@kenhkl/agent-moss 0.15.5 → 0.15.7

package/dist/cli.js

@@ -408,6 +408,9 @@ function isLiteralTextCommand(command) {
       return false;
     }
   }
+  if (/\|\s*\b(?:tee|tac|install)\b/i.test(command)) {
+    return false;
+  }
   return true;
 }
 function extractInlineCode(command) {
@@ -1308,22 +1311,45 @@ var init_logic_rules = __esm({
   }
 });
 
+// src/engine/asset-dir.ts
+import { existsSync as existsSync3 } from "fs";
+import { resolve as resolve2 } from "path";
+function assetDirCandidates(moduleDir, name) {
+  return [
+    resolve2(moduleDir, name),
+    resolve2(moduleDir, "../../..", "agent_moss", name)
+  ];
+}
+function resolveAssetDir(moduleDir, name) {
+  for (const dir of assetDirCandidates(moduleDir, name)) {
+    if (existsSync3(dir)) return dir;
+  }
+  return null;
+}
+var init_asset_dir = __esm({
+  "src/engine/asset-dir.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
 // src/engine/skill-loader.ts
-import { readFileSync as readFileSync3, readdirSync as readdirSync2, existsSync as existsSync3 } from "fs";
-import { resolve as resolve2, dirname as dirname2 } from "path";
+import { readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
+import { resolve as resolve3, dirname as dirname2 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function loadAllSkills() {
   if (cachedSkills) return cachedSkills;
   cachedSkills = {};
-  const dir = existsSync3(SKILLS_DIR) ? SKILLS_DIR : SKILLS_DIR_FALLBACK;
-  if (!existsSync3(dir)) {
-    console.warn("[AgentMoss] Skills directory not found:", SKILLS_DIR, "and fallback:", SKILLS_DIR_FALLBACK);
+  const dir = resolveAssetDir(__dirname3, "skills");
+  if (!dir) {
+    const [primary, fallback] = assetDirCandidates(__dirname3, "skills");
+    console.warn("[AgentMoss] Skills directory not found:", primary, "and fallback:", fallback);
     return cachedSkills;
   }
   const files = readdirSync2(dir).filter((f) => f.endsWith(".md"));
   for (const f of files) {
     const name = f.replace(".md", "");
-    cachedSkills[name] = readFileSync3(resolve2(dir, f), "utf-8");
+    cachedSkills[name] = readFileSync3(resolve3(dir, f), "utf-8");
   }
   console.log(`[AgentMoss] Loaded ${Object.keys(cachedSkills).length} skills from ${dir}`);
   return cachedSkills;
@@ -1377,16 +1403,15 @@ function formatSkillsForPrompt(skills) {
 ${s.skillContent}`
   ).join("\n\n---\n\n");
 }
-var __filename3, __dirname3, SKILLS_DIR, SKILLS_DIR_FALLBACK, SKILL_KEYWORD_MAP, cachedSkills;
+var __filename3, __dirname3, SKILL_KEYWORD_MAP, cachedSkills;
 var init_skill_loader = __esm({
   "src/engine/skill-loader.ts"() {
     "use strict";
     init_esm_shims();
     init_rules_loader();
+    init_asset_dir();
     __filename3 = fileURLToPath4(import.meta.url);
     __dirname3 = dirname2(__filename3);
-    SKILLS_DIR = resolve2(__dirname3, "../skills");
-    SKILLS_DIR_FALLBACK = resolve2(__dirname3, "../../../agent_moss/skills");
     SKILL_KEYWORD_MAP = (() => {
       const map = {};
       const cats = loadL3();
@@ -2556,7 +2581,7 @@ var init_runtime_config = __esm({
 
