hocai-connect 0.14.1 → 0.15.0

package/dist/cli.js

@@ -16657,11 +16657,11 @@ var require_websocket_server = __commonJS({
 });
 
 // apps/mcp/src/cli.ts
-var import_node_fs5 = require("node:fs");
-var import_node_os4 = require("node:os");
+var import_node_fs6 = require("node:fs");
+var import_node_os5 = require("node:os");
 var import_node_path6 = require("node:path");
 var import_node_crypto3 = require("node:crypto");
-var import_node_child_process3 = require("node:child_process");
+var import_node_child_process4 = require("node:child_process");
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 var import_node_process = __toESM(require("node:process"), 1);
@@ -32839,9 +32839,9 @@ function cutLogIfBig(file2, maxBytes = 1e6) {
   } catch {
   }
 }
-function daemonPlan(platform2, o) {
+function daemonPlan(platform3, o) {
   const log = logPathFor(o.home);
-  if (platform2 === "darwin") {
+  if (platform3 === "darwin") {
     return {
       label: LABEL_MAC,
       file: `${o.home}/Library/LaunchAgents/${LABEL_MAC}.plist`,
@@ -32875,7 +32875,7 @@ function daemonPlan(platform2, o) {
       log
     };
   }
-  if (platform2 === "linux") {
+  if (platform3 === "linux") {
     return {
       label: TASK_NAME,
       file: `${o.home}/.config/systemd/user/${TASK_NAME}.service`,
@@ -32900,7 +32900,7 @@ WantedBy=default.target
       log
     };
   }
-  if (platform2 === "win32") {
+  if (platform3 === "win32") {
     return {
       label: TASK_NAME,
       file: null,
@@ -32927,6 +32927,9 @@ WantedBy=default.target
 }
 
 // apps/mcp/src/agents.ts
+var import_node_child_process = require("node:child_process");
+var import_node_fs2 = require("node:fs");
+var import_node_os = require("node:os");
 var NHAN = { claude: "Claude Code", codex: "Codex" };
 function summarizeAgents(probes) {
   const dong = [];
@@ -32939,6 +32942,13 @@ function summarizeAgents(probes) {
       continue;
     }
     if (p.loggedIn === false) {
+      if (p.name === "claude" && p.envAuth) {
+        dong.push("\xB7 Claude Code: ch\u1EA1y trong Terminal b\u1EB1ng bi\u1EBFn m\xF4i tr\u01B0\u1EDDng, nh\u01B0ng CH\u01AFA \u0111\u0103ng nh\u1EADp");
+        canhBao.push(
+          "Claude Code tr\xEAn m\xE1y n\xE0y l\u1EA5y quy\u1EC1n t\u1EEB bi\u1EBFn m\xF4i tr\u01B0\u1EDDng c\u1EE7a shell (ANTHROPIC_AUTH_TOKEN ho\u1EB7c ANTHROPIC_API_KEY). D\u1ECBch v\u1EE5 n\u1EC1n c\u1EE7a hocAI kh\xF4ng n\u1EA1p h\u1ED3 s\u01A1 shell n\xEAn kh\xF4ng th\u1EA5y bi\u1EBFn \u0111\xF3 \u2014 ch\u1EA1y `claude auth login` \u0111\u1EC3 b\xE0i t\u1EADp ch\u1EA1y \u0111\u01B0\u1EE3c c\u1EA3 khi b\u1EA1n \u0111\xF3ng Terminal."
+        );
+        continue;
+      }
       dong.push(`\xB7 ${NHAN[p.name]}: \u0111\xE3 c\xE0i, CH\u01AFA \u0111\u0103ng nh\u1EADp`);
       canhBao.push(
         p.name === "claude" ? "Claude Code ch\u01B0a \u0111\u0103ng nh\u1EADp. Ch\u1EA1y `claude auth login` r\u1ED3i quay l\u1EA1i \u2014 ch\u01B0a \u0111\u0103ng nh\u1EADp th\xEC b\xE0i t\u1EADp kh\xF4ng ch\u1EA1y \u0111\u01B0\u1EE3c." : "Codex ch\u01B0a \u0111\u0103ng nh\u1EADp. Ch\u1EA1y `codex login` n\u1EBFu b\u1EA1n \u0111\u1ECBnh d\xF9ng n\xF3."
