@zhin.js/agent 0.1.25 → 0.1.26

package/lib/security/budget-limiter.js

@@ -0,0 +1,363 @@
+/**
+ * Token/Cost 预算限制系统
+ *
+ * 控制 AI Agent 的资源使用，防止：
+ * - Token 滥用
+ * - 成本超支
+ * - 资源耗尽
+ *
+ */
+import { getPlugin } from '@zhin.js/core';
+const DEFAULT_CONFIG = {
+    enabled: true,
+    maxTokensPerSession: 1000000, // 1M tokens
+    maxTokensPerUserPerDay: 5000000, // 5M tokens
+    maxCostPerSession: 10.0, // $10
+    maxCostPerUserPerDay: 50.0, // $50
+    maxToolCallsPerSession: 100,
+    maxIterationsPerSession: 20,
+    maxSessionDuration: 3600000, // 1 小时
+    warningThreshold: 80, // 80%
+    autoTerminate: false,
+};
+// ── 预算限制器类 ──────────────────────────────────────────────────────
+export class BudgetLimiter {
+    config;
+    sessions = new Map();
+    dailyUsage = new Map(); // userId -> usage
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        // 定期清理过期会话
+        setInterval(() => this.cleanup(), 300000); // 每 5 分钟
+    }
+    /**
+     * 创建新会话预算
+     */
+    createSession(sessionId, userId) {
+        const budget = {
+            sessionId,
+            userId,
+            startTime: Date.now(),
+            tokenUsage: { inputTokens: 0, outputTokens: 0, totalTokens: 0, estimatedCost: 0 },
+            toolCallCount: 0,
+            iterationCount: 0,
+            limitReached: false,
+            warningsSent: new Set(),
+        };
+        this.sessions.set(sessionId, budget);
+        return budget;
+    }
+    /**
+     * 获取会话预算
+     */
+    getSession(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+    /**
+     * 记录 Token 使用
+     */
+    recordTokenUsage(sessionId, usage) {
+        if (!this.config.enabled) {
+            return { allowed: true };
+        }
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            return { allowed: true };
+        }
+        // 更新会话使用情况
+        session.tokenUsage.inputTokens += usage.inputTokens;
+        session.tokenUsage.outputTokens += usage.outputTokens;
+        session.tokenUsage.totalTokens += usage.totalTokens;
+        session.tokenUsage.estimatedCost += usage.estimatedCost;
+        // 更新每日使用情况
+        if (session.userId) {
+            this.updateDailyUsage(session.userId, usage);
+        }
+        // 检查限制
+        return this.checkBudget(session);
+    }
+    /**
+     * 记录工具调用
+     */
+    recordToolCall(sessionId) {
+        if (!this.config.enabled) {
+            return { allowed: true };
+        }
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            return { allowed: true };
+        }
+        session.toolCallCount++;
+        return this.checkBudget(session);
+    }
+    /**
+     * 记录迭代
+     */
+    recordIteration(sessionId) {
+        if (!this.config.enabled) {
+            return { allowed: true };
+        }
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            return { allowed: true };
+        }
+        session.iterationCount++;
+        return this.checkBudget(session);
+    }
+    /**
+     * 检查预算限制
+     */
+    checkBudget(session) {
+        const now = Date.now();
+        const duration = now - session.startTime;
+        // 构建当前使用情况
+        const current = {
+            tokens: session.tokenUsage.totalTokens,
+            cost: session.tokenUsage.estimatedCost,
+            toolCalls: session.toolCallCount,
+            iterations: session.iterationCount,
+            duration,
+        };
+        // 构建限制情况
+        const limits = {
+            maxTokens: this.config.maxTokensPerSession,
+            maxCost: this.config.maxCostPerSession,
+            maxToolCalls: this.config.maxToolCallsPerSession,
+            maxIterations: this.config.maxIterationsPerSession,
+            maxDuration: this.config.maxSessionDuration,
+        };
+        // 检查每日成本限制（优先检查成本，因为成本更敏感）
+        if (session.userId && this.config.maxCostPerUserPerDay) {
+            const dailyUsage = this.dailyUsage.get(session.userId);
+            if (dailyUsage && dailyUsage.estimatedCost >= this.config.maxCostPerUserPerDay) {
+                session.limitReached = true;
+                session.limitType = 'dailyCost';
+                return {
+                    allowed: false,
+                    reason: `已达到每日成本限制 ($${this.config.maxCostPerUserPerDay})`,
+                    current,
+                    limits,
+                };
+            }
+        }
+        // 检查会话成本限制
+        if (this.config.maxCostPerSession && session.tokenUsage.estimatedCost >= this.config.maxCostPerSession) {
