chainlesschain 0.165.9 → 0.166.0

package/src/commands/orchestrate.js

@@ -57,6 +57,21 @@ export function registerOrchestrateCommand(program) {
     .option("--interval <min>", "Cron interval in minutes (watch mode)", "10")
     .option("--webhook", "Start HTTP webhook server for IM platform commands")
     .option("--webhook-port <port>", "Webhook server port", "18820")
+    .option(
+      "--webhook-secret-env <name>",
+      "Environment variable containing the webhook HMAC secret",
+      "CC_ORCHESTRATE_WEBHOOK_SECRET",
+    )
+    .option(
+      "--webhook-max-body-bytes <n>",
+      "Maximum authenticated webhook request body",
+      "262144",
+    )
+    .option(
+      "--webhook-rate-limit <n>",
+      "Maximum webhook requests per source and minute",
+      "30",
+    )
     .option("--json", "Output as JSON")
     .option("--verbose", "Verbose output");
 
@@ -90,8 +105,7 @@ export function registerOrchestrateCommand(program) {
       return;
     }
 
-    const { Orchestrator, TASK_SOURCE, TASK_STATUS } =
-      await import("../lib/orchestrator.js");
+    const { Orchestrator } = await import("../lib/orchestrator.js");
 
     const cwd = options.cwd ? path.resolve(options.cwd) : process.cwd();
 
@@ -137,7 +151,6 @@ export function registerOrchestrateCommand(program) {
     // Build agent backends from --backends option
     let agentsConfig;
     if (options.backends) {
-      const { BACKEND_TYPE } = await import("../lib/agent-router.js");
       const backendNames = options.backends.split(",").map((s) => s.trim());
       agentsConfig = {
         backends: backendNames.map((type) => ({ type, weight: 1 })),
@@ -340,8 +353,6 @@ export function registerOrchestrateCommand(program) {
 // ─── Pretty (interactive) run ────────────────────────────────────
 
 async function _runPretty(orch, taskText, options, cwd) {
-  const { TASK_STATUS } = await import("../lib/orchestrator.js");
-
   console.log(chalk.bold.cyan("\n⚡ ChainlessChain Orchestrator\n"));
   console.log(chalk.gray(`  Task:    `) + chalk.white(taskText.slice(0, 120)));
   console.log(chalk.gray(`  CWD:     `) + chalk.white(cwd));
@@ -377,7 +388,7 @@ async function _runPretty(orch, taskText, options, cwd) {
     spinner.text = `Running CI check (attempt ${attempt + 1})...`;
   });
 
-  orch.on("ci:fail", ({ errors, attempt }) => {
+  orch.on("ci:fail", ({ attempt }) => {
     spinner.text = `CI failed (attempt ${attempt + 1}) — retrying with agents...`;
   });
 
@@ -508,11 +519,25 @@ async function _webhookMode(cwd, options) {
   const { createServer } = await import("http");
   const { parseDingTalkIncoming, parseFeishuIncoming, parseWeComIncoming } =
     await import("../lib/notifiers/index.js");
-  const { Orchestrator, TASK_SOURCE } = await import("../lib/orchestrator.js");
+  const { Orchestrator } = await import("../lib/orchestrator.js");
+  const { WebhookSecurityGate } = await import("../lib/webhook-security.js");
 
   const port = parseInt(options.webhookPort, 10) || 18820;
 
   const orch = new Orchestrator({ cwd, verbose: options.verbose });
+  const secretEnvironmentName =
+    options.webhookSecretEnv || "CC_ORCHESTRATE_WEBHOOK_SECRET";
+  if (!/^[A-Z_][A-Z0-9_]{0,127}$/u.test(secretEnvironmentName)) {
+    throw new Error("--webhook-secret-env must be a valid environment name");
+  }
+  const securityGate = new WebhookSecurityGate({
+    secret: process.env[secretEnvironmentName],
+    maxRequestsPerMinute: parseInt(options.webhookRateLimit, 10) || 30,
+  });
+  const maxBodyBytes = Math.max(
+    1,
+    parseInt(options.webhookMaxBodyBytes, 10) || 262144,
+  );
 
   const server = createServer(async (req, res) => {
     if (req.method !== "POST") {
@@ -521,25 +546,71 @@ async function _webhookMode(cwd, options) {
       return;
     }
 
