micro-models-agent 2.16.1 → 2.17.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +34 -0
- package/README.md +8 -3
- package/dist/assets/app.js +1 -314
- package/dist/assets/hljs.js +5 -1244
- package/dist/assets/index.html +11 -0
- package/dist/assets/js/api.js +1 -28
- package/dist/assets/js/core/menus.js +1 -0
- package/dist/assets/js/core/store/feed.js +1 -0
- package/dist/assets/js/core/store/index.js +1 -0
- package/dist/assets/js/core/store/session.js +1 -0
- package/dist/assets/js/core/store/settings.js +1 -0
- package/dist/assets/js/core/store/tabs.js +1 -0
- package/dist/assets/js/dialog.js +1 -105
- package/dist/assets/js/dom.js +1 -178
- package/dist/assets/js/feed/core.js +1 -0
- package/dist/assets/js/feed/history.js +1 -0
- package/dist/assets/js/feed/plan.js +1 -0
- package/dist/assets/js/feed/question.js +3 -0
- package/dist/assets/js/feed/sidebar.js +1 -0
- package/dist/assets/js/feed/stream.js +1 -0
- package/dist/assets/js/feed/turn.js +5 -0
- package/dist/assets/js/feed.js +1 -1250
- package/dist/assets/js/format.js +2 -122
- package/dist/assets/js/i18n.js +1 -46
- package/dist/assets/js/rail.js +1 -114
- package/dist/assets/js/session/cmdk.js +1 -0
- package/dist/assets/js/session/composer.js +1 -0
- package/dist/assets/js/session/sessions-menu.js +1 -0
- package/dist/assets/js/session/tabs.js +1 -0
- package/dist/assets/js/settings/controls.js +1 -0
- package/dist/assets/js/settings/editors.js +1 -0
- package/dist/assets/js/settings/form.js +1 -0
- package/dist/assets/js/settings/modal.js +1 -0
- package/dist/assets/js/settings/panels.js +1 -0
- package/dist/assets/js/settings/providers.js +1 -0
- package/dist/assets/js/settings/search.js +1 -0
- package/dist/assets/js/settings/subdialog.js +1 -0
- package/dist/assets/js/settings/write.js +1 -0
- package/dist/assets/js/settings.js +1 -1914
- package/dist/assets/js/sidebar/core.js +1 -0
- package/dist/assets/js/sidebar/lsp.js +2 -0
- package/dist/assets/js/sidebar/map.js +1 -0
- package/dist/assets/js/sidebar/state.js +1 -0
- package/dist/assets/js/sidebar/trace.js +5 -0
- package/dist/assets/js/sidebar.js +1 -705
- package/dist/assets/js/store.js +1 -82
- package/dist/assets/js/subdialog.js +1 -0
- package/dist/assets/md.js +1 -291
- package/dist/assets/setup.js +3 -816
- package/dist/assets/smd.js +29 -1665
- package/dist/assets/styles.css +1 -1598
- package/dist/certification/certifications.json +1 -494
- package/dist/i18n/en.json +1 -1851
- package/dist/i18n/ru.json +1 -1854
- package/dist/main.js +815 -55797
- package/dist/modules/browser/bridge-server.mjs +2 -252
- package/package.json +10 -5
- package/dist/assets/js/settings-controls.js +0 -452
- package/dist/assets/js/tabs.js +0 -867
- package/dist/cli/cache-line.js +0 -31
- package/dist/cli/command-suggest.js +0 -39
- package/dist/cli/commands.js +0 -781
- package/dist/cli/completer.js +0 -268
- package/dist/cli/index.js +0 -3
- package/dist/cli/json-payload.js +0 -32
- package/dist/cli/main.js +0 -346
- package/dist/cli/onboarding-commands.js +0 -126
- package/dist/cli/plugin-commands.js +0 -38
- package/dist/cli/relaunch.js +0 -40
- package/dist/cli/repl-commands-lsp.js +0 -75
- package/dist/cli/repl-commands-skills.js +0 -105
- package/dist/cli/repl-commands.js +0 -1218
- package/dist/cli/repl.js +0 -1238
- package/dist/cli/run-result.js +0 -38
- package/dist/cli/security-commands.js +0 -177
- package/dist/cli/setup-order.js +0 -6
- package/dist/cli/setup-prompt.js +0 -50
- package/dist/cli/setup.js +0 -161
- package/dist/cli/web-command.js +0 -98
- package/dist/config/budget.js +0 -48
- package/dist/config/config.js +0 -345
- package/dist/config/defaults.js +0 -197
- package/dist/config/domains.js +0 -135
- package/dist/config/env.js +0 -46
- package/dist/config/experts.js +0 -17
- package/dist/config/index.js +0 -5
- package/dist/config/paths.js +0 -56
- package/dist/config/redact.js +0 -44
- package/dist/config/registry-extra.js +0 -334
- package/dist/config/registry.js +0 -584
- package/dist/config/security.js +0 -212
- package/dist/config/timeouts.js +0 -74
- package/dist/config/types.js +0 -1
- package/dist/config/utils.js +0 -57
- package/dist/core/agent/artifact-progress.js +0 -59
- package/dist/core/agent/artifact-resolve.js +0 -79
- package/dist/core/agent/audit-gate.js +0 -53
- package/dist/core/agent/compaction.js +0 -89
- package/dist/core/agent/constants.js +0 -90
- package/dist/core/agent/context-log.js +0 -454
- package/dist/core/agent/context-renderer.js +0 -45
- package/dist/core/agent/critic-gate.js +0 -132
- package/dist/core/agent/hallucination-gate.js +0 -197
- package/dist/core/agent/loop-state.js +0 -68
- package/dist/core/agent/prefix-monitor.js +0 -101
- package/dist/core/agent/reasoning-resolver.js +0 -65
- package/dist/core/agent/token-tracker.js +0 -99
- package/dist/core/agent/tool-batch.js +0 -312
- package/dist/core/agent/tool-images.js +0 -18
- package/dist/core/agent/tool-output.js +0 -116
- package/dist/core/agent/tool-pairing.js +0 -60
- package/dist/core/agent-moe.js +0 -248
- package/dist/core/agent.js +0 -1299
- package/dist/core/bootstrap/agent-phase.js +0 -66
- package/dist/core/bootstrap/config-phase.js +0 -86
- package/dist/core/bootstrap/modules-phase.js +0 -269
- package/dist/core/bootstrap/provider-phase.js +0 -183
- package/dist/core/bootstrap/session-phase.js +0 -204
- package/dist/core/bootstrap/state.js +0 -94
- package/dist/core/bootstrap/workspace-phase.js +0 -115
- package/dist/core/bootstrap.js +0 -112
- package/dist/core/crash-handler.js +0 -62
- package/dist/core/environment.js +0 -224
- package/dist/core/host-plan.js +0 -43
- package/dist/core/host.js +0 -23
- package/dist/core/index.js +0 -3
- package/dist/core/prompt-builder.js +0 -95
- package/dist/core/prompt-overflow.js +0 -306
- package/dist/core/session-logger.js +0 -375
- package/dist/core/system-prompt.js +0 -117
- package/dist/core/types.js +0 -1
- package/dist/core/version.js +0 -28
- package/dist/core/web-host.js +0 -34
- package/dist/core/workspace.js +0 -80
- package/dist/i18n/index.js +0 -80
- package/dist/index.js +0 -30
- package/dist/llm/cache-usage.js +0 -76
- package/dist/llm/image-utils.js +0 -138
- package/dist/llm/index.js +0 -4
- package/dist/llm/llm-errors.js +0 -50
- package/dist/llm/model-loader.js +0 -86
- package/dist/llm/models-dev.js +0 -121
- package/dist/llm/openai-compat.js +0 -756
- package/dist/llm/orchestrator.js +0 -294
- package/dist/llm/provider-budget.js +0 -68
- package/dist/llm/provider-context.js +0 -233
- package/dist/llm/provider.js +0 -9
- package/dist/llm/response.js +0 -44
- package/dist/llm/stream-state.js +0 -26
- package/dist/llm/token-counter.js +0 -83
- package/dist/llm/types.js +0 -1
- package/dist/logger/app-logger.js +0 -212
