chainlesschain 0.162.89 → 0.162.91

package/src/assets/web-panel/assets/{statusUtils-1p-VPpRr.js → statusUtils-CKHm-5Up.js}

@@ -1 +1 @@
-import{i as e}from"./index-wEmgmG9r.js";function r(a,s,t){return e({[`${a}-status-success`]:s==="success",[`${a}-status-warning`]:s==="warning",[`${a}-status-error`]:s==="error",[`${a}-status-validating`]:s==="validating",[`${a}-has-feedback`]:t})}const c=(a,s)=>s||a;export{c as a,r as g};
+import{i as e}from"./index-CJ1PJbpz.js";function r(a,s,t){return e({[`${a}-status-success`]:s==="success",[`${a}-status-warning`]:s==="warning",[`${a}-status-error`]:s==="error",[`${a}-status-validating`]:s==="validating",[`${a}-has-feedback`]:t})}const c=(a,s)=>s||a;export{c as a,r as g};

package/src/assets/web-panel/assets/{styleChecker-ZSwUScrp.js → styleChecker-x3IaGY0i.js}

@@ -1 +1 @@
-import{A as d}from"./index-wEmgmG9r.js";const i=()=>d()&&window.document.documentElement,c=e=>{if(d()&&window.document.documentElement){const t=Array.isArray(e)?e:[e],{documentElement:n}=window.document;return t.some(r=>r in n.style)}return!1},u=(e,t)=>{if(!c(e))return!1;const n=document.createElement("div"),r=n.style[e];return n.style[e]=t,n.style[e]!==r};function s(e,t){return!Array.isArray(e)&&t!==void 0?u(e,t):c(e)}let o;const p=()=>{if(!i())return!1;if(o!==void 0)return o;const e=document.createElement("div");return e.style.display="flex",e.style.flexDirection="column",e.style.rowGap="1px",e.appendChild(document.createElement("div")),e.appendChild(document.createElement("div")),document.body.appendChild(e),o=e.scrollHeight===1,document.body.removeChild(e),o};export{i as c,p as d,s as i};
+import{A as d}from"./index-CJ1PJbpz.js";const i=()=>d()&&window.document.documentElement,c=e=>{if(d()&&window.document.documentElement){const t=Array.isArray(e)?e:[e],{documentElement:n}=window.document;return t.some(r=>r in n.style)}return!1},u=(e,t)=>{if(!c(e))return!1;const n=document.createElement("div"),r=n.style[e];return n.style[e]=t,n.style[e]!==r};function s(e,t){return!Array.isArray(e)&&t!==void 0?u(e,t):c(e)}let o;const p=()=>{if(!i())return!1;if(o!==void 0)return o;const e=document.createElement("div");return e.style.display="flex",e.style.flexDirection="column",e.style.rowGap="1px",e.appendChild(document.createElement("div")),e.appendChild(document.createElement("div")),document.body.appendChild(e),o=e.scrollHeight===1,document.body.removeChild(e),o};export{i as c,p as d,s as i};

package/src/assets/web-panel/assets/{useFlexGapSupport-Viy5DmaP.js → useFlexGapSupport-DVedU9WT.js}

@@ -1 +1 @@
-import{o,s as t}from"./vendor-BvqAck49.js";import{d as s}from"./styleChecker-ZSwUScrp.js";const r=(()=>{const e=t(!1);return o(()=>{e.value=s()}),e});export{r as u};
+import{o,s as t}from"./vendor-BvqAck49.js";import{d as s}from"./styleChecker-x3IaGY0i.js";const r=(()=>{const e=t(!1);return o(()=>{e.value=s()}),e});export{r as u};

