@glodon-aiot/bot-client-sdk 3.25.1-alpha.7 → 3.26.0-alpha.5

package/dist/es/localFiles/host/protocol.mjs

@@ -0,0 +1,27 @@
+const n = "glodon-workspace", i = 1;
+function s(t) {
+  let e = t;
+  if (typeof e == "string")
+    try {
+      e = JSON.parse(e);
+    } catch (r) {
+      return;
+    }
+  if (!e || typeof e != "object")
+    return;
+  const o = e;
+  if (o.channel === n)
+    return o;
+}
+function c() {
+  var e;
+  const t = (e = globalThis.chrome) == null ? void 0 : e.webview;
+  if (!(!t || typeof t.postMessage != "function" || typeof t.addEventListener != "function"))
+    return t;
+}
+export {
+  n as HOST_CHANNEL,
+  i as SANDBOX_PROTOCOL,
+  c as getHostWebView,
+  s as parseHostMessage
+};

package/dist/es/localFiles/limits.mjs

@@ -0,0 +1,22 @@
+var u = Object.defineProperty;
+var n = Object.getOwnPropertySymbols;
+var c = Object.prototype.hasOwnProperty, f = Object.prototype.propertyIsEnumerable;
+var s = (r, e, t) => e in r ? u(r, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : r[e] = t, m = (r, e) => {
+  for (var t in e || (e = {}))
+    c.call(e, t) && s(r, t, e[t]);
+  if (n)
+    for (var t of n(e))
+      f.call(e, t) && s(r, t, e[t]);
+  return r;
+};
+import { DEFAULT_LIMITS as o } from "./constants.mjs";
+function l(r = {}) {
+  const e = m({}, o);
+  return Object.keys(o).forEach((t) => {
+    const i = r[t];
+    typeof i == "number" && Number.isFinite(i) && i > 0 && (e[t] = Math.min(i, o[t]));
+  }), e;
+}
+export {
+  l as resolveLimits
+};

