@zhin.js/agent 1.1.23 → 1.1.26

package/lib/security/owner-approval-runtime.d.ts

@@ -0,0 +1,39 @@
+import { type Message } from '@zhin.js/core';
+import type { OwnerApprovalAddress } from './owner-approval-contracts.js';
+export type { OwnerApprovalAddress } from './owner-approval-contracts.js';
+export declare const OWNER_APPROVE_ALWAYS_TOOL: "bash";
+export type ToolRequesterRole = 'master' | 'trusted' | 'other' | 'unknown';
+export interface OwnerApprovalCommandContext {
+    readonly platform: string;
+    readonly endpoint: string;
+    readonly ownerId?: string;
+    readonly subjectId: string;
+    readonly scope: 'private' | 'group' | 'channel';
+}
+export declare class OwnerApprovalRuntime {
+    #private;
+    constructor(workspaceDir?: string);
+    has(address: OwnerApprovalAddress, toolName: string): boolean;
+    setBashAlways(address: OwnerApprovalAddress, value: boolean): void;
+    addBashRule(address: OwnerApprovalAddress, pattern: string): {
+        ok: true;
+        id: string;
+    } | {
+        ok: false;
+        error: string;
+    };
+    removeBashRule(address: OwnerApprovalAddress, ruleId: string): {
+        ok: true;
+    } | {
+        ok: false;
+        error: string;
+    };
+    matchesBashBypass(address: OwnerApprovalAddress, commandLine: string): boolean;
+    format(address: OwnerApprovalAddress): string;
+    handleCommand(context: OwnerApprovalCommandContext, rawText: string): string | null;
+}
+export declare function ownerApprovalAddressFromMessage(message: Message): OwnerApprovalAddress | undefined;
+export declare function resolveToolRequesterRole(message: Message): ToolRequesterRole;
+export declare const ICQQ_SENSITIVE_SUBCOMMAND_REGEXES: readonly RegExp[];
+export declare function isIcqqSensitiveSubcommand(fullSubCommand: string): boolean;
+//# sourceMappingURL=owner-approval-runtime.d.ts.map

package/lib/security/owner-approval-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-approval-runtime.d.ts","sourceRoot":"","sources":["../../src/security/owner-approval-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAyC,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAEpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,YAAY,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,eAAO,MAAM,yBAAyB,EAAG,MAAe,CAAC;AAGzD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE3E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;CACjD;AAED,qBAAa,oBAAoB;;gBAGnB,YAAY,CAAC,EAAE,MAAM;IAKjC,GAAG,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI7D,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAIlE,WAAW,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM;;;;;;;IAI1D,cAAc,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM;;;;;;IAI5D,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO;IAS9E,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM;IAa7C,aAAa,CAAC,OAAO,EAAE,2BAA2B,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAqCpF;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CASlG;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,iBAAiB,CAU5E;AAED,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAM9D,CAAC;AAEF,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAIzE"}

