chainlesschain 0.166.14 → 0.166.16

package/src/lib/learning/skill-synthesizer.js

@@ -12,8 +12,8 @@
  *   1. Find eligible trajectories
  *   2. Check for duplicates (tool chain fingerprint)
  *   3. Send to LLM for pattern extraction
- *   4. Generate SKILL.md
- *   5. Write to workspace skill layer
+ *   4. Generate and evaluate a candidate SKILL.md
+ *   5. Persist the accepted candidate to an isolated candidate registry
  */
 
 import fs from "fs";
@@ -24,6 +24,8 @@ import path from "path";
 
 const _deps = { fs, path };
 
+export const SYNTHESIS_UNAVAILABLE_CODE = "LEARNING_SYNTHESIS_UNAVAILABLE";
+
 // ── Helpers ─────────────────────────────────────────────
 
 /**
@@ -79,6 +81,42 @@ export function generateSkillName(userIntent) {
   );
 }
 
+/**
+ * Skill names become path segments in the candidate registry. Keep the
+ * accepted grammar deliberately small so an LLM response cannot escape the
+ * configured registry root.
+ * @param {string} skillName
+ * @returns {boolean}
+ */
+export function isSafeSkillName(skillName) {
+  return (
+    typeof skillName === "string" &&
+    /^[\p{L}\p{N}][\p{L}\p{N}._-]{0,127}$/u.test(skillName) &&
+    skillName !== "." &&
+    skillName !== ".." &&
+    !skillName.includes("..")
+  );
+}
+
+function rootContains(parentRoot, childRoot) {
+  if (!parentRoot || !childRoot) return false;
+  const parent = path.resolve(parentRoot);
+  const child = path.resolve(childRoot);
+  const relative = path.relative(parent, child);
+  return (
+    relative === "" ||
+    (relative !== ".." &&
+      !relative.startsWith(`..${path.sep}`) &&
+      !path.isAbsolute(relative))
+  );
+}
+
+function rootsOverlap(firstRoot, secondRoot) {
+  return (
+    rootContains(firstRoot, secondRoot) || rootContains(secondRoot, firstRoot)
+  );
+}
+
 // ── LLM prompt template ─────────────────────────────────
 
 /**
@@ -167,7 +205,7 @@ export class SkillSynthesizer {
    * @param {import("better-sqlite3").Database} db
    * @param {function} llmChat — async (messages) => string (LLM response)
    * @param {import("./trajectory-store.js").TrajectoryStore} trajectoryStore
-   * @param {{minToolCount?:number, minScore?:number, minSimilar?:number, outputDir?:string}} [config]
+   * @param {{minToolCount?:number, minScore?:number, minSimilar?:number, candidateOutputDir?:string, activeSkillsDirs?:string[], evaluateCandidate?:function}} [config]
    */
   constructor(db, llmChat, trajectoryStore, config = {}) {
     this.db = db;
@@ -176,14 +214,80 @@ export class SkillSynthesizer {
     this.minToolCount = config.minToolCount ?? 5;
     this.minScore = config.minScore ?? 0.7;
     this.minSimilar = config.minSimilar ?? 2;
-    this.outputDir = config.outputDir || null;
+    this.candidateOutputDir = config.candidateOutputDir || null;
+    const configuredActiveSkillsDirs = Array.isArray(config.activeSkillsDirs)
+      ? config.activeSkillsDirs
+      : [];
+    this.activeSkillsDirs = configuredActiveSkillsDirs.filter(
+      (root) => typeof root === "string" && root.trim().length > 0,
+    );
+    this.activeSkillsDirsInvalid =
+      configuredActiveSkillsDirs.length !== this.activeSkillsDirs.length;
+    this.evaluateCandidate =
+      typeof config.evaluateCandidate === "function"
+        ? config.evaluateCandidate
+        : null;
+  }
+
+  /**
+   * Report whether this instance can truthfully create persisted candidates.
+   * No trajectory is queried or mutated while the synthesizer is unavailable.
+   * @returns {{available:boolean, missingDependencies:string[], blockers:string[]}}
+   */
+  getAvailability() {
+    const missingDependencies = [];
+    const blockers = [];
+    if (typeof this.llmChat !== "function") missingDependencies.push("llm");
+    if (!this.candidateOutputDir) {
+      missingDependencies.push("candidate-output-registry");
+    }
+    if (typeof this.evaluateCandidate !== "function") {
+      missingDependencies.push("candidate-evaluator");
+    }
+    if (this.activeSkillsDirs.length === 0) {
+      missingDependencies.push("active-skill-registry-roots");
+    }
+    if (this.activeSkillsDirsInvalid) {
+      blockers.push("active-skill-registry-roots-invalid");
+    }
+    if (
+      this.candidateOutputDir &&
+      this.activeSkillsDirs.some((activeRoot) =>
+        rootsOverlap(activeRoot, this.candidateOutputDir),
+      )
+    ) {
+      blockers.push("candidate-output-overlaps-active-skill-tree");
+    }
+    return {
+      available: missingDependencies.length === 0 && blockers.length === 0,
+      missingDependencies,
+      blockers,
+    };
   }
 
   /**
    * Scan for eligible trajectories and synthesize skills.
-   * @returns {Promise<{created: string[], skipped: string[]}>}
+   * @returns {Promise<{status:string, created: string[], skipped: string[], errors?:string[], code?:string, reason?:string, missingDependencies?:string[], blockers?:string[]}>}
    */
   async synthesize() {
+    const availability = this.getAvailability();
+    if (!availability.available) {
+      const issues = [
+        ...availability.missingDependencies.map((item) => `missing ${item}`),
+        ...availability.blockers,
+      ];
+      const reason = `Synthesis unavailable: ${issues.join(", ")}`;
+      return {
+        status: "unavailable",
+        code: SYNTHESIS_UNAVAILABLE_CODE,
+        reason,
+        missingDependencies: availability.missingDependencies,
+        blockers: availability.blockers,
+        created: [],
+        skipped: [],
+      };
+    }
+
     const candidates = this.trajectoryStore.findComplexUnprocessed({
       minToolCount: this.minToolCount,
       minScore: this.minScore,
@@ -192,6 +296,7 @@ export class SkillSynthesizer {
 
     const created = [];
     const skipped = [];
+    const errors = [];
 
     for (const traj of candidates) {
       try {
@@ -225,25 +330,56 @@ export class SkillSynthesizer {
 
