chainlesschain 0.166.142 → 0.166.143

package/src/commands/goal.js

@@ -198,9 +198,8 @@ export function registerGoalCommand(program) {
     .option("--json", "Output the metadata page as JSON")
     .action(async (options) => {
       try {
-        const { readCliGoalCatalog } = await import(
-          "../lib/cli-goal-catalog.js"
-        );
+        const { readCliGoalCatalog } =
+          await import("../lib/cli-goal-catalog.js");
         const readCatalog =
           options.connection !== undefined
             ? (await import("../lib/project-goal-connection.js"))
@@ -250,9 +249,8 @@ export function registerGoalCommand(program) {
     .option("--json", "Output the read-only panel snapshot as JSON")
     .action(async (id, options) => {
       try {
-        const { readCliGoalExtensionPanels } = await import(
-          "../lib/plugin-runtime/cli-goal-extension-host.js"
-        );
+        const { readCliGoalExtensionPanels } =
+          await import("../lib/plugin-runtime/cli-goal-extension-host.js");
         const result = await readCliGoalExtensionPanels(id, {
           plugin: options.plugin,
           scope: options.scope,
@@ -333,9 +331,8 @@ export function registerGoalCommand(program) {
       };
       const json = options.json;
       try {
-        const { replayCliGoalEvents } = await import(
-          "../lib/plugin-runtime/cli-goal-event-history.js"
-        );
+        const { replayCliGoalEvents } =
+          await import("../lib/plugin-runtime/cli-goal-event-history.js");
         await replayCliGoalEvents(id, selection, async (page) => {
           const output = json
             ? JSON.stringify(page) + "\n"
@@ -447,197 +444,234 @@ export function registerGoalCommand(program) {
       }
     });
 
