@downcity/shell 0.1.4

package/bin/Shell.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Shell 对象入口。
+ *
+ * 关键点（中文）
+ * - Shell 是 `@downcity/shell` 的主要对外对象，拥有 tools、sessions、sandbox 与 approvals。
+ * - Agent 只组合 Shell 实例，不再通过 Shell 间接调用 shell 能力。
+ */
+import type { ShellApprovalDecisionResult, ShellApprovalView, ShellConfigureOptions, ShellOptions, ShellToolSet } from "./types/ShellRuntime.js";
+/**
+ * Shell 运行时对象。
+ */
+export declare class Shell {
+    /**
+     * Shell 内部状态。
+     */
+    private readonly state;
+    /**
+     * Shell 宿主配置。
+     */
+    private host_options;
+    /**
+     * 模型可调用的 shell tools。
+     */
+    readonly tools: ShellToolSet;
+    constructor(options?: ShellOptions);
+    /**
+     * 补齐宿主上下文。
+     *
+     * 关键点（中文）：这是 Agent 内部装配入口，用户只需要 `new Agent({ shell: new Shell() })`。
+     */
+    configure(options: ShellConfigureOptions): void;
+    /**
+     * 列出 pending approvals。
+     */
+    approvals(): ShellApprovalView[];
+    /**
+     * 批准 pending approval。
+     */
+    approve(input: {
+        approval_id: string;
+    }): Promise<ShellApprovalDecisionResult>;
+    /**
+     * 拒绝 pending approval。
+     */
+    deny(input: {
+        approval_id: string;
+    }): Promise<ShellApprovalDecisionResult>;
+    /**
+     * 释放所有 shell sessions。
+     */
+    dispose(): Promise<void>;
+    private run_action;
+    private create_host_context;
+}
+//# sourceMappingURL=Shell.d.ts.map

package/bin/Shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Shell.d.ts","sourceRoot":"","sources":["../src/Shell.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EACV,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,YAAY,EACb,MAAM,yBAAyB,CAAC;AAuBjC;;GAEG;AACH,qBAAa,KAAK;IAChB;;OAEG;IACH,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAE1C;;OAEG;IACH,OAAO,CAAC,YAAY,CAAwB;IAE5C;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;gBAEjB,OAAO,GAAE,YAAiB;IAQtC;;;;OAIG;IACH,SAAS,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAc/C;;OAEG;IACH,SAAS,IAAI,iBAAiB,EAAE;IAgBhC;;OAEG;IACG,OAAO,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAWnF;;OAEG;IACG,IAAI,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAWhF;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAYhB,UAAU;IAyBxB,OAAO,CAAC,mBAAmB;CAqC5B"}

