@bolloon/bolloon-agent 0.5.3 → 0.5.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (144) hide show
  1. package/dist/agents/agent-identity-store.js +41 -5
  2. package/dist/agents/background-notices.js +124 -0
  3. package/dist/agents/channel-identity.js +54 -0
  4. package/dist/agents/code-write-gate.js +47 -0
  5. package/dist/agents/deny-pipeline.js +11 -2
  6. package/dist/agents/egress-sanitize.js +69 -0
  7. package/dist/agents/error-classifier.js +67 -5
  8. package/dist/agents/experience-review.js +226 -0
  9. package/dist/agents/gateway-group.js +153 -18
  10. package/dist/agents/iteration-budget.js +64 -0
  11. package/dist/agents/lesson-to-skill.js +211 -0
  12. package/dist/agents/managed-services.js +64 -0
  13. package/dist/agents/parse-tool-call.js +38 -32
  14. package/dist/agents/pi-sdk-session-manager.js +72 -3
  15. package/dist/agents/pi-sdk-tools.js +268 -47
  16. package/dist/agents/pi-sdk.js +470 -22
  17. package/dist/agents/plan-store.js +36 -0
  18. package/dist/agents/process-runner.js +64 -2
  19. package/dist/agents/session-store.js +144 -3
  20. package/dist/agents/shell-guard.js +109 -13
  21. package/dist/agents/skill-health.js +90 -0
  22. package/dist/agents/skill-ledger.js +129 -0
  23. package/dist/agents/tool-loop-guard.js +303 -0
  24. package/dist/agents/tool-path-args.js +53 -0
  25. package/dist/agents/tool-result-gate.js +50 -0
  26. package/dist/agents/tool-subset.js +109 -0
  27. package/dist/agents/tool-telemetry.js +97 -0
  28. package/dist/agents/wallet-tools.js +63 -0
  29. package/dist/bootstrap/context-collector.js +37 -7
  30. package/dist/bootstrap/lifecycle-hooks.js +12 -3
  31. package/dist/bootstrap/persona-init.js +174 -0
  32. package/dist/bootstrap/persona-loader.js +5 -1
  33. package/dist/cli/ink-app.js +231 -32
  34. package/dist/cli/input-history.js +119 -0
  35. package/dist/cli/input-paste.js +218 -0
  36. package/dist/cli/loading-tui.js +69 -7
  37. package/dist/cli/log-gate.js +46 -1
  38. package/dist/cli/mention-data.js +30 -0
  39. package/dist/cli/reasoning-view.js +103 -0
  40. package/dist/cli/session-summary.js +129 -0
  41. package/dist/cli/session-tree.js +141 -0
  42. package/dist/cli/startup-notice.js +25 -0
  43. package/dist/cli/status-segments.js +155 -0
  44. package/dist/cli/stores.js +16 -0
  45. package/dist/cli/trace-line.js +54 -0
  46. package/dist/cli/wallet-store.js +159 -0
  47. package/dist/cli/wallet-table.js +46 -0
  48. package/dist/cli-entry.js +22 -0
  49. package/dist/context-compaction/auto-compact.js +37 -2
  50. package/dist/electron-build/agents/agent-identity-store.js +43 -5
  51. package/dist/electron-build/agents/agent-identity-store.js.map +1 -1
  52. package/dist/electron-build/agents/background-notices.js +138 -0
  53. package/dist/electron-build/agents/background-notices.js.map +1 -0
  54. package/dist/electron-build/agents/channel-identity.js +64 -0
  55. package/dist/electron-build/agents/channel-identity.js.map +1 -0
  56. package/dist/electron-build/agents/code-write-gate.js +55 -0
  57. package/dist/electron-build/agents/code-write-gate.js.map +1 -0
  58. package/dist/electron-build/agents/deny-pipeline.js +11 -2
  59. package/dist/electron-build/agents/deny-pipeline.js.map +1 -1
  60. package/dist/electron-build/agents/egress-sanitize.js +76 -0
  61. package/dist/electron-build/agents/egress-sanitize.js.map +1 -0
  62. package/dist/electron-build/agents/error-classifier.js +68 -5
  63. package/dist/electron-build/agents/error-classifier.js.map +1 -1
  64. package/dist/electron-build/agents/experience-review.js +243 -0
  65. package/dist/electron-build/agents/experience-review.js.map +1 -0
  66. package/dist/electron-build/agents/iteration-budget.js +73 -0
  67. package/dist/electron-build/agents/iteration-budget.js.map +1 -0
  68. package/dist/electron-build/agents/lesson-to-skill.js +228 -0
  69. package/dist/electron-build/agents/lesson-to-skill.js.map +1 -0
  70. package/dist/electron-build/agents/managed-services.js +69 -0
  71. package/dist/electron-build/agents/managed-services.js.map +1 -0
  72. package/dist/electron-build/agents/parse-tool-call.js +38 -32
  73. package/dist/electron-build/agents/parse-tool-call.js.map +1 -1
  74. package/dist/electron-build/agents/pi-sdk-session-manager.js +75 -3
  75. package/dist/electron-build/agents/pi-sdk-session-manager.js.map +1 -1
  76. package/dist/electron-build/agents/pi-sdk-tools.js +268 -46
  77. package/dist/electron-build/agents/pi-sdk-tools.js.map +1 -1
  78. package/dist/electron-build/agents/pi-sdk-types.js.map +1 -1
  79. package/dist/electron-build/agents/pi-sdk.js +471 -22
  80. package/dist/electron-build/agents/pi-sdk.js.map +1 -1
  81. package/dist/electron-build/agents/plan-store.js +37 -0
  82. package/dist/electron-build/agents/plan-store.js.map +1 -1
  83. package/dist/electron-build/agents/process-runner.js +71 -2
  84. package/dist/electron-build/agents/process-runner.js.map +1 -1
  85. package/dist/electron-build/agents/session-store.js +144 -3
  86. package/dist/electron-build/agents/session-store.js.map +1 -1
  87. package/dist/electron-build/agents/shell-guard.js +110 -14
  88. package/dist/electron-build/agents/shell-guard.js.map +1 -1
  89. package/dist/electron-build/agents/skill-health.js +103 -0
  90. package/dist/electron-build/agents/skill-health.js.map +1 -0
  91. package/dist/electron-build/agents/skill-ledger.js +146 -0
  92. package/dist/electron-build/agents/skill-ledger.js.map +1 -0
  93. package/dist/electron-build/agents/tool-loop-guard.js +319 -0
  94. package/dist/electron-build/agents/tool-loop-guard.js.map +1 -0
  95. package/dist/electron-build/agents/tool-path-args.js +63 -0
  96. package/dist/electron-build/agents/tool-path-args.js.map +1 -0
  97. package/dist/electron-build/agents/tool-result-gate.js +59 -0
