oasis_test 0.1.82 → 0.1.83

package/dist/_base/wrapper-base.sh

@@ -18,26 +18,32 @@
 set -euo pipefail
 
 # Resolve the real binary path (avoid recursion into self).
-# If ${OASIS_BIN_VAR} is already set (injected by inject()), use it.
-# Otherwise, scan PATH for the first executable that isn't this wrapper.
+# If ${OASIS_BIN_VAR} is already set (injected by inject()), use it — unless it points
+# back at this very wrapper. Otherwise scan PATH for the first executable that isn't us.
 oasis_resolve_bin() {
   local bin_var="${OASIS_BIN_VAR:?OASIS_BIN_VAR must be set}"
   local cmd_name="${OASIS_CMD_NAME:?OASIS_CMD_NAME must be set}"
 
-  # If already set by inject() AND executable on THIS machine, skip PATH scan.
-  # ${OASIS_BIN_VAR} (LARK_BIN/GH_BIN) is resolved server-side via `which`; on a remote
-  # node the real binary may live at a different path than the server's. Don't blindly
-  # exec a stale/non-existent path — fall through to the PATH scan below (which skips
-  # this wrapper to avoid recursion) so a node-local install is still found.
-  if [ -n "${!bin_var:-}" ] && [ -x "${!bin_var:-}" ]; then
+  local SELF
+  SELF="$(realpath "$0" 2>/dev/null || echo "$0")"
+
+  # If already set by inject() AND executable on THIS machine, skip the PATH scan —
+  # but **only if it isn't this wrapper itself**.
+  #
+  # 为什么要查自指（2026-08-03 实测踩到）：inject() 用 `which <cmd>` 在 **daemon 进程的
+  # PATH** 下解析真实二进制，而 daemon 的 PATH 可能被 agent 会话的 wrapper 目录污染
+  # （`oasis daemon start` 会把当时 shell 的 PATH 固化进 systemd unit；在 agent 会话里
+  # 触发更新就会把 /tmp/oasis-conn-* 带进去）。于是 GH_BIN 指向 wrapper 自己 →
+  # 这里的快路径直接 return → 后面 exec "$GH_BIN" 就是无限递归调用自身。
+  # 症状还特别误导：递归被 oasis_check_available 拦下，报的是「cli is upgrading」。
+  if [ -n "${!bin_var:-}" ] && [ -x "${!bin_var:-}" ] \
+     && [ "$(realpath "${!bin_var}" 2>/dev/null)" != "$SELF" ]; then
     return 0
   fi
-  # Stale/non-executable injected path: clear it so the PATH scan can repopulate cleanly.
+  # 空 / 不可执行 / 指向自己：清掉，让下面的 PATH 扫描重新填。
   unset "$bin_var" 2>/dev/null || true
 
   # Fallback: scan PATH for real binary (skip self to avoid recursion)
-  local SELF
-  SELF="$(realpath "$0" 2>/dev/null || echo "$0")"
   local candidate
   while IFS= read -r dir; do
     candidate="$dir/$cmd_name"
@@ -55,13 +61,21 @@ oasis_check_available() {
   local bin_var="${OASIS_BIN_VAR:?OASIS_BIN_VAR must be set}"
   local bin_path="${!bin_var:-}"
 
+  # 报错要分流：说清是「PATH 上根本没有真实 CLI」还是「找到了但跑不起来」。
+  # 旧实现两种都打「cli is upgrading, try again in 30 seconds」——那句话在真正的
+  # 升级窗口里是对的，但在「PATH 被污染、解析到 wrapper 自己」时纯属误导：等多久都不会好。
   if [ -z "$bin_path" ]; then
-    echo "error: The requested cli is upgrading, please try again in 30 seconds." >&2
+    echo "error: ${OASIS_CMD_NAME:-cli} not found on PATH — 连接器需要的真实 CLI 未安装，或 PATH 上只剩 oasis wrapper。" >&2
+    exit 1
+  fi
+
+  if [ ! -x "$bin_path" ]; then
+    echo "error: ${OASIS_BIN_VAR} 指向的 $bin_path 不可执行。" >&2
     exit 1
   fi
 
