chainlesschain 0.162.176 → 0.162.177

package/src/lib/repl-bang-memorize.js

@@ -17,10 +17,10 @@
  * All process/fs access goes through `_deps` for tests.
  */
 
-import { spawnSync as spawnSyncDefault } from "child_process";
 import fsDefault from "fs";
 import pathDefault from "path";
 import { findProjectRoot } from "./project-instructions.js";
+import executionBroker from "./process-execution-broker/index.js";
 
 export const BANG_TIMEOUT_MS = 120_000;
 export const BANG_MAX_BUFFER = 10 * 1024 * 1024;
@@ -32,7 +32,7 @@ export const BANG_OUTPUT_CAP = 30_000;
 export const MEMO_NOTE_MAX = 4_000;
 
 export const _deps = {
-  spawnSync: spawnSyncDefault,
+  spawnSync: (...args) => executionBroker.spawnSync(...args),
   fs: fsDefault,
   path: pathDefault,
 };
@@ -83,12 +83,20 @@ export function runBangCommand(line, opts = {}) {
         timeout: BANG_TIMEOUT_MS,
         maxBuffer: BANG_MAX_BUFFER,
         cwd,
+        origin: "repl:bang-command",
+        policy: "allow",
+        scope: "repl",
+        shell: false,
       })
     : spawnSync("/bin/sh", ["-c", cmd], {
         encoding: "utf-8",
         timeout: BANG_TIMEOUT_MS,
         maxBuffer: BANG_MAX_BUFFER,
         cwd,
+        origin: "repl:bang-command",
+        policy: "allow",
+        scope: "repl",
+        shell: false,
       });
 
   const exitCode = res.status == null ? (res.error ? -1 : 0) : res.status;

package/src/lib/repl-goal.js

@@ -19,6 +19,23 @@ import {
   GoalConditionEngine,
   GOAL_DECISION,
 } from "./goal-condition-engine.js";
+import executionBroker from "./process-execution-broker/index.js";
+
+const brokerRunner = executionBroker.spawnSync.bind(executionBroker);
+
+export const _processDeps = {
+  run: brokerRunner,
+};
+
+function runReplGoalCommand(command, options = {}) {
+  return _processDeps.run(command, [], {
+    ...options,
+    timeout: options.timeout ?? 30000,
+    origin: "repl-goal:exit-zero",
+    policy: "allow",
+    scope: "repl-goal",
+  });
+}
 
 // Interactive sessions are human-paced, so the turn-count budget is generous —
 // it exists only as a backstop (the engine hard-caps at 100 regardless). The
@@ -94,7 +111,7 @@ export function renderGoalVerdict(decision, events) {
 /**
  * Evaluate the session goal against a completed turn's final text. Deterministic
  * conditions run inline (contains/regex on the text; exit-zero/file-exists via
- * injected `spawnSync`/`existsSync`); a model condition delegates to `judge`.
+ * injected process runner/`existsSync`); a model condition delegates to `judge`.
  *
  * @param {GoalConditionEngine} engine
  * @param {string} finalText  the assistant's answer this turn
@@ -110,7 +127,7 @@ export async function evaluateReplGoalTurn(engine, finalText, deps = {}) {
     evaluation = runDeterministicCheck(cond, {
       lastOutput: finalText,
       cwd: deps.cwd,
-      spawnSync: deps.spawnSync,
+      spawnSync: deps.spawnSync || runReplGoalCommand,
       existsSync: deps.existsSync,
     });
   } else if (typeof deps.judge === "function") {

package/src/lib/settings-hook-events.cjs

@@ -17,7 +17,8 @@
  */
 
 const { collectHooks } = require("./settings-hooks.cjs");
-const { runHooks } = require("./hook-runner.cjs");
+const hookRunner = require("./hook-runner.cjs");
+const _deps = { runHooks: hookRunner.runHooks };
 const { buildHookEnvelope } = require("./hook-event-bus.cjs");
 const hookEventLog = require("./hook-event-log.cjs");
 
@@ -143,7 +144,7 @@ function runUserPromptSubmitHooks(
     },
     { sessionId },
   );
-  const outcome = runHooks(sync, payload, {
+  const outcome = _deps.runHooks(sync, payload, {
     cwd,
     event: "UserPromptSubmit",
   });
@@ -211,7 +212,10 @@ function runSessionStartHooks(settingsHooks, { source, cwd, sessionId } = {}) {
     },
     { sessionId },
   );
-  const outcome = runHooks(matched, payload, { cwd, event: "SessionStart" });
+  const outcome = _deps.runHooks(matched, payload, {
+    cwd,
+    event: "SessionStart",
+  });
   return { additionalContext: aggregateContext(outcome.results) };
 }
 
