helixmind 0.5.26 → 0.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/agent/loop.js +3 -3
- package/dist/cli/agent/loop.js.map +1 -1
- package/dist/cli/agent/permissions.d.ts.map +1 -1
- package/dist/cli/agent/permissions.js +27 -9
- package/dist/cli/agent/permissions.js.map +1 -1
- package/dist/cli/agent/sandbox.d.ts +2 -12
- package/dist/cli/agent/sandbox.d.ts.map +1 -1
- package/dist/cli/agent/sandbox.js +3 -124
- package/dist/cli/agent/sandbox.js.map +1 -1
- package/dist/cli/agent/security.d.ts +4 -0
- package/dist/cli/agent/security.d.ts.map +1 -0
- package/dist/cli/agent/security.js +7 -0
- package/dist/cli/agent/security.js.map +1 -0
- package/dist/cli/agent/shell/classifier.d.ts +9 -0
- package/dist/cli/agent/shell/classifier.d.ts.map +1 -0
- package/dist/cli/agent/shell/classifier.js +283 -0
- package/dist/cli/agent/shell/classifier.js.map +1 -0
- package/dist/cli/agent/shell/summary.d.ts +3 -0
- package/dist/cli/agent/shell/summary.d.ts.map +1 -0
- package/dist/cli/agent/shell/summary.js +45 -0
- package/dist/cli/agent/shell/summary.js.map +1 -0
- package/dist/cli/agent/shell/types.d.ts +14 -0
- package/dist/cli/agent/shell/types.d.ts.map +1 -0
- package/dist/cli/agent/shell/types.js +2 -0
- package/dist/cli/agent/shell/types.js.map +1 -0
- package/dist/cli/agent/shell/windows.d.ts +5 -0
- package/dist/cli/agent/shell/windows.d.ts.map +1 -0
- package/dist/cli/agent/shell/windows.js +113 -0
- package/dist/cli/agent/shell/windows.js.map +1 -0
- package/dist/cli/agent/tools/edit-file.js +1 -1
- package/dist/cli/agent/tools/edit-file.js.map +1 -1
- package/dist/cli/agent/tools/find.js +1 -1
- package/dist/cli/agent/tools/find.js.map +1 -1
- package/dist/cli/agent/tools/git-commit.js +7 -7
- package/dist/cli/agent/tools/git-commit.js.map +1 -1
- package/dist/cli/agent/tools/git-diff.js +3 -3
- package/dist/cli/agent/tools/git-diff.js.map +1 -1
- package/dist/cli/agent/tools/git-log.js +3 -3
- package/dist/cli/agent/tools/git-log.js.map +1 -1
- package/dist/cli/agent/tools/git-status.js +6 -6
- package/dist/cli/agent/tools/git-status.js.map +1 -1
- package/dist/cli/agent/tools/list-dir.js +3 -3
- package/dist/cli/agent/tools/list-dir.js.map +1 -1
- package/dist/cli/agent/tools/read-file.js +1 -1
- package/dist/cli/agent/tools/read-file.js.map +1 -1
- package/dist/cli/agent/tools/registry.d.ts +3 -0
- package/dist/cli/agent/tools/registry.d.ts.map +1 -1
- package/dist/cli/agent/tools/registry.js.map +1 -1
- package/dist/cli/agent/tools/run-command.js +18 -17
- package/dist/cli/agent/tools/run-command.js.map +1 -1
- package/dist/cli/agent/tools/search.js +2 -2
- package/dist/cli/agent/tools/search.js.map +1 -1
- package/dist/cli/agent/tools/write-file.js +1 -1
- package/dist/cli/agent/tools/write-file.js.map +1 -1
- package/dist/cli/bench/runner.d.ts.map +1 -1
- package/dist/cli/bench/runner.js +1 -0
- package/dist/cli/bench/runner.js.map +1 -1
- package/dist/cli/brain/web-chat-handler.d.ts.map +1 -1
- package/dist/cli/brain/web-chat-handler.js +1 -0
- package/dist/cli/brain/web-chat-handler.js.map +1 -1
- package/dist/cli/commands/chat.d.ts.map +1 -1
- package/dist/cli/commands/chat.js +270 -92
- package/dist/cli/commands/chat.js.map +1 -1
- package/dist/cli/config/store.d.ts +11 -0
- package/dist/cli/config/store.d.ts.map +1 -1
- package/dist/cli/config/store.js +13 -0
- package/dist/cli/config/store.js.map +1 -1
- package/dist/cli/sessions/session.d.ts +5 -0
- package/dist/cli/sessions/session.d.ts.map +1 -1
- package/dist/cli/sessions/session.js +2 -0
- package/dist/cli/sessions/session.js.map +1 -1
- package/dist/cli/sessions/tab-view.d.ts.map +1 -1
- package/dist/cli/sessions/tab-view.js +6 -0
- package/dist/cli/sessions/tab-view.js.map +1 -1
- package/dist/cli/ui/statusbar.d.ts +4 -0
- package/dist/cli/ui/statusbar.d.ts.map +1 -1
- package/dist/cli/ui/statusbar.js +14 -1
- package/dist/cli/ui/statusbar.js.map +1 -1
- package/dist/cli/worktree/git.d.ts +9 -0
- package/dist/cli/worktree/git.d.ts.map +1 -0
- package/dist/cli/worktree/git.js +108 -0
- package/dist/cli/worktree/git.js.map +1 -0
- package/dist/cli/worktree/manager.d.ts +12 -0
- package/dist/cli/worktree/manager.d.ts.map +1 -0
- package/dist/cli/worktree/manager.js +48 -0
- package/dist/cli/worktree/manager.js.map +1 -0
- package/dist/cli/worktree/policy.d.ts +5 -0
- package/dist/cli/worktree/policy.d.ts.map +1 -0
- package/dist/cli/worktree/policy.js +46 -0
- package/dist/cli/worktree/policy.js.map +1 -0
- package/dist/cli/worktree/runtime.d.ts +11 -0
- package/dist/cli/worktree/runtime.d.ts.map +1 -0
- package/dist/cli/worktree/runtime.js +27 -0
- package/dist/cli/worktree/runtime.js.map +1 -0
