feihong-code 0.2.1

package/dist/enterprise/policy.js

@@ -0,0 +1,242 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_POLICY = void 0;
+exports.loadPolicy = loadPolicy;
+exports.evaluate = evaluate;
+exports.renderPolicy = renderPolicy;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * M4 权限：RBAC + 策略引擎。
+ *
+ * 判定顺序（deny 优先，永远不可被角色权限反超）：
+ *   1) 危险 shell 命令黑名单        → deny
+ *   2) 敏感路径黑名单（读/写皆拦）  → deny
+ *   3) 越界路径（逃出工作区）       → deny
+ *   4) 角色-工具矩阵                → deny / approval / allow
+ *   5) shell 白名单                 → allow（否则 approval）
+ *
+ * 策略来源（后者覆盖前者）：
+ *   DEFAULT_POLICY → <FH_HOME>/policy.json → <租户目录>/policy.json → FH_POLICY 内联 JSON
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+const logger_1 = require("../shared/logger");
+const tenant_1 = require("./tenant");
+exports.DEFAULT_POLICY = {
+    version: 1,
+    roles: {
+        viewer: {
+            allowTools: ['read_file', 'list_dir', 'grep'],
+            approvalTools: [],
+            maxCostUsd: 0.1,
+        },
+        developer: {
+            allowTools: [
+                'read_file',
+                'list_dir',
+                'grep',
+                'write_file',
+                'edit_file',
+                'run_tests',
+                'build_check',
+            ],
+            approvalTools: ['run_shell'],
+            maxCostUsd: 1,
+        },
+        operator: {
+            allowTools: ['*'],
+            approvalTools: ['run_shell'],
+            maxCostUsd: 5,
+        },
+        admin: {
+            allowTools: ['*'],
+            approvalTools: ['run_shell'],
+            maxCostUsd: 0,
+        },
+    },
+    denyShell: [
+        'rm -rf /',
+        'rm -rf ~',
+        'rm -rf *',
+        'mkfs',
+        'dd if=',
+        ':(){',
+        'shutdown',
+        'reboot',
+        'halt',
+        'format ',
+        'del /s',
+        'rd /s',
+        'chmod 777 /',
+        'chown -R root',
+        'curl | sh',
+        'curl|sh',
+        'wget | sh',
+        'wget|sh',
+        'iptables -F',
+        'net user',
+        'reg delete',
+        'history -c',
+        'shred ',
+    ],
+    denyPaths: [
+        '.env',
+        '.git/config',
+        '.git/hooks',
+        '.npmrc',
+        '.ssh',
+        'id_rsa',
+        'id_ed25519',
+        'credentials',
+        '.aws',
+        '.kube/config',
+        'shadow',
+    ],
+    tenantDailyBudgetUsd: 0,
+};
+/** 深合并：仅覆盖用户显式提供的键，避免局部配置抹掉默认安全基线 */
+function mergePolicy(base, patch) {
+    if (!patch)
+        return base;
+    const roles = { ...base.roles };
+    for (const r of tenant_1.ROLES) {
+        const p = patch.roles?.[r];
+        if (p)
+            roles[r] = { ...base.roles[r], ...p };
+    }
+    return {
+        version: 1,
+        roles,
+        // 黑名单永远是"并集"：租户策略只能加严，不能放松
+        denyShell: [...new Set([...base.denyShell, ...(patch.denyShell ?? [])])],
+        denyPaths: [...new Set([...base.denyPaths, ...(patch.denyPaths ?? [])])],
+        tenantDailyBudgetUsd: patch.tenantDailyBudgetUsd ?? base.tenantDailyBudgetUsd,
+    };
+}
+function readPolicyFile(file) {
+    if (!(0, fs_1.existsSync)(file))
+        return null;
+    try {
+        return JSON.parse((0, fs_1.readFileSync)(file, 'utf8'));
+    }
+    catch (e) {
+        logger_1.logger.warn('策略文件解析失败，已忽略', {
+            file,
+            error: e instanceof Error ? e.message : String(e),
+        });
+        return null;
+    }
+}
+/** 加载生效策略（默认 → 全局 policy.json → 租户 policy.json → FH_POLICY） */
+function loadPolicy(baseHome, tenantRoot) {
+    let policy = exports.DEFAULT_POLICY;
+    policy = mergePolicy(policy, readPolicyFile((0, path_1.join)(baseHome, 'policy.json')));
+    if (tenantRoot)
