@pencil-agent/nano-pencil 2.0.0-beta.8 → 2.0.0

package/dist/extensions/builtin/security-audit/README.md

@@ -1,289 +1,289 @@
-# Security Audit Extension
-
-## 概述
-
-Security Audit Extension 为 NanoPencil 提供安全审计能力，包括：
-- 审计日志记录所有操作
-- 危险命令模式检测
-- 敏感文件访问保护
-- 可选的拦截机制
-
-## 快速开始
-
-### 安装
-
-安全审计作为内置扩展，默认启用。无需额外安装。
-
-### 基本使用
-
-```bash
-# 查看安全面板
-/security
-
-# 查看详细日志
-/security-logs
-
-# 查看统计数据
-/security-stats
-
-# 清除日志
-/security-clear
-```
-
-## 架构设计
-
-### 分层设计
-
-```
-┌─────────────────────────────────────────────────┐
-│           Security Audit Extension              │
-├─────────────────────────────────────────────────┤
-│  ┌─────────────────────────────────────────┐ │
-│  │           Security Interface              │ │  ← 可替换的接口层
-│  │  (标准化接口，支持不同实现)                 │ │
-│  └─────────────────────────────────────────┘ │
-│                      │                         │
-│    ┌─────────────────┼─────────────────┐      │
-│    ▼                 ▼                 ▼      │
-│ ┌────────┐    ┌───────────┐    ┌──────────┐  │
-│ │  v1    │    │   v2     │    │   v3     │  │
-│ │ Light  │    │   Med    │    │  Heavy   │  │  ← 可升级的实现
-│ │ Audit  │    │  Secure  │    │  Guard   │  │
-│ └────────┘    └───────────┘    └──────────┘  │
-└─────────────────────────────────────────────────┘
-```
-
-### 实现层级
-
-| 层级 | 功能 | 模式 |
-|------|------|------|
-| L1 | 审计日志 | 必须 |
-| L2 | 危险识别 | 必须 |
-| L3 | 拦截确认 | 可选 |
-| L4 | 白名单 | 可选 |
-
-## 危险模式
-
-### 默认检测的危险命令模式
-
-```typescript
-const DANGEROUS_PATTERNS = [
-  // 递归删除
-  "rm\\s+-rf",
-  "rmdir\\s+/s",
-  "del\\s+/s",
-
-  // 系统修改
-  "sudo\\s+",
-  "chmod\\s+777",
-  "chown\\s+",
-
-  // 进程控制
-  "kill\\s+-9",
-  "pkill\\s+-9",
-  "killall\\s+",
-
-  // 网络下载执行
-  "curl\\s+.*\\|\\s*sh",
-  "wget\\s+.*\\|\\s*sh",
-
-  // Git 危险操作
-  "git\\s+push\\s+--force",
-
-  // 容器/系统
-  "docker\\s+rm\\s+-f",
-  "systemctl\\s+stop",
-];
-```
-
-### 敏感路径
-
-```typescript
-const SENSITIVE_PATHS = [
-  "~/.ssh/",      // SSH 密钥
-  "~/.aws/",      // AWS 凭证
-  "~/.azure/",    // Azure 凭证
-  ".env",         // 环境变量文件
-  ".env.local",   // 本地环境变量
-  ".env.production", // 生产环境变量
-];
-```
-
-## 插拔指南
-
-### 禁用安全审计
-
-如需禁用安全审计，可以在 `settings.json` 中设置：
-
-```json
-{
-  "extensions": {
-    "security-audit": {
-      "enabled": false
-    }
-  }
-}
-```
-
-### 自定义危险模式
-
-在扩展配置中添加自定义检测模式：
-
-```json
-{
-  "security": {
-    "dangerousPatterns": [
-      "rm\\s+-rf",
-      "custom-pattern"
-    ],
-    "sensitivePaths": [
-      "~/.ssh/",
-      "~/custom-sensitive/"
