chainlesschain 0.165.5 → 0.165.6

package/src/runtime/headless-runner.js

@@ -800,9 +800,8 @@ async function runAgentHeadlessInWorkspace(
       const loaded = loadHooks({ cwd, settingsFile: options.settingsFile });
       // Fold in installed plugins' hooks/hooks.json (Phase 3.3c) — plugins ADD
       // to the user's settings hooks, never replace them.
-      const { mergePluginHooks } = await import(
-        "../lib/plugin-runtime/hooks.js"
-      );
+      const { mergePluginHooks } =
+        await import("../lib/plugin-runtime/hooks.js");
       const effectiveHooks = mergePluginHooks(
         attachAuthorityErrors(loaded.hooks, loaded.authorityErrors),
         { cwd },
@@ -843,9 +842,8 @@ async function runAgentHeadlessInWorkspace(
   // the run, so no explicit restore is needed.
   if (!hermeticExecution) {
     try {
-      const { applyPluginBinPath } = await import(
-        "../lib/plugin-runtime/bin.js"
-      );
+      const { applyPluginBinPath } =
+        await import("../lib/plugin-runtime/bin.js");
       applyPluginBinPath({ cwd });
     } catch {
       /* best-effort — plugin bin PATH never blocks a headless run */
@@ -856,9 +854,8 @@ async function runAgentHeadlessInWorkspace(
   // keys not already set; the process exits at the end so no restore is needed.
   if (!hermeticExecution) {
     try {
-      const { applyPluginSettingsEnv } = await import(
-        "../lib/plugin-runtime/settings.js"
-      );
+      const { applyPluginSettingsEnv } =
+        await import("../lib/plugin-runtime/settings.js");
       applyPluginSettingsEnv({ cwd });
     } catch {
       /* best-effort — plugin settings never block a headless run */
@@ -991,9 +988,8 @@ async function runAgentHeadlessInWorkspace(
   if (isHeadlessConfigCommand(prompt)) {
     const cm = await import("../lib/config-manager.js");
     const { getConfigPath } = await import("../lib/paths.js");
-    const { runConfigDirective } = await import(
-      "../lib/headless-config-command.js"
-    );
+    const { runConfigDirective } =
+      await import("../lib/headless-config-command.js");
     const { text, isError } = runConfigDirective(prompt, {
       configManager: cm,
       getConfigPath,
@@ -1069,9 +1065,8 @@ async function runAgentHeadlessInWorkspace(
           model = macro.model;
           writeErr(`  command: model → ${model}\n`);
           try {
-            const { maybeWarnDeprecatedModel } = await import(
-              "../lib/model-deprecation.js"
-            );
+            const { maybeWarnDeprecatedModel } =
+              await import("../lib/model-deprecation.js");
             maybeWarnDeprecatedModel({ model });
           } catch {
             // deprecation notice is best-effort
@@ -1108,9 +1103,8 @@ async function runAgentHeadlessInWorkspace(
 
