chainlesschain 0.162.45 → 0.162.47

package/src/lib/sensitive-file-guard.js

@@ -0,0 +1,58 @@
+/**
+ * Sensitive-file write guard — Claude-Code 2.1.160 parity ("prompts before
+ * writing to shell startup files").
+ *
+ * Writing a shell startup file, PowerShell profile, or git hook plants code
+ * that EXECUTES on the user's next shell/commit — a step up from a normal
+ * edit, so even pre-authorized edit flows must confirm first. The check is
+ * name-based (basename / well-known relative fragments), deliberately
+ * conservative: build configs like Makefile/package.json are everyday edits
+ * and are NOT flagged (false-positive fatigue would teach users to blind-OK).
+ */
+
+const SHELL_STARTUP_NAMES = new Set([
+  ".bashrc",
+  ".bash_profile",
+  ".bash_login",
+  ".bash_logout",
+  ".profile",
+  ".zshrc",
+  ".zshenv",
+  ".zprofile",
+  ".zlogin",
+  ".zlogout",
+  ".cshrc",
+  ".tcshrc",
+  ".kshrc",
+]);
+
+const POWERSHELL_PROFILE_RE = /(^|[\\/])(microsoft\.powershell_profile\.ps1|profile\.ps1)$/i;
+const FISH_CONFIG_RE = /[\\/]fish[\\/]config\.fish$/i;
+const GIT_HOOK_RE = /[\\/]\.git[\\/]hooks[\\/][^\\/]+$/i;
+const HUSKY_HOOK_RE = /[\\/]\.husky[\\/](?!_)[^\\/]+$/i;
+
+/**
+ * @param {string} targetPath  path as the tool received it (rel or abs)
+ * @returns {string|null} human reason when sensitive, null otherwise
+ */
+export function sensitiveFileReason(targetPath) {
+  const p = String(targetPath || "");
+  if (!p) return null;
+  const base = p.replace(/\\/g, "/").split("/").pop() || "";
+  if (SHELL_STARTUP_NAMES.has(base)) {
+    return `shell startup file (${base}) — runs on the user's next shell`;
+  }
+  if (POWERSHELL_PROFILE_RE.test(p)) {
+    return "PowerShell profile — runs on the user's next PowerShell session";
+  }
+  if (FISH_CONFIG_RE.test(p)) {
+    return "fish shell config — runs on the user's next shell";
+  }
+  if (GIT_HOOK_RE.test(p)) {
+    return "git hook — executes on the user's next git operation";
+  }
+  if (HUSKY_HOOK_RE.test(p)) {
+    return "husky hook — executes on the user's next git operation";
+  }
+  return null;
+}

package/src/lib/skill-loader.js

@@ -1,24 +1,40 @@
 /**
  * Multi-layer skill loader for CLI
  *
- * 4-layer priority system (highest wins on name collision):
- *   0 (lowest)  bundled     — desktop-app-vue/.../skills/builtin/
- *   1           marketplace — <userData>/marketplace/skills/
- *   2           managed     — <userData>/skills/
- *   3 (highest) workspace   — <projectRoot>/.chainlesschain/skills/
+ * 6-layer priority system (highest wins on name collision):
+ *   0 (lowest)  bundled        — desktop-app-vue/.../skills/builtin/
+ *   1           marketplace    — <userData>/marketplace/skills/
+ *   2           managed        — <userData>/skills/
+ *   3           claude-user    — ~/.claude/skills/            (Claude-Code 可移植)
+ *   4           claude-project — <projectRoot>/.claude/skills/ (Claude-Code 可移植)
+ *   5 (highest) workspace      — <projectRoot>/.chainlesschain/skills/
+ *
+ * The two `claude-*` layers are Claude-Code portability (its 2.1.157
+ * ".claude/skills auto-load" behavior): a repo carrying Claude-Code skills
+ * works in cc unchanged — same SKILL.md format — while native
+ * `.chainlesschain/skills` still wins on name collisions.
  */
 
 import fs from "fs";
+import os from "os";
 import path from "path";
 import { fileURLToPath } from "url";
 import { getElectronUserDataDir } from "./paths.js";
 import { findProjectRoot } from "./project-detector.js";
+import { findProjectRoot as findGitRoot } from "./project-instructions.js";
 import { parseSkillMcpServers } from "./skill-mcp.js";
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
 /** Layer names in priority order (lowest → highest) */
-export const LAYER_NAMES = ["bundled", "marketplace", "managed", "workspace"];
+export const LAYER_NAMES = [
+  "bundled",
+  "marketplace",
+  "managed",
+  "claude-user",
+  "claude-project",
+  "workspace",
+];
 
 /**
  * Simple YAML frontmatter parser (no dependencies)
@@ -230,7 +246,27 @@ export class CLISkillLoader {
       exists: fs.existsSync(managedPath),
     });
 
