@huicai/cli 2026.711.0 → 2026.711.24616

package/src/permissions.js

@@ -1,120 +1 @@
-// 权限/审批：只读工具自动放行；写/执行需授权（y 一次 / a 本会话该工具 / A 永久写入项目设置 / 否可附原因）。
-// 另支持 settings.json 允许规则（全局 ~/.huicai + 项目 .huicai，见 settings.js）。
-// yolo 模式全放行；非交互（无 ask）且非 yolo 时拒绝写/执行并把原因回灌模型，让它调整策略。
-
-import { c } from './colors.js';
-import { toolLabel, renderEditDiff, indent } from './render.js';
-import { loadAllowRules, loadDenyRules, matchAllowRules, suggestRule, addProjectAllowRule, riskWarning } from './settings.js';
-
-// 计划模式下写/执行类工具被拒绝时的统一说明（REPL 与 TUI 共用同一文案）。
-export const PLAN_DENY_REASON =
-  '当前处于计划模式：只做只读调研，不执行任何改动。请先产出完整方案交用户确认；'
-  + '用户 /plan 关闭计划模式后再执行改动。';
-
-// 沙箱模式下 run_bash / fetch_url 被拒绝时的统一说明。
-export const SANDBOX_DENY_REASON =
-  '当前处于沙箱模式：禁止执行 shell 命令（run_bash）与联网（fetch_url）。'
-  + '可继续读写本地文件；如需执行/联网，请用户 /sandbox off 关闭沙箱。';
-
-export function createPermissions({ yolo = false, ask = null, cwd = null } = {}) {
-  const sessionAllowed = new Set();
-  let autoAll = !!yolo;
-  let planMode = false;
-  let sandbox = false;
-  // 仅在给定 cwd 时读取 settings 规则（测试等场景不受用户本机全局配置影响）
-  let rules = cwd ? loadAllowRules(cwd) : [];
-  let denyRules = cwd ? loadDenyRules(cwd) : [];
-
-  // readOnly 由调用方判定（内置工具查 READONLY_TOOLS；MCP 工具看 readOnlyHint；子智能体只读）
-  async function request(name, args, _cwd, readOnly = false) {
-    // 拒绝规则优先于一切（含只读；可用于挡住读取密钥文件等）
-    if (denyRules.length && matchAllowRules(denyRules, name, args)) {
-      return { allow: false, reason: '该操作被拒绝规则阻止（/permissions 查看或移除）。' };
-    }
-    // 计划模式：只放行只读，写/执行一律拦下并回灌原因（模型据此改为产出方案）
-    if (planMode && !readOnly) return { allow: false, reason: PLAN_DENY_REASON };
-    // 沙箱模式：禁 shell 与联网（仍可读写本地文件）
-    if (sandbox && (name === 'run_bash' || name === 'fetch_url')) return { allow: false, reason: SANDBOX_DENY_REASON };
-    if (readOnly) return { allow: true };
-    if (autoAll || sessionAllowed.has(name)) return { allow: true };
-    if (rules.length && matchAllowRules(rules, name, args)) return { allow: true };
-    if (!ask) {
-      return { allow: false, reason: '当前为非交互模式，未授权写/执行操作（加 --yolo 可自动放行）。' };
-    }
-    printPreview(name, args);
-    const raw = (await ask(
-      `${c.yellow('允许执行?')} [y]是 · [a]本会话该工具 · [A]永久允许(写入项目设置) · [N]否(可附原因): `,
-    )) || '';
-    const answer = raw.trim();
-    if (answer === 'a') {
-      sessionAllowed.add(name);
-      return { allow: true };
-    }
-    if (answer === 'A') {
-      sessionAllowed.add(name);
-      if (cwd) {
-        const rule = suggestRule(name, args);
-        try {
-          const p = addProjectAllowRule(cwd, rule);
-          rules = loadAllowRules(cwd);
-          process.stdout.write(c.gray(`  已写入规则 ${rule} → ${p}`) + '\n');
-        } catch (e) {
-          process.stdout.write(c.yellow(`  规则写入失败（本会话仍生效）：${e.message}`) + '\n');
-        }
-      }
-      return { allow: true };
-    }
-    const lower = answer.toLowerCase();
-    if (lower === 'y' || lower === 'yes') return { allow: true };
-    if (answer === '' || lower === 'n' || lower === 'no') {
-      return { allow: false, reason: '用户拒绝了该操作。' };
-    }
-    return { allow: false, reason: `用户拒绝并说明：${answer}` };
-  }
-
-  return {
-    request,
-    setYolo(v) {
-      autoAll = !!v;
-    },
-    isYolo() {
-      return autoAll;
-    },
-    setPlanMode(v) {
-      planMode = !!v;
-    },
-    isPlanMode() {
-      return planMode;
-    },
-    setSandbox(v) {
-      sandbox = !!v;
-    },
-    isSandbox() {
-      return sandbox;
-    },
-    /** 规则文件被 /permissions 修改后重新加载（本会话即时生效）。 */
-    reloadRules() {
-      rules = cwd ? loadAllowRules(cwd) : [];
-      denyRules = cwd ? loadDenyRules(cwd) : [];
-    },
-  };
-}
-
-function printPreview(name, args) {
-  process.stdout.write('\n' + c.bold(c.yellow('● 需要授权：')) + toolLabel(name, args) + '\n');
-  const risk = riskWarning(name, args);
-  if (risk) process.stdout.write('  ' + c.bold(c.red('⚠ ' + risk)) + '\n');
-  if (name === 'run_bash') {
-    process.stdout.write(c.gray('  $ ') + String(args.command ?? '') + '\n');
-  } else if (name === 'write_file') {
-    const preview = String(args.content ?? '')
-      .split('\n')
-      .slice(0, 12)
-      .join('\n');
-    process.stdout.write(c.gray(`  将写入 ${args.path}:`) + '\n' + indent(preview) + '\n');
-  } else if (name === 'edit_file') {
-    process.stdout.write(c.gray(`  编辑 ${args.path}:`) + '\n' + indent(renderEditDiff(args.old_string, args.new_string)) + '\n');
-  } else if (name === 'fetch_url') {
-    process.stdout.write(c.gray('  GET ') + String(args.url ?? '') + '\n');
-  }
-}
