@lingxiao-office/sdk 1.0.0

package/dist/core/PermissionSystem.js

@@ -0,0 +1,380 @@
+import { isAlwaysAllowedToolByMetadata, isNetworkToolByMetadata, isPrivilegedToolByMetadata, isWorkspaceModifyingTool } from '../contracts/types/ToolMetadata.js';
+import { getConfigValue } from '../config.js';
+import { isHardenedMode } from './HardeningPolicy.js';
+export const PERMISSION_MODES = ['strict', 'dev', 'networked', 'yolo'];
+const PERMISSION_MODE_SET = new Set(PERMISSION_MODES);
+export function isPermissionMode(value) {
+    return typeof value === 'string' && PERMISSION_MODE_SET.has(value);
+}
+export function getDefaultToolPermissionContext() {
+    const configuredMode = getConfigValue('security.permission_mode');
+    return {
+        mode: isPermissionMode(configuredMode) ? configuredMode : 'yolo',
+        allowedHosts: [],
+        sandboxBackend: isPermissionMode(configuredMode) && configuredMode !== 'yolo' ? 'bubblewrap' : 'app-guard',
+        allowBackendFallback: true,
+        allowRules: [],
+        denyRules: [],
+        askRules: [],
+    };
+}
+export function getLeaderDefaultPermissionContext() {
+    return getDefaultToolPermissionContext();
+}
+export function normalizeToolPermissionContext(raw) {
+    if (!raw || typeof raw !== 'object') {
+        return getDefaultToolPermissionContext();
+    }
+    const candidate = raw;
+    return {
+        mode: isPermissionMode(candidate.mode) ? candidate.mode : 'yolo',
+        allowedHosts: Array.isArray(candidate.allowedHosts)
+            ? candidate.allowedHosts.filter((value) => typeof value === 'string')
+            : [],
+        sandboxBackend: candidate.sandboxBackend === 'app-guard' || candidate.sandboxBackend === 'bubblewrap'
+            ? candidate.sandboxBackend
+            : 'app-guard',
+        allowBackendFallback: candidate.allowBackendFallback === true,
+        allowRules: Array.isArray(candidate.allowRules)
+            ? candidate.allowRules.filter((value) => !!value && typeof value === 'object' && typeof value.toolName === 'string')
+            : [],
+        denyRules: Array.isArray(candidate.denyRules)
+            ? candidate.denyRules.filter((value) => !!value && typeof value === 'object' && typeof value.toolName === 'string')
+            : [],
+        askRules: Array.isArray(candidate.askRules)
+            ? candidate.askRules.filter((value) => !!value && typeof value === 'object' && typeof value.toolName === 'string')
+            : [],
+    };
+}
+function mergeUniqueRules(current, next) {
+    const seen = new Set();
+    const merged = [];
+    for (const rule of [...current, ...next]) {
+        const key = `${rule.toolName}::${rule.pattern || ''}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        merged.push(rule);
+    }
+    return merged;
+}
+function removeRules(current, removing) {
+    const toRemove = new Set(removing.map((rule) => `${rule.toolName}::${rule.pattern || ''}`));
+    return current.filter((rule) => !toRemove.has(`${rule.toolName}::${rule.pattern || ''}`));
+}
+export function applyPermissionUpdates(context, updates) {
+    let next = normalizeToolPermissionContext(context);
+    for (const update of updates) {
+        switch (update.type) {
+            case 'setMode':
+                next = { ...next, mode: update.mode };
+                break;
+            case 'addHosts':
+                next = {
+                    ...next,
+                    allowedHosts: Array.from(new Set([...next.allowedHosts, ...update.hosts])),
+                };
+                break;
+            case 'replaceHosts':
+                next = {
+                    ...next,
+                    allowedHosts: Array.from(new Set(update.hosts)),
+                };
+                break;
+            case 'setSandboxBackend':
+                next = {
+                    ...next,
+                    sandboxBackend: update.backend,
+                    allowBackendFallback: update.allowFallback === true,
+                };
+                break;
+            case 'addRules': {
+                const targetKey = update.behavior === 'allow'
+                    ? 'allowRules'
