@kenhkl/agent-moss 0.12.5 → 0.12.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +644 -18
- package/dist/cli.js.map +1 -1
- package/dist/engine/coordinator.d.ts +3 -1
- package/dist/engine/coordinator.js +603 -2
- package/dist/engine/coordinator.js.map +1 -1
- package/dist/rules/l1_rules.json +21 -0
- package/dist/server.js +612 -17
- package/dist/server.js.map +1 -1
- package/dist/static/index.html +158 -7
- package/package.json +1 -1
package/dist/rules/l1_rules.json
CHANGED
|
@@ -822,6 +822,27 @@
|
|
|
822
822
|
"desc": "环境变量/凭据配置文件",
|
|
823
823
|
"deny_mode": "deny_both",
|
|
824
824
|
"scope": "credential"
|
|
825
|
+
},
|
|
826
|
+
{
|
|
827
|
+
"path": ".config/agentmoss/config.json",
|
|
828
|
+
"risk_level": "critical",
|
|
829
|
+
"desc": "AgentMoss 配置中的 LLM api_key（凭据），读=泄露，写=篡改，均不可",
|
|
830
|
+
"deny_mode": "deny_both",
|
|
831
|
+
"scope": "home"
|
|
832
|
+
},
|
|
833
|
+
{
|
|
834
|
+
"path": ".config/agentmoss",
|
|
835
|
+
"risk_level": "high",
|
|
836
|
+
"desc": "AgentMoss 自身配置目录（runtime 规则/token 用量），agent 可读但不可写（防篡改关闭安全检测）",
|
|
837
|
+
"deny_mode": "deny_write",
|
|
838
|
+
"scope": "home"
|
|
839
|
+
},
|
|
840
|
+
{
|
|
841
|
+
"path": ".agentmoss/brain",
|
|
842
|
+
"risk_level": "high",
|
|
843
|
+
"desc": "AgentMoss Brain 数据（rules.json/skill_meta.json 自学习成果），agent 可读自查但不可写（防投毒）",
|
|
844
|
+
"deny_mode": "deny_write",
|
|
845
|
+
"scope": "home"
|
|
825
846
|
}
|
|
826
847
|
]
|
|
827
848
|
}
|