@cicctencent/agent-core 0.1.6 → 0.1.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -3
- package/dist/cjs/a2a/client.d.ts +47 -0
- package/dist/cjs/a2a/client.d.ts.map +1 -0
- package/dist/cjs/a2a/client.js +178 -0
- package/dist/cjs/a2a/client.js.map +1 -0
- package/dist/cjs/a2a/index.d.ts +3 -0
- package/dist/cjs/a2a/index.d.ts.map +1 -0
- package/dist/cjs/a2a/index.js +9 -0
- package/dist/cjs/a2a/index.js.map +1 -0
- package/dist/cjs/a2a/types.d.ts +149 -0
- package/dist/cjs/a2a/types.d.ts.map +1 -0
- package/dist/cjs/a2a/types.js +8 -0
- package/dist/cjs/a2a/types.js.map +1 -0
- package/dist/cjs/index.d.ts +22 -0
- package/dist/cjs/index.d.ts.map +1 -1
- package/dist/cjs/index.js +52 -2
- package/dist/cjs/index.js.map +1 -1
- package/dist/cjs/middleware/audit-log.d.ts +22 -0
- package/dist/cjs/middleware/audit-log.d.ts.map +1 -0
- package/dist/cjs/middleware/audit-log.js +104 -0
- package/dist/cjs/middleware/audit-log.js.map +1 -0
- package/dist/cjs/middleware/timing.d.ts +25 -0
- package/dist/cjs/middleware/timing.d.ts.map +1 -0
- package/dist/cjs/middleware/timing.js +62 -0
- package/dist/cjs/middleware/timing.js.map +1 -0
- package/dist/cjs/middleware/tool-guard.d.ts +15 -0
- package/dist/cjs/middleware/tool-guard.d.ts.map +1 -0
- package/dist/cjs/middleware/tool-guard.js +31 -0
- package/dist/cjs/middleware/tool-guard.js.map +1 -0
- package/dist/cjs/observability/logger.d.ts +16 -0
- package/dist/cjs/observability/logger.d.ts.map +1 -0
- package/dist/cjs/observability/logger.js +35 -0
- package/dist/cjs/observability/logger.js.map +1 -0
- package/dist/cjs/pool/engine-pool.d.ts +22 -0
- package/dist/cjs/pool/engine-pool.d.ts.map +1 -0
- package/dist/cjs/pool/engine-pool.js +75 -0
- package/dist/cjs/pool/engine-pool.js.map +1 -0
- package/dist/cjs/runtime/run-registry.d.ts +104 -0
- package/dist/cjs/runtime/run-registry.d.ts.map +1 -0
- package/dist/cjs/runtime/run-registry.js +261 -0
- package/dist/cjs/runtime/run-registry.js.map +1 -0
- package/dist/cjs/sandbox/types.d.ts +1 -1
- package/dist/cjs/sandbox/types.d.ts.map +1 -1
- package/dist/cjs/security/guard.js +2 -2
- package/dist/cjs/security/guard.js.map +1 -1
- package/dist/cjs/security/permission.d.ts +39 -0
- package/dist/cjs/security/permission.d.ts.map +1 -0
- package/dist/cjs/security/permission.js +111 -0
- package/dist/cjs/security/permission.js.map +1 -0
- package/dist/cjs/security/risk.d.ts +28 -0
- package/dist/cjs/security/risk.d.ts.map +1 -0
- package/dist/cjs/security/risk.js +148 -0
- package/dist/cjs/security/risk.js.map +1 -0
- package/dist/cjs/security/types.d.ts +1 -1
- package/dist/cjs/security/types.d.ts.map +1 -1
- package/dist/cjs/store/file-tool-result-store.d.ts +27 -0
- package/dist/cjs/store/file-tool-result-store.d.ts.map +1 -0
- package/dist/cjs/store/file-tool-result-store.js +166 -0
- package/dist/cjs/store/file-tool-result-store.js.map +1 -0
- package/dist/cjs/store/json-store.d.ts +54 -0
- package/dist/cjs/store/json-store.d.ts.map +1 -0
- package/dist/cjs/store/json-store.js +274 -0
- package/dist/cjs/store/json-store.js.map +1 -0
- package/dist/cjs/utils/data-dir.d.ts +27 -0
- package/dist/cjs/utils/data-dir.d.ts.map +1 -0
- package/dist/cjs/utils/data-dir.js +122 -0
- package/dist/cjs/utils/data-dir.js.map +1 -0
- package/dist/cjs/utils/event-collector.d.ts +13 -0
- package/dist/cjs/utils/event-collector.d.ts.map +1 -0
- package/dist/cjs/utils/event-collector.js +33 -0
- package/dist/cjs/utils/event-collector.js.map +1 -0
- package/dist/esm/a2a/client.d.ts +47 -0
- package/dist/esm/a2a/client.d.ts.map +1 -0
- package/dist/esm/a2a/client.js +174 -0
- package/dist/esm/a2a/client.js.map +1 -0
- package/dist/esm/a2a/index.d.ts +3 -0
- package/dist/esm/a2a/index.d.ts.map +1 -0
- package/dist/esm/a2a/index.js +5 -0
- package/dist/esm/a2a/index.js.map +1 -0
- package/dist/esm/a2a/types.d.ts +149 -0
- package/dist/esm/a2a/types.d.ts.map +1 -0
- package/dist/esm/a2a/types.js +7 -0
- package/dist/esm/a2a/types.js.map +1 -0
- package/dist/esm/index.d.ts +22 -0
- package/dist/esm/index.d.ts.map +1 -1
- package/dist/esm/index.js +20 -0
- package/dist/esm/index.js.map +1 -1
- package/dist/esm/middleware/audit-log.d.ts +22 -0
- package/dist/esm/middleware/audit-log.d.ts.map +1 -0
- package/dist/esm/middleware/audit-log.js +67 -0
- package/dist/esm/middleware/audit-log.js.map +1 -0
- package/dist/esm/middleware/timing.d.ts +25 -0
- package/dist/esm/middleware/timing.d.ts.map +1 -0
- package/dist/esm/middleware/timing.js +58 -0
- package/dist/esm/middleware/timing.js.map +1 -0
- package/dist/esm/middleware/tool-guard.d.ts +15 -0
- package/dist/esm/middleware/tool-guard.d.ts.map +1 -0
- package/dist/esm/middleware/tool-guard.js +27 -0
- package/dist/esm/middleware/tool-guard.js.map +1 -0
- package/dist/esm/observability/logger.d.ts +16 -0
- package/dist/esm/observability/logger.d.ts.map +1 -0
- package/dist/esm/observability/logger.js +31 -0
- package/dist/esm/observability/logger.js.map +1 -0
- package/dist/esm/pool/engine-pool.d.ts +22 -0
- package/dist/esm/pool/engine-pool.d.ts.map +1 -0
- package/dist/esm/pool/engine-pool.js +71 -0
- package/dist/esm/pool/engine-pool.js.map +1 -0
- package/dist/esm/runtime/run-registry.d.ts +104 -0
- package/dist/esm/runtime/run-registry.d.ts.map +1 -0
- package/dist/esm/runtime/run-registry.js +256 -0
- package/dist/esm/runtime/run-registry.js.map +1 -0
- package/dist/esm/sandbox/types.d.ts +1 -1
- package/dist/esm/sandbox/types.d.ts.map +1 -1
- package/dist/esm/security/guard.js +2 -2
- package/dist/esm/security/guard.js.map +1 -1
- package/dist/esm/security/permission.d.ts +39 -0
- package/dist/esm/security/permission.d.ts.map +1 -0
- package/dist/esm/security/permission.js +102 -0
- package/dist/esm/security/permission.js.map +1 -0
- package/dist/esm/security/risk.d.ts +28 -0
- package/dist/esm/security/risk.d.ts.map +1 -0
- package/dist/esm/security/risk.js +142 -0
- package/dist/esm/security/risk.js.map +1 -0