-  goal
-    .command("draft-request <id>")
-    .description(
-      "Export an untrusted description request for explicit desktop adoption",
-    )
-    .requiredOption(
-      "--connection <file>",
-      "Read one explicitly connected desktop goal",
-    )
-    .requiredOption("--plugin <name>", "Select the installed proposal plugin")
-    .requiredOption(
-      "--scope <scope>",
-      "Select its user, project or local scope",
-    )
-    .requiredOption(
-      "--source <proposalId>",
-      "Exact native risk proposal ID copied from the desktop",
-    )
-    .requiredOption(
-      "--request-id <id>",
-      "Stable request identity; reuse the same file for retry",
-    )
-    .requiredOption("--title <text>", "Request title")
-    .requiredOption(
-      "--description-file <file>",
-      "UTF-8 proposed description, at most 8192 bytes",
-    )
-    .requiredOption(
-      "--out <file>",
-      "New request file; never overwrites an existing file",
-    )
-    .option(
-      "--expected-store <storeId>",
-      "Require the selected project goal store",
-    )
-    .option("--json", "Output the export result; no native draft is created")
-    .action(async (id, options) => {
-      try {
-        const { exportCliGoalDraftRequest } = await import(
-          "../lib/plugin-runtime/cli-goal-draft-request.js"
-        );
-        const result = await exportCliGoalDraftRequest(id, options);
-        if (options.json) console.log(JSON.stringify(result, null, 2));
-        else
-          logger.log(
-            stripVTControlCharacters(
-              `Request exported: ${result.file}\nNo native draft has been saved. Import this file in the desktop and review the full text. Request: ${result.requestId}`,
-            ),
-          );
-      } catch (error) {
-        fail("draft-request", error);
-      }
-    });
-
-  goal
-    .command("draft-access")
-    .description(
-      "Export a plugin label for separate native pending-draft authorization",
-    )
-    .requiredOption(
-      "--plugin <name>",
-      "Select an installed, trusted proposal plugin",
-    )
-    .requiredOption(
-      "--scope <scope>",
-      "Its user, project or local installation scope",
-    )
-    .requiredOption(
-      "--out <file>",
-      "New access request file; contains no native authority",
-    )
-    .option("--json", "Output the access export result as JSON")
-    .action(async (options) => {
-      const captured = {
-        ...options,
-        cwd: process.cwd(),
-        env: { ...process.env },
-      };
-      try {
-        const { exportCliGoalDraftAccess } = await import(
-          "../lib/plugin-runtime/cli-goal-drafts.js"
-        );
-        const result = await exportCliGoalDraftAccess(captured);
-        if (captured.json) console.log(JSON.stringify(result, null, 2));
-        else
-          logger.log(
-            stripVTControlCharacters(
-              `Access request exported: ${result.file}\nOpen it in the desktop for separate native authorization; this file grants no permission.`,
-            ),
-          );
-      } catch (error) {
-        fail("draft-access", error);
-      }
-    });
-
-  for (const [name, description] of [
-    [
-      "draft-sources",
-      "Read current source IDs under a v3 pending-draft connection",
-    ],
-    [
-      "draft-send",
-      "Save one pending suggestion with a durable submission reference",
-    ],
-    ["draft-receipt", "Reconcile a recorded submission without resending it"],
-  ]) {
-    const command = goal
-      .command(`${name} <id>`)
-      .description(description)
+  for (const creation of [false, true]) {
+    const exportCommand = goal
+      .command(creation ? "draft-create-request <id>" : "draft-request <id>")
+      .description(
+        creation
+          ? "Export an untrusted task-creation request for explicit desktop adoption"
+          : "Export an untrusted description request for explicit desktop adoption",
+      )
       .requiredOption(
         "--connection <file>",
-        "Separately authorized v3 desktop pending-draft connection",
+        "Read one explicitly connected desktop goal",
       )
+      .requiredOption("--plugin <name>", "Select the installed proposal plugin")
       .requiredOption(
-        "--plugin <name>",
-        "Select the exact installed proposal plugin",
+        "--scope <scope>",
+        "Select its user, project or local scope",
       )
       .requiredOption(
-        "--scope <scope>",
-        "Its user, project or local installation scope",
+        "--source <proposalId>",
+        "Exact native risk proposal ID copied from the desktop",
+      )
+      .requiredOption(
+        "--request-id <id>",
+        "Stable request identity; reuse the same file for retry",
+      )
+      .requiredOption("--title <text>", "Request title")
+      .requiredOption(
+        "--description-file <file>",
+        "UTF-8 proposed description, at most 8192 bytes",
+      )
+      .requiredOption(
+        "--out <file>",
