agentroam 0.2.0-preview.3 → 0.2.0-preview.5

package/runtime/node_modules/@agent/core/dist/index.js

@@ -12,6 +12,382 @@ var __export = (target, all) => {
       set: __exportSetter.bind(all, name)
     });
 };
+
+// src/domain/agent/native-runtime-events.ts
+function mergeReasoningSummaryDelta(sections, event) {
+  const current = sections ?? [];
+  const index = current.findIndex((section) => section.itemId === event.itemId && section.sectionIndex === event.sectionIndex);
+  const next = index < 0 ? [...current, { itemId: event.itemId, sectionIndex: event.sectionIndex, text: event.delta }] : current.map((section, sectionIndex) => sectionIndex === index ? { ...section, text: section.text + event.delta } : section);
+  return next.sort((left, right) => left.sectionIndex - right.sectionIndex);
+}
+function reduceRuntimeProgress(events) {
+  const progress = new Map;
+  for (const event of events) {
+    if (event.type === "runtime_progress") {
+      const { type: _type, ...value } = event;
+      progress.set(event.progressId, value);
+      continue;
+    }
+    if (event.type === "done" || event.type === "turn_aborted" || event.type === "error") {
+      progress.clear();
+    }
+  }
+  return [...progress.values()];
+}
+// src/domain/tool/permissions.ts
+import { isAbsolute, relative, resolve, sep } from "node:path";
+var TOOL_PERMISSION_MODES = [
+  "request-approval",
+  "auto-approval",
+  "full-access"
+];
+var TOOL_APPROVAL_OPTIONS = [
+  { label: "允许一次", description: "仅允许当前这次工具调用" },
+  { label: "本会话允许", description: "当前会话再次执行相同工具和目标时不再询问" },
+  { label: "拒绝", description: "不执行这次工具调用，让 Agent 继续处理" },
+  { label: "取消本轮", description: "不执行工具，并立即停止当前回复" }
+];
+var SAFE_TOOLS = new Set([
+  "ask_user",
+  "read_file",
+  "grep",
+  "glob",
+  "show_widget",
+  "todo_add",
+  "todo_update",
+  "todo_list",
+  "wait_agent",
+  "cron_list",
+  "lsp_diagnostics",
+  "lsp_hover",
+  "lsp_definition",
+  "lsp_references"
+]);
+var FILE_WRITE_TOOLS = new Set(["write_file", "str_replace", "apply_patch"]);
+var RISKY_LOCAL_TOOLS = new Set(["cron_create", "cron_delete", "dispatch_agent"]);
+var NETWORK_TOOLS = new Set(["web_fetch", "web_search"]);
+var RISKY_SHELL_PATTERNS = [
+  { pattern: /(^|[;&|]\s*)sudo\b/i, reason: "命令会以提升后的系统权限运行" },
+  { pattern: /\brm\s+(?:-[^\s]*[rf][^\s]*\s+|--recursive\b|--force\b)/i, reason: "命令可能递归或强制删除文件" },
+  { pattern: /\bgit\s+(?:push|clean\s+-[^\s]*f|reset\s+--hard|checkout\s+--|branch\s+-D)\b/i, reason: "命令会改变远端或丢弃本地 Git 数据" },
+  { pattern: /\b(?:npm|pnpm|yarn|bun)\s+(?:publish|deploy)\b/i, reason: "命令会发布或部署产物" },
+  { pattern: /\b(?:docker\s+push|kubectl\s+(?:apply|delete|replace|patch)|helm\s+(?:install|upgrade|uninstall))\b/i, reason: "命令会修改远程运行环境" },
+  { pattern: /\b(?:systemctl|launchctl|shutdown|reboot|killall|pkill)\b/i, reason: "命令会改变系统进程或服务状态" },
+  { pattern: /\b(?:chmod|chown)\b/i, reason: "命令会修改文件权限或所有者" },
+  { pattern: /\bcurl\b[^\n]*(?:-X\s*(?:POST|PUT|PATCH|DELETE)\b|--request\s+(?:POST|PUT|PATCH|DELETE)\b|(?:-d|--data(?:-raw|-binary)?)\s)/i, reason: "命令会向网络服务提交或修改数据" },
+  { pattern: /\b(?:release|deploy|publish)\b/i, reason: "命令包含发布或部署操作" }
+];
+function normalizeToolPermissionMode(value) {
+  return isToolPermissionMode(value) ? value : "full-access";
+}
+function isToolPermissionMode(value) {
+  return typeof value === "string" && TOOL_PERMISSION_MODES.includes(value);
+}
+function toolApprovalDecisionFromAnswer(answer, selectedIndices) {
+  const index = selectedIndices?.[0] ?? TOOL_APPROVAL_OPTIONS.findIndex((option) => option.label === answer);
+  return ["allow-once", "allow-session", "deny", "cancel"][index] ?? "deny";
+}
+function compact(value, maxLength = 140) {
+  const text = typeof value === "string" ? value.replace(/\s+/g, " ").trim() : "";
+  return text.length > maxLength ? `${text.slice(0, maxLength - 1)}...` : text;
+}
+function isWithinWorkingDirectory(path, workingDirectory) {
+  const root = resolve(workingDirectory);
+  const target = resolve(root, path);
+  const rel = relative(root, target);
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
+}
+function patchPaths(patch) {
+  if (typeof patch !== "string")
+    return [];
+  return patch.split(`
+`).filter((line) => line.startsWith("+++ ")).map((line) => line.slice(4).split("\t", 1)[0].trim()).filter((path) => path && path !== "/dev/null").map((path) => path.startsWith("b/") ? path.slice(2) : path);
+}
+function writePaths(toolName, args) {
+  if (toolName === "apply_patch")
+    return patchPaths(args.patch);
+  return typeof args.file_path === "string" ? [args.file_path] : [];
+}
+function networkResource(toolName, args) {
+  if (toolName === "web_search")
+    return `web-search:${compact(args.query, 80)}`;
+  if (typeof args.url !== "string")
+    return `${toolName}:network`;
+  try {
+    return `${toolName}:${new URL(args.url).host}`;
+  } catch {
+    return `${toolName}:${compact(args.url, 80)}`;
+  }
+}
+function riskyShellReason(command) {
+  return RISKY_SHELL_PATTERNS.find(({ pattern }) => pattern.test(command))?.reason;
+}
+function externalShellWriteReason(command, workingDirectory) {
+  const redirectedPaths = Array.from(command.matchAll(/(?:^|\s)>{1,2}\s*["']?([^\s;&|><"']+)/g)).map((match) => match[1]);
+  if (redirectedPaths.some((path) => !isWithinWorkingDirectory(path, workingDirectory))) {
+    return "命令会通过重定向修改工作区外文件";
+  }
+  if (!/(?:^|[;&|]\s*)(?:rm|mv|cp|mkdir|touch|tee|truncate|install)\b|\bsed\b[^\n]*\s-i\b/i.test(command)) {
+    return;
+  }
+  const absolutePaths = Array.from(command.matchAll(/(?:^|\s)(\/[^\s;&|><"']+)/g)).map((match) => match[1]);
+  return absolutePaths.some((path) => !isWithinWorkingDirectory(path, workingDirectory)) ? "命令会修改工作区外文件" : undefined;
+}
+function classifyToolPermission(toolName, args, workingDirectory) {
+  if (SAFE_TOOLS.has(toolName)) {
+    return {
+      kind: "safe",
+      risky: false,
+      summary: `使用 ${toolName}`,
+      reason: "只读取信息或更新当前会话状态",
+      resourceKey: toolName
+    };
+  }
+  if (FILE_WRITE_TOOLS.has(toolName)) {
+    const paths = writePaths(toolName, args);
+    const externalPaths = paths.filter((path) => !isWithinWorkingDirectory(path, workingDirectory));
+    const shownPaths = (externalPaths.length > 0 ? externalPaths : paths).map((path) => compact(path, 100));
+    const keyedPaths = (externalPaths.length > 0 ? externalPaths : paths).slice().sort();
+    const external = externalPaths.length > 0 || paths.length === 0;
+    return {
+      kind: external ? "external-write" : "workspace-write",
+      risky: external,
+      summary: `${external ? "修改工作区外文件" : "修改工作区文件"}${shownPaths.length ? `：${shownPaths.join("、")}` : ""}`,
+      reason: external ? "目标文件不在当前工作区内" : "目标文件位于当前工作区内",
+      resourceKey: `${toolName}:${keyedPaths.join("|") || "unknown-path"}`
+    };
+  }
+  if (toolName === "bash") {
+    const rawCommand = typeof args.command === "string" ? args.command.replace(/\s+/g, " ").trim() : "";
+    const command = compact(rawCommand, 240);