-    // Layer 3: workspace — <projectRoot>/.chainlesschain/skills/
+    // Layers 3+4: Claude-Code portability — ~/.claude/skills + <root>/.claude/skills
+    const home = os.homedir() || "";
+    const claudeUserPath = home ? path.join(home, ".claude", "skills") : null;
+    layers.push({
+      layer: "claude-user",
+      path: claudeUserPath,
+      exists: Boolean(claudeUserPath && fs.existsSync(claudeUserPath)),
+    });
+    // Project base: .chainlesschain marker first, git root as fallback so a
+    // pure Claude-Code repo (no .chainlesschain/) still gets its skills.
+    const claudeBase = findProjectRoot() || findGitRoot(process.cwd());
+    const claudeProjectPath = claudeBase
+      ? path.join(claudeBase, ".claude", "skills")
+      : null;
+    layers.push({
+      layer: "claude-project",
+      path: claudeProjectPath,
+      exists: Boolean(claudeProjectPath && fs.existsSync(claudeProjectPath)),
+    });
+
+    // Layer 5 (highest): workspace — <projectRoot>/.chainlesschain/skills/
     const projectRoot = findProjectRoot();
     if (projectRoot) {
       const workspacePath = path.join(projectRoot, ".chainlesschain", "skills");

package/src/lib/sub-agent-context.js

@@ -73,6 +73,7 @@ export class SubAgentContext {
     this.tokenBudget = options.tokenBudget || null;
     this.inheritedContext = options.inheritedContext || null;
     this.allowedTools = options.allowedTools || null; // null = all
+    this.depth = options.depth || 1; // nesting level (parent main loop = 0)
     this.cwd = options.cwd || process.cwd();
     this.status = "active";
     this.result = null;
@@ -249,6 +250,8 @@ export class SubAgentContext {
       ...this._llmOptions,
       contextEngine: this.contextEngine,
       cwd: this.cwd,
+      // Nesting level: lets a nested spawn_sub_agent see — and cap — its depth.
+      subAgentDepth: this.depth,
       ...loopOptions,
     };
     if (this.iterationBudget) {

package/src/repl/agent-repl.js

@@ -20,6 +20,7 @@
 import readline from "readline";
 import chalk from "chalk";
 import fs from "fs";
+import os from "os";
 import path from "path";
 import { logger } from "../lib/logger.js";
 import { getPlanModeManager, PlanState } from "../lib/plan-mode.js";
@@ -748,10 +749,12 @@ export async function startAgentRepl(options = {}) {
   // (when the IDE bridge is connected) the editor's open tabs ranked first.
   const { makeAtCompleter } = await import("../lib/repl-completer.js");
   const atCompleter = makeAtCompleter({
-    cwd: process.cwd(),
+    // cwd left unset on purpose: the completer resolves process.cwd() lazily
+    // so it follows `/cd` mid-session.
     // Keep in sync with the rl.on("line") handlers + /help below.
     slashCommands: [
       "/auto",
+      "/cd",
       "/clear",
       "/compact",
       "/context",
@@ -1012,6 +1015,9 @@ export async function startAgentRepl(options = {}) {
       logger.log(
         `  ${chalk.cyan("/rewind")}     Rewind conversation to an earlier turn (double-Esc lists)`,
       );
+      logger.log(
+        `  ${chalk.cyan("/cd <dir>")}   Change working directory mid-session (completion/memory follow)`,
+      );
       logger.log(
         `  ${chalk.cyan("/compact")}    Smart compact (importance-based)`,
       );
@@ -1250,6 +1256,26 @@ export async function startAgentRepl(options = {}) {
       return;
     }
 
+    // `/cd` (Claude-Code 2.1.163 parity): relocate the session's working
+    // directory mid-conversation. Everything that reads process.cwd() per
+    // call follows automatically (agent cwd, @-completion, project memory).
+    if (trimmed === "/cd" || trimmed.startsWith("/cd ")) {
+      const target = trimmed.slice(3).trim();
+      if (!target) {
+        logger.info(`cwd: ${process.cwd()}`);
+      } else {
+        try {
+          const expanded = target.replace(/^~(?=$|[\\/])/, os.homedir());
+          process.chdir(path.resolve(process.cwd(), expanded));
+          logger.log(chalk.green(`cwd → ${process.cwd()}`));
+        } catch (err) {
+          logger.error(`/cd failed: ${err.message}`);
+        }
+      }
+      prompt();
+      return;
+    }
+
     if (trimmed === "/rewind" || trimmed.startsWith("/rewind ")) {
       try {
         const { listUserTurns, rewindToTurn, renderTurnList } = await import(

package/src/runtime/agent-core.js

@@ -901,6 +901,40 @@ export async function executeTool(name, args, context = {}) {
     ruleAllowed = true;
   }
 