@@ -32961,11 +32971,23 @@ function summarizeAgents(probes) {
   }
   return { dong, canhBao, chayDuocBai: claudeSanSang };
 }
-function probeAgents(run) {
-  const co = (b) => run("command", ["-v", b]) !== null;
+function codexLoggedIn(io) {
+  const tep = `${io.env.CODEX_HOME || `${io.home}/.codex`}/auth.json`;
+  if (!io.exists(tep)) return false;
+  const raw = io.readFile(tep);
+  if (raw === null) return null;
+  try {
+    const j = JSON.parse(raw);
+    return !!(j.tokens?.access_token || j.OPENAI_API_KEY);
+  } catch {
+    return null;
+  }
+}
+function probeAgents(io) {
+  const co = (b) => io.run("command", ["-v", b]) !== null;
   const probes = [];
   if (co("claude")) {
-    const raw = run("claude", ["auth", "status"]);
+    const raw = io.run("claude", ["auth", "status"]);
     let loggedIn = null;
     if (raw !== null) {
       try {
@@ -32974,18 +32996,102 @@ function probeAgents(run) {
       } catch {
       }
     }
-    probes.push({ name: "claude", installed: true, runnable: raw !== null, loggedIn });
+    const envAuth = !!(io.env.ANTHROPIC_AUTH_TOKEN || io.env.ANTHROPIC_API_KEY);
+    probes.push({ name: "claude", installed: true, runnable: raw !== null, loggedIn, envAuth });
   }
   if (co("codex")) {
-    const ver = run("codex", ["--version"]);
-    probes.push({ name: "codex", installed: true, runnable: ver !== null, loggedIn: null });
+    const ver = io.run("codex", ["--version"]);
+    probes.push({ name: "codex", installed: true, runnable: ver !== null, loggedIn: codexLoggedIn(io) });
   }
   return probes;
 }
+function cachedProbe(io, now, ttl = { ready: 3e5, notReady: 2e4 }) {
+  let luc = 0;
+  let nho = null;
+  let han = 0;
+  return () => {
+    const gio = now();
+    if (nho && gio - luc <= han) return nho;
+    nho = probeAgents(io);
+    luc = gio;
+    han = summarizeAgents(nho).chayDuocBai ? ttl.ready : ttl.notReady;
+    return nho;
+  };
+}
+function shellRun(cmd, args, opts) {
+  try {
+    const dong = [cmd, ...args].join(" ");
+    const o = {
+      encoding: "utf8",
+      timeout: 8e3,
+      stdio: ["ignore", "pipe", "ignore"],
+      cwd: opts?.cwd,
+      env: opts?.env
+    };
+    return (0, import_node_os.platform)() === "win32" ? (0, import_node_child_process.execSync)(dong, o) : (0, import_node_child_process.execSync)(dong, { ...o, shell: "/bin/sh" });
+  } catch (e) {
+    const ra = e.stdout;
+    const chu = typeof ra === "string" ? ra : ra?.toString("utf8");
+    return chu && chu.trim() ? chu : null;
+  }
+}
+function realProbeIO() {
+  return {
+    run: shellRun,
+    exists: import_node_fs2.existsSync,
+    readFile: (t) => {
+      try {
+        return (0, import_node_fs2.readFileSync)(t, "utf8");
+      } catch {
+        return null;
+      }
+    },
+    env: process.env,
+    home: (0, import_node_os.homedir)()
+  };
+}
+
+// apps/mcp/src/permissions.ts
+var GUARDED_DIRS = ["Documents", "Desktop", "Downloads"];
+function permPlan(platform3, o) {
+  const notice = [];
+  const fixCache = [];
+  const coSudo = platform3 !== "win32";
+  if (o.alienCacheFiles > 0 && coSudo) {
+    notice.push(
+      `\xB7 M\u1EADt kh\u1EA9u m\xE1y \u2014 ch\u1EC9 \u0111\u1EC3 s\u1EEDa quy\u1EC1n \xEDt nh\u1EA5t ${o.alienCacheFiles} m\u1EE5c trong ${o.cacheDir}. Kh\xF4ng s\u1EEDa th\xEC l\u1EC7nh c\u1EADp nh\u1EADt sau n\xE0y s\u1EBD h\u1ECFng. B\u1ECF qua \u0111\u01B0\u1EE3c.`
+    );
+    fixCache.push(["sudo", "chown", "-R", o.user, o.cacheDir]);
+  }
+  if (platform3 === "darwin") {
+    notice.push("\xB7 Quy\u1EC1n th\u01B0 m\u1EE5c \u2014 n\u1EBFu macOS h\u1ECFi, b\u1EA5m Cho ph\xE9p. Kh\xF4ng h\u1ECFi th\xEC kh\xF4ng c\u1EA7n l\xE0m g\xEC.");
+  }
+  if (o.needLogin) {
+    notice.push("\xB7 Cho ph\xE9p trong tr\xECnh duy\u1EC7t \u2014 \u0111\u1EC3 nh\u1EADn ch\xECa kho\xE1 v\u1EC1 m\xE1y n\xE0y.");
+  }
+  return { notice, fixCache };
+}
+function updateNpxArgs(version2, cacheDir) {
+  return ["--cache", cacheDir, "-y", `hocai-connect@${version2}`];
+}
+function cleanNpmEnv(env) {
+  return Object.fromEntries(Object.entries(env).filter(([k]) => !k.startsWith("npm_config_")));
+}
+function blockedDirs(platform3, home, canRead) {
+  if (platform3 !== "darwin") return [];
+  return GUARDED_DIRS.filter((d) => !canRead(`${home}/${d}`));
+}
+function blockedNotice(dirs) {
+  if (dirs.length === 0) return [];
+  return [
+    `D\u1ECBch v\u1EE5 n\u1EC1n kh\xF4ng \u0111\u1ECDc \u0111\u01B0\u1EE3c ${dirs.join(", ")} tr\xEAn m\xE1y n\xE0y.`,
+    "B\xE0i t\u1EADp \u0111\u1EC3 trong nh\u1EEFng th\u01B0 m\u1EE5c \u0111\xF3 s\u1EBD kh\xF4ng ch\u1EA1y \u2014 ch\u1ECDn th\u01B0 m\u1EE5c kh\xE1c, v\xED d\u1EE5 ~/hocai-bai-tap, l\xE0 xong."