   // ── Permission + tool resolution ──────────────────────────────────────
   if (managedSettings) {
-    const { assertManagedPermissionMode } = await import(
-      "../lib/settings-loader.cjs"
-    );
+    const { assertManagedPermissionMode } =
+      await import("../lib/settings-loader.cjs");
     assertManagedPermissionMode(options.permissionMode, managedSettings);
   }
   const perm = resolvePermissionMode(options.permissionMode);
@@ -1566,9 +1560,8 @@ async function runAgentHeadlessInWorkspace(
       : null;
   if (!hermeticExecution && !instructionExcludes) {
     try {
-      const { readStringArraySetting } = await import(
-        "../lib/settings-loader.cjs"
-      );
+      const { readStringArraySetting } =
+        await import("../lib/settings-loader.cjs");
       const fromSettings = readStringArraySetting("instructionExcludes", {
         cwd,
         settingsFile: options.settingsFile,
@@ -1622,9 +1615,8 @@ async function runAgentHeadlessInWorkspace(
   // settings.json UserPromptSubmit hooks. block → abort the run; context → inject.
   if (settingsHooks) {
     try {
-      const { runUserPromptSubmitHooks } = await import(
-        "../lib/settings-hook-events.js"
-      );
+      const { runUserPromptSubmitHooks } =
+        await import("../lib/settings-hook-events.js");
       const ups = runUserPromptSubmitHooks(settingsHooks, {
         prompt: userContent,
         cwd,
@@ -1654,9 +1646,8 @@ async function runAgentHeadlessInWorkspace(
   let instructionsLoadedContext = null;
   if (settingsHooks && _loadedInstructions) {
     try {
-      const { runInstructionsLoadedHooks } = await import(
-        "../lib/settings-hook-events.js"
-      );
+      const { runInstructionsLoadedHooks } =
+        await import("../lib/settings-hook-events.js");
       instructionsLoadedContext = runInstructionsLoadedHooks(settingsHooks, {
         files: _loadedInstructions.files,
         cwd,
@@ -1671,9 +1662,8 @@ async function runAgentHeadlessInWorkspace(
   let sessionStartContext = null;
   if (settingsHooks) {
     try {
-      const { runSessionStartHooks } = await import(
-        "../lib/settings-hook-events.js"
-      );
+      const { runSessionStartHooks } =
+        await import("../lib/settings-hook-events.js");
       sessionStartContext = runSessionStartHooks(settingsHooks, {
         source: resumeId ? "resume" : "startup",
         cwd,
@@ -1691,9 +1681,8 @@ async function runAgentHeadlessInWorkspace(
   // back up" — e.g. re-run a workspace sanity check. Observe-only, best-effort.
   if (settingsHooks && resumeId && history.length > 0) {
     try {
-      const { runObserveHooks } = await import(
-        "../lib/settings-hook-events.js"
-      );
+      const { runObserveHooks } =
+        await import("../lib/settings-hook-events.js");
       runObserveHooks(
         settingsHooks,
         "SessionResume",
@@ -1924,9 +1913,8 @@ async function runAgentHeadlessInWorkspace(
   // --add-dir → workspaceRootDirs = [cwd] and this is a no-op. Best-effort.
   if (hostMcp?.mcpClient && additionalDirectories.length > 0) {
     try {
-      const { notifyMcpRootsChanged, workspaceRootDirs } = await import(
-        "../repl/add-dir.js"
-      );
+      const { notifyMcpRootsChanged, workspaceRootDirs } =
+        await import("../repl/add-dir.js");
       notifyMcpRootsChanged(
         [hostMcp.mcpClient],
         workspaceRootDirs(options.cwd || process.cwd(), additionalDirectories),
@@ -2034,15 +2022,16 @@ async function runAgentHeadlessInWorkspace(
         error.code = "CC_REMOTE_APPROVAL_GATE_UNAVAILABLE";
         throw error;
       }
-      const { startHeadlessRemoteApproval } = await import(
-        "../lib/remote-approval-bridge.js"
-      );
+      const { startHeadlessRemoteApproval } =
+        await import("../lib/remote-approval-bridge.js");
       _remoteApproval = await (
         deps.startHeadlessRemoteApproval || startHeadlessRemoteApproval
       )({
         agentSessionId: sessionId,
         writeErr,
         isText,
+        allowLan: options.remoteControlAllowLan === true,
+        env: process.env,
       });
       approvalGate.setConfirmer(
         _bgPhase.wrapConfirmer(_remoteApproval.confirmer),
@@ -2065,9 +2054,8 @@ async function runAgentHeadlessInWorkspace(
   let _collectorEnabled = false;
   if (!hermeticExecution) {
