@hopping-dev/hub 0.1.0

package/dist/policy/store.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyStore = void 0;
+const system_policies_1 = require("./system-policies");
+/**
+ * Policy Store
+ * 管理系統預設與自訂 Policy 規則
+ */
+class PolicyStore {
+    policies = new Map();
+    logger;
+    constructor(logger) {
+        this.logger = logger;
+        this.loadSystemPolicies();
+    }
+    loadSystemPolicies() {
+        for (const policy of system_policies_1.SYSTEM_POLICIES) {
+            this.policies.set(policy.id, policy);
+        }
+        this.logger.info('System policies loaded', {
+            count: system_policies_1.SYSTEM_POLICIES.length,
+        });
+    }
+    /**
+     * 新增自訂 Policy
+     */
+    addPolicy(policy) {
+        if (this.policies.has(policy.id)) {
+            const existing = this.policies.get(policy.id);
+            if (existing.isSystem) {
+                this.logger.warn('Cannot overwrite system policy', { id: policy.id });
+                return;
+            }
+        }
+        this.policies.set(policy.id, policy);
+        this.logger.info('Policy added', { id: policy.id, name: policy.name });
+    }
+    /**
+     * 取得適用的 Policy（依優先級排序）
+     */
+    getApplicablePolicies(context) {
+        const applicable = [];
+        for (const policy of this.policies.values()) {
+            if (!policy.enabled)
+                continue;
+            // 檢查 scope
+            if (policy.scope.agentTypes && policy.scope.agentTypes.length > 0) {
+                if (!policy.scope.agentTypes.includes(context.agentType)) {
+                    continue;
+                }
+            }
+            if (policy.scope.agentIds && policy.scope.agentIds.length > 0) {
+                if (!context.agentId || !policy.scope.agentIds.includes(context.agentId)) {
+                    continue;
+                }
+            }
+            applicable.push(policy);
+        }
+        // 依優先級排序（數字越小越高優先）
+        return applicable.sort((a, b) => a.priority - b.priority);
+    }
+    getPolicy(id) {
+        return this.policies.get(id);
+    }
+    getAllPolicies() {
+        return Array.from(this.policies.values());
+    }
+}
+exports.PolicyStore = PolicyStore;
+//# sourceMappingURL=store.js.map

package/dist/policy/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/policy/store.ts"],"names":[],"mappings":";;;AACA,uDAAoD;AAGpD;;;GAGG;AACH,MAAa,WAAW;IACd,QAAQ,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC1C,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAEO,kBAAkB;QACxB,KAAK,MAAM,MAAM,IAAI,iCAAe,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACzC,KAAK,EAAE,iCAAe,CAAC,MAAM;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc;QACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAE,CAAC;YAC/C,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAmD;QACvE,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,SAAS;YAE9B,WAAW;YACX,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzD,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzE,SAAS;gBACX,CAAC;YACH,CAAC;YAED,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAED,mBAAmB;QACnB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF;AArED,kCAqEC"}

package/dist/policy/system-policies.d.ts

@@ -0,0 +1,15 @@
+import { Policy } from '@hopping/shared';
+/**
+ * 系統預設 Policy（不可刪除）
+ *
+ * 優先級規則：數字越小 = 越先評估 = 越高優先
+ * WARN > ASK > ALLOW（WARN 一旦匹配就立即停止）
+ *
+ * 策略分層：
+ *   priority 1    - 最高風險（WARN）：rm -rf、DROP TABLE、.env 等
+ *   priority 2-10 - 中風險（ASK/WARN）：force push、sudo 等
+ *   priority 50   - 低風險自動放行（ALLOW）：file_read、network_read
+ *   priority 100  - 保底規則（ASK）：shell_execute、file_write、sensitive_action、unknown
+ */
+export declare const SYSTEM_POLICIES: Policy[];
+//# sourceMappingURL=system-policies.d.ts.map

package/dist/policy/system-policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-policies.d.ts","sourceRoot":"","sources":["../../src/policy/system-policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,EA2PnC,CAAC"}