         // Generate and persist
         const skillName = pattern.name || generateSkillName(traj.userIntent);
+        if (!isSafeSkillName(skillName)) {
+          skipped.push(`${traj.id}: invalid candidate skill name`);
+          continue;
+        }
         const content = generateSkillMd(
           pattern,
           traj.id,
           traj.outcomeScore || 0.7,
         );
 
-        if (this.outputDir) {
-          await this._persistSkill(skillName, content);
+        const evaluation = await this.evaluateCandidate({
+          skillName,
+          content,
+          pattern,
+          trajectory: traj,
+        });
+        const accepted =
+          evaluation === true ||
+          (evaluation &&
+            typeof evaluation === "object" &&
+            evaluation.accepted === true);
+        if (!accepted) {
+          const evaluationReason =
+            evaluation && typeof evaluation === "object"
+              ? evaluation.reason
+              : null;
+          skipped.push(
+            `${traj.id}: evaluator rejected candidate${evaluationReason ? ` - ${evaluationReason}` : ""}`,
+          );
+          continue;
         }
 
-        // Mark trajectory as synthesized
+        await this._persistSkill(skillName, content);
+
+        // Only durable, evaluated candidates count as synthesized.
         this.trajectoryStore.markSynthesized(traj.id, skillName);
         created.push(skillName);
       } catch (err) {
-        skipped.push(`${traj.id}: error - ${err.message}`);
+        const message = `${traj.id}: error - ${err.message}`;
+        skipped.push(message);
+        errors.push(message);
       }
     }
 
-    return { created, skipped };
+    return {
+      status: errors.length > 0 ? "error" : "completed",
+      created,
+      skipped,
+      errors,
+    };
   }
 
   /**
@@ -297,19 +433,103 @@ export class SkillSynthesizer {
   }
 
   /**
-   * Write SKILL.md to the output directory.
+   * Write SKILL.md to the isolated candidate output registry.
    * @param {string} skillName
    * @param {string} content
    * @returns {Promise<{skillDir:string, skillFile:string}>}
    */
   async _persistSkill(skillName, content) {
-    const skillDir = _deps.path.join(this.outputDir, skillName);
-    const skillFile = _deps.path.join(skillDir, "SKILL.md");
+    if (!this.candidateOutputDir) {
+      throw new Error("candidate output registry is unavailable");
+    }
+    if (!isSafeSkillName(skillName)) {
+      throw new Error("invalid candidate skill name");
+    }
+    const availability = this.getAvailability();
+    if (!availability.available) {
+      throw new Error(
+        `candidate output boundary unavailable: ${[
+          ...availability.missingDependencies,
+          ...availability.blockers,
+        ].join(", ")}`,
+      );
+    }
+    this._assertCandidateFilesystemSupport();
+    const candidateRoot = await this._ensurePrivateDirectory(
+      this.candidateOutputDir,
+      { recursive: true },
+    );
+    await this._assertRealpathIsolation(candidateRoot);
+
+    const skillNamespace = _deps.path.join(this.candidateOutputDir, skillName);
+    const canonicalSkillNamespace =
+      await this._ensurePrivateDirectory(skillNamespace);
+    this._assertPathWithinCandidateRoot(candidateRoot, canonicalSkillNamespace);
+    const skillDir = _deps.path.join(canonicalSkillNamespace, "1.0.0");
+    const canonicalSkillDir = await this._ensurePrivateDirectory(skillDir);
+    this._assertPathWithinCandidateRoot(candidateRoot, canonicalSkillDir);
+    const skillFile = _deps.path.join(canonicalSkillDir, "SKILL.md");
+
+    await _deps.fs.promises.writeFile(skillFile, content, {
+      encoding: "utf-8",
+      flag: "wx",
+    });
+
+    return { skillDir: canonicalSkillDir, skillFile };
+  }
 
-    await _deps.fs.promises.mkdir(skillDir, { recursive: true });
-    await _deps.fs.promises.writeFile(skillFile, content, "utf-8");
+  _assertCandidateFilesystemSupport() {
+    if (
+      typeof _deps.fs.promises.realpath !== "function" ||
+      typeof _deps.fs.promises.lstat !== "function"
+    ) {
+      throw new Error(
+        "candidate filesystem identity support unavailable; refusing write",
+      );
+    }
+  }
+
+  async _ensurePrivateDirectory(directory, options = {}) {
+    let stat;
+    try {
+      stat = await _deps.fs.promises.lstat(directory);
+    } catch (error) {
+      if (error?.code !== "ENOENT") throw error;
+      try {
+        await _deps.fs.promises.mkdir(directory, {
+          recursive: options.recursive === true,
+          mode: 0o700,
+        });
+      } catch (mkdirError) {
+        if (mkdirError?.code !== "EEXIST") throw mkdirError;
+      }
+      stat = await _deps.fs.promises.lstat(directory);
+    }
+    if (stat.isSymbolicLink() || !stat.isDirectory()) {
+      throw new Error(
+        `candidate directory is not a trusted directory: ${directory}`,
+      );
+    }
+    return _deps.fs.promises.realpath(directory);
+  }
 
-    return { skillDir, skillFile };
+  async _assertRealpathIsolation(candidateRoot) {
+    const activeRoots = await Promise.all(
+      this.activeSkillsDirs.map((root) => _deps.fs.promises.realpath(root)),
+    );
+    if (activeRoots.some((root) => rootsOverlap(root, candidateRoot))) {
+      throw new Error(
+        "candidate output resolves into an active skill tree; refusing write",
+      );
+    }
+  }
+
+  _assertPathWithinCandidateRoot(candidateRoot, candidatePath) {
+    if (!rootContains(candidateRoot, candidatePath)) {
+      throw new Error(
+        "candidate parent resolves outside the candidate root; refusing write",
+      );
+    }
   }
 }
 

package/src/lib/process-execution-broker/index.js

@@ -4201,9 +4201,35 @@ class ProcessExecutionBroker extends EventEmitter {
       args: filteredArgs,
       env: filteredEnv,
       report: credentialReport,
+      referenceIds: Object.entries(filteredEnv)
+        .filter(
+          ([key, value]) =>
+            (key.startsWith("CC_CRED_REF_") ||
+              key.startsWith("CC_CRED_ARG_REF_")) &&
+            typeof value === "string" &&
+            value.startsWith("cc-cred-"),
+        )
+        .map(([, value]) => value),
     };
   }
 
