@zhin.js/agent 1.1.3 → 1.1.6

package/lib/init/register-home-tools.js

@@ -1,51 +0,0 @@
-/**
- * 注册 home_* 工具（assistant.home.enabled 时）
- */
-import { formatCompact, getPlugin } from '@zhin.js/core';
-import { resolveAssistantHomeConfig, isAssistantHomeActive } from '../assistant/home-config.js';
-import { HomeAssistantService } from '../assistant/domains/home-assistant.js';
-import { createHomeTools } from '../assistant/home-tools.js';
-import { mergeProfileDeviceAliases, loadAssistantProfileFile } from '../assistant/profile-loader.js';
-import { validateHomeMcpServer } from '../assistant/home-mcp-bridge.js';
-export function registerHomeTools() {
-    const plugin = getPlugin();
-    const { useContext, root, logger } = plugin;
-    useContext('ai', 'tool', (_ai, toolService) => {
-        if (!toolService)
-            return;
-        void (async () => {
-            const configService = root.inject('config');
-            const appConfig = (configService?.primaryFile
-                ? configService.getRaw(configService.primaryFile)
-                : configService?.getPrimary())
-                ?? {};
-            const homeRaw = appConfig.assistant?.home;
-            if (!isAssistantHomeActive(homeRaw))
-                return;
-            const profile = await loadAssistantProfileFile(process.cwd(), appConfig.assistant?.profile);
-            const homeCfg = resolveAssistantHomeConfig({
-                ...homeRaw,
-                aliases: mergeProfileDeviceAliases(profile, homeRaw?.aliases),
-            });
-            const mcpWarn = validateHomeMcpServer(homeCfg, appConfig.ai);
-            if (mcpWarn)
-                logger.warn(formatCompact({ assistant_home_mcp: mcpWarn }));
-            const service = new HomeAssistantService(homeCfg);
-            const tools = createHomeTools({ service, policy: homeCfg.policy });
-            const disposers = [];
-            for (const tool of tools) {
-                disposers.push(toolService.addTool(tool.toTool(), root.name));
-            }
-            logger.info(formatCompact({
-                assistant_home: true,
-                aliases: Object.keys(homeCfg.aliases ?? {}).length,
-                mcpServer: homeCfg.mcpServer,
-            }));
-            plugin.on('dispose', () => {
-                for (const d of disposers)
-                    d();
-            });
-        })();
-    });
-}
-//# sourceMappingURL=register-home-tools.js.map

package/lib/init/register-home-tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"register-home-tools.js","sourceRoot":"","sources":["../../src/init/register-home-tools.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAIxE,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE5C,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE;QAC5C,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,WAAW;gBAC3C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAiD,aAAa,CAAC,WAAW,CAAC;gBACjG,CAAC,CAAC,aAAa,EAAE,UAAU,EAAkD,CAAC;mBAC3E,EAAE,CAAC;YACR,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC;YAC1C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;gBAAE,OAAO;YAE5C,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,0BAA0B,CAAC;gBACzC,GAAG,OAAO;gBACV,OAAO,EAAE,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,OAAO;gBAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAEzE,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,MAAM,SAAS,GAAmB,EAAE,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;gBACxB,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM;gBAClD,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC,CAAC;YAEJ,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACxB,KAAK,MAAM,CAAC,IAAI,SAAS;oBAAE,CAAC,EAAE,CAAC;YACjC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC"}

package/lib/init/register-owner-approve-commands.d.ts

@@ -1,10 +0,0 @@
-/**
- * Owner 私聊 `/approve` —— **legacy MessageCommand 路径已移除**。
- *
- * Plugin Runtime 命令面：`handleRuntimeOwnerApproveCommand`
- *（`basic/cli` Agent Host 在入站拦截）。勿再 `new MessageCommand('/approve…')`。
- *
- * @deprecated 保留空壳以免旧调用方炸；下一个 minor 可删除本文件与 `initAgentModule` 引用。
- */
-export declare function registerOwnerApproveCommands(): void;
-//# sourceMappingURL=register-owner-approve-commands.d.ts.map

package/lib/init/register-owner-approve-commands.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"register-owner-approve-commands.d.ts","sourceRoot":"","sources":["../../src/init/register-owner-approve-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/lib/init/register-owner-approve-commands.js

