chainlesschain 0.166.121 → 0.166.125

package/src/assets/web-panel/assets/{responsiveObserve-CxMioios.js → responsiveObserve-qhZCsCCH.js}

@@ -1 +1 @@
-import{J as o,h}from"./index-D6ETHrUX.js";import{b as x}from"./vendor-Bn1JzzAn.js";const v=["xxxl","xxl","xl","lg","md","sm","xs"],p=r=>({xs:`(max-width: ${r.screenXSMax}px)`,sm:`(min-width: ${r.screenSM}px)`,md:`(min-width: ${r.screenMD}px)`,lg:`(min-width: ${r.screenLG}px)`,xl:`(min-width: ${r.screenXL}px)`,xxl:`(min-width: ${r.screenXXL}px)`,xxxl:`{min-width: ${r.screenXXXL}px}`});function w(){const[,r]=o();return x(()=>{const n=p(r.value),i=new Map;let a=-1,c={};return{matchHandlers:{},dispatch(e){return c=e,i.forEach(t=>t(c)),i.size>=1},subscribe(e){return i.size||this.register(),a+=1,i.set(a,e),e(c),a},unsubscribe(e){i.delete(e),i.size||this.unregister()},unregister(){Object.keys(n).forEach(e=>{const t=n[e],s=this.matchHandlers[t];s?.mql.removeListener(s?.listener)}),i.clear()},register(){Object.keys(n).forEach(e=>{const t=n[e],s=l=>{let{matches:m}=l;this.dispatch(h(h({},c),{[e]:m}))},d=window.matchMedia(t);d.addListener(s),this.matchHandlers[t]={mql:d,listener:s},s(d)})},responsiveMap:n}})}export{v as r,w as u};
+import{J as o,h}from"./index-C58rpLKM.js";import{b as x}from"./vendor-Bn1JzzAn.js";const v=["xxxl","xxl","xl","lg","md","sm","xs"],p=r=>({xs:`(max-width: ${r.screenXSMax}px)`,sm:`(min-width: ${r.screenSM}px)`,md:`(min-width: ${r.screenMD}px)`,lg:`(min-width: ${r.screenLG}px)`,xl:`(min-width: ${r.screenXL}px)`,xxl:`(min-width: ${r.screenXXL}px)`,xxxl:`{min-width: ${r.screenXXXL}px}`});function w(){const[,r]=o();return x(()=>{const n=p(r.value),i=new Map;let a=-1,c={};return{matchHandlers:{},dispatch(e){return c=e,i.forEach(t=>t(c)),i.size>=1},subscribe(e){return i.size||this.register(),a+=1,i.set(a,e),e(c),a},unsubscribe(e){i.delete(e),i.size||this.unregister()},unregister(){Object.keys(n).forEach(e=>{const t=n[e],s=this.matchHandlers[t];s?.mql.removeListener(s?.listener)}),i.clear()},register(){Object.keys(n).forEach(e=>{const t=n[e],s=l=>{let{matches:m}=l;this.dispatch(h(h({},c),{[e]:m}))},d=window.matchMedia(t);d.addListener(s),this.matchHandlers[t]={mql:d,listener:s},s(d)})},responsiveMap:n}})}export{v as r,w as u};

