@kenhkl/agent-moss 0.16.12 → 0.16.13

package/dist/engine/coordinator.js

@@ -394,6 +394,52 @@ var init_runtime_config_bridge = __esm({
   }
 });
 
+// src/infra/rules-mode.ts
+function truthy(name) {
+  return TRUTHY.has((process.env[name] || "").trim().toLowerCase());
+}
+function getRulesMode() {
+  if (cached !== null) return cached;
+  const raw = (process.env[ENV_RULES_MODE] || "").trim().toLowerCase();
+  if (raw) {
+    if (VALID_MODES.has(raw)) {
+      cached = raw;
+    } else {
+      console.error(
+        `[AgentMoss] ${ENV_RULES_MODE}=${JSON.stringify(raw)} \u975E\u6CD5\uFF08\u53EA\u652F\u6301 hot / cold / builtin\uFF09\uFF1B\u4E3A\u5B89\u5168\u8D77\u89C1\u6309 builtin\uFF08\u4EC5\u5185\u7F6E\u89C4\u5219\uFF09\u5904\u7406`
+      );
+      cached = "builtin";
+    }
+    return cached;
+  }
+  if (truthy(ENV_RULES_BUILTIN_ONLY)) cached = "builtin";
+  else if (truthy(ENV_DISABLE_RULE_HOT_RELOAD)) cached = "cold";
+  else cached = "hot";
+  return cached;
+}
+function isHotReloadEnabled() {
+  return getRulesMode() === "hot";
+}
+function isRuntimeConfigDisabled() {
+  return getRulesMode() !== "hot";
+}
+function isBuiltinOnly() {
+  return getRulesMode() === "builtin";
+}
+var ENV_RULES_MODE, ENV_RULES_BUILTIN_ONLY, ENV_DISABLE_RULE_HOT_RELOAD, TRUTHY, VALID_MODES, cached;
+var init_rules_mode = __esm({
+  "src/infra/rules-mode.ts"() {
+    "use strict";
+    init_esm_shims();
+    ENV_RULES_MODE = "AGENT_MOSS_RULES_MODE";
+    ENV_RULES_BUILTIN_ONLY = "AGENT_MOSS_RULES_BUILTIN_ONLY";
+    ENV_DISABLE_RULE_HOT_RELOAD = "AGENT_MOSS_DISABLE_RULE_HOT_RELOAD";
+    TRUTHY = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
+    VALID_MODES = /* @__PURE__ */ new Set(["hot", "cold", "builtin"]);
+    cached = null;
+  }
+});
+
 // src/infra/rules-loader.ts
 import { readFileSync as readFileSync2, existsSync, readdirSync, statSync } from "fs";
 import { resolve, dirname, join as join2 } from "path";
@@ -407,6 +453,7 @@ function parseDirEnv(envName) {
   return raw.split(/[,;]/).map((s) => s.trim()).filter(Boolean).map((s) => resolve(s));
 }
 function rulesDirs() {
+  if (isBuiltinOnly()) return [];
   const dirs = [];
   for (const env of RULES_DIR_ENVS) dirs.push(...parseDirEnv(env));
   dirs.push(resolve(dataRootDir(), "rules"));
@@ -420,10 +467,16 @@ function findRulesFile(name) {
   return null;
 }
 function loadJson(name) {
+  if (!isHotReloadEnabled()) {
+    const cached2 = frozenJsonCache.get(name);
+    if (cached2 !== void 0) return cached2;
+  }
   const p = findRulesFile(name);
   if (!p) return {};
   try {
-    return JSON.parse(readFileSync2(p, "utf-8")) || {};
+    const parsed = JSON.parse(readFileSync2(p, "utf-8")) || {};
+    if (!isHotReloadEnabled()) frozenJsonCache.set(name, parsed);
+    return parsed;
   } catch {
     return {};
   }
@@ -748,6 +801,7 @@ function scanRuleDirs() {
   return { override, extra, loaded, ignored };
 }
 function rulesCached() {
+  if (!isHotReloadEnabled() && _RULES_CACHE) return _RULES_CACHE;
   const dirs = rulesDirs();
