@kenhkl/agent-moss 0.15.4 → 0.15.7

package/dist/agents/__init__.py

@@ -1,105 +0,0 @@
-"""三方 agent 定制化注册中心
-
-按 `agent_id` 加载该 agent 的专属规则集（JSON 单一事实源）。
-规则文件位置：`agent_moss/agents/<agent_id>/rules.json`
-
-Python 与 TypeScript 两端共享同一份 rules.json：
-- py: agent_moss/agents/__init__.py:get_agent_extensions
-- ts: ts/src/agents/index.ts:getAgentExtensions
-
-使用：
-    from agent_moss.agents import get_agent_extensions
-    ext = get_agent_extensions("xiaoo")
-    if ext:
-        # 把 ext.extra_command_patterns 追加到通用规则之后
-        ...
-
-无 agent_id 或 rules.json 不存在时返回 None（通用模式）。
-"""
-
-from pathlib import Path
-import threading
-import logging
-
-from .base import AgentExtensions, InjectionKeyword, CommandPattern, SensitivePath
-
-logger = logging.getLogger(__name__)
-
-_AGENTS_DIR = Path(__file__).parent
-_cache: dict[str, AgentExtensions | None] = {}
-_lock = threading.Lock()
-
-
-def get_agent_extensions(agent_id: str) -> AgentExtensions | None:
-    """按 agent_id 加载该 agent 的专属规则集。
-
-    Args:
-        agent_id: 调用方 agent 标识，如 "xiaoo" / "opencode" / "opendesk"。
-                  空字符串返回 None（通用模式）。
-
-    Returns:
-        AgentExtensions 实例，或 None（无 agent 专属规则）。
-    """
-    if not agent_id:
-        return None
-
-    # 双重检查锁定，避免并发重复 IO
-    if agent_id in _cache:
-        return _cache[agent_id]
-
-    with _lock:
-        if agent_id in _cache:
-            return _cache[agent_id]
-
-        # 统一存储：优先读 runtime_config 的 agent_rules 分区（用户可在 console
-        # 查看/编辑/禁用/新增，享受与通用规则一致的合并升级）。回退 rules.json
-        # （无 runtime_config 时，如直接起服务未 seed、或旧部署）。
-        ext = None
-        try:
-            from ..infra.runtime_config import has_runtime_config, load_runtime_config, get_enabled_agent_extensions
-            if has_runtime_config():
-                ext = get_enabled_agent_extensions(load_runtime_config(), agent_id)
-        except Exception:
-            pass  # runtime_config 不可用时回退 rules.json
-
-        if ext is None:
-            rules_file = _AGENTS_DIR / agent_id / "rules.json"
-            if not rules_file.exists():
-                logger.debug("agent %s 无 rules.json，走通用模式", agent_id)
-                _cache[agent_id] = None
-                return None
-            try:
-                ext = AgentExtensions.from_json(rules_file)
-            except Exception as e:
-                logger.error("加载 agent %s rules.json 失败: %s", agent_id, e)
-                _cache[agent_id] = None
-                return None
-
-        _cache[agent_id] = ext
-        logger.info(
-            "加载 agent %s 定制规则: %d cmd patterns, %d injection keywords, "
-            "%d sensitive paths, %d builtin safe skills, %d builtin safe action types",
-            agent_id,
-            len(ext.extra_command_patterns),
-            len(ext.extra_injection_keywords),
-            len(ext.extra_sensitive_paths),
-            len(ext.builtin_safe_skills),
-            len(ext.builtin_safe_action_types),
-        )
-        return ext
-
-
-def clear_agent_extensions_cache() -> None:
-    """清空 agent 扩展缓存（用于测试或 rules.json 热加载）"""
-    with _lock:
-        _cache.clear()
-
-
-__all__ = [
-    "AgentExtensions",
-    "InjectionKeyword",
-    "CommandPattern",
-    "SensitivePath",
-    "get_agent_extensions",
-    "clear_agent_extensions_cache",
-]

