chainlesschain 0.162.46 → 0.162.48

package/src/lib/safe-mode.js

@@ -0,0 +1,31 @@
+/**
+ * `cc agent --safe-mode` — Claude-Code 2.1.169 parity ("--safe-mode flag
+ * disables customizations"): one flag flips every customization kill-switch
+ * so a misbehaving hook / memory file / persona can be isolated by running
+ * the agent bare.
+ *
+ * Deliberate divergence from Claude Code: settings PERMISSION RULES stay
+ * active — deny rules are a safety surface, and "debug my customizations"
+ * must never widen what the agent may do.
+ */
+
+/** env switches applied by --safe-mode (all existing kill-switches). */
+export const SAFE_MODE_SWITCHES = Object.freeze({
+  CC_PROJECT_MEMORY: "0", // cc.md / CLAUDE.md / rules auto-load
+  CC_SETTINGS_HOOKS: "0", // .claude/settings.json hooks
+  CC_MEMORY_INJECT: "0", // session-core startup memory recall
+  CC_IDE_CONTEXT: "0", // <ide-context> injection + diagnostics feedback
+  CC_STATUSLINE: "0", // custom/built-in status line
+  CC_UPDATE_NOTICE: "0", // passive update nudge
+});
+
+/**
+ * Apply safe mode to an env (default process.env).
+ * @returns {string[]} the switch names applied (for the startup notice)
+ */
+export function applySafeMode(env = process.env) {
+  for (const [k, v] of Object.entries(SAFE_MODE_SWITCHES)) {
+    env[k] = v;
+  }
+  return Object.keys(SAFE_MODE_SWITCHES);
+}

package/src/lib/sensitive-file-guard.js

@@ -0,0 +1,58 @@
+/**
+ * Sensitive-file write guard — Claude-Code 2.1.160 parity ("prompts before
+ * writing to shell startup files").
+ *
+ * Writing a shell startup file, PowerShell profile, or git hook plants code
+ * that EXECUTES on the user's next shell/commit — a step up from a normal
+ * edit, so even pre-authorized edit flows must confirm first. The check is
+ * name-based (basename / well-known relative fragments), deliberately
+ * conservative: build configs like Makefile/package.json are everyday edits
+ * and are NOT flagged (false-positive fatigue would teach users to blind-OK).
+ */
+
+const SHELL_STARTUP_NAMES = new Set([
+  ".bashrc",
+  ".bash_profile",
+  ".bash_login",
+  ".bash_logout",
+  ".profile",
+  ".zshrc",
+  ".zshenv",
+  ".zprofile",
+  ".zlogin",
+  ".zlogout",
+  ".cshrc",
+  ".tcshrc",
+  ".kshrc",
+]);
+
+const POWERSHELL_PROFILE_RE = /(^|[\\/])(microsoft\.powershell_profile\.ps1|profile\.ps1)$/i;
+const FISH_CONFIG_RE = /[\\/]fish[\\/]config\.fish$/i;
+const GIT_HOOK_RE = /[\\/]\.git[\\/]hooks[\\/][^\\/]+$/i;
+const HUSKY_HOOK_RE = /[\\/]\.husky[\\/](?!_)[^\\/]+$/i;
+
+/**
+ * @param {string} targetPath  path as the tool received it (rel or abs)
+ * @returns {string|null} human reason when sensitive, null otherwise
+ */
+export function sensitiveFileReason(targetPath) {
+  const p = String(targetPath || "");
+  if (!p) return null;
+  const base = p.replace(/\\/g, "/").split("/").pop() || "";
+  if (SHELL_STARTUP_NAMES.has(base)) {
+    return `shell startup file (${base}) — runs on the user's next shell`;
+  }
+  if (POWERSHELL_PROFILE_RE.test(p)) {
+    return "PowerShell profile — runs on the user's next PowerShell session";
+  }
+  if (FISH_CONFIG_RE.test(p)) {
+    return "fish shell config — runs on the user's next shell";
+  }
+  if (GIT_HOOK_RE.test(p)) {
+    return "git hook — executes on the user's next git operation";
+  }
+  if (HUSKY_HOOK_RE.test(p)) {
+    return "husky hook — executes on the user's next git operation";
+  }
+  return null;
+}

