@zooique/memora 0.1.0

package/dist/persona/types.js

@@ -0,0 +1,5 @@
+/**
+ * 角色模块类型定义
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/persona/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/persona/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/security/pathGuard.d.ts

@@ -0,0 +1,121 @@
+export type Permission = 'owner' | 'guest';
+export type WriteDecision = 'confirmed' | 'declined' | 'auto-approved' | 'auto-denied';
+export interface AuditEvent {
+    /** 事件类型 */
+    type: 'path-allow' | 'path-deny' | 'write-confirm' | 'write-decline' | 'write-auto';
+    /** 涉及的绝对路径 */
+    path: string;
+    /** 工具名（read_file / write_file / 自定义工具名） */
+    tool?: string;
+    /** S-02: 调用链来源（builtin / custom / system），标记安全检查的触发方 */
+    source?: 'builtin' | 'custom' | 'system';
+    /** 用户决策（写入二次确认场景） */
+    decision?: WriteDecision;
+    /** 拒绝原因 */
+    reason?: string;
+    /** 时间戳（ISO 8601） */
+    timestamp: string;
+}
+/**
+ * 审计日志订阅器
+ * 默认输出到 pino logger；可被业务层重定向到独立审计文件
+ */
+export type AuditListener = (event: AuditEvent) => void;
+/**
+ * 写入确认请求
+ *
+ * 宿主程序在非交互式环境（WebUI/桌宠/无终端服务）需要自定义确认 UI。
+ * 注入此回调后，SecurityGuard.requestWriteConfirmation() 会调用它而不是直接读 stdin。
+ *
+ * 返回 true 确认写入，false 拒绝写入。
+ * 抛错视为拒绝（fail-closed，安全优先）。
+ */
+export type WriteConfirmationRequest = (info: WriteConfirmationInfo) => Promise<boolean>;
+/** 写入确认请求的载荷 */
+export interface WriteConfirmationInfo {
+    /** 目标文件绝对路径 */
+    targetPath: string;
+    /** 工具名（如 write_file） */
+    tool: string;
+    /** 人类可读的描述（"写入 100 字符到 foo.md"） */
+    description?: string;
+    /** 权限模式（owner / guest） */
+    permission: Permission;
+    /** 是否需要确认（owner + confirmWrites=false 时为 false，宿主可跳过弹窗） */
+    needsConfirm: boolean;
+}
+export declare class SecurityGuard {
+    /** owner 是否启用写入二次确认；guest 强制开启 */
+    readonly confirmWrites: boolean;
+    /** 权限模式 */
+    readonly permission: Permission;
+    private readonly listeners;
+    /** 审计事件缓冲（最近 N 条，供调试与回溯） */
+    private readonly auditBuffer;
+    private readonly bufferLimit;
+    /**
+     * 注入式写入确认回调。
+     * 宿主注册后，requestWriteConfirmation() 走自定义 UI；
+     * 不注册时回退到终端 readline（CLI 场景）。
+     */
+    private confirmationHandler;
+    /** 允许访问的根目录列表（白名单） */
+    private readonly allowedRoots;
+    constructor(projectPath: string, memoraDir: string, extraAllowedPaths?: string[], 
+    /** owner 是否启用写入二次确认；guest 强制开启 */
+    confirmWrites?: boolean, 
+    /** 权限模式 */
+    permission?: Permission, 
+    /** Agent 级配置目录（personas/rules/skills 所在目录） */
+    configDir?: string, 
+    /** Agent 级数据目录（memora.db/vectors 所在目录） */
+    agentDataDir?: string);
+    /**
+     * 注册自定义写入确认回调（宿主程序接入）
+     *
+     * 适用于 WebUI/桌宠/无终端服务。注册后，requestWriteConfirmation()
+     * 不再直接读 stdin，而是回调此函数让宿主决定如何提示用户。
+     *
+     * 取消注册：传入 null。
+     *
+     * @example
+     *   securityGuard.onWriteConfirmation(async (info) => {
+     *     return await showConfirmDialog(info.targetPath, info.description);
+     *   });
+     */
+    onWriteConfirmation(handler: WriteConfirmationRequest | null): void;
+    /**
+     * 订阅审计事件
+     * @returns 取消订阅函数
+     */
+    onAudit(listener: AuditListener): () => void;
+    /**
+     * 获取最近的审计事件（深拷贝，外部不可修改内部缓冲）
+     */
+    getRecentAudits(limit?: number): AuditEvent[];
+    /**
+     * 断言路径允许访问
+     * @throws Error 不在白名单时
+     * @param source S-02: 调用链来源标记