- package/dist/logger/file-log.js +0 -160
- package/dist/logger/index.js +0 -2
- package/dist/migration/backup.js +0 -56
- package/dist/migration/detect.js +0 -61
- package/dist/migration/index.js +0 -3
- package/dist/modules/artifacts/store.js +0 -62
- package/dist/modules/browser/actions.js +0 -79
- package/dist/modules/browser/bridge-client.js +0 -203
- package/dist/modules/browser/bridge-path.js +0 -10
- package/dist/modules/browser/console-buffer.js +0 -37
- package/dist/modules/browser/cookie-store.js +0 -29
- package/dist/modules/browser/driver-types.js +0 -1
- package/dist/modules/browser/driver.js +0 -186
- package/dist/modules/browser/index.js +0 -9
- package/dist/modules/browser/module.js +0 -30
- package/dist/modules/browser/session.js +0 -322
- package/dist/modules/browser/snapshot.js +0 -154
- package/dist/modules/browser/types.js +0 -13
- package/dist/modules/certification/cli.js +0 -264
- package/dist/modules/certification/fact-checker.js +0 -90
- package/dist/modules/certification/loader.js +0 -127
- package/dist/modules/certification/manifest.js +0 -231
- package/dist/modules/certification/runner.js +0 -233
- package/dist/modules/certification/scenarios.js +0 -586
- package/dist/modules/certification/syntax-scenarios.js +0 -50
- package/dist/modules/certification/types.js +0 -1
- package/dist/modules/context/chunk-query.js +0 -122
- package/dist/modules/context/fact-extractor.js +0 -170
- package/dist/modules/context/history.js +0 -15
- package/dist/modules/context/index.js +0 -2
- package/dist/modules/context/manager.js +0 -482
- package/dist/modules/critic/client.js +0 -176
- package/dist/modules/critic/evidence.js +0 -81
- package/dist/modules/critic/provider.js +0 -45
- package/dist/modules/critic/tools.js +0 -78
- package/dist/modules/critic/types.js +0 -1
- package/dist/modules/execution/audit-runners.js +0 -206
- package/dist/modules/execution/auditor.js +0 -222
- package/dist/modules/execution/execution-plugin.js +0 -478
- package/dist/modules/execution/index.js +0 -8
- package/dist/modules/execution/input-from.js +0 -70
- package/dist/modules/execution/module.js +0 -891
- package/dist/modules/execution/moe-executor.js +0 -443
- package/dist/modules/execution/plan-actions.js +0 -642
- package/dist/modules/execution/plan-checks.js +0 -35
- package/dist/modules/execution/plan-coverage.js +0 -71
- package/dist/modules/execution/plan-persister.js +0 -46
- package/dist/modules/execution/plan-steps.js +0 -31
- package/dist/modules/execution/plan-store.js +0 -274
- package/dist/modules/execution/plan-tool.js +0 -249
- package/dist/modules/execution/plan-validator.js +0 -197
- package/dist/modules/execution/planner.js +0 -103
- package/dist/modules/execution/stuck-detector.js +0 -834
- package/dist/modules/execution/tracker.js +0 -92
- package/dist/modules/execution/transient-error.js +0 -30
- package/dist/modules/execution/types.js +0 -1
- package/dist/modules/execution/verifier.js +0 -343
- package/dist/modules/execution/windows-commands.js +0 -52
- package/dist/modules/hallucination/artifact-claim.js +0 -93
- package/dist/modules/hallucination/confidence.js +0 -81
- package/dist/modules/hallucination/consistency.js +0 -37
- package/dist/modules/hallucination/detector.js +0 -57
- package/dist/modules/hallucination/factual.js +0 -205
- package/dist/modules/hallucination/index.js +0 -6
- package/dist/modules/hallucination/js-identifiers.js +0 -261
- package/dist/modules/hallucination/llm-judge.js +0 -116
- package/dist/modules/hallucination/success-claim.js +0 -59
- package/dist/modules/index.js +0 -5
- package/dist/modules/indexer/cache.js +0 -88
- package/dist/modules/indexer/index.js +0 -4
- package/dist/modules/indexer/map-command.js +0 -33
- package/dist/modules/indexer/map-select.js +0 -87
- package/dist/modules/indexer/module.js +0 -293
- package/dist/modules/indexer/project-profile.js +0 -184
- package/dist/modules/indexer/symbols.js +0 -189
- package/dist/modules/indexer/walker.js +0 -285
- package/dist/modules/lsp/check-tool.js +0 -61
- package/dist/modules/lsp/client.js +0 -406
- package/dist/modules/lsp/command.js +0 -53
- package/dist/modules/lsp/config.js +0 -189
- package/dist/modules/lsp/index.js +0 -4
- package/dist/modules/lsp/module.js +0 -295
- package/dist/modules/lsp/probe.js +0 -86
- package/dist/modules/lsp/project-root.js +0 -69
- package/dist/modules/lsp/startup-check.js +0 -154
- package/dist/modules/lsp/types.js +0 -1
- package/dist/modules/mcp/client.js +0 -445
- package/dist/modules/mcp/index.js +0 -4
- package/dist/modules/mcp/module.js +0 -295
- package/dist/modules/mcp/registry.js +0 -20
- package/dist/modules/memory/index.js +0 -2
- package/dist/modules/memory/module.js +0 -101
- package/dist/modules/memory/search.js +0 -45
- package/dist/modules/memory/store.js +0 -107
- package/dist/modules/onboarding/init.js +0 -47
- package/dist/modules/onboarding/meet.js +0 -30
- package/dist/modules/onboarding/mode.js +0 -30
- package/dist/modules/onboarding/prompts.js +0 -43
- package/dist/modules/pipelines/engine.js +0 -70
- package/dist/modules/pipelines/index.js +0 -4
- package/dist/modules/pipelines/parser.js +0 -59
- package/dist/modules/pipelines/template.js +0 -18
- package/dist/modules/plugins/builtin/lint-on-write.js +0 -377
- package/dist/modules/plugins/builtin/notify.js +0 -11
- package/dist/modules/plugins/index.js +0 -2
- package/dist/modules/plugins/loader.js +0 -85
- package/dist/modules/plugins/manager.js +0 -244
- package/dist/modules/plugins/types.js +0 -1
- package/dist/modules/pricing/index.js +0 -70
- package/dist/modules/pricing/prices.js +0 -147
- package/dist/modules/processes/detect.js +0 -34
- package/dist/modules/processes/index.js +0 -4
- package/dist/modules/processes/kill-tree.js +0 -52
- package/dist/modules/processes/registry.js +0 -294
- package/dist/modules/processes/runner.js +0 -23
- package/dist/modules/providers/cache.js +0 -23
- package/dist/modules/providers/capabilities.js +0 -28
- package/dist/modules/providers/create.js +0 -21
- package/dist/modules/providers/factory.js +0 -28
- package/dist/modules/providers/fallback.js +0 -81
- package/dist/modules/providers/health.js +0 -47
- package/dist/modules/providers/index.js +0 -6
- package/dist/modules/providers/manager.js +0 -207
- package/dist/modules/providers/naming.js +0 -15
- package/dist/modules/providers/preflight.js +0 -71
- package/dist/modules/providers/presets.js +0 -232
- package/dist/modules/providers/registry.js +0 -27
- package/dist/modules/providers/types.js +0 -1
- package/dist/modules/reasoning/policy.js +0 -42
- package/dist/modules/reasoning/probe.js +0 -116
- package/dist/modules/registry.js +0 -48
- package/dist/modules/security/audit-log.js +0 -119