+                    : update.behavior === 'deny'
+                        ? 'denyRules'
+                        : 'askRules';
+                next = {
+                    ...next,
+                    [targetKey]: mergeUniqueRules(next[targetKey], update.rules),
+                };
+                break;
+            }
+            case 'replaceRules': {
+                const targetKey = update.behavior === 'allow'
+                    ? 'allowRules'
+                    : update.behavior === 'deny'
+                        ? 'denyRules'
+                        : 'askRules';
+                next = {
+                    ...next,
+                    [targetKey]: mergeUniqueRules([], update.rules),
+                };
+                break;
+            }
+            case 'removeRules': {
+                const targetKey = update.behavior === 'allow'
+                    ? 'allowRules'
+                    : update.behavior === 'deny'
+                        ? 'denyRules'
+                        : 'askRules';
+                next = {
+                    ...next,
+                    [targetKey]: removeRules(next[targetKey], update.rules),
+                };
+                break;
+            }
+        }
+    }
+    return next;
+}
+export function summarizePermissionContext(context) {
+    return [
+        `mode=${context.mode}`,
+        `sandbox=${context.sandboxBackend}${context.allowBackendFallback ? ' (fallback)' : ''}`,
+        `hosts=${context.allowedHosts.length > 0 ? context.allowedHosts.join(', ') : '(none)'}`,
+        `rules=allow:${context.allowRules.length}/deny:${context.denyRules.length}/ask:${context.askRules.length}`,
+    ].join(' · ');
+}
+export function getPermissionAccessLabel(mode) {
+    return mode === 'strict'
+        ? 'strict'
+        : mode === 'yolo'
+            ? 'yolo'
+            : mode === 'networked'
+                ? 'approved'
+                : 'standard';
+}
+export function summarizePermissionContextForDisplay(context) {
+    return [
+        `access=${getPermissionAccessLabel(context.mode)}`,
+        `sandbox=${context.sandboxBackend}${context.allowBackendFallback ? ' (fallback)' : ''}`,
+        `rules=allow:${context.allowRules.length}/deny:${context.denyRules.length}/ask:${context.askRules.length}`,
+    ].join(' · ');
+}
+export function getToolPermissionContextFromToolContext(context) {
+    return normalizeToolPermissionContext(context?.permissionContext);
+}
+export function isWriteTool(name) {
+    return isWorkspaceModifyingTool(name);
+}
+export function isNetworkTool(name) {
+    return isNetworkToolByMetadata(name);
+}
+export function isPrivilegedTool(name) {
+    return isPrivilegedToolByMetadata(name) || isExecutionToolWithNetworkCapability(name);
+}
+/**
+ * Tools that can perform network operations indirectly (via subprocess).
+ * These are subject to network governance via sandbox or code analysis,
+ * but are not gated at the permission evaluation layer like pure network tools.
+ */
+export function isExecutionToolWithNetworkCapability(name) {
+    return ['shell', 'python_exec'].includes(name);
+}
+export function isAlwaysAllowedTool(name) {
+    return isAlwaysAllowedToolByMetadata(name);
+}
+function splitShellSegments(command) {
+    const segments = [];
+    let current = '';
+    let quote = null;
+    let escape = false;
+    for (let i = 0; i < command.length; i++) {
+        const ch = command[i];
+        const next = command[i + 1];
+        if (escape) {
+            current += ch;
+            escape = false;
+            continue;
+        }
+        if (ch === '\\') {
+            current += ch;
+            escape = true;
+            continue;
+        }
+        if (quote) {
+            current += ch;
+            if (ch === quote) {
+                quote = null;
+            }
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            current += ch;
+            quote = ch;
+            continue;
+        }
+        if (ch === ';') {
+            if (current.trim())
+                segments.push(current.trim());
+            current = '';
+            continue;
+        }
+        if ((ch === '|' && next === '|') || (ch === '&' && next === '&')) {