 // src/agents/index.ts
 import { readFileSync as readFileSync5, existsSync as existsSync5 } from "fs";
-import { resolve as resolve3, dirname as dirname4 } from "path";
+import { resolve as resolve4, dirname as dirname4 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 function resolveAgentsDir() {
   if (existsSync5(AGENTS_DIR_PROD)) return AGENTS_DIR_PROD;
@@ -2576,7 +2601,7 @@ function getAgentExtensions(agentId) {
   }
   if (ext === null) {
     const agentsDir = resolveAgentsDir();
-    const rulesFile = resolve3(agentsDir, agentId, "rules.json");
+    const rulesFile = resolve4(agentsDir, agentId, "rules.json");
     if (!existsSync5(rulesFile)) {
       cache.set(agentId, null);
       return null;
@@ -2623,15 +2648,15 @@ var init_agents = __esm({
     init_esm_shims();
     __filename4 = fileURLToPath6(import.meta.url);
     __dirname5 = dirname4(__filename4);
-    AGENTS_DIR_PROD = resolve3(__dirname5, "agents");
-    AGENTS_DIR_DEV_FALLBACK = resolve3(__dirname5, "../../../agent_moss/agents");
+    AGENTS_DIR_PROD = resolve4(__dirname5, "agents");
+    AGENTS_DIR_DEV_FALLBACK = resolve4(__dirname5, "../../../agent_moss/agents");
     cache = /* @__PURE__ */ new Map();
   }
 });
 
 // src/scenarios/index.ts
 import { readFileSync as readFileSync6, existsSync as existsSync6 } from "fs";
-import { resolve as resolve4, dirname as dirname5 } from "path";
+import { resolve as resolve5, dirname as dirname5 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 function resolveScenariosDir() {
   if (existsSync6(SCENARIOS_DIR_PROD)) return SCENARIOS_DIR_PROD;
@@ -2651,7 +2676,7 @@ function getScenarioExtensions(scenarioId) {
   }
   if (ext === null) {
     const scenariosDir = resolveScenariosDir();
-    const rulesFile = resolve4(scenariosDir, scenarioId, "rules.json");
+    const rulesFile = resolve5(scenariosDir, scenarioId, "rules.json");
     if (!existsSync6(rulesFile)) {
       cache2.set(scenarioId, null);
       return null;
@@ -2704,8 +2729,8 @@ var init_scenarios = __esm({
     init_agents();
     __filename5 = fileURLToPath7(import.meta.url);
     __dirname6 = dirname5(__filename5);
-    SCENARIOS_DIR_PROD = resolve4(__dirname6, "scenarios");
-    SCENARIOS_DIR_DEV_FALLBACK = resolve4(__dirname6, "../../../agent_moss/scenarios");
+    SCENARIOS_DIR_PROD = resolve5(__dirname6, "scenarios");
+    SCENARIOS_DIR_DEV_FALLBACK = resolve5(__dirname6, "../../../agent_moss/scenarios");
     cache2 = /* @__PURE__ */ new Map();
   }
 });
@@ -2892,7 +2917,7 @@ function buildPathContext(actionDetail) {
 }
 function stripLiteralTextSegments(actionDetail) {
   const writeScriptExec = />\s*[/~]\S*\.(sh|py|pl|rb)\b/.test(actionDetail) && /(?:&&|\|\||;|\n|\|)\s*(?:bash|sh|zsh|dash|python|perl|ruby|node)/.test(actionDetail);
-  const pipeToInterpreter = /\|\s*(?:bash|sh|zsh|dash|python|perl|ruby|node)\b/.test(actionDetail);
+  const pipeToInterpreter = /\|\s*(?:bash|sh|zsh|dash|python|perl|ruby|node|crontab|at)\b/.test(actionDetail);
   if (writeScriptExec || pipeToInterpreter) {
     return actionDetail;
   }
@@ -3455,18 +3480,19 @@ var init_heuristic = __esm({
 