- package/dist/cli/worktree/session.d.ts +11 -0
- package/dist/cli/worktree/session.d.ts.map +1 -0
- package/dist/cli/worktree/session.js +22 -0
- package/dist/cli/worktree/session.js.map +1 -0
- package/dist/cli/worktree/types.d.ts +28 -0
- package/dist/cli/worktree/types.d.ts.map +1 -0
- package/dist/cli/worktree/types.js +2 -0
- package/dist/cli/worktree/types.js.map +1 -0
- package/package.json +1 -1
|
@@ -0,0 +1,283 @@
|
|
|
1
|
+
import { platform as getPlatform } from 'node:os';
|
|
2
|
+
import { SecurityError } from '../security.js';
|
|
3
|
+
import { detectWindowsCommandKind, hasWindowsDangerousPattern, isPowerShellLikeCommand, } from './windows.js';
|
|
4
|
+
import { summarizeCommandClassification } from './summary.js';
|
|
5
|
+
const MAX_COMMAND_LENGTH = 10_000;
|
|
6
|
+
const BLOCKED_PATTERNS = [
|
|
7
|
+
/\bformat\s+c:/i,
|
|
8
|
+
/:\(\)\s*\{[^}]*\|\s*:.*&\s*\}\s*;/,
|
|
9
|
+
/\brm\s+(-rf?|--recursive)\s+\/(\s|$)/,
|
|
10
|
+
/\bdd\b.*of=\/dev\/[sh]d/,
|
|
11
|
+
/\bmkfs\b/,
|
|
12
|
+
/\bfdisk\b/,
|
|
13
|
+
/\bbcdedit\b/i,
|
|
14
|
+
/\bdiskpart\b/i,
|
|
15
|
+
];
|
|
16
|
+
const DANGEROUS_PATTERNS = [
|
|
17
|
+
/\brm\s+(-rf?|--recursive)/,
|
|
18
|
+
/\bsudo\b/,
|
|
19
|
+
/\bchmod\b.*777/,
|
|
20
|
+
/\bdd\b\s/,
|
|
21
|
+
/\b>\s*\/dev\//,
|
|
22
|
+
/\bcurl\b.*\|\s*(ba)?sh/,
|
|
23
|
+
/\bwget\b.*\|\s*(ba)?sh/,
|
|
24
|
+
/\bnpm\s+publish/,
|
|
25
|
+
/\bgit\s+push\s+.*--force/,
|
|
26
|
+
/\bdrop\s+(database|table)/i,
|
|
27
|
+
/\btruncate\s+table/i,
|
|
28
|
+
/\b(nc|ncat|netcat)\s.*-[el]/,
|
|
29
|
+
/\bdocker\s+run\b.*--privileged/,
|
|
30
|
+
/\bdocker\s+run\b.*-v\s*\/:/,
|
|
31
|
+
/\bcrontab\s+-[re]/,
|
|
32
|
+
/\bssh\b.*@/,
|
|
33
|
+
/`[^`]+`/,
|
|
34
|
+
/\$\([^)]+\)/,
|
|
35
|
+
/\$[A-Za-z_]/,
|
|
36
|
+
/<<<?\s/,
|
|
37
|
+
/\b(alias|export\s+\w+=)/,
|
|
38
|
+
/\b(BASH_ENV|ENV|BASH_FUNC_)=/,
|
|
39
|
+
/\b(python3?|ruby|perl|lua)\s+-[ce]\b/,
|
|
40
|
+
/\bnode\s+-e\b/,
|
|
41
|
+
/\beval\s/,
|
|
42
|
+
/base64\s.*\|\s*(ba)?sh/i,
|
|
43
|
+
/\[Net\.WebClient\]|\[System\.Net\.WebClient\]/i,
|
|
44
|
+
/\bwmic\b.*\bdelete\b/i,
|
|
45
|
+
];
|
|
46
|
+
const LIST_COMMANDS = new Set([
|
|
47
|
+
'ls',
|
|
48
|
+
'tree',
|
|
49
|
+
]);
|
|
50
|
+
const SEARCH_COMMANDS = new Set([
|
|
51
|
+
'rg',
|
|
52
|
+
'grep',
|
|
53
|
+
'ag',
|
|
54
|
+
'ack',
|
|
55
|
+
'which',
|
|
56
|
+
'where',
|
|
57
|
+
'find',
|
|
58
|
+
]);
|
|
59
|
+
const READ_COMMANDS = new Set([
|
|
60
|
+
'cat',
|
|
61
|
+
'head',
|
|
62
|
+
'tail',
|
|
63
|
+
'less',
|
|
64
|
+
'more',
|
|
65
|
+
'sed',
|
|
66
|
+
'awk',
|
|
67
|
+
'wc',
|
|
68
|
+
'stat',
|
|
69
|
+
'file',
|
|
70
|
+
'pwd',
|
|
71
|
+
]);
|
|
72
|
+
const WRITE_COMMANDS = new Set([
|
|
73
|
+
'rm',
|
|
74
|
+
'mv',
|
|
75
|
+
'cp',
|
|
76
|
+
'chmod',
|
|
77
|
+
'chown',
|
|
78
|
+
'touch',
|
|
79
|
+
'mkdir',
|
|
80
|
+
'rmdir',
|
|
81
|
+
]);
|
|
82
|
+
const SAFE_PROCESS_COMMANDS = new Set([
|
|
83
|
+
'echo',
|
|
84
|
+
'printf',
|
|
85
|
+
'true',
|
|
86
|
+
'false',
|
|
87
|
+
]);
|
|
88
|
+
const NETWORK_COMMANDS = new Set([
|
|
89
|
+
'curl',
|
|
90
|
+
'wget',
|
|
91
|
+
'http',
|
|
92
|
+
'https',
|
|
93
|
+
'ftp',
|
|
94
|
+
'ssh',
|
|
95
|
+
'scp',
|
|
96
|
+
'sftp',
|
|
97
|
+
]);
|
|
98
|
+
const PACKAGE_MANAGER_COMMANDS = new Set([
|
|
99
|
+
'npm',
|
|
100
|
+
'pnpm',
|
|
101
|
+
'yarn',
|
|
102
|
+
'bun',
|
|
103
|
+
'pip',
|
|
104
|
+
'pip3',
|
|
105
|
+
'pipx',
|
|
106
|
+
'cargo',
|
|
107
|
+
'go',
|
|
108
|
+
'composer',
|
|
109
|
+
'gem',
|
|
110
|
+
]);
|
|
111
|
+
const LEGACY_SAFE_PROCESS_PATTERNS = [
|
|
112
|
+
/^\s*npm\s+test\b/i,
|
|
113
|
+
/^\s*vitest(?:\s|$)/i,
|
|
114
|
+
/^\s*tsc\b/i,
|
|
115
|
+
];
|
|
116
|
+
export function classifyShellCommand(command, options = {}) {
|
|
117
|
+
const trimmed = command.trim();
|
|
118
|
+
const platform = options.platform ?? getPlatform();
|
|
119
|
+
if (!trimmed) {
|
|
120
|
+
throw new SecurityError('Command cannot be empty');
|
|
121
|
+
}
|
|
122
|
+
if (trimmed.length > MAX_COMMAND_LENGTH) {
|
|
123
|
+
throw new SecurityError('Command too long');
|
|
124
|
+
}
|
|
125
|
+
const shell = detectShellType(trimmed, platform);
|
|
126
|
+
const kind = detectCommandKind(trimmed, shell);
|
|
127
|
+
const risk = detectRisk(trimmed, kind, shell);
|
|
128
|
+
const touchesNetwork = kind === 'network' || /\b(curl|wget|ssh|scp|sftp|invoke-webrequest|invoke-restmethod)\b/i.test(trimmed);
|
|
129
|
+
const writesFiles = kind === 'write' || kind === 'package_manager' || doesGitWrite(trimmed);
|
|
130
|
+
const canBackground = canCommandBackground(trimmed, kind, risk);
|
|
131
|
+
const classificationWithoutSummary = {
|
|
132
