@defai.digital/ax-cli 3.7.2 → 3.8.2

package/dist/utils/safety-rules.js

@@ -0,0 +1,225 @@
+/**
+ * Safety Rules for Auto-accept Mode - Phase 2
+ *
+ * Defines destructive operations that always require confirmation
+ * even when auto-accept mode is enabled.
+ *
+ * Safety Philosophy:
+ * - Auto-accept is for convenience, not carte blanche
+ * - Destructive operations ALWAYS require explicit confirmation
+ * - Better safe than sorry (false positives acceptable)
+ */
+/**
+ * Predefined destructive operations
+ */
+export const DESTRUCTIVE_OPERATIONS = {
+    git_push_main: {
+        id: 'git_push_main',
+        name: 'Push to Main Branch',
+        description: 'Pushing to main/master branch (potential to affect production)',
+        patterns: [
+            /git\s+push.*\s+(origin\s+)?(main|master)/i,
+            /git\s+push.*--force.*\s+(main|master)/i,
+        ],
+        severity: 'high',
+    },
+    git_force_push: {
+        id: 'git_force_push',
+        name: 'Force Push',
+        description: 'Force push can rewrite history and cause data loss',
+        patterns: [
+            /git\s+push.*--force/i,
+            /git\s+push.*-f\s/i,
+        ],
+        severity: 'high',
+    },
+    mass_delete: {
+        id: 'mass_delete',
+        name: 'Mass File Deletion',
+        description: 'Deleting 25+ files at once',
+        patterns: [
+        // This will be checked programmatically based on file count
+        ],
+        severity: 'high',
+    },
+    rm_rf: {
+        id: 'rm_rf',
+        name: 'Recursive Force Delete',
+        description: 'rm -rf can delete entire directory trees',
+        patterns: [
+            /rm\s+-rf/i,
+            /rm\s+-fr/i,
+            /rm\s+.*-r.*-f/i,
+            /rm\s+.*-f.*-r/i,
+        ],
+        severity: 'high',
+    },
+    npm_publish: {
+        id: 'npm_publish',
+        name: 'NPM Package Publish',
+        description: 'Publishing to npm registry (irreversible)',
+        patterns: [
+            /npm\s+publish/i,
+            /yarn\s+publish/i,
+            /pnpm\s+publish/i,
+        ],
+        severity: 'high',
+    },
+    drop_database: {
+        id: 'drop_database',
+        name: 'Drop Database',
+        description: 'Dropping database or tables',
+        patterns: [
+            /DROP\s+DATABASE/i,
+            /DROP\s+TABLE/i,
+            /DROP\s+SCHEMA/i,
+            /TRUNCATE\s+TABLE/i,
+        ],
+        severity: 'high',
+    },
+    docker_prune: {
+        id: 'docker_prune',
+        name: 'Docker System Prune',
+        description: 'Removing all unused Docker data',
+        patterns: [
+            /docker\s+system\s+prune/i,
+            /docker\s+volume\s+prune/i,
+        ],
+        severity: 'medium',
+    },
+    pip_uninstall_all: {
+        id: 'pip_uninstall_all',
+        name: 'Uninstall All Packages',
+        description: 'Uninstalling all Python packages',
+        patterns: [
+            /pip\s+freeze.*\|\s*xargs\s+pip\s+uninstall/i,
+        ],
+        severity: 'medium',
+    },
+};
+/**
+ * Check if a command matches any destructive operation patterns
+ */
+export function isDestructiveCommand(command) {
+    const matchedOperations = [];
+    for (const operation of Object.values(DESTRUCTIVE_OPERATIONS)) {
+        for (const pattern of operation.patterns) {
+            if (pattern.test(command)) {
+                matchedOperations.push(operation);
+                break; // Only add each operation once
+            }
+        }
+    }
+    return {
+        isDestructive: matchedOperations.length > 0,
+        matchedOperations,
+    };
+}
+/**
+ * Check if a file operation is a mass deletion
+ */
+export function isMassDelete(fileCount) {
+    return fileCount >= 25;
+}
+/**
+ * Get human-readable description of destructive operation
+ */
+export function getOperationDescription(operation) {
+    return `${operation.name}: ${operation.description}`;
+}
+/**
+ * Check if operation ID should always require confirmation
+ */
+export function shouldAlwaysConfirm(operationId, alwaysConfirmList) {
+    return alwaysConfirmList.includes(operationId);
+}
+/**
+ * Get all destructive operation IDs
+ */
+export function getAllOperationIds() {
+    return Object.keys(DESTRUCTIVE_OPERATIONS);
+}
+/**
+ * Get default always-confirm list
+ */
+export function getDefaultAlwaysConfirm() {
+    return [
+        'git_push_main',
+        'git_force_push',
+        'mass_delete',
+        'rm_rf',
+        'npm_publish',
+        'drop_database',
+    ];
+}
+/**
+ * Format operation severity for display
+ */
+export function formatSeverity(severity) {
+    switch (severity) {
+        case 'high':
+            return '🔴 HIGH RISK';
+        case 'medium':
+            return '🟡 MEDIUM RISK';
+        case 'low':
+            return '🟢 LOW RISK';
+    }
+}
+/**
+ * Check if file operation is destructive
+ * Currently checks for:
+ * - Editing critical system files
+ * - Creating executable files
+ * - Editing configuration files in production-like paths
+ */
+export function isDestructiveFileOperation(filepath, operation) {
+    const matchedOperations = [];
+    // Normalize path for consistent matching
+    const normalizedPath = filepath.toLowerCase().replace(/\\/g, '/');
+    // Check for critical system files
+    const criticalFiles = [
+        '/etc/passwd',
+        '/etc/shadow',
+        '/etc/sudoers',
+        '/etc/hosts',
+        '/boot/',
+        'c:/windows/system32',
+        '.ssh/authorized_keys',
+        '.ssh/id_rsa',
+        '.ssh/id_ed25519',
+        '.aws/credentials',
+        '.env.production',
+        'production.env',
+    ];
+    for (const pattern of criticalFiles) {
+        if (normalizedPath.includes(pattern.toLowerCase())) {
+            matchedOperations.push({
+                id: 'edit_critical_file',
+                name: 'Edit Critical System File',
+                description: 'Modifying critical system or security files',
+                patterns: [],
+                severity: 'high',
+            });
+            break;
+        }
+    }
+    // Check for executable file creation
+    if (operation === 'write' && (normalizedPath.endsWith('.exe') ||
+        normalizedPath.endsWith('.sh') ||
+        normalizedPath.endsWith('.bat') ||
+        normalizedPath.endsWith('.cmd') ||
+        normalizedPath.endsWith('.ps1'))) {
+        matchedOperations.push({
+            id: 'create_executable',
+            name: 'Create Executable File',
+            description: 'Creating executable or script files',
+            patterns: [],
+            severity: 'medium',
+        });
+    }
+    return {
+        isDestructive: matchedOperations.length > 0,
+        matchedOperations,
+    };
+}
+//# sourceMappingURL=safety-rules.js.map

