aegiscode 3.1.10 → 3.4.2

package/src/tools/execution/stages/PostHookStage.ts

@@ -1,71 +0,0 @@
-/**
- * Post Hook Stage - PostToolUse Hooks 执行阶段
- * 
- */
-
-import type { PipelineStage, ToolExecution } from '../types.js';
-import { onPostToolUse, onPostToolUseFailure } from '../../../hooks/index.js';
-
-export class PostHookStage implements PipelineStage {
-  readonly name = 'postHook';
-
-  async process(execution: ToolExecution): Promise<void> {
-    const result = execution.getResult();
-    if (!result) {
-      return;
-    }
-
-    const tool = execution._internal.tool;
-    if (!tool) {
-      return;
-    }
-
-    // 复用 PreToolUse 阶段生成
-    const toolUseId = execution._internal.hookToolUseId || `tool_post_${Date.now()}`;
-    const sessionId = execution.context.sessionId || 'unknown';
-    const projectDir = execution.context.workspaceRoot || process.cwd();
-    const permissionMode = execution.context.permissionMode;
-
-    // 根据执行成
-    if (result.success) {
-      // 执
-      const hookResult = await onPostToolUse(
-        tool.name,
-        toolUseId,
-        execution.params as Record<string, unknown>,
-        result,
-        sessionId,
-        projectDir,
-        permissionMode
-      );
-
-      // 处理 Hook 结果：添加额外上下
-      if (hookResult.additionalContext) {
-        // 将 Hook 注入的上下文追加
-        const currentResult = execution.getResult();
-        if (currentResult) {
-          currentResult.llmContent += `\n\n[Hook Context]\n${hookResult.additionalContext}`;
-        }
-      }
-
-      // 处理 Hook 结果：修改输
-      if (hookResult.modifiedOutput !== undefined) {
-        const currentResult = execution.getResult();
-        if (currentResult) {
-          currentResult.llmContent = String(hookResult.modifiedOutput);
-        }
-      }
-    } else {
-      // 执
-      await onPostToolUseFailure(
-        tool.name,
-        toolUseId,
-        execution.params as Record<string, unknown>,
-        result.error?.message || 'Unknown error',
-        sessionId,
-        projectDir,
-        permissionMode
-      );
-    }
-  }
-}

package/src/tools/execution/stages/index.ts

@@ -1,12 +0,0 @@
-/**
- * 
- */
-
-export { DiscoveryStage } from './DiscoveryStage.js';
-export { CacheStage } from './CacheStage.js';
-export { PermissionStage } from './PermissionStage.js';
-export { HookStage } from './HookStage.js';
-export { ConfirmationStage } from './ConfirmationStage.js';
-export { ExecutionStage } from './ExecutionStage.js';
-export { PostHookStage } from './PostHookStage.js';
-export { FormattingStage } from './FormattingStage.js';

