@zooique/memora 4.0.0 → 5.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +235 -1743
- package/README.en.md +43 -36
- package/README.md +308 -303
- package/dist/agent/agent.d.ts +46 -82
- package/dist/agent/agent.d.ts.map +1 -1
- package/dist/agent/agent.js +153 -220
- package/dist/agent/agent.js.map +1 -1
- package/dist/agent/assembler.d.ts +3 -16
- package/dist/agent/assembler.d.ts.map +1 -1
- package/dist/agent/assembler.js +76 -47
- package/dist/agent/assembler.js.map +1 -1
- package/dist/agent/backgroundTasks.d.ts +8 -1
- package/dist/agent/backgroundTasks.d.ts.map +1 -1
- package/dist/agent/backgroundTasks.js +8 -1
- package/dist/agent/backgroundTasks.js.map +1 -1
- package/dist/agent/budget.d.ts +23 -5
- package/dist/agent/budget.d.ts.map +1 -1
- package/dist/agent/budget.js +8 -2
- package/dist/agent/budget.js.map +1 -1
- package/dist/agent/builtinToolHandlers.d.ts +50 -10
- package/dist/agent/builtinToolHandlers.d.ts.map +1 -1
- package/dist/agent/builtinToolHandlers.js +67 -20
- package/dist/agent/builtinToolHandlers.js.map +1 -1
- package/dist/agent/builtinTools.d.ts +16 -0
- package/dist/agent/builtinTools.d.ts.map +1 -1
- package/dist/agent/builtinTools.js +15 -4
- package/dist/agent/builtinTools.js.map +1 -1
- package/dist/agent/constants.d.ts +0 -6
- package/dist/agent/constants.d.ts.map +1 -1
- package/dist/agent/constants.js +7 -8
- package/dist/agent/constants.js.map +1 -1
- package/dist/agent/contextManager.d.ts +8 -0
- package/dist/agent/contextManager.d.ts.map +1 -1
- package/dist/agent/contextManager.js +45 -3
- package/dist/agent/contextManager.js.map +1 -1
- package/dist/agent/contextPreparer.d.ts +1 -1
- package/dist/agent/contextPreparer.d.ts.map +1 -1
- package/dist/agent/contextPreparer.js +15 -10
- package/dist/agent/contextPreparer.js.map +1 -1
- package/dist/agent/guardRail.d.ts +25 -10
- package/dist/agent/guardRail.d.ts.map +1 -1
- package/dist/agent/guardRail.js +154 -46
- package/dist/agent/guardRail.js.map +1 -1
- package/dist/agent/loop.d.ts +46 -13
- package/dist/agent/loop.d.ts.map +1 -1
- package/dist/agent/loop.js +145 -32
- package/dist/agent/loop.js.map +1 -1
- package/dist/agent/managers/archiveCoordinator.d.ts +15 -3
- package/dist/agent/managers/archiveCoordinator.d.ts.map +1 -1
- package/dist/agent/managers/archiveCoordinator.js +13 -7
- package/dist/agent/managers/archiveCoordinator.js.map +1 -1
- package/dist/agent/managers/chatLockManager.d.ts +3 -9
- package/dist/agent/managers/chatLockManager.d.ts.map +1 -1
- package/dist/agent/managers/chatLockManager.js +7 -25
- package/dist/agent/managers/chatLockManager.js.map +1 -1
- package/dist/agent/managers/llmCaller.d.ts.map +1 -1
- package/dist/agent/managers/llmCaller.js +27 -1
- package/dist/agent/managers/llmCaller.js.map +1 -1
- package/dist/agent/managers/memoryInspector.d.ts +12 -7
- package/dist/agent/managers/memoryInspector.d.ts.map +1 -1
- package/dist/agent/managers/memoryInspector.js +32 -19
- package/dist/agent/managers/memoryInspector.js.map +1 -1
- package/dist/agent/managers/roundSummaryGenerator.d.ts +3 -1
- package/dist/agent/managers/roundSummaryGenerator.d.ts.map +1 -1
- package/dist/agent/managers/roundSummaryGenerator.js +14 -4
- package/dist/agent/managers/roundSummaryGenerator.js.map +1 -1
- package/dist/agent/managers/sessionArchiver.d.ts +20 -6
- package/dist/agent/managers/sessionArchiver.d.ts.map +1 -1
- package/dist/agent/managers/sessionArchiver.js +19 -5
- package/dist/agent/managers/sessionArchiver.js.map +1 -1
- package/dist/agent/managers/sessionManager.d.ts +21 -88
- package/dist/agent/managers/sessionManager.d.ts.map +1 -1
- package/dist/agent/managers/sessionManager.js +77 -278
- package/dist/agent/managers/sessionManager.js.map +1 -1
- package/dist/agent/seed/orchestrator.d.ts.map +1 -1
- package/dist/agent/seed/orchestrator.js +3 -3
- package/dist/agent/seed/orchestrator.js.map +1 -1
- package/dist/agent/seed/prepare.d.ts.map +1 -1
- package/dist/agent/seed/prepare.js +9 -4
- package/dist/agent/seed/prepare.js.map +1 -1
- package/dist/agent/seed/types.d.ts +11 -4
- package/dist/agent/seed/types.d.ts.map +1 -1
- package/dist/agent/seed/types.js +2 -2
- package/dist/agent/toolExecutor.d.ts +69 -18
- package/dist/agent/toolExecutor.d.ts.map +1 -1
- package/dist/agent/toolExecutor.js +188 -28
- package/dist/agent/toolExecutor.js.map +1 -1
- package/dist/agent/toolResultCache.js +1 -1
- package/dist/agent/toolRunner.d.ts +4 -2
- package/dist/agent/toolRunner.d.ts.map +1 -1
- package/dist/agent/toolRunner.js +7 -4
- package/dist/agent/toolRunner.js.map +1 -1
- package/dist/agent/types.d.ts +8 -25
- package/dist/agent/types.d.ts.map +1 -1
- package/dist/index.d.ts +9 -20
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +35 -32
- package/dist/index.js.map +1 -1
- package/dist/logging/logger.d.ts +4 -1
- package/dist/logging/logger.d.ts.map +1 -1
- package/dist/logging/logger.js +5 -2
- package/dist/logging/logger.js.map +1 -1
- package/dist/memory/gcService.d.ts.map +1 -1
- package/dist/memory/gcService.js +3 -5
- package/dist/memory/gcService.js.map +1 -1
- package/dist/memory/inMemorySessionStore.d.ts +2 -2
- package/dist/memory/inMemorySessionStore.js +2 -2
- package/dist/memory/inMemoryStorage.d.ts +4 -3
- package/dist/memory/inMemoryStorage.d.ts.map +1 -1
- package/dist/memory/inMemoryStorage.js +2 -2
- package/dist/memory/inMemoryStorage.js.map +1 -1
- package/dist/memory/nodeSqliteStorage.d.ts +17 -0
- package/dist/memory/nodeSqliteStorage.d.ts.map +1 -0
- package/dist/memory/nodeSqliteStorage.js +393 -0
- package/dist/memory/nodeSqliteStorage.js.map +1 -0
- package/dist/memory/projectManager.d.ts +10 -20
- package/dist/memory/projectManager.d.ts.map +1 -1
- package/dist/memory/projectManager.js +27 -41
- package/dist/memory/projectManager.js.map +1 -1
- package/dist/memory/roundStore.d.ts +76 -1
- package/dist/memory/roundStore.d.ts.map +1 -1
- package/dist/memory/roundStore.js.map +1 -1
- package/dist/memory/roundSummaryLookup.d.ts +26 -0
- package/dist/memory/roundSummaryLookup.d.ts.map +1 -0
- package/dist/memory/roundSummaryLookup.js +19 -0
- package/dist/memory/roundSummaryLookup.js.map +1 -0
- package/dist/memory/sessionStore.d.ts +19 -2
- package/dist/memory/sessionStore.d.ts.map +1 -1
- package/dist/memory/sessionStore.js.map +1 -1
- package/dist/memory/sourceValidation.d.ts +2 -13
- package/dist/memory/sourceValidation.d.ts.map +1 -1
- package/dist/memory/sourceValidation.js +5 -16
- package/dist/memory/sourceValidation.js.map +1 -1
- package/dist/memory/storageInterface.d.ts +26 -16
- package/dist/memory/storageInterface.d.ts.map +1 -1
- package/dist/memory/supersedeResolve.d.ts +39 -0
- package/dist/memory/supersedeResolve.d.ts.map +1 -0
- package/dist/memory/supersedeResolve.js +16 -0
- package/dist/memory/supersedeResolve.js.map +1 -0
- package/dist/memory/types.d.ts +3 -2
- package/dist/memory/types.d.ts.map +1 -1
- package/dist/memory/types.js +2 -1
- package/dist/memory/types.js.map +1 -1
- package/dist/role-pack/rolePackManager.d.ts +33 -24
- package/dist/role-pack/rolePackManager.d.ts.map +1 -1
- package/dist/role-pack/rolePackManager.js +48 -42
- package/dist/role-pack/rolePackManager.js.map +1 -1
- package/dist/role-pack/strategyKeys.d.ts +8 -0
- package/dist/role-pack/strategyKeys.d.ts.map +1 -1
- package/dist/role-pack/strategyKeys.js +10 -0
- package/dist/role-pack/strategyKeys.js.map +1 -1
- package/dist/role-pack/strategyResolver.d.ts +6 -1
- package/dist/role-pack/strategyResolver.d.ts.map +1 -1
- package/dist/role-pack/strategyResolver.js +20 -2
- package/dist/role-pack/strategyResolver.js.map +1 -1
- package/dist/role-pack/types.d.ts +5 -1
- package/dist/role-pack/types.d.ts.map +1 -1
- package/dist/security/confirmEntries.d.ts +21 -6
- package/dist/security/confirmEntries.d.ts.map +1 -1
- package/dist/security/confirmEntries.js +21 -6
- package/dist/security/confirmEntries.js.map +1 -1
- package/dist/security/pathGuard.d.ts +44 -10
- package/dist/security/pathGuard.d.ts.map +1 -1
