@zhin.js/agent 0.1.25 → 0.1.26

package/lib/security/file-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-policy.js","sourceRoot":"","sources":["../../src/security/file-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,gEAAgE;AAEhE;;;GAGG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,kBAAkB;IAClB,WAAW;IACX,aAAa;IACb,cAAc;IACd,WAAW;IACX,SAAS;IACT,YAAY;IACZ,UAAU;IACV,cAAc;IACd,SAAS;IACT,aAAa;IACb,aAAa;IACb,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,4DAA4D;IAC5D,IACE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8DAA8D;AAE9D,gCAAgC;AAChC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,qCAAqC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,gEAAgE;AAEhE;;;GAGG;AACH,MAAM,2BAA2B,GAAa;IAC5C,SAAS;IACT,iBAAiB;IACjB,0BAA0B,EAAuB,sCAAsC;IACvF,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,cAAc;IACd,WAAW;IACX,eAAe;IACf,aAAa;IACb,WAAW;IACX,OAAO;IACP,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,iBAAiB,EAAU,8CAA8C;IACzE,gBAAgB;IAChB,sBAAsB;IACtB,gCAAgC;IAChC,gBAAgB;IAChB,6BAA6B;IAC7B,sBAAsB;IACtB,0CAA0C;IAC1C,2BAA2B;IAC3B,aAAa;IACb,aAAa;IACb,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,wBAAwB;IACxB,qBAAqB;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,OAAO;IACP,SAAS;IACT,iBAAiB;CAClB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,uBAAuB,GAAa;IACxC,aAAa;IACb,cAAc;IACd,kBAAkB;CACnB,CAAC;AASF,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,UAAU;IACV,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAE/D,cAAc;IACd,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,MAAM,EAAE,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,YAAY;IACZ,MAAM,KAAK,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7D,CAAC;QACD,gCAAgC;QAChC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,EAAE,EAAE,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,aAAa;IACb,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,YAAY,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAC5D,MAAM,gBAAgB,GAAG,gFAAgF,CAAC;AAC1G,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEhE;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE/B,WAAW;IACX,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,sEAAsE;AAEtE,YAAY;AACZ,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS;CAChE,CAAC,CAAC;AAEH,eAAe;AACf,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;IACtE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI;CACzC,CAAC,CAAC;AAEH,cAAc;AACd,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,IAAI,EAAE,MAAM,EAAE,IAAI;CACnB,CAAC,CAAC;AAEH,kCAAkC;AAClC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG;CACvC,CAAC,CAAC;AAaH;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,YAAY;IACZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAEtD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,SAAS;QACT,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAEjD,aAAa,GAAG,IAAI,CAAC;QACrB,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS,GAAG,IAAI,CAAC;aACnD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;aACpD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;aACpD,CAAC;YACJ,qBAAqB;YACrB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,SAAS,IAAI,OAAO,IAAI,OAAO;KAC5C,CAAC;AACJ,CAAC;AAED,gEAAgE;AAEhE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,YAAoB;IAClE,eAAe;IACf,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,iEAAiE;AAEjE;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC;AAChD,CAAC"}