package/dist/es/localFiles/schemas.mjs

@@ -0,0 +1,312 @@
+import { LOCAL_PYTHON_FUNCTION_CODE as s, WORKSPACE_GRANT_ID as p } from "./constants.mjs";
+const t = "只操作用户在当前浏览器里选择的本地文件夹，路径相对该文件夹。云端工作区的文件不要用本工具。", e = {
+  type: "string",
+  enum: [p],
+  description: `工作区 ID。省略时按 ${p} 处理，传其他值会被拒绝。`
+}, i = (n) => ({
+  type: "string",
+  description: `${n}使用相对工作区根目录的路径，以 / 分隔，不能包含 .. 或绝对路径。`
+}), r = {
+  type: "string",
+  description: "文件当前内容的 hash（sha256:<hex>），来自 read_file 或 stat_file 的返回值。"
+}, d = {
+  list_directory: {
+    functionCode: "list_directory",
+    name: "列出本地目录",
+    description: `${t}列出某个目录的直接子项（目录在前），支持分页。`,
+    parameters: {
+      type: "object",
+      required: ["grantId"],
+      properties: {
+        grantId: e,
+        path: i('要列出的目录，省略或传 "." 表示工作区根目录。'),
+        offset: {
+          type: "integer",
+          minimum: 0,
+          description: "分页起始位置，默认 0。"
+        },
+        limit: {
+          type: "integer",
+          minimum: 1,
+          maximum: 1e3,
+          description: "每页条数，默认 200。"
+        }
+      }
+    }
+  },
+  read_file: {
+    functionCode: "read_file",
+    name: "读取本地文件",
+    description: `${t}按行读取文本文件，单次最多返回 1 MiB，超出部分会被截断（truncated: true）。返回内容的 hash 可用于后续修改。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "path"],
+      properties: {
+        grantId: e,
+        path: i("要读取的文件。"),
+        startLine: {
+          type: "integer",
+          minimum: 1,
+          description: "起始行（从 1 开始，含）。"
+        },
+        endLine: {
+          type: "integer",
+          minimum: 1,
+          description: "结束行（含）。"
+        },
+        maxBytes: {
+          type: "integer",
+          minimum: 1,
+          description: "返回内容的最大字节数，不超过 1 MiB。"
+        },
+        encoding: {
+          type: "string",
+          enum: ["utf-8", "gbk", "gb18030"],
+          description: "文本编码，默认 utf-8。"
+        }
+      }
+    }
+  },
+  stat_file: {
+    functionCode: "stat_file",
+    name: "查看本地文件信息",
+    description: `${t}返回文件或目录的类型、大小、修改时间，可选返回 hash。不返回文件内容。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "path"],
+      properties: {
+        grantId: e,
+        path: i("要查看的文件或目录。"),
+        includeHash: {
+          type: "boolean",
+          description: "是否计算文件 hash。"
+        }
+      }
+    }
+  },
+  search_files: {
+    functionCode: "search_files",
+    name: "查找本地文件",
+    description: `${t}按文件名或 glob（支持 *、?、**）查找文件。不含 / 的模式匹配文件名，含 / 的模式匹配相对 path 的路径。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "pattern"],
+      properties: {
+        grantId: e,
+        pattern: {
+          type: "string",
+          minLength: 1,
+          description: "如 *.xlsx 或 reports/**/*.docx。"
+        },
+        path: i("搜索起点目录，默认工作区根目录。"),
+        maxDepth: {
+          type: "integer",
+          minimum: 1,
+          maximum: 16,
+          description: "最大目录深度，默认 8。"
+        },
+        maxResults: {
+          type: "integer",
+          minimum: 1,
+          maximum: 200,
+          description: "最多返回条数，默认 200。"
+        }
+      }
+    }
+  },
+  search_text: {
+    functionCode: "search_text",
+    name: "搜索本地文本",
+    description: `${t}在指定文件或目录（递归）中搜索普通文本（不支持正则），返回所在文件、行号与该行内容。必须指定 path，不能搜索整个文件夹。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "path", "query"],
+      properties: {
+        grantId: e,
+        path: i("搜索范围，可以是文件或目录。"),
+        query: {
+          type: "string",
+          minLength: 1,
+          description: "要查找的文本。"
+        },
+        caseSensitive: {
+          type: "boolean",
+          description: "是否区分大小写，默认否。"
+        },
+        isRegex: {
+          type: "boolean",
+          description: "暂不支持正则，传 true 会返回 501。"
+        },
+        glob: {
+          type: "string",
+          description: "只搜索匹配该 glob 的文件，如 *.md。"
+        },
+        maxResults: {
+          type: "integer",
+          minimum: 1,
+          maximum: 200,
+          description: "最多返回条数，默认 200。"
+        },
+        contextLines: {
+          type: "integer",
+          minimum: 0,
+          maximum: 3,
+          description: "附带的上下文行数，默认 0。"
+        }
+      }
+    }
+  },
+  apply_patch: {
+    functionCode: "apply_patch",
+    name: "修改本地文件",
+    description: `${t}以查找替换的方式修改 UTF-8 文本文件。每条修改的 oldText 必须在文件中唯一出现（或设置 replaceAll）。执行前需要用户确认。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "path", "expectedHash", "edits"],
