chainlesschain 0.166.78 → 0.166.80

package/src/assets/web-panel/assets/{usePersonalDataHub-BhgIVzP_.js → usePersonalDataHub-DFrCp7m_.js}

@@ -1 +1 @@
-import{u as v}from"./index-CLUa68JH.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};
+import{u as v}from"./index-DjNjO-VL.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};

package/src/assets/web-panel/assets/{vnode-4ZD9-MDr.js → vnode-bCuSFOmr.js}

@@ -1 +1 @@
-import{N as i,h as a,w as l}from"./index-CLUa68JH.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};
+import{N as i,h as a,w as l}from"./index-DjNjO-VL.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};

package/src/assets/web-panel/assets/{zoom-Bx4MRVNW.js → zoom-sCpZ0sw7.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-CLUa68JH.js";import{i as f}from"./motion-CK469n2j.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-DjNjO-VL.js";import{i as f}from"./motion-IAABGXc_.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-CLUa68JH.js"></script>
+  <script type="module" crossorigin src="./assets/index-DjNjO-VL.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-Bn1JzzAn.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-DG5UD-6K.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.80",
+      "cliVersions": ["0.166.80"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.80: revoke active Docker egress shells",
+          "body": "- Revalidate live shell and sandbox authority while a Docker egress command is\n  running. A failed or timed-out check locks revocation, cuts the policy broker,\n  closes the target container, and prevents a successful execution receipt.\n- Check authority again immediately before target start and receipt issuance;\n  reject sessions delivered after revocation. A real Linux Docker probe checks\n  tunnel closure, target termination, container cleanup, and rejected outcome.\n- This bounded poll does not provide a lossless policy revision subscription;\n  a policy change reverted between checks remains outside its detection scope."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.79",
+      "cliVersions": ["0.166.79"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.79: opt-in Docker domain egress",
+          "body": "- Add an explicit Linux Docker egress engine for `run_shell`, with pinned target\n  and relay images, a Unix-socket policy broker, target isolation verification,\n  and a real product-path Docker probe.\n- Report an unknown execution outcome after target start or cleanup uncertainty\n  without suggesting a safe automatic retry. Lossless policy-revision\n  subscription remains under development."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.78",

package/src/lib/agent-sandbox.js

@@ -13,6 +13,9 @@ export const AGENT_SANDBOX_MODES = Object.freeze([
 ]);
 export const AGENT_SANDBOX_CAPABILITY_SCHEMA =
   "chainlesschain.agent-sandbox-capabilities/v1";
+const dockerEgressReceipts = new WeakMap();
+const PINNED_DOCKER_IMAGE =
+  /^[a-zA-Z0-9][a-zA-Z0-9./:_-]*@sha256:[a-f0-9]{64}$/;
 export const _deps = {
   spawnSync: (...args) => executionBroker.spawnSync(...args),
   host: () => ({
@@ -249,12 +252,21 @@ export function normalizeAgentSandbox(value, options = {}) {
   return {
     engine: effectiveSettings.engine || "docker",
     image: effectiveSettings.image || image,
+    ...(effectiveSettings.engine === "docker-egress"
+      ? { relayImage: effectiveSettings.relayImage || null }
+      : {}),
     cwd: path.resolve(options.cwd || process.cwd()),
     network: managedNetworkDisabled
       ? false
       : options.network === true || effectiveSettings.network === true,
     policy: normalizeSandboxPolicy(
-      effectiveSettings,
+      effectiveSettings.engine === "docker-egress"
+        ? {
+            ...effectiveSettings,
+            allowUnsandboxedCommands: false,
+            failIfUnavailable: true,
+          }
+        : effectiveSettings,
       options.cwd || process.cwd(),
     ),
   };
@@ -340,6 +352,149 @@ function addUniqueCapability(target, entry) {
   }
 }
 