+{"version":3,"file":"file-policy.js","sourceRoot":"","sources":["../../src/security/file-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,0BAA0B;AAE1B;;;GAGG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,kBAAkB;IAClB,WAAW;IACX,aAAa;IACb,cAAc;IACd,WAAW;IACX,SAAS;IACT,YAAY;IACZ,UAAU;IACV,cAAc;IACd,SAAS;IACT,aAAa;IACb,aAAa;IACb,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,4DAA4D;IAC5D,IACE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0BAA0B;AAE1B,gCAAgC;AAChC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,qCAAqC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,gEAAgE;AAEhE;;;GAGG;AACH,MAAM,2BAA2B,GAAa;IAC5C,SAAS;IACT,iBAAiB;IACjB,0BAA0B,EAAuB,sCAAsC;IACvF,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,cAAc;IACd,WAAW;IACX,eAAe;IACf,aAAa;IACb,WAAW;IACX,OAAO;IACP,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,iBAAiB,EAAU,8CAA8C;IACzE,gBAAgB;IAChB,sBAAsB;IACtB,gCAAgC;IAChC,gBAAgB;IAChB,6BAA6B;IAC7B,sBAAsB;IACtB,0CAA0C;IAC1C,2BAA2B;IAC3B,aAAa;IACb,aAAa;IACb,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,wBAAwB;IACxB,qBAAqB;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,OAAO;IACP,SAAS;IACT,iBAAiB;CAClB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,uBAAuB,GAAa;IACxC,aAAa;IACb,cAAc;IACd,kBAAkB;CACnB,CAAC;AASF,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,UAAU;IACV,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAE/D,cAAc;IACd,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,MAAM,EAAE,EAAE,CAAC;YAEnE,SAAS;YACT,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;gBACrC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,YAAY;IACZ,MAAM,KAAK,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAEnE,SAAS;YACT,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;gBACrC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,gCAAgC;QAChC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,EAAE,EAAE,CAAC;gBAEnE,SAAS;gBACT,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;oBACrC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,WAAW;gBACb,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,aAAa;IACb,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,QAAQ,YAAY,EAAE,CAAC;YAE7E,SAAS;YACT,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;gBACrC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,YAAY;IACZ,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAC5D,MAAM,gBAAgB,GAAG,gFAAgF,CAAC;AAC1G,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3G,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;iBACnC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;;gBACxC,CAAC,IAAI,CAAC,CAAC;YACZ,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YACxD,SAAS;QACX,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE/B,WAAW;IACX,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,+BAA+B;AAE/B,YAAY;AACZ,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS;CAChE,CAAC,CAAC;AAEH,eAAe;AACf,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;IACtE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI;CACzC,CAAC,CAAC;AAEH,cAAc;AACd,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,IAAI,EAAE,MAAM,EAAE,IAAI;CACnB,CAAC,CAAC;AAEH,kCAAkC;AAClC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG;CACvC,CAAC,CAAC;AAaH;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE/C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,SAAS;QACT,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAEjD,aAAa,GAAG,IAAI,CAAC;QACrB,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS,GAAG,IAAI,CAAC;aACnD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;aACpD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;aACpD,CAAC;YACJ,qBAAqB;YACrB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,SAAS,IAAI,OAAO,IAAI,OAAO;KAC5C,CAAC;AACJ,CAAC;AAED,+BAA+B;AAE/B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,YAAoB;IAClE,eAAe;IACf,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,iEAAiE;AAEjE;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC;AAChD,CAAC"}

package/lib/security/file-role-policy.d.ts

@@ -0,0 +1,119 @@
+/**
+ * 文件操作角色权限策略
+ *
+ * 三级文件操作角色:
+ *  - owner:  增删改查（CRUD），敏感/危险操作需二次确认
+ *  - admin:  增改查（CRU），无删权限；敏感/危险操作需 Owner 确认
+ *  - user:   只查（R），敏感/危险操作直接拒绝
+ *
+ * 权限矩阵:
