@lobehub/lobehub 2.0.0-next.94 → 2.0.0-next.96

package/locales/ru-RU/common.json

@@ -135,6 +135,27 @@
     }
   },
   "close": "Закрыть",
+  "cmdk": {
+    "about": "О нас",
+    "communitySupport": "Поддержка сообщества",
+    "discover": "Обзор",
+    "knowledgeBase": "База знаний",
+    "navigate": "Навигация",
+    "newAgent": "Создать помощника",
+    "noResults": "Ничего не найдено",
+    "openSettings": "Открыть настройки",
+    "painting": "AI-рисование",
+    "searchPlaceholder": "Введите команду или выполните поиск...",
+    "settings": "Настройки",
+    "starOnGitHub": "Поставьте звезду на GitHub",
+    "submitIssue": "Сообщить о проблеме",
+    "theme": "Тема",
+    "themeAuto": "Системная тема",
+    "themeDark": "Тёмная тема",
+    "themeLight": "Светлая тема",
+    "toOpen": "Открыть",
+    "toSelect": "Выбрать"
+  },
   "confirm": "Подтвердить",
   "contact": "Свяжитесь с нами",
   "copy": "Копировать",

package/locales/ru-RU/hotkey.json

@@ -7,6 +7,10 @@
     "desc": "Очистить сообщения текущего сеанса и загруженные файлы",
     "title": "Очистить сообщения сеанса"
   },
+  "commandPalette": {
+    "desc": "Откройте глобальную панель команд для быстрого доступа к функциям",
+    "title": "Панель команд"
+  },
   "deleteAndRegenerateMessage": {
     "desc": "Удалить последнее сообщение и сгенерировать заново",
     "title": "Удалить и сгенерировать заново"

package/locales/tr-TR/common.json

@@ -135,6 +135,27 @@
     }
   },
   "close": "Kapat",
+  "cmdk": {
+    "about": "Hakkında",
+    "communitySupport": "Topluluk Desteği",
+    "discover": "Keşfet",
+    "knowledgeBase": "Bilgi Tabanı",
+    "navigate": "Gezin",
+    "newAgent": "Yeni Asistan Oluştur",
+    "noResults": "Sonuç bulunamadı",
+    "openSettings": "Ayarları Aç",
+    "painting": "Yapay Zeka Resmi",
+    "searchPlaceholder": "Komut girin veya arayın...",
+    "settings": "Ayarlar",
+    "starOnGitHub": "GitHub'da Bize Yıldız Verin",
+    "submitIssue": "Sorun Bildir",
+    "theme": "Tema",
+    "themeAuto": "Sistemle Eşle",
+    "themeDark": "Karanlık Mod",
+    "themeLight": "Aydınlık Mod",
+    "toOpen": "Aç",
+    "toSelect": "Seç"
+  },
   "confirm": "Onayla",
   "contact": "Bize Ulaşın",
   "copy": "Kopyala",

package/locales/tr-TR/hotkey.json

@@ -7,6 +7,10 @@
     "desc": "Geçerli oturumun mesajlarını ve yüklenen dosyaları temizle",
     "title": "Oturum mesajlarını temizle"
   },
+  "commandPalette": {
+    "desc": "Genel komut panelini açarak işlevlere hızlı erişim sağlayın",
+    "title": "Komut Paneli"
+  },
   "deleteAndRegenerateMessage": {
     "desc": "Son mesajı sil ve yeniden oluştur",
     "title": "Sil ve Yeniden Oluştur"

package/locales/vi-VN/common.json

@@ -135,6 +135,27 @@
     }
   },
   "close": "Đóng",
+  "cmdk": {
+    "about": "Giới thiệu",
+    "communitySupport": "Hỗ trợ cộng đồng",
+    "discover": "Khám phá",
+    "knowledgeBase": "Cơ sở kiến thức",
+    "navigate": "Điều hướng",
+    "newAgent": "Tạo trợ lý mới",
+    "noResults": "Không tìm thấy kết quả phù hợp",
+    "openSettings": "Mở cài đặt",
+    "painting": "Vẽ bằng AI",
+    "searchPlaceholder": "Nhập lệnh hoặc tìm kiếm...",
+    "settings": "Cài đặt",
+    "starOnGitHub": "Đánh giá sao trên GitHub",
+    "submitIssue": "Gửi vấn đề",
+    "theme": "Giao diện",
+    "themeAuto": "Theo hệ thống",
+    "themeDark": "Chế độ tối",
+    "themeLight": "Chế độ sáng",
+    "toOpen": "Mở",
+    "toSelect": "Chọn"
+  },
   "confirm": "Xác nhận",
   "contact": "Liên hệ chúng tôi",
   "copy": "Sao chép",