package/bin/Shell.js

@@ -0,0 +1,171 @@
+/**
+ * Shell 对象入口。
+ *
+ * 关键点（中文）
+ * - Shell 是 `@downcity/shell` 的主要对外对象，拥有 tools、sessions、sandbox 与 approvals。
+ * - Agent 只组合 Shell 实例，不再通过 Shell 间接调用 shell 能力。
+ */
+import { approveShellApproval, closeAllShellSessions, closeShellSession, createShellRuntimeState, denyShellApproval, execShellCommand, getShellSessionStatus, listShellApprovals, readShellSession, startShellSession, waitShellSession, writeShellSession, } from "./session/ShellActionRuntime.js";
+import { createShellTools, } from "./tool/ShellTools.js";
+import { getShellRunContext } from "./session/ShellRunScope.js";
+/**
+ * Shell 运行时对象。
+ */
+export class Shell {
+    /**
+     * Shell 内部状态。
+     */
+    state;
+    /**
+     * Shell 宿主配置。
+     */
+    host_options;
+    /**
+     * 模型可调用的 shell tools。
+     */
+    tools;
+    constructor(options = {}) {
+        this.host_options = { ...options };
+        this.state = createShellRuntimeState();
+        this.tools = createShellTools({
+            run_action: async (params) => await this.run_action(params.action, params.payload),
+        });
+    }
+    /**
+     * 补齐宿主上下文。
+     *
+     * 关键点（中文）：这是 Agent 内部装配入口，用户只需要 `new Agent({ shell: new Shell() })`。
+     */
+    configure(options) {
+        this.host_options = {
+            ...this.host_options,
+            ...options,
+            env: {
+                ...(this.host_options.env || {}),
+                ...(options.env || {}),
+            },
+            sandbox: options.sandbox || this.host_options.sandbox,
+            logger: options.logger || this.host_options.logger,
+            emit_event: options.emit_event || this.host_options.emit_event,
+        };
+    }
+    /**
+     * 列出 pending approvals。
+     */
+    approvals() {
+        return listShellApprovals(this.state).map((item) => ({
+            approval_id: item.approvalId,
+            shell_id: item.shellId,
+            ...(item.ownerContextId ? { session_id: item.ownerContextId } : {}),
+            tool_name: item.toolName,
+            cmd: item.cmd,
+            operation: item.operation,
+            ...(item.inputPreview !== undefined ? { input_preview: item.inputPreview } : {}),
+            ...(typeof item.inputChars === "number" ? { input_chars: item.inputChars } : {}),
+            cwd: item.cwd,
+            reason: item.reason,
+            created_at: item.createdAt,
+        }));
+    }
+    /**
+     * 批准 pending approval。
+     */
+    async approve(input) {
+        const approval_id = String(input.approval_id || "").trim();
+        if (!approval_id)
+            throw new Error("approval_id is required");
+        const success = await approveShellApproval(this.state, this.create_host_context(), approval_id);
+        return {
+            success,
+            approval_id,
+            decision: "approved",
+        };
+    }
+    /**
+     * 拒绝 pending approval。
+     */
+    async deny(input) {
+        const approval_id = String(input.approval_id || "").trim();
+        if (!approval_id)
+            throw new Error("approval_id is required");
+        const success = await denyShellApproval(this.state, this.create_host_context(), approval_id);
+        return {
+            success,
+            approval_id,
+            decision: "denied",
+        };
+    }
+    /**
+     * 释放所有 shell sessions。
+     */
+    async dispose() {
+        await closeAllShellSessions(this.state, true);
+        for (const session of this.state.sessions.values()) {
+            if (session.cleanupTimer) {
+                clearTimeout(session.cleanupTimer);
+            }
+        }
+        this.state.sessions.clear();
+        this.state.approvals.clear();
+        this.state.context = null;
+    }
+    async run_action(action, payload) {
+        const context = this.create_host_context();
+        switch (action) {
+            case "start":
+                return await startShellSession(this.state, context, payload);
+            case "exec":
+                return await execShellCommand(this.state, context, payload);
+            case "status":
+                return await getShellSessionStatus(this.state, context, payload);
+            case "read":
+                return await readShellSession(this.state, context, payload);
+            case "write":
+                return await writeShellSession(this.state, context, payload);
+            case "wait":
+                return await waitShellSession(this.state, context, payload);
+            case "close":
+                return await closeShellSession(this.state, context, payload);
+            default:
+                throw new Error(`Unknown shell action: ${String(action)}`);
+        }
+    }
+    create_host_context() {
+        const root_path = String(this.host_options.root_path || "").trim();
+        if (!root_path) {
+            throw new Error("Shell requires root_path. Pass Shell through new Agent({ shell }) or construct Shell with root_path.");
+        }
+        const emit_event = this.host_options.emit_event;
+        const run_context = getShellRunContext() || null;
+        const session_id = String(run_context?.session_id || "").trim();
+        const turn_id = String(run_context?.turn_id || "").trim();
+        return {
+            rootPath: root_path,
+            env: this.host_options.env,
+            config: {
+                ...(this.host_options.agent_id ? { id: this.host_options.agent_id } : {}),
+                ...(this.host_options.sandbox ? { sandbox: this.host_options.sandbox } : {}),
+            },
+            logger: this.host_options.logger,
+            session: emit_event
+                ? {
+                    get: (target_session_id) => ({
+                        publishEvent: (event) => {
+                            emit_event({
+                                ...event,
+                                session_id: String(target_session_id || session_id || "").trim(),
+                            });
+                        },
+                    }),
+                }
+                : undefined,
+            shellIntegration: {
+                getRunContext: () => ({
+                    ...(session_id ? { sessionId: session_id } : {}),
+                    ...(turn_id ? { turnId: turn_id } : {}),
+                }),
+            },
+        };
+    }
+}
+//# sourceMappingURL=Shell.js.map