package/dist/policy/system-policies.js

@@ -0,0 +1,265 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYSTEM_POLICIES = void 0;
+/**
+ * 系統預設 Policy（不可刪除）
+ *
+ * 優先級規則：數字越小 = 越先評估 = 越高優先
+ * WARN > ASK > ALLOW（WARN 一旦匹配就立即停止）
+ *
+ * 策略分層：
+ *   priority 1    - 最高風險（WARN）：rm -rf、DROP TABLE、.env 等
+ *   priority 2-10 - 中風險（ASK/WARN）：force push、sudo 等
+ *   priority 50   - 低風險自動放行（ALLOW）：file_read、network_read
+ *   priority 100  - 保底規則（ASK）：shell_execute、file_write、sensitive_action、unknown
+ */
+exports.SYSTEM_POLICIES = [
+    // ============================================
+    // 第一層：最高風險（WARN）
+    // ============================================
+    {
+        id: 'sys-001',
+        name: '警告所有 rm -rf / rm -r 命令',
+        description: '攔截所有遞迴刪除命令（rm -rf / rm -r），無論目標路徑',
+        type: 'command_filter',
+        enabled: true,
+        priority: 1,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'command',
+                operator: 'matches_regex',
+                value: 'rm\\s+.*-[a-zA-Z]*[rf]',
+                caseSensitive: false,
+            },
+        ],
+        action: 'WARN',
+        scope: {},
+    },
+    {
+        id: 'sys-002',
+        name: '警告 DROP/TRUNCATE SQL',
+        description: '警告可能造成資料遺失的 SQL 命令',
+        type: 'command_filter',
+        enabled: true,
+        priority: 1,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'sql_statement',
+                operator: 'matches_regex',
+                value: '(DROP|TRUNCATE)\\s+(TABLE|DATABASE)',
+                caseSensitive: false,
+            },
+        ],
+        action: 'WARN',
+        scope: {},
+    },
+    {
+        id: 'sys-004',
+        name: '警告 .env 檔案存取',
+        description: '警告讀取或修改環境變數檔案的操作',
+        type: 'file_protection',
+        enabled: true,
+        priority: 1,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'file_path',
+                operator: 'matches_regex',
+                value: '\\.env',
+                caseSensitive: false,
+            },
+        ],
+        action: 'WARN',
+        scope: {},
+    },
+    {
+        id: 'sys-005',
+        name: 'Session 成本警告',
+        description: '單次 Session 累計成本超過 $50 USD 時警告',
+        type: 'cost_limit',
+        enabled: true,
+        priority: 5,
+        isSystem: true,
+        conditions: [{ field: 'session_cost', operator: 'greater_than', value: 50 }],
+        action: 'WARN',
+        scope: {},
+    },
+    // ============================================
+    // 第二層：中風險（ASK）
+    // ============================================
+    {
+        id: 'sys-003',
+        name: '審核 Git Force Push',
+        description: 'Force push 可能覆蓋他人變更，需人工審核',
+        type: 'command_filter',
+        enabled: true,
+        priority: 10,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'command',
+                operator: 'matches_regex',
+                value: 'git\\s+push\\s+.*(-f|--force)',
+                caseSensitive: false,
+            },
+        ],
+        action: 'ASK',
+        scope: {},
+    },
+    {
+        id: 'sys-006',
+        name: '審核危險 Shell 命令',
+        description: '含 sudo、chmod 777、curl|bash 等危險操作需審核',
+        type: 'command_filter',
+        enabled: true,
+        priority: 2,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'command',
+                operator: 'matches_regex',
+                value: '(sudo\\s|chmod\\s+777|curl.*\\|\\s*(bash|sh)|wget.*\\|\\s*(bash|sh))',
+                caseSensitive: false,
+            },
+        ],
+        action: 'ASK',
+        scope: {},
+    },
+    {
+        id: 'sys-007',
+        name: '審核一般 rm 刪除命令',
+        description: '所有 rm 命令（含非遞迴）都需要審核',
+        type: 'command_filter',
+        enabled: true,
+        priority: 5,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'command',
+                operator: 'matches_regex',
+                value: '\\brm\\s+',
+                caseSensitive: false,
+            },
+        ],
+        action: 'ASK',
+        scope: {},
+    },
+    // ============================================
+    // 第三層：低風險自動放行（ALLOW）
+    // priority 50 — 低於 WARN/ASK 高優先策略（p1-10），但高於保底 ASK（p100）
+    // ============================================
+    {
+        id: 'sys-200',
+        name: '自動放行：file_read 操作',
+        description: '唯讀檔案操作（Read、Glob、Grep 等）自動允許，無需送審',
+        type: 'file_protection',
+        enabled: true,
+        priority: 50,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'action_type',
+                operator: 'in_list',
+                value: ['file_read'],
+            },
+        ],
+        action: 'ALLOW',
+        scope: {},
+    },
+    {
+        id: 'sys-201',
+        name: '自動放行：network_read 操作',
+        description: '唯讀網路操作（WebSearch、WebFetch 等）自動允許，無需送審',
+        type: 'network_filter',
+        enabled: true,
+        priority: 50,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'action_type',
+                operator: 'in_list',
+                value: ['network_read'],
+            },
+        ],
+        action: 'ALLOW',
+        scope: {},
+    },
+    // ============================================
+    // 第四層：保底規則（所有操作至少 ASK）
+    // ============================================
+    {
+        id: 'sys-100',
+        name: '保底：審核所有 shell_execute 操作',
+        description: '所有 shell 命令執行都至少需要 ASK 審核',
+        type: 'command_filter',
+        enabled: true,
+        priority: 100,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'action_type',
+                operator: 'equals',
+                value: 'shell_execute',
+            },
+        ],
+        action: 'ASK',
+        scope: {},
+    },
+    {
+        id: 'sys-101',
+        name: '保底：審核所有 file_write 操作',
+        description: '所有檔案寫入都至少需要 ASK 審核',
+        type: 'file_protection',
+        enabled: true,
+        priority: 100,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'action_type',
+                operator: 'equals',
+                value: 'file_write',
+            },
+        ],
+        action: 'ASK',
+        scope: {},
+    },
+    {
+        id: 'sys-102',
+        name: '保底：審核所有 sensitive_action 操作',
+        description: '所有敏感操作都至少需要 ASK 審核',
+        type: 'command_filter',
+        enabled: true,
+        priority: 100,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'action_type',
+                operator: 'equals',
+                value: 'sensitive_action',
+            },
+        ],
+        action: 'ASK',
+        scope: {},
+    },
+    {
+        id: 'sys-103',
+        name: '保底：審核所有 unknown 操作',
+        description: '無法識別的工具操作都至少需要 ASK 審核',
+        type: 'custom',
+        enabled: true,
+        priority: 100,
+        isSystem: true,
+        conditions: [
+            {
+                field: 'action_type',
+                operator: 'equals',
+                value: 'unknown',
+            },
+        ],
+        action: 'ASK',
+        scope: {},
+    },
+];
+//# sourceMappingURL=system-policies.js.map