+        policy = mergePolicy(policy, readPolicyFile((0, path_1.join)(tenantRoot, 'policy.json')));
+    const inline = process.env.FH_POLICY?.trim();
+    if (inline) {
+        try {
+            policy = mergePolicy(policy, JSON.parse(inline));
+        }
+        catch {
+            logger_1.logger.warn('FH_POLICY 不是合法 JSON，已忽略');
+        }
+    }
+    return policy;
+}
+/** 从工具入参中提取涉及的路径（read/write/edit/list/grep 统一用 path/dir/file 字段） */
+function extractPaths(args) {
+    const keys = ['path', 'file', 'dir', 'target', 'from', 'to'];
+    const out = [];
+    for (const k of keys) {
+        const v = args[k];
+        if (typeof v === 'string' && v.trim())
+            out.push(v.trim());
+    }
+    return out;
+}
+function normalizeForMatch(s) {
+    return s.replace(/\\/g, '/').toLowerCase();
+}
+/** 路径是否逃出工作区（沙箱二次校验，与 safe-path 互为纵深防御） */
+function escapesWorkspace(cwd, p) {
+    const abs = (0, path_1.resolve)(cwd, p);
+    const root = (0, path_1.resolve)(cwd);
+    return abs !== root && !abs.startsWith(root + path_1.sep);
+}
+/** 策略判定核心 */
+function evaluate(policy, input) {
+    const { role, tool, args, cwd, shellAllowlist } = input;
+    const rolePolicy = policy.roles[role];
+    // 1) 危险 shell 命令：无条件拒绝，admin 也不例外
+    if (tool === 'run_shell') {
+        const cmd = String(args.command ?? args.cmd ?? '');
+        const flat = normalizeForMatch(cmd).replace(/\s+/g, ' ');
+        for (const bad of policy.denyShell) {
+            if (flat.includes(normalizeForMatch(bad).replace(/\s+/g, ' '))) {
+                return {
+                    effect: 'deny',
+                    reason: `命中危险命令黑名单: ${bad}`,
+                    rule: 'denyShell',
+                };
+            }
+        }
+    }
+    // 2) 敏感路径 + 3) 越界路径
+    for (const p of extractPaths(args)) {
+        const np = normalizeForMatch(p);
+        for (const bad of policy.denyPaths) {
+            const nb = normalizeForMatch(bad);
+            if (np === nb || np.endsWith('/' + nb) || np.includes(nb + '/') || np.includes('/' + nb)) {
+                return { effect: 'deny', reason: `命中敏感路径黑名单: ${bad}`, rule: 'denyPaths' };
+            }
+        }
+        if (escapesWorkspace(cwd, p)) {
+            return { effect: 'deny', reason: `路径越出工作区: ${p}`, rule: 'sandbox' };
+        }
+    }
+    // 4) 角色-工具矩阵
+    const allowed = rolePolicy.allowTools.includes('*') || rolePolicy.allowTools.includes(tool);
+    const needsApproval = rolePolicy.approvalTools.includes(tool);
+    if (!allowed && !needsApproval) {
+        return {
+            effect: 'deny',
+            reason: `角色 ${role} 无权调用工具 ${tool}`,
+            rule: 'rbac',
+        };
+    }
+    // 5) shell 白名单可免审批
+    if (tool === 'run_shell' && needsApproval) {
+        const cmd = String(args.command ?? args.cmd ?? '');
+        const head = cmd.trim().split(/\s+/)[0] || '';
+        if (shellAllowlist.includes(head)) {
+            return { effect: 'allow', reason: `命中 shell 白名单: ${head}`, rule: 'shellAllowlist' };
+        }
+        return { effect: 'approval', reason: `工具 ${tool} 需人工审批`, rule: 'rbac.approval' };
+    }
+    if (needsApproval && !allowed) {
+        return { effect: 'approval', reason: `工具 ${tool} 需人工审批`, rule: 'rbac.approval' };
+    }
+    return { effect: 'allow', reason: `角色 ${role} 允许调用 ${tool}`, rule: 'rbac.allow' };
+}
+/** 渲染策略摘要（fhcode policy） */
+function renderPolicy(policy, role) {
+    const rp = policy.roles[role];
+    const lines = [
+        `策略版本: v${policy.version}`,
+        `当前角色: ${role}`,
+        `  直接允许: ${rp.allowTools.join(', ')}`,
+        `  需审批  : ${rp.approvalTools.join(', ') || '（无）'}`,
+        `  单任务成本上限: ${rp.maxCostUsd > 0 ? `$${rp.maxCostUsd}` : '不限'}`,
+        `租户日成本上限: ${policy.tenantDailyBudgetUsd > 0 ? `$${policy.tenantDailyBudgetUsd}` : '不限'}`,