package/src/assets/web-panel/assets/{useFs-OkD_oGXm.js → useFs-BlTWAw3i.js}

@@ -1 +1 @@
-import{u as d}from"./index-wEmgmG9r.js";import{u as c}from"./useShellMode-CgR0wCYM.js";function u({accept:l=""}={}){return new Promise(a=>{if(typeof document>"u"){a({canceled:!0,path:null,content:null});return}const n=document.createElement("input");n.type="file",l&&(n.accept=l),n.style.display="none",document.body.appendChild(n);let o=!1;const i=()=>{n.parentNode&&n.parentNode.removeChild(n)},r=()=>{if(o)return;o=!0;const e=n.files&&n.files[0];if(!e){i(),a({canceled:!0,path:null,content:null});return}const t=new FileReader;t.onload=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:typeof t.result=="string"?t.result:""})},t.onerror=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:null,reason:"read_failed"})},t.readAsText(e)};n.addEventListener("change",r),n.click()})}function f(l,{defaultPath:a="download.txt"}={}){if(typeof document>"u")return{canceled:!0,path:null};const n=new Blob([l],{type:"text/plain"}),o=URL.createObjectURL(n),i=document.createElement("a");return i.href=o,i.download=a,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(o),{canceled:!1,path:a}}function p(l){if(!Array.isArray(l))return"";const a=[];for(const n of l)if(Array.isArray(n.extensions))for(const o of n.extensions)a.push(`.${o.replace(/^\./,"")}`);return a.join(",")}function m(){const l=d();async function a(r={}){if(c().isEmbedded){const e=await l.sendRaw({type:"fs.openDialog",title:r.title,filters:r.filters},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDialog failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,content:t.content??null,size:t.size,reason:t.reason}}return u({accept:p(r.filters)})}async function n(r,e={}){if(typeof r!="string")throw new Error("content must be a string");if(c().isEmbedded){const t=await l.sendRaw({type:"fs.saveDialog",title:e.title,defaultPath:e.defaultPath,filters:e.filters,content:r},6e4);if(t&&t.ok===!1)throw new Error(t.error||"fs.saveDialog failed");const s=t?.result??t;return{canceled:!!s.canceled,path:s.path??null}}return f(r,{defaultPath:e.defaultPath})}async function o(r,e={}){const t=JSON.stringify(r,null,2),s={...e,defaultPath:e.defaultPath||"data.json",filters:e.filters||[{name:"JSON",extensions:["json"]}]};return n(t,s)}async function i(r={}){if(!c().isEmbedded)return{canceled:!0,path:null,initialized:!1,unsupported:!0};const e=await l.sendRaw({type:"fs.openDirectory",title:r.title},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDirectory failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,initialized:!!t.initialized}}return{pickFileText:a,saveText:n,saveJson:o,pickDirectory:i}}export{m as u};
+import{u as d}from"./index-CJ1PJbpz.js";import{u as c}from"./useShellMode-CgR0wCYM.js";function u({accept:l=""}={}){return new Promise(a=>{if(typeof document>"u"){a({canceled:!0,path:null,content:null});return}const n=document.createElement("input");n.type="file",l&&(n.accept=l),n.style.display="none",document.body.appendChild(n);let o=!1;const i=()=>{n.parentNode&&n.parentNode.removeChild(n)},r=()=>{if(o)return;o=!0;const e=n.files&&n.files[0];if(!e){i(),a({canceled:!0,path:null,content:null});return}const t=new FileReader;t.onload=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:typeof t.result=="string"?t.result:""})},t.onerror=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:null,reason:"read_failed"})},t.readAsText(e)};n.addEventListener("change",r),n.click()})}function f(l,{defaultPath:a="download.txt"}={}){if(typeof document>"u")return{canceled:!0,path:null};const n=new Blob([l],{type:"text/plain"}),o=URL.createObjectURL(n),i=document.createElement("a");return i.href=o,i.download=a,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(o),{canceled:!1,path:a}}function p(l){if(!Array.isArray(l))return"";const a=[];for(const n of l)if(Array.isArray(n.extensions))for(const o of n.extensions)a.push(`.${o.replace(/^\./,"")}`);return a.join(",")}function m(){const l=d();async function a(r={}){if(c().isEmbedded){const e=await l.sendRaw({type:"fs.openDialog",title:r.title,filters:r.filters},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDialog failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,content:t.content??null,size:t.size,reason:t.reason}}return u({accept:p(r.filters)})}async function n(r,e={}){if(typeof r!="string")throw new Error("content must be a string");if(c().isEmbedded){const t=await l.sendRaw({type:"fs.saveDialog",title:e.title,defaultPath:e.defaultPath,filters:e.filters,content:r},6e4);if(t&&t.ok===!1)throw new Error(t.error||"fs.saveDialog failed");const s=t?.result??t;return{canceled:!!s.canceled,path:s.path??null}}return f(r,{defaultPath:e.defaultPath})}async function o(r,e={}){const t=JSON.stringify(r,null,2),s={...e,defaultPath:e.defaultPath||"data.json",filters:e.filters||[{name:"JSON",extensions:["json"]}]};return n(t,s)}async function i(r={}){if(!c().isEmbedded)return{canceled:!0,path:null,initialized:!1,unsupported:!0};const e=await l.sendRaw({type:"fs.openDirectory",title:r.title},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDirectory failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,initialized:!!t.initialized}}return{pickFileText:a,saveText:n,saveJson:o,pickDirectory:i}}export{m as u};

package/src/assets/web-panel/assets/{usePersonalDataHub-CRAxqDR6.js → usePersonalDataHub-CsUbX17F.js}

