@dommaker/harness 0.8.1 → 0.9.0

package/dist/safety/sandbox.js

@@ -0,0 +1,134 @@
+"use strict";
+/**
+ * Sandbox 安全级别管理
+ *
+ * 四级权限模型：
+ * Level 1: 只读文件系统，无网络，无 shell
+ * Level 2: 可写限定目录（.harness/），无网络
+ * Level 3: 可写项目目录，受限网络（白名单）
+ * Level 4: 完全权限，需用户确认
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sandbox = void 0;
+const LEVEL_DESCRIPTIONS = {
+    1: '只读文件系统，无网络，无 shell',
+    2: '可写限定目录（.harness/），无网络',
+    3: '可写项目目录，受限网络（白名单）',
+    4: '完全权限，需用户确认',
+};
+const DEFAULT_WRITABLE_DIRS = ['.harness/'];
+class Sandbox {
+    config;
+    constructor(config) {
+        this.config = {
+            level: config?.level ?? 3,
+            writableDirs: config?.writableDirs ?? DEFAULT_WRITABLE_DIRS,
+            allowedHosts: config?.allowedHosts ?? [],
+            requiresConfirmation: config?.requiresConfirmation ?? (config?.level === 4),
+        };
+    }
+    getLevel() {
+        return this.config.level;
+    }
+    getDescription() {
+        return LEVEL_DESCRIPTIONS[this.config.level];
+    }
+    /**
+     * 检查当前级别是否满足操作所需级别
+     */
+    check(requiredLevel) {
+        const allowed = this.config.level >= requiredLevel;
+        return {
+            allowed,
+            reason: allowed ? undefined : `当前 Level ${this.config.level} 不满足操作所需的 Level ${requiredLevel}`,
+            currentLevel: this.config.level,
+            requiredLevel,
+        };
+    }
+    /**
+     * 检查文件写入是否允许
+     */
+    checkFileWrite(filePath) {
+        if (this.config.level >= 3) {
+            return { allowed: true, currentLevel: this.config.level, requiredLevel: 3 };
+        }
+        if (this.config.level >= 2) {
+            const inWritableDir = this.config.writableDirs?.some(dir => filePath.startsWith(dir));
+            if (inWritableDir) {
+                return { allowed: true, currentLevel: this.config.level, requiredLevel: 2 };
+            }
+            return {
+                allowed: false,
+                reason: `Level 2 只允许写入 ${this.config.writableDirs?.join(', ')}`,
+                currentLevel: this.config.level,
+                requiredLevel: 3,
+            };
+        }
+        return {
+            allowed: false,
+            reason: 'Level 1 禁止写入任何文件',
+            currentLevel: this.config.level,
+            requiredLevel: 2,
+        };
+    }
+    /**
+     * 检查网络访问是否允许
+     */
+    checkNetworkAccess(host) {
+        if (this.config.level >= 4) {
+            return { allowed: true, currentLevel: this.config.level, requiredLevel: 4 };
+        }
+        if (this.config.level >= 3) {
+            const allowed = this.config.allowedHosts?.includes(host) ?? false;
+            return {
+                allowed,
+                reason: allowed ? undefined : `Host ${host} 不在白名单中`,
+                currentLevel: this.config.level,
+                requiredLevel: 3,
+            };
+        }
+        return {
+            allowed: false,
+            reason: `Level ${this.config.level} 禁止网络访问`,
+            currentLevel: this.config.level,
+            requiredLevel: 3,
+        };
+    }
+    /**
+     * 检查 shell 命令是否允许
+     */
+    checkShellAccess() {
+        if (this.config.level >= 3) {
+            return { allowed: true, currentLevel: this.config.level, requiredLevel: 3 };
+        }
+        return {
+            allowed: false,
+            reason: `Level ${this.config.level} 禁止 shell 访问`,
+            currentLevel: this.config.level,
+            requiredLevel: 3,
+        };
+    }
+    /**
+     * 检查是否需要用户确认
+     */
+    needsConfirmation() {
+        return this.config.requiresConfirmation ?? false;
+    }
+    /**
+     * 升级到指定级别
+     */
+    upgradeTo(level) {
+        this.config.level = level;
+        if (level === 4) {
+            this.config.requiresConfirmation = true;
+        }
+    }
+    /**
+     * 获取当前配置
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+exports.Sandbox = Sandbox;
+//# sourceMappingURL=sandbox.js.map

