@ia-ccun/code-agent-cli 0.0.50 → 0.0.51-beta.10

package/config/agent/extensions/review.ts

@@ -27,9 +27,9 @@
  * Note: PR review requires a clean working tree (no uncommitted changes to tracked files).
  */
 
-import type { ExtensionAPI, ExtensionContext, ExtensionCommandContext } from "@mariozechner/pi-coding-agent";
-import { DynamicBorder, BorderedLoader } from "@mariozechner/pi-coding-agent";
-import { Container, type SelectItem, SelectList, Text } from "@mariozechner/pi-tui";
+import type { ExtensionAPI, ExtensionContext, ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
+import { DynamicBorder, BorderedLoader } from "@earendil-works/pi-coding-agent";
+import { Container, type SelectItem, SelectList, Text } from "@earendil-works/pi-tui";
 import path from "node:path";
 import { promises as fs } from "node:fs";
 

package/config/agent/extensions/working-msg.ts

@@ -5,8 +5,8 @@
  * 自定义工作消息，格式类似 Claude Code: ✶ xxx… (时间 · tokens)
  */
 
-import type { ExtensionAPI, TurnEndEvent } from "@mariozechner/pi-coding-agent";
-import type { AssistantMessage } from "@mariozechner/pi-ai";
+import type { ExtensionAPI, TurnEndEvent } from "@earendil-works/pi-coding-agent";
+import type { AssistantMessage } from "@earendil-works/pi-ai";
 
 // 主题色 #49bccf
 const accentColor = "\x1b[38;2;73;188;207m";

package/config/agent/help.md

@@ -31,6 +31,8 @@ npm install -g @ia-ccun/code-agent-cli
 
 ```bash
 aicode-cli
+# 或
+aicode
 ```
 
