@cicctencent/agent-core 0.1.1 → 0.1.3

package/src/memory/scene.ts

@@ -1,137 +0,0 @@
-// ============================================================
-// SceneAggregator — L2 场景聚合器
-// ============================================================
-// 将 L1 原子事实聚合为主题场景块（L2 Scene），
-// 便于召回时按主题整体命中，提升上下文注入效率
-
-import type { LLMProvider } from '../llm/types.ts';
-import type { Message } from '../types.ts';
-import { SCENE_AGGREGATION_SYSTEM_PROMPT } from './prompts.ts';
-
-/** 场景块（L2） */
-export interface SceneBlock {
-  /** 场景 ID（snake_case） */
-  sceneId: string;
-  /** 场景标题 */
-  title: string;
-  /** 场景描述 */
-  description: string;
-  /** 归属的原子事实 ID 列表 */
-  atomIds: string[];
-}
-
-/** 聚合器配置 */
-export interface SceneAggregatorOptions {
-  llmProvider: LLMProvider;
-  /** 最大场景数，默认 15 */
-  maxScenes?: number;
-  /** 超时（毫秒），默认 30000 */
-  timeoutMs?: number;
-}
-
-/**
- * L2 场景聚合器
- * 
- * 工作流程：
- * 1. 收集所有 L1 原子事实
- * 2. 通过 LLM 将相关事实分组为场景块
- * 3. 输出 SceneBlock[]，供 MemoryService 更新 L2 条目
- */
-export class SceneAggregator {
-  private llmProvider: LLMProvider;
-  private maxScenes: number;
-  private timeoutMs: number;
-
-  constructor(opts: SceneAggregatorOptions) {
-    this.llmProvider = opts.llmProvider;
-    this.maxScenes = opts.maxScenes ?? 15;
-    this.timeoutMs = opts.timeoutMs ?? 30000;
-  }
-
-  /**
-   * 聚合原子事实为场景块
-   * @param atoms L1 原子事实列表（key + content + id）
-   * @param existingScenes 已有场景（用于增量更新）
-   */
-  async aggregate(
-    atoms: Array<{ id: string; key: string; content: string; category: string }>,
-    existingScenes: SceneBlock[] = [],
-  ): Promise<SceneBlock[]> {
-    if (atoms.length === 0) return existingScenes;
-
-    const userPrompt = this.buildUserPrompt(atoms, existingScenes);
-
-    try {
-      const raw = await this.callLLM(userPrompt);
-      return this.parseScenes(raw);
-    } catch (err: any) {
-      console.warn(`[SceneAggregator] Aggregation failed: ${err?.message || err}`);
-      return existingScenes;
-    }
-  }
-
-  private buildUserPrompt(
-    atoms: Array<{ id: string; key: string; content: string; category: string }>,
-    existingScenes: SceneBlock[],
-  ): string {
-    const atomsText = atoms
-      .map(a => `- [${a.id}] (${a.category}) ${a.key}: ${a.content}`)
-      .join('\n');
-
-    let prompt = `**Atomic facts to organize:**\n${atomsText}\n`;
-
-    if (existingScenes.length > 0) {
-      const scenesText = existingScenes
-        .map(s => `- ${s.sceneId}: ${s.title} (${s.atomIds.length} atoms)`)
-        .join('\n');
-      prompt += `\n**Existing scenes (merge/update as needed):**\n${scenesText}\n`;
-    }
-
-    prompt += `\nGroup these facts into at most ${this.maxScenes} thematic scenarios. Output ONLY a JSON array.`;
-    return prompt;
-  }
-
-  private async callLLM(userPrompt: string): Promise<string> {
-    const messages: Message[] = [
-      { role: 'system', content: SCENE_AGGREGATION_SYSTEM_PROMPT },
-      { role: 'user', content: userPrompt },
-    ];
-
-    const chunks: string[] = [];
-    const stream = this.llmProvider.chatStream({
-      messages,
-      abortSignal: AbortSignal.timeout(this.timeoutMs),
-    });
-
-    for await (const chunk of stream) {
-      if (chunk.delta.content) {
-        chunks.push(chunk.delta.content);
-      }
-    }
-
-    return chunks.join('');
-  }
-
