@agent-phonon/protocol 0.9.1 → 0.10.0

package/dist/schemas/native-stop.d.ts

@@ -0,0 +1,162 @@
+import { z } from "zod";
+export declare const NativeStopTarget: z.ZodEffects<z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    sessionId: z.ZodBranded<z.ZodString, "SessionId">;
+    turnId: z.ZodOptional<z.ZodString>;
+    nodeId: z.ZodOptional<z.ZodString>;
+    state: z.ZodEnum<["pending", "confirmed", "unknown"]>;
+    observedAt: z.ZodString;
+    confirmation: z.ZodOptional<z.ZodEnum<["not_started", "process_tree_exit", "native_terminal"]>>;
+    reasonCode: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    sessionId: string & z.BRAND<"SessionId">;
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    turnId?: string | undefined;
+    nodeId?: string | undefined;
+    confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+    reasonCode?: string | undefined;
+}, {
+    sessionId: string;
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    turnId?: string | undefined;
+    nodeId?: string | undefined;
+    confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+    reasonCode?: string | undefined;
+}>, {
+    sessionId: string & z.BRAND<"SessionId">;
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    turnId?: string | undefined;
+    nodeId?: string | undefined;
+    confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+    reasonCode?: string | undefined;
+}, {
+    sessionId: string;
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    turnId?: string | undefined;
+    nodeId?: string | undefined;
+    confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+    reasonCode?: string | undefined;
+}>;
+export type NativeStopTarget = z.infer<typeof NativeStopTarget>;
+export declare const NativeStopProof: z.ZodEffects<z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    state: z.ZodEnum<["pending", "confirmed", "unknown"]>;
+    targets: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        sessionId: z.ZodBranded<z.ZodString, "SessionId">;
+        turnId: z.ZodOptional<z.ZodString>;
+        nodeId: z.ZodOptional<z.ZodString>;
+        state: z.ZodEnum<["pending", "confirmed", "unknown"]>;
+        observedAt: z.ZodString;
+        confirmation: z.ZodOptional<z.ZodEnum<["not_started", "process_tree_exit", "native_terminal"]>>;
+        reasonCode: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        sessionId: string & z.BRAND<"SessionId">;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }, {
+        sessionId: string;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }>, {
+        sessionId: string & z.BRAND<"SessionId">;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }, {
+        sessionId: string;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }>, "many">;
+    observedAt: z.ZodString;
+    reasonCode: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    targets: {
+        sessionId: string & z.BRAND<"SessionId">;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }[];
+    reasonCode?: string | undefined;
+}, {
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    targets: {
+        sessionId: string;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }[];
+    reasonCode?: string | undefined;
+}>, {
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    targets: {
+        sessionId: string & z.BRAND<"SessionId">;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }[];
+    reasonCode?: string | undefined;
+}, {
+    version: 1;
+    state: "unknown" | "pending" | "confirmed";
+    observedAt: string;
+    targets: {
+        sessionId: string;
+        version: 1;
+        state: "unknown" | "pending" | "confirmed";
+        observedAt: string;
+        turnId?: string | undefined;
+        nodeId?: string | undefined;
+        confirmation?: "not_started" | "process_tree_exit" | "native_terminal" | undefined;
+        reasonCode?: string | undefined;
+    }[];
+    reasonCode?: string | undefined;
+}>;
+export type NativeStopProof = z.infer<typeof NativeStopProof>;
+//# sourceMappingURL=native-stop.d.ts.map

package/dist/schemas/native-stop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-stop.d.ts","sourceRoot":"","sources":["../../src/schemas/native-stop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKuD,CAAC;AACrF,MAAM,MAAM,gBAAgB,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC9D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIiF,CAAC;AAC9G,MAAM,MAAM,eAAe,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/schemas/native-stop.js

