@zhin.js/agent 0.1.25 → 0.1.27

package/lib/security/audit-logger.js

@@ -0,0 +1,379 @@
+/**
+ * Agent 审计日志系统
+ *
+ * 记录所有工具执行、安全事件和权限检查，
+ * 用于安全审计、问题排查和合规性检查。
+ *
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { getPlugin } from '@zhin.js/core';
+const DEFAULT_CONFIG = {
+    enabled: true,
+    minSeverity: 'info',
+    logSensitiveData: false,
+    retentionDays: 30,
+    maxFileSizeMB: 100,
+};
+// ── 敏感信息脱敏 ──────────────────────────────────────────────────────
+const SENSITIVE_PATTERNS = [
+    /password/i,
+    /secret/i,
+    /token/i,
+    /api[_-]?key/i,
+    /credential/i,
+    /auth/i,
+];
+/**
+ * 脱敏命令中的敏感信息
+ */
+function sanitizeCommand(command) {
+    let sanitized = command;
+    // 脱敏环境变量值
+    sanitized = sanitized.replace(/([A-Za-z_][A-Za-z0-9_]*)=([^\s;|&]+)/g, (match, key, value) => {
+        if (SENSITIVE_PATTERNS.some(p => p.test(key))) {
+            return `${key}=***`;
+        }
+        return match;
+    });
+    // 脱敏 URL 中的密码
+    sanitized = sanitized.replace(/(https?:\/\/[^:]+:)[^@]+(@)/g, '$1***$2');
+    // 脱敏文件内容中的敏感数据
+    sanitized = sanitized.replace(/(-[a-zA-Z]*p[a-zA-Z]*\s+)([^\s]+)/gi, '$1***');
+    return sanitized;
+}
+/**
+ * 脱敏文件路径中的敏感信息
+ */
+function sanitizeFilePath(filePath) {
+    // 保留路径结构，但隐藏敏感目录内容
+    const sensitiveDirs = ['.ssh', '.gnupg', '.aws', '.kube', '.docker'];
+    let sanitized = filePath;
+    for (const dir of sensitiveDirs) {
+        if (sanitized.includes(dir)) {
+            const parts = sanitized.split(dir);
+            if (parts.length > 1) {
+                sanitized = `${parts[0]}${dir}/***`;
+            }
+        }
+    }
+    return sanitized;
+}
+// ── 审计日志记录器 ────────────────────────────────────────────────────
+export class AuditLogger {
+    config;
+    logStream = null;
+    eventCount = 0;
+    sessionEvents = [];
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        this.initLogFile();
+    }
+    initLogFile() {
+        if (!this.config.enabled || !this.config.logFile)
+            return;
+        try {
+            const logDir = path.dirname(this.config.logFile);
+            if (!fs.existsSync(logDir)) {
+                fs.mkdirSync(logDir, { recursive: true });
+            }
+            this.logStream = fs.createWriteStream(this.config.logFile, {
+                flags: 'a',
+                encoding: 'utf8',
+            });
+            this.logStream.on('error', (err) => {
+                console.error('[AuditLogger] 写入日志文件失败:', err.message);
+            });
+        }
+        catch (err) {
+            console.error('[AuditLogger] 初始化日志文件失败:', err);
+        }
+    }
+    /**
+     * 生成事件 ID
+     */
+    generateEventId() {
+        return `evt_${Date.now()}_${++this.eventCount}`;
+    }
+    /**
+     * 检查事件是否应该记录
+     */
+    shouldLog(severity) {
+        if (!this.config.enabled)
+            return false;
+        const severityOrder = {
+            info: 0,
+            warn: 1,
+            error: 2,
+            critical: 3,
+        };
+        const minSeverity = this.config.minSeverity || 'info';
+        return severityOrder[severity] >= severityOrder[minSeverity];
+    }
+    /**
+     * 记录审计事件
+     */
+    log(event) {
+        if (!this.shouldLog(event.severity))
+            return;
+        const fullEvent = {
+            ...event,
+            id: this.generateEventId(),
+            timestamp: Date.now(),
+        };
+        // 脱敏处理
+        if (!this.config.logSensitiveData) {
+            if (fullEvent.command) {
+                fullEvent.command = sanitizeCommand(fullEvent.command);
+            }
+            if (fullEvent.filePath) {
+                fullEvent.filePath = sanitizeFilePath(fullEvent.filePath);
+            }
+        }
+        // 添加到会话事件
+        this.sessionEvents.push(fullEvent);
+        // 写入日志文件
+        this.writeToFile(fullEvent);
+        // 控制台输出（仅警告及以上级别）
+        if (fullEvent.severity === 'warn' || fullEvent.severity === 'error' || fullEvent.severity === 'critical') {
+            this.consoleLog(fullEvent);
+        }
+    }
+    /**