-  private parseScenes(raw: string): SceneBlock[] {
-    const jsonMatch = raw.match(/\[[\s\S]*\]/);
-    if (!jsonMatch) return [];
-
-    try {
-      const parsed = JSON.parse(jsonMatch[0]);
-      if (!Array.isArray(parsed)) return [];
-
-      return parsed
-        .filter((item: any) => item.sceneId && item.title)
-        .slice(0, this.maxScenes)
-        .map((item: any) => ({
-          sceneId: String(item.sceneId).replace(/[^a-z0-9_]/g, '_').toLowerCase(),
-          title: String(item.title),
-          description: String(item.description || ''),
-          atomIds: Array.isArray(item.atomIds) ? item.atomIds.map(String) : [],
-        }));
-    } catch {
-      console.warn('[SceneAggregator] Failed to parse LLM output');
-      return [];
-    }
-  }
-}

package/src/memory/types.ts

@@ -1,54 +0,0 @@
-// ============================================================
-// Memory 模块类型定义（独立于上层 MemoryService 实现）
-// ============================================================
-
-/** 记忆层级 */
-export type MemoryLayer = 'L0' | 'L1' | 'L2' | 'L3';
-
-/** 记忆条目（与上层 MemoryService 的 MemoryEntry 保持一致，上层负责转换） */
-export interface MemoryEntry {
-  /** 唯一标识（基于 key 生成） */
-  id: string;
-  /** 记忆分类：user_preference / project_knowledge / learned_fact / custom / scene / persona */
-  category: string;
-  /** 记忆键（用于 upsert） */
-  key: string;
-  /** 记忆内容 */
-  content: string;
-  /** 重要程度 1-5，默认 3 */
-  importance: number;
-  /** 创建时间（ISO 字符串） */
-  createdAt: string;
-  /** 最后更新时间（ISO 字符串） */
-  updatedAt: string;
-  /** 记忆层级：L0=原始对话 L1=原子事实 L2=场景块 L3=用户画像，默认 L1 */
-  memoryLayer: MemoryLayer;
-  /** 来源会话 ID（自动提取时记录） */
-  sourceSessionId?: string;
-  /** 提取时间戳（ISO 字符串） */
-  sourceTimestamp?: string;
-  /** L2 场景 ID（归属场景块） */
-  sceneId?: string;
-  /** L3 画像维度（如 coding_style, tool_preference） */
-  personaFacet?: string;
-  /** 来源层级（该条目从哪一层提炼而来） */
-  sourceLayer?: MemoryLayer;
-  /** 来源条目 ID 列表（溯源链） */
-  sourceIds?: string[];
-}
-
-/**
- * MemoryServiceLike — 管道调度器所需的 MemoryService 最小接口
- * 上层（server 侧）的 MemoryService 实现此接口即可接入管道
- */
-export interface MemoryServiceLike {
-  getKeys(): string[];
-  getAllEntries(layer?: MemoryLayer): MemoryEntry[];
-  save(
-    key: string,
-    content: string,
-    category: string,
-    importance: number,
-    extras?: Partial<Pick<MemoryEntry, 'memoryLayer' | 'sourceSessionId' | 'sourceTimestamp' | 'sceneId' | 'sourceLayer' | 'sourceIds'>>,
-  ): MemoryEntry;
-}

package/src/middleware/types.ts

@@ -1,62 +0,0 @@
-// ============================================================
-// Middleware — 中间件管道类型定义
-// ============================================================
-
-import type { HookContext, HookResult } from '../hooks/types.ts';
-
-// ---- MiddlewareContext — 中间件接收的迭代上下文 ----
-
-/**
- * 中间件 before/after 接收的上下文信息
- * 包含当前迭代的关键状态快照，中间件可读取但不应直接修改
- */
-export interface MiddlewareContext {
-  /** 会话 ID */
-  sessionId: string;
-  /** 当前迭代轮次 */
-  iteration: number;
-  /** 当前消息列表（只读快照） */
-  messages: ReadonlyArray<{ role: string; content: string | null }>;
-  /** 当前可用工具数量 */
-  toolCount: number;
-}
-
-// ---- Middleware 接口 ----
-
-/**
- * 中间件接口 — Hook 系统的结构化增强层
- *
- * 与 Hook 共存，提供更清晰的 before/after 生命周期：
- * - `before` / `after`：在每轮迭代的开始/结束执行
- * - `onToolBefore` / `onToolAfter`：在工具执行前/后执行（与 before_tool/after_tool Hook 并行）
- *