@@ -0,0 +1,14 @@
+import { z } from "zod";
+import { SessionId, Timestamp } from "./common.js";
+export const NativeStopTarget = z.object({
+    version: z.literal(1), sessionId: SessionId, turnId: z.string().optional(), nodeId: z.string().optional(),
+    state: z.enum(["pending", "confirmed", "unknown"]), observedAt: Timestamp,
+    confirmation: z.enum(["not_started", "process_tree_exit", "native_terminal"]).optional(),
+    reasonCode: z.string().max(128).optional(),
+}).strict().refine(value => value.state !== "confirmed" || value.confirmation !== undefined);
+export const NativeStopProof = z.object({
+    version: z.literal(1), state: z.enum(["pending", "confirmed", "unknown"]),
+    targets: z.array(NativeStopTarget).max(256), observedAt: Timestamp,
+    reasonCode: z.string().max(128).optional(),
+}).strict().refine(value => value.state !== "confirmed" || value.targets.every(target => target.state === "confirmed"));
+//# sourceMappingURL=native-stop.js.map

package/dist/schemas/native-stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-stop.js","sourceRoot":"","sources":["../../src/schemas/native-stop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAC,SAAS,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClG,KAAK,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAC,WAAW,EAAC,SAAS,CAAC,CAAC,EAAC,UAAU,EAAC,SAAS;IACpE,YAAY,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAC,mBAAmB,EAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrF,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,KAAK,KAAG,WAAW,IAAE,KAAK,CAAC,YAAY,KAAG,SAAS,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,eAAe,GAAC,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,KAAK,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAC,WAAW,EAAC,SAAS,CAAC,CAAC;IACpE,OAAO,EAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,UAAU,EAAC,SAAS;IAC/D,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,KAAK,KAAG,WAAW,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,KAAG,WAAW,CAAC,CAAC,CAAC"}

