@cicctencent/agent-core 0.1.5 → 0.1.7

package/dist/esm/security/permission.d.ts

@@ -0,0 +1,39 @@
+import type { ToolRiskAssessment } from './risk.ts';
+export type PermissionDecision = 'pending' | 'approved' | 'rejected' | 'expired';
+export interface PermissionRequest {
+    id: string;
+    sessionId: string;
+    iteration?: number;
+    tool: string;
+    args: Record<string, unknown>;
+    risk: ToolRiskAssessment;
+    status: PermissionDecision;
+    reason?: string;
+    createdAt: number;
+    updatedAt: number;
+    expiresAt: number;
+}
+/** 权限存储接口（上层实现持久化） */
+export interface PermissionStore {
+    readAll(): PermissionRequest[];
+    writeAll(items: PermissionRequest[]): void;
+}
+/** 内存权限存储（默认实现，进程重启丢失） */
+export declare class InMemoryPermissionStore implements PermissionStore {
+    private items;
+    readAll(): PermissionRequest[];
+    writeAll(items: PermissionRequest[]): void;
+}
+/** 配置权限管理器 */
+export declare function configurePermissionManager(options: {
+    store?: PermissionStore;
+    defaultTtlMs?: number;
+    autoAllowApprovedRetry?: boolean;
+}): void;
+export declare function createPermissionRequest(input: Omit<PermissionRequest, 'id' | 'status' | 'createdAt' | 'updatedAt' | 'expiresAt'> & {
+    ttlMs?: number;
+}): PermissionRequest;
+export declare function listPermissionRequests(status?: PermissionDecision): PermissionRequest[];
+export declare function findApprovedPermission(sessionId: string, tool: string, args: Record<string, unknown>): PermissionRequest | null;
+export declare function decidePermissionRequest(id: string, approved: boolean, reason?: string): PermissionRequest | null;
+//# sourceMappingURL=permission.d.ts.map

package/dist/esm/security/permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../../src/security/permission.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sBAAsB;AACtB,MAAM,WAAW,eAAe;IAC9B,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;CAC5C;AAED,0BAA0B;AAC1B,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,OAAO,CAAC,KAAK,CAA2B;IAExC,OAAO,IAAI,iBAAiB,EAAE;IAI9B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI;CAG3C;AAQD,cAAc;AACd,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,GAAG,IAAI,CAIP;AA2BD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7G,iBAAiB,CAmBnB;AAED,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,iBAAiB,EAAE,CAGvF;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,GAAG,IAAI,CAU/H;AAED,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAehH"}

