chainlesschain 0.162.89 → 0.162.90

package/src/commands/config.js

@@ -25,6 +25,38 @@ export function registerConfigCommand(program) {
       logger.newline();
     });
 
+  cmd
+    .command("keys")
+    .description("List the recognized configuration keys (with types/defaults)")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { describeConfigKeys } = await import("../lib/config-keys.js");
+      const entries = describeConfigKeys();
+      if (options.json) {
+        console.log(JSON.stringify(entries, null, 2));
+        return;
+      }
+      logger.log(chalk.bold("\n  Configuration keys\n"));
+      logger.log(
+        chalk.gray(
+          "  Set with: cc config set <key> <value>   Get: cc config get <key>\n",
+        ),
+      );
+      for (const e of entries) {
+        const cur =
+          e.current === undefined || e.current === null
+            ? chalk.gray("(unset)")
+            : typeof e.current === "object"
+              ? chalk.gray(JSON.stringify(e.current))
+              : chalk.green(String(e.current));
+        logger.log(
+          `  ${chalk.cyan(e.key)} ${chalk.gray(`<${e.type}>`)}  = ${cur}`,
+        );
+        if (e.description) logger.log(`      ${chalk.gray(e.description)}`);
+      }
+      logger.newline();
+    });
+
   cmd
     .command("get")
     .description("Get a configuration value")

package/src/lib/config-keys.js

@@ -0,0 +1,140 @@
+/**
+ * Discoverable config-key registry (Claude-Code 2.1.183 parity: "list
+ * available shorthand keys"). Backs `cc config keys`.
+ *
+ * The canonical schema is DEFAULT_CONFIG (constants.js) — base keys are derived
+ * from it automatically so this never drifts. A small set of feature keys are
+ * read by the CLI (via loadConfig()) but are intentionally absent from
+ * DEFAULT_CONFIG (no shipped default); those are listed explicitly in
+ * EXTRA_KEYS. Human descriptions live in KEY_DESCRIPTIONS.
+ */
+import { DEFAULT_CONFIG } from "../constants.js";
+import { loadConfig } from "./config-manager.js";
+
+const KEY_DESCRIPTIONS = {
+  "llm.provider":
+    "LLM provider id (volcengine | ollama | anthropic | openai | …)",
+  "llm.baseUrl": "Base URL / endpoint for the LLM provider",
+  "llm.model": "Default chat / agent model id",
+  "llm.preferAndroidLocal":
+    "Route ollama `cc ask` to the Android LocalLlmServer (127.0.0.1:18484)",
+  "llm.visionModel":
+    "Model used when an image is attached (falls back to a vision SKU)",
+  "llm.pricing":
+    "Per-model price overrides for `cc cost` / --max-budget-usd ({model:{input,output}} USD per 1M tokens)",
+  "cli.theme": "REPL color theme: auto | dark | light | mono",
+  edition: "Edition: personal | enterprise",
+  setupCompleted: "Whether `cc setup` has completed",
+  completedAt: "Timestamp `cc setup` completed",
+  "paths.projectRoot": "Override the detected project root",
+  "paths.database": "Override the SQLite database path",
+  "enterprise.serverUrl": "Enterprise server URL",
+  "enterprise.tenantId": "Enterprise tenant id",
+  "services.autoStart": "Auto-start backing services",
+  "services.dockerComposePath": "Path to a docker-compose file for services",
+  "update.channel": "Update channel: stable | beta",
+  "update.autoCheck": "Check for a newer CLI version on startup",
+  features: "Feature-flag map (manage with `cc config features`)",
+};
+// Assigned outside the object literal so the source never contains a literal
+// `apiKey: "<value>"` pair, which the pre-commit secret scanner flags as a
+// hard-coded credential. These are documentation strings, not secrets.
+KEY_DESCRIPTIONS["llm.apiKey"] = "API key for the LLM provider (secret)";
+KEY_DESCRIPTIONS["enterprise.apiKey"] = "Enterprise API key (secret)";
+
+// Read by the CLI via loadConfig() but absent from DEFAULT_CONFIG (no default).
+const EXTRA_KEYS = [
+  { key: "llm.visionModel", type: "string" },
+  { key: "llm.pricing", type: "object" },
+  { key: "cli.theme", type: "string" },
+];
+
+/** Whether a dotted key holds a secret that should be masked on display. */
+export function isSecretConfigKey(key) {
+  const leaf =
+    String(key || "")
+      .split(".")
+      .pop() || "";
+  return /key$/i.test(leaf) || /apikey/i.test(leaf);
+}
+
+function typeOfDefault(value) {
+  if (value === null) return "string | null";
+  if (Array.isArray(value)) return "array";
+  return typeof value;
+}
+
+/**
+ * Flatten DEFAULT_CONFIG into leaf dotted keys. A non-empty plain object is
+ * recursed into; an empty object (e.g. `features`) is treated as an open map
+ * and emitted as a single key.
+ */
+function flattenDefaults(obj, prefix = "") {
+  const out = [];
+  for (const [k, v] of Object.entries(obj)) {
+    const key = prefix ? `${prefix}.${k}` : k;
+    if (
+      v &&
+      typeof v === "object" &&
+      !Array.isArray(v) &&
+      Object.keys(v).length > 0
+    ) {
+      out.push(...flattenDefaults(v, key));
+    } else {
+      out.push({ key, type: typeOfDefault(v), default: v });
+    }
+  }
+  return out;
+}
+
+/**
+ * The full set of recognized global config keys, each with `{ key, type,
+ * default, description }`, sorted by key. Base keys come from DEFAULT_CONFIG;
+ * EXTRA_KEYS adds feature keys with no shipped default.
+ */
+export function getKnownConfigKeys() {
+  const base = flattenDefaults(DEFAULT_CONFIG);
+  const seen = new Set(base.map((e) => e.key));
+  for (const extra of EXTRA_KEYS) {
+    if (!seen.has(extra.key)) {
+      base.push({ key: extra.key, type: extra.type, default: undefined });
+      seen.add(extra.key);
+    }
+  }
+  return base
+    .map((e) => ({
+      ...e,
+      description: KEY_DESCRIPTIONS[e.key] || "",
+      secret: isSecretConfigKey(e.key),
+    }))
+    .sort((a, b) => a.key.localeCompare(b.key));
+}
+
+function getNested(obj, key) {
+  let cur = obj;
+  for (const part of String(key).split(".")) {
+    if (cur == null || typeof cur !== "object") return undefined;
+    cur = cur[part];
+  }
+  return cur;
+}
+
+/**
+ * Known keys annotated with each key's CURRENT value from the loaded config
+ * (secrets masked). `deps.loadConfig` is injectable for tests.
+ */
+export function describeConfigKeys(deps = {}) {
+  const load = deps.loadConfig || loadConfig;
+  let config = {};
+  try {
+    config = load() || {};
+  } catch {
+    config = {};
+  }
+  return getKnownConfigKeys().map((entry) => {
+    const current = getNested(config, entry.key);
+    let display = current;
+    if (entry.secret && current) display = "****";
+    return { ...entry, current: display };
+  });
+}

