mpd-llm-cli 0.1.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,26 @@
1
+ (version 1)
2
+
3
+ ;; allow everything by default
4
+ (allow default)
5
+
6
+ ;; deny all writes EXCEPT under specific paths
7
+ (deny file-write*)
8
+ (allow file-write*
9
+ (subpath (param "TARGET_DIR"))
10
+ (subpath (param "TMP_DIR"))
11
+ (subpath (param "CACHE_DIR"))
12
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
13
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
14
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
15
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
16
+ (literal "/dev/stdout")
17
+ (literal "/dev/stderr")
18
+ (literal "/dev/null")
19
+ )
20
+
21
+ ;; deny all inbound network traffic EXCEPT on debugger port
22
+ (deny network-inbound)
23
+ (allow network-inbound (local ip "localhost:9229"))
24
+
25
+ ;; deny all outbound network traffic
26
+ (deny network-outbound)
@@ -0,0 +1,19 @@
1
+ (version 1)
2
+
3
+ ;; allow everything by default
4
+ (allow default)
5
+
6
+ ;; deny all writes EXCEPT under specific paths
7
+ (deny file-write*)
8
+ (allow file-write*
9
+ (subpath (param "TARGET_DIR"))
10
+ (subpath (param "TMP_DIR"))
11
+ (subpath (param "CACHE_DIR"))
12
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
13
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
14
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
15
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
16
+ (literal "/dev/stdout")
17
+ (literal "/dev/stderr")
18
+ (literal "/dev/null")
19
+ )
@@ -0,0 +1,31 @@
1
+ (version 1)
2
+
3
+ ;; allow everything by default
4
+ (allow default)
5
+
6
+ ;; deny all writes EXCEPT under specific paths
7
+ (deny file-write*)
8
+ (allow file-write*
9
+ (subpath (param "TARGET_DIR"))
10
+ (subpath (param "TMP_DIR"))
11
+ (subpath (param "CACHE_DIR"))
12
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
13
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
14
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
15
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
16
+ (literal "/dev/stdout")
17
+ (literal "/dev/stderr")
18
+ (literal "/dev/null")
19
+ )
20
+
21
+ ;; deny all inbound network traffic EXCEPT on debugger port
22
+ (deny network-inbound)
23
+ (allow network-inbound (local ip "localhost:9229"))
24
+
25
+ ;; deny all outbound network traffic EXCEPT through proxy on localhost:8877
26
+ ;; set `GEMINI_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
27
+ ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
28
+ (deny network-outbound)
29
+ (allow network-outbound (remote tcp "localhost:8877"))
30
+
31
+ (allow network-bind (local ip "*:*"))
@@ -0,0 +1,87 @@
1
+ (version 1)
2
+
3
+ ;; deny everything by default
4
+ (deny default)
5
+
6
+ ;; allow reading files from anywhere on host
7
+ (allow file-read*)
8
+
9
+ ;; allow exec/fork (children inherit policy)
10
+ (allow process-exec)
11
+ (allow process-fork)
12
+
13
+ ;; allow signals to self, e.g. SIGPIPE on write to closed pipe
14
+ (allow signal (target self))
15
+
16
+ ;; allow read access to specific information about system
17
+ ;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
18
+ (allow sysctl-read
19
+ (sysctl-name "hw.activecpu")
20
+ (sysctl-name "hw.busfrequency_compat")
21
+ (sysctl-name "hw.byteorder")