package/src/assets/web-panel/assets/{slide-CQx7R0mc.js → slide-amPl47DO.js}

@@ -1,4 +1,4 @@
-import{K as n}from"./index-D6ETHrUX.js";import{i as e}from"./motion-DzhD1BmE.js";const m=new n("antSlideUpIn",{"0%":{transform:"scaleY(0.8)",transformOrigin:"0% 0%",opacity:0},"100%":{transform:"scaleY(1)",transformOrigin:"0% 0%",opacity:1}}),f=new n("antSlideUpOut",{"0%":{transform:"scaleY(1)",transformOrigin:"0% 0%",opacity:1},"100%":{transform:"scaleY(0.8)",transformOrigin:"0% 0%",opacity:0}}),c=new n("antSlideDownIn",{"0%":{transform:"scaleY(0.8)",transformOrigin:"100% 100%",opacity:0},"100%":{transform:"scaleY(1)",transformOrigin:"100% 100%",opacity:1}}),l=new n("antSlideDownOut",{"0%":{transform:"scaleY(1)",transformOrigin:"100% 100%",opacity:1},"100%":{transform:"scaleY(0.8)",transformOrigin:"100% 100%",opacity:0}}),y=new n("antSlideLeftIn",{"0%":{transform:"scaleX(0.8)",transformOrigin:"0% 0%",opacity:0},"100%":{transform:"scaleX(1)",transformOrigin:"0% 0%",opacity:1}}),p=new n("antSlideLeftOut",{"0%":{transform:"scaleX(1)",transformOrigin:"0% 0%",opacity:1},"100%":{transform:"scaleX(0.8)",transformOrigin:"0% 0%",opacity:0}}),O=new n("antSlideRightIn",{"0%":{transform:"scaleX(0.8)",transformOrigin:"100% 0%",opacity:0},"100%":{transform:"scaleX(1)",transformOrigin:"100% 0%",opacity:1}}),d=new n("antSlideRightOut",{"0%":{transform:"scaleX(1)",transformOrigin:"100% 0%",opacity:1},"100%":{transform:"scaleX(0.8)",transformOrigin:"100% 0%",opacity:0}}),g={"slide-up":{inKeyframes:m,outKeyframes:f},"slide-down":{inKeyframes:c,outKeyframes:l},"slide-left":{inKeyframes:y,outKeyframes:p},"slide-right":{inKeyframes:O,outKeyframes:d}},K=(t,r)=>{const{antCls:a}=t,i=`${a}-${r}`,{inKeyframes:s,outKeyframes:o}=g[r];return[e(i,s,o,t.motionDurationMid),{[`
+import{K as n}from"./index-C58rpLKM.js";import{i as e}from"./motion-C3Ot7PRG.js";const m=new n("antSlideUpIn",{"0%":{transform:"scaleY(0.8)",transformOrigin:"0% 0%",opacity:0},"100%":{transform:"scaleY(1)",transformOrigin:"0% 0%",opacity:1}}),f=new n("antSlideUpOut",{"0%":{transform:"scaleY(1)",transformOrigin:"0% 0%",opacity:1},"100%":{transform:"scaleY(0.8)",transformOrigin:"0% 0%",opacity:0}}),c=new n("antSlideDownIn",{"0%":{transform:"scaleY(0.8)",transformOrigin:"100% 100%",opacity:0},"100%":{transform:"scaleY(1)",transformOrigin:"100% 100%",opacity:1}}),l=new n("antSlideDownOut",{"0%":{transform:"scaleY(1)",transformOrigin:"100% 100%",opacity:1},"100%":{transform:"scaleY(0.8)",transformOrigin:"100% 100%",opacity:0}}),y=new n("antSlideLeftIn",{"0%":{transform:"scaleX(0.8)",transformOrigin:"0% 0%",opacity:0},"100%":{transform:"scaleX(1)",transformOrigin:"0% 0%",opacity:1}}),p=new n("antSlideLeftOut",{"0%":{transform:"scaleX(1)",transformOrigin:"0% 0%",opacity:1},"100%":{transform:"scaleX(0.8)",transformOrigin:"0% 0%",opacity:0}}),O=new n("antSlideRightIn",{"0%":{transform:"scaleX(0.8)",transformOrigin:"100% 0%",opacity:0},"100%":{transform:"scaleX(1)",transformOrigin:"100% 0%",opacity:1}}),d=new n("antSlideRightOut",{"0%":{transform:"scaleX(1)",transformOrigin:"100% 0%",opacity:1},"100%":{transform:"scaleX(0.8)",transformOrigin:"100% 0%",opacity:0}}),g={"slide-up":{inKeyframes:m,outKeyframes:f},"slide-down":{inKeyframes:c,outKeyframes:l},"slide-left":{inKeyframes:y,outKeyframes:p},"slide-right":{inKeyframes:O,outKeyframes:d}},K=(t,r)=>{const{antCls:a}=t,i=`${a}-${r}`,{inKeyframes:s,outKeyframes:o}=g[r];return[e(i,s,o,t.motionDurationMid),{[`
       ${i}-enter,
       ${i}-appear
     `]:{transform:"scale(0)",transformOrigin:"0% 0%",opacity:0,animationTimingFunction:t.motionEaseOutQuint},[`${i}-leave`]:{animationTimingFunction:t.motionEaseInQuint}}]};export{f as a,c as b,m as c,K as i,l as s};

package/src/assets/web-panel/assets/{statusUtils-kUphM3-c.js → statusUtils-BIM6xD4_.js}

@@ -1 +1 @@
-import{i as e}from"./index-D6ETHrUX.js";function r(a,s,t){return e({[`${a}-status-success`]:s==="success",[`${a}-status-warning`]:s==="warning",[`${a}-status-error`]:s==="error",[`${a}-status-validating`]:s==="validating",[`${a}-has-feedback`]:t})}const c=(a,s)=>s||a;export{c as a,r as g};
+import{i as e}from"./index-C58rpLKM.js";function r(a,s,t){return e({[`${a}-status-success`]:s==="success",[`${a}-status-warning`]:s==="warning",[`${a}-status-error`]:s==="error",[`${a}-status-validating`]:s==="validating",[`${a}-has-feedback`]:t})}const c=(a,s)=>s||a;export{c as a,r as g};

package/src/assets/web-panel/assets/{styleChecker-BrGZ1xWq.js → styleChecker-BQM4w1nF.js}

