@bolloon/bolloon-agent 0.4.28 → 0.4.29

package/dist/electron-build/pi-ecosystem-mcp/ui-tools.js

@@ -0,0 +1,116 @@
+"use strict";
+/**
+ * ui-tools.ts — MCP 驱动的前端 UI 控制工具 (2026-08-12)
+ *
+ * 目标: bolloon 作为 MCP server 暴露 UI 控制工具, agent 理解用户意图后
+ * 通过 MCP 调用这些工具, 驱动前端 (web / 手机端 Capacitor) 的 UI 组件.
+ *
+ * 机制:
+ *   - 注册一组 UI 控制工具到 MCP 系统 (registerTool), 供 agent 用 mcp_tool 调用
+ *   - 工具 execute 时通过注入的 broadcast 回调, 广播 { type: 'ui', action, data } 给前端 (SSE /events)
+ *   - 前端订阅 /events, 收到 ui 指令执行对应组件 (switchTab/openChat/openSettings 等)
+ *
+ * 设计: UI 工具不走外部 MCP server (executeTool 硬依赖 server), 而是本地 handler + broadcast.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setUiBroadcast = setUiBroadcast;
+exports.broadcastUiAction = broadcastUiAction;
+exports.dispatchUiAction = dispatchUiAction;
+exports.registerUiControlTools = registerUiControlTools;
+exports.uiToolNameToAction = uiToolNameToAction;
+const index_js_1 = require("./index.js");
+/** broadcast 注入点 (由 server 调用 setUiBroadcast 注入, 广播给前端 SSE) */
+let uiBroadcast = null;
+/** 注入广播函数 (server 启动时调用, 关联到 SSE /events) */
+function setUiBroadcast(fn) {
+    uiBroadcast = fn;
+}
+/** 广播一条 UI 控制指令给所有前端 */
+function broadcastUiAction(action, data) {
+    if (!uiBroadcast)
+        return false;
+    uiBroadcast({ type: 'ui', action, data: data ?? {} });
+    return true;
+}
+/** 把一次 UI 工具调用 (agent 意图理解后发起) 广播给前端 */
+function dispatchUiAction(call) {
+    const { action, data } = call || {};
+    if (!action)
+        return { success: false, output: 'action 必填 (switchTab/openChat/openSettings 等)' };
+    const ok = broadcastUiAction(action, data);
+    return { success: ok, output: ok ? `已驱动前端: ${action}` : 'UI 广播未连接' };
+}
+/** 注册 UI 控制工具到 MCP 系统 (供 agent mcp_tool 调用) */
+function registerUiControlTools() {
+    const toolDefs = [
+        {
+            name: 'ui_switch_tab',
+            description: '驱动前端切换底部 tab. 用户想"去通讯录/去我的/去设置"时调用. tab: wechat|contacts|discover|me',
+            inputSchema: { type: 'object', properties: { tab: { type: 'string' } }, required: ['tab'] },
+        },
+        {
+            name: 'ui_open_chat',
+            description: '驱动前端打开某个智能体聊天页. 用户想"打开和 X 的聊天"时调用. channelId: 目标 channel',
+            inputSchema: { type: 'object', properties: { channelId: { type: 'string' } }, required: ['channelId'] },
+        },
+        {
+            name: 'ui_open_settings',
+            description: '驱动前端打开设置页. 用户想"打开设置/配置"时调用.',
+            inputSchema: { type: 'object', properties: {} },
+        },
+        {
+            name: 'ui_open_wallet',
+            description: '驱动前端打开钱包. 用户想"看钱包/支付"时调用.',
+            inputSchema: { type: 'object', properties: {} },
+        },
+        {
+            name: 'ui_open_add_friend',
+            description: '驱动前端打开添加好友. 用户想"添加好友"时调用.',
+            inputSchema: { type: 'object', properties: {} },
+        },
+        {
+            name: 'ui_send_message',
+            description: '驱动前端在当前聊天发送消息. channelId: 目标 channel, text: 要发的消息文本.',
+            inputSchema: { type: 'object', properties: { channelId: { type: 'string' }, text: { type: 'string' } }, required: ['channelId', 'text'] },
+        },
+        {
+            name: 'ui_show_toast',
+            description: '在前端顶部显示一条提示 (toast). message: 提示内容.',
+            inputSchema: { type: 'object', properties: { message: { type: 'string' } }, required: ['message'] },
+        },
+        {
+            name: 'ui_go_back',
+            description: '驱动前端返回上一页. 用户想"返回/回去"时调用.',
+            inputSchema: { type: 'object', properties: {} },
+        },
+    ];
+    let count = 0;
+    for (const t of toolDefs) {
