@aalis/api-reach 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ace Nyan <ace@acenyan.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,34 @@
-# Temporary Holding Version
+# @aalis/api-reach
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+触及契约：一次工具调用最多能触及本机的什么。类型、纯函数与服务描述符，服务由 `@aalis/plugin-reach` 提供。
+
+## 角色
+
+- 档位 `ACCESS_TIERS`（只读、修改确认、工作区、全权）与越界策略 `BoundaryPolicy`，经 declaration merging 成为会话设置的 `accessTier`、`accessOnBoundary` 两个键。
+- `resolveReach`：按主体、房间类别、档位、越界策略、污点、场所、绑定与三张清单解析出一份触及；`judgeReach` 判一个目标放行、问或拒。
+- `protectedLists`：按家目录布局、用户家目录、平台与安装集的形态生成宿主控制面、持久化与自动执行落点、拒读清单；`withRealRoots` 按调用方取好的真实路径补上链接出去的根；`matchesRule` 判一个路径落不落在某条规则里。工具边界与沙箱用同一份清单。
+- `sandboxPolicyOf`：按触及生成沙箱策略 `SandboxPolicy`。
+- 触及凭据 `ReachCredential` 的类型与品牌符号 `REACH_CREDENTIAL`、`isReachCredential`：凭据只由触及插件构造，工具从调用上下文取得后转交给存储与沙箱。
+- 服务描述符 `reach`（`ReachService`）：`forCall` 按一次工具调用签发凭据，`markTainted` 记会话的污点，`provenanceOf` 查白纸的来源账本。
+
+## 安装
+
+```bash
+pnpm add @aalis/api-reach
+```
+
+## 使用
+
+```ts
+import { judgeReach, protectedLists, resolveReach } from '@aalis/api-reach';
+
+const lists = protectedLists({ paths, userHome, platform: process.platform, form: 'npm', codeDirs: [] });
+const reach = resolveReach({ principal: 'owner', roomClass: 'owner-only', tier: 'workspace', onBoundary: 'ask', /* … */ lists, paths });
+judgeReach(reach, { effect: 'write', path: '/<项目>/src/a.ts' }); // { verdict: 'allow' }
+```
+
+规则详见文档站的 api-reach 页。
+
+## 许可
+
+见仓库根目录 LICENSE。

package/dist/index.d.ts

@@ -0,0 +1,298 @@
+/**
+ * @aalis/api-reach — 触及契约
+ *
+ * 一次工具调用最多能触及本机的什么：先按「主体 × 房间类别」定上限，只有 owner 在受众只有 owner 的会话里有本地效果；
+ * 再按档位收窄，按污点把送出会话的动作改成问；子任务另与父会话实时的触及取较小值。本包只有类型与纯函数：
+ * - 档位与越界策略，经 declaration merging 成为会话设置的两个键；
+ * - `resolveReach` 解析出一份触及，`judgeReach` 判一个目标放行、问或拒；
+ * - `protectedLists` 生成宿主控制面、持久化与自动执行落点、拒读清单三张清单，`withRealRoots` 按真实路径补上链接出去的根，
+ *   工具边界与沙箱用同一份；
+ * - `sandboxPolicyOf` 按触及生成沙箱策略；
+ * - 触及凭据 `ReachCredential` 的类型与品牌符号：凭据只由触及插件构造，工具从调用上下文取得后转交；
+ * - 触及服务 `reach`：按一次工具调用签发凭据，存会话的污点与白纸的来源账本。
+ *
+ * 路径一律是真实路径：符号链接已解开；目标不存在时，取最近存在的祖先的真实路径，再接上后面不存在的各段。由调用方取好再交进来。
+ */
+import type { OriginTurn } from '@aalis/api-authority';
+import type { HostPaths } from '@aalis/api-host-paths';
+import type { RoomClass, WorkBinding } from '@aalis/api-session-manager';
+/** 权限四档，从低到高：只读、修改确认、工作区、全权。降档即在这张表里往前挪 */
+export declare const ACCESS_TIERS: readonly ["readonly", "confirm", "workspace", "full"];
+export type AccessTier = (typeof ACCESS_TIERS)[number];
+/**
+ * 越界策略：需要问的时候在场就问、不在场按拒绝（ask），或一律直接拒绝（deny）。对修改确认档不起作用，那一档本身就是逐步确认
+ */
+export type BoundaryPolicy = 'ask' | 'deny';
+declare module '@aalis/api-session-manager' {
+    interface SessionConfig {
+        /** 档位：只对 owner 自己的会话起作用，子会话按根会话实时取 */
+        accessTier?: AccessTier;
+        /** 越界策略：子会话按根会话实时取 */
+        accessOnBoundary?: BoundaryPolicy;
+    }
+}
+/**
+ * 路径匹配：`path` 是这个路径与它下面的全部；`pattern` 是对整条路径的正则（源码），只用锚点、字符类、分组与选择、量词，
+ * 沙箱的生成器才翻译得了。macOS 与 Windows 上不分大小写，Windows 上反斜杠按斜杠比较
+ */
+export type PathMatcher = {
+    readonly path: string;
+} | {
+    readonly pattern: string;
+};
+/** 清单里的一条：命中 matcher 且不在 except 里 */
+export type PathRule = PathMatcher & {
+    readonly except?: readonly PathMatcher[];
+};
+/** 路径落在这条规则里：命中它、且不在它的例外里 */
+export declare function matchesRule(rule: PathRule, path: string, platform: NodeJS.Platform): boolean;
+export interface ProtectedListsInput {
+    /** 家目录布局 */
+    readonly paths: HostPaths;
+    /** 操作系统用户的家目录 */
+    readonly userHome: string;
+    readonly platform: NodeJS.Platform;
+    /** 安装集的形态：源码形态下有 packages/；npm 形态是 create-aalis 生成的项目，家目录在安装集里 */
+    readonly form: 'source' | 'npm';
+    /** 安装集以外、守护进程加载了代码的目录，如经链接装进来的插件 */
+    readonly codeDirs: readonly string[];
+    /** 守护进程的入口文件（启动脚本的真实路径），取不到时不给；只在 npm 形态下归宿主控制面 */
+    readonly entry?: string;
+}
+export interface ProtectedLists {
+    readonly platform: NodeJS.Platform;
+    /** 宿主控制面：任何档位都拒绝写，不可申请 */
+    readonly control: readonly PathRule[];
+    /**
+     * 持久化与自动执行落点：只读与工作区档按越界策略问或拒，修改确认档问，全权写入并记审计。装着落点的目录本身也算，
+     * 免得在别处摆好整棵子树再改名到位。伪装裸仓库要的 HEAD 与不叫 .git 的 git 目录由触及按它的 git 目录补上
+     */
+    readonly landing: readonly PathRule[];
+    /** 拒读清单：工具边界在任何档位都拒读，沙箱里同样读不到；在宿主上执行的命令（全权、修改确认，以及批准过的宿主执行）约束不到 */
+    readonly denyRead: readonly PathRule[];
+}
+/** 按家目录布局、用户家目录与平台生成三张清单 */
+export declare function protectedLists(input: ProtectedListsInput): ProtectedLists;
+/**
+ * 按真实路径补一份：以具体路径为根的规则，根的路径上有符号链接（`realOf` 给出的真实路径与写法不同）时，按真实路径再加
+ * 一份同样的规则，根下的例外随根挪过去。真实路径由调用方在激活时取好，路径不存在的不给；激活之后链接改指向不跟踪
+ */
+export declare function withRealRoots(lists: ProtectedLists, realOf: (path: string) => string | undefined): ProtectedLists;
+/** 发起这一轮的主体。子任务不自己定主体，随发起它的父会话实时的触及 */
+export type ReachPrincipal = 'owner' | 'other' | {
+    readonly subtaskOf: Reach;
+};
+export interface ReachInput {
+    readonly principal: ReachPrincipal;
+    /** 会话的房间类别（子会话取根会话的） */
+    readonly roomClass: RoomClass;
+    /** 生效的档位与越界策略（子会话取根会话的） */
+    readonly tier: AccessTier;
+    readonly onBoundary: BoundaryPolicy;
+    /** 这个会话读进过谁的内容（来源称呼）；不给或为空即干净 */
+    readonly tainted?: readonly string[];
+    /** 场所的主目录与白纸：默认工作区两者是同一处，项目工作区的主目录是绑定目录 */
+    readonly place: {
+        readonly home: string;