@@ -1 +1 @@
-import{B as d}from"./index-D6ETHrUX.js";const i=()=>d()&&window.document.documentElement,c=e=>{if(d()&&window.document.documentElement){const t=Array.isArray(e)?e:[e],{documentElement:n}=window.document;return t.some(r=>r in n.style)}return!1},u=(e,t)=>{if(!c(e))return!1;const n=document.createElement("div"),r=n.style[e];return n.style[e]=t,n.style[e]!==r};function s(e,t){return!Array.isArray(e)&&t!==void 0?u(e,t):c(e)}let o;const p=()=>{if(!i())return!1;if(o!==void 0)return o;const e=document.createElement("div");return e.style.display="flex",e.style.flexDirection="column",e.style.rowGap="1px",e.appendChild(document.createElement("div")),e.appendChild(document.createElement("div")),document.body.appendChild(e),o=e.scrollHeight===1,document.body.removeChild(e),o};export{i as c,p as d,s as i};
+import{B as d}from"./index-C58rpLKM.js";const i=()=>d()&&window.document.documentElement,c=e=>{if(d()&&window.document.documentElement){const t=Array.isArray(e)?e:[e],{documentElement:n}=window.document;return t.some(r=>r in n.style)}return!1},u=(e,t)=>{if(!c(e))return!1;const n=document.createElement("div"),r=n.style[e];return n.style[e]=t,n.style[e]!==r};function s(e,t){return!Array.isArray(e)&&t!==void 0?u(e,t):c(e)}let o;const p=()=>{if(!i())return!1;if(o!==void 0)return o;const e=document.createElement("div");return e.style.display="flex",e.style.flexDirection="column",e.style.rowGap="1px",e.appendChild(document.createElement("div")),e.appendChild(document.createElement("div")),document.body.appendChild(e),o=e.scrollHeight===1,document.body.removeChild(e),o};export{i as c,p as d,s as i};

package/src/assets/web-panel/assets/{useFlexGapSupport-Sb5Vj_ag.js → useFlexGapSupport-CQLRdXAd.js}

@@ -1 +1 @@
-import{o,s as t}from"./vendor-Bn1JzzAn.js";import{d as s}from"./styleChecker-BrGZ1xWq.js";const r=(()=>{const e=t(!1);return o(()=>{e.value=s()}),e});export{r as u};
+import{o,s as t}from"./vendor-Bn1JzzAn.js";import{d as s}from"./styleChecker-BQM4w1nF.js";const r=(()=>{const e=t(!1);return o(()=>{e.value=s()}),e});export{r as u};

