@cicctencent/agent-core 0.1.1 → 0.1.3

package/dist/esm/memory/types.d.ts

@@ -0,0 +1,43 @@
+/** 记忆层级 */
+export type MemoryLayer = 'L0' | 'L1' | 'L2' | 'L3';
+/** 记忆条目（与上层 MemoryService 的 MemoryEntry 保持一致，上层负责转换） */
+export interface MemoryEntry {
+    /** 唯一标识（基于 key 生成） */
+    id: string;
+    /** 记忆分类：user_preference / project_knowledge / learned_fact / custom / scene / persona */
+    category: string;
+    /** 记忆键（用于 upsert） */
+    key: string;
+    /** 记忆内容 */
+    content: string;
+    /** 重要程度 1-5，默认 3 */
+    importance: number;
+    /** 创建时间（ISO 字符串） */
+    createdAt: string;
+    /** 最后更新时间（ISO 字符串） */
+    updatedAt: string;
+    /** 记忆层级：L0=原始对话 L1=原子事实 L2=场景块 L3=用户画像，默认 L1 */
+    memoryLayer: MemoryLayer;
+    /** 来源会话 ID（自动提取时记录） */
+    sourceSessionId?: string;
+    /** 提取时间戳（ISO 字符串） */
+    sourceTimestamp?: string;
+    /** L2 场景 ID（归属场景块） */
+    sceneId?: string;
+    /** L3 画像维度（如 coding_style, tool_preference） */
+    personaFacet?: string;
+    /** 来源层级（该条目从哪一层提炼而来） */
+    sourceLayer?: MemoryLayer;
+    /** 来源条目 ID 列表（溯源链） */
+    sourceIds?: string[];
+}
+/**
+ * MemoryServiceLike — 管道调度器所需的 MemoryService 最小接口
+ * 上层（server 侧）的 MemoryService 实现此接口即可接入管道
+ */
+export interface MemoryServiceLike {
+    getKeys(): string[];
+    getAllEntries(layer?: MemoryLayer): MemoryEntry[];
+    save(key: string, content: string, category: string, importance: number, extras?: Partial<Pick<MemoryEntry, 'memoryLayer' | 'sourceSessionId' | 'sourceTimestamp' | 'sceneId' | 'sourceLayer' | 'sourceIds'>>): MemoryEntry;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/memory/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/memory/types.ts"],"names":[],"mappings":"AAIA,WAAW;AACX,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,WAAW,EAAE,WAAW,CAAC;IACzB,uBAAuB;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qBAAqB;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wBAAwB;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,sBAAsB;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,IAAI,MAAM,EAAE,CAAC;IACpB,aAAa,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IAClD,IAAI,CACF,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC,CAAC,GACnI,WAAW,CAAC;CAChB"}

package/dist/esm/memory/types.js

@@ -0,0 +1,5 @@
+// ============================================================
+// Memory 模块类型定义（独立于上层 MemoryService 实现）
+// ============================================================
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/memory/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/memory/types.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wCAAwC;AACxC,+DAA+D"}