- package/dist/security/pathGuard.js +70 -10
- package/dist/security/pathGuard.js.map +1 -1
- package/dist/utils/backgroundTask.d.ts +56 -34
- package/dist/utils/backgroundTask.d.ts.map +1 -1
- package/dist/utils/backgroundTask.js +130 -99
- package/dist/utils/backgroundTask.js.map +1 -1
- package/dist/utils/errors.d.ts +3 -2
- package/dist/utils/errors.d.ts.map +1 -1
- package/dist/utils/errors.js +3 -2
- package/dist/utils/errors.js.map +1 -1
- package/dist/utils/eventEmitter.d.ts +20 -22
- package/dist/utils/eventEmitter.d.ts.map +1 -1
- package/dist/utils/eventEmitter.js +0 -3
- package/dist/utils/eventEmitter.js.map +1 -1
- package/dist/utils/time.d.ts +3 -3
- package/dist/utils/time.d.ts.map +1 -1
- package/dist/utils/time.js +3 -3
- package/dist/utils/time.js.map +1 -1
- package/dist/utils/toError.d.ts +1 -1
- package/dist/utils/toError.js +1 -1
- package/dist/web-fetch/loginWall.d.ts +39 -0
- package/dist/web-fetch/loginWall.d.ts.map +1 -0
- package/dist/web-fetch/loginWall.js +78 -0
- package/dist/web-fetch/loginWall.js.map +1 -0
- package/dist/web-fetch/types.d.ts +8 -0
- package/dist/web-fetch/types.d.ts.map +1 -1
- package/dist/web-fetch/webFetchProvider.d.ts.map +1 -1
- package/dist/web-fetch/webFetchProvider.js +3 -1
- package/dist/web-fetch/webFetchProvider.js.map +1 -1
- package/dist/web-search/fetchWebSearchProvider.js +28 -23
- package/dist/web-search/fetchWebSearchProvider.js.map +1 -1
- package/docs/architecture/role-pack-authoring-guide.md +7 -1
- package/docs/architecture/role-pack-spec.md +11 -6
- package/docs/memora-api-reference.md +1354 -1276
- package/docs/memora-/345/215/207/347/272/247/346/214/207/345/215/227-4.x-/345/210/260-5.0.0.md +385 -0
- package/docs/memora-/346/216/245/345/205/245/346/214/207/345/215/227.md +89 -49
- package/docs/role-pack-/345/274/200/346/224/276/351/224/256/346/214/207/345/215/227.md +148 -148
- package/package.json +13 -4
- package/role-packs/README.md +41 -40
- package/role-packs/memora/345/212/251/346/211/213/rules.md +5 -4
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/manifest.json +1 -0
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/persona.md +46 -46
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/rules.md +17 -16
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/skills/emotion-wave.md +46 -46
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/skills/foreshadow.md +29 -29
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/skills/outline-expand.md +73 -48
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/skills/project-init/scripts/init-novel-project.mjs +445 -441
- package/role-packs//345/205/261/351/270/243/345/260/217/350/257/264/345/256/266/skills/story-bible.md +62 -62
- package/role-packs//347/231/275/350/257/235/346/226/271/346/241/210/350/256/276/350/256/241/345/270/210/manifest.json +1 -0
- package/role-packs//347/231/275/350/257/235/346/226/271/346/241/210/350/256/276/350/256/241/345/270/210/rules.md +2 -1
- package/dist/agent/managers/dedupManager.d.ts +0 -85
- package/dist/agent/managers/dedupManager.d.ts.map +0 -1
- package/dist/agent/managers/dedupManager.js +0 -248
- package/dist/agent/managers/dedupManager.js.map +0 -1
- package/dist/agent/managers/goalConsistencyChecker.d.ts +0 -42
- package/dist/agent/managers/goalConsistencyChecker.d.ts.map +0 -1
- package/dist/agent/managers/goalConsistencyChecker.js +0 -178
- package/dist/agent/managers/goalConsistencyChecker.js.map +0 -1
- package/dist/agent/managers/llmJudgeHelper.d.ts +0 -21
- package/dist/agent/managers/llmJudgeHelper.d.ts.map +0 -1
- package/dist/agent/managers/llmJudgeHelper.js +0 -32
- package/dist/agent/managers/llmJudgeHelper.js.map +0 -1
- package/dist/agent/managers/memoryAdvisor.d.ts +0 -105
- package/dist/agent/managers/memoryAdvisor.d.ts.map +0 -1
- package/dist/agent/managers/memoryAdvisor.js +0 -322
- package/dist/agent/managers/memoryAdvisor.js.map +0 -1
- package/dist/agent/managers/memoryGovernance.d.ts +0 -24
- package/dist/agent/managers/memoryGovernance.d.ts.map +0 -1
- package/dist/agent/managers/memoryGovernance.js +0 -46
- package/dist/agent/managers/memoryGovernance.js.map +0 -1
- package/dist/memory/governance.d.ts +0 -17
- package/dist/memory/governance.d.ts.map +0 -1
- package/dist/memory/governance.js +0 -17
- package/dist/memory/governance.js.map +0 -1
- package/dist/memory/projectRegistry.d.ts +0 -47
- package/dist/memory/projectRegistry.d.ts.map +0 -1
- package/dist/memory/projectRegistry.js +0 -151
- package/dist/memory/projectRegistry.js.map +0 -1
- package/dist/utils/recallDefaults.d.ts +0 -16
- package/dist/utils/recallDefaults.d.ts.map +0 -1
- package/dist/utils/recallDefaults.js +0 -16
- package/dist/utils/recallDefaults.js.map +0 -1
|
@@ -47,6 +47,11 @@ export declare function resolveProviderRouting(strategy: BehaviorStrategy | unde
|
|
|
47
47
|
* ask_user 工具的 turn 粒度硬护栏取值(SSOT:assembleRolePack 的 prompt 引导与 loop 拦截共用)。
|
|
48
48
|
*/
|
|
49
49
|
export declare function resolveAskLimit(strategy: BehaviorStrategy | undefined): number;
|
|
50
|
+
/**
|
|
51
|
+
* 解析联网搜索次数上限(内核已消费):整数且 ∈ [1, MAX_WEB_SEARCH_LIMIT] 才采用,缺失/越界回退默认 6。
|
|
52
|
+
* web_search 工具的 turn 粒度硬护栏取值(与 resolveAskLimit 完全同构,SSOT:loop 护栏注入共用)。
|
|
53
|
+
*/
|
|
54
|
+
export declare function resolveWebSearchLimit(strategy: BehaviorStrategy | undefined): number;
|
|
50
55
|
/**
|
|
51
56
|
* 解析角色包上下文上限。合法 = `0`(不设额外上限)或整数 ∈ [MIN_CONTEXT_LIMIT, MAX_CONTEXT_LIMIT];
|
|
52
57
|
* 其余(未声明 / 越界 / 小数 / 非数)→ 0(不设额外上限,有效窗口 = provider 窗口)。
|
|
@@ -80,7 +85,7 @@ export declare const DEFAULT_L2_STRATEGY: L2RuntimeStrategy;
|
|
|
80
85
|
* 解析 L2 运行时策略(Agent 层单一装配入口,免逐项 setXxx)
|
|
81
86
|
*
|
|
82
87
|
* 聚合现有各 resolveXxx(工具模式→toolCallsBlocked、工具步数、错误处理、Provider 路由、
|
|
83
|
-
* Token
|
|
88
|
+
* Token/步数预算、多步推理、主动提问上限、联网搜索上限、工具只读)+ reflect.selfReview;
|
|
84
89
|
* 非法值经各 resolve* 归位内核默认;selfReview 归一为布尔数字「0=关闭 / 正整数 >0 归一为 1」。
|
|
85
90
|
*
|
|
86
91
|
* @param strategy 合并后的行为策略(角色包声明,可为空)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"strategyResolver.d.ts","sourceRoot":"","sources":["../../src/role-pack/strategyResolver.ts"],"names":[],"mappings":"AAAA;;GAEG;
|
|
1
|
+
{"version":3,"file":"strategyResolver.d.ts","sourceRoot":"","sources":["../../src/role-pack/strategyResolver.ts"],"names":[],"mappings":"AAAA;;GAEG;AAuBH,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,gBAAgB,EAEhB,OAAO,EACP,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAc5D;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,gBAsC9B,CAAC;AAMX;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,eAAe,EAAE,eAAe,GAAG,IAAI,EACvC,QAAQ,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GACnC,gBAAgB,CAIlB;AAkBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO9F;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,QAAQ,CAEhF;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CASnF;AAED,iHAAiH;AACjH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,aAAa,CAE1F;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,eAAe,CAE9F;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAS9E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CASpF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAOlF;AAED;oGACoG;AACpG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAOhF;AAED,+GAA+G;AAC/G,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GACrC,kBAAkB,CAEpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,YAAY,CAExF;AAMD;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,iBAAgD,CAAC;AAEnF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,iBAAiB,CAsB3F;AAMD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,SAAS,GAC9C,gBAAgB,CASlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB,CAyDjE"}
|
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
*/
|
|
4
4
|
// role-pack 与 memory 层均不持有召回保底(记忆纯工具化召回,无自动注入通道)。
|
|
5
5
|
// 数值键上下限常量(SSOT):validator 与 resolver 共用同一区间来源,越界值回退内核默认
|
|
6
|
-
