chainlesschain 0.162.181 → 0.162.182

package/src/runtime/agent-core.js

@@ -151,6 +151,56 @@ function runCodeProcess(file, args, options = {}, origin = "run-code") {
   });
 }
 
+function collectWorkspacePluginBinSandboxPolicy(
+  pluginBin,
+  workspaceCwd,
+  executionCwd = workspaceCwd,
+) {
+  const resolvedWorkspaceCwd = path.resolve(workspaceCwd);
+  const pluginPolicyBoundaries = new Set();
+  for (const policyCwd of new Set([
+    resolvedWorkspaceCwd,
+    path.resolve(executionCwd),
+  ])) {
+    const observedPolicy = pluginBin.collectPluginBinSandboxPolicy({
+      cwd: policyCwd,
+    });
+    for (const boundary of observedPolicy?.requiredBoundaries || []) {
+      pluginPolicyBoundaries.add(boundary);
+    }
+  }
+  return pluginBin.pinPluginBinSandboxPolicy(
+    { requiredBoundaries: [...pluginPolicyBoundaries] },
+    { cwd: resolvedWorkspaceCwd },
+  );
+}
+
+function rethrowRunCodeSandboxFailure(error) {
+  if (
+    error?.sandboxFailClosed === true ||
+    (typeof error?.code === "string" &&
+      error.code.startsWith("ERR_PROCESS_SANDBOX"))
+  ) {
+    throw error;
+  }
+}
+
+function createPythonInterpreterProbeSandboxFailure(sandboxPolicy) {
+  const requiredBoundaries = [...(sandboxPolicy?.requiredBoundaries || [])];
+  const error = new Error(
+    `Python interpreter discovery cannot run without its required sandbox boundaries: ${requiredBoundaries.join(", ")}`,
+  );
+  error.code = "ERR_PROCESS_SANDBOX_BOUNDARY_UNSATISFIED";
+  error.sandboxReason = "python_interpreter_probe_requires_sandbox";
+  error.sandboxFailClosed = true;
+  error.requiredBoundaries = requiredBoundaries;
+  error.actualGuarantees = [];
+  error.missingBoundaries = [...requiredBoundaries];
+  error.sandboxBackend = null;
+  error.sandboxCandidateBackend = null;
+  return error;
+}
+
 // ─── Background shell tasks ────────────────────────────────────────────────
 //
 // run_shell is synchronous (execSync) and capped at a foreground timeout, which
@@ -839,6 +889,10 @@ export function getCachedPython() {
   return _cachedPython;
 }
 
+export function _resetCachedPythonForTests() {
+  _cachedPython = null;
+}
+
 /**
  * Gather environment info (cached once per process).
  * @returns {{ os: string, arch: string, python: string|null, pip: boolean, node: string|null, git: boolean }}
@@ -1189,10 +1243,7 @@ function agentFileToolPathRequests(name, args = {}, workspaceRoots = []) {
     case "notebook_edit":
       return one("path", "write");
     case "move_file":
-      return [
-        ...one("path", "write"),
-        ...one("target_path", "write"),
-      ];
+      return [...one("path", "write"), ...one("target_path", "write")];
     case "list_dir":
       return [
         {
@@ -1234,10 +1285,7 @@ function agentFileToolPathRequests(name, args = {}, workspaceRoots = []) {
 }
 
 function guardAgentFileToolPaths(name, args, context, cwd) {
-  const workspaceRoots = workspaceRootsFor(
-    cwd,
-    context.additionalDirectories,
-  );
+  const workspaceRoots = workspaceRootsFor(cwd, context.additionalDirectories);
   const requests = agentFileToolPathRequests(name, args || {}, workspaceRoots);
   for (const request of requests) {
     const verdict = resolveSandboxPolicyPath(request.path, {
@@ -3471,25 +3519,117 @@ async function executeToolInner(
           : {}
         : { shell: shellInv.kind };
 