package/dist/esm/middleware/types.d.ts

@@ -0,0 +1,52 @@
+import type { HookContext, HookResult } from '../hooks/types.ts';
+/**
+ * 中间件 before/after 接收的上下文信息
+ * 包含当前迭代的关键状态快照，中间件可读取但不应直接修改
+ */
+export interface MiddlewareContext {
+    /** 会话 ID */
+    sessionId: string;
+    /** 当前迭代轮次 */
+    iteration: number;
+    /** 当前消息列表（只读快照） */
+    messages: ReadonlyArray<{
+        role: string;
+        content: string | null;
+    }>;
+    /** 当前可用工具数量 */
+    toolCount: number;
+}
+/**
+ * 中间件接口 — Hook 系统的结构化增强层
+ *
+ * 与 Hook 共存，提供更清晰的 before/after 生命周期：
+ * - `before` / `after`：在每轮迭代的开始/结束执行
+ * - `onToolBefore` / `onToolAfter`：在工具执行前/后执行（与 before_tool/after_tool Hook 并行）
+ *
+ * 执行顺序：Middleware.before → Hook.on_iteration_start → ... → Hook.before_tool → Middleware.onToolBefore → 工具执行 → Hook.after_tool → Middleware.onToolAfter → ... → Middleware.after
+ */
+export interface Middleware {
+    /** 中间件名称（用于日志和调试） */
+    name: string;
+    /**
+     * 每轮迭代开始前调用
+     * 适合：预检查、上下文注入、状态审计
+     */
+    before?(ctx: MiddlewareContext): Promise<void>;
+    /**
+     * 每轮迭代结束后调用
+     * 适合：后处理、指标收集、日志记录
+     */
+    after?(ctx: MiddlewareContext): Promise<void>;
+    /**
+     * 工具执行前调用（与 before_tool Hook 同层）
+     * 返回值与 Hook 的 before_tool 合并（block/modify 均生效）
+     */
+    onToolBefore?(ctx: HookContext): Promise<HookResult | void>;
+    /**
+     * 工具执行后调用（与 after_tool Hook 同层）
+     * 返回值与 Hook 的 after_tool 合并（inject 均生效）
+     */
+    onToolAfter?(ctx: HookContext): Promise<HookResult | void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/middleware/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/middleware/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIjE;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,QAAQ,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAClE,eAAe;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,MAAM,CAAC,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;;OAGG;IACH,KAAK,CAAC,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C;;;OAGG;IACH,YAAY,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE5D;;;OAGG;IACH,WAAW,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC5D"}

package/dist/esm/middleware/types.js

@@ -0,0 +1,5 @@
+// ============================================================
+// Middleware — 中间件管道类型定义
+// ============================================================
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/middleware/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/middleware/types.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yBAAyB;AACzB,+DAA+D"}

package/dist/esm/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

package/dist/esm/sandbox/types.d.ts

@@ -0,0 +1,59 @@
+import type { SecurityRule } from '../security/types.ts';
+import type { ShellExecutor, FileSystemExecutor } from '../tool/types.ts';
+/** 沙箱配置 */
+export interface SandboxConfig {
+    /** 沙箱根目录（默认 ~/.workagent/sandboxes/{id}） */
+    rootDir: string;
+    /** 允许的文件扩展名（脚本执行用），空 = 不限制 */
+    allowedExtensions?: string[];
+    /** 最大文件大小 (bytes)，默认 10MB */
+    maxFileSize?: number;
+    /** 执行超时 (ms)，默认 30000 */
+    execTimeout?: number;
+    /** 是否启用命令限制（默认 true） */
+    commandRestriction?: boolean;
+}
+/** 默认沙箱配置 */
+export declare const DEFAULT_SANDBOX_CONFIG: Partial<SandboxConfig>;
+/** 脚本语言类型 */
+export type ScriptLanguage = 'python' | 'nodejs' | 'shell';
+/** 沙箱实例接口 */
+export interface Sandbox {
+    readonly id: string;
+    readonly rootDir: string;
+    /** 获取受限的 Shell 执行器 */
+    getShellExecutor(): ShellExecutor;
+    /** 获取受限的文件系统执行器 */
+    getFileSystemExecutor(): FileSystemExecutor;
+    /**
+     * 运行脚本（写入临时文件并执行）
+     * @param language 脚本语言：python / nodejs / shell
+     * @param code     脚本代码
+     * @param timeout  执行超时 (ms)
+     */
+    runScript(language: ScriptLanguage, code: string, timeout?: number): Promise<string>;
+    /** 销毁沙箱（清理临时文件） */
+    destroy(): Promise<void>;
+}
+/** 沙箱管理器接口 */
+export interface SandboxManager {
+    /** 创建沙箱 */
+    create(id: string, config?: Partial<SandboxConfig>): Promise<Sandbox>;
+    /** 获取已创建的沙箱 */
+    get(id: string): Sandbox | undefined;
+    /** 销毁指定沙箱 */
+    destroy(id: string): Promise<void>;
+    /** 销毁所有沙箱 */
+    destroyAll(): Promise<void>;
+}
+/**
+ * 沙箱专用命令黑名单（在 SecurityGuard 基础上扩展）
+ * 这些规则阻止任何试图突破沙箱隔离的操作
+ */
+export declare const SANDBOX_BLOCKED_COMMANDS: SecurityRule[];
+/**
+ * 沙箱允许的环境变量白名单
+ * 只保留脚本运行所需的最小环境变量集合
+ */
+export declare const SANDBOX_SAFE_ENV_KEYS: string[];
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/sandbox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI1E,WAAW;AACX,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,aAAa;AACb,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,aAAa,CAIzD,CAAC;AAIF,aAAa;AACb,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3D,aAAa;AACb,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sBAAsB;IACtB,gBAAgB,IAAI,aAAa,CAAC;IAClC,mBAAmB;IACnB,qBAAqB,IAAI,kBAAkB,CAAC;IAC5C;;;;;OAKG;IACH,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,mBAAmB;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAID,cAAc;AACd,MAAM,WAAW,cAAc;IAC7B,WAAW;IACX,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,eAAe;IACf,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACrC,aAAa;IACb,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,aAAa;IACb,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAID;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,YAAY,EAyFlD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAezC,CAAC"}