package/dist/safety/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/safety/sandbox.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAIH,MAAM,kBAAkB,GAAiC;IACvD,CAAC,EAAE,oBAAoB;IACvB,CAAC,EAAE,uBAAuB;IAC1B,CAAC,EAAE,kBAAkB;IACrB,CAAC,EAAE,YAAY;CAChB,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,WAAW,CAAC,CAAC;AAE5C,MAAa,OAAO;IACV,MAAM,CAAgB;IAE9B,YAAY,MAA+B;QACzC,IAAI,CAAC,MAAM,GAAG;YACZ,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;YACzB,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,qBAAqB;YAC3D,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE;YACxC,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,CAAC,CAAC;SAC5E,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED,cAAc;QACZ,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAA2B;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;QACnD,OAAO;YACL,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,mBAAmB,aAAa,EAAE;YAC7F,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YAC/B,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACtF,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/D,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;gBAC/B,aAAa,EAAE,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YAC/B,aAAa,EAAE,CAAC;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,IAAY;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAClE,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS;gBACnD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;gBAC/B,aAAa,EAAE,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS;YAC3C,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YAC/B,aAAa,EAAE,CAAC;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,cAAc;YAChD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YAC/B,aAAa,EAAE,CAAC;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,KAAK,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmB;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QAC1B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AA9HD,0BA8HC"}

package/dist/safety/tool-guardrail.d.ts

@@ -0,0 +1,51 @@
+/**
+ * 工具护栏
+ *
+ * 每次工具调用前检查：
+ * - 命令黑名单
+ * - Sandbox 级别检查
+ * - 速率限制
+ */
+import type { ToolCheckResult, ToolGuardrailConfig, SandboxLevel } from './types';
+import { Sandbox } from './sandbox';
+export declare class ToolGuardrail {
+    private blacklistedCommands;
+    private rateLimit;
+    private toolSandboxLevels;
+    private rateLimitState;
+    private sandbox;
+    constructor(sandbox: Sandbox, config?: ToolGuardrailConfig);
+    /**
+     * 检查工具调用是否允许
+     */
+    check(toolName: string, command?: string): ToolCheckResult;
+    /**
+     * 检查命令黑名单
+     */
+    private checkBlacklist;
+    /**
+     * 检查 sandbox 级别
+     */
+    private checkSandboxLevel;
+    /**
+     * 检查速率限制
+     */
+    private checkRateLimit;
+    /**
+     * 添加黑名单命令
+     */
+    addBlacklistedCommand(command: string): void;
+    /**
+     * 设置工具 sandbox 级别要求
+     */
+    setToolSandboxLevel(toolName: string, level: SandboxLevel): void;
+    /**
+     * 重置速率限制状态
+     */
+    resetRateLimits(): void;
+    /**
+     * 获取 sandbox 实例
+     */
+    getSandbox(): Sandbox;
+}
+//# sourceMappingURL=tool-guardrail.d.ts.map

package/dist/safety/tool-guardrail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guardrail.d.ts","sourceRoot":"","sources":["../../src/safety/tool-guardrail.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,eAAe,EAEf,mBAAmB,EAEnB,YAAY,EACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,qBAAa,aAAa;IACxB,OAAO,CAAC,mBAAmB,CAAW;IACtC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,OAAO,CAAU;gBAEb,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,mBAAmB;IAQ1D;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe;IAoB1D;;OAEG;IACH,OAAO,CAAC,cAAc;IAkBtB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAmBzB;;OAEG;IACH,OAAO,CAAC,cAAc;IA+BtB;;OAEG;IACH,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI5C;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI;IAIhE;;OAEG;IACH,eAAe,IAAI,IAAI;IAIvB;;OAEG;IACH,UAAU,IAAI,OAAO;CAGtB"}