-      // PATH-based plugin binaries need explicit provenance at the Broker
-      // boundary; otherwise a trusted plugin executable is indistinguishable
-      // from an ambient system command in the process audit log.
-      let pluginBinProvenance = null;
+      // Policy-bearing plugin bins never enter PATH. Their declared alias is
+      // accepted only as one direct command: resolve it to literal argv, attest
+      // the exact target, then give Broker an absolute command with shell:false.
+      // Resolver failures for a matching strict alias are terminal — falling
+      // back to a shell would bypass target identity and manifest requirements.
+      let pluginBinInvocation = null;
+      let reattestPluginBinInvocation = null;
+      let pluginBinSandboxPolicy = null;
+      let pluginBinSandboxExecutionContract = null;
       try {
-        const { resolvePluginBinCommand } =
-          await import("../lib/plugin-runtime/bin.js");
-        pluginBinProvenance = resolvePluginBinCommand(args.command, { cwd });
-      } catch {
-        pluginBinProvenance = null;
+        const pluginBin = await import("../lib/plugin-runtime/bin.js");
+        reattestPluginBinInvocation = pluginBin.reattestPluginBinInvocation;
+        pluginBinSandboxPolicy = collectWorkspacePluginBinSandboxPolicy(
+          pluginBin,
+          cwd,
+          args.cwd || cwd,
+        );
+        pluginBinInvocation = pluginBin.resolvePluginBinInvocation(
+          args.command,
+          {
+            cwd,
+            commandCwd: args.cwd || cwd,
+          },
+        );
+        if (pluginBinInvocation?.sandboxPolicy) {
+          pluginBinSandboxPolicy = pluginBin.pinPluginBinSandboxPolicy(
+            {
+              requiredBoundaries: [
+                ...(pluginBinSandboxPolicy?.requiredBoundaries || []),
+                ...(pluginBinInvocation.sandboxPolicy.requiredBoundaries || []),
+              ],
+            },
+            { cwd },
+          );
+          if (
+            process.platform === "linux" ||
+            (process.platform === "win32" &&
+              pluginBinInvocation.runtime === "node")
+          ) {
+            try {
+              pluginBinSandboxExecutionContract =
+                pluginBin.createPluginSandboxExecutionContract(
+                  pluginBinInvocation,
+                );
+            } catch (error) {
+              if (error?.pluginBinFailClosed) throw error;
+              const contractError = new Error(
+                `plugin sandbox execution contract could not be created: ${error.message}`,
+              );
+              contractError.code = "ERR_PLUGIN_SANDBOX_CONTRACT_UNATTESTED";
+              contractError.pluginBinFailClosed = true;
+              throw contractError;
+            }
+          }
+        }
+      } catch (err) {
+        if (err?.pluginBinFailClosed) {
+          const policyVia =
+            err.code === "ERR_PLUGIN_BIN_DISCOVERY_FAILED"
+              ? "plugin-bin-pinned-sandbox-policy"
+              : "plugin-bin-direct-invocation";
+          return attachDescriptor(
+            {
+              error: `[Plugin bin] ${err.message}`,
+              policy: {
+                decision: "deny",
+                via: policyVia,
+                reason: err.code || "plugin_bin_resolution_failed",
+              },
+              shellCommandPolicy: shellPolicy,
+              approval: approvalOutcome,
+            },
+            override || runtimeDescriptor,
+          );
+        }
+        pluginBinInvocation = null;
       }
-      const processOrigin = pluginBinProvenance
+      const processOrigin = pluginBinInvocation
         ? "plugin:bin"
         : "tool:run_shell";
-      const processProvenance = pluginBinProvenance
+      const processProvenance = {
+        ...(pluginBinInvocation
+          ? {
+              pluginId: pluginBinInvocation.pluginId,
+              pluginVersion: pluginBinInvocation.pluginVersion,
+              pluginSource: pluginBinInvocation.pluginSource,
+              pluginExecutableIdentity: pluginBinInvocation.executableIdentity,
+            }
+          : {}),
+        ...(pluginBinSandboxPolicy
+          ? { sandboxPolicy: pluginBinSandboxPolicy }
+          : {}),
+        ...(pluginBinSandboxExecutionContract
+          ? {
+              sandboxExecutionContract: pluginBinSandboxExecutionContract,
+            }
+          : {}),
+      };
+      const pluginBinResult = pluginBinInvocation
         ? {
-            pluginId: pluginBinProvenance.pluginId,
-            pluginVersion: pluginBinProvenance.pluginVersion,
-            pluginSource: pluginBinProvenance.pluginSource,
+            plugin_bin: {
+              plugin: pluginBinInvocation.pluginId,
+              version: pluginBinInvocation.pluginVersion,
+              name: pluginBinInvocation.binName,
+              target: pluginBinInvocation.binPath,
+              runtime: pluginBinInvocation.runtime,
+              sha256: pluginBinInvocation.executableIdentity.sha256,
+              identity_attested: true,
+              launch_identity_reattested: false,
+              direct_argv: true,
+            },
           }
         : {};
 
