ai-project-manage-cli 7.1.6 → 7.1.7

package/dist/webide-message-worker.js

@@ -2581,9 +2581,66 @@ async function ensureWebIdeDraftPullRequests(cfg, taskId, workdir) {
   }
 }
 
-// src/commands/connect/ensure-workspace-sandbox.ts
-import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync9, existsSync as existsSync6 } from "fs";
+// src/commands/connect/ensure-workspace-permissions.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync9 } from "fs";
 import { join as join8 } from "path";
+var WEBIDE_MCP_ALLOWLIST = ["custom-user-tools:*"];
+function parsePermissionsConfig(raw) {
+  try {
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return void 0;
+    }
+    return parsed;
+  } catch {
+    return void 0;
+  }
+}
+function mergeMcpAllowlist(existing) {
+  const merged = /* @__PURE__ */ new Set([
+    ...existing ?? [],
+    ...WEBIDE_MCP_ALLOWLIST
+  ]);
+  return [...merged];
+}
+function needsMcpAllowlistUpdate(existing) {
+  const current = existing ?? [];
+  return WEBIDE_MCP_ALLOWLIST.some((entry) => !current.includes(entry));
+}
+function ensureWorkspacePermissionsConfig(workdir) {
+  const cursorDir = toFsPath(join8(workdir, ".cursor"));
+  const permissionsPath = toFsPath(join8(cursorDir, "permissions.json"));
+  let config = {};
+  if (existsSync6(permissionsPath)) {
+    const raw = readFileSync8(permissionsPath, "utf8");
+    const parsed = parsePermissionsConfig(raw);
+    if (!parsed) {
+      console.warn(
+        `[apm] \u5DE5\u4F5C\u533A permissions.json \u65E0\u6CD5\u89E3\u6790\uFF0C\u8DF3\u8FC7\u5199\u5165\uFF1A${permissionsPath}`
+      );
+      return;
+    }
+    config = parsed;
+  }
+  if (!needsMcpAllowlistUpdate(config.mcpAllowlist)) {
+    return;
+  }
+  config.mcpAllowlist = mergeMcpAllowlist(config.mcpAllowlist);
+  mkdirSync7(cursorDir, { recursive: true });
+  writeFileSync9(
+    permissionsPath,
+    `${JSON.stringify(config, null, 2)}
+`,
+    "utf8"
+  );
+  console.log(
+    `[apm] \u5DF2\u66F4\u65B0\u5DE5\u4F5C\u533A permissions \u914D\u7F6E\uFF08mcpAllowlist\uFF09\uFF1A${permissionsPath}`
+  );
+}
+
+// src/commands/connect/ensure-workspace-sandbox.ts
+import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync10, existsSync as existsSync7 } from "fs";
+import { join as join9 } from "path";
 var DEFAULT_SANDBOX_JSON = `{
   "type": "workspace_readwrite",
   "networkPolicy": {
@@ -2592,11 +2649,11 @@ var DEFAULT_SANDBOX_JSON = `{
 }
 `;
 function ensureWorkspaceSandboxConfig(workdir) {
-  const cursorDir = toFsPath(join8(workdir, ".cursor"));
-  const sandboxPath = toFsPath(join8(cursorDir, "sandbox.json"));
-  if (existsSync6(sandboxPath)) return;
-  mkdirSync7(cursorDir, { recursive: true });
-  writeFileSync9(sandboxPath, DEFAULT_SANDBOX_JSON, "utf8");
+  const cursorDir = toFsPath(join9(workdir, ".cursor"));
+  const sandboxPath = toFsPath(join9(cursorDir, "sandbox.json"));
+  if (existsSync7(sandboxPath)) return;
+  mkdirSync8(cursorDir, { recursive: true });
+  writeFileSync10(sandboxPath, DEFAULT_SANDBOX_JSON, "utf8");
   console.log(`[apm] \u5DF2\u5199\u5165\u5DE5\u4F5C\u533A sandbox \u914D\u7F6E\uFF1A${sandboxPath}`);
 }
 
@@ -2629,6 +2686,7 @@ async function handleWebIdeInboundMessage(cfg, msg, signal) {
       assertApmGitignoredInRepo(workdir);
     }
     ensureWorkspaceSandboxConfig(workdir);
+    ensureWorkspacePermissionsConfig(workdir);
     resolveWorkspaceRepos(workdir);
     if (shouldRunBranch(branchCacheKey, workdir)) {
       if (signal.aborted) throw new Error("\u4EFB\u52A1\u5DF2\u53D6\u6D88");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-project-manage-cli",
-  "version": "7.1.6",
+  "version": "7.1.7",
   "description": "命令行工具：后续用于调用平台后端 API 完成运维与自动化操作",
   "type": "module",
   "private": false,