feat: 新增 Agent CLI — Web 版 AI 运维 Agent（参考 opsxcli 移植）

后端引擎 backend/pkg/agentcli/（纯引擎库，零业务依赖，剥离 CLI/TUI 外壳）： - llm: OpenAI 兼容客户端，复用 model.LLMConfig - tools: ssh_execute（复用 pkg/remoteexec）+ analyze_output + 风险评估黑名单 - safety: 三级安全模式 + 五级风险 + WebSocket 异步确认 - prompt: 五层 System Prompt - core: ReAct 16 轮循环 + 自适应检查点 + 循环检测 - evolver: 四层记忆 + 进化循环，data/agentcli/ 文件存储集成层： - controller/agent_cli.go: WebSocket 控制器（事件流推流 + 高危确认 + 会话持久化） - model/agent_cli.go: agent_cli_sessions/messages 表 + AutoMigrate - 路由 /ws/agent-cli + /api/v1/aiops/agent-cli/sessions - seed 权限 aiops:agent-cli / aiops:llm-config 前端： - AgentCLI.tsx: 对话流 + 工具块 + 高危确认 + 四模块 tips 面板 - LLMConfig.tsx: 大模型设置独立页 - api/agentCli.ts + Sidebar/App 菜单路由文档： - docs/agent/ 11 篇（opsxcli 同名文档适配改写 + 00-README 映射总览）其他： - CLAUDE.md 补充 agent-cli 模块说明 - 修正 .gitignore 根级二进制规则（前导 /，避免误伤 frontend/src/components/aiops/） Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-27 09:55:17 +08:00
1 parent f2069fe3f0
commit 92a2247390
@@ -0,0 +1,170 @@
+// risk.go - 命令风险评估（黑名单 + 动态分级） // Logan.Li
+// 移植自 opsxcli internal/agent/safety/risk.go，置于 tools 包避免与 safety 循环依赖。
+// 供 ssh_execute 的 DynamicRiskTool.RiskLevelForArgs 调用，决定是否触发用户确认。
+package tools
+
+import "strings"
+
+// dangerousCommands 危险命令黑名单（系统损坏/数据丢失/服务中断） // Logan.Li
+var dangerousCommands = []string{
+	"rm -rf /", "rm -rf /*", "rm -rf /bin", "rm -rf /boot", "rm -rf /etc",
+	"rm -rf /home", "rm -rf /lib", "rm -rf /lib64", "rm -rf /proc", "rm -rf /root",
+	"rm -rf /sbin", "rm -rf /sys", "rm -rf /usr", "rm -rf /var",
+	"mkfs", "mkfs.ext", "mkfs.xfs", "mkfs.btrfs", "mkfs.vfat",
+	"dd if=/dev/zero", "dd if=/dev/random", "dd if=/dev/urandom",
+	":(){ :|:& };:", ":() { : | : & }; :",
+	"> /dev/sda", "> /dev/sdb", "> /dev/sdc", "> /dev/hda",
+	"mv / /dev/null", "mv /* /dev/null",
+	"chmod -R 000 /", "chmod -R 777 /",
+	"systemctl stop ssh", "systemctl disable ssh", "kill -9 1",
+	"iptables -F", "iptables --flush",
+}
+
+// readOnlyCommands 只读命令（安全） // Logan.Li
+var readOnlyCommands = []string{
+	"cat", "grep", "egrep", "fgrep", "awk", "sed", "head", "tail", "less", "more",
+	"sort", "uniq", "wc", "ps", "top", "df", "du", "free", "uptime", "uname",
+	"hostname", "ifconfig", "ip addr", "ip link", "ip route", "netstat", "ss",
+	"ls", "ll", "pwd", "who", "w", "last", "vmstat", "iostat", "mpstat", "sar",
+	"lsof", "find", "which", "whereis", "file", "stat", "date", "echo", "id",
+	"whoami", "groups", "getent", "dmesg", "systemctl status", "systemctl list-units",
+	"lsblk", "blkid", "mount", "journalctl",
+}
+
+// modificationCommands 文件修改命令（低-中风险） // Logan.Li
+var modificationCommands = []string{
+	"cp", "mv", "mkdir", "rmdir", "touch", "chmod", "chown", "chgrp", "ln",
+	"tar", "gzip", "gunzip", "zip", "unzip", "rsync", "tee",
+}
+
+// highRiskCommands 高风险命令（服务控制/删除/重启） // Logan.Li
+var highRiskCommands = []string{
+	"rm", "dd", "shutdown", "reboot", "halt", "poweroff", "init",
+	"systemctl restart", "systemctl stop", "systemctl start",
+	"kill", "killall", "pkill", "userdel", "groupdel", "fdisk", "parted", "mkfs",
+}
+
+// IsDangerousCommand 检查命令是否命中黑名单 // Logan.Li
+// 返回 (是否危险, 命中的模式)。