+    const url = req.url?.split("?")[0] || "/";
+    const channel =
+      url === "/wecom"
+        ? "wecom"
+        : url === "/dingtalk"
+          ? "dingtalk"
+          : url === "/feishu"
+            ? "feishu"
+            : null;
+    if (!channel) {
+      res.writeHead(404);
+      res.end("Not Found");
+      return;
+    }
+    if (Number(req.headers["content-length"] || 0) > maxBodyBytes) {
+      res.writeHead(413);
+      res.end("Payload Too Large");
+      req.resume();
+      return;
+    }
     const bodyChunks = [];
-    req.on("data", (chunk) => bodyChunks.push(chunk));
+    let bodyBytes = 0;
+    let bodyRejected = false;
+    req.on("data", (chunk) => {
+      if (bodyRejected) return;
+      bodyBytes += chunk.length;
+      if (bodyBytes > maxBodyBytes) {
+        bodyRejected = true;
+        res.writeHead(413);
+        res.end("Payload Too Large");
+        return;
+      }
+      bodyChunks.push(chunk);
+    });
     req.on("end", async () => {
+      if (bodyRejected) return;
       // Decode once: per-chunk toString() would corrupt a multi-byte UTF-8
       // char (e.g. Chinese IM webhook text) split across a chunk boundary.
       const body = Buffer.concat(bodyChunks).toString("utf-8");
       let taskText = null;
-      let source = TASK_SOURCE.CLI;
+      let source = `webhook:${channel}`;
+      let verified;
 
-      const url = req.url?.split("?")[0] || "/";
+      try {
+        verified = securityGate.verify({
+          channel,
+          headers: req.headers,
+          body,
+          remoteAddress: req.socket.remoteAddress || "unknown",
+        });
+      } catch (error) {
+        if (error?.retryAfterSeconds) {
+          res.setHeader("Retry-After", String(error.retryAfterSeconds));
+        }
+        res.writeHead(error?.statusCode || 401);
+        res.end("Unauthorized");
+        return;
+      }
 
       try {
         if (url === "/wecom") {
           taskText = parseWeComIncoming(body);
-          source = TASK_SOURCE.CLI;
         } else if (url === "/dingtalk") {
           const parsed = JSON.parse(body);
           taskText = parseDingTalkIncoming(parsed);
-          source = TASK_SOURCE.CLI;
         } else if (url === "/feishu") {
           const parsed = JSON.parse(body);
           // Feishu challenge verification
@@ -549,13 +620,8 @@ async function _webhookMode(cwd, options) {
             return;
           }
           taskText = parseFeishuIncoming(parsed);
-          source = TASK_SOURCE.CLI;
-        } else {
-          res.writeHead(404);
-          res.end("Not Found");
-          return;
         }
-      } catch (_err) {
+      } catch {
         res.writeHead(400);
         res.end("Bad Request");
         return;
@@ -586,6 +652,7 @@ async function _webhookMode(cwd, options) {
         .addTask(taskText, {
           source,
           cwd,
+          dataPolicy: verified.dataPolicy,
           runCI: options.ci !== false,
           notify: true,
         })

package/src/commands/serve.js

@@ -5,11 +5,25 @@
 
 import { logger } from "../lib/logger.js";
 import { createAgentRuntimeFactory } from "../runtime/runtime-factory.js";
+import path from "node:path";
 
 export function registerServeCommand(program) {
   program
     .command("serve")
     .description("Start WebSocket server for remote CLI access")
+    .option(
+      "--app-server",
+      "Run the canonical CC App Server over stdio instead of the legacy WebSocket server",
+    )
+    .option(
+      "--app-server-state-dir <path>",
+      "Owner-controlled rollout directory for --app-server",
+    )
+    .option(
+      "--app-server-queue-cap <n>",
+      "Maximum queued App Server requests",
+      "256",
+    )
     .option("-p, --port <port>", "Port number", "18800")
     .option("-H, --host <host>", "Bind host", "127.0.0.1")
     .option(
@@ -45,6 +59,31 @@ export function registerServeCommand(program) {
     )
     .action(async (opts) => {
       try {
+        if (opts.appServer) {
+          const [
+            { runStdioAppServer },
+            { JsonlRolloutStore },
+            { CliAgentKernelAdapter },
+          ] = await Promise.all([
+            import("../lib/app-server/stdio-transport.js"),
+            import("../lib/app-server/rollout-store.js"),
+            import("../lib/app-server/cli-agent-kernel-adapter.js"),
+          ]);
+          const stateDirectory = opts.appServerStateDir
+            ? path.resolve(opts.appServerStateDir)
+            : undefined;
+          await runStdioAppServer({
+            store: new JsonlRolloutStore({ directory: stateDirectory }),
+            kernel: new CliAgentKernelAdapter({
+              cwd: opts.project ? path.resolve(opts.project) : process.cwd(),
+            }),
+            maxQueuedRequests: Math.max(
+              1,
+              parseInt(opts.appServerQueueCap, 10) || 256,
+            ),
+          });
+          return;
+        }
         const runtime = createAgentRuntimeFactory().createServerRuntime({
           port: parseInt(opts.port, 10),
           host: opts.host,