package/dist/safety/tool-guardrail.js

@@ -0,0 +1,147 @@
+"use strict";
+/**
+ * 工具护栏
+ *
+ * 每次工具调用前检查：
+ * - 命令黑名单
+ * - Sandbox 级别检查
+ * - 速率限制
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ToolGuardrail = void 0;
+const DEFAULT_BLACKLISTED_COMMANDS = [
+    'rm -rf /',
+    'rm -rf /*',
+    'mkfs',
+    'dd if=',
+    ':(){:|:&};:', // fork bomb
+    'chmod -R 777 /',
+    '| sh',
+    '| bash',
+    'eval(',
+    'exec(',
+];
+const DEFAULT_RATE_LIMIT = 60; // per minute
+class ToolGuardrail {
+    blacklistedCommands;
+    rateLimit;
+    toolSandboxLevels;
+    rateLimitState;
+    sandbox;
+    constructor(sandbox, config) {
+        this.sandbox = sandbox;
+        this.blacklistedCommands = config?.blacklistedCommands ?? DEFAULT_BLACKLISTED_COMMANDS;
+        this.rateLimit = config?.rateLimit ?? DEFAULT_RATE_LIMIT;
+        this.toolSandboxLevels = config?.toolSandboxLevels ?? {};
+        this.rateLimitState = new Map();
+    }
+    /**
+     * 检查工具调用是否允许
+     */
+    check(toolName, command) {
+        const violations = [];
+        // 命令黑名单检查
+        if (command) {
+            violations.push(...this.checkBlacklist(toolName, command));
+        }
+        // Sandbox 级别检查
+        violations.push(...this.checkSandboxLevel(toolName));
+        // 速率限制检查
+        violations.push(...this.checkRateLimit(toolName));
+        return {
+            allowed: violations.length === 0,
+            violations,
+        };
+    }
+    /**
+     * 检查命令黑名单
+     */
+    checkBlacklist(toolName, command) {
+        const violations = [];
+        const lower = command.toLowerCase();
+        for (const blocked of this.blacklistedCommands) {
+            if (lower.includes(blocked.toLowerCase())) {
+                violations.push({
+                    type: 'blacklist',
+                    severity: 'high',
+                    description: `命令包含被阻止的模式: ${blocked}`,
+                    toolName,
+                });
+            }
+        }
+        return violations;
+    }
+    /**
+     * 检查 sandbox 级别
+     */
+    checkSandboxLevel(toolName) {
+        const violations = [];
+        const requiredLevel = this.toolSandboxLevels[toolName];
+        if (requiredLevel !== undefined) {
+            const result = this.sandbox.check(requiredLevel);
+            if (!result.allowed) {
+                violations.push({
+                    type: 'sandbox',
+                    severity: 'high',
+                    description: result.reason ?? `工具 ${toolName} 需要 Level ${requiredLevel}`,
+                    toolName,
+                });
+            }
+        }
+        return violations;
+    }
+    /**
+     * 检查速率限制
+     */
+    checkRateLimit(toolName) {
+        const violations = [];
+        const now = Date.now();
+        const state = this.rateLimitState.get(toolName);
+        if (!state) {
+            this.rateLimitState.set(toolName, { count: 1, windowStart: now });
+            return violations;
+        }
+        // 重置窗口（1 分钟）
+        if (now - state.windowStart > 60000) {
+            state.count = 1;
+            state.windowStart = now;
+            return violations;
+        }
+        state.count++;
+        if (state.count > this.rateLimit) {
+            violations.push({
+                type: 'rate_limit',
+                severity: 'medium',
+                description: `工具 ${toolName} 超过速率限制 (${this.rateLimit}/min)`,
+                toolName,
+            });
+        }
+        return violations;
+    }
+    /**
+     * 添加黑名单命令
+     */
+    addBlacklistedCommand(command) {
+        this.blacklistedCommands.push(command);
+    }
+    /**
+     * 设置工具 sandbox 级别要求
+     */
+    setToolSandboxLevel(toolName, level) {
+        this.toolSandboxLevels[toolName] = level;
+    }
+    /**
+     * 重置速率限制状态
+     */
+    resetRateLimits() {
+        this.rateLimitState.clear();
+    }
+    /**
+     * 获取 sandbox 实例
+     */
+    getSandbox() {
+        return this.sandbox;
+    }
+}
+exports.ToolGuardrail = ToolGuardrail;
+//# sourceMappingURL=tool-guardrail.js.map

