@agentearth.ai/cli 0.1.0-beta.0

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAY,qBAAqB,EAAE,UAAU,EAAkB,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAA6C,MAAM,uBAAuB,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,iDAAiD;IACjD,mEAAmE;IACnE,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAChD,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACvC,OAAO;IACT,CAAC;IAED,wCAAwC;IACxC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,2BAA2B;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,+BAA+B;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,MAAM,OAAO,GAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3E,uCAAuC;IACvC,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,yCAAyC;IACzC,IAAI,cAAc,GAA0B,IAAI,CAAC;IAEjD,IAAI,CAAC;QACH,qCAAqC;QACrC,sBAAsB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvD,iCAAiC;QACjC,wBAAwB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7D,qDAAqD;QACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3E,gBAAgB;QAChB,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjC,mDAAmD;QACnD,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;IAC/G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kCAAkC;QAClC,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAChD,gBAAgB;QAChB,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACnC,mCAAmC;QACnC,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACvC,yBAAyB;QACzB,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;IACzH,CAAC;YAAS,CAAC;QACT,qCAAqC;QACrC,MAAM,uBAAuB,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,OAAkC;IACjF,qEAAqE;IACrE,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,UAAU,CAAC,iDAAiD,EAAE,+BAA+B,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe,EAAE,IAAc;IAC/D,oDAAoD;IACpD,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,UAAU,CAAC,+BAA+B,OAAO,GAAG,EAAE,UAAU,OAAO,GAAG,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,OAAuB,EAAE,IAAc;IAC9E,kCAAkC;IAClC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,oBAAoB;IACpB,MAAM,UAAU,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ;IACf,wCAAwC;IACxC,OAAO,kBAAkB,WAAW;;;;;;;;;;;;;;;;;;;;CAoBrC,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B,EAAE,YAAqB;IAC1E,+BAA+B;IAC/B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qDAAqD;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,mDAAmD;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,IAAc,EAAE,OAAuB,EAAE,UAAkB;IAC1G,4DAA4D;IAC5D,gDAAgD;IAChD,gDAAgD;IAChD,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC,QAAQ,EAAE,EAAE,EAAE;YACxC,WAAW,EAAE,UAAU;YACvB,KAAK,EAAE,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,4DAA4D;IAC5D,OAAO,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE;QACnD,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA2B,EAC3B,IAAc,EACd,OAAuB,EACvB,KAAe,EACf,UAAkB;IAElB,iCAAiC;IACjC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE;QAC7D,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC;QAC1D,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,SAAS,EAAE,KAAK,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAA4B,EAAE,OAAkC;IACrG,gDAAgD;IAChD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,0CAA0C;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,yCAAyC;QACzC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,sBAAsB;IACtB,IAAI,OAAO,KAAK,OAAO;WAClB,OAAO,KAAK,WAAW;WACvB,OAAO,KAAK,MAAM;WAClB,OAAO,KAAK,QAAQ;WACpB,OAAO,KAAK,SAAS;WACrB,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,mCAAmC;IACnC,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO,cAAc,CAAC;IAC1E,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC;IAC/C,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC/C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,IAAc,EAAE,YAAyC,EAAE;IACrG,8BAA8B;IAC9B,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,sCAAsC;IACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,mBAAmB,CAAC;YACzB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YACvB,uDAAuD;YACvD,MAAM,EAAE,SAAS,CAAC,aAAa,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAClE,CAAC,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,yCAAyC;IACzC,OAAO,mBAAmB,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,uDAAuD;IACvD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,yCAAyC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,kCAAkC;QAClC,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAe;IAC3C,kCAAkC;IAClC,OAAO,IAAI,KAAK,aAAa;WACxB,IAAI,KAAK,eAAe;WACxB,IAAI,KAAK,SAAS;WAClB,IAAI,KAAK,0BAA0B;WACnC,IAAI,KAAK,sBAAsB;WAC/B,IAAI,KAAK,wBAAwB;WACjC,IAAI,KAAK,gBAAgB;WACzB,IAAI,KAAK,mBAAmB;WAC5B,IAAI,KAAK,gBAAgB;WACzB,IAAI,KAAK,0BAA0B;WACnC,IAAI,KAAK,sBAAsB;WAC/B,IAAI,KAAK,eAAe;WACxB,IAAI,KAAK,sBAAsB;WAC/B,IAAI,KAAK,oBAAoB;QAChC,kDAAkD;WAC/C,IAAI,KAAK,SAAS,CAAC;AAC1B,CAAC"}