22
+ (sysctl-name "hw.cacheconfig")
23
+ (sysctl-name "hw.cachelinesize_compat")
24
+ (sysctl-name "hw.cpufamily")
25
+ (sysctl-name "hw.cpufrequency_compat")
26
+ (sysctl-name "hw.cputype")
27
+ (sysctl-name "hw.l1dcachesize_compat")
28
+ (sysctl-name "hw.l1icachesize_compat")
29
+ (sysctl-name "hw.l2cachesize_compat")
30
+ (sysctl-name "hw.l3cachesize_compat")
31
+ (sysctl-name "hw.logicalcpu_max")
32
+ (sysctl-name "hw.machine")
33
+ (sysctl-name "hw.ncpu")
34
+ (sysctl-name "hw.nperflevels")
35
+ (sysctl-name "hw.optional.arm.FEAT_BF16")
36
+ (sysctl-name "hw.optional.arm.FEAT_DotProd")
37
+ (sysctl-name "hw.optional.arm.FEAT_FCMA")
38
+ (sysctl-name "hw.optional.arm.FEAT_FHM")
39
+ (sysctl-name "hw.optional.arm.FEAT_FP16")
40
+ (sysctl-name "hw.optional.arm.FEAT_I8MM")
41
+ (sysctl-name "hw.optional.arm.FEAT_JSCVT")
42
+ (sysctl-name "hw.optional.arm.FEAT_LSE")
43
+ (sysctl-name "hw.optional.arm.FEAT_RDM")
44
+ (sysctl-name "hw.optional.arm.FEAT_SHA512")
45
+ (sysctl-name "hw.optional.armv8_2_sha512")
46
+ (sysctl-name "hw.packages")
47
+ (sysctl-name "hw.pagesize_compat")
48
+ (sysctl-name "hw.physicalcpu_max")
49
+ (sysctl-name "hw.tbfrequency_compat")
50
+ (sysctl-name "hw.vectorunit")
51
+ (sysctl-name "kern.hostname")
52
+ (sysctl-name "kern.maxfilesperproc")
53
+ (sysctl-name "kern.osproductversion")
54
+ (sysctl-name "kern.osrelease")
55
+ (sysctl-name "kern.ostype")
56
+ (sysctl-name "kern.osvariant_status")
57
+ (sysctl-name "kern.osversion")
58
+ (sysctl-name "kern.secure_kernel")
59
+ (sysctl-name "kern.usrstack64")
60
+ (sysctl-name "kern.version")
61
+ (sysctl-name "sysctl.proc_cputype")
62
+ (sysctl-name-prefix "hw.perflevel")
63
+ )
64
+
65
+ ;; allow writes to specific paths
66
+ (allow file-write*
67
+ (subpath (param "TARGET_DIR"))
68
+ (subpath (param "TMP_DIR"))
69
+ (subpath (param "CACHE_DIR"))
70
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
71
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
72
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
73
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
74
+ (literal "/dev/stdout")
75
+ (literal "/dev/stderr")
76
+ (literal "/dev/null")
77
+ )
78
+
79
+ ;; allow communication with sysmond for process listing (e.g. for pgrep)
80
+ (allow mach-lookup (global-name "com.apple.sysmond"))
81
+
82
+ ;; enable terminal access required by ink
83
+ ;; fixes setRawMode EPERM failure (at node:tty:81:24)
84
+ (allow file-ioctl (regex #"^/dev/tty.*"))
85
+
86
+ ;; allow inbound network traffic on debugger port
87
+ (allow network-inbound (local ip "localhost:9229"))
@@ -0,0 +1,90 @@
1
+ (version 1)
2
+
3
+ ;; deny everything by default
4
+ (deny default)
5
+
6
+ ;; allow reading files from anywhere on host
7
+ (allow file-read*)
8
+
9
+ ;; allow exec/fork (children inherit policy)
10
+ (allow process-exec)
11
+ (allow process-fork)
12
+
13
+ ;; allow signals to self, e.g. SIGPIPE on write to closed pipe
14
+ (allow signal (target self))
15
+
16
+ ;; allow read access to specific information about system
17
+ ;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
18
+ (allow sysctl-read
19
+ (sysctl-name "hw.activecpu")
20
+ (sysctl-name "hw.busfrequency_compat")
21
+ (sysctl-name "hw.byteorder")
22
+ (sysctl-name "hw.cacheconfig")
23
