work-agent 0.1.0

package/lib/dangerous-commands.ts

@@ -0,0 +1,672 @@
+/**
+ * 危险命令检测模块
+ *
+ * 提供可配置的危险命令检测功能，用于识别需要审批的命令。
+ */
+
+import { readFileSync, existsSync } from 'fs';
+import { join } from 'path';
+
+/**
+ * 危险级别
+ */
+export type DangerLevel = 'safe' | 'low' | 'medium' | 'high' | 'critical';
+
+/**
+ * 危险命令规则
+ */
+export interface DangerousRule {
+  pattern: RegExp;
+  description: string;
+  riskLevel: 'medium' | 'high' | 'critical';
+  category?: string;
+}
+
+/**
+ * 安全命令规则（不需要审批）
+ */
+export interface SafeRule {
+  pattern: RegExp;
+  description: string;
+}
+
+/**
+ * 危险命令配置
+ */
+export interface DangerousCommandsConfig {
+  rules: DangerousRule[];
+  safeRules: SafeRule[];
+}
+
+/**
+ * CRITICAL 级别危险规则 - 系统状态修改/资源删除
+ */
+const CRITICAL_RULES: DangerousRule[] = [
+  {
+    pattern: /shutdown\b/i,
+    description: '系统关机',
+    riskLevel: 'critical',
+    category: 'system-state',
+  },
+  {
+    pattern: /reboot\b/i,
+    description: '系统重启',
+    riskLevel: 'critical',
+    category: 'system-state',
+  },
+  {
+    pattern: /halt\b/i,
+    description: '系统停止',
+    riskLevel: 'critical',
+    category: 'system-state',
+  },
+  {
+    pattern: /init\s+[06]/,
+    description: '系统关机/重启',
+    riskLevel: 'critical',
+    category: 'system-state',
+  },
+  {
+    pattern: /systemctl\s+(start|stop|restart|reload|enable|disable|mask|unmask)\b/i,
+    description: '系统服务管理',
+    riskLevel: 'critical',
+    category: 'service-management',
+  },
+  {
+    pattern: /service\s+\S+\s+(start|stop|restart|reload)\b/i,
+    description: '服务启停',
+    riskLevel: 'critical',
+    category: 'service-management',
+  },
+  {
+    pattern: /\bkill\s+(-9\s+|-KILL\s+)/,
+    description: '强制终止进程',
+    riskLevel: 'critical',
+    category: 'process-management',
+  },
+  {
+    pattern: /\bpkill\s+(-9\s+|-KILL\s+)/,
+    description: '强制终止进程组',
+    riskLevel: 'critical',
+    category: 'process-management',
+  },
+  {
+    pattern: /\bkillall\s+(-9\s+|-KILL\s+)/,
+    description: '强制终止所有同名进程',
+    riskLevel: 'critical',
+    category: 'process-management',
+  },
+  {
+    pattern: /rm\s+(-[rf]+\s+|.*\s+-[rf]+)/,
+    description: '递归/强制删除',
+    riskLevel: 'critical',
+    category: 'file-deletion',
+  },
+  {
+    pattern: /rm\s+.*\s\*/,
+    description: '通配符删除',
+    riskLevel: 'critical',
+    category: 'file-deletion',
+  },
+  {
+    pattern: /\bmv\s+.*\s+\/dev\/null/i,
+    description: '清空文件',
+    riskLevel: 'critical',
+    category: 'file-deletion',
+  },
+  {
+    pattern: />\s*\/dev\/sd[a-z]/i,
+    description: '写入磁盘设备',
+    riskLevel: 'critical',
+    category: 'disk-operations',
+  },
+  {
+    pattern: /mkfs\./i,
+    description: '格式化文件系统',
+    riskLevel: 'critical',
+    category: 'disk-operations',
+  },
+  {
+    pattern: /dd\s+.*of=\/dev\//i,
+    description: 'DD 写入设备',
+    riskLevel: 'critical',
+    category: 'disk-operations',
+  },
+  {