+        `危险命令黑名单(${policy.denyShell.length}): ${policy.denyShell.slice(0, 8).join(' | ')}${policy.denyShell.length > 8 ? ' ...' : ''}`,
+        `敏感路径黑名单(${policy.denyPaths.length}): ${policy.denyPaths.slice(0, 8).join(' | ')}${policy.denyPaths.length > 8 ? ' ...' : ''}`,
+        '',
+        '全角色矩阵:',
+        ...tenant_1.ROLES.map((r) => `  ${r.padEnd(10)} allow=[${policy.roles[r].allowTools.join(',')}] approval=[${policy.roles[r].approvalTools.join(',') || '-'}] max=$${policy.roles[r].maxCostUsd || '∞'}`),
+    ];
+    return lines.join('\n');
+}
+//# sourceMappingURL=policy.js.map

package/dist/enterprise/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/enterprise/policy.ts"],"names":[],"mappings":";;;AAqKA,gCAaC;AAyBD,4BA4DC;AAGD,oCAmBC;AA7RD;;;;;;;;;;;;;;;GAeG;AACH,2BAA8C;AAC9C,+BAA0C;AAC1C,6CAA0C;AAC1C,qCAA4C;AAwB/B,QAAA,cAAc,GAAW;IACpC,OAAO,EAAE,CAAC;IACV,KAAK,EAAE;QACL,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC;YAC7C,aAAa,EAAE,EAAE;YACjB,UAAU,EAAE,GAAG;SAChB;QACD,SAAS,EAAE;YACT,UAAU,EAAE;gBACV,WAAW;gBACX,UAAU;gBACV,MAAM;gBACN,YAAY;gBACZ,WAAW;gBACX,WAAW;gBACX,aAAa;aACd;YACD,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,UAAU,EAAE,CAAC;SACd;QACD,QAAQ,EAAE;YACR,UAAU,EAAE,CAAC,GAAG,CAAC;YACjB,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,UAAU,EAAE,CAAC;SACd;QACD,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,GAAG,CAAC;YACjB,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,UAAU,EAAE,CAAC;SACd;KACF;IACD,SAAS,EAAE;QACT,UAAU;QACV,UAAU;QACV,UAAU;QACV,MAAM;QACN,QAAQ;QACR,MAAM;QACN,UAAU;QACV,QAAQ;QACR,MAAM;QACN,SAAS;QACT,QAAQ;QACR,OAAO;QACP,aAAa;QACb,eAAe;QACf,WAAW;QACX,SAAS;QACT,WAAW;QACX,SAAS;QACT,aAAa;QACb,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,QAAQ;KACT;IACD,SAAS,EAAE;QACT,MAAM;QACN,aAAa;QACb,YAAY;QACZ,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,MAAM;QACN,cAAc;QACd,QAAQ;KACT;IACD,oBAAoB,EAAE,CAAC;CACxB,CAAC;AAmBF,qCAAqC;AACrC,SAAS,WAAW,CAAC,IAAY,EAAE,KAA6B;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,cAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK;QACL,2BAA2B;QAC3B,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,oBAAoB;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;IACnE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,eAAM,CAAC,IAAI,CAAC,cAAc,EAAE;YAC1B,IAAI;YACJ,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAgB,UAAU,CAAC,QAAgB,EAAE,UAAmB;IAC9D,IAAI,MAAM,GAAG,sBAAc,CAAC;IAC5B,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,IAAA,WAAI,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,UAAU;QAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,IAAA,WAAI,EAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAoB,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,eAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,IAA6B;IACjD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED,2CAA2C;AAC3C,SAAS,gBAAgB,CAAC,GAAW,EAAE,CAAS;IAC9C,MAAM,GAAG,GAAG,IAAA,cAAO,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,UAAG,CAAC,CAAC;AACrD,CAAC;AAED,aAAa;AACb,SAAgB,QAAQ,CAAC,MAAc,EAAE,KAAgB;IACvD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtC,kCAAkC;IAClC,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC/D,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,cAAc,GAAG,EAAE;oBAC3B,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;gBACzF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IAED,aAAa;IACb,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9D,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM,IAAI,WAAW,IAAI,EAAE;YACnC,IAAI,EAAE,MAAM;SACb,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI,KAAK,WAAW,IAAI,aAAa,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACpF,CAAC;AAED,4BAA4B;AAC5B,SAAgB,YAAY,CAAC,MAAc,EAAE,IAAU;IACrD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG;QACZ,UAAU,MAAM,CAAC,OAAO,EAAE;QAC1B,SAAS,IAAI,EAAE;QACf,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrC,YAAY,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE;QAClD,cAAc,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QAC9D,YAAY,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACxF,WAAW,MAAM,CAAC,SAAS,CAAC,MAAM,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9H,WAAW,MAAM,CAAC,SAAS,CAAC,MAAM,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9H,EAAE;QACF,QAAQ;QACR,GAAG,cAAK,CAAC,GAAG,CACV,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAC7K;KACF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/enterprise/quota.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tenantSpendToday = tenantSpendToday;
+exports.resolveDailyLimit = resolveDailyLimit;
+exports.checkQuota = checkQuota;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * M4 配额：租户级日成本预算。
+ * 统计口径 = 该租户 sessions 目录下 updatedAt 为「今天(UTC)」的检查点 costUsd 之和。
+ * 超限则在任务启动前拒绝（fail-fast，不产生任何模型调用费用）。
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+function todayUtc() {
+    return new Date().toISOString().slice(0, 10);
+}
+/** 统计租户当日已用成本 */
+function tenantSpendToday(sessionDir, day = todayUtc()) {
+    if (!(0, fs_1.existsSync)(sessionDir))
+        return { usedUsd: 0, sessions: 0 };
+    let usedUsd = 0;
+    let sessions = 0;
+    for (const f of (0, fs_1.readdirSync)(sessionDir)) {
+        if (!f.endsWith('.session.json'))
+            continue;
+        try {
+            const cp = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(sessionDir, f), 'utf8'));
+            if (!cp.updatedAt?.startsWith(day))
+                continue;
+            sessions++;
+            usedUsd += Number(cp.costUsd ?? 0);
+        }
+        catch {
+            /* 跳过损坏文件 */
+        }
+    }
+    return { usedUsd, sessions };
+}
+/** 环境变量 FH_TENANT_BUDGET_USD 优先于策略中的 tenantDailyBudgetUsd */
+function resolveDailyLimit(policy) {
+    const env = Number(process.env.FH_TENANT_BUDGET_USD ?? NaN);
+    if (Number.isFinite(env) && env >= 0)
+        return env;
+    return policy.tenantDailyBudgetUsd;
+}
+function checkQuota(ctx, policy) {
+    const limitUsd = resolveDailyLimit(policy);
+    const { usedUsd, sessions } = tenantSpendToday(ctx.sessionDir);
+    return {
+        usedUsd,
+        limitUsd,
+        sessionsToday: sessions,
+        exceeded: limitUsd > 0 && usedUsd >= limitUsd,
+    };
+}
+//# sourceMappingURL=quota.js.map

package/dist/enterprise/quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.js","sourceRoot":"","sources":["../../src/enterprise/quota.ts"],"names":[],"mappings":";;AAyBA,4CAmBC;AAGD,8CAIC;AAED,gCASC;AA9DD;;;;;;;GAOG;AACH,2BAA2D;AAC3D,+BAA4B;AAW5B,SAAS,QAAQ;IACf,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,iBAAiB;AACjB,SAAgB,gBAAgB,CAAC,UAAkB,EAAE,GAAG,GAAG,QAAQ,EAAE;IAInE,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAChE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,IAAA,gBAAW,EAAC,UAAU,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,SAAS;QAC3C,IAAI,CAAC;YACH,MAAM,EAAE,GAA6C,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3G,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7C,QAAQ,EAAE,CAAC;YACX,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,6DAA6D;AAC7D,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IACjD,OAAO,MAAM,CAAC,oBAAoB,CAAC;AACrC,CAAC;AAED,SAAgB,UAAU,CAAC,GAAkB,EAAE,MAAc;IAC3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/D,OAAO;QACL,OAAO;QACP,QAAQ;QACR,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,QAAQ,GAAG,CAAC,IAAI,OAAO,IAAI,QAAQ;KAC9C,CAAC;AACJ,CAAC"}

package/dist/enterprise/tenant.js

@@ -0,0 +1,143 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ROLES = void 0;
+exports.assertValidId = assertValidId;