     try {
-      const { isOtlpCollectorEnabled } = await import(
-        "../lib/observability/index.js"
-      );
+      const { isOtlpCollectorEnabled } =
+        await import("../lib/observability/index.js");
       _collectorEnabled = isOtlpCollectorEnabled();
     } catch {
       _collectorEnabled = false;
@@ -2075,9 +2063,8 @@ async function runAgentHeadlessInWorkspace(
   }
   if (!hermeticExecution && (options.otlp || _collectorEnabled)) {
     try {
-      const { TelemetryRecorder } = await import(
-        "../lib/telemetry/span-recorder.js"
-      );
+      const { TelemetryRecorder } =
+        await import("../lib/telemetry/span-recorder.js");
       _otlpRecorder = new TelemetryRecorder({ serviceName: "cc-agent" });
     } catch {
       _otlpRecorder = null; // telemetry is best-effort, never blocks the run
@@ -2091,9 +2078,8 @@ async function runAgentHeadlessInWorkspace(
   let _hookSupervisor = null;
   if (settingsHooks) {
     try {
-      const { AsyncHookSupervisor } = await import(
-        "../lib/async-hook-supervisor.js"
-      );
+      const { AsyncHookSupervisor } =
+        await import("../lib/async-hook-supervisor.js");
       _hookSupervisor = new AsyncHookSupervisor({
         persistStats: true,
         // Durably park failed-rewake signals keyed by session so a crash before
@@ -2417,9 +2403,8 @@ async function runAgentHeadlessInWorkspace(
   if (options.goal !== undefined && options.goal !== false) {
     try {
       const explicitId = typeof options.goal === "string" ? options.goal : null;
-      const { resolveActiveGoal, linkSession } = await import(
-        "../lib/goal-store.js"
-      );
+      const { resolveActiveGoal, linkSession } =
+        await import("../lib/goal-store.js");
       const goal = (deps.resolveActiveGoal || resolveActiveGoal)({
         explicitId,
         sessionId,
@@ -2547,9 +2532,8 @@ async function runAgentHeadlessInWorkspace(
   let _asyncStopHandled = false;
   const _settleAsyncStop = async () => {
     if (!settingsHooks || !_hookSupervisor) return { rewakes: [], results: [] };
-    const { dispatchAsyncHooks } = await import(
-      "../lib/settings-hook-events.js"
-    );
+    const { dispatchAsyncHooks } =
+      await import("../lib/settings-hook-events.js");
     dispatchAsyncHooks(
       settingsHooks,
       "Stop",
@@ -3301,9 +3285,9 @@ async function runAgentHeadlessInWorkspace(
         ? err.message
         : sessionBudgetFailed
           ? sessionBudgetAdmissionError(
-            options.sessionBudget?.reason?.() || err?.budgetReason,
-            "run",
-          ).message
+              options.sessionBudget?.reason?.() || err?.budgetReason,
+              "run",
+            ).message
           : err?.message || String(err);
     const errorSubtype = runtimeLedgerPersistenceFailed
       ? "error_persistence"
@@ -3383,9 +3367,8 @@ async function runAgentHeadlessInWorkspace(
     await cleanupDeadline.run("settings-hooks", async () => {
       if (settingsHooks) {
         try {
-          const { runObserveHooks, dispatchAsyncHooks } = await import(
-            "../lib/settings-hook-events.js"
-          );
+          const { runObserveHooks, dispatchAsyncHooks } =
+            await import("../lib/settings-hook-events.js");
           const stopPayload = {
             reason: pipeState.closed ? "pipe_closed" : endReason,
             cwd,
@@ -3648,9 +3631,8 @@ async function runAgentHeadlessInWorkspace(
       emitStream({ type: "denials_summary", count: denials.length, denials });
     }
     try {
-      const { appendRecentDenials } = await import(
-        "../lib/permission-denial-store.js"
-      );
+      const { appendRecentDenials } =
+        await import("../lib/permission-denial-store.js");
       appendRecentDenials(denials, {
         sessionId,
         permissionMode: options.permissionMode || "default",
@@ -3721,9 +3703,8 @@ async function runAgentHeadlessInWorkspace(
     }
     if (_collectorEnabled) {
       try {
-        const { exportTelemetryRecorder } = await import(
-          "../lib/observability/index.js"
-        );
+        const { exportTelemetryRecorder } =
+          await import("../lib/observability/index.js");
         exportTelemetryRecorder(_otlpRecorder);
       } catch {
         // Telemetry is observational only and never changes the agent result.

