orquesta-cli 0.1.12

package/src/utils/platform-utils.ts

@@ -0,0 +1,256 @@
+/**
+ * Platform Utilities
+ *
+ * Centralized platform detection for Local-CLI
+ * Supports: Native Windows, WSL, Native Linux
+ */
+
+import * as os from 'os';
+import { execSync } from 'child_process';
+import * as fs from 'fs';
+
+// ===========================================================================
+// Platform Types
+// ===========================================================================
+
+export type Platform = 'native-windows' | 'wsl' | 'native-linux';
+
+// ===========================================================================
+// Platform Detection (cached)
+// ===========================================================================
+
+let cachedPlatform: Platform | null = null;
+
+/**
+ * Detect the current platform
+ * Results are cached for performance
+ */
+export function getPlatform(): Platform {
+  if (cachedPlatform !== null) {
+    return cachedPlatform;
+  }
+
+  // Native Windows: process.platform === 'win32'
+  if (process.platform === 'win32') {
+    cachedPlatform = 'native-windows';
+    return cachedPlatform;
+  }
+
+  // WSL: os.release() contains 'microsoft' or 'wsl'
+  try {
+    const release = os.release().toLowerCase();
+    if (release.includes('microsoft') || release.includes('wsl')) {
+      cachedPlatform = 'wsl';
+      return cachedPlatform;
+    }
+  } catch {
+    // Ignore errors
+  }
+
+  // Native Linux (default for non-windows, non-wsl)
+  cachedPlatform = 'native-linux';
+  return cachedPlatform;
+}
+
+/**
+ * Check if running on Native Windows
+ */
+export function isNativeWindows(): boolean {
+  return getPlatform() === 'native-windows';
+}
+
+/**
+ * Check if running on WSL
+ */
+export function isWSL(): boolean {
+  return getPlatform() === 'wsl';
+}
+
+/**
+ * Check if running on Native Linux
+ */
+export function isNativeLinux(): boolean {
+  return getPlatform() === 'native-linux';
+}
+
+/**
+ * Check if Windows access is available (Native Windows or WSL)
+ * Used to determine Office/Browser tool availability
+ */
+export function hasWindowsAccess(): boolean {
+  const platform = getPlatform();
+  return platform === 'native-windows' || platform === 'wsl';
+}
+
+// ===========================================================================
+// Shell Configuration
+// ===========================================================================
+
+export interface ShellConfig {
+  shell: string;
+  args: (command: string) => string[];
+}
+
+/**
+ * Get the appropriate shell configuration for the current platform
+ * Note: This is used internally, not for LLM tools
+ */
+export function getShellConfig(): ShellConfig {
+  if (isNativeWindows()) {
+    return {
+      shell: 'powershell.exe',
+      args: (command: string) => ['-NoProfile', '-Command', command],
+    };
+  }
+
+  // WSL and Native Linux use bash
+  return {
+    shell: '/bin/bash',
+    args: (command: string) => ['-c', command],
+  };
+}
+
+// ===========================================================================
+// Dangerous Command Patterns
+// ===========================================================================
+
+/**
+ * Bash dangerous command patterns (WSL/Linux)
+ */
+export const BASH_DANGEROUS_PATTERNS: RegExp[] = [
+  /\brm\s+-rf\s+[\/~]/i,           // rm -rf / or ~
+  /\brm\s+-rf\s+\*/i,              // rm -rf *
+  /\bdd\s+if=/i,                   // dd if=
+  /\bmkfs\b/i,                     // mkfs
+  /\b:(){ :|:& };:/,               // fork bomb
+  /\bchmod\s+-R\s+777\s+\//i,      // chmod -R 777 /
+  /\bsudo\s+rm/i,                  // sudo rm
+  />\s*\/dev\/sd[a-z]/i,           // write to disk device
+  /\bshutdown\b/i,                 // shutdown