package/dist/policy/system-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-policies.js","sourceRoot":"","sources":["../../src/policy/system-policies.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;GAWG;AACU,QAAA,eAAe,GAAa;IACvC,+CAA+C;IAC/C,iBAAiB;IACjB,+CAA+C;IAC/C;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,wBAAwB;gBAC/B,aAAa,EAAE,KAAK;aACrB;SACF;QACD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,oBAAoB;QACjC,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,qCAAqC;gBAC5C,aAAa,EAAE,KAAK;aACrB;SACF;QACD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,WAAW;gBAClB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,QAAQ;gBACf,aAAa,EAAE,KAAK;aACrB;SACF;QACD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,EAAE;KACV;IAED,+CAA+C;IAC/C,eAAe;IACf,+CAA+C;IAC/C;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,+BAA+B;gBACtC,aAAa,EAAE,KAAK;aACrB;SACF;QACD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,qCAAqC;QAClD,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,sEAAsE;gBAC7E,aAAa,EAAE,KAAK;aACrB;SACF;QACD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,qBAAqB;QAClC,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,WAAW;gBAClB,aAAa,EAAE,KAAK;aACrB;SACF;QACD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE;KACV;IAED,+CAA+C;IAC/C,qBAAqB;IACrB,yDAAyD;IACzD,+CAA+C;IAC/C;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,CAAC,WAAW,CAAC;aACrB;SACF;QACD,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,uCAAuC;QACpD,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,CAAC,cAAc,CAAC;aACxB;SACF;QACD,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,EAAE;KACV;IAED,+CAA+C;IAC/C,uBAAuB;IACvB,+CAA+C;IAC/C;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,2BAA2B;QACxC,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,eAAe;aACvB;SACF;QACD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,oBAAoB;QACjC,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,YAAY;aACpB;SACF;QACD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,oBAAoB;QACjC,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,kBAAkB;aAC1B;SACF;QACD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE;KACV;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,uBAAuB;QACpC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE;YACV;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,SAAS;aACjB;SACF;QACD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE;KACV;CACF,CAAC"}