package/src/assets/web-panel/assets/{useFs-DrMnDCO5.js → useFs-CjgDjsYN.js}

@@ -1 +1 @@
-import{u as d}from"./index-D6ETHrUX.js";import{u as c}from"./useShellMode-CgR0wCYM.js";function u({accept:l=""}={}){return new Promise(a=>{if(typeof document>"u"){a({canceled:!0,path:null,content:null});return}const n=document.createElement("input");n.type="file",l&&(n.accept=l),n.style.display="none",document.body.appendChild(n);let o=!1;const i=()=>{n.parentNode&&n.parentNode.removeChild(n)},r=()=>{if(o)return;o=!0;const e=n.files&&n.files[0];if(!e){i(),a({canceled:!0,path:null,content:null});return}const t=new FileReader;t.onload=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:typeof t.result=="string"?t.result:""})},t.onerror=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:null,reason:"read_failed"})},t.readAsText(e)};n.addEventListener("change",r),n.click()})}function f(l,{defaultPath:a="download.txt"}={}){if(typeof document>"u")return{canceled:!0,path:null};const n=new Blob([l],{type:"text/plain"}),o=URL.createObjectURL(n),i=document.createElement("a");return i.href=o,i.download=a,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(o),{canceled:!1,path:a}}function p(l){if(!Array.isArray(l))return"";const a=[];for(const n of l)if(Array.isArray(n.extensions))for(const o of n.extensions)a.push(`.${o.replace(/^\./,"")}`);return a.join(",")}function m(){const l=d();async function a(r={}){if(c().isEmbedded){const e=await l.sendRaw({type:"fs.openDialog",title:r.title,filters:r.filters},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDialog failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,content:t.content??null,size:t.size,reason:t.reason}}return u({accept:p(r.filters)})}async function n(r,e={}){if(typeof r!="string")throw new Error("content must be a string");if(c().isEmbedded){const t=await l.sendRaw({type:"fs.saveDialog",title:e.title,defaultPath:e.defaultPath,filters:e.filters,content:r},6e4);if(t&&t.ok===!1)throw new Error(t.error||"fs.saveDialog failed");const s=t?.result??t;return{canceled:!!s.canceled,path:s.path??null}}return f(r,{defaultPath:e.defaultPath})}async function o(r,e={}){const t=JSON.stringify(r,null,2),s={...e,defaultPath:e.defaultPath||"data.json",filters:e.filters||[{name:"JSON",extensions:["json"]}]};return n(t,s)}async function i(r={}){if(!c().isEmbedded)return{canceled:!0,path:null,initialized:!1,unsupported:!0};const e=await l.sendRaw({type:"fs.openDirectory",title:r.title},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDirectory failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,initialized:!!t.initialized}}return{pickFileText:a,saveText:n,saveJson:o,pickDirectory:i}}export{m as u};
+import{u as d}from"./index-C58rpLKM.js";import{u as c}from"./useShellMode-CgR0wCYM.js";function u({accept:l=""}={}){return new Promise(a=>{if(typeof document>"u"){a({canceled:!0,path:null,content:null});return}const n=document.createElement("input");n.type="file",l&&(n.accept=l),n.style.display="none",document.body.appendChild(n);let o=!1;const i=()=>{n.parentNode&&n.parentNode.removeChild(n)},r=()=>{if(o)return;o=!0;const e=n.files&&n.files[0];if(!e){i(),a({canceled:!0,path:null,content:null});return}const t=new FileReader;t.onload=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:typeof t.result=="string"?t.result:""})},t.onerror=()=>{i(),a({canceled:!1,path:e.name,size:e.size,content:null,reason:"read_failed"})},t.readAsText(e)};n.addEventListener("change",r),n.click()})}function f(l,{defaultPath:a="download.txt"}={}){if(typeof document>"u")return{canceled:!0,path:null};const n=new Blob([l],{type:"text/plain"}),o=URL.createObjectURL(n),i=document.createElement("a");return i.href=o,i.download=a,document.body.appendChild(i),i.click(),document.body.removeChild(i),URL.revokeObjectURL(o),{canceled:!1,path:a}}function p(l){if(!Array.isArray(l))return"";const a=[];for(const n of l)if(Array.isArray(n.extensions))for(const o of n.extensions)a.push(`.${o.replace(/^\./,"")}`);return a.join(",")}function m(){const l=d();async function a(r={}){if(c().isEmbedded){const e=await l.sendRaw({type:"fs.openDialog",title:r.title,filters:r.filters},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDialog failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,content:t.content??null,size:t.size,reason:t.reason}}return u({accept:p(r.filters)})}async function n(r,e={}){if(typeof r!="string")throw new Error("content must be a string");if(c().isEmbedded){const t=await l.sendRaw({type:"fs.saveDialog",title:e.title,defaultPath:e.defaultPath,filters:e.filters,content:r},6e4);if(t&&t.ok===!1)throw new Error(t.error||"fs.saveDialog failed");const s=t?.result??t;return{canceled:!!s.canceled,path:s.path??null}}return f(r,{defaultPath:e.defaultPath})}async function o(r,e={}){const t=JSON.stringify(r,null,2),s={...e,defaultPath:e.defaultPath||"data.json",filters:e.filters||[{name:"JSON",extensions:["json"]}]};return n(t,s)}async function i(r={}){if(!c().isEmbedded)return{canceled:!0,path:null,initialized:!1,unsupported:!0};const e=await l.sendRaw({type:"fs.openDirectory",title:r.title},6e4);if(e&&e.ok===!1)throw new Error(e.error||"fs.openDirectory failed");const t=e?.result??e;return{canceled:!!t.canceled,path:t.path??null,initialized:!!t.initialized}}return{pickFileText:a,saveText:n,saveJson:o,pickDirectory:i}}export{m as u};

package/src/assets/web-panel/assets/{usePersonalDataHub-C48ZIkOr.js → usePersonalDataHub-BNs5KK4A.js}

@@ -1 +1 @@
-import{u as v}from"./index-D6ETHrUX.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};
+import{u as v}from"./index-C58rpLKM.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};

package/src/assets/web-panel/assets/{vnode-BQP6PZY_.js → vnode-CEORzacS.js}

@@ -1 +1 @@
-import{N as i,h as a,w as l}from"./index-D6ETHrUX.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};
+import{N as i,h as a,w as l}from"./index-C58rpLKM.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};