+            if (current.trim())
+                segments.push(current.trim());
+            current = '';
+            i += 1;
+            continue;
+        }
+        if (ch === '|') {
+            if (current.trim())
+                segments.push(current.trim());
+            current = '';
+            continue;
+        }
+        current += ch;
+    }
+    if (current.trim()) {
+        segments.push(current.trim());
+    }
+    return segments;
+}
+function stripShellWrappers(segment) {
+    const tokens = segment.trim().split(/\s+/).filter(Boolean);
+    let index = 0;
+    while (index < tokens.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[index])) {
+        index += 1;
+    }
+    while (index < tokens.length) {
+        const token = tokens[index];
+        if (token === 'env' || token === 'command' || token === 'builtin' || token === 'noglob') {
+            index += 1;
+            continue;
+        }
+        if (token === 'time') {
+            index += 1;
+            continue;
+        }
+        if (token === 'sudo') {
+            index += 1;
+            while (index < tokens.length && tokens[index].startsWith('-')) {
+                const option = tokens[index];
+                index += 1;
+                if (['-u', '-g', '-h', '-p'].includes(option) && index < tokens.length) {
+                    index += 1;
+                }
+            }
+            continue;
+        }
+        break;
+    }
+    return tokens.slice(index).join(' ').trim();
+}
+export function extractPermissionSubjects(toolName, args) {
+    if (!args || typeof args !== 'object') {
+        return [''];
+    }
+    const raw = args;
+    switch (toolName) {
+        case 'shell': {
+            const command = typeof raw.command === 'string' ? raw.command : '';
+            if (!command) {
+                return [''];
+            }
+            const candidates = new Set();
+            const segments = splitShellSegments(command);
+            for (const segment of segments) {
+                const normalized = stripShellWrappers(segment);
+                if (!normalized)
+                    continue;
+                const tokens = normalized.split(/\s+/).filter(Boolean);
+                candidates.add(normalized);
+                if (tokens.length >= 1)
+                    candidates.add(tokens.slice(0, 1).join(' '));
+                if (tokens.length >= 2)
+                    candidates.add(tokens.slice(0, 2).join(' '));
+                if (tokens.length >= 3)
+                    candidates.add(tokens.slice(0, 3).join(' '));
+            }
+            return candidates.size > 0 ? Array.from(candidates) : [''];
+        }
+        case 'http_request':
+            return [typeof raw.url === 'string' ? raw.url : ''];
+        case 'file_read':
+        case 'structured_patch':
+        case 'file_create':
+            return [typeof raw.path === 'string' ? raw.path : ''];
+        default:
+            return [''];
+    }
+}
+function wildcardToRegExp(pattern) {
+    const escaped = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*/g, '.*')
+        .replace(/\?/g, '.');
+    return new RegExp(`^${escaped}$`, 'i');
+}
+function ruleMatches(rule, toolName, subjects) {
+    if (rule.toolName !== '*' && rule.toolName !== toolName) {
+        return false;
+    }
+    if (!rule.pattern || rule.pattern.trim() === '') {
+        return true;
+    }
+    const pattern = rule.pattern.trim();
+    const matcher = wildcardToRegExp(pattern);
+    return subjects.some((subject) => subject === pattern || subject.includes(pattern) || matcher.test(subject));
+}
+function getUrlHost(args) {
+    if (!args || typeof args !== 'object')
+        return null;
+    const url = args.url;
+    if (typeof url !== 'string')
+        return null;
+    try {
+        return new URL(url).hostname.toLowerCase();
+    }
+    catch { /* expected: operation may fail gracefully */
+        return null;
+    }
+}
+function hostAllowed(host, allowedHosts) {
+    if (!host)
+        return false;
+    const normalized = host.replace(/^www\./, '').toLowerCase();
+    return allowedHosts.some((allowedHost) => {
