@botconnector/bccli 0.4.0-beta.4 → 0.4.0-beta.40

package/dist/{chunk-NGLKANMD.js → chunk-AVB6M4JE.js}

@@ -1,12 +1,33 @@
 #!/usr/bin/env node
 import {
   ConfigError
-} from "./chunk-RZUJYAQV.js";
+} from "./chunk-M7LLJQ7M.js";
+import {
+  t
+} from "./chunk-M23QBX3V.js";
 
 // src/mcp/config.ts
 import { createHash } from "crypto";
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join, resolve } from "path";
+var ENV_REF = /\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-([^}]*))?\}/g;
+function expandEnvVars(config, env) {
+  const expand = (value) => value.replace(ENV_REF, (match, name, fallback) => {
+    const resolved = env[name];
+    if (resolved !== void 0) return resolved;
+    return fallback !== void 0 ? fallback : match;
+  });
+  const expandMap = (map) => Object.fromEntries(Object.entries(map).map(([k, v]) => [k, expand(v)]));
+  if (config.type === "http") {
+    return { ...config, url: expand(config.url), ...config.headers ? { headers: expandMap(config.headers) } : {} };
+  }
+  return {
+    ...config,
+    command: expand(config.command),
+    ...config.args ? { args: config.args.map(expand) } : {},
+    ...config.env ? { env: expandMap(config.env) } : {}
+  };
+}
 var globalMcpPath = (home) => join(home, "mcp.json");
 var projectMcpPath = (cwd) => join(cwd, ".bccli", "mcp.json");
 var trustPath = (home) => join(home, "trusted-mcp.json");
@@ -15,7 +36,7 @@ function readJson(path, fallback) {
   try {
     return JSON.parse(readFileSync(path, "utf8"));
   } catch (error) {
-    throw new ConfigError(`File MCP tidak valid: ${path} (${error.message})`);
+    throw new ConfigError(t("Invalid MCP file: {path} ({error})", { path, error: error.message }));
   }
 }
 function writePrivate(path, data) {
@@ -58,6 +79,7 @@ function serversToStart(home, cwd) {
 }
 
 export {
+  expandEnvVars,
   globalMcpPath,
   projectMcpPath,
   readMcpFile,

package/dist/{chunk-GW36UMHZ.js → chunk-DSFHN5CH.js}

@@ -35,8 +35,8 @@ function readSecret(prompt) {
   });
 }
 async function runLogin(providerId, cwd) {
-  const { runProviderCommand } = await import("./providerCli-MXV6PD6F.js");
-  const { parseCliArgs } = await import("./args-FCLPQ7TO.js");
+  const { runProviderCommand } = await import("./providerCli-DDH4ZZUY.js");
+  const { parseCliArgs } = await import("./args-4SMOHFN5.js");
   return runProviderCommand(parseCliArgs(["provider", "add", providerId]), {
     env: process.env,
     cwd,

package/dist/{chunk-ELML4KVQ.js → chunk-GAFJEQTJ.js}

@@ -6,10 +6,36 @@ var MODE_ORDER = ["default", "acceptEdits", "plan", "allowAll"];
 function nextMode(mode) {
   return MODE_ORDER[(MODE_ORDER.indexOf(mode) + 1) % MODE_ORDER.length];
 }
-var TWO_WORD = /* @__PURE__ */ new Set(["npm", "npx", "pnpm", "yarn", "bun", "git", "cargo", "go", "docker", "python", "python3", "uv", "make"]);
+var ALWAYS_ASK_COMMANDS = /* @__PURE__ */ new Set(["sudo", "sh", "bash", "zsh", "su"]);
+function isAlwaysAsk(segment) {
+  const words = segment.trim().split(/\s+/);
+  const first = words[0] ?? "";
+  if (ALWAYS_ASK_COMMANDS.has(first)) return true;
+  const flags = words.slice(1).filter((w) => w.startsWith("-"));
+  if (first === "rm" && flags.some((w) => w.includes("r"))) return true;
+  if (first === "chmod" && flags.some((w) => w.includes("R"))) return true;
+  if (first === "kill" && words.slice(1).includes("-9")) return true;
+  if (first === "git" && words[1] === "push") {
+    return words.slice(2).some((w) => w === "-f" || w === "--force" || w.startsWith("--force="));
+  }
+  return false;
+}
 function commandKey(segment) {
   const words = segment.trim().split(/\s+/);
-  return TWO_WORD.has(words[0]) && words[1] ? `${words[0]} ${words[1]}` : words[0];
+  return words[1] ? `${words[0]} ${words[1]}` : words[0];
+}
+function requiresSensitiveToolApproval(req) {
+  const target = req.target.trim();
+  if (req.kind === "read" || req.kind === "edit") {
+    return /(?:^|[/\\])(?:\.env(?:\..*)?|\.ssh|\.aws|\.config\/gcloud|secrets?|credentials?)(?:[/\\]|$)/i.test(target) || /(?:id_rsa|id_ed25519|\.pem|\.p12|\.key)$/i.test(target);
+  }
+  if (req.kind === "bash") {
+    return /\b(?:rm\s+-[a-z]*r[a-z]*f[a-z]*\s|rm\s+-[a-z]*f[a-z]*r[a-z]*\s|mkfs(?:\.|\s)|wipefs\b|shred\s|git\s+push\s+(?:--force|-f)\b|docker\s+(?:system\s+prune|volume\s+rm)|kubectl\s+delete\b|drop\s+(?:database|table)|npm\s+publish\b)/i.test(target) || /\b(?:deploy-service\.sh|aws\s+secretsmanager|cat\s+[^;&|]*\.env\b)/i.test(target);
+  }
+  if (req.kind === "mcp") {
+    return /(?:delete|remove|revoke|transfer|send_email|publish|deploy|execute_command|run_command|read_secret)/i.test(req.tool);
+  }
+  return false;
 }
 var Permissions = class {
   constructor(mode, rules = [], cwd = process.cwd()) {
@@ -30,6 +56,7 @@ var Permissions = class {
   }
   /** Rules that "[a] allow for this session" would add; undefined when it must always be asked. */
   rulesFor(req) {
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return void 0;
     if (req.kind === "edit") return this.editInProject(req.target) ? ["edit(project)"] : void 0;
     if (req.kind === "fetch") {
       try {
@@ -42,12 +69,15 @@ var Permissions = class {
       if (/`|\$\(|[<>]|^\s*[({]/.test(req.target)) return void 0;
       const segments = req.target.split(/&&|\|\||[;&|\n]/).map((s) => s.trim()).filter(Boolean);
       if (!segments.length) return void 0;
+      if (segments.some(isAlwaysAsk)) return void 0;
       return [...new Set(segments.map((s) => `bash(${commandKey(s)})`))];
     }
     if (req.kind === "mcp") return [`mcp(${req.tool})`];
     return [];
   }
   check(req) {
+    if (this.mode === "plan" && req.kind !== "read") return "deny";
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return "ask";
     if (req.kind === "read") return "allow";
     if (this.mode === "allowAll") return "allow";
     if (this.mode === "plan") return "deny";