+function egressBinding(sandbox) {
+  return JSON.stringify({
+    engine: sandbox.engine,
+    image: sandbox.image,
+    relayImage: sandbox.relayImage,
+    cwd: sandbox.cwd,
+    network: sandbox.network,
+    mode: sandbox.mode || null,
+    policy: sandbox.policy || {},
+  });
+}
+
+function assessDockerEgressCapabilities(sandbox, options, host) {
+  const policy = sandbox.policy || {};
+  const domainRules =
+    (policy.allowedDomains?.length || 0) + (policy.deniedDomains?.length || 0);
+  const requested = [
+    capability("isolation.container"),
+    capability("filesystem.workspace-read-write"),
+    capability("network.domain-policy", { entries: domainRules }),
+  ];
+  const unsupported = [];
+  const reject = (id, reason, message) =>
+    unsupported.push(capability(id, { reason, message }));
+  if (policy.excludedCommands?.length)
+    reject(
+      "execution.excluded-commands",
+      "docker_egress_exclusions_prohibited",
+      "Docker egress does not allow commands to bypass its execution route.",
+    );
+  if (host.platform !== "linux")
+    reject(
+      "backend.platform",
+      "docker_egress_requires_linux",
+      "Docker egress requires a Linux host.",
+    );
+  if (!["x64", "arm64"].includes(host.arch))
+    reject(
+      "backend.architecture",
+      "docker_egress_architecture_unsupported",
+      "Docker egress requires x64 or arm64.",
+    );
+  if (sandbox.mode === "strict" || sandbox.network !== true)
+    reject(
+      "network.domain-policy",
+      "docker_egress_network_disabled",
+      "Docker egress requires network=true and is prohibited in strict mode.",
+    );
+  if (!domainRules)
+    reject(
+      "network.domain-policy",
+      "docker_egress_domain_policy_required",
+      "Docker egress requires explicit domain rules.",
+    );
+  for (const field of ["image", "relayImage"]) {
+    if (
+      typeof sandbox[field] !== "string" ||
+      !PINNED_DOCKER_IMAGE.test(sandbox[field])
+    )
+      reject(
+        `backend.${field}`,
+        "docker_egress_image_digest_required",
+        `Docker egress ${field} must be pinned to a sha256 digest.`,
+      );
+  }
+  for (const field of ["allowRead", "denyRead", "allowWrite", "denyWrite"]) {
+    if (policy[field]?.length)
+      reject(
+        `filesystem.${field}`,
+        "docker_fine_grained_filesystem_unsupported",
+        "Docker egress does not support additional or masked filesystem paths.",
+      );
+  }
+  const enforceable = unsupported.length
+    ? []
+    : [
+        capability("isolation.container", { enforcement: "docker-container" }),
+        capability("filesystem.workspace-read-write", {
+          enforcement: "docker-bind-mount",
+        }),
+        capability("network.domain-policy", {
+          enforcement: "docker-none-network-uds-proxy-seccomp",
+        }),
+      ];
+  const receipt = options.execution?.receipt;
+  const registered =
+    receipt && typeof receipt === "object"
+      ? dockerEgressReceipts.get(receipt)
+      : null;
+  const started =
+    unsupported.length === 0 &&
+    registered?.binding === egressBinding(sandbox) &&
+    registered.host.platform === host.platform &&
+    registered.host.arch === host.arch;
+  const attempted = started || options.execution?.attempted === true;
+  const outcomeUnknown = options.execution?.outcomeUnknown === true;
+  const checked = started || options.availability != null;
+  const available = started
+    ? true
+    : checked
+      ? options.availability?.available === true
+      : null;
+  return {
+    schema: AGENT_SANDBOX_CAPABILITY_SCHEMA,
+    host: {
+      platform: String(host.platform),
+      release: String(host.release),
+      arch: String(host.arch),
+    },
+    backend: {
+      engine: "docker-egress",
+      isolationLevel: "container",
+      availabilityChecked: checked,
+      available,
+      reason: started
+        ? null
+        : outcomeUnknown
+          ? "docker_egress_outcome_unknown"
+          : options.availability?.reason || null,
+    },
+    status: unsupported.length
+      ? "unsupported"
+      : started
+        ? "applied"
+        : outcomeUnknown
+          ? "outcome-unknown"
+          : attempted
+            ? "failed-to-start"
+            : checked && !available
+              ? "unavailable"
+              : "ready",
+    execution: {
+      observed: Boolean(started || options.execution),
+      attempted,
+      started: Boolean(started),
+    },
+    requested,
+    enforceable,
+    applied: started ? enforceable.map((entry) => ({ ...entry })) : [],
+    unsupported,
+  };
+}
+
 /**
  * Describe the exact legacy agent-shell sandbox request without claiming that
  * a command has run. `enforceable` is backend capability; `applied` is only
@@ -351,6 +506,8 @@ export function assessAgentSandboxCapabilities(sandbox, options = {}) {
     release: os.release(),
     arch: process.arch,
   };
+  if (sandbox?.engine === "docker-egress")
+    return assessDockerEgressCapabilities(sandbox, options, host);
   const execution = options.execution || null;
   const availability = options.availability || null;
   const requested = [];
@@ -594,6 +751,22 @@ function attachSandboxCapabilityReport(
 }
 