package/lib/security/owner-approval-runtime.js

@@ -0,0 +1,159 @@
+import * as path from 'node:path';
+import { hasSenderRole, senderRolesFromMessage } from '@zhin.js/core';
+import { workspaceRoot } from '../discovery/utils.js';
+import { OwnerApprovalStore } from './owner-approval-store.js';
+export const OWNER_APPROVE_ALWAYS_TOOL = 'bash';
+const STORE_FILE = 'owner-approve-always.json';
+export class OwnerApprovalRuntime {
+    #store;
+    constructor(workspaceDir) {
+        const root = workspaceDir ? path.resolve(workspaceDir) : workspaceRoot();
+        this.#store = new OwnerApprovalStore(path.join(root, 'data', STORE_FILE));
+    }
+    has(address, toolName) {
+        return toolName === OWNER_APPROVE_ALWAYS_TOOL && this.#store.entry(address)?.bashAlways === true;
+    }
+    setBashAlways(address, value) {
+        this.#store.setBashAlways(address, value);
+    }
+    addBashRule(address, pattern) {
+        return this.#store.addBashRule(address, pattern);
+    }
+    removeBashRule(address, ruleId) {
+        return this.#store.removeBashRule(address, ruleId);
+    }
+    matchesBashBypass(address, commandLine) {
+        const entry = this.#store.entry(address);
+        if (!entry)
+            return false;
+        if (entry.bashAlways)
+            return true;
+        const line = commandLine.trim();
+        if (!line)
+            return false;
+        return entry.bashRules.some((rule) => new RegExp(rule.pattern).test(line));
+    }
+    format(address) {
+        const entry = this.#store.entry(address);
+        const rules = entry?.bashRules ?? [];
+        if (!entry || (!entry.bashAlways && rules.length === 0)) {
+            return 'bash 永久放行: 否\n自定义正则放行: 无';
+        }
+        return [
+            `bash 永久放行: ${entry.bashAlways ? '是' : '否'}`,
+            `自定义正则放行 (${rules.length}):`,
+            ...rules.map((rule) => `  • [${rule.id.slice(0, 8)}] ${rule.pattern}`),
+        ].join('\n');
+    }
+    handleCommand(context, rawText) {
+        const text = rawText.trim();
+        if (!/^\/approve(?:\s|$)/iu.test(text))
+            return null;
+        const address = ownerCommandAddress(context);
+        if (context.scope !== 'private' || !address || context.subjectId !== address.ownerId) {
+            return '⚠️ 仅 Endpoint Owner 可在私聊中使用此指令。需在插件配置中设置 master/owner。';
+        }
+        if (/^\/approve\s+always\s+bash\s*$/iu.test(text)) {
+            this.setBashAlways(address, true);
+            return '✅ 已对 bash 永久放行 Owner 硬确认（本 Bot）。后续 bash 需确认时将不再弹窗。';
+        }
+        const revokeRule = text.match(/^\/approve\s+revoke\s+rule\s+(\S+)\s*$/iu);
+        if (revokeRule) {
+            const result = this.removeBashRule(address, revokeRule[1]);
+            return result.ok ? '✅ 已删除该放行规则。' : `⚠️ ${result.error}`;
+        }
+        const ruleArgument = matchApproveRuleArgument(text);
+        if (ruleArgument !== null) {
+            const result = this.addBashRule(address, ruleArgument.trim());
+            return result.ok
+                ? `✅ 已添加规则 id=${result.id.slice(0, 8)}… ，匹配子命令时将不再要求 Owner 确认（仍受危险命令黑名单等约束）。`
+                : `⚠️ ${result.error}`;
+        }
+        if (/^\/approve\s+list\s*$/iu.test(text))
+            return this.format(address);
+        if (/^\/approve\s+revoke\s*$/iu.test(text)) {
+            if (!this.has(address, OWNER_APPROVE_ALWAYS_TOOL))
+                return '⚠️ 当前未对 bash 设置永久放行。';
+            this.setBashAlways(address, false);
+            return '✅ 已撤销 bash 永久放行（正则规则仍保留，可用 /approve list 查看）。';
+        }
+        return `⚠️ 无法解析指令。\n${usageLines()}`;
+    }
+}
+export function ownerApprovalAddressFromMessage(message) {
+    const platform = String(message.$adapter ?? '').trim();
+    const endpoint = String(message.$endpoint ?? '').trim();
+    const ownerId = String(message.extra?.endpointMaster ?? '').trim();
+    return platform && endpoint && ownerId
+        ? Object.freeze({ platform, endpoint, ownerId })
+        : undefined;
+}
+export function resolveToolRequesterRole(message) {
+    const roles = senderRolesFromMessage(message);
+    if (message.$sender.isMaster !== undefined || message.$sender.isTrusted !== undefined) {
+        if (hasSenderRole(roles, 'master'))
+            return 'master';
+        if (hasSenderRole(roles, 'trusted'))
+            return 'trusted';
+        return 'other';
+    }
+    if (!message.$adapter || !message.$endpoint || !message.$sender?.id)
+        return 'unknown';
+    const address = ownerApprovalAddressFromMessage(message);
+    return address && String(message.$sender.id) === address.ownerId ? 'master' : 'other';
+}
+export const ICQQ_SENSITIVE_SUBCOMMAND_REGEXES = [
+    /\bicqq\s+friend\s+(?:delete|block|move)\b/i,
+    /\bicqq\s+group\s+(?:kick|mute|set|admin|announce|transfer|quit|dissolve|invite)\b/i,
+    /\bicqq\s+(?:request|wallet|pay|recall)\b/i,
+    /\bicqq\s+file\s+(?:upload|delete)\b/i,
+    /\bicqq\s+gfs\b.*\b(?:rm|delete|del)\b/i,
+];
+export function isIcqqSensitiveSubcommand(fullSubCommand) {
+    const line = fullSubCommand.trim();
+    return /^\s*icqq(?:\s|$)/i.test(line)
+        && ICQQ_SENSITIVE_SUBCOMMAND_REGEXES.some((pattern) => pattern.test(line));
+}
+function ownerCommandAddress(context) {
+    if (!context.platform || !context.endpoint || !context.ownerId)
+        return undefined;
+    return Object.freeze({
+        platform: context.platform,
+        endpoint: context.endpoint,
+        ownerId: context.ownerId,
+    });
+}
+function usageLines() {
+    return [
+        '用法（bash / icqq）：',
+        '  /approve always bash     — 永久跳过 bash 的 Owner 硬确认',
+        '  /approve rule <正则>   — 为敏感 icqq 命令增加放行规则（匹配整段子命令）',
+        '  /approve list           — 列出永久放行与规则 id',
+        '  /approve revoke rule <id> — 删除一条规则（id 可用 list 前 8 位）',
+        '  /approve revoke         — 撤销 bash 永久放行（不删规则）',
+    ].join('\n');
+}
+const LINE_TERMINATOR_RE = /[\n\r\u2028\u2029]/u;
+function matchApproveRuleArgument(text) {
+    const head = /^\/approve\s+rule/iu.exec(text);
+    if (!head)
+        return null;
+    const whitespaceStart = head[0].length;
+    let whitespaceEnd = whitespaceStart;
+    while (whitespaceEnd < text.length && /\s/u.test(text[whitespaceEnd]))
+        whitespaceEnd += 1;
+    if (whitespaceEnd === whitespaceStart)
+        return null;
+    const rest = text.slice(whitespaceEnd);
+    if (LINE_TERMINATOR_RE.test(rest))
+        return null;
+    if (rest.length > 0)
+        return rest;
+    if (whitespaceEnd - whitespaceStart >= 2) {
+        const last = text[whitespaceEnd - 1];
+        if (!LINE_TERMINATOR_RE.test(last))
+            return last;
+    }
+    return null;
+}
+//# sourceMappingURL=owner-approval-runtime.js.map

