@cicctencent/agent-server 0.1.1

package/dist/esm/sandbox/local-sandbox.js

@@ -0,0 +1,403 @@
+/**
+ * @file LocalSandbox — 进程级沙箱实现
+ * @description 为每个 Agent 会话提供隔离的文件系统和 Shell 执行环境
+ *              文件系统限制在沙箱目录内，命令执行受 SecurityGuard + 沙箱黑名单保护
+ */
+import { exec as cpExec } from 'child_process';
+import * as fs from 'fs/promises';
+import { existsSync } from 'fs';
+import * as path from 'path';
+import * as crypto from 'crypto';
+import { SecurityGuard } from '@cicctencent/agent-core';
+import { SANDBOX_BLOCKED_COMMANDS, SANDBOX_SAFE_ENV_KEYS, DEFAULT_SANDBOX_CONFIG } from '@cicctencent/agent-core';
+import { getProjectDataPath } from "../utils/data-dir.js";
+// ---- 辅助函数 ----
+/**
+ * 过滤环境变量，只保留安全白名单中的变量
+ */
+function filterEnvForSandbox(env) {
+    const filtered = {};
+    for (const key of SANDBOX_SAFE_ENV_KEYS) {
+        if (env[key])
+            filtered[key] = env[key];
+    }
+    // 始终强制 Python UTF-8 输出
+    filtered['PYTHONIOENCODING'] = 'utf-8';
+    filtered['PYTHONUTF8'] = '1';
+    return filtered;
+}
+/**
+ * 脚本语言 → 文件扩展名 + 执行命令映射
+ */
+const LANGUAGE_MAP = {
+    python: { ext: '.py', command: 'python3' },
+    nodejs: { ext: '.cjs', command: 'node' },
+    shell: { ext: '.sh', command: process.platform === 'win32' ? 'bash' : 'bash' },
+};
+// ---- SandboxFileSystemExecutor ----
+/**
+ * 沙箱文件系统执行器
+ * 所有路径操作限制在沙箱 rootDir 内，阻止路径穿越
+ */
+export class SandboxFileSystemExecutor {
+    rootDir;
+    maxFileSize;
+    constructor(rootDir, maxFileSize) {
+        this.rootDir = rootDir;
+        this.maxFileSize = maxFileSize;
+    }
+    async readFile(filePath) {
+        const resolved = this.resolveReadPath(filePath);
+        return fs.readFile(resolved, 'utf-8');
+    }
+    async readFileBuffer(filePath) {
+        const resolved = this.resolveReadPath(filePath);
+        return fs.readFile(resolved);
+    }
+    async writeFile(filePath, content) {
+        const resolved = this.resolveAndValidate(filePath);
+        // 检查文件大小限制
+        const contentSize = Buffer.byteLength(content, 'utf-8');
+        if (contentSize > this.maxFileSize) {
+            throw new Error(`Sandbox: file size ${contentSize} bytes exceeds limit ${this.maxFileSize} bytes`);
+        }
+        // 确保父目录存在（且在沙箱内）
+        const dir = path.dirname(resolved);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(resolved, content, 'utf-8');
+    }
+    async appendFile(filePath, content) {
+        const resolved = this.resolveAndValidate(filePath);
+        const dir = path.dirname(resolved);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.appendFile(resolved, content, 'utf-8');
+    }
+    async listDir(dirPath) {
+        const resolved = this.resolveAndValidate(dirPath);
+        const entries = await fs.readdir(resolved, { withFileTypes: true });
+        return entries.map(e => (e.isDirectory() ? e.name + '/' : e.name));
+    }
+    /**
+     * 解析路径并验证是否在沙箱目录内
+     * 如果路径越界（绝对路径或 .. 穿越），自动修正到沙箱内而非抛错
+     */
+    resolveAndValidate(filePath) {
+        const normalizedRoot = path.resolve(this.rootDir);
+        // 先正常解析
+        let resolved = path.isAbsolute(filePath)
+            ? path.resolve(filePath)
+            : path.resolve(this.rootDir, filePath);
+        // 检查是否在沙箱内
+        const relative = path.relative(normalizedRoot, resolved);
+        if (relative.startsWith('..') || path.isAbsolute(relative)) {
+            // 路径越界：自动修正，提取文件名/相对路径部分，重新定位到沙箱内
+            // 例: /Users/xxx/output.pptx → sandboxRoot/output.pptx
+            // 例: ../../../tmp/file.txt → sandboxRoot/file.txt
+            const safeName = path.basename(filePath);
+            resolved = path.resolve(this.rootDir, safeName);
+        }
+        return resolved;
