@onesclawkolor/onesclaw 0.1.0

package/dist/tools/confirmation.js

@@ -0,0 +1,75 @@
+const PROOF_TTL_MS = 120_000;
+const AFFIRMATIVE_PATTERNS = [
+    /\b(yes|y|ok|okay|sure|confirm|confirmed|approve|approved|proceed|do it)\b/i,
+    /(确认|同意|可以|继续|执行|好的|是的|确认执行)/,
+];
+const NEGATIVE_PATTERNS = [
+    /\b(no|n|cancel|stop|deny|reject|abort|skip)\b/i,
+    /(取消|不要|停止|拒绝|不同意|算了|否)/,
+];
+let activeProof = null;
+function classifyAnswer(answer) {
+    const normalized = answer.trim();
+    if (!normalized) {
+        return 'empty';
+    }
+    if (AFFIRMATIVE_PATTERNS.some((p) => p.test(normalized))) {
+        return 'affirmative';
+    }
+    if (NEGATIVE_PATTERNS.some((p) => p.test(normalized))) {
+        return 'negative';
+    }
+    return 'ambiguous';
+}
+export function issueFromAskUser(question, answer, now = Date.now()) {
+    const answerClass = classifyAnswer(answer);
+    if (answerClass === 'affirmative') {
+        activeProof = {
+            issuedAt: now,
+            consumed: false,
+            question: question.trim(),
+            answer: answer.trim(),
+        };
+        return { issued: true, status: 'issued' };
+    }
+    // 负向/模糊回答都会清空旧 proof，避免误复用。
+    activeProof = null;
+    if (answerClass === 'negative') {
+        return { issued: false, status: 'rejected' };
+    }
+    if (answerClass === 'empty') {
+        return { issued: false, status: 'empty' };
+    }
+    return { issued: false, status: 'ambiguous' };
+}
+export function consumeForHighRisk(_command, now = Date.now()) {
+    if (!activeProof) {
+        return { ok: false, status: 'missing' };
+    }
+    if (activeProof.consumed) {
+        return { ok: false, status: 'already_used' };
+    }
+    if (now - activeProof.issuedAt > PROOF_TTL_MS) {
+        activeProof = null;
+        return { ok: false, status: 'expired' };
+    }
+    activeProof.consumed = true;
+    return { ok: true, status: 'valid' };
+}
+export function requireConfirmationProofError(command, status) {
+    const reason = status === 'expired'
+        ? '确认已过期（超过 120 秒）'
+        : status === 'already_used'
+            ? '确认已被消费，不可复用'
+            : '未检测到有效确认';
+    return [
+        '检测到高危命令，但缺少有效确认凭证，已被安全策略拦截。',
+        `原因: ${reason}`,
+        '请先调用 ask_user 工具获得明确同意，然后立即重试并传入 confirmed=true。',
+        `命令: ${command}`,
+    ].join('\n');
+}
+export function resetForTest() {
+    activeProof = null;
+}
+//# sourceMappingURL=confirmation.js.map

package/dist/tools/confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation.js","sourceRoot":"","sources":["../../src/tools/confirmation.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAAG,OAAO,CAAC;AAa7B,MAAM,oBAAoB,GAAa;IACrC,4EAA4E;IAC5E,6BAA6B;CAC9B,CAAC;AAEF,MAAM,iBAAiB,GAAa;IAClC,gDAAgD;IAChD,wBAAwB;CACzB,CAAC;AAEF,IAAI,WAAW,GAA6B,IAAI,CAAC;AAEjD,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,MAAc,EACd,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE3C,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QAClC,WAAW,GAAG;YACZ,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;YACzB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;SACtB,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED,4BAA4B;IAC5B,WAAW,GAAG,IAAI,CAAC;IAEnB,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,GAAG,GAAG,WAAW,CAAC,QAAQ,GAAG,YAAY,EAAE,CAAC;QAC9C,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,MAA0B;IACvF,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,MAAM,KAAK,cAAc;YACzB,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,UAAU,CAAC;IAEnB,OAAO;QACL,6BAA6B;QAC7B,OAAO,MAAM,EAAE;QACf,kDAAkD;QAClD,OAAO,OAAO,EAAE;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC"}