+    pattern: /kubectl\s+delete\b/i,
+    description: '删除K8s资源',
+    riskLevel: 'critical',
+    category: 'k8s-operations',
+  },
+  {
+    pattern: /docker\s+rm\b/i,
+    description: '删除Docker容器',
+    riskLevel: 'critical',
+    category: 'docker-operations',
+  },
+  {
+    pattern: /docker\s+rmi\b/i,
+    description: '删除Docker镜像',
+    riskLevel: 'critical',
+    category: 'docker-operations',
+  },
+  {
+    pattern: /docker\s+system\s+prune/i,
+    description: 'Docker清理系统',
+    riskLevel: 'critical',
+    category: 'docker-operations',
+  },
+  {
+    pattern: /docker\s+(run|create).*--privileged/i,
+    description: 'Docker特权容器',
+    riskLevel: 'critical',
+    category: 'docker-operations',
+  },
+  {
+    pattern: /helm\s+(uninstall|delete)\b/i,
+    description: 'Helm卸载',
+    riskLevel: 'critical',
+    category: 'helm-operations',
+  },
+  {
+    pattern: /DROP\s+(TABLE|DATABASE|SCHEMA)/i,
+    description: '数据库删除',
+    riskLevel: 'critical',
+    category: 'database-operations',
+  },
+  {
+    pattern: /TRUNCATE\s+TABLE/i,
+    description: '数据库截断',
+    riskLevel: 'critical',
+    category: 'database-operations',
+  },
+];
+
+/**
+ * HIGH 级别危险规则 - 配置修改/部署操作
+ */
+const HIGH_RULES: DangerousRule[] = [
+  {
+    pattern: /kubectl\s+(apply|create|scale|patch|edit|replace|rollout|exec|run)\b/i,
+    description: 'K8s修改操作',
+    riskLevel: 'high',
+    category: 'k8s-operations',
+  },
+  {
+    pattern: /helm\s+(install|upgrade)\b/i,
+    description: 'Helm部署',
+    riskLevel: 'high',
+    category: 'helm-operations',
+  },
+  {
+    pattern: /(apt|apt-get)\s+(install|remove|purge)/i,
+    description: 'APT包管理',
+    riskLevel: 'high',
+    category: 'package-management',
+  },
+  {
+    pattern: /yum\s+(install|remove)/i,
+    description: 'YUM包管理',
+    riskLevel: 'high',
+    category: 'package-management',
+  },
+  {
+    pattern: /npm\s+(install|uninstall|update)\s+(-g|--global)/i,
+    description: 'NPM全局包操作',
+    riskLevel: 'high',
+    category: 'package-management',
+  },
+  {
+    pattern: /pip\s+(install|uninstall)\s+(-\S*\s+)?(--user|--system)/i,
+    description: 'PIP包操作',
+    riskLevel: 'high',
+    category: 'package-management',
+  },
+  {
+    pattern: /iptables\b/i,
+    description: '防火墙规则修改',
+    riskLevel: 'high',
+    category: 'network-config',
+  },
+  {
+    pattern: /ufw\b/i,
+    description: 'UFW防火墙操作',
+    riskLevel: 'high',
+    category: 'network-config',
+  },
+  {
+    pattern: /firewall-cmd\b/i,
+    description: 'Firewalld操作',
+    riskLevel: 'high',
+    category: 'network-config',
+  },
+  {
+    pattern: /chmod\s+[0-7]*7[0-7]{2}/,
+    description: '设置完全权限',
+    riskLevel: 'high',
+    category: 'permissions',
+  },
+  {
+    pattern: /chown\s+.*\s+\//i,
+    description: '修改目录所有者',
+    riskLevel: 'high',
+    category: 'permissions',
+  },
+  {
+    pattern: /useradd|userdel|usermod/i,
+    description: '用户管理',
+    riskLevel: 'high',