+        "New request file; never overwrites an existing file",
       )
       .option(
         "--expected-store <storeId>",
         "Require the selected project goal store",
       )
-      .option("--json", "Output the bounded result as JSON");
-    if (name === "draft-sources")
-      command.option(
-        "--after <cursor>",
-        "Continue after a returned source cursor",
-      );
-    else
-      command.requiredOption(
-        "--record <file>",
-        "Durable no-credential submission reference; an existing reference is only queried",
+      .option("--json", "Output the export result; no native draft is created")
+      .action(async (id, options) => {
+        try {
+          const { exportCliGoalDraftRequest, exportCliGoalTaskCreateRequest } =
+            await import("../lib/plugin-runtime/cli-goal-draft-request.js");
+          const result = await (
+            creation
+              ? exportCliGoalTaskCreateRequest
+              : exportCliGoalDraftRequest
+          )(id, options);
+          if (options.json) console.log(JSON.stringify(result, null, 2));
+          else
+            logger.log(
+              stripVTControlCharacters(
+                `Request exported: ${result.file}\nNo native draft has been saved. Import this file in the desktop and review the full text. Request: ${result.requestId}`,
+              ),
+            );
+        } catch (error) {
+          fail(creation ? "draft-create-request" : "draft-request", error);
+        }
+      });
+    if (creation)
+      exportCommand.requiredOption(
+        "--task-type <type>",
+        "Explicit native task type for this pending creation request",
       );
-    if (name === "draft-send")
-      command
+  }
+
+  for (const creation of [false, true]) {
+    goal
+      .command(creation ? "draft-create-access" : "draft-access")
+      .description(
+        "Export a plugin label for separate native pending-draft authorization",
+      )
+      .requiredOption(
+        "--plugin <name>",
+        "Select an installed, trusted proposal plugin",
+      )
+      .requiredOption(
+        "--scope <scope>",
+        "Its user, project or local installation scope",
+      )
+      .requiredOption(
+        "--out <file>",
+        "New access request file; contains no native authority",
+      )
+      .option("--json", "Output the access export result as JSON")
+      .action(async (options) => {
+        const captured = {
+          ...options,
+          cwd: process.cwd(),
+          env: { ...process.env },
+        };
+        try {
+          const { exportCliGoalDraftAccess, exportCliGoalCreateDraftAccess } =
+            await import("../lib/plugin-runtime/cli-goal-drafts.js");
+          const result = await (
+            creation ? exportCliGoalCreateDraftAccess : exportCliGoalDraftAccess
+          )(captured);
+          if (captured.json) console.log(JSON.stringify(result, null, 2));
+          else
+            logger.log(
+              stripVTControlCharacters(
+                `Access request exported: ${result.file}\nOpen it in the desktop for separate native authorization; this file grants no permission.`,
+              ),
+            );
+        } catch (error) {
+          fail(creation ? "draft-create-access" : "draft-access", error);
+        }
+      });
+  }
+
+  for (const creation of [false, true]) {
+    for (const [name, description] of [
+      [
+        "draft-sources",
+        "Read current source IDs under a v3 pending-draft connection",
+      ],
+      [
+        "draft-send",
+        "Save one pending suggestion with a durable submission reference",
+      ],
+      ["draft-receipt", "Reconcile a recorded submission without resending it"],
+    ]) {
+      const command = goal
+        .command(
+          `${creation ? name.replace("draft-", "draft-create-") : name} <id>`,
+        )
+        .description(
+          creation ? description.replace("v3", "v6 creation") : description,
+        )
         .requiredOption(
-          "--source <proposalId>",
-          "Exact source ID returned by draft-sources",
+          "--connection <file>",
+          creation
+            ? "Separately authorized v6 creation pending-draft connection"
+            : "Separately authorized v3 desktop pending-draft connection",
         )
         .requiredOption(
-          "--request-id <id>",
-          "Stable request identity; preserve it when querying an unknown result",
+          "--plugin <name>",
+          "Select the exact installed proposal plugin",
         )
-        .requiredOption("--title <text>", "Pending suggestion title")
         .requiredOption(
-          "--description-file <file>",
-          "UTF-8 proposed description, at most 8192 bytes",
+          "--scope <scope>",
+          "Its user, project or local installation scope",
+        )
+        .option(
+          "--expected-store <storeId>",
+          "Require the selected project goal store",
+        )