+        // 已注册则跳过 (幂等)
+        if ((0, index_js_1.listTools)().some((x) => x.name === t.name))
+            continue;
+        (0, index_js_1.registerTool)({
+            name: t.name,
+            description: t.description,
+            inputSchema: t.inputSchema,
+            serverName: 'ui', // 本地 UI 工具 (不走外部 server; 由 agent 调用方 dispatch)
+        });
+        count++;
+    }
+    return count;
+}
+/** agent 工具 (pi-sdk-tools 注册) 的 execute 适配: name → UiAction */
+function uiToolNameToAction(name) {
+    switch (name) {
+        case 'ui_switch_tab': return 'switchTab';
+        case 'ui_open_chat': return 'openChat';
+        case 'ui_open_settings': return 'openSettings';
+        case 'ui_open_wallet': return 'openWallet';
+        case 'ui_open_add_friend': return 'openAddFriend';
+        case 'ui_send_message': return 'sendMessage';
+        case 'ui_show_toast': return 'showToast';
+        case 'ui_go_back': return 'goBack';
+        default: return null;
+    }
+}
+//# sourceMappingURL=ui-tools.js.map

package/dist/electron-build/pi-ecosystem-mcp/ui-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-tools.js","sourceRoot":"","sources":["../../../src/pi-ecosystem-mcp/ui-tools.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;;;;;AAEH,yCAAqD;AAiBrD,+DAA+D;AAC/D,IAAI,WAAW,GAAoE,IAAI,CAAC;AAExF,6CAA6C;AAC7C,wBAA+B,EAA0D;IACvF,WAAW,GAAG,EAAE,CAAC;AACnB,CAAC;AAED,wBAAwB;AACxB,2BAAkC,MAAgB,EAAE,IAA8B;IAChF,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wCAAwC;AACxC,0BAAiC,IAAgB;IAC/C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IAChG,MAAM,EAAE,GAAG,iBAAiB,CAAC,MAAkB,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AACvE,CAAC;AAED,+CAA+C;AAC/C;IACE,MAAM,QAAQ,GAAuF;QACnG;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,sEAAsE;YACnF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE;SAC5F;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,0DAA0D;YACvE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE;SACxG;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,6BAA6B;YAC1C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;SAChD;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,2BAA2B;YACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;SAChD;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,2BAA2B;YACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;SAChD;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,sDAAsD;YACnE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;SAC1I;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,qCAAqC;YAClD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;SACpG;QACD;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,2BAA2B;YACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;SAChD;KACF,CAAC;IAEF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,cAAc;QACd,IAAI,IAAA,oBAAS,GAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,IAAA,uBAAY,EAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,IAAI,EAAE,+CAA+C;SAClE,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,4BAAmC,IAAY;IAC7C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe,EAAE,OAAO,WAAW,CAAC;QACzC,KAAK,cAAc,EAAE,OAAO,UAAU,CAAC;QACvC,KAAK,kBAAkB,EAAE,OAAO,cAAc,CAAC;QAC/C,KAAK,gBAAgB,EAAE,OAAO,YAAY,CAAC;QAC3C,KAAK,oBAAoB,EAAE,OAAO,eAAe,CAAC;QAClD,KAAK,iBAAiB,EAAE,OAAO,aAAa,CAAC;QAC7C,KAAK,eAAe,EAAE,OAAO,WAAW,CAAC;QACzC,KAAK,YAAY,EAAE,OAAO,QAAQ,CAAC;QACnC,SAAS,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/electron-build/pi-ecosystem-subagents/index.js

@@ -0,0 +1,352 @@
+"use strict";
+/**
+ * Pi Subagents Integration for Bolloon
+ *
+ * Lightweight subagent implementation based on tmux multi-session.