 export function executeSandboxedShell(command, sandbox, options = {}) {
+  if (sandbox?.engine === "docker-egress") {
+    return {
+      stdout: "",
+      stderr: "Docker egress requires the asynchronous execution route",
+      exitCode: 1,
+      failedToStart: true,
+      sandboxCapabilities: assessAgentSandboxCapabilities(sandbox, {
+        host: _deps.host(),
+        execution: { attempted: true },
+        availability: {
+          available: false,
+          reason: "docker_egress_async_execution_required",
+        },
+      }),
+    };
+  }
   if (!sandbox || !["docker", "bubblewrap"].includes(sandbox.engine)) {
     throw new Error("A supported agent sandbox configuration is required");
   }
@@ -783,7 +956,7 @@ function executeBubblewrapShell(command, sandbox, options, hostCwd, policy) {
 export function isolationLevel(sandbox) {
   if (!sandbox) return "policy-only";
   if (sandbox.engine === "bubblewrap") return "os-sandbox";
-  if (sandbox.engine === "docker") return "container";
+  if (["docker", "docker-egress"].includes(sandbox.engine)) return "container";
   return "policy-only";
 }
 
@@ -836,6 +1009,11 @@ export function assertSandboxAvailable(sandbox, deps = _deps) {
   if (!sandbox || sandbox.policy?.failIfUnavailable !== true) return;
   const probe = probeSandboxAvailability(sandbox, deps);
   if (!probe.available) {
+    if (sandbox.engine === "docker-egress") {
+      throw new Error(
+        "Docker egress is unavailable; this backend never falls back to unsandboxed execution.",
+      );
+    }
     throw new Error(
       `sandbox.failIfUnavailable: ${sandbox.engine} sandbox is unavailable (${probe.reason}) — refusing to start. Install/start ${sandbox.engine === "bubblewrap" ? "bubblewrap" : "Docker"}, or unset failIfUnavailable to allow per-command degradation.`,
     );
@@ -860,5 +1038,144 @@ export function sandboxSummary(sandbox) {
     },
   };
   if (sandbox.mode) summary.mode = sandbox.mode;
+  if (sandbox.engine === "docker-egress")
+    summary.relayImage = sandbox.relayImage;
   return summary;
 }
+
+/** Own the asynchronous session and mint execution evidence only after its
+ * real implementation reports a terminal result and cleanup completes. */
+export async function executeDockerEgressShell(command, sandbox, options = {}) {
+  if (sandbox?.engine !== "docker-egress")
+    throw new TypeError("docker-egress configuration is required");
+  const host = _deps.host();
+  const snapshot = JSON.parse(JSON.stringify(sandbox));
+  const preflight = assessAgentSandboxCapabilities(snapshot, { host });
+  let startAuthorized = false;
+  let observedResult;
+  const failure = () => ({
+    stdout:
+      startAuthorized && typeof observedResult?.stdout === "string"
+        ? observedResult.stdout
+        : "",
+    stderr: startAuthorized
+      ? "Docker egress execution outcome or cleanup could not be verified; do not retry automatically."
+      : preflight.unsupported.length
+        ? preflight.unsupported.map((entry) => entry.message).join("; ")
+        : "Docker egress execution is unavailable or did not complete safely.",
+    exitCode: 1,
+    ...(startAuthorized
+      ? {
+          executionOutcome: observedResult
+            ? "completed-cleanup-unknown"
+            : "unknown",
+          retrySafe: false,
+        }
+      : { failedToStart: true }),
+    sandboxCapabilities: assessAgentSandboxCapabilities(snapshot, {
+      host,
+      execution: { attempted: true, outcomeUnknown: startAuthorized },
+      ...(startAuthorized
+        ? {}
+        : {
+            availability: {
+              available: false,
+              reason: "docker_egress_execution_unavailable",
+            },
+          }),
+    }),