+    }
+    /**
+     * 解析只读路径 — 允许读取沙箱目录和项目 data/ 目录
+     * data/ 目录存放对话内容、主题配置等只读资源，read_file 可安全访问
+     */
+    resolveReadPath(filePath) {
+        const normalizedRoot = path.resolve(this.rootDir);
+        // 1. 先解析为沙箱内路径
+        let resolved = path.isAbsolute(filePath)
+            ? path.resolve(filePath)
+            : path.resolve(this.rootDir, filePath);
+        // 检查是否在沙箱内
+        const relative = path.relative(normalizedRoot, resolved);
+        if (!relative.startsWith('..') && !path.isAbsolute(relative)) {
+            // 在沙箱内，但如果文件不存在且是相对路径，尝试从项目 data/ 目录读取
+            if (!existsSync(resolved) && !path.isAbsolute(filePath)) {
+                const dataResolved = path.resolve(getProjectDataPath(), filePath);
+                const normalizedDataDir = path.resolve(getProjectDataPath());
+                const relToData = path.relative(normalizedDataDir, dataResolved);
+                if (!relToData.startsWith('..') && !path.isAbsolute(relToData) && existsSync(dataResolved)) {
+                    return dataResolved;
+                }
+            }
+            return resolved;
+        }
+        // 2. 不在沙箱内，检查是否在项目 data/ 目录内
+        const dataDir = getProjectDataPath();
+        const normalizedDataDir = path.resolve(dataDir);
+        const relativeToData = path.relative(normalizedDataDir, resolved);
+        if (!relativeToData.startsWith('..') && !path.isAbsolute(relativeToData)) {
+            return resolved; // 在 data/ 目录内，允许读取
+        }
+        // 3. 路径不在任何允许目录内：回退到沙箱内
+        const safeName = path.basename(filePath);
+        return path.resolve(this.rootDir, safeName);
+    }
+}
+// ---- SandboxShellExecutor ----
+/**
+ * 沙箱 Shell 执行器
+ * - cwd 限制在沙箱目录
+ * - 环境变量经过白名单过滤
+ * - 命令经过 SecurityGuard + 沙箱黑名单检查
+ */
+export class SandboxShellExecutor {
+    rootDir;
+    commandRestriction;
+    guard;
+    outputBuffer = [];
+    maxBuffer = 500;
+    sandboxEnv;
+    constructor(rootDir, commandRestriction) {
+        this.rootDir = rootDir;
+        this.commandRestriction = commandRestriction;
+        // 创建带沙箱黑名单的 SecurityGuard
+        this.guard = new SecurityGuard({
+            deleteProtection: true,
+            blacklistEnabled: true,
+            rules: SANDBOX_BLOCKED_COMMANDS,
+        });
+        // 预计算沙箱环境变量
+        this.sandboxEnv = filterEnvForSandbox(process.env);
+    }
+    async exec(command, timeout = 2000) {
+        // 命令安全检查
+        if (this.commandRestriction) {
+            const sanitized = this.guard.sanitize(command.trim());
+            if (!sanitized.safe) {
+                return `[Sandbox blocked] ${sanitized.reason}`;
+            }
+            // 如果命令被改写，使用改写后的命令
+            if (sanitized.rewritten) {
+                command = sanitized.rewritten;
+            }
+        }
+        const isWindows = process.platform === 'win32';
+        // Windows: chcp 65001 让 cmd.exe 使用 UTF-8 代码页
+        const shellCommand = isWindows
+            ? `chcp 65001 >nul 2>&1 & ${command}`
+            : command;
+        return new Promise((resolve) => {
+            cpExec(shellCommand, {
+                timeout,
+                maxBuffer: 1024 * 1024 * 5, // 5MB
+                windowsHide: true,
+                encoding: 'buffer',
+                cwd: this.rootDir, // 关键：cwd 限制在沙箱目录
+                env: this.sandboxEnv,
+            }, (error, stdoutBuf, stderrBuf) => {
+                let output = '';
+                const stdout = stdoutBuf ? stdoutBuf.toString('utf-8') : '';
+                const stderr = stderrBuf ? stderrBuf.toString('utf-8') : '';
+                if (stdout)
+                    output += stdout;
+                if (stderr)