- package/dist/esm/security/types.d.ts +1 -1
- package/dist/esm/security/types.d.ts.map +1 -1
- package/dist/esm/store/file-tool-result-store.d.ts +27 -0
- package/dist/esm/store/file-tool-result-store.d.ts.map +1 -0
- package/dist/esm/store/file-tool-result-store.js +129 -0
- package/dist/esm/store/file-tool-result-store.js.map +1 -0
- package/dist/esm/store/json-store.d.ts +54 -0
- package/dist/esm/store/json-store.d.ts.map +1 -0
- package/dist/esm/store/json-store.js +236 -0
- package/dist/esm/store/json-store.js.map +1 -0
- package/dist/esm/utils/data-dir.d.ts +27 -0
- package/dist/esm/utils/data-dir.d.ts.map +1 -0
- package/dist/esm/utils/data-dir.js +80 -0
- package/dist/esm/utils/data-dir.js.map +1 -0
- package/dist/esm/utils/event-collector.d.ts +13 -0
- package/dist/esm/utils/event-collector.d.ts.map +1 -0
- package/dist/esm/utils/event-collector.js +30 -0
- package/dist/esm/utils/event-collector.js.map +1 -0
- package/package.json +1 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"run-registry.js","sourceRoot":"","sources":["../../../src/runtime/run-registry.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8BAA8B;AAC9B,kCAAkC;AAClC,+DAA+D;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAgEtD,eAAe;AACf,MAAM,OAAO,qBAAqB;IACxB,SAAS,GAAkB,EAAE,CAAC;IAEtC,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,QAAqB;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;aAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC;aACnD,MAAM,CAAC,QAAQ,CAAC;aAChB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,QAAyB;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC7E,CAAC;CACF;AAED,eAAe;AAEf,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACvC,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,MAAM,OAAO,WAAW;IACd,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC7C,aAAa,CAAgB;IAC7B,YAAY,GAA0C,IAAI,CAAC;IAEnE,YAAY,KAAqB;QAC/B,IAAI,CAAC,aAAa,GAAG,KAAK,IAAI,IAAI,qBAAqB,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,eAAe;IACf,QAAQ,CAAC,QAAyB,EAAE,SAAiB,EAAE,OAAgB;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9C,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,uBAAuB,CAAC;YACzC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACjF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,GAAG,GAAc;YACrB,QAAQ;YACR,SAAS;YACT,OAAO;YACP,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,CAAC;YACZ,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,QAAQ,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,CAAC,QAAyB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,YAAY,CAAC,QAAyB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;IAC3C,CAAC;IAED,uBAAuB;IACvB,QAAQ,CAAC,QAAyB,EAAE,KAAa,EAAE,IAAS;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,QAAQ,GAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAChD,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/B,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,SAAS;gBACZ,GAAG,CAAC,WAAW,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1D,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,CAAC,aAAa,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,CAAC,aAAa,EAAE,CAAC;gBACpB,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;oBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,SAAS;iBAClB,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;gBACrE,IAAI,EAAE,EAAE,CAAC;oBACP,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC7C,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;oBACxB,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;oBACtB,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC9B,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,WAAW;gBACd,IAAI,IAAI,EAAE,SAAS,KAAK,YAAY,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;oBACnD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,IAA0B,CAAC,CAAC;oBAC5D,IAAK,IAAI,CAAC,IAA2B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC1D,GAAG,CAAC,eAAe,GAAI,IAAI,CAAC,IAA2B,CAAC,EAAE,CAAC;oBAC7D,CAAC;gBACH,CAAC;gBACD,MAAM;QACV,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,CAAC,QAAyB,EAAE,MAAwB,EAAE,KAAc;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,IAAI,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,QAAQ,CAAC;YACP,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,YAAY,CAAC,QAAyB,EAAE,KAAa;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,YAAY,CAAC,QAAyB,EAAE,SAA0B;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,QAAyB,EAAE,QAAyB;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAC1B,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,iBAAiB,CAAC,QAAyB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,cAAc,CAAC,QAAyB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;IACpF,CAAC;IAED,gBAAgB;QACd,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;QACvD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1F,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IAED,mBAAmB,CAAC,QAAyB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;QACzF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,kBAAkB,CAAC,QAAyB,EAAE,OAAe;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,QAAyB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,kBAAkB;QAChB,MAAM,GAAG,GAAwB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,iBAAiB;IAET,gBAAgB,CAAC,GAAc,EAAE,UAA8B;QACrE,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,GAAc,EAAE,GAAkB;QAC1D,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,GAAc;QAC/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,GAAG,GAAG,CAAC;QAC3D,OAAO,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACpD,CAAC;IAEO,UAAU,CAAC,GAAc;QAC/B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,eAAe,EAAE,CAAC;oBACxE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}
|
|
@@ -2,7 +2,7 @@ import type { SecurityRule } from '../security/types.ts';
|
|
|
2
2
|
import type { ShellExecutor, FileSystemExecutor } from '../tool/types.ts';
|
|
3
3
|
/** 沙箱配置 */
|
|
4
4
|
export interface SandboxConfig {
|
|
5
|
-
/** 沙箱根目录(默认 ~/.