import { DEFAULT_MAX_ITERATIONS, ERROR_HANDLINGS, MAX_ASK_LIMIT, MAX_SELF_REVIEW_ROUNDS, MAX_STEP_BUDGET, MAX_SUMMARY_FOCUS_LENGTH, MAX_CONTEXT_LIMIT, MIN_CONTEXT_LIMIT, MIN_STEP_BUDGET, MAX_TOOL_STEP_LIMIT, MULTI_STEP_REASONINGS, PROVIDER_ROUTINGS, SUMMARY_MODES, TOOL_MODES, TOOL_READONLY_MODES, } from './strategyKeys.js';
|
|
6
|
+
import { DEFAULT_MAX_ITERATIONS, ERROR_HANDLINGS, MAX_ASK_LIMIT, MAX_SELF_REVIEW_ROUNDS, MAX_STEP_BUDGET, MAX_SUMMARY_FOCUS_LENGTH, MAX_CONTEXT_LIMIT, MIN_CONTEXT_LIMIT, MIN_STEP_BUDGET, MAX_TOOL_STEP_LIMIT, MAX_WEB_SEARCH_LIMIT, MULTI_STEP_REASONINGS, PROVIDER_ROUTINGS, SUMMARY_MODES, TOOL_MODES, TOOL_READONLY_MODES, } from './strategyKeys.js';
|
|
7
7
|
// ════════════════════════════════════════════════════════════
|
|
8
8
|
// 默认值常量
|
|
9
9
|
// ════════════════════════════════════════════════════════════
|
|
@@ -50,6 +50,10 @@ export const DEFAULT_BEHAVIOR_STRATEGY = {
|
|
|
50
50
|
errorHandling: 'retry',
|
|
51
51
|
askOn: ['ambiguity', 'decision', 'missing_info'],
|
|
52
52
|
askLimit: 10,
|
|
53
|
+
// 联网搜索硬上限缺省值(真源唯一 = 本键,2026-10-16 起):运行时 loop 护栏恒读
|
|
54
|
+
// strategy.webSearchLimit,缺省 6 定义在本对象、回退也回退本对象(resolveWebSearchLimit),
|
|
55
|
+
// 曾经的镜像 LOOP_CONSTANTS.MAX_WEB_SEARCH_CALLS 已删(零读取幽灵旋钮,见其删后注记)。
|
|
56
|
+
webSearchLimit: 6,
|
|
53
57
|
},
|
|
54
58
|
};
|
|
55
59
|
// ════════════════════════════════════════════════════════════
|
|
@@ -142,6 +146,19 @@ export function resolveAskLimit(strategy) {
|
|
|
142
146
|
// 非法/缺失回退到 DEFAULT_BEHAVIOR_STRATEGY 的 askLimit(SSOT 单点:不再硬编码 3)
|
|
143
147
|
return valid ? candidate : DEFAULT_BEHAVIOR_STRATEGY.global.askLimit;
|
|
144
148
|
}
|
|
149
|
+
/**
|
|
150
|
+
* 解析联网搜索次数上限(内核已消费):整数且 ∈ [1, MAX_WEB_SEARCH_LIMIT] 才采用,缺失/越界回退默认 6。
|
|
151
|
+
* web_search 工具的 turn 粒度硬护栏取值(与 resolveAskLimit 完全同构,SSOT:loop 护栏注入共用)。
|
|
152
|
+
*/
|
|
153
|
+
export function resolveWebSearchLimit(strategy) {
|
|
154
|
+
const candidate = strategy?.global?.webSearchLimit;
|
|
155
|
+
const valid = typeof candidate === 'number' &&
|
|
156
|
+
Number.isInteger(candidate) &&
|
|
157
|
+
candidate >= 1 &&
|
|
158
|
+
candidate <= MAX_WEB_SEARCH_LIMIT;
|
|
159
|
+
// 非法/缺失回退到 DEFAULT_BEHAVIOR_STRATEGY 的 webSearchLimit(SSOT 单点 = 内核缺省 6)
|
|
160
|
+
return valid ? candidate : DEFAULT_BEHAVIOR_STRATEGY.global.webSearchLimit;
|
|
161
|
+
}
|
|
145
162
|
/**
|
|
146
163
|
* 解析角色包上下文上限。合法 = `0`(不设额外上限)或整数 ∈ [MIN_CONTEXT_LIMIT, MAX_CONTEXT_LIMIT];
|
|
147
164
|
* 其余(未声明 / 越界 / 小数 / 非数)→ 0(不设额外上限,有效窗口 = provider 窗口)。
|
|
@@ -194,7 +211,7 @@ export const DEFAULT_L2_STRATEGY = resolveL2Strategy(undefined);
|
|
|
194
211
|
* 解析 L2 运行时策略(Agent 层单一装配入口,免逐项 setXxx)
|
|
195
212
|
*
|
|
196
213
|
* 聚合现有各 resolveXxx(工具模式→toolCallsBlocked、工具步数、错误处理、Provider 路由、
|
|
197
|
-
* Token
|
|
214
|
+
* Token/步数预算、多步推理、主动提问上限、联网搜索上限、工具只读)+ reflect.selfReview;
|
|
198
215
|
* 非法值经各 resolve* 归位内核默认;selfReview 归一为布尔数字「0=关闭 / 正整数 >0 归一为 1」。
|
|
199
216
|
*
|
|
200
217
|
* @param strategy 合并后的行为策略(角色包声明,可为空)
|
|
@@ -218,6 +235,7 @@ export function resolveL2Strategy(strategy) {
|
|
|
218
235
|
stepBudget: resolveStepBudget(strategy),
|
|
219
236
|
multiStepReasoning: resolveMultiStepReasoning(strategy),
|
|
220
237
|
askLimit: resolveAskLimit(strategy),
|
|
238
|
+
webSearchLimit: resolveWebSearchLimit(strategy),
|
|
221
239
|
toolReadonly: resolveToolReadonly(strategy),
|
|
222
240
|
};
|
|
223
241
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"strategyResolver.js","sourceRoot":"","sources":["../../src/role-pack/strategyResolver.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,mDAAmD;AAEnD,yDAAyD;AACzD,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAiB3B,+DAA+D;AAC/D,QAAQ;AACR,+DAA+D;AAE/D,+DAA+D;AAC/D,+BAA+B;AAC/B,iEAAiE;AACjE,+DAA+D;AAE/D,iEAAiE;AACjE,+BAA+B;AAE/B;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,OAAO,EAAE;QACP,YAAY,EAAE,SAAS,EAAE,oCAAoC;KAC9D;IACD,GAAG,EAAE;QACH,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,GAAG;QAChB;;;;;;;WAOG;QACH,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,MAAM;QACvB,kBAAkB,EAAE,MAAM;KAC3B;IACD,OAAO,EAAE;QACP,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,QAAQ;KACvB;IACD,MAAM,EAAE;QACN,YAAY,EAAE,CAAC,EAAE,8CAA8C;QAC/D,2DAA2D;QAC3D,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;QAChD,QAAQ,EAAE,EAAE;
|
|
1
|
+
{"version":3,"file":"strategyResolver.js","sourceRoot":"","sources":["../../src/role-pack/strategyResolver.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,mDAAmD;AAEnD,yDAAyD;AACzD,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAiB3B,+DAA+D;AAC/D,QAAQ;AACR,+DAA+D;AAE/D,+DAA+D;AAC/D,+BAA+B;AAC/B,iEAAiE;AACjE,+DAA+D;AAE/D,iEAAiE;AACjE,+BAA+B;AAE/B;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,OAAO,EAAE;QACP,YAAY,EAAE,SAAS,EAAE,oCAAoC;KAC9D;IACD,GAAG,EAAE;QACH,QAAQ,EAAE,OAAO;QACjB,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,GAAG;QAChB;;;;;;;WAOG;QACH,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,MAAM;QACvB,kBAAkB,EAAE,MAAM;KAC3B;IACD,OAAO,EAAE;QACP,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,QAAQ;KACvB;IACD,MAAM,EAAE;QACN,YAAY,EAAE,CAAC,EAAE,8CAA8C;QAC/D,2DAA2D;QAC3D,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;QAChD,QAAQ,EAAE,EAAE;QACZ,mDAAmD;QACnD,uEAAuE;QACvE,gEAAgE;QAChE,cAAc,EAAE,CAAC;KAClB;CACO,CAAC;AAEX,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAuC,EACvC,QAAoC;IAEpC,MAAM,IAAI,GAAG,eAAe,EAAE,SAAS,EAAE,EAAE,QAAQ,IAAI,yBAAyB,CAAC;IACjF,0DAA0D;IAC1D,OAAO,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAmB,KAAc,EAAE,OAAqB,EAAE,QAAW;IACzF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChF,CAAC,CAAE,KAAW;QACd,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,oBAAoB;AACpB,+DAA+D;AAE/D,sCAAsC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,MAAM,SAAS,GAAG,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC;IAClD,OAAO,OAAO,SAAS,KAAK,QAAQ;QAClC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC3B,SAAS,CAAC,MAAM,IAAI,wBAAwB;QAC5C,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,QAAsC;IACpE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,QAAsC;IACnE,OAAO,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,MAAM,SAAS,GAAG,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC;IAC/C,uCAAuC;IACvC,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,mBAAmB,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAsC;IAC3E,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAsC;IACpE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC7C,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,aAAa,CAAC;IAC7B,iEAAiE;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAO,CAAC,QAAS,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAsC;IAC1E,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC;IACnD,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,SAAS,IAAI,oBAAoB,CAAC;IACpC,wEAAwE;IACxE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAO,CAAC,cAAe,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC;IACjD,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,iBAAiB,IAAI,SAAS,IAAI,iBAAiB,CAAC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,iBAAiB,CAAC,QAAsC;IACtE,MAAM,SAAS,GAAG,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;IAC/C,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC7B,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3B,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;AACpD,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,yBAAyB,CACvC,QAAsC;IAEtC,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsC;IACxE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,+DAA+D;AAC/D,uBAAuB;AACvB,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB,iBAAiB,CAAC,SAAS,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAsC;IACtE,gDAAgD;IAChD,sDAAsD;IACtD,MAAM,aAAa,GAAG,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC;IACpD,MAAM,iBAAiB,GACrB,OAAO,aAAa,KAAK,QAAQ;QACjC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAC/B,aAAa,GAAG,CAAC;QACjB,aAAa,IAAI,sBAAsB,CAAC;IAC1C,OAAO;QACL,gBAAgB,EAAE,eAAe,CAAC,QAAQ,CAAC,KAAK,OAAO;QACvD,iBAAiB;QACjB,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC7C,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC7C,eAAe,EAAE,sBAAsB,CAAC,QAAQ,CAAC;QACjD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;QAC3C,UAAU,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QACvC,kBAAkB,EAAE,yBAAyB,CAAC,QAAQ,CAAC;QACvD,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,cAAc,EAAE,qBAAqB,CAAC,QAAQ,CAAC;QAC/C,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,UAAU;AACV,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAsB,EACtB,QAA+C;IAE/C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;QACjD,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE;QACrC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;QACjD,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,oCAAoC;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,yBAAyB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEzE,gCAAgC;IAChC,MAAM,WAAW,GAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,0DAA0D;IAC1D,2DAA2D;IAC3D,sCAAsC;IACtC,IAAI,QAAQ,CAAC,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QACrC,gEAAgE;QAChE,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,WAAW;oBACd,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAChC,MAAM;gBACR,KAAK,UAAU;oBACb,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9B,MAAM;gBACR,KAAK,cAAc;oBACjB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7B,MAAM;gBACR,KAAK,SAAS;oBACZ,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7B,MAAM;YACV,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CACd,cAAc,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,QAAQ,+IAA+I,CAC9O,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/C,qCAAqC;IACrC,MAAM,YAAY,GAAkC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAE5E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;QACZ,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}
|
|
@@ -71,6 +71,8 @@ export interface GlobalStrategy {
|
|
|
71
71
|
readonly askOn?: AskOnTrigger | readonly AskOnTrigger[];
|
|
72
72
|
/** 主动提问次数上限:按一次用户输入(turn 粒度)计,防单次输入被打断过多次(默认 10) */
|
|
73
73
|
readonly askLimit?: number;
|
|
74
|
+
/** 联网搜索次数上限:按一次用户输入(turn 粒度)计,web_search 硬护栏拦截超限调用(默认 6) */
|
|
75
|
+
readonly webSearchLimit?: number;
|
|
74
76
|
}
|
|
75
77
|
/**
|
|
76
78
|
* L2 行为策略全集
|
|
@@ -78,7 +80,7 @@ export interface GlobalStrategy {
|
|
|
78
80
|
* 诚实化声明:本集合是"设计空间"非"承诺面"——被实际消费的字段为
|
|
79
81
|
* prepare 的 summaryFocus(round-summary 提炼视角);
|
|
80
82
|
* act 的 toolMode/temperature/outputLimit/toolStepLimit/providerRouting/multiStepReasoning/toolReadonly;
|
|
81
|
-
* reflect 的 summary/selfReview/userFollowup;global 的 askOn/askLimit/errorHandling/contextLimit/stepBudget。
|
|
83
|
+
* reflect 的 summary/selfReview/userFollowup;global 的 askOn/askLimit/webSearchLimit/errorHandling/contextLimit/stepBudget。
|
|
82
84
|
* 边界纪律:无 understandingConfirm 开放键(并入 askOn['confirm']/ask_user,见文件头注);无 costBudget 键(内核无定价能力、宿主无执行者,无消费者的策略键不保留,遵循"预留键非承诺"纪律)。
|
|
83
85
|
*/
|
|
84
86
|
export interface BehaviorStrategy {
|
|
@@ -115,6 +117,8 @@ export interface L2RuntimeStrategy {
|
|
|
115
117
|
readonly multiStepReasoning: MultiStepReasoning;
|
|
116
118
|
/** 主动提问次数上限(global.askLimit:turn 粒度防打扰;ask_user 硬护栏拦截超限调用) */
|
|
117
119
|
readonly askLimit: number;
|
|
120
|
+
/** 联网搜索次数上限(global.webSearchLimit:turn 粒度;web_search 硬护栏拦截超限调用) */
|
|
121
|
+
readonly webSearchLimit: number;
|
|
118
122
|
/** 工具只读模式(act.toolReadonly) */
|
|
119
123
|
readonly toolReadonly: ToolReadonly;
|
|
120
124
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/role-pack/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAW9D,yFAAyF;AACzF,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,sFAAsF;AACtF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxE,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEtC,qEAAqE;AACrE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,qFAAqF;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAIzD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qBAAqB;AACrB,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,wBAAwB;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gCAAgC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,4BAA4B;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CAClD;AAED,yBAAyB;AACzB,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;CACtC;AAED,gBAAgB;AAChB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,YAAY,EAAE,CAAC;IACxD,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/role-pack/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,cAAc,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAW9D,yFAAyF;AACzF,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,sFAAsF;AACtF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxE,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEtC,qEAAqE;AACrE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,qFAAqF;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAIzD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qBAAqB;AACrB,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,wBAAwB;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gCAAgC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,4BAA4B;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CAClD;AAED,yBAAyB;AACzB,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;CACtC;AAED,gBAAgB;AAChB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,YAAY,EAAE,CAAC;IACxD,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,cAAc;IACd,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;IAC3B,cAAc;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,cAAc;IACd,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAMD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,2FAA2F;IAC3F,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,yCAAyC;IACzC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qCAAqC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,+BAA+B;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,kBAAkB;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY;IACZ,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU;IACV,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,GAAG,WAAW,CAAC;IAC1D,yBAAyB;IACzB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,0BAA0B;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;IACtC,qDAAqD;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAI5B,iDAAiD;IACjD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAIrD,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAErC,qDAAqD;IACrD,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC7C;AAMD,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,aAAa;IACb,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,uCAAuC;IACvC,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACrD,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC;6CACyC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAID,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,6GAA6G;IAC7G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,8GAA8G;YAC9G,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,8EAA8E;YAC9E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;SACvB,CAAC,CAAC;KACJ,CAAC;IACF,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC"}
|
|
@@ -1,10 +1,22 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* 执行面 → 确认入口 登记表(CMD-1-BYPASS,2026-10-03)
|
|
3
3
|
*
|
|
4
|
-
*
|
|
5
|
-
*
|
|
6
|
-
*
|
|
7
|
-
*
|
|
4
|
+
* 背景(实锤 → 2026-10-25 已补洞,保留原委供追溯):`classifyCommand`(deny / always-ask)
|
|
5
|
+
* 的调用点曾**只有** `SecurityGuard.confirmCommandRun`,而 `confirmCommandRun` 的唯一调用点
|
|
6
|
+
* 又是 `toolExecutor` 的 `run_command` 分支 ⇒ 命令内容裁决只锁**一个**执行面,其余执行面
|
|
7
|
+
* 走 `confirmScriptRun` 只判权限档位、不看执行内容 ⇒ 「把 git push 写进脚本」零护栏。
|
|
8
|
+
*
|
|
9
|
+
* **现状(2026-10-25 CMD-1-BYPASS + CMD-1-CONTENT 双双关闭,四个执行面齐)**:
|
|
10
|
+
* `confirmScriptRun` 接受可选 `content` 并把它喂给**同一个** `classifyCommand`
|
|
11
|
+
* (判据仍单点)⇒ run_code / run_project_script / run_skill_script 三个 script 面
|
|
12
|
+
* **全部**按正文裁决(deny 恒拦 / always-ask 恒弹 / normal 回落档位)。
|
|
13
|
+
* run_skill_script 的正文来源 = 内核 assembler 注入的 `resolveSkillScript` 回调
|
|
14
|
+
* (与执行回调同一个解析函数——路径解析与执行本就在内核,2026-10-25 探口实证推翻
|
|
15
