@fantasticit/sumi 0.0.0-stage → 0.5.0

package/node_modules/@sumi/kernel/dist/windows-process.js

@@ -0,0 +1,90 @@
+import { join } from 'node:path';
+// 用 Job Object 约束整个进程树。Windows 没有 POSIX 进程组；仅 taskkill 已退出的
+// 根进程无法可靠找到孤儿。桥接进程收到输入前不启动插件，保证先加入 job。
+const bridge = `
+const { createRequire } = require('node:module');
+const spawn = createRequire(process.argv[1])('cross-spawn');
+let input = '';
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', d => input += d).on('end', () => {
+  const argv = JSON.parse(process.argv[2]);
+  const child = spawn(argv[0], argv.slice(1), { stdio: ['pipe', 'inherit', 'inherit'], windowsHide: true });
+  child.on('error', e => { console.error(e.message); process.exitCode = 127; });
+  child.on('close', code => { process.exitCode = code ?? 1; });
+  child.stdin.on('error', () => {});
+  child.stdin.end(input);
+});`;
+const native = `
+using System;
+using System.Diagnostics;
+using System.IO;
+using System.Runtime.InteropServices;
+public static class SumiJob {
+  [DllImport("kernel32.dll", SetLastError=true)] static extern IntPtr CreateJobObject(IntPtr a, string n);
+  [DllImport("kernel32.dll", SetLastError=true)] static extern bool SetInformationJobObject(IntPtr j, int c, IntPtr p, uint n);
+  [DllImport("kernel32.dll", SetLastError=true)] static extern bool AssignProcessToJobObject(IntPtr j, IntPtr p);
+  [DllImport("kernel32.dll", SetLastError=true)] static extern bool QueryInformationJobObject(IntPtr j, int c, out Accounting p, uint n, IntPtr r);
+  [DllImport("kernel32.dll")] static extern bool TerminateJobObject(IntPtr j, uint c);
+  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr h);
+  [StructLayout(LayoutKind.Sequential)] struct Limits {
+    public long ProcessTime, JobTime; public uint Flags; public UIntPtr Min, Max;
+    public uint Active; public UIntPtr Affinity; public uint Priority, Scheduling;
+  }
+  [StructLayout(LayoutKind.Sequential)] struct Extended {
+    public Limits Basic; public ulong ReadOps, WriteOps, OtherOps, ReadBytes, WriteBytes, OtherBytes;
+    public UIntPtr ProcessMemory, JobMemory, PeakProcessMemory, PeakJobMemory;
+  }
+  [StructLayout(LayoutKind.Sequential)] struct Accounting {
+    public long User, Kernel, PeriodUser, PeriodKernel; public uint Faults, Total, Active, Terminated;
+  }
+  static void Check(bool ok) { if (!ok) throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error()); }
+  public static int Run(string exe, string args, string evidence) {
+    IntPtr job = CreateJobObject(IntPtr.Zero, null);
+    Check(job != IntPtr.Zero);
+    try {
+      var limits = new Extended(); limits.Basic.Flags = 0x2000; // KILL_ON_JOB_CLOSE
+      int size = Marshal.SizeOf(limits); IntPtr ptr = Marshal.AllocHGlobal(size);
+      try { Marshal.StructureToPtr(limits, ptr, false); Check(SetInformationJobObject(job, 9, ptr, (uint)size)); }
+      finally { Marshal.FreeHGlobal(ptr); }
+      Console.InputEncoding = new System.Text.UTF8Encoding(false);
+      var start = new ProcessStartInfo(exe, args) { UseShellExecute=false, CreateNoWindow=true, RedirectStandardInput=true, RedirectStandardOutput=true, RedirectStandardError=true };
+      using (var process = Process.Start(start)) {
+        try {
+          Check(AssignProcessToJobObject(job, process.Handle));
+          var output = process.StandardOutput.BaseStream.CopyToAsync(Console.OpenStandardOutput());
+          var error = process.StandardError.BaseStream.CopyToAsync(Console.OpenStandardError());
+          process.StandardInput.Write(Console.In.ReadToEnd()); process.StandardInput.Close();
+          process.WaitForExit();
+          Accounting count;
+          Check(QueryInformationJobObject(job, 1, out count, (uint)Marshal.SizeOf(typeof(Accounting)), IntPtr.Zero));
+          if (count.Active > 0) {
+            Check(TerminateJobObject(job, 1));
+            File.WriteAllText(evidence, "Plugin descendants terminated after exit.\\n");
+          }
+          output.GetAwaiter().GetResult(); error.GetAwaiter().GetResult();
+          return process.ExitCode;
+        } catch { if (!process.HasExited) process.Kill(); throw; }
+      }
+    } finally { CloseHandle(job); }
+  }
+}`;
+const quote = (s) => `'${s.replaceAll("'", "''")}'`;
+// CommandLineToArgvW / Node 的参数规则，不经 cmd.exe 展开元字符。
+const argument = (s) => `"${s.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/, '$1$1')}"`;
+export function windowsProcess(argv, sdkPath, evidenceDir) {
+    const args = ['--eval', bridge, sdkPath, JSON.stringify(argv)].map(argument).join(' ');
+    const script = `$ErrorActionPreference = 'Stop'\n$ProgressPreference = 'SilentlyContinue'\nAdd-Type -TypeDefinition ${quote(native)}\nexit ([SumiJob]::Run(${quote(process.execPath)}, ${quote(args)}, ${quote(join(evidenceDir, 'orphans.log'))}))`;
+    return [
+        join(process.env.SystemRoot ?? 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe'),
+        [
+            '-NoLogo',
+            '-NoProfile',
+            '-NonInteractive',
+            '-OutputFormat',
+            'Text',
+            '-EncodedCommand',
+            Buffer.from(script, 'utf16le').toString('base64'),
+        ],
+    ];
+}
+//# sourceMappingURL=windows-process.js.map