package/dist/policy/tool-mapping.d.ts

@@ -0,0 +1,45 @@
+import type { AgentType } from '@hopping/shared';
+/** 單一工具的映射條目 */
+export interface ToolMappingEntry {
+    type: OperationType;
+    fields: Record<string, string>;
+}
+/** 操作類型（Hub 內部，不 export 至 @hopping/shared） */
+export type OperationType = 'shell_execute' | 'file_write' | 'file_read' | 'network_read' | 'sensitive_action' | 'unknown';
+/** Tool Registry 格式 */
+export interface ToolRegistry {
+    agents: Record<string, Record<string, ToolMappingEntry>>;
+    keywords: Record<string, string[]>;
+}
+/** 從 EvaluationContext.operation 提取出的欄位 */
+export interface ExtractedOperationFields {
+    command?: string;
+    filePath?: string;
+    apiEndpoint?: string;
+}
+/**
+ * 載入 Bundled Registry
+ */
+export declare function loadBundledRegistry(): ToolRegistry;
+/**
+ * 三層工具映射解析
+ *
+ * Layer 1: User Config（userMappings 若有，優先於 bundled）
+ * Layer 2: Bundled Registry（tool-registry.json）
+ * Layer 3: Keyword Inference（工具名關鍵字推斷）
+ * Layer 4: Fallback → unknown
+ *
+ * @param toolName - MCP 工具名（e.g. "Bash", "Read"）
+ * @param agentType - Agent 類型（e.g. "claude_code", "cursor"）
+ * @param userMappings - 來自 user config 的 toolMappings（可為 null）
+ * @param registry - Bundled Registry（預設用 loadBundledRegistry()）
+ */
+export declare function resolveToolMapping(toolName: string, agentType: AgentType | string, userMappings: ToolRegistry | null, registry?: ToolRegistry): ToolMappingEntry;
+/**
+ * 從 toolInput 中依據 mapping entry 提取操作欄位
+ *
+ * @param entry - 解析後的 ToolMappingEntry（含 fields 映射）
+ * @param toolInput - 工具的原始輸入參數
+ */
+export declare function extractOperationFields(entry: ToolMappingEntry, toolInput: Record<string, unknown>): ExtractedOperationFields;
+//# sourceMappingURL=tool-mapping.d.ts.map

package/dist/policy/tool-mapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-mapping.d.ts","sourceRoot":"","sources":["../../src/policy/tool-mapping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAOjD,gBAAgB;AAChB,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,8CAA8C;AAC9C,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,YAAY,GACZ,WAAW,GACX,cAAc,GACd,kBAAkB,GAClB,SAAS,CAAC;AAEd,uBAAuB;AACvB,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACzD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAkBD;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,YAAY,CAElD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,SAAS,GAAG,MAAM,EAC7B,YAAY,EAAE,YAAY,GAAG,IAAI,EACjC,QAAQ,GAAE,YAAoC,GAC7C,gBAAgB,CAwBlB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,wBAAwB,CAiB1B"}