package/dist/schemas/policy.d.ts

@@ -22,23 +22,43 @@ export declare const TenantPolicy: z.ZodObject<{
     allowUrlSkillInstall: z.ZodDefault<z.ZodBoolean>;
     /** 是否允许从本地任意路径安装 skill（localPath 源，可复制任意目录 → 任意读）。默认 false。 */
     allowLocalPathSkillInstall: z.ZodDefault<z.ZodBoolean>;
+    /** Explicit human-owned recovery permission; never implied by trustLocal. */
+    allowSkillRecovery: z.ZodDefault<z.ZodBoolean>;
     /** 是否允许物理删盘（project.remove deleteFiles / worktree force 等）。默认 false。 */
     allowDeleteFiles: z.ZodDefault<z.ZodBoolean>;
     /** document.send 是否允许发送项目/worktree 目录之外的文件。默认 false（project-scoped）。 */
     allowExternalDocuments: z.ZodDefault<z.ZodBoolean>;
     /** env.list reveal=true 是否允许返回环境变量明文。默认 false（只能脱敏查看）。 */
     allowEnvReveal: z.ZodDefault<z.ZodBoolean>;
+    /** 是否允许 env.set/env.delete 修改设备本地环境变量。默认 false。 */
+    allowEnvWrite: z.ZodDefault<z.ZodBoolean>;
     /**
      * 是否允许 project.exec 跨设备执行任意命令（A2/A3）。默认 false（严格）。
      * exec 能指定任意 binary 且继承环境，等同设备远程代码执行——必须独立 gate，
      * 不能只靠 allowedMethods。trustLocal（单机自用）下默认开。
      */
     allowExec: z.ZodDefault<z.ZodBoolean>;
+    /** Host-level creation/editing of isolated employee profiles. Never implied by trustLocal. */
+    allowEmployeeProfiles: z.ZodDefault<z.ZodBoolean>;
+    /** Explicit host consent for new controlled-root workspaces, never arbitrary path adoption. */
+    allowProjectProvision: z.ZodDefault<z.ZodBoolean>;
+    /** Separate durable Phonon history; never implied by project or filesystem access. */
+    allowConversationArchives: z.ZodDefault<z.ZodBoolean>;
+    /** Per configured server authority and tenant; no automatic history eviction. */
+    maxConversationArchiveBytes: z.ZodDefault<z.ZodNumber>;
     /**
      * 是否允许 device.fs.* 浏览整个文件系统（A4）。默认 true（保留能力）。
      * 设为 false 可把 device.fs.list/roots 锁到 allowedProjectRoots；需要锁定的部署可关。
      */
     allowDeviceFsBrowse: z.ZodDefault<z.ZodBoolean>;
+    /** 是否允许只读宿主机维护诊断/读取脱敏配置。默认 false。 */
+    allowMaintenanceRead: z.ZodDefault<z.ZodBoolean>;
+    /** 是否允许修改本地预注册的 JSON 配置（自动备份 + 乐观锁）。默认 false。 */
+    allowMaintenanceConfigWrite: z.ZodDefault<z.ZodBoolean>;
+    /** 是否允许更新本地预注册的用户态 npm/pnpm 包。默认 false。 */
+    allowMaintenancePackageUpdate: z.ZodDefault<z.ZodBoolean>;
+    /** 是否允许重启本地预注册的服务。默认 false。 */
+    allowMaintenanceServiceRestart: z.ZodDefault<z.ZodBoolean>;
     /** 单文件上传上限（字节）；超出走 prepare_upload 或拒绝。 */
     maxUploadBytes: z.ZodOptional<z.ZodNumber>;
     /** 敏感路径黑名单（即使在 allowedProjectRoots 内也拒绝，如 .ssh/.aws/.env）。 */
@@ -50,11 +70,21 @@ export declare const TenantPolicy: z.ZodObject<{
     allowGlobalSkillInstall: boolean;
     allowUrlSkillInstall: boolean;
     allowLocalPathSkillInstall: boolean;
+    allowSkillRecovery: boolean;
     allowDeleteFiles: boolean;
     allowExternalDocuments: boolean;
     allowEnvReveal: boolean;
+    allowEnvWrite: boolean;
     allowExec: boolean;
+    allowEmployeeProfiles: boolean;
+    allowProjectProvision: boolean;
+    allowConversationArchives: boolean;
+    maxConversationArchiveBytes: number;
     allowDeviceFsBrowse: boolean;
+    allowMaintenanceRead: boolean;
+    allowMaintenanceConfigWrite: boolean;
+    allowMaintenancePackageUpdate: boolean;
+    allowMaintenanceServiceRestart: boolean;
     denyPathPatterns: string[];
     maxUploadBytes?: number | undefined;
 }, {
@@ -64,11 +94,21 @@ export declare const TenantPolicy: z.ZodObject<{
     allowGlobalSkillInstall?: boolean | undefined;
     allowUrlSkillInstall?: boolean | undefined;
     allowLocalPathSkillInstall?: boolean | undefined;
+    allowSkillRecovery?: boolean | undefined;
     allowDeleteFiles?: boolean | undefined;
     allowExternalDocuments?: boolean | undefined;
     allowEnvReveal?: boolean | undefined;
+    allowEnvWrite?: boolean | undefined;
     allowExec?: boolean | undefined;
+    allowEmployeeProfiles?: boolean | undefined;
+    allowProjectProvision?: boolean | undefined;
+    allowConversationArchives?: boolean | undefined;
+    maxConversationArchiveBytes?: number | undefined;
     allowDeviceFsBrowse?: boolean | undefined;
+    allowMaintenanceRead?: boolean | undefined;
+    allowMaintenanceConfigWrite?: boolean | undefined;
+    allowMaintenancePackageUpdate?: boolean | undefined;
+    allowMaintenanceServiceRestart?: boolean | undefined;
     maxUploadBytes?: number | undefined;
     denyPathPatterns?: string[] | undefined;
 }>;
@@ -89,12 +129,12 @@ export declare const PolicyDecision: z.ZodObject<{
     projectId: z.ZodOptional<z.ZodBranded<z.ZodString, "ProjectId">>;
 }, "strip", z.ZodTypeAny, {
     allowed: boolean;
-    reason?: string | undefined;
     projectId?: (string & z.BRAND<"ProjectId">) | undefined;
+    reason?: string | undefined;
 }, {
     allowed: boolean;
-    reason?: string | undefined;
     projectId?: string | undefined;
+    reason?: string | undefined;
 }>;
 export type PolicyDecision = z.infer<typeof PolicyDecision>;
 //# sourceMappingURL=policy.d.ts.map

