@cicctencent/agent-core 0.1.1 → 0.1.3

package/dist/cjs/middleware/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/middleware/types.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,yBAAyB;AACzB,+DAA+D"}

package/dist/cjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist/cjs/sandbox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI1E,WAAW;AACX,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,aAAa;AACb,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,aAAa,CAIzD,CAAC;AAIF,aAAa;AACb,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3D,aAAa;AACb,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sBAAsB;IACtB,gBAAgB,IAAI,aAAa,CAAC;IAClC,mBAAmB;IACnB,qBAAqB,IAAI,kBAAkB,CAAC;IAC5C;;;;;OAKG;IACH,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,mBAAmB;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAID,cAAc;AACd,MAAM,WAAW,cAAc;IAC7B,WAAW;IACX,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,eAAe;IACf,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACrC,aAAa;IACb,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,aAAa;IACb,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAID;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,YAAY,EAyFlD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAezC,CAAC"}

package/dist/cjs/sandbox/types.js

@@ -0,0 +1,128 @@
+"use strict";
+// ============================================================
+// Sandbox — 脚本沙箱类型定义 + 内置安全规则
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SANDBOX_SAFE_ENV_KEYS = exports.SANDBOX_BLOCKED_COMMANDS = exports.DEFAULT_SANDBOX_CONFIG = void 0;
+/** 默认沙箱配置 */
+exports.DEFAULT_SANDBOX_CONFIG = {
+    maxFileSize: 10 * 1024 * 1024, // 10MB
+    execTimeout: 30000,
+    commandRestriction: true,
+};
+// ---- 沙箱内置安全规则 ----
+/**
+ * 沙箱专用命令黑名单（在 SecurityGuard 基础上扩展）
+ * 这些规则阻止任何试图突破沙箱隔离的操作
+ */
+exports.SANDBOX_BLOCKED_COMMANDS = [
+    // 禁止提权
+    {
+        name: 'sandbox-block-sudo',
+        pattern: /^(sudo|su)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: privilege escalation blocked',
+    },
+    // 禁止修改系统目录
+    {
+        name: 'sandbox-block-system-write',
+        pattern: /\b(write|tee|cp|mv)\s+.*\s+\/(etc|usr|bin|sbin|var|sys|proc)\b/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: system directory write blocked',
+    },
+    // 禁止修改文件权限
+    {
+        name: 'sandbox-block-chmod',
+        pattern: /^(chmod|chown|chgrp)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: permission change blocked',
+    },
+    // 禁止修改防火墙
+    {
+        name: 'sandbox-block-iptables',
+        pattern: /^(iptables|nftables|ufw)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: firewall modification blocked',
+    },
+    // 禁止篡改关键环境变量
+    {
+        name: 'sandbox-block-env-export',
+        pattern: /^(export|setx)\s+(HOME|PATH|SHELL)/i,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: critical env modification blocked',
+    },
+    // 禁止挂载
+    {
+        name: 'sandbox-block-mount',
+        pattern: /^(mount|umount)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: mount operation blocked',
+    },
+    // 禁止内核模块操作
+    {
+        name: 'sandbox-block-kernel',
+        pattern: /^(insmod|rmmod|modprobe)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: kernel module operation blocked',
+    },
+    // 禁止全局文件系统搜索（find / 等绝对路径搜索）
+    {
+        name: 'sandbox-block-find-global',
+        pattern: /\bfind\s+\//,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: global filesystem search blocked. Use relative paths (find . -name "...") within the sandbox.',
+    },
+    // 禁止 locate 命令（系统级文件索引搜索）
+    {
+        name: 'sandbox-block-locate',
+        pattern: /^(locate|updatedb)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: locate command blocked. Use find with relative paths.',
+    },
+    // 禁止 grep/ripgrep 从绝对路径递归搜索
+    {
+        name: 'sandbox-block-grep-absolute',
+        pattern: /\b(grep|rg|ag)\s+(-[a-zA-Z]*\s+)*.*\s+\/(?!\/)(?:etc|usr|bin|sbin|var|sys|proc|home|opt|lib|tmp)(?:\/|$)/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: recursive search on system paths blocked. Search within sandbox directory only.',
+    },
+    // 禁止向用户主目录写入文件（绝对路径写操作）
+    {
+        name: 'sandbox-block-write-user-dir',
+        pattern: /(?:writeFile|writeFileSync)\s*\([\s\S]*?['"]?\/(Users|home)\/|\b(cp|mv|tee)\s+[^|;&]*\s+['"]?\/(Users|home)\//,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: writing to user directory blocked. Use relative paths (e.g. "output.pptx") within the sandbox.',
+    },
+];
+/**
+ * 沙箱允许的环境变量白名单
+ * 只保留脚本运行所需的最小环境变量集合
+ */
+exports.SANDBOX_SAFE_ENV_KEYS = [
+    // 基础环境
+    'PATH', 'HOME', 'USER', 'USERNAME',
+    // 本地化
+    'LANG', 'LC_ALL', 'LC_CTYPE', 'TERM',
+    // Python
+    'PYTHONIOENCODING', 'PYTHONUTF8', 'PYTHONPATH',
+    // Node.js
+    'NODE_PATH', 'NODE_ENV',
+    // 临时目录
+    'TMPDIR', 'TEMP', 'TMP',
+    // Windows 系统
+    'SystemRoot', 'windir', 'COMSPEC',
+    // 系统标识
+    'OS', 'PROCESSOR_ARCHITECTURE',
+];
+//# sourceMappingURL=types.js.map