- * 执行顺序：Middleware.before → Hook.on_iteration_start → ... → Hook.before_tool → Middleware.onToolBefore → 工具执行 → Hook.after_tool → Middleware.onToolAfter → ... → Middleware.after
- */
-export interface Middleware {
-  /** 中间件名称（用于日志和调试） */
-  name: string;
-
-  /**
-   * 每轮迭代开始前调用
-   * 适合：预检查、上下文注入、状态审计
-   */
-  before?(ctx: MiddlewareContext): Promise<void>;
-
-  /**
-   * 每轮迭代结束后调用
-   * 适合：后处理、指标收集、日志记录
-   */
-  after?(ctx: MiddlewareContext): Promise<void>;
-
-  /**
-   * 工具执行前调用（与 before_tool Hook 同层）
-   * 返回值与 Hook 的 before_tool 合并（block/modify 均生效）
-   */
-  onToolBefore?(ctx: HookContext): Promise<HookResult | void>;
-
-  /**
-   * 工具执行后调用（与 after_tool Hook 同层）
-   * 返回值与 Hook 的 after_tool 合并（inject 均生效）
-   */
-  onToolAfter?(ctx: HookContext): Promise<HookResult | void>;
-}

package/src/sandbox/types.ts

@@ -1,185 +0,0 @@
-// ============================================================
-// Sandbox — 脚本沙箱类型定义 + 内置安全规则
-// ============================================================
-
-import type { SecurityRule } from '../security/types.ts';
-import type { ShellExecutor, FileSystemExecutor } from '../tool/types.ts';
-
-// ---- SandboxConfig ----
-
-/** 沙箱配置 */
-export interface SandboxConfig {
-  /** 沙箱根目录（默认 ~/.workagent/sandboxes/{id}） */
-  rootDir: string;
-  /** 允许的文件扩展名（脚本执行用），空 = 不限制 */
-  allowedExtensions?: string[];
-  /** 最大文件大小 (bytes)，默认 10MB */
-  maxFileSize?: number;
-  /** 执行超时 (ms)，默认 30000 */
-  execTimeout?: number;
-  /** 是否启用命令限制（默认 true） */
-  commandRestriction?: boolean;
-}
-
-/** 默认沙箱配置 */
-export const DEFAULT_SANDBOX_CONFIG: Partial<SandboxConfig> = {
-  maxFileSize: 10 * 1024 * 1024, // 10MB
-  execTimeout: 30000,
-  commandRestriction: true,
-};
-
-// ---- Sandbox ----
-
-/** 脚本语言类型 */
-export type ScriptLanguage = 'python' | 'nodejs' | 'shell';
-
-/** 沙箱实例接口 */
-export interface Sandbox {
-  readonly id: string;
-  readonly rootDir: string;
-  /** 获取受限的 Shell 执行器 */
-  getShellExecutor(): ShellExecutor;
-  /** 获取受限的文件系统执行器 */
-  getFileSystemExecutor(): FileSystemExecutor;
-  /**
-   * 运行脚本（写入临时文件并执行）
-   * @param language 脚本语言：python / nodejs / shell
-   * @param code     脚本代码
-   * @param timeout  执行超时 (ms)
-   */
-  runScript(language: ScriptLanguage, code: string, timeout?: number): Promise<string>;
-  /** 销毁沙箱（清理临时文件） */
-  destroy(): Promise<void>;
-}
-
-// ---- SandboxManager ----
-
-/** 沙箱管理器接口 */
-export interface SandboxManager {
-  /** 创建沙箱 */
-  create(id: string, config?: Partial<SandboxConfig>): Promise<Sandbox>;
-  /** 获取已创建的沙箱 */
-  get(id: string): Sandbox | undefined;
-  /** 销毁指定沙箱 */
-  destroy(id: string): Promise<void>;
-  /** 销毁所有沙箱 */
-  destroyAll(): Promise<void>;
-}
-
-// ---- 沙箱内置安全规则 ----
-
-/**
- * 沙箱专用命令黑名单（在 SecurityGuard 基础上扩展）
- * 这些规则阻止任何试图突破沙箱隔离的操作
- */
-export const SANDBOX_BLOCKED_COMMANDS: SecurityRule[] = [
-  // 禁止提权
-  {
-    name: 'sandbox-block-sudo',
-    pattern: /^(sudo|su)\s/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: privilege escalation blocked',
-  },
-  // 禁止修改系统目录
-  {
-    name: 'sandbox-block-system-write',
-    pattern: /\b(write|tee|cp|mv)\s+.*\s+\/(etc|usr|bin|sbin|var|sys|proc)\b/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: system directory write blocked',
-  },
-  // 禁止修改文件权限
-  {
-    name: 'sandbox-block-chmod',
-    pattern: /^(chmod|chown|chgrp)\s/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: permission change blocked',
