@deepwhale/coding-agent 1.0.0

package/dist/modes/tui.js

@@ -0,0 +1,361 @@
+/**
+ * TUI 模式 — Sprint 1c-revive-4-D-20.3 P0-B (2026-06-05) v1.0 capability completion
+ *
+ * Minimal ANSI TUI. **不**装新依赖 (无 Ink), 用 node:readline + ANSI 转义码.
+ *
+ * 复用红线 (D-20.3 P0-B 拍板):
+ *   - 复用 runToolLoop + staticToolPolicy (不绕过 ToolPolicy)
+ *   - 复用 createReplConfirm (D-19 串行化, 不重建 2 套 confirm)
+ *   - 复用 SessionWriter (不绕过 session audit, 跟 REPL/print mode 同形态)
+ *   - 复用 formatUsageStatus (REPL 状态栏 4 字段, 风格统一)
+ *
+ * 必须实现 (用户红线):
+ *   1. `deepwhale tui` 启动
+ *   2. 用户可输入 prompt
+ *   3. assistant stream 可显示
+ *   4. tool call / result 可显示
+ *   5. destructive tool 触发 y/N confirm (走 createReplConfirm)
+ *   6. y 执行, n/empty 拒绝
+ *   7. /exit 或 q 退出
+ *   8. session 不损坏 (走 D-19.5 finish 路径, writer.close)
+ *   9. TUI 路径复用 ToolPolicy / SessionWriter / runToolLoop
+ *
+ * Minimal scope (v1.0):
+ *   - ANSI 颜色: 标题 / 用户 prompt / tool call / tool result / 状态栏
+ *   - 不做: 多行 / 自动补全 / 主题 / 鼠标 / 文件树 / syntax highlight
+ *
+ * NOT covered (defer to v1.1):
+ *   - 全屏 IDE-style TUI
+ *   - 主题切换
+ *   - 多 session 切换
+ *   - Plan mode / recovery
+ */
+import { createInterface } from 'node:readline';
+import { stdin, stdout, stderr } from 'node:process';
+import { SessionReader, SessionWriter } from '@deepwhale/core';
+import { isToolLoopError, loadSession, persistToolLoopSteps, runToolLoop, } from '../agent/index.js';
+import { createDefaultRegistry } from '../tools/registry.js';
+import { formatUsageStatus } from '../repl.js';
+import { createDefaultClient } from '../llm-factory.js';
+import { resolveSandboxRunnerFromEnv } from '../sandbox/env-gate.js';
+import { staticToolPolicy } from '../policy/static-rules.js';
+import { createReplConfirm } from '../repl/repl-confirm.js'; // D-19: 复用 REPL confirm controller
+// ---- ANSI 颜色 (no dependency, 直接 escape) ----
+const ANSI = {
+    reset: '\x1b[0m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+    // 前景
+    cyan: '\x1b[36m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    red: '\x1b[31m',
+    blue: '\x1b[34m',
+    magenta: '\x1b[35m',
+    // 背景
+    bgBlue: '\x1b[44m',
+};
+/** 检测 TTY (跟 REPL 一样, 非 TTY 退回无色输出, 让 test 不依赖 ANSI) */
+const isTty = () => Boolean(stdout.isTTY);
+/** 染色 wrapper (非 TTY 时退化到原文) */
+function colorize(text, color) {
+    return isTty() ? `${color}${text}${ANSI.reset}` : text;
+}
+// ---- TUI 主入口 ----
+export async function runTuiMode(options = {}) {
+    const out = options.output ?? stdout;
+    const err = options.errorOutput ?? stderr;
+    const enableToolLoop = options.enableToolLoop ?? true;
+    const sessionPath = options.sessionPath;
+    // sandbox env 解析 (跟 print mode / REPL 一致)
+    const sandboxRunner = resolveSandboxRunnerFromEnv({ sandboxRoot: process.cwd() });
+    const policyYes = options.yes ?? false;
+    // lazy client (跟 REPL D-11-4 拍板一致: 无 key 不阻塞启动, 首次 chat 才报错)
+    const clientFromOptions = options.client;
+    let client = clientFromOptions ?? null;
+    let clientError = null;
+    const tryCreateClient = () => {
+        if (clientFromOptions)
+            return { client: clientFromOptions, error: null };
+        if (client !== null || clientError !== null) {
+            return { client, error: clientError };
+        }
+        try {
+            const c = createDefaultClient({
+                ...(options.provider !== undefined ? { provider: options.provider } : {}),
+                ...(options.model !== undefined ? { model: options.model } : {}),
+            });
+            client = c;
+            clientError = null;
+            return { client: c, error: null };
+        }
+        catch (e) {
+            const err0 = e instanceof Error ? e : new Error(String(e));
+            clientError = err0;
+            return { client: null, error: err0 };
+        }
+    };
+    // D-19 复用 confirm controller
+    const confirmController = createReplConfirm({ output: out });
+    const tuiPolicy = {
+        ...staticToolPolicy,
+        confirm: confirmController.confirm,
+    };
+    // session 加载
+    let workingMessages = [];
+    const writer = sessionPath ? new SessionWriter(sessionPath) : null;
+    const reader = sessionPath ? new SessionReader(sessionPath) : null;
+    if (writer && reader) {
+        try {
+            await writer.open();
+            const loaded = await loadSession(reader);
+            workingMessages = [...loaded.messages];
+            if (workingMessages.length > 0) {
+                out.write(colorize(`  ${loaded.messages.length} messages resumed from session\n`, ANSI.dim) + '\n');
+            }
+        }
+        catch (e) {
+            err.write(`warning: could not load session: ${String(e)}\n`);
+        }
+    }
+    // Sprint 1c-revive-4-D-20.3 P0-B (2026-06-05): TUI minimal scope 不接 compaction
+    // (跟 minimal 拍板一致: D-20.3 P0 只做启动/输入/stream/confirm/exit/session 闭环).
+    // Compaction 是 D-20.3 P2, 留 v1.1. options.compactionConfig 字段保留 (跟 print mode
+    // 同接口), 但当前 implementation 不消费. 这样 binary 接口稳定, 后续 sprint 直接接.
+    if (options.compactionConfig && writer) {
+        // 显式 silently no-op (minimal TUI 暂不接 compaction, 避免跟 P0 范围扩大).