+        readonly paper: string;
+    };
+    /** 项目会话的附加可写目录与本会话树建的 worktree */
+    readonly binding?: Pick<WorkBinding, 'extraRoots' | 'worktrees'>;
+    /** 绑定所在仓库的 git 目录（common dir）：工作区档可写，落点除外 */
+    readonly gitDirs: readonly string[];
+    /** 本会话临时区 */
+    readonly sessionTmp: string;
+    /** 别人的内容所在：别人场所的白纸与来源账本里的文件。文件工具读得到（读了计污点），干净回合的沙箱读不到、改不了 */
+    readonly othersContent: readonly string[];
+    /** 沙箱里拒连的本机端口 */
+    readonly localPorts: readonly number[];
+    readonly lists: ProtectedLists;
+    readonly paths: HostPaths;
+}
+/** 有本地效果的触及：只有 owner 在受众只有 owner 的会话里才有 */
+export interface LocalReach {
+    /** 命令在哪执行：只读与工作区档在沙箱里，修改确认与全权在宿主上 */
+    readonly exec: 'sandbox' | 'host';
+    readonly tier: AccessTier;
+    readonly onBoundary: BoundaryPolicy;
+    /** 读进过谁的内容；干净时没有 */
+    readonly tainted?: readonly string[];
+    /** 场所的主目录与白纸 */
+    readonly home: string;
+    readonly paper: string;
+    readonly sessionTmp: string;
+    readonly skills: string;
+    /** 工作区档的可写范围：场所的主目录与白纸、附加可写目录、本会话树建的 worktree；其余档位为空 */
+    readonly workRoots: readonly string[];
+    /**
+     * 沙箱两档不问就能写的根：只读档只有本会话临时区；工作区档是 workRoots、仓库的 git 目录、本会话临时区与技能目录
+     * （受污染时写技能目录属于送出会话，工具边界问、沙箱拒）。修改确认与全权为空
+     */
+    readonly writable: readonly string[];
+    readonly othersContent: readonly string[];
+    readonly localPorts: readonly number[];
+    /** 这份触及的三张清单：落点按仓库的 git 目录补上（见 resolveReach） */
+    readonly lists: ProtectedLists;
+}
+/** 一份触及：没有本地效果时读写执行一律拒，联网交给资格轴 */
+export type Reach = {
+    readonly exec: 'none';
+} | LocalReach;
+/**
+ * 解析触及：只有 owner（子任务随父会话）在 owner-only 的会话里有本地效果；子任务的档位、越界策略取与父会话较严的那个，
+ * 污点并上父会话的。落点按这份触及的 git 目录补上：git 目录不一定叫 .git（裸仓库、分开放的 git 目录），它本身与
+ * 它里面的落点照样拦；伪装裸仓库要的 HEAD 是落点，.git 与这些 git 目录里的除外
+ */
+export declare function resolveReach(input: ReachInput): Reach;
+/**
+ * 要判的一个目标：读写的真实路径；写一份编排定义（按 id，不是路径）；执行一条命令（host 为要在沙箱外执行）；
+ * 联网（模型给的任意网址、要联网的命令、插件固定的服务商）
+ */
+export type ReachRequest = {
+    readonly effect: 'read' | 'write';
+    readonly path: string;
+} | {
+    readonly effect: 'write';
+    readonly workflow: string;
+} | {
+    readonly effect: 'exec';
+    readonly host: boolean;
+} | {
+    readonly effect: 'network';
+    readonly via: 'url' | 'command' | 'provider';
+};
+/** 要问的原因：修改确认档、越界（范围外写、宿主执行、只读档联网）、写落点、受污染后送出会话 */
+export type ReachAskReason = {
+    readonly kind: 'tier';
+} | {
+    readonly kind: 'boundary';
+    readonly target: 'write-path' | 'host-exec' | 'network';
+} | {
+    readonly kind: 'landing';
+} | {
+    readonly kind: 'outbound';
+};
+/**
+ * 判定：放行（全权写落点另带 landing，要记审计）；问；拒——没有本地效果、宿主控制面与拒读清单不可申请，
+ * 越界策略为拒的带着本来要问的原因
+ */
+export type ReachDecision = {
+    readonly verdict: 'allow';
+    readonly landing?: true;
+} | {
+    readonly verdict: 'ask';
+    readonly reason: ReachAskReason;
+} | {
+    readonly verdict: 'deny';
+    readonly rule: 'no-local-effect' | 'control-plane' | 'deny-read';
+} | {
+    readonly verdict: 'deny';
+    readonly rule: 'boundary-policy';
+    readonly reason: ReachAskReason;
+};
+/** 判一个目标放行、问或拒 */
+export declare function judgeReach(reach: Reach, request: ReachRequest): ReachDecision;
+/**
+ * 沙箱策略：只由触及生成，工具不自己拼。各段的先后（后面的压过前面的），生成器照这个顺序翻译：
+ * - 读：默认可读 → readDeny 拒 → readAllowWithin 放回 → provenanceDeny 拒；
+ * - 写：默认拒 → write 放 → writeDeny 拒 → writeExceptions 放回 → controlDeny 拒 → provenanceDeny 拒。
+ */
+export interface SandboxPolicy {
+    /** 拒读清单（规则自带例外） */
+    readonly readDeny: readonly PathRule[];
+    /** 拒读之后放回：本会话临时区 */
+    readonly readAllowWithin: readonly string[];
+    /** 干净回合里别人的内容：拒读拒写，排在一切放行之后；受污染时为空 */
+    readonly provenanceDeny: readonly string[];
+    /** 可写的根，含这条命令批准过的范围外写 */
+    readonly write: readonly string[];
+    /** 落点拒写；受污染时另拒技能目录（写它属于送出会话，批准过的那几处除外） */
+    readonly writeDeny: readonly PathRule[];
+    /** 拒写之后放回：锚定在可写范围各根下的项目内 node_modules（受污染时技能目录里的不放回），与这条命令按落点批准过的确切路径 */
+    readonly writeExceptions: readonly PathRule[];
+    /** 宿主控制面拒写，排在所有放行与例外之后 */
+    readonly controlDeny: readonly PathRule[];
+    /** on：IP 出网，减去 localPorts */
+    readonly network: 'off' | 'on';
+    /** 拒连的本机端口 */
+    readonly localPorts: readonly number[];
+    /** 可连的 unix socket 所在的目录：可写范围与本会话临时区，其余一律拒连，与 network 无关 */
+    readonly unixSockets: readonly string[];
+}
+/** 这条命令批准过的提权：按批准时的原因分开放，批准一个目录不连带放回它下面的落点 */
+export interface SandboxGrants {
+    /** 按范围外写，或受污染时写技能目录（送出会话）批准的路径：并进可写的根，其下的落点照样拒写 */
+    readonly writePaths?: readonly string[];
+    /** 按落点批准的路径：在拒写之后只放回这一个确切路径 */
+    readonly landingPaths?: readonly string[];
+    readonly network?: boolean;
+}
+/** 按触及生成这条命令的沙箱策略；命令不在沙箱里执行的触及（没有本地效果、修改确认、全权）没有沙箱策略 */
+export declare function sandboxPolicyOf(reach: Reach, grants?: SandboxGrants): SandboxPolicy;
+/**
+ * 凭据的品牌：只有触及插件构造的凭据带它（不可枚举，展开复制出来的对象不带），存储与沙箱据此把不带它的对象当作没有凭据。
+ * 它防的是漏传、误传：第一方包由架构守卫禁止拼凭据，插件是可信代码，进程内蓄意伪造挡不住。登记在全局符号表里，
+ * 进程里装了两份本包时也认得
+ */
+export declare const REACH_CREDENTIAL: unique symbol;
+/** require 的结果：拒绝时 message 是回给模型的话（被哪条规则拦下、能不能申请、能申请时的最窄目标） */
+export type ReachVerdict = {
+    readonly allowed: true;
+} | {
+    readonly allowed: false;
+    readonly message: string;
+};
+/**
+ * 触及凭据：按一次工具调用签发，只由触及插件构造；工具从调用上下文取得后转交给存储与沙箱。exec、home、paper、tainted
