autohand-cli 0.8.2 → 0.9.0

package/dist/chunk-RO6WYEWH.js

@@ -1,454 +0,0 @@
-import {
-  addToLocalWhitelist,
-  loadLocalProjectSettings,
-  mergePermissions
-} from "./chunk-ALYU6VTM.js";
-
-// src/permissions/PermissionManager.ts
-import path from "path";
-var DEFAULT_SECURITY_BLACKLIST = [
-  // === Sensitive Files (read/write blocked) ===
-  // Environment files with secrets
-  "read_file:.env",
-  "read_file:.env.*",
-  "read_file:*.env",
-  "write_file:.env",
-  "write_file:.env.*",
-  "write_file:*.env",
-  // Git credentials and config
-  "read_file:.git/config",
-  "write_file:.git/config",
-  "read_file:.git/credentials",
-  "write_file:.git/credentials",
-  "read_file:.gitconfig",
-  "write_file:.gitconfig",
-  // SSH keys
-  "read_file:*/.ssh/*",
-  "write_file:*/.ssh/*",
-  "read_file:*/id_rsa*",
-  "read_file:*/id_ed25519*",
-  "read_file:*/id_ecdsa*",
-  "write_file:*/id_rsa*",
-  "write_file:*/id_ed25519*",
-  // Cloud credentials
-  "read_file:*/.aws/credentials",
-  "read_file:*/.aws/config",
-  "write_file:*/.aws/*",
-  "read_file:*/.azure/*",
-  "write_file:*/.azure/*",
-  "read_file:*/.gcloud/*",
-  "write_file:*/.gcloud/*",
-  // Private keys and certificates
-  "read_file:*.pem",
-  "read_file:*.key",
-  "read_file:*.p12",
-  "read_file:*.pfx",
-  "write_file:*.pem",
-  "write_file:*.key",
-  // GPG keys
-  "read_file:*/.gnupg/*",
-  "write_file:*/.gnupg/*",
-  // NPM tokens
-  "read_file:.npmrc",
-  "write_file:.npmrc",
-  // Docker credentials
-  "read_file:*/.docker/config.json",
-  "write_file:*/.docker/config.json",
-  // Kubernetes credentials
-  "read_file:*/.kube/config",
-  "write_file:*/.kube/config",
-  // === Dangerous Commands ===
-  // Environment exposure
-  "run_command:printenv",
-  "run_command:printenv *",
-  "run_command:env",
-  "run_command:export",
-  "run_command:set",
-  // System information
-  "run_command:cat /etc/passwd",
-  "run_command:cat /etc/shadow",
-  "run_command:cat /etc/sudoers",
-  // Privilege escalation
-  "run_command:sudo *",
-  "run_command:su *",
-  "run_command:doas *",
-  // Destructive operations
-  "run_command:rm -rf /",
-  "run_command:rm -rf /*",
-  "run_command:rm -rf ~",
-  "run_command:rm -rf ~/*",
-  "run_command:dd if=* of=/dev/*",
-  "run_command:mkfs*",
-  "run_command:wipefs*",
-  "run_command:shred*",
-  // Remote code execution
-  "run_command:curl * | *sh",
-  "run_command:wget * | *sh",
-  "run_command:curl *|*sh",
-  "run_command:wget *|*sh",
-  // Network tools that can exfiltrate
-  "run_command:nc -e*",
-  "run_command:ncat -e*",
-  "run_command:netcat -e*",
-  // Credential theft
-  "run_command:cat */.ssh/*",
-  "run_command:cat */.aws/*",
-  "run_command:cat *.pem",
-  "run_command:cat *.key"
-];
-var PermissionManager = class {
-  constructor(options = {}) {
-    this.sessionCache = /* @__PURE__ */ new Map();
-    this.localSettingsLoaded = false;
-    const isOptions = "settings" in options || "onPersist" in options || "workspaceRoot" in options;
-    const settings = isOptions ? options.settings ?? {} : options;
-    this.onPersist = isOptions ? options.onPersist : void 0;
-    this.workspaceRoot = isOptions ? options.workspaceRoot : void 0;
-    const userBlacklist = settings.blacklist ?? [];
-    this.settings = {
-      mode: "interactive",
-      whitelist: [],
-      blacklist: userBlacklist,
-      rules: [],
-      rememberSession: true,
-      ...settings
-    };
-    this.mode = this.settings.mode || "interactive";
-  }
-  /**
-   * Initialize local project settings (async)
-   * Call this after construction to load local .autohand/settings.local.json
-   */
-  async initLocalSettings() {
-    if (!this.workspaceRoot || this.localSettingsLoaded) return;
-    try {