-  },
-  // 禁止修改防火墙
-  {
-    name: 'sandbox-block-iptables',
-    pattern: /^(iptables|nftables|ufw)\s/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: firewall modification blocked',
-  },
-  // 禁止篡改关键环境变量
-  {
-    name: 'sandbox-block-env-export',
-    pattern: /^(export|setx)\s+(HOME|PATH|SHELL)/i,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: critical env modification blocked',
-  },
-  // 禁止挂载
-  {
-    name: 'sandbox-block-mount',
-    pattern: /^(mount|umount)\s/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: mount operation blocked',
-  },
-  // 禁止内核模块操作
-  {
-    name: 'sandbox-block-kernel',
-    pattern: /^(insmod|rmmod|modprobe)\s/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: kernel module operation blocked',
-  },
-  // 禁止全局文件系统搜索（find / 等绝对路径搜索）
-  {
-    name: 'sandbox-block-find-global',
-    pattern: /\bfind\s+\//,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: global filesystem search blocked. Use relative paths (find . -name "...") within the sandbox.',
-  },
-  // 禁止 locate 命令（系统级文件索引搜索）
-  {
-    name: 'sandbox-block-locate',
-    pattern: /^(locate|updatedb)\s/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: locate command blocked. Use find with relative paths.',
-  },
-  // 禁止 grep/ripgrep 从绝对路径递归搜索
-  {
-    name: 'sandbox-block-grep-absolute',
-    pattern: /\b(grep|rg|ag)\s+(-[a-zA-Z]*\s+)*.*\s+\/(?!\/)(?:etc|usr|bin|sbin|var|sys|proc|home|opt|lib|tmp)(?:\/|$)/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: recursive search on system paths blocked. Search within sandbox directory only.',
-  },
-  // 禁止向用户主目录写入文件（绝对路径写操作）
-  {
-    name: 'sandbox-block-write-user-dir',
-    pattern: /(?:writeFile|writeFileSync)\s*\([\s\S]*?['"]?\/(Users|home)\/|\b(cp|mv|tee)\s+[^|;&]*\s+['"]?\/(Users|home)\//,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Sandbox: writing to user directory blocked. Use relative paths (e.g. "output.pptx") within the sandbox.',
-  },
-];
-
-/**
- * 沙箱允许的环境变量白名单
- * 只保留脚本运行所需的最小环境变量集合
- */
-export const SANDBOX_SAFE_ENV_KEYS: string[] = [
-  // 基础环境
-  'PATH', 'HOME', 'USER', 'USERNAME',
-  // 本地化
-  'LANG', 'LC_ALL', 'LC_CTYPE', 'TERM',
-  // Python
-  'PYTHONIOENCODING', 'PYTHONUTF8', 'PYTHONPATH',
-  // Node.js
-  'NODE_PATH', 'NODE_ENV',
-  // 临时目录
-  'TMPDIR', 'TEMP', 'TMP',
-  // Windows 系统
-  'SystemRoot', 'windir', 'COMSPEC',
-  // 系统标识
-  'OS', 'PROCESSOR_ARCHITECTURE',
-];

package/src/security/guard.ts

@@ -1,249 +0,0 @@
-// ============================================================
-// SecurityGuard — 命令安全检查 + 凭证泄露检测（带规则编译缓存）
-// ============================================================
-
-import type { SanitizeResult, SecurityRule, SecurityPolicy } from './types.ts';
-
-/** 凭证泄露检测模式 */
-const CREDENTIAL_PATTERNS: Array<{ name: string; pattern: RegExp }> = [
-  { name: 'openai-key', pattern: /sk-[a-zA-Z0-9]{20,}/g },
-  { name: 'anthropic-key', pattern: /sk-ant-[a-zA-Z0-9-]{20,}/g },
-  { name: 'aws-access-key', pattern: /AKIA[0-9A-Z]{16}/g },
-  { name: 'aws-secret-key', pattern: /(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])/g },
-  { name: 'github-token', pattern: /ghp_[a-zA-Z0-9]{36}/g },
-  { name: 'github-fine-grained', pattern: /github_pat_[a-zA-Z0-9_]{82}/g },
-  { name: 'generic-bearer', pattern: /Bearer\s+[a-zA-Z0-9._-]+/gi },