package/dist/storage/credentials.d.ts

@@ -0,0 +1,9 @@
+import type { GlobalOptions } from "../types/cli.js";
+export interface AgentEarthCredentials {
+    api_key: string;
+    saved_at: string;
+}
+export declare function readCredentials(): Promise<AgentEarthCredentials | null>;
+export declare function writeCredentials(apiKey: string): Promise<void>;
+export declare function resolveApiKey(options: GlobalOptions): Promise<string>;
+export declare function resolveLoginApiKey(options: GlobalOptions): string;

package/dist/storage/credentials.js

@@ -0,0 +1,97 @@
+/**
+ * API key 凭据存储模块。
+ *
+ * `ae login` 会把验证通过的 API key 写入 credentials.json。
+ * 后续业务命令读取 key 的优先级是：
+ * 1. 当前命令的 `--api-key`；
+ * 2. 环境变量 `AGENT_EARTH_API_KEY`；
+ * 3. 本地 credentials.json。
+ *
+ * 本文件只负责本地读写和优先级选择，不负责后端验证。
+ */
+import { readFile, writeFile } from "node:fs/promises";
+import { CliError } from "../core/errors.js";
+import { protectSensitiveFile } from "./fileProtection.js";
+import { ensureAgentEarthDir, getCredentialsPath } from "./paths.js";
+export async function readCredentials() {
+    try {
+        // readFile 读取文本文件；utf8 表示按 UTF-8 字符串解码。
+        const raw = await readFile(getCredentialsPath(), "utf8");
+        // credentials.json 可能被用户或外部程序改坏，所以解析后还要做运行时结构校验。
+        return normalizeCredentials(JSON.parse(raw));
+    }
+    catch {
+        // 文件不存在、没有权限、JSON 损坏，都当作没有可用本地凭据。
+        return null;
+    }
+}
+export async function writeCredentials(apiKey) {
+    // 写文件前先确保数据目录存在。
+    await ensureAgentEarthDir();
+    // 进入落盘前再做一次 trim，确保 credentials.json 不保存前后空白。
+    const normalizedApiKey = apiKey.trim();
+    const credentials = {
+        api_key: normalizedApiKey,
+        saved_at: new Date().toISOString()
+    };
+    const filePath = getCredentialsPath();
+    // mode=0o600 表示尽量只让当前用户读写；Windows 还会在写入后显式收紧 ACL。
+    await writeFile(filePath, `${JSON.stringify(credentials, null, 2)}\n`, { mode: 0o600 });
+    // 写入后立即收紧权限：Windows 用当前用户 ACL，macOS/Linux 用 0o600。
+    await protectSensitiveFile(filePath);
+}
+export async function resolveApiKey(options) {
+    // 1. 命令行临时 key 优先级最高，适合调试或一次性覆盖。
+    const optionApiKey = normalizeApiKey(options.apiKey);
+    if (optionApiKey) {
+        return optionApiKey;
+    }
+    // 2. 环境变量适合 CI 或不希望落盘的运行环境。
+    const envApiKey = normalizeApiKey(process.env.AGENT_EARTH_API_KEY);
+    if (envApiKey) {
+        return envApiKey;
+    }
+    // 3. 正常安装后，业务命令会从 credentials.json 读取 key。
+    const credentials = await readCredentials();
+    if (credentials?.api_key) {
+        return credentials.api_key;
+    }
+    // 三个来源都没有时，命令无法请求后端。
+    throw new CliError("auth_missing", "No API key available.", "Pipe the API key into ae login --api-key-stdin.");
+}
+export function resolveLoginApiKey(options) {
+    // login 是“写入新 key”的命令，所以不能读取旧 credentials。
+    const apiKey = normalizeApiKey(options.apiKey) ?? normalizeApiKey(process.env.AGENT_EARTH_API_KEY);
+    if (!apiKey) {
+        throw new CliError("auth_missing", "No API key provided.", "Pipe the API key into ae login --api-key-stdin.");
+    }
+    return apiKey;
+}
+function normalizeApiKey(value) {
+    // 所有来源先 trim：空白不是 key 的一部分，不能被发送给后端或写入 credentials。
+    const normalized = value?.trim();
+    if (!normalized) {
+        return null;
+    }
+    return normalized;
+}
+function normalizeCredentials(value) {
+    // 只有非空字符串 api_key 才能作为真实凭据；损坏结构一律当作没有本地凭据。
+    if (!isRecord(value) || typeof value.api_key !== "string") {
+        return null;
+    }
+    const apiKey = value.api_key.trim();
+    if (!apiKey) {
+        return null;
+    }
+    return {
+        api_key: apiKey,
+        // saved_at 只用于排查；缺失或类型不对时不影响 key 读取。
+        saved_at: typeof value.saved_at === "string" ? value.saved_at : ""
+    };
+}
+function isRecord(value) {
+    // object 包含数组，这里明确排除数组，避免把奇怪结构当成 credentials。
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=credentials.js.map