-    ]
-  }
-}
-```
-
-### 白名单命令
-
-将常用命令加入白名单：
-
-```json
-{
-  "security": {
-    "whitelist": [
-      "npm install",
-      "npm run dev",
-      "git status"
-    ]
-  }
-}
-```
-
-## 升级指南
-
-### 当前版本 (v1 - Light Audit)
-
-- ✅ 审计日志记录
-- ✅ 危险命令检测
-- ✅ 敏感文件检测
-- ⚠️ 警告提示
-
-### 计划: v2 - Med Secure
-
-- ✅ 所有 v1 功能
-- 🔄 用户确认机制
-- 🔄 可配置的拦截级别
-
-### 计划: v3 - Heavy Guard
-
-- ✅ 所有 v2 功能
-- 🔄 沙箱执行环境
-- 🔄 AI 语义分析
-- 🔄 完整操作拦截
-
-### 升级步骤
-
-升级到更高安全级别：
-
-1. **备份配置**
-   ```bash
-   cp ~/.nanopencil/agent/settings.json ~/.nanopencil/agent/settings.json.bak
-   ```
-
-2. **更新扩展**
-   ```bash
-   npm install -g @pencil-agent/nano-pencil@latest
-   ```
-
-3. **配置新级别**
-   ```json
-   {
-     "security": {
-       "mode": "strict",
-       "enableInterception": true
-     }
-   }
-   ```
-
-## API 参考
-
-### SecurityEngine 接口
-
-```typescript
-interface SecurityEngine {
-  // 检查命令是否安全
-  checkCommand(command: string, cwd: string): SecurityCheckResult;
-
-  // 检查文件操作
-  checkFileOperation(operation: string, path: string): SecurityCheckResult;
-
-  // 记录审计日志
-  log(event: AuditEvent): AuditEvent;
-
-  // 查询日志
-  queryLogs(options?: LogQueryOptions): AuditEvent[];
-
-  // 获取统计
-  getStats(): SecurityStats;
-
-  // 清除日志
-  clearLogs(): void;
-
-  // 导出日志
-  exportLogs(format?: "json" | "html"): string;
-}
-```
-
-### 审计日志格式
-
-```json
-{
-  "id": "a1b2c3d4e5f6",
-  "timestamp": "2024-01-01T10:00:00.000Z",
-  "type": "command",
-  "operation": "bash",
-  "target": "rm -rf /tmp/test",
-  "cwd": "/Users/demo/project",
-  "level": "dangerous",
-  "status": "warning",
-  "reason": "Command matches dangerous pattern: rm\\s+-rf",
-  "pattern": "rm\\s+-rf"
-}
-```
-
-## 故障排除
-
-### 日志位置
-
-审计日志存储在：
-```
-~/.nanopencil/agent/security-audit.json
-```
-
-### 查看日志
-
-```bash
-# 使用 nanopencil 命令
-/security-logs 50
-
-# 或直接查看文件
-cat ~/.nanopencil/agent/security-audit.json
-```
-
-### 常见问题
-
-**Q: 危险命令仍然执行了？**
-A: 当前版本 (v1) 只记录和警告，不阻止执行。升级到 v2+ 可启用拦截。
-
-**Q: 如何添加自定义检测？**
-A: 修改扩展配置中的 `dangerousPatterns` 和 `sensitivePaths`。
-
-**Q: 日志太大怎么办？**
-A: 使用 `/security-clear` 清除，或配置 `maxLogEntries` 限制大小。
-
-## 相关文档
-
-- [Extension 开发指南](./extensions)
-- [Settings 配置](./settings)
-- [安全最佳实践](./security)
+# Security Audit Extension
+
+## 概述
+
+Security Audit Extension 为 NanoPencil 提供安全审计能力，包括：
+- 审计日志记录所有操作
+- 危险命令模式检测
+- 敏感文件访问保护
+- 可选的拦截机制
+
+## 快速开始
+
+### 安装
+
+安全审计作为内置扩展，默认启用。无需额外安装。
+
+### 基本使用
+
+```bash
+# 查看安全面板
+/security
+
+# 查看详细日志
+/security-logs
+
+# 查看统计数据
+/security-stats
+
+# 清除日志
+/security-clear
