@sofagent/rules 1.2.9 → 1.3.0

package/dist/engine.js

@@ -1,7 +1,7 @@
 "use strict";
 // ============================================================
 // engine.ts · RulesEngine 纯函数入口
-// v1.2.9：P3 编排引擎内嵌——规则引擎核心
+// v1.3.0：P3 编排引擎内嵌——规则引擎核心
 // ============================================================
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RulesEngine = void 0;

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 export { RulesEngine } from './engine';
 export type { ToolRule, ToolCallContext, InterceptVerdict, RuleStatus, RuleClass } from './types';
 export { defaultToolRules } from './rules';
+export { shouldAllow } from './should-allow';
+export type { ShouldAllowResult } from './should-allow';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,12 +1,15 @@
 "use strict";
 // ============================================================
 // index.ts · @sofagent/rules barrel export
-// v1.2.9：只导出 5 个公开符号，内部实现不外露
+// v1.3.0：只导出 5 个公开符号，内部实现不外露
 // ============================================================
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.defaultToolRules = exports.RulesEngine = void 0;
+exports.shouldAllow = exports.defaultToolRules = exports.RulesEngine = void 0;
 var engine_1 = require("./engine");
 Object.defineProperty(exports, "RulesEngine", { enumerable: true, get: function () { return engine_1.RulesEngine; } });
 var rules_1 = require("./rules");
 Object.defineProperty(exports, "defaultToolRules", { enumerable: true, get: function () { return rules_1.defaultToolRules; } });
+// v1.3.0 (交付 2)：tool-gate 便捷判定 API
+var should_allow_1 = require("./should-allow");
+Object.defineProperty(exports, "shouldAllow", { enumerable: true, get: function () { return should_allow_1.shouldAllow; } });
 //# sourceMappingURL=index.js.map

package/dist/rules/index.js

@@ -1,7 +1,7 @@
 "use strict";
 // ============================================================
 // rules/index.ts · 默认规则注册表
-// v1.2.9：P3 编排引擎内嵌——默认 tool 规则集合
+// v1.3.0：P3 编排引擎内嵌——默认 tool 规则集合
 // ============================================================
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.defaultToolRules = void 0;

package/dist/rules/tool-injection.js

@@ -1,7 +1,7 @@
 "use strict";
 // ============================================================
 // tool-injection.ts · 移植 audit rule-a9（prompt injection 检测）
-// v1.2.9：tool 视角——扫 args 里的 prompt injection 模式
+// v1.3.0：tool 视角——扫 args 里的 prompt injection 模式
 // ============================================================
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.toolInjection = void 0;
@@ -55,6 +55,7 @@ exports.toolInjection = {
     name: 'tool-injection',
     number: 9,
     ruleClass: '业务底线',
+    ruleType: 'tool',
     check(ctx) {
         const allStrings = extractStrings(ctx.args);
         const hits = [];

package/dist/rules/tool-secret-leak.js

@@ -1,8 +1,8 @@
 "use strict";
 // ============================================================
 // tool-secret-leak.ts · 移植 audit rule-a2（密钥泄漏检测）
-// v1.2.9：tool 视角——扫 args 字面量里的密钥模式
-// v1.2.9 SECRET_PATTERNS 抽到 @sofagent/core 共享——此前本文件用严格
+// v1.3.0：tool 视角——扫 args 字面量里的密钥模式
+// v1.3.0 SECRET_PATTERNS 抽到 @sofagent/core 共享——此前本文件用严格
 //   48 位 sk- 模式导致 32-47 位密钥被 ToolGate 放行（与 A2 漂移互补成洞）。
 // ============================================================
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -31,6 +31,7 @@ exports.toolSecretLeak = {
     name: 'tool-secret-leak',
     number: 2,
     ruleClass: '业务底线',
+    ruleType: 'tool',
     check(ctx) {
         const allStrings = extractStrings(ctx.args);
         const detections = [];

package/dist/rules/tool-sensitive-file.js

@@ -1,7 +1,7 @@
 "use strict";
 // ============================================================
 // tool-sensitive-file.ts · 移植 audit rule-a1（敏感文件保护）
-// v1.2.9：tool 视角——校验 args 里的文件路径
+// v1.3.0：tool 视角——校验 args 里的文件路径
 // ============================================================
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.toolSensitiveFile = void 0;
@@ -76,6 +76,7 @@ exports.toolSensitiveFile = {
     name: 'tool-sensitive-file',
     number: 1,
     ruleClass: '业务底线',
+    ruleType: 'tool',
     check(ctx) {
         const filePaths = extractFilePaths(ctx.args);
         const hits = [];