package/dist/storage/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/storage/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AASrE,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;QACzD,iDAAiD;QACjD,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,iBAAiB;IACjB,MAAM,mBAAmB,EAAE,CAAC;IAC5B,8CAA8C;IAC9C,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAEvC,MAAM,WAAW,GAA0B;QACzC,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IAEF,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAEtC,kDAAkD;IAClD,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAExF,mDAAmD;IACnD,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB;IACxD,iCAAiC;IACjC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2CAA2C;IAC3C,MAAM,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;IAC5C,IAAI,WAAW,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,qBAAqB;IACrB,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,uBAAuB,EAAE,iDAAiD,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAsB;IACvD,2CAA2C;IAC3C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEnG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,sBAAsB,EAAE,iDAAiD,CAAC,CAAC;IAChH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,oDAAoD;IACpD,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,2CAA2C;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM;QACf,qCAAqC;QACrC,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,8CAA8C;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/storage/fileProtection.d.ts

@@ -0,0 +1,12 @@
+export interface FileProtectionCommandResult {
+    stdout: string;
+    stderr: string;
+}
+export type FileProtectionCommandRunner = (command: string, args: readonly string[]) => Promise<FileProtectionCommandResult>;
+export interface ProtectSensitiveFileOptions {
+    platform?: NodeJS.Platform;
+    runner?: FileProtectionCommandRunner;
+}
+export declare function pathExists(filePath: string): Promise<boolean>;
+export declare function protectSensitiveFile(filePath: string, options?: ProtectSensitiveFileOptions): Promise<void>;
+export declare function parseWindowsUserSid(output: string): string | null;

package/dist/storage/fileProtection.js

@@ -0,0 +1,51 @@
+/**
+ * 敏感本地文件权限保护模块。
+ *
+ * credentials.json 保存 API key。这里集中处理“当前用户可访问”的文件权限：
+ * macOS/Linux 使用 0o600；Windows 用当前用户 SID 收紧文件 ACL。
+ */
+import { execFile } from "node:child_process";
+import { chmod, stat } from "node:fs/promises";
+import { platform as currentPlatform } from "node:os";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+export async function pathExists(filePath) {
+    // 写入前只需要区分“是否已经有这个文件”，用于避免重复执行昂贵的 ACL 命令。
+    try {
+        await stat(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function protectSensitiveFile(filePath, options = {}) {
+    const targetPlatform = options.platform ?? currentPlatform();
+    if (targetPlatform === "win32") {
+        await protectWindowsSensitiveFile(filePath, options.runner ?? runCommand);
+        return;
+    }
+    await chmod(filePath, 0o600);
+}
+async function protectWindowsSensitiveFile(filePath, runner) {
+    // SID 比用户名稳定，能避开本地化用户名、域账号和空格转义问题。
+    const whoami = await runner("whoami", ["/user", "/fo", "csv", "/nh"]);
+    const sid = parseWindowsUserSid(whoami.stdout);
+    if (!sid) {
+        throw new Error("Unable to resolve current Windows user SID.");
+    }
+    // /inheritance:r 移除继承 ACE；/grant:r 用当前用户 SID 覆盖授权。
+    // 给当前用户 Full Control 是为了后续重复 login 时仍能覆盖文件和再次调整 ACL。
+    await runner("icacls", [filePath, "/inheritance:r", "/grant:r", `*${sid}:F`]);
+}
+export function parseWindowsUserSid(output) {
+    return output.match(/S-\d-\d+(?:-\d+)+/)?.[0] ?? null;
+}
+async function runCommand(command, args) {
+    const result = await execFileAsync(command, [...args], { encoding: "utf8", windowsHide: true });
+    return {
+        stdout: String(result.stdout),
+        stderr: String(result.stderr)
+    };
+}
+//# sourceMappingURL=fileProtection.js.map

