@armadra/agent 0.0.0-stage → 0.2.1

package/dist/config/schema.d.ts

@@ -0,0 +1,34 @@
+/**
+ * 配置文件校验（设计 §10、§6.1、§7.3）。[B5]
+ *
+ * 形状定义在 config/types.ts（B0）与 hooks/types.ts（HookConfig）；这里只做校验并再导出。
+ * 校验结果是诊断列表：`severity: "error"` 拒绝该文件（启动退出码 3），`"warning"` 只提示
+ * （未知字段等）。`path` 是 JSON 指针风格的字段路径（`permission.mode`、`hooks.PreToolUse[0]`）。
+ */
+import type { AmaConfig, AuthFile, ProfileFile, TrustFile } from "./types.js";
+import type { HookConfig } from "../hooks/types.js";
+export type { AmaConfig, AuthFile, ProfileFile, TrustFile, TrustEntry, ProviderConfig, PermissionConfig, CompactionConfig, RetryConfig, ToolsConfig, ToolsPreset, CodemodeConfig, CodemodeMode, HooksSettings, UiConfig, SkillsConfig, CacheConfig, ModelConfig, ModelOverride, } from "./types.js";
+export { CONFIG_FILE_VERSION } from "./types.js";
+export type { HookConfig } from "../hooks/types.js";
+export interface Diagnostic {
+    severity: "error" | "warning";
+    /** 字段路径；文件级问题为 ""。 */
+    path: string;
+    message: string;
+}
+export declare const THINKING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh"];
+export declare const HOOK_TIMEOUT_MAX_MS = 600000;
+export declare function hasErrors(diagnostics: readonly Diagnostic[]): boolean;
+export declare function validateConfig(value: unknown): Diagnostic[];
+export declare function validateAuthFile(value: unknown): Diagnostic[];
+export declare const PROFILE_PATH_FIELDS: readonly ["host", "hooksFile", "authFile", "sessionDir", "config"];
+export declare const PROFILE_PATH_LIST_FIELDS: readonly ["instructions", "skillDirs", "promptDirs"];
+export declare function validateProfile(value: unknown): Diagnostic[];
+export declare function validateTrustFile(value: unknown): Diagnostic[];
+export declare function validateHookConfig(value: unknown): Diagnostic[];
+/** 校验通过后的类型断言（调用方保证 `hasErrors()` 为 false）。 */
+export declare function asConfig(value: unknown): AmaConfig;
+export declare function asAuthFile(value: unknown): AuthFile;
+export declare function asProfile(value: unknown): ProfileFile;
+export declare function asTrustFile(value: unknown): TrustFile;
+export declare function asHookConfig(value: unknown): HookConfig;

package/dist/config/schema.js

@@ -0,0 +1,413 @@
+/**
+ * 配置文件校验（设计 §10、§6.1、§7.3）。[B5]
+ *
+ * 形状定义在 config/types.ts（B0）与 hooks/types.ts（HookConfig）；这里只做校验并再导出。
+ * 校验结果是诊断列表：`severity: "error"` 拒绝该文件（启动退出码 3），`"warning"` 只提示
+ * （未知字段等）。`path` 是 JSON 指针风格的字段路径（`permission.mode`、`hooks.PreToolUse[0]`）。
+ */
+import { HOOK_EVENTS } from "../hooks/types.js";
+import { PERMISSION_MODES_STRICT_FIRST } from "../permissions/types.js";
+import { WARMING_MODES } from "../ai/cache/types.js";
+import { CACHE_RETENTIONS, CODEMODE_MODES, TOOLS_PRESETS_STRICT_FIRST } from "./types.js";
+export { CONFIG_FILE_VERSION } from "./types.js";
+export const THINKING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh"];
+export const HOOK_TIMEOUT_MAX_MS = 600_000;
+class Checker {
+    diagnostics = [];
+    error(path, message) {
+        this.diagnostics.push({ severity: "error", path, message });
+    }
+    warn(path, message) {
+        this.diagnostics.push({ severity: "warning", path, message });
+    }
+    object(value, path) {
+        if (typeof value === "object" && value !== null && !Array.isArray(value))
+            return true;
+        this.error(path, "应为对象");
+        return false;
+    }
+    /** 未知字段只警告（前向兼容）。 */
+    keys(value, path, allowed) {
+        for (const key of Object.keys(value)) {
+            if (!allowed.includes(key))
+                this.warn(join(path, key), "未知字段，已忽略");
+        }
+    }
+    version(value, path) {
+        if (value["version"] !== 1)
+            this.error(join(path, "version"), "version 必须为 1");
+    }
+    string(value, key, path, required = false) {
+        const v = value[key];
+        if (v === undefined) {
+            if (required)
+                this.error(join(path, key), "缺少必填字符串");
+            return;
