@cicctencent/agent-core 0.1.15 → 0.1.17

package/dist/cjs/sandbox/local-sandbox.d.ts

@@ -0,0 +1,59 @@
+import type { ShellExecutor, FileSystemExecutor } from '../tool/types.js';
+import type { Sandbox, SandboxConfig, SandboxManager, ScriptLanguage } from './types.js';
+export interface LocalSandboxOptions extends Partial<SandboxConfig> {
+    allowedReadDirs?: string[];
+    env?: Record<string, string | undefined>;
+    cleanupOnDestroy?: boolean;
+    strictPath?: boolean;
+}
+export declare class LocalSandboxFileSystemExecutor implements FileSystemExecutor {
+    private readonly rootDir;
+    private readonly maxFileSize;
+    private readonly allowedReadDirs;
+    private readonly strictPath;
+    constructor(rootDir: string, maxFileSize?: number, allowedReadDirs?: string[], strictPath?: boolean);
+    readFile(filePath: string): Promise<string>;
+    readFileBuffer(filePath: string): Promise<Buffer>;
+    writeFile(filePath: string, content: string): Promise<void>;
+    appendFile(filePath: string, content: string): Promise<void>;
+    listDir(dirPath: string): Promise<string[]>;
+    private isInside;
+    private safeInRoot;
+    private resolveWritePath;
+    private resolveReadPath;
+}
+export declare class LocalSandboxShellExecutor implements ShellExecutor {
+    private readonly rootDir;
+    private readonly commandRestriction;
+    private readonly maxBuffer;
+    private guard;
+    private outputBuffer;
+    private env;
+    constructor(rootDir: string, commandRestriction?: boolean, env?: Record<string, string | undefined>, maxBuffer?: number);
+    exec(command: string, timeout?: number): Promise<string>;
+    write(_data: string): void;
+    read(lines?: number): string;
+}
+export declare class LocalSandbox implements Sandbox {
+    readonly id: string;
+    readonly rootDir: string;
+    private fsExecutor;
+    private shellExecutor;
+    private cleanupOnDestroy;
+    constructor(id: string, options: LocalSandboxOptions);
+    init(): Promise<void>;
+    getShellExecutor(): ShellExecutor;
+    getFileSystemExecutor(): FileSystemExecutor;
+    runScript(language: ScriptLanguage, code: string, timeout?: number): Promise<string>;
+    destroy(): Promise<void>;
+}
+export declare class LocalSandboxManager implements SandboxManager {
+    private readonly options;
+    private sandboxes;
+    constructor(options?: LocalSandboxOptions);
+    create(id: string, config?: Partial<SandboxConfig>): Promise<Sandbox>;
+    get(id: string): Sandbox | undefined;
+    destroy(id: string): Promise<void>;
+    destroyAll(): Promise<void>;
+}
+//# sourceMappingURL=local-sandbox.d.ts.map

package/dist/cjs/sandbox/local-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-sandbox.d.ts","sourceRoot":"","sources":["../../../src/sandbox/local-sandbox.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGzF,MAAM,WAAW,mBAAoB,SAAQ,OAAO,CAAC,aAAa,CAAC;IACjE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAgBD,qBAAa,8BAA+B,YAAW,kBAAkB;IAErE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAHV,OAAO,EAAE,MAAM,EACf,WAAW,SAAsC,EACjD,eAAe,GAAE,MAAM,EAAO,EAC9B,UAAU,UAAQ;IAG/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI3C,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIjD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5D,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKjD,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,eAAe;CAMxB;AAED,qBAAa,yBAA0B,YAAW,aAAa;IAM3D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAR5B,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,GAAG,CAAyB;gBAGjB,OAAO,EAAE,MAAM,EACf,kBAAkB,UAAO,EAC1C,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EACpC,SAAS,SAAM;IAM5B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,SAAsC,GAAG,OAAO,CAAC,MAAM,CAAC;IA4B3F,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAE1B,IAAI,CAAC,KAAK,SAAK,GAAG,MAAM;CAGzB;AAED,qBAAa,YAAa,YAAW,OAAO;IAC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,gBAAgB,CAAU;gBAEtB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB;IAU9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,gBAAgB,IAAI,aAAa;IACjC,qBAAqB,IAAI,kBAAkB;IAErC,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOpF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B;AAED,qBAAa,mBAAoB,YAAW,cAAc;IAG5C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,SAAS,CAAmC;gBAEvB,OAAO,GAAE,mBAAwB;IAExD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAS3E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAE9B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAGlC"}

