@milisp/keke 0.1.28 → 0.1.29
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -2
- package/README.zh-CN.md +1 -1
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -65,8 +65,13 @@ all other settings are documented in [`docs/config.md`](docs/config.md).
|
|
|
65
65
|
|
|
66
66
|
## Safety
|
|
67
67
|
|
|
68
|
-
- **Sandboxing & approvals** —
|
|
69
|
-
|
|
68
|
+
- **Sandboxing & approvals** — shell commands run under an OS sandbox
|
|
69
|
+
(Seatbelt on macOS, Landlock + seccomp on Linux): by default they may write
|
|
70
|
+
only inside the workspace, cannot touch `.git`, and cannot reach the
|
|
71
|
+
network; stepping outside asks you each time. On Windows, which has no
|
|
72
|
+
sandbox, every command asks you instead. A repository's own config can
|
|
73
|
+
tighten that but never loosen it. See
|
|
74
|
+
[`docs/config.md`](docs/config.md#sandbox).
|
|
70
75
|
- **Plugin trust** — repository-provided plugins (hooks, MCP servers) never
|
|
71
76
|
execute on `git clone` alone; a person must approve them, keyed to their
|
|
72
77
|
exact contents, not their path. There's no flag to turn that gate off.
|
package/README.zh-CN.md
CHANGED
|
@@ -64,7 +64,7 @@ Provider 路由、API Key、本地模型、网关、按目录账户及其他设
|
|
|
64
64
|
|
|
65
65
|
## 安全
|
|
66
66
|
|
|
67
|
-
- **沙箱与审批** —
|
|
67
|
+
- **沙箱与审批** — shell 命令运行在操作系统级沙箱中（macOS 用 Seatbelt，Linux 用 Landlock + seccomp）：默认只能写入工作区、不能改动 `.git`、不能访问网络；需要越过沙箱时每次都会询问你。Windows 没有沙箱，每条命令都会先询问你。仓库自带的配置只能收紧、不能放宽沙箱。详见 [`docs/config.md`](docs/config.md#sandbox)。
|
|
68
68
|
- **插件信任** — 仓库自带的插件（hooks、MCP servers）不会仅因 `git clone` 就执行；必须由人按**内容**（而非路径）批准。没有关闭该门禁的开关。
|
|
69
69
|
|
|
70
70
|
## 许可证
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@milisp/keke",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.29",
|
|
4
4
|
"description": "keke is a multi-vendor terminal coding agent.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"bin": {
|
|
@@ -18,12 +18,12 @@
|
|
|
18
18
|
"win32"
|
|
19
19
|
],
|
|
20
20
|
"optionalDependencies": {
|
|
21
|
-
"@milisp/keke-darwin-x64": "0.1.
|
|
22
|
-
"@milisp/keke-darwin-arm64": "0.1.
|
|
23
|
-
"@milisp/keke-linux-x64": "0.1.
|
|
24
|
-
"@milisp/keke-linux-arm64": "0.1.
|
|
25
|
-
"@milisp/keke-win32-x64": "0.1.
|
|
26
|
-
"@milisp/keke-win32-arm64": "0.1.
|
|
21
|
+
"@milisp/keke-darwin-x64": "0.1.29",
|
|
22
|
+
"@milisp/keke-darwin-arm64": "0.1.29",
|
|
23
|
+
"@milisp/keke-linux-x64": "0.1.29",
|
|
24
|
+
"@milisp/keke-linux-arm64": "0.1.29",
|
|
25
|
+
"@milisp/keke-win32-x64": "0.1.29",
|
|
26
|
+
"@milisp/keke-win32-arm64": "0.1.29"
|
|
27
27
|
},
|
|
28
28
|
"repository": {
|
|
29
29
|
"type": "git",
|