@zooique/memora 3.0.1 → 5.0.0

package/dist/role-pack/strategyResolver.js

@@ -3,7 +3,7 @@
  */
 //  role-pack 与 memory 层均不持有召回保底（记忆纯工具化召回，无自动注入通道）。
 // 数值键上下限常量（SSOT）：validator 与 resolver 共用同一区间来源，越界值回退内核默认
-import { DEFAULT_MAX_ITERATIONS, ERROR_HANDLINGS, MAX_ASK_LIMIT, MAX_SELF_REVIEW_ROUNDS, MAX_STEP_BUDGET, MAX_SUMMARY_FOCUS_LENGTH, MAX_CONTEXT_LIMIT, MIN_CONTEXT_LIMIT, MIN_STEP_BUDGET, MAX_TOOL_STEP_LIMIT, MULTI_STEP_REASONINGS, PROVIDER_ROUTINGS, SUMMARY_MODES, TOOL_MODES, TOOL_READONLY_MODES, } from './strategyKeys.js';
+import { DEFAULT_MAX_ITERATIONS, ERROR_HANDLINGS, MAX_ASK_LIMIT, MAX_SELF_REVIEW_ROUNDS, MAX_STEP_BUDGET, MAX_SUMMARY_FOCUS_LENGTH, MAX_CONTEXT_LIMIT, MIN_CONTEXT_LIMIT, MIN_STEP_BUDGET, MAX_TOOL_STEP_LIMIT, MAX_WEB_SEARCH_LIMIT, MULTI_STEP_REASONINGS, PROVIDER_ROUTINGS, SUMMARY_MODES, TOOL_MODES, TOOL_READONLY_MODES, } from './strategyKeys.js';
 // ════════════════════════════════════════════════════════════
 // 默认值常量
 // ════════════════════════════════════════════════════════════
@@ -50,6 +50,10 @@ export const DEFAULT_BEHAVIOR_STRATEGY = {
         errorHandling: 'retry',
         askOn: ['ambiguity', 'decision', 'missing_info'],
         askLimit: 10,
+        // 联网搜索硬上限缺省值（真源唯一 = 本键，2026-10-16 起）：运行时 loop 护栏恒读
+        // strategy.webSearchLimit，缺省 6 定义在本对象、回退也回退本对象（resolveWebSearchLimit），
+        // 曾经的镜像 LOOP_CONSTANTS.MAX_WEB_SEARCH_CALLS 已删（零读取幽灵旋钮，见其删后注记）。
+        webSearchLimit: 6,
     },
 };
 // ════════════════════════════════════════════════════════════
@@ -142,6 +146,19 @@ export function resolveAskLimit(strategy) {
     // 非法/缺失回退到 DEFAULT_BEHAVIOR_STRATEGY 的 askLimit（SSOT 单点：不再硬编码 3）
     return valid ? candidate : DEFAULT_BEHAVIOR_STRATEGY.global.askLimit;
 }
+/**
+ * 解析联网搜索次数上限（内核已消费）：整数且 ∈ [1, MAX_WEB_SEARCH_LIMIT] 才采用，缺失/越界回退默认 6。
+ * web_search 工具的 turn 粒度硬护栏取值（与 resolveAskLimit 完全同构，SSOT：loop 护栏注入共用）。
+ */
+export function resolveWebSearchLimit(strategy) {
+    const candidate = strategy?.global?.webSearchLimit;
+    const valid = typeof candidate === 'number' &&
+        Number.isInteger(candidate) &&
+        candidate >= 1 &&
+        candidate <= MAX_WEB_SEARCH_LIMIT;
+    // 非法/缺失回退到 DEFAULT_BEHAVIOR_STRATEGY 的 webSearchLimit（SSOT 单点 = 内核缺省 6）
+    return valid ? candidate : DEFAULT_BEHAVIOR_STRATEGY.global.webSearchLimit;
+}
 /**
  * 解析角色包上下文上限。合法 = `0`（不设额外上限）或整数 ∈ [MIN_CONTEXT_LIMIT, MAX_CONTEXT_LIMIT]；
  * 其余（未声明 / 越界 / 小数 / 非数）→ 0（不设额外上限，有效窗口 = provider 窗口）。
@@ -194,7 +211,7 @@ export const DEFAULT_L2_STRATEGY = resolveL2Strategy(undefined);
  * 解析 L2 运行时策略（Agent 层单一装配入口，免逐项 setXxx）
  *
  * 聚合现有各 resolveXxx（工具模式→toolCallsBlocked、工具步数、错误处理、Provider 路由、
- * Token/步数预算、多步推理、主动提问上限、工具只读）+ reflect.selfReview；
+ * Token/步数预算、多步推理、主动提问上限、联网搜索上限、工具只读）+ reflect.selfReview；
  * 非法值经各 resolve* 归位内核默认；selfReview 归一为布尔数字「0=关闭 / 正整数 >0 归一为 1」。
  *
  * @param strategy 合并后的行为策略（角色包声明，可为空）
@@ -218,6 +235,7 @@ export function resolveL2Strategy(strategy) {
         stepBudget: resolveStepBudget(strategy),
         multiStepReasoning: resolveMultiStepReasoning(strategy),
         askLimit: resolveAskLimit(strategy),
+        webSearchLimit: resolveWebSearchLimit(strategy),
         toolReadonly: resolveToolReadonly(strategy),
     };
 }

