openhorse 0.1.5

package/dist/framework/tool.d.ts

@@ -0,0 +1,88 @@
+/**
+ * openhorse - Tool System v2
+ *
+ * buildTool() factory pattern for general-purpose agent harness tools.
+ */
+/** JSON Schema for tool input parameters */
+export interface ToolInputJSONSchema {
+    type: 'object';
+    properties: Record<string, {
+        type: string;
+        description: string;
+        enum?: string[];
+    }>;
+    required?: string[];
+}
+/** Tool execution result */
+export interface ToolResult {
+    success: boolean;
+    output: string;
+    error?: string;
+}
+/** Context passed to tool execute and permission checks */
+export interface ToolContext {
+    cwd: string;
+    config: ToolConfig;
+}
+/** Minimal config needed by tools */
+export interface ToolConfig {
+    name: string;
+    mode: string;
+}
+/** Permission check result */
+export interface PermissionResult {
+    behavior: 'allow' | 'ask' | 'deny';
+    reason?: string;
+}
+/** OpenHorse tool definition */
+export interface OpenHorseTool {
+    /** Unique tool name */
+    name: string;
+    /** Alternative names */
+    aliases?: string[];
+    /** Description for LLM function calling */
+    description: string;
+    /** JSON Schema parameters */
+    parameters: ToolInputJSONSchema;
+    /** Execute the tool */
+    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolResult>;
+    /** Check permissions before execution */
+    checkPermissions?(args: Record<string, unknown>, context: ToolContext): PermissionResult;
+    /** Can this tool run concurrently with other tools */
+    isConcurrencySafe?(args: Record<string, unknown>): boolean;
+    /** Is this a read-only operation */
+    isReadOnly?(args: Record<string, unknown>): boolean;
+    /** Is this a potentially destructive operation */
+    isDestructive?(args: Record<string, unknown>): boolean;
+    /** User-facing name for display */
+    userFacingName?(args: Record<string, unknown>): string;
+    /** Compact summary for tool result display */
+    getSummary?(args: Record<string, unknown>, result: ToolResult): string;
+}
+/** OpenAI function calling tool format */
+export interface OpenAITool {
+    type: 'function';
+    function: {
+        name: string;
+        description: string;
+        parameters: ToolInputJSONSchema;
+    };
+}
+/**
+ * Build an OpenHorseTool with default values filled in.
+ *
+ * @example
+ * const myTool = buildTool({
+ *   name: 'my_tool',
+ *   description: 'Does something useful',
+ *   parameters: { type: 'object', properties: { path: { type: 'string', description: 'File path' } }, required: ['path'] },
+ *   execute: async (args) => ({ success: true, output: 'ok' }),
+ *   isReadOnly: () => true,
+ * });
+ */
+export declare function buildTool(def: OpenHorseTool): OpenHorseTool;
+/** Convert an OpenHorseTool to OpenAI function calling format */
+export declare function toOpenAITool(tool: OpenHorseTool): OpenAITool;
+/** Convert an array of OpenHorseTools to OpenAI format */
+export declare function toOpenAITools(tools: OpenHorseTool[]): OpenAITool[];
+//# sourceMappingURL=tool.d.ts.map

package/dist/framework/tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/framework/tool.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,4CAA4C;AAC5C,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,4BAA4B;AAC5B,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gCAAgC;AAChC,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,UAAU,EAAE,mBAAmB,CAAC;IAChC,uBAAuB;IACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAElF,yCAAyC;IACzC,gBAAgB,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAAC;IAEzF,sDAAsD;IACtD,iBAAiB,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAC3D,oCAAoC;IACpC,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IACpD,kDAAkD;IAClD,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAEvD,mCAAmC;IACnC,cAAc,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IACvD,8CAA8C;IAC9C,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;CACxE;AAED,0CAA0C;AAC1C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,mBAAmB,CAAC;KACjC,CAAC;CACH;AAcD;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,aAAa,GAAG,aAAa,CAQ3D;AAMD,iEAAiE;AACjE,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAS5D;AAED,0DAA0D;AAC1D,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,UAAU,EAAE,CAElE"}

