@qlingzzy/qling 1.0.0

package/dist/commands/tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/commands/tasks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAO1C,eAAO,MAAM,YAAY,EAAE,YAoH1B,CAAC"}

package/dist/commands/tasks.js

@@ -0,0 +1,117 @@
+function formatTimestamp(ts) {
+    if (!ts)
+        return "-";
+    return new Date(ts).toLocaleString();
+}
+export const tasksCommand = {
+    name: "/tasks",
+    aliases: ["/bashes", "/任务"],
+    description: "查看或取消当前 session 的后台 loop 任务",
+    usage: "/tasks [cancel <id>|clear|daemon [cancel <id>|clear]]",
+    execute: async (args, context) => {
+        const scheduler = context.scheduler;
+        if (!scheduler || typeof scheduler.listTasks !== "function") {
+            context.writeError("❌ 当前会话未启用任务调度器。");
+            return;
+        }
+        const sub = args[0]?.toLowerCase();
+        if (sub === "daemon" || sub === "durable" || sub === "bg") {
+            const daemonApi = context.daemonSessionApi;
+            if (!daemonApi) {
+                context.writeError("❌ 当前会话未启用 daemon session API。请先启动 `qling daemon start`。");
+                return;
+            }
+            const daemonSub = args[1]?.toLowerCase();
+            const sessionId = context.agentLoop.getSessionId?.() ?? "";
+            if (!sessionId) {
+                context.writeError("❌ 无法解析当前 sessionId。");
+                return;
+            }
+            if (daemonSub === "cancel") {
+                const id = args[2];
+                if (!id) {
+                    context.writeError("❌ 用法: /tasks daemon cancel <id>");
+                    return;
+                }
+                if (!daemonApi.cancelLoopTask) {
+                    context.writeError("❌ daemon session API 未实现 cancelLoopTask。");
+                    return;
+                }
+                const canceled = await daemonApi.cancelLoopTask(sessionId, id);
+                context.writeLine("");
+                context.writeLine(`🛑 已取消 daemon 任务 ${canceled.id}`);
+                context.writeLine("");
+                return;
+            }
+            if (daemonSub === "clear") {
+                if (!daemonApi.clearLoopTasks) {
+                    context.writeError("❌ daemon session API 未实现 clearLoopTasks。");
+                    return;
+                }
+                const count = await daemonApi.clearLoopTasks(sessionId);
+                context.writeLine("");
+                context.writeLine(`🧹 已取消 ${count} 个 daemon 任务。`);
+                context.writeLine("");
+                return;
+            }
+            if (!daemonApi.listLoopTasks) {
+                context.writeError("❌ daemon session API 未实现 listLoopTasks。");
+                return;
+            }
+            const tasks = await daemonApi.listLoopTasks(sessionId);
+            context.writeLine("");
+            context.writeLine("📡 【Daemon Session 任务】");
+            context.writeLine("-----------------------------------------");
+            if (tasks.length === 0) {
+                context.writeLine("(无)");
+            }
+            else {
+                for (const task of tasks) {
+                    context.writeLine(`- [${task.status.toUpperCase()}] ${task.id}`);
+                    context.writeLine(`  间隔: ${task.intervalMs}ms | 模式: ${task.mode} | runner: ${task.runner ?? "daemon"} | pending: ${task.pending ? "yes" : "no"}`);
+                    context.writeLine(`  下次: ${formatTimestamp(task.nextRunAt)} | 上次: ${formatTimestamp(task.lastRunAt)}`);
+                    context.writeLine(`  Prompt: ${task.prompt.slice(0, 100)}`);
+                }
+            }
+            context.writeLine("-----------------------------------------");
+            context.writeLine("");
+            return;
+        }
+        if (sub === "cancel") {
+            const id = args[1];
+            if (!id) {
+                context.writeError("❌ 用法: /tasks cancel <id>");
+                return;
+            }
+            const canceled = await scheduler.cancelTask(id);
+            context.writeLine("");
+            context.writeLine(`🛑 已取消任务 ${canceled.id}`);
+            context.writeLine("");
+            return;
+        }
+        if (sub === "clear") {
+            const count = await scheduler.cancelAllTasks();
+            context.writeLine("");
+            context.writeLine(`🧹 已取消 ${count} 个任务。`);
+            context.writeLine("");
+            return;
+        }
+        const tasks = await scheduler.listTasks();
+        context.writeLine("");
+        context.writeLine("📋 【当前 Session 任务】");
+        context.writeLine("-----------------------------------------");
+        if (tasks.length === 0) {
+            context.writeLine("(无)");
+        }
+        else {
+            for (const task of tasks) {
+                context.writeLine(`- [${task.status.toUpperCase()}] ${task.id}`);
+                context.writeLine(`  间隔: ${task.intervalMs}ms | 模式: ${task.mode} | runner: ${task.runner ?? "session"} | pending: ${task.pending ? "yes" : "no"}`);
+                context.writeLine(`  下次: ${formatTimestamp(task.nextRunAt)} | 上次: ${formatTimestamp(task.lastRunAt)}`);
+                context.writeLine(`  Prompt: ${task.prompt.slice(0, 100)}`);
+            }
+        }
+        context.writeLine("-----------------------------------------");
+        context.writeLine("");
+    },
+};

