@qodercn-ai/qoderclicn 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. package/LICENSE +202 -0
  2. package/README.md +153 -0
  3. package/bundle/builtin/agent-creator/SKILL.md +327 -0
  4. package/bundle/builtin/hook-config/SKILL.md +480 -0
  5. package/bundle/builtin/mcp-config/SKILL.md +155 -0
  6. package/bundle/builtin/skill-creator/SKILL.md +294 -0
  7. package/bundle/node_modules/@google/gemini-cli-devtools/dist/client/main.js +101 -0
  8. package/bundle/node_modules/@google/gemini-cli-devtools/dist/src/_client-assets.d.ts +7 -0
  9. package/bundle/node_modules/@google/gemini-cli-devtools/dist/src/_client-assets.js +9 -0
  10. package/bundle/node_modules/@google/gemini-cli-devtools/dist/src/index.d.ts +48 -0
  11. package/bundle/node_modules/@google/gemini-cli-devtools/dist/src/index.js +323 -0
  12. package/bundle/node_modules/@google/gemini-cli-devtools/dist/src/types.d.ts +36 -0
  13. package/bundle/node_modules/@google/gemini-cli-devtools/dist/src/types.js +7 -0
  14. package/bundle/node_modules/@google/gemini-cli-devtools/package.json +34 -0
  15. package/bundle/policies/sandbox-default.toml +19 -0
  16. package/bundle/qoderclicn.js +51 -0
  17. package/bundle/sandbox-macos-permissive-open.sb +27 -0
  18. package/bundle/sandbox-macos-permissive-proxied.sb +37 -0
  19. package/bundle/sandbox-macos-restrictive-open.sb +96 -0
  20. package/bundle/sandbox-macos-restrictive-proxied.sb +98 -0
  21. package/bundle/sandbox-macos-strict-open.sb +131 -0
  22. package/bundle/sandbox-macos-strict-proxied.sb +133 -0
  23. package/package.json +43 -0
package/bundle/sandbox-macos-permissive-open.sb ADDED
@@ -0,0 +1,27 @@
1
+ (version 1)
2
+
3
+ ;; allow everything by default
4
+ (allow default)
5
+
6
+ ;; deny all writes EXCEPT under specific paths
7
+ (deny file-write*)
8
+ (allow file-write*
9
+ (subpath (param "TARGET_DIR"))
10
+ (subpath (param "TMP_DIR"))
11
+ (subpath (param "CACHE_DIR"))
12
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
13
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
14
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
15
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
16
+ ;; Allow writes to included directories from --add-dir
17
+ (subpath (param "INCLUDE_DIR_0"))
18
+ (subpath (param "INCLUDE_DIR_1"))
19
+ (subpath (param "INCLUDE_DIR_2"))
20
+ (subpath (param "INCLUDE_DIR_3"))
21
+ (subpath (param "INCLUDE_DIR_4"))
22
+ (literal "/dev/stdout")
23
+ (literal "/dev/stderr")
24
+ (literal "/dev/null")
25
+ (literal "/dev/ptmx")
26
+ (regex #"^/dev/ttys[0-9]*$")
27
+ )
package/bundle/sandbox-macos-permissive-proxied.sb ADDED
@@ -0,0 +1,37 @@
1
+ (version 1)
2
+
3
+ ;; allow everything by default
4
+ (allow default)
5
+
6
+ ;; deny all writes EXCEPT under specific paths
7
+ (deny file-write*)
8
+ (allow file-write*
9
+ (subpath (param "TARGET_DIR"))
10
+ (subpath (param "TMP_DIR"))
11
+ (subpath (param "CACHE_DIR"))
12
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
13
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
14
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
15
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
16
+ ;; Allow writes to included directories from --add-dir
17
+ (subpath (param "INCLUDE_DIR_0"))
18
+ (subpath (param "INCLUDE_DIR_1"))
19