-      const localSettings = await loadLocalProjectSettings(this.workspaceRoot);
-      if (localSettings?.permissions) {
-        this.localSettings = localSettings.permissions;
-      }
-      this.localSettingsLoaded = true;
-    } catch {
-    }
-  }
-  /**
-   * Get merged settings (global + local)
-   */
-  getMergedSettings() {
-    return mergePermissions(this.settings, this.localSettings);
-  }
-  /**
-   * Set permission mode (can be overridden by CLI flags)
-   */
-  setMode(mode) {
-    this.mode = mode;
-  }
-  /**
-   * Get current mode
-   */
-  getMode() {
-    return this.mode;
-  }
-  /**
-   * Check if an action should be allowed, denied, or prompted
-   */
-  checkPermission(context) {
-    if (this.isSecurityBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    const cacheKey = this.getCacheKey(context);
-    if (this.settings.rememberSession && this.sessionCache.has(cacheKey)) {
-      return {
-        allowed: this.sessionCache.get(cacheKey),
-        reason: this.sessionCache.get(cacheKey) ? "user_approved" : "user_denied",
-        cached: true
-      };
-    }
-    if (this.mode === "unrestricted") {
-      return { allowed: true, reason: "mode_unrestricted" };
-    }
-    if (this.mode === "restricted") {
-      return { allowed: false, reason: "mode_restricted" };
-    }
-    if (this.isBlacklisted(context)) {
-      return { allowed: false, reason: "blacklisted" };
-    }
-    if (this.isWhitelisted(context)) {
-      return { allowed: true, reason: "whitelisted" };
-    }
-    const ruleDecision = this.checkRules(context);
-    if (ruleDecision) {
-      return ruleDecision;
-    }
-    return { allowed: false, reason: "default" };
-  }
-  /**
-   * Record a user's decision - adds to local project whitelist/blacklist and persists
-   * Approved permissions are saved to .autohand/settings.local.json for "approve once, don't ask again"
-   */
-  async recordDecision(context, allowed) {
-    const merged = this.getMergedSettings();
-    if (merged.rememberSession) {
-      const cacheKey = this.getCacheKey(context);
-      this.sessionCache.set(cacheKey, allowed);
-    }
-    const pattern = this.contextToPattern(context);
-    const dirPattern = allowed && context.path ? this.buildDirectoryWildcard(context) : null;
-    if (allowed && this.workspaceRoot) {
-      try {
-        const patterns = dirPattern ? [pattern, dirPattern] : [pattern];
-        for (const p of patterns) {
-          await addToLocalWhitelist(this.workspaceRoot, p);
-        }
-        if (!this.localSettings) {
-          this.localSettings = { whitelist: [] };
-        }
-        if (!this.localSettings.whitelist) {
-          this.localSettings.whitelist = [];
-        }
-        for (const p of patterns) {
-          if (!this.localSettings.whitelist.includes(p)) {
-            this.localSettings.whitelist.push(p);
-          }
-        }
-      } catch {
-        this.addToWhitelist(pattern);
-        if (dirPattern) this.addToWhitelist(dirPattern);
-      }
-    } else if (allowed) {
-      this.addToWhitelist(pattern);
-      if (dirPattern) this.addToWhitelist(dirPattern);
-    } else {
-      this.addToBlacklist(pattern);
-    }
-    if (this.onPersist) {
-      await this.onPersist(this.settings);
-    }
-  }
-  /**
-   * Convert context to a pattern string for whitelist/blacklist
-   */
-  contextToPattern(context) {
-    const tool = context.tool;
-    let value;
-    if (context.command) {
-      const args = context.args?.join(" ") || "";
-      value = args ? `${context.command} ${args}` : context.command;
-    } else if (context.path) {
-      value = context.path;
-    } else {
-      return `${tool}:*`;
-    }
-    return `${tool}:${value}`;
-  }
-  /**
-   * Build a directory-level wildcard pattern for path-based approvals.