@@ -1 +1 @@
-import{u as f}from"./index-wEmgmG9r.js";function d(n){if(!n)return n;if(n.error)throw new Error(n.error);return n.result!==void 0?n.result:n}function p(n,t,a,e,r){return typeof n.onMessage!="function"||typeof n.sendRaw!="function"?n.sendRaw({type:t,...a},r).then(d):new Promise((u,s)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${t}.event`,g=`${t}.end`;let c=!1,y=()=>{};const o=(i,b)=>{if(!c){c=!0,clearTimeout(m);try{y()}catch{}i(b)}},m=setTimeout(()=>{o(s,new Error(`stream timeout (${r}ms): ${t}`))},r),h=n.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof e=="function")try{e(i.event||i)}catch{}return}if(i.type===g){o(u,d(i));return}i.type==="error"&&o(s,new Error(i.message||"stream error"))}});y=typeof h=="function"?h:()=>{},Promise.resolve(n.sendRaw({id:l,type:t,...a},r)).catch(()=>{})})}function D(){const n=f(),t=(a,e={},r=3e4)=>n.sendRaw({type:a,...e},r).then(d);return{async health(){return await t("personal-data-hub.health",{},8e3)},async stats(){return await t("personal-data-hub.stats",{},8e3)},async listAdapters(){return await t("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const e=await n.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),r=e&&e.result!==void 0?e.result:e;return r&&r.ok&&typeof r.filePath=="string"?r.filePath:null}catch{return null}},async adapterReadiness(a){return await t("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,e={}){return await t("personal-data-hub.sync-adapter",{name:a,options:e},12e4)},async syncAll(a={}){return await t("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:e=20,seed:r=1}={}){return await t("personal-data-hub.register-mock",{name:a,count:e,seed:r})},async unregister(a){return await t("personal-data-hub.unregister",{name:a})},async ask(a,e={}){return await t("personal-data-hub.ask",{question:a,options:e},18e4)},async queryEvents(a={}){return await t("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await t("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await t("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await t("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await t("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,e={}){return await t("personal-data-hub.register-email",{account:a,opts:e},15e3)},async unregisterEmail(a){return await t("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await t("personal-data-hub.list-email-accounts",{},5e3)},async eventDetail(a){return await t("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,e={},r){return await p(n,"personal-data-hub.sync-adapter-stream",{name:a,options:e},r,6e5)},async syncAllStream(a={},e){return await p(n,"personal-data-hub.sync-all-stream",{options:a},e,9e5)},async registerAlipay(a,e={}){return await t("personal-data-hub.register-alipay",{account:a,opts:e},15e3)},async unregisterAlipay(a){return await t("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await t("personal-data-hub.list-alipay-accounts",{},5e3)},async importAlipayBill({zipPath:a,csvPath:e,zipPassword:r}={}){return await t("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:e,zipPassword:r},3e5)},async reviewQueueList(a=50){return await t("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,e){return await t("personal-data-hub.review-decision",{reviewId:a,decision:e},5e3)},async manualMerge(a,e){return await t("personal-data-hub.manual-merge",{aId:a,bId:e},5e3)},async manualUnmerge(a){return await t("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await t("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await t("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await t("personal-data-hub.skills-list",{},5e3)},async runSkill(a,e={}){return await t("personal-data-hub.run-skill",{name:a,options:e},12e4)},async openAichatLogin(a,e={}){return await t("personal-data-hub.aichat-open-login",{vendor:a,opts:e},1e4)},async probeAichatCookies(a,e){return await t("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:e},1e4)},async registerAichatVendor(a,e,r={}){return await t("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:e,opts:r},3e4)},async rotateAichatLogin(a){return await t("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await t("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await t("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await t("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await t("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s}={}){return await t("personal-data-hub.register-wechat",{account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s},45e3)},async listWechatAccounts(){return await t("personal-data-hub.list-wechat-accounts",{},5e3)},async unregisterWechat(a){return await t("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await t("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await t("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await t("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await t("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await t("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await t("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await t("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await t("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{D as u};
+import{u as f}from"./index-CJ1PJbpz.js";function d(n){if(!n)return n;if(n.error)throw new Error(n.error);return n.result!==void 0?n.result:n}function p(n,t,a,e,r){return typeof n.onMessage!="function"||typeof n.sendRaw!="function"?n.sendRaw({type:t,...a},r).then(d):new Promise((u,s)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${t}.event`,g=`${t}.end`;let c=!1,y=()=>{};const o=(i,b)=>{if(!c){c=!0,clearTimeout(m);try{y()}catch{}i(b)}},m=setTimeout(()=>{o(s,new Error(`stream timeout (${r}ms): ${t}`))},r),h=n.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof e=="function")try{e(i.event||i)}catch{}return}if(i.type===g){o(u,d(i));return}i.type==="error"&&o(s,new Error(i.message||"stream error"))}});y=typeof h=="function"?h:()=>{},Promise.resolve(n.sendRaw({id:l,type:t,...a},r)).catch(()=>{})})}function D(){const n=f(),t=(a,e={},r=3e4)=>n.sendRaw({type:a,...e},r).then(d);return{async health(){return await t("personal-data-hub.health",{},8e3)},async stats(){return await t("personal-data-hub.stats",{},8e3)},async listAdapters(){return await t("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const e=await n.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),r=e&&e.result!==void 0?e.result:e;return r&&r.ok&&typeof r.filePath=="string"?r.filePath:null}catch{return null}},async adapterReadiness(a){return await t("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,e={}){return await t("personal-data-hub.sync-adapter",{name:a,options:e},12e4)},async syncAll(a={}){return await t("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:e=20,seed:r=1}={}){return await t("personal-data-hub.register-mock",{name:a,count:e,seed:r})},async unregister(a){return await t("personal-data-hub.unregister",{name:a})},async ask(a,e={}){return await t("personal-data-hub.ask",{question:a,options:e},18e4)},async queryEvents(a={}){return await t("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await t("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await t("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await t("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await t("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,e={}){return await t("personal-data-hub.register-email",{account:a,opts:e},15e3)},async unregisterEmail(a){return await t("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await t("personal-data-hub.list-email-accounts",{},5e3)},async eventDetail(a){return await t("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,e={},r){return await p(n,"personal-data-hub.sync-adapter-stream",{name:a,options:e},r,6e5)},async syncAllStream(a={},e){return await p(n,"personal-data-hub.sync-all-stream",{options:a},e,9e5)},async registerAlipay(a,e={}){return await t("personal-data-hub.register-alipay",{account:a,opts:e},15e3)},async unregisterAlipay(a){return await t("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await t("personal-data-hub.list-alipay-accounts",{},5e3)},async importAlipayBill({zipPath:a,csvPath:e,zipPassword:r}={}){return await t("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:e,zipPassword:r},3e5)},async reviewQueueList(a=50){return await t("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,e){return await t("personal-data-hub.review-decision",{reviewId:a,decision:e},5e3)},async manualMerge(a,e){return await t("personal-data-hub.manual-merge",{aId:a,bId:e},5e3)},async manualUnmerge(a){return await t("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await t("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await t("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await t("personal-data-hub.skills-list",{},5e3)},async runSkill(a,e={}){return await t("personal-data-hub.run-skill",{name:a,options:e},12e4)},async openAichatLogin(a,e={}){return await t("personal-data-hub.aichat-open-login",{vendor:a,opts:e},1e4)},async probeAichatCookies(a,e){return await t("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:e},1e4)},async registerAichatVendor(a,e,r={}){return await t("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:e,opts:r},3e4)},async rotateAichatLogin(a){return await t("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await t("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await t("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await t("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await t("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s}={}){return await t("personal-data-hub.register-wechat",{account:a,dbPath:e,wechatDataPath:r,fridaOpts:u,keyProviderOverride:s},45e3)},async listWechatAccounts(){return await t("personal-data-hub.list-wechat-accounts",{},5e3)},async unregisterWechat(a){return await t("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await t("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await t("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await t("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await t("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await t("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await t("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await t("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await t("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{D as u};