package/node_modules/@sumi/kernel/dist/windows-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-process.js","sourceRoot":"","sources":["../src/windows-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,4DAA4D;AAC5D,wCAAwC;AACxC,MAAM,MAAM,GAAG;;;;;;;;;;;;IAYX,CAAC;AAEL,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqDb,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAC5D,oDAAoD;AACpD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;AAEjG,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,OAAe,EAAE,WAAmB;IACjF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,uGAAuG,KAAK,CAAC,MAAM,CAAC,0BAA0B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC;IACrP,OAAO;QACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,gDAAgD,CAAC;QAC/F;YACE,SAAS;YACT,YAAY;YACZ,iBAAiB;YACjB,eAAe;YACf,MAAM;YACN,iBAAiB;YACjB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAClD;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@sumi/kernel/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "@sumi/kernel",
+  "version": "0.5.0",
+  "description": "策略中立的编排内核",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@sumi/plugin-sdk": "0.5.0",
+    "yaml": "2.9.1",
+    "picomatch": "4.0.7"
+  }
+}

package/node_modules/@sumi/kernel/test/fixtures/fake-plugin.mjs

@@ -0,0 +1,44 @@
+// 测试用插件：行为由步骤配置 with 决定。
+import { spawn } from 'node:child_process';
+import { writeFileSync } from 'node:fs';
+
+let input = '';
+for await (const chunk of process.stdin) input += chunk;
+const ctx = JSON.parse(input);
+const c = ctx.config;
+if (c.touch) writeFileSync(`${ctx.repoRoot}/${c.touch}`, String(Date.now()));
+if (c.assertNoGitEnv) {
+  // hook 中 git 导出的变量指向当前仓库，插件看到它们就可能把操作写进错误的仓库。
+  const leaked = ['GIT_DIR', 'GIT_INDEX_FILE', 'GIT_WORK_TREE'].filter((v) => process.env[v] !== undefined);
+  if (leaked.length) {
+    c.status = 'fail';
+    c.summary = `泄漏：${leaked.join(',')}`;
+  }
+}
+if (c.orphan) {
+  const child = spawn(process.execPath, ['-e', 'setTimeout(() => {}, 30000)'], { stdio: 'ignore' });
+  writeFileSync(`${ctx.evidenceDir}/orphan.pid`, String(child.pid));
+  child.unref();
+}
+if (c.sleep) await new Promise((r) => setTimeout(r, c.sleep * 1000));
+if (c.raw !== undefined) {
+  process.stdout.write(c.raw);
+  process.exit(c.exit ?? 0);
+}
+const status = c.status ?? 'pass';
+const result = {
+  status,
+  summary: c.summary ?? `${ctx.stepId} ${status}`,
+  findings: c.findings ?? [],
+  checked: ctx.files,
+  evidence: [],
+  next: c.next,
+  metrics: c.metrics,
+  plan: c.plan,
+  report: c.report,
+  obligations: ctx.obligations.map((o) => ({ id: o.id, outcome: (c.receipts ?? {})[o.id] ?? 'passed' })),
+};
+if (c.echoFiles) result.summary = ctx.files.join(',');
+process.stdout.write(JSON.stringify(result));
+process.exitCode = c.exit ?? (status === 'pass' ? 0 : status === 'fail' ? 1 : 2);
+if (c.signal) process.kill(process.pid, c.signal);

package/node_modules/@sumi/kernel/test/fixtures/py-plugin.py

@@ -0,0 +1,3 @@
+import json, sys
+ctx = json.load(sys.stdin)
+print(json.dumps({"status": "pass", "summary": "python " + ctx["stepId"], "findings": [], "checked": ctx["files"], "evidence": []}), end="")