+        .option("--json", "Output the bounded result as JSON");
+      if (name === "draft-sources")
+        command.option(
+          "--after <cursor>",
+          "Continue after a returned source cursor",
         );
-    command.action(async (id, options) => {
-      const captured = {
-        ...options,
-        cwd: process.cwd(),
-        env: { ...process.env },
-      };
-      try {
-        const host = await import("../lib/plugin-runtime/cli-goal-drafts.js");
-        const run =
-          name === "draft-sources"
-            ? host.readCliGoalDraftSources
-            : name === "draft-send"
-              ? host.sendCliGoalDraft
-              : host.readCliGoalDraftReceipt;
-        const result = await run(id, captured);
-        if (captured.json) console.log(JSON.stringify(result, null, 2));
-        else if (name === "draft-sources") {
-          for (const source of result.sources.entries)
+      else
+        command.requiredOption(
+          "--record <file>",
+          "Durable no-credential submission reference; an existing reference is only queried",
+        );
+      if (name === "draft-send")
+        command
+          .requiredOption(
+            "--source <proposalId>",
+            "Exact source ID returned by draft-sources",
+          )
+          .requiredOption(
+            "--request-id <id>",
+            "Stable request identity; preserve it when querying an unknown result",
+          )
+          .requiredOption("--title <text>", "Pending suggestion title")
+          .requiredOption(
+            "--description-file <file>",
+            "UTF-8 proposed description, at most 8192 bytes",
+          );
+      if (creation && name === "draft-send")
+        command.requiredOption(
+          "--task-type <type>",
+          "Explicit native task type; saved pending only",
+        );
+      command.action(async (id, options) => {
+        const captured = {
+          ...options,
+          cwd: process.cwd(),
+          env: { ...process.env },
+        };
+        try {
+          const host = await import("../lib/plugin-runtime/cli-goal-drafts.js");
+          const run =
+            name === "draft-sources"
+              ? creation
+                ? host.readCliGoalCreateDraftSources
+                : host.readCliGoalDraftSources
+              : name === "draft-send"
+                ? creation
+                  ? host.sendCliGoalCreateDraft
+                  : host.sendCliGoalDraft
+                : creation
+                  ? host.readCliGoalCreateDraftReceipt
+                  : host.readCliGoalDraftReceipt;
+          const result = await run(id, captured);
+          if (captured.json) console.log(JSON.stringify(result, null, 2));
+          else if (name === "draft-sources") {
+            for (const source of result.sources.entries)
+              logger.log(
+                stripVTControlCharacters(
+                  `${source.id}  task ${source.sourceTaskId}  review ${source.reviewId}`,
+                ),
+              );
+            logger.log(
+              `Scanned ${result.sources.scannedCount}; unavailable ${result.sources.unavailableCount}.`,
+            );
+            if (result.sources.nextCursor)
+              logger.log(`Next cursor: ${result.sources.nextCursor}`);
+          } else
             logger.log(
               stripVTControlCharacters(
-                `${source.id}  task ${source.sourceTaskId}  review ${source.reviewId}`,
+                result.state === "saved"
+                  ? `Pending suggestion saved: ${result.proposalId}\nTask ${creation ? "creation" : "modification"} still requires native preview and confirmation. Reference: ${result.record}`
+                  : `${result.state === "unknown" ? "Submission result unknown" : "No matching submission existed at query time"}. No automatic resend was performed.\nQuery the same reference with ${creation ? "draft-create-receipt" : "draft-receipt"}: ${result.record}`,
               ),
             );
-          logger.log(
-            `Scanned ${result.sources.scannedCount}; unavailable ${result.sources.unavailableCount}.`,
+        } catch (error) {
+          fail(
+            creation ? name.replace("draft-", "draft-create-") : name,
+            error,
           );
-          if (result.sources.nextCursor)
-            logger.log(`Next cursor: ${result.sources.nextCursor}`);
-        } else
-          logger.log(
-            stripVTControlCharacters(
-              result.state === "saved"
-                ? `Pending suggestion saved: ${result.proposalId}\nTask modification still requires native preview and confirmation. Reference: ${result.record}`
-                : `${result.state === "unknown" ? "Submission result unknown" : "No matching submission existed at query time"}. No automatic resend was performed.\nQuery the same reference with draft-receipt: ${result.record}`,
-            ),
-          );
-      } catch (error) {
-        fail(name, error);
-      }
-    });
+        }
+      });
+    }
   }
 