+     * 写入日志文件
+     */
+    writeToFile(event) {
+        if (!this.logStream)
+            return;
+        try {
+            const logLine = JSON.stringify(event) + '\n';
+            this.logStream.write(logLine);
+        }
+        catch (err) {
+            console.error('[AuditLogger] 写入日志失败:', err);
+        }
+    }
+    /**
+     * 控制台输出
+     */
+    consoleLog(event) {
+        const prefix = `[Audit:${event.severity.toUpperCase()}]`;
+        const message = `${prefix} ${event.type}: ${event.message}`;
+        switch (event.severity) {
+            case 'warn':
+                console.warn(message);
+                break;
+            case 'error':
+            case 'critical':
+                console.error(message);
+                break;
+            default:
+                console.log(message);
+        }
+    }
+    /**
+     * 记录工具执行
+     */
+    logToolExecution(toolName, args, result, duration) {
+        this.log({
+            type: 'tool.execute',
+            severity: 'info',
+            toolName,
+            message: `工具 ${toolName} 执行完成`,
+            details: {
+                args: this.config.logSensitiveData ? args : undefined,
+                duration,
+                success: true,
+            },
+        });
+    }
+    /**
+     * 记录工具被拒绝
+     */
+    logToolDenied(toolName, reason, context) {
+        this.log({
+            type: 'tool.denied',
+            severity: 'warn',
+            toolName,
+            message: `工具 ${toolName} 被拒绝: ${reason}`,
+            blocked: true,
+            blockReason: reason,
+            details: context,
+        });
+    }
+    /**
+     * 记录命令执行策略检查
+     */
+    logExecPolicy(command, allowed, reason) {
+        this.log({
+            type: 'exec.policy',
+            severity: allowed ? 'info' : 'warn',
+            command,
+            message: allowed ? `命令允许执行: ${command}` : `命令被拒绝: ${reason}`,
+            blocked: !allowed,
+            blockReason: reason,
+        });
+    }
+    /**
+     * 记录文件访问检查
+     */
+    logFileAccess(filePath, allowed, reason) {
+        this.log({
+            type: 'file.access',
+            severity: allowed ? 'info' : 'warn',
+            filePath,
+            message: allowed ? `文件访问允许: ${filePath}` : `文件访问被拒绝: ${reason}`,
+            blocked: !allowed,
+            blockReason: reason,
+        });
+    }
+    /**
+     * 记录安全违规
+     */
+    logSecurityViolation(type, message, details) {
+        this.log({
+            type: 'security.violation',
+            severity: 'error',
+            message: `安全违规 [${type}]: ${message}`,
+            blocked: true,
+            details,
+        });
+    }
+    /**
+     * 记录 Owner 确认
+     */
+    logOwnerConfirm(toolName, approved, message) {
+        this.log({
+            type: 'owner.confirm',
+            severity: 'info',
+            toolName,
+            message: `Owner ${approved ? '批准' : '拒绝'} 工具 ${toolName}`,
+            details: { approved, message },
+        });
+    }
+    /**
+     * 记录速率限制
+     */
+    logRateLimit(userId, limit, current) {
+        this.log({
+            type: 'rate.limit',
+            severity: 'warn',
+            userId,
+            message: `用户 ${userId} 触发速率限制: ${current}/${limit}`,
+            blocked: true,
+            details: { limit, current },
+        });
+    }
+    /**
+     * 记录会话开始
+     */
+    logSessionStart(sessionId, userId, botId, platform) {
+        this.log({
+            type: 'session.start',
+            severity: 'info',
+            sessionId,
+            userId,
+            botId,
+            platform,
+            message: `会话开始: ${sessionId}`,
+        });
+    }
+    /**
+     * 记录会话结束
+     */
+    logSessionEnd(sessionId, duration, toolCount) {
+        this.log({
+            type: 'session.end',
+            severity: 'info',
+            sessionId,
+            message: `会话结束: ${sessionId} (${duration}ms, ${toolCount} 个工具调用)`,
+            details: { duration, toolCount },
+        });
+    }
+    /**
+     * 获取当前会话的审计事件
+     */
+    getSessionEvents() {