package/node_modules/@sumi/plugin-sdk/README.md

@@ -0,0 +1,144 @@
+# @sumi/plugin-sdk
+
+插件协议与工具函数：定义内核与插件之间唯一的契约（上下文、结果、声明），并提供写插件、校验协议、生成 hook 时用到的辅助函数。本包没有运行时依赖；插件也可以完全不依赖它，只要遵守协议。
+
+## 插件协议
+
+内核以仓库根为工作目录、在独立进程组中启动插件命令：**标准输入**写入一个上下文 JSON，插件在**标准输出**写一个结果 JSON，并以约定的退出码结束（`pass` 为 0，`fail` 为 1，其余为 2）。结果必须合法、不超过 1 MiB、退出码与 `status` 一致，否则内核不采纳。git hook 导出的 `GIT_DIR` 等变量不会传给插件。
+
+### 上下文（stdin，`PluginContext`）
+
+| 字段          | 类型                      | 说明                                                                              |
+| ------------- | ------------------------- | --------------------------------------------------------------------------------- |
+| `repoRoot`    | `string`                  | 仓库根                                                                            |
+| `base`        | `string \| null`          | 基准提交 OID；`null` 表示空树                                                     |
+| `mode`        | `'worktree' \| 'commit'`  | 工作区模式或固定提交模式                                                          |
+| `tier`        | `string`                  | 本次运行的档位                                                                    |
+| `tiers`       | `string[]`                | 全部档位，从低到高                                                                |
+| `stepId`      | `string`                  | 步骤实例 id                                                                       |
+| `config`      | `Record<string, unknown>` | 插件声明的 `with` 与步骤 `with` 合并后的配置                                      |
+| `files`       | `string[]`                | 本步骤的文件范围：检查步骤已按 `triggers` 与 `exclude` 过滤，并含规划器注入的文件 |
+| `all`         | `boolean`                 | 是否为全量运行                                                                    |
+| `obligations` | `Obligation[]`            | 规划器注入的义务（`id`、`type`、`target`、`required`）                            |
+| `evidenceDir` | `string`                  | 本步骤的证据目录                                                                  |
+| `runDir`      | `string`                  | 本次运行目录                                                                      |
+| `runId`       | `string`                  | 运行 id                                                                           |
+| `labels`      | `Record<string, string>`  | 运行标签                                                                          |
+
+### 结果（stdout，`PluginResult`）
+
+| 字段          | 必需 | 说明                                                                                                                                                              |
+| ------------- | ---- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `status`      | 是   | `pass`、`fail`、`blocked`、`skipped`、`pending`                                                                                                                   |
+| `summary`     | 是   | 一句话摘要                                                                                                                                                        |
+| `findings`    | 是   | `{ id, rule, severity, message, file?, line?, subject? }`，severity 为 `error` / `warning` / `info`                                                               |
+| `checked`     | 是   | `'all'` 或实际检查的文件列表                                                                                                                                      |
+| `evidence`    | 是   | 证据文件路径数组                                                                                                                                                  |
+| `metrics`     | 否   | `{ name, value, added? }`                                                                                                                                         |
+| `obligations` | 否   | 义务回执 `{ id, outcome, detail? }`，outcome 为 `passed` / `failed` / `skipped` / `not-executed`                                                                  |
+| `next`        | 否   | 下一步动作，见下                                                                                                                                                  |
+| `report`      | 否   | Markdown 报告段落，内核原样记入运行记录                                                                                                                           |
+| `plan`        | 否   | 仅 `kind: planner` 可返回：`steps`（`id`、`use`、`with?`、`required?`、`before?`、`after?`）、`inject`（`step`、`files?`、`obligations?`、`required?`）、`labels` |
+
+`next` 中每项都需要 `why`，可选 `kind`（插件自定义子类型）：
+