+ *  ┌──────────┬───────┬───────┬───────┬───────┐
+ *  │ 操作     │ owner │ admin │ user  │
+ *  ├──────────┼───────┼───────┼───────┤
+ *  │ create   │  ✅   │  ✅   │  ❌   │
+ *  │ read     │  ✅   │  ✅   │  ✅   │
+ *  │ update   │  ✅   │  ✅   │  ❌   │
+ *  │ delete   │  ✅   │  ❌   │  ❌   │
+ *  └──────────┴───────┴───────┴───────┘
+ *
+ * 敏感/危险判定:
+ *  - owner + 危险 → needsConfirmation（自我二次确认）
+ *  - admin + 危险 → needsOwnerConfirmation（需 Owner 确认）
+ *  - user  + 危险 → 直接拒绝
+ */
+/**
+ * 文件操作角色
+ */
+export type FileRole = 'owner' | 'admin' | 'user';
+/**
+ * 文件操作类型
+ */
+export type FileOperation = 'create' | 'read' | 'update' | 'delete';
+/**
+ * 文件权限检查结果
+ */
+export interface FilePermissionResult {
+    /** 操作是否被允许 */
+    allowed: boolean;
+    /** 拒绝原因 */
+    reason?: string;
+    /** 需要二次确认（owner 场景） */
+    needsConfirmation?: boolean;
+    /** 需要 Owner 确认（admin 场景） */
+    needsOwnerConfirmation?: boolean;
+    /** 当前角色 */
+    role: FileRole;
+    /** 请求的操作 */
+    operation: FileOperation;
+}
+/**
+ * 检查文件操作权限
+ *
+ * @param role 当前用户角色
+ * @param operation 请求的文件操作类型
+ * @param filePath 操作涉及的文件路径（用于危险判定）
+ * @returns 权限结果
+ */
+export declare function checkFilePermission(role: FileRole, operation: FileOperation, filePath?: string): FilePermissionResult;
+/**
+ * 判断文件操作是否为危险操作
+ *
+ * 危险判定规则:
+ *  - delete 操作始终视为危险
+ *  - create/update 操作对敏感路径视为危险
+ *  - read 操作通常不视为危险
+ */
+export declare function isDangerousFileOperation(operation: FileOperation, filePath: string): boolean;
+/**
+ * 从 ToolPermissionLevel / 权限标志推导 FileRole
+ *
+ * 映射规则:
+ *  - isOwner → 'owner'
+ *  - isBotAdmin / isGroupOwner / isGroupAdmin → 'admin'
+ *  - 其余 → 'user'
+ */
+export declare function inferFileRole(context: {
+    isOwner?: boolean;
+    isBotAdmin?: boolean;
+    isGroupOwner?: boolean;
+    isGroupAdmin?: boolean;
+    senderPermissionLevel?: string;
+}): FileRole;
+/**
+ * 从 ToolRequesterRole（dangerous-tool-policy 推导出的角色）转换为 FileRole
+ *
+ * 映射规则:
+ *  - 'owner' → 'owner'
+ *  - 'admin' → 'admin'
+ *  - 'other' → 'user'
+ *  - 'unknown' → 'owner'（无上下文时默认最高权限，向后兼容）
+ */
+export declare function toolRequesterRoleToFileRole(role: 'owner' | 'admin' | 'other' | 'unknown'): FileRole;
+/**
+ * 将 bash 命令分类为文件操作类型
+ * 返回 null 表示非文件操作命令（如纯查询命令）。
+ */
+export declare function classifyBashFileOperation(command: string): FileOperation | null;
+/**
+ * 检查 bash 命令的文件操作权限
+ *
+ * 结合 bash 命令分类与文件角色权限，返回权限检查结果。
+ * 若命令不涉及文件操作（如纯进程查询），直接放行。
+ */
+export declare function checkBashFilePermission(role: FileRole, command: string): FilePermissionResult & {
+    fileOperation: FileOperation | null;
+};
+/**
+ * 根据 FilePermissionResult 生成 ZHIN_NEEDS_OWNER 信号消息
+ *
+ * 用于与现有 Owner 确认编排机制集成:
+ *  - needsConfirmation → 生成需要确认的消息
+ *  - needsOwnerConfirmation → 生成需要 Owner 确认的消息
+ *  - !allowed → 直接拒绝消息
+ */
+export declare function formatFilePermissionMessage(result: FilePermissionResult, toolName: string, detail?: string): string;
+/**
+ * 生成角色感知的提示词片段 — 供 system prompt 注入
+ */
+export declare function buildFileRolePrompt(role: FileRole): string;
+//# sourceMappingURL=file-role-policy.d.ts.map

package/lib/security/file-role-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-role-policy.d.ts","sourceRoot":"","sources":["../../src/security/file-role-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AAElD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,cAAc;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uBAAuB;IACvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,4BAA4B;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,WAAW;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,YAAY;IACZ,SAAS,EAAE,aAAa,CAAC;CAC1B;AA6DD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,QAAQ,EACd,SAAS,EAAE,aAAa,EACxB,QAAQ,CAAC,EAAE,MAAM,GAChB,oBAAoB,CA6CtB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQ5F;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,QAAQ,CAWX;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAOnG;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAiB/E;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,GACd,oBAAoB,GAAG;IAAE,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,CAchE;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAanH;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAsB1D"}