+     */
+    assertPathAllowed(absolutePath: string, tool?: string, source?: 'builtin' | 'custom' | 'system'): void;
+    /**
+     * 写入操作前请求用户确认（M-101）
+     *
+     * 规则：
+     *   - guest 模式：始终要求确认
+     *   - owner + confirmWrites=true：要求确认
+     *   - owner + confirmWrites=false：自动批准
+     *
+     * 优先走 confirmationHandler 注入式回调（宿主程序），
+     * 未注册时回退到 readline + stdin（CLI 场景）。
+     *
+     * @returns true 确认通过；false 用户拒绝
+     */
+    requestWriteConfirmation(targetPath: string, tool: string, description?: string): Promise<boolean>;
+    /**
+     * 触发审计事件 + 写入日志 + 通知订阅者
+     */
+    private emitAudit;
+}
+//# sourceMappingURL=pathGuard.d.ts.map

package/dist/security/pathGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathGuard.d.ts","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,aAAa,CAAC;AAEvF,MAAM,WAAW,UAAU;IACzB,WAAW;IACX,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACpF,cAAc;IACd,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,qBAAqB;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEzF,gBAAgB;AAChB,MAAM,WAAW,qBAAqB;IACpC,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,2DAA2D;IAC3D,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,qBAAa,aAAa;IAmBtB,kCAAkC;aAClB,aAAa,EAAE,OAAO;IACtC,WAAW;aACK,UAAU,EAAE,UAAU;IArBxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,4BAA4B;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAO;IACnC;;;;OAIG;IACH,OAAO,CAAC,mBAAmB,CAAyC;IAEpE,sBAAsB;IACtB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAW;gBAGtC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,MAAM,EAAO;IAChC,kCAAkC;IAClB,aAAa,GAAE,OAAe;IAC9C,WAAW;IACK,UAAU,GAAE,UAAoB;IAChD,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM;IAClB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM;IAkBvB;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,IAAI;IAInE;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAQ5C;;OAEG;IACH,eAAe,CAAC,KAAK,SAAK,GAAG,UAAU,EAAE;IAIzC;;;;OAIG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI;IAoDtG;;;;;;;;;;;;OAYG;IACG,wBAAwB,CAC5B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC;IAoFnB;;OAEG;IACH,OAAO,CAAC,SAAS;CAuBlB"}

package/dist/security/pathGuard.js

@@ -0,0 +1,276 @@
+/**
+ * 路径白名单 + 审计日志
+ *
+ * 4 类允许 + 12 类禁止
+ * 详见 ADR-006 · 安全模型
+ * 阶段二新增：M-101 写入二次确认 + M-105 审计日志
+ */
+import { resolve, sep } from 'node:path';
+import { createInterface } from 'node:readline/promises';
+import { stdin, stdout } from 'node:process';
+import { logger } from '../logging/logger.js';
+import { securityError, toError } from '../utils/errors.js';
+import { expandHome } from '../utils/path.js';
+const BLOCKED_PATTERNS = [
+    // 系统凭证
+    /(^|[\\/])\.ssh([\\/]|$)/i,
+    /(^|[\\/])\.gnupg([\\/]|$)/i,
+    /(^|[\\/])\.netrc$/i,
+    /(^|[\\/])\.pgpass$/i,
+    /[\\/]etc[\\/]passwd/i,
+    // 云服务凭证
+    /(^|[\\/])\.aws([\\/]|$)/i,
+    /(^|[\\/])\.azure([\\/]|$)/i,
+    /(^|[\\/])\.docker([\\/]|$)/i,
+    /(^|[\\/])\.kube([\\/]|$)/i,
+    /[\\/]gcloud([\\/]|$)/i,
+    // 仅拦截纯 `.env`、`.env.<name>`（name 不含 .）。
+    /(^|[\\/])\.env$|(^|[\\/])\.env\.[^\\/.]+$/i,
+    // 系统目录
+    /[\\/]system32([\\/]|$)/i,
+    /[\\/]Windows[\\/]System/i,
+];
+export class SecurityGuard {
+    confirmWrites;
+    permission;
+    listeners = [];
+    /** 审计事件缓冲（最近 N 条，供调试与回溯） */
+    auditBuffer = [];
+    bufferLimit = 100;