+    category: 'user-management',
+  },
+  {
+    pattern: /passwd\b/i,
+    description: '修改密码',
+    riskLevel: 'high',
+    category: 'user-management',
+  },
+  {
+    pattern: />\s*\/etc\//,
+    description: '修改系统配置',
+    riskLevel: 'high',
+    category: 'system-config',
+  },
+  {
+    pattern: />\s*.*\/\.ssh\//,
+    description: '修改SSH配置',
+    riskLevel: 'high',
+    category: 'system-config',
+  },
+  {
+    pattern: />\s*.*\/\.bashrc$/,
+    description: '修改Shell配置',
+    riskLevel: 'high',
+    category: 'system-config',
+  },
+  {
+    pattern: />\s*.*\/\.zshrc$/,
+    description: '修改Shell配置',
+    riskLevel: 'high',
+    category: 'system-config',
+  },
+  {
+    pattern: /DELETE\s+FROM/i,
+    description: '数据库删除记录',
+    riskLevel: 'high',
+    category: 'database-operations',
+  },
+  {
+    pattern: /ALTER\s+(TABLE|DATABASE|USER)/i,
+    description: '数据库修改',
+    riskLevel: 'high',
+    category: 'database-operations',
+  },
+  {
+    pattern: /CREATE\s+(TABLE|DATABASE|USER|INDEX)/i,
+    description: '数据库创建',
+    riskLevel: 'high',
+    category: 'database-operations',
+  },
+  {
+    pattern: /GRANT\s+/i,
+    description: '数据库授权',
+    riskLevel: 'high',
+    category: 'database-operations',
+  },
+  {
+    pattern: /REVOKE\s+/i,
+    description: '数据库撤销权限',
+    riskLevel: 'high',
+    category: 'database-operations',
+  },
+  {
+    pattern: /\bkill\s+\d+/,
+    description: '终止进程',
+    riskLevel: 'high',
+    category: 'process-management',
+  },
+  {
+    pattern: /\bpkill\s+\S+/,
+    description: '终止进程组',
+    riskLevel: 'high',
+    category: 'process-management',
+  },
+  {
+    pattern: /\bkillall\s+\S+/,
+    description: '终止所有同名进程',
+    riskLevel: 'high',
+    category: 'process-management',
+  },
+];
+
+/**
+ * MEDIUM 级别警告规则 - 文件写入等需关注操作
+ */
+const MEDIUM_RULES: DangerousRule[] = [
+  {
+    pattern: /\brm\s+\S+/,
+    description: '删除文件',
+    riskLevel: 'medium',
+    category: 'file-deletion',
+  },
+  {
+    pattern: /(?<!echo\s)">>\s*\/(?!tmp|var\/tmp)/,
+    description: '追加写入文件',
+    riskLevel: 'medium',
+    category: 'file-write',
+  },
+  {
+    pattern: /(?<!echo\s)">\s*\/(?!tmp|var\/tmp|dev\/null)/,
+    description: '覆盖写入文件',
+    riskLevel: 'medium',
+    category: 'file-write',
+  },
+  {
+    pattern: /sed\s+.*-i/,
+    description: '就地修改文件',
+    riskLevel: 'medium',
+    category: 'file-write',
+  },
+  {
+    pattern: /\btee\s+/,
+    description: 'Tee写入文件',
+    riskLevel: 'medium',
+    category: 'file-write',
+  },
+  {
+    pattern: /\bcp\s+.*\s+\/(?!tmp|var\/tmp|home)/,
+    description: '复制到系统目录',
+    riskLevel: 'medium',
+    category: 'file-write',
+  },
+  {
+    pattern: /\bmv\s+.*\s+\/(?!tmp|var\/tmp|home)/,
+    description: '移动到系统目录',
+    riskLevel: 'medium',
+    category: 'file-write',
+  },
+  {
+    pattern: /docker\s+(start|stop|restart|pause|unpause)\b/i,
+    description: 'Docker容器启停',