+ (sysctl-name "hw.cachelinesize_compat")
24
+ (sysctl-name "hw.cpufamily")
25
+ (sysctl-name "hw.cpufrequency_compat")
26
+ (sysctl-name "hw.cputype")
27
+ (sysctl-name "hw.l1dcachesize_compat")
28
+ (sysctl-name "hw.l1icachesize_compat")
29
+ (sysctl-name "hw.l2cachesize_compat")
30
+ (sysctl-name "hw.l3cachesize_compat")
31
+ (sysctl-name "hw.logicalcpu_max")
32
+ (sysctl-name "hw.machine")
33
+ (sysctl-name "hw.ncpu")
34
+ (sysctl-name "hw.nperflevels")
35
+ (sysctl-name "hw.optional.arm.FEAT_BF16")
36
+ (sysctl-name "hw.optional.arm.FEAT_DotProd")
37
+ (sysctl-name "hw.optional.arm.FEAT_FCMA")
38
+ (sysctl-name "hw.optional.arm.FEAT_FHM")
39
+ (sysctl-name "hw.optional.arm.FEAT_FP16")
40
+ (sysctl-name "hw.optional.arm.FEAT_I8MM")
41
+ (sysctl-name "hw.optional.arm.FEAT_JSCVT")
42
+ (sysctl-name "hw.optional.arm.FEAT_LSE")
43
+ (sysctl-name "hw.optional.arm.FEAT_RDM")
44
+ (sysctl-name "hw.optional.arm.FEAT_SHA512")
45
+ (sysctl-name "hw.optional.armv8_2_sha512")
46
+ (sysctl-name "hw.packages")
47
+ (sysctl-name "hw.pagesize_compat")
48
+ (sysctl-name "hw.physicalcpu_max")
49
+ (sysctl-name "hw.tbfrequency_compat")
50
+ (sysctl-name "hw.vectorunit")
51
+ (sysctl-name "kern.hostname")
52
+ (sysctl-name "kern.maxfilesperproc")
53
+ (sysctl-name "kern.osproductversion")
54
+ (sysctl-name "kern.osrelease")
55
+ (sysctl-name "kern.ostype")
56
+ (sysctl-name "kern.osvariant_status")
57
+ (sysctl-name "kern.osversion")
58
+ (sysctl-name "kern.secure_kernel")
59
+ (sysctl-name "kern.usrstack64")
60
+ (sysctl-name "kern.version")
61
+ (sysctl-name "sysctl.proc_cputype")
62
+ (sysctl-name-prefix "hw.perflevel")
63
+ )
64
+
65
+ ;; allow writes to specific paths
66
+ (allow file-write*
67
+ (subpath (param "TARGET_DIR"))
68
+ (subpath (param "TMP_DIR"))
69
+ (subpath (param "CACHE_DIR"))
70
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
71
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
72
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
73
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
74
+ (literal "/dev/stdout")
75
+ (literal "/dev/stderr")
76
+ (literal "/dev/null")
77
+ )
78
+
79
+ ;; allow communication with sysmond for process listing (e.g. for pgrep)
80
+ (allow mach-lookup (global-name "com.apple.sysmond"))
81
+
82
+ ;; enable terminal access required by ink
83
+ ;; fixes setRawMode EPERM failure (at node:tty:81:24)
84
+ (allow file-ioctl (regex #"^/dev/tty.*"))
85
+
86
+ ;; allow inbound network traffic on debugger port
87
+ (allow network-inbound (local ip "localhost:9229"))
88
+
89
+ ;; allow all outbound network traffic
90
+ (allow network-outbound)
@@ -0,0 +1,92 @@
1
+ (version 1)
2
+
3
+ ;; deny everything by default
4
+ (deny default)
5
+
6
+ ;; allow reading files from anywhere on host
7
+ (allow file-read*)
8
+
9
+ ;; allow exec/fork (children inherit policy)
10
+ (allow process-exec)
11
+ (allow process-fork)
12
+
13
+ ;; allow signals to self, e.g. SIGPIPE on write to closed pipe
14
+ (allow signal (target self))
15
+
16
+ ;; allow read access to specific information about system
17
+ ;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
18
+ (allow sysctl-read
19
+ (sysctl-name "hw.activecpu")
20
+ (sysctl-name "hw.busfrequency_compat")
21
+ (sysctl-name "hw.byteorder")
22
+ (sysctl-name "hw.cacheconfig")