+                    output += (output ? '\n' : '') + stderr;
+                if (error && !output.trim()) {
+                    output = error.message;
+                }
+                // 保存到输出缓冲区（供 read 使用）
+                const lines = output.split('\n');
+                this.outputBuffer.push(...lines);
+                if (this.outputBuffer.length > this.maxBuffer) {
+                    this.outputBuffer = this.outputBuffer.slice(-this.maxBuffer);
+                }
+                resolve(output || '(no output)');
+            });
+        });
+    }
+    write(_data) {
+        // 沙箱模式不支持交互式写入
+    }
+    read(lines = 50) {
+        const start = Math.max(0, this.outputBuffer.length - lines);
+        return this.outputBuffer.slice(start).join('\n') || '(no terminal output)';
+    }
+}
+// ---- JSON Builder 辅助模块 ----
+/**
+ * 注入到沙箱 _scripts/_json_builder.cjs 的帮助模块。
+ * LLM 通过 write_file + append_file 构建 JS 脚本，运行时生成 JSON 数据文件，
+ * 避免将大量 JSON 作为工具参数传递（消除转义膨胀和截断风险）。
+ *
+ * 用法:
+ *   const B = require('./_scripts/_json_builder');
+ *   B.init('data.json');
+ *   B.add({ type: 'cover', title: 'Report' });
+ *   B.add({ type: 'content', title: 'Slide 2', body: '...' });
+ *   B.meta({ title: 'My Report', theme: 'midnight' });
+ *   B.done();  // → 写入 data.json
+ */
+const JSON_BUILDER_SOURCE = `// _json_builder.cjs — JSON data builder helper
+// Usage: require this, call init(), add() for each item, meta() for metadata, done() to write.
+const fs = require('fs');
+const path = require('path');
+let _items = [];
+let _meta = {};
+let _output = 'data.json';
+
+module.exports = {
+  init(output) {
+    _output = output || 'data.json';
+    _items = [];
+    _meta = {};
+  },
+  add(item) {
+    _items.push(item);
+  },
+  meta(obj) {
+    Object.assign(_meta, obj);
+  },
+  done() {
+    // Use 'slides' for presentations, 'blocks' for documents/PDFs (check meta.type)
+    const data = { ..._meta };
+    if (_meta.type === 'document' || _meta.type === 'pdf') {
+      data.blocks = _items;
+    } else {
+      data.slides = _items;
+    }
+    const json = JSON.stringify(data, null, 2);
+    const dir = path.dirname(_output);
+    if (dir && dir !== '.') { try { fs.mkdirSync(dir, { recursive: true }); } catch(e) {} }
+    fs.writeFileSync(_output, json, 'utf-8');
+    console.log('JSON builder: wrote ' + _items.length + ' items to ' + _output + ' (' + json.length + ' chars)');
+  }
+};
+`;
+// ---- LocalSandbox ----
+/**
+ * 本地沙箱实例
+ * 封装受限的 Shell 和 FileSystem 执行器，提供 runScript 能力
+ */
+export class LocalSandbox {
+    id;
+    rootDir;
+    config;
+    shellExecutor;
+    fsExecutor;
+    scriptsDir;
+    constructor(id, config) {
+        this.id = id;
+        this.rootDir = config.rootDir;
+        this.config = { ...DEFAULT_SANDBOX_CONFIG, ...config };
+        this.scriptsDir = path.join(this.rootDir, '_scripts');
+        this.shellExecutor = new SandboxShellExecutor(this.rootDir, this.config.commandRestriction ?? true);
+        this.fsExecutor = new SandboxFileSystemExecutor(this.rootDir, this.config.maxFileSize ?? DEFAULT_SANDBOX_CONFIG.maxFileSize);
+    }
+    /** 初始化沙箱目录（创建后必须调用） */
+    async init() {
+        await fs.mkdir(this.rootDir, { recursive: true });
+        await fs.mkdir(this.scriptsDir, { recursive: true });
+        // 注入 JSON Builder 辅助模块（供 LLM 用脚本方式构建大型 JSON 数据文件）
+        await fs.writeFile(path.join(this.scriptsDir, '_json_builder.cjs'), JSON_BUILDER_SOURCE, 'utf-8');
+        // 注入 HTML 报告模板生成器和主题（供报表创作助手使用）
+        await this.injectHtmlRenderer();
+    }
+    /** 将 html-renderer.cjs 和主题文件注入沙箱 _scripts/ 目录 */
+    async injectHtmlRenderer() {
+        const templateDir = getProjectDataPath('doc-templates/html');