+    /**
+     * 注入式写入确认回调。
+     * 宿主注册后，requestWriteConfirmation() 走自定义 UI；
+     * 不注册时回退到终端 readline（CLI 场景）。
+     */
+    confirmationHandler = null;
+    /** 允许访问的根目录列表（白名单） */
+    allowedRoots;
+    constructor(projectPath, memoraDir, extraAllowedPaths = [], 
+    /** owner 是否启用写入二次确认；guest 强制开启 */
+    confirmWrites = false, 
+    /** 权限模式 */
+    permission = 'owner', 
+    /** Agent 级配置目录（personas/rules/skills 所在目录） */
+    configDir, 
+    /** Agent 级数据目录（memora.db/vectors 所在目录） */
+    agentDataDir) {
+        this.confirmWrites = confirmWrites;
+        this.permission = permission;
+        // 构建白名单根目录列表
+        this.allowedRoots = [
+            resolve(projectPath),
+            resolve(expandHome(memoraDir)),
+        ];
+        if (configDir) {
+            this.allowedRoots.push(resolve(expandHome(configDir)));
+        }
+        if (agentDataDir) {
+            this.allowedRoots.push(resolve(expandHome(agentDataDir)));
+        }
+        for (const p of extraAllowedPaths) {
+            this.allowedRoots.push(resolve(expandHome(p)));
+        }
+    }
+    /**
+     * 注册自定义写入确认回调（宿主程序接入）
+     *
+     * 适用于 WebUI/桌宠/无终端服务。注册后，requestWriteConfirmation()
+     * 不再直接读 stdin，而是回调此函数让宿主决定如何提示用户。
+     *
+     * 取消注册：传入 null。
+     *
+     * @example
+     *   securityGuard.onWriteConfirmation(async (info) => {
+     *     return await showConfirmDialog(info.targetPath, info.description);
+     *   });
+     */
+    onWriteConfirmation(handler) {
+        this.confirmationHandler = handler;
+    }
+    /**
+     * 订阅审计事件
+     * @returns 取消订阅函数
+     */
+    onAudit(listener) {
+        this.listeners.push(listener);
+        return () => {
+            const i = this.listeners.indexOf(listener);
+            if (i >= 0)
+                this.listeners.splice(i, 1);
+        };
+    }
+    /**
+     * 获取最近的审计事件（深拷贝，外部不可修改内部缓冲）
+     */
+    getRecentAudits(limit = 10) {
+        return this.auditBuffer.slice(-limit).map((e) => ({ ...e }));
+    }
+    /**
+     * 断言路径允许访问
+     * @throws Error 不在白名单时
+     * @param source S-02: 调用链来源标记
+     */
+    assertPathAllowed(absolutePath, tool, source) {
+        // SEC-05: NFKC 规范化，防止全角字符（如 ．．/）绕过黑名单正则
+        const normalized = absolutePath.normalize('NFKC');
+        const resolved = resolve(normalized);
+        // 1. 黑名单优先
+        for (const pattern of BLOCKED_PATTERNS) {
+            if (pattern.test(resolved)) {
+                this.emitAudit({
+                    type: 'path-deny',
+                    path: resolved,
+                    tool,
+                    source,
+                    reason: `命中黑名单规则 (${pattern})`,
+                    timestamp: new Date().toISOString(),
+                });
+                throw securityError('禁止访问：路径命中黑名单', `路径 ${resolved} 命中黑名单规则 (${pattern})`, ['检查路径是否正确', '如需访问该路径，请联系管理员添加白名单']);
+            }
+        }
+        // 2. 白名单：遍历所有允许的根目录（严格前缀匹配，追加 sep 防止兄弟目录绕过）
+        for (const allowedRoot of this.allowedRoots) {
+            if (resolved === allowedRoot || resolved.startsWith(allowedRoot + sep)) {
+                this.emitAudit({
+                    type: 'path-allow',
+                    path: resolved,
+                    tool,
+                    source,
+                    timestamp: new Date().toISOString(),
+                });
+                return;
