@cicctencent/agent-core 0.1.3 → 0.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -927
- package/dist/cjs/index.d.ts +1 -0
- package/dist/cjs/index.d.ts.map +1 -1
- package/dist/cjs/index.js.map +1 -1
- package/dist/cjs/security/guard.d.ts +1 -6
- package/dist/cjs/security/guard.d.ts.map +1 -1
- package/dist/cjs/security/guard.js +89 -27
- package/dist/cjs/security/guard.js.map +1 -1
- package/dist/cjs/security/types.d.ts +6 -2
- package/dist/cjs/security/types.d.ts.map +1 -1
- package/dist/cjs/tool/registry.d.ts +26 -1
- package/dist/cjs/tool/registry.d.ts.map +1 -1
- package/dist/cjs/tool/registry.js +30 -0
- package/dist/cjs/tool/registry.js.map +1 -1
- package/dist/esm/index.d.ts +1 -0
- package/dist/esm/index.d.ts.map +1 -1
- package/dist/esm/index.js.map +1 -1
- package/dist/esm/security/guard.d.ts +1 -6
- package/dist/esm/security/guard.d.ts.map +1 -1
- package/dist/esm/security/guard.js +89 -27
- package/dist/esm/security/guard.js.map +1 -1
- package/dist/esm/security/types.d.ts +6 -2
- package/dist/esm/security/types.d.ts.map +1 -1
- package/dist/esm/tool/registry.d.ts +26 -1
- package/dist/esm/tool/registry.d.ts.map +1 -1
- package/dist/esm/tool/registry.js +30 -0
- package/dist/esm/tool/registry.js.map +1 -1
- package/package.json +1 -1
|
@@ -6,7 +6,7 @@ const CREDENTIAL_PATTERNS = [
|
|
|
6
6
|
{ name: 'openai-key', pattern: /sk-[a-zA-Z0-9]{20,}/g },
|
|
7
7
|
{ name: 'anthropic-key', pattern: /sk-ant-[a-zA-Z0-9-]{20,}/g },
|
|
8
8
|
{ name: 'aws-access-key', pattern: /AKIA[0-9A-Z]{16}/g },
|
|
9
|
-
{ name: 'aws-secret-key', pattern: /(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])/g },
|
|
9
|
+
{ name: 'aws-secret-key', pattern: /(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40,44}(?![A-Za-z0-9/+=])/g },
|
|
10
10
|
{ name: 'github-token', pattern: /ghp_[a-zA-Z0-9]{36}/g },
|
|
11
11
|
{ name: 'github-fine-grained', pattern: /github_pat_[a-zA-Z0-9_]{82}/g },
|
|
12
12
|
{ name: 'generic-bearer', pattern: /Bearer\s+[a-zA-Z0-9._-]+/gi },
|
|
@@ -17,11 +17,14 @@ const CREDENTIAL_PATTERNS = [
|
|
|
17
17
|
const DEFAULT_POLICY = {
|
|
18
18
|
deleteProtection: true,
|
|
19
19
|
trashDir: '~/.workagent/.trash',
|
|
20
|
+
winTrashDir: '$env:USERPROFILE\\.workagent\\.trash',
|
|
21
|
+
platform: 'unix',
|
|
20
22
|
blacklistEnabled: true,
|
|
21
23
|
rules: [],
|
|
22
24
|
};
|
|
23
25
|
/** 内置黑名单规则 */
|
|
24
26
|
const BUILTIN_BLACKLIST = [
|
|
27
|
+
// ---- Unix ----
|
|
25
28
|
{
|
|
26
29
|
name: 'block-rm-root',
|
|
27
30
|
pattern: /^rm\s+(-[a-zA-Z]*\s+)*\/$/m,
|
|
@@ -50,6 +53,35 @@ const BUILTIN_BLACKLIST = [
|
|
|
50
53
|
action: 'block',
|
|
51
54
|
description: 'Block fork bomb',
|
|
52
55
|
},
|
|
56
|
+
// ---- Windows ----
|
|
57
|
+
{
|
|
58
|
+
name: 'block-format-drive',
|
|
59
|
+
pattern: /format\s+[a-z]:/i,
|
|
60
|
+
severity: 'blocked',
|
|
61
|
+
action: 'block',
|
|
62
|
+
description: 'Block format drive command',
|
|
63
|
+
},
|
|
64
|
+
{
|
|
65
|
+
name: 'block-clear-disk',
|
|
66
|
+
pattern: /clear-disk/i,
|
|
67
|
+
severity: 'blocked',
|
|
68
|
+
action: 'block',
|
|
69
|
+
description: 'Block Clear-Disk command',
|
|
70
|
+
},
|
|
71
|
+
{
|
|
72
|
+
name: 'block-rd-system-drive',
|
|
73
|
+
pattern: /^rd\s+\/s\s+[a-z]:\s*$/i,
|
|
74
|
+
severity: 'blocked',
|
|
75
|
+
action: 'block',
|
|
76
|
+
description: 'Block rd /s on drive root',
|
|
77
|
+
},
|
|
78
|
+
{
|
|
79
|
+
name: 'block-remove-item-drive-root',
|
|
80
|
+
pattern: /(?:Remove-Item|ri|del)\s+.*[a-z]:\s*$/i,
|
|
81
|
+
severity: 'blocked',
|