|
+
shell,
|
|
133
|
+
kind,
|
|
134
|
+
risk,
|
|
135
|
+
touchesNetwork,
|
|
136
|
+
writesFiles,
|
|
137
|
+
canBackground,
|
|
138
|
+
};
|
|
139
|
+
return {
|
|
140
|
+
...classificationWithoutSummary,
|
|
141
|
+
summary: summarizeCommandClassification(classificationWithoutSummary, trimmed),
|
|
142
|
+
};
|
|
143
|
+
}
|
|
144
|
+
export function classifyCommand(command, options = {}) {
|
|
145
|
+
const classification = classifyShellCommand(command, options);
|
|
146
|
+
if (classification.risk === 'blocked') {
|
|
147
|
+
throw new SecurityError('This command is blocked');
|
|
148
|
+
}
|
|
149
|
+
if (classification.risk === 'auto') {
|
|
150
|
+
return 'safe';
|
|
151
|
+
}
|
|
152
|
+
if (classification.risk === 'ask' && LEGACY_SAFE_PROCESS_PATTERNS.some(pattern => pattern.test(command))) {
|
|
153
|
+
return 'safe';
|
|
154
|
+
}
|
|
155
|
+
return classification.risk;
|
|
156
|
+
}
|
|
157
|
+
export function isBlockedCommand(command) {
|
|
158
|
+
return BLOCKED_PATTERNS.some(pattern => pattern.test(command));
|
|
159
|
+
}
|
|
160
|
+
function detectShellType(command, platform) {
|
|
161
|
+
if (isPowerShellLikeCommand(command)) {
|
|
162
|
+
return 'powershell';
|
|
163
|
+
}
|
|
164
|
+
return platform === 'win32' ? 'cmd' : 'bash';
|
|
165
|
+
}
|
|
166
|
+
function detectCommandKind(command, shell) {
|
|
167
|
+
const base = firstToken(command);
|
|
168
|
+
if (!base)
|
|
169
|
+
return 'unknown';
|
|
170
|
+
if (base === 'git')
|
|
171
|
+
return 'git';
|
|
172
|
+
const windowsKind = detectWindowsCommandKind(base);
|
|
173
|
+
if (windowsKind)
|
|
174
|
+
return windowsKind;
|
|
175
|
+
if (LIST_COMMANDS.has(base))
|
|
176
|
+
return 'list';
|
|
177
|
+
if (SEARCH_COMMANDS.has(base))
|
|
178
|
+
return 'search';
|
|
179
|
+
if (READ_COMMANDS.has(base))
|
|
180
|
+
return 'read';
|
|
181
|
+
if (WRITE_COMMANDS.has(base))
|
|
182
|
+
return 'write';
|
|
183
|
+
if (NETWORK_COMMANDS.has(base))
|
|
184
|
+
return 'network';
|
|
185
|
+
if (PACKAGE_MANAGER_COMMANDS.has(base)) {
|
|
186
|
+
if (isTestOrBuildPackageCommand(command)) {
|
|
187
|
+
return 'process';
|
|
188
|
+
}
|
|
189
|
+
return 'package_manager';
|
|
190
|
+
}
|
|
191
|
+
if (SAFE_PROCESS_COMMANDS.has(base))
|
|
192
|
+
return 'process';
|
|
193
|
+
if (shell === 'powershell' && /^Get-/i.test(base)) {
|
|
194
|
+
return 'read';
|
|
195
|
+
}
|
|
196
|
+
return 'unknown';
|
|
197
|
+
}
|
|
198
|
+
function detectRisk(command, kind, shell) {
|
|
199
|
+
if (isBlockedCommand(command))
|
|
200
|
+
return 'blocked';
|
|
201
|
+
if (DANGEROUS_PATTERNS.some(pattern => pattern.test(command)))
|
|
202
|
+
return 'dangerous';
|
|
203
|
+
if ((shell === 'cmd' || shell === 'powershell') && hasWindowsDangerousPattern(command))
|
|
204
|
+
return 'dangerous';
|
|
205
|
+
if (kind === 'git') {
|
|
206
|
+
return classifyGitRisk(command);
|
|
207
|
+
}
|
|
208
|
+
if (kind === 'package_manager') {
|
|
209
|
+
return classifyPackageRisk(command);
|
|
210
|
+
}
|
|
211
|
+
if (kind === 'network') {
|
|
212
|
+
return 'ask';
|
|
213
|
+
}
|
|
214
|
+
if (kind === 'write') {
|
|
215
|
+
return 'ask';
|
|
216
|
+
}
|
|
217
|
+
if (kind === 'process') {
|
|
218
|
+
return SAFE_PROCESS_COMMANDS.has(firstToken(command)) ? 'auto' : 'ask';
|
|
219
|
+
}
|
|
220
|
+
if (kind === 'list' || kind === 'search' || kind === 'read') {
|
|
221
|
+
return 'auto';
|
|
222
|
+
}
|
|
223
|
+
if (/\b(shutdown|reboot)\b/i.test(command))
|
|
224
|
+
return 'dangerous';
|
|
225
|
+
return 'ask';
|
|
226
|
+
}
|
|
227
|
+
function classifyGitRisk(command) {
|
|
228
|
+
const tokens = tokenize(command);
|
|
229
|
+
const subcommand = tokens[1]?.toLowerCase();
|
|
230
|
+
if (!subcommand)
|
|
231
|
+
return 'ask';
|
|
232
|
+
if (subcommand === 'push') {
|
|
233
|
+
return /--force\b/.test(command) ? 'dangerous' : 'ask';
|
|
234
|
+
}
|
|
235
|
+
if (subcommand === 'reset' && /--hard\b/.test(command)) {
|
|
236
|
+
return 'dangerous';
|
|
237
|
+
}
|
|
238
|
+
if (subcommand === 'clean') {
|
|
239
|
+
return 'dangerous';
|
|
240
|
+
}
|
|
241
|
+
if ([
|
|
242
|
+
'status',
|
|
243
|
+
'diff',
|
|
244
|
+
'log',
|
|
245
|
+
'show',
|
|
246
|
+
'rev-parse',
|
|
247
|
+
'branch',
|
|
248
|
+
].includes(subcommand)) {
|
|
249
|
+
return 'auto';
|
|
250
|
+
}
|
|
251
|
+
return 'ask';
|
|
252
|
+
}
|
|
253
|
+
function classifyPackageRisk(command) {
|
|
254
|
+
if (/\b(?:install|add)\s+-g\b/i.test(command) || /\bnpm\s+publish\b/i.test(command)) {
|
|
255
|
+
return 'dangerous';
|
|
256
|
+
}
|
|
257
|
+
if (/\b(?:install|add|update|upgrade|remove|uninstall)\b/i.test(command)) {
|
|
258
|
+
return 'ask';
|
|
259
|
+
}
|
|
260
|
+