 // src/engine/template-loader.ts
 import { readFileSync as readFileSync7, existsSync as existsSync7 } from "fs";
-import { resolve as resolve5, dirname as dirname6 } from "path";
+import { resolve as resolve6, dirname as dirname6 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 function loadTemplates() {
   if (cachedTemplates) return cachedTemplates;
   cachedTemplates = {};
-  const dir = existsSync7(TEMPLATES_DIR) ? TEMPLATES_DIR : TEMPLATES_DIR_FALLBACK;
-  if (!existsSync7(dir)) {
-    console.warn("[AgentMoss] Templates directory not found:", TEMPLATES_DIR, "and fallback:", TEMPLATES_DIR_FALLBACK);
+  const dir = resolveAssetDir(__dirname7, "templates");
+  if (!dir) {
+    const [primary, fallback] = assetDirCandidates(__dirname7, "templates");
+    console.warn("[AgentMoss] Templates directory not found:", primary, "and fallback:", fallback);
     return cachedTemplates;
   }
   for (const file of TEMPLATE_FILES) {
-    const filePath = resolve5(dir, file);
+    const filePath = resolve6(dir, file);
     if (existsSync7(filePath)) {
       const key = file.replace(".txt", "").replace("_template", "");
       cachedTemplates[key] = readFileSync7(filePath, "utf-8");
@@ -3475,15 +3501,14 @@ function loadTemplates() {
   console.log(`[AgentMoss] Loaded ${Object.keys(cachedTemplates).length} templates from ${dir}`);
   return cachedTemplates;
 }
-var __filename6, __dirname7, TEMPLATES_DIR, TEMPLATES_DIR_FALLBACK, TEMPLATE_FILES, cachedTemplates;
+var __filename6, __dirname7, TEMPLATE_FILES, cachedTemplates;
 var init_template_loader = __esm({
   "src/engine/template-loader.ts"() {
     "use strict";
     init_esm_shims();
+    init_asset_dir();
     __filename6 = fileURLToPath8(import.meta.url);
     __dirname7 = dirname6(__filename6);
-    TEMPLATES_DIR = resolve5(__dirname7, "../templates");
-    TEMPLATES_DIR_FALLBACK = resolve5(__dirname7, "../../../agent_moss/templates");
     TEMPLATE_FILES = ["prompt1_template.txt", "prompt2_template.txt", "security_judge_template.txt"];
     cachedTemplates = null;
   }
@@ -3491,7 +3516,7 @@ var init_template_loader = __esm({
 
 // src/engine/script-analyzer.ts
 import { readFileSync as readFileSync8 } from "fs";
-import { resolve as resolve6, join as join4 } from "path";
+import { resolve as resolve7, join as join4 } from "path";
 function emptyResult() {
   return { scriptPath: "", scriptContent: "", matchedKeywords: [], lineCount: 0, isSuspicious: false, error: "", riskLevel: "", riskReason: "" };
 }
@@ -3544,7 +3569,7 @@ function assessKeywordCombinationRisk(matchedKeywords, scriptContent) {
 }
 function readScriptContent(scriptPath, maxLines = 500) {
   try {
-    const expandedPath = scriptPath.startsWith("~") ? join4(process.env.HOME || "/home/user", scriptPath.slice(2)) : resolve6(scriptPath);
+    const expandedPath = scriptPath.startsWith("~") ? join4(process.env.HOME || "/home/user", scriptPath.slice(2)) : resolve7(scriptPath);
     const raw = readFileSync8(expandedPath, "utf-8");
     const lines = raw.split("\n").slice(0, maxLines);
     return { content: lines.join("\n"), lineCount: lines.length, error: "" };
@@ -5178,7 +5203,7 @@ var init_tracker = __esm({
 
