@lingxiao-office/sdk 1.0.0

package/dist/tools/implementations/ExecutionSandbox.js

@@ -0,0 +1,415 @@
+import { existsSync, mkdirSync, statSync } from 'fs';
+import { join } from 'path';
+import { getSessionScopePaths, resolveTaskWorkingDirectory } from './utils.js';
+import { IS_LINUX, getShellCommand, resolveCommandPath } from '../../utils/platform.js';
+import { getConfigValue } from '../../config.js';
+import { buildLocalLlmGatewayEnv } from '../../core/LocalLlmGateway.js';
+import { effectiveDangerousCommandGuard, shouldMinimizeSandboxBind, shouldEnforceAllowedHosts, shouldFilterChildEnv, filterEnv, shouldRequireStrongExecutionSandbox, } from '../../core/HardeningPolicy.js';
+import { withToolProxyEnv } from '../../core/ProxyConfig.js';
+import { validateCommandForProcessKill } from '../../core/ProcessSelfProtection.js';
+import { coreLogger } from '../../core/Log.js';
+const DANGEROUS_COMMANDS = [
+    'rm -rf /',
+    'rm -rf ~',
+    'rm -rf /*',
+    '> /dev/sda',
+    'dd if=/dev/zero',
+    'mkfs.',
+    'chmod -r 777 /',
+    'chown -r',
+    'mv /* /dev/null',
+];
+let capabilitiesCache = null;
+function commandIncludesToken(command, token) {
+    const escaped = token
+        .trim()
+        .toLowerCase()
+        .replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+        .replace(/\s+/g, '\\s+');
+    const boundary = '(?:^|[;&|()\\s])';
+    return new RegExp(`${boundary}${escaped}(?:$|[;&|()\\s])`, 'i').test(command.toLowerCase());
+}
+export function validateDangerousCommand(command) {
+    // 加固模式（§3.8）：读 effectiveDangerousCommandGuard()（与独立开关 dangerous_command_guard
+    // 取 OR），加固开启时自动启用危险命令软守卫。关闭时（默认且独立开关未开）保持现状放行。
+    const enabled = effectiveDangerousCommandGuard();
+    if (!enabled)
+        return null;
+    const normalized = command.toLowerCase();
+    // 1. 检查危险命令（仅在用户显式开启 dangerous_command_guard 时作为软守卫生效）
+    for (const dangerous of DANGEROUS_COMMANDS) {
+        if (commandIncludesToken(command, dangerous)) {
+            return 'ERROR: 检测到潜在危险命令，已由 sandbox policy 拦截。';
+        }
+    }
+    // 2. 检查危险的重定向目标
+    const dangerousRedirectPatterns = [
+        /\>\s*\/dev\/sd[a-z]/,
+        /\>\s*\/dev\/nvme/,
+        /\>\s*\/dev\/hd[a-z]/,
+        /\>\s*\/dev\/mapper/,
+    ];
+    for (const pattern of dangerousRedirectPatterns) {
+        if (pattern.test(normalized)) {
+            return 'ERROR: 检测到潜在危险重定向，已由 sandbox policy 拦截。';
+        }
+    }
+    // 3. 检查沙箱逃逸尝试
+    const sandboxEscapePatterns = [
+        /\bchroot\b/,
+        /\bunshare\b/,
+        /\bcapsh\b/,
+        /\bsetcap\b/,
+        /\bprctl\b.*PR_SET_NO_NEW_PRIVS/,
+    ];
+    for (const pattern of sandboxEscapePatterns) {
+        if (pattern.test(normalized)) {
+            return 'ERROR: 检测到潜在沙箱逃逸尝试，已由 sandbox policy 拦截。';
+        }
+    }
+    // 4. 检查权限提升
+    if (/\bsu\s/.test(normalized) || /\bsu\t/.test(normalized) || /\bsu;/.test(normalized)) {
+        return 'ERROR: 检测到潜在权限提升尝试，已由 sandbox policy 拦截。';
+    }
+    // 5. 检查编码绕过尝试
+    const encodingBypassPatterns = [
+        /\bbase64\s+(-d|--decode)\b/, // base64 -d (解码执行)
+        /\$'\x5c?x[0-9a-f]{2}/i, // $'\x72\x6d' hex 转义
+        /\bprintf\s+.*\\x[0-9a-f]/i, // printf 十六进制
+        /\becho\s+.*\|\s*(sh|bash|zsh|dash)\b/, // echo ... | sh