+```
+
+## 架构设计
+
+### 分层设计
+
+```
+┌─────────────────────────────────────────────────┐
+│           Security Audit Extension              │
+├─────────────────────────────────────────────────┤
+│  ┌─────────────────────────────────────────┐ │
+│  │           Security Interface              │ │  ← 可替换的接口层
+│  │  (标准化接口，支持不同实现)                 │ │
+│  └─────────────────────────────────────────┘ │
+│                      │                         │
+│    ┌─────────────────┼─────────────────┐      │
+│    ▼                 ▼                 ▼      │
+│ ┌────────┐    ┌───────────┐    ┌──────────┐  │
+│ │  v1    │    │   v2     │    │   v3     │  │
+│ │ Light  │    │   Med    │    │  Heavy   │  │  ← 可升级的实现
+│ │ Audit  │    │  Secure  │    │  Guard   │  │
+│ └────────┘    └───────────┘    └──────────┘  │
+└─────────────────────────────────────────────────┘
+```
+
+### 实现层级
+
+| 层级 | 功能 | 模式 |
+|------|------|------|
+| L1 | 审计日志 | 必须 |
+| L2 | 危险识别 | 必须 |
+| L3 | 拦截确认 | 可选 |
+| L4 | 白名单 | 可选 |
+
+## 危险模式
+
+### 默认检测的危险命令模式
+
+```typescript
+const DANGEROUS_PATTERNS = [
+  // 递归删除
+  "rm\\s+-rf",
+  "rmdir\\s+/s",
+  "del\\s+/s",
+
+  // 系统修改
+  "sudo\\s+",
+  "chmod\\s+777",
+  "chown\\s+",
+
+  // 进程控制
+  "kill\\s+-9",
+  "pkill\\s+-9",
+  "killall\\s+",
+
+  // 网络下载执行
+  "curl\\s+.*\\|\\s*sh",
+  "wget\\s+.*\\|\\s*sh",
+
+  // Git 危险操作
+  "git\\s+push\\s+--force",
+
+  // 容器/系统
+  "docker\\s+rm\\s+-f",
+  "systemctl\\s+stop",
+];
+```
+
+### 敏感路径
+
+```typescript
+const SENSITIVE_PATHS = [
+  "~/.ssh/",      // SSH 密钥
+  "~/.aws/",      // AWS 凭证
+  "~/.azure/",    // Azure 凭证
+  ".env",         // 环境变量文件
+  ".env.local",   // 本地环境变量
+  ".env.production", // 生产环境变量
+];
+```
+
+## 插拔指南
+
+### 禁用安全审计
+
+如需禁用安全审计，可以在 `settings.json` 中设置：
+
+```json
+{
+  "extensions": {
+    "security-audit": {
+      "enabled": false
+    }
+  }
+}
+```
+
+### 自定义危险模式
+
+在扩展配置中添加自定义检测模式：
+
+```json
+{
+  "security": {
+    "dangerousPatterns": [
+      "rm\\s+-rf",
+      "custom-pattern"
+    ],
+    "sensitivePaths": [
+      "~/.ssh/",
+      "~/custom-sensitive/"
+    ]
+  }
+}
+```
+
+### 白名单命令
+
+将常用命令加入白名单：
+
+```json
+{
+  "security": {
+    "whitelist": [
+      "npm install",
+      "npm run dev",
+      "git status"
+    ]
+  }
+}
+```
+
+## 升级指南
+
+### 当前版本 (v1 - Light Audit)
+
+- ✅ 审计日志记录
+- ✅ 危险命令检测
+- ✅ 敏感文件检测
+- ⚠️ 警告提示
+
+### 计划: v2 - Med Secure
+
+- ✅ 所有 v1 功能
+- 🔄 用户确认机制
+- 🔄 可配置的拦截级别
+
+### 计划: v3 - Heavy Guard
+
+- ✅ 所有 v2 功能
+- 🔄 沙箱执行环境
+- 🔄 AI 语义分析
+- 🔄 完整操作拦截
+
+### 升级步骤