package/src/lib/settings-hooks.cjs

@@ -76,6 +76,11 @@ function readJson(file, onWarn) {
 function loadHooks({ cwd = process.cwd(), settingsFile, onWarn } = {}) {
   const merged = {};
   const files = [];
+  // Safe-mode kill switch (`cc agent --safe-mode` sets CC_SETTINGS_HOOKS=0):
+  // run with NO settings hooks so a broken hook can be diagnosed.
+  if (process.env.CC_SETTINGS_HOOKS === "0") {
+    return { hooks: merged, files };
+  }
   for (const file of settingsFiles(cwd, settingsFile)) {
     const data = readJson(file, onWarn);
     const block =

package/src/lib/sub-agent-context.js

@@ -73,6 +73,7 @@ export class SubAgentContext {
     this.tokenBudget = options.tokenBudget || null;
     this.inheritedContext = options.inheritedContext || null;
     this.allowedTools = options.allowedTools || null; // null = all
+    this.depth = options.depth || 1; // nesting level (parent main loop = 0)
     this.cwd = options.cwd || process.cwd();
     this.status = "active";
     this.result = null;
@@ -249,6 +250,8 @@ export class SubAgentContext {
       ...this._llmOptions,
       contextEngine: this.contextEngine,
       cwd: this.cwd,
+      // Nesting level: lets a nested spawn_sub_agent see — and cap — its depth.
+      subAgentDepth: this.depth,
       ...loopOptions,
     };
     if (this.iterationBudget) {

package/src/repl/agent-repl.js

@@ -761,6 +761,7 @@ export async function startAgentRepl(options = {}) {
       "/cowork",
       "/exit",
       "/help",
+      "/ide",
       "/mcp",
       "/model",
       "/output-style",
@@ -769,6 +770,7 @@ export async function startAgentRepl(options = {}) {
       "/provider",
       "/quit",
       "/reindex",
+      "/reload-skills",
       "/rewind",
       "/search",
       "/session",
@@ -953,8 +955,16 @@ export async function startAgentRepl(options = {}) {
         const { runBangCommand } = await import("../lib/repl-bang-memorize.js");
         const res = runBangCommand(trimmed, { cwd: process.cwd() });
         logger.log(chalk.gray(`$ ${res.cmd}`));
-        if (res.stdout) process.stdout.write(res.stdout.endsWith("\n") ? res.stdout : `${res.stdout}\n`);
-        if (res.stderr) process.stderr.write(chalk.red(res.stderr.endsWith("\n") ? res.stderr : `${res.stderr}\n`));
+        if (res.stdout)
+          process.stdout.write(
+            res.stdout.endsWith("\n") ? res.stdout : `${res.stdout}\n`,
+          );
+        if (res.stderr)
+          process.stderr.write(
+            chalk.red(
+              res.stderr.endsWith("\n") ? res.stderr : `${res.stderr}\n`,
+            ),
+          );
         if (res.error) logger.error(`shell error: ${res.error.message}`);
         logger.log(chalk.gray(`(exit ${res.exitCode})`));
         messages.push(res.contextMessage);
@@ -969,14 +979,17 @@ export async function startAgentRepl(options = {}) {
     // cc.md (auto-loaded next session) and keep it active in this one.
     if (trimmed.startsWith("#") && trimmed.slice(1).trim()) {
       try {
-        const { appendMemoryNote } = await import("../lib/repl-bang-memorize.js");
+        const { appendMemoryNote } =
+          await import("../lib/repl-bang-memorize.js");
         const res = appendMemoryNote(trimmed, { cwd: process.cwd() });
         messages.push({
           role: "system",
           content: `<memory-note source="${res.target}">${res.note}</memory-note>`,
         });
         logger.log(
-          chalk.green(`✔ remembered in ${res.target}${res.created ? " (created)" : ""}`),
+          chalk.green(
+            `✔ remembered in ${res.target}${res.created ? " (created)" : ""}`,
+          ),
         );
       } catch (err) {
         logger.error(`# memorize failed: ${err.message}`);
@@ -1018,6 +1031,9 @@ export async function startAgentRepl(options = {}) {
       logger.log(
         `  ${chalk.cyan("/cd <dir>")}   Change working directory mid-session (completion/memory follow)`,
       );
+      logger.log(
+        `  ${chalk.cyan("/reload-skills")} Re-scan skill layers without restarting`,
+      );
       logger.log(
         `  ${chalk.cyan("/compact")}    Smart compact (importance-based)`,
       );
@@ -1055,6 +1071,9 @@ export async function startAgentRepl(options = {}) {
       logger.log(
         `  ${chalk.cyan("/sub-agents")}  Show active/completed sub-agents`,
       );
+      logger.log(
+        `  ${chalk.cyan("/ide")}        IDE bridge status (connected editor, tools, or why not)`,
+      );
       logger.log(chalk.bold("\nCapabilities:"));
       logger.log("  Read, write, and edit files");
       logger.log("  Run shell commands (git, npm, etc.)");
@@ -1278,14 +1297,11 @@ export async function startAgentRepl(options = {}) {
 