package/src/commands/team.js

@@ -46,6 +46,7 @@ import { stopBackgroundAgentChildTree } from "../lib/background-agent-supervisor
 import { redactSecrets } from "../lib/secret-scan.js";
 import { tightenPermissionMode } from "../lib/subagent-contract.js";
 import { TeamRunStateLock } from "../lib/agent-team/team-run-state-lock.js";
+import { registerGraphCommand } from "./graph.js";
 import {
   computeTeamAdjudicationEvidenceDigest,
   TeamAdjudicationStore,
@@ -1453,6 +1454,7 @@ export function registerTeamCommand(program, { logger } = {}) {
     buildAgentPrompt: buildTeamAgentPrompt,
   });
   registerTeamMergeReviewCommands(team, { logger: log });
+  registerGraphCommand(team);
 
   team
     .command("control-bindings")

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.0",
+      "cliVersions": ["0.2.0", "0.165.10", "0.166.0"],
+      "date": "2026-08-24",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.0 + Agent SDKs 0.2.0: canonical App Server and Graph kernels",
+          "body": "> `chainlesschain` **0.165.10 -> 0.166.0**,\n> `@chainlesschain/agent-sdk` **0.1.7 -> 0.2.0**, and\n> `chainlesschain-agent-sdk` **0.1.0 -> 0.2.0** (release candidate,\n> 2026-08-24). `@chainlesschain/agent-protocol` remains a private build-time\n> source of truth and is not a runtime dependency or public package.\n\n- **Canonical cross-language protocol**: one private schema and deterministic\n  generator now produce the TypeScript and Python App Server contracts,\n  including Python 3.10-compatible reserved-field and optional-key handling.\n- **Durable App Server**: JSON-RPC request/notification streaming, thread\n  lifecycle, subscriptions, checkpoints, compaction, replay, and forking share\n  JSONL, memory, and capability-gated SQLite rollout stores.\n- **Graph execution kernel**: durable DAG execution adds checkpointed state,\n  interrupt/resume, record/replay, event projections, evaluation hooks, and\n  observable execution evidence.\n- **Secure integrations**: signed webhook delivery rejects stale or replayed\n  requests, the Codex App adapter consumes the canonical protocol, and the\n  governed `cc exec` path is exposed without duplicating authority.\n- **Release validation**: publication requires this exact release commit to\n  pass the complete Linux, Windows, and macOS `CLI CI` and\n  `CLI Strict Sandbox` matrices, plus Python 3.10/3.12/3.13 SDK conformance,\n  before the immutable npm and PyPI tags are created."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.165.10",
+      "cliVersions": ["0.3.6", "0.165.9", "0.165.10"],
+      "date": "2026-08-24",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.165.10: restore Docker-optional startup",
+          "body": "> `chainlesschain` **0.165.9 -> 0.165.10** and\n> `@chainlesschain/session-core` **0.3.5 -> 0.3.6** (hotfix candidate,\n> 2026-08-24). `@chainlesschain/personal-data-hub` remains **0.4.59** and\n> `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Windows startup regression**: starting `cc` without an explicit container\n  sandbox no longer requires Docker or exits with configuration code 6 when\n  Docker is unavailable. Explicit `--sandbox`,\n  `--sandbox-mode workspace-write|strict`, and managed sandbox policy remain\n  fail-closed.\n- **Session contract delivery**: publish the `runtime-claims` export added\n  after `session-core@0.3.5`, and pin the CLI to `session-core@0.3.6`, so npm\n  installs receive the same runtime contract used by the release source.\n- **Release status**: publication requires this candidate's exact commit to\n  pass the complete Linux, Windows, and macOS `CLI CI` and\n  `CLI Strict Sandbox` matrices before the immutable npm tag is created."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.165.9",