+exports.resolveTenantContext = resolveTenantContext;
+exports.listTenants = listTenants;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * M4 多租户：身份解析与数据隔离。
+ *
+ * 隔离模型（物理目录隔离，最简单也最难出错）：
+ *   <FH_HOME>/tenants/<tenantId>/sessions/   会话检查点与事件日志
+ *   <FH_HOME>/tenants/<tenantId>/audit/      审计链
+ *   <FH_HOME>/tenants/<tenantId>/goals/      /goal 产物
+ *   <FH_HOME>/tenants/<tenantId>/policy.json 租户级策略覆盖（可选）
+ *
+ * 身份来自环境变量（便于容器 / CI / 网关注入）：
+ *   FH_TENANT  租户 ID（缺省 default）
+ *   FH_USER    用户标识（缺省 系统用户名）
+ *   FH_ROLE    角色（viewer|developer|operator|admin，缺省 developer）
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const config_1 = require("../shared/config");
+const errors_1 = require("../shared/errors");
+exports.ROLES = ['viewer', 'developer', 'operator', 'admin'];
+/** 租户 / 用户 ID 合法性：仅字母数字与 - _ .，防止 ../ 路径穿越 */
+const ID_RE = /^[A-Za-z0-9._-]{1,64}$/;
+function assertValidId(kind, id) {
+    if (!ID_RE.test(id)) {
+        throw new errors_1.AppError(`${kind} 非法: "${id}"（仅允许字母数字与 . _ -，长度 1-64）`, 'TENANT_ID_INVALID', 400);
+    }
+}
+function normalizeRole(raw) {
+    const r = (raw || '').trim().toLowerCase();
+    if (exports.ROLES.includes(r))
+        return r;
+    if (r) {
+        throw new errors_1.AppError(`FH_ROLE 非法: "${raw}"（可选值: ${exports.ROLES.join(' | ')}）`, 'ROLE_INVALID', 400);
+    }
+    return 'developer';
+}
+/**
+ * 解析当前租户上下文。
+ *
+ * 兼容性：默认租户（default）且尚未创建 tenants/default 目录、但存在旧版
+ * <FH_HOME>/sessions 时，继续沿用旧目录，避免升级后历史会话"消失"。
+ */
+function resolveTenantContext(baseHome = (0, config_1.resolveHomeDir)()) {
+    const tenantId = (process.env.FH_TENANT || 'default').trim();
+    assertValidId('FH_TENANT', tenantId);
+    let userId = (process.env.FH_USER || '').trim();
+    if (!userId) {
+        try {
+            userId = (0, os_1.userInfo)().username || 'unknown';
+        }
+        catch {
+            userId = 'unknown';
+        }
+    }
+    userId = userId.replace(/[^A-Za-z0-9._-]/g, '_').slice(0, 64) || 'unknown';
+    const role = normalizeRole(process.env.FH_ROLE);
+    const root = (0, path_1.join)(baseHome, 'tenants', tenantId);
+    const legacySessions = (0, path_1.join)(baseHome, 'sessions');
+    const useLegacy = tenantId === 'default' && !(0, fs_1.existsSync)(root) && (0, fs_1.existsSync)(legacySessions);
+    return {
+        tenantId,
+        userId,
+        role,
+        root,
+        sessionDir: useLegacy ? legacySessions : (0, path_1.join)(root, 'sessions'),
+        auditDir: (0, path_1.join)(root, 'audit'),
+        goalDir: useLegacy ? (0, path_1.join)(baseHome, 'goals') : (0, path_1.join)(root, 'goals'),
+    };
+}
+/** 扫描 <FH_HOME>/tenants 汇总各租户用量（用于 fhcode tenants） */
+function listTenants(baseHome = (0, config_1.resolveHomeDir)()) {
+    const dir = (0, path_1.join)(baseHome, 'tenants');
+    if (!(0, fs_1.existsSync)(dir))
+        return [];
+    const out = [];
+    for (const name of (0, fs_1.readdirSync)(dir)) {
+        const root = (0, path_1.join)(dir, name);
+        try {
+            if (!(0, fs_1.statSync)(root).isDirectory())
+                continue;
+        }
+        catch {
+            continue;
+        }
+        out.push({
+            tenantId: name,
+            ...summarizeSessions((0, path_1.join)(root, 'sessions')),
+            auditRecords: countAuditLines((0, path_1.join)(root, 'audit')),
+        });
+    }
+    return out.sort((a, b) => b.lastActiveAt.localeCompare(a.lastActiveAt));
+}
+function summarizeSessions(sessionDir) {
+    if (!(0, fs_1.existsSync)(sessionDir))
+        return { sessions: 0, costUsd: 0, lastActiveAt: '-' };
+    let sessions = 0;
+    let costUsd = 0;
+    let lastActiveAt = '-';
+    for (const f of (0, fs_1.readdirSync)(sessionDir)) {
+        if (!f.endsWith('.session.json'))
+            continue;