+        const allowed = allowedHost.replace(/^www\./, '').toLowerCase();
+        return normalized === allowed || normalized.endsWith(`.${allowed}`);
+    });
+}
+export function evaluateToolPermission(toolName, args, context) {
+    const subjects = extractPermissionSubjects(toolName, args);
+    if (context.denyRules.some((rule) => ruleMatches(rule, toolName, subjects))) {
+        return { allowed: false, reason: `deny rule matched for ${toolName}` };
+    }
+    if (context.allowRules.some((rule) => ruleMatches(rule, toolName, subjects))) {
+        return { allowed: true };
+    }
+    if (context.askRules.some((rule) => ruleMatches(rule, toolName, subjects))) {
+        return { allowed: false, reason: `approval required by ask rule for ${toolName}` };
+    }
+    if (context.mode === 'yolo') {
+        return { allowed: true };
+    }
+    if (isAlwaysAllowedTool(toolName)) {
+        return { allowed: true };
+    }
+    if (isNetworkTool(toolName)) {
+        if (context.mode !== 'networked') {
+            return { allowed: false, reason: `网络工具 ${toolName} 在 ${context.mode} 模式下需要审批` };
+        }
+        if (!hostAllowed(getUrlHost(args), context.allowedHosts)) {
+            return { allowed: false, reason: `目标主机不在允许列表: ${getUrlHost(args) || '(invalid url)'}` };
+        }
+        return { allowed: true };
+    }
+    if (isHardenedMode() && isExecutionToolWithNetworkCapability(toolName) && context.mode !== 'networked') {
+        return {
+            allowed: false,
+            reason: `执行工具 ${toolName} 在加固模式下需要 networked 模式审批（防子进程绕过网络治理）`,
+        };
+    }
+    if (context.mode === 'strict' && isPrivilegedTool(toolName)) {
+        return { allowed: false, reason: `高权限工具 ${toolName} 在 strict 模式下需要审批` };
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=PermissionSystem.js.map

package/dist/core/PermissionSystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionSystem.js","sourceRoot":"","sources":["../../src/core/PermissionSystem.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAClK,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AAKhF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,gBAAgB,CAAC,CAAC;AAE9D,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AA+DD,MAAM,UAAU,+BAA+B;IAC7C,MAAM,cAAc,GAAG,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAClE,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;QAChE,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,gBAAgB,CAAC,cAAc,CAAC,IAAI,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW;QAC1G,oBAAoB,EAAE,IAAI;QAC1B,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO,+BAA+B,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAAY;IAEZ,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,+BAA+B,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,SAAS,GAAG,GAAqC,CAAC;IACxD,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAChE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;YACjD,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACtF,CAAC,CAAC,EAAE;QACN,cAAc,EACZ,SAAS,CAAC,cAAc,KAAK,WAAW,IAAI,SAAS,CAAC,cAAc,KAAK,YAAY;YACnF,CAAC,CAAC,SAAS,CAAC,cAAc;YAC1B,CAAC,CAAC,WAAW;QACjB,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,KAAK,IAAI;QAC7D,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAA2B,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAAwB,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACjK,CAAC,CAAC,EAAE;QACN,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAA2B,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAAwB,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAChK,CAAC,CAAC,EAAE;QACN,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;YACzC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAA2B,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAAwB,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC/J,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAyB,EAAE,IAAsB;IACzE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,OAAyB,EAAE,QAA0B;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAA8B,EAC9B,OAA2B;IAE3B,IAAI,IAAI,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,SAAS;gBACZ,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBACtC,MAAM;YACR,KAAK,UAAU;gBACb,IAAI,GAAG;oBACL,GAAG,IAAI;oBACP,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;iBAC3E,CAAC;gBACF,MAAM;YACR,KAAK,cAAc;gBACjB,IAAI,GAAG;oBACL,GAAG,IAAI;oBACP,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;iBAChD,CAAC;gBACF,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,GAAG;oBACL,GAAG,IAAI;oBACP,cAAc,EAAE,MAAM,CAAC,OAAO;oBAC9B,oBAAoB,EAAE,MAAM,CAAC,aAAa,KAAK,IAAI;iBACpD,CAAC;gBACF,MAAM;YACR,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,KAAK,OAAO;oBACzB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU,CAAC;gBACnB,IAAI,GAAG;oBACL,GAAG,IAAI;oBACP,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;iBAC7D,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,KAAK,OAAO;oBACzB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU,CAAC;gBACnB,IAAI,GAAG;oBACL,GAAG,IAAI;oBACP,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC;iBAChD,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,KAAK,OAAO;oBACzB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU,CAAC;gBACnB,IAAI,GAAG;oBACL,GAAG,IAAI;oBACP,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;iBACxD,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAA8B;IACvE,OAAO;QACL,QAAQ,OAAO,CAAC,IAAI,EAAE;QACtB,WAAW,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;QACvF,SAAS,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvF,eAAe,OAAO,CAAC,UAAU,CAAC,MAAM,SAAS,OAAO,CAAC,SAAS,CAAC,MAAM,QAAQ,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE;KAC3G,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAoB;IAC3D,OAAO,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,KAAK,MAAM;YACf,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,KAAK,WAAW;gBACpB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,UAAU,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,OAA8B;IACjF,OAAO;QACL,UAAU,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAClD,WAAW,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;QACvF,eAAe,OAAO,CAAC,UAAU,CAAC,MAAM,SAAS,OAAO,CAAC,SAAS,CAAC,MAAM,QAAQ,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE;KAC3G,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,OAAqB;IAErB,OAAO,8BAA8B,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,oCAAoC,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAAC,IAAY;IAC/D,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;YACd,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,IAAI,EAAE,CAAC;YACd,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBACjB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,IAAI,EAAE,CAAC;YACd,KAAK,GAAG,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,IAAI,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACjE,IAAI,OAAO,CAAC,IAAI,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,GAAG,EAAE,CAAC;YACb,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,IAAI,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/E,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxF,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7B,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBACvE,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM;IACR,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,IAAa;IACvE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC7C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAC/C,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvD,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC3B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrE,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrE,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,KAAK,WAAW,CAAC;QACjB,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa;YAChB,OAAO,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxD;YACE,OAAO,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,IAAoB,EAAE,QAAgB,EAAE,QAAkB;IAC7E,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,GAAG,GAAI,IAAgC,CAAC,GAAG,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC,CAAA,6CAA6C;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB,EAAE,YAAsB;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,OAAO,UAAU,KAAK,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,IAAa,EACb,OAA8B