package/dist/utils/safety-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-rules.js","sourceRoot":"","sources":["../../src/utils/safety-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyC;IAC1E,aAAa,EAAE;QACb,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,gEAAgE;QAC7E,QAAQ,EAAE;YACR,2CAA2C;YAC3C,wCAAwC;SACzC;QACD,QAAQ,EAAE,MAAM;KACjB;IAED,cAAc,EAAE;QACd,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,oDAAoD;QACjE,QAAQ,EAAE;YACR,sBAAsB;YACtB,mBAAmB;SACpB;QACD,QAAQ,EAAE,MAAM;KACjB;IAED,WAAW,EAAE;QACX,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE;QACR,4DAA4D;SAC7D;QACD,QAAQ,EAAE,MAAM;KACjB;IAED,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,0CAA0C;QACvD,QAAQ,EAAE;YACR,WAAW;YACX,WAAW;YACX,gBAAgB;YAChB,gBAAgB;SACjB;QACD,QAAQ,EAAE,MAAM;KACjB;IAED,WAAW,EAAE;QACX,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE;YACR,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;SAClB;QACD,QAAQ,EAAE,MAAM;KACjB;IAED,aAAa,EAAE;QACb,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE;YACR,kBAAkB;YAClB,eAAe;YACf,gBAAgB;YAChB,mBAAmB;SACpB;QACD,QAAQ,EAAE,MAAM;KACjB;IAED,YAAY,EAAE;QACZ,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE;YACR,0BAA0B;YAC1B,0BAA0B;SAC3B;QACD,QAAQ,EAAE,QAAQ;KACnB;IAED,iBAAiB,EAAE;QACjB,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE;YACR,6CAA6C;SAC9C;QACD,QAAQ,EAAE,QAAQ;KACnB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAIlD,MAAM,iBAAiB,GAA2B,EAAE,CAAC;IAErD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC9D,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAClC,MAAM,CAAC,+BAA+B;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAC3C,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,SAAS,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAA+B;IACrE,OAAO,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,iBAA2B;IAE3B,OAAO,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,eAAe;QACf,gBAAgB;QAChB,aAAa;QACb,OAAO;QACP,aAAa;QACb,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAmC;IAChE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,cAAc,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,gBAAgB,CAAC;QAC1B,KAAK,KAAK;YACR,OAAO,aAAa,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,SAAsC;IAIjG,MAAM,iBAAiB,GAA2B,EAAE,CAAC;IAErD,yCAAyC;IACzC,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAElE,kCAAkC;IAClC,MAAM,aAAa,GAAG;QACpB,aAAa;QACb,aAAa;QACb,cAAc;QACd,YAAY;QACZ,QAAQ;QACR,qBAAqB;QACrB,sBAAsB;QACtB,aAAa;QACb,iBAAiB;QACjB,kBAAkB;QAClB,iBAAiB;QACjB,gBAAgB;KACjB,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACnD,iBAAiB,CAAC,IAAI,CAAC;gBACrB,EAAE,EAAE,oBAAoB;gBACxB,IAAI,EAAE,2BAA2B;gBACjC,WAAW,EAAE,6CAA6C;gBAC1D,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,MAAM;QACR,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,SAAS,KAAK,OAAO,IAAI,CAC3B,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/B,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9B,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/B,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/B,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAChC,EAAE,CAAC;QACF,iBAAiB,CAAC,IAAI,CAAC;YACrB,EAAE,EAAE,mBAAmB;YACvB,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,qCAAqC;YAClD,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,aAAa,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAC3C,iBAAiB;KAClB,CAAC;AACJ,CAAC"}