+  ];
+}
 
 // apps/mcp/src/server.ts
 var import_promises = require("node:fs/promises");
-var import_node_os = require("node:os");
+var import_node_os2 = require("node:os");
 var import_node_path = require("node:path");
 
 // node_modules/zod/v3/helpers/util.js
@@ -41106,7 +41212,7 @@ function buildServer(token) {
     },
     async ({ slug }) => text(await call(`/lessons/${slug}/homework`))
   );
-  const thuMucBai = (maDe) => (0, import_node_path.join)((0, import_node_os.homedir)(), "hocai-bai-tap", maDe);
+  const thuMucBai = (maDe) => (0, import_node_path.join)((0, import_node_os2.homedir)(), "hocai-bai-tap", maDe);
   server.registerTool(
     "tai_file_de",
     {
@@ -41169,9 +41275,9 @@ function buildServer(token) {
 }
 
 // apps/mcp/src/http.ts
-var import_node_fs3 = require("node:fs");
+var import_node_fs4 = require("node:fs");
 var import_node_http = __toESM(require("node:http"));
-var import_node_child_process2 = require("node:child_process");
+var import_node_child_process3 = require("node:child_process");
 
 // node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
 var X_ALREADY_SENT = "x-hono-already-sent";
@@ -43221,12 +43327,12 @@ var StreamableHTTPServerTransport = class {
 };
 
 // apps/mcp/src/http.ts
-var import_node_os2 = require("node:os");
+var import_node_os3 = require("node:os");
 var import_node_path3 = require("node:path");
 
 // apps/mcp/src/job.ts
 var import_node_crypto = require("node:crypto");
-var import_node_fs2 = require("node:fs");
+var import_node_fs3 = require("node:fs");
 var import_node_path2 = require("node:path");
 var MAX_RUNNING = 3;
 var TIMEOUT_MS = 15 * 60 * 1e3;
@@ -43235,7 +43341,7 @@ var XONG = /* @__PURE__ */ new Set(["DONE", "FAILED", "STOPPED"]);
 function createJobStore(o) {
   const maxRunning = o.maxRunning ?? MAX_RUNNING;
   const timeoutMs = o.timeoutMs ?? TIMEOUT_MS;
-  (0, import_node_fs2.mkdirSync)(o.dir, { recursive: true });
+  (0, import_node_fs3.mkdirSync)(o.dir, { recursive: true });
   const jobs = /* @__PURE__ */ new Map();
   const handles = /* @__PURE__ */ new Map();
   const listeners = /* @__PURE__ */ new Map();
@@ -43243,7 +43349,7 @@ function createJobStore(o) {
   const file2 = (id) => (0, import_node_path2.join)(o.dir, `${id}.jsonl`);
   const push = (id, line) => {
     try {
-      (0, import_node_fs2.appendFileSync)(file2(id), line + "\n");
+      (0, import_node_fs3.appendFileSync)(file2(id), line + "\n");
     } catch {
     }
     for (const fn of listeners.get(id) ?? []) fn(line);
@@ -43305,7 +43411,7 @@ function createJobStore(o) {
         startedAt: Date.now()
       };
       jobs.set(job.id, job);
-      (0, import_node_fs2.writeFileSync)(file2(job.id), JSON.stringify(job) + "\n");
+      (0, import_node_fs3.writeFileSync)(file2(job.id), JSON.stringify(job) + "\n");
       if (dangChay() < maxRunning) start(job);
       else queue.push(job.id);
       return job;
@@ -43344,9 +43450,9 @@ function createJobStore(o) {
 }
 
 // apps/mcp/src/folder.ts
-var import_node_child_process = require("node:child_process");
+var import_node_child_process2 = require("node:child_process");
 var runExec = (cmd, args) => new Promise((resolve, reject) => {
-  (0, import_node_child_process.execFile)(cmd, args, (err, stdout) => {
+  (0, import_node_child_process2.execFile)(cmd, args, (err, stdout) => {
     const e = err;
     if (e && e.code === "ENOENT") {
       reject(e);
@@ -43356,14 +43462,14 @@ var runExec = (cmd, args) => new Promise((resolve, reject) => {
   });
 });
 var DIALOG_TITLE = "Ch\u1ECDn th\u01B0 m\u1EE5c cho AI l\xE0m vi\u1EC7c";
-function cmdFor(platform2) {
-  if (platform2 === "darwin") {
+function cmdFor(platform3) {
+  if (platform3 === "darwin") {
     return {
       cmd: "osascript",
       args: ["-e", `POSIX path of (choose folder with prompt "${DIALOG_TITLE}")`]
     };
   }
-  if (platform2 === "win32") {
+  if (platform3 === "win32") {
     return {
       cmd: "powershell.exe",
       args: [
@@ -43379,9 +43485,9 @@ function cmdFor(platform2) {
   };
 }
 async function chooseFolder(o = {}) {
-  const platform2 = o.platform ?? process.platform;