- package/dist/modules/security/audit-notifier.js +0 -267
- package/dist/modules/security/command-validator.js +0 -272
- package/dist/modules/security/content-scanner.js +0 -53
- package/dist/modules/security/data-sanitizer.js +0 -82
- package/dist/modules/security/encryption.js +0 -216
- package/dist/modules/security/index.js +0 -15
- package/dist/modules/security/network-validator.js +0 -236
- package/dist/modules/security/path-validator.js +0 -261
- package/dist/modules/security/protected-paths.js +0 -73
- package/dist/modules/security/rate-limiter.js +0 -98
- package/dist/modules/security/security-policies.js +0 -499
- package/dist/modules/security/session-encryption.js +0 -182
- package/dist/modules/security/session-isolation.js +0 -75
- package/dist/modules/session/auto-name.js +0 -63
- package/dist/modules/session/export.js +0 -98
- package/dist/modules/session/index.js +0 -4
- package/dist/modules/session/manager.js +0 -234
- package/dist/modules/session/module.js +0 -33
- package/dist/modules/session/store.js +0 -295
- package/dist/modules/session/types.js +0 -1
- package/dist/modules/setup/answers.js +0 -35
- package/dist/modules/setup/apply.js +0 -79
- package/dist/modules/setup/discovery.js +0 -72
- package/dist/modules/skills/index.js +0 -3
- package/dist/modules/skills/loader.js +0 -86
- package/dist/modules/skills/matcher.js +0 -27
- package/dist/modules/skills/module.js +0 -141
- package/dist/modules/types.js +0 -1
- package/dist/modules/updater/changelog-reader.js +0 -93
- package/dist/modules/updater/checker.js +0 -101
- package/dist/modules/updater/dev-detect.js +0 -18
- package/dist/modules/updater/index.js +0 -4
- package/dist/modules/updater/module.js +0 -129
- package/dist/modules/user-profile/compressor.js +0 -18
- package/dist/modules/user-profile/index.js +0 -2
- package/dist/modules/user-profile/profile.js +0 -77
- package/dist/modules/webui/answer-api.js +0 -29
- package/dist/modules/webui/assets.js +0 -50
- package/dist/modules/webui/body.js +0 -21
- package/dist/modules/webui/commands-settings.js +0 -209
- package/dist/modules/webui/commands-shared.js +0 -60
- package/dist/modules/webui/commands.js +0 -174
- package/dist/modules/webui/config-api.js +0 -134
- package/dist/modules/webui/file-api.js +0 -202
- package/dist/modules/webui/forward.js +0 -159
- package/dist/modules/webui/history-api.js +0 -112
- package/dist/modules/webui/host-state.js +0 -60
- package/dist/modules/webui/i18n-api.js +0 -9
- package/dist/modules/webui/limits.js +0 -6
- package/dist/modules/webui/log-forward.js +0 -20
- package/dist/modules/webui/memory-commands.js +0 -64
- package/dist/modules/webui/model-cache.js +0 -18
- package/dist/modules/webui/module.js +0 -148
- package/dist/modules/webui/persist.js +0 -24
- package/dist/modules/webui/prompt-io.js +0 -97
- package/dist/modules/webui/providers-api.js +0 -337
- package/dist/modules/webui/providers-view.js +0 -56
- package/dist/modules/webui/reasoning-view.js +0 -15
- package/dist/modules/webui/run-agent.js +0 -81
- package/dist/modules/webui/server.js +0 -284
- package/dist/modules/webui/sessions-api.js +0 -178
- package/dist/modules/webui/settings-api.js +0 -561
- package/dist/modules/webui/setup-api.js +0 -201
- package/dist/modules/webui/state.js +0 -74
- package/dist/modules/webui/util.js +0 -261
- package/dist/output/bus.js +0 -37
- package/dist/output/channel.js +0 -285
- package/dist/output/format.js +0 -15
- package/dist/output/index.js +0 -8
- package/dist/output/json-sink.js +0 -24
- package/dist/output/machine.js +0 -9
- package/dist/output/session-sink.js +0 -27
- package/dist/output/types.js +0 -1
- package/dist/tools/approve.js +0 -41
- package/dist/tools/attach-image.js +0 -102
- package/dist/tools/auto-fixer.js +0 -180
- package/dist/tools/auto-tags.js +0 -83
- package/dist/tools/bash.js +0 -649
- package/dist/tools/browser.js +0 -160
- package/dist/tools/chunk-query.js +0 -112
- package/dist/tools/create-dir.js +0 -60
- package/dist/tools/delete-file.js +0 -67
- package/dist/tools/download-file.js +0 -142
- package/dist/tools/edit-file.js +0 -136
- package/dist/tools/enable-tools.js +0 -59
- package/dist/tools/executor.js +0 -304
- package/dist/tools/file-info.js +0 -49
- package/dist/tools/filter-tools.js +0 -17
- package/dist/tools/glob-tool.js +0 -37
- package/dist/tools/grep-tool.js +0 -142
- package/dist/tools/hidden-tools-block.js +0 -37
- package/dist/tools/index.js +0 -88
- package/dist/tools/list-dir.js +0 -53
- package/dist/tools/load-skill.js +0 -51
- package/dist/tools/mcp-call.js +0 -80
- package/dist/tools/meet-done.js +0 -14
- package/dist/tools/move-file.js +0 -94
- package/dist/tools/path-utils.js +0 -108
- package/dist/tools/pipeline-run.js +0 -167
- package/dist/tools/preview.js +0 -2
- package/dist/tools/process-ids.js +0 -31
- package/dist/tools/process-kill.js +0 -33
- package/dist/tools/process-list.js +0 -38
- package/dist/tools/process-log.js +0 -49
- package/dist/tools/process-wait.js +0 -63
- package/dist/tools/prompt-io.js +0 -29
- package/dist/tools/question.js +0 -288
- package/dist/tools/read-file.js +0 -200
- package/dist/tools/recall.js +0 -124
- package/dist/tools/registry.js +0 -48
- package/dist/tools/remember.js +0 -72
- package/dist/tools/scope-check.js +0 -32
- package/dist/tools/scope-request.js +0 -96
- package/dist/tools/search-history.js +0 -88
- package/dist/tools/session-info.js +0 -46
- package/dist/tools/set-thinking.js +0 -75
- package/dist/tools/subagent.js +0 -257
- package/dist/tools/syntax-validator.js +0 -379
- package/dist/tools/types.js +0 -1
- package/dist/tools/user-input.js +0 -134
- package/dist/tools/web-browse.js +0 -93
- package/dist/tools/web-fetch.js +0 -108
- package/dist/tools/web-search.js +0 -107
- package/dist/tools/write-file.js +0 -128
- package/dist/ui/action-log.js +0 -13
- package/dist/ui/box.js +0 -78
- package/dist/ui/colors.js +0 -6
- package/dist/ui/diff.js +0 -189
- package/dist/ui/index.js +0 -7
- package/dist/ui/line-editor.js +0 -1083
- package/dist/ui/line-math.js +0 -98
- package/dist/ui/md-formatter.js +0 -322
- package/dist/ui/output.js +0 -19
- package/dist/ui/plan-view.js +0 -109
- package/dist/ui/renderer.js +0 -589
- package/dist/ui/spinner.js +0 -91
- package/dist/ui/table.js +0 -142
- package/dist/ui/theme.js +0 -143
- package/dist/utils/child-run.js +0 -20
- package/dist/utils/error.js +0 -4
- package/dist/utils/index.js +0 -6
- package/dist/utils/retry.js +0 -17
- package/dist/utils/sleep.js +0 -23
- package/dist/utils/truncate.js +0 -9
package/dist/config/security.js
DELETED
|
@@ -1,212 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Дефолтный конфиг безопасности MMA.
|
|
3
|
-
* Баланс между защитой и удобством.