+        // 注: print mode 抛 warning (D-6 拍板), TUI 不抛 (minimal scope, 留扩展点).
+    }
+    // 顶部 header (D-20.3 TUI 标识)
+    const initialClientState = tryCreateClient();
+    const modelName = initialClientState.client?.model ?? 'not-configured';
+    out.write('\n');
+    out.write(colorize('  ╭─ deepwhale tui ', ANSI.bold) + colorize(modelName, ANSI.cyan + ANSI.bold) + colorize(' ─╮', ANSI.bold) + '\n');
+    out.write(colorize('  │ type a prompt, /help, /verify, /exit (or q) │\n', ANSI.dim));
+    out.write(colorize('  ╰──────────────────────────────────────────╯\n', ANSI.bold) + '\n');
+    if (initialClientState.error) {
+        err.write(`warning: API key not set, chat will fail until DEEPSEEK_API_KEY or ANTHROPIC_AUTH_TOKEN is set.\n`);
+    }
+    // readline (跟 REPL 同形态, terminal:false 跟 D-19 P2-Ctrl+C 拍板一致)
+    const rl = createInterface({
+        input: options.input ?? stdin,
+        terminal: false,
+        output: out,
+    });
+    return new Promise((resolve) => {
+        let exiting = false;
+        let turnInFlight = false;
+        let pendingExit = false;
+        const finish = async (code) => {
+            if (exiting)
+                return;
+            exiting = true;
+            process.off('SIGINT', onSigint);
+            rl.close();
+            if (writer) {
+                try {
+                    await writer.close();
+                }
+                catch {
+                    /* best-effort */
+                }
+            }
+            out.write('\n' + colorize('  Goodbye!\n', ANSI.dim));
+            resolve(code);
+        };
+        // turn abort controller (D-19 P2-Ctrl+C 拍板)
+        let turnAbortController = new AbortController();
+        const onSigint = () => {
+            if (confirmController.hasPending()) {
+                confirmController.dismiss();
+            }
+            if (!turnAbortController.signal.aborted) {
+                turnAbortController.abort();
+            }
+        };
+        process.on('SIGINT', onSigint);
+        const prompt = () => {
+            out.write(colorize('  > ', ANSI.cyan + ANSI.bold));
+        };
+        prompt();
+        rl.on('line', async (rawLine) => {
+            const line = rawLine.trim();
+            // D-19 拍板: confirm 期间 line 优先喂 confirm
+            if (confirmController.hasPending()) {
+                if (line === 'exit' || line === 'quit' || line === '/exit' || line === '/quit' || line === 'q') {
+                    confirmController.dismiss();
+                    pendingExit = true;
+                    return;
+                }
+                const consumed = confirmController.offerLine(line);
+                if (consumed)
+                    return;
+            }
+            // 内建命令
+            if (line === '') {
+                prompt();
+                return;
+            }
+            if (line === 'q' || line === 'exit' || line === 'quit' || line === '/exit' || line === '/quit') {
+                if (turnInFlight) {
+                    pendingExit = true;
+                    return;
+                }
+                await finish(0);
+                return;
+            }
+            if (line === '/help') {
+                out.write(colorize('\n  Commands:\n' +
+                    '    /help            show this help\n' +
+                    '    /verify          run build/lint/typecheck/test (no LLM needed)\n' +
+                    '    /exit, /quit, q  exit TUI\n\n', ANSI.dim));
+                prompt();
+                return;
+            }
+            if (line === '/verify') {
+                // 跟 REPL /verify 同语义 — 调 runVerify, 写 verification event
+                try {
+                    const { runVerify, formatReport, buildSummaryAndNext } = await import('../verify/index.js');
+                    const report = await runVerify();
+                    const filled = buildSummaryAndNext(report);
+                    const text = formatReport({ ...report, summary: filled.summary, nextSuggestedAction: filled.nextSuggestedAction });
+                    out.write(text + '\n');
+                    if (writer) {
+                        const { appendVerificationEvent } = await import('../agent/index.js');
+                        const failedCount = report.checks.filter((c) => c.status !== 'passed').length;
+                        await appendVerificationEvent(writer, {
+                            status: report.overallStatus,
+                            durationMs: report.durationMs,
+                            commandCount: report.checks.length,
+                            failedCount,
+                            summary: filled.summary,
+                        });
+                    }
+                }
+                catch (e) {
+                    err.write(`error: verify failed: ${e instanceof Error ? e.message : String(e)}\n\n`);
+                }
+                prompt();
+                return;
+            }
+            // 队列守卫 (跟 REPL D-19.5 拍板)
+            if (turnInFlight) {
+                out.write(colorize('  (turn in flight, please wait)\n', ANSI.dim));
+                prompt();
+                return;
+            }