package/dist/storage/fileProtection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileProtection.js","sourceRoot":"","sources":["../../src/storage/fileProtection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAiB1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,0CAA0C;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB,EAAE,UAAuC,EAAE;IACpG,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;IAE7D,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,QAAgB,EAAE,MAAmC;IAC9F,mCAAmC;IACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,mDAAmD;IACnD,qDAAqD;IACrD,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,IAAuB;IAChE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/storage/paths.d.ts

@@ -0,0 +1,6 @@
+export declare function getAgentEarthDir(): string;
+export declare function getCredentialsPath(): string;
+export declare function getSessionPath(): string;
+export declare function getTelemetryQueuePath(): string;
+export declare function getUpdateCachePath(): string;
+export declare function ensureAgentEarthDir(): Promise<void>;

package/dist/storage/paths.js

@@ -0,0 +1,55 @@
+/**
+ * 本地文件路径管理模块。
+ *
+ * CLI 会在用户机器上保存四类本地文件：
+ * 1. credentials.json：保存 ae login 写入的 API key；
+ * 2. session.json：保存 recommend/list/detail 返回的工具缓存；
+ * 3. events.jsonl：保存尚未上传的 CLI 埋点。
+ * 4. update-cache.json：保存更新检查缓存。
+ *
+ * 这个文件只负责计算路径和创建目录，不负责读写具体文件内容。
+ */
+import { mkdir } from "node:fs/promises";
+import { homedir, platform } from "node:os";
+import path from "node:path";
+export function getAgentEarthDir() {
+    // Windows 使用 LocalAppData，避免把 API key 放到可能漫游同步的 Roaming 目录。
+    if (platform() === "win32") {
+        // 测试里会通过 LOCALAPPDATA 环境变量指向临时目录。
+        return path.join(resolveLocalAppData(), "AgentEarth");
+    }
+    // macOS/Linux 按惯例放到 ~/.config/agentearth。
+    return path.join(homedir(), ".config", "agentearth");
+}
+function resolveLocalAppData() {
+    const localAppData = process.env.LOCALAPPDATA?.trim();
+    // LOCALAPPDATA 为空白时不能作为目录，否则 credentials 可能落到当前工作目录。
+    return localAppData || path.join(homedir(), "AppData", "Local");
+}
+export function getCredentialsPath() {
+    // credentials 文件保存敏感 API key。
+    return path.join(getAgentEarthDir(), "credentials.json");
+}
+export function getSessionPath() {
+    // session 文件保存工具缓存，不保存 API key。
+    return path.join(getAgentEarthDir(), "session.json");
+}
+export function getTelemetryQueuePath() {
+    // events.jsonl 一行一个埋点事件，上传成功后从队头删除。
+    return path.join(getAgentEarthDir(), "events.jsonl");
+}
+export function getUpdateCachePath() {
+    // update-cache 保存版本检查结果，不保存 API key。
+    return path.join(getAgentEarthDir(), "update-cache.json");
+}
+export async function ensureAgentEarthDir() {
+    const dir = getAgentEarthDir();
+    // recursive=true 表示父目录不存在时一起创建。
+    // mode=0o700 表示当前用户可读写执行，其他用户无权限；Windows 上会部分依赖 ACL。
+    await mkdir(dir, { recursive: true, mode: 0o700 });
+    // Windows 的 chmod 语义和 Unix 不完全一致，所以只在非 Windows 平台显式设置。
+    if (platform() !== "win32") {
+        await import("node:fs/promises").then((fs) => fs.chmod(dir, 0o700));
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/storage/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/storage/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,gBAAgB;IAC9B,4DAA4D;IAC5D,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,kCAAkC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,0CAA0C;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IACtD,qDAAqD;IACrD,OAAO,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,8BAA8B;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,gCAAgC;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,oCAAoC;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,qCAAqC;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,mBAAmB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAE/B,gCAAgC;IAChC,qDAAqD;IACrD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnD,uDAAuD;IACvD,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/storage/session.d.ts

