ningzhi-agent-cli 0.0.1

package/dist/agent/permission/dangerous-path.json

@@ -0,0 +1,115 @@
+{
+    "macos": [
+        "~/.ssh",
+        "~/.gnupg",
+        "~/.aws",
+        "~/.azure",
+        "~/.config/gcloud",
+        "~/.kube",
+        "~/.docker",
+        "~/.netrc",
+        "~/Library/Keychains",
+        "~/Library/Application Support/Google/Chrome",
+        "~/Library/Application Support/Chromium",
+        "~/Library/Application Support/Firefox",
+        "~/Library/Application Support/Slack",
+        "~/Library/Application Support/Discord",
+        "~/Library/Application Support/Telegram",
+        "~/Library/Application Support/Signal",
+        "~/.zshrc",
+        "~/.bashrc",
+        "~/.bash_profile",
+        "~/.profile",
+        "~/.env",
+        "~/.env.*",
+        "~/.gitconfig",
+        "~/.git-credentials",
+        "~/.npmrc",
+        "~/.pnpmrc",
+        "~/.yarnrc",
+        "~/.pypirc",
+        "~/.m2",
+        "~/.gradle",
+        "~/.terraform",
+        "~/.config/gh",
+        "~/.config/gitlab",
+        "~/.circleci",
+        "~/.vercel",
+        "~/.netlify",
+        "~/Library/Containers",
+        "/private",
+        "/etc",
+        "/var"
+    ],
+    "linux": [
+        "~/.ssh",
+        "~/.gnupg",
+        "~/.pki",
+        "~/.aws",
+        "~/.azure",
+        "~/.config/gcloud",
+        "~/.kube",
+        "~/.docker",
+        "~/.netrc",
+        "~/.local/share/keyrings",
+        "~/.config/google-chrome",
+        "~/.config/chromium",
+        "~/.mozilla/firefox",
+        "~/.config/Slack",
+        "~/.config/discord",
+        "~/.local/share/TelegramDesktop",
+        "~/.zshrc",
+        "~/.bashrc",
+        "~/.bash_profile",
+        "~/.profile",
+        "~/.env",
+        "~/.env.*",
+        "~/.gitconfig",
+        "~/.git-credentials",
+        "~/.npmrc",
+        "~/.pnpmrc",
+        "~/.yarnrc",
+        "~/.pypirc",
+        "~/.m2",
+        "~/.gradle",
+        "~/.terraform",
+        "~/.config/gh",
+        "~/.config/gitlab",
+        "~/.circleci",
+        "~/.vercel",
+        "~/.netlify",
+        "/etc/shadow",
+        "/etc/sudoers",
+        "/proc",
+        "/sys",
+        "/var/lib",
+        "/root"
+    ],
+    "windows": [
+        "%USERPROFILE%\\.ssh",
+        "%USERPROFILE%\\.gnupg",
+        "%USERPROFILE%\\.aws",
+        "%USERPROFILE%\\.azure",
+        "%USERPROFILE%\\.kube",
+        "%USERPROFILE%\\.docker",
+        "%LOCALAPPDATA%\\Google\\Chrome\\User Data",
+        "%LOCALAPPDATA%\\Chromium\\User Data",
+        "%APPDATA%\\Mozilla\\Firefox",
+        "%APPDATA%\\Slack",
+        "%APPDATA%\\Discord",
+        "%APPDATA%\\Telegram Desktop",
+        "%USERPROFILE%\\.gitconfig",
+        "%USERPROFILE%\\.git-credentials",
+        "%USERPROFILE%\\.npmrc",
+        "%USERPROFILE%\\.npmrc",
+        "%USERPROFILE%\\.yarnrc",
+        "%USERPROFILE%\\.m2",
+        "%USERPROFILE%\\.gradle",
+        "%APPDATA%",
+        "%LOCALAPPDATA%",
+        "C:\\Windows\\System32",
+        "C:\\Windows\\System32\\config\\SAM",
+        "C:\\Windows\\System32\\config\\SECURITY",
+        "C:\\Windows\\System32\\config\\SYSTEM"
+    ]
+}

package/dist/agent/permission/exec.d.ts

@@ -0,0 +1,14 @@
+type checkExecPermissionReturnType = {
+    action: "allow";
+} | {
+    action: "block";
+    reason: string;
+} | {
+    action: "confirm";
+};
+interface IToolCall {
+    name: string;
+    args: Record<string, any>;
+}
+export declare function checkExecPermission(toolCall: IToolCall): checkExecPermissionReturnType;
+export {};

