@cicctencent/agent-server 0.1.1

package/dist/cjs/service/memory.service.js

@@ -0,0 +1,193 @@
+"use strict";
+// ============================================================
+// MemoryService — 长期记忆持久化服务
+// ============================================================
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryService = void 0;
+exports.getMemoryService = getMemoryService;
+exports.resetMemoryService = resetMemoryService;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const agent_core_1 = require("@cicctencent/agent-core");
+const DEFAULT_STORE = { entries: [], version: 1 };
+/**
+ * 长期记忆服务
+ * 存储在 {dataDir}/memories/memory.json
+ */
+class MemoryService {
+    storePath;
+    store;
+    constructor(dataDir) {
+        this.storePath = dataDir
+            ? path.resolve(dataDir, 'memories/memory.json')
+            : (0, agent_core_1.getProjectDataPath)('memories/memory.json');
+        this.store = this.load();
+    }
+    save(key, content, category = 'custom', importance = 3, extras) {
+        const existing = this.store.entries.find(e => e.key === key);
+        if (existing) {
+            existing.content = content;
+            existing.category = category;
+            existing.importance = importance;
+            existing.updatedAt = (0, agent_core_1.formatLocalDateTime)();
+            if (extras?.memoryLayer)
+                existing.memoryLayer = extras.memoryLayer;
+            if (extras?.sourceSessionId)
+                existing.sourceSessionId = extras.sourceSessionId;
+            if (extras?.sourceTimestamp)
+                existing.sourceTimestamp = extras.sourceTimestamp;
+            if (extras?.sceneId)
+                existing.sceneId = extras.sceneId;
+            if (extras?.sourceLayer)
+                existing.sourceLayer = extras.sourceLayer;
+            if (extras?.sourceIds)
+                existing.sourceIds = extras.sourceIds;
+            this.persist();
+            return existing;
+        }
+        const entry = {
+            id: this.generateId(),
+            key,
+            content,
+            category,
+            importance,
+            createdAt: (0, agent_core_1.formatLocalDateTime)(),
+            updatedAt: (0, agent_core_1.formatLocalDateTime)(),
+            memoryLayer: extras?.memoryLayer ?? 'L1',
+            sourceSessionId: extras?.sourceSessionId,
+            sourceTimestamp: extras?.sourceTimestamp ?? (0, agent_core_1.formatLocalDateTime)(),
+            sceneId: extras?.sceneId,
+            sourceLayer: extras?.sourceLayer,
+            sourceIds: extras?.sourceIds,
+        };
+        this.store.entries.push(entry);
+        this.persist();
+        return entry;
+    }
+    delete(key) {
+        const idx = this.store.entries.findIndex(e => e.key === key);
+        if (idx === -1)
+            return false;
+        this.store.entries.splice(idx, 1);
+        this.persist();
+        return true;
+    }
+    recall(query, category, limit = 20) {
+        let results = this.store.entries;
+        if (category)
+            results = results.filter(e => e.category === category);
+        if (query) {
+            const q = query.toLowerCase();
+            results = results.filter(e => e.key.toLowerCase().includes(q) ||
+                e.content.toLowerCase().includes(q) ||
+                e.category.toLowerCase().includes(q));
+        }
+        results.sort((a, b) => {
+            if (b.importance !== a.importance)
+                return b.importance - a.importance;
+            return new Date(b.updatedAt).getTime() - new Date(a.updatedAt).getTime();
+        });
+        return results.slice(0, limit);
+    }
+    getAllForPrompt(maxEntries = 10) {
+        const entries = this.recall(undefined, undefined, maxEntries);
+        if (entries.length === 0)
+            return '';
+        const lines = entries.map(e => `- [${e.category}] ${e.key}: ${e.content}`);
+        return `## Long-term Memory\n${lines.join('\n')}`;
+    }
+    getStats() {
+        const byCategory = {};
+        for (const e of this.store.entries) {
+            byCategory[e.category] = (byCategory[e.category] || 0) + 1;
+        }
+        return { total: this.store.entries.length, byCategory };
+    }
+    getKeys() {
+        return this.store.entries.map(e => e.key);
+    }
+    getAllEntries(layer) {
+        if (layer)
+            return this.store.entries.filter(e => e.memoryLayer === layer);
+        return [...this.store.entries];
+    }
+    // ---- 内部方法 ----
+    load() {
+        try {
+            if (fs.existsSync(this.storePath)) {
+                const data = fs.readFileSync(this.storePath, 'utf-8');
+                const store = JSON.parse(data);
+                for (const entry of store.entries) {
+                    if (!entry.memoryLayer)
+                        entry.memoryLayer = 'L1';
+                }
+                return store;
+            }
+        }
+        catch (err) {
+            console.warn('[MemoryService] Failed to load memory store:', err);
+        }
+        return { ...DEFAULT_STORE, entries: [] };
+    }
+    persist() {
+        try {
+            const dir = path.dirname(this.storePath);
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            fs.writeFileSync(this.storePath, JSON.stringify(this.store, null, 2), 'utf-8');
+        }
+        catch (err) {
+            console.warn('[MemoryService] Failed to persist memory store:', err);
+        }
+    }
+    generateId() {
+        return `mem_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;
+    }
+}
+exports.MemoryService = MemoryService;
+/** 全局单例 */
+let instance = null;
+function getMemoryService(dataDir) {
+    if (!instance) {
+        instance = new MemoryService(dataDir);
+    }
+    return instance;
+}
+/** 重置单例（测试用） */
+function resetMemoryService() {
+    instance = null;
+}
+//# sourceMappingURL=memory.service.js.map