+        sessions++;
+        try {
+            const cp = JSON.parse(readTextSafe((0, path_1.join)(sessionDir, f)));
+            costUsd += Number(cp.costUsd ?? 0);
+            if (cp.updatedAt && cp.updatedAt > lastActiveAt)
+                lastActiveAt = cp.updatedAt;
+        }
+        catch {
+            /* 跳过损坏文件 */
+        }
+    }
+    return { sessions, costUsd, lastActiveAt };
+}
+function countAuditLines(auditDir) {
+    if (!(0, fs_1.existsSync)(auditDir))
+        return 0;
+    let n = 0;
+    for (const f of (0, fs_1.readdirSync)(auditDir)) {
+        if (!f.endsWith('.jsonl'))
+            continue;
+        n += readTextSafe((0, path_1.join)(auditDir, f)).split('\n').filter(Boolean).length;
+    }
+    return n;
+}
+function readTextSafe(file) {
+    try {
+        return (0, fs_1.readFileSync)(file, 'utf8');
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=tenant.js.map

package/dist/enterprise/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../../src/enterprise/tenant.ts"],"names":[],"mappings":";;;AAwCA,sCAQC;AAqBD,oDA6BC;AAWD,kCAkBC;AA/HD;;;;;;;;;;;;;;;;GAgBG;AACH,2BAAqE;AACrE,+BAA4B;AAC5B,2BAA8B;AAC9B,6CAAkD;AAClD,6CAA4C;AAE/B,QAAA,KAAK,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAc3E,8CAA8C;AAC9C,MAAM,KAAK,GAAG,wBAAwB,CAAC;AAEvC,SAAgB,aAAa,CAAC,IAAY,EAAE,EAAU;IACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAQ,CAChB,GAAG,IAAI,SAAS,EAAE,2BAA2B,EAC7C,mBAAmB,EACnB,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAuB;IAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAK,aAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAS,CAAC;IAC/D,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,IAAI,iBAAQ,CAChB,gBAAgB,GAAG,UAAU,aAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EACjD,cAAc,EACd,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,QAAQ,GAAG,IAAA,uBAAc,GAAE;IAC9D,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAErC,IAAI,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,IAAA,aAAQ,GAAE,CAAC,QAAQ,IAAI,SAAS,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAE3E,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEjD,MAAM,cAAc,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,IAAI,IAAA,eAAU,EAAC,cAAc,CAAC,CAAC;IAE5F,OAAO;QACL,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,UAAU,CAAC;QAC/D,QAAQ,EAAE,IAAA,WAAI,EAAC,IAAI,EAAE,OAAO,CAAC;QAC7B,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAA,WAAI,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,OAAO,CAAC;KACnE,CAAC;AACJ,CAAC;AAUD,sDAAsD;AACtD,SAAgB,WAAW,CAAC,QAAQ,GAAG,IAAA,uBAAc,GAAE;IACrD,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,IAAA,eAAU,EAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAW,EAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,SAAS;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,IAAI;YACd,GAAG,iBAAiB,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC5C,YAAY,EAAE,eAAe,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAK3C,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;IACnF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,GAAG,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,IAAA,gBAAW,EAAC,UAAU,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,SAAS;QAC3C,QAAQ,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,EAAE,GAA6C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAA,WAAI,EAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACnG,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;YACnC,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,GAAG,YAAY;gBAAE,YAAY,GAAG,EAAE,CAAC,SAAS,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,IAAA,gBAAW,EAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QACpC,CAAC,IAAI,YAAY,CAAC,IAAA,WAAI,EAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC1E,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/models/cost.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.estimateCost = estimateCost;