+        const rendererSrc = path.join(templateDir, 'html-renderer.cjs');
+        const themesSrcDir = path.join(templateDir, 'themes');
+        try {
+            if (existsSync(rendererSrc)) {
+                await fs.copyFile(rendererSrc, path.join(this.scriptsDir, '_html_renderer.cjs'));
+            }
+            // 复制主题目录
+            const themesDstDir = path.join(this.scriptsDir, 'html-themes');
+            await fs.mkdir(themesDstDir, { recursive: true });
+            if (existsSync(themesSrcDir)) {
+                const themeFiles = await fs.readdir(themesSrcDir);
+                for (const f of themeFiles) {
+                    if (f.endsWith('.json')) {
+                        await fs.copyFile(path.join(themesSrcDir, f), path.join(themesDstDir, f));
+                    }
+                }
+            }
+        }
+        catch (err) {
+            // 非致命错误，不影响沙箱初始化
+            console.warn('[Sandbox] Failed to inject html-renderer:', err);
+        }
+    }
+    getShellExecutor() {
+        return this.shellExecutor;
+    }
+    getFileSystemExecutor() {
+        return this.fsExecutor;
+    }
+    async runScript(language, code, timeout) {
+        const langConfig = LANGUAGE_MAP[language];
+        if (!langConfig) {
+            throw new Error(`Sandbox: unsupported language "${language}"`);
+        }
+        // 安全检查：拦截脚本内容中向用户目录的绝对路径写操作
+        const absPathPattern = /(?:writeFile|writeFileSync|createWriteStream|open\s*\(|savefig|to_csv|to_excel|to_parquet|to_html)\s*\(?\s*['"][^'"]*\/(Users|home)\//i;
+        const cpMvPattern = /\b(?:cp|mv|tee)\s+[^|;&\n]*\s+['"]?\/(Users|home)\//i;
+        if (absPathPattern.test(code) || cpMvPattern.test(code)) {
+            return '[Sandbox blocked] Script contains absolute path write to user directory. Use relative paths instead (e.g. "output.pptx", "report.html").';
+        }
+        // Node.js 脚本：自动注入 output/ 目录创建 + 全面 patch fs 方法
+        // 防止 pptxgenjs/docx 等库写入子目录时因目录不存在而静默失败
+        // 覆盖: writeFileSync, writeFile(callback), fs.promises.writeFile, createWriteStream
+        let finalCode = code;
+        if (language === 'nodejs') {
+            const preamble = [
+                "// Auto-injected: ensure output/ dir and patch ALL fs write methods to auto-create parent dirs",
+                "try { require('fs').mkdirSync('output', { recursive: true }); } catch(e) {}",
+                "const _fs = require('fs');",
+                "const _path = require('path');",
+                "function _ensureDir(p) { try { const d = _path.dirname(p); if(d && d !== '.') _fs.mkdirSync(d, { recursive: true }); } catch(e) {} }",
+                "const _origWriteFileSync = _fs.writeFileSync;",
+                "_fs.writeFileSync = function(p, ...a) { _ensureDir(p); return _origWriteFileSync.call(this, p, ...a); };",
+                "const _origWriteFile = _fs.writeFile;",
+                "_fs.writeFile = function(p, ...a) { _ensureDir(p); return _origWriteFile.call(this, p, ...a); };",
+                "const _origCreateWriteStream = _fs.createWriteStream;",
+                "_fs.createWriteStream = function(p, ...a) { _ensureDir(p); return _origCreateWriteStream.call(this, p, ...a); };",
+                "if (_fs.promises) {",
+                "  const _origPromisesWriteFile = _fs.promises.writeFile;",
+                "  _fs.promises.writeFile = async function(p, ...a) { _ensureDir(p); return _origPromisesWriteFile.call(this, p, ...a); };",
+                "}",
+                "",
+            ].join('\n');
+            finalCode = preamble + code;
+        }
+        else if (language === 'python') {
+            const preamble = [
+                "# Auto-injected: ensure output/ dir exists",
