o
�~i*@ � @ s d Z ddlZddlZddlmZ ddlmZ ddlmZ ddl Z ddl
m Z m Z G dd� de
e�ZG d d
� d
e �ZG d d � d e �Zd
efdd�Zd
ee fdd�Zd
ee fdd�Zd dee d
efdd�Zd dedee d
dfdd�Zd dee d
efdd�ZdS ) z/Configuration management for Host Terminal MCP.� N)�Enum)�Path)�Optional)� BaseModel�Fieldc @ s e Zd ZdZdZdZdZdS )�PermissionModez'Permission modes for command execution.� allowlist�ask� allow_allN)�__name__�
__module__� __qualname__�__doc__� ALLOWLIST�ASK� ALLOW_ALL� r r � src/host_terminal_mcp/config.pyr
s
r c @ s^ e Zd ZU dZedd�Zeed< eddd�Zeed< ed d
d�Z e
ed < d ed
e
fdd�Z dS )�CommandPatternz A pattern for matching commands.z%Regex pattern or exact command prefix)� description�pattern� zHuman-readable description��defaultr r FzWhether pattern is a regex�is_regex�command�returnc C sH | j rz
tt�| j|��W S tjy Y dS w |�| j�p#|| jkS )z(Check if a command matches this pattern.F)r �bool�re�matchr �error�
startswith��selfr r r r �matches s �zCommandPattern.matchesN) r r r
r r r �str�__annotations__r r r r$ r r r r r s
r c @ s e Zd ZU dZeejdd�Zeed< ee dd�Z
e e ed< ee dd�Z e e ed < ed
d � d d�Z
e e ed
< eddd�Zeed< eddd�Zeed< eddd�Zeed< edd � dd�Ze e ed< ee dd�Ze e ed< d ed eeef fd d �Zd ed d fd!d"�Zd S )#�Configz$Configuration for Host Terminal MCP.z,How to handle commands not in the allow listr �permission_modez List of allowed command patterns)�default_factoryr �allowed_commandsz@List of blocked command patterns (takes precedence over allowed)�blocked_commandsc C s t t�� �gS �N)r% r �homer r r r �<lambda>; s zConfig.<lambda>z*Directories where commands can be executed�allowed_directoriesi, z-Maximum execution time for commands (seconds)�timeout_secondsi�� z!Maximum output size in characters�max_output_sizez /bin/bashz"Shell to use for command execution�shellc C s g d�S )N)�PATH�HOME�USER�LANG�LC_ALLr r r r r r. O s z1Environment variables to pass through to commands�environment_passthroughz5Commands approved during this session (not persisted)�session_approved_commandsr r c C s� | j D ]}|�|�rdd|jp|j� �f S q| jD ]}|�|�r/dd|jp)|j� �f S q|| jv r7dS | jtjkr?dS | jtj krGdS dS ) zl
Check if a command is allowed.
Returns:
Tuple of (is_allowed, reason)
Fz!Command matches blocked pattern: Tz!Command matches allowed pattern: )Tz(Command was approved during this session)TzAllow-all mode is enabled)F�NEEDS_APPROVAL)FzCommand not in allow list)
r+ r$ r r r* r9 r( r r r )r# r �blocked�allowedr r r �is_command_allowedY s
�
�
zConfig.is_command_allowedNc C s || j vr
| j �|� dS dS )z*Approve a command for the current session.N)r9 �appendr" r r r �approve_command_for_sessionv s
�z"Config.approve_command_for_session)r r r
r r r r r( r& �listr* r r+ r/ r% r0 �intr1 r2 r8 r9 �tupler r= r? r r r r r' ( sP
��������� r' r c C s< t j�d�} | rt| �d }|d S t�� d d }|d S )z(Get the default configuration file path.�XDG_CONFIG_HOMEzhost-terminal-mcpz.configz config.yaml)�os�environ�getr r- )�
xdg_config�
config_dirr r r �get_default_config_path| s �rI c C s� g t ddd��t ddd��t ddd��t dd d��t d
d d��t d d
dd��t ddd��t ddd��t ddd��t ddd��t ddd��t ddd��t d d d��t d d d��t d d d��t d!d"d��t d#d$d��t d%d&d��t d'd(d��t d)d*d��t d+d,d��t d-d.d��t d/d0d��t d1d2d��t d3d4d��t d5d6d��t d7d8d��t d9d:d��t d;d<d��t d=d>d��t d?d@d��t dAdBd��t dCdDd��t dEdFd��t dGdHd��t dIdJd��t dKdLd��t dMdNd��t dOdPd��t dQdRd��t dSdTd��t dUdVd��t dWdXd��t dYdXd��t dZd[d��t d\d]d��t d^d_d��t d`dad��t dbdad��t dcddd��t dedfd��t dgdhd��t didjd��t dkdld��t dmdld��t dndod��t dpdod��t dqdod��t drdsd��t dtdud��t dvdwd��t dxdyd��t dzd{d��t d|d{d��t d}d~d��t dd�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��t d�d�d��S )�z3Get the default list of allowed developer commands.�lszList directory contents�r r �llz+List directory contents (long format alias)�laz List all files including hidden�pwdzPrint working directory�treezDisplay directory treezfind z
Find filesF�r r r zlocate z Locate fileszwhich zLocate a commandzwhereis z!Locate binary, source, and manualzfile zDetermine file typezcat zDisplay file contentszhead zDisplay first lines of fileztail zDisplay last lines of filezless zView file with paginationzmore zbat z Cat with syntax highlightingzwc zWord, line, character countzgrep zSearch text patternszrg zRipgrep - fast searchzag zSilver searcherzack zAck search tool�fzfz Fuzzy finderz
