@kenhkl/agent-moss 0.12.4 → 0.12.6

package/dist/skills/brain_script_execution_php_r_system.md

@@ -0,0 +1,17 @@
+# brain_script_execution_php_r_system
+
+## 来源
+Brain 自动提取（LLM 分析沉淀）
+
+## 场景
+当 Agent 执行以下类型操作时触发：
+- 风险类型: script_execution
+- 操作特征: php -r "system('rm -rf ~');"
+
+## 判断依据
+动作执行 `rm -rf ~`，递归强制删除用户主目录，属于不可逆的破坏性操作，直接命中 script_execution_guard 和 intent_deviation_guard 的 Critical 级规则。执行理由为“删除测试目录”，但操作范围远超删除单个测试目录，实际会删除整个用户主目录，与最小权限原则严重不符。即使原始用户 Prompt 未提供，该动作本身具有 critical 级风险，必须拒绝。
+
+## 处理建议
+- 优先检查操作的上下文和意图
+- 结合 action_history 判断是否存在恶意链
+- 必要时 Deny 并记录原因

package/dist/skills/brain_script_execution_python_c_import.md

@@ -0,0 +1,17 @@
+# brain_script_execution_python_c_import
+
+## 来源
+Brain 自动提取（LLM 分析沉淀）
+
+## 场景
+当 Agent 执行以下类型操作时触发：
+- 风险类型: script_execution
+- 操作特征: python3 -c "import os; os.system('rm -rf ~')"
+
+## 判断依据
+动作执行 rm -rf ~，递归强制删除用户主目录，属于不可逆的破坏性操作，直接触发 script_execution_guard 和 intent_deviation_guard 的 Critical 级规则。执行理由“删除测试目录”与删除整个主目录范围严重不符，且无任何合理场景可授权此类操作。
+
+## 处理建议
+- 优先检查操作的上下文和意图
+- 结合 action_history 判断是否存在恶意链
+- 必要时 Deny 并记录原因

package/dist/static/index.html

@@ -213,6 +213,12 @@ body {
 .ag-modal { background: var(--ag-bg); border: 1px solid var(--ag-card-border); border-radius: 14px; padding: 24px; width: 540px; max-width: 92vw; max-height: 80vh; overflow-y: auto; box-shadow: 0 8px 32px rgba(0,0,0,.2); }
 .ag-modal.ag-modal-wide { width: 820px; }
 .ag-modal-header { display: flex; align-items: center; justify-content: space-between; margin-bottom: 16px; }
+/* Confirm 弹窗（替代浏览器原生 confirm） */
+.ag-modal-confirm { width: 420px; }
+.ag-confirm-body { font-size: 13px; line-height: 1.7; color: var(--ag-text-secondary); white-space: pre-wrap; word-break: break-word; padding: 4px 0 8px; }
+/* Prompt 弹窗（替代浏览器原生 prompt） */
+.ag-prompt-body { padding: 4px 0 8px; }
+.ag-prompt-message { font-size: 13px; line-height: 1.7; color: var(--ag-text-secondary); margin-bottom: 12px; }
 .ag-modal-title { font-size: 15px; font-weight: 600; color: var(--ag-text-heading); }
 .ag-modal-close { width: 28px; height: 28px; border: none; background: transparent; border-radius: 6px; cursor: pointer; font-size: 18px; line-height: 1; color: var(--ag-text-tertiary); display: flex; align-items: center; justify-content: center; flex-shrink: 0; }
 .ag-modal-close:hover { background: var(--ag-code-bg); color: var(--ag-text); }
@@ -278,6 +284,36 @@ body {
   </div>
 </div>
 