+            }
+        }
+        this.emitAudit({
+            type: 'path-deny',
+            path: resolved,
+            tool,
+            source,
+            reason: '路径越界，不在白名单内',
+            timestamp: new Date().toISOString(),
+        });
+        throw securityError('路径越界', `${resolved} 不在白名单内`, [
+            '检查路径是否在项目目录内',
+            '在配置文件中添加该路径到 allowedPaths',
+        ]);
+    }
+    /**
+     * 写入操作前请求用户确认（M-101）
+     *
+     * 规则：
+     *   - guest 模式：始终要求确认
+     *   - owner + confirmWrites=true：要求确认
+     *   - owner + confirmWrites=false：自动批准
+     *
+     * 优先走 confirmationHandler 注入式回调（宿主程序），
+     * 未注册时回退到 readline + stdin（CLI 场景）。
+     *
+     * @returns true 确认通过；false 用户拒绝
+     */
+    async requestWriteConfirmation(targetPath, tool, description) {
+        const needConfirm = this.permission === 'guest' || this.confirmWrites;
+        if (!needConfirm) {
+            this.emitAudit({
+                type: 'write-auto',
+                path: targetPath,
+                tool,
+                decision: 'auto-approved',
+                timestamp: new Date().toISOString(),
+            });
+            return true;
+        }
+        const info = {
+            targetPath,
+            tool,
+            description,
+            permission: this.permission,
+            needsConfirm: needConfirm,
+        };
+        if (this.confirmationHandler) {
+            try {
+                const ok = await this.confirmationHandler(info);
+                this.emitAudit({
+                    type: ok ? 'write-confirm' : 'write-decline',
+                    path: targetPath,
+                    tool,
+                    decision: ok ? 'confirmed' : 'declined',
+                    timestamp: new Date().toISOString(),
+                });
+                return ok;
+            }
+            catch (err) {
+                // 抛错视为拒绝（fail-closed 安全优先）
+                logger.warn({ err, targetPath }, '写入确认回调异常，视为拒绝');
+                this.emitAudit({
+                    type: 'write-decline',
+                    path: targetPath,
+                    tool,
+                    decision: 'declined',
+                    reason: `回调异常：${toError(err).message}`,
+                    timestamp: new Date().toISOString(),
+                });
+                return false;
+            }
+        }
+        // 回退：CLI 场景直接走终端 readline
+        const rl = createInterface({ input: stdin, output: stdout });
+        try {
+            const lines = [
+                `\n🔒 写入二次确认 [${this.permission}]`,
+                `   工具: ${tool}`,
+                `   路径: ${targetPath}`,
+                ...(description ? [`   说明: ${description}`] : []),
+                `   确认写入？(y/N) `,
+            ];
+            const answer = (await rl.question(lines.join('\n'))).trim().toLowerCase();
+            if (answer === 'y' || answer === 'yes') {
+                this.emitAudit({
+                    type: 'write-confirm',
+                    path: targetPath,
+                    tool,
+                    decision: 'confirmed',
+                    timestamp: new Date().toISOString(),
+                });
+                return true;
+            }
+            this.emitAudit({
+                type: 'write-decline',
+                path: targetPath,
+                tool,