+            session.limitReached = true;
+            session.limitType = 'sessionCost';
+            return {
+                allowed: false,
+                reason: `已达到会话成本限制 ($${this.config.maxCostPerSession})`,
+                current,
+                limits,
+            };
+        }
+        // 检查每日 Token 限制
+        if (session.userId && this.config.maxTokensPerUserPerDay) {
+            const dailyUsage = this.dailyUsage.get(session.userId);
+            if (dailyUsage && dailyUsage.totalTokens >= this.config.maxTokensPerUserPerDay) {
+                session.limitReached = true;
+                session.limitType = 'dailyTokens';
+                return {
+                    allowed: false,
+                    reason: `已达到每日 Token 使用限制 (${this.config.maxTokensPerUserPerDay})`,
+                    current,
+                    limits,
+                };
+            }
+        }
+        // 检查会话 Token 限制
+        if (this.config.maxTokensPerSession && session.tokenUsage.totalTokens >= this.config.maxTokensPerSession) {
+            session.limitReached = true;
+            session.limitType = 'sessionTokens';
+            return {
+                allowed: false,
+                reason: `已达到会话 Token 使用限制 (${this.config.maxTokensPerSession})`,
+                current,
+                limits,
+            };
+        }
+        // 检查工具调用限制
+        if (this.config.maxToolCallsPerSession && session.toolCallCount >= this.config.maxToolCallsPerSession) {
+            session.limitReached = true;
+            session.limitType = 'toolCalls';
+            return {
+                allowed: false,
+                reason: `已达到工具调用次数限制 (${this.config.maxToolCallsPerSession})`,
+                current,
+                limits,
+            };
+        }
+        // 检查迭代限制
+        if (this.config.maxIterationsPerSession && session.iterationCount >= this.config.maxIterationsPerSession) {
+            session.limitReached = true;
+            session.limitType = 'iterations';
+            return {
+                allowed: false,
+                reason: `已达到迭代次数限制 (${this.config.maxIterationsPerSession})`,
+                current,
+                limits,
+            };
+        }
+        // 检查会话时长限制
+        if (this.config.maxSessionDuration && duration >= this.config.maxSessionDuration) {
+            session.limitReached = true;
+            session.limitType = 'duration';
+            return {
+                allowed: false,
+                reason: `已达到会话时长限制 (${this.config.maxSessionDuration / 60000} 分钟)`,
+                current,
+                limits,
+            };
+        }
+        // 检查警告阈值
+        const warnings = [];
+        const threshold = (this.config.warningThreshold || 80) / 100;
+        if (this.config.maxTokensPerSession) {
+            const usageRatio = session.tokenUsage.totalTokens / this.config.maxTokensPerSession;
+            if (usageRatio >= threshold && !session.warningsSent.has('tokens')) {
+                warnings.push(`Token 使用已达 ${Math.round(usageRatio * 100)}%`);
+                session.warningsSent.add('tokens');
+            }
+        }
+        if (this.config.maxCostPerSession) {
+            const usageRatio = session.tokenUsage.estimatedCost / this.config.maxCostPerSession;
+            if (usageRatio >= threshold && !session.warningsSent.has('cost')) {
+                warnings.push(`成本已达 ${Math.round(usageRatio * 100)}%`);
+                session.warningsSent.add('cost');
+            }
+        }
+        if (warnings.length > 0) {
+            return {
+                allowed: true,
+                reason: warnings.join('; '),
+                current,
+                limits,
+                isWarning: true,
+            };
+        }
+        return { allowed: true, current, limits };
+    }
+    /**
+     * 更新每日使用情况
+     */
+    updateDailyUsage(userId, usage) {
+        const today = new Date().toISOString().split('T')[0]; // YYYY-MM-DD
+        const key = `${userId}:${today}`;
+        let daily = this.dailyUsage.get(key);
+        if (!daily) {
+            daily = { inputTokens: 0, outputTokens: 0, totalTokens: 0, estimatedCost: 0 };
+            this.dailyUsage.set(key, daily);
+        }
+        daily.inputTokens += usage.inputTokens;
+        daily.outputTokens += usage.outputTokens;
+        daily.totalTokens += usage.totalTokens;
+        daily.estimatedCost += usage.estimatedCost;
+    }
+    /**
+     * 清理过期会话和每日记录