+      properties: {
+        grantId: e,
+        path: i("要修改的文件。"),
+        expectedHash: r,
+        edits: {
+          type: "array",
+          minItems: 1,
+          description: "按顺序应用的修改。",
+          items: {
+            type: "object",
+            required: ["oldText", "newText"],
+            properties: {
+              oldText: {
+                type: "string",
+                minLength: 1,
+                description: "要替换的原文，需包含足够上下文以保证唯一。"
+              },
+              newText: {
+                type: "string",
+                description: "替换后的文本。"
+              },
+              replaceAll: {
+                type: "boolean",
+                description: "是否替换所有出现位置，默认否。"
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  write_file: {
+    functionCode: "write_file",
+    name: "写入本地文件",
+    description: `${t}新建文件，或整体覆盖已有文件（覆盖时必须提供 expectedHash）。修改已有文件优先使用 apply_patch。执行前需要用户确认。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "path", "content"],
+      properties: {
+        grantId: e,
+        path: i("要写入的文件。"),
+        content: {
+          type: "string",
+          description: "完整的文件内容（UTF-8）。"
+        },
+        expectedHash: r,
+        createDirectories: {
+          type: "boolean",
+          description: "父目录不存在时是否自动创建，默认否。"
+        }
+      }
+    }
+  },
+  upload_file: {
+    functionCode: "upload_file",
+    name: "上传本地文件",
+    description: `${t}把本地文件夹中的文件上传到平台文件服务，返回 fileId、name、size 和 url。url 是文件访问地址，可直接用于后续推理或对话。下载回本地文件夹时使用 download_file，source.type 为 platformFile。单文件不超过 50 MB。执行前需要用户确认。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "path"],
+      properties: {
+        grantId: e,
+        path: i("要上传的文件。"),
+        target: {
+          type: "string",
+          description: "上传目标，目前只支持 session（默认），其他值返回 501。"
+        },
+        mimeHint: {
+          type: "string",
+          description: "可选的 MIME 类型。"
+        }
+      }
+    }
+  },
+  download_file: {
+    functionCode: "download_file",
+    name: "下载到本地文件夹",
+    description: `${t}把会话文件、平台文件或 https 地址保存到本地文件夹。source.type 为 url 时必须同时填写 source.url（完整地址），为 sessionFile 或 platformFile 时必须同时填写 source.fileId。不要只传 type。单文件不超过 50 MB。执行前需要用户确认。`,
+    parameters: {
+      type: "object",
+      required: ["grantId", "destPath", "source"],
+      properties: {
+        grantId: e,
+        destPath: i("保存位置（文件路径）。"),
+        source: {
+          type: "object",
+          required: ["type"],
+          description: "下载来源。type 为 url 时必填 url；type 为 sessionFile 或 platformFile 时必填 fileId。",
+          properties: {
+            type: {
+              type: "string",
+              enum: ["sessionFile", "platformFile", "url"],
+              description: "sessionFile：当前会话文件；platformFile：平台文件（upload_file 返回的 fileId）；url：https 地址。"
+            },
+            fileId: {
+              type: "string",
+              description: "type 为 sessionFile 或 platformFile 时必填，不能只传 type。"
+            },
+            url: {
+              type: "string",
+              description: "type 为 url 时必填，填写完整 https 地址。不能只传 type。默认只允许 glodon.com 及其子域。"
+            }
+          }
+        },
+        overwrite: {
+          type: "boolean",
+          description: "目标已存在时是否覆盖，默认否。"
+        },
+        expectedHash: r
+      }
+    }
+  }
+}, o = "在已绑定的本地工程目录中运行已有 .py，路径相对该目录。不要用于云端工作区，不要传 shell 或代码，只能传 path 和 args。", c = {
+  functionCode: s,
+  name: "运行本地 Python 脚本",
+  description: `${o}每次运行需用户单独确认，文件读写授权不能代替。确认后脚本可直接读写该目录并使用标准库，改动立即落盘。不能联网，不能在运行中安装包，也不能访问该目录以外的文件。第三方包写在工程根目录 sandbox-requirements.txt。结果打印到标准输出。code 为 0 只表示已结束，成功看 data.exitCode，超时看 data.timedOut。`,
+  parameters: {
+    type: "object",
+    required: ["grantId", "path"],
+    properties: {
+      grantId: e,
+      path: {
+        type: "string",
+        description: "要运行的脚本。必须是已存在、以 .py 结尾的相对路径，以 / 分隔，不能包含 .. 、盘符或绝对路径。"
+      },
+      args: {
+        type: "array",
+        maxItems: 16,
+        description: "传给脚本的参数，最多 16 个。每个参数单独一项，不能含空格、引号或 shell 语法，只能包含字母、数字、下划线以及 . / : @ = + - , 。",
+        items: {
+          type: "string",
+          description: "一个脚本参数。"
+        }
+      },
+      timeoutMs: {
+        type: "integer",
+        minimum: 1e3,
+        maximum: 12e4,
+        description: "超时毫秒数。默认 20000，最大 120000。到时脚本会被终止。"
+      }
+    }
+  }
+};
+export {
+  d as LOCAL_FILE_TOOL_SCHEMAS,
+  c as LOCAL_PYTHON_TOOL_SCHEMA
+};