package/bin/Shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Shell.js","sourceRoot":"","sources":["../src/Shell.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;GAEG;AACH,MAAM,OAAO,KAAK;IAChB;;OAEG;IACc,KAAK,CAAoB;IAE1C;;OAEG;IACK,YAAY,CAAwB;IAE5C;;OAEG;IACM,KAAK,CAAe;IAE7B,YAAY,UAAwB,EAAE;QACpC,IAAI,CAAC,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,uBAAuB,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,gBAAgB,CAAC;YAC5B,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;SACnF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,OAA8B;QACtC,IAAI,CAAC,YAAY,GAAG;YAClB,GAAG,IAAI,CAAC,YAAY;YACpB,GAAG,OAAO;YACV,GAAG,EAAE;gBACH,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;aACvB;YACD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO;YACrD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM;YAClD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU;SAC/D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnD,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAA8B;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,WAAW,CAAC,CAAC;QAChG,OAAO;YACL,OAAO;YACP,WAAW;YACX,QAAQ,EAAE,UAAU;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,KAA8B;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,WAAW,CAAC,CAAC;QAC7F,OAAO;YACL,OAAO;YACP,WAAW;YACX,QAAQ,EAAE,QAAQ;SACnB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzB,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAAuB,EACvB,OAAgC;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAgB,CAAC,CAAC;YACxE,KAAK,MAAM;gBACT,OAAO,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAgB,CAAC,CAAC;YACvE,KAAK,QAAQ;gBACX,OAAO,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAgB,CAAC,CAAC;YAC5E,KAAK,MAAM;gBACT,OAAO,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAgB,CAAC,CAAC;YACvE,KAAK,OAAO;gBACV,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAgB,CAAC,CAAC;YACxE,KAAK,MAAM;gBACT,OAAO,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAgB,CAAC,CAAC;YACvE,KAAK,OAAO;gBACV,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAgB,CAAC,CAAC;YACxE;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;QAChD,MAAM,WAAW,GAAG,kBAAkB,EAAE,IAAI,IAAI,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG;YAC1B,MAAM,EAAE;gBACN,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E;YACD,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;YAChC,OAAO,EAAE,UAAU;gBACjB,CAAC,CAAC;oBACE,GAAG,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;wBAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;4BACtB,UAAU,CAAC;gCACT,GAAG,KAAK;gCACR,UAAU,EAAE,MAAM,CAAC,iBAAiB,IAAI,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;6BACjE,CAAC,CAAC;wBACL,CAAC;qBACF,CAAC;iBACH;gBACH,CAAC,CAAC,SAAS;YACb,gBAAgB,EAAE;gBAChB,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxC,CAAC;aACH;SACF,CAAC;IACJ,CAAC;CACF"}

package/bin/approval/ShellApprovalRuntime.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Shell unrestricted sandbox 审批运行时。
+ *
+ * 关键点（中文）
+ * - agent 只能通过 shell tool 请求 unrestricted sandbox；真正执行前必须等待用户确认。
+ * - 审批结果最终回到原 tool result；session event 只用于 UI/CLI/Console 展示和操作。
+ * - V1 授权粒度固定为单次命令、单次 shell_start 启动，或单次 shell_write 输入。
+ */
+import type { ShellHostContext } from "../types/ShellHostContext.js";
+import type { ShellApprovalStatus, ShellApprovalToolName } from "../types/ShellAction.js";
+import type { ShellRuntimeState } from "../session/ShellRuntimeTypes.js";
+/**
+ * 校验 unrestricted sandbox 请求。
+ */
+export declare function validateUnrestrictedRequest(params: {
+    cmd: string;
+    reason?: string;
+}): string | null;
+/**
+ * 请求用户批准 unrestricted sandbox 执行。
+ */
+export declare function requestUnrestrictedApproval(params: {
+    state: ShellRuntimeState;
+    context: ShellHostContext;
+    shellId: string;
+    toolName: ShellApprovalToolName;
+    cmd: string;
+    cwd: string;
+    reason: string;
+    ownerContextId?: string;
+    inputPreview?: string;
+    inputChars?: number;
+}): Promise<{
+    approvalId: string;
+    status: ShellApprovalStatus;
+}>;
+/**
+ * 兑现 unrestricted sandbox 审批。
+ */
+export declare function resolveApproval(params: {
+    state: ShellRuntimeState;
+    context: ShellHostContext;
+    approvalId: string;
+    decision: ShellApprovalStatus;
+}): Promise<boolean>;
+/**
+ * 列出 pending unrestricted sandbox 审批。
+ */
+export declare function listPendingApprovals(state: ShellRuntimeState): Array<{
+    approvalId: string;
+    shellId: string;
+    ownerContextId?: string;
+    toolName: ShellApprovalToolName;
+    cmd: string;
+    operation: "exec" | "start" | "write";
+    inputPreview?: string;
+    inputChars?: number;
+    cwd: string;
+    reason: string;
+    createdAt: number;
+}>;
+//# sourceMappingURL=ShellApprovalRuntime.d.ts.map

