@kenhkl/agent-moss 0.10.4 → 0.10.5

package/dist/static/index.html

@@ -247,6 +247,7 @@ body {
     <div class="ag-tab" data-page="l1">L1 规则</div>
     <div class="ag-tab" data-page="l2">L2 规则</div>
     <div class="ag-tab" data-page="l3">L3 Skills</div>
+    <div class="ag-tab" data-page="agents">Agent 定制</div>
     <div class="ag-tab" data-page="token">Token</div>
     <div class="ag-tab" data-page="settings">设置</div>
     <div class="ag-tab-spacer"></div>
@@ -257,6 +258,7 @@ body {
   <div class="ag-panel hidden" id="page-l1"></div>
   <div class="ag-panel hidden" id="page-l2"></div>
   <div class="ag-panel hidden" id="page-l3"></div>
+  <div class="ag-panel hidden" id="page-agents"></div>
   <div class="ag-panel hidden" id="page-token"></div>
   <div class="ag-panel hidden" id="page-settings"></div>
 </div>
@@ -416,10 +418,11 @@ function closeModal() {
 async function refreshConfig() {
   state.config = await api('config');
   state.envOverrides = await api('env-overrides');
+  state.agentRules = await api('agents');
   renderCurrent();
 }
 function renderCurrent() {
-  const pages = ['overview','search','l1','l2','l3','token','settings'];
+  const pages = ['overview','search','l1','l2','l3','agents','token','settings'];
   pages.forEach(p => {
     const panel = el('page-' + p);
     if (panel) panel.classList.toggle('hidden', p !== state.currentPage);
@@ -649,6 +652,94 @@ async function deleteRule(layer, cat, id) {
   } catch (e) { showToast('删除失败: ' + e.message, 'error'); }
 }
 