+ * Based on pi-subagents philosophy: simple task delegation and result collection.
+ *
+ * Key differences from Claude Code subagents:
+ * - tmux-based sessions (not black-box background processes)
+ * - Simple task委托 and result回收
+ * - Full visibility into what each subagent is doing
+ * - No complex scheduling - suitable for single task splitting
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSubagent = createSubagent;
+exports.startSubagent = startSubagent;
+exports.delegateTask = delegateTask;
+exports.sendToSubagent = sendToSubagent;
+exports.getSubagent = getSubagent;
+exports.listSubagents = listSubagents;
+exports.listRunningSubagents = listRunningSubagents;
+exports.terminateSubagent = terminateSubagent;
+exports.loadSubagents = loadSubagents;
+exports.getStats = getStats;
+exports.cleanupSubagents = cleanupSubagents;
+exports.parallelDelegate = parallelDelegate;
+exports.splitTask = splitTask;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+// Session management
+const sessions = new Map();
+const tmuxSessions = new Map();
+const SESSION_PREFIX = 'bolloon-subagent-';
+const STATE_DIR = path.join(process.env.HOME || '/tmp', '.bolloon', 'subagents');
+/**
+ * Generate a unique subagent ID
+ */
+function generateId() {
+    return `sa-${Date.now()}-${Math.random().toString(36).substring(2, 8)}`;
+}
+/**
+ * Create a new tmux session for a subagent
+ */
+async function createSubagent(task, options = {}) {
+    const id = generateId();
+    const sessionId = `${SESSION_PREFIX}${id}`;
+    const name = options.name || `subagent-${id.substring(0, 8)}`;
+    const subagent = {
+        id,
+        name,
+        task,
+        status: 'created',
+        sessionId,
+        createdAt: new Date().toISOString(),
+    };
+    sessions.set(id, subagent);
+    await fs.mkdir(STATE_DIR, { recursive: true });
+    await fs.writeFile(path.join(STATE_DIR, `${id}.json`), JSON.stringify(subagent, null, 2));
+    console.log(`[PiSubagents] Created subagent: ${id} - ${name}`);
+    return subagent;
+}
+/**
+ * Start a subagent in a tmux session
+ */
+async function startSubagent(id, command, options = {}) {
+    const subagent = sessions.get(id);
+    if (!subagent) {
+        return { subagentId: id, success: false, error: 'Subagent not found' };
+    }
+    if (subagent.status === 'running') {
+        return { subagentId: id, success: false, error: 'Subagent already running' };
+    }
+    subagent.status = 'running';
+    subagent.startedAt = new Date().toISOString();
+    await saveSubagent(subagent);
+    return new Promise((resolve) => {
+        // Create a detached tmux session running the command
+        const tmuxCmd = (0, child_process_1.spawn)('tmux', [
+            'new-session',
+            '-d',
+            '-s',
+            subagent.sessionId,
+            command,
+        ], {
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        tmuxSessions.set(id, tmuxCmd);
+        const timeoutMs = options.timeoutMs || 5 * 60 * 1000;
+        let timedOut = false;
+        const timeout = setTimeout(() => {
+            timedOut = true;
+            terminateSubagent(id);
+            subagent.status = 'failed';
+            subagent.error = 'Task timeout';
+            resolve({
+                subagentId: id,
+                success: false,
+                error: 'Task timeout',
+            });
+        }, timeoutMs);
+        tmuxCmd.on('error', (err) => {
+            clearTimeout(timeout);
+            subagent.status = 'failed';
+            subagent.error = String(err);
+            sessions.set(id, subagent);
+            resolve({ subagentId: id, success: false, error: String(err) });
+        });
+        tmuxCmd.on('exit', async (code) => {
+            clearTimeout(timeout);
+            subagent.completedAt = new Date().toISOString();
+            if (timedOut)
+                return;
+            if (code === 0) {
+                subagent.status = 'completed';
+                // Try to capture output
