micro-models-agent 0.8.0 → 0.10.0

package/dist/config/config.js

@@ -1,11 +1,41 @@
 import { existsSync, readFileSync, unlinkSync, writeFileSync, mkdirSync } from 'fs';
 import { join, dirname } from 'path';
 import { DEFAULTS } from './defaults';
+import { DEFAULT_SECURITY_CONFIG } from './security';
 import { t } from '../i18n/index';
 import { MigrationDetector } from '../migration/detect';
 import { BackupManager } from '../migration/backup';
 import { validateExpertConfig } from './experts';
 import { ConfigEncryptor } from '../modules/security/encryption';
+/**
+ * Restore RegExp instances in dangerousPatterns that were serialized as {}
+ * (pre-0.8.0 configs) or as {__regex, source, flags} (new format).
+ * Falls back to default patterns for any entry that is not a real RegExp.
+ */
+function restoreDangerousPatterns(patterns, defaults) {
+    const fallback = (Array.isArray(defaults) ? defaults : []);
+    if (!Array.isArray(patterns) || patterns.length === 0) {
+        return fallback;
+    }
+    return patterns.map((p, i) => {
+        if (p instanceof RegExp)
+            return p;
+        // If the pattern was serialized as {__regex, source, flags}, revive it
+        if (p && typeof p === "object") {
+            const { source, flags } = p;
+            if (source && typeof source === "string") {
+                try {
+                    return new RegExp(source, flags || "");
+                }
+                catch {
+                    // fall through
+                }
+            }
+        }
+        // Corrupted entry (e.g. serialized as {} pre-0.8.0): use default by index
+        return fallback[i] || fallback[0] || p;
+    });
+}
 function deepMerge(target, source) {
     const result = { ...target };
     for (const key of Object.keys(source)) {
@@ -22,10 +52,37 @@ function deepMerge(target, source) {
     }
     return result;
 }
+/**
+ * JSON replacer that serializes RegExp objects as {__regex, source, flags}
+ * so they survive JSON.stringify/parse round-trips.
+ */
+function regexReplacer(_key, value) {
+    if (value instanceof RegExp) {
+        return { __regex: true, source: value.source, flags: value.flags };
+    }
+    return value;
+}
+/**
+ * JSON reviver that restores RegExp objects serialized by regexReplacer.
+ */
+function regexReviver(_key, value) {
+    if (value &&
+        typeof value === "object" &&
+        value.__regex === true) {
+        const { source, flags } = value;
+        try {
+            return new RegExp(source, flags);
+        }
+        catch {
+            return value;
+        }
+    }
+    return value;
+}
 function loadJSON(path) {
     try {
         if (existsSync(path)) {
-            return JSON.parse(readFileSync(path, 'utf-8'));
+            return JSON.parse(readFileSync(path, 'utf-8'), regexReviver);
         }
     }
     catch { /* ignore malformed files */ }
@@ -84,6 +141,11 @@ export function loadConfig(options) {
     if (projectData) {
         config = deepMerge(config, projectData);
     }
+    // Restore RegExp patterns in contentScan that may have been serialized
+    // as {} in pre-0.8.0 config files, or merged from user config.
+    if (config.security?.contentScan?.dangerousPatterns) {
+        config.security.contentScan.dangerousPatterns = restoreDangerousPatterns(config.security.contentScan.dangerousPatterns, DEFAULT_SECURITY_CONFIG.contentScan.dangerousPatterns);
+    }
     config = applyEnvVars(config);
     // Decrypt sensitive fields in the loaded config
     try {
@@ -98,6 +160,7 @@ export function loadConfig(options) {
         // If decryption fails, log a warning but continue with the config
         console.warn(t('config.decryption_warning', { error: e.message }));
     }
+    // Update global audit notifier with config (done in bootstrap.ts)
     return config;
 }
 export function validateConfig(config, allToolTags) {
@@ -113,11 +176,11 @@ export function saveConfig(config, configPath) {
     try {
         const encryptor = new ConfigEncryptor();
         const encryptedConfig = encryptor.encrypt({ ...config });
-        writeFileSync(configPath, JSON.stringify(encryptedConfig, null, 2), 'utf-8');
+        writeFileSync(configPath, JSON.stringify(encryptedConfig, regexReplacer, 2), 'utf-8');
     }
     catch (e) {
         // If encryption fails, save without encryption
         console.warn(t('config.encryption_warning', { error: e.message }));
-        writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+        writeFileSync(configPath, JSON.stringify(config, regexReplacer, 2), 'utf-8');
     }
 }

package/dist/config/security.js

@@ -90,7 +90,7 @@ export const DEFAULT_SECURITY_CONFIG = {
     },
     network: {
         // Domains that are always denied
-        deniedDomains: [],
+        deniedDomains: ["localhost", "127.0.0.1", "::1"],
         // If allowedDomains is non-empty, only these domains are allowed
         allowedDomains: [],
         // Timeout for network requests (ms)

