Lines 1-71javascript
1import{createRequire as yq}from"node:module";var wq=Object.create;var{getPrototypeOf:Tq,defineProperty:_5,getOwnPropertyNames:Iq}=Object;var kq=Object.prototype.hasOwnProperty;var Rq=($,Z,J)=>{J=$!=null?wq(Tq($)):{};let G=Z||!$||!$.__esModule?_5(J,"default",{value:$,enumerable:!0}):J;for(let z of Iq($))if(!kq.call(G,z))_5(G,z,{get:()=>$[z],enumerable:!0});return G};var H0=($,Z)=>{for(var J in Z)_5($,J,{get:Z[J],enumerable:!0,configurable:!0,set:(G)=>Z[J]=()=>G})};var b=($,Z)=>()=>($&&(Z=$($=0)),Z);var Sq=yq(import.meta.url);import{writeFile as Eq,rename as vq,unlink as gq}from"fs/promises";imp ...
2 `),J=eG().map((z)=>`(subpath ${oG(D0.resolve(z))})`).join(`
3 `),G=$.network==="deny"?"(deny network*)":"";return`(version 1)
6(allow file-write-data (literal "/dev/null"))
14`}function zz(){if(f2("/usr/bin/bwrap"))return"/usr/bin/bwrap";return"/usr/local/bin/bwrap"}function Yz($,Z,J){let G=["--die-with-parent","--ro-bind","/","/","--dev","/dev","--proc","/proc"],z=new Set;for(let Y of e2($)){let Q=process.platform==="win32"?Y.toLowerCase():Y;if(z.has(Q))continue;if(z.add(Q),f2(Y))G.push("--bind",Y,Y)}if($.network==="deny")G.push("--unshare-net");return G.push("--chdir",Z,"/bin/sh","-c",J),G}function $6($){if($==="off"||I5()!=="none")return null;return $==="strict"?"⚠ Command-level sandboxing isn't supported on this platform (requires macOS sandbox-exec or Linux bw ...
15${rG}`:dG,P}function Z6($){return $==="off"?"off":$==="strict"?"strict":"workspace"}function Qz($){return $===
16`)){let K=v0(Q,G),X=K.length===0?[""]:K;for(let P of X)Y.push(Y.length===0?`${$}${P}`:`${z}${P}`)}return Y.length===0?[$]:Y}class x8{buffer="";maxWidth;constructor($){this.maxWidth=$??Y1()}write($){if(!$)return"";this.buffer+=$;let Z="";while(!0){let J=this.buffer.indexOf(`
17`);if(J===-1)break;let G=this.buffer.slice(0,J);this.buffer=this.buffer.slice(J+1),Z+=w4(G,this.maxWidth).join(`
19`}return Z}flush(){if(!this.buffer)return"";let $=w4(this.buffer,this.maxWidth).join(`
20`);return this.buffer="",$}}function K6($){let Z="";for(let J=0;J<$.length;J++){let G=$[J];if(G==="\\"&&J+1<$.length){let z=$[J+1];if(z==="n"){Z+=`
21`,J++;continue}if(z==="t"){Z+="\t",J++;continue}if(z==="r"){if($[J+2]==="\\"&&$[J+3]==="n"){Z+=`
22`,J+=3;continue}Z+="\r",J++;continue}}if(G==="/"&&$[J+1]==="n"&&BU.test($[J+2]??"")){Z+=`
23`,J++;continue}Z+=G}return Z}function Lz($,Z=8){let J=Z<1?8:Z,G=0,z="";for(let{text:Y,width:Q}of o0($)){if(Y===`
24`){z+=Y,G=0;continue}if(Y==="\t"){let K=J-G%J,X=K===0?J:K;z+=" ".repeat(X),G+=X;continue}z+=Y,G+=Q}return z}var BU,g5="\x1B[0m",NU=80,VU=40,_U=2;var X6=b(()=>{R$();BU=/[\u3400-\u9fff\uf900-\ufaff]/});function bz(){if("NO_COLOR"in process.env)return{dim:"",reset:""};return{dim:"\x1B[90m",reset:"\x1B[0m"}}function Az($){if(!$)return $;let{dim:Z,reset:J}=bz(),G=$.endsWith(`