@@ -1,12 +0,0 @@
-/**
- * Owner 私聊 `/approve` —— **legacy MessageCommand 路径已移除**。
- *
- * Plugin Runtime 命令面：`handleRuntimeOwnerApproveCommand`
- *（`basic/cli` Agent Host 在入站拦截）。勿再 `new MessageCommand('/approve…')`。
- *
- * @deprecated 保留空壳以免旧调用方炸；下一个 minor 可删除本文件与 `initAgentModule` 引用。
- */
-export function registerOwnerApproveCommands() {
-    // no-op：Runtime 路径由 handleRuntimeOwnerApproveCommand 承接
-}
-//# sourceMappingURL=register-owner-approve-commands.js.map

package/lib/init/register-owner-approve-commands.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"register-owner-approve-commands.js","sourceRoot":"","sources":["../../src/init/register-owner-approve-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B;IAC1C,wDAAwD;AAC1D,CAAC"}

package/lib/media/constants.d.ts

@@ -1,3 +0,0 @@
-/** Message.extra：入站预处理后保留的 vision ContentPart（image_url 等） */
-export declare const INBOUND_MEDIA_PARTS_EXTRA_KEY = "zhin.inboundMediaParts";
-//# sourceMappingURL=constants.d.ts.map

package/lib/media/constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/media/constants.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,eAAO,MAAM,6BAA6B,2BAA2B,CAAC"}

package/lib/media/constants.js

@@ -1,3 +0,0 @@
-/** Message.extra：入站预处理后保留的 vision ContentPart（image_url 等） */
-export const INBOUND_MEDIA_PARTS_EXTRA_KEY = 'zhin.inboundMediaParts';
-//# sourceMappingURL=constants.js.map

package/lib/media/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/media/constants.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC"}

package/lib/orchestrator/owner-confirm-orchestration.d.ts

@@ -1,39 +0,0 @@
-/**
- * Owner 确认信号（ZHIN_NEEDS_OWNER）与白名单硬编排（GitHub #398）
- *
- * 阶段 A：工具结果首行 `ZHIN_NEEDS_OWNER:` 为权威信号。
- * 阶段 B：白名单工具 + 信号 + 非子 Agent 时由本模块同步调用 ask_user(type=confirm)。
- */
-import { type Plugin, type Message } from '@zhin.js/core';
-import type { ToolResultTransform } from '@zhin.js/ai';
-/** 工具结果第一行须与此完全一致（行首无空白） */
-export declare const ZHIN_NEEDS_OWNER_FIRST_LINE: "ZHIN_NEEDS_OWNER:";
-export { OWNER_HARD_ORCHESTRATION_TOOLS } from './owner-orchestration-constants.js';
-export interface OwnerOrchestrationOptions {
-    commMessage: Message;
-    /**
-     * 子 Agent / Worker 内为 true：不自动 ask_user（阶段 B）。
-     * 须配合 {@link runWithDirectAgentExecution}，否则 bash 仍可能只返回 `ZHIN_NEEDS_OWNER` 而不执行。
-     */
-    disableHardOrchestration?: boolean;
-    /** 每根任务自动 ask_user 上限，默认 3 */
-    maxAutoOwnerAsk?: number;
-    /**
-     * 当前 Endpoint 插件实例。生产路径由 {@link ZhinAgent} / agent-loop 传入，或读取 {@link getHostRootPlugin}。
-     * 单测注入桩对象，避免依赖对 `@zhin.js/core` 的全局 mock（与 Vitest 模块缓存冲突）。
-     */
-    plugin?: Plugin;
-}
-/**
- * 解析权威首行；正文为第二行起（可含多行）。
- */
-export declare function parseNeedsOwnerSignal(result: string): {
-    hasSignal: boolean;
-    body: string;
-};
-export declare function shouldHardOrchestrateOwnerConfirm(toolName: string, result: string): boolean;
-/**
- * 为单次 Agent.run 创建工具结果变换：在写入对话前可能插入 Owner confirm 结果。
- */
-export declare function createOwnerOrchestratedToolResultTransform(options: OwnerOrchestrationOptions): ToolResultTransform;
-//# sourceMappingURL=owner-confirm-orchestration.d.ts.map