+    const reason = riskyShellReason(rawCommand) ?? externalShellWriteReason(rawCommand, workingDirectory);
+    return {
+      kind: "shell",
+      risky: Boolean(reason),
+      summary: `运行命令：${command || "(空命令)"}`,
+      reason: reason ?? "命令将在当前工作区的终端中运行",
+      resourceKey: `bash:${rawCommand || "unknown-command"}`
+    };
+  }
+  if (NETWORK_TOOLS.has(toolName)) {
+    const target = toolName === "web_search" ? compact(args.query, 100) : compact(args.url, 120);
+    return {
+      kind: "network",
+      risky: false,
+      summary: `${toolName === "web_search" ? "搜索网络" : "访问网络"}：${target || "未指定目标"}`,
+      reason: "工具将连接互联网读取信息",
+      resourceKey: networkResource(toolName, args)
+    };
+  }
+  if (toolName.startsWith("mcp_")) {
+    return {
+      kind: "remote",
+      risky: true,
+      summary: `调用 MCP 工具：${toolName.slice(4)}`,
+      reason: "MCP 工具可能修改外部系统，当前无法可靠判定其副作用",
+      resourceKey: toolName
+    };
+  }
+  if (toolName === "remote_project_action") {
+    const action = compact(args.action, 100) || "unknown-action";
+    const readOnly = action === "remote_job_status";
+    return {
+      kind: readOnly ? "safe" : "remote",
+      risky: !readOnly,
+      summary: readOnly ? "查询远程任务状态" : `执行远程动作：${action}`,
+      reason: readOnly ? "只查询已提交任务的状态" : "该动作会调用远程项目服务",
+      resourceKey: `remote_project_action:${action}`
+    };
+  }
+  if (RISKY_LOCAL_TOOLS.has(toolName)) {
+    return {
+      kind: "risky-local",
+      risky: true,
+      summary: `执行 ${toolName}`,
+      reason: toolName === "dispatch_agent" ? "子 Agent 会继续执行新的工具调用" : "该操作会改变定时任务状态",
+      resourceKey: `${toolName}:${compact(args.agentName ?? args.cron ?? args.id, 100) || "default"}`
+    };
+  }
+  return {
+    kind: "unknown",
+    risky: true,
+    summary: `调用未分类工具：${toolName}`,
+    reason: "当前无法判断该工具是否会产生副作用",
+    resourceKey: `unknown:${toolName}`
+  };
+}
+function requiresApproval(mode, classification) {
+  if (mode === "full-access")
+    return false;
+  if (mode === "auto-approval")
+    return classification.risky || classification.kind === "unknown";
+  return ["external-write", "shell", "network", "remote", "risky-local", "unknown"].includes(classification.kind);
+}
+
+class ToolPermissionGate {
+  options;
+  sessionApprovals = new Map;
+  approvalQueues = new Map;
+  constructor(options) {
+    this.options = options;
+  }
+  clearSession(sessionId) {
+    this.sessionApprovals.delete(sessionId);
+  }
+  async authorize(toolName, args, ctx) {
+    if (ctx.signal?.aborted)
+      return "cancel";
+    const mode = normalizeToolPermissionMode(await this.options.resolveMode(ctx.sessionId));
+    if (mode === "full-access")
+      return "allow";
+    const classification = classifyToolPermission(toolName, args, ctx.workingDirectory);
+    if (!requiresApproval(mode, classification))
+      return "allow";
+    if (this.sessionApprovals.get(ctx.sessionId)?.has(classification.resourceKey))
+      return "allow";
+    return this.enqueue(ctx.sessionId, async () => {
+      if (ctx.signal?.aborted)
+        return "cancel";
+      if (this.sessionApprovals.get(ctx.sessionId)?.has(classification.resourceKey))
+        return "allow";
+      const decision = await this.options.requestApproval({
+        sessionId: ctx.sessionId,
+        toolName,
+        summary: classification.summary,
+        reason: classification.reason,
+        resourceKey: classification.resourceKey,
+        args
+      });
+      if (ctx.signal?.aborted)
+        return "cancel";
+      if (decision === "allow-session") {
+        const approvals = this.sessionApprovals.get(ctx.sessionId) ?? new Set;
+        approvals.add(classification.resourceKey);
+        this.sessionApprovals.set(ctx.sessionId, approvals);
+        return "allow";
+      }
+      if (decision === "allow-once")
+        return "allow";
+      return decision;
+    });
+  }
+  async enqueue(sessionId, task) {
+    const previous = this.approvalQueues.get(sessionId) ?? Promise.resolve();
+    let release = () => {
+      return;
+    };
+    const current = new Promise((resolve2) => {
+      release = resolve2;
+    });
+    const queued = previous.then(() => current);
+    this.approvalQueues.set(sessionId, queued);
+    await previous;
+    try {
+      return await task();
+    } finally {
+      release();
+      if (this.approvalQueues.get(sessionId) === queued)
+        this.approvalQueues.delete(sessionId);
+    }
+  }
+}
+
+class PermissionAwareToolExecutor {
+  delegate;
+  gate;
+  constructor(delegate, gate) {
+    this.delegate = delegate;
+    this.gate = gate;
+  }
+  validate(name, args) {
+    return this.delegate.validate(name, args);
+  }
+  async execute(name, args, ctx) {
+    const decision = await this.gate.authorize(name, args, ctx);
+    if (decision === "cancel")
+      throw new Error("turn_aborted");
+    if (decision === "deny") {
+      return {
+        toolCallId: "",
+        content: `Permission denied by user: ${name}`,
+        isError: true
+      };
+    }
+    return this.delegate.execute(name, args, ctx);
+  }
+}
+// src/domain/session/SessionHistory.ts
+var DEFAULT_SESSION_HISTORY_PAGE_SIZE = 50;
+var MAX_SESSION_HISTORY_PAGE_SIZE = 100;
+var CURSOR_PREFIX = "history.v1.";
+function paginateSessionHistory(messages, events, query = {}) {
+  const pageSize = normalizePageSize(query.limit);
+  const visibleMessages = messages.filter((message) => message.role === "user" || message.role === "assistant");
+  const toolResults = new Map;
+  for (const message of messages) {
+    if (message.role === "tool" && message.toolCallId) {
+      toolResults.set(message.toolCallId, message);
+    }
+  }
+  const end = decodeCursor(query.before, visibleMessages.length);
+  const start = Math.max(0, end - pageSize);
+  const selected = visibleMessages.slice(start, end);
+  const pageMessages = [];
+  const selectedToolCallIds = new Set;
+  for (const message of selected) {
+    pageMessages.push(message);
+    for (const toolCall of message.toolCalls ?? []) {
+      selectedToolCallIds.add(toolCall.id);
+      const result = toolResults.get(toolCall.id);
+      if (result)
+        pageMessages.push(result);
+    }
+  }
+  return {
+    messages: pageMessages,
+    events: selectPageEvents(events, selectedToolCallIds),
+    history: {
+      nextCursor: start > 0 ? `${CURSOR_PREFIX}${start}` : null,
+      hasMore: start > 0,
+      pageSize: selected.length,
+      totalItems: visibleMessages.length
+    }
+  };
+}
+function normalizePageSize(limit) {
+  if (!Number.isFinite(limit))
+    return DEFAULT_SESSION_HISTORY_PAGE_SIZE;
+  return Math.max(1, Math.min(MAX_SESSION_HISTORY_PAGE_SIZE, Math.floor(limit)));
+}
+function decodeCursor(cursor, fallback) {
+  if (!cursor?.startsWith(CURSOR_PREFIX))
+    return fallback;
+  const value = Number(cursor.slice(CURSOR_PREFIX.length));
+  if (!Number.isSafeInteger(value) || value < 0)
+    return fallback;
+  return Math.min(value, fallback);
+}
+function selectPageEvents(events, toolCallIds) {
+  const selected = [];
