@vibe-lark/larkpal 0.1.10 → 0.1.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/main.mjs +27 -1
- package/package.json +1 -1
package/dist/main.mjs
CHANGED
|
@@ -237,7 +237,29 @@ const DEFAULT_SETTINGS = {
|
|
|
237
237
|
"WebFetch(*)",
|
|
238
238
|
"WebSearch(*)"
|
|
239
239
|
],
|
|
240
|
-
deny: [
|
|
240
|
+
deny: [
|
|
241
|
+
"Read(//.lark-cli/**)",
|
|
242
|
+
"Read(//.config/lark/**)",
|
|
243
|
+
"Read(//.larkpal/credentials.json)",
|
|
244
|
+
"Read(//.env)",
|
|
245
|
+
"Read(//.env.*)",
|
|
246
|
+
"Bash(cat ~/.lark-cli:*)",
|
|
247
|
+
"Bash(cat ~/.config/lark:*)",
|
|
248
|
+
"Bash(cat ~/.larkpal/credentials:*)",
|
|
249
|
+
"Bash(head ~/.lark-cli:*)",
|
|
250
|
+
"Bash(head ~/.config/lark:*)",
|
|
251
|
+
"Bash(tail ~/.lark-cli:*)",
|
|
252
|
+
"Bash(tail ~/.config/lark:*)",
|
|
253
|
+
"Bash(less ~/.lark-cli:*)",
|
|
254
|
+
"Bash(less ~/.config/lark:*)",
|
|
255
|
+
"Bash(more ~/.lark-cli:*)",
|
|
256
|
+
"Bash(more ~/.config/lark:*)",
|
|
257
|
+
"Bash(env:*)",
|
|
258
|
+
"Bash(printenv:*)",
|
|
259
|
+
"Bash(export -p:*)",
|
|
260
|
+
"Bash(echo $LARK_APP_SECRET:*)",
|
|
261
|
+
"Bash(echo $ANTHROPIC_API_KEY:*)"
|
|
262
|
+
]
|
|
241
263
|
},
|
|
242
264
|
hooks: {
|
|
243
265
|
SessionStart: [{ hooks: [{
|
|
@@ -12074,6 +12096,10 @@ async function main() {
|
|
|
12074
12096
|
const credentialProvider = new LarkCliCredentialProvider();
|
|
12075
12097
|
const appId = credentialProvider.getAppId();
|
|
12076
12098
|
logger.info("凭证加载完成", { appId });
|
|
12099
|
+
if (process.env.LARK_APP_SECRET) {
|
|
12100
|
+
delete process.env.LARK_APP_SECRET;
|
|
12101
|
+
logger.info("已从 process.env 清除 LARK_APP_SECRET（CC 子进程不可继承）");
|
|
12102
|
+
}
|
|
12077
12103
|
await ensureDefaults();
|
|
12078
12104
|
logger.info("默认配置检查完成");
|
|
12079
12105
|
const workspaceRoot = process.env.LARKPAL_WORKSPACE ?? join(homedir(), ".larkpal", "workspace");
|