|
82
|
+
action: 'block',
|
|
83
|
+
description: 'Block Remove-Item on drive root',
|
|
84
|
+
},
|
|
53
85
|
];
|
|
54
86
|
/** 内置删除保护规则（rm → mv 到回收站，回收站路径通过 policy.trashDir 配置） */
|
|
55
87
|
function createDeleteProtectionRule(trashDir) {
|
|
@@ -69,6 +101,30 @@ function createDeleteProtectionRule(trashDir) {
|
|
|
69
101
|
description: 'Rewrite rm to mv trash for delete protection',
|
|
70
102
|
};
|
|
71
103
|
}
|
|
104
|
+
/** Windows 删除保护规则（Remove-Item → Move-Item 回收站） */
|
|
105
|
+
function createWindowsDeleteProtectionRule(winTrashDir) {
|
|
106
|
+
return {
|
|
107
|
+
name: 'windows-delete-protection',
|
|
108
|
+
pattern: /^(Remove-Item|ri|del)\s+(.+)$/i,
|
|
109
|
+
severity: 'warn',
|
|
110
|
+
action: 'rewrite',
|
|
111
|
+
rewriter: (command) => {
|
|
112
|
+
const match = command.match(/^(Remove-Item|ri|del)\s+(.+)$/i);
|
|
113
|
+
if (!match)
|
|
114
|
+
return command;
|
|
115
|
+
const targets = match[2]
|
|
116
|
+
.replace(/-Recurse/gi, '')
|
|
117
|
+
.replace(/-Force/gi, '')
|
|
118
|
+
.replace(/-Confirm:\$false/gi, '')
|
|
119
|
+
.replace(/\/s/gi, '')
|
|
120
|
+
.replace(/\/q/gi, '')
|
|
121
|
+
.trim();
|
|
122
|
+
const ts = Date.now();
|
|
123
|
+
return `New-Item -ItemType Directory -Force -Path "${winTrashDir}" | Out-Null; Move-Item -Path ${targets} -Destination "${winTrashDir}\\_del_${ts}" -Force`;
|
|
124
|
+
},
|
|
125
|
+
description: 'Rewrite Remove-Item to Move-Item trash for delete protection (Windows)',
|
|
126
|
+
};
|
|
127
|
+
}
|
|
72
128
|
export class SecurityGuard {
|
|
73
129
|
policy;
|
|
74
130
|
/** 已编译的正则规则缓存（避免每次 sanitize 重复遍历数组） */
|
|
@@ -77,9 +133,13 @@ export class SecurityGuard {
|
|
|
77
133
|
compiledCustomWarn = null;
|
|
78
134
|
/** 删除保护规则（使用 policy.trashDir） */
|
|
79
135
|
deleteProtectionRule;
|
|
136
|
+
windowsDeleteProtectionRule;
|
|
80
137
|
constructor(policy) {
|
|
81
138
|
this.policy = { ...DEFAULT_POLICY, ...policy };
|
|
82
139
|
this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
|
|
140
|
+
this.windowsDeleteProtectionRule = this.policy.winTrashDir
|
|
141
|
+
? createWindowsDeleteProtectionRule(this.policy.winTrashDir)
|
|
142
|
+
: createWindowsDeleteProtectionRule(DEFAULT_POLICY.winTrashDir);
|
|
83
143
|
this.invalidateCompiledRules();
|
|
84
144
|
}
|
|
85
145
|
/** 编译规则缓存（policy 变更时调用） */
|
|
@@ -121,16 +181,32 @@ export class SecurityGuard {
|
|
|
121
181
|
}
|
|
122
182
|
}
|
|
123
183
|
}
|
|
124
|
-
// ②
|
|
184
|
+
// ② 删除保护（平台感知）
|
|
125
185
|
if (this.policy.deleteProtection) {
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
rewritten
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
186
|
+
const platform = this.policy.platform ?? 'unix';
|
|
187
|
+
// Windows 删除保护
|
|
188
|
+
if ((platform === 'windows' || platform === 'auto') && this.windowsDeleteProtectionRule) {
|
|
189
|
+
if (this.matchRule(trimmedCmd, this.windowsDeleteProtectionRule)) {
|
|
190
|
+
const rewritten = this.windowsDeleteProtectionRule.rewriter(trimmedCmd);
|
|
191
|
+
return {
|
|
192
|
+
safe: true,
|
|
193
|
+
rewritten,
|
|
194
|
+
reason: 'Delete protection: Remove-Item rewritten to Move-Item trash (Windows)',
|
|
195
|
+
severity: 'warn',
|
|
196
|
+
};
|
|
197
|
+
}
|
|
198
|
+
}
|
|
199
|
+
// Unix 删除保护
|
|
200
|
+
if (platform === 'unix' || platform === 'auto') {
|
|
201
|
+
if (this.matchRule(trimmedCmd, this.deleteProtectionRule)) {
|
|
202
|
+
const rewritten = this.deleteProtectionRule.rewriter(trimmedCmd);
|
|
203
|
+
return {
|
|
204
|
+
safe: true,
|
|
205
|
+
rewritten,
|
