@kenhkl/agent-moss 0.12.6 → 0.12.8

package/dist/static/index.html

@@ -254,6 +254,7 @@ body {
     <div class="ag-tab" data-page="l2">L2 规则</div>
     <div class="ag-tab" data-page="l3">L3 Skills</div>
     <div class="ag-tab" data-page="agents">Agent 定制</div>
+    <div class="ag-tab" data-page="scenarios">场景定制</div>
     <div class="ag-tab" data-page="token">Token</div>
     <div class="ag-tab" data-page="settings">设置</div>
     <div class="ag-tab-spacer"></div>
@@ -265,6 +266,7 @@ body {
   <div class="ag-panel hidden" id="page-l2"></div>
   <div class="ag-panel hidden" id="page-l3"></div>
   <div class="ag-panel hidden" id="page-agents"></div>
+  <div class="ag-panel hidden" id="page-scenarios"></div>
   <div class="ag-panel hidden" id="page-token"></div>
   <div class="ag-panel hidden" id="page-settings"></div>
 </div>
@@ -551,6 +553,8 @@ async function refreshConfig() {
   state.config = await api('config');
   state.envOverrides = await loadEnvOverrides();
   state.agentRules = await api('agents');
+  // 场景定制规则：后端按 AGENT_MOSS_SCENARIO env 过滤（无 env 返回空 → 场景页显示"未启用"提示）
+  state.scenarioRules = await api('scenarios');
   // 探测当前进程的 instance（AGENT_MOSS_INSTANCE，如 opendesk/xiaoo）。
   // 有 instance 时 Agent Rules 页只显示当前 agent 的定制规则，避免出现别的 agent 的规则造成困惑；
   // 无 instance（本地独立起服务/非 agent 调用）则显示全部。
@@ -573,7 +577,7 @@ async function refreshConfig() {
   renderCurrent();
 }
 function renderCurrent() {
-  const pages = ['overview','search','l1','l2','l3','agents','token','settings'];
+  const pages = ['overview','search','l1','l2','l3','agents','scenarios','token','settings'];
   pages.forEach(p => {
     const panel = el('page-' + p);
     if (panel) panel.classList.toggle('hidden', p !== state.currentPage);
@@ -932,6 +936,112 @@ function showAddAgentRuleModal(agentId, cat) {
   currentModalAction = { type: 'agent_rule', agentId, cat, isValueCat };
 }
 