     if (trimmed === "/rewind" || trimmed.startsWith("/rewind ")) {
       try {
-        const { listUserTurns, rewindToTurn, renderTurnList } = await import(
-          "../lib/repl-rewind.js"
-        );
+        const { listUserTurns, rewindToTurn, renderTurnList } =
+          await import("../lib/repl-rewind.js");
         const arg = trimmed.slice("/rewind".length).trim();
         if (!arg) {
-          logger.log(
-            chalk.bold("\nRewind — pick a user turn (newest first):"),
-          );
+          logger.log(chalk.bold("\nRewind — pick a user turn (newest first):"));
           logger.log(renderTurnList(listUserTurns(messages)));
           logger.log(
             chalk.gray(
@@ -1320,9 +1336,8 @@ export async function startAgentRepl(options = {}) {
       // window. Reuses the same categorizer + estimator as the archived view.
       try {
         const { categorizeContext } = await import("../commands/context.js");
-        const { estimateTokens } = await import(
-          "../harness/prompt-compressor.js"
-        );
+        const { estimateTokens } =
+          await import("../harness/prompt-compressor.js");
         const { buckets, counts, total } = categorizeContext(
           messages,
           estimateTokens,
@@ -1462,6 +1477,24 @@ export async function startAgentRepl(options = {}) {
     }
 
     // Reindex notes
+    // `/reload-skills` (Claude-Code 2.1.152 parity): re-scan the 6 skill
+    // layers (incl. .claude/skills) without restarting the session.
+    if (trimmed === "/reload-skills") {
+      try {
+        const { reloadSkills } = await import("../runtime/agent-core.js");
+        const n = reloadSkills();
+        logger.log(
+          chalk.green(
+            `✔ skills reloaded — ${n} available (6 layers re-scanned)`,
+          ),
+        );
+      } catch (err) {
+        logger.error(`/reload-skills failed: ${err.message}`);
+      }
+      prompt();
+      return;
+    }
+
     if (trimmed === "/reindex") {
       if (contextEngine) {
         contextEngine.reindexNotes();
@@ -2085,6 +2118,22 @@ export async function startAgentRepl(options = {}) {
       return;
     }
 