package/dist/agent/permission/exec.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkExecPermission = checkExecPermission;
+const util_1 = require("./util");
+function checkExecPermission(toolCall) {
+    const command = toolCall.args?.command;
+    if (typeof command !== "string") {
+        return { action: "confirm" };
+    }
+    if ((0, util_1.isSafeCommand)(command)) {
+        return { action: "allow" };
+    }
+    // 检查命令是否包含切换目录操作
+    if ((0, util_1.isChangingDirectory)(command)) {
+        return {
+            action: "block",
+            reason: `命令包含切换目录操作，为防止目录逃逸，禁止执行。如有需要请手动操作。`,
+        };
+    }
+    const scriptCheck = (0, util_1.isScriptExecution)(command);
+    if (scriptCheck.blocked) {
+        return {
+            action: "block",
+            reason: scriptCheck.reason,
+        };
+    }
+    const dangerCheck = (0, util_1.isDangerousOperation)(command);
+    if (dangerCheck.blocked) {
+        return {
+            action: "block",
+            reason: dangerCheck.reason,
+        };
+    }
+    return { action: "confirm" };
+}

package/dist/agent/permission/is-dangerous-path.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 判断给定路径是否属于系统危险路径（如系统目录、用户家目录根等）。
+ * 根据当前操作系统从 dangerous-path.json 中加载对应危险路径列表，
+ * 支持通配符匹配与子路径匹配。
+ * @param filepath 待检测的路径
+ * @returns 若命中任一危险路径规则则返回 true，否则返回 false
+ */
+export declare function isDangerousPath(filepath: string): boolean;

package/dist/agent/permission/is-dangerous-path.js

@@ -0,0 +1,96 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDangerousPath = isDangerousPath;
+const node_path_1 = __importDefault(require("node:path"));
+const node_os_1 = __importDefault(require("node:os"));
+const dangerous_path_json_1 = __importDefault(require("./dangerous-path.json"));
+/**
+ * 展开路径中的特殊变量与符号，返回规范化后的绝对路径。
+ * 支持：`~`、`%USERPROFILE%`、`%APPDATA%`、`%LOCALAPPDATA%` 以及相对路径。
+ * @param filepath 待展开的路径字符串
+ * @returns 规范化后的绝对路径
+ */
+function expandPath(filepath) {
+    let expanded = filepath;
+    // 处理 Unix 风格的 home 目录简写 `~` 或 `~/xxx`
+    if (expanded.startsWith("~")) {
+        expanded = node_path_1.default.join(node_os_1.default.homedir(), expanded.slice(1));
+    }
+    // 展开 Windows 环境变量占位符（不区分大小写）
+    expanded = expanded.replace(/%USERPROFILE%/gi, node_os_1.default.homedir());
+    // 展开 Windows 环境变量占位符（不区分大小写）
+    // 若未指定，使用默认值（用户 home 目录下的 AppData 目录）
+    expanded = expanded.replace(/%APPDATA%/gi, process.env.APPDATA || node_path_1.default.join(node_os_1.default.homedir(), "AppData", "Roaming"));