25`),z=G?$.slice(0,-1).split(`
27`),Y=Z?`${J}${Z}`:"",Q=z.map((K)=>{let X=Y?K.replace(/\x1b\[0m/g,Y):K;return`${Z}${X}${J}`}).join(`
29`:Q}class x5{stdout;stderr;atLineStart=!0;lastBlock="none";thinkingOpen=!1;thinkingWrap=new x8;assistantWrap=new x8;constructor($=process.stdout,Z=process.stderr){this.stdout=$;this.stderr=Z}emit($,Z){if(!$)return;Z.write($),this.atLineStart=$.endsWith(`
30`)}ensureLine($=this.stdout){if(!this.atLineStart)this.emit(`
31`,$)}gapBefore($){if(this.ensureLine($==="thinking"?this.stderr:this.stdout),this.lastBlock==="none"||this.lastBlock==="meta")return;if(this.lastBlock===$)return;this.emit(`
32`,$==="thinking"?this.stderr:this.stdout)}closeThinking(){if(!this.thinkingOpen)return;let $=this.thinkingWrap.flush();if($)this.emit(Az($),this.stderr);this.ensureLine(this.stderr),this.thinkingOpen=!1}flushAssistant(){let $=this.assistantWrap.flush();if($)this.emit($,this.stdout);this.ensureLine(this.stdout)}noteMeta(){this.closeThinking(),this.flushAssistant(),this.ensureLine(),this.lastBlock="meta"}noteUser(){this.closeThinking(),this.flushAssistant(),this.ensureLine(),this.lastBlock="user"}beginTool(){this.closeThinking(),this.flushAssistant(),this.gapBefore("tool"),this.lastBlock="tool"} ...
33`,this.stderr),this.thinkingOpen=!0,this.lastBlock="thinking",Z=Z.replace(/^\n+/,"")}if(!Z)return;let
34`,{flag:"a"})}catch{}}function kU($,Z){if(P6.push({level:$,ts:`${Date.now()}000000`,line:Z}),P6.length>=IU){Oz();return}if(!U2)U2=setTimeout(Oz,TU),U2.unref?.()}function Oz(){if(U2)clearTimeout(U2),U2=null;if(P6.length===0)return;let $=P6.sort((G,z)=>G.ts<z.ts?-1:G.ts>z.ts?1:0);P6=[];let Z=new Map;for(let G of $){let z=Z.get(G.level)??[];z.push([G.ts,G.line]),Z.set(G.level,z)}let J=[...Z].map(([G,z])=>({stream:{job:"min-agent",level:G},values:z}));fetch(CU,{method:"POST",headers:{"Content-Type":"application/json","X-Scope-OrgID":wU},body:JSON.stringify({streams:J})}).then(()=>{return},()=>{ret ...
35`),J=[],G=null;for(let z of Z){if(G){if(z.trim()===G)G=null;continue}let Y=z.match(/<<-?\s*(['"]?)([\w-]+)\1/);if(Y?.[2])G=Y[2],J.push(z.replace(Y[0],""));else J.push(z)}return J.join(`
36`)}function Ez($){return nU($).replace(/'(?:[^'\\\n]|\\.)*'?/g," ").replace(/"(?:[^"\\\n]|\\.)*"?/g," ")}function vz($){return $.split(/&&|\|\||[;|&]/).map((Z)=>Z.trim()).filter((Z)=>Z.length>0)}function cU($){let Z=!1;for(let J of $){if(!Z&&J==="--"){Z=!0;continue}if(!Z&&J.startsWith("-"))continue;return!0}return!1}function gz($){let Z=$.match(/^\s*(?:sudo\s+)?rm\s+(.+)$/);if(!Z)return!1;return cU(Z[1].split(/\s+/))}function xz($){let Z=$.match(/^\s*(?:sudo\s+)?truncate\s+(.+)$/);if(!Z)return!1;return Z[1].split(/\s+/).some((J)=>/^-[a-z]*s/.test(J))}function mU($){let Z=$.split(/\s+/),J=Z[0]= ...
