huaweicloud-devkit 1.1.9-next.2 → 1.1.9-next.3

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "huaweicloud-devkit",
   "mcpName": "io.github.huaweicloud/huaweicloud-devkit",
-  "version": "1.1.9-next.2",
+  "version": "1.1.9-next.3",
   "kooCliVersion": "7.3.12",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.9-next.2",
+  "version": "1.1.9-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.9-next.2",
+  "version": "1.1.9-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.9-next.2",
+  "version": "1.1.9-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.9-next.2",
+  "version": "1.1.9-next.3",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.9-next.2",
+  "version": "1.1.9-next.3",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.9-next.2",
+  "version": "1.1.9-next.3",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/src/sandbox/session-manager.mjs

@@ -1087,18 +1087,27 @@ fi
     .join('\n');
 }
 
-export function parseDeployCheckOutput(stdout, { port, isCrossPlatform } = {}) {
-  // Strip ANSI escape sequences (CSI color/cursor codes and OSC shell-integration markers)
-  // and split on any line-ending style (\r\n, \r, or \n) to handle all terminal outputs.
-  // Use new RegExp to avoid ESLint no-control-regex on literal control chars in regex.
+// Strip terminal escape sequences from sandbox command output (#946): CSI
+// color/cursor codes and OSC shell-integration markers (shells with integration
+// enabled wrap EVERY line in \x1b]133;C\x07, which blinds anchored ^DB_...=
+// parsers), then normalize \r\n / \r line endings to \n.
+// Use new RegExp to avoid ESLint no-control-regex on literal control chars.
+export function stripTerminalEscapes(text) {
   const ESC = '\x1b';
   const csiRe = new RegExp(ESC + '\\[[0-9;]*[a-zA-Z]', 'g');
   const oscRe = new RegExp(ESC + '\\][^' + ESC + '\x07]*(?:\x07|' + ESC + '\\\\)', 'g');
-  const cleanStdout = String(stdout || '')
+  return String(text || '')
     .replace(csiRe, '')
-    .replace(oscRe, '');
+    .replace(oscRe, '')
+    .replace(/\r\n|\r/g, '\n');
+}
+
+export function parseDeployCheckOutput(stdout, { port, isCrossPlatform } = {}) {
+  // Strip ANSI escape sequences (CSI color/cursor codes and OSC shell-integration markers)
+  // and split on any line-ending style (\r\n, \r, or \n) to handle all terminal outputs.
+  const cleanStdout = stripTerminalEscapes(stdout);
   const checks = {};
-  const lines = cleanStdout.split(new RegExp('\\r\\n|\\r|\\n'));
+  const lines = cleanStdout.split('\n');
   for (const line of lines) {
     const trimmed = line.trim();
     const m = trimmed.match(/^(\w+):(PASS|FAIL|SKIP)\b(.*)/);
@@ -1270,7 +1279,9 @@ export function buildDevbridgeAuthProbe() {
 // authMode is the LAST DB_AUTH_MODE line; attempts collects the non-sensitive
 // DB_ATTEMPT_* diagnostics emitted by tiers that failed and fell through.
 export function parseDevbridgeAuthOutput(stdout) {
-  const text = String(stdout || '');
+  // #946: OSC 133 markers precede every line on integration-enabled shells; the
+  // anchored ^DB_ATTEMPT_ regexes are blind to them without stripping first.
+  const text = stripTerminalEscapes(stdout);
   const modes = text.match(/DB_AUTH_MODE=([A-Z_]+)/g) || [];
   const authMode = modes.length > 0 ? modes[modes.length - 1].split('=')[1] : '';
   const attempts = {};
@@ -1357,7 +1368,10 @@ export function buildDevbridgeVerifyScript(tunnelUrl) {
 // regardless of the app. `badGateway` (502 "bad gateway") means the tunnel is
 // alive but the local service on the exposed port is not serving.
 export function parseDevbridgeExposeOutput(stdout) {
-  const text = String(stdout || '');
+  // #946: strip OSC/CSI escapes + \r BEFORE the anchored ^DB_ lookups — otherwise
+  // every field is lost on integration-enabled shells and a perfectly good tunnel
+  // comes back as ok:true with publicUrl missing (and pointlessly re-built once).
+  const text = stripTerminalEscapes(stdout);
   const getField = (key) => {
     const m = text.match(new RegExp(`^${key}=(.*)$`, 'm'));
     return m ? m[1].trim() : '';
@@ -1381,7 +1395,9 @@ export function parseDevbridgeExposeOutput(stdout) {
 // parseDevbridgeExposeOutput never matches them, which used to leave
 // verifyHttpCode empty and persistent always false.
 export function parseDevbridgeVerifyOutput(stdout) {
-  const text = String(stdout || '');
+  // #946: strip OSC/CSI escapes + \r — the anchored DB_VERIFY_* lookups are blind
+  // to them, leaving verifyHttpCode empty and persistent permanently false.
+  const text = stripTerminalEscapes(stdout);
   const getField = (key) => {
     const m = text.match(new RegExp(`^${key}=(.*)$`, 'm'));
     return m ? m[1].trim() : '';