@shi_zhen/code-helper 0.1.2 → 0.1.3

package/dist/cli/index.mjs

@@ -33,7 +33,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@shi_zhen/code-helper",
-      version: "0.1.2",
+      version: "0.1.3",
       description: "Code Helper - A unified tool to manage your Claude Code",
       repository: {
         type: "git",
@@ -193,10 +193,10 @@ async function getRemoteVersion() {
 }
 function readCache() {
   try {
-    if (!fs9.existsSync(CACHE_FILE)) {
+    if (!fs10.existsSync(CACHE_FILE)) {
       return null;
     }
-    const content = fs9.readFileSync(CACHE_FILE, "utf-8");
+    const content = fs10.readFileSync(CACHE_FILE, "utf-8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -204,10 +204,10 @@ function readCache() {
 }
 function writeCache(data) {
   try {
-    if (!fs9.existsSync(CACHE_DIR)) {
-      fs9.mkdirSync(CACHE_DIR, { recursive: true });
+    if (!fs10.existsSync(CACHE_DIR)) {
+      fs10.mkdirSync(CACHE_DIR, { recursive: true });
     }
-    fs9.writeFileSync(CACHE_FILE, JSON.stringify(data, null, 2));
+    fs10.writeFileSync(CACHE_FILE, JSON.stringify(data, null, 2));
   } catch (error) {
   }
 }
@@ -307,16 +307,16 @@ async function testUpdate() {
     chalk3.cyan("\n\u{1F4A1} \u63D0\u793A: \u53D1\u5E03\u65B0\u7248\u672C\u540E\uFF0C\u7528\u6237\u9996\u6B21\u542F\u52A8\u65F6\u4F1A\u81EA\u52A8\u66F4\u65B0\n")
   );
 }
-var os10, path10, fs9, CACHE_DIR, CACHE_FILE, CHECK_INTERVAL;
+var os11, path11, fs10, CACHE_DIR, CACHE_FILE, CHECK_INTERVAL;
 var init_version = __esm({
   "src/cli/utils/version.ts"() {
     "use strict";
     init_exec();
-    os10 = __require("os");
-    path10 = __require("path");
-    fs9 = __require("fs");
-    CACHE_DIR = path10.join(os10.homedir(), ".code-helper");
-    CACHE_FILE = path10.join(CACHE_DIR, "version-check.json");
+    os11 = __require("os");
+    path11 = __require("path");
+    fs10 = __require("fs");
+    CACHE_DIR = path11.join(os11.homedir(), ".code-helper");
+    CACHE_FILE = path11.join(CACHE_DIR, "version-check.json");
     CHECK_INTERVAL = 24 * 60 * 60 * 1e3;
   }
 });
@@ -1338,7 +1338,7 @@ var COMMON_PROXY_PORTS = [
 var INSTALL_METHODS = [
   {
     name: "\u5B98\u65B9\u811A\u672C\u5B89\u88C5",
-    command: "curl -fsSL https://claude.ai/install.sh | bash",
+    command: 'temp=$(mktemp) && trap "rm -f $temp" EXIT && curl -fsSL https://claude.ai/install.sh -o "$temp" && bash "$temp"',
     description: "\u9700\u8981\u4EE3\u7406\u6216\u5916\u7F51\u8BBF\u95EE",
     platforms: ["darwin", "linux"],
     recommended: true
@@ -1582,7 +1582,7 @@ async function showInstallMenu() {
   let envVars = {};
   if (proxyUrl) {
     if (finalCommand.includes("curl")) {
-      finalCommand = finalCommand.replace("curl ", `curl --proxy ${proxyUrl} `);
+      finalCommand = finalCommand.replace(/curl\s+/g, `curl --proxy ${proxyUrl} `);
     } else {
       envVars = {
         http_proxy: proxyUrl,
@@ -3252,11 +3252,248 @@ async function handleInstallAll(marketplacePlugins) {
 }
 
 // src/cli/menus/settings.ts
-import fs8 from "fs";