package/dist/core/agent.js

@@ -5,6 +5,7 @@ import { OrchestratorClient } from "../llm/orchestrator";
 import { validatePlan, applyAutoFixes, } from "../modules/execution/plan-validator";
 import { MoEExecutor } from "../modules/execution/moe-executor";
 import { StepVerifier } from "../modules/execution/verifier";
+import { processRegistry } from "../modules/processes";
 const TOOL_RESULT_MAX_TOKENS_RATIO = 0.3;
 const TOOL_RESULT_ABSOLUTE_MAX_CHARS = 15000;
 export class Agent {
@@ -618,6 +619,10 @@ export class Agent {
     shutdown() {
         const { pluginManager, logger, sessionManager, contextManager } = this.deps;
         contextManager.onCompact = null;
+        const killed = processRegistry.killAll();
+        if (killed > 0) {
+            logger.info(`Killed ${killed} background process(es) on shutdown`);
+        }
         pluginManager.runOnSessionEnd({
             logger,
             sessionManager: sessionManager?.getActiveMeta(),

package/dist/core/bootstrap.js

@@ -64,6 +64,16 @@ export async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplet
         : join(process.cwd(), ".mmrc");
     const config = loadConfig({ configDir: dir, projectConfigPath });
     setLocale(config.locale);
+    // Update global audit notifier with config
+    try {
+        const { globalAuditNotifier } = await import("../modules/security/audit-notifier");
+        if (config.security?.auditNotifier) {
+            globalAuditNotifier.updateConfig(config.security.auditNotifier);
+        }
+    }
+    catch {
+        // Ignore if audit notifier is not available
+    }
     const logger = new Logger(config.logLevel);
     logger.setLogDir(join(dir, "logs"));
     logger.debug("MMA bootstrap", {

package/dist/i18n/en.json

@@ -123,6 +123,24 @@
     "tool.screenshot_unavailable": "[Screenshot captured \u2014 image not available for text-only model]",
     "tool.timeout": "Tool {name} timed out after {seconds} seconds",
     "tool.interactive_disabled": "Interactive tool is disabled in exit-on-complete mode. Proceed without asking the user.",
+    "proc.started": "Started background process {id} (PID {pid}).\nCommand: {command}",
+    "proc.detected_hint": "[Long-running command detected — started in background]",
+    "proc.manage_hint": "Check output: process_log id={id}. Stop it: process_kill id={id}. List all: process_list.",
+    "proc.none": "No background processes running.",
+    "proc.not_found": "Process not found: {id}",
+    "proc.killed": "Process {id} (PID {pid}) killed.",
+    "proc.kill_failed": "Failed to kill process {id}",
+    "proc.list_header": "Background processes",
+    "proc.log_header": "Process {id} ({status}) output:",
+    "proc.log_empty": "(no output yet)",
+    "proc.timed_out": "Command timed out after {ms} ms and was killed.",
+    "proc.hint": "Manage them with {list}, {log}, {kill}.",
+    "proc.status_running": "running",
+    "proc.status_exited": "exited",
+    "proc.status_killed": "killed",
+    "tool.friendly.process_list": "Listing background processes",
+    "tool.friendly.process_log": "Process output",
+    "tool.friendly.process_kill": "Stopping process",
     "plan.created": "Plan created: {title} ({steps} steps)",
     "plan.step_done": "Step {n}/{total}: {description} \u2713",
     "plan.complete": "Task complete: {summary}",

package/dist/i18n/index.js

@@ -36,7 +36,7 @@ export function t(key, params) {
         return key;
     if (params) {
         for (const [k, v] of Object.entries(params)) {
-            template = template.replace(`{${k}}`, String(v));
+            template = template.replaceAll(`{${k}}`, String(v));
         }
     }
     return template;

package/dist/i18n/ru.json

@@ -123,6 +123,24 @@
     "tool.screenshot_unavailable": "[Скриншот сделан — изображение недоступно для текстовой модели]",
     "tool.timeout": "Инструмент {name} превысил таймаут ({seconds} сек)",
     "tool.interactive_disabled": "Интерактивный инструмент отключён в режиме exit-on-complete. Продолжай без вопроса пользователю.",
+    "proc.started": "Фоновый процесс запущен: {id} (PID {pid}).\nКоманда: {command}",
+    "proc.detected_hint": "[Обнаружена длительная команда — запущена в фоне]",
+    "proc.manage_hint": "Проверить вывод: process_log id={id}. Остановить: process_kill id={id}. Список всех: process_list.",
+    "proc.none": "Фоновых процессов нет.",
+    "proc.not_found": "Процесс не найден: {id}",
+    "proc.killed": "Процесс {id} (PID {pid}) остановлен.",
+    "proc.kill_failed": "Не удалось остановить процесс {id}",
+    "proc.list_header": "Фоновые процессы",
+    "proc.log_header": "Вывод процесса {id} ({status}):",
+    "proc.log_empty": "(вывода пока нет)",
+    "proc.timed_out": "Команда превысила таймаут {ms} мс и была остановлена.",
+    "proc.hint": "Управление: {list}, {log}, {kill}.",
+    "proc.status_running": "работает",
+    "proc.status_exited": "завершён",
+    "proc.status_killed": "остановлен",
+    "tool.friendly.process_list": "Список фоновых процессов",
+    "tool.friendly.process_log": "Вывод процесса",
+    "tool.friendly.process_kill": "Остановка процесса",
     "plan.created": "План создан: {title} ({steps} шагов)",
     "plan.step_done": "Шаг {n}/{total}: {description} ✓",
     "plan.complete": "Задача выполнена: {summary}",