package/dist/framework/tool.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * openhorse - Tool System v2
+ *
+ * buildTool() factory pattern for general-purpose agent harness tools.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildTool = buildTool;
+exports.toOpenAITool = toOpenAITool;
+exports.toOpenAITools = toOpenAITools;
+// ============================================================================
+// buildTool 工厂
+// ============================================================================
+/** Default implementations for optional properties */
+const TOOL_DEFAULTS = {
+    isConcurrencySafe: () => false,
+    isReadOnly: () => false,
+    isDestructive: () => false,
+    checkPermissions: () => ({ behavior: 'allow' }),
+};
+/**
+ * Build an OpenHorseTool with default values filled in.
+ *
+ * @example
+ * const myTool = buildTool({
+ *   name: 'my_tool',
+ *   description: 'Does something useful',
+ *   parameters: { type: 'object', properties: { path: { type: 'string', description: 'File path' } }, required: ['path'] },
+ *   execute: async (args) => ({ success: true, output: 'ok' }),
+ *   isReadOnly: () => true,
+ * });
+ */
+function buildTool(def) {
+    return {
+        isConcurrencySafe: TOOL_DEFAULTS.isConcurrencySafe,
+        isReadOnly: TOOL_DEFAULTS.isReadOnly,
+        isDestructive: TOOL_DEFAULTS.isDestructive,
+        checkPermissions: TOOL_DEFAULTS.checkPermissions,
+        ...def,
+    };
+}
+// ============================================================================
+// toOpenAITool 转换器
+// ============================================================================
+/** Convert an OpenHorseTool to OpenAI function calling format */
+function toOpenAITool(tool) {
+    return {
+        type: 'function',
+        function: {
+            name: tool.name,
+            description: tool.description,
+            parameters: tool.parameters,
+        },
+    };
+}
+/** Convert an array of OpenHorseTools to OpenAI format */
+function toOpenAITools(tools) {
+    return tools.map(toOpenAITool);
+}
+//# sourceMappingURL=tool.js.map

package/dist/framework/tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../src/framework/tool.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAyGH,8BAQC;AAOD,oCASC;AAGD,sCAEC;AArDD,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,sDAAsD;AACtD,MAAM,aAAa,GAAG;IACpB,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK;IAC9B,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;IACvB,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK;IAC1B,gBAAgB,EAAE,GAAqB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;CAClE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAgB,SAAS,CAAC,GAAkB;IAC1C,OAAO;QACL,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;QAClD,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,aAAa,EAAE,aAAa,CAAC,aAAa;QAC1C,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;QAChD,GAAG,GAAG;KACP,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,iEAAiE;AACjE,SAAgB,YAAY,CAAC,IAAmB;IAC9C,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B;KACF,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,SAAgB,aAAa,CAAC,KAAsB;IAClD,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACjC,CAAC"}