+    // `/ide` — IDE bridge connection status (Claude-Code parity): which editor
+    // is connected, its tools, or why discovery came up empty.
+    if (trimmed === "/ide" || trimmed === "/ide ") {
+      let diag = null;
+      try {
+        const { diagnoseIde } = await import("../lib/ide-bridge.js");
+        diag = diagnoseIde({ cwd: process.cwd(), env: process.env });
+      } catch (_err) {
+        // discovery is best-effort — fall back to in-session tools only
+      }
+      const { renderIdeStatus } = await import("./ide-status.js");
+      logger.log(renderIdeStatus(_adhocMcp, diag));
+      prompt();
+      return;
+    }
+
     // User-defined slash-command macros (.claude/commands/*.md), Claude-Code
     // parity. resolveSlashMacro maps a leading /name to a command macro and
     // expands its template; a non-match returns the line unchanged so a literal
@@ -2201,9 +2250,17 @@ export async function startAgentRepl(options = {}) {
     // Ephemeral: persistence stores effectivePrompt, not this snapshot.
     // Best-effort; CC_IDE_CONTEXT=0 disables.
     try {
-      const { buildIdePromptContext } = await import("../lib/ide-context.js");
+      const { buildIdePromptContext, expandIdeMentions } =
+        await import("../lib/ide-context.js");
       const ideCtx = await buildIdePromptContext(_adhocMcp);
       if (ideCtx) userContent += `\n\n${ideCtx}`;
+      // Explicit @selection / @diagnostics mentions (Claude-Code parity);
+      // scan the user's original prompt, append the expansion ephemerally.
+      const mentioned = await expandIdeMentions(effectivePrompt, _adhocMcp);
+      for (const w of mentioned.warnings) {
+        logger.info(chalk.yellow(`[@ide] ${w}`));
+      }
+      if (mentioned.block) userContent += `\n\n${mentioned.block}`;
     } catch (_err) {
       // optional polish — never fail the turn over it
     }
@@ -2433,9 +2490,7 @@ export async function startAgentRepl(options = {}) {
       // Esc interrupt: an aborted turn is normal flow, not an error — the
       // partial conversation stays usable and queued lines still drain.
       if (err?.name === "AbortError" || /abort/i.test(err?.message || "")) {
-        logger.log(
-          chalk.yellow("⎋ turn interrupted — partial progress kept"),
-        );
+        logger.log(chalk.yellow("⎋ turn interrupted — partial progress kept"));
         prompt();
         return;
       }

package/src/repl/ide-status.js

@@ -0,0 +1,76 @@
+/**
+ * `/ide` REPL command renderer (Claude-Code parity) — report whether an IDE
+ * bridge is connected to THIS agent session, which editor/port/workspace it
+ * is, the IDE tools the agent can call, and — when nothing is connected — why
+ * discovery came up empty plus how to fix it.
+ *
+ * Pure and dependency-free: takes the resolved MCP bundle (for the live,
+ * in-session connection) and an optional `diagnoseIde()` result (for lockfile
+ * details), returns plain text. The REPL does the I/O.
+ */
+
+const IDE_PREFIX = "mcp__ide__";
+
+/** Sorted bare IDE tool names connected in this session (e.g. ["getSelection"]). */
+export function ideToolNames(mcp) {
+  const ex = (mcp && mcp.externalToolExecutors) || {};
+  return Object.keys(ex)
+    .filter((k) => k.startsWith(IDE_PREFIX) && ex[k] && ex[k].kind === "mcp")
+    .map((k) => k.slice(IDE_PREFIX.length))
+    .sort();
+}
+
+/**
+ * @param {object|null} mcp   resolved bundle from resolveAgentMcp (or null)
+ * @param {object|null} diag  diagnoseIde() result, or null when unavailable
+ * @returns {string}
+ */
+export function renderIdeStatus(mcp, diag = null) {
+  const tools = ideToolNames(mcp);
+  const chosen = diag && diag.chosen ? diag.chosen : null;
+  const lines = [];
+
+  if (tools.length > 0) {
+    const where = chosen
+      ? `${chosen.ide || "ide"} on 127.0.0.1:${chosen.port} (${chosen.transport})`
+      : "an editor extension";
+    lines.push(`● IDE bridge connected — ${where}`);
+    if (
+      chosen &&
+      Array.isArray(chosen.workspaceFolders) &&
+      chosen.workspaceFolders.length
+    ) {
+      lines.push(`  workspace: ${chosen.workspaceFolders.join(", ")}`);
+    }
+    lines.push(`  tools: ${tools.map((t) => IDE_PREFIX + t).join(", ")}`);
+    lines.push(
+      "  selection/diagnostics auto-share each turn · " +
+        "@selection / @diagnostics expand on demand",
+    );
+    return lines.join("\n");
+  }
+
+  lines.push("○ IDE bridge not connected to this session");
+  if (diag) {
+    if (diag.reason) lines.push(`  ${diag.reason}`);
+    if (Array.isArray(diag.locks) && diag.locks.length) {
+      lines.push(`  ${diag.locks.length} lockfile(s) in ${diag.lockDir}:`);
+      for (const l of diag.locks.slice(0, 5)) {
+        lines.push(
+          `    - ${l.ide || "?"} :${l.port} ${l.transport} ` +
+            `(matchScore ${l.matchScore})`,
+        );
+      }
+    }
+    lines.push(
+      diag.inIdeTerminal
+        ? "  you're in an IDE terminal — restart the agent so it re-discovers the bridge"
+        : "  launch `cc` from your IDE's integrated terminal, or pass --ide to force-connect",
+    );
+  } else {
+    lines.push(
+      "  install the ChainlessChain IDE extension, then launch cc from its terminal",
+    );
+  }
+  return lines.join("\n");
+}