-  if [ ! -x "$bin_path" ] || ! "$bin_path" --version >/dev/null 2>&1; then
-    echo "error: The requested cli is upgrading, please try again in 30 seconds." >&2
+  if ! "$bin_path" --version >/dev/null 2>&1; then
+    echo "error: $bin_path --version 失败——真实 CLI 可能正在升级，30 秒后重试；若持续失败请检查该路径是否指向 oasis wrapper 自身。" >&2
     exit 1
   fi
 }

package/dist/index.js

@@ -1794,9 +1794,9 @@ function resolveNodeRef(ref2, candidates) {
     const hit = candidates.find((n) => n.id === r);
     return hit ? { ok: true, id: hit.id } : { ok: false, reason: "not_found" };
   }
-  const sep3 = r.indexOf(":");
-  const type = (sep3 >= 0 ? r.slice(0, sep3) : r).trim().toLowerCase();
-  const title = sep3 >= 0 ? r.slice(sep3 + 1).trim().toLowerCase() : null;
+  const sep4 = r.indexOf(":");
+  const type = (sep4 >= 0 ? r.slice(0, sep4) : r).trim().toLowerCase();
+  const title = sep4 >= 0 ? r.slice(sep4 + 1).trim().toLowerCase() : null;
   const matches = candidates.filter((n) => n.type.toLowerCase() === type && (title === null || (n.title ?? "").toLowerCase() === title));
   if (matches.length === 0) return { ok: false, reason: "not_found" };
   if (matches.length === 1) return { ok: true, id: matches[0].id };
@@ -6562,8 +6562,8 @@ var init_dispatcher = __esm({
       /** 从 produce jobKey 解析 artifactId：`produce::<artifactId>` 或 `produce::<artifactId>::<part>`。 */
       artifactIdFromJobKey(jobKey) {
         const rest = jobKey.slice(jobKey.indexOf("::") + 2);
-        const sep3 = rest.indexOf("::");
-        return sep3 >= 0 ? rest.slice(0, sep3) : rest;
+        const sep4 = rest.indexOf("::");
+        return sep4 >= 0 ? rest.slice(0, sep4) : rest;
       }
       /**
        * 某节点的派发器运行时信号（stuckDiagnosis 的非 oplog 那半；proposal 协调者阻塞诊断 D1）。
@@ -139424,9 +139424,9 @@ function agentEdgesFor(dependsOn, nodes, briefId, issues) {
       edges.add(briefId);
       continue;
     }
-    const sep3 = d.indexOf(":");
-    const depType = (sep3 >= 0 ? d.slice(0, sep3) : d).trim().toLowerCase();
-    const depTitle = sep3 >= 0 ? d.slice(sep3 + 1).trim().toLowerCase() : null;
+    const sep4 = d.indexOf(":");
+    const depType = (sep4 >= 0 ? d.slice(0, sep4) : d).trim().toLowerCase();
+    const depTitle = sep4 >= 0 ? d.slice(sep4 + 1).trim().toLowerCase() : null;
     const match = nodes.find((n) => n.type === depType && (depTitle === null || (n.title ?? "").toLowerCase() === depTitle));
     if (match) edges.add(match.id);
     else issues.push({ code: "planner_invalid", severity: "warning", message: `\u8282\u70B9\u4F9D\u8D56\u300C${dep}\u300D\u627E\u4E0D\u5230\u5BF9\u5E94\u4E0A\u6E38\uFF08\u6309 type:title \u5339\u914D\uFF09\uFF0C\u5DF2\u5FFD\u7565\u8FD9\u6761\u8FB9\u3002` });
@@ -140764,6 +140764,13 @@ function resolveWrapperScript(wrapperDir, slug6) {
   }
   return null;
 }
+function isOasisWrapperPath(p2) {
+  try {
+    return (0, import_node_fs2.realpathSync)(p2).endsWith(`${import_node_path.sep}wrapper.sh`);
+  } catch {
+    return false;
+  }
+}
 function wrapperCandidates(wrapperDir, slug6) {
   const override = process.env[ASSETS_DIR_ENV];
   if (override) return [(0, import_node_path.resolve)(override, slug6, "wrapper.sh")];
@@ -141061,13 +141068,27 @@ var init_cli_connector = __esm({
         }
       }
       /**
-       * 用 `which` 解析真实二进制的绝对路径；找不到就原样返回命令名。
-       * 必须在**跑 agent 的那台机器**上解析——server 侧算出的路径在远程节点上并不存在。
+       * 用 `which -a` 解析真实二进制的绝对路径，**跳过 oasis 自己 stage 出来的 wrapper**；
+       * 一个都没有就原样返回命令名。必须在**跑 agent 的那台机器**上解析——server 侧算出的
+       * 路径在远程节点上并不存在。
+       *
+       * 为什么要跳过 wrapper（2026-08-03 实测踩到）：`which` 吃的是**本进程的 PATH**，而
+       * daemon 的 PATH 可能被 agent 会话的 wrapper 目录污染（`oasis daemon start` 把当时
+       * shell 的 PATH 固化进 systemd unit——在 agent 会话里触发更新就会带进 /tmp/oasis-conn-*）。
+       * 裸 `which gh` 于是解析到 wrapper 自己，注入的 GH_BIN 指回 wrapper，wrapper 再 exec
+       * 它 → 无限递归。节点侧已在 daemon 启动时清洗 PATH，这里是第二道闸：
+       * **解析结果一旦是我们自己的 wrapper 就继续往后找。**
        */
       async resolveRealBin(name) {
         try {
-          const { stdout } = await execFile3("which", [name]);