|
|
4
|
-
*/
|
|
5
|
-
export const DEFAULT_SECURITY_CONFIG = {
|
|
6
|
-
enabled: true,
|
|
7
|
-
bash: {
|
|
8
|
-
enabled: true,
|
|
9
|
-
// Всегда блокируемые команды (опасные).
|
|
10
|
-
blacklist: [
|
|
11
|
-
"rm",
|
|
12
|
-
"dd",
|
|
13
|
-
"chmod",
|
|
14
|
-
"wget",
|
|
15
|
-
"curl",
|
|
16
|
-
"scp",
|
|
17
|
-
"ssh",
|
|
18
|
-
"nc",
|
|
19
|
-
"netcat",
|
|
20
|
-
"mknod",
|
|
21
|
-
"mkfifo",
|
|
22
|
-
"ln",
|
|
23
|
-
"chown",
|
|
24
|
-
"chgrp",
|
|
25
|
-
"useradd",
|
|
26
|
-
"usermod",
|
|
27
|
-
"passwd",
|
|
28
|
-
"sudo",
|
|
29
|
-
"su",
|
|
30
|
-
"exec",
|
|
31
|
-
"eval",
|
|
32
|
-
"source",
|
|
33
|
-
"kill",
|
|
34
|
-
"pkill",
|
|
35
|
-
"killall",
|
|
36
|
-
"shutdown",
|
|
37
|
-
"reboot",
|
|
38
|
-
"halt",
|
|
39
|
-
"poweroff",
|
|
40
|
-
"format",
|
|
41
|
-
"fdisk",
|
|
42
|
-
"parted",
|
|
43
|
-
"mkfs",
|
|
44
|
-
"mount",
|
|
45
|
-
"umount",
|
|
46
|
-
"powershell",
|
|
47
|
-
"pwsh",
|
|
48
|
-
"cmd",
|
|
49
|
-
"bash",
|
|
50
|
-
"sh",
|
|
51
|
-
"zsh",
|
|
52
|
-
"dash",
|
|
53
|
-
"python",
|
|
54
|
-
"python3",
|
|
55
|
-
"node",
|
|
56
|
-
// "bun" осознанно НЕ в блэклисте: системный промпт велит модели
|
|
57
|
-
// гонять TypeScript через `bun <file.ts>` — запрет здесь противоречил бы
|
|
58
|
-
// ему и сжёг целую сессию на блокированных `bun run build`.
|
|
59
|
-
// Произвольный код через флаги всё равно ловит INTERPRETER_FLAGS.
|
|
60
|
-
"perl",
|
|
61
|
-
"ruby",
|
|
62
|
-
"del",
|
|
63
|
-
"rd",
|
|
64
|
-
"erase",
|
|
65
|
-
"taskkill",
|
|
66
|
-
],
|
|
67
|
-
// Непустой whitelist — разрешены только эти команды.
|
|
68
|
-
whitelist: [],
|
|
69
|
-
// Блок опасных флагов вида --force, -rf и т.п.
|
|
70
|
-
blockDangerousFlags: true,
|
|
71
|
-
// Лог всех выполненных команд в аудит-лог.
|
|
72
|
-
logCommands: true,
|
|
73
|
-
// Всегда блокируемые опасные флаги.
|
|
74
|
-
// Замечание: -y/--yes осознанно отсутствуют — это рутинные безвредные
|
|
75
|
-
// флаги подтверждения (npm init -y, apt-get -y), их блок ломал бы скаффолдинг.
|
|
76
|
-
dangerousFlags: [
|
|
77
|
-
"--force",
|
|
78
|
-
"-rf",
|
|
79
|
-
"--no-preserve-root",
|
|
80
|
-
"--recursive",
|
|
81
|
-
"--all",
|
|
82
|
-
"-x",
|
|
83
|
-
"-e",
|
|
84
|
-
"--delete",
|
|
85
|
-
"--remove",
|
|
86
|
-
"--dangerous",
|
|
87
|
-
"--no-confirm",
|
|
88
|
-
],
|
|
89
|
-
// Всегда блокируемые опасные операторы.
|
|
90
|
-
// Замечание: "&" (фон) не блокируется — "&&" (AND) легитимен. Одиночный "&"
|
|
91
|
-
// безвреден, а его блок ломал бы "cd dir && npm install".
|
|
92
|
-
dangerousOperators: [">", ">>", "2>", "2>>", ";", "&&", "||", "|", "`", "$("],
|
|
93
|
-
},
|
|
94
|
-
paths: {
|
|
95
|
-
enabled: false,
|
|
96
|
-
// Glob-паттерны всегда запрещённых путей.
|
|
97
|
-
denied: [
|
|
98
|
-
".git/",
|
|
99
|
-
"node_modules/",
|
|
100
|
-
".env",
|
|
101
|
-
"*.key",
|
|
102
|
-
"*.pem",
|
|
103
|
-
"*.crt",
|
|
104
|
-
"*.p12",
|
|
105
|
-
"*.pfx",
|
|
106
|
-
"*.secret",
|
|
107
|
-
"*.token",
|
|
108
|
-
"package-lock.json",
|
|
109
|
-
"bun.lock",
|
|
110
|
-
"yarn.lock",
|
|
111
|
-
"pnpm-lock.yaml",
|
|
112
|
-
],
|
|
113
|
-
// Непустой allowed — разрешены только эти пути.
|
|
114
|
-
allowed: [],
|
|
115
|
-
},
|
|
116
|
-
network: {
|
|
117
|
-
// SSRF-защита (приватные/link-local IP, не-http схемы) — часть сбалансированной
|
|
118
|
-
// дефолтной политики: без флага проверки isUrlAllowed не стреляют, и веб-тулы
|
|
119
|
-
// дотягиваются до внутренних сетей.
|
|
120
|
-
enabled: true,
|
|
121
|
-
// Всегда запрещённые домены.
|
|
122
|
-
deniedDomains: ["localhost", "127.0.0.1", "::1"],
|
|
123
|
-
// Непустой allowedDomains — разрешены только эти домены.
|
|
124
|
-
allowedDomains: [],
|
|
125
|
-
// Таймаут сетевых запросов (мс).
|
|
126
|
-
requestTimeout: 15000,
|
|
127
|
-
// Максимум размера ответа (байты).
|
|
128
|
-
maxResponseSize: 15000,
|
|
129
|
-
},
|
|
130
|
-
// Максимум глубины рекурсии субагентов.
|
|
131
|
-
maxRecursionDepth: 3,
|
|
132
|
-
// Максимум файловых операций за сессию.
|
|
133
|
-
maxFileOperations: 100,
|
|
134
|
-
// Лимиты частоты LLM-запросов.
|
|
135
|
-
rateLimits: {
|
|
136
|
-
maxRequestsPerMinute: 60,
|
|
137
|
-
maxParallelTasks: 5,
|
|
138
|
-
},
|
|
139
|
-
// Настройки сканирования контента.
|
|
140
|
-
contentScan: {
|
|
141
|
-
enabled: false,
|
|
142
|
-
// Паттерны, считающиеся опасными в содержимом файлов.
|
|
143
|
-
dangerousPatterns: [
|
|
144
|
-
/eval\(/,
|
|
145
|
-
/new Function\(/,
|
|
146
|
-
/child_process\.exec\(/,
|
|
147
|
-
/child_process\.spawn\(/,
|
|
148
|
-
/require\('child_process'\)/,
|
|
149
|
-
/require\('http'\)\.createServer/,
|
|
150
|
-
/require\('net'\)\.createServer/,
|
|
151
|
-
/process\.exit\(/,
|
|
152
|
-
/while\(true\)/,
|
|
153
|
-
/for\(;;\)/,
|
|
154
|
-
/rm -rf/,
|
|
155
|
-
/dd if=/,
|
|
156
|
-
/chmod 777/,
|
|
157
|
-
],
|
|
158
|
-
},
|
|
159
|
-
// Настройки шифрования файлов сессии.
