feihong-code 0.2.1

package/dist/runtime/worktree.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorktreeError = void 0;
+exports.getRepoRoot = getRepoRoot;
+exports.createWorktree = createWorktree;
+exports.removeWorktree = removeWorktree;
+exports.listWorktrees = listWorktrees;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * 工作树隔离：用 git worktree 为每个子代理创建独立工作区（独立目录 + 独立分支），
+ * 实现多子代理并行开发的物理隔离。任务完成后可安全移除。
+ */
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const exec = (0, util_1.promisify)(child_process_1.execFile);
+class WorktreeError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WorktreeError';
+    }
+}
+exports.WorktreeError = WorktreeError;
+/** 取当前 git 仓库根目录（用于在其上创建 worktree） */
+async function getRepoRoot(cwd) {
+    try {
+        const { stdout } = await exec('git', ['rev-parse', '--show-toplevel'], { cwd });
+        return stdout.trim();
+    }
+    catch {
+        throw new WorktreeError(`当前目录不是 git 仓库，无法创建 worktree: ${cwd}`);
+    }
+}
+async function getCurrentBranch(repoRoot) {
+    const { stdout } = await exec('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd: repoRoot });
+    return stdout.trim();
+}
+/**
+ * 创建隔离工作树。
+ * @param repoRoot 主仓库根目录
+ * @param name 子代理/任务名（用于分支与目录命名）
+ * @param baseBranch 基线分支（默认当前分支）
+ */
+async function createWorktree(repoRoot, name, baseBranch) {
+    const base = baseBranch ?? (await getCurrentBranch(repoRoot));
+    const branch = `fhcode/${slug(name)}-${Date.now().toString(36)}`;
+    const path = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), `fhcode-wt-${slug(name)}-`));
+    try {
+        await exec('git', ['worktree', 'add', '--force', '-b', branch, path, base], {
+            cwd: repoRoot,
+        });
+    }
+    catch (e) {
+        // git worktree add 失败：清理已创建的临时目录，避免孤儿目录泄漏
+        try {
+            (0, fs_1.rmSync)(path, { recursive: true, force: true });
+        }
+        catch {
+            /* best-effort */
+        }
+        throw new WorktreeError(`创建 worktree 失败 (${name}): ${e instanceof Error ? e.message : String(e)}`);
+    }
+    return { path, branch };
+}
+/**
+ * 移除工作树（--force 即使有未提交改动也删除，子代理产物不进主仓库）。
+ *
+ * 注意：Windows 上 git 对“顺序移除多个 worktree”存在已知缺陷——
+ * 移除第一个时可能连带清掉整个 .git/worktrees 目录，使后续 worktree 的
+ * git 原生移除报 “is not a working tree”。因此此处采用“尽力移除 + 强制清目录 + prune”
+ * 的鲁棒策略：先尝试 git 原生移除；无论成败都强制删除磁盘目录（防止孤儿目录）；
+ * 最后 prune 清理残留元数据。子代理结果已在移除前收集，清理仅针对工作区本身。
+ */
+async function removeWorktree(repoRoot, path) {
+    const norm = path.replace(/\\/g, '/');
+    // 1) 尽力用 git 原生移除（可能因上述 Windows bug 失败，忽略）
+    try {
+        await exec('git', ['worktree', 'remove', '--force', norm], { cwd: repoRoot });
+    }
+    catch {
+        /* best-effort，下面兜底 */
+    }
+    // 2) 强制删除磁盘目录，避免孤儿临时目录残留
+    try {
+        (0, fs_1.rmSync)(path, { recursive: true, force: true, maxRetries: 3 });
+    }
+    catch {
+        /* best-effort */
+    }
+    // 3) 兜底清理 git 元数据残留
+    try {
+        await exec('git', ['worktree', 'prune'], { cwd: repoRoot });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** 列出所有 worktree 路径 */
+async function listWorktrees(repoRoot) {
+    const { stdout } = await exec('git', ['worktree', 'list', '--porcelain'], { cwd: repoRoot });
+    return stdout
+        .split('\n')
+        .filter((l) => l.startsWith('worktree '))
+        .map((l) => l.slice('worktree '.length).trim());
+}
+function slug(s) {