package/lib/security/owner-approval-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-approval-runtime.js","sourceRoot":"","sources":["../../src/security/owner-approval-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAgB,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAI/D,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAe,CAAC;AACzD,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAY/C,MAAM,OAAO,oBAAoB;IACtB,MAAM,CAAqB;IAEpC,YAAY,YAAqB;QAC/B,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,GAAG,CAAC,OAA6B,EAAE,QAAgB;QACjD,OAAO,QAAQ,KAAK,yBAAyB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;IACnG,CAAC;IAED,aAAa,CAAC,OAA6B,EAAE,KAAc;QACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,WAAW,CAAC,OAA6B,EAAE,OAAe;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,cAAc,CAAC,OAA6B,EAAE,MAAc;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,iBAAiB,CAAC,OAA6B,EAAE,WAAmB;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,OAA6B;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,0BAA0B,CAAC;QACpC,CAAC;QACD,OAAO;YACL,cAAc,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YAC5C,YAAY,KAAK,CAAC,MAAM,IAAI;YAC5B,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,aAAa,CAAC,OAAoC,EAAE,OAAe;QACjE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACrF,OAAO,wDAAwD,CAAC;QAClE,CAAC;QAED,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClC,OAAO,oDAAoD,CAAC;QAC9D,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1E,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,EAAE;gBACd,CAAC,CAAC,cAAc,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,wCAAwC;gBAC7E,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEtE,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC;gBAAE,OAAO,sBAAsB,CAAC;YACjF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,+CAA+C,CAAC;QACzD,CAAC;QAED,OAAO,eAAe,UAAU,EAAE,EAAE,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CACnB,OAAoD,CAAC,KAAK,EAAE,cAAc,IAAI,EAAE,CAClF,CAAC,IAAI,EAAE,CAAC;IACT,OAAO,QAAQ,IAAI,QAAQ,IAAI,OAAO;QACpC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtF,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpD,IAAI,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE;QAAE,OAAO,SAAS,CAAC;IACtF,MAAM,OAAO,GAAG,+BAA+B,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAsB;IAClE,4CAA4C;IAC5C,oFAAoF;IACpF,2CAA2C;IAC3C,sCAAsC;IACtC,wCAAwC;CACzC,CAAC;AAEF,MAAM,UAAU,yBAAyB,CAAC,cAAsB;IAC9D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;WAChC,iCAAiC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAoC;IAC/D,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACjF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU;IACjB,OAAO;QACL,kBAAkB;QAClB,oDAAoD;QACpD,qDAAqD;QACrD,0CAA0C;QAC1C,wDAAwD;QACxD,gDAAgD;KACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,aAAa,GAAG,eAAe,CAAC;IACpC,OAAO,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAE,CAAC;QAAE,aAAa,IAAI,CAAC,CAAC;IAC3F,IAAI,aAAa,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,aAAa,GAAG,eAAe,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAE,CAAC;QACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/lib/security/owner-approval-store.d.ts