+    riskLevel: 'medium',
+    category: 'docker-operations',
+  },
+  {
+    pattern: /docker\s+(build|push|tag|commit)\b/i,
+    description: 'Docker镜像操作',
+    riskLevel: 'medium',
+    category: 'docker-operations',
+  },
+  {
+    pattern: /UPDATE\s+\S+\s+SET/i,
+    description: '数据库更新',
+    riskLevel: 'medium',
+    category: 'database-operations',
+  },
+  {
+    pattern: /INSERT\s+INTO/i,
+    description: '数据库插入',
+    riskLevel: 'medium',
+    category: 'database-operations',
+  },
+  {
+    pattern: /git\s+(push|commit|reset|rebase|checkout\s+-[bf]|merge|cherry-pick)/i,
+    description: 'Git修改操作',
+    riskLevel: 'medium',
+    category: 'git-operations',
+  },
+  {
+    pattern: /crontab\s+(-[er])/i,
+    description: '修改定时任务',
+    riskLevel: 'medium',
+    category: 'scheduled-tasks',
+  },
+  {
+    pattern: /at\s+(-[fr])/i,
+    description: '修改定时任务',
+    riskLevel: 'medium',
+    category: 'scheduled-tasks',
+  },
+];
+
+/**
+ * 默认危险命令规则
+ */
+const DEFAULT_DANGEROUS_RULES: DangerousRule[] = [
+  ...CRITICAL_RULES,
+  ...HIGH_RULES,
+  ...MEDIUM_RULES,
+];
+
+/**
+ * 默认安全命令规则（不需要审批）
+ */
+const DEFAULT_SAFE_RULES: SafeRule[] = [
+  // 容器编排只读操作
+  {
+    pattern: /kubectl\s+(get|describe|logs|top|explain|api-resources|version|cluster-info)/i,
+    description: '只读查询',
+  },
+  {
+    pattern: /kubectl\s+.*--dry-run(=client|=server)?/i,
+    description: '模拟运行',
+  },
+
+  // 文件只读操作
+  {
+    pattern: /^(ls|cat|head|tail|less|more|file|stat|wc|find|grep|awk|sed)\s/i,
+    description: '文件只读操作',
+  },
+  {
+    pattern: /^echo\s/i,
+    description: 'Echo 命令',
+  },
+  {
+    pattern: /^pwd$/i,
+    description: '显示当前目录',
+  },
+  {
+    pattern: /^whoami$/i,
+    description: '显示当前用户',
+  },
+  {
+    pattern: /^date$/i,
+    description: '显示日期',
+  },
+  {
+    pattern: /^which\s/i,
+    description: '查找命令路径',
+  },
+  {
+    pattern: /^type\s/i,
+    description: '显示命令类型',
+  },
+
+  // 网络只读操作
+  {
+    pattern: /^(ping|traceroute|tracepath|nslookup|dig|host)\s/i,
+    description: '网络诊断',
+  },
+  {
+    pattern: /^(curl|wget)\s+.*--head/i,
+    description: 'HTTP 头查询',
+  },
+  {
+    pattern: /^netstat\s/i,
+    description: '网络状态查询',
+  },
+  {
+    pattern: /^ss\s/i,
+    description: 'Socket 统计',
+  },
+  {
+    pattern: /^ip\s+(addr|link|route|neigh)\s+(show|list)/i,
+    description: 'IP 配置查询',
+  },
+
+  // 进程只读操作
+  {
+    pattern: /^ps\s/i,
+    description: '进程状态',
+  },
+  {
+    pattern: /^top$/i,
+    description: '系统监控',
+  },
+  {
+    pattern: /^htop$/i,
+    description: '系统监控',
+  },
+  {
+    pattern: /^free\s/i,
+    description: '内存状态',
+  },
+  {
+    pattern: /^df\s/i,
+    description: '磁盘使用',
+  },
+  {
+    pattern: /^du\s/i,
+    description: '目录大小',
+  },
+
+  // Git 只读操作
+  {
+    pattern: /git\s+(status|log|diff|show|branch|tag|remote)/i,
+    description: 'Git 只读操作',
+  },
+];
+
+/**
+ * 全局配置实例
+ */