37\x1B[33m❓ ${G} (no interactive terminal — skipped)\x1B[0m`),null;if(console.log(),console.log(`\x1B[33m❓ ${G}\x1B[0m`),Y){for(let K=0;K<Y.length;K++)console.log(`\x1B[90m ${K+1}. ${Y[K]}\x1B[0m`);if(J)console.log("\x1B[90m (可勾选多项；最后一项可自己输入)\x1B[0m")}return new Promise((K)=>{let X=EU.createInterface({input:process.stdin,output:process.stdout});X.question("\x1B[36m → \x1B[0m",(P)=>{if(X.close(),!H6)process.stdin.pause();K(P.trim()||"(no answer)")})})}async function e1($,Z){let J=B6.getStore();if(J){if(J.autoApprove)return!0;if(J.onConfirm)return J.onConfirm(Z);return!1}if($&&q6.has($))retu ...
38\x1B[33m⚠ Rejected (no interactive terminal): ${Z}\x1B[0m`),!1;let G=await tU($,Z);if(G==="approved-always"&&$)q6.add($);return G!=="denied"}async function k4($){return e1(void 0,$)}function tU($,Z){return new Promise((J)=>{W6.push({message:Z,key:$,resolve:J}),uz()})}function uz(){if(m8||c8)return;c8=setTimeout(()=>{c8=null,aU()},iU),c8.unref?.()}async function aU(){if(m8)return;m8=!0;try{while(W6.length>0){let $=W6;W6=[];let Z=$.map((G)=>G.message),J=await sU(Z);for(let G of $)G.resolve(J)}}finally{if(m8=!1,W6.length>0)uz()}}async function sU($){if(o8)return o8(yz($));return eU(yz($))}functio ...
39 `)}`);return`${$.length} 个操作待确认（允许将全部执行，拒绝将全部取消）：
41`)}`}function eU($){H6?.pause(),h5(),process.stdout.write(`
42\x1B[90m┌─ 即将执行 ─────────────────────────────────\x1B[0m
43`);for(let Z of $.split(`
44`))process.stdout.write(`\x1B[90m│\x1B[0m ${Z}
45`);return process.stdout.write(`\x1B[90m└────────────────────────────────────────────\x1B[0m
46`),process.stdout.write(`
47`),new Promise((Z)=>{let J=process.stdin.isRaw,G=process.stdin.readableEncoding;if(process.stdin.isTTY)process.stdin.setRawMode(!0);process.stdin.resume(),process.stdin.setEncoding("utf8");let z=2,Y="",Q=!1,K=setTimeout(()=>{Q=!0},0);K.unref?.();let X=(U)=>{if(U==="A"||U==="D")z=Math.max(0,z-1);else if(U==="B"||U==="C")z=Math.min(2,z+1);else return;f()},P=["[y] 允许","[a] 总是允许","[N] 拒绝"],f=()=>{process.stdout.write("\r\x1B[K");let U=P.map((q,F)=>F===z?`\x1B[1;${F===2?31:32}m▸ ${q}\x1B[0m`:`\x1B[90m ${q}\x1B[0m`);process.stdout.write(U.join(" ")),process.stdout.write(" \x1B[90m←→ 选择 · Ente ...