  98. package/dist/electron-build/agents/tool-result-gate.js.map +1 -0
  99. package/dist/electron-build/agents/tool-subset.js +116 -0
  100. package/dist/electron-build/agents/tool-subset.js.map +1 -0
  101. package/dist/electron-build/agents/tool-telemetry.js +108 -0
  102. package/dist/electron-build/agents/tool-telemetry.js.map +1 -0
  103. package/dist/electron-build/agents/wallet-tools.js +102 -0
  104. package/dist/electron-build/agents/wallet-tools.js.map +1 -0
  105. package/dist/electron-build/bootstrap/context-collector.js +38 -7
  106. package/dist/electron-build/bootstrap/context-collector.js.map +1 -1
  107. package/dist/electron-build/bootstrap/lifecycle-hooks.js +12 -3
  108. package/dist/electron-build/bootstrap/lifecycle-hooks.js.map +1 -1
  109. package/dist/electron-build/bootstrap/persona-init.js +216 -0
  110. package/dist/electron-build/bootstrap/persona-init.js.map +1 -0
  111. package/dist/electron-build/bootstrap/persona-loader.js +5 -1
  112. package/dist/electron-build/bootstrap/persona-loader.js.map +1 -1
  113. package/dist/electron-build/cli/wallet-store.js +200 -0
  114. package/dist/electron-build/cli/wallet-store.js.map +1 -0
  115. package/dist/electron-build/context-compaction/auto-compact.js +38 -2
  116. package/dist/electron-build/context-compaction/auto-compact.js.map +1 -1
  117. package/dist/electron-build/external-engines/delegate.js +22 -0
  118. package/dist/electron-build/external-engines/delegate.js.map +1 -1
  119. package/dist/electron-build/llm/pi-ai.js +25 -0
  120. package/dist/electron-build/llm/pi-ai.js.map +1 -1
  121. package/dist/electron-build/orbitdb/cid-database.js +55 -0
  122. package/dist/electron-build/orbitdb/cid-database.js.map +1 -1
  123. package/dist/electron-build/orbitdb/ipfs-node.js +36 -11
  124. package/dist/electron-build/orbitdb/ipfs-node.js.map +1 -1
  125. package/dist/electron-build/web/server-storage.js +26 -5
  126. package/dist/electron-build/web/server-storage.js.map +1 -1
  127. package/dist/external-engines/delegate.js +21 -0
  128. package/dist/index.js +1324 -173
  129. package/dist/llm/pi-ai.js +23 -0
  130. package/dist/orbitdb/cid-database.js +55 -0
  131. package/dist/orbitdb/event-index.js +370 -0
  132. package/dist/orbitdb/event-query.js +131 -0
  133. package/dist/orbitdb/event-shell.js +510 -0
  134. package/dist/orbitdb/group-access.js +381 -0
  135. package/dist/orbitdb/group-shards.js +140 -0
  136. package/dist/orbitdb/ipfs-node.js +36 -11
  137. package/dist/web/bolloon-web.json +3 -3
  138. package/dist/web/client.js +3 -2
  139. package/dist/web/mobile-core.js +7762 -6289
  140. package/dist/web/routes-mobile-tasks.js +2 -1
  141. package/dist/web/server-storage.js +26 -5
  142. package/dist/web/server.js +2 -0
  143. package/dist/web/sw.js +1 -1
  144. package/package.json +2 -1
@@ -76,7 +76,7 @@ var __importStar = (this && this.__importStar) || (function () {
76
76
  };
77
77
  })();
78
78
  Object.defineProperty(exports, "__esModule", { value: true });
79
- exports.POLICY_AUDIT_PATH_PUBLIC = exports.SHELL_SANDBOX_CWD = exports.SELF_IMPROVE_COOLDOWN_MS = exports.SELF_IMPROVE_BRANCH_PREFIX = void 0;
79
+ exports.POLICY_AUDIT_PATH_PUBLIC = exports.SHELL_SANDBOX_CWD = exports.SELF_IMPROVE_COOLDOWN_MS = exports.SELF_IMPROVE_BRANCH_PREFIX = exports.DATA_WORKSPACE_SUBDIRS = void 0;
80
80
  exports.loadPolicy = loadPolicy;
81
81
  exports.auditShellCall = auditShellCall;
82
82
  exports.checkCommand = checkCommand;
@@ -128,7 +128,13 @@ const FALLBACK_PATH_DENYLIST = [
128
128
  /(^|\/)tsconfig.*\.json$/,
129
129
  /(^|\/)\.env(\.|$)/,
130
130
  /(^|\/)\.git\//,
131
- /(^|\/)\.bolloon\//, // 策略文件 / sessions / persona
131
+ // 2026-10-01 (用户实测): 原先这行把**整个** ~/.bolloon/ 一刀封死 ⇒ patch 写自己的
132
+ // context-os/01-Me/… 被拒, 而同一目录 write_context_asset(Node fs) 却成功 ✗ —— 门在打自己的脚。
133
+ // 收窄口径: 只封**凭证 / 身份密钥 / 会话数据 / 钱包**; agent 自己的工作区
134
+ // (context-os · persona · memory · logs · goals · runs …) 一律放行。
135
+ /(^|\/)\.bolloon\/(identity\.json|keypair\.json|accounts\.json|llm-config\.json|bolloon-config\.json|agent-keys\/|iroh-secret[^/]*\.json|chain\.json)/,
136
+ /(^|\/)\.bolloon\/(sessions|wallets|bindings|eas-bind|_migrate_bak_[^/]*)\//,
137
+ /(^|\/)\.bolloon\/[^/]*\.token$/,
132
138
  /(^|\/)dist\//,
133
139
  // 2026-06-17: node_modules 不再 denylist, 因为 M3.4 自动 commit 阶段需要 npm install / npx vitest
134
140
  // 通过 allowlist 限定 agent 只能 npm install, 不能 rm node_modules (shell arg denylist 仍禁 rm -rf)
@@ -161,7 +167,19 @@ function getDefaultPolicy() {
161
167
  return {
162
168
  version: 1,
163
169
  commandAllowlist: Array.from(FALLBACK_COMMAND_ALLOWLIST),
164
- pathAllowlist: [...FALLBACK_PATH_ALLOWLIST],
170
+ // 2026-10-01: agent 自己的数据工作区必须显式允许 —— 这道护栏是 deny → allow → **默认拒**,
171
+ // 所以光把旧禁区收窄还不够: allowlist 里没有的路径照样被拒 ✗ (用户实测 context-os 被拒就是这个)。
172
+ pathAllowlist: [
173
+ ...FALLBACK_PATH_ALLOWLIST,
174
+ ...(process.env.HOME ? [
175
+ `${process.env.HOME}/.bolloon/context-os/**`,
176
+ `${process.env.HOME}/.bolloon/persona/**`,
177
+ `${process.env.HOME}/.bolloon/memory/**`,
178
+ `${process.env.HOME}/.bolloon/logs/**`,
179
+ `${process.env.HOME}/.bolloon/goals/**`,
180
+ `${process.env.HOME}/.bolloon/runs/**`,
181
+ ] : []),
182
+ ],
165
183
  pathDenylist: FALLBACK_PATH_DENYLIST.map(r => r.source),
166
184
  cooldownMs: 6 * 60 * 60 * 1000,
167
185
  sandboxCwd: '.bolloon-shell-sandbox',
@@ -172,6 +190,44 @@ function getDefaultPolicy() {
172
190
  * 加载策略 (有缓存)
173
191
  * 加载失败返回 null, 调用方应回退到硬编码兜底
174
192
  */
193
+ /**
194
+ * 已知过时的策略条目 (2026-10-01)。
195
+ *
196
+ * 事故: 盘上 `~/.bolloon/self-improve-policy.json` 是 2026-06-14 写下的**快照**,
197
+ * 里面还留着旧版的宽正则 `(^|\/)\.bolloon\/` —— 它把整个数据目录一刀封死,
198
+ * 于是 `patch ~/.bolloon/context-os/...` 被拒, 而 `write_context_asset`(走 Node fs) 同一目录能写 ✗,
199
+ * 用户看到的就是"同一个目录, 一个工具能写一个不能"。
200