+import{c as o}from"./colors.js";import{toolLabel as t,renderEditDiff as r,indent as e}from"./render.js";import{loadAllowRules as s,loadDenyRules as n,matchAllowRules as l,suggestRule as a,addProjectAllowRule as i,riskWarning as u}from"./settings.js";export const PLAN_DENY_REASON="当前处于计划模式：只做只读调研，不执行任何改动。请先产出完整方案交用户确认；用户 /plan 关闭计划模式后再执行改动。";export const SANDBOX_DENY_REASON="当前处于沙箱模式：禁止执行 shell 命令（run_bash）与联网（fetch_url）。可继续读写本地文件；如需执行/联网，请用户 /sandbox off 关闭沙箱。";export function createPermissions({yolo:c=!1,ask:w=null,cwd:d=null}={}){const f=new Set;let p=!!c,_=!1,y=!1,g=d?s(d):[],h=d?n(d):[];return{request:async function(n,c,N,m=!1){if(h.length&&l(h,n,c))return{allow:!1,reason:"该操作被拒绝规则阻止（/permissions 查看或移除）。"};if(_&&!m)return{allow:!1,reason:PLAN_DENY_REASON};if(y&&("run_bash"===n||"fetch_url"===n))return{allow:!1,reason:SANDBOX_DENY_REASON};if(m)return{allow:!0};if(p||f.has(n))return{allow:!0};if(g.length&&l(g,n,c))return{allow:!0};if(!w)return{allow:!1,reason:"当前为非交互模式，未授权写/执行操作（加 --yolo 可自动放行）。"};!function(s,n){process.stdout.write("\n"+o.bold(o.yellow("● 需要授权："))+t(s,n)+"\n");const l=u(s,n);l&&process.stdout.write("  "+o.bold(o.red("⚠ "+l))+"\n");if("run_bash"===s)process.stdout.write(o.gray("  $ ")+String(n.command??"")+"\n");else if("write_file"===s){const t=String(n.content??"").split("\n").slice(0,12).join("\n");process.stdout.write(o.gray(`  将写入 ${n.path}:`)+"\n"+e(t)+"\n")}else"edit_file"===s?process.stdout.write(o.gray(`  编辑 ${n.path}:`)+"\n"+e(r(n.old_string,n.new_string))+"\n"):"fetch_url"===s&&process.stdout.write(o.gray("  GET ")+String(n.url??"")+"\n")}(n,c);const S=(await w(`${o.yellow("允许执行?")} [y]是 · [a]本会话该工具 · [A]永久允许(写入项目设置) · [N]否(可附原因): `)||"").trim();if("a"===S)return f.add(n),{allow:!0};if("A"===S){if(f.add(n),d){const t=a(n,c);try{const r=i(d,t);g=s(d),process.stdout.write(o.gray(`  已写入规则 ${t} → ${r}`)+"\n")}catch(t){process.stdout.write(o.yellow(`  规则写入失败（本会话仍生效）：${t.message}`)+"\n")}}return{allow:!0}}const A=S.toLowerCase();return"y"===A||"yes"===A?{allow:!0}:""===S||"n"===A||"no"===A?{allow:!1,reason:"用户拒绝了该操作。"}:{allow:!1,reason:`用户拒绝并说明：${S}`}},setYolo(o){p=!!o},isYolo:()=>p,setPlanMode(o){_=!!o},isPlanMode:()=>_,setSandbox(o){y=!!o},isSandbox:()=>y,reloadRules(){g=d?s(d):[],h=d?n(d):[]}}}

package/src/render.js

@@ -1,138 +1 @@
-// 终端渲染小工具：工具调用标签、编辑 diff。
-
-import { c } from './colors.js';
-
-/** 把一次工具调用渲染成简洁的一行标签。 */
-export function toolLabel(name, args = {}) {
-  switch (name) {
-    case 'read_file':
-      return `read_file ${args.path ?? ''}`;
-    case 'list_files':
-      return `list_files ${args.path ?? '.'}`;
-    case 'glob':
-      return `glob ${args.pattern ?? ''}`;
-    case 'grep':
-      return `grep ${JSON.stringify(args.pattern ?? '')}${args.path ? ' in ' + args.path : ''}`;
-    case 'search_code':
-      return `search_code ${JSON.stringify(args.query ?? '')}`;
-    case 'write_file':
-      return `write_file ${args.path ?? ''}`;
-    case 'edit_file':
-      return `edit_file ${args.path ?? ''}`;
-    case 'run_bash':
-      return `run_bash: ${String(args.command ?? '').split('\n')[0]}`;
-    case 'fetch_url':
-      return `fetch_url ${args.url ?? ''}`;
-    case 'todo_write':
-      return 'todo_write（更新任务清单）';
-    case 'dispatch_agent': {
-      const o = String(args.objective ?? '').split('\n')[0];
-      return `dispatch_agent: ${o.length > 60 ? o.slice(0, 60) + '…' : o}`;
-    }
-    case 'dispatch_agents':
-      return `dispatch_agents（并行 ${Array.isArray(args.tasks) ? args.tasks.length : '?'} 个子任务）`;
-    default:
-      return `${name}(${Object.keys(args).join(', ')})`;
-  }
-}
-
-/** edit_file 的简易 diff：old 红、new 绿。 */
-export function renderEditDiff(oldStr, newStr) {
-  const out = [];
-  for (const l of String(oldStr ?? '').split('\n')) out.push(c.red('- ' + l));
-  for (const l of String(newStr ?? '').split('\n')) out.push(c.green('+ ' + l));
-  return out.join('\n');
-}
-
-/**
- * 逐行 LCS diff：返回 [{type:' '|'-'|'+', text}]。超大文本退化为「全删+全增」以防 O(n·m) 爆内存。
- */
-export function diffLines(oldText, newText) {
-  // 空文本视为「零行」（新建文件时旧内容为空，不应显示一条幽灵空行删除）
-  const split = (t) => (t == null || t === '' ? [] : String(t).split('\n'));
-  const a = split(oldText);
-  const b = split(newText);
-  const n = a.length, m = b.length;
-  if (n * m > 4_000_000) {
-    return [...a.map((t) => ({ type: '-', text: t })), ...b.map((t) => ({ type: '+', text: t }))];
-  }
-  // dp[i][j] = a[i..] 与 b[j..] 的最长公共子序列长度
-  const dp = Array.from({ length: n + 1 }, () => new Uint32Array(m + 1));
-  for (let i = n - 1; i >= 0; i--) {
-    for (let j = m - 1; j >= 0; j--) {
-      dp[i][j] = a[i] === b[j] ? dp[i + 1][j + 1] + 1 : Math.max(dp[i + 1][j], dp[i][j + 1]);
-    }
-  }
-  const ops = [];
-  let i = 0, j = 0;
-  while (i < n && j < m) {