package/lib/security/file-role-policy.js

@@ -0,0 +1,268 @@
+/**
+ * 文件操作角色权限策略
+ *
+ * 三级文件操作角色:
+ *  - owner:  增删改查（CRUD），敏感/危险操作需二次确认
+ *  - admin:  增改查（CRU），无删权限；敏感/危险操作需 Owner 确认
+ *  - user:   只查（R），敏感/危险操作直接拒绝
+ *
+ * 权限矩阵:
+ *  ┌──────────┬───────┬───────┬───────┬───────┐
+ *  │ 操作     │ owner │ admin │ user  │
+ *  ├──────────┼───────┼───────┼───────┤
+ *  │ create   │  ✅   │  ✅   │  ❌   │
+ *  │ read     │  ✅   │  ✅   │  ✅   │
+ *  │ update   │  ✅   │  ✅   │  ❌   │
+ *  │ delete   │  ✅   │  ❌   │  ❌   │
+ *  └──────────┴───────┴───────┴───────┘
+ *
+ * 敏感/危险判定:
+ *  - owner + 危险 → needsConfirmation（自我二次确认）
+ *  - admin + 危险 → needsOwnerConfirmation（需 Owner 确认）
+ *  - user  + 危险 → 直接拒绝
+ */
+// ── 权限矩阵 ──────────────────────────────────────────────────────
+const FILE_PERMISSION_MATRIX = {
+    owner: { create: true, read: true, update: true, delete: true },
+    admin: { create: true, read: true, update: true, delete: false },
+    user: { create: false, read: true, update: false, delete: false },
+};
+// ── 敏感/危险文件路径判定 ──────────────────────────────────────────
+/**
+ * 危险文件路径模式 — 覆盖系统配置、密钥、数据库等关键位置。
+ * 对 owner 仍允许操作但需二次确认；对 admin 需 Owner 确认；对 user 直接拒绝。
+ */
+const DANGEROUS_PATH_PATTERNS = [
+    /\/etc\/passwd/i,
+    /\/etc\/shadow/i,
+    /\/etc\/hosts/i,
+    /\/etc\/sudoers/i,
+    /\.env(\..*)?$/i,
+    /\.ssh\//i,
+    /\.gnupg\//i,
+    /\.aws\//i,
+    /\.kube\//i,
+    /\.config\/gcloud\//i,
+    /\.docker\//i,
+    /\.git\//i,
+    /\/package\.json$/i,
+    /\/pnpm-lock\.yaml$/i,
+    /\/yarn\.lock$/i,
+    /\/tsconfig\.json$/i,
+    /\.pem$/i,
+    /\.key$/i,
+];
+/**
+ * 危险删除命令关键词 — 使用 bash 执行文件删除时匹配。
+ */
+const DANGEROUS_DELETE_COMMANDS = [
+    /\brm\s+/i,
+    /\brmdir\b/i,
+    /\bunlink\b/i,
+    /\brm\s*-\w*r/i,
+    /\bshred\b/i,
+    /\btruncate\b/i,
+];
+/**
+ * 交互式/危险命令关键词 — 使用 bash 执行写入类操作时匹配。
+ */
+const DANGEROUS_WRITE_COMMANDS = [
+    /\bdd\s+/i,
+    /\bmkfs\b/i,
+    /\bformat\b/i,
+    /\bfdisk\b/i,
+];
+// ── 核心检查函数 ──────────────────────────────────────────────────
+/**
+ * 检查文件操作权限
+ *
+ * @param role 当前用户角色
+ * @param operation 请求的文件操作类型
+ * @param filePath 操作涉及的文件路径（用于危险判定）
+ * @returns 权限结果
+ */
+export function checkFilePermission(role, operation, filePath) {
+    const allowed = FILE_PERMISSION_MATRIX[role][operation];
+    if (!allowed) {
+        const reason = role === 'user'
+            ? `当前角色为「普通用户」，仅允许读取文件；请求的操作「${operation}」被拒绝。`
+            : role === 'admin' && operation === 'delete'
+                ? `当前角色为「管理员」，不允许删除文件；请联系 Owner 执行删除操作。`
+                : `当前角色「${role}」无权执行「${operation}」操作。`;
+        return {
+            allowed: false,
+            reason,
+            role,
+            operation,
+        };
+    }
+    const isDangerous = operation === 'delete' || (filePath ? isDangerousFileOperation(operation, filePath) : false);
+    if (isDangerous) {
+        if (role === 'owner') {
+            return {
+                allowed: true,
+                needsConfirmation: true,
+                reason: filePath
+                    ? `对敏感路径「${filePath}」执行「${operation}」操作需要二次确认。`
+                    : `「${operation}」操作需要二次确认。`,
+                role,
+                operation,
+            };
+        }
+        if (role === 'admin') {
+            return {
+                allowed: true,
+                needsOwnerConfirmation: true,
+                reason: filePath
