@bolloon/bolloon-agent 0.4.28 → 0.4.30

package/dist/electron-build/agents/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../../src/agents/session-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,wCAAoB;AAClC,MAAY,IAAI,iCAAa;AAC7B,MAAY,EAAE,+BAAW;AAmCzB;IACmB,QAAQ,CAAS;IAClC,wDAAwD;IACvC,QAAQ,CAAS;IAElC,YAAY,MAAM,GAAuB,EAAE;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,iBAAiB;IACjB,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,GAAqB;QACzD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;YACnC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;SACxC,CAAC,GAAG,IAAI,CAAC;QACV,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,GAAW;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS;gBAC1B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;oBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,SAAS,EAAE,KAAK,CAAC,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ;YACV,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,GAAW;QACjB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED,8DAA8D;IAC9D,MAAM,CAAC,cAAc,CAAC,GAAW;QAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,+CAA+C;IAC/C,MAAM,CAAC,gBAAgB,CAAC,WAAmB;QACzC,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,QAA4B;QAC1D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,OAAO,GAAqB;YAChC,GAAG;YACH,QAAQ;YACR,QAAQ,EAAE;gBACR,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACnB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B;SACF,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,QAAQ,MAAM,CAAC;QAClC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,oCAAoC;QACpC,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;oBACxB,EAAE,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;oBAC/B,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;oBACnC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;oBACvC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;iBACxC,CAAC,CAAC,CAAC;YACN,CAAC;YACD,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,GAAW,EAAE,QAA4B;QACxD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAqB;YAChC,GAAG;YACH,QAAQ;YACR,QAAQ,EAAE;gBACR,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACnB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B;SACF,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,QAAQ,MAAM,CAAC;QAClC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,CAAC,CAAC;QACV,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,sCAAsC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC,QAA8B,CAAC;IAC/C,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,KAAK;iBACT,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBACvD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;iBACpE,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;CACF;;AAED,8CAA8C;AAC9C,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AACD,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AACD,SAAS,YAAY,CAAC,IAAY,EAAE,EAAU;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,2DAA2D;AAC9C,QAAA,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC"}

package/dist/electron-build/agents/shell-guard.js

@@ -0,0 +1,465 @@
+"use strict";
+/**
+ * Shell 命令硬护栏 (策略可配置版)
+ *
+ * 设计原则:
+ *   1. 白名单/黑名单从 ~/.bolloon/self-improve-policy.json 加载
+ *   2. 加载失败或缺失时, 使用**硬编码兜底** (永远拒绝 = 最安全)
+ *   3. 策略文件在禁区里, AI 即便拿到 shell_exec 也改不了
+ *   4. 提供 API 端点供**人**热加载策略, 并写审计日志
+ *
+ * 策略文件 schema (self-improve-policy.json):
+ * {
+ *   "version": 1,
+ *   "commandAllowlist": ["git", "npm", "tsc", "vitest", "cat", "ls", "..."],
+ *   "commandDenylist": ["rm", "mv", "chmod", "sudo", "su", "curl", "wget"],
+ *   "pathAllowlist": [
+ *     "src/web/client.ts",
+ *     "src/agents/workflow-engine.ts",
+ *     "*.md",
+ *     "docs/**"
+ *   ],
+ *   "pathDenylist": [
+ *     "src/agents/pi-sdk.ts",
+ *     "src/agents/shell-guard.ts",
+ *     "src/agents/shell-tool.ts",
+ *     "src/heartbeat/**",
