@atlisp/mcp 1.8.20 → 1.8.21

package/dist/atlisp-mcp.js

@@ -64,6 +64,9 @@ function parseArgs() {
       i++;
     } else if (args[i] === "--no-lint" || args[i] === "--lint-off") {
       result.noLint = true;
+    } else if (args[i] === "--security-level" && args[i + 1]) {
+      result.securityLevel = args[i + 1];
+      i++;
     }
   }
   return result;
@@ -101,6 +104,9 @@ function reloadConfig() {
   configReloadLock = false;
   return false;
 }
+function onConfigChange(callback) {
+  configWatchers.push(callback);
+}
 var envSchema, configSchema, cliArgs, envResult, env, configFilePath, fileConfig, config, configWatchers, configReloadLock, config_default;
 var init_config = __esm({
   "src/config.js"() {
@@ -138,7 +144,8 @@ var init_config = __esm({
       LINT_PRESET: z.string().optional().default(""),
       LINT_CONFIG_PATH: z.string().optional().default(""),
       LINT_LEVEL: z.string().optional().default(""),
-      NO_LINT: z.string().optional().default("")
+      NO_LINT: z.string().optional().default(""),
+      SECURITY_LEVEL: z.string().optional().default("strict")
     });
     configSchema = z.object({
       port: z.number().optional(),
@@ -180,7 +187,8 @@ var init_config = __esm({
       lintPreset: z.string().optional(),
       lintConfigPath: z.string().optional(),
       lintLevel: z.string().optional(),
-      noLint: z.boolean().optional()
+      noLint: z.boolean().optional(),
+      securityLevel: z.enum(["strict", "standard", "relaxed"]).optional()
     });
     cliArgs = parseArgs();
     envResult = envSchema.safeParse(process.env);
@@ -227,7 +235,8 @@ var init_config = __esm({
       lintPreset: fileConfig?.lintPreset || cliArgs.lintPreset || env.LINT_PRESET || void 0,
       lintConfigPath: fileConfig?.lintConfigPath || cliArgs.lintConfigPath || env.LINT_CONFIG_PATH || void 0,
       lintLevel: fileConfig?.lintLevel || cliArgs.lintLevel || env.LINT_LEVEL || void 0,
-      noLint: fileConfig?.noLint ?? cliArgs.noLint ?? env.NO_LINT === "true"
+      noLint: fileConfig?.noLint ?? cliArgs.noLint ?? env.NO_LINT === "true",
+      securityLevel: fileConfig?.securityLevel ?? cliArgs.securityLevel ?? (env.SECURITY_LEVEL || "strict")
     };
     if (config.lintConfigPath) process.env.LINT_CONFIG_PATH = config.lintConfigPath;
     if (config.lintPreset) process.env.LINT_PRESET = config.lintPreset;
@@ -8160,17 +8169,27 @@ function analyzeLispCode(code, options = {}) {
   if (process.env.NO_LINT === "true" && !options.force) {
     return { valid: true, errors: [], warnings: [], issues: [], summary: "lint \u5DF2\u8DF3\u8FC7" };
   }
+  const securityLevel = config_default?.securityLevel || "strict";
+  if (securityLevel === "relaxed" && !options.force) {
+    return { valid: true, errors: [], warnings: [], issues: [], summary: "\u5B89\u5168\u9650\u5236\u5DF2\u5173\u95ED (relaxed)" };
+  }
   try {
-    const config2 = options.lintConfig ? mergeConfig(getDefaultConfig(), options.lintConfig) : getDefaultConfig();
-    const lintIssues = runChecks(code, options.file || "<eval>", config2);
+    const lintConfig = options.lintConfig ? mergeConfig(getDefaultConfig(), options.lintConfig) : getDefaultConfig();
+    if (securityLevel === "standard") {
+      for (const key of Object.keys(REQUIRED_ERROR_CHECKS)) {
+        lintConfig.checks[key] = "warn";
+      }
+    }
+    const lintIssues = runChecks(code, options.file || "<eval>", lintConfig);
     for (const rule of CUSTOM_RULES) {
+      const effectiveSeverity = securityLevel === "standard" ? "warn" : rule.severity;
       const match = code.match(rule.re);
       if (match) {
         const line = code.slice(0, match.index).split("\n").length;
         lintIssues.push({
           file: options.file || "<eval>",
           line,
-          severity: rule.severity,
+          severity: effectiveSeverity,
           rule: rule.rule,
           message: rule.msg
         });
@@ -8206,6 +8225,7 @@ function mergeConfig(base, overrides) {
 var CUSTOM_RULES, defaultConfig, REQUIRED_ERROR_CHECKS;
 var init_lint_analyzer = __esm({
   "src/lint-analyzer.js"() {
+    init_config();
     CUSTOM_RULES = [
       { rule: "command_shell", severity: "error", re: /\(\s*command\s+"\s*[_.]*\s*shell\s*"/i, msg: '(command "shell" ...) \u4F1A\u542F\u52A8\u7CFB\u7EDF Shell' },
       { rule: "vl_registry_write", severity: "error", re: /\(\s*vl-registry-write[\s\)]/i, msg: "vl-registry-write \u4F1A\u4FEE\u6539 Windows \u6CE8\u518C\u8868" },
@@ -14712,22 +14732,65 @@ var init_trigger_engine = __esm({
 });
 