+        return [...this.sessionEvents];
+    }
+    /**
+     * 获取配置
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+    /**
+     * 获取审计统计
+     */
+    getStats() {
+        const byType = {};
+        const bySeverity = {};
+        let blockedEvents = 0;
+        for (const event of this.sessionEvents) {
+            byType[event.type] = (byType[event.type] || 0) + 1;
+            bySeverity[event.severity] = (bySeverity[event.severity] || 0) + 1;
+            if (event.blocked)
+                blockedEvents++;
+        }
+        return {
+            totalEvents: this.eventCount,
+            sessionEvents: this.sessionEvents.length,
+            blockedEvents,
+            byType,
+            bySeverity,
+        };
+    }
+    /**
+     * 清理会话事件
+     */
+    clearSessionEvents() {
+        this.sessionEvents = [];
+    }
+    /**
+     * 关闭日志流
+     */
+    close() {
+        if (this.logStream) {
+            this.logStream.end();
+            this.logStream = null;
+        }
+    }
+}
+// ── 全局审计日志实例 ──────────────────────────────────────────────────
+let globalAuditLogger = null;
+/**
+ * 获取全局审计日志实例
+ */
+export function getAuditLogger() {
+    if (!globalAuditLogger) {
+        try {
+            const plugin = getPlugin();
+            const config = plugin.root?.inject('config')?.ai?.agent?.audit;
+            globalAuditLogger = new AuditLogger(config);
+        }
+        catch {
+            globalAuditLogger = new AuditLogger({ enabled: false });
+        }
+    }
+    return globalAuditLogger;
+}
+/**
+ * 初始化审计日志
+ */
+export function initAuditLogger(config) {
+    if (globalAuditLogger) {
+        globalAuditLogger.close();
+    }
+    globalAuditLogger = new AuditLogger(config);
+    return globalAuditLogger;
+}
+/**
+ * 关闭审计日志
+ */
+export function closeAuditLogger() {
+    if (globalAuditLogger) {
+        globalAuditLogger.close();
+        globalAuditLogger = null;
+    }
+}
+//# sourceMappingURL=audit-logger.js.map

package/lib/security/audit-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.js","sourceRoot":"","sources":["../../src/security/audit-logger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAsE1C,MAAM,cAAc,GAAsB;IACxC,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,MAAM;IACnB,gBAAgB,EAAE,KAAK;IACvB,aAAa,EAAE,EAAE;IACjB,aAAa,EAAE,GAAG;CACnB,CAAC;AAEF,mEAAmE;AAEnE,MAAM,kBAAkB,GAAG;IACzB,WAAW;IACX,SAAS;IACT,QAAQ;IACR,cAAc;IACd,aAAa;IACb,OAAO;CACR,CAAC;AAEF;;GAEG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,UAAU;IACV,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,uCAAuC,EACvC,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACpB,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,GAAG,GAAG,MAAM,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;IAEF,cAAc;IACd,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,8BAA8B,EAC9B,SAAS,CACV,CAAC;IAEF,eAAe;IACf,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,qCAAqC,EACrC,OAAO,CACR,CAAC;IAEF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,mBAAmB;IACnB,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,IAAI,SAAS,GAAG,QAAQ,CAAC;IAEzB,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,SAAS,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kEAAkE;AAElE,MAAM,OAAO,WAAW;IACd,MAAM,CAAoB;IAC1B,SAAS,GAA0B,IAAI,CAAC;IACxC,UAAU,GAAG,CAAC,CAAC;IACf,aAAa,GAAiB,EAAE,CAAC;IAEzC,YAAY,SAAqC,EAAE;QACjD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAEzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBACzD,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACjC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,QAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,aAAa,GAAuC;YACxD,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,CAAC;SACZ,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC;QACtD,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,KAA2C;QAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO;QAE5C,MAAM,SAAS,GAAe;YAC5B,GAAG,KAAK;YACR,EAAE,EAAE,IAAI,CAAC,eAAe,EAAE;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,OAAO;QACP,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtB,SAAS,CAAC,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,SAAS,CAAC,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,UAAU;QACV,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnC,SAAS;QACT,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE5B,kBAAkB;QAClB,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACzG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,KAAiB;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAE5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,KAAiB;QAClC,MAAM,MAAM,GAAG,UAAU,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;QACzD,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAE5D,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvB,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO,CAAC;YACb,KAAK,UAAU;gBACb,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvB,MAAM;YACR;gBACE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,QAAgB,EAAE,IAA6B,EAAE,MAAe,EAAE,QAAgB;QACjG,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,MAAM;YAChB,QAAQ;YACR,OAAO,EAAE,MAAM,QAAQ,OAAO;YAC9B,OAAO,EAAE;gBACP,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACrD,QAAQ;gBACR,OAAO,EAAE,IAAI;aACd;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB,EAAE,MAAc,EAAE,OAAiC;QAC/E,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,MAAM;YAChB,QAAQ;YACR,OAAO,EAAE,MAAM,QAAQ,SAAS,MAAM,EAAE;YACxC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM;YACnB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAe,EAAE,OAAgB,EAAE,MAAe;QAC9D,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnC,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE;YAC5D,OAAO,EAAE,CAAC,OAAO;YACjB,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB,EAAE,OAAgB,EAAE,MAAe;QAC/D,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnC,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE;YAC/D,OAAO,EAAE,CAAC,OAAO;YACjB,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAY,EAAE,OAAe,EAAE,OAAiC;QACnF,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,SAAS,IAAI,MAAM,OAAO,EAAE;YACrC,OAAO,EAAE,IAAI;YACb,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB,EAAE,QAAiB,EAAE,OAAgB;QACnE,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,MAAM;YAChB,QAAQ;YACR,OAAO,EAAE,SAAS,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,QAAQ,EAAE;YACzD,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc,EAAE,KAAa,EAAE,OAAe;QACzD,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,MAAM;YAChB,MAAM;YACN,OAAO,EAAE,MAAM,MAAM,YAAY,OAAO,IAAI,KAAK,EAAE;YACnD,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,MAAe,EAAE,KAAc,EAAE,QAAiB;QACnF,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,MAAM;YAChB,SAAS;YACT,MAAM;YACN,KAAK;YACL,QAAQ;YACR,OAAO,EAAE,SAAS,SAAS,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB,EAAE,QAAgB,EAAE,SAAiB;QAClE,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,MAAM;YAChB,SAAS;YACT,OAAO,EAAE,SAAS,SAAS,KAAK,QAAQ,OAAO,SAAS,SAAS;YACjE,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,QAAQ;QAON,MAAM,MAAM,GAAmC,EAAS,CAAC;QACzD,MAAM,UAAU,GAAuC,EAAS,CAAC;QACjE,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnD,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnE,IAAI,KAAK,CAAC,OAAO;gBAAE,aAAa,EAAE,CAAC;QACrC,CAAC;QAED,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;YACxC,aAAa;YACb,MAAM;YACN,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,iEAAiE;AAEjE,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;YACxE,iBAAiB,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAkC;IAChE,IAAI,iBAAiB,EAAE,CAAC;QACtB,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,iBAAiB,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,iBAAiB,EAAE,CAAC;QACtB,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC1B,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/lib/security/bash-tool-context.d.ts

@@ -2,8 +2,8 @@ import type { ToolContext } from '@zhin.js/core';
 export interface BashToolExecutionScope {
     toolContext?: ToolContext;
     /**
-     * Worker / 异步子 Agent：跳过 execAsk 的 Owner 审批门（仍拒绝危险命令与 deny）。
