@unity-china/codely-cli 1.0.0-alpha.1

package/bundle/gemini.js.LEGAL.txt

@@ -0,0 +1,374 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2025 Qwen
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2025 Codely
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * Modified OAuth2 implementation using direct token callback:
+ * - Instead of using redirect_uri, the callback URL is passed in the state parameter
+ * - The server returns tokens directly in the callback as base64-encoded code parameter
+ * - No token exchange step is needed, tokens are decoded directly from the callback
+ * - Implements credential caching and automatic token refresh similar to qwenOAuth2.ts
+ */
+/**
+ * @license
+ * Copyright 2025 Codely
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2026
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * @license
+ * Copyright 2026 Codely
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+Bundled license information:
+
+safe-buffer/index.js:
+  /*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */
+
+@google/genai/dist/node/index.mjs:
+@google/genai/dist/node/index.mjs:
+  /**
+   * @license
+   * Copyright 2025 Google LLC
+   * SPDX-License-Identifier: Apache-2.0
+   */
+
+@grpc/proto-loader/build/src/util.js:
+@grpc/proto-loader/build/src/index.js:
+  /**
+   * @license
+   * Copyright 2018 gRPC authors.
+   *
+   * Licensed under the Apache License, Version 2.0 (the "License");
+   * you may not use this file except in compliance with the License.
+   * You may obtain a copy of the License at
+   *
+   *     http://www.apache.org/licenses/LICENSE-2.0
+   *
+   * Unless required by applicable law or agreed to in writing, software
+   * distributed under the License is distributed on an "AS IS" BASIS,
+   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   * See the License for the specific language governing permissions and
+   * limitations under the License.
+   *
+   */
+
+long/umd/index.js:
+  /**
+   * @license
+   * Copyright 2009 The Closure Library Authors
+   * Copyright 2020 Daniel Wirtz / The long.js Authors.
+   *
+   * Licensed under the Apache License, Version 2.0 (the "License");
+   * you may not use this file except in compliance with the License.
+   * You may obtain a copy of the License at
+   *
+   *     http://www.apache.org/licenses/LICENSE-2.0
+   *
+   * Unless required by applicable law or agreed to in writing, software
+   * distributed under the License is distributed on an "AS IS" BASIS,
+   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   * See the License for the specific language governing permissions and
+   * limitations under the License.
+   *
+   * SPDX-License-Identifier: Apache-2.0
+   */
+
+uri-js/dist/es5/uri.all.js:
+  /** @license URI.js v4.4.1 (c) 2011 Gary Court. License: http://github.com/garycourt/uri-js */
+
+mime-db/index.js:
+  /*!
+   * mime-db
+   * Copyright(c) 2014 Jonathan Ong
+   * Copyright(c) 2015-2022 Douglas Christopher Wilson
+   * MIT Licensed
+   */
+
+mime-types/index.js:
+  /*!
+   * mime-types
+   * Copyright(c) 2014 Jonathan Ong
+   * Copyright(c) 2015 Douglas Christopher Wilson
+   * MIT Licensed
+   */
+
+is-extglob/index.js:
+  /*!
+   * is-extglob <https://github.com/jonschlinkert/is-extglob>
+   *
+   * Copyright (c) 2014-2016, Jon Schlinkert.
+   * Licensed under the MIT License.
+   */
+
+is-glob/index.js:
+  /*!
+   * is-glob <https://github.com/jonschlinkert/is-glob>
+   *
+   * Copyright (c) 2014-2017, Jon Schlinkert.
+   * Released under the MIT License.
+   */
+
+is-number/index.js:
+  /*!
+   * is-number <https://github.com/jonschlinkert/is-number>
+   *
+   * Copyright (c) 2014-present, Jon Schlinkert.
+   * Released under the MIT License.
+   */
+
+to-regex-range/index.js:
+  /*!
+   * to-regex-range <https://github.com/micromatch/to-regex-range>
+   *
+   * Copyright (c) 2015-present, Jon Schlinkert.
+   * Released under the MIT License.
+   */
+
+fill-range/index.js:
+  /*!
+   * fill-range <https://github.com/jonschlinkert/fill-range>
+   *
+   * Copyright (c) 2014-present, Jon Schlinkert.
+   * Licensed under the MIT License.
+   */
+
+queue-microtask/index.js:
+  /*! queue-microtask. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */
+
+run-parallel/index.js:
+  /*! run-parallel. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */
+
+undici/lib/web/fetch/body.js:
+formdata-polyfill/esm.min.js:
+  /*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
+
+undici/lib/web/websocket/frame.js:
+  /*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> */
+
+fzf/dist/fzf.es.js:
+  /** @license
+   * fzf v0.5.2
+   * Copyright (c) 2021 Ajit
+   * Licensed under BSD 3-Clause
+   */
+
+yargs-parser/build/lib/string-utils.js:
+yargs-parser/build/lib/tokenize-arg-string.js:
+yargs-parser/build/lib/yargs-parser-types.js:
+yargs-parser/build/lib/yargs-parser.js:
+  /**
+   * @license
+   * Copyright (c) 2016, Contributors
+   * SPDX-License-Identifier: ISC
+   */
+
+yargs-parser/build/lib/index.js:
+  /**
+   * @fileoverview Main entrypoint for libraries using yargs-parser in Node.js
+   * CJS and ESM environments.
+   *
+   * @license
+   * Copyright (c) 2016, Contributors
+   * SPDX-License-Identifier: ISC
+   */
+
+mcp-proxy/dist/stdio-CfAxSAGj.js:
+  /*!
+  * depd
+  * Copyright(c) 2014-2018 Douglas Christopher Wilson
+  * MIT Licensed
+  */
+  /** @license URI.js v4.4.1 (c) 2011 Gary Court. License: http://github.com/garycourt/uri-js */
+
+web-streams-polyfill/dist/ponyfill.es2018.js:
+  /**
+   * @license
+   * web-streams-polyfill v3.3.3
+   * Copyright 2024 Mattias Buelens, Diwank Singh Tomer and other contributors.
+   * This code is released under the MIT license.
+   * SPDX-License-Identifier: MIT
+   */
+
+fetch-blob/index.js:
+  /*! fetch-blob. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
+
+node-domexception/index.js:
+  /*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
+
+react/cjs/react.production.js:
+  /**
+   * @license React
+   * react.production.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react/cjs/react.development.js:
+  /**
+   * @license React
+   * react.development.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react-reconciler/cjs/react-reconciler-constants.production.js:
+  /**
+   * @license React
+   * react-reconciler-constants.production.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react-reconciler/cjs/react-reconciler-constants.development.js:
+  /**
+   * @license React
+   * react-reconciler-constants.development.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+scheduler/cjs/scheduler.production.js:
+  /**
+   * @license React
+   * scheduler.production.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+scheduler/cjs/scheduler.development.js:
+  /**
+   * @license React
+   * scheduler.development.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react-reconciler/cjs/react-reconciler.production.js:
+  /**
+   * @license React
+   * react-reconciler.production.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react-reconciler/cjs/react-reconciler.development.js:
+  /**
+   * @license React
+   * react-reconciler.development.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react-devtools-core/dist/backend.js:
+  /**
+   * @license React
+   * react-debug-tools.production.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+  /**
+   * @license React
+   * react.production.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react/cjs/react-jsx-runtime.production.js:
+  /**
+   * @license React
+   * react-jsx-runtime.production.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react/cjs/react-jsx-runtime.development.js:
+  /**
+   * @license React
+   * react-jsx-runtime.development.js
+   *
+   * Copyright (c) Meta Platforms, Inc. and affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react-is/cjs/react-is.production.min.js:
+  /** @license React v16.13.1
+   * react-is.production.min.js
+   *
+   * Copyright (c) Facebook, Inc. and its affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+react-is/cjs/react-is.development.js:
+  /** @license React v16.13.1
+   * react-is.development.js
+   *
+   * Copyright (c) Facebook, Inc. and its affiliates.
+   *
+   * This source code is licensed under the MIT license found in the
+   * LICENSE file in the root directory of this source tree.
+   */
+
+object-assign/index.js:
+  /*
+  object-assign
+  (c) Sindre Sorhus
+  @license MIT
+  */