+                try {
+                    const output = await captureTmuxOutput(subagent.sessionId);
+                    subagent.result = output;
+                    resolve({
+                        subagentId: id,
+                        success: true,
+                        result: output,
+                        duration: subagent.startedAt
+                            ? Date.now() - new Date(subagent.startedAt).getTime()
+                            : undefined,
+                    });
+                }
+                catch {
+                    resolve({
+                        subagentId: id,
+                        success: true,
+                        duration: subagent.startedAt
+                            ? Date.now() - new Date(subagent.startedAt).getTime()
+                            : undefined,
+                    });
+                }
+            }
+            else {
+                subagent.status = 'failed';
+                subagent.error = `Exit code: ${code}`;
+                resolve({
+                    subagentId: id,
+                    success: false,
+                    error: `Exit code: ${code}`,
+                    duration: subagent.startedAt
+                        ? Date.now() - new Date(subagent.startedAt).getTime()
+                        : undefined,
+                });
+            }
+            sessions.set(id, subagent);
+            await saveSubagent(subagent);
+        });
+    });
+}
+/**
+ * Delegate a task to a new subagent and start it
+ */
+async function delegateTask(task, command, options = {}) {
+    const subagent = await createSubagent(task, options);
+    return startSubagent(subagent.id, command, options);
+}
+/**
+ * Capture output from a tmux session
+ */
+async function captureTmuxOutput(sessionId) {
+    return new Promise((resolve, reject) => {
+        const capture = (0, child_process_1.spawn)('tmux', ['capture-pane', '-t', sessionId, '-p']);
+        let output = '';
+        capture.stdout.on('data', (data) => {
+            output += data.toString();
+        });
+        capture.on('error', reject);
+        capture.on('close', () => {
+            resolve(output.trim());
+        });
+    });
+}
+/**
+ * Send input to a running subagent
+ */
+async function sendToSubagent(id, input) {
+    const subagent = sessions.get(id);
+    if (!subagent) {
+        throw new Error('Subagent not found');
+    }
+    return new Promise((resolve, reject) => {
+        const tmux = (0, child_process_1.spawn)('tmux', ['send-keys', '-t', subagent.sessionId, input, 'Enter']);
+        tmux.on('error', reject);
+        tmux.on('close', () => resolve());
+    });
+}
+/**
+ * Get subagent status
+ */
+function getSubagent(id) {
+    return sessions.get(id);
+}
+/**
+ * List all subagents
+ */
+function listSubagents() {
+    return Array.from(sessions.values());
+}
+/**
+ * List running subagents
+ */
+function listRunningSubagents() {
+    return Array.from(sessions.values()).filter((s) => s.status === 'running');
+}
+/**
+ * Terminate a subagent
+ */
+async function terminateSubagent(id) {
+    const subagent = sessions.get(id);
+    if (!subagent)
+        return;
+    // Kill tmux session
+    (0, child_process_1.spawn)('tmux', ['kill-session', '-t', subagent.sessionId]);
+    const tmuxProcess = tmuxSessions.get(id);
+    if (tmuxProcess) {
+        tmuxProcess.kill();
+        tmuxSessions.delete(id);
+    }
+    subagent.status = 'terminated';
+    subagent.completedAt = new Date().toISOString();
+    sessions.set(id, subagent);
+    await saveSubagent(subagent);
+    console.log(`[PiSubagents] Terminated subagent: ${id}`);
+}
+/**
+ * Save subagent state to disk
+ */
+async function saveSubagent(subagent) {
+    try {
+        await fs.mkdir(STATE_DIR, { recursive: true });
+        await fs.writeFile(path.join(STATE_DIR, `${subagent.id}.json`), JSON.stringify(subagent, null, 2));
+    }
+    catch (e) {