-     * 与 {@link createOwnerOrchestratedToolResultTransform} 的 `disableHardOrchestration` 配合使用。
+     * Worker / 异步子 Agent 的执行上下文标记。
+     * 该标记本身不再决定审批行为；审批由各路径的 execApprovalMode 控制。
      */
     directExecution?: boolean;
 }
@@ -14,7 +14,7 @@ export interface RunWithBashToolContextOptions {
 }
 export declare function runWithBashToolContext<T>(ctx: ToolContext | undefined, fn: () => T, options?: RunWithBashToolContextOptions): T;
 export declare function runWithBashToolContext<T>(ctx: ToolContext | undefined, fn: () => Promise<T>, options?: RunWithBashToolContextOptions): Promise<T>;
-/** 子 Agent / Deferred Worker：免 Owner 在线审批，在策略允许范围内直接执行 bash */
+/** 子 Agent / Deferred Worker：在独立执行上下文中运行 bash（审批策略由 execApprovalMode 决定） */
 export declare function runWithDirectAgentExecution<T>(ctx: ToolContext | undefined, fn: () => T): T;
 export declare function runWithDirectAgentExecution<T>(ctx: ToolContext | undefined, fn: () => Promise<T>): Promise<T>;
 //# sourceMappingURL=bash-tool-context.d.ts.map

package/lib/security/bash-tool-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash-tool-context.d.ts","sourceRoot":"","sources":["../../src/security/bash-tool-context.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAID,wBAAgB,yBAAyB,IAAI,WAAW,GAAG,SAAS,CAEnE;AAED,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED,MAAM,WAAW,6BAA6B;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,GAAG,EAAE,WAAW,GAAG,SAAS,EAC5B,EAAE,EAAE,MAAM,CAAC,EACX,OAAO,CAAC,EAAE,6BAA6B,GACtC,CAAC,CAAC;AACL,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,GAAG,EAAE,WAAW,GAAG,SAAS,EAC5B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE,6BAA6B,GACtC,OAAO,CAAC,CAAC,CAAC,CAAC;AASd,+DAA+D;AAC/D,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7F,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"bash-tool-context.d.ts","sourceRoot":"","sources":["../../src/security/bash-tool-context.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAID,wBAAgB,yBAAyB,IAAI,WAAW,GAAG,SAAS,CAEnE;AAED,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED,MAAM,WAAW,6BAA6B;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,GAAG,EAAE,WAAW,GAAG,SAAS,EAC5B,EAAE,EAAE,MAAM,CAAC,EACX,OAAO,CAAC,EAAE,6BAA6B,GACtC,CAAC,CAAC;AACL,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,GAAG,EAAE,WAAW,GAAG,SAAS,EAC5B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE,6BAA6B,GACtC,OAAO,CAAC,CAAC,CAAC,CAAC;AASd,4EAA4E;AAC5E,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7F,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC"}

package/lib/security/budget-limiter.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Token/Cost 预算限制系统
+ *
+ * 控制 AI Agent 的资源使用，防止：
+ * - Token 滥用
+ * - 成本超支
+ * - 资源耗尽
+ *
+ */
+export interface BudgetConfig {
+    /** 是否启用预算限制 */
+    enabled: boolean;
+    /** 每会话最大 Token 数 */
+    maxTokensPerSession?: number;
+    /** 每用户每天最大 Token 数 */
+    maxTokensPerUserPerDay?: number;
+    /** 每会话最大成本（美元） */
+    maxCostPerSession?: number;
+    /** 每用户每天最大成本（美元） */
+    maxCostPerUserPerDay?: number;
+    /** 每会话最大工具调用次数 */
+    maxToolCallsPerSession?: number;
+    /** 每会话最大迭代次数 */
+    maxIterationsPerSession?: number;
+    /** 每会话最大持续时间（毫秒） */
+    maxSessionDuration?: number;
+    /** 警告阈值（百分比） */
+    warningThreshold?: number;
+    /** 是否在达到限制时自动结束会话 */
+    autoTerminate?: boolean;
+}
+export interface TokenUsage {
+    /** 输入 Token 数 */
+    inputTokens: number;
+    /** 输出 Token 数 */
+    outputTokens: number;
+    /** 总 Token 数 */
+    totalTokens: number;
+    /** 估算成本（美元） */
+    estimatedCost: number;
+}
+export interface SessionBudget {
+    /** 会话 ID */
+    sessionId: string;
+    /** 用户 ID */
+    userId?: string;
+    /** 开始时间 */
+    startTime: number;
+    /** Token 使用情况 */
+    tokenUsage: TokenUsage;
+    /** 工具调用次数 */
+    toolCallCount: number;
+    /** 迭代次数 */
+    iterationCount: number;
+    /** 是否已达到限制 */
+    limitReached: boolean;
+    /** 达到的限制类型 */
+    limitType?: string;
+    /** 警告已发送 */
+    warningsSent: Set<string>;
+}
+export interface BudgetCheckResult {
+    allowed: boolean;
+    reason?: string;
+    /** 当前使用情况 */