+  let latestContextUsage;
+  for (const event of events) {
+    if (event.type === "context_usage")
+      latestContextUsage = event;
+    if (event.type === "tool_result" && toolCallIds.has(event.result.toolCallId)) {
+      selected.push(event);
+    }
+    if (event.type === "native_subagent_update" && toolCallIds.has(event.activity.parentToolCallId)) {
+      const existingIndex = selected.findIndex((candidate) => candidate.type === "native_subagent_update" && candidate.activity.parentToolCallId === event.activity.parentToolCallId);
+      if (existingIndex >= 0)
+        selected[existingIndex] = event;
+      else
+        selected.push(event);
+    }
+  }
+  if (latestContextUsage)
+    selected.unshift(latestContextUsage);
+  return selected;
+}
 // src/domain/lsp/LSPClient.ts
 import { spawn } from "node:child_process";
 import { EventEmitter } from "node:events";
@@ -52,19 +428,19 @@ class LSPClient extends EventEmitter {
   }
   flushBuffer() {
     while (true) {
-      const sep = this.buffer.indexOf(`\r
+      const sep2 = this.buffer.indexOf(`\r
 \r
 `);
-      if (sep === -1)
+      if (sep2 === -1)
         break;
-      const header = this.buffer.slice(0, sep);
+      const header = this.buffer.slice(0, sep2);
       const m = header.match(/Content-Length:\s*(\d+)/i);
       if (!m) {
         this.buffer = "";
         break;
       }
       const len = parseInt(m[1], 10);
-      const bodyStart = sep + 4;
+      const bodyStart = sep2 + 4;
       if (this.buffer.length < bodyStart + len)
         break;
       const body = this.buffer.slice(bodyStart, bodyStart + len);
@@ -101,9 +477,9 @@ class LSPClient extends EventEmitter {
   }
   request(method, params, timeoutMs = 1e4) {
     const id = this.nextId++;
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       this.pending.set(id, {
-        resolve,
+        resolve: resolve2,
         reject
       });
       this.write({ id, method, params });
@@ -164,16 +540,16 @@ class LSPClient extends EventEmitter {
     const cached = this.diagnosticsMap.get(uri);
     if (cached !== undefined)
       return cached;
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       const timeout = setTimeout(() => {
         this.off("diagnostics", handler);
-        resolve([]);
+        resolve2([]);
       }, 5000);
       const handler = (params) => {
         if (params.uri === uri) {
           clearTimeout(timeout);
           this.off("diagnostics", handler);
-          resolve(params.diagnostics);
+          resolve2(params.diagnostics);
         }
       };
       this.on("diagnostics", handler);
@@ -322,8 +698,8 @@ var PASSWORD_VERSION = 1;
 var KEY_LENGTH = 32;
 var SCRYPT_OPTIONS = { N: 16384, r: 8, p: 1, maxmem: 64 * 1024 * 1024 };
 function derive(password, salt) {
-  return new Promise((resolve, reject) => {
-    scrypt(password, salt, KEY_LENGTH, SCRYPT_OPTIONS, (error, key) => error ? reject(error) : resolve(key));
+  return new Promise((resolve2, reject) => {
+    scrypt(password, salt, KEY_LENGTH, SCRYPT_OPTIONS, (error, key) => error ? reject(error) : resolve2(key));
   });
 }
 async function hashPassword(password) {
@@ -469,6 +845,116 @@ function validateCredentials(username, password) {
   if (password.length < 10)
     throw new WebAuthError("INVALID_INPUT", "密码至少 10 位", 400);
 }
+// src/domain/web-console/WebProjectBridge.ts
+var WEBAPP_PROJECT_REQUEST_TYPE = "agent-webapp:project-request:v1";
+var WEBAPP_PROJECT_RESPONSE_TYPE = "agent-web-shell:project-response:v1";
+var WEB_PROJECT_METHODS = [
+  "project:list",
+  "project:get",
+  "project:create",
+  "project:rename",
+  "project:delete",
+  "project:roots",
+  "project:directories",
+  "project:check"
+];
+var methodSet = new Set(WEB_PROJECT_METHODS);
+function parseWebProjectRequest(data) {
+  if (!data || typeof data !== "object")
+    return null;
+  const candidate = data;
+  if (candidate.type !== WEBAPP_PROJECT_REQUEST_TYPE)
+    return null;
+  if (!Number.isSafeInteger(candidate.id) || Number(candidate.id) < 1)
+    return null;
+  if (typeof candidate.method !== "string" || !methodSet.has(candidate.method))
+    return null;
+  if (!candidate.payload || typeof candidate.payload !== "object" || Array.isArray(candidate.payload))
+    return null;
+  return candidate;
+}
+function readWebProjectRequest(event, expectedOrigin, expectedSource) {
+  if (event.origin !== expectedOrigin || event.source !== expectedSource)
+    return null;
+  return parseWebProjectRequest(event.data);
+}
+function parseWebProjectResponse(data) {
+  if (!data || typeof data !== "object")
+    return null;
+  const candidate = data;
+  if (candidate.type !== WEBAPP_PROJECT_RESPONSE_TYPE)
+    return null;
+  if (!Number.isSafeInteger(candidate.id) || Number(candidate.id) < 1)
+    return null;
+  if (typeof candidate.ok !== "boolean")
+    return null;
+  if (!candidate.ok && typeof candidate.error !== "string")
+    return null;
+  return candidate;
+}
+// src/domain/file/file-types.ts
+var extensionGroups = [
+  ["style", new Set(["css", "scss", "sass", "less", "styl"])],
+  ["image", new Set(["png", "jpg", "jpeg", "gif", "webp", "avif", "bmp", "ico", "svg", "tif", "tiff"])],
+  ["video", new Set(["mp4", "mov", "m4v", "webm", "mkv", "avi", "wmv", "flv", "mpeg", "mpg"])],
+  ["audio", new Set(["mp3", "wav", "m4a", "aac", "ogg", "flac", "opus"])],
+  ["markdown", new Set(["md", "mdx", "markdown"])],
+  ["json", new Set(["json", "jsonc", "geojson"])],
+  ["archive", new Set(["zip", "tar", "gz", "tgz", "bz2", "xz", "7z", "rar"])],
+  ["spreadsheet", new Set(["csv", "tsv", "xls", "xlsx", "ods"])],
+  ["presentation", new Set(["ppt", "pptx", "key", "odp"])],
+  ["database", new Set(["db", "sqlite", "sqlite3"])],
+  ["text", new Set(["txt", "log", "rtf", "ini", "cfg", "conf", "env", "yaml", "yml", "toml", "xml", "pdf", "doc", "docx", "odt"])],
+  ["code", new Set([
+    "js",
+    "jsx",
+    "mjs",
+    "cjs",
+    "ts",
+    "tsx",
+    "vue",
+    "svelte",
+    "java",
+    "kt",
+    "kts",
+    "py",
+    "rb",
+    "go",
+    "rs",
+    "php",
+    "c",
+    "cc",
+    "cpp",
+    "h",
+    "hpp",
+    "cs",
+    "swift",
+    "scala",
+    "sh",
+    "bash",
+    "zsh",
+    "fish",
+    "sql",
+    "html"
+  ])]
+];
+var fileNameKinds = new Map([
+  ["dockerfile", "code"],
+  ["makefile", "code"],
+  ["gemfile", "code"],
+  ["rakefile", "code"],
+  ["license", "text"]
+]);
+function classifyFileContent(name) {
+  const normalized = name.toLocaleLowerCase();
+  const exact = fileNameKinds.get(normalized);
+  if (exact)
+    return exact;
+  if (normalized.startsWith(".env") || normalized === ".gitignore" || normalized === ".npmrc")
+    return "text";
+  const extension = normalized.includes(".") ? normalized.split(".").pop() || "" : "";
+  return extensionGroups.find(([, extensions]) => extensions.has(extension))?.[0] ?? "file";
+}
 // src/domain/agent/ContextCompactor.ts
 var COMPACT_PROMPT = `You are summarizing a conversation for handoff to another model that will continue the task.