|
|
5
|
+
/** 沙箱根目录(默认 ~/.workai/sandboxes/{id}) */
|
|
6
6
|
rootDir: string;
|
|
7
7
|
/** 允许的文件扩展名(脚本执行用),空 = 不限制 */
|
|
8
8
|
allowedExtensions?: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI1E,WAAW;AACX,MAAM,WAAW,aAAa;IAC5B,
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/sandbox/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI1E,WAAW;AACX,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,aAAa;AACb,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,aAAa,CAIzD,CAAC;AAIF,aAAa;AACb,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3D,aAAa;AACb,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sBAAsB;IACtB,gBAAgB,IAAI,aAAa,CAAC;IAClC,mBAAmB;IACnB,qBAAqB,IAAI,kBAAkB,CAAC;IAC5C;;;;;OAKG;IACH,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,mBAAmB;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAID,cAAc;AACd,MAAM,WAAW,cAAc;IAC7B,WAAW;IACX,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,eAAe;IACf,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACrC,aAAa;IACb,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,aAAa;IACb,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAID;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,YAAY,EAyFlD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAezC,CAAC"}
|
|
@@ -16,8 +16,8 @@ const CREDENTIAL_PATTERNS = [
|
|
|
16
16
|
/** 默认安全策略 */
|
|
17
17
|
const DEFAULT_POLICY = {
|
|
18
18
|
deleteProtection: true,
|
|
19
|
-
trashDir: '~/.
|
|
20
|
-
winTrashDir: '$env:USERPROFILE\\.
|
|
19
|
+
trashDir: '~/.workai/.trash',
|
|
20
|
+
winTrashDir: '$env:USERPROFILE\\.workai\\.trash',
|
|
21
21
|
platform: 'unix',
|
|
22
22
|
blacklistEnabled: true,
|
|
23
23
|
rules: [],
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAClG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC5G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mGAAmG,EAAE;CACtI,CAAC;AAEF,aAAa;AACb,MAAM,cAAc,GAAmB;IACrC,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,
|
|
1
|
+
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/security/guard.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;AAI/D,eAAe;AACf,MAAM,mBAAmB,GAA6C;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAClG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC5G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mGAAmG,EAAE;CACtI,CAAC;AAEF,aAAa;AACb,MAAM,cAAc,GAAmB;IACrC,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,IAAI;IACtB,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,cAAc;AACd,MAAM,iBAAiB,GAAmB;IACxC,iBAAiB;IACjB;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iBAAiB;KAC/B;IACD,oBAAoB;IACpB;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC;AAEF,wDAAwD;AACxD,SAAS,0BAA0B,CAAC,QAAgB;IAClD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,YAAY,QAAQ,UAAU,OAAO,IAAI,QAAQ,SAAS,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,WAAW,EAAE,8CAA8C;KAC5D,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,SAAS,iCAAiC,CAAC,WAAmB;IAC5D,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;iBACrB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;iBACzB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;iBACvB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;iBACjC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,IAAI,EAAE,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO,8CAA8C,WAAW,iCAAiC,OAAO,kBAAkB,WAAW,UAAU,EAAE,UAAU,CAAC;QAC9J,CAAC;QACD,WAAW,EAAE,wEAAwE;KACtF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,MAAM,CAAiB;IAE/B,uCAAuC;IAC/B,iBAAiB,GAA0B,IAAI,CAAC;IAChD,qBAAqB,GAA0B,IAAI,CAAC;IACpD,kBAAkB,GAA0B,IAAI,CAAC;IACzD,iCAAiC;IACzB,oBAAoB,CAAe;IACnC,2BAA2B,CAAsB;IAEzD,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YACxD,CAAC,CAAC,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5D,CAAC,CAAC,iCAAiC,CAAC,cAAc,CAAC,WAAY,CAAC,CAAC;QACnE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,2BAA2B;IACnB,uBAAuB;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACjC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,cAAc;IACd,QAAQ,CAAC,OAAe;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAElC,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO;wBACL,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;wBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;YAEhD,eAAe;YACf,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACxF,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACjE,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBACzE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,uEAAuE;wBAC/E,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,YAAY;YACZ,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAS,CAAC,UAAU,CAAC,CAAC;oBAClE,OAAO;wBACL,IAAI,EAAE,IAAI;wBACV,SAAS;wBACT,MAAM,EAAE,6CAA6C;wBACrD,QAAQ,EAAE,MAAM;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,SAAS;YAChD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI,CAAC,QAAS,CAAC,UAAU,CAAC;gBACrC,MAAM,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,YAAY,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;oBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;IACX,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS,CAAC,MAA+B;QACvC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,2BAA2B,GAAG,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED,aAAa;IACb,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,mBAAmB;IAEnB;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACpD,wBAAwB;YACxB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IAET,SAAS,CAAC,OAAe,EAAE,IAAkB;QACnD,IAAI,IAAI,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
import type { ToolRiskAssessment } from './risk.ts';
|