+    ];
+    for (const pattern of encodingBypassPatterns) {
+        if (pattern.test(normalized)) {
+            return 'ERROR: 检测到编码绕过尝试，已由 sandbox policy 拦截。';
+        }
+    }
+    // 6. 检查递归删除整个文件系统
+    const recursiveDestroyPatterns = [
+        /\bfind\s+\/\s+.*-delete\b/, // find / -delete
+        /\bfind\s+\/\s+.*-exec\s+rm\b/, // find / -exec rm
+        /:\(\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;?\s*:/, // fork bomb :(){ :|:& };:
+        /\bdd\b.*\bof=\/dev\/[snm]/, // dd of=/dev/sda
+    ];
+    for (const pattern of recursiveDestroyPatterns) {
+        if (pattern.test(normalized)) {
+            return 'ERROR: 检测到潜在系统破坏命令，已由 sandbox policy 拦截。';
+        }
+    }
+    // 7. Windows cmd 高危命令
+    const windowsCmdDangerPatterns = [
+        /\bdel\b(?=.*(?:^|\s)\/(?:f|s|q)\b)(?=.*(?:[a-z]:\\|[a-z]:\b|\\))/i,
+        /\b(?:rd|rmdir)\b(?=.*(?:^|\s)\/s\b)(?=.*(?:[a-z]:\\|[a-z]:\b|\\))/i,
+        /\bformat\s+[a-z]:(?:\s|$)/i,
+        /\bshutdown\s+\/(?:s|r|p)\b/i,
+        /\btakeown\b(?=.*(?:^|\s)\/r\b)(?=.*(?:^|\s)\/f\b)/i,
+    ];
+    for (const pattern of windowsCmdDangerPatterns) {
+        if (pattern.test(normalized)) {
+            return 'ERROR: 检测到 Windows cmd 高危命令，已由 sandbox policy 拦截。';
+        }
+    }
+    // 8. Windows PowerShell 高危命令
+    const powerShellDangerPatterns = [
+        /\bremove-item\b(?=.*\s-recurse\b)(?=.*\s-force\b)/i,
+        /\bstop-computer\b/i,
+        /\brestart-computer\b/i,
+        /\bformat-volume\b/i,
+        /\bclear-disk\b/i,
+    ];
+    for (const pattern of powerShellDangerPatterns) {
+        if (pattern.test(normalized)) {
+            return 'ERROR: 检测到 PowerShell 高危命令，已由 sandbox policy 拦截。';
+        }
+    }
+    // 9. PowerShell 删除命令短名（rm/del/erase）
+    const powerShellAliasDangerPatterns = [
+        /\b(?:rm|del|erase)\b(?=.*\s-(?:recurse|force)\b)/i,
+    ];
+    for (const pattern of powerShellAliasDangerPatterns) {
+        if (pattern.test(normalized)) {
+            return 'ERROR: 检测到 PowerShell 删除命令短名的高危用法，已由 sandbox policy 拦截。';
+        }
+    }
+    // 注：广播式进程杀灭（pkill/killall/kill $(pgrep...)）已由始终启用的
+    // validateCommandForProcessKill（prepareExecutionSandbox 第一道门禁）统一拦截，
+    // 此处不再重复——否则只在 hardened mode 开启时生效，默认安装下形同虚设。
+    return null;
+}
+function findExecutable(name) {
+    // bubblewrap is Linux-only; skip the lookup on other platforms
+    if (!IS_LINUX)
+        return undefined;
+    return resolveCommandPath(name);
+}
+export function detectSandboxCapabilities() {
+    if (capabilitiesCache) {
+        return capabilitiesCache;
+    }
+    // bubblewrap is a Linux-only kernel namespace tool; unavailable on Windows/macOS
+    if (!IS_LINUX) {
+        capabilitiesCache = {
+            bubblewrapAvailable: false,
+            bubblewrapSupportsNetworkIsolation: false,
+        };
+        return capabilitiesCache;
+    }
+    const bubblewrapPath = findExecutable('bwrap');
+    capabilitiesCache = {
+        bubblewrapAvailable: Boolean(bubblewrapPath),
+        bubblewrapPath,
+        bubblewrapSupportsNetworkIsolation: false,
+    };
+    return capabilitiesCache;
+}
+function buildSessionTmpDir(sessionDir) {
+    const tmpDir = join(sessionDir, 'sandbox-tmp');
+    mkdirSync(tmpDir, { recursive: true });