package/dist/esm/sandbox/types.js

@@ -0,0 +1,125 @@
+// ============================================================
+// Sandbox — 脚本沙箱类型定义 + 内置安全规则
+// ============================================================
+/** 默认沙箱配置 */
+export const DEFAULT_SANDBOX_CONFIG = {
+    maxFileSize: 10 * 1024 * 1024, // 10MB
+    execTimeout: 30000,
+    commandRestriction: true,
+};
+// ---- 沙箱内置安全规则 ----
+/**
+ * 沙箱专用命令黑名单（在 SecurityGuard 基础上扩展）
+ * 这些规则阻止任何试图突破沙箱隔离的操作
+ */
+export const SANDBOX_BLOCKED_COMMANDS = [
+    // 禁止提权
+    {
+        name: 'sandbox-block-sudo',
+        pattern: /^(sudo|su)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: privilege escalation blocked',
+    },
+    // 禁止修改系统目录
+    {
+        name: 'sandbox-block-system-write',
+        pattern: /\b(write|tee|cp|mv)\s+.*\s+\/(etc|usr|bin|sbin|var|sys|proc)\b/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: system directory write blocked',
+    },
+    // 禁止修改文件权限
+    {
+        name: 'sandbox-block-chmod',
+        pattern: /^(chmod|chown|chgrp)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: permission change blocked',
+    },
+    // 禁止修改防火墙
+    {
+        name: 'sandbox-block-iptables',
+        pattern: /^(iptables|nftables|ufw)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: firewall modification blocked',
+    },
+    // 禁止篡改关键环境变量
+    {
+        name: 'sandbox-block-env-export',
+        pattern: /^(export|setx)\s+(HOME|PATH|SHELL)/i,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: critical env modification blocked',
+    },
+    // 禁止挂载
+    {
+        name: 'sandbox-block-mount',
+        pattern: /^(mount|umount)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: mount operation blocked',
+    },
+    // 禁止内核模块操作
+    {
+        name: 'sandbox-block-kernel',
+        pattern: /^(insmod|rmmod|modprobe)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: kernel module operation blocked',
+    },
+    // 禁止全局文件系统搜索（find / 等绝对路径搜索）
+    {
+        name: 'sandbox-block-find-global',
+        pattern: /\bfind\s+\//,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: global filesystem search blocked. Use relative paths (find . -name "...") within the sandbox.',
+    },
+    // 禁止 locate 命令（系统级文件索引搜索）
+    {
+        name: 'sandbox-block-locate',
+        pattern: /^(locate|updatedb)\s/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: locate command blocked. Use find with relative paths.',
+    },
+    // 禁止 grep/ripgrep 从绝对路径递归搜索
+    {
+        name: 'sandbox-block-grep-absolute',
+        pattern: /\b(grep|rg|ag)\s+(-[a-zA-Z]*\s+)*.*\s+\/(?!\/)(?:etc|usr|bin|sbin|var|sys|proc|home|opt|lib|tmp)(?:\/|$)/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: recursive search on system paths blocked. Search within sandbox directory only.',
+    },
+    // 禁止向用户主目录写入文件（绝对路径写操作）
+    {
+        name: 'sandbox-block-write-user-dir',
+        pattern: /(?:writeFile|writeFileSync)\s*\([\s\S]*?['"]?\/(Users|home)\/|\b(cp|mv|tee)\s+[^|;&]*\s+['"]?\/(Users|home)\//,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Sandbox: writing to user directory blocked. Use relative paths (e.g. "output.pptx") within the sandbox.',
+    },
+];
+/**
+ * 沙箱允许的环境变量白名单
+ * 只保留脚本运行所需的最小环境变量集合
+ */
+export const SANDBOX_SAFE_ENV_KEYS = [
+    // 基础环境
+    'PATH', 'HOME', 'USER', 'USERNAME',
+    // 本地化
+    'LANG', 'LC_ALL', 'LC_CTYPE', 'TERM',
+    // Python
+    'PYTHONIOENCODING', 'PYTHONUTF8', 'PYTHONPATH',
+    // Node.js
+    'NODE_PATH', 'NODE_ENV',
+    // 临时目录
+    'TMPDIR', 'TEMP', 'TMP',
+    // Windows 系统
+    'SystemRoot', 'windir', 'COMSPEC',
+    // 系统标识
+    'OS', 'PROCESSOR_ARCHITECTURE',
+];
+//# sourceMappingURL=types.js.map