+ *     "src/network/**",
+ *     "src/pi-ecosystem-judgment/**",
+ *     "package.json",
+ *     ".env*",
+ *     ".git/**",
+ *     "dist/**",
+ *     "node_modules/**"
+ *   ],
+ *   "cooldownMs": 21600000,
+ *   "sandboxCwd": ".bolloon-shell-sandbox",
+ *   "branchPrefix": "agent/self-imp-"
+ * }
+ *
+ * 匹配规则:
+ *   1. 路径先查 denylist (命中即拒), 再查 allowlist (没命中即拒)
+ *   2. 命令先查 denylist (命中即拒), 再查 allowlist (没命中即拒)
+ *   3. 通配符: * 匹配单层文件名, ** 匹配任意层级
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POLICY_AUDIT_PATH_PUBLIC = exports.SHELL_SANDBOX_CWD = exports.SELF_IMPROVE_COOLDOWN_MS = exports.SELF_IMPROVE_BRANCH_PREFIX = void 0;
+exports.loadPolicy = loadPolicy;
+exports.auditShellCall = auditShellCall;
+exports.checkCommand = checkCommand;
+exports.checkWritePath = checkWritePath;
+exports.getBranchPrefix = getBranchPrefix;
+exports.getCooldownMs = getCooldownMs;
+exports.getSandboxCwd = getSandboxCwd;
+exports.checkTerminalCommand = checkTerminalCommand;
+exports.writePolicy = writePolicy;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const i18n_js_1 = require("../web/i18n.js");
+// ============================================================================
+// 硬编码兜底 (策略文件读不到时, 用这套)
+// 这是**最后一道防线** - AI 即便能改 ~/.bolloon/ 也没法删这个常量
+// ============================================================================
+const FALLBACK_COMMAND_ALLOWLIST = new Set([
+    'git', 'node', 'npm', 'npx', 'tsx', 'tsc', 'vitest',
+    'cat', 'head', 'tail', 'wc', 'ls', 'echo', 'pwd', 'date',
+    'mkdir', 'touch',
+    // M3.5 (2026-06-17): Windows cmd 内置命令 (cmd.exe shell 模式)
+    //   'cat'/'ls' 在 Git Bash 才存在, Windows 原生 cmd 用 'type'/'dir'
+    'type', 'dir', 'cd', 'where', 'set', 'echo.',
+]);
+const FALLBACK_PATH_ALLOWLIST = [
+    // 自由区: AI 可以改
+    'src/web/client.ts',
+    'src/web/style.css',
+    'src/agents/workflow-engine.ts',
+    'src/agents/workflow-pivot-loop.ts',
+    'src/agents/constraint-layer.ts',
+    'src/test/**',
+    'docs/**',
+    '*.md',
+    'README.md'
+];
+const FALLBACK_PATH_DENYLIST = [
+    // 2026-06-17 (Q2-B): 解除 pi-sdk.ts denylist — 现在允许 agent 改自己源码以自进化
+    //   原屏蔽理由: "LLM 抽象层" — 但 owner 决定 auto-evolve 需要这个能力
+    //   仍保留: shell-guard.ts / shell-tool.ts — 改这两个等于改护栏本身, fail-open 风险太高
+    /(^|\/)src\/agents\/shell-guard\.ts$/, // 护栏本身
+    /(^|\/)src\/agents\/shell-tool\.ts$/, // shell 工具实现
+    /(^|\/)src\/heartbeat\//, // 心跳
+    /(^|\/)src\/network\//, // P2P / libp2p / iroh
+    /(^|\/)src\/pi-ecosystem-judgment\//, // judgment 系统
+    /(^|\/)package\.json$/,
+    /(^|\/)package-lock\.json$/,
+    /(^|\/)tsconfig.*\.json$/,
+    /(^|\/)\.env(\.|$)/,
+    /(^|\/)\.git\//,
+    /(^|\/)\.bolloon\//, // 策略文件 / sessions / persona
+    /(^|\/)dist\//,
+    // 2026-06-17: node_modules 不再 denylist, 因为 M3.4 自动 commit 阶段需要 npm install / npx vitest
+    //   通过 allowlist 限定 agent 只能 npm install, 不能 rm node_modules (shell arg denylist 仍禁 rm -rf)
+];
+const FALLBACK_ARG_DENYLIST = [
+    /^\s*push\s+(-f|--force)/i,
+    /^\s*push\s+origin\s+(master|main)\b/i,
+    /^\s*reset\s+--hard\b/i,
+    /^\s*clean\s+-fd?\b/i,
+    /^\s*--inspect\b/,
+    /[|&;`$()<>]/, // shell 元字符
+    /\brm\s+-rf?\b/i,
+    /\bsudo\b/i,
+    /\bsu\b/i,
+    /\bcurl\b/i,
+    /\bwget\b/i,
+    /\.\.\//, // 路径逃逸
+    /^\//, // 绝对路径
+    /^[a-zA-Z]:\\/, // Windows 绝对路径
+];
+let cachedPolicy = null;
+let policyLoadedAt = 0;
+const POLICY_TTL_MS = 60_000; // 60 秒缓存 (避免每次 shell_exec 都读盘)
+const POLICY_PATH = path.join(os.homedir(), '.bolloon', 'self-improve-policy.json');
+const POLICY_AUDIT_PATH = path.join(os.homedir(), '.bolloon', 'self-improve-audit.log');
+/**
+ * 默认策略模板 - 第一次启动时写到磁盘
+ */
+function getDefaultPolicy() {
+    return {
+        version: 1,
+        commandAllowlist: Array.from(FALLBACK_COMMAND_ALLOWLIST),
+        pathAllowlist: [...FALLBACK_PATH_ALLOWLIST],