 // src/lisp-security.js
+function getLevel() {
+  const level = config_default?.securityLevel || "strict";
+  return CVT[level] || THREAT_BLOCK;
+}
+function resolveSeverity(rule) {
+  if (_cachedLevel) return _cachedLevel;
+  _cachedLevel = getLevel();
+  return _cachedLevel;
+}
+function getEffectiveSeverity() {
+  return resolveSeverity();
+}
 function stripStringsAndComments(code) {
   const withoutStrings = code.replace(/"([^"\\]*(?:\\.[^"\\]*)*)"/g, "");
   return withoutStrings.replace(/;.*$/gm, "");
 }
-var THREAT_BLOCK, THREAT_WARN, SECURITY_RULES;
+var THREAT_BLOCK, THREAT_WARN, THREAT_ALLOW, CVT, SECURITY_RULES, _cachedLevel;
 var init_lisp_security = __esm({
   "src/lisp-security.js"() {
     init_logger();
+    init_config();
     THREAT_BLOCK = "block";
     THREAT_WARN = "warn";
+    THREAT_ALLOW = "allow";
+    CVT = {
+      strict: THREAT_BLOCK,
+      standard: THREAT_WARN,
+      relaxed: THREAT_ALLOW
+    };
     SECURITY_RULES = [
-      { re: /\bstartapp\s*[(\s]/i, severity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 startapp \u51FD\u6570" },
-      { re: /\bvl-bt\b/i, severity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 vl-bt \u51FD\u6570" },
-      { re: /\bvlax-import-type-library\b/i, severity: THREAT_BLOCK, msg: "\u7981\u6B62\u5BFC\u5165\u7C7B\u578B\u5E93" },
-      { re: /\bdos_command_string\s*[(\s]/i, severity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 dos_command_string" }
+      { re: /\bstartapp\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 startapp \u51FD\u6570" },
+      { re: /\bvl-bt\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 vl-bt \u51FD\u6570" },
+      { re: /\bvlax-import-type-library\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u5BFC\u5165\u7C7B\u578B\u5E93" },
+      { re: /\bdos_command_string\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 dos_command_string" },
+      { re: /\beval\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 eval \u51FD\u6570" },
+      { re: /\bcommand\s*["\s]*[_(]?\s*["']?\.?\s*_?(?:shell|quit|exit|close|open|new|recover|audit|purge|wblock|export)/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528\u5371\u9669 CAD \u547D\u4EE4" },
+      { re: /\bload\s*[(\s"]/i, baseSeverity: THREAT_BLOCK, msg: "load \u51FD\u6570\u53EF\u80FD\u52A0\u8F7D\u5916\u90E8\u4EE3\u7801" },
+      { re: /\b(?:read-line|read-char|write-line|write-char)\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u6587\u4EF6 I/O \u64CD\u4F5C\u53EF\u80FD\u5F71\u54CD\u7CFB\u7EDF" },
+      { re: /\bvl-file-copy\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u6587\u4EF6\u590D\u5236" },
+      { re: /\bvl-file-delete\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u6587\u4EF6\u5220\u9664" },
+      { re: /\bvl-file-rename\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u6587\u4EF6\u91CD\u547D\u540D" },
+      { re: /\bvl-registry-write[\s\)]/i, baseSeverity: THREAT_BLOCK, msg: "vl-registry-write \u4F1A\u4FEE\u6539\u6CE8\u518C\u8868" },
+      { re: /\bvl-exit-with-value\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 vl-exit-with-value" },
+      { re: /\bvl-exit-with-error\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 vl-exit-with-error" },
+      { re: /\bvlax-add-cmd\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u6CE8\u518C\u65B0\u547D\u4EE4" },
+      { re: /\bvla-Delete\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u76F4\u63A5\u5220\u9664 vla \u5BF9\u8C61" },
+      { re: /\bvla-Save\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u76F4\u63A5\u4FDD\u5B58\u6587\u6863" },
+      { re: /\bdirectory\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u4F7F\u7528 directory \u51FD\u6570" },
+      { re: /\bvla-deletefile\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u5220\u9664\u6587\u4EF6" },
+      { re: /\bvla-copyfile\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u590D\u5236\u6587\u4EF6" },
+      { re: /\bvla-movefile\b/i, baseSeverity: THREAT_BLOCK, msg: "\u7981\u6B62\u79FB\u52A8\u6587\u4EF6" }
     ];
+    _cachedLevel = null;
+    try {
+      onConfigChange(() => {
+        _cachedLevel = null;
+      });
+    } catch (_) {
+    }
   }
 });
 