package/src/tools/execution/test.ts

@@ -1,266 +0,0 @@
-/**
- * 
- * 
- * 
- */
-
-import { ExecutionPipeline, PermissionMode, type PipelineExecutionContext } from './index.js';
-import { ToolRegistry, createToolRegistry, getBuiltinTools } from '../index.js';
-import { PermissionChecker } from '../validation/PermissionChecker.js';
-import { SensitiveFileDetector, SensitivityLevel } from '../validation/SensitiveFileDetector.js';
-import * as fs from 'fs/promises';
-import * as path from 'path';
-import * as os from 'os';
-
-// ========== 测试辅
-
-let testDir: string;
-
-async function setup() {
-  testDir = path.join(os.tmpdir(), `pipeline-test-${Date.now()}`);
-  await fs.mkdir(testDir, { recursive: true });
-  
-  // 创建测试文
-  await fs.writeFile(path.join(testDir, 'test.txt'), 'Hello, World!');
-  await fs.writeFile(path.join(testDir, 'config.json'), '{"key": "value"}');
-}
-
-async function cleanup() {
-  try {
-    await fs.rm(testDir, { recursive: true, force: true });
-  } catch {
-    // Ignore cleanup errors
-  }
-}
-
-function createTestContext(mode: PermissionMode = PermissionMode.DEFAULT): PipelineExecutionContext {
-  return {
-    sessionId: 'test-session',
-    workspaceRoot: testDir,
-    permissionMode: mode,
-  };
-}
-
-// ========== 测
-
-async function testPermissionChecker() {
-  console.log('\n1. 测试 PermissionChecker');
-  
-  const checker = new PermissionChecker({
-    allow: ['Bash(npm:*)'],
-    deny: ['Bash(rm -rf:*)'],
-  });
-  
-  // 测试 allow 规
-  const allowResult = checker.check({
-    toolName: 'Bash',
-    params: { command: 'npm test' },
-  });
-  console.log(`   npm test: ${allowResult.result} (expected: allow)`);
-  
-  // 测试 deny 规
-  const denyResult = checker.check({
-    toolName: 'Bash',
-    params: { command: 'rm -rf /' },
-  });
-  console.log(`   rm -rf: ${denyResult.result} (expected: deny)`);
-  
-  // 测试默
-  const askResult = checker.check({
-    toolName: 'Write',
-    params: { file_path: '/tmp/test.txt' },
-  });
-  console.log(`   Write: ${askResult.result} (expected: ask)`);
-}
-
-async function testSensitiveFileDetector() {
-  console.log('\n2. 测试 SensitiveFileDetector');
-  
-  // 高敏
-  const envResult = SensitiveFileDetector.check('.env');
-  console.log(`   .env: ${envResult.level} (expected: high)`);
-  
-  // 中敏
-  const logResult = SensitiveFileDetector.check('app.log');
-  console.log(`   app.log: ${logResult.level} (expected: medium)`);
-  
-  // 低敏
-  const configResult = SensitiveFileDetector.check('config.json');
-  console.log(`   config.json: ${configResult.level} (expected: low)`);
-  
-  // 非敏
-  const normalResult = SensitiveFileDetector.check('main.ts');
-  console.log(`   main.ts: sensitive=${normalResult.sensitive} (expected: false)`);
-  
-  // 危险路
-  const dangerous = SensitiveFileDetector.isDangerousPath('/etc/passwd');
-  console.log(`   /etc/passwd: dangerous=${dangerous} (expected: true)`);
-}
-
-async function testPipelineReadOnly() {
-  console.log('\n3. 测试只读工具执行');
-  
-  const registry = createToolRegistry();
-  const builtinTools = getBuiltinTools();
-  for (const tool of builtinTools) {
-    registry.register(tool);
-  }
-  
-  const pipeline = new ExecutionPipeline(registry);
-  const context = createTestContext();
-  
-  // 测试 Read 工
-  const testFile = path.join(testDir, 'test.txt');
-  const readResult = await pipeline.execute('Read', { file_path: testFile }, context);
-  console.log(`   Read: success=${readResult.success}, content includes 'Hello'=${readResult.llmContent.includes('Hello')}`);
-  
-  // 测试 Glob 工
-  const globResult = await pipeline.execute('Glob', { pattern: '*.txt', path: testDir }, context);
-  console.log(`   Glob: success=${globResult.success}, found files=${globResult.llmContent.includes('test.txt')}`);
-}
-
-async function testPermissionModes() {
-  console.log('\n4. 测试权限模式');
-  
-  const registry = createToolRegistry();
-  const builtinTools = getBuiltinTools();
-  for (const tool of builtinTools) {
-    registry.register(tool);
-  }
-  
-  const pipeline = new ExecutionPipeline(registry);
-  const testFile = path.join(testDir, 'write-test.txt');
