@downcity/plugins 1.0.64 → 1.0.71

package/src/shell/runtime/ShellActionRuntimeSupport.ts

@@ -1,477 +0,0 @@
-/**
- * Shell action 运行时辅助能力。
- *
- * 关键点（中文）
- * - 统一承载 ShellActionRuntime 的内部共享逻辑：环境组装、持久化、waiter 协调、session 查找。
- * - 对外暴露给 ShellActionRuntime 的只有纯运行时辅助函数，不直接承担 plugin action 编排。
- */
-
-import path from "node:path";
-import fs from "fs-extra";
-import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import type {
-  ShellPluginState,
-  ShellSessionRuntimeState,
-} from "@/shell/ShellRuntimeTypes.js";
-import type {
-  ResolvedShellPluginOptions,
-  ShellPluginOptions,
-} from "@/shell/types/ShellPluginOptions.js";
-import type {
-  ShellQueryRequest,
-  ShellSessionSnapshot,
-  ShellSessionStatus,
-} from "@downcity/agent/internal/executor/tools/shell/types/ShellPlugin.js";
-import { getShellOutputPath, getShellSnapshotPath } from "./Paths.js";
-import { readChatMetaBySessionId } from "@/chat/runtime/ChatMetaStore.js";
-import { resolveChatQueueStore } from "@/chat/runtime/ChatQueueStore.js";
-import { resolveOwnerContextId } from "./ShellRuntimeEnvironment.js";
-export {
-  buildShellEnv,
-  resolveOwnerContextId,
-  resolveShellCwd,
-} from "./ShellRuntimeEnvironment.js";
-export {
-  buildActionResponse,
-  createOutputChunk,
-} from "./ShellActionResponse.js";
-
-const DEFAULT_SHELL_PLUGIN_OPTIONS: ResolvedShellPluginOptions = {
-  maxActiveShells: 64,
-  cleanupDelayMs: 10 * 60 * 1000,
-  maxInMemoryOutputChars: 1_000_000,
-  outputPreviewChars: 280,
-  minWaitMs: 50,
-  maxWaitMs: 30_000,
-  defaultInlineWaitMs: 1_200,
-  defaultWaitTimeoutMs: 10_000,
-  defaultExecTimeoutMs: 60_000,
-  defaultApprovalTimeoutMs: 120_000,
-};
-
-/**
- * shell.start 默认内联等待时间。
- */
-export const DEFAULT_INLINE_WAIT_MS = DEFAULT_SHELL_PLUGIN_OPTIONS.defaultInlineWaitMs;
-
-/**
- * shell.wait 默认等待超时。
- */
-export const DEFAULT_WAIT_TIMEOUT_MS = DEFAULT_SHELL_PLUGIN_OPTIONS.defaultWaitTimeoutMs;
-
-/**
- * shell.exec 默认总超时。
- */
-export const DEFAULT_EXEC_TIMEOUT_MS = DEFAULT_SHELL_PLUGIN_OPTIONS.defaultExecTimeoutMs;
-
-function readPositiveInteger(
-  value: number | undefined,
-  fallback: number,
-): number {
-  if (typeof value !== "number" || !Number.isFinite(value)) {
-    return fallback;
-  }
-  return Math.max(1, Math.floor(value));
-}
-
-/**
- * 归一化 ShellPlugin 可选运行参数。
- */
-export function resolveShellPluginOptions(
-  options: ShellPluginOptions = {},
-): ResolvedShellPluginOptions {
-  const minWaitMs = readPositiveInteger(
-    options.minWaitMs,
-    DEFAULT_SHELL_PLUGIN_OPTIONS.minWaitMs,
-  );
-  const maxWaitMs = Math.max(
-    minWaitMs,
-    readPositiveInteger(
-      options.maxWaitMs,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.maxWaitMs,
-    ),
-  );
-  return {
-    maxActiveShells: readPositiveInteger(
-      options.maxActiveShells,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.maxActiveShells,
-    ),
-    cleanupDelayMs: readPositiveInteger(
-      options.cleanupDelayMs,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.cleanupDelayMs,
-    ),
-    maxInMemoryOutputChars: readPositiveInteger(
-      options.maxInMemoryOutputChars,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.maxInMemoryOutputChars,
-    ),
-    outputPreviewChars: readPositiveInteger(
-      options.outputPreviewChars,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.outputPreviewChars,
-    ),
-    minWaitMs,
-    maxWaitMs,
-    defaultInlineWaitMs: readPositiveInteger(
-      options.defaultInlineWaitMs,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.defaultInlineWaitMs,
-    ),
-    defaultWaitTimeoutMs: readPositiveInteger(
-      options.defaultWaitTimeoutMs,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.defaultWaitTimeoutMs,