-   * E.g., write_file:/project/tests/foo.ts → write_file:/project/tests/*
-   * This allows future writes in the same directory to be auto-approved.
-   */
-  buildDirectoryWildcard(context) {
-    if (!context.path) return null;
-    const dir = path.dirname(context.path);
-    if (dir === "." || dir === "/") return null;
-    return `${context.tool}:${dir}/*`;
-  }
-  /**
-   * Check if context matches the immutable security blacklist
-   * This check CANNOT be bypassed by any mode, whitelist, or user setting
-   */
-  isSecurityBlacklisted(context) {
-    return DEFAULT_SECURITY_BLACKLIST.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches user blacklist (can be modified by user)
-   */
-  isBlacklisted(context) {
-    const merged = this.getMergedSettings();
-    const userBlacklist = merged.blacklist || [];
-    return userBlacklist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check if context matches whitelist (uses merged global + local settings)
-   */
-  isWhitelisted(context) {
-    const merged = this.getMergedSettings();
-    const whitelist = merged.whitelist || [];
-    return whitelist.some((pattern) => this.matchesPattern(context, pattern));
-  }
-  /**
-   * Check custom rules (uses merged global + local settings)
-   */
-  checkRules(context) {
-    const merged = this.getMergedSettings();
-    const rules = merged.rules || [];
-    for (const rule of rules) {
-      if (this.ruleMatches(context, rule)) {
-        if (rule.action === "allow") {
-          return { allowed: true, reason: "rule_match" };
-        }
-        if (rule.action === "deny") {
-          return { allowed: false, reason: "rule_match" };
-        }
-      }
-    }
-    return null;
-  }
-  /**
-   * Check if a rule matches the context
-   */
-  ruleMatches(context, rule) {
-    if (rule.tool !== "*" && rule.tool !== context.tool) {
-      return false;
-    }
-    if (rule.pattern) {
-      const fullCommand = this.getFullCommand(context);
-      return this.globMatch(fullCommand, rule.pattern);
-    }
-    return true;
-  }
-  /**
-   * Match context against a pattern string
-   * Format: "tool:pattern" or just "pattern" for run_command
-   */
-  matchesPattern(context, pattern) {
-    const colonIndex = pattern.indexOf(":");
-    let toolPattern;
-    let commandPattern;
-    if (colonIndex !== -1) {
-      toolPattern = pattern.substring(0, colonIndex);
-      commandPattern = pattern.substring(colonIndex + 1);
-    } else {
-      toolPattern = "run_command";
-      commandPattern = pattern;
-    }
-    if (toolPattern !== "*" && toolPattern !== context.tool) {
-      return false;
-    }
-    const fullCommand = this.getFullCommand(context);
-    return this.globMatch(fullCommand, commandPattern);
-  }
-  /**
-   * Get full command string from context
-   */
-  getFullCommand(context) {
-    if (context.command) {
-      const args = context.args?.join(" ") || "";
-      return args ? `${context.command} ${args}` : context.command;
-    }
-    if (context.path) {
-      return context.path;
-    }
-    return context.tool;
-  }
-  /**
-   * Simple glob matching (* for wildcards)
-   */
-  globMatch(text, pattern) {
-    const regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
-    const regex = new RegExp(`^${regexPattern}$`, "i");
-    return regex.test(text);
-  }
-  /**
-   * Generate cache key from context
