chainlesschain 0.166.71 → 0.166.74

package/src/lib/evolution/skill-writer-inventory-manifest.js

@@ -166,7 +166,10 @@ export const SKILL_WRITER_INVENTORY = Object.freeze({
         symbol: "_executeRunCode",
         evidence: [
           "async function _executeRunCode(args, cwd)",
-          "output = runCodeProcess(interpreter, [scriptPath]",
+          "output = runCodeProcess(",
+          'bashStdin ? ["-s", "--"] : [scriptPath]',
+          "...(bashStdin ? { input: code } : {})",
+          "...pluginBinSandboxOptions",
         ],
       },
     }),

package/src/lib/task-progress-tracker.js

@@ -47,11 +47,13 @@ function isGitInspection(result, args) {
     .trim()
     .replace(/^git\s+/i, "");
   return (
-    /^(?:merge-base|grep|rev-list|ls-files|ls-tree|ls-remote|cat-file|describe|name-rev)\b/i.test(
+    /^(?:status|diff|log|show|rev-parse|merge-base|grep|rev-list|ls-files|ls-tree|ls-remote|cat-file|describe|name-rev|fetch)\b/i.test(
       command,
     ) ||
     /^remote\s*(?:-v|--verbose)?\s*$/i.test(command) ||
-    /^(?:branch|tag)\s+(?:--list|-l)(?:\s|$)/i.test(command)
+    /^(?:branch|tag)\s*(?:$|(?:--list|-l|--show-current|--contains|--no-merged|--merged|-a|-r|--all|--sort)(?:[=\s]|$))/i.test(
+      command,
+    )
   );
 }
 
@@ -61,7 +63,7 @@ function isGitInspection(result, args) {
 function isRemoteInspectionCommand(command) {
   if (typeof command !== "string") return false;
   if (
-    /(?:^|[\s;&|])gh(?:\.exe)?\s+(?:run\s+(?:view|list|watch)|pr\s+(?:view|list|diff|checks)|auth\s+status)\b/i.test(
+    /(?:^|[\s;&|])gh(?:\.exe)?\s+(?:run\s+(?:view|list|watch)|pr\s+(?:view|list|diff|checks)|workflow\s+(?:view|list)|auth\s+status)\b/i.test(
       command,
     )
   )
@@ -76,6 +78,43 @@ function isRemoteInspectionCommand(command) {
   );
 }
 
+// Advisory classification, never execution parsing or permission approval.
+// A retry wrapper or JSON filter is still investigation, even when each call
+// prints a different small result. Unknown computations remain available.
+function isInspectionScript(code) {
+  if (typeof code !== "string") return false;
+  // Keep actual changes and focused verification eligible to advance the task.
+  if (
+    /\b(?:writeFile(?:Sync)?|appendFile(?:Sync)?|unlink(?:Sync)?|rename(?:Sync)?|mkdir(?:Sync)?|rmSync|rmdirSync|assert|pytest|vitest|unittest)\b/.test(
+      code,
+    ) ||
+    /\b(?:npm\s+(?:test|run|publish)|git\s+(?:commit|merge|cherry-pick|push)|gh\s+(?:pr\s+(?:create|merge|close)|run\s+rerun))\b/i.test(
+      code,
+    )
+  )
+    return false;
+  // Direct exec("gh ...") and helpers such as gh("run view ...") both occur
+  // in recovery loops. Do not execute/extract these strings as commands.
+  const literals = [...code.matchAll(/["'`]([^"'`\r\n]+)["'`]/g)].map(
+    (match) => match[1],
+  );
+  if (literals.some((value) => isRemoteInspectionCommand(value))) return true;
+  if (
+    /\bgh\s*\(/.test(code) &&
+    literals.some((value) => isRemoteInspectionCommand(`gh ${value}`))
+  )
+    return true;
+  // Parsing previously saved logs/metadata is evidence collection too.
+  return (
+    /\b(?:readFileSync|readFile|readdirSync|readdir|read_text|read_bytes|json\.load)\s*\(/.test(
+      code,
+    ) &&
+    !/\b(?:execSync|execFileSync|spawnSync|exec|spawn|subprocess|system)\s*[.(]/.test(
+      code,
+    )
+  );
+}
+
 function remember(map, key, value, limit) {
   map.delete(key);
   map.set(key, value);
@@ -180,7 +219,9 @@ export class TaskProgressTracker {
               ? "git-inspection"
               : remoteTarget?.github || isRemoteInspectionCommand(command)
                 ? "remote-inspection"
-                : "local-execution"),
+                : tool === "run_code" && isInspectionScript(command)
+                  ? "script-inspection"
+                  : "local-execution"),
           invocation: boundedText(command || previous?.invocation, 1000),
           invocationTruncated: command
             ? command.length > 1000
@@ -293,6 +334,7 @@ export class TaskProgressTracker {
       exploration =
         !!remoteReadTarget(tool, args) ||
         remoteInspection ||
+        (tool === "run_code" && isInspectionScript(args.code)) ||
         output.length >= 8000 ||
         this.commandOutputs.has(digest);
       if (!failed) remember(this.commandOutputs, digest, true, 64);
@@ -356,6 +398,7 @@ export class TaskProgressTracker {
         "For research/review, synthesize evidence-backed findings; do not write files merely to clear this warning. " +
         "If evidence is insufficient, name the exact missing fact and use a focused search or bounded computation. " +
         "Do not restart general investigation, rewrite the plan, or delegate the same research. " +
+        "Re-reading the same commit, completed CI run or saved metadata through a different script is still investigation. Once a failure and candidate fix are established, run the focused validation or perform the next authorized action; do not repeatedly announce that the root cause is confirmed. For monitoring, poll a compact status at a reasonable interval and investigate again only when the state changes. " +
         "A child exhausting its budget is not task completion. Preserve useful partial findings and continue the original task. " +
         "During recovery, broad discovery stays paused until an actionable tool outcome; a focused search, another status query or a failed command does not end recovery. " +
         "Use search_files for an exact missing local fact, read_file with an explicit offset and limit of at most 80 lines for a known target section, or run a bounded computation/verification, then act on the result. " +