package/bin/approval/ShellApprovalRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellApprovalRuntime.d.ts","sourceRoot":"","sources":["../../src/approval/ShellApprovalRuntime.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAkExE;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,GAAG,IAAI,CAShB;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IACV,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,mBAAmB,CAAC;CAC7B,CAAC,CAgFD;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,mBAAmB,CAAC;CAC/B,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCnB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,KAAK,CAAC;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAcD"}

package/bin/approval/ShellApprovalRuntime.js

@@ -0,0 +1,214 @@
+/**
+ * Shell unrestricted sandbox 审批运行时。
+ *
+ * 关键点（中文）
+ * - agent 只能通过 shell tool 请求 unrestricted sandbox；真正执行前必须等待用户确认。
+ * - 审批结果最终回到原 tool result；session event 只用于 UI/CLI/Console 展示和操作。
+ * - V1 授权粒度固定为单次命令、单次 shell_start 启动，或单次 shell_write 输入。
+ */
+import fs from "fs-extra";
+import path from "node:path";
+import { generateId } from "../utils/Id.js";
+import { nowMs } from "../session/ShellActionRuntimeSupport.js";
+const DANGEROUS_COMMAND_PATTERNS = [
+    /\bsudo\b/,
+    /\brm\s+-[^&|;\n]*r[^&|;\n]*f\s+\/(?:\s|$)/,
+    /\bchmod\s+-R\s+777\s+\/(?:\s|$)/,
+    /\bssh-keygen\b/,
+    /\bsecurity\s+(?:add|delete|unlock|set|import|export)-/i,
+    /(?:^|[\s;&|])(?:nohup\s+)?[^;&|\n]*(?:&)\s*$/,
+];
+function isDangerousCommand(cmd) {
+    return DANGEROUS_COMMAND_PATTERNS.some((pattern) => pattern.test(cmd));
+}
+function resolveApprovalOperation(toolName) {
+    if (toolName === "shell_write")
+        return "write";
+    if (toolName === "shell_exec")
+        return "exec";
+    return "start";
+}
+function buildInputPreview(value) {
+    const normalized = String(value || "");
+    if (normalized.length <= 240)
+        return normalized;
+    return `${normalized.slice(0, 240)}...`;
+}
+function resolveAuditPath(context) {
+    return path.join(context.rootPath, ".downcity", "logs", "unrestricted-sandbox-audit.jsonl");
+}
+async function appendAudit(params) {
+    const filePath = resolveAuditPath(params.context);
+    await fs.ensureDir(path.dirname(filePath));
+    await fs.appendFile(filePath, `${JSON.stringify(params.record)}\n`, "utf-8");
+}
+function publishApprovalResult(params) {
+    const sessionId = String(params.ownerContextId || "").trim();
+    if (!sessionId || !params.context.session)
+        return;
+    const turnId = String(params.context.shellIntegration?.getRunContext?.()?.turnId || sessionId).trim();
+    try {
+        params.context.session.get(sessionId).publishEvent({
+            type: "tool-approval-result",
+            turnId,
+            toolCallId: params.shellId,
+            toolName: params.toolName,
+            approvalId: params.approvalId,
+            decision: params.decision,
+        });
+    }
+    catch {
+        // ignore event delivery failures
+    }
+}
+/**
+ * 校验 unrestricted sandbox 请求。
+ */
+export function validateUnrestrictedRequest(params) {
+    const reason = String(params.reason || "").trim();
+    if (!reason) {
+        return "unrestricted sandbox requires a non-empty reason";
+    }
+    if (isDangerousCommand(params.cmd)) {
+        return "unrestricted sandbox rejected a dangerous command";
+    }
+    return null;
+}
+/**
+ * 请求用户批准 unrestricted sandbox 执行。
+ */
+export async function requestUnrestrictedApproval(params) {
+    const approvalId = `ap_${generateId()}`;
+    const createdAt = nowMs();
+    const ownerContextId = String(params.ownerContextId || "").trim() || undefined;
+    const operation = resolveApprovalOperation(params.toolName);
+    const inputPreview = params.inputPreview !== undefined
+        ? buildInputPreview(params.inputPreview)
+        : undefined;
+    const status = await new Promise((resolve) => {
+        const timer = setTimeout(() => {
+            resolveApproval({
+                state: params.state,
+                context: params.context,
+                approvalId,
+                decision: "expired",
+            }).catch(() => undefined);
+        }, params.state.options.defaultApprovalTimeoutMs);
+        if (typeof timer.unref === "function")
+            timer.unref();
+        params.state.approvals.set(approvalId, {
+            approvalId,
+            shellId: params.shellId,
+            ...(ownerContextId ? { ownerContextId } : {}),
+            toolName: params.toolName,