-   */
-  getCacheKey(context) {
-    const parts = [context.tool];
-    if (context.command) parts.push(context.command);
-    if (context.args?.length) parts.push(context.args.join(" "));
-    if (context.path) parts.push(context.path);
-    return parts.join("::");
-  }
-  /**
-   * Clear session cache
-   */
-  clearCache() {
-    this.sessionCache.clear();
-  }
-  /**
-   * Get session cache stats
-   */
-  getCacheStats() {
-    return {
-      size: this.sessionCache.size,
-      entries: Array.from(this.sessionCache.keys())
-    };
-  }
-  /**
-   * Add to whitelist dynamically
-   */
-  addToWhitelist(pattern) {
-    if (!this.settings.whitelist) {
-      this.settings.whitelist = [];
-    }
-    if (!this.settings.whitelist.includes(pattern)) {
-      this.settings.whitelist.push(pattern);
-    }
-  }
-  /**
-   * Add to blacklist dynamically
-   */
-  addToBlacklist(pattern) {
-    if (!this.settings.blacklist) {
-      this.settings.blacklist = [];
-    }
-    if (!this.settings.blacklist.includes(pattern)) {
-      this.settings.blacklist.push(pattern);
-    }
-  }
-  /**
-   * Remove from whitelist
-   */
-  async removeFromWhitelist(pattern) {
-    if (!this.settings.whitelist) return false;
-    const index = this.settings.whitelist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.whitelist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Remove from blacklist
-   */
-  async removeFromBlacklist(pattern) {
-    if (!this.settings.blacklist) return false;
-    const index = this.settings.blacklist.indexOf(pattern);
-    if (index !== -1) {
-      this.settings.blacklist.splice(index, 1);
-      if (this.onPersist) {
-        await this.onPersist(this.settings);
-      }
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Get current whitelist
-   */
-  getWhitelist() {
-    return [...this.settings.whitelist || []];
-  }
-  /**
-   * Get current blacklist
-   */
-  getBlacklist() {
-    return [...this.settings.blacklist || []];
-  }
-  /**
-   * Get current settings (for display)
-   */
-  getSettings() {
-    return { ...this.settings };
-  }
-};
-
-export {
-  DEFAULT_SECURITY_BLACKLIST,
-  PermissionManager
-};
-/**
- * Permission Manager - Handles tool/command approval with whitelist/blacklist
- * @license Apache-2.0
- */

package/dist/chunk-SYVYLZZF.cjs

@@ -1,24 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-var _chunk7BTSG4MEcjs = require('./chunk-7BTSG4ME.cjs');
-
-// src/commands/model.ts
-async function model(ctx) {
-  await ctx.promptModelSelection();
-  return null;
-}
-var metadata = {
-  command: "/model",
-  description: _chunk7BTSG4MEcjs.t.call(void 0, "commands.model.description"),
-  implemented: true
-};
-
-
-
-
-exports.model = model; exports.metadata = metadata;
-/**
- * @license
- * Copyright 2025 Autohand AI LLC
- * SPDX-License-Identifier: Apache-2.0
- */

package/dist/chunk-T73IDKDF.js

@@ -1,111 +0,0 @@
-// package.json
-var package_default = {
-  name: "autohand-cli",
-  version: "0.8.2",
-  license: "Apache-2.0",
-  description: "Autohand interactive coding agent CLI powered by LLMs.",
-  repository: {
-    type: "git",
-    url: "https://github.com/autohandai/code-cli.git"
-  },
-  homepage: "https://autohand.ai/cli/",
-  bugs: {
-    url: "https://github.com/autohandai/code-cli/issues"
-  },
-  type: "module",
-  bin: {
-    autohand: "dist/index.js"
-  },