+        console.warn('[PiSubagents] Failed to save subagent:', e);
+    }
+}
+/**
+ * Load subagents from disk
+ */
+async function loadSubagents() {
+    try {
+        await fs.mkdir(STATE_DIR, { recursive: true });
+        const files = await fs.readdir(STATE_DIR);
+        for (const file of files) {
+            if (file.endsWith('.json')) {
+                const data = await fs.readFile(path.join(STATE_DIR, file), 'utf-8');
+                const subagent = JSON.parse(data);
+                sessions.set(subagent.id, subagent);
+            }
+        }
+        console.log(`[PiSubagents] Loaded ${sessions.size} subagents`);
+    }
+    catch {
+        // Directory doesn't exist
+    }
+}
+/**
+ * Get subagent statistics
+ */
+function getStats() {
+    const all = Array.from(sessions.values());
+    return {
+        total: all.length,
+        running: all.filter((s) => s.status === 'running').length,
+        completed: all.filter((s) => s.status === 'completed').length,
+        failed: all.filter((s) => s.status === 'failed').length,
+    };
+}
+/**
+ * Clean up terminated subagents
+ */
+async function cleanupSubagents() {
+    const terminated = Array.from(sessions.values()).filter((s) => s.status === 'terminated' || s.status === 'completed' || s.status === 'failed');
+    for (const subagent of terminated) {
+        try {
+            await fs.unlink(path.join(STATE_DIR, `${subagent.id}.json`));
+            sessions.delete(subagent.id);
+        }
+        catch {
+            // File doesn't exist
+        }
+    }
+    if (terminated.length > 0) {
+        console.log(`[PiSubagents] Cleaned up ${terminated.length} subagents`);
+    }
+}
+/**
+ * Execute a task in parallel using multiple subagents
+ */
+async function parallelDelegate(tasks, commandFactory, options = {}) {
+    const promises = tasks.map((task) => delegateTask(task, commandFactory(task), options));
+    return Promise.all(promises);
+}
+/**
+ * Split a long-form task across multiple subagents
+ * (e.g., writing and researching simultaneously)
+ */
+async function splitTask(mainTask, subtasks, commandFactory, options = {}) {
+    const results = new Map();
+    // Create all subagents
+    const subagents = await Promise.all(subtasks.map((st) => createSubagent(`${mainTask}: ${st}`, options)));
+    // Start all in parallel
+    const promises = subagents.map((sa, i) => startSubagent(sa.id, commandFactory(subtasks[i]), options).then((r) => ({
+        subtask: subtasks[i],
+        result: r,
+    })));
+    const settled = await Promise.all(promises);
+    for (const { subtask, result } of settled) {
+        results.set(subtask, result);
+    }
+    return results;
+}
+//# sourceMappingURL=index.js.map

package/dist/electron-build/pi-ecosystem-subagents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/pi-ecosystem-subagents/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,iDAAoD;AACpD,MAAY,EAAE,wCAAoB;AAClC,MAAY,IAAI,iCAAa;AA+B7B,qBAAqB;AACrB,MAAM,QAAQ,GAA0B,IAAI,GAAG,EAAE,CAAC;AAClD,MAAM,YAAY,GAA8B,IAAI,GAAG,EAAE,CAAC;AAC1D,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAEjF;;GAEG;AACH,SAAS,UAAU;IACjB,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED;;GAEG;AACI,KAAK,yBACV,IAAY,EACZ,OAAO,GAA4B,EAAE;IAErC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,GAAG,cAAc,GAAG,EAAE,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAE9D,MAAM,QAAQ,GAAa;QACzB,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,MAAM,EAAE,SAAS;QACjB,SAAS;QACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE3B,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACI,KAAK,wBACV,EAAU,EACV,OAAe,EACf,OAAO,GAA4B,EAAE;IAErC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC/E,CAAC;IAED,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE;YAC5B,aAAa;YACb,IAAI;YACJ,IAAI;YACJ,QAAQ,CAAC,SAAS;YAClB,OAAO;SACR,EAAE;YACD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACrD,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,QAAQ,GAAG,IAAI,CAAC;YAChB,