package/dist/esm/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8BAA8B;AAC9B,+DAA+D;AAqB/D,aAAa;AACb,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;IACtC,WAAW,EAAE,KAAK;IAClB,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAwCF,qBAAqB;AAErB;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmB;IACtD,OAAO;IACP;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,uCAAuC;KACrD;IACD,WAAW;IACX;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,gEAAgE;QACzE,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yCAAyC;KACvD;IACD,WAAW;IACX;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,oCAAoC;KAClD;IACD,UAAU;IACV;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,wCAAwC;KACtD;IACD,aAAa;IACb;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,4CAA4C;KAC1D;IACD,OAAO;IACP;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD,WAAW;IACX;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD,6BAA6B;IAC7B;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,wGAAwG;KACtH;IACD,0BAA0B;IAC1B;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,gEAAgE;KAC9E;IACD,4BAA4B;IAC5B;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,0GAA0G;QACnH,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0FAA0F;KACxG;IACD,wBAAwB;IACxB;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,+GAA+G;QACxH,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yGAAyG;KACvH;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa;IAC7C,OAAO;IACP,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU;IAClC,MAAM;IACN,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM;IACpC,SAAS;IACT,kBAAkB,EAAE,YAAY,EAAE,YAAY;IAC9C,UAAU;IACV,WAAW,EAAE,UAAU;IACvB,OAAO;IACP,QAAQ,EAAE,MAAM,EAAE,KAAK;IACvB,aAAa;IACb,YAAY,EAAE,QAAQ,EAAE,SAAS;IACjC,OAAO;IACP,IAAI,EAAE,wBAAwB;CAC/B,CAAC"}

package/dist/esm/security/guard.d.ts

@@ -0,0 +1,41 @@
+import type { SanitizeResult, SecurityRule, SecurityPolicy } from './types.ts';
+export declare class SecurityGuard {
+    private policy;
+    /** 已编译的正则规则缓存（避免每次 sanitize 重复遍历数组） */
+    private compiledBlacklist;
+    private compiledCustomRewrite;
+    private compiledCustomWarn;
+    /** 删除保护规则（使用 policy.trashDir） */
+    private deleteProtectionRule;
+    constructor(policy?: Partial<SecurityPolicy>);
+    /** 编译规则缓存（policy 变更时调用） */
+    private invalidateCompiledRules;
+    private getCompiledBlacklist;
+    private getCompiledCustomRewrite;
+    private getCompiledCustomWarn;
+    /** 检查命令安全性 */
+    sanitize(command: string): SanitizeResult;
+    /** 添加自定义安全规则 */
+    addRule(rule: SecurityRule): void;
+    /** 移除规则 */
+    removeRule(name: string): void;
+    /** 更新安全策略 */
+    setPolicy(policy: Partial<SecurityPolicy>): void;
+    /** 获取当前策略 */
+    getPolicy(): SecurityPolicy;
+    /**
+     * 扫描并脱敏文本中的敏感信息
+     * 将检测到的 API Key、Token、密码等替换为 [REDACTED:xxx]
+     * @param text 输入文本（通常是工具结果）
+     * @returns 脱敏后的文本
+     */
+    sanitizeCredentials(text: string): string;
+    /**
+     * 检测文本是否包含敏感信息
+     * @param text 输入文本
+     * @returns 检测到的敏感信息类型列表
+     */
+    detectCredentials(text: string): string[];
+    private matchRule;
+}
+//# sourceMappingURL=guard.d.ts.map