package/dist/es/localFiles/security/downloadUrlPolicy.mjs

@@ -0,0 +1,39 @@
+import { DEFAULT_DOWNLOAD_URL_ALLOWLIST as l } from "../constants.mjs";
+const i = /^[a-z0-9-]+(\.[a-z0-9-]+)+$/;
+function a(t) {
+  if (typeof t != "string")
+    return null;
+  const r = t.trim().toLowerCase().replace(/^\*?\./, "").replace(/\.$/, "");
+  return !i.test(r) || s(r) ? null : r;
+}
+function s(t) {
+  return t.startsWith("[") || t.includes(":") ? !0 : /^[0-9.]+$/.test(t) || /^0x[0-9a-f.]+$/i.test(t);
+}
+function f(t = []) {
+  const r = new Set(l);
+  for (const n of t) {
+    const e = a(n);
+    e && r.add(e);
+  }
+  return Array.from(r);
+}
+function d(t, r) {
+  return u(t, f(r));
+}
+function u(t, r) {
+  let n;
+  try {
+    n = new URL(t);
+  } catch (o) {
+    return !1;
+  }
+  if (n.protocol !== "https:" || n.username || n.password)
+    return !1;
+  const e = n.hostname.toLowerCase().replace(/\.$/, "");
+  return !e || s(e) || e === "localhost" || e.endsWith(".localhost") ? !1 : r.some((o) => e === o || e.endsWith(`.${o}`));
+}
+export {
+  f as getDownloadUrlAllowlist,
+  d as isDownloadUrlAllowed,
+  u as isDownloadUrlAllowedByList
+};

package/dist/es/localFiles/security/glob.mjs

@@ -0,0 +1,28 @@
+const i = /* @__PURE__ */ new Map();
+function u(e) {
+  return /[\\^$.|+()[\]{}]/.test(e) ? `\\${e}` : e;
+}
+function r(e, n = !1) {
+  const o = `${n ? "s" : "i"}:${e}`, f = i.get(o);
+  if (f)
+    return f;
+  let c = "";
+  for (let s = 0; s < e.length; s++) {
+    const t = e[s];
+    t === "*" ? e[s + 1] === "*" ? (s++, e[s + 1] === "/" ? (s++, c += "(?:.*/)?") : c += ".*") : c += "[^/]*" : t === "?" ? c += "[^/]" : c += u(t);
+  }
+  const l = new RegExp(`^${c}$`, n ? "" : "i");
+  return i.set(o, l), l;
+}
+function g(e, n, o = !1) {
+  return r(e, o).test(n);
+}
+function x(e) {
+  const n = e.lastIndexOf("/");
+  return n < 0 ? e : e.slice(n + 1);
+}
+export {
+  x as basename,
+  r as globToRegExp,
+  g as matchGlob
+};

package/dist/es/localFiles/security/pathPolicy.mjs

@@ -0,0 +1,59 @@
+import { WORKSPACE_GRANT_ID as u } from "../constants.mjs";
+import { ToolError as e, ToolCode as r } from "../errors.mjs";
+const d = "路径必须是工作区内的相对路径，不能包含 ..、绝对路径或盘符。";
+function i() {
+  return new e(r.Forbidden, d, {
+    reason: "path_outside_workspace"
+  });
+}
+function l(t) {
+  if (t !== u)
+    throw new e(r.Forbidden, `未知的工作区 grantId，当前仅支持 ${u}。`, {
+      reason: "path_outside_workspace"
+    });
+}
+function m(t, {
+  allowRoot: o = !1,
+  field: s = "path"
+} = {}) {
+  if (t == null) {
+    if (o)
+      return "";
+    throw new e(r.BadRequest, `缺少参数 ${s}。`);
+  }
+  if (typeof t != "string")
+    throw new e(r.BadRequest, `参数 ${s} 必须是字符串。`);
+  if (t.includes("\0") || /%(2e|2f|5c|00)/i.test(t))
+    throw i();
+  const f = t.normalize("NFC").replace(/\\/g, "/").trim();
+  if (f.startsWith("/") || /^[a-zA-Z]:/.test(f))
+    throw i();
+  const a = [];
+  for (const n of f.split("/"))
+    if (!(n === "" || n === ".")) {
+      if (n === "..")
+        throw i();
+      a.push(n);
+    }
+  const c = a.join("/");
+  if (!c && !o)
+    throw new e(r.BadRequest, `参数 ${s} 不能指向工作区根目录。`);
+  return c;
+}
+function p(t) {
+  return t ? t.split("/") : [];
+}
+function _(t) {
+  const o = t.lastIndexOf("/");
+  return o < 0 ? "" : t.slice(0, o);
+}
+function $(t, o) {
+  return t ? `${t}/${o}` : o;
+}
+export {
+  l as assertGrantId,
+  $ as joinPath,
+  m as normalizeWorkspacePath,
+  _ as parentPath,
+  p as splitPath
+};