package/dist/schemas/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/schemas/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;GAQG;AAEH,yBAAyB;AACzB,eAAO,MAAM,YAAY;IACvB,qDAAqD;;IAErD,+BAA+B;;IAE/B,6CAA6C;;IAE7C,mDAAmD;;IAEnD,6CAA6C;;IAE7C,+DAA+D;;IAE/D,wEAAwE;;IAExE,wEAAwE;;IAExE,0DAA0D;;IAE1D;;;;OAIG;;IAEH;;;OAGG;;IAEH,0CAA0C;;IAE1C,8DAA8D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU9D,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,kCAAkC;AAClC,eAAO,MAAM,qBAAqB,EAAE,YAAqC,CAAC;AAE1E;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAOnF;AAED,oDAAoD;AACpD,eAAO,MAAM,cAAc;;IAEzB,oFAAoF;;IAEpF,yBAAyB;;;;;;;;;;EAEzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/schemas/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;GAQG;AAEH,yBAAyB;AACzB,eAAO,MAAM,YAAY;IACvB,qDAAqD;;IAErD,+BAA+B;;IAE/B,6CAA6C;;IAE7C,mDAAmD;;IAEnD,6CAA6C;;IAE7C,+DAA+D;;IAE/D,6EAA6E;;IAE7E,wEAAwE;;IAExE,wEAAwE;;IAExE,0DAA0D;;IAE1D,mDAAmD;;IAEnD;;;;OAIG;;IAEH,8FAA8F;;IAE9F,+FAA+F;;IAE/F,sFAAsF;;IAEtF,iFAAiF;;IAEjF;;;OAGG;;IAEH,qCAAqC;;IAErC,iDAAiD;;IAEjD,2CAA2C;;IAE3C,+BAA+B;;IAE/B,0CAA0C;;IAE1C,8DAA8D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU9D,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,kCAAkC;AAClC,eAAO,MAAM,qBAAqB,EAAE,YAAqC,CAAC;AAE1E;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAOnF;AAED,oDAAoD;AACpD,eAAO,MAAM,cAAc;;IAEzB,oFAAoF;;IAEpF,yBAAyB;;;;;;;;;;EAEzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/schemas/policy.js