+  const platform3 = o.platform ?? process.platform;
   const exec = o.exec ?? runExec;
-  const { cmd, args } = cmdFor(platform2);
+  const { cmd, args } = cmdFor(platform3);
   let r;
   try {
     r = await exec(cmd, args);
@@ -43423,7 +43529,7 @@ var TOOLS = {
   ],
   WORK: ["Read", "Write", "Edit", "Glob", "Grep"]
 };
-var VERSION = "0.14.1";
+var VERSION = "0.15.0";
 function claudeArgs(job, o, port) {
   const mcp = {
     mcpServers: {
@@ -43455,7 +43561,7 @@ function claudeArgs(job, o, port) {
   ];
 }
 function buildHttpServer(o) {
-  const spawn2 = o.spawn ?? import_node_child_process2.spawn;
+  const spawn2 = o.spawn ?? import_node_child_process3.spawn;
   const dangChay = /* @__PURE__ */ new Set();
   const folders = o.folders;
   const json3 = (res, code, body) => {
@@ -43511,7 +43617,7 @@ function buildHttpServer(o) {
     return typeof a === "object" && a ? a.port : 0;
   };
   const store = createJobStore({
-    dir: o.jobsDir ?? (0, import_node_path3.join)((0, import_node_os2.homedir)(), ".hocai", "jobs"),
+    dir: o.jobsDir ?? (0, import_node_path3.join)((0, import_node_os3.homedir)(), ".hocai", "jobs"),
     maxRunning: o.maxRunning,
     run: (job, onLine) => {
       const child = spawn2(o.claudeBin, claudeArgs(job, o, port()), {
@@ -43565,7 +43671,7 @@ function buildHttpServer(o) {
         json3(res, 400, { error: "M\xE3 \u0111\u1EC1 kh\xF4ng h\u1EE3p l\u1EC7" });
         return;
       }
-      dir = (0, import_node_path3.join)((0, import_node_os2.homedir)(), "hocai-bai-tap", maDe);
+      dir = (0, import_node_path3.join)((0, import_node_os3.homedir)(), "hocai-bai-tap", maDe);
     } else {
       const d = i.dir ?? "";
       if (!d.startsWith("/") || d.includes("..")) {
@@ -43584,7 +43690,7 @@ function buildHttpServer(o) {
       json3(res, 409, { error: "Ch\u1ED7 n\xE0y \u0111ang c\xF3 m\u1ED9t l\u01B0\u1EE3t ch\u1EA1y \u2014 ch\u1EDD n\xF3 xong \u0111\xE3" });
       return;
     }
-    (0, import_node_fs3.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs4.mkdirSync)(dir, { recursive: true });
     const job = store.create({
       kind: i.kind,
       dir,
@@ -43628,7 +43734,11 @@ function buildHttpServer(o) {
       json3(res, 200, {
         ten: "hocai-connect",
         phienBan: VERSION,
-        user: me ? { ten: me.ten, ...hoi ? { khop: hoi === me.id } : {} } : me
+        user: me ? { ten: me.ten, ...hoi ? { khop: hoi === me.id } : {} } : me,
+        // Vắng mặt khoá này = helper bản cũ. Web phân biệt được `undefined` với
+        // `[]`, nên đừng "cho lành" bằng cách trả mảng rỗng: rỗng nghĩa là máy
+        // KHÔNG CÓ trợ lý nào, một câu hoàn toàn khác.
+        ...o.agents ? { agents: o.agents() } : {}
       });
       return;
     }
@@ -43781,11 +43891,11 @@ function mergeClaudeDesktopConfig(existing, creds) {
   };
   return { ...base, mcpServers: { ...servers, hocai } };
 }
-function claudeDesktopConfigPath(platform2, home, appdata) {
-  if (platform2 === "win32") {
+function claudeDesktopConfigPath(platform3, home, appdata) {
+  if (platform3 === "win32") {
     return import_node_path4.win32.join(appdata ?? import_node_path4.win32.join(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
   }
-  if (platform2 === "darwin") {
+  if (platform3 === "darwin") {
     return import_node_path4.posix.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
   }
   return import_node_path4.posix.join(home, ".config", "Claude", "claude_desktop_config.json");
@@ -43968,11 +44078,11 @@ function defaultOrigins(env) {
 }
 
 // apps/mcp/src/folder-registry.ts
-var import_node_fs4 = require("node:fs");
-var import_node_os3 = require("node:os");
+var import_node_fs5 = require("node:fs");
+var import_node_os4 = require("node:os");
 var import_node_crypto2 = require("node:crypto");
 var import_node_path5 = require("node:path");
-var MAC_DINH = (0, import_node_path5.join)((0, import_node_os3.homedir)(), ".hocai", "folders.json");
+var MAC_DINH = (0, import_node_path5.join)((0, import_node_os4.homedir)(), ".hocai", "folders.json");
 function createFolderRegistry(o = {}) {