+                    ? `管理员对敏感路径「${filePath}」执行「${operation}」操作需要 Owner 确认。`
+                    : `管理员执行「${operation}」操作需要 Owner 确认。`,
+                role,
+                operation,
+            };
+        }
+    }
+    return { allowed: true, role, operation };
+}
+/**
+ * 判断文件操作是否为危险操作
+ *
+ * 危险判定规则:
+ *  - delete 操作始终视为危险
+ *  - create/update 操作对敏感路径视为危险
+ *  - read 操作通常不视为危险
+ */
+export function isDangerousFileOperation(operation, filePath) {
+    if (operation === 'delete')
+        return true;
+    if (operation === 'create' || operation === 'update') {
+        return DANGEROUS_PATH_PATTERNS.some(p => p.test(filePath));
+    }
+    return false;
+}
+/**
+ * 从 ToolPermissionLevel / 权限标志推导 FileRole
+ *
+ * 映射规则:
+ *  - isOwner → 'owner'
+ *  - isBotAdmin / isGroupOwner / isGroupAdmin → 'admin'
+ *  - 其余 → 'user'
+ */
+export function inferFileRole(context) {
+    if (context.isOwner)
+        return 'owner';
+    if (context.senderPermissionLevel === 'owner')
+        return 'owner';
+    if (context.senderPermissionLevel === 'bot_admin')
+        return 'admin';
+    if (context.senderPermissionLevel === 'group_owner')
+        return 'admin';
+    if (context.senderPermissionLevel === 'group_admin')
+        return 'admin';
+    if (context.isBotAdmin || context.isGroupOwner || context.isGroupAdmin)
+        return 'admin';
+    return 'user';
+}
+/**
+ * 从 ToolRequesterRole（dangerous-tool-policy 推导出的角色）转换为 FileRole
+ *
+ * 映射规则:
+ *  - 'owner' → 'owner'
+ *  - 'admin' → 'admin'
+ *  - 'other' → 'user'
+ *  - 'unknown' → 'owner'（无上下文时默认最高权限，向后兼容）
+ */
+export function toolRequesterRoleToFileRole(role) {
+    switch (role) {
+        case 'owner': return 'owner';
+        case 'admin': return 'admin';
+        case 'other': return 'user';
+        case 'unknown': return 'owner';
+    }
+}
+/**
+ * 将 bash 命令分类为文件操作类型
+ * 返回 null 表示非文件操作命令（如纯查询命令）。
+ */
+export function classifyBashFileOperation(command) {
+    const trimmed = command.trim();
+    const baseCmd = trimmed.split(/\s+/)[0] || '';
+    if (DANGEROUS_DELETE_COMMANDS.some(p => p.test(trimmed)))
+        return 'delete';
+    const writeCommands = ['tee', 'sed', 'awk', 'perl', 'python', 'python3', 'node', 'bash', 'sh', 'zsh', 'fish', 'npm', 'npx', 'pnpm', 'yarn', 'git', 'curl', 'wget', 'cp', 'mv', 'install', 'pip', 'pip3', 'cargo', 'make', 'docker'];
+    if (writeCommands.includes(baseCmd))
+        return 'update';
+    if (/[>|]\s/i.test(trimmed) || /\btee\b/i.test(trimmed))
+        return 'update';
+    if ((/\bmkdir\b/i.test(trimmed) || /\btouch\b/i.test(trimmed)) && !/\brm\b/i.test(trimmed))
+        return 'create';
+    const readCommands = ['cat', 'head', 'tail', 'less', 'more', 'wc', 'stat', 'file', 'ls', 'find', 'grep', 'rg', 'ag', 'ack', 'which', 'whereis', 'echo', 'printf', 'sort', 'uniq', 'tr', 'cut', 'jq'];
+    if (readCommands.includes(baseCmd))
+        return 'read';
+    return null;
+}
+/**
+ * 检查 bash 命令的文件操作权限
+ *
+ * 结合 bash 命令分类与文件角色权限，返回权限检查结果。
+ * 若命令不涉及文件操作（如纯进程查询），直接放行。
+ */
+export function checkBashFilePermission(role, command) {
+    const fileOp = classifyBashFileOperation(command);
+    if (fileOp === null) {
+        return {
+            allowed: true,
+            role,
+            operation: 'read',
+            fileOperation: null,
+        };
+    }
+    const result = checkFilePermission(role, fileOp);
+    return { ...result, fileOperation: fileOp };
+}
+/**
+ * 根据 FilePermissionResult 生成 ZHIN_NEEDS_OWNER 信号消息
+ *
+ * 用于与现有 Owner 确认编排机制集成:
+ *  - needsConfirmation → 生成需要确认的消息
+ *  - needsOwnerConfirmation → 生成需要 Owner 确认的消息
+ *  - !allowed → 直接拒绝消息
+ */
+export function formatFilePermissionMessage(result, toolName, detail) {
+    if (!result.allowed) {
+        return `Error: ${result.reason}`;
+    }
+    if (result.needsOwnerConfirmation) {