-    if (a[i] === b[j]) { ops.push({ type: ' ', text: a[i] }); i++; j++; }
-    else if (dp[i + 1][j] >= dp[i][j + 1]) { ops.push({ type: '-', text: a[i] }); i++; }
-    else { ops.push({ type: '+', text: b[j] }); j++; }
-  }
-  while (i < n) ops.push({ type: '-', text: a[i++] });
-  while (j < m) ops.push({ type: '+', text: b[j++] });
-  return ops;
-}
-
-/**
- * 把一次文件更改渲染为「带行号的统一 diff」（对标 Claude Code 编辑后展示更改的行）：
- * 增行绿色 `+`、删行红色 `-`、上下文灰色；仅显示变更行及其上下 context 行，中间大段用 ⋯ 省略。
- * 无变化返回空串。返回的是带 ANSI 的字符串（可直接 write，也可放进 ink <Text>）。
- * @param {string} oldText
- * @param {string} newText
- * @param {{path?:string, context?:number, maxLines?:number}} [opts]
- */
-export function renderFileDiff(oldText, newText, opts = {}) {
-  const { path = '', context = 3, maxLines = 80 } = opts;
-  const ops = diffLines(oldText, newText);
-  let adds = 0, dels = 0;
-  for (const o of ops) { if (o.type === '+') adds++; else if (o.type === '-') dels++; }
-  if (adds === 0 && dels === 0) return '';
-
-  // 标注每行的旧/新行号
-  const rows = [];
-  let oldNo = 0, newNo = 0;
-  for (const o of ops) {
-    if (o.type === ' ') { oldNo++; newNo++; rows.push({ type: ' ', text: o.text, no: oldNo }); }
-    else if (o.type === '-') { oldNo++; rows.push({ type: '-', text: o.text, no: oldNo }); }
-    else { newNo++; rows.push({ type: '+', text: o.text, no: newNo }); }
-  }
-  // 需展示的行 = 变更行及其上下 context 行
-  const show = new Array(rows.length).fill(false);
-  rows.forEach((r, idx) => {
-    if (r.type === ' ') return;
-    for (let k = Math.max(0, idx - context); k <= Math.min(rows.length - 1, idx + context); k++) show[k] = true;
-  });
-
-  const width = String(Math.max(oldNo, newNo)).length;
-  const pad = (no) => String(no == null ? '' : no).padStart(width);
-  const out = [(path ? c.bold(path) + '  ' : '') + c.green('+' + adds) + ' ' + c.red('−' + dels)];
-  let elided = false, shown = 0, truncated = false;
-  for (let idx = 0; idx < rows.length; idx++) {
-    if (!show[idx]) { if (!elided) { out.push(c.gray('  ' + ' '.repeat(width) + ' ⋯')); elided = true; } continue; }
-    elided = false;
-    if (shown >= maxLines) { truncated = true; break; }
-    const r = rows[idx];
-    if (r.type === '+') out.push(c.green('  ' + pad(r.no) + ' + ') + c.green(r.text));
-    else if (r.type === '-') out.push(c.red('  ' + pad(r.no) + ' - ') + c.red(r.text));
-    else out.push(c.gray('  ' + pad(r.no) + '   ' + r.text));
-    shown++;
-  }
-  if (truncated) out.push(c.gray(`  …（差异较大，仅显示前 ${maxLines} 行；共 +${adds} −${dels}）`));
-  return out.join('\n');
-}
-
-export function indent(s, pad = '    ') {
-  return String(s)
-    .split('\n')
-    .map((l) => pad + l)
-    .join('\n');
-}
-
-/** 结果摘要（首行 + 行数提示），避免把整段工具输出刷屏。 */
-export function summarize(text, maxLines = 6) {
-  const lines = String(text).split('\n');
-  if (lines.length <= maxLines) return text;
-  return lines.slice(0, maxLines).join('\n') + c.gray(`\n  …（共 ${lines.length} 行）`);
-}
+import{c as t}from"./colors.js";export function toolLabel(t,e={}){switch(t){case"read_file":return`read_file ${e.path??""}`;case"list_files":return`list_files ${e.path??"."}`;case"glob":return`glob ${e.pattern??""}`;case"grep":return`grep ${JSON.stringify(e.pattern??"")}${e.path?" in "+e.path:""}`;case"search_code":return`search_code ${JSON.stringify(e.query??"")}`;case"write_file":return`write_file ${e.path??""}`;case"edit_file":return`edit_file ${e.path??""}`;case"run_bash":return`run_bash: ${String(e.command??"").split("\n")[0]}`;case"fetch_url":return`fetch_url ${e.url??""}`;case"todo_write":return"todo_write（更新任务清单）";case"dispatch_agent":{const t=String(e.objective??"").split("\n")[0];return`dispatch_agent: ${t.length>60?t.slice(0,60)+"…":t}`}case"dispatch_agents":return`dispatch_agents（并行 ${Array.isArray(e.tasks)?e.tasks.length:"?"} 个子任务）`;default:return`${t}(${Object.keys(e).join(", ")})`}}export function renderEditDiff(e,n){const r=[];for(const n of String(e??"").split("\n"))r.push(t.red("- "+n));for(const e of String(n??"").split("\n"))r.push(t.green("+ "+e));return r.join("\n")}export function diffLines(t,e){const n=t=>null==t||""===t?[]:String(t).split("\n"),r=n(t),s=n(e),i=r.length,o=s.length;if(i*o>4e6)return[...r.map(t=>({type:"-",text:t})),...s.map(t=>({type:"+",text:t}))];const a=Array.from({length:i+1},()=>new Uint32Array(o+1));for(let t=i-1;t>=0;t--)for(let e=o-1;e>=0;e--)a[t][e]=r[t]===s[e]?a[t+1][e+1]+1:Math.max(a[t+1][e],a[t][e+1]);const p=[];let l=0,c=0;for(;l<i&&c<o;)r[l]===s[c]?(p.push({type:" ",text:r[l]}),l++,c++):a[l+1][c]>=a[l][c+1]?