package/dist/harness/harness.d.ts

@@ -0,0 +1,96 @@
+/**
+ * openhorse - Harness 引擎（模块化）
+ *
+ * 为 Agent 执行提供完整的约束、检查与验证：
+ *   - preCheck: 执行前安全检查（安全策略 + 目标约束）
+ *   - postValidate: 执行后结果验证（超时 + 约束检查）
+ *   - execute: 包装完整的执行生命周期
+ *   - 步骤限制、超时管理、事件驱动
+ */
+import { EventEmitter } from 'eventemitter3';
+import { Task, TaskResult, BaseAgent } from '../core/agent';
+import { SafetyChecker, SafetyPolicy } from './safety';
+/** Harness 配置 */
+export interface HarnessConfig {
+    /** 是否启用目标约束 */
+    goalConstraint: boolean;
+    /** 最大执行步数 */
+    maxSteps: number;
+    /** 是否启用边界检查 */
+    boundaryCheck: boolean;
+    /** 允许的操作列表 */
+    allowedActions: string[];
+    /** 禁止的操作列表 */
+    blockedActions: string[];
+    /** 是否启用结果验证 */
+    resultValidation: boolean;
+    /** 是否启用安全沙箱 */
+    sandbox: boolean;
+    /** 超时时间 (ms) */
+    timeout: number;
+    /** 安全策略（可选） */
+    safetyPolicy?: Partial<SafetyPolicy>;
+}
+/** Harness 验证结果 */
+export interface HarnessVerdict {
+    /** 是否通过 */
+    passed: boolean;
+    /** 验证阶段 */
+    stage: 'pre-exec' | 'post-exec';
+    /** 原因 */
+    reason?: string;
+    /** 建议 */
+    suggestion?: string;
+}
+/** Harness 执行上下文 */
+export interface HarnessContext {
+    /** 当前任务 */
+    task: Task;
+    /** Agent ID */
+    agentId: string;
+    /** 已执行步数 */
+    steps: number;
+    /** 开始时间 */
+    startedAt: number;
+    /** 自定义元数据 */
+    metadata?: Record<string, unknown>;
+}
+/** Harness 执行结果 */
+export interface HarnessExecutionResult {
+    /** 是否通过 Harness 验证 */
+    harnessPassed: boolean;
+    /** preCheck 结果 */
+    preCheck: HarnessVerdict | null;
+    /** postValidate 结果 */
+    postValidate: HarnessVerdict | null;
+    /** Agent 执行结果 */
+    taskResult: TaskResult;
+    /** 执行上下文 */
+    context: HarnessContext;
+}
+export declare class HarnessEngine extends EventEmitter {
+    private config;
+    private safetyChecker;
+    constructor(config?: Partial<HarnessConfig>);
+    /**
+     * 执行前检查 — 验证任务是否在安全边界内
+     */
+    preCheck(task: Task): HarnessVerdict;
+    /**
+     * 执行后验证 — 验证结果是否符合预期约束
+     */
+    postValidate(result: TaskResult, task: Task): HarnessVerdict;
+    /**
+     * 完整执行流程 — 包装 preCheck → execute → postValidate
+     */
+    execute(agent: BaseAgent, task: Task, metadata?: Record<string, unknown>): Promise<HarnessExecutionResult>;
+    /** 获取当前配置 */
+    getConfig(): HarnessConfig;
+    /** 更新配置 */
+    updateConfig(patch: Partial<HarnessConfig>): void;
+    /** 获取安全检查器 */
+    getSafetyChecker(): SafetyChecker | null;
+    /** 带超时的执行 */
+    private executeWithTimeout;
+}
+//# sourceMappingURL=harness.d.ts.map

package/dist/harness/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../src/harness/harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAMvD,iBAAiB;AACjB,MAAM,WAAW,aAAa;IAC5B,eAAe;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe;IACf,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe;IACf,YAAY,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;CACtC;AAED,mBAAmB;AACnB,MAAM,WAAW,cAAc;IAC7B,WAAW;IACX,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW;IACX,KAAK,EAAE,UAAU,GAAG,WAAW,CAAC;IAChC,SAAS;IACT,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS;IACT,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,oBAAoB;AACpB,MAAM,WAAW,cAAc;IAC7B,WAAW;IACX,IAAI,EAAE,IAAI,CAAC;IACX,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,mBAAmB;AACnB,MAAM,WAAW,sBAAsB;IACrC,sBAAsB;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB;IAClB,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,sBAAsB;IACtB,YAAY,EAAE,cAAc,GAAG,IAAI,CAAC;IACpC,iBAAiB;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY;IACZ,OAAO,EAAE,cAAc,CAAC;CACzB;AAqBD,qBAAa,aAAc,SAAQ,YAAY;IAC7C,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,aAAa,CAAuB;gBAEhC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAY3C;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc;IA0DpC;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,GAAG,cAAc;IA8C5D;;OAEG;IACG,OAAO,CACX,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,IAAI,EACV,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,sBAAsB,CAAC;IA4DlC,aAAa;IACb,SAAS,IAAI,aAAa;IAI1B,WAAW;IACX,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI;IAWjD,cAAc;IACd,gBAAgB,IAAI,aAAa,GAAG,IAAI;IAMxC,aAAa;IACb,OAAO,CAAC,kBAAkB;CAQ3B"}