|
|
160
|
-
sessionEncryption: {
|
|
161
|
-
enabled: false,
|
|
162
|
-
encryptHistory: true,
|
|
163
|
-
encryptSessionLog: true,
|
|
164
|
-
},
|
|
165
|
-
// Настройки аудит-нотификаций.
|
|
166
|
-
auditNotifier: {
|
|
167
|
-
enabled: false,
|
|
168
|
-
minSeverity: "medium",
|
|
169
|
-
eventTypes: ["security_block", "bash_command", "file_operation", "network_request"],
|
|
170
|
-
maxRetries: 3,
|
|
171
|
-
webhookTimeout: 5000,
|
|
172
|
-
},
|
|
173
|
-
};
|
|
174
|
-
/**
|
|
175
|
-
* Мержит пользовательский конфиг безопасности с дефолтами.
|
|
176
|
-
* Пользовательский конфиг приоритетнее.
|
|
177
|
-
*/
|
|
178
|
-
export function mergeSecurityConfig(userConfig) {
|
|
179
|
-
return {
|
|
180
|
-
enabled: userConfig?.enabled ?? DEFAULT_SECURITY_CONFIG.enabled,
|
|
181
|
-
bash: {
|
|
182
|
-
...DEFAULT_SECURITY_CONFIG.bash,
|
|
183
|
-
...userConfig?.bash,
|
|
184
|
-
},
|
|
185
|
-
paths: {
|
|
186
|
-
...DEFAULT_SECURITY_CONFIG.paths,
|
|
187
|
-
...userConfig?.paths,
|
|
188
|
-
},
|
|
189
|
-
network: {
|
|
190
|
-
...DEFAULT_SECURITY_CONFIG.network,
|
|
191
|
-
...userConfig?.network,
|
|
192
|
-
},
|
|
193
|
-
maxRecursionDepth: userConfig?.maxRecursionDepth ?? DEFAULT_SECURITY_CONFIG.maxRecursionDepth,
|
|
194
|
-
maxFileOperations: userConfig?.maxFileOperations ?? DEFAULT_SECURITY_CONFIG.maxFileOperations,
|
|
195
|
-
rateLimits: {
|
|
196
|
-
...DEFAULT_SECURITY_CONFIG.rateLimits,
|
|
197
|
-
...userConfig?.rateLimits,
|
|
198
|
-
},
|
|
199
|
-
contentScan: {
|
|
200
|
-
...DEFAULT_SECURITY_CONFIG.contentScan,
|
|
201
|
-
...userConfig?.contentScan,
|
|
202
|
-
},
|
|
203
|
-
sessionEncryption: {
|
|
204
|
-
...DEFAULT_SECURITY_CONFIG.sessionEncryption,
|
|
205
|
-
...userConfig?.sessionEncryption,
|
|
206
|
-
},
|
|
207
|
-
auditNotifier: {
|
|
208
|
-
...DEFAULT_SECURITY_CONFIG.auditNotifier,
|
|
209
|
-
...userConfig?.auditNotifier,
|
|
210
|
-
},
|
|
211
|
-
};
|
|
212
|
-
}
|
package/dist/config/timeouts.js
DELETED
|
@@ -1,74 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Канонический реестр таймаутов: все дефолтные ожидания/окна в миллисекундах.
|
|
3
|
-
*
|
|
4
|
-
* Правило: любое захардкоженное ожидание живёт здесь под именем с единицей
|
|
5
|
-
* измерения в суффиксе (`*_MS`), а модули импортируют его вместо локальных
|
|
6
|
-
* `const`. Значения — ровно те, что были захардкожены (поведение 1:1);
|
|
7
|
-
* реестр не перенастраивает поведение, только убирает дубли.
|
|
8
|
-
* Сгруппировано по доменам: llm, tools, mcp, lsp, browser, webui, misc.
|
|
9
|
-
*/
|
|
10
|
-
/* ── llm ─────────────────────────────────────────────────────────────── */
|
|
11
|
-
/** Таймаут одного LLM-запроса (было `REQUEST_TIMEOUT_MS` в openai-compat). */
|
|
12
|
-
export const LLM_REQUEST_TIMEOUT_MS = 120000;
|
|
13
|
-
/** Макс. ожидание собственного rate-limit слота перед сдачей (openai-compat). */
|
|
14
|
-
export const LLM_MAX_RATE_WAIT_MS = 30_000;
|
|
15
|
-
/** TTL кэша каталога models.dev: перечитывать после 24 часов (models-dev). */
|
|
16
|
-
export const MODELS_DEV_CATALOG_TTL_MS = 24 * 60 * 60 * 1000;
|
|
17
|
-
/** Дефолтный таймаут запроса каталога models.dev (models-dev, был инлайн `?? 10000`). */
|
|
18
|
-
export const MODELS_DEV_FETCH_TIMEOUT_MS = 10000;
|
|
19
|
-
/** Дефолтный таймаут запросов баланса провайдера (provider-budget). */
|
|
20
|
-
export const PROVIDER_BUDGET_TIMEOUT_MS = 5000;
|
|
21
|
-
/* ── tools ───────────────────────────────────────────────────────────── */
|
|
22
|
-
/** Окно автобэкграунда bash: команда, живая после него, уходит в фон. */
|
|
23
|
-
export const BASH_GRACE_MS = 5000;
|
|
24
|
-
/** Короткое окно для явного `background: true` — ловит ошибки спавна. */
|
|
25
|
-
export const BASH_SPAWN_SETTLE_MS = 100;
|
|
26
|
-
/** Дефолтный таймаут выполнения тула в исполнителе. */
|
|
27
|
-
export const TOOL_EXECUTION_TIMEOUT_MS = 60000;
|
|
28
|
-
/** Время жизни мемо-записи успешных read-only тулов. */
|
|
29
|
-
export const TOOL_MEMO_TTL_MS = 120000;
|
|
30
|
-
/** Дефолтное ожидание тула process_wait. */
|
|
31
|
-
export const PROCESS_WAIT_DEFAULT_MS = 30000;
|
|
32
|
-
/** Верхняя граница ожидания тула process_wait (кламп). */
|
|
33
|
-
export const PROCESS_WAIT_MAX_MS = 110000;
|
|
34
|
-
/* ── mcp ─────────────────────────────────────────────────────────────── */
|
|
35
|
-
/** Таймаут первичного discovery тулов MCP-серверов (не вешать старт). */
|
|
36
|
-
export const MCP_DISCOVERY_TIMEOUT_MS = 5_000;
|
|
37
|
-
/** Дефолтный таймаут MCP HTTP-запросов (коннект + вызовы тулов). */
|
|
38
|
-
export const MCP_HTTP_TIMEOUT_MS = 10_000;
|
|
39
|
-
/* ── lsp ─────────────────────────────────────────────────────────────── */
|
|
40
|
-
/** Дефолтный таймаут LSP-запроса (был `DEFAULT_TIMEOUT` в client). */
|
|
41
|
-
export const LSP_DEFAULT_TIMEOUT_MS = 15000;
|
|
42
|
-
/** Кап таймаута пробы LSP-сервера (probe). */
|
|
43
|
-
export const LSP_PROBE_TIMEOUT_MS = 30_000;
|
|
44
|
-
/** Общий дедлайн пробы LSP-серверов (probe). */
|
|
45
|
-
export const LSP_PROBE_DEADLINE_MS = 60_000;
|
|
46
|
-
/** Общий кап стартового health-check — старт сессии дольше не блокируем. */
|
|
47
|
-
export const LSP_STARTUP_CHECK_TIMEOUT_MS = 60_000;
|
|
48
|
-
/* ── browser ─────────────────────────────────────────────────────────── */
|
|
49
|
-
/** Таймаут одного запроса к node-мосту браузера. */
|
|
50
|
-
export const BROWSER_BRIDGE_REQUEST_TIMEOUT_MS = 30000;
|
|
51
|
-
/** Таймаут прямого запуска Playwright до отката на node-мост. */
|
|
52
|
-
export const BROWSER_DIRECT_LAUNCH_TIMEOUT_MS = 8000;
|
|
53
|
-
/* ── webui ───────────────────────────────────────────────────────────── */
|
|
54
|
-
/** Интервал флаша буферизованных SSE-чанков (`mma web`). */
|
|
55
|
-
export const WEBUI_FORWARD_FLUSH_MS = 350;
|
|
56
|
-
/* ── misc ────────────────────────────────────────────────────────────── */
|
|
57
|
-
