@xdxer/dingtalk-agent 0.1.4-beta.8 → 0.1.4-beta.9

package/dist/src/eval-evidence.js

@@ -0,0 +1,193 @@
+import { copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, realpathSync, } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { bootstrap } from './bootstrap.js';
+/**
+ * Canonicalize an evidence/tool path even when the final file does not exist yet.
+ * Resolving the nearest existing ancestor also normalizes macOS /var -> /private/var
+ * aliases, which prevents a valid system-temp sandbox path from being misclassified.
+ */
+export function canonicalEvalPath(input) {
+    let cursor = resolve(input);
+    const missing = [];
+    while (!existsSync(cursor)) {
+        const parent = dirname(cursor);
+        if (parent === cursor)
+            break;
+        missing.unshift(basename(cursor));
+        cursor = parent;
+    }
+    const existing = existsSync(cursor) ? realpathSync(cursor) : cursor;
+    return resolve(existing, ...missing);
+}
+export function isWorkspacePathInside(workspace, input) {
+    const rel = relative(canonicalEvalPath(workspace), canonicalEvalPath(input));
+    return rel === '' ||
+        (rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`));
+}
+export function relativeWorkspacePath(workspace, input) {
+    return relative(canonicalEvalPath(workspace), canonicalEvalPath(input))
+        .split('\\').join('/') || '.';
+}
+export function evaluateWorkspaceEvidence(workspace, expectations = []) {
+    const root = realpathSync(resolve(workspace));
+    return expectations.map((expectation) => {
+        try {
+            if (expectation.type === 'agentDefinition') {
+                const definition = bootstrap(root).definition;
+                const skills = definition.skills.map((item) => item.name);
+                const missing = expectation.requiredSkills.filter((name) => !skills.includes(name));
+                const passed = definition.status === expectation.status && missing.length === 0;
+                return {
+                    id: expectation.id,
+                    surface: expectation.surface,
+                    type: expectation.type,
+                    passed,
+                    detail: `status=${definition.status}; skills=${skills.join(',')}; missing=${missing.join(',') || '-'}`,
+                    hash: definition.hash,
+                };
+            }
+            const path = safeEvidencePath(root, expectation.path);
+            const rel = relative(root, path).split('\\').join('/');
+            if (expectation.type === 'pathAbsent') {
+                return {
+                    id: expectation.id, surface: expectation.surface, type: expectation.type,
+                    passed: !existsSync(path), path: rel,
+                    detail: existsSync(path) ? `unexpected path exists: ${rel}` : `absent: ${rel}`,
+                };
+            }
+            if (!existsSync(path)) {
+                return {
+                    id: expectation.id, surface: expectation.surface, type: expectation.type,
+                    passed: false, path: rel, detail: `missing: ${rel}`,
+                };
+            }
+            // Existing symlinks are resolved after the lexical check so they cannot escape the sandbox.
+            safeEvidencePath(root, expectation.path, true);
+            const stat = lstatSync(path);
+            if (stat.isSymbolicLink())
+                throw new Error(`不接受符号链接证据: ${rel}`);
+            if (expectation.type === 'pathExists') {
+                const kindMatched = expectation.kind === undefined ||
+                    (expectation.kind === 'file' ? stat.isFile() : stat.isDirectory());
+                const bytes = stat.isFile() ? stat.size : 0;
+                const sizeMatched = expectation.minBytes === undefined || bytes >= expectation.minBytes;
+                return {
+                    id: expectation.id, surface: expectation.surface, type: expectation.type,
+                    passed: kindMatched && sizeMatched, path: rel,
+                    detail: `kind=${stat.isFile() ? 'file' : stat.isDirectory() ? 'directory' : 'other'}; bytes=${bytes}`,
+                    hash: stat.isFile() ? sha256(readFileSync(path)) : undefined,
+                };
+            }
+            if (!stat.isFile())
+                throw new Error(`文本/JSON 证据必须是文件: ${rel}`);
+            const body = readFileSync(path, 'utf8');
+            if (expectation.type === 'textIncludesAll' || expectation.type === 'textExcludesAll') {
+                const matches = expectation.values.filter((value) => body.includes(value));