+import fs9 from "fs";
 import inquirer7 from "inquirer";
+import os10 from "os";
+import path10 from "path";
+
+// src/cli/utils/permissions.ts
+import fs8 from "fs";
 import os9 from "os";
 import path9 from "path";
 var SETTINGS_FILE2 = path9.join(os9.homedir(), ".claude", "settings.json");
+var PERMISSION_RULES = {
+  // 中等权限配置
+  moderate: {
+    allow: [
+      // 文件操作
+      "ReadFile(*)",
+      "WriteFile(*)",
+      "EditFile(*)",
+      "Glob(*)",
+      "Grep(*)",
+      // Git 常规操作
+      "Bash(git:status*)",
+      "Bash(git:add*)",
+      "Bash(git:commit*)",
+      "Bash(git:pull*)",
+      "Bash(git:branch*)",
+      "Bash(git:checkout*)",
+      "Bash(git:diff*)",
+      "Bash(git:log*)",
+      "Bash(git:clone*)",
+      "Bash(git:stash*)",
+      "Bash(git:show*)",
+      "Bash(git:fetch*)",
+      // Node/NPM
+      "Bash(node:*)",
+      "Bash(npm:run*)",
+      "Bash(npm:test*)",
+      "Bash(npm:install*)",
+      "Bash(npx:*)",
+      // Python
+      "Bash(python:*)",
+      "Bash(python3:*)",
+      "Bash(pip:install*)",
+      "Bash(pip3:install*)",
+      // 常用工具
+      "Bash(cat:*)",
+      "Bash(ls:*)",
+      "Bash(grep:*)",
+      "Bash(find:*)",
+      "Bash(curl:*)",
+      "Bash(wget:*)",
+      "Bash(echo:*)",
+      "Bash(mkdir:*)",
+      "Bash(cp:*)",
+      "Bash(mv:*)",
+      "Bash(touch:*)",
+      "Bash(pwd:*)",
+      "Bash(cd:*)"
+    ],
+    deny: [
+      // 高危操作
+      "Bash(rm:-rf*)",
+      "Bash(rm:*-rf*)",
+      "Bash(rm:*-r*-f*)",
+      "Bash(sudo:*)",
+      "Bash(git:push*--force*)",
+      "Bash(git:push*-f*)",
+      "Bash(chmod:*)",
+      "Bash(chown:*)",
+      // 反黑客操作
+      "Bash(nc:*-e*)",
+      // 反向 shell
+      "Bash(bash:*-i*)",
+      // 交互式 bash
+      "Bash(*>&*)",
+      // 重定向到网络
+      "Bash(*base64*-d*)",
+      // 可疑的 base64 解码
+      "Bash(wget:*&&*)",
+      // 下载并执行
+      "Bash(curl:*|*sh*)",
+      // 管道执行
+      "Bash(curl:*|*bash*)"
+    ]
+  },
+  // 最大权限配置
+  maximum: {
+    allow: [
+      // 继承中等权限的所有规则
+      "ReadFile(*)",
+      "WriteFile(*)",
+      "EditFile(*)",
+      "Glob(*)",
+      "Grep(*)",
+      // Git 所有操作（除了强制推送）
+      "Bash(git:*)",
+      // Node/NPM
+      "Bash(node:*)",
+      "Bash(npm:*)",
+      "Bash(npx:*)",
+      // Python
+      "Bash(python:*)",
+      "Bash(python3:*)",
+      "Bash(pip:*)",
+      "Bash(pip3:*)",
+      // 常用工具
+      "Bash(cat:*)",
+      "Bash(ls:*)",
+      "Bash(grep:*)",
+      "Bash(find:*)",
+      "Bash(curl:*)",
+      "Bash(wget:*)",
+      "Bash(echo:*)",
+      "Bash(mkdir:*)",
+      "Bash(cp:*)",
+      "Bash(mv:*)",
+      "Bash(touch:*)",
+      "Bash(pwd:*)",
+      "Bash(cd:*)",
+      // 额外允许的操作
+      "Bash(rm:*)"
+      // 允许删除，但不包括 rm -rf
+    ],
+    deny: [
+      // 高危操作（需要确认）
+      "Bash(rm:-rf*)",
+      "Bash(rm:*-rf*)",
+      "Bash(rm:*-r*-f*)",
+      "Bash(sudo:*)",
+      "Bash(git:push*--force*)",
+      "Bash(git:push*-f*)",
+      "Bash(dd:*)",
+      "Bash(mkfs:*)",
+      // 反黑客操作
+      "Bash(nc:*-e*)",