+  _revokeCredentialReferences(referenceIds, reason) {
+    if (
+      !Array.isArray(referenceIds) ||
+      typeof this._credentialAgent.revokeCredentialRef !== "function"
+    ) {
+      return;
+    }
+    for (const refId of new Set(referenceIds)) {
+      try {
+        this._credentialAgent.revokeCredentialRef(refId, reason);
+      } catch {
+        // Credential cleanup must never replace the authoritative process
+        // result. References remain bounded by their issuance TTL.
+      }
+    }
+  }
+
   _createCredentialContext(command, options, executionId, decision) {
     if (typeof this._credentialAgent.createBrokerContext !== "function") {
       return options.credentialContext;
@@ -4933,6 +4959,7 @@ class ProcessExecutionBroker extends EventEmitter {
     options = this._withAmbientProcessContext(command, options);
     const executionId = crypto.randomUUID();
     const startTime = Date.now();
+    let credentialReferenceIds = [];
     const origin = options.origin || "unknown";
     const requestedCwd = options.cwd || process.cwd();
     options = this._withWorkspaceTransactionBoundaries(options, requestedCwd, {
@@ -5055,6 +5082,7 @@ class ProcessExecutionBroker extends EventEmitter {
       );
       spawnOpts.env = credentialBoundary.env;
       args = credentialBoundary.args;
+      credentialReferenceIds = credentialBoundary.referenceIds;
       auditEntry.args = this._auditArgs(args, auditRedactArgIndexes);
       this._recordCredentialReport(auditEntry, credentialBoundary.report);
       this._stripCredentialControlOptions(spawnOpts);
@@ -5159,6 +5187,10 @@ class ProcessExecutionBroker extends EventEmitter {
       throw err;
     } finally {
       sandboxPlan.cleanup?.();
+      this._revokeCredentialReferences(
+        credentialReferenceIds,
+        "sync-process-settled",
+      );
     }
   }
 

package/src/lib/process-execution-broker/platform-sandbox.js

@@ -2719,17 +2719,18 @@ function sameWindowsFileIdentity(left, right) {
   );
 }
 
-// Cleanup is authorized by the stable file-object identity, not by metadata
+// Cleanup is authorized by the stable volume/file identity, not by metadata
 // that Windows may settle after the helper closes its last write handle.  The
 // strict identity above remains authoritative while content is read or
 // attested; this cleanup-only comparison still rejects a same-path replacement
-// because that changes the inode/birth identity.
+// because that changes the inode. Node's Windows birthtime projection can
+// settle together with size/ctime/mtime, so it is metadata rather than part of
+// the deletion authority.
 function sameWindowsFileObjectIdentity(left, right) {
   return (
     left.dev === right.dev &&
     left.ino === right.ino &&
-    left.mode === right.mode &&
-    left.birthtimeNs === right.birthtimeNs
+    left.mode === right.mode
   );
 }
 

package/src/lib/secure-fs.js

@@ -9,6 +9,7 @@ import {
   win32,
   posix,
 } from "node:path";
+import { isFormalQualityHermeticRuntime } from "./formal-quality-eval-runtime.js";
 
 export const PRIVATE_DIRECTORY_MODE = 0o700;
 export const PRIVATE_FILE_MODE = 0o600;
@@ -605,6 +606,40 @@ export const _deps = {
 // tests and repairPrivatePath() always execute and verify the operation.
 const securedWindowsPaths = new Set();
 const WINDOWS_ACL_BATCH_SIZE = 500;
+const WINDOWS_ACL_TIMEOUT_ENV = "CC_SECURE_FS_WINDOWS_ACL_TIMEOUT_MS";
+const MAX_WINDOWS_ACL_TIMEOUT_MS = 5 * 60_000;
+
+export function _windowsAclWorkingDirectory(
+  environment = process.env,
+  filesystem = fs,
+) {
+  if (!isFormalQualityHermeticRuntime(environment)) return null;
+  const configuredHome = resolve(String(environment.CHAINLESSCHAIN_HOME));
+  try {
+    const entry = filesystem.lstatSync(configuredHome);
+    if (!entry.isDirectory() || entry.isSymbolicLink()) return null;
+  } catch {
+    return null;
+  }
+  return configuredHome;
+}
+
+// Windows hosted runners can need more than the normal 15/30 second allowance
+// to cold-start PowerShell and load the access-control types. A trusted harness
+// may raise (but never lower) that allowance; the cap prevents an inherited
+// environment value from wedging owner-only storage initialization forever.
+export function _resolveWindowsAclTimeout(
+  defaultTimeoutMs,
+  environment = process.env,
+) {
+  const fallback = Math.max(1, Math.floor(Number(defaultTimeoutMs) || 1));
+  const configured = Number(environment?.[WINDOWS_ACL_TIMEOUT_ENV]);
+  if (!Number.isFinite(configured) || configured <= 0) return fallback;
+  return Math.min(
+    Math.max(fallback, Math.floor(configured)),
+    MAX_WINDOWS_ACL_TIMEOUT_MS,
+  );
+}
 
 function repairWindowsAclOnce(target, deps, options) {
   const cacheable = !options.deps;
@@ -617,6 +652,7 @@ function repairWindowsAclOnce(target, deps, options) {
 }
 
 function windowsAcl(target, operation, deps) {
+  const workingDirectory = _windowsAclWorkingDirectory(process.env, deps.fs);
   const result = deps.spawnSync(
     "powershell.exe",
     [
@@ -630,7 +666,12 @@ function windowsAcl(target, operation, deps) {
       target,
       operation,
     ],
-    { encoding: "utf8", windowsHide: true, timeout: 15000 },
+    {
+      encoding: "utf8",
+      windowsHide: true,
+      timeout: _resolveWindowsAclTimeout(15_000),
+      ...(workingDirectory ? { cwd: workingDirectory } : {}),
+    },
   );
   let details = null;
   try {
@@ -656,6 +697,7 @@ function windowsAcl(target, operation, deps) {
 