package/dist/cjs/sandbox/local-sandbox.js

@@ -0,0 +1,228 @@
+"use strict";
+// ============================================================
+// LocalSandbox — 基于本地进程的默认沙箱实现
+// ============================================================
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalSandboxManager = exports.LocalSandbox = exports.LocalSandboxShellExecutor = exports.LocalSandboxFileSystemExecutor = void 0;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+const fs_1 = require("fs");
+const data_dir_ts_1 = require("../utils/data-dir.js");
+const guard_ts_1 = require("../security/guard.js");
+const types_ts_1 = require("./types.js");
+function filterEnv(env) {
+    const filtered = {};
+    for (const key of types_ts_1.SANDBOX_SAFE_ENV_KEYS)
+        if (env[key])
+            filtered[key] = env[key];
+    filtered.PYTHONIOENCODING = 'utf-8';
+    filtered.PYTHONUTF8 = '1';
+    return filtered;
+}
+const LANGUAGE_MAP = {
+    python: { ext: '.py', command: 'python3' },
+    nodejs: { ext: '.cjs', command: 'node' },
+    shell: { ext: '.sh', command: process.platform === 'win32' ? 'bash' : 'bash' },
+};
+class LocalSandboxFileSystemExecutor {
+    rootDir;
+    maxFileSize;
+    allowedReadDirs;
+    strictPath;
+    constructor(rootDir, maxFileSize = types_ts_1.DEFAULT_SANDBOX_CONFIG.maxFileSize, allowedReadDirs = [], strictPath = false) {
+        this.rootDir = rootDir;
+        this.maxFileSize = maxFileSize;
+        this.allowedReadDirs = allowedReadDirs;
+        this.strictPath = strictPath;
+    }
+    async readFile(filePath) {
+        return fs.readFile(this.resolveReadPath(filePath), 'utf-8');
+    }
+    async readFileBuffer(filePath) {
+        return fs.readFile(this.resolveReadPath(filePath));
+    }
+    async writeFile(filePath, content) {
+        const resolved = this.resolveWritePath(filePath);
+        const size = Buffer.byteLength(content, 'utf-8');
+        if (size > this.maxFileSize)
+            throw new Error(`Sandbox: file size ${size} bytes exceeds limit ${this.maxFileSize} bytes`);
+        await fs.mkdir(path.dirname(resolved), { recursive: true });
+        await fs.writeFile(resolved, content, 'utf-8');
+    }
+    async appendFile(filePath, content) {
+        const resolved = this.resolveWritePath(filePath);
+        await fs.mkdir(path.dirname(resolved), { recursive: true });
+        await fs.appendFile(resolved, content, 'utf-8');
+    }
+    async listDir(dirPath) {
+        const entries = await fs.readdir(this.resolveReadPath(dirPath), { withFileTypes: true });
+        return entries.map(e => e.isDirectory() ? `${e.name}/` : e.name);
+    }
+    isInside(target, base) {
+        const rel = path.relative(path.resolve(base), path.resolve(target));
+        return !rel.startsWith('..') && !path.isAbsolute(rel);
+    }
+    safeInRoot(filePath) {
+        return path.resolve(this.rootDir, path.basename(filePath));
+    }
+    resolveWritePath(filePath) {
+        const resolved = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(this.rootDir, filePath);
+        return this.isInside(resolved, this.rootDir) ? resolved : this.safeInRoot(filePath);
+    }
+    resolveReadPath(filePath) {
+        const resolved = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(this.rootDir, filePath);
+        if (this.isInside(resolved, this.rootDir))
+            return resolved;
+        for (const dir of this.allowedReadDirs)
+            if (this.isInside(resolved, dir))
+                return resolved;
+        return this.safeInRoot(filePath);
+    }
+}
+exports.LocalSandboxFileSystemExecutor = LocalSandboxFileSystemExecutor;
+class LocalSandboxShellExecutor {
+    rootDir;
+    commandRestriction;
+    maxBuffer;
+    guard;
+    outputBuffer = [];
+    env;
+    constructor(rootDir, commandRestriction = true, env = process.env, maxBuffer = 500) {
+        this.rootDir = rootDir;
+        this.commandRestriction = commandRestriction;
+        this.maxBuffer = maxBuffer;
+        this.guard = new guard_ts_1.SecurityGuard({ deleteProtection: true, blacklistEnabled: true, rules: types_ts_1.SANDBOX_BLOCKED_COMMANDS });
+        this.env = filterEnv(env);
+    }