-    ),
-    defaultExecTimeoutMs: readPositiveInteger(
-      options.defaultExecTimeoutMs,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.defaultExecTimeoutMs,
-    ),
-    defaultApprovalTimeoutMs: readPositiveInteger(
-      options.defaultApprovalTimeoutMs,
-      DEFAULT_SHELL_PLUGIN_OPTIONS.defaultApprovalTimeoutMs,
-    ),
-  };
-}
-
-/**
- * 创建 shell plugin runtime 初始状态。
- */
-export function createShellPluginState(
-  options: ShellPluginOptions = {},
-): ShellPluginState {
-  return {
-    options: resolveShellPluginOptions(options),
-    sessions: new Map<string, ShellSessionRuntimeState>(),
-    approvals: new Map(),
-    context: null,
-  };
-}
-
-/**
- * 返回当前毫秒时间戳。
- */
-export function nowMs(): number {
-  return Date.now();
-}
-
-/**
- * 归一化 wait/timeout 参数。
- */
-export function clampWaitMs(value: number | undefined, fallback: number): number {
-  return clampWaitMsWithOptions(DEFAULT_SHELL_PLUGIN_OPTIONS, value, fallback);
-}
-
-/**
- * 结合 ShellPlugin options 归一化 wait/timeout 参数。
- */
-export function clampWaitMsWithOptions(
-  options: ResolvedShellPluginOptions,
-  value: number | undefined,
-  fallback: number,
-): number {
-  const raw =
-    typeof value === "number" && Number.isFinite(value)
-      ? Math.floor(value)
-      : fallback;
-  return Math.min(options.maxWaitMs, Math.max(options.minWaitMs, raw));
-}
-
-function normalizeOutputChunk(raw: string): string {
-  if (!raw) return "";
-  return raw
-    .replace(/\r\n/g, "\n")
-    .replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, "");
-}
-
-function deriveExitStatus(exitCode: number | undefined): ShellSessionStatus {
-  if (exitCode === -9 || exitCode === 137) return "killed";
-  if (typeof exitCode === "number" && exitCode === 0) return "completed";
-  return "failed";
-}
-
-/**
- * 判断 shell 是否已进入终态。
- */
-export function isTerminalStatus(status: ShellSessionStatus): boolean {
-  return (
-    status === "completed" ||
-    status === "failed" ||
-    status === "killed" ||
-    status === "expired"
-  );
-}
-
-function extractExternalRefsFromText(
-  text: string,
-  current: ShellSessionSnapshot["externalRefs"],
-): ShellSessionSnapshot["externalRefs"] {
-  const next = [...current];
-  const register = (kind: string, value: string, label?: string): void => {
-    const normalized = String(value || "").trim();
-    if (!normalized) return;
-    if (next.some((item) => item.kind === kind && item.value === normalized)) return;
-    next.push({ kind, value: normalized, ...(label ? { label } : {}) });
-  };
-
-  const threadIdRegex = /thread_id[:=]\s*([a-zA-Z0-9_-]{6,})/g;
-  for (const match of text.matchAll(threadIdRegex)) {
-    register("thread_id", String(match[1] || ""), "external thread id");
-  }
-  return next;
-}
-
-/**
- * 持久化 shell snapshot。
- */
-export async function persistSnapshot(session: ShellSessionRuntimeState): Promise<void> {
-  await fs.ensureDir(path.dirname(session.snapshotFilePath));
-  await fs.writeJson(session.snapshotFilePath, session.snapshot, { spaces: 2 });
-}
-
-function enqueuePersistedAppend(
-  session: ShellSessionRuntimeState,
-  text: string,
-): Promise<void> {
-  session.writeChain = session.writeChain.then(async () => {
-    await fs.ensureDir(path.dirname(session.outputFilePath));
-    await fs.appendFile(session.outputFilePath, text, "utf-8");
-  });
-  return session.writeChain;
-}
-
-function notifyWaiters(session: ShellSessionRuntimeState): void {
-  for (const waiter of Array.from(session.waiters)) {
-    clearTimeout(waiter.timer);
-    session.waiters.delete(waiter);
-    waiter.resolve();
-  }
-}
-
-async function emitChatCompletionEvent(
-  context: AgentContext,
-  snapshot: ShellSessionSnapshot,