+            turnInFlight = true;
+            turnAbortController = new AbortController();
+            // lazy client
+            const c = clientFromOptions ? { client: clientFromOptions, error: null } : tryCreateClient();
+            if (c.client === null) {
+                err.write(`error: API key not set. set DEEPSEEK_API_KEY or ANTHROPIC_AUTH_TOKEN.\n\n`);
+                turnInFlight = false;
+                prompt();
+                return;
+            }
+            const liveClient = c.client;
+            try {
+                // 持久化 user input
+                if (writer) {
+                    const userEvent = { kind: 'user', ts: Date.now(), content: line };
+                    await writer.append(userEvent);
+                }
+                // 构造 turn messages
+                const turnMessages = [
+                    ...workingMessages,
+                    { role: 'user', content: line },
+                ];
+                out.write('\n'); // user 跟 assistant 间空行
+                let result;
+                if (enableToolLoop) {
+                    result = await runToolLoop(liveClient, turnMessages, {
+                        registry: createDefaultRegistry({ sandboxRunner }),
+                        onChunk: (chunk) => {
+                            if (chunk.content)
+                                out.write(chunk.content);
+                        },
+                        ...(options.maxSteps !== undefined ? { maxSteps: options.maxSteps } : {}),
+                        policy: tuiPolicy,
+                        isInteractive: true, // TUI = 交互
+                        yes: policyYes,
+                        // Sprint 1c-revive-5-D-20.6.4 review-fix (2026-06-06): 透传 turnAbortController.signal
+                        // 给 runToolLoop, 让 SIGINT (onSigint) abort 时透传到 LLM stream / tool exec /
+                        // policy.confirm. 跟 repl.ts:509 对齐. 之前漏传, SIGINT 只 abort controller
+                        // 不往下传, 工具循环在 tool execution / confirm 等关键点收不到 abort,
+                        // hang 住, 跟 D-19 Ctrl+C/cleanup 链路不完整.
+                        signal: turnAbortController.signal,
+                        ...(writer ? { writer } : {}),
+                    });
+                }
+                else {
+                    // --no-tool-loop 直发
+                    const streamResult = await liveClient.stream(turnMessages, {
+                        onChunk: (chunk) => {
+                            if (chunk.delta.content)
+                                out.write(chunk.delta.content);
+                        },
+                    });
+                    result = {
+                        messages: [...turnMessages, { role: 'assistant', content: streamResult.content }],
+                        final: streamResult,
+                        steps: [
+                            {
+                                kind: 'assistant',
+                                ts: Date.now(),
+                                message: { role: 'assistant', content: streamResult.content },
+                                result: streamResult,
+                            },
+                        ],
+                    };
+                }
+                // TUI 格式化: tool call / result (跟 print mode printStepSummary 同形态, 但加 ANSI)
+                for (const step of result.steps) {
+                    if (step.kind === 'tool') {
+                        const status = step.result.success ? colorize('✓', ANSI.green) : colorize('✗', ANSI.red);
+                        out.write(`\n  ${status} ${colorize(step.tool_call.name, ANSI.magenta + ANSI.bold)} (${step.duration_ms}ms)\n`);
+                    }
+                }
+                // 持久化
+                if (writer) {
+                    try {
+                        await persistToolLoopSteps(writer, result.steps);
+                    }
+                    catch {
+                        /* best-effort */
+                    }
+                }
+                // 更新 working messages (跟 REPL 一致, 加 user + 所有 steps 消息)
+                workingMessages = [
+                    ...result.messages,
+                ];
+                // 状态栏 (复用 formatUsageStatus, 4 字段)
+                const usageLine = formatUsageStatus(result.final.usage);
+                if (usageLine !== null) {
+                    out.write('\n' + colorize('  ' + usageLine + '\n', ANSI.dim));
+                }
+                else {
+                    out.write('\n');
+                }
+            }
+            catch (e) {
+                if (isToolLoopError(e)) {
+                    err.write(`\nerror: tool loop hit max steps (${e.steps})\n`);
+                }
+                else {
+                    err.write(`\nerror: ${e instanceof Error ? e.message : String(e)}\n`);
+                }
+            }
+            finally {
+                turnInFlight = false;
+                if (pendingExit) {
+                    void finish(0);
+                }
+                else {
+                    prompt();
+                }
+            }
+        });
+    });
+}
+//# sourceMappingURL=tui.js.map