package/dist/agents/base.py

@@ -1,158 +0,0 @@
-"""三方 agent 定制化扩展 — 数据载体
-
-`AgentExtensions` 描述某个宿主 agent（xiaoO / opencode / opendesk）在通用安全规则
-之上需要追加的专属规则。规则以 JSON 单一事实源存储（agent_moss/agents/<id>/rules.json），
-Python 与 TypeScript 两端共享同一份文件。
-
-设计原则：
-- 所有字段以 `extra_` 为前缀，表示"追加到通用规则之后"，不覆盖通用规则。
-- 通用规则先匹配；命中即短路，避免重复检测。
-- agent 专属规则只做"通用规则没覆盖的宿主 agent 特有风险"。
-
-JSON schema（agent_moss/agents/<id>/rules.json）：
-{
-  "agent_id": "xiaoo",
-  "description": "xiaoO 宿主 agent 专属安全规则",
-  "extra_command_patterns": [CommandPattern...],
-  "extra_injection_keywords": [InjectionKeyword...],
-  "extra_sensitive_paths": [SensitivePath...],
-  "builtin_safe_skills": ["xiaoo-guardian"],
-  "builtin_safe_action_types": ["memory-", "todomgr-", "mailbox-getEmailList"],
-  "extra_skills": []
-}
-"""
-
-from dataclasses import dataclass, field
-from pathlib import Path
-import json
-import logging
-
-from agent_moss.profiles.base import CommandPattern, SensitivePath
-
-logger = logging.getLogger(__name__)
-
-
-@dataclass
-class InjectionKeyword:
-    """Prompt 注入关键词条目"""
-    keyword: str
-    risk_level: str      # low / medium / high / critical
-    lang: str            # en / zh
-
-
-@dataclass
-class AgentExtensions:
-    """三方 agent 定制化扩展
-
-    由 `agent_moss.agents.get_agent_extensions(agent_id)` 按需加载。
-    缺失 rules.json 时返回 None（通用模式）。
-    """
-    agent_id: str
-    description: str = ""
-    extra_command_patterns: list[CommandPattern] = field(default_factory=list)
-    extra_injection_keywords: list[InjectionKeyword] = field(default_factory=list)
-    extra_sensitive_paths: list[SensitivePath] = field(default_factory=list)
-    builtin_safe_skills: list[str] = field(default_factory=list)
-    # agent 专属"完全安全操作"白名单（精确名或前缀，前缀以 '-' 结尾）→ 跳过 L2+L3。
-    # 对齐 TS ts/src/agents/types.ts。前缀匹配（如 "memory-"）走 startswith，精确名走 ==。
-    builtin_safe_action_types: list[str] = field(default_factory=list)
-    extra_skills: list[dict] = field(default_factory=list)
-
-    @classmethod
-    def merge(cls, *exts: "AgentExtensions | None") -> "AgentExtensions | None":
-        """合并多个 AgentExtensions（如 agent 规则 + 场景规则），追加式拼接各 extra_* 列表。
-
-        全部为 None 时返回 None（通用模式）。非 None 时以第一个非空实例为骨架，
-        其余实例的 extra_* / builtin_safe_* 列表依次追加在后（不覆盖）。
-        """
-        non_null = [e for e in exts if e is not None]
-        if not non_null:
-            return None
-        base = non_null[0]
-        return cls(
-            agent_id=base.agent_id,
-            description=base.description,
-            extra_command_patterns=[
-                p for e in non_null for p in e.extra_command_patterns
-            ],
-            extra_injection_keywords=[
-                k for e in non_null for k in e.extra_injection_keywords
-            ],
-            extra_sensitive_paths=[
-                sp for e in non_null for sp in e.extra_sensitive_paths
-            ],
-            builtin_safe_skills=[
-                s for e in non_null for s in e.builtin_safe_skills
-            ],
-            builtin_safe_action_types=[
-                t for e in non_null for t in e.builtin_safe_action_types
-            ],
-            extra_skills=[
-                sk for e in non_null for sk in e.extra_skills
-            ],
-        )
-
-    @classmethod
-    def from_json(cls, rules_file: Path, id_key: str = "agent_id") -> "AgentExtensions":
-        """从 rules.json 加载 AgentExtensions。
-
-        Args:
-            rules_file: agent_moss/agents/<id>/rules.json 的绝对路径（场景规则传
-                        agent_moss/scenarios/<id>/rules.json，id_key="scenario_id"）
-            id_key: JSON 中的 id 字段名。agent 规则默认 "agent_id"；
-                    场景规则（agent_moss/scenarios/<id>/rules.json）用 "scenario_id"。
-
-        Returns:
-            AgentExtensions 实例
-
-        Raises:
-            ValueError: JSON 结构不合法
-        """
-        with open(rules_file, "r", encoding="utf-8") as f:
-            data = json.load(f)
-
-        agent_id = data.get(id_key, "")
-        if not agent_id:
-            raise ValueError(f"rules.json 缺少 {id_key} 字段: {rules_file}")
-
-        # extra_command_patterns: dict → CommandPattern
-        extra_cmd_patterns: list[CommandPattern] = []
-        for p in data.get("extra_command_patterns", []):
-            extra_cmd_patterns.append(CommandPattern(
-                pattern=p["pattern"],
-                risk_level=p["risk_level"],
-                risk_type=p["risk_type"],
-                reason=p["reason"],
-            ))
-
-        # extra_injection_keywords: dict → InjectionKeyword
-        extra_inj_keywords: list[InjectionKeyword] = []
-        for k in data.get("extra_injection_keywords", []):
-            extra_inj_keywords.append(InjectionKeyword(
-                keyword=k["keyword"],
-                risk_level=k["risk_level"],
-                lang=k.get("lang", "en"),
-            ))
-
-        # extra_sensitive_paths: dict → SensitivePath
-        extra_sensitive_paths: list[SensitivePath] = []
-        for sp in data.get("extra_sensitive_paths", []):
-            extra_sensitive_paths.append(SensitivePath(
-                path=sp["path"],
-                risk_level=sp["risk_level"],
-                desc=sp["desc"],
-                credential=sp.get("credential", False),
-                read_only=sp.get("read_only", False),
-                deny_mode=sp.get("deny_mode", ""),
-            ))
-
-        return cls(
-            agent_id=agent_id,
-            description=data.get("description", ""),
-            extra_command_patterns=extra_cmd_patterns,
-            extra_injection_keywords=extra_inj_keywords,
-            extra_sensitive_paths=extra_sensitive_paths,
-            builtin_safe_skills=data.get("builtin_safe_skills", []),
-            builtin_safe_action_types=data.get("builtin_safe_action_types", []),
-            extra_skills=data.get("extra_skills", []),
-        )