@@ -0,0 +1,34 @@
+import type { OwnerApprovalAddress } from './owner-approval-contracts.js';
+export interface BashRuleEntry {
+    readonly id: string;
+    readonly pattern: string;
+    readonly createdAt: number;
+}
+export interface BashApprovalEntry {
+    readonly bashAlways?: boolean;
+    readonly bashRules: readonly BashRuleEntry[];
+}
+export declare class OwnerApprovalStore {
+    #private;
+    private readonly filePath;
+    constructor(filePath: string);
+    entry(address: OwnerApprovalAddress): BashApprovalEntry | undefined;
+    setBashAlways(address: OwnerApprovalAddress, value: boolean): void;
+    addBashRule(address: OwnerApprovalAddress, pattern: string): {
+        ok: true;
+        id: string;
+    } | {
+        ok: false;
+        error: string;
+    };
+    removeBashRule(address: OwnerApprovalAddress, ruleId: string): {
+        ok: true;
+    } | {
+        ok: false;
+        error: string;
+    };
+}
+export declare class OwnerApprovalStoreFormatError extends Error {
+    constructor(filePath: string, options?: unknown);
+}
+//# sourceMappingURL=owner-approval-store.d.ts.map

package/lib/security/owner-approval-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-approval-store.d.ts","sourceRoot":"","sources":["../../src/security/owner-approval-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAI1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;CAC9C;AAOD,qBAAa,kBAAkB;;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE7C,KAAK,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,GAAG,SAAS;IAInE,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAgBlE,WAAW,CACT,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,MAAM,GACd;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAyB1D,cAAc,CACZ,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EAAE,MAAM,GACb;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;CAqC/C;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAIhD"}