 // src/engine/script-content-analyzer.ts
 import { statSync as statSync3, existsSync as existsSync9 } from "fs";
-import { resolve as resolve8, join as join6, isAbsolute as isAbsolute2 } from "path";
+import { resolve as resolve9, join as join6, isAbsolute as isAbsolute2 } from "path";
 import { homedir as homedir4 } from "os";
 function emptyChain() {
   return {
@@ -5334,7 +5359,7 @@ function resolvePath2(p) {
   if (expanded.startsWith("~/") || expanded === "~") {
     expanded = join6(homedir4(), expanded.slice(1));
   }
-  return resolve8(expanded);
+  return resolve9(expanded);
 }
 function scanScriptChainWithL1(chain, input) {
   for (const node of chain.nodes) {
@@ -5976,7 +6001,7 @@ async function analyzeWithLLM(prompt, config) {
       }
       if (attempt < maxRetries) {
         console.error(`[AgentMoss] LLM call failed (attempt ${attempt + 1}/${maxRetries + 1}), retrying in ${retryCfg.retryInterval}s:`, err.message);
-        await new Promise((resolve9) => setTimeout(resolve9, retryCfg.retryInterval * 1e3));
+        await new Promise((resolve10) => setTimeout(resolve10, retryCfg.retryInterval * 1e3));
       } else {
         clearTimeout(totalTimeoutTimer);
         console.error("[AgentMoss] LLM call failed after all retries:", err.message);
@@ -8914,13 +8939,13 @@ var require_backup = __commonJS({
     var runBackup = (backup, handler) => {
       let rate = 0;
       let useDefault = true;
-      return new Promise((resolve9, reject) => {
+      return new Promise((resolve10, reject) => {
         setImmediate(function step() {
           try {
             const progress = backup.transfer(rate);
             if (!progress.remainingPages) {
               backup.close();
-              resolve9(progress);
+              resolve10(progress);
               return;
             }
             if (useDefault) {
@@ -10219,12 +10244,12 @@ function createApp() {
 }
 async function findFreePort(startPort, host = "127.0.0.1", scan = 100) {
   for (let port = startPort; port < startPort + scan; port++) {
-    const free = await new Promise((resolve9) => {
+    const free = await new Promise((resolve10) => {
       const server = net.createServer();
       server.listen(port, host, () => {
-        server.close(() => resolve9(true));
+        server.close(() => resolve10(true));
       });
-      server.on("error", () => resolve9(false));
+      server.on("error", () => resolve10(false));
     });
     if (free) {
       if (port !== startPort) {
@@ -10449,13 +10474,13 @@ async function main() {
       let version2 = "";
       for (let port = 9090; port <= 9095; port++) {
         try {
-          const data = await new Promise((resolve9, reject) => {
+          const data = await new Promise((resolve10, reject) => {
             const req = http.get(`http://127.0.0.1:${port}/api/v1/health`, { timeout: 2e3 }, (res) => {
               let body = "";
               res.on("data", (chunk) => body += chunk);
               res.on("end", () => {
                 try {
-                  resolve9(JSON.parse(body));
+                  resolve10(JSON.parse(body));
                 } catch {
                   reject();
                 }
@@ -10483,13 +10508,13 @@ async function main() {
           console.log(`   Systemd:  \u672A\u6CE8\u518C\uFF08\u8FD0\u884C agent-moss install --enable \u5B89\u88C5\uFF09`);
         }
         try {
-          const data = await new Promise((resolve9, reject) => {
+          const data = await new Promise((resolve10, reject) => {
             const req = http.get(`http://127.0.0.1:${foundPort}/console/api/config`, { timeout: 3e3 }, (res) => {
               let body = "";
               res.on("data", (chunk) => body += chunk);
               res.on("end", () => {
                 try {
-                  resolve9(JSON.parse(body));
+                  resolve10(JSON.parse(body));
                 } catch {
                   reject();
                 }
@@ -10567,4 +10592,3 @@ export {
 //!   P6 mc-ltl-rules                 LTL 模型检测
 //!   P7 low-integrity-command-exec   低完整性命令执行
 //!   P8 sensitive-data-aggregation   敏感数据聚合外传
-//# sourceMappingURL=cli.js.map

package/dist/engine/coordinator.js

@@ -403,6 +403,9 @@ function isLiteralTextCommand(command) {
       return false;
     }
   }
+  if (/\|\s*\b(?:tee|tac|install)\b/i.test(command)) {
+    return false;
+  }
   return true;
 }
 function extractInlineCode(command) {
@@ -1303,22 +1306,45 @@ var init_logic_rules = __esm({
   }
 });
 