-          return stdout.trim();
+          const { stdout } = await execFile3("which", ["-a", name]);
+          for (const line of stdout.split("\n")) {
+            const candidate = line.trim();
+            if (!candidate) continue;
+            if (isOasisWrapperPath(candidate)) continue;
+            return candidate;
+          }
+          return name;
         } catch {
           return name;
         }
@@ -141618,7 +141639,10 @@ var init_github = __esm({
         "GIT_AUTHOR_EMAIL",
         "GIT_COMMITTER_NAME",
         "GIT_COMMITTER_EMAIL",
-        "EMAIL"
+        "EMAIL",
+        "GIT_CONFIG_COUNT",
+        "GIT_CONFIG_KEY_0",
+        "GIT_CONFIG_VALUE_0"
       ];
       /** 自检：问 GitHub「我是谁」——这是唯一能戳穿「静默用成宿主机身份」的检查。 */
       verifyArgs = ["api", "user", "--jq", ".login"];
@@ -141658,6 +141682,9 @@ var init_github = __esm({
         sessionEnv.set("GIT_COMMITTER_NAME", name);
         sessionEnv.set("GIT_COMMITTER_EMAIL", "");
         sessionEnv.set("EMAIL", "");
+        sessionEnv.set("GIT_CONFIG_COUNT", "1");
+        sessionEnv.set("GIT_CONFIG_KEY_0", "credential.https://github.com.helper");
+        sessionEnv.set("GIT_CONFIG_VALUE_0", "!gh auth git-credential");
       }
     };
   }
@@ -149711,10 +149738,10 @@ function createTokenIssuer(opts = {}) {
     if (revoked.has(token)) return null;
     if (!token.startsWith(SESSION_TOKEN_PREFIX)) return null;
     const encoded = token.slice(SESSION_TOKEN_PREFIX.length);
-    const sep3 = encoded.indexOf(".");
-    if (sep3 <= 0) return null;
-    const payload = encoded.slice(0, sep3);
-    const actualSig = encoded.slice(sep3 + 1);
+    const sep4 = encoded.indexOf(".");
+    if (sep4 <= 0) return null;
+    const payload = encoded.slice(0, sep4);
+    const actualSig = encoded.slice(sep4 + 1);
     const expectedSig = sign(secret, payload);
     if (!signatureMatches(actualSig, expectedSig)) return null;
     let claims;
@@ -170517,10 +170544,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep3, value: value2 } = collItem;
+        const { start, key, sep: sep4, value: value2 } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep3?.[0],
+          next: key ?? sep4?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -170534,7 +170561,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep3) {
+          if (!keyProps.anchor && !keyProps.tag && !sep4) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -170558,7 +170585,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep4 ?? [], {
           indicator: "map-value-ind",
           next: value2,
           offset: keyNode.range[2],
@@ -170574,7 +170601,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value2 ? composeNode(ctx, value2, valueProps, onError) : composeEmptyNode(ctx, offset, sep3, null, valueProps, onError);
+          const valueNode = value2 ? composeNode(ctx, value2, valueProps, onError) : composeEmptyNode(ctx, offset, sep4, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value2, onError);
           offset = valueNode.range[2];
@@ -170665,7 +170692,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep3 = "";
+        let sep4 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -170679,13 +170706,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep3 + cb;
-              sep3 = "";
+                comment += sep4 + cb;
+              sep4 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep3 += source;
+                sep4 += source;
               hasSpace = true;
               break;
             default:
@@ -170728,18 +170755,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i = 0; i < fc.items.length; ++i) {
         const collItem = fc.items[i];
-        const { start, key, sep: sep3, value: value2 } = collItem;
+        const { start, key, sep: sep4, value: value2 } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep3?.[0],
+          next: key ?? sep4?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep3 && !value2) {