+        }
+        if (typeof v !== "string")
+            this.error(join(path, key), "应为字符串");
+    }
+    boolean(value, key, path) {
+        const v = value[key];
+        if (v !== undefined && typeof v !== "boolean")
+            this.error(join(path, key), "应为布尔值");
+    }
+    number(value, key, path, min = 0, max = Number.MAX_SAFE_INTEGER) {
+        const v = value[key];
+        if (v === undefined)
+            return;
+        if (typeof v !== "number" || !Number.isFinite(v)) {
+            this.error(join(path, key), "应为数字");
+        }
+        else if (v < min || v > max) {
+            this.error(join(path, key), `应在 ${min}–${max} 之间`);
+        }
+    }
+    oneOf(value, key, path, choices) {
+        const v = value[key];
+        if (v === undefined)
+            return;
+        if (typeof v !== "string" || !choices.includes(v)) {
+            this.error(join(path, key), `取值应为 ${choices.join(" | ")}`);
+        }
+    }
+    stringArray(value, key, path) {
+        const v = value[key];
+        if (v === undefined)
+            return;
+        if (!Array.isArray(v) || v.some((item) => typeof item !== "string")) {
+            this.error(join(path, key), "应为字符串数组");
+        }
+    }
+    stringRecord(value, key, path) {
+        const v = value[key];
+        if (v === undefined)
+            return;
+        if (!this.object(v, join(path, key)))
+            return;
+        for (const [k, item] of Object.entries(v)) {
+            if (typeof item !== "string")
+                this.error(join(join(path, key), k), "应为字符串");
+        }
+    }
+}
+function join(path, key) {
+    if (typeof key === "number")
+        return `${path}[${key}]`;
+    return path === "" ? key : `${path}.${key}`;
+}
+export function hasErrors(diagnostics) {
+    return diagnostics.some((d) => d.severity === "error");
+}
+// ---------------------------------------------------------------------------
+// config.json
+// ---------------------------------------------------------------------------
+const CONFIG_KEYS = [
+    "version",
+    "defaultModel",
+    "thinkingLevel",
+    "providers",
+    "permission",
+    "compaction",
+    "retry",
+    "tools",
+    "codemode",
+    "hooks",
+    "ui",
+    "skills",
+    "cache",
+    "$schema",
+];
+const PROVIDER_KEYS = [
+    "name",
+    "api",
+    "baseUrl",
+    "apiKey",
+    "envKeys",
+    "authHeader",
+    "headers",
+    "compat",
+    "requiresApiKey",
+    "models",
+    "modelOverrides",
+];
+/** 第三波 §1.3 的缓存兼容开关（其余 compat 字段按协议各异，只查是对象）。 */
+const CACHE_COMPAT_FLAGS = [
+    "sendPromptCacheKey",
+    "sendSessionAffinityHeaders",
+    "supportsLongCacheRetention",
+    "supportsExplicitPromptCacheMode",
+];
+function checkModels(c, value, path) {
+    if (value === undefined)
+        return;
+    if (!Array.isArray(value)) {
+        c.error(path, "应为数组");
+        return;
+    }
+    value.forEach((item, index) => {
+        const p = join(path, index);
+        if (!c.object(item, p))
+            return;
+        c.string(item, "id", p, true);
+        c.string(item, "name", p);
+        c.number(item, "contextWindow", p, 1);
+        c.number(item, "maxTokens", p, 1);
+        c.boolean(item, "reasoning", p);
+        c.string(item, "api", p);
+        c.string(item, "baseUrl", p);
+        c.stringRecord(item, "headers", p);
+        const promptCache = item["promptCache"];
+        if (promptCache !== undefined && c.object(promptCache, join(p, "promptCache"))) {
+            const pp = join(p, "promptCache");
+            c.keys(promptCache, pp, ["short", "long", "minTokens"]);
+            for (const key of ["short", "long", "minTokens"])
+                c.number(promptCache, key, pp);
+        }
+        const input = item["input"];
+        if (input !== undefined &&
+            (!Array.isArray(input) || input.some((m) => m !== "text" && m !== "image"))) {
+            c.error(join(p, "input"), `应为 ("text" | "image")[]`);