 ### 基本对话
@@ -66,6 +68,15 @@ Ctrl+Q
 Enter
 ```
 
+### Git Worktree 支持
+
+使用 `/skill:using-git-worktrees` 在多工作区间高效切换：
+
+```
+/skill:using-git-worktrees
+帮我创建一个新的 worktree 来开发登录功能
+```
+
 ---
 
 ## 3. 核心命令
@@ -90,6 +101,13 @@ Enter
 
 思考级别：`off` → `minimal` → `low` → `medium` → `high` → `xhigh`
 
+### 技能相关
+
+| 命令 | 说明 |
+|------|------|
+| `/skill:<name>` | 激活指定技能 |
+| `/skills` | 列出所有可用技能 |
+
 ---
 
 ## 4. 快捷键
@@ -224,16 +242,71 @@ Skill 是预置的 AI 技能模块，针对特定场景优化。
 
 ### 可用 Skills
 
+#### 代码开发
+
+| Skill | 说明 | 激活方式 |
+|-------|------|----------|
+| `code-review` | 代码审查 | `/skill:code-review` |
+| `refactor` | 代码重构 | `/skill:refactor` |
+| `unit-test` | 单元测试 | `/skill:unit-test` |
+| `test-driven-development` | 测试驱动开发 | `/skill:test-driven-development` |
+| `frontend-design` | 前端设计 | `/skill:frontend-design` |
+| `owasp-security` | OWASP 安全编码 | `/skill:owasp-security` |
+
+#### Git 相关
+
+| Skill | 说明 | 激活方式 |
+|-------|------|----------|
+| `commit` | Git 提交消息生成 | `/skill:commit` |
+| `using-git-worktrees` | Git Worktree 管理 | `/skill:using-git-worktrees` |
+
+#### 数据分析
+
+| Skill | 说明 | 激活方式 |
+|-------|------|----------|
+| `csv-data-summarizer` | CSV 数据分析 | `/skill:csv-data-summarizer` |
+| `design-md` | Markdown 设计文档 | `/skill:design-md` |
+
+#### UI/UX 设计
+
+| Skill | 说明 | 激活方式 |
+|-------|------|----------|
+| `ui-ux-pro-max` | UI/UX 专业设计 | `/skill:ui-ux-pro-max` |
+| `impeccable/*` | 完美界面系列技能 | `/skill:impeccable:polish` 等 |
+
+#### 多媒体
+
+| Skill | 说明 | 激活方式 |
+|-------|------|----------|
+| `video-generation` | 视频生成 | `/skill:video-generation` |
+| `aliyun-tts` | 阿里云 TTS | `/skill:aliyun-tts` |
+| `xiaomi-tts` | 小米 TTS | `/skill:xiaomi-tts` |
+
+#### 写作与内容
+
+| Skill | 说明 | 激活方式 |
+|-------|------|----------|
+| `khazix-writer` | 公众号长文写作 | `/skill:khazix-writer` |
+| `hv-analysis` | 横纵分析法深度研究 | `/skill:hv-analysis` |
+
+#### 开发流程
+
+| Skill | 说明 | 激活方式 |
+|-------|------|----------|
+| `brainstorming` | 头脑风暴 | `/skill:brainstorming` |
+| `writing-plans` | 编写实施计划 | `/skill:writing-plans` |
+| `executing-plans` | 执行计划 | `/skill:executing-plans` |
+| `dispatching-parallel-agents` | 并行任务分发 | `/skill:dispatching-parallel-agents` |
+| `systematic-debugning` | 系统性调试 | `/skill:systematic-debugging` |
+| `verification-before-completion` | 完成前验证 | `/skill:verification-before-completion` |
+
+#### 技能管理
+
 | Skill | 说明 | 激活方式 |
 |-------|------|----------|
-| code-review | 代码审查 | `/skill:code-review` |
-| commit | Git 提交 | `/skill:commit` |
-| pr | PR 描述 | `/skill:pr` |
-| refactor | 代码重构 | `/skill:refactor` |
-| unit-test | 单元测试 | `/skill:unit-test` |
-| csv-data-summarizer | CSV 数据分析 | `/skill:csv-data-summarizer` |
-| frontend-design | 前端设计 | `/skill:frontend-design` |
-| ui-ux-pro-max | UI/UX 设计 | `/skill:ui-ux-pro-max` |
+| `skill-creator` | 创建/编辑技能 | `/skill:skill-creator` |
+| `session-learning` | 会话学习总结 | `/skill:session-learning` |
+| `find-skills` | 查找技能 | `/skill:find-skills` |
 
 ### 使用方法
 
@@ -254,13 +327,11 @@ Prompt 是预置的工作流模板，用于特定任务。
 
 | Prompt | 说明 |
 |--------|------|
-| `/bmad-init` | 初始化 BMAD 项目 |
 | `/init-project` | 初始化新项目 |
 | `/feat` | 新增功能开发流程 |
 | `/git-commit` | Git 提交 |
-| `/git-rollback` | Git 回滚 |
-| `/git-worktree` | Git Worktree 管理 |
 | `/workflow` | 复杂工作流 |
+| `/code-simplifier` | 代码简化 |
 
 ### 使用示例
 
@@ -273,6 +344,9 @@ Prompt 是预置的工作流模板，用于特定任务。
 
 # Git 提交
 /git-commit
+
+# 复杂工作流
+/workflow
 ```
 
 ---
@@ -293,9 +367,11 @@ Prompt 是预置的工作流模板，用于特定任务。
 
 | 主题 | 说明 |
 |------|------|
-| dark | 暗色主题 |
-| light | 亮色主题 |
-| catppuccin-mocha | 猫puccin mocha（推荐） |
+| `catppuccin-mocha` | Catppuccin Mocha 暗色主题（推荐） |
+
+### 自定义主题
+
+主题文件位于 `~/.aicode-cli/agent/themes/`，可自定义颜色和样式。
 
 ---
 
@@ -320,6 +396,12 @@ Prompt 是预置的工作流模板，用于特定任务。
 2. **先审后改**：重要修改前先让 AI 解释代码
 3. **备份优先**：关键文件操作前手动备份
 
+### Git 工作流
+
+1. **使用 Worktree**：多分支并行开发时使用 Git Worktree
+2. **规范提交**：使用 `/skill:commit` 生成规范提交消息
+3. **代码审查**：重要变更使用 `/skill:code-review` 审查
+
 ---
 