|
+
* 「宿主回调执行、内核拿不到正文」的旧前提);解析不到 = 不传正文(维持
|
|
16
|
+
* [ERR:SCRIPT_NOT_FOUND] 语义),读失败 / 超 SCRIPT_READ_MAX_LEN = fail-closed decline。
|
|
17
|
+
*
|
|
18
|
+
* 本表的价值不因补洞而消失:它仍然是「每个执行面走哪个确认入口」的唯一真源,且 script 面
|
|
19
|
+
* 的语义现在是「档位判据 + 可选内容裁决」,与 command 面「内容裁决 + 档位判据」仍不同构。
|
|
8
20
|
*
|
|
9
21
|
* 登记表 = 把「每个执行面走哪个确认入口」从「散在四个 case 分支里的隐式默认值」变成**显式单一真源**:
|
|
10
22
|
* 新增执行面时**必须**在此登记,否则守卫测试(confirmEntry.test.ts 的穷举性断言)即红。
|
|
@@ -12,8 +24,11 @@
|
|
|
12
24
|
* 真源关系(禁再独立枚举工具名):「哪些工具是执行面」由 `builtinTools` 的 `diskWrite === 'opaque'`
|
|
13
25
|
* 派生(`OPAQUE_WRITE_TOOL_NAMES`)⇒ 本表**只登记入口**,不复制第二份工具清单。
|
|
14
26
|
*
|
|
15
|
-
* - `command`:走 `confirmCommandRun`(内容裁决 DENY/always-ask +
|
|
16
|
-
* - `script` :走 `confirmScriptRun
|
|
27
|
+
* - `command`:走 `confirmCommandRun`(内容裁决 DENY/always-ask + 确认档位;target = 命令原文)
|
|
28
|
+
* - `script` :走 `confirmScriptRun`(确认档位 + **可选内容裁决**:传入正文时按
|
|
29
|
+
* `classifyCommand` 判 deny 恒拦 / always-ask 恒弹,判据与 command 面同一个函数;
|
|
30
|
+
* 不传正文 = 仅档位,唯一降级面 = resolver 未注入 / 解析不到(三个 script 面
|
|
31
|
+
* 现均传正文,见上))
|
|
17
32
|
* - `none` :**内核不经任何确认闸**——非执行面(`register_work` 只往 `memoraDir` 写作品索引 JSON,
|
|
18
33
|
* 既不执行也不碰项目文件,实锤:kernel 侧 `registerWork` 回调链零 `confirm*` 调用)。
|
|
19
34
|
* 登记它是为了让「opaque 面一个都不漏」可机器核对;它**不是**确认入口,禁被路由进确认闸。
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"confirmEntries.d.ts","sourceRoot":"","sources":["../../src/security/confirmEntries.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"confirmEntries.d.ts","sourceRoot":"","sources":["../../src/security/confirmEntries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,uCAAuC;AACvC,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEzD,uDAAuD;AACvD,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAE5D,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAOxE,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAQ9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAQpE"}
|
|
@@ -1,10 +1,22 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* 执行面 → 确认入口 登记表(CMD-1-BYPASS,2026-10-03)
|
|
3
3
|
*
|
|
4
|
-
*
|
|
5
|
-
*
|
|
6
|
-
*
|
|
7
|
-
*
|
|
4
|
+
* 背景(实锤 → 2026-10-25 已补洞,保留原委供追溯):`classifyCommand`(deny / always-ask)
|
|
5
|
+
* 的调用点曾**只有** `SecurityGuard.confirmCommandRun`,而 `confirmCommandRun` 的唯一调用点
|
|
6
|
+
* 又是 `toolExecutor` 的 `run_command` 分支 ⇒ 命令内容裁决只锁**一个**执行面,其余执行面
|
|
7
|
+
* 走 `confirmScriptRun` 只判权限档位、不看执行内容 ⇒ 「把 git push 写进脚本」零护栏。
|
|
8
|
+
*
|
|
9
|
+
* **现状(2026-10-25 CMD-1-BYPASS + CMD-1-CONTENT 双双关闭,四个执行面齐)**:
|
|
10
|
+
* `confirmScriptRun` 接受可选 `content` 并把它喂给**同一个** `classifyCommand`
|
|
11
|
+
* (判据仍单点)⇒ run_code / run_project_script / run_skill_script 三个 script 面
|
|
12
|
+
* **全部**按正文裁决(deny 恒拦 / always-ask 恒弹 / normal 回落档位)。
|
|
13
|
+
* run_skill_script 的正文来源 = 内核 assembler 注入的 `resolveSkillScript` 回调
|
|
14
|
+
* (与执行回调同一个解析函数——路径解析与执行本就在内核,2026-10-25 探口实证推翻
|
|
15
|
+
* 「宿主回调执行、内核拿不到正文」的旧前提);解析不到 = 不传正文(维持
|
|
16
|
+
* [ERR:SCRIPT_NOT_FOUND] 语义),读失败 / 超 SCRIPT_READ_MAX_LEN = fail-closed decline。
|
|
17
|
+
*
|
|
18
|
+
* 本表的价值不因补洞而消失:它仍然是「每个执行面走哪个确认入口」的唯一真源,且 script 面
|
|
19
|
+
* 的语义现在是「档位判据 + 可选内容裁决」,与 command 面「内容裁决 + 档位判据」仍不同构。
|
|
8
20
|
*
|
|
9
21
|
* 登记表 = 把「每个执行面走哪个确认入口」从「散在四个 case 分支里的隐式默认值」变成**显式单一真源**:
|
|
10
22
|
* 新增执行面时**必须**在此登记,否则守卫测试(confirmEntry.test.ts 的穷举性断言)即红。
|
|
@@ -12,8 +24,11 @@
|
|
|
12
24
|
* 真源关系(禁再独立枚举工具名):「哪些工具是执行面」由 `builtinTools` 的 `diskWrite === 'opaque'`
|
|
13
25
|
* 派生(`OPAQUE_WRITE_TOOL_NAMES`)⇒ 本表**只登记入口**,不复制第二份工具清单。
|
|
14
26
|
*
|
|
15
|
-
* - `command`:走 `confirmCommandRun`(内容裁决 DENY/always-ask +
|
|
16
|
-
* - `script` :走 `confirmScriptRun
|
|
27
|
+
* - `command`:走 `confirmCommandRun`(内容裁决 DENY/always-ask + 确认档位;target = 命令原文)
|
|
28
|
+
* - `script` :走 `confirmScriptRun`(确认档位 + **可选内容裁决**:传入正文时按
|
|
29
|
+
* `classifyCommand` 判 deny 恒拦 / always-ask 恒弹,判据与 command 面同一个函数;
|
|
30
|
+
* 不传正文 = 仅档位,唯一降级面 = resolver 未注入 / 解析不到(三个 script 面
|
|
31
|
+
* 现均传正文,见上))
|
|
17
32
|
* - `none` :**内核不经任何确认闸**——非执行面(`register_work` 只往 `memoraDir` 写作品索引 JSON,
|
|
18
33
|
* 既不执行也不碰项目文件,实锤:kernel 侧 `registerWork` 回调链零 `confirm*` 调用)。
|
|
19
34
|
* 登记它是为了让「opaque 面一个都不漏」可机器核对;它**不是**确认入口,禁被路由进确认闸。
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"confirmEntries.js","sourceRoot":"","sources":["../../src/security/confirmEntries.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"confirmEntries.js","sourceRoot":"","sources":["../../src/security/confirmEntries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAQH,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAA2C;IAC3E,WAAW,EAAE,SAAS;IACtB,QAAQ,EAAE,QAAQ;IAClB,kBAAkB,EAAE,QAAQ;IAC5B,gBAAgB,EAAE,QAAQ;IAC1B,+CAA+C;IAC/C,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,MAAM,IAAI,qEAAqE,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,MAAM,IAAI,2CAA2C,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -16,9 +16,13 @@ export declare function classifyCommand(command: string): CommandVerdict;
|
|
|
16
16
|
export type Permission = 'owner' | 'guest';
|
|
17
17
|
export type WriteDecision = 'confirmed' | 'declined' | 'auto-approved' | 'auto-denied';
|
|
18
18
|
export interface AuditEvent {
|
|
19
|
-
/**
|
|
19
|
+
/**
|
|
20
|
+
* 事件类型:路径允许/拒绝;确认决策(写入 / 命令 / 代码 / 脚本执行 / 自定义工具)。
|
|
21
|
+
* `write-*` 三值是历史命名:confirmGate 承载全部五类确认,非写入类请求同样落这三值
|
|
22
|
+
* (见 confirmGate);改名 = 破坏性公共面变更,收益仅为命名纯度 ⇒ 保留旧名。
|
|
23
|
+
*/
|
|
20
24
|
type: 'path-allow' | 'path-deny' | 'write-confirm' | 'write-decline' | 'write-auto';
|
|
21
|
-
/**
|
|
25
|
+
/** 被裁决对象标识:写入类 = 目标文件绝对路径;命令/代码/脚本 = 命令字面量或目标标识;自定义工具 = 调用摘要 */
|
|
22
26
|
path: string;
|
|
23
27
|
/** 工具名(read_file / write_file / 自定义工具名) */
|
|
24
28
|
tool?: string;
|
|
@@ -37,8 +41,8 @@ export type AuditListener = (event: AuditEvent) => void;
|
|
|
37
41
|
* 确认请求:宿主在非交互式环境(WebUI/桌宠/无终端)注入自定义确认 UI,
|
|
38
42
|
* 走此回调而非直接读 stdin。返回 true 确认 / false 拒绝;抛错视为拒绝(fail-closed)。
|
|
39
43
|
*
|
|
40
|
-
* ⚠️ 类型名 `WriteConfirmation*`
|
|
41
|
-
* (写入 / 命令 / 代码 /
|
|
44
|
+
* ⚠️ 类型名 `WriteConfirmation*` 是**历史命名**:该回调承载全部确认
|
|
45
|
+
* (写入 / 命令 / 代码 / 脚本执行 / 自定义工具),非写入类请求同样走它(见 `confirmGate`)。
|
|
42
46
|
* 改名 = 破坏性公共面变更,收益仅为命名纯度 ⇒ 保留旧名 + 此注释说明。
|
|
43
47
|
*/
|
|
44
48
|
export type WriteConfirmationRequest = (info: WriteConfirmationInfo) => Promise<boolean>;
|
|
@@ -90,7 +94,7 @@ export declare class SecurityGuard {
|
|
|
90
94
|
permission?: Permission,
|
|
91
95
|
/** 脚本执行确认开关(独立于写入确认,供对 run_code/run_project_script 单独收紧) */
|
|
92
96
|
confirmScripts?: boolean,
|
|
93
|
-
/** Agent 级配置目录(
|
|
97
|
+
/** Agent 级配置目录(role-packs/rules/skills 所在目录) */
|
|
94
98
|
configDir?: string,
|
|
95
99
|
/** Agent 级数据目录(宿主传入;内核不假设其下的文件形态) */
|
|
96
100
|
agentDataDir?: string);
|
|
@@ -144,8 +148,21 @@ export declare class SecurityGuard {
|
|
|
144
148
|
* 判据与写入确认同构:guest 模式或 confirmScripts 需确认;未注入 confirmationHandler 时
|
|
145
149
|
* fail-closed 拒绝。owner + confirmScripts=false 自动批准(默认),审计仍记录。
|
|
146
150
|
* target 为脚本绝对路径(run_project_script)或描述型标识(run_code 内联代码无落盘路径)。
|
|
151
|
+
*
|
|
152
|
+
* **内容裁决(2026-10-25 补齐,CMD-1-BYPASS)**:可选 `content` = 将被执行的脚本/代码正文。
|
|
153
|
+
* 此前本闸**只看权限档位、不看执行内容** ⇒ 「git push」「rm -rf /」写进脚本即可绕过
|
|
154
|
+
* `classifyCommand`(命令面的内容裁决)——恒弹清单成了纸墙。此处把正文喂给**同一个**
|
|
155
|
+
* `classifyCommand`(判据仍单点,不新造第二套):
|
|
156
|
+
* - `deny` ⇒ **恒拦**(不入确认流程,任何档位/权限都拦);
|
|
157
|
+
* - `always-ask` ⇒ **恒弹**(owner + confirmScripts=false 也弹,与命令面同判据);
|
|
158
|
+
* - `normal` ⇒ 回落到原判据(guest || confirmScripts)。
|
|
159
|
+
*
|
|
160
|
+
* 不传 `content`(拿不到正文的面 ⇒ 只判档位;如未注入解析回调的技能脚本执行)⇒
|
|
161
|
+
* 行为与补齐前完全一致。
|
|
162
|
+
*
|
|
163
|
+
* @param content 将被执行的正文(**整份裁决,不做截断**——截断即裁决盲区)
|
|
147
164
|
*/
|
|
148
|
-
confirmScriptRun(targetPath: string, tool: string, description?: string): Promise<boolean>;
|
|
165
|
+
confirmScriptRun(targetPath: string, tool: string, description?: string, content?: string): Promise<boolean>;
|
|
149
166
|
/**
|
|
150
167
|
* 命令执行确认(run_command 的执行闸,§13.2)
|
|
151
168
|
*
|
|
@@ -157,17 +174,34 @@ export declare class SecurityGuard {
|
|
|
157
174
|
*/
|
|
158