|
2
|
+
export type PermissionDecision = 'pending' | 'approved' | 'rejected' | 'expired';
|
|
3
|
+
export interface PermissionRequest {
|
|
4
|
+
id: string;
|
|
5
|
+
sessionId: string;
|
|
6
|
+
iteration?: number;
|
|
7
|
+
tool: string;
|
|
8
|
+
args: Record<string, unknown>;
|
|
9
|
+
risk: ToolRiskAssessment;
|
|
10
|
+
status: PermissionDecision;
|
|
11
|
+
reason?: string;
|
|
12
|
+
createdAt: number;
|
|
13
|
+
updatedAt: number;
|
|
14
|
+
expiresAt: number;
|
|
15
|
+
}
|
|
16
|
+
/** 权限存储接口(上层实现持久化) */
|
|
17
|
+
export interface PermissionStore {
|
|
18
|
+
readAll(): PermissionRequest[];
|
|
19
|
+
writeAll(items: PermissionRequest[]): void;
|
|
20
|
+
}
|
|
21
|
+
/** 内存权限存储(默认实现,进程重启丢失) */
|
|
22
|
+
export declare class InMemoryPermissionStore implements PermissionStore {
|
|
23
|
+
private items;
|
|
24
|
+
readAll(): PermissionRequest[];
|
|
25
|
+
writeAll(items: PermissionRequest[]): void;
|
|
26
|
+
}
|
|
27
|
+
/** 配置权限管理器 */
|
|
28
|
+
export declare function configurePermissionManager(options: {
|
|
29
|
+
store?: PermissionStore;
|
|
30
|
+
defaultTtlMs?: number;
|
|
31
|
+
autoAllowApprovedRetry?: boolean;
|
|
32
|
+
}): void;
|
|
33
|
+
export declare function createPermissionRequest(input: Omit<PermissionRequest, 'id' | 'status' | 'createdAt' | 'updatedAt' | 'expiresAt'> & {
|
|
34
|
+
ttlMs?: number;
|
|
35
|
+
}): PermissionRequest;
|
|
36
|
+
export declare function listPermissionRequests(status?: PermissionDecision): PermissionRequest[];
|
|
37
|
+
export declare function findApprovedPermission(sessionId: string, tool: string, args: Record<string, unknown>): PermissionRequest | null;
|
|
38
|
+
export declare function decidePermissionRequest(id: string, approved: boolean, reason?: string): PermissionRequest | null;
|
|
39
|
+
//# sourceMappingURL=permission.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../../src/security/permission.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sBAAsB;AACtB,MAAM,WAAW,eAAe;IAC9B,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;CAC5C;AAED,0BAA0B;AAC1B,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,OAAO,CAAC,KAAK,CAA2B;IAExC,OAAO,IAAI,iBAAiB,EAAE;IAI9B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI;CAG3C;AAQD,cAAc;AACd,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,GAAG,IAAI,CAIP;AA2BD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7G,iBAAiB,CAmBnB;AAED,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,iBAAiB,EAAE,CAGvF;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,GAAG,IAAI,CAU/H;AAED,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAehH"}
|
|
@@ -0,0 +1,102 @@
|
|
|
1
|
+
// ============================================================
|
|
2
|
+
// Permission — 工具审批请求管理
|
|
3
|
+
// ============================================================
|
|
4
|
+
/** 内存权限存储(默认实现,进程重启丢失) */
|
|
5
|
+
export class InMemoryPermissionStore {
|
|
6
|
+
items = [];
|
|
7
|
+
readAll() {
|
|
8
|
+
return [...this.items];
|
|
9
|
+
}
|
|
10
|
+
writeAll(items) {
|
|
11
|
+
this.items = items;
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
// ---- 核心逻辑 ----
|
|
15
|
+
let _store = new InMemoryPermissionStore();
|
|
16
|
+
let _defaultTtlMs = 10 * 60 * 1000;
|
|
17
|
+
let _autoAllowApprovedRetry = true;
|
|
18
|
+
/** 配置权限管理器 */
|
|
19
|
+
export function configurePermissionManager(options) {
|
|
20
|
+
if (options.store)
|
|
21
|
+
_store = options.store;
|
|
22
|
+
if (options.defaultTtlMs !== undefined)
|
|
23
|
+
_defaultTtlMs = options.defaultTtlMs;
|
|
24
|
+
if (options.autoAllowApprovedRetry !== undefined)
|
|
25
|
+
_autoAllowApprovedRetry = options.autoAllowApprovedRetry;
|
|
26
|
+
}
|
|
27
|
+
function readAll() {
|
|
28
|
+
const now = Date.now();
|
|
29
|
+
const items = _store.readAll().map(item => {
|
|
30
|
+
if (item.status === 'pending' && item.expiresAt <= now) {
|
|
31
|
+
return { ...item, status: 'expired', updatedAt: now };
|
|
32
|
+
}
|
|
33
|
+
return item;
|
|
34
|
+
});
|
|
35
|
+
_store.writeAll(items);
|
|
36
|
+
return items;
|
|
37
|
+
}
|
|
38
|
+
function stableJson(value) {
|
|
39
|
+
if (Array.isArray(value))
|
|
40
|
+
return `[${value.map(stableJson).join(',')}]`;
|
|
41
|
+
if (value && typeof value === 'object') {
|
|
42
|
+
const obj = value;
|
|
43
|
+
return `{${Object.keys(obj).sort().map(key => `${JSON.stringify(key)}:${stableJson(obj[key])}`).join(',')}}`;
|
|
44
|
+
}
|
|
45
|
+
return JSON.stringify(value);
|
|
46
|
+
}
|
|
47
|
+
function sameArgs(a, b) {
|
|
48
|
+
return stableJson(a || {}) === stableJson(b || {});
|
|
49
|
+
}
|
|
50
|
+
export function createPermissionRequest(input) {
|
|
51
|
+
const now = Date.now();
|
|
52
|
+
const ttlMs = input.ttlMs || _defaultTtlMs;
|
|
53
|
+
const request = {
|
|
54
|
+
id: `${now}_${Math.random().toString(36).slice(2, 10)}`,
|
|
55
|
+
sessionId: input.sessionId,
|
|
56
|
+
iteration: input.iteration,
|
|
57
|
+
tool: input.tool,
|
|
58
|
+
args: input.args,
|
|
59
|
+
risk: input.risk,
|
|
60
|
+
status: 'pending',
|
|
61
|
+
createdAt: now,
|
|
62
|
+
updatedAt: now,
|
|
63
|
+
expiresAt: now + ttlMs,
|
|
64
|
+
};
|
|
65
|
+
const items = readAll();
|
|
66
|
+
items.push(request);
|
|
67
|
+
_store.writeAll(items);
|
|
68
|
+
return request;
|
|
69
|
+
}
|
|
70
|
+
export function listPermissionRequests(status) {
|
|
71
|
+
const items = readAll().sort((a, b) => b.createdAt - a.createdAt);
|
|
72
|
+
return status ? items.filter(item => item.status === status) : items;
|
|
73
|
+
}
|
|
74
|
+
export function findApprovedPermission(sessionId, tool, args) {
|
|
75
|
+
if (!_autoAllowApprovedRetry)
|
|
76
