@hmj-ai/cflow 1.3.2 → 1.3.3

package/README.md

@@ -79,6 +79,7 @@ npm start
 - Runtime 配置每次保存都会生成不可变 Profile 版本；发布 Flow 时会 pin 精确 Profile 版本，Run Ledger 记录实际执行版本。
 - 设置页只读展示当前工作区，并提供默认 Agent 和测试最长等待时间；资源绑定按需放在折叠的高级区域。
 - Runtime 必须返回符合 CF output contract 的 JSON，否则 Flow fail closed。
+- Runtime 工具请求默认按 CF 的 effects 自动授权：已声明且位于工作区内的读写和命令操作无需逐次确认；未声明能力或工作区外路径会被拒绝。Flow 中显式的人工审批节点仍需单独批准。
 - Flow/CF 草稿会保存到 SQLite；Resource Profile 可在设置中创建、编辑与删除。
 
 非内置 Agent 可以通过 JSON manifest 接入。项目级文件放在 `<workspace>/.cflow/agents.d/*.json`，用户级文件放在 `~/.config/cflow/agents.d/*.json`；项目配置优先级更高。最小示例：

package/dist/src/runtime-manifest.js

@@ -26,7 +26,7 @@ export const builtinAdapterDescriptors = [
         permissionMode: {
             environment: 'INITIAL_AGENT_MODE',
             readOnly: 'read-only',
-            workspaceWrite: 'workspace-write',
+            workspaceWrite: 'agent',
         },
         staticEnvironment: { NO_BROWSER: '1' },
     },

package/dist/src/runtime.js

@@ -15,6 +15,48 @@ export class RuntimeExecutionException extends Error {
         this.details = details;
     }
 }
+export function isAcpToolAllowed(tool, effects, root, cwd, analysis = false) {
+    const kind = String(tool.kind ?? tool.name ?? tool.title ?? '').toLowerCase();
+    const effectType = kind.includes('read') || kind.includes('search')
+        ? 'file-read'
+        : kind.includes('edit') ||
+            kind.includes('write') ||
+            kind.includes('delete') ||
+            kind.includes('move')
+            ? 'file-write'
+            : kind.includes('exec') || kind.includes('command') || kind.includes('terminal')
+                ? 'command'
+                : undefined;
+    const declared = effectType
+        ? analysis && effectType === 'file-read'
+            ? true
+            : effects.some((effect) => effect.type === effectType && effect.scope === 'workspace')
+        : false;
+    const locations = Array.isArray(tool.locations) ? [...tool.locations] : [];
+    if (tool.rawInput && typeof tool.rawInput === 'object') {
+        for (const key of ['path', 'file', 'filePath', 'filename']) {
+            const value = tool.rawInput[key];
+            if (typeof value === 'string')
+                locations.push(value);
+        }
+    }
+    const inWorkspace = locations.every((location) => {
+        let value = typeof location === 'string' ? location : (location?.path ?? location?.uri);
+        if (typeof value === 'string' && value.startsWith('file://')) {
+            try {
+                value = new URL(value).pathname;
+            }
+            catch {
+                return false;
+            }
+        }
+        if (typeof value === 'string' && !isAbsolute(value))
+            value = resolve(cwd, value);
+        return Boolean(root) && (!value || isWithinDirectory(root, value));
+    });
+    const scopedRead = !analysis || effectType !== 'file-read' || locations.length > 0;
+    return Boolean(declared && inWorkspace && scopedRead);
+}
 const defaultTraits = (overrides = {}) => ({
     backendKind: 'acp',
     sessionMode: 'per-cf-call',
@@ -775,48 +817,8 @@ export class RuntimeManager {
             return await acpClient({ name: 'CFlow' })
                 .onRequest(methods.client.session.requestPermission, async (ctx) => {
                 const tool = ctx?.params?.toolCall ?? ctx?.toolCall ?? {};
-                const kind = String(tool.kind ?? tool.name ?? tool.title ?? '').toLowerCase();
-                const effectType = kind.includes('read') || kind.includes('search')
-                    ? 'file-read'
-                    : kind.includes('edit') ||
-                        kind.includes('write') ||
-                        kind.includes('delete') ||
-                        kind.includes('move')
-                        ? 'file-write'
-                        : kind.includes('exec') || kind.includes('command') || kind.includes('terminal')
-                            ? 'command'
-                            : undefined;
                 const root = analysis?.allowedRoot ?? context?.workspaceRoot;
-                const declared = effectType
-                    ? analysis && effectType === 'file-read'
-                        ? true
-                        : effects.some((effect) => effect.type === effectType && effect.scope === 'workspace')
-                    : false;
-                const locations = Array.isArray(tool.locations) ? [...tool.locations] : [];
-                const raw = tool.rawInput;
-                if (raw && typeof raw === 'object') {
-                    for (const key of ['path', 'file', 'filePath', 'filename']) {
-                        const value = raw[key];
-                        if (typeof value === 'string')
-                            locations.push(value);
-                    }
-                }
-                const inWorkspace = locations.every((location) => {
-                    let value = typeof location === 'string' ? location : (location?.path ?? location?.uri);
-                    if (typeof value === 'string' && value.startsWith('file://')) {
-                        try {
-                            value = new URL(value).pathname;
-                        }
-                        catch {
-                            return false;
-                        }
-                    }
-                    if (analysis && typeof value === 'string' && !isAbsolute(value))
-                        value = resolve(cwd, value);
-                    return Boolean(root) && (!value || isWithinDirectory(root, value));
-                });
-                const scopedRead = !analysis || effectType !== 'file-read' || locations.length > 0;
-                if (!declared || !inWorkspace || !scopedRead) {
+                if (!isAcpToolAllowed(tool, effects, root, cwd, Boolean(analysis))) {
                     permissionDenied = true;
                     const option = ctx?.params?.options?.find((o) => String(o.kind).startsWith('reject'));
                     return option

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hmj-ai/cflow",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "以 Flow 为核心的本机多 Agent 编排工作台",
   "main": "dist/src/server.js",
   "bin": {