+        }
+    });
+}
+function checkProvider(c, value, path) {
+    if (!c.object(value, path))
+        return;
+    c.keys(value, path, PROVIDER_KEYS);
+    for (const key of ["name", "api", "baseUrl", "apiKey"])
+        c.string(value, key, path);
+    c.stringArray(value, "envKeys", path);
+    c.stringRecord(value, "headers", path);
+    c.boolean(value, "requiresApiKey", path);
+    const compat = value["compat"];
+    if (compat !== undefined && c.object(compat, join(path, "compat"))) {
+        const cp = join(path, "compat");
+        for (const key of CACHE_COMPAT_FLAGS)
+            c.boolean(compat, key, cp);
+        c.oneOf(compat, "cacheReporting", cp, ["auto", "silent", "reported"]);
+    }
+    if (value["authHeader"] !== undefined)
+        c.object(value["authHeader"], join(path, "authHeader"));
+    checkModels(c, value["models"], join(path, "models"));
+    checkModels(c, value["modelOverrides"], join(path, "modelOverrides"));
+}
+function checkSection(c, config, key, allowed, body) {
+    const section = config[key];
+    if (section === undefined)
+        return;
+    if (!c.object(section, key))
+        return;
+    c.keys(section, key, allowed);
+    body(section, key);
+}
+export function validateConfig(value) {
+    const c = new Checker();
+    if (!c.object(value, ""))
+        return c.diagnostics;
+    c.version(value, "");
+    c.keys(value, "", CONFIG_KEYS);
+    c.string(value, "defaultModel", "");
+    c.oneOf(value, "thinkingLevel", "", THINKING_LEVELS);
+    const providers = value["providers"];
+    if (providers !== undefined && c.object(providers, "providers")) {
+        for (const [id, provider] of Object.entries(providers)) {
+            checkProvider(c, provider, join("providers", id));
+        }
+    }
+    checkSection(c, value, "permission", ["mode", "allow", "deny", "builtinDeny"], (s, p) => {
+        c.oneOf(s, "mode", p, PERMISSION_MODES_STRICT_FIRST);
+        c.stringArray(s, "allow", p);
+        c.stringArray(s, "deny", p);
+        const builtinDeny = s["builtinDeny"];
+        if (builtinDeny !== undefined &&
+            typeof builtinDeny !== "boolean" &&
+            (!Array.isArray(builtinDeny) || builtinDeny.some((item) => typeof item !== "string"))) {
+            c.error(join(p, "builtinDeny"), "应为布尔值或字符串数组");
+        }
+    });
+    checkSection(c, value, "compaction", ["enabled", "reserveTokens", "keepRecentTokens"], (s, p) => {
+        c.boolean(s, "enabled", p);
+        c.number(s, "reserveTokens", p);
+        c.number(s, "keepRecentTokens", p);
+    });
+    checkSection(c, value, "retry", ["enabled", "maxRetries", "baseDelayMs", "maxDelayMs"], (s, p) => {
+        c.boolean(s, "enabled", p);
+        c.number(s, "maxRetries", p, 0, 100);
+        c.number(s, "baseDelayMs", p);
+        c.number(s, "maxDelayMs", p);
+    });
+    checkSection(c, value, "tools", ["preset", "default", "maxToolResultChars", "bashTimeoutMs", "disabled"], (s, p) => {
+        c.oneOf(s, "preset", p, TOOLS_PRESETS_STRICT_FIRST);
+        c.stringArray(s, "default", p);
+        c.number(s, "maxToolResultChars", p, 1);
+        c.number(s, "bashTimeoutMs", p, 1);
+        c.stringArray(s, "disabled", p);
+    });
+    checkSection(c, value, "codemode", ["mode", "inlineBudget", "requireStrict"], (s, p) => {
+        c.oneOf(s, "mode", p, CODEMODE_MODES);
+        c.number(s, "inlineBudget", p, 0);
+        c.boolean(s, "requireStrict", p);
+    });
+    checkSection(c, value, "hooks", ["timeoutMs"], (s, p) => {
+        c.number(s, "timeoutMs", p, 1, HOOK_TIMEOUT_MAX_MS);
+    });
+    checkSection(c, value, "ui", ["theme", "markdown", "showThinking", "tuiMode", "quietStartup"], (s, p) => {
+        c.oneOf(s, "theme", p, ["dark", "light"]);
+        c.boolean(s, "markdown", p);
+        c.oneOf(s, "showThinking", p, ["full", "collapsed", "hidden"]);
+        c.oneOf(s, "tuiMode", p, ["regular"]);
+        c.oneOf(s, "quietStartup", p, ["normal", "header", "silent"]);