package/src/runtime/agent-core.js

@@ -334,6 +334,16 @@ export function getAgentToolDescriptors(options = {}) {
 
 const _defaultSkillLoader = new CLISkillLoader();
 
+/**
+ * Re-scan all skill layers (Claude-Code `/reload-skills` parity): drops the
+ * default loader's cache so newly added/edited SKILL.md dirs are picked up
+ * without restarting the session. Returns the resolved skill count.
+ */
+export function reloadSkills() {
+  _defaultSkillLoader.clearCache();
+  return _defaultSkillLoader.loadAll().length;
+}
+
 // ─── Cached environment detection ────────────────────────────────────────
 
 let _cachedPython = null;
@@ -901,6 +911,40 @@ export async function executeTool(name, args, context = {}) {
     ruleAllowed = true;
   }
 
+  // Sensitive-file write guard (Claude-Code 2.1.160 parity): shell startup
+  // files / PowerShell profiles / git+husky hooks execute code on the user's
+  // next shell or commit — even otherwise-permitted edit flows confirm first.
+  // An explicit settings `allow` rule is the only bypass (exact user
+  // pre-authorization); headless without a confirmer fails closed.
+  if (
+    (name === "write_file" || name === "edit_file") &&
+    settingsVerdict.decision !== "allow" &&
+    args?.path
+  ) {
+    const { sensitiveFileReason } = await import(
+      "../lib/sensitive-file-guard.js"
+    );
+    const sensReason = sensitiveFileReason(args.path);
+    if (sensReason) {
+      const confirm = context.permissionConfirm || context.shellConfirm || null;
+      const ok =
+        typeof confirm === "function"
+          ? await confirm({
+              tool: name,
+              args,
+              rule: null,
+              reason: `sensitive file: ${sensReason}`,
+            })
+          : false;
+      if (!ok) {
+        return {
+          error: `[Sensitive File] Writing "${args.path}" requires confirmation (${sensReason}) — denied. Add a settings allow rule to pre-authorize.`,
+          policy: { decision: "ask", via: "sensitive-file" },
+        };
+      }
+    }
+  }
+
   // Plan mode: check if tool is allowed (a settings `allow` rule pre-authorizes)
   if (
     planManager.isActive() &&
@@ -980,6 +1024,7 @@ export async function executeTool(name, args, context = {}) {
       shellConfirm: context.shellConfirm || null,
       additionalDirectories: context.additionalDirectories || null,
       ruleAllowed,
+      subAgentDepth: context.subAgentDepth || 0,
     });
   } catch (err) {
     if (hookDb) {
@@ -1150,6 +1195,7 @@ async function executeToolInner(
     shellConfirm,
     additionalDirectories,
     ruleAllowed = false,
+    subAgentDepth = 0,
   },
 ) {
   const localToolDescriptor =
@@ -1363,6 +1409,11 @@ async function executeToolInner(
             cwd: task.cwd,
             shell: true,
             windowsHide: true,
+            // Same CC_SESSION_ID correlation as the foreground path.
+            env: {
+              ...process.env,
+              ...(sessionId ? { CC_SESSION_ID: String(sessionId) } : {}),
+            },
             // POSIX: own process group so check_shell{kill}/teardown can signal
             // the whole tree (shell + its grandchild command). No-op on Windows
             // where the tree is killed via taskkill /T instead.
@@ -1420,6 +1471,12 @@ async function executeToolInner(
           encoding: "utf8",
           timeout: _resolveShellTimeout(args.timeout),
           maxBuffer: 1024 * 1024,
+          // CC_SESSION_ID (Claude-Code CLAUDE_CODE_SESSION_ID parity,
+          // 2.1.132): lets scripts/hooks correlate work to the agent session.
+          env: {
+            ...process.env,
+            ...(sessionId ? { CC_SESSION_ID: String(sessionId) } : {}),
+          },
         });
         return attachDescriptor(
           {
@@ -1528,6 +1585,7 @@ async function executeToolInner(
           interaction,
           sessionId,
           llmOptions,
+          subAgentDepth,
         }),
       );
     }
@@ -2186,6 +2244,13 @@ async function _executeRunCode(args, cwd) {
 
