mirror of
https://bitbucket.org/siakitem/my-pi.git
synced 2026-10-26 18:55:22 +00:00
配置统一:权限策略、硬防御、Tool Search、提示词封面以及新迁入的 RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展 直接读取已安装组合包内的 config/,pi install / pi update 即完成部署; 删除 rebuild-bundle-config.mjs 与 bundle-manifest.json,my-pi/ 只保留 日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本 reset 回发布版本。AGENTS.md 新增「组合包配置原则」。 脚本整合:search_config.sh / ssh_config.sh 合并为 configure.sh search|ssh;install.sh / update.sh 共享函数抽到 scripts/lib.sh,远程 安装器改为先下载到临时文件再执行,下载失败可被检测。 权限:hard-guards 新增 protectedWrites,写入 Pi 凭据/设置、已安装 组合包与扩展目录、pi-ssh 凭据库时一律人工确认(跳过 AutoReview、 yolo 与 Session grant,无 UI 时拒绝);放行 ls、LSP 查询、ctx 只读、 web_search、Chrome 只读与 git 只读命令,skill_manage 改为 ask。 Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
117 lines
4.0 KiB
TypeScript
117 lines
4.0 KiB
TypeScript
import { readFileSync } from "node:fs";
|
|
import { join } from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
|
|
const TOOL_SEARCH_DIR = join("my-pi", "tool-search");
|
|
|
|
/**
|
|
* Bundle-level `config/` is the single source of truth: the extension reads
|
|
* `config/tool-search.json` from inside the installed bundle (resolved
|
|
* relative to this source file), never deployed to or migrated from the
|
|
* agent directory.
|
|
*/
|
|
export function getToolSearchConfigPath(): string {
|
|
const override = process.env.PI_TOOL_SEARCH_CONFIG_PATH;
|
|
if (override) return override;
|
|
return fileURLToPath(new URL("../../config/tool-search.json", import.meta.url));
|
|
}
|
|
|
|
/** Disposable catalog cache under the agent dir's `my-pi/tool-search/` tree. */
|
|
export function getToolSearchCatalogPath(agentDir: string): string {
|
|
return join(agentDir, TOOL_SEARCH_DIR, "catalog-v1.json");
|
|
}
|
|
|
|
export const BUNDLE_TOOL_SEARCH_DEFAULTS = {
|
|
alwaysEnabled: [
|
|
"codegraph_explore",
|
|
"lsp_diagnostics",
|
|
"ctx_execute",
|
|
"ctx_execute_file",
|
|
"ctx_batch_execute",
|
|
"memory_search",
|
|
"session_search",
|
|
"memory_add",
|
|
"memory_replace",
|
|
"memory_remove",
|
|
"skill_manage",
|
|
"context_tree_query",
|
|
],
|
|
showToolSearchFooterStatus: false,
|
|
maxActiveGroups: 5,
|
|
maxToolsPerGroup: 8,
|
|
maxDynamicTools: 28,
|
|
groupOverrides: {},
|
|
} as const;
|
|
|
|
export interface ToolSearchConfig {
|
|
alwaysEnabled: string[];
|
|
showToolSearchFooterStatus: boolean;
|
|
maxActiveGroups: number;
|
|
maxToolsPerGroup: number;
|
|
maxDynamicTools: number;
|
|
groupOverrides: Record<string, string[]>;
|
|
}
|
|
|
|
function isObject(value: unknown): value is Record<string, unknown> {
|
|
return value !== null && typeof value === "object" && !Array.isArray(value);
|
|
}
|
|
|
|
function positiveInteger(value: unknown, fallback: number): number {
|
|
return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : fallback;
|
|
}
|
|
|
|
function stringList(value: unknown): string[] {
|
|
if (!Array.isArray(value)) return [];
|
|
return [...new Set(value.filter((item): item is string => typeof item === "string" && item.length > 0))];
|
|
}
|
|
|
|
function readGroupOverrides(value: unknown): Record<string, string[]> {
|
|
if (!isObject(value)) return {};
|
|
const overrides: Record<string, string[]> = {};
|
|
for (const [groupId, names] of Object.entries(value)) {
|
|
const tools = stringList(names);
|
|
if (groupId.trim() && tools.length > 0) overrides[groupId] = tools;
|
|
}
|
|
return overrides;
|
|
}
|
|
|
|
export function bundleFallbackConfig(): ToolSearchConfig {
|
|
return {
|
|
alwaysEnabled: [...BUNDLE_TOOL_SEARCH_DEFAULTS.alwaysEnabled],
|
|
showToolSearchFooterStatus: BUNDLE_TOOL_SEARCH_DEFAULTS.showToolSearchFooterStatus,
|
|
maxActiveGroups: BUNDLE_TOOL_SEARCH_DEFAULTS.maxActiveGroups,
|
|
maxToolsPerGroup: BUNDLE_TOOL_SEARCH_DEFAULTS.maxToolsPerGroup,
|
|
maxDynamicTools: BUNDLE_TOOL_SEARCH_DEFAULTS.maxDynamicTools,
|
|
groupOverrides: {},
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Read the Tool Search config. Defaults to the bundle-level
|
|
* `config/tool-search.json`; tests inject an explicit temp path. A missing,
|
|
* unreadable, or non-object file falls back to the bundle defaults.
|
|
*/
|
|
export function readToolSearchConfig(
|
|
configPath: string = getToolSearchConfigPath(),
|
|
): ToolSearchConfig {
|
|
const fallback = bundleFallbackConfig();
|
|
try {
|
|
const parsed: unknown = JSON.parse(readFileSync(configPath, "utf8"));
|
|
if (!isObject(parsed)) return fallback;
|
|
const config = parsed;
|
|
return {
|
|
alwaysEnabled: Array.isArray(config.alwaysEnabled) ? stringList(config.alwaysEnabled) : fallback.alwaysEnabled,
|
|
showToolSearchFooterStatus:
|
|
typeof config.showToolSearchFooterStatus === "boolean"
|
|
? config.showToolSearchFooterStatus
|
|
: fallback.showToolSearchFooterStatus,
|
|
maxActiveGroups: positiveInteger(config.maxActiveGroups, fallback.maxActiveGroups),
|
|
maxToolsPerGroup: positiveInteger(config.maxToolsPerGroup, fallback.maxToolsPerGroup),
|
|
maxDynamicTools: positiveInteger(config.maxDynamicTools, fallback.maxDynamicTools),
|
|
groupOverrides: readGroupOverrides(config.groupOverrides),
|
|
};
|
|
} catch {
|
|
return fallback;
|
|
}
|
|
}
|