package/dist/esm/security/permission.js

@@ -0,0 +1,102 @@
+// ============================================================
+// Permission — 工具审批请求管理
+// ============================================================
+/** 内存权限存储（默认实现，进程重启丢失） */
+export class InMemoryPermissionStore {
+    items = [];
+    readAll() {
+        return [...this.items];
+    }
+    writeAll(items) {
+        this.items = items;
+    }
+}
+// ---- 核心逻辑 ----
+let _store = new InMemoryPermissionStore();
+let _defaultTtlMs = 10 * 60 * 1000;
+let _autoAllowApprovedRetry = true;
+/** 配置权限管理器 */
+export function configurePermissionManager(options) {
+    if (options.store)
+        _store = options.store;
+    if (options.defaultTtlMs !== undefined)
+        _defaultTtlMs = options.defaultTtlMs;
+    if (options.autoAllowApprovedRetry !== undefined)
+        _autoAllowApprovedRetry = options.autoAllowApprovedRetry;
+}
+function readAll() {
+    const now = Date.now();
+    const items = _store.readAll().map(item => {
+        if (item.status === 'pending' && item.expiresAt <= now) {
+            return { ...item, status: 'expired', updatedAt: now };
+        }
+        return item;
+    });
+    _store.writeAll(items);
+    return items;
+}
+function stableJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableJson).join(',')}]`;
+    if (value && typeof value === 'object') {
+        const obj = value;
+        return `{${Object.keys(obj).sort().map(key => `${JSON.stringify(key)}:${stableJson(obj[key])}`).join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+function sameArgs(a, b) {
+    return stableJson(a || {}) === stableJson(b || {});
+}
+export function createPermissionRequest(input) {
+    const now = Date.now();
+    const ttlMs = input.ttlMs || _defaultTtlMs;
+    const request = {
+        id: `${now}_${Math.random().toString(36).slice(2, 10)}`,
+        sessionId: input.sessionId,
+        iteration: input.iteration,
+        tool: input.tool,
+        args: input.args,
+        risk: input.risk,
+        status: 'pending',
+        createdAt: now,
+        updatedAt: now,
+        expiresAt: now + ttlMs,
+    };
+    const items = readAll();
+    items.push(request);
+    _store.writeAll(items);
+    return request;
+}
+export function listPermissionRequests(status) {
+    const items = readAll().sort((a, b) => b.createdAt - a.createdAt);
+    return status ? items.filter(item => item.status === status) : items;
+}
+export function findApprovedPermission(sessionId, tool, args) {
+    if (!_autoAllowApprovedRetry)
+        return null;
+    const now = Date.now();
+    return readAll().find(item => item.status === 'approved' &&
+        item.expiresAt > now &&
+        item.sessionId === sessionId &&
+        item.tool === tool &&
+        sameArgs(item.args, args)) || null;
+}
+export function decidePermissionRequest(id, approved, reason) {
+    const items = readAll();
+    const index = items.findIndex(item => item.id === id);
+    if (index === -1)
+        return null;
+    const current = items[index];
+    if (current.status !== 'pending')
+        return current;
+    const updated = {
+        ...current,
+        status: approved ? 'approved' : 'rejected',
+        reason,
+        updatedAt: Date.now(),
+    };
+    items[index] = updated;
+    _store.writeAll(items);
+    return updated;
+}
+//# sourceMappingURL=permission.js.map

package/dist/esm/security/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../../src/security/permission.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wBAAwB;AACxB,+DAA+D;AA0B/D,0BAA0B;AAC1B,MAAM,OAAO,uBAAuB;IAC1B,KAAK,GAAwB,EAAE,CAAC;IAExC,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,QAAQ,CAAC,KAA0B;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,iBAAiB;AAEjB,IAAI,MAAM,GAAoB,IAAI,uBAAuB,EAAE,CAAC;AAC5D,IAAI,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,IAAI,uBAAuB,GAAG,IAAI,CAAC;AAEnC,cAAc;AACd,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1C,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAC7E,IAAI,OAAO,CAAC,sBAAsB,KAAK,SAAS;QAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;AAC7G,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,CAA0B,EAAE,CAA0B;IACtE,OAAO,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAA8G;IAE9G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,aAAa,CAAC;IAC3C,MAAM,OAAO,GAAsB;QACjC,EAAE,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,KAAK;KACvB,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA2B;IAChE,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,IAAY,EAAE,IAA6B;IACnG,IAAI,CAAC,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3B,IAAI,CAAC,MAAM,KAAK,UAAU;QAC1B,IAAI,CAAC,SAAS,GAAG,GAAG;QACpB,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,IAAI,CAAC,IAAI,KAAK,IAAI;QAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAC1B,IAAI,IAAI,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAU,EAAE,QAAiB,EAAE,MAAe;IACpF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjD,MAAM,OAAO,GAAsB;QACjC,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QAC1C,MAAM;QACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACvB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/esm/security/risk.d.ts

@@ -0,0 +1,28 @@
+export type ToolRiskLevel = 'low' | 'medium' | 'high' | 'critical';
+export interface ToolRiskAssessment {
+    level: ToolRiskLevel;
+    score: number;
+    reasons: string[];
+    requiresConfirmation: boolean;
+}
+/** 工具安全策略（从上层注入） */
+export interface ToolSecurityPolicy {
+    allowTools: string[];
+    denyTools: string[];
+    toolBaseRisk: Record<string, ToolRiskLevel>;
+    dangerousPatterns: Array<{
+        pattern: string;
+        reason: string;
+        level: ToolRiskLevel;
+    }>;
+}
+/** 策略提供者接口（上层实现） */
+export type ToolSecurityPolicyProvider = () => ToolSecurityPolicy;
+/** 低风险快速判定：不在基础风险表 + 非 MCP 工具 → 始终 low */
+export declare function isLowRiskTool(tool: string): boolean;
+/** 清除风险评估缓存（策略变更时调用） */
+export declare function clearRiskCache(): void;
+/** 注册策略提供者（上层应用启动时调用） */
+export declare function setToolSecurityPolicyProvider(provider: ToolSecurityPolicyProvider): void;
+export declare function assessToolRisk(tool: string, args?: Record<string, unknown>): ToolRiskAssessment;
+//# sourceMappingURL=risk.d.ts.map

