agentworkshop 0.8.5 → 0.8.6

package/.output/server/chunks/_/golden.mjs

@@ -1,5 +1,5 @@
 import { randomUUID } from 'node:crypto';
-import { b5 as getDaqNodeRepo, a1 as lineMode } from './nitro.mjs';
+import { bc as getDaqNodeRepo, a1 as lineMode } from './nitro.mjs';
 import { e as edaDb } from './eda-db.mjs';
 import { edaRunById } from './eda-run.repo.mjs';
 
@@ -64,7 +64,7 @@ async function buildGolden(user, args) {
   if (!Number.isFinite(startMs) || !Number.isFinite(endMs) || endMs <= startMs) {
     throw new GoldenError(400, "VALIDATION_ERROR", "\u6279\u6B21\u7A97\u53E3\u975E\u6CD5\u3002");
   }
-  const { getTsdb, tsdbReady } = await import('./nitro.mjs').then(function (n) { return n.dr; });
+  const { getTsdb, tsdbReady } = await import('./nitro.mjs').then(function (n) { return n.du; });
   await tsdbReady;
   const series = await getTsdb().queryTagged({
     runId: run.id,
@@ -150,7 +150,7 @@ async function deviationScore(user, args) {
   if (!golden) throw new GoldenError(404, "NOT_FOUND", "\u8BE5\u914D\u65B9/\u8282\u70B9\u5C1A\u65E0 golden \u53C2\u8003\u8F68\u8FF9,\u8BF7\u5148\u4ECE good \u6279\u6B21\u751F\u6210\u3002");
   const startMs = Date.parse(run.startedAt);
   const endMs = Date.parse(run.endedAt);
-  const { getTsdb, tsdbReady } = await import('./nitro.mjs').then(function (n) { return n.dr; });
+  const { getTsdb, tsdbReady } = await import('./nitro.mjs').then(function (n) { return n.du; });
   await tsdbReady;
   const series = await getTsdb().queryTagged({ runId: run.id, nodeIds: [args.nodeId], fromMs: startMs, toMs: endMs, limit: 1e6 });
   const pts = ((_a = series.get(args.nodeId)) != null ? _a : []).map((p) => {

package/.output/server/chunks/_/harness-spawn-policy.mjs

@@ -0,0 +1,77 @@
+import { basename, resolve } from 'node:path';
+import { A as AppError } from './nitro.mjs';
+
+const ALLOWED_COMMANDS = {
+  omp: ["omp"],
+  claude: ["claude"],
+  codex: ["codex"],
+  opencode: ["opencode"],
+  dsh: ["dsh"],
+  gemini: ["gemini"],
+  copilot: ["copilot"],
+  cursor: ["cursor-agent", "cursor"],
+  crush: ["crush"],
+  goose: ["goose"],
+  qwen: ["qwen"],
+  pi: ["pi"],
+  hermes: ["hermes"],
+  mock: []
+};
+const SPAWN_CONFIG_KEYS = ["command", "args", "cwd", "env"];
+function spawnOverridesOf(config) {
+  if (!config || typeof config !== "object") return [];
+  return SPAWN_CONFIG_KEYS.filter((k) => {
+    const v = config[k];
+    if (v === void 0 || v === null) return false;
+    if (typeof v === "string") return v.trim() !== "";