+     */
+    cleanup() {
+        const now = Date.now();
+        const maxAge = 24 * 60 * 60 * 1000; // 24 小时
+        // 清理过期会话
+        for (const [sessionId, session] of this.sessions.entries()) {
+            if (now - session.startTime > maxAge) {
+                this.sessions.delete(sessionId);
+            }
+        }
+        // 清理过期的每日记录
+        const today = new Date().toISOString().split('T')[0];
+        for (const key of this.dailyUsage.keys()) {
+            if (!key.endsWith(today)) {
+                this.dailyUsage.delete(key);
+            }
+        }
+    }
+    /**
+     * 结束会话
+     */
+    endSession(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (session) {
+            this.sessions.delete(sessionId);
+        }
+        return session;
+    }
+    /**
+     * 获取会话统计
+     */
+    getSessionStats(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return undefined;
+        return {
+            tokenUsage: { ...session.tokenUsage },
+            toolCallCount: session.toolCallCount,
+            iterationCount: session.iterationCount,
+            duration: Date.now() - session.startTime,
+            limits: {
+                maxTokens: this.config.maxTokensPerSession,
+                maxCost: this.config.maxCostPerSession,
+                maxToolCalls: this.config.maxToolCallsPerSession,
+                maxIterations: this.config.maxIterationsPerSession,
+                maxDuration: this.config.maxSessionDuration,
+            },
+        };
+    }
+    /**
+     * 更新配置
+     */
+    updateConfig(config) {
+        this.config = { ...this.config, ...config };
+    }
+    /**
+     * 获取配置
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+// ── 全局预算限制器实例 ────────────────────────────────────────────────
+let globalBudgetLimiter = null;
+/**
+ * 获取全局预算限制器实例
+ */
+export function getBudgetLimiter() {
+    if (!globalBudgetLimiter) {
+        try {
+            const plugin = getPlugin();
+            const config = plugin.root?.inject('config')?.ai?.agent?.budget;
+            globalBudgetLimiter = new BudgetLimiter(config);
+        }
+        catch {
+            globalBudgetLimiter = new BudgetLimiter();
+        }
+    }
+    return globalBudgetLimiter;
+}
+/**
+ * 初始化预算限制器
+ */
+export function initBudgetLimiter(config) {
+    globalBudgetLimiter = new BudgetLimiter(config);
+    return globalBudgetLimiter;
+}
+/**
+ * 检查预算限制
+ */
+export function checkBudgetLimit(sessionId, type, usage) {
+    const limiter = getBudgetLimiter();
+    switch (type) {
+        case 'tokens':
+            if (!usage)
+                return { allowed: true };
+            return limiter.recordTokenUsage(sessionId, usage);
+        case 'toolCall':
+            return limiter.recordToolCall(sessionId);
+        case 'iteration':
+            return limiter.recordIteration(sessionId);
+        default:
+            return { allowed: true };
+    }
+}
+//# sourceMappingURL=budget-limiter.js.map

package/lib/security/budget-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-limiter.js","sourceRoot":"","sources":["../../src/security/budget-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AA2B1C,MAAM,cAAc,GAAiB;IACnC,OAAO,EAAE,IAAI;IACb,mBAAmB,EAAE,OAAO,EAAS,YAAY;IACjD,sBAAsB,EAAE,OAAO,EAAM,YAAY;IACjD,iBAAiB,EAAE,IAAI,EAAc,MAAM;IAC3C,oBAAoB,EAAE,IAAI,EAAW,MAAM;IAC3C,sBAAsB,EAAE,GAAG;IAC3B,uBAAuB,EAAE,EAAE;IAC3B,kBAAkB,EAAE,OAAO,EAAU,OAAO;IAC5C,gBAAgB,EAAE,EAAE,EAAiB,MAAM;IAC3C,aAAa,EAAE,KAAK;CACrB,CAAC;AA+DF,mEAAmE;AAEnE,MAAM,OAAO,aAAa;IAChB,MAAM,CAAe;IACrB,QAAQ,GAA+B,IAAI,GAAG,EAAE,CAAC;IACjD,UAAU,GAA4B,IAAI,GAAG,EAAE,CAAC,CAAC,kBAAkB;IAE3E,YAAY,SAAgC,EAAE;QAC5C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAE/C,WAAW;QACX,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;IACtD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB,EAAE,MAAe;QAC9C,MAAM,MAAM,GAAkB;YAC5B,SAAS;YACT,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE;YACjF,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,IAAI,GAAG,EAAE;SACxB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAiB,EAAE,KAAiB;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,WAAW;QACX,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACpD,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;QACtD,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACpD,OAAO,CAAC,UAAU,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;QAExD,WAAW;QACX,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO;QACP,