   if (!o.file && process.env.VITEST) {
     throw new Error(
@@ -44011,7 +44121,7 @@ function createFolderRegistry(o = {}) {
 function nap(file2) {
   let raw;
   try {
-    raw = (0, import_node_fs4.readFileSync)(file2, "utf8");
+    raw = (0, import_node_fs5.readFileSync)(file2, "utf8");
   } catch {
     return { rows: [], daLoai: false };
   }
@@ -44023,13 +44133,13 @@ function nap(file2) {
   }
   if (!Array.isArray(data)) return { rows: [], daLoai: false };
   const giu = data.filter(
-    (r) => !!r && typeof r.id === "string" && typeof r.path === "string" && typeof r.label === "string" && typeof r.createdAt === "string" && (0, import_node_fs4.existsSync)(r.path)
+    (r) => !!r && typeof r.id === "string" && typeof r.path === "string" && typeof r.label === "string" && typeof r.createdAt === "string" && (0, import_node_fs5.existsSync)(r.path)
   );
   return { rows: giu, daLoai: giu.length !== data.length };
 }
 function ghi(file2, rows) {
-  (0, import_node_fs4.mkdirSync)((0, import_node_path5.dirname)(file2), { recursive: true, mode: 448 });
-  (0, import_node_fs4.writeFileSync)(file2, JSON.stringify([...rows.values()], null, 2), { mode: 384 });
+  (0, import_node_fs5.mkdirSync)((0, import_node_path5.dirname)(file2), { recursive: true, mode: 448 });
+  (0, import_node_fs5.writeFileSync)(file2, JSON.stringify([...rows.values()], null, 2), { mode: 384 });
 }
 
 // node_modules/ws/wrapper.mjs
@@ -44152,7 +44262,7 @@ function handleServerMessage(msg, deps) {
 }
 
 // apps/mcp/src/cli.ts
-var HOCAI_DIR = (0, import_node_path6.join)((0, import_node_os4.homedir)(), ".hocai");
+var HOCAI_DIR = (0, import_node_path6.join)((0, import_node_os5.homedir)(), ".hocai");
 var CREDS = (0, import_node_path6.join)(HOCAI_DIR, "config.json");
 var APP_DIR = (0, import_node_path6.join)(HOCAI_DIR, "app");
 var APP_CLI = (0, import_node_path6.join)(APP_DIR, "cli.js");
@@ -44163,25 +44273,25 @@ var PORT = Number(process.env.MCP_HTTP_PORT ?? 4100);
 var say = (s) => process.stderr.write(s + "\n");
 function loadCreds() {
   try {
-    const c = JSON.parse((0, import_node_fs5.readFileSync)(CREDS, "utf8"));
+    const c = JSON.parse((0, import_node_fs6.readFileSync)(CREDS, "utf8"));
     return c.token && c.api ? { token: c.token, api: c.api } : null;
   } catch {
     return null;
   }
 }
 function saveCreds(c) {
-  (0, import_node_fs5.mkdirSync)(HOCAI_DIR, { recursive: true, mode: 448 });
-  (0, import_node_fs5.writeFileSync)(CREDS, JSON.stringify(c, null, 2));
+  (0, import_node_fs6.mkdirSync)(HOCAI_DIR, { recursive: true, mode: 448 });
+  (0, import_node_fs6.writeFileSync)(CREDS, JSON.stringify(c, null, 2));
   try {
-    (0, import_node_fs5.chmodSync)(CREDS, 384);
+    (0, import_node_fs6.chmodSync)(CREDS, 384);
   } catch {
   }
 }
 function openBrowser(url2) {
-  const p = (0, import_node_os4.platform)();
+  const p = (0, import_node_os5.platform)();
   const cmd = p === "darwin" ? ["open", url2] : p === "win32" ? ["cmd", "/c", "start", "", url2] : ["xdg-open", url2];
   try {
-    (0, import_node_child_process3.spawn)(cmd[0], cmd.slice(1), { stdio: "ignore", detached: true }).unref();
+    (0, import_node_child_process4.spawn)(cmd[0], cmd.slice(1), { stdio: "ignore", detached: true }).unref();
   } catch {
   }
 }
@@ -44202,28 +44312,28 @@ async function login() {
   return loadCreds();
 }
 function writeDesktop(creds) {
-  const path = claudeDesktopConfigPath((0, import_node_os4.platform)(), (0, import_node_os4.homedir)(), process.env.APPDATA);
-  if (!(0, import_node_fs5.existsSync)((0, import_node_path6.dirname)(path))) {
+  const path = claudeDesktopConfigPath((0, import_node_os5.platform)(), (0, import_node_os5.homedir)(), process.env.APPDATA);
+  if (!(0, import_node_fs6.existsSync)((0, import_node_path6.dirname)(path))) {
     say("\xB7 Claude Desktop: kh\xF4ng th\u1EA5y tr\xEAn m\xE1y, b\u1ECF qua");
     return;
   }
   let prev;
   try {
-    prev = JSON.parse((0, import_node_fs5.readFileSync)(path, "utf8"));
+    prev = JSON.parse((0, import_node_fs6.readFileSync)(path, "utf8"));
   } catch {
     prev = void 0;
   }