+ * 按签发时的触及；require、allows、sandboxPolicy 与 noteWrite 每次按会话当时的设置与污点重算，降档与受污染立即生效
+ */
+export interface ReachCredential {
+    readonly [REACH_CREDENTIAL]: true;
+    /** 这个会话读进过谁的内容（来源称呼），执行面闸据它给确认卡写来源；没有即干净。全权档不带：全权不提示 */
+    readonly tainted?: readonly string[];
+    /** 命令在哪执行；none 即这次调用没有本地效果 */
+    readonly exec: 'none' | 'sandbox' | 'host';
+    /** 场所的主目录与白纸：当前目录没有值时取 home，不写输出位置的工具写进 paper；没有本地效果时不带 */
+    readonly home?: string;
+    readonly paper?: string;
+    /** 判一个模型给的目标，要问时经审批服务问；批准过的记作这次调用的一次性目标 */
+    require(request: ReachRequest): Promise<ReachVerdict>;
+    /** 存储兜底：同步判一个真实路径能不能读写，含这次调用批准过的一次性目标 */
+    allows(effect: 'read' | 'write', realPath: string): boolean;
+    /**
+     * 这条命令的沙箱策略，带上这次调用批准过的提权：范围外写并进可写的根（其下的落点照样拒写），按落点批准的只放回那一个
+     * 确切路径；只在 exec 为 sandbox 时可取
+     */
+    sandboxPolicy(): SandboxPolicy;
+    /**
+     * 子进程环境：取自 owner 的 login shell（在场所的主目录下取一次），沙箱内去掉凭据类变量并注入沙箱要的几项，宿主执行用完整的。
+     * 没有本地效果的凭据抛错
+     */
+    processEnv(mode: 'sandbox' | 'host'): Promise<Record<string, string>>;
+    /** 经凭据写进白纸时调用：受污染回合的写入记进来源账本 */
+    noteWrite(realPath: string): void;
+}
+/** 带品牌符号的对象才是凭据 */
+export declare function isReachCredential(value: unknown): value is ReachCredential;
+/** 来源账本的一条：受污染的会话经凭据写进白纸的文件 */
+export interface ProvenanceRecord {
+    /** 写入它的会话 */
+    readonly sessionId: string;
+    /** 写入时这个会话读进过谁的内容 */
+    readonly sources: readonly string[];
+    readonly at: number;
+}
+export interface ReachService {
+    /**
+     * 按一次工具调用签发凭据：发起类别取权限服务的 originOf，会话与绑定取会话管理里的记录。没有本地效果的调用拿到
+     * exec 为 none 的凭据
+     */
+    forCall(call: OriginTurn): Promise<ReachCredential>;
+    /** 记下这个会话读进了别人写的内容（来源称呼，至少一个）：粘在会话上，之后签发的凭据都带着 */
+    markTainted(sessionId: string, sources: readonly string[]): void;
+    /** 白纸里一个文件（真实路径）在来源账本里的记录；没有记录的文件按 owner 写的算 */
+    provenanceOf(realPath: string): ProvenanceRecord | undefined;
+}
+/** 调用型服务：业务层就是提供者的形状 */
+export declare const reach: import("@aalis/core").ServiceDescriptor<ReachService, ReachService>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAOzE,2CAA2C;AAC3C,eAAO,MAAM,YAAY,uDAAwD,CAAC;AAClF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5C,OAAO,QAAQ,4BAA4B,CAAC;IAC1C,UAAU,aAAa;QACrB,sCAAsC;QACtC,UAAU,CAAC,EAAE,UAAU,CAAC;QACxB,sBAAsB;QACtB,gBAAgB,CAAC,EAAE,cAAc,CAAC;KACnC;CACF;AAMD;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,qCAAqC;AACrC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;CAAE,CAAC;AAElF,6BAA6B;AAC7B,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAE5F;AAiBD,MAAM,WAAW,mBAAmB;IAClC,YAAY;IACZ,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,iBAAiB;IACjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,0BAA0B;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;CACxC;AAiDD,4BAA4B;AAC5B,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CA4GzE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,cAAc,CAejH;AAMD,uCAAuC;AACvC,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,wBAAwB;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,2BAA2B;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,iCAAiC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,kCAAkC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC;IACjE,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,aAAa;IACb,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,iBAAiB;IACjB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED,2CAA2C;AAC3C,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,oBAAoB;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,gBAAgB;IAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AAED,kCAAkC;AAClC,MAAM,MAAM,KAAK,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAAC;AAI3D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,CAyCrD;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,GAAG,SAAS,GAAG,UAAU,CAAA;CAAE,CAAC;AAEjF,mDAAmD;AACnD,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAElC;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,eAAe,GAAG,WAAW,CAAA;CAAE,GAC9F;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC;AAQpG,kBAAkB;AAClB,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,GAAG,aAAa,CAwC7E;AAMD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,mBAAmB;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;IACvC,oBAAoB;IACpB,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,sCAAsC;IACtC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,yEAAyE;IACzE,QAAQ,CAAC,eAAe,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC9C,0BAA0B;IAC1B,QAAQ,CAAC,WAAW,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC1C,6BAA6B;IAC7B,QAAQ,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;IAC/B,cAAc;IACd,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,+BAA+B;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wDAAwD;AACxD,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,GAAE,aAAkB,GAAG,aAAa,CA4BvF;AAMD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,OAAO,MAAkD,CAAC;AAEzF,+DAA+D;AAC/D,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9G;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;IAClC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IAC3C,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,yCAAyC;IACzC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5D;;;OAGG;IACH,aAAa,IAAI,aAAa,CAAC;IAC/B;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,gCAAgC;IAChC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,mBAAmB;AACnB,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAMD,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB;IAC/B,aAAa;IACb,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qBAAqB;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpD,kDAAkD;IAClD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IACjE,gDAAgD;IAChD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;CAC9D;AAED,wBAAwB;AACxB,eAAO,MAAM,KAAK,qEAAuC,CAAC"}