+                "import os as _os",
+                "try: _os.makedirs('output', exist_ok=True)",
+                "except: pass",
+                "",
+            ].join('\n');
+            finalCode = preamble + code;
+        }
+        // 生成唯一脚本文件名
+        const timestamp = Date.now();
+        const random = crypto.randomBytes(4).toString('hex');
+        const fileName = `script_${timestamp}_${random}${langConfig.ext}`;
+        const scriptPath = path.join(this.scriptsDir, fileName);
+        // 写入脚本文件
+        await fs.writeFile(scriptPath, finalCode, 'utf-8');
+        try {
+            // 构建执行命令
+            const execTimeout = timeout ?? this.config.execTimeout ?? DEFAULT_SANDBOX_CONFIG.execTimeout;
+            const command = `${langConfig.command} "${scriptPath}"`;
+            // 通过沙箱 Shell 执行器运行
+            const result = await this.shellExecutor.exec(command, execTimeout);
+            return result;
+        }
+        finally {
+            // 清理临时脚本文件（静默失败）
+            fs.unlink(scriptPath).catch(() => { });
+        }
+    }
+    async destroy() {
+        try {
+            await fs.rm(this.rootDir, { recursive: true, force: true });
+        }
+        catch {
+            // 静默处理清理失败
+        }
+    }
+}
+//# sourceMappingURL=local-sandbox.js.map

package/dist/esm/sandbox/local-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-sandbox.js","sourceRoot":"","sources":["../../../src/sandbox/local-sandbox.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAQjC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAClH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,iBAAiB;AAEjB;;GAEG;AACH,SAAS,mBAAmB,CAAC,GAAuC;IAClE,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;IAC1C,CAAC;IACD,uBAAuB;IACvB,QAAQ,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC;IAC7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,YAAY,GAA6D;IAC7E,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;IAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;IACxC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;CAC/E,CAAC;AAEF,sCAAsC;AAEtC;;;GAGG;AACH,MAAM,OAAO,yBAAyB;IACnB,OAAO,CAAS;IAChB,WAAW,CAAS;IAErC,YAAY,OAAe,EAAE,WAAmB;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,OAAe;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAEnD,WAAW;QACX,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,sBAAsB,WAAW,wBAAwB,IAAI,CAAC,WAAW,QAAQ,CAClF,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,OAAe;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,QAAgB;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,QAAQ;QACR,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzC,WAAW;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,kCAAkC;YAClC,sDAAsD;YACtD,kDAAkD;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,QAAgB;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,eAAe;QACf,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzC,WAAW;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,uCAAuC;YACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAClE,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;gBAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;gBACjE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC3F,OAAO,YAAY,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,6BAA6B;QAC7B,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,OAAO,QAAQ,CAAC,CAAC,mBAAmB;QACtC,CAAC;QAED,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,iCAAiC;AAEjC;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAS;IAChB,kBAAkB,CAAU;IAC5B,KAAK,CAAgB;IAC9B,YAAY,GAAa,EAAE,CAAC;IACnB,SAAS,GAAG,GAAG,CAAC;IAChB,UAAU,CAAyB;IAEpD,YAAY,OAAe,EAAE,kBAA2B;QACtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAE7C,0BAA0B;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC;YAC7B,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,IAAI;YACtB,KAAK,EAAE,wBAAwB;SAChC,CAAC,CAAC;QAEH,YAAY;QACZ,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAyC,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAO,GAAG,IAAI;QACxC,SAAS;QACT,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACpB,OAAO,qBAAqB,SAAS,CAAC,MAAM,EAAE,CAAC;YACjD,CAAC;YACD,mBAAmB;YACnB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACxB,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC;YAChC,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/C,6CAA6C;QAC7C,MAAM,YAAY,GAAG,SAAS;YAC5B,CAAC,CAAC,0BAA0B,OAAO,EAAE;YACrC,CAAC,CAAC,OAAO,CAAC;QAEZ,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACrC,MAAM,CAAC,YAAY,EAAE;gBACnB,OAAO;gBACP,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,MAAM;gBAClC,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB;gBACpC,GAAG,EAAE,IAAI,CAAC,UAAU;aACrB,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;gBACjC,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,SAA+B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,SAA+B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,IAAI,MAAM;oBAAE,MAAM,IAAI,MAAM,CAAC;gBAC7B,IAAI,MAAM;oBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;gBAEpD,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC5B,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;gBACzB,CAAC;gBAED,sBAAsB;gBACtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;gBACjC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/D,CAAC;gBAED,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,eAAe;IACjB,CAAC;IAED,IAAI,CAAC,KAAK,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC;IAC7E,CAAC;CACF;AAED,8BAA8B;AAE9B;;;;;;;;;;;;GAYG;AACH,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmC3B,CAAC;AAEF,yBAAyB;AAEzB;;;GAGG;AACH,MAAM,OAAO,YAAY;IACd,EAAE,CAAS;IACX,OAAO,CAAS;IAER,MAAM,CAAgB;IACtB,aAAa,CAAuB;IACpC,UAAU,CAA4B;IACtC,UAAU,CAAS;IAEpC,YAAY,EAAU,EAAE,MAAqB;QAC3C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEtD,IAAI,CAAC,aAAa,GAAG,IAAI,oBAAoB,CAC3C,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,CACvC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAC7C,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,sBAAsB,CAAC,WAAY,CAC/D,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,kDAAkD;QAClD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAClG,gCAAgC;QAChC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAClC,CAAC;IAED,iDAAiD;IACzC,KAAK,CAAC,kBAAkB;QAC9B,MAAM,WAAW,GAAG,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,SAAS;YACT,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC/D,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAClD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;oBAC3B,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACxB,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC5E,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB;YACjB,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,qBAAqB;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAwB,EAAE,IAAY,EAAE,OAAgB;QACtE,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,4BAA4B;QAC5B,MAAM,cAAc,GAAG,wIAAwI,CAAC;QAChK,MAAM,WAAW,GAAG,sDAAsD,CAAC;QAC3E,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO,0IAA0I,CAAC;QACpJ,CAAC;QAED,gDAAgD;QAChD,wCAAwC;QACxC,mFAAmF;QACnF,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG;gBACf,gGAAgG;gBAChG,6EAA6E;gBAC7E,4BAA4B;gBAC5B,gCAAgC;gBAChC,sIAAsI;gBACtI,+CAA+C;gBAC/C,0GAA0G;gBAC1G,uCAAuC;gBACvC,kGAAkG;gBAClG,uDAAuD;gBACvD,kHAAkH;gBAClH,qBAAqB;gBACrB,0DAA0D;gBAC1D,2HAA2H;gBAC3H,GAAG;gBACH,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG;gBACf,4CAA4C;gBAC5C,kBAAkB;gBAClB,4CAA4C;gBAC5C,cAAc;gBACd,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC9B,CAAC;QAED,YAAY;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,SAAS,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAExD,SAAS;QACT,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,SAAS;YACT,MAAM,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,sBAAsB,CAAC,WAAY,CAAC;YAC9F,MAAM,OAAO,GAAG,GAAG,UAAU,CAAC,OAAO,KAAK,UAAU,GAAG,CAAC;YAExD,mBAAmB;YACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,iBAAiB;YACjB,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;CACF"}

package/dist/esm/sandbox/process-code-sandbox.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @file ProcessCodeSandbox — 进程级代码执行沙箱
+ * @description 扩展 LocalSandbox，实现 CodeSandbox 接口
+ *              支持结构化执行结果（stdout/stderr/files/charts）
+ */
+import { LocalSandbox } from './local-sandbox.js';
+import type { CodeSandbox, CodeExecutionResult } from '@cicctencent/agent-core';
+export declare class ProcessCodeSandbox extends LocalSandbox implements CodeSandbox {
+    /**
+     * 执行代码并返回结构化结果
+     * @param code 代码内容
+     * @param lang 语言：python / nodejs / shell
+     * @param timeout 超时（ms），默认 30000
+     */
+    execute(code: string, lang: 'python' | 'nodejs' | 'shell', timeout?: number): Promise<CodeExecutionResult>;
+    /**
+     * 列出沙箱目录中的文件（排除脚本文件本身）
+     */
+    private listNewFiles;
+    /**
+     * 读取沙箱中指定文件的内容
+     */
+    readFile(filename: string): Promise<Buffer | null>;
+}
+//# sourceMappingURL=process-code-sandbox.d.ts.map

package/dist/esm/sandbox/process-code-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-code-sandbox.d.ts","sourceRoot":"","sources":["../../../src/sandbox/process-code-sandbox.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEhF,qBAAa,kBAAmB,SAAQ,YAAa,YAAW,WAAW;IACzE;;;;;OAKG;IACG,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,EACnC,OAAO,GAAE,MAAc,GACtB,OAAO,CAAC,mBAAmB,CAAC;IAmC/B;;OAEG;YACW,YAAY;IAW1B;;OAEG;IACG,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAQzD"}

package/dist/esm/sandbox/process-code-sandbox.js

@@ -0,0 +1,76 @@
+/**
+ * @file ProcessCodeSandbox — 进程级代码执行沙箱
+ * @description 扩展 LocalSandbox，实现 CodeSandbox 接口
+ *              支持结构化执行结果（stdout/stderr/files/charts）
+ */
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import { existsSync } from 'fs';
+import { LocalSandbox } from "./local-sandbox.js";
+export class ProcessCodeSandbox extends LocalSandbox {
+    /**
+     * 执行代码并返回结构化结果
+     * @param code 代码内容
+     * @param lang 语言：python / nodejs / shell
+     * @param timeout 超时（ms），默认 30000
+     */
+    async execute(code, lang, timeout = 30000) {
+        const startTime = Date.now();
+        const scriptLang = lang === 'nodejs' ? 'nodejs' : lang === 'python' ? 'python' : 'shell';
+        try {
+            // 使用父类 runScript 执行代码
+            const output = await this.runScript(scriptLang, code, timeout);
+            const duration = Date.now() - startTime;
+            // 扫描沙箱目录中新生成的文件
+            const files = await this.listNewFiles();
+            // 检测图表文件（PNG/HTML/SVG）
+            const charts = files.filter(f => /\.(png|html|svg|jpg|jpeg)$/i.test(f));
+            return {
+                stdout: output,
+                stderr: '',
+                exitCode: 0,
+                files,
+                charts: charts.length > 0 ? charts : undefined,
+                duration,
+            };
+        }
+        catch (error) {
+            const duration = Date.now() - startTime;
+            return {
+                stdout: '',
+                stderr: error.message || String(error),
+                exitCode: 1,
+                files: [],