package/dist/tools/plugin-init.d.ts

@@ -0,0 +1,29 @@
+/**
+ * 创建 plugin_init 工具
+ * 使 LLM 能够在理解用户意图后直接初始化 ONES 插件项目
+ */
+export declare function createPluginInitTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            pluginName: {
+                type: string;
+                description: string;
+            };
+            pluginDir: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    execute: (args: any) => Promise<{
+        content: string;
+        isError: boolean;
+    } | {
+        content: string;
+        isError?: undefined;
+    }>;
+};

package/dist/tools/plugin-init.js

@@ -0,0 +1,47 @@
+// @ts-nocheck
+import { pluginInitCore } from '../commands/plugin-init.js';
+/**
+ * 创建 plugin_init 工具
+ * 使 LLM 能够在理解用户意图后直接初始化 ONES 插件项目
+ */
+export function createPluginInitTool() {
+    return {
+        name: 'plugin_init',
+        description: '初始化一个 ONES 插件项目。包含环境预检（Node.js 18、npm、ONES CLI、npx）、项目创建和配置。调用前请先通过对话确认插件名称。',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                pluginName: {
+                    type: 'string',
+                    description: '插件名称，仅允许字母、数字、连字符(-)和下划线(_)',
+                },
+                pluginDir: {
+                    type: 'string',
+                    description: '项目目录路径，留空则在当前目录创建',
+                },
+            },
+            required: ['pluginName'],
+        },
+        execute: async (args) => {
+            const pluginName = args.pluginName;
+            const pluginDir = args.pluginDir;
+            const result = await pluginInitCore({ pluginName, pluginDir });
+            if (!result.success) {
+                return { content: result.message, isError: true };
+            }
+            const lines = [result.message];
+            lines.push(`项目路径: ${result.projectPath}`);
+            if (result.nextSteps) {
+                lines.push('');
+                lines.push('后续调试步骤:');
+                result.nextSteps.forEach((step, i) => {
+                    lines.push(`${i + 1}. ${step}`);
+                });
+            }
+            lines.push('');
+            lines.push('开发文档: https://developer.ones.cn/zh-CN/docs/guide/getting-started/development');
+            return { content: lines.join('\n') };
+        },
+    };
+}
+//# sourceMappingURL=plugin-init.js.map

package/dist/tools/plugin-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-init.js","sourceRoot":"","sources":["../../src/tools/plugin-init.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAChC,OAAO;QACH,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACR,UAAU,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6BAA6B;iBAC7C;gBACD,SAAS,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mBAAmB;iBACnC;aACJ;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SAC3B;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;oBACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACpC,CAAC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/tools/registry.d.ts

@@ -0,0 +1,56 @@
+import { SSHConnectionPool } from './ssh.js';
+import { SkillRegistry } from '../skills/registry.js';
+/**
+ * 统一工具注册中心
+ * 管理所有可用工具（MCP 工具 + 未来的原生工具）
+ */
+export declare class ToolRegistry {
+    tools: Map<any, any>;
+    sshPool: SSHConnectionPool;
+    skillRegistry: SkillRegistry;
+    /**
+     * 注册单个工具
+     */
+    register(tool: any): void;
+    /**
+     * 注册 Native Tools（本地工具）
+     */
+    registerNativeTools(): void;
+    /**
+     * 加载 Skill 索引
+     */
+    loadSkills(indexPath: any): Promise<void>;
+    /**
+     * 获取已加载的技能列表（供 System Prompt 构建使用）
+     */
+    getSkills(): any[];
+    /**
+     * 清理资源（关闭 SSH 连接等）
+     */
+    cleanup(): Promise<void>;
+    /**
+     * 批量注册 MCP 工具
+     * 从 MCPManager 获取所有工具，转换为统一 Tool 接口
+     */
+    registerMCPTools(manager: any): void;
+    /**
+     * 获取所有工具的 Anthropic 格式定义（传给 LLM）
+     */
+    getToolDefinitions(): {
+        name: any;
+        description: any;
+        input_schema: any;
+    }[];
+    /**
+     * 执行工具
+     */
+    executeTool(name: any, args: any): Promise<any>;
+    /**
+     * 查询工具是否存在
+     */
+    hasTool(name: any): boolean;
+    /**
+     * 已注册工具数量
+     */
+    get size(): number;
+}