package/dist/modes/tui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui.js","sourceRoot":"","sources":["../../src/modes/tui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,eAAe,EAAiC,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAqB,MAAM,iBAAiB,CAAC;AAClF,OAAO,EACL,eAAe,EACf,WAAW,EACX,oBAAoB,EACpB,WAAW,GAGZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAiB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC,CAAC,mCAAmC;AAIhG,+CAA+C;AAE/C,MAAM,IAAI,GAAG;IACX,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,KAAK;IACL,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,KAAK;IACL,MAAM,EAAE,UAAU;CACV,CAAC;AAEX,wDAAwD;AACxD,MAAM,KAAK,GAAG,GAAY,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnD,gCAAgC;AAChC,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAsBD,oBAAoB;AAEpB,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAA0B,EAAE;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;IAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IACtD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,0CAA0C;IAC1C,MAAM,aAAa,GAAkB,2BAA2B,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC;IAEvC,6DAA6D;IAC7D,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IACzC,IAAI,MAAM,GAAqB,iBAAiB,IAAI,IAAI,CAAC;IACzD,IAAI,WAAW,GAAiB,IAAI,CAAC;IACrC,MAAM,eAAe,GAAG,GAAsD,EAAE;QAC9E,IAAI,iBAAiB;YAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzE,IAAI,MAAM,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,mBAAmB,CAAC;gBAC5B,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,CAAC;YACX,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACH,CAAC,CAAC;IAEF,6BAA6B;IAC7B,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAe;QAC5B,GAAG,gBAAgB;QACnB,OAAO,EAAE,iBAAiB,CAAC,OAAO;KACnC,CAAC;IAEF,aAAa;IACb,IAAI,eAAe,GAAkB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YACzC,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,KAAK,CACP,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,kCAAkC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,sEAAsE;IACtE,8EAA8E;IAC9E,+DAA+D;IAC/D,IAAI,OAAO,CAAC,gBAAgB,IAAI,MAAM,EAAE,CAAC;QACvC,+DAA+D;QAC/D,kEAAkE;IACpE,CAAC;IAED,4BAA4B;IAC5B,MAAM,kBAAkB,GAAG,eAAe,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,IAAI,gBAAgB,CAAC;IACvE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACvI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,qDAAqD,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,kDAAkD,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1F,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,mGAAmG,CAAC,CAAC;IACjH,CAAC;IAED,8DAA8D;IAC9D,MAAM,EAAE,GAAgB,eAAe,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;QAC7B,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;YACnD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChC,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QAEF,4CAA4C;QAC5C,IAAI,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,IAAI,iBAAiB,CAAC,UAAU,EAAE,EAAE,CAAC;gBACnC,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxC,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,EAAE,CAAC;QAET,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAe,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAE5B,uCAAuC;YACvC,IAAI,iBAAiB,CAAC,UAAU,EAAE,EAAE,CAAC;gBACnC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBAC/F,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC5B,WAAW,GAAG,IAAI,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACnD,IAAI,QAAQ;oBAAE,OAAO;YACvB,CAAC;YAED,OAAO;YACP,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAChB,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC/F,IAAI,YAAY,EAAE,CAAC;oBACjB,WAAW,GAAG,IAAI,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,GAAG,CAAC,KAAK,CACP,QAAQ,CACN,iBAAiB;oBACf,uCAAuC;oBACvC,sEAAsE;oBACtE,mCAAmC,EACrC,IAAI,CAAC,GAAG,CACT,CACF,CAAC;gBACF,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,yDAAyD;gBACzD,IAAI,CAAC;oBACH,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;oBAC5F,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;oBAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;oBACnH,