auto-coder 0.1.390__tar.gz → 0.1.392__tar.gz

{auto_coder-0.1.390 → auto_coder-0.1.392}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: auto-coder
-Version: 0.1.390
+Version: 0.1.392
 Summary: AutoCoder: AutoCoder
 Author: allwefantasy
 Classifier: Programming Language :: Python :: 3.10
@@ -28,7 +28,7 @@ Requires-Dist: prompt-toolkit
 Requires-Dist: tokenizers
 Requires-Dist: aiofiles
 Requires-Dist: readerwriterlock
-Requires-Dist: byzerllm[saas]>=0.1.188
+Requires-Dist: byzerllm[saas]>=0.1.189
 Requires-Dist: patch
 Requires-Dist: diff_match_patch
 Requires-Dist: GitPython

{auto_coder-0.1.390 → auto_coder-0.1.392}/src/auto_coder.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: auto-coder
-Version: 0.1.390
+Version: 0.1.392
 Summary: AutoCoder: AutoCoder
 Author: allwefantasy
 Classifier: Programming Language :: Python :: 3.10
@@ -28,7 +28,7 @@ Requires-Dist: prompt-toolkit
 Requires-Dist: tokenizers
 Requires-Dist: aiofiles
 Requires-Dist: readerwriterlock
-Requires-Dist: byzerllm[saas]>=0.1.188
+Requires-Dist: byzerllm[saas]>=0.1.189
 Requires-Dist: patch
 Requires-Dist: diff_match_patch
 Requires-Dist: GitPython

{auto_coder-0.1.390 → auto_coder-0.1.392}/src/auto_coder.egg-info/SOURCES.txt

@@ -191,6 +191,7 @@ src/autocoder/common/v2/agent/agentic_edit_tools/__init__.py
 src/autocoder/common/v2/agent/agentic_edit_tools/ask_followup_question_tool_resolver.py
 src/autocoder/common/v2/agent/agentic_edit_tools/attempt_completion_tool_resolver.py
 src/autocoder/common/v2/agent/agentic_edit_tools/base_tool_resolver.py
+src/autocoder/common/v2/agent/agentic_edit_tools/dangerous_command_checker.py
 src/autocoder/common/v2/agent/agentic_edit_tools/execute_command_tool_resolver.py
 src/autocoder/common/v2/agent/agentic_edit_tools/list_code_definition_names_tool_resolver.py
 src/autocoder/common/v2/agent/agentic_edit_tools/list_files_tool_resolver.py

{auto_coder-0.1.390 → auto_coder-0.1.392}/src/auto_coder.egg-info/requires.txt

@@ -18,7 +18,7 @@ prompt-toolkit
 tokenizers
 aiofiles
 readerwriterlock
-byzerllm[saas]>=0.1.188
+byzerllm[saas]>=0.1.189
 patch
 diff_match_patch
 GitPython

{auto_coder-0.1.390 → auto_coder-0.1.392}/src/autocoder/chat_auto_coder.py

@@ -270,10 +270,8 @@ ARGS = None
 
 
 def main():
-    load_tokenizer()
-    start_engine()
-
-    ARGS = parse_arguments()
+    load_tokenizer()    
+    ARGS = parse_arguments()    
 
     if ARGS.lite:
         ARGS.product_mode = "lite"
@@ -292,6 +290,8 @@ def main():
                 pro=ARGS.pro,
             )
         )
+    
+    start_engine()    
 
     # Initialize plugin system
     # Add default plugin directory into global plugin dirs

{auto_coder-0.1.390 → auto_coder-0.1.392}/src/autocoder/common/__init__.py

@@ -276,6 +276,7 @@ class AutoCoderArgs(pydantic.BaseModel):
     enable_agentic_filter: Optional[bool] = False
     enable_agentic_edit: Optional[bool] = True
     enable_agentic_auto_approve: Optional[bool] = False
+    enable_agentic_dangerous_command_check: Optional[bool] = False
     
 
     index_filter_level: Optional[int] = 0

auto_coder-0.1.392/src/autocoder/common/v2/agent/agentic_edit_tools/dangerous_command_checker.py