+          if (!props.anchor && !props.tag && !sep4 && !value2) {
             if (i === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i < fc.items.length - 1)
@@ -170793,8 +170820,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap && !sep3 && !props.found) {
-          const valueNode = value2 ? composeNode(ctx, value2, props, onError) : composeEmptyNode(ctx, props.end, sep3, null, props, onError);
+        if (!isMap && !sep4 && !props.found) {
+          const valueNode = value2 ? composeNode(ctx, value2, props, onError) : composeEmptyNode(ctx, props.end, sep4, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value2))
@@ -170806,7 +170833,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep4 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value2,
@@ -170817,8 +170844,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep3)
-                for (const st of sep3) {
+              if (sep4)
+                for (const st of sep4) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -170835,7 +170862,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value2 ? composeNode(ctx, value2, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
+          const valueNode = value2 ? composeNode(ctx, value2, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep4, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value2))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -171015,7 +171042,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i + 1;
       }
       let value2 = "";
-      let sep3 = "";
+      let sep4 = "";
       let prevMoreIndented = false;
       for (let i = 0; i < contentStart; ++i)
         value2 += lines[i][0].slice(trimIndent) + "\n";
@@ -171032,24 +171059,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value2 += sep3 + indent.slice(trimIndent) + content;
-          sep3 = "\n";
+          value2 += sep4 + indent.slice(trimIndent) + content;
+          sep4 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep3 === " ")
-            sep3 = "\n";
-          else if (!prevMoreIndented && sep3 === "\n")
-            sep3 = "\n\n";
-          value2 += sep3 + indent.slice(trimIndent) + content;
-          sep3 = "\n";
+          if (sep4 === " ")
+            sep4 = "\n";
+          else if (!prevMoreIndented && sep4 === "\n")
+            sep4 = "\n\n";
+          value2 += sep4 + indent.slice(trimIndent) + content;
+          sep4 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep3 === "\n")
+          if (sep4 === "\n")
             value2 += "\n";
           else
-            sep3 = "\n";
+            sep4 = "\n";
         } else {
-          value2 += sep3 + content;
-          sep3 = " ";
+          value2 += sep4 + content;
+          sep4 = " ";
           prevMoreIndented = false;
         }
       }
@@ -171231,25 +171258,25 @@ var require_resolve_flow_scalar = __commonJS({
       if (!match)
         return source;
       let res = match[1];
-      let sep3 = " ";
+      let sep4 = " ";
       let pos = first.lastIndex;
       line.lastIndex = pos;
       while (match = line.exec(source)) {
         if (match[1] === "") {
-          if (sep3 === "\n")
-            res += sep3;
+          if (sep4 === "\n")
+            res += sep4;
           else
-            sep3 = "\n";
+            sep4 = "\n";
         } else {
-          res += sep3 + match[1];
-          sep3 = " ";
+          res += sep4 + match[1];
+          sep4 = " ";
         }
         pos = line.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source);
-      return res + sep3 + (match?.[1] ?? "");
+      return res + sep4 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError) {
       let res = "";
@@ -172059,14 +172086,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep3, value: value2 }) {
+    function stringifyItem({ start, key, sep: sep4, value: value2 }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep3)
-        for (const st of sep3)
+      if (sep4)
+        for (const st of sep4)
           res += st.source;
       if (value2)