+// src/engine/asset-dir.ts
+import { existsSync as existsSync3 } from "fs";
+import { resolve as resolve2 } from "path";
+function assetDirCandidates(moduleDir, name) {
+  return [
+    resolve2(moduleDir, name),
+    resolve2(moduleDir, "../../..", "agent_moss", name)
+  ];
+}
+function resolveAssetDir(moduleDir, name) {
+  for (const dir of assetDirCandidates(moduleDir, name)) {
+    if (existsSync3(dir)) return dir;
+  }
+  return null;
+}
+var init_asset_dir = __esm({
+  "src/engine/asset-dir.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
 // src/engine/skill-loader.ts
-import { readFileSync as readFileSync3, readdirSync as readdirSync2, existsSync as existsSync3 } from "fs";
-import { resolve as resolve2, dirname as dirname2 } from "path";
+import { readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
+import { resolve as resolve3, dirname as dirname2 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function loadAllSkills() {
   if (cachedSkills) return cachedSkills;
   cachedSkills = {};
-  const dir = existsSync3(SKILLS_DIR) ? SKILLS_DIR : SKILLS_DIR_FALLBACK;
-  if (!existsSync3(dir)) {
-    console.warn("[AgentMoss] Skills directory not found:", SKILLS_DIR, "and fallback:", SKILLS_DIR_FALLBACK);
+  const dir = resolveAssetDir(__dirname3, "skills");
+  if (!dir) {
+    const [primary, fallback] = assetDirCandidates(__dirname3, "skills");
+    console.warn("[AgentMoss] Skills directory not found:", primary, "and fallback:", fallback);
     return cachedSkills;
   }
   const files = readdirSync2(dir).filter((f) => f.endsWith(".md"));
   for (const f of files) {
     const name = f.replace(".md", "");
-    cachedSkills[name] = readFileSync3(resolve2(dir, f), "utf-8");
+    cachedSkills[name] = readFileSync3(resolve3(dir, f), "utf-8");
   }
   console.log(`[AgentMoss] Loaded ${Object.keys(cachedSkills).length} skills from ${dir}`);
   return cachedSkills;
@@ -1372,16 +1398,15 @@ function formatSkillsForPrompt(skills) {
 ${s.skillContent}`
   ).join("\n\n---\n\n");
 }
-var __filename3, __dirname3, SKILLS_DIR, SKILLS_DIR_FALLBACK, SKILL_KEYWORD_MAP, cachedSkills;
+var __filename3, __dirname3, SKILL_KEYWORD_MAP, cachedSkills;
 var init_skill_loader = __esm({
   "src/engine/skill-loader.ts"() {
     "use strict";
     init_esm_shims();
     init_rules_loader();
+    init_asset_dir();
     __filename3 = fileURLToPath4(import.meta.url);
     __dirname3 = dirname2(__filename3);
-    SKILLS_DIR = resolve2(__dirname3, "../skills");
-    SKILLS_DIR_FALLBACK = resolve2(__dirname3, "../../../agent_moss/skills");
     SKILL_KEYWORD_MAP = (() => {
       const map = {};
       const cats = loadL3();
@@ -2551,7 +2576,7 @@ var init_runtime_config = __esm({
 