package/dist/index.js

@@ -0,0 +1,330 @@
+/**
+ * @aalis/api-reach — 触及契约
+ *
+ * 一次工具调用最多能触及本机的什么：先按「主体 × 房间类别」定上限，只有 owner 在受众只有 owner 的会话里有本地效果；
+ * 再按档位收窄，按污点把送出会话的动作改成问；子任务另与父会话实时的触及取较小值。本包只有类型与纯函数：
+ * - 档位与越界策略，经 declaration merging 成为会话设置的两个键；
+ * - `resolveReach` 解析出一份触及，`judgeReach` 判一个目标放行、问或拒；
+ * - `protectedLists` 生成宿主控制面、持久化与自动执行落点、拒读清单三张清单，`withRealRoots` 按真实路径补上链接出去的根，
+ *   工具边界与沙箱用同一份；
+ * - `sandboxPolicyOf` 按触及生成沙箱策略；
+ * - 触及凭据 `ReachCredential` 的类型与品牌符号：凭据只由触及插件构造，工具从调用上下文取得后转交；
+ * - 触及服务 `reach`：按一次工具调用签发凭据，存会话的污点与白纸的来源账本。
+ *
+ * 路径一律是真实路径：符号链接已解开；目标不存在时，取最近存在的祖先的真实路径，再接上后面不存在的各段。由调用方取好再交进来。
+ */
+import { defineService } from '@aalis/core';
+// ════════════════════════════════════════════════════════════
+// 档位
+// ════════════════════════════════════════════════════════════
+/** 权限四档，从低到高：只读、修改确认、工作区、全权。降档即在这张表里往前挪 */
+export const ACCESS_TIERS = ['readonly', 'confirm', 'workspace', 'full'];
+/** 路径落在这条规则里：命中它、且不在它的例外里 */
+export function matchesRule(rule, path, platform) {
+    return hit(rule, path, platform) && !rule.except?.some(matcher => hit(matcher, path, platform));
+}
+function hit(matcher, path, platform) {
+    const key = keyOf(path, platform);
+    if ('pattern' in matcher)
+        return new RegExp(matcher.pattern, foldsCase(platform) ? 'i' : '').test(key);
+    const root = keyOf(matcher.path, platform);
+    return key === root || key.startsWith(root.endsWith('/') ? root : `${root}/`);
+}
+const foldsCase = (platform) => platform === 'darwin' || platform === 'win32';
+const slash = (path, platform) => (platform === 'win32' ? path.replaceAll('\\', '/') : path);
+const keyOf = (path, platform) => foldsCase(platform) ? slash(path, platform).toLowerCase() : slash(path, platform);
+/** 把一个路径原样嵌进正则 */
+const literal = (path, platform) => slash(path, platform).replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+const MAC_BROWSERS = [
+    'Library/Application Support/Google',
+    'Library/Application Support/Chromium',
+    'Library/Application Support/BraveSoftware',
+    'Library/Application Support/Microsoft Edge',
+    'Library/Application Support/Microsoft Edge Beta',
+    'Library/Application Support/Microsoft Edge Dev',
+    'Library/Application Support/Microsoft Edge Canary',
+    'Library/Application Support/Firefox',
+    'Library/Application Support/Vivaldi',
+    'Library/Application Support/Arc',
+    'Library/Application Support/com.operasoftware.Opera',
+    'Library/Application Support/com.operasoftware.OperaGX',
+    'Library/Safari',
+    'Library/Containers/com.apple.Safari',
+    'Library/Cookies',
+];
+const LINUX_BROWSERS = [
+    '.config/google-chrome',
+    '.config/google-chrome-beta',
+    '.config/google-chrome-unstable',
+    '.config/chromium',
+    '.config/BraveSoftware',
+    '.config/microsoft-edge',
+    '.config/microsoft-edge-beta',
+    '.config/microsoft-edge-dev',
+    '.config/vivaldi',
+    '.config/opera',
+    '.mozilla',
+    'snap/firefox',
+    'snap/chromium',
+    'snap/brave',
+    // Flatpak 装的浏览器
+    '.var/app/org.mozilla.firefox',
+    '.var/app/com.google.Chrome',
+    '.var/app/org.chromium.Chromium',
+    '.var/app/com.brave.Browser',
+    '.var/app/com.microsoft.Edge',
+];
+/**
+ * git 目录里的落点（接在 git 目录后面）：钩子、配置、commondir（git 把它指向的目录当共用目录，配置与钩子都从那里取）；
+ * 子模块的名字可以带斜杠、可以嵌套，按目录名列不全，modules 整棵都算；worktree 的管理目录本身也算，免得整棵改名到位
+ */
+const GIT_DIR_LANDING = '(hooks(/|$)|config$|(.+/)?(config\\.worktree|commondir)$|modules(/|$)|worktrees(/[^/]+)?$)';
+/** 按家目录布局、用户家目录与平台生成三张清单 */
+export function protectedLists(input) {
+    const { paths, platform } = input;
+    const mac = platform === 'darwin';
+    const linux = platform === 'linux';
+    // 用户家目录是根目录（容器里常见）时拼出的是 /.ssh，不是 //.ssh
+    const userHome = input.userHome.replace(/\/+$/, '');
+    const inUserHome = (...rels) => rels.map(rel => ({ path: `${userHome}/${rel}` }));
+    /** 路径的上一级 */
+    const parentOf = (path) => path.slice(0, Math.max(path.lastIndexOf('/'), path.lastIndexOf('\\')));
+    /** 任何目录下的同名条目 */
+    const named = (tail) => ({ pattern: `/${tail}` });
+    return {
+        platform,
+        control: [
+            // 家目录下只有白纸、临时区与技能目录可写：公开区只经发布插件写入，编排定义只经定义工具写入。主配置与 secrets.yaml
+            // 常链接到别处（dotfiles 仓库），另以它们为根各列一条，才能按真实路径补上（withRealRoots）
+            { path: paths.home, except: [{ path: paths.stage.paper }, { path: paths.tmp }, { path: paths.self.skills }] },
+            { path: paths.config },
+            { path: paths.secrets },
+            // 守护进程加载的代码：安装集的依赖与构建产物（源码形态下另有各包的），以及安装集以外加载的插件
+            { path: `${paths.app}/node_modules` },
+            { path: `${paths.app}/dist` },