175
|
confirmCommandRun(command: string, tool: string, description?: string): Promise<boolean>;
|
|
159
176
|
/**
|
|
160
|
-
*
|
|
177
|
+
* 自定义工具调用确认(自定义工具的执行闸;外部工具接入的唯一审批入口)
|
|
178
|
+
*
|
|
179
|
+
* 与 `confirmCommandRun` / `confirmScriptRun` 共用同一个 `confirmGate`(不新造第二套确认路径)。
|
|
180
|
+
* 单一入口、两种模式(由 ToolExecutor 按 `ToolDefinition.confirmPolicy` 映射):
|
|
181
|
+
* - `needConfirm=true`('always'):每次弹宿主确认 UI;
|
|
182
|
+
* - `needConfirm=false`('audit'):过闸自动放行,仍落 write-auto 审计。
|
|
183
|
+
*
|
|
184
|
+
* @param toolName 工具名(如 mcp__server__tool)
|
|
185
|
+
* @param summary 调用摘要(被裁决对象标识,落审计 path 字段 + 确认卡文案,与 run_command 把命令塞 path 同构)
|
|
186
|
+
* @param needConfirm 是否需要用户逐次确认(false = 自动放行 + 审计)
|
|
187
|
+
* @returns true 放行(调用方才可执行 handler)/ false 拒绝(fail-closed 安全优先)
|
|
188
|
+
*/
|
|
189
|
+
requestToolCallConfirmation(toolName: string, summary: string, needConfirm: boolean): Promise<boolean>;
|
|
190
|
+
/**
|
|
191
|
+
* 确认闸公共核心(SSOT:**全部确认**——写入 / 命令 / 代码 / 脚本执行 / 自定义工具——的唯一执行路径)
|
|
161
192
|
*
|
|
162
193
|
* needConfirm=false → 自动批准(审计 write-auto);为 true 且未注入 confirmationHandler
|
|
163
194
|
* → fail-closed 拒绝(审计 write-decline);否则经 confirmViaHandler 走宿主确认 UI。
|
|
164
|
-
* diff 仅写入场景有(`requestWriteConfirmation` 唯一传 diff
|
|
195
|
+
* diff 仅写入场景有(`requestWriteConfirmation` 唯一传 diff),其余类别不传(域留空),
|
|
165
196
|
* 宿主据此判「本卡无 diff 域」并跳过写入前后对比渲染。
|
|
197
|
+
*
|
|
198
|
+
* `source` 可选:标记本次确认的调用链来源,透传进全部审计出口;
|
|
199
|
+
* 既有四类调用方不传 = undefined,审计事件缺省不带该字段,行为零变化。
|
|
166
200
|
*/
|
|
167
201
|
private confirmGate;
|
|
168
202
|
/**
|
|
169
|
-
* 通过宿主注入的 confirmationHandler
|
|
170
|
-
* 写入 / 命令 / 代码 /
|
|
203
|
+
* 通过宿主注入的 confirmationHandler 执行确认(**全部确认**的唯一执行路径:
|
|
204
|
+
* 写入 / 命令 / 代码 / 脚本执行 / 自定义工具)。抛错视为拒绝(fail-closed 安全优先)。
|
|
171
205
|
*/
|
|
172
206
|
private confirmViaHandler;
|
|
173
207
|
/** 触发审计事件:写日志 + 通知订阅者 */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pathGuard.d.ts","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAkFA,aAAa;AACb,MAAM,MAAM,cAAc;AACxB,4BAA4B;AAC1B,MAAM;AACR,qCAAqC;GACnC,YAAY;AACd,yCAAyC;GACvC,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"pathGuard.d.ts","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAkFA,aAAa;AACb,MAAM,MAAM,cAAc;AACxB,4BAA4B;AAC1B,MAAM;AACR,qCAAqC;GACnC,YAAY;AACd,yCAAyC;GACvC,QAAQ,CAAC;AA2Fb;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAS/D;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,aAAa,CAAC;AAEvF,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACpF,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,qBAAqB;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEzF,gBAAgB;AAChB,MAAM,WAAW,qBAAqB;IACpC,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,wDAAwD;IACxD,YAAY,EAAE,OAAO,CAAC;IACtB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAa7C,qBAAa,aAAa;IAyBtB,WAAW;aACK,UAAU,EAAE,UAAU;IAzBxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD;;OAEG;IACH,OAAO,CAAC,mBAAmB,CAAyC;IAEpE,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,wCAAwC;IACxC,OAAO,CAAC,UAAU,CAAW;IAC7B,wDAAwD;IACxD,OAAO,CAAC,YAAY,CAAW;IAE/B,0CAA0C;IACnC,aAAa,EAAE,OAAO,CAAC;IAE9B,2DAA2D;IACpD,cAAc,EAAE,OAAO,CAAC;gBAG7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,MAAM,EAAO,EAChC,aAAa,GAAE,OAAe;IAC9B,WAAW;IACK,UAAU,GAAE,UAAoB;IAChD,4DAA4D;IAC5D,cAAc,GAAE,OAAe;IAC/B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM;IAClB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM;IAqBvB,gEAAgE;IAChE,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,IAAI;IAInE;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAItC;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIvC;;;;;;;OAOG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI;IAoB3C,6BAA6B;IAC7B,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAQ5C;;;OAGG;IACH,iBAAiB,CACf,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GACvC,IAAI;IAqDP;;;OAGG;IACG,wBAAwB,CAC5B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM;IACpB,wCAAwC;IACxC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACjE,OAAO,CAAC,OAAO,CAAC;IAenB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,gBAAgB,CACpB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IA4BnB;;;;;;;;OAQG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB9F;;;;;;;;;;;;OAYG;IACG,2BAA2B,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,OAAO,CAAC;IAInB;;;;;;;;;;OAUG;YACW,WAAW;IAwDzB;;;OAGG;YACW,iBAAiB;IAiC/B,yBAAyB;IACzB,OAAO,CAAC,SAAS;CAgBlB"}
|
|
@@ -115,6 +115,12 @@ const ALWAYS_ASK_COMMAND_PREFIXES = [
|
|
|
115
115
|
'git rebase',
|
|
116
116
|
'git merge',
|
|
117
117
|
'git checkout --',
|
|
118
|
+
/**
|
|
119
|
+
* `git clean`(2026-10-25 补):**删除未跟踪文件**——与 reset / checkout -- 同量级的
|
|
120
|
+
* 不可逆操作,此前**不在清单内** ⇒ 落 `normal` 档 = owner 默认直接执行(真洞,不是定案)。
|
|
121
|
+
* 补进来后 `-fd` / `-fxd` 各形态均恒弹(两段式条目允许插入全局选项)。
|
|
122
|
+
*/
|
|
123
|
+
'git clean',
|
|
118
124
|
'npm publish',
|
|
119
125
|
];
|
|
120
126
|
/**
|
|
@@ -202,7 +208,7 @@ export class SecurityGuard {
|
|
|
202
208
|
permission = 'owner',
|
|
203
209
|
/** 脚本执行确认开关(独立于写入确认,供对 run_code/run_project_script 单独收紧) */
|
|
204
210
|
confirmScripts = false,
|
|
205
|
-
/** Agent 级配置目录(
|
|
211
|
+
/** Agent 级配置目录(role-packs/rules/skills 所在目录) */
|
|
206
212
|
configDir,
|
|
207
213
|
/** Agent 级数据目录(宿主传入;内核不假设其下的文件形态) */
|
|
208
214
|
agentDataDir) {
|
|
@@ -356,8 +362,39 @@ export class SecurityGuard {
|
|
|
356
362
|
* 判据与写入确认同构:guest 模式或 confirmScripts 需确认;未注入 confirmationHandler 时
|
|
357
363
|
* fail-closed 拒绝。owner + confirmScripts=false 自动批准(默认),审计仍记录。
|
|
358
364
|
* target 为脚本绝对路径(run_project_script)或描述型标识(run_code 内联代码无落盘路径)。
|
|
365
|
+
*
|
|
366
|
+
* **内容裁决(2026-10-25 补齐,CMD-1-BYPASS)**:可选 `content` = 将被执行的脚本/代码正文。
|
|
367
|
+
* 此前本闸**只看权限档位、不看执行内容** ⇒ 「git push」「rm -rf /」写进脚本即可绕过
|
|
368
|
+
* `classifyCommand`(命令面的内容裁决)——恒弹清单成了纸墙。此处把正文喂给**同一个**
|
|
369
|
+
* `classifyCommand`(判据仍单点,不新造第二套):
|
|
370
|
+
* - `deny` ⇒ **恒拦**(不入确认流程,任何档位/权限都拦);
|
|
371
|
+
* - `always-ask` ⇒ **恒弹**(owner + confirmScripts=false 也弹,与命令面同判据);
|
|
372
|
+
* - `normal` ⇒ 回落到原判据(guest || confirmScripts)。
|
|
373
|
+
*
|
|
374
|
+
* 不传 `content`(拿不到正文的面 ⇒ 只判档位;如未注入解析回调的技能脚本执行)⇒
|
|
375
|
+
* 行为与补齐前完全一致。
|
|
376
|
+
*
|
|
377
|
+
* @param content 将被执行的正文(**整份裁决,不做截断**——截断即裁决盲区)
|
|
359
378
|
*/
|
|
360
|
-
async confirmScriptRun(targetPath, tool, description) {
|
|
379
|
+
async confirmScriptRun(targetPath, tool, description, content) {
|
|
380
|
+
if (content) {
|
|
381
|
+
const verdict = classifyCommand(content);
|
|
382
|
+
if (verdict === 'deny') {
|
|
383
|
+
this.emitAudit({
|
|
384
|
+
type: 'write-decline',
|
|
385
|
+
path: targetPath,
|
|
386
|
+
tool,
|
|
387
|
+
decision: 'auto-denied',
|
|
388
|
+
reason: '脚本/代码内容命中命令黑名单(恒拦,不进确认流程)',
|
|
389
|
+
timestamp: nowIso(),
|
|
390
|
+
});
|
|
391
|
+
return false;
|
|
392
|
+
}
|
|
393
|
+
if (verdict === 'always-ask') {
|
|
394
|
+
// 恒弹:与 confirmCommandRun 的 always-ask 分支同判据(不可被档位豁免)
|
|
395
|
+
return this.confirmGate(targetPath, tool, description, true);
|
|
396
|
+
}
|
|
397
|
+
}
|
|
361
398
|
return this.confirmGate(targetPath, tool, description,
|
|
362
399
|
// 脚本执行确认判据:guest 或 confirmScripts(独立于写入确认)
|
|
363
400
|
this.permission === 'guest' || this.confirmScripts);
|
|
@@ -387,20 +424,40 @@ export class SecurityGuard {
|
|
|
387
424
|
return this.confirmGate(command, tool, description, verdict === 'always-ask' || this.permission === 'guest' || this.confirmScripts);
|
|
388
425
|
}
|
|
389
426
|
/**
|
|
390
|
-
*
|
|
427
|
+
* 自定义工具调用确认(自定义工具的执行闸;外部工具接入的唯一审批入口)
|
|
428
|
+
*
|
|
429
|
+
* 与 `confirmCommandRun` / `confirmScriptRun` 共用同一个 `confirmGate`(不新造第二套确认路径)。
|
|
430
|
+
* 单一入口、两种模式(由 ToolExecutor 按 `ToolDefinition.confirmPolicy` 映射):
|
|
431
|
+
* - `needConfirm=true`('always'):每次弹宿主确认 UI;
|
|
432
|
+
* - `needConfirm=false`('audit'):过闸自动放行,仍落 write-auto 审计。
|
|
433
|
+
*
|
|
434
|
+
* @param toolName 工具名(如 mcp__server__tool)
|
|
435
|
+
* @param summary 调用摘要(被裁决对象标识,落审计 path 字段 + 确认卡文案,与 run_command 把命令塞 path 同构)
|
|
436
|
+
