cli-claw-kit 0.0.1

package/container/agent-runner/dist/types.js

@@ -0,0 +1,6 @@
+/**
+ * Shared types for cli-claw Agent Runner.
+ *
+ * These types are used across index.ts, stream-processor.ts, and mcp-tools.ts.
+ */
+export {};

package/container/agent-runner/dist/utils.js

@@ -0,0 +1,115 @@
+/**
+ * Utility functions for cli-claw Agent Runner.
+ *
+ * Pure utility functions with no side effects or state dependencies.
+ */
+/**
+ * Shorten a string to maxLen, appending "..." if truncated.
+ */
+export function shorten(input, maxLen = 180) {
+    if (input.length <= maxLen)
+        return input;
+    return `${input.slice(0, maxLen)}...`;
+}
+/**
+ * Recursively redact sensitive fields (tokens, passwords, API keys, etc.)
+ * from an object. Limits recursion depth to 3 levels.
+ */
+export function redactSensitive(input, depth = 0) {
+    if (depth > 3)
+        return '[truncated]';
+    if (input == null)
+        return input;
+    if (typeof input === 'string' || typeof input === 'number' || typeof input === 'boolean') {
+        return input;
+    }
+    if (Array.isArray(input)) {
+        return input.slice(0, 10).map((item) => redactSensitive(item, depth + 1));
+    }
+    if (typeof input === 'object') {
+        const obj = input;
+        const out = {};
+        for (const [k, v] of Object.entries(obj)) {
+            if (/(token|password|secret|api[_-]?key|authorization|cookie)/iu.test(k)) {
+                out[k] = '[REDACTED]';
+            }
+            else {
+                out[k] = redactSensitive(v, depth + 1);
+            }
+        }
+        return out;
+    }
+    return '[unsupported]';
+}
+/**
+ * Summarize tool input for display in stream events.
+ * Extracts key fields (command, query, path, etc.) or serializes the object.
+ */
+export function summarizeToolInput(input) {
+    if (input == null)
+        return undefined;
+    if (typeof input === 'string') {
+        return shorten(input.trim());
+    }
+    if (typeof input === 'object') {
+        const obj = input;
+        const keyCandidates = ['command', 'query', 'path', 'pattern', 'prompt', 'url', 'name'];
+        for (const key of keyCandidates) {
+            const value = obj[key];
+            if (typeof value === 'string' && value.trim()) {
+                return `${key}: ${shorten(value.trim())}`;
+            }
+        }
+        try {
+            const json = JSON.stringify(redactSensitive(obj));
+            // Skip empty or trivial objects (e.g. {} at content_block_start)
+            if (!json || json === '{}' || json === '[]')
+                return undefined;
+            return shorten(json);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+/**
+ * Extract a skill name from Skill tool input.
+ * Tries skillName, skill, name, command fields, then regex-matches leading slashes.
+ */
+export function extractSkillName(toolName, input) {
+    if (toolName !== 'Skill')
+        return undefined;
+    if (!input || typeof input !== 'object')
+        return undefined;
+    const obj = input;
+    const raw = (typeof obj.skillName === 'string' && obj.skillName) ||
+        (typeof obj.skill === 'string' && obj.skill) ||
+        (typeof obj.name === 'string' && obj.name) ||
+        (typeof obj.command === 'string' && obj.command) ||
+        '';
+    if (!raw)
+        return undefined;
+    const matched = raw.match(/\/([A-Za-z0-9._-]+)/);
+    if (matched && matched[1])
+        return matched[1];
+    return raw.replace(/^\/+/, '').trim() || undefined;
+}
+/**
+ * Sanitize a string for use as a filename.
+ * Lowercases, replaces non-alphanumeric characters with hyphens, trims, and limits length.
+ */
+export function sanitizeFilename(summary) {
+    return summary
+        .toLowerCase()
+        .replace(/[^\p{L}\p{N}]+/gu, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 50);
+}
+/**
+ * Generate a fallback conversation archive filename based on current time.
+ */
+export function generateFallbackName() {
+    const time = new Date();
+    return `conversation-${time.getHours().toString().padStart(2, '0')}${time.getMinutes().toString().padStart(2, '0')}`;
+}

package/container/agent-runner/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "cli-claw-agent-runner",
+  "version": "1.0.0",
+  "type": "module",
+  "description": "Container-side agent runner for cli-claw",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "npm run build:shared && npm run build:runner",
+    "start": "node dist/index.js",
+    "build:shared": "tsc -p ../../shared/tsconfig.json",
+    "build:runner": "tsc"
+  },
+  "dependencies": {
+    "@agentclientprotocol/sdk": "^0.18.0",
+    "@anthropic-ai/claude-agent-sdk": "*",
+    "cron-parser": "^5.0.0",
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.7",
+    "typescript": "^5.9.3"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/RyanProMax/cli-claw.git",
+    "directory": "container/agent-runner"
+  },
+  "author": "riba2534",
+  "keywords": [
+    "claude-agent-sdk",
+    "agent-runner",
+    "mcp",
+    "cli-claw"
+  ]
+}