+ (subpath (param "INCLUDE_DIR_2"))
20
+ (subpath (param "INCLUDE_DIR_3"))
21
+ (subpath (param "INCLUDE_DIR_4"))
22
+ (literal "/dev/stdout")
23
+ (literal "/dev/stderr")
24
+ (literal "/dev/null")
25
+ )
26
+
27
+ ;; deny all inbound network traffic EXCEPT on debugger port
28
+ (deny network-inbound)
29
+ (allow network-inbound (local ip "localhost:9229"))
30
+
31
+ ;; deny all outbound network traffic EXCEPT through proxy on localhost:8877
32
+ ;; set `QODER_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
33
+ ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
34
+ (deny network-outbound)
35
+ (allow network-outbound (remote tcp "localhost:8877"))
36
+
37
+ (allow network-bind (local ip "*:*"))
package/bundle/sandbox-macos-restrictive-open.sb ADDED
@@ -0,0 +1,96 @@
1
+ (version 1)
2
+
3
+ ;; deny everything by default
4
+ (deny default)
5
+
6
+ ;; allow reading files from anywhere on host
7
+ (allow file-read*)
8
+
9
+ ;; allow exec/fork (children inherit policy)
10
+ (allow process-exec)
11
+ (allow process-fork)
12
+
13
+ ;; allow signals to self, e.g. SIGPIPE on write to closed pipe
14
+ (allow signal (target self))
15
+
16
+ ;; allow read access to specific information about system
17
+ ;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
18
+ (allow sysctl-read
19
+ (sysctl-name "hw.activecpu")
20
+ (sysctl-name "hw.busfrequency_compat")
21
+ (sysctl-name "hw.byteorder")
22
+ (sysctl-name "hw.cacheconfig")
23
+ (sysctl-name "hw.cachelinesize_compat")
24
+ (sysctl-name "hw.cpufamily")
25
+ (sysctl-name "hw.cpufrequency_compat")
26
+ (sysctl-name "hw.cputype")
27
+ (sysctl-name "hw.l1dcachesize_compat")
28
+ (sysctl-name "hw.l1icachesize_compat")
29
+ (sysctl-name "hw.l2cachesize_compat")
30
+ (sysctl-name "hw.l3cachesize_compat")
31
+ (sysctl-name "hw.logicalcpu_max")
32
+ (sysctl-name "hw.machine")
33
+ (sysctl-name "hw.ncpu")
34
+ (sysctl-name "hw.nperflevels")
35
+ (sysctl-name "hw.optional.arm.FEAT_BF16")
36
+ (sysctl-name "hw.optional.arm.FEAT_DotProd")
37
+ (sysctl-name "hw.optional.arm.FEAT_FCMA")
38
+ (sysctl-name "hw.optional.arm.FEAT_FHM")
39
+ (sysctl-name "hw.optional.arm.FEAT_FP16")
40
+ (sysctl-name "hw.optional.arm.FEAT_I8MM")
41
+ (sysctl-name "hw.optional.arm.FEAT_JSCVT")
42
+ (sysctl-name "hw.optional.arm.FEAT_LSE")
43
+ (sysctl-name "hw.optional.arm.FEAT_RDM")
44
+ (sysctl-name "hw.optional.arm.FEAT_SHA512")
45
+ (sysctl-name "hw.optional.armv8_2_sha512")
46
+ (sysctl-name "hw.packages")
47
+ (sysctl-name "hw.pagesize_compat")
48
+ (sysctl-name "hw.physicalcpu_max")
49
+ (sysctl-name "hw.tbfrequency_compat")
50
+ (sysctl-name "hw.vectorunit")
51
+ (sysctl-name "kern.hostname")
52
+ (sysctl-name "kern.maxfilesperproc")
53
+ (sysctl-name "kern.osproductversion")
54
+ (sysctl-name "kern.osrelease")
55
+ (sysctl-name "kern.ostype")
56
+ (sysctl-name "kern.osvariant_status")
57
+ (sysctl-name "kern.osversion")
58
+ (sysctl-name "kern.secure_kernel")
59
+ (sysctl-name "kern.usrstack64")
60
+ (sysctl-name "kern.version")
61
+ (sysctl-name "sysctl.proc_cputype")
62
+ (sysctl-name-prefix "hw.perflevel")
63
+ )
64
+
65
+ ;; allow writes to specific paths
66
+ (allow file-write*
67
+ (subpath (param "TARGET_DIR"))
68
+ (subpath (param "TMP_DIR"))
69
+ (subpath (param "CACHE_DIR"))
70
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