-  
-  // PLAN 模式：Write 应该被拒
-  const planContext = createTestContext(PermissionMode.PLAN);
-  const planResult = await pipeline.execute(
-    'Write',
-    { file_path: testFile, contents: 'test' },
-    planContext
-  );
-  console.log(`   PLAN + Write: success=${planResult.success} (expected: false)`);
-  
-  // YOLO 模式：Write 应该自动批
-  const yoloContext = createTestContext(PermissionMode.YOLO);
-  const yoloResult = await pipeline.execute(
-    'Write',
-    { file_path: testFile, contents: 'YOLO test' },
-    yoloContext
-  );
-  console.log(`   YOLO + Write: success=${yoloResult.success} (expected: true)`);
-  
-  // 验证文件内
-  const content = await fs.readFile(testFile, 'utf8');
-  console.log(`   File content correct: ${content === 'YOLO test'}`);
-}
-
-async function testPipelineStages() {
-  console.log('\n5. 测试管道阶段事件');
-  
-  const registry = createToolRegistry();
-  const builtinTools = getBuiltinTools();
-  for (const tool of builtinTools) {
-    registry.register(tool);
-  }
-  
-  const pipeline = new ExecutionPipeline(registry);
-  const context = createTestContext(PermissionMode.YOLO);
-  
-  const stagesExecuted = pipeline.getStageNames();
-
-  const testFile = path.join(testDir, 'test.txt');
-  await pipeline.execute('Read', { file_path: testFile }, context);
-
-  console.log(`   Stages: ${stagesExecuted.join(' → ')}`);
-  console.log(`   All ${stagesExecuted.length} stages executed: ${stagesExecuted.length === 8}`);
-}
-
-async function testExecutionHistory() {
-  console.log('\n6. 测试执行历史');
-  
-  const registry = createToolRegistry();
-  const builtinTools = getBuiltinTools();
-  for (const tool of builtinTools) {
-    registry.register(tool);
-  }
-  
-  const pipeline = new ExecutionPipeline(registry);
-  const context = createTestContext(PermissionMode.YOLO);
-  
-  // 执行几个操
-  const testFile = path.join(testDir, 'test.txt');
-  await pipeline.execute('Read', { file_path: testFile }, context);
-  await pipeline.execute('Glob', { pattern: '*', path: testDir }, context);
-  
-  const history = pipeline.getHistory();
-  console.log(`   History entries: ${history.length} (expected: 2)`);
-  console.log(`   First entry tool: ${history[0]?.toolName} (expected: Read)`);
-}
-
-async function testSessionApprovals() {
-  console.log('\n7. 测试会话批准');
-  
-  const registry = createToolRegistry();
-  const builtinTools = getBuiltinTools();
-  for (const tool of builtinTools) {
-    registry.register(tool);
-  }
-  
-  const pipeline = new ExecutionPipeline(registry);
-  
-  // 手动添加会话批
-  pipeline.addSessionApproval('Write(/tmp/approved.txt)');
-  
-  console.log(`   Has approval: ${pipeline.hasSessionApproval('Write(/tmp/approved.txt)')} (expected: true)`);
-  console.log(`   No approval: ${pipeline.hasSessionApproval('Write(/tmp/other.txt)')} (expected: false)`);
-  
-  // 清
-  pipeline.clearSessionApprovals();
-  console.log(`   After clear: ${pipeline.hasSessionApproval('Write(/tmp/approved.txt)')} (expected: false)`);
-}
-
-async function testBashTool() {
-  console.log('\n8. 测试 Bash 工具');
-  
-  const registry = createToolRegistry();
-  const builtinTools = getBuiltinTools();
-  for (const tool of builtinTools) {
-    registry.register(tool);
-  }
-  
-  const pipeline = new ExecutionPipeline(registry);
-  const context = createTestContext(PermissionMode.YOLO);
-  
-  // 简单命
-  const echoResult = await pipeline.execute(
-    'Bash',
-    { command: 'echo "Pipeline Test"' },
-    context
-  );
-  console.log(`   echo: success=${echoResult.success}, output includes 'Pipeline Test'=${echoResult.llmContent.includes('Pipeline Test')}`);
-}
-
-// ========== 主函
-
-async function main() {
-  console.log('=== 执行管道测试 ===');
-  
-  try {
-    await setup();
-    
-    await testPermissionChecker();
-    await testSensitiveFileDetector();
-    await testPipelineReadOnly();
-    await testPermissionModes();
-    await testPipelineStages();
-    await testExecutionHistory();
-    await testSessionApprovals();
-    await testBashTool();
-    
-    console.log('\n=== 测试完成 ===');
-  } finally {
-    await cleanup();
-  }
-}
-
-main().catch(console.error);