package/dist/role-pack/strategyResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"strategyResolver.js","sourceRoot":"","sources":["../../src/role-pack/strategyResolver.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,mDAAmD;AAEnD,yDAAyD;AACzD,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAiB3B,+DAA+D;AAC/D,QAAQ;AACR,+DAA+D;AAE/D,+DAA+D;AAC/D,+BAA+B;AAC/B,iEAAiE;AACjE,+DAA+D;AAE/D,iEAAiE;AACjE,+BAA+B;AAE/B;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,OAAO,EAAE;QACP,YAAY,EAAE,SAAS,EAAE,oCAAoC;KAC9D;IACD,GAAG,EAAE;QACH,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,GAAG;QAChB;;;;;;;WAOG;QACH,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,MAAM;QACvB,kBAAkB,EAAE,MAAM;KAC3B;IACD,OAAO,EAAE;QACP,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,QAAQ;KACvB;IACD,MAAM,EAAE;QACN,YAAY,EAAE,CAAC,EAAE,8CAA8C;QAC/D,2DAA2D;QAC3D,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;QAChD,QAAQ,EAAE,EAAE;KACb;CACO,CAAC;AAEX,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAuC,EACvC,QAAoC;IAEpC,MAAM,IAAI,GAAG,eAAe,EAAE,SAAS,EAAE,EAAE,QAAQ,IAAI,yBAAyB,CAAC;IACjF,0DAA0D;IAC1D,OAAO,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAmB,KAAc,EAAE,OAAqB,EAAE,QAAW;IACzF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChF,CAAC,CAAE,KAAW;QACd,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,oBAAoB;AACpB,+DAA+D;AAE/D,sCAAsC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,MAAM,SAAS,GAAG,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC;IAClD,OAAO,OAAO,SAAS,KAAK,QAAQ;QAClC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC3B,SAAS,CAAC,MAAM,IAAI,wBAAwB;QAC5C,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,QAAsC;IACpE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,QAAsC;IACnE,OAAO,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,MAAM,SAAS,GAAG,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC;IAC/C,uCAAuC;IACvC,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,mBAAmB,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAsC;IAC3E,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAsC;IACpE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC7C,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,aAAa,CAAC;IAC7B,iEAAiE;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAO,CAAC,QAAS,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC;IACjD,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,iBAAiB,IAAI,SAAS,IAAI,iBAAiB,CAAC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,iBAAiB,CAAC,QAAsC;IACtE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;IAC/C,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;AACpD,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,yBAAyB,CACvC,QAAsC;IAEtC,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,+DAA+D;AAC/D,uBAAuB;AACvB,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB,iBAAiB,CAAC,SAAS,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAsC;IACtE,gDAAgD;IAChD,sDAAsD;IACtD,MAAM,aAAa,GAAG,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC;IACpD,MAAM,iBAAiB,GACrB,OAAO,aAAa,KAAK,QAAQ;QACjC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAC/B,aAAa,GAAG,CAAC;QACjB,aAAa,IAAI,sBAAsB,CAAC;IAC1C,OAAO;QACL,gBAAgB,EAAE,eAAe,CAAC,QAAQ,CAAC,KAAK,OAAO;QACvD,iBAAiB;QACjB,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC7C,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC7C,eAAe,EAAE,sBAAsB,CAAC,QAAQ,CAAC;QACjD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;QAC3C,UAAU,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACvC,kBAAkB,EAAE,yBAAyB,CAAC,QAAQ,CAAC;QACvD,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,UAAU;AACV,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAsB,EACtB,QAA+C;IAE/C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;QACjD,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE;QACrC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;QACjD,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,oCAAoC;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,yBAAyB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEzE,gCAAgC;IAChC,MAAM,WAAW,GAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,0DAA0D;IAC1D,2DAA2D;IAC3D,sCAAsC;IACtC,IAAI,QAAQ,CAAC,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QACrC,gEAAgE;QAChE,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,WAAW;oBACd,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAChC,MAAM;gBACR,KAAK,UAAU;oBACb,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9B,MAAM;gBACR,KAAK,cAAc;oBACjB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7B,MAAM;gBACR,KAAK,SAAS;oBACZ,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7B,MAAM;YACV,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CACd,cAAc,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,QAAQ,+IAA+I,CAC9O,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/C,qCAAqC;IACrC,MAAM,YAAY,GAAkC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAE5E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;QACZ,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"strategyResolver.js","sourceRoot":"","sources":["../../src/role-pack/strategyResolver.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,mDAAmD;AAEnD,yDAAyD;AACzD,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAiB3B,+DAA+D;AAC/D,QAAQ;AACR,+DAA+D;AAE/D,+DAA+D;AAC/D,+BAA+B;AAC/B,iEAAiE;AACjE,+DAA+D;AAE/D,iEAAiE;AACjE,+BAA+B;AAE/B;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,OAAO,EAAE;QACP,YAAY,EAAE,SAAS,EAAE,oCAAoC;KAC9D;IACD,GAAG,EAAE;QACH,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,GAAG;QAChB;;;;;;;WAOG;QACH,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,MAAM;QACvB,kBAAkB,EAAE,MAAM;KAC3B;IACD,OAAO,EAAE;QACP,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,QAAQ;KACvB;IACD,MAAM,EAAE;QACN,YAAY,EAAE,CAAC,EAAE,8CAA8C;QAC/D,2DAA2D;QAC3D,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;QAChD,QAAQ,EAAE,EAAE;QACZ,mDAAmD;QACnD,uEAAuE;QACvE,gEAAgE;QAChE,cAAc,EAAE,CAAC;KAClB;CACO,CAAC;AAEX,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAuC,EACvC,QAAoC;IAEpC,MAAM,IAAI,GAAG,eAAe,EAAE,SAAS,EAAE,EAAE,QAAQ,IAAI,yBAAyB,CAAC;IACjF,0DAA0D;IAC1D,OAAO,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAmB,KAAc,EAAE,OAAqB,EAAE,QAAW;IACzF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChF,CAAC,CAAE,KAAW;QACd,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,oBAAoB;AACpB,+DAA+D;AAE/D,sCAAsC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,MAAM,SAAS,GAAG,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC;IAClD,OAAO,OAAO,SAAS,KAAK,QAAQ;QAClC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC3B,SAAS,CAAC,MAAM,IAAI,wBAAwB;QAC5C,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,QAAsC;IACpE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,QAAsC;IACnE,OAAO,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,MAAM,SAAS,GAAG,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC;IAC/C,uCAAuC;IACvC,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,mBAAmB,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAsC;IAC3E,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAsC;IACpE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC7C,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,aAAa,CAAC;IAC7B,iEAAiE;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAO,CAAC,QAAS,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAsC;IAC1E,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC;IACnD,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,oBAAoB,CAAC;IACpC,wEAAwE;IACxE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAO,CAAC,cAAe,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC;IACjD,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,iBAAiB,IAAI,SAAS,IAAI,iBAAiB,CAAC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,iBAAiB,CAAC,QAAsC;IACtE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;IAC/C,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;AACpD,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,yBAAyB,CACvC,QAAsC;IAEtC,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,+DAA+D;AAC/D,uBAAuB;AACvB,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB,iBAAiB,CAAC,SAAS,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAsC;IACtE,gDAAgD;IAChD,sDAAsD;IACtD,MAAM,aAAa,GAAG,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC;IACpD,MAAM,iBAAiB,GACrB,OAAO,aAAa,KAAK,QAAQ;QACjC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAC/B,aAAa,GAAG,CAAC;QACjB,aAAa,IAAI,sBAAsB,CAAC;IAC1C,OAAO;QACL,gBAAgB,EAAE,eAAe,CAAC,QAAQ,CAAC,KAAK,OAAO;QACvD,iBAAiB;QACjB,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC7C,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC7C,eAAe,EAAE,sBAAsB,CAAC,QAAQ,CAAC;QACjD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;QAC3C,UAAU,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACvC,kBAAkB,EAAE,yBAAyB,CAAC,QAAQ,CAAC;QACvD,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,cAAc,EAAE,qBAAqB,CAAC,QAAQ,CAAC;QAC/C,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,UAAU;AACV,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAsB,EACtB,QAA+C;IAE/C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;QACjD,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE;QACrC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;QACjD,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,oCAAoC;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,yBAAyB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEzE,gCAAgC;IAChC,MAAM,WAAW,GAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,0DAA0D;IAC1D,2DAA2D;IAC3D,sCAAsC;IACtC,IAAI,QAAQ,CAAC,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QACrC,gEAAgE;QAChE,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,WAAW;oBACd,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAChC,MAAM;gBACR,KAAK,UAAU;oBACb,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9B,MAAM;gBACR,KAAK,cAAc;oBACjB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7B,MAAM;gBACR,KAAK,SAAS;oBACZ,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7B,MAAM;YACV,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CACd,cAAc,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,QAAQ,+IAA+I,CAC9O,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/C,qCAAqC;IACrC,MAAM,YAAY,GAAkC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAE5E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;QACZ,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}