@@ -0,0 +1,23 @@
+import type { ApiTool } from "../types/api.js";
+import { type ProtectSensitiveFileOptions } from "./fileProtection.js";
+export interface CachedTool {
+    tool_name: string;
+    tool_url: string;
+    description?: string;
+    when_to_use?: string;
+    credit?: number;
+    input_schema?: unknown;
+    cached_at: string;
+}
+export interface ToolSessionStore {
+    version: 3;
+    updated_at: string;
+    tools: CachedTool[];
+}
+export interface WriteSessionOptions {
+    fileProtection?: ProtectSensitiveFileOptions;
+}
+export declare function writeSession(tools: ApiTool[], options?: WriteSessionOptions): Promise<CachedTool[]>;
+export declare function protectSessionFile(filePath: string, options?: ProtectSensitiveFileOptions): Promise<void>;
+export declare function readToolByName(toolName: string): Promise<CachedTool>;
+export declare function extractToolName(toolUrl?: string): string | null;

package/dist/storage/session.js

@@ -0,0 +1,175 @@
+/**
+ * 本地工具缓存模块。
+ *
+ * recommend、list、detail 都可能从后端拿到工具信息。CLI 会把这些工具信息
+ * 写入 session.json，并以 tool_name 作为本地查找主键。execute 后续只需要
+ * agent 传入 tool_name，就能从缓存里找到后端返回过的完整 tool_url。
+ *
+ * 这个缓存不保存 API key，也不输出 tool_url 给 agent。
+ */
+import { readFile, writeFile } from "node:fs/promises";
+import { TOOL_CACHE_LIMIT } from "../constants.js";
+import { CliError } from "../core/errors.js";
+import { pathExists, protectSensitiveFile } from "./fileProtection.js";
+import { ensureAgentEarthDir, getSessionPath } from "./paths.js";
+export async function writeSession(tools, options = {}) {
+    try {
+        // 写缓存前先确保目录存在。
+        await ensureAgentEarthDir();
+    }
+    catch {
+        throw new CliError("session_write_failed", "Failed to prepare local tool cache.", "Check write permission for the AgentEarth data directory.");
+    }
+    // 同一批工具使用相同 cached_at，方便排查来自同一次后端响应。
+    const now = new Date().toISOString();
+    // 把后端 ApiTool 转成本地 CachedTool，同时解析 tool_name。
+    const incomingTools = tools.map((tool) => toCachedTool(tool, now));
+    // 如果同一批里出现同名工具，只保留最后一个。
+    const dedupedIncomingTools = keepLatestToolByName(incomingTools);
+    // 记录本批工具名，用于从旧缓存里删除同名旧记录。
+    const incomingNames = new Set(dedupedIncomingTools.map((tool) => tool.tool_name));
+    // 读取旧缓存；文件不存在或损坏时会返回空缓存。
+    const currentStore = await readStoreForWrite();
+    const nextTools = currentStore.tools
+        // 先移除被本批覆盖的旧工具。
+        .filter((tool) => !incomingNames.has(tool.tool_name))
+        // 再把本批工具追加到末尾，表示它们更新。
+        .concat(dedupedIncomingTools)
+        // 只保留最新 200 个，防止高频使用导致文件无限增长。
+        .slice(-TOOL_CACHE_LIMIT);
+    const nextStore = {
+        version: 3,
+        updated_at: now,
+        tools: nextTools
+    };
+    try {
+        const sessionPath = getSessionPath();
+        // 已存在的 session.json 会保留首次创建时收紧的 ACL，避免高频写入反复调用 Windows icacls。
+        const sessionFileExists = await pathExists(sessionPath);
+        // mode=0o600 尽量限制当前用户读写；这里虽然不存 key，但包含内部 tool_url。
+        await writeFile(sessionPath, `${JSON.stringify(nextStore, null, 2)}\n`, { mode: 0o600 });
+        if (!sessionFileExists) {
+            await protectSessionFile(sessionPath, options.fileProtection);
+        }
+    }
+    catch {
+        throw new CliError("session_write_failed", "Failed to write local tool cache.", "Check write permission for the AgentEarth data directory.");
+    }
+    // 返回本批写入的工具，而不是完整缓存；命令输出只展示本次后端返回内容。
+    return dedupedIncomingTools;
+}
+export async function protectSessionFile(filePath, options) {
+    // session.json 不保存 API key，但包含内部 tool_url，按当前用户私有文件处理。
+    await protectSensitiveFile(filePath, options);
