llm-agent-cli 2.0.0

package/dist/tools/security.js

@@ -0,0 +1,242 @@
+import fs from "fs/promises";
+import ignore from "ignore";
+import os from "os";
+import path from "path";
+import { confirm } from "@inquirer/prompts";
+const DEFAULT_CONFIG = {
+    workspaceRoot: path.resolve(process.cwd()),
+    permissionMode: "standard",
+    maxReadBytes: 100 * 1024,
+    maxToolResultChars: 50_000,
+    maxCommandOutputChars: 50_000,
+    shellTimeoutMs: 30_000,
+};
+let runtimeConfig = { ...DEFAULT_CONFIG };
+let workspaceRealPathCache = null;
+let ignoreMatcherCache = null;
+let ignorePathCache = null;
+let ignoreMtimeCache = null;
+const BLACKLIST_PATTERNS = [
+    {
+        regex: /(^|\s)rm\s+-rf\s+\/(\s|$)/i,
+        reason: "Blocked dangerous command pattern: rm -rf /",
+    },
+    {
+        regex: /:\(\)\s*\{\s*:\|:\s*&\s*\};:/,
+        reason: "Blocked dangerous command pattern: fork bomb",
+    },
+    {
+        regex: /(^|\s)dd\s+if=/i,
+        reason: "Blocked dangerous command pattern: dd if=",
+    },
+    {
+        regex: /(^|\s)mkfs(\.|\s|$)/i,
+        reason: "Blocked dangerous command pattern: mkfs",
+    },
+    {
+        regex: /curl\b[^\n\r|]*\|\s*(bash|sh)\b/i,
+        reason: "Blocked dangerous command pattern: curl | bash",
+    },
+    {
+        regex: /wget\b[^\n\r|]*\|\s*(bash|sh)\b/i,
+        reason: "Blocked dangerous command pattern: wget | bash",
+    },
+];
+function parseEnvNumber(value, fallback) {
+    if (!value)
+        return fallback;
+    const parsed = Number.parseInt(value, 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+function expandHome(inputPath) {
+    if (inputPath === "~")
+        return os.homedir();
+    if (inputPath.startsWith("~/"))
+        return path.join(os.homedir(), inputPath.slice(2));
+    return inputPath;
+}
+function toPosix(relativePath) {
+    return relativePath.split(path.sep).join("/");
+}
+async function pathExists(absPath) {
+    try {
+        await fs.access(absPath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function getWorkspaceRealPath() {
+    if (workspaceRealPathCache)
+        return workspaceRealPathCache;
+    try {
+        workspaceRealPathCache = await fs.realpath(runtimeConfig.workspaceRoot);
+    }
+    catch {
+        workspaceRealPathCache = path.resolve(runtimeConfig.workspaceRoot);
+    }
+    return workspaceRealPathCache;
+}
+async function resolveExistingAncestor(absPath) {
+    let current = absPath;
+    while (true) {
+        if (await pathExists(current)) {
+            try {
+                return await fs.realpath(current);
+            }
+            catch {
+                return path.resolve(current);
+            }
+        }
+        const parent = path.dirname(current);
+        if (parent === current) {
+            return path.resolve(absPath);
+        }
+        current = parent;
+    }
+}
+async function loadIgnoreMatcher() {
+    const ignorePath = path.join(runtimeConfig.workspaceRoot, ".agentignore");
+    // Hot-reload: stat the file to get current mtime.
+    // If mtime has changed (or the file appeared/disappeared), bust the cache.
+    let currentMtime = null;
+    try {
+        const stat = await fs.stat(ignorePath);
+        currentMtime = stat.mtimeMs;
+    }
+    catch {
+        // File does not exist — currentMtime stays null.
+    }
+    if (ignorePath === ignorePathCache &&
+        ignoreMatcherCache !== null &&
+        currentMtime === ignoreMtimeCache) {
+        return ignoreMatcherCache;
+    }
+    ignorePathCache = ignorePath;
+    ignoreMtimeCache = currentMtime;
+    const matcher = ignore();
+    if (currentMtime !== null) {
+        try {
+            const raw = await fs.readFile(ignorePath, "utf-8");
+            matcher.add(raw);
+        }
+        catch {
+            // File disappeared between stat and read — use empty matcher.
+        }
+    }
+    ignoreMatcherCache = matcher;
+    return matcher;
+}
+async function isIgnoredByRules(relativePath) {
+    const matcher = await loadIgnoreMatcher();
+    return matcher.ignores(relativePath);
+}
+async function assertWithinWorkspace(absPath) {
+    const workspaceRealPath = await getWorkspaceRealPath();
+    const candidateRealPath = await resolveExistingAncestor(absPath);
+    const relative = path.relative(workspaceRealPath, candidateRealPath);
+    const outside = relative.startsWith("..") ||
+        path.isAbsolute(relative);