+            { pattern: `^${literal(paths.app, platform)}/packages/[^/]+/(dist|node_modules)(/|$)` },
+            ...input.codeDirs.map(path => ({ path })),
+            // npm 形态：每次启动在宿主上执行的入口，与插件发现读依赖的 package.json（源码形态下它们是在改的源码）
+            ...(input.form === 'npm'
+                ? [{ path: `${paths.app}/package.json` }, ...(input.entry ? [{ path: input.entry }] : [])]
+                : []),
+        ],
+        landing: [
+            // git：.git 本身（子模块工作树里文件形式的也是），与它里面的落点
+            named(`\\.git($|/${GIT_DIR_LANDING})`),
+            // shell 与登录
+            ...inUserHome('.profile', '.bashrc', '.bash_profile', '.bash_login', '.bash_logout', '.zshenv', '.zprofile', '.zshrc', '.zlogin', '.zlogout', '.kshrc', '.cshrc', '.tcshrc', '.login', '.logout', '.config/fish', '.ssh', '.gitconfig', '.config/git'),
+            ...(mac ? inUserHome('Library/LaunchAgents') : []),
+            ...(linux ? inUserHome('.config/systemd/user', '.config/autostart') : []),
+            // 装着上面这些的目录本身
+            ...['.config', ...(linux ? ['.config/systemd'] : []), ...(mac ? ['Library'] : [])].map(rel => ({
+                pattern: `^${literal(`${userHome}/${rel}`, platform)}$`,
+            })),
+            // 项目里会被工具自动执行的配置，其他代理与编辑器的可执行配置
+            named('\\.envrc$'),
+            named('\\.(vscode|claude|cursor|codex)$'),
+            named('\\.vscode/(tasks|settings)\\.json$'),
+            named('[^/]*\\.code-workspace$'),
+            named('\\.husky(/|$)'),
+            named('\\.pre-commit-config\\.yaml$'),
+            named('\\.claude/settings(\\.local)?\\.json$'),
+            named('\\.mcp\\.json$'),
+            named('\\.cursor/(hooks|mcp|permissions|sandbox|cli)\\.json$'),
+            named('\\.codex/(config\\.toml|hooks\\.json)$'),
+            named('\\.codex/(rules|hooks)(/|$)'),
+            // 项目指令与项目级设置；实例家目录自己也可能叫 .aalis，不算，但它里面（如白纸里的项目）再出现的照样算
+            named('(AALIS|AGENTS)\\.md$'),
+            { pattern: '/\\.aalis(/|$)', except: [{ path: paths.home }] },
+            { pattern: `^${literal(paths.home, platform)}/.+/\\.aalis(/|$)` },
+        ],
+        denyRead: [
+            // 家目录下只放行舞台、self 两个目录整个、本实例的日志与主配置；本会话临时区由触及按会话放回。secrets.yaml 另列一条，
+            // 理由同宿主控制面
+            {
+                path: paths.home,
+                except: [parentOf(paths.stage.paper), parentOf(paths.self.skills), paths.logs, paths.config].map(path => ({
+                    path,
+                })),
+            },
+            { path: paths.secrets },
+            // 同一用户下其他实例的家目录
+            { pattern: `^${literal(userHome, platform)}/\\.aalis(-[^/]*)?(/|$)`, except: [{ path: paths.home }] },
+            // 凭据
+            ...inUserHome('.ssh', '.aws', '.config/gh', '.gnupg', '.npmrc', '.netrc', '.git-credentials', '.docker/config.json', '.kube/config'),
+            ...(mac ? inUserHome('Library/Keychains') : []),
+            { pattern: '/\\.env[^/]*(/|$)', except: [{ pattern: '/\\.env\\.(example|sample|template)$' }] },
+            // 浏览器的配置与数据
+            ...(mac ? inUserHome(...MAC_BROWSERS) : []),
+            ...(linux ? inUserHome(...LINUX_BROWSERS) : []),
+        ],
+    };
+}
+/**
+ * 按真实路径补一份：以具体路径为根的规则，根的路径上有符号链接（`realOf` 给出的真实路径与写法不同）时，按真实路径再加
+ * 一份同样的规则，根下的例外随根挪过去。真实路径由调用方在激活时取好，路径不存在的不给；激活之后链接改指向不跟踪
+ */
+export function withRealRoots(lists, realOf) {
+    const { platform } = lists;
+    const expand = (rules) => rules.flatMap((rule) => {
+        if (!('path' in rule))
+            return [rule];
+        const root = rule.path;
+        const real = realOf(root);
+        if (real === undefined || keyOf(real, platform) === keyOf(root, platform))
+            return [rule];
+        const moved = (matcher) => 'path' in matcher && hit({ path: root }, matcher.path, platform)
+            ? { path: real + matcher.path.slice(root.length) }
+            : matcher;
+        return [rule, { path: real, ...(rule.except && { except: rule.except.map(moved) }) }];
+    });
+    return { ...lists, control: expand(lists.control), landing: expand(lists.landing), denyRead: expand(lists.denyRead) };
+}
+const NO_LOCAL = Object.freeze({ exec: 'none' });
+/**
+ * 解析触及：只有 owner（子任务随父会话）在 owner-only 的会话里有本地效果；子任务的档位、越界策略取与父会话较严的那个，
+ * 污点并上父会话的。落点按这份触及的 git 目录补上：git 目录不一定叫 .git（裸仓库、分开放的 git 目录），它本身与
+ * 它里面的落点照样拦；伪装裸仓库要的 HEAD 是落点，.git 与这些 git 目录里的除外
+ */
+export function resolveReach(input) {
+    const { principal } = input;
+    const parent = typeof principal === 'object' ? principal.subtaskOf : undefined;
+    if (parent?.exec === 'none' || principal === 'other' || input.roomClass !== 'owner-only')
+        return NO_LOCAL;
+    const tier = parent
+        ? ACCESS_TIERS[Math.min(ACCESS_TIERS.indexOf(input.tier), ACCESS_TIERS.indexOf(parent.tier))]
+        : input.tier;
+    const sources = [...new Set([...(input.tainted ?? []), ...(parent?.tainted ?? [])])];
+    const tainted = sources.length > 0 ? sources : undefined;
+    const { home, paper } = input.place;
+    const skills = input.paths.self.skills;
+    const workRoots = tier === 'workspace'
+        ? [...new Set([home, paper, ...(input.binding?.extraRoots ?? []), ...(input.binding?.worktrees ?? [])])]
+        : [];
+    const writable = tier === 'workspace'