@@ -0,0 +1,191 @@
+import re
+from typing import List, Tuple, Optional
+from loguru import logger
+
+
+class DangerousCommandChecker:
+    """危险命令检查器，用于检测和防止执行潜在危险的系统命令"""
+    
+    def __init__(self):
+        # 危险命令模式列表
+        self.dangerous_patterns = [
+            # 文件删除相关
+            (r'\brm\s+.*-[rf]', "删除文件命令"),
+            (r'\brm\s+-[rf]', "删除文件命令"),
+            (r'\bunlink\b', "删除文件命令"),
+            
+            # 系统格式化和分区操作
+            (r'\bmkfs\b', "格式化文件系统命令"),
+            (r'\bfdisk\b', "磁盘分区命令"),
+            (r'\bparted\b', "磁盘分区命令"),
+            (r'\bdd\s+.*if=.*of=', "数据复制命令，可能覆盖系统文件"),
+            
+            # 权限修改
+            (r'\bchmod\s+777\b', "危险权限修改"),
+            (r'\bchmod\s+\d*7\d*7\b', "危险权限修改"),
+            (r'\bchown\s+.*root\b', "更改文件所有者为root"),
+            
+            # 提权相关
+            (r'\bsudo\s+.*rm\b', "使用sudo执行删除命令"),
+            (r'\bsu\s+-\b', "切换到root用户"),
+            (r'\bsu\s+root\b', "切换到root用户"),                  
+            
+            # 系统服务相关
+            (r'\bsystemctl\s+stop\b', "停止系统服务"),
+            (r'\bsystemctl\s+disable\b', "禁用系统服务"),
+            (r'\bservice\s+.*stop\b', "停止系统服务"),
+            
+            # 进程操作
+            (r'\bkill\s+-9\s+1\b', "强制终止init进程"),
+            (r'\bkillall\s+-9\b', "强制终止所有进程"),
+            (r'\bpkill\s+-9\b', "强制终止进程"),
+            
+            # 系统关机重启
+            (r'\bshutdown\b', "系统关机命令"),
+            (r'\breboot\b', "系统重启命令"),
+            (r'\bhalt\b', "系统停机命令"),
+            (r'\bpoweroff\b', "系统断电命令"),
+            
+            # 环境变量和系统配置
+            (r'\bexport\s+PATH=', "修改PATH环境变量"),
+            (r'\bunset\s+PATH\b', "删除PATH环境变量"),
+            (r'>\s*/etc/', "重定向写入系统配置文件"),
+            (r'\becho\s+.*>\s*/etc/', "写入系统配置文件"),
+            
+            # 系统文件编辑
+            (r'\bvi\s+/etc/', "编辑系统配置文件"),
+            (r'\bnano\s+/etc/', "编辑系统配置文件"),
+            (r'\bemacs\s+/etc/', "编辑系统配置文件"),
+            
+            # 历史和日志清理
+            (r'\bhistory\s+-c\b', "清空命令历史"),
+            (r'>\s*/dev/null\s+2>&1', "重定向所有输出到null"),
+            (r'\brm\s+.*\.log\b', "删除日志文件"),
+            
+            # 安装和包管理（可能安装恶意软件）
+            (r'\bapt\s+install\s+.*--force\b', "强制安装软件包"),
+            (r'\byum\s+install\s+.*--assumeyes\b', "自动确认安装软件包"),
+            (r'\bpip\s+install\s+.*--force\b', "强制安装Python包"),
+        ]
+        
+        # 危险字符模式
+        self.dangerous_chars = [
+            (r';', "命令分隔符，可能执行多个命令"),
+            (r'`.*`', "命令替换，可能执行隐藏命令"),
+            (r'\$\(.*\)', "命令替换，可能执行隐藏命令"),
+            (r'\|(?!\s*head\b|\s*tail\b|\s*grep\b|\s*sort\b|\s*uniq\b|\s*wc\b|\s*cat\b)', "管道符，可能传递敏感数据"),
+            (r'&&(?!\s*echo\b)', "逻辑与操作符，可能链式执行命令"),
+            (r'\|\|', "逻辑或操作符，可能条件执行命令"),
+            (r'<\(', "进程替换"),
+            (r'>\(', "进程替换"),
+        ]
+        
+        # 允许的安全命令前缀（白名单）
+        self.safe_command_prefixes = [
+            'ls', 'pwd', 'whoami', 'date', 'echo', 'cat', 'head', 'tail',
+            'grep', 'find', 'which', 'man', 'help', 'cd', 'mkdir', 'touch',
+            'cp', 'mv', 'wc', 'sort', 'uniq', 'diff', 'tree', 'file',
+            'stat', 'du', 'df', 'ps', 'top', 'history', 'env', 'printenv'
+        ]
+
+    def is_command_dangerous(self, command: str) -> Tuple[bool, Optional[str]]:
+        """
+        检查命令是否危险
+        
+        Args:
+            command: 要检查的命令字符串
+            
+        Returns:
+            Tuple[bool, Optional[str]]: (是否危险, 危险原因)
+        """
+        command = command.strip()
+        
+        # 空命令不危险
+        if not command:
+            return False, None
+            
+        # 检查危险命令模式
+        for pattern, reason in self.dangerous_patterns:
+            if re.search(pattern, command, re.IGNORECASE):
+                logger.warning(f"检测到危险命令模式: {pattern} in command: {command}")
+                return True, f"危险命令: {reason}"
+        
+        # 检查危险字符
+        for pattern, reason in self.dangerous_chars:
+            if re.search(pattern, command):
+                # 对于 && 的特殊处理，允许 cd 命令链
+                if pattern == r'&&(?!\s*echo\b)' and command.strip().startswith('cd '):
+                    continue
+                logger.warning(f"检测到危险字符: {pattern} in command: {command}")
+                return True, f"包含危险字符: {reason}"
+        
+        return False, None
+    
+    def is_command_in_whitelist(self, command: str) -> bool:
+        """
+        检查命令是否在安全白名单中
+        
+        Args:
+            command: 要检查的命令字符串
+            
+        Returns:
+            bool: 是否在白名单中
+        """
+        command = command.strip()
+        if not command:
+            return False
+            
+        # 获取命令的第一个词（命令名）
+        first_word = command.split()[0]
+        
+        return first_word.lower() in self.safe_command_prefixes
+    
+    def check_command_safety(self, command: str, allow_whitelist_bypass: bool = True) -> Tuple[bool, Optional[str]]:
+        """
+        综合检查命令安全性
+        
+        Args:
+            command: 要检查的命令字符串
+            allow_whitelist_bypass: 是否允许白名单命令绕过危险检查
+            
+        Returns:
+            Tuple[bool, Optional[str]]: (是否安全, 不安全的原因)
+        """
+        # 首先检查是否危险
+        is_dangerous, danger_reason = self.is_command_dangerous(command)
+        
+        if not is_dangerous:
+            return True, None
+            
+        # 如果允许白名单绕过，且命令在白名单中，则认为安全
+        if allow_whitelist_bypass and self.is_command_in_whitelist(command):
+            logger.info(f"命令在白名单中，允许执行: {command}")
+            return True, None
+            
+        return False, danger_reason
+    
+    def get_safety_recommendations(self, command: str) -> List[str]:
+        """
+        为不安全的命令提供安全建议
+        
+        Args:
+            command: 要检查的命令字符串
+            
+        Returns:
+            List[str]: 安全建议列表
+        """
+        recommendations = []
+        
+        if 'rm' in command:
+            recommendations.append("使用 'rm -i' 进行交互式删除")
+            recommendations.append("在删除前使用 'ls' 确认要删除的文件")
+            
+        if 'chmod 777' in command:
+            recommendations.append("避免使用 '777' 权限，考虑更安全的权限设置")
+            recommendations.append("使用 'chmod 755' 或 'chmod 644' 等更安全的权限")
+            
+        if 'sudo' in command:
+            recommendations.append("确认您真的需要root权限")
+            recommendations.append("考虑使用更具体的权限而不是sudo")  
+            
+        return recommendations 