package/locales/vi-VN/hotkey.json

@@ -7,6 +7,10 @@
     "desc": "Xóa tất cả tin nhắn và tệp đã tải lên trong cuộc trò chuyện hiện tại",
     "title": "Xóa tin nhắn cuộc trò chuyện"
   },
+  "commandPalette": {
+    "desc": "Mở bảng lệnh toàn cục để truy cập nhanh các chức năng",
+    "title": "Bảng lệnh"
+  },
   "deleteAndRegenerateMessage": {
     "desc": "Xoá tin nhắn cuối cùng và tạo lại",
     "title": "Xoá và tạo lại"

package/locales/zh-CN/common.json

@@ -135,6 +135,27 @@
     }
   },
   "close": "关闭",
+  "cmdk": {
+    "about": "关于",
+    "communitySupport": "社区支持",
+    "discover": "发现",
+    "knowledgeBase": "知识库",
+    "navigate": "导航",
+    "newAgent": "新建助手",
+    "noResults": "未找到相关结果",
+    "openSettings": "打开设置",
+    "painting": "AI 绘画",
+    "searchPlaceholder": "输入命令或搜索...",
+    "settings": "设置",
+    "starOnGitHub": "在 GitHub 上给我们 Star",
+    "submitIssue": "提交问题",
+    "theme": "主题",
+    "themeAuto": "跟随系统",
+    "themeDark": "深色模式",
+    "themeLight": "浅色模式",
+    "toOpen": "打开",
+    "toSelect": "选择"
+  },
   "confirm": "确认",
   "contact": "联系我们",
   "copy": "复制",

package/locales/zh-CN/hotkey.json

@@ -7,6 +7,10 @@
     "desc": "清空当前会话的消息和上传的文件",
     "title": "清空会话消息"
   },
+  "commandPalette": {
+    "desc": "打开全局命令面板快速访问功能",
+    "title": "命令面板"
+  },
   "deleteAndRegenerateMessage": {
     "desc": "删除最后一条消息并重新生成",
     "title": "删除并重新生成"

package/locales/zh-TW/common.json

@@ -135,6 +135,27 @@
     }
   },
   "close": "關閉",
+  "cmdk": {
+    "about": "關於",
+    "communitySupport": "社群支援",
+    "discover": "探索",
+    "knowledgeBase": "知識庫",
+    "navigate": "導覽",
+    "newAgent": "新增助手",
+    "noResults": "未找到相關結果",
+    "openSettings": "開啟設定",
+    "painting": "AI 繪圖",
+    "searchPlaceholder": "輸入指令或搜尋...",
+    "settings": "設定",
+    "starOnGitHub": "在 GitHub 上給我們星標",
+    "submitIssue": "提交問題",
+    "theme": "主題",
+    "themeAuto": "依系統設定",
+    "themeDark": "深色模式",
+    "themeLight": "淺色模式",
+    "toOpen": "開啟",
+    "toSelect": "選取"
+  },
   "confirm": "確認",
   "contact": "聯繫我們",
   "copy": "複製",