71
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
72
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
73
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
74
+ ;; Allow writes to included directories from --add-dir
75
+ (subpath (param "INCLUDE_DIR_0"))
76
+ (subpath (param "INCLUDE_DIR_1"))
77
+ (subpath (param "INCLUDE_DIR_2"))
78
+ (subpath (param "INCLUDE_DIR_3"))
79
+ (subpath (param "INCLUDE_DIR_4"))
80
+ (literal "/dev/stdout")
81
+ (literal "/dev/stderr")
82
+ (literal "/dev/null")
83
+ )
84
+
85
+ ;; allow communication with sysmond for process listing (e.g. for pgrep)
86
+ (allow mach-lookup (global-name "com.apple.sysmond"))
87
+
88
+ ;; enable terminal access required by ink
89
+ ;; fixes setRawMode EPERM failure (at node:tty:81:24)
90
+ (allow file-ioctl (regex #"^/dev/tty.*"))
91
+
92
+ ;; allow inbound network traffic on debugger port
93
+ (allow network-inbound (local ip "localhost:9229"))
94
+
95
+ ;; allow all outbound network traffic
96
+ (allow network-outbound)
package/bundle/sandbox-macos-restrictive-proxied.sb ADDED
@@ -0,0 +1,98 @@
1
+ (version 1)
2
+
3
+ ;; deny everything by default
4
+ (deny default)
5
+
6
+ ;; allow reading files from anywhere on host
7
+ (allow file-read*)
8
+
9
+ ;; allow exec/fork (children inherit policy)
10
+ (allow process-exec)
11
+ (allow process-fork)
12
+
13
+ ;; allow signals to self, e.g. SIGPIPE on write to closed pipe
14
+ (allow signal (target self))
15
+
16
+ ;; allow read access to specific information about system
17
+ ;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
18
+ (allow sysctl-read
19
+ (sysctl-name "hw.activecpu")
20
+ (sysctl-name "hw.busfrequency_compat")
21
+ (sysctl-name "hw.byteorder")
22
+ (sysctl-name "hw.cacheconfig")
23
+ (sysctl-name "hw.cachelinesize_compat")
24
+ (sysctl-name "hw.cpufamily")
25
+ (sysctl-name "hw.cpufrequency_compat")
26
+ (sysctl-name "hw.cputype")
27
+ (sysctl-name "hw.l1dcachesize_compat")
28
+ (sysctl-name "hw.l1icachesize_compat")
29
+ (sysctl-name "hw.l2cachesize_compat")
30
+ (sysctl-name "hw.l3cachesize_compat")
31
+ (sysctl-name "hw.logicalcpu_max")
32
+ (sysctl-name "hw.machine")
33
+ (sysctl-name "hw.ncpu")
34
+ (sysctl-name "hw.nperflevels")
35
+ (sysctl-name "hw.optional.arm.FEAT_BF16")
36
+ (sysctl-name "hw.optional.arm.FEAT_DotProd")
37
+ (sysctl-name "hw.optional.arm.FEAT_FCMA")
38
+ (sysctl-name "hw.optional.arm.FEAT_FHM")
39
+ (sysctl-name "hw.optional.arm.FEAT_FP16")
40
+ (sysctl-name "hw.optional.arm.FEAT_I8MM")
41
+ (sysctl-name "hw.optional.arm.FEAT_JSCVT")
42
+ (sysctl-name "hw.optional.arm.FEAT_LSE")
43
+ (sysctl-name "hw.optional.arm.FEAT_RDM")
44
+ (sysctl-name "hw.optional.arm.FEAT_SHA512")
45
+ (sysctl-name "hw.optional.armv8_2_sha512")
46
+ (sysctl-name "hw.packages")
47
+ (sysctl-name "hw.pagesize_compat")
48
+ (sysctl-name "hw.physicalcpu_max")
49
+ (sysctl-name "hw.tbfrequency_compat")
50
+ (sysctl-name "hw.vectorunit")
51
+ (sysctl-name "kern.hostname")
52
+ (sysctl-name "kern.maxfilesperproc")
53
+ (sysctl-name "kern.osproductversion")
54
+ (sysctl-name "kern.osrelease")
55
+ (sysctl-name "kern.ostype")
56
+ (sysctl-name "kern.osvariant_status")
57
+ (sysctl-name "kern.osversion")
58
+ (sysctl-name "kern.secure_kernel")
59
+ (sysctl-name "kern.usrstack64")