package/src/assets/web-panel/assets/{zoom-DOJny9bH.js → zoom-CJco15He.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-D6ETHrUX.js";import{i as f}from"./motion-DzhD1BmE.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-C58rpLKM.js";import{i as f}from"./motion-C3Ot7PRG.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-D6ETHrUX.js"></script>
+  <script type="module" crossorigin src="./assets/index-C58rpLKM.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-Bn1JzzAn.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-DG5UD-6K.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.125",
+      "cliVersions": ["0.166.125"],
+      "date": "2026-10-26",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.125: source expressions in completed tool history (candidate, 2026-10-26)",
+          "body": "- Recognize Python list/object unpacking, JavaScript spread and bounded unary/binary expressions in code fields so completed tool history can reach the next model turn.\n- Keep malformed/duplicate JSON and projection budgets enforced, retain conservative sensitive-source guards, and preserve v7 evidence verification with versioned v8 rules.\n- Add regressions for object/serialized arguments, paired results, fenced code, sensitive assignment wrappers and real Agent continuation without tool replay. Child dependency pins are unchanged. Publication requires exact-source three-OS CLI CI and Strict Sandbox followed by Actions OIDC."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.123",
+      "cliVersions": ["0.166.123"],
+      "date": "2026-10-26",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.123: model selection, Windows first-token latency and Python evidence (candidate, 2026-10-26)",
+          "body": "- Keep inherited `fable[1m]` Anthropic settings from overriding a configured Volcengine model; preserve explicit model choices and compatible provider settings.\n- Reuse an isolated Windows ACL worker without caching authority results. Recheck current tokens, paths and ACLs on every operation; retain bounded response binding, process-kill deadlines and failure cleanup. Use monotonic request deadlines and a stable child working directory.\n- Admit bounded Python f-string table-label alignment in Agent tool evidence instead of rejecting it as malformed JSON. Preserve sensitive-key handling, strict JSON parsing, cumulative budgets and historical v6 verification through the new v7 projection rules.\n- Pin Session Core 0.3.24, publish and verify the child before the CLI through GitHub Actions OIDC, and require exact-source Linux, Windows and macOS CLI CI and CLI Strict Sandbox before publication. Publish and verify before merging the release PR.\n- Retire unpublished candidate 0.166.122 after CI found stale bundled changelog data and Windows transport test and lifecycle issues. Retain its immutable source tag. Existing IDE pairing remains VS Code 0.37.161 / JetBrains 0.4.178; acceptance remains 32/45 with 13 unfinished, NOT_PAID_READY / NOT_ADMITTED / HOLD."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.121",

package/src/lib/evolution/evidence-json-text.js

@@ -110,6 +110,68 @@ function assignmentKeyBefore(text, start, end) {
   return keyEnd > index + 1 ? text.slice(index + 1, keyEnd) : undefined;
 }
 