+            cmd: params.cmd,
+            operation,
+            ...(inputPreview !== undefined ? { inputPreview } : {}),
+            ...(typeof params.inputChars === "number" ? { inputChars: params.inputChars } : {}),
+            cwd: params.cwd,
+            reason: params.reason,
+            createdAt,
+            timer,
+            resolve,
+        });
+        if (ownerContextId) {
+            const turnId = String(params.context.shellIntegration?.getRunContext?.()?.turnId || ownerContextId).trim();
+            try {
+                params.context.session?.get(ownerContextId).publishEvent({
+                    type: "tool-approval-request",
+                    turnId,
+                    toolCallId: params.shellId,
+                    toolName: params.toolName,
+                    approvalId,
+                    sandbox: "unrestricted",
+                    cmd: params.cmd,
+                    cwd: params.cwd,
+                    reason: params.reason,
+                    status: "pending",
+                    operation,
+                    shellId: params.shellId,
+                    ...(inputPreview !== undefined ? { inputPreview } : {}),
+                    ...(typeof params.inputChars === "number" ? { inputChars: params.inputChars } : {}),
+                });
+            }
+            catch {
+                // ignore event delivery failures
+            }
+        }
+        appendAudit({
+            context: params.context,
+            record: {
+                event: "approval_requested",
+                approval_id: approvalId,
+                session_id: ownerContextId || null,
+                tool_call_id: params.shellId,
+                agent_id: params.context.config?.id || null,
+                cmd: params.cmd,
+                operation,
+                ...(inputPreview !== undefined ? { input_preview: inputPreview } : {}),
+                ...(typeof params.inputChars === "number" ? { input_chars: params.inputChars } : {}),
+                cwd: params.cwd,
+                reason: params.reason,
+                created_at: new Date(createdAt).toISOString(),
+            },
+        }).catch(() => undefined);
+    });
+    return { approvalId, status };
+}
+/**
+ * 兑现 unrestricted sandbox 审批。
+ */
+export async function resolveApproval(params) {
+    const approval = params.state.approvals.get(params.approvalId);
+    if (!approval)
+        return false;
+    params.state.approvals.delete(params.approvalId);
+    clearTimeout(approval.timer);
+    approval.resolve(params.decision);
+    publishApprovalResult({
+        context: params.context,
+        ownerContextId: approval.ownerContextId,
+        approvalId: approval.approvalId,
+        shellId: approval.shellId,
+        toolName: approval.toolName,
+        decision: params.decision,
+    });
+    await appendAudit({
+        context: params.context,
+        record: {
+            event: "approval_resolved",
+            approval_id: approval.approvalId,
+            session_id: approval.ownerContextId || null,
+            tool_call_id: approval.shellId,
+            agent_id: params.context.config?.id || null,
+            cmd: approval.cmd,
+            operation: approval.operation,
+            ...(approval.inputPreview !== undefined ? { input_preview: approval.inputPreview } : {}),
+            ...(typeof approval.inputChars === "number" ? { input_chars: approval.inputChars } : {}),
+            cwd: approval.cwd,
+            reason: approval.reason,
+            decision: params.decision,
+            resolved_at: new Date(nowMs()).toISOString(),
+        },
+    }).catch(() => undefined);
+    return true;
+}
+/**
+ * 列出 pending unrestricted sandbox 审批。
+ */
+export function listPendingApprovals(state) {
+    return Array.from(state.approvals.values()).map((approval) => ({
+        approvalId: approval.approvalId,
+        shellId: approval.shellId,
+        ...(approval.ownerContextId ? { ownerContextId: approval.ownerContextId } : {}),
+        toolName: approval.toolName,
+        cmd: approval.cmd,
+        operation: approval.operation,
+        ...(approval.inputPreview !== undefined ? { inputPreview: approval.inputPreview } : {}),
+        ...(typeof approval.inputChars === "number" ? { inputChars: approval.inputChars } : {}),
+        cwd: approval.cwd,
+        reason: approval.reason,
+        createdAt: approval.createdAt,
+    }));
+}
+//# sourceMappingURL=ShellApprovalRuntime.js.map

