@gird/ccli 1.0.2 → 2.0.0

package/dist/config/config.js

@@ -1,128 +0,0 @@
-/**
- * 配置管理：API Key、模型、权限白名单、用户偏好。
- * 全局配置存于 ~/.ccli/config.json，项目级配置存于 <cwd>/.ccli/config.json。
- */
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { existsSync, mkdirSync, readFileSync, writeFileSync, } from 'node:fs';
-export const DEFAULT_MODEL = 'claude-opus-4-8';
-export const DEFAULT_SMALL_MODEL = 'claude-haiku-4-5-20251001';
-const DEFAULTS = {
-    provider: 'anthropic',
-    model: DEFAULT_MODEL,
-    smallModel: DEFAULT_SMALL_MODEL,
-    maxTokens: 16384,
-    allowedTools: [],
-    deniedTools: [],
-    autoApprove: false,
-    temperature: 1,
-    theme: 'dark',
-};
-export function globalConfigDir() {
-    return join(homedir(), '.ccli');
-}
-export function globalConfigPath() {
-    return join(globalConfigDir(), 'config.json');
-}
-export function projectConfigDir(cwd) {
-    return join(cwd, '.ccli');
-}
-function readJson(path) {
-    try {
-        if (existsSync(path)) {
-            return JSON.parse(readFileSync(path, 'utf8'));
-        }
-    }
-    catch {
-        // 忽略坏文件
-    }
-    return {};
-}
-export class Config {
-    data;
-    cwd;
-    constructor(cwd) {
-        this.cwd = cwd;
-        const global = readJson(globalConfigPath());
-        const project = readJson(join(projectConfigDir(cwd), 'config.json'));
-        this.data = { ...DEFAULTS, ...global, ...project };
-        // 环境变量优先级最高
-        const envKey = process.env.ANTHROPIC_API_KEY ||
-            process.env.CLAUDE_API_KEY ||
-            process.env.CCLI_API_KEY;
-        if (envKey)
-            this.data.apiKey = envKey;
-        if (process.env.ANTHROPIC_BASE_URL)
-            this.data.baseURL = process.env.ANTHROPIC_BASE_URL;
-        if (process.env.CCLI_MODEL)
-            this.data.model = process.env.CCLI_MODEL;
-        // OpenAI 兼容后端(通义千问 / 通用 OpenAI 兼容)。
-        // 当未配置 Anthropic key 而存在 QWEN/OpenAI 兼容配置时,自动切换 provider。
-        const qwenKey = process.env.QWEN_API_KEY;
-        const oaiKey = process.env.OPENAI_API_KEY;
-        const explicitProvider = process.env.CCLI_PROVIDER;
-        if (!envKey && (qwenKey || oaiKey)) {
-            this.data.provider = 'openai';
-            this.data.apiKey = qwenKey || oaiKey;
-            this.data.baseURL =
-                process.env.QWEN_BASE_URL ||
-                    process.env.OPENAI_BASE_URL ||
-                    'https://dashscope.aliyuncs.com/compatible-mode/v1';
-            this.data.model =
-                process.env.CCLI_MODEL ||
-                    process.env.QWEN_MODEL ||
-                    process.env.OPENAI_MODEL ||
-                    'qwen-plus';
-        }
-        if (explicitProvider)
-            this.data.provider = explicitProvider;
-        // 兜底:base URL 指向兼容端点时,识别为 openai 协议
-        if (this.data.baseURL &&
-            /compatible-mode|dashscope|\/v1\/?$|openai/i.test(this.data.baseURL) &&
-            !process.env.ANTHROPIC_BASE_URL) {
-            this.data.provider = 'openai';
-        }
-    }
-    get provider() {
-        return this.data.provider;
-    }
-    get apiKey() {
-        return this.data.apiKey;
-    }
-    get model() {
-        return this.data.model;
-    }
-    set model(m) {
-        this.data.model = m;
-    }
-    /** 保存到全局配置文件（不含敏感环境变量覆盖的字段以外的处理从简）。 */
-    saveGlobal() {
-        const dir = globalConfigDir();
-        if (!existsSync(dir))
-            mkdirSync(dir, { recursive: true });
-        writeFileSync(globalConfigPath(), JSON.stringify(this.data, null, 2), 'utf8');
-    }
-    saveProject() {
-        const dir = projectConfigDir(this.cwd);
-        if (!existsSync(dir))
-            mkdirSync(dir, { recursive: true });
-        const path = join(dir, 'config.json');
-        writeFileSync(path, JSON.stringify({
-            model: this.data.model,
-            allowedTools: this.data.allowedTools,
-            deniedTools: this.data.deniedTools,
-        }, null, 2), 'utf8');
-    }
-    addAllowed(rule) {
-        if (!this.data.allowedTools.includes(rule)) {
-            this.data.allowedTools.push(rule);
-            this.saveProject();
-        }
-    }
-    addDenied(rule) {
-        if (!this.data.deniedTools.includes(rule)) {
-            this.data.deniedTools.push(rule);
-            this.saveProject();
-        }
-    }
-}