@@ -247,7 +251,7 @@ function runCwdChangedHooks(
     },
     { sessionId },
   );
-  const outcome = runHooks(sync, payload, {
+  const outcome = _deps.runHooks(sync, payload, {
     cwd: newCwd || cwd,
     event: "CwdChanged",
   });
@@ -291,7 +295,7 @@ function runWorktreeCreateHooks(
     },
     { sessionId },
   );
-  const outcome = runHooks(sync, payload, {
+  const outcome = _deps.runHooks(sync, payload, {
     cwd: cwd || worktreePath,
     event: "WorktreeCreate",
   });
@@ -337,7 +341,7 @@ function runWorktreeRemoveHooks(
     },
     { sessionId },
   );
-  const outcome = runHooks(sync, payload, {
+  const outcome = _deps.runHooks(sync, payload, {
     cwd: cwd || worktreePath,
     event: "WorktreeRemove",
   });
@@ -386,7 +390,7 @@ function runInstructionsLoadedHooks(
     },
     { sessionId },
   );
-  const outcome = runHooks(sync, payload, {
+  const outcome = _deps.runHooks(sync, payload, {
     cwd,
     event: "InstructionsLoaded",
   });
@@ -417,7 +421,7 @@ function runObserveHooks(
   const matched = collectHooks(settingsHooks, event, matchTarget || "");
   const { sync } = partitionAsyncHooks(matched);
   if (sync.length === 0) return { decision: "continue", results: [] };
-  return runHooks(
+  return _deps.runHooks(
     sync,
     withDeliveryId(
       event,
@@ -440,4 +444,5 @@ module.exports = {
   aggregateContext,
   partitionAsyncHooks,
   dispatchAsyncHooks,
+  _deps,
 };

package/src/lib/settings-hook-events.js

@@ -0,0 +1,20 @@
+import { runHooks } from "./hook-runner.js";
+import events from "./settings-hook-events.cjs";
+
+events._deps.runHooks = runHooks;
+
+export const {
+  withDeliveryId,
+  runUserPromptSubmitHooks,
+  runSessionStartHooks,
+  runCwdChangedHooks,
+  runWorktreeCreateHooks,
+  runWorktreeRemoveHooks,
+  runInstructionsLoadedHooks,
+  runObserveHooks,
+  aggregateContext,
+  partitionAsyncHooks,
+  dispatchAsyncHooks,
+} = events;
+
+export default events;

package/src/lib/skill-packs/generator.js

@@ -115,6 +115,7 @@ cli-version-hash: "${hash}"
 tags: [${allTags}]
 user-invocable: true
 handler: handler.js
+capabilities: [shell-exec]
 ---
 
 # ${domainDef.displayName}
@@ -176,7 +177,6 @@ export function generateDirectHandler(domainKey, domainDef) {
  * 自动生成 — 请勿手动修改，运行 \`chainlesschain skill sync-cli\` 重新生成
  */
 
-const { spawnSync } = require("child_process");
 
 /** 解析输入字符串为指令+参数数组 */
 function parseInput(input) {
@@ -241,7 +241,7 @@ ${commandGuide}
     const useJson = JSON_SUPPORTED_COMMANDS.has(command) && !cliArgs.includes("--json");
     if (useJson) cliArgs.push("--json");
 
-    // Security: spawnSync uses shell:true (needed to run the chainlesschain.cmd
+    // Security: Broker execution uses shell:true (needed to run the chainlesschain.cmd
     // shim on Windows), which joins cliArgs into a shell command. Reject shell
     // metacharacters so a crafted skill input can't inject commands.
     const unsafeArg = cliArgs.find((a) => /[;&|\`$<>()\\n\\r]/.test(a));
@@ -252,11 +252,16 @@ ${commandGuide}
       };
     }
 
-    // Execute via child process
-    const result = spawnSync("chainlesschain", cliArgs, {
+    const processBroker = context?.processBroker;
+    if (!processBroker || typeof processBroker.runSync !== "function") {
+      return { success: false, error: "Process Broker unavailable for skill execution." };
+    }
+
+    // Execute via the host-scoped Process Broker facade.
+    const result = processBroker.runSync("chainlesschain", cliArgs, {
       encoding: "utf-8",
       shell: true,
-      cwd: context.projectRoot || process.cwd(),
+      cwd: context?.projectRoot || process.cwd(),
       timeout: 30000,
       env: { ...process.env },
     });
@@ -407,7 +412,6 @@ export function generateHybridHandler(domainKey, domainDef) {
  * 自动生成 — 请勿手动修改，运行 \`chainlesschain skill sync-cli\` 重新生成
  */
 
