ai-helper-agent 1.6.6 → 1.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-helper-agent",
-  "version": "1.6.6",
+  "version": "1.8.0",
   "description": "AI Helper 代理服务 - 为 Chrome 扩展提供本地文件读写和系统命令执行能力",
   "type": "module",
   "main": "./src/server.js",
@@ -16,7 +16,7 @@
     "start": "node bin/agent.js start",
     "stop": "node bin/agent.js stop",
     "status": "node bin/agent.js status",
-    "publish": "bash publish.sh"
+    "release": "bash publish.sh"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",

package/src/config.js

@@ -8,6 +8,7 @@ const CONFIG_FILE = join(AGENT_DIR, 'config.json');
 const PAIRINGS_FILE = join(AGENT_DIR, 'pairings.json');
 const SKILLS_DIR = join(AGENT_DIR, 'skills');
 const WORKSPACE_DIR = join(AGENT_DIR, 'workspace');
+const MEMORY_DIR = join(AGENT_DIR, 'memory');
 
 const DEFAULTS = {
   port: 18910,
@@ -44,8 +45,8 @@ function ensureAgentDir() {
     if (!existsSync(AGENT_DIR)) {
       mkdirSync(AGENT_DIR, { recursive: true });
     }
-    // 确保 skills 和 workspace 子目录存在
-    for (const dir of [SKILLS_DIR, WORKSPACE_DIR]) {
+    // 确保 skills、workspace 和 memory 子目录存在
+    for (const dir of [SKILLS_DIR, WORKSPACE_DIR, MEMORY_DIR]) {
       if (!existsSync(dir)) {
         mkdirSync(dir, { recursive: true });
       }
@@ -198,4 +199,4 @@ export async function savePairing(extensionId, token) {
   });
 }
 
-export { AGENT_DIR, CONFIG_FILE };
+export { AGENT_DIR, CONFIG_FILE, MEMORY_DIR };

package/src/security.js

@@ -2,7 +2,7 @@
 import { resolve, normalize, sep, isAbsolute, join, dirname } from 'path';
 import { realpathSync } from 'fs';
 import { homedir, platform } from 'os';
-import { loadConfig } from './config.js';
+import { loadConfig, MEMORY_DIR } from './config.js';
 
 const isWin32 = platform() === 'win32';
 
@@ -60,6 +60,13 @@ function checkPath(pathStr) {
     return { allowed: false, reason: '路径无效' };
   }
 
+  // 展开 ~ 到用户主目录（扩展端无法知道 Agent 所在机器的 home 路径）
+  if (pathStr === '~') {
+    pathStr = homedir();
+  } else if (pathStr.startsWith('~/')) {
+    pathStr = join(homedir(), pathStr.slice(2));
+  }
+
   try {
     const config = loadConfig();
 
@@ -74,6 +81,12 @@ function checkPath(pathStr) {
       return { allowed: false, reason: '禁止访问代理系统文件' };
     }
 
+    // 0.5. 系统目录白名单：记忆存储目录（Agent 内部管理，可读写）
+    const memoryPrefix = normalize(join(MEMORY_DIR, sep));
+    if (normalized.startsWith(memoryPrefix) || normalized === normalize(MEMORY_DIR)) {
+      return { allowed: true, resolved: normalized };
+    }
+
     const allowedPaths = config.allowedPaths.length > 0 ? config.allowedPaths.map(p => normalizePathFormat(p)) : [normalizedWorkdir];
 
     // 先做前缀检查（快速路径，兼容 Windows/Unix）