package/src/runtime/agent-core.js

@@ -1128,6 +1128,8 @@ Key behaviors:
 - For CI log retrieval, inspect command stderr before retrying. Match syntax to the actual shell: Windows PowerShell 5 does not support &&, cmd treats single quotes literally, and head is not a Windows builtin. Prefer a plain gh metadata/log command without jq or pipelines first, then inspect the saved output. Never switch shells to bypass a policy denial.
 - For long-running commands (builds, full test suites, dev servers) set run_shell { run_in_background: true } to get a task_id back immediately, then poll output and completion with check_shell { task_id }. Kill a backgrounded server with check_shell { task_id, kill: true } when finished
 - When asked about git status, diff, log, or other repository operations, use the git tool instead of run_shell
+- The git tool accepts ONE Git argument list, without pipes, redirects, &&, semicolons or echo. Use log -n 5 instead of piping to head; inspect the returned exitCode for predicates such as merge-base --is-ancestor (1 means false). Discover remote names with remote -v; do not assume origin exists.
+- On Windows, run_shell defaults to cmd unless configured otherwise. Set shell: "powershell" for PowerShell syntax or shell: "pwsh" for PowerShell 7. Parse saved JSON after stripping an initial UTF-8 BOM; a BOM parse error is not a JavaScript syntax defect.
 - When asked about files or code, use search_files to locate relevant sections, then read_file with offset/limit. Follow nextRead for large files. Reuse unchanged content already in context instead of repeatedly reading the same page; re-read when the file changes or the earlier content is no longer available.
 - For long text files, use search_files with path and pattern to find matching lines/columns and nearby text; read the returned nextRead location instead of paging from the top.
 - For online discovery without a known URL, use web_search with keywords. Return relevant source links and snippets; use web_fetch only when the source needs closer reading. For a known URL, fetch it directly. Download large pages once, then use snapshotId to search or read local chunks. Never invent URLs or claim a blocked search returned no results.
@@ -9396,13 +9398,22 @@ async function _executeRunCode(args, cwd) {
     const start = Date.now();
     let output;
     try {
-      output = runCodeProcess(interpreter, [scriptPath], {
-        cwd,
-        encoding: "utf8",
-        timeout: timeoutSec * 1000,
-        maxBuffer: 5 * 1024 * 1024,
-        ...pluginBinSandboxOptions,
-      });
+      // Windows may resolve bash to Git Bash or WSL. Neither should receive a
+      // native temp pathname as a shell token. Stdin preserves the script bytes
+      // across both path dialects, without an extra shell or path conversion.
+      const bashStdin = lang === "bash" && process.platform === "win32";
+      output = runCodeProcess(
+        interpreter,
+        bashStdin ? ["-s", "--"] : [scriptPath],
+        {
+          cwd,
+          ...(bashStdin ? { input: code } : {}),
+          encoding: "utf8",
+          timeout: timeoutSec * 1000,
+          maxBuffer: 5 * 1024 * 1024,
+          ...pluginBinSandboxOptions,
+        },
+      );
     } catch (err) {
       // Broker boundary errors carry the required/actual/missing guarantees and
       // backend attestation. Preserve that exact structured error for callers