 // src/agents/index.ts
 import { readFileSync as readFileSync5, existsSync as existsSync5 } from "fs";
-import { resolve as resolve3, dirname as dirname4 } from "path";
+import { resolve as resolve4, dirname as dirname4 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 function resolveAgentsDir() {
   if (existsSync5(AGENTS_DIR_PROD)) return AGENTS_DIR_PROD;
@@ -2571,7 +2596,7 @@ function getAgentExtensions(agentId) {
   }
   if (ext === null) {
     const agentsDir = resolveAgentsDir();
-    const rulesFile = resolve3(agentsDir, agentId, "rules.json");
+    const rulesFile = resolve4(agentsDir, agentId, "rules.json");
     if (!existsSync5(rulesFile)) {
       cache.set(agentId, null);
       return null;
@@ -2618,15 +2643,15 @@ var init_agents = __esm({
     init_esm_shims();
     __filename4 = fileURLToPath6(import.meta.url);
     __dirname5 = dirname4(__filename4);
-    AGENTS_DIR_PROD = resolve3(__dirname5, "agents");
-    AGENTS_DIR_DEV_FALLBACK = resolve3(__dirname5, "../../../agent_moss/agents");
+    AGENTS_DIR_PROD = resolve4(__dirname5, "agents");
+    AGENTS_DIR_DEV_FALLBACK = resolve4(__dirname5, "../../../agent_moss/agents");
     cache = /* @__PURE__ */ new Map();
   }
 });
 
 // src/scenarios/index.ts
 import { readFileSync as readFileSync6, existsSync as existsSync6 } from "fs";
-import { resolve as resolve4, dirname as dirname5 } from "path";
+import { resolve as resolve5, dirname as dirname5 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 function resolveScenariosDir() {
   if (existsSync6(SCENARIOS_DIR_PROD)) return SCENARIOS_DIR_PROD;
@@ -2646,7 +2671,7 @@ function getScenarioExtensions(scenarioId) {
   }
   if (ext === null) {
     const scenariosDir = resolveScenariosDir();
-    const rulesFile = resolve4(scenariosDir, scenarioId, "rules.json");
+    const rulesFile = resolve5(scenariosDir, scenarioId, "rules.json");
     if (!existsSync6(rulesFile)) {
       cache2.set(scenarioId, null);
       return null;
@@ -2699,8 +2724,8 @@ var init_scenarios = __esm({
     init_agents();
     __filename5 = fileURLToPath7(import.meta.url);
     __dirname6 = dirname5(__filename5);
-    SCENARIOS_DIR_PROD = resolve4(__dirname6, "scenarios");
-    SCENARIOS_DIR_DEV_FALLBACK = resolve4(__dirname6, "../../../agent_moss/scenarios");
+    SCENARIOS_DIR_PROD = resolve5(__dirname6, "scenarios");
+    SCENARIOS_DIR_DEV_FALLBACK = resolve5(__dirname6, "../../../agent_moss/scenarios");
     cache2 = /* @__PURE__ */ new Map();
   }
 });
@@ -2887,7 +2912,7 @@ function buildPathContext(actionDetail) {
 }
 function stripLiteralTextSegments(actionDetail) {
   const writeScriptExec = />\s*[/~]\S*\.(sh|py|pl|rb)\b/.test(actionDetail) && /(?:&&|\|\||;|\n|\|)\s*(?:bash|sh|zsh|dash|python|perl|ruby|node)/.test(actionDetail);
-  const pipeToInterpreter = /\|\s*(?:bash|sh|zsh|dash|python|perl|ruby|node)\b/.test(actionDetail);
+  const pipeToInterpreter = /\|\s*(?:bash|sh|zsh|dash|python|perl|ruby|node|crontab|at)\b/.test(actionDetail);
   if (writeScriptExec || pipeToInterpreter) {
     return actionDetail;
   }
@@ -3636,25 +3661,25 @@ init_skill_loader();
 