package/src/repl/agent-repl.js

@@ -92,6 +92,8 @@ import { expandMcpPrompt, renderMcpSurface } from "./mcp-prompt.js";
 import { newCostStore, addUsage } from "./session-cost.js";
 import { parseThinkCommand } from "./think-command.js";
 import { shouldStreamLive } from "./stream-decision.js";
+import { emptyTurnNotice } from "./empty-turn-notice.js";
+import { buildPermissionPrompt } from "./permission-prompt.js";
 import {
   parsePermissionTier,
   describeTier,
@@ -441,7 +443,7 @@ export async function startAgentRepl(options = {}) {
     _permissionRules = total > 0 ? loaded.rules : null;
     // Confirmer is shared by permission `ask` rules AND hook `ask` decisions,
     // so define it unconditionally (a `hook:` rule label flows through too).
-    _permissionConfirm = async ({ tool, args, rule }) => {
+    _permissionConfirm = async ({ tool, args, rule, reason }) => {
       await _fireNotification(
         `Permission needed: ${tool}${rule ? " (" + rule + ")" : ""}`,
       );
@@ -450,18 +452,11 @@ export async function startAgentRepl(options = {}) {
         output: process.stdout,
       });
       const q = (p) => new Promise((res) => rl.question(p, res));
-      const detail = args?.command
-        ? ` ${args.command}`
-        : args?.path
-          ? ` ${args.path}`
-          : "";
-      const ans = (
-        await q(
-          chalk.yellow(
-            `\n[Permission] ${rule} asks before ${tool}:${detail}\n  Proceed? (y/N) `,
-          ),
-        )
-      )
+      // Picks the right phrasing whether the caller passed a `rule`
+      // (settings/hook ask) or a `reason` (destructive-git / sensitive-file
+      // guards) — avoids the literal "null" the old template printed.
+      const header = buildPermissionPrompt({ tool, args, rule, reason });
+      const ans = (await q(chalk.yellow(`\n${header}\n  Proceed? (y/N) `)))
         .trim()
         .toLowerCase();
       rl.close();
@@ -3361,7 +3356,17 @@ export async function startAgentRepl(options = {}) {
           messages.push({ role: "assistant", content: streamResult.text });
         }
       } else if (!responseDirective.suppress) {
-        process.stdout.write("\n");
+        // Claude-Code 2.1.183 parity: a turn that completes with no answer text
+        // (model produced only extended-thinking blocks, or an empty response)
+        // otherwise returned to the prompt silently — looking like a no-op/hang.
+        // Surface a dim notice so the turn's completion is always visible.
+        const notice = emptyTurnNotice({
+          response: effectiveResponse,
+          reasoning,
+        });
+        process.stdout.write(
+          notice ? "\n" + chalk.dim("  " + notice) + "\n\n" : "\n",
+        );
       }
 
