chainlesschain 0.166.97 → 0.166.99

package/src/runtime/headless-runner.js

@@ -1368,14 +1368,19 @@ async function runAgentHeadlessInWorkspace(
     assertManagedPermissionMode(options.permissionMode, managedSettings);
   }
   const perm = resolvePermissionMode(options.permissionMode);
+  const requestedToolNames = resolveEnabledTools({
+    // An explicit --allowed-tools wins; otherwise a matched command's
+    // `allowed-tools:` frontmatter scopes the run (null when neither applies).
+    allowedTools: options.allowedTools || macroAllowedTools,
+    readOnly: perm.readOnly,
+  });
+  // The formal file-only ceiling must also honor narrower caller permissions,
+  // including an empty allowlist and plan mode's read-only intersection.
   const enabledToolNames = formalQualityHermetic
-    ? [...FORMAL_QUALITY_FILE_TOOLS]
-    : resolveEnabledTools({
-        // An explicit --allowed-tools wins; otherwise a matched command's
-        // `allowed-tools:` frontmatter scopes the run (null when neither applies).
-        allowedTools: options.allowedTools || macroAllowedTools,
-        readOnly: perm.readOnly,
-      });
+    ? (requestedToolNames ?? FORMAL_QUALITY_FILE_TOOLS).filter((name) =>
+        FORMAL_QUALITY_FILE_TOOLS.includes(name),
+      )
+    : requestedToolNames;
   const disabledTools = options.disallowedTools || [];
 
   // ── Best-effort runtime bootstrap (DB optional, like startAgentRepl) ───
@@ -3226,6 +3231,19 @@ async function runAgentHeadlessInWorkspace(
             });
             break;
           }
+          case "tool-pre-execution-denied": {
+            // A request declaration is not an invocation: do not start a
+            // side effect, telemetry call, or persisted compact tool record.
+            emitStream({
+              type: "tool_use",
+              id: event.tool_use_id,
+              tool: event.tool,
+              args: {},
+              preExecutionDenied: true,
+              execution_started: false,
+            });
+            break;
+          }
           case "tool-executing": {
             const telemetryToolId = runtimeToolCallId(event.tool_use_id);
             const line = `  [${event.tool}] ${formatToolArgs(event.tool, event.args)}`;
@@ -3300,9 +3318,23 @@ async function runAgentHeadlessInWorkspace(
           }
           case "tool-result": {
             const err = event.error || event.result?.error || null;
+            // A denied request has no invocation to settle. Explicit provider
+            // IDs must never fall back to a different pending invocation.
+            const settledCall =
+              event.execution_started === false
+                ? null
+                : event.tool_use_id
+                  ? activeToolCalls.get(event.tool_use_id) || null
+                  : [...toolCalls]
+                      .reverse()
+                      .find(
+                        (call) =>
+                          !call._runtimeSettled &&
+                          (!event.tool || call.tool === event.tool),
+                      ) || null;
             // P0-2: settle the in-flight side-effect (commit on success, fail on
             // a clean error) and persist the updated ledger snapshot.
-            if (persist && currentSideEffectOpId) {
+            if (persist && currentSideEffectOpId && settledCall) {
               if (event.permission_decision) {
                 sideEffectLedger.annotate(currentSideEffectOpId, {
                   permissionDecision: event.permission_decision,
@@ -3330,6 +3362,13 @@ async function runAgentHeadlessInWorkspace(
               ...(event.tool_use_id ? { id: event.tool_use_id } : {}),
               tool: event.tool,
               is_error: Boolean(err),
+              ...(event.execution_started === false
+                ? { execution_started: false }
+                : {}),
+              ...(event.preExecutionDenied === true &&
+              event.execution_started === false
+                ? { preExecutionDenied: true }
+                : {}),
               error: err,
               result: event.result,
               ...(event.permission_decision_id
@@ -3347,18 +3386,6 @@ async function runAgentHeadlessInWorkspace(
               });
               if (policyEvent) emitStream(policyEvent);
             }
-            const settledCall =
-              (event.tool_use_id
-                ? activeToolCalls.get(event.tool_use_id)
-                : null) ||
-              [...toolCalls]
-                .reverse()
-                .find(
-                  (call) =>
-                    !call._runtimeSettled &&
-                    (!event.tool || call.tool === event.tool),
-                ) ||
-              null;
             if (settledCall) {
               settledCall.is_error = Boolean(err);
               settledCall.durationMs =