60
+ (sysctl-name "kern.version")
61
+ (sysctl-name "sysctl.proc_cputype")
62
+ (sysctl-name-prefix "hw.perflevel")
63
+ )
64
+
65
+ ;; allow writes to specific paths
66
+ (allow file-write*
67
+ (subpath (param "TARGET_DIR"))
68
+ (subpath (param "TMP_DIR"))
69
+ (subpath (param "CACHE_DIR"))
70
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
71
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
72
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
73
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
74
+ ;; Allow writes to included directories from --add-dir
75
+ (subpath (param "INCLUDE_DIR_0"))
76
+ (subpath (param "INCLUDE_DIR_1"))
77
+ (subpath (param "INCLUDE_DIR_2"))
78
+ (subpath (param "INCLUDE_DIR_3"))
79
+ (subpath (param "INCLUDE_DIR_4"))
80
+ (literal "/dev/stdout")
81
+ (literal "/dev/stderr")
82
+ (literal "/dev/null")
83
+ )
84
+
85
+ ;; allow communication with sysmond for process listing (e.g. for pgrep)
86
+ (allow mach-lookup (global-name "com.apple.sysmond"))
87
+
88
+ ;; enable terminal access required by ink
89
+ ;; fixes setRawMode EPERM failure (at node:tty:81:24)
90
+ (allow file-ioctl (regex #"^/dev/tty.*"))
91
+
92
+ ;; allow inbound network traffic on debugger port
93
+ (allow network-inbound (local ip "localhost:9229"))
94
+
95
+ ;; allow outbound network traffic through proxy on localhost:8877
96
+ ;; set `QODER_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
97
+ ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
98
+ (allow network-outbound (remote tcp "localhost:8877"))
package/bundle/sandbox-macos-strict-open.sb ADDED
@@ -0,0 +1,131 @@
1
+ (version 1)
2
+
3
+ ;; deny everything by default
4
+ (deny default)
5
+
6
+ ;; allow reading ONLY from working directory, system paths, and essential user paths
7
+ (allow file-read*
8
+ (literal "/")
9
+ (subpath (param "TARGET_DIR"))
10
+ (subpath (param "TMP_DIR"))
11
+ (subpath (param "CACHE_DIR"))
12
+ ;; Only allow reading essential dotfiles/directories under HOME, not the entire HOME
13
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
14
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
15
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
16
+ (literal (string-append (param "HOME_DIR") "/.gitconfig"))
17
+ (subpath (string-append (param "HOME_DIR") "/.nvm"))
18
+ (subpath (string-append (param "HOME_DIR") "/.fnm"))
19
+ (subpath (string-append (param "HOME_DIR") "/.node"))
20
+ (subpath (string-append (param "HOME_DIR") "/.config"))
21
+ ;; Allow reads from included directories
22
+ (subpath (param "INCLUDE_DIR_0"))
23
+ (subpath (param "INCLUDE_DIR_1"))
24
+ (subpath (param "INCLUDE_DIR_2"))
25
+ (subpath (param "INCLUDE_DIR_3"))
26
+ (subpath (param "INCLUDE_DIR_4"))
27
+ ;; System paths required for Node.js, shell, and common tools
28
+ (subpath "/usr")
29
+ (subpath "/bin")
30
+ (subpath "/sbin")
31
+ (subpath "/Library")
32
+ (subpath "/System")
33
+ (subpath "/private")
34
+ (subpath "/dev")
35
+ (subpath "/etc")
36
+ (subpath "/opt")
37
+ (subpath "/Applications")
38
+ )
39
+
40
+ ;; allow path traversal everywhere (metadata only: stat/lstat, NOT readdir or file content)
41
+ ;; this is needed for Node.js module resolution to traverse intermediate directories
42
+ (allow file-read-metadata)
43
+
44