|
+
return null;
|
|
77
|
+
const now = Date.now();
|
|
78
|
+
return readAll().find(item => item.status === 'approved' &&
|
|
79
|
+
item.expiresAt > now &&
|
|
80
|
+
item.sessionId === sessionId &&
|
|
81
|
+
item.tool === tool &&
|
|
82
|
+
sameArgs(item.args, args)) || null;
|
|
83
|
+
}
|
|
84
|
+
export function decidePermissionRequest(id, approved, reason) {
|
|
85
|
+
const items = readAll();
|
|
86
|
+
const index = items.findIndex(item => item.id === id);
|
|
87
|
+
if (index === -1)
|
|
88
|
+
return null;
|
|
89
|
+
const current = items[index];
|
|
90
|
+
if (current.status !== 'pending')
|
|
91
|
+
return current;
|
|
92
|
+
const updated = {
|
|
93
|
+
...current,
|
|
94
|
+
status: approved ? 'approved' : 'rejected',
|
|
95
|
+
reason,
|
|
96
|
+
updatedAt: Date.now(),
|
|
97
|
+
};
|
|
98
|
+
items[index] = updated;
|
|
99
|
+
_store.writeAll(items);
|
|
100
|
+
return updated;
|
|
101
|
+
}
|
|
102
|
+
//# sourceMappingURL=permission.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../../src/security/permission.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wBAAwB;AACxB,+DAA+D;AA0B/D,0BAA0B;AAC1B,MAAM,OAAO,uBAAuB;IAC1B,KAAK,GAAwB,EAAE,CAAC;IAExC,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,QAAQ,CAAC,KAA0B;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,iBAAiB;AAEjB,IAAI,MAAM,GAAoB,IAAI,uBAAuB,EAAE,CAAC;AAC5D,IAAI,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,IAAI,uBAAuB,GAAG,IAAI,CAAC;AAEnC,cAAc;AACd,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1C,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAC7E,IAAI,OAAO,CAAC,sBAAsB,KAAK,SAAS;QAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;AAC7G,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,CAA0B,EAAE,CAA0B;IACtE,OAAO,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAA8G;IAE9G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,aAAa,CAAC;IAC3C,MAAM,OAAO,GAAsB;QACjC,EAAE,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,KAAK;KACvB,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA2B;IAChE,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,IAAY,EAAE,IAA6B;IACnG,IAAI,CAAC,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3B,IAAI,CAAC,MAAM,KAAK,UAAU;QAC1B,IAAI,CAAC,SAAS,GAAG,GAAG;QACpB,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,IAAI,CAAC,IAAI,KAAK,IAAI;QAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAC1B,IAAI,IAAI,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAU,EAAE,QAAiB,EAAE,MAAe;IACpF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjD,MAAM,OAAO,GAAsB;QACjC,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QAC1C,MAAM;QACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACvB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
export type ToolRiskLevel = 'low' | 'medium' | 'high' | 'critical';
|
|
2
|
+
export interface ToolRiskAssessment {
|
|
3
|
+
level: ToolRiskLevel;
|
|
4
|
+
score: number;
|
|
5
|
+
reasons: string[];
|
|
6
|
+
requiresConfirmation: boolean;
|
|
7
|
+
}
|
|
8
|
+
/** 工具安全策略(从上层注入) */
|
|
9
|
+
export interface ToolSecurityPolicy {
|
|
10
|
+
allowTools: string[];
|
|
11
|
+
denyTools: string[];
|
|
12
|
+
toolBaseRisk: Record<string, ToolRiskLevel>;
|
|
13
|
+
dangerousPatterns: Array<{
|
|
14
|
+
pattern: string;
|
|
15
|
+
reason: string;
|
|
16
|
+
level: ToolRiskLevel;
|
|
17
|
+
}>;
|
|
18
|
+
}
|
|
19
|
+
/** 策略提供者接口(上层实现) */
|
|
20
|
+
export type ToolSecurityPolicyProvider = () => ToolSecurityPolicy;
|
|
21
|
+
/** 低风险快速判定:不在基础风险表 + 非 MCP 工具 → 始终 low */
|
|
22
|
+
export declare function isLowRiskTool(tool: string): boolean;
|
|
23
|
+
/** 清除风险评估缓存(策略变更时调用) */
|
|
24
|
+
export declare function clearRiskCache(): void;
|
|
25
|
+
/** 注册策略提供者(上层应用启动时调用) */
|
|
26
|
+
export declare function setToolSecurityPolicyProvider(provider: ToolSecurityPolicyProvider): void;
|
|
27
|
+
export declare function assessToolRisk(tool: string, args?: Record<string, unknown>): ToolRiskAssessment;
|
|
28
|
+
//# sourceMappingURL=risk.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/security/risk.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEnE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,oBAAoB;AACpB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C,iBAAiB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;CACrF;AAED,oBAAoB;AACpB,MAAM,MAAM,0BAA0B,GAAG,MAAM,kBAAkB,CAAC;AAwClE,0CAA0C;AAC1C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAwB;AACxB,wBAAgB,cAAc,IAAI,IAAI,CAErC;AA4BD,yBAAyB;AACzB,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAExF;AASD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,kBAAkB,CAqE/F"}
|
|
@@ -0,0 +1,142 @@
|
|
|
1
|
+
// ============================================================
|
|
2
|
+
// ToolRisk — 工具风险评估引擎
|
|
3
|
+
// ============================================================
|
|
4
|
+
// ---- 内置默认值 ----
|
|
5
|
+
const TOOL_BASE_RISK = {
|
|
6
|
+
execute_command: 'medium',
|
|
7
|
+
run_script: 'medium',
|
|
8
|
+
write_file: 'medium',
|
|
9
|
+
append_file: 'medium',
|
|
10
|
+
delete_file: 'high',
|
|
11
|
+
delegate_task: 'medium',
|
|
12
|
+
};
|
|
13
|
+
const DESTRUCTIVE_PATTERNS = [
|
|
14
|
+
{ pattern: /\brm\s+-rf\b|\brm\s+-fr\b/i, reason: 'recursive force delete', level: 'critical' },
|
|
15
|
+
{ pattern: /\bsudo\b/i, reason: 'privileged command', level: 'high' },
|
|
16
|
+
{ pattern: /\bchmod\s+777\b/i, reason: 'broad permission change', level: 'high' },
|
|
17
|
+
{ pattern: /\b(chown|chmod)\b/i, reason: 'permission or ownership change', level: 'medium' },
|
|
18
|
+
{ pattern: /\b(drop|truncate)\s+(table|database)\b/i, reason: 'destructive database operation', level: 'critical' },