{auto_coder-0.1.390 → auto_coder-0.1.392}/src/autocoder/common/v2/agent/agentic_edit_tools/execute_command_tool_resolver.py

@@ -4,6 +4,7 @@ from typing import Dict, Any, Optional
 from autocoder.common.run_cmd import run_cmd_subprocess
 from autocoder.common.v2.agent.agentic_edit_tools.base_tool_resolver import BaseToolResolver
 from autocoder.common.v2.agent.agentic_edit_types import ExecuteCommandTool, ToolResult # Import ToolResult from types
+from autocoder.common.v2.agent.agentic_edit_tools.dangerous_command_checker import DangerousCommandChecker
 from autocoder.common import shells
 from autocoder.common.printer import Printer
 from loguru import logger
@@ -26,6 +27,8 @@ class ExecuteCommandToolResolver(BaseToolResolver):
             args=self.args,
             llm=self.agent.context_prune_llm
         )
+        # 初始化危险命令检查器
+        self.danger_checker = DangerousCommandChecker()
 
     def _prune_file_content(self, content: str, file_path: str) -> str:
         """对文件内容进行剪枝处理"""
@@ -60,14 +63,21 @@ class ExecuteCommandToolResolver(BaseToolResolver):
         command = self.tool.command
         requires_approval = self.tool.requires_approval
         source_dir = self.args.source_dir or "."
-
-        # Basic security check (can be expanded)
-        if ";" in command or "&&" in command or "|" in command or "`" in command:
-             # Allow && for cd chaining, but be cautious
-             if not command.strip().startswith("cd ") and " && " in command:
-                 pass # Allow cd chaining like 'cd subdir && command'
-             else:
-                return ToolResult(success=False, message=f"Command '{command}' contains potentially unsafe characters.")
+        
+        if self.args.enable_agentic_dangerous_command_check:
+            # 使用新的危险命令检查器进行安全检查
+            is_safe, danger_reason = self.danger_checker.check_command_safety(command, allow_whitelist_bypass=True)
+            
+            if not is_safe:
+                # 获取安全建议
+                recommendations = self.danger_checker.get_safety_recommendations(command)
+                
+                error_message = f"检测到危险命令: {danger_reason}"
+                if recommendations:
+                    error_message += f"\n安全建议:\n" + "\n".join(f"- {rec}" for rec in recommendations)
+                
+                logger.warning(f"阻止执行危险命令: {command}, 原因: {danger_reason}")
+                return ToolResult(success=False, message=error_message)
 
         # Approval mechanism (simplified)
         if not self.args.enable_agentic_auto_approve and requires_approval:

auto_coder-0.1.392/src/autocoder/version.py

@@ -0,0 +1 @@
+__version__ = "0.1.392"

auto_coder-0.1.390/src/autocoder/version.py

@@ -1,2 +0,0 @@
-
-__version__ = "0.1.390"