memocode 0.2.1__tar.gz → 0.2.2__tar.gz

{memocode-0.2.1 → memocode-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: memocode
-Version: 0.2.1
+Version: 0.2.2
 Summary: Personal AI coding agent with memory, tool execution, and safety controls
 Author: AssassinCHN
 Requires-Python: >=3.11
@@ -33,9 +33,7 @@ Personal AI coding agent CLI with memory, tool execution, and safety controls.
 ## Installation
 
 ```bash
-git clone <repo>
-cd mcode
-pip install -e .
+pip install memocode
 ```
 
 Configure your model in `~/.mcode/agent.json` (created on first run):

{memocode-0.2.1 → memocode-0.2.2}/README.md

@@ -21,9 +21,7 @@ Personal AI coding agent CLI with memory, tool execution, and safety controls.
 ## Installation
 
 ```bash
-git clone <repo>
-cd mcode
-pip install -e .
+pip install memocode
 ```
 
 Configure your model in `~/.mcode/agent.json` (created on first run):

{memocode-0.2.1 → memocode-0.2.2}/memocode.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: memocode
-Version: 0.2.1
+Version: 0.2.2
 Summary: Personal AI coding agent with memory, tool execution, and safety controls
 Author: AssassinCHN
 Requires-Python: >=3.11
@@ -33,9 +33,7 @@ Personal AI coding agent CLI with memory, tool execution, and safety controls.
 ## Installation
 
 ```bash
-git clone <repo>
-cd mcode
-pip install -e .
+pip install memocode
 ```
 
 Configure your model in `~/.mcode/agent.json` (created on first run):

{memocode-0.2.1 → memocode-0.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "memocode"
-version = "0.2.1"
+version = "0.2.2"
 description = "Personal AI coding agent with memory, tool execution, and safety controls"
 readme = "README.md"
 authors = [{name = "AssassinCHN"}]

{memocode-0.2.1 → memocode-0.2.2}/safety/safety.py

@@ -82,7 +82,7 @@ def _extract_paths(command: str, work_dir: str | None = None) -> list[str]:
             # relative path (./foo, ../foo) — resolve against work_dir or cwd
             base = work_dir or os.getcwd()
             ep = os.path.normpath(os.path.join(base, p))
-        if not ep.startswith(("/proc/", "/sys/")):
+        if not ep.startswith(("/proc/", "/sys/")) and ep not in ("/dev/null", "/dev/stdout", "/dev/stderr"):
             result.append(ep)
     return result
 
@@ -266,31 +266,150 @@ def check(task, work_dir: str | None = None,
 # Command injection patterns
 _INJECTION_RE = re.compile(r'\$\(|`')
 
-# Split shell command into pipe/chain segments
-_SHELL_SEP_RE = re.compile(r'\|\|?|&&?|;')
+# Leading KEY=value env-var assignments (e.g. PYTHONPATH=... FOO=bar cmd ...)
+_ENV_PREFIX_RE = re.compile(r'^(\w+=\S*\s*)+')
 