+    return tmpDir;
+}
+function ensureSessionsDir(workspace) {
+    const sessionsDir = join(workspace, '.lingxiao', 'sessions');
+    mkdirSync(sessionsDir, { recursive: true });
+    return sessionsDir;
+}
+/**
+ * 加固模式下的最小化系统路径绑定白名单（§3.5）。
+ *
+ * 设计：只绑定运行常见命令（sh/git/npm/python/node 及其动态库、CA 证书、DNS 解析）
+ * 所需的系统目录，逐条 `--ro-bind` 且仅当路径存在时绑定（不同发行版布局不同，
+ * 绑定不存在的路径会让 bwrap 直接失败）。明确**不**绑定 `/root` `/home` `/etc/shadow`
+ * `/etc/sudoers` 等敏感路径——这些在最小集外，自然被遮蔽。
+ *
+ * 风险：极简洁的命令可能因缺库失败；如遇到，运维可在后续 schema v2 增加
+ * "额外绑定路径"配置扩展点（本版不做）。
+ */
+const HARDENED_SANDBOX_BIND_PATHS = [
+    '/usr',
+    '/bin',
+    '/sbin',
+    '/lib',
+    '/lib64',
+    '/lib32',
+    '/libx32',
+    '/etc/alternatives',
+    '/etc/ssl',
+    '/etc/ca-certificates',
+    '/etc/ssl/certs',
+    '/etc/resolv.conf',
+    '/etc/nsswitch.conf',
+    '/etc/hosts',
+    '/etc/localtime',
+    '/opt',
+];
+/**
+ * 构造根文件系统绑定参数。
+ * - 加固模式（shouldMinimizeSandboxBind）：仅绑定 HARDENED_SANDBOX_BIND_PATHS 中存在的路径。
+ * - 非加固（默认）：整盘 `--ro-bind / /`，保持现状（只防写不防读）。
+ */
+function buildRootBindArgs() {
+    if (!shouldMinimizeSandboxBind()) {
+        return ['--ro-bind', '/', '/'];
+    }
+    const out = [];
+    for (const p of HARDENED_SANDBOX_BIND_PATHS) {
+        if (existsSync(p)) {
+            out.push('--ro-bind', p, p);
+        }
+    }
+    return out;
+}
+function buildBubblewrapArgs(policy, cwd, capabilities, effectiveNetworkMode) {
+    if (!capabilities.bubblewrapPath || !policy.sessionId) {
+        return [];
+    }
+    const scope = getSessionScopePaths(policy.workspace, policy.sessionId);
+    const sessionsDir = ensureSessionsDir(policy.workspace);
+    const sessionDir = scope.sessionDir;
+    const sessionTmpDir = buildSessionTmpDir(sessionDir);
+    const contextDir = join(sessionDir, 'context');
+    const workspaceLingxiaoDir = join(policy.workspace, '.lingxiao');
+    const procDir = '/proc';
+    const devDir = '/dev';
+    const args = [
+        '--die-with-parent',
+        '--new-session',
+        // 加固模式（§3.5）：最小化绑定白名单，遮蔽 /root /home /etc/shadow .ssh 等敏感路径，
+        // 而非整盘 `--ro-bind / /`（只防写不防读，沙箱内可 cat /etc/passwd、读 /root/.ssh）。
+        // 关闭时（默认）保持现状整盘只读绑定，避免缺库导致命令失败。
+        ...buildRootBindArgs(),
+        '--proc', procDir,
+        '--dev', devDir,
+        '--bind', policy.workspace, policy.workspace,
+        '--tmpfs', sessionsDir,
+        '--bind', sessionDir, sessionDir,
+        '--bind', sessionTmpDir, '/tmp',
+        '--chdir', cwd,
+    ];
+    // Network isolation: bubblewrap default = isolated; add --share-net to allow network
+    // 加固模式（§3.6）：allowlisted 模式因无 host 级过滤机制而 fail-closed（见下方 effectiveNetworkMode
+    // 计算），此处只看 effectiveNetworkMode——为 'disabled' 时不加 --share-net（完全隔离）。
+    if (effectiveNetworkMode !== 'disabled') {
+        args.push('--share-net');
+    }
+    if (existsSync(workspaceLingxiaoDir) && statSync(workspaceLingxiaoDir).isDirectory()) {
+        const skillsDir = join(workspaceLingxiaoDir, 'skills');
+        if (existsSync(skillsDir)) {
+            args.push('--ro-bind', skillsDir, skillsDir);
+        }
+    }
+    if (existsSync(contextDir)) {
+        args.push('--bind', contextDir, contextDir);
+    }
+    // bubblewrap expects: bwrap [bwrap-args...] <executable> [exec-args...]