+      // 反向 shell
+      "Bash(bash:*-i*)",
+      // 交互式 bash
+      "Bash(*>&*)",
+      // 重定向到网络
+      "Bash(*base64*-d*)",
+      // 可疑的 base64 解码
+      "Bash(wget:*&&*)",
+      // 下载并执行
+      "Bash(curl:*|*sh*)",
+      // 管道执行
+      "Bash(curl:*|*bash*)"
+    ]
+  }
+};
+var PERMISSION_DESCRIPTIONS = {
+  ["default" /* DEFAULT */]: {
+    name: "\u9ED8\u8BA4",
+    description: "\u6BCF\u6B21\u5371\u9669\u64CD\u4F5C\u90FD\u9700\u8981\u786E\u8BA4\uFF08Claude Code \u539F\u59CB\u884C\u4E3A\uFF09",
+    autoAllow: [],
+    needConfirm: ["\u6240\u6709\u53EF\u80FD\u5371\u9669\u7684\u64CD\u4F5C"]
+  },
+  ["moderate" /* MODERATE */]: {
+    name: "\u4E2D\u7B49\u6743\u9650",
+    description: "\u81EA\u52A8\u5141\u8BB8\u5E38\u89C4\u64CD\u4F5C\uFF0C\u53EA\u786E\u8BA4\u5220\u9664\u548C\u5371\u9669\u547D\u4EE4",
+    autoAllow: [
+      "\u6587\u4EF6\u64CD\u4F5C\uFF08\u8BFB/\u5199/\u7F16\u8F91\uFF09",
+      "Git \u5E38\u89C4\u64CD\u4F5C\uFF08status/add/commit/pull\u7B49\uFF09",
+      "Node/NPM \u64CD\u4F5C",
+      "Python/pip \u64CD\u4F5C",
+      "\u5E38\u7528\u5DE5\u5177\uFF08cat/ls/grep/curl\u7B49\uFF09"
+    ],
+    needConfirm: [
+      "rm -rf\uFF08\u5F3A\u5236\u9012\u5F52\u5220\u9664\uFF09",
+      "sudo\uFF08\u7CFB\u7EDF\u6743\u9650\uFF09",
+      "git push --force\uFF08\u5F3A\u5236\u63A8\u9001\uFF09",
+      "chmod/chown\uFF08\u6743\u9650\u4FEE\u6539\uFF09"
+    ]
+  },
+  ["maximum" /* MAXIMUM */]: {
+    name: "\u6700\u5927\u6743\u9650",
+    description: "\u81EA\u52A8\u5141\u8BB8\u51E0\u4E4E\u6240\u6709\u64CD\u4F5C\uFF0C\u53EA\u786E\u8BA4\u6781\u5EA6\u5371\u9669\u7684\u547D\u4EE4",
+    autoAllow: [
+      "\u6240\u6709\u4E2D\u7B49\u6743\u9650\u7684\u64CD\u4F5C",
+      "git push\uFF08\u666E\u901A\u63A8\u9001\uFF09",
+      "git rebase/merge",
+      "\u6587\u4EF6\u5220\u9664\uFF08rm\uFF0C\u975E\u9012\u5F52\u5F3A\u5236\uFF09"
+    ],
+    needConfirm: [
+      "rm -rf\uFF08\u5F3A\u5236\u9012\u5F52\u5220\u9664\uFF09",
+      "sudo\uFF08\u7CFB\u7EDF\u6743\u9650\uFF09",
+      "git push --force\uFF08\u5F3A\u5236\u63A8\u9001\uFF09",
+      "dd/mkfs\uFF08\u78C1\u76D8\u64CD\u4F5C\uFF09",
+      "curl | bash\uFF08\u7BA1\u9053\u6267\u884C\uFF09"
+    ]
+  }
+};
+function getCurrentPermissionLevel() {
+  try {
+    if (!fs8.existsSync(SETTINGS_FILE2)) {
+      return "default" /* DEFAULT */;
+    }
+    const content = fs8.readFileSync(SETTINGS_FILE2, "utf-8");
+    const settings = JSON.parse(content);
+    if (!settings.permissions || !settings.permissionLevel) {
+      return "default" /* DEFAULT */;
+    }
+    return settings.permissionLevel;
+  } catch {
+    return "default" /* DEFAULT */;
+  }
+}
+function applyPermissionLevel(level) {
+  let settings = {};
+  try {
+    if (fs8.existsSync(SETTINGS_FILE2)) {
+      const content = fs8.readFileSync(SETTINGS_FILE2, "utf-8");
+      settings = JSON.parse(content);
+    }
+  } catch {
+  }
+  if (level === "default" /* DEFAULT */) {
+    delete settings.permissions;
+    delete settings.permissionLevel;
+  } else {