+// ===== 场景定制规则页 =====
+// 场景规则（agent_moss/scenarios/<id>/rules.json）与 agent 规则同构（都是
+// AgentExtensions 结构），复用 agent 卡片的类别模板/开关/增删交互；唯一区别是
+// 启用由 AGENT_MOSS_SCENARIO env 决定（后端 /api/scenarios 已过滤，无 env 返回空）。
+function render_scenarios() {
+  const resp = state.scenarioRules || {};
+  const scenarios = resp.scenarios || {};
+  const enabled = resp.enabled || [];
+  const noEnv = enabled.length === 0;
+  if (noEnv) {
+    el('page-scenarios').innerHTML = `<div class="ag-card"><div class="ag-empty">${t(
+      '未启用任何场景（未设置 AGENT_MOSS_SCENARIO 环境变量）。设置后此处显示场景定制规则并可在线编辑。',
+      'No scenario enabled (AGENT_MOSS_SCENARIO env not set). Set it to view and edit scenario rules here.'
+    )}</div></div>`;
+    return;
+  }
+  if (!Object.keys(scenarios).length) {
+    el('page-scenarios').innerHTML = `<div class="ag-card"><div class="ag-empty">${t(
+      '已设置 AGENT_MOSS_SCENARIO，但没有对应的场景规则（检查 agent_moss/scenarios/ 目录）。',
+      'AGENT_MOSS_SCENARIO is set but no matching scenario rules found (check agent_moss/scenarios/).'
+    )}</div></div>`;
+    return;
+  }
+  let html = '';
+  for (const scenarioId of Object.keys(scenarios)) {
+    const cats = scenarios[scenarioId] || {};
+    html += `<div class="ag-card"><div class="ag-section-title">${t('场景', 'Scenario')}: ${escapeHtml(scenarioId)}</div>`;
+    const ordered = [
+      ...Object.keys(AGENT_CATEGORY_NAMES).filter(k => k in cats).map(k => [k, cats[k]]),
+      ...Object.entries(cats).filter(([k]) => !(k in AGENT_CATEGORY_NAMES)),
+    ];
+    for (const [catName, catData] of ordered) {
+      const rules = catData.rules || [];
+      const catEnabled = catData.category_enabled !== false;
+      const expanded = expandedCats.has(`scenarios-${scenarioId}-${catName}`);
+      const enCount = catEnabled ? rules.filter(r => r.enabled).length : 0;
+      html += `<div class="ag-cat-header" onclick="toggleExpand('scenarios-${scenarioId}-${catName}')">
+        <div class="ag-cat-name">${escapeHtml(AGENT_CATEGORY_NAMES[catName] || catName)} <span class="ag-cat-count">${enCount}/${rules.length} ${t('启用', 'enabled')}</span></div>
+        <div class="ag-cat-controls"><div onclick="event.stopPropagation();toggleScenarioCategory('${scenarioId}','${catName}')">${toggle(catEnabled, false, '')}</div><span class="ag-expand-icon ${expanded ? 'open' : ''}">▼</span></div>
+      </div>
+      <div class="ag-rule-list" id="list-scenarios-${scenarioId}-${catName}" style="display:${expanded ? '' : 'none'}">`;
+      if (!rules.length) {
+        html += `<div class="ag-empty">${t('无规则', 'No rules')}</div>`;
+      } else {
+        for (const r of rules) html += renderScenarioRuleItem(scenarioId, catName, r);
+      }
+      html += `<div style="padding:8px 0"><button class="ag-btn ag-btn-ghost" onclick="showAddScenarioRuleModal('${scenarioId}','${catName}')">＋ ${t('新增', 'Add')}</button></div>`;
+      html += '</div>';
+    }
+    html += '</div>';
+  }
+  el('page-scenarios').innerHTML = html;
+}
+function renderScenarioRuleItem(scenarioId, catName, r) {
+  const patternDisplay = r.value || r.pattern || r.keyword || r.path || r.id || JSON.stringify(r).slice(0, 60);
+  const reasonDisplay = r.reason || r.desc || r.lang || '';
+  const tagLine = (r.builtin !== false ? `<span class="ag-badge ag-badge-builtin" title="${t('源码内置规则', 'Built-in source rule')}">${t('内置', 'Built-in')}</span>` : `<span class="ag-badge ag-badge-custom">${t('自定义', 'Custom')}</span>`)
+    + (r.source_removed ? `<span class="ag-badge ag-badge-removed" title="${t('此规则已从默认规则集移除，仅作历史保留', 'This rule was removed from the default set and is kept as history')}">${t('已移除', 'Removed')}</span>` : '')
+    + (r.pattern ? riskBadge(r.risk_level) + (r.risk_type ? riskTypeBadge(r.risk_type) : '') : '');
+  const patternLabel = r.path ? t('敏感路径', 'Sensitive Path') : (r.keyword ? t('触发关键词', 'Trigger Keywords') : t('规则', 'Rule'));
+  const tooltip = `${patternLabel}: ${patternDisplay}\n${t('原因', 'Reason')}: ${reasonDisplay || t('(无)', '(none)')}`;
+  const delBtn = r.builtin ? '' : `<button class="ag-btn ag-btn-ghost ag-btn-sm" onclick="deleteScenarioRule('${scenarioId}','${catName}',${JSON.stringify(r).replace(/"/g,'&quot;')})">${t('删除', 'Delete')}</button>`;
+  return `<div class="ag-rule-item" title="${escapeHtml(tooltip)}">
+    <div class="ag-rule-body">
+      <div class="ag-rule-tags">${tagLine}</div>
+      <div class="ag-rule-pattern"><span class="ag-rule-field-label">${patternLabel}:</span> ${escapeHtml(patternDisplay)}</div>
+      ${reasonDisplay ? `<div class="ag-rule-reason"><span class="ag-rule-field-label">${t('原因', 'Reason')}:</span> ${escapeHtml(reasonDisplay)}</div>` : ''}
+    </div>
+    <div class="ag-rule-controls">${toggle(r.enabled, false, `toggleScenarioRule('${scenarioId}','${catName}',${JSON.stringify(r).replace(/"/g,'&quot;')},${!r.enabled})`)}${delBtn}</div>
+  </div>`;
+}
+async function toggleScenarioRule(scenarioId, cat, r, en) {
+  const fp = { value: r.value, pattern: r.pattern, keyword: r.keyword, path: r.path };
+  try {
+    state.scenarioRules = await apiPut('scenarios/rules/enabled', { scenario_id: scenarioId, category: cat, ...fp, enabled: en });
+    render_scenarios();
+  } catch (e) { showToast(String(e), 'error'); }
+}
+async function toggleScenarioCategory(scenarioId, cat) {
+  const cats = (state.scenarioRules?.scenarios || {})[scenarioId] || {};
+  const en = cats[cat]?.category_enabled === false;
+  try {
+    state.scenarioRules = await apiPut('scenarios/categories/enabled', { scenario_id: scenarioId, category: cat, enabled: en });
+    render_scenarios();
+  } catch (e) { showToast(String(e), 'error'); }
+}
+async function deleteScenarioRule(scenarioId, cat, r) {
+  const fp = { value: r.value, pattern: r.pattern, keyword: r.keyword, path: r.path };
+  const ok = await agConfirm(
+    t('删除规则', 'Delete Rule'),
+    t('确定删除规则 "', 'Delete rule "') + (r.value || r.pattern || r.keyword || r.path || '') + t('"？', '"?'),
+    t('删除', 'Delete')
+  );
+  if (!ok) return;
+  try {
+    state.scenarioRules = await apiDelete('scenarios/rules', { scenario_id: scenarioId, category: cat, ...fp });
+    render_scenarios();
+  } catch (e) { showToast(String(e), 'error'); }
+}
+function showAddScenarioRuleModal(scenarioId, cat) {
+  const body = `<input class="ag-input" id="ar-pattern" placeholder="${t('正则/关键词/路径', 'Regex/keyword/path')}" style="width:100%;margin-bottom:8px">
+     <input class="ag-input" id="ar-risk_level" placeholder="risk_level (high/medium/...)" style="width:100%">`;
+  openModal(t('新增场景规则 ', 'Add scenario rule ') + scenarioId + ' / ' + cat, body, true);
+  currentModalAction = { type: 'scenario_rule', scenarioId, cat };
+}
+
 // ===== L3 Skills 页 =====
 function render_l3() {
   const l3 = state.config.L3_skills || {};
@@ -1464,6 +1574,14 @@ async function submitModal() {
       }
       state.agentRules = await apiPost('agents/rules', payload);
       showToast(t('Agent 规则已添加', 'Agent rule added'));
+    } else if (currentModalAction.type === 'scenario_rule') {
+      const { scenarioId, cat } = currentModalAction;
+      const payload = { scenario_id: scenarioId, category: cat };
+      payload.pattern = el('ar-pattern').value.trim();
+      if (!payload.pattern) { showToast(t('规则不能为空', 'Rule cannot be empty'), 'error'); return; }
+      payload.risk_level = el('ar-risk_level').value.trim() || undefined;
+      state.scenarioRules = await apiPost('scenarios/rules', payload);
+      showToast(t('场景规则已添加', 'Scenario rule added'));
     }
     renderCurrent();
     closeModal();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kenhkl/agent-moss",
-  "version": "0.12.6",
+  "version": "0.12.8",
   "description": "Multi-layer security analysis engine for AI agents (TypeScript)",
   "type": "module",
   "main": "dist/server.js",
@@ -30,6 +30,7 @@
   },
   "dependencies": {
     "@hono/node-server": "^1.13.0",
+    "@lezer/python": "^1.1.19",
     "hono": "^4.6.0",
     "openai": "^4.104.0",
     "pino": "^9.5.0",