-  { name: 'generic-secret', pattern: /(?:password|secret|token|api_key|apikey)\s*[:=]\s*['"][^'"]{8,}['"]/gi },
-  { name: 'private-key', pattern: /-----BEGIN (?:RSA |EC |DSA )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA )?PRIVATE KEY-----/g },
-];
-
-/** 默认安全策略 */
-const DEFAULT_POLICY: SecurityPolicy = {
-  deleteProtection: true,
-  trashDir: '~/.workagent/.trash',
-  blacklistEnabled: true,
-  rules: [],
-};
-
-/** 内置黑名单规则 */
-const BUILTIN_BLACKLIST: SecurityRule[] = [
-  {
-    name: 'block-rm-root',
-    pattern: /^rm\s+(-[a-zA-Z]*\s+)*\/$/m,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Block rm -rf / (destroy root filesystem)',
-  },
-  {
-    name: 'block-dd-disk',
-    pattern: /^dd\s+.*of=\/dev\/[sh]d/m,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Block dd to disk device',
-  },
-  {
-    name: 'block-mkfs',
-    pattern: /^mkfs\./,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Block filesystem format commands',
-  },
-  {
-    name: 'block-fork-bomb',
-    pattern: /^:\(\)\s*\{\s*:\|:\s*&\s*\}\s*;\s*:/,
-    severity: 'blocked',
-    action: 'block',
-    description: 'Block fork bomb',
-  },
-];
-
-/** 内置删除保护规则（rm → mv 到回收站，回收站路径通过 policy.trashDir 配置） */
-function createDeleteProtectionRule(trashDir: string): SecurityRule {
-  return {
-    name: 'delete-protection',
-    pattern: /^(sudo\s+)?rm\s+((?:-[a-zA-Z]+\s+)*)(.+)$/s,
-    severity: 'warn',
-    action: 'rewrite',
-    rewriter: (command: string) => {
-      const match = command.match(/^(sudo\s+)?rm\s+((?:-[a-zA-Z]+\s+)*)(.+)$/s);
-      if (!match) return command;
-      const targets = match[3];
-      const ts = Date.now();
-      return `mkdir -p ${trashDir} && mv ${targets} ${trashDir}/_del_${ts}`;
-    },
-    description: 'Rewrite rm to mv trash for delete protection',
-  };
-}
-
-export class SecurityGuard {
-  private policy: SecurityPolicy;
-
-  /** 已编译的正则规则缓存（避免每次 sanitize 重复遍历数组） */
-  private compiledBlacklist: SecurityRule[] | null = null;
-  private compiledCustomRewrite: SecurityRule[] | null = null;
-  private compiledCustomWarn: SecurityRule[] | null = null;
-  /** 删除保护规则（使用 policy.trashDir） */
-  private deleteProtectionRule: SecurityRule;
-
-  constructor(policy?: Partial<SecurityPolicy>) {
-    this.policy = { ...DEFAULT_POLICY, ...policy };
-    this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
-    this.invalidateCompiledRules();
-  }
-
-  /** 编译规则缓存（policy 变更时调用） */
-  private invalidateCompiledRules(): void {
-    this.compiledBlacklist = null;
-    this.compiledCustomRewrite = null;
-    this.compiledCustomWarn = null;
-  }
-
-  private getCompiledBlacklist(): SecurityRule[] {
-    if (!this.compiledBlacklist) {
-      this.compiledBlacklist = [...BUILTIN_BLACKLIST, ...this.policy.rules.filter((r) => r.action === 'block')];
-    }
-    return this.compiledBlacklist;
-  }
-
-  private getCompiledCustomRewrite(): SecurityRule[] {
-    if (!this.compiledCustomRewrite) {
-      this.compiledCustomRewrite = this.policy.rules.filter((r) => r.action === 'rewrite' && r.rewriter);
-    }
-    return this.compiledCustomRewrite;
-  }
-
-  private getCompiledCustomWarn(): SecurityRule[] {
-    if (!this.compiledCustomWarn) {
-      this.compiledCustomWarn = this.policy.rules.filter((r) => r.action === 'warn');
-    }
-    return this.compiledCustomWarn;