package/dist/commands/types.d.ts

@@ -0,0 +1,14 @@
+import { SlashCommandContext } from "./runtime.js";
+export interface SlashCommand {
+    name: string;
+    aliases?: string[];
+    description: string;
+    usage: string;
+    category?: "core" | "session" | "context" | "tools" | "memory" | "agents" | "git" | "skill" | "cloud" | "local";
+    argumentHint?: string;
+    availability?: "local" | "unsupported";
+    examples?: string[];
+    claudeCompatibleName?: string;
+    execute: (args: string[], context: SlashCommandContext) => Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/commands/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAChH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E"}

package/dist/commands/types.js

@@ -0,0 +1 @@
+export {};

package/dist/commands/verify.d.ts

@@ -0,0 +1,3 @@
+import { SlashCommand } from "./types.js";
+export declare const verifyCommand: SlashCommand;
+//# sourceMappingURL=verify.d.ts.map

package/dist/commands/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/commands/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,eAAO,MAAM,aAAa,EAAE,YAqF3B,CAAC"}

package/dist/commands/verify.js

@@ -0,0 +1,86 @@
+export const verifyCommand = {
+    name: "/verify",
+    aliases: ["/验证"],
+    description: "配置与运行构建/测试验证与自动自愈",
+    usage: "/verify status | set <command> | clear | run",
+    category: "local",
+    argumentHint: "status | set <command> | clear | run",
+    examples: [
+        "/verify status",
+        "/verify set \"npm run build\"",
+        "/verify clear",
+        "/verify run"
+    ],
+    execute: async (args, context) => {
+        const agentLoop = context.agentLoop;
+        if (!agentLoop || typeof agentLoop.getVerificationCommand !== "function") {
+            context.writeError("❌ 当前 AgentLoop 不支持自动验证。");
+            return;
+        }
+        if (args.length === 0) {
+            context.writeError("❌ 用法: /verify status | set <command> | clear | run");
+            return;
+        }
+        const sub = args[0].toLowerCase();
+        switch (sub) {
+            case "status": {
+                const cmd = agentLoop.getVerificationCommand();
+                context.writeLine("");
+                context.writeLine("🔍 【构建/测试自动验证状态】");
+                context.writeLine("-----------------------------------------");
+                if (cmd) {
+                    context.writeLine(`当前验证命令 : ${cmd}`);
+                    context.writeLine(`自动自愈状态 : 已开启 (写操作后自动触发，上限 3 轮)`);
+                }
+                else {
+                    context.writeLine("当前验证命令 : (未设置)");
+                    context.writeLine("自动自愈状态 : 已关闭");
+                }
+                context.writeLine("-----------------------------------------");
+                context.writeLine("");
+                break;
+            }
+            case "set": {
+                if (args.length < 2) {
+                    context.writeError("❌ 用法: /verify set <command>");
+                    return;
+                }
+                let cmd = args.slice(1).join(" ");
+                if ((cmd.startsWith('"') && cmd.endsWith('"')) || (cmd.startsWith("'") && cmd.endsWith("'"))) {
+                    cmd = cmd.slice(1, -1);
+                }
+                await agentLoop.setVerificationCommand(cmd);
+                context.writeLine(`\n✅ 自动验证命令设置成功: "${cmd}"，自愈开启。\n`);
+                break;
+            }
+            case "clear": {
+                await agentLoop.setVerificationCommand(null);
+                context.writeLine("\n🧹 自动验证命令已清除，自愈关闭。\n");
+                break;
+            }
+            case "run": {
+                const cmd = agentLoop.getVerificationCommand();
+                if (!cmd) {
+                    context.writeError("❌ 当前未配置任何验证命令。使用 '/verify set <command>' 进行配置。");
+                    return;
+                }
+                context.writeLine(`\n🏃 正在手动运行验证命令: "${cmd}"...`);
+                const { code, stdout, stderr } = await agentLoop.runVerificationCommand(cmd);
+                context.writeLine(`\n[stdout]\n${stdout}`);
+                if (stderr) {
+                    context.writeLine(`\n[stderr]\n${stderr}`);
+                }
+                if (code === 0) {
+                    context.writeLine("\n✅ 验证通过！");
+                }
+                else {
+                    context.writeError(`\n❌ 验证失败！退出码: ${code}`);
+                }
+                context.writeLine("");
+                break;
+            }
+            default:
+                context.writeError(`❌ 未知子命令: ${sub}。用法: /verify status | set <command> | clear | run`);
+        }
+    },
+};