package/dist/config/dotenv.js

@@ -1,59 +0,0 @@
-/**
- * 极简 .env 加载器(零依赖)。
- * 启动时从工作目录(及其上溯的项目根)读取 .env,注入 process.env。
- * 已存在的环境变量不会被覆盖(真实 shell 环境优先)。
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { join, dirname } from 'node:path';
-function parseEnv(text) {
-    const out = {};
-    for (const rawLine of text.split('\n')) {
-        const line = rawLine.trim();
-        if (!line || line.startsWith('#'))
-            continue;
-        const eq = line.indexOf('=');
-        if (eq === -1)
-            continue;
-        const key = line.slice(0, eq).trim();
-        let val = line.slice(eq + 1).trim();
-        // 去掉首尾引号
-        if ((val.startsWith('"') && val.endsWith('"')) ||
-            (val.startsWith("'") && val.endsWith("'"))) {
-            val = val.slice(1, -1);
-        }
-        if (key)
-            out[key] = val;
-    }
-    return out;
-}
-/** 从指定目录起向上查找最近的 .env(最多上溯 5 层)。 */
-function findEnvFile(startDir) {
-    let dir = startDir;
-    for (let i = 0; i < 5; i++) {
-        const p = join(dir, '.env');
-        if (existsSync(p))
-            return p;
-        const parent = dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    return null;
-}
-/** 加载 .env 到 process.env(不覆盖已有值)。返回是否加载成功。 */
-export function loadDotenv(cwd) {
-    const path = findEnvFile(cwd);
-    if (!path)
-        return false;
-    try {
-        const vars = parseEnv(readFileSync(path, 'utf8'));
-        for (const [k, v] of Object.entries(vars)) {
-            if (process.env[k] === undefined)
-                process.env[k] = v;
-        }
-        return true;
-    }
-    catch {
-        return false;
-    }
-}