@@ -3504,6 +3644,23 @@ async function executeToolInner(
             policy: { decision: "deny", via: "sandbox" },
           });
         }
+        if (
+          (process.platform === "linux" || process.platform === "win32") &&
+          pluginBinSandboxPolicy?.requiredBoundaries?.length > 0
+        ) {
+          return attachDescriptor({
+            error:
+              "[Plugin bin] The current strong plugin boundary supports foreground execution only; background execution is fail-closed until Broker-owned process-tree teardown is available.",
+            policy: {
+              decision: "deny",
+              via: "plugin-bin-pinned-sandbox-policy",
+              reason: "background_execution_unsupported",
+            },
+            ...pluginBinResult,
+            shellCommandPolicy: shellPolicy,
+            approval: approvalOutcome,
+          });
+        }
         // Free memory from idle background tasks before adding another, so a
         // long agent run can't accumulate forgotten dev servers (no-op unless
         // the machine is actually under memory pressure).
@@ -3559,9 +3716,29 @@ async function executeToolInner(
             scope: "agent",
             ...processProvenance,
           };
-          const child = shellInv.useDefaultShell
-            ? broker.spawn(args.command, [], brokerOpts)
-            : broker.spawn(shellInv.file, shellInv.argv, brokerOpts);
+          let child;
+          if (pluginBinInvocation) {
+            reattestPluginBinInvocation(pluginBinInvocation);
+            pluginBinResult.plugin_bin.launch_identity_reattested = true;
+            child = broker.spawn(
+              pluginBinSandboxExecutionContract?.kind ===
+                "strict-plugin-node-bin"
+                ? pluginBinSandboxExecutionContract.runtimePath
+                : pluginBinInvocation.command,
+              pluginBinInvocation.args,
+              {
+                ...brokerOpts,
+                cwd:
+                  pluginBinSandboxExecutionContract?.workingDirectory ||
+                  brokerOpts.cwd,
+                shell: false,
+              },
+            );
+          } else {
+            child = shellInv.useDefaultShell
+              ? broker.spawn(args.command, [], brokerOpts)
+              : broker.spawn(shellInv.file, shellInv.argv, brokerOpts);
+          }
           task.child = child;
           if (child.stdout) {
             child.stdout.setEncoding("utf8");
@@ -3612,6 +3789,7 @@ async function executeToolInner(
             status: task.status,
             command: task.command,
             ...shellMeta,
+            ...pluginBinResult,
             hint: "Poll output and completion with the check_shell tool using this task_id. Kill long-lived servers with check_shell { task_id, kill: true } when done.",
             shellCommandPolicy: shellPolicy,
             approval: approvalOutcome,
@@ -3621,6 +3799,23 @@ async function executeToolInner(
       }
 
       if (sandbox) {
+        if (pluginBinSandboxPolicy) {
+          return attachDescriptor(
+            {
+              error:
+                "[Plugin bin] A strict plugin bin policy cannot be combined with the legacy ephemeral shell sandbox. Run without that sandbox so the ProcessExecutionBroker can enforce the pinned plugin boundary union.",
+              policy: {
+                decision: "deny",
+                via: "plugin-bin-pinned-sandbox-policy",
+                reason: "conflicting_sandbox_routes",
+              },
+              ...pluginBinResult,
+              shellCommandPolicy: shellPolicy,
+              approval: approvalOutcome,
+            },
+            override || runtimeDescriptor,
+          );
+        }
         const { executeSandboxedShell, sandboxSummary } =
           await import("../lib/agent-sandbox.js");
         // Domain-restricted networking is ENFORCED by routing the sandboxed
@@ -3741,7 +3936,35 @@ async function executeToolInner(
           scope: "agent",
           ...processProvenance,
         };
-        if (shellInv.useDefaultShell) {
+        if (pluginBinInvocation) {
+          reattestPluginBinInvocation(pluginBinInvocation);
+          pluginBinResult.plugin_bin.launch_identity_reattested = true;
+          const res = broker.spawnSync(
+            pluginBinSandboxExecutionContract?.kind === "strict-plugin-node-bin"
+              ? pluginBinSandboxExecutionContract.runtimePath
+              : pluginBinInvocation.command,
+            pluginBinInvocation.args,
+            {
+              ...brokerExecOpts,
+              cwd:
+                pluginBinSandboxExecutionContract?.workingDirectory ||
+                brokerExecOpts.cwd,
+              shell: false,
+              windowsHide: true,
+            },
+          );
+          if (res.error) throw res.error;
+          if (res.status !== 0) {
+            const e = new Error(
+              `Plugin bin failed (exit ${res.status}): ${pluginBinInvocation.binName}`,
+            );
+            e.status = res.status;
+            e.stdout = res.stdout;
+            e.stderr = res.stderr;
+            throw e;
+          }
+          output = res.stdout ?? "";
+        } else if (shellInv.useDefaultShell) {
           output = broker.execSync(args.command, brokerExecOpts);
         } else {
           // PowerShell route: explicit argv, no intermediate default shell.
@@ -3783,6 +4006,7 @@ async function executeToolInner(
           {
             stdout: output.substring(0, 30000),
             ...shellMeta,
+            ...pluginBinResult,
             shellCommandPolicy: shellPolicy,
             approval: approvalOutcome,
           },
@@ -3803,6 +4027,7 @@ async function executeToolInner(
             stderr: (err.stderr || "").substring(0, 2000),
             exitCode: err.status,
             ...shellMeta,
+            ...pluginBinResult,
             shellCommandPolicy: shellPolicy,
             approval: approvalOutcome,
           },
@@ -4315,6 +4540,9 @@ async function executeToolInner(
             : 60000;
           const entry = store.createMonitor({
             command: args.command,
+            // Bind the persisted command to the host/session workspace. This
+            // value comes from executeTool's trusted context, never model args.
+            workspaceCwd: path.resolve(cwd),
             intervalMs,
             stopWhen: args.stop_when || null,
             notify: args.notify_title ? { title: args.notify_title } : null,
@@ -5160,6 +5388,54 @@ async function _executeRunCode(args, cwd) {
     };
   }
 