package/src/tools/execution/types.ts

@@ -1,273 +0,0 @@
-/**
- * 
- */
-
-import type { Tool, ToolResult, ToolInvocation } from '../types.js';
-
-// ========== 权限模
-
-/**
- * 
- */
-export enum PermissionMode {
-  /** 默认模式：写操作需确认 */
-  DEFAULT = 'default',
-  /** 自动批准编辑 */
-  AUTO_EDIT = 'autoEdit',
-  /** 自动批准所有 */
-  YOLO = 'yolo',
-  /** 只读调研模式 */
-  PLAN = 'plan',
-}
-
-// ========== 权限检
-
-/**
- * 
- */
-export enum PermissionResult {
-  ALLOW = 'allow',
-  ASK = 'ask',
-  DENY = 'deny',
-}
-
-/**
- * 
- */
-export interface PermissionCheckResult {
-  result: PermissionResult;
-  matchedRule?: string;
-  reason?: string;
-}
-
-/**
- * 
- */
-export interface PermissionConfig {
-  allow: string[];
-  deny: string[];
-  ask: string[];
-}
-
-/**
- * 
- */
-export interface ToolInvocationDescriptor {
-  toolName: string;
-  params: Record<string, unknown>;
-  affectedPaths?: string[];
-  tool?: Tool;
-}
-
-// ========== 确认机
-
-/**
- * 
- */
-export interface ConfirmationDetails {
-  title: string;
-  message: string;
-  details?: string;
-  risks?: string[];
-  affectedFiles?: string[];
-}
-
-/**
- * 
- */
-export interface ConfirmationResponse {
-  approved: boolean;
-  reason?: string;
-  scope?: 'once' | 'session';
-}
-
-/**
- * 
- */
-export interface ConfirmationHandler {
-  requestConfirmation(details: ConfirmationDetails): Promise<ConfirmationResponse>;
-}
-
-// ========== 执行上下
-
-/**
- * 
- */
-export interface PipelineExecutionContext {
-  sessionId: string;
-  workspaceRoot: string;
-  permissionMode: PermissionMode;
-  signal?: AbortSignal;
-  onProgress?: (progress: ToolProgress) => void;
-  confirmationHandler?: ConfirmationHandler;
-  messageId?: string;
-  /** Per-model setting: false skips confirmation prompts entirely. Defaults to true. */
-  requireConfirmation?: boolean;
-}
-
-/**
- * 
- */
-export interface ToolProgress {
-  stage: string;
-  message: string;
-  percent?: number;
-}
-
-// ========== 工具执
-
-/**
- * 
- */
-export interface ToolExecutionInternal {
-  tool?: Tool;
-  invocation?: ToolInvocation;
-  needsConfirmation?: boolean;
-  confirmationReason?: string;
-  permissionSignature?: string;
-  hookToolUseId?: string;
-  /**
-   * Set when the command pilots another terminal session (tmux send-keys,
-   * screen -X stuff, etc.) — a vector for a model to mutate shared state
-   * (config.json, files) by typing into a second instance's stdin as if it
-   * were a real user, bypassing both per-model requireConfirmation and any
-   * session "always allow" approval. When true, ConfirmationStage must show
-   * the prompt regardless of either.
-   */
-  forceConfirmation?: boolean;
-
-  /** Cache key set by CacheStage — ExecutionStage uses it to store results */
-  cacheKey?: string;
-}
-
-/**
- * 
- */
-export class ToolExecution {
-  private result?: ToolResult;
-  private aborted = false;
-  private abortReason?: string;
-
-  readonly _internal: ToolExecutionInternal = {};
-
-  constructor(
-    public readonly toolName: string,
-    public params: Record<string, unknown>,
-    public readonly context: PipelineExecutionContext
-  ) {}
-
-  /**
-   * 
-   */
-  abort(reason: string): void {
-    this.aborted = true;
-    this.abortReason = reason;
-  }
-
-  /**
-   * 
-   */
-  isAborted(): boolean {
-    return this.aborted;
-  }
-
-  /**
-   * 
-   */
-  getAbortReason(): string | undefined {
-    return this.abortReason;
-  }
-
-  /**
-   * 
-   */
-  setResult(result: ToolResult): void {
-    this.result = result;
-  }
-
-  /**
-   * 
-   */
-  getResult(): ToolResult | undefined {
-    return this.result;
-  }
-}
-
-// ========== 管道阶
-
-/**
- * 
- */
-export interface PipelineStage {
-  readonly name: string;
-  process(execution: ToolExecution): Promise<void>;
-}
-
-// ========== 管道配
-
-/**
- * 
- */
-export interface ExecutionPipelineConfig {
-  permissions?: PermissionConfig;
-  defaultMode?: PermissionMode;
-  /** Per-model allowed tools — overrides global whitelist for the current model */
-  allowedTools?: string[];
-  /** Per-model disallowed tools — overrides global blacklist for the current model */
-  disallowedTools?: string[];
-}
-
-// ========== 执行历
-
-/**
- * 
- */
-export interface ExecutionHistoryEntry {
-  toolName: string;
-  params: Record<string, unknown>;
-  result: ToolResult;
-  timestamp: number;
-  duration: number;
-  permissionMode: PermissionMode;
-  stages: string[];
-}
-
-// ========== Hook 相
-
-/**
- * Pre-Tool Hook 结果
- */
-export interface PreToolHookResult {
-  decision: 'allow' | 'ask' | 'deny';
-  modifiedInput?: Record<string, unknown>;
-  reason?: string;
-  warning?: string;
-}
-
-/**
- * Post-Tool Hook 参数
- */
-export interface PostToolHookParams {
-  toolName: string;
-  params: Record<string, unknown>;
-  result?: ToolResult;
-  context: PipelineExecutionContext;
-}
-
-// ========== 管道事
-
-/**
- * 
- */
-export interface StageStartEvent {
-  stage: string;
-  execution: ToolExecution;
-}
-
-/**
- * 
- */
-export interface StageCompleteEvent {
-  stage: string;
-  execution: ToolExecution;
-}