+        ? [...new Set([...workRoots, ...input.gitDirs, input.sessionTmp, skills])]
+        : tier === 'readonly'
+            ? [input.sessionTmp]
+            : [];
+    const landing = [
+        ...input.lists.landing,
+        { pattern: '/HEAD$', except: [{ pattern: '/\\.git/' }, ...input.gitDirs.map(path => ({ path }))] },
+        ...input.gitDirs.map(dir => ({ pattern: `^${literal(dir, input.lists.platform)}($|/${GIT_DIR_LANDING})` })),
+    ];
+    return {
+        exec: tier === 'readonly' || tier === 'workspace' ? 'sandbox' : 'host',
+        tier,
+        onBoundary: parent?.onBoundary === 'deny' ? 'deny' : input.onBoundary,
+        ...(tainted ? { tainted } : {}),
+        home,
+        paper,
+        sessionTmp: input.sessionTmp,
+        skills,
+        workRoots,
+        writable,
+        othersContent: input.othersContent,
+        localPorts: input.localPorts,
+        lists: { ...input.lists, landing },
+    };
+}
+const ALLOW = { verdict: 'allow' };
+const TIER = { kind: 'tier' };
+const LANDING = { kind: 'landing' };
+const OUTBOUND = { kind: 'outbound' };
+const WRITE_PATH = { kind: 'boundary', target: 'write-path' };
+/** 判一个目标放行、问或拒 */
+export function judgeReach(reach, request) {
+    if (reach.exec === 'none')
+        return request.effect === 'network' ? ALLOW : { verdict: 'deny', rule: 'no-local-effect' };
+    const { tier, lists } = reach;
+    const ask = (reason) => tier !== 'confirm' && reach.onBoundary === 'deny'
+        ? { verdict: 'deny', rule: 'boundary-policy', reason }
+        : { verdict: 'ask', reason };
+    const within = (root, path) => matchesRule({ path: root }, path, lists.platform);
+    const listed = (rules, path) => rules.some(rule => matchesRule(rule, path, lists.platform));
+    // 受污染时全权以外的档位：送出会话的动作要问
+    const outbound = reach.tainted !== undefined && tier !== 'full';
+    switch (request.effect) {
+        case 'read':
+            return within(reach.sessionTmp, request.path) || !listed(lists.denyRead, request.path)
+                ? ALLOW
+                : { verdict: 'deny', rule: 'deny-read' };
+        case 'exec':
+            if (tier === 'full')
+                return ALLOW;
+            if (tier === 'confirm')
+                return ask(TIER);
+            return request.host ? ask({ kind: 'boundary', target: 'host-exec' }) : ALLOW;
+        case 'network':
+            if (outbound && request.via !== 'provider')
+                return ask(OUTBOUND);
+            return tier === 'readonly' ? ask({ kind: 'boundary', target: 'network' }) : ALLOW;
+        case 'write':
+            if ('path' in request) {
+                const { path } = request;
+                if (listed(lists.control, path))
+                    return { verdict: 'deny', rule: 'control-plane' };
+                if (listed(lists.landing, path))
+                    return tier === 'full' ? { verdict: 'allow', landing: true } : ask(LANDING);
+                if (!within(reach.skills, path)) {
+                    if (tier === 'full')
+                        return ALLOW;
+                    if (tier === 'confirm')
+                        return ask(TIER);
+                    return reach.writable.some(root => within(root, path)) ? ALLOW : ask(WRITE_PATH);
+                }
+            }
+            // 技能目录与编排定义：受污染时属于送出会话；干净时与工作区档的可写范围同等
+            if (outbound)
+                return ask(OUTBOUND);
+            if (tier === 'confirm')
+                return ask(TIER);
+            return tier === 'readonly' ? ask(WRITE_PATH) : ALLOW;
+    }
+}
+/** 按触及生成这条命令的沙箱策略；命令不在沙箱里执行的触及（没有本地效果、修改确认、全权）没有沙箱策略 */
+export function sandboxPolicyOf(reach, grants = {}) {
+    if (reach.exec !== 'sandbox')
+        throw new Error(`这次调用的命令不在沙箱里执行（${reach.exec}），没有沙箱策略`);
+    const { platform } = reach.lists;
+    const writePaths = grants.writePaths ?? [];
+    // 技能目录里批准过的那几处：只可能是写技能本身批准的（装着技能目录的范围外目录不算）
+    const approvedSkills = writePaths
+        .filter(path => matchesRule({ path: reach.skills }, path, platform))
+        .map(path => ({ path }));
+    return {
+        readDeny: reach.lists.denyRead,
+        readAllowWithin: [reach.sessionTmp],
+        provenanceDeny: reach.tainted ? [] : reach.othersContent,
+        write: [...reach.writable, ...writePaths],
+        writeDeny: reach.tainted
+            ? [...reach.lists.landing, { path: reach.skills, except: approvedSkills }]
+            : reach.lists.landing,
+        writeExceptions: [
+            ...reach.workRoots.map(root => ({
+                pattern: `^${literal(root, platform)}/(.*/)?node_modules/`,
+                ...(reach.tainted ? { except: [{ path: reach.skills }] } : {}),
+            })),
+            ...(grants.landingPaths ?? []).map(path => ({ pattern: `^${literal(path, platform)}$` })),
+        ],
+        controlDeny: reach.lists.control,
+        network: grants.network || (reach.tier === 'workspace' && !reach.tainted) ? 'on' : 'off',
+        localPorts: reach.localPorts,
+        unixSockets: [...reach.workRoots, reach.sessionTmp],
+    };
+}
+// ════════════════════════════════════════════════════════════
+// 凭据
+// ════════════════════════════════════════════════════════════
+/**
+ * 凭据的品牌：只有触及插件构造的凭据带它（不可枚举，展开复制出来的对象不带），存储与沙箱据此把不带它的对象当作没有凭据。