+  // Every agent-generated interpreter process inherits the tighten-only union
+  // of strict Plugin bin boundaries visible from this workspace. Discover and
+  // pin it before creating a persistent directory, writing a temporary script,
+  // or probing an interpreter so discovery failure cannot fall through to an
+  // unbounded native spawn.
+  let pluginBinSandboxPolicy = null;
+  try {
+    const pluginBin = await import("../lib/plugin-runtime/bin.js");
+    pluginBinSandboxPolicy = collectWorkspacePluginBinSandboxPolicy(
+      pluginBin,
+      cwd,
+    );
+  } catch (error) {
+    return {
+      error: `[Plugin bin] ${error.message}`,
+      policy: {
+        decision: "deny",
+        via: "plugin-bin-pinned-sandbox-policy",
+        reason: error.code || "ERR_PLUGIN_BIN_SANDBOX_POLICY_DISCOVERY_FAILED",
+      },
+    };
+  }
+  const pluginBinSandboxOptions = pluginBinSandboxPolicy
+    ? { sandboxPolicy: pluginBinSandboxPolicy }
+    : {};
+
+  // cli-anything's Python discovery probes candidate executables through its
+  // own Broker call. That probe cannot inherit this run_code invocation's
+  // pinned Plugin sandbox policy, so never launch it when strict boundaries
+  // are required. A previously cached interpreter is safe to execute here
+  // because the real script (and any pip/retry process) still goes through
+  // runCodeProcess with the exact pinned policy below.
+  let cachedPythonInterpreter = null;
+  if (
+    lang === "python" &&
+    pluginBinSandboxPolicy?.requiredBoundaries?.length > 0
+  ) {
+    if (
+      _cachedPython?.found === true &&
+      typeof _cachedPython.command === "string" &&
+      _cachedPython.command.trim()
+    ) {
+      cachedPythonInterpreter = _cachedPython.command;
+    } else {
+      throw createPythonInterpreterProbeSandboxFailure(pluginBinSandboxPolicy);
+    }
+  }
+
   // Determine script path
   let scriptPath;
   if (persist) {
@@ -5182,8 +5458,12 @@ async function _executeRunCode(args, cwd) {
     // Determine interpreter
     let interpreter;
     if (lang === "python") {
-      const py = getCachedPython();
-      interpreter = py.found ? py.command : "python";
+      if (cachedPythonInterpreter) {
+        interpreter = cachedPythonInterpreter;
+      } else {
+        const py = getCachedPython();
+        interpreter = py.found ? py.command : "python";
+      }
     } else if (lang === "node") {
       interpreter = "node";
     } else {
@@ -5198,8 +5478,13 @@ async function _executeRunCode(args, cwd) {
         encoding: "utf8",
         timeout: timeoutSec * 1000,
         maxBuffer: 5 * 1024 * 1024,
+        ...pluginBinSandboxOptions,
       });
     } catch (err) {
+      // Broker boundary errors carry the required/actual/missing guarantees and
+      // backend attestation. Preserve that exact structured error for callers
+      // instead of flattening it into run_code's generic runtime classifier.
+      rethrowRunCodeSandboxFailure(err);
       const stderr = (err.stderr || "").toString();
       const message = err.message || "";
       const classified = classifyError(stderr, message, err.status, lang);
@@ -5291,6 +5576,36 @@ async function _executeRunCode(args, cwd) {
             /* unified audit must never affect the install itself */
           }
 
+          const autoInstallFailure = (installError) => {
+            recordInstallAudit({
+              package: packageName,
+              interpreter,
+              cwd,
+              outcome: "failed",
+              detail: (
+                installError.stderr ||
+                installError.message ||
+                ""
+              ).substring(0, 200),
+            });
+            auditUnifiedInstall(
+              "failed",
+              (installError.stderr || installError.message || "").substring(
+                0,
+                200,
+              ),
+            );
+            return {
+              error: (stderr || message).substring(0, 5000),
+              stderr: stderr.substring(0, 5000),
+              exitCode: err.status,
+              language: lang,
+              ...classified,
+              hint: `Failed to auto-install "${packageName}". ${(installError.stderr || installError.message || "").substring(0, 500)}`,
+              scriptPath: persist ? scriptPath : undefined,
+            };
+          };
+
           // Attempt pip install
           try {
             runCodeProcess(
@@ -5302,18 +5617,27 @@ async function _executeRunCode(args, cwd) {
                 timeout: 120000,
                 maxBuffer: 2 * 1024 * 1024,
                 stdio: ["pipe", "pipe", "pipe"],
+                ...pluginBinSandboxOptions,
               },
               "run-code-install",
             );
-            recordInstallAudit({
-              package: packageName,
-              interpreter,
-              cwd,
-              outcome: "installed",
-            });
-            auditUnifiedInstall("installed");
+          } catch (pipErr) {
+            const failure = autoInstallFailure(pipErr);
+            rethrowRunCodeSandboxFailure(pipErr);
+            return failure;
+          }
+          recordInstallAudit({
+            package: packageName,
+            interpreter,
+            cwd,
+            outcome: "installed",
+          });
+          auditUnifiedInstall("installed");
 