+    async exec(command, timeout = types_ts_1.DEFAULT_SANDBOX_CONFIG.execTimeout) {
+        if (this.commandRestriction) {
+            const sanitized = this.guard.sanitize(command.trim());
+            if (!sanitized.safe)
+                return `[Sandbox blocked] ${sanitized.reason}`;
+            if (sanitized.rewritten)
+                command = sanitized.rewritten;
+        }
+        const shellCommand = process.platform === 'win32' ? `chcp 65001 >nul 2>&1 & ${command}` : command;
+        return new Promise(resolve => {
+            (0, child_process_1.exec)(shellCommand, {
+                timeout,
+                maxBuffer: 1024 * 1024 * 5,
+                windowsHide: true,
+                encoding: 'buffer',
+                cwd: this.rootDir,
+                env: this.env,
+            }, (error, stdoutBuf, stderrBuf) => {
+                const stdout = stdoutBuf ? stdoutBuf.toString('utf-8') : '';
+                const stderr = stderrBuf ? stderrBuf.toString('utf-8') : '';
+                let output = [stdout, stderr].filter(Boolean).join('\n');
+                if (error && !output.trim())
+                    output = error.message;
+                this.outputBuffer.push(...output.split('\n'));
+                if (this.outputBuffer.length > this.maxBuffer)
+                    this.outputBuffer = this.outputBuffer.slice(-this.maxBuffer);
+                resolve(output || '(no output)');
+            });
+        });
+    }
+    write(_data) { }
+    read(lines = 50) {
+        return this.outputBuffer.slice(Math.max(0, this.outputBuffer.length - lines)).join('\n') || '(no terminal output)';
+    }
+}
+exports.LocalSandboxShellExecutor = LocalSandboxShellExecutor;
+class LocalSandbox {
+    id;
+    rootDir;
+    fsExecutor;
+    shellExecutor;
+    cleanupOnDestroy;
+    constructor(id, options) {
+        this.id = id;
+        this.rootDir = options.rootDir || path.join((0, data_dir_ts_1.getProjectDataPath)(), 'sandboxes', id);
+        this.cleanupOnDestroy = options.cleanupOnDestroy ?? false;
+        const maxFileSize = options.maxFileSize ?? types_ts_1.DEFAULT_SANDBOX_CONFIG.maxFileSize;
+        const allowedReadDirs = options.allowedReadDirs?.map(d => path.resolve(d)) || [];
+        this.fsExecutor = new LocalSandboxFileSystemExecutor(this.rootDir, maxFileSize, allowedReadDirs, options.strictPath ?? false);
+        this.shellExecutor = new LocalSandboxShellExecutor(this.rootDir, options.commandRestriction ?? types_ts_1.DEFAULT_SANDBOX_CONFIG.commandRestriction, options.env);
+    }
+    async init() {
+        await fs.mkdir(this.rootDir, { recursive: true });
+    }
+    getShellExecutor() { return this.shellExecutor; }
+    getFileSystemExecutor() { return this.fsExecutor; }
+    async runScript(language, code, timeout) {
+        const spec = LANGUAGE_MAP[language];
+        const filename = `script_${Date.now()}_${crypto.randomBytes(4).toString('hex')}${spec.ext}`;
+        await this.fsExecutor.writeFile(filename, code);
+        return this.shellExecutor.exec(`${spec.command} ${filename}`, timeout);
+    }
+    async destroy() {
+        if (this.cleanupOnDestroy && (0, fs_1.existsSync)(this.rootDir))
+            await fs.rm(this.rootDir, { recursive: true, force: true });
+    }
+}
+exports.LocalSandbox = LocalSandbox;
+class LocalSandboxManager {
+    options;
+    sandboxes = new Map();
+    constructor(options = {}) {
+        this.options = options;
+    }
+    async create(id, config) {
+        const existing = this.sandboxes.get(id);
+        if (existing)
+            return existing;
+        const sandbox = new LocalSandbox(id, { ...this.options, ...config });
+        await sandbox.init();
+        this.sandboxes.set(id, sandbox);
+        return sandbox;
+    }
+    get(id) { return this.sandboxes.get(id); }
+    async destroy(id) {
+        const sandbox = this.sandboxes.get(id);
+        if (!sandbox)
+            return;
+        await sandbox.destroy();
+        this.sandboxes.delete(id);
+    }
+    async destroyAll() {
+        await Promise.all([...this.sandboxes.keys()].map(id => this.destroy(id)));
+    }
+}
+exports.LocalSandboxManager = LocalSandboxManager;
+//# sourceMappingURL=local-sandbox.js.map