 // ─── spawn_sub_agent implementation ──────────────────────────────────────
 
+/**
+ * Max sub-agent nesting depth (Claude-Code 2.1.172 parity: sub-agents may
+ * spawn their own sub-agents, capped at 5 levels so a runaway model cannot
+ * recurse forever). Main loop = depth 0, its children = 1, …
+ */
+export const MAX_SUB_AGENT_DEPTH = 5;
+
 /**
  * Execute a spawn_sub_agent tool call.
  * Creates an isolated SubAgentContext, runs it, and returns only the summary.
@@ -2195,6 +2260,13 @@ async function _executeRunCode(args, cwd) {
  * @returns {Promise<object>}
  */
 async function _executeSpawnSubAgent(args, ctx) {
+  // Nesting cap: refuse before any context/registry work.
+  const currentDepth = ctx.subAgentDepth || 0;
+  if (currentDepth >= MAX_SUB_AGENT_DEPTH) {
+    return {
+      error: `spawn_sub_agent: max nesting depth (${MAX_SUB_AGENT_DEPTH}) reached — complete the task directly instead of delegating further.`,
+    };
+  }
   let {
     role,
     task,
@@ -2296,6 +2368,7 @@ async function _executeSpawnSubAgent(args, ctx) {
     cwd: ctx.cwd,
     profile: profile || null,
     llmOptions: subLlmOptions,
+    depth: currentDepth + 1, // nested spawns see their own level
   });
 
   const emit = (type, payload) => {
@@ -3332,6 +3405,9 @@ export async function* agentLoop(messages, options) {
     autoCheckpoint: options.autoCheckpoint || false,
     checkpointSession:
       options.checkpointSession || options.sessionId || "agent",
+    // Sub-agent nesting level (0 = main loop); spawn_sub_agent caps at
+    // MAX_SUB_AGENT_DEPTH using this.
+    subAgentDepth: options.subAgentDepth || 0,
   };
 
   throwIfAborted(signal);