+let configInstance: DangerousCommandsConfig | null = null;
+
+/**
+ * 加载配置
+ */
+function loadConfig(): DangerousCommandsConfig {
+  if (configInstance) {
+    return configInstance;
+  }
+
+  // 尝试从配置文件加载
+  const configPath = join(process.cwd(), '.pi', 'dangerous-commands.json');
+
+  if (existsSync(configPath)) {
+    try {
+      const content = readFileSync(configPath, 'utf-8');
+      const userConfig = JSON.parse(content);
+
+      configInstance = {
+        rules: [
+          ...DEFAULT_DANGEROUS_RULES,
+          ...(userConfig.rules || []).map((r: any) => ({
+            pattern: new RegExp(r.pattern, 'i'),
+            description: r.description,
+            riskLevel: r.riskLevel as 'medium' | 'high' | 'critical',
+            category: r.category,
+          })),
+        ],
+        safeRules: [
+          ...DEFAULT_SAFE_RULES,
+          ...(userConfig.safeRules || []).map((r: any) => ({
+            pattern: new RegExp(r.pattern, 'i'),
+            description: r.description,
+          })),
+        ],
+      };
+
+      console.log('[dangerous-commands] Loaded config from', configPath);
+      return configInstance;
+    } catch (error) {
+      console.error('[dangerous-commands] Failed to load config:', error);
+    }
+  }
+
+  // 使用默认配置
+  configInstance = {
+    rules: DEFAULT_DANGEROUS_RULES,
+    safeRules: DEFAULT_SAFE_RULES,
+  };
+
+  return configInstance;
+}
+
+/**
+ * 重置配置（用于测试）
+ */
+export function resetConfig(): void {
+  configInstance = null;
+}
+
+/**
+ * 检查命令是否安全（不需要审批）
+ */
+export function isSafeCommand(command: string): boolean {
+  const config = loadConfig();
+
+  for (const rule of config.safeRules) {
+    if (rule.pattern.test(command)) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+/**
+ * 检查命令是否危险
+ */
+export function checkDangerousCommand(command: string): {
+  isDangerous: boolean;
+  rule?: DangerousRule;
+  level: DangerLevel;
+} {
+  // 首先检查是否是安全命令
+  if (isSafeCommand(command)) {
+    return { isDangerous: false, level: 'safe' };
+  }
+
+  const config = loadConfig();
+
+  // 检查危险规则
+  for (const rule of config.rules) {
+    if (rule.pattern.test(command)) {
+      return {
+        isDangerous: true,
+        rule,
+        level: rule.riskLevel,
+      };
+    }
+  }
+
+  // 未知命令，视为低风险
+  return { isDangerous: false, level: 'low' };
+}
+
+/**
+ * 评估命令风险等级
+ */
+export function estimateRiskLevel(command: string): 'low' | 'medium' | 'high' | 'critical' {
+  const result = checkDangerousCommand(command);
+
+  if (result.level === 'safe') return 'low';
+  if (result.level === 'low') return 'low';
+  if (result.level === 'medium') return 'medium';
+  if (result.level === 'high') return 'high';
+  return 'critical';
+}
+
+/**
+ * 获取所有危险规则（用于调试）
+ */
+export function getDangerousRules(): DangerousRule[] {
+  return loadConfig().rules;
+}
+
+/**
+ * 获取所有安全规则（用于调试）
+ */
+export function getSafeRules(): SafeRule[] {
+  return loadConfig().safeRules;
+}