Shellmate
🇨🇳 简体中文 | 🇬🇧 English
Shellmate 是一个面向 zsh 的命令行 AI 助手。在命令行输入问题后按 Ctrl-G,它会结合近期命令历史,用任意 OpenAI 兼容模型(OpenAI、DeepSeek、Qwen 等)给出回答。
功能
- Ctrl-G 快捷键 — 在命令行输入问题后按 Ctrl-G 提问(空缓冲时只提示先输入问题)
- 终端内渲染 Markdown(代码高亮、表格、列表)
- 自动捕获上一条命令及其退出码,失败时在提示符上方提示
- 命令失败后按 Ctrl-X 用管道重跑该命令,让 agent 看完整报错再解释
- 近期命令历史作为上下文
- OpenAI 兼容协议,支持 OpenAI / DeepSeek / Qwen 等
- 系统提示词可编辑(
~/.config/shellmate/Agent.md),默认模板随包下发 - 内置 DuckDuckGo 网页搜索,无需搜索 API Key
- 模型与搜索请求前自动脱敏:密钥前缀、高熵 token、
KEY=value、引号包裹的秘密、Webhook URL、URL 内嵌凭据、curl -u/mysql -pXXX等命令行开关 - 本地 SQLite 保存会话记忆(checkpoint),无需数据库服务
安装
需要 Python 3.11+。
pip install shellmate-ai # 或从源码:pip install -e .
shellmate-ai init # 创建配置 + Agent 提示词 + zsh 插件 + .zshrc 加载行
source ~/.zshrc # 或重开终端
注:安装后命令行工具名为
shellmate-ai(与 PyPI 包名一致)。
使用
在 zsh 中输入问题,然后按 Ctrl-G,agent 会结合近期命令历史回答。空缓冲按 Ctrl-G 不会去猜上一条命令的失败原因,只提示你先输入问题 —— 原因是 zsh 没有"命令执行结束"的钩子,命令的输出在提示符重绘时就已经消失,Shellmate 从未捕获过它。想让 agent 看到真正的报错,用 Ctrl-X 重跑该命令,或自己接管道。
| 触发方式 | agent 能看到什么 |
|---|---|
| Ctrl-G(命令行有输入) | 你的问题 + 近期命令历史 |
| Ctrl-G(空缓冲) | 什么都不问,只在终端提示"请先输入问题" |
| Ctrl-X | 重新执行上一条命令,把 stdout+stderr 合并后的输出交给 agent |
cmd 2>&1 | shellmate-ai explain |
同上,但要跑哪条命令由你自己决定 |
shellmate-ai explain-last --last-command CMD --last-exit N |
只有命令和退出码,没有输出,适合脚本;模型被明确告知不要编造报错 |
命令失败时(非零退出码),提示符上方会出现提示:按 Ctrl-X 会把上一条命令用 2>&1 | shellmate-ai explain 重跑,把合并后的输出交给 agent 解释(重跑可能有副作用,所以由你手动触发)。
注:Ctrl-X 任何时候都可用,不限于失败之后;输出过长时只保留末尾 2 万字符。
^X同时是 zsh 默认键位的前缀(如^X^U撤销、^Xr历史搜索),所以 ZLE 会先等待KEYTIMEOUT(默认 0.4 秒)再触发重跑——那些^X开头的组合键不受影响,觉得迟滞可以自行调小KEYTIMEOUT。另外,绑定 Ctrl-G 会覆盖 zsh 默认的send-break(取消当前命令行);想找回默认行为,可以执行bindkey '^G' send-break,或给插件换个键位。
shellmate-ai ask "刚才的命令为什么失败?" # 直接提问
shellmate-ai ask # 交互式提问
shellmate-ai ask --history $'ls -la\ngit status' "解释一下" # 手动传历史
shellmate-ai ask --thread-id my-task "换个新会话" # 指定会话 ID
# 把命令输出喂给 Shellmate 解释(管道模式)
git push origin main 2>&1 | shellmate-ai explain
tail -200 app.log | shellmate-ai explain "为什么一直报 timeout?"