|
206
|
+
reason: 'Delete protection: rm rewritten to mv trash',
|
|
207
|
+
severity: 'warn',
|
|
208
|
+
};
|
|
209
|
+
}
|
|
134
210
|
}
|
|
135
211
|
}
|
|
136
212
|
// ③ 自定义 rewrite 规则
|
|
@@ -173,6 +249,9 @@ export class SecurityGuard {
|
|
|
173
249
|
if (policy.trashDir) {
|
|
174
250
|
this.deleteProtectionRule = createDeleteProtectionRule(this.policy.trashDir);
|
|
175
251
|
}
|
|
252
|
+
if (policy.winTrashDir) {
|
|
253
|
+
this.windowsDeleteProtectionRule = createWindowsDeleteProtectionRule(this.policy.winTrashDir);
|
|
254
|
+
}
|
|
176
255
|
this.invalidateCompiledRules();
|
|
177
256
|
}
|
|
178
257
|
/** 获取当前策略 */
|
|
@@ -197,23 +276,6 @@ export class SecurityGuard {
|
|
|
197
276
|
}
|
|
198
277
|
return result;
|
|
199
278
|
}
|
|
200
|
-
/**
|
|
201
|
-
* 检测文本是否包含敏感信息
|
|
202
|
-
* @param text 输入文本
|
|
203
|
-
* @returns 检测到的敏感信息类型列表
|
|
204
|
-
*/
|
|
205
|
-
detectCredentials(text) {
|
|
206
|
-
if (!text)
|
|
207
|
-
return [];
|
|
208
|
-
const detected = [];
|
|
209
|
-
for (const { name, pattern } of CREDENTIAL_PATTERNS) {
|
|
210
|
-
pattern.lastIndex = 0;
|
|
211
|
-
if (pattern.test(text)) {
|
|
212
|
-
detected.push(name);
|
|
213
|
-
}
|
|
214
|
-
}
|
|
215
|
-
return detected;
|
|
216
|
-
}
|
|
217
279
|
// ---- 内部辅助 ----
|
|
218
280
|
matchRule(command, rule) {
|
|
219
281
|
if (rule.pattern instanceof RegExp) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAClG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC5G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mGAAmG,EAAE;CACtI,CAAC;AAEF,aAAa;AACb,MAAM,cAAc,GAAmB;IACrC,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,qBAAqB;IAC/B,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,IAAI;IACtB,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,cAAc;AACd,MAAM,iBAAiB,GAAmB;IACxC,iBAAiB;IACjB;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iBAAiB;KAC/B;IACD,oBAAoB;IACpB;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC;AAEF,wDAAwD;AACxD,SAAS,0BAA0B,CAAC,QAAgB;IAClD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,YAAY,QAAQ,UAAU,OAAO,IAAI,QAAQ,SAAS,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,WAAW,EAAE,8CAA8C;KAC5D,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,SAAS,iCAAiC,CAAC,WAAmB;IAC5D,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;iBACrB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;iBACzB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;iBACvB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;iBACjC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,IAAI,EAAE,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,8CAA8C,WAAW,iCAAiC,OAAO,kBAAkB,WAAW,UAAU,EAAE,UAAU,CAAC;QAC9J,CAAC;QACD,WAAW,EAAE,wEAAwE;KACtF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,MAAM,CAAiB;IAE/B,uCAAuC;IAC/B,iBAAiB,GAA0B,IAAI,CAAC;IAChD,qBAAqB,GAA0B,IAAI,CAAC;IACpD,kBAAkB,GAA0B,IAAI,CAAC;IACzD,iCAAiC;IACzB,oBAAoB,CAAe;IACnC,2BAA2B,CAAsB;IAEzD,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YACxD,CAAC,CAAC,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5D,CAAC,CAAC,iCAAiC,CAAC,cAAc,CAAC,WAAY,CAAC,CAAC;QACnE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,2BAA2B;IACnB,uBAAuB;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACjC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,cAAc;IACd,QAAQ,CAAC,OAAe;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAElC,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO;wBACL,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;wBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