/** TTL кэша имён файлов факт-чекера галлюцинаций. */
|
|
58
|
-
export const HALLUCINATION_NAME_CACHE_TTL_MS = 5_000;
|
|
59
|
-
/** Кулдаун перескана ФС факт-чекера галлюцинаций. */
|
|
60
|
-
export const HALLUCINATION_RESCAN_COOLDOWN_MS = 2_000;
|
|
61
|
-
/** Таймаут LLM-судьи консистентности. */
|
|
62
|
-
export const HALLUCINATION_JUDGE_TIMEOUT_MS = 15000;
|
|
63
|
-
/** Дебаунс фонового typecheck после записи (lint-on-write). */
|
|
64
|
-
export const LINT_TYPE_CHECK_DEBOUNCE_MS = 2000;
|
|
65
|
-
/** TTL кэша пробы поддержки reasoning (повторная проба через 24 часа). */
|
|
66
|
-
export const REASONING_CACHE_TTL_MS = 24 * 60 * 60 * 1000;
|
|
67
|
-
/** Минимальный интервал между автопоисками ошибок (execution-модуль). */
|
|
68
|
-
export const EXECUTION_ERROR_SEARCH_MIN_INTERVAL_MS = 30000;
|
|
69
|
-
/** Таймаут скана одного локального порта (setup discovery). */
|
|
70
|
-
export const SETUP_SCAN_TIMEOUT_MS = 2000;
|
|
71
|
-
/** Таймаут запроса списка моделей провайдера (setup discovery). */
|
|
72
|
-
export const SETUP_MODELS_TIMEOUT_MS = 5000;
|
|
73
|
-
/** Таймаут дешёвой chat-пробы провайдера (setup discovery). */
|
|
74
|
-
export const SETUP_CHAT_TIMEOUT_MS = 10000;
|
package/dist/config/types.js
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export {};
|
package/dist/config/utils.js
DELETED
|
@@ -1,57 +0,0 @@
|
|
|
1
|
-
// Общие хелперы конфига: deep-merge и RegExp-безопасный JSON.
|
|
2
|
-
// Раньше дублировались в config.ts и domains.ts, причём копии разошлись
|
|
3
|
-
// (config.ts присваивал RegExp по ссылке, domains.ts спредом ломал его в {}).
|
|
4
|
-
/** Проверка на plain-объект (не массив/RegExp/Date). */
|
|
5
|
-
export function isPlainObject(v) {
|
|
6
|
-
if (typeof v !== "object" || v === null)
|
|
7
|
-
return false;
|
|
8
|
-
const proto = Object.getPrototypeOf(v);
|
|
9
|
-
return proto === Object.prototype || proto === null;
|
|
10
|
-
}
|
|
11
|
-
/**
|
|
12
|
-
* Глубокий мерж объектов. Массивы, скаляры и не-plain значения (RegExp, Date)
|
|
13
|
-
* из source заменяют target по ссылке: спред RegExp молча ломал бы его в {}.
|
|
14
|
-
*/
|
|
15
|
-
export function deepMerge(target, source) {
|
|
16
|
-
const result = {
|
|
17
|
-
...target,
|
|
18
|
-
};
|
|
19
|
-
const srcRec = source;
|
|
20
|
-
const tgtRec = target;
|
|
21
|
-
for (const key of Object.keys(source)) {
|
|
22
|
-
const srcVal = srcRec[key];
|
|
23
|
-
const tgtVal = tgtRec[key];
|
|
24
|
-
if (isPlainObject(srcVal) && isPlainObject(tgtVal)) {
|
|
25
|
-
result[key] = deepMerge(tgtVal, srcVal);
|
|
26
|
-
}
|
|
27
|
-
else if (srcVal !== undefined) {
|
|
28
|
-
result[key] = srcVal;
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
return result;
|
|
32
|
-
}
|
|
33
|
-
/**
|
|
34
|
-
* JSON-replacer: сериализует RegExp как {__regex, source, flags}, чтобы они
|
|
35
|
-
* переживали round-trip JSON.stringify/parse.
|
|
36
|
-
*/
|
|
37
|
-
export function regexReplacer(_key, value) {
|
|
38
|
-
if (value instanceof RegExp) {
|
|
39
|
-
return { __regex: true, source: value.source, flags: value.flags };
|
|
40
|
-
}
|
|
41
|
-
return value;
|
|
42
|
-
}
|
|
43
|
-
/** JSON-reviver: восстанавливает RegExp, сериализованные через regexReplacer. */
|
|
44
|
-
export function regexReviver(_key, value) {
|
|
45
|
-
if (value &&
|
|
46
|
-
typeof value === "object" &&
|
|
47
|
-
value.__regex === true) {
|
|
48
|
-
const { source, flags } = value;
|
|
49
|
-
try {
|
|
50
|
-
return new RegExp(source, flags);
|
|
51
|
-
}
|
|
52
|
-
catch {
|
|
53
|
-
return value;
|
|
54
|
-
}
|
|
55
|
-
}
|
|
56
|
-
return value;
|
|
57
|
-
}
|
|
@@ -1,59 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Обобщённый детектор churn тест/спек-артефактов.
|
|
3
|
-
*
|
|
4
|
-
* Наблюдение (реальный прогон): модель писала `*.test.*`, но реализацию не
|
|
5
|
-
* создавала, а при падении тестов переписывала САМ тест — «подгоняла тесты
|
|
6
|
-
* под код» вместо реализации. Предметной привязки здесь нет: правило
|
|
7
|
-
* опирается только на путь файла и на то, идут ли write/edit подряд по
|
|
8
|
-
* тест/спек-файлам без единой правки production-кода, поэтому работает для
|
|
9
|
-
* любого языка и фреймворка.
|
|
10
|
-
*
|
|
11
|
-
* Nudge выдаётся один раз за прогон и является совещательным (не блокирует).
|
|
12
|
-
*/
|
|
13
|
-
const TEST_DIR_RE = /(^|[\\/])(tests?|specs?|__tests__|__specs__)([\\/]|$)/i;
|
|
14
|
-
const TEST_FILE_PATTERNS = [
|
|
15
|
-
/\.(test|spec)\.[a-z0-9]+$/i, // foo.test.ts, foo.spec.js
|
|
16
|
-
/(^|[\\/])test_[^\\/]+$/i, // python: test_foo.py
|
|
17
|
-
/_test\.[a-z0-9]+$/i, // go: foo_test.go
|
|
18
|
-
/[\\/][A-Za-z0-9_]*Tests?\.[a-z0-9]+$/i, // Java/C#: FooTest.java
|
|
19
|
-
/[\\/][A-Za-z0-9_]*Specs?\.[a-z0-9]+$/i,
|
|
20
|
-
];
|
|
21
|
-
/** Является ли путь тестовым/спецификационным артефактом (мультиязычно). */
|
|
22
|
-
export function isTestOrSpecPath(filePath) {
|
|
23
|
-
if (!filePath)
|
|
24
|
-
return false;
|
|
25
|
-
const normalized = filePath.replace(/\\/g, "/");
|
|
26
|
-
if (TEST_DIR_RE.test(normalized))
|
|
27
|
-
return true;
|
|
28
|
-
return TEST_FILE_PATTERNS.some((re) => re.test(normalized));
|
|
29
|
-
}
|
|
30
|
-
/** Начальное состояние трекера churn. */
|
|
31
|
-
export function createArtifactChurnState() {
|
|
32
|
-
return { testWriteStreak: 0, lastTestFile: null, nudged: false };
|
|
33
|
-
}
|
|
34
|
-
/** Сколько подряд идущих тест/спек-правок достаточно, чтобы счесть это churn. */
|
|
35
|
-
export const TEST_CHURN_THRESHOLD = 3;
|
|
36
|
-
/** Учесть один write/edit по указанному пути. */
|
|
37
|
-
export function recordArtifactWrite(state, filePath) {
|
|
38
|
-
if (!filePath)
|
|
39
|
-
return;
|
|
40
|
-
if (isTestOrSpecPath(filePath)) {
|
|
41
|
-
state.testWriteStreak++;
|
|
42
|
-
state.lastTestFile = filePath;
|
|
43
|
-
}
|
|
44
|
-
else {
|
|
45
|
-
// Любая правка production-файла = прогресс; серия тестов прервана.