+    // Use the platform shell so it works on any Unix variant (sh is POSIX-guaranteed)
+    const sh = getShellCommand(policy.command);
+    args.push(sh.executable, ...sh.args);
+    return args;
+}
+function buildFallbackError(policy, capabilities) {
+    if (!capabilities.bubblewrapAvailable) {
+        return 'ERROR: 请求的 sandbox backend=bubblewrap 当前不可用，且已禁用回退。';
+    }
+    if (!policy.sessionId) {
+        return 'ERROR: bubblewrap backend 需要 sessionId 才能建立会话级隔离，且已禁用回退。';
+    }
+    return 'ERROR: 请求的 sandbox backend 无法按当前策略执行，且已禁用回退。';
+}
+function buildRequiredStrongSandboxError(capabilities, hasSessionId) {
+    if (!capabilities.bubblewrapAvailable) {
+        return 'ERROR: 企业加固模式要求强隔离 sandbox backend=bubblewrap，但当前系统未找到 bwrap。请安装 bubblewrap，或关闭企业加固模式后重试。';
+    }
+    if (!hasSessionId) {
+        return 'ERROR: 企业加固模式要求绑定 sessionId 才能建立会话级强隔离沙盒。请在会话上下文中执行，或关闭企业加固模式后重试。';
+    }
+    return 'ERROR: 企业加固模式要求强隔离 sandbox backend=bubblewrap，当前策略无法满足。';
+}
+export function prepareExecutionSandbox(policy) {
+    // 进程自杀防护 — 始终启用，不依赖 hardened mode
+    const processKillError = validateCommandForProcessKill(policy.command);
+    if (processKillError) {
+        return { ok: false, error: processKillError };
+    }
+    const dangerousError = validateDangerousCommand(policy.command);
+    if (dangerousError) {
+        return { ok: false, error: dangerousError };
+    }
+    let workDir;
+    try {
+        workDir = resolveTaskWorkingDirectory(policy.workspace, policy.cwd, policy.sessionId, policy.taskWorkingDirectory, policy.taskWriteScope);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            error: `ERROR: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    const scope = getSessionScopePaths(policy.workspace, policy.sessionId);
+    const requireStrongSandbox = shouldRequireStrongExecutionSandbox();
+    const requestedBackend = requireStrongSandbox ? 'bubblewrap' : policy.backend || 'app-guard';
+    const capabilities = detectSandboxCapabilities();
+    let selectedBackend = requestedBackend;
+    if (requireStrongSandbox && (!capabilities.bubblewrapAvailable || !policy.sessionId)) {
+        return {
+            ok: false,
+            error: buildRequiredStrongSandboxError(capabilities, Boolean(policy.sessionId)),
+        };
+    }
+    if (requestedBackend === 'bubblewrap' &&
+        (!capabilities.bubblewrapAvailable ||
+            !policy.sessionId)) {
+        return {
+            ok: false,
+            error: buildFallbackError(policy, capabilities),
+        };
+    }
+    // 读取用户配置的环境变量
+    const userEnv = getConfigValue('advanced.env');
+    // Linux 强隔离模式（§3.6）：allowlisted 网络模式的真实 host 级出网控制需要 netns + 防火墙规则，
+    // bubblewrap 的 --share-net 是"全有或全无"，无法按 host 过滤。因此只有在当前平台要求强隔离
+    // 且可由 bubblewrap 执行时，allowlisted 才 fail-closed 为 disabled。
+    // Windows/macOS 不强制 Docker/VM，本地 hardened 继续运行 guardrails-only：权限层审批、env/cwd
+    // 收紧仍生效，但 metadata 明确标注 host allowlist 未由 OS 级沙盒强制。
+    const allowedHostsFailClosed = shouldEnforceAllowedHosts() && policy.networkMode === 'allowlisted' && requireStrongSandbox;
+    const allowedHostsRequestedWithoutEnforcement = shouldEnforceAllowedHosts() && policy.networkMode === 'allowlisted' && !allowedHostsFailClosed;
+    const effectiveNetworkMode = allowedHostsFailClosed
+        ? 'disabled'
+        : policy.networkMode;
+    // 加固模式（§3.2）：对子进程 env 做统一白名单过滤，剔除凭据类与 LINGXIAO_* 内部变量。
+    // 过滤必须覆盖 process.env、advanced.env 与工具代理 env；否则 advanced.env/proxy 会成为密钥旁路。
+    // 关闭时（默认）注入完整 env 并继续注入本地 LLM gateway env，保持现状。
+    const rawInheritedEnv = withToolProxyEnv({
+        ...process.env,
+        ...userEnv,
+    });
+    const inheritedEnv = shouldFilterChildEnv()
+        ? filterEnv(rawInheritedEnv)
+        : rawInheritedEnv;
+    const gatewayEnv = shouldFilterChildEnv() ? {} : buildLocalLlmGatewayEnv(inheritedEnv);
+    const env = {
+        ...inheritedEnv,
+        ...gatewayEnv,
+        LINGXIAO_SESSION_ID: policy.sessionId || '',
+        LINGXIAO_SESSION_DIR: scope.sessionDir || '',
+        LINGXIAO_SCRATCHPAD_DIR: scope.scratchpadDir || '',
+        LINGXIAO_CONTEXT_DIR: scope.contextDir || '',
+        LINGXIAO_SANDBOX_MODE: selectedBackend,
+        LINGXIAO_NETWORK_MODE: effectiveNetworkMode,
+        LINGXIAO_ALLOWED_HOSTS: policy.allowedHosts.join(','),
+        LINGXIAO_TASK_ID: policy.taskId || '',
+        LINGXIAO_TASK_CWD: policy.taskWorkingDirectory || '',
+        LINGXIAO_TASK_WRITE_SCOPE: (policy.taskWriteScope || []).join(':'),
+    };
+    const networkEnforced = selectedBackend === 'bubblewrap' && effectiveNetworkMode === 'disabled';
+    const metadata = {
+        mode: selectedBackend,
+        networkMode: effectiveNetworkMode,
+        networkRequested: policy.networkMode,
+        networkEnforced,