 function windowsAclBatch(targets, operation, deps, expectedKind = null) {
   if (targets.length === 0) return [];
+  const workingDirectory = _windowsAclWorkingDirectory(process.env, deps.fs);
   const result = deps.spawnSync(
     "powershell.exe",
     [
@@ -675,8 +717,9 @@ function windowsAclBatch(targets, operation, deps, expectedKind = null) {
         ...(expectedKind ? { expectedKind } : {}),
       }),
       windowsHide: true,
-      timeout: 30000,
+      timeout: _resolveWindowsAclTimeout(30_000),
       maxBuffer: 4 * 1024 * 1024,
+      ...(workingDirectory ? { cwd: workingDirectory } : {}),
     },
   );
   let details = [];

package/src/runtime/agent-core.js

@@ -746,14 +746,25 @@ export function reapIdleBackgroundShellTasks(deps = {}) {
 // Foreground (synchronous) run_shell timeout. Configurable per-call via the
 // optional `timeout` arg; defaults to 60s and is hard-capped at 10 min so a
 // synchronous call can never wedge the loop indefinitely (use run_in_background
-// for genuinely long work).
+// for genuinely long work). Trusted harnesses may set a minimum through the
+// parent-process environment so model-generated tool arguments cannot shorten a
+// benchmark's platform-neutral execution allowance. The unset path preserves
+// the public per-call semantics byte-for-byte.
 const DEFAULT_SHELL_TIMEOUT_MS = 60000;
 const MAX_SHELL_TIMEOUT_MS = 600000;
-function _resolveShellTimeout(raw) {
-  if (raw == null) return DEFAULT_SHELL_TIMEOUT_MS;
+export function _resolveShellTimeout(raw, environment = process.env) {
+  const configuredMinimum = Number(environment?.CC_RUN_SHELL_MIN_TIMEOUT_MS);
+  const minimum =
+    Number.isFinite(configuredMinimum) && configuredMinimum > 0
+      ? Math.min(Math.floor(configuredMinimum), MAX_SHELL_TIMEOUT_MS)
+      : 0;
+  if (raw == null) return Math.max(DEFAULT_SHELL_TIMEOUT_MS, minimum);
   const n = Number(raw);
-  if (!Number.isFinite(n) || n <= 0) return DEFAULT_SHELL_TIMEOUT_MS;
-  return Math.min(Math.floor(n), MAX_SHELL_TIMEOUT_MS);
+  const requested =
+    Number.isFinite(n) && n > 0
+      ? Math.min(Math.floor(n), MAX_SHELL_TIMEOUT_MS)
+      : DEFAULT_SHELL_TIMEOUT_MS;
+  return Math.max(requested, minimum);
 }
 
 /**
@@ -1325,6 +1336,7 @@ const GUARDED_FILE_MUTATION_TOOLS = new Set([
 ]);
 const EXACT_FILE_MUTATION_SCOPE_TOOL_NAMES = new Set([
   "read_file",
+  "search_files",
   "list_dir",
   "write_file",
   "edit_file",

package/src/runtime/headless-runner.js

@@ -40,6 +40,10 @@ import {
 import { maybeApplyToolSearch } from "./mcp-tool-search.js";
 import { IterationBudget } from "../lib/iteration-budget.js";
 import { HostResourceBudget } from "../lib/host-resource-budget.js";
+import {
+  FORMAL_QUALITY_FILE_TOOLS,
+  isFormalQualityHermeticRuntime,
+} from "../lib/formal-quality-eval-runtime.js";
 import {
   startSession as jsonlStartSession,
   appendUserMessage as jsonlAppendUserMessage,
@@ -186,7 +190,6 @@ const HERMETIC_SKILL_LOADER = Object.freeze({
   getCacheLedger: () => null,
   getLimits: () => null,
 });
-
 // EPIPE guard for `cc agent -p … | head`. Lives in pipe-safety.js (shared with
 // the stream-json driver + REPL); re-exported here for existing importers.
 export { installPipeSafety } from "./pipe-safety.js";
@@ -850,7 +853,9 @@ async function runAgentHeadlessInWorkspace(
   const baseUrl = options.baseUrl || "http://localhost:11434";
   const apiKey = options.apiKey || null;
   const cwd = options.cwd || process.cwd();
-  const hermeticExecution = options.hermeticExecution === true;
+  const formalQualityHermetic = isFormalQualityHermeticRuntime(process.env);
+  const hermeticExecution =
+    options.hermeticExecution === true || formalQualityHermetic;
   if (
     options.fileMutationScope != null &&
     (options.exactToolNames !== true || !hermeticExecution)
@@ -1220,12 +1225,14 @@ async function runAgentHeadlessInWorkspace(
     assertManagedPermissionMode(options.permissionMode, managedSettings);
   }
   const perm = resolvePermissionMode(options.permissionMode);
-  const enabledToolNames = resolveEnabledTools({
-    // An explicit --allowed-tools wins; otherwise a matched command's
-    // `allowed-tools:` frontmatter scopes the run (null when neither applies).
-    allowedTools: options.allowedTools || macroAllowedTools,
-    readOnly: perm.readOnly,
-  });
+  const enabledToolNames = formalQualityHermetic
+    ? [...FORMAL_QUALITY_FILE_TOOLS]
+    : resolveEnabledTools({
+        // An explicit --allowed-tools wins; otherwise a matched command's
+        // `allowed-tools:` frontmatter scopes the run (null when neither applies).
+        allowedTools: options.allowedTools || macroAllowedTools,
+        readOnly: perm.readOnly,
+      });
   const disabledTools = options.disallowedTools || [];
 