package/lib/orchestrator/owner-confirm-orchestration.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner-confirm-orchestration.d.ts","sourceRoot":"","sources":["../../src/orchestrator/owner-confirm-orchestration.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAqB,KAAK,MAAM,EAAE,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAQvD,4BAA4B;AAC5B,eAAO,MAAM,2BAA2B,EAAG,mBAA4B,CAAC;AAExE,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AAMpF,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,8BAA8B;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAQ1F;AAED,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG3F;AAqBD;;GAEG;AACH,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,yBAAyB,GACjC,mBAAmB,CAgDrB"}

package/lib/orchestrator/owner-confirm-orchestration.js

@@ -1,92 +0,0 @@
-/**
- * Owner 确认信号（ZHIN_NEEDS_OWNER）与白名单硬编排（GitHub #398）
- *
- * 阶段 A：工具结果首行 `ZHIN_NEEDS_OWNER:` 为权威信号。
- * 阶段 B：白名单工具 + 信号 + 非子 Agent 时由本模块同步调用 ask_user(type=confirm)。
- */
-import { getHostRootPlugin } from '@zhin.js/core';
-import { AskUserBuiltinTool } from '../builtin/ask-user-tool.js';
-import { clearPendingOrchestrationTool, hasOwnerApproveAlways, setPendingOrchestrationTool, } from '../security/owner-approve-always-store.js';
-import { OWNER_HARD_ORCHESTRATION_TOOLS } from './owner-orchestration-constants.js';
-/** 工具结果第一行须与此完全一致（行首无空白） */
-export const ZHIN_NEEDS_OWNER_FIRST_LINE = 'ZHIN_NEEDS_OWNER:';
-export { OWNER_HARD_ORCHESTRATION_TOOLS } from './owner-orchestration-constants.js';
-const WHITELIST = new Set(OWNER_HARD_ORCHESTRATION_TOOLS);
-const DEFAULT_MAX_AUTO_ASK = 3;
-/**
- * 解析权威首行；正文为第二行起（可含多行）。
- */
-export function parseNeedsOwnerSignal(result) {
-    const lines = result.split(/\r?\n/);
-    const first = lines[0] ?? '';
-    if (first !== ZHIN_NEEDS_OWNER_FIRST_LINE) {
-        return { hasSignal: false, body: result };
-    }
-    const body = lines.slice(1).join('\n').replace(/^\n+/, '');
-    return { hasSignal: true, body };
-}
-export function shouldHardOrchestrateOwnerConfirm(toolName, result) {
-    if (!WHITELIST.has(toolName))
-        return false;
-    return parseNeedsOwnerSignal(result).hasSignal;
-}
-function appendOrchestratedOwnerAnswer(originalToolText, ownerAnswer) {
-    return `${originalToolText.trimEnd()}\n\n---\n[Owner confirmation (orchestrated)]\n${ownerAnswer}`;
-}
-function appendUnavailableNote(originalToolText, note) {
-    return `${originalToolText.trimEnd()}\n\n---\n⚠️ 无法自动收集 Owner 在线确认：${note}\n请 Endpoint Owner 配置 owner 与私聊通道，或由助手向用户说明下一步。`;
-}
-function appendLimitNote(originalToolText, maxAsk) {
-    return `${originalToolText.trimEnd()}\n\n---\n⚠️ 本会话自动 Owner 确认次数已达上限（${maxAsk} 次），不再自动弹窗。\n权威行 ${ZHIN_NEEDS_OWNER_FIRST_LINE} 仍然有效，请用文字向用户或 Owner 说明结果与风险。`;
-}
-function buildConfirmQuestion(toolName, body) {
-    const trimmed = body.trim() || '（无补充说明）';
-    const cap = 2000;
-    const detail = trimmed.length > cap ? `${trimmed.slice(0, cap)}\n…(truncated)` : trimmed;
-    return `工具「${toolName}」需要 Owner 确认是否继续：\n\n${detail}`;
-}
-/**
- * 为单次 Agent.run 创建工具结果变换：在写入对话前可能插入 Owner confirm 结果。
- */
-export function createOwnerOrchestratedToolResultTransform(options) {
-    const maxAsk = options.maxAutoOwnerAsk ?? DEFAULT_MAX_AUTO_ASK;
-    let usedOrchestrationSlots = 0;
-    return async (input) => {
-        const { toolName, result } = input;
-        if (!shouldHardOrchestrateOwnerConfirm(toolName, result))
-            return result;
-        if (options.disableHardOrchestration)
-            return result;
-        if (usedOrchestrationSlots >= maxAsk) {
-            return appendLimitNote(result, maxAsk);
-        }
-        const plugin = options.plugin ?? getHostRootPlugin() ?? undefined;
-        if (!plugin) {
-            return appendUnavailableNote(result, 'Host root plugin not registered');
-        }
-        const askTool = new AskUserBuiltinTool(plugin);
-        const { body } = parseNeedsOwnerSignal(result);
-        const question = buildConfirmQuestion(toolName, body);
-        if (toolName === 'bash' && hasOwnerApproveAlways(plugin, options.commMessage, toolName)) {
-            return appendOrchestratedOwnerAnswer(result, 'yes');
-        }
-        if (toolName === 'bash') {
-            setPendingOrchestrationTool(plugin, options.commMessage, toolName);
-        }
-        try {
-            const ownerRaw = await askTool.run({ question, type: 'confirm', timeout: 120, sensitive: true }, options.commMessage);
-            const ownerStr = typeof ownerRaw === 'string' ? ownerRaw : String(ownerRaw);
-            if (ownerStr.startsWith('Error:')) {
-                return appendUnavailableNote(result, ownerStr);
-            }
-            usedOrchestrationSlots++;
-            return appendOrchestratedOwnerAnswer(result, ownerStr.trim());
-        }
-        finally {
-            if (toolName === 'bash') {
-                clearPendingOrchestrationTool(plugin, options.commMessage);
-            }
-        }
-    };
-}
-//# sourceMappingURL=owner-confirm-orchestration.js.map