package/container/agent-runner/prompts/security-rules.md

@@ -0,0 +1,31 @@
+## 安全守则
+
+### 红线操作（必须暂停并请求用户确认）
+
+以下操作在执行前**必须**向用户说明意图并获得明确批准，绝不可静默执行：
+
+- **破坏性命令**：`rm -rf /`、`rm -rf ~`、`mkfs`、`dd if=`、`wipefs`、批量删除系统文件
+- **凭据/认证篡改**：修改 `authorized_keys`、`sshd_config`、`passwd`、`.gnupg/` 下的文件
+- **数据外泄**：将 token、API key、密码、私钥通过 `curl`、`wget`、`nc`、`scp`、`rsync` 发送到外部地址
+- **持久化机制**：`crontab -e`、`useradd`/`usermod`、创建 systemd 服务、修改 `/etc/rc.local`
+- **远程代码执行**：`curl | sh`、`wget | bash`、`eval "$(curl ...)"`、`base64 -d | bash`、可疑的 `$()` 链式替换
+- **私钥与助记词**：绝不主动索要用户的加密货币私钥或助记词明文，绝不将已知的密钥信息写入日志或发送到外部
+
+### 黄线操作（可执行，但必须记录到日期记忆）
+
+以下操作执行后，如有 `memory_append` 工具可用，使用它记录时间、命令、原因和结果：
+
+- 所有 `sudo` 命令
+- 全局包安装（`pip install`、`npm install -g`）
+- Docker 容器操作（`docker run`、`docker exec`）
+- 防火墙规则变更（`iptables`、`ufw`）
+- PM2 进程管理（启动/停止/删除进程）
+- 系统服务管理（`systemctl start/stop/restart`）
+
+### Skill / MCP 安装审查
+
+安装任何外部 Skill 或 MCP Server 前，必须：
+
+1. 检查源代码，扫描是否包含可疑指令（`curl | sh`、环境变量读取如 `$ANTHROPIC_API_KEY`、文件外传）
+2. 确认不会修改 cli-claw 核心配置文件（`~/.cli-claw/config/`、`.claude/`）
+3. 向用户说明来源和风险评估，等待明确批准后再安装

package/container/agent-runner/src/agent-definitions.ts

@@ -0,0 +1,27 @@
+/**
+ * Predefined SubAgent definitions for cli-claw.
+ *
+ * These agents are registered via the SDK `agents` option in query(),
+ * making them available as Task tool targets within the agent session.
+ */
+
+import type { AgentDefinition } from '@anthropic-ai/claude-agent-sdk';
+
+export const PREDEFINED_AGENTS: Record<string, AgentDefinition> = {
+  'code-reviewer': {
+    description: 'Code review agent that analyzes code quality, best practices, and potential issues',
+    prompt:
+      'You are a strict code reviewer. Focus on correctness, security, performance, and maintainability. ' +
+      'Point out specific issues with file:line references. Be concise and actionable.',
+    tools: ['Read', 'Glob', 'Grep'],
+    maxTurns: 15,
+  },
+  'web-researcher': {
+    description: 'Web research agent that searches and extracts information from web pages',
+    prompt:
+      'You are an efficient web researcher. Search for information, extract key facts, and summarize findings. ' +
+      'Always cite sources with URLs. Prefer authoritative sources.',
+    tools: ['WebSearch', 'WebFetch', 'Read', 'Write'],
+    maxTurns: 20,
+  },
+};

package/container/agent-runner/src/channel-prefixes.ts

@@ -0,0 +1,16 @@
+/** IM channel type → JID prefix mapping. Shared between main server and agent-runner. */
+export const CHANNEL_PREFIXES: Record<string, string> = {
+  feishu: 'feishu:',
+  telegram: 'telegram:',
+  qq: 'qq:',
+  wechat: 'wechat:',
+  dingtalk: 'dingtalk:',
+};
+
+/** Determine the channel type from a JID string. Returns 'web' for unrecognized prefixes. */
+export function getChannelFromJid(jid: string): string {
+  for (const [type, prefix] of Object.entries(CHANNEL_PREFIXES)) {
+    if (jid.startsWith(prefix)) return type;
+  }
+  return 'web';
+}