|
|
46
|
-
state.testWriteStreak = 0;
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
/**
|
|
50
|
-
* Пора ли подтолкнуть модель: подряд идут только тест/спек-правки, а
|
|
51
|
-
* production-код не менялся. Возвращает путь проблемного файла или null.
|
|
52
|
-
*/
|
|
53
|
-
export function testChurnFile(state) {
|
|
54
|
-
if (state.nudged)
|
|
55
|
-
return null;
|
|
56
|
-
if (state.testWriteStreak < TEST_CHURN_THRESHOLD)
|
|
57
|
-
return null;
|
|
58
|
-
return state.lastTestFile;
|
|
59
|
-
}
|
|
@@ -1,79 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Резолвер состояния файлов для проверки заявлений (Fix B2).
|
|
3
|
-
*
|
|
4
|
-
* Извлекает файлоподобные токены из финального ответа, смотрит их под baseDir
|
|
5
|
-
* и парсит машинопроверяемые форматы: JSON через `JSON.parse`, семейство XML
|
|
6
|
-
* через `checkXmlWellFormed`. Форматы с компилятором (TS/JS) — только existence:
|
|
7
|
-
* сборка внутри гейта была бы медленной и флаки, а плановые работы и так
|
|
8
|
-
* покрывает верификатор плана.
|
|
9
|
-
*
|
|
10
|
-
* Ограничен (макс. путей, макс. байт) и в jail: токены вне baseDir
|
|
11
|
-
* пропускаются, не читаются.
|
|
12
|
-
*/
|
|
13
|
-
import { readFileSync, statSync } from "node:fs";
|
|
14
|
-
import { extname, isAbsolute, relative, resolve } from "node:path";
|
|
15
|
-
import { extractFileLikeTokens } from "../../modules/hallucination/js-identifiers";
|
|
16
|
-
import { checkXmlWellFormed } from "../../tools/syntax-validator";
|
|
17
|
-
const MAX_PATHS = 10;
|
|
18
|
-
const MAX_BYTES = 500 * 1024;
|
|
19
|
-
const JSON_EXTS = new Set([".json", ".jsonc"]);
|
|
20
|
-
const XML_EXTS = new Set([".xml", ".drawio", ".svg", ".xaml", ".plist", ".iml"]);
|
|
21
|
-
function parseIfSupported(ext, content) {
|
|
22
|
-
if (JSON_EXTS.has(ext)) {
|
|
23
|
-
try {
|
|
24
|
-
JSON.parse(content);
|
|
25
|
-
return undefined;
|
|
26
|
-
}
|
|
27
|
-
catch (e) {
|
|
28
|
-
return `invalid JSON: ${e instanceof Error ? e.message.split("\n")[0] : String(e)}`;
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
if (XML_EXTS.has(ext)) {
|
|
32
|
-
return checkXmlWellFormed(content) ?? undefined;
|
|
33
|
-
}
|
|
34
|
-
return undefined;
|
|
35
|
-
}
|
|
36
|
-
/**
|
|
37
|
-
* Резолвит состояния артефактов, упомянутых в ответе (в пределах baseDir).
|
|
38
|
-
* @param baseDir корень workspace (jail); @param response финальный ответ модели.
|
|
39
|
-
* @returns состояния найденных артефактов (существует/ошибка парсинга).
|
|
40
|
-
*/
|
|
41
|
-
export function resolveArtifactStates(baseDir, response) {
|
|
42
|
-
if (!response)
|
|
43
|
-
return [];
|
|
44
|
-
const out = [];
|
|
45
|
-
for (const token of extractFileLikeTokens(response).slice(0, MAX_PATHS)) {
|
|
46
|
-
const abs = isAbsolute(token) ? token : resolve(baseDir, token);
|
|
47
|
-
const rel = relative(baseDir, abs);
|
|
48
|
-
if (rel.startsWith("..") || isAbsolute(rel))
|
|
49
|
-
continue;
|
|
50
|
-
const state = resolveOneArtifact(token, abs);
|
|
51
|
-
if (state)
|
|
52
|
-
out.push(state);
|
|
53
|
-
}
|
|
54
|
-
return out;
|
|
55
|
-
}
|
|
56
|
-
/** Смотрит один путь внутри jail (и парсит, если формат поддерживается). Null, если нечитаем. */
|
|
57
|
-
function resolveOneArtifact(token, abs) {
|
|
58
|
-
let size;
|
|
59
|
-
try {
|
|
60
|
-
const st = statSync(abs);
|
|
61
|
-
if (!st.isFile())
|
|
62
|
-
return { path: token, exists: false };
|
|
63
|
-
size = st.size;
|
|
64
|
-
}
|
|
65
|
-
catch {
|
|
66
|
-
return { path: token, exists: false };
|
|
67
|
-
}
|
|
68
|
-
if (size > MAX_BYTES)
|
|
69
|
-
return { path: token, exists: true };
|
|
70
|
-
let content;
|
|
71
|
-
try {
|
|
72
|
-
content = readFileSync(abs, "utf-8");
|
|
73
|
-
}
|
|
74
|
-
catch {
|
|
75
|
-
// Нечитаем между stat и read — существует, но не проверен.
|
|
76
|
-
return { path: token, exists: true };
|
|
77
|
-
}
|
|
78
|
-
return { path: token, exists: true, parseError: parseIfSupported(extname(token).toLowerCase(), content) };
|
|
79
|
-
}
|
|
@@ -1,53 +0,0 @@
|
|
|
1
|
-
/** Финальный аудит ответа: принят, отклонён или повторы исчерпаны. */
|
|
2
|
-
import { t } from "../../i18n/index";
|
|
3
|
-
import { MAX_AUDIT_RETRIES } from "./constants";
|
|
4
|
-
/**
|
|
5
|
-
* Финальный аудит-вентиль: проверяет, что текстовый ответ действительно
|
|
6
|
-
* выполнил задачу (при активном плане/скрипте), прежде чем принять его.
|
|
7
|
-
*
|
|
8
|
-
* Отклонение переспрашивает модель через <system-summary> и взводит
|
|
9
|
-
* suppressRepetitionRetry — повторный ответ на выполненную задачу
|
|
10
|
-
* естественно "повторяющийся" и не должен жечь бюджет халлюцинаций.
|
|
11
|
-
* Исчерпание повторов (MAX_AUDIT_RETRIES или упор в лимит итераций)
|
|
12
|
-
* переводит цикл в состояние auditFailed → success:false.
|
|
13
|
-
*/
|
|
14
|
-
export class AuditGate {
|
|
15
|
-
finalAudit;
|
|
16
|
-
constructor(finalAudit) {
|
|
17
|
-
this.finalAudit = finalAudit;
|
|
18
|
-
}
|
|
19
|
-
/**
|
|
20
|
-
* Оценивает ответ через финальный аудит.