+    return s
+        .toLowerCase()
+        .replace(/[^a-z0-9一-龥]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 24) || 'task';
+}
+//# sourceMappingURL=worktree.js.map

package/dist/runtime/worktree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.js","sourceRoot":"","sources":["../../src/runtime/worktree.ts"],"names":[],"mappings":";;;AA8BA,kCAOC;AAaD,wCAwBC;AAWD,wCAoBC;AAGD,sCAMC;AAlHD;;;;;;GAMG;AACH,iDAAyC;AACzC,+BAAiC;AACjC,2BAAyC;AACzC,2BAA4B;AAC5B,+BAA4B;AAE5B,MAAM,IAAI,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAEjC,MAAa,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AASD,sCAAsC;AAC/B,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,IAAY,EACZ,UAAmB;IAEnB,MAAM,IAAI,GAAG,UAAU,IAAI,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YAC1E,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,0CAA0C;QAC1C,IAAI,CAAC;YACH,IAAA,WAAM,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,mBAAmB,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAY;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,yBAAyB;IACzB,IAAI,CAAC;QACH,IAAA,WAAM,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,uBAAuB;AAChB,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7F,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC;SACL,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAC5B,CAAC"}

package/dist/shared/config.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadDotEnv = loadDotEnv;
+exports.resolveHomeDir = resolveHomeDir;
+exports.loadConfigFile = loadConfigFile;
+exports.loadConfig = loadConfig;
+exports.__resetConfigForTest = __resetConfigForTest;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * 集中配置（铁律：所有配置来自环境变量，启动时校验，fail-fast，懒加载）
+ */
+const errors_1 = require("./errors");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+/**
+ * 极简 .env 加载器（不引入第三方依赖，离线可用）。
+ * 在 cwd 下读取 .env（若存在），将 KEY=VALUE 注入 process.env（仅当该键尚未设置，避免覆盖显式环境变量）。
+ * 值两侧的 ' 或 " 会被剥离。.env 必须被 .gitignore 排除，切勿提交真实密钥。
+ */
+function loadDotEnv(cwd = process.cwd()) {
+    const file = (0, path_1.join)(cwd, '.env');
+    if (!(0, fs_1.existsSync)(file))
+        return;
+    try {
+        const text = (0, fs_1.readFileSync)(file, 'utf8');
+        for (const raw of text.split('\n')) {
+            const line = raw.trim();
+            if (!line || line.startsWith('#'))
+                continue;
+            const eq = line.indexOf('=');
+            if (eq === -1)
+                continue;
+            const key = line.slice(0, eq).trim();
+            let val = line.slice(eq + 1).trim();
+            if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {
+                val = val.slice(1, -1);
+            }
+            if (!(key in process.env))
+                process.env[key] = val;
+        }
+    }
+    catch {
+        /* 加载失败不影响离线模式 */
+    }
+}
+const APP_VERSION = '0.2.1';
+/**
+ * 解析主目录：优先 FH_HOME，缺省 ~/.feihong-code（避免缺环境变量即崩溃）。
+ */
+function resolveHomeDir() {
+    const h = process.env.FH_HOME?.trim();
+    if (h)
+        return h.startsWith('~') ? h.replace(/^~/, (0, os_1.homedir)()) : h;
+    return (0, path_1.join)((0, os_1.homedir)(), '.feihong-code');
+}
+let cached = null;
+/**
+ * 读取 fhcode 配置文件（JSON），按优先级：
+ *   1) 显式 path
+ *   2) FH_CONFIG 环境变量
+ *   3) cwd/fhcode.config.json
+ *   4) FH_HOME/fhcode.config.json
+ * 文件缺失或 JSON 损坏时返回 null（不抛错，便于离线/默认配置）。
+ */
+function loadConfigFile(path) {