package/dist/safety/tool-guardrail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guardrail.js","sourceRoot":"","sources":["../../src/safety/tool-guardrail.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAWH,MAAM,4BAA4B,GAAG;IACnC,UAAU;IACV,WAAW;IACX,MAAM;IACN,QAAQ;IACR,aAAa,EAAG,YAAY;IAC5B,gBAAgB;IAChB,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;CACR,CAAC;AAEF,MAAM,kBAAkB,GAAG,EAAE,CAAC,CAAC,aAAa;AAE5C,MAAa,aAAa;IAChB,mBAAmB,CAAW;IAC9B,SAAS,CAAS;IAClB,iBAAiB,CAA+B;IAChD,cAAc,CAA8B;IAC5C,OAAO,CAAU;IAEzB,YAAY,OAAgB,EAAE,MAA4B;QACxD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,mBAAmB,GAAG,MAAM,EAAE,mBAAmB,IAAI,4BAA4B,CAAC;QACvF,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAgB,EAAE,OAAgB;QACtC,MAAM,UAAU,GAAoB,EAAE,CAAC;QAEvC,UAAU;QACV,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,eAAe;QACf,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAErD,SAAS;QACT,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAElD,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,QAAgB,EAAE,OAAe;QACtD,MAAM,UAAU,GAAoB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAEpC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM;oBAChB,WAAW,EAAE,eAAe,OAAO,EAAE;oBACrC,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB;QACxC,MAAM,UAAU,GAAoB,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAEvD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,MAAM;oBAChB,WAAW,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,QAAQ,aAAa,aAAa,EAAE;oBACxE,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,QAAgB;QACrC,MAAM,UAAU,GAAoB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YAClE,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,aAAa;QACb,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,KAAK,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;YAChB,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;YACxB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,MAAM,QAAQ,YAAY,IAAI,CAAC,SAAS,OAAO;gBAC5D,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAe;QACnC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,QAAgB,EAAE,KAAmB;QACvD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AA9ID,sCA8IC"}