 
@@ -533,7 +1019,8 @@ class ContextCompactor {
     ];
     let summary = "";
     for await (const event of this.modelProvider.streamChat(summaryMessages, {
-      maxTokens: 2048
+      maxTokens: 2048,
+      reasoningEffort: "off"
     })) {
       if (event.type === "text_chunk")
         summary += event.text;
@@ -576,7 +1063,8 @@ ${summary}`
     ];
     let summary = "";
     for await (const event of this.modelProvider.streamChat(summaryMessages, {
-      maxTokens: 4096
+      maxTokens: 4096,
+      reasoningEffort: "off"
     })) {
       if (event.type === "text_chunk")
         summary += event.text;
@@ -914,18 +1402,18 @@ ${cp.summary}` },
       let networkRetries = 0;
       let emptyStreamRetries = 0;
       let totalRetries = 0;
-      const waitForRetry = (delay) => new Promise((resolve) => {
+      const waitForRetry = (delay) => new Promise((resolve2) => {
         if (this.abortController?.signal.aborted) {
-          resolve(false);
+          resolve2(false);
           return;
         }
         const timer = setTimeout(() => {
           this.abortController?.signal.removeEventListener("abort", onAbort);
-          resolve(true);
+          resolve2(true);
         }, delay);
         const onAbort = () => {
           clearTimeout(timer);
-          resolve(false);
+          resolve2(false);
         };
         this.abortController?.signal.addEventListener("abort", onAbort, { once: true });
       });
@@ -943,7 +1431,8 @@ ${cp.summary}` },
         let streamEnded = false;
         try {
           for await (const event of this.config.modelProvider.streamChat(messages, {
-            tools: toolDefs.length > 0 ? toolDefs : undefined
+            tools: toolDefs.length > 0 ? toolDefs : undefined,
+            reasoningEffort: this.config.reasoningEffort
           })) {
             if (this.abortController?.signal.aborted)
               break;
@@ -5125,7 +5614,7 @@ var coerce = {
 var NEVER = INVALID;
 // src/domain/tool/builtin/ReadFileTool.ts
 import { readFile } from "node:fs/promises";
-import { resolve } from "node:path";
+import { resolve as resolve2 } from "node:path";
 
 class ReadFileTool {
   name = "read_file";
@@ -5146,7 +5635,7 @@ class ReadFileTool {
       };
     }
     try {
-      const filePath = resolve(ctx.workingDirectory, parsed.data.file_path);
+      const filePath = resolve2(ctx.workingDirectory, parsed.data.file_path);
       let content = await readFile(filePath, "utf-8");
       if (parsed.data.offset || parsed.data.limit) {
         const lines = content.split(`
@@ -5179,7 +5668,7 @@ class ReadFileTool {
 }
 // src/domain/tool/builtin/WriteFileTool.ts
 import { writeFile } from "node:fs/promises";
-import { resolve as resolve2 } from "node:path";
+import { resolve as resolve3 } from "node:path";
 
 class WriteFileTool {
   name = "write_file";
@@ -5206,7 +5695,7 @@ class WriteFileTool {
       };
     }
     try {
-      const filePath = resolve2(ctx.workingDirectory, parsed.data.file_path);
+      const filePath = resolve3(ctx.workingDirectory, parsed.data.file_path);
       await writeFile(filePath, parsed.data.content, "utf-8");
       return { toolCallId: "", content: `File written: ${filePath}` };
     } catch (err) {
@@ -5220,7 +5709,7 @@ class WriteFileTool {
 }
 // src/domain/tool/builtin/StrReplaceTool.ts
 import { readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
-import { resolve as resolve3 } from "node:path";
+import { resolve as resolve4 } from "node:path";
 
 class StrReplaceTool {
   name = "str_replace";
@@ -5250,7 +5739,7 @@ If old_string appears multiple times, use more context to make it unique.`;
     }
     const { file_path, old_string, new_string } = parsed.data;
     try {
-      const filePath = resolve3(ctx.workingDirectory, file_path);
+      const filePath = resolve4(ctx.workingDirectory, file_path);
       const content = await readFile2(filePath, "utf-8");
       const count = content.split(old_string).length - 1;
       if (count === 0) {
@@ -5313,7 +5802,7 @@ class BashTool {
         isError: true
       };
     }
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       exec(parsed.data.command, {
         cwd: ctx.workingDirectory,
         timeout: parsed.data.timeout,
@@ -5321,13 +5810,13 @@ class BashTool {
         maxBuffer: 10 * 1024 * 1024
       }, (error, stdout, stderr) => {
         if (error) {
-          resolve4({
+          resolve5({
             toolCallId: "",
             content: stderr || error.message,
             isError: true
           });
         } else {
-          resolve4({ toolCallId: "", content: stdout || "(no output)" });
+          resolve5({ toolCallId: "", content: stdout || "(no output)" });
         }
       });
     });
@@ -5539,7 +6028,7 @@ class WebSearchTool {
 }
 // src/domain/tool/builtin/GrepTool.ts
 import { readFile as readFile3, readdir, stat } from "node:fs/promises";
-import { resolve as resolve4, join, relative } from "node:path";
+import { resolve as resolve5, join, relative as relative2 } from "node:path";
 
 class GrepTool {
   name = "grep";
@@ -5566,7 +6055,7 @@ class GrepTool {
       include,
       max_results = 50
     } = parsed.data;
-    const absPath = resolve4(ctx.workingDirectory, searchPath);
+    const absPath = resolve5(ctx.workingDirectory, searchPath);
     let regex;
     try {
       regex = new RegExp(pattern, case_sensitive ? "g" : "gi");
@@ -5582,7 +6071,7 @@ class GrepTool {
         const content = await readFile3(filePath, "utf-8");
         const lines = content.split(`
 `);
-        const relPath = relative(ctx.workingDirectory, filePath);
+        const relPath = relative2(ctx.workingDirectory, filePath);
         for (let i = 0;i < lines.length; i++) {
           if (results.length >= max_results)
             break;
@@ -5661,7 +6150,7 @@ class GrepTool {
 }
 // src/domain/tool/builtin/GlobTool.ts
 import { readdir as readdir2, stat as stat2 } from "node:fs/promises";
-import { resolve as resolve5, join as join2, relative as relative2 } from "node:path";
+import { resolve as resolve6, join as join2, relative as relative3 } from "node:path";
 function globToRegex(pattern) {
   let src = "";
   let i = 0;
@@ -5742,7 +6231,7 @@ class GlobTool {
       return { toolCallId: "", content: `Invalid parameters: ${parsed.error.message}`, isError: true };
     }
     const { pattern, path: searchPath = ".", max_results = 200, include_hidden = false } = parsed.data;
-    const root = resolve5(ctx.workingDirectory, searchPath);
+    const root = resolve6(ctx.workingDirectory, searchPath);
     let regex;
     try {
       regex = globToRegex(pattern);
@@ -5787,7 +6276,7 @@ class GlobTool {
         } catch {
           continue;