package/dist/cjs/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/sandbox/types.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,8BAA8B;AAC9B,+DAA+D;;;AAqB/D,aAAa;AACA,QAAA,sBAAsB,GAA2B;IAC5D,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;IACtC,WAAW,EAAE,KAAK;IAClB,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAwCF,qBAAqB;AAErB;;;GAGG;AACU,QAAA,wBAAwB,GAAmB;IACtD,OAAO;IACP;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,uCAAuC;KACrD;IACD,WAAW;IACX;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,gEAAgE;QACzE,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yCAAyC;KACvD;IACD,WAAW;IACX;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,oCAAoC;KAClD;IACD,UAAU;IACV;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,wCAAwC;KACtD;IACD,aAAa;IACb;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,4CAA4C;KAC1D;IACD,OAAO;IACP;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD,WAAW;IACX;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD,6BAA6B;IAC7B;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,wGAAwG;KACtH;IACD,0BAA0B;IAC1B;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,gEAAgE;KAC9E;IACD,4BAA4B;IAC5B;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,0GAA0G;QACnH,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0FAA0F;KACxG;IACD,wBAAwB;IACxB;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,+GAA+G;QACxH,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yGAAyG;KACvH;CACF,CAAC;AAEF;;;GAGG;AACU,QAAA,qBAAqB,GAAa;IAC7C,OAAO;IACP,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU;IAClC,MAAM;IACN,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM;IACpC,SAAS;IACT,kBAAkB,EAAE,YAAY,EAAE,YAAY;IAC9C,UAAU;IACV,WAAW,EAAE,UAAU;IACvB,OAAO;IACP,QAAQ,EAAE,MAAM,EAAE,KAAK;IACvB,aAAa;IACb,YAAY,EAAE,QAAQ,EAAE,SAAS;IACjC,OAAO;IACP,IAAI,EAAE,wBAAwB;CAC/B,CAAC"}

package/dist/cjs/security/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAyE/E,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAiB;IAE/B,uCAAuC;IACvC,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,qBAAqB,CAA+B;IAC5D,OAAO,CAAC,kBAAkB,CAA+B;IACzD,iCAAiC;IACjC,OAAO,CAAC,oBAAoB,CAAe;gBAE/B,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC;IAM5C,2BAA2B;IAC3B,OAAO,CAAC,uBAAuB;IAM/B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,qBAAqB;IAO7B,cAAc;IACd,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc;IAuDzC,gBAAgB;IAChB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAKjC,WAAW;IACX,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK9B,aAAa;IACb,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAQhD,aAAa;IACb,SAAS,IAAI,cAAc;IAM3B;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAYzC;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAczC,OAAO,CAAC,SAAS;CAMlB"}

