@ia-ccun/code-agent-cli 0.0.52-release → 0.0.53

package/config/agent/extensions/bash-check.ts

@@ -1,227 +0,0 @@
-/**
- * @author: xujianjiang
- * Bash 命令危险检测扩展
- *
- * 放置位置: config/agent/extensions/
- * 安装后会复制到 ~/.aicode-cli/agent/extensions/
- *
- * 拦截危险 bash 命令，执行前需要用户回答数学题验证
- * 
- * 危险模式配置: config/agent/dangerous-patterns.json
- */
-
-import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { readFileSync, existsSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-
-// === 加载 JSON 配置文件 ===
-interface DangerPattern {
-  pattern: string;
-  commandPrefix: string;
-  name: string;
-  risk: string;
-  description: string;
-  impact: string;
-  explanation: string;
-}
-
-interface DangerPatternsConfig {
-  patterns: DangerPattern[];
-}
-
-function loadDangerPatterns(): DangerPattern[] {
-  const configPath = join(homedir(), ".aicode-cli", "agent", "dangerous-patterns.json");
-  
-  if (existsSync(configPath)) {
-    try {
-      const content = readFileSync(configPath, "utf-8");
-      const config: DangerPatternsConfig = JSON.parse(content);
-      return config.patterns || [];
-    } catch (e) {
-      console.error(`[bash-check] Failed to load config from ${configPath}:`, e);
-    }
-  }
-  
-  console.warn("[bash-check] No dangerous-patterns.json found, using empty patterns");
-  return [];
-}
-
-// === 编译危险模式（同步加载）===
-const patterns = loadDangerPatterns();
-const compiledPatterns = patterns.map(p => ({
-  ...p,
-  compiled: new RegExp(p.pattern, ""),
-}));
-
-// === 生成数学验证题目 ===
-function generateMathProblem(): { question: string, answer: number } {
-  const operators = ['+', '-'];
-  const operator = operators[Math.floor(Math.random() * operators.length)];
-  let a = Math.floor(Math.random() * 10) + 1;
-  let b = Math.floor(Math.random() * 10) + 1;
-  
-  // 确保减法结果非负
-  if (operator === '-' && a < b) {
-    [a, b] = [b, a];
-  }
-  
-  const question = `${a} ${operator} ${b} = ?`;
-  const answer = operator === '+' ? a + b : a - b;
-  
-  return { question, answer };
-}
-
-export default function (pi: ExtensionAPI) {
-  // === 拦截 bash 工具 - 检查危险操作 ===
-  pi.on("tool_call", async (event, ctx) => {
-    if (event.toolName !== "bash") return;
-
-    let command = event.input.command || "";
-
-    // 过滤掉 git commit -m 后面的 message 内容，只检查实际命令部分
-    const commitMsgMatch = command.match(/^(git\s+commit\s+.*?-m\s+)(.*)$/s);
-    if (commitMsgMatch) {
-      // 只检查 -m 之前的命令部分，忽略 message 内容
-      command = commitMsgMatch[1];
-    }
-
-    // 检查是否匹配危险模式
-    for (const danger of compiledPatterns) {
-      // 1. 首先检查命令是否以指定前缀开头
-      const trimmedCmd = command.trim();
-      if (!trimmedCmd.startsWith(danger.commandPrefix)) continue;
-      
-      // 2. 然后检查是否匹配危险模式（使用编译后的正则）
-      if (!danger.compiled.test(command)) continue;
-
-      // 解析命令中的路径参数
-      const { readdirSync, statSync, existsSync } = await import("fs");
-      const details: string[] = [];
-
-      // 提取相关路径
-      const pathMatch = command.match(/(['"])([^\1]+)\1|\S+(?=\s|$)/g);
-      if (pathMatch) {
-        for (const p of pathMatch) {
-          const cleanPath = p.replace(/^['"]|['"]$/g, '').trim();
-          if (cleanPath && cleanPath.length > 1 && cleanPath.length < 200) {
-            try {
-              if (existsSync(cleanPath)) {
-                const stat = statSync(cleanPath);
-                if (stat.isDirectory()) {