return 'ask';
|
|
261
|
+
}
|
|
262
|
+
function doesGitWrite(command) {
|
|
263
|
+
if (!command.trim().toLowerCase().startsWith('git '))
|
|
264
|
+
return false;
|
|
265
|
+
return classifyGitRisk(command) !== 'auto';
|
|
266
|
+
}
|
|
267
|
+
function canCommandBackground(command, kind, risk) {
|
|
268
|
+
if (risk === 'blocked' || risk === 'dangerous')
|
|
269
|
+
return false;
|
|
270
|
+
if (kind === 'write' || kind === 'network')
|
|
271
|
+
return false;
|
|
272
|
+
return /\b(test|build|watch|dev|serve|start|lint|typecheck|check)\b/i.test(command);
|
|
273
|
+
}
|
|
274
|
+
function isTestOrBuildPackageCommand(command) {
|
|
275
|
+
return /\b(?:test|run|exec|check|build|lint|typecheck)\b/i.test(command);
|
|
276
|
+
}
|
|
277
|
+
function firstToken(command) {
|
|
278
|
+
return tokenize(command)[0]?.toLowerCase() ?? '';
|
|
279
|
+
}
|
|
280
|
+
function tokenize(command) {
|
|
281
|
+
return command.trim().split(/\s+/).filter(Boolean);
|
|
282
|
+
}
|
|
283
|
+
//# sourceMappingURL=classifier.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../../../src/cli/agent/shell/classifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAQ/C,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,gBAAgB,GAAG;IACvB,gBAAgB;IAChB,mCAAmC;IACnC,sCAAsC;IACtC,yBAAyB;IACzB,UAAU;IACV,WAAW;IACX,cAAc;IACd,eAAe;CAChB,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,2BAA2B;IAC3B,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,eAAe;IACf,wBAAwB;IACxB,wBAAwB;IACxB,iBAAiB;IACjB,0BAA0B;IAC1B,4BAA4B;IAC5B,qBAAqB;IACrB,6BAA6B;IAC7B,gCAAgC;IAChC,4BAA4B;IAC5B,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,aAAa;IACb,aAAa;IACb,QAAQ;IACR,yBAAyB;IACzB,8BAA8B;IAC9B,sCAAsC;IACtC,eAAe;IACf,UAAU;IACV,yBAAyB;IACzB,gDAAgD;IAChD,uBAAuB;CACxB,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,IAAI;IACJ,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,IAAI;IACJ,MAAM;IACN,MAAM;IACN,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,IAAI;IACJ,UAAU;IACV,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG;IACnC,mBAAmB;IACnB,qBAAqB;IACrB,YAAY;CACb,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,UAA0C,EAAE;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;IAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,IAAI,KAAK,SAAS,IAAI,mEAAmE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/H,MAAM,WAAW,GAAG,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,iBAAiB,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAEhE,MAAM,4BAA4B,GAAG;QACnC,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,cAAc;QACd,WAAW;QACX,aAAa;KACd,CAAC;IAEF,OAAO;QACL,GAAG,4BAA4B;QAC/B,OAAO,EAAE,8BAA8B,CAAC,4BAA4B,EAAE,OAAO,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,UAA0C,EAAE;IAE5C,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE9D,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,KAAK,KAAK,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,cAAc,CAAC,IAAI,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,QAAyB;IACjE,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAgB;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAEjC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAEjC,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAEjD,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtD,IAAI,KAAK,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAiB,EAAE,KAAgB;IACtE,IAAI,gBAAgB,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAClF,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,YAAY,CAAC,IAAI,0BAA0B,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAE3G,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACzE,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAE/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAE5C,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI;QACF,QAAQ;QACR,MAAM;QACN,KAAK;QACL,MAAM;QACN,WAAW;QACX,QAAQ;KACT,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,eAAe,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,IAAiB,EAAE,IAAiB;IACjF,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,8DAA8D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,2BAA2B,CAAC,OAAe;IAClD,OAAO,mDAAmD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrD,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../../../src/cli/agent/shell/summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,wBAAgB,8BAA8B,CAC5C,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,EACtD,OAAO,EAAE,MAAM,GACd,MAAM,CA6CR"}
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
export function summarizeCommandClassification(classification, command) {
|
|
2
|
+
if (classification.risk === 'blocked') {
|
|
3
|
+