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACtB,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3B,QAAQ,CAAC,KAAK,GAAG,cAAc,CAAC;YAChC,OAAO,CAAC;gBACN,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3B,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC3B,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAChC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAEhD,IAAI,QAAQ;gBAAE,OAAO;YAErB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC;gBAC9B,wBAAwB;gBACxB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAC3D,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;oBACzB,OAAO,CAAC;wBACN,UAAU,EAAE,EAAE;wBACd,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,MAAM;wBACd,QAAQ,EAAE,QAAQ,CAAC,SAAS;4BAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;4BACrD,CAAC,CAAC,SAAS;qBACd,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC;wBACN,UAAU,EAAE,EAAE;wBACd,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,QAAQ,CAAC,SAAS;4BAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;4BACrD,CAAC,CAAC,SAAS;qBACd,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC3B,QAAQ,CAAC,KAAK,GAAG,cAAc,IAAI,EAAE,CAAC;gBACtC,OAAO,CAAC;oBACN,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,cAAc,IAAI,EAAE;oBAC3B,QAAQ,EAAE,QAAQ,CAAC,SAAS;wBAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;wBACrD,CAAC,CAAC,SAAS;iBACd,CAAC,CAAC;YACL,CAAC;YAED,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC3B,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACI,KAAK,uBACV,IAAY,EACZ,OAAe,EACf,OAAO,GAA4B,EAAE;IAErC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACjC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACI,KAAK,yBAAyB,EAAU,EAAE,KAAa;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,qBAA4B,EAAU;IACpC,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH;IACE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH;IACE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACI,KAAK,4BAA4B,EAAU;IAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,oBAAoB;IACpB,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1D,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,WAAW,EAAE,CAAC;QAChB,WAAW,CAAC,IAAI,EAAE,CAAC;QACnB,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC;IAC/B,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3B,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE7B,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,EAAE,OAAO,CAAC,EAC3C,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK;IACV,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;gBACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;gBAC9C,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,IAAI,YAAY,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;AACH,CAAC;AAED;;GAEG;AACH;IAME,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QACzD,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;QAC7D,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;KACxD,CAAC;AACJ,CAAC;AAED;;GAEG;AACI,KAAK;IACV,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtF,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,4BAA4B,UAAU,CAAC,MAAM,YAAY,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,2BACV,KAAe,EACf,cAAwC,EACxC,OAAO,GAA4B,EAAE;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACxF,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACI,KAAK,oBACV,QAAgB,EAChB,QAAkB,EAClB,cAA2C,EAC3C,OAAO,GAA4B,EAAE;IAErC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,uBAAuB;IACvB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,QAAQ,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CACpE,CAAC;IAEF,wBAAwB;IACxB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CACvC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpB,MAAM,EAAE,CAAC;KACV,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/electron-build/security/builtin-guards.js

@@ -0,0 +1,133 @@
+"use strict";
+/**
+ * Builtin Guards — Tool 输出审计 (4 个内置)
+ *
+ * 跟 harness-integration/guard-checker 互补: 后者对**文件**做静态检查,
+ * 本文件对**tool 返的字符串**做动态内容审计.