+
+升级到更高安全级别：
+
+1. **备份配置**
+   ```bash
+   cp ~/.nanopencil/agent/settings.json ~/.nanopencil/agent/settings.json.bak
+   ```
+
+2. **更新扩展**
+   ```bash
+   npm install -g @pencil-agent/nano-pencil@latest
+   ```
+
+3. **配置新级别**
+   ```json
+   {
+     "security": {
+       "mode": "strict",
+       "enableInterception": true
+     }
+   }
+   ```
+
+## API 参考
+
+### SecurityEngine 接口
+
+```typescript
+interface SecurityEngine {
+  // 检查命令是否安全
+  checkCommand(command: string, cwd: string): SecurityCheckResult;
+
+  // 检查文件操作
+  checkFileOperation(operation: string, path: string): SecurityCheckResult;
+
+  // 记录审计日志
+  log(event: AuditEvent): AuditEvent;
+
+  // 查询日志
+  queryLogs(options?: LogQueryOptions): AuditEvent[];
+
+  // 获取统计
+  getStats(): SecurityStats;
+
+  // 清除日志
+  clearLogs(): void;
+
+  // 导出日志
+  exportLogs(format?: "json" | "html"): string;
+}
+```
+
+### 审计日志格式
+
+```json
+{
+  "id": "a1b2c3d4e5f6",
+  "timestamp": "2024-01-01T10:00:00.000Z",
+  "type": "command",
+  "operation": "bash",
+  "target": "rm -rf /tmp/test",
+  "cwd": "/Users/demo/project",
+  "level": "dangerous",
+  "status": "warning",
+  "reason": "Command matches dangerous pattern: rm\\s+-rf",
+  "pattern": "rm\\s+-rf"
+}
+```
+
+## 故障排除
+
+### 日志位置
+
+审计日志存储在：
+```
+~/.nanopencil/agent/security-audit.json
+```
+
+### 查看日志
+
+```bash
+# 使用 nanopencil 命令
+/security-logs 50
+
+# 或直接查看文件
+cat ~/.nanopencil/agent/security-audit.json
+```
+
+### 常见问题
+
+**Q: 危险命令仍然执行了？**
+A: 当前版本 (v1) 只记录和警告，不阻止执行。升级到 v2+ 可启用拦截。
+
+**Q: 如何添加自定义检测？**
+A: 修改扩展配置中的 `dangerousPatterns` 和 `sensitivePaths`。
+
+**Q: 日志太大怎么办？**
+A: 使用 `/security-clear` 清除，或配置 `maxLogEntries` 限制大小。
+
+## 相关文档
+
+- [Extension 开发指南](./extensions)
+- [Settings 配置](./settings)
+- [安全最佳实践](./security)

package/dist/extensions/builtin/task/task-store.d.ts

@@ -5,6 +5,9 @@
  * [HERE]: extensions/builtin/task/task-store.ts - task state management with atomic file writes
  */
 import type { Task } from "./task-types.js";
+type TaskUpdateListener = () => void;
+/** Subscribe to task update notifications. Returns unsubscribe function. */
+export declare function onTasksUpdated(listener: TaskUpdateListener): () => void;
 export declare function getTasksDir(agentDir: string, taskListId?: string): string;
 /**
  * Create a new task. Returns the created task with assigned ID.
@@ -36,3 +39,4 @@ export declare function blockTask(agentDir: string, taskListId: string, fromTask
  * Reset a task list - clears all tasks but preserves high water mark.