package/dist/safety/types.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Safety Guardrails 类型定义
+ */
+/** Sandbox 安全级别 */
+export type SandboxLevel = 1 | 2 | 3 | 4;
+/** Sandbox 配置 */
+export interface SandboxConfig {
+    level: SandboxLevel;
+    /** 允许写入的目录（Level 2+） */
+    writableDirs?: string[];
+    /** 允许的网络白名单（Level 3） */
+    allowedHosts?: string[];
+    /** 需要用户确认的操作（Level 4） */
+    requiresConfirmation?: boolean;
+}
+/** Sandbox 权限检查结果 */
+export interface SandboxCheckResult {
+    allowed: boolean;
+    reason?: string;
+    currentLevel: SandboxLevel;
+    requiredLevel: SandboxLevel;
+}
+/** 输入检查结果 */
+export interface InputCheckResult {
+    safe: boolean;
+    violations: InputViolation[];
+}
+/** 输入违规 */
+export interface InputViolation {
+    type: 'injection' | 'intent' | 'permission';
+    severity: 'low' | 'medium' | 'high';
+    description: string;
+    matchedPattern?: string;
+}
+/** 输入护栏配置 */
+export interface InputGuardrailConfig {
+    /** 注入检测模式 */
+    injectionPatterns?: RegExp[];
+    /** 禁止的意图关键词 */
+    blockedIntents?: string[];
+    /** 最大输入长度 */
+    maxInputLength?: number;
+}
+/** 输出检查结果 */
+export interface OutputSafetyCheckResult {
+    safe: boolean;
+    violations: OutputViolation[];
+    sanitizedContent?: string;
+}
+/** 输出违规 */
+export interface OutputViolation {
+    type: 'sensitive_info' | 'quality' | 'knowledge_missing';
+    severity: 'low' | 'medium' | 'high';
+    description: string;
+    location?: {
+        line: number;
+        column: number;
+    };
+    matchedPattern?: string;
+}
+/** 输出护栏配置 */
+export interface OutputGuardrailConfig {
+    /** 敏感信息模式（API keys, passwords, etc.） */
+    sensitivePatterns?: RegExp[];
+    /** 代码质量最低分数 */
+    minQualityScore?: number;
+    /** 是否检查知识引用完整性 */
+    checkKnowledgeRefs?: boolean;
+}
+/** 工具检查结果 */
+export interface ToolCheckResult {
+    allowed: boolean;
+    violations: ToolViolation[];
+}
+/** 工具违规 */
+export interface ToolViolation {
+    type: 'blacklist' | 'sandbox' | 'rate_limit';
+    severity: 'low' | 'medium' | 'high';
+    description: string;
+    toolName?: string;
+}
+/** 工具护栏配置 */
+export interface ToolGuardrailConfig {
+    /** 命令黑名单 */
+    blacklistedCommands?: string[];
+    /** 每分钟最大调用次数 */
+    rateLimit?: number;
+    /** 各工具的 sandbox 级别要求 */
+    toolSandboxLevels?: Record<string, SandboxLevel>;
+}
+/** 速率限制状态 */
+export interface RateLimitState {
+    count: number;
+    windowStart: number;
+}
+/** 安全检查汇总 */
+export interface SafetyCheckResult {
+    safe: boolean;
+    inputCheck: InputCheckResult;
+    outputCheck: OutputSafetyCheckResult;
+    toolCheck: ToolCheckResult;
+    timestamp: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/safety/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/safety/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,mBAAmB;AACnB,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEzC,iBAAiB;AACjB,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,YAAY,CAAC;IACpB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,yBAAyB;IACzB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,qBAAqB;AACrB,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,YAAY,CAAC;CAC7B;AAID,aAAa;AACb,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,cAAc,EAAE,CAAC;CAC9B;AAED,WAAW;AACX,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,YAAY,CAAC;IAC5C,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,aAAa;AACb,MAAM,WAAW,oBAAoB;IACnC,aAAa;IACb,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe;IACf,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,aAAa;AACb,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,WAAW;AACX,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,mBAAmB,CAAC;IACzD,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,aAAa;AACb,MAAM,WAAW,qBAAqB;IACpC,wCAAwC;IACxC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB;IAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAID,aAAa;AACb,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED,WAAW;AACX,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC7C,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,aAAa;AACb,MAAM,WAAW,mBAAmB;IAClC,YAAY;IACZ,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,gBAAgB;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAClD;AAED,aAAa;AACb,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,aAAa;AACb,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,gBAAgB,CAAC;IAC7B,WAAW,EAAE,uBAAuB,CAAC;IACrC,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/safety/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * Safety Guardrails 类型定义
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/safety/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/safety/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/tools/core/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * 核心工具定义
+ *
+ * 内置工具：file / git / npm / shell
+ */
+import type { ToolDefinition } from '../types';
+export declare const FILE_TOOLS: ToolDefinition[];
+export declare const GIT_TOOLS: ToolDefinition[];
+export declare const NPM_TOOLS: ToolDefinition[];
+export declare const SHELL_TOOLS: ToolDefinition[];
+/** 所有核心工具 */
+export declare const CORE_TOOLS: ToolDefinition[];
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/core/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,eAAO,MAAM,UAAU,EAAE,cAAc,EA8DtC,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,cAAc,EAqDrC,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,cAAc,EA6CrC,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,cAAc,EAkBvC,CAAC;AAEF,aAAa;AACb,eAAO,MAAM,UAAU,EAAE,cAAc,EAKtC,CAAC"}