-            // Retry execution
+          // Keep retry separate from the install catch: either Broker call can
+          // carry an independently attested fail-closed boundary error, and
+          // neither may be flattened into the legacy auto-install result.
+          try {
             const retryStart = Date.now();
             const retryOutput = runCodeProcess(
               interpreter,
@@ -5323,6 +5647,7 @@ async function _executeRunCode(args, cwd) {
                 encoding: "utf8",
                 timeout: timeoutSec * 1000,
                 maxBuffer: 5 * 1024 * 1024,
+                ...pluginBinSandboxOptions,
               },
               "run-code-retry",
             );
@@ -5336,25 +5661,24 @@ async function _executeRunCode(args, cwd) {
               autoInstalled: [packageName],
               scriptPath: persist ? scriptPath : undefined,
             };
-          } catch (pipErr) {
-            recordInstallAudit({
-              package: packageName,
-              interpreter,
-              cwd,
-              outcome: "failed",
-              detail: (pipErr.stderr || pipErr.message || "").substring(0, 200),
-            });
-            auditUnifiedInstall(
-              "failed",
-              (pipErr.stderr || pipErr.message || "").substring(0, 200),
+          } catch (retryErr) {
+            rethrowRunCodeSandboxFailure(retryErr);
+            const retryStderr = (retryErr.stderr || "").toString();
+            const retryMessage = retryErr.message || "";
+            const retryClassified = classifyError(
+              retryStderr,
+              retryMessage,
+              retryErr.status,
+              lang,
             );
             return {
-              error: (stderr || message).substring(0, 5000),
-              stderr: stderr.substring(0, 5000),
-              exitCode: err.status,
+              error: (retryStderr || retryMessage).substring(0, 5000),
+              stderr: retryStderr.substring(0, 5000),
+              exitCode: retryErr.status,
               language: lang,
-              ...classified,
-              hint: `Failed to auto-install "${packageName}". ${(pipErr.stderr || pipErr.message || "").substring(0, 500)}`,
+              ...retryClassified,
+              hint: `Package "${packageName}" was installed, but the script retry failed.`,
+              autoInstalled: [packageName],
               scriptPath: persist ? scriptPath : undefined,
             };
           }

package/src/runtime/agent-runtime.js

@@ -23,6 +23,7 @@ import { MCPClient, MCPServerConfig } from "../harness/mcp-client.js";
 import sharedManagedToolPolicy from "./coding-agent-managed-tool-policy.cjs";
 import { findProjectRoot, loadProjectConfig } from "../lib/project-detector.js";
 import { loadConfig } from "../lib/config-manager.js";
+import { collectWorkspacePluginBinSandboxPolicy } from "../lib/plugin-runtime/bin.js";
 
 const {
   DEFAULT_ALLOWED_MCP_SERVER_NAMES,
@@ -63,6 +64,8 @@ export class AgentRuntime {
       createSessionManager:
         deps.createSessionManager ||
         ((options) => new WSSessionManager(options)),
+      createPtyManager:
+        deps.createPtyManager || ((options) => new PtyManager(options)),
       createMcpClient: deps.createMcpClient || (() => new MCPClient()),
       createMcpServerConfig:
         deps.createMcpServerConfig || ((db) => new MCPServerConfig(db)),
@@ -449,6 +452,7 @@ export class AgentRuntime {
     const projectName =
       projectConfig?.name || (projectRoot ? path.basename(projectRoot) : null);
     const mode = projectRoot ? "project" : "global";
+    const workspacePolicyCwd = path.resolve(projectRoot || process.cwd());
 
     let db = null;
     let rawDb = null;
@@ -492,6 +496,7 @@ export class AgentRuntime {
           maxConnections: 20,
           timeout: 60000,
           sessionManager,
+          projectRoot: workspacePolicyCwd,
         });
         // ChainlessChainWSServer extends EventEmitter and emits "error"
         // synchronously on bind failure (in addition to rejecting start()).
@@ -530,7 +535,14 @@ export class AgentRuntime {
     // matching topics through `terminalHandlers.handlers`, falling back to
     // the original CLI dispatcher for everything else.
     const wsBroadcastRef = { current: null };
-    const ptyManager = new PtyManager();
+    const ptyManager = this.deps.createPtyManager({
+      policyCwd: workspacePolicyCwd,
+      resolveSandboxPolicy: ({ workspaceCwd, executionCwd }) =>
+        collectWorkspacePluginBinSandboxPolicy({
+          workspaceCwd,
+          executionCwd,
+        }),
+    });
     const terminal = createTerminalHandlers({
       ptyManager,
       broadcast: (frame) => wsBroadcastRef.current?.(frame),

package/src/runtime/headless-runner.js

@@ -433,9 +433,10 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     }
   }
 