package/bundle/policies/plan.toml

@@ -0,0 +1,131 @@
+# Plan Mode policy: deny-all + read-only whitelist + plans dir write exception.
+# Active only when ApprovalMode = "plan".
+#
+# Priority bands (tiers):
+# - Default policies (TOML): 1 + priority/1000
+#   60: Catch-all deny for plan mode (becomes 1.060)
+#   70: Explicit allows for plan mode (becomes 1.070, overrides deny)
+
+# --- Catch-all deny for plan mode ---
+[[rule]]
+decision = "deny"
+priority = 60
+modes = ["plan"]
+deny_message = "You are in Plan Mode. Only read/search tools and writing plans to the plans directory are allowed. Use exit_plan_mode to request approval for your plan."
+
+# --- Read-only tools allowed in plan mode ---
+[[rule]]
+toolName = "glob"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "search_file_content"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "list_directory"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "read_file"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "read_many_files"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "web_search"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "sequential_thinking"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "job_create"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "job_get"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "job_update"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "job_list"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+# --- Allow writing plan files (.md) to the plans directory only ---
+# The argsPattern matches the JSON-serialized file_path within:
+#   ~/.codely-cli/tmp/<64-hex-project-hash>/plans/<name>.md
+# Supports both / and escaped \\ separators.
+[[rule]]
+toolName = "write_file"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+argsPattern = "\"file_path\"\\s*:\\s*\"[^\"]*[/\\\\]+\\.codely-cli[/\\\\]+tmp[/\\\\]+[a-f0-9]{64}[/\\\\]+plans[/\\\\]+[a-zA-Z0-9_\\-][a-zA-Z0-9_\\-.]*\\.md\""
+
+[[rule]]
+toolName = "replace"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+argsPattern = "\"file_path\"\\s*:\\s*\"[^\"]*[/\\\\]+\\.codely-cli[/\\\\]+tmp[/\\\\]+[a-f0-9]{64}[/\\\\]+plans[/\\\\]+[a-zA-Z0-9_\\-][a-zA-Z0-9_\\-.]*\\.md\""
+
+# --- exit_plan_mode requires user approval ---
+[[rule]]
+toolName = "exit_plan_mode"
+decision = "ask_user"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "ask_user"
+decision = "ask_user"
+priority = 70
+modes = ["plan"]
+
+# --- Task dispatch allowed in plan mode (for exploration / context gathering) ---
+[[rule]]
+toolName = "task"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "task_output"
+decision = "allow"
+priority = 70
+modes = ["plan"]
+
+[[rule]]
+toolName = "task_stop"
+decision = "allow"
+priority = 70
+modes = ["plan"]

package/bundle/policies/read-only.toml

@@ -0,0 +1,75 @@
+# Read-only tools that are always allowed without confirmation.
+# These tools only read data and cannot modify the filesystem or execute commands.
+#
+# Priority bands (tiers):
+# - Default policies (TOML): 1 + priority/1000 (e.g., priority 50 → 1.050)
+# - User policies (TOML): 2 + priority/1000
+# - Admin policies (TOML): 3 + priority/1000
+
+[[rule]]
+toolName = "glob"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "search_file_content"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "list_directory"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "read_file"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "read_many_files"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "web_search"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "sequential_thinking"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "analyze_multimedia"
+decision = "allow"
+priority = 50
+
+# Job tools are planning/tracking tools that don't modify the filesystem.
+[[rule]]
+toolName = "job_create"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "job_get"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "job_update"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "job_list"
+decision = "allow"
+priority = 50
+
+# web_fetch is a read operation (fetching content from the web).
+# It was auto-approved in autoEdit mode; treating it as read-equivalent.
+[[rule]]
+toolName = "web_fetch"
+decision = "allow"
+priority = 50

