zen-gitsync 2.15.33 → 2.16.1

package/src/cli/ai/safety.test.js

@@ -0,0 +1,158 @@
+// Copyright 2026 xz333221
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// src/cli/ai/safety.js 单元测试。
+// 覆盖两大类:
+//   1. 系统级毁灭命令必须拦截(rm -rf / · format · shutdown · dd · fork bomb 等)
+//   2. 项目内正常操作必须放行(rm -rf node_modules · git clean · del /s build 等)
+//    —— 第 2 类和第 1 类同等重要,误伤正常操作会让智能体不可用。
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { checkDangerousCommand } from './safety.js'
+
+// ========== 必须拦截:递归删除根/系统目录 ==========
+
+const BLOCKED_RM = [
+  'rm -rf /',
+  'rm -rf /*',
+  'rm -fr /',
+  'rm -r -f /',
+  'rm --recursive --force /',
+  'rm -rf ~',
+  'rm -rf ~/',
+  'rm -rf $HOME',
+  'rm -rf ${HOME}',
+  'rm -rf /etc',
+  'rm -rf /usr',
+  'rm -rf /boot',
+  'rm -rf /System',
+  'rm -rf /windows',
+  'rm -rf /c',
+  'rm -rf /c/',
+  'rm -rf /d/',
+  'rm -rf C:\\',
+  'rm -rf C:/',
+  'rm -rf C:',
+  'sudo rm -rf /',
+  'rm -rf / && echo done',
+  'echo start; rm -rf ~',
+  'rm -rf /usr/*',
+]
+
+for (const cmd of BLOCKED_RM) {
+  test(`拦截递归删除: ${cmd}`, () => {
+    const r = checkDangerousCommand(cmd)
+    assert.equal(r.blocked, true, `应拦截: ${cmd}`)
+    assert.ok(r.reason, '应给出中文原因')
+  })
+}
+
+// ========== 必须拦截:Windows 删除/格式化/系统破坏 ==========
+
+const BLOCKED_OTHERS = [
+  'del /s /q C:\\',
+  'del /s C:\\*.*',
+  'rd /s /q C:\\',
+  'rmdir /s C:\\Windows',
+  'format C:',
+  'format d: /q',
+  'mkfs.ext4 /dev/sda1',
+  'mkfs /dev/sdb',
+  'diskpart',
+  'bcdedit /set {bootmgr} displaybootmenu no',
+  'bootrec /fixmbr',
+  'dd if=/dev/zero of=/dev/sda',
+  'dd of=/dev/nvme0n1 if=./img.iso',
+  'echo x > /dev/sda',
+  'cat /dev/urandom > /dev/sdb',
+  'shutdown /s /t 0',
+  'shutdown -h now',
+  'reboot',
+  'sudo poweroff',
+  'halt',
+  'init 0',
+  'Stop-Computer',
+  'Restart-Computer -Force',
+  ':(){ :|:& };:',
+  'reg delete HKLM\\SOFTWARE\\test /f',
+  'reg delete "HKEY_LOCAL_MACHINE\\SOFTWARE\\x"',
+  'reg delete HKCR\\* /f',
+  'chmod -R 777 /',
+  'chmod -R 755 /etc',
+  'chown -R user:user /',
+  'Remove-Item C:\\ -Recurse -Force',
+  'Remove-Item $env:SystemDrive -Recurse',
+  'Remove-Item ~ -Recurse -Force',
+  'shred /dev/sda',
+  'wipefs -a /dev/sda',
+]
+
+for (const cmd of BLOCKED_OTHERS) {
+  test(`拦截系统破坏: ${cmd}`, () => {
+    const r = checkDangerousCommand(cmd)
+    assert.equal(r.blocked, true, `应拦截: ${cmd}`)
+    assert.ok(r.reason, '应给出中文原因')
+  })
+}
+
+// ========== 必须放行:项目内正常操作(误伤=智能体残废) ==========
+
+const ALLOWED = [
+  'rm -rf node_modules',
+  'rm -rf ./dist build',
+  'rm -rf /tmp/my-scratch',
+  'rm -rf /usr/local/bin/my-tool',
+  'rm file.txt',
+  'rm -f package-lock.json',
+  'git clean -fdx',
+  'git push --force-with-lease',
+  'git reset --hard origin/main',
+  'del /s /q build\\*.tmp',
+  'rd /s /q dist',
+  'rmdir /s /q coverage',
+  'npm run shutdown',
+  'echo shutdown now please',
+  'npm run format',
+  'prettier --write .',
+  'Remove-Item ./dist -Recurse -Force',
+  'Remove-Item .\\node_modules -Recurse -Force',
+  'reg delete HKCU\\Software\\myapp /f',
+  'chmod -R 755 ./src',
+  'chown -R user:user ./project',
+  'npm test',
+  'dir C:\\',
+  'type C:\\Windows\\system.ini',
+  'ping 127.0.0.1',
+  'node -e "console.log(1)"',
+  'g --ai',
+  'git add . && git commit -m "test" && git push',
+]
+
+for (const cmd of ALLOWED) {
+  test(`放行正常操作: ${cmd}`, () => {
+    const r = checkDangerousCommand(cmd)
+    assert.equal(r.blocked, false, `不应拦截: ${cmd}(原因: ${r.reason})`)
+    assert.equal(r.reason, null)
+  })
+}
+
+// ========== 边界输入 ==========
+
+test('非字符串/空输入不拦截也不报错', () => {
+  for (const bad of [null, undefined, 123, {}, [], '', '   ']) {
+    const r = checkDangerousCommand(bad)
+    assert.equal(r.blocked, false)
+    assert.equal(r.reason, null)
+  }
+})