 ## 10. 故障排除
@@ -328,10 +410,11 @@ Prompt 是预置的工作流模板，用于特定任务。
 
 | 问题 | 解决方案 |
 |------|----------|
-| 启动慢 | 检查网络连接 |
-| 模型连接失败 | 核对 models.json 配置 |
-| 扩展不生效 | 运行 `/reload` 重载 |
+| 启动慢 | 检查网络连接，确认模型 API 可达 |
+| 模型连接失败 | 核对 `models.json` 配置和 API Key |
+| 扩展不生效 | 运行 `/reload` 重载配置 |
 | Token 溢出 | 使用 `/clear` 清理上下文 |
+| Skills 找不到 | 确认技能已安装到 `~/.aicode-cli/agent/skills/` |
 
 ### 详细模式
 
@@ -339,6 +422,12 @@ Prompt 是预置的工作流模板，用于特定任务。
 aicode-cli --verbose
 ```
 
+### 查看上下文
+
+```bash
+/context
+```
+
 ---
 
 ## 附录
@@ -347,8 +436,8 @@ aicode-cli --verbose
 
 | 变量 | 说明 |
 |------|------|
-| `AICODE_CLI_CONFIG_DIR` | 配置目录 |
-| `AICODE_CLI_CODING_AGENT_DIR` | Agent 配置目录 |
+| `AICODE_CLI_CONFIG_DIR` | 配置目录路径 |
+| `AICODE_CLI_CODING_AGENT_DIR` | Agent 配置目录路径 |
 
 ### 命令行参数
 
@@ -359,6 +448,14 @@ aicode-cli --verbose
 | `--model <name>` | 指定模型 |
 | `--clear` | 启动时清理会话 |
 
+### 相关资源
+
+- **项目仓库**: https://github.com/ia-ccun/code-agent-cli
+- **npm 包**: https://www.npmjs.com/package/@ia-ccun/code-agent-cli
+- **pi-coding-agent**: 底层 Agent 框架
+
 ---
 
 *世界那么哒 · AI 实践落地 @2026*
+
+**作者**: xujianjiang

package/config/agent/settings.json

@@ -1,5 +1,7 @@
 {
   "quietStartup":true,
+  "defaultProvider": "aicode",
+  "defaultModel": "qwen3.5-35b-a3b",
   "theme":"light",
   "extensions":[
     "~/.aicode-cli/agent/extensions/bash-check.ts",
@@ -11,9 +13,46 @@
     "~/.aicode-cli/agent/extensions/working-msg.ts"
   ],
   "packages":[  
-    "npm:pi-subagents",
-    "npm:pi-rewind",
-    "npm:pi-btw",
-    "npm:pi-mcp-adapter"
-  ]
+    "npm:pi-subagents@0.17.1",
+    "npm:pi-rewind@0.5.0",
+    "npm:pi-btw@0.2.1",
+    "npm:pi-mcp-adapter@2.4.0",
+    "npm:@juicesharp/rpiv-todo",
+    "npm:@juicesharp/rpiv-ask-user-question",
+    "npm:@juicesharp/rpiv-advisor",
+    "npm:@samfp/pi-memory@1.1.1"
+  ],
+  "memory": {
+    "localPath": "~/.aicode-cli/memory",
+    "lessonInjection": "selective",
+    "consolidationModel": "qwen3.5-35b-a3b"
+  },
+  "subagents": {
+    "agentOverrides": {
+      "scout": {
+        "model": "qwen3.5-35b-a3b"
+      },
+      "researcher": {
+        "model": "qwen3.5-35b-a3b"
+      },
+      "planner": {
+        "model": "qwen3.5-35b-a3b"
+      },
+      "worker": {
+        "model": "qwen3.5-35b-a3b"
+      },
+      "reviewer": {
+        "model": "qwen3.5-35b-a3b"
+      },
+      "context-builder": {
+        "model": "qwen3.5-35b-a3b"
+      },
+      "oracle": {
+        "model": "qwen3.5-35b-a3b"
+      },
+      "delegate": {
+        "model": "qwen3.5-35b-a3b"
+      }
+    }
+  }
 }

package/dist/config-loader.d.ts

@@ -1,9 +1,11 @@
 /**
  * 配置加载器
+ * 🔒 Security: Validate path to prevent path traversal attacks
  */
 import type { AppConfig } from './config.js';
 /**
  * 获取配置目录
+ * 🔒 Security: Validate path to prevent path traversal attacks
  */
 export declare function getConfigDir(): string;
 /**

package/dist/config-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAK7C;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAgBrC;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,SAAS,CAyBtC;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,SAAS,CAErC"}
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAM7C;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAuErC;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,SAAS,CA8CtC;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,SAAS,CAErC"}

package/dist/config-loader.js

@@ -1,26 +1,80 @@
 /**
  * 配置加载器
+ * 🔒 Security: Validate path to prevent path traversal attacks
  */
 import { homedir } from 'os';
-import { join } from 'path';
+import { join, normalize, resolve, isAbsolute } from 'path';
 import { existsSync, readFileSync } from 'fs';
 import { defaultConfig } from './config.js';