package/dist/cjs/security/guard.js

@@ -0,0 +1,229 @@
+"use strict";
+// ============================================================
+// SecurityGuard — 命令安全检查 + 凭证泄露检测（带规则编译缓存）
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityGuard = void 0;
+/** 凭证泄露检测模式 */
+const CREDENTIAL_PATTERNS = [
+    { name: 'openai-key', pattern: /sk-[a-zA-Z0-9]{20,}/g },
+    { name: 'anthropic-key', pattern: /sk-ant-[a-zA-Z0-9-]{20,}/g },
+    { name: 'aws-access-key', pattern: /AKIA[0-9A-Z]{16}/g },
+    { name: 'aws-secret-key', pattern: /(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])/g },
+    { name: 'github-token', pattern: /ghp_[a-zA-Z0-9]{36}/g },
+    { name: 'github-fine-grained', pattern: /github_pat_[a-zA-Z0-9_]{82}/g },
+    { name: 'generic-bearer', pattern: /Bearer\s+[a-zA-Z0-9._-]+/gi },
+    { name: 'generic-secret', pattern: /(?:password|secret|token|api_key|apikey)\s*[:=]\s*['"][^'"]{8,}['"]/gi },
+    { name: 'private-key', pattern: /-----BEGIN (?:RSA |EC |DSA )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA )?PRIVATE KEY-----/g },
+];
+/** 默认安全策略 */
+const DEFAULT_POLICY = {
+    deleteProtection: true,
+    trashDir: '~/.workagent/.trash',
+    blacklistEnabled: true,
+    rules: [],
+};
+/** 内置黑名单规则 */
+const BUILTIN_BLACKLIST = [
+    {
+        name: 'block-rm-root',
+        pattern: /^rm\s+(-[a-zA-Z]*\s+)*\/$/m,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block rm -rf / (destroy root filesystem)',
+    },
+    {
+        name: 'block-dd-disk',
+        pattern: /^dd\s+.*of=\/dev\/[sh]d/m,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block dd to disk device',
+    },
+    {
+        name: 'block-mkfs',
+        pattern: /^mkfs\./,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block filesystem format commands',
+    },
+    {
+        name: 'block-fork-bomb',
+        pattern: /^:\(\)\s*\{\s*:\|:\s*&\s*\}\s*;\s*:/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block fork bomb',
+    },
+];
+/** 内置删除保护规则（rm → mv 到回收站，回收站路径通过 policy.trashDir 配置） */
+function createDeleteProtectionRule(trashDir) {
+    return {
+        name: 'delete-protection',
+        pattern: /^(sudo\s+)?rm\s+((?:-[a-zA-Z]+\s+)*)(.+)$/s,
+        severity: 'warn',
+        action: 'rewrite',
+        rewriter: (command) => {
+            const match = command.match(/^(sudo\s+)?rm\s+((?:-[a-zA-Z]+\s+)*)(.+)$/s);
+            if (!match)
+                return command;
+            const targets = match[3];
+            const ts = Date.now();
+            return `mkdir -p ${trashDir} && mv ${targets} ${trashDir}/_del_${ts}`;
+        },
+        description: 'Rewrite rm to mv trash for delete protection',
+    };
+}
+class SecurityGuard {
+    policy;
+    /** 已编译的正则规则缓存（避免每次 sanitize 重复遍历数组） */
+    compiledBlacklist = null;
+    compiledCustomRewrite = null;
+    compiledCustomWarn = null;
+    /** 删除保护规则（使用 policy.trashDir） */
+    deleteProtectionRule;
+    constructor(policy) {
+        this.policy = { ...DEFAULT_POLICY, ...policy };
+        this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
+        this.invalidateCompiledRules();
+    }
+    /** 编译规则缓存（policy 变更时调用） */
+    invalidateCompiledRules() {
+        this.compiledBlacklist = null;
+        this.compiledCustomRewrite = null;
+        this.compiledCustomWarn = null;
+    }
+    getCompiledBlacklist() {
+        if (!this.compiledBlacklist) {
+            this.compiledBlacklist = [...BUILTIN_BLACKLIST, ...this.policy.rules.filter((r) => r.action === 'block')];
+        }
+        return this.compiledBlacklist;
+    }
+    getCompiledCustomRewrite() {
+        if (!this.compiledCustomRewrite) {
+            this.compiledCustomRewrite = this.policy.rules.filter((r) => r.action === 'rewrite' && r.rewriter);
+        }
+        return this.compiledCustomRewrite;
+    }
+    getCompiledCustomWarn() {
+        if (!this.compiledCustomWarn) {