package/dist/role-pack/types.d.ts

@@ -71,6 +71,8 @@ export interface GlobalStrategy {
     readonly askOn?: AskOnTrigger | readonly AskOnTrigger[];
     /** 主动提问次数上限：按一次用户输入（turn 粒度）计，防单次输入被打断过多次（默认 10） */
     readonly askLimit?: number;
+    /** 联网搜索次数上限：按一次用户输入（turn 粒度）计，web_search 硬护栏拦截超限调用（默认 6） */
+    readonly webSearchLimit?: number;
 }
 /**
  * L2 行为策略全集
@@ -78,7 +80,7 @@ export interface GlobalStrategy {
  * 诚实化声明：本集合是"设计空间"非"承诺面"——被实际消费的字段为
  * prepare 的 summaryFocus（round-summary 提炼视角）；
  * act 的 toolMode/temperature/outputLimit/toolStepLimit/providerRouting/multiStepReasoning/toolReadonly；
- * reflect 的 summary/selfReview/userFollowup；global 的 askOn/askLimit/errorHandling/contextLimit/stepBudget。
+ * reflect 的 summary/selfReview/userFollowup；global 的 askOn/askLimit/webSearchLimit/errorHandling/contextLimit/stepBudget。
  * 边界纪律：无 understandingConfirm 开放键（并入 askOn['confirm']/ask_user，见文件头注）；无 costBudget 键（内核无定价能力、宿主无执行者，无消费者的策略键不保留，遵循"预留键非承诺"纪律）。
  */
 export interface BehaviorStrategy {
@@ -115,6 +117,8 @@ export interface L2RuntimeStrategy {
     readonly multiStepReasoning: MultiStepReasoning;
     /** 主动提问次数上限（global.askLimit：turn 粒度防打扰；ask_user 硬护栏拦截超限调用） */
     readonly askLimit: number;
+    /** 联网搜索次数上限（global.webSearchLimit：turn 粒度；web_search 硬护栏拦截超限调用） */
+    readonly webSearchLimit: number;
     /** 工具只读模式（act.toolReadonly） */
     readonly toolReadonly: ToolReadonly;
 }

package/dist/role-pack/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/role-pack/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAW9D,yFAAyF;AACzF,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,sFAAsF;AACtF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxE,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEtC,qEAAqE;AACrE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,qFAAqF;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAIzD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qBAAqB;AACrB,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,wBAAwB;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gCAAgC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,4BAA4B;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CAClD;AAED,yBAAyB;AACzB,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;CACtC;AAED,gBAAgB;AAChB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,YAAY,EAAE,CAAC;IACxD,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,cAAc;IACd,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;IAC3B,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,cAAc;IACd,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAMD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,2FAA2F;IAC3F,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,yCAAyC;IACzC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qCAAqC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,kBAAkB;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY;IACZ,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU;IACV,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,GAAG,WAAW,CAAC;IAC1D,yBAAyB;IACzB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,0BAA0B;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;IACtC,qDAAqD;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAI5B,iDAAiD;IACjD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAIrD,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAErC,qDAAqD;IACrD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C;AAMD,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,aAAa;IACb,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,uCAAuC;IACvC,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACrD,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC;6CACyC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAID,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,6GAA6G;IAC7G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,8GAA8G;YAC9G,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,8EAA8E;YAC9E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;SACvB,CAAC,CAAC;KACJ,CAAC;IACF,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/role-pack/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAW9D,yFAAyF;AACzF,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,sFAAsF;AACtF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxE,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEtC,qEAAqE;AACrE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,qFAAqF;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAIzD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qBAAqB;AACrB,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,wBAAwB;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gCAAgC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,4BAA4B;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CAClD;AAED,yBAAyB;AACzB,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;CACtC;AAED,gBAAgB;AAChB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,YAAY,EAAE,CAAC;IACxD,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,cAAc;IACd,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;IAC3B,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,cAAc;IACd,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAMD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,2FAA2F;IAC3F,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,yCAAyC;IACzC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qCAAqC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,+BAA+B;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,kBAAkB;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY;IACZ,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU;IACV,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,GAAG,WAAW,CAAC;IAC1D,yBAAyB;IACzB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,0BAA0B;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;IACtC,qDAAqD;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAI5B,iDAAiD;IACjD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAIrD,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAErC,qDAAqD;IACrD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C;AAMD,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,aAAa;IACb,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,uCAAuC;IACvC,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACrD,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC;6CACyC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAID,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,6GAA6G;IAC7G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,8GAA8G;YAC9G,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,8EAA8E;YAC9E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;SACvB,CAAC,CAAC;KACJ,CAAC;IACF,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC"}

package/dist/security/confirmEntries.d.ts

@@ -0,0 +1,44 @@
+/**
+ * 执行面 → 确认入口 登记表（CMD-1-BYPASS，2026-10-03）
+ *
+ * 背景（实锤）：`classifyCommand`（deny / always-ask）的唯一调用点是 `SecurityGuard.confirmCommandRun`，
+ * 而 `confirmCommandRun` 的唯一调用点又是 `toolExecutor` 的 `run_command` 分支 ⇒ 命令内容裁决只锁
+ * **一个**执行面。其余执行面（run_code / run_project_script / run_skill_script）走 `confirmScriptRun`，
+ * **只判权限档位、不看执行内容**。
+ *
+ * 登记表 = 把「每个执行面走哪个确认入口」从「散在四个 case 分支里的隐式默认值」变成**显式单一真源**：
+ * 新增执行面时**必须**在此登记，否则守卫测试（confirmEntry.test.ts 的穷举性断言）即红。
+ *
+ * 真源关系（禁再独立枚举工具名）：「哪些工具是执行面」由 `builtinTools` 的 `diskWrite === 'opaque'`
+ * 派生（`OPAQUE_WRITE_TOOL_NAMES`）⇒ 本表**只登记入口**，不复制第二份工具清单。
+ *
+ * - `command`：走 `confirmCommandRun`（内容裁决 DENY/always-ask + 确认档位）
+ * - `script` ：走 `confirmScriptRun`（仅权限档位，不看执行内容）
+ * - `none`  ：**内核不经任何确认闸**——非执行面（`register_work` 只往 `memoraDir` 写作品索引 JSON，
+ *   既不执行也不碰项目文件，实锤：kernel 侧 `registerWork` 回调链零 `confirm*` 调用）。
+ *   登记它是为了让「opaque 面一个都不漏」可机器核对；它**不是**确认入口，禁被路由进确认闸。
+ */
+/** 确认入口档位（`none` = 非确认入口，仅作「已核对」登记） */
+export type ConfirmEntry = 'command' | 'script' | 'none';
+/** 真正构成确认闸的档位（`none` 排除在外）——路由函数入参类型，编译期挡住非确认面被路由进来 */
+export type ConfirmingEntry = Exclude<ConfirmEntry, 'none'>;
+/** 执行面 → 确认入口（SSOT；键集必须与 opaque 派生集双向相等，由守卫测试钉死） */
+export declare const CONFIRM_ENTRY_BY_TOOL: Readonly<Record<string, ConfirmEntry>>;
+/**
+ * 取某工具的确认入口；未登记即抛错（fail-closed：漏登记比登记错更危险，因为它不显眼）。
+ *
+ * @param tool 工具名
+ * @returns 该工具的确认入口
+ */
+export declare function requireConfirmEntry(tool: string): ConfirmEntry;
+/**
+ * 取某工具的**确认**入口；登记为 `none` 的非执行面在此抛错（fail-closed）。
+ *
+ * 抛错发生在**取登记处**而非路由处 ⇒ 路由函数保持穷尽分支（无僵尸分支），
+ * 且「非执行面被误接进确认闸」在编译期（入参类型）+ 运行期（此处）双重拦死。
+ *
+ * @param tool 工具名
+ * @returns 该工具的确认入口（不含 `none`）
+ */
+export declare function requireConfirmingEntry(tool: string): ConfirmingEntry;
+//# sourceMappingURL=confirmEntries.d.ts.map