+  /\breboot\b/i,                   // reboot
+  /\bhalt\b/i,                     // halt
+  /\bpoweroff\b/i,                 // poweroff
+];
+
+/**
+ * PowerShell dangerous command patterns (Native Windows)
+ */
+export const POWERSHELL_DANGEROUS_PATTERNS: RegExp[] = [
+  // File system destruction
+  /Remove-Item\s+.*-Recurse\s+.*-Force\s+[A-Z]:\\/i,
+  /ri\s+.*-r\s+.*-fo\s+[A-Z]:\\/i,
+  /Remove-Item\s+-Path\s+[A-Z]:\\\s+-Recurse/i,
+
+  // Disk operations
+  /\bFormat-Volume\b/i,
+  /\bClear-Disk\b/i,
+  /\bInitialize-Disk\b/i,
+  /\bRemove-Partition\b/i,
+
+  // System operations
+  /\bStop-Computer\b/i,
+  /\bRestart-Computer\b/i,
+  /\bSet-ExecutionPolicy\s+Unrestricted/i,
+
+  // Registry destruction
+  /Remove-Item\s+.*HK[LCU]M:/i,
+  /Remove-ItemProperty\s+.*HK[LCU]M:/i,
+
+  // Critical process termination
+  /Stop-Process\s+.*-Name\s+(svchost|csrss|wininit|lsass|services)/i,
+
+  // Fork bomb equivalent
+  /while\s*\(\$true\)\s*\{.*Start-Process/i,
+  /for\s*\(\s*;\s*;\s*\)\s*\{.*Start-Process/i,
+];
+
+/**
+ * Check if a bash command is dangerous
+ */
+export function isDangerousBashCommand(command: string): boolean {
+  return BASH_DANGEROUS_PATTERNS.some(pattern => pattern.test(command));
+}
+
+/**
+ * Check if a PowerShell command is dangerous
+ */
+export function isDangerousPowerShellCommand(command: string): boolean {
+  return POWERSHELL_DANGEROUS_PATTERNS.some(pattern => pattern.test(command));
+}
+
+// ===========================================================================
+// PowerShell Path Finding (for Native Windows)
+// ===========================================================================
+
+let cachedPowerShellPath: string | null = null;
+
+/**
+ * Find PowerShell executable path on Native Windows
+ * Prefers pwsh.exe (PowerShell 7+) over powershell.exe (5.1)
+ */
+export function findNativePowerShellPath(): string {
+  if (cachedPowerShellPath !== null) {
+    return cachedPowerShellPath;
+  }
+
+  // Try pwsh.exe first (PowerShell 7+)
+  try {
+    execSync('pwsh -v', { stdio: 'ignore', timeout: 5000 });
+    cachedPowerShellPath = 'pwsh';
+    return cachedPowerShellPath;
+  } catch {
+    // pwsh not available
+  }
+
+  // Fallback to powershell.exe (5.1)
+  cachedPowerShellPath = 'powershell.exe';
+  return cachedPowerShellPath;
+}
+
+/**
+ * Find PowerShell path for WSL (Windows PowerShell from Linux)
+ * This is re-exported from wsl-utils for convenience
+ */
+export function findWSLPowerShellPath(): string {
+  const possiblePaths = [
+    'powershell.exe', // Try PATH first
+    '/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe',
+    '/mnt/c/WINDOWS/System32/WindowsPowerShell/v1.0/powershell.exe',
+    '/mnt/c/windows/system32/WindowsPowerShell/v1.0/powershell.exe',
+  ];
+
+  for (const psPath of possiblePaths) {
+    try {
+      if (psPath === 'powershell.exe') {
+        // Check if powershell.exe is accessible by running a simple command
+        execSync('powershell.exe -Command "1" 2>/dev/null', { encoding: 'utf-8', timeout: 5000 });
+        return psPath;
+      } else if (fs.existsSync(psPath)) {
+        return psPath;
+      }
+    } catch {
+      // Continue to next path
+    }
+  }
+
+  // Fallback to powershell.exe and let the spawn error provide details
+  return 'powershell.exe';
+}
+
+/**
+ * Get PowerShell path based on platform
+ */
+export function getPowerShellPath(): string {
+  const platform = getPlatform();
+
+  if (platform === 'native-windows') {
+    return findNativePowerShellPath();
+  }
+
+  if (platform === 'wsl') {
+    return findWSLPowerShellPath();
+  }
+
+  // Native Linux - no PowerShell
+  throw new Error('PowerShell is not available on Native Linux');
+}