+    const candidates = [
+        path,
+        process.env.FH_CONFIG,
+        (0, path_1.join)(process.cwd(), 'fhcode.config.json'),
+        (0, path_1.join)(resolveHomeDir(), 'fhcode.config.json'),
+    ].filter(Boolean);
+    for (const f of candidates) {
+        if (!(0, fs_1.existsSync)(f))
+            continue;
+        try {
+            return JSON.parse((0, fs_1.readFileSync)(f, 'utf8'));
+        }
+        catch {
+            /* 忽略损坏的配置文件 */
+        }
+    }
+    return null;
+}
+/**
+ * 单环境变量快速接入真实模型：
+ *   FH_MODEL_NAME         模型名（必填，Ollama 即本地模型名）
+ *   FH_MODEL_TYPE         'ollama' | 'openai-compatible'（缺省按 baseURL 推断）
+ *   FH_MODEL_BASE_URL     接口地址（ollama 缺省 http://localhost:11434）
+ *   FH_MODEL_API_KEY      OpenAI 兼容接口的 Bearer 令牌
+ *   FH_MODEL_TAGS         逗号分隔能力标签（缺省 code-gen,reasoning[,local]）
+ *   FH_MODEL_COST_PER_1K  每千 token 成本（USD，统计用，缺省 0）
+ * 仅当 FH_PROVIDERS / 配置文件均未提供 provider 时生效。
+ */
+function buildProviderFromEnv() {
+    const name = process.env.FH_MODEL_NAME || process.env.FH_OLLAMA_MODEL;
+    if (!name)
+        return null;
+    const type = process.env.FH_MODEL_TYPE ||
+        (process.env.FH_MODEL_BASE_URL?.includes('ollama') ? 'ollama' : 'openai-compatible');
+    const baseURL = process.env.FH_MODEL_BASE_URL || (type === 'ollama' ? 'http://localhost:11434' : '');
+    if (type === 'openai-compatible' && !baseURL)
+        return null;
+    const tagStr = process.env.FH_MODEL_TAGS ||
+        (type === 'ollama' ? 'code-gen,reasoning,local' : 'code-gen,reasoning');
+    const tags = tagStr
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    return {
+        id: name,
+        type,
+        baseURL,
+        model: name,
+        apiKey: process.env.FH_MODEL_API_KEY || undefined,
+        tags,
+        costPer1k: Number(process.env.FH_MODEL_COST_PER_1K || '0'),
+    };
+}
+/**
+ * 解析模型供应商列表（三级优先级）：
+ *   1) FH_PROVIDERS 显式 JSON（最高优先级）
+ *   2) 配置文件 models.providers
+ *   3) 单环境变量（FH_MODEL_NAME 等）自动构建一个 provider
+ * 三者皆无则返回空数组（真实模式会在调用时给出明确报错）。
+ */
+function resolveProviders(fileCfg) {
+    if (process.env.FH_PROVIDERS) {
+        try {
+            const parsed = JSON.parse(process.env.FH_PROVIDERS);
+            if (!Array.isArray(parsed))
+                throw new Error('FH_PROVIDERS 必须为数组');
+            return parsed;
+        }
+        catch {
+            throw new errors_1.ConfigError('FH_PROVIDERS');
+        }
+    }
+    const fileProviders = fileCfg?.models?.providers;
+    if (Array.isArray(fileProviders) && fileProviders.length > 0) {
+        return fileProviders;
+    }
+    const envProv = buildProviderFromEnv();
+    if (envProv)
+        return [envProv];
+    return [];
+}
+/** 加载并校验配置（首次调用时执行，之后复用）。缺必需项立即抛 ConfigError。 */
+function loadConfig() {
+    if (cached)
+        return cached;
+    const fileCfg = loadConfigFile();
+    const providers = resolveProviders(fileCfg);
+    cached = {
+        app: {
+            name: 'feihong-code',
+            version: APP_VERSION,
+            homeDir: resolveHomeDir(),
+        },
+        models: {
+            providers,
+            defaultStrategy: process.env.FH_MODEL_STRATEGY ||
+                fileCfg?.models?.defaultStrategy ||
+                'cost',
+            budgetPerTaskUsd: Number(process.env.FH_BUDGET_USD || fileCfg?.models?.budgetPerTaskUsd || '0.5'),
+        },
+        runtime: {