package/dist/security/confirmEntries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmEntries.d.ts","sourceRoot":"","sources":["../../src/security/confirmEntries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,uCAAuC;AACvC,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEzD,uDAAuD;AACvD,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAE5D,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAOxE,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAQ9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAQpE"}

package/dist/security/confirmEntries.js

@@ -0,0 +1,59 @@
+/**
+ * 执行面 → 确认入口 登记表（CMD-1-BYPASS，2026-10-03）
+ *
+ * 背景（实锤）：`classifyCommand`（deny / always-ask）的唯一调用点是 `SecurityGuard.confirmCommandRun`，
+ * 而 `confirmCommandRun` 的唯一调用点又是 `toolExecutor` 的 `run_command` 分支 ⇒ 命令内容裁决只锁
+ * **一个**执行面。其余执行面（run_code / run_project_script / run_skill_script）走 `confirmScriptRun`，
+ * **只判权限档位、不看执行内容**。
+ *
+ * 登记表 = 把「每个执行面走哪个确认入口」从「散在四个 case 分支里的隐式默认值」变成**显式单一真源**：
+ * 新增执行面时**必须**在此登记，否则守卫测试（confirmEntry.test.ts 的穷举性断言）即红。
+ *
+ * 真源关系（禁再独立枚举工具名）：「哪些工具是执行面」由 `builtinTools` 的 `diskWrite === 'opaque'`
+ * 派生（`OPAQUE_WRITE_TOOL_NAMES`）⇒ 本表**只登记入口**，不复制第二份工具清单。
+ *
+ * - `command`：走 `confirmCommandRun`（内容裁决 DENY/always-ask + 确认档位）
+ * - `script` ：走 `confirmScriptRun`（仅权限档位，不看执行内容）
+ * - `none`  ：**内核不经任何确认闸**——非执行面（`register_work` 只往 `memoraDir` 写作品索引 JSON，
+ *   既不执行也不碰项目文件，实锤：kernel 侧 `registerWork` 回调链零 `confirm*` 调用）。
+ *   登记它是为了让「opaque 面一个都不漏」可机器核对；它**不是**确认入口，禁被路由进确认闸。
+ */
+/** 执行面 → 确认入口（SSOT；键集必须与 opaque 派生集双向相等，由守卫测试钉死） */
+export const CONFIRM_ENTRY_BY_TOOL = {
+    run_command: 'command',
+    run_code: 'script',
+    run_project_script: 'script',
+    run_skill_script: 'script',
+    /** 作品投影登记：只写 memoraDir 内索引 JSON，内核零确认（非执行面） */
+    register_work: 'none',
+};
+/**
+ * 取某工具的确认入口；未登记即抛错（fail-closed：漏登记比登记错更危险，因为它不显眼）。
+ *
+ * @param tool 工具名
+ * @returns 该工具的确认入口
+ */
+export function requireConfirmEntry(tool) {
+    const entry = CONFIRM_ENTRY_BY_TOOL[tool];
+    if (!entry) {
+        throw new Error(`工具「${tool}」未登记确认入口（CONFIRM_ENTRY_BY_TOOL）——新增执行面须在此登记，见 confirmEntries.ts 头注释`);
+    }
+    return entry;
+}
+/**
+ * 取某工具的**确认**入口；登记为 `none` 的非执行面在此抛错（fail-closed）。
+ *
+ * 抛错发生在**取登记处**而非路由处 ⇒ 路由函数保持穷尽分支（无僵尸分支），
+ * 且「非执行面被误接进确认闸」在编译期（入参类型）+ 运行期（此处）双重拦死。
+ *
+ * @param tool 工具名
+ * @returns 该工具的确认入口（不含 `none`）
+ */
+export function requireConfirmingEntry(tool) {
+    const entry = requireConfirmEntry(tool);
+    if (entry === 'none') {
+        throw new Error(`工具「${tool}」登记为 none（非确认入口），不得经内核确认闸路由——如需确认，请先改登记口径`);
+    }
+    return entry;
+}
+//# sourceMappingURL=confirmEntries.js.map

package/dist/security/confirmEntries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmEntries.js","sourceRoot":"","sources":["../../src/security/confirmEntries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAA2C;IAC3E,WAAW,EAAE,SAAS;IACtB,QAAQ,EAAE,QAAQ;IAClB,kBAAkB,EAAE,QAAQ;IAC5B,gBAAgB,EAAE,QAAQ;IAC1B,+CAA+C;IAC/C,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,MAAM,IAAI,qEAAqE,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,MAAM,IAAI,2CAA2C,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/security/pathGuard.d.ts