package/dist/config-report.d.ts

@@ -0,0 +1,35 @@
+import type { QlingConfig } from "./config.js";
+export interface LocalConfigReport {
+    provider: string;
+    model: string;
+    endpoint: string;
+    apiKeyStatus: "missing" | "set(redacted)";
+    workspaceDir: string;
+    stateDir: string;
+    cacheDir: string;
+    maxSteps: number;
+    maxTokenBudget: number;
+    permissionMode: string;
+    permissionRuleCount: number;
+    features: Record<string, boolean>;
+    logging: {
+        level: string;
+        format: string;
+        inspectPrompt: boolean;
+        inspectRequest: boolean;
+    };
+    isolation: {
+        mode: string;
+        requireGit: boolean;
+        nonGitPolicy: string;
+    };
+    mcp: {
+        total: number;
+        enabled: number;
+    };
+    channelDefault: string;
+}
+export declare function sanitizeEndpoint(value: string | null | undefined): string;
+export declare function buildLocalConfigReport(config: QlingConfig): LocalConfigReport;
+export declare function formatLocalConfigReport(report: LocalConfigReport): string[];
+//# sourceMappingURL=config-report.d.ts.map

package/dist/config-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-report.d.ts","sourceRoot":"","sources":["../src/config-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,GAAG,eAAe,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,OAAO,CAAC;QACvB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,OAAO,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,GAAG,EAAE;QACH,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;CACxB;AAaD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAkBzE;AAUD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAoC7E;AAQD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAwB3E"}