+ * 它防的是漏传、误传：第一方包由架构守卫禁止拼凭据，插件是可信代码，进程内蓄意伪造挡不住。登记在全局符号表里，
+ * 进程里装了两份本包时也认得
+ */
+export const REACH_CREDENTIAL = Symbol.for('@aalis/api-reach/credential');
+/** 带品牌符号的对象才是凭据 */
+export function isReachCredential(value) {
+    return typeof value === 'object' && value !== null && value[REACH_CREDENTIAL] === true;
+}
+/** 调用型服务：业务层就是提供者的形状 */
+export const reach = defineService('reach');
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,+DAA+D;AAC/D,KAAK;AACL,+DAA+D;AAE/D,2CAA2C;AAC3C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AA8BlF,6BAA6B;AAC7B,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,IAAY,EAAE,QAAyB;IACjF,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,GAAG,CAAC,OAAoB,EAAE,IAAY,EAAE,QAAyB;IACxE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,SAAS,IAAI,OAAO;QAAE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,QAAyB,EAAE,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC;AAC/F,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAAyB,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAAyB,EAAE,EAAE,CACxD,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACpF,kBAAkB;AAClB,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,QAAyB,EAAE,EAAE,CAC1D,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AA6B/D,MAAM,YAAY,GAAG;IACnB,oCAAoC;IACpC,sCAAsC;IACtC,2CAA2C;IAC3C,4CAA4C;IAC5C,iDAAiD;IACjD,gDAAgD;IAChD,mDAAmD;IACnD,qCAAqC;IACrC,qCAAqC;IACrC,iCAAiC;IACjC,qDAAqD;IACrD,uDAAuD;IACvD,gBAAgB;IAChB,qCAAqC;IACrC,iBAAiB;CAClB,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,uBAAuB;IACvB,4BAA4B;IAC5B,gCAAgC;IAChC,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxB,6BAA6B;IAC7B,4BAA4B;IAC5B,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,cAAc;IACd,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,8BAA8B;IAC9B,4BAA4B;IAC5B,gCAAgC;IAChC,4BAA4B;IAC5B,6BAA6B;CAC9B,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,4FAA4F,CAAC;AAErH,4BAA4B;AAC5B,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC;IACnC,wCAAwC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAc,EAAc,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,QAAQ,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACxG,aAAa;IACb,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1G,iBAAiB;IACjB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAY,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO;QACL,QAAQ;QACR,OAAO,EAAE;YACP,iEAAiE;YACjE,0DAA0D;YAC1D,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;YAC7G,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE;YACtB,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;YACvB,iDAAiD;YACjD,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,eAAe,EAAE;YACrC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,EAAE;YAC7B,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,0CAA0C,EAAE;YACvF,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,6DAA6D;YAC7D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK;gBACtB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,eAAe,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1F,CAAC,CAAC,EAAE,CAAC;SACR;QACD,OAAO,EAAE;YACP,sCAAsC;YACtC,KAAK,CAAC,aAAa,eAAe,GAAG,CAAC;YACtC,YAAY;YACZ,GAAG,UAAU,CACX,UAAU,EACV,SAAS,EACT,eAAe,EACf,aAAa,EACb,cAAc,EACd,SAAS,EACT,WAAW,EACX,QAAQ,EACR,SAAS,EACT,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,SAAS,EACT,cAAc,EACd,MAAM,EACN,YAAY,EACZ,aAAa,CACd;YACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,cAAc;YACd,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7F,OAAO,EAAE,IAAI,OAAO,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,EAAE,QAAQ,CAAC,GAAG;aACxD,CAAC,CAAC;YACH,gCAAgC;YAChC,KAAK,CAAC,WAAW,CAAC;YAClB,KAAK,CAAC,kCAAkC,CAAC;YACzC,KAAK,CAAC,oCAAoC,CAAC;YAC3C,KAAK,CAAC,yBAAyB,CAAC;YAChC,KAAK,CAAC,eAAe,CAAC;YACtB,KAAK,CAAC,8BAA8B,CAAC;YACrC,KAAK,CAAC,uCAAuC,CAAC;YAC9C,KAAK,CAAC,gBAAgB,CAAC;YACvB,KAAK,CAAC,uDAAuD,CAAC;YAC9D,KAAK,CAAC,wCAAwC,CAAC;YAC/C,KAAK,CAAC,6BAA6B,CAAC;YACpC,wDAAwD;YACxD,KAAK,CAAC,sBAAsB,CAAC;YAC7B,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE;YAC7D,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,mBAAmB,EAAE;SAClE;QACD,QAAQ,EAAE;YACR,qEAAqE;YACrE,WAAW;YACX;gBACE,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxG,IAAI;iBACL,CAAC,CAAC;aACJ;YACD,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;YACvB,gBAAgB;YAChB,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,yBAAyB,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE;YACrG,KAAK;YACL,GAAG,UAAU,CACX,MAAM,EACN,MAAM,EACN,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,CACf;YACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,EAAE;YAC/F,YAAY;YACZ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAqB,EAAE,MAA4C;IAC/F,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,MAAM,GAAG,CAAC,KAA0B,EAAE,EAAE,CAC5C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAc,EAAE;QACjC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,CAAC,OAAoB,EAAe,EAAE,CAClD,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAClD,CAAC,CAAC,OAAO,CAAC;QACd,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IACL,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;AACxH,CAAC;AA+DD,MAAM,QAAQ,GAAU,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM,IAAI,SAAS,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