Files
CST-agent/src/settings.c
T
WHC ef63f6d612 OpenCode-style TUI, model probing, sandboxed auto approval
- TUI: centered home screen with logo, boxed input with mode line, sidebar
  (>=120 cols), Ctrl+P palette, Tab Build/Plan, Shift+Tab approval cycle,
  mouse (cards, cursor, pickers, wheel), /sidebar /mouse /approval
- /models probing: key check on entry (401 re-asks), API models in /model
- Shell sandbox in C: Linux Landlock (writes limited to workspace/tmp,
  ABI>=4 blocks TCP), macOS sandbox_init, rules fallback elsewhere
- Approval modes ask/auto/yolo (default auto); read-only command whitelist;
  ask to rerun outside the sandbox when a command looks blocked
- Upgradable bootstrap scripts (git pull --ff-only, rebuild, reinstall) and
  cst-agent-update; cst-agent --version
- tests: test_sandbox, test_models
2026-10-05 12:34:46 +08:00

149 lines
4.3 KiB
C

#include "cst_agent.h"
#include "os_compat.h"
#include "cJSON.h"
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
static int settings_path(char *out, size_t n) {
char dir[OS_PATH_MAX];
if (os_config_dir(dir, sizeof(dir)) != 0)
return -1;
return os_path_join(out, n, dir, "settings.json");
}
static void copy_str(char *dst, size_t n, const cJSON *v) {
if (cJSON_IsString(v) && v->valuestring)
snprintf(dst, n, "%s", v->valuestring);
}
int cst_settings_load(cst_settings_t *s) {
memset(s, 0, sizeof(*s));
char path[OS_PATH_MAX];
if (settings_path(path, sizeof(path)) != 0)
return -1;
FILE *fp = fopen(path, "rb");
if (!fp)
return -1;
char buf[16384];
size_t n = fread(buf, 1, sizeof(buf) - 1, fp);
fclose(fp);
buf[n] = 0;
cJSON *root = cJSON_Parse(buf);
if (!cJSON_IsObject(root)) {
cJSON_Delete(root);
return -1;
}
copy_str(s->provider, sizeof(s->provider),
cJSON_GetObjectItemCaseSensitive(root, "provider"));
copy_str(s->effort, sizeof(s->effort),
cJSON_GetObjectItemCaseSensitive(root, "effort"));
copy_str(s->approval, sizeof(s->approval),
cJSON_GetObjectItemCaseSensitive(root, "approval"));
const cJSON *models = cJSON_GetObjectItemCaseSensitive(root, "models");
const cJSON *m;
cJSON_ArrayForEach(m, models) {
if (s->nmodels >= CST_SETTINGS_MAX_MODELS)
break;
if (!m->string || !cJSON_IsString(m))
continue;
snprintf(s->models[s->nmodels].provider,
sizeof(s->models[s->nmodels].provider), "%s", m->string);
copy_str(s->models[s->nmodels].model, sizeof(s->models[s->nmodels].model),
m);
s->nmodels++;
}
cJSON_Delete(root);
return 0;
}
int cst_settings_save(const cst_settings_t *s) {
char dir[OS_PATH_MAX], path[OS_PATH_MAX], tmp[OS_PATH_MAX + 8];
if (os_config_dir(dir, sizeof(dir)) != 0 || os_mkdir_p(dir, 0700) != 0 ||
settings_path(path, sizeof(path)) != 0)
return -1;
if (snprintf(tmp, sizeof(tmp), "%s.tmp", path) >= (int)sizeof(tmp))
return -1;
cJSON *root = cJSON_CreateObject();
if (s->provider[0])
cJSON_AddStringToObject(root, "provider", s->provider);
if (s->effort[0])
cJSON_AddStringToObject(root, "effort", s->effort);
if (s->approval[0])
cJSON_AddStringToObject(root, "approval", s->approval);
cJSON *models = cJSON_AddObjectToObject(root, "models");
for (int i = 0; i < s->nmodels; i++)
cJSON_AddStringToObject(models, s->models[i].provider, s->models[i].model);
char *text = cJSON_Print(root);
cJSON_Delete(root);
if (!text)
return -1;
FILE *fp = fopen(tmp, "wb");
int rc = -1;
if (fp) {
int ok = fputs(text, fp) >= 0 && fputc('\n', fp) != EOF;
if (fclose(fp) == 0 && ok) {
#ifdef _WIN32
remove(path);
#endif
rc = rename(tmp, path) == 0 ? 0 : -1;
}
if (rc != 0)
remove(tmp);
}
cJSON_free(text);
return rc;
}
static const char *const APPROVAL_NAMES[] = {"ask", "auto", "yolo"};
const char *cst_approval_name(int a) {
return a >= 0 && a <= CST_APPROVAL_YOLO ? APPROVAL_NAMES[a] : "auto";
}
int cst_approval_parse(const char *s, int *out) {
for (int i = 0; s && i <= CST_APPROVAL_YOLO; i++) {
if (strcmp(s, APPROVAL_NAMES[i]) == 0) {
*out = i;
return 0;
}
}
return -1;
}
const char *cst_settings_model(const cst_settings_t *s, const char *provider) {
for (int i = 0; provider && i < s->nmodels; i++) {
if (strcmp(s->models[i].provider, provider) == 0 && s->models[i].model[0])
return s->models[i].model;
}
return NULL;
}
int cst_settings_remember(const cst_agent_config_t *cfg) {
cst_settings_t s;
cst_settings_load(&s);
snprintf(s.provider, sizeof(s.provider), "%s", cfg->provider);
snprintf(s.effort, sizeof(s.effort), "%s", cfg->effort);
int i = 0;
while (i < s.nmodels && strcmp(s.models[i].provider, cfg->provider) != 0)
i++;
if (i == s.nmodels) {
if (s.nmodels >= CST_SETTINGS_MAX_MODELS)
return -1;
s.nmodels++;
}
snprintf(s.models[i].provider, sizeof(s.models[i].provider), "%s",
cfg->provider);
snprintf(s.models[i].model, sizeof(s.models[i].model), "%s", cfg->model);
return cst_settings_save(&s);
}
int cst_settings_remember_approval(int approval) {
cst_settings_t s;
cst_settings_load(&s);
snprintf(s.approval, sizeof(s.approval), "%s", cst_approval_name(approval));
return cst_settings_save(&s);
}