+// New expression syntax retains all preceding decoded names, including targets
+// across calls, destructuring and nested statements. Without a language parser,
+// newline/semicolon cannot prove an enclosing sensitive assignment has ended.
+// This check applies only to newly admitted syntax; historical code keeps its
+// existing scanner. The cursor and shared budgets bound the additional work.
+function createSourcePrefixTracker(text, requireSafeKey, rejectOpaque) {
+  let cursor = 0;
+  let candidates = [];
+  return (until) => {
+    while (cursor < until) {
+      const char = text[cursor];
+      if (char === "`") {
+        let end = cursor + 1;
+        for (; end < text.length; end++) {
+          if (text[end] === "\\") end++;
+          else if (text[end] === "`") break;
+        }
+        // Template interpolation has its own grammar. Do not grant new source
+        // semantics inside it without a decoder for its escapes and bindings.
+        if (end >= until) rejectOpaque();
+        cursor = end + 1;
+        continue;
+      }
+      if (char === '"' || char === "'") {
+        const literal = (
+          char === '"' ? CODE_DOUBLE_QUOTED_PREFIX : CODE_SINGLE_QUOTED_PREFIX
+        ).exec(text.slice(cursor))?.[0];
+        if (!literal) {
+          cursor++;
+          continue;
+        }
+        candidates.push({ literal });
+        cursor += literal.length;
+        continue;
+      }
+      const name =
+        /^(?:[$_\p{ID_Start}]|\\u(?:[0-9a-fA-F]{4}|\{[0-9a-fA-F]{1,6}\}))(?:[$\p{ID_Continue}]|\\u(?:[0-9a-fA-F]{4}|\{[0-9a-fA-F]{1,6}\}))*/u.exec(
+          text.slice(cursor),
+        )?.[0];
+      if (name) {
+        candidates.push({ key: name });
+        cursor += name.length;
+        continue;
+      }
+      if (text.slice(cursor, cursor + 2) === "/*") {
+        const end = text.indexOf("*/", cursor + 2);
+        if (end < 0 || end >= until) rejectOpaque();
+        cursor = end + 2;
+        continue;
+      }
+      if (char === "#" && /\s/u.test(text[cursor + 1] ?? "")) {
+        const newline = text.indexOf("\n", cursor);
+        cursor = newline < 0 ? text.length : newline;
+        continue;
+      }
+      cursor++;
+    }
+    for (const entry of candidates) requireSafeKey(entry);
+    candidates = [];
+  };
+}
+
 export function createEvidenceJsonTextBoundary(
   fail,
   policy = EVIDENCE_JSON_POLICY,
@@ -134,6 +196,38 @@ export function createEvidenceJsonTextBoundary(
     Object.defineProperty(error, PARSE_FAILURE, { value: kind });
     throw error;
   };
+  // Source syntax is admitted only at a known code field. Require an operand:
+  // a bare spread/operator must never turn malformed JSON into plain text.
+  // Do not admit templates or regex literals: their escapes are not decoded by
+  // this boundary. Numeric operands retain the strict JSON number budget.
+  const sourceOperand = (text) => {
+    const rest = text.trimStart();
+    if (/^[$_\p{ID_Start}('"[{]/u.test(rest)) return true;
+    const token = /^(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?/u.exec(rest)?.[0];
+    if (!token || /[\w$.]/u.test(rest[token.length] ?? "")) return false;
+    const number = Number(token);
+    if (
+      !Number.isFinite(number) ||
+      (Number.isInteger(number) && !Number.isSafeInteger(number))
+    )
+      parserReject("budget");
+    return true;
+  };
+  const sourcePrefix = (text, objectSpread = false) => {
+    const token = (
+      objectSpread ? /^(?:\*\*|\.\.\.)/u : /^(?:\.\.\.|\*{1,2}|[+!~]|-(?!\d))/u
+    ).exec(text)?.[0];
+    return token !== undefined && sourceOperand(text.slice(token.length));
+  };
+  const sourceContinuation = (text) => {
+    // Existing call/member/conditional syntax keeps its historical handling.
+    if (/^[.(?]/u.test(text)) return true;
+    const token =
+      /^(?:\*\*|\/\/|>>>?|<<|===?|!==?|<=?|>=?|&&?|\|\|?|[-+*/%&|^]|(?:and|or|if|in|is|not)\b)/u.exec(
+        text,
+      )?.[0];
+    return token !== undefined && sourceOperand(text.slice(token.length));
+  };
   const decodeSourceString = (literal, quote) => {
     let output = "";
     for (let index = 1; index < literal.length - 1; index++) {
@@ -206,7 +300,11 @@ export function createEvidenceJsonTextBoundary(
     }
     return output;
   };
-  const parser = (text, start, { allowSingleQuotedStrings = false } = {}) => {
+  const parser = (
+    text,
+    start,
+    { allowSingleQuotedStrings = false, allowSourceExpressions = false } = {},
+  ) => {
     let index = start;
     const whitespace = () => {
       while (/[ \t\r\n]/u.test(text[index] ?? "x")) index++;
@@ -259,6 +357,8 @@ export function createEvidenceJsonTextBoundary(
         while (index < text.length) {
           let key;
           if (!array) {
+            if (allowSourceExpressions && sourcePrefix(text.slice(index), true))
+              parserReject("source-expression");
             if (
               text[index] !== '"' &&
               !(allowSingleQuotedStrings && text[index] === "'")
@@ -286,6 +386,12 @@ export function createEvidenceJsonTextBoundary(
             return output;
           }
           if (text[index] !== ",") {
+            if (
+              allowSourceExpressions &&
+              !/^[.(+*/?]/u.test(text[index] ?? "") &&
+              sourceContinuation(text.slice(index))
+            )
+              parserReject("source-expression");
             // Slices, comprehensions and member/call/arithmetic expressions