@@ -14747,21 +14810,23 @@ function clearSessionAllowlist(sessionId) {
 }
 function validateLispCode(code, sessionId = null) {
   const withoutComments = stripStringsAndComments(code);
+  const effectiveSeverity = getEffectiveSeverity();
   const results = [];
   let blocked = false;
   for (let i = 0; i < RULES2.length; i++) {
     const rule = RULES2[i];
     if (rule.re.test(withoutComments)) {
       const isAllowed = sessionId && getSessionAllowlist(sessionId).has(i);
+      const severity = effectiveSeverity === THREAT_ALLOW ? THREAT_ALLOW : isAllowed ? THREAT_ALLOW : effectiveSeverity;
       results.push({
         ruleIndex: i,
-        severity: rule.severity,
+        severity,
         message: rule.msg,
-        blocked: !isAllowed && rule.severity === THREAT_BLOCK,
-        warned: !isAllowed && rule.severity === THREAT_WARN,
-        allowed: isAllowed
+        blocked: severity === THREAT_BLOCK,
+        warned: severity === THREAT_WARN,
+        allowed: severity === THREAT_ALLOW
       });
-      if (!isAllowed && rule.severity === THREAT_BLOCK) {
+      if (severity === THREAT_BLOCK) {
         blocked = true;
       }
     }
@@ -14777,6 +14842,7 @@ var RULES2, sessionAllowlist;
 var init_lisp_sandbox = __esm({
   "src/lisp-sandbox.js"() {
     init_logger();
+    init_config();
     init_lisp_security();
     RULES2 = SECURITY_RULES;
     sessionAllowlist = /* @__PURE__ */ new Map();
@@ -18883,51 +18949,65 @@ if (isMcpScript) {
 Usage: atlisp-mcp [options]
 
 Options:
-  -v, --version           Show version number
-  -h, --help             Show this help message
-   --transport <type>     Transport: http, stdio, or ws (default: http)
-  --port <port>         HTTP port (default: 8110)
-  --host <host>         HTTP host (default: 0.0.0.0)
-   --stdio                Shorthand for --transport stdio
-   --ws                   Shorthand for --transport ws
-   --config <path>       Path to config file (default: ~/.atlisp/atlisp.config.json)
-   --ssl-key <path>     SSL key file path (enables HTTPS)
-   --ssl-cert <path>    SSL certificate file path
-   --debug               Enable debug mode
-   --lint-preset <type>  Lint preset: recommended, strict, or relaxed
-   --lint-config <path>  Path to atlisp-lint.json config file
-   --lint-level <level>  Lint level: error, warn, or off
-   --no-lint             Disable lint pre-check for eval_lisp
-   --lint-off            Same as --no-lint
+  -v, --version                Show version number
+  -h, --help                   Show this help message
+  --transport <type>           Transport: http, stdio, ws (default: http)
+  --stdio                      Shorthand for --transport stdio
+  --ws                         Shorthand for --transport ws
+  --port <port>                HTTP port (default: 8110)
+  --host <host>                HTTP host (default: 0.0.0.0)
+  --config <path>              Path to config file (default: ~/.atlisp/atlisp.config.json)
+  --ssl-key <path>             SSL key file path (enables HTTPS)
+  --ssl-cert <path>            SSL certificate file path
+  --debug                      Enable debug mode
+  --metrics-enabled            Enable /metrics endpoint (true/false)
+  --lint-preset <type>         Lint preset: recommended, strict, relaxed
+  --lint-config <path>         Path to atlisp-lint.json config file
+  --lint-level <level>         Lint level: error, warn, off
+  --no-lint                    Disable lint pre-check for eval_lisp
+  --lint-off                   Same as --no-lint
+  --api-key <key>              API key for authentication
+  --security-level <type>      Security level: strict, standard, relaxed (default: strict)
 