package/src/runtime/headless-stream.js

@@ -990,6 +990,19 @@ async function runTurn(
     }
     turnBindingFeed?.handleEvent(event);
     switch (event.type) {
+      case "tool-pre-execution-denied": {
+        // Keep the request/result pair visible without plan/ledger execution
+        // bookkeeping and without exposing rejected request arguments.
+        emit({
+          type: "tool_use",
+          id: event.tool_use_id,
+          tool: event.tool,
+          args: {},
+          preExecutionDenied: true,
+          execution_started: false,
+        });
+        break;
+      }
       case "tool-executing": {
         // Additive protocol-v1 correlation id ("tu-<n>", session-scoped —
         // agent-sdk docs/PROTOCOL.md §1.2.1): the matching tool_result below
@@ -1061,9 +1074,17 @@ async function runTurn(
       }
       case "tool-result": {
         const err = event.error || event.result?.error || null;
+        // No invocation started for a preflight denial. For actual results,
+        // retain the adjacency fallback only for legacy events without IDs.
+        const lastCall =
+          event.execution_started === false
+            ? null
+            : event.tool_use_id
+              ? toolCalls.find((call) => call.id === event.tool_use_id) || null
+              : toolCalls.at(-1) || null;
         // P0-2: settle the in-flight side-effect (commit on success, fail on
         // a clean error) and persist the updated ledger snapshot.
-        if (sideEffects && currentSideEffectOpId) {
+        if (sideEffects && currentSideEffectOpId && lastCall) {
           if (event.permission_decision) {
             sideEffects.ledger.annotate(currentSideEffectOpId, {
               permissionDecision: event.permission_decision,
@@ -1085,14 +1106,6 @@ async function runTurn(
           sideEffects.persist();
           currentSideEffectOpId = null;
         }
-        // The loop runs tools serially, so this result settles the most
-        // recent tool_use (same adjacency rule the is_error attribution
-        // below has always used).
-        const lastCall =
-          (event.tool_use_id
-            ? toolCalls.find((call) => call.id === event.tool_use_id)
-            : null) ||
-          (toolCalls.length > 0 ? toolCalls[toolCalls.length - 1] : null);
         if (lastCall) {
           lastCall.is_error = Boolean(err);
           lastCall.durationMs =
@@ -1117,13 +1130,22 @@ async function runTurn(
           : null;
         emit({
           type: "tool_result",
-          ...(lastCall?.id ? { id: lastCall.id } : {}),
+          ...(event.tool_use_id || lastCall?.id
+            ? { id: event.tool_use_id || lastCall.id }
+            : {}),
           ...(lastCall?.planItemId
             ? { plan_item_id: lastCall.planItemId }
             : {}),
           ...(settledItem?.turn ? { turn: settledItem.turn } : {}),
           tool: event.tool,
           is_error: Boolean(err),
+          ...(event.execution_started === false
+            ? { execution_started: false }
+            : {}),
+          ...(event.preExecutionDenied === true &&
+          event.execution_started === false
+            ? { preExecutionDenied: true }
+            : {}),
           error: err,
           result: event.result,
           ...(event.permission_decision_id

package/src/runtime/provider-stream-state.js

@@ -4,6 +4,8 @@
  * agent-core. Shared usage validation also serves non-streamed responses.
  */
 
+import { projectUsagePricingContext } from "../lib/usage-pricing-context.js";
+
 export function _isNonNegativeSafeInteger(value) {
   return Number.isSafeInteger(value) && value >= 0;
 }
@@ -114,6 +116,10 @@ export function _anthropicReduceLine(state, raw, onToken, onThinking) {
         state.inputTokens = inputTokens;
         state.cacheReadTokens = cacheReadTokens;
         state.cacheCreationTokens = cacheCreationTokens;
+        state.pricingContext = projectUsagePricingContext({
+          ...usage,
+          cache_creation_input_tokens: cacheCreationTokens,
+        });
       }
     }
   } else if (obj.type === "content_block_start") {
@@ -215,6 +221,7 @@ export function _anthropicFinalize(state) {
       output_tokens: state.outputTokens,
       cache_read_input_tokens: state.cacheReadTokens,
       cache_creation_input_tokens: state.cacheCreationTokens,
+      ...state.pricingContext,
     };
   }
   return out;