+                decision: 'declined',
+                timestamp: new Date().toISOString(),
+            });
+            return false;
+        }
+        finally {
+            rl.close();
+        }
+    }
+    /**
+     * 触发审计事件 + 写入日志 + 通知订阅者
+     */
+    emitAudit(event) {
+        // 缓冲
+        this.auditBuffer.push(event);
+        if (this.auditBuffer.length > this.bufferLimit) {
+            this.auditBuffer.shift();
+        }
+        // 写到 pino（结构化日志，方便后续检索）
+        if (event.type === 'path-deny' || event.type === 'write-decline') {
+            logger.warn({ audit: event }, '安全审计：拒绝');
+        }
+        else {
+            logger.info({ audit: event }, '安全审计：通过');
+        }
+        // 通知订阅者（业务层可重定向到独立审计文件）
+        for (const listener of this.listeners) {
+            try {
+                listener(event);
+            }
+            catch (err) {
+                logger.error({ err }, '审计订阅者执行失败');
+            }
+        }
+    }
+}
+//# sourceMappingURL=pathGuard.js.map

package/dist/security/pathGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathGuard.js","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,gBAAgB,GAAG;IACvB,OAAO;IACP,0BAA0B;IAC1B,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,sBAAsB;IACtB,QAAQ;IACR,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,2BAA2B;IAC3B,uBAAuB;IACvB,wCAAwC;IACxC,4CAA4C;IAC5C,OAAO;IACP,yBAAyB;IACzB,0BAA0B;CAC3B,CAAC;AAqDF,MAAM,OAAO,aAAa;IAoBN;IAEA;IArBD,SAAS,GAAoB,EAAE,CAAC;IACjD,4BAA4B;IACX,WAAW,GAAiB,EAAE,CAAC;IAC/B,WAAW,GAAG,GAAG,CAAC;IACnC;;;;OAIG;IACK,mBAAmB,GAAoC,IAAI,CAAC;IAEpE,sBAAsB;IACL,YAAY,CAAW;IAExC,YACE,WAAmB,EACnB,SAAiB,EACjB,oBAA8B,EAAE;IAChC,kCAAkC;IAClB,gBAAyB,KAAK;IAC9C,WAAW;IACK,aAAyB,OAAO;IAChD,8CAA8C;IAC9C,SAAkB;IAClB,0CAA0C;IAC1C,YAAqB;QANL,kBAAa,GAAb,aAAa,CAAiB;QAE9B,eAAU,GAAV,UAAU,CAAsB;QAMhD,aAAa;QACb,IAAI,CAAC,YAAY,GAAG;YAClB,OAAO,CAAC,WAAW,CAAC;YACpB,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAC/B,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,OAAwC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,QAAuB;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,KAAK,GAAG,EAAE;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,YAAoB,EAAE,IAAa,EAAE,MAAwC;QAC7F,wCAAwC;QACxC,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAErC,WAAW;QACX,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,MAAM,EAAE,YAAY,OAAO,GAAG;oBAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,MAAM,aAAa,CACjB,cAAc,EACd,MAAM,QAAQ,aAAa,OAAO,GAAG,EACrC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE;YAChD,cAAc;YACd,2BAA2B;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,wBAAwB,CAC5B,UAAkB,EAClB,IAAY,EACZ,WAAoB;QAEpB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC;QAEtE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAA0B;YAClC,UAAU;YACV,IAAI;YACJ,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,WAAW;SAC1B,CAAC;QAEF,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;oBAC5C,IAAI,EAAE,UAAU;oBAChB,IAAI;oBACJ,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;oBACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,2BAA2B;gBAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;gBAClD,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,UAAU;oBAChB,IAAI;oBACJ,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;oBACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