package/bin/approval/ShellApprovalRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellApprovalRuntime.js","sourceRoot":"","sources":["../../src/approval/ShellApprovalRuntime.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAO3C,OAAO,EAAE,KAAK,EAAE,MAAM,yCAAyC,CAAC;AAEhE,MAAM,0BAA0B,GAAG;IACjC,UAAU;IACV,2CAA2C;IAC3C,iCAAiC;IACjC,gBAAgB;IAChB,wDAAwD;IACxD,8CAA8C;CAC/C,CAAC;AAEF,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA+B;IAC/D,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC;IAC/C,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAyB;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAG1B;IACC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,qBAAqB,CAAC,MAO9B;IACC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC;YACjD,IAAI,EAAE,sBAAsB;YAC5B,MAAM;YACN,UAAU,EAAE,MAAM,CAAC,OAAO;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAG3C;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAWjD;IAIC,MAAM,UAAU,GAAG,MAAM,UAAU,EAAE,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC;IAC1B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC/E,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,KAAK,SAAS;QACpD,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;QAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,eAAe,CAAC;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU;gBACV,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAClD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAErD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE;YACrC,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS;YACT,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS;YACT,KAAK;YACL,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,IAAI,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3G,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC;oBACvD,IAAI,EAAE,uBAAuB;oBAC7B,MAAM;oBACN,UAAU,EAAE,MAAM,CAAC,OAAO;oBAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU;oBACV,OAAO,EAAE,cAAc;oBACvB,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,SAAS;oBACjB,SAAS;oBACT,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpF,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QAED,WAAW,CAAC;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE;gBACN,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,cAAc,IAAI,IAAI;gBAClC,YAAY,EAAE,MAAM,CAAC,OAAO;gBAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;gBAC3C,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,SAAS;gBACT,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpF,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;aAC9C;SACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAKrC;IACC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjD,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAElC,qBAAqB,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE;YACN,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,QAAQ,CAAC,UAAU;YAChC,UAAU,EAAE,QAAQ,CAAC,cAAc,IAAI,IAAI;YAC3C,YAAY,EAAE,QAAQ,CAAC,OAAO;YAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;YAC3C,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE;SAC7C;KACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAa3D,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7D,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/bin/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @downcity/shell 公开入口。
+ *
+ * 关键点（中文）
+ * - 本包拥有 shell / sandbox 的领域能力，不依赖 agent session 或 plugin 系统。
+ * - Agent 与 plugins 通过这里复用本地命令执行、shell session、approval 与 sandbox backend。
+ */
+export * from "./types/Shell.js";
+export * from "./types/ShellRuntime.js";
+export type { ShellActionResponse, ShellApprovalStatus, ShellApprovalToolName, ShellCloseRequest, ShellExecRequest, ShellExternalRef, ShellOutputChunk, ShellQueryRequest, ShellReadRequest, ShellSessionSnapshot, ShellSessionStatus, ShellStartRequest, ShellWaitRequest, ShellWriteRequest, } from "./types/ShellAction.js";
+export * from "./types/ShellRuntimeOptions.js";
+export * from "./types/ShellHostContext.js";
+export * from "./Shell.js";
+export * from "./sandbox/types/Sandbox.js";
+export * from "./sandbox/types/SandboxRuntime.js";
+export * from "./sandbox/SandboxRunner.js";
+export * from "./sandbox/SandboxConfigResolver.js";
+export * from "./sandbox/SandboxPreflight.js";
+export * from "./session/ShellActionRuntime.js";
+export * from "./session/ShellActionResponse.js";
+export * from "./session/ShellRuntimeEnvironment.js";
+export * from "./session/ShellRuntimeTypes.js";
+export * from "./session/ShellRunScope.js";
+export * from "./approval/ShellApprovalRuntime.js";
+export * from "./tool/ShellTools.js";
+export * from "./tool/ShellToolSchemas.js";
+//# sourceMappingURL=index.d.ts.map