+ * 更糟: 连 2026-06-17 已经明确解禁的 `pi-sdk.ts` 也还封着 ✗ ⇒ **改代码也压不过这份旧策略**。
201
+ * 规矩: 代码里的 FALLBACK_PATH_DENYLIST 是唯一真源; 盘上策略里凡属"过时快照"的条目一律作废并回写。
202
+ */
203
+ /** agent 自己的数据工作区 (相对 ~/.bolloon) —— 必须在 allowlist 里, 否则默认拒 */
204
+ exports.DATA_WORKSPACE_SUBDIRS = ['context-os', 'persona', 'memory', 'logs', 'goals', 'runs'];
205
+ /** 盘上策略缺这些条目时补齐 (与"作废过时条目"对称: 旧策略既要减法也要加法) */
206
+ function ensureWorkspaceAllowed(policy, home) {
207
+ if (!Array.isArray(policy.pathAllowlist))
208
+ policy.pathAllowlist = [];
209
+ let changed = false;
210
+ for (const sub of exports.DATA_WORKSPACE_SUBDIRS) {
211
+ const need = `${home}/.bolloon/${sub}/**`;
212
+ if (!policy.pathAllowlist.includes(need)) {
213
+ policy.pathAllowlist.push(need);
214
+ changed = true;
215
+ }
216
+ }
217
+ return changed;
218
+ }
219
+ const STALE_POLICY_PATTERNS = [
220
+ '(^|\\/)\\.bolloon\\/', // 旧: 整个数据目录一刀封 (已收窄为凭证/身份/会话/钱包)
221
+ '(^|\\/)src\\/agents\\/pi-sdk\\.ts$', // 旧: 2026-06-17 已解禁 (自进化需要)
222
+ '(^|\\/)node_modules\\/', // 旧: 2026-06-17 已从硬编码清单移除
223
+ ];
224
+ function dropStalePolicyPatterns(policy) {
225
+ if (!Array.isArray(policy.pathDenylist) || policy.pathDenylist.length === 0)
226
+ return false;
227
+ const before = policy.pathDenylist.length;
228
+ policy.pathDenylist = policy.pathDenylist.filter((src) => !STALE_POLICY_PATTERNS.includes(String(src)));
229
+ return policy.pathDenylist.length !== before;
230
+ }
175
231
  function loadPolicy(forceReload = false) {
176
232
  const now = Date.now();
177
233
  if (!forceReload && cachedPolicy && now - policyLoadedAt < POLICY_TTL_MS) {
@@ -187,6 +243,17 @@ function loadPolicy(forceReload = false) {
187
243
  }
188
244
  const raw = fs.readFileSync(POLICY_PATH, 'utf-8');
189
245
  const parsed = JSON.parse(raw);
246
+ // 2026-10-01: 盘上策略是**快照** —— 先作废已知过时条目 (否则改代码也压不过它), 再回写。
247
+ // 用户实测: `(^|\/)\.bolloon\/` 这条旧宽正则把整个数据目录封死, 而它只存在于盘上策略里。
248
+ try {
249
+ const dropped = dropStalePolicyPatterns(parsed);
250
+ const added = ensureWorkspaceAllowed(parsed, os.homedir());
251
+ if (dropped || added) {
252
+ fs.writeFileSync(POLICY_PATH, JSON.stringify(parsed, null, 2));
253
+ console.log(`[shell-guard] 已作废过时策略条目并回写: ${POLICY_PATH}`);
254
+ }
255
+ }
256
+ catch { /* 回写失败不影响本次使用 */ }
190
257
  // 极简 schema 校验
191
258
  if (!parsed.version || !Array.isArray(parsed.commandAllowlist) || !Array.isArray(parsed.pathAllowlist) || !Array.isArray(parsed.pathDenylist)) {
192
259
  console.warn('[shell-guard] 策略文件 schema 不对, 用硬编码兜底');
@@ -259,7 +326,7 @@ function checkCommand(cmd, args) {
259
326
  auditShellCall('denied', cmd, args, `命令 '${cmd}' 不在白名单`);
260
327
  return {
261
328
  allowed: false,
262
- reason: `命令 '${cmd}' 不在白名单. 允许: ${Array.from(allowSet).join(', ')}`,
329
+ reason: `命令 '${cmd}' 不在白名单. 允许的命令: ${shortRoots(Array.from(allowSet))}`,
263
330
  matchedBy: policy ? 'cmd-allowlist' : 'fallback-deny'
264
331
  };
265
332
  }
@@ -342,7 +409,7 @@ function checkWritePath(targetPath) {
342
409
  auditShellCall('denied', '', [], `路径 '${targetPath}' 不在任何 allowlist 中`, targetPath);
343
410
  return {
344
411
  allowed: false,
345
- reason: `路径 '${targetPath}' 不在白名单. 允许: ${allowlist.join(', ')}`,
412
+ reason: `路径 '${targetPath}' 不在白名单. 允许的根: ${shortRoots(allowlist)}`, // 2026-10-01: 不再把整张白名单(含临时目录)塞进错误 ✓
346
413
  matchedBy: 'path-allowlist'
347
414
  };
348
415
  }
@@ -385,6 +452,19 @@ exports.SHELL_SANDBOX_CWD = path.resolve(process.cwd(), '.bolloon-shell-sandbox'
385
452
  // 与 checkCommand 的区别: 不查命令白名单/参数 allowlist — 完整 shell 命令字符串放行,
386
453
  // 只挡"高危破坏/碰核心数据"模式. 用户明确: 灵活一点, 少围栏, 核心的东西不碰不搞乱.
387
454
  // ============================================================================
455
+ /**
456
+ * 自生命周期模式 (唯一的归类依据, 2026-10-01)。
457
+ * 为什么单列: 报错文案要按"是不是自生命周期"分岔, 原先用"模式串里有没有 bolloon 等词"猜 ⇒
458
+ * 数据目录那条 (串里含 .bolloon) 被误判, 把只读命令报成"会杀死宿主服务" ✗。
459
+ */
460
+ const SELF_LIFECYCLE_PATTERNS = [
461
+ /\b(bolloon|bolloon-agent|bolloon-agent-service)\s+(restart|stop|kill|quit|shutdown)\b/i,
462
+ /\bpm2\s+(restart|stop|delete|kill)\s+[\w./-]*bolloon\b/i,
463
+ /\b(systemctl|service)\s+(restart|stop|kill)\s+[\w.-]*bolloon\b/i,
464
+ /\bpkill\s+(-[a-z]+\s+)*(-f\s+)?[\w./-]*bolloon\b/i,
465
+ /\btaskkill\s+[^|]*\/IM\s+[\w-]*bolloon\b/i,
466
+ /\btaskkill\s+[^|]*\/FI\s+\"?[^\"]*bolloon/i,
467
+ ];
388
468
  const TERMINAL_DENY_PATTERNS = [
389
469
  /\bsudo\b/, // 提权
390
470
  /\bsu\b/,
@@ -397,8 +477,15 @@ const TERMINAL_DENY_PATTERNS = [
397
477
  /\bwget\b[^|]*\|\s*(sh|bash)\b/,
398
478
  /\b:\(\)\s*\{[^}]*\}\s*;\s*:/, // fork bomb
399
479
  /\b(>|>>)\s*(\/etc\/|\/usr\/|\/System\/|\/bin\/|\/sbin\/)/, // 写系统目录
400
- /[\/\s]\.bolloon\b/, // Bolloon 数据 (sessions/persona/keys; 覆盖 ~/.bolloon, $HOME/.bolloon, 空格.bolloon)
401
- /[\/\s]\.(diap|hermes|openclaw)\b/, // 其他 agent 数据
480
+ // 2026-10-01 (用户报「偶尔会出反水 bug」): 原先 /[\/\s]\.bolloon\b/ 会匹配**任何**含 .bolloon 的路径
481
+ // ⇒ 连 `ls ~/.bolloon/`、`cat .bolloon/x`、`grep -rn x .bolloon/` 这种**只读**命令都被拒;
482
+ // 而且因为模式串里带 "bolloon", 还会被下面的分类逻辑误判成"自生命周期命令", 打出
483
+ // "命令会重启或杀死 bolloon 宿主服务" —— 门在打自己的脚。
484
+ // 收窄口径: **只在删/移/截断/重定向写入**这些数据目录时拒; 读 (ls/cat/grep/find/du/stat/mkdir -p) 一律放行。
485
+ /\b(rm|rmdir|mv|truncate|shred)\b[^|;]*[\s/]\.bolloon\b/,
486
+ /(>|>>)\s*[^\s]*[\s/]?\.bolloon\b/,
487
+ /\b(rm|rmdir|mv|truncate|shred)\b[^|;]*[\s/]\.(diap|hermes|openclaw)\b/, // 其他 agent 数据 (同样只拦写/删)
488
+ /(>|>>)\s*[^\s]*[\s/]?\.(diap|hermes|openclaw)\b/,
402
489
  /\brm\s+-rf\s+(\/|~|\*|\.|\$HOME)\b/, // 删根/家/通配
403
490
  /\bgit\s+push\b[^|]*\s+(-f|--force)/, // 强推
404
491
  /\bgit\s+reset\s+--hard\b/,
@@ -406,12 +493,7 @@ const TERMINAL_DENY_PATTERNS = [
406
493
  // 2026-08-11 (Hermes cron/lifecycle_guard 模式): 自生命周期命令 — agent 通过 terminal
407
494
  // 重启/杀掉自己宿主服务 (bolloon) 会形成复活循环: 服务死 → supervisor 复活 → 自动 resume
408
495
  // → 同一命令再自杀. 策略: 命令形状锚定 (只匹配真实命令标识符, 不匹配散文, 误报率低).