package/dist/policy/tool-mapping.js

@@ -0,0 +1,88 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadBundledRegistry = loadBundledRegistry;
+exports.resolveToolMapping = resolveToolMapping;
+exports.extractOperationFields = extractOperationFields;
+const tool_registry_json_1 = __importDefault(require("./tool-registry.json"));
+// ============================================
+// 關鍵字推斷優先序（高風險 > 低風險）
+// ============================================
+const KEYWORD_PRIORITY = [
+    'sensitive_action',
+    'shell_execute',
+    'file_write',
+    'network_read',
+    'file_read',
+];
+// ============================================
+// 公開函式
+// ============================================
+/**
+ * 載入 Bundled Registry
+ */
+function loadBundledRegistry() {
+    return tool_registry_json_1.default;
+}
+/**
+ * 三層工具映射解析
+ *
+ * Layer 1: User Config（userMappings 若有，優先於 bundled）
+ * Layer 2: Bundled Registry（tool-registry.json）
+ * Layer 3: Keyword Inference（工具名關鍵字推斷）
+ * Layer 4: Fallback → unknown
+ *
+ * @param toolName - MCP 工具名（e.g. "Bash", "Read"）
+ * @param agentType - Agent 類型（e.g. "claude_code", "cursor"）
+ * @param userMappings - 來自 user config 的 toolMappings（可為 null）
+ * @param registry - Bundled Registry（預設用 loadBundledRegistry()）
+ */
+function resolveToolMapping(toolName, agentType, userMappings, registry = loadBundledRegistry()) {
+    // Layer 1: User Config override
+    const userEntry = userMappings?.agents?.[agentType]?.[toolName];
+    if (userEntry) {
+        return userEntry;
+    }
+    // Layer 2: Bundled Registry
+    const bundledEntry = registry.agents?.[agentType]?.[toolName];
+    if (bundledEntry) {
+        return bundledEntry;
+    }
+    // Layer 3: Keyword Inference（工具名小寫，按優先序檢查）
+    const lowerTool = toolName.toLowerCase();
+    for (const opType of KEYWORD_PRIORITY) {
+        const keywords = registry.keywords?.[opType] ?? [];
+        if (keywords.some((kw) => lowerTool.includes(kw))) {
+            return { type: opType, fields: {} };
+        }
+    }
+    // Layer 4: Fallback
+    return { type: 'unknown', fields: {} };
+}
+/**
+ * 從 toolInput 中依據 mapping entry 提取操作欄位
+ *
+ * @param entry - 解析後的 ToolMappingEntry（含 fields 映射）
+ * @param toolInput - 工具的原始輸入參數
+ */
+function extractOperationFields(entry, toolInput) {
+    const result = {};
+    for (const [contextField, inputKey] of Object.entries(entry.fields)) {
+        const value = toolInput[inputKey];
+        if (typeof value !== 'string')
+            continue;
+        if (contextField === 'command') {
+            result.command = value;
+        }
+        else if (contextField === 'filePath') {
+            result.filePath = value;
+        }
+        else if (contextField === 'apiEndpoint') {
+            result.apiEndpoint = value;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=tool-mapping.js.map

package/dist/policy/tool-mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-mapping.js","sourceRoot":"","sources":["../../src/policy/tool-mapping.ts"],"names":[],"mappings":";;;;;AAsDA,kDAEC;AAeD,gDA6BC;AAQD,wDAoBC;AA/HD,8EAAmD;AAkCnD,+CAA+C;AAC/C,sBAAsB;AACtB,+CAA+C;AAE/C,MAAM,gBAAgB,GAAoB;IACxC,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,cAAc;IACd,WAAW;CACZ,CAAC;AAEF,+CAA+C;AAC/C,OAAO;AACP,+CAA+C;AAE/C;;GAEG;AACH,SAAgB,mBAAmB;IACjC,OAAO,4BAA+B,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,kBAAkB,CAChC,QAAgB,EAChB,SAA6B,EAC7B,YAAiC,EACjC,WAAyB,mBAAmB,EAAE;IAE9C,gCAAgC;IAChC,MAAM,SAAS,GAAG,YAAY,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,4BAA4B;IAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,2CAA2C;IAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CACpC,KAAuB,EACvB,SAAkC;IAElC,MAAM,MAAM,GAA6B,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAExC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;QAC1B,CAAC;aAAM,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YAC1C,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/policy/tool-registry.json