+| `type`      | 字段                                                                                   |
+| ----------- | -------------------------------------------------------------------------------------- |
+| `run`       | `argv`、`effects`（`none`、`writes-worktree`、`writes-control`、`network`、`publish`） |
+| `edit`      | `file`、`line?`、`intent`                                                              |
+| `ask-human` | `question`、`argv?`（建议由人执行的命令）                                              |
+| `stop`      | `reason`                                                                               |
+
+## 插件声明
+
+插件包在包根的 `sumi-plugins.yaml` 中以 `plugins:` 列出声明；项目插件每个目录一个 `plugin.yaml`。声明有三种形态：可执行插件（`command`）、派生插件（`base`）、只提供命令与 hook 的插件（不声明 `command`，但声明 `commands` 或 `hooks`）。
+
+| 字段            | 说明                                                                                                                              |
+| --------------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| `id`、`version` | 必需                                                                                                                              |
+| `kind`          | `check` 或 `planner`；可执行插件必需                                                                                              |
+| `command`       | argv 数组；`./`、`../` 开头的参数相对声明目录解析。派生插件不能声明                                                               |
+| `timeout`       | 超时秒数（正数）；可执行插件必需                                                                                                  |
+| `base`          | 派生插件：沿用该插件的 `command`；未声明 `kind`、`timeout` 时取它的值                                                             |
+| `with`          | 默认步骤配置，流程步骤的 `with` 逐键覆盖                                                                                          |
+| `description`   | 一句话说明，供 `sumi context` 与诊断展示                                                                                          |
+| `triggers`      | glob 数组；声明后只接收命中的文件，未命中时步骤为 `not-applicable`                                                                |
+| `minTier`       | 低于该档位时不运行                                                                                                                |
+| `fix`           | 修复命令 argv（非空），由 `sumi fix <step-id>` 以上次检查范围的文件为参数执行                                                     |
+| `metrics`       | `{ name, direction: lower-is-better \| higher-is-better, tolerance? }`                                                            |
+| `commands`      | 注册到 `sumi` 的命令：`{ name, argv, description }`                                                                               |
+| `requires`      | 依赖的插件包名，必须已在项目配置 `packages` 中启用                                                                                |
+| `needs`         | 运行前提 `{ bin?, files? }`：`node_modules/.bin` 下的可执行文件与相对仓库根的文件；`sumi init` 接入已有仓库时据此去掉不满足的步骤 |
+| `hooks`         | `git`：git hook 名称 → 命令名；`agent.beforeTool` / `agent.afterEdit`：AI 工具调用工具前、编辑文件后运行的命令名                  |
+| `afterInit`     | 接入已有仓库后运行的 `sumi` 命令参数，例如 `[snapshot, save]`                                                                     |
+| `instructions`  | 指令主题名 → 插件包内的 Markdown 文件                                                                                             |
+| `context`       | 约束查询命令名：标准输入 `{ repoRoot, paths }`，标准输出 `{ items: [{ ref, text, source?, global?, aliases? }] }`                 |
+
+`hooks` 与 `context` 引用的命令名必须在本插件的 `commands` 中注册。
+
+## 最小插件
+
+不依赖任何 sumi 包：
+
+```js
+// control/plugins/no-todo/index.mjs
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+let input = '';
+for await (const chunk of process.stdin) input += chunk;
+const ctx = JSON.parse(input);
+
+const findings = [];
+for (const file of ctx.files) {
+  readFileSync(join(ctx.repoRoot, file), 'utf8')
+    .split('\n')
+    .forEach((text, i) => {
+      if (text.includes('TODO')) {
+        findings.push({ id: `${file}:${i + 1}`, rule: 'no-todo', severity: 'error', message: '不要留下 TODO', file, line: i + 1 });
+      }
+    });
+}
+const status = findings.length ? 'fail' : 'pass';
+process.stdout.write(JSON.stringify({ status, summary: `${findings.length} 处 TODO`, findings, checked: ctx.files, evidence: [] }));
+process.exitCode = status === 'pass' ? 0 : 1;
+```
+
+```yaml
+# control/plugins/no-todo/plugin.yaml
+id: local/no-todo
+version: 0.1.0
+kind: check
+command: [node, ./index.mjs]
+timeout: 60
+triggers: ['src/**/*.ts']
+```
+
+`sumi add plugin <name>` 会生成同样结构的骨架与测试。