409
- /\b(bolloon|bolloon-agent|bolloon-agent-service)\s+(restart|stop|kill|quit|shutdown)\b/i,
410
- /\bpm2\s+(restart|stop|delete|kill)\s+[\w./-]*bolloon\b/i,
411
- /\b(systemctl|service)\s+(restart|stop|kill)\s+[\w.-]*bolloon\b/i,
412
- /\bpkill\s+(-[a-z]+\s+)*(-f\s+)?[\w./-]*bolloon\b/i,
413
- /\btaskkill\s+[^|]*\/IM\s+[\w-]*bolloon\b/i,
414
- /\btaskkill\s+[^|]*\/FI\s+"?[^"]*bolloon/i,
496
+ ...SELF_LIFECYCLE_PATTERNS,
415
497
  ];
416
498
  /** 检查完整 shell 命令 (terminal 工具用). denylist-only: 命中高危模式即拒, 否则放行. */
417
499
  function checkTerminalCommand(rawCmd) {
@@ -424,7 +506,9 @@ function checkTerminalCommand(rawCmd) {
424
506
  // 2026-08-11: 用户可见静态文案走 i18n 目录 (Hermes locales 模式); 目录不可用时中文直出
425
507
  let reason;
426
508
  try {
427
- const isSelfLifecycle = /(bolloon|pm2|systemctl|service|pkill|taskkill)/.test(pattern.source);
509
+ // 2026-10-01: 归类改成**显式名单** —— 原先靠"模式串里有没有 bolloon 等词"猜, 于是
510
+ // 数据目录那条 (串里含 .bolloon) 被误判成自生命周期, 报错文案完全指错方向 ✗。
511
+ const isSelfLifecycle = SELF_LIFECYCLE_PATTERNS.includes(pattern);
428
512
  reason = isSelfLifecycle
429
513
  ? (0, i18n_js_1.t)('guard.self_lifecycle_reason', undefined, { pattern: String(pattern) })
430
514
  : (0, i18n_js_1.t)('guard.deny_reason', undefined, { pattern: String(pattern) });
@@ -462,4 +546,16 @@ function writePolicy(newPolicy) {
462
546
  return false;
463
547
  }
464
548
  }
549
+ /**
550
+ * 错误信息里的白名单**短形态** (2026-10-01)。
551
+ * 为什么: 原来把**整张白名单**拼进 `reason` ✗ ⇒ 这条报错随后被塞进
552
+ * ① 反思框(用户看到一屏白名单 ✗) ② 最终回复框(看着像"回复不完整" ✗ —— 其实是白名单切片 ✗)
553
+ * ③ 熔断判定(长文本撞上无关关键词 ⇒ 被误判成"鉴权类错误" ⇒ 直接熔断停在 needs_human ✗)。
554
+ * 做法: 滤掉临时目录噪音(不该出现在给人看的错误里 ✓) + 只列前若干条 + 给总数 ✓。
555
+ */
556
+ function shortRoots(entries, max = 6) {
557
+ const clean = entries.filter((e) => !/bolloon-bootstrap|\/var\/folders\/|\/tmp\//.test(e));
558
+ const shown = clean.slice(0, max).join(', ');
559
+ return clean.length > max ? `${shown} …(共 ${clean.length} 条)` : (shown || '(空)');
560
+ }
465
561
  //# sourceMappingURL=shell-guard.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"shell-guard.js","sourceRoot":"","sources":["../../../src/agents/shell-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,MAAY,EAAE,+BAAW;AACzB,4CAA4C;AAC5C,+EAA+E;AAC/E,wBAAwB;AACxB,8CAA8C;AAC9C,+EAA+E;AAC/E,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ;IACnD,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IACxD,OAAO,EAAE,OAAO;IAChB,yDAAyD;IACzD,6DAA6D;IAC7D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;CAC7C,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAsB;IACjD,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,+BAA+B;IAC/B,mCAAmC;IACnC,gCAAgC;IAChC,aAAa;IACb,SAAS;IACT,MAAM;IACN,WAAW;CACZ,CAAC;AAEF,MAAM,sBAAsB,GAA0B;IACpD,kEAAkE;IAClE,qDAAqD;IACrD,sEAAsE;IACtE,qCAAqC,EAAK,OAAO;IACjD,oCAAoC,EAAM,aAAa;IACvD,wBAAwB,EAAiB,KAAK;IAC9C,sBAAsB,EAAmB,sBAAsB;IAC/D,oCAAoC,EAAK,cAAc;IACvD,sBAAsB;IACtB,2BAA2B;IAC3B,yBAAyB;IACzB,mBAAmB;IACnB,eAAe;IACf,mBAAmB,EAAsB,4BAA4B;IACrE,cAAc;IACd,wFAAwF;IACxF,4FAA4F;CAC7F,CAAC;AAEF,MAAM,qBAAqB,GAA0B;IACnD,0BAA0B;IAC1B,sCAAsC;IACtC,uBAAuB;IACvB,qBAAqB;IACrB,iBAAiB;IACjB,aAAa,EAA4B,YAAY;IACrD,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,WAAW;IACX,WAAW;IACX,QAAQ,EAAkC,OAAO;IACjD,KAAK,EAAqC,OAAO;IACjD,cAAc,EAA4B,eAAe;CAC1D,CAAC;AAiBF,IAAI,YAAY,GAA6B,IAAI,CAAC;AAClD,IAAI,cAAc,GAAW,CAAC,CAAC;AAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,+BAA+B;AAE7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;AACpF,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;AAExF;;GAEG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC;QACxD,aAAa,EAAE,CAAC,GAAG,uBAAuB,CAAC;QAC3C,YAAY,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC9B,UAAU,EAAE,wBAAwB;QACpC,YAAY,EAAE,iBAAiB;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,oBAA2B,WAAW,GAAG,KAAK;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,WAAW,IAAI,YAAY,IAAI,GAAG,GAAG,cAAc,GAAG,aAAa,EAAE,CAAC;QACzE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,gBAAgB;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACtC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,0BAA0B,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAEpD,eAAe;QACf,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9I,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY,GAAG,MAAM,CAAC;QACtB,cAAc,GAAG,GAAG,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,wBACE,MAA4B,EAC5B,GAAW,EACX,IAAc,EACd,MAAe,EACf,UAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM;YACN,GAAG;YACH,IAAI;YACJ,MAAM;YACN,UAAU;SACX,CAAC,GAAG,IAAI,CAAC;QACV,EAAE,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;AACH,CAAC;AAaD;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,sBAAsB;IACtB,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;SAClC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,sBAA6B,GAAW,EAAE,IAAc;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhD,8BAA8B;IAC9B,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5C,IAAI,GAAG,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAC;gBACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,cAAc,MAAM,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM;QACrB,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClC,CAAC,CAAC,0BAAyC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,GAAG,gBAAgB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;SACtD,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,MAAM;QACxB,CAAC,CAAC;YACE,GAAG,qBAAqB;YACxB,kDAAkD;YAClD,mDAAmD;SACpD;QACH,CAAC,CAAC,qBAAqB,CAAC;IAE1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;gBACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,aAAa,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;IACX,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,wBAA+B,UAAkB;IAC/C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAElE,iCAAiC;IACjC,kCAAkC;IAClC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,WAAW,EAAE,UAAU,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,aAAa,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;QACzG,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;QACzB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3B,