+        networkIsolation: effectiveNetworkMode === 'disabled'
+            ? (networkEnforced ? 'enforced' : 'not_enforced')
+            : (allowedHostsRequestedWithoutEnforcement ? 'not_enforced' : 'not_requested'),
+        networkIsolationReason: effectiveNetworkMode === 'disabled' && !networkEnforced
+            ? `${selectedBackend} backend does not enforce network isolation`
+            : (allowedHostsFailClosed
+                ? 'hardened mode: allowlisted network has no host-level enforcement, failing closed to disabled'
+                : (allowedHostsRequestedWithoutEnforcement
+                    ? 'hardened mode: current platform/backend cannot enforce execution host allowlists; relying on permission-layer approval and env/cwd guardrails'
+                    : undefined)),
+        // 加固模式（§3.6）：allowlisted 经 fail-closed 降级为 disabled 后，allowedHostsEnforced 反映
+        // "已通过禁网真正强制"（bubblewrap）。非加固时保持现状恒 false（不强制）。
+        allowedHostsEnforced: allowedHostsFailClosed && selectedBackend === 'bubblewrap',
+        allowedHostsFailClosed,
+        visibleRoots: [policy.workspace, scope.sessionDir || ''].filter(Boolean),
+        sessionDir: scope.sessionDir,
+    };
+    if (selectedBackend === 'bubblewrap') {
+        const args = buildBubblewrapArgs(policy, workDir, capabilities, effectiveNetworkMode);
+        return {
+            ok: true,
+            cwd: workDir,
+            env,
+            plan: {
+                mode: 'execFile',
+                command: capabilities.bubblewrapPath,
+                args,
+            },
+            metadata,
+        };
+    }
+    // Warn: app-guard mode does NOT isolate network or filesystem
+    if (policy.networkMode === 'disabled') {
+        coreLogger.warn('[Sandbox] WARNING: app-guard backend does NOT enforce network isolation. ' +
+            'Use bubblewrap backend for true sandbox isolation.');
+    }
+    return {
+        ok: true,
+        cwd: workDir,
+        env,
+        plan: {
+            mode: 'shell',
+            command: policy.command,
+        },
+        metadata,
+    };
+}
+//# sourceMappingURL=ExecutionSandbox.js.map

package/dist/tools/implementations/ExecutionSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionSandbox.js","sourceRoot":"","sources":["../../../src/tools/implementations/ExecutionSandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,SAAS,EACT,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAsD/C,MAAM,kBAAkB,GAAG;IACzB,UAAU;IACV,UAAU;IACV,WAAW;IACX,YAAY;IACZ,iBAAiB;IACjB,OAAO;IACP,gBAAgB;IAChB,UAAU;IACV,iBAAiB;CAClB,CAAC;AAEF,IAAI,iBAAiB,GAA+B,IAAI,CAAC;AAEzD,SAAS,oBAAoB,CAAC,OAAe,EAAE,KAAa;IAC1D,MAAM,OAAO,GAAG,KAAK;SAClB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;SACtC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC;IACpC,OAAO,IAAI,MAAM,CAAC,GAAG,QAAQ,GAAG,OAAO,kBAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,OAAO,GAAG,8BAA8B,EAAE,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEzC,uDAAuD;IACvD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC3C,IAAI,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO,wCAAwC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,MAAM,yBAAyB,GAAG;QAChC,qBAAqB;QACrB,kBAAkB;QAClB,qBAAqB;QACrB,oBAAoB;KACrB,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,yBAAyB,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,yCAAyC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,qBAAqB,GAAG;QAC5B,YAAY;QACZ,aAAa;QACb,WAAW;QACX,YAAY;QACZ,gCAAgC;KACjC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,0CAA0C,CAAC;QACpD,CAAC;IACH,CAAC;IAED,YAAY;IACZ,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,0CAA0C,CAAC;IACpD,CAAC;IAED,cAAc;IACd,MAAM,sBAAsB,GAAG;QAC7B,4BAA4B,EAAqB,mBAAmB;QACpE,uBAAuB,EAA0B,qBAAqB;QACtE,2BAA2B,EAAsB,cAAc;QAC/D,sCAAsC,EAAW,gBAAgB;KAClE,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,wCAAwC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,wBAAwB,GAAG;QAC/B,2BAA2B,EAAsB,iBAAiB;QAClE,8BAA8B,EAAkB,kBAAkB;QAClE,2CAA2C,EAAK,0BAA0B;QAC1E,2BAA2B,EAAsB,iBAAiB;KACnE,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,0CAA0C,CAAC;QACpD,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,wBAAwB,GAAG;QAC/B,mEAAmE;QACnE,oEAAoE;QACpE,4BAA4B;QAC5B,6BAA6B;QAC7B,oDAAoD;KACrD,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,mDAAmD,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,wBAAwB,GAAG;QAC/B,oDAAoD;QACpD,oBAAoB;QACpB,uBAAuB;QACvB,oBAAoB;QACpB,iBAAiB;KAClB,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,kDAAkD,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,6BAA6B,GAAG;QACpC,mDAAmD;KACpD,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,6BAA6B,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,yDAAyD,CAAC;QACnE,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,oEAAoE;IACpE,8CAA8C;IAE9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