package/dist/esm/security/risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/security/risk.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEnE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,oBAAoB;AACpB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C,iBAAiB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;CACrF;AAED,oBAAoB;AACpB,MAAM,MAAM,0BAA0B,GAAG,MAAM,kBAAkB,CAAC;AAwClE,0CAA0C;AAC1C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAwB;AACxB,wBAAgB,cAAc,IAAI,IAAI,CAErC;AA4BD,yBAAyB;AACzB,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAExF;AASD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,kBAAkB,CAqE/F"}

package/dist/esm/security/risk.js

@@ -0,0 +1,142 @@
+// ============================================================
+// ToolRisk — 工具风险评估引擎
+// ============================================================
+// ---- 内置默认值 ----
+const TOOL_BASE_RISK = {
+    execute_command: 'medium',
+    run_script: 'medium',
+    write_file: 'medium',
+    append_file: 'medium',
+    delete_file: 'high',
+    delegate_task: 'medium',
+};
+const DESTRUCTIVE_PATTERNS = [
+    { pattern: /\brm\s+-rf\b|\brm\s+-fr\b/i, reason: 'recursive force delete', level: 'critical' },
+    { pattern: /\bsudo\b/i, reason: 'privileged command', level: 'high' },
+    { pattern: /\bchmod\s+777\b/i, reason: 'broad permission change', level: 'high' },
+    { pattern: /\b(chown|chmod)\b/i, reason: 'permission or ownership change', level: 'medium' },
+    { pattern: /\b(drop|truncate)\s+(table|database)\b/i, reason: 'destructive database operation', level: 'critical' },
+    { pattern: /\b(delete|update)\s+.+\bwhere\b/i, reason: 'database mutation', level: 'high' },
+    { pattern: /\b(curl|wget)\b.+\|\s*(sh|bash|zsh)\b/i, reason: 'remote script execution', level: 'critical' },
+    { pattern: /\bkill(all)?\b|\bpkill\b/i, reason: 'process termination', level: 'high' },
+    { pattern: /\bmv\b.+\/(etc|usr|bin|sbin|var)\b/i, reason: 'system path mutation', level: 'high' },
+];
+const LEVEL_SCORE = {
+    low: 1,
+    medium: 2,
+    high: 3,
+    critical: 4,
+};
+// ---- 风险评估缓存 ----
+const _riskCache = new Map();
+const RISK_CACHE_TTL = 5000; // 5s
+/** 有显式基础风险的工具（需要完整正则检查） */
+const TOOLS_NEED_DEEP_CHECK = new Set(Object.keys(TOOL_BASE_RISK));
+/** 低风险快速判定：不在基础风险表 + 非 MCP 工具 → 始终 low */
+export function isLowRiskTool(tool) {
+    return !TOOLS_NEED_DEEP_CHECK.has(tool) && !tool.startsWith('mcp_');
+}
+/** 清除风险评估缓存（策略变更时调用） */
+export function clearRiskCache() {
+    _riskCache.clear();
+}
+function maxLevel(a, b) {
+    return LEVEL_SCORE[a] >= LEVEL_SCORE[b] ? a : b;
+}
+function stringifyArgs(args) {
+    if (!args)
+        return '';
+    try {
+        return JSON.stringify(args);
+    }
+    catch {
+        return String(args);
+    }
+}
+function isSystemTempPath(target) {
+    return /^(\/tmp\/|\/private\/tmp\/|\/var\/folders\/)/.test(target);
+}
+function isSafeTempWrite(target) {
+    if (!isSystemTempPath(target))
+        return false;
+    return /\.(cjs|mjs|js|json|txt|md|html|csv|tsv|tmp|b64)$/i.test(target);
+}
+// ---- 策略注入 ----