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,iBAAiB,EAAE,UAAU,CAAC,CAAC;oBACjF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,oBAAoB,UAAU,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;gBACnH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,SAAS,GAAG,MAAM,EAAE,aAAa,IAAI,uBAAuB,CAAC;IACnE,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,cAAc,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,aAAa;IACb,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,oBAAoB,EAAE,UAAU,CAAC,CAAC;IACpF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,UAAU,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC/D,SAAS,EAAE,gBAAgB;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,EAAE,YAAY,IAAI,iBAAiB,CAAC;AACnD,CAAC;AAED;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,CAAC;AAED;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,UAAU,IAAI,wBAAwB,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,sCAAsC;AACzB,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAC5D,oCAAoC;AACvB,QAAA,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3D,oCAAoC;AACvB,QAAA,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAEvF,+EAA+E;AAC/E,uDAAuD;AACvD,+DAA+D;AAC/D,mDAAmD;AACnD,+EAA+E;AAE/E,MAAM,sBAAsB,GAA0B;IACpD,UAAU,EAA2B,KAAK;IAC1C,QAAQ;IACR,UAAU,EAA2B,MAAM;IAC3C,WAAW,EAA0B,KAAK;IAC1C,qBAAqB,EAAgB,MAAM;IAC3C,mBAAmB,EAAkB,mBAAmB;IACxD,sBAAsB,EAAe,MAAM;IAC3C,+BAA+B,EAAM,eAAe;IACpD,+BAA+B;IAC/B,6BAA6B,EAAQ,YAAY;IACjD,0DAA0D,EAAE,QAAQ;IACpE,mBAAmB,EAAmB,gFAAgF;IACtH,kCAAkC,EAAI,cAAc;IACpD,oCAAoC,EAAG,UAAU;IACjD,oCAAoC,EAAG,KAAK;IAC5C,0BAA0B;IAC1B,qBAAqB,EAAgB,cAAc;IACnD,2EAA2E;IAC3E,iEAAiE;IACjE,mDAAmD;IACnD,wFAAwF;IACxF,yDAAyD;IACzD,iEAAiE;IACjE,mDAAmD;IACnD,2CAA2C;IAC3C,0CAA0C;CAC3C,CAAC;AAEF,mEAAmE;AACnE,8BAAqC,MAAc;IACjD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IAChF,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,iBAAiB,OAAO,EAAE,CAAC,CAAC;YAC9D,gEAAgE;YAChE,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9F,MAAM,GAAG,eAAe;oBACtB,CAAC,CAAC,IAAA,WAAK,EAAC,6BAA6B,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/E,CAAC,CAAC,IAAA,WAAK,EAAC,mBAAmB,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,YAAY,OAAO,0CAA0C,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D;;;GAGG;AACH,qBAA4B,SAA4B;IACtD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,YAAY,GAAG,IAAI,CAAC,CAAC,MAAM;QAC3B,cAAc,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,gCAAgC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"shell-guard.js","sourceRoot":"","sources":["../../../src/agents/shell-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,MAAY,EAAE,+BAAW;AACzB,4CAA4C;AAC5C,+EAA+E;AAC/E,wBAAwB;AACxB,8CAA8C;AAC9C,+EAA+E;AAC/E,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ;IACnD,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IACxD,OAAO,EAAE,OAAO;IAChB,yDAAyD;IACzD,6DAA6D;IAC7D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;CAC7C,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAsB;IACjD,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,+BAA+B;IAC/B,mCAAmC;IACnC,gCAAgC;IAChC,aAAa;IACb,SAAS;IACT,MAAM;IACN,WAAW;CACZ,CAAC;AAEF,MAAM,sBAAsB,GAA0B;IACpD,kEAAkE;IAClE,qDAAqD;IACrD,sEAAsE;IACtE,qCAAqC,EAAK,OAAO;IACjD,oCAAoC,EAAM,aAAa;IACvD,wBAAwB,EAAiB,KAAK;IAC9C,sBAAsB,EAAmB,sBAAsB;IAC/D,oCAAoC,EAAK,cAAc;IACvD,sBAAsB;IACtB,2BAA2B;IAC3B,yBAAyB;IACzB,mBAAmB;IACnB,eAAe;IACf,+DAA+D;IAC/D,gFAAgF;IAChF,oDAAoD;IACpD,kEAAkE;IAClE,sJAAsJ;IACtJ,4EAA4E;IAC5E,gCAAgC;IAChC,cAAc;IACd,wFAAwF;IACxF,4FAA4F;CAC7F,CAAC;AAEF,MAAM,qBAAqB,GAA0B;IACnD,0BAA0B;IAC1B,sCAAsC;IACtC,uBAAuB;IACvB,qBAAqB;IACrB,iBAAiB;IACjB,aAAa,EAA4B,YAAY;IACrD,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,WAAW;IACX,WAAW;IACX,QAAQ,EAAkC,OAAO;IACjD,KAAK,EAAqC,OAAO;IACjD,cAAc,EAA4B,eAAe;CAC1D,CAAC;AAiBF,IAAI,YAAY,GAA6B,IAAI,CAAC;AAClD,IAAI,cAAc,GAAW,CAAC,CAAC;AAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,+BAA+B;AAE7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;AACpF,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;AAExF;;GAEG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC;QACxD,oEAAoE;QACpE,mEAAmE;QACnE,aAAa,EAAE;YACb,GAAG,uBAAuB;YAC1B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrB,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,yBAAyB;gBAC5C,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,sBAAsB;gBACzC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,qBAAqB;gBACxC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,mBAAmB;gBACtC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,oBAAoB;gBACvC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,mBAAmB;aACvC,CAAC,CAAC,CAAC,EAAE,CAAC;SACR;QACD,YAAY,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC9B,UAAU,EAAE,wBAAwB;QACpC,YAAY,EAAE,iBAAiB;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH;;;;;;;;;GASG;AACH,+DAA+D;AAClD,QAAA,sBAAsB,GAA0B,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAE1H,8CAA8C;AAC9C,SAAS,sBAAsB,CAAC,MAAyB,EAAE,IAAY;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC;IACpE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,QAAA,sBAAsB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,GAAG,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;IAChG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,qBAAqB,GAA0B;IACnD,sBAAsB,EAAO,iCAAiC;IAC9D,oCAAoC,EAAE,4BAA4B;IAClE,wBAAwB,EAAM,0BAA0B;CACzD,CAAC;AAEF,SAAS,uBAAuB,CAAC,MAAyB;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;IAC1C,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC;AAC/C,CAAC;AAED,oBAA2B,WAAW,GAAG,KAAK;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,WAAW,IAAI,YAAY,IAAI,GAAG,GAAG,cAAc,GAAG,aAAa,EAAE,CAAC;QACzE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,gBAAgB;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACtC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,0BAA0B,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAEpD,0DAA0D;QAC1D,4DAA4D;QAC5D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;gBACrB,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAE7B,eAAe;QACf,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9I,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY,GAAG,MAAM,CAAC;QACtB,cAAc,GAAG,GAAG,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,wBACE,MAA4B,EAC5B,GAAW,EACX,IAAc,EACd,MAAe,EACf,UAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM;YACN,GAAG;YACH,IAAI;YACJ,MAAM;YACN,UAAU;SACX,CAAC,GAAG,IAAI,CAAC;QACV,EAAE,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;AACH,CAAC;AAaD;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,sBAAsB;IACtB,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;SAClC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,sBAA6B,GAAW,EAAE,IAAc;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhD,8BAA8B;IAC9B,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5C,IAAI,GAAG,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAC;gBACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,cAAc,MAAM,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM;QACrB,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClC,CAAC,CAAC,0BAAyC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,GAAG,mBAAmB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE;YACvE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;SACtD,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,MAAM;QACxB,CAAC,CAAC;YACE,GAAG,qBAAqB;YACxB,kDAAkD;YAClD,mDAAmD;SACpD;QACH,CAAC,CAAC,qBAAqB,CAAC;IAE1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;gBACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,aAAa,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;IACX,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,wBAA+B,UAAkB;IAC/C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAElE,iCAAiC;IACjC,kCAAkC;IAClC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,WAAW,EAAE,UAAU,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,aAAa,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;QACzG,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;QACzB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3B,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,iBAAiB,EAAE,UAAU,CAAC,CAAC;oBACjF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAU,oBAAoB,UAAU,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;gBACnH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,SAAS,GAAG,MAAM,EAAE,aAAa,IAAI,uBAAuB,CAAC;IACnE,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,cAAc,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,aAAa;IACb,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,UAAU,oBAAoB,EAAE,UAAU,CAAC,CAAC;IACpF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,OAAO,UAAU,kBAAkB,UAAU,CAAC,SAAS,CAAC,EAAE,EAAI,oCAAoC;QAC1G,SAAS,EAAE,gBAAgB;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,EAAE,YAAY,IAAI,iBAAiB,CAAC;AACnD,CAAC;AAED;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,CAAC;AAED;;GAEG;AACH;IACE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,UAAU,IAAI,wBAAwB,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,sCAAsC;AACzB,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAC5D,oCAAoC;AACvB,QAAA,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3D,oCAAoC;AACvB,QAAA,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAEvF,+EAA+E;AAC/E,uDAAuD;AACvD,+DAA+D;AAC/D,mDAAmD;AACnD,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,uBAAuB,GAA0B;IACrD,wFAAwF;IACxF,yDAAyD;IACzD,iEAAiE;IACjE,mDAAmD;IACnD,2CAA2C;IAC3C,4CAA4C;CAC7C,CAAC;AAEF,MAAM,sBAAsB,GAA0B;IACpD,UAAU,EAA2B,KAAK;IAC1C,QAAQ;IACR,UAAU,EAA2B,MAAM;IAC3C,WAAW,EAA0B,KAAK;IAC1C,qBAAqB,EAAgB,MAAM;IAC3C,mBAAmB,EAAkB,mBAAmB;IACxD,sBAAsB,EAAe,MAAM;IAC3C,+BAA+B,EAAM,eAAe;IACpD,+BAA+B;IAC/B,6BAA6B,EAAQ,YAAY;IACjD,0DAA0D,EAAE,QAAQ;IACpE,+EAA+E;IAC/E,gFAAgF;IAChF,oDAAoD;IACpD,wCAAwC;IACxC,kFAAkF;IAClF,wDAAwD;IACxD,kCAAkC;IAClC,uEAAuE,EAAI,wBAAwB;IACnG,iDAAiD;IACjD,oCAAoC,EAAG,UAAU;IACjD,oCAAoC,EAAG,KAAK;IAC5C,0BAA0B;IAC1B,qBAAqB,EAAgB,cAAc;IACnD,2EAA2E;IAC3E,iEAAiE;IACjE,mDAAmD;IACnD,GAAG,uBAAuB;CAC3B,CAAC;AAGF,mEAAmE;AACnE,8BAAqC,MAAc;IACjD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IAChF,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,iBAAiB,OAAO,EAAE,CAAC,CAAC;YAC9D,gEAAgE;YAChE,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,2DAA2D;gBAC3D,iDAAiD;gBACjD,MAAM,eAAe,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClE,MAAM,GAAG,eAAe;oBACtB,CAAC,CAAC,IAAA,WAAK,EAAC,6BAA6B,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/E,CAAC,CAAC,IAAA,WAAK,EAAC,mBAAmB,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,YAAY,OAAO,0CAA0C,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D;;;GAGG;AACH,qBAA4B,SAA4B;IACtD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,YAAY,GAAG,IAAI,CAAC,CAAC,MAAM;QAC3B,cAAc,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,gCAAgC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAA0B,EAAE,GAAG,GAAG,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;AACnF,CAAC"}
@@ -0,0 +1,103 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ exports.STALE_AFTER_MS = void 0;
7
+ exports.usagePath = usagePath;
8
+ exports.bumpUsage = bumpUsage;
9
+ exports.markCreatedBy = markCreatedBy;
10
+ exports.setPinned = setPinned;
11
+ exports.lifecycleOf = lifecycleOf;
12
+ exports.usageSummary = usageSummary;
13
+ /**
14
+ * 技能用量遥测 + 生命周期 (2026-10-01)。
15
+ * 形态要点: 遥测放**旁挂文件** ✓ —— 绝不写进用户自己写的 SKILL.md ✗(那是用户的文件 ✓)。
16
+ * 生命周期: active → stale(久未用) → archived; `pinned` 可退出自动流转 ✓。
17
+ * 边界(如实): 本模块只**计算状态并给建议** ✓, **不自动移动/删除任何技能文件** ✗(那是破坏性动作, 交人决定 ✓)。
18
+ */
19
+ const node_fs_1 = __importDefault(require("node:fs"));
20
+ const node_os_1 = __importDefault(require("node:os"));
21
+ const node_path_1 = __importDefault(require("node:path"));
22
+ function usagePath(home = node_os_1.default.homedir()) {
23
+ return node_path_1.default.join(home, '.bolloon', 'skills', '.usage.json');
24
+ }
25
+ function load(home) {
26
+ try {
27
+ const o = JSON.parse(node_fs_1.default.readFileSync(usagePath(home), 'utf-8'));
28
+ return o && typeof o === 'object' ? o : {};
29
+ }
30
+ catch {
31
+ return {};
32
+ }
33
+ }
34
+ function save(m, home) {
35
+ try {
36
+ const p = usagePath(home);
37
+ node_fs_1.default.mkdirSync(node_path_1.default.dirname(p), { recursive: true });
38
+ node_fs_1.default.writeFileSync(p, JSON.stringify(m), { mode: 0o600 });