+        pathDenylist: FALLBACK_PATH_DENYLIST.map(r => r.source),
+        cooldownMs: 6 * 60 * 60 * 1000,
+        sandboxCwd: '.bolloon-shell-sandbox',
+        branchPrefix: 'agent/self-imp-'
+    };
+}
+/**
+ * 加载策略 (有缓存)
+ * 加载失败返回 null, 调用方应回退到硬编码兜底
+ */
+function loadPolicy(forceReload = false) {
+    const now = Date.now();
+    if (!forceReload && cachedPolicy && now - policyLoadedAt < POLICY_TTL_MS) {
+        return cachedPolicy;
+    }
+    try {
+        if (!fs.existsSync(POLICY_PATH)) {
+            // 第一次启动: 写入默认策略
+            const dir = path.dirname(POLICY_PATH);
+            fs.mkdirSync(dir, { recursive: true });
+            fs.writeFileSync(POLICY_PATH, JSON.stringify(getDefaultPolicy(), null, 2));
+            console.log(`[shell-guard] 已生成默认策略: ${POLICY_PATH}`);
+        }
+        const raw = fs.readFileSync(POLICY_PATH, 'utf-8');
+        const parsed = JSON.parse(raw);
+        // 极简 schema 校验
+        if (!parsed.version || !Array.isArray(parsed.commandAllowlist) || !Array.isArray(parsed.pathAllowlist) || !Array.isArray(parsed.pathDenylist)) {
+            console.warn('[shell-guard] 策略文件 schema 不对, 用硬编码兜底');
+            return null;
+        }
+        cachedPolicy = parsed;
+        policyLoadedAt = now;
+        return parsed;
+    }
+    catch (err) {
+        console.warn('[shell-guard] 策略文件加载失败, 用硬编码兜底:', err);
+        return null;
+    }
+}
+/**
+ * 审计日志: 记录所有被拒/被允许的 shell_exec 调用
+ */
+function auditShellCall(result, cmd, args, reason, targetPath) {
+    try {
+        const dir = path.dirname(POLICY_AUDIT_PATH);
+        fs.mkdirSync(dir, { recursive: true });
+        const line = JSON.stringify({
+            ts: new Date().toISOString(),
+            result,
+            cmd,
+            args,
+            reason,
+            targetPath
+        }) + '\n';
+        fs.appendFileSync(POLICY_AUDIT_PATH, line);
+    }
+    catch {
+        // 审计失败不阻塞
+    }
+}
+/**
+ * 把通配符模式编译成正则
+ * *  -> [^/]*
+ * ** -> .*
+ */
+function compileGlob(pattern) {
+    // 转义正则元字符, 但保留 * 和 **
+    const escaped = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*\*/g, '__DOUBLESTAR__')
+        .replace(/\*/g, '[^/]*')
+        .replace(/__DOUBLESTAR__/g, '.*');
+    return new RegExp('^' + escaped + '$');
+}
+/**
+ * 检查命令
+ */
+function checkCommand(cmd, args) {
+    const policy = loadPolicy();
+    const fullCmd = [cmd, ...args].join(' ').trim();
+    // ---- 1. 命令黑名单 (策略里有的话) ----
+    if (policy?.commandDenylist) {
+        for (const denied of policy.commandDenylist) {
+            if (cmd === denied || fullCmd.startsWith(denied)) {
+                auditShellCall('denied', cmd, args, `命中 commandDenylist: ${denied}`);
+                return { allowed: false, reason: `命令 '${cmd}' 命中策略黑名单: ${denied}`, matchedBy: 'cmd-denylist' };
+            }
+        }
+    }
+    // ---- 2. 命令白名单 ----
+    const allowSet = policy
+        ? new Set(policy.commandAllowlist)
+        : FALLBACK_COMMAND_ALLOWLIST;
+    if (!allowSet.has(cmd)) {
+        auditShellCall('denied', cmd, args, `命令 '${cmd}' 不在白名单`);
+        return {
+            allowed: false,
+            reason: `命令 '${cmd}' 不在白名单. 允许: ${Array.from(allowSet).join(', ')}`,
+            matchedBy: policy ? 'cmd-allowlist' : 'fallback-deny'
+        };
+    }
+    // ---- 3. 参数黑名单 (策略文件 + 硬编码兜底都查) ----
+    const argPatterns = policy
+        ? [
+            ...FALLBACK_ARG_DENYLIST,
+            // 策略里没有专门的 argDenylist 字段, 复用 pathDenylist 模式不太合适
+            // 故意**不**让用户在策略里加 arg denylist - 防止 AI 删自己的 arg 限制
+        ]
+        : FALLBACK_ARG_DENYLIST;
+    for (const arg of args) {
+        for (const pattern of argPatterns) {
+            if (pattern.test(arg)) {
+                auditShellCall('denied', cmd, args, `参数 '${arg}' 命中黑名单`);
+                return { allowed: false, reason: `参数 '${arg}' 命中黑名单模式 ${pattern}`, matchedBy: 'arg-denylist' };