+exports.isOverBudget = isOverBudget;
+/** 按每千 token 统一费率估算成本（USD），costPer1k 来自 ProviderConfig */
+function estimateCost(usage, costPer1k) {
+    return (usage.totalTokens / 1000) * costPer1k;
+}
+/** 预算是否超限 */
+function isOverBudget(spent, budget) {
+    return budget > 0 && spent > budget;
+}
+//# sourceMappingURL=cost.js.map

package/dist/models/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../src/models/cost.ts"],"names":[],"mappings":";;AASA,oCAEC;AAGD,oCAEC;AARD,0DAA0D;AAC1D,SAAgB,YAAY,CAAC,KAAiB,EAAE,SAAiB;IAC/D,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;AAChD,CAAC;AAED,aAAa;AACb,SAAgB,YAAY,CAAC,KAAa,EAAE,MAAc;IACxD,OAAO,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC;AACtC,CAAC"}

package/dist/models/model-router.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModelRouter = void 0;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * 模型路由器：按策略选优（cost/capability/latency）+ 自动 fallback。
+ * 不直接耦合任何供应商，组件注入，便于测试与扩展。
+ *
+ * M6 增强：
+ *  - 模型性能追踪（成功/失败统计）
+ *  - 自动择优（基于历史成功率）
+ *  - model-stats 命令支持
+ */
+const promises_1 = require("fs/promises");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const errors_1 = require("../shared/errors");
+const logger_1 = require("../shared/logger");
+const openai_compatible_provider_1 = require("./providers/openai-compatible.provider");
+const ollama_provider_1 = require("./providers/ollama.provider");
+const STATS_VERSION = 1;
+const DEFAULT_STATS_FILE = 'model-stats.jsonl';
+class ModelRouter {
+    providers;
+    strategy;
+    budget;
+    statsFile;
+    statsCache = null;
+    constructor(providers, strategy, budget, statsFile = '') {
+        this.providers = providers;
+        this.strategy = strategy;
+        this.budget = budget;
+        this.statsFile = statsFile || DEFAULT_STATS_FILE;
+    }
+    /** 从 AppConfig 构建（默认路由，联调真实模型时使用） */
+    static fromConfig(cfg, statsFile) {
+        const providers = cfg.models.providers.map((p) => p.type === 'ollama' ? new ollama_provider_1.OllamaProvider(p) : new openai_compatible_provider_1.OpenAICompatibleProvider(p));
+        return new ModelRouter(providers, cfg.models.defaultStrategy, cfg.models.budgetPerTaskUsd, statsFile);
+    }
+    /** 加载性能统计缓存 */
+    async loadStats(homeDir) {
+        const file = (0, path_1.join)(homeDir, this.statsFile);
+        if (!(0, fs_1.existsSync)(file)) {
+            this.statsCache = { version: STATS_VERSION, stats: [], updatedAt: new Date().toISOString() };
+            return;
+        }
+        try {
+            const content = await (0, promises_1.readFile)(file, 'utf8');
+            const lines = content.trim().split('\n').filter(Boolean);
+            const stats = [];
+            for (const line of lines) {
+                try {
+                    stats.push(JSON.parse(line));
+                }
+                catch {
+                    // 跳过损坏记录
+                }
+            }
+            this.statsCache = { version: STATS_VERSION, stats, updatedAt: new Date().toISOString() };
+        }
+        catch {
+            this.statsCache = { version: STATS_VERSION, stats: [], updatedAt: new Date().toISOString() };
+        }
+    }
+    /** 保存性能统计 */
+    async saveStats(homeDir) {
+        if (!this.statsCache)
+            return;
+        const file = (0, path_1.join)(homeDir, this.statsFile);
+        await (0, promises_1.mkdir)(homeDir, { recursive: true });
+        const lines = this.statsCache.stats.map((s) => JSON.stringify(s)).join('\n') + '\n';
+        await (0, promises_1.writeFile)(file, lines, 'utf8');
+    }
+    /** 更新模型调用统计 */
+    async updateStat(providerId, model, success, costUsd, latencyMs) {