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;oBACvB,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;wBACtE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;wBAC9E,MAAM,uBAAuB,CAAC,MAAM,EAAE;4BACpC,MAAM,EAAE,MAAM,CAAC,aAAa;4BAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;4BAC7B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;4BAClC,WAAW;4BACX,OAAO,EAAE,MAAM,CAAC,OAAO;yBACxB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACvF,CAAC;gBACD,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YAED,0BAA0B;YAC1B,IAAI,YAAY,EAAE,CAAC;gBACjB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,mCAAmC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnE,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,YAAY,GAAG,IAAI,CAAC;YACpB,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;YAE5C,cAAc;YACd,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;YAC7F,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACtB,GAAG,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;gBACvF,YAAY,GAAG,KAAK,CAAC;gBACrB,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;YAE5B,IAAI,CAAC;gBACH,iBAAiB;gBACjB,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,SAAS,GAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;oBAChF,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;gBAED,mBAAmB;gBACnB,MAAM,YAAY,GAAkB;oBAClC,GAAG,eAAe;oBAClB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;iBAChC,CAAC;gBAEF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB;gBACxC,IAAI,MAAsB,CAAC;gBAC3B,IAAI,cAAc,EAAE,CAAC;oBACnB,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE;wBACnD,QAAQ,EAAE,qBAAqB,CAAC,EAAE,aAAa,EAAE,CAAC;wBAClD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;4BACjB,IAAI,KAAK,CAAC,OAAO;gCAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBAC9C,CAAC;wBACD,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzE,MAAM,EAAE,SAAS;wBACjB,aAAa,EAAE,IAAI,EAAE,WAAW;wBAChC,GAAG,EAAE,SAAS;wBACd,qFAAqF;wBACrF,yEAAyE;wBACzE,oEAAoE;wBACpE,sDAAsD;wBACtD,uCAAuC;wBACvC,MAAM,EAAE,mBAAmB,CAAC,MAAM;wBAClC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9B,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,oBAAoB;oBACpB,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE;wBACzD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;4BACjB,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO;gCAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBAC1D,CAAC;qBACF,CAAC,CAAC;oBACH,MAAM,GAAG;wBACP,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;wBACjF,KAAK,EAAE,YAAY;wBACnB,KAAK,EAAE;4BACL;gCACE,IAAI,EAAE,WAAW;gCACjB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gCACd,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE;gCAC7D,MAAM,EAAE,YAAY;6BACrB;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,2EAA2E;gBAC3E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;wBACzF,GAAG,CAAC,KAAK,CACP,OAAO,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,OAAO,CACrG,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,MAAM;gBACN,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBACH,MAAM,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;oBACnD,CAAC;oBAAC,MAAM,CAAC;wBACP,iBAAiB;oBACnB,CAAC;gBACH,CAAC;gBAED,wDAAwD;gBACxD,eAAe,GAAG;oBAChB,GAAG,MAAM,CAAC,QAAQ;iBACnB,CAAC;gBAEF,mCAAmC;gBACnC,MAAM,SAAS,GAAkB,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,GAAG,SAAS,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;gBAC/D,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,GAAG,KAAK,CAAC;gBACrB,IAAI,WAAW,EAAE,CAAC;oBAChB,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/policy/args-digest.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Sprint 1c-revive-3-D-13 (2026-06-05)
+ *
+ * 稳定 JSON (key 排序) + sha256 前 12 位. 不存原始 args.
+ *
+ * 用户拍板 (2026-06-05): "argsDigest 不存原始 args, 先用稳定 JSON + sha256 前 12 位;
+ *  reason 可以写自然语言, 但不能包含完整文件内容或 secret"
+ *
+ * 注: stable JSON 自己实现, 不引 fast-json-stable-stringify 等 dep, MVP 范围.
+ *     实现注意: 走 string 拼接避免大量递归 JSON.parse/stringify 调用.
+ */
+export declare function computeArgsDigest(args: Record<string, unknown>): string;
+//# sourceMappingURL=args-digest.d.ts.map