;IAE9B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE3D,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,QAAQ,EAAE,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,QAAQ,EAAE,EAAE,CAAC;IACrF,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,QAAQ,MAAM,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,EAAE,CAAC;QAC1F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,cAAc,EAAE,IAAI,oCAAoC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACvG,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,QAAQ,QAAQ,sCAAsC;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,QAAQ,mBAAmB,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/core/PhasePolicy.d.ts

@@ -0,0 +1,10 @@
+import type { ExecutionPhase, Interruptibility } from './ExecutionLease.js';
+export interface PhasePolicyEntry {
+    defaultTtlMs: number;
+    interruptibility: Interruptibility;
+    renewalAllowed: boolean;
+}
+export declare const PHASE_POLICIES: Record<ExecutionPhase, PhasePolicyEntry>;
+export declare function getPhaseTtl(phase: ExecutionPhase, override?: number): number;
+export declare function getPhaseInterruptibility(phase: ExecutionPhase): Interruptibility;
+//# sourceMappingURL=PhasePolicy.d.ts.map

package/dist/core/PhasePolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PhasePolicy.d.ts","sourceRoot":"","sources":["../../src/core/PhasePolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAOnE,CAAC;AAEF,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,gBAAgB,CAEhF"}

package/dist/core/PhasePolicy.js

@@ -0,0 +1,15 @@
+export const PHASE_POLICIES = {
+    idle: { defaultTtlMs: Infinity, interruptibility: 'immediate', renewalAllowed: false },
+    llm_call: { defaultTtlMs: 120_000, interruptibility: 'not_interruptible', renewalAllowed: true },
+    tool_execution: { defaultTtlMs: 300_000, interruptibility: 'safe_point', renewalAllowed: true },
+    tool_quiet: { defaultTtlMs: 5_000, interruptibility: 'immediate', renewalAllowed: false },
+    recovering: { defaultTtlMs: 60_000, interruptibility: 'immediate', renewalAllowed: false },
+    waiting_for_user: { defaultTtlMs: Infinity, interruptibility: 'immediate', renewalAllowed: false },
+};
+export function getPhaseTtl(phase, override) {
+    return override ?? PHASE_POLICIES[phase].defaultTtlMs;
+}
+export function getPhaseInterruptibility(phase) {
+    return PHASE_POLICIES[phase].interruptibility;
+}
+//# sourceMappingURL=PhasePolicy.js.map

package/dist/core/PhasePolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PhasePolicy.js","sourceRoot":"","sources":["../../src/core/PhasePolicy.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,cAAc,GAA6C;IACtE,IAAI,EAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAS,cAAc,EAAE,KAAK,EAAE;IACzG,QAAQ,EAAU,EAAE,YAAY,EAAE,OAAO,EAAG,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,IAAI,EAAE;IACzG,cAAc,EAAI,EAAE,YAAY,EAAE,OAAO,EAAG,gBAAgB,EAAE,YAAY,EAAS,cAAc,EAAE,IAAI,EAAE;IACzG,UAAU,EAAQ,EAAE,YAAY,EAAE,KAAK,EAAK,gBAAgB,EAAE,WAAW,EAAU,cAAc,EAAE,KAAK,EAAE;IAC1G,UAAU,EAAQ,EAAE,YAAY,EAAE,MAAM,EAAI,gBAAgB,EAAE,WAAW,EAAU,cAAc,EAAE,KAAK,EAAE;IAC1G,gBAAgB,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAU,cAAc,EAAE,KAAK,EAAE;CAC3G,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,KAAqB,EAAE,QAAiB;IAClE,OAAO,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAqB;IAC5D,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC;AAChD,CAAC"}

package/dist/core/PidRegistry.d.ts

@@ -0,0 +1,58 @@
+/**
+ * PidRegistry — 进程注册表
+ *
+ * 每个凌霄进程启动时在 ~/.lingxiao/sessions/ 注册一个 JSON 文件。
+ * 文件名 = PID。通过 kill -0 检测进程存活。
+ *
+ * P1 修复（2026-05-22）：仅靠 process.kill(pid, 0) 判断存活在 PID 重用场景下不安全 —
+ * 进程异常死亡未来得及 unregister，OS 把同 PID 分配给无关进程后，listAll 会把 stale 记录
+ * 当成活 daemon 返回，导致 status 显示活的、新 daemon 因冲突拒绝拉起。
+ *
+ * 现在的策略：
+ *   1. register 时记录 startedAt（毫秒精度）。
+ *   2. isAlive 调用 isSamePidEntry：先 kill(pid,0) 验存活，再读进程真实启动时间
+ *      （readProcessStartMs —— 跨平台：Linux /proc、macOS ps、Windows PowerShell），
+ *      与 entry.startedAt 比对，差距 > 5s 视为 PID 重用，记为 stale。
+ *   3. 本注册表同时承载 worker / external-agent 子进程条目；isOrphanedEntry 通过
+ *      parentPid + parentStartedAt 判定「父进程已死」的真孤儿，供 killOrphan* 回收。
+ */
+export interface PidEntry {