-  (0, import_node_fs5.writeFileSync)(path, JSON.stringify(mergeClaudeDesktopConfig(prev, creds), null, 2));
+  (0, import_node_fs6.writeFileSync)(path, JSON.stringify(mergeClaudeDesktopConfig(prev, creds), null, 2));
   say(`\u2713 Claude Desktop: \u0111\xE3 ghi ${path} (m\u1EDF l\u1EA1i Claude Desktop \u0111\u1EC3 n\xF3 nh\u1EADn)`);
 }
 function addClaudeCode(creds) {
-  const win = (0, import_node_os4.platform)() === "win32";
+  const win = (0, import_node_os5.platform)() === "win32";
   try {
-    (0, import_node_child_process3.execFileSync)("claude", ["mcp", "remove", "hocai"], { stdio: "ignore", shell: win });
+    (0, import_node_child_process4.execFileSync)("claude", ["mcp", "remove", "hocai"], { stdio: "ignore", shell: win });
   } catch {
   }
   try {
-    (0, import_node_child_process3.execFileSync)("claude", [
+    (0, import_node_child_process4.execFileSync)("claude", [
       "mcp",
       "add",
       "hocai",
@@ -44245,28 +44355,13 @@ function addClaudeCode(creds) {
 function claudeBin() {
   if (process.env.CLAUDE_BIN) return process.env.CLAUDE_BIN;
   try {
-    return (0, import_node_child_process3.execSync)("command -v claude", { shell: "/bin/sh", encoding: "utf8" }).trim() || "claude";
+    return (0, import_node_child_process4.execSync)("command -v claude", { shell: "/bin/sh", encoding: "utf8" }).trim() || "claude";
   } catch {
     return "claude";
   }
 }
-function chayLay(cmd, args) {
-  try {
-    const dong = [cmd, ...args].join(" ");
-    const o = {
-      encoding: "utf8",
-      timeout: 8e3,
-      stdio: ["ignore", "pipe", "ignore"]
-    };
-    return (0, import_node_os4.platform)() === "win32" ? (0, import_node_child_process3.execSync)(dong, o) : (0, import_node_child_process3.execSync)(dong, { ...o, shell: "/bin/sh" });
-  } catch (e) {
-    const ra = e.stdout;
-    const chu = typeof ra === "string" ? ra : ra?.toString("utf8");
-    return chu && chu.trim() ? chu : null;
-  }
-}
 function doTroLy() {
-  const r = summarizeAgents(probeAgents(chayLay));
+  const r = summarizeAgents(probeAgents(realProbeIO()));
   if (r.dong.length) {
     say("");
     for (const d of r.dong) say("  " + d);
@@ -44277,13 +44372,75 @@ function doTroLy() {
   }
   return r.chayDuocBai;
 }
-var plan = () => daemonPlan((0, import_node_os4.platform)(), { node: process.execPath, script: APP_CLI, home: (0, import_node_os4.homedir)() });
+function chayHien(cmd) {
+  try {
+    (0, import_node_child_process4.execFileSync)(cmd[0], cmd.slice(1), { stdio: "inherit", shell: (0, import_node_os5.platform)() === "win32" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var PERMS = (0, import_node_path6.join)(HOCAI_DIR, "perms.json");
+var NPM_CACHE = (0, import_node_path6.join)(HOCAI_DIR, "npm-cache");
+function npmCacheDir() {
+  const ra = shellRun("npm", ["config", "get", "cache"], {
+    cwd: (0, import_node_os5.homedir)(),
+    env: cleanNpmEnv(process.env)
+  });
+  const chu = ra?.trim();
+  if (chu && chu !== "undefined" && chu !== "null") return chu;
+  return (0, import_node_os5.platform)() === "win32" ? (0, import_node_path6.join)(process.env.LOCALAPPDATA ?? (0, import_node_os5.homedir)(), "npm-cache") : (0, import_node_path6.join)((0, import_node_os5.homedir)(), ".npm");
+}
+function countAlienFiles(dir, tran = 500) {
+  const toi = process.getuid?.();
+  if (toi === void 0) return 0;
+  let dem = 0;
+  const di = (d) => {
+    if (dem >= tran) return;
+    let muc;
+    try {
+      muc = (0, import_node_fs6.readdirSync)(d);
+    } catch {
+      return;
+    }
+    for (const m of muc) {
+      if (dem >= tran) return;
+      const duong = (0, import_node_path6.join)(d, m);
+      try {
+        const st = (0, import_node_fs6.statSync)(duong);
+        if (st.uid !== toi) {
+          dem++;
+          continue;
+        }
+        if (st.isDirectory()) di(duong);
+      } catch {
+      }
+    }
+  };
+  di(dir);
+  return dem;
+}
+function warnLines(lines) {
+  if (lines.length === 0) return;
+  say("");
+  say("\u26A0 " + lines[0]);
+  for (const d of lines.slice(1)) say("  " + d);
+}
+function doPerms() {
+  try {