+    });
+    checkSection(c, value, "skills", ["dirs"], (s, p) => c.stringArray(s, "dirs", p));
+    checkSection(c, value, "cache", ["warming", "retention", "minSavingsUsd", "missNotices", "warmSubagents"], (s, p) => {
+        c.oneOf(s, "warming", p, WARMING_MODES);
+        c.oneOf(s, "retention", p, CACHE_RETENTIONS);
+        c.number(s, "minSavingsUsd", p, 0);
+        c.boolean(s, "missNotices", p);
+        c.boolean(s, "warmSubagents", p);
+    });
+    return c.diagnostics;
+}
+// ---------------------------------------------------------------------------
+// auth.json / profile.json / trust.json / hooks.json
+// ---------------------------------------------------------------------------
+export function validateAuthFile(value) {
+    const c = new Checker();
+    if (!c.object(value, ""))
+        return c.diagnostics;
+    c.version(value, "");
+    c.keys(value, "", ["version", "providers"]);
+    const providers = value["providers"];
+    if (providers === undefined) {
+        c.error("providers", "缺少 providers");
+        return c.diagnostics;
+    }
+    if (!c.object(providers, "providers"))
+        return c.diagnostics;
+    for (const [id, entry] of Object.entries(providers)) {
+        const p = join("providers", id);
+        if (!c.object(entry, p))
+            continue;
+        c.keys(entry, p, ["apiKey", "env", "baseUrl"]);
+        c.string(entry, "apiKey", p, true);
+        c.stringRecord(entry, "env", p);
+        c.string(entry, "baseUrl", p);
+    }
+    return c.diagnostics;
+}
+export const PROFILE_PATH_FIELDS = [
+    "host",
+    "hooksFile",
+    "authFile",
+    "sessionDir",
+    "config",
+];
+export const PROFILE_PATH_LIST_FIELDS = ["instructions", "skillDirs", "promptDirs"];
+export function validateProfile(value) {
+    const c = new Checker();
+    if (!c.object(value, ""))
+        return c.diagnostics;
+    c.version(value, "");
+    c.keys(value, "", [
+        "version",
+        ...PROFILE_PATH_FIELDS,
+        ...PROFILE_PATH_LIST_FIELDS,
+        "authEnv",
+        "trustProject",
+        "$schema",
+    ]);
+    for (const key of PROFILE_PATH_FIELDS)
+        c.string(value, key, "");
+    for (const key of PROFILE_PATH_LIST_FIELDS)
+        c.stringArray(value, key, "");
+    c.boolean(value, "authEnv", "");
+    c.boolean(value, "trustProject", "");
+    return c.diagnostics;
+}
+export function validateTrustFile(value) {
+    const c = new Checker();
+    if (!c.object(value, ""))
+        return c.diagnostics;
+    c.version(value, "");
+    const entries = value["entries"];
+    if (!Array.isArray(entries)) {
+        c.error("entries", "应为数组");
+        return c.diagnostics;
+    }
+    entries.forEach((entry, index) => {
+        const p = join("entries", index);
+        if (!c.object(entry, p))
+            return;
+        c.string(entry, "path", p, true);
+        c.string(entry, "at", p, true);
+        if (typeof entry["trusted"] !== "boolean")
+            c.error(join(p, "trusted"), "应为布尔值");
+    });
+    return c.diagnostics;
+}
+export function validateHookConfig(value) {
+    const c = new Checker();
+    if (!c.object(value, ""))
+        return c.diagnostics;
+    c.version(value, "");
+    c.keys(value, "", ["version", "hooks", "$schema"]);
+    const hooks = value["hooks"];
+    if (hooks === undefined)
+        return c.diagnostics;
+    if (!c.object(hooks, "hooks"))
+        return c.diagnostics;
+    for (const [event, groups] of Object.entries(hooks)) {
+        const p = join("hooks", event);
+        if (!HOOK_EVENTS.includes(event)) {
+            c.error(p, `未知事件（可用：${HOOK_EVENTS.join(", ")}）`);
+            continue;
+        }
+        if (!Array.isArray(groups)) {
+            c.error(p, "应为数组");
+            continue;
+        }
+        groups.forEach((group, gi) => {
+            const gp = join(p, gi);
+            if (!c.object(group, gp))
+                return;
