scream-code 0.3.4 → 0.3.6

package/dist/main.mjs

@@ -71217,6 +71217,31 @@ function renderBashDescription(shellName) {
 function withoutBackgroundDescription(description) {
 	return description.replace(/\n\nIf `run_in_background=true`,[\s\S]*?point them to the `\/tasks` command, which opens an interactive panel; it has no subcommands\./, "\n\nBackground execution is disabled for this agent. Do not set `run_in_background=true`.").replace(` For possibly long-running foreground commands, set the \`timeout\` argument in seconds. Foreground commands default to ${String(DEFAULT_TIMEOUT_S)}s and allow up to ${String(MAX_TIMEOUT_S)}s.`, ` For possibly long-running commands, set the \`timeout\` argument in seconds. The default is ${String(DEFAULT_TIMEOUT_S)}s; foreground commands allow up to ${String(MAX_TIMEOUT_S)}s.`).replace(/\n- Prefer `run_in_background=true`[\s\S]*?conversation to continue before the command finishes\./, "\n- Do not set `run_in_background=true`; background task management tools are not available.");
 }
+function rejectDangerousCommand(pattern, hint) {
+	return {
+		isError: true,
+		output: `Scream Code self-protection blocked this command.\n\nThe command matches a dangerous pattern (${pattern}) that could kill Scream Code's own process.\n\nInstead: ${hint}`
+	};
+}
+function validateCommand(command, isWindows) {
+	const cmd = command;
+	if (/\bkill\s+-9\s+-1\b/.test(cmd) || /\bkill\s+-KILL\s+-1\b/.test(cmd)) return rejectDangerousCommand("kill -9 -1", "Use 'kill <pid>' with a specific PID to terminate the target process.");
+	if (/\b(killall|pkill)\b.*\b(node|scream)/i.test(cmd)) return rejectDangerousCommand("killall/pkill node", "Use 'kill <pid>' with a specific PID, or use the server's own stop command.");
+	if (isWindows) {
+		if (/\btasklist\b/.test(cmd) && /\bgrep\b.*\b(node|scream)/i.test(cmd) && /\b(taskkill|tskill)\b/.test(cmd)) return rejectDangerousCommand("tasklist | grep node | taskkill pipeline", "Use 'taskkill /PID <pid>' with the specific preview server PID. First run 'tasklist | grep -i node' to find the exact PID, then kill only that one.");
+		if (/\btaskkill\b.*\/IM\s+node/i.test(cmd)) return rejectDangerousCommand("taskkill /IM node.exe", "Use 'taskkill /PID <pid>' with a specific PID instead of killing by image name.");
+		if (/\bwmic\s+process\s+.*where\s+.*name.*=.*node/i.test(cmd) && /\bdelete\b/i.test(cmd)) return rejectDangerousCommand("wmic process delete", "Use 'taskkill /PID <pid>' with a specific PID instead.");
+		if (/\bstop-process\b.*-Name\s+node/i.test(cmd)) return rejectDangerousCommand("Stop-Process -Name node", "Use 'Stop-Process -Id <pid>' with a specific PID instead.");
+	} else {
+		if (/\bps\b/.test(cmd) && /\bgrep\b.*\b(node|scream)/i.test(cmd) && /\bxargs\s+kill\b/.test(cmd)) return rejectDangerousCommand("ps | grep node | xargs kill pipeline", "Use 'kill <pid>' with a specific PID instead.");
+		if (/\bpgrep\b.*\b(node|scream)/i.test(cmd) && /\bxargs\s+kill\b/.test(cmd)) return rejectDangerousCommand("pgrep node | xargs kill", "Use 'kill <pid>' with a specific PID instead.");
+	}
+	return null;
+}
+function buildSelfProtectionPreamble(isWindows) {
+	if (isWindows) return "_SCREAM_CHECK(){ for _a in \"$@\";do [ \"$_a\" = \"$SCREAM_PID\" ]&&{ echo \"Scream Code self-protection: refusing to kill itself (pid $SCREAM_PID). Use a specific non-Scream PID.\">&2;return 1;};done;return 0;};kill(){ _SCREAM_CHECK \"$@\"||return 1;command kill \"$@\";};pkill(){ echo \"Scream Code self-protection: pkill blocked. Use kill <pid>.\">&2;return 1;};taskkill(){ _SCREAM_CHECK \"$@\"||return 1;command taskkill \"$@\";};tskill(){ _SCREAM_CHECK \"$@\"||return 1;command tskill \"$@\";};";