+
+## 辅助函数
+
+| 导出                                                                                                                        | 来源          | 说明                                                                                                                                             |
+| --------------------------------------------------------------------------------------------------------------------------- | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `definePlugin(handler)`                                                                                                     | `sdk.ts`      | 插件入口：读 stdin、调用处理函数、写结果并设置退出码；异常转为 `blocked`；findings 超过 `MAX_FINDINGS`（500）时只保留前 500 条，完整列表写入证据 |
+| `result(partial)`                                                                                                           | `sdk.ts`      | 只给 `status` 与 `summary`，其余字段取空值                                                                                                       |
+| `writeEvidence(ctx, name, content)`                                                                                         | `sdk.ts`      | 写入本步骤证据目录，返回路径                                                                                                                     |
+| `validateDeclaration`、`validateResult(value, kind?)`                                                                       | `validate.ts` | 返回错误列表，空数组表示合法                                                                                                                     |
+| `assertDeclaration`、`assertResult`                                                                                         | `validate.ts` | 不合法时抛错                                                                                                                                     |
+| `exitCodeFor(status)`、`compareMetric(decl, value, base)`                                                                   | `protocol.ts` | 约定退出码；按方向与容差比较指标                                                                                                                 |
+| `hookBlock(command, install?)`、`gitHookScript(command, install?)`、`HOOK_BLOCK_START`、`HOOK_BLOCK_END`、`DEFAULT_INSTALL` | `protocol.ts` | 生成 hook 中的 sumi 区块：找不到 sumi 时拒绝并提示安装命令                                                                                       |
+| `STATUSES`、`EFFECTS`、`RECEIPT_OUTCOMES`                                                                                   | `protocol.ts` | 协议枚举                                                                                                                                         |
+| `ruleRefs(text)`、`ruleRefPattern()`                                                                                        | `rules.ts`    | 解析规则语句中的执行者引用 `[<类型>:<目标>]`，例如 `[plugin:core/lint]`                                                                          |
+| `readContextInput()`                                                                                                        | `rules.ts`    | 约束查询命令读取 stdin 上的 `{ repoRoot, paths }`                                                                                                |
+| `cleanEnv(env?)`                                                                                                            | `env.ts`      | 去掉 git hook 导出的 `GIT_DIR`、`GIT_INDEX_FILE` 等变量                                                                                          |
+| `sumiCommand()`                                                                                                             | `env.ts`      | 插件需要调用 sumi 时的命令：有 `SUMI_BIN` 时用同一个 sumi，否则用 PATH 上的 `sumi`                                                               |
+| `CONFIG_FILES`、`configFile(root)`                                                                                          | `project.ts`  | 项目配置位置（`control/config.yaml`、`sumi.config.yaml`）                                                                                        |
+| `satisfies(version, range)`                                                                                                 | `project.ts`  | 版本范围判断：空格分隔的比较式，支持 `>=`、`>`、`<=`、`<`、`=`、`^`、`~` 与精确版本                                                              |
+
+使用 `definePlugin` 的写法：
+
+```ts
+import { definePlugin, result } from '@sumi/plugin-sdk';
+
+await definePlugin((ctx) => result({ status: 'pass', summary: `检查了 ${ctx.files.length} 个文件`, checked: ctx.files }));
+```