+            logDir: process.env.FH_LOG_DIR || (0, path_1.join)(resolveHomeDir(), 'sessions'),
+            maxRetries: 3,
+        },
+        security: {
+            shellAllowlist: (process.env.FH_SHELL_ALLOW || '').split(',').map((s) => s.trim()).filter(Boolean),
+            requireApproval: process.env.FH_REQUIRE_APPROVAL !== 'false',
+        },
+    };
+    return cached;
+}
+/** 仅用于测试：重置缓存 */
+function __resetConfigForTest() {
+    cached = null;
+}
+//# sourceMappingURL=config.js.map

package/dist/shared/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/shared/config.ts"],"names":[],"mappings":";;AAiBA,gCAoBC;AA6BD,wCAIC;AAYD,wCAgBC;AAkED,gCAgCC;AAGD,oDAEC;AAzMD;;;;;GAKG;AACH,qCAAuC;AACvC,2BAA8C;AAC9C,+BAA4B;AAC5B,2BAA6B;AAG7B;;;;GAIG;AACH,SAAgB,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC5C,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAE,SAAS;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC7F,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAwBD,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,SAAgB,cAAc;IAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAA,YAAO,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,IAAI,MAAM,GAAqB,IAAI,CAAC;AAEpC;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,IAAa;IAC1C,MAAM,UAAU,GAAG;QACjB,IAAI;QACJ,OAAO,CAAC,GAAG,CAAC,SAAS;QACrB,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oBAAoB,CAAC;QACzC,IAAA,WAAI,EAAC,cAAc,EAAE,EAAE,oBAAoB,CAAC;KAC7C,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAA,eAAU,EAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAuB,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACtE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GACP,OAAO,CAAC,GAAG,CAAC,aAAgD;QAC7D,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACvF,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,mBAAmB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAoB,CAAC;IACtC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;QACjD,IAAI;QACJ,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,OAAmC;IAC3D,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAClE,OAAO,MAA0B,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,oBAAW,CAAC,cAAc,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,aAAiC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iDAAiD;AACjD,SAAgB,UAAU;IACxB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE5C,MAAM,GAAG;QACP,GAAG,EAAE;YACH,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,cAAc,EAAE;SAC1B;QACD,MAAM,EAAE;YACN,SAAS;YACT,eAAe,EACZ,OAAO,CAAC,GAAG,CAAC,iBAAmC;gBAChD,OAAO,EAAE,MAAM,EAAE,eAAe;gBAChC,MAAM;YACR,gBAAgB,EAAE,MAAM,CACtB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,EAAE,MAAM,EAAE,gBAAgB,IAAI,KAAK,CACxE;SACF;QACD,OAAO,EAAE;YACP,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAA,WAAI,EAAC,cAAc,EAAE,EAAE,UAAU,CAAC;YACpE,UAAU,EAAE,CAAC;SACd;QACD,QAAQ,EAAE;YACR,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAClG,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,OAAO;SAC7D;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iBAAiB;AACjB,SAAgB,oBAAoB;IAClC,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/dist/shared/errors.js

@@ -0,0 +1,66 @@
+"use strict";
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * 类型化错误层级（铁律：业务错误必须可分类、可结构化返回）
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityError = exports.ApprovalRequiredError = exports.ToolError = exports.ModelError = exports.ConfigError = exports.AppError = void 0;
