chainlesschain 0.166.97 → 0.166.98

package/src/runtime/headless-runner.js

@@ -1368,14 +1368,19 @@ async function runAgentHeadlessInWorkspace(
     assertManagedPermissionMode(options.permissionMode, managedSettings);
   }
   const perm = resolvePermissionMode(options.permissionMode);
+  const requestedToolNames = resolveEnabledTools({
+    // An explicit --allowed-tools wins; otherwise a matched command's
+    // `allowed-tools:` frontmatter scopes the run (null when neither applies).
+    allowedTools: options.allowedTools || macroAllowedTools,
+    readOnly: perm.readOnly,
+  });
+  // The formal file-only ceiling must also honor narrower caller permissions,
+  // including an empty allowlist and plan mode's read-only intersection.
   const enabledToolNames = formalQualityHermetic
-    ? [...FORMAL_QUALITY_FILE_TOOLS]
-    : resolveEnabledTools({
-        // An explicit --allowed-tools wins; otherwise a matched command's
-        // `allowed-tools:` frontmatter scopes the run (null when neither applies).
-        allowedTools: options.allowedTools || macroAllowedTools,
-        readOnly: perm.readOnly,
-      });
+    ? (requestedToolNames ?? FORMAL_QUALITY_FILE_TOOLS).filter((name) =>
+        FORMAL_QUALITY_FILE_TOOLS.includes(name),
+      )
+    : requestedToolNames;
   const disabledTools = options.disallowedTools || [];
 
   // ── Best-effort runtime bootstrap (DB optional, like startAgentRepl) ───
@@ -3300,9 +3305,23 @@ async function runAgentHeadlessInWorkspace(
           }
           case "tool-result": {
             const err = event.error || event.result?.error || null;
+            // A denied request has no invocation to settle. Explicit provider
+            // IDs must never fall back to a different pending invocation.
+            const settledCall =
+              event.execution_started === false
+                ? null
+                : event.tool_use_id
+                  ? activeToolCalls.get(event.tool_use_id) || null
+                  : [...toolCalls]
+                      .reverse()
+                      .find(
+                        (call) =>
+                          !call._runtimeSettled &&
+                          (!event.tool || call.tool === event.tool),
+                      ) || null;
             // P0-2: settle the in-flight side-effect (commit on success, fail on
             // a clean error) and persist the updated ledger snapshot.
-            if (persist && currentSideEffectOpId) {
+            if (persist && currentSideEffectOpId && settledCall) {
               if (event.permission_decision) {
                 sideEffectLedger.annotate(currentSideEffectOpId, {
                   permissionDecision: event.permission_decision,
@@ -3330,6 +3349,9 @@ async function runAgentHeadlessInWorkspace(
               ...(event.tool_use_id ? { id: event.tool_use_id } : {}),
               tool: event.tool,
               is_error: Boolean(err),
+              ...(event.execution_started === false
+                ? { execution_started: false }
+                : {}),
               error: err,
               result: event.result,
               ...(event.permission_decision_id
@@ -3347,18 +3369,6 @@ async function runAgentHeadlessInWorkspace(
               });
               if (policyEvent) emitStream(policyEvent);
             }
-            const settledCall =
-              (event.tool_use_id
-                ? activeToolCalls.get(event.tool_use_id)
-                : null) ||
-              [...toolCalls]
-                .reverse()
-                .find(
-                  (call) =>
-                    !call._runtimeSettled &&
-                    (!event.tool || call.tool === event.tool),
-                ) ||
-              null;
             if (settledCall) {
               settledCall.is_error = Boolean(err);
               settledCall.durationMs =