|
|
19
|
+
{ pattern: /\b(delete|update)\s+.+\bwhere\b/i, reason: 'database mutation', level: 'high' },
|
|
20
|
+
{ pattern: /\b(curl|wget)\b.+\|\s*(sh|bash|zsh)\b/i, reason: 'remote script execution', level: 'critical' },
|
|
21
|
+
{ pattern: /\bkill(all)?\b|\bpkill\b/i, reason: 'process termination', level: 'high' },
|
|
22
|
+
{ pattern: /\bmv\b.+\/(etc|usr|bin|sbin|var)\b/i, reason: 'system path mutation', level: 'high' },
|
|
23
|
+
];
|
|
24
|
+
const LEVEL_SCORE = {
|
|
25
|
+
low: 1,
|
|
26
|
+
medium: 2,
|
|
27
|
+
high: 3,
|
|
28
|
+
critical: 4,
|
|
29
|
+
};
|
|
30
|
+
// ---- 风险评估缓存 ----
|
|
31
|
+
const _riskCache = new Map();
|
|
32
|
+
const RISK_CACHE_TTL = 5000; // 5s
|
|
33
|
+
/** 有显式基础风险的工具(需要完整正则检查) */
|
|
34
|
+
const TOOLS_NEED_DEEP_CHECK = new Set(Object.keys(TOOL_BASE_RISK));
|
|
35
|
+
/** 低风险快速判定:不在基础风险表 + 非 MCP 工具 → 始终 low */
|
|
36
|
+
export function isLowRiskTool(tool) {
|
|
37
|
+
return !TOOLS_NEED_DEEP_CHECK.has(tool) && !tool.startsWith('mcp_');
|
|
38
|
+
}
|
|
39
|
+
/** 清除风险评估缓存(策略变更时调用) */
|
|
40
|
+
export function clearRiskCache() {
|
|
41
|
+
_riskCache.clear();
|
|
42
|
+
}
|
|
43
|
+
function maxLevel(a, b) {
|
|
44
|
+
return LEVEL_SCORE[a] >= LEVEL_SCORE[b] ? a : b;
|
|
45
|
+
}
|
|
46
|
+
function stringifyArgs(args) {
|
|
47
|
+
if (!args)
|
|
48
|
+
return '';
|
|
49
|
+
try {
|
|
50
|
+
return JSON.stringify(args);
|
|
51
|
+
}
|
|
52
|
+
catch {
|
|
53
|
+
return String(args);
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
function isSystemTempPath(target) {
|
|
57
|
+
return /^(\/tmp\/|\/private\/tmp\/|\/var\/folders\/)/.test(target);
|
|
58
|
+
}
|
|
59
|
+
function isSafeTempWrite(target) {
|
|
60
|
+
if (!isSystemTempPath(target))
|
|
61
|
+
return false;
|
|
62
|
+
return /\.(cjs|mjs|js|json|txt|md|html|csv|tsv|tmp|b64)$/i.test(target);
|
|
63
|
+
}
|
|
64
|
+
// ---- 策略注入 ----
|
|
65
|
+
let _policyProvider = null;
|
|
66
|
+
/** 注册策略提供者(上层应用启动时调用) */
|
|
67
|
+
export function setToolSecurityPolicyProvider(provider) {
|
|
68
|
+
_policyProvider = provider;
|
|
69
|
+
}
|
|
70
|
+
function getPolicy() {
|
|
71
|
+
if (_policyProvider)
|
|
72
|
+
return _policyProvider();
|
|
73
|
+
return { allowTools: [], denyTools: [], toolBaseRisk: {}, dangerousPatterns: [] };
|
|
74
|
+
}
|
|
75
|
+
// ---- 核心评估函数 ----
|
|
76
|
+
export function assessToolRisk(tool, args) {
|
|
77
|
+
const cacheKey = tool;
|
|
78
|
+
const cached = _riskCache.get(cacheKey);
|
|
79
|
+
if (cached && Date.now() - cached.ts < RISK_CACHE_TTL)
|
|
80
|
+
return cached.result;
|
|
81
|
+
const policy = getPolicy();
|
|
82
|
+
// 低风险快速路径
|
|
83
|
+
if (isLowRiskTool(tool)) {
|
|
84
|
+
if (policy.denyTools.includes(tool)) {
|
|
85
|
+
const result = { level: 'critical', score: 4, reasons: ['tool is denied by security policy'], requiresConfirmation: true };
|
|
86
|
+
_riskCache.set(cacheKey, { result, ts: Date.now() });
|
|
87
|
+
return result;
|
|
88
|
+
}
|
|
89
|
+
const result = { level: 'low', score: 1, reasons: ['read-only or low-impact operation'], requiresConfirmation: false };
|
|
90
|
+
_riskCache.set(cacheKey, { result, ts: Date.now() });
|
|
91
|
+
return result;
|
|
92
|
+
}
|
|
93
|
+
// 完整评估路径
|
|
94
|
+
const baseRisk = policy.toolBaseRisk[tool] || TOOL_BASE_RISK[tool];
|
|
95
|
+
let level = baseRisk || (tool.startsWith('mcp_') ? 'medium' : 'low');
|
|
96
|
+
const reasons = [];
|
|
97
|
+
const argText = stringifyArgs(args);
|
|
98
|
+
if (baseRisk)
|
|
99
|
+
reasons.push(`base risk: ${baseRisk}`);
|
|
100
|
+
if (policy.denyTools.includes(tool)) {
|
|
101
|
+
level = 'critical';
|
|
102
|
+
reasons.push('tool is denied by security policy');
|
|
103
|
+
}
|
|
104
|
+
if (policy.allowTools.includes(tool)) {
|
|
105
|
+
level = 'low';
|
|
106
|
+
reasons.push('tool is allowlisted by security policy');
|
|
107
|
+
}
|
|
108
|
+
if (tool.startsWith('mcp_'))
|
|
109
|
+
reasons.push('external MCP tool');
|
|
110
|
+
const customPatterns = policy.dangerousPatterns.map(rule => ({ ...rule, pattern: new RegExp(rule.pattern, 'i') }));
|
|
111
|
+
for (const rule of [...DESTRUCTIVE_PATTERNS, ...customPatterns]) {
|
|
112
|
+
if (rule.pattern.test(argText)) {
|
|
113
|
+
level = maxLevel(level, rule.level);
|
|
114
|
+
reasons.push(rule.reason);
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
if (tool === 'write_file' || tool === 'append_file') {
|
|
118
|
+
const target = String(args?.path || args?.filePath || '');
|
|
119
|
+
if (/^(\/|~\/)|\.\./.test(target)) {
|
|
120
|
+
if (isSafeTempWrite(target)) {
|
|
121
|
+
reasons.push('temporary file write');
|
|
122
|
+
}
|
|
123
|
+
else {
|
|
124
|
+
level = maxLevel(level, 'high');
|
|
125
|
+
reasons.push('writes outside simple relative path');
|
|
126
|
+
}
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
if (tool === 'delete_file') {
|
|
130
|
+
level = maxLevel(level, 'high');
|
|
131
|
+
reasons.push('file deletion');
|
|
132
|
+
}
|
|
133
|
+
const result = {
|
|
134
|
+
level,
|
|
135
|
+
score: LEVEL_SCORE[level],
|
|
136
|
+
reasons: reasons.length ? [...new Set(reasons)] : ['read-only or low-impact operation'],
|
|
137
|
+
requiresConfirmation: level === 'high' || level === 'critical',
|
|
138
|
+
};
|
|
139
|
+
_riskCache.set(cacheKey, { result, ts: Date.now() });
|
|
140
|
+
return result;
|
|
141
|
+
}
|
|
142
|
+