+                const passed = expectation.type === 'textIncludesAll'
+                    ? matches.length === expectation.values.length
+                    : matches.length === 0;
+                return {
+                    id: expectation.id, surface: expectation.surface, type: expectation.type,
+                    passed, path: rel, hash: sha256(body),
+                    detail: `matched=${JSON.stringify(matches)}; expected=${JSON.stringify(expectation.values)}`,
+                };
+            }
+            if (expectation.type !== 'jsonEquals')
+                throw new Error(`未知证据断言: ${expectation.type}`);
+            const parsed = JSON.parse(body);
+            const actual = jsonPointer(parsed, expectation.pointer);
+            const passed = stable(actual) === stable(expectation.value);
+            return {
+                id: expectation.id, surface: expectation.surface, type: expectation.type,
+                passed, path: rel, hash: sha256(body),
+                detail: `pointer=${expectation.pointer}; actual=${stable(actual)}; expected=${stable(expectation.value)}`,
+            };
+        }
+        catch (error) {
+            return {
+                id: expectation.id,
+                surface: expectation.surface,
+                type: expectation.type,
+                passed: false,
+                detail: error.message,
+                ...('path' in expectation ? { path: expectation.path } : {}),
+            };
+        }
+    });
+}
+export function snapshotWorkspaceEvidence(workspace, output, expectations = []) {
+    const root = realpathSync(resolve(workspace));
+    const snapshots = [];
+    const seen = new Set();
+    for (const expectation of expectations) {
+        if (!('path' in expectation) || expectation.type === 'pathAbsent')
+            continue;
+        const source = safeEvidencePath(root, expectation.path, true);
+        if (!existsSync(source))
+            continue;
+        const stat = lstatSync(source);
+        if (!stat.isFile() || stat.isSymbolicLink())
+            continue;
+        const rel = relative(root, source).split('\\').join('/');
+        const key = `${expectation.surface}:${rel}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        const destination = join(output, expectation.surface, rel);
+        mkdirSync(dirname(destination), { recursive: true });
+        copyFileSync(source, destination);
+        const body = readFileSync(source);
+        snapshots.push({
+            surface: expectation.surface,
+            path: `${expectation.surface}/${rel}`,
+            hash: sha256(body),
+            bytes: body.byteLength,
+        });
+    }
+    return snapshots;
+}
+function safeEvidencePath(root, input, resolveExisting = false) {
+    if (!input || isAbsolute(input) || input.split(/[\\/]/).includes('..')) {
+        throw new Error(`证据路径必须是 Workspace 内相对路径: ${input}`);
+    }
+    const candidate = resolve(root, input);
+    const lexical = relative(root, candidate);
+    if (lexical === '..' || lexical.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`)) {
+        throw new Error(`证据路径越界: ${input}`);
+    }
+    if (resolveExisting && existsSync(candidate)) {
+        const actual = realpathSync(candidate);
+        const rel = relative(root, actual);
+        if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`)) {
+            throw new Error(`证据路径通过链接越界: ${input}`);
+        }
+    }
+    return candidate;
+}
+function jsonPointer(value, pointer) {
+    if (pointer === '')
+        return value;
+    if (!pointer.startsWith('/'))
+        throw new Error(`JSON pointer 必须以 / 开头: ${pointer}`);
+    return pointer.slice(1).split('/').reduce((current, token) => {
+        const key = token.replace(/~1/g, '/').replace(/~0/g, '~');
+        if (current === null || current === undefined || typeof current !== 'object' || !(key in current)) {
+            throw new Error(`JSON pointer 不存在: ${pointer}`);
+        }
+        return current[key];
+    }, value);
+}
+function stable(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stable).join(',')}]`;
+    if (value && typeof value === 'object') {
+        return `{${Object.entries(value).sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, item]) => `${JSON.stringify(key)}:${stable(item)}`).join(',')}}`;
+    }
+    return JSON.stringify(value) ?? 'undefined';
+}
+function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+//# sourceMappingURL=eval-evidence.js.map