+    const rules = PERMISSION_RULES[level];
+    settings.permissions = {
+      allow: rules.allow,
+      deny: rules.deny
+    };
+    settings.permissionLevel = level;
+  }
+  const settingsDir = path9.dirname(SETTINGS_FILE2);
+  if (!fs8.existsSync(settingsDir)) {
+    fs8.mkdirSync(settingsDir, { recursive: true });
+  }
+  fs8.writeFileSync(SETTINGS_FILE2, JSON.stringify(settings, null, 2), "utf-8");
+}
+function getPermissionLevelName(level) {
+  return PERMISSION_DESCRIPTIONS[level].name;
+}
+function getPermissionLevelDescription(level) {
+  return PERMISSION_DESCRIPTIONS[level];
+}
+
+// src/cli/menus/settings.ts
+var SETTINGS_FILE3 = path10.join(os10.homedir(), ".claude", "settings.json");
 var LANGUAGE_OPTIONS = [
   { name: "\u4E2D\u6587 (chinese)", value: "chinese" },
   { name: "English", value: "english" },
@@ -3282,6 +3519,10 @@ async function showSettingsMenu() {
             name: `\u57FA\u7840\u8BBE\u7F6E`,
             value: "basic" /* BASIC */
           },
+          {
+            name: `\u6743\u9650\u914D\u7F6E`,
+            value: "permissions" /* PERMISSIONS */
+          },
           {
             name: `\u67E5\u770B\u914D\u7F6E\u6587\u4EF6`,
             value: "view_config" /* VIEW_CONFIG */
@@ -3302,6 +3543,9 @@ async function showSettingsMenu() {
       case "basic" /* BASIC */:
         await showBasicSettings();
         break;
+      case "permissions" /* PERMISSIONS */:
+        await showPermissionsSettings();
+        break;
       case "view_config" /* VIEW_CONFIG */:
         await handleViewConfig();
         break;
@@ -3500,11 +3744,11 @@ async function handleBooleanSetting(key, label) {
 }
 async function handleViewConfig() {
   console.log();
-  console.log(theme.primary(`\u914D\u7F6E\u6587\u4EF6\u8DEF\u5F84: ${SETTINGS_FILE2}`));
+  console.log(theme.primary(`\u914D\u7F6E\u6587\u4EF6\u8DEF\u5F84: ${SETTINGS_FILE3}`));
   console.log();
   try {
-    if (fs8.existsSync(SETTINGS_FILE2)) {
-      const content = fs8.readFileSync(SETTINGS_FILE2, "utf-8");
+    if (fs9.existsSync(SETTINGS_FILE3)) {
+      const content = fs9.readFileSync(SETTINGS_FILE3, "utf-8");
       console.log(theme.dim("\u2500".repeat(50)));
       console.log(content);
       console.log(theme.dim("\u2500".repeat(50)));
@@ -3519,6 +3763,106 @@ async function handleViewConfig() {
     { type: "input", name: "continue", message: "\u6309\u56DE\u8F66\u952E\u7EE7\u7EED..." }
   ]);
 }
+async function showPermissionsSettings() {
+  while (true) {
+    showHeader();
+    const currentLevel = getCurrentPermissionLevel();
+    const currentLevelName = getPermissionLevelName(currentLevel);
+    console.log(createBoxTitle(`\u6743\u9650\u914D\u7F6E [\u5F53\u524D: ${currentLevelName}]`));
+    console.log();
+    const { choice } = await inquirer7.prompt([
+      {
+        type: "list",
+        name: "choice",
+        message: "\u8BF7\u9009\u62E9\u6743\u9650\u7EA7\u522B\uFF1A",
+        choices: [
+          {
+            name: `\u9ED8\u8BA4\uFF08\u6BCF\u6B21\u90FD\u786E\u8BA4\uFF09${currentLevel === "default" /* DEFAULT */ ? theme.success(" \u2713") : ""}`,