package/dist/config-report.js

@@ -0,0 +1,100 @@
+import { formatPermissionMode } from "./statusline.js";
+function safeText(value, fallback = "-") {
+    return typeof value === "string" && value.trim() ? value.trim() : fallback;
+}
+function redactQueryLikeSecrets(value) {
+    return value.replace(/([?&](?:api_?key|key|token|secret|password)=)[^&#\s]*/gi, "$1<redacted>");
+}
+export function sanitizeEndpoint(value) {
+    const raw = safeText(value, "");
+    if (!raw)
+        return "-";
+    if (/^[a-zA-Z][a-zA-Z\d+.-]*:\/\//.test(raw)) {
+        try {
+            const url = new URL(raw);
+            url.username = "";
+            url.password = "";
+            url.search = "";
+            url.hash = "";
+            return url.toString().replace(/\/$/, url.pathname === "/" ? "/" : "");
+        }
+        catch {
+            return redactQueryLikeSecrets(raw);
+        }
+    }
+    return redactQueryLikeSecrets(raw);
+}
+function countEnabledMcpServers(config) {
+    const servers = Object.values(config.mcp?.servers ?? {});
+    return {
+        total: servers.length,
+        enabled: servers.filter((server) => server?.enabled).length,
+    };
+}
+export function buildLocalConfigReport(config) {
+    const mcp = countEnabledMcpServers(config);
+    return {
+        provider: safeText(config.llm.provider),
+        model: safeText(config.llm.model),
+        endpoint: sanitizeEndpoint(config.llm.endpoint),
+        apiKeyStatus: safeText(config.llm.api_key, "") ? "set(redacted)" : "missing",
+        workspaceDir: safeText(config.runtime.workspace_dir, "-"),
+        stateDir: safeText(config.runtime.file_state_dir),
+        cacheDir: safeText(config.runtime.file_cache_dir),
+        maxSteps: Number(config.runtime.max_steps ?? 0),
+        maxTokenBudget: Number(config.runtime.max_token_budget ?? 0),
+        permissionMode: safeText(config.guard.permissions.default, "allow"),
+        permissionRuleCount: config.guard.permissions.rules?.length ?? 0,
+        features: {
+            semantic_memory: Boolean(config.features.semantic_memory),
+            workflow_runtime: Boolean(config.features.workflow_runtime),
+            vision_tool: Boolean(config.features.vision_tool),
+            dashboard: Boolean(config.features.dashboard),
+            dynamic_discovery: Boolean(config.features.dynamic_discovery),
+            tool_spec_boost: Boolean(config.features.tool_spec_boost),
+        },
+        logging: {
+            level: safeText(config.logging.level),
+            format: safeText(config.logging.format),
+            inspectPrompt: Boolean(config.logging.inspect_prompt),
+            inspectRequest: Boolean(config.logging.inspect_request),
+        },
+        isolation: {
+            mode: safeText(config.agents.isolation.mode),
+            requireGit: Boolean(config.agents.isolation.require_git),
+            nonGitPolicy: safeText(config.agents.isolation.non_git_policy),
+        },
+        mcp,
+        channelDefault: safeText(config.channels.default),
+    };
+}
+function formatFeatureFlags(features) {
+    return Object.entries(features)
+        .map(([name, enabled]) => `${name}=${enabled ? "on" : "off"}`)
+        .join(" ");
+}
+export function formatLocalConfigReport(report) {
+    return [
+        "",
+        "⚙️ 本地配置摘要",
+        "-----------------------------------------",
+        `Provider   : ${report.provider}`,
+        `Model      : ${report.model}`,
+        `Endpoint   : ${report.endpoint}`,
+        `Api key    : ${report.apiKeyStatus}`,
+        `Workspace  : ${report.workspaceDir}`,
+        `State dir  : ${report.stateDir}`,
+        `Cache dir  : ${report.cacheDir}`,
+        `Runtime    : max_steps=${report.maxSteps} max_tokens=${report.maxTokenBudget.toLocaleString()}`,
+        `Permissions: ${formatPermissionMode(report.permissionMode)}`,
+        `Rules      : ${report.permissionRuleCount}`,
+        `Features   : ${formatFeatureFlags(report.features)}`,
+        `Logging    : level=${report.logging.level} format=${report.logging.format} inspect_prompt=${report.logging.inspectPrompt} inspect_request=${report.logging.inspectRequest}`,
+        `Isolation  : mode=${report.isolation.mode} require_git=${report.isolation.requireGit} non_git=${report.isolation.nonGitPolicy}`,
+        `MCP        : enabled=${report.mcp.enabled}/${report.mcp.total}`,
+        `Channel    : ${report.channelDefault}`,
+        "-----------------------------------------",
+        "边界      : 只读取当前本地配置；不修改配置、不调用模型、不联网；密钥始终脱敏。",
+        "",
+    ];
+}