   const sig = RULES_DIR_ENVS.map((e) => `${e}=${process.env[e] || ""}`).join("|") + "|" + dirs.join("|");
   const files = [];
@@ -783,17 +837,20 @@ function identicalToBuiltin(override) {
   return Object.keys(override).length > 0;
 }
 function loadOverrideRules() {
+  if (isBuiltinOnly()) return {};
   return rulesCached().override;
 }
 function loadExtraRules() {
+  if (isBuiltinOnly()) return {};
   return rulesCached().extra;
 }
-var __filename2, __dirname2, OVERRIDE_FILENAME, EXTRA_FILENAME, RULES_DIR_ENVS, RULES_DIR_CANDS, SCENARIO_LIST_KEYS, EXTRA_CATEGORIES, STRUCT_KEYS, EXTRA_FLAT_FIELD, _RULES_CACHE, warnedIgnored;
+var __filename2, __dirname2, OVERRIDE_FILENAME, EXTRA_FILENAME, RULES_DIR_ENVS, RULES_DIR_CANDS, frozenJsonCache, SCENARIO_LIST_KEYS, EXTRA_CATEGORIES, STRUCT_KEYS, EXTRA_FLAT_FIELD, _RULES_CACHE, warnedIgnored;
 var init_rules_loader = __esm({
   "src/infra/rules-loader.ts"() {
     "use strict";
     init_esm_shims();
     init_paths();
+    init_rules_mode();
     init_runtime_config_bridge();
     __filename2 = fileURLToPath2(import.meta.url);
     __dirname2 = dirname(__filename2);
@@ -816,6 +873,7 @@ var init_rules_loader = __esm({
       ];
       return cands.filter((c) => existsSync(c));
     })();
+    frozenJsonCache = /* @__PURE__ */ new Map();
     SCENARIO_LIST_KEYS = ["extra_command_patterns", "extra_injection_keywords", "extra_sensitive_paths"];
     EXTRA_CATEGORIES = {
       dangerous_commands: ["pattern"],
@@ -1898,6 +1956,7 @@ function userSkillsDir() {
   return resolve3(getDataRoot(), "agent_moss_skills");
 }
 function runtimeCustomSkillKeywords() {
+  if (isRuntimeConfigDisabled()) return {};
   try {
     const rt = runtimeConfigBridge.current?.loadRuntimeConfig?.();
     if (!rt) return {};
@@ -1915,6 +1974,7 @@ function runtimeCustomSkillKeywords() {
   }
 }
 function loadUserSkill(name) {
+  if (isRuntimeConfigDisabled()) return "";
   if (userSkillCache[name] !== void 0) return userSkillCache[name];
   try {
     const p = resolve3(userSkillsDir(), `${name}.md`);
@@ -1983,6 +2043,7 @@ var init_skill_loader = __esm({
     init_esm_shims();
     init_rules_loader();
     init_paths();
+    init_rules_mode();
     init_asset_dir();
     init_runtime_config_bridge();
     __filename3 = fileURLToPath3(import.meta.url);
@@ -2043,6 +2104,7 @@ __export(runtime_config_exports, {
   getEnabledScenarioExtensions: () => getEnabledScenarioExtensions,
   getEnvOverrides: () => getEnvOverrides,
   getProfileOrDetect: () => getProfileOrDetect,
+  getRuleSourceFingerprint: () => getRuleSourceFingerprint,
   getRuntimeConfigPath: () => getRuntimeConfigPath,
   getScenarioRules: () => getScenarioRules,
   hasRuntimeConfig: () => hasRuntimeConfig,
@@ -2077,7 +2139,22 @@ function getRuntimeConfigPath() {
   if (envPath) return envPath;
   return RUNTIME_CONFIG_PATH;
 }
+function getRuleSourceFingerprint() {
+  if (isRuntimeConfigDisabled()) return `mode:${getRulesMode()}`;
+  const p = getRuntimeConfigPath();
+  try {
+    const st = statSync2(p);
+    return `${p}|${st.mtimeMs}|${st.size}`;
+  } catch {