+    if (Array.isArray(v)) return v.length > 0;
+    return true;
+  });
+}
+function baseNameOf(command) {
+  const base = basename(command.trim()).toLowerCase();
+  return base.replace(/\.(exe|cmd|bat|com|sh)$/i, "");
+}
+function cwdAllowed(cwd) {
+  if (process.env.AW_ALLOW_ARBITRARY_HARNESS_CWD === "1") return true;
+  const target = resolve(cwd);
+  const roots = [resolve(process.cwd())];
+  const configRoot = process.env.AW_HOME;
+  if (configRoot) roots.push(resolve(configRoot));
+  return roots.some((root) => target === root || target.startsWith(root + "\\") || target.startsWith(root + "/"));
+}
+function assertSpawnConfigAllowed(harness, config, actor) {
+  var _a;
+  const overrides = spawnOverridesOf(config);
+  if (overrides.length === 0) return;
+  if (actor.role !== "admin") {
+    throw new AppError(
+      403,
+      "HARNESS_SPAWN_FORBIDDEN",
+      `\u81EA\u5B9A\u4E49 harness \u542F\u52A8\u53C2\u6570\uFF08${overrides.join("/")}\uFF09\u4EC5\u7BA1\u7406\u5458\u53EF\u914D\u7F6E\u3002\u8BF7\u4F7F\u7528\u5E73\u53F0\u63D0\u4F9B\u7684\u5F15\u64CE\u9ED8\u8BA4\u5B89\u88C5\u8DEF\u5F84\uFF0C\u6216\u8054\u7CFB\u7BA1\u7406\u5458\u5728\u53D7\u63A7\u90E8\u7F72\u4E2D\u8BBE\u7F6E\u3002`
+    );
+  }
+  const command = typeof (config == null ? void 0 : config.command) === "string" ? config.command.trim() : "";
+  if (command) {
+    const base = baseNameOf(command);
+    const allowed = (_a = ALLOWED_COMMANDS[harness]) != null ? _a : [];
+    if (!allowed.includes(base)) {
+      throw new AppError(
+        403,
+        "HARNESS_COMMAND_DENIED",
+        `harness\u300C${harness}\u300D\u4E0D\u5141\u8BB8\u4EE5\u300C${base}\u300D\u542F\u52A8\uFF1A\u547D\u4EE4\u5FC5\u987B\u4E0E\u8BE5\u5F15\u64CE\u81EA\u8EAB\u4E00\u81F4\uFF08\u5141\u8BB8 ${allowed.join("/") || "(\u65E0)"}\uFF09\u3002\u901A\u7528\u89E3\u91CA\u5668\uFF08cmd/sh/node/powershell\uFF09\u4E00\u5F8B\u62D2\u7EDD\u3002`
+      );
+    }
+  }
+  const cwd = typeof (config == null ? void 0 : config.cwd) === "string" ? config.cwd.trim() : "";
+  if (cwd && !cwdAllowed(cwd)) {
+    throw new AppError(
+      403,
+      "HARNESS_CWD_DENIED",
+      `harness \u5DE5\u4F5C\u76EE\u5F55\u300C${cwd}\u300D\u4E0D\u5728\u5141\u8BB8\u8303\u56F4\u5185\uFF08\u9700\u4F4D\u4E8E\u5E73\u53F0\u5DE5\u4F5C\u6839\u6216\u914D\u7F6E\u6839\u4E4B\u4E0B\uFF09\u3002\u53D7\u63A7\u90E8\u7F72\u53EF\u663E\u5F0F\u8BBE\u7F6E AW_ALLOW_ARBITRARY_HARNESS_CWD=1\u3002`
+    );
+  }
+}
+
+export { assertSpawnConfigAllowed as a };
+//# sourceMappingURL=harness-spawn-policy.mjs.map