+            }
+        }
+    }
+    // 整条命令再过一遍
+    for (const pattern of argPatterns) {
+        if (pattern.test(fullCmd)) {
+            auditShellCall('denied', cmd, args, `整条命令命中黑名单`);
+            return { allowed: false, reason: `整条命令命中黑名单模式 ${pattern}`, matchedBy: 'arg-denylist' };
+        }
+    }
+    auditShellCall('allowed', cmd, args);
+    return { allowed: true };
+}
+/**
+ * 检查路径
+ *
+ * 逻辑:
+ *   1. denylist 优先: 命中即拒 (用硬编码兜底正则)
+ *   2. allowlist: 命中放行
+ *   3. 都不命中: 拒 (默认拒绝)
+ */
+function checkWritePath(targetPath) {
+    const policy = loadPolicy();
+    const normalized = path.normalize(targetPath).replace(/\\/g, '/');
+    // ---- 1. 路径黑名单 (硬编码兜底不可绕过) ----
+    // 即便策略文件里 denylist 是空的, 硬编码兜底永远生效
+    const hardcodedDenylist = FALLBACK_PATH_DENYLIST;
+    for (const pattern of hardcodedDenylist) {
+        if (pattern.test(normalized)) {
+            auditShellCall('denied', '', [], `路径 '${targetPath}' 命中硬编码禁区`, targetPath);
+            return { allowed: false, reason: `路径 '${targetPath}' 命中硬编码禁区 ${pattern}`, matchedBy: 'fallback-deny' };
+        }
+    }
+    // 策略文件里的额外 denylist
+    if (policy?.pathDenylist) {
+        for (const patternStr of policy.pathDenylist) {
+            try {
+                const regex = compileGlob(patternStr);
+                if (regex.test(normalized)) {
+                    auditShellCall('denied', '', [], `路径 '${targetPath}' 命中策略 denylist`, targetPath);
+                    return { allowed: false, reason: `路径 '${targetPath}' 命中策略 denylist: ${patternStr}`, matchedBy: 'path-denylist' };
+                }
+            }
+            catch {
+                // 编译失败的模式跳过
+            }
+        }
+    }
+    // ---- 2. 路径白名单 (来自策略或兜底) ----
+    const allowlist = policy?.pathAllowlist || FALLBACK_PATH_ALLOWLIST;
+    for (const patternStr of allowlist) {
+        try {
+            const regex = compileGlob(patternStr);
+            if (regex.test(normalized)) {
+                auditShellCall('allowed', '', [], undefined, targetPath);
+                return { allowed: true, matchedBy: 'path-allowlist' };
+            }
+        }
+        catch {
+            // 编译失败的模式跳过
+        }
+    }
+    // 都不命中: 默认拒绝
+    auditShellCall('denied', '', [], `路径 '${targetPath}' 不在任何 allowlist 中`, targetPath);
+    return {
+        allowed: false,
+        reason: `路径 '${targetPath}' 不在白名单. 允许: ${allowlist.join(', ')}`,
+        matchedBy: 'path-allowlist'
+    };
+}
+// ============================================================================
+// 运行时配置 (从策略文件读, 但有兜底)
+// ============================================================================
+/**
+ * 自改分支名前缀
+ */
+function getBranchPrefix() {
+    const policy = loadPolicy();
+    return policy?.branchPrefix || 'agent/self-imp-';
+}
+/**
+ * 冷却期 (毫秒)
+ */
+function getCooldownMs() {
+    const policy = loadPolicy();
+    return policy?.cooldownMs || 6 * 60 * 60 * 1000;
+}
+/**
+ * 沙箱工作目录
+ */
+function getSandboxCwd() {
+    const policy = loadPolicy();
+    const rel = policy?.sandboxCwd || '.bolloon-shell-sandbox';
+    return path.resolve(process.cwd(), rel);
+}
+// ============================================================================
+// 兼容旧 API - 保留原导出名
+// ============================================================================
+/** @deprecated 用 getBranchPrefix() */
+exports.SELF_IMPROVE_BRANCH_PREFIX = 'agent/self-imp-';
+/** @deprecated 用 getCooldownMs() */
+exports.SELF_IMPROVE_COOLDOWN_MS = 6 * 60 * 60 * 1000;
+/** @deprecated 用 getSandboxCwd() */
+exports.SHELL_SANDBOX_CWD = path.resolve(process.cwd(), '.bolloon-shell-sandbox');
+// ============================================================================
+// terminal 工具宽松护栏 (2026-08-10) — denylist-only, 不碰核心即可
+// 与 checkCommand 的区别: 不查命令白名单/参数 allowlist — 完整 shell 命令字符串放行,
+//   只挡"高危破坏/碰核心数据"模式. 用户明确: 灵活一点, 少围栏, 核心的东西不碰不搞乱.