return 'Blocked destructive or system-level command';
|
|
4
|
+
}
|
|
5
|
+
if (classification.risk === 'dangerous') {
|
|
6
|
+
switch (classification.kind) {
|
|
7
|
+
case 'network':
|
|
8
|
+
return 'Dangerous network or remote execution command';
|
|
9
|
+
case 'write':
|
|
10
|
+
return 'Dangerous filesystem or system modification command';
|
|
11
|
+
case 'git':
|
|
12
|
+
return 'Dangerous git history or publish operation';
|
|
13
|
+
case 'package_manager':
|
|
14
|
+
return 'Dangerous package manager or environment mutation';
|
|
15
|
+
default:
|
|
16
|
+
return 'Dangerous shell command requiring explicit approval';
|
|
17
|
+
}
|
|
18
|
+
}
|
|
19
|
+
switch (classification.kind) {
|
|
20
|
+
case 'list':
|
|
21
|
+
return 'List files or directories';
|
|
22
|
+
case 'search':
|
|
23
|
+
return 'Search files or command output';
|
|
24
|
+
case 'read':
|
|
25
|
+
return 'Read file or system state';
|
|
26
|
+
case 'git':
|
|
27
|
+
return classification.risk === 'auto'
|
|
28
|
+
? 'Run read-only git command'
|
|
29
|
+
: 'Run git command that changes or publishes state';
|
|
30
|
+
case 'write':
|
|
31
|
+
return 'Modify files or filesystem state';
|
|
32
|
+
case 'network':
|
|
33
|
+
return 'Access network resources';
|
|
34
|
+
case 'package_manager':
|
|
35
|
+
return 'Run package manager command';
|
|
36
|
+
case 'process':
|
|
37
|
+
if (/\b(test|build|check|lint|typecheck)\b/i.test(command)) {
|
|
38
|
+
return 'Run build, test, or verification command';
|
|
39
|
+
}
|
|
40
|
+
return 'Run local process command';
|
|
41
|
+
default:
|
|
42
|
+
return 'Run general shell command';
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
//# sourceMappingURL=summary.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../../../src/cli/agent/shell/summary.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,8BAA8B,CAC5C,cAAsD,EACtD,OAAe;IAEf,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,6CAA6C,CAAC;IACvD,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACxC,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,SAAS;gBACZ,OAAO,+CAA+C,CAAC;YACzD,KAAK,OAAO;gBACV,OAAO,qDAAqD,CAAC;YAC/D,KAAK,KAAK;gBACR,OAAO,4CAA4C,CAAC;YACtD,KAAK,iBAAiB;gBACpB,OAAO,mDAAmD,CAAC;YAC7D;gBACE,OAAO,qDAAqD,CAAC;QACjE,CAAC;IACH,CAAC;IAED,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,2BAA2B,CAAC;QACrC,KAAK,QAAQ;YACX,OAAO,gCAAgC,CAAC;QAC1C,KAAK,MAAM;YACT,OAAO,2BAA2B,CAAC;QACrC,KAAK,KAAK;YACR,OAAO,cAAc,CAAC,IAAI,KAAK,MAAM;gBACnC,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,iDAAiD,CAAC;QACxD,KAAK,OAAO;YACV,OAAO,kCAAkC,CAAC;QAC5C,KAAK,SAAS;YACZ,OAAO,0BAA0B,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,6BAA6B,CAAC;QACvC,KAAK,SAAS;YACZ,IAAI,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,OAAO,0CAA0C,CAAC;YACpD,CAAC;YACD,OAAO,2BAA2B,CAAC;QACrC;YACE,OAAO,2BAA2B,CAAC;IACvC,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
export type ShellType = 'cmd' | 'powershell' | 'bash';
|
|
2
|
+
export type CommandRisk = 'auto' | 'ask' | 'dangerous' | 'blocked';
|
|
3
|
+
export type CommandKind = 'read' | 'search' | 'list' | 'write' | 'git' | 'network' | 'package_manager' | 'process' | 'unknown';
|
|
4
|
+
export type LegacyCommandLevel = 'safe' | 'ask' | 'dangerous';
|
|
5
|
+
export interface CommandClassification {
|
|
6
|
+
shell: ShellType;
|
|
7
|
+
kind: CommandKind;
|
|
8
|
+
risk: CommandRisk;
|
|
9
|
+
summary: string;
|
|
10
|
+
touchesNetwork: boolean;
|
|
11
|
+
writesFiles: boolean;
|
|
12
|
+
canBackground: boolean;
|
|
13
|
+
}
|
|
14
|
+
//# sourceMappingURL=types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/cli/agent/shell/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,YAAY,GAAG,MAAM,CAAC;AAEtD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnE,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,QAAQ,GACR,MAAM,GACN,OAAO,GACP,KAAK,GACL,SAAS,GACT,iBAAiB,GACjB,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;CACxB"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/cli/agent/shell/types.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import type { CommandKind } from './types.js';
|
|
2
|
+
export declare function isPowerShellLikeCommand(command: string): boolean;
|
|
3
|
+
export declare function hasWindowsDangerousPattern(command: string): boolean;
|
|
4
|
+
export declare function detectWindowsCommandKind(baseCommand: string): CommandKind | undefined;
|
|
5
|
+
//# sourceMappingURL=windows.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"windows.d.ts","sourceRoot":"","sources":["../../../../src/cli/agent/shell/windows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA2F9C,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAWrF"}