package/dist/context/project.js

@@ -1,155 +0,0 @@
-/**
- * 项目上下文：扫描目录结构、读取 CCLI.md(兼容 CLAUDE.md)、收集环境信息。
- * 对应文档中「智能文件索引 + 分层上下文压缩」的能力。
- */
-import { existsSync, readFileSync, readdirSync, statSync, } from 'node:fs';
-import { join } from 'node:path';
-import { execSync } from 'node:child_process';
-const IGNORE_DIRS = new Set([
-    'node_modules',
-    '.git',
-    'dist',
-    'build',
-    'out',
-    '.next',
-    '.cache',
-    'coverage',
-    '__pycache__',
-    '.venv',
-    'venv',
-    'target',
-    '.ccli',
-]);
-/** 生成精简的目录树（限制深度与条目数，避免上下文爆炸）。 */
-export function buildTree(root, maxDepth = 3, maxEntries = 200) {
-    const out = [];
-    let count = 0;
-    function walk(dir, depth, prefix) {
-        if (depth > maxDepth || count > maxEntries)
-            return;
-        let entries;
-        try {
-            entries = readdirSync(dir);
-        }
-        catch {
-            return;
-        }
-        entries = entries
-            .filter((e) => !e.startsWith('.') || e === '.gitignore' || e === '.env.example')
-            .filter((e) => !IGNORE_DIRS.has(e))
-            .sort((a, b) => {
-            const aDir = isDir(join(dir, a));
-            const bDir = isDir(join(dir, b));
-            if (aDir !== bDir)
-                return aDir ? -1 : 1;
-            return a.localeCompare(b);
-        });
-        for (let i = 0; i < entries.length; i++) {
-            if (count > maxEntries) {
-                out.push(prefix + '└── …（已截断）');
-                return;
-            }
-            const e = entries[i];
-            const full = join(dir, e);
-            const last = i === entries.length - 1;
-            const branch = last ? '└── ' : '├── ';
-            const dirFlag = isDir(full);
-            out.push(prefix + branch + e + (dirFlag ? '/' : ''));
-            count++;
-            if (dirFlag) {
-                walk(full, depth + 1, prefix + (last ? '    ' : '│   '));
-            }
-        }
-    }
-    function isDir(p) {
-        try {
-            return statSync(p).isDirectory();
-        }
-        catch {
-            return false;
-        }
-    }
-    out.push('.');
-    walk(root, 1, '');
-    return out.join('\n');
-}
-function safeExec(cmd, cwd) {
-    try {
-        return execSync(cmd, {
-            cwd,
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'ignore'],
-            timeout: 5000,
-        }).trim();
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * 查找并合并项目记忆文件。
- * 主文件为 CCLI.md(本工具读写的约定);同时兼容读取 CLAUDE.md(Claude Code 生态)。
- */
-function loadMemory(cwd) {
-    const candidates = [
-        join(cwd, 'CCLI.md'),
-        join(cwd, '.ccli', 'CCLI.md'),
-        join(cwd, 'CLAUDE.md'), // 兼容 Claude Code
-    ];
-    const parts = [];
-    for (const p of candidates) {
-        if (existsSync(p)) {
-            try {
-                parts.push(readFileSync(p, 'utf8'));
-            }
-            catch {
-                /* ignore */
-            }
-        }
-    }
-    return parts.length ? parts.join('\n\n') : undefined;
-}
-export function gatherContext(cwd) {
-    const isGitRepo = existsSync(join(cwd, '.git'));
-    const ctx = {
-        cwd,
-        isGitRepo,
-        platform: `${process.platform} ${process.arch}`,
-        tree: buildTree(cwd),
-        memory: loadMemory(cwd),
-    };
-    if (isGitRepo) {
-        ctx.gitBranch = safeExec('git rev-parse --abbrev-ref HEAD', cwd);
-        ctx.gitStatus = safeExec('git status --short', cwd);
-    }
-    return ctx;
-}
-/** 将上下文渲染成注入系统提示的环境信息块。 */
-export function renderEnvironment(ctx) {
-    const lines = [];
-    lines.push('<env>');
-    lines.push(`工作目录: ${ctx.cwd}`);
-    lines.push(`是否 Git 仓库: ${ctx.isGitRepo ? '是' : '否'}`);
-    if (ctx.gitBranch)
-        lines.push(`当前分支: ${ctx.gitBranch}`);
-    lines.push(`平台: ${ctx.platform}`);
-    lines.push(`今天日期: ${new Date().toISOString().slice(0, 10)}`);
-    lines.push('</env>');
-    lines.push('');
-    lines.push('<project_tree>');
-    lines.push(ctx.tree);
-    lines.push('</project_tree>');
-    if (ctx.gitStatus) {
-        lines.push('');
-        lines.push('<git_status>');
-        lines.push(ctx.gitStatus);
-        lines.push('</git_status>');
-    }
-    if (ctx.memory) {
-        lines.push('');
-        lines.push('<project_instructions source="CCLI.md">');
-        lines.push(ctx.memory);
-        lines.push('</project_instructions>');
-    }
-    return lines.join('\n');
-}