+  // Sensitive-file write guard (Claude-Code 2.1.160 parity): shell startup
+  // files / PowerShell profiles / git+husky hooks execute code on the user's
+  // next shell or commit — even otherwise-permitted edit flows confirm first.
+  // An explicit settings `allow` rule is the only bypass (exact user
+  // pre-authorization); headless without a confirmer fails closed.
+  if (
+    (name === "write_file" || name === "edit_file") &&
+    settingsVerdict.decision !== "allow" &&
+    args?.path
+  ) {
+    const { sensitiveFileReason } = await import(
+      "../lib/sensitive-file-guard.js"
+    );
+    const sensReason = sensitiveFileReason(args.path);
+    if (sensReason) {
+      const confirm = context.permissionConfirm || context.shellConfirm || null;
+      const ok =
+        typeof confirm === "function"
+          ? await confirm({
+              tool: name,
+              args,
+              rule: null,
+              reason: `sensitive file: ${sensReason}`,
+            })
+          : false;
+      if (!ok) {
+        return {
+          error: `[Sensitive File] Writing "${args.path}" requires confirmation (${sensReason}) — denied. Add a settings allow rule to pre-authorize.`,
+          policy: { decision: "ask", via: "sensitive-file" },
+        };
+      }
+    }
+  }
+
   // Plan mode: check if tool is allowed (a settings `allow` rule pre-authorizes)
   if (
     planManager.isActive() &&
@@ -980,6 +1014,7 @@ export async function executeTool(name, args, context = {}) {
       shellConfirm: context.shellConfirm || null,
       additionalDirectories: context.additionalDirectories || null,
       ruleAllowed,
+      subAgentDepth: context.subAgentDepth || 0,
     });
   } catch (err) {
     if (hookDb) {
@@ -1150,6 +1185,7 @@ async function executeToolInner(
     shellConfirm,
     additionalDirectories,
     ruleAllowed = false,
+    subAgentDepth = 0,
   },
 ) {
   const localToolDescriptor =
@@ -1528,6 +1564,7 @@ async function executeToolInner(
           interaction,
           sessionId,
           llmOptions,
+          subAgentDepth,
         }),
       );
     }
@@ -2186,6 +2223,13 @@ async function _executeRunCode(args, cwd) {
 
 // ─── spawn_sub_agent implementation ──────────────────────────────────────
 
+/**
+ * Max sub-agent nesting depth (Claude-Code 2.1.172 parity: sub-agents may
+ * spawn their own sub-agents, capped at 5 levels so a runaway model cannot
+ * recurse forever). Main loop = depth 0, its children = 1, …
+ */
+export const MAX_SUB_AGENT_DEPTH = 5;
+
 /**
  * Execute a spawn_sub_agent tool call.
  * Creates an isolated SubAgentContext, runs it, and returns only the summary.
@@ -2195,6 +2239,13 @@ async function _executeRunCode(args, cwd) {
  * @returns {Promise<object>}
  */
 async function _executeSpawnSubAgent(args, ctx) {
+  // Nesting cap: refuse before any context/registry work.
+  const currentDepth = ctx.subAgentDepth || 0;
+  if (currentDepth >= MAX_SUB_AGENT_DEPTH) {
+    return {
+      error: `spawn_sub_agent: max nesting depth (${MAX_SUB_AGENT_DEPTH}) reached — complete the task directly instead of delegating further.`,
+    };
+  }
   let {
     role,
     task,
@@ -2296,6 +2347,7 @@ async function _executeSpawnSubAgent(args, ctx) {
     cwd: ctx.cwd,
     profile: profile || null,
     llmOptions: subLlmOptions,
+    depth: currentDepth + 1, // nested spawns see their own level
   });
 
   const emit = (type, payload) => {
@@ -3332,6 +3384,9 @@ export async function* agentLoop(messages, options) {
     autoCheckpoint: options.autoCheckpoint || false,
     checkpointSession:
       options.checkpointSession || options.sessionId || "agent",
+    // Sub-agent nesting level (0 = main loop); spawn_sub_agent caps at
+    // MAX_SUB_AGENT_DEPTH using this.
+    subAgentDepth: options.subAgentDepth || 0,
   };
 
   throwIfAborted(signal);

package/src/runtime/headless-stream.js

@@ -102,8 +102,19 @@ export function parseInputEvent(line) {
       .map((b) => (typeof b === "string" ? b : b?.text || ""))
       .join("");
   }
-  if (typeof content !== "string" || !content.trim()) return null;
-  return { text: content };
+  // Vision input (chat-panel image paste): {"type":"user","text":…,
+  // "images":["/abs/file.png", …]} — file paths, resolved at turn build via
+  // the same image-input pipeline as `cc agent --image`.
+  const rawImages = obj && typeof obj === "object" ? obj.images || msg.images : null;
+  const images = Array.isArray(rawImages)
+    ? rawImages.filter((p) => typeof p === "string" && p.trim()).slice(0, 8)
+    : [];
+  if (typeof content !== "string" || !content.trim()) {
+    // An image-only turn is valid — give the model something to act on.
+    if (images.length) return { text: "Please look at the attached image(s).", images };
+    return null;
+  }
+  return images.length ? { text: content, images } : { text: content };
 }
 