+}
+export async function readToolByName(toolName) {
+    // execute 会通过这里按 tool_name 找到完整 tool_url。
+    const store = await readStoreForRead();
+    const tool = store.tools.find((candidate) => candidate.tool_name === toolName);
+    if (!tool) {
+        throw new CliError("tool_name_invalid", "Tool name is invalid or not cached.", "Run ae recommend, ae list, or ae detail and use a returned tool_name.");
+    }
+    return tool;
+}
+export function extractToolName(toolUrl) {
+    // tool_url 缺失时无法解析 tool_name。
+    if (!toolUrl) {
+        return null;
+    }
+    try {
+        // 后端把 tool_name 放在 URL query 中，例如 ?tool_name=xxx。
+        const toolName = new URL(toolUrl).searchParams.get("tool_name");
+        // 空字符串也视为无效。
+        return toolName && toolName.trim() ? toolName : null;
+    }
+    catch {
+        // URL 格式不合法时，也返回 null，由调用方决定错误码。
+        return null;
+    }
+}
+function toCachedTool(tool, cachedAt) {
+    // 本地不信任后端响应，必须先从 tool_url 解析 tool_name。
+    const toolName = extractToolName(tool.tool_url);
+    if (!toolName || !tool.tool_url) {
+        throw new CliError("tool_name_parse_failed", "Tool response is missing tool_name or tool_url.", "Retry later.");
+    }
+    return {
+        tool_name: toolName,
+        tool_url: tool.tool_url,
+        description: tool.description,
+        when_to_use: tool.when_to_use,
+        credit: tool.credit,
+        input_schema: tool.input_schema,
+        cached_at: cachedAt
+    };
+}
+function keepLatestToolByName(tools) {
+    const result = [];
+    for (const tool of tools) {
+        // 如果前面已经有同名工具，先删除旧的，再把新的放到末尾。
+        const existingIndex = result.findIndex((candidate) => candidate.tool_name === tool.tool_name);
+        if (existingIndex >= 0) {
+            result.splice(existingIndex, 1);
+        }
+        result.push(tool);
+    }
+    return result;
+}
+async function readStoreForWrite() {
+    try {
+        // 写入前读取旧缓存，以便合并旧记录和新记录。
+        const raw = await readFile(getSessionPath(), "utf8");
+        return normalizeStore(JSON.parse(raw));
+    }
+    catch {
+        // 文件不存在、JSON 损坏、版本不匹配，都从空缓存开始。
+        return emptyStore();
+    }
+}
+async function readStoreForRead() {
+    try {
+        // 读取缓存用于 execute 查找。
+        const raw = await readFile(getSessionPath(), "utf8");
+        return normalizeStore(JSON.parse(raw));
+    }
+    catch {
+        // 没有缓存时返回空缓存，随后 readToolByName 会抛 tool_name_invalid。
+        return emptyStore();
+    }
+}
+function normalizeStore(value) {
+    // 只接受 version=3 且 tools 为数组的结构。
+    if (!isRecord(value) || value.version !== 3 || !Array.isArray(value.tools)) {
+        return emptyStore();
+    }
+    return {
+        version: 3,
+        updated_at: typeof value.updated_at === "string" ? value.updated_at : new Date().toISOString(),
+        // 过滤掉不完整的工具记录，并再次裁剪到最大数量。
+        tools: value.tools.filter(isCachedTool).slice(-TOOL_CACHE_LIMIT)
+    };
+}
+function emptyStore() {
+    // 空缓存也保持合法 v3 结构，方便调用方不用处理 null。
+    return {
+        version: 3,
+        updated_at: new Date().toISOString(),
+        tools: []
+    };
+}
+function isCachedTool(value) {
+    // 读取缓存时也要防御损坏 session：字段类型正确还不够，
+    // tool_url 必须能重新解析出同一个 tool_name，否则 execute 可能请求错误 URL。
+    if (!isRecord(value)
+        || typeof value.tool_name !== "string"
+        || typeof value.tool_url !== "string"
+        || typeof value.cached_at !== "string") {
+        return false;
+    }
+    return extractToolName(value.tool_url) === value.tool_name;
+}
+function isRecord(value) {
+    // object 会包含数组，所以这里排除 Array。
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=session.js.map