+let _policyProvider = null;
+/** 注册策略提供者（上层应用启动时调用） */
+export function setToolSecurityPolicyProvider(provider) {
+    _policyProvider = provider;
+}
+function getPolicy() {
+    if (_policyProvider)
+        return _policyProvider();
+    return { allowTools: [], denyTools: [], toolBaseRisk: {}, dangerousPatterns: [] };
+}
+// ---- 核心评估函数 ----
+export function assessToolRisk(tool, args) {
+    const cacheKey = tool;
+    const cached = _riskCache.get(cacheKey);
+    if (cached && Date.now() - cached.ts < RISK_CACHE_TTL)
+        return cached.result;
+    const policy = getPolicy();
+    // 低风险快速路径
+    if (isLowRiskTool(tool)) {
+        if (policy.denyTools.includes(tool)) {
+            const result = { level: 'critical', score: 4, reasons: ['tool is denied by security policy'], requiresConfirmation: true };
+            _riskCache.set(cacheKey, { result, ts: Date.now() });
+            return result;
+        }
+        const result = { level: 'low', score: 1, reasons: ['read-only or low-impact operation'], requiresConfirmation: false };
+        _riskCache.set(cacheKey, { result, ts: Date.now() });
+        return result;
+    }
+    // 完整评估路径
+    const baseRisk = policy.toolBaseRisk[tool] || TOOL_BASE_RISK[tool];
+    let level = baseRisk || (tool.startsWith('mcp_') ? 'medium' : 'low');
+    const reasons = [];
+    const argText = stringifyArgs(args);
+    if (baseRisk)
+        reasons.push(`base risk: ${baseRisk}`);
+    if (policy.denyTools.includes(tool)) {
+        level = 'critical';
+        reasons.push('tool is denied by security policy');
+    }
+    if (policy.allowTools.includes(tool)) {
+        level = 'low';
+        reasons.push('tool is allowlisted by security policy');
+    }
+    if (tool.startsWith('mcp_'))
+        reasons.push('external MCP tool');
+    const customPatterns = policy.dangerousPatterns.map(rule => ({ ...rule, pattern: new RegExp(rule.pattern, 'i') }));
+    for (const rule of [...DESTRUCTIVE_PATTERNS, ...customPatterns]) {
+        if (rule.pattern.test(argText)) {
+            level = maxLevel(level, rule.level);
+            reasons.push(rule.reason);
+        }
+    }
+    if (tool === 'write_file' || tool === 'append_file') {
+        const target = String(args?.path || args?.filePath || '');
+        if (/^(\/|~\/)|\.\./.test(target)) {
+            if (isSafeTempWrite(target)) {
+                reasons.push('temporary file write');
+            }
+            else {
+                level = maxLevel(level, 'high');
+                reasons.push('writes outside simple relative path');
+            }
+        }
+    }
+    if (tool === 'delete_file') {
+        level = maxLevel(level, 'high');
+        reasons.push('file deletion');
+    }
+    const result = {
+        level,
+        score: LEVEL_SCORE[level],
+        reasons: reasons.length ? [...new Set(reasons)] : ['read-only or low-impact operation'],
+        requiresConfirmation: level === 'high' || level === 'critical',
+    };
+    _riskCache.set(cacheKey, { result, ts: Date.now() });
+    return result;
+}
+//# sourceMappingURL=risk.js.map