  */
 export declare function resetTaskList(agentDir: string, taskListId: string): Promise<void>;
+export {};

package/dist/extensions/builtin/task/task-store.js

@@ -1 +1 @@
-var M=Object.defineProperty;var i=(t,n)=>M(t,"name",{value:n,configurable:!0});import{mkdir as N,readdir as w,readFile as b,rename as g,unlink as T,writeFile as d}from"node:fs/promises";import{join as u}from"node:path";import{sanitizePathComponent as x,DEFAULT_TASK_LIST_ID as F}from"./task-types.js";const P=".highwatermark";function s(t,n=F){return u(t,"tasks",x(n))}i(s,"getTasksDir");function l(t,n,e){return u(s(t,n),`${x(e)}.json`)}i(l,"getTaskPath");function B(t,n){return u(s(t,n),P)}i(B,"getHighWaterMarkPath");async function W(t,n){const e=`${t}.tmp`;await d(e,JSON.stringify(n,null,2),"utf-8"),await g(e,t)}i(W,"atomicWriteJson");async function p(t,n){try{const e=await b(B(t,n),"utf-8"),r=parseInt(e.trim(),10);return isNaN(r)?0:r}catch{return 0}}i(p,"readHighWaterMark");async function j(t,n,e){await d(B(t,n),String(e),"utf-8")}i(j,"writeHighWaterMark");async function S(t,n){const e=s(t,n);return await N(e,{recursive:!0}),e}i(S,"ensureTasksDir");async function H(t,n){const e=s(t,n);let r;try{r=await w(e)}catch{return 0}let c=0;for(const a of r){if(!a.endsWith(".json"))continue;const o=parseInt(a.replace(".json",""),10);!isNaN(o)&&o>c&&(c=o)}return c}i(H,"findHighestTaskIdFromFiles");async function _(t,n){const[e,r]=await Promise.all([H(t,n),p(t,n)]);return Math.max(e,r)}i(_,"findHighestTaskId");async function O(t,n,e){await S(t,n);const r=await _(t,n),c=String(r+1),a={id:c,...e},o=l(t,n,c);return await W(o,a),a}i(O,"createTask");async function f(t,n,e){const r=l(t,n,e);try{const c=await b(r,"utf-8"),a=JSON.parse(c);return!a.id||!a.subject||!a.status?null:a}catch{return null}}i(f,"getTask");async function y(t,n,e,r){const c=await f(t,n,e);if(!c)return null;const a={...c,...r,id:e},o=l(t,n,e);return await W(o,a),a}i(y,"updateTask");async function R(t,n,e){const r=l(t,n,e);try{const c=parseInt(e,10);if(!isNaN(c)){const o=await p(t,n);c>o&&await j(t,n,c)}await T(r);const a=await A(t,n);for(const o of a){const m=o.blocks.filter(h=>h!==e),k=o.blockedBy.filter(h=>h!==e);(m.length!==o.blocks.length||k.length!==o.blockedBy.length)&&await y(t,n,o.id,{blocks:m,blockedBy:k})}return!0}catch{return!1}}i(R,"deleteTask");async function A(t,n){const e=s(t,n);let r;try{r=await w(e)}catch{return[]}const c=r.filter(o=>o.endsWith(".json")).map(o=>o.replace(".json",""));return(await Promise.all(c.map(o=>f(t,n,o)))).filter(o=>o!==null)}i(A,"listTasks");async function $(t,n,e,r){const[c,a]=await Promise.all([f(t,n,e),f(t,n,r)]);return!c||!a?!1:(c.blocks.includes(r)||await y(t,n,e,{blocks:[...c.blocks,r]}),a.blockedBy.includes(e)||await y(t,n,r,{blockedBy:[...a.blockedBy,e]}),!0)}i($,"blockTask");async function z(t,n){const e=s(t,n),r=await H(t,n);if(r>0){const a=await p(t,n);r>a&&await j(t,n,r)}let c;try{c=await w(e)}catch{return}for(const a of c)a.endsWith(".json")&&!a.startsWith(".")&&await T(u(e,a)).catch(()=>{})}i(z,"resetTaskList");export{$ as blockTask,O as createTask,R as deleteTask,f as getTask,s as getTasksDir,A as listTasks,z as resetTaskList,y as updateTask};