             // are source syntax. Missing delimiters and trailing commas stay
             // malformed JSON, including in run_code output.
@@ -307,6 +413,8 @@ export function createEvidenceJsonTextBoundary(
           text.slice(index),
         )?.[0];
       if (!token) {
+        if (allowSourceExpressions && sourcePrefix(text.slice(index)))
+          parserReject("source-expression");
         return parserReject(
           /^[A-Za-z_$][A-Za-z0-9_$]*|^\(/u.test(text.slice(index))
             ? "code-expression"
@@ -314,6 +422,14 @@ export function createEvidenceJsonTextBoundary(
         );
       }
       index += token.length;
+      if (
+        allowSourceExpressions &&
+        /^-?\d/u.test(token) &&
+        (/[\p{ID_Continue}$]/u.test(text[index] ?? "") ||
+          (text[index] === "." &&
+            !/^\.{1,2}[$_\p{ID_Start}]/u.test(text.slice(index))))
+      )
+        parserReject("syntax");
       // A primitive prefix is not a complete source expression. In particular,
       // redacting only `true` from trueSecretValue would expose the suffix of
       // a sensitive quoted assignment. Historical policies retain their parser.
@@ -344,6 +460,7 @@ export function createEvidenceJsonTextBoundary(
       layer = 0,
       objectOnly = false,
       codeText = false,
+      pythonFString = false,
       fencedCodeLanguages = null,
       visit,
       plain,
@@ -370,11 +487,35 @@ export function createEvidenceJsonTextBoundary(
     bytes += Buffer.byteLength(text, "utf8");
     if (bytes > policy.maxDecodedBytes)
       reject("Agent model JSON text exceeds its budget");
-    const transform = (parsed) => {
+    const transform = (parsed, textContext) => {
       if (layer >= policy.maxLayers)
         reject("Agent model JSON text exceeds its budget");
-      return visit(parsed, layer + 1);
+      return visit(parsed, layer + 1, textContext);
     };
+    const requireSafeSourceKey = (key) => {
+      const probe = Object.defineProperty(Object.create(null), key, {
+        value: "source-expression",
+        enumerable: true,
+      });
+      if (!equal(probe, transform(probe)))
+        reject(
+          "Agent model code expression under a sensitive key cannot be safely projected",
+        );
+    };
+    const requireSafeSourceAssignments = createSourcePrefixTracker(
+      text,
+      ({ key, literal }) => {
+        if (literal) {
+          const reader = parser(literal, 0, { allowSingleQuotedStrings: true });
+          key = reader.value();
+        } else key = decodeSourceString(`"${key}"`, '"');
+        requireSafeSourceKey(key);
+      },
+      () =>
+        reject(
+          "Agent model code expression under an opaque source context cannot be safely projected",
+        ),
+    );
     if (objectOnly) {
       const reader = parser(text, 0);
       let parsed;
@@ -406,6 +547,56 @@ export function createEvidenceJsonTextBoundary(
         char === "{" || char === "["
           ? text.slice(index + 1).match(/^\s*(.)/u)?.[1]
           : undefined;
+      // Python's f"{'branch':<52}" formats a literal label; the colon is not
+      // a JSON key/value separator. Grant this meaning only while scanning an
+      // explicitly prefixed source string, with a complete bounded format.
+      // Escaped braces, arbitrary expressions and malformed JSON retain the
+      // strict scanner. Sensitive decoded labels still fail closed.
+      if (
+        codeText &&
+        pythonFString &&
+        policy.pythonFStringPolicy === "bounded-static-label-alignment-v1" &&
+        char === "{" &&
+        text[index - 1] !== "{"
+      ) {
+        const literalStart = index + 1;
+        const literal =
+          CODE_SINGLE_QUOTED_PREFIX.exec(text.slice(literalStart))?.[0] ??
+          CODE_DOUBLE_QUOTED_PREFIX.exec(text.slice(literalStart))?.[0];
+        const suffix = literal
+          ? /^:[<>^]\d{1,4}s?\}/u.exec(
+              text.slice(literalStart + literal.length),
+            )?.[0]
+          : undefined;
+        if (suffix) {
+          const reader = parser(text, literalStart, {
+            allowSingleQuotedStrings: true,
+          });
+          let label;
+          try {
+            label = reader.value();
+          } catch (error) {
+            rejectParseFailure(error);
+          }
+          const probe = Object.defineProperty(Object.create(null), label, {
+            value: "source-expression",
+            enumerable: true,
+          });
+          if (!equal(probe, transform(probe)))
+            reject(
+              "Agent model code expression under a sensitive key cannot be safely projected",
+            );
+          const safe = transform(label);
+          const end = reader.end() + suffix.length;
+          const replacement = equal(label, safe)
+            ? text.slice(index, end)
+            : `{${JSON.stringify(safe)}${suffix}`;
+          output += plain(text.slice(plainStart, index)) + replacement;
+          index = end;
+          plainStart = index;
+          continue;
+        }
+      }
       // Human-readable status markers are not JSON arrays. Only complete,
       // bounded numeric formats qualify; quotes, escapes, commas and nested
       // containers must still go through strict parsing. Leave these spans in
@@ -465,6 +656,9 @@ export function createEvidenceJsonTextBoundary(