+    return `${p}|absent`;
+  }
+}
 function saveRuntimeConfig(config) {
+  if (isRuntimeConfigDisabled()) {
+    throw new Error(
+      `\u89C4\u5219\u6765\u6E90\u6A21\u5F0F\u4E3A ${getRulesMode()}\uFF08runtime \u914D\u7F6E\u5DF2\u7981\u7528\uFF09\uFF1A\u4FEE\u6539\u89C4\u5219\u4E0D\u4F1A\u751F\u6548\uFF0C\u8BF7\u5207\u6362\u89C4\u5219\u6765\u6E90\u6A21\u5F0F\u5E76\u91CD\u542F\u670D\u52A1\u3002`
+    );
+  }
   const p = getRuntimeConfigPath();
   const dir = p.substring(0, p.lastIndexOf("/"));
   if (dir && !existsSync5(dir)) mkdirSync(dir, { recursive: true });
@@ -2101,6 +2178,18 @@ function invalidateRuntimeConfigCache() {
   hasRuntimeConfigCache.clear();
 }
 function loadRuntimeConfig() {
+  if (isRuntimeConfigDisabled()) {
+    return {
+      version: 1,
+      layers: { ...DEFAULT_LAYERS },
+      L1_rules: {},
+      L2_rules: {},
+      L3_skills: {},
+      L2_2: {},
+      agent_rules: {},
+      scenario_rules: {}
+    };
+  }
   const p = getRuntimeConfigPath();
   if (!existsSync5(p)) {
     const seeded = mergeConfig({}, generateSourceDefaults());
@@ -2147,6 +2236,7 @@ function loadRuntimeConfig() {
 function isLayerEnabled(layerKey) {
   const disableKey = LAYER_DISABLE_ENV[layerKey];
   if (disableKey && process.env[disableKey] === "1") return false;
+  if (isRuntimeConfigDisabled()) return true;
   const runtime = loadRuntimeConfig();
   const layers = runtime.layers || {};
   if (layerKey in layers) return !!layers[layerKey];
@@ -2247,6 +2337,7 @@ function getEnabledL2SensitivePaths(runtime, osType) {
   });
 }
 function hasRuntimeConfig() {
+  if (isRuntimeConfigDisabled()) return false;
   const p = getRuntimeConfigPath();
   let key;
   try {
@@ -2255,8 +2346,8 @@ function hasRuntimeConfig() {
   } catch {
     return false;
   }
-  const cached = hasRuntimeConfigCache.get(key);
-  if (cached !== void 0) return cached;
+  const cached2 = hasRuntimeConfigCache.get(key);
+  if (cached2 !== void 0) return cached2;
   let ok = false;
   try {
     JSON.parse(readFileSync4(p, "utf-8"));
@@ -3136,6 +3227,11 @@ function deleteCustomRule(layer, category, ruleId) {
 }
 function addCustomSkill(skillId, category, keywords, content) {
   _validateSkillId(skillId);
+  if (isRuntimeConfigDisabled()) {
+    throw new Error(
+      `\u89C4\u5219\u6765\u6E90\u6A21\u5F0F\u4E3A ${getRulesMode()}\uFF08runtime \u914D\u7F6E\u5DF2\u7981\u7528\uFF09\uFF0C\u4E0D\u5141\u8BB8\u65B0\u589E\u81EA\u5B9A\u4E49 skill\u3002`
+    );
+  }
   const runtime = loadRuntimeConfig();
   const skillsDir = join3(getRuntimeConfigDir(), "agent_moss_skills");
   try {
@@ -3362,6 +3458,7 @@ var init_runtime_config = __esm({
     init_skill_loader();
     init_rules_loader();
     init_runtime_config_bridge();
+    init_rules_mode();
     __dirname4 = dirname3(fileURLToPath4(import.meta.url));
     ENV_RUNTIME_CONFIG_PATH = "AGENT_MOSS_RUNTIME_CONFIG_PATH";
     RUNTIME_CONFIG_DIR = runtimeDir();
@@ -3433,6 +3530,7 @@ __export(config_exports, {
   isPolicyGenEnabled: () => isPolicyGenEnabled,
   isPolicySaveEnabled: () => isPolicySaveEnabled,