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,SAAiB;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAsB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;QAEzC,WAAW;QACX,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;YACtC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa;YACtC,SAAS,EAAE,OAAO,CAAC,aAAa;YAChC,UAAU,EAAE,OAAO,CAAC,cAAc;YAClC,QAAQ;SACT,CAAC;QAEF,SAAS;QACT,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAC1C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YACtC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;YAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;YAClD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SAC5C,CAAC;QAEF,2BAA2B;QAC3B,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,UAAU,IAAI,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAC/E,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC5B,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC;gBAChC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG;oBAC1D,OAAO;oBACP,MAAM;iBACP,CAAC;YACJ,CAAC;QACH,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACvG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG;gBACvD,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,UAAU,IAAI,UAAU,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAC/E,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC5B,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;gBAClC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG;oBAClE,OAAO;oBACP,MAAM;iBACP,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACzG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,eAAe,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG;gBAC/D,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACtG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG;gBAC7D,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,SAAS;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACzG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,YAAY,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG;gBAC5D,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACjF,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,KAAK,MAAM;gBAClE,OAAO;gBACP,MAAM;aACP,CAAC;QACJ,CAAC;QAED,SAAS;QACT,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC;QAE7D,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACpF,IAAI,UAAU,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACpF,IAAI,UAAU,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3B,OAAO;gBACP,MAAM;gBACN,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,MAAc,EAAE,KAAiB;QACxD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACnE,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;QAEjC,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACvC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;QACzC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACvC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;IAC7C,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;QAE5C,SAAS;QACT,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;gBACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,YAAY;QACZ,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB;QAO/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,OAAO;YACL,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE;YACrC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;YACxC,MAAM,EAAE;gBACN,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;gBAC1C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACtC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;gBAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;gBAClD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;aAC5C;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAA6B;QACxC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,gEAAgE;AAEhE,IAAI,mBAAmB,GAAyB,IAAI,CAAC;AAErD;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC;YACzE,mBAAmB,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB,GAAG,IAAI,aAAa,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA6B;IAC7D,mBAAmB,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,IAAyC,EAAE,KAAkB;IAC/G,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IAEnC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,KAAK,UAAU;YACb,OAAO,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,WAAW;YACd,OAAO,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC5C;YACE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/lib/security/dangerous-tool-policy.d.ts

@@ -0,0 +1,17 @@