         // A recognized container is always tried as strict JSON first, even
         // inside code. Only an explicit non-JSON token allows literal scanning.
         allowSingleQuotedStrings: codeText && !container,
+        allowSourceExpressions:
+          codeText &&
+          policy.sourceExpressionPolicy === "bounded-source-tokens-v1",
       });
       let parsed;
       let valueEnd;
@@ -473,7 +667,16 @@ export function createEvidenceJsonTextBoundary(
         valueEnd = reader.end();
       } catch (error) {
         const kind = error?.[PARSE_FAILURE];
-        if (!codeText || kind !== "code-expression") rejectParseFailure(error);
+        if (
+          !codeText ||
+          !["code-expression", "source-expression"].includes(kind)
+        )
+          rejectParseFailure(error);
+        if (kind === "source-expression") {
+          requireSafeSourceAssignments(index);
+          const key = assignmentKeyBefore(text, plainStart, index);
+          if (key) requireSafeSourceKey(key);
+        }
         // Python/JavaScript containers may contain single quotes or expressions.
         // Scan their literals individually, preserving nested strict JSON scans.
         // Keep consumed nodes charged so repeated fallback cannot reset budgets.
@@ -487,14 +690,7 @@ export function createEvidenceJsonTextBoundary(
         // An expression cannot be visited as a decoded JSON value. Preserve
         // the decoded key boundary: otherwise a password list/call expression
         // could expose its string literals when scanning resumes inside it.
-        const probe = Object.defineProperty(Object.create(null), parsed, {
-          value: "source-expression",
-          enumerable: true,
-        });
-        if (!equal(probe, transform(probe)))
-          reject(
-            "Agent model code expression under a sensitive key cannot be safely projected",
-          );
+        requireSafeSourceKey(parsed);
       };
       if (pair) {
         const rhsStart = reader.end() + 1;
@@ -509,16 +705,23 @@ export function createEvidenceJsonTextBoundary(
           pair = false;
         } else {
           try {
-            const rhsContainer = /^[ \t\r\n]*[\[{]/u.test(text.slice(rhsStart));
+            const rhsContainer = /^[ \t\r\n]*[[{]/u.test(text.slice(rhsStart));
             const rhs = parser(text, rhsStart, {
               allowSingleQuotedStrings: codeText && !rhsContainer,
+              allowSourceExpressions:
+                codeText &&
+                policy.sourceExpressionPolicy === "bounded-source-tokens-v1",
             });
             const entry = rhs.value();
             const entryEnd = rhs.end();
             rhs.whitespace();
             if (
               (codeText || policy.proseQuotedPairPolicy) &&
-              /^[+\-*/%?.([<>&|^=!"']/u.test(text[rhs.end()] ?? "")
+              (/^[+\-*/%?.([<>&|^=!"']/u.test(text[rhs.end()] ?? "") ||
+                (codeText &&
+                  policy.sourceExpressionPolicy ===
+                    "bounded-source-tokens-v1" &&
+                  sourceContinuation(text.slice(rhs.end()))))
             )
               requireSafeExpressionKey();
             parsed = Object.defineProperty(Object.create(null), parsed, {
@@ -531,7 +734,8 @@ export function createEvidenceJsonTextBoundary(
             if (kind === undefined) throw error;
             if (
               (!codeText && !policy.proseQuotedPairPolicy) ||
-              kind !== "code-expression"
+              (kind !== "code-expression" &&
+                !(codeText && kind === "source-expression"))
             )
               rejectParseFailure(error);
             // A standalone prose label or a source key followed by an
@@ -544,11 +748,24 @@ export function createEvidenceJsonTextBoundary(
           }
         }
       }
+      const pythonFStringPrefix =
+        codeText &&
+        quoted &&
+        !pair &&
+        policy.pythonFStringPolicy === "bounded-static-label-alignment-v1"
+          ? /(?:^|[^\p{ID_Continue}$])(f|fr|rf)$/iu.exec(
+              text.slice(Math.max(0, index - 3), index),
+            )?.[1]
+          : undefined;
       const assignmentKey =
         quoted && !pair
           ? // Scan backward once; an unanchored greedy key regex would retry at
             // every offset of a long ordinary prefix before a quoted fragment.
-            assignmentKeyBefore(text, plainStart, index)
+            assignmentKeyBefore(
+              text,
+              plainStart,
+              index - (pythonFStringPrefix?.length ?? 0),
+            )
           : undefined;
       let end = valueEnd;
       if (pair) {
@@ -561,12 +778,18 @@ export function createEvidenceJsonTextBoundary(
           enumerable: true,
         });
       }
-      const safe = transform(parsed);
+      const safe = transform(
+        parsed,
+        pythonFStringPrefix ? { pythonFString: true } : undefined,
+      );
       if (
         (codeText || policy.proseQuotedPairPolicy) &&
         assignmentKey &&
         !equal(parsed, safe) &&
-        /^\s*[+\-*/%?.([<>&|^=!"']/u.test(text.slice(end))
+        (/^\s*[+\-*/%?.([<>&|^=!"']/u.test(text.slice(end)) ||
+          (codeText &&
+            policy.sourceExpressionPolicy === "bounded-source-tokens-v1" &&
+            sourceContinuation(text.slice(end).trimStart())))
       )
         reject(
           "Agent model code expression under a sensitive key cannot be safely projected",