-  main: "dist/index.js",
-  files: [
-    "dist",
-    "assets"
-  ],
-  scripts: {
-    postinstall: "node scripts/fix-ansi-styles.js || true && node scripts/fix-ink-devtools.js || true && node scripts/fix-yoga-wasm.js || true",
-    go: 'bun run build && ./install-local.sh && echo "COMPLETED"',
-    build: "tsup",
-    dev: "bun src/index.ts",
-    typecheck: "tsc --noEmit",
-    lint: "eslint .",
-    proof: "bun run lint && bun run typecheck && bun run test",
-    test: "vitest run",
-    start: "node dist/index.js",
-    "compile:macos-arm64": "bun build ./src/index.ts --compile --target=bun-darwin-arm64 --outfile ./binaries/autohand-macos-arm64",
-    "compile:macos-x64": "bun build ./src/index.ts --compile --target=bun-darwin-x64 --outfile ./binaries/autohand-macos-x64",
-    "compile:linux-x64": "bun build ./src/index.ts --compile --target=bun-linux-x64 --outfile ./binaries/autohand-linux-x64",
-    "compile:linux-arm64": "bun build ./src/index.ts --compile --target=bun-linux-arm64 --outfile ./binaries/autohand-linux-arm64",
-    "compile:windows-x64": "bun build ./src/index.ts --compile --target=bun-windows-x64 --outfile ./binaries/autohand-windows-x64.exe",
-    "compile:all": "bun run compile:macos-arm64 && bun run compile:macos-x64 && bun run compile:linux-x64 && bun run compile:linux-arm64 && bun run compile:windows-x64",
-    link: "bun link",
-    translate: "tsx scripts/generate-translations.ts"
-  },
-  keywords: [
-    "cli",
-    "llm",
-    "agent",
-    "autohand"
-  ],
-  engines: {
-    node: ">=18.17.0"
-  },
-  dependencies: {
-    "@agentclientprotocol/sdk": "0.12.0",
-    chalk: "^5.6.2",
-    commander: "^14.0.2",
-    diff: "^8.0.2",
-    dotenv: "^17.2.3",
-    "fs-extra": "^11.3.2",
-    ignore: "^5.3.1",
-    ink: "^4.4.1",
-    "ink-spinner": "^5.0.0",
-    minimatch: "^10.1.1",
-    "node-notifier": "^10.0.1",
-    open: "^10.1.0",
-    ora: "^9.0.0",
-    react: "^18.2.0",
-    "string-width": "^8.2.0",
-    "terminal-link": "^3.0.0",
-    yaml: "^2.8.2",
-    zod: "^4.1.12"
-  },
-  devDependencies: {
-    "@types/diff": "^8.0.0",
-    "@types/fs-extra": "^11.0.4",
-    "@types/minimatch": "^6.0.0",
-    "@types/node": "^24.10.1",
-    "@types/node-notifier": "^8.0.5",
-    "@types/react": "^18.3.3",
-    "@types/terminal-link": "^1.2.0",
-    "@typescript-eslint/eslint-plugin": "^8.48.1",
-    "@typescript-eslint/parser": "^8.48.1",
-    eslint: "^9.39.1",
-    "ink-testing-library": "^3.0.0",
-    memfs: "^4.51.1",
-    "react-devtools-core": "^7.0.1",
-    "strip-ansi": "^7.1.2",
-    tsup: "^8.5.1",
-    tsx: "^4.20.6",
-    typescript: "^5.9.3",
-    vitest: "^1.6.0"
-  },
-  overrides: {
-    ink: {
-      "slice-ansi": {
-        "ansi-styles": "^6.2.1"
-      },
-      "wrap-ansi": {
-        "ansi-styles": "^6.2.1"
-      },
-      "cli-truncate": {
-        "slice-ansi": {
-          "ansi-styles": "^6.2.1"
-        }
-      }
-    }
-  }
-};
-
-export {
-  package_default
-};

package/dist/chunk-YRLYSQEQ.cjs

@@ -1,105 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
-
-var _chunkSEKD5FH3cjs = require('./chunk-SEKD5FH3.cjs');
-
-// src/permissions/localProjectPermissions.ts
-var _fsextra = require('fs-extra'); var _fsextra2 = _interopRequireDefault(_fsextra);
-var _path = require('path'); var _path2 = _interopRequireDefault(_path);
-var LOCAL_SETTINGS_FILE = "settings.local.json";