package/.output/server/chunks/_/harness-spawn-policy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-spawn-policy.mjs","sources":["../../../../server/services/workshop/agents/harness-spawn-policy.ts"],"names":[],"mappings":";;;AAsBA,MAAM,gBAAA,GAA6C;AAAA,EACjD,GAAA,EAAK,CAAC,KAAK,CAAA;AAAA,EACX,MAAA,EAAQ,CAAC,QAAQ,CAAA;AAAA,EACjB,KAAA,EAAO,CAAC,OAAO,CAAA;AAAA,EACf,QAAA,EAAU,CAAC,UAAU,CAAA;AAAA,EACrB,GAAA,EAAK,CAAC,KAAK,CAAA;AAAA,EACX,MAAA,EAAQ,CAAC,QAAQ,CAAA;AAAA,EACjB,OAAA,EAAS,CAAC,SAAS,CAAA;AAAA,EACnB,MAAA,EAAQ,CAAC,cAAA,EAAgB,QAAQ,CAAA;AAAA,EACjC,KAAA,EAAO,CAAC,OAAO,CAAA;AAAA,EACf,KAAA,EAAO,CAAC,OAAO,CAAA;AAAA,EACf,IAAA,EAAM,CAAC,MAAM,CAAA;AAAA,EACb,EAAA,EAAI,CAAC,IAAI,CAAA;AAAA,EACT,MAAA,EAAQ,CAAC,QAAQ,CAAA;AAAA,EACjB,MAAM;AACR,CAAA;AAGO,MAAM,iBAAA,GAAoB,CAAC,SAAA,EAAW,MAAA,EAAQ,OAAO,KAAK,CAAA;AAQ1D,SAAS,iBAAiB,MAAA,EAA8D;AAC7F,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,SAAiB,EAAC;AACnD,EAAA,OAAO,iBAAA,CAAkB,MAAA,CAAO,CAAC,CAAA,KAAM;AACrC,IAAA,MAAM,CAAA,GAAI,OAAO,CAAC,CAAA;AAClB,IAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM,OAAO,KAAA;AAC1C,IAAA,IAAI,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,CAAA,CAAE,MAAK,KAAM,EAAA;AAC/C,IAAA,IAAI,MAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,OAAO,EAAE,MAAA,GAAS,CAAA;AACxC,IAAA,OAAO,IAAA;AAAA,EACT,CAAC,CAAA;AACH;AAEA,SAAS,WAAW,OAAA,EAAyB;AAC3C,EAAA,MAAM,OAAO,QAAA,CAAS,OAAA,CAAQ,IAAA,EAAM,EAAE,WAAA,EAAY;AAClD,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,0BAAA,EAA4B,EAAE,CAAA;AACpD;AAEA,SAAS,WAAW,GAAA,EAAsB;AACxC,EAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,8BAAA,KAAmC,GAAA,EAAK,OAAO,IAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,QAAQ,GAAG,CAAA;AAC1B,EAAA,MAAM,QAAQ,CAAC,OAAA,CAAQ,OAAA,CAAQ,GAAA,EAAK,CAAC,CAAA;AACrC,EAAA,MAAM,UAAA,GAAa,QAAQ,GAAA,CAAI,OAAA;AAC/B,EAAA,IAAI,UAAA,EAAY,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAC,CAAA;AAC9C,EAAA,OAAO,KAAA,CAAM,IAAA,CAAK,CAAA,IAAA,KAAQ,MAAA,KAAW,QAAQ,MAAA,CAAO,UAAA,CAAW,IAAA,GAAO,IAAI,CAAA,IAAK,MAAA,CAAO,UAAA,CAAW,IAAA,GAAO,GAAG,CAAC,CAAA;AAC9G;AAQO,SAAS,wBAAA,CACd,OAAA,EACA,MAAA,EACA,KAAA,EACM;AAnFR,EAAA,IAAA,EAAA;AAoFE,EAAA,MAAM,SAAA,GAAY,iBAAiB,MAAM,CAAA;AACzC,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC5B,EAAA,IAAI,KAAA,CAAM,SAAS,OAAA,EAAS;AAC1B,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,CAAA,yDAAA,EAAoB,SAAA,CAAU,IAAA,CAAK,GAAG,CAAC,CAAA,sPAAA;AAAA,KACzC;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,QAAO,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,OAAA,CAAA,KAAY,WAAW,MAAA,CAAO,OAAA,CAAQ,MAAK,GAAI,EAAA;AAC9E,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAM,IAAA,GAAO,WAAW,OAAO,CAAA;AAC/B,IAAA,MAAM,OAAA,GAAA,CAAU,EAAA,GAAA,gBAAA,CAAiB,OAAO,CAAA,KAAxB,YAA6B,EAAC;AAC9C,IAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,GAAA;AAAA,QACA,wBAAA;AAAA,QACA,CAAA,aAAA,EAAW,OAAO,CAAA,oCAAA,EAAS,IAAI,sHAAuB,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA,IAAK,UAAK,CAAA,0GAAA;AAAA,OAClF;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,GAAA,GAAM,QAAO,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,GAAA,CAAA,KAAQ,WAAW,MAAA,CAAO,GAAA,CAAI,MAAK,GAAI,EAAA;AAClE,EAAA,IAAI,GAAA,IAAO,CAAC,UAAA,CAAW,GAAG,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,GAAA;AAAA,MACA,oBAAA;AAAA,MACA,yCAAgB,GAAG,CAAA,mPAAA;AAAA,KACrB;AAAA,EACF;AACF;;;;"}