 // src/engine/template-loader.ts
 init_esm_shims();
+init_asset_dir();
 import { readFileSync as readFileSync7, existsSync as existsSync7 } from "fs";
-import { resolve as resolve5, dirname as dirname6 } from "path";
+import { resolve as resolve6, dirname as dirname6 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 var __filename6 = fileURLToPath8(import.meta.url);
 var __dirname7 = dirname6(__filename6);
-var TEMPLATES_DIR = resolve5(__dirname7, "../templates");
-var TEMPLATES_DIR_FALLBACK = resolve5(__dirname7, "../../../agent_moss/templates");
 var TEMPLATE_FILES = ["prompt1_template.txt", "prompt2_template.txt", "security_judge_template.txt"];
 var cachedTemplates = null;
 function loadTemplates() {
   if (cachedTemplates) return cachedTemplates;
   cachedTemplates = {};
-  const dir = existsSync7(TEMPLATES_DIR) ? TEMPLATES_DIR : TEMPLATES_DIR_FALLBACK;
-  if (!existsSync7(dir)) {
-    console.warn("[AgentMoss] Templates directory not found:", TEMPLATES_DIR, "and fallback:", TEMPLATES_DIR_FALLBACK);
+  const dir = resolveAssetDir(__dirname7, "templates");
+  if (!dir) {
+    const [primary, fallback] = assetDirCandidates(__dirname7, "templates");
+    console.warn("[AgentMoss] Templates directory not found:", primary, "and fallback:", fallback);
     return cachedTemplates;
   }
   for (const file of TEMPLATE_FILES) {
-    const filePath = resolve5(dir, file);
+    const filePath = resolve6(dir, file);
     if (existsSync7(filePath)) {
       const key = file.replace(".txt", "").replace("_template", "");
       cachedTemplates[key] = readFileSync7(filePath, "utf-8");
@@ -3667,7 +3692,7 @@ function loadTemplates() {
 // src/engine/script-analyzer.ts
 init_esm_shims();
 import { readFileSync as readFileSync8 } from "fs";
-import { resolve as resolve6, join as join4 } from "path";
+import { resolve as resolve7, join as join4 } from "path";
 var SUSPICIOUS_PATTERNS = [
   // Network exfiltration (curl/wget POST in scripts is almost never legitimate)
   { name: "curl POST", pattern: /curl\s+(.*\s)?-X\s+POST/i },
@@ -3800,7 +3825,7 @@ function assessKeywordCombinationRisk(matchedKeywords, scriptContent) {
 }
 function readScriptContent(scriptPath, maxLines = 500) {
   try {
-    const expandedPath = scriptPath.startsWith("~") ? join4(process.env.HOME || "/home/user", scriptPath.slice(2)) : resolve6(scriptPath);
+    const expandedPath = scriptPath.startsWith("~") ? join4(process.env.HOME || "/home/user", scriptPath.slice(2)) : resolve7(scriptPath);
     const raw = readFileSync8(expandedPath, "utf-8");
     const lines = raw.split("\n").slice(0, maxLines);
     return { content: lines.join("\n"), lineCount: lines.length, error: "" };
@@ -3857,7 +3882,7 @@ init_heuristic();
 init_logic_rules();
 init_inline_analyzer();
 import { statSync as statSync3, existsSync as existsSync9 } from "fs";
-import { resolve as resolve8, join as join6, isAbsolute as isAbsolute2 } from "path";
+import { resolve as resolve9, join as join6, isAbsolute as isAbsolute2 } from "path";
 import { homedir as homedir4 } from "os";
 
 // src/engine/script-engine/tracker.ts
@@ -5560,7 +5585,7 @@ function resolvePath2(p) {
   if (expanded.startsWith("~/") || expanded === "~") {
     expanded = join6(homedir4(), expanded.slice(1));
   }
-  return resolve8(expanded);
+  return resolve9(expanded);
 }
 function scanScriptChainWithL1(chain, input) {
   for (const node of chain.nodes) {
@@ -5936,7 +5961,7 @@ async function analyzeWithLLM(prompt, config) {
       }
       if (attempt < maxRetries) {
         console.error(`[AgentMoss] LLM call failed (attempt ${attempt + 1}/${maxRetries + 1}), retrying in ${retryCfg.retryInterval}s:`, err.message);
-        await new Promise((resolve9) => setTimeout(resolve9, retryCfg.retryInterval * 1e3));
+        await new Promise((resolve10) => setTimeout(resolve10, retryCfg.retryInterval * 1e3));
       } else {
         clearTimeout(totalTimeoutTimer);
         console.error("[AgentMoss] LLM call failed after all retries:", err.message);
@@ -7860,4 +7885,3 @@ export {
 //!   P6 mc-ltl-rules                 LTL 模型检测
 //!   P7 low-integrity-command-exec   低完整性命令执行
 //!   P8 sensitive-data-aggregation   敏感数据聚合外传
-//# sourceMappingURL=coordinator.js.map