+            c.keys(group, gp, ["matcher", "hooks"]);
+            c.string(group, "matcher", gp);
+            const commands = group["hooks"];
+            if (!Array.isArray(commands)) {
+                c.error(join(gp, "hooks"), "应为数组");
+                return;
+            }
+            commands.forEach((command, ci) => {
+                const cp = join(join(gp, "hooks"), ci);
+                if (!c.object(command, cp))
+                    return;
+                c.keys(command, cp, ["type", "command", "timeoutMs"]);
+                if (command["type"] !== "command")
+                    c.error(join(cp, "type"), `type 必须为 "command"`);
+                c.string(command, "command", cp, true);
+                if (typeof command["command"] === "string" && command["command"].trim() === "") {
+                    c.error(join(cp, "command"), "命令为空");
+                }
+                c.number(command, "timeoutMs", cp, 1, HOOK_TIMEOUT_MAX_MS);
+            });
+        });
+    }
+    return c.diagnostics;
+}
+/** 校验通过后的类型断言（调用方保证 `hasErrors()` 为 false）。 */
+export function asConfig(value) {
+    return value;
+}
+export function asAuthFile(value) {
+    return value;
+}
+export function asProfile(value) {
+    return value;
+}
+export function asTrustFile(value) {
+    return value;
+}
+export function asHookConfig(value) {
+    return value;
+}

package/dist/config/trust.d.ts

@@ -0,0 +1,42 @@
+/**
+ * 项目信任（设计 §6.1「信任边界」、§7.3）。[B5]
+ *
+ * - 需要信任：`.ama/hooks.json`、`.ama/skills/`、`.ama/prompts/`、祖先 `.agents/skills/`。
+ *   不需要：AGENTS.md、`.ama/config.json`（它只能收紧）。
+ * - 决策顺序：`--trust` / `--no-trust` → profile `trustProject: true` → trust.json 中最近祖先的
+ *   记录 → 交互模式询问（一次，可记住）→ 非交互缺省不信任。
+ * - trust.json 只在用户级目录；写入为原子替换。
+ */
+import type { TrustState } from "../cli/runtime.js";
+import type { TrustEntry, TrustFile } from "./types.js";
+export type { TrustState } from "../cli/runtime.js";
+export declare function trustFilePath(configDir: string): string;
+/** 读 trust.json；不存在 → 空表。语法 / 字段错误抛 StartupError（3）。 */
+export declare function readTrustFile(configDir: string): TrustFile;
+/** `dir` 是否等于 `ancestor` 或在其下。 */
+export declare function isWithin(dir: string, ancestor: string, platform?: NodeJS.Platform): boolean;
+/** 最近祖先（路径最长）的记录。 */
+export declare function findTrustEntry(entries: readonly TrustEntry[], cwd: string, platform?: NodeJS.Platform): TrustEntry | undefined;
+/** 记录信任决策（同路径覆盖）。 */
+export declare function recordTrust(configDir: string, path: string, trusted: boolean, now?: Date): void;
+/** cwd 下需要信任才能加载的资源（为空则无需询问）。 */
+export declare function trustGatedResources(cwd: string): string[];
+/** cwd 自身与全部祖先（由内向外）。 */
+export declare function ancestorsOf(cwd: string): string[];
+export interface TrustPromptAnswer {
+    trusted: boolean;
+    /** 写入 trust.json。 */
+    remember: boolean;
+}
+export interface DecideTrustInput {
+    cwd: string;
+    configDir: string;
+    /** `--trust` → true、`--no-trust` → false。 */
+    flag?: boolean | undefined;
+    /** profile.trustProject。 */
+    profileTrust?: boolean | undefined;
+    interactive: boolean;
+    /** 交互询问；不提供或非交互时跳过。 */
+    prompt?: ((cwd: string, resources: readonly string[]) => Promise<TrustPromptAnswer>) | undefined;
+}
+export declare function decideTrust(input: DecideTrustInput): Promise<TrustState>;

package/dist/config/trust.js

@@ -0,0 +1,122 @@
+/**
+ * 项目信任（设计 §6.1「信任边界」、§7.3）。[B5]
+ *
+ * - 需要信任：`.ama/hooks.json`、`.ama/skills/`、`.ama/prompts/`、祖先 `.agents/skills/`。
+ *   不需要：AGENTS.md、`.ama/config.json`（它只能收紧）。
+ * - 决策顺序：`--trust` / `--no-trust` → profile `trustProject: true` → trust.json 中最近祖先的
+ *   记录 → 交互模式询问（一次，可记住）→ 非交互缺省不信任。
+ * - trust.json 只在用户级目录；写入为原子替换。
+ */
+import { existsSync, mkdirSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { dirname, join, resolve, sep } from "node:path";
+import { loadConfigFile } from "./load.js";
+import { PROJECT_DIR, TRUST_FILE } from "./paths.js";
+import { CONFIG_FILE_VERSION } from "./types.js";