package/lib/orchestrator/owner-confirm-orchestration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner-confirm-orchestration.js","sourceRoot":"","sources":["../../src/orchestrator/owner-confirm-orchestration.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAA6B,MAAM,eAAe,CAAC;AAE7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,4BAA4B;AAC5B,MAAM,CAAC,MAAM,2BAA2B,GAAG,mBAA4B,CAAC;AAExE,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AAEpF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,8BAA8B,CAAC,CAAC;AAElE,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAkB/B;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,KAAK,KAAK,2BAA2B,EAAE,CAAC;QAC1C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB,EAAE,MAAc;IAChF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,6BAA6B,CAAC,gBAAwB,EAAE,WAAmB;IAClF,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,iDAAiD,WAAW,EAAE,CAAC;AACrG,CAAC;AAED,SAAS,qBAAqB,CAAC,gBAAwB,EAAE,IAAY;IACnE,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,iCAAiC,IAAI,iDAAiD,CAAC;AAC7H,CAAC;AAED,SAAS,eAAe,CAAC,gBAAwB,EAAE,MAAc;IAC/D,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,oCAAoC,MAAM,oBAAoB,2BAA2B,+BAA+B,CAAC;AAC/J,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,IAAY;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC;IACjB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;IACzF,OAAO,MAAM,QAAQ,wBAAwB,MAAM,EAAE,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0CAA0C,CACxD,OAAkC;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,IAAI,oBAAoB,CAAC;IAC/D,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAE/B,OAAO,KAAK,EAAE,KAAK,EAAmB,EAAE;QACtC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACnC,IAAI,CAAC,iCAAiC,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACxE,IAAI,OAAO,CAAC,wBAAwB;YAAE,OAAO,MAAM,CAAC;QAEpD,IAAI,sBAAsB,IAAI,MAAM,EAAE,CAAC;YACrC,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,MAAM,GAAuB,OAAO,CAAC,MAAM,IAAI,iBAAiB,EAAE,IAAI,SAAS,CAAC;QACtF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,qBAAqB,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEtD,IAAI,QAAQ,KAAK,MAAM,IAAI,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxF,OAAO,6BAA6B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,EAC5D,OAAO,CAAC,WAAW,CACpB,CAAC;YACF,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE5E,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACjD,CAAC;YAED,sBAAsB,EAAE,CAAC;YACzB,OAAO,6BAA6B,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/lib/orchestrator/owner-orchestration-constants.d.ts

@@ -1,6 +0,0 @@
-/**
- * Owner 硬编排（ZHIN_NEEDS_OWNER → ask_user）涉及的工具白名单。
- */
-export declare const OWNER_HARD_ORCHESTRATION_TOOLS: readonly ["bash", "write_file", "edit_file", "web_fetch"];
-export type OwnerHardOrchestrationTool = (typeof OWNER_HARD_ORCHESTRATION_TOOLS)[number];
-//# sourceMappingURL=owner-orchestration-constants.d.ts.map

package/lib/orchestrator/owner-orchestration-constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner-orchestration-constants.d.ts","sourceRoot":"","sources":["../../src/orchestrator/owner-orchestration-constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,8BAA8B,2DAKjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/lib/orchestrator/owner-orchestration-constants.js