package/dist/harness/harness.js

@@ -0,0 +1,224 @@
+"use strict";
+/**
+ * openhorse - Harness 引擎（模块化）
+ *
+ * 为 Agent 执行提供完整的约束、检查与验证：
+ *   - preCheck: 执行前安全检查（安全策略 + 目标约束）
+ *   - postValidate: 执行后结果验证（超时 + 约束检查）
+ *   - execute: 包装完整的执行生命周期
+ *   - 步骤限制、超时管理、事件驱动
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HarnessEngine = void 0;
+const eventemitter3_1 = require("eventemitter3");
+const safety_1 = require("./safety");
+// ============================================================================
+// 默认配置
+// ============================================================================
+const DEFAULT_CONFIG = {
+    goalConstraint: true,
+    maxSteps: 50,
+    boundaryCheck: true,
+    allowedActions: ['*'],
+    blockedActions: ['rm -rf /', 'eval', 'exec'],
+    resultValidation: true,
+    sandbox: false,
+    timeout: 60000,
+};
+// ============================================================================
+// HarnessEngine - Harness 引擎
+// ============================================================================
+class HarnessEngine extends eventemitter3_1.EventEmitter {
+    constructor(config) {
+        super();
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        this.safetyChecker = this.config.sandbox
+            ? new safety_1.SafetyChecker(this.config.safetyPolicy)
+            : null;
+    }
+    // ========================================================================
+    // 核心 API
+    // ========================================================================
+    /**
+     * 执行前检查 — 验证任务是否在安全边界内
+     */
+    preCheck(task) {
+        // 1. 安全策略检查
+        if (this.safetyChecker) {
+            const safety = this.safetyChecker.check(task.name, {
+                path: task.params?.path,
+                output: task.description,
+            });
+            if (!safety.passed) {
+                return {
+                    passed: false,
+                    stage: 'pre-exec',
+                    reason: safety.reason,
+                    suggestion: safety.suggestion,
+                };
+            }
+        }
+        // 2. 检查被禁止的操作
+        if (this.config.blockedActions.length > 0 && task.params?.actions) {
+            const actions = task.params.actions;
+            const blocked = actions.filter(a => this.config.blockedActions.includes(a));
+            if (blocked.length > 0) {
+                return {
+                    passed: false,
+                    stage: 'pre-exec',
+                    reason: `Blocked actions detected: ${blocked.join(', ')}`,
+                    suggestion: 'Remove blocked actions or update harness policy.',
+                };
+            }
+        }
+        // 3. 白名单检查
+        if (this.config.allowedActions[0] !== '*' && task.params?.actions) {
+            const actions = task.params.actions;
+            const disallowed = actions.filter(a => !this.config.allowedActions.includes(a));
+            if (disallowed.length > 0) {
+                return {
+                    passed: false,
+                    stage: 'pre-exec',
+                    reason: `Actions not in whitelist: ${disallowed.join(', ')}`,
+                    suggestion: 'Add actions to allowed list or use wildcard "*".',
+                };
+            }
+        }
+        // 4. 目标约束检查
+        if (this.config.goalConstraint && !task.description) {
+            return {
+                passed: false,
+                stage: 'pre-exec',
+                reason: 'Task has no description — goal constraint violated',
+                suggestion: 'Provide a task description to define the goal.',
+            };
+        }
+        return { passed: true, stage: 'pre-exec' };
+    }
+    /**
+     * 执行后验证 — 验证结果是否符合预期约束
+     */
+    postValidate(result, task) {
+        if (!this.config.resultValidation) {
+            return { passed: true, stage: 'post-exec' };
+        }
+        // 1. 超时检查
+        if (result.duration && result.duration > this.config.timeout) {
+            return {
+                passed: false,
+                stage: 'post-exec',
+                reason: `Execution exceeded timeout: ${result.duration}ms > ${this.config.timeout}ms`,