 Environment Variables:
-   TRANSPORT             Transport mode (http/stdio/ws)
-   PORT                  HTTP port
-   HOST                  HTTP host
-   MCP_API_KEY           API key for authentication
-   ENABLE_SSE            Enable SSE (true/false)
-   DEBUG                 Enable debug logging (true/false)
-   METRICS_ENABLED      Enable /metrics endpoint (true/false)
-   SSL_KEY_PATH          SSL key file path
-   SSL_CERT_PATH         SSL certificate file path
+  TRANSPORT             Transport mode (http/stdio/ws)
+  PORT                  HTTP port (default: 8110)
+  HOST                  HTTP host (default: 0.0.0.0)
+  MCP_API_KEY           API key for authentication
+  ENABLE_SSE            Enable SSE (true/false, default: true)
+  DEBUG                 Enable debug logging (true/false)
+  DEBUG_FILE            Debug log file path
+  METRICS_ENABLED       Enable /metrics endpoint (true/false, default: true)
+  SSL_KEY_PATH          SSL key file path
+  SSL_CERT_PATH         SSL certificate file path
+  SECURITY_LEVEL        Security level: strict, standard, relaxed (default: strict)
+  CONFIG_FILE           Path to config file
+  LINT_PRESET           Lint preset (recommended/strict/relaxed)
+  LINT_CONFIG_PATH      Path to atlisp-lint.json
+  LINT_LEVEL            Lint level (error/warn/off)
+  NO_LINT               Disable lint (true/false)
+  REQUEST_LOG_ENABLED   Enable request logging (true/false, default: true)
+  CORS_ORIGIN           CORS origin (default: *)
+  RATE_LIMIT_WINDOW     Rate limit window in ms (default: 60000)
+  RATE_LIMIT_MAX        Max requests per window (default: 100)
 
 Examples:
-  atlisp-mcp                       Start HTTP server on port 8110
-  atlisp-mcp --port 3000          Start HTTP server on port 3000
-  atlisp-mcp --stdio               Start in stdio mode for MCP clients
-  atlisp-mcp --config ~/my.json   Use custom config file
-  atlisp-mcp --debug              Enable debug output
-  TRANSPORT=stdio atlisp-mcp      Via env var for stdio mode
-  atlisp-mcp --ws                 Start WebSocket server on port 8110
-  TRANSPORT=ws atlisp-mcp         Via env var for WebSocket mode
+  atlisp-mcp                           Start HTTP server on port 8110
+  atlisp-mcp --port 3000               Start HTTP server on port 3000
+  atlisp-mcp --stdio                   Start in stdio mode for MCP clients
+  atlisp-mcp --config ~/my.json        Use custom config file
+  atlisp-mcp --debug                   Enable debug output
+  atlisp-mcp --ssl-key key.pem --ssl-cert cert.pem  Start HTTPS server
+  TRANSPORT=stdio atlisp-mcp           Via env var for stdio mode
+  TRANSPORT=ws atlisp-mcp              Via env var for WebSocket mode
 
 API Endpoints:
-  GET  /health    Health check
-  GET  /metrics   Prometheus metrics (if enabled)
-  POST /mcp       MCP JSON-RPC endpoint
-  GET  /sse       Server-Sent Events endpoint
-  POST /message   SSE message endpoint
-  WS   /ws        WebSocket endpoint
+  GET  /health         Health check
+  GET  /metrics        Prometheus metrics (if enabled)
+  POST /mcp            MCP JSON-RPC endpoint
+  GET  /sse            Server-Sent Events endpoint
+  POST /message        SSE message endpoint
+  WS   /ws             WebSocket endpoint
   POST /config/reload  Reload configuration
 