+        const body = detail || result.reason || `文件操作「${result.operation}」需要 Owner 确认`;
+        return `ZHIN_NEEDS_OWNER:\n${body}\n\n（管理员执行敏感文件操作需 Owner 确认；请 Owner 回复确认或拒绝。）`;
+    }
+    if (result.needsConfirmation) {
+        const body = detail || result.reason || `文件操作「${result.operation}」需要二次确认`;
+        return `ZHIN_NEEDS_OWNER:\n${body}\n\n（Owner 对敏感路径执行操作需二次确认；请确认继续或拒绝。）`;
+    }
+    return '';
+}
+/**
+ * 生成角色感知的提示词片段 — 供 system prompt 注入
+ */
+export function buildFileRolePrompt(role) {
+    const roleLabels = {
+        owner: 'Owner（拥有者）',
+        admin: 'Admin（管理员）',
+        user: 'User（普通用户）',
+    };
+    const permissions = {
+        owner: '你拥有完整的文件操作权限（创建、读取、修改、删除），但对敏感路径的操作需要二次确认。',
+        admin: '你可以创建、读取、修改文件，但不能删除文件。对敏感路径的操作需要 Owner 确认。',
+        user: '你只能读取文件，不能创建、修改或删除任何文件。',
+    };
+    return [
+        `当前用户角色: ${roleLabels[role]}`,
+        permissions[role],
+        role === 'owner'
+            ? '作为 Owner，删除文件和修改敏感配置时请务必确认操作的必要性。'
+            : role === 'admin'
+                ? '作为 Admin，如需删除文件请联系 Owner 确认。修改敏感文件同样需要 Owner 授权。'
+                : '作为普通用户，如需修改文件请联系管理员或 Owner。',
+    ].join('\n');
+}
+//# sourceMappingURL=file-role-policy.js.map

package/lib/security/file-role-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-role-policy.js","sourceRoot":"","sources":["../../src/security/file-role-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAgCH,iEAAiE;AAEjE,MAAM,sBAAsB,GAAqD;IAC/E,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC/D,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;IAChE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;CAClE,CAAC;AAEF,4DAA4D;AAE5D;;;GAGG;AACH,MAAM,uBAAuB,GAAa;IACxC,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,UAAU;IACV,WAAW;IACX,qBAAqB;IACrB,aAAa;IACb,UAAU;IACV,mBAAmB;IACnB,qBAAqB;IACrB,gBAAgB;IAChB,oBAAoB;IACpB,SAAS;IACT,SAAS;CACV,CAAC;AAEF;;GAEG;AACH,MAAM,yBAAyB,GAAa;IAC1C,UAAU;IACV,YAAY;IACZ,aAAa;IACb,eAAe;IACf,YAAY;IACZ,eAAe;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,wBAAwB,GAAa;IACzC,UAAU;IACV,WAAW;IACX,aAAa;IACb,YAAY;CACb,CAAC;AAEF,+DAA+D;AAE/D;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAc,EACd,SAAwB,EACxB,QAAiB;IAEjB,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;IAExD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,KAAK,MAAM;YAC5B,CAAC,CAAC,6BAA6B,SAAS,OAAO;YAC/C,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,KAAK,QAAQ;gBAC1C,CAAC,CAAC,sCAAsC;gBACxC,CAAC,CAAC,QAAQ,IAAI,SAAS,SAAS,MAAM,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM;YACN,IAAI;YACJ,SAAS;SACV,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAEjH,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,iBAAiB,EAAE,IAAI;gBACvB,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,SAAS,QAAQ,OAAO,SAAS,YAAY;oBAC/C,CAAC,CAAC,IAAI,SAAS,YAAY;gBAC7B,IAAI;gBACJ,SAAS;aACV,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,sBAAsB,EAAE,IAAI;gBAC5B,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,YAAY,QAAQ,OAAO,SAAS,iBAAiB;oBACvD,CAAC,CAAC,SAAS,SAAS,iBAAiB;gBACvC,IAAI;gBACJ,SAAS;aACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAwB,EAAE,QAAgB;IACjF,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,OAM7B;IACC,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAEpC,IAAI,OAAO,CAAC,qBAAqB,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,OAAO,CAAC,qBAAqB,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IAClE,IAAI,OAAO,CAAC,qBAAqB,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC;IACpE,IAAI,OAAO,CAAC,qBAAqB,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC;IAEpE,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC;IAEvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAA6C;IACvF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;QAC7B,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;QAC7B,