,
+  ].filter((client) => client?.setElicitationHandler);
+  for (const client of mcpElicitationClients) {
+    client.setElicitationHandler(
+      (request) =>
+        new Promise((resolve) => {
+          const label = request.message || "MCP server requests additional input";
+          rl.question(chalk.yellow(`\n  MCP [${request.server}] ${label}\n  > `), (answer) => {
+            const trimmed = String(answer || "").trim();
+            if (!trimmed) {
+              resolve({ action: "cancel" });
+            } else {
+              let content = { value: trimmed };
+              try {
+                const parsed = JSON.parse(trimmed);
+                if (parsed && typeof parsed === "object") content = parsed;
+              } catch {
+                // Plain text remains a valid single-field elicitation answer.
+              }
+              resolve({ action: "accept", content });
+            }
+            rl.prompt();
+          });
+        }),
+      { timeoutMs: options.mcpElicitationTimeoutMs },
+    );
+  }
+
   // Inbound channels (--channels, gap-2026-07-11 P0#5): external events enter
   // this session as user turns. rl.emit("line") reuses the REPL's own input
   // path, so an event landing mid-turn queues behind it (pending-lines), and

package/src/repl/clipboard-copy.js

@@ -4,7 +4,7 @@
  * spawn wrapper. The pure parts are unit-tested; real clipboard I/O is
  * environment-dependent and exercised through an injected spawnSync.
  */
-import { spawnSync as _spawnSync } from "node:child_process";
+import { executionBroker } from "../lib/process-execution-broker/index.js";
 
 /** Flatten a message's content (string | content-parts[]) to plain text. Pure. */
 export function messageText(content) {
@@ -78,7 +78,9 @@ export function clipboardCommands(platform = process.platform) {
   ];
 }
 
-const _deps = { spawnSync: _spawnSync };
+const _deps = {
+  spawnSync: (...args) => executionBroker.spawnSync(...args),
+};
 
 /**
  * Write text to the system clipboard, trying each platform candidate in order
@@ -96,6 +98,10 @@ export function copyToClipboard(text, { platform, spawnSync } = {}) {
         input: text,
         encoding: "utf-8",
         windowsHide: true,
+        origin: "repl:clipboard-copy",
+        policy: "allow",
+        scope: "clipboard",
+        shell: false,
       });
     } catch (e) {
       lastErr = e.message;

package/src/repl/pr-comments.js

@@ -9,15 +9,26 @@
  * or a real repo. The REPL (agent-repl.js) wires expandPrComments into the
  * same promptText seam that `/mcp__server__prompt` uses.
  */
-import { execFile } from "child_process";
+import { executionBroker } from "../lib/process-execution-broker/index.js";
+
+export const _deps = {
+  execFile: (...args) => executionBroker.execFile(...args),
+};
 
 /** Default `gh` runner — resolves stdout, rejects with a friendly message. */
-function defaultRunGh(args) {
+function defaultRunGh(args, deps = _deps) {
   return new Promise((resolve, reject) => {
-    execFile(
+    deps.execFile(
       "gh",
       args,
-      { encoding: "utf-8", maxBuffer: 16 * 1024 * 1024 },
+      {
+        encoding: "utf-8",
+        maxBuffer: 16 * 1024 * 1024,
+        origin: "repl:pr-comments",
+        policy: "allow",
+        scope: "pr",
+        shell: false,
+      },
       (err, stdout, stderr) => {
         if (err) {
           if (err.code === "ENOENT") {
@@ -125,7 +136,9 @@ export function formatPrComments(data) {
  * @param {object} opts  { pr?: number, repo?: string, deps?: { runGh } }
  */
 export async function fetchPrComments({ pr = null, repo = null, deps } = {}) {
-  const runGh = deps?.runGh || defaultRunGh;
+  const runtimeDeps = { ..._deps, ...(deps || {}) };
+  const runGh =
+    runtimeDeps.runGh || ((args) => defaultRunGh(args, runtimeDeps));
   const viewArgs = ["pr", "view"];
   if (pr) viewArgs.push(String(pr));
   if (repo) viewArgs.push("--repo", repo);
@@ -175,7 +188,12 @@ const PR_INSTRUCTION =
  * Throws on fetch failure (the REPL surfaces it and skips the turn).
  */
 export async function expandPrComments(line, { deps } = {}) {
-  if (!String(line || "").trim().startsWith("/pr-comments")) return null;
+  if (
+    !String(line || "")
+      .trim()
+      .startsWith("/pr-comments")
+  )
+    return null;
   const { pr, repo } = parsePrCommentsArg(line);
   const data = await fetchPrComments({ pr, repo, deps });
   const block = formatPrComments(data);
@@ -183,5 +201,10 @@ export async function expandPrComments(line, { deps } = {}) {
     (data.reviews?.length || 0) +
     (data.conversation?.length || 0) +
     (data.inline?.length || 0);
-  return { number: data.number, count, block, text: `${PR_INSTRUCTION}\n\n${block}` };
+  return {
+    number: data.number,
+    count,
+    block,
+    text: `${PR_INSTRUCTION}\n\n${block}`,
+  };
 }