,+DAA+D;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,iBAAiB,GAAG;YAClB,mBAAmB,EAAE,KAAK;YAC1B,kCAAkC,EAAE,KAAK;SAC1C,CAAC;QACF,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC/C,iBAAiB,GAAG;QAClB,mBAAmB,EAAE,OAAO,CAAC,cAAc,CAAC;QAC5C,cAAc;QACd,kCAAkC,EAAE,KAAK;KAC1C,CAAC;IACF,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC/C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC7D,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAAsB;IACrD,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,mBAAmB;IACnB,UAAU;IACV,sBAAsB;IACtB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,YAAY;IACZ,gBAAgB;IAChB,MAAM;CACP,CAAC;AAEF;;;;GAIG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC;QACjC,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,2BAA2B,EAAE,CAAC;QAC5C,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA8B,EAAE,GAAW,EAAE,YAAiC,EAAE,oBAAwC;IACnJ,IAAI,CAAC,YAAY,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAW,CAAC;IACrC,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,CAAC;IAEtB,MAAM,IAAI,GAAG;QACX,mBAAmB;QACnB,eAAe;QACf,6DAA6D;QAC7D,kEAAkE;QAClE,gCAAgC;QAChC,GAAG,iBAAiB,EAAE;QACtB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC5C,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,UAAU,EAAE,UAAU;QAChC,QAAQ,EAAE,aAAa,EAAE,MAAM;QAC/B,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,qFAAqF;IACrF,+EAA+E;IAC/E,qEAAqE;IACrE,IAAI,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,UAAU,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,wEAAwE;IACxE,kFAAkF;IAClF,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA8B,EAAE,YAAiC;IAC3F,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;QACtC,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,0DAA0D,CAAC;IACpE,CAAC;IAED,OAAO,8CAA8C,CAAC;AACxD,CAAC;AAED,SAAS,+BAA+B,CAAC,YAAiC,EAAE,YAAqB;IAC/F,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;QACtC,OAAO,2FAA2F,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,OAAO,yDAAyD,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA8B;IACpE,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,2BAA2B,CACnC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,oBAAoB,EAC3B,MAAM,CAAC,cAAc,CACtB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,oBAAoB,GAAG,mCAAmC,EAAE,CAAC;IACnE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC;IAC7F,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,IAAI,eAAe,GAAmB,gBAAgB,CAAC;IACvD,IAAI,oBAAoB,IAAI,CAAC,CAAC,YAAY,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,+BAA+B,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;SAChF,CAAC;IACJ,CAAC;IAED,IACE,gBAAgB,KAAK,YAAY;QACjC,CACE,CAAC,YAAY,CAAC,mBAAmB;YACjC,CAAC,MAAM,CAAC,SAAS,CAClB,EACD,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,cAAc;IACd,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAuC,CAAC;IAErF,oEAAoE;IACpE,+DAA+D;IAC/D,2DAA2D;IAC3D,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,sBAAsB,GAC1B,yBAAyB,EAAE,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa,IAAI,oBAAoB,CAAC;IAC9F,MAAM,uCAAuC,GAC3C,yBAAyB,EAAE,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa,IAAI,CAAC,sBAAsB,CAAC;IACjG,MAAM,oBAAoB,GAAuB,sBAAsB;QACrE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;IAEvB,uDAAuD;IACvD,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,eAAe,GAAsB,gBAAgB,CAAC;QAC1D,GAAG,OAAO,CAAC,GAAG;QACd,GAAG,OAAO;KACX,CAAC,CAAC;IACH,MAAM,YAAY,GAAsB,oBAAoB,EAAE;QAC5D,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC;QAC5B,CAAC,CAAC,eAAe,CAAC;IACpB,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACvF,MAAM,GAAG,GAAsB;QAC7B,GAAG,YAAY;QACf,GAAG,UAAU;QACb,mBAAmB,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QAC3C,oBAAoB,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QAC5C,uBAAuB,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;QAClD,oBAAoB,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QAC5C,qBAAqB,EAAE,eAAe;QACtC,qBAAqB,EAAE,oBAAoB;QAC3C,sBAAsB,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QACrD,gBAAgB,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QACrC,iBAAiB,EAAE,MAAM,CAAC,oBAAoB,IAAI,EAAE;QACpD,yBAAyB,EAAE,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KACnE,CAAC;IAEF,MAAM,eAAe,GAAG,eAAe,KAAK,YAAY,IAAI,oBAAoB,KAAK,UAAU,CAAC;IAChG,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,oBAAoB;QACjC,gBAAgB,EAAE,MAAM,CAAC,WAAW;QACpC,eAAe;QACf,gBAAgB,EAAE,oBAAoB,KAAK,UAAU;YACnD,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;YACjD,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;QAChF,sBAAsB,EAAE,oBAAoB,KAAK,UAAU,IAAI,CAAC,eAAe;YAC7E,CAAC,CAAC,GAAG,eAAe,6CAA6C;YACjE,CAAC,CAAC,CAAC,sBAAsB;gBACvB,CAAC,CAAC,8FAA8F;gBAChG,CAAC,CAAC,CAAC,uCAAuC;oBACxC,CAAC,CAAC,+IAA+I;oBACjJ,CAAC,CAAC,SAAS,CAAC,CAAC;QACnB,8EAA8E;QAC9E,gDAAgD;QAChD,oBAAoB,EAAE,sBAAsB,IAAI,eAAe,KAAK,YAAY;QAChF,sBAAsB;QACtB,YAAY,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACxE,UAAU,EAAE,KAAK,CAAC,UAAU;KACpB,CAAC;IAEX,IAAI,eAAe,KAAK,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,OAAO;YACZ,GAAG;YACH,IAAI,EAAE;gBACJ,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,YAAY,CAAC,cAAe;gBACrC,IAAI;aACL;YACD,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,2EAA2E;YACzF,oDAAoD,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,OAAO;QACZ,GAAG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;QACD,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/tools/implementations/FileCreate.d.ts