package/bin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,YAAY,CAAC;AAC3B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC"}

package/bin/index.js

@@ -0,0 +1,26 @@
+/**
+ * @downcity/shell 公开入口。
+ *
+ * 关键点（中文）
+ * - 本包拥有 shell / sandbox 的领域能力，不依赖 agent session 或 plugin 系统。
+ * - Agent 与 plugins 通过这里复用本地命令执行、shell session、approval 与 sandbox backend。
+ */
+export * from "./types/Shell.js";
+export * from "./types/ShellRuntime.js";
+export * from "./types/ShellRuntimeOptions.js";
+export * from "./types/ShellHostContext.js";
+export * from "./Shell.js";
+export * from "./sandbox/types/Sandbox.js";
+export * from "./sandbox/types/SandboxRuntime.js";
+export * from "./sandbox/SandboxRunner.js";
+export * from "./sandbox/SandboxConfigResolver.js";
+export * from "./sandbox/SandboxPreflight.js";
+export * from "./session/ShellActionRuntime.js";
+export * from "./session/ShellActionResponse.js";
+export * from "./session/ShellRuntimeEnvironment.js";
+export * from "./session/ShellRuntimeTypes.js";
+export * from "./session/ShellRunScope.js";
+export * from "./approval/ShellApprovalRuntime.js";
+export * from "./tool/ShellTools.js";
+export * from "./tool/ShellToolSchemas.js";
+//# sourceMappingURL=index.js.map

package/bin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AAiBxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,YAAY,CAAC;AAC3B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC"}

package/bin/sandbox/LinuxBubblewrapSandbox.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Linux Bubblewrap sandbox backend。
+ *
+ * 关键点（中文）
+ * - 基于 `bwrap` 提供 Linux 本机 shell sandbox。
+ * - 继续保持“shell 命令必须进入 sandbox”的安全语义，不提供宿主机裸跑回退。
+ * - 边界与 macOS backend 对齐：路径、环境变量、网络、agent 级共享 HOME/TMPDIR/cache。
+ */
+import type { SandboxSpawnParams, SandboxSpawnResult } from "../sandbox/types/SandboxRuntime.js";
+export declare function buildLinuxBubblewrapArgs(params: SandboxSpawnParams & {
+    actualCwd: string;
+}): string[];
+/**
+ * 在 Linux bubblewrap sandbox 中启动 shell 子进程。
+ */
+export declare function spawnLinuxBubblewrapSandbox(params: SandboxSpawnParams & {
+    actualCwd: string;
+}): Promise<SandboxSpawnResult>;
+//# sourceMappingURL=LinuxBubblewrapSandbox.d.ts.map

package/bin/sandbox/LinuxBubblewrapSandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LinuxBubblewrapSandbox.d.ts","sourceRoot":"","sources":["../../src/sandbox/LinuxBubblewrapSandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,mCAAmC,CAAC;AA0G3C,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG;IACpE,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,EAAE,CA2DX;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,kBAAkB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,kBAAkB,CAAC,CAgC7B"}