package/src/runtime/headless-runner.js

@@ -552,15 +552,24 @@ export async function runAgentHeadless(options = {}, deps = {}) {
   // session replays the prompt, not a stale editor snapshot. Best-effort with
   // a short timeout; CC_IDE_CONTEXT=0 disables.
   try {
-    const { buildIdePromptContext, appendTextToContent } =
+    const { buildIdePromptContext, appendTextToContent, expandIdeMentions } =
       await import("../lib/ide-context.js");
+    const last = messages[messages.length - 1];
     const ideCtx = await (deps.buildIdePromptContext || buildIdePromptContext)(
       mcp,
     );
     if (ideCtx) {
-      const last = messages[messages.length - 1];
       last.content = appendTextToContent(last.content, ideCtx);
     }
+    // Explicit @selection / @diagnostics mentions in the user's prompt
+    // (Claude-Code parity). Scan the ORIGINAL prompt so injected file-ref
+    // blocks can't spoof a mention; append the expansion to the in-flight
+    // message only (ephemeral, like the ambient block above).
+    const mentioned = await expandIdeMentions(prompt, mcp);
+    for (const w of mentioned.warnings) writeErr(`  @ide: ${w}\n`);
+    if (mentioned.block) {
+      last.content = appendTextToContent(last.content, mentioned.block);
+    }
   } catch {
     // IDE context is optional polish — never fail the run over it.
   }

package/src/runtime/headless-stream.js

@@ -102,8 +102,21 @@ export function parseInputEvent(line) {
       .map((b) => (typeof b === "string" ? b : b?.text || ""))
       .join("");
   }
-  if (typeof content !== "string" || !content.trim()) return null;
-  return { text: content };
+  // Vision input (chat-panel image paste): {"type":"user","text":…,
+  // "images":["/abs/file.png", …]} — file paths, resolved at turn build via
+  // the same image-input pipeline as `cc agent --image`.
+  const rawImages =
+    obj && typeof obj === "object" ? obj.images || msg.images : null;
+  const images = Array.isArray(rawImages)
+    ? rawImages.filter((p) => typeof p === "string" && p.trim()).slice(0, 8)
+    : [];
+  if (typeof content !== "string" || !content.trim()) {
+    // An image-only turn is valid — give the model something to act on.
+    if (images.length)
+      return { text: "Please look at the attached image(s).", images };
+    return null;
+  }
+  return images.length ? { text: content, images } : { text: content };
 }
 
 /**
@@ -718,19 +731,49 @@ export async function runAgentHeadlessStream(options = {}, deps = {}) {
     // IDE bridge is connected — the user's selection moves between prompts.
     // Best-effort; CC_IDE_CONTEXT=0 disables.
     try {
-      const { buildIdePromptContext } = await import("../lib/ide-context.js");
+      const { buildIdePromptContext, expandIdeMentions } =
+        await import("../lib/ide-context.js");
       const ideCtx = await (
         deps.buildIdePromptContext || buildIdePromptContext
       )(mcp);
       if (ideCtx) userContent += `\n\n${ideCtx}`;
+      // Explicit @selection / @diagnostics mentions (Claude-Code parity);
+      // scan the original user event text, append the expansion ephemerally.
+      const mentioned = await expandIdeMentions(parsed.text, mcp);
+      for (const w of mentioned.warnings) writeErr(`  @ide: ${w}\n`);
+      if (mentioned.block) userContent += `\n\n${mentioned.block}`;
     } catch {
       // optional polish — never fail the turn over it
     }
 
-    messages.push({ role: "user", content: userContent });
+    // Attach pasted/added images (panel parity with `--image`): file paths →
+    // data URLs → OpenAI-style multimodal content. buildUserContent returns
+    // the plain string when there are no images, so text turns are unchanged.
+    let turnContent = userContent;
+    if (parsed.images && parsed.images.length) {
+      try {
+        const { resolveImages, buildUserContent } =
+          await import("../lib/image-input.js");
+        turnContent = buildUserContent(
+          userContent,
+          resolveImages(parsed.images),
+        );
+      } catch (err) {
+        emit({
+          type: "result",
+          subtype: "error",
+          is_error: true,
+          result: `image attach failed: ${err.message}`,
+          session_id: sessionId,
+        });
+        continue; // bad attachment kills the turn, not the session
+      }
+    }
+
+    messages.push({ role: "user", content: turnContent });
     if (persist) {
       try {
-        store.appendUserMessage(sessionId, userContent);
+        store.appendUserMessage(sessionId, turnContent);
       } catch {
         /* best-effort */
       }