@@ -1,3 +1,18 @@
+/** 命令裁决三档 */
+export type CommandVerdict = 
+/** 恒拦：无正当 agent 场景的破坏性命令 */
+'deny'
+/** 恒弹确认：正当但不可逆（git 写操作、发布类），不可被豁免 */
+ | 'always-ask'
+/** 普通：走常规确认判据（guest / confirmScripts） */
+ | 'normal';
+/**
+ * 命令裁决（纯函数，命令安全边界的**唯一判据**；§13.2）
+ *
+ * 顺序不可颠倒：deny 优先于 always-ask（一条命令同时命中时以最严为准）。
+ * NFKC 规范化与路径黑名单同款，防全角字符绕过正则。
+ */
+export declare function classifyCommand(command: string): CommandVerdict;
 export type Permission = 'owner' | 'guest';
 export type WriteDecision = 'confirmed' | 'declined' | 'auto-approved' | 'auto-denied';
 export interface AuditEvent {
@@ -19,8 +34,12 @@ export interface AuditEvent {
 /** 审计日志订阅器：默认经内核 logger 单例输出，可被业务层重定向到独立审计文件 */
 export type AuditListener = (event: AuditEvent) => void;
 /**
- * 写入确认请求：宿主在非交互式环境（WebUI/桌宠/无终端）注入自定义确认 UI，
+ * 确认请求：宿主在非交互式环境（WebUI/桌宠/无终端）注入自定义确认 UI，
  * 走此回调而非直接读 stdin。返回 true 确认 / false 拒绝；抛错视为拒绝（fail-closed）。
+ *
+ * ⚠️ 类型名 `WriteConfirmation*` 是**历史命名**：该回调承载全部四类确认
+ * （写入 / 命令 / 代码 / 脚本执行），非写入类请求同样走它（见 `confirmGate`）。
+ * 改名 = 破坏性公共面变更，收益仅为命名纯度 ⇒ 保留旧名 + 此注释说明。
  */
 export type WriteConfirmationRequest = (info: WriteConfirmationInfo) => Promise<boolean>;
 /** 写入确认请求的载荷 */
@@ -39,6 +58,12 @@ export interface WriteConfirmationInfo {
     beforeContent?: string | null;
     /** 写入后内容预览（截断到 10KB）——供宿主 UI 展示 diff */
     afterContent?: string;
+    /**
+     * 本确认卡是否有 diff 对比域（判据归内核，宿主不猜——2026-10-03 实锤：宿主用
+     * truthy 判据猜「diff 域空不空」属措辞折叠型带伤，判据归位内核单点）。
+     * true 仅写入场景（confirmGate 的 diff 参数唯一传入点）；命令/代码/脚本执行三类恒 false。
+     */
+    hasDiff: boolean;
 }
 /** diff 内容最大长度（10KB），防大文件撑爆 IPC 传输和 UI 渲染。宿主 UI 展示上限从本常量 import 对齐（唯一真源） */
 export declare const MAX_DIFF_CONTENT_LENGTH = 10240;
@@ -65,7 +90,7 @@ export declare class SecurityGuard {
     permission?: Permission, 
     /** 脚本执行确认开关（独立于写入确认，供对 run_code/run_project_script 单独收紧） */
     confirmScripts?: boolean, 
-    /** Agent 级配置目录（personas/rules/skills 所在目录） */
+    /** Agent 级配置目录（role-packs/rules/skills 所在目录） */
     configDir?: string, 
     /** Agent 级数据目录（宿主传入；内核不假设其下的文件形态） */
     agentDataDir?: string);
@@ -122,16 +147,27 @@ export declare class SecurityGuard {
      */
     confirmScriptRun(targetPath: string, tool: string, description?: string): Promise<boolean>;
     /**
-     * 确认闸公共核心（SSOT：写入确认与脚本执行确认的唯一执行路径）
+     * 命令执行确认（run_command 的执行闸，§13.2）
+     *
+     * 三档判据，与 `confirmScriptRun` **共用同一个 `confirmGate`**（不新造第二套确认路径）：
+     *   1. deny 命中 → **恒拒**（不入确认流程，任何档位/权限都拦）；
+     *   2. ALWAYS_ASK 命中 → **恒弹确认**（即使 owner + confirmScripts=false 也弹；
+     *      将来的 allow 白名单对它无效——不可豁免，§13.2 定案）；
+     *   3. 其余 → 与脚本执行同判据（guest 或 confirmScripts），未注入 handler 时 fail-closed。
+     */
+    confirmCommandRun(command: string, tool: string, description?: string): Promise<boolean>;
+    /**
+     * 确认闸公共核心（SSOT：**全部四类**确认——写入 / 命令 / 代码 / 脚本执行——的唯一执行路径）
      *
      * needConfirm=false → 自动批准（审计 write-auto）；为 true 且未注入 confirmationHandler
      * → fail-closed 拒绝（审计 write-decline）；否则经 confirmViaHandler 走宿主确认 UI。
-     * diff 仅写入场景有，脚本执行不传（域留空）。
+     * diff 仅写入场景有（`requestWriteConfirmation` 唯一传 diff），其余三类不传（域留空），
+     * 宿主据此判「本卡无 diff 域」并跳过写入前后对比渲染。
      */
     private confirmGate;
     /**
-     * 通过宿主注入的 confirmationHandler 执行写入确认（唯一确认执行路径）。
-     * 抛错视为拒绝（fail-closed 安全优先）。
+     * 通过宿主注入的 confirmationHandler 执行确认（**全部四类**确认的唯一执行路径：
+     * 写入 / 命令 / 代码 / 脚本执行）。抛错视为拒绝（fail-closed 安全优先）。
      */
     private confirmViaHandler;
     /** 触发审计事件：写日志 + 通知订阅者 */

package/dist/security/pathGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pathGuard.d.ts","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAgFA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,aAAa,CAAC;AAEvF,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACpF,cAAc;IACd,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,qBAAqB;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;AAExD;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEzF,gBAAgB;AAChB,MAAM,WAAW,qBAAqB;IACpC,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,wDAAwD;IACxD,YAAY,EAAE,OAAO,CAAC;IACtB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAa7C,qBAAa,aAAa;IAyBtB,WAAW;aACK,UAAU,EAAE,UAAU;IAzBxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD;;OAEG;IACH,OAAO,CAAC,mBAAmB,CAAyC;IAEpE,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,wCAAwC;IACxC,OAAO,CAAC,UAAU,CAAW;IAC7B,wDAAwD;IACxD,OAAO,CAAC,YAAY,CAAW;IAE/B,0CAA0C;IACnC,aAAa,EAAE,OAAO,CAAC;IAE9B,2DAA2D;IACpD,cAAc,EAAE,OAAO,CAAC;gBAG7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,MAAM,EAAO,EAChC,aAAa,GAAE,OAAe;IAC9B,WAAW;IACK,UAAU,GAAE,UAAoB;IAChD,4DAA4D;IAC5D,cAAc,GAAE,OAAe;IAC/B,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM;IAClB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM;IAqBvB,gEAAgE;IAChE,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,IAAI;IAInE;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAItC;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIvC;;;;;;;OAOG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI;IAoB3C,6BAA6B;IAC7B,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAQ5C;;;OAGG;IACH,iBAAiB,CACf,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GACvC,IAAI;IAqDP;;;OAGG;IACG,wBAAwB,CAC5B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM;IACpB,wCAAwC;IACxC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACjE,OAAO,CAAC,OAAO,CAAC;IAenB;;;;;;OAMG;IACG,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUhG;;;;;;OAMG;YACW,WAAW;IAmDzB;;;OAGG;YACW,iBAAiB;IA8B/B,yBAAyB;IACzB,OAAO,CAAC,SAAS;CAgBlB"}
+{"version":3,"file":"pathGuard.d.ts","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAkFA,aAAa;AACb,MAAM,MAAM,cAAc;AACxB,4BAA4B;AAC1B,MAAM;AACR,qCAAqC;GACnC,YAAY;AACd,yCAAyC;GACvC,QAAQ,CAAC;AAqFb;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAS/D;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,aAAa,CAAC;AAEvF,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACpF,cAAc;IACd,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,qBAAqB;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEzF,gBAAgB;AAChB,MAAM,WAAW,qBAAqB;IACpC,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,wDAAwD;IACxD,YAAY,EAAE,OAAO,CAAC;IACtB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAa7C,qBAAa,aAAa;IAyBtB,WAAW;aACK,UAAU,EAAE,UAAU;IAzBxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD;;OAEG;IACH,OAAO,CAAC,mBAAmB,CAAyC;IAEpE,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,wCAAwC;IACxC,OAAO,CAAC,UAAU,CAAW;IAC7B,wDAAwD;IACxD,OAAO,CAAC,YAAY,CAAW;IAE/B,0CAA0C;IACnC,aAAa,EAAE,OAAO,CAAC;IAE9B,2DAA2D;IACpD,cAAc,EAAE,OAAO,CAAC;gBAG7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,MAAM,EAAO,EAChC,aAAa,GAAE,OAAe;IAC9B,WAAW;IACK,UAAU,GAAE,UAAoB;IAChD,4DAA4D;IAC5D,cAAc,GAAE,OAAe;IAC/B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM;IAClB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM;IAqBvB,gEAAgE;IAChE,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,IAAI;IAInE;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAItC;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIvC;;;;;;;OAOG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI;IAoB3C,6BAA6B;IAC7B,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAQ5C;;;OAGG;IACH,iBAAiB,CACf,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GACvC,IAAI;IAqDP;;;OAGG;IACG,wBAAwB,CAC5B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM;IACpB,wCAAwC;IACxC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACjE,OAAO,CAAC,OAAO,CAAC;IAenB;;;;;;OAMG;IACG,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUhG;;;;;;;;OAQG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB9F;;;;;;;OAOG;YACW,WAAW;IAqDzB;;;OAGG;YACW,iBAAiB;IA8B/B,yBAAyB;IACzB,OAAO,CAAC,SAAS;CAgBlB"}