+    current?: {
+        tokens: number;
+        cost: number;
+        toolCalls: number;
+        iterations: number;
+        duration: number;
+    };
+    /** 限制情况 */
+    limits?: {
+        maxTokens?: number;
+        maxCost?: number;
+        maxToolCalls?: number;
+        maxIterations?: number;
+        maxDuration?: number;
+    };
+    /** 是否为警告 */
+    isWarning?: boolean;
+}
+export declare class BudgetLimiter {
+    private config;
+    private sessions;
+    private dailyUsage;
+    constructor(config?: Partial<BudgetConfig>);
+    /**
+     * 创建新会话预算
+     */
+    createSession(sessionId: string, userId?: string): SessionBudget;
+    /**
+     * 获取会话预算
+     */
+    getSession(sessionId: string): SessionBudget | undefined;
+    /**
+     * 记录 Token 使用
+     */
+    recordTokenUsage(sessionId: string, usage: TokenUsage): BudgetCheckResult;
+    /**
+     * 记录工具调用
+     */
+    recordToolCall(sessionId: string): BudgetCheckResult;
+    /**
+     * 记录迭代
+     */
+    recordIteration(sessionId: string): BudgetCheckResult;
+    /**
+     * 检查预算限制
+     */
+    private checkBudget;
+    /**
+     * 更新每日使用情况
+     */
+    private updateDailyUsage;
+    /**
+     * 清理过期会话和每日记录
+     */
+    private cleanup;
+    /**
+     * 结束会话
+     */
+    endSession(sessionId: string): SessionBudget | undefined;
+    /**
+     * 获取会话统计
+     */
+    getSessionStats(sessionId: string): {
+        tokenUsage: TokenUsage;
+        toolCallCount: number;
+        iterationCount: number;
+        duration: number;
+        limits: Record<string, number | undefined>;
+    } | undefined;
+    /**
+     * 更新配置
+     */
+    updateConfig(config: Partial<BudgetConfig>): void;
+    /**
+     * 获取配置
+     */
+    getConfig(): BudgetConfig;
+}
+/**
+ * 获取全局预算限制器实例
+ */
+export declare function getBudgetLimiter(): BudgetLimiter;
+/**
+ * 初始化预算限制器
+ */
+export declare function initBudgetLimiter(config: Partial<BudgetConfig>): BudgetLimiter;
+/**
+ * 检查预算限制
+ */
+export declare function checkBudgetLimit(sessionId: string, type: 'tokens' | 'toolCall' | 'iteration', usage?: TokenUsage): BudgetCheckResult;
+//# sourceMappingURL=budget-limiter.d.ts.map

package/lib/security/budget-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-limiter.d.ts","sourceRoot":"","sources":["../../src/security/budget-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,gBAAgB;IAChB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,oBAAoB;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAiBD,MAAM,WAAW,UAAU;IACzB,iBAAiB;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,WAAW,aAAa;IAC5B,YAAY;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY;IACZ,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC3B;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa;IACb,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,WAAW;IACX,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY;IACZ,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAID,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAyC;IACzD,OAAO,CAAC,UAAU,CAAsC;gBAE5C,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM;IAO9C;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa;IAgBhE;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIxD;;OAEG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,iBAAiB;IAyBzE;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB;IAcpD;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB;IAcrD;;OAEG;IACH,OAAO,CAAC,WAAW;IAiJnB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;OAEG;IACH,OAAO,CAAC,OAAO;IAoBf;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAQxD;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG;QAClC,UAAU,EAAE,UAAU,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;KAC5C,GAAG,SAAS;IAmBb;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAIjD;;OAEG;IACH,SAAS,IAAI,YAAY;CAG1B;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAWhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,aAAa,CAG9E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,WAAW,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAcpI"}