package/dist/cjs/sandbox/local-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-sandbox.js","sourceRoot":"","sources":["../../../src/sandbox/local-sandbox.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,+BAA+B;AAC/B,+DAA+D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAE/D,iDAA+C;AAC/C,gDAAkC;AAClC,2CAA6B;AAC7B,+CAAiC;AACjC,2BAAgC;AAChC,sDAA0D;AAC1D,mDAAqD;AAGrD,yCAAqG;AASrG,SAAS,SAAS,CAAC,GAAuC;IACxD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,gCAAqB;QAAE,IAAI,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;IACjF,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,YAAY,GAA6D;IAC7E,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;IAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;IACxC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;CAC/E,CAAC;AAEF,MAAa,8BAA8B;IAEtB;IACA;IACA;IACA;IAJnB,YACmB,OAAe,EACf,cAAc,iCAAsB,CAAC,WAAY,EACjD,kBAA4B,EAAE,EAC9B,aAAa,KAAK;QAHlB,YAAO,GAAP,OAAO,CAAQ;QACf,gBAAW,GAAX,WAAW,CAAsC;QACjD,oBAAe,GAAf,eAAe,CAAe;QAC9B,eAAU,GAAV,UAAU,CAAQ;IAClC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,OAAe;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,IAAI,GAAG,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,wBAAwB,IAAI,CAAC,WAAW,QAAQ,CAAC,CAAC;QACzH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,OAAe;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAEO,QAAQ,CAAC,MAAc,EAAE,IAAY;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,gBAAgB,CAAC,QAAgB;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtF,CAAC;IAEO,eAAe,CAAC,QAAgB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3G,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe;YAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QAC1F,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;CACF;AAvDD,wEAuDC;AAED,MAAa,yBAAyB;IAMjB;IACA;IAEA;IARX,KAAK,CAAgB;IACrB,YAAY,GAAa,EAAE,CAAC;IAC5B,GAAG,CAAyB;IAEpC,YACmB,OAAe,EACf,qBAAqB,IAAI,EAC1C,MAA0C,OAAO,CAAC,GAAG,EACpC,YAAY,GAAG;QAHf,YAAO,GAAP,OAAO,CAAQ;QACf,uBAAkB,GAAlB,kBAAkB,CAAO;QAEzB,cAAS,GAAT,SAAS,CAAM;QAEhC,IAAI,CAAC,KAAK,GAAG,IAAI,wBAAa,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,mCAAwB,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,UAAU,iCAAsB,CAAC,WAAY;QACvE,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS,CAAC,IAAI;gBAAE,OAAO,qBAAqB,SAAS,CAAC,MAAM,EAAE,CAAC;YACpE,IAAI,SAAS,CAAC,SAAS;gBAAE,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC;QACzD,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAClG,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YAC3B,IAAA,oBAAM,EAAC,YAAY,EAAE;gBACnB,OAAO;gBACP,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC;gBAC1B,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,GAAG,EAAE,IAAI,CAAC,OAAO;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;gBACjC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,SAA+B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,SAA+B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;oBAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;gBACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9C,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;oBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5G,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAa,IAAS,CAAC;IAE7B,IAAI,CAAC,KAAK,GAAG,EAAE;QACb,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC;IACrH,CAAC;CACF;AAhDD,8DAgDC;AAED,MAAa,YAAY;IACd,EAAE,CAAS;IACX,OAAO,CAAS;IACjB,UAAU,CAAiC;IAC3C,aAAa,CAA4B;IACzC,gBAAgB,CAAU;IAElC,YAAY,EAAU,EAAE,OAA4B;QAClD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAA,gCAAkB,GAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,KAAK,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iCAAsB,CAAC,WAAY,CAAC;QAC/E,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjF,IAAI,CAAC,UAAU,GAAG,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;QAC9H,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,IAAI,iCAAsB,CAAC,kBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1J,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,gBAAgB,KAAoB,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,qBAAqB,KAAyB,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAEvE,KAAK,CAAC,SAAS,CAAC,QAAwB,EAAE,IAAY,EAAE,OAAgB;QACtE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5F,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrH,CAAC;CACF;AAlCD,oCAkCC;AAED,MAAa,mBAAmB;IAGD;IAFrB,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEpD,YAA6B,UAA+B,EAAE;QAAjC,YAAO,GAAP,OAAO,CAA0B;IAAG,CAAC;IAElE,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,MAA+B;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,EAAU,IAAyB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvE,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF;AA1BD,kDA0BC"}