package/dist/rules/l1_rules.json

@@ -373,10 +373,10 @@
       "reason": "检测到 curl -F 表单上传到外部地址（可能为数据外传，回环地址除外）"
     },
     {
-      "pattern": "[|]\\s*crontab\\b",
+      "pattern": "(?:@reboot|(?:[\\d*,\\-/]+\\s+){4}[\\d*,\\-/]+)\\s+(?:/tmp|/var/tmp|/dev/shm|/run/shm)/\\S+",
       "risk_level": "high",
-      "risk_type": "sensitive_action",
-      "reason": "检测到通过管道安装 crontab 定时任务（cron 后门/持久化）"
+      "risk_type": "persistence",
+      "reason": "检测到定时任务执行世界可写目录（/tmp、/var/tmp、/dev/shm）下的脚本（cron 持久化后门：任何用户可替换该脚本，重启/定时以任务属主身份执行）"
     }
   ],
   "injection_detection": [
@@ -719,6 +719,48 @@
       "deny_mode": "deny_write",
       "scope": "root"
     },
+    {
+      "path": "/etc/cron.hourly/",
+      "risk_level": "high",
+      "desc": "系统定时任务目录（小时级）——可放置脚本，重启/定时后以 root 执行",
+      "deny_mode": "deny_write",
+      "scope": "root"
+    },
+    {
+      "path": "/etc/cron.daily/",
+      "risk_level": "high",
+      "desc": "系统定时任务目录（日级）",
+      "deny_mode": "deny_write",
+      "scope": "root"
+    },
+    {
+      "path": "/etc/cron.weekly/",
+      "risk_level": "high",
+      "desc": "系统定时任务目录（周级）",
+      "deny_mode": "deny_write",
+      "scope": "root"
+    },
+    {
+      "path": "/etc/cron.monthly/",
+      "risk_level": "high",
+      "desc": "系统定时任务目录（月级）",
+      "deny_mode": "deny_write",
+      "scope": "root"
+    },
+    {
+      "path": "/etc/init.d/",
+      "risk_level": "high",
+      "desc": "SysV init 启动脚本目录——agent 写入脚本即持久化（重启后以 root 执行，不依赖 cron）",
+      "deny_mode": "deny_write",
+      "scope": "root"
+    },
+    {
+      "path": "/etc/rc*.d/",
+      "risk_level": "high",
+      "desc": "SysV init 运行级目录——指向 init.d 的符号链接，控制各运行级启动",
+      "deny_mode": "deny_write",
+      "scope": "root"
+    },
     {
       "path": "/var/spool/cron/",
       "risk_level": "high",
@@ -733,6 +775,20 @@
       "deny_mode": "deny_write",
       "scope": "root"
     },
+    {
+      "path": ".config/systemd/user/",
+      "risk_level": "high",
+      "desc": "用户级 systemd 服务目录——写 .service 并 enable 即用户级持久化（登录后运行）",
+      "deny_mode": "deny_write",
+      "scope": "home"
+    },
+    {
+      "path": ".config/autostart/",
+      "risk_level": "high",
+      "desc": "桌面自启动目录——写 .desktop 即登录自启动（Desktop Entry，持久化）",
+      "deny_mode": "deny_write",
+      "scope": "home"
+    },
     {
       "path": "/etc/ssh/sshd_config",
       "risk_level": "high",