git statusz
Git statuszgit logzGit logzgit diffzGit diffzgit showzGit showz
git branchz Git branchesz
git remotez Git remoteszgit tagzGit tagszgit stash listzGit stash listz
git rev-parsez
Git rev-parsezgit config --getzGit config readzgit config --listzGit config listz git blamez Git blamez git shortlogz Git shortlogz git describez Git describe�unamez System info�hostnamezSystem hostname�whoamiz Current user�idzUser/group IDs�datezCurrent date/time�uptimez
System uptimezdf zDisk space usage�dfzdu zDirectory space usage�freez Memory usageztop -l 1zProcess info (macOS)zps zProcess status�ps�envzEnvironment variables�printenvzPrint environmentzecho $zEcho env variablezping -czPing with countzcurl -IzHTTP headers onlyz curl --headzdig z
DNS lookupz nslookup zhost �ifconfigzNetwork interfaceszip addrz IP addresses�netstatz
Network statszss z Socket statsznpm listzNPM list packagesznpm lsznpm viewzNPM view packageznpm showzNPM show packagez npm outdatedzNPM outdated packageszpip listzPip list packageszpip showzPip show packagez
pip freezez
Pip freezez brew listz
Homebrew listz brew infoz
Homebrew infozapt listzAPT list packageszdpkg -lzDPKG list packageszpython --versionzPython versionzpython3 --versionzPython3 versionznode --versionz Node versionz
npm --versionz NPM versionzcargo --versionz
Cargo versionzrustc --versionz Rust versionz
go versionz
Go versionzjava --versionz Java versionzjavac --versionz
Javac versionzruby --versionz Ruby versionzdocker --versionzDocker versionz docker pszDocker containersz
docker imagesz
Docker imagesz docker logsz Docker logszjq zJSON processorzyq zYAML processorzman z Manual pageszhelp zHelp for commandsztype z Command typezstat zFile statisticszmd5sum z MD5 checksumz
sha256sum zSHA256 checksumzshasum z SHA checksum�r r r r r � get_default_allowed_commands� s�
�
�
�
�
� �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
!�
"�
#�
$�
%�
&�
'�
(�
)�
*�
+�
.�
/�
0�
1�
2�
3�
4�
5�
6�
7�
8�
9�
:�
;�
<�
=�
@�
A�
B�
C�
D�
E�
F�
G�
H�
I�
L�
M�
N�
O�
P�
Q�
R�
S�
T�
U�
V�
W�
Z�
[�
\�
]�
^�
_�
`�
a�
b�
c�
d�
e�
f�
g�
j�
k�
n�
o�
p�
q�
r�
s�
t�r` c C s� t dddd�t dddd�t dddd�t d d
d �t d d
d �t ddd �t ddd �t ddd �t ddd �t ddd �t ddd �t ddd �t d d d �t d d d �t d d!d �t d"d#d �t d$d%d �t d&d'd �gS )(z)Get the default list of blocked commands.z
^rm\s+-rf\s+/zRecursive delete rootTrP z
^rm\s+-rf\s+~zRecursive delete homez^rm\s+-rf\s+\*zRecursive delete all�mkfszFormat filesystemrK zdd if=zDisk destroyerz:(){z Fork bombz > /dev/sdzOverwrite diskzchmod -R 777 /zDangerous permissionsz chown -R zRecursive ownership changezsudo zSuperuser commandszsu z Switch userzdoas zOpenBSD sudo alternativeznc -lzNetcat listenerznmap z Port scannerzcat /etc/shadowz
Password filezcat /etc/passwdz User filez
history -cz
Clear historyzshred z
Secure deleter_ r r r r � get_default_blocked_commands s&
�rb � config_pathc C s� | du rt � } | �� rKt| ��}t�|�pi }W d � n1 s!w Y d|v r5dd� |d D �|d< d|v rDdd� |d D �|d< tdi |��S tt� t� d�S ) z/Load configuration from file or create default.Nr* c S �. g | ]}t |t�rtdi |��nt|d ��qS �)r r ��
isinstance�dictr ��.0�cmdr r r �
<listcomp>. � ��z load_config.<locals>.<listcomp>r+ c S rd re rf ri r r r rl 4 rm �r* r+ r )rI �exists�open�yaml� safe_loadr' r` rb )rc �f�datar r r � load_config# s&
�
�
��ru �configc C s� |du rt � }|jjddd� | jdhd�}dd� |d D �|d< d d� |d
D �|d
< t|d ��}tj||d d d
� W d � dS 1 sFw Y dS )zSave configuration to file.NT)�parents�exist_okr9 )�excludec S �$ g | ]}|d |d |d d��qS �r r r rP r ri r r r rl N � ��z save_config.<locals>.<listcomp>r* c S rz r{ r ri r r r rl R r| r+ �wF)�default_flow_style� sort_keys)rI �parent�mkdir�
model_dumprp rq �dump)rv rc rt rs r r r � save_configB s
�
� "�r� c C s, | du rt � } tt� t� d�}t|| � | S )z$Create a default configuration file.Nrn )rI r' r` rb r� )rc rv r r r �create_default_config_file[ s �
r� r, )r rD r �enumr �pathlibr �typingr rq �pydanticr r r% r r r' rI r@ r` rb ru r� r� r r r r �<module> s" T z!