   // ── Best-effort runtime bootstrap (DB optional, like startAgentRepl) ───
@@ -1699,7 +1706,7 @@ async function runAgentHeadlessInWorkspace(
     : options.skillLoader || new CLISkillLoader();
   const systemContent = hermeticExecution
     ? composeSystemPrompt(
-        "You are a hermetic code fixer. Use only the exposed file tools, work only inside the current worktree, and mutate only the exact paths authorized in the user request. Do not invoke commands, plugins, hooks, IDE bridges, MCP servers, or sub-agents.",
+        "You are a hermetic code fixer. The exposed file tools are the complete tool surface. Inspect and mutate only the exact paths authorized in the user request, then return a concise completion message.",
         { projectMemory: false },
       )
     : composeSystemPrompt(

package/src/assets/web-panel/assets/MarkdownRenderer-BEPDcSwz.js

@@ -1 +0,0 @@
-import{P as c,J as p,b as s}from"./vendor-Bn1JzzAn.js";import{r as a}from"./markdown-Yo_c6Krv.js";import{_ as d}from"./index-C9gtY4nG.js";const _={__name:"MarkdownRenderer",props:{content:{type:String,default:""}},setup(t,{expose:o}){o();const e=t,r=s(()=>a(e.content||"")),n={props:e,rendered:r,computed:s,get renderMarkdown(){return a}};return Object.defineProperty(n,"__isScriptSetup",{enumerable:!1,value:!0}),n}},i=["innerHTML"];function l(t,o,e,r,n,m){return c(),p("div",{class:"markdown-content",innerHTML:r.rendered},null,8,i)}const w=d(_,[["render",l],["__scopeId","data-v-0b0b9f63"],["__file","/tmp/cc-web-panel-eI5lXL/repo/packages/web-panel/src/components/MarkdownRenderer.vue"]]);export{w as M};