-  // Put trusted plugins' bin/ executables on PATH for this headless run (Phase
-  // 3.3n) so run_shell can invoke them by name. Trust-gated. The process exits
-  // at the end of the run, so no explicit restore is needed.
+  // Preserve PATH compatibility for trusted legacy bin components that have no
+  // sandboxPolicy. Policy-bearing bins are excluded here and resolved as exact
+  // direct Broker invocations by agent-core. The process exits at the end of
+  // the run, so no explicit restore is needed.
   try {
     const { applyPluginBinPath } = await import("../lib/plugin-runtime/bin.js");
     applyPluginBinPath({ cwd });

package/src/assets/web-panel/assets/Terminal-Cgb4eLB_.js

@@ -1,3 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["./xterm-BZcWGsqw.js","./markdown-CsiA8-E5.js","./markdown-Dfs9RUU9.css","./addon-fit-CK6X9sAG.js","./xterm-DFuMZ0ql.css"])))=>i.map(i=>d[i]);
-import{u as fe,_ as me,d as U,e as V}from"./index-BEVm0lCS.js";import{I as z,J as x,U as _,Q as D,S as K,K as T,V as R,c as A,F as Q,Z,R as E,o as G,f as H,w as $,n as q,b as ee,r as S,P as y,_ as ve,a2 as we,a3 as he,a4 as _e}from"./vendor-Bn1JzzAn.js";import{R as ye,b as pe,at as ge}from"./icons-DG5UD-6K.js";const k=new Map,C=new Map,F=new Set,N=new Set;let te=!1;function xe(c){te||(te=!0,c.onMessage(o=>{if(!(!o||typeof o.type!="string")){if(o.type==="terminal.stdout"){const{sessionId:s,data:e,seq:i}=o.payload||{};if(!s)return;let w;try{const d=atob(e||""),f=new Uint8Array(d.length);for(let n=0;n<d.length;n++)f[n]=d.charCodeAt(n);w=new TextDecoder("utf-8").decode(f)}catch{w=""}const u={sessionId:s,data:w,seq:i};k.get(s)?.forEach(d=>d(u)),F.forEach(d=>d(u))}else if(o.type==="terminal.exit"){const{sessionId:s,exitCode:e,signal:i}=o.payload||{};if(!s)return;const w={sessionId:s,exitCode:e,signal:i};C.get(s)?.forEach(u=>u(w)),N.forEach(u=>u(w))}}}))}function ne(c){const o=new TextEncoder().encode(c);let s="";for(let e=0;e<o.length;e++)s+=String.fromCharCode(o[e]);return btoa(s)}function ae(c){const o=atob(c||""),s=new Uint8Array(o.length);for(let e=0;e<o.length;e++)s[e]=o.charCodeAt(e);return new TextDecoder("utf-8").decode(s)}function oe(){const c=fe();xe(c);async function o(n={}){const a=await c.sendRaw({type:"terminal.create",payload:{shell:n.shell,cwd:n.cwd,env:n.env,cols:n.cols,rows:n.rows}});if(a.ok===!1)throw new Error(a.error||"terminal_create_failed");return a.result??a}async function s(){const n=await c.sendRaw({type:"terminal.list",payload:{}});if(n.ok===!1)throw new Error(n.error||"terminal_list_failed");const a=n.result??n;return Array.isArray(a.sessions)?a.sessions:[]}async function e(n,a){const r=await c.sendRaw({type:"terminal.stdin",payload:{sessionId:n,data:ne(String(a))}});if(r.ok===!1)throw new Error(r.error||"terminal_stdin_failed");return r.result??r}async function i(n,a,r){const h=await c.sendRaw({type:"terminal.resize",payload:{sessionId:n,cols:a,rows:r}});if(h.ok===!1)throw new Error(h.error||"terminal_resize_failed");return h.result??h}async function w(n){const a=await c.sendRaw({type:"terminal.close",payload:{sessionId:n}});if(a.ok===!1)throw new Error(a.error||"terminal_close_failed");return a.result??a}async function u(n,a=0){const r=await c.sendRaw({type:"terminal.history",payload:{sessionId:n,fromSeq:a}});if(r.ok===!1)throw new Error(r.error||"terminal_history_failed");const h=r.result??r;return{truncated:!!h.truncated,chunks:(h.chunks||[]).map(L=>({seq:L.seq,data:ae(L.data)}))}}function d(n,a){return n?(k.has(n)||k.set(n,new Set),k.get(n).add(a),()=>{k.get(n)?.delete(a),k.get(n)?.size===0&&k.delete(n)}):(F.add(a),()=>F.delete(a))}function f(n,a){return n?