* @param needConfirm 是否需要用户逐次确认(false = 自动放行 + 审计)
|
|
437
|
+
* @returns true 放行(调用方才可执行 handler)/ false 拒绝(fail-closed 安全优先)
|
|
438
|
+
*/
|
|
439
|
+
async requestToolCallConfirmation(toolName, summary, needConfirm) {
|
|
440
|
+
return this.confirmGate(summary, toolName, summary, needConfirm, undefined, 'custom');
|
|
441
|
+
}
|
|
442
|
+
/**
|
|
443
|
+
* 确认闸公共核心(SSOT:**全部确认**——写入 / 命令 / 代码 / 脚本执行 / 自定义工具——的唯一执行路径)
|
|
391
444
|
*
|
|
392
445
|
* needConfirm=false → 自动批准(审计 write-auto);为 true 且未注入 confirmationHandler
|
|
393
446
|
* → fail-closed 拒绝(审计 write-decline);否则经 confirmViaHandler 走宿主确认 UI。
|
|
394
|
-
* diff 仅写入场景有(`requestWriteConfirmation` 唯一传 diff
|
|
447
|
+
* diff 仅写入场景有(`requestWriteConfirmation` 唯一传 diff),其余类别不传(域留空),
|
|
395
448
|
* 宿主据此判「本卡无 diff 域」并跳过写入前后对比渲染。
|
|
449
|
+
*
|
|
450
|
+
* `source` 可选:标记本次确认的调用链来源,透传进全部审计出口;
|
|
451
|
+
* 既有四类调用方不传 = undefined,审计事件缺省不带该字段,行为零变化。
|
|
396
452
|
*/
|
|
397
|
-
async confirmGate(targetPath, tool, description, needConfirm, diff) {
|
|
453
|
+
async confirmGate(targetPath, tool, description, needConfirm, diff, source) {
|
|
398
454
|
// 无需确认:直接放行并记录审计
|
|
399
455
|
if (!needConfirm) {
|
|
400
456
|
this.emitAudit({
|
|
401
457
|
type: 'write-auto',
|
|
402
458
|
path: targetPath,
|
|
403
459
|
tool,
|
|
460
|
+
source,
|
|
404
461
|
decision: 'auto-approved',
|
|
405
462
|
timestamp: nowIso(),
|
|
406
463
|
});
|
|
@@ -415,7 +472,7 @@ export class SecurityGuard {
|
|
|
415
472
|
needsConfirm: needConfirm,
|
|
416
473
|
beforeContent: diff?.beforeContent,
|
|
417
474
|
afterContent: diff?.afterContent,
|
|
418
|
-
// diff 域语义判定单点:写入场景传了 diff 参数 →
|
|
475
|
+
// diff 域语义判定单点:写入场景传了 diff 参数 → 有域;命令/代码/脚本/自定义工具不传 → 无域
|
|
419
476
|
hasDiff: diff !== undefined,
|
|
420
477
|
};
|
|
421
478
|
// 未注入 confirmationHandler 时 fail-closed 拒绝
|
|
@@ -425,6 +482,7 @@ export class SecurityGuard {
|
|
|
425
482
|
type: 'write-decline',
|
|
426
483
|
path: targetPath,
|
|
427
484
|
tool,
|
|
485
|
+
source,
|
|
428
486
|
decision: 'declined',
|
|
429
487
|
reason: '未注入 confirmationHandler(fail-closed)',
|
|
430
488
|
timestamp: nowIso(),
|
|
@@ -432,19 +490,20 @@ export class SecurityGuard {
|
|
|
432
490
|
return false;
|
|
433
491
|
}
|
|
434
492
|
// 走宿主注入的 confirmationHandler(此处 handler 必非空,上方已 fail-closed 拦截)
|
|
435
|
-
return this.confirmViaHandler(info, targetPath, tool);
|
|
493
|
+
return this.confirmViaHandler(info, targetPath, tool, source);
|
|
436
494
|
}
|
|
437
495
|
/**
|
|
438
|
-
* 通过宿主注入的 confirmationHandler
|
|
439
|
-
* 写入 / 命令 / 代码 /
|
|
496
|
+
* 通过宿主注入的 confirmationHandler 执行确认(**全部确认**的唯一执行路径:
|
|
497
|
+
* 写入 / 命令 / 代码 / 脚本执行 / 自定义工具)。抛错视为拒绝(fail-closed 安全优先)。
|
|
440
498
|
*/
|
|
441
|
-
async confirmViaHandler(info, targetPath, tool) {
|
|
499
|
+
async confirmViaHandler(info, targetPath, tool, source) {
|
|
442
500
|
try {
|
|
443
501
|
const ok = await this.confirmationHandler(info);
|
|
444
502
|
this.emitAudit({
|
|
445
503
|
type: ok ? 'write-confirm' : 'write-decline',
|
|
446
504
|
path: targetPath,
|
|
447
505
|
tool,
|
|
506
|
+
source,
|
|
448
507
|
decision: ok ? 'confirmed' : 'declined',
|
|
449
508
|
timestamp: nowIso(),
|
|
450
509
|
});
|
|
@@ -457,6 +516,7 @@ export class SecurityGuard {
|
|
|
457
516
|
type: 'write-decline',
|
|
458
517
|
path: targetPath,
|
|
459
518
|
tool,
|
|
519
|
+
source,
|
|
460
520
|
decision: 'declined',
|
|
461
521
|
reason: `回调异常:${toError(err).message}`,
|
|
462
522
|
timestamp: nowIso(),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pathGuard.js","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;YACjB,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,0BAA0B;IAC1B,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,8BAA8B;IAC9B,oBAAoB;IACpB,qBAAqB;IACrB,kCAAkC;IAClC,sCAAsC;IACtC,uBAAuB;IACvB,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,WAAW;IACX,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,2BAA2B;IAC3B,wCAAwC;IACxC,iFAAiF;IACjF,8BAA8B;IAC9B,oBAAoB;IACpB,eAAe;IACf,wBAAwB;IACxB,8BAA8B;IAC9B,sCAAsC;IACtC,4BAA4B;IAC5B,yCAAyC;IACzC,6DAA6D;IAC7D,uBAAuB;IACvB,8BAA8B;CAC/B,CAAC;AAEF,iEAAiE;AACjE,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAanC;;;;;;;;GAQG;AACH,MAAM,wBAAwB,GAAa;IACzC,2CAA2C;IAC3C,yDAAyD;IACzD,uBAAuB;IACvB,qCAAqC;IACrC,6DAA6D;IAC7D,kDAAkD;IAClD,aAAa;IACb,kBAAkB;IAClB,uBAAuB;IACvB,WAAW;IACX,2BAA2B;IAC3B,8BAA8B;CAC/B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,2BAA2B,GAAa;IAC5C,YAAY;IACZ,UAAU;IACV,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;IACjB,aAAa;CACd,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAA,2BAA2B,CAAC;AAEvE;;;;;;;;;;;GAWG;AACH,MAAM,2BAA2B,GAAa,2BAA2B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;IACvF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvF,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAC7C,sEAAsE;IACtE,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,IAAI,GAAG,kBAAkB;QAC7B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE;QACpC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC,EAAE,CAAC;IAC7D,OAAO,IAAI,MAAM,CACf,MAAM,CAAC,GAAG,CAAA,GAAG,wBAAwB,MAAM,MAAM,CAAC,OAAQ,CAAC,GAAG,GAAG,GAAG,IAAI,mBAAmB,EAC3F,GAAG,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,YAAY,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AA2DD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAM7C,SAAS,eAAe,CAAC,OAAkC;IACzD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,OAAO,CAAC;IAC9D,uBAAuB;IACvB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG,eAAe,OAAO,CAAC,MAAM,MAAM,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,aAAa;IA0BN;IAzBD,SAAS,GAAoB,EAAE,CAAC;IACjD;;OAEG;IACK,mBAAmB,GAAoC,IAAI,CAAC;IAEpE,wEAAwE;IACvD,SAAS,CAAW;IACrC,wCAAwC;IAChC,UAAU,CAAW;IAC7B,wDAAwD;IAChD,YAAY,CAAW;IAE/B,0CAA0C;IACnC,aAAa,CAAU;IAE9B,2DAA2D;IACpD,cAAc,CAAU;IAE/B,YACE,WAAmB,EACnB,SAAiB,EACjB,oBAA8B,EAAE,EAChC,gBAAyB,KAAK;IAC9B,WAAW;IACK,aAAyB,OAAO;IAChD,4DAA4D;IAC5D,iBAA0B,KAAK;IAC/B,8CAA8C;IAC9C,SAAkB;IAClB,qCAAqC;IACrC,YAAqB;QANL,eAAU,GAAV,UAAU,CAAsB;QAQhD,8DAA8D;QAC9D,IAAI,CAAC,SAAS,GAAG;YACf,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACxC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SACvC,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,oBAAoB;QACpB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,mDAAmD;QACnD,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,gEAAgE;IAChE,mBAAmB,CAAC,OAAwC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAc;QAC7B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAc;QAC9B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,UAAoB;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,aAAa,CAAC,oBAAoB,EAAE,wBAAwB,EAAE;gBAClE,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1F,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,aAAa,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,SAAS,EAAE;oBACvE,yBAAyB;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,6BAA6B;IAC7B,OAAO,CAAC,QAAuB;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,iBAAiB,CACf,YAAoB,EACpB,IAAa,EACb,MAAwC;QAExC,+BAA+B;QAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,yBAAyB;QACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAE7C,WAAW;QACX,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,MAAM,EAAE,YAAY,OAAO,GAAG;oBAC9B,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,MAAM,aAAa,CACjB,cAAc,EACd,MAAM,QAAQ,aAAa,OAAO,GAAG,EACrC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE;YAChD,cAAc;YACd,2BAA2B;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wBAAwB,CAC5B,UAAkB,EAClB,IAAY,EACZ,WAAoB;IACpB,wCAAwC;IACxC,OAAkE;QAElE,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,+BAA+B;QAC/B,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa;QACjD,4BAA4B;QAC5B;YACE,aAAa,EAAE,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC;YACtD,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;SACrD,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAkB,EAAE,IAAY,EAAE,WAAoB;QAC3E,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,2CAA2C;QAC3C,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