package/dist/security/pathGuard.js

@@ -76,6 +76,100 @@ const BLOCKED_PATTERNS = [
 ];
 /** 运行时动态白名单（setAllowedPaths）最大条数，与 config/loader.ts 同值，防白名单膨胀 */
 const MAX_EXTRA_ALLOWED_PATHS = 50;
+/**
+ * 命令黑名单（**恒拦**，不进确认流程）
+ *
+ * 收录标准：不存在「agent 正当使用」场景的破坏性命令——拦掉不影响任何合理任务，
+ * 漏掉则不可逆（数据/系统级）。可逆或有正当场景的写操作走 ALWAYS_ASK，不在此列。
+ *
+ * 匹配形态：**全文 test**（不锚定开头）——shell 复合命令（`echo hi && rm -rf /`）
+ * 里真正执行的是后半段，锚定开头等于给绕过送路。
+ */
+const BLOCKED_COMMAND_PATTERNS = [
+    // 递归强删根目录 / 家目录 / 通配符（项目内受限删除由用户自行确认，不在此列）
+    /rm\s+(-[a-z]*r[a-z]*f|-[a-z]*f[a-z]*r)\s+(\/|\*|~|~\/)/i,
+    /rm\s+-rf\s+(\/|\*|~)/i,
+    // PowerShell 递归强删。两个前瞻断言**顺序无关**——写成
+    // `-Recurse.*-Force` 会漏掉 `-Force -Recurse`（选项顺序由用户决定，不由我们决定）
+    /Remove-Item(?=[^;&|]*-Recurse)(?=[^;&|]*-Force)/i,
+    // 磁盘格式化 / 覆写
+    /format\s+[a-z]:/i,
+    /mkfs(\.[a-z0-9]+)?\b/i,
+    /dd\s+if=/i,
+    // fork bomb（:(){ :|:& };:）
+    /:\(\)\s*\{\s*:\|:&\s*\}\s*;:/,
+];
+/**
+ * 恒询问前缀（ALWAYS_ASK）：正当但不可逆
+ *
+ * 定案理由（§13.2）：deny 会让 agent 从此无法 `git commit`（高频正当操作）；
+ * 本仓血训（Windows git 写操作污染索引）的正确对策是**每次都问且不可豁免**，
+ * 不是永远禁跑。故这类进 ALWAYS_ASK 而非 deny。
+ *
+ * ⚠️ 清单**只增不减**（回归测试锁定内容）。
+ */
+const ALWAYS_ASK_COMMAND_PREFIXES = [
+    'git commit',
+    'git push',
+    'git reset',
+    'git rebase',
+    'git merge',
+    'git checkout --',
+    'npm publish',
+];
+/**
+ * 命令分隔符边界（shell 复合命令的切分点）
+ *
+ * 用途：把「命令是否**以** X 开头」升级为「命令**是否包含** X」——判据本身没变
+ * （这条命令会不会做 git 写操作），变的是**匹配形态**。前缀锚定在复合命令下形同虚设：
+ * `echo hi && git push` / `cd /tmp && git reset --hard` 会整条落到 normal 档直接放行。
+ *
+ * ⚠️ 不做完整 shell 词法解析（引号 / 转义 / 变量展开）：那会把裁决链变成半个 shell 解释器，
+ * 复杂度和出错面都不可控。此处只做**保守匹配**——宁可多弹一次确认（偏保守方向），
+ * 也不可漏判。已知代价：`echo "git push"` 会被多问一次（误报方向安全）。
+ */
+const COMMAND_SEGMENT_BOUNDARY = String.raw `(?:^|[\n;&|]|\(|\)|\{|\})`;
+/**
+ * 恒询问清单 → 判据用模式（**构造级派生**，唯一匹配点）
+ *
+ * 由 `ALWAYS_ASK_COMMAND_PREFIXES` 派生而非另写一张正则表：两份清单必然漂移
+ * （改一处忘另一处 = 安全边界出现静默缺口，且没有任何测试会红）。
+ * 构造期一次性生成，运行时零成本。清单**只增不减**由回归测试锁定。
+ *
+ * **两段式条目允许插入全局选项**（`git -C /other/repo push`）：git 的 `-C <path>` /
+ * `-c k=v` / `--git-dir=<p>` 插在子命令前是常规用法，不留这个口子等于本仓血训
+ * （Windows git 写操作）照旧可绕。三段式及以上（`git checkout --`）原样匹配——
+ * 其尾部 token（`--`）本身是语义标记，插 gap 会让模式失真。
+ */
+const ALWAYS_ASK_COMMAND_PATTERNS = ALWAYS_ASK_COMMAND_PREFIXES.map((prefix) => {
+    const escape = (token) => token.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const [program, ...rest] = prefix.split(' ');
+    const allowGlobalOptions = rest.length === 1;
+    // 全局选项段：`-{1,2}<flag>` 后可跟一个独立参数（`-C <path>`）或 `=` 值（`--git-dir=<p>`）
+    const gap = allowGlobalOptions ? String.raw `(?:\s+-{1,2}\S+(?:=\S+|\s+\S+)?)*` : '';
+    const body = allowGlobalOptions
+        ? String.raw `\s+${escape(rest[0])}`
+        : String.raw `\s+${rest.map(escape).join(String.raw `\s+`)}`;
+    return new RegExp(String.raw `${COMMAND_SEGMENT_BOUNDARY}\s*${escape(program)}${gap}${body}(?![A-Za-z0-9_-])`, 'i');
+});
+/**
+ * 命令裁决（纯函数，命令安全边界的**唯一判据**；§13.2）
+ *
+ * 顺序不可颠倒：deny 优先于 always-ask（一条命令同时命中时以最严为准）。
+ * NFKC 规范化与路径黑名单同款，防全角字符绕过正则。
+ */
+export function classifyCommand(command) {
+    const normalized = command.normalize('NFKC').trim();
+    for (const pattern of BLOCKED_COMMAND_PATTERNS) {
+        if (pattern.test(normalized))
+            return 'deny';
+    }
+    for (const pattern of ALWAYS_ASK_COMMAND_PATTERNS) {
+        if (pattern.test(normalized))
+            return 'always-ask';
+    }
+    return 'normal';
+}
 /** diff 内容最大长度（10KB），防大文件撑爆 IPC 传输和 UI 渲染。宿主 UI 展示上限从本常量 import 对齐（唯一真源） */
 export const MAX_DIFF_CONTENT_LENGTH = 10240;
 function truncateForDiff(content) {
@@ -108,7 +202,7 @@ export class SecurityGuard {
     permission = 'owner', 
     /** 脚本执行确认开关（独立于写入确认，供对 run_code/run_project_script 单独收紧） */
     confirmScripts = false, 
-    /** Agent 级配置目录（personas/rules/skills 所在目录） */
+    /** Agent 级配置目录（role-packs/rules/skills 所在目录） */
     configDir, 
     /** Agent 级数据目录（宿主传入；内核不假设其下的文件形态） */
     agentDataDir) {
@@ -269,11 +363,36 @@ export class SecurityGuard {
         this.permission === 'guest' || this.confirmScripts);
     }
     /**
-     * 确认闸公共核心（SSOT：写入确认与脚本执行确认的唯一执行路径）
+     * 命令执行确认（run_command 的执行闸，§13.2）
+     *
+     * 三档判据，与 `confirmScriptRun` **共用同一个 `confirmGate`**（不新造第二套确认路径）：
+     *   1. deny 命中 → **恒拒**（不入确认流程，任何档位/权限都拦）；
+     *   2. ALWAYS_ASK 命中 → **恒弹确认**（即使 owner + confirmScripts=false 也弹；
+     *      将来的 allow 白名单对它无效——不可豁免，§13.2 定案）；
+     *   3. 其余 → 与脚本执行同判据（guest 或 confirmScripts），未注入 handler 时 fail-closed。
+     */
+    async confirmCommandRun(command, tool, description) {
+        const verdict = classifyCommand(command);
+        if (verdict === 'deny') {
+            this.emitAudit({
+                type: 'write-decline',
+                path: command,
+                tool,
+                decision: 'auto-denied',
+                reason: '命令命中黑名单（恒拦，不进确认流程）',
+                timestamp: nowIso(),
+            });
+            return false;
+        }
+        return this.confirmGate(command, tool, description, verdict === 'always-ask' || this.permission === 'guest' || this.confirmScripts);
+    }
+    /**
+     * 确认闸公共核心（SSOT：**全部四类**确认——写入 / 命令 / 代码 / 脚本执行——的唯一执行路径）
      *
      * needConfirm=false → 自动批准（审计 write-auto）；为 true 且未注入 confirmationHandler
      * → fail-closed 拒绝（审计 write-decline）；否则经 confirmViaHandler 走宿主确认 UI。
-     * diff 仅写入场景有，脚本执行不传（域留空）。
+     * diff 仅写入场景有（`requestWriteConfirmation` 唯一传 diff），其余三类不传（域留空），
+     * 宿主据此判「本卡无 diff 域」并跳过写入前后对比渲染。
      */
     async confirmGate(targetPath, tool, description, needConfirm, diff) {
         // 无需确认：直接放行并记录审计
@@ -296,6 +415,8 @@ export class SecurityGuard {
             needsConfirm: needConfirm,
             beforeContent: diff?.beforeContent,
             afterContent: diff?.afterContent,
+            // diff 域语义判定单点：写入场景传了 diff 参数 → 有域；命令/代码/脚本三类不传 → 无域
+            hasDiff: diff !== undefined,
         };
         // 未注入 confirmationHandler 时 fail-closed 拒绝
         if (!this.confirmationHandler) {
@@ -314,8 +435,8 @@ export class SecurityGuard {
         return this.confirmViaHandler(info, targetPath, tool);
     }
     /**
-     * 通过宿主注入的 confirmationHandler 执行写入确认（唯一确认执行路径）。
-     * 抛错视为拒绝（fail-closed 安全优先）。
+     * 通过宿主注入的 confirmationHandler 执行确认（**全部四类**确认的唯一执行路径：
+     * 写入 / 命令 / 代码 / 脚本执行）。抛错视为拒绝（fail-closed 安全优先）。
      */
     async confirmViaHandler(info, targetPath, tool) {
         try {