package/dist/tools/registry.js

@@ -0,0 +1,123 @@
+// @ts-nocheck
+import { UserInterruptError } from '../errors.js';
+import { getToolDefinitions, callMcpTool } from '../mcp/bridge.js';
+import { createShellTool } from './shell.js';
+import { SSHConnectionPool, createSSHTool } from './ssh.js';
+import { createAskUserTool } from './ask.js';
+import { SkillRegistry, createListSkillsTool } from '../skills/registry.js';
+import { createLoadSkillTool } from '../skills/loader.js';
+import { createPluginInitTool } from './plugin-init.js';
+import { createSkillsSyncTool } from './skills-sync.js';
+import { createServerListTool, createServerAddTool, createServerRemoveTool } from './server.js';
+/**
+ * 统一工具注册中心
+ * 管理所有可用工具（MCP 工具 + 未来的原生工具）
+ */
+export class ToolRegistry {
+    tools = new Map();
+    sshPool = new SSHConnectionPool();
+    skillRegistry = new SkillRegistry();
+    /**
+     * 注册单个工具
+     */
+    register(tool) {
+        this.tools.set(tool.name, tool);
+    }
+    /**
+     * 注册 Native Tools（本地工具）
+     */
+    registerNativeTools() {
+        this.register(createShellTool());
+        this.register(createSSHTool(this.sshPool));
+        this.register(createAskUserTool());
+        this.register(createListSkillsTool(this.skillRegistry));
+        this.register(createLoadSkillTool(this.skillRegistry));
+        this.register(createPluginInitTool());
+        this.register(createSkillsSyncTool());
+        this.register(createServerListTool());
+        this.register(createServerAddTool());
+        this.register(createServerRemoveTool());
+    }
+    /**
+     * 加载 Skill 索引
+     */
+    async loadSkills(indexPath) {
+        await this.skillRegistry.load(indexPath);
+    }
+    /**
+     * 获取已加载的技能列表（供 System Prompt 构建使用）
+     */
+    getSkills() {
+        return this.skillRegistry.getAll();
+    }
+    /**
+     * 清理资源（关闭 SSH 连接等）
+     */
+    async cleanup() {
+        await this.sshPool.closeAll();
+    }
+    /**
+     * 批量注册 MCP 工具
+     * 从 MCPManager 获取所有工具，转换为统一 Tool 接口
+     */
+    registerMCPTools(manager) {
+        const definitions = getToolDefinitions(manager);
+        for (const def of definitions) {
+            const tool = {
+                name: def.name,
+                description: def.description,
+                inputSchema: def.input_schema,
+                execute: async (args) => {
+                    const result = await callMcpTool(manager, def.name, args);
+                    return { content: result.content, isError: result.isError };
+                },
+            };
+            this.tools.set(tool.name, tool);
+        }
+    }
+    /**
+     * 获取所有工具的 Anthropic 格式定义（传给 LLM）
+     */
+    getToolDefinitions() {
+        return Array.from(this.tools.values()).map((tool) => ({
+            name: tool.name,
+            description: tool.description,
+            input_schema: tool.inputSchema,
+        }));
+    }
+    /**
+     * 执行工具
+     */
+    async executeTool(name, args) {
+        const tool = this.tools.get(name);
+        if (!tool) {
+            return { content: `未知工具: ${name}`, isError: true };
+        }
+        try {
+            return await tool.execute(args);
+        }
+        catch (error) {
+            // 用户中断：放行，让错误传播到 agent loop 以终止当前任务
+            if (error instanceof UserInterruptError) {
+                throw error;
+            }
+            return {
+                content: `工具执行失败 [${name}]: ${error instanceof Error ? error.message : String(error)}`,
+                isError: true,
+            };
+        }
+    }
+    /**
+     * 查询工具是否存在
+     */
+    hasTool(name) {
+        return this.tools.has(name);
+    }
+    /**
+     * 已注册工具数量
+     */
+    get size() {
+        return this.tools.size;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAChG;;;GAGG;AACH,MAAM,OAAO,YAAY;IACrB,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;IAClB,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAClC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IACpC;;OAEG;IACH,QAAQ,CAAC,IAAI;QACT,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD;;OAEG;IACH,mBAAmB;QACf,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,SAAS;QACtB,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD;;OAEG;IACH,SAAS;QACL,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;IACvC,CAAC;IACD;;OAEG;IACH,KAAK,CAAC,OAAO;QACT,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;IACD;;;OAGG;IACH,gBAAgB,CAAC,OAAO;QACpB,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG;gBACT,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBACpB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBAChE,CAAC;aACJ,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IACD;;OAEG;IACH,kBAAkB;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,WAAW;SACjC,CAAC,CAAC,CAAC;IACR,CAAC;IACD;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,oCAAoC;YACpC,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,OAAO;gBACH,OAAO,EAAE,WAAW,IAAI,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACtF,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;IACL,CAAC;IACD;;OAEG;IACH,OAAO,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD;;OAEG;IACH,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3B,CAAC;CACJ"}