package/lib/security/owner-approval-store.js

@@ -0,0 +1,154 @@
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+const STORE_VERSION = 2;
+export class OwnerApprovalStore {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    entry(address) {
+        return this.#read().endpoints[addressKey(address)];
+    }
+    setBashAlways(address, value) {
+        const document = this.#read();
+        const key = addressKey(address);
+        const previous = document.endpoints[key] ?? { bashRules: [] };
+        this.#write({
+            version: STORE_VERSION,
+            endpoints: {
+                ...document.endpoints,
+                [key]: {
+                    ...(value ? { bashAlways: true } : {}),
+                    bashRules: [...previous.bashRules],
+                },
+            },
+        });
+    }
+    addBashRule(address, pattern) {
+        const trimmed = pattern.trim();
+        if (!trimmed)
+            return { ok: false, error: '正则不能为空。' };
+        try {
+            new RegExp(trimmed);
+        }
+        catch (error) {
+            return { ok: false, error: `无效正则: ${error instanceof Error ? error.message : String(error)}` };
+        }
+        const document = this.#read();
+        const key = addressKey(address);
+        const previous = document.endpoints[key] ?? { bashRules: [] };
+        const id = crypto.randomUUID();
+        this.#write({
+            version: STORE_VERSION,
+            endpoints: {
+                ...document.endpoints,
+                [key]: {
+                    ...(previous.bashAlways ? { bashAlways: true } : {}),
+                    bashRules: [...previous.bashRules, { id, pattern: trimmed, createdAt: Date.now() }],
+                },
+            },
+        });
+        return { ok: true, id };
+    }
+    removeBashRule(address, ruleId) {
+        const id = ruleId.trim();
+        if (!id)
+            return { ok: false, error: '请提供规则 id。' };
+        const document = this.#read();
+        const key = addressKey(address);
+        const entry = document.endpoints[key];
+        if (!entry?.bashRules.length)
+            return { ok: false, error: '当前无自定义规则。' };
+        const next = entry.bashRules.filter((rule) => rule.id !== id && !rule.id.startsWith(id));
+        if (next.length === entry.bashRules.length) {
+            return { ok: false, error: `未找到 id 前缀或全名为「${id}」的规则。` };
+        }
+        this.#write({
+            version: STORE_VERSION,
+            endpoints: {
+                ...document.endpoints,
+                [key]: { ...entry, bashRules: next },
+            },
+        });
+        return { ok: true };
+    }
+    #read() {
+        try {
+            const source = fs.readFileSync(this.filePath, 'utf-8');
+            return parseDocument(JSON.parse(source));
+        }
+        catch (error) {
+            if (isMissingFileError(error))
+                return emptyDocument();
+            throw new OwnerApprovalStoreFormatError(this.filePath, error);
+        }
+    }
+    #write(document) {
+        fs.mkdirSync(path.dirname(this.filePath), { recursive: true });
+        const temporary = `${this.filePath}.${process.pid}.${crypto.randomUUID()}.tmp`;
+        fs.writeFileSync(temporary, `${JSON.stringify(document, null, 2)}\n`, 'utf-8');
+        fs.renameSync(temporary, this.filePath);
+    }
+}
+export class OwnerApprovalStoreFormatError extends Error {
+    constructor(filePath, options) {
+        super(`Owner approval store is invalid: ${filePath}`, { cause: options });
+        this.name = 'OwnerApprovalStoreFormatError';
+    }
+}
+function addressKey(address) {
+    return `${address.platform}|${address.endpoint}|${address.ownerId}`;
+}
+function emptyDocument() {
+    return { version: STORE_VERSION, endpoints: {} };
+}
+function parseDocument(input) {
+    if (!isRecord(input) || !hasExactKeys(input, ['version', 'endpoints'])) {
+        throw new TypeError('Invalid Owner approval document');
+    }
+    if (input.version !== STORE_VERSION || !isRecord(input.endpoints)) {
+        throw new TypeError('Unsupported Owner approval document version');
+    }
+    const endpoints = {};
+    for (const [key, rawEntry] of Object.entries(input.endpoints)) {
+        if (!isRecord(rawEntry) || !hasExactKeys(rawEntry, ['bashRules'], ['bashAlways'])) {
+            throw new TypeError(`Invalid Owner approval entry: ${key}`);
+        }
+        if (rawEntry.bashAlways !== undefined && rawEntry.bashAlways !== true) {
+            throw new TypeError(`Invalid bashAlways value: ${key}`);
+        }
+        if (!Array.isArray(rawEntry.bashRules)) {
+            throw new TypeError(`Invalid bashRules value: ${key}`);
+        }
+        const bashRules = rawEntry.bashRules.map((rule) => parseRule(key, rule));
+        endpoints[key] = Object.freeze({
+            ...(rawEntry.bashAlways ? { bashAlways: true } : {}),
+            bashRules: Object.freeze(bashRules),
+        });
+    }
+    return Object.freeze({ version: STORE_VERSION, endpoints: Object.freeze(endpoints) });
+}
+function parseRule(endpoint, input) {
+    if (!isRecord(input) || !hasExactKeys(input, ['id', 'pattern', 'createdAt'])) {
+        throw new TypeError(`Invalid Owner approval rule: ${endpoint}`);
+    }
+    if (typeof input.id !== 'string' || typeof input.pattern !== 'string'
+        || typeof input.createdAt !== 'number' || !Number.isFinite(input.createdAt)) {
+        throw new TypeError(`Invalid Owner approval rule fields: ${endpoint}`);
+    }
+    new RegExp(input.pattern);
+    return Object.freeze({ id: input.id, pattern: input.pattern, createdAt: input.createdAt });
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function hasExactKeys(value, required, optional = []) {
+    const keys = Object.keys(value);
+    return required.every((key) => Object.hasOwn(value, key))
+        && keys.every((key) => required.includes(key) || optional.includes(key));
+}
+function isMissingFileError(error) {
+    return error instanceof Error && 'code' in error && error.code === 'ENOENT';
+}
+//# sourceMappingURL=owner-approval-store.js.map