package/src/cli/ai/streamFilter.js

@@ -0,0 +1,82 @@
+// Copyright 2026 xz333221
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// MiniMax 系模型的 <think> 标签流式过滤器。
+//
+// 背景:MiniMax-M2/M3 等模型不走 reasoning_content 字段,而是把思考过程
+// 以 <think>...</think> 标签**内联在 content 流**里推送,且标签本身会被
+// SSE 分片切碎(如 '<thi' + 'nk>')。直接透传到终端会看到裸标签。
+//
+// 本模块提供一个增量状态机:feed() 接收任意分片的 content 字符串,
+// 返回 [{content}|{thinking}] 段数组,调用方按类型分别渲染
+// (content 正常显示,thinking 置灰)。标签本身被剥离,不进显示。
+//
+// 注意:这里只影响**终端显示**;写回对话历史的仍是模型原始 content
+// (含标签),保证上下文对模型保真。
+
+const OPEN = '<think>'
+const CLOSE = '</think>'
+// 保留尾部长度:开标签 7 字符 / 闭标签 8 字符,跨分片的半个标签不能提前吐出
+const KEEP_OPEN = OPEN.length - 1    // 6
+const KEEP_CLOSE = CLOSE.length - 1  // 7
+
+/**
+ * 创建一个增量 think 标签过滤器。
+ * @returns {{ feed: (chunk: string) => Array<object>, flush: () => Array<object> }}
+ */
+export function createThinkFilter() {
+  let mode = 'normal'   // 'normal' | 'think'
+  let pending = ''
+
+  function feed(chunk) {
+    pending += String(chunk || '')
+    const out = []
+    while (pending.length > 0) {
+      const tag = mode === 'normal' ? OPEN : CLOSE
+      const keep = mode === 'normal' ? KEEP_OPEN : KEEP_CLOSE
+      const i = pending.indexOf(tag)
+      if (i === -1) {
+        // 没找到完整标签:吐出除"可能是半拉标签"的尾部以外的内容
+        const safe = pending.length - keep
+        if (safe > 0) {
+          out.push({ [mode === 'normal' ? 'content' : 'thinking']: pending.slice(0, safe) })
+          pending = pending.slice(safe)
+        }
+        break
+      }
+      if (i > 0) {
+        // 标签前有正文,先吐出
+        out.push({ [mode === 'normal' ? 'content' : 'thinking']: pending.slice(0, i) })
+        pending = pending.slice(i)
+        continue
+      }
+      // 命中完整标签:切换模式,吃掉标签
+      mode = mode === 'normal' ? 'think' : 'normal'
+      pending = pending.slice(tag.length)
+    }
+    return out
+  }
+
+  // 流结束时冲刷剩余 buffer(含未闭合的 think 块,按当前模式吐出)
+  function flush() {
+    if (!pending) return []
+    const seg = { [mode === 'normal' ? 'content' : 'thinking']: pending }
+    pending = ''
+    return [seg]
+  }
+
+  return { feed, flush }
+}
+
+export default { createThinkFilter }