package/dist/policy/args-digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args-digest.d.ts","sourceRoot":"","sources":["../../src/policy/args-digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAgBH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAIvE"}

package/dist/policy/args-digest.js

@@ -0,0 +1,29 @@
+/**
+ * Sprint 1c-revive-3-D-13 (2026-06-05)
+ *
+ * 稳定 JSON (key 排序) + sha256 前 12 位. 不存原始 args.
+ *
+ * 用户拍板 (2026-06-05): "argsDigest 不存原始 args, 先用稳定 JSON + sha256 前 12 位;
+ *  reason 可以写自然语言, 但不能包含完整文件内容或 secret"
+ *
+ * 注: stable JSON 自己实现, 不引 fast-json-stable-stringify 等 dep, MVP 范围.
+ *     实现注意: 走 string 拼接避免大量递归 JSON.parse/stringify 调用.
+ */
+import { createHash } from 'node:crypto';
+function stableStringify(value) {
+    if (value === null || typeof value !== 'object') {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return '[' + value.map(stableStringify).join(',') + ']';
+    }
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    return '{' + keys.map((k) => JSON.stringify(k) + ':' + stableStringify(obj[k])).join(',') + '}';
+}
+export function computeArgsDigest(args) {
+    const json = stableStringify(args);
+    const hash = createHash('sha256').update(json, 'utf8').digest('hex');
+    return `sha256:${hash.slice(0, 12)}`;
+}
+//# sourceMappingURL=args-digest.js.map

package/dist/policy/args-digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args-digest.js","sourceRoot":"","sources":["../../src/policy/args-digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA6B;IAC7D,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACvC,CAAC"}