package/dist/src/eval-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-evidence.js","sourceRoot":"","sources":["../../src/eval-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,GAC3E,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClF,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AA0D1C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,MAAM,KAAK,MAAM;YAAE,MAAK;QAC5B,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QACjC,MAAM,GAAG,MAAM,CAAA;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IACnE,OAAO,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,KAAa;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5E,OAAO,GAAG,KAAK,EAAE;QACf,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,KAAa;IACpE,OAAO,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;SACpE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,eAA0C,EAAE;IAE5C,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;IAC7C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC3C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAA;gBAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACzD,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;gBACnF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAA;gBAC/E,OAAO;oBACL,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,OAAO,EAAE,WAAW,CAAC,OAAO;oBAC5B,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,MAAM;oBACN,MAAM,EAAE,UAAU,UAAU,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE;oBACtG,IAAI,EAAE,UAAU,CAAC,IAAI;iBACtB,CAAA;YACH,CAAC;YAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAA;YACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACtD,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI;oBACxE,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG;oBACpC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE;iBAC/E,CAAA;YACH,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI;oBACxE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,GAAG,EAAE;iBACpD,CAAA;YACH,CAAC;YAED,4FAA4F;YAC5F,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC5B,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,CAAA;YAC/D,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,KAAK,SAAS;oBAChD,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;gBACpE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC3C,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAA;gBACvF,OAAO;oBACL,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI;oBACxE,MAAM,EAAE,WAAW,IAAI,WAAW,EAAE,IAAI,EAAE,GAAG;oBAC7C,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,KAAK,EAAE;oBACrG,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC7D,CAAA;YACH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAA;YAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACvC,IAAI,WAAW,CAAC,IAAI,KAAK,iBAAiB,IAAI,WAAW,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACrF,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,KAAK,iBAAiB;oBACnD,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,MAAM;oBAC9C,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAA;gBACxB,OAAO;oBACL,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI;oBACxE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;oBACrC,MAAM,EAAE,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;iBAC7F,CAAA;YACH,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;YACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAA;YAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;YACvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAC3D,OAAO;gBACL,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI;gBACxE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBACrC,MAAM,EAAE,WAAW,WAAW,CAAC,OAAO,YAAY,MAAM,CAAC,MAAM,CAAC,cAAc,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE;aAC1G,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAG,KAAe,CAAC,OAAO;gBAChC,GAAG,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,MAAc,EACd,eAA0C,EAAE;IAE5C,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;IAC7C,MAAM,SAAS,GAKV,EAAE,CAAA;IACP,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY;YAAE,SAAQ;QAC3E,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC7D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAQ;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,SAAQ;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,OAAO,IAAI,GAAG,EAAE,CAAA;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QAC1D,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACjC,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI,EAAE,GAAG,WAAW,CAAC,OAAO,IAAI,GAAG,EAAE;YACrC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,KAAK,EAAE,IAAI,CAAC,UAAU;SACvB,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa,EAAE,eAAe,GAAG,KAAK;IAC5E,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACzC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,eAAe,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAClC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,OAAe;IAClD,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IAChC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAA;IAClF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAY,EAAE,KAAK,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACzD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC,EAAE,KAAY,CAAC,CAAA;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACnE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aAC/F,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAChF,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,WAAW,CAAA;AAC7C,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC","sourcesContent":["import {\n  copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, realpathSync,\n} from 'node:fs'\nimport { createHash } from 'node:crypto'\nimport { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path'\nimport { bootstrap } from './bootstrap.js'\n\nexport type EvalEvidenceSurface = 'filesystem' | 'workspace' | 'artifact'\n\ntype PathExpectation = {\n  id: string\n  surface: EvalEvidenceSurface\n  type: 'pathExists'\n  path: string\n  kind?: 'file' | 'directory'\n  minBytes?: number\n}\n\ntype AbsentExpectation = {\n  id: string\n  surface: EvalEvidenceSurface\n  type: 'pathAbsent'\n  path: string\n}\n\ntype TextExpectation = {\n  id: string\n  surface: EvalEvidenceSurface\n  type: 'textIncludesAll' | 'textExcludesAll'\n  path: string\n  values: string[]\n}\n\ntype JsonExpectation = {\n  id: string\n  surface: EvalEvidenceSurface\n  type: 'jsonEquals'\n  path: string\n  pointer: string\n  value: unknown\n}\n\ntype DefinitionExpectation = {\n  id: string\n  surface: 'workspace'\n  type: 'agentDefinition'\n  status: 'ready' | 'partial'\n  requiredSkills: string[]\n}\n\nexport type EvalEvidenceExpectation = PathExpectation | AbsentExpectation |\n  TextExpectation | JsonExpectation | DefinitionExpectation\n\nexport interface EvalEvidenceResult {\n  id: string\n  surface: EvalEvidenceSurface\n  type: EvalEvidenceExpectation['type']\n  passed: boolean\n  detail: string\n  path?: string\n  hash?: string\n}\n\n/**\n * Canonicalize an evidence/tool path even when the final file does not exist yet.\n * Resolving the nearest existing ancestor also normalizes macOS /var -> /private/var\n * aliases, which prevents a valid system-temp sandbox path from being misclassified.\n */\nexport function canonicalEvalPath(input: string): string {\n  let cursor = resolve(input)\n  const missing: string[] = []\n  while (!existsSync(cursor)) {\n    const parent = dirname(cursor)\n    if (parent === cursor) break\n    missing.unshift(basename(cursor))\n    cursor = parent\n  }\n  const existing = existsSync(cursor) ? realpathSync(cursor) : cursor\n  return resolve(existing, ...missing)\n}\n\nexport function isWorkspacePathInside(workspace: string, input: string): boolean {\n  const rel = relative(canonicalEvalPath(workspace), canonicalEvalPath(input))\n  return rel === '' ||\n    (rel !== '..' && !rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`))\n}\n\nexport function relativeWorkspacePath(workspace: string, input: string): string {\n  return relative(canonicalEvalPath(workspace), canonicalEvalPath(input))\n    .split('\\\\').join('/') || '.'\n}\n\nexport function evaluateWorkspaceEvidence(\n  workspace: string,\n  expectations: EvalEvidenceExpectation[] = [],\n): EvalEvidenceResult[] {\n  const root = realpathSync(resolve(workspace))\n  return expectations.map((expectation) => {\n    try {\n      if (expectation.type === 'agentDefinition') {\n        const definition = bootstrap(root).definition\n        const skills = definition.skills.map((item) => item.name)\n        const missing = expectation.requiredSkills.filter((name) => !skills.includes(name))\n        const passed = definition.status === expectation.status && missing.length === 0\n        return {\n          id: expectation.id,\n          surface: expectation.surface,\n          type: expectation.type,\n          passed,\n          detail: `status=${definition.status}; skills=${skills.join(',')}; missing=${missing.join(',') || '-'}`,\n          hash: definition.hash,\n        }\n      }\n\n      const path = safeEvidencePath(root, expectation.path)\n      const rel = relative(root, path).split('\\\\').join('/')\n      if (expectation.type === 'pathAbsent') {\n        return {\n          id: expectation.id, surface: expectation.surface, type: expectation.type,\n          passed: !existsSync(path), path: rel,\n          detail: existsSync(path) ? `unexpected path exists: ${rel}` : `absent: ${rel}`,\n        }\n      }\n      if (!existsSync(path)) {\n        return {\n          id: expectation.id, surface: expectation.surface, type: expectation.type,\n          passed: false, path: rel, detail: `missing: ${rel}`,\n        }\n      }\n\n      // Existing symlinks are resolved after the lexical check so they cannot escape the sandbox.