package/dist/security/pathGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"pathGuard.js","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;YACjB,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,0BAA0B;IAC1B,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,8BAA8B;IAC9B,oBAAoB;IACpB,qBAAqB;IACrB,kCAAkC;IAClC,sCAAsC;IACtC,uBAAuB;IACvB,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,WAAW;IACX,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,2BAA2B;IAC3B,wCAAwC;IACxC,iFAAiF;IACjF,8BAA8B;IAC9B,oBAAoB;IACpB,eAAe;IACf,wBAAwB;IACxB,8BAA8B;IAC9B,sCAAsC;IACtC,4BAA4B;IAC5B,yCAAyC;IACzC,6DAA6D;IAC7D,uBAAuB;IACvB,8BAA8B;CAC/B,CAAC;AAEF,iEAAiE;AACjE,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAiDnC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAM7C,SAAS,eAAe,CAAC,OAAkC;IACzD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,OAAO,CAAC;IAC9D,uBAAuB;IACvB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG,eAAe,OAAO,CAAC,MAAM,MAAM,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,aAAa;IA0BN;IAzBD,SAAS,GAAoB,EAAE,CAAC;IACjD;;OAEG;IACK,mBAAmB,GAAoC,IAAI,CAAC;IAEpE,wEAAwE;IACvD,SAAS,CAAW;IACrC,wCAAwC;IAChC,UAAU,CAAW;IAC7B,wDAAwD;IAChD,YAAY,CAAW;IAE/B,0CAA0C;IACnC,aAAa,CAAU;IAE9B,2DAA2D;IACpD,cAAc,CAAU;IAE/B,YACE,WAAmB,EACnB,SAAiB,EACjB,oBAA8B,EAAE,EAChC,gBAAyB,KAAK;IAC9B,WAAW;IACK,aAAyB,OAAO;IAChD,4DAA4D;IAC5D,iBAA0B,KAAK;IAC/B,8CAA8C;IAC9C,SAAkB;IAClB,qCAAqC;IACrC,YAAqB;QANL,eAAU,GAAV,UAAU,CAAsB;QAQhD,8DAA8D;QAC9D,IAAI,CAAC,SAAS,GAAG;YACf,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACxC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SACvC,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,oBAAoB;QACpB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,mDAAmD;QACnD,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,gEAAgE;IAChE,mBAAmB,CAAC,OAAwC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAc;QAC7B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAc;QAC9B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,UAAoB;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,aAAa,CAAC,oBAAoB,EAAE,wBAAwB,EAAE;gBAClE,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1F,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,aAAa,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,SAAS,EAAE;oBACvE,yBAAyB;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,6BAA6B;IAC7B,OAAO,CAAC,QAAuB;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,iBAAiB,CACf,YAAoB,EACpB,IAAa,EACb,MAAwC;QAExC,+BAA+B;QAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,yBAAyB;QACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAE7C,WAAW;QACX,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,MAAM,EAAE,YAAY,OAAO,GAAG;oBAC9B,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,MAAM,aAAa,CACjB,cAAc,EACd,MAAM,QAAQ,aAAa,OAAO,GAAG,EACrC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE;YAChD,cAAc;YACd,2BAA2B;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wBAAwB,CAC5B,UAAkB,EAClB,IAAY,EACZ,WAAoB;IACpB,wCAAwC;IACxC,OAAkE;QAElE,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,+BAA+B;QAC/B,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa;QACjD,4BAA4B;QAC5B;YACE,aAAa,EAAE,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC;YACtD,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;SACrD,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAkB,EAAE,IAAY,EAAE,WAAoB;QAC3E,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,2CAA2C;QAC3C,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,CACnD,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,WAAW,CACvB,UAAkB,EAClB,IAAY,EACZ,WAA+B,EAC/B,WAAoB,EACpB,IAA+D;QAE/D,iBAAiB;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uCAAuC;QACvC,MAAM,IAAI,GAA0B;YAClC,UAAU;YACV,IAAI;YACJ,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,IAAI,EAAE,aAAa;YAClC,YAAY,EAAE,IAAI,EAAE,YAAY;SACjC,CAAC;QAEF,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EACjD,+CAA+C,CAChD,CAAC;YACF,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,sCAAsC;gBAC9C,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gEAAgE;QAChE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAC7B,IAA2B,EAC3B,UAAkB,EAClB,IAAY;QAEZ,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAoB,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;gBAC5C,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;gBACvC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2BAA2B;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;gBACtC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,yBAAyB;IACjB,SAAS,CAAC,KAAiB;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"pathGuard.js","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;YACjB,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,0BAA0B;IAC1B,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,8BAA8B;IAC9B,oBAAoB;IACpB,qBAAqB;IACrB,kCAAkC;IAClC,sCAAsC;IACtC,uBAAuB;IACvB,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,WAAW;IACX,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,2BAA2B;IAC3B,wCAAwC;IACxC,iFAAiF;IACjF,8BAA8B;IAC9B,oBAAoB;IACpB,eAAe;IACf,wBAAwB;IACxB,8BAA8B;IAC9B,sCAAsC;IACtC,4BAA4B;IAC5B,yCAAyC;IACzC,6DAA6D;IAC7D,uBAAuB;IACvB,8BAA8B;CAC/B,CAAC;AAEF,iEAAiE;AACjE,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAanC;;;;;;;;GAQG;AACH,MAAM