package/node_modules/@sumi/plugin-sdk/dist/env.d.ts

@@ -0,0 +1,5 @@
+export declare function cleanEnv(env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** 插件需要调用 sumi 时使用的命令：优先用启动它的同一个 sumi（SUMI_BIN），否则用 PATH 上的 sumi。 */
+export declare function sumiCommand(): string[];
+/** 面向用户或 Agent 的项目锁定入口 argv。 */
+export declare function projectSumiCommand(...args: string[]): string[];

package/node_modules/@sumi/plugin-sdk/dist/env.js

@@ -0,0 +1,30 @@
+/**
+ * git 在 hook 中导出的、指向当前仓库的环境变量。插件与插件命令以仓库根为工作目录运行，
+ * 不需要它们；继承它们会让插件在其他仓库（临时仓库、独立检出）中执行的 git 命令错用当前仓库的索引。
+ */
+const GIT_HOOK_VARS = [
+    'GIT_DIR',
+    'GIT_WORK_TREE',
+    'GIT_INDEX_FILE',
+    'GIT_PREFIX',
+    'GIT_COMMON_DIR',
+    'GIT_OBJECT_DIRECTORY',
+    'GIT_ALTERNATE_OBJECT_DIRECTORIES',
+    'GIT_QUARANTINE_PATH',
+];
+export function cleanEnv(env = process.env) {
+    const out = { ...env };
+    for (const name of GIT_HOOK_VARS)
+        delete out[name];
+    return out;
+}
+/** 插件需要调用 sumi 时使用的命令：优先用启动它的同一个 sumi（SUMI_BIN），否则用 PATH 上的 sumi。 */
+export function sumiCommand() {
+    const bin = process.env.SUMI_BIN;
+    return bin ? [process.execPath, bin] : ['sumi'];
+}
+/** 面向用户或 Agent 的项目锁定入口 argv。 */
+export function projectSumiCommand(...args) {
+    return ['node', './control/bin/sumi.cjs', ...args];
+}
+//# sourceMappingURL=env.js.map

package/node_modules/@sumi/plugin-sdk/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,aAAa,GAAG;IACpB,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,sBAAsB;IACtB,kCAAkC;IAClC,qBAAqB;CACtB,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3D,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,kBAAkB,CAAC,GAAG,IAAc;IAClD,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/node_modules/@sumi/plugin-sdk/dist/git.d.ts