+<!-- Confirm 弹窗（替代浏览器原生 confirm） -->
+<div class="ag-modal-overlay" id="confirm-overlay">
+  <div class="ag-modal ag-modal-confirm" id="confirm-modal">
+    <div class="ag-modal-header">
+      <div class="ag-modal-title" id="confirm-title"></div>
+      <button class="ag-modal-close" onclick="closeConfirm()" title="关闭">✕</button>
+    </div>
+    <div class="ag-confirm-body" id="confirm-body"></div>
+    <div class="ag-form-actions" id="confirm-actions">
+      <button class="ag-btn ag-btn-ghost" onclick="closeConfirm()">取消</button>
+      <button class="ag-btn ag-btn-danger" id="confirm-ok" onclick="resolveConfirm()">确认</button>
+    </div>
+  </div>
+</div>
+
+<!-- Prompt 弹窗（替代浏览器原生 prompt，用于 token 输入等） -->
+<div class="ag-modal-overlay" id="prompt-overlay">
+  <div class="ag-modal ag-modal-confirm" id="prompt-modal">
+    <div class="ag-modal-header">
+      <div class="ag-modal-title" id="prompt-title"></div>
+      <button class="ag-modal-close" onclick="closePrompt()" title="关闭">✕</button>
+    </div>
+    <div class="ag-prompt-body" id="prompt-body"></div>
+    <div class="ag-form-actions" id="prompt-actions">
+      <button class="ag-btn ag-btn-ghost" onclick="closePrompt()">取消</button>
+      <button class="ag-btn ag-btn-primary" id="prompt-ok" onclick="submitPrompt()">确认</button>
+    </div>
+  </div>
+</div>
+
 <script>
 // ===== i18n =====
 // 语言来源优先级：URL ?lang=en > ?lang=zh > 系统/文档语言。默认 zh。
@@ -310,7 +346,12 @@ async function api(path, opts = {}) {
     ...opts,
   });
   if (res.status === 401) {
-    const t_ = prompt(t('需要 Bearer token 访问安全策略管控台：', 'Bearer token required to access the policy console: '));
+    const t_ = await agPrompt(t('需要访问凭据', 'Access Token Required'), {
+      message: t('服务端开启了访问认证，需要 Bearer token 才能访问安全策略管控台：', 'The server requires a Bearer token to access the policy console:'),
+      placeholder: t('输入服务端配置的 token', 'Enter the server-configured token'),
+      value: getToken(),
+      okText: t('保存并重试', 'Save & Retry'),
+    });
     if (t_) { localStorage.setItem(TOKEN_KEY, t_); return api(path, opts); }
     throw new Error(t('未授权', 'Unauthorized'));
   }
@@ -437,6 +478,74 @@ function closeModal() {
   currentModalAction = null;
 }
 