package/dist/esm/security/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAyE/E,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAiB;IAE/B,uCAAuC;IACvC,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,qBAAqB,CAA+B;IAC5D,OAAO,CAAC,kBAAkB,CAA+B;IACzD,iCAAiC;IACjC,OAAO,CAAC,oBAAoB,CAAe;gBAE/B,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC;IAM5C,2BAA2B;IAC3B,OAAO,CAAC,uBAAuB;IAM/B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,qBAAqB;IAO7B,cAAc;IACd,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc;IAuDzC,gBAAgB;IAChB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAKjC,WAAW;IACX,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK9B,aAAa;IACb,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAQhD,aAAa;IACb,SAAS,IAAI,cAAc;IAM3B;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAYzC;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAczC,OAAO,CAAC,SAAS;CAMlB"}

package/dist/esm/security/guard.js

@@ -0,0 +1,225 @@
+// ============================================================
+// SecurityGuard — 命令安全检查 + 凭证泄露检测（带规则编译缓存）
+// ============================================================
+/** 凭证泄露检测模式 */
+const CREDENTIAL_PATTERNS = [
+    { name: 'openai-key', pattern: /sk-[a-zA-Z0-9]{20,}/g },
+    { name: 'anthropic-key', pattern: /sk-ant-[a-zA-Z0-9-]{20,}/g },
+    { name: 'aws-access-key', pattern: /AKIA[0-9A-Z]{16}/g },
+    { name: 'aws-secret-key', pattern: /(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])/g },
+    { name: 'github-token', pattern: /ghp_[a-zA-Z0-9]{36}/g },
+    { name: 'github-fine-grained', pattern: /github_pat_[a-zA-Z0-9_]{82}/g },
+    { name: 'generic-bearer', pattern: /Bearer\s+[a-zA-Z0-9._-]+/gi },
+    { name: 'generic-secret', pattern: /(?:password|secret|token|api_key|apikey)\s*[:=]\s*['"][^'"]{8,}['"]/gi },
+    { name: 'private-key', pattern: /-----BEGIN (?:RSA |EC |DSA )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA )?PRIVATE KEY-----/g },
+];
+/** 默认安全策略 */
+const DEFAULT_POLICY = {
+    deleteProtection: true,
+    trashDir: '~/.workagent/.trash',
+    blacklistEnabled: true,
+    rules: [],
+};
+/** 内置黑名单规则 */
+const BUILTIN_BLACKLIST = [
+    {
+        name: 'block-rm-root',
+        pattern: /^rm\s+(-[a-zA-Z]*\s+)*\/$/m,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block rm -rf / (destroy root filesystem)',
+    },
+    {
+        name: 'block-dd-disk',
+        pattern: /^dd\s+.*of=\/dev\/[sh]d/m,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block dd to disk device',
+    },
+    {
+        name: 'block-mkfs',
+        pattern: /^mkfs\./,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block filesystem format commands',
+    },
+    {
+        name: 'block-fork-bomb',
+        pattern: /^:\(\)\s*\{\s*:\|:\s*&\s*\}\s*;\s*:/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block fork bomb',
+    },
+];
+/** 内置删除保护规则（rm → mv 到回收站，回收站路径通过 policy.trashDir 配置） */
+function createDeleteProtectionRule(trashDir) {
+    return {
+        name: 'delete-protection',
+        pattern: /^(sudo\s+)?rm\s+((?:-[a-zA-Z]+\s+)*)(.+)$/s,
+        severity: 'warn',
+        action: 'rewrite',
+        rewriter: (command) => {
+            const match = command.match(/^(sudo\s+)?rm\s+((?:-[a-zA-Z]+\s+)*)(.+)$/s);
+            if (!match)
+                return command;
+            const targets = match[3];
+            const ts = Date.now();
+            return `mkdir -p ${trashDir} && mv ${targets} ${trashDir}/_del_${ts}`;
+        },
+        description: 'Rewrite rm to mv trash for delete protection',
+    };
+}
+export class SecurityGuard {
+    policy;
+    /** 已编译的正则规则缓存（避免每次 sanitize 重复遍历数组） */
+    compiledBlacklist = null;
+    compiledCustomRewrite = null;
+    compiledCustomWarn = null;
+    /** 删除保护规则（使用 policy.trashDir） */
+    deleteProtectionRule;
+    constructor(policy) {
+        this.policy = { ...DEFAULT_POLICY, ...policy };
+        this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
+        this.invalidateCompiledRules();
+    }
+    /** 编译规则缓存（policy 变更时调用） */
+    invalidateCompiledRules() {
+        this.compiledBlacklist = null;
+        this.compiledCustomRewrite = null;
+        this.compiledCustomWarn = null;
+    }
+    getCompiledBlacklist() {
+        if (!this.compiledBlacklist) {