+    if (outside) {
+        throw new Error(`Path is outside workspace root (${runtimeConfig.workspaceRoot}): ${absPath}`);
+    }
+}
+export async function resolveProtectedPath(inputPath) {
+    const expanded = expandHome(inputPath);
+    const absPath = path.resolve(path.isAbsolute(expanded) ? expanded : path.resolve(process.cwd(), expanded));
+    await assertWithinWorkspace(absPath);
+    const relative = toPosix(path.relative(runtimeConfig.workspaceRoot, absPath));
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        throw new Error(`Path is outside workspace root (${runtimeConfig.workspaceRoot}): ${absPath}`);
+    }
+    if (relative && (await isIgnoredByRules(relative))) {
+        throw new Error(`Path is blocked by .agentignore: ${absPath}`);
+    }
+    return absPath;
+}
+export function getRuntimeConfig() {
+    return { ...runtimeConfig };
+}
+export function setRuntimeConfig(nextConfig) {
+    const currentRoot = runtimeConfig.workspaceRoot;
+    const incomingRoot = nextConfig.workspaceRoot
+        ? path.resolve(expandHome(nextConfig.workspaceRoot))
+        : currentRoot;
+    runtimeConfig = {
+        workspaceRoot: incomingRoot,
+        permissionMode: nextConfig.permissionMode ?? runtimeConfig.permissionMode,
+        maxReadBytes: nextConfig.maxReadBytes ?? runtimeConfig.maxReadBytes,
+        maxToolResultChars: nextConfig.maxToolResultChars ?? runtimeConfig.maxToolResultChars,
+        maxCommandOutputChars: nextConfig.maxCommandOutputChars ?? runtimeConfig.maxCommandOutputChars,
+        shellTimeoutMs: nextConfig.shellTimeoutMs ?? runtimeConfig.shellTimeoutMs,
+    };
+    if (incomingRoot !== currentRoot) {
+        workspaceRealPathCache = null;
+        ignoreMatcherCache = null;
+        ignorePathCache = null;
+    }
+}
+export function initializeRuntimeFromEnv() {
+    setRuntimeConfig({
+        workspaceRoot: process.env.LLM_AGENT_WORKSPACE_ROOT || DEFAULT_CONFIG.workspaceRoot,
+        permissionMode: process.env.LLM_AGENT_PERMISSION_MODE ??
+            DEFAULT_CONFIG.permissionMode,
+        maxReadBytes: parseEnvNumber(process.env.LLM_AGENT_MAX_READ_BYTES, DEFAULT_CONFIG.maxReadBytes),
+        maxToolResultChars: parseEnvNumber(process.env.LLM_AGENT_MAX_TOOL_RESULT_CHARS, DEFAULT_CONFIG.maxToolResultChars),
+        maxCommandOutputChars: parseEnvNumber(process.env.LLM_AGENT_MAX_COMMAND_OUTPUT_CHARS, DEFAULT_CONFIG.maxCommandOutputChars),
+        shellTimeoutMs: parseEnvNumber(process.env.LLM_AGENT_SHELL_TIMEOUT_MS, DEFAULT_CONFIG.shellTimeoutMs),
+    });
+}
+export function getBlockedCommandReason(command) {
+    for (const entry of BLACKLIST_PATTERNS) {
+        if (entry.regex.test(command)) {
+            return entry.reason;
+        }
+    }
+    return null;
+}
+async function requireUserConfirmation(message) {
+    if (runtimeConfig.permissionMode === "yolo")
+        return;
+    if (!process.stdin.isTTY) {
+        throw new Error(`Operation requires confirmation in ${runtimeConfig.permissionMode} mode, but no TTY is available.`);
+    }
+    const approved = await confirm({
+        message,
+        default: false,
+    });
+    if (!approved) {
+        throw new Error("User denied operation.");
+    }
+}
+export async function enforceWritePolicy(actionDescription) {
+    if (runtimeConfig.permissionMode === "safe") {
+        throw new Error(`Write operations are disabled in safe mode: ${actionDescription}`);
+    }
+    if (runtimeConfig.permissionMode === "standard") {
+        await requireUserConfirmation(`Allow: ${actionDescription}?`);
+    }
+}
+export async function enforceCommandPolicy(command) {
+    const blockedReason = getBlockedCommandReason(command);
+    if (blockedReason) {
+        throw new Error(blockedReason);
+    }
+    if (runtimeConfig.permissionMode === "safe") {
+        throw new Error("Shell commands are disabled in safe mode.");
+    }
+    if (runtimeConfig.permissionMode === "standard") {
+        await requireUserConfirmation(`Allow running this command? ${command}`);
+    }
+}
+export async function isPathIgnored(absPath) {
+    const normalized = path.resolve(absPath);
+    const relative = toPosix(path.relative(runtimeConfig.workspaceRoot, normalized));
+    if (!relative || relative.startsWith("..") || path.isAbsolute(relative)) {
+        return true;
+    }
+    return isIgnoredByRules(relative);
+}
+initializeRuntimeFromEnv();
+//# sourceMappingURL=security.js.map