package/dist/hooks/hooks.js

@@ -1,82 +0,0 @@
-/**
- * 生命周期钩子(Hooks)—— 复刻 Claude Code 的 PreToolUse / PostToolUse。
- * 在工具执行前后运行用户配置的 shell 命令;PreToolUse 非零退出码可阻止工具。
- */
-import { spawnSync } from 'node:child_process';
-import { existsSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-function loadSettings(cwd) {
-    const merged = {};
-    for (const p of [
-        join(homedir(), '.ccli', 'settings.json'),
-        join(cwd, '.ccli', 'settings.json'),
-    ]) {
-        if (!existsSync(p))
-            continue;
-        try {
-            const data = JSON.parse(readFileSync(p, 'utf8'));
-            const h = data.hooks;
-            if (h?.PreToolUse)
-                merged.PreToolUse = [...(merged.PreToolUse ?? []), ...h.PreToolUse];
-            if (h?.PostToolUse)
-                merged.PostToolUse = [...(merged.PostToolUse ?? []), ...h.PostToolUse];
-        }
-        catch {
-            /* 忽略坏配置 */
-        }
-    }
-    return merged;
-}
-export class HookRunner {
-    cwd;
-    config;
-    constructor(cwd, config) {
-        this.cwd = cwd;
-        this.config = config ?? loadSettings(cwd);
-    }
-    hasAny() {
-        return ((this.config.PreToolUse?.length ?? 0) +
-            (this.config.PostToolUse?.length ?? 0) >
-            0);
-    }
-    /** 工具执行前:任一匹配钩子返回非零 → 阻止。 */
-    runPre(tool, input) {
-        for (const h of this.config.PreToolUse ?? []) {
-            if (!this.match(h.matcher, tool))
-                continue;
-            const res = this.exec(h.command, { tool, input });
-            if (res.status !== 0) {
-                return {
-                    blocked: true,
-                    reason: (res.stderr || res.stdout || `钩子拒绝(退出码 ${res.status})`).trim(),
-                };
-            }
-        }
-        return { blocked: false };
-    }
-    /** 工具执行后:仅观测,忽略退出码。 */
-    runPost(tool, input, output) {
-        for (const h of this.config.PostToolUse ?? []) {
-            if (!this.match(h.matcher, tool))
-                continue;
-            this.exec(h.command, { tool, input, output });
-        }
-    }
-    match(matcher, tool) {
-        try {
-            return new RegExp(matcher).test(tool);
-        }
-        catch {
-            return matcher === tool;
-        }
-    }
-    exec(command, payload) {
-        return spawnSync(process.env.SHELL || '/bin/bash', ['-c', command], {
-            cwd: this.cwd,
-            input: JSON.stringify(payload),
-            encoding: 'utf8',
-            timeout: 30_000,
-        });
-    }
-}