-const { spawnSync } = require("child_process");
 
 const AGENT_ONLY_COMMANDS = new Set([${agentCmds}]);
 const VALID_COMMANDS = new Set(["${commandList}"]);
@@ -470,7 +474,7 @@ const handler = {
     // Direct execution for other commands
     const cliArgs = [...args, "--quiet"];
 
-    // Security: spawnSync uses shell:true (needed to run the chainlesschain.cmd
+    // Security: Broker execution uses shell:true (needed to run the chainlesschain.cmd
     // shim on Windows), which joins cliArgs into a shell command. Reject shell
     // metacharacters so a crafted skill input can't inject commands.
     const unsafeArg = cliArgs.find((a) => /[;&|\`$<>()\\n\\r]/.test(a));
@@ -481,10 +485,15 @@ const handler = {
       };
     }
 
-    const result = spawnSync("chainlesschain", cliArgs, {
+    const processBroker = context?.processBroker;
+    if (!processBroker || typeof processBroker.runSync !== "function") {
+      return { success: false, error: "Process Broker unavailable for skill execution." };
+    }
+
+    const result = processBroker.runSync("chainlesschain", cliArgs, {
       encoding: "utf-8",
       shell: true,
-      cwd: context.projectRoot || process.cwd(),
+      cwd: context?.projectRoot || process.cwd(),
       timeout: 30000,
       env: { ...process.env },
     });

package/src/lib/skill-process-broker.js

@@ -0,0 +1,71 @@
+import executionBroker from "./process-execution-broker/index.js";
+
+const defaultRunSync = executionBroker.spawnSync.bind(executionBroker);
+const defaultRunFileSync = executionBroker.execFileSync.bind(executionBroker);
+
+function skillIdentity(skill = {}) {
+  const identity = String(
+    skill.id || skill.name || skill.skillName || "unknown",
+  )
+    .trim()
+    .replace(/[^a-zA-Z0-9._:-]+/g, "-")
+    .slice(0, 96);
+  return identity || "unknown";
+}
+
+function declaresShellExecution(skill = {}) {
+  return (
+    Array.isArray(skill.capabilities) &&
+    skill.capabilities.some(
+      (capability) => String(capability).toLowerCase() === "shell-exec",
+    )
+  );
+}
+
+/**
+ * Create the narrow process facade exposed to a skill handler.
+ *
+ * The host, not the handler, owns provenance and permission metadata. Generated
+ * handlers can choose argv and ordinary process options, but cannot relabel the
+ * execution or bypass the Broker boundary.
+ */
+export function createSkillProcessBroker(
+  skill,
+  { runSync = defaultRunSync, runFileSync = defaultRunFileSync } = {},
+) {
+  if (!declaresShellExecution(skill)) return null;
+
+  const identity = skillIdentity(skill);
+  const metadata = Object.freeze({
+    origin: `skill:${identity}`,
+    policy: "allow",
+    scope: "skill",
+    pluginId: skill?.pluginId || skill?.plugin?.id || null,
+    pluginVersion: skill?.pluginVersion || skill?.plugin?.version || null,
+    pluginSource: skill?.pluginSource || skill?.plugin?.source || null,
+  });
+
+  return Object.freeze({
+    runSync(file, args = [], options = {}) {
+      return runSync(file, args, {
+        ...options,
+        ...metadata,
+      });
+    },
+
+    runFileSync(file, args = [], options = {}) {
+      return runFileSync(file, args, {
+        ...options,
+        ...metadata,
+        shell: false,
+      });
+    },
+  });
+}
+
+export const _skillProcessDefaults = {
+  runSync: defaultRunSync,
+  runFileSync: defaultRunFileSync,
+};
+
+export { declaresShellExecution as skillDeclaresShellExecution };

package/src/lib/slash-commands.js

@@ -21,11 +21,15 @@
 import fsDefault from "node:fs";
 import pathDefault from "node:path";
 import { homedir } from "node:os";
-import { execSync as execSyncDefault } from "node:child_process";
 import { expandFileRefs } from "../runtime/file-ref-expander.js";
 import { projectRootBase } from "./project-root.cjs";
+import executionBroker from "./process-execution-broker/index.js";
 