package/src/cli/ai/streamFilter.test.js

@@ -0,0 +1,88 @@
+// Copyright 2026 xz333221
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// src/cli/ai/streamFilter.js 单元测试。
+// 重点覆盖 SSE 分片把 <think>/</think> 标签切碎的场景 —— 这正是
+// MiniMax 模型裸标签问题的根源,整标签输入反而没啥可测的。
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { createThinkFilter } from './streamFilter.js'
+
+// 辅助:把一串分片喂给过滤器,返回渲染后的 {content, thinking} 全文
+function runChunks(chunks) {
+  const f = createThinkFilter()
+  const segs = []
+  for (const c of chunks) segs.push(...f.feed(c))
+  segs.push(...f.flush())
+  return {
+    segs,
+    content: segs.map(s => s.content || '').join(''),
+    thinking: segs.map(s => s.thinking || '').join(''),
+  }
+}
+
+test('纯文本无标签原样通过', () => {
+  const r = runChunks(['你好,', '这是正文。'])
+  assert.equal(r.content, '你好,这是正文。')
+  assert.equal(r.thinking, '')
+})
+
+test('完整 think 块:标签剥离,内容归类 thinking', () => {
+  const r = runChunks(['<think>让我想想</think>答案是 42。'])
+  assert.equal(r.content, '答案是 42。')
+  assert.equal(r.thinking, '让我想想')
+})
+
+test('开标签被分片切碎(<thi + nk>)也能识别', () => {
+  const r = runChunks(['<thi', 'nk>思考中</thi', 'nk>正文'])
+  assert.equal(r.content, '正文')
+  assert.equal(r.thinking, '思考中')
+})
+
+test('闭标签跨 3 个分片也能识别', () => {
+  const r = runChunks(['<think>想</', 'th', 'ink>做完'])
+  assert.equal(r.content, '做完')
+  assert.equal(r.thinking, '想')
+})
+
+test('正文与 think 块交替多次', () => {
+  const r = runChunks(['先想<think>一</think>再说<think>二</think>完'])
+  assert.equal(r.content, '先想再说完')
+  assert.equal(r.thinking, '一二')
+})
+
+test('未闭合的 think 块在 flush 时按 thinking 吐出', () => {
+  const r = runChunks(['前置<think>想到一半被截断'])
+  assert.equal(r.content, '前置')
+  assert.equal(r.thinking, '想到一半被截断')
+})
+
+test('空 think 块不产生空段干扰', () => {
+  const r = runChunks(['<think></think>正文'])
+  assert.equal(r.content, '正文')
+  assert.equal(r.thinking, '')
+})
+
+test('逐字符投喂的极端分片', () => {
+  const full = '<think>深</think>答'
+  const r = runChunks([...full])
+  assert.equal(r.content, '答')
+  assert.equal(r.thinking, '深')
+})
+
+test('文末残留的半个开标签在 flush 时按正文吐出(不是标签)', () => {
+  const r = runChunks(['正常结尾<thi'])
+  assert.equal(r.content, '正常结尾<thi')
+  assert.equal(r.thinking, '')
+})