@@ -0,0 +1,85 @@
+{
+    "agents": {
+        "claude_code": {
+            "Bash": {
+                "type": "shell_execute",
+                "fields": { "command": "command" }
+            },
+            "Write": {
+                "type": "file_write",
+                "fields": { "filePath": "file_path" }
+            },
+            "Edit": {
+                "type": "file_write",
+                "fields": { "filePath": "file_path" }
+            },
+            "NotebookEdit": {
+                "type": "file_write",
+                "fields": { "filePath": "notebook_path" }
+            },
+            "Read": {
+                "type": "file_read",
+                "fields": { "filePath": "file_path" }
+            },
+            "Glob": {
+                "type": "file_read",
+                "fields": { "filePath": "path" }
+            },
+            "Grep": {
+                "type": "file_read",
+                "fields": { "filePath": "path" }
+            },
+            "WebSearch": {
+                "type": "network_read",
+                "fields": { "apiEndpoint": "query" }
+            },
+            "WebFetch": {
+                "type": "network_read",
+                "fields": { "apiEndpoint": "url" }
+            },
+            "Agent": {
+                "type": "sensitive_action",
+                "fields": {}
+            }
+        },
+        "cursor": {
+            "terminal": {
+                "type": "shell_execute",
+                "fields": { "command": "command" }
+            },
+            "edit_file": {
+                "type": "file_write",
+                "fields": { "filePath": "target_file" }
+            },
+            "read_file": {
+                "type": "file_read",
+                "fields": { "filePath": "target_file" }
+            },
+            "list_dir": {
+                "type": "file_read",
+                "fields": { "filePath": "relative_workspace_path" }
+            }
+        },
+        "codex": {
+            "shell": {
+                "type": "shell_execute",
+                "fields": { "command": "command" }
+            },
+            "write_file": {
+                "type": "file_write",
+                "fields": { "filePath": "path" }
+            },
+            "read_file": {
+                "type": "file_read",
+                "fields": { "filePath": "path" }
+            }
+        }
+    },
+    "keywords": {
+        "sensitive_action": ["agent", "spawn", "delegate", "invoke", "subprocess"],
+        "shell_execute": ["shell", "bash", "terminal", "exec", "run", "command"],
+        "file_write": ["write", "edit", "create", "save", "update", "modify", "patch", "delete"],
+        "network_read": ["web", "fetch", "http", "request", "url", "search", "browse"],
+        "file_read": ["read", "glob", "grep", "list", "find", "scan", "view"]
+    }
+}

package/dist/store/db.d.ts

@@ -0,0 +1,17 @@
+import Database from 'better-sqlite3';
+import type { OperationStore } from './operations';
+import type { MetadataStore } from './metadata';
+export declare function resolveDbPath(dbPath?: string): string;
+export declare class HubDatabase {
+    private db;
+    readonly operations: OperationStore;
+    readonly metadata: MetadataStore;
+    /**
+     * @param dbPath - undefined = 預設路徑, ':memory:' = 測試用
+     */
+    constructor(dbPath?: string);
+    close(): void;
+    /** 取得底層 Database 實例（僅供測試使用） */
+    get _db(): Database.Database;
+}
+//# sourceMappingURL=db.d.ts.map

package/dist/store/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/store/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAItC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAQhD,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAKrD;AAqHD,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAoB;IAC9B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC;;OAEG;gBACS,MAAM,CAAC,EAAE,MAAM;IAsB3B,KAAK,IAAI,IAAI;IAIb,+BAA+B;IAC/B,IAAI,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAE3B;CACF"}