package/src/utils/wsl-utils.ts

@@ -0,0 +1,113 @@
+/**
+ * WSL Utilities
+ *
+ * Utilities specific to WSL (Windows Subsystem for Linux) environment.
+ * These are specialized functions for WSL networking and Windows interop.
+ *
+ * NOTE: For platform detection, use `platform-utils.ts` instead.
+ * This file only contains WSL-specific networking utilities.
+ */
+
+import { execSync } from 'child_process';
+import * as fs from 'fs';
+
+/**
+ * Check if WSL2 mirrored networking is enabled
+ * With mirrored networking, localhost works directly
+ */
+export function isMirroredNetworking(): boolean {
+  try {
+    const winUser = execSync('whoami.exe 2>/dev/null', { encoding: 'utf-8' }).trim().split('\\').pop();
+    const wslConfigPath = '/mnt/c/Users/' + winUser + '/.wslconfig';
+
+    if (fs.existsSync(wslConfigPath)) {
+      const content = fs.readFileSync(wslConfigPath, 'utf-8').toLowerCase();
+      if (content.includes('networkingmode=mirrored')) {
+        return true;
+      }
+    }
+  } catch {
+    // Ignore errors
+  }
+  return false;
+}
+
+/**
+ * Get Windows host IP from WSL
+ * Priority: WSL_HOST_IP env > mirrored networking > ip route > resolv.conf (172.x only)
+ */
+export function getWindowsHostIP(): string {
+  try {
+    // 1. Environment variable has highest priority (user override)
+    if (process.env['WSL_HOST_IP']) {
+      return process.env['WSL_HOST_IP'];
+    }
+
+    // 2. Mirrored networking uses localhost
+    if (isMirroredNetworking()) {
+      return '127.0.0.1';
+    }
+
+    // 3. Try ip route (more reliable than resolv.conf in corporate networks)
+    try {
+      const routeOutput = execSync('ip route show default 2>/dev/null', { encoding: 'utf-8' });
+      const routeMatch = routeOutput.match(/via\s+(\d+\.\d+\.\d+\.\d+)/);
+      if (routeMatch && routeMatch[1]) {
+        const ip = routeMatch[1];
+        // Only use if it looks like WSL2 NAT gateway (172.x.x.x or 192.168.x.x)
+        if (ip.startsWith('172.') || ip.startsWith('192.168.')) {
+          return ip;
+        }
+      }
+    } catch {
+      // Ignore ip route errors
+    }
+
+    // 4. Fall back to resolv.conf, but only if it's a WSL2 NAT IP (172.x.x.x)
+    // Corporate networks often have custom DNS servers that are NOT the Windows host
+    if (fs.existsSync('/etc/resolv.conf')) {
+      const content = fs.readFileSync('/etc/resolv.conf', 'utf-8');
+      const match = content.match(/nameserver\s+(\d+\.\d+\.\d+\.\d+)/);
+      if (match && match[1] && match[1].startsWith('172.')) {
+        return match[1];
+      }
+    }
+  } catch {
+    // Ignore errors
+  }
+
+  // 5. Default to localhost (works with mirrored networking or local server)
+  return '127.0.0.1';
+}
+
+/**
+ * @deprecated Use `getPowerShellPath()` from `platform-utils.ts` instead.
+ *
+ * Find powershell.exe path for WSL
+ * Tries multiple locations since PATH may not include Windows System32
+ */
+export function findPowerShellPath(): string {
+  const possiblePaths = [
+    'powershell.exe', // Try PATH first
+    '/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe',
+    '/mnt/c/WINDOWS/System32/WindowsPowerShell/v1.0/powershell.exe',
+    '/mnt/c/windows/system32/WindowsPowerShell/v1.0/powershell.exe',
+  ];
+
+  for (const psPath of possiblePaths) {
+    try {
+      if (psPath === 'powershell.exe') {
+        // Check if powershell.exe is accessible by running a simple command
+        execSync('powershell.exe -Command "1" 2>/dev/null', { encoding: 'utf-8', timeout: 5000 });
+        return psPath;
+      } else if (fs.existsSync(psPath)) {
+        return psPath;
+      }
+    } catch {
+      // Continue to next path
+    }
+  }
+
+  // Fallback to powershell.exe and let the spawn error provide details
+  return 'powershell.exe';
+}

package/tsconfig.electron.json

@@ -0,0 +1,39 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noFallthroughCasesInSwitch": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "forceConsistentCasingInFileNames": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "outDir": "./dist-electron",
+    "baseUrl": ".",
+    "paths": {
+      "@electron/*": ["electron/*"],
+      "@renderer/*": ["electron/renderer/src/*"]
+    }
+  },
+  "include": [
+    "electron/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "dist-electron",
+    "release"
+  ]
+}

package/tsconfig.json

@@ -0,0 +1,64 @@
+{
+  "compilerOptions": {
+    /* Language and Environment */
+    "target": "ES2022",
+    "lib": ["ES2022"],
+    "module": "NodeNext",
+    "jsx": "react",
+    "jsxFactory": "React.createElement",
+    "jsxFragmentFactory": "React.Fragment",
+
+    /* Modules */
+    "rootDir": "./src",
+    "moduleResolution": "NodeNext",
+    "baseUrl": "./",
+    "paths": {
+      "@/*": ["src/*"]
+    },
+    "resolveJsonModule": true,
+
+    /* Emit */
+    "outDir": "./dist",
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "removeComments": true,
+    "importHelpers": true,
+    "downlevelIteration": true,
+
+    /* Interop Constraints */
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "forceConsistentCasingInFileNames": true,
+
+    /* Type Checking */
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "strictFunctionTypes": true,
+    "strictBindCallApply": true,
+    "strictPropertyInitialization": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+    "noPropertyAccessFromIndexSignature": true,
+    "isolatedModules": true,
+
+    /* Completeness */
+    "skipLibCheck": true
+  },
+  "include": [
+    "src/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "**/*.spec.ts",
+    "**/*.test.ts"
+  ]
+}