+    const j = JSON.parse((0, import_node_fs6.readFileSync)(PERMS, "utf8"));
+    return blockedNotice(Array.isArray(j.blocked) ? j.blocked : []);
+  } catch {
+    return [];
+  }
+}
+var plan = () => daemonPlan((0, import_node_os5.platform)(), { node: process.execPath, script: APP_CLI, home: (0, import_node_os5.homedir)() });
 function nghi(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
 function chay(cmd, im = false) {
   try {
-    (0, import_node_child_process3.execFileSync)(cmd[0], cmd.slice(1), { stdio: "ignore", shell: (0, import_node_os4.platform)() === "win32" });
+    (0, import_node_child_process4.execFileSync)(cmd[0], cmd.slice(1), { stdio: "ignore", shell: (0, import_node_os5.platform)() === "win32" });
     return true;
   } catch {
     if (!im) return false;
@@ -44296,17 +44453,17 @@ function caiDichVu() {
     say("\xB7 H\u1EC7 \u0111i\u1EC1u h\xE0nh n\xE0y ch\u01B0a h\u1ED7 tr\u1EE3 ch\u1EA1y \u1EA9n. D\xF9ng `npx hocai-connect run` v\xE0 \u0111\u1EC3 c\u1EEDa s\u1ED5 m\u1EDF.");
     return false;
   }
-  (0, import_node_fs5.mkdirSync)(APP_DIR, { recursive: true });
-  (0, import_node_fs5.mkdirSync)(LOG_DIR, { recursive: true });
-  (0, import_node_fs5.copyFileSync)(__filename, APP_CLI);
+  (0, import_node_fs6.mkdirSync)(APP_DIR, { recursive: true });
+  (0, import_node_fs6.mkdirSync)(LOG_DIR, { recursive: true });
+  (0, import_node_fs6.copyFileSync)(__filename, APP_CLI);
   if (p.file && p.content) {
-    (0, import_node_fs5.mkdirSync)((0, import_node_path6.dirname)(p.file), { recursive: true });
-    (0, import_node_fs5.writeFileSync)(p.file, p.content);
+    (0, import_node_fs6.mkdirSync)((0, import_node_path6.dirname)(p.file), { recursive: true });
+    (0, import_node_fs6.writeFileSync)(p.file, p.content);
   }
   p.install.forEach((c, i) => {
     if (i === 0) {
       chay(c, true);
-      if ((0, import_node_os4.platform)() === "darwin") {
+      if ((0, import_node_os5.platform)() === "darwin") {
         const nhan = `gui/${process.getuid?.() ?? 501}/${p.label}`;
         for (let lan = 0; lan < 20; lan++) {
           if (!chay(["launchctl", "print", nhan], true)) break;
@@ -44325,7 +44482,7 @@ function caiDichVu() {
 function goDichVu() {
   const p = plan();
   for (const c of p.uninstall) chay(c, true);
-  if (p.file) (0, import_node_fs5.rmSync)(p.file, { force: true });
+  if (p.file) (0, import_node_fs6.rmSync)(p.file, { force: true });
 }
 var LENH = ["mcp", "run", "update", "status", "stop", "logs", "quen", "help", "--help", "-h", "entry"];
 var TRO_GIUP = `hocai-connect \u2014 n\u1ED1i Claude tr\xEAn m\xE1y b\u1EA1n v\xE0o hocAI
@@ -44360,7 +44517,7 @@ async function main() {
   }
   if (cmd === "quen") {
     goDichVu();
-    (0, import_node_fs5.rmSync)(CREDS, { force: true });
+    (0, import_node_fs6.rmSync)(CREDS, { force: true });
     say("\u0110\xE3 ng\u1EAFt k\u1EBFt n\u1ED1i v\xE0 g\u1EE1 d\u1ECBch v\u1EE5 n\u1EC1n tr\xEAn m\xE1y n\xE0y.");
     say("Ch\u1EA1y l\u1EA1i `npx hocai-connect` \u0111\u1EC3 k\u1EBFt n\u1ED1i l\u1EA1i.");
     return;
@@ -44377,9 +44534,10 @@ async function main() {
     }
     say(`C\xF3 b\u1EA3n m\u1EDBi: ${VERSION} \u2192 ${moi}. \u0110ang c\u1EADp nh\u1EADt\u2026`);
     say("");
-    const r = (0, import_node_child_process3.spawnSync)("npx", ["-y", `hocai-connect@${moi}`], {
+    (0, import_node_fs6.mkdirSync)(NPM_CACHE, { recursive: true });
+    const r = (0, import_node_child_process4.spawnSync)("npx", updateNpxArgs(moi, NPM_CACHE), {
       stdio: "inherit",
-      shell: (0, import_node_os4.platform)() === "win32"
+      shell: (0, import_node_os5.platform)() === "win32"
     });
     process.exit(r.status ?? 1);
   }
@@ -44401,6 +44559,7 @@ async function main() {
     }
     say(`\u2713 \u0110ang ch\u1EA1y \xB7 ${info.user?.ten ?? "(ch\xECa \u0111\xE3 b\u1ECB thu h\u1ED3i)"} \xB7 b\u1EA3n ${info.phienBan}`);
     say(`  Nh\u1EADt k\xFD: ${plan().log}`);
+    warnLines(doPerms());
     const moi = await latestVersion();
     if (moi && info.phienBan && newerVersion(moi, info.phienBan)) {
       say("");
@@ -44410,13 +44569,24 @@ async function main() {
   }