package/src/assets/web-panel/assets/PdhVaultBrowser-BujyoDRG.js

@@ -1,7 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["./ChatBubbleRenderer-DvEvxlZv.js","./vendor-Bn1JzzAn.js","./index-C9gtY4nG.js","./icons-DG5UD-6K.js","./index-Cq93VfoF.css","./ChatBubbleRenderer-gy5SDGw2.css","./OrderTableRenderer-Dswi26mJ.js","./OrderTableRenderer-CfrDjSHT.css","./TimelineRenderer-CgGZWaRm.js","./TimelineRenderer-BlTAtkOc.css","./EmailListRenderer-n3e_a1M3.js","./EmailListRenderer-DTPZPx_S.css","./GenericCardRenderer-Jo0ULzHv.js","./GenericCardRenderer-o85VDYQS.css"])))=>i.map(i=>d[i]);
-import{E as ue,r as R,b as w,I as g,P as u,J as O,U as v,c,S as C,V as E,_ as M,F as V,Z as se,a0 as le,R as L,K as m,Q as b,W as A,o as J}from"./vendor-Bn1JzzAn.js";import{u as U}from"./usePersonalDataHub-jIIfE4go.js";import{_ as F,e as I,d as P}from"./index-C9gtY4nG.js";import{aa as q,ag as Q,M as z,aI as G,v as X,aH as H,aq as K,ac as W,e as de,d as fe,k as pe,ai as me,aA as _e,R as ye}from"./icons-DG5UD-6K.js";import"./useShellMode-CgR0wCYM.js";const T=Object.freeze({q:"",category:null,adapter:null,subtype:null,since:null,until:null}),B=50,Y=300,Z=ue("pdhBrowser",()=>{const r=R({...T}),t=R([]),n=R(null),e=R(!1),o=R(!1),l=R(null),a=R(null),s=R(!1),i=R({byCategory:{},byAdapter:{},bySubtype:{},total:0});let d=0,_=null;const x=w(()=>t.value.length>0),j=w(()=>n.value!=null);function h(S={}){const p={},f=r.value;return f.q&&f.q.trim()&&(p.q=f.q.trim()),f.category&&(p.category=f.category),f.adapter&&(p.adapter=f.adapter),f.subtype&&(p.subtype=f.subtype),Number.isFinite(f.since)&&(p.since=f.since),Number.isFinite(f.until)&&(p.until=f.until),{...p,...S}}async function y(){const S=++d;e.value=!0,l.value=null;const p=U();try{const[f,D]=await Promise.all([p.searchEvents(h({limit:B})),p.facetCounts({...r.value.q&&r.value.q.trim()?{q:r.value.q.trim()}:{},...Number.isFinite(r.value.since)?{since:r.value.since}:{},...Number.isFinite(r.value.until)?{until:r.value.until}:{}})]);if(S!==d)return;t.value=f.rows||[],n.value=f.nextCursor||null,a.value=f.mode||"like",s.value=!!f.shortQuery,i.value={byCategory:D.byCategory||{},byAdapter:D.byAdapter||{},bySubtype:D.bySubtype||{},total:D.total||0}}catch(f){if(S!==d)return;l.value=f&&f.message?f.message:String(f),t.value=[],n.value=null}finally{S===d&&(e.value=!1)}}async function k(){if(!n.value||o.value)return;o.value=!0,l.value=null;const S=U();try{const p=await S.searchEvents(h({cursor:n.value,limit:B}));t.value=t.value.concat(p.rows||[]),n.value=p.nextCursor||null,a.value=p.mode||a.value}catch(p){l.value=p&&p.message?p.message:String(p)}finally{o.value=!1}}function ae(S,p){if(!(S in T))throw new Error(`pdhBrowser.setFilter: unknown key "${S}"`);r.value={...r.value,[S]:p},_&&clearTimeout(_),_=setTimeout(()=>{_=null,y()},Y)}function ie(S){return r.value={...T,...S},_&&(clearTimeout(_),_=null),y()}function ce(){r.value={...T},t.value=[],n.value=null,l.value=null,i.value={byCategory:{},byAdapter:{},bySubtype:{},total:0}}return{filters:r,results:t,cursor:n,isLoading:e,isAppending:o,error:l,mode:a,shortQuery:s,facets:i,hasResults:x,canLoadMore:j,search:y,loadMore:k,setFilter:ae,setFilters:ie,reset:ce,PAGE_SIZE:B,SEARCH_DEBOUNCE_MS:Y}}),ge=Object.freeze(["chat","social","email","shopping","travel","system","ai-chat","other"]),ve=Object.freeze({chat:"社交聊天",social:"内容平台",email:"邮件",shopping:"支付订单",travel:"出行",system:"系统数据","ai-chat":"AI 对话",other:"其他"});function N(r){return ve[r]||r||"未知"}const be=Object.freeze([["wechat","chat"],["messaging-","chat"],["social-","social"],["email-","email"],["shopping-","shopping"],["alipay-","shopping"],["travel-","travel"],["system-data","system"],["browser-","system"],["meeting-","system"],["vscode","system"],["vscodium","system"],["jetbrains-ide","system"],["win-recent","system"],["git-activity","system"],["shell-history","system"],["hbuilderx","system"],["local-files","system"],["cursor","ai-chat"],["claude-code","ai-chat"],["ai-chat-","ai-chat"]]);function $(r){if(typeof r!="string"||r.length===0)return"other";for(const[t,n]of be)if(t.endsWith("-")||t==="system-data"){if(r.startsWith(t))return n}else if(r===t)return n;return"other"}const he={__name:"CategorySidebar",props:{selected:{type:String,default:null},facets:{type:Object,default:()=>({byCategory:{},total:0})}},emits:["select"],setup(r,{expose:t}){t();const n=r,e=w(()=>n.facets.total||0),o={chat:W,social:K,email:H,shopping:X,travel:G,system:z,"ai-chat":Q,other:q};function l(i){return o[i]||q}function a(i){return i?{backgroundColor:"#fff",color:"#1677ff"}:{backgroundColor:"#f0f0f0",color:"#666"}}const s={props:n,total:e,ICONS:o,iconFor:l,badgeStyle:a,computed:w,get AppstoreOutlined(){return q},get MessageOutlined(){return W},get PlayCircleOutlined(){return K},get MailOutlined(){return H},get ShoppingOutlined(){return X},get CarOutlined(){return G},get MobileOutlined(){return z},get RobotOutlined(){return Q},get CATEGORIES(){return ge},get categoryLabel(){return N}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}},Se={class:"pdh-sidebar"},Oe=["onClick"],we={class:"label"};function Ce(r,t,n,e,o,l){const a=g("a-badge");return u(),O("div",Se,[t[2]||(t[2]=v("div",{class:"sidebar-title"},"数据类型",-1)),v("div",{class:M(["cat-item",{active:n.selected===null}]),onClick:t[0]||(t[0]=s=>r.$emit("select",null))},[c(e.AppstoreOutlined,{class:"icon"}),t[1]||(t[1]=v("span",{class:"label"},"全部",-1)),e.total>0?(u(),C(a,{key:0,count:e.total,"number-style":e.badgeStyle(n.selected===null),"overflow-count":9999},null,8,["count","number-style"])):E("v-if",!0)],2),(u(!0),O(V,null,se(e.CATEGORIES,s=>(u(),O("div",{key:s,class:M(["cat-item",{active:n.selected===s,dim:!n.facets.byCategory[s]}]),onClick:i=>r.$emit("select",s)},[(u(),C(le(e.iconFor(s)),{class:"icon"})),v("span",we,L(e.categoryLabel(s)),1),n.facets.byCategory[s]?