package/dist/cjs/service/memory.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.service.js","sourceRoot":"","sources":["../../../src/service/memory.service.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,4BAA4B;AAC5B,+DAA+D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkL/D,4CAKC;AAGD,gDAEC;AA1LD,uCAAyB;AACzB,2CAA6B;AAC7B,wDAAkF;AA4BlF,MAAM,aAAa,GAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAE/D;;;GAGG;AACH,MAAa,aAAa;IAChB,SAAS,CAAS;IAClB,KAAK,CAAc;IAE3B,YAAY,OAAgB;QAC1B,IAAI,CAAC,SAAS,GAAG,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,sBAAsB,CAAC;YAC/C,CAAC,CAAC,IAAA,+BAAkB,EAAC,sBAAsB,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,CACF,GAAW,EACX,OAAe,EACf,WAAmB,QAAQ,EAC3B,aAAqB,CAAC,EACtB,MAAoI;QAEpI,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC7D,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;YAC3B,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC7B,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;YACjC,QAAQ,CAAC,SAAS,GAAG,IAAA,gCAAmB,GAAE,CAAC;YAC3C,IAAI,MAAM,EAAE,WAAW;gBAAE,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACnE,IAAI,MAAM,EAAE,eAAe;gBAAE,QAAQ,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC/E,IAAI,MAAM,EAAE,eAAe;gBAAE,QAAQ,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC/E,IAAI,MAAM,EAAE,OAAO;gBAAE,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACvD,IAAI,MAAM,EAAE,WAAW;gBAAE,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACnE,IAAI,MAAM,EAAE,SAAS;gBAAE,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE;YACrB,GAAG;YACH,OAAO;YACP,QAAQ;YACR,UAAU;YACV,SAAS,EAAE,IAAA,gCAAmB,GAAE;YAChC,SAAS,EAAE,IAAA,gCAAmB,GAAE;YAChC,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI;YACxC,eAAe,EAAE,MAAM,EAAE,eAAe;YACxC,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAA,gCAAmB,GAAE;YACjE,OAAO,EAAE,MAAM,EAAE,OAAO;YACxB,WAAW,EAAE,MAAM,EAAE,WAAW;YAChC,SAAS,EAAE,MAAM,EAAE,SAAS;SAC7B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAc,EAAE,QAAiB,EAAE,QAAgB,EAAE;QAC1D,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACjC,IAAI,QAAQ;YAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACrE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC/B,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACnC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CACrC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACpB,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;YACtE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,eAAe,CAAC,aAAqB,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,wBAAwB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACpD,CAAC;IAED,QAAQ;QACN,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,aAAa,CAAC,KAAmB;QAC/B,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,iBAAiB;IAET,IAAI;QACV,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;gBAC9C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClC,IAAI,CAAC,KAAK,CAAC,WAAW;wBAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;gBACnD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,GAAG,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACpF,CAAC;CACF;AAvID,sCAuIC;AAED,WAAW;AACX,IAAI,QAAQ,GAAyB,IAAI,CAAC;AAE1C,SAAgB,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gBAAgB;AAChB,SAAgB,kBAAkB;IAChC,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist/cjs/service/observability.service.d.ts