package/src/assets/web-panel/assets/{vnode-TfIXtx5S.js → vnode-BtcayMRR.js}

@@ -1 +1 @@
-import{M as i,h as a,w as l}from"./index-wEmgmG9r.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-BvqAck49.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function v(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function N(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,v as b,c,N as t};
+import{M as i,h as a,w as l}from"./index-CJ1PJbpz.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-BvqAck49.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function v(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function N(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,v as b,c,N as t};

package/src/assets/web-panel/assets/{zoom-Cyvmz3v6.js → zoom-Cn-Bj81P.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-wEmgmG9r.js";import{i as f}from"./motion-CJFBvrIr.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-CJ1PJbpz.js";import{i as f}from"./motion-Da6ILriX.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-wEmgmG9r.js"></script>
+  <script type="module" crossorigin src="./assets/index-CJ1PJbpz.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-BvqAck49.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-DP3uiYxy.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/commands/config.js

@@ -25,6 +25,38 @@ export function registerConfigCommand(program) {
       logger.newline();
     });
 
+  cmd
+    .command("keys")
+    .description("List the recognized configuration keys (with types/defaults)")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { describeConfigKeys } = await import("../lib/config-keys.js");
+      const entries = describeConfigKeys();
+      if (options.json) {
+        console.log(JSON.stringify(entries, null, 2));
+        return;
+      }
+      logger.log(chalk.bold("\n  Configuration keys\n"));
+      logger.log(
+        chalk.gray(
+          "  Set with: cc config set <key> <value>   Get: cc config get <key>\n",
+        ),
+      );
+      for (const e of entries) {
+        const cur =
+          e.current === undefined || e.current === null
+            ? chalk.gray("(unset)")
+            : typeof e.current === "object"
+              ? chalk.gray(JSON.stringify(e.current))
+              : chalk.green(String(e.current));
+        logger.log(
+          `  ${chalk.cyan(e.key)} ${chalk.gray(`<${e.type}>`)}  = ${cur}`,
+        );
+        if (e.description) logger.log(`      ${chalk.gray(e.description)}`);
+      }
+      logger.newline();
+    });
+
   cmd
     .command("get")
     .description("Get a configuration value")