@@ -1,10 +0,0 @@
-/**
- * Owner 硬编排（ZHIN_NEEDS_OWNER → ask_user）涉及的工具白名单。
- */
-export const OWNER_HARD_ORCHESTRATION_TOOLS = [
-    'bash',
-    'write_file',
-    'edit_file',
-    'web_fetch',
-];
-//# sourceMappingURL=owner-orchestration-constants.js.map

package/lib/orchestrator/owner-orchestration-constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner-orchestration-constants.js","sourceRoot":"","sources":["../../src/orchestrator/owner-orchestration-constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,MAAM;IACN,YAAY;IACZ,WAAW;IACX,WAAW;CACH,CAAC"}

package/lib/security/dangerous-tool-policy-hook.d.ts

@@ -1,6 +0,0 @@
-/**
- * Dangerous-tool-policy PreToolUse hook — wraps role-based dangerous tool checks.
- */
-import type { PreToolUseHook } from '../orchestrator/types.js';
-export declare function createDangerousToolPolicyHook(): PreToolUseHook;
-//# sourceMappingURL=dangerous-tool-policy-hook.d.ts.map

package/lib/security/dangerous-tool-policy-hook.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dangerous-tool-policy-hook.d.ts","sourceRoot":"","sources":["../../src/security/dangerous-tool-policy-hook.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,cAAc,EAAqC,MAAM,0BAA0B,CAAC;AAmBlG,wBAAgB,6BAA6B,IAAI,cAAc,CAsC9D"}

package/lib/security/dangerous-tool-policy-hook.js

@@ -1,41 +0,0 @@
-import { checkDangerousToolAccess, checkFileToolAccess, checkSensitiveFilePathAccess, } from './dangerous-tool-policy.js';
-const DANGEROUS_WRITE_TOOLS = new Set(['write_file', 'edit_file', 'web_fetch']);
-const FILE_TOOLS_WITH_PATH = new Set(['read_file', 'write_file', 'edit_file', 'list_dir', 'glob', 'grep']);
-function extractFilePath(toolInput) {
-    const candidates = ['path', 'filePath', 'file_path', 'file'];
-    for (const key of candidates) {
-        if (typeof toolInput[key] === 'string')
-            return toolInput[key];
-    }
-    return undefined;
-}
-export function createDangerousToolPolicyHook() {
-    return {
-        name: 'security:dangerous-tool-policy',
-        type: 'preToolUse',
-        priority: 800,
-        handler: (event) => {
-            if (DANGEROUS_WRITE_TOOLS.has(event.toolName)) {
-                const decision = checkDangerousToolAccess(event.toolName, event.commMessage);
-                if (!decision.allowed) {
-                    return { decision: 'deny', reason: decision.reason ?? 'access denied' };
-                }
-            }
-            if (FILE_TOOLS_WITH_PATH.has(event.toolName)) {
-                const roleCheck = checkFileToolAccess(event.toolName, event.commMessage);
-                if (!roleCheck.allowed) {
-                    return { decision: 'deny', reason: roleCheck.reason ?? 'file tool access denied' };
-                }
-                const filePath = extractFilePath(event.toolInput);
-                if (filePath) {
-                    const pathCheck = checkSensitiveFilePathAccess(event.toolName, filePath, event.commMessage);
-                    if (!pathCheck.allowed) {
-                        return { decision: 'deny', reason: pathCheck.reason ?? 'sensitive path access denied' };
-                    }
-                }
-            }
-            return { decision: 'skip' };
-        },
-    };
-}
-//# sourceMappingURL=dangerous-tool-policy-hook.js.map