package/dist/esm/security/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/security/risk.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sBAAsB;AACtB,+DAA+D;AAsB/D,kBAAkB;AAElB,MAAM,cAAc,GAAkC;IACpD,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,QAAQ;IACpB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,QAAQ;CACxB,CAAC;AAEF,MAAM,oBAAoB,GAAqE;IAC7F,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,UAAU,EAAE;IAC9F,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE;IACrE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE;IACjF,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC5F,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,UAAU,EAAE;IACnH,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE;IAC3F,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,UAAU,EAAE;IAC3G,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE;IACtF,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE;CAClG,CAAC;AAEF,MAAM,WAAW,GAAkC;IACjD,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,mBAAmB;AAEnB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsD,CAAC;AACjF,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,KAAK;AAElC,2BAA2B;AAC3B,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;AAEnE,0CAA0C;AAC1C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAgB,EAAE,CAAgB;IAClD,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,IAA8B;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,8CAA8C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,iBAAiB;AAEjB,IAAI,eAAe,GAAsC,IAAI,CAAC;AAE9D,yBAAyB;AACzB,MAAM,UAAU,6BAA6B,CAAC,QAAoC;IAChF,eAAe,GAAG,QAAQ,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,eAAe;QAAE,OAAO,eAAe,EAAE,CAAC;IAC9C,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,mBAAmB;AAEnB,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAA8B;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,cAAc;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAE5E,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,UAAU;IACV,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,GAAuB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;YAC/I,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAuB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;QAC3I,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS;IACT,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,KAAK,GAAG,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,KAAK,GAAG,UAAU,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,GAAG,KAAK,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAE/D,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnH,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,oBAAoB,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAuB;QACjC,KAAK;QACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;QACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC;QACvF,oBAAoB,EAAE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU;KAC/D,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/security/types.d.ts

@@ -28,7 +28,7 @@ export interface SecurityPolicy {
     deleteProtection: boolean;
     /** 回收站路径（Unix 用） */
     trashDir: string;
-    /** Windows 回收站路径（默认 %USERPROFILE%\.workagent\.trash） */
+    /** Windows 回收站路径（默认 %USERPROFILE%\.workai\.trash） */
     winTrashDir?: string;
     /** 目标平台，影响安全检查规则集（默认 'unix'） */
     platform?: 'unix' | 'windows' | 'auto';

package/dist/esm/security/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,cAAc;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,cAAc;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB"}

package/dist/esm/store/file-tool-result-store.d.ts

@@ -0,0 +1,27 @@
+import type { ToolResultStore, OffloadEntry } from '../agent/types.ts';
+export interface FileToolResultStoreOptions {
+    /** 工具结果存储目录（默认 {cwd}/data/tool-results） */
+    storeDir: string;
+    /** 上下文卸载存储目录（默认 {cwd}/data/offload） */
+    offloadDir: string;
+}
+/**
+ * 基于文件系统的工具结果存储
+ * 将超大工具结果写入 {storeDir}/{callId}.json
+ */
+export declare class FileToolResultStore implements ToolResultStore {
+    private storeDir;
+    private offloadDir;
+    constructor(options: FileToolResultStoreOptions);
+    write(callId: string, content: string): string;
+    read(callId: string): string | null;
+    has(callId: string): boolean;
+    delete(callId: string): boolean;
+    writeOffload(entry: Omit<OffloadEntry, 'filePath'>, content: string): string;
+    readOffload(nodeId: string): string | null;
+    listOffloads(sessionId: string): OffloadEntry[];
+    /** 清理过期结果（默认超过 24 小时） */
+    cleanup(maxAgeMs?: number): number;
+    private getFilePath;
+}
+//# sourceMappingURL=file-tool-result-store.d.ts.map

package/dist/esm/store/file-tool-result-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-tool-result-store.d.ts","sourceRoot":"","sources":["../../../src/store/file-tool-result-store.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEvE,MAAM,WAAW,0BAA0B;IACzC,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,EAAE,0BAA0B;IAW/C,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAY9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAYnC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI5B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAW/B,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAoB5E,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAa1C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAU/C,yBAAyB;IACzB,OAAO,CAAC,QAAQ,GAAE,MAA4B,GAAG,MAAM;IAkBvD,OAAO,CAAC,WAAW;CAIpB"}