-): Promise<void> {
-  const ownerContextId = String(snapshot.ownerContextId || "").trim();
-  if (!ownerContextId || snapshot.notificationSent !== false) return;
-
-  const meta = await readChatMetaBySessionId({ context, sessionId: ownerContextId });
-  if (!meta) return;
-
-  const lines = [
-    "[内部 shell 状态通知]",
-    `shell_id: ${snapshot.shellId}`,
-    `status: ${snapshot.status}`,
-    `exit_code: ${typeof snapshot.exitCode === "number" ? snapshot.exitCode : "null"}`,
-    `cmd: ${snapshot.cmd}`,
-  ];
-  if (snapshot.lastOutputPreview) {
-    lines.push(`last_output_preview: ${snapshot.lastOutputPreview}`);
-  }
-  if (snapshot.externalRefs.length > 0) {
-    const refs = snapshot.externalRefs.map((item) => `${item.kind}=${item.value}`);
-    lines.push(`external_refs: ${refs.join(", ")}`);
-  }
-  lines.push("请根据当前 shell 的状态，主动向用户简洁汇报结果或最新进展。");
-  const text = lines.join("\n");
-
-  resolveChatQueueStore(context).enqueue({
-    kind: "exec",
-    channel: meta.channel,
-    targetId: meta.chatId,
-    sessionId: ownerContextId,
-    text,
-    ...(meta.targetType ? { targetType: meta.targetType } : {}),
-    ...(typeof meta.threadId === "number" ? { threadId: meta.threadId } : {}),
-    ...(meta.messageId ? { messageId: meta.messageId } : {}),
-    ...(meta.actorId ? { actorId: meta.actorId } : {}),
-    ...(meta.actorName ? { actorName: meta.actorName } : {}),
-    extra: {
-      note: "shell_session_auto_notify",
-      internal: true,
-      shellId: snapshot.shellId,
-      shellStatus: snapshot.status,
-      exitCode:
-        typeof snapshot.exitCode === "number" ? snapshot.exitCode : null,
-    },
-  });
-}
-
-/**
- * 更新 session snapshot 并唤醒等待者。
- */
-export async function updateSessionSnapshot(
-  session: ShellSessionRuntimeState,
-  updater: (snapshot: ShellSessionSnapshot) => void | ShellSessionSnapshot,
-): Promise<void> {
-  const result = updater(session.snapshot);
-  if (result) {
-    session.snapshot = result;
-  }
-  session.snapshot.updatedAt = nowMs();
-  session.snapshot.version += 1;
-  await persistSnapshot(session);
-  notifyWaiters(session);
-}
-
-/**
- * 追加 shell 输出并同步更新快照。
- */
-export async function appendSessionOutput(
-  state: ShellPluginState,
-  session: ShellSessionRuntimeState,
-  raw: string,
-): Promise<void> {
-  const text = normalizeOutputChunk(raw);
-  if (!text) return;
-
-  session.outputText += text;
-  if (session.outputText.length > state.options.maxInMemoryOutputChars) {
-    const overflow = session.outputText.length - state.options.maxInMemoryOutputChars;
-    session.outputText = session.outputText.slice(overflow);
-    session.snapshot.droppedChars += overflow;
-  }
-
-  session.snapshot.outputChars += text.length;
-  session.snapshot.lastOutputAt = nowMs();
-  session.snapshot.lastOutputPreview = session.outputText
-    .slice(-state.options.outputPreviewChars)
-    .trim();
-  session.snapshot.externalRefs = extractExternalRefsFromText(
-    text,
-    session.snapshot.externalRefs,
-  );
-  await enqueuePersistedAppend(session, text);
-  await updateSessionSnapshot(session, () => undefined);
-}
-
-/**
- * 为终态 shell 安排延迟清理。
- */
-export function scheduleCleanup(state: ShellPluginState, shellId: string): void {
-  const session = state.sessions.get(shellId);
-  if (!session) return;
-  if (session.cleanupTimer) clearTimeout(session.cleanupTimer);
-  session.cleanupTimer = setTimeout(() => {
-    const current = state.sessions.get(shellId);
-    if (!current) return;
-    state.sessions.delete(shellId);
-  }, state.options.cleanupDelayMs);
-  if (typeof session.cleanupTimer.unref === "function") {
-    session.cleanupTimer.unref();
-  }
-}
-
-/**
- * 控制 in-memory shell session 容量。
- */