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;QAC5B,KAAK,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9C,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE1E,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpO,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IAErD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEzE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE5G,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACrM,IAAI,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAElD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAc,EACd,OAAe;IAEf,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAElD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI;YACJ,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAA4B,EAAE,QAAgB,EAAE,MAAe;IACzG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,MAAM,CAAC,SAAS,cAAc,CAAC;QAC/E,OAAO,sBAAsB,IAAI,8CAA8C,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,MAAM,CAAC,SAAS,SAAS,CAAC;QAC1E,OAAO,sBAAsB,IAAI,sCAAsC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,MAAM,UAAU,GAA6B;QAC3C,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,YAAY;KACnB,CAAC;IAEF,MAAM,WAAW,GAA6B;QAC5C,KAAK,EAAE,4CAA4C;QACnD,KAAK,EAAE,4CAA4C;QACnD,IAAI,EAAE,yBAAyB;KAChC,CAAC;IAEF,OAAO;QACL,WAAW,UAAU,CAAC,IAAI,CAAC,EAAE;QAC7B,WAAW,CAAC,IAAI,CAAC;QACjB,IAAI,KAAK,OAAO;YACd,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,IAAI,KAAK,OAAO;gBAChB,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,6BAA6B;KACpC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/lib/security/index.d.ts

@@ -1,3 +1,62 @@
+/**
+ * Agent 安全策略模块
+ *
+ * 提供多层安全防护：
+ * - 执行策略（exec-policy）：命令执行安全
+ * - 文件策略（file-policy）：文件访问安全
+ * - 网络策略（network-policy）：网络访问安全
+ * - 预算限制（budget-limiter）：资源使用限制
+ * - 审计日志（audit-logger）：安全事件追踪
+ * - 沙箱环境（sandbox）：进程隔离和资源限制
+ * - 增强沙箱（sandbox-enhanced）：更细粒度的安全控制
+ * - 异常检测（anomaly-detection）：行为模式分析和异常检测
+ */
 export * from './file-policy.js';
 export * from './exec-policy.js';
+export * from './network-policy.js';
+export * from './budget-limiter.js';
+export * from './audit-logger.js';
+export * from './bash-tool-context.js';
+export * from './owner-approve-always-store.js';
+export * from './sandbox.js';
+export * from './sandbox-enhanced.js';
+export * from './anomaly-detection.js';
+export * from './file-role-policy.js';
+export * from './dangerous-tool-policy.js';
+import type { AuditLoggerConfig } from './audit-logger.js';
+import { AuditLogger } from './audit-logger.js';
+import type { NetworkPolicyConfig } from './network-policy.js';
+import { NetworkPolicy } from './network-policy.js';
+import type { BudgetConfig } from './budget-limiter.js';
+import { BudgetLimiter } from './budget-limiter.js';
+export interface SecurityPolicyConfig {
+    audit?: Partial<AuditLoggerConfig>;
+    network?: Partial<NetworkPolicyConfig>;
+    budget?: Partial<BudgetConfig>;
+}
+/**
+ * 初始化所有安全策略
+ */
+export declare function initSecurityPolicies(config?: SecurityPolicyConfig): {
+    auditLogger: AuditLogger;
+    networkPolicy: NetworkPolicy;
+    budgetLimiter: BudgetLimiter;
+};
+/**
+ * 获取安全策略状态
+ */
+export declare function getSecurityPolicyStatus(): {
+    audit: {
+        enabled: boolean;
+        eventCount: number;
+    };
+    network: {
+        enabled: boolean;
+        rulesCount: number;
+    };
+    budget: {
+        enabled: boolean;
+        activeSessions: number;
+    };
+};
 //# sourceMappingURL=index.d.ts.map

package/lib/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAI3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAmC,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAuC,MAAM,qBAAqB,CAAC;AACzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAuC,MAAM,qBAAqB,CAAC;AAEzF,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,GAAE,oBAAyB,GAAG;IACvE,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;CAC9B,CAMA;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI;IACzC,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD,CA4BA"}