,CACnD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,IAAY,EAAE,WAAoB;QACzE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,oBAAoB;gBAC5B,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CACrB,OAAO,EACP,IAAI,EACJ,WAAW,EACX,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,CAC/E,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,WAAW,CACvB,UAAkB,EAClB,IAAY,EACZ,WAA+B,EAC/B,WAAoB,EACpB,IAA+D;QAE/D,iBAAiB;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uCAAuC;QACvC,MAAM,IAAI,GAA0B;YAClC,UAAU;YACV,IAAI;YACJ,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,IAAI,EAAE,aAAa;YAClC,YAAY,EAAE,IAAI,EAAE,YAAY;YAChC,qDAAqD;YACrD,OAAO,EAAE,IAAI,KAAK,SAAS;SAC5B,CAAC;QAEF,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EACjD,+CAA+C,CAChD,CAAC;YACF,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,sCAAsC;gBAC9C,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gEAAgE;QAChE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAC7B,IAA2B,EAC3B,UAAkB,EAClB,IAAY;QAEZ,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAoB,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;gBAC5C,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;gBACvC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2BAA2B;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;gBACtC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,yBAAyB;IACjB,SAAS,CAAC,KAAiB;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
|
|
1
|
+
{"version":3,"file":"pathGuard.js","sourceRoot":"","sources":["../../src/security/pathGuard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;YACjB,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,0BAA0B;IAC1B,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,8BAA8B;IAC9B,oBAAoB;IACpB,qBAAqB;IACrB,kCAAkC;IAClC,sCAAsC;IACtC,uBAAuB;IACvB,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,WAAW;IACX,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,2BAA2B;IAC3B,wCAAwC;IACxC,iFAAiF;IACjF,8BAA8B;IAC9B,oBAAoB;IACpB,eAAe;IACf,wBAAwB;IACxB,8BAA8B;IAC9B,sCAAsC;IACtC,4BAA4B;IAC5B,yCAAyC;IACzC,6DAA6D;IAC7D,uBAAuB;IACvB,8BAA8B;CAC/B,CAAC;AAEF,iEAAiE;AACjE,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAanC;;;;;;;;GAQG;AACH,MAAM,wBAAwB,GAAa;IACzC,2CAA2C;IAC3C,yDAAyD;IACzD,uBAAuB;IACvB,qCAAqC;IACrC,6DAA6D;IAC7D,kDAAkD;IAClD,aAAa;IACb,kBAAkB;IAClB,uBAAuB;IACvB,WAAW;IACX,2BAA2B;IAC3B,8BAA8B;CAC/B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,2BAA2B,GAAa;IAC5C,YAAY;IACZ,UAAU;IACV,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;IACjB;;;;OAIG;IACH,WAAW;IACX,aAAa;CACd,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAA,2BAA2B,CAAC;AAEvE;;;;;;;;;;;GAWG;AACH,MAAM,2BAA2B,GAAa,2BAA2B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;IACvF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvF,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAC7C,sEAAsE;IACtE,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,IAAI,GAAG,kBAAkB;QAC7B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE;QACpC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC,EAAE,CAAC;IAC7D,OAAO,IAAI,MAAM,CACf,MAAM,CAAC,GAAG,CAAA,GAAG,wBAAwB,MAAM,MAAM,CAAC,OAAQ,CAAC,GAAG,GAAG,GAAG,IAAI,mBAAmB,EAC3F,GAAG,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,YAAY,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AA+DD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAM7C,SAAS,eAAe,CAAC,OAAkC;IACzD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,OAAO,CAAC;IAC9D,uBAAuB;IACvB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG,eAAe,OAAO,CAAC,MAAM,MAAM,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,aAAa;IA0BN;IAzBD,SAAS,GAAoB,EAAE,CAAC;IACjD;;OAEG;IACK,mBAAmB,GAAoC,IAAI,CAAC;IAEpE,wEAAwE;IACvD,SAAS,CAAW;IACrC,wCAAwC;IAChC,UAAU,CAAW;IAC7B,wDAAwD;IAChD,YAAY,CAAW;IAE/B,0CAA0C;IACnC,aAAa,CAAU;IAE9B,2DAA2D;IACpD,cAAc,CAAU;IAE/B,YACE,WAAmB,EACnB,SAAiB,EACjB,oBAA8B,EAAE,EAChC,gBAAyB,KAAK;IAC9B,WAAW;IACK,aAAyB,OAAO;IAChD,4DAA4D;IAC5D,iBAA0B,KAAK;IAC/B,gDAAgD;IAChD,SAAkB;IAClB,qCAAqC;IACrC,YAAqB;QANL,eAAU,GAAV,UAAU,CAAsB;QAQhD,8DAA8D;QAC9D,IAAI,CAAC,SAAS,GAAG;YACf,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACxC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SACvC,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,oBAAoB;QACpB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,mDAAmD;QACnD,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,gEAAgE;IAChE,mBAAmB,CAAC,OAAwC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAc;QAC7B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAc;QAC9B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,UAAoB;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,aAAa,CAAC,oBAAoB,EAAE,wBAAwB,EAAE;gBAClE,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1F,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,aAAa,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,SAAS,EAAE;oBACvE,yBAAyB;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,6BAA6B;IAC7B,OAAO,CAAC,QAAuB;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,iBAAiB,CACf,YAAoB,EACpB,IAAa,EACb,MAAwC;QAExC,+BAA+B;QAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,yBAAyB;QACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAE7C,WAAW;QACX,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,MAAM,EAAE,YAAY,OAAO,GAAG;oBAC9B,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,MAAM,aAAa,CACjB,cAAc,EACd,MAAM,QAAQ,aAAa,OAAO,GAAG,EACrC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM;oBACN,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE;YAChD,cAAc;YACd,2BAA2B;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wBAAwB,CAC5B,UAAkB,EAClB,IAAY,EACZ,WAAoB;IACpB,wCAAwC;IACxC,OAAkE;QAElE,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,+BAA+B;QAC/B,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa;QACjD,4BAA4B;QAC5B;YACE,aAAa,EAAE,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC;YACtD,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;SACrD,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,gBAAgB,CACpB,UAAkB,EAClB,IAAY,EACZ,WAAoB,EACpB,OAAgB;QAEhB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,UAAU;oBAChB,IAAI;oBACJ,QAAQ,EAAE,aAAa;oBACvB,MAAM,EAAE,2BAA2B;oBACnC,SAAS,EAAE,MAAM,EAAE;iBACpB,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC7B,qDAAqD;gBACrD,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,EACV,IAAI,EACJ,WAAW;QACX,2CAA2C;QAC3C,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,CACnD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,IAAY,EAAE,WAAoB;QACzE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,oBAAoB;gBAC5B,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CACrB,OAAO,EACP,IAAI,EACJ,WAAW,EACX,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,CAC/E,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,2BAA2B,CAC/B,QAAgB,EAChB,OAAe,EACf,WAAoB;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxF,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,WAAW,CACvB,UAAkB,EAClB,IAAY,EACZ,WAA+B,EAC/B,WAAoB,EACpB,IAA+D,EAC/D,MAA6B;QAE7B,iBAAiB;QACjB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uCAAuC;QACvC,MAAM,IAAI,GAA0B;YAClC,UAAU;YACV,IAAI;YACJ,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,IAAI,EAAE,aAAa;YAClC,YAAY,EAAE,IAAI,EAAE,YAAY;YAChC,yDAAyD;YACzD,OAAO,EAAE,IAAI,KAAK,SAAS;SAC5B,CAAC;QAEF,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EACjD,+CAA+C,CAChD,CAAC;YACF,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,sCAAsC;gBAC9C,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gEAAgE;QAChE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAC7B,IAA2B,EAC3B,UAAkB,EAClB,IAAY,EACZ,MAA6B;QAE7B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAoB,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;gBAC5C,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;gBACvC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2BAA2B;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;gBACtC,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,yBAAyB;IACjB,SAAS,CAAC,KAAiB;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
|