-export function ensureCapacity(state: ShellPluginState): void {
-  if (state.sessions.size < state.options.maxActiveShells) return;
-  const removable = Array.from(state.sessions.values())
-    .filter((item) => item.snapshot.status !== "running" && item.snapshot.status !== "starting")
-    .sort((a, b) => a.snapshot.updatedAt - b.snapshot.updatedAt);
-  for (const item of removable) {
-    if (state.sessions.size < state.options.maxActiveShells) break;
-    state.sessions.delete(item.snapshot.shellId);
-  }
-  if (state.sessions.size >= state.options.maxActiveShells) {
-    throw new Error(
-      `Too many active shell sessions (${state.sessions.size}). Please close or wait older sessions first.`,
-    );
-  }
-}
-
-async function loadPersistedSnapshot(
-  context: AgentContext,
-  shellId: string,
-): Promise<ShellSessionSnapshot | null> {
-  const file = getShellSnapshotPath(context.rootPath, shellId);
-  if (!(await fs.pathExists(file))) return null;
-  const raw = await fs.readJson(file).catch(() => null);
-  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
-  const snapshot = raw as ShellSessionSnapshot;
-  return typeof snapshot.shellId === "string" ? snapshot : null;
-}
-
-async function readPersistedOutput(
-  context: AgentContext,
-  shellId: string,
-): Promise<string> {
-  const file = getShellOutputPath(context.rootPath, shellId);
-  if (!(await fs.pathExists(file))) return "";
-  return await fs.readFile(file, "utf-8");
-}
-
-/**
- * 按 shellId 或 ownerContext 解析目标 session。
- */
-export async function resolveSession(
-  state: ShellPluginState,
-  context: AgentContext,
-  query: ShellQueryRequest,
-): Promise<ShellSessionRuntimeState | { snapshot: ShellSessionSnapshot; outputText: string } | null> {
-  const explicitShellId = String(query.shellId || "").trim();
-  if (explicitShellId) {
-    const inMemory = state.sessions.get(explicitShellId);
-    if (inMemory) return inMemory;
-    const snapshot = await loadPersistedSnapshot(context, explicitShellId);
-    if (!snapshot) return null;
-    return {
-      snapshot,
-      outputText: await readPersistedOutput(context, explicitShellId),
-    };
-  }
-
-  const ownerContextId = resolveOwnerContextId(query.ownerContextId);
-  const cmd = String(query.cmd || "").trim().toLowerCase();
-  if (!ownerContextId) return null;
-  const includeCompleted = query.includeCompleted === true;
-  const matched = Array.from(state.sessions.values())
-    .filter((item) => {
-      if (item.snapshot.ownerContextId !== ownerContextId) return false;
-      if (!includeCompleted) {
-        if (
-          item.snapshot.status !== "running" &&
-          item.snapshot.status !== "starting"
-        ) {
-          return false;
-        }
-      }
-      if (!cmd) return true;
-      return item.snapshot.cmd.toLowerCase().includes(cmd);
-    })
-    .sort((a, b) => b.snapshot.updatedAt - a.snapshot.updatedAt);
-  return matched[0] || null;
-}
-
-/**
- * 判断解析出的 session 是否仍在内存中活动。
- */
-export function isInMemorySession(
-  value: ShellSessionRuntimeState | { snapshot: ShellSessionSnapshot; outputText: string },
-): value is ShellSessionRuntimeState {
-  return "child" in value;
-}
-
-/**
- * 处理 shell 退出后的状态收口。
- */
-export async function finalizeExit(
-  state: ShellPluginState,
-  session: ShellSessionRuntimeState,
-  exitCode: number,
-): Promise<void> {
-  await updateSessionSnapshot(session, (snapshot) => {
-    snapshot.status = deriveExitStatus(exitCode);
-    snapshot.exitCode = exitCode;
-    snapshot.endedAt = nowMs();
-    snapshot.pid = session.child.pid ?? snapshot.pid;
-  });
-  session.resolveCompletion();
-  scheduleCleanup(state, session.snapshot.shellId);
-
-  if (
-    session.snapshot.autoNotifyOnExit &&