@@ -0,0 +1,7 @@
+/** git 列文件命令的输出上限：大仓库的完整文件列表可达数十 MB。 */
+export declare const GIT_MAX_BUFFER: number;
+/**
+ * 运行 git 的列文件命令（args[0] 为子命令，如 ls-files、diff --name-only、ls-tree --name-only），返回原始路径。
+ * 以 -z 输出、按 \0 切分：默认输出会把非 ASCII 文件名转义为带引号的八进制串，路径对不上真实文件。
+ */
+export declare function gitPaths(cwd: string, args: string[]): string[];

package/node_modules/@sumi/plugin-sdk/dist/git.js

@@ -0,0 +1,19 @@
+import { execFileSync } from 'node:child_process';
+/** git 列文件命令的输出上限：大仓库的完整文件列表可达数十 MB。 */
+export const GIT_MAX_BUFFER = 512 * 1024 * 1024;
+/**
+ * 运行 git 的列文件命令（args[0] 为子命令，如 ls-files、diff --name-only、ls-tree --name-only），返回原始路径。
+ * 以 -z 输出、按 \0 切分：默认输出会把非 ASCII 文件名转义为带引号的八进制串，路径对不上真实文件。
+ */
+export function gitPaths(cwd, args) {
+    const [subcommand, ...rest] = args;
+    const out = execFileSync('git', [subcommand, '-z', ...rest], {
+        cwd,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        windowsHide: true,
+        maxBuffer: GIT_MAX_BUFFER,
+    });
+    return out.split('\0').filter(Boolean);
+}
+//# sourceMappingURL=git.js.map

package/node_modules/@sumi/plugin-sdk/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,wCAAwC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAc;IAClD,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,UAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;QAC5D,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,cAAc;KAC1B,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/node_modules/@sumi/plugin-sdk/dist/index.d.ts

@@ -0,0 +1,9 @@
+export * from './protocol.js';
+export * from './validate.js';
+export * from './sdk.js';
+export * from './project.js';
+export * from './env.js';
+export * from './rules.js';
+export * from './process.js';
+export * from './git.js';
+export * from './tool-batches.js';

package/node_modules/@sumi/plugin-sdk/dist/index.js

@@ -0,0 +1,10 @@
+export * from './protocol.js';
+export * from './validate.js';
+export * from './sdk.js';
+export * from './project.js';
+export * from './env.js';
+export * from './rules.js';
+export * from './process.js';
+export * from './git.js';
+export * from './tool-batches.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@sumi/plugin-sdk/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC"}

package/node_modules/@sumi/plugin-sdk/dist/process.d.ts

@@ -0,0 +1,7 @@
+import type { spawn, spawnSync } from 'node:child_process';
+/** 跨平台启动命令，兼容 Windows PATH、PATHEXT、shebang 与批处理 shim。 */
+export declare const spawnCommand: typeof spawn;
+/** `spawnCommand` 的同步版本。 */
+export declare const spawnCommandSync: typeof spawnSync;
+/** 项目 bin 目录中可能存在的命令文件名；Windows 还需识别 npm/pnpm 生成的 shim。 */
+export declare function commandFileNames(name: string, platform?: NodeJS.Platform): string[];

package/node_modules/@sumi/plugin-sdk/dist/process.js

@@ -0,0 +1,13 @@
+import { createRequire } from 'node:module';
+const crossSpawn = createRequire(import.meta.url)('cross-spawn');
+/** 跨平台启动命令，兼容 Windows PATH、PATHEXT、shebang 与批处理 shim。 */
+export const spawnCommand = crossSpawn;
+/** `spawnCommand` 的同步版本。 */
+export const spawnCommandSync = crossSpawn.sync;
+/** 项目 bin 目录中可能存在的命令文件名；Windows 还需识别 npm/pnpm 生成的 shim。 */
+export function commandFileNames(name, platform = process.platform) {
+    if (platform !== 'win32' || /\.(?:bat|cmd|com|exe)$/i.test(name))
+        return [name];
+    return [name, `${name}.cmd`, `${name}.exe`, `${name}.bat`, `${name}.com`];
+}
+//# sourceMappingURL=process.js.map