package/dist/config.d.ts

@@ -0,0 +1,217 @@
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export type LogFormat = "text" | "json";
+export interface GuardConfig {
+    enabled: boolean;
+    network: {
+        url_fetch: {
+            allowed_url_prefixes: string[];
+            deny_private_ips: boolean;
+            follow_redirects: boolean;
+        };
+    };
+    redaction: {
+        enabled: boolean;
+        patterns: string[];
+    };
+    audit: {
+        jsonl_path: string;
+    };
+    rate_limit: {
+        enabled: boolean;
+        max_per_minute: number;
+    };
+    content_filter: {
+        enabled: boolean;
+        pii_detection: boolean;
+        injection_detection: boolean;
+        custom_patterns: string[];
+    };
+    permissions: {
+        default: "allow" | "deny" | "ask";
+        rules: Array<{
+            tool_pattern: string;
+            decision: "allow" | "deny" | "ask";
+            reason?: string;
+        }>;
+    };
+}
+export interface WorkflowConfig {
+    checkpoint_dir: string;
+    retry_policy: {
+        max_attempts: number;
+        initial_delay_ms: number;
+        backoff_factor: number;
+    };
+    max_parallel_states: number;
+}
+export interface VisionConfig {
+    provider: string;
+    model: string;
+    max_image_size_mb: number;
+    timeout_ms: number;
+}
+export interface DashboardConfig {
+    enabled: boolean;
+    port: number;
+    auth_mode: "none" | "token";
+}
+export interface DiscoveryConfig {
+    local_dirs: string[];
+    remote_manifests: string[];
+    allow_unsigned: boolean;
+}
+export interface QlingConfig {
+    llm: {
+        provider: string;
+        model: string;
+        endpoint: string;
+        api_key: string;
+        request_timeout_ms: number;
+    };
+    runtime: {
+        workspace_dir: string | null;
+        file_cache_dir: string;
+        file_state_dir: string;
+        max_steps: number;
+        parse_retries: number;
+        max_token_budget: number;
+        tool_repeat_limit: number;
+        timeout_ms: number;
+    };
+    features: {
+        semantic_memory: boolean;
+        workflow_runtime: boolean;
+        vision_tool: boolean;
+        dashboard: boolean;
+        dynamic_discovery: boolean;
+        tool_spec_boost: boolean;
+    };
+    logging: {
+        level: LogLevel;
+        format: LogFormat;
+        inspect_prompt: boolean;
+        inspect_request: boolean;
+        inspect_dump_dir: string;
+    };
+    tools: Record<string, {
+        enabled: boolean;
+    }>;
+    memory: {
+        wal_enabled: boolean;
+        projection_interval_ms: number;
+        dream_llm_enabled: boolean;
+        dream_turn_threshold: number;
+        max_memories: number;
+        semantic: {
+            provider: string;
+            model: string;
+            dim: number;
+            top_k: number;
+            rebuild_policy: "incremental" | "full";
+        };
+    };
+    workflow: WorkflowConfig;
+    vision: VisionConfig;
+    dashboard: DashboardConfig;
+    discovery: DiscoveryConfig;
+    guard: GuardConfig;
+    mcp: {
+        servers: Record<string, {
+            command: string;
+            args: string[];
+            env?: Record<string, string>;
+            enabled: boolean;
+            transport?: "stdio" | "http";
+            url?: string;
+            headers?: Record<string, string>;
+        }>;
+        connection_timeout_ms: number;
+        call_timeout_ms: number;
+    };
+    metrics: {
+        enabled: boolean;
+        dir: string;
+        flush_interval_ms: number;
+        retention_days: number;
+    };
+    channels: {
+        default: string;
+        telegram: {
+            token: string;
+            poll_interval_ms: number;
+            allowed_chat_ids: string[];
+        };
+        slack: {
+            bot_token: string;
+            app_token: string;
+            channel_ids: string[];
+            poll_interval_ms: number;
+        };
+    };
+    routes: {
+        main_loop: {
+            profile: string;
+            fallback_profiles: string[];
+        };
+        plan_create: {
+            profile: string;
+            fallback_profiles: string[];
+        };
+        verify: {
+            profile: string;
+            fallback_profiles: string[];
+        };
+    };
+    agents: {
+        isolation: {
+            mode: "worktree" | "off";
+            require_git: boolean;
+            non_git_policy: "warn" | "deny" | "off";
+        };
+    };
+}
+export interface CliGlobalOptions {
+    configPath?: string;
+    workspaceDir?: string;
+    noWorkspace?: boolean;
+    continueSession?: boolean;
+    resumeSession?: string;
+    fileCacheDir?: string;
+    fileStateDir?: string;
+    inspectPrompt?: boolean;
+    inspectRequest?: boolean;
+    logFormat?: LogFormat;
+    logLevel?: LogLevel;