package/dist/tools/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/tools/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,MAAuB,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAa5C,MAAM,cAAc,GAAsB;IACxC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,cAAc,EAAE,UAAU;IAC1B,YAAY,EAAE,GAAG,GAAG,IAAI;IACxB,kBAAkB,EAAE,MAAM;IAC1B,qBAAqB,EAAE,MAAM;IAC7B,cAAc,EAAE,MAAM;CACvB,CAAC;AAEF,IAAI,aAAa,GAAsB,EAAE,GAAG,cAAc,EAAE,CAAC;AAC7D,IAAI,sBAAsB,GAAkB,IAAI,CAAC;AACjD,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAC7C,IAAI,eAAe,GAAkB,IAAI,CAAC;AAC1C,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C,MAAM,kBAAkB,GAA6C;IACnE;QACE,KAAK,EAAE,4BAA4B;QACnC,MAAM,EAAE,6CAA6C;KACtD;IACD;QACE,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,2CAA2C;KACpD;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,yCAAyC;KAClD;IACD;QACE,KAAK,EAAE,kCAAkC;QACzC,MAAM,EAAE,gDAAgD;KACzD;IACD;QACE,KAAK,EAAE,kCAAkC;QACzC,MAAM,EAAE,gDAAgD;KACzD;CACF,CAAC;AAEF,SAAS,cAAc,CAAC,KAAyB,EAAE,QAAgB;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IAC3C,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,YAAoB;IACnC,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAe;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,IAAI,sBAAsB;QAAE,OAAO,sBAAsB,CAAC;IAC1D,IAAI,CAAC;QACH,sBAAsB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,OAAe;IACpD,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAE1E,kDAAkD;IAClD,2EAA2E;IAC3E,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IAED,IACE,UAAU,KAAK,eAAe;QAC9B,kBAAkB,KAAK,IAAI;QAC3B,YAAY,KAAK,gBAAgB,EACjC,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,eAAe,GAAG,UAAU,CAAC;IAC7B,gBAAgB,GAAG,YAAY,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;IAEzB,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IAED,kBAAkB,GAAG,OAAO,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IAClD,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,OAAe;IAClD,MAAM,iBAAiB,GAAG,MAAM,oBAAoB,EAAE,CAAC;IACvD,MAAM,iBAAiB,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAErE,MAAM,OAAO,GACX,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE5B,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,mCAAmC,aAAa,CAAC,aAAa,MAAM,OAAO,EAAE,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAC7E,CAAC;IAEF,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,mCAAmC,aAAa,CAAC,aAAa,MAAM,OAAO,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,IAAI,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAsC;IACrE,MAAM,WAAW,GAAG,aAAa,CAAC,aAAa,CAAC;IAChD,MAAM,YAAY,GAAG,UAAU,CAAC,aAAa;QAC3C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACpD,CAAC,CAAC,WAAW,CAAC;IAEhB,aAAa,GAAG;QACd,aAAa,EAAE,YAAY;QAC3B,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,aAAa,CAAC,cAAc;QACzE,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,aAAa,CAAC,YAAY;QACnE,kBAAkB,EAChB,UAAU,CAAC,kBAAkB,IAAI,aAAa,CAAC,kBAAkB;QACnE,qBAAqB,EACnB,UAAU,CAAC,qBAAqB,IAAI,aAAa,CAAC,qBAAqB;QACzE,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,aAAa,CAAC,cAAc;KAC1E,CAAC;IAEF,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,sBAAsB,GAAG,IAAI,CAAC;QAC9B,kBAAkB,GAAG,IAAI,CAAC;QAC1B,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,gBAAgB,CAAC;QACf,aAAa,EACX,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,cAAc,CAAC,aAAa;QACtE,cAAc,EACX,OAAO,CAAC,GAAG,CAAC,yBAAwD;YACrE,cAAc,CAAC,cAAc;QAC/B,YAAY,EAAE,cAAc,CAC1B,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,cAAc,CAAC,YAAY,CAC5B;QACD,kBAAkB,EAAE,cAAc,CAChC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAC3C,cAAc,CAAC,kBAAkB,CAClC;QACD,qBAAqB,EAAE,cAAc,CACnC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAC9C,cAAc,CAAC,qBAAqB,CACrC;QACD,cAAc,EAAE,cAAc,CAC5B,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,cAAc,CAAC,cAAc,CAC9B;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,OAAe;IACpD,IAAI,aAAa,CAAC,cAAc,KAAK,MAAM;QAAE,OAAO;IAEpD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,sCAAsC,aAAa,CAAC,cAAc,iCAAiC,CACpG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;QAC7B,OAAO;QACP,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,iBAAyB;IAChE,IAAI,aAAa,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,+CAA+C,iBAAiB,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,aAAa,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,uBAAuB,CAAC,UAAU,iBAAiB,GAAG,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAe;IACxD,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,aAAa,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,aAAa,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,uBAAuB,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,wBAAwB,EAAE,CAAC"}