package/dist/policy/chain.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Sprint 1c-revive-3-D-13 (2026-06-05)
+ *
+ * chain 串 static + caller-supplied ToolPolicy.
+ *
+ * Sprint 1c-revive-3-D-13 review P1(b) 修复 (2026-06-05):
+ *   拍板 (用户 2026-06-05): "保持 PolicyDecision 简洁, 在 tool-loop.ts 里保留 raw decision".
+ *   实现: chain.ts **不**做 yes bypass, 直接透传 policy.evaluate 结果. yes bypass 在
+ *   tool-loop.ts 里处理 (调 evaluatePolicy 拿到 raw decision, 自己判断 yes 走 user_approved
+ *   审计 + bypass 路径).
+ *
+ * 拍板红线 (用户 2026-06-05):
+ *   - yes=true 移出 chain (在 tool-loop 处理),保持 PolicyDecision union 简洁 (3 kind)
+ *   - allow 不在 chain 后续层 reject (first allow wins; 但 static 拍 board 只有 allow / deny / require_confirmation 3 个)
+ *   - deny 永远不 bypass (拍板红线)
+ */
+import type { PolicyDecision, PolicyContext, PolicyToolCall, ToolPolicy } from './types.js';
+export declare function evaluatePolicy(toolCall: PolicyToolCall, ctx: PolicyContext, policy?: ToolPolicy): PolicyDecision;
+//# sourceMappingURL=chain.d.ts.map

package/dist/policy/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../src/policy/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG5F,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,aAAa,EAClB,MAAM,GAAE,UAA6B,GACpC,cAAc,CAKhB"}

package/dist/policy/chain.js

@@ -0,0 +1,24 @@
+/**
+ * Sprint 1c-revive-3-D-13 (2026-06-05)
+ *
+ * chain 串 static + caller-supplied ToolPolicy.
+ *
+ * Sprint 1c-revive-3-D-13 review P1(b) 修复 (2026-06-05):
+ *   拍板 (用户 2026-06-05): "保持 PolicyDecision 简洁, 在 tool-loop.ts 里保留 raw decision".
+ *   实现: chain.ts **不**做 yes bypass, 直接透传 policy.evaluate 结果. yes bypass 在
+ *   tool-loop.ts 里处理 (调 evaluatePolicy 拿到 raw decision, 自己判断 yes 走 user_approved
+ *   审计 + bypass 路径).
+ *
+ * 拍板红线 (用户 2026-06-05):
+ *   - yes=true 移出 chain (在 tool-loop 处理),保持 PolicyDecision union 简洁 (3 kind)
+ *   - allow 不在 chain 后续层 reject (first allow wins; 但 static 拍 board 只有 allow / deny / require_confirmation 3 个)
+ *   - deny 永远不 bypass (拍板红线)
+ */
+import { staticToolPolicy } from './static-rules.js';
+export function evaluatePolicy(toolCall, ctx, policy = staticToolPolicy) {
+    // 拍板 (P1 b 修复): chain 只做 policy 评估 + 透传, yes bypass 在 tool-loop.ts 处理.
+    // 这样 tool-loop 拿到的 decision 就是 policy.evaluate 原始结果, 不会被 yes 抹平
+    // (raw decision 保留, 才能落 user_approved 审计).
+    return policy.evaluate(toolCall, ctx);
+}
+//# sourceMappingURL=chain.js.map

package/dist/policy/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../src/policy/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,UAAU,cAAc,CAC5B,QAAwB,EACxB,GAAkB,EAClB,SAAqB,gBAAgB;IAErC,uEAAuE;IACvE,gEAAgE;IAChE,2CAA2C;IAC3C,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/policy/sanitize-reason.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Sprint 1c-revive-3-D-13 (2026-06-05)
+ *
+ * 用户拍板 (2026-06-05): "reason 可以写自然语言, 但不能包含完整文件内容或 secret"
+ * D-13 MVP 拍板: 长度上限 200 + 换行折叠 + 去 NUL. 真正的 secret detection 留给 D-15.
+ *
+ * 拍板红线: sanitized reason 进 SessionEvent policy_decision 落盘, 一旦写错字段
+ * 整个 session 不可读. 拍 board 安全优先.
+ */
+export declare function sanitizeReason(reason: string): string;
+//# sourceMappingURL=sanitize-reason.d.ts.map

package/dist/policy/sanitize-reason.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-reason.d.ts","sourceRoot":"","sources":["../../src/policy/sanitize-reason.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAWrD"}