package/node_modules/@sumi/plugin-sdk/dist/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../src/process.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAe,CAAC;AAE/E,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAiB,UAAU,CAAC;AAErD,4BAA4B;AAC5B,MAAM,CAAC,MAAM,gBAAgB,GAAqB,UAAU,CAAC,IAAI,CAAC;AAElE,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACzF,IAAI,QAAQ,KAAK,OAAO,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAC5E,CAAC"}

package/node_modules/@sumi/plugin-sdk/dist/project.d.ts

@@ -0,0 +1,9 @@
+/** 项目配置的位置，按优先级排列：control 区内的 config.yaml，其次是根目录的 sumi.config.yaml。 */
+export declare const CONFIG_FILES: readonly ["control/config.yaml", "sumi.config.yaml"];
+/** 返回项目根下存在的配置文件（相对路径），都不存在时返回 null。 */
+export declare function configFile(root: string): string | null;
+/**
+ * 判断版本是否满足范围。范围由空格分隔的比较式组成（全部满足才算满足），
+ * 支持 >=、>、<=、<、=、^x.y.z、~x.y.z 与精确版本。
+ */
+export declare function satisfies(version: string, range: string): boolean;

package/node_modules/@sumi/plugin-sdk/dist/project.js

@@ -0,0 +1,55 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+/** 项目配置的位置，按优先级排列：control 区内的 config.yaml，其次是根目录的 sumi.config.yaml。 */
+export const CONFIG_FILES = ['control/config.yaml', 'sumi.config.yaml'];
+/** 返回项目根下存在的配置文件（相对路径），都不存在时返回 null。 */
+export function configFile(root) {
+    return CONFIG_FILES.find((f) => existsSync(join(root, f))) ?? null;
+}
+/**
+ * 判断版本是否满足范围。范围由空格分隔的比较式组成（全部满足才算满足），
+ * 支持 >=、>、<=、<、=、^x.y.z、~x.y.z 与精确版本。
+ */
+export function satisfies(version, range) {
+    const parse = (v) => v
+        .replace(/^v/, '')
+        .split('-')[0]
+        .split('.')
+        .map((n) => Number(n) || 0);
+    const cmp = (a, b) => {
+        for (let i = 0; i < 3; i++)
+            if ((a[i] ?? 0) !== (b[i] ?? 0))
+                return (a[i] ?? 0) - (b[i] ?? 0);
+        return 0;
+    };
+    const v = parse(version);
+    return range
+        .trim()
+        .split(/\s+/)
+        .every((part) => {
+        const m = /^(>=|<=|>|<|=|\^|~)?(.+)$/.exec(part);
+        if (!m)
+            return false;
+        const target = parse(m[2]);
+        const c = cmp(v, target);
+        switch (m[1]) {
+            case '>=':
+                return c >= 0;
+            case '>':
+                return c > 0;
+            case '<=':
+                return c <= 0;
+            case '<':
+                return c < 0;
+            case '^': {
+                const upper = target[0] > 0 ? [target[0] + 1, 0, 0] : target[1] > 0 ? [0, target[1] + 1, 0] : [0, 0, target[2] + 1];
+                return c >= 0 && cmp(v, upper) < 0;
+            }
+            case '~':
+                return c >= 0 && cmp(v, [target[0], target[1] + 1, 0]) < 0;
+            default:
+                return c === 0;
+        }
+    });
+}
+//# sourceMappingURL=project.js.map

package/node_modules/@sumi/plugin-sdk/dist/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,uEAAuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,qBAAqB,EAAE,kBAAkB,CAAU,CAAC;AAEjF,wCAAwC;AACxC,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAC1B,CAAC;SACE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;SACd,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,CAAW,EAAE,CAAW,EAAE,EAAE;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9F,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,KAAK;SACT,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC;SACZ,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACd,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzB,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACb,KAAK,IAAI;gBACP,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,KAAK,GAAG;gBACN,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,KAAK,GAAG;gBACN,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,KAAK,GAAG,CAAC,CAAC,CAAC;gBACT,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC;gBACzH,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;YACD,KAAK,GAAG;gBACN,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/D;gBACE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}