+        if (!this.statsCache) {
+            this.statsCache = { version: STATS_VERSION, stats: [], updatedAt: new Date().toISOString() };
+        }
+        const existing = this.statsCache.stats.find((s) => s.providerId === providerId && s.model === model);
+        if (existing) {
+            existing.totalCalls++;
+            if (success)
+                existing.successfulCalls++;
+            else
+                existing.failedCalls++;
+            existing.totalCostUsd += costUsd;
+            existing.avgLatencyMs = (existing.avgLatencyMs * (existing.totalCalls - 1) + latencyMs) / existing.totalCalls;
+            existing.lastUsedAt = new Date().toISOString();
+            existing.successRate = existing.successfulCalls / existing.totalCalls;
+        }
+        else {
+            this.statsCache.stats.push({
+                providerId,
+                model,
+                totalCalls: 1,
+                successfulCalls: success ? 1 : 0,
+                failedCalls: success ? 0 : 1,
+                totalCostUsd: costUsd,
+                avgLatencyMs: latencyMs,
+                lastUsedAt: new Date().toISOString(),
+                successRate: success ? 1 : 0,
+            });
+        }
+        this.statsCache.updatedAt = new Date().toISOString();
+    }
+    /** 获取模型统计报告 */
+    getStats() {
+        return this.statsCache?.stats ?? [];
+    }
+    /** 按策略排序后的 provider 列表（含能力过滤与 fallback 顺序） */
+    rank(tags) {
+        let list = [...this.providers];
+        if (tags && tags.length > 0) {
+            const filtered = list.filter((p) => tags.every((t) => p.tags.includes(t)));
+            if (filtered.length > 0)
+                list = filtered;
+        }
+        return list.sort((a, b) => this.score(b) - this.score(a));
+    }
+    score(p) {
+        let base = 0;
+        if (this.strategy === 'cost')
+            base = -(p.costPer1k ?? 0);
+        else if (this.strategy === 'latency')
+            base = p.tags.includes('local') ? 1 : 0;
+        else
+            base = (p.tags.includes('reasoning') ? 2 : 0) + (p.tags.includes('code-gen') ? 1 : 0);
+        // M6: 加权历史成功率（最多 0.3 分）
+        if (this.statsCache) {
+            const stat = this.statsCache.stats.find((s) => s.providerId === p.id);
+            if (stat && stat.totalCalls >= 3) {
+                base += stat.successRate * 0.3;
+            }
+        }
+        return base;
+    }
+    /** 调用并自动 fallback；全部失败抛出最后错误 */
+    async chat(req, tags) {
+        const order = this.rank(tags);
+        let lastErr;
+        const startTime = Date.now();
+        for (const p of order) {
+            try {
+                const resp = await p.chat(req);
+                const latency = Date.now() - startTime;
+                // M6: 更新性能统计
+                await this.updateStat(p.id, resp.model, true, resp.costUsd, latency);
+                if (this.budget > 0 && resp.costUsd > this.budget) {
+                    logger_1.logger.warn('cost over budget', { provider: p.id, cost: resp.costUsd, budget: this.budget });
+                }
+                return resp;
+            }
+            catch (e) {
+                const latency = Date.now() - startTime;
+                // M6: 记录失败
+                await this.updateStat(p.id, '', false, 0, latency);
+                logger_1.logger.warn('provider failed, try next', {
+                    provider: p.id,
+                    error: e instanceof Error ? e.message : String(e),
+                });
+                lastErr = e;
+            }
+        }
+        throw lastErr instanceof Error ? lastErr : new errors_1.ModelError('所有 provider 均不可用', 'router');
+    }
+}
+exports.ModelRouter = ModelRouter;
+//# sourceMappingURL=model-router.js.map