(C.has(n)||C.set(n,new Set),C.get(n).add(a),()=>{C.get(n)?.delete(a),C.get(n)?.size===0&&C.delete(n)}):(N.add(a),()=>N.delete(a))}return{create:o,list:s,stdin:e,resize:i,close:w,history:u,onStdout:d,onExit:f,_internal:{stdoutSubs:k,exitSubs:C,toBase64Utf8:ne,fromBase64Utf8:ae}}}const Se={__name:"Terminal",setup(c,{expose:o}){o();const s=oe(),e=S([]),i=S(null),w=S("pwsh"),u=S(!1),d=S(!1),f=S(""),n=S(""),a=S([]),r=[{value:"pwsh",label:"PowerShell"},{value:"cmd",label:"CMD"},{value:"bash",label:"Bash"},{value:"wsl",label:"WSL"}],h=ee(()=>e.value.find(t=>t.id===i.value));function L(t){return t?t.slice(0,8):""}let O=null,M=null;async function I(){if(O)return{xtermMod:O,fitAddonMod:M};try{O=await V(()=>import("./xterm-BZcWGsqw.js").then(t=>t.x),__vite__mapDeps([0,1,2]),import.meta.url),M=await V(()=>import("./addon-fit-CK6X9sAG.js").then(t=>t.a),__vite__mapDeps([3,1,2]),import.meta.url),await V(()=>Promise.resolve({}),__vite__mapDeps([4]),import.meta.url)}catch(t){throw n.value="xterm 资源加载失败："+(t?.message||"未知错误"),t}return{xtermMod:O,fitAddonMod:M}}async function B(t){await q();const{xtermMod:l,fitAddonMod:p}=await I(),b=a.value.find(v=>v?.dataset?.sessionId===t.id);if(!b)return;const m=new l.Terminal({cursorBlink:!0,fontFamily:'Consolas, "Courier New", monospace',fontSize:13,theme:{background:"#1e1e1e",foreground:"#d4d4d4"},convertEol:!1}),P=new p.FitAddon;m.loadAddon(P),m.open(b);try{P.fit()}catch{}t.xterm=m,t.fitAddon=P;const ie=m.onData(v=>{s.stdin(t.id,v).catch(g=>{String(g?.message||"").includes("dangerous_keyword_blocked")?U.warning("该命令被桌面端拦截（高危关键字）"):U.error("stdin 失败: "+(g?.message||g))})}),ce=s.onStdout(t.id,({data:v,seq:g})=>{t.lastSeq=g,m.write(v)}),de=s.onExit(t.id,({exitCode:v,signal:g})=>{t.alive=!1,t.exitCode=v,t.signal=g,m.writeln(`\r
-\x1B[33m[session exited, code=${v}, signal=${g??"-"}]\x1B[0m`)});t.offs=()=>{try{ie.dispose?.()}catch{}ce(),de()};try{const{chunks:v,truncated:g}=await s.history(t.id,0);g&&m.writeln("\x1B[2m[history truncated — earlier output was evicted]\x1B[0m");for(const J of v)m.write(J.data),t.lastSeq=J.seq}catch(v){m.writeln(`\x1B[31m[history fetch failed: ${v?.message||v}]\x1B[0m`)}const j=new ResizeObserver(()=>{try{P.fit(),s.resize(t.id,m.cols,m.rows).catch(()=>{})}catch{}});j.observe(b);const ue=t.offs;t.offs=()=>{try{j.disconnect()}catch{}ue()}}async function re(){u.value=!0,f.value="";try{const t=await s.create({shell:w.value,cols:80,rows:24}),l={id:t.sessionId,shell:t.shell,cwd:"",alive:!0,lastSeq:0,exitCode:null,xterm:null,fitAddon:null,offs:()=>{}};e.value.push(l),i.value=l.id,await B(l)}catch(t){f.value=t?.message||String(t)}finally{u.value=!1}}async function se(t){try{await s.close(t)}catch(l){f.value=l?.message||String(l)}setTimeout(()=>W(t),500)}function W(t){const l=e.value.findIndex(b=>b.id===t);if(l===-1)return;const p=e.value[l];try{p.offs?.()}catch{}try{p.xterm?.dispose?.()}catch{}e.value.splice(l,1),i.value===t&&(i.value=e.value[0]?.id||null)}function le(t){i.value=t,q(()=>{const l=e.value.find(p=>p.id===t);try{l?.fitAddon?.fit()}catch{}})}async function X(){d.value=!0,f.value="";try{const t=await s.list();for(const l of t){const p=e.value.find(m=>m.id===l.id);if(p){p.alive=l.alive,p.lastSeq=l.lastSeq;continue}const b={id:l.id,shell:l.shell,cwd:l.cwd,alive:l.alive,lastSeq:l.lastSeq,exitCode:null,xterm:null,fitAddon:null,offs:()=>{}};e.value.push(b),await B(b)}!i.value&&e.value.length>0&&(i.value=e.value[0].id)}catch(t){f.value=t?.message||String(t)}finally{d.value=!1}}G(async()=>{await X()}),H(()=>{for(const t of e.value){try{t.offs?.()}catch{}try{t.xterm?.dispose?.