+import { logSecurity, logError, SecurityEventType, LogLevel } from './security-logger.js';
 let cachedConfig = null;
 /**
  * 获取配置目录
+ * 🔒 Security: Validate path to prevent path traversal attacks
  */
 export function getConfigDir() {
-    // 优先级: 环境变量 > 命令行参数(后续实现) > 默认值
+    // 优先级：环境变量 > 命令行参数 (后续实现) > 默认值
     const configDir = process.env.AICODE_CLI_CONFIG_DIR;
     if (configDir) {
+        let resolvedPath;
         // 展开环境变量中的路径
         if (configDir === "~") {
-            return homedir();
+            resolvedPath = homedir();
         }
-        if (configDir.startsWith("~/")) {
-            return join(homedir(), configDir.slice(2));
+        else if (configDir.startsWith("~/")) {
+            resolvedPath = join(homedir(), configDir.slice(2));
         }
-        return configDir;
+        else if (isAbsolute(configDir)) {
+            resolvedPath = configDir;
+        }
+        else {
+            // 相对路径：相对于当前工作目录
+            resolvedPath = resolve(configDir);
+        }
+        // 🔒 规范化路径（消除 .. 和 .）
+        const normalized = normalize(resolvedPath);
+        // 🔒 安全检查 1: 防止路径遍历
+        if (normalized.includes('..')) {
+            logSecurity(SecurityEventType.PATH_TRAVERSAL_BLOCKED, {
+                attemptedPath: configDir,
+                normalizedPath: normalized,
+                reason: 'Path contains ..',
+                action: 'Rejected and using default',
+            }, LogLevel.WARN);
+            console.warn('[安全警告] 配置路径包含 ..，使用默认值');
+            return join(homedir(), defaultConfig.configDir);
+        }
+        // 🔒 安全检查 2: 限制在家目录内（防止写入系统目录）
+        const homeDir = homedir();
+        if (!normalized.startsWith(homeDir)) {
+            logSecurity(SecurityEventType.PATH_VALIDATION, {
+                attemptedPath: configDir,
+                normalizedPath: normalized,
+                homeDir: homeDir,
+                reason: 'Path outside home directory',
+                action: 'Rejected and using default',
+            }, LogLevel.WARN);
+            console.warn(`[安全警告] 配置目录 (${normalized}) 在家目录外，使用默认值`);
+            return join(homedir(), defaultConfig.configDir);
+        }
+        // 🔒 安全检查 3: 确保是绝对路径
+        if (!isAbsolute(normalized)) {
+            logSecurity(SecurityEventType.PATH_VALIDATION, {
+                attemptedPath: configDir,
+                normalizedPath: normalized,
+                reason: 'Path is not absolute',
+                action: 'Rejected and using default',
+            }, LogLevel.WARN);
+            console.warn('[安全警告] 配置路径不是绝对路径，使用默认值');
+            return join(homedir(), defaultConfig.configDir);
+        }
+        // ✅ 路径验证通过
+        logSecurity(SecurityEventType.PATH_VALIDATION, {
+            attemptedPath: configDir,
+            normalizedPath: normalized,
+            action: 'Accepted',
+        });
+        return normalized;
     }
     return join(homedir(), defaultConfig.configDir);
 }
@@ -37,12 +91,32 @@ export function loadConfig() {
             const content = readFileSync(configPath, 'utf-8');
             const userConfig = JSON.parse(content);
             cachedConfig = { ...defaultConfig, ...userConfig };
+            // ✅ 记录配置加载成功
+            logSecurity(SecurityEventType.CONFIG_LOAD, {
+                path: configPath,
+                success: true,
+                hasUserConfig: true,
+            });
         }
-        catch {
+        catch (error) {
+            // ❌ 记录配置解析错误
+            logError('Failed to parse config.json', error, { path: configPath });
+            logSecurity(SecurityEventType.CONFIG_ERROR, {
+                path: configPath,
+                error: error.message,
+                action: 'Using default config',