package/dist/tools/safety.d.ts

@@ -0,0 +1,2 @@
+export declare function isHighRiskCommand(command: string): boolean;
+export declare function requireConfirmationError(command: string): string;

package/dist/tools/safety.js

@@ -0,0 +1,30 @@
+const HIGH_RISK_PATTERNS = [
+    /\brm\s+-rf\b/i,
+    /\bmkfs(\.\w+)?\b/i,
+    /\bdd\s+if=/i,
+    /\bshutdown\b/i,
+    /\breboot\b/i,
+    /\bpoweroff\b/i,
+    /\bk3s-killall\.sh\b/i,
+    /\bsystemctl\s+(stop|disable|mask|restart)\b/i,
+    /\bservice\s+\S+\s+stop\b/i,
+    /\b(drop|truncate)\s+table\b/i,
+    /\bdelete\s+from\b/i,
+    /\bupdate\s+\S+\s+set\b/i,
+    /\buninstall\b/i,
+    /\bkill\s+-9\b/i,
+];
+export function isHighRiskCommand(command) {
+    if (!command || !command.trim()) {
+        return false;
+    }
+    return HIGH_RISK_PATTERNS.some((pattern) => pattern.test(command));
+}
+export function requireConfirmationError(command) {
+    return [
+        '检测到高危命令，已被安全策略拦截。',
+        '请先调用 ask_user 工具明确征得用户确认，再重试并传入 confirmed=true。',
+        `命令: ${command}`,
+    ].join('\n');
+}
+//# sourceMappingURL=safety.js.map

package/dist/tools/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA,MAAM,kBAAkB,GAAa;IACnC,eAAe;IACf,mBAAmB;IACnB,aAAa;IACb,eAAe;IACf,aAAa;IACb,eAAe;IACf,sBAAsB;IACtB,8CAA8C;IAC9C,2BAA2B;IAC3B,8BAA8B;IAC9B,oBAAoB;IACpB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,OAAO;QACL,mBAAmB;QACnB,iDAAiD;QACjD,OAAO,OAAO,EAAE;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/tools/server.d.ts