49`),H6)H6.resume();else process.stdin.pause();Z(U)};f();let H=(U)=>{Y+=U;while(Y.length>0){if(Y[0]==="\x03"||Y[0]==="\x04"){Y="",W("denied"),G0("warn","interrupted at confirmation prompt — exiting 130"),process.exit(130);return}if(Y[0]==="\x1B"){if(Y[1]==="["){let F=Y.slice(2).search(/[A-Za-z~]/);if(F===-1)return;let M=Y[2+F];Y=Y.slice(3+F),X(M);continue}if(Y[1]==="O"){if(Y.length<3)return;let F=Y[2];Y=Y.slice(3),X(F);continue}if(Y.length===1){setTimeout(()=>{if(Y==="\x1B")Y="",W("denied")},50).unref?.();return}Y=Y.slice(1),W("denied");return}let q=Y[0];if(Y=Y.slice(1),q===
50`&&!Q)continue;if(q==="\r"||q===`
51`){if(!Q)continue;W(z===0?"approved":z===1?"approved-always":"denied");return}if(q==="y"||q==="Y"){W("approved");return}if(q==="a"||q==="A"){W("approved-always");return}if(q==="n"||q==="N"){W("denied");return}}};process.stdin.on("data",H)})}var Sz=!1,r5=!1,p8,B6,H6=null,o8=null,d5=null,q6,Rz,pU,oU,iU=20,W6,c8=null,m8=!1;var s0=b(()=>{d();Q6();n5();Q1();B6=new SU;q6=new Set;Rz=/(^|[;&|\s])>{1,2}(?!&)[ \t]*([^\s;&|]+)/g,pU=/(^|[;&|\s])>{1,2}(?!&)[ \t]*\S/,oU=[
52 → ${$.hint}`:`✖ ${$.message}`;return`✖ ${$ instanceof Error?$.message:String($)}`}function $7($){if($ instanceof l)return $.exitCode;return 2}var l;var Y$=b(()=>{l=class l extends Error{exitCode;hint;constructor($,Z){super($);this.name="CliError",this.exitCode=Z?.exitCode??1,this.hint=Z?.hint}}});import{Option as KC}from"commander";function Z7($,Z="global"){if($.project)return"project";if($.global)return"global";return Z}function nz($){let Z=k$($);if(!Z)throw K1(`Invalid --sandbox value: "${$}"`,"use one of: off, workspace, strict");return Z}function cz($){let Z=p$($);if(!Z)throw K1(`Invalid ...
CriticalHardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/cli.jsView on unpkg · L1 53`)}}}function $4(){try{let $=YM.join($3(),"package.json"),Z=JSON.parse(zM($,"utf-8"));return typeof Z.version==="string"&&Z.version.length>0?Z.version:"0.0.0"}catch{return"0.0.0"}}function tz($,Z){let J=$.split("-")[0].split(".").map(Number),G=Z.split("-")[0].split(".").map(Number);for(let z=0;z<Math.max(J.length,G.length);z++){let Y=J[z]??0,Q=G[z]??0,K=Number.isFinite(Y)?Y:0,X=Number.isFinite(Q)?Q:0;if(K!==X)return K-X}return 0}function HM($){if(typeof $!=="string"||!XM.test($))return null;return $}async function az($=fetch){let Z;try{Z=await $(KM,{signal:AbortSignal.timeout(PM),headers:{Acce ...
54`),images:J}}function JF($){if(Q$($))return $;if(typeof $!=="string"||!$.trim())return{};try{let Z=JSON.parse($);return Q$(Z)?Z:{value:Z}}catch{return{value:$}}}function GF($){if(typeof $==="string")return $;try{return JSON.stringify($??{})}catch{return"{}"}}function zF($){if(!Array.isArray($)||$.length===0)return;return $.map((Z)=>{let J=Q$(Z)?Z:{},G=Q$(J.function)?J.function:J;return{function:{name:typeof G.name==="string"?G.name:"",arguments:JF(G.arguments)}}})}function YF($){if(!Array.isArray($))return[];return $.map((Z)=>{let J=Q$(Z)?Z:{},{text:G,images:z}=ZF(J.content),Y={role:typeof J.r ...