+            this.compiledBlacklist = [...BUILTIN_BLACKLIST, ...this.policy.rules.filter((r) => r.action === 'block')];
+        }
+        return this.compiledBlacklist;
+    }
+    getCompiledCustomRewrite() {
+        if (!this.compiledCustomRewrite) {
+            this.compiledCustomRewrite = this.policy.rules.filter((r) => r.action === 'rewrite' && r.rewriter);
+        }
+        return this.compiledCustomRewrite;
+    }
+    getCompiledCustomWarn() {
+        if (!this.compiledCustomWarn) {
+            this.compiledCustomWarn = this.policy.rules.filter((r) => r.action === 'warn');
+        }
+        return this.compiledCustomWarn;
+    }
+    /** 检查命令安全性 */
+    sanitize(command) {
+        const trimmedCmd = command.trim();
+        // ① 黑名单检查
+        if (this.policy.blacklistEnabled) {
+            for (const rule of this.getCompiledBlacklist()) {
+                if (this.matchRule(trimmedCmd, rule)) {
+                    return {
+                        safe: false,
+                        reason: `BLOCKED: ${rule.description || rule.name}`,
+                        severity: rule.severity,
+                    };
+                }
+            }
+        }
+        // ② 删除保护（rm → mv 回收站）
+        if (this.policy.deleteProtection) {
+            if (this.matchRule(trimmedCmd, this.deleteProtectionRule)) {
+                const rewritten = this.deleteProtectionRule.rewriter(trimmedCmd);
+                return {
+                    safe: true,
+                    rewritten,
+                    reason: 'Delete protection: rm rewritten to mv trash',
+                    severity: 'warn',
+                };
+            }
+        }
+        // ③ 自定义 rewrite 规则
+        for (const rule of this.getCompiledCustomRewrite()) {
+            if (!this.matchRule(trimmedCmd, rule))
+                continue;
+            return {
+                safe: true,
+                rewritten: rule.rewriter(trimmedCmd),
+                reason: `Rewritten by rule: ${rule.name}`,
+                severity: rule.severity,
+            };
+        }
+        // ④ 自定义 warn 规则
+        for (const rule of this.getCompiledCustomWarn()) {
+            if (this.matchRule(trimmedCmd, rule)) {
+                return {
+                    safe: true,
+                    reason: `Warning: ${rule.description || rule.name}`,
+                    severity: rule.severity,
+                };
+            }
+        }
+        // ⑤ 安全
+        return { safe: true, severity: 'safe' };
+    }
+    /** 添加自定义安全规则 */
+    addRule(rule) {
+        this.policy.rules.push(rule);
+        this.invalidateCompiledRules();
+    }
+    /** 移除规则 */
+    removeRule(name) {
+        this.policy.rules = this.policy.rules.filter((r) => r.name !== name);
+        this.invalidateCompiledRules();
+    }
+    /** 更新安全策略 */
+    setPolicy(policy) {
+        this.policy = { ...this.policy, ...policy };
+        if (policy.trashDir) {
+            this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
+        }
+        this.invalidateCompiledRules();
+    }
+    /** 获取当前策略 */
+    getPolicy() {
+        return { ...this.policy };
+    }
+    // ---- 凭证泄露检测 ----
+    /**
+     * 扫描并脱敏文本中的敏感信息
+     * 将检测到的 API Key、Token、密码等替换为 [REDACTED:xxx]
+     * @param text 输入文本（通常是工具结果）
+     * @returns 脱敏后的文本
+     */
+    sanitizeCredentials(text) {
+        if (!text || text.length < 10)
+            return text;
+        let result = text;
+        for (const { name, pattern } of CREDENTIAL_PATTERNS) {
+            // 重置正则 lastIndex（全局标志下）
+            pattern.lastIndex = 0;
+            result = result.replace(pattern, `[REDACTED:${name}]`);
+        }
+        return result;
+    }
+    /**
+     * 检测文本是否包含敏感信息
+     * @param text 输入文本
+     * @returns 检测到的敏感信息类型列表
+     */
+    detectCredentials(text) {
+        if (!text)
+            return [];
+        const detected = [];
+        for (const { name, pattern } of CREDENTIAL_PATTERNS) {
+            pattern.lastIndex = 0;
+            if (pattern.test(text)) {
+                detected.push(name);
+            }
+        }
+        return detected;
+    }
+    // ---- 内部辅助 ----
+    matchRule(command, rule) {
+        if (rule.pattern instanceof RegExp) {
+            return rule.pattern.test(command);
+        }
+        return rule.pattern(command);
+    }
+}
+//# sourceMappingURL=guard.js.map