package/bundle/policies/write.toml

@@ -0,0 +1,44 @@
+# Write/mutating tools that require user confirmation by default.
+# In autoEdit mode, replace and write_file are auto-approved.
+#
+# Priority bands (tiers):
+# - Default policies (TOML): 1 + priority/1000
+#   10: Write tools default to ASK_USER (becomes 1.010)
+#   15: Auto-edit tool override (becomes 1.015)
+
+[[rule]]
+toolName = "replace"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "replace"
+decision = "allow"
+priority = 15
+modes = ["autoEdit"]
+
+[[rule]]
+toolName = "write_file"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "write_file"
+decision = "allow"
+priority = 15
+modes = ["autoEdit"]
+
+[[rule]]
+toolName = "run_shell_command"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "save_memory"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "activate_skill"
+decision = "ask_user"
+priority = 10

package/bundle/policies/yolo.toml

@@ -0,0 +1,9 @@
+# YOLO mode: allow all tools without confirmation.
+# This rule has the highest default-tier priority (999 → 1.999).
+# It only applies when the approval mode is "yolo".
+
+[[rule]]
+decision = "allow"
+priority = 999
+modes = ["yolo"]
+allow_redirection = true

package/bundle/sandbox-macos-permissive-closed.sb

@@ -0,0 +1,32 @@
+(version 1)
+
+;; allow everything by default
+(allow default)
+
+;; deny all writes EXCEPT under specific paths
+(deny file-write*)
+(allow file-write*
+    (subpath (param "TARGET_DIR"))
+    (subpath (param "TMP_DIR"))
+    (subpath (param "CACHE_DIR"))
+    (subpath (string-append (param "HOME_DIR") "/.codely-cli"))
+    (subpath (string-append (param "HOME_DIR") "/.npm"))
+    (subpath (string-append (param "HOME_DIR") "/.cache"))
+    (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
+    ;; Allow writes to included directories from --include-directories
+    (subpath (param "INCLUDE_DIR_0"))
+    (subpath (param "INCLUDE_DIR_1"))
+    (subpath (param "INCLUDE_DIR_2"))
+    (subpath (param "INCLUDE_DIR_3"))
+    (subpath (param "INCLUDE_DIR_4"))
+    (literal "/dev/stdout")
+    (literal "/dev/stderr")
+    (literal "/dev/null")
+)
+
+;; deny all inbound network traffic EXCEPT on debugger port
+(deny network-inbound)
+(allow network-inbound (local ip "localhost:9229"))
+
+;; deny all outbound network traffic
+(deny network-outbound)

package/bundle/sandbox-macos-permissive-open.sb

@@ -0,0 +1,25 @@
+(version 1)
+
+;; allow everything by default
+(allow default)
+
+;; deny all writes EXCEPT under specific paths
+(deny file-write*)
+(allow file-write*
+    (subpath (param "TARGET_DIR"))
+    (subpath (param "TMP_DIR"))
+    (subpath (param "CACHE_DIR"))
+    (subpath (string-append (param "HOME_DIR") "/.codely-cli"))
+    (subpath (string-append (param "HOME_DIR") "/.npm"))
+    (subpath (string-append (param "HOME_DIR") "/.cache"))
+    (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
+    ;; Allow writes to included directories from --include-directories
+    (subpath (param "INCLUDE_DIR_0"))
+    (subpath (param "INCLUDE_DIR_1"))
+    (subpath (param "INCLUDE_DIR_2"))
+    (subpath (param "INCLUDE_DIR_3"))
+    (subpath (param "INCLUDE_DIR_4"))
+    (literal "/dev/stdout")
+    (literal "/dev/stderr")
+    (literal "/dev/null")
+)