23
+ (sysctl-name "hw.cachelinesize_compat")
24
+ (sysctl-name "hw.cpufamily")
25
+ (sysctl-name "hw.cpufrequency_compat")
26
+ (sysctl-name "hw.cputype")
27
+ (sysctl-name "hw.l1dcachesize_compat")
28
+ (sysctl-name "hw.l1icachesize_compat")
29
+ (sysctl-name "hw.l2cachesize_compat")
30
+ (sysctl-name "hw.l3cachesize_compat")
31
+ (sysctl-name "hw.logicalcpu_max")
32
+ (sysctl-name "hw.machine")
33
+ (sysctl-name "hw.ncpu")
34
+ (sysctl-name "hw.nperflevels")
35
+ (sysctl-name "hw.optional.arm.FEAT_BF16")
36
+ (sysctl-name "hw.optional.arm.FEAT_DotProd")
37
+ (sysctl-name "hw.optional.arm.FEAT_FCMA")
38
+ (sysctl-name "hw.optional.arm.FEAT_FHM")
39
+ (sysctl-name "hw.optional.arm.FEAT_FP16")
40
+ (sysctl-name "hw.optional.arm.FEAT_I8MM")
41
+ (sysctl-name "hw.optional.arm.FEAT_JSCVT")
42
+ (sysctl-name "hw.optional.arm.FEAT_LSE")
43
+ (sysctl-name "hw.optional.arm.FEAT_RDM")
44
+ (sysctl-name "hw.optional.arm.FEAT_SHA512")
45
+ (sysctl-name "hw.optional.armv8_2_sha512")
46
+ (sysctl-name "hw.packages")
47
+ (sysctl-name "hw.pagesize_compat")
48
+ (sysctl-name "hw.physicalcpu_max")
49
+ (sysctl-name "hw.tbfrequency_compat")
50
+ (sysctl-name "hw.vectorunit")
51
+ (sysctl-name "kern.hostname")
52
+ (sysctl-name "kern.maxfilesperproc")
53
+ (sysctl-name "kern.osproductversion")
54
+ (sysctl-name "kern.osrelease")
55
+ (sysctl-name "kern.ostype")
56
+ (sysctl-name "kern.osvariant_status")
57
+ (sysctl-name "kern.osversion")
58
+ (sysctl-name "kern.secure_kernel")
59
+ (sysctl-name "kern.usrstack64")
60
+ (sysctl-name "kern.version")
61
+ (sysctl-name "sysctl.proc_cputype")
62
+ (sysctl-name-prefix "hw.perflevel")
63
+ )
64
+
65
+ ;; allow writes to specific paths
66
+ (allow file-write*
67
+ (subpath (param "TARGET_DIR"))
68
+ (subpath (param "TMP_DIR"))
69
+ (subpath (param "CACHE_DIR"))
70
+ (subpath (string-append (param "HOME_DIR") "/.gemini"))
71
+ (subpath (string-append (param "HOME_DIR") "/.npm"))
72
+ (subpath (string-append (param "HOME_DIR") "/.cache"))
73
+ (subpath (string-append (param "HOME_DIR") "/.gitconfig"))
74
+ (literal "/dev/stdout")
75
+ (literal "/dev/stderr")
76
+ (literal "/dev/null")
77
+ )
78
+
79
+ ;; allow communication with sysmond for process listing (e.g. for pgrep)
80
+ (allow mach-lookup (global-name "com.apple.sysmond"))
81
+
82
+ ;; enable terminal access required by ink
83
+ ;; fixes setRawMode EPERM failure (at node:tty:81:24)
84
+ (allow file-ioctl (regex #"^/dev/tty.*"))
85
+
86
+ ;; allow inbound network traffic on debugger port
87
+ (allow network-inbound (local ip "localhost:9229"))
88
+
89
+ ;; allow outbound network traffic through proxy on localhost:8877
90
+ ;; set `GEMINI_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
91
+ ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
92
+ (allow network-outbound (remote tcp "localhost:8877"))
package/package.json ADDED
@@ -0,0 +1,96 @@
1
+ {
2
+ "name": "mpd-llm-cli",
3
+ "version": "0.1.11",
4
+ "engines": {
5
+ "node": ">=20.0.0"
6
+ },
7
+ "type": "module",
8
+ "workspaces": [
9
+ "packages/*"
10
+ ],
11
+ "repository": {
12
+ "type": "git",
13
+ "url": "git+https://github.com/ConardLi/easy-llm-cli.git"
14
+ },
15
+ "config": {
16
+ "sandboxImageUri": "xx:0.1.0"
17
+ },
18
+ "scripts": {
19
+ "start": "node scripts/start.js",
20