package/lib/security/dangerous-tool-policy-hook.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dangerous-tool-policy-hook.js","sourceRoot":"","sources":["../../src/security/dangerous-tool-policy-hook.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,4BAA4B,GAE7B,MAAM,4BAA4B,CAAC;AAEpC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAChF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3G,SAAS,eAAe,CAAC,SAAkC;IACzD,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,GAAG,CAAW,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,CAAC,KAAsB,EAAoB,EAAE;YACpD,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,wBAAwB,CACvC,KAAK,CAAC,QAAoD,EAC1D,KAAK,CAAC,WAAW,CAClB,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;gBAC1E,CAAC;YACH,CAAC;YAED,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAwB,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;gBACzF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;oBACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,yBAAyB,EAAE,CAAC;gBACrF,CAAC;gBAED,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAClD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,SAAS,GAAG,4BAA4B,CAC5C,KAAK,CAAC,QAAwB,EAC9B,QAAQ,EACR,KAAK,CAAC,WAAW,CAClB,CAAC;oBACF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;wBACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,8BAA8B,EAAE,CAAC;oBAC1F,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/security/exec-policy-hook.d.ts

@@ -1,7 +0,0 @@
-/**
- * Exec-policy PreToolUse hook — wraps checkExecPolicy for the unified hook chain.
- */
-import type { PreToolUseHook } from '../orchestrator/types.js';
-import type { ZhinAgentConfig } from '../config/index.js';
-export declare function createExecPolicyHook(config: Required<ZhinAgentConfig>): PreToolUseHook;
-//# sourceMappingURL=exec-policy-hook.d.ts.map

package/lib/security/exec-policy-hook.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"exec-policy-hook.d.ts","sourceRoot":"","sources":["../../src/security/exec-policy-hook.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,cAAc,EAAqC,MAAM,0BAA0B,CAAC;AAClG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,cAAc,CA4BtF"}

package/lib/security/exec-policy-hook.js

@@ -1,29 +0,0 @@
-import { checkExecPolicyWithOptions } from './exec-policy.js';
-export function createExecPolicyHook(config) {
-    return {
-        name: 'security:exec-policy',
-        type: 'preToolUse',
-        priority: 1000,
-        handler: (event) => {
-            if (event.toolName !== 'bash')
-                return { decision: 'skip' };
-            const command = event.toolInput.command != null ? String(event.toolInput.command) : '';
-            const result = checkExecPolicyWithOptions(config, command);
-            if (!result.allowed) {
-                if (result.needsApproval) {
-                    return {
-                        decision: 'modify',
-                        modifiedInput: {
-                            ...event.toolInput,
-                            __needsApproval: true,
-                            __approvalReason: result.reason,
-                        },
-                    };
-                }
-                return { decision: 'deny', reason: result.reason ?? 'exec policy denied' };
-            }
-            return { decision: 'allow' };
-        },
-    };
-}
-//# sourceMappingURL=exec-policy-hook.js.map

package/lib/security/exec-policy-hook.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exec-policy-hook.js","sourceRoot":"","sources":["../../src/security/exec-policy-hook.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,UAAU,oBAAoB,CAAC,MAAiC;IACpE,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,CAAC,KAAsB,EAAoB,EAAE;YACpD,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;gBAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAE3D,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,OAAO;wBACL,QAAQ,EAAE,QAAQ;wBAClB,aAAa,EAAE;4BACb,GAAG,KAAK,CAAC,SAAS;4BAClB,eAAe,EAAE,IAAI;4BACrB,gBAAgB,EAAE,MAAM,CAAC,MAAM;yBAChC;qBACF,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC7E,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/security/file-policy-hook.d.ts

@@ -1,6 +0,0 @@
-/**
- * File-policy PreToolUse hook — wraps checkFileAccess for the unified hook chain.
- */
-import type { PreToolUseHook } from '../orchestrator/types.js';
-export declare function createFilePolicyHook(): PreToolUseHook;
-//# sourceMappingURL=file-policy-hook.d.ts.map

package/lib/security/file-policy-hook.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-policy-hook.d.ts","sourceRoot":"","sources":["../../src/security/file-policy-hook.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,cAAc,EAAqC,MAAM,0BAA0B,CAAC;AAalG,wBAAgB,oBAAoB,IAAI,cAAc,CAmBrD"}