-    session.snapshot.notificationSent === false &&
-    state.context
-  ) {
-    await emitChatCompletionEvent(state.context, session.snapshot);
-    session.snapshot.notificationSent = true;
-    await persistSnapshot(session);
-  }
-}

package/src/shell/runtime/ShellApprovalRuntime.ts

@@ -1,236 +0,0 @@
-/**
- * Shell unrestricted sandbox 审批运行时。
- *
- * 关键点（中文）
- * - agent 只能通过 shell tool 请求 unrestricted sandbox；真正执行前必须等待用户确认。
- * - 审批结果最终回到原 tool result；session event 只用于 UI/CLI/Console 展示和操作。
- * - V1 授权粒度固定为单次命令或单次 shell_start 创建的命令会话。
- */
-
-import fs from "fs-extra";
-import path from "node:path";
-import { generateId } from "@downcity/agent/internal/utils/Id.js";
-import { getSessionRunContext } from "@downcity/agent/internal/executor/SessionRunScope.js";
-import type { AgentContext } from "@downcity/agent/internal/types/runtime/agent/AgentContext.js";
-import type { ShellApprovalStatus } from "@downcity/agent/internal/executor/tools/shell/types/ShellPlugin.js";
-import type { ShellPluginState } from "@/shell/ShellRuntimeTypes.js";
-import { nowMs } from "./ShellActionRuntimeSupport.js";
-
-const DANGEROUS_COMMAND_PATTERNS = [
-  /\bsudo\b/,
-  /\brm\s+-[^&|;\n]*r[^&|;\n]*f\s+\/(?:\s|$)/,
-  /\bchmod\s+-R\s+777\s+\/(?:\s|$)/,
-  /\bssh-keygen\b/,
-  /\bsecurity\s+(?:add|delete|unlock|set|import|export)-/i,
-  /(?:^|[\s;&|])(?:nohup\s+)?[^;&|\n]*(?:&)\s*$/,
-];
-
-function isDangerousCommand(cmd: string): boolean {
-  return DANGEROUS_COMMAND_PATTERNS.some((pattern) => pattern.test(cmd));
-}
-
-function resolveAuditPath(context: AgentContext): string {
-  return path.join(context.rootPath, ".downcity", "logs", "unrestricted-sandbox-audit.jsonl");
-}
-
-async function appendAudit(params: {
-  context: AgentContext;
-  record: Record<string, unknown>;
-}): Promise<void> {
-  const filePath = resolveAuditPath(params.context);
-  await fs.ensureDir(path.dirname(filePath));
-  await fs.appendFile(filePath, `${JSON.stringify(params.record)}\n`, "utf-8");
-}
-
-function publishApprovalResult(params: {
-  context: AgentContext;
-  ownerContextId?: string;
-  approvalId: string;
-  shellId: string;
-  toolName: "shell_exec" | "shell_start";
-  decision: ShellApprovalStatus;
-}): void {
-  const sessionId = String(params.ownerContextId || "").trim();
-  if (!sessionId) return;
-  const turnId = String(getSessionRunContext()?.turnId || sessionId).trim();
-  try {
-    params.context.session.get(sessionId).publishEvent({
-      type: "tool-approval-result",
-      turnId,
-      toolCallId: params.shellId,
-      toolName: params.toolName,
-      approvalId: params.approvalId,
-      decision: params.decision,
-    });
-  } catch {
-    // ignore event delivery failures
-  }
-}
-
-/**
- * 校验 unrestricted sandbox 请求。
- */
-export function validateUnrestrictedRequest(params: {
-  cmd: string;
-  reason?: string;
-}): string | null {
-  const reason = String(params.reason || "").trim();
-  if (!reason) {
-    return "unrestricted sandbox requires a non-empty reason";
-  }
-  if (isDangerousCommand(params.cmd)) {
-    return "unrestricted sandbox rejected a dangerous command";
-  }
-  return null;
-}
-
-/**
- * 请求用户批准 unrestricted sandbox 执行。
- */
-export async function requestUnrestrictedApproval(params: {
-  state: ShellPluginState;
-  context: AgentContext;
-  shellId: string;
-  toolName: "shell_exec" | "shell_start";
-  cmd: string;
-  cwd: string;
-  reason: string;
-  ownerContextId?: string;
-}): Promise<{
-  approvalId: string;
-  status: ShellApprovalStatus;
-}> {
-  const approvalId = `ap_${generateId()}`;
-  const createdAt = nowMs();
-  const ownerContextId = String(params.ownerContextId || "").trim() || undefined;
-