   probeLLMConnection: () => probeLLMConnection,
+  reloadCustomRules: () => reloadCustomRules,
   updateLLMConfig: () => updateLLMConfig,
   userRuleVariantPattern: () => userRuleVariantPattern,
   wildcardToRegExp: () => wildcardToRegExp
@@ -3513,17 +3611,19 @@ function wildcardToRegExp(pattern) {
 }
 function loadCustomRules() {
   const rules = [];
-  try {
-    const raw = process.env.AGENT_MOSS_CUSTOM_RULES;
-    if (raw) {
-      const parsed = JSON.parse(raw);
-      if (Array.isArray(parsed)) {
-        for (const r of parsed) {
-          if (r && r.pattern && r.action) rules.push({ pattern: r.pattern, action: r.action, severity: r.severity || "high" });
+  if (!isBuiltinOnly()) {
+    try {
+      const raw = process.env.AGENT_MOSS_CUSTOM_RULES;
+      if (raw) {
+        const parsed = JSON.parse(raw);
+        if (Array.isArray(parsed)) {
+          for (const r of parsed) {
+            if (r && r.pattern && r.action) rules.push({ pattern: r.pattern, action: r.action, severity: r.severity || "high" });
+          }
         }
       }
+    } catch {
     }
-  } catch {
   }
   for (const rulesPath of USER_RULES_PATHS) {
     try {
@@ -3552,6 +3652,9 @@ function userRuleVariantPattern(pattern) {
   }
   return null;
 }
+function reloadCustomRules() {
+  customRules = loadCustomRules();
+}
 function getLLMConfig() {
   return llmConfig;
 }
@@ -3639,6 +3742,7 @@ function layerEnabledOrDefault(key) {
   }
 }
 function isBrainEnabled() {
+  if (isRuntimeConfigDisabled()) return false;
   return getAgentMossSetting("AGENT_MOSS_BRAIN_ENABLED", "") === "1";
 }
 function getAgentMossSetting(key, def = "") {
@@ -3680,6 +3784,7 @@ var init_config = __esm({
     init_esm_shims();
     init_paths();
     init_runtime_config();
+    init_rules_mode();
     __configModuleDir = (() => {
       try {
         return path2.dirname(fileURLToPath5(import.meta.url));
@@ -3736,7 +3841,9 @@ function resolveAgentsDir() {
 }
 function getAgentExtensions(agentId) {
   if (!agentId) return null;
-  if (cache.has(agentId)) return cache.get(agentId) ?? null;
+  const fp = getRuleSourceFingerprint();
+  const cached2 = cache.get(agentId);
+  if (cached2 && cached2.fp === fp) return cached2.ext;
   let ext = null;
   try {
     if (hasRuntimeConfig()) {
@@ -3748,7 +3855,7 @@ function getAgentExtensions(agentId) {
     const agentsDir = resolveAgentsDir();
     const rulesFile = resolve4(agentsDir, agentId, "rules.json");
     if (!existsSync6(rulesFile)) {
-      cache.set(agentId, null);
+      cache.set(agentId, { fp, ext: null });
       return null;
     }
     try {
@@ -3756,16 +3863,16 @@ function getAgentExtensions(agentId) {
       ext = JSON.parse(raw);
       if (!ext.agent_id) {
         console.warn(`[AgentMoss agents] rules.json \u7F3A\u5C11 agent_id \u5B57\u6BB5: ${rulesFile}`);
-        cache.set(agentId, null);
+        cache.set(agentId, { fp, ext: null });
         return null;
       }
     } catch (e) {
       console.error(`[AgentMoss agents] \u52A0\u8F7D agent ${agentId} rules.json \u5931\u8D25:`, e.message);