package/src/assets/web-panel/assets/MobileProjects-DDA7pzJd.js

@@ -1 +0,0 @@
-import{I as n,J as g,c as l,K as r,N as u,P as h,U as o,R as t,Q as b}from"./vendor-Bn1JzzAn.js";import{_ as v,b as m}from"./index-5UfwyzQV.js";import{a8 as M,M as y}from"./icons-DG5UD-6K.js";const B={__name:"MobileProjects",setup(p,{expose:i}){i();const c=u(),{t:e}=m();function a(){c.push("/projects")}function _(){c.push("/mobile-bridge")}const s={router:c,t:e,goToProjects:a,goToMobileBridge:_,get useRouter(){return u},get useI18n(){return m},get MobileOutlined(){return y},get FolderOutlined(){return M}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}},x={class:"mobile-projects-placeholder"},O={class:"title"},k={class:"subtitle"},w={class:"explainer"};function T(p,i,c,e,a,_){const s=n("a-alert"),d=n("a-button"),f=n("a-space"),P=n("a-empty"),j=n("a-card");return h(),g("div",x,[l(j,null,{default:r(()=>[l(P,{description:!1},{image:r(()=>[l(e.MobileOutlined,{style:{fontSize:"64px",color:"#bfbfbf"}})]),default:r(()=>[o("h2",O,t(e.t("mobileProjects.title")),1),o("p",k,t(e.t("mobileProjects.subtitle")),1),l(s,{message:e.t("mobileProjects.v02Banner"),type:"info","show-icon":"",class:"banner"},null,8,["message"]),o("div",w,[o("h3",null,t(e.t("mobileProjects.currentDirection")),1),o("p",null,t(e.t("mobileProjects.currentDirectionBody")),1),o("ul",null,[o("li",null,t(e.t("mobileProjects.stepPhone")),1),o("li",null,t(e.t("mobileProjects.stepTap")),1),o("li",null,t(e.t("mobileProjects.stepPull")),1)]),o("h3",null,t(e.t("mobileProjects.reverseDirection")),1),o("p",null,t(e.t("mobileProjects.reverseDirectionBody")),1)]),l(f,{class:"actions"},{default:r(()=>[l(d,{type:"primary",onClick:e.goToProjects},{default:r(()=>[l(e.FolderOutlined),b(" "+t(e.t("mobileProjects.viewLocalProjects")),1)]),_:1}),l(d,{onClick:e.goToMobileBridge},{default:r(()=>[l(e.MobileOutlined),b(" "+t(e.t("mobileProjects.checkBridge")),1)]),_:1})]),_:1})]),_:1})]),_:1})])}const N=v(B,[["render",T],["__scopeId","data-v-9262cc45"],["__file","/tmp/cc-web-panel-pMJBYK/repo/packages/web-panel/src/views/MobileProjects.vue"]]);export{N as default};

package/src/assets/web-panel/assets/devWarning-CoA1apwL.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-5UfwyzQV.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-CsR4S29Z.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-CnLRjeGC.js";import{a0 as t}from"./index-5UfwyzQV.js";import"./vendor-Bn1JzzAn.js";import"./responsiveObserve-B98U6Yi5.js";import"./useFlexGapSupport-C0UFofSm.js";import"./styleChecker-CDWAgZKa.js";import"./index-Cs4qAz6z.js";import"./icons-DG5UD-6K.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-DvcAyRFh.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-C511kzpa.js";import{a0 as t}from"./index-5UfwyzQV.js";import"./vendor-Bn1JzzAn.js";import"./index-Cs4qAz6z.js";import"./icons-DG5UD-6K.js";const s=t(o);export{s as default};