package/dist/permissions/permissions.js

@@ -1,87 +0,0 @@
-// 只读工具：默认无需确认
-const SAFE_TOOLS = new Set(['read_file', 'list_dir', 'grep', 'glob']);
-// 危险命令模式
-const DANGEROUS_PATTERNS = [
-    /\brm\s+-rf?\b/,
-    /\bgit\s+push\b/,
-    /\bgit\s+reset\s+--hard\b/,
-    /\bsudo\b/,
-    /\bchmod\s+-R\b/,
-    /\b(mkfs|dd)\b/,
-    /\b:\(\)\s*\{.*\};\s*:/, // fork bomb
-    /\bcurl\b.*\|\s*(sh|bash)\b/,
-    /\bnpm\s+publish\b/,
-    /\bgit\s+push\s+.*--force\b/,
-    />\s*\/dev\/sd/,
-];
-export function isDangerousCommand(cmd) {
-    return DANGEROUS_PATTERNS.some((re) => re.test(cmd));
-}
-/** 提取 bash 命令的「命令前缀」用于白名单匹配，如 'npm test'。 */
-export function commandPrefix(cmd) {
-    const trimmed = cmd.trim();
-    // 取第一个管道/分号前的片段
-    const first = trimmed.split(/[|;&]/)[0].trim();
-    const parts = first.split(/\s+/);
-    // 保留命令 + 第一个子命令（如 git status / npm test）
-    if (parts.length >= 2 && /^(git|npm|yarn|pnpm|cargo|go|docker|make)$/.test(parts[0])) {
-        return `${parts[0]} ${parts[1]}`;
-    }
-    return parts[0] || trimmed;
-}
-export class PermissionManager {
-    config;
-    asker;
-    constructor(config, asker) {
-        this.config = config;
-        this.asker = asker;
-    }
-    /** 判断某次工具调用是否被允许，必要时询问用户。 */
-    async check(req) {
-        // 自动批准模式
-        if (this.config.data.autoApprove)
-            return 'allow';
-        // 只读工具放行
-        if (SAFE_TOOLS.has(req.tool))
-            return 'allow';
-        // 拒绝白名单优先
-        if (this.matchRule(this.config.data.deniedTools, req))
-            return 'deny';
-        // 批准白名单
-        if (this.matchRule(this.config.data.allowedTools, req))
-            return 'allow';
-        // 询问用户
-        const answer = await this.asker.ask(req);
-        if (answer === 'deny')
-            return 'deny';
-        if (answer === 'always') {
-            this.config.addAllowed(req.rule);
-            // 同时把工具级别也加入（如 'Edit'），便于后续同类放行
-            this.config.addAllowed(toolLevelRule(req.tool));
-            return 'allow';
-        }
-        return 'allow';
-    }
-    matchRule(rules, req) {
-        for (const r of rules) {
-            if (r === req.rule)
-                return true;
-            // 工具级通配，如 'Edit' 匹配所有 edit_file
-            if (r === toolLevelRule(req.tool))
-                return true;
-            // 前缀匹配，如 'Bash(npm)' 匹配 'Bash(npm test)'
-            if (req.rule.startsWith(r.replace(/\)$/, '')))
-                return true;
-        }
-        return false;
-    }
-}
-export function toolLevelRule(tool) {
-    const map = {
-        bash: 'Bash',
-        edit_file: 'Edit',
-        write_file: 'Write',
-        read_file: 'Read',
-    };
-    return map[tool] ?? tool;
-}

package/dist/session/store.js

@@ -1,81 +0,0 @@
-/**
- * 会话持久化 —— 把对话历史落盘,支持 --continue / --resume。
- * 存储路径:~/.ccli/sessions/<cwd 哈希>/<sessionId>.json
- */
-import { existsSync, mkdirSync, readFileSync, writeFileSync, readdirSync, } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-import { createHash, randomUUID } from 'node:crypto';
-function sessionsRoot() {
-    return join(homedir(), '.ccli', 'sessions');
-}
-function cwdDir(cwd) {
-    const hash = createHash('sha1').update(cwd).digest('hex').slice(0, 12);
-    return join(sessionsRoot(), hash);
-}
-export class SessionStore {
-    id;
-    cwd;
-    dir;
-    createdAt;
-    constructor(cwd, id) {
-        this.cwd = cwd;
-        this.id = id ?? randomUUID().slice(0, 8);
-        this.dir = cwdDir(cwd);
-        this.createdAt = new Date().toISOString();
-    }
-    path() {
-        return join(this.dir, `${this.id}.json`);
-    }
-    save(model, messages) {
-        try {
-            if (!existsSync(this.dir))
-                mkdirSync(this.dir, { recursive: true });
-            const data = {
-                id: this.id,
-                cwd: this.cwd,
-                model,
-                createdAt: this.createdAt,
-                updatedAt: new Date().toISOString(),
-                messages,
-            };
-            writeFileSync(this.path(), JSON.stringify(data), 'utf8');
-        }
-        catch {
-            /* 落盘失败不影响主流程 */
-        }
-    }
-    /** 列出该 cwd 下的会话,按更新时间倒序。 */
-    static list(cwd) {
-        const dir = cwdDir(cwd);
-        if (!existsSync(dir))
-            return [];
-        const out = [];
-        for (const f of readdirSync(dir)) {
-            if (!f.endsWith('.json'))
-                continue;
-            try {
-                out.push(JSON.parse(readFileSync(join(dir, f), 'utf8')));
-            }
-            catch {
-                /* skip */
-            }
-        }
-        return out.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
-    }
-    /** 加载指定会话(id 可省略 → 最新一条)。 */
-    static load(cwd, id) {
-        const all = SessionStore.list(cwd);
-        if (!all.length)
-            return null;
-        if (!id)
-            return all[0];
-        return all.find((s) => s.id === id) ?? null;
-    }
-    /** 用已有 SessionData 构造一个续写的 store(保留原 id 与创建时间)。 */
-    static resume(data) {
-        const s = new SessionStore(data.cwd, data.id);
-        s.createdAt = data.createdAt;
-        return s;
-    }
-}