       // Auto-save session

package/src/repl/empty-turn-notice.js

@@ -0,0 +1,27 @@
+/**
+ * Decide the notice to show when an agent turn completes with NO answer text
+ * (Claude-Code 2.1.183 parity: "Fixed silent turn completion with only thinking
+ * blocks"). Without this, a turn whose model produced only extended-thinking
+ * blocks — or an empty response — returned to the prompt with nothing printed,
+ * looking like a silent no-op / hang.
+ *
+ * Pure + side-effect-free so it is unit-testable (the interactive REPL itself
+ * can't be driven over piped stdin). The REPL applies dim styling to the
+ * returned string.
+ *
+ * @param {object} opts
+ * @param {string} [opts.response]  the turn's final answer text
+ * @param {string} [opts.reasoning] extended-thinking text, if any
+ * @param {boolean} [opts.suppressed] true if an AssistantResponse hook suppressed the answer
+ * @returns {string|null} the notice text (no styling/newlines), or null when
+ *   the turn DID produce an answer or was hook-suppressed (nothing to add).
+ */
+export function emptyTurnNotice({ response, reasoning, suppressed } = {}) {
+  if (suppressed) return null;
+  // Truthiness mirrors the REPL's `if (effectiveResponse)` render branch: a
+  // non-empty answer (even whitespace) is printed there, so no notice is needed.
+  if (response) return null;
+  return reasoning
+    ? "(the model returned reasoning but no answer text)"
+    : "(the model returned no text response)";
+}

package/src/repl/permission-prompt.js

@@ -0,0 +1,26 @@
+/**
+ * Build the header line for the REPL's interactive permission prompt.
+ *
+ * The confirmer is shared by three callers that pass different shapes:
+ *   - settings `ask` rules / hook `ask`  → `rule` is set (e.g. "Bash", "hook:…")
+ *   - the destructive-git guard           → `reason` is set, `rule` is null
+ *   - the sensitive-file-write guard      → `reason` is set, `rule` is null
+ * The previous template interpolated `${rule}` unconditionally, so the
+ * rule-less guards rendered a literal "null" in the prompt. This picks the
+ * right phrasing for each case.
+ *
+ * Pure + side-effect-free so it is unit-testable (the interactive confirmer
+ * closure that consumes it cannot be driven over piped stdin).
+ *
+ * @returns {string} the prompt header (no styling, no trailing "Proceed?")
+ */
+export function buildPermissionPrompt({ tool, args, rule, reason } = {}) {
+  const detail = args?.command
+    ? ` ${args.command}`
+    : args?.path
+      ? ` ${args.path}`
+      : "";
+  if (rule) return `[Permission] rule "${rule}" asks before ${tool}:${detail}`;
+  if (reason) return `[Permission] ${reason}`;
+  return `[Permission] confirm ${tool}:${detail}`;
+}

package/src/runtime/coding-agent-policy.cjs

@@ -263,6 +263,11 @@ function isDangerousGitCommand(command) {
     case "clean":
       // Deletes untracked files — irrecoverable.
       return true;
+    case "commit":
+      // `--amend` rewrites the last commit (history rewrite); a plain commit is
+      // not flagged. (Claude-Code 2.1.183 blocks amend of commits the agent did
+      // not make this session; we conservatively confirm on any amend.)
+      return has("--amend");
     case "checkout":
       // Discard working-tree changes: `checkout -- <path>`, `checkout .`,
       // or `-f`/`--force` (a plain branch checkout is not flagged).
@@ -274,9 +279,19 @@ function isDangerousGitCommand(command) {
     case "switch":
       return has("-f", "--force", "--discard-changes");
     case "push":
-      // `--force`/`-f` rewrites remote history; `--force-with-lease`/
-      // `--force-if-includes` are the safe forms and are NOT flagged.
-      return has("--force", "-f");
+      // Rewrites or deletes remote refs:
+      //   --force/-f           → force overwrite remote history
+      //   a `+refspec` token   → per-ref force push (e.g. `push origin +main`)
+      //   --delete/-d, or a    → delete a remote branch/ref
+      //     `:dst` token (empty-source refspec, e.g. `push origin :main`)
+      //   --mirror             → can delete remote refs to mirror local
+      // `--force-with-lease`/`--force-if-includes` are the safe forms (distinct
+      // tokens from `--force`) and are NOT flagged; a normal `src:dst` refspec
+      // does not start with `:` so it is not flagged either.
+      return (
+        has("--force", "-f", "--delete", "-d", "--mirror") ||
+        rest.some((t) => t.startsWith("+") || t.startsWith(":"))
+      );
     case "branch":
       // `-D` (force delete, case-sensitive — `-d` only deletes merged branches)
       // or an explicit `--delete --force`.