39
+ }
40
+ catch { /* 遥测失败不影响工具调用 */ }
41
+ }
42
+ /** 用了一次(读技能时调 ✓); 失败只吞 ✓ */
43
+ function bumpUsage(skill, home, now = Date.now()) {
44
+ try {
45
+ const m = load(home);
46
+ const cur = m[skill] || { count: 0, lastUsedAt: 0 };
47
+ m[skill] = { ...cur, count: cur.count + 1, lastUsedAt: now };
48
+ save(m, home);
49
+ }
50
+ catch { /* best-effort */ }
51
+ }
52
+ /** 记下创建者(自审 / 用户点名) */
53
+ function markCreatedBy(skill, by, home, now = Date.now()) {
54
+ try {
55
+ const m = load(home);
56
+ const cur = m[skill] || { count: 0, lastUsedAt: 0 };
57
+ m[skill] = { ...cur, createdBy: by, lastUsedAt: cur.lastUsedAt || now };
58
+ save(m, home);
59
+ }
60
+ catch { /* best-effort */ }
61
+ }
62
+ /** 钉住(退出自动流转) */
63
+ function setPinned(skill, pinned, home) {
64
+ try {
65
+ const m = load(home);
66
+ const cur = m[skill] || { count: 0, lastUsedAt: 0 };
67
+ m[skill] = { ...cur, pinned };
68
+ save(m, home);
69
+ }
70
+ catch { /* best-effort */ }
71
+ }
72
+ exports.STALE_AFTER_MS = 45 * 24 * 3600 * 1000; // 45 天没用 ⇒ stale
73
+ /** 生命周期(只算不给动作 ✓): active / stale / archived-eligible */
74
+ function lifecycleOf(skill, home, now = Date.now()) {
75
+ const u = load(home)[skill];
76
+ if (!u)
77
+ return { state: 'unknown', reason: '旁挂遥测里没有它(可能是导入/内置技能)', count: 0, pinned: false };
78
+ if (u.pinned)
79
+ return { state: 'active', reason: '已 pinned(退出自动流转)', count: u.count, pinned: true };
80
+ const idle = now - (u.lastUsedAt || 0);
81
+ return {
82
+ state: idle > exports.STALE_AFTER_MS ? 'stale' : 'active',
83
+ reason: idle > exports.STALE_AFTER_MS ? `已 ${Math.round(idle / 86400000)} 天未用(仅状态, 不会自动删 ✓)` : `近用过(${u.count} 次)`,
84
+ count: u.count,
85
+ pinned: false,
86
+ };
87
+ }
88
+ /** 汇总(给面板/工具用 ✓) */
89
+ function usageSummary(home, now = Date.now()) {
90
+ const m = load(home);
91
+ let active = 0, stale = 0, pinned = 0;
92
+ for (const k of Object.keys(m)) {
93
+ const l = lifecycleOf(k, home, now);
94
+ if (l.pinned)
95
+ pinned++;
96
+ if (l.state === 'active')
97
+ active++;
98
+ else if (l.state === 'stale')
99
+ stale++;
100
+ }
101
+ return { total: Object.keys(m).length, active, stale, pinned };
102
+ }
103
+ //# sourceMappingURL=skill-health.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"skill-health.js","sourceRoot":"","sources":["../../../src/agents/skill-health.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;GAKG;AACH,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAE7B,mBAA0B,IAAI,GAAW,iBAAE,CAAC,OAAO,EAAE;IACnD,OAAO,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC;AAGD,SAAS,IAAI,CAAC,IAAa;IACzB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AACD,SAAS,IAAI,CAAC,CAA6B,EAAE,IAAa;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,iBAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED,4BAA4B;AAC5B,mBAA0B,KAAa,EAAE,IAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACpD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED,uBAAuB;AACvB,uBAA8B,KAAa,EAAE,EAA2B,EAAE,IAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACvG,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACpD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QACxE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED,iBAAiB;AACjB,mBAA0B,KAAa,EAAE,MAAe,EAAE,IAAa;IACrE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACpD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAEY,QAAA,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAI,iBAAiB;AAEzE,yDAAyD;AACzD,qBAA4B,KAAa,EAAE,IAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAExE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7F,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACnG,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IACvC,OAAO;QACL,KAAK,EAAE,IAAI,GAAG,QAAA,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;QACjD,MAAM,EAAE,IAAI,GAAG,QAAA,cAAc,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK;QAC1G,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,oBAAoB;AACpB,sBAA6B,IAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,MAAM;YAAE,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,EAAE,CAAC;aAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;YAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACjE,CAAC"}
@@ -0,0 +1,146 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ exports.runWithWriteOrigin = runWithWriteOrigin;
7
+ exports.currentWriteOrigin = currentWriteOrigin;
8
+ exports.isReviewWrite = isReviewWrite;
9
+ exports.ledgerPath = ledgerPath;
10
+ exports.blobsDir = blobsDir;
11
+ exports.captureSkillBefore = captureSkillBefore;
12
+ exports.appendLedger = appendLedger;
13
+ exports.readLedger = readLedger;
14
+ exports.isAgentCreated = isAgentCreated;
15
+ exports.reviewMayTouch = reviewMayTouch;
16
+ exports.rollbackEntry = rollbackEntry;
17
+ /**
18
+ * 技能账本 + 单条回滚 + 写来源隔离 (2026-10-01, 按"账本而非闸门"的形态做)。
19
+ *
20
+ * 三件事:
21
+ * ① **账本**: 每次技能变更追加一条 JSONL(前后清单 + 内容寻址备份)⇒ 可单条回滚 ✓。
22
+ * 放 JSONL 不放数据库: 耐久 · 可 grep · 数据库重置也不丢 ✓。
23
+ * ② **单条回滚**: 按 id 还原那一次变更; **唯独回滚是 fail-closed** ✓(安全快照拿不到就拒绝回滚,
24
+ * 绝不"半还原"✗); 其余全部吞错只记日志(账本坏掉不该挡住干活 ✓)。
25
+ * ③ **写来源隔离**: 用 AsyncLocalStorage 区分"用户点名要的写"(foreground ✓)与
26
+ * "自审/复盘产生的写"(review ✓)⇒ 自审**只许治理自己造出来的技能** ✓, 用户要的归用户 ✓。
27
+ */
28
+ const node_fs_1 = __importDefault(require("node:fs"));
29
+ const node_os_1 = __importDefault(require("node:os"));
30
+ const node_path_1 = __importDefault(require("node:path"));
31
+ const node_crypto_1 = __importDefault(require("node:crypto"));
32
+ const node_async_hooks_1 = require("node:async_hooks");
33
+ const originStore = new node_async_hooks_1.AsyncLocalStorage();
34
+ /** 在"自审"上下文里跑一段(其余一律按 foreground ✓) */
35
+ function runWithWriteOrigin(origin, fn) {
36
+ return originStore.run({ origin }, fn);
37
+ }
38
+ function currentWriteOrigin() {
39
+ return originStore.getStore()?.origin ?? 'foreground';
40
+ }
41
+ function isReviewWrite() {
42
+ return currentWriteOrigin() === 'review';
43
+ }
44
+ function ledgerPath(home = node_os_1.default.homedir()) {
45
+ return node_path_1.default.join(home, '.bolloon', 'skills', '.skill-ledger.jsonl');
46
+ }
47