package/src/runtime/headless-stream.js

@@ -1061,9 +1061,17 @@ async function runTurn(
       }
       case "tool-result": {
         const err = event.error || event.result?.error || null;
+        // No invocation started for a preflight denial. For actual results,
+        // retain the adjacency fallback only for legacy events without IDs.
+        const lastCall =
+          event.execution_started === false
+            ? null
+            : event.tool_use_id
+              ? toolCalls.find((call) => call.id === event.tool_use_id) || null
+              : toolCalls.at(-1) || null;
         // P0-2: settle the in-flight side-effect (commit on success, fail on
         // a clean error) and persist the updated ledger snapshot.
-        if (sideEffects && currentSideEffectOpId) {
+        if (sideEffects && currentSideEffectOpId && lastCall) {
           if (event.permission_decision) {
             sideEffects.ledger.annotate(currentSideEffectOpId, {
               permissionDecision: event.permission_decision,
@@ -1085,14 +1093,6 @@ async function runTurn(
           sideEffects.persist();
           currentSideEffectOpId = null;
         }
-        // The loop runs tools serially, so this result settles the most
-        // recent tool_use (same adjacency rule the is_error attribution
-        // below has always used).
-        const lastCall =
-          (event.tool_use_id
-            ? toolCalls.find((call) => call.id === event.tool_use_id)
-            : null) ||
-          (toolCalls.length > 0 ? toolCalls[toolCalls.length - 1] : null);
         if (lastCall) {
           lastCall.is_error = Boolean(err);
           lastCall.durationMs =
@@ -1117,13 +1117,18 @@ async function runTurn(
           : null;
         emit({
           type: "tool_result",
-          ...(lastCall?.id ? { id: lastCall.id } : {}),
+          ...(event.tool_use_id || lastCall?.id
+            ? { id: event.tool_use_id || lastCall.id }
+            : {}),
           ...(lastCall?.planItemId
             ? { plan_item_id: lastCall.planItemId }
             : {}),
           ...(settledItem?.turn ? { turn: settledItem.turn } : {}),
           tool: event.tool,
           is_error: Boolean(err),
+          ...(event.execution_started === false
+            ? { execution_started: false }
+            : {}),
           error: err,
           result: event.result,
           ...(event.permission_decision_id

package/src/assets/web-panel/assets/ChatBubbleRenderer-DgMYDmBW.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as S,U as n,R as a,S as y,K as C,Q as x,V as w,_ as B,b as s}from"./vendor-Bn1JzzAn.js";import{_ as k}from"./index-JX7mXB5a.js";import"./icons-DG5UD-6K.js";const T={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),b=String(e.getMonth()+1).padStart(2,"0"),f=String(e.getDate()).padStart(2,"0"),g=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${b}-${f} ${g}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},N={class:"bubble"},R={class:"meta"},M={class:"actor"},V={class:"time"},q={class:"body"};function D(c,d,t,r,i,l){const o=v("a-tag");return u(),S("div",{class:B(["chat-row",{mine:r.isMine}])},[n("div",N,[n("div",R,[n("span",M,a(r.actorLabel),1),n("span",V,a(r.formattedTime),1)]),n("div",q,a(r.messageText),1),t.event.source.adapter?(u(),y(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[x(a(t.event.source.adapter),1)]),_:1},8,["color"])):w("v-if",!0)])],2)}const j=k(T,[["render",D],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-TRWb3u/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{j as default};

package/src/assets/web-panel/assets/MarkdownRenderer-CUBuc97a.js

@@ -1 +0,0 @@
-import{P as c,J as p,b as s}from"./vendor-Bn1JzzAn.js";import{r as a}from"./markdown-Yo_c6Krv.js";import{_ as d}from"./index-JX7mXB5a.js";const _={__name:"MarkdownRenderer",props:{content:{type:String,default:""}},setup(t,{expose:o}){o();const e=t,r=s(()=>a(e.content||"")),n={props:e,rendered:r,computed:s,get renderMarkdown(){return a}};return Object.defineProperty(n,"__isScriptSetup",{enumerable:!1,value:!0}),n}},i=["innerHTML"];function u(t,o,e,r,n,m){return c(),p("div",{class:"markdown-content",innerHTML:r.rendered},null,8,i)}const b=d(_,[["render",u],["__scopeId","data-v-0b0b9f63"],["__file","/tmp/cc-web-panel-TRWb3u/repo/packages/web-panel/src/components/MarkdownRenderer.vue"]]);export{b as M};

package/src/assets/web-panel/assets/devWarning-CbtBfs7a.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-JX7mXB5a.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-CicoHC0s.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-JLcBncLR.js";import{a0 as t}from"./index-JX7mXB5a.js";import"./vendor-Bn1JzzAn.js";import"./responsiveObserve-HftdThc5.js";import"./useFlexGapSupport-TXNvIFVa.js";import"./styleChecker-B2B8XHVq.js";import"./index-DdwC1i3O.js";import"./icons-DG5UD-6K.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-DttyUwDx.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-lBOOXCD7.js";import{a0 as t}from"./index-JX7mXB5a.js";import"./vendor-Bn1JzzAn.js";import"./index-DdwC1i3O.js";import"./icons-DG5UD-6K.js";const s=t(o);export{s as default};