@@ -0,0 +1,3 @@
+export { logEvent, setLogTransport } from '@cicctencent/agent-core';
+export type { LogLevel, ObservabilityEvent, LogTransport } from '@cicctencent/agent-core';
+//# sourceMappingURL=observability.service.d.ts.map

package/dist/cjs/service/observability.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.service.d.ts","sourceRoot":"","sources":["../../../src/service/observability.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACpE,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/cjs/service/observability.service.js

@@ -0,0 +1,10 @@
+"use strict";
+// ============================================================
+// ObservabilityService — 可观测性服务（封装 agent-core）
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setLogTransport = exports.logEvent = void 0;
+var agent_core_1 = require("@cicctencent/agent-core");
+Object.defineProperty(exports, "logEvent", { enumerable: true, get: function () { return agent_core_1.logEvent; } });
+Object.defineProperty(exports, "setLogTransport", { enumerable: true, get: function () { return agent_core_1.setLogTransport; } });
+//# sourceMappingURL=observability.service.js.map

package/dist/cjs/service/observability.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.service.js","sourceRoot":"","sources":["../../../src/service/observability.service.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,+CAA+C;AAC/C,+DAA+D;;;AAE/D,sDAAoE;AAA3D,sGAAA,QAAQ,OAAA;AAAE,6GAAA,eAAe,OAAA"}

package/dist/cjs/service/permission.service.d.ts

@@ -0,0 +1,5 @@
+import { createPermissionRequest, listPermissionRequests, findApprovedPermission, decidePermissionRequest } from '@cicctencent/agent-core';
+export type { PermissionDecision, PermissionRequest } from '@cicctencent/agent-core';
+export { createPermissionRequest, listPermissionRequests, findApprovedPermission, decidePermissionRequest };
+export declare function initPermissionService(): void;
+//# sourceMappingURL=permission.service.d.ts.map

package/dist/cjs/service/permission.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.service.d.ts","sourceRoot":"","sources":["../../../src/service/permission.service.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,yBAAyB,CAAC;AAIjC,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,CAAC;AAkB5G,wBAAgB,qBAAqB,IAAI,IAAI,CAU5C"}

package/dist/cjs/service/permission.service.js

@@ -0,0 +1,40 @@
+"use strict";
+// ============================================================
+// PermissionService — 权限审批服务（封装 agent-core + JsonStore 持久化）
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decidePermissionRequest = exports.findApprovedPermission = exports.listPermissionRequests = exports.createPermissionRequest = void 0;
+exports.initPermissionService = initPermissionService;
+const index_ts_1 = require("../store/index.js");
+const agent_core_1 = require("@cicctencent/agent-core");
+Object.defineProperty(exports, "createPermissionRequest", { enumerable: true, get: function () { return agent_core_1.createPermissionRequest; } });
+Object.defineProperty(exports, "listPermissionRequests", { enumerable: true, get: function () { return agent_core_1.listPermissionRequests; } });
+Object.defineProperty(exports, "findApprovedPermission", { enumerable: true, get: function () { return agent_core_1.findApprovedPermission; } });
+Object.defineProperty(exports, "decidePermissionRequest", { enumerable: true, get: function () { return agent_core_1.decidePermissionRequest; } });
+const security_policy_service_ts_1 = require("./security-policy.service.js");
+// JsonStore 持久化实现
+class JsonPermissionStore {
+    store = new index_ts_1.JsonStore('permissions/pending.json', 0, { projectLocal: true });
+    readAll() {
+        return this.store.read([]);
+    }
+    writeAll(items) {
+        this.store.write(items);
+    }
+}
+// 初始化：注册 JsonStore 持久化 + 读取策略配置
+let initialized = false;
+function initPermissionService() {
+    if (initialized)
+        return;
+    initialized = true;
+    const policy = (0, security_policy_service_ts_1.getSecurityPolicy)();
+    (0, agent_core_1.configurePermissionManager)({
+        store: new JsonPermissionStore(),
+        defaultTtlMs: policy.permissionTtlMs,
+        autoAllowApprovedRetry: policy.autoAllowApprovedRetry,
+    });
+}
+// 自动初始化
+initPermissionService();
+//# sourceMappingURL=permission.service.js.map