+export function trustFilePath(configDir) {
+    return join(configDir, TRUST_FILE);
+}
+/** 读 trust.json；不存在 → 空表。语法 / 字段错误抛 StartupError（3）。 */
+export function readTrustFile(configDir) {
+    const loaded = loadConfigFile("trust", trustFilePath(configDir));
+    return loaded?.value ?? { version: CONFIG_FILE_VERSION, entries: [] };
+}
+function normalize(path, platform) {
+    const abs = resolve(path);
+    const trimmed = abs.length > 1 && abs.endsWith(sep) ? abs.slice(0, -1) : abs;
+    return platform === "win32" || platform === "darwin" ? trimmed.toLowerCase() : trimmed;
+}
+/** `dir` 是否等于 `ancestor` 或在其下。 */
+export function isWithin(dir, ancestor, platform = process.platform) {
+    const d = normalize(dir, platform);
+    const a = normalize(ancestor, platform);
+    if (d === a)
+        return true;
+    const prefix = a.endsWith(sep) ? a : a + sep;
+    return d.startsWith(prefix);
+}
+/** 最近祖先（路径最长）的记录。 */
+export function findTrustEntry(entries, cwd, platform = process.platform) {
+    let best;
+    for (const entry of entries) {
+        if (!isWithin(cwd, entry.path, platform))
+            continue;
+        if (best === undefined ||
+            normalize(entry.path, platform).length >= normalize(best.path, platform).length) {
+            best = entry;
+        }
+    }
+    return best;
+}
+/** 记录信任决策（同路径覆盖）。 */
+export function recordTrust(configDir, path, trusted, now = new Date()) {
+    const file = readTrustFile(configDir);
+    const abs = resolve(path);
+    const entries = file.entries.filter((e) => normalize(e.path, process.platform) !== normalize(abs, process.platform));
+    entries.push({ path: abs, trusted, at: now.toISOString() });
+    const target = trustFilePath(configDir);
+    mkdirSync(dirname(target), { recursive: true, mode: 0o700 });
+    const tmp = `${target}.${process.pid}.tmp`;
+    writeFileSync(tmp, `${JSON.stringify({ version: CONFIG_FILE_VERSION, entries }, null, 2)}\n`, {
+        mode: 0o600,
+    });
+    renameSync(tmp, target);
+}
+function isDir(path) {
+    try {
+        return statSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/** cwd 下需要信任才能加载的资源（为空则无需询问）。 */
+export function trustGatedResources(cwd) {
+    const found = [];
+    const project = join(cwd, PROJECT_DIR);
+    if (existsSync(join(project, "hooks.json")))
+        found.push(join(project, "hooks.json"));
+    for (const sub of ["skills", "prompts"]) {
+        if (isDir(join(project, sub)))
+            found.push(join(project, sub));
+    }
+    for (const dir of ancestorsOf(cwd)) {
+        const skills = join(dir, ".agents", "skills");
+        if (isDir(skills))
+            found.push(skills);
+    }
+    return found;
+}
+/** cwd 自身与全部祖先（由内向外）。 */
+export function ancestorsOf(cwd) {
+    const result = [];
+    let current = resolve(cwd);
+    for (;;) {
+        result.push(current);
+        const parent = dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return result;
+}
+export async function decideTrust(input) {
+    if (input.flag !== undefined)
+        return { trusted: input.flag, source: "flag" };
+    if (input.profileTrust === true)
+        return { trusted: true, source: "profile" };
+    const entry = findTrustEntry(readTrustFile(input.configDir).entries, input.cwd);
+    if (entry !== undefined) {
+        return { trusted: entry.trusted, source: "trust-file", matchedPath: entry.path };
+    }
+    if (input.interactive && input.prompt !== undefined) {
+        const resources = trustGatedResources(input.cwd);
+        // 没有需要信任的资源就不打扰用户；不信任对结果没有影响。
+        if (resources.length === 0)
+            return { trusted: false, source: "default" };
+        const answer = await input.prompt(input.cwd, resources);
+        if (answer.remember)
+            recordTrust(input.configDir, input.cwd, answer.trusted);
+        return { trusted: answer.trusted, source: "prompt" };
+    }
+    return { trusted: false, source: "default" };
+}