+// ============================================================================
+const TERMINAL_DENY_PATTERNS = [
+    /\bsudo\b/, // 提权
+    /\bsu\b/,
+    /\bmkfs\b/, // 格式化
+    /\bshred\b/, // 擦除
+    /\bdd\s+.*of=\/dev\//, // 写设备
+    /\brm\s+-(rf|fr)\b/, // 递归删除 (rm 单个文件允许)
+    /\bchmod\s+-R\s+777\b/, // 全权限
+    /\bcurl\b[^|]*\|\s*(sh|bash)\b/, // curl|sh 远程执行
+    /\bwget\b[^|]*\|\s*(sh|bash)\b/,
+    /\b:\(\)\s*\{[^}]*\}\s*;\s*:/, // fork bomb
+    /\b(>|>>)\s*(\/etc\/|\/usr\/|\/System\/|\/bin\/|\/sbin\/)/, // 写系统目录
+    /[\/\s]\.bolloon\b/, // Bolloon 数据 (sessions/persona/keys; 覆盖 ~/.bolloon, $HOME/.bolloon, 空格.bolloon)
+    /[\/\s]\.(diap|hermes|openclaw)\b/, // 其他 agent 数据
+    /\brm\s+-rf\s+(\/|~|\*|\.|\$HOME)\b/, // 删根/家/通配
+    /\bgit\s+push\b[^|]*\s+(-f|--force)/, // 强推
+    /\bgit\s+reset\s+--hard\b/,
+    /\bkill\s+-9\s+\d+\b/, // 杀进程 (保留给用户)
+    // 2026-08-11 (Hermes cron/lifecycle_guard 模式): 自生命周期命令 — agent 通过 terminal
+    // 重启/杀掉自己宿主服务 (bolloon) 会形成复活循环: 服务死 → supervisor 复活 → 自动 resume
+    // → 同一命令再自杀. 策略: 命令形状锚定 (只匹配真实命令标识符, 不匹配散文, 误报率低).
+    /\b(bolloon|bolloon-agent|bolloon-agent-service)\s+(restart|stop|kill|quit|shutdown)\b/i,
+    /\bpm2\s+(restart|stop|delete|kill)\s+[\w./-]*bolloon\b/i,
+    /\b(systemctl|service)\s+(restart|stop|kill)\s+[\w.-]*bolloon\b/i,
+    /\bpkill\s+(-[a-z]+\s+)*(-f\s+)?[\w./-]*bolloon\b/i,
+    /\btaskkill\s+[^|]*\/IM\s+[\w-]*bolloon\b/i,
+    /\btaskkill\s+[^|]*\/FI\s+"?[^"]*bolloon/i,
+];
+/** 检查完整 shell 命令 (terminal 工具用). denylist-only: 命中高危模式即拒, 否则放行. */
+function checkTerminalCommand(rawCmd) {
+    const cmd = (rawCmd || '').trim();
+    if (!cmd)
+        return { allowed: false, reason: '命令为空', matchedBy: 'fallback-deny' };
+    for (const pattern of TERMINAL_DENY_PATTERNS) {
+        if (pattern.test(cmd)) {
+            auditShellCall('denied', cmd, [], `terminal 高危模式 ${pattern}`);
+            // 2026-08-11: 用户可见静态文案走 i18n 目录 (Hermes locales 模式); 目录不可用时中文直出
+            let reason;
+            try {
+                const isSelfLifecycle = /(bolloon|pm2|systemctl|service|pkill|taskkill)/.test(pattern.source);
+                reason = isSelfLifecycle
+                    ? (0, i18n_js_1.t)('guard.self_lifecycle_reason', undefined, { pattern: String(pattern) })
+                    : (0, i18n_js_1.t)('guard.deny_reason', undefined, { pattern: String(pattern) });
+            }
+            catch {
+                reason = `命令命中高危护栏 ${pattern} (核心不碰: 提权/格式化/删根/.bolloon 数据). 换一条安全命令.`;
+            }
+            return { allowed: false, reason, matchedBy: 'arg-denylist' };
+        }
+    }
+    auditShellCall('allowed', cmd, []);
+    return { allowed: true };
+}
+// ============================================================================
+// 写策略 / 审计路径 (供 API 端点用)
+// ============================================================================
+exports.POLICY_AUDIT_PATH_PUBLIC = POLICY_AUDIT_PATH;
+/**
+ * 把新策略写到磁盘, 立即清缓存让下次 loadPolicy() 重读
+ * **只供人手动调用**
+ */
+function writePolicy(newPolicy) {
+    try {
+        newPolicy.version = (newPolicy.version || 0) + 1;
+        const dir = path.dirname(POLICY_PATH);
+        fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(POLICY_PATH, JSON.stringify(newPolicy, null, 2));
+        cachedPolicy = null; // 清缓存
+        policyLoadedAt = 0;
+        console.log(`[shell-guard] 策略已更新, version=${newPolicy.version}`);
+        return true;
+    }
+    catch (err) {
+        console.error('[shell-guard] 写策略失败:', err);
+        return false;
+    }
+}
+//# sourceMappingURL=shell-guard.js.map