package/dist/cjs/service/permission.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.service.js","sourceRoot":"","sources":["../../../src/service/permission.service.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,4DAA4D;AAC5D,+DAA+D;;;AAgC/D,sDAUC;AAxCD,gDAA8C;AAC9C,wDAMiC;AAKxB,wGATP,oCAAuB,OASO;AAAE,uGARhC,mCAAsB,OAQgC;AAAE,uGAPxD,mCAAsB,OAOwD;AAAE,wGANhF,oCAAuB,OAMgF;AAHzG,6EAAiE;AAKjE,kBAAkB;AAClB,MAAM,mBAAmB;IACf,KAAK,GAAG,IAAI,oBAAS,CAAsB,0BAA0B,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1G,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,QAAQ,CAAC,KAA0B;QACjC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,gCAAgC;AAChC,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,SAAgB,qBAAqB;IACnC,IAAI,WAAW;QAAE,OAAO;IACxB,WAAW,GAAG,IAAI,CAAC;IAEnB,MAAM,MAAM,GAAG,IAAA,8CAAiB,GAAE,CAAC;IACnC,IAAA,uCAA0B,EAAC;QACzB,KAAK,EAAE,IAAI,mBAAmB,EAAE;QAChC,YAAY,EAAE,MAAM,CAAC,eAAe;QACpC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;KACtD,CAAC,CAAC;AACL,CAAC;AAED,QAAQ;AACR,qBAAqB,EAAE,CAAC"}

package/dist/cjs/service/run-registry.d.ts

@@ -0,0 +1,7 @@
+import { RunRegistry } from '@cicctencent/agent-core';
+export { RunRegistry, InMemoryRunStateStore } from '@cicctencent/agent-core';
+export type { BufferedEvent, RunToolCallRecord, EventSubscriber, RunStatus, ActiveRun, RunSnapshot, RunStateStore, } from '@cicctencent/agent-core';
+export declare function getRunRegistry(dataDir?: string): RunRegistry;
+/** 重置单例（测试用） */
+export declare function resetRunRegistry(): void;
+//# sourceMappingURL=run-registry.d.ts.map

package/dist/cjs/service/run-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-registry.d.ts","sourceRoot":"","sources":["../../../src/service/run-registry.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAyB,MAAM,yBAAyB,CAAC;AAG7E,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC7E,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,SAAS,EACT,WAAW,EACX,aAAa,GACd,MAAM,yBAAyB,CAAC;AA6BjC,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAK5D;AAED,gBAAgB;AAChB,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/cjs/service/run-registry.js