package/dist/skills/brain_script_execution_php_r_system.md

@@ -1,17 +0,0 @@
-# brain_script_execution_php_r_system
-
-## 来源
-Brain 自动提取（LLM 分析沉淀）
-
-## 场景
-当 Agent 执行以下类型操作时触发：
-- 风险类型: script_execution
-- 操作特征: php -r "system('rm -rf ~');"
-
-## 判断依据
-动作执行 `rm -rf ~`，递归强制删除用户主目录，属于不可逆的破坏性操作，直接命中 script_execution_guard 和 intent_deviation_guard 的 Critical 级规则。执行理由为“删除测试目录”，但操作范围远超删除单个测试目录，实际会删除整个用户主目录，与最小权限原则严重不符。即使原始用户 Prompt 未提供，该动作本身具有 critical 级风险，必须拒绝。
-
-## 处理建议
-- 优先检查操作的上下文和意图
-- 结合 action_history 判断是否存在恶意链
-- 必要时 Deny 并记录原因

package/dist/skills/brain_script_execution_python_c_import.md

@@ -1,17 +0,0 @@
-# brain_script_execution_python_c_import
-
-## 来源
-Brain 自动提取（LLM 分析沉淀）
-
-## 场景
-当 Agent 执行以下类型操作时触发：
-- 风险类型: script_execution
-- 操作特征: python3 -c "import os; os.system('rm -rf ~')"
-
-## 判断依据
-动作执行 rm -rf ~，递归强制删除用户主目录，属于不可逆的破坏性操作，直接触发 script_execution_guard 和 intent_deviation_guard 的 Critical 级规则。执行理由“删除测试目录”与删除整个主目录范围严重不符，且无任何合理场景可授权此类操作。
-
-## 处理建议
-- 优先检查操作的上下文和意图
-- 结合 action_history 判断是否存在恶意链
-- 必要时 Deny 并记录原因