,gBAAgB,IAAI,CAAC,UAAU,GAAG;gBAClC,UAAU,IAAI,EAAE;gBAChB,UAAU,UAAU,EAAE;gBACtB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,gBAAgB;aACjB,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE1E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,UAAU;oBAChB,IAAI;oBACJ,QAAQ,EAAE,WAAW;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,KAAiB;QACjC,KAAK;QACL,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;QAED,wBAAwB;QACxB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/skill/skillManager.d.ts

@@ -0,0 +1,82 @@
+import type { IMemoryStorage } from '../memory/storageInterface.js';
+import type { SkillEntry, SkillMatch } from '../skill/types.js';
+/**
+ * 技能管理器
+ */
+export declare class SkillManager {
+    private readonly configDir?;
+    private readonly index?;
+    /** 技能列表缓存（启动时扫描一次） */
+    private skills;
+    /**
+     * @param configDir 配置目录（技能文件在 <configDir>/skills/ 下）
+     * @param index SQLite 索引（用于写入 skill 记忆）
+     */
+    constructor(configDir?: string | undefined, index?: IMemoryStorage | undefined);
+    /**
+     * 启动时加载：扫描技能目录
+     *
+     * @returns 加载的技能数量
+     */
+    load(): Promise<number>;
+    /**
+     * 根据用户输入匹配最合适的技能
+     *
+     * 匹配流程：
+     *   1. 先检查所有 trigger 正则，命中直接返回（最高优先级）
+     *   2. 再检查关键词匹配（TF 计分，得分排序）
+     *   3. 若匹配多项但得分相同 → 取第一个
+     *   4. 无任何匹配 → 返回 null
+     *
+     * @param userInput 用户输入文本
+     * @returns 匹配结果，无匹配返回 null
+     */
+    match(userInput: string): SkillMatch | null;
+    /**
+     * 根据技能名获取技能
+     *
+     * @param name 技能名
+     * @returns 技能条目，不存在返回 null
+     */
+    get(name: string): SkillEntry | null;
+    /**
+     * 获取所有技能列表
+     */
+    get list(): SkillEntry[];
+    /**
+     * 注册运行时注入的技能
+     *
+     * 供 Agent.addSkill() 调用：宿主程序可在 init() 之后动态注入技能。
+     * 重复注册同名技能会被拒绝（与文件加载的技能冲突时也按"先到先得"判断）。
+     *
+     * @param skill 技能条目
+     * @throws 技能名已存在时抛错
+     */
+    register(skill: SkillEntry): void;
+    /**
+     * 构建 system prompt 中的技能段
+     *
+     * 格式：
+     *   【当前技能】技能名
+     *   技能 prompt 正文...
+     *
+     * @param name 技能名（可选，不传返回空）
+     */
+    buildSystemPrompt(name?: string): string;
+    /**
+     * 将所有技能写入 SQLite 索引
+     */
+    private writeAllToIndex;
+    /**
+     * 将单个技能写入 SQLite 索引
+     */
+    private writeSkillToIndex;
+    /**
+     * 扫描 configDir/skills/ 目录
+     *
+     * 宿主负责将全局+项目级技能汇总到 configDir，
+     * 内核只扫描一个目录，不做路径假设。
+     */
+    private scanSkills;
+}
+//# sourceMappingURL=skillManager.d.ts.map

package/dist/skill/skillManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillManager.d.ts","sourceRoot":"","sources":["../../src/skill/skillManager.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG/D;;GAEG;AACH,qBAAa,YAAY;IASrB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IATzB,sBAAsB;IACtB,OAAO,CAAC,MAAM,CAAoB;IAElC;;;OAGG;gBAEgB,SAAS,CAAC,EAAE,MAAM,YAAA,EAClB,KAAK,CAAC,EAAE,cAAc,YAAA;IAGzC;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAa7B;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAgC3C;;;;;OAKG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAIpC;;OAEG;IACH,IAAI,IAAI,IAAI,UAAU,EAAE,CAEvB;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAYjC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM;IAUxC;;OAEG;YACW,eAAe;IAQ7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAezB;;;;;OAKG;YACW,UAAU;CAuBzB"}