+// ===== Agent 定制规则页 =====
+const AGENT_CATEGORY_NAMES = {
+  builtin_safe_action_types: '安全操作白名单（跳 L2+L3）',
+  builtin_safe_skills: '信任内置 Skill（跳 L2+L3）',
+  extra_command_patterns: '专属危险命令正则（L1 追加）',
+  extra_injection_keywords: '专属注入关键词（L1 追加）',
+  extra_sensitive_paths: '专属敏感路径（L1 追加）',
+};
+function render_agents() {
+  const agents = (state.agentRules && state.agentRules.agents) || {};
+  const ids = Object.keys(agents);
+  if (!ids.length) {
+    el('page-agents').innerHTML = '<div class="ag-card"><div class="ag-empty">无 agent 定制规则</div></div>';
+    return;
+  }
+  let html = '';
+  for (const agentId of ids) {
+    const cats = agents[agentId] || {};
+    html += `<div class="ag-card"><div class="ag-section-title">Agent: ${escapeHtml(agentId)}</div>`;
+    const ordered = [
+      ...Object.keys(AGENT_CATEGORY_NAMES).filter(k => k in cats).map(k => [k, cats[k]]),
+      ...Object.entries(cats).filter(([k]) => !(k in AGENT_CATEGORY_NAMES)),
+    ];
+    for (const [catName, catData] of ordered) {
+      const rules = catData.rules || [];
+      const catEnabled = catData.category_enabled !== false;
+      const expanded = expandedCats.has(`agents-${agentId}-${catName}`);
+      const enCount = rules.filter(r => r.enabled).length;
+      html += `<div class="ag-cat-header" onclick="toggleExpand('agents-${agentId}-${catName}')">
+        <div class="ag-cat-name">${escapeHtml(AGENT_CATEGORY_NAMES[catName] || catName)} <span class="ag-cat-count">${enCount}/${rules.length} 启用</span></div>
+        <div class="ag-cat-controls"><div onclick="event.stopPropagation();toggleAgentCategory('${agentId}','${catName}')">${toggle(catEnabled, false, '')}</div><span class="ag-expand-icon ${expanded ? 'open' : ''}">▼</span></div>
+      </div>
+      <div class="ag-rule-list" id="list-agents-${agentId}-${catName}" style="display:${expanded ? '' : 'none'}">`;
+      if (!rules.length) {
+        html += '<div class="ag-empty">无规则</div>';
+      } else {
+        for (const r of rules) html += renderAgentRuleItem(agentId, catName, r);
+      }
+      html += `<div style="padding:8px 0"><button class="ag-btn ag-btn-ghost" onclick="showAddAgentRuleModal('${agentId}','${catName}')">＋ 新增</button></div>`;
+      html += '</div>';
+    }
+    html += '</div>';
+  }
+  el('page-agents').innerHTML = html;
+}
+function renderAgentRuleItem(agentId, catName, r) {
+  const label = r.value || r.pattern || r.keyword || r.path || r.id || JSON.stringify(r).slice(0, 60);
+  const sub = r.reason || r.risk_level || r.lang || r.desc || r.deny_mode || '';
+  const removed = r.source_removed ? '<span class="ag-overridden-hint" title="源码已移除该规则">已移除</span>' : '';
+  const delBtn = r.builtin ? '' : `<button class="ag-btn ag-btn-ghost ag-btn-sm" onclick="deleteAgentRule('${agentId}','${catName}',${JSON.stringify(r).replace(/"/g,'&quot;')})">删除</button>`;
+  return `<div class="ag-rule-item">
+    <div class="ag-rule-name">${escapeHtml(label)} ${removed}${sub ? `<span class="ag-rule-sub">— ${escapeHtml(sub)}</span>` : ''}</div>
+    <div class="ag-rule-controls">${toggle(r.enabled, false, `toggleAgentRule('${agentId}','${catName}',${JSON.stringify(r).replace(/"/g,'&quot;')},${!r.enabled})`)}${delBtn}</div>
+  </div>`;
+}
+async function toggleAgentRule(agentId, cat, r, en) {
+  const fp = { value: r.value, pattern: r.pattern, keyword: r.keyword, path: r.path };
+  try {
+    state.agentRules = await apiPut('agents/rules/enabled', { agent_id: agentId, category: cat, ...fp, enabled: en });
+    render_agents();
+  } catch (e) { showToast(String(e), 'error'); }
+}
+async function toggleAgentCategory(agentId, cat) {
+  const cats = (state.agentRules.agents || {})[agentId] || {};
+  const en = cats[cat]?.category_enabled === false;
+  try {
+    state.agentRules = await apiPut('agents/categories/enabled', { agent_id: agentId, category: cat, enabled: en });
+    render_agents();
+  } catch (e) { showToast(String(e), 'error'); }
+}
+async function deleteAgentRule(agentId, cat, r) {
+  const fp = { value: r.value, pattern: r.pattern, keyword: r.keyword, path: r.path };
+  if (!confirm(`删除规则 ${r.value || r.pattern || r.keyword || r.path || ''}?`)) return;
+  try {
+    state.agentRules = await apiDelete('agents/rules', { agent_id: agentId, category: cat, ...fp });
+    render_agents();
+  } catch (e) { showToast(String(e), 'error'); }
+}
+function showAddAgentRuleModal(agentId, cat) {
+  const isValueCat = cat === 'builtin_safe_action_types' || cat === 'builtin_safe_skills';
+  const body = isValueCat
+    ? `<input class="ag-input" id="ar-value" placeholder="值（前缀尾随 - 或精确工具名）" style="width:100%">`
+    : `<input class="ag-input" id="ar-pattern" placeholder="正则/关键词/路径" style="width:100%;margin-bottom:8px">
+       <input class="ag-input" id="ar-risk_level" placeholder="risk_level (high/medium/...)" style="width:100%">`;
+  openModal(`新增 ${agentId} / ${cat} 规则`, body, true);
+  currentModalAction = { type: 'agent_rule', agentId, cat, isValueCat };
+}
+
 // ===== L3 Skills 页 =====
 function render_l3() {
   const l3 = state.config.L3_skills || {};
@@ -1101,6 +1192,18 @@ async function submitModal() {
         content: document.getElementById('input-skill-content')?.value,
       });
       showToast('Skill 已添加');
+    } else if (currentModalAction.type === 'agent_rule') {
+      const { agentId, cat, isValueCat } = currentModalAction;
+      const payload = { agent_id: agentId, category: cat };
+      if (isValueCat) {
+        payload.value = el('ar-value').value.trim();
+        if (!payload.value) { showToast('值不能为空', 'error'); return; }
+      } else {
+        payload.pattern = el('ar-pattern').value.trim();
+        payload.risk_level = el('ar-risk_level').value.trim() || undefined;
+      }
+      state.agentRules = await apiPost('agents/rules', payload);
+      showToast('Agent 规则已添加');
     }
     renderCurrent();
     closeModal();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kenhkl/agent-moss",
-  "version": "0.10.4",
+  "version": "0.10.5",
   "description": "Multi-layer security analysis engine for AI agents (TypeScript)",
   "type": "module",
   "main": "dist/server.js",