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.jsView on unpkg · L40 HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli.jsView on unpkg · L40 HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
56`}function XF($){let Z=new TextDecoder,J=new TextEncoder,G=$.getReader(),z={sentRole:!1},Y="";return new ReadableStream({async pull(Q){for(;;){let{done:K,value:X}=await G.read();if(K){Y+=Z.decode();let H=Y.trim();if(H)try{let U=JSON.parse(H);if(Q$(U))Q.enqueue(J.encode(vY(SY(U,z))))}catch{}Q.enqueue(J.encode(`data: [DONE]
58`)),Q.close();return}Y+=Z.decode(X,{stream:!0});let P=Y.lastIndexOf(`
59`);if(P<0)continue;let f=Y.slice(0,P+1);Y=Y.slice(P+1);let W=[];for(let H of f.split(`
60`)){let U=H.trim();if(!U)continue;try{let q=JSON.parse(U);if(Q$(q))W.push(vY(SY(q,z)))}catch{}}if(W.length>0){Q.enqueue(J.encode(W.join("")));return}}},cancel(Q){return G.cancel(Q)}})}function PF($){let Z=new Headers($);return Z.set("content-type","application/json"),Z}function fF($){let Z=new Headers($);return Z.set("content-type","text/event-stream"),Z.delete("content-length"),Z}async function nY($,Z,J,G,z){let Y=aM(Z);if(!sM(Y))return $(Z,{...J,body:JSON.stringify(G)});let Q=typeof G.model==="string"?G.model:"",K=J4(Q,Y),X=KF(G,{numCtx:FY(Q,Y),think:MY(z,K?.thinking??null)}),P=await $(eM(Y) ...
61(${$.length-b7} older memories not shown — use memory_search to find them.)`:"";return[Z,...G,z].filter(Boolean).join(`
62`)}function T7($){if(!W1($))return"";let Z=L$("project"),J=L$("global");if(Z.length===0&&J.length===0)return"";let G=["## Memories","Background facts from previous conversations. Use them to personalize replies. They are not pending tasks and not a request to act.","Do not call APIs, run commands, or continue old work based on memories unless the current user message explicitly asks.","Do not use remembered credentials or API keys unless this message asks you to perform that action.","You can save new memories with the memory_save tool when the user tells you something worth remembering (prefe ...
63`)}function I7(){let $=L7({description:"Save a memory for future conversations. Use this when the user shares preferences, project conventions, important context, or asks you to remember something. Memories persist across sessions and are injected as background reference, not as work to resume. Do not store secrets, API keys, or passwords. Use scope project for this repository, global for all projects.",inputSchema:A7({type:"object",properties:{content:{type:"string",description:"The information to remember"},tags:{type:"array",items:{type:"string"},description:"Optional tags for categorizatio ...
64`)}}),J=L7({description:"Delete a memory by its number. Use memory_search first to find the index and scope.",inputSchema:A7({type:"object",properties:{index:{type:"number",description:"The memory number to delete (1-based)"},scope:{type:"string",enum:["global","project"],description:"Which store the number belongs to. Defaults to project when .min-agent exists, otherwise global. Project requires .min-agent/ in cwd (created by min-agent init)."}},required:["index"]}),execute:async({index:G,scope:z})=>{let Y=$Q(z);if(b2(G-1,Y))return`${Y} memory #${G} deleted.`;return`${Y} memory #${G} not foun ...
65`)});function uF($){return $==="cli"?"this run":$==="project"?"project":$==="global"?"global":"default"}function F3($){let{scope:Z,rest:J}=d$($.positionals),G=Z??$.scope??"global";if(J[0]==="--help"||J[0]==="-h")return{ok:!0,lines:[M3]};if(J.length===1){let X=_$(J[0]);if(!X)return{ok:!1,lines:[M3]};return q2(X,G),d8(X),{ok:!0,lines:[`✓ Permission set to ${A4(X)} (${H$(G)})`]}}if(J.length>1)return{ok:!1,lines:[M3]};if($.flagMode)return q2($.flagMode,G),d8($.flagMode),{ok:!0,lines:[`✓ Permission set to ${A4($.flagMode)} (${H$(G)})`]};let z=G6(),Y=M6(),Q=Y??z.permission,K=Y?"cli":z.source;return{ ...