+import type { ToolContext } from '@zhin.js/core';
+import type { ZhinAgentConfig } from '../zhin-agent/config.js';
+import { type ToolRequesterRole } from './owner-approve-always-store.js';
+export interface DangerousToolDecision {
+    allowed: boolean;
+    needsOwnerApproval?: boolean;
+    reason?: string;
+    role: ToolRequesterRole;
+}
+export type FileToolName = 'read_file' | 'list_dir' | 'glob' | 'grep' | 'write_file' | 'edit_file';
+export declare function checkFileToolAccess(toolName: FileToolName, context?: ToolContext): DangerousToolDecision;
+export declare function checkSensitiveFilePathAccess(toolName: FileToolName, filePath: string, context?: ToolContext): DangerousToolDecision;
+export declare function checkDangerousToolAccess(toolName: 'write_file' | 'edit_file' | 'web_fetch', context?: ToolContext): DangerousToolDecision;
+export declare function toOwnerSignal(decision: DangerousToolDecision): string;
+export declare function toDenyError(decision: DangerousToolDecision): string;
+export declare function isToolAllowlistedByConfig(toolName: string, config: Required<ZhinAgentConfig>): boolean;
+//# sourceMappingURL=dangerous-tool-policy.d.ts.map

package/lib/security/dangerous-tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangerous-tool-policy.d.ts","sourceRoot":"","sources":["../../src/security/dangerous-tool-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGnG,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,WAAW,CAAC;AA4CnG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,qBAAqB,CA4BxG;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,qBAAqB,CA8BnI;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,YAAY,GAAG,WAAW,GAAG,WAAW,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,qBAAqB,CAgCzI;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,CAErE;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,CAEnE;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,OAAO,CAGtG"}

package/lib/security/dangerous-tool-policy.js

@@ -0,0 +1,137 @@
+import { getPlugin } from '@zhin.js/core';
+import { resolveToolRequesterRole } from './owner-approve-always-store.js';
+import { checkFileAccess } from './file-policy.js';
+const FILE_TOOL_OPERATION = {
+    read_file: 'read',
+    list_dir: 'read',
+    glob: 'read',
+    grep: 'read',
+    write_file: 'write',
+    edit_file: 'write',
+};
+function isAllowlisted(allowlist, item) {
+    return allowlist.some((pattern) => {
+        try {
+            const re = new RegExp(`^${pattern}$`);
+            return re.test(item);
+        }
+        catch {
+            return item === pattern;
+        }
+    });
+}
+function resolveExecAllowlistFromAiService(plugin) {
+    const root = plugin.root ?? plugin;
+    const aiService = root.inject('ai');
+    const allowlist = aiService?.getAgentConfig?.()?.execAllowlist;
+    if (!Array.isArray(allowlist))
+        return [];
+    return allowlist.map((v) => String(v)).filter(Boolean);
+}
+function resolveRoleFromContext(context) {
+    if (!context?.platform || !context?.botId || !context?.senderId) {
+        return { role: 'unknown' };
+    }
+    try {
+        const plugin = getPlugin();
+        return { role: resolveToolRequesterRole(plugin, context), plugin };
+    }
+    catch {
+        return { role: 'unknown' };
+    }
+}
+export function checkFileToolAccess(toolName, context) {
+    const { role } = resolveRoleFromContext(context);
+    const op = FILE_TOOL_OPERATION[toolName];
+    if (role === 'owner' || role === 'unknown') {
+        return { allowed: true, role };
+    }
+    if (role === 'admin') {
+        if (op === 'delete') {
+            return {
+                allowed: false,
+                role,
+                reason: `admin 无删除权限：工具「${toolName}」已拒绝。`,
+            };
+        }
+        return { allowed: true, role };
+    }
+    if (op === 'read') {
+        return { allowed: true, role };
+    }
+    return {
+        allowed: false,
+        role,
+        reason: `普通用户仅允许查询（读），无增删改权限：工具「${toolName}」已拒绝。`,
+    };
+}
+export function checkSensitiveFilePathAccess(toolName, filePath, context) {
+    const base = checkFileAccess(filePath);
+    const { role } = resolveRoleFromContext(context);
+    if (base.allowed) {
+        return { allowed: true, role };
+    }
+    if (role === 'owner') {
+        return {
+            allowed: false,
+            needsOwnerApproval: true,
+            role,
+            reason: `工具「${toolName}」访问敏感路径需二次确认：${base.reason ?? '命中敏感路径策略'}`,