-const _deps = { fs: fsDefault, path: pathDefault, execSync: execSyncDefault };
+const _deps = {
+  fs: fsDefault,
+  path: pathDefault,
+  execSync: (...args) => executionBroker.execSync(...args),
+};
 
 /**
  * Split `--- ... ---` frontmatter from the body and camelCase the keys (so
@@ -191,6 +195,10 @@ function runBangs(text, { cwd, execSync }) {
         encoding: "utf-8",
         timeout: BANG_TIMEOUT_MS,
         stdio: ["ignore", "pipe", "pipe"],
+        origin: "slash-command:bang",
+        policy: "allow",
+        scope: "slash-command",
+        shell: true,
       });
       return String(out).trim();
     } catch (err) {

package/src/lib/status-line.cjs

@@ -13,15 +13,14 @@
  *
  * Best-effort throughout: a missing config, a broken command, or a timeout just
  * yields no status line — it never blocks or breaks the REPL. `_deps` injection
- * (spawnSync / settings reader) for tests.
+ * (process runner / settings reader) for tests.
  */
 
-const cpDefault = require("node:child_process");
 const path = require("node:path");
 const { settingsPaths, readSettingsFile } = require("./settings-loader.cjs");
 
 const _deps = {
-  spawnSync: cpDefault.spawnSync,
+  runProcess: null,
   // injectable so tests don't touch real settings files
   readSettings: (cwd, settingsFile) => {
     const out = [];
@@ -181,7 +180,7 @@ function isStatusLineDisabled({ cwd = process.cwd(), settingsFile } = {}) {
 function renderStatusLine(
   config,
   context = {},
-  { cwd, timeout = 5000, columns, rows } = {},
+  { cwd, timeout = 5000, columns, rows, runProcess } = {},
 ) {
   if (!config || !config.command) return null;
   // Claude-Code parity (2.1.153): hand the command the terminal width/height so
@@ -194,7 +193,9 @@ function renderStatusLine(
   if (rws != null) env.LINES = String(rws);
   let res;
   try {
-    res = _deps.spawnSync(config.command, {
+    const runner = runProcess || _deps.runProcess;
+    if (typeof runner !== "function") return null;
+    res = runner(config.command, [], {
       input: JSON.stringify(context),
       cwd: cwd || process.cwd(),
       env,
@@ -202,6 +203,9 @@ function renderStatusLine(
       timeout,
       shell: true,
       maxBuffer: 1024 * 1024,
+      origin: "status-line:command",
+      policy: "allow",
+      scope: "status-line",
     });
   } catch {
     return null; // spawn failure → no status line
@@ -216,11 +220,28 @@ function renderStatusLine(
 }
 
 /** Convenience: load + render in one call (used by the REPL each turn). */
-function getStatusLine({ cwd, settingsFile, sessionId, model, provider, projectDir, timeout, columns, rows } = {}) {
+function getStatusLine({
+  cwd,
+  settingsFile,
+  sessionId,
+  model,
+  provider,
+  projectDir,
+  timeout,
+  columns,
+  rows,
+  runProcess,
+} = {}) {
   const config = loadStatusLineConfig({ cwd, settingsFile });
   if (!config) return null;
   const context = buildContext({ sessionId, model, provider, cwd, projectDir });
-  return renderStatusLine(config, context, { cwd, timeout, columns, rows });
+  return renderStatusLine(config, context, {
+    cwd,
+    timeout,
+    columns,
+    rows,
+    runProcess,
+  });
 }
 
 module.exports = {

package/src/lib/status-line.js

@@ -0,0 +1,33 @@
+import statusLine from "./status-line.cjs";
+import executionBroker from "./process-execution-broker/index.js";
+
+const brokerRunner = executionBroker.spawnSync.bind(executionBroker);
+
+export function renderStatusLine(config, context, options = {}) {
+  return statusLine.renderStatusLine(config, context, {
+    ...options,
+    runProcess:
+      options.runProcess || statusLine._deps.runProcess || brokerRunner,
+  });
+}
+
+export function getStatusLine(options = {}) {
+  return statusLine.getStatusLine({
+    ...options,
+    runProcess:
+      options.runProcess || statusLine._deps.runProcess || brokerRunner,
+  });
+}
+
+export const {
+  loadStatusLineConfig,
+  buildContext,
+  formatTokens,
+  shortenPath,
+  renderDefaultStatusLine,
+  isStatusLineDisabled,
+  terminalSize,
+  _deps,
+} = statusLine;
+
+export default { ...statusLine, renderStatusLine, getStatusLine };