package/dist/electron-build/agents/shell-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-guard.js","sourceRoot":"","sources":["../../../src/agents/shell-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,MAAY,EAAE,+BAAW;AACzB,4CAA4C;AAC5C,+EAA+E;AAC/E,wBAAwB;AACxB,8CAA8C;AAC9C,+EAA+E;AAC/E,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ;IACnD,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IACxD,OAAO,EAAE,OAAO;IAChB,yDAAyD;IACzD,6DAA6D;IAC7D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;CAC7C,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAsB;IACjD,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,+BAA+B;IAC/B,mCAAmC;IACnC,gCAAgC;IAChC,aAAa;IACb,SAAS;IACT,MAAM;IACN,WAAW;CACZ,CAAC;AAEF,MAAM,sBAAsB,GAA0B;IACpD,kEAAkE;IAClE,qDAAqD;IACrD,sEAAsE;IACtE,qCAAqC,EAAK,OAAO;IACjD,oCAAoC,EAAM,aAAa;IACvD,wBAAwB,EAAiB,KAAK;IAC9C,sBAAsB,EAAmB,sBAAsB;IAC/D,oCAAoC,EAAK,cAAc;IACvD,sBAAsB;IACtB,2BAA2B;IAC3B,yBAAyB;IACzB,mBAAmB;IACnB,eAAe;IACf,mBAAmB,EAAsB,4BAA4B;IACrE,cAAc;IACd,wFAAwF;IACxF,4FAA4F;CAC7F,CAAC;AAEF,MAAM,qBAAqB,GAA0B;IACnD,0BAA0B;IAC1B,sCAAsC;IACtC,uBAAuB;IACvB,qBAAqB;IACrB,iBAAiB;IACjB,aAAa,EAA4B,YAAY;IACrD,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,WAAW;IACX,WAAW;IACX,QAAQ,EAAkC,OAAO;IACjD,KAAK,EAAqC,OAAO;IACjD,cAAc,EAA4B,eAAe;CAC1D,CAAC;AAiBF,IAAI,YAAY,GAA6B,IAAI,CAAC;AAClD,IAAI,cAAc,GAAW,CAAC,CAAC;AAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,+BAA+B;AAE7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;AACpF,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;AAExF;;GAEG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC;QACxD,aAAa,EAAE,CAAC,GAAG,uBAAuB,CAAC;QAC3C,YAAY,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC9B,UAAU,EAAE,wBAAwB;QACpC,YAAY,EAAE,iBAAiB;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,oBAA2B,WAAW,GAAG,KAAK;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,WAAW,IAAI,YAAY,IAAI,GAAG,GAAG,cAAc,GAAG,aAAa,EAAE,CAAC;QACzE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,gBAAgB;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACtC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,0BAA0B,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAEpD,eAAe;QACf,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9I,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY,GAAG,MAAM,CAAC;QACtB,cAAc,GAAG,GAAG,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,wBACE,MAA4B,EAC5B,GAAW,EACX,IAAc,EACd,MAAe,EACf,UAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM;YACN,GAAG;YACH,IAAI;YACJ,MAAM;YACN,UAAU;SACX,CAAC,GAAG,IAAI,CAAC;QACV,EAAE,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;AACH,CAAC;AAaD;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,sBAAsB;IACtB,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;SAClC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,sBAA6B,GAAW,EAAE,IAAc;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhD,8BAA8B;IAC9B,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5C,IAAI,GAAG,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAC;gBACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,cAAc,MAAM,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM;QACrB,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClC,CAAC,CAAC,0BAAyC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,GAAG,gBAAgB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;SACtD,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,MAAM;QACxB,CAAC,CAAC;YACE,GAAG,qBAAqB;YACxB,kDAAkD;YAClD,mDAAmD;SACpD;QACH,CAAC,CAAC,qBAAqB,CAAC;IAE1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;gBACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,aAAa,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;IACX,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,wBAA+B,UAAkB;IAC/C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAElE,iCAAiC;IACjC,kCAAkC;IAClC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,WAAW,EAAE,UAAU,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,aAAa,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;QACzG,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;QACzB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3B,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,iBAAiB,EAAE,UAAU,CAAC,CAAC;oBACjF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,oBAAoB,UAAU,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;gBACnH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,SAAS,GAAG,MAAM,EAAE,aAAa,IAAI,uBAAuB,CAAC