package/dist/storage/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/storage/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAoC,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAgCjE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAgB,EAAE,UAA+B,EAAE;IACpF,IAAI,CAAC;QACH,eAAe;QACf,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,qCAAqC,EACrC,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,8CAA8C;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,wBAAwB;IACxB,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACjE,0BAA0B;IAC1B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAClF,yBAAyB;IACzB,MAAM,YAAY,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAE/C,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK;QAClC,gBAAgB;SACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,sBAAsB;SACrB,MAAM,CAAC,oBAAoB,CAAC;QAC7B,8BAA8B;SAC7B,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE5B,MAAM,SAAS,GAAqB;QAClC,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,SAAS;KACjB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,+DAA+D;QAC/D,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QACxD,mDAAmD;QACnD,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,mCAAmC,EACnC,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAAqC;IAErC,uDAAuD;IACvD,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,0CAA0C;IAC1C,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAE/E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAChB,mBAAmB,EACnB,qCAAqC,EACrC,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,8BAA8B;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChE,aAAa;QACb,OAAO,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,QAAgB;IACnD,wCAAwC;IACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEhD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,QAAQ,CAChB,wBAAwB,EACxB,iDAAiD,EACjD,cAAc,CACf,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,QAAQ;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAmB;IAC/C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,8BAA8B;QAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9F,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,IAAI,CAAC;QACH,wBAAwB;QACxB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;QAC/B,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC;QACH,qBAAqB;QACrB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;QACrD,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,gCAAgC;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9F,0BAA0B;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,iCAAiC;IACjC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,iCAAiC;IACjC,wDAAwD;IACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;WACf,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WACnC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;WAClC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,6BAA6B;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/storage/telemetryQueue.d.ts

@@ -0,0 +1,14 @@
+import { type TelemetryEvent } from "../telemetry/events.js";
+import { type ProtectSensitiveFileOptions } from "./fileProtection.js";
+export interface EnqueueTelemetryOptions {
+    fileProtection?: ProtectSensitiveFileOptions;
+}
+export declare function enqueueTelemetry(event: TelemetryEvent, options?: EnqueueTelemetryOptions): Promise<void>;
+export declare function protectTelemetryQueueFile(queuePath: string, options?: ProtectSensitiveFileOptions): Promise<void>;
+export declare function readTelemetryQueue(limit?: number): Promise<TelemetryEvent[]>;
+export interface TelemetryQueueBatch {
+    events: TelemetryEvent[];
+    consumedLineCount: number;
+}
+export declare function readTelemetryQueueBatch(limit?: number): Promise<TelemetryQueueBatch>;
+export declare function dropTelemetryQueueHead(count: number): Promise<void>;