package/src/runtime/headless-stream.js

@@ -1694,9 +1694,8 @@ async function runAgentHeadlessStreamInWorkspace(
       const { loadHooks, projectHookTrustNotice, attachAuthorityErrors } =
         await import("../lib/settings-hooks.cjs");
       const loaded = loadHooks({ cwd, settingsFile: options.settingsFile });
-      const { mergePluginHooks } = await import(
-        "../lib/plugin-runtime/hooks.js"
-      );
+      const { mergePluginHooks } =
+        await import("../lib/plugin-runtime/hooks.js");
       const effectiveHooks = mergePluginHooks(
         attachAuthorityErrors(loaded.hooks, loaded.authorityErrors),
         { cwd },
@@ -1777,9 +1776,8 @@ async function runAgentHeadlessStreamInWorkspace(
     });
 
   if (managedSettings) {
-    const { assertManagedPermissionMode } = await import(
-      "../lib/settings-loader.cjs"
-    );
+    const { assertManagedPermissionMode } =
+      await import("../lib/settings-loader.cjs");
     assertManagedPermissionMode(options.permissionMode, managedSettings);
   }
   const perm = resolvePermissionMode(options.permissionMode);
@@ -2267,9 +2265,8 @@ async function runAgentHeadlessStreamInWorkspace(
     : null;
   if (!instructionExcludes) {
     try {
-      const { readStringArraySetting } = await import(
-        "../lib/settings-loader.cjs"
-      );
+      const { readStringArraySetting } =
+        await import("../lib/settings-loader.cjs");
       const fromSettings = readStringArraySetting("instructionExcludes", {
         cwd,
         settingsFile: options.settingsFile,
@@ -2334,9 +2331,8 @@ async function runAgentHeadlessStreamInWorkspace(
   // Best-effort; no-op when project memory is off or no hook is registered.
   if (settingsHooks && _loadedInstructions) {
     try {
-      const { runInstructionsLoadedHooks } = await import(
-        "../lib/settings-hook-events.js"
-      );
+      const { runInstructionsLoadedHooks } =
+        await import("../lib/settings-hook-events.js");
       const ctx = runInstructionsLoadedHooks(settingsHooks, {
         files: _loadedInstructions.files,
         cwd,
@@ -2376,9 +2372,8 @@ async function runAgentHeadlessStreamInWorkspace(
   // settings.json SessionStart hooks → inject session context once (observe-only).
   if (settingsHooks) {
     try {
-      const { runSessionStartHooks } = await import(
-        "../lib/settings-hook-events.js"
-      );
+      const { runSessionStartHooks } =
+        await import("../lib/settings-hook-events.js");
       const ctx = runSessionStartHooks(settingsHooks, {
         source: "startup",
         cwd,
@@ -2749,9 +2744,8 @@ async function runAgentHeadlessStreamInWorkspace(
   // the single-prompt runner + the REPL /add-dir path. Best-effort.
   if (hostMcp?.mcpClient && additionalDirectories.length > 0) {
     try {
-      const { notifyMcpRootsChanged, workspaceRootDirs } = await import(
-        "../repl/add-dir.js"
-      );
+      const { notifyMcpRootsChanged, workspaceRootDirs } =
+        await import("../repl/add-dir.js");
       notifyMcpRootsChanged(
         [hostMcp.mcpClient],
         workspaceRootDirs(options.cwd || process.cwd(), additionalDirectories),
@@ -2817,6 +2811,8 @@ async function runAgentHeadlessStreamInWorkspace(
           .startHeadlessRemoteApproval;
       _remoteApproval = await startRemoteApproval({
         agentSessionId: sessionId,
+        allowLan: options.remoteControlAllowLan === true,
+        env: process.env,
       });
       streamCleanup.setRemoteApproval(_remoteApproval);
       emit({
@@ -3690,9 +3686,8 @@ async function runAgentHeadlessStreamInWorkspace(
       // session can honour the user's standing preferences ("越用越聪明"
       // flywheel). Best-effort — a learning ledger must never break the chat.
       try {
-        const { appendFeedback } = await import(
-          "../lib/pdh-feedback-ledger.js"
-        );
+        const { appendFeedback } =
+          await import("../lib/pdh-feedback-ledger.js");
         appendFeedback({ sessionId, turnId, kind, comment });
       } catch {
         /* persistence is best-effort */
@@ -3823,9 +3818,8 @@ async function runAgentHeadlessStreamInWorkspace(
     // settings.json UserPromptSubmit hooks. block → skip this turn; context → inject.
     if (settingsHooks) {
       try {
-        const { runUserPromptSubmitHooks } = await import(
-          "../lib/settings-hook-events.js"
-        );
+        const { runUserPromptSubmitHooks } =
+          await import("../lib/settings-hook-events.js");
         const ups = runUserPromptSubmitHooks(settingsHooks, {
           prompt: userContent,
           cwd,

package/src/runtime/mcp-config.js

@@ -51,6 +51,7 @@ import {
   normalizeMcpSandboxPolicy,
   readMcpStdioCwd,
 } from "../lib/mcp-sandbox-policy.js";
+import { normalizeMcpTlsConfig } from "../lib/mcp-tls.js";
 