|
|
@@ -0,0 +1,113 @@
|
|
|
1
|
+
const WINDOWS_LIST_COMMANDS = new Set([
|
|
2
|
+
'dir',
|
|
3
|
+
'tree',
|
|
4
|
+
'get-childitem',
|
|
5
|
+
]);
|
|
6
|
+
const WINDOWS_SEARCH_COMMANDS = new Set([
|
|
7
|
+
'findstr',
|
|
8
|
+
'select-string',
|
|
9
|
+
'where',
|
|
10
|
+
]);
|
|
11
|
+
const WINDOWS_READ_COMMANDS = new Set([
|
|
12
|
+
'type',
|
|
13
|
+
'more',
|
|
14
|
+
'get-content',
|
|
15
|
+
'get-item',
|
|
16
|
+
'test-path',
|
|
17
|
+
'resolve-path',
|
|
18
|
+
'get-location',
|
|
19
|
+
'pwd',
|
|
20
|
+
]);
|
|
21
|
+
const WINDOWS_WRITE_COMMANDS = new Set([
|
|
22
|
+
'copy',
|
|
23
|
+
'copy-item',
|
|
24
|
+
'move',
|
|
25
|
+
'move-item',
|
|
26
|
+
'ren',
|
|
27
|
+
'rename-item',
|
|
28
|
+
'del',
|
|
29
|
+
'erase',
|
|
30
|
+
'remove-item',
|
|
31
|
+
'mkdir',
|
|
32
|
+
'md',
|
|
33
|
+
'new-item',
|
|
34
|
+
'ni',
|
|
35
|
+
'set-content',
|
|
36
|
+
'add-content',
|
|
37
|
+
'rmdir',
|
|
38
|
+
'rd',
|
|
39
|
+
]);
|
|
40
|
+
const WINDOWS_SAFE_PROCESS_COMMANDS = new Set([
|
|
41
|
+
'echo',
|
|
42
|
+
'cd',
|
|
43
|
+
'chdir',
|
|
44
|
+
'write-host',
|
|
45
|
+
'write-output',
|
|
46
|
+
]);
|
|
47
|
+
const WINDOWS_NETWORK_COMMANDS = new Set([
|
|
48
|
+
'curl',
|
|
49
|
+
'wget',
|
|
50
|
+
'invoke-webrequest',
|
|
51
|
+
'invoke-restmethod',
|
|
52
|
+
'ssh',
|
|
53
|
+
'scp',
|
|
54
|
+
'sftp',
|
|
55
|
+
]);
|
|
56
|
+
const POWERSHELL_PREFIXES = [
|
|
57
|
+
'get-',
|
|
58
|
+
'set-',
|
|
59
|
+
'remove-',
|
|
60
|
+
'select-',
|
|
61
|
+
'start-',
|
|
62
|
+
'stop-',
|
|
63
|
+
'new-',
|
|
64
|
+
'test-',
|
|
65
|
+
'resolve-',
|
|
66
|
+
'write-',
|
|
67
|
+
'invoke-',
|
|
68
|
+
'out-',
|
|
69
|
+
];
|
|
70
|
+
const WINDOWS_DANGEROUS_PATTERNS = [
|
|
71
|
+
/Remove-Item\s+.*-Recurse/i,
|
|
72
|
+
/Set-ExecutionPolicy/i,
|
|
73
|
+
/powershell(?:\.exe)?\s+.*-(?:e|enc|encodedcommand)\b/i,
|
|
74
|
+
/\bpwsh\s+.*-(?:e|enc|encodedcommand)\b/i,
|
|
75
|
+
/\btaskkill\s+\/f\b/i,
|
|
76
|
+
/\breg\s+delete\b/i,
|
|
77
|
+
/\bsc\s+delete\b/i,
|
|
78
|
+
/\bformat\s+[a-z]:/i,
|
|
79
|
+
/\bdiskpart\b/i,
|
|
80
|
+
/\bbcdedit\b/i,
|
|
81
|
+
];
|
|
82
|
+
export function isPowerShellLikeCommand(command) {
|
|
83
|
+
const base = getBaseCommand(command);
|
|
84
|
+
if (!base)
|
|
85
|
+
return false;
|
|
86
|
+
if (base === 'powershell' || base === 'powershell.exe' || base === 'pwsh') {
|
|
87
|
+
return true;
|
|
88
|
+
}
|
|
89
|
+
return POWERSHELL_PREFIXES.some(prefix => base.startsWith(prefix));
|
|
90
|
+
}
|
|
91
|
+
export function hasWindowsDangerousPattern(command) {
|
|
92
|
+
return WINDOWS_DANGEROUS_PATTERNS.some(pattern => pattern.test(command));
|
|
93
|
+
}
|
|
94
|
+
export function detectWindowsCommandKind(baseCommand) {
|
|
95
|
+
const base = baseCommand.toLowerCase();
|
|
96
|
+
if (WINDOWS_LIST_COMMANDS.has(base))
|
|
97
|
+
return 'list';
|
|
98
|
+
if (WINDOWS_SEARCH_COMMANDS.has(base))
|
|
99
|
+
return 'search';
|
|
100
|
+
if (WINDOWS_READ_COMMANDS.has(base))
|
|
101
|
+
return 'read';
|
|
102
|
+
if (WINDOWS_WRITE_COMMANDS.has(base))
|
|
103
|
+
return 'write';
|
|
104
|
+
if (WINDOWS_NETWORK_COMMANDS.has(base))
|
|
105
|
+
return 'network';
|
|
106
|
+
if (WINDOWS_SAFE_PROCESS_COMMANDS.has(base))
|
|
107
|
+
return 'process';
|
|
108
|
+
return undefined;
|
|
109
|
+
}
|
|
110
|
+
function getBaseCommand(command) {
|
|
111
|
+
return command.trim().split(/\s+/)[0]?.toLowerCase() ?? '';
|
|
112
|
+
}
|
|
113
|
+
//# sourceMappingURL=windows.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"windows.js","sourceRoot":"","sources":["../../../../src/cli/agent/shell/windows.ts"],"names":[],"mappings":"AAEA,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,KAAK;IACL,MAAM;IACN,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,SAAS;IACT,eAAe;IACf,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,MAAM;IACN,MAAM;IACN,aAAa;IACb,UAAU;IACV,WAAW;IACX,cAAc;IACd,cAAc;IACd,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM;IACN,WAAW;IACX,MAAM;IACN,WAAW;IACX,KAAK;IACL,aAAa;IACb,KAAK;IACL,OAAO;IACP,aAAa;IACb,OAAO;IACP,IAAI;IACJ,UAAU;IACV,IAAI;IACJ,aAAa;IACb,aAAa;IACb,OAAO;IACP,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC;IAC5C,MAAM;IACN,IAAI;IACJ,OAAO;IACP,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,MAAM;IACN,MAAM;IACN,mBAAmB;IACnB,mBAAmB;IACnB,KAAK;IACL,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG;IAC1B,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,MAAM;CACP,CAAC;AAEF,MAAM,0BAA0B,GAAG;IACjC,2BAA2B;IAC3B,sBAAsB;IACtB,uDAAuD;IACvD,yCAAyC;IACzC,qBAAqB;IACrB,mBAAmB;IACnB,kBAAkB;IAClB,oBAAoB;IACpB,eAAe;IACf,cAAc;CACf,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAEvC,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnD,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvD,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnD,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC7D,CAAC"}