@@ -0,0 +1,91 @@
+/**
+ * 创建 server_list 工具
+ */
+export declare function createServerListTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {};
+    };
+    execute: () => Promise<{
+        content: string;
+    }>;
+};
+/**
+ * 创建 server_add 工具
+ */
+export declare function createServerAddTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+                description: string;
+            };
+            host: {
+                type: string;
+                description: string;
+            };
+            user: {
+                type: string;
+                description: string;
+            };
+            port: {
+                type: string;
+                description: string;
+            };
+            authType: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            identityFile: {
+                type: string;
+                description: string;
+            };
+            password: {
+                type: string;
+                description: string;
+            };
+            description: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    execute: (args: any) => Promise<{
+        content: string;
+        isError: boolean;
+    } | {
+        content: string;
+        isError?: undefined;
+    }>;
+};
+/**
+ * 创建 server_remove 工具
+ */
+export declare function createServerRemoveTool(): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            name: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    execute: (args: any) => Promise<{
+        content: string;
+        isError: boolean;
+    } | {
+        content: string;
+        isError?: undefined;
+    }>;
+};

package/dist/tools/server.js

@@ -0,0 +1,149 @@
+// @ts-nocheck
+import { loadServers, saveServers } from '../config/manager.js';
+/**
+ * 创建 server_list 工具
+ */
+export function createServerListTool() {
+    return {
+        name: 'server_list',
+        description: '列出所有已配置的 SSH 服务器。',
+        inputSchema: {
+            type: 'object',
+            properties: {},
+        },
+        execute: async () => {
+            const { servers } = await loadServers();
+            if (servers.length === 0) {
+                return { content: '没有已配置的服务器。可以通过 server_add 工具添加。' };
+            }
+            const lines = [`共 ${servers.length} 台服务器：`, ''];
+            for (const s of servers) {
+                const auth = s.auth_type === 'password' ? 'password' : 'ssh-key';
+                lines.push(`- ${s.name}: ${s.user}@${s.host}:${s.port} (${auth})${s.description ? ` — ${s.description}` : ''}`);
+            }
+            return { content: lines.join('\n') };
+        },
+    };
+}
+/**
+ * 创建 server_add 工具
+ */
+export function createServerAddTool() {
+    return {
+        name: 'server_add',
+        description: '添加一台 SSH 服务器配置。调用前请通过对话确认服务器名称、主机地址等信息。如需密码认证，应通过 ask_user 工具收集密码。',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                name: {
+                    type: 'string',
+                    description: '服务器名称标识（唯一）',
+                },
+                host: {
+                    type: 'string',
+                    description: '主机地址（IP 或域名）',
+                },
+                user: {
+                    type: 'string',
+                    description: 'SSH 用户名，默认 root',
+                },
+                port: {
+                    type: 'number',
+                    description: 'SSH 端口，默认 22',
+                },
+                authType: {
+                    type: 'string',
+                    enum: ['ssh-key', 'password'],
+                    description: '认证方式，默认 ssh-key',
+                },
+                identityFile: {
+                    type: 'string',
+                    description: 'SSH 密钥文件路径（authType=ssh-key 时使用），默认 ~/.ssh/id_rsa',
+                },
+                password: {
+                    type: 'string',
+                    description: 'SSH 密码（authType=password 时使用）',
+                },
+                description: {
+                    type: 'string',
+                    description: '服务器描述（可选）',
+                },
+            },
+            required: ['name', 'host'],
+        },
+        execute: async (args) => {
+            const name = args.name;
+            const host = args.host;
+            const user = args.user || 'root';
+            const port = typeof args.port === 'number' ? args.port : 22;
+            const authType = args.authType === 'password' ? 'password' : 'ssh-key';
+            const identityFile = args.identityFile || (authType === 'ssh-key' ? '~/.ssh/id_rsa' : undefined);
+            const password = args.password;
+            const description = args.description || '';
+            // 校验
+            if (!name) {
+                return { content: '服务器名称不能为空', isError: true };
+            }
+            if (!host) {
+                return { content: '主机地址不能为空', isError: true };
+            }
+            if (isNaN(port) || port < 1 || port > 65535) {
+                return { content: '端口号无效（1-65535）', isError: true };
+            }