+    pid: number;
+    sessionId: string;
+    cwd: string;
+    startedAt: number;
+    kind: 'interactive' | 'bg' | 'daemon' | 'external-agent' | 'worker';
+    url?: string;
+    name?: string;
+    logPath?: string;
+    hostname?: string;
+    agentId?: string;
+    agentName?: string;
+    backend?: 'worker_process' | 'claude' | 'codex';
+    taskId?: string;
+    externalSessionId?: string;
+    /** 派生该子进程的凌霄父进程 PID（worker / external-agent 条目）。 */
+    parentPid?: number;
+    /** parentPid 对应进程的真实启动时间（epoch ms），用于检测父进程 PID 重用。 */
+    parentStartedAt?: number;
+}
+/**
+ * 判定一个子进程条目（worker / external-agent）是否已成为「真孤儿」——
+ * 即派生它的凌霄父进程已退出（或父 PID 被无关进程重用）。
+ *
+ * - 无 parentPid 记录（旧版本遗留条目）：保守视为孤儿，交由回收。
+ * - parentPid 已不存活：真孤儿。
+ * - parentPid 仍存活但无法读取其启动时间复核：保守视为非孤儿（不误杀）。
+ * - parentPid 仍存活但启动时间已变（PID 被重用）：原父已死，视为孤儿。
+ *
+ * 这是确定性、跨平台的孤儿判定 —— 不依赖 /proc environ 扫描，全平台一致。
+ */
+export declare function isOrphanedEntry(entry: PidEntry): boolean;
+export declare const PidRegistry: {
+    register(entry: PidEntry): void;
+    unregister(pid: number): void;
+    listAll(): PidEntry[];
+    findByName(name: string): PidEntry | undefined;
+    findByPid(pid: number): PidEntry | undefined;
+};
+//# sourceMappingURL=PidRegistry.d.ts.map

package/dist/core/PidRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PidRegistry.d.ts","sourceRoot":"","sources":["../../src/core/PidRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAUH,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,QAAQ,GAAG,gBAAgB,GAAG,QAAQ,CAAC;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,gBAAgB,GAAG,QAAQ,GAAG,OAAO,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAiCD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAOxD;AAED,eAAO,MAAM,WAAW;oBACN,QAAQ,GAAG,IAAI;oBASf,MAAM,GAAG,IAAI;eASlB,QAAQ,EAAE;qBAyBJ,MAAM,GAAG,QAAQ,GAAG,SAAS;mBAI/B,MAAM,GAAG,QAAQ,GAAG,SAAS;CAgB7C,CAAC"}

package/dist/core/PidRegistry.js

@@ -0,0 +1,152 @@
+/**
+ * PidRegistry — 进程注册表
+ *
+ * 每个凌霄进程启动时在 ~/.lingxiao/sessions/ 注册一个 JSON 文件。
+ * 文件名 = PID。通过 kill -0 检测进程存活。
+ *
+ * P1 修复（2026-05-22）：仅靠 process.kill(pid, 0) 判断存活在 PID 重用场景下不安全 —
+ * 进程异常死亡未来得及 unregister，OS 把同 PID 分配给无关进程后，listAll 会把 stale 记录
+ * 当成活 daemon 返回，导致 status 显示活的、新 daemon 因冲突拒绝拉起。
+ *
+ * 现在的策略：
+ *   1. register 时记录 startedAt（毫秒精度）。
+ *   2. isAlive 调用 isSamePidEntry：先 kill(pid,0) 验存活，再读进程真实启动时间
+ *      （readProcessStartMs —— 跨平台：Linux /proc、macOS ps、Windows PowerShell），
+ *      与 entry.startedAt 比对，差距 > 5s 视为 PID 重用，记为 stale。
+ *   3. 本注册表同时承载 worker / external-agent 子进程条目；isOrphanedEntry 通过
+ *      parentPid + parentStartedAt 判定「父进程已死」的真孤儿，供 killOrphan* 回收。
+ */
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import * as os from 'node:os';
+import { CONFIG_DIR } from '../config.js';
+import { processExists, readProcessStartMs } from '../utils/platform.js';
+const SESSIONS_DIR = join(CONFIG_DIR, 'sessions');
+function ensureDir() {
+    if (!existsSync(SESSIONS_DIR))
+        mkdirSync(SESSIONS_DIR, { recursive: true });
+}
+function entryPath(pid) {
+    return join(SESSIONS_DIR, `${pid}.json`);
+}
+/** 同主机存活检查（不区分 PID 重用） */
+function isAlive(pid) {
+    return processExists(pid);
+}
+/**
+ * 校验注册表条目对应的进程是否仍是 register 时那个进程（防 PID 重用）。
+ *
+ * @returns true 仍存活且是同一进程；false 已死或被 PID 重用
+ */
+function isSamePidEntry(entry) {
+    if (!isAlive(entry.pid))
+        return false;
+    // 跨主机记录无法本地校验，保守视为活的（不删别人的注册表）
+    if (entry.hostname && entry.hostname !== os.hostname())
+        return true;
+    const procStartMs = readProcessStartMs(entry.pid);
+    if (procStartMs === null) {
+        // 无法读取进程启动时间（极少数无探测手段的环境）：退化为 kill -0 结果（已在上面通过）
+        return true;
+    }
+    // 5 秒容差：探测抖动存在，但 PID 重用必然秒级以上差异。
+    return Math.abs(procStartMs - entry.startedAt) < 5000;
+}
+/**
+ * 判定一个子进程条目（worker / external-agent）是否已成为「真孤儿」——
+ * 即派生它的凌霄父进程已退出（或父 PID 被无关进程重用）。
+ *
+ * - 无 parentPid 记录（旧版本遗留条目）：保守视为孤儿，交由回收。
+ * - parentPid 已不存活：真孤儿。
+ * - parentPid 仍存活但无法读取其启动时间复核：保守视为非孤儿（不误杀）。
+ * - parentPid 仍存活但启动时间已变（PID 被重用）：原父已死，视为孤儿。
+ *
+ * 这是确定性、跨平台的孤儿判定 —— 不依赖 /proc environ 扫描，全平台一致。
+ */
+export function isOrphanedEntry(entry) {
+    if (!entry.parentPid)
+        return true;