+ ;; allow exec/fork (children inherit policy)
45
+ (allow process-exec)
46
+ (allow process-fork)
47
+
48
+ ;; allow signals to self, e.g. SIGPIPE on write to closed pipe
49
+ (allow signal (target self))
50
+
51
+ ;; allow read access to specific information about system
52
+ ;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
53
+ (allow sysctl-read
54
+ (sysctl-name "hw.activecpu")
55
+ (sysctl-name "hw.busfrequency_compat")
56
+ (sysctl-name "hw.byteorder")
57
+ (sysctl-name "hw.cacheconfig")
58
+ (sysctl-name "hw.cachelinesize_compat")
59
+ (sysctl-name "hw.cpufamily")
60
+ (sysctl-name "hw.cpufrequency_compat")
61
+ (sysctl-name "hw.cputype")
62
+ (sysctl-name "hw.l1dcachesize_compat")
63
+ (sysctl-name "hw.l1icachesize_compat")
64
+ (sysctl-name "hw.l2cachesize_compat")
65
+ (sysctl-name "hw.l3cachesize_compat")
66
+ (sysctl-name "hw.logicalcpu_max")
67
+ (sysctl-name "hw.machine")
68
+ (sysctl-name "hw.ncpu")
69
+ (sysctl-name "hw.nperflevels")
70
+ (sysctl-name "hw.optional.arm.FEAT_BF16")
71
+ (sysctl-name "hw.optional.arm.FEAT_DotProd")
72
+ (sysctl-name "hw.optional.arm.FEAT_FCMA")
73
+ (sysctl-name "hw.optional.arm.FEAT_FHM")
74
+ (sysctl-name "hw.optional.arm.FEAT_FP16")
75
+ (sysctl-name "hw.optional.arm.FEAT_I8MM")
76
+ (sysctl-name "hw.optional.arm.FEAT_JSCVT")
77
+ (sysctl-name "hw.optional.arm.FEAT_LSE")
78
+ (sysctl-name "hw.optional.arm.FEAT_RDM")
79
+ (sysctl-name "hw.optional.arm.FEAT_SHA512")
80
+ (sysctl-name "hw.optional.armv8_2_sha512")
81
+ (sysctl-name "hw.packages")
82
+ (sysctl-name "hw.pagesize_compat")
83
+ (sysctl-name "hw.physicalcpu_max")
84
+ (sysctl-name "hw.tbfrequency_compat")
85
+ (sysctl-name "hw.vectorunit")
86
+ (sysctl-name "kern.hostname")
87
+ (sysctl-name "kern.maxfilesperproc")
88
+ (sysctl-name "kern.osproductversion")
89
+ (sysctl-name "kern.osrelease")
90
+ (sysctl-name "kern.ostype")
91
+ (sysctl-name "kern.osvariant_status")
92
+ (sysctl-name "kern.osversion")
93
+ (sysctl-name "kern.secure_kernel")
94
+ (sysctl-name "kern.usrstack64")
95
+ (sysctl-name "kern.version")
96
+ (sysctl-name "sysctl.proc_cputype")
97
+ (sysctl-name-prefix "hw.perflevel")
98
+ )
99
+
100
+ ;; allow writes to specific paths
101
+ (allow file-write*
102
+ (subpath (param "TARGET_DIR"))
103
+ (subpath (param "TMP_DIR"))
104
+ (subpath (param "CACHE_DIR"))
105
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
106
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
107
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
108
+ (literal (string-append (param "HOME_DIR") "/.gitconfig"))
109
+ ;; Allow writes to included directories from --add-dir
110
+ (subpath (param "INCLUDE_DIR_0"))
111
+ (subpath (param "INCLUDE_DIR_1"))
112
+ (subpath (param "INCLUDE_DIR_2"))
113
+ (subpath (param "INCLUDE_DIR_3"))
114
+ (subpath (param "INCLUDE_DIR_4"))
115
+ (literal "/dev/stdout")
116
+ (literal "/dev/stderr")
117
+ (literal "/dev/null")
118
+ )
119
+
120
+ ;; allow communication with sysmond for process listing (e.g. for pgrep)
121
+ (allow mach-lookup (global-name "com.apple.sysmond"))
122
+
123
+ ;; enable terminal access required by ink
124
+ ;; fixes setRawMode EPERM failure (at node:tty:81:24)
125
+ (allow file-ioctl (regex #"^/dev/tty.*"))
126
+
127
+ ;; allow inbound network traffic on debugger port
128