+        };
+    }
+    if (role === 'admin') {
+        return {
+            allowed: false,
+            needsOwnerApproval: true,
+            role,
+            reason: `工具「${toolName}」访问敏感路径需 Owner 确认：${base.reason ?? '命中敏感路径策略'}`,
+        };
+    }
+    return {
+        allowed: false,
+        role,
+        reason: base.reason ?? `工具「${toolName}」访问敏感路径被拒绝。`,
+    };
+}
+export function checkDangerousToolAccess(toolName, context) {
+    const { role, plugin } = resolveRoleFromContext(context);
+    try {
+        if (role === 'owner') {
+            return { allowed: true, role };
+        }
+        if (role === 'admin') {
+            const allowlist = plugin ? resolveExecAllowlistFromAiService(plugin) : [];
+            if (isAllowlisted(allowlist, toolName)) {
+                return { allowed: true, role };
+            }
+            return {
+                allowed: false,
+                needsOwnerApproval: true,
+                role,
+                reason: `工具「${toolName}」不在 execAllowlist，admin 需 Owner 确认后执行。`,
+            };
+        }
+        if (role === 'other') {
+            return {
+                allowed: false,
+                role,
+                reason: `工具「${toolName}」为危险操作，仅 owner 可直接执行；admin 需 Owner 审批。`,
+            };
+        }
+        return { allowed: true, role: 'unknown' };
+    }
+    catch {
+        return { allowed: true, role: 'unknown' };
+    }
+}
+export function toOwnerSignal(decision) {
+    return `ZHIN_NEEDS_OWNER:\n${decision.reason ?? '该操作需要 Owner 确认。'}`;
+}
+export function toDenyError(decision) {
+    return `Error: ${decision.reason ?? '该操作已被拒绝。'}`;
+}
+export function isToolAllowlistedByConfig(toolName, config) {
+    const allowlist = config.execAllowlist ?? [];
+    return isAllowlisted(allowlist, toolName);
+}
+//# sourceMappingURL=dangerous-tool-policy.js.map

package/lib/security/dangerous-tool-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangerous-tool-policy.js","sourceRoot":"","sources":["../../src/security/dangerous-tool-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C,OAAO,EAAE,wBAAwB,EAA0B,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAanD,MAAM,mBAAmB,GAAwC;IAC/D,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,MAAM;IAChB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,OAAO;IACnB,SAAS,EAAE,OAAO;CACnB,CAAC;AAEF,SAAS,aAAa,CAAC,SAAmB,EAAE,IAAY;IACtD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,KAAK,OAAO,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iCAAiC,CAAC,MAAoC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAwE,CAAC;IAC3G,MAAM,SAAS,GAAG,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAqB;IACnD,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAsB,EAAE,OAAqB;IAC/E,MAAM,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI;gBACJ,MAAM,EAAE,kBAAkB,QAAQ,OAAO;aAC1C,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI;QACJ,MAAM,EAAE,0BAA0B,QAAQ,OAAO;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAsB,EAAE,QAAgB,EAAE,OAAqB;IAC1G,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,kBAAkB,EAAE,IAAI;YACxB,IAAI;YACJ,MAAM,EAAE,MAAM,QAAQ,gBAAgB,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,kBAAkB,EAAE,IAAI;YACxB,IAAI;YACJ,MAAM,EAAE,MAAM,QAAQ,qBAAqB,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE;SACvE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,QAAQ,aAAa;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAkD,EAAE,OAAqB;IAChH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACjC,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,kBAAkB,EAAE,IAAI;gBACxB,IAAI;gBACJ,MAAM,EAAE,MAAM,QAAQ,wCAAwC;aAC/D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI;gBACJ,MAAM,EAAE,MAAM,QAAQ,wCAAwC;aAC/D,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAA+B;IAC3D,OAAO,sBAAsB,QAAQ,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAA+B;IACzD,OAAO,UAAU,QAAQ,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,MAAiC;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAC7C,OAAO,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC"}

package/lib/security/exec-policy.d.ts

@@ -1,27 +1,23 @@
 /**
  * ZhinAgent 执行策略 — bash 命令的安全检查与工具包装
  *
- * 参考 Claude Code bashPermissions.ts 的纵深防御策略：
  *   1. 危险命令黑名单  — 即使 full 模式也阻止解释器/提权命令
  *   2. 环境变量前缀剥离 — `FOO=bar cmd` → 按 `cmd` 做白名单匹配
  *   3. Safe wrapper 剥离 — `timeout 10 cmd` → 按 `cmd` 做匹配
  *   4. 复合命令拆分   — `&&` `||` `;` 逐段独立检查，deny 优先
  *   5. 只读命令自动放行 — 与 file-policy classifyBashCommand 集成