package/dist/cjs/security/guard.d.ts

@@ -24,6 +24,17 @@ export declare class SecurityGuard {
     setPolicy(policy: Partial<SecurityPolicy>): void;
     /** 获取当前策略 */
     getPolicy(): SecurityPolicy;
+    /**
+     * 检查 Shell 命令安全性（便捷方法）
+     *
+     * 结合内置黑名单 + 自定义规则，返回 null 表示安全，否则返回拦截原因。
+     * 适用于沙箱场景的快速检查，无需完整的 sanitize 流程。
+     *
+     * @example
+     * const reason = guard.checkShellCommand('sudo rm -rf /');
+     * if (reason) console.warn('Command blocked:', reason);
+     */
+    checkShellCommand(command: string): string | null;
     /**
      * 扫描并脱敏文本中的敏感信息
      * 将检测到的 API Key、Token、密码等替换为 [REDACTED:xxx]

package/dist/cjs/security/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAiI/E,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAiB;IAE/B,uCAAuC;IACvC,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,qBAAqB,CAA+B;IAC5D,OAAO,CAAC,kBAAkB,CAA+B;IACzD,iCAAiC;IACjC,OAAO,CAAC,oBAAoB,CAAe;IAC3C,OAAO,CAAC,2BAA2B,CAAsB;gBAE7C,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC;IAS5C,2BAA2B;IAC3B,OAAO,CAAC,uBAAuB;IAM/B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,qBAAqB;IAO7B,cAAc;IACd,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc;IAyEzC,gBAAgB;IAChB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAKjC,WAAW;IACX,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK9B,aAAa;IACb,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAWhD,aAAa;IACb,SAAS,IAAI,cAAc;IAM3B;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAczC,OAAO,CAAC,SAAS;CAMlB"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA8J/E,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAiB;IAE/B,uCAAuC;IACvC,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,qBAAqB,CAA+B;IAC5D,OAAO,CAAC,kBAAkB,CAA+B;IACzD,iCAAiC;IACjC,OAAO,CAAC,oBAAoB,CAAe;IAC3C,OAAO,CAAC,2BAA2B,CAAsB;gBAE7C,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC;IAS5C,2BAA2B;IAC3B,OAAO,CAAC,uBAAuB;IAM/B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,qBAAqB;IAO7B,cAAc;IACd,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc;IAyEzC,gBAAgB;IAChB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAKjC,WAAW;IACX,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK9B,aAAa;IACb,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAWhD,aAAa;IACb,SAAS,IAAI,cAAc;IAM3B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQjD;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAczC,OAAO,CAAC,SAAS;CAMlB"}