   const kr = goal.command("kr").description("Manage key results");

package/src/commands/setup.js

@@ -27,6 +27,7 @@ import {
   askPassword,
 } from "../lib/prompts.js";
 import logger from "../lib/logger.js";
+import { normalizeLlmEndpoint } from "../lib/llm-connection-resolution.js";
 import {
   assessEvolutionDeploymentReadiness,
   getEvolutionDeploymentStatus,
@@ -151,6 +152,10 @@ async function runSetup(options) {
     // Abort before changing provider/baseUrl so an old provider's credential
     // can never be paired with and sent to a newly selected endpoint.
     assertRequiredProviderCredential(providerInfo, apiKey);
+  } else if (provider === "custom") {
+    apiKey = await askPassword(
+      "Enter the platform API key (optional; leave blank if not required):",
+    );
   }
 
   if (provider === "custom" || providerInfo.isProxy) {
@@ -187,6 +192,18 @@ async function runSetup(options) {
 
   // Step 7: Save config
   const applySetupValues = (config) => {
+    const previous = config.llm || {};
+    const sameTarget =
+      previous.provider === provider &&
+      normalizeLlmEndpoint(
+        provider,
+        previous.baseUrl || providerInfo.defaultBaseUrl,
+      ) === normalizeLlmEndpoint(provider, baseUrl);
+    if (provider === "custom" && !apiKey && !sameTarget) {
+      delete previous.apiKey;
+      delete previous.apiKeyHelper;
+    }
+    config.llm = previous;
     config.setupCompleted = true;
     config.completedAt = new Date().toISOString();
     config.edition = edition;

package/src/data/changelog.json

@@ -1,6 +1,19 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.143",
+      "cliVersions": ["0.166.143"],
+      "date": "2026-11-06",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.143: local compute and pending task creation (candidate, 2026-11-06)",
+          "body": "- Pair Session Core 0.3.26, Open VSX 0.37.179 and JetBrains 0.4.196 after exact-source three-OS gates and OIDC upstream publication/readback.\n- Add local OpenAI-compatible platform choices (LEXDATA / vLLM / SGLang) in both IDEs, optional platform credentials, explicit HTTP consent and atomic configuration/readback; do not reuse old target credentials when switching keyless endpoints.\n- Add controlled goal task-creation request files, v6 pending-draft connections and the admitted project-delivery-assistant 0.3.0 declaration; native preview/confirmation and matching desktop support remain required.\n- Desktop source also includes per-call governed Ollama, Volcengine and private OpenAI drafting, Memory output authorization and durable no-retry recovery. This release does not publish desktop/mobile clients.\n- Preserve the two synthetic real Volcengine cases (1,176 tokens, unknown cost) separately from the 374 focused regressions/22 checks. LEXDATA actual inference, real GUI and independent business-effect acceptance remain unverified."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.142",
@@ -9,7 +22,7 @@
       "title": "",
       "sections": [
         {
-          "heading": "Added - cc CLI 0.166.142: authorized goal events and retained recovery (candidate, 2026-11-05)",
+          "heading": "Added - cc CLI 0.166.142: authorized goal events and retained recovery (released, 2026-11-05)",
           "body": "- Add standalone status and separately authorized native risk/action observation, plus a transactional retained event journal in Session Core 0.3.25.\n- Add one-page CLI replay with durable new/resume checkpoints, at-least-once delivery, and explicit VS Code / JetBrains recovery controls.\n- Compose the data-only project-delivery-assistant 0.2.0 scenario with full declaration consent and per-operation capability limits; native confirmation remains separate from pending drafts.\n- Pair Open VSX 0.37.178 and JetBrains 0.4.195 only after the exact-source CLI matrices, OIDC publication and public package verification. Real GUI and business-effect acceptance remain separate."
         }
       ]

package/src/lib/llm-onboarding-catalog.json

@@ -121,11 +121,12 @@
     },
     {
       "id": "custom",
-      "label": "Custom provider (vLLM / TGI / compatible service)",
-      "cliLabel": "自定义 Provider (自建服务/vLLM/TGI等)",
+      "label": "Local compute / OpenAI compatible (LEXDATA / vLLM / SGLang)",
+      "cliLabel": "本地算力平台 / OpenAI 兼容 (力数/vLLM/SGLang等)",
       "baseUrl": "",
       "defaultModel": "",
-      "needsKey": true
+      "needsKey": false,
+      "visionModel": ""
     }
   ]
 }