+func IsDangerousCommand(command string) (bool, string) {
+	trimmed := strings.TrimSpace(command)
+	if trimmed == "" {
+		return false, ""
+	}
+	lower := strings.ToLower(trimmed)
+	for _, d := range dangerousCommands {
+		if strings.Contains(lower, strings.ToLower(d)) {
+			return true, d
+		}
+	}
+	// rm -rf + 根目录路径特殊检测
+	if strings.HasPrefix(lower, "rm") && strings.Contains(lower, "-rf") && containsRootPath(lower) {
+		return true, "rm -rf 包含根目录路径"
+	}
+	return false, ""
+}
+
+// containsRootPath 检测是否含系统根目录路径 // Logan.Li
+func containsRootPath(cmd string) bool {
+	paths := []string{" /boot", " /etc", " /usr", " /var", " /lib", " /lib64",
+		" /sbin", " /bin", " /opt", " /home", " /root", " /tmp", " /var/log"}
+	for _, p := range paths {
+		if strings.Contains(cmd, p) {
+			return true
+		}
+	}
+	return false
+}
+
+// AssessBashRisk 动态评估命令风险等级 // Logan.Li
+// 黑名单→Critical；纯只读→Safe；组合命令取最高；sudo 提升。
+func AssessBashRisk(command string) RiskLevel {
+	trimmed := strings.TrimSpace(command)
+	if trimmed == "" {
+		return RiskSafe
+	}
+	lower := strings.ToLower(trimmed)
+
+	if isDangerous, _ := IsDangerousCommand(command); isDangerous {
+		return RiskCritical
+	}
+	if isReadOnlyCommand(lower) {
+		return RiskSafe
+	}
+	if strings.Contains(lower, "&&") || strings.Contains(lower, "||") ||
+		strings.Contains(lower, "|") || strings.Contains(lower, ";") {
+		return assessCompoundCommand(lower)
+	}
+	isSudo := strings.HasPrefix(lower, "sudo ")
+	return assessSingleCommand(strings.TrimPrefix(lower, "sudo "), isSudo)
+}
+
+// isReadOnlyCommand 是否纯只读命令 // Logan.Li
+func isReadOnlyCommand(cmd string) bool {
+	cmd = strings.TrimPrefix(cmd, "sudo ")
+	cmd = strings.TrimSpace(cmd)
+	for _, ro := range readOnlyCommands {
+		if strings.HasPrefix(cmd, strings.ToLower(ro)) {
+			return true
+		}
+	}
+	return false
+}
+
+// assessCompoundCommand 组合命令取子命令最高风险 // Logan.Li
+func assessCompoundCommand(cmd string) RiskLevel {
+	maxRisk := RiskSafe
+	parts := []string{cmd}
+	for _, sep := range []string{"&&", "||", "|", ";"} {
+		var next []string
+		for _, p := range parts {
+			for _, sp := range strings.Split(p, sep) {
+				sp = strings.TrimSpace(sp)
+				if sp != "" {
+					next = append(next, sp)
+				}
+			}
+		}
+		parts = next
+	}
+	for _, p := range parts {
+		if r := assessSingleCommand(strings.TrimPrefix(p, "sudo "), false); r > maxRisk {
+			maxRisk = r
+		}
+	}
+	if strings.HasPrefix(cmd, "sudo ") && maxRisk < RiskCritical {
+		maxRisk++
+	}
+	return maxRisk
+}
+
+// assessSingleCommand 单命令风险（按前缀分类） // Logan.Li
+func assessSingleCommand(cmd string, isSudo bool) RiskLevel {
+	cmd = strings.TrimSpace(cmd)
+	fields := strings.Fields(cmd)
+	if len(fields) == 0 {
+		return RiskSafe
+	}
+	main := strings.ToLower(fields[0])
+
+	for _, h := range highRiskCommands {
+		if main == strings.ToLower(h) || strings.HasPrefix(main, strings.ToLower(h)) {
+			if isSudo {
+				return RiskHigh
+			}
+			return RiskMedium
+		}
+	}
+	for _, m := range modificationCommands {
+		if main == strings.ToLower(m) {
+			if isSudo {
+				return RiskMedium
+			}
+			return RiskLow
+		}
+	}
+	if isSudo {
+		return RiskMedium
+	}
+	return RiskLow
+}