+            this.compiledCustomWarn = this.policy.rules.filter((r) => r.action === 'warn');
+        }
+        return this.compiledCustomWarn;
+    }
+    /** 检查命令安全性 */
+    sanitize(command) {
+        const trimmedCmd = command.trim();
+        // ① 黑名单检查
+        if (this.policy.blacklistEnabled) {
+            for (const rule of this.getCompiledBlacklist()) {
+                if (this.matchRule(trimmedCmd, rule)) {
+                    return {
+                        safe: false,
+                        reason: `BLOCKED: ${rule.description || rule.name}`,
+                        severity: rule.severity,
+                    };
+                }
+            }
+        }
+        // ② 删除保护（rm → mv 回收站）
+        if (this.policy.deleteProtection) {
+            if (this.matchRule(trimmedCmd, this.deleteProtectionRule)) {
+                const rewritten = this.deleteProtectionRule.rewriter(trimmedCmd);
+                return {
+                    safe: true,
+                    rewritten,
+                    reason: 'Delete protection: rm rewritten to mv trash',
+                    severity: 'warn',
+                };
+            }
+        }
+        // ③ 自定义 rewrite 规则
+        for (const rule of this.getCompiledCustomRewrite()) {
+            if (!this.matchRule(trimmedCmd, rule))
+                continue;
+            return {
+                safe: true,
+                rewritten: rule.rewriter(trimmedCmd),
+                reason: `Rewritten by rule: ${rule.name}`,
+                severity: rule.severity,
+            };
+        }
+        // ④ 自定义 warn 规则
+        for (const rule of this.getCompiledCustomWarn()) {
+            if (this.matchRule(trimmedCmd, rule)) {
+                return {
+                    safe: true,
+                    reason: `Warning: ${rule.description || rule.name}`,
+                    severity: rule.severity,
+                };
+            }
+        }
+        // ⑤ 安全
+        return { safe: true, severity: 'safe' };
+    }
+    /** 添加自定义安全规则 */
+    addRule(rule) {
+        this.policy.rules.push(rule);
+        this.invalidateCompiledRules();
+    }
+    /** 移除规则 */
+    removeRule(name) {
+        this.policy.rules = this.policy.rules.filter((r) => r.name !== name);
+        this.invalidateCompiledRules();
+    }
+    /** 更新安全策略 */
+    setPolicy(policy) {
+        this.policy = { ...this.policy, ...policy };
+        if (policy.trashDir) {
+            this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
+        }
+        this.invalidateCompiledRules();
+    }
+    /** 获取当前策略 */
+    getPolicy() {
+        return { ...this.policy };
+    }
+    // ---- 凭证泄露检测 ----
+    /**
+     * 扫描并脱敏文本中的敏感信息
+     * 将检测到的 API Key、Token、密码等替换为 [REDACTED:xxx]
+     * @param text 输入文本（通常是工具结果）
+     * @returns 脱敏后的文本
+     */
+    sanitizeCredentials(text) {
+        if (!text || text.length < 10)
+            return text;
+        let result = text;
+        for (const { name, pattern } of CREDENTIAL_PATTERNS) {
+            // 重置正则 lastIndex（全局标志下）
+            pattern.lastIndex = 0;
+            result = result.replace(pattern, `[REDACTED:${name}]`);
+        }
+        return result;
+    }
+    /**
+     * 检测文本是否包含敏感信息
+     * @param text 输入文本
+     * @returns 检测到的敏感信息类型列表
+     */
+    detectCredentials(text) {
+        if (!text)
+            return [];
+        const detected = [];
+        for (const { name, pattern } of CREDENTIAL_PATTERNS) {
+            pattern.lastIndex = 0;
+            if (pattern.test(text)) {
+                detected.push(name);
+            }
+        }
+        return detected;
+    }
+    // ---- 内部辅助 ----
+    matchRule(command, rule) {
+        if (rule.pattern instanceof RegExp) {
+            return rule.pattern.test(command);
+        }
+        return rule.pattern(command);
+    }
+}
+exports.SecurityGuard = SecurityGuard;
+//# sourceMappingURL=guard.js.map