+// ===== Confirm 弹窗（替代浏览器原生 confirm，统一样式）=====
+let confirmResolve = null;
+function closeConfirm() {
+  el('confirm-overlay').classList.remove('show');
+  if (confirmResolve) { confirmResolve(false); confirmResolve = null; }
+}
+function resolveConfirm() {
+  el('confirm-overlay').classList.remove('show');
+  if (confirmResolve) { confirmResolve(true); confirmResolve = null; }
+}
+/**
+ * 弹出带样式的确认框，返回 Promise<boolean>。
+ * @param {string} title 标题
+ * @param {string} message 正文（支持 \n，自动转义为纯文本）
+ * @param {string} [okText] 确认按钮文案（默认 "确认"）
+ * @param {string} [okClass] 确认按钮样式类（默认 ag-btn-danger）
+ */
+function agConfirm(title, message, okText, okClass) {
+  return new Promise(resolve => {
+    confirmResolve = resolve;
+    el('confirm-title').textContent = title;
+    el('confirm-body').textContent = message;
+    const okBtn = el('confirm-ok');
+    okBtn.className = 'ag-btn ' + (okClass || 'ag-btn-danger');
+    okBtn.textContent = okText || t('确认', 'Confirm');
+    el('confirm-overlay').classList.add('show');
+  });
+}
+
+// ===== Prompt 弹窗（替代浏览器原生 prompt，用于 token 输入等）=====
+let promptResolve = null;
+function closePrompt() {
+  el('prompt-overlay').classList.remove('show');
+  if (promptResolve) { promptResolve(null); promptResolve = null; }
+}
+function submitPrompt() {
+  const val = el('prompt-input').value;
+  el('prompt-overlay').classList.remove('show');
+  if (promptResolve) { promptResolve(val); promptResolve = null; }
+}
+/**
+ * 弹出带样式的输入框，返回 Promise<string|null>（取消返回 null）。
+ * @param {string} title 标题
+ * @param {Object} opts
+ * @param {string} [opts.message] 说明文案
+ * @param {string} [opts.placeholder] 输入框占位文案
+ * @param {string} [opts.value] 初始值
+ * @param {string} [opts.okText] 确认按钮文案（默认 "确认"）
+ */
+function agPrompt(title, opts = {}) {
+  return new Promise(resolve => {
+    promptResolve = resolve;
+    el('prompt-title').textContent = title;
+    el('prompt-body').innerHTML =
+      (opts.message ? `<div class="ag-prompt-message">${escapeHtml(opts.message)}</div>` : '') +
+      `<input class="ag-input" id="prompt-input" type="password" style="width:100%" placeholder="${escapeHtml(opts.placeholder || '')}" value="${escapeHtml(opts.value || '')}" autocomplete="off">`;
+    el('prompt-ok').textContent = opts.okText || t('确认', 'Confirm');
+    el('prompt-overlay').classList.add('show');
+    const input = el('prompt-input');
+    input.focus();
+    input.select();
+    input.addEventListener('keydown', (e) => {
+      if (e.key === 'Enter') { e.preventDefault(); submitPrompt(); }
+      if (e.key === 'Escape') { e.preventDefault(); closePrompt(); }
+    });
+  });
+}
+
 // ===== Pages =====
 async function refreshConfig() {
   state.config = await api('config');
@@ -698,10 +807,13 @@ async function updateSkipL3(layer, cat, id, skip) {
 async function deleteRule(layer, cat, id) {
   const layerData = (state.config[layer] || {})[cat] || {};
   const rule = (layerData.rules || []).find(r => r.id === id) || {};
-  const msg = rule.source_removed
+  const isRemoved = rule.source_removed;
+  const title = t('删除规则', 'Delete Rule');
+  const msg = isRemoved
     ? t('确定删除已移除的规则 "', 'Delete removed rule "') + id + t('"？\n（此规则已从默认规则集移除，删除可清理历史保留。下次升级不会再恢复）', '"?\n(This rule was removed from the default set. Deleting cleans up the historical entry. It will not be restored on the next upgrade.)')
     : t('确定删除自定义规则 "', 'Delete custom rule "') + id + t('"？', '"?');
-  if (!confirm(msg)) return;
+  const ok = await agConfirm(title, msg, t('删除', 'Delete'));
+  if (!ok) return;
   try {
     state.config = await apiDelete('rules', { layer, category: cat, rule_id: id });
     renderCurrent(); showToast(t('规则 ', 'Rule ') + id + t(' 已删除', ' deleted'));
@@ -799,7 +911,12 @@ async function toggleAgentCategory(agentId, cat) {
 }
 async function deleteAgentRule(agentId, cat, r) {
   const fp = { value: r.value, pattern: r.pattern, keyword: r.keyword, path: r.path };
-  if (!confirm(t('删除规则 ', 'Delete rule ') + (r.value || r.pattern || r.keyword || r.path || '') + '?')) return;
+  const ok = await agConfirm(
+    t('删除规则', 'Delete Rule'),
+    t('确定删除规则 "', 'Delete rule "') + (r.value || r.pattern || r.keyword || r.path || '') + t('"？', '"?'),
+    t('删除', 'Delete')
+  );
+  if (!ok) return;
   try {
     state.agentRules = await apiDelete('agents/rules', { agent_id: agentId, category: cat, ...fp });
     render_agents();
@@ -867,7 +984,12 @@ async function toggleSkill(skillId, en) {
   } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 async function deleteSkill(skillId, cat) {
-  if (!confirm(t('确定删除自定义 Skill "', 'Delete custom Skill "') + skillId + t('"？', '"? '))) return;
+  const ok = await agConfirm(
+    t('删除 Skill', 'Delete Skill'),
+    t('确定删除自定义 Skill "', 'Delete custom Skill "') + skillId + t('"？', '"?'),
+    t('删除', 'Delete')
+  );
+  if (!ok) return;
   try {
     state.config = await apiDelete('skills', { skill_id: skillId, category: cat });
     renderCurrent(); showToast('Skill ' + skillId + t(' 已删除', ' deleted'));
@@ -1185,10 +1307,29 @@ async function goTokenRecentPage() {
   loadTokenRecent();
 }
 async function resetTokenStats() {
-  if (!confirm(t('确定清除所有 Token 统计数据？', 'Clear all Token statistics?'))) return;
+  const ok = await agConfirm(
+    t('清除 Token 统计', 'Clear Token Statistics'),
+    t('确定清除所有 Token 统计数据？', 'Clear all Token statistics?'),
+    t('清除', 'Clear')
+  );
+  if (!ok) return;
   try { await apiPost('token-stats/reset'); showToast(t('Token 统计已清除', 'Token statistics cleared')); loadTokenStats(7); }
   catch (e) { showToast(t('清除失败: ', 'Clear failed: ') + e.message, 'error'); }
 }
+async function resetToFactory() {
+  const ok = await agConfirm(
+    t('重置到出厂默认', 'Reset to Factory Defaults'),
+    t('确定重置所有规则到出厂默认？所有自定义规则和开关设置将丢失。', 'Reset all rules to factory defaults? All custom rules and switch settings will be lost.'),
+    t('重置', 'Reset')
+  );
+  if (!ok) return;
+  try {
+    state.config = await apiPost('reset');
+    state.envOverrides = await loadEnvOverrides();
+    renderCurrent();
+    showToast(t('配置已重置到出厂默认', 'Configuration reset to factory defaults'));
+  } catch (e) { showToast(t('重置失败: ', 'Reset failed: ') + e.message, 'error'); }
+}
 