 For more info: https://atlisp.cn
@@ -18955,6 +19035,16 @@ For more info: https://atlisp.cn
       process.env.LINT_LEVEL = cliArgs2[++i];
     } else if (arg === "--no-lint" || arg === "--lint-off") {
       process.env.NO_LINT = "true";
+    } else if (arg === "--security-level" && cliArgs2[i + 1]) {
+      process.env.SECURITY_LEVEL = cliArgs2[++i];
+    } else if (arg === "--ssl-key" && cliArgs2[i + 1]) {
+      process.env.SSL_KEY_PATH = cliArgs2[++i];
+    } else if (arg === "--ssl-cert" && cliArgs2[i + 1]) {
+      process.env.SSL_CERT_PATH = cliArgs2[++i];
+    } else if (arg === "--api-key" && cliArgs2[i + 1]) {
+      process.env.MCP_API_KEY = cliArgs2[++i];
+    } else if (arg === "--metrics-enabled" && cliArgs2[i + 1]) {
+      process.env.METRICS_ENABLED = cliArgs2[++i];
     }
   }
 }

package/dist/cad-worker.js

@@ -579,9 +579,12 @@ async function handleMessage(msg) {
     if (!parenCheck.valid) {
       return { success: false, error: `括号错误: ${parenCheck.error} (位置 ${parenCheck.pos})` };
     }
-    const injectionCheck = validateLispCodeWorker(msg.code);
-    if (!injectionCheck.valid) {
-      return { success: false, error: `安全限制: ${injectionCheck.error}` };
+    const securityLevel = process.env.SECURITY_LEVEL || 'strict';
+    if (securityLevel !== 'relaxed') {
+      const injectionCheck = validateLispCodeWorker(msg.code);
+      if (!injectionCheck.valid) {
+        return { success: false, error: `安全限制: ${injectionCheck.error}` };
+      }
     }
     if (msg.code.length > 255) {
       const cacheEnabled = process.env.LONG_CODE_CACHE === '1';

package/dist/config.js

@@ -38,6 +38,7 @@ const envSchema = z.object({
     LINT_CONFIG_PATH: z.string().optional().default(''),
     LINT_LEVEL: z.string().optional().default(''),
     NO_LINT: z.string().optional().default(''),
+    SECURITY_LEVEL: z.string().optional().default('strict'),
 });
 
 const configSchema = z.object({
@@ -81,6 +82,7 @@ const configSchema = z.object({
     lintConfigPath: z.string().optional(),
     lintLevel: z.string().optional(),
     noLint: z.boolean().optional(),
+    securityLevel: z.enum(['strict', 'standard', 'relaxed']).optional(),
 });
 
 function parseArgs() {
@@ -122,6 +124,9 @@ function parseArgs() {
             i++;
         } else if (args[i] === '--no-lint' || args[i] === '--lint-off') {
             result.noLint = true;
+        } else if (args[i] === '--security-level' && args[i + 1]) {
+            result.securityLevel = args[i + 1];
+            i++;
         }
     }
     return result;
@@ -197,6 +202,7 @@ const config = {
     lintConfigPath: fileConfig?.lintConfigPath || cliArgs.lintConfigPath || env.LINT_CONFIG_PATH || undefined,
     lintLevel: fileConfig?.lintLevel || cliArgs.lintLevel || env.LINT_LEVEL || undefined,
     noLint: fileConfig?.noLint ?? cliArgs.noLint ?? (env.NO_LINT === 'true'),
+    securityLevel: fileConfig?.securityLevel ?? cliArgs.securityLevel ?? (env.SECURITY_LEVEL || 'strict'),
 };
 
 if (config.lintConfigPath) process.env.LINT_CONFIG_PATH = config.lintConfigPath;

package/dist/lisp-security.js

@@ -1,36 +1,90 @@
 import { log, error as logError } from './logger.js';
+import config, { onConfigChange } from './config.js';
 
 export const THREAT_BLOCK = 'block';
 export const THREAT_WARN = 'warn';
 export const THREAT_ALLOW = 'allow';
 