package/src/assets/web-panel/assets/ChatBubbleRenderer-DgMYDmBW.js

@@ -1 +0,0 @@
-import{I as v,P as u,J as S,U as n,R as a,S as y,K as C,Q as x,V as w,_ as B,b as s}from"./vendor-Bn1JzzAn.js";import{_ as k}from"./index-JX7mXB5a.js";import"./icons-DG5UD-6K.js";const T={__name:"ChatBubbleRenderer",props:{event:{type:Object,required:!0}},setup(c,{expose:d}){d();const t=c,r=s(()=>{const e=t.event.content||{};return e.text||e.body||e.message||e.title||JSON.stringify(e).slice(0,200)}),i=s(()=>{const e=t.event.content||{};return e.from||e.sender||e.senderName||t.event.actor||"(unknown)"}),l=s(()=>{const e=(t.event.actor||"").toLowerCase();return e.includes("self")||e==="me"||e.endsWith("_self")}),o=s(()=>{const e=t.event.source.adapter||"";return e.startsWith("messaging-qq")?"magenta":e==="wechat"?"green":"blue"}),m=s(()=>{if(!t.event.occurredAt)return"";try{const e=new Date(t.event.occurredAt),p=e.getFullYear(),b=String(e.getMonth()+1).padStart(2,"0"),f=String(e.getDate()).padStart(2,"0"),g=String(e.getHours()).padStart(2,"0"),h=String(e.getMinutes()).padStart(2,"0");return`${p}-${b}-${f} ${g}:${h}`}catch{return""}}),_={props:t,messageText:r,actorLabel:i,isMine:l,adapterColor:o,formattedTime:m,computed:s};return Object.defineProperty(_,"__isScriptSetup",{enumerable:!1,value:!0}),_}},N={class:"bubble"},R={class:"meta"},M={class:"actor"},V={class:"time"},q={class:"body"};function D(c,d,t,r,i,l){const o=v("a-tag");return u(),S("div",{class:B(["chat-row",{mine:r.isMine}])},[n("div",N,[n("div",R,[n("span",M,a(r.actorLabel),1),n("span",V,a(r.formattedTime),1)]),n("div",q,a(r.messageText),1),t.event.source.adapter?(u(),y(o,{key:0,class:"src",color:r.adapterColor},{default:C(()=>[x(a(t.event.source.adapter),1)]),_:1},8,["color"])):w("v-if",!0)])],2)}const j=k(T,[["render",D],["__scopeId","data-v-49238629"],["__file","/tmp/cc-web-panel-TRWb3u/repo/packages/web-panel/src/components/pdh/renderers/ChatBubbleRenderer.vue"]]);export{j as default};