package/dist/esm/store/file-tool-result-store.js

@@ -0,0 +1,129 @@
+// ============================================================
+// FileToolResultStore — 基于文件系统的工具结果存储 + 上下文卸载
+// ============================================================
+import * as fs from 'fs';
+import * as path from 'path';
+/**
+ * 基于文件系统的工具结果存储
+ * 将超大工具结果写入 {storeDir}/{callId}.json
+ */
+export class FileToolResultStore {
+    storeDir;
+    offloadDir;
+    constructor(options) {
+        this.storeDir = options.storeDir;
+        this.offloadDir = options.offloadDir;
+        if (!fs.existsSync(this.storeDir)) {
+            fs.mkdirSync(this.storeDir, { recursive: true });
+        }
+        if (!fs.existsSync(this.offloadDir)) {
+            fs.mkdirSync(this.offloadDir, { recursive: true });
+        }
+    }
+    write(callId, content) {
+        const filePath = this.getFilePath(callId);
+        const data = {
+            callId,
+            size: content.length,
+            createdAt: new Date().toISOString(),
+            content,
+        };
+        fs.writeFileSync(filePath, JSON.stringify(data), 'utf-8');
+        return filePath;
+    }
+    read(callId) {
+        const filePath = this.getFilePath(callId);
+        try {
+            if (!fs.existsSync(filePath))
+                return null;
+            const raw = fs.readFileSync(filePath, 'utf-8');
+            const data = JSON.parse(raw);
+            return data.content || null;
+        }
+        catch {
+            return null;
+        }
+    }
+    has(callId) {
+        return fs.existsSync(this.getFilePath(callId));
+    }
+    delete(callId) {
+        const filePath = this.getFilePath(callId);
+        try {
+            if (fs.existsSync(filePath)) {
+                fs.unlinkSync(filePath);
+                return true;
+            }
+        }
+        catch { /* ignore */ }
+        return false;
+    }
+    writeOffload(entry, content) {
+        const sessionDir = path.join(this.offloadDir, entry.sessionId);
+        if (!fs.existsSync(sessionDir)) {
+            fs.mkdirSync(sessionDir, { recursive: true });
+        }
+        const filePath = path.join(sessionDir, `${entry.nodeId}.md`);
+        fs.writeFileSync(filePath, content, 'utf-8');
+        const indexPath = path.join(sessionDir, '_index.json');
+        let index = [];
+        try {
+            if (fs.existsSync(indexPath)) {
+                index = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+            }
+        }
+        catch { /* 索引损坏时重置 */ }
+        const fullEntry = { ...entry, filePath };
+        index.push(fullEntry);
+        fs.writeFileSync(indexPath, JSON.stringify(index, null, 2), 'utf-8');
+        return filePath;
+    }
+    readOffload(nodeId) {
+        try {
+            const sessions = fs.readdirSync(this.offloadDir);
+            for (const sessionId of sessions) {
+                const filePath = path.join(this.offloadDir, sessionId, `${nodeId}.md`);
+                if (fs.existsSync(filePath)) {
+                    return fs.readFileSync(filePath, 'utf-8');
+                }
+            }
+        }
+        catch { /* ignore */ }
+        return null;
+    }
+    listOffloads(sessionId) {
+        const indexPath = path.join(this.offloadDir, sessionId, '_index.json');
+        try {
+            if (fs.existsSync(indexPath)) {
+                return JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+            }
+        }
+        catch { /* ignore */ }
+        return [];
+    }
+    /** 清理过期结果（默认超过 24 小时） */
+    cleanup(maxAgeMs = 24 * 60 * 60 * 1000) {
+        let cleaned = 0;
+        try {
+            const files = fs.readdirSync(this.storeDir);
+            const now = Date.now();
+            for (const file of files) {
+                if (!file.endsWith('.json'))
+                    continue;
+                const filePath = path.join(this.storeDir, file);
+                const stat = fs.statSync(filePath);
+                if (now - stat.mtimeMs > maxAgeMs) {
+                    fs.unlinkSync(filePath);
+                    cleaned++;
+                }
+            }
+        }
+        catch { /* ignore */ }
+        return cleaned;
+    }
+    getFilePath(callId) {
+        const safeCallId = callId.replace(/[^a-zA-Z0-9_-]/g, '_');
+        return path.join(this.storeDir, `${safeCallId}.json`);
+    }
+}
+//# sourceMappingURL=file-tool-result-store.js.map