package/src/assets/web-panel/assets/OrderTableRenderer-DOwptdNb.js

@@ -1 +0,0 @@
-import{I as w,P as l,J as u,U as s,R as n,c as i,K as v,Q as _,V as g,b as o}from"./vendor-BvqAck49.js";import{_ as S}from"./index-D7FYxxFT.js";import"./icons-DP3uiYxy.js";const k={__name:"OrderTableRenderer",props:{event:{type:Object,required:!0}},setup(p,{expose:r}){r();const a=p,e=o(()=>a.event.content||{}),d=o(()=>a.event.extra||{}),m=o(()=>d.value.merchant||e.value.merchant||e.value.counterparty||"—"),c=o(()=>e.value.title||e.value.name||e.value.itemName||e.value.text||"—"),y=o(()=>{const t=e.value.amount??e.value.price??e.value.total;return t==null?"—":`${e.value.currency||"¥"} ${typeof t=="number"?t.toFixed(2):t}`}),T=o(()=>d.value.orderNo||e.value.orderNo||e.value.orderId),f=o(()=>e.value.status||e.value.state),b=o(()=>{const t=(f.value||"").toLowerCase();return t.includes("成功")||t.includes("succe")||t.includes("paid")?"green":t.includes("退")||t.includes("refund")?"orange":t.includes("失败")||t.includes("fail")?"red":"default"}),h=o(()=>{if(!a.event.occurredAt)return"";const t=new Date(a.event.occurredAt);return`${t.getFullYear()}-${String(t.getMonth()+1).padStart(2,"0")}-${String(t.getDate()).padStart(2,"0")} ${String(t.getHours()).padStart(2,"0")}:${String(t.getMinutes()).padStart(2,"0")}`}),x={props:a,c:e,e:d,merchantText:m,itemText:c,amountText:y,orderNo:T,statusText:f,statusColor:b,formattedTime:h,computed:o};return Object.defineProperty(x,"__isScriptSetup",{enumerable:!1,value:!0}),x}},N={class:"order-card"},C={class:"head"},O={class:"time"},V={class:"row"},R={class:"val"},B={class:"row"},D={class:"val"},I={class:"row amount-row"},j={class:"val amount"},A={key:0,class:"row"},F={class:"val mono"},H={key:1,class:"row"};function M(p,r,a,e,d,m){const c=w("a-tag");return l(),u("div",N,[s("div",C,[s("span",O,n(e.formattedTime),1),i(c,{color:"gold"},{default:v(()=>[_(n(a.event.source.adapter),1)]),_:1}),i(c,null,{default:v(()=>[_(n(a.event.subtype),1)]),_:1})]),s("div",V,[r[0]||(r[0]=s("span",{class:"key"},"商户",-1)),s("span",R,n(e.merchantText),1)]),s("div",B,[r[1]||(r[1]=s("span",{class:"key"},"商品/项目",-1)),s("span",D,n(e.itemText),1)]),s("div",I,[r[2]||(r[2]=s("span",{class:"key"},"金额",-1)),s("span",j,n(e.amountText),1)]),e.orderNo?(l(),u("div",A,[r[3]||(r[3]=s("span",{class:"key"},"单号",-1)),s("span",F,n(e.orderNo),1)])):g("v-if",!0),e.statusText?(l(),u("div",H,[r[4]||(r[4]=s("span",{class:"key"},"状态",-1)),i(c,{color:e.statusColor},{default:v(()=>[_(n(e.statusText),1)]),_:1},8,["color"])])):g("v-if",!0)])}const G=S(k,[["render",M],["__scopeId","data-v-5ed5524d"],["__file","/tmp/cc-web-panel-GzZ4oH/repo/packages/web-panel/src/components/pdh/renderers/OrderTableRenderer.vue"]]);export{G as default};