(u(),C(a,{key:0,count:n.facets.byCategory[s],"number-style":e.badgeStyle(n.selected===s),"overflow-count":9999},null,8,["count","number-style"])):E("v-if",!0)],10,Oe))),128))])}const ke=F(he,[["render",Ce],["__scopeId","data-v-6b62a22e"],["__file","/tmp/cc-web-panel-eI5lXL/repo/packages/web-panel/src/components/pdh/CategorySidebar.vue"]]),Ee={__name:"SearchFilterBar",props:{filters:{type:Object,required:!0},facets:{type:Object,default:()=>({byAdapter:{}})},isLoading:{type:Boolean,default:!1},mode:{type:String,default:null},shortQuery:{type:Boolean,default:!1}},emits:["set-filter","reset"],setup(r,{expose:t,emit:n}){t();const e=r,o=n,l=w(()=>e.filters.category?`在「${e.filters.category}」类目内搜索…`:"搜索关键词（如：支付宝、罗技、Kotlin）…"),a=w(()=>Object.entries(e.facets.byAdapter||{}).sort((y,k)=>k[1]-y[1]).map(([y,k])=>({value:y,label:`${y} (${k})`}))),s=w(()=>!e.filters.since&&!e.filters.until?null:[e.filters.since?new Date(e.filters.since):null,e.filters.until?new Date(e.filters.until):null]),i=w(()=>!!(e.filters.q||e.filters.adapter||e.filters.subtype||e.filters.since||e.filters.until));function d(h){o("set-filter","q",h||"")}function _(h){o("set-filter","q",h||"")}function x(h){if(!h||h.length===0){o("set-filter","since",null),o("set-filter","until",null);return}const[y,k]=h;o("set-filter","since",y?+y:null),o("set-filter","until",k?+k:null)}const j={props:e,emit:o,placeholderText:l,adapterOptions:a,dateRangeValue:s,hasActiveFilters:i,onQInput:d,onSearch:_,onDateChange:x,computed:w,get SearchOutlined(){return pe},get CloseCircleOutlined(){return fe},get InfoCircleOutlined(){return de}};return Object.defineProperty(j,"__isScriptSetup",{enumerable:!1,value:!0}),j}},Re={class:"pdh-filter-bar"},Le={key:1,class:"hint"},xe={key:2,class:"hint"};function je(r,t,n,e,o,l){const a=g("a-input-search"),s=g("a-select"),i=g("a-range-picker"),d=g("a-button");return u(),O("div",Re,[c(a,{value:n.filters.q,placeholder:e.placeholderText,"enter-button":"搜索","allow-clear":"",loading:n.isLoading,style:{flex:"1","max-width":"480px"},"onUpdate:value":e.onQInput,onSearch:e.onSearch},{prefix:m(()=>[c(e.SearchOutlined)]),_:1},8,["value","placeholder","loading"]),c(s,{value:n.filters.adapter,placeholder:"所有 adapter","allow-clear":"",options:e.adapterOptions,style:{width:"200px"},"onUpdate:value":t[0]||(t[0]=_=>r.$emit("set-filter","adapter",_||null))},null,8,["value","options"]),c(i,{value:e.dateRangeValue,placeholder:["开始日期","结束日期"],style:{width:"280px"},"onUpdate:value":e.onDateChange},null,8,["value"]),e.hasActiveFilters?(u(),C(d,{key:0,type:"link",danger:"",onClick:t[1]||(t[1]=_=>r.$emit("reset"))},{icon:m(()=>[c(e.CloseCircleOutlined)]),default:m(()=>[t[2]||(t[2]=b(" 清空筛选 ",-1))]),_:1})):E("v-if",!0),n.shortQuery?(u(),O("span",Le,[c(e.InfoCircleOutlined),t[3]||(t[3]=b(" 关键词需至少 3 字 (FTS5 trigram 限制) ",-1))])):n.mode==="like"?(u(),O("span",xe,[c(e.InfoCircleOutlined),t[4]||(t[4]=b(" 当前为 LIKE 兜底模式 ",-1))])):E("v-if",!0)])}const Ae=F(Ee,[["render",je],["__scopeId","data-v-d7cce6e9"],["__file","/tmp/cc-web-panel-eI5lXL/repo/packages/web-panel/src/components/pdh/SearchFilterBar.vue"]]),Ie={__name:"RendererDispatcher",props:{event:{type:Object,required:!0}},setup(r,{expose:t}){t();const n=A(()=>I(()=>import("./ChatBubbleRenderer-DvEvxlZv.js"),__vite__mapDeps([0,1,2,3,4,5]),import.meta.url)),e=A(()=>I(()=>import("./OrderTableRenderer-Dswi26mJ.js"),__vite__mapDeps([6,1,2,3,4,7]),import.meta.url)),o=A(()=>I(()=>import("./TimelineRenderer-CgGZWaRm.js"),__vite__mapDeps([8,1,2,3,4,9]),import.meta.url)),l=A(()=>I(()=>import("./EmailListRenderer-n3e_a1M3.js"),__vite__mapDeps([10,1,2,3,4,11]),import.meta.url)),a=A(()=>I(()=>import("./GenericCardRenderer-Jo0ULzHv.js"),__vite__mapDeps([12,1,2,3,4,13]),import.meta.url));function s(d){const _=d&&d.source&&d.source.adapter;switch($(_)){case"chat":case"ai-chat":return n;case"shopping":return e;case"travel":return o;case"email":return l;default:return a}}const i={ChatBubbleRenderer:n,OrderTableRenderer:e,TimelineRenderer:o,EmailListRenderer:l,GenericCardRenderer:a,rendererFor:s,defineAsyncComponent:A,get getCategory(){return $}};return Object.defineProperty(i,"__isScriptSetup",{enumerable:!1,value:!0}),i}};function Fe(r,t,n,e,o,l){return u(),C(le(e.rendererFor(n.event)),{event:n.event},null,8,["event"])}const De=F(Ie,[["render",Fe],["__file","/tmp/cc-web-panel-eI5lXL/repo/packages/web-panel/src/components/pdh/renderers/RendererDispatcher.vue"]]);function ee(r){return JSON.stringify(r,null,2)}function te(r){return r.map(t=>JSON.stringify(t)).join(`
-`)+`
-`}function ne(r){const n=["id","subtype","occurredAt","occurredAtIso","actor","place","adapter","summary","contentJson","extraJson"].join(","),e=r.map(o=>{const l=Number.isFinite(o.occurredAt)?o.occurredAt:null,a=l?new Date(l).toISOString():"",s=o.source&&o.source.adapter||"",i=o.content&&(o.content.text||o.content.title||o.content.subject)||"";return[o.id||"",o.subtype||"",l!=null?String(l):"",a,o.actor||"",o.place||"",s,i,o.content?JSON.stringify(o.content):"",o.extra?JSON.stringify(o.extra):""].map(Te).join(",")});return[n,...e].join(`
-`)+`
-`}function Te(r){const t=String(r??"");return t.includes(",")||t.includes('"')||t.includes(`