package/dist/cjs/security/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;;;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAC/F,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC5G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mGAAmG,EAAE;CACtI,CAAC;AAEF,aAAa;AACb,MAAM,cAAc,GAAmB;IACrC,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,qBAAqB;IAC/B,gBAAgB,EAAE,IAAI;IACtB,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,cAAc;AACd,MAAM,iBAAiB,GAAmB;IACxC;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iBAAiB;KAC/B;CACF,CAAC;AAEF,wDAAwD;AACxD,SAAS,0BAA0B,CAAC,QAAgB;IAClD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,YAAY,QAAQ,UAAU,OAAO,IAAI,QAAQ,SAAS,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,WAAW,EAAE,8CAA8C;KAC5D,CAAC;AACJ,CAAC;AAED,MAAa,aAAa;IAChB,MAAM,CAAiB;IAE/B,uCAAuC;IAC/B,iBAAiB,GAA0B,IAAI,CAAC;IAChD,qBAAqB,GAA0B,IAAI,CAAC;IACpD,kBAAkB,GAA0B,IAAI,CAAC;IACzD,iCAAiC;IACzB,oBAAoB,CAAe;IAE3C,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,2BAA2B;IACnB,uBAAuB;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACjC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,cAAc;IACd,QAAQ,CAAC,OAAe;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAElC,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO;wBACL,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;wBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;gBAClE,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,SAAS;oBACT,MAAM,EAAE,6CAA6C;oBACrD,QAAQ,EAAE,MAAM;iBACjB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,SAAS;YAChD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI,CAAC,QAAS,CAAC,UAAU,CAAC;gBACrC,MAAM,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;oBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;IACX,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS,CAAC,MAA+B;QACvC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,mBAAmB;IAEnB;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,wBAAwB;YACxB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,IAAY;QAC5B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,iBAAiB;IAET,SAAS,CAAC,OAAe,EAAE,IAAkB;QACnD,IAAI,IAAI,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF;AA3KD,sCA2KC"}

package/dist/cjs/security/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB"}

package/dist/cjs/security/types.js

@@ -0,0 +1,6 @@
+"use strict";
+// ============================================================
+// Security Guard 类型定义
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/security/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,sBAAsB;AACtB,+DAA+D"}

package/dist/cjs/skill/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/skill/manager.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAiDpE,YAAY;AACZ,UAAU,cAAc;IACtB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,qBAAa,YAAY;IACvB,wCAAwC;IACxC,OAAO,CAAC,SAAS,CAAoC;IACrD,+BAA+B;IAC/B,OAAO,CAAC,YAAY,CAAmB;IACvC,cAAc;IACd,OAAO,CAAC,IAAI,CAAU;IACtB,wBAAwB;IACxB,OAAO,CAAC,UAAU,CAAyE;gBAE/E,MAAM,CAAC,EAAE,cAAc;IAKnC;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAItE;;OAEG;IACH,MAAM,CAAC,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAMnE;;;;;OAKG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAqCzE,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI;IAO5B,eAAe;IACf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAK5B;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS;IAkBlC;;OAEG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIlD;;;OAGG;IACH,eAAe,IAAI,aAAa,EAAE;IAIlC,qCAAqC;IACrC,MAAM,IAAI,KAAK,EAAE;IAIjB,YAAY;IACZ,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,EAAE;IAM9B,sBAAsB;IACtB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAYlC,eAAe;IACf,aAAa,IAAI;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE;IAQzF,oBAAoB;IACpB,MAAM,IAAI,IAAI;IAYd;;;OAGG;IACH,OAAO,CAAC,WAAW;IAiBnB;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAe/B,iCAAiC;IACjC,OAAO,CAAC,UAAU;IASlB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyDrB,0CAA0C;IAC1C,OAAO,CAAC,KAAK;IA8Cb,8BAA8B;IAC9B,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,SAAS;CASlB"}