+            }, LogLevel.WARN);
             cachedConfig = { ...defaultConfig };
         }
     }
     else {
+        // ⚠️ 记录配置文件不存在
+        logSecurity(SecurityEventType.CONFIG_LOAD, {
+            path: configPath,
+            success: true,
+            exists: false,
+            action: 'Using default config',
+        });
         cachedConfig = { ...defaultConfig };
     }
     // 设置环境变量，让 pi-coding-agent 使用我们的配置目录

package/dist/config-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,IAAI,YAAY,GAAqB,IAAI,CAAC;AAE1C;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,gCAAgC;IAChC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAEpD,IAAI,SAAS,EAAE,CAAC;QACd,aAAa;QACb,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;IAEvD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,UAAU,EAAE,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IACtC,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,QAAQ,CAAC;IAEnD,OAAO,YAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE1F,IAAI,YAAY,GAAqB,IAAI,CAAC;AAE1C;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,gCAAgC;IAChC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAEpD,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,YAAoB,CAAC;QAEzB,aAAa;QACb,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,YAAY,GAAG,OAAO,EAAE,CAAC;QAC3B,CAAC;aAAM,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,iBAAiB;YACjB,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAED,sBAAsB;QACtB,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QAE3C,oBAAoB;QACpB,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,WAAW,CAAC,iBAAiB,CAAC,sBAAsB,EAAE;gBACpD,aAAa,EAAE,SAAS;gBACxB,cAAc,EAAE,UAAU;gBAC1B,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,4BAA4B;aACrC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAED,+BAA+B;QAC/B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,WAAW,CAAC,iBAAiB,CAAC,eAAe,EAAE;gBAC7C,aAAa,EAAE,SAAS;gBACxB,cAAc,EAAE,UAAU;gBAC1B,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,6BAA6B;gBACrC,MAAM,EAAE,4BAA4B;aACrC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,gBAAgB,UAAU,eAAe,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,WAAW,CAAC,iBAAiB,CAAC,eAAe,EAAE;gBAC7C,aAAa,EAAE,SAAS;gBACxB,cAAc,EAAE,UAAU;gBAC1B,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,4BAA4B;aACrC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAED,WAAW;QACX,WAAW,CAAC,iBAAiB,CAAC,eAAe,EAAE;YAC7C,aAAa,EAAE,SAAS;YACxB,cAAc,EAAE,UAAU;YAC1B,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;IAEvD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,UAAU,EAAE,CAAC;YAEnD,aAAa;YACb,WAAW,CAAC,iBAAiB,CAAC,WAAW,EAAE;gBACzC,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa;YACb,QAAQ,CAAC,6BAA6B,EAAE,KAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9E,WAAW,CAAC,iBAAiB,CAAC,YAAY,EAAE;gBAC1C,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAG,KAAe,CAAC,OAAO;gBAC/B,MAAM,EAAE,sBAAsB;aAC/B,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClB,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,eAAe;QACf,WAAW,CAAC,iBAAiB,CAAC,WAAW,EAAE;YACzC,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,sBAAsB;SAC/B,CAAC,CAAC;QACH,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IACtC,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,QAAQ,CAAC;IAEnD,OAAO,YAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}

package/dist/index.d.ts

@@ -2,9 +2,8 @@
  * aicode-cli
  * AI Coding Agent CLI
  *
- * 基于 @mariozechner/pi-coding-agent 的封装
  */
-export * from '@mariozechner/pi-coding-agent';
+export * from '@earendil-works/pi-coding-agent';
 export { defaultConfig, type AppConfig } from './config.js';
 export { getConfig, getConfigDir, loadConfig } from './config-loader.js';