         }
-        const relPath = relative2(root, fullPath);
+        const relPath = relative3(root, fullPath);
         if (s.isDirectory()) {
           await walk(fullPath);
         } else {
@@ -6472,7 +6961,7 @@ class CronListTool {
 }
 // src/domain/tool/builtin/ApplyPatchTool.ts
 import { readFile as readFile4, writeFile as writeFile3, mkdir } from "node:fs/promises";
-import { resolve as resolve6, dirname as dirname2 } from "node:path";
+import { resolve as resolve7, dirname as dirname2 } from "node:path";
 function parsePatch(patch) {
   const files = [];
   let currentFile = null;
@@ -6647,7 +7136,7 @@ Format:
       const results = [];
       const errors2 = [];
       for (const file of files) {
-        const filePath = resolve6(ctx.workingDirectory, file.newPath);
+        const filePath = resolve7(ctx.workingDirectory, file.newPath);
         let originalLines;
         try {
           const content = await readFile4(filePath, "utf-8");
@@ -6707,7 +7196,7 @@ Errors:
   }
 }
 // src/domain/tool/builtin/LspTools.ts
-import { resolve as resolve7 } from "node:path";
+import { resolve as resolve8 } from "node:path";
 import { fileURLToPath } from "node:url";
 function uriToPath(uri) {
   try {
@@ -6737,7 +7226,7 @@ class LspDiagnosticsTool {
     const parsed = this.schema.safeParse(params);
     if (!parsed.success)
       return { toolCallId: "", content: `Invalid params: ${parsed.error.message}`, isError: true };
-    const filePath = resolve7(ctx.workingDirectory, parsed.data.file_path);
+    const filePath = resolve8(ctx.workingDirectory, parsed.data.file_path);
     const configs = await this.getConfigs();
     const config = this.lspManager.configForFile(filePath, configs);
     if (!config)
@@ -6790,7 +7279,7 @@ class LspHoverTool {
     const parsed = this.schema.safeParse(params);
     if (!parsed.success)
       return { toolCallId: "", content: `Invalid params: ${parsed.error.message}`, isError: true };
-    const filePath = resolve7(ctx.workingDirectory, parsed.data.file_path);
+    const filePath = resolve8(ctx.workingDirectory, parsed.data.file_path);
     const configs = await this.getConfigs();
     const config = this.lspManager.configForFile(filePath, configs);
     if (!config)
@@ -6842,7 +7331,7 @@ class LspDefinitionTool {
     const parsed = this.schema.safeParse(params);
     if (!parsed.success)
       return { toolCallId: "", content: `Invalid params: ${parsed.error.message}`, isError: true };
-    const filePath = resolve7(ctx.workingDirectory, parsed.data.file_path);
+    const filePath = resolve8(ctx.workingDirectory, parsed.data.file_path);
     const configs = await this.getConfigs();
     const config = this.lspManager.configForFile(filePath, configs);
     if (!config)
@@ -6896,7 +7385,7 @@ class LspReferencesTool {
     const parsed = this.schema.safeParse(params);
     if (!parsed.success)
       return { toolCallId: "", content: `Invalid params: ${parsed.error.message}`, isError: true };
-    const filePath = resolve7(ctx.workingDirectory, parsed.data.file_path);
+    const filePath = resolve8(ctx.workingDirectory, parsed.data.file_path);
     const configs = await this.getConfigs();
     const config = this.lspManager.configForFile(filePath, configs);
     if (!config)
@@ -7437,7 +7926,8 @@ Return ONLY the names of relevant skills, one per line. If none are relevant, re
       let responseText = "";
       for await (const event of this.modelProvider.streamChat(messages, {
         temperature: 0,
-        maxTokens: 200
+        maxTokens: 200,
+        reasoningEffort: "off"
       })) {
         if (event.type === "text_chunk") {
           responseText += event.text;
@@ -7507,8 +7997,9 @@ ${prompt}`);
 
 // src/domain/context/ContextLoader.ts
 import { constants } from "node:fs";
+import { homedir as homedir2 } from "node:os";
 import { open, readFile as readFile6, readdir as readdir4, realpath, stat as stat4 } from "node:fs/promises";
-import { join as join6, basename as basename2, isAbsolute, relative as relative3, resolve as resolve8, sep } from "node:path";
+import { join as join6, basename as basename2, isAbsolute as isAbsolute2, relative as relative4, resolve as resolve9, sep as sep2 } from "node:path";
 var ROOT_PROJECT_FILES = [
   "AGENTS.md",
   "CLAUDE.md",
@@ -7519,9 +8010,25 @@ var ROOT_PROJECT_FILES = [
 ];
 var CUSTOMER_AGENT_FILES = ROOT_PROJECT_FILES.map((file) => join6(".customer-agent", file));
 var INSTRUCTION_FILES = new Set(["AGENTS.md", "CLAUDE.md"]);
-var EXCLUDED_DIRECTORIES = new Set(["node_modules", ".git", "dist"]);
+var EXCLUDED_DIRECTORIES = new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  "out",
+  "coverage",
+  ".cache",
+  ".next",
+  ".next-dev",
+  ".output",
+  ".turbo"
+]);
 
 class ContextLoader {
+  homeDirectory;
+  constructor(homeDirectory = homedir2()) {
+    this.homeDirectory = homeDirectory;
+  }
   async loadProjectContext(rootDir) {
     const files = [];
     const loadedPaths = new Set;
@@ -7566,11 +8073,11 @@ class ContextLoader {
     return { path: filePath, content, type };
   }
   async loadRecursiveFile(rootDir, resolvedRoot, filePath) {
-    const relativePath = relative3(rootDir, filePath);
-    if (!relativePath || isAbsolute(relativePath) || relativePath === ".." || relativePath.startsWith(`..${sep}`)) {
+    const relativePath = relative4(rootDir, filePath);
+    if (!relativePath || isAbsolute2(relativePath) || relativePath === ".." || relativePath.startsWith(`..${sep2}`)) {
       throw new Error("Recursive context candidate is outside the configured root");
     }
-    const expectedPath = resolve8(resolvedRoot, relativePath);
+    const expectedPath = resolve9(resolvedRoot, relativePath);
     const fileHandle = await open(filePath, constants.O_RDONLY | constants.O_NOFOLLOW);
     try {
       const openedStat = await fileHandle.stat();
@@ -7593,12 +8100,20 @@ class ContextLoader {
   }
   async findClaudeMdFiles(rootDir) {
     const results = [];
+    try {
+      const [resolvedRoot, resolvedHome] = await Promise.all([
+        realpath(rootDir),
+        realpath(this.homeDirectory)
+      ]);
+      if (resolvedRoot === resolvedHome)
+        return results;
+    } catch {}
     const scan = async (dir) => {
       try {
         const entries = await readdir4(dir, { withFileTypes: true });
         entries.sort((left, right) => left.name.localeCompare(right.name));
         for (const entry of entries) {
-          if (EXCLUDED_DIRECTORIES.has(entry.name))
+          if (EXCLUDED_DIRECTORIES.has(entry.name) || basename2(dir) === ".claude" && entry.name === "worktrees")
             continue;
           const fullPath = join6(dir, entry.name);