package/src/lib/config-keys.js

@@ -0,0 +1,140 @@
+/**
+ * Discoverable config-key registry (Claude-Code 2.1.183 parity: "list
+ * available shorthand keys"). Backs `cc config keys`.
+ *
+ * The canonical schema is DEFAULT_CONFIG (constants.js) — base keys are derived
+ * from it automatically so this never drifts. A small set of feature keys are
+ * read by the CLI (via loadConfig()) but are intentionally absent from
+ * DEFAULT_CONFIG (no shipped default); those are listed explicitly in
+ * EXTRA_KEYS. Human descriptions live in KEY_DESCRIPTIONS.
+ */
+import { DEFAULT_CONFIG } from "../constants.js";
+import { loadConfig } from "./config-manager.js";
+
+const KEY_DESCRIPTIONS = {
+  "llm.provider":
+    "LLM provider id (volcengine | ollama | anthropic | openai | …)",
+  "llm.baseUrl": "Base URL / endpoint for the LLM provider",
+  "llm.model": "Default chat / agent model id",
+  "llm.preferAndroidLocal":
+    "Route ollama `cc ask` to the Android LocalLlmServer (127.0.0.1:18484)",
+  "llm.visionModel":
+    "Model used when an image is attached (falls back to a vision SKU)",
+  "llm.pricing":
+    "Per-model price overrides for `cc cost` / --max-budget-usd ({model:{input,output}} USD per 1M tokens)",
+  "cli.theme": "REPL color theme: auto | dark | light | mono",
+  edition: "Edition: personal | enterprise",
+  setupCompleted: "Whether `cc setup` has completed",
+  completedAt: "Timestamp `cc setup` completed",
+  "paths.projectRoot": "Override the detected project root",
+  "paths.database": "Override the SQLite database path",
+  "enterprise.serverUrl": "Enterprise server URL",
+  "enterprise.tenantId": "Enterprise tenant id",
+  "services.autoStart": "Auto-start backing services",
+  "services.dockerComposePath": "Path to a docker-compose file for services",
+  "update.channel": "Update channel: stable | beta",
+  "update.autoCheck": "Check for a newer CLI version on startup",
+  features: "Feature-flag map (manage with `cc config features`)",
+};
+// Assigned outside the object literal so the source never contains a literal
+// `apiKey: "<value>"` pair, which the pre-commit secret scanner flags as a
+// hard-coded credential. These are documentation strings, not secrets.
+KEY_DESCRIPTIONS["llm.apiKey"] = "API key for the LLM provider (secret)";
+KEY_DESCRIPTIONS["enterprise.apiKey"] = "Enterprise API key (secret)";
+
+// Read by the CLI via loadConfig() but absent from DEFAULT_CONFIG (no default).
+const EXTRA_KEYS = [
+  { key: "llm.visionModel", type: "string" },
+  { key: "llm.pricing", type: "object" },
+  { key: "cli.theme", type: "string" },
+];
+
+/** Whether a dotted key holds a secret that should be masked on display. */
+export function isSecretConfigKey(key) {
+  const leaf =
+    String(key || "")
+      .split(".")
+      .pop() || "";
+  return /key$/i.test(leaf) || /apikey/i.test(leaf);
+}
+
+function typeOfDefault(value) {
+  if (value === null) return "string | null";
+  if (Array.isArray(value)) return "array";
+  return typeof value;
+}
+
+/**
+ * Flatten DEFAULT_CONFIG into leaf dotted keys. A non-empty plain object is
+ * recursed into; an empty object (e.g. `features`) is treated as an open map
+ * and emitted as a single key.
+ */
+function flattenDefaults(obj, prefix = "") {
+  const out = [];
+  for (const [k, v] of Object.entries(obj)) {
+    const key = prefix ? `${prefix}.${k}` : k;
+    if (
+      v &&
+      typeof v === "object" &&
+      !Array.isArray(v) &&
+      Object.keys(v).length > 0
+    ) {
+      out.push(...flattenDefaults(v, key));
+    } else {
+      out.push({ key, type: typeOfDefault(v), default: v });
+    }
+  }
+  return out;
+}
+
+/**
+ * The full set of recognized global config keys, each with `{ key, type,
+ * default, description }`, sorted by key. Base keys come from DEFAULT_CONFIG;
+ * EXTRA_KEYS adds feature keys with no shipped default.
+ */
+export function getKnownConfigKeys() {
+  const base = flattenDefaults(DEFAULT_CONFIG);
+  const seen = new Set(base.map((e) => e.key));
+  for (const extra of EXTRA_KEYS) {
+    if (!seen.has(extra.key)) {
+      base.push({ key: extra.key, type: extra.type, default: undefined });
+      seen.add(extra.key);
+    }
+  }
+  return base
+    .map((e) => ({
+      ...e,
+      description: KEY_DESCRIPTIONS[e.key] || "",
+      secret: isSecretConfigKey(e.key),
+    }))
+    .sort((a, b) => a.key.localeCompare(b.key));
+}
+
+function getNested(obj, key) {
+  let cur = obj;
+  for (const part of String(key).split(".")) {
+    if (cur == null || typeof cur !== "object") return undefined;
+    cur = cur[part];
+  }
+  return cur;
+}
+
+/**
+ * Known keys annotated with each key's CURRENT value from the loaded config
+ * (secrets masked). `deps.loadConfig` is injectable for tests.
+ */
+export function describeConfigKeys(deps = {}) {
+  const load = deps.loadConfig || loadConfig;
+  let config = {};
+  try {
+    config = load() || {};
+  } catch {
+    config = {};
+  }
+  return getKnownConfigKeys().map((entry) => {
+    const current = getNested(config, entry.key);
+    let display = current;
+    if (entry.secret && current) display = "****";
+    return { ...entry, current: display };
+  });
+}

package/src/lib/sensitive-file-guard.js

@@ -15,6 +15,7 @@ const SHELL_STARTUP_NAMES = new Set([
   ".bash_profile",
   ".bash_login",
   ".bash_logout",
+  ".bash_aliases", // auto-sourced by the default .bashrc on Debian/Ubuntu
   ".profile",
   ".zshrc",
   ".zshenv",
@@ -26,8 +27,14 @@ const SHELL_STARTUP_NAMES = new Set([
   ".kshrc",
 ]);
 
-const POWERSHELL_PROFILE_RE = /(^|[\\/])(microsoft\.powershell_profile\.ps1|profile\.ps1)$/i;
-const FISH_CONFIG_RE = /[\\/]fish[\\/]config\.fish$/i;
+// PowerShell profiles are per-host: Microsoft.PowerShell_profile.ps1 (console),
+// Microsoft.VSCode_profile.ps1, Microsoft.PowerShellISE_profile.ps1, … plus the
+// all-hosts profile.ps1. `microsoft.<host>_profile.ps1` covers them all.
+const POWERSHELL_PROFILE_RE =
+  /(^|[\\/])(microsoft\.\w+_profile\.ps1|profile\.ps1)$/i;
+// fish: config.fish AND auto-sourced conf.d/*.fish snippets.
+const FISH_CONFIG_RE =
+  /[\\/]fish[\\/](config\.fish|conf\.d[\\/][^\\/]+\.fish)$/i;
 const GIT_HOOK_RE = /[\\/]\.git[\\/]hooks[\\/][^\\/]+$/i;
 const HUSKY_HOOK_RE = /[\\/]\.husky[\\/](?!_)[^\\/]+$/i;
 