+                suggestion: 'Increase timeout or optimize task execution.',
+            };
+        }
+        // 2. 步数限制检查
+        if (result.data?.steps && result.data.steps > this.config.maxSteps) {
+            return {
+                passed: false,
+                stage: 'post-exec',
+                reason: `Execution exceeded max steps: ${result.data.steps} > ${this.config.maxSteps}`,
+                suggestion: 'Reduce complexity or increase maxSteps.',
+            };
+        }
+        // 3. 边界检查
+        if (this.config.boundaryCheck && task.params?.boundary) {
+            const boundary = task.params.boundary;
+            if (result.data?.metrics) {
+                const metrics = result.data.metrics;
+                for (const [key, max] of Object.entries(boundary)) {
+                    if (metrics[key] !== undefined && metrics[key] > max) {
+                        return {
+                            passed: false,
+                            stage: 'post-exec',
+                            reason: `Metric "${key}" exceeded boundary: ${metrics[key]} > ${max}`,
+                            suggestion: `Ensure ${key} stays within ${max}.`,
+                        };
+                    }
+                }
+            }
+        }
+        return { passed: true, stage: 'post-exec' };
+    }
+    /**
+     * 完整执行流程 — 包装 preCheck → execute → postValidate
+     */
+    async execute(agent, task, metadata) {
+        const context = {
+            task,
+            agentId: agent.id,
+            steps: 0,
+            startedAt: Date.now(),
+            metadata,
+        };
+        this.emit('pre-check', { task, agentId: agent.id });
+        // Step 1: preCheck
+        const preCheck = this.preCheck(task);
+        if (!preCheck.passed) {
+            this.emit('blocked', { task, verdict: preCheck });
+            return {
+                harnessPassed: false,
+                preCheck,
+                postValidate: null,
+                taskResult: { success: false, error: preCheck.reason, duration: 0 },
+                context,
+            };
+        }
+        this.emit('execute-start', { task, agentId: agent.id });
+        // Step 2: 执行任务（带超时控制）
+        let taskResult;
+        try {
+            taskResult = await this.executeWithTimeout(agent.execute(task), this.config.timeout);
+            context.steps++;
+        }
+        catch (error) {
+            taskResult = {
+                success: false,
+                error: error.message ?? 'Execution failed',
+                duration: Date.now() - context.startedAt,
+            };
+        }
+        this.emit('execute-complete', { task, result: taskResult });
+        // Step 3: postValidate
+        const postValidate = this.postValidate(taskResult, task);
+        const harnessPassed = postValidate.passed;
+        this.emit('post-validate', { task, verdict: postValidate });
+        return {
+            harnessPassed,
+            preCheck,
+            postValidate,
+            taskResult,
+            context,
+        };
+    }
+    // ========================================================================
+    // 配置管理
+    // ========================================================================
+    /** 获取当前配置 */
+    getConfig() {
+        return { ...this.config };
+    }
+    /** 更新配置 */
+    updateConfig(patch) {
+        this.config = { ...this.config, ...patch };
+        // 重新初始化安全检查器
+        if (patch.sandbox !== undefined) {
+            this.safetyChecker = patch.sandbox
+                ? new safety_1.SafetyChecker(this.config.safetyPolicy)
+                : null;
+        }
+    }
+    /** 获取安全检查器 */
+    getSafetyChecker() {
+        return this.safetyChecker;
+    }
+    // ---- Internal ----
+    /** 带超时的执行 */
+    executeWithTimeout(promise, timeout) {
+        return Promise.race([
+            promise,
+            new Promise((_, reject) => setTimeout(() => reject(new Error(`Execution timed out after ${timeout}ms`)), timeout)),
+        ]);
+    }
+}
+exports.HarnessEngine = HarnessEngine;
+//# sourceMappingURL=harness.js.map