package/dist/tools/bash.js

@@ -1,97 +0,0 @@
-/**
- * bash 工具 —— 通过 child_process 执行 shell 命令。
- * 用于运行测试、构建、git 等命令。受权限机制约束，高危命令需二次确认。
- */
-import { spawn } from 'node:child_process';
-import { c, brand } from '../ui/theme.js';
-import { commandPrefix, isDangerousCommand, } from '../permissions/permissions.js';
-const DEFAULT_TIMEOUT = 120_000;
-const MAX_OUTPUT = 30_000;
-export const bashTool = {
-    name: 'bash',
-    description: '在持久化的工作目录中执行 shell 命令（zsh/bash）。用于运行测试、构建、git、安装依赖等。不要用它来读写文件——请用 read_file/write_file/edit_file。避免交互式命令。',
-    inputSchema: {
-        type: 'object',
-        properties: {
-            command: { type: 'string', description: '要执行的 shell 命令' },
-            timeout: {
-                type: 'number',
-                description: '超时毫秒数（默认 120000，最大 600000）',
-            },
-            description: {
-                type: 'string',
-                description: '对该命令用途的一句话说明（5-10 字）',
-            },
-        },
-        required: ['command'],
-    },
-    permission(input) {
-        const cmd = String(input.command || '');
-        const prefix = commandPrefix(cmd);
-        const dangerous = isDangerousCommand(cmd);
-        return {
-            tool: 'bash',
-            rule: `Bash(${prefix})`,
-            description: input.description
-                ? `${input.description}：${cmd}`
-                : `执行：${cmd}`,
-            dangerous,
-        };
-    },
-    preview(input) {
-        return `${brand.accent('$')} ${input.command}`;
-    },
-    async run(input, ctx) {
-        const cmd = String(input.command || '');
-        const timeout = Math.min(input.timeout ?? DEFAULT_TIMEOUT, 600_000);
-        return new Promise((resolveP) => {
-            const shell = process.env.SHELL || '/bin/bash';
-            const child = spawn(shell, ['-c', cmd], {
-                cwd: ctx.cwd,
-                env: process.env,
-            });
-            let stdout = '';
-            let stderr = '';
-            let killed = false;
-            const timer = setTimeout(() => {
-                killed = true;
-                child.kill('SIGKILL');
-            }, timeout);
-            child.stdout.on('data', (d) => {
-                stdout += d.toString();
-                if (stdout.length > MAX_OUTPUT)
-                    stdout = stdout.slice(0, MAX_OUTPUT);
-            });
-            child.stderr.on('data', (d) => {
-                stderr += d.toString();
-                if (stderr.length > MAX_OUTPUT)
-                    stderr = stderr.slice(0, MAX_OUTPUT);
-            });
-            child.on('error', (e) => {
-                clearTimeout(timer);
-                resolveP({ content: `命令启动失败：${e.message}`, isError: true });
-            });
-            child.on('close', (code) => {
-                clearTimeout(timer);
-                const combined = [stdout, stderr].filter(Boolean).join('\n').trim();
-                if (killed) {
-                    resolveP({
-                        content: `命令超时（${timeout}ms）被终止。\n部分输出：\n${combined.slice(0, 4000)}`,
-                        isError: true,
-                    });
-                    return;
-                }
-                const exitNote = code === 0 ? '' : `\n[退出码 ${code}]`;
-                const body = combined || '（无输出）';
-                const truncated = body.length >= MAX_OUTPUT ? '\n…（输出已截断）' : '';
-                resolveP({
-                    content: `${body}${truncated}${exitNote}`,
-                    isError: code !== 0,
-                    display: code === 0
-                        ? `${brand.ok('✓')} ${c.dim(cmd)}`
-                        : `${brand.err('✗')} ${c.dim(cmd)} ${c.dim(`(退出码 ${code})`)}`,
-                });
-            });
-        });
-    },
-};