//# sourceMappingURL=risk.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/security/risk.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sBAAsB;AACtB,+DAA+D;AAsB/D,kBAAkB;AAElB,MAAM,cAAc,GAAkC;IACpD,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,QAAQ;IACpB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,QAAQ;CACxB,CAAC;AAEF,MAAM,oBAAoB,GAAqE;IAC7F,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,UAAU,EAAE;IAC9F,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE;IACrE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE;IACjF,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC5F,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,UAAU,EAAE;IACnH,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE;IAC3F,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,UAAU,EAAE;IAC3G,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE;IACtF,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE;CAClG,CAAC;AAEF,MAAM,WAAW,GAAkC;IACjD,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,mBAAmB;AAEnB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsD,CAAC;AACjF,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,KAAK;AAElC,2BAA2B;AAC3B,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;AAEnE,0CAA0C;AAC1C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAgB,EAAE,CAAgB;IAClD,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,IAA8B;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,8CAA8C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,iBAAiB;AAEjB,IAAI,eAAe,GAAsC,IAAI,CAAC;AAE9D,yBAAyB;AACzB,MAAM,UAAU,6BAA6B,CAAC,QAAoC;IAChF,eAAe,GAAG,QAAQ,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,eAAe;QAAE,OAAO,eAAe,EAAE,CAAC;IAC9C,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,mBAAmB;AAEnB,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAA8B;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,cAAc;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAE5E,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,UAAU;IACV,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,GAAuB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;YAC/I,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAuB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;QAC3I,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS;IACT,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,KAAK,GAAG,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,KAAK,GAAG,UAAU,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,GAAG,KAAK,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAE/D,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnH,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,oBAAoB,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAuB;QACjC,KAAK;QACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;QACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC;QACvF,oBAAoB,EAAE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU;KAC/D,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -28,7 +28,7 @@ export interface SecurityPolicy {
|
|
|
28
28
|
deleteProtection: boolean;
|
|
29
29
|
/** 回收站路径(Unix 用) */
|
|
30
30
|
trashDir: string;
|
|
31
|
-
/** Windows 回收站路径(默认 %USERPROFILE%\.
|
|
31
|
+
/** Windows 回收站路径(默认 %USERPROFILE%\.workai\.trash) */
|
|
32
32
|
winTrashDir?: string;
|
|
33
33
|
/** 目标平台,影响安全检查规则集(默认 'unix') */
|
|
34
34
|
platform?: 'unix' | 'windows' | 'auto';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,aAAa;IACb,IAAI,EAAE,OAAO,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IACjD,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,cAAc;IACd,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY;IACZ,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
import type { ToolResultStore, OffloadEntry } from '../agent/types.ts';
|
|
2
|
+
export interface FileToolResultStoreOptions {
|
|
3
|
+
/** 工具结果存储目录(默认 {cwd}/data/tool-results) */
|
|
4
|
+
storeDir: string;
|
|
5
|
+
/** 上下文卸载存储目录(默认 {cwd}/data/offload) */
|
|
6
|
+
offloadDir: string;
|
|
7
|
+
}
|
|
8
|
+
/**
|
|
9
|
+
* 基于文件系统的工具结果存储
|
|
10
|
+
* 将超大工具结果写入 {storeDir}/{callId}.json
|
|
11
|
+
*/
|
|
12
|
+
export declare class FileToolResultStore implements ToolResultStore {
|
|
13
|
+
private storeDir;
|
|
14
|
+
private offloadDir;
|
|
15
|
+
constructor(options: FileToolResultStoreOptions);
|
|
16
|
+
write(callId: string, content: string): string;
|
|
17
|
+
read(callId: string): string | null;
|
|
18
|
+
has(callId: string): boolean;
|
|
19
|
+
delete(callId: string): boolean;
|
|
20
|
+
writeOffload(entry: Omit<OffloadEntry, 'filePath'>, content: string): string;
|
|
21
|
+
readOffload(nodeId: string): string | null;
|
|
22
|
+
listOffloads(sessionId: string): OffloadEntry[];
|
|
23
|
+
/** 清理过期结果(默认超过 24 小时) */
|
|
24
|
+
cleanup(maxAgeMs?: number): number;
|
|
25
|
+
private getFilePath;
|
|
26
|
+
}
|
|
27
|
+
//# sourceMappingURL=file-tool-result-store.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"file-tool-result-store.d.ts","sourceRoot":"","sources":["../../../src/store/file-tool-result-store.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEvE,MAAM,WAAW,0BAA0B;IACzC,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,EAAE,0BAA0B;IAW/C,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAY9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAYnC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI5B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAW/B,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAoB5E,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAa1C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAU/C,yBAAyB;IACzB,OAAO,CAAC,QAAQ,GAAE,MAA4B,GAAG,MAAM;IAkBvD,OAAO,CAAC,WAAW;CAIpB"}
|
|
@@ -0,0 +1,129 @@
|
|
|
1
|
+
// ============================================================
|
|
2
|
+
// FileToolResultStore — 基于文件系统的工具结果存储 + 上下文卸载
|
|
3
|
+
// ============================================================