package/dist/utils/settings-manager.d.ts

@@ -1,5 +1,8 @@
-import type { UserSettings, ProjectSettings, SamplingSettings, ThinkingSettings, DualModelSettings } from "../schemas/settings-schemas.js";
+import type { UserSettings, ProjectSettings, SamplingSettings, ThinkingSettings, DualModelSettings, InputSettings, ShortcutsSettings, PasteSettings, StatusBarSettings, AutoAcceptSettings, ExternalEditorSettings, ThinkingModeSettings } from "../schemas/settings-schemas.js";
 export type { UserSettings, ProjectSettings };
+type RequiredInputSettings = Required<InputSettings>;
+type RequiredShortcutsSettings = Required<ShortcutsSettings>;
+type RequiredPasteSettings = Required<PasteSettings>;
 /**
  * Unified settings manager that handles both user-level and project-level settings
  */
@@ -52,6 +55,21 @@ export declare class SettingsManager {
      * Get a specific project setting
      */
     getProjectSetting<K extends keyof ProjectSettings>(key: K): ProjectSettings[K];
+    /**
+     * Phase 3: Get paste settings with proper defaults
+     * Priority: Project settings > User settings > Schema defaults
+     * v3.8.0: Now includes bracketed paste mode settings
+     */
+    getPasteSettings(): {
+        allowLargePaste: any;
+        maxPasteLength: any;
+        warningThreshold: any;
+        enableBracketedPaste: any;
+        showPasteIndicator: any;
+        maxPasteSize: any;
+        pasteTimeout: any;
+        enableFallback: any;
+    };
     /**
      * Get the current model with proper fallback logic:
      * 1. Project-specific model setting
@@ -128,6 +146,76 @@ export declare class SettingsManager {
      * Get the actual project settings path being used
      */
     getProjectSettingsPath(): string;
+    /**
+     * Get input configuration with proper defaults
+     * Priority: User settings > Schema defaults
+     */
+    getInputConfig(): RequiredInputSettings;
+    /**
+     * Update input configuration
+     * Merges with existing config and saves to user settings
+     */
+    updateInputConfig(config: Partial<InputSettings>): void;
+    /**
+     * Get shortcuts configuration with proper defaults
+     * Priority: User settings > Schema defaults
+     */
+    getShortcutsConfig(): RequiredShortcutsSettings;
+    /**
+     * Update shortcuts configuration
+     * Merges with existing config and saves to user settings
+     */
+    updateShortcutsConfig(config: Partial<ShortcutsSettings>): void;
+    /**
+     * Get paste configuration with proper defaults
+     * Priority: User settings > Schema defaults
+     */
+    getPasteConfig(): RequiredPasteSettings;
+    /**
+     * Update paste configuration
+     * Merges with existing config and saves to user settings
+     */
+    updatePasteConfig(config: Partial<PasteSettings>): void;
+    /**
+     * Get status bar configuration with proper defaults
+     * Priority: User settings > Schema defaults
+     */
+    getStatusBarConfig(): Required<StatusBarSettings>;
+    /**
+     * Update status bar configuration
+     * Merges with existing config and saves to user settings
+     */
+    updateStatusBarConfig(config: Partial<StatusBarSettings>): void;
+    /**
+     * Get auto-accept configuration with proper defaults
+     * Priority: User settings > Schema defaults
+     */
+    getAutoAcceptConfig(): AutoAcceptSettings;
+    /**
+     * Update auto-accept configuration
+     * Merges with existing config and saves to user settings
+     */
+    updateAutoAcceptConfig(config: Partial<AutoAcceptSettings>): void;
+    /**
+     * Get external editor configuration with proper defaults
+     * Priority: User settings > Schema defaults
+     */
+    getExternalEditorConfig(): ExternalEditorSettings;
+    /**
+     * Update external editor configuration
+     * Merges with existing config and saves to user settings
+     */
+    updateExternalEditorConfig(config: Partial<ExternalEditorSettings>): void;
+    /**
+     * Get thinking mode configuration with proper defaults
+     * Priority: User settings > Schema defaults
+     */
+    getThinkingModeConfig(): ThinkingModeSettings;
+    /**
+     * Update thinking mode configuration
+     * Merges with existing config and saves to user settings
+     */
+    updateThinkingModeConfig(config: Partial<ThinkingModeSettings>): void;
 }
 /**
  * Convenience function to get the singleton instance