;YAEhD,eAAe;YACf,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACxF,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACjE,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBACzE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,uEAAuE;wBAC/E,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,YAAY;YACZ,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBAClE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,6CAA6C;wBACrD,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,SAAS;YAChD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI,CAAC,QAAS,CAAC,UAAU,CAAC;gBACrC,MAAM,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;oBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;IACX,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS,CAAC,MAA+B;QACvC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,2BAA2B,GAAG,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,mBAAmB;IAEnB;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,wBAAwB;YACxB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IAET,SAAS,CAAC,OAAe,EAAE,IAAkB;QACnD,IAAI,IAAI,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}
|
|
@@ -24,10 +24,14 @@ export interface SecurityRule {
|
|
|
24
24
|
description?: string;
|
|
25
25
|
}
|
|
26
26
|
export interface SecurityPolicy {
|
|
27
|
-
/** 是否启用删除保护（rm → mv
|
|
27
|
+
/** 是否启用删除保护（rm → mv 到回收站，Windows: Remove-Item → Move-Item 回收站） */
|
|
28
28
|
deleteProtection: boolean;
|
|
29
|
-
/**
|
|
29
|
+
/** 回收站路径（Unix 用） */
|
|
30
30
|
trashDir: string;
|
|
31
|
+
/** Windows 回收站路径（默认 %USERPROFILE%\.workagent\.trash） */
|
|
32
|
+
winTrashDir?: string;
|
|
33
|
+
/** 目标平台，影响安全检查规则集（默认 'unix'） */
|
|
34
|
+
platform?: 'unix' | 'windows' | 'auto';
|
|
31
35
|
/** 是否启用黑名单 */
|
|
32
36
|
blacklistEnabled: boolean;
|
|
33
37
|
/** 自定义规则 */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,cAAc;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB"}
|
|
@@ -1,8 +1,33 @@
|
|
|
1
|
-
import type { ToolDefinition, ToolContext, RegisteredTool, ToolCategory } from './types.ts';
|
|
1
|
+
import type { ToolDefinition, ToolExecutor, ToolContext, RegisteredTool, ToolCategory } from './types.ts';
|
|
2
|
+
/** defineTool 简化参数 */
|
|
3
|
+
export interface DefineToolOptions {
|
|
4
|
+
name: string;
|
|
5
|
+
description: string;
|
|
6
|
+
parameters: ToolDefinition['function']['parameters'];
|
|
7
|
+
executor: ToolExecutor;
|
|
8
|
+
category?: ToolCategory;
|
|
9
|
+
concurrent?: boolean;
|
|
10
|
+
}
|
|
2
11
|
export declare class ToolRegistry {
|
|
3
12
|
private tools;
|
|
4
13
|
/** 注册工具 */
|
|
5
14
|
register(tool: RegisteredTool): void;
|
|
15
|
+
/**
|
|
16
|
+
* 简化注册（一行完成 name + description + parameters + executor）
|
|
17
|
+
*
|
|
18
|
+
* @example
|
|
19
|
+
* registry.defineTool({
|
|
20
|
+
* name: 'execute_command',
|
|
21
|
+
* description: 'Run a shell command',
|
|
22
|
+
* parameters: {
|
|
23
|
+
* type: 'object',
|
|
24
|
+
* properties: { command: { type: 'string', description: '...' } },
|
|
25
|
+
* required: ['command'],
|
|
26
|
+
* },
|
|
27
|
+
* executor: async (args, ctx) => { ... },
|
|
28
|
+
* });
|
|
29
|
+
*/
|
|
30
|
+
defineTool(options: DefineToolOptions): void;
|
|
6
31
|
/** 批量注册 */
|
|
7
32
|
registerAll(tools: RegisteredTool[]): void;
|
|
8
33
|
/** 注销工具 */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/tool/registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,
|
|
1
|
+