(p.push({type:"-",text:r[l]}),l++):(p.push({type:"+",text:s[c]}),c++);for(;l<i;)p.push({type:"-",text:r[l++]});for(;c<o;)p.push({type:"+",text:s[c++]});return p}export function renderFileDiff(e,n,r={}){const{path:s="",context:i=3,maxLines:o=80}=r,a=diffLines(e,n);let p=0,l=0;for(const t of a)"+"===t.type?p++:"-"===t.type&&l++;if(0===p&&0===l)return"";const c=[];let u=0,f=0;for(const t of a)" "===t.type?(u++,f++,c.push({type:" ",text:t.text,no:u})):"-"===t.type?(u++,c.push({type:"-",text:t.text,no:u})):(f++,c.push({type:"+",text:t.text,no:f}));const h=new Array(c.length).fill(!1);c.forEach((t,e)=>{if(" "!==t.type)for(let t=Math.max(0,e-i);t<=Math.min(c.length-1,e+i);t++)h[t]=!0});const g=String(Math.max(u,f)).length,y=t=>String(null==t?"":t).padStart(g),x=[(s?t.bold(s)+"  ":"")+t.green("+"+p)+" "+t.red("−"+l)];let d=!1,_=0,$=!1;for(let e=0;e<c.length;e++){if(!h[e]){d||(x.push(t.gray("  "+" ".repeat(g)+" ⋯")),d=!0);continue}if(d=!1,_>=o){$=!0;break}const n=c[e];"+"===n.type?x.push(t.green("  "+y(n.no)+" + ")+t.green(n.text)):"-"===n.type?x.push(t.red("  "+y(n.no)+" - ")+t.red(n.text)):x.push(t.gray("  "+y(n.no)+"   "+n.text)),_++}return $&&x.push(t.gray(`  …（差异较大，仅显示前 ${o} 行；共 +${p} −${l}）`)),x.join("\n")}export function indent(t,e="    "){return String(t).split("\n").map(t=>e+t).join("\n")}export function summarize(e,n=6){const r=String(e).split("\n");return r.length<=n?e:r.slice(0,n).join("\n")+t.gray(`\n  …（共 ${r.length} 行）`)}

package/src/repl.js

@@ -1,271 +1 @@
-// 交互式 REPL + 一次性(print)模式。用同一个 readline 处理「主输入」与「工具授权」（顺序进行，不冲突）。
-// 斜杠命令走 commands.js 统一注册表（与 ink TUI 共用）；支持 @文件 引用与 !命令 直通。
-
-import readline from 'node:readline';
-import { c } from './colors.js';
-import { createPermissions } from './permissions.js';
-import { runTurn } from './agent.js';
-import { createSession, saveSession, turnCount } from './session.js';
-import { createCheckpoints } from './checkpoints.js';
-import { buildSystemPrompt } from './context.js';
-import { runVerifyLoop } from './autofix.js';
-import { loadMcpTools, closeMcp } from './mcp.js';
-import { makeSubagentTool, makeDispatchAgentsTool } from './subagent.js';
-import { makeConsultTool } from './consult.js';
-import { makeAdvisorTool } from './advisor.js';
-import { makeRecallTool, readMemoryRaw } from './memory.js';
-import { detectScanners, makeScanTool } from './scan.js';
-import { runSlash } from './commands.js';
-import { expandAtMentions, buildUserContent, runBangCommand, loadHistory, appendHistory } from './input.js';
-import { makeSkillTools } from './skills.js';
-import { renderWelcome } from './banner.js';
-
-/** 汇集动态工具：本地技能（load_skill）+ 本地 MCP 工具 + dispatch_agent 子智能体。返回 {extraTools, clients}。 */
-export async function buildExtraTools(config, cwd) {
-  let mcp = { tools: [], clients: [] };
-  try {
-    mcp = await loadMcpTools();
-  } catch (e) {
-    process.stdout.write(c.yellow('MCP 初始化失败（忽略）：' + e.message) + '\n');
-  }
-  // 本地技能工具（.huicai/skills 与 ~/.huicai/skills；无技能时为空数组，零开销）
-  const extraTools = [...makeSkillTools(cwd), ...mcp.tools];
-  const dispatch = makeSubagentTool({ config, cwd, extraTools: mcp.tools, depth: 0 });
-  if (dispatch) extraTools.push(dispatch);
-  // 多智能体编排：并行批量子智能体（一次调用→N 并行→聚合）
-  const dispatchBatch = makeDispatchAgentsTool({ config, cwd, extraTools: mcp.tools, depth: 0 });
-  if (dispatchBatch) extraTools.push(dispatchBatch);
-  // 混合模式：配置了 --consult 平台伪模型时，暴露 consult_platform 工具（本机驱动 + 平台编排咨询）
-  const consult = makeConsultTool({ config });
-  if (consult) extraTools.push(consult);
-  // 会决策：设置了顾问模型 → ask_advisor；有长期记忆 → recall_memory（跨会话经验主动召回）
-  const advisor = makeAdvisorTool({ config });
-  if (advisor) extraTools.push(advisor);
-  if (config.memoryEnabled !== false && readMemoryRaw(cwd)) extraTools.push(makeRecallTool({ cwd }));
-  // 提质：检测到可用扫描器 → security_scan（真扫描,供安全审查/提交前自检）
-  if (detectScanners(cwd).length) extraTools.push(makeScanTool({ cwd }));
-  return { extraTools, clients: mcp.clients };
-}
-
-function banner(config, cwd, permissions, version) {
-  process.stdout.write(renderWelcome({
-    model: config.model,
-    cwd,
-    version,
-    platform: /^(agent|workflow|datahuman)-/.test(String(config.model || '')),
-    yolo: permissions.isYolo(),
-    consult: config.consult ? (config.consultLabel || config.consult) : null,
-  }) + '\n');
-}
-
-export async function startRepl({ config, cwd, yolo, initialPrompt, session, version }) {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-    history: loadHistory(cwd).reverse(), // readline 的 history 最近的在前
-    historySize: 200,
-  });
-  const ask = (q) => new Promise((resolve) => rl.question(q, resolve));
-  let permissions = createPermissions({ yolo, ask, cwd }); // /cd 换目录时会重建
-  const usage = { prompt: 0, completion: 0 };