 function invalidSandboxPolicy(message) {
   const error = new TypeError(message);
@@ -210,6 +211,7 @@ export function parseMcpServers(raw) {
       ...headersHelperField(cfg.headersHelper),
       ...(cfg.configScope ? { configScope: cfg.configScope } : {}),
       ...(cfg.configSource ? { configSource: cfg.configSource } : {}),
+      ...(cfg.tls != null ? { tls: normalizeMcpTlsConfig(cfg.tls) } : {}),
     };
   }
   return out;

package/src/runtime/policies/agent-policy.js

@@ -90,10 +90,12 @@ export function resolveAgentPolicy({
     fallbackModels: overrides.fallbackModels,
     pdh: overrides.pdh,
     outputStyle: overrides.outputStyle,
+    settingsFile: overrides.settingsFile || null,
     disableSlashCommands: overrides.disableSlashCommands === true,
     // --remote-control also applies interactively: the REPL starts the
     // paired-device approval bridge at startup (批26).
     remoteControl: overrides.remoteControl === true,
+    remoteControlAllowLan: overrides.remoteControlAllowLan === true,
     // --channels: inbound channel listeners (webhook/telegram) whose events
     // become user turns in the interactive session (gap-2026-07-11 P0#5).
     channels: overrides.channels || null,

package/src/assets/web-panel/assets/ChatBubbleRenderer-4gGkdGgA.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as y,U as s,R as a,S,K as C,Q as x,V as w,_ as B,b as n}from"./vendor-Bn1JzzAn.js";import{_ as k}from"./index-BRGx3w6T.js";import"./icons-DG5UD-6K.js";const N={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=n(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=n(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=n(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=n(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=n(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),f=String(e.getMonth()+1).padStart(2,"0"),g=String(e.getDate()).padStart(2,"0"),b=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${f}-${g} ${b}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:n};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},R={class:"bubble"},T={class:"meta"},D={class:"actor"},M={class:"time"},V={class:"body"};function q(c,d,t,r,i,l){const o=v("a-tag");return u(),y("div",{class:B(["chat-row",{mine:r.isMine}])},[s("div",R,[s("div",T,[s("span",D,a(r.actorLabel),1),s("span",M,a(r.formattedTime),1)]),s("div",V,a(r.messageText),1),t.event.source.adapter?(u(),S(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[x(a(t.event.source.adapter),1)]),_:1},8,["color"])):w("v-if",!0)])],2)}const A=k(N,[["render",q],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-Rpy4Dn/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{A as default};

package/src/assets/web-panel/assets/MarkdownRenderer-B4RLp2zs.js

@@ -1 +0,0 @@
-import{P as c,J as p,b as s}from"./vendor-Bn1JzzAn.js";import{r as a}from"./markdown-Yo_c6Krv.js";import{_ as d}from"./index-BRGx3w6T.js";const _={__name:"MarkdownRenderer",props:{content:{type:String,default:""}},setup(t,{expose:o}){o();const e=t,r=s(()=>a(e.content||"")),n={props:e,rendered:r,computed:s,get renderMarkdown(){return a}};return Object.defineProperty(n,"__isScriptSetup",{enumerable:!1,value:!0}),n}},i=["innerHTML"];function m(t,o,e,r,n,u){return c(),p("div",{class:"markdown-content",innerHTML:r.rendered},null,8,i)}const w=d(_,[["render",m],["__scopeId","data-v-0b0b9f63"],["__file","/tmp/cc-web-panel-Rpy4Dn/repo/packages/web-panel/src/components/MarkdownRenderer.vue"]]);export{w as M};

package/src/assets/web-panel/assets/devWarning-CagEcIex.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-BRGx3w6T.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-pzT9PpOU.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-hPGk1eGj.js";import{a0 as t}from"./index-BRGx3w6T.js";import"./vendor-Bn1JzzAn.js";import"./responsiveObserve-CV6a_w_Y.js";import"./useFlexGapSupport-BH7zTw8S.js";import"./styleChecker-PJpzavV8.js";import"./index-DqkbHHg8.js";import"./icons-DG5UD-6K.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-z1kFadaX.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-DLaprKhS.js";import{a0 as t}from"./index-BRGx3w6T.js";import"./vendor-Bn1JzzAn.js";import"./index-DqkbHHg8.js";import"./icons-DG5UD-6K.js";const s=t(o);export{s as default};