+                duration,
+            };
+        }
+    }
+    /**
+     * 列出沙箱目录中的文件（排除脚本文件本身）
+     */
+    async listNewFiles() {
+        try {
+            const entries = await fs.readdir(this.rootDir);
+            return entries
+                .filter(f => !f.startsWith('_script_')) // 排除临时脚本文件
+                .map(f => f);
+        }
+        catch {
+            return [];
+        }
+    }
+    /**
+     * 读取沙箱中指定文件的内容
+     */
+    async readFile(filename) {
+        const filePath = path.join(this.rootDir, filename);
+        // 防止路径穿越
+        const resolved = path.resolve(filePath);
+        if (!resolved.startsWith(path.resolve(this.rootDir)))
+            return null;
+        if (!existsSync(resolved))
+            return null;
+        return fs.readFile(resolved);
+    }
+}
+//# sourceMappingURL=process-code-sandbox.js.map

package/dist/esm/sandbox/process-code-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-code-sandbox.js","sourceRoot":"","sources":["../../../src/sandbox/process-code-sandbox.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,IAAmC,EACnC,UAAkB,KAAK;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAEzF,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAExC,gBAAgB;YAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAExC,uBAAuB;YACvB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAExE,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,KAAK;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAC9C,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC;gBACtC,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE,EAAE;gBACT,QAAQ;aACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,OAAO,OAAO;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;iBAClD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,SAAS;QACT,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/esm/sandbox/sandbox-manager.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @file LocalSandboxManager — 沙箱生命周期管理
+ * @description 管理沙箱的创建、获取、销毁，沙箱目录统一在 {cwd}/data/sandboxes/ 下
+ */
+import type { Sandbox, SandboxConfig, SandboxManager } from '@cicctencent/agent-core';
+/**
+ * 本地沙箱管理器
+ * - 创建沙箱时自动在 baseDir/{id} 下创建隔离目录
+ * - 支持获取已创建的沙箱实例
+ * - 销毁时清理沙箱目录
+ */
+export declare class LocalSandboxManager implements SandboxManager {
+    private sandboxes;
+    private readonly baseDir;
+    constructor(baseDir?: string);
+    /**
+     * 创建沙箱（复用已有实例）
+     * 同一 thread 的多次对话复用同一个沙箱，避免销毁导致 artifacts 丢失。
+     * 如需强制清理，请先调用 destroy()。
+     */
+    create(id: string, config?: Partial<SandboxConfig>): Promise<Sandbox>;
+    /**
+     * 获取已创建的沙箱
+     */
+    get(id: string): Sandbox | undefined;
+    /**
+     * 销毁指定沙箱（清理目录 + 移除引用）
+     */
+    destroy(id: string): Promise<void>;
+    /**
+     * 销毁所有沙箱
+     */
+    destroyAll(): Promise<void>;
+    /**
+     * 获取当前活跃沙箱数量
+     */
+    get size(): number;
+    /**
+     * 获取所有活跃沙箱 ID
+     */
+    listIds(): string[];
+}
+/**
+ * 获取默认沙箱管理器单例
+ */
+export declare function getSandboxManager(): LocalSandboxManager;
+//# sourceMappingURL=sandbox-manager.d.ts.map

package/dist/esm/sandbox/sandbox-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-manager.d.ts","sourceRoot":"","sources":["../../../src/sandbox/sandbox-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAItF;;;;;GAKG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,CAAC,EAAE,MAAM;IAI5B;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB3E;;OAEG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAIpC;;OAEG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxC;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,OAAO,IAAI,MAAM,EAAE;CAGpB;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,mBAAmB,CAKvD"}