;IACnE,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,cAAc,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,aAAa;IACb,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,oBAAoB,EAAE,UAAU,CAAC,CAAC;IACpF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,UAAU,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC/D,SAAS,EAAE,gBAAgB;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,EAAE,YAAY,IAAI,iBAAiB,CAAC;AACnD,CAAC;AAED;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,CAAC;AAED;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,UAAU,IAAI,wBAAwB,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,sCAAsC;AACzB,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAC5D,oCAAoC;AACvB,QAAA,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3D,oCAAoC;AACvB,QAAA,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAEvF,+EAA+E;AAC/E,uDAAuD;AACvD,+DAA+D;AAC/D,mDAAmD;AACnD,+EAA+E;AAE/E,MAAM,sBAAsB,GAA0B;IACpD,UAAU,EAA2B,KAAK;IAC1C,QAAQ;IACR,UAAU,EAA2B,MAAM;IAC3C,WAAW,EAA0B,KAAK;IAC1C,qBAAqB,EAAgB,MAAM;IAC3C,mBAAmB,EAAkB,mBAAmB;IACxD,sBAAsB,EAAe,MAAM;IAC3C,+BAA+B,EAAM,eAAe;IACpD,+BAA+B;IAC/B,6BAA6B,EAAQ,YAAY;IACjD,0DAA0D,EAAE,QAAQ;IACpE,mBAAmB,EAAmB,gFAAgF;IACtH,kCAAkC,EAAI,cAAc;IACpD,oCAAoC,EAAG,UAAU;IACjD,oCAAoC,EAAG,KAAK;IAC5C,0BAA0B;IAC1B,qBAAqB,EAAgB,cAAc;IACnD,2EAA2E;IAC3E,iEAAiE;IACjE,mDAAmD;IACnD,wFAAwF;IACxF,yDAAyD;IACzD,iEAAiE;IACjE,mDAAmD;IACnD,2CAA2C;IAC3C,0CAA0C;CAC3C,CAAC;AAEF,mEAAmE;AACnE,8BAAqC,MAAc;IACjD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IAChF,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,iBAAiB,OAAO,EAAE,CAAC,CAAC;YAC9D,gEAAgE;YAChE,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9F,MAAM,GAAG,eAAe;oBACtB,CAAC,CAAC,IAAA,WAAK,EAAC,6BAA6B,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/E,CAAC,CAAC,IAAA,WAAK,EAAC,mBAAmB,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,YAAY,OAAO,0CAA0C,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D;;;GAGG;AACH,qBAA4B,SAA4B;IACtD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,YAAY,GAAG,IAAI,CAAC,CAAC,MAAM;QAC3B,cAAc,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,gCAAgC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/electron-build/agents/shell-tool.js

@@ -0,0 +1,102 @@
+"use strict";
+/**
+ * Shell 工具: 给 Bolloon agent 跑受限的 shell 命令
+ *
+ * 这个工具**只做两件事**:
+ *   1. 把命令交给硬护栏检查
+ *   2. 在沙箱 cwd 下用 child_process 执行
+ *
+ * AI 完全自主触发自改, 但 shell 工具本身**只接受白名单内命令**.
+ * 禁区列表在 shell-guard.ts, AI 改不了那个文件.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shellExec = shellExec;
+const child_process_1 = require("child_process");
+const shell_guard_js_1 = require("./shell-guard.js");
+/**
+ * 把参数 quote 一下,避免 shell 元字符注入 (&& | ; ` > < 等).
+ * Windows: 用双引号包, 内部双引号转义.
+ */
+function shellQuoteArgs(arg) {
+    if (process.platform !== 'win32')
+        return arg; // POSIX shell 由 checkCommand 防护
+    if (!/[\s"&|<>^()%!`]/.test(arg))
+        return arg;
+    return `"${arg.replace(/"/g, '""')}"`;
+}
+/**
+ * 在沙箱里跑一条命令
+ * @param cmd  可执行文件名, 必须命中白名单
+ * @param args 参数列表
+ * @param opts.timeoutMs 超时毫秒, 默认 30s
+ * @param opts.allowedWriteTargets 允许的写入路径, 命中禁区列表的路径会拒
+ */
+async function shellExec(cmd, args = [], opts = {}) {
+    // 1. 护栏检查
+    const cmdCheck = (0, shell_guard_js_1.checkCommand)(cmd, args);
+    if (!cmdCheck.allowed) {
+        return {
+            success: false,
+            error: `[shell-guard] ${cmdCheck.reason}`,
+            deniedByGuard: true
+        };
+    }
+    // 2. 写入目标检查
+    if (opts.allowedWriteTargets) {
+        for (const target of opts.allowedWriteTargets) {
+            const pathCheck = (0, shell_guard_js_1.checkWritePath)(target);
+            if (!pathCheck.allowed) {
+                return {
+                    success: false,
+                    error: `[shell-guard] ${pathCheck.reason}`,
+                    deniedByGuard: true
+                };
+            }
+        }
+    }
+    // 3. 确定运行 cwd
+    // M3.5 (2026-06-17 + 2026-06-18): 全部走 process.cwd() (即 agent 实际工作目录).