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/tool/registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1G,sBAAsB;AACtB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC;IACrD,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,WAAW;IACX,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAKpC;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAgB5C,WAAW;IACX,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI;IAM1C,WAAW;IACX,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI9B,aAAa;IACb,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,uBAAuB;IACvB,cAAc,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,cAAc,EAAE;IAcxF,gCAAgC;IAC1B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAM7F,kBAAkB;IAClB,SAAS,IAAI,MAAM,EAAE;IAIrB,eAAe;IACf,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAG3B"}
|
|
@@ -8,6 +8,36 @@ export class ToolRegistry {
|
|
|
8
8
|
const name = tool.definition.function.name;
|
|
9
9
|
this.tools.set(name, tool);
|
|
10
10
|
}
|
|
11
|
+
/**
|
|
12
|
+
* 简化注册（一行完成 name + description + parameters + executor）
|
|
13
|
+
*
|
|
14
|
+
* @example
|
|
15
|
+
* registry.defineTool({
|
|
16
|
+
* name: 'execute_command',
|
|
17
|
+
* description: 'Run a shell command',
|
|
18
|
+
* parameters: {
|
|
19
|
+
* type: 'object',
|
|
20
|
+
* properties: { command: { type: 'string', description: '...' } },
|
|
21
|
+
* required: ['command'],
|
|
22
|
+
* },
|
|
23
|
+
* executor: async (args, ctx) => { ... },
|
|
24
|
+
* });
|
|
25
|
+
*/
|
|
26
|
+
defineTool(options) {
|
|
27
|
+
this.register({
|
|
28
|
+
definition: {
|
|
29
|
+
type: 'function',
|
|
30
|
+
function: {
|
|
31
|
+
name: options.name,
|
|
32
|
+
description: options.description,
|
|
33
|
+
parameters: options.parameters,
|
|
34
|
+
},
|
|
35
|
+
},
|
|
36
|
+
executor: options.executor,
|
|
37
|
+
category: options.category ?? 'custom',
|
|
38
|
+
concurrent: options.concurrent,
|
|
39
|
+
});
|
|
40
|
+
}
|
|
11
41
|
/** 批量注册 */
|
|
12
42
|
registerAll(tools) {
|
|
13
43
|
for (const tool of tools) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/tool/registry.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yBAAyB;AACzB,+DAA+D;
|
|
1
|
+
{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/tool/registry.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yBAAyB;AACzB,+DAA+D;AAc/D,MAAM,OAAO,YAAY;IACf,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,WAAW;IACX,QAAQ,CAAC,IAAoB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,OAA0B;QACnC,IAAI,CAAC,QAAQ,CAAC;YACZ,UAAU,EAAE;gBACV,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B;aACF;YACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ;YACtC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,WAAW;IACX,WAAW,CAAC,KAAuB;QACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,WAAW;IACX,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,aAAa;IACb,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,uBAAuB;IACvB,cAAc,CAAC,MAAsD;QACnE,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAErC,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAA6B,EAAE,GAAgB;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,kBAAkB;IAClB,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,eAAe;IACf,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;CACF"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cicctencent/agent-core",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.4",
|
|
4
4
|
"description": "Core engine for AI agent — LLM orchestration, tool execution, MCP, skill routing, security, and memory pipeline.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/cjs/index.js",
|