+	return "_SCREAM_CHECK(){ for _a in \"$@\";do [ \"$_a\" = \"$SCREAM_PID\" ]||[ \"$_a\" = \"-$SCREAM_PID\" ]&&{ echo \"Scream Code self-protection: refusing to kill itself (pid $SCREAM_PID). Use a specific non-Scream PID.\">&2;return 1;};done;return 0;};kill(){ _SCREAM_CHECK \"$@\"||return 1;command kill \"$@\";};pkill(){ echo \"Scream Code self-protection: pkill blocked. Use kill <pid>.\">&2;return 1;};killall(){ echo \"Scream Code self-protection: killall blocked. Use kill <pid>.\">&2;return 1;};";
+}
 var BashTool = class {
 	jian;
 	cwd;
@@ -71253,16 +71278,18 @@ var BashTool = class {
 	}
 	spawn(effectiveCwd, command) {
 		const shellCwd = this.isWindowsBash ? windowsPathToPosixPath(effectiveCwd) : effectiveCwd;
+		const preamble = buildSelfProtectionPreamble(this.isWindowsBash);
 		const shellArgs = [
 			this.jian.osEnv.shellPath,
 			"-c",
-			`cd ${shellQuote$1(shellCwd)} && ${command}`
+			`cd ${shellQuote$1(shellCwd)} && ${preamble}; ${command}`
 		];
 		const noninteractiveEnv = {
 			NO_COLOR: "1",
 			TERM: "dumb",
 			GIT_TERMINAL_PROMPT: process.env["GIT_TERMINAL_PROMPT"] ?? "0",
-			SHELL: this.jian.osEnv.shellPath
+			SHELL: this.jian.osEnv.shellPath,
+			SCREAM_PID: String(process.pid)
 		};
 		const mergedEnv = {
 			...process.env,
@@ -71279,6 +71306,8 @@ var BashTool = class {
 			isError: true,
 			output: "Command cannot be empty."
 		};
+		const validationError = validateCommand(args.command, this.isWindowsBash);
+		if (validationError !== null) return validationError;
 		if (args.run_in_background) {
 			if (!this.allowBackground) return {
 				isError: true,
@@ -124475,6 +124504,30 @@ const BUILTIN_REGISTRY = [
 		displayName: "Academic Research 学术研究",
 		description: "完整学术研究管线：深度研究（13 Agent 团队 × 7 种模式）+ 学术写作（12 Agent 管线）+ 同行评审（7 Agent 多视角审稿），全流程覆盖",
 		source: "https://github.com/Imbad0202/academic-research-skills"
+	},
+	{
+		id: "taste-skill",
+		displayName: "Taste Skill 品味提升",
+		description: "让 AI 拥有好品味，不再生成无聊、千篇一律的平庸内容",
+		source: "https://github.com/Leonxlnx/taste-skill"
+	},
+	{
+		id: "headroom",
+		displayName: "Headroom 压缩优化",
+		description: "在内容送达 LLM 前压缩工具输出、日志、文件和 RAG 块，节省 60-95% Token，答案质量不变",
+		source: "https://github.com/chopratejas/headroom"
+	},
+	{
+		id: "composio",
+		displayName: "Composio 工具集成",
+		description: "1000+ 工具集、工具搜索、上下文管理、认证和沙盒工作台，帮助构建能把意图转化为行动的 AI Agent",
+		source: "https://github.com/ComposioHQ/composio"
+	},
+	{
+		id: "remotion",
+		displayName: "Remotion 视频编程",
+		description: "用 React 程序化生成视频，代码驱动动画、剪辑和渲染",
+		source: "https://github.com/remotion-dev/remotion"
 	}
 ];
 async function handlePluginCommand(host, _args) {
@@ -124534,8 +124587,8 @@ async function uninstallAndReport(host, id) {
 	}
 }
 async function openPluginPanel(host) {
-	const marketplace = await loadSafe(host);
-	const installed = await loadInstalled(host);
+	host.showStatus("正在加载插件中心…", "cyan");
+	const [marketplace, installed] = await Promise.all([loadSafe(host), loadInstalled(host)]);
 	const options = buildOptions(marketplace, installed);
 	if (options.length === 0) {
 		host.showNotice("ScreamCode 插件中心", "暂无可用插件。请检查网络或稍后重试。");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scream-code",
-  "version": "0.3.4",
+  "version": "0.3.6",
   "description": "The Starting Point for Next-Gen Agents",
   "license": "MIT",
   "author": "ScreamCli",
@@ -51,6 +51,7 @@
     "test": "pnpm -w run build:packages && vitest run",
     "e2e": "pnpm -w run build:packages && SCREAM_E2E=1 vitest run test/e2e",
     "e2e:real": "pnpm -w run build:packages && SCREAM_E2E_REAL=1 vitest run test/e2e/real-llm-smoke.e2e.test.ts",
+    "preinstall": "node -e \"console.log('\\n📦 正在安装 scream-code，请稍候...\\n')\"",
     "postinstall": "node scripts/postinstall.mjs",
     "smoke": "node dist/main.mjs --version"
   },