package/lib/security/index.js

@@ -1,3 +1,71 @@
+/**
+ * Agent 安全策略模块
+ *
+ * 提供多层安全防护：
+ * - 执行策略（exec-policy）：命令执行安全
+ * - 文件策略（file-policy）：文件访问安全
+ * - 网络策略（network-policy）：网络访问安全
+ * - 预算限制（budget-limiter）：资源使用限制
+ * - 审计日志（audit-logger）：安全事件追踪
+ * - 沙箱环境（sandbox）：进程隔离和资源限制
+ * - 增强沙箱（sandbox-enhanced）：更细粒度的安全控制
+ * - 异常检测（anomaly-detection）：行为模式分析和异常检测
+ */
+// ── 核心安全策略 ──────────────────────────────────────────────────────
 export * from './file-policy.js';
 export * from './exec-policy.js';
+export * from './network-policy.js';
+export * from './budget-limiter.js';
+export * from './audit-logger.js';
+export * from './bash-tool-context.js';
+export * from './owner-approve-always-store.js';
+export * from './sandbox.js';
+export * from './sandbox-enhanced.js';
+export * from './anomaly-detection.js';
+export * from './file-role-policy.js';
+export * from './dangerous-tool-policy.js';
+import { initAuditLogger, getAuditLogger } from './audit-logger.js';
+import { initNetworkPolicy, getNetworkPolicy } from './network-policy.js';
+import { initBudgetLimiter, getBudgetLimiter } from './budget-limiter.js';
+/**
+ * 初始化所有安全策略
+ */
+export function initSecurityPolicies(config = {}) {
+    const auditLogger = initAuditLogger(config.audit || {});
+    const networkPolicy = initNetworkPolicy(config.network || {});
+    const budgetLimiter = initBudgetLimiter(config.budget || {});
+    return { auditLogger, networkPolicy, budgetLimiter };
+}
+/**
+ * 获取安全策略状态
+ */
+export function getSecurityPolicyStatus() {
+    try {
+        const audit = getAuditLogger();
+        const network = getNetworkPolicy();
+        const budget = getBudgetLimiter();
+        return {
+            audit: {
+                enabled: audit.getConfig().enabled,
+                eventCount: audit.getStats().totalEvents,
+            },
+            network: {
+                enabled: network.getConfig().enabled,
+                rulesCount: (network.getConfig().allowedDomains?.length || 0) +
+                    (network.getConfig().blockedDomains?.length || 0),
+            },
+            budget: {
+                enabled: budget.getConfig().enabled,
+                activeSessions: 0,
+            },
+        };
+    }
+    catch {
+        return {
+            audit: { enabled: false, eventCount: 0 },
+            network: { enabled: false, rulesCount: 0 },
+            budget: { enabled: false, activeSessions: 0 },
+        };
+    }
+}
 //# sourceMappingURL=index.js.map

package/lib/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,mEAAmE;AAEnE,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAK3C,OAAO,EAAe,eAAe,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEjF,OAAO,EAAiB,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EAAiB,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAQzF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAA+B,EAAE;IAKpE,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAE7D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IAKrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAElC,OAAO;YACL,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO;gBAClC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW;aACzC;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO;gBACpC,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC;oBAClD,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC;aAC7D;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO;gBACnC,cAAc,EAAE,CAAC;aAClB;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;YACxC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE;YAC1C,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;SAC9C,CAAC;IACJ,CAAC;AACH,CAAC"}