+ function blobsDir(home = node_os_1.default.homedir()) {
48
+ return node_path_1.default.join(home, '.bolloon', 'skills', '.ledger-blobs');
49
+ }
50
+ function sha256(text) {
51
+ return node_crypto_1.default.createHash('sha256').update(text, 'utf-8').digest('hex');
52
+ }
53
+ /** 把内容按哈希存进 blobs(已存在则复用 ✓ 天然去重) */
54
+ function putBlob(text, home) {
55
+ const h = sha256(text);
56
+ const p = node_path_1.default.join(blobsDir(home), h);
57
+ try {
58
+ if (!node_fs_1.default.existsSync(p)) {
59
+ node_fs_1.default.mkdirSync(node_path_1.default.dirname(p), { recursive: true });
60
+ node_fs_1.default.writeFileSync(p, text, { mode: 0o600 });
61
+ }
62
+ }
63
+ catch { /* 备份失败 ⇒ 由调用方决定是否允许这次变更(见 captureBefore) */ }
64
+ return h;
65
+ }
66
+ /** 变更前快照: 返回 beforeSha(拿不到安全快照时返回 undefined ⇒ 回滚能力缺失, 调用方须知道 ✓) */
67
+ function captureSkillBefore(file, home) {
68
+ try {
69
+ const text = node_fs_1.default.readFileSync(file, 'utf-8');
70
+ return { beforeSha: putBlob(text, home), bytesBefore: text.length };
71
+ }
72
+ catch {
73
+ return {}; // 文件不存在(新建)= 正常; 读不到 = 快照缺失
74
+ }
75
+ }
76
+ /** 追加一条账本(吞错只记日志 ✓ —— 账本坏掉不该挡住干活) */
77
+ function appendLedger(entry, home) {
78
+ const full = { id: entry.id || node_crypto_1.default.randomBytes(8).toString('hex'), at: entry.at ?? Date.now(), ...entry };
79
+ try {
80
+ const p = ledgerPath(home);
81
+ node_fs_1.default.mkdirSync(node_path_1.default.dirname(p), { recursive: true });
82
+ node_fs_1.default.appendFileSync(p, JSON.stringify(full) + '\n', { mode: 0o600 });
83
+ }
84
+ catch { /* telemetry, not a gate */ }
85
+ return full;
86
+ }
87
+ function readLedger(home) {
88
+ try {
89
+ const raw = node_fs_1.default.readFileSync(ledgerPath(home), 'utf-8');
90
+ const out = [];
91
+ for (const line of raw.split('\n')) {
92
+ if (!line.trim())
93
+ continue;
94
+ try {
95
+ out.push(JSON.parse(line));
96
+ }
97
+ catch { /* 坏行跳过 */ }
98
+ }
99
+ return out;
100
+ }
101
+ catch {
102
+ return [];
103
+ }
104
+ }
105
+ /** 这个技能是不是"自审造出来的"?(决定自审有没有资格改它 ✓) */
106
+ function isAgentCreated(skill, home) {
107
+ return readLedger(home).some((e) => e.skill === skill && e.tool === 'create_skill' && e.origin === 'review');
108
+ }
109
+ /**
110
+ * 自审写前的资格检查(只读判断, 不改任何东西 ✓):
111
+ * 自审只许动**自己造出来**的技能 ✓; 用户点名要的归用户 ✓。
112
+ */
113
+ function reviewMayTouch(skill, home) {
114
+ if (!isReviewWrite())
115
+ return { ok: true, reason: 'foreground(用户点名要的写)' };
116
+ return isAgentCreated(skill, home)
117
+ ? { ok: true, reason: 'review(该技能由自审创建, 可治理)' }
118
+ : { ok: false, reason: '该技能不是自审创建的(用户点名要的归用户)⇒ 自审只记候选, 不动它' };
119
+ }
120
+ /**
121
+ * 单条回滚: 把某次变更前的快照还原回去 ✓。
122
+ * **fail-closed**: 快照缺失/内容哈希对不上 ⇒ 拒绝(绝不半还原 ✗)。
123
+ */
124
+ function rollbackEntry(id, home) {
125
+ const entry = readLedger(home).find((e) => e.id === id);
126
+ if (!entry)
127
+ return { ok: false, reason: `账本里没有 id=${id}` };
128
+ if (entry.tool === 'create_skill') {
129
+ // 创建类变更: 回滚 = 删掉那个文件(要用户明确同意 ⇒ 这里只报告, 不擅自删 ✗)
130
+ return { ok: false, reason: '该条是"新建技能"; 回滚等于删除文件 —— 需要你明确同意, 我不擅自删' };
131
+ }
132
+ if (!entry.beforeSha)
133
+ return { ok: false, reason: '该条没有变更前快照 ⇒ 拒绝回滚(fail-closed, 不做半还原)' };
134
+ try {
135
+ const blob = node_fs_1.default.readFileSync(node_path_1.default.join(blobsDir(home), entry.beforeSha), 'utf-8');
136
+ if (sha256(blob) !== entry.beforeSha)
137
+ return { ok: false, reason: '快照内容与哈希不符 ⇒ 拒绝回滚' };
138
+ node_fs_1.default.writeFileSync(entry.file, blob, { mode: 0o600 });
139
+ appendLedger({ origin: 'foreground', tool: 'rollback', skill: entry.skill, file: entry.file, beforeSha: entry.afterSha, afterSha: entry.beforeSha, note: `回到 ${entry.id}` }, home);
140
+ return { ok: true, reason: `已回滚到变更前(${entry.id})`, restored: entry.file };
141
+ }
142
+ catch (e) {
143
+ return { ok: false, reason: `回滚失败: ${String(e?.message || e).slice(0, 120)}` };
144
+ }
145
+ }
146
+ //# sourceMappingURL=skill-ledger.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"skill-ledger.js","sourceRoot":"","sources":["../../../src/agents/skill-ledger.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;;;;;;;GAUG;AACH,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAC7B,8DAAiC;AACjC,uDAAqD;AAIrD,MAAM,WAAW,GAAG,IAAI,oCAAiB,EAA2B,CAAC;AAErE,uCAAuC;AACvC,4BAAsC,MAAmB,EAAE,EAAW;IACpE,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AACD;IACE,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,IAAI,YAAY,CAAC;AACxD,CAAC;AACD;IACE,OAAO,kBAAkB,EAAE,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED,oBAA2B,IAAI,GAAW,iBAAE,CAAC,OAAO,EAAE;IACpD,OAAO,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AACtE,CAAC;AACD,kBAAyB,IAAI,GAAW,iBAAE,CAAC,OAAO,EAAE;IAClD,OAAO,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAChE,CAAC;AAgBD,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,oCAAoC;AACpC,SAAS,OAAO,CAAC,IAAY,EAAE,IAAa;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,iBAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mEAAmE;AACnE,4BAAmC,IAAY,EAAE,IAAa;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAG,4BAA4B;IAC3C,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,sBAA6B,KAAoE,EAAE,IAAa;IAC9G,MAAM,IAAI,GAAgB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,qBAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAiB,CAAC;IACzI,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,iBAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oBAA2B,IAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,sCAAsC;AACtC,wBAA+B,KAAa,EAAE,IAAa;IACzD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AAC/G,CAAC;AAED;;;GAGG;AACH,wBAA+B,KAAa,EAAE,IAAa;IACzD,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACzE,OAAO,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC;QAChC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE;QAC/C,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,uBAA8B,EAAU,EAAE,IAAa;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,8CAA8C;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvF,iBAAE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,YAAY,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACnL,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC"}