@@ -0,0 +1,44 @@
+"use strict";
+// ============================================================
+// RunRegistry — Agent 运行会话注册表（封装 agent-core + JsonStore 持久化）
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryRunStateStore = exports.RunRegistry = void 0;
+exports.getRunRegistry = getRunRegistry;
+exports.resetRunRegistry = resetRunRegistry;
+const index_ts_1 = require("../store/index.js");
+const agent_core_1 = require("@cicctencent/agent-core");
+var agent_core_2 = require("@cicctencent/agent-core");
+Object.defineProperty(exports, "RunRegistry", { enumerable: true, get: function () { return agent_core_2.RunRegistry; } });
+Object.defineProperty(exports, "InMemoryRunStateStore", { enumerable: true, get: function () { return agent_core_2.InMemoryRunStateStore; } });
+/** JsonStore 持久化实现 */
+class JsonRunStateStore {
+    store;
+    constructor(dataDir) {
+        this.store = new index_ts_1.JsonStore('runs/snapshots.json', 1000, { projectLocal: true });
+    }
+    list() {
+        return this.store.read([]);
+    }
+    upsert(snapshot) {
+        const snapshots = this.list().filter(item => item.threadId !== snapshot.threadId);
+        snapshots.push(snapshot);
+        this.store.write(snapshots.sort((a, b) => b.updatedAt - a.updatedAt).slice(0, 200));
+    }
+    remove(threadId) {
+        this.store.write(this.list().filter(item => item.threadId !== threadId));
+    }
+}
+// ===== 单例 =====
+let instance = null;
+function getRunRegistry(dataDir) {
+    if (!instance) {
+        instance = new agent_core_1.RunRegistry(new JsonRunStateStore(dataDir));
+    }
+    return instance;
+}
+/** 重置单例（测试用） */
+function resetRunRegistry() {
+    instance = null;
+}
+//# sourceMappingURL=run-registry.js.map

package/dist/cjs/service/run-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-registry.js","sourceRoot":"","sources":["../../../src/service/run-registry.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,6DAA6D;AAC7D,+DAA+D;;;AA4C/D,wCAKC;AAGD,4CAEC;AApDD,gDAA8C;AAC9C,wDAA6E;AAG7E,sDAA6E;AAApE,yGAAA,WAAW,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAW3C,sBAAsB;AACtB,MAAM,iBAAiB;IACb,KAAK,CAA2B;IAExC,YAAY,OAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAS,CAAgB,qBAAqB,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,QAAqB;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClF,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,CAAC,QAAyB;QAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,iBAAiB;AAEjB,IAAI,QAAQ,GAAuB,IAAI,CAAC;AAExC,SAAgB,cAAc,CAAC,OAAgB;IAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,wBAAW,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gBAAgB;AAChB,SAAgB,gBAAgB;IAC9B,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist/cjs/service/safety-audit.middleware.d.ts

@@ -0,0 +1,3 @@
+import type { Middleware } from '@cicctencent/agent-core';
+export declare function createSafetyAuditMiddleware(): Middleware;
+//# sourceMappingURL=safety-audit.middleware.d.ts.map

package/dist/cjs/service/safety-audit.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-audit.middleware.d.ts","sourceRoot":"","sources":["../../../src/service/safety-audit.middleware.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAM1D,wBAAgB,2BAA2B,IAAI,UAAU,CAgHxD"}