-`)||t.includes("\r")?'"'+t.replace(/"/g,'""')+'"':t}function re(r,t,n="application/octet-stream"){if(typeof window>"u"||typeof document>"u")return t;const e=new Blob([r],{type:n}),o=URL.createObjectURL(e),l=document.createElement("a");return l.href=o,l.download=t,document.body.appendChild(l),l.click(),document.body.removeChild(l),setTimeout(()=>URL.revokeObjectURL(o),1e3),t}function oe(r,t=null){const n=new Date,e=n.getFullYear(),o=String(n.getMonth()+1).padStart(2,"0"),l=String(n.getDate()).padStart(2,"0"),a=r==="ndjson"?"ndjson":r,s=t?`-${t}`:"";return`pdh-events-${e}-${o}-${l}${s}.${a}`}const Pe={__name:"ExportDropdown",props:{events:{type:Array,required:!0},category:{type:String,default:null}},setup(r,{expose:t}){t();const n=r,e=w(()=>n.events.length>0),o={json:"application/json;charset=utf-8",ndjson:"application/x-ndjson;charset=utf-8",csv:"text/csv;charset=utf-8"};function l(i){switch(i){case"json":return ee(n.events);case"ndjson":return te(n.events);case"csv":return ne(n.events);default:throw new Error(`unknown format: ${i}`)}}function a({key:i}){try{const d=l(i),_=oe(i,n.category);re(d,_,o[i]),P.success(`已导出 ${n.events.length} 条到 ${_}`)}catch(d){P.error(`导出失败: ${d.message||d}`)}}const s={props:n,hasResults:e,MIME:o,serialize:l,onClick:a,computed:w,get DownloadOutlined(){return _e},get DownOutlined(){return me},get message(){return P},get eventsToJson(){return ee},get eventsToNdjson(){return te},get eventsToCsv(){return ne},get downloadAs(){return re},get suggestFilename(){return oe}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}};function qe(r,t,n,e,o,l){const a=g("a-button"),s=g("a-menu-item"),i=g("a-menu"),d=g("a-dropdown");return u(),C(d,{disabled:!e.hasResults},{overlay:m(()=>[c(i,{onClick:e.onClick},{default:m(()=>[c(s,{key:"json"},{default:m(()=>[...t[0]||(t[0]=[b("JSON (.json)",-1)])]),_:1}),c(s,{key:"ndjson"},{default:m(()=>[...t[1]||(t[1]=[b("NDJSON (.ndjson)",-1)])]),_:1}),c(s,{key:"csv"},{default:m(()=>[...t[2]||(t[2]=[b("CSV (.csv)",-1)])]),_:1})]),_:1})]),default:m(()=>[c(a,{disabled:!e.hasResults},{icon:m(()=>[c(e.DownloadOutlined)]),default:m(()=>[b(" 导出 ("+L(n.events.length)+") ",1),c(e.DownOutlined)]),_:1},8,["disabled"])]),_:1},8,["disabled"])}const Be=F(Pe,[["render",qe],["__file","/tmp/cc-web-panel-eI5lXL/repo/packages/web-panel/src/components/pdh/ExportDropdown.vue"]]),Ve={__name:"PdhVaultBrowser",setup(r,{expose:t}){t();const n=Z(),e=w(()=>n.filters.q?`没有匹配 "${n.filters.q}" 的事件 — 试试更短的关键词或换个类目`:n.filters.category?`「${N(n.filters.category)}」类目下还没有数据 — 去采集页同步对应 adapter`:"Vault 里还没有数据 — 去「个人数据中台」页面同步任意 adapter");function o(s){n.filters.category=s,n.search()}function l(s,i){n.setFilter(s,i)}J(()=>{!n.hasResults&&!n.isLoading&&n.search()});const a={store:n,emptyHint:e,onCategorySelect:o,onSetFilter:l,onMounted:J,computed:w,get ReloadOutlined(){return ye},get usePdhBrowserStore(){return Z},get categoryLabel(){return N},CategorySidebar:ke,SearchFilterBar:Ae,RendererDispatcher:De,ExportDropdown:Be};return Object.defineProperty(a,"__isScriptSetup",{enumerable:!1,value:!0}),a}},Ne={class:"pdh-browser-page"},Me={class:"page-header"},Je={class:"main-pane"},Ue={class:"results-summary"},Qe={key:0},ze={key:0},Ge={key:1},Xe={class:"loaded-of"},He={class:"results-list"},Ke={key:2,class:"load-more"};function We(r,t,n,e,o,l){const a=g("a-tag"),s=g("a-button"),i=g("a-space"),d=g("a-col"),_=g("a-spin"),x=g("a-alert"),j=g("a-empty"),h=g("a-row");return u(),O("div",Ne,[v("div",Me,[t[6]||(t[6]=v("div",null,[v("h2",{class:"page-title"},"数据浏览器"),v("p",{class:"page-sub"}," Vault 里所有已采集的数据，按类目浏览 / 全文检索 / 时间窗口筛选。 完全离线，不外传。 ")],-1)),c(i,null,{default:m(()=>[e.store.mode==="fts5"?(u(),C(a,{key:0,color:"green"},{default:m(()=>[...t[3]||(t[3]=[b("FTS5 trigram",-1)])]),_:1})):e.store.mode==="like"?(u(),C(a,{key:1,color:"orange"},{default:m(()=>[...t[4]||(t[4]=[b("LIKE 兜底",-1)])]),_:1})):E("v-if",!0),c(e.ExportDropdown,{events:e.store.results,category:e.store.filters.category},null,8,["events","category"]),c(s,{onClick:t[0]||(t[0]=y=>e.store.search()),loading:e.store.isLoading},{icon:m(()=>[c(e.ReloadOutlined)]),default:m(()=>[t[5]||(t[5]=b(" 刷新 ",-1))]),_:1},8,["loading"])]),_:1})]),c(h,{gutter:16,class:"browser-layout"},{default:m(()=>[c(d,{xs:24,sm:24,md:6,lg:5,xl:4},{default:m(()=>[c(e.CategorySidebar,{selected:e.store.filters.category,facets:e.store.facets,onSelect:e.onCategorySelect},null,8,["selected","facets"])]),_:1}),c(d,{xs:24,sm:24,md:18,lg:19,xl:20},{default:m(()=>[v("div",Je,[c(e.SearchFilterBar,{filters:e.store.filters,facets:e.store.facets,"is-loading":e.store.isLoading,mode:e.store.mode,"short-query":e.store.shortQuery,onSetFilter:e.onSetFilter,onReset:t[1]||(t[1]=y=>{e.store.reset(),e.store.search()})},null,8,["filters","facets","is-loading","mode","short-query"]),v("div",Ue,[e.store.isLoading&&e.store.results.length===0?(u(),O("span",Qe,[c(_,{size:"small"}),t[7]||(t[7]=b(" 载入中… ",-1))])):(u(),O(V,{key:1},[v("strong",null,L(e.store.facets.total),1),t[11]||(t[11]=b(" 条事件 ",-1)),e.store.filters.category?(u(),O("span",ze,[t[8]||(t[8]=b(" / 当前类目 ",-1)),v("strong",null,L(e.categoryLabel(e.store.filters.category)),1),v("strong",null,L(e.store.facets.byCategory[e.store.filters.category]||0),1)])):E("v-if",!0),e.store.filters.q?(u(),O("span",Ge,[t[9]||(t[9]=b(' / 关键词 "',-1)),v("em",null,L(e.store.filters.q),1),t[10]||(t[10]=b('"',-1))])):E("v-if",!0),v("span",Xe," / 已显示 "+L(e.store.results.length),1)],64))]),e.store.error?(u(),C(x,{key:0,type:"error","show-icon":"",message:e.store.error,closable:"",style:{margin:"12px 0"}},null,8,["message"])):E("v-if",!0),!e.store.isLoading&&e.store.results.length===0&&!e.store.error?(u(),C(j,{key:1,description:e.emptyHint,style:{"margin-top":"40px"}},null,8,["description"])):E("v-if",!0),v("div",He,[(u(!0),O(V,null,se(e.store.results,(y,k)=>(u(),C(e.RendererDispatcher,{key:`r-${k}-${y.id}`,event:y},null,8,["event"]))),128))]),e.store.canLoadMore?(u(),O("div",Ke,[c(s,{loading:e.store.isAppending,onClick:t[2]||(t[2]=y=>e.store.loadMore()),block:""},{default:m(()=>[...t[12]||(t[12]=[b(" 加载下一页 (50 条) ",-1)])]),_:1},8,["loading"])])):E("v-if",!0)])]),_:1})]),_:1})])}const nt=F(Ve,[["render",We],["__scopeId","data-v-0f7c02cd"],["__file","/tmp/cc-web-panel-eI5lXL/repo/packages/web-panel/src/views/PdhVaultBrowser.vue"]]);export{nt as default};