+    //   老逻辑写命令走 sandbox 反而出问题 — sandbox 是个独立 git 目录,
+    //   在里面 git add/commit/push 看不到外面的 working tree,
+    //   agent 看到的 status 是 sandbox 自己的, 容易误判.
+    //   现在全部走 cwd. (注: 老逻辑 `getSandboxCwd()` 已废弃, 不再使用)
+    const cwd = process.cwd();
+    // 4. 跑命令
+    // M3.5 (2026-06-17): Windows 上 ls/cat/pwd 不在 PATH, 必须用 cmd 内置命令 (dir/type/cd)
+    //   但 cmd 内置命令不能在 shell: false 下跑, 切到 shell: true (Windows shell: cmd.exe, POSIX shell: /bin/sh)
+    //   风险: 元字符注入 — 通过 checkCommand + arg denylist 防护, 加 shellQuoteArgs() 转义
+    const isWindows = process.platform === 'win32';
+    const needsShell = isWindows; // Windows: 必须用 shell 才能跑 cmd 内置
+    const quotedArgs = isWindows ? args.map(shellQuoteArgs) : args;
+    return new Promise((resolve) => {
+        const proc = (0, child_process_1.spawn)(cmd, quotedArgs, {
+            cwd,
+            env: { ...process.env, GIT_TERMINAL_PROMPT: '0' }, // 禁止 git 弹交互
+            shell: needsShell,
+            windowsHide: true
+        });
+        let stdout = '';
+        let stderr = '';
+        const timeout = setTimeout(() => {
+            proc.kill('SIGKILL');
+            resolve({ success: false, error: `命令超时 (>${opts.timeoutMs || 30000}ms)`, exitCode: -1 });
+        }, opts.timeoutMs || 30000);
+        proc.stdout.on('data', (data) => { stdout += data.toString(); });
+        proc.stderr.on('data', (data) => { stderr += data.toString(); });
+        proc.on('error', (err) => {
+            clearTimeout(timeout);
+            resolve({ success: false, error: `启动失败: ${err.message}` });
+        });
+        proc.on('close', (code) => {
+            clearTimeout(timeout);
+            const output = (stdout + (stderr ? `\n[stderr]\n${stderr}` : '')).trim();
+            if (code === 0) {
+                resolve({ success: true, output, exitCode: 0 });
+            }
+            else {
+                resolve({ success: false, output, error: `exit code ${code}`, exitCode: code ?? -1 });
+            }
+        });
+    });
+}
+//# sourceMappingURL=shell-tool.js.map

package/dist/electron-build/agents/shell-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-tool.js","sourceRoot":"","sources":["../../../src/agents/shell-tool.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,iDAAsC;AAEtC,qDAAgE;AAEhE;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,CAAE,gCAAgC;IAC/E,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC7C,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACxC,CAAC;AAWD;;;;;;GAMG;AACI,KAAK,oBACV,GAAW,EACX,IAAI,GAAa,EAAE,EACnB,IAAI,GAA2D,EAAE;IAEjE,UAAU;IACV,MAAM,QAAQ,GAAG,IAAA,6BAAY,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iBAAiB,QAAQ,CAAC,MAAM,EAAE;YACzC,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IAED,YAAY;IACZ,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAA,+BAAc,EAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,iBAAiB,SAAS,CAAC,MAAM,EAAE;oBAC1C,aAAa,EAAE,IAAI;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc;IACd,sEAAsE;IACtE,iDAAiD;IACjD,iDAAiD;IACjD,0CAA0C;IAC1C,oDAAoD;IACpD,MAAM,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE,CAAC;IAElC,SAAS;IACT,8EAA8E;IAC9E,iGAAiG;IACjG,yEAAyE;IACzE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,CAAE,gCAAgC;IAC/D,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,UAAU,EAAE;YAClC,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,EAAE,aAAa;YAChE,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,IAAI,CAAC,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAE5B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzE,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}