package/dist/cjs/service/safety-audit.middleware.js

@@ -0,0 +1,115 @@
+"use strict";
+// ============================================================
+// SafetyAuditMiddleware — 安全审计中间件
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSafetyAuditMiddleware = createSafetyAuditMiddleware;
+const tool_risk_service_ts_1 = require("./tool-risk.service.js");
+const audit_service_ts_1 = require("./audit.service.js");
+const permission_service_ts_1 = require("./permission.service.js");
+const observability_service_ts_1 = require("./observability.service.js");
+function createSafetyAuditMiddleware() {
+    return {
+        name: 'safety-audit',
+        async onToolBefore(ctx) {
+            if (!ctx.tool)
+                return;
+            if ((0, tool_risk_service_ts_1.isLowRiskTool)(ctx.tool)) {
+                (0, observability_service_ts_1.logEvent)({
+                    event: 'tool.before',
+                    traceId: ctx.traceId,
+                    sessionId: ctx.sessionId,
+                    data: { tool: ctx.tool, risk: 'low', requiresConfirmation: false },
+                });
+                return;
+            }
+            const args = ctx.args || {};
+            const risk = (0, tool_risk_service_ts_1.assessToolRisk)(ctx.tool, args);
+            (0, audit_service_ts_1.appendAuditLog)({
+                sessionId: ctx.sessionId,
+                traceId: ctx.traceId,
+                iteration: ctx.iteration,
+                phase: risk.requiresConfirmation ? 'blocked' : 'before_tool',
+                tool: ctx.tool,
+                args,
+                risk,
+            });
+            (0, observability_service_ts_1.logEvent)({
+                event: 'tool.before',
+                traceId: ctx.traceId,
+                sessionId: ctx.sessionId,
+                data: { tool: ctx.tool, risk: risk.level, requiresConfirmation: risk.requiresConfirmation },
+            });
+            if (!risk.requiresConfirmation)
+                return;
+            const approved = (0, permission_service_ts_1.findApprovedPermission)(ctx.sessionId, ctx.tool, args);
+            if (approved) {
+                (0, audit_service_ts_1.appendAuditLog)({
+                    sessionId: ctx.sessionId,
+                    traceId: ctx.traceId,
+                    iteration: ctx.iteration,
+                    phase: 'before_tool',
+                    tool: ctx.tool,
+                    args,
+                    risk,
+                });
+                (0, observability_service_ts_1.logEvent)({
+                    event: 'tool.permission.approved_retry',
+                    traceId: ctx.traceId,
+                    sessionId: ctx.sessionId,
+                    data: { tool: ctx.tool, permissionId: approved.id, risk: risk.level },
+                });
+                return;
+            }
+            const request = (0, permission_service_ts_1.createPermissionRequest)({
+                sessionId: ctx.sessionId,
+                iteration: ctx.iteration,
+                tool: ctx.tool,
+                args,
+                risk,
+            });
+            return {
+                block: true,
+                reason: [
+                    `PERMISSION_REQUIRED: Tool call "${ctx.tool}" is ${risk.level} risk and was not executed.`,
+                    `Permission request id: ${request.id}`,
+                    `Reasons: ${risk.reasons.join(', ')}`,
+                    'Ask the user to approve or reject this request before retrying the operation.',
+                ].join('\n'),
+            };
+        },
+        async onToolAfter(ctx) {
+            if (!ctx.tool)
+                return;
+            if ((0, tool_risk_service_ts_1.isLowRiskTool)(ctx.tool)) {
+                (0, observability_service_ts_1.logEvent)({
+                    event: 'tool.after',
+                    traceId: ctx.traceId,
+                    sessionId: ctx.sessionId,
+                    data: { tool: ctx.tool, risk: 'low', isError: ctx.isError, duration: ctx.duration },
+                });
+                return;
+            }
+            const risk = (0, tool_risk_service_ts_1.assessToolRisk)(ctx.tool, ctx.args || {});
+            (0, audit_service_ts_1.appendAuditLog)({
+                sessionId: ctx.sessionId,
+                traceId: ctx.traceId,
+                iteration: ctx.iteration,
+                phase: 'after_tool',
+                tool: ctx.tool,
+                args: ctx.args,
+                result: ctx.result,
+                isError: ctx.isError,
+                duration: ctx.duration,
+                risk,
+            });
+            (0, observability_service_ts_1.logEvent)({
+                event: 'tool.after',
+                traceId: ctx.traceId,
+                sessionId: ctx.sessionId,
+                data: { tool: ctx.tool, risk: risk.level, isError: ctx.isError, duration: ctx.duration },
+            });
+        },
+    };
+}
+//# sourceMappingURL=safety-audit.middleware.js.map