package/dist/should-allow.d.ts

@@ -0,0 +1,20 @@
+import type { RulesEngine } from './engine';
+import type { ToolCallContext } from './types';
+/** shouldAllow 判定结果 */
+export interface ShouldAllowResult {
+    /** 是否放行（FAIL → false；WARN/PASS → true） */
+    allow: boolean;
+    /** 判定理由（聚合 details） */
+    reason: string;
+    /** 是否需要人工批准（任一规则 requireApproval=true） */
+    requireApproval: boolean;
+}
+/**
+ * 判定工具调用是否应放行。
+ *
+ * @param engine 规则引擎实例
+ * @param ctx tool call 上下文
+ * @returns ShouldAllowResult
+ */
+export declare function shouldAllow(engine: RulesEngine, ctx: ToolCallContext): ShouldAllowResult;
+//# sourceMappingURL=should-allow.d.ts.map

package/dist/should-allow.js

@@ -0,0 +1,28 @@
+"use strict";
+// ============================================================
+// should-allow.ts · tool-gate 便捷 API（v1.3.0 交付 2）
+//
+// shouldAllow()——编排层/运行时 wrapper 判定「本次工具调用是否放行」。
+// 聚合 RulesEngine.check + aggregate，并额外暴露 requireApproval：
+// 任一规则判定 requireApproval=true 时挂起人工批准（交付 3 HITL 消费）。
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shouldAllow = shouldAllow;
+/**
+ * 判定工具调用是否应放行。
+ *
+ * @param engine 规则引擎实例
+ * @param ctx tool call 上下文
+ * @returns ShouldAllowResult
+ */
+function shouldAllow(engine, ctx) {
+    const verdicts = engine.check(ctx);
+    const agg = engine.aggregate(verdicts);
+    const needApproval = verdicts.some((v) => v.requireApproval === true);
+    return {
+        allow: agg.status !== 'FAIL',
+        reason: agg.details.join('; '),
+        requireApproval: needApproval,
+    };
+}
+//# sourceMappingURL=should-allow.js.map

package/dist/types.d.ts

@@ -31,6 +31,8 @@ export interface InterceptVerdict {
     details: string[];
     /** 修复建议 */
     suggestion: string;
+    /** v1.3.0 新增：需要人工批准（HITL 挂起，交付 3 消费） */
+    requireApproval?: boolean;
 }
 /**
  * Tool 视角规则接口
@@ -43,6 +45,10 @@ export interface ToolRule {
     number: number;
     /** 规则等级 */
     ruleClass: RuleClass;
+    /** v1.3.0 (交付 7)：双规则统一——'tool' = 运行时拦截工具调用 */
+    ruleType: 'tool';
+    /** v1.3.0 (交付 10 MA7)：规则「为什么」记忆 namespace——提取规则触发上下文时按此分组 */
+    whyMemoryNamespace?: string;
     /**
      * 检查 tool call 是否违规
      * @param ctx tool call 上下文

package/dist/types.js

@@ -1,7 +1,7 @@
 "use strict";
 // ============================================================
 // types.ts · P3 编排引擎内嵌——tool call 拦截器类型定义
-// v1.2.9：从 audit 规则抽出为纯函数，零 fs/git 依赖
+// v1.3.0：从 audit 规则抽出为纯函数，零 fs/git 依赖
 // ============================================================
 Object.defineProperty(exports, "__esModule", { value: true });
 //# sourceMappingURL=types.js.map

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@sofagent/rules",
-  "version": "1.2.9",
+  "version": "1.3.0",
   "description": "sofagent 规则引擎纯函数包——从 audit 抽出，零 fs/git 依赖，供编排引擎 tool call 事前拦截",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
     "build": "npm run clean && tsc",
-    "clean": "rm -rf dist",
+    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
     "test": "vitest run"
   },
   "keywords": [
@@ -28,6 +28,6 @@
     "README.md"
   ],
   "dependencies": {
-    "@sofagent/core": "1.2.9"
+    "@sofagent/core": "1.3.0"
   }
 }