-  const todoState = { list: [] };
-  const checkpoints = createCheckpoints(); // /rewind 检查点（本会话内存态）
-  let currentAbort = null;
-  let loopTimer = null; // /loop 定时器
-  // ctx 持有可变的 session（/clear 会替换为新会话），各处统一读 ctx.session
-  const ctx = { config, cwd, permissions, usage, session, version };
-
-  rl.on('SIGINT', () => {
-    if (currentAbort) currentAbort.abort();
-    else process.stdout.write('\n' + c.gray('输入 /exit 退出。') + '\n');
-  });
-
-  banner(config, cwd, permissions, version);
-  echoResumed(session);
-  let { extraTools, clients } = await buildExtraTools(config, cwd); // 连接 MCP（若已配置）；/cd 换目录时会重建
-
-  const doTurn = async (text) => {
-    const { text: expanded, mentions, images } = await expandAtMentions(text, cwd, config);
-    if (mentions.length) process.stdout.write(c.gray('  · 已展开引用：' + mentions.join('、')
-      + (images.length ? `（含 ${images.length} 张图片）` : '')) + '\n');
-    // 回合前记录检查点（对话位置 + 本回合文件原文经 fileJournal 累积），供 /rewind 回滚
-    const journal = checkpoints.snapshot({ session: ctx.session, label: text });
-    ctx.session.messages.push({ role: 'user', content: buildUserContent(expanded, images) });
-    currentAbort = new AbortController();
-    if (!ctx.session.compaction) ctx.session.compaction = {};
-    config.sessionId = ctx.session.id; // 对话落库审计：当前会话号（/clear 换新会话后随之更新）
-    const r = await runTurn({
-      config,
-      messages: ctx.session.messages,
-      permissions,
-      cwd,
-      signal: currentAbort.signal,
-      extraTools,
-      todoState,
-      compaction: ctx.session.compaction,
-      fileJournal: journal,
-    });
-    if (r?.usage) {
-      usage.prompt += r.usage.prompt;
-      usage.completion += r.usage.completion;
-    }
-    if (r?.lastPromptTokens) ctx.session.lastPromptTokens = r.lastPromptTokens;
-    currentAbort = null;
-    saveSession(ctx.session); // 每轮结束自动保存，可随时 --resume 恢复
-    return r;
-  };
-
-  const cmdCtx = () => ({
-    ...ctx,
-    session: ctx.session,
-    extraTools,
-    checkpoints,
-    print: (t) => process.stdout.write(String(t).endsWith('\n') ? String(t) : String(t) + '\n'),
-  });
-
-  if (initialPrompt) {
-    process.stdout.write(c.cyan('\nhuicai> ') + initialPrompt + '\n');
-    await doTurn(initialPrompt);
-  }
-
-  while (true) {
-    let input;
-    try {
-      input = (await ask(c.cyan('\nhuicai> '))).trim();
-    } catch {
-      break; // stdin 关闭
-    }
-    if (input === '') continue;
-    appendHistory(cwd, input);
-    if (input === '/exit' || input === '/quit') break;
-
-    if (input.startsWith('!') && input.length > 1) {
-      // shell 直通：本机执行，输出加入上下文（不消耗模型调用）
-      const command = input.slice(1).trim();
-      const { output, record } = await runBangCommand(command, cwd);
-      process.stdout.write(c.gray(output.split('\n').map((l) => '  ' + l).join('\n')) + '\n');
-      ctx.session.messages.push({ role: 'user', content: record });
-      saveSession(ctx.session);
-      continue;
-    }
-
-    if (input.startsWith('/')) {
-      const r = await runSlash(input, cmdCtx());
-      if (r.action === 'exit') break;
-      if (r.action === 'clear') {
-        ctx.session = createSession({ cwd, model: config.model, messages: [ctx.session.messages[0]] });
-        todoState.list = [];
-        checkpoints.list.length = 0;
-        process.stdout.write(c.gray('已开启新会话（旧会话已保存，可用 huicai --resume 恢复）。\n'));
-      }
-      if (r.action === 'refresh') echoResumed(ctx.session); // /rewind 回退对话后重新回显，帮助对齐
-      if (r.action === 'cd') {
-        // 切换工作目录：重建权限/工具/会话（在新目录开启新会话，旧会话已保存）
-        cwd = r.cwd;
-        ctx.cwd = cwd;
-        permissions = createPermissions({ yolo: permissions.isYolo(), ask, cwd });
-        ctx.permissions = permissions;
-        closeMcp(clients);
-        ({ extraTools, clients } = await buildExtraTools(config, cwd));
-        ctx.session = createSession({
-          cwd, model: config.model,
-          messages: [{ role: 'system', content: buildSystemPrompt(cwd, { memory: config.memoryEnabled !== false }) }],
-        });
-        todoState.list = [];
-        checkpoints.list.length = 0;
-        config.sessionId = ctx.session.id;
-        process.stdout.write(c.gray('已切换到 ' + cwd + '（新会话，旧会话已保存）。\n'));
-      }
-      if (r.action === 'autofix') {
-        // 修到通过闭环：跑验证命令，失败自动让智能体修复后重跑
-        await runVerifyLoop({
-          command: r.command,
-          maxIters: r.maxIters,
-          cwd,
-          runTurnOnce: (p) => doTurn(p),
-          emit: (t) => process.stdout.write(c.gray(t) + '\n'),
-        });
-      }
-      if (r.action === 'loop') {
-        if (loopTimer) {
-          clearInterval(loopTimer);
-          loopTimer = null;