+ (allow network-inbound (local ip "localhost:9229"))
129
+
130
+ ;; allow all outbound network traffic
131
+ (allow network-outbound)
package/bundle/sandbox-macos-strict-proxied.sb ADDED
@@ -0,0 +1,133 @@
1
+ (version 1)
2
+
3
+ ;; deny everything by default
4
+ (deny default)
5
+
6
+ ;; allow reading ONLY from working directory, system paths, and essential user paths
7
+ (allow file-read*
8
+ (literal "/")
9
+ (subpath (param "TARGET_DIR"))
10
+ (subpath (param "TMP_DIR"))
11
+ (subpath (param "CACHE_DIR"))
12
+ ;; Only allow reading essential dotfiles/directories under HOME, not the entire HOME
13
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
14
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
15
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
16
+ (literal (string-append (param "HOME_DIR") "/.gitconfig"))
17
+ (subpath (string-append (param "HOME_DIR") "/.nvm"))
18
+ (subpath (string-append (param "HOME_DIR") "/.fnm"))
19
+ (subpath (string-append (param "HOME_DIR") "/.node"))
20
+ (subpath (string-append (param "HOME_DIR") "/.config"))
21
+ ;; Allow reads from included directories
22
+ (subpath (param "INCLUDE_DIR_0"))
23
+ (subpath (param "INCLUDE_DIR_1"))
24
+ (subpath (param "INCLUDE_DIR_2"))
25
+ (subpath (param "INCLUDE_DIR_3"))
26
+ (subpath (param "INCLUDE_DIR_4"))
27
+ ;; System paths required for Node.js, shell, and common tools
28
+ (subpath "/usr")
29
+ (subpath "/bin")
30
+ (subpath "/sbin")
31
+ (subpath "/Library")
32
+ (subpath "/System")
33
+ (subpath "/private")
34
+ (subpath "/dev")
35
+ (subpath "/etc")
36
+ (subpath "/opt")
37
+ (subpath "/Applications")
38
+ )
39
+
40
+ ;; allow path traversal everywhere (metadata only: stat/lstat, NOT readdir or file content)
41
+ ;; this is needed for Node.js module resolution to traverse intermediate directories
42
+ (allow file-read-metadata)
43
+
44
+ ;; allow exec/fork (children inherit policy)
45
+ (allow process-exec)
46
+ (allow process-fork)
47
+
48
+ ;; allow signals to self, e.g. SIGPIPE on write to closed pipe
49
+ (allow signal (target self))
50
+
51
+ ;; allow read access to specific information about system
52
+ ;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
53
+ (allow sysctl-read
54
+ (sysctl-name "hw.activecpu")
55
+ (sysctl-name "hw.busfrequency_compat")
56
+ (sysctl-name "hw.byteorder")
57
+ (sysctl-name "hw.cacheconfig")
58
+ (sysctl-name "hw.cachelinesize_compat")
59
+ (sysctl-name "hw.cpufamily")
60
+ (sysctl-name "hw.cpufrequency_compat")
61
+ (sysctl-name "hw.cputype")
62
+ (sysctl-name "hw.l1dcachesize_compat")
63
+ (sysctl-name "hw.l1icachesize_compat")
64
+ (sysctl-name "hw.l2cachesize_compat")
65
+ (sysctl-name "hw.l3cachesize_compat")
66
+ (sysctl-name "hw.logicalcpu_max")
67
+ (sysctl-name "hw.machine")
68
+ (sysctl-name "hw.ncpu")
69
+ (sysctl-name "hw.nperflevels")
70
+ (sysctl-name "hw.optional.arm.FEAT_BF16")
71
+ (sysctl-name "hw.optional.arm.FEAT_DotProd")
72
+ (sysctl-name "hw.optional.arm.FEAT_FCMA")
73
+ (sysctl-name "hw.optional.arm.FEAT_FHM")
74
+ (sysctl-name "hw.optional.arm.FEAT_FP16")
75
+ (sysctl-name "hw.optional.arm.FEAT_I8MM")
76
+ (sysctl-name "hw.optional.arm.FEAT_JSCVT")
77
+ (sysctl-name "hw.optional.arm.FEAT_LSE")
78
+ (sysctl-name "hw.optional.arm.FEAT_RDM")
79
+ (sysctl-name "hw.optional.arm.FEAT_SHA512")