+exports.isAppError = isAppError;
+/** 所有可预期错误的基类 */
+class AppError extends Error {
+    code;
+    status;
+    isOperational;
+    constructor(message, code, status, isOperational = true) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.isOperational = isOperational;
+        this.name = this.constructor.name;
+    }
+}
+exports.AppError = AppError;
+/** 配置缺失：启动即失败（fail-fast） */
+class ConfigError extends AppError {
+    constructor(key) {
+        super(`缺少必需环境变量: ${key}`, 'CONFIG_ERROR', 500);
+    }
+}
+exports.ConfigError = ConfigError;
+/** 模型调用失败 */
+class ModelError extends AppError {
+    provider;
+    constructor(message, provider) {
+        super(`模型调用失败[${provider}]: ${message}`, 'MODEL_ERROR', 502);
+        this.provider = provider;
+    }
+}
+exports.ModelError = ModelError;
+/** 工具执行失败 */
+class ToolError extends AppError {
+    constructor(tool, message) {
+        super(`工具[${tool}]执行失败: ${message}`, 'TOOL_ERROR', 400);
+    }
+}
+exports.ToolError = ToolError;
+/** 需要人工审批 */
+class ApprovalRequiredError extends AppError {
+    constructor(action) {
+        super(`需人工审批: ${action}`, 'APPROVAL_REQUIRED', 401);
+    }
+}
+exports.ApprovalRequiredError = ApprovalRequiredError;
+/** 安全拦截（危险命令 / 越权） */
+class SecurityError extends AppError {
+    constructor(message) {
+        super(`安全拦截: ${message}`, 'SECURITY_ERROR', 403);
+    }
+}
+exports.SecurityError = SecurityError;
+/** 类型守卫：判断是否为可预期的业务错误 */
+function isAppError(e) {
+    return e instanceof AppError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/shared/errors.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAmDH,gCAEC;AAnDD,iBAAiB;AACjB,MAAa,QAAS,SAAQ,KAAK;IAGf;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAY,EACZ,MAAc,EACd,gBAAgB,IAAI;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QACd,kBAAa,GAAb,aAAa,CAAO;QAGpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAVD,4BAUC;AAED,4BAA4B;AAC5B,MAAa,WAAY,SAAQ,QAAQ;IACvC,YAAY,GAAW;QACrB,KAAK,CAAC,aAAa,GAAG,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;CACF;AAJD,kCAIC;AAED,aAAa;AACb,MAAa,UAAW,SAAQ,QAAQ;IACO;IAA7C,YAAY,OAAe,EAAkB,QAAgB;QAC3D,KAAK,CAAC,UAAU,QAAQ,MAAM,OAAO,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QADlB,aAAQ,GAAR,QAAQ,CAAQ;IAE7D,CAAC;CACF;AAJD,gCAIC;AAED,aAAa;AACb,MAAa,SAAU,SAAQ,QAAQ;IACrC,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,MAAM,IAAI,UAAU,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;CACF;AAJD,8BAIC;AAED,aAAa;AACb,MAAa,qBAAsB,SAAQ,QAAQ;IACjD,YAAY,MAAc;QACxB,KAAK,CAAC,UAAU,MAAM,EAAE,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;CACF;AAJD,sDAIC;AAED,sBAAsB;AACtB,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,SAAS,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;CACF;AAJD,sCAIC;AAED,yBAAyB;AACzB,SAAgB,UAAU,CAAC,CAAU;IACnC,OAAO,CAAC,YAAY,QAAQ,CAAC;AAC/B,CAAC"}

package/dist/shared/logger.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logger = void 0;
+exports.setRunId = setRunId;
+exports.redact = redact;
+let runId = 'unknown';
+/** 在 CLI 启动时为本次运行设置唯一 runId */
+function setRunId(id) {
+    runId = id;
+}
+// M12 修复：扩充敏感 key 识别（覆盖常见密钥/令牌字段名）
+const SENSITIVE_KEY_RE = /api[_-]?key|apikey|secret|client[_-]?secret|access[_-]?token|refresh[_-]?token|token|password|passwd|pwd|authorization|bearer|private[_-]?key|cookie|credential|passphrase|session[_-]?id|x-api-key/i;