66`)});function hF($){return $==="cli"?"this run":$==="project"?"project":$==="global"?"global":"default"}function N3($){let{scope:Z,rest:J}=d$($.positionals),G=Z??$.scope??"global";if(J[0]==="--help"||J[0]==="-h")return{ok:!0,lines:[B3]};if(J.length===1){let Q=b0(J[0]);if(!Q)return{ok:!1,lines:[B3]};return G4(Q,G),_2(Q),{ok:!0,lines:[`✓ Thinking set to ${D$(Q)} (${H$(G)})`]}}if(J.length>1)return{ok:!1,lines:[B3]};if($.flagEffort)return G4($.flagEffort,G),_2($.flagEffort),{ok:!0,lines:[`✓ Thinking set to ${D$($.flagEffort)} (${H$(G)})`]};let{thinking:z,source:Y}=P1();return{ok:!0,lines:[`Current ...
67`)});function _3($){let{scope:Z,rest:J}=d$($.positionals),G=Z??$.scope??"global";if(J[0]==="--help"||J[0]==="-h")return{ok:!0,lines:[V3]};if(J.length===1){let Q=n0(J[0]);if(!Q)return{ok:!1,lines:[V3]};return L2(Q,G),q3(Q),{ok:!0,lines:[`✓ Memory set to ${z4(Q)} (${H$(G)})`]}}if(J.length>1)return{ok:!1,lines:[V3]};if($.flagMode)return L2($.flagMode,G),q3($.flagMode),{ok:!0,lines:[`✓ Memory set to ${z4($.flagMode)} (${H$(G)})`]};let{memory:z,source:Y}=y4();return{ok:!0,lines:[`Current memory: ${z4(z)} (${b6(Y)})`,V3]}}var V3;var E7=b(()=>{w1();V3=["Usage: min-agent memory [on|off] [--project|--g ...
68`)});var fQ={};H0(fQ,{runWriteConfig:()=>nF});async function nF($){let Z=[],J=!0;if($.sandbox!==void 0||$.network!==void 0){let G=U3({positionals:[],flagMode:$.sandbox,flagNetwork:$.network,scope:$.scope});if(Z.push(...G.lines),!G.ok)J=!1}if($.permission!==void 0){let G=F3({positionals:[],flagMode:$.permission,scope:$.scope});if(Z.push(...G.lines),!G.ok)J=!1}if($.think!==void 0){let G=N3({positionals:[],flagEffort:$.think,scope:$.scope});if(Z.push(...G.lines),!G.ok)J=!1}if($.memory!==void 0){let G=_3({positionals:[],flagMode:$.memory,scope:$.scope});if(Z.push(...G.lines),!G.ok)J=!1}if(console. ...
69`)),!J)process.exitCode=1}var WQ=b(()=>{R7();y7();S7();E7()});function j3($,Z,J){let G=$==="openai"?"openai":$==="ollama"?"ollama":cF(Z)??"provider";return mF(G,J)}function D3($){let Z=$.trim();if(!Z||Z.includes("/")||Z.includes(":"))return"名称不能为空，且不能包含 / 或 :。";return null}function v7($){if($.length<4)return"****";return`…${$.slice(-4)}`}function HQ($,Z){let J=$.trim().toLowerCase();if(!J)return[...Z];return Z.filter((G)=>G.toLowerCase().includes(J))}function L3($,Z,J){let G=D3(Z.name);if(G)return{error:G};let z=Z.name.trim(),Y=[...$.providers??[]],Q=Y.findIndex((X)=>X.name===z);if(Q>=0&&!J.ov ...
70`)?1:0);if(W>0)X+=`\x1B[${W}A\x1B[${P.column}G`,Z=W}let f=typeof G==="string"?X:Buffer.from(X,z||"utf-8");return $.write(f,z,Y)};return new Proxy($,{get(G
71`);for(let Q=0;Q<Y.length;Q++){for(let K of v0(Y[Q],Z,J))
Long lines were clipped for display.