-                  const files = readdirSync(cleanPath);
-                  details.push(`📁 ${cleanPath}/ (${files.length} 个文件)`);
-                } else {
-                  details.push(`📄 ${cleanPath}`);
-                }
-              }
-            } catch (e) {
-              // 忽略读取错误
-            }
-          }
-        }
-      }
-
-      // 构建确认消息
-      const truncatedCmd = command.length > 100 ? command.slice(0, 100) + '...' : command;
-      const fileInfo = details.length > 0
-        ? `\n\n🗂️ 将操作的文件:\n${details.slice(0, 5).join('\n')}${details.length > 5 ? `\n... 还有 ${details.length - 5} 个` : ''}`
-        : '';
-
-      // 让用户选择操作
-      const choice = await ctx.ui.select(
-        `${danger.risk} 危险操作检测: ${danger.name}`,
-        [
-          `⚠️ 强制执行 (${danger.name})`,
-          "🔍 让 AI 解读此命令",
-          "❌ 取消操作",
-        ]
-      );
-
-      if (!choice) {
-        ctx.ui.notify("⛔ 操作已取消", "warning");
-        return { block: true, reason: "用户取消" };
-      }
-
-      if (choice.includes("取消")) {
-        ctx.ui.notify("⛔ 操作已取消", "warning");
-        return { block: true, reason: "用户取消" };
-      }
-
-      if (choice.includes("AI 解读")) {
-        // 显示详细解释
-        const explanation = `
-📋 命令: ${danger.name}
-
-📝 描述: ${danger.description}
-
-⚠️ 风险等级: ${danger.risk}
-
-💥 影响: ${danger.impact}
-
-📖 详细解释:
-${danger.explanation}
-
-🗂️ 涉及路径:${fileInfo || '\n   (无)'}`.trim();
-
-        ctx.ui.notify(explanation, "info");
-
-        // 解释后再让用户选择
-        const confirmChoice = await ctx.ui.select(
-          "请确认操作",
-          [
-            `⚠️ 我已了解风险，继续执行 (${danger.name})`,
-            "❌ 取消操作",
-          ]
-        );
-
-        if (!confirmChoice || confirmChoice.includes("取消")) {
-          ctx.ui.notify("⛔ 操作已取消", "warning");
-          return { block: true, reason: "用户取消" };
-        }
-
-        // 执行数学验证
-        const mathProblem = generateMathProblem();
-        const mathAnswer = await ctx.ui.input(
-          `🔴 最终验证 - 请回答数学题\n\n⚠️ 命令: ${danger.name}\n\n${truncatedCmd}${fileInfo}\n\n📝 请计算: ${mathProblem.question}`,
-          "输入答案后回车"
-        );
-
-        if (!mathAnswer) {
-          ctx.ui.notify("⛔ 操作已取消", "warning");
-          return { block: true, reason: "用户未输入答案" };
-        }
-
-        const userAnswer = parseInt(mathAnswer.trim(), 10);
-        if (isNaN(userAnswer) || userAnswer !== mathProblem.answer) {
-          ctx.ui.notify(`⛔ 答案错误！正确答案是: ${mathProblem.answer}`, "error");
-          return { block: true, reason: "数学验证失败" };
-        }
-
-        ctx.ui.notify(`✅ 验证通过！执行: ${danger.name}`, "success");
-        return;
-      }
-
-      // 直接执行 - 数学验证
-      const mathProblem = generateMathProblem();
-      const mathAnswer = await ctx.ui.input(
-        `🔴 最终验证 - 请回答数学题\n\n⚠️ 命令: ${danger.name}\n\n${truncatedCmd}${fileInfo}\n\n📝 请计算: ${mathProblem.question}`,
-        "输入答案后回车"
-      );
-
-      if (!mathAnswer) {
-        ctx.ui.notify("⛔ 操作已取消", "warning");
-        return { block: true, reason: "用户未输入答案" };
-      }
-
-      const userAnswer = parseInt(mathAnswer.trim(), 10);
-      if (isNaN(userAnswer) || userAnswer !== mathProblem.answer) {
-        ctx.ui.notify(`⛔ 答案错误！正确答案是: ${mathProblem.answer}`, "error");
-        return { block: true, reason: "数学验证失败" };
-      }
-
-      ctx.ui.notify(`✅ 验证通过！执行: ${danger.name}`, "success");
-      break;
-    }
-  });
-}