+            if (authType === 'password' && !password) {
+                return { content: '密码认证方式需要提供密码，请通过 ask_user 工具向用户收集', isError: true };
+            }
+            const config = await loadServers();
+            // 重名检测
+            if (config.servers.some((s) => s.name === name)) {
+                return { content: `服务器 "${name}" 已存在，请使用其他名称`, isError: true };
+            }
+            config.servers.push({
+                name,
+                host,
+                user,
+                port,
+                auth_type: authType,
+                identity_file: identityFile,
+                password,
+                description,
+            });
+            await saveServers(config);
+            return { content: `服务器 "${name}" 添加成功 (${user}@${host}:${port}, ${authType})` };
+        },
+    };
+}
+/**
+ * 创建 server_remove 工具
+ */
+export function createServerRemoveTool() {
+    return {
+        name: 'server_remove',
+        description: '删除一台已配置的 SSH 服务器。这是不可逆操作，调用前应通过 ask_user 工具确认用户意图。',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                name: {
+                    type: 'string',
+                    description: '要删除的服务器名称',
+                },
+            },
+            required: ['name'],
+        },
+        execute: async (args) => {
+            const name = args.name;
+            if (!name) {
+                return { content: '服务器名称不能为空', isError: true };
+            }
+            const config = await loadServers();
+            const index = config.servers.findIndex((s) => s.name === name);
+            if (index === -1) {
+                return { content: `未找到服务器: ${name}`, isError: true };
+            }
+            config.servers.splice(index, 1);
+            await saveServers(config);
+            return { content: `服务器 "${name}" 已删除` };
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/tools/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/tools/server.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChE;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAChC,OAAO;QACH,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,mBAAmB;QAChC,WAAW,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACjB;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;YAC1D,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,QAAQ,EAAE,EAAE,CAAC,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,CAAC;KACJ,CAAC;AACN,CAAC;AACD;;GAEG;AACH,MAAM,UAAU,mBAAmB;IAC/B,OAAO;QACH,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,oEAAoE;QACjF,WAAW,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACR,IAAI,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,aAAa;iBAC7B;gBACD,IAAI,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,cAAc;iBAC9B;gBACD,IAAI,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,iBAAiB;iBACjC;gBACD,IAAI,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,cAAc;iBAC9B;gBACD,QAAQ,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;oBAC7B,WAAW,EAAE,iBAAiB;iBACjC;gBACD,YAAY,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mDAAmD;iBACnE;gBACD,QAAQ,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+BAA+B;iBAC/C;gBACD,WAAW,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,WAAW;iBAC3B;aACJ;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SAC7B;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAC3C,KAAK;YACL,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAClD,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAC1C,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxD,CAAC;YACD,IAAI,QAAQ,KAAK,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACvC,OAAO,EAAE,OAAO,EAAE,mCAAmC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3E,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;YACnC,OAAO;YACP,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACnE,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAChB,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;gBAC3B,QAAQ;gBACR,WAAW;aACd,CAAC,CAAC;YACH,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,IAAI,WAAW,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,QAAQ,GAAG,EAAE,CAAC;QACpF,CAAC;KACJ,CAAC;AACN,CAAC;AACD;;GAEG;AACH,MAAM,UAAU,sBAAsB;IAClC,OAAO;QACH,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACR,IAAI,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,WAAW;iBAC3B;aACJ;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACrB;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACnD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC/D,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACzD,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC5C,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/tools/shell.d.ts

@@ -0,0 +1,11 @@
+import type { Tool } from './types.js';
+/**
+ * 截断过长的输出
+ * 超过 MAX_OUTPUT_LENGTH 时保留前后各 KEEP_LENGTH 字符
+ */
+export declare function truncateOutput(output: string): string;
+export declare function shouldBlockCommand(command: string, confirmed?: boolean): boolean;
+/**
+ * 创建 Shell 命令执行工具
+ */
+export declare function createShellTool(): Tool;