package/src/tools/index.ts

@@ -1,81 +0,0 @@
-/**
- * 
- */
-
-// 类
-export {
-  ToolKind,
-  ToolErrorType,
-} from './types.js';
-
-export type {
-  Tool,
-  ToolResult,
-  ToolError,
-  ToolDescription,
-  ToolExample,
-  ExecutionContext,
-  FunctionDeclaration,
-  ToolInvocation,
-} from './types.js';
-
-// 工厂函
-export { createTool } from './createTool.js';
-export type { ToolConfig } from './createTool.js';
-
-// Schema
-export { ToolSchemas, optional } from './schemas.js';
-
-// 注册
-export { ToolRegistry, createToolRegistry } from './registry.js';
-
-// 注册表事
-export type { ToolRegisteredEvent } from './registry.js';
-
-// 内置工
-export {
-  readTool,
-  editTool,
-  writeTool,
-  grepTool,
-  bashTool,
-  getBuiltinTools,
-} from './builtin/index.js';
-
-// 执行管
-export {
-  ExecutionPipeline,
-  PermissionMode,
-  PermissionResult,
-  ToolExecution,
-} from './execution/index.js';
-
-export type {
-  ExecutionPipelineEvents,
-  PipelineStage,
-  PipelineExecutionContext,
-  ExecutionPipelineConfig,
-  ExecutionHistoryEntry,
-  PermissionCheckResult,
-  PermissionConfig,
-  ToolInvocationDescriptor,
-  ConfirmationDetails,
-  ConfirmationResponse,
-  ConfirmationHandler,
-  ToolProgress,
-  PreToolHookResult,
-  PostToolHookParams,
-} from './execution/index.js';
-
-// 验
-export {
-  PermissionChecker,
-  DEFAULT_PERMISSION_CONFIG,
-  SensitiveFileDetector,
-  SensitivityLevel,
-} from './validation/index.js';
-
-export type {
-  SensitivityResult,
-  SensitivityResultWithPath,
-} from './validation/index.js';