80
+ (sysctl-name "hw.optional.armv8_2_sha512")
81
+ (sysctl-name "hw.packages")
82
+ (sysctl-name "hw.pagesize_compat")
83
+ (sysctl-name "hw.physicalcpu_max")
84
+ (sysctl-name "hw.tbfrequency_compat")
85
+ (sysctl-name "hw.vectorunit")
86
+ (sysctl-name "kern.hostname")
87
+ (sysctl-name "kern.maxfilesperproc")
88
+ (sysctl-name "kern.osproductversion")
89
+ (sysctl-name "kern.osrelease")
90
+ (sysctl-name "kern.ostype")
91
+ (sysctl-name "kern.osvariant_status")
92
+ (sysctl-name "kern.osversion")
93
+ (sysctl-name "kern.secure_kernel")
94
+ (sysctl-name "kern.usrstack64")
95
+ (sysctl-name "kern.version")
96
+ (sysctl-name "sysctl.proc_cputype")
97
+ (sysctl-name-prefix "hw.perflevel")
98
+ )
99
+
100
+ ;; allow writes to specific paths
101
+ (allow file-write*
102
+ (subpath (param "TARGET_DIR"))
103
+ (subpath (param "TMP_DIR"))
104
+ (subpath (param "CACHE_DIR"))
105
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
106
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
107
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
108
+ (literal (string-append (param "HOME_DIR") "/.gitconfig"))
109
+ ;; Allow writes to included directories from --add-dir
110
+ (subpath (param "INCLUDE_DIR_0"))
111
+ (subpath (param "INCLUDE_DIR_1"))
112
+ (subpath (param "INCLUDE_DIR_2"))
113
+ (subpath (param "INCLUDE_DIR_3"))
114
+ (subpath (param "INCLUDE_DIR_4"))
115
+ (literal "/dev/stdout")
116
+ (literal "/dev/stderr")
117
+ (literal "/dev/null")
118
+ )
119
+
120
+ ;; allow communication with sysmond for process listing (e.g. for pgrep)
121
+ (allow mach-lookup (global-name "com.apple.sysmond"))
122
+
123
+ ;; enable terminal access required by ink
124
+ ;; fixes setRawMode EPERM failure (at node:tty:81:24)
125
+ (allow file-ioctl (regex #"^/dev/tty.*"))
126
+
127
+ ;; allow inbound network traffic on debugger port
128
+ (allow network-inbound (local ip "localhost:9229"))
129
+
130
+ ;; allow outbound network traffic through proxy on localhost:8877
131
+ ;; set `QODER_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
132
+ ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
133
+ (allow network-outbound (remote tcp "localhost:8877"))
package/package.json ADDED
@@ -0,0 +1,43 @@
1
+ {
2
+ "name": "@qodercn-ai/qoderclicn",
3
+ "version": "0.1.0",
4
+ "description": "Qoder AI CLI - AI-powered coding assistant",
5
+ "author": "Qoder AI",
6
+ "license": "Apache-2.0",
7
+ "type": "module",
8
+ "bin": {
9
+ "qoderclicn": "bundle/qoderclicn.js"
10
+ },
11
+ "files": [
12
+ "bundle/",
13
+ "README.md",
14
+ "LICENSE"
15
+ ],
16
+ "engines": {
17
+ "node": ">=20.0.0"
18
+ },
19
+ "os": [
20
+ "darwin",
21
+ "linux",
22
+ "win32"
23
+ ],
24
+ "keywords": [
25
+ "qoder",
26
+ "ai",
27
+ "cli",
28
+ "coding",
29
+ "assistant",
30
+ "gemini"
31
+ ],
32
+ "homepage": "https://github.com/nicepkg/qodercli",
33
+ "repository": {
34
+ "type": "git",
35
+ "url": "https://github.com/nicepkg/qodercli.git"
36
+ },
37
+ "publishConfig": {
38
+ "access": "public"
39
+ },
40
+ "scripts": {
41
+ "postinstall": "node -e \"try{require('child_process').execSync('rg --version',{stdio:'ignore'})}catch{console.log('\\n ripgrep (rg) not found. Install for best search performance: https://github.com/BurntSushi/ripgrep#installation\\n')}\""
42
+ }
43
+ }