package/dist/cjs/service/safety-audit.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-audit.middleware.js","sourceRoot":"","sources":["../../../src/service/safety-audit.middleware.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,kCAAkC;AAClC,+DAA+D;;AAQ/D,kEAgHC;AArHD,iEAAuE;AACvE,yDAAoD;AACpD,mEAA0F;AAC1F,yEAAsD;AAEtD,SAAgB,2BAA2B;IACzC,OAAO;QACL,IAAI,EAAE,cAAc;QAEpB,KAAK,CAAC,YAAY,CAAC,GAAG;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,OAAO;YAEtB,IAAI,IAAA,oCAAa,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,IAAA,mCAAQ,EAAC;oBACP,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE;iBACnE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAA,qCAAc,EAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAE5C,IAAA,iCAAc,EAAC;gBACb,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;gBAC5D,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI;gBACJ,IAAI;aACL,CAAC,CAAC;YAEH,IAAA,mCAAQ,EAAC;gBACP,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,EAAE;aAC5F,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,oBAAoB;gBAAE,OAAO;YAEvC,MAAM,QAAQ,GAAG,IAAA,8CAAsB,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvE,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAA,iCAAc,EAAC;oBACb,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,KAAK,EAAE,aAAa;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,IAAI;oBACJ,IAAI;iBACL,CAAC,CAAC;gBACH,IAAA,mCAAQ,EAAC;oBACP,KAAK,EAAE,gCAAgC;oBACvC,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE;iBACtE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,IAAA,+CAAuB,EAAC;gBACtC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI;gBACJ,IAAI;aACL,CAAC,CAAC;YAEH,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE;oBACN,mCAAmC,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,KAAK,6BAA6B;oBAC1F,0BAA0B,OAAO,CAAC,EAAE,EAAE;oBACtC,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACrC,+EAA+E;iBAChF,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,GAAG;YACnB,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,OAAO;YAEtB,IAAI,IAAA,oCAAa,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,IAAA,mCAAQ,EAAC;oBACP,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;iBACpF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAA,qCAAc,EAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACtD,IAAA,iCAAc,EAAC;gBACb,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI;aACL,CAAC,CAAC;YACH,IAAA,mCAAQ,EAAC;gBACP,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;aACzF,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cjs/service/security-policy.service.d.ts

@@ -0,0 +1,18 @@
+import type { ToolRiskLevel } from '@cicctencent/agent-core';
+export interface SecurityPolicy {
+    auditEnabled: boolean;
+    redactAuditFields: boolean;
+    permissionTtlMs: number;
+    autoAllowApprovedRetry: boolean;
+    allowTools: string[];
+    denyTools: string[];
+    toolBaseRisk: Record<string, ToolRiskLevel>;
+    dangerousPatterns: Array<{
+        pattern: string;
+        reason: string;
+        level: ToolRiskLevel;
+    }>;
+}
+export declare function getSecurityPolicy(): SecurityPolicy;
+export declare function updateSecurityPolicy(update: Partial<SecurityPolicy>): SecurityPolicy;
+//# sourceMappingURL=security-policy.service.d.ts.map

package/dist/cjs/service/security-policy.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy.service.d.ts","sourceRoot":"","sources":["../../../src/service/security-policy.service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,OAAO,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C,iBAAiB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;CACrF;AAoBD,wBAAgB,iBAAiB,IAAI,cAAc,CAQlD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAUpF"}

package/dist/cjs/service/security-policy.service.js

@@ -0,0 +1,46 @@
+"use strict";
+// ============================================================
+// SecurityPolicyService — 安全策略持久化
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSecurityPolicy = getSecurityPolicy;
+exports.updateSecurityPolicy = updateSecurityPolicy;
+const index_ts_1 = require("../store/index.js");
+const agent_core_1 = require("@cicctencent/agent-core");
+const DEFAULT_POLICY = {
+    auditEnabled: true,
+    redactAuditFields: true,
+    permissionTtlMs: 10 * 60 * 1000,
+    autoAllowApprovedRetry: true,
+    allowTools: [],
+    denyTools: [],
+    toolBaseRisk: {},
+    dangerousPatterns: [],
+};
+let store = null;
+function getStore() {
+    if (!store)
+        store = new index_ts_1.JsonStore('security/policy.json', 0, { projectLocal: true });
+    return store;
+}
+function getSecurityPolicy() {
+    const saved = getStore().read(DEFAULT_POLICY);
+    return {
+        ...DEFAULT_POLICY,
+        ...saved,
+        toolBaseRisk: { ...DEFAULT_POLICY.toolBaseRisk, ...(saved.toolBaseRisk || {}) },
+        dangerousPatterns: saved.dangerousPatterns || [],
+    };
+}
+function updateSecurityPolicy(update) {
+    const next = {
+        ...getSecurityPolicy(),
+        ...update,
+        toolBaseRisk: { ...getSecurityPolicy().toolBaseRisk, ...(update.toolBaseRisk || {}) },
+        dangerousPatterns: update.dangerousPatterns || getSecurityPolicy().dangerousPatterns,
+    };
+    getStore().write(next);
+    (0, agent_core_1.clearRiskCache)();
+    return next;
+}
+//# sourceMappingURL=security-policy.service.js.map