package/dist/harness/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/harness/harness.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,iDAA6C;AAE7C,qCAAuD;AAoEvD,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E,MAAM,cAAc,GAAkB;IACpC,cAAc,EAAE,IAAI;IACpB,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,CAAC,GAAG,CAAC;IACrB,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC;IAC5C,gBAAgB,EAAE,IAAI;IACtB,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,MAAa,aAAc,SAAQ,4BAAY;IAI7C,YAAY,MAA+B;QACzC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO;YACtC,CAAC,CAAC,IAAI,sBAAa,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7C,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,2EAA2E;IAC3E,SAAS;IACT,2EAA2E;IAE3E;;OAEG;IACH,QAAQ,CAAC,IAAU;QACjB,YAAY;QACZ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACjD,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;gBACvB,MAAM,EAAE,IAAI,CAAC,WAAW;aACzB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAClE,MAAM,OAAO,GAAa,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACzD,UAAU,EAAE,kDAAkD;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAClE,MAAM,OAAO,GAAa,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAC5D,UAAU,EAAE,kDAAkD;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,YAAY;QACZ,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,oDAAoD;gBAC5D,UAAU,EAAE,gDAAgD;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAkB,EAAE,IAAU;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC9C,CAAC;QAED,UAAU;QACV,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7D,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,+BAA+B,MAAM,CAAC,QAAQ,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI;gBACrF,UAAU,EAAE,8CAA8C;aAC3D,CAAC;QACJ,CAAC;QAED,YAAY;QACZ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,IAAK,MAAM,CAAC,IAAI,CAAC,KAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC/E,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,iCAAiC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;gBACtF,UAAU,EAAE,yCAAyC;aACtD,CAAC;QACJ,CAAC;QAED,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAkC,CAAC;YAChE,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAiC,CAAC;gBAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;wBACrD,OAAO;4BACL,MAAM,EAAE,KAAK;4BACb,KAAK,EAAE,WAAW;4BAClB,MAAM,EAAE,WAAW,GAAG,wBAAwB,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE;4BACrE,UAAU,EAAE,UAAU,GAAG,iBAAiB,GAAG,GAAG;yBACjD,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,KAAgB,EAChB,IAAU,EACV,QAAkC;QAElC,MAAM,OAAO,GAAmB;YAC9B,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAEpD,mBAAmB;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClD,OAAO;gBACL,aAAa,EAAE,KAAK;gBACpB,QAAQ;gBACR,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;gBACnE,OAAO;aACR,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAExD,sBAAsB;QACtB,IAAI,UAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrF,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,UAAU,GAAG;gBACX,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,kBAAkB;gBAC1C,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;aACzC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5D,uBAAuB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEzD,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QAE5D,OAAO;YACL,aAAa;YACb,QAAQ;YACR,YAAY;YACZ,UAAU;YACV,OAAO;SACR,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,OAAO;IACP,2EAA2E;IAE3E,aAAa;IACb,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,WAAW;IACX,YAAY,CAAC,KAA6B;QACxC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QAE3C,aAAa;QACb,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,OAAO;gBAChC,CAAC,CAAC,IAAI,sBAAa,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC7C,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;IACH,CAAC;IAED,cAAc;IACd,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,qBAAqB;IAErB,aAAa;IACL,kBAAkB,CAAI,OAAmB,EAAE,OAAe;QAChE,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,OAAO;YACP,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC3B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,OAAO,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CACvF;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAlOD,sCAkOC"}

