- 任务感知 LLM 审查(UserPromptSubmit 捕获任务 + PostToolUse 组合风险) - 四层流水线:工具白名单 / cwd 内编辑快速路径 / 命令白名单 / 灾难命令黑名单确定性拦截 - 防提示注入:授权只认键盘捕获段,伪造授权直接拒绝 - onUncertain 三值可配(deny/prompt/allow)+ ZCode 原生弹窗升级(已实测) - approve 一次性放行逃生舱(精确匹配、用后即焚、审计留痕) - 常驻 daemon:TLS 连接热复用、决策缓存、配置热重载、内联降级兜底 - 一键 install/uninstall/status、extraBody 请求体注入、29 项回归测试
27 lines
563 B
JSON
27 lines
563 B
JSON
{
|
|
"baseUrl": "YOUR_OPENAI_COMPATIBLE_ENDPOINT",
|
|
"apiKey": "PENDING",
|
|
"model": "YOUR_MODEL",
|
|
"llmTimeoutMs": 12000,
|
|
"retries": 1,
|
|
"maxOutputTokens": 2000,
|
|
"onReviewerError": "deny",
|
|
"fullAccessGuard": false,
|
|
"onUncertain": "deny",
|
|
"allowOutput": "json",
|
|
"enableAllowlist": true,
|
|
"enableDangerList": true,
|
|
"maxInputChars": 6000,
|
|
"recentPrompts": 5,
|
|
"recentActions": 10,
|
|
"daemon": true,
|
|
"daemonPort": 47811,
|
|
"extraBody": {},
|
|
"toolAllowlist": [],
|
|
"autoMode": {
|
|
"allow": [],
|
|
"soft_deny": [],
|
|
"environment": []
|
|
}
|
|
}
|