package/lib/security/owner-approval-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-approval-store.js","sourceRoot":"","sources":["../../src/security/owner-approval-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,aAAa,GAAG,CAAU,CAAC;AAkBjC,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,KAAK,CAAC,OAA6B;QACjC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,aAAa,CAAC,OAA6B,EAAE,KAAc;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC;YACV,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE;gBACT,GAAG,QAAQ,CAAC,SAAS;gBACrB,CAAC,GAAG,CAAC,EAAE;oBACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtC,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;iBACnC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CACT,OAA6B,EAC7B,OAAe;QAEf,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACjG,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC;YACV,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE;gBACT,GAAG,QAAQ,CAAC,SAAS;gBACrB,CAAC,GAAG,CAAC,EAAE;oBACL,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;iBACpF;aACF;SACF,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;IAED,cAAc,CACZ,OAA6B,EAC7B,MAAc;QAEd,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC;YACV,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE;gBACT,GAAG,QAAQ,CAAC,SAAS;gBACrB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;aACrC;SACF,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBAAE,OAAO,aAAa,EAAE,CAAC;YACtD,MAAM,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAA+B;QACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC;QAC/E,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/E,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,QAAgB,EAAE,OAAiB;QAC7C,KAAK,CAAC,oCAAoC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,SAAS,UAAU,CAAC,OAA6B;IAC/C,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,GAAsC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,SAAS,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,SAAS,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,SAAS,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;WAChE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CACnB,KAA8B,EAC9B,QAA2B,EAC3B,WAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;WACpD,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC9E,CAAC"}