+var g=Object.defineProperty;var i=(t,n)=>g(t,"name",{value:n,configurable:!0});import{mkdir as F,readdir as p,readFile as b,rename as S,unlink as x,writeFile as B}from"node:fs/promises";import{join as u}from"node:path";import{sanitizePathComponent as W,DEFAULT_TASK_LIST_ID as P}from"./task-types.js";const y=new Set;function l(){for(const t of y)try{t()}catch{}}i(l,"notifyTasksUpdated");function R(t){return y.add(t),()=>{y.delete(t)}}i(R,"onTasksUpdated");const _=".highwatermark";function s(t,n=P){return u(t,"tasks",W(n))}i(s,"getTasksDir");function f(t,n,e){return u(s(t,n),`${W(e)}.json`)}i(f,"getTaskPath");function j(t,n){return u(s(t,n),_)}i(j,"getHighWaterMarkPath");async function H(t,n){const e=`${t}.tmp`;await B(e,JSON.stringify(n,null,2),"utf-8"),await S(e,t)}i(H,"atomicWriteJson");async function m(t,n){try{const e=await b(j(t,n),"utf-8"),r=parseInt(e.trim(),10);return isNaN(r)?0:r}catch{return 0}}i(m,"readHighWaterMark");async function M(t,n,e){await B(j(t,n),String(e),"utf-8")}i(M,"writeHighWaterMark");async function A(t,n){const e=s(t,n);return await F(e,{recursive:!0}),e}i(A,"ensureTasksDir");async function N(t,n){const e=s(t,n);let r;try{r=await p(e)}catch{return 0}let c=0;for(const a of r){if(!a.endsWith(".json"))continue;const o=parseInt(a.replace(".json",""),10);!isNaN(o)&&o>c&&(c=o)}return c}i(N,"findHighestTaskIdFromFiles");async function U(t,n){const[e,r]=await Promise.all([N(t,n),m(t,n)]);return Math.max(e,r)}i(U,"findHighestTaskId");async function $(t,n,e){await A(t,n);const r=await U(t,n),c=String(r+1),a={id:c,...e},o=f(t,n,c);return await H(o,a),l(),a}i($,"createTask");async function h(t,n,e){const r=f(t,n,e);try{const c=await b(r,"utf-8"),a=JSON.parse(c);return!a.id||!a.subject||!a.status?null:a}catch{return null}}i(h,"getTask");async function k(t,n,e,r){const c=await h(t,n,e);if(!c)return null;const a={...c,...r,id:e},o=f(t,n,e);return await H(o,a),l(),a}i(k,"updateTask");async function z(t,n,e){const r=f(t,n,e);try{const c=parseInt(e,10);if(!isNaN(c)){const o=await m(t,n);c>o&&await M(t,n,c)}await x(r),l();const a=await E(t,n);for(const o of a){const d=o.blocks.filter(w=>w!==e),T=o.blockedBy.filter(w=>w!==e);(d.length!==o.blocks.length||T.length!==o.blockedBy.length)&&await k(t,n,o.id,{blocks:d,blockedBy:T})}return!0}catch{return!1}}i(z,"deleteTask");async function E(t,n){const e=s(t,n);let r;try{r=await p(e)}catch{return[]}const c=r.filter(o=>o.endsWith(".json")).map(o=>o.replace(".json",""));return(await Promise.all(c.map(o=>h(t,n,o)))).filter(o=>o!==null)}i(E,"listTasks");async function C(t,n,e,r){const[c,a]=await Promise.all([h(t,n,e),h(t,n,r)]);return!c||!a?!1:(c.blocks.includes(r)||await k(t,n,e,{blocks:[...c.blocks,r]}),a.blockedBy.includes(e)||await k(t,n,r,{blockedBy:[...a.blockedBy,e]}),!0)}i(C,"blockTask");async function G(t,n){const e=s(t,n),r=await N(t,n);if(r>0){const a=await m(t,n);r>a&&await M(t,n,r)}let c;try{c=await p(e)}catch{return}for(const a of c)a.endsWith(".json")&&!a.startsWith(".")&&await x(u(e,a)).catch(()=>{});l()}i(G,"resetTaskList");export{C as blockTask,$ as createTask,z as deleteTask,h as getTask,s as getTasksDir,E as listTasks,R as onTasksUpdated,G as resetTaskList,k as updateTask};