@botconnector/bccli 0.4.0-beta.5 → 0.4.0-beta.51

package/dist/{chunk-ELML4KVQ.js → chunk-GAFJEQTJ.js}

@@ -6,10 +6,36 @@ var MODE_ORDER = ["default", "acceptEdits", "plan", "allowAll"];
 function nextMode(mode) {
   return MODE_ORDER[(MODE_ORDER.indexOf(mode) + 1) % MODE_ORDER.length];
 }
-var TWO_WORD = /* @__PURE__ */ new Set(["npm", "npx", "pnpm", "yarn", "bun", "git", "cargo", "go", "docker", "python", "python3", "uv", "make"]);
+var ALWAYS_ASK_COMMANDS = /* @__PURE__ */ new Set(["sudo", "sh", "bash", "zsh", "su"]);
+function isAlwaysAsk(segment) {
+  const words = segment.trim().split(/\s+/);
+  const first = words[0] ?? "";
+  if (ALWAYS_ASK_COMMANDS.has(first)) return true;
+  const flags = words.slice(1).filter((w) => w.startsWith("-"));
+  if (first === "rm" && flags.some((w) => w.includes("r"))) return true;
+  if (first === "chmod" && flags.some((w) => w.includes("R"))) return true;
+  if (first === "kill" && words.slice(1).includes("-9")) return true;
+  if (first === "git" && words[1] === "push") {
+    return words.slice(2).some((w) => w === "-f" || w === "--force" || w.startsWith("--force="));
+  }
+  return false;
+}
 function commandKey(segment) {
   const words = segment.trim().split(/\s+/);
-  return TWO_WORD.has(words[0]) && words[1] ? `${words[0]} ${words[1]}` : words[0];
+  return words[1] ? `${words[0]} ${words[1]}` : words[0];
+}
+function requiresSensitiveToolApproval(req) {
+  const target = req.target.trim();
+  if (req.kind === "read" || req.kind === "edit") {
+    return /(?:^|[/\\])(?:\.env(?:\..*)?|\.ssh|\.aws|\.config\/gcloud|secrets?|credentials?)(?:[/\\]|$)/i.test(target) || /(?:id_rsa|id_ed25519|\.pem|\.p12|\.key)$/i.test(target);
+  }
+  if (req.kind === "bash") {
+    return /\b(?:rm\s+-[a-z]*r[a-z]*f[a-z]*\s|rm\s+-[a-z]*f[a-z]*r[a-z]*\s|mkfs(?:\.|\s)|wipefs\b|shred\s|git\s+push\s+(?:--force|-f)\b|docker\s+(?:system\s+prune|volume\s+rm)|kubectl\s+delete\b|drop\s+(?:database|table)|npm\s+publish\b)/i.test(target) || /\b(?:deploy-service\.sh|aws\s+secretsmanager|cat\s+[^;&|]*\.env\b)/i.test(target);
+  }
+  if (req.kind === "mcp") {
+    return /(?:delete|remove|revoke|transfer|send_email|publish|deploy|execute_command|run_command|read_secret)/i.test(req.tool);
+  }
+  return false;
 }
 var Permissions = class {
   constructor(mode, rules = [], cwd = process.cwd()) {
@@ -30,6 +56,7 @@ var Permissions = class {
   }
   /** Rules that "[a] allow for this session" would add; undefined when it must always be asked. */
   rulesFor(req) {
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return void 0;
     if (req.kind === "edit") return this.editInProject(req.target) ? ["edit(project)"] : void 0;
     if (req.kind === "fetch") {
       try {
@@ -42,12 +69,15 @@ var Permissions = class {
       if (/`|\$\(|[<>]|^\s*[({]/.test(req.target)) return void 0;
       const segments = req.target.split(/&&|\|\||[;&|\n]/).map((s) => s.trim()).filter(Boolean);
       if (!segments.length) return void 0;
+      if (segments.some(isAlwaysAsk)) return void 0;
       return [...new Set(segments.map((s) => `bash(${commandKey(s)})`))];
     }
     if (req.kind === "mcp") return [`mcp(${req.tool})`];
     return [];
   }
   check(req) {
+    if (this.mode === "plan" && req.kind !== "read") return "deny";
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return "ask";
     if (req.kind === "read") return "allow";
     if (this.mode === "allowAll") return "allow";
     if (this.mode === "plan") return "deny";

package/dist/{chunk-NGLKANMD.js → chunk-H73FO5YK.js}

@@ -1,12 +1,33 @@
 #!/usr/bin/env node
 import {
   ConfigError
-} from "./chunk-RZUJYAQV.js";
+} from "./chunk-NDEJUL44.js";
+import {
+  t
+} from "./chunk-XLC6T4SX.js";
 
 // src/mcp/config.ts
 import { createHash } from "crypto";
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join, resolve } from "path";
+var ENV_REF = /\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-([^}]*))?\}/g;
+function expandEnvVars(config, env) {
+  const expand = (value) => value.replace(ENV_REF, (match, name, fallback) => {
+    const resolved = env[name];
+    if (resolved !== void 0) return resolved;
+    return fallback !== void 0 ? fallback : match;
+  });
+  const expandMap = (map) => Object.fromEntries(Object.entries(map).map(([k, v]) => [k, expand(v)]));
+  if (config.type === "http") {
+    return { ...config, url: expand(config.url), ...config.headers ? { headers: expandMap(config.headers) } : {} };
+  }
+  return {
+    ...config,
+    command: expand(config.command),
+    ...config.args ? { args: config.args.map(expand) } : {},
+    ...config.env ? { env: expandMap(config.env) } : {}
+  };
+}
 var globalMcpPath = (home) => join(home, "mcp.json");
 var projectMcpPath = (cwd) => join(cwd, ".bccli", "mcp.json");
 var trustPath = (home) => join(home, "trusted-mcp.json");
@@ -15,7 +36,7 @@ function readJson(path, fallback) {
   try {
     return JSON.parse(readFileSync(path, "utf8"));
   } catch (error) {
-    throw new ConfigError(`File MCP tidak valid: ${path} (${error.message})`);
+    throw new ConfigError(t("Invalid MCP file: {path} ({error})", { path, error: error.message }));
   }
 }
 function writePrivate(path, data) {
@@ -58,6 +79,7 @@ function serversToStart(home, cwd) {
 }
 