+ *
+ * 设计原则:
+ * - 任何 guard 自身挂掉 = pass (fail-open), 不阻塞主对话
+ * - 每个 guard 返回 severity (critical/warning/info) + reason
+ * - critical 触发 reject; warning 触发 log + 允许
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.guardNoSecretLeak = guardNoSecretLeak;
+exports.guardNoProcessEscape = guardNoProcessEscape;
+exports.guardNoNetworkLeak = guardNoNetworkLeak;
+exports.guardNoRecursiveTool = guardNoRecursiveTool;
+exports.runBuiltinGuards = runBuiltinGuards;
+exports.auditToolOutput = auditToolOutput;
+const MAX_EVIDENCE = 120;
+// ============================================================
+// 1. no-secret-leak: tool output 不含 ~/.bolloon/iroh-secret-*.json 等
+// ============================================================
+const SECRET_PATTERNS = [
+    { re: /iroh-secret-[a-zA-Z0-9_]+\.json/, label: 'iroh secret' },
+    { re: /p2p-direct-secret-[a-zA-Z0-9_]+\.json/, label: 'p2p-direct secret' },
+    { re: /-----BEGIN (RSA |EC |OPENSSH )?PRIVATE KEY-----/, label: 'private key' },
+    // 通用 API key 模式 (sk- / sk-proj- / sk-ant- / ghp_ / xoxb-)
+    { re: /\b(sk-(?:proj-|ant-)?[A-Za-z0-9]{20,}|ghp_[A-Za-z0-9]{20,}|xoxb-[A-Za-z0-9-]{20,})/, label: 'API key' },
+];
+function guardNoSecretLeak(output) {
+    for (const { re, label } of SECRET_PATTERNS) {
+        const m = output.match(re);
+        if (m) {
+            return {
+                guard: 'no-secret-leak',
+                severity: 'critical',
+                reason: `tool output 含 ${label} 模式, 可能泄露敏感凭据`,
+                evidence: m[0].substring(0, MAX_EVIDENCE) + '***',
+            };
+        }
+    }
+    return null;
+}
+// ============================================================
+// 2. no-process-escape: shell 工具的 args 不含交互式 reverse shell
+// ============================================================
+const ESCAPE_PATTERNS = [
+    { re: /\bbash\s+-i\b/, label: 'bash interactive' },
+    // netcat listener 允许任意顺序的 -e / -l 标志
+    { re: /\bnc\s+(?:-[a-zA-Z]*\s+)*-[a-zA-Z]*[el][a-zA-Z]*\b/, label: 'netcat listener' },
+    { re: /\bnc\b.*-l/, label: 'netcat listener (loose)' },
+    { re: /\bpython[23]?\s+-c\s+["'].*import\s+socket.*subprocess/m, label: 'python reverse shell' },
+    { re: /`[^`]+`/, label: 'backtick exec' }, // 简单检测
+    { re: /\$\(\s*curl\b/, label: 'command sub + curl' },
+];
+function guardNoProcessEscape(args) {
+    const cmd = String(args.command || args.cmd || '');
+    for (const { re, label } of ESCAPE_PATTERNS) {
+        if (re.test(cmd)) {
+            return {
+                guard: 'no-process-escape',
+                severity: 'critical',
+                reason: `shell 参数含 ${label} 模式, 可能建立 reverse shell`,
+                evidence: cmd.substring(0, MAX_EVIDENCE),
+            };
+        }
+    }
+    return null;
+}
+// ============================================================
+// 3. no-network-leak: tool args 不含外网 URL (除非 userInput 明确表示要发外网)
+// ============================================================
+/**
+ * 简单检测: http(s)://外网域名 (非 localhost / 127.0.0.1 / 内网 IP)
+ */
+const URL_RE = /\bhttps?:\/\/([a-zA-Z0-9.-]+)/g;
+const ALLOWED_HOSTS = new Set(['localhost', '127.0.0.1', '0.0.0.0']);
+function guardNoNetworkLeak(args) {
+    const cmd = String(args.command || args.cmd || args.url || '');
+    const matches = [...cmd.matchAll(URL_RE)];
+    for (const m of matches) {
+        const host = m[1];
+        if (!ALLOWED_HOSTS.has(host) && !host.endsWith('.local')) {
+            return {
+                guard: 'no-network-leak',
+                severity: 'warning', // 警告而非 critical — LLM 可能确实要发外网
+                reason: `检测到外网 URL: ${host}`,
+                evidence: m[0].substring(0, MAX_EVIDENCE),
+            };
+        }
+    }
+    return null;
+}
+// ============================================================
+// 4. no-recursive-tool: tool args 不含调用 tool 的迹象
+// ============================================================
+const TOOL_NAME_HINTS = ['tool', 'mcp_', 'pi_ecosystem', 'bollharness'];
+const RECURSIVE_PATTERNS = [
+    { re: /\bexec(?:ute)?[_(tool|shell_exec|bash)\b]/, label: 'recursive tool call' },