   if (cmd === "logs") {
     const f = plan().log;
-    if (!(0, import_node_fs5.existsSync)(f)) {
+    if (!(0, import_node_fs6.existsSync)(f)) {
       say(`Ch\u01B0a c\xF3 nh\u1EADt k\xFD n\xE0o \u1EDF ${f}`);
       return;
     }
-    say((0, import_node_fs5.readFileSync)(f, "utf8").split("\n").slice(-40).join("\n"));
+    say((0, import_node_fs6.readFileSync)(f, "utf8").split("\n").slice(-40).join("\n"));
     return;
   }
+  const quyen = cmd === "run" ? null : permPlan((0, import_node_os5.platform)(), {
+    alienCacheFiles: countAlienFiles(npmCacheDir()),
+    cacheDir: npmCacheDir(),
+    user: (0, import_node_os5.userInfo)().username,
+    needLogin: !loadCreds()
+  });
+  if (quyen && quyen.notice.length) {
+    say("");
+    say("hocAI s\u1EAFp xin nh\u1EEFng th\u1EE9 sau \u2014 kh\xF4ng c\xF3 g\xEC ch\u1EA1y ng\u1EA7m sau l\u01B0ng b\u1EA1n:");
+    for (const d of quyen.notice) say("  " + d);
+  }
   const creds = loadCreds() ?? await login();
   process.env.HOCAI_API_URL = creds.api;
   const me = await fetchIdentity(creds.api, creds.token).catch(() => {
@@ -44461,10 +44631,34 @@ async function main() {
         say(`  Xem nh\u1EADt k\xFD: npx hocai-connect logs`);
         process.exit(1);
       }
+      warnLines(doPerms());
+    }
+    if (quyen && quyen.fixCache.length) {
+      say("");
+      say("C\xF2n m\u1ED9t vi\u1EC7c: cache npm tr\xEAn m\xE1y n\xE0y c\xF3 t\u1EC7p thu\u1ED9c ng\u01B0\u1EDDi d\xF9ng kh\xE1c,");
+      say("n\xEAn l\u1EC7nh `npx hocai-connect update` sau n\xE0y s\u1EBD h\u1ECFng. S\u1EEDa c\u1EA7n m\u1EADt kh\u1EA9u m\xE1y.");
+      say("Kh\xF4ng mu\u1ED1n th\xEC b\u1EA5m Ctrl-C \u2014 m\u1ECDi th\u1EE9 kh\xE1c \u0111\xE3 xong v\xE0 v\u1EABn ch\u1EA1y.");
+      for (const lenh of quyen.fixCache) {
+        const ok = chayHien(lenh);
+        say(ok ? "\u2713 \u0110\xE3 s\u1EEDa quy\u1EC1n cache npm." : "\xB7 Ch\u01B0a s\u1EEDa \u0111\u01B0\u1EE3c. C\u1EADp nh\u1EADt sau n\xE0y v\u1EABn ch\u1EA1y \u0111\u01B0\u1EE3c v\xEC hocAI d\xF9ng cache ri\xEAng.");
+      }
     }
     return;
   }
-  cutLogIfBig(logPathFor((0, import_node_os4.homedir)()));
+  cutLogIfBig(logPathFor((0, import_node_os5.homedir)()));
+  try {
+    const chan = blockedDirs((0, import_node_os5.platform)(), (0, import_node_os5.homedir)(), (duong) => {
+      try {
+        (0, import_node_fs6.readdirSync)(duong);
+        return true;
+      } catch {
+        return false;
+      }
+    });
+    (0, import_node_fs6.mkdirSync)(HOCAI_DIR, { recursive: true });
+    (0, import_node_fs6.writeFileSync)(PERMS, JSON.stringify({ at: (/* @__PURE__ */ new Date()).toISOString(), blocked: chan }) + "\n");
+  } catch {
+  }
   const folders = createFolderRegistry();
   const srv = buildHttpServer({
     // MỘT sổ dùng chung cho cả đường trình duyệt lẫn đường lên socket. Hai sổ
@@ -44477,7 +44671,11 @@ async function main() {
     // chối trang mới trong im lặng. Xem `defaultOrigins`.
     origins: defaultOrigins(process.env.HOCAI_WEB_ORIGINS),
     claudeBin: claudeBin(),
-    me: identity.current
+    me: identity.current,
+    // Nhớ 5 phút. Đủ lâu để tuyến nóng không đốt máy học viên, đủ ngắn để
+    // người vừa `claude auth login` không phải khởi động lại dịch vụ mới thấy
+    // màn hình đổi.
+    agents: cachedProbe(realProbeIO(), Date.now)
   });
   srv.on("error", (e) => {
     if (e.code !== "EADDRINUSE") throw e;
@@ -44495,8 +44693,8 @@ async function main() {
     // hai lượt nối là chuyện thường, và máy chủ phải nhận danh sách MỚI NHẤT.
     hello: () => ({
       t: "hello",
-      name: (0, import_node_os4.hostname)(),
-      os: (0, import_node_os4.platform)(),
+      name: (0, import_node_os5.hostname)(),
+      os: (0, import_node_os5.platform)(),
       folders: folders.list()
     }),
     onMessage: (msg) => handleServerMessage(msg, { folders, store: srv.store, send: uplink.send })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hocai-connect",
-  "version": "0.14.1",
+  "version": "0.15.0",
   "description": "Nối Claude trên máy học viên vào hocAI, và chạy việc AI ngay tại đó",
   "bin": {
     "hocai-connect": "bin.js"