package/lib/security/file-policy-hook.js

@@ -1,30 +0,0 @@
-import { checkFileAccess } from './file-policy.js';
-const FILE_TOOLS = new Set(['read_file', 'write_file', 'edit_file', 'list_dir']);
-function extractFilePath(toolInput) {
-    const candidates = ['path', 'filePath', 'file_path', 'file'];
-    for (const key of candidates) {
-        if (typeof toolInput[key] === 'string')
-            return toolInput[key];
-    }
-    return undefined;
-}
-export function createFilePolicyHook() {
-    return {
-        name: 'security:file-policy',
-        type: 'preToolUse',
-        priority: 900,
-        handler: (event) => {
-            if (!FILE_TOOLS.has(event.toolName))
-                return { decision: 'skip' };
-            const filePath = extractFilePath(event.toolInput);
-            if (!filePath)
-                return { decision: 'skip' };
-            const result = checkFileAccess(filePath);
-            if (!result.allowed) {
-                return { decision: 'deny', reason: result.reason ?? 'file access denied' };
-            }
-            return { decision: 'allow' };
-        },
-    };
-}
-//# sourceMappingURL=file-policy-hook.js.map

package/lib/security/file-policy-hook.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-policy-hook.js","sourceRoot":"","sources":["../../src/security/file-policy-hook.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAEjF,SAAS,eAAe,CAAC,SAAkC;IACzD,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,GAAG,CAAW,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,CAAC,KAAsB,EAAoB,EAAE;YACpD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAEjE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAE3C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC7E,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/security/sandbox-enhanced.d.ts

@@ -1,173 +0,0 @@
-/**
- * 增强的沙箱环境
- *
- * 提供更细粒度的安全控制：
- * - 文件系统访问控制（白名单/黑名单）
- * - 网络隔离
- * - 资源监控
- * - 配置热更新
- */
-export interface EnhancedSandboxConfig {
-    /** 是否启用沙箱 */
-    enabled: boolean;
-    /** 工作目录限制 */
-    workingDirectory?: string;
-    /** 最大执行时间（毫秒） */
-    timeout?: number;
-    /** 最大内存使用（MB） */
-    maxMemoryMB?: number;
-    /** 最大 CPU 使用率（百分比） */
-    maxCpuPercent?: number;
-    /** 最大输出大小（字节） */
-    maxOutputSize?: number;
-    /** 允许的环境变量 */
-    allowedEnvVars?: string[];
-    /** 禁止的环境变量 */
-    blockedEnvVars?: string[];
-    /** 是否保留 HOME 目录 */
-    preserveHome?: boolean;
-    /** 是否保留 PATH */
-    preservePath?: boolean;
-    /** 额外的环境变量 */
-    extraEnvVars?: Record<string, string>;
-    /** 是否启用网络（默认 false） */
-    enableNetwork?: boolean;
-    /** 允许的域名（如果启用网络） */
-    allowedDomains?: string[];
-    /** 文件系统访问控制 */
-    fileSystem?: {
-        /** 允许访问的路径白名单 */
-        allowedPaths?: string[];
-        /** 禁止访问的路径黑名单 */
-        blockedPaths?: string[];
-        /** 允许访问的文件扩展名 */
-        allowedExtensions?: string[];
-        /** 禁止访问的文件扩展名 */
-        blockedExtensions?: string[];
-        /** 是否允许创建临时文件 */
-        allowTempFiles?: boolean;
-        /** 是否允许删除文件 */
-        allowDelete?: boolean;
-    };
-    /** 资源监控配置 */
-    monitoring?: {
-        /** 是否启用资源监控 */
-        enabled?: boolean;
-        /** 监控间隔（毫秒） */
-        interval?: number;
-        /** 是否记录资源使用 */
-        logUsage?: boolean;
-        /** 资源使用阈值 */
-        thresholds?: {
-            /** CPU 使用率阈值（百分比） */
-            cpuPercent?: number;
-            /** 内存使用阈值（MB） */
-            memoryMB?: number;
-            /** 执行时间阈值（毫秒） */
-            executionTime?: number;
-        };
-    };
-}
-export interface ResourceUsage {
-    /** CPU 使用时间（毫秒） */
-    cpuTime: number;
-    /** 内存使用（字节） */
-    memoryUsage: number;
-    /** 峰值内存使用（字节） */
-    peakMemoryUsage: number;
-    /** 执行时间（毫秒） */
-    executionTime: number;
-    /** I/O 读取字节数 */
-    ioRead: number;
-    /** I/O 写入字节数 */
-    ioWrite: number;
-}
-export interface EnhancedSandboxResult {
-    /** 是否成功 */
-    success: boolean;
-    /** 标准输出 */
-    stdout: string;
-    /** 标准错误 */
-    stderr: string;
-    /** 退出码 */
-    exitCode: number | null;
-    /** 执行时间（毫秒） */
-    duration: number;
-    /** 是否超时 */
-    timedOut: boolean;
-    /** 是否被沙箱阻止 */
-    blocked: boolean;
-    /** 阻止原因 */
-    blockReason?: string;
-    /** 资源使用情况 */
-    resourceUsage?: ResourceUsage;
-    /** 资源使用警告 */
-    warnings?: string[];
-}
-export declare class EnhancedSandbox {
-    private config;
-    private configListeners;
-    constructor(config?: Partial<EnhancedSandboxConfig>);
-    /**
-     * 在沙箱中执行命令
-     */
-    execute(command: string, options?: {
-        cwd?: string;
-        env?: Record<string, string>;
-        timeout?: number;
-    }): Promise<EnhancedSandboxResult>;
-    /**
-     * 不安全的命令执行
-     */
-    private executeUnsafe;
-    /**
-     * 更新配置（热更新）
-     */
-    updateConfig(config: Partial<EnhancedSandboxConfig>): void;
-    /**
-     * 获取配置
-     */
-    getConfig(): EnhancedSandboxConfig;
-    /**
-     * 添加配置变更监听器
-     */
-    onConfigChange(listener: (config: EnhancedSandboxConfig) => void): () => void;
-    /**
-     * 通知配置变更监听器
-     */
-    private notifyConfigListeners;
-    /**
-     * 检查文件访问权限
-     */
-    checkFileAccess(filePath: string): {
-        allowed: boolean;
-        reason?: string;
-    };
-    /**
-     * 检查命令安全性
-     */
-    checkCommandSafety(command: string): {
-        safe: boolean;
-        reason?: string;
-    };
-    dispose(): void;
-}
-/**
- * 获取全局增强沙箱实例
- */
-export declare function getEnhancedSandbox(): EnhancedSandbox;
-/**
- * 初始化增强沙箱
- */
-export declare function initEnhancedSandbox(config: Partial<EnhancedSandboxConfig>): EnhancedSandbox;
-/** 重置全局增强沙箱（用于测试隔离） */
-export declare function resetEnhancedSandbox(): void;
-/**
- * 在增强沙箱中执行命令
- */
-export declare function executeInEnhancedSandbox(command: string, options?: {
-    cwd?: string;
-    env?: Record<string, string>;
-    timeout?: number;
-}): Promise<EnhancedSandboxResult>;
-//# sourceMappingURL=sandbox-enhanced.d.ts.map