()}catch{}}}),$(i,()=>{q(()=>{const t=h.value;try{t?.fitAddon?.fit()}catch{}})});const Y={term:s,sessions:e,activeId:i,newShell:w,creating:u,loadingList:d,error:f,warning:n,xtermContainers:a,shellOptions:r,active:h,shortId:L,get xtermMod(){return O},set xtermMod(t){O=t},get fitAddonMod(){return M},set fitAddonMod(t){M=t},loadXterm:I,mountXterm:B,onCreate:re,onClose:se,removeSession:W,activate:le,refreshList:X,ref:S,computed:ee,onMounted:G,onBeforeUnmount:H,nextTick:q,watch:$,get message(){return U},get PlusOutlined(){return ge},get CloseOutlined(){return pe},get ReloadOutlined(){return ye},get useTerminal(){return oe}};return Object.defineProperty(Y,"__isScriptSetup",{enumerable:!1,value:!0}),Y}},be={class:"terminal-page"},ke={class:"terminal-header"},Ce={class:"page-sub"},Ae={class:"terminal-body"},Ee={class:"session-tabs"},Oe=["onClick"],Te={class:"session-shell"},Re={class:"session-id"},Me={key:0,class:"session-empty"},ze={class:"xterm-host"},Le=["data-session-id"],Pe={key:0,class:"xterm-placeholder"},De={key:1,class:"terminal-footer"},qe={key:0,class:"footer-exit"};function Be(c,o,s,e,i,w){const u=z("a-tag"),d=z("a-select"),f=z("a-button"),n=z("a-space"),a=z("a-alert");return y(),x("div",be,[_("div",ke,[_("div",null,[o[3]||(o[3]=_("h2",{class:"page-title"},"远程终端",-1)),_("p",Ce,[o[2]||(o[2]=D(" 桌面端托管的 PTY 会话；Android 端可远程操控同一通道 ",-1)),e.warning?(y(),K(u,{key:0,color:"orange",style:{"margin-left":"8px"}},{default:T(()=>[D(E(e.warning),1)]),_:1})):R("v-if",!0)])]),A(n,null,{default:T(()=>[A(d,{value:e.newShell,"onUpdate:value":o[0]||(o[0]=r=>e.newShell=r),style:{width:"130px"},size:"small",options:e.shellOptions},null,8,["value"]),A(f,{type:"primary",size:"small",loading:e.creating,onClick:e.onCreate},{icon:T(()=>[A(e.PlusOutlined)]),default:T(()=>[o[4]||(o[4]=D(" 新会话 ",-1))]),_:1},8,["loading"]),A(f,{size:"small",loading:e.loadingList,onClick:e.refreshList},{icon:T(()=>[A(e.ReloadOutlined)]),default:T(()=>[o[5]||(o[5]=D(" 刷新 ",-1))]),_:1},8,["loading"])]),_:1})]),e.error?(y(),K(a,{key:0,message:e.error,type:"error","show-icon":"",closable:"",style:{"margin-bottom":"12px"},onClose:o[1]||(o[1]=r=>e.error="")},null,8,["message"])):R("v-if",!0),_("div",Ae,[_("div",Ee,[(y(!0),x(Q,null,Z(e.sessions,r=>(y(),x("div",{key:r.id,class:ve(["session-tab",{active:r.id===e.activeId,dead:!r.alive}]),onClick:h=>e.activate(r.id)},[_("span",Te,E(r.shell),1),_("span",Re,E(e.shortId(r.id)),1),A(e.CloseOutlined,{class:"session-close",onClick:we(h=>e.onClose(r.id),["stop"])},null,8,["onClick"])],10,Oe))),128)),e.sessions.length===0?(y(),x("div",Me,' 点击 "新会话" 创建第一个终端 ')):R("v-if",!0)]),_("div",ze,[(y(!0),x(Q,null,Z(e.sessions,r=>he((y(),x("div",{key:r.id,ref_for:!0,ref:"xtermContainers","data-session-id":r.id,class:"xterm-container"},null,8,Le)),[[_e,r.id===e.activeId]])),128)),e.sessions.length===0?(y(),x("div",Pe,[...o[6]||(o[6]=[_("span",null,"无活跃会话",-1)])])):R("v-if",!0)])]),e.active?(y(),x("div",De,[_("span",null,E(e.active.shell)+" · "+E(e.active.cwd||"(默认 cwd)")+" · seq "+E(e.active.lastSeq),1),e.active.alive?R("v-if",!0):(y(),x("span",qe,"已退出 (code="+E(e.active.exitCode??"-")+")",1))])):R("v-if",!0)])}const Ne=me(Se,[["render",Be],["__scopeId","data-v-65366a29"],["__file","/tmp/cc-web-panel-8U3FtY/repo/packages/web-panel/src/views/Terminal.vue"]]);export{Ne as default};

package/src/assets/web-panel/assets/devWarning-BzPwHnw8.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-BEVm0lCS.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-DacrAdc-.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-74cOwZU1.js";import{a0 as t}from"./index-BEVm0lCS.js";import"./vendor-Bn1JzzAn.js";import"./index-B3CDgvNW.js";import"./icons-DG5UD-6K.js";const s=t(o);export{s as default};