package/scripts/postinstall/shortcut.mjs

@@ -0,0 +1,61 @@
+/**
+ * Create a desktop shortcut for Scream Code on Windows.
+ *
+ * Only runs on Win32 and for global installs. Never fails the install —
+ * errors are caught and swallowed.
+ */
+
+import { execFileSync } from 'node:child_process';
+
+export function createDesktopShortcut() {
+  if (process.platform !== 'win32') return;
+
+  try {
+    execFileSync(
+      'powershell.exe',
+      [
+        '-NoProfile',
+        '-ExecutionPolicy', 'Bypass',
+        '-Command',
+        shortcutPowerShellScript,
+      ],
+      { stdio: 'ignore', timeout: 10_000 },
+    );
+  } catch {
+    // Never fail the install over a shortcut.
+  }
+}
+
+const shortcutPowerShellScript = `
+$ErrorActionPreference = 'Stop'
+
+$DesktopPath = [Environment]::GetFolderPath('Desktop')
+$ShortcutPath = "$DesktopPath\\Scream Code.lnk"
+$WshShell = New-Object -ComObject WScript.Shell
+$Shortcut = $WshShell.CreateShortcut($ShortcutPath)
+
+$wt    = Get-Command wt.exe           -ErrorAction SilentlyContinue
+$pwsh7 = Get-Command pwsh.exe         -ErrorAction SilentlyContinue
+$ps5   = Get-Command powershell.exe   -ErrorAction SilentlyContinue
+
+if ($wt) {
+    $Shortcut.TargetPath = $wt.Source
+    $Shortcut.Arguments  = '--title "Scream Code" cmd /k "chcp 65001 > nul && scream"'
+}
+elseif ($pwsh7) {
+    $Shortcut.TargetPath = $pwsh7.Source
+    $Shortcut.Arguments  = '-NoExit -Command "chcp 65001 > $null; scream"'
+}
+elseif ($ps5) {
+    $Shortcut.TargetPath = $ps5.Source
+    $Shortcut.Arguments  = '-NoExit -Command "chcp 65001 > $null; [Console]::OutputEncoding = [Console]::InputEncoding = [Text.Encoding]::UTF8; $Host.UI.RawUI.WindowTitle = ''Scream Code''; scream"'
+}
+else {
+    $Shortcut.TargetPath = 'powershell.exe'
+    $Shortcut.Arguments  = '-NoExit -Command "chcp 65001 > $null; [Console]::OutputEncoding = [Console]::InputEncoding = [Text.Encoding]::UTF8; $Host.UI.RawUI.WindowTitle = ''Scream Code''; scream"'
+}
+
+$Shortcut.WorkingDirectory = $env:USERPROFILE
+$Shortcut.Description      = 'Scream Code - AI 命令行助手'
+$Shortcut.Save()
+`.trim();

package/scripts/postinstall.mjs

@@ -113,6 +113,7 @@ import {
   detectLegacyShims,
   renameInPlace,
 } from './postinstall/migrate.mjs';
+import { createDesktopShortcut } from './postinstall/shortcut.mjs';
 import {
   logForeignScreamInTheWay,
   logMigrationBlocked,
@@ -263,6 +264,12 @@ async function main() {
   );
 }
 
+  try {
+    createDesktopShortcut();
+  } catch {
+    // Never fail the install over a shortcut.
+  }
+
 main().catch((err) => {
   const message = err instanceof Error ? err.message : String(err);
   notify(`[scream-code] postinstall warning: ${message}`);