+    model?: string;
+    provider?: string;
+    endpoint?: string;
+    apiKey?: string;
+}
+export interface LoadedConfig {
+    config: QlingConfig;
+    warnings: string[];
+    usedConfigPath?: string;
+}
+export declare function buildDefaultConfig(): QlingConfig;
+export declare function loadQlingConfig(cli: CliGlobalOptions, env?: NodeJS.ProcessEnv): Promise<LoadedConfig>;
+export declare function applyConfigToProcessEnv(config: QlingConfig): void;
+export declare function guardConfigFromEnv(env?: NodeJS.ProcessEnv): GuardConfig;
+export interface EnvSecretHit {
+    file: string;
+    varName: string;
+}
+/**
+ * Pure scanner for a single .env file content.
+ * Returns only varName + file. NEVER includes or logs the secret value.
+ */
+export declare function scanDotEnvContent(filePath: string, content: string): EnvSecretHit[];
+/**
+ * Scan common runtime locations for plaintext secrets in .env files.
+ * Locations: ~/.qling/.env and process.cwd()/.env
+ * Only reports hits; never emits values.
+ */
+/** 参与密钥扫描的 env 文件名（相对目录） */
+export declare const SECRET_ENV_FILENAMES: string[];
+export declare function listSecretScanCandidatePaths(cwd?: string, stateDir?: string): string[];
+export declare function scanRuntimeDotEnvSecrets(stateDir?: string): Promise<EnvSecretHit[]>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAC3D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE;QACP,SAAS,EAAE;YACT,oBAAoB,EAAE,MAAM,EAAE,CAAC;YAC/B,gBAAgB,EAAE,OAAO,CAAC;YAC1B,gBAAgB,EAAE,OAAO,CAAC;SAC3B,CAAC;KACH,CAAC;IACF,SAAS,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF,KAAK,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,UAAU,EAAE;QACV,OAAO,EAAE,OAAO,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,cAAc,EAAE;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,EAAE,OAAO,CAAC;QACvB,mBAAmB,EAAE,OAAO,CAAC;QAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;QAClC,KAAK,EAAE,KAAK,CAAC;YACX,YAAY,EAAE,MAAM,CAAC;YACrB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;YACnC,MAAM,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE;QACZ,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,kBAAkB,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,OAAO,EAAE;QACP,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;QACzB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,EAAE;QACR,eAAe,EAAE,OAAO,CAAC;QACzB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,WAAW,EAAE,OAAO,CAAC;QACrB,SAAS,EAAE,OAAO,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,eAAe,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF,OAAO,EAAE;QACP,KAAK,EAAE,QAAQ,CAAC;QAChB,MAAM,EAAE,SAAS,CAAC;QAClB,cAAc,EAAE,OAAO,CAAC;QACxB,eAAe,EAAE,OAAO,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC5C,MAAM,EAAE;QACN,WAAW,EAAE,OAAO,CAAC;QACrB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,QAAQ,EAAE,MAAM,CAAC;YACjB,KAAK,EAAE,MAAM,CAAC;YACd,GAAG,EAAE,MAAM,CAAC;YACZ,KAAK,EAAE,MAAM,CAAC;YACd,cAAc,EAAE,aAAa,GAAG,MAAM,CAAC;SACxC,CAAC;KACH,CAAC;IACF,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,eAAe,CAAC;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE;QACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,IAAI,EAAE,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC;YACjB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;YAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAClC,CAAC,CAAC;QACH,qBAAqB,EAAE,MAAM,CAAC;QAC9B,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE;YACR,KAAK,EAAE,MAAM,CAAC;YACd,gBAAgB,EAAE,MAAM,CAAC;YACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;SAC5B,CAAC;QACF,KAAK,EAAE;YACL,SAAS,EAAE,MAAM,CAAC;YAClB,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,EAAE,MAAM,EAAE,CAAC;YACtB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC;KACH,CAAC;IACF,MAAM,EAAE;QACN,SAAS,EAAE;YACT,OAAO,EAAE,MAAM,CAAC;YAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;SAC7B,CAAC;QACF,WAAW,EAAE;YACX,OAAO,EAAE,MAAM,CAAC;YAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;SAC7B,CAAC;QACF,MAAM,EAAE;YACN,OAAO,EAAE,MAAM,CAAC;YAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;SAC7B,CAAC;KACH,CAAC;IACF,MAAM,EAAE;QACN,SAAS,EAAE;YACT,IAAI,EAAE,UAAU,GAAG,KAAK,CAAC;YACzB,WAAW,EAAE,OAAO,CAAC;YACrB,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;SACzC,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD,wBAAgB,kBAAkB,IAAI,WAAW,CAiKhD;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,YAAY,CAAC,CA8BvB;AAqBD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CA8GjE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,WAAW,CAmDpF;AAySD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAkBnF;AAED;;;;GAIG;AACH,4BAA4B;AAC5B,eAAO,MAAM,oBAAoB,UAQhC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,GAAG,GAAE,MAAsB,EAC3B,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,EAAE,CASV;AAED,wBAAsB,wBAAwB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAgBzF"}