           if (entry.isDirectory()) {
@@ -8098,6 +8613,12 @@ class AnthropicProvider {
       messages: nonSystem.map((m) => this.adaptMessage(m)),
       stream: true
     };
+    if (options?.reasoningEffort && options.reasoningEffort !== "off") {
+      const budgetTokens = { low: 4096, medium: 16384, high: 32768 }[options.reasoningEffort];
+      body.thinking = { type: "enabled", budget_tokens: budgetTokens };
+      body.temperature = 1;
+      body.max_tokens = Math.max(body.max_tokens, budgetTokens + 8192);
+    }
     if (systemPrompt) {
       body.system = systemPrompt;
     }
@@ -8293,6 +8814,9 @@ class OpenAIProvider {
       temperature: options?.temperature ?? this.defaultTemperature,
       stream: true
     };
+    if (options?.reasoningEffort && options.reasoningEffort !== "off") {
+      body.reasoning_effort = options.reasoningEffort;
+    }
     if (options?.tools && options.tools.length > 0) {
       body.tools = options.tools.map((t) => ({
         type: "function",
@@ -8498,6 +9022,9 @@ class DeepSeekProvider {
       temperature: options?.temperature ?? this.defaultTemperature,
       stream: true
     };
+    if (options?.reasoningEffort && options.reasoningEffort !== "off") {
+      body.reasoning_effort = options.reasoningEffort;
+    }
     if (options?.tools && options.tools.length > 0) {
       body.tools = options.tools.map((t) => ({
         type: "function",
@@ -8725,6 +9252,8 @@ class AgentBuilder {
   enabledTools = null;
   enabledSkills = null;
   semanticSkillMatching = true;
+  reasoningEffort;
+  toolPermissionGate;
   withWorkingDirectory(path) {
     this.workingDirectory = path;
     return this;
@@ -8816,6 +9345,14 @@ class AgentBuilder {
     this.semanticSkillMatching = enabled;
     return this;
   }
+  withReasoningEffort(effort) {
+    this.reasoningEffort = effort;
+    return this;
+  }
+  withToolPermissionGate(gate) {
+    this.toolPermissionGate = gate;
+    return this;
+  }
   async build() {
     if (!this.modelProvider) {
       throw new Error("Model provider is required. Call withModelProvider() or withModel()");
@@ -8849,7 +9386,7 @@ class AgentBuilder {
     const config = {
       modelProvider: this.modelProvider,
       toolRegistry,
-      toolExecutor: toolRegistry,
+      toolExecutor: this.toolPermissionGate ? new PermissionAwareToolExecutor(toolRegistry, this.toolPermissionGate) : toolRegistry,
       contextAssembler,
       skillRegistry: this.skillRegistry,
       memoryStore,
@@ -8860,7 +9397,8 @@ class AgentBuilder {
       systemPrompt: this.systemPromptWithRemoteTools(remoteToolStore, projectId),
       compactThreshold: this.compactThreshold,
       enabledTools: this.enabledTools,
-      enabledSkills: this.enabledSkills
+      enabledSkills: this.enabledSkills,
+      reasoningEffort: this.reasoningEffort
     };
     return new AgentFactory().create(config);
   }
@@ -8897,7 +9435,7 @@ class AgentBuilder {
     const config = {
       modelProvider: this.modelProvider,
       toolRegistry,
-      toolExecutor: toolRegistry,
+      toolExecutor: this.toolPermissionGate ? new PermissionAwareToolExecutor(toolRegistry, this.toolPermissionGate) : toolRegistry,
       contextAssembler,
       skillRegistry: this.skillRegistry,
       memoryStore,
@@ -8908,7 +9446,8 @@ class AgentBuilder {
       systemPrompt: this.systemPromptWithRemoteTools(remoteToolStore, projectId),
       compactThreshold: this.compactThreshold,
       enabledTools: this.enabledTools,
-      enabledSkills: this.enabledSkills
+      enabledSkills: this.enabledSkills,
+      reasoningEffort: this.reasoningEffort
     };
     return new AgentFactory().create(config);
   }
@@ -8964,7 +9503,7 @@ class MCPClient {
     if (!config.command) {
       return Promise.reject(new Error(`stdio 服务器 "${config.id}" 缺少 command 字段`));
     }
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       const proc = spawn2(config.command, config.args ?? [], {
         env: { ...process.env, ...config.env },
         stdio: ["pipe", "pipe", "pipe"]
@@ -9003,7 +9542,7 @@ class MCPClient {
         clientInfo: { name: "customer-agent", version: "0.1.0" }
       }).then(() => {
         this._connected = true;
-        resolve9();
+        resolve10();
       }).catch(reject);
     });
   }
@@ -9053,7 +9592,7 @@ class MCPClient {
     if (this.config?.transport === "streamableHttp") {
       return this.sendRequestHttp(method, params);
     }
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       if (!this.process || !this.process.stdin) {
         reject(new Error("MCP client not connected"));
         return;
@@ -9069,7 +9608,7 @@ class MCPClient {
         if (response.error) {
           reject(new Error(response.error.message));
         } else {
-          resolve9(response.result);
+          resolve10(response.result);
         }
       });
       const timeout = setTimeout(() => {
@@ -9087,7 +9626,7 @@ class MCPClient {
     });
   }
   sendRequestSSE(method, params) {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       if (!this.ssePostUrl) {
         reject(new Error("SSE post URL not established"));
         return;
@@ -9100,7 +9639,7 @@ class MCPClient {
         if (response.error)
           reject(new Error(response.error.message));
         else
-          resolve9(response.result);
+          resolve10(response.result);
       });
       const timeout = setTimeout(() => {
         this.pendingRequests.delete(id);
@@ -9166,7 +9705,7 @@ class MCPClient {
     this._connected = true;
   }
   sendRequestHttp(method, params) {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       const urlStr = this.config?.url ?? this.config?.sseUrl;
       if (!urlStr) {
         reject(new Error("URL not set"));
@@ -9237,7 +9776,7 @@ class MCPClient {
                     if (resp.error)
                       reject(new Error(resp.error.message));
                     else
-                      resolve9(resp.result);
+                      resolve10(resp.result);
                   }
                 } catch {}
                 evType = "";
@@ -9265,7 +9804,7 @@ class MCPClient {
               if (resp.error)
                 reject(new Error(resp.error.message));
               else
-                resolve9(resp.result);
+                resolve10(resp.result);
             } catch {
               reject(new Error(`Invalid JSON response: ${data.slice(0, 100)}`));
             }
@@ -9285,7 +9824,7 @@ class MCPClient {
     });
   }
   connectSSE(config) {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       const sseUrl = config.url ?? config.sseUrl;
       if (!sseUrl) {
         reject(new Error("SSE URL is required for remote MCP servers"));
@@ -9339,7 +9878,7 @@ class MCPClient {
