875c7f9b91
- Add full Telegram bot functionality with Z.AI API integration
- Implement 4 tools: Bash, FileEdit, WebSearch, Git
- Add 3 agents: Code Reviewer, Architect, DevOps Engineer
- Add 6 skills for common coding tasks
- Add systemd service file for 24/7 operation
- Add nginx configuration for HTTPS webhook
- Add comprehensive documentation
- Implement WebSocket server for real-time updates
- Add logging system with Winston
- Add environment validation
🤖 zCode CLI X - Agentic coder with Z.AI + Telegram integration
40 lines
1.6 KiB
TypeScript
40 lines
1.6 KiB
TypeScript
import type { FsReadRestrictionConfig, FsWriteRestrictionConfig } from './sandbox-schemas.js';
|
|
import type { IgnoreViolationsConfig } from './sandbox-config.js';
|
|
export interface MacOSSandboxParams {
|
|
command: string;
|
|
needsNetworkRestriction: boolean;
|
|
httpProxyPort?: number;
|
|
socksProxyPort?: number;
|
|
allowUnixSockets?: string[];
|
|
allowAllUnixSockets?: boolean;
|
|
allowLocalBinding?: boolean;
|
|
readConfig: FsReadRestrictionConfig | undefined;
|
|
writeConfig: FsWriteRestrictionConfig | undefined;
|
|
ignoreViolations?: IgnoreViolationsConfig | undefined;
|
|
allowPty?: boolean;
|
|
allowGitConfig?: boolean;
|
|
enableWeakerNetworkIsolation?: boolean;
|
|
binShell?: string;
|
|
}
|
|
/**
|
|
* Get mandatory deny patterns as glob patterns (no filesystem scanning).
|
|
* macOS sandbox profile supports regex/glob matching directly via globToRegex().
|
|
*/
|
|
export declare function macGetMandatoryDenyPatterns(allowGitConfig?: boolean): string[];
|
|
export interface SandboxViolationEvent {
|
|
line: string;
|
|
command?: string;
|
|
encodedCommand?: string;
|
|
timestamp: Date;
|
|
}
|
|
export type SandboxViolationCallback = (violation: SandboxViolationEvent) => void;
|
|
/**
|
|
* Wrap command with macOS sandbox
|
|
*/
|
|
export declare function wrapCommandWithSandboxMacOS(params: MacOSSandboxParams): string;
|
|
/**
|
|
* Start monitoring macOS system logs for sandbox violations
|
|
* Look for sandbox-related kernel deny events ending in {logTag}
|
|
*/
|
|
export declare function startMacOSSandboxLogMonitor(callback: SandboxViolationCallback, ignoreViolations?: IgnoreViolationsConfig): () => void;
|
|
//# sourceMappingURL=macos-sandbox-utils.d.ts.map
|