+            value: "default" /* DEFAULT */
+          },
+          {
+            name: `\u4E2D\u7B49\u6743\u9650\uFF08\u53EA\u786E\u8BA4\u5220\u9664\u548C\u5371\u9669\u547D\u4EE4\uFF09${currentLevel === "moderate" /* MODERATE */ ? theme.success(" \u2713") : ""}`,
+            value: "moderate" /* MODERATE */
+          },
+          {
+            name: `\u6700\u5927\u6743\u9650\uFF08\u53EA\u786E\u8BA4\u9AD8\u5371\u64CD\u4F5C\uFF09${currentLevel === "maximum" /* MAXIMUM */ ? theme.success(" \u2713") : ""}`,
+            value: "maximum" /* MAXIMUM */
+          },
+          new inquirer7.Separator(),
+          {
+            name: `${theme.dim("<-")} \u8FD4\u56DE`,
+            value: "__back__"
+          },
+          {
+            name: `${theme.dim("X")}  \u9000\u51FA`,
+            value: "__exit__"
+          }
+        ]
+      }
+    ]);
+    if (choice === "__back__") {
+      return;
+    }
+    if (choice === "__exit__") {
+      process.exit(0);
+    }
+    await handlePermissionLevelChange(choice);
+  }
+}
+async function handlePermissionLevelChange(level) {
+  const currentLevel = getCurrentPermissionLevel();
+  if (level === currentLevel) {
+    showInfo("\u5DF2\u7ECF\u662F\u5F53\u524D\u6743\u9650\u7EA7\u522B");
+    console.log();
+    await inquirer7.prompt([
+      { type: "input", name: "continue", message: "\u6309\u56DE\u8F66\u952E\u7EE7\u7EED..." }
+    ]);
+    return;
+  }
+  if (level !== "default" /* DEFAULT */) {
+    const confirmed = await showPermissionConfirmation(level);
+    if (!confirmed) {
+      return;
+    }
+  }
+  try {
+    applyPermissionLevel(level);
+    const levelName = getPermissionLevelName(level);
+    showSuccess(`\u6743\u9650\u914D\u7F6E\u5DF2\u66F4\u65B0\u4E3A\uFF1A${levelName}`);
+    showInfo(`\u914D\u7F6E\u6587\u4EF6\uFF1A${SETTINGS_FILE3}`);
+  } catch (error) {
+    showError(`\u4FDD\u5B58\u5931\u8D25: ${error.message}`);
+  }
+  console.log();
+  await inquirer7.prompt([
+    { type: "input", name: "continue", message: "\u6309\u56DE\u8F66\u952E\u7EE7\u7EED..." }
+  ]);
+}
+async function showPermissionConfirmation(level) {
+  console.log();
+  const desc = getPermissionLevelDescription(level);
+  console.log(theme.warning(`\u4F60\u5373\u5C06\u5207\u6362\u5230\u300C${desc.name}\u300D\u6A21\u5F0F`));
+  console.log();
+  console.log(theme.success("\u5C06\u81EA\u52A8\u5141\u8BB8\u7684\u64CD\u4F5C\uFF1A"));
+  desc.autoAllow.forEach((item) => {
+    console.log(theme.success(`  \u2713 ${item}`));
+  });
+  console.log();
+  console.log(theme.warning("\u4ECD\u9700\u786E\u8BA4\u7684\u64CD\u4F5C\uFF1A"));
+  desc.needConfirm.forEach((item) => {
+    console.log(theme.warning(`  \u26A0 ${item}`));
+  });
+  console.log();
+  const { confirm } = await inquirer7.prompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: "\u786E\u5B9A\u5207\u6362\u5417\uFF1F",
+      default: false
+    }
+  ]);
+  return confirm;
+}
 
 // src/cli/menus/main.ts
 async function showMainMenu() {