package/src/assets/web-panel/assets/Logs-YRslKbRL.js

@@ -1,2 +0,0 @@
-import{I as s,J as g,U as d,c as n,K as _,V as k,S as V,R as S,F as K,Z as Q,w as H,n as C,o as M,b as T,r,P as p,Q as O,_ as U}from"./vendor-Bn1JzzAn.js";import{_ as E,u as W}from"./index-JX7mXB5a.js";import{R as j}from"./icons-DG5UD-6K.js";const q={__name:"Logs",setup(N,{expose:a}){a();const x=W(),e=r("status"),y=r(!1),v=r(""),i=r(""),c=r(""),f=r(!0),o=r(null),h={status:"status",doctor:"doctor","skill-sources":"skill sources","llm-providers":"llm providers"},m=T(()=>i.value.split(`
-`)),b=T(()=>{if(!c.value)return m.value;const t=c.value.toLowerCase();return m.value.filter(u=>u.toLowerCase().includes(t))});function L(t){return t.includes("✖")||t.includes("error")||t.includes("Error")||t.includes("failed")?"line-error":t.includes("✔")||t.includes("✓")||t.includes("success")||t.includes("running")?"line-success":t.includes("warn")||t.includes("Warn")||t.includes("○")?"line-warn":t.startsWith("  ")||t.startsWith("	")?"line-indent":""}function l(t){return t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}function w(t){if(!c.value)return t;const u=c.value.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return t.replace(new RegExp(`(${u})`,"gi"),"<mark>$1</mark>")}async function R(){y.value=!0,v.value="",i.value="";const t=h[e.value]||"status";try{const{output:u}=await x.execute(t,3e4);i.value=u,f.value&&(await C(),o.value&&(o.value.scrollTop=o.value.scrollHeight))}catch(u){v.value=`执行失败: ${u.message}`,i.value=v.value}finally{y.value=!1}}H(b,async()=>{f.value&&(await C(),o.value&&(o.value.scrollTop=o.value.scrollHeight))}),M(R);const B={ws:x,activeTab:e,loading:y,error:v,rawOutput:i,searchQuery:c,autoScroll:f,logContainer:o,TAB_COMMANDS:h,allLines:m,filteredLines:b,lineClass:L,escapeHtml:l,highlightSearch:w,loadLog:R,ref:r,computed:T,watch:H,nextTick:C,onMounted:M,get ReloadOutlined(){return j},get useWsStore(){return W}};return Object.defineProperty(B,"__isScriptSetup",{enumerable:!1,value:!0}),B}},z={style:{display:"flex","align-items":"center","justify-content":"space-between","margin-bottom":"24px"}},A={style:{display:"flex",gap:"10px",margin:"12px 0"}},D={ref:"logContainer",class:"log-box"},F={key:0,style:{"text-align":"center",padding:"40px",color:"var(--text-muted)"}},I={key:1,style:{"text-align":"center",padding:"40px",color:"var(--text-muted)"}},P={key:2},J=["innerHTML"];function Z(N,a,x,e,y,v){const i=s("a-checkbox"),c=s("a-button"),f=s("a-space"),o=s("a-tab-pane"),h=s("a-tabs"),m=s("a-input-search"),b=s("a-tag"),L=s("a-spin");return p(),g("div",null,[d("div",z,[a[5]||(a[5]=d("div",null,[d("h2",{class:"page-title"},"日志查看"),d("p",{class:"page-sub"},"系统运行日志与诊断输出")],-1)),n(f,null,{default:_(()=>[n(i,{checked:e.autoScroll,"onUpdate:checked":a[0]||(a[0]=l=>e.autoScroll=l)},{default:_(()=>[...a[3]||(a[3]=[O("自动滚动",-1)])]),_:1},8,["checked"]),n(c,{type:"primary",ghost:"",loading:e.loading,onClick:e.loadLog},{icon:_(()=>[n(e.ReloadOutlined)]),default:_(()=>[a[4]||(a[4]=O(" 刷新 ",-1))]),_:1},8,["loading"])]),_:1})]),k(" Tab Selector "),n(h,{activeKey:e.activeTab,"onUpdate:activeKey":a[1]||(a[1]=l=>e.activeTab=l),onChange:e.loadLog,style:{"margin-bottom":"0"}},{default:_(()=>[n(o,{key:"status",tab:"系统状态"}),n(o,{key:"doctor",tab:"环境诊断"}),n(o,{key:"skill-sources",tab:"技能来源"}),n(o,{key:"llm-providers",tab:"LLM 提供商"})]),_:1},8,["activeKey"]),k(" Search Bar "),d("div",A,[n(m,{value:e.searchQuery,"onUpdate:value":a[2]||(a[2]=l=>e.searchQuery=l),placeholder:"搜索日志内容...","allow-clear":"",style:{flex:"1"}},null,8,["value"]),e.filteredLines.length!==e.allLines.length?(p(),V(b,{key:0,color:"blue"},{default:_(()=>[O(S(e.filteredLines.length)+" / "+S(e.allLines.length)+" 行 ",1)]),_:1})):k("v-if",!0)]),k(" Log Output "),d("div",D,[e.loading?(p(),g("div",F,[n(L,{size:"large"}),a[6]||(a[6]=d("div",{style:{"margin-top":"10px"}},"加载中...",-1))])):e.filteredLines.length?(p(),g("div",P,[(p(!0),g(K,null,Q(e.filteredLines,(l,w)=>(p(),g("div",{key:w,class:U(["log-line",e.lineClass(l)]),innerHTML:e.highlightSearch(e.escapeHtml(l))},null,10,J))),128))])):(p(),g("div",I,S(e.error||"暂无日志内容，点击刷新加载"),1))],512)])}const $=E(q,[["render",Z],["__scopeId","data-v-8c2906e0"],["__file","/tmp/cc-web-panel-TRWb3u/repo/packages/web-panel/src/views/Logs.vue"]]);export{$ as default};

package/src/assets/web-panel/assets/MarkdownRenderer-CUBuc97a.js

@@ -1 +0,0 @@
-import{P as c,J as p,b as s}from"./vendor-Bn1JzzAn.js";import{r as a}from"./markdown-Yo_c6Krv.js";import{_ as d}from"./index-JX7mXB5a.js";const _={__name:"MarkdownRenderer",props:{content:{type:String,default:""}},setup(t,{expose:o}){o();const e=t,r=s(()=>a(e.content||"")),n={props:e,rendered:r,computed:s,get renderMarkdown(){return a}};return Object.defineProperty(n,"__isScriptSetup",{enumerable:!1,value:!0}),n}},i=["innerHTML"];function u(t,o,e,r,n,m){return c(),p("div",{class:"markdown-content",innerHTML:r.rendered},null,8,i)}const b=d(_,[["render",u],["__scopeId","data-v-0b0b9f63"],["__file","/tmp/cc-web-panel-TRWb3u/repo/packages/web-panel/src/components/MarkdownRenderer.vue"]]);export{b as M};