+// 值形态：sk-... / JWT / 长十六进制或 base64 令牌（仅对字符串值生效，避免误伤普通文本）
+const SENSITIVE_VALUE_RE = /\bsk-[A-Za-z0-9_-]{8,}\b|eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+|[A-Za-z0-9+/]{32,}={0,2}/;
+/** 元数据脱敏：敏感 key 整值遮蔽；普通 key 但值疑似令牌也遮蔽。 */
+function redact(meta) {
+    const out = {};
+    for (const [k, v] of Object.entries(meta)) {
+        if (SENSITIVE_KEY_RE.test(k)) {
+            out[k] = '[REDACTED]';
+        }
+        else if (typeof v === 'string' && SENSITIVE_VALUE_RE.test(v)) {
+            out[k] = '[REDACTED]';
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+function emit(level, msg, meta) {
+    const entry = {
+        ts: new Date().toISOString(),
+        level,
+        msg,
+        runId,
+        ...redact(meta),
+    };
+    const line = JSON.stringify(entry);
+    if (level === 'error')
+        process.stderr.write(line + '\n');
+    else
+        process.stdout.write(line + '\n');
+}
+exports.logger = {
+    info: (msg, meta = {}) => emit('info', msg, meta),
+    warn: (msg, meta = {}) => emit('warn', msg, meta),
+    error: (msg, meta = {}) => emit('error', msg, meta),
+    debug: (msg, meta = {}) => emit('debug', msg, meta),
+};
+//# sourceMappingURL=logger.js.map

package/dist/shared/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/shared/logger.ts"],"names":[],"mappings":";;;AAWA,4BAEC;AAUD,wBAYC;AA3BD,IAAI,KAAK,GAAU,SAAS,CAAC;AAE7B,+BAA+B;AAC/B,SAAgB,QAAQ,CAAC,EAAS;IAChC,KAAK,GAAG,EAAE,CAAC;AACb,CAAC;AAED,mCAAmC;AACnC,MAAM,gBAAgB,GACpB,sMAAsM,CAAC;AACzM,yDAAyD;AACzD,MAAM,kBAAkB,GACtB,qGAAqG,CAAC;AAExG,0CAA0C;AAC1C,SAAgB,MAAM,CAAC,IAA6B;IAClD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,KAAwB,EAAE,GAAW,EAAE,IAA6B;IAChF,MAAM,KAAK,GAAa;QACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,KAAK;QACL,GAAG;QACH,KAAK;QACL,GAAG,MAAM,CAAC,IAAI,CAAC;KAChB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAEY,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE,CAAC,GAAW,EAAE,OAAgC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;IAClF,IAAI,EAAE,CAAC,GAAW,EAAE,OAAgC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;IAClF,KAAK,EAAE,CAAC,GAAW,EAAE,OAAgC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;IACpF,KAAK,EAAE,CAAC,GAAW,EAAE,OAAgC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;CACrF,CAAC"}

package/dist/shared/types.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * 共享类型定义
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/skills/goal.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decomposeGoalToGoal = decomposeGoalToGoal;
+exports.saveGoal = saveGoal;
+exports.listGoals = listGoals;
+exports.renderGoal = renderGoal;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * /goal 技能：把高层目标分解为可跟踪子目标，保存为本地目标文件，支持查询进度。
+ * 离线用规则分解；联调时可由模型生成。
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+const crypto_1 = require("crypto");
+function decomposeGoalToGoal(title) {
+    const subs = title
+        .split(/[；;\n。并且同时分别以及]+/)
+        .map((s) => s.trim())
+        .filter(Boolean);
+    return {
+        id: (0, crypto_1.randomUUID)().slice(0, 8),
+        title,
+        subGoals: subs.length ? subs : [title],
+        createdAt: new Date().toISOString(),
+        status: 'active',
+    };
+}
+function saveGoal(goal, homeDir) {
+    const dir = (0, path_1.join)(homeDir, 'goals');
+    (0, fs_1.mkdirSync)(dir, { recursive: true });