IAC1G,MAAM,IAAI,GAAG,MAAM;QACjB,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACf,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;IACvC,MAAM,SAAS,GACb,IAAI,KAAK,WAAW;QAClB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxG,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,QAAQ,GACZ,IAAI,KAAK,WAAW;QAClB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,IAAI,KAAK,UAAU;YACnB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;YACpB,CAAC,CAAC,EAAE,CAAC;IACX,MAAM,OAAO,GAAG;QACd,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO;QACtB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QAClG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,eAAe,GAAG,EAAE,CAAC,CAAC;KAC5G,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QACtE,IAAI;QACJ,UAAU,EAAE,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;QACrE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,IAAI;QACJ,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM;QACN,SAAS;QACT,QAAQ;QACR,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE;KACnC,CAAC;AACJ,CAAC;AA6BD,MAAM,KAAK,GAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClD,MAAM,IAAI,GAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9C,MAAM,OAAO,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACpD,MAAM,QAAQ,GAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACtD,MAAM,UAAU,GAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAE9E,kBAAkB;AAClB,MAAM,UAAU,UAAU,CAAC,KAAY,EAAE,OAAqB;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACtH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,MAAsB,EAAiB,EAAE,CACpD,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM;QAC/C,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE;QACtD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,CAAC,KAA0B,EAAE,IAAY,EAAE,EAAE,CAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,wBAAwB;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC;IAChE,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;gBACpF,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7C,KAAK,MAAM;YACT,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/E,KAAK,SAAS;YACZ,IAAI,QAAQ,IAAI,OAAO,CAAC,GAAG,KAAK,UAAU;gBAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjE,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACpF,KAAK,OAAO;YACV,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gBACtB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;gBACzB,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;gBACnF,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBAAE,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC7G,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;oBAChC,IAAI,IAAI,KAAK,MAAM;wBAAE,OAAO,KAAK,CAAC;oBAClC,IAAI,IAAI,KAAK,SAAS;wBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;oBACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC;YACD,uCAAuC;YACvC,IAAI,QAAQ;gBAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,CAAC;AACH,CAAC;AA2CD,wDAAwD;AACxD,MAAM,UAAU,eAAe,CAAC,KAAY,EAAE,SAAwB,EAAE;IACtE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC;IACtF,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,4CAA4C;IAC5C,MAAM,cAAc,GAAG,UAAU;SAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;SACnE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3B,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC9B,eAAe,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;QACnC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa;QACxD,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC;QACzC,SAAS,EAAE,KAAK,CAAC,OAAO;YACtB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAC1E,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;QACvB,eAAe,EAAE;YACf,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,sBAAsB;gBAC1D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;SAC1F;QACD,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAChC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QACxF,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,KAAK;AACL,+DAA+D;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAkB,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAoCzF,mBAAmB;AACnB,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAiC,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC;AACtH,CAAC;AA2BD,wBAAwB;AACxB,MAAM,CAAC,MAAM,KAAK,GAAG,aAAa,CAAe,OAAO,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,43 @@
 {
   "name": "@aalis/api-reach",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AalisLabs/Aalis.git",
+    "directory": "packages/api-reach"
+  },
+  "author": "Ace Nyan <ace@acenyan.com>",
+  "bugs": {
+    "url": "https://github.com/AalisLabs/Aalis/issues"
+  },
+  "homepage": "https://github.com/AalisLabs/Aalis#readme",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@aalis/api-authority": ">=0.11.0 <1.0.0",
+    "@aalis/api-host-paths": ">=0.1.0 <1.0.0",
+    "@aalis/api-session-manager": ">=0.11.0 <1.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0",
+    "@aalis/core": "0.20.0"
+  },
+  "peerDependencies": {
+    "@aalis/core": ">=0.20.0 <1.0.0"
+  },
+  "keywords": [
+    "aalis",
+    "aalis-api"
+  ],
+  "description": "触及契约：档位、按主体与房间类别定上限的触及解析、三张受保护清单、沙箱策略、触及凭据的类型与触及服务描述符",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch"
+  }
 }