+    if (!isAlive(entry.parentPid))
+        return true;
+    if (entry.parentStartedAt == null)
+        return false;
+    const curParentStart = readProcessStartMs(entry.parentPid);
+    if (curParentStart == null)
+        return false;
+    return Math.abs(curParentStart - entry.parentStartedAt) >= 5000;
+}
+export const PidRegistry = {
+    register(entry) {
+        ensureDir();
+        try {
+            writeFileSync(entryPath(entry.pid), JSON.stringify(entry, null, 2), 'utf-8');
+        }
+        catch {
+            // Non-critical — don't crash the process
+        }
+    },
+    unregister(pid) {
+        try {
+            const p = entryPath(pid);
+            if (existsSync(p))
+                unlinkSync(p);
+        }
+        catch {
+            // Non-critical
+        }
+    },
+    listAll() {
+        ensureDir();
+        const entries = [];
+        try {
+            const files = readdirSync(SESSIONS_DIR).filter(f => f.endsWith('.json'));
+            for (const file of files) {
+                try {
+                    const raw = readFileSync(join(SESSIONS_DIR, file), 'utf-8');
+                    const entry = JSON.parse(raw);
+                    if (!isSamePidEntry(entry)) {
+                        // Clean up stale entry（已死或 PID 重用）
+                        try {
+                            unlinkSync(join(SESSIONS_DIR, file));
+                        }
+                        catch { /* expected: concurrent cleanup */ }
+                        continue;
+                    }
+                    entries.push(entry);
+                }
+                catch {
+                    // Skip malformed files
+                }
+            }
+        }
+        catch {
+            // Return empty on error
+        }
+        return entries;
+    },
+    findByName(name) {
+        return PidRegistry.listAll().find(e => e.name === name || e.sessionId === name);
+    },
+    findByPid(pid) {
+        try {
+            const p = entryPath(pid);
+            if (!existsSync(p))
+                return undefined;
+            const raw = readFileSync(p, 'utf-8');
+            const entry = JSON.parse(raw);
+            // 保留与 listAll 一致的语义：发现 PID 重用时清掉残留
+            if (!isSamePidEntry(entry)) {
+                try {
+                    unlinkSync(p);
+                }
+                catch { /* expected: concurrent cleanup */ }
+                return undefined;
+            }
+            return entry;
+        }
+        catch { /* expected: resource not available */
+            return undefined;
+        }
+    },
+};
+//# sourceMappingURL=PidRegistry.js.map

package/dist/core/PidRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PidRegistry.js","sourceRoot":"","sources":["../../src/core/PidRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAuBlD,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,IAAI,CAAC,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,0BAA0B;AAC1B,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAe;IACrC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,+BAA+B;IAC/B,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,EAAE;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,iDAAiD;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,iCAAiC;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;AACxD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,cAAc,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,CAAC,KAAe;QACtB,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,CAAC;QACZ,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC5D,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACxC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,mCAAmC;wBACnC,IAAI,CAAC;4BAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;wBAC1F,SAAS;oBACX,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,OAAO,WAAW,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YACrC,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;YAC1C,mCAAmC;YACnC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;gBACnE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC,CAAA,sCAAsC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF,CAAC"}