package/dist/tools/shell.d.ts

@@ -0,0 +1,14 @@
+import { z } from "zod";
+import type { ToolExecutionContext } from "./types.js";
+export declare const RunBashCommandSchema: z.ZodObject<{
+    command: z.ZodString;
+    timeout_ms: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    command: string;
+    timeout_ms?: number | undefined;
+}, {
+    command: string;
+    timeout_ms?: number | undefined;
+}>;
+export declare function run_bash_command(args: z.infer<typeof RunBashCommandSchema>, context: ToolExecutionContext): Promise<string>;
+//# sourceMappingURL=shell.d.ts.map

package/dist/tools/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAIvD,eAAO,MAAM,oBAAoB;;;;;;;;;EAS/B,CAAC;AAgCH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,EAC1C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAqCjB"}

package/dist/tools/shell.js

@@ -0,0 +1,68 @@
+import { exec } from "child_process";
+import { promisify } from "util";
+import { z } from "zod";
+import { enforceCommandPolicy, getRuntimeConfig, } from "./security.js";
+const execAsync = promisify(exec);
+export const RunBashCommandSchema = z.object({
+    command: z.string().min(1).describe("Shell command to execute"),
+    timeout_ms: z
+        .number()
+        .int()
+        .positive()
+        .max(120000)
+        .optional()
+        .describe("Optional timeout override in milliseconds"),
+});
+function formatOutput(stdout, stderr) {
+    const parts = [];
+    if (stdout.trim()) {
+        parts.push(`stdout:\n${stdout.trim()}`);
+    }
+    if (stderr.trim()) {
+        parts.push(`stderr:\n${stderr.trim()}`);
+    }
+    if (parts.length === 0) {
+        return "(command produced no output)";
+    }
+    return parts.join("\n\n");
+}
+function truncateOutput(output) {
+    const { maxCommandOutputChars } = getRuntimeConfig();
+    if (output.length <= maxCommandOutputChars) {
+        return output;
+    }
+    const remaining = output.length - maxCommandOutputChars;
+    return [
+        output.slice(0, maxCommandOutputChars),
+        "",
+        `[Output truncated: removed ${remaining} characters due to MAX_COMMAND_OUTPUT_CHARS=${maxCommandOutputChars}]`,
+    ].join("\n");
+}
+export async function run_bash_command(args, context) {
+    const parsed = RunBashCommandSchema.parse(args);
+    try {
+        await enforceCommandPolicy(parsed.command);
+        const runtime = getRuntimeConfig();
+        const timeout = parsed.timeout_ms ?? runtime.shellTimeoutMs;
+        const result = await execAsync(parsed.command, {
+            cwd: process.cwd(),
+            timeout,
+            signal: context.abortSignal,
+            maxBuffer: 8 * 1024 * 1024,
+        });
+        return truncateOutput(formatOutput(result.stdout, result.stderr));
+    }
+    catch (err) {
+        if (err && typeof err === "object") {
+            const maybeAny = err;
+            const stdout = maybeAny.stdout ?? "";
+            const stderr = maybeAny.stderr ?? "";
+            const body = formatOutput(stdout, stderr);
+            const msg = maybeAny.message ?? "Unknown shell error";