- *   6. Owner 信号 — execAsk=true 时返回需审批（ZHIN_NEEDS_OWNER），由编排层可硬触发 ask_user
+ *   6. Owner 信号 — execApprovalMode=ask 时返回需审批（ZHIN_NEEDS_OWNER），由编排层可硬触发 ask_user
  */
 import type { AgentTool } from '@zhin.js/core';
-import type { ZhinAgentConfig } from '../zhin-agent/config.js';
+import type { ZhinAgentConfig, ExecApprovalMode } from '../zhin-agent/config.js';
 export declare const EXEC_PRESETS: Record<string, string[]>;
 /**
- * 检查命令是否在危险黑名单中。
+ * 无论审批模式如何都禁止的破坏性路径操作（避免误删依赖目录）。
  */
-export declare function isDangerousCommand(cmdName: string): boolean;
 /**
- * 剥离命令前面的 `KEY=value` 环境变量前缀。
- * 例如 `FOO=bar BAZ=1 curl http://...` → `curl http://...`
- *
- * 只剥离安全的 key=value 对，不剥离含特殊字符的值（可能是注入）。
+ * 检查命令是否在危险黑名单中。
  */
+export declare function isDangerousCommand(cmdName: string): boolean;
 export declare function stripEnvVarPrefix(command: string): string;
 /**
  * 剥离命令前面的 safe wrapper（如 `timeout 10`、`nice -n 5`）。
@@ -44,9 +40,21 @@ export interface ExecPolicyResult {
     allowed: boolean;
     /** 如果不允许，拒绝原因 */
     reason?: string;
-    /** 如果需要用户确认（execAsk=true 且命令不在白名单但也不在黑名单） */
+    /** 如果需要用户确认（execApprovalMode=ask 且命令不在白名单但也不在黑名单） */
     needsApproval?: boolean;
 }
+/**
+ * 解析有效审批模式。
+ */
+export declare function resolveExecApprovalMode(config: Required<ZhinAgentConfig>): ExecApprovalMode;
+export interface ApplyExecPolicyOptions {
+    /** 覆盖当前执行路径的审批模式（主/子/worker/task 可分别传入） */
+    approvalMode?: ExecApprovalMode;
+}
+export interface CheckExecPolicyOptions {
+    /** 覆盖配置中的审批模式 */
+    approvalMode?: ExecApprovalMode;
+}
 /**
  * Resolves the effective allowlist by merging preset commands with custom allowlist.
  */
@@ -58,9 +66,10 @@ export declare function resolveExecAllowlist(config: Required<ZhinAgentConfig>):
  * @returns ExecPolicyResult — 允许/拒绝/需审批
  */
 export declare function checkExecPolicy(config: Required<ZhinAgentConfig>, command: string): ExecPolicyResult;
+export declare function checkExecPolicyWithOptions(config: Required<ZhinAgentConfig>, command: string, options?: CheckExecPolicyOptions): ExecPolicyResult;
 /**
  * Wrap `bash` tools with exec policy enforcement.
- * 当 execAsk=true 且命令需审批时，返回提示信息而非抛错。
+ * 当 execApprovalMode=ask 且命令需审批时，返回提示信息而非抛错。
  */
-export declare function applyExecPolicyToTools(config: Required<ZhinAgentConfig>, tools: AgentTool[]): AgentTool[];
+export declare function applyExecPolicyToTools(config: Required<ZhinAgentConfig>, tools: AgentTool[], options?: ApplyExecPolicyOptions): AgentTool[];
 //# sourceMappingURL=exec-policy.d.ts.map

package/lib/security/exec-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exec-policy.d.ts","sourceRoot":"","sources":["../../src/security/exec-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAc/D,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAIjD,CAAC;AAqBF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAID;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMzD;AAYD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAsBzD;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAG9D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK1D;AAID,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAID;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,MAAM,EAAE,CAMhF;AA2FD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAyCpG;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAuBzG"}
+{"version":3,"file":"exec-policy.d.ts","sourceRoot":"","sources":["../../src/security/exec-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAiBjF,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAIjD,CAAC;AAqBF;;GAEG;AACH;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AA0CD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQzD;AAYD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAsBzD;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAqB9D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK1D;AAID,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,gBAAgB,CAE3F;AAED,MAAM,WAAW,sBAAsB;IACrC,2CAA2C;IAC3C,YAAY,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,iBAAiB;IACjB,YAAY,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAgBD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,MAAM,EAAE,CAMhF;AA2ID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CA4EpG;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,EACjC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,sBAA2B,GACnC,gBAAgB,CASlB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,EACjC,KAAK,EAAE,SAAS,EAAE,EAClB,OAAO,GAAE,sBAA2B,GACnC,SAAS,EAAE,CAsBb"}