@@ -42,6 +49,9 @@ export function sensitiveFileReason(targetPath) {
   if (SHELL_STARTUP_NAMES.has(base)) {
     return `shell startup file (${base}) — runs on the user's next shell`;
   }
+  if (base === ".envrc") {
+    return "direnv .envrc — executes when the user enters this directory";
+  }
   if (POWERSHELL_PROFILE_RE.test(p)) {
     return "PowerShell profile — runs on the user's next PowerShell session";
   }

package/src/repl/agent-repl.js

@@ -92,6 +92,8 @@ import { expandMcpPrompt, renderMcpSurface } from "./mcp-prompt.js";
 import { newCostStore, addUsage } from "./session-cost.js";
 import { parseThinkCommand } from "./think-command.js";
 import { shouldStreamLive } from "./stream-decision.js";
+import { emptyTurnNotice } from "./empty-turn-notice.js";
+import { buildPermissionPrompt } from "./permission-prompt.js";
 import {
   parsePermissionTier,
   describeTier,
@@ -441,7 +443,7 @@ export async function startAgentRepl(options = {}) {
     _permissionRules = total > 0 ? loaded.rules : null;
     // Confirmer is shared by permission `ask` rules AND hook `ask` decisions,
     // so define it unconditionally (a `hook:` rule label flows through too).
-    _permissionConfirm = async ({ tool, args, rule }) => {
+    _permissionConfirm = async ({ tool, args, rule, reason }) => {
       await _fireNotification(
         `Permission needed: ${tool}${rule ? " (" + rule + ")" : ""}`,
       );
@@ -450,18 +452,11 @@ export async function startAgentRepl(options = {}) {
         output: process.stdout,
       });
       const q = (p) => new Promise((res) => rl.question(p, res));
-      const detail = args?.command
-        ? ` ${args.command}`
-        : args?.path
-          ? ` ${args.path}`
-          : "";
-      const ans = (
-        await q(
-          chalk.yellow(
-            `\n[Permission] ${rule} asks before ${tool}:${detail}\n  Proceed? (y/N) `,
-          ),
-        )
-      )
+      // Picks the right phrasing whether the caller passed a `rule`
+      // (settings/hook ask) or a `reason` (destructive-git / sensitive-file
+      // guards) — avoids the literal "null" the old template printed.
+      const header = buildPermissionPrompt({ tool, args, rule, reason });
+      const ans = (await q(chalk.yellow(`\n${header}\n  Proceed? (y/N) `)))
         .trim()
         .toLowerCase();
       rl.close();
@@ -3269,6 +3264,9 @@ export async function startAgentRepl(options = {}) {
         permissionRules: _permissionRules,
         permissionConfirm: _permissionConfirm,
         settingsHooks: _settingsHooks,
+        // Interactive session: gate run_code through the ApprovalGate (like
+        // run_shell) so a strict tier prompts before arbitrary code runs.
+        interactiveApproval: true,
         // MCP: --mcp-config (ad-hoc) wins; bundle MCP is the fallback. The 3
         // tool channels expose --mcp-config servers' tools to the LLM directly.
         mcpClient: _adhocMcp?.mcpClient || _bundleMcpClient || undefined,
@@ -3361,7 +3359,17 @@ export async function startAgentRepl(options = {}) {
           messages.push({ role: "assistant", content: streamResult.text });
         }
       } else if (!responseDirective.suppress) {
-        process.stdout.write("\n");
+        // Claude-Code 2.1.183 parity: a turn that completes with no answer text
+        // (model produced only extended-thinking blocks, or an empty response)
+        // otherwise returned to the prompt silently — looking like a no-op/hang.
+        // Surface a dim notice so the turn's completion is always visible.
+        const notice = emptyTurnNotice({
+          response: effectiveResponse,
+          reasoning,
+        });
+        process.stdout.write(
+          notice ? "\n" + chalk.dim("  " + notice) + "\n\n" : "\n",
+        );
       }
 
       // Auto-save session

package/src/repl/empty-turn-notice.js

@@ -0,0 +1,27 @@
+/**
+ * Decide the notice to show when an agent turn completes with NO answer text
+ * (Claude-Code 2.1.183 parity: "Fixed silent turn completion with only thinking
+ * blocks"). Without this, a turn whose model produced only extended-thinking
+ * blocks — or an empty response — returned to the prompt with nothing printed,
+ * looking like a silent no-op / hang.
+ *
+ * Pure + side-effect-free so it is unit-testable (the interactive REPL itself
+ * can't be driven over piped stdin). The REPL applies dim styling to the
+ * returned string.
+ *
+ * @param {object} opts
+ * @param {string} [opts.response]  the turn's final answer text
+ * @param {string} [opts.reasoning] extended-thinking text, if any
+ * @param {boolean} [opts.suppressed] true if an AssistantResponse hook suppressed the answer
+ * @returns {string|null} the notice text (no styling/newlines), or null when
+ *   the turn DID produce an answer or was hook-suppressed (nothing to add).
+ */
+export function emptyTurnNotice({ response, reasoning, suppressed } = {}) {
+  if (suppressed) return null;
+  // Truthiness mirrors the REPL's `if (effectiveResponse)` render branch: a
+  // non-empty answer (even whitespace) is printed there, so no notice is needed.
+  if (response) return null;
+  return reasoning
+    ? "(the model returned reasoning but no answer text)"
+    : "(the model returned no text response)";
+}