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+import { Tool, type ToolContext, type ToolResult } from '../Tool.js';
+export declare class FileCreateTool extends Tool {
+    readonly name = "file_create";
+    readonly description = "\u521B\u5EFA\u6216\u8986\u76D6\u6587\u4EF6\uFF08\u81EA\u52A8\u521B\u5EFA\u7236\u76EE\u5F55\uFF0C\u539F\u5B50\u5199\u5165\uFF09\u3002\u7528\u9014\uFF1A\u65B0\u5EFA\u6587\u4EF6\u6216\u5168\u91CF\u8986\u76D6\u5DF2\u6709\u6587\u4EF6\uFF08overwrite=true\uFF09\u3002\u589E\u91CF\u4FEE\u6539\u5DF2\u6709\u6587\u4EF6\u8BF7\u7528 structured_patch\u3002";
+    readonly parameters: z.ZodObject<{
+        path: z.ZodString;
+        content: z.ZodString;
+        overwrite: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>;
+    getExecutionTimeoutMs(args: unknown): number;
+    execute(args: unknown, context?: ToolContext): Promise<ToolResult>;
+}
+export default FileCreateTool;
+//# sourceMappingURL=FileCreate.d.ts.map

package/dist/tools/implementations/FileCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileCreate.d.ts","sourceRoot":"","sources":["../../../src/tools/implementations/FileCreate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAmB,IAAI,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAkBtF,qBAAa,cAAe,SAAQ,IAAI;IACtC,QAAQ,CAAC,IAAI,iBAAiB;IAC9B,QAAQ,CAAC,WAAW,6VAAyF;IAC7G,QAAQ,CAAC,UAAU;;;;sBAAoB;IAEvC,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAKtC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAmDzE;AAED,eAAe,cAAc,CAAC"}

package/dist/tools/implementations/FileCreate.js

@@ -0,0 +1,68 @@
+import { existsSync } from 'fs';
+import { z } from 'zod';
+import { createToolError, Tool } from '../Tool.js';
+import { extname } from 'path';
+import { getPythonSyntaxWarningAsync, resolveTaskWritePath, lockedAtomicWrite } from './utils.js';
+const FileCreateSchema = z.object({
+    path: z.string().describe('文件路径'),
+    content: z.string().describe('文件内容'),
+    overwrite: z.boolean().optional().describe('覆盖已有文件时必须显式设为 true；创建新文件可省略'),
+});
+const WRITE_TOOL_MIN_TIMEOUT_MS = 5 * 60_000;
+const WRITE_TOOL_MAX_TIMEOUT_MS = 10 * 60_000;
+function writeTimeoutForChars(chars) {
+    const mb = Math.ceil(Math.max(0, chars) / (1024 * 1024));
+    return Math.min(WRITE_TOOL_MAX_TIMEOUT_MS, WRITE_TOOL_MIN_TIMEOUT_MS + mb * 30_000);
+}
+export class FileCreateTool extends Tool {
+    name = 'file_create';
+    description = '创建或覆盖文件（自动创建父目录，原子写入）。用途：新建文件或全量覆盖已有文件（overwrite=true）。增量修改已有文件请用 structured_patch。';
+    parameters = FileCreateSchema;
+    getExecutionTimeoutMs(args) {
+        const params = args;
+        return writeTimeoutForChars(typeof params?.content === 'string' ? params.content.length : 0);
+    }
+    async execute(args, context) {
+        const params = args;
+        let p;
+        try {
+            p = resolveTaskWritePath(context?.workspace, params.path, context?.sessionId, context?.taskWriteScope, context?.contractAllowedScope, 'create');
+        }
+        catch (error) {
+            return {
+                success: false,
+                data: null,
+                error: `ERROR: ${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
+        try {
+            if (existsSync(p) && params.overwrite !== true) {
+                return createToolError({
+                    code: 'FILE_CREATE_OVERWRITE_REQUIRED',
+                    message: `文件已存在，覆盖 ${params.path} 必须显式设置 overwrite=true。`,
+                    retryable: true,
+                    cause: '避免 LLM 误用 file_create 覆盖用户已有文件。',
+                    fix: '如果确认要覆盖，先读取文件确认内容，再重试并设置 overwrite=true；如果只是修改局部，改用 structured_patch。',
+                    next_tool: { name: 'file_read', args: { path: params.path } },
+                    example_args: { path: params.path, content: params.content.slice(0, 200), overwrite: true },
+                });
+            }
+            const warningMsg = extname(p) === '.py' ? await getPythonSyntaxWarningAsync(params.content) : '';
+            // Locked atomic write (creates parent dirs, serialized via file lock)
+            await lockedAtomicWrite(p, params.content, { createDirs: true });
+            return {
+                success: true,