package/.output/server/chunks/_/index.mjs

@@ -1,6 +1,6 @@
 import { mkdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { cT as computeBlockUq, aC as getTwinProviderRegistry, A as AppError, cU as sha256, cV as canonicalJson } from './nitro.mjs';
+import { cW as computeBlockUq, aC as getTwinProviderRegistry, A as AppError, cX as sha256, cY as canonicalJson } from './nitro.mjs';
 import { s as splitRange, a as pvX, b as pvU, p as pvY, r as readDataset } from './dataset-reader.mjs';
 import 'node:crypto';
 import 'node:http';

package/.output/server/chunks/_/line-scope.mjs

@@ -0,0 +1,32 @@
+import { af as filterByLine, bc as getDaqNodeRepo, A as AppError, ab as requireLineMode, bd as getDcwParamRepo, aE as getDcwRecipeRepo, a3 as getDcwController } from './nitro.mjs';
+
+function recipeLineId(recipeId) {
+  var _a, _b;
+  return (_b = (_a = getDcwRecipeRepo().byId(recipeId)) == null ? void 0 : _a.lineId) != null ? _b : null;
+}
+function dcwNodeLineId(nodeId) {
+  var _a, _b;
+  return (_b = (_a = getDcwController().byId(nodeId)) == null ? void 0 : _a.lineId) != null ? _b : null;
+}
+function daqNodeLineId(nodeId) {
+  var _a, _b;
+  return (_b = (_a = getDaqNodeRepo().byId(nodeId)) == null ? void 0 : _a.lineId) != null ? _b : null;
+}
+function paramLineId(paramId) {
+  const row = getDcwParamRepo().byId(paramId);
+  if (!row) return null;
+  return dcwNodeLineId(row.nodeId);
+}
+function requireLineForResource(user, lineId, resourceLabel, need = "readonly") {
+  if (!lineId) {
+    if (user.role === "admin") return;
+    throw new AppError(403, "LINE_FORBIDDEN", `${resourceLabel}\u672A\u5F52\u5C5E\u4EA7\u7EBF,\u4EC5\u7BA1\u7406\u5458\u53EF\u8BBF\u95EE`);
+  }
+  requireLineMode(user, lineId, need);
+}
+function filterRowsByLine(user, rows, lineIdOf) {
+  return filterByLine(user, rows, lineIdOf);
+}
+
+export { recipeLineId as a, daqNodeLineId as d, filterRowsByLine as f, paramLineId as p, requireLineForResource as r };
+//# sourceMappingURL=line-scope.mjs.map

package/.output/server/chunks/_/line-scope.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"line-scope.mjs","sources":["../../../../server/services/workshop/line-scope.ts"],"names":[],"mappings":";;AA0BO,SAAS,aAAa,QAAA,EAAiC;AA1B9D,EAAA,IAAA,EAAA,EAAA,EAAA;AA2BE,EAAA,OAAA,CAAO,6BAAiB,CAAE,IAAA,CAAK,QAAQ,CAAA,KAAhC,IAAA,GAAA,MAAA,GAAA,EAAA,CAAmC,WAAnC,IAAA,GAAA,EAAA,GAA6C,IAAA;AACtD;AAGO,SAAS,cAAc,MAAA,EAA+B;AA/B7D,EAAA,IAAA,EAAA,EAAA,EAAA;AAgCE,EAAA,OAAA,CAAO,6BAAiB,CAAE,IAAA,CAAK,MAAM,CAAA,KAA9B,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiC,WAAjC,IAAA,GAAA,EAAA,GAA2C,IAAA;AACpD;AAGO,SAAS,cAAc,MAAA,EAA+B;AApC7D,EAAA,IAAA,EAAA,EAAA,EAAA;AAqCE,EAAA,OAAA,CAAO,2BAAe,CAAE,IAAA,CAAK,MAAM,CAAA,KAA5B,IAAA,GAAA,MAAA,GAAA,EAAA,CAA+B,WAA/B,IAAA,GAAA,EAAA,GAAyC,IAAA;AAClD;AAGO,SAAS,YAAY,OAAA,EAAgC;AAC1D,EAAA,MAAM,GAAA,GAAM,eAAA,EAAgB,CAAE,IAAA,CAAK,OAAO,CAAA;AAC1C,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,OAAO,aAAA,CAAc,IAAI,MAAM,CAAA;AACjC;AAgBO,SAAS,sBAAA,CACd,IAAA,EACA,MAAA,EACA,aAAA,EACA,OAA+B,UAAA,EACzB;AACN,EAAA,IAAI,CAAC,MAAA,EAAQ;AAGX,IAAA,IAAI,IAAA,CAAK,SAAS,OAAA,EAAS;AAC3B,IAAA,MAAM,IAAI,QAAA,CAAS,GAAA,EAAK,gBAAA,EAAkB,CAAA,EAAG,aAAa,CAAA,yEAAA,CAAe,CAAA;AAAA,EAC3E;AACA,EAAA,eAAA,CAAgB,IAAA,EAAM,QAAQ,IAAI,CAAA;AACpC;AAGO,SAAS,gBAAA,CAAoB,IAAA,EAAkB,IAAA,EAAW,QAAA,EAAsD;AACrH,EAAA,OAAO,YAAA,CAAa,IAAA,EAAM,IAAA,EAAM,QAAQ,CAAA;AAC1C;;;;"}

package/.output/server/chunks/_/mes-console.mjs

@@ -1,4 +1,4 @@
-import { cM as getDcwNodeRepo, a1 as lineMode, bq as historyFormatOf, bt as resolveDcwDriver, cN as mesDictionaryOfNode, C as recordOps } from './nitro.mjs';
+import { cP as getDcwNodeRepo, a1 as lineMode, bx as historyFormatOf, bA as resolveDcwDriver, cQ as mesDictionaryOfNode, C as recordOps } from './nitro.mjs';
 
 const SENSITIVE_KEY = /(authorization|cookie|set-cookie|token|secret|api[-_]?key|x-api[-_]?key|password|credential|signature)/i;
 function redactHeaders(headers) {