package/dist/esm/security/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAC/F,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC5G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mGAAmG,EAAE;CACtI,CAAC;AAEF,aAAa;AACb,MAAM,cAAc,GAAmB;IACrC,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,qBAAqB;IAC/B,gBAAgB,EAAE,IAAI;IACtB,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,cAAc;AACd,MAAM,iBAAiB,GAAmB;IACxC;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iBAAiB;KAC/B;CACF,CAAC;AAEF,wDAAwD;AACxD,SAAS,0BAA0B,CAAC,QAAgB;IAClD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,YAAY,QAAQ,UAAU,OAAO,IAAI,QAAQ,SAAS,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,WAAW,EAAE,8CAA8C;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,MAAM,CAAiB;IAE/B,uCAAuC;IAC/B,iBAAiB,GAA0B,IAAI,CAAC;IAChD,qBAAqB,GAA0B,IAAI,CAAC;IACpD,kBAAkB,GAA0B,IAAI,CAAC;IACzD,iCAAiC;IACzB,oBAAoB,CAAe;IAE3C,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,2BAA2B;IACnB,uBAAuB;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACjC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,cAAc;IACd,QAAQ,CAAC,OAAe;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAElC,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO;wBACL,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;wBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;gBAClE,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,SAAS;oBACT,MAAM,EAAE,6CAA6C;oBACrD,QAAQ,EAAE,MAAM;iBACjB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,SAAS;YAChD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI,CAAC,QAAS,CAAC,UAAU,CAAC;gBACrC,MAAM,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;oBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;IACX,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS,CAAC,MAA+B;QACvC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,mBAAmB;IAEnB;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,wBAAwB;YACxB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,IAAY;QAC5B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,iBAAiB;IAET,SAAS,CAAC,OAAe,EAAE,IAAkB;QACnD,IAAI,IAAI,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/esm/security/types.d.ts

@@ -0,0 +1,36 @@
+export type Severity = 'safe' | 'warn' | 'danger' | 'blocked';
+export interface SanitizeResult {
+    /** 是否允许执行 */
+    safe: boolean;
+    /** 改写后的命令（如 rm → mv 到回收站） */
+    rewritten?: string;
+    /** 拒绝/警告原因 */
+    reason?: string;
+    /** 严重程度 */
+    severity: Severity;
+}
+export interface SecurityRule {
+    /** 规则名称 */
+    name: string;
+    /** 匹配模式（正则或函数） */
+    pattern: RegExp | ((command: string) => boolean);
+    /** 命中后的严重程度 */
+    severity: Severity;
+    /** 命中后的处理：'block' 阻止 | 'rewrite' 改写 | 'warn' 放行但记录 */
+    action: 'block' | 'rewrite' | 'warn';
+    /** 改写函数（action='rewrite' 时使用） */
+    rewriter?: (command: string) => string;
+    /** 规则描述 */
+    description?: string;
+}
+export interface SecurityPolicy {
+    /** 是否启用删除保护（rm → mv 到回收站） */
+    deleteProtection: boolean;
+    /** 回收站路径 */
+    trashDir: string;
+    /** 是否启用黑名单 */
+    blacklistEnabled: boolean;
+    /** 自定义规则 */
+    rules: SecurityRule[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/security/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB"}

package/dist/esm/security/types.js

@@ -0,0 +1,5 @@
+// ============================================================
+// Security Guard 类型定义
+// ============================================================
+export {};
+//# sourceMappingURL=types.js.map