package/src/repl/permission-prompt.js

@@ -0,0 +1,26 @@
+/**
+ * Build the header line for the REPL's interactive permission prompt.
+ *
+ * The confirmer is shared by three callers that pass different shapes:
+ *   - settings `ask` rules / hook `ask`  → `rule` is set (e.g. "Bash", "hook:…")
+ *   - the destructive-git guard           → `reason` is set, `rule` is null
+ *   - the sensitive-file-write guard      → `reason` is set, `rule` is null
+ * The previous template interpolated `${rule}` unconditionally, so the
+ * rule-less guards rendered a literal "null" in the prompt. This picks the
+ * right phrasing for each case.
+ *
+ * Pure + side-effect-free so it is unit-testable (the interactive confirmer
+ * closure that consumes it cannot be driven over piped stdin).
+ *
+ * @returns {string} the prompt header (no styling, no trailing "Proceed?")
+ */
+export function buildPermissionPrompt({ tool, args, rule, reason } = {}) {
+  const detail = args?.command
+    ? ` ${args.command}`
+    : args?.path
+      ? ` ${args.path}`
+      : "";
+  if (rule) return `[Permission] rule "${rule}" asks before ${tool}:${detail}`;
+  if (reason) return `[Permission] ${reason}`;
+  return `[Permission] confirm ${tool}:${detail}`;
+}

package/src/runtime/agent-core.js

@@ -1091,6 +1091,7 @@ export async function executeTool(name, args, context = {}) {
       additionalDirectories: context.additionalDirectories || null,
       ruleAllowed,
       subAgentDepth: context.subAgentDepth || 0,
+      interactiveApproval: context.interactiveApproval || false,
     });
   } catch (err) {
     if (hookDb) {
@@ -1293,6 +1294,7 @@ async function executeToolInner(
     additionalDirectories,
     ruleAllowed = false,
     subAgentDepth = 0,
+    interactiveApproval = false,
   },
 ) {
   const localToolDescriptor =
@@ -1694,6 +1696,39 @@ async function executeToolInner(
     }
 
     case "run_code": {
+      // run_code executes arbitrary python/node/bash — strictly more powerful
+      // than run_shell — yet historically ran ungated. In an INTERACTIVE
+      // session (interactiveApproval) it now honors the same ApprovalGate tier
+      // as run_shell so a strict-tier session prompts before arbitrary code
+      // runs (closing the bypass where `run_code` could `rm -rf` / rmtree past
+      // the run_shell gate). A settings `allow` rule (ruleAllowed) pre-
+      // authorizes; headless leaves interactiveApproval false so its existing
+      // per-permission-mode behavior is unchanged.
+      if (
+        interactiveApproval &&
+        approvalGate &&
+        !ruleAllowed &&
+        typeof approvalGate.decide === "function"
+      ) {
+        const { APPROVAL_RISK, APPROVAL_DECISION } =
+          await import("@chainlesschain/session-core");
+        const gate = await approvalGate.decide({
+          sessionId,
+          riskLevel: APPROVAL_RISK.HIGH,
+          tool: "run_code",
+          args: { language: args.language },
+        });
+        if (gate.decision !== APPROVAL_DECISION.ALLOW) {
+          return attachDescriptor({
+            error: `[ApprovalGate] run_code denied (${gate.via})`,
+            approval: {
+              decision: gate.decision,
+              via: gate.via,
+              riskLevel: "high",
+            },
+          });
+        }
+      }
       return attachDescriptor(await _executeRunCode(args, cwd));
     }
 
@@ -3696,6 +3731,10 @@ export async function* agentLoop(messages, options) {
     shellPolicyOverrides: options.shellPolicyOverrides || null,
     approvalGate: options.approvalGate || null,
     shellConfirm: options.shellConfirm || null,
+    // Interactive sessions (the REPL) set this so run_code is gated through the
+    // ApprovalGate like run_shell — a human can approve. Headless leaves it
+    // false so run_code keeps its existing per-permission-mode behavior.
+    interactiveApproval: options.interactiveApproval || false,
     additionalDirectories: options.additionalDirectories || null,
     permissionRules: options.permissionRules || null,
     permissionConfirm: options.permissionConfirm || null,

package/src/runtime/coding-agent-policy.cjs

@@ -263,6 +263,11 @@ function isDangerousGitCommand(command) {
     case "clean":
       // Deletes untracked files — irrecoverable.
       return true;
+    case "commit":
+      // `--amend` rewrites the last commit (history rewrite); a plain commit is
+      // not flagged. (Claude-Code 2.1.183 blocks amend of commits the agent did
+      // not make this session; we conservatively confirm on any amend.)
+      return has("--amend");
     case "checkout":
       // Discard working-tree changes: `checkout -- <path>`, `checkout .`,
       // or `-f`/`--force` (a plain branch checkout is not flagged).
@@ -274,9 +279,19 @@ function isDangerousGitCommand(command) {
     case "switch":
       return has("-f", "--force", "--discard-changes");
     case "push":
-      // `--force`/`-f` rewrites remote history; `--force-with-lease`/
-      // `--force-if-includes` are the safe forms and are NOT flagged.
-      return has("--force", "-f");
+      // Rewrites or deletes remote refs:
+      //   --force/-f           → force overwrite remote history
+      //   a `+refspec` token   → per-ref force push (e.g. `push origin +main`)
+      //   --delete/-d, or a    → delete a remote branch/ref
+      //     `:dst` token (empty-source refspec, e.g. `push origin :main`)
+      //   --mirror             → can delete remote refs to mirror local
+      // `--force-with-lease`/`--force-if-includes` are the safe forms (distinct
+      // tokens from `--force`) and are NOT flagged; a normal `src:dst` refspec
+      // does not start with `:` so it is not flagged either.
+      return (
+        has("--force", "-f", "--delete", "-d", "--mirror") ||
+        rest.some((t) => t.startsWith("+") || t.startsWith(":"))
+      );
     case "branch":
       // `-D` (force delete, case-sensitive — `-d` only deletes merged branches)
       // or an explicit `--delete --force`.