@@ -23,23 +23,43 @@ export const TenantPolicy = z.object({
     allowUrlSkillInstall: z.boolean().default(false),
     /** 是否允许从本地任意路径安装 skill（localPath 源，可复制任意目录 → 任意读）。默认 false。 */
     allowLocalPathSkillInstall: z.boolean().default(false),
+    /** Explicit human-owned recovery permission; never implied by trustLocal. */
+    allowSkillRecovery: z.boolean().default(false),
     /** 是否允许物理删盘（project.remove deleteFiles / worktree force 等）。默认 false。 */
     allowDeleteFiles: z.boolean().default(false),
     /** document.send 是否允许发送项目/worktree 目录之外的文件。默认 false（project-scoped）。 */
     allowExternalDocuments: z.boolean().default(false),
     /** env.list reveal=true 是否允许返回环境变量明文。默认 false（只能脱敏查看）。 */
     allowEnvReveal: z.boolean().default(false),
+    /** 是否允许 env.set/env.delete 修改设备本地环境变量。默认 false。 */
+    allowEnvWrite: z.boolean().default(false),
     /**
      * 是否允许 project.exec 跨设备执行任意命令（A2/A3）。默认 false（严格）。
      * exec 能指定任意 binary 且继承环境，等同设备远程代码执行——必须独立 gate，
      * 不能只靠 allowedMethods。trustLocal（单机自用）下默认开。
      */
     allowExec: z.boolean().default(false),
+    /** Host-level creation/editing of isolated employee profiles. Never implied by trustLocal. */
+    allowEmployeeProfiles: z.boolean().default(false),
+    /** Explicit host consent for new controlled-root workspaces, never arbitrary path adoption. */
+    allowProjectProvision: z.boolean().default(false),
+    /** Separate durable Phonon history; never implied by project or filesystem access. */
+    allowConversationArchives: z.boolean().default(false),
+    /** Per configured server authority and tenant; no automatic history eviction. */
+    maxConversationArchiveBytes: z.number().int().positive().safe().default(10 * 1024 * 1024 * 1024),
     /**
      * 是否允许 device.fs.* 浏览整个文件系统（A4）。默认 true（保留能力）。
      * 设为 false 可把 device.fs.list/roots 锁到 allowedProjectRoots；需要锁定的部署可关。
      */
     allowDeviceFsBrowse: z.boolean().default(true),
+    /** 是否允许只读宿主机维护诊断/读取脱敏配置。默认 false。 */
+    allowMaintenanceRead: z.boolean().default(false),
+    /** 是否允许修改本地预注册的 JSON 配置（自动备份 + 乐观锁）。默认 false。 */
+    allowMaintenanceConfigWrite: z.boolean().default(false),
+    /** 是否允许更新本地预注册的用户态 npm/pnpm 包。默认 false。 */
+    allowMaintenancePackageUpdate: z.boolean().default(false),
+    /** 是否允许重启本地预注册的服务。默认 false。 */
+    allowMaintenanceServiceRestart: z.boolean().default(false),
     /** 单文件上传上限（字节）；超出走 prepare_upload 或拒绝。 */
     maxUploadBytes: z.number().int().positive().optional(),
     /** 敏感路径黑名单（即使在 allowedProjectRoots 内也拒绝，如 .ssh/.aws/.env）。 */

package/dist/schemas/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/schemas/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;;GAQG;AAEH,yBAAyB;AACzB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,qDAAqD;IACrD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,+BAA+B;IAC/B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,6CAA6C;IAC7C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,mDAAmD;IACnD,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnD,6CAA6C;IAC7C,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,wEAAwE;IACxE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,wEAAwE;IACxE,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClD,0DAA0D;IAC1D,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC;;;OAGG;IACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,0CAA0C;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,8DAA8D;IAC9D,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;QAC5C,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,gBAAgB;QAChB,YAAY;QACZ,UAAU;QACV,kBAAkB;KACnB,CAAC;CACH,CAAC,CAAC;AAGH,kCAAkC;AAClC,MAAM,CAAC,MAAM,qBAAqB,GAAiB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAE1E;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAwB;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,oFAAoF;IACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,yBAAyB;IACzB,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/schemas/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;;GAQG;AAEH,yBAAyB;AACzB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,qDAAqD;IACrD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,+BAA+B;IAC/B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,6CAA6C;IAC7C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,mDAAmD;IACnD,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnD,6CAA6C;IAC7C,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,6EAA6E;IAC7E,kBAAkB,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,wEAAwE;IACxE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,wEAAwE;IACxE,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClD,0DAA0D;IAC1D,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,mDAAmD;IACnD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,8FAA8F;IAC9F,qBAAqB,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,+FAA+F;IAC/F,qBAAqB,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,sFAAsF;IACtF,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrD,iFAAiF;IACjF,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAChG;;;OAGG;IACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,qCAAqC;IACrC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,iDAAiD;IACjD,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,2CAA2C;IAC3C,6BAA6B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzD,+BAA+B;IAC/B,8BAA8B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1D,0CAA0C;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,8DAA8D;IAC9D,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;QAC5C,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,gBAAgB;QAChB,YAAY;QACZ,UAAU;QACV,kBAAkB;KACnB,CAAC;CACH,CAAC,CAAC;AAGH,kCAAkC;AAClC,MAAM,CAAC,MAAM,qBAAqB,GAAiB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAE1E;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAwB;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,oFAAoF;IACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,yBAAyB;IACzB,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC"}