-        }
-        if (r.stop) {
-          process.stdout.write(c.gray('已停止循环。\n'));
-        } else {
-          process.stdout.write(c.gray(`已开始循环：每 ${r.seconds}s 运行「${r.prompt}」（/loop off 停止）。\n`));
-          loopTimer = setInterval(() => {
-            if (!currentAbort) void doTurn(r.prompt);
-          }, r.seconds * 1000);
-        }
-      }
-      if (r.prompt) await doTurn(r.prompt);
-      continue;
-    }
-    await doTurn(input);
-  }
-  if (loopTimer) clearInterval(loopTimer);
-  rl.close();
-  closeMcp(clients);
-  process.stdout.write(c.gray('\n再见。\n'));
-}
-
-/** 恢复会话时的提示：标题 + 轮数 + 上一条助手回复摘要，帮用户续上下文。 */
-function echoResumed(session) {
-  const turns = turnCount(session.messages);
-  if (turns === 0) return;
-  process.stdout.write(c.gray(`  已恢复会话「${session.title || ''}」（${turns} 轮）`) + '\n');
-  const lastAssistant = [...session.messages].reverse().find((m) => m.role === 'assistant' && m.content);
-  if (lastAssistant) {
-    const text = String(lastAssistant.content).trim();
-    const snippet = text.length > 400 ? text.slice(0, 400) + '…' : text;
-    process.stdout.write(c.gray('  上次回复：') + snippet.replace(/\n/g, '\n  ') + '\n');
-  }
-}
-
-/**
- * 一次性（非交互）模式：跑一个指令即退出。无 ask → 写/执行需 --yolo 才放行。
- * persist=true（配合 --continue/--resume）时把本轮追加保存回会话，供后续续接。
- * outputFormat='json' 时静默过程输出，最后打印一行结构化 JSON（脚本/CI 集成）。
- */
-export async function runOnce({ config, cwd, yolo, prompt, session, persist, outputFormat, maxTurns }) {
-  if (!prompt) {
-    process.stderr.write('用法: huicai -p "你的指令"\n');
-    process.exit(1);
-  }
-  const json = outputFormat === 'json';
-  const permissions = createPermissions({ yolo, ask: null, cwd });
-  const { extraTools, clients } = await buildExtraTools(config, cwd);
-  const { text: expanded, images } = await expandAtMentions(prompt, cwd, config);
-  session.messages.push({ role: 'user', content: buildUserContent(expanded, images) });
-  if (!session.compaction) session.compaction = {};
-  config.sessionId = session.id; // 对话落库审计：会话号
-  const r = await runTurn({
-    config,
-    messages: session.messages,
-    permissions,
-    cwd,
-    extraTools,
-    maxIters: maxTurns,
-    compaction: session.compaction,
-    io: json ? { write: () => {} } : undefined,
-  });
-  if (r?.lastPromptTokens) session.lastPromptTokens = r.lastPromptTokens;
-  if (persist) saveSession(session);
-  closeMcp(clients);
-  if (json) {
-    const lastAssistant = [...session.messages].reverse().find((m) => m.role === 'assistant' && m.content);
-    process.stdout.write(JSON.stringify({
-      type: 'result',
-      is_error: !!r?.error,
-      ...(r?.error ? { error: r.error } : {}),
-      result: lastAssistant ? String(lastAssistant.content) : '',
-      usage: { input_tokens: r?.usage?.prompt ?? 0, output_tokens: r?.usage?.completion ?? 0 },
-      session_id: session.id,
-      model: config.model,
-      num_turns: turnCount(session.messages),
-    }) + '\n');
-  }
-  if (r?.error) process.exit(1);
-}
+import s from"node:readline";import{c as o}from"./colors.js";import{createPermissions as t}from"./permissions.js";import{runTurn as e}from"./agent.js";import{createSession as n,saveSession as r,turnCount as i}from"./session.js";import{createCheckpoints as a}from"./checkpoints.js";import{buildSystemPrompt as c}from"./context.js";import{runVerifyLoop as l}from"./autofix.js";import{loadMcpTools as m,closeMcp as p}from"./mcp.js";import{makeSubagentTool as u,makeDispatchAgentsTool as d}from"./subagent.js";import{makeConsultTool as g}from"./consult.js";import{makeAdvisorTool as w}from"./advisor.js";import{makeRecallTool as f,readMemoryRaw as h}from"./memory.js";import{detectScanners as y,makeScanTool as x}from"./scan.js";import{runSlash as T}from"./commands.js";import{expandAtMentions as j,buildUserContent as k,runBangCommand as b,loadHistory as I,appendHistory as v}from"./input.js";import{makeSkillTools as S}from"./skills.js";import{renderWelcome as P}from"./banner.js";export async function buildExtraTools(s,t){let e={tools:[],clients:[]};try{e=await m()}catch(s){process.stdout.write(o.yellow("MCP 初始化失败（忽略）："+s.message)+"\n")}const n=[...S(t),...e.tools],r=u({config:s,cwd:t,extraTools:e.tools,depth:0});r&&n.push(r);const i=d({config:s,cwd:t,extraTools:e.tools,depth:0});i&&n.push(i);const a=g({config:s});a&&n.push(a);const c=w({config:s});return c&&n.push(c),!1!==s.memoryEnabled&&h(t)&&n.push(f({cwd:t})),y(t).length&&n.push(x({cwd:t})),{extraTools:n,clients:e.clients}}export async function startRepl({config:i,cwd:m,yolo:u,initialPrompt:d,session:g,version:w}){const f=s.createInterface({input:process.stdin,output:process.stdout,history:I(m).reverse(),historySize:200}),h=s=>new Promise(o=>f.question(s,o));let y=t({yolo:u,ask:h,cwd:m});const x={prompt:0,completion:0},S={list:[]},$=a();let _=null,O=null;const W={config:i,cwd:m,permissions:y,usage:x,session:g,version:w};f.on("SIGINT",()=>{_?