                     clientInfo: { name: "customer-agent", version: "0.1.0" }
                   }).then(() => {
                     this._connected = true;
-                    resolve9();
+                    resolve10();
                   }).catch(reject);
                 }
               } else if (eventType === "message" || eventType === "") {
@@ -9777,7 +10316,22 @@ class SQLiteRemoteToolStore {
 // src/infrastructure/SQLiteDatabase.ts
 import Database from "better-sqlite3";
 import { join as join10 } from "node:path";
-import { mkdirSync as mkdirSync3 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readdirSync as readdirSync3 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+function resolveNativeBinding() {
+  const kind = process.versions.electron ? `electron-${process.versions.electron}` : `node-${process.versions.modules}`;
+  try {
+    const root = process.platform === "darwin" ? join10(homedir3(), "Library", "Caches", "team-agent", "native") : join10(homedir3(), ".cache", "team-agent", "native");
+    for (const entry of readdirSync3(join10(root, kind))) {
+      if (!entry.startsWith("better-sqlite3-"))
+        continue;
+      const candidate = join10(root, kind, entry, "better_sqlite3.node");
+      if (existsSync3(candidate))
+        return candidate;
+    }
+  } catch {}
+  return;
+}
 
 class SQLiteDatabase {
   db;
@@ -9787,7 +10341,8 @@ class SQLiteDatabase {
       mkdirSync3(dataDir, { recursive: true });
     } catch {}
     const dbPath = join10(dataDir, "agent.db");
-    this.db = new Database(dbPath);
+    const binding = resolveNativeBinding();
+    this.db = new Database(dbPath, binding ? { nativeBinding: binding } : undefined);
     this.db.pragma("journal_mode = WAL");
     this.db.pragma("foreign_keys = ON");
     this.migrate();
@@ -9970,6 +10525,12 @@ class SQLiteDatabase {
         revoked_at TEXT
       );
 
+      CREATE TABLE IF NOT EXISTS anonymous_ws_nonces (
+        nonce_hash BLOB PRIMARY KEY,
+        user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        expires_at INTEGER NOT NULL
+      );
+
       CREATE TABLE IF NOT EXISTS login_attempts (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         username_normalized TEXT NOT NULL,
@@ -10032,6 +10593,7 @@ class SQLiteDatabase {
       CREATE INDEX IF NOT EXISTS idx_remote_tools_project ON remote_tools(project_id);
       CREATE INDEX IF NOT EXISTS idx_remote_jobs_project ON remote_tool_jobs(project_id);
       CREATE INDEX IF NOT EXISTS idx_auth_sessions_user ON auth_sessions(user_id);
+      CREATE INDEX IF NOT EXISTS idx_anonymous_ws_nonces_expiry ON anonymous_ws_nonces(expires_at);
       CREATE INDEX IF NOT EXISTS idx_login_attempts_lookup
         ON login_attempts(username_normalized, ip, attempted_at);
       CREATE INDEX IF NOT EXISTS idx_terminal_tabs_user_order ON terminal_tabs(user_id, sort_order);
@@ -10221,7 +10783,8 @@ class SQLiteSettingsStore {
       workingDirectory: data["workingDirectory"] ?? this.baseDir,
       isConfigured: Boolean(apiKey),
       profiles,
-      activeProfileId
+      activeProfileId,
+      reasoningEffort: ["off", "low", "medium", "high"].includes(data["reasoningEffort"] ?? "") ? data["reasoningEffort"] : "off"
     };
   }
   saveAll(settings) {
@@ -10237,6 +10800,7 @@ class SQLiteSettingsStore {
       upsert.run("workingDirectory", settings.workingDirectory);
       upsert.run("profiles", JSON.stringify(settings.profiles ?? []));
       upsert.run("activeProfileId", settings.activeProfileId ?? "");
+      upsert.run("reasoningEffort", settings.reasoningEffort ?? "off");
     });
     tx();
   }
@@ -10346,13 +10910,18 @@ class SQLiteSessionStore {
       parentSessionId: row.parent_id ?? undefined,
       title: row.title,
       status: row.status,
-      messages: msgRows.map((m) => ({
-        role: m.role,
-        content: m.content,
-        toolCalls: JSON.parse(m.tool_calls),
-        toolCallId: m.tool_call_id,
-        name: m.name
-      })),
+      messages: msgRows.map((m) => {
+        const toolCalls = JSON.parse(m.tool_calls);
+        const toolCallId = m.tool_call_id ?? undefined;
+        const name = m.name ?? undefined;
+        return {
+          role: m.role,
+          content: m.content,
+          ...toolCalls?.length ? { toolCalls } : {},
+          ...toolCallId !== undefined ? { toolCallId } : {},
+          ...name !== undefined ? { name } : {}
+        };
+      }),
       events: evtRows.map((e) => JSON.parse(e.data)),
       created: row.created,
       updated: row.updated,
@@ -10885,6 +11454,54 @@ class SQLiteAuthStore {
     return { id: row.id, userId: row.user_id, tokenHash: row.token_hash, csrfHash: row.csrf_hash, wsNonceHash: row.ws_nonce_hash, wsNonceExpiresAt: row.ws_nonce_expires_at, deviceId: row.device_id, deviceName: row.device_name ?? "", userAgent: row.user_agent ?? "", createdAt: row.created_at, lastSeenAt: row.last_seen_at, expiresAt: row.expires_at, revokedAt: row.revoked_at };
   }
 }
+// src/infrastructure/SQLiteAnonymousWebStore.ts
+import { createHash as createHash2, randomBytes as randomBytes3 } from "node:crypto";
+var LOCAL_USER_ID = "local-web";
+var LOCAL_USERNAME = "local";
+function hashNonce(nonce) {
+  return createHash2("sha256").update(nonce).digest();
+}
+
+class SQLiteAnonymousWebStore {
+  db;
+  constructor(baseDir) {
+    this.db = getDatabase(baseDir).db;
+  }
+  getOrCreatePrincipal() {
+    const existing = this.findPrincipal();
+    if (existing)
+      return { userId: existing.id, username: LOCAL_USERNAME };
+    const now2 = new Date().toISOString();
+    this.db.prepare(`
+      INSERT OR IGNORE INTO users (
+        id, username_normalized, username_display, password_hash, password_salt,
+        password_version, created_at, password_changed_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(LOCAL_USER_ID, LOCAL_USERNAME, LOCAL_USERNAME, randomBytes3(32), randomBytes3(16), 1, now2, now2);
+    const created = this.findPrincipal();
+    if (!created)
+      throw new Error("failed to initialize anonymous web principal");
+    return { userId: created.id, username: LOCAL_USERNAME };
+  }
+  issueWsNonce(nonce, userId, expiresAt, now2 = Date.now()) {
+    const nonceHash = hashNonce(nonce);
+    this.db.transaction(() => {
+      this.db.prepare("DELETE FROM anonymous_ws_nonces WHERE expires_at <= ?").run(now2);
+      this.db.prepare("INSERT INTO anonymous_ws_nonces (nonce_hash, user_id, expires_at) VALUES (?, ?, ?)").run(nonceHash, userId, expiresAt);
+    })();
+  }
+  consumeWsNonce(nonce, now2 = Date.now()) {
+    const row = this.db.prepare(`
+      DELETE FROM anonymous_ws_nonces
+      WHERE nonce_hash = ? AND expires_at > ?