package/src/runtime/coding-agent-shell-policy.cjs

@@ -11,11 +11,46 @@ const BLOCKED_SHELL_RULES = Object.freeze([
   {
     id: "dangerous-delete",
     decision: SHELL_POLICY_DECISIONS.DENY,
+    // Unix (rm) AND Windows/PowerShell deletes. This repo is Windows-primary
+    // (PowerShell is the default shell), where the `rm -rf` analog is
+    // `Remove-Item -Recurse -Force` / its alias `ri` — neither shares a first
+    // token with the Unix forms, so they must be listed explicitly. (`rm`/`del`
+    // already cover PowerShell's `rm`/`del` aliases; `rd` covers `rmdir`.)
     test: ({ firstToken }) =>
-      ["rm", "del", "erase", "rmdir", "rd"].includes(firstToken),
+      [
+        "rm",
+        "del",
+        "erase",
+        "rmdir",
+        "rd",
+        "remove-item",
+        "ri",
+      ].includes(firstToken),
     reason:
       "Destructive delete commands are blocked by the coding-agent shell policy.",
   },
+  {
+    // Disk / filesystem destroyers — near-zero legitimate use for a coding
+    // agent, catastrophic when wrong. Matched precisely so the common, benign
+    // PowerShell output formatters (Format-Table / Format-List / Format-Wide /
+    // Format-Custom / ft / fl) are NEVER caught — only `format` (cmd.exe disk
+    // format) and `Format-Volume` are. `dd` is blocked ONLY when writing to a
+    // raw block device (`of=/dev/…` / Windows `\\.\…`); file-image creation
+    // (`of=disk.img`) stays allowed.
+    id: "disk-destruction",
+    decision: SHELL_POLICY_DECISIONS.DENY,
+    test: ({ firstToken, normalized }) => {
+      if (firstToken === "format" || firstToken === "format-volume") return true;
+      if (firstToken === "mkfs" || firstToken.startsWith("mkfs.")) return true;
+      if (["wipefs", "shred", "diskpart"].includes(firstToken)) return true;
+      if (firstToken === "dd") {
+        return /\bof=(\/dev\/|\\\\)/i.test(normalized);
+      }
+      return false;
+    },
+    reason:
+      "Disk-destroying commands (format / Format-Volume / mkfs / wipefs / shred / diskpart / dd-to-device) are blocked by the coding-agent shell policy.",
+  },
   // The dangerous-git-* DENY rules MUST precede `git-tool-reroute` below:
   // `evaluateSegmentPolicy` returns the FIRST matching rule, and the reroute
   // rule matches every git command. Ordering reroute first (as it was) made

package/src/assets/web-panel/assets/ChatBubbleRenderer-BORlWmtB.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as S,U as n,R as a,S as y,K as C,Q as w,V as x,_ as B,b as s}from"./vendor-BvqAck49.js";import{_ as k}from"./index-wEmgmG9r.js";import"./icons-DP3uiYxy.js";const N={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),f=String(e.getMonth()+1).padStart(2,"0"),g=String(e.getDate()).padStart(2,"0"),b=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${f}-${g} ${b}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},T={class:"bubble"},M={class:"meta"},R={class:"actor"},V={class:"time"},q={class:"body"};function D(c,d,t,r,i,l){const o=v("a-tag");return u(),S("div",{class:B(["chat-row",{mine:r.isMine}])},[n("div",T,[n("div",M,[n("span",R,a(r.actorLabel),1),n("span",V,a(r.formattedTime),1)]),n("div",q,a(r.messageText),1),t.event.source.adapter?(u(),y(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[w(a(t.event.source.adapter),1)]),_:1},8,["color"])):x("v-if",!0)])],2)}const A=k(N,[["render",D],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-drwr9c/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{A as default};

package/src/assets/web-panel/assets/devWarning-DD8LWYUk.js

@@ -1 +0,0 @@
-import{O as r}from"./index-wEmgmG9r.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-Cnx1SQa9.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-oV-drKth.js";import{U as t}from"./index-wEmgmG9r.js";import"./vendor-BvqAck49.js";import"./responsiveObserve-DaEkOCb-.js";import"./useFlexGapSupport-Viy5DmaP.js";import"./styleChecker-ZSwUScrp.js";import"./index-ULxnYhN-.js";import"./icons-DP3uiYxy.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-vTEl5Ekh.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-Cw_UMO2L.js";import{U as t}from"./index-wEmgmG9r.js";import"./vendor-BvqAck49.js";import"./index-ULxnYhN-.js";import"./icons-DP3uiYxy.js";const s=t(o);export{s as default};