@kkelly-offical/kkcode 0.1.3 → 0.1.7

package/src/permission/exec-policy.mjs

@@ -34,7 +34,11 @@ function createMatcher(pattern) {
     return (cmd) => pattern.test(cmd)
   }
   if (Array.isArray(pattern)) {
-    // 数组表示命令必须按顺序包含所有元素（用于匹配 git commit）
+    // RegExp 数组：任一匹配即命中
+    if (pattern[0] instanceof RegExp) {
+      return (cmd) => pattern.some(re => re.test(cmd))
+    }
+    // 字符串数组：按顺序包含所有元素（用于匹配 git commit）
     return (cmd) => {
       const parts = cmd.toLowerCase().split(/\s+/)
       let patternIdx = 0
@@ -295,21 +299,15 @@ export function checkBashAllowed(command, config = {}) {
   const result = evaluateCommand(command)
   
   if (result.isForbidden()) {
-    // 全自动化模式下，危险操作可能被允许（如果 allow_dangerous_ops 启用）
+    // 全自动化模式下，仅 git_safety 类别的危险操作可被允许
     if (fullAuto && allowDangerous && result.category === "git_safety") {
       return {
         allowed: true,
-        warning: `Dangerous operation allowed in full-auto mode: ${result.reason}`
-      }
-    }
-    
-    if (fullAuto && allowDangerous) {
-      return {
-        allowed: true,
-        warning: `Operation allowed in full-auto mode with dangerous_ops enabled: ${result.reason}`
+        warning: `Dangerous git operation allowed in full-auto mode: ${result.reason}`
       }
     }
-    
+
+    // 其他 forbidden 类别（fs_safety, network_safety 等）始终禁止
     return {
       allowed: false,
       reason: result.reason

package/src/provider/anthropic.mjs

@@ -290,6 +290,7 @@ export async function* requestAnthropicStream(input) {
       }
       break
     } catch (err) {
+      clearTimeout(connTimer)
       if (signal?.aborted) throw err
       const isNetwork = err?.code === "ETIMEDOUT" || err?.code === "ECONNRESET" || err?.name === "AbortError"
       if (!isNetwork || attempt >= attempts) throw err