 export { defaultBanner, generateBanner } from './banner.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,+BAA+B,CAAC;AAG9C,OAAO,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,iCAAiC,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -2,10 +2,8 @@
  * aicode-cli
  * AI Coding Agent CLI
  *
- * 基于 @mariozechner/pi-coding-agent 的封装
  */
-// 重新导出 pi-coding-agent 的核心功能
-export * from '@mariozechner/pi-coding-agent';
+export * from '@earendil-works/pi-coding-agent';
 // 导出配置相关
 export { defaultConfig } from './config.js';
 export { getConfig, getConfigDir, loadConfig } from './config-loader.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6BAA6B;AAC7B,cAAc,+BAA+B,CAAC;AAE9C,SAAS;AACT,OAAO,EAAE,aAAa,EAAkB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEzE,YAAY;AACZ,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,iCAAiC,CAAC;AAEhD,SAAS;AACT,OAAO,EAAE,aAAa,EAAkB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEzE,YAAY;AACZ,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/security-logger.d.ts

@@ -0,0 +1,69 @@
+/**
+ * 安全日志模块
+ * 🔒 Security: Structured logging for security events
+ */
+/**
+ * 日志级别
+ */
+export declare enum LogLevel {
+    INFO = "info",
+    WARN = "warn",
+    ERROR = "error"
+}
+/**
+ * 安全事件类型
+ */
+export declare enum SecurityEventType {
+    CONFIG_LOAD = "config_load",
+    CONFIG_ERROR = "config_error",
+    PATH_VALIDATION = "path_validation",
+    PATH_TRAVERSAL_BLOCKED = "path_traversal_blocked",
+    FILE_MODIFIED = "file_modified",
+    FILE_ACCESS = "file_access",
+    DEPENDENCY_CHECK = "dependency_check",
+    VERSION_CHECK = "version_check",
+    INSTALL_START = "install_start",
+    INSTALL_COMPLETE = "install_complete",
+    SYMLINK_CREATE = "symlink_create",
+    SUSPICIOUS_ACTIVITY = "suspicious_activity"
+}
+/**
+ * 日志条目接口
+ */
+export interface LogEntry {
+    timestamp: string;
+    level: LogLevel;
+    event?: SecurityEventType;
+    message: string;
+    details?: Record<string, unknown>;
+    pid: number;
+    version?: string;
+}
+/**
+ * 记录安全事件
+ * @param event 事件类型
+ * @param details 事件详情
+ * @param level 日志级别（默认 info）
+ */
+export declare function logSecurity(event: SecurityEventType, details: Record<string, unknown>, level?: LogLevel): void;
+/**
+ * 记录错误
+ * @param message 错误消息
+ * @param error 错误对象
+ * @param context 上下文信息
+ */
+export declare function logError(message: string, error: Error, context?: Record<string, unknown>): void;
+/**
+ * 获取日志文件路径
+ */
+export declare function getLogPaths(): {
+    security: string;
+    error: string;
+    dir: string;
+};
+/**
+ * 清除旧日志（可选的维护功能）
+ * @param maxAge 最大保留天数（默认 30 天）
+ */
+export declare function rotateLogs(maxAge?: number): void;
+//# sourceMappingURL=security-logger.d.ts.map

package/dist/security-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-logger.d.ts","sourceRoot":"","sources":["../src/security-logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH;;GAEG;AACH,oBAAY,QAAQ;IAClB,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;CAChB;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAE3B,WAAW,gBAAgB;IAC3B,YAAY,iBAAiB;IAG7B,eAAe,oBAAoB;IACnC,sBAAsB,2BAA2B;IAGjD,aAAa,kBAAkB;IAC/B,WAAW,gBAAgB;IAG3B,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAG/B,aAAa,kBAAkB;IAC/B,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IAGjC,mBAAmB,wBAAwB;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyCD;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,GAAE,QAAwB,GAC9B,IAAI,CAmBN;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAuBN;AAoBD;;GAEG;AACH,wBAAgB,WAAW,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAM9E;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,GAAE,MAAW,GAAG,IAAI,CAoBpD"}