-      cache.set(agentId, null);
+      cache.set(agentId, { fp, ext: null });
       return null;
     }
   }
-  cache.set(agentId, ext);
+  cache.set(agentId, { fp, ext });
   console.error(
     `[AgentMoss agents] \u52A0\u8F7D agent ${agentId} \u5B9A\u5236\u89C4\u5219: ${ext.extra_command_patterns?.length ?? 0} cmd patterns, ${ext.extra_injection_keywords?.length ?? 0} injection keywords, ${ext.extra_sensitive_paths?.length ?? 0} sensitive paths, ${ext.builtin_safe_skills?.length ?? 0} builtin safe skills, ${ext.builtin_safe_action_types?.length ?? 0} builtin safe action types`
   );
@@ -3811,7 +3918,9 @@ function resolveScenariosDir() {
 }
 function getScenarioExtensions(scenarioId) {
   if (!scenarioId) return null;
-  if (cache2.has(scenarioId)) return cache2.get(scenarioId) ?? null;
+  const fp = getRuleSourceFingerprint();
+  const cached2 = cache2.get(scenarioId);
+  if (cached2 && cached2.fp === fp) return cached2.ext;
   let ext = null;
   let overrideHit = null;
   try {
@@ -3835,7 +3944,7 @@ function getScenarioExtensions(scenarioId) {
       );
     }
     if (!existsSync7(rulesFile)) {
-      cache2.set(scenarioId, null);
+      cache2.set(scenarioId, { fp, ext: null });
       return null;
     }
     try {
@@ -3844,7 +3953,7 @@ function getScenarioExtensions(scenarioId) {
       const id = data.scenario_id || data.agent_id || "";
       if (!id) {
         console.warn(`[AgentMoss scenarios] rules.json \u7F3A\u5C11 scenario_id \u5B57\u6BB5: ${rulesFile}`);
-        cache2.set(scenarioId, null);
+        cache2.set(scenarioId, { fp, ext: null });
         return null;
       }
       ext = {
@@ -3859,11 +3968,11 @@ function getScenarioExtensions(scenarioId) {
       };
     } catch (e) {
       console.error(`[AgentMoss scenarios] \u52A0\u8F7D\u573A\u666F ${scenarioId} rules.json \u5931\u8D25:`, e.message);
-      cache2.set(scenarioId, null);
+      cache2.set(scenarioId, { fp, ext: null });
       return null;
     }
   }
-  cache2.set(scenarioId, ext);
+  cache2.set(scenarioId, { fp, ext });
   console.error(
     `[AgentMoss scenarios] \u52A0\u8F7D\u573A\u666F ${scenarioId} \u5B9A\u5236\u89C4\u5219: ${ext.extra_command_patterns?.length ?? 0} cmd patterns, ${ext.extra_injection_keywords?.length ?? 0} injection keywords, ${ext.extra_sensitive_paths?.length ?? 0} sensitive paths`
   );
@@ -7184,10 +7293,10 @@ async function runLLMAnalysis(input, previous) {
   const config = input.llmConfig?.apiKey ? { ...globalConfig, ...input.llmConfig } : globalConfig;
   const rawDetail = input.aNext.actionDetail.replace(/^terminal-\w+:\s*command=([^,]+).*/, "$1").trim();
   const cacheKey = `${input.aNext.actionType}:${rawDetail || input.aNext.actionDetail}`;
-  const cached = llmCache.get(cacheKey);
-  if (cached) {
+  const cached2 = llmCache.get(cacheKey);
+  if (cached2) {
     console.log("[AgentMoss] LLM cache hit");
-    return cached;
+    return cached2;
   }
   const matchedSkills = matchSkills(input.aNext.actionType, input.aNext.actionDetail, input.reason);
   const templates = loadTemplates();