package/dist/cjs/security/guard.js

@@ -85,6 +85,35 @@ const BUILTIN_BLACKLIST = [
         action: 'block',
         description: 'Block Remove-Item on drive root',
     },
+    // ---- 通用安全规则（来自 BI 项目沙箱实践） ----
+    {
+        name: 'block-chmod-777-root',
+        pattern: /\bchmod\s+777\s+\//,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block chmod 777 / (permission escalation)',
+    },
+    {
+        name: 'block-system-power',
+        pattern: /\b(shutdown|reboot|halt|poweroff)\b/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block system power commands',
+    },
+    {
+        name: 'block-curl-pipe-shell',
+        pattern: /\bcurl\b.*\|\s*(ba)?sh/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block curl pipe to shell',
+    },
+    {
+        name: 'block-wget-pipe-shell',
+        pattern: /\bwget\b.*\|\s*(ba)?sh/,
+        severity: 'blocked',
+        action: 'block',
+        description: 'Block wget pipe to shell',
+    },
 ];
 /** 内置删除保护规则（rm → mv 到回收站，回收站路径通过 policy.trashDir 配置） */
 function createDeleteProtectionRule(trashDir) {
@@ -261,6 +290,23 @@ class SecurityGuard {
     getPolicy() {
         return { ...this.policy };
     }
+    // ---- 便捷方法：Shell 命令安全检查 ----
+    /**
+     * 检查 Shell 命令安全性（便捷方法）
+     *
+     * 结合内置黑名单 + 自定义规则，返回 null 表示安全，否则返回拦截原因。
+     * 适用于沙箱场景的快速检查，无需完整的 sanitize 流程。
+     *
+     * @example
+     * const reason = guard.checkShellCommand('sudo rm -rf /');
+     * if (reason) console.warn('Command blocked:', reason);
+     */
+    checkShellCommand(command) {
+        const result = this.sanitize(command);
+        if (!result.safe)
+            return result.reason || 'Blocked by security policy';
+        return null;
+    }
     // ---- 凭证泄露检测 ----
     /**
      * 扫描并脱敏文本中的敏感信息

package/dist/cjs/security/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;;;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAClG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC5G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mGAAmG,EAAE;CACtI,CAAC;AAEF,aAAa;AACb,MAAM,cAAc,GAAmB;IACrC,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,IAAI;IACtB,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,cAAc;AACd,MAAM,iBAAiB,GAAmB;IACxC,iBAAiB;IACjB;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iBAAiB;KAC/B;IACD,oBAAoB;IACpB;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC;AAEF,wDAAwD;AACxD,SAAS,0BAA0B,CAAC,QAAgB;IAClD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,YAAY,QAAQ,UAAU,OAAO,IAAI,QAAQ,SAAS,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,WAAW,EAAE,8CAA8C;KAC5D,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,SAAS,iCAAiC,CAAC,WAAmB;IAC5D,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;iBACrB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;iBACzB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;iBACvB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;iBACjC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,IAAI,EAAE,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,8CAA8C,WAAW,iCAAiC,OAAO,kBAAkB,WAAW,UAAU,EAAE,UAAU,CAAC;QAC9J,CAAC;QACD,WAAW,EAAE,wEAAwE;KACtF,CAAC;AACJ,CAAC;AAED,MAAa,aAAa;IAChB,MAAM,CAAiB;IAE/B,uCAAuC;IAC/B,iBAAiB,GAA0B,IAAI,CAAC;IAChD,qBAAqB,GAA0B,IAAI,CAAC;IACpD,kBAAkB,GAA0B,IAAI,CAAC;IACzD,iCAAiC;IACzB,oBAAoB,CAAe;IACnC,2BAA2B,CAAsB;IAEzD,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YACxD,CAAC,CAAC,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5D,CAAC,CAAC,iCAAiC,CAAC,cAAc,CAAC,WAAY,CAAC,CAAC;QACnE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,2BAA2B;IACnB,uBAAuB;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACjC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,cAAc;IACd,QAAQ,CAAC,OAAe;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAElC,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO;wBACL,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;wBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;YAEhD,eAAe;YACf,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACxF,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACjE,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBACzE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,uEAAuE;wBAC/E,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,YAAY;YACZ,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBAClE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,6CAA6C;wBACrD,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,SAAS;YAChD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI,CAAC,QAAS,CAAC,UAAU,CAAC;gBACrC,MAAM,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;oBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;IACX,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS,CAAC,MAA+B;QACvC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,2BAA2B,GAAG,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,mBAAmB;IAEnB;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,wBAAwB;YACxB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IAET,SAAS,CAAC,OAAe,EAAE,IAAkB;QACnD,IAAI,IAAI,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF;AAnLD,sCAmLC"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;;;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAClG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC5G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mGAAmG,EAAE;CACtI,CAAC;AAEF,aAAa;AACb,MAAM,cAAc,GAAmB;IACrC,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,IAAI;IACtB,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,cAAc;AACd,MAAM,iBAAiB,GAAmB;IACxC,iBAAiB;IACjB;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iBAAiB;KAC/B;IACD,oBAAoB;IACpB;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iCAAiC;KAC/C;IACD,iCAAiC;IACjC;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0BAA0B;KACxC;CACF,CAAC;AAEF,wDAAwD;AACxD,SAAS,0BAA0B,CAAC,QAAgB;IAClD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,YAAY,QAAQ,UAAU,OAAO,IAAI,QAAQ,SAAS,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,WAAW,EAAE,8CAA8C;KAC5D,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,SAAS,iCAAiC,CAAC,WAAmB;IAC5D,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;iBACrB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;iBACzB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;iBACvB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;iBACjC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,IAAI,EAAE,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,8CAA8C,WAAW,iCAAiC,OAAO,kBAAkB,WAAW,UAAU,EAAE,UAAU,CAAC;QAC9J,CAAC;QACD,WAAW,EAAE,wEAAwE;KACtF,CAAC;AACJ,CAAC;AAED,MAAa,aAAa;IAChB,MAAM,CAAiB;IAE/B,uCAAuC;IAC/B,iBAAiB,GAA0B,IAAI,CAAC;IAChD,qBAAqB,GAA0B,IAAI,CAAC;IACpD,kBAAkB,GAA0B,IAAI,CAAC;IACzD,iCAAiC;IACzB,oBAAoB,CAAe;IACnC,2BAA2B,CAAsB;IAEzD,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YACxD,CAAC,CAAC,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5D,CAAC,CAAC,iCAAiC,CAAC,cAAc,CAAC,WAAY,CAAC,CAAC;QACnE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,2BAA2B;IACnB,uBAAuB;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACjC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,cAAc;IACd,QAAQ,CAAC,OAAe;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAElC,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO;wBACL,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;wBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;YAEhD,eAAe;YACf,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACxF,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACjE,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBACzE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,uEAAuE;wBAC/E,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,YAAY;YACZ,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBAClE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,6CAA6C;wBACrD,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,SAAS;YAChD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI,CAAC,QAAS,CAAC,UAAU,CAAC;gBACrC,MAAM,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;oBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;IACX,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS,CAAC,MAA+B;QACvC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,2BAA2B,GAAG,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,8BAA8B;IAE9B;;;;;;;;;OASG;IACH,iBAAiB,CAAC,OAAe;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,MAAM,IAAI,4BAA4B,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IAEnB;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,wBAAwB;YACxB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IAET,SAAS,CAAC,OAAe,EAAE,IAAkB;QACnD,IAAI,IAAI,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF;AArMD,sCAqMC"}