package/lib/security/policy-facade.d.ts

@@ -1,13 +1,10 @@
 /**
  * 统一工具安全策略门面（policy facade）
  *
- * 背景：builtin 工具曾各自手写策略链且不一致（edit_file 七层、glob/list_dir 两层、
- * analyze_media 三层……），新工具容易漏层，新策略要改所有工具。
- *
  * 本模块把各策略层声明为一张按 priority 排序的策略表，`runToolPolicies` 依序执行，
  * 第一个终结决策（deny 或需 Owner 确认）即短路返回，`decisions` 记录已执行层。
  *
- * 层顺序（以 edit-file-tool 既有链路为基准）：
+ * 层顺序：
  *   role-gate → bash-command-safety → dangerous-tool-approval → bash-sensitive-read
  *   → file-permission-matrix（文件写类 + 显式 read）→ bash-file-permission
  *   → memory-write-path（写类且有 filePath）→ sensitive-path（有 filePath）
@@ -15,14 +12,13 @@
  *   → workspace-access（写类且有 filePath）
  *   → exec-policy（有 command 且给 config）
  *
- * 注意：memory-write-path / blocked-device-path / workspace-access 仅对写操作生效，
- * 这是为了严格保持 read 类工具（glob/list_dir/grep/analyze_media）迁移前的对外行为。
- * bash-tool 旧链不含 exec-policy，因此 bash 调用方不传 config，exec-policy 层不会激活。
+ * memory-write-path / blocked-device-path / workspace-access 仅对写操作生效；
+ * read 类工具由文件权限矩阵和显式 devicePathGuard 约束。
  */
-import type { Message, Plugin } from '@zhin.js/core';
+import type { Message } from '@zhin.js/core';
 import type { ZhinAgentConfig } from '../config/index.js';
 import { type FileOperation } from './file-role-policy.js';
-import { type ToolRequesterRole } from './owner-approve-always-store.js';
+import { type ToolRequesterRole } from './owner-approval-runtime.js';
 import type { ToolNetworkPolicy } from './network-policy-context.js';
 import type { ToolDescriptor } from '@zhin.js/tool';
 import type { TurnIngress } from '../turn/turn-ingress.js';
@@ -36,16 +32,13 @@ export interface ToolPolicyInput {
      * （旧实现中权限矩阵在 expandHome 之前执行，为保持等价单独透传）。
      */
     rawFilePath?: string;
+    /** Workspace root used to resolve and authorize relative file paths. */
+    workspaceDir?: string;
     /** 覆盖从 toolName 推导的文件操作类型（edit_file→update，write_file→create） */
     fileOperation?: FileOperation;
     /** bash 命令（exec-policy 与 bash 三层用） */
     command?: string;
-    /** bash-file-permission 层解析角色用的宿主插件（与 bash-tool 构造注入一致） */
-    hostPlugin?: Plugin;
-    /**
-     * 读类工具显式启用 blocked-device-path 层（仅 read_file；
-     * analyze_media 不启用以保持旧行为；拒绝文案也用读类措辞）。
-     */
+    /** 读类工具显式启用 blocked-device-path 层。 */
     devicePathGuard?: boolean;
     commMessage?: Message;
     /** exec policy 用配置 */

package/lib/security/policy-facade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-facade.d.ts","sourceRoot":"","sources":["../../src/security/policy-facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAQ1D,OAAO,EAKL,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAOnG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAK3D,MAAM,WAAW,eAAe;IAC9B,wFAAwF;IACxF,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sBAAsB;IACtB,MAAM,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnC,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,kFAAkF;IAClF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB;IAChB,SAAS,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,sBAAsB,GAC9B,QAAQ,CAAC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC,GACzE,QAAQ,CAAC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9D,QAAQ,CAAC;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC,CAAC;AAExH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAiHrG;AAmHD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,qBAAqB,CAAC,GAAG,kBAAkB,CAAC;CAChG;AAmND;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAWxE;AAID;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,SAAK,GAAG,MAAM,GAAG,IAAI,CA4BhG"}
+{"version":3,"file":"policy-facade.d.ts","sourceRoot":"","sources":["../../src/security/policy-facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAQ1D,OAAO,EAKL,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAM/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAK3D,MAAM,WAAW,eAAe;IAC9B,wFAAwF;IACxF,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sBAAsB;IACtB,MAAM,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnC,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,kFAAkF;IAClF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB;IAChB,SAAS,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,sBAAsB,GAC9B,QAAQ,CAAC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC,GACzE,QAAQ,CAAC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9D,QAAQ,CAAC;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC,CAAC;AAExH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAgHrG;AAiHD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,qBAAqB,CAAC,GAAG,kBAAkB,CAAC;CAChG;AAyND;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAWxE;AAID;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,SAAK,GAAG,MAAM,GAAG,IAAI,CA4BhG"}