@ian2018cs/agenthub 0.1.60 → 0.1.61

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ian2018cs/agenthub",
-  "version": "0.1.60",
+  "version": "0.1.61",
   "description": "A web-based UI for AI Agents",
   "type": "module",
   "main": "server/index.js",

package/server/services/tool-guard/rules.js

@@ -514,6 +514,10 @@ const rules = [
       const scriptFile = interpreterMatch?.[1] || langMatch?.[1] || directMatch?.[1];
       if (!scriptFile) return { result: 'allow' };
 
+      // 编程语言脚本（python/node/ruby 等）的字符串字面量（URL 路径、os.sep 等）
+      // 会被路径正则误判为文件系统路径，路径越界检查仅对 shell 脚本有意义
+      const isShellScript = !!interpreterMatch || (!langMatch && !!directMatch);
+
       // 解析脚本路径
       const resolvedScript = path.isAbsolute(scriptFile)
         ? path.resolve(scriptFile)
@@ -545,10 +549,12 @@ const rules = [
           return { result: 'deny', reason: `脚本文件${portCheck.reason}` };
         }
 
-        // 检查路径越界
-        const pathCheck = checkPathsInContent(content, context);
-        if (pathCheck.denied) {
-          return { result: 'deny', reason: `脚本文件${pathCheck.reason}` };
+        // 检查路径越界（仅 shell 脚本，编程语言脚本的字符串字面量会误判为文件路径）
+        if (isShellScript) {
+          const pathCheck = checkPathsInContent(content, context);
+          if (pathCheck.denied) {
+            return { result: 'deny', reason: `脚本文件${pathCheck.reason}` };
+          }
         }
       } catch {
         // 文件不存在或无法读取 — 交由其他规则处理