package/lib/security/sandbox-enhanced.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox-enhanced.d.ts","sourceRoot":"","sources":["../../src/security/sandbox-enhanced.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,MAAM,WAAW,qBAAqB;IACpC,aAAa;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc;IACd,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc;IACd,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,mBAAmB;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc;IACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,uBAAuB;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe;IACf,UAAU,CAAC,EAAE;QACX,iBAAiB;QACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,iBAAiB;QACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,iBAAiB;QACjB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,iBAAiB;QACjB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,iBAAiB;QACjB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,eAAe;QACf,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,aAAa;IACb,UAAU,CAAC,EAAE;QACX,eAAe;QACf,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,eAAe;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,aAAa;QACb,UAAU,CAAC,EAAE;YACX,qBAAqB;YACrB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,iBAAiB;YACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,iBAAiB;YACjB,aAAa,CAAC,EAAE,MAAM,CAAC;SACxB,CAAC;KACH,CAAC;CACH;AAmED,MAAM,WAAW,aAAa;IAC5B,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,qBAAqB;IACpC,WAAW;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW;IACX,MAAM,EAAE,MAAM,CAAC;IACf,WAAW;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU;IACV,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa;IACb,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,aAAa;IACb,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAgYD,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,eAAe,CAAsD;gBAEjE,MAAM,GAAE,OAAO,CAAC,qBAAqB,CAAM;IAIvD;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QACvC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA+HlC;;OAEG;YACW,aAAa;IA4E3B;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,IAAI;IAK1D;;OAEG;IACH,SAAS,IAAI,qBAAqB;IAIlC;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,GAAG,MAAM,IAAI;IAU7E;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAU7B;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAIxE;;OAEG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAQvE,OAAO,IAAI,IAAI;CAGhB;AAMD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,CAKpD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,eAAe,CAG3F;AAED,uBAAuB;AACvB,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IACR,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,qBAAqB,CAAC,CAEhC"}