package/dist/cjs/tool/builtin-tools.d.ts

@@ -0,0 +1,22 @@
+import type { RegisteredTool } from './types.js';
+import type { ToolRegistry } from './registry.js';
+import type { SkillManager } from '../skill/manager.js';
+export interface BuiltinToolOptions {
+    includeShell?: boolean;
+    includeFileSystem?: boolean;
+    includeToolDoc?: boolean;
+    includeSkillLoader?: boolean;
+    toolRegistry?: ToolRegistry;
+    skillManager?: SkillManager;
+    toolResultStore?: ToolResultStoreLike;
+}
+export interface ToolResultStoreLike {
+    read(callId: string): string | null;
+    has?(callId: string): boolean;
+}
+export declare function createShellTools(): RegisteredTool[];
+export declare function createFileSystemTools(): RegisteredTool[];
+export declare function createToolDocTool(registry?: ToolRegistry): RegisteredTool;
+export declare function createSkillLoaderTool(skillManager?: SkillManager): RegisteredTool;
+export declare function createBuiltinTools(options?: BuiltinToolOptions): RegisteredTool[];
+//# sourceMappingURL=builtin-tools.d.ts.map

package/dist/cjs/tool/builtin-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-tools.d.ts","sourceRoot":"","sources":["../../../src/tool/builtin-tools.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,mBAAmB,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC/B;AAED,wBAAgB,gBAAgB,IAAI,cAAc,EAAE,CA2CnD;AAED,wBAAgB,qBAAqB,IAAI,cAAc,EAAE,CAkFxD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,cAAc,CA0BzE;AAED,wBAAgB,qBAAqB,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,cAAc,CAyBjF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,kBAAuB,GAAG,cAAc,EAAE,CAOrF"}