package/dist/harness/safety.d.ts

@@ -0,0 +1,89 @@
+/**
+ * openhorse - Harness 安全边界检查
+ *
+ * 提供细粒度的安全策略、操作白名单/黑名单、危险模式检测、
+ * 沙箱隔离建议和安全审计报告。
+ */
+import { EventEmitter } from 'eventemitter3';
+/** 安全级别 */
+export type SecurityLevel = 'safe' | 'warning' | 'dangerous' | 'blocked';
+/** 安全检查结果 */
+export interface SafetyCheck {
+    /** 是否通过 */
+    passed: boolean;
+    /** 安全级别 */
+    level: SecurityLevel;
+    /** 原因 */
+    reason?: string;
+    /** 建议操作 */
+    suggestion?: string;
+}
+/** 安全策略配置 */
+export interface SafetyPolicy {
+    /** 是否启用安全检查 */
+    enabled: boolean;
+    /** 允许的操作 */
+    allowed: string[];
+    /** 禁止的操作（正则） */
+    blocked: string[];
+    /** 危险模式（正则） */
+    dangerousPatterns: string[];
+    /** 最大输出长度 */
+    maxOutputLength: number;
+    /** 是否启用沙箱模式 */
+    sandboxMode: boolean;
+    /** 允许的文件系统操作 */
+    allowedFileSystemOps: ('read' | 'write' | 'delete' | 'execute')[];
+    /** 禁止访问的路径 */
+    blockedPaths: string[];
+    /** 允许的网络操作 */
+    allowedNetworkOps: ('http' | 'https' | 'ws' | 'wss')[];
+}
+/** 审计日志条目 */
+export interface AuditLogEntry {
+    timestamp: number;
+    action: string;
+    level: SecurityLevel;
+    passed: boolean;
+    reason?: string;
+}
+export declare class SafetyChecker extends EventEmitter {
+    private policy;
+    private auditLog;
+    constructor(policy?: Partial<SafetyPolicy>);
+    /**
+     * 检查一个操作是否安全
+     */
+    check(action: string, context?: Record<string, any>): SafetyCheck;
+    /**
+     * 批量检查一组操作
+     */
+    checkBatch(actions: string[]): SafetyCheck[];
+    /**
+     * 获取审计日志
+     */
+    getAuditLog(limit?: number): AuditLogEntry[];
+    /**
+     * 获取审计摘要
+     */
+    getAuditSummary(): {
+        total: number;
+        passed: number;
+        failed: number;
+        blocked: number;
+    };
+    /**
+     * 更新策略
+     */
+    updatePolicy(patch: Partial<SafetyPolicy>): void;
+    /**
+     * 获取当前策略
+     */
+    getPolicy(): SafetyPolicy;
+    /**
+     * 清除审计日志
+     */
+    clearAuditLog(): void;
+    private record;
+}
+//# sourceMappingURL=safety.d.ts.map

package/dist/harness/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/harness/safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAM7C,WAAW;AACX,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEzE,aAAa;AACb,MAAM,WAAW,WAAW;IAC1B,WAAW;IACX,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS;IACT,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,aAAa;AACb,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB;IAChB,oBAAoB,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC;IAClE,cAAc;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc;IACd,iBAAiB,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;CACxD;AAED,aAAa;AACb,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkCD,qBAAa,aAAc,SAAQ,YAAY;IAC7C,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAuB;gBAE3B,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM;IAK9C;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,WAAW;IAwFjE;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE;IAI5C;;OAEG;IACH,WAAW,CAAC,KAAK,SAAK,GAAG,aAAa,EAAE;IAIxC;;OAEG;IACH,eAAe,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IASrF;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAIhD;;OAEG;IACH,SAAS,IAAI,YAAY;IAIzB;;OAEG;IACH,aAAa,IAAI,IAAI;IAMrB,OAAO,CAAC,MAAM;CAYf"}