package/dist/es/localFiles/security/sensitiveFiles.mjs

@@ -0,0 +1,115 @@
+var l = Object.defineProperty, u = Object.defineProperties;
+var b = Object.getOwnPropertyDescriptors;
+var i = Object.getOwnPropertySymbols;
+var k = Object.prototype.hasOwnProperty, m = Object.prototype.propertyIsEnumerable;
+var a = (r, e, s) => e in r ? l(r, e, { enumerable: !0, configurable: !0, writable: !0, value: s }) : r[e] = s, o = (r, e) => {
+  for (var s in e || (e = {}))
+    k.call(e, s) && a(r, s, e[s]);
+  if (i)
+    for (var s of i(e))
+      m.call(e, s) && a(r, s, e[s]);
+  return r;
+}, c = (r, e) => u(r, b(e));
+var d = (r, e, s) => (a(r, typeof e != "symbol" ? e + "" : e, s), s);
+import { basename as S, matchGlob as f } from "./glob.mjs";
+const h = Object.freeze([{
+  id: "env-files",
+  pattern: ".env*",
+  reason: "环境变量文件可能包含密钥",
+  source: "sdk-baseline"
+}, {
+  id: "pem",
+  pattern: "*.pem",
+  reason: "证书或密钥文件",
+  source: "sdk-baseline"
+}, {
+  id: "key",
+  pattern: "*.key",
+  reason: "密钥文件",
+  source: "sdk-baseline"
+}, {
+  id: "p12",
+  pattern: "*.p12",
+  reason: "证书文件",
+  source: "sdk-baseline"
+}, {
+  id: "pfx",
+  pattern: "*.pfx",
+  reason: "证书文件",
+  source: "sdk-baseline"
+}, {
+  id: "id-rsa",
+  pattern: "id_rsa*",
+  reason: "SSH 私钥",
+  source: "sdk-baseline"
+}, {
+  id: "id-ed25519",
+  pattern: "id_ed25519*",
+  reason: "SSH 私钥",
+  source: "sdk-baseline"
+}, {
+  id: "id-ecdsa",
+  pattern: "id_ecdsa*",
+  reason: "SSH 私钥",
+  source: "sdk-baseline"
+}, {
+  id: "credentials",
+  pattern: ".credentials",
+  reason: "凭据文件",
+  source: "sdk-baseline"
+}, {
+  id: "npmrc",
+  pattern: ".npmrc",
+  reason: "可能包含 registry token",
+  source: "sdk-baseline"
+}, {
+  id: "pypirc",
+  pattern: ".pypirc",
+  reason: "可能包含仓库凭据",
+  source: "sdk-baseline"
+}, {
+  id: "aws-credentials",
+  pattern: "**/.aws/credentials",
+  match: "path",
+  reason: "云服务凭据",
+  source: "sdk-baseline"
+}, {
+  id: "ssh-dir",
+  pattern: "**/.ssh/**",
+  match: "path",
+  reason: "SSH 配置与密钥",
+  source: "sdk-baseline"
+}]), y = "该文件被列为敏感文件，不允许访问";
+class g {
+  constructor(e = []) {
+    d(this, "rules");
+    const s = e.filter((t) => t && typeof t.pattern == "string" && t.pattern).map((t) => c(o({}, t), {
+      id: String(t.id || t.pattern),
+      source: t.source === "enterprise" ? "enterprise" : "product"
+    }));
+    this.rules = [...h, ...s];
+  }
+  match(e, s) {
+    if (!e)
+      return null;
+    const t = S(e);
+    for (const n of this.rules) {
+      if (n.operations && !n.operations.includes(s))
+        continue;
+      const p = n.match === "path" ? e : t;
+      if (f(n.pattern, p))
+        return n;
+    }
+    return null;
+  }
+  isSensitive(e) {
+    return ["read", "write", "search"].some((s) => this.match(e, s) !== null);
+  }
+  static reasonOf(e) {
+    return `${e.reason || y}，已拒绝访问。`;
+  }
+}
+export {
+  h as SDK_SENSITIVE_BASELINE,
+  g as SensitiveFilePolicy
+};