|
|
@@ -19,7 +19,7 @@ registerTool({
|
|
|
19
19
|
},
|
|
20
20
|
},
|
|
21
21
|
async execute(input, ctx) {
|
|
22
|
-
const { resolved: filePath } = validatePathEx(input.path, ctx.
|
|
22
|
+
const { resolved: filePath } = validatePathEx(input.path, ctx.executionRoot);
|
|
23
23
|
const oldStr = input.old_string;
|
|
24
24
|
const newStr = input.new_string;
|
|
25
25
|
// Check file size before reading to prevent OOM
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"edit-file.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/edit-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,mEAAmE;AACnE,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,YAAY,CAAC;IACX,UAAU,EAAE;QACV,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,uJAAuJ;QACpK,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBAClE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mEAAmE,EAAE;gBAChH,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE;aAC/F;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SAC/C;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,IAAc,EAAE,GAAG,CAAC,
|
|
1
|
+
{"version":3,"file":"edit-file.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/edit-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,mEAAmE;AACnE,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,YAAY,CAAC;IACX,UAAU,EAAE;QACV,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,uJAAuJ;QACpK,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBAClE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mEAAmE,EAAE;gBAChH,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE;aAC/F;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SAC/C;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,IAAc,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAoB,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,UAAoB,CAAC;QAE1C,gDAAgD;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBAC9B,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,aAAa,GAAG,IAAI,GAAG,IAAI,mDAAmD,CAAC;YAClK,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAEtD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,kCAAkC,KAAK,CAAC,IAAI,8CAA8C,CAAC;QACpG,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,2BAA2B,WAAW,aAAa,KAAK,CAAC,IAAI,0EAA0E,CAAC;QACjJ,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEjD,iBAAiB;QACjB,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAE1C,qBAAqB;QACrB,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YACjB,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,QAAQ;YACzB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,qCAAqC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEpC,OAAO,gBAAgB,KAAK,CAAC,IAAI,gBAAgB,QAAQ,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,WAAW,CAAC;IAC9G,CAAC;CACF,CAAC,CAAC"}
|
|
@@ -15,7 +15,7 @@ registerTool({
|
|
|
15
15
|
},
|
|
16
16
|
},
|
|
17
17
|
async execute(input, ctx) {
|
|
18
|
-
const { resolved: baseDir } = validatePathEx(input.path || '.', ctx.
|
|
18
|
+
const { resolved: baseDir } = validatePathEx(input.path || '.', ctx.executionRoot);
|
|
19
19
|
const pattern = input.pattern;
|
|
20
20
|
const files = await fg(pattern, {
|
|
21
21
|
cwd: baseDir,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"find.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/find.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"find.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/find.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,YAAY,CAAC;IACX,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,yFAAyF;QACtG,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;gBAC7F,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;aAC7F;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAE,KAAK,CAAC,IAAe,IAAI,GAAG,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAiB,CAAC;QAExC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE;YAC9B,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC;YAChE,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,KAAK;SACX,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,oCAAoC,OAAO,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAEjF,OAAO,SAAS,MAAM,CAAC,MAAM,sBAAsB,OAAO,SAAS,OAAO,GAAG,KAAK,EAAE,CAAC;IACvF,CAAC;CACF,CAAC,CAAC"}
|
|
@@ -19,10 +19,10 @@ registerTool({
|
|
|
19
19
|
},
|
|
20
20
|
async execute(input, ctx) {
|
|
21
21
|
try {
|
|
22
|
-
execFileSync('git', ['rev-parse', '--is-inside-work-tree'], { cwd: ctx.