 DEFAULT_AUTO_WHITELIST: list[str] = [
-    # Filesystem read
-    "ls", "find", "cat", "head", "tail", "wc", "stat", "file", "du", "df",
-    "echo", "printenv", "env", "date", "whoami", "id", "uname", "pwd", "which", "type",
-    # Text processing
-    "grep", "rg", "awk", "sed", "cut", "sort", "uniq", "diff", "tr", "xargs",
-    # Git (all subcommands)
+    # ── Navigation ───────────────────────────────────────────────────────────
+    "cd", "pwd", "pushd", "popd", "dirs",
+
+    # ── File inspection ──────────────────────────────────────────────────────
+    "ls", "ll", "la", "find", "locate", "which", "type", "file",
+    "stat", "du", "df", "realpath", "basename", "dirname", "readlink",
+    "lsblk", "lscpu", "lshw", "lsof",
+
+    # ── File read ────────────────────────────────────────────────────────────
+    "cat", "head", "tail", "less", "more", "bat",
+    "wc", "od", "xxd", "hexdump", "strings",
+
+    # ── File create / copy / move ─────────────────────────────────────────────
+    "mkdir", "touch", "cp", "mv", "ln", "mktemp", "tee", "split", "install",
+
+    # ── Archive ──────────────────────────────────────────────────────────────
+    "tar", "zip", "unzip", "gzip", "gunzip", "bzip2", "bunzip2",
+    "xz", "unxz", "zcat", "7z", "7za",
+
+    # ── Text processing ──────────────────────────────────────────────────────
+    "grep", "rg", "ag", "awk", "sed", "cut", "sort", "uniq",
+    "diff", "patch", "tr", "xargs",
+    "paste", "join", "expand", "unexpand", "nl", "fold", "column",
+    "echo", "printf", "iconv",
+
+    # ── Encoding / hashing ───────────────────────────────────────────────────
+    "base64", "md5sum", "sha1sum", "sha256sum", "sha512sum", "shasum", "cksum",
+    "openssl",
+
+    # ── Search ───────────────────────────────────────────────────────────────
+    "fd", "fzf",
+
+    # ── Environment / system info ─────────────────────────────────────────────
+    "env", "printenv", "date", "uname", "hostname", "uptime",
+    "whoami", "id", "groups",
+    "ps", "pgrep", "pidof", "top", "htop", "free", "vmstat", "iostat",
+    "ulimit", "time", "bc",
+
+    # ── Process control ───────────────────────────────────────────────────────
+    "sleep", "wait", "timeout", "watch", "nohup",
+    "true", "false", "test", "seq", "kill", "pkill",
+
+    # ── Network (read / fetch) ─────────────────────────────────────────────────
+    "curl", "wget", "http",
+    "ping", "traceroute", "nslookup", "dig", "host",
+    "netstat", "ss", "ifconfig", "ip",
+    "ssh", "scp", "rsync",
+
+    # ── Permissions ──────────────────────────────────────────────────────────
+    "chmod", "chown", "chgrp", "umask",
+
+    # ── Git ──────────────────────────────────────────────────────────────────
     "git",
-    # Python / Node
-    "python", "python3", "node",
-    # Package info (read-only subcommands)
-    "pip list", "pip show", "pip freeze",
-    "pip3 list", "pip3 show", "pip3 freeze",
-    "npm list", "npm outdated",
-    # Process / system info
-    "ps", "top", "free", "lsof", "uptime",
+
+    # ── Python ───────────────────────────────────────────────────────────────
+    "python", "python3", "python3.10", "python3.11", "python3.12", "python3.13",
+    "pip", "pip3", "pipenv", "poetry", "uv",
+    "pytest", "mypy", "pyright", "ruff", "flake8", "pylint",
+    "black", "isort", "autopep8",
+    "ipython", "jupyter",
+    "pyenv",
+
+    # ── Node / JS ────────────────────────────────────────────────────────────
+    "node", "npm", "npx", "yarn", "pnpm", "bun", "deno",
+    "jest", "mocha", "vitest", "eslint", "prettier", "tsc",
+    "nvm",
+
+    # ── Compiled languages ────────────────────────────────────────────────────
+    "gcc", "g++", "clang", "clang++", "cc", "c++",
+    "make", "cmake", "ninja", "meson", "bear",
+    "cargo", "rustc", "rustfmt",
+    "go", "gofmt",
+    "java", "javac", "jar", "mvn", "gradle",
+    "dotnet",
+    "swift", "swiftc",
+    "ruby", "gem", "bundle", "rspec",
+    "perl", "php", "composer",
+    "lua", "Rscript",
+
+    # ── Shell scripting ───────────────────────────────────────────────────────
+    "bash", "sh", "zsh", "shellcheck",
+    "source",
+
+    # ── Data / serialisation ──────────────────────────────────────────────────
+    "jq", "yq",
+
+    # ── Containers / orchestration ────────────────────────────────────────────
+    "docker", "docker-compose", "docker compose", "podman",
+    "kubectl", "helm", "minikube", "kind",
+
+    # ── Cloud CLIs ────────────────────────────────────────────────────────────
+    "aws", "gcloud", "az",
+
+    # ── Database clients ──────────────────────────────────────────────────────
+    "mysql", "mysqldump", "psql", "pg_dump", "sqlite3",
+    "redis-cli",
+
+    # ── Misc ─────────────────────────────────────────────────────────────────
+    "man", "tput", "stty", "locale",
+    "systemctl", "service",
 ]
 
 
+def _split_shell_ops(command: str) -> list[str]:
+    """Split on && || | ; but NOT inside single- or double-quoted strings."""
+    segments: list[str] = []
+    current: list[str] = []
+    in_single = False
+    in_double = False
+    i = 0
+    while i < len(command):
+        c = command[i]
+        if c == "'" and not in_double:
+            in_single = not in_single
+            current.append(c)
+        elif c == '"' and not in_single:
+            in_double = not in_double
+            current.append(c)
+        elif not in_single and not in_double:
+            two = command[i:i + 2]
+            if two in ("&&", "||"):
+                segments.append("".join(current))
+                current = []
+                i += 2
+                continue
+            elif c in ("|", ";"):
+                segments.append("".join(current))
+                current = []
+            else:
+                current.append(c)
+        else:
+            current.append(c)
+        i += 1
+    segments.append("".join(current))
+    return segments
+
+
 def _matches_whitelist(segment: str, whitelist: list[str]) -> bool:
-    """Return True if the command segment starts with a whitelist entry (word boundary)."""
-    seg = segment.lower().strip()
+    """Return True if the command segment (after stripping env-var prefixes) starts with a whitelist entry."""
+    seg = _ENV_PREFIX_RE.sub("", segment).lower().strip()
     for entry in whitelist:
         e = entry.lower().strip()
         if seg == e or seg.startswith(e + " "):
@@ -352,7 +471,7 @@ def check_auto(task, work_dir: str | None = None,
                             reason="Auto mode: command injection pattern blocked")
 
     # Whitelist check — every pipe/chain segment must be in whitelist
-    for seg in _SHELL_SEP_RE.split(command):
+    for seg in _split_shell_ops(command):
         seg = seg.strip()
         if not seg:
             continue