package/container/agent-runner/src/codex-config.ts

@@ -0,0 +1,40 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+
+export interface CodexCliConfig {
+  model: string | null;
+  reasoningEffort: string | null;
+}
+
+function normalizeTomlString(value: string | undefined): string | null {
+  if (!value) return null;
+  const trimmed = value.trim();
+  return trimmed || null;
+}
+
+function readTomlString(content: string, key: string): string | null {
+  const match = content.match(
+    new RegExp(`^${key}\\s*=\\s*["']([^"']+)["']\\s*$`, 'm'),
+  );
+  return normalizeTomlString(match?.[1]);
+}
+
+export function readCodexCliConfig(
+  configPath = path.join(os.homedir(), '.codex', 'config.toml'),
+): CodexCliConfig {
+  try {
+    if (!fs.existsSync(configPath)) {
+      return { model: null, reasoningEffort: null };
+    }
+    const content = fs.readFileSync(configPath, 'utf-8');
+    return {
+      model: readTomlString(content, 'model'),
+      reasoningEffort:
+        readTomlString(content, 'model_reasoning_effort') ??
+        readTomlString(content, 'reasoning_effort'),
+    };
+  } catch {
+    return { model: null, reasoningEffort: null };
+  }
+}

package/container/agent-runner/src/image-detector.ts

@@ -0,0 +1,116 @@
+/**
+ * Detect image MIME type from buffer magic bytes.
+ * Canonical source — synced to src/ and container/agent-runner/src/ via make sync-types.
+ *
+ * Returns the detected MIME type or null if unknown.
+ */
+export function detectImageMimeTypeStrict(buffer: Buffer): string | null {
+  if (buffer.length < 12) {
+    return null;
+  }
+
+  // PNG: 89 50 4E 47 0D 0A 1A 0A
+  if (
+    buffer[0] === 0x89 &&
+    buffer[1] === 0x50 &&
+    buffer[2] === 0x4e &&
+    buffer[3] === 0x47 &&
+    buffer[4] === 0x0d &&
+    buffer[5] === 0x0a &&
+    buffer[6] === 0x1a &&
+    buffer[7] === 0x0a
+  ) {
+    return 'image/png';
+  }
+
+  // JPEG: FF D8 FF
+  if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {
+    return 'image/jpeg';
+  }
+
+  // GIF: 47 49 46 38
+  if (
+    buffer[0] === 0x47 &&
+    buffer[1] === 0x49 &&
+    buffer[2] === 0x46 &&
+    buffer[3] === 0x38
+  ) {
+    return 'image/gif';
+  }
+
+  // WebP: RIFF....WEBP
+  if (
+    buffer[0] === 0x52 &&
+    buffer[1] === 0x49 &&
+    buffer[2] === 0x46 &&
+    buffer[3] === 0x46 &&
+    buffer.length >= 12 &&
+    buffer[8] === 0x57 &&
+    buffer[9] === 0x45 &&
+    buffer[10] === 0x42 &&
+    buffer[11] === 0x50
+  ) {
+    return 'image/webp';
+  }
+
+  // TIFF: 49 49 2A 00 (little-endian) or 4D 4D 00 2A (big-endian)
+  if (
+    (buffer[0] === 0x49 &&
+      buffer[1] === 0x49 &&
+      buffer[2] === 0x2a &&
+      buffer[3] === 0x00) ||
+    (buffer[0] === 0x4d &&
+      buffer[1] === 0x4d &&
+      buffer[2] === 0x00 &&
+      buffer[3] === 0x2a)
+  ) {
+    return 'image/tiff';
+  }
+
+  // AVIF: ....ftypavif or ....ftypavis
+  if (buffer.length >= 12) {
+    const ftyp = buffer.toString('ascii', 4, 8);
+    if (ftyp === 'ftyp') {
+      const brand = buffer.toString('ascii', 8, 12);
+      if (brand === 'avif' || brand === 'avis') {
+        return 'image/avif';
+      }
+    }
+  }
+
+  // BMP: 42 4D
+  if (buffer[0] === 0x42 && buffer[1] === 0x4d) {
+    return 'image/bmp';
+  }
+
+  return null;
+}
+
+/**
+ * Detect image MIME type from buffer magic bytes with fallback.
+ */
+export function detectImageMimeType(buffer: Buffer): string {
+  return detectImageMimeTypeStrict(buffer) || 'image/jpeg';
+}
+
+/**
+ * Detect image MIME type from base64 payload (using header bytes only).
+ * Returns detected MIME or null if unknown/invalid.
+ */
+export function detectImageMimeTypeFromBase64Strict(
+  base64Data: string,
+): string | null {
+  try {
+    const header = Buffer.from(base64Data.slice(0, 400), 'base64');
+    return detectImageMimeTypeStrict(header);
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Detect image MIME type from base64 payload with fallback.
+ */
+export function detectImageMimeTypeFromBase64(base64Data: string): string {
+  return detectImageMimeTypeFromBase64Strict(base64Data) || 'image/jpeg';
+}