|
|
22
|
+
execFileSync('git', ['rev-parse', '--is-inside-work-tree'], { cwd: ctx.executionRoot, encoding: 'utf-8', stdio: 'pipe' });
|
|
23
23
|
}
|
|
24
24
|
catch {
|
|
25
|
-
return `Not a git repository. The current directory (${ctx.
|
|
25
|
+
return `Not a git repository. The current directory (${ctx.executionRoot}) is not tracked by git.`;
|
|
26
26
|
}
|
|
27
27
|
try {
|
|
28
28
|
const message = input.message;
|
|
@@ -30,23 +30,23 @@ registerTool({
|
|
|
30
30
|
// Stage files (use execFileSync to prevent shell injection via file names)
|
|
31
31
|
if (files && files.length > 0) {
|
|
32
32
|
for (const file of files) {
|
|
33
|
-
execFileSync('git', ['add', '--', file], { cwd: ctx.
|
|
33
|
+
execFileSync('git', ['add', '--', file], { cwd: ctx.executionRoot });
|
|
34
34
|
}
|
|
35
35
|
}
|
|
36
36
|
else {
|
|
37
|
-
execFileSync('git', ['add', '-A'], { cwd: ctx.
|
|
37
|
+
execFileSync('git', ['add', '-A'], { cwd: ctx.executionRoot });
|
|
38
38
|
}
|
|
39
39
|
// Check if there's anything staged
|
|
40
|
-
const staged = execFileSync('git', ['diff', '--cached', '--stat'], { cwd: ctx.
|
|
40
|
+
const staged = execFileSync('git', ['diff', '--cached', '--stat'], { cwd: ctx.executionRoot, encoding: 'utf-8' }).trim();
|
|
41
41
|
if (!staged) {
|
|
42
42
|
return 'Nothing to commit (no staged changes).';
|
|
43
43
|
}
|
|
44
44
|
// Commit (use execFileSync to prevent shell injection via commit message)
|
|
45
45
|
execFileSync('git', ['commit', '-m', message], {
|
|
46
|
-
cwd: ctx.
|
|
46
|
+
cwd: ctx.executionRoot,
|
|
47
47
|
encoding: 'utf-8',
|
|
48
48
|
});
|
|
49
|
-
const hash = execFileSync('git', ['rev-parse', '--short', 'HEAD'], { cwd: ctx.
|
|
49
|
+
const hash = execFileSync('git', ['rev-parse', '--short', 'HEAD'], { cwd: ctx.executionRoot, encoding: 'utf-8' }).trim();
|
|
50
50
|
return `Committed: ${hash} — ${message}\n\n${staged}`;
|
|
51
51
|
}
|
|
52
52
|
catch (err) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"git-commit.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/git-commit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,YAAY,CAAC;IACX,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,wFAAwF;QACrG,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;gBAC1D,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,uDAAuD;iBACrE;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,
|
|
1
|
+
{"version":3,"file":"git-commit.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/git-commit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,YAAY,CAAC;IACX,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,wFAAwF;QACrG,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;gBAC1D,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,uDAAuD;iBACrE;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5H,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,gDAAgD,GAAG,CAAC,aAAa,0BAA0B,CAAC;QACrG,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAiB,CAAC;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAA6B,CAAC;YAElD,2EAA2E;YAC3E,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,mCAAmC;YACnC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,wCAAwC,CAAC;YAClD,CAAC;YAED,0EAA0E;YAC1E,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;gBAC7C,GAAG,EAAE,GAAG,CAAC,aAAa;gBACtB,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzH,OAAO,cAAc,IAAI,MAAM,OAAO,OAAO,MAAM,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,UAAU,GAAG,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}
|
|
@@ -15,10 +15,10 @@ registerTool({
|
|
|
15
15
|
},
|
|
16
16
|
async execute(input, ctx) {
|
|
17
17
|
try {
|
|
18
|
-
execFileSync('git', ['rev-parse', '--is-inside-work-tree'], { cwd: ctx.
|
|
18
|
+
execFileSync('git', ['rev-parse', '--is-inside-work-tree'], { cwd: ctx.executionRoot, encoding: 'utf-8', stdio: 'pipe' });
|
|
19
19
|
}
|
|
20
20
|
catch {
|
|
21
|
-
return `Not a git repository. The current directory (${ctx.
|
|
21
|
+
return `Not a git repository. The current directory (${ctx.executionRoot}) is not tracked by git.`;
|
|
22
22
|
}
|
|
23
23
|
try {
|
|
24
24
|
// Use execFileSync to prevent shell injection via file paths
|
|
@@ -27,7 +27,7 @@ registerTool({
|
|
|
27
27
|
args.push('--cached');
|
|
28
28
|
if (input.path)
|
|
29
29
|
args.push('--', String(input.path));
|
|
30
|
-
const diff = execFileSync('git', args, { cwd: ctx.
|
|
30
|
+
const diff = execFileSync('git', args, { cwd: ctx.executionRoot, encoding: 'utf-8', maxBuffer: 1024 * 1024 }).trim();
|
|
31
31
|
if (!diff) {
|
|
32
32
|
return input.staged ? 'No staged changes.' : 'No unstaged changes.';
|
|
33
33
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"git-diff.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/git-diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,YAAY,CAAC;IACX,UAAU,EAAE;QACV,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,8EAA8E;QAC3F,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;gBACvF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE;aACjF;YACD,QAAQ,EAAE,EAAE;SACb;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,
|
|
1
|
+
{"version":3,"file":"git-diff.js","sourceRoot":"","sources":["../../../../src/cli/agent/tools/git-diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,YAAY,CAAC;IACX,UAAU,EAAE;QACV,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,8EAA8E;QAC3F,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;gBACvF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE;aACjF;YACD,QAAQ,EAAE,EAAE;SACb;KACF;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5H,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,gDAAgD,GAAG,CAAC,aAAa,0BAA0B,CAAC;QACrG,CAAC;QAED,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAEpD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAErH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAAC;YACtE,CAAC;YAED,2BAA2B;YAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,2BAA2B,IAAI,CAAC,MAAM,eAAe,CAAC;YACtF,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,cAAc,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}
|