forked from WHC/Hermit
- TUI: centered home screen with logo, boxed input with mode line, sidebar (>=120 cols), Ctrl+P palette, Tab Build/Plan, Shift+Tab approval cycle, mouse (cards, cursor, pickers, wheel), /sidebar /mouse /approval - /models probing: key check on entry (401 re-asks), API models in /model - Shell sandbox in C: Linux Landlock (writes limited to workspace/tmp, ABI>=4 blocks TCP), macOS sandbox_init, rules fallback elsewhere - Approval modes ask/auto/yolo (default auto); read-only command whitelist; ask to rerun outside the sandbox when a command looks blocked - Upgradable bootstrap scripts (git pull --ff-only, rebuild, reinstall) and cst-agent-update; cst-agent --version - tests: test_sandbox, test_models
149 lines
4.3 KiB
C
149 lines
4.3 KiB
C
#include "cst_agent.h"
|
|
#include "os_compat.h"
|
|
|
|
#include "cJSON.h"
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
static int settings_path(char *out, size_t n) {
|
|
char dir[OS_PATH_MAX];
|
|
if (os_config_dir(dir, sizeof(dir)) != 0)
|
|
return -1;
|
|
return os_path_join(out, n, dir, "settings.json");
|
|
}
|
|
|
|
static void copy_str(char *dst, size_t n, const cJSON *v) {
|
|
if (cJSON_IsString(v) && v->valuestring)
|
|
snprintf(dst, n, "%s", v->valuestring);
|
|
}
|
|
|
|
int cst_settings_load(cst_settings_t *s) {
|
|
memset(s, 0, sizeof(*s));
|
|
char path[OS_PATH_MAX];
|
|
if (settings_path(path, sizeof(path)) != 0)
|
|
return -1;
|
|
FILE *fp = fopen(path, "rb");
|
|
if (!fp)
|
|
return -1;
|
|
char buf[16384];
|
|
size_t n = fread(buf, 1, sizeof(buf) - 1, fp);
|
|
fclose(fp);
|
|
buf[n] = 0;
|
|
cJSON *root = cJSON_Parse(buf);
|
|
if (!cJSON_IsObject(root)) {
|
|
cJSON_Delete(root);
|
|
return -1;
|
|
}
|
|
copy_str(s->provider, sizeof(s->provider),
|
|
cJSON_GetObjectItemCaseSensitive(root, "provider"));
|
|
copy_str(s->effort, sizeof(s->effort),
|
|
cJSON_GetObjectItemCaseSensitive(root, "effort"));
|
|
copy_str(s->approval, sizeof(s->approval),
|
|
cJSON_GetObjectItemCaseSensitive(root, "approval"));
|
|
const cJSON *models = cJSON_GetObjectItemCaseSensitive(root, "models");
|
|
const cJSON *m;
|
|
cJSON_ArrayForEach(m, models) {
|
|
if (s->nmodels >= CST_SETTINGS_MAX_MODELS)
|
|
break;
|
|
if (!m->string || !cJSON_IsString(m))
|
|
continue;
|
|
snprintf(s->models[s->nmodels].provider,
|
|
sizeof(s->models[s->nmodels].provider), "%s", m->string);
|
|
copy_str(s->models[s->nmodels].model, sizeof(s->models[s->nmodels].model),
|
|
m);
|
|
s->nmodels++;
|
|
}
|
|
cJSON_Delete(root);
|
|
return 0;
|
|
}
|
|
|
|
int cst_settings_save(const cst_settings_t *s) {
|
|
char dir[OS_PATH_MAX], path[OS_PATH_MAX], tmp[OS_PATH_MAX + 8];
|
|
if (os_config_dir(dir, sizeof(dir)) != 0 || os_mkdir_p(dir, 0700) != 0 ||
|
|
settings_path(path, sizeof(path)) != 0)
|
|
return -1;
|
|
if (snprintf(tmp, sizeof(tmp), "%s.tmp", path) >= (int)sizeof(tmp))
|
|
return -1;
|
|
cJSON *root = cJSON_CreateObject();
|
|
if (s->provider[0])
|
|
cJSON_AddStringToObject(root, "provider", s->provider);
|
|
if (s->effort[0])
|
|
cJSON_AddStringToObject(root, "effort", s->effort);
|
|
if (s->approval[0])
|
|
cJSON_AddStringToObject(root, "approval", s->approval);
|
|
cJSON *models = cJSON_AddObjectToObject(root, "models");
|
|
for (int i = 0; i < s->nmodels; i++)
|
|
cJSON_AddStringToObject(models, s->models[i].provider, s->models[i].model);
|
|
char *text = cJSON_Print(root);
|
|
cJSON_Delete(root);
|
|
if (!text)
|
|
return -1;
|
|
FILE *fp = fopen(tmp, "wb");
|
|
int rc = -1;
|
|
if (fp) {
|
|
int ok = fputs(text, fp) >= 0 && fputc('\n', fp) != EOF;
|
|
if (fclose(fp) == 0 && ok) {
|
|
#ifdef _WIN32
|
|
remove(path);
|
|
#endif
|
|
rc = rename(tmp, path) == 0 ? 0 : -1;
|
|
}
|
|
if (rc != 0)
|
|
remove(tmp);
|
|
}
|
|
cJSON_free(text);
|
|
return rc;
|
|
}
|
|
|
|
static const char *const APPROVAL_NAMES[] = {"ask", "auto", "yolo"};
|
|
|
|
const char *cst_approval_name(int a) {
|
|
return a >= 0 && a <= CST_APPROVAL_YOLO ? APPROVAL_NAMES[a] : "auto";
|
|
}
|
|
|
|
int cst_approval_parse(const char *s, int *out) {
|
|
for (int i = 0; s && i <= CST_APPROVAL_YOLO; i++) {
|
|
if (strcmp(s, APPROVAL_NAMES[i]) == 0) {
|
|
*out = i;
|
|
return 0;
|
|
}
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
const char *cst_settings_model(const cst_settings_t *s, const char *provider) {
|
|
for (int i = 0; provider && i < s->nmodels; i++) {
|
|
if (strcmp(s->models[i].provider, provider) == 0 && s->models[i].model[0])
|
|
return s->models[i].model;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
int cst_settings_remember(const cst_agent_config_t *cfg) {
|
|
cst_settings_t s;
|
|
cst_settings_load(&s);
|
|
snprintf(s.provider, sizeof(s.provider), "%s", cfg->provider);
|
|
snprintf(s.effort, sizeof(s.effort), "%s", cfg->effort);
|
|
int i = 0;
|
|
while (i < s.nmodels && strcmp(s.models[i].provider, cfg->provider) != 0)
|
|
i++;
|
|
if (i == s.nmodels) {
|
|
if (s.nmodels >= CST_SETTINGS_MAX_MODELS)
|
|
return -1;
|
|
s.nmodels++;
|
|
}
|
|
snprintf(s.models[i].provider, sizeof(s.models[i].provider), "%s",
|
|
cfg->provider);
|
|
snprintf(s.models[i].model, sizeof(s.models[i].model), "%s", cfg->model);
|
|
return cst_settings_save(&s);
|
|
}
|
|
|
|
int cst_settings_remember_approval(int approval) {
|
|
cst_settings_t s;
|
|
cst_settings_load(&s);
|
|
snprintf(s.approval, sizeof(s.approval), "%s", cst_approval_name(approval));
|
|
return cst_settings_save(&s);
|
|
}
|