+      RETURNING user_id
+    `).get(hashNonce(nonce), now2);
+    return row?.user_id ?? null;
+  }
+  findPrincipal() {
+    return this.db.prepare("SELECT id, username_display FROM users ORDER BY created_at, id LIMIT 1").get();
+  }
+}
 // src/infrastructure/SQLiteWebConsoleStore.ts
 class SQLiteWebConsoleStore {
   db;
@@ -10961,28 +11578,204 @@ var rowToHistory = (r) => ({ id: r.id, userId: r.user_id, terminalId: r.terminal
 function redact(value) {
   return /(?:token|password|secret|api[_-]?key)\s*=/.test(value.toLowerCase()) ? "[REDACTED]" : value;
 }
+// src/infrastructure/HostPathPolicy.ts
+import {
+  readdirSync as readdirSync4,
+  realpathSync,
+  statSync as statSync2
+} from "node:fs";
+import {
+  basename as basename4,
+  delimiter,
+  isAbsolute as isAbsolute3,
+  relative as relative5,
+  resolve as resolve10,
+  sep as sep3
+} from "node:path";
+
+class HostPathError extends Error {
+  code;
+  constructor(code, message, options) {
+    super(message, options);
+    this.name = "HostPathError";
+    this.code = code;
+  }
+}
+function toHostPathError(error, candidate) {
+  const code = error?.code;
+  if (code === "ENOENT" || code === "ENOTDIR") {
+    return new HostPathError("PATH_NOT_FOUND", `路径不存在：${candidate}`, { cause: error });
+  }
+  return new HostPathError("PATH_UNREADABLE", `无法访问路径：${candidate}`, { cause: error });
+}
+function canonicalPath(candidate) {
+  const normalized = resolve10(candidate);
+  try {
+    return realpathSync.native(normalized);
+  } catch (error) {
+    throw toHostPathError(error, normalized);
+  }
+}
+function isPathInsideRoot(root, candidate) {
+  const rel = relative5(root, candidate);
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute3(rel);
+}
+
+class HostPathPolicy {
+  roots;
+  constructor(roots) {
+    const canonicalRoots = [];
+    for (const candidate of roots) {
+      if (!candidate?.trim())
+        continue;
+      const canonical = canonicalPath(candidate.trim());
+      let stat7;
+      try {
+        stat7 = statSync2(canonical);
+      } catch (error) {
+        throw toHostPathError(error, canonical);
+      }
+      if (!stat7.isDirectory()) {
+        throw new HostPathError("PATH_NOT_DIRECTORY", `不是目录：${canonical}`);
+      }
+      if (!canonicalRoots.includes(canonical))
+        canonicalRoots.push(canonical);
+    }
+    if (canonicalRoots.length === 0) {
+      throw new HostPathError("PATH_UNREADABLE", "没有可用的宿主机目录根路径");
+    }
+    this.roots = canonicalRoots;
+  }
+  static fromEnvironment(value, fallbackRoot) {
+    const configured = value?.trim() ? value : fallbackRoot;
+    return new HostPathPolicy(configured.split(delimiter));
+  }
+  assertAllowed(candidate) {
+    if (typeof candidate !== "string" || !candidate.trim()) {
+      throw new HostPathError("PATH_NOT_FOUND", "路径不能为空");
+    }
+    const canonical = canonicalPath(candidate.trim());
+    if (!this.roots.some((root) => isPathInsideRoot(root, canonical))) {
+      throw new HostPathError("PATH_OUTSIDE_ROOT", `路径不在允许范围内：${canonical}`);
+    }
+    return canonical;
+  }
+  assertDirectory(candidate) {
+    const canonical = this.assertAllowed(candidate);
+    let stat7;
+    try {
+      stat7 = statSync2(canonical);
+    } catch (error) {
+      throw toHostPathError(error, canonical);
+    }
+    if (!stat7.isDirectory()) {
+      throw new HostPathError("PATH_NOT_DIRECTORY", `不是目录：${canonical}`);
+    }
+    return canonical;
+  }
+  listDirectories(candidate) {
+    const canonical = this.assertDirectory(candidate);
+    let dirents;
+    try {
+      dirents = readdirSync4(canonical, { withFileTypes: true });
+    } catch (error) {
+      throw toHostPathError(error, canonical);
+    }
+    const entries = [];
+    for (const dirent of dirents) {
+      const displayedPath = resolve10(canonical, dirent.name);
+      let child;
+      try {
+        child = this.assertAllowed(displayedPath);
+      } catch {
+        continue;
+      }
+      let kind;
+      try {
+        const stat7 = statSync2(child);
+        if (stat7.isDirectory())
+          kind = "directory";
+        else if (stat7.isFile())
+          kind = "file";
+        else
+          continue;
+      } catch {
+        continue;
+      }
+      entries.push({
+        name: dirent.name || basename4(child),
+        path: child,
+        kind,
+        hasChildren: kind === "directory" && this.hasAllowedDirectoryChild(child)
+      });
+    }
+    return entries.sort((left, right) => {
+      if (left.kind !== right.kind)
+        return left.kind === "directory" ? -1 : 1;
+      const leftHidden = left.name.startsWith(".");
+      const rightHidden = right.name.startsWith(".");
+      if (leftHidden !== rightHidden)
+        return leftHidden ? 1 : -1;
+      return left.name.localeCompare(right.name, undefined, { sensitivity: "base" });
+    });
+  }
+  hasAllowedDirectoryChild(candidate) {
+    try {
+      return readdirSync4(candidate, { withFileTypes: true }).some((entry) => {
+        if (!entry.isDirectory() && !entry.isSymbolicLink())
+          return false;
+        try {
+          this.assertDirectory(resolve10(candidate, entry.name));
+          return true;
+        } catch {
+          return false;
+        }
+      });
+    } catch {
+      return false;
+    }
+  }
+}
 export {
   verifyPassword,
+  toolApprovalDecisionFromAnswer,
   registerBuiltinTools,
+  reduceRuntimeProgress,
+  readWebProjectRequest,
+  parseWebProjectResponse,
+  parseWebProjectRequest,
   parseIntervalMs,
+  paginateSessionHistory,
   normalizeUsername,
+  normalizeToolPermissionMode,
+  mergeReasoningSummaryDelta,
+  isToolPermissionMode,
+  isPathInsideRoot,
   isCronExpression,
   hashToken,
   hashPassword,
   getDatabase,
   describeCron,
   computeNextFireAt,
+  classifyToolPermission,
+  classifyFileContent,
   WriteFileTool,
   WebSearchTool,
   WebFetchTool,
   WebAuthService,
   WebAuthError,
   WaitAgentTool,
+  WEB_PROJECT_METHODS,
+  WEBAPP_PROJECT_RESPONSE_TYPE,
+  WEBAPP_PROJECT_REQUEST_TYPE,
   ToolRegistry,
+  ToolPermissionGate,
   TodoUpdateTool,
   TodoListTool,
   TodoAddTool,
   TerminalSession,
+  TOOL_PERMISSION_MODES,
+  TOOL_APPROVAL_OPTIONS,
   SkillRegistry,
   SkillLoader,
   ScrollbackBuffer,
@@ -10999,10 +11792,12 @@ export {
   SQLiteLSPServerStore,
   SQLiteDatabase,
   SQLiteAuthStore,
+  SQLiteAnonymousWebStore,
   SQLiteAgentStore,
   RemoteProjectActionTool,
   ReadFileTool,
   PluginManager,
+  PermissionAwareToolExecutor,
   PASSWORD_VERSION,
   OpenAIProvider,
   ModelRegistry,
@@ -11015,6 +11810,8 @@ export {
   LSPManager,
   LSPClient,
   InMemorySessionStore,
+  HostPathPolicy,
+  HostPathError,
   GrepTool,
   GlobTool,
   FileSystemSessionStore,
@@ -11037,4 +11834,4 @@ export {
   AgentBuilder
 };
 
-//# debugId=05A3BC3FF39651A264756E2164756E21
+//# debugId=373EC3EBC2779D8E64756E2164756E21