 /**
@@ -727,10 +738,31 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
       // optional polish — never fail the turn over it
     }
 
-    messages.push({ role: "user", content: userContent });
+    // Attach pasted/added images (panel parity with `--image`): file paths →
+    // data URLs → OpenAI-style multimodal content. buildUserContent returns
+    // the plain string when there are no images, so text turns are unchanged.
+    let turnContent = userContent;
+    if (parsed.images && parsed.images.length) {
+      try {
+        const { resolveImages, buildUserContent } =
+          await import("../lib/image-input.js");
+        turnContent = buildUserContent(userContent, resolveImages(parsed.images));
+      } catch (err) {
+        emit({
+          type: "result",
+          subtype: "error",
+          is_error: true,
+          result: `image attach failed: ${err.message}`,
+          session_id: sessionId,
+        });
+        continue; // bad attachment kills the turn, not the session
+      }
+    }
+
+    messages.push({ role: "user", content: turnContent });
     if (persist) {
       try {
-        store.appendUserMessage(sessionId, userContent);
+        store.appendUserMessage(sessionId, turnContent);
       } catch {
         /* best-effort */
       }

package/src/runtime/mcp-config.js

@@ -347,7 +347,25 @@ export async function loadIdeMcp(opts = {}, deps = {}) {
   }
   const cfg = toCfg(lock);
   if (!cfg) return deps.into || null;
-  return setupMcpFromConfig({ ide: cfg }, deps);
+  const out = await setupMcpFromConfig({ ide: cfg }, deps);
+  // Hot reconnect: a window reload / extension update restarts the editor's
+  // MCP server on a NEW port with a NEW token. Register a reconnector so a
+  // failed mcp__ide__* call re-scans the lockfiles mid-session and retries,
+  // instead of the IDE tools (and selection/diagnostics injection) silently
+  // dying for the rest of the run. Note the stale CHAINLESSCHAIN_IDE_PORT in
+  // our env no longer matches any live lock, so discovery falls through to
+  // the workspace scan — exactly the path that finds the restarted instance.
+  if (out?.mcpClient?.setReconnector) {
+    out.mcpClient.setReconnector("ide", () => {
+      const fresh = discover({
+        cwd: opts.cwd,
+        env: opts.env,
+        force: opts.force === true,
+      });
+      return fresh ? toCfg(fresh) : null;
+    });
+  }
+  return out;
 }
 
 /**

package/src/assets/web-panel/assets/ChatBubbleRenderer-C1MKMzjB.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as S,U as n,R as a,S as y,K as C,Q as x,V as w,_ as B,b as s}from"./vendor-BvqAck49.js";import{_ as k}from"./index-B76qMGe0.js";import"./icons-DP3uiYxy.js";const M={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),f=String(e.getMonth()+1).padStart(2,"0"),b=String(e.getDate()).padStart(2,"0"),g=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${f}-${b} ${g}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},N={class:"bubble"},T={class:"meta"},R={class:"actor"},V={class:"time"},j={class:"body"};function q(c,d,t,r,i,l){const o=v("a-tag");return u(),S("div",{class:B(["chat-row",{mine:r.isMine}])},[n("div",N,[n("div",T,[n("span",R,a(r.actorLabel),1),n("span",V,a(r.formattedTime),1)]),n("div",j,a(r.messageText),1),t.event.source.adapter?(u(),y(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[x(a(t.event.source.adapter),1)]),_:1},8,["color"])):w("v-if",!0)])],2)}const A=k(M,[["render",q],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-MQBjbf/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{A as default};

package/src/assets/web-panel/assets/devWarning-BSbU0obw.js

@@ -1 +0,0 @@
-import{O as r}from"./index-B76qMGe0.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-DHgbmZ-Y.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-CipchQUs.js";import{U as t}from"./index-B76qMGe0.js";import"./vendor-BvqAck49.js";import"./responsiveObserve-CgCiGZ6t.js";import"./useFlexGapSupport-CKncli3p.js";import"./styleChecker-BTkUPq_y.js";import"./index-C1b8TGYq.js";import"./icons-DP3uiYxy.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-pr3q7Jlo.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-C3A1d5Wt.js";import{U as t}from"./index-B76qMGe0.js";import"./vendor-BvqAck49.js";import"./index-C1b8TGYq.js";import"./icons-DP3uiYxy.js";const s=t(o);export{s as default};