-function getLocalSettingsPath(workspaceRoot) {
-  return _path2.default.join(workspaceRoot, _chunkSEKD5FH3cjs.PROJECT_DIR_NAME, LOCAL_SETTINGS_FILE);
-}
-async function loadLocalProjectSettings(workspaceRoot) {
-  const settingsPath = getLocalSettingsPath(workspaceRoot);
-  try {
-    if (await _fsextra2.default.pathExists(settingsPath)) {
-      const content = await _fsextra2.default.readFile(settingsPath, "utf8");
-      return JSON.parse(content);
-    }
-  } catch (error) {
-    console.error(`Warning: Failed to parse local settings at ${settingsPath}:`, error.message);
-  }
-  return null;
-}
-async function saveLocalProjectSettings(workspaceRoot, settings) {
-  const settingsPath = getLocalSettingsPath(workspaceRoot);
-  const dir = _path2.default.dirname(settingsPath);
-  await _fsextra2.default.ensureDir(dir);
-  const toSave = {
-    ...settings,
-    version: 1
-  };
-  await _fsextra2.default.writeJson(settingsPath, toSave, { spaces: 2 });
-}
-async function addToLocalWhitelist(workspaceRoot, pattern) {
-  const current = await loadLocalProjectSettings(workspaceRoot) || {};
-  const permissions = current.permissions || {};
-  const whitelist = permissions.whitelist || [];
-  if (!whitelist.includes(pattern)) {
-    whitelist.push(pattern);
-    await saveLocalProjectSettings(workspaceRoot, {
-      ...current,
-      permissions: {
-        ...permissions,
-        whitelist
-      }
-    });
-  }
-}
-async function addToLocalBlacklist(workspaceRoot, pattern) {
-  const current = await loadLocalProjectSettings(workspaceRoot) || {};
-  const permissions = current.permissions || {};
-  const blacklist = permissions.blacklist || [];
-  if (!blacklist.includes(pattern)) {
-    blacklist.push(pattern);
-    await saveLocalProjectSettings(workspaceRoot, {
-      ...current,
-      permissions: {
-        ...permissions,
-        blacklist
-      }
-    });
-  }
-}
-function mergePermissions(globalSettings, localSettings) {
-  if (!localSettings) {
-    return globalSettings;
-  }
-  return {
-    // Global settings as base
-    ...globalSettings,
-    // Local mode overrides global if set
-    mode: localSettings.mode || globalSettings.mode,
-    // Merge whitelists (deduplicated)
-    whitelist: [
-      ...globalSettings.whitelist || [],
-      ...localSettings.whitelist || []
-    ].filter((v, i, a) => a.indexOf(v) === i),
-    // Merge blacklists (deduplicated)
-    blacklist: [
-      ...globalSettings.blacklist || [],
-      ...localSettings.blacklist || []
-    ].filter((v, i, a) => a.indexOf(v) === i),
-    // Merge rules (local rules checked first)
-    rules: [
-      ...localSettings.rules || [],
-      ...globalSettings.rules || []
-    ],
-    // Use local rememberSession if set, otherwise global
-    rememberSession: _nullishCoalesce(localSettings.rememberSession, () => ( globalSettings.rememberSession))
-  };
-}
-
-
-
-
-
-
-
-
-exports.getLocalSettingsPath = getLocalSettingsPath; exports.loadLocalProjectSettings = loadLocalProjectSettings; exports.saveLocalProjectSettings = saveLocalProjectSettings; exports.addToLocalWhitelist = addToLocalWhitelist; exports.addToLocalBlacklist = addToLocalBlacklist; exports.mergePermissions = mergePermissions;
-/**
- * Local Project Permissions
- * Handles per-project permission settings stored in .autohand/settings.local.json
- * @license Apache-2.0
- */