shellmate-ai explain-last --last-command "make build" --last-exit 2 # 只用命令+退出码解释(无输出)
shellmate-ai config-path # 查看配置路径
shellmate-ai history-lines # 查看历史条数
配置
shellmate-ai init 会创建 ~/.config/shellmate/config.json 和 Agent.md。在 config.json 中填入 API Key,或用环境变量设置。
Agent.md 是系统提示词,可以直接编辑:初始内容来自包内模板 src/shellmate/prompts/Agent.md(随 wheel/sdist 一起下发),只在文件不存在时写入,不会覆盖你的修改;改动对新会话生效。
{
"llm": { "base_url": "https://api.openai.com/v1", "model": "gpt-4o-mini", "api_key": "", "timeout": 60.0 },
"shell": { "history_lines": 20 },
"search": { "endpoint": "https://html.duckduckgo.com/html/" },
"privacy": { "redact_secrets": true, "redact_high_entropy": true, "custom_patterns": [] }
}
字段约束:llm.timeout 大于 0 且不超过 600 秒,shell.history_lines 为 1–500,search.endpoint 必须是 HTTP(S) URL;privacy.custom_patterns 是额外的正则,命中后替换为 [REDACTED];关闭 privacy.redact_secrets 会同时停用高熵检测。配置中出现未知字段(含已移除的 provider、output_file、checkpoint)会直接报错并指出字段名,不会被静默忽略。
环境变量会覆盖 JSON 配置:
| 变量 | 覆盖 |
|---|---|
OPENAI_API_KEY / SHELLMATE_API_KEY |
llm.api_key |
SHELLMATE_BASE_URL |
llm.base_url |
SHELLMATE_MODEL |
llm.model |
SHELLMATE_THREAD_ID |
thread_id(会话记忆 ID,默认 shellmate-cli-default) |
SHELLMATE_SEARCH_ENDPOINT |
search.endpoint |
CLI 另外会读取 SHELLMATE_SESSION_ID(未指定 --thread-id 时的会话 ID,由 zsh 插件按窗口设置),以及 SHELLMATE_HISTORY_TEXT、SHELLMATE_LAST_COMMAND、SHELLMATE_LAST_EXIT 作为兜底值 —— 新版插件用 --history 参数传历史,另外几个变量只为兼容已安装的旧插件保留。未设置 HISTFILE 时,历史文件按 ~/.zsh_history 读取。
运行时文件
| 路径 | 说明 |
|---|---|
~/.config/shellmate/config.json |
配置,权限 600 |
~/.config/shellmate/Agent.md |
系统提示词,权限 600,可自由编辑 |
~/.config/shellmate/shellmate.zsh |
zsh 插件,由 shellmate-ai init 写入,权限 644 |
~/.config/shellmate/data/checkpoints.sqlite |
会话记忆,SQLite,目录权限 700 |
~/.zshrc |
由 init 幂等追加 source ~/.config/shellmate/shellmate.zsh |
架构
Agent 是一个 LangGraph 状态机:
flowchart TD
Start([start]) --> SystemPrompt["system_prompt<br/>加载 Agent.md"]
SystemPrompt --> Assistant["assistant<br/>调用模型"]
Assistant -->|需要工具| Tools["tools<br/>网页搜索"]
Assistant -->|结束| End([end])
Tools --> Assistant
- system_prompt — 某个会话首次执行时读取可编辑的
Agent.md,作为系统提示词写入状态(每个会话一次) - assistant — 把系统提示词置于最前,仅对会话消息脱敏后调用 OpenAI 兼容模型
- tools — 模型请求联网时执行 DuckDuckGo 搜索
项目结构
src/shellmate/
├── agent.py # LangGraph agent + SQLite checkpoint
├── cli.py # 命令行入口
├── config.py # Pydantic 配置 + 读取包内默认提示词
├── context.py # 历史格式化
├── privacy.py # 脱敏中间件
├── zsh_plugin.py # 内置 zsh 插件(从 shellmate.zsh 数据文件读取)
├── shellmate.zsh # zsh 插件(Ctrl-G / Ctrl-X / preexec / precmd)
├── prompts/
│ └── Agent.md # 默认系统提示词模板(init 时写入配置目录)
└── tools/
└── web_search.py # DuckDuckGo HTML 搜索
License
Metadata
Release files for shellmate-ai 0.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| shellmate_ai-0.1.2.tar.gz | 31.2 kB | With provenance | Details for shellmate_ai-0.1.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| shellmate_ai-0.1.2-py3-none-any.whl | Python 3 | none | any | Details for shellmate_ai-0.1.2-py3-none-any.whl |
Total release size: 62.9 kB
Release files / shellmate_ai-0.1.2.tar.gz
| Download URL | shellmate_ai-0.1.2.tar.gz |
|---|---|
| Size | 31.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
4c42af9041cae197c391e4fa6f5b54dcd4b772c884bfd0ffc585f2bea22c9d37
|
|
BLAKE2b-256 checksum How to use checksums |
49d2fd0541497b4f1ad5f800eaa3c7f4973ea28d8638b94f237085d1b2ea123b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.
Transparency logRelease files / shellmate_ai-0.1.2-py3-none-any.whl
| Download URL | shellmate_ai-0.1.2-py3-none-any.whl |
|---|---|
| Size | 31.7 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
69e0b51ac377af8e5503e879d811a59576935757a2a758bf2a0f14b5e17b12f4
|
|
BLAKE2b-256 checksum How to use checksums |
a464301d159424931ef5f3eeb537d14a32a4db75a7972a29faa2f8b1fce5b25a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.
Transparency logSecurity for shellmate-ai 0.1.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for shellmate_ai-0.1.2.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.