,wBAAwB,GAAa;IACzC,2CAA2C;IAC3C,yDAAyD;IACzD,uBAAuB;IACvB,qCAAqC;IACrC,6DAA6D;IAC7D,kDAAkD;IAClD,aAAa;IACb,kBAAkB;IAClB,uBAAuB;IACvB,WAAW;IACX,2BAA2B;IAC3B,8BAA8B;CAC/B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,2BAA2B,GAAa;IAC5C,YAAY;IACZ,UAAU;IACV,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;IACjB,aAAa;CACd,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAA,2BAA2B,CAAC;AAEvE;;;;;;;;;;;GAWG;AACH,MAAM,2BAA2B,GAAa,2BAA2B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;IACvF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvF,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAC7C,sEAAsE;IACtE,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,IAAI,GAAG,kBAAkB;QAC7B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE;QACpC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC,EAAE,CAAC;IAC7D,OAAO,IAAI,MAAM,CACf,MAAM,CAAC,GAAG,CAAA,GAAG,wBAAwB,MAAM,MAAM,CAAC,OAAQ,CAAC,GAAG,GAAG,GAAG,IAAI,mBAAmB,EAC3F,GAAG,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,YAAY,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AA2DD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAM7C,SAAS,eAAe,CAAC,OAAkC;IACzD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,OAAO,CAAC;IAC9D,uBAAuB;IACvB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG,eAAe,OAAO,CAAC,MAAM,MAAM,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,aAAa;IA0BN;IAzBD,SAAS,GAAoB,EAAE,CAAC;IACjD;;OAEG;IACK,mBAAmB,GAAoC,IAAI,CAAC;IAEpE,wEAAwE;IACvD,SAAS,CAAW;IACrC,wCAAwC;IAChC,UAAU,CAAW;IAC7B,wDAAwD;IAChD,YAAY,CAAW;IAE/B,0CAA0C;IACnC,aAAa,CAAU;IAE9B,2DAA2D;IACpD,cAAc,CAAU;IAE/B,YACE,WAAmB,EACnB,SAAiB,EACjB,oBAA8B,EAAE,EAChC,gBAAyB,KAAK;IAC9B,WAAW;IACK,aAAyB,OAAO;IAChD,4DAA4D;IAC5D,iBAA0B,KAAK;IAC/B,gDAAgD;IAChD,SAAkB;IAClB,qCAAqC;IACrC,YAAqB;QANL,eAAU,GAAV,UAAU,CAAsB;QAQhD,8DAA8D;QAC9D,IAAI,CAAC,SAAS,GAAG;YACf,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACxC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SACvC,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,oBAAoB;QACpB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,mDAAmD;QACnD,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,gEAAgE;IAChE,mBAAmB,CAAC,OAAwC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAc;QAC7B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAc;QAC9B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,UAAoB;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,aAAa,CAAC,oBAAoB,EAAE,wBAAwB,EAAE;gBAClE,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1F,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,aAAa,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,SAAS,EAAE;oBACvE,yBAAyB;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,6BAA6B;IAC7B,OAAO,CAAC,QAAuB;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,iBAAiB,CACf,YAAoB,EACpB,IAAa,EACb,MAAwC;QAExC,+BAA+B;QAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,yBAAyB;QACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAE7C,WAAW;QACX,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,MAAM,EAAE,YAAY,OAAO,GAAG;oBAC9B,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,MAAM,aAAa,CACjB,cAAc,EACd,MAAM,QAAQ,aAAa,OAAO,GAAG,EACrC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE;YAChD,cAAc;YACd,2BAA2B;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wBAAwB,CAC5B,UAAkB,EAClB,IAAY,EACZ,WAAoB;IACpB,wCAAwC;IACxC,OAAkE;QAElE,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,+BAA+B;QAC/B,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa;QACjD,4BAA4B;QAC5B;YACE,aAAa,EAAE,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC;YACtD,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;SACrD,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAkB,EAAE,IAAY,EAAE,WAAoB;QAC3E,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,2CAA2C;QAC3C,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,CACnD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,IAAY,EAAE,WAAoB;QACzE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,oBAAoB;gBAC5B,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CACrB,OAAO,EACP,IAAI,EACJ,WAAW,EACX,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,CAC/E,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,WAAW,CACvB,UAAkB,EAClB,IAAY,EACZ,WAA+B,EAC/B,WAAoB,EACpB,IAA+D;QAE/D,iBAAiB;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uCAAuC;QACvC,MAAM,IAAI,GAA0B;YAClC,UAAU;YACV,IAAI;YACJ,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,IAAI,EAAE,aAAa;YAClC,YAAY,EAAE,IAAI,EAAE,YAAY;YAChC,qDAAqD;YACrD,OAAO,EAAE,IAAI,KAAK,SAAS;SAC5B,CAAC;QAEF,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EACjD,+CAA+C,CAChD,CAAC;YACF,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,sCAAsC;gBAC9C,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gEAAgE;QAChE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAC7B,IAA2B,EAC3B,UAAkB,EAClB,IAAY;QAEZ,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAoB,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;gBAC5C,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;gBACvC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2BAA2B;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;gBACtC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,yBAAyB;IACjB,SAAS,CAAC,KAAiB;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}