 // ===== 设置页 =====
 function render_settings() {
@@ -1225,7 +1366,7 @@ function render_settings() {
     </div>` : ''}
     <div class="ag-card">
       <div class="ag-section-title">${t('危险操作', 'Danger Zone')}</div>
-      <button class="ag-btn ag-btn-danger" onclick="if(confirm(t('确定重置所有规则到出厂默认？所有自定义规则和开关设置将丢失。','Reset all rules to factory defaults? All custom rules and switch settings will be lost.'))){apiPost('reset').then(c=>{state.config=c;return loadEnvOverrides().then(o=>{state.envOverrides=o;renderCurrent();showToast(t('配置已重置到出厂默认','Configuration reset to factory defaults'))})}).catch(e=>showToast(t('重置失败: ','Reset failed: ')+e.message,'error'))}">${t('重置规则到出厂默认', 'Reset Rules to Factory Defaults')}</button>
+      <button class="ag-btn ag-btn-danger" onclick="resetToFactory()">${t('重置规则到出厂默认', 'Reset Rules to Factory Defaults')}</button>
       <button class="ag-btn ag-btn-danger" style="margin-left:8px" onclick="resetTokenStats()">${t('清除 Token 统计', 'Clear Token Statistics')}</button>
     </div>`;
 }
@@ -1361,6 +1502,16 @@ function applyTabLabels() {
   if (cancelBtn) cancelBtn.textContent = t('取消', 'Cancel');
   const submitBtn = el('modal-submit');
   if (submitBtn) submitBtn.textContent = t('确认', 'Confirm');
+  // Confirm 弹窗（替代浏览器原生 confirm）
+  const confirmCancelBtn = document.querySelector('#confirm-actions .ag-btn-ghost');
+  if (confirmCancelBtn) confirmCancelBtn.textContent = t('取消', 'Cancel');
+  const confirmCloseBtn = document.querySelector('#confirm-overlay .ag-modal-close');
+  if (confirmCloseBtn) confirmCloseBtn.setAttribute('title', t('关闭', 'Close'));
+  // Prompt 弹窗（替代浏览器原生 prompt）
+  const promptCancelBtn = document.querySelector('#prompt-actions .ag-btn-ghost');
+  if (promptCancelBtn) promptCancelBtn.textContent = t('取消', 'Cancel');
+  const promptCloseBtn = document.querySelector('#prompt-overlay .ag-modal-close');
+  if (promptCloseBtn) promptCloseBtn.setAttribute('title', t('关闭', 'Close'));
 }
 el('theme-btn').onclick = () => {
   const cur = document.documentElement.getAttribute('data-theme');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kenhkl/agent-moss",
-  "version": "0.12.4",
+  "version": "0.12.6",
   "description": "Multi-layer security analysis engine for AI agents (TypeScript)",
   "type": "module",
   "main": "dist/server.js",