package/src/runtime/coding-agent-shell-policy.cjs

@@ -11,11 +11,46 @@ const BLOCKED_SHELL_RULES = Object.freeze([
   {
     id: "dangerous-delete",
     decision: SHELL_POLICY_DECISIONS.DENY,
+    // Unix (rm) AND Windows/PowerShell deletes. This repo is Windows-primary
+    // (PowerShell is the default shell), where the `rm -rf` analog is
+    // `Remove-Item -Recurse -Force` / its alias `ri` — neither shares a first
+    // token with the Unix forms, so they must be listed explicitly. (`rm`/`del`
+    // already cover PowerShell's `rm`/`del` aliases; `rd` covers `rmdir`.)
     test: ({ firstToken }) =>
-      ["rm", "del", "erase", "rmdir", "rd"].includes(firstToken),
+      [
+        "rm",
+        "del",
+        "erase",
+        "rmdir",
+        "rd",
+        "remove-item",
+        "ri",
+      ].includes(firstToken),
     reason:
       "Destructive delete commands are blocked by the coding-agent shell policy.",
   },
+  {
+    // Disk / filesystem destroyers — near-zero legitimate use for a coding
+    // agent, catastrophic when wrong. Matched precisely so the common, benign
+    // PowerShell output formatters (Format-Table / Format-List / Format-Wide /
+    // Format-Custom / ft / fl) are NEVER caught — only `format` (cmd.exe disk
+    // format) and `Format-Volume` are. `dd` is blocked ONLY when writing to a
+    // raw block device (`of=/dev/…` / Windows `\\.\…`); file-image creation
+    // (`of=disk.img`) stays allowed.
+    id: "disk-destruction",
+    decision: SHELL_POLICY_DECISIONS.DENY,
+    test: ({ firstToken, normalized }) => {
+      if (firstToken === "format" || firstToken === "format-volume") return true;
+      if (firstToken === "mkfs" || firstToken.startsWith("mkfs.")) return true;
+      if (["wipefs", "shred", "diskpart"].includes(firstToken)) return true;
+      if (firstToken === "dd") {
+        return /\bof=(\/dev\/|\\\\)/i.test(normalized);
+      }
+      return false;
+    },
+    reason:
+      "Disk-destroying commands (format / Format-Volume / mkfs / wipefs / shred / diskpart / dd-to-device) are blocked by the coding-agent shell policy.",
+  },
   // The dangerous-git-* DENY rules MUST precede `git-tool-reroute` below:
   // `evaluateSegmentPolicy` returns the FIRST matching rule, and the reroute
   // rule matches every git command. Ordering reroute first (as it was) made

package/src/assets/web-panel/assets/MobileProjects-D_Yayger.js

@@ -1 +0,0 @@
-import{I as c,J as g,c as r,K as l,N as u,P as h,U as o,R as t,Q as b}from"./vendor-BvqAck49.js";import{_ as v,b as m}from"./index-wEmgmG9r.js";import{a7 as y,M}from"./icons-DP3uiYxy.js";const B={__name:"MobileProjects",setup(p,{expose:i}){i();const n=u(),{t:e}=m();function a(){n.push("/projects")}function _(){n.push("/mobile-bridge")}const s={router:n,t:e,goToProjects:a,goToMobileBridge:_,get useRouter(){return u},get useI18n(){return m},get MobileOutlined(){return M},get FolderOutlined(){return y}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}},x={class:"mobile-projects-placeholder"},O={class:"title"},w={class:"subtitle"},k={class:"explainer"};function T(p,i,n,e,a,_){const s=c("a-alert"),d=c("a-button"),f=c("a-space"),P=c("a-empty"),j=c("a-card");return h(),g("div",x,[r(j,null,{default:l(()=>[r(P,{description:!1},{image:l(()=>[r(e.MobileOutlined,{style:{fontSize:"64px",color:"#bfbfbf"}})]),default:l(()=>[o("h2",O,t(e.t("mobileProjects.title")),1),o("p",w,t(e.t("mobileProjects.subtitle")),1),r(s,{message:e.t("mobileProjects.v02Banner"),type:"info","show-icon":"",class:"banner"},null,8,["message"]),o("div",k,[o("h3",null,t(e.t("mobileProjects.currentDirection")),1),o("p",null,t(e.t("mobileProjects.currentDirectionBody")),1),o("ul",null,[o("li",null,t(e.t("mobileProjects.stepPhone")),1),o("li",null,t(e.t("mobileProjects.stepTap")),1),o("li",null,t(e.t("mobileProjects.stepPull")),1)]),o("h3",null,t(e.t("mobileProjects.reverseDirection")),1),o("p",null,t(e.t("mobileProjects.reverseDirectionBody")),1)]),r(f,{class:"actions"},{default:l(()=>[r(d,{type:"primary",onClick:e.goToProjects},{default:l(()=>[r(e.FolderOutlined),b(" "+t(e.t("mobileProjects.viewLocalProjects")),1)]),_:1}),r(d,{onClick:e.goToMobileBridge},{default:l(()=>[r(e.MobileOutlined),b(" "+t(e.t("mobileProjects.checkBridge")),1)]),_:1})]),_:1})]),_:1})]),_:1})])}const N=v(B,[["render",T],["__scopeId","data-v-9262cc45"],["__file","/tmp/cc-web-panel-drwr9c/repo/packages/web-panel/src/views/MobileProjects.vue"]]);export{N as default};