package/src/lib/plugin-runtime/cli-goal-capabilities.js

@@ -8,6 +8,7 @@ export const CLI_GOAL_CAPABILITIES = Object.freeze([
   "panel:goal.summary",
   "panel:goal.evidence",
   "proposal:task.description.update",
+  "proposal:task.create",
 ]);
 
 export function cliGoalExtensionHost(activeCapabilities) {

package/src/lib/plugin-runtime/cli-goal-draft-request.js

@@ -3,9 +3,11 @@ import path from "node:path";
 import { cliGoalExtensionHost } from "./cli-goal-capabilities.js";
 import { createProjectGoalConnection } from "../project-goal-connection.js";
 import { collectGoalExtensions } from "./goal-extensions.js";
-import { createGoalDraftRequest } from "@chainlesschain/session-core/goal-draft-request-contract";
+import {
+  createGoalDraftRequest,
+  createGoalTaskCreateRequest,
+} from "@chainlesschain/session-core/goal-draft-request-contract";
 import { digestBusinessObjectContent as digest } from "@chainlesschain/session-core/business-object-contract";
-const HOST = cliGoalExtensionHost(["proposal:task.description.update"]);
 function fail(code) {
   throw new Error(code);
 }
@@ -49,12 +51,19 @@ export function readGoalDraftDescription(file) {
   }
 }
 export async function exportCliGoalDraftRequest(id, options = {}) {
+  return exportRequest(id, options, false);
+}
+export async function exportCliGoalTaskCreateRequest(id, options = {}) {
+  return exportRequest(id, options, true);
+}
+async function exportRequest(id, options, creation) {
   options = Object.freeze({
     ...options,
     env: Object.freeze({ ...(options.env || process.env) }),
   });
   const cwd = path.resolve(options.cwd || process.cwd()),
     env = Object.freeze({ ...(options.env || process.env) });
+  const type = creation ? "task.create" : "task.description.update";
   if (
     !options.connection ||
     !options.plugin ||
@@ -73,7 +82,7 @@ export async function exportCliGoalDraftRequest(id, options = {}) {
   const hostOptions = {
     cwd,
     env,
-    host: HOST,
+    host: cliGoalExtensionHost([`proposal:${type}`]),
     managedSettingsFile: options.managedSettingsFile,
   };
   const admitted = () =>
@@ -81,12 +90,11 @@ export async function exportCliGoalDraftRequest(id, options = {}) {
       (entry) => entry.name === options.plugin && entry.scope === options.scope,
     );
   const plugin = admitted();
-  if (
-    !plugin ||
-    !plugin.declaration.proposals.includes("task.description.update")
-  )
+  if (!plugin || !plugin.declaration.proposals.includes(type))
     fail("GOAL_DRAFT_PLUGIN_NOT_ADMITTED");
-  const request = createGoalDraftRequest({
+  const request = (
+    creation ? createGoalTaskCreateRequest : createGoalDraftRequest
+  )({
     declaredPlugin: {
       name: plugin.name,
       scope: plugin.scope,
@@ -94,7 +102,8 @@ export async function exportCliGoalDraftRequest(id, options = {}) {
     },
     declarationDigest: digest(plugin.declaration),
     proposal: {
-      type: "task.description.update",
+      type,
+      ...(creation ? { taskType: options.taskType } : {}),
       goalRef: snapshot.goalRef,
       sourceRef: options.source,
       requestId: options.requestId,
@@ -123,12 +132,17 @@ export async function exportCliGoalDraftRequest(id, options = {}) {
     fs.closeSync(fd);
   }
   return {
-    schema: "chainlesschain.goal-draft-export/v1",
+    schema: creation
+      ? "chainlesschain.goal-task-create-export/v1"
+      : "chainlesschain.goal-draft-export/v1",
     state: "request-exported",
     goalRef: request.proposal.goalRef,
     declaredPlugin: request.declaredPlugin,
     requestId: request.proposal.requestId,
     contentDigest: request.contentDigest,
     file,
+    ...(creation
+      ? { type: "task.create", taskType: request.proposal.taskType }
+      : {}),
   };
 }