package/dist/cjs/service/security-policy.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy.service.js","sourceRoot":"","sources":["../../../src/service/security-policy.service.ts"],"names":[],"mappings":";AAAA,+DAA+D;AAC/D,kCAAkC;AAClC,+DAA+D;;AAmC/D,8CAQC;AAED,oDAUC;AArDD,gDAA8C;AAE9C,wDAAyD;AAazD,MAAM,cAAc,GAAmB;IACrC,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,IAAI;IACvB,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IAC/B,sBAAsB,EAAE,IAAI;IAC5B,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,EAAE;CACtB,CAAC;AAEF,IAAI,KAAK,GAAqC,IAAI,CAAC;AAEnD,SAAS,QAAQ;IACf,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,IAAI,oBAAS,CAAiB,sBAAsB,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,iBAAiB;IAC/B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9C,OAAO;QACL,GAAG,cAAc;QACjB,GAAG,KAAK;QACR,YAAY,EAAE,EAAE,GAAG,cAAc,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE;QAC/E,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,EAAE;KACjD,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,MAA+B;IAClE,MAAM,IAAI,GAAmB;QAC3B,GAAG,iBAAiB,EAAE;QACtB,GAAG,MAAM;QACT,YAAY,EAAE,EAAE,GAAG,iBAAiB,EAAE,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE;QACrF,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,iBAAiB,EAAE,CAAC,iBAAiB;KACrF,CAAC;IACF,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,IAAA,2BAAc,GAAE,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cjs/service/settings.service.d.ts

@@ -0,0 +1,18 @@
+import type { SettingsEntity, SettingsProvider } from '../types.js';
+/**
+ * 默认 SettingsProvider 实现 — JSON 文件存储
+ */
+export declare class DefaultSettingsProvider implements SettingsProvider {
+    private store;
+    constructor(dataDir?: string);
+    getSettings(): SettingsEntity;
+    updateSettings(updates: Partial<SettingsEntity>): SettingsEntity;
+    resetSettings(): SettingsEntity;
+    private tryRecoverSettings;
+    private migrateApiKeysToProviders;
+}
+export declare function getSettings(): SettingsEntity;
+export declare function updateSettings(updates: Partial<SettingsEntity>): SettingsEntity;
+export declare function resetSettings(): SettingsEntity;
+export declare function getSettingsProvider(dataDir?: string): DefaultSettingsProvider;
+//# sourceMappingURL=settings.service.d.ts.map

package/dist/cjs/service/settings.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.service.d.ts","sourceRoot":"","sources":["../../../src/service/settings.service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAuB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAYzF;;GAEG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAC9D,OAAO,CAAC,KAAK,CAA4B;gBAE7B,OAAO,CAAC,EAAE,MAAM;IAI5B,WAAW,IAAI,cAAc;IAwC7B,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc;IA6BhE,aAAa,IAAI,cAAc;IAO/B,OAAO,CAAC,kBAAkB;IA6B1B,OAAO,CAAC,yBAAyB;CAoClC;AAMD,wBAAgB,WAAW,IAAI,cAAc,CAG5C;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAG/E;AAED,wBAAgB,aAAa,IAAI,cAAc,CAG9C;AAED,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAG7E"}