package/src/assets/web-panel/assets/MobileProjects-DUyTVgId.js

@@ -1 +0,0 @@
-import{I as n,J as g,c as l,K as r,N as u,P as h,U as o,R as t,Q as b}from"./vendor-Bn1JzzAn.js";import{_ as v,b as m}from"./index-JX7mXB5a.js";import{a8 as y,M}from"./icons-DG5UD-6K.js";const B={__name:"MobileProjects",setup(p,{expose:i}){i();const c=u(),{t:e}=m();function a(){c.push("/projects")}function _(){c.push("/mobile-bridge")}const s={router:c,t:e,goToProjects:a,goToMobileBridge:_,get useRouter(){return u},get useI18n(){return m},get MobileOutlined(){return M},get FolderOutlined(){return y}};return Object.defineProperty(s,"__isScriptSetup",{enumerable:!1,value:!0}),s}},x={class:"mobile-projects-placeholder"},O={class:"title"},T={class:"subtitle"},k={class:"explainer"};function w(p,i,c,e,a,_){const s=n("a-alert"),d=n("a-button"),f=n("a-space"),P=n("a-empty"),j=n("a-card");return h(),g("div",x,[l(j,null,{default:r(()=>[l(P,{description:!1},{image:r(()=>[l(e.MobileOutlined,{style:{fontSize:"64px",color:"#bfbfbf"}})]),default:r(()=>[o("h2",O,t(e.t("mobileProjects.title")),1),o("p",T,t(e.t("mobileProjects.subtitle")),1),l(s,{message:e.t("mobileProjects.v02Banner"),type:"info","show-icon":"",class:"banner"},null,8,["message"]),o("div",k,[o("h3",null,t(e.t("mobileProjects.currentDirection")),1),o("p",null,t(e.t("mobileProjects.currentDirectionBody")),1),o("ul",null,[o("li",null,t(e.t("mobileProjects.stepPhone")),1),o("li",null,t(e.t("mobileProjects.stepTap")),1),o("li",null,t(e.t("mobileProjects.stepPull")),1)]),o("h3",null,t(e.t("mobileProjects.reverseDirection")),1),o("p",null,t(e.t("mobileProjects.reverseDirectionBody")),1)]),l(f,{class:"actions"},{default:r(()=>[l(d,{type:"primary",onClick:e.goToProjects},{default:r(()=>[l(e.FolderOutlined),b(" "+t(e.t("mobileProjects.viewLocalProjects")),1)]),_:1}),l(d,{onClick:e.goToMobileBridge},{default:r(()=>[l(e.MobileOutlined),b(" "+t(e.t("mobileProjects.checkBridge")),1)]),_:1})]),_:1})]),_:1})]),_:1})])}const N=v(B,[["render",w],["__scopeId","data-v-9262cc45"],["__file","/tmp/cc-web-panel-TRWb3u/repo/packages/web-panel/src/views/MobileProjects.vue"]]);export{N as default};

package/src/assets/web-panel/assets/devWarning-CbtBfs7a.js

@@ -1 +0,0 @@
-import{Q as r}from"./index-JX7mXB5a.js";const o=((n,a,e)=>{r(n,`[ant-design-vue: ${a}] ${e}`)});export{o as d};

package/src/assets/web-panel/assets/index-CicoHC0s.js

@@ -1 +0,0 @@
-import{A as o}from"./Row-JLcBncLR.js";import{a0 as t}from"./index-JX7mXB5a.js";import"./vendor-Bn1JzzAn.js";import"./responsiveObserve-HftdThc5.js";import"./useFlexGapSupport-TXNvIFVa.js";import"./styleChecker-B2B8XHVq.js";import"./index-DdwC1i3O.js";import"./icons-DG5UD-6K.js";const l=t(o);export{l as default};

package/src/assets/web-panel/assets/index-DttyUwDx.js

@@ -1 +0,0 @@
-import{C as o}from"./Col-lBOOXCD7.js";import{a0 as t}from"./index-JX7mXB5a.js";import"./vendor-Bn1JzzAn.js";import"./index-DdwC1i3O.js";import"./icons-DG5UD-6K.js";const s=t(o);export{s as default};