+    const file = (0, path_1.join)(dir, `${goal.id}.json`);
+    (0, fs_1.writeFileSync)(file, JSON.stringify(goal, null, 2), 'utf8');
+    return file;
+}
+function listGoals(homeDir) {
+    const dir = (0, path_1.join)(homeDir, 'goals');
+    if (!(0, fs_1.existsSync)(dir))
+        return [];
+    const out = [];
+    for (const name of (0, fs_1.readdirSync)(dir)) {
+        if (!name.endsWith('.json'))
+            continue;
+        try {
+            out.push(JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(dir, name), 'utf8')));
+        }
+        catch {
+            /* ignore 损坏文件 */
+        }
+    }
+    return out;
+}
+function renderGoal(goal) {
+    return (`目标: ${goal.title}\n` +
+        `ID: ${goal.id} · 状态: ${goal.status} · 创建: ${goal.createdAt}\n` +
+        `子目标(${goal.subGoals.length}):\n` +
+        goal.subGoals.map((s, i) => `  ${i + 1}. ${s}`).join('\n'));
+}
+//# sourceMappingURL=goal.js.map

package/dist/skills/goal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal.js","sourceRoot":"","sources":["../../src/skills/goal.ts"],"names":[],"mappings":";;AAmBA,kDAYC;AAED,4BAMC;AAED,8BAaC;AAED,gCAOC;AA/DD;;;;;;GAMG;AACH,2BAAqF;AACrF,+BAA4B;AAC5B,mCAAoC;AAUpC,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,MAAM,IAAI,GAAG,KAAK;SACf,KAAK,CAAC,kBAAkB,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO;QACL,EAAE,EAAE,IAAA,mBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,QAAQ;KACjB,CAAC;AACJ,CAAC;AAED,SAAgB,QAAQ,CAAC,IAAU,EAAE,OAAe;IAClD,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,IAAA,cAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAA,kBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,SAAS,CAAC,OAAe;IACvC,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,IAAA,eAAU,EAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAW,EAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAS,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,UAAU,CAAC,IAAU;IACnC,OAAO,CACL,OAAO,IAAI,CAAC,KAAK,IAAI;QACrB,OAAO,IAAI,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,IAAI;QAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,MAAM;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3D,CAAC;AACJ,CAAC"}

package/dist/skills/grill.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGrill = runGrill;
+/**
+ * 飞虹 Code (Muse Code 参照复刻)
+ * 晋江市飞虹智科技企业管理有限公司 · 飞扬企源研发中心 · 负责人：吴赐虹
+ *
+ * /grill 技能：红队式代码审查。对指定路径/文件做安全与质量审查，
+ * 输出问题清单与严重级别（不修改任何文件，只审查）。
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+const RULES = [
+    {
+        id: 'secret-leak',
+        severity: 'critical',
+        pattern: /(?:api[_-]?key|secret|token|password|passwd|私钥)\s*[:=]\s*['"][^'"]{6,}['"]/i,
+        detail: '疑似硬编码密钥/凭证，应迁移到环境变量并经脱敏处理',
+    },
+    {
+        id: 'eval-injection',
+        severity: 'critical',
+        pattern: /\b(eval|execSync|child_process\.exec|new\s+Function)\s*\(/,
+        detail: '动态执行/构造代码存在注入风险，需白名单与校验',
+    },
+    {
+        id: 'path-traversal',
+        severity: 'high',
+        pattern: /\.\.\//,
+        detail: '路径中出现 ../，需确认已做沙箱边界校验防止越权访问',
+    },
+    {
+        id: 'no-input-validation',
+        severity: 'medium',
+        pattern: /JSON\.parse\s*\([^)]*\)\s*(?!\.catch)/,
+        detail: 'JSON.parse 未包裹 try/catch，畸形输入将导致进程崩溃',
+    },
+    {
+        id: 'todo-fixme',
+        severity: 'low',
+        pattern: /\b(TODO|FIXME|XXX)\b/,