|
|
21
|
-
* @param deps состояние цикла и окружение; @returns вердикт либо null (аудит не настроен).
|
|
22
|
-
*/
|
|
23
|
-
async evaluate(deps) {
|
|
24
|
-
if (!this.finalAudit)
|
|
25
|
-
return null;
|
|
26
|
-
const audit = await this.finalAudit();
|
|
27
|
-
if (!audit || audit.passed)
|
|
28
|
-
return { action: "pass" };
|
|
29
|
-
const { state, logger, contextManager } = deps;
|
|
30
|
-
state.iterAuditRejection = true;
|
|
31
|
-
logger.diagnostic("warn", `Final audit incomplete: ${audit.summary}`);
|
|
32
|
-
const steps = audit.pendingSteps.slice(0, 5).join("; ") || "—";
|
|
33
|
-
contextManager.addMessage({
|
|
34
|
-
role: "user",
|
|
35
|
-
content: `<system-summary>${t("exec.audit_incomplete", {
|
|
36
|
-
summary: audit.summary,
|
|
37
|
-
steps,
|
|
38
|
-
})}</system-summary>`,
|
|
39
|
-
});
|
|
40
|
-
deps.slog.logAudit(audit.summary, deps.iteration);
|
|
41
|
-
state.auditRetries++;
|
|
42
|
-
state.lastAuditSummary = audit.summary;
|
|
43
|
-
if (state.auditRetries >= MAX_AUDIT_RETRIES || deps.iteration >= deps.maxIterations - 1) {
|
|
44
|
-
logger.diagnostic("warn", `Final audit still incomplete after ${state.auditRetries} retries — reporting failure`);
|
|
45
|
-
state.auditFailed = true;
|
|
46
|
-
return { action: "exhausted", summary: audit.summary };
|
|
47
|
-
}
|
|
48
|
-
// Следующий текстовый ответ — принудительный повтор уже выполненной
|
|
49
|
-
// задачи: разрешаем одну повторность без халлюцинационного повтора.
|
|
50
|
-
state.suppressRepetitionRetry = true;
|
|
51
|
-
return { action: "reject" };
|
|
52
|
-
}
|
|
53
|
-
}
|
|
@@ -1,89 +0,0 @@
|
|
|
1
|
-
import { FORCED_COMPACTION_COOLDOWN, QUALITY_TRIGGER_THRESHOLD } from "./constants";
|
|
2
|
-
/**
|
|
3
|
-
* Единая точка компакции контекста. В agent.ts логика дублировалась в 4 местах:
|
|
4
|
-
* 1) интервал (needsCompaction) в начале итерации;
|
|
5
|
-
* 2) принудительно по низкому качеству (< QUALITY_TRIGGER_THRESHOLD) с cooldown;
|
|
6
|
-
* 3) принудительно по переполнению бюджета истории;
|
|
7
|
-
* 4) после добавления результата тула.
|
|
8
|
-
*
|
|
9
|
-
* Все четыре консолидированы здесь и выполняют одинаковый контракт:
|
|
10
|
-
* компакция → логирование в session log → обогащение детектора халлюцинаций
|
|
11
|
-
* известными файлами из сводки.
|
|
12
|
-
*/
|
|
13
|
-
export class CompactionService {
|
|
14
|
-
deps;
|
|
15
|
-
constructor(deps) {
|
|
16
|
-
this.deps = deps;
|
|
17
|
-
}
|
|
18
|
-
/**
|
|
19
|
-
* Пре-итерационные проверки: интервал → качество → переполнение.
|
|
20
|
-
* Порядок сохранён из оригинального цикла: каждая следующая проверка
|
|
21
|
-
* видит контекст уже ПОСЛЕ предыдущей компакции.
|
|
22
|
-
*/
|
|
23
|
-
compactIfNeeded(state) {
|
|
24
|
-
this.compactOnInterval(state.iteration);
|
|
25
|
-
this.compactOnQuality(state);
|
|
26
|
-
this.compactOnOverflow(state.iteration);
|
|
27
|
-
}
|
|
28
|
-
/** Проверка после добавления результата тула в контекст. */
|
|
29
|
-
compactAfterTool(state) {
|
|
30
|
-
const { contextManager } = this.deps;
|
|
31
|
-
if (!contextManager.needsCompaction())
|
|
32
|
-
return;
|
|
33
|
-
const result = contextManager.compact();
|
|
34
|
-
if (!result)
|
|
35
|
-
return;
|
|
36
|
-
this.deps.logger.debug("Context compacted after tool result");
|
|
37
|
-
this.deps.slog.logCompaction({ reason: "after_tool", iteration: state.iteration, ...result });
|
|
38
|
-
this.deps.hallucinationDetector.addKnownFiles(contextManager.getKnownFiles());
|
|
39
|
-
}
|
|
40
|
-
compactOnInterval(iteration) {
|
|
41
|
-
const { contextManager } = this.deps;
|
|
42
|
-
if (!contextManager.needsCompaction())
|
|
43
|
-
return;
|
|
44
|
-
const result = contextManager.compact();
|
|
45
|
-
if (!result)
|
|
46
|
-
return;
|
|
47
|
-
this.deps.logger.debug("Context compacted");
|
|
48
|
-
this.deps.slog.logCompaction({ reason: "interval", iteration, ...result });
|
|
49
|
-
this.deps.hallucinationDetector.addKnownFiles(contextManager.getKnownFiles());
|
|
50
|
-
}
|
|
51
|
-
compactOnQuality(state) {
|
|
52
|
-
const { contextManager } = this.deps;
|
|
53
|
-
const iteration = state.iteration;
|
|
54
|
-
const quality = contextManager.getQuality();
|
|
55
|
-
const cooldownElapsed = iteration - state.lastForcedCompactionIteration >= FORCED_COMPACTION_COOLDOWN;
|
|
56
|
-
if (quality < QUALITY_TRIGGER_THRESHOLD &&
|
|
57
|
-
contextManager.getCompactionCount() > 0 &&
|
|
58
|
-
cooldownElapsed) {
|
|
59
|
-
state.lastForcedCompactionIteration = iteration;
|
|
60
|
-
const result = contextManager.compact();
|
|
61
|
-
if (!result)
|
|
62
|
-
return;
|
|
63
|
-
this.deps.logger.diagnostic("warn", `Low context quality (${quality}%) — forced compaction`);
|
|
64
|
-
this.deps.slog.logCompaction({
|
|
65
|
-
reason: `quality-triggered (${quality}% < ${QUALITY_TRIGGER_THRESHOLD}%)`,
|
|
66
|
-
iteration,
|
|
67
|
-
...result,
|
|
68
|
-
});
|
|
69
|
-
this.deps.hallucinationDetector.addKnownFiles(contextManager.getKnownFiles());
|
|
70
|
-
}
|
|
71
|
-
}
|
|
72
|
-
compactOnOverflow(iteration) {
|
|
73
|
-
const { contextManager } = this.deps;
|
|
74
|
-
const currentTokens = contextManager.getEstimatedTokens();
|
|
75
|
-
const budget = contextManager.getBudget();
|
|
76
|
-
if (currentTokens <= budget.history)
|
|
77
|
-
return;
|
|
78
|
-
const result = contextManager.compact();
|
|
79
|
-
if (!result)
|
|
80
|
-
return;
|
|
81
|
-
this.deps.logger.diagnostic("warn", `Context overflow (${currentTokens} > ${budget.history}), forced compaction`);
|
|
82
|
-
this.deps.slog.logCompaction({
|
|
83
|
-
reason: `overflow (${currentTokens} > ${budget.history})`,
|
|
84
|
-
iteration,
|
|
85
|
-
...result,
|
|
86
|
-
});
|
|
87
|
-
this.deps.hallucinationDetector.addKnownFiles(contextManager.getKnownFiles());
|
|
88
|
-
}
|
|
89
|
-
}
|