ai-project-manage-cli 7.1.8 → 7.1.10

package/dist/index.js

@@ -7039,7 +7039,11 @@ async function obtainAgent(ctx) {
       cwd: ctx.cwd,
       store: createWorkspaceLocalAgentStore(ctx.workdir),
       ...ctx.customTools ? { customTools: ctx.customTools } : {},
-      ...ctx.enableSandbox ? { sandboxOptions: { enabled: true } } : {}
+      ...ctx.enableSandbox ? {
+        sandboxOptions: { enabled: true },
+        // 只加载项目级设置，避免 ~/.cursor/mcp.json 里需 OAuth/审批的 MCP 在无头沙箱被拒
+        settingSources: ["project"]
+      } : {}
     },
     ...ctx.mode ? { mode: ctx.mode } : {}
     // mcpServers: createPlaywrightMcpServers(),
@@ -7100,9 +7104,7 @@ async function runCursorAgent(cfg, ctx, options) {
   });
   const enableSandbox = Boolean(options?.enableSandbox);
   let prompt = withPlanModeToolHint(ctx.prompt, ctx.mode);
-  if (enableSandbox) {
-    prompt = withWorkspaceBoundaryHint(prompt);
-  }
+  prompt = withWorkspaceBoundaryHint(prompt);
   console.log(
     `[apm] Cursor Agent \u5F00\u59CB messageId=${ctx.messageId} sessionId=${ctx.sessionId} cwd=${workdir} sandbox=${enableSandbox}`
   );

package/dist/webide-message-worker.js

@@ -1759,7 +1759,11 @@ async function obtainAgent(ctx) {
       cwd: ctx.cwd,
       store: createWorkspaceLocalAgentStore(ctx.workdir),
       ...ctx.customTools ? { customTools: ctx.customTools } : {},
-      ...ctx.enableSandbox ? { sandboxOptions: { enabled: true } } : {}
+      ...ctx.enableSandbox ? {
+        sandboxOptions: { enabled: true },
+        // 只加载项目级设置，避免 ~/.cursor/mcp.json 里需 OAuth/审批的 MCP 在无头沙箱被拒
+        settingSources: ["project"]
+      } : {}
     },
     ...ctx.mode ? { mode: ctx.mode } : {}
     // mcpServers: createPlaywrightMcpServers(),
@@ -1820,9 +1824,7 @@ async function runCursorAgent(cfg, ctx, options) {
   });
   const enableSandbox = Boolean(options?.enableSandbox);
   let prompt = withPlanModeToolHint(ctx.prompt, ctx.mode);
-  if (enableSandbox) {
-    prompt = withWorkspaceBoundaryHint(prompt);
-  }
+  prompt = withWorkspaceBoundaryHint(prompt);
   console.log(
     `[apm] Cursor Agent \u5F00\u59CB messageId=${ctx.messageId} sessionId=${ctx.sessionId} cwd=${workdir} sandbox=${enableSandbox}`
   );
@@ -2597,82 +2599,6 @@ async function ensureWebIdeDraftPullRequests(cfg, taskId, workdir) {
   }
 }
 
-// src/commands/connect/ensure-workspace-permissions.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync9 } from "fs";
-import { join as join8 } from "path";
-var WEBIDE_MCP_ALLOWLIST = ["custom-user-tools:*"];
-function parsePermissionsConfig(raw) {
-  try {
-    const parsed = JSON.parse(raw);
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-      return void 0;
-    }
-    return parsed;
-  } catch {
-    return void 0;
-  }
-}
-function mergeMcpAllowlist(existing) {
-  const merged = /* @__PURE__ */ new Set([
-    ...existing ?? [],
-    ...WEBIDE_MCP_ALLOWLIST
-  ]);
-  return [...merged];
-}
-function needsMcpAllowlistUpdate(existing) {
-  const current = existing ?? [];
-  return WEBIDE_MCP_ALLOWLIST.some((entry) => !current.includes(entry));
-}
-function ensureWorkspacePermissionsConfig(workdir) {
-  const cursorDir = toFsPath(join8(workdir, ".cursor"));
-  const permissionsPath = toFsPath(join8(cursorDir, "permissions.json"));
-  let config = {};
-  if (existsSync6(permissionsPath)) {
-    const raw = readFileSync8(permissionsPath, "utf8");
-    const parsed = parsePermissionsConfig(raw);
-    if (!parsed) {
-      console.warn(
-        `[apm] \u5DE5\u4F5C\u533A permissions.json \u65E0\u6CD5\u89E3\u6790\uFF0C\u8DF3\u8FC7\u5199\u5165\uFF1A${permissionsPath}`
-      );
-      return;
-    }
-    config = parsed;
-  }
-  if (!needsMcpAllowlistUpdate(config.mcpAllowlist)) {
-    return;
-  }
-  config.mcpAllowlist = mergeMcpAllowlist(config.mcpAllowlist);
-  mkdirSync7(cursorDir, { recursive: true });
-  writeFileSync9(
-    permissionsPath,
-    `${JSON.stringify(config, null, 2)}
-`,
-    "utf8"
-  );
-  console.log(
-    `[apm] \u5DF2\u66F4\u65B0\u5DE5\u4F5C\u533A permissions \u914D\u7F6E\uFF08mcpAllowlist\uFF09\uFF1A${permissionsPath}`
-  );
-}
-
-// src/commands/connect/ensure-workspace-sandbox.ts
-import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync10, existsSync as existsSync7 } from "fs";
-import { join as join9 } from "path";
-var DEFAULT_SANDBOX_JSON = `{
-  "type": "workspace_readwrite",
-  "networkPolicy": {
-    "default": "allow"
-  }
-}
-`;
-function ensureWorkspaceSandboxConfig(workdir) {
-  const cursorDir = toFsPath(join9(workdir, ".cursor"));
-  const sandboxPath = toFsPath(join9(cursorDir, "sandbox.json"));
-  if (existsSync7(sandboxPath)) return;
-  mkdirSync8(cursorDir, { recursive: true });
-  writeFileSync10(sandboxPath, DEFAULT_SANDBOX_JSON, "utf8");
-  console.log(`[apm] \u5DF2\u5199\u5165\u5DE5\u4F5C\u533A sandbox \u914D\u7F6E\uFF1A${sandboxPath}`);
-}
-
 // src/commands/connect/handle-webide-message.ts
 async function updateStatus(cfg, messageId, status) {
   const api = createApmApiClient(cfg);
@@ -2701,8 +2627,6 @@ async function handleWebIdeInboundMessage(cfg, msg, signal) {
     if (!didInit) {
       assertApmGitignoredInRepo(workdir);
     }
-    ensureWorkspaceSandboxConfig(workdir);
-    ensureWorkspacePermissionsConfig(workdir);
     resolveWorkspaceRepos(workdir);
     if (shouldRunBranch(branchCacheKey, workdir)) {
       if (signal.aborted) throw new Error("\u4EFB\u52A1\u5DF2\u53D6\u6D88");
@@ -2743,7 +2667,8 @@ async function handleWebIdeInboundMessage(cfg, msg, signal) {
           signal
         }),
         enableWebIdePlanTools: true,
-        enableSandbox: true,
+        // 本地 SDK sandbox 会拦截 custom-user-tools MCP，WebIDE 先关闭
+        enableSandbox: false,
         taskId,
         createRemoteLogSync: (agentId) => {
           saveWebIdeAgentId(workdir, taskId, agentId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-project-manage-cli",
-  "version": "7.1.8",
+  "version": "7.1.10",
   "description": "命令行工具：后续用于调用平台后端 API 完成运维与自动化操作",
   "type": "module",
   "private": false,