\n      safeEvidencePath(root, expectation.path, true)\n      const stat = lstatSync(path)\n      if (stat.isSymbolicLink()) throw new Error(`不接受符号链接证据: ${rel}`)\n      if (expectation.type === 'pathExists') {\n        const kindMatched = expectation.kind === undefined ||\n          (expectation.kind === 'file' ? stat.isFile() : stat.isDirectory())\n        const bytes = stat.isFile() ? stat.size : 0\n        const sizeMatched = expectation.minBytes === undefined || bytes >= expectation.minBytes\n        return {\n          id: expectation.id, surface: expectation.surface, type: expectation.type,\n          passed: kindMatched && sizeMatched, path: rel,\n          detail: `kind=${stat.isFile() ? 'file' : stat.isDirectory() ? 'directory' : 'other'}; bytes=${bytes}`,\n          hash: stat.isFile() ? sha256(readFileSync(path)) : undefined,\n        }\n      }\n      if (!stat.isFile()) throw new Error(`文本/JSON 证据必须是文件: ${rel}`)\n      const body = readFileSync(path, 'utf8')\n      if (expectation.type === 'textIncludesAll' || expectation.type === 'textExcludesAll') {\n        const matches = expectation.values.filter((value) => body.includes(value))\n        const passed = expectation.type === 'textIncludesAll'\n          ? matches.length === expectation.values.length\n          : matches.length === 0\n        return {\n          id: expectation.id, surface: expectation.surface, type: expectation.type,\n          passed, path: rel, hash: sha256(body),\n          detail: `matched=${JSON.stringify(matches)}; expected=${JSON.stringify(expectation.values)}`,\n        }\n      }\n      if (expectation.type !== 'jsonEquals') throw new Error(`未知证据断言: ${expectation.type}`)\n      const parsed = JSON.parse(body) as unknown\n      const actual = jsonPointer(parsed, expectation.pointer)\n      const passed = stable(actual) === stable(expectation.value)\n      return {\n        id: expectation.id, surface: expectation.surface, type: expectation.type,\n        passed, path: rel, hash: sha256(body),\n        detail: `pointer=${expectation.pointer}; actual=${stable(actual)}; expected=${stable(expectation.value)}`,\n      }\n    } catch (error) {\n      return {\n        id: expectation.id,\n        surface: expectation.surface,\n        type: expectation.type,\n        passed: false,\n        detail: (error as Error).message,\n        ...('path' in expectation ? { path: expectation.path } : {}),\n      }\n    }\n  })\n}\n\nexport function snapshotWorkspaceEvidence(\n  workspace: string,\n  output: string,\n  expectations: EvalEvidenceExpectation[] = [],\n): Array<{ surface: EvalEvidenceSurface; path: string; hash: string; bytes: number }> {\n  const root = realpathSync(resolve(workspace))\n  const snapshots: Array<{\n    surface: EvalEvidenceSurface\n    path: string\n    hash: string\n    bytes: number\n  }> = []\n  const seen = new Set<string>()\n  for (const expectation of expectations) {\n    if (!('path' in expectation) || expectation.type === 'pathAbsent') continue\n    const source = safeEvidencePath(root, expectation.path, true)\n    if (!existsSync(source)) continue\n    const stat = lstatSync(source)\n    if (!stat.isFile() || stat.isSymbolicLink()) continue\n    const rel = relative(root, source).split('\\\\').join('/')\n    const key = `${expectation.surface}:${rel}`\n    if (seen.has(key)) continue\n    seen.add(key)\n    const destination = join(output, expectation.surface, rel)\n    mkdirSync(dirname(destination), { recursive: true })\n    copyFileSync(source, destination)\n    const body = readFileSync(source)\n    snapshots.push({\n      surface: expectation.surface,\n      path: `${expectation.surface}/${rel}`,\n      hash: sha256(body),\n      bytes: body.byteLength,\n    })\n  }\n  return snapshots\n}\n\nfunction safeEvidencePath(root: string, input: string, resolveExisting = false): string {\n  if (!input || isAbsolute(input) || input.split(/[\\\\/]/).includes('..')) {\n    throw new Error(`证据路径必须是 Workspace 内相对路径: ${input}`)\n  }\n  const candidate = resolve(root, input)\n  const lexical = relative(root, candidate)\n  if (lexical === '..' || lexical.