+export const SECURITY_LEVELS = ['strict', 'standard', 'relaxed'];
+
+const CVT = {
+  strict: THREAT_BLOCK,
+  standard: THREAT_WARN,
+  relaxed: THREAT_ALLOW,
+};
+
+function getLevel() {
+  const level = config?.securityLevel || 'strict';
+  return CVT[level] || THREAT_BLOCK;
+}
+
 export const SECURITY_RULES = [
-  { re: /\bstartapp\s*[(\s]/i, severity: THREAT_BLOCK, msg: '禁止使用 startapp 函数' },
-  { re: /\bvl-bt\b/i, severity: THREAT_BLOCK, msg: '禁止使用 vl-bt 函数' },
-  { re: /\bvlax-import-type-library\b/i, severity: THREAT_BLOCK, msg: '禁止导入类型库' },
-  { re: /\bdos_command_string\s*[(\s]/i, severity: THREAT_BLOCK, msg: '禁止使用 dos_command_string' },
+  { re: /\bstartapp\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用 startapp 函数' },
+  { re: /\bvl-bt\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用 vl-bt 函数' },
+  { re: /\bvlax-import-type-library\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止导入类型库' },
+  { re: /\bdos_command_string\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用 dos_command_string' },
+  { re: /\beval\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用 eval 函数' },
+  { re: /\bcommand\s*["\s]*[_(]?\s*["']?\.?\s*_?(?:shell|quit|exit|close|open|new|recover|audit|purge|wblock|export)/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用危险 CAD 命令' },
+  { re: /\bload\s*[(\s"]/i, baseSeverity: THREAT_BLOCK, msg: 'load 函数可能加载外部代码' },
+  { re: /\b(?:read-line|read-char|write-line|write-char)\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '文件 I/O 操作可能影响系统' },
+  { re: /\bvl-file-copy\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止文件复制' },
+  { re: /\bvl-file-delete\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止文件删除' },
+  { re: /\bvl-file-rename\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止文件重命名' },
+  { re: /\bvl-registry-write[\s\)]/i, baseSeverity: THREAT_BLOCK, msg: 'vl-registry-write 会修改注册表' },
+  { re: /\bvl-exit-with-value\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用 vl-exit-with-value' },
+  { re: /\bvl-exit-with-error\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用 vl-exit-with-error' },
+  { re: /\bvlax-add-cmd\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止注册新命令' },
+  { re: /\bvla-Delete\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止直接删除 vla 对象' },
+  { re: /\bvla-Save\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止直接保存文档' },
+  { re: /\bdirectory\s*[(\s]/i, baseSeverity: THREAT_BLOCK, msg: '禁止使用 directory 函数' },
+  { re: /\bvla-deletefile\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止删除文件' },
+  { re: /\bvla-copyfile\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止复制文件' },
+  { re: /\bvla-movefile\b/i, baseSeverity: THREAT_BLOCK, msg: '禁止移动文件' },
 ];
 
-export function stripStringsAndComments(code) {
-  const withoutStrings = code.replace(/"([^"\\]*(?:\\.[^"\\]*)*)"/g, '');
-  return withoutStrings.replace(/;.*$/gm, '');
+let _cachedLevel = null;
+
+export function refreshConfig() {
+  _cachedLevel = null;
+}
+
+try {
+  onConfigChange(() => { _cachedLevel = null; });
+} catch (_) {}
+
+function resolveSeverity(rule) {
+  if (_cachedLevel) return _cachedLevel;
+  _cachedLevel = getLevel();
+  return _cachedLevel;
 }
 
 export function validateLispCodeWorker(code) {
   const clean = stripStringsAndComments(code);
-  for (const { re, severity, msg } of SECURITY_RULES) {
+  const effectiveSeverity = resolveSeverity();
+
+  for (const rule of SECURITY_RULES) {
+    const re = rule.re;
     if (re.test(clean)) {
-      if (severity === THREAT_BLOCK) {
-        return { valid: false, error: msg };
+      if (effectiveSeverity === THREAT_BLOCK) {
+        return { valid: false, error: rule.msg };
       }
-      if (severity === THREAT_WARN) {
-        log('WARN: ' + msg);
+      if (effectiveSeverity === THREAT_WARN) {
+        log('WARN: ' + rule.msg);
       }
     }
   }
   return { valid: true };
 }
 
+export function getEffectiveSeverity() {
+  return resolveSeverity();
+}
+
+export function stripStringsAndComments(code) {
+  const withoutStrings = code.replace(/"([^"\\]*(?:\\.[^"\\]*)*)"/g, '');
+  return withoutStrings.replace(/;.*$/gm, '');
+}
+
 export function checkParens(code) {
   let depth = 0;
   let inString = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlisp/mcp",
-  "version": "1.8.20",
+  "version": "1.8.21",
   "description": "MCP Server for @lisp on CAD,support AutoCAD/GstarCAD/ZWCAD/BricsCAD or CAD platform compatible with AutoLISP",
   "type": "module",
   "bin": {