package/dist/esm/store/file-tool-result-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-tool-result-store.js","sourceRoot":"","sources":["../../../src/store/file-tool-result-store.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8CAA8C;AAC9C,+DAA+D;AAE/D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAU7B;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACtB,QAAQ,CAAS;IACjB,UAAU,CAAS;IAE3B,YAAY,OAAmC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,OAAe;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG;YACX,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;SACR,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY,CAAC,KAAqC,EAAE,OAAe;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAC7D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACvD,IAAI,KAAK,GAAmB,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QACzB,MAAM,SAAS,GAAiB,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC;gBACvE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,yBAAyB;IACzB,OAAO,CAAC,WAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;oBAClC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACxB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/esm/store/json-store.d.ts

@@ -0,0 +1,54 @@
+export interface JsonStoreOptions {
+    /** 使用项目级目录（{cwd}）而非全局目录（~/.agent） */
+    projectLocal?: boolean;
+    /** 直接使用绝对路径（忽略 projectLocal） */
+    absolutePath?: string;
+}
+/**
+ * 通用 JSON 文件存储
+ *
+ * - read(): 读取整个 JSON 文件（带缓存）
+ * - write(): 原子写入（先写 .tmp 再 rename）
+ * - 自动创建父目录
+ */
+export declare class JsonStore<T> {
+    private filePath;
+    private cache;
+    private cacheTime;
+    /** 缓存有效期（毫秒），0 = 永久 */
+    private ttl;
+    private useProjectDir;
+    constructor(relativePath: string, ttl?: number, options?: JsonStoreOptions);
+    /** 读取 JSON 数据 */
+    read(defaultValue: T): T;
+    /** 原子写入 JSON 数据 */
+    write(data: T): void;
+    /** 异步读取 JSON 数据 */
+    readAsync(defaultValue: T): Promise<T>;
+    /** 异步原子写入 JSON 数据 */
+    writeAsync(data: T): Promise<void>;
+    /** 清除缓存，强制下次从文件读取 */
+    invalidate(): void;
+    /** 获取文件路径（调试用） */
+    getPath(): string;
+}
+/**
+ * 列表型 JSON 存储（数组）
+ * 提供便捷的 CRUD 方法，内部使用 JsonStore<T[]>
+ */
+export declare class JsonListStore<T extends {
+    id: number;
+}> {
+    private store;
+    constructor(relativePath: string, options?: JsonStoreOptions);
+    list(): T[];
+    findById(id: number): T | undefined;
+    add(item: T): T;
+    update(id: number, updates: Partial<T>): T | undefined;
+    remove(id: number): boolean;
+    filter(predicate: (item: T) => boolean): T[];
+    maxId(): number;
+    getPath(): string;
+    replaceAll(data: T[]): void;
+}
+//# sourceMappingURL=json-store.d.ts.map

package/dist/esm/store/json-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-store.d.ts","sourceRoot":"","sources":["../../../src/store/json-store.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gCAAgC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,qBAAa,SAAS,CAAC,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,SAAS,CAAK;IACtB,uBAAuB;IACvB,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,aAAa,CAAU;gBAEnB,YAAY,EAAE,MAAM,EAAE,GAAG,SAAI,EAAE,OAAO,CAAC,EAAE,gBAAgB;IAcrE,iBAAiB;IACjB,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC;IAsBxB,mBAAmB;IACnB,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI;IA4CpB,mBAAmB;IACb,SAAS,CAAC,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAwB5C,qBAAqB;IACf,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwCxC,qBAAqB;IACrB,UAAU,IAAI,IAAI;IAKlB,kBAAkB;IAClB,OAAO,IAAI,MAAM;CAGlB;AAED;;;GAGG;AACH,qBAAa,aAAa,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE;IACjD,OAAO,CAAC,KAAK,CAAiB;gBAElB,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB;IAI5D,IAAI,IAAI,CAAC,EAAE;IAIX,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAInC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;IAOf,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS;IAStD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAQ3B,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,GAAG,CAAC,EAAE;IAI5C,KAAK,IAAI,MAAM;IAKf,OAAO,IAAI,MAAM;IAIjB,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI;CAG5B"}