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`)) {\n    throw new Error(`证据路径越界: ${input}`)\n  }\n  if (resolveExisting && existsSync(candidate)) {\n    const actual = realpathSync(candidate)\n    const rel = relative(root, actual)\n    if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`)) {\n      throw new Error(`证据路径通过链接越界: ${input}`)\n    }\n  }\n  return candidate\n}\n\nfunction jsonPointer(value: unknown, pointer: string): unknown {\n  if (pointer === '') return value\n  if (!pointer.startsWith('/')) throw new Error(`JSON pointer 必须以 / 开头: ${pointer}`)\n  return pointer.slice(1).split('/').reduce((current: any, token) => {\n    const key = token.replace(/~1/g, '/').replace(/~0/g, '~')\n    if (current === null || current === undefined || typeof current !== 'object' || !(key in current)) {\n      throw new Error(`JSON pointer 不存在: ${pointer}`)\n    }\n    return current[key]\n  }, value as any)\n}\n\nfunction stable(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(stable).join(',')}]`\n  if (value && typeof value === 'object') {\n    return `{${Object.entries(value as Record<string, unknown>).sort(([a], [b]) => a.localeCompare(b))\n      .map(([key, item]) => `${JSON.stringify(key)}:${stable(item)}`).join(',')}}`\n  }\n  return JSON.stringify(value) ?? 'undefined'\n}\n\nfunction sha256(value: string | Buffer): string {\n  return createHash('sha256').update(value).digest('hex')\n}\n"]}

package/dist/src/invocation.js

@@ -0,0 +1,36 @@
+export function directInvocation(sessionKey = '') {
+    return {
+        $schema: 'dingtalk-agent/invocation@1',
+        mode: 'direct',
+        authority: 'default',
+        eventId: '',
+        sessionKey,
+        occurredAt: null,
+        actor: null,
+        target: null,
+        conversation: null,
+    };
+}
+export function eventInvocation(event, resume = { mode: 'start' }, sessionKey = '', continued = false) {
+    return {
+        $schema: 'dingtalk-agent/invocation@1',
+        mode: resume.mode === 'start' && !continued ? eventMode(event.kind) : 'continuation',
+        authority: 'event',
+        eventId: event.id,
+        sessionKey,
+        occurredAt: event.occurredAt,
+        actor: event.actor,
+        target: event.replyTarget,
+        conversation: event.conversation,
+    };
+}
+function eventMode(kind) {
+    if (kind === 'im.message.mentioned')
+        return 'mention';
+    if (kind === 'im.message.dm')
+        return 'dm';
+    if (kind === 'agent.heartbeat')
+        return 'heartbeat';
+    return 'ambient';
+}
+//# sourceMappingURL=invocation.js.map

package/dist/src/invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.js","sourceRoot":"","sources":["../../src/invocation.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,gBAAgB,CAAC,UAAU,GAAG,EAAE;IAC9C,OAAO;QACL,OAAO,EAAE,6BAA6B;QACtC,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,EAAE;QACX,UAAU;QACV,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,SAAwB,EAAE,IAAI,EAAE,OAAO,EAAE,EACzC,UAAU,GAAG,EAAE,EACf,SAAS,GAAG,KAAK;IAEjB,OAAO;QACL,OAAO,EAAE,6BAA6B;QACtC,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc;QACpF,SAAS,EAAE,OAAO;QAClB,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,UAAU;QACV,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,WAAW;QACzB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,SAAS,CAAA;IACrD,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,IAAI,CAAA;IACzC,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,WAAW,CAAA;IAClD,OAAO,SAAS,CAAA;AAClB,CAAC","sourcesContent":["import type {\n  InvocationContext, InvocationMode, NormalizedEvent, ResumeContext,\n} from './types.js'\n\nexport function directInvocation(sessionKey = ''): InvocationContext {\n  return {\n    $schema: 'dingtalk-agent/invocation@1',\n    mode: 'direct',\n    authority: 'default',\n    eventId: '',\n    sessionKey,\n    occurredAt: null,\n    actor: null,\n    target: null,\n    conversation: null,\n  }\n}\n\nexport function eventInvocation(\n  event: NormalizedEvent,\n  resume: ResumeContext = { mode: 'start' },\n  sessionKey = '',\n  continued = false,\n): InvocationContext {\n  return {\n    $schema: 'dingtalk-agent/invocation@1',\n    mode: resume.mode === 'start' && !continued ? eventMode(event.kind) : 'continuation',\n    authority: 'event',\n    eventId: event.id,\n    sessionKey,\n    occurredAt: event.occurredAt,\n    actor: event.actor,\n    target: event.replyTarget,\n    conversation: event.conversation,\n  }\n}\n\nfunction eventMode(kind: string): InvocationMode {\n  if (kind === 'im.message.mentioned') return 'mention'\n  if (kind === 'im.message.dm') return 'dm'\n  if (kind === 'agent.heartbeat') return 'heartbeat'\n  return 'ambient'\n}\n"]}