-  const status = await new Promise<ShellApprovalStatus>((resolve) => {
-    const timer = setTimeout(() => {
-      resolveApproval({
-        state: params.state,
-        context: params.context,
-        approvalId,
-        decision: "expired",
-      }).catch(() => undefined);
-    }, params.state.options.defaultApprovalTimeoutMs);
-    if (typeof timer.unref === "function") timer.unref();
-
-    params.state.approvals.set(approvalId, {
-      approvalId,
-      shellId: params.shellId,
-      ...(ownerContextId ? { ownerContextId } : {}),
-      toolName: params.toolName,
-      cmd: params.cmd,
-      cwd: params.cwd,
-      reason: params.reason,
-      createdAt,
-      timer,
-      resolve,
-    });
-
-    if (ownerContextId) {
-      const turnId = String(getSessionRunContext()?.turnId || ownerContextId).trim();
-      try {
-        params.context.session.get(ownerContextId).publishEvent({
-          type: "tool-approval-request",
-          turnId,
-          toolCallId: params.shellId,
-          toolName: params.toolName,
-          approvalId,
-          sandbox: "unrestricted",
-          cmd: params.cmd,
-          cwd: params.cwd,
-          reason: params.reason,
-          status: "pending",
-        });
-      } catch {
-        // ignore event delivery failures
-      }
-    }
-
-    appendAudit({
-      context: params.context,
-      record: {
-        event: "approval_requested",
-        approval_id: approvalId,
-        session_id: ownerContextId || null,
-        tool_call_id: params.shellId,
-        agent_id: params.context.config?.id || null,
-        cmd: params.cmd,
-        cwd: params.cwd,
-        reason: params.reason,
-        created_at: new Date(createdAt).toISOString(),
-      },
-    }).catch(() => undefined);
-  });
-
-  return { approvalId, status };
-}
-
-/**
- * 兑现 unrestricted sandbox 审批。
- */
-export async function resolveApproval(params: {
-  state: ShellPluginState;
-  context: AgentContext;
-  approvalId: string;
-  decision: ShellApprovalStatus;
-}): Promise<boolean> {
-  const approval = params.state.approvals.get(params.approvalId);
-  if (!approval) return false;
-  params.state.approvals.delete(params.approvalId);
-  clearTimeout(approval.timer);
-  approval.resolve(params.decision);
-
-  publishApprovalResult({
-    context: params.context,
-    ownerContextId: approval.ownerContextId,
-    approvalId: approval.approvalId,
-    shellId: approval.shellId,
-    toolName: approval.toolName,
-    decision: params.decision,
-  });
-
-  await appendAudit({
-    context: params.context,
-    record: {
-      event: "approval_resolved",
-      approval_id: approval.approvalId,
-      session_id: approval.ownerContextId || null,
-      tool_call_id: approval.shellId,
-      agent_id: params.context.config?.id || null,
-      cmd: approval.cmd,
-      cwd: approval.cwd,
-      reason: approval.reason,
-      decision: params.decision,
-      resolved_at: new Date(nowMs()).toISOString(),
-    },
-  }).catch(() => undefined);
-
-  return true;
-}
-
-/**
- * 列出 pending unrestricted sandbox 审批。
- */
-export function listPendingApprovals(state: ShellPluginState): Array<{
-  approvalId: string;
-  shellId: string;
-  ownerContextId?: string;
-  toolName: "shell_exec" | "shell_start";
-  cmd: string;
-  cwd: string;
-  reason: string;
-  createdAt: number;
-}> {
-  return Array.from(state.approvals.values()).map((approval) => ({
-    approvalId: approval.approvalId,
-    shellId: approval.shellId,
-    ...(approval.ownerContextId ? { ownerContextId: approval.ownerContextId } : {}),
-    toolName: approval.toolName,
-    cmd: approval.cmd,
-    cwd: approval.cwd,
-    reason: approval.reason,
-    createdAt: approval.createdAt,
-  }));
-}