+        detail: '存在待办标记，需跟进或关联任务跟踪',
+    },
+];
+function runGrill(rootDir, target = '.') {
+    const base = (0, path_1.join)(rootDir, target);
+    const files = collectFiles(base);
+    const findings = [];
+    for (const file of files) {
+        if (!/\.(ts|js|tsx|jsx|json|md|py|go|java)$/.test(file))
+            continue;
+        const isCode = /\.(ts|js|tsx|jsx|py|go|java)$/.test(file);
+        let content;
+        try {
+            content = (0, fs_1.readFileSync)(file, 'utf8');
+        }
+        catch {
+            continue;
+        }
+        const lines = content.split('\n');
+        lines.forEach((line, idx) => {
+            // 规则定义本身（id/severity/pattern/detail）不参与自检，避免自我误报
+            if (/^\s*(id|severity|pattern|detail)\s*:/.test(line))
+                return;
+            const isComment = /^\s*(\/\/|\*|\/\*)/.test(line);
+            for (const rule of RULES) {
+                // 路径穿越与 JSON.parse 仅针对真实代码文件，文档(.md/.json)按行文处理，避免误报
+                if ((rule.id === 'path-traversal' || rule.id === 'no-input-validation') && !isCode)
+                    continue;
+                // 排除 import/require/export 语句里的 ../（模块相对路径，非文件穿越）
+                if (rule.id === 'path-traversal' && /(import\s|export\s|require\(|from\s+['"])/.test(line))
+                    continue;
+                // 注释中的 ../ 多为文档说明，非真实路径穿越
+                if (rule.id === 'path-traversal' && isComment)
+                    continue;
+                // no-input-validation：若 JSON.parse 已在 try/catch 窗口内则视为已防护
+                if (rule.id === 'no-input-validation') {
+                    const before = lines.slice(Math.max(0, idx - 3), idx + 1).join('\n');
+                    const after = lines.slice(idx, Math.min(lines.length, idx + 4)).join('\n');
+                    if (/try\s*\{/.test(before) || /catch\s*[\(\{]/.test(after))
+                        continue;
+                }
+                if (rule.pattern.test(line)) {
+                    findings.push({
+                        file: (0, path_1.relative)(rootDir, file),
+                        line: idx + 1,
+                        severity: rule.severity,
+                        rule: rule.id,
+                        detail: rule.detail,
+                    });
+                }
+            }
+        });
+    }
+    const counts = findings.reduce((acc, f) => {
+        acc[f.severity] += 1;
+        return acc;
+    }, { critical: 0, high: 0, medium: 0, low: 0 });
+    const summary = `审查 ${files.length} 个文件，发现 ${findings.length} 个问题：` +
+        `致命 ${counts.critical} / 高危 ${counts.high} / 中 ${counts.medium} / 低 ${counts.low}`;
+    return { scanned: files.map((f) => (0, path_1.relative)(rootDir, f)), findings, summary };
+}
+function collectFiles(dir) {
+    if (!(0, fs_1.existsSync)(dir))
+        return [];
+    const out = [];
+    const walk = (p) => {
+        let entries;
+        try {
+            entries = (0, fs_1.readdirSync)(p);
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (e === 'node_modules' || e === '.git' || e === 'dist')
+                continue;
+            const full = (0, path_1.join)(p, e);
+            const st = (0, fs_1.statSync)(full);
+            if (st.isDirectory())
+                walk(full);
+            else
+                out.push(full);
+        }
+    };
+    walk(dir);
+    return out;
+}
+//# sourceMappingURL=grill.js.map