package/locales/zh-TW/hotkey.json

@@ -7,6 +7,10 @@
     "desc": "清空當前會話的消息和上傳的檔案",
     "title": "清空會話消息"
   },
+  "commandPalette": {
+    "desc": "開啟全域指令面板以快速存取功能",
+    "title": "指令面板"
+  },
   "deleteAndRegenerateMessage": {
     "desc": "刪除最後一則訊息並重新產生",
     "title": "刪除並重新產生"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lobehub/lobehub",
-  "version": "2.0.0-next.94",
+  "version": "2.0.0-next.96",
   "description": "LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application.",
   "keywords": [
     "framework",
@@ -197,6 +197,7 @@
     "antd-style": "^3.7.1",
     "brotli-wasm": "^3.0.1",
     "chroma-js": "^3.1.2",
+    "cmdk": "^1.1.1",
     "cookie": "^1.0.2",
     "countries-and-timezones": "^3.8.0",
     "dayjs": "^1.11.19",
@@ -256,6 +257,7 @@
     "pwa-install-handler": "^2.6.3",
     "query-string": "^9.3.1",
     "random-words": "^2.0.1",
+    "rc-util": "^5.44.4",
     "react": "19.2.0",
     "react-confetti": "^6.4.0",
     "react-diff-view": "^3.3.2",

package/packages/agent-runtime/src/core/InterventionChecker.ts

@@ -2,14 +2,56 @@ import type {
   ArgumentMatcher,
   HumanInterventionPolicy,
   HumanInterventionRule,
+  SecurityBlacklistRule,
   ShouldInterveneParams,
 } from '@lobechat/types';
 
+import { DEFAULT_SECURITY_BLACKLIST } from './defaultSecurityBlacklist';
+
+/**
+ * Result of security blacklist check
+ */
+export interface SecurityCheckResult {
+  /**
+   * Whether the operation is blocked by security rules
+   */
+  blocked: boolean;
+
+  /**
+   * Reason for blocking (if blocked)
+   */
+  reason?: string;
+}
+
 /**
  * Intervention Checker
  * Determines whether a tool call requires human intervention
  */
 export class InterventionChecker {
+  /**
+   * Check if tool call is blocked by security blacklist
+   * This check runs BEFORE all other intervention checks
+   *
+   * @param securityBlacklist - Security blacklist rules
+   * @param toolArgs - Tool call arguments
+   * @returns Security check result
+   */
+  static checkSecurityBlacklist(
+    securityBlacklist: SecurityBlacklistRule[] = [],
+    toolArgs: Record<string, any> = {},
+  ): SecurityCheckResult {
+    for (const rule of securityBlacklist) {
+      if (this.matchesSecurityRule(rule, toolArgs)) {
+        return {
+          blocked: true,
+          reason: rule.description,
+        };
+      }
+    }
+
+    return { blocked: false };
+  }
+
   /**
    * Check if a tool call requires intervention
    *
@@ -19,6 +61,19 @@ export class InterventionChecker {
   static shouldIntervene(params: ShouldInterveneParams): HumanInterventionPolicy {
     const { config, toolArgs = {} } = params;
 
+    // Use default blacklist if not provided
+    const securityBlacklist =
+      params.securityBlacklist !== undefined
+        ? params.securityBlacklist
+        : DEFAULT_SECURITY_BLACKLIST;
+
+    // CRITICAL: Check security blacklist first - this overrides ALL other settings
+    const securityCheck = this.checkSecurityBlacklist(securityBlacklist, toolArgs);
+    if (securityCheck.blocked) {
+      // Security blacklist always requires intervention, even in auto-run mode
+      return 'required';
+    }
+
     // No config means never intervene (auto-execute)
     if (!config) return 'never';
 
@@ -38,6 +93,36 @@ export class InterventionChecker {
     return 'required';
   }
 
+  /**
+   * Check if tool arguments match a security blacklist rule
+   *
+   * @param rule - Security rule to check
+   * @param toolArgs - Tool call arguments
+   * @returns true if matches (should be blocked)
+   */
+  private static matchesSecurityRule(
+    rule: SecurityBlacklistRule,
+    toolArgs: Record<string, any>,
+  ): boolean {
+    // Security rules must have match criteria
+    if (!rule.match) return false;
+
+    // All matchers must match (AND logic)
+    for (const [paramName, matcher] of Object.entries(rule.match)) {
+      const paramValue = toolArgs[paramName];
+
+      // Parameter not present in args - rule doesn't match
+      if (paramValue === undefined) return false;
+
+      // Check if value matches
+      if (!this.matchesArgument(matcher, paramValue)) {
+        return false;
+      }
+    }
+
+    return true;
+  }
+
   /**
    * Check if tool arguments match a rule
    *