+    { re: /\bdispatch_to_agent\b/, label: 'agent dispatch loop' },
+];
+function guardNoRecursiveTool(args) {
+    const cmd = JSON.stringify(args);
+    for (const hint of TOOL_NAME_HINTS) {
+        // args 里引用 tool 调用名是合理的 (e.g. description), 只看递归模式
+    }
+    for (const { re, label } of RECURSIVE_PATTERNS) {
+        if (re.test(cmd)) {
+            return {
+                guard: 'no-recursive-tool',
+                severity: 'warning',
+                reason: `检测到 ${label} 模式, agent 可能进入死循环`,
+                evidence: cmd.substring(0, MAX_EVIDENCE),
+            };
+        }
+    }
+    return null;
+}
+function runBuiltinGuards(args) {
+    const hits = [];
+    hits.push(...compact([guardNoProcessEscape(args), guardNoNetworkLeak(args), guardNoRecursiveTool(args)]));
+    const criticalCount = hits.filter((h) => h.severity === 'critical').length;
+    return { hits, criticalCount };
+}
+/** Tool output 审计 (secret leak) — 单独入口, 不在 args guard 里 */
+function auditToolOutput(output) {
+    return guardNoSecretLeak(output);
+}
+function compact(arr) {
+    return arr.filter((x) => x !== null && x !== undefined);
+}
+//# sourceMappingURL=builtin-guards.js.map

package/dist/electron-build/security/builtin-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-guards.js","sourceRoot":"","sources":["../../../src/security/builtin-guards.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;AAcH,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,+DAA+D;AAC/D,oEAAoE;AACpE,+DAA+D;AAE/D,MAAM,eAAe,GAAyC;IAC5D,EAAE,EAAE,EAAE,iCAAiC,EAAE,KAAK,EAAE,aAAa,EAAE;IAC/D,EAAE,EAAE,EAAE,uCAAuC,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC3E,EAAE,EAAE,EAAE,iDAAiD,EAAE,KAAK,EAAE,aAAa,EAAE;IAC/E,0DAA0D;IAC1D,EAAE,EAAE,EAAE,oFAAoF,EAAE,KAAK,EAAE,SAAS,EAAE;CAC/G,CAAC;AAEF,2BAAkC,MAAc;IAC9C,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC;YACN,OAAO;gBACL,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,iBAAiB,KAAK,eAAe;gBAC7C,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,2DAA2D;AAC3D,+DAA+D;AAE/D,MAAM,eAAe,GAAyC;IAC5D,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAClD,qCAAqC;IACrC,EAAE,EAAE,EAAE,oDAAoD,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACtF,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,yBAAyB,EAAE;IACtD,EAAE,EAAE,EAAE,yDAAyD,EAAE,KAAK,EAAE,sBAAsB,EAAE;IAChG,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,EAAG,OAAO;IACnD,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE;CACrD,CAAC;AAEF,8BAAqC,IAA6B;IAChE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO;gBACL,KAAK,EAAE,mBAAmB;gBAC1B,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,aAAa,KAAK,yBAAyB;gBACnD,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,iEAAiE;AACjE,+DAA+D;AAE/D;;GAEG;AACH,MAAM,MAAM,GAAG,gCAAgC,CAAC;AAChD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAErE,4BAAmC,IAA6B;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,OAAO;gBACL,KAAK,EAAE,iBAAiB;gBACxB,QAAQ,EAAE,SAAS,EAAG,+BAA+B;gBACrD,MAAM,EAAE,cAAc,IAAI,EAAE;gBAC5B,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC;aAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,gDAAgD;AAChD,+DAA+D;AAE/D,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AACxE,MAAM,kBAAkB,GAAyC;IAC/D,EAAE,EAAE,EAAE,2CAA2C,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACjF,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,qBAAqB,EAAE;CAC9D,CAAC;AAEF,8BAAqC,IAA6B;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,mDAAmD;IACrD,CAAC;IACD,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC/C,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO;gBACL,KAAK,EAAE,mBAAmB;gBAC1B,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,OAAO,KAAK,oBAAoB;gBACxC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,0BAAiC,IAA6B;IAC5D,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC3E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAED,2DAA2D;AAC3D,yBAAgC,MAAc;IAC5C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,OAAO,CAAI,GAAgC;IAClD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAU,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;AAClE,CAAC"}