+            const code = typeof maybeAny.code === "number" ? ` (exit code ${maybeAny.code})` : "";
+            return truncateOutput(`Command failed${code}: ${msg}\n\n${body}`);
+        }
+        return `Command failed: ${String(err)}`;
+    }
+}
+//# sourceMappingURL=shell.js.map

package/dist/tools/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAGvB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC/D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,MAAM,CAAC;SACX,QAAQ,EAAE;SACV,QAAQ,CAAC,2CAA2C,CAAC;CACzD,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,MAAc,EAAE,MAAc;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,EAAE,qBAAqB,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,qBAAqB,CAAC;IACxD,OAAO;QACL,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;QACtC,EAAE;QACF,8BAA8B,SAAS,+CAA+C,qBAAqB,GAAG;KAC/G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA0C,EAC1C,OAA6B;IAE7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE;YAC7C,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SAC3B,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,GAKhB,CAAC;YAEF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,IAAI,qBAAqB,CAAC;YACtD,MAAM,IAAI,GACR,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,cAAc,CAAC,iBAAiB,IAAI,KAAK,GAAG,OAAO,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,mBAAmB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/tools/types.d.ts

@@ -0,0 +1,5 @@
+export interface ToolExecutionContext {
+    abortSignal?: AbortSignal;
+}
+export type ToolHandler = (args: Record<string, unknown>, context: ToolExecutionContext) => Promise<string>;
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,MAAM,WAAW,GAAG,CACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,oBAAoB,KAC1B,OAAO,CAAC,MAAM,CAAC,CAAC"}

package/dist/tools/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "llm-agent-cli",
+  "version": "2.0.0",
+  "description": "Terminal AI agent powered by LLM-Router — read files, run commands, edit code, git integration, security scanning",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "llm-agent": "./dist/index.js"
+  },
+  "files": [
+    "dist/**/*",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build && npm test",
+    "dev": "node --loader ts-node/esm src/index.ts",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage"
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "cli",
+    "llm",
+    "code-assistant",
+    "openai",
+    "anthropic",
+    "terminal"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@inquirer/prompts": "^7.5.2",
+    "chalk": "^5.4.1",
+    "cli-highlight": "^2.1.11",
+    "commander": "^13.1.0",
+    "dotenv": "^16.5.0",
+    "ignore": "^7.0.5",
+    "marked": "^15.0.12",
+    "marked-terminal": "^7.3.0",
+    "ora": "^8.2.0",
+    "zod": "^3.24.2",
+    "zod-to-json-schema": "^3.24.5"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.3",
+    "@vitest/coverage-v8": "^3.1.3",
+    "typescript": "^5.8.3",
+    "vitest": "^3.1.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}