mirror of
https://bitbucket.org/siakitem/my-pi.git
synced 2026-10-26 18:55:22 +00:00
配置统一:权限策略、硬防御、Tool Search、提示词封面以及新迁入的 RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展 直接读取已安装组合包内的 config/,pi install / pi update 即完成部署; 删除 rebuild-bundle-config.mjs 与 bundle-manifest.json,my-pi/ 只保留 日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本 reset 回发布版本。AGENTS.md 新增「组合包配置原则」。 脚本整合:search_config.sh / ssh_config.sh 合并为 configure.sh search|ssh;install.sh / update.sh 共享函数抽到 scripts/lib.sh,远程 安装器改为先下载到临时文件再执行,下载失败可被检测。 权限:hard-guards 新增 protectedWrites,写入 Pi 凭据/设置、已安装 组合包与扩展目录、pi-ssh 凭据库时一律人工确认(跳过 AutoReview、 yolo 与 Session grant,无 UI 时拒绝);放行 ls、LSP 查询、ctx 只读、 web_search、Chrome 只读与 git 只读命令,skill_manage 改为 ask。 Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
81 lines
2.6 KiB
TypeScript
81 lines
2.6 KiB
TypeScript
import {
|
|
mkdirSync,
|
|
mkdtempSync,
|
|
readFileSync,
|
|
rmSync,
|
|
writeFileSync,
|
|
} from "node:fs";
|
|
import { tmpdir } from "node:os";
|
|
import { join } from "node:path";
|
|
import { expect, test } from "vitest";
|
|
import { buildResolvedConfigLogEntry } from "#src/config-reporter";
|
|
import { createPermissionSystemLogger } from "#src/logging";
|
|
import type { ResolvedPolicyPaths } from "#src/permission-manager";
|
|
import { PermissionManager } from "#src/permission-manager";
|
|
|
|
test("buildResolvedConfigLogEntry reports global and agent policy paths", () => {
|
|
const policyPaths: ResolvedPolicyPaths = {
|
|
globalConfigPath: "/bundle/config/pi-permission-policy.jsonc",
|
|
globalConfigExists: true,
|
|
agentsDir: "/home/user/.pi/agent/agents",
|
|
agentsDirExists: true,
|
|
projectAgentsDir: null,
|
|
projectAgentsDirExists: false,
|
|
};
|
|
|
|
const result = buildResolvedConfigLogEntry({ policyPaths });
|
|
|
|
expect(result).toEqual(policyPaths);
|
|
});
|
|
|
|
test("config.resolved entry appears in review log via logger", () => {
|
|
const tempDir = mkdtempSync(join(tmpdir(), "config-resolved-log-"));
|
|
try {
|
|
const logsDir = join(tempDir, "logs");
|
|
mkdirSync(logsDir, { recursive: true });
|
|
const reviewLogPath = join(logsDir, "review.jsonl");
|
|
const debugLogPath = join(logsDir, "debug.jsonl");
|
|
|
|
const globalConfigPath = join(tempDir, "pi-permissions.jsonc");
|
|
writeFileSync(globalConfigPath, "{}", "utf-8");
|
|
const agentsDir = join(tempDir, "agents");
|
|
|
|
const pm = new PermissionManager({
|
|
globalConfigPath,
|
|
agentsDir,
|
|
});
|
|
|
|
const logger = createPermissionSystemLogger({
|
|
getConfig: () => ({
|
|
debugLog: false,
|
|
permissionReviewLog: true,
|
|
yoloMode: false,
|
|
doublePressToConfirm: true,
|
|
}),
|
|
debugLogPath,
|
|
reviewLogPath,
|
|
ensureLogsDirectory: () => undefined,
|
|
});
|
|
|
|
const policyPaths = pm.getResolvedPolicyPaths();
|
|
const entry = buildResolvedConfigLogEntry({ policyPaths });
|
|
logger.review(
|
|
"config.resolved",
|
|
entry as unknown as Record<string, unknown>,
|
|
);
|
|
|
|
const logContent = readFileSync(reviewLogPath, "utf-8").trim();
|
|
const parsed = JSON.parse(logContent) as Record<string, unknown>;
|
|
|
|
expect(parsed.event).toBe("config.resolved");
|
|
expect(parsed.globalConfigPath).toBe(globalConfigPath);
|
|
expect(parsed.globalConfigExists).toBe(true);
|
|
expect(parsed.agentsDir).toBe(agentsDir);
|
|
expect(parsed.agentsDirExists).toBe(false);
|
|
expect(parsed.projectAgentsDir).toBe(null);
|
|
expect(parsed.projectAgentsDirExists).toBe(false);
|
|
} finally {
|
|
rmSync(tempDir, { recursive: true, force: true });
|
|
}
|
|
});
|