|
|
4
|
+
import * as fs from 'fs';
|
|
5
|
+
import * as path from 'path';
|
|
6
|
+
/**
|
|
7
|
+
* 基于文件系统的工具结果存储
|
|
8
|
+
* 将超大工具结果写入 {storeDir}/{callId}.json
|
|
9
|
+
*/
|
|
10
|
+
export class FileToolResultStore {
|
|
11
|
+
storeDir;
|
|
12
|
+
offloadDir;
|
|
13
|
+
constructor(options) {
|
|
14
|
+
this.storeDir = options.storeDir;
|
|
15
|
+
this.offloadDir = options.offloadDir;
|
|
16
|
+
if (!fs.existsSync(this.storeDir)) {
|
|
17
|
+
fs.mkdirSync(this.storeDir, { recursive: true });
|
|
18
|
+
}
|
|
19
|
+
if (!fs.existsSync(this.offloadDir)) {
|
|
20
|
+
fs.mkdirSync(this.offloadDir, { recursive: true });
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
write(callId, content) {
|
|
24
|
+
const filePath = this.getFilePath(callId);
|
|
25
|
+
const data = {
|
|
26
|
+
callId,
|
|
27
|
+
size: content.length,
|
|
28
|
+
createdAt: new Date().toISOString(),
|
|
29
|
+
content,
|
|
30
|
+
};
|
|
31
|
+
fs.writeFileSync(filePath, JSON.stringify(data), 'utf-8');
|
|
32
|
+
return filePath;
|
|
33
|
+
}
|
|
34
|
+
read(callId) {
|
|
35
|
+
const filePath = this.getFilePath(callId);
|
|
36
|
+
try {
|
|
37
|
+
if (!fs.existsSync(filePath))
|
|
38
|
+
return null;
|
|
39
|
+
const raw = fs.readFileSync(filePath, 'utf-8');
|
|
40
|
+
const data = JSON.parse(raw);
|
|
41
|
+
return data.content || null;
|
|
42
|
+
}
|
|
43
|
+
catch {
|
|
44
|
+
return null;
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
has(callId) {
|
|
48
|
+
return fs.existsSync(this.getFilePath(callId));
|
|
49
|
+
}
|
|
50
|
+
delete(callId) {
|
|
51
|
+
const filePath = this.getFilePath(callId);
|
|
52
|
+
try {
|
|
53
|
+
if (fs.existsSync(filePath)) {
|
|
54
|
+
fs.unlinkSync(filePath);
|
|
55
|
+
return true;
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
catch { /* ignore */ }
|
|
59
|
+
return false;
|
|
60
|
+
}
|
|
61
|
+
writeOffload(entry, content) {
|
|
62
|
+
const sessionDir = path.join(this.offloadDir, entry.sessionId);
|
|
63
|
+
if (!fs.existsSync(sessionDir)) {
|
|
64
|
+
fs.mkdirSync(sessionDir, { recursive: true });
|
|
65
|
+
}
|
|
66
|
+
const filePath = path.join(sessionDir, `${entry.nodeId}.md`);
|
|
67
|
+
fs.writeFileSync(filePath, content, 'utf-8');
|
|
68
|
+
const indexPath = path.join(sessionDir, '_index.json');
|
|
69
|
+
let index = [];
|
|
70
|
+
try {
|
|
71
|
+
if (fs.existsSync(indexPath)) {
|
|
72
|
+
index = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
catch { /* 索引损坏时重置 */ }
|
|
76
|
+
const fullEntry = { ...entry, filePath };
|
|
77
|
+
index.push(fullEntry);
|
|
78
|
+
fs.writeFileSync(indexPath, JSON.stringify(index, null, 2), 'utf-8');
|
|
79
|
+
return filePath;
|
|
80
|
+
}
|
|
81
|
+
readOffload(nodeId) {
|
|
82
|
+
try {
|
|
83
|
+
const sessions = fs.readdirSync(this.offloadDir);
|
|
84
|
+
for (const sessionId of sessions) {
|
|
85
|
+
const filePath = path.join(this.offloadDir, sessionId, `${nodeId}.md`);
|
|
86
|
+
if (fs.existsSync(filePath)) {
|
|
87
|
+
return fs.readFileSync(filePath, 'utf-8');
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
catch { /* ignore */ }
|
|
92
|
+
return null;
|
|
93
|
+
}
|
|
94
|
+
listOffloads(sessionId) {
|
|
95
|
+
const indexPath = path.join(this.offloadDir, sessionId, '_index.json');
|
|
96
|
+
try {
|
|
97
|
+
if (fs.existsSync(indexPath)) {
|
|
98
|
+
return JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
|
|
99
|
+
}
|
|
100
|
+
}
|
|
101
|
+
catch { /* ignore */ }
|
|
102
|
+
return [];
|
|
103
|
+
}
|
|
104
|
+
/** 清理过期结果(默认超过 24 小时) */
|
|
105
|
+
cleanup(maxAgeMs = 24 * 60 * 60 * 1000) {
|
|
106
|
+
let cleaned = 0;
|
|
107
|
+
try {
|
|
108
|
+
const files = fs.readdirSync(this.storeDir);
|
|
109
|
+
const now = Date.now();
|
|
110
|
+
for (const file of files) {
|
|
111
|
+
if (!file.endsWith('.json'))
|
|
112
|
+
continue;
|
|
113
|
+
const filePath = path.join(this.storeDir, file);
|
|
114
|
+
const stat = fs.statSync(filePath);
|
|
115
|
+
if (now - stat.mtimeMs > maxAgeMs) {
|
|
116
|
+
fs.unlinkSync(filePath);
|
|
117
|
+
cleaned++;
|
|
118
|
+
}
|
|
119
|
+
}
|
|
120
|
+
}
|
|
121
|
+
catch { /* ignore */ }
|
|
122
|
+
return cleaned;
|
|
123
|
+
}
|
|
124
|
+
getFilePath(callId) {
|
|
125
|
+
const safeCallId = callId.replace(/[^a-zA-Z0-9_-]/g, '_');
|
|
126
|
+
return path.join(this.storeDir, `${safeCallId}.json`);
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
//# sourceMappingURL=file-tool-result-store.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"file-tool-result-store.js","sourceRoot":"","sources":["../../../src/store/file-tool-result-store.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8CAA8C;AAC9C,+DAA+D;AAE/D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAU7B;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACtB,QAAQ,CAAS;IACjB,UAAU,CAAS;IAE3B,YAAY,OAAmC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,OAAe;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG;YACX,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;SACR,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY,CAAC,KAAqC,EAAE,OAAe;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAC7D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACvD,IAAI,KAAK,GAAmB,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QACzB,MAAM,SAAS,GAAiB,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC;gBACvE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,yBAAyB;IACzB,OAAO,CAAC,WAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;oBAClC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACxB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;IACxD,CAAC;CACF"}
|