 export {
+  expandEnvVars,
   globalMcpPath,
   projectMcpPath,
   readMcpFile,

package/dist/chunk-KD2LMIS4.js

@@ -0,0 +1,145 @@
+#!/usr/bin/env node
+import {
+  defaultOpen
+} from "./chunk-7F3IWBPQ.js";
+import {
+  removeCredential,
+  saveCredential
+} from "./chunk-NDEJUL44.js";
+import {
+  t
+} from "./chunk-XLC6T4SX.js";
+
+// src/login.ts
+function readSecret(prompt) {
+  return new Promise((resolve) => {
+    process.stdout.write(prompt);
+    const stdin = process.stdin;
+    if (!stdin.isTTY) {
+      let data = "";
+      stdin.on("data", (d) => {
+        data += d;
+      });
+      stdin.on("end", () => resolve(data.trim()));
+      return;
+    }
+    let value = "";
+    stdin.setRawMode(true);
+    stdin.resume();
+    const onData = (buffer) => {
+      for (const ch of buffer.toString()) {
+        if (ch === "\r" || ch === "\n") {
+          stdin.setRawMode(false);
+          stdin.pause();
+          stdin.off("data", onData);
+          process.stdout.write("\n");
+          resolve(value.trim());
+          return;
+        }
+        if (ch === "") process.exit(130);
+        if (ch === "\x7F" || ch === "\b") value = value.slice(0, -1);
+        else value += ch;
+      }
+    };
+    stdin.on("data", onData);
+  });
+}
+function readLine(prompt) {
+  return new Promise((resolve) => {
+    process.stdout.write(prompt);
+    const stdin = process.stdin;
+    if (!stdin.isTTY) {
+      let data = "";
+      stdin.on("data", (d) => {
+        data += d;
+      });
+      stdin.on("end", () => resolve(data.trim()));
+      return;
+    }
+    let value = "";
+    stdin.setRawMode(true);
+    stdin.resume();
+    const onData = (buffer) => {
+      for (const ch of buffer.toString()) {
+        const code = ch.charCodeAt(0);
+        if (code === 13 || code === 10) {
+          stdin.setRawMode(false);
+          stdin.pause();
+          stdin.off("data", onData);
+          process.stdout.write("\n");
+          resolve(value.trim());
+          return;
+        }
+        if (code === 3) process.exit(130);
+        if (code === 127 || code === 8) value = value.slice(0, -1);
+        else value += ch;
+      }
+    };
+    stdin.on("data", onData);
+  });
+}
+function defaultLoginDeps() {
+  return {
+    out: (s) => console.log(s),
+    err: (s) => console.error(s),
+    env: process.env,
+    isTTY: process.stdin.isTTY ?? false,
+    open: (url) => defaultOpen(new URL(url)),
+    readLine,
+    saveCredential: (id, key) => saveCredential(id, key, process.env),
+    removeCredential: (id) => removeCredential(id, process.env),
+    fetch: globalThis.fetch,
+    // Wiring NYATA jalur lama: persis runLogin lama (provider add + prompt key).
+    legacyAdd: async (providerId, targetCwd) => {
+      const { runProviderCommand } = await import("./providerCli-EUZGKP5F.js");
+      const { parseCliArgs: parse } = await import("./args-2R45YZ42.js");
+      return runProviderCommand(parse(["provider", "add", providerId]), {
+        env: process.env,
+        cwd: targetCwd,
+        out: (s) => console.log(s),
+        err: (s) => console.error(s),
+        readSecret
+      });
+    }
+  };
+}
+async function runLogin(providerId, cwd, args, deps) {
+  if (args.key && args.logout) {
+    deps.err(t("Use either --key or --logout, not both."));
+    return 1;
+  }
+  if (args.logout) {
+    if (providerId !== "openrouter") {
+      deps.err(
+        t("Logout is not supported for {id}; use bccli provider remove {id} to delete its stored key and config.", {
+          id: providerId
+        })
+      );
+      return 1;
+    }
+    const { runOauthLogout } = await import("./oauthLogin-VESMXG4M.js");
+    return runOauthLogout({ out: deps.out, err: deps.err, env: deps.env, removeCredential: deps.removeCredential });
+  }
+  if (args.key) return deps.legacyAdd(providerId, cwd);
+  if (providerId === "openrouter") {
+    const { runOauthLogin } = await import("./oauthLogin-VESMXG4M.js");
+    return runOauthLogin({
+      out: deps.out,
+      err: deps.err,
+      env: deps.env,
+      isTTY: deps.isTTY,
+      open: deps.open,
+      readLine: deps.readLine,
+      saveCredential: deps.saveCredential,
+      fetch: deps.fetch
+    });
+  }
+  return deps.legacyAdd(providerId, cwd);
+}
+
+export {
+  readSecret,
+  readLine,
+  defaultLoginDeps,
+  runLogin
+};