         res += stringifyToken(value2);
@@ -173233,18 +173260,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep3;
+          let sep4;
           if (scalar.end) {
-            sep3 = scalar.end;
-            sep3.push(this.sourceToken);
+            sep4 = scalar.end;
+            sep4.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep3 = [this.sourceToken];
+            sep4 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep3 }]
+            items: [{ start, key: scalar, sep: sep4 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -173397,15 +173424,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep3 = it.sep;
-                  sep3.push(this.sourceToken);
+                  const sep4 = it.sep;
+                  sep4.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep3 }]
+                    items: [{ start: start2, key, sep: sep4 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -173599,13 +173626,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep3 = fc.end.splice(1, fc.end.length);
-            sep3.push(this.sourceToken);
+            const sep4 = fc.end.splice(1, fc.end.length);
+            sep4.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep3 }]
+              items: [{ start, key: fc, sep: sep4 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -188036,8 +188063,8 @@ exec ${JSON.stringify(tsx)} ${JSON.stringify(main)} "$@"
   return wrapper;
 }
 function splitIdentityFiles3(prompt) {
-  const sep3 = /<!-- FILE: (.+?) -->\n?/g;
-  const parts = prompt.split(sep3);
+  const sep4 = /<!-- FILE: (.+?) -->\n?/g;
+  const parts = prompt.split(sep4);
   if (parts.length === 1) return { "identity/AGENTS.md": prompt };
   const out = {};
   for (let i = 1; i < parts.length; i += 2) {
@@ -193807,6 +193834,14 @@ init_src5();
 var fs34 = __toESM(require("node:fs"));
 var path28 = __toESM(require("node:path"));
 var ASSET_EXT = ".sh";
+var SESSION_SCOPED_PREFIXES = ["oasis-conn-", "oasis-wrappers-", "oasis-cli-"];
+function sanitizeDaemonPath(rawPath) {
+  return (rawPath ?? "").split(":").filter((dir) => {
+    if (!dir) return false;
+    const base = path28.basename(dir);
+    return !SESSION_SCOPED_PREFIXES.some((p2) => base.startsWith(p2));
+  }).join(":");
+}
 function installRuntimeAssets(srcRoot, binDir) {
   if (path28.resolve(srcRoot) === path28.resolve(binDir)) return 0;
   let copied = 0;
@@ -193847,7 +193882,7 @@ function syncRuntimeAssets(candidateRoots, binDir) {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.1.82" : "dev";
+var PKG_VERSION = true ? "0.1.83" : "dev";
 var OASIS_DIR = path29.join(os9.homedir(), ".oasis");
 var CONFIG_FILE = path29.join(OASIS_DIR, "node-config.json");
 var PID_FILE = path29.join(OASIS_DIR, "node.pid");
@@ -193925,7 +193960,7 @@ function setupAutostart() {
     path29.join(home, ".local", "bin"),
     "/usr/local/bin"
   ];
-  const daemonPath = [process.env["PATH"] ?? "", ...extraBins].filter(Boolean).join(":");
+  const daemonPath = sanitizeDaemonPath([process.env["PATH"] ?? "", ...extraBins].filter(Boolean).join(":"));
   if (process.platform === "linux") {
     const unitDir = path29.join(os9.homedir(), ".config", "systemd", "user");
     fs35.mkdirSync(unitDir, { recursive: true });
@@ -194071,6 +194106,11 @@ void (async () => {
       cleanup();
       process.exit(0);
     });
+    const cleanPath = sanitizeDaemonPath(process.env["PATH"]);
+    if (cleanPath !== process.env["PATH"]) {
+      console.error(`[oasis] daemon PATH \u5DF2\u6E05\u6D17\uFF1A\u5254\u9664 agent \u4F1A\u8BDD\u4E34\u65F6 wrapper \u76EE\u5F55 ${(process.env["PATH"] ?? "").split(":").length - cleanPath.split(":").length} \u6761`);
+      process.env["PATH"] = cleanPath;
+    }
     try {
       ensureRuntimeAssets();
     } catch (e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis_test",
-  "version": "0.1.82",
+  "version": "0.1.83",
   "description": "Oasis node daemon + CLI — background daemon, auto-start, full server CLI",
   "bin": {
     "oasis": "./dist/index.js"