+ "debug": "cross-env DEBUG=1 node --inspect-brk scripts/start.js",
21
+ "generate": "node scripts/generate-git-commit-info.js",
22
+ "build": "node scripts/build.js",
23
+ "build:all": "npm run build && npm run build:sandbox",
24
+ "build:packages": "npm run build --workspaces",
25
+ "build:sandbox": "node scripts/build_sandbox.js --skip-npm-install-build",
26
+ "bundle": "npm run generate && node esbuild.config.js && node scripts/copy_bundle_assets.js",
27
+ "dist": "node scripts/create-distribution.js",
28
+ "dist:clean": "rm -rf dist && npm run dist",
29
+ "release": "node scripts/release.js",
30
+ "test": "npm run test --workspaces",
31
+ "test:ci": "npm run test:ci --workspaces --if-present && npm run test:scripts",
32
+ "test:scripts": "vitest run --config ./scripts/tests/vitest.config.ts",
33
+ "test:e2e": "npm run test:integration:sandbox:none -- --verbose --keep-output",
34
+ "test:integration:all": "npm run test:integration:sandbox:none && npm run test:integration:sandbox:docker && npm run test:integration:sandbox:podman",
35
+ "test:integration:sandbox:none": "GEMINI_SANDBOX=false node integration-tests/run-tests.js",
36
+ "test:integration:sandbox:docker": "GEMINI_SANDBOX=docker node integration-tests/run-tests.js",
37
+ "test:integration:sandbox:podman": "GEMINI_SANDBOX=podman node integration-tests/run-tests.js",
38
+ "lint": "eslint . --ext .ts,.tsx && eslint integration-tests",
39
+ "lint:fix": "eslint . --fix && eslint integration-tests --fix",
40
+ "lint:ci": "eslint . --ext .ts,.tsx --max-warnings 0 && eslint integration-tests --max-warnings 0",
41
+ "format": "prettier --write .",
42
+ "typecheck": "npm run typecheck --workspaces --if-present",
43
+ "preflight": "npm run clean && npm ci && npm run format && npm run lint:ci && npm run build && npm run typecheck && npm run test:ci",
44
+ "prepare": "npm run bundle",
45
+ "prepare:package": "node scripts/prepare-package.js",
46
+ "release:version": "node scripts/version.js",
47
+ "telemetry": "node scripts/telemetry.js",
48
+ "clean": "node scripts/clean.js"
49
+ },
50
+ "bin": {
51
+ "mpdai": "bundle/gemini.js"
52
+ },
53
+ "files": [
54
+ "bundle/",
55
+ "README.md",
56
+ "LICENSE"
57
+ ],
58
+ "main": "bundle/api.js",
59
+ "types": "index.ts",
60
+ "exports": {
61
+ ".": {
62
+ "import": "./bundle/api.js",
63
+ "require": "./bundle/api.cjs"
64
+ },
65
+ "./package.json": "./package.json"
66
+ },
67
+ "devDependencies": {
68
+ "@types/micromatch": "^4.0.9",
69
+ "@types/mime-types": "^2.1.4",
70
+ "@types/minimatch": "^5.1.2",
71
+ "@types/shell-quote": "^1.7.5",
72
+ "@vitest/coverage-v8": "^3.1.1",
73
+ "concurrently": "^9.2.0",
74
+ "cross-env": "^7.0.3",
75
+ "esbuild": "^0.25.0",
76
+ "eslint": "^9.24.0",
77
+ "eslint-config-prettier": "^10.1.2",
78
+ "eslint-plugin-import": "^2.31.0",
79
+ "eslint-plugin-license-header": "^0.8.0",
80
+ "eslint-plugin-react": "^7.37.5",
81
+ "eslint-plugin-react-hooks": "^5.2.0",
82
+ "glob": "^10.4.5",
83
+ "globals": "^16.0.0",
84
+ "json": "^11.0.0",
85
+ "lodash": "^4.17.21",
86
+ "memfs": "^4.17.2",
87
+ "prettier": "^3.5.3",
88
+ "react-devtools-core": "^4.28.5",
89
+ "typescript-eslint": "^8.30.1",
90
+ "vitest": "^3.2.4",
91
+ "yargs": "^17.7.2"
92
+ },
93
+ "dependencies": {
94
+ "@google/genai": "^1.9.0"
95
+ }
96
+ }