_.abort():process.stdout.write("\n"+o.gray("输入 /exit 退出。")+"\n")}),function(s,o,t,e){process.stdout.write(P({model:s.model,cwd:o,version:e,platform:/^(agent|workflow|datahuman)-/.test(String(s.model||"")),yolo:t.isYolo(),consult:s.consult?s.consultLabel||s.consult:null})+"\n")}(i,m,y,w),E(g);let{extraTools:q,clients:C}=await buildExtraTools(i,m);const J=async s=>{const{text:t,mentions:n,images:a}=await j(s,m,i);n.length&&process.stdout.write(o.gray("  · 已展开引用："+n.join("、")+(a.length?`（含 ${a.length} 张图片）`:""))+"\n");const c=$.snapshot({session:W.session,label:s});W.session.messages.push({role:"user",content:k(t,a)}),_=new AbortController,W.session.compaction||(W.session.compaction={}),i.sessionId=W.session.id;const l=await e({config:i,messages:W.session.messages,permissions:y,cwd:m,signal:_.signal,extraTools:q,todoState:S,compaction:W.session.compaction,fileJournal:c});return l?.usage&&(x.prompt+=l.usage.prompt,x.completion+=l.usage.completion),l?.lastPromptTokens&&(W.session.lastPromptTokens=l.lastPromptTokens),_=null,r(W.session),l},N=()=>({...W,session:W.session,extraTools:q,checkpoints:$,print:s=>process.stdout.write(String(s).endsWith("\n")?String(s):String(s)+"\n")});for(d&&(process.stdout.write(o.cyan("\nhuicai> ")+d+"\n"),await J(d));;){let s;try{s=(await h(o.cyan("\nhuicai> "))).trim()}catch{break}if(""!==s){if(v(m,s),"/exit"===s||"/quit"===s)break;if(s.startsWith("!")&&s.length>1){const t=s.slice(1).trim(),{output:e,record:n}=await b(t,m);process.stdout.write(o.gray(e.split("\n").map(s=>"  "+s).join("\n"))+"\n"),W.session.messages.push({role:"user",content:n}),r(W.session);continue}if(s.startsWith("/")){const e=await T(s,N());if("exit"===e.action)break;"clear"===e.action&&(W.session=n({cwd:m,model:i.model,messages:[W.session.messages[0]]}),S.list=[],$.list.length=0,process.stdout.write(o.gray("已开启新会话（旧会话已保存，可用 huicai --resume 恢复）。\n"))),"refresh"===e.action&&E(W.session),"cd"===e.action&&(m=e.cwd,W.cwd=m,y=t({yolo:y.isYolo(),ask:h,cwd:m}),W.permissions=y,p(C),({extraTools:q,clients:C}=await buildExtraTools(i,m)),W.session=n({cwd:m,model:i.model,messages:[{role:"system",content:c(m,{memory:!1!==i.memoryEnabled})}]}),S.list=[],$.list.length=0,i.sessionId=W.session.id,process.stdout.write(o.gray("已切换到 "+m+"（新会话，旧会话已保存）。\n"))),"autofix"===e.action&&await l({command:e.command,maxIters:e.maxIters,cwd:m,runTurnOnce:s=>J(s),emit:s=>process.stdout.write(o.gray(s)+"\n")}),"loop"===e.action&&(O&&(clearInterval(O),O=null),e.stop?process.stdout.write(o.gray("已停止循环。\n")):(process.stdout.write(o.gray(`已开始循环：每 ${e.seconds}s 运行「${e.prompt}」（/loop off 停止）。\n`)),O=setInterval(()=>{_||J(e.prompt)},1e3*e.seconds))),e.prompt&&await J(e.prompt);continue}await J(s)}}O&&clearInterval(O),f.close(),p(C),process.stdout.write(o.gray("\n再见。\n"))}function E(s){const t=i(s.messages);if(0===t)return;process.stdout.write(o.gray(`  已恢复会话「${s.title||""}」（${t} 轮）`)+"\n");const e=[...s.messages].reverse().find(s=>"assistant"===s.role&&s.content);if(e){const s=String(e.content).trim(),t=s.length>400?s.slice(0,400)+"…":s;process.stdout.write(o.gray("  上次回复：")+t.replace(/\n/g,"\n  ")+"\n")}}export async function runOnce({config:s,cwd:o,yolo:n,prompt:a,session:c,persist:l,outputFormat:m,maxTurns:u}){a||(process.stderr.write('用法: huicai -p "你的指令"\n'),process.exit(1));const d="json"===m,g=t({yolo:n,ask:null,cwd:o}),{extraTools:w,clients:f}=await buildExtraTools(s,o),{text:h,images:y}=await j(a,o,s);c.messages.push({role:"user",content:k(h,y)}),c.compaction||(c.compaction={}),s.sessionId=c.id;const x=await e({config:s,messages:c.messages,permissions:g,cwd:o,extraTools:w,maxIters:u,compaction:c.compaction,io:d?{write:()=>{}}:void 0});if(x?.lastPromptTokens&&(c.lastPromptTokens=x.lastPromptTokens),l&&r(c),p(f),d){const o=[...c.messages].reverse().find(s=>"assistant"===s.role&&s.content);process.stdout.write(JSON.stringify({type:"result",is_error:!!x?.error,...x?.error?{error:x.error}:{},result:o?String(o.content):"",usage:{input_tokens:x?.usage?.prompt??0,output_tokens:x?.usage?.completion??0},session_id:c.id,model:s.model,num_turns:i(c.messages)})+"\n")}x?.error&&process.exit(1)}

package/src/scan.js

@@ -1,84 +1 @@
-// 真扫描工具集成（提质）：自动检测并运行本项目适用、且本机已安装的安全/质量扫描器
-// （依赖漏洞 / SAST / 密钥泄漏），把「发现」交给智能体去修——从「发提示词」变「真扫描 + 修复」。
-// 暴露为 security_scan 工具（智能体可在安全审查/提交前自检时调用）+ /scan 命令。
-
-import fs from 'node:fs';
-import path from 'node:path';