+                data: `OK: 已创建文件 ${params.path} (${params.content.length} 字符)${warningMsg}`,
+            };
+        }
+        catch (error) {
+            return {
+                success: false,
+                data: null,
+                error: `ERROR: ${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
+    }
+}
+export default FileCreateTool;
+//# sourceMappingURL=FileCreate.js.map

package/dist/tools/implementations/FileCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileCreate.js","sourceRoot":"","sources":["../../../src/tools/implementations/FileCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAqC,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAElG,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC7C,MAAM,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE9C,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,IAAI;IAC7B,IAAI,GAAG,aAAa,CAAC;IACrB,WAAW,GAAG,qFAAqF,CAAC;IACpG,UAAU,GAAG,gBAAgB,CAAC;IAEvC,qBAAqB,CAAC,IAAa;QACjC,MAAM,MAAM,GAAG,IAAiD,CAAC;QACjE,OAAO,oBAAoB,CAAC,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,OAAqB;QAChD,MAAM,MAAM,GAAG,IAAwC,CAAC;QACxD,IAAI,CAAS,CAAC;QAEd,IAAI,CAAC;YACH,CAAC,GAAG,oBAAoB,CACtB,OAAO,EAAE,SAAS,EAClB,MAAM,CAAC,IAAI,EACX,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,CACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAC1E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC/C,OAAO,eAAe,CAAC;oBACrB,IAAI,EAAE,gCAAgC;oBACtC,OAAO,EAAE,YAAY,MAAM,CAAC,IAAI,yBAAyB;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,iCAAiC;oBACxC,GAAG,EAAE,uEAAuE;oBAC5E,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE;oBAC7D,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;iBAC5F,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,2BAA2B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEjG,sEAAsE;YACtE,MAAM,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAEjE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,aAAa,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,OAAO,UAAU,EAAE;aAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAC1E,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,eAAe,cAAc,CAAC"}

package/dist/tools/implementations/FileParser.d.ts

@@ -0,0 +1,41 @@
+import type { OfficePreviewModel } from './office/OfficePreviewModel.js';
+export type ParseMode = 'preview' | 'full' | 'page' | 'sheet';
+export interface ParseResult {
+    format: string;
+    content: string;
+    metadata?: {
+        pages?: number;
+        hasTextLayer?: boolean;
+        imageOnly?: boolean;
+        sheets?: string[];
+        entries?: string[];
+        slides?: Array<{
+            index: number;
+            title?: string;
+            text: string;
+            bullets: string[];
+            notes?: string;
+        }>;
+        renderer?: 'text' | 'html' | 'pptx-structure' | 'xlsx-table' | 'raw';
+        editableKind?: 'text' | 'markdown' | 'html' | 'office-native' | 'read-only';
+        warnings?: string[];
+        officePreview?: OfficePreviewModel;
+        plainText?: string;
+        wordCount?: number;
+        totalChars?: number;
+    };
+    truncated: boolean;
+}
+/**
+ * 通过文件头和扩展名双重检测格式
+ */
+export declare function detectFormat(filePath: string): string;
+export declare function parseFile(filePath: string, mode?: ParseMode, options?: {
+    page?: number;
+    sheet?: string;
+}): Promise<ParseResult>;
+export declare function parsePreview(filePath: string): Promise<ParseResult>;
+export declare function parseFull(filePath: string): Promise<ParseResult>;
+export declare function parsePage(filePath: string, page: number): Promise<ParseResult>;
+export declare function parseSheet(filePath: string, sheetName: string): Promise<ParseResult>;
+//# sourceMappingURL=FileParser.d.ts.map

package/dist/tools/implementations/FileParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileParser.d.ts","sourceRoot":"","sources":["../../../src/tools/implementations/FileParser.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAIzE,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,KAAK,CAAC;YACb,KAAK,EAAE,MAAM,CAAC;YACd,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,YAAY,GAAG,KAAK,CAAC;QACrE,YAAY,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,eAAe,GAAG,WAAW,CAAC;QAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,aAAa,CAAC,EAAE,kBAAkB,CAAC;QACnC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,SAAS,EAAE,OAAO,CAAC;CACpB;AA0HD;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAuCrD;AA+VD,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,SAAqB,EAAE,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CA0ChJ;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAEnE;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAEhE;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAE9E;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAEpF"}