+  });
+  if (preflight.unsupported.length) return failure();
+  let session;
+  let authorityError;
+  try {
+    const { startDockerEgressSession } =
+      await import("./sandbox-docker-egress.js");
+    session = await startDockerEgressSession({
+      brokerSocketPath: options.brokerSocketPath,
+      relayImage: snapshot.relayImage,
+      targetImage: snapshot.image,
+      workspaceRoot: options.cwd || snapshot.cwd,
+      auditContext: options.auditContext,
+    });
+    try {
+      options.onSession?.(session);
+    } catch (error) {
+      authorityError = error;
+      throw error;
+    }
+    const result = await session.run(command, {
+      timeoutMs: options.timeoutMs || options.timeout,
+      auditContext: options.auditContext,
+      env: options.env,
+      async beforeStart() {
+        try {
+          if (egressBinding(sandbox) !== egressBinding(snapshot))
+            throw Object.assign(
+              new Error("Sandbox policy changed during Docker startup"),
+              { code: "CC_SHELL_POLICY_AUTHORITY_CHANGED" },
+            );
+          await options.beforeStart?.();
+          if (egressBinding(sandbox) !== egressBinding(snapshot))
+            throw Object.assign(
+              new Error("Sandbox policy changed during Docker startup"),
+              { code: "CC_SHELL_POLICY_AUTHORITY_CHANGED" },
+            );
+          startAuthorized = true;
+        } catch (error) {
+          authorityError = error;
+          throw error;
+        }
+      },
+    });
+    observedResult = result;
+    await session.close();
+    try {
+      // The final live-authority fence must run after cleanup and immediately
+      // before the execution receipt is issued.
+      await options.beforeReceipt?.();
+    } catch (error) {
+      authorityError = error;
+      throw error;
+    }
+    if (
+      !startAuthorized ||
+      !Number.isInteger(result?.exitCode) ||
+      typeof result.stdout !== "string" ||
+      typeof result.stderr !== "string"
+    ) {
+      throw new Error("Docker egress execution proof is incomplete");
+    }
+    const receipt = Object.freeze({ kind: "docker-egress-execution/v1" });
+    dockerEgressReceipts.set(receipt, {
+      binding: egressBinding(snapshot),
+      host: { ...host },
+    });
+    return {
+      ...result,
+      sandboxCapabilities: assessAgentSandboxCapabilities(snapshot, {
+        host,
+        execution: { attempted: true, receipt },
+      }),
+    };
+  } catch (error) {
+    if (session) {
+      try {
+        await session.close();
+      } catch (cleanupError) {
+        error.cleanupError = cleanupError;
+      }
+    }
+    if (authorityError) {
+      if (startAuthorized)
+        return {
+          ...failure(),
+          authorityFailure: {
+            code: authorityError.code || "CC_DOCKER_EGRESS_AUTHORITY_CHANGED",
+          },
+        };
+      throw authorityError;
+    }
+    return failure();
+  }
+}

package/src/lib/lsp/code-intelligence.js

@@ -86,7 +86,12 @@ export class CodeIntelligence {
   }
 
   /** Find references to the symbol under a 1-based position. */
-  async references(filePath, line, col, { includeDeclaration = true } = {}) {
+  async references(
+    filePath,
+    line,
+    col,
+    { includeDeclaration = true, timeoutMs } = {},
+  ) {
     const ready = await this._ensure(filePath);
     if (ready.unavailable) return unavailable(ready.reason);
     const result = await this._readRequest(
@@ -97,6 +102,7 @@ export class CodeIntelligence {
         position: toLspPosition({ line, col }),
         context: { includeDeclaration },
       },
+      { timeoutMs },
     );
     return { available: true, locations: this._normalizeLocations(result) };
   }