-import { execSync } from 'node:child_process';
-import { captureCommand } from './autofix.js';
-
-function has(cwd, file) {
-  try {
-    return fs.existsSync(path.join(cwd, file));
-  } catch {
-    return false;
-  }
-}
-
-/** 命令是否可用（本机已安装）。 */
-function cmdExists(cmd) {
-  try {
-    execSync(process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`, { stdio: 'ignore' });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-/** 检测本项目适用且已安装的扫描器。返回 [{name, command, why}]。 */
-export function detectScanners(cwd) {
-  const s = [];
-  if (has(cwd, 'package.json') && cmdExists('npm')) {
-    s.push({ name: 'npm audit', command: 'npm audit --audit-level=high', why: 'Node 依赖漏洞' });
-  }
-  if ((has(cwd, 'requirements.txt') || has(cwd, 'pyproject.toml')) && cmdExists('pip-audit')) {
-    s.push({ name: 'pip-audit', command: 'pip-audit', why: 'Python 依赖漏洞' });
-  }
-  if (has(cwd, 'go.mod') && cmdExists('govulncheck')) {
-    s.push({ name: 'govulncheck', command: 'govulncheck ./...', why: 'Go 漏洞' });
-  }
-  if (has(cwd, 'Cargo.toml') && cmdExists('cargo-audit')) {
-    s.push({ name: 'cargo audit', command: 'cargo audit', why: 'Rust 依赖漏洞' });
-  }
-  if (cmdExists('semgrep')) {
-    s.push({ name: 'semgrep', command: 'semgrep --config auto --error -q .', why: '代码静态安全(SAST)' });
-  }
-  if (cmdExists('gitleaks')) {
-    s.push({ name: 'gitleaks', command: 'gitleaks detect --no-banner -r /dev/stdout', why: '密钥泄漏' });
-  }
-  if (cmdExists('trivy')) {
-    s.push({ name: 'trivy fs', command: 'trivy fs --scanners vuln,secret -q .', why: '依赖漏洞+密钥' });
-  }
-  return s;
-}
-
-/** 依次运行扫描器（各限时 3 分钟）。返回 [{name, why, code, output}]（code!==0 视为有发现/高危）。 */
-export async function runScanners(cwd, scanners) {
-  const results = [];
-  for (const sc of scanners) {
-    const { code, output } = await captureCommand(cwd, sc.command, 180000);
-    results.push({ name: sc.name, why: sc.why, command: sc.command, code, output });
-  }
-  return results;
-}
-
-/** 构造 security_scan 工具（智能体可调用）：自动检测+运行，返回发现。 */
-export function makeScanTool({ cwd }) {
-  const spec = {
-    type: 'function',
-    function: {
-      name: 'security_scan',
-      description:
-        '自动检测并运行本项目适用的安全/质量扫描器（npm audit / semgrep / trivy / gitleaks / 依赖体检等，仅跑本机已装的），返回发现的问题。'
-        + '用于安全审查或提交前自检；发现问题后你应逐条修复再重扫确认。',
-      parameters: { type: 'object', properties: {}, required: [] },
-    },
-  };
-  const run = async () => {
-    const scanners = detectScanners(cwd);
-    if (!scanners.length) return '未检测到可用的扫描器（可安装 semgrep/trivy/gitleaks，或项目含 package.json 等）。';
-    const results = await runScanners(cwd, scanners);
-    return results.map((r) => `## ${r.name}（${r.code === 0 ? '无高危' : '有发现'}）\n${r.output.slice(0, 4000)}`).join('\n\n');
-  };
-  return { readOnly: true, spec, run };
-}
+import n from"node:fs";import e from"node:path";import{execSync as t}from"node:child_process";import{captureCommand as o}from"./autofix.js";function r(t,o){try{return n.existsSync(e.join(t,o))}catch{return!1}}function a(n){try{return t("win32"===process.platform?`where ${n}`:`command -v ${n}`,{stdio:"ignore"}),!0}catch{return!1}}export function detectScanners(n){const e=[];return r(n,"package.json")&&a("npm")&&e.push({name:"npm audit",command:"npm audit --audit-level=high",why:"Node 依赖漏洞"}),(r(n,"requirements.txt")||r(n,"pyproject.toml"))&&a("pip-audit")&&e.push({name:"pip-audit",command:"pip-audit",why:"Python 依赖漏洞"}),r(n,"go.mod")&&a("govulncheck")&&e.push({name:"govulncheck",command:"govulncheck ./...",why:"Go 漏洞"}),r(n,"Cargo.toml")&&a("cargo-audit")&&e.push({name:"cargo audit",command:"cargo audit",why:"Rust 依赖漏洞"}),a("semgrep")&&e.push({name:"semgrep",command:"semgrep --config auto --error -q .",why:"代码静态安全(SAST)"}),a("gitleaks")&&e.push({name:"gitleaks",command:"gitleaks detect --no-banner -r /dev/stdout",why:"密钥泄漏"}),a("trivy")&&e.push({name:"trivy fs",command:"trivy fs --scanners vuln,secret -q .",why:"依赖漏洞+密钥"}),e}export async function runScanners(n,e){const t=[];for(const r of e){const{code:e,output:a}=await o(n,r.command,18e4);t.push({name:r.name,why:r.why,command:r.command,code:e,output:a})}return t}export function makeScanTool({cwd:n}){return{readOnly:!0,spec:{type:"function",function:{name:"security_scan",description:"自动检测并运行本项目适用的安全/质量扫描器（npm audit / semgrep / trivy / gitleaks / 依赖体检等，仅跑本机已装的），返回发现的问题。用于安全审查或提交前自检；发现问题后你应逐条修复再重扫确认。",parameters:{type:"object",properties:{},required:[]}}},run:async()=>{const e=detectScanners(n);if(!e.length)return"未检测到可用的扫描器（可安装 semgrep/trivy/gitleaks，或项目含 package.json 等）。";return(await runScanners(n,e)).map(n=>`## ${n.name}（${0===n.code?"无高危":"有发现"}）\n${n.output.slice(0,4e3)}`).join("\n\n")}}}