+    // 展开 Windows 环境变量占位符（不区分大小写）
+    // 若未指定，使用默认值（用户 home 目录下的 AppData 目录下的 Local 目录）
+    expanded = expanded.replace(/%LOCALAPPDATA%/gi, process.env.LOCALAPPDATA || node_path_1.default.join(node_os_1.default.homedir(), "AppData", "Local"));
+    // 若展开后仍为相对路径，则以当前工作目录为基准转为绝对路径
+    if (!node_path_1.default.isAbsolute(expanded)) {
+        expanded = node_path_1.default.resolve(expanded);
+    }
+    // 规范化路径（消除 `..`、`.`、重复分隔符等）， 例如：
+    // 将 `\\` 转换为 `/`
+    // 将 `./` 转换为 `/`
+    // 将 `/./` 转换为 `/`
+    expanded = node_path_1.default.normalize(expanded);
+    // 返回规范化后的路径
+    return expanded;
+}
+/**
+ * 将含通配符 `*` 的 glob 模式转换为正则表达式。
+ * `*` 匹配除路径分隔符外的任意字符序列。
+ * @param pattern glob 模式字符串
+ * @returns 用于匹配路径的正则表达式
+ */
+function globToRegex(pattern) {
+    // 先转义正则元字符，再将 `*` 转为 `[^\\/]*`
+    const escaped = pattern
+        .replace(/[.+^${}()|[\]\\]/g, "\\$&")
+        .replace(/\*/g, "[^\\\\/]*");
+    // 匹配 pattern 本身或其下的任意子路径
+    return new RegExp(`^${escaped}(?:[\\\\/].*)?$`);
+}
+/**
+ * 判断给定路径是否属于系统危险路径（如系统目录、用户家目录根等）。
+ * 根据当前操作系统从 dangerous-path.json 中加载对应危险路径列表，
+ * 支持通配符匹配与子路径匹配。
+ * @param filepath 待检测的路径
+ * @returns 若命中任一危险路径规则则返回 true，否则返回 false
+ */
+function isDangerousPath(filepath) {
+    // 识别当前操作系统，映射为 JSON 中的平台键
+    const platform = process.platform === "win32"
+        ? "windows"
+        : process.platform === "darwin"
+            ? "macos"
+            : "linux";
+    const dangerousList = dangerous_path_json_1.default[platform];
+    // 先对用户输入路径做展开与规范化，确保后续比较基准一致
+    const expandedInput = expandPath(filepath);
+    // 遍历危险路径列表，检查是否命中任何规则
+    // 若命中则返回 true，否则返回 false
+    for (const dangerous of dangerousList) {
+        const expandedDangerous = expandPath(dangerous);
+        // 检查是否命中通配符规则
+        if (dangerous.includes("*")) {
+            // 含通配符的规则：使用正则进行匹配
+            const regex = globToRegex(expandedDangerous);
+            if (regex.test(expandedInput))
+                return true;
+        }
+        else {
+            // 精确规则：路径完全相同，或是其子路径（以 dangerous + 分隔符 开头）
+            if (expandedInput === expandedDangerous)
+                return true;
+            // 检查是否命中子路径规则
+            // 若以 dangerous + 分隔符 开头，返回 true，  path.sep 为分隔符
+            if (expandedInput.startsWith(expandedDangerous + node_path_1.default.sep))
+                return true;
+        }
+    }
+    // 若未命中任何规则，返回 false
+    return false;
+}