package/dist/policy/sanitize-reason.js

@@ -0,0 +1,24 @@
+/**
+ * Sprint 1c-revive-3-D-13 (2026-06-05)
+ *
+ * 用户拍板 (2026-06-05): "reason 可以写自然语言, 但不能包含完整文件内容或 secret"
+ * D-13 MVP 拍板: 长度上限 200 + 换行折叠 + 去 NUL. 真正的 secret detection 留给 D-15.
+ *
+ * 拍板红线: sanitized reason 进 SessionEvent policy_decision 落盘, 一旦写错字段
+ * 整个 session 不可读. 拍 board 安全优先.
+ */
+const MAX_REASON_LEN = 200;
+const TRUNCATED_MARKER = '…[truncated]'; // 13 chars (ellipsis counts as 1 utf-16 unit)
+export function sanitizeReason(reason) {
+    // 1. 折叠换行 (\r?\n → ' / '), 单行显示
+    let r = reason.replace(/\r?\n/g, ' / ');
+    // 2. 去 NUL (JSON 写入安全, 防 null byte 注入)
+    // eslint-disable-next-line no-control-regex
+    r = r.replace(/\u0000/g, '');
+    // 3. 长度上限 + 标 truncated
+    if (r.length > MAX_REASON_LEN) {
+        r = r.slice(0, MAX_REASON_LEN - TRUNCATED_MARKER.length) + TRUNCATED_MARKER;
+    }
+    return r;
+}
+//# sourceMappingURL=sanitize-reason.js.map

package/dist/policy/sanitize-reason.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-reason.js","sourceRoot":"","sources":["../../src/policy/sanitize-reason.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,gBAAgB,GAAG,cAAc,CAAC,CAAC,8CAA8C;AAEvF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,gCAAgC;IAChC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxC,uCAAuC;IACvC,4CAA4C;IAC5C,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7B,wBAAwB;IACxB,IAAI,CAAC,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAC9B,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/policy/static-rules.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Sprint 1c-revive-3-D-13 (2026-06-05): 默认静态规则.
+ * Sprint 1c-revive-3-D-13 review P1 修复 (2026-06-05):
+ *   - 合并 command + args 成 1 条字符串再 regex match (解决 `mv a b` / `cp a b` 等
+ *     command-only regex 漏判的问题). 不引 shlex dep, 拍板 MVP 接受 edge case 漏判.
+ *   - 拍板 (用户 2026-06-05 review): "v1.0 红线是'未经确认不 mv', 不只是 /etc/系统路径;
+ *     cp 一起收, 宁可多弹确认". 加 mv / cp 全部 → require_confirmation.
+ *
+ * 拍板 (用户 2026-06-05):
+ *   - A1: 默认规则 (read/find/grep 全 allow, write/edit 全 require_confirmation)
+ *   - B1: bash 用 regex/argv-light 检测危险模式 → require_confirmation (不直接 deny,
+ *     误判只是多弹确认, 比 deny 漏判安全)
+ *   - R-1: race 接受为 MVP 风险, D-15 用 inotify / mutex 收
+ *   - R-2: bash 漏判 (e.g. shlex quote 拆分) 接受, 走 require_confirmation 而非 deny
+ *
+ * 不做 (D-15):
+ *   - 用户 config 注入 (ToolPolicy 透传, D-13 默认走 static)
+ *   - 路径白名单/黑名单
+ *   - Bash argv deep parse (e.g. shlex)
+ *   - Secret 强检测 (redact API key in reason)
+ */
+import type { PolicyDecision, ToolPolicy } from './types.js';
+/**
+ * bash regex 危险模式 — 暴露给 tool-loop 在 bash 工具自身层也用 (双重防线)
+ *
+ * Sprint 1c-revive-3-D-13 review P1 修复 (2026-06-05):
+ *   拍板 (用户 2026-06-05): "bash 检测先轻量合并 command + args"
+ *   不引 shlex dep, MVP 接受 quote 拆分漏判 (R-2 拍板).
+ */
+export declare function evaluateBashCommand(cmd: string, args: ReadonlyArray<string>): PolicyDecision;
+export declare const staticToolPolicy: ToolPolicy;
+//# sourceMappingURL=static-rules.d.ts.map

package/dist/policy/static-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-rules.d.ts","sourceRoot":"","sources":["../../src/policy/static-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAiC,UAAU,EAAE,MAAM,YAAY,CAAC;AAwC5F;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,cAAc,CAa5F;AAyBD,eAAO,MAAM,gBAAgB,EAAE,UAK9B,CAAC"}