-  }
-
-  /** 检查命令安全性 */
-  sanitize(command: string): SanitizeResult {
-    const trimmedCmd = command.trim();
-
-    // ① 黑名单检查
-    if (this.policy.blacklistEnabled) {
-      for (const rule of this.getCompiledBlacklist()) {
-        if (this.matchRule(trimmedCmd, rule)) {
-          return {
-            safe: false,
-            reason: `BLOCKED: ${rule.description || rule.name}`,
-            severity: rule.severity,
-          };
-        }
-      }
-    }
-
-    // ② 删除保护（rm → mv 回收站）
-    if (this.policy.deleteProtection) {
-      if (this.matchRule(trimmedCmd, this.deleteProtectionRule)) {
-        const rewritten = this.deleteProtectionRule.rewriter!(trimmedCmd);
-        return {
-          safe: true,
-          rewritten,
-          reason: 'Delete protection: rm rewritten to mv trash',
-          severity: 'warn',
-        };
-      }
-    }
-
-    // ③ 自定义 rewrite 规则
-    for (const rule of this.getCompiledCustomRewrite()) {
-      if (!this.matchRule(trimmedCmd, rule)) continue;
-      return {
-        safe: true,
-        rewritten: rule.rewriter!(trimmedCmd),
-        reason: `Rewritten by rule: ${rule.name}`,
-        severity: rule.severity,
-      };
-    }
-
-    // ④ 自定义 warn 规则
-    for (const rule of this.getCompiledCustomWarn()) {
-      if (this.matchRule(trimmedCmd, rule)) {
-        return {
-          safe: true,
-          reason: `Warning: ${rule.description || rule.name}`,
-          severity: rule.severity,
-        };
-      }
-    }
-
-    // ⑤ 安全
-    return { safe: true, severity: 'safe' };
-  }
-
-  /** 添加自定义安全规则 */
-  addRule(rule: SecurityRule): void {
-    this.policy.rules.push(rule);
-    this.invalidateCompiledRules();
-  }
-
-  /** 移除规则 */
-  removeRule(name: string): void {
-    this.policy.rules = this.policy.rules.filter((r) => r.name !== name);
-    this.invalidateCompiledRules();
-  }
-
-  /** 更新安全策略 */
-  setPolicy(policy: Partial<SecurityPolicy>): void {
-    this.policy = { ...this.policy, ...policy };
-    if (policy.trashDir) {
-      this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
-    }
-    this.invalidateCompiledRules();
-  }
-
-  /** 获取当前策略 */
-  getPolicy(): SecurityPolicy {
-    return { ...this.policy };
-  }
-
-  // ---- 凭证泄露检测 ----
-
-  /**
-   * 扫描并脱敏文本中的敏感信息
-   * 将检测到的 API Key、Token、密码等替换为 [REDACTED:xxx]
-   * @param text 输入文本（通常是工具结果）
-   * @returns 脱敏后的文本
-   */
-  sanitizeCredentials(text: string): string {
-    if (!text || text.length < 10) return text;
-
-    let result = text;
-    for (const { name, pattern } of CREDENTIAL_PATTERNS) {
-      // 重置正则 lastIndex（全局标志下）
-      pattern.lastIndex = 0;
-      result = result.replace(pattern, `[REDACTED:${name}]`);
-    }
-    return result;
-  }
-
-  /**
-   * 检测文本是否包含敏感信息
-   * @param text 输入文本
-   * @returns 检测到的敏感信息类型列表
-   */
-  detectCredentials(text: string): string[] {
-    if (!text) return [];
-    const detected: string[] = [];
-    for (const { name, pattern } of CREDENTIAL_PATTERNS) {
-      pattern.lastIndex = 0;
-      if (pattern.test(text)) {
-        detected.push(name);
-      }
-    }
-    return detected;
-  }
-
-  // ---- 内部辅助 ----
-
-  private matchRule(command: string, rule: SecurityRule): boolean {
-    if (rule.pattern instanceof RegExp) {
-      return rule.pattern.test(command);
-    }
-    return rule.pattern(command);
-  }
-}