package/dist/agent/permission/is-safe-domains.d.ts

@@ -0,0 +1 @@
+export declare function isSafeDomain(url: string): boolean;

package/dist/agent/permission/is-safe-domains.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSafeDomain = isSafeDomain;
+// 中国的程序员、或软件公司、互联网公司的员工 最常用的100个域名
+const commonDomainsCNForDevelopers = [
+    // 搜索 / AI
+    "google.com",
+    "baidu.com",
+    "bing.com",
+    "openai.com",
+    "claude.ai",
+    "anthropic.com",
+    "perplexity.ai",
+    "kimi.moonshot.cn",
+    "doubao.com",
+    "deepseek.com",
+    // 代码托管 / 开发平台
+    "github.com",
+    "gitlab.com",
+    "gitee.com",
+    "bitbucket.org",
+    // 技术社区
+    "stackoverflow.com",
+    "v2ex.com",
+    "zhihu.com",
+    "juejin.cn",
+    "csdn.net",
+    "oschina.net",
+    "segmentfault.com",
+    "infoq.cn",
+    "51cto.com",
+    "cnblogs.com",
+    "linux.do",
+    "reddit.com",
+    "medium.com",
+    "dev.to",
+    "hackernoon.com",
+    // 文档 / API / 开源
+    "npmjs.com",
+    "nodejs.org",
+    "python.org",
+    "pypi.org",
+    "rust-lang.org",
+    "golang.org",
+    "docker.com",
+    "kubernetes.io",
+    "mozilla.org",
+    "developer.mozilla.org",
+    "w3.org",
+    "react.dev",
+    "nextjs.org",
+    "vuejs.org",
+    "nuxt.com",
+    "tailwindcss.com",
+    "vercel.com",
+    "supabase.com",
+    "cloudflare.com",
+    // 云服务 / DevOps
+    "aliyun.com",
+    "tencent.com",
+    "huaweicloud.com",
+    "aws.amazon.com",
+    "azure.com",
+    "googleapis.com",
+    "firebase.google.com",
+    "netlify.com",
+    "railway.app",
+    "render.com",
+    // CI/CD / 工程工具
+    "jenkins.io",
+    "sonarqube.org",
+    "sentry.io",
+    "postman.com",
+    "swagger.io",
+    "openapi.org",
+    // 数据库 / 中间件
+    "mysql.com",
+    "postgresql.org",
+    "redis.io",
+    "mongodb.com",
+    "sqlite.org",
+    "apache.org",
+    "elastic.co",
+    "rabbitmq.com",
+    "kafka.apache.org",
+    // 办公 / 协作
+    "feishu.cn",
+    "dingtalk.com",
+    "yuque.com",
+    "notion.so",
+    "atlassian.com",
+    "jira.com",
+    "confluence.com",
+    "slack.com",
+    "trello.com",
+    // 下载 / 软件
+    "jetbrains.com",
+    "visualstudio.com",
+    "microsoft.com",
+    "apple.com",
+    "homebrew.sh",
+    "iterm2.com",
+    // 中国互联网公司
+    "qq.com",
+    "wechat.com",
+    "weibo.com",
+    "bilibili.com",
+    "douyin.com",
+    "xiaohongshu.com",
+    "taobao.com",
+    "tmall.com",
+    "jd.com",
+    "aliyun.com",
+    // 学习 / 视频
+    "youtube.com",
+    "coursera.org",
+    "udemy.com",
+    "leetcode.com",
+    "nowcoder.com",
+    "geeksforgeeks.org",
+    // AI / Agent / 自动化
+    "langchain.com",
+    "langgraph.dev",
+    "huggingface.co",
+    "replicate.com",
+    "ollama.com",
+    "openrouter.ai",
+    "tavily.com",
+    "smith.langchain.com",
+];
+// 检查域名是否安全安全
+function isSafeDomain(url) {
+    let hostname;
+    try {
+        hostname = new URL(url).hostname.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+    //  检查域名是否在安全域名列表中
+    return commonDomainsCNForDevelopers.some((domain) => {
+        const d = domain.toLowerCase();
+        return hostname === d || hostname.endsWith("." + d);
+    });
+}

package/dist/agent/permission/network.d.ts

@@ -0,0 +1,8 @@
+export declare function checkNetworkPermission(toolCall: {
+    name: string;
+    args: Record<string, any>;
+}): {
+    action: "allow";
+} | {
+    action: "confirm";
+};

package/dist/agent/permission/network.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkNetworkPermission = checkNetworkPermission;
+const is_safe_domains_1 = require("./is-safe-domains");
+function checkNetworkPermission(toolCall) {
+    const url = toolCall.args?.url;
+    if (typeof url !== "string") {
+        return { action: "allow" };
+    }
+    if ((0, is_safe_domains_1.isSafeDomain)(url)) {
+        return { action: "allow" };
+    }
+    return { action: "confirm" };
+}

package/dist/agent/permission/read.d.ts

@@ -0,0 +1,9 @@
+export declare function checkReadPermission(toolCall: {
+    name: string;
+    args: Record<string, any>;
+}): {
+    action: "allow";
+} | {
+    action: "block";
+    reason: string;
+};

package/dist/agent/permission/read.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkReadPermission = checkReadPermission;
+const is_dangerous_path_1 = require("./is-dangerous-path");
+function checkReadPermission(toolCall) {
+    const filepath = toolCall.args?.filepath;
+    if (filepath == null) {
+        return { action: "allow" };
+    }
+    if ((0, is_dangerous_path_1.isDangerousPath)(filepath)) {
+        return {
+            action: "block",
+            reason: `路径 "${filepath}" 是系统敏感目录，为保护系统安全，禁止访问。如有需要请手动操作。`,
+        };
+    }
+    return { action: "allow" };
+}

package/dist/agent/permission/util.d.ts

@@ -0,0 +1,11 @@
+export declare function isInProjectDir(filepath: string): boolean;
+export declare function isChangingDirectory(command: string): boolean;
+export declare function isScriptExecution(command: string): {
+    blocked: boolean;
+    reason?: string;
+};
+export declare function isSafeCommand(command: string): boolean;
+export declare function isDangerousOperation(command: string): {
+    blocked: boolean;
+    reason?: string;
+};