seclaw-agent 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (219) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +668 -0
  3. package/SECURITY.md +253 -0
  4. package/assets/logo.png +0 -0
  5. package/dist/agent/context.d.ts +37 -0
  6. package/dist/agent/context.d.ts.map +1 -0
  7. package/dist/agent/context.js +211 -0
  8. package/dist/agent/context.js.map +1 -0
  9. package/dist/agent/docker_sandbox.d.ts +41 -0
  10. package/dist/agent/docker_sandbox.d.ts.map +1 -0
  11. package/dist/agent/docker_sandbox.js +239 -0
  12. package/dist/agent/docker_sandbox.js.map +1 -0
  13. package/dist/agent/loop.d.ts +86 -0
  14. package/dist/agent/loop.d.ts.map +1 -0
  15. package/dist/agent/loop.js +858 -0
  16. package/dist/agent/loop.js.map +1 -0
  17. package/dist/agent/memory.d.ts +21 -0
  18. package/dist/agent/memory.d.ts.map +1 -0
  19. package/dist/agent/memory.js +128 -0
  20. package/dist/agent/memory.js.map +1 -0
  21. package/dist/agent/security/execution_audit.d.ts +17 -0
  22. package/dist/agent/security/execution_audit.d.ts.map +1 -0
  23. package/dist/agent/security/execution_audit.js +126 -0
  24. package/dist/agent/security/execution_audit.js.map +1 -0
  25. package/dist/agent/security/input_validation/entity.d.ts +57 -0
  26. package/dist/agent/security/input_validation/entity.d.ts.map +1 -0
  27. package/dist/agent/security/input_validation/entity.js +121 -0
  28. package/dist/agent/security/input_validation/entity.js.map +1 -0
  29. package/dist/agent/security/input_validation/index.d.ts +114 -0
  30. package/dist/agent/security/input_validation/index.d.ts.map +1 -0
  31. package/dist/agent/security/input_validation/index.js +971 -0
  32. package/dist/agent/security/input_validation/index.js.map +1 -0
  33. package/dist/agent/security/input_validation/lattice.d.ts +33 -0
  34. package/dist/agent/security/input_validation/lattice.d.ts.map +1 -0
  35. package/dist/agent/security/input_validation/lattice.js +61 -0
  36. package/dist/agent/security/input_validation/lattice.js.map +1 -0
  37. package/dist/agent/security/input_validation/program_graph.d.ts +51 -0
  38. package/dist/agent/security/input_validation/program_graph.d.ts.map +1 -0
  39. package/dist/agent/security/input_validation/program_graph.js +285 -0
  40. package/dist/agent/security/input_validation/program_graph.js.map +1 -0
  41. package/dist/agent/security/input_validation/security_policy.d.ts +29 -0
  42. package/dist/agent/security/input_validation/security_policy.d.ts.map +1 -0
  43. package/dist/agent/security/input_validation/security_policy.js +256 -0
  44. package/dist/agent/security/input_validation/security_policy.js.map +1 -0
  45. package/dist/agent/security/memory_audit.d.ts +14 -0
  46. package/dist/agent/security/memory_audit.d.ts.map +1 -0
  47. package/dist/agent/security/memory_audit.js +126 -0
  48. package/dist/agent/security/memory_audit.js.map +1 -0
  49. package/dist/agent/security/skill_audit.d.ts +15 -0
  50. package/dist/agent/security/skill_audit.d.ts.map +1 -0
  51. package/dist/agent/security/skill_audit.js +112 -0
  52. package/dist/agent/security/skill_audit.js.map +1 -0
  53. package/dist/agent/security/snapshot_and_rollback/base.d.ts +10 -0
  54. package/dist/agent/security/snapshot_and_rollback/base.d.ts.map +1 -0
  55. package/dist/agent/security/snapshot_and_rollback/base.js +10 -0
  56. package/dist/agent/security/snapshot_and_rollback/base.js.map +1 -0
  57. package/dist/agent/security/snapshot_and_rollback/docker_snapshot.d.ts +52 -0
  58. package/dist/agent/security/snapshot_and_rollback/docker_snapshot.d.ts.map +1 -0
  59. package/dist/agent/security/snapshot_and_rollback/docker_snapshot.js +358 -0
  60. package/dist/agent/security/snapshot_and_rollback/docker_snapshot.js.map +1 -0
  61. package/dist/agent/security/snapshot_and_rollback/index.d.ts +7 -0
  62. package/dist/agent/security/snapshot_and_rollback/index.d.ts.map +1 -0
  63. package/dist/agent/security/snapshot_and_rollback/index.js +450 -0
  64. package/dist/agent/security/snapshot_and_rollback/index.js.map +1 -0
  65. package/dist/agent/skills.d.ts +35 -0
  66. package/dist/agent/skills.d.ts.map +1 -0
  67. package/dist/agent/skills.js +235 -0
  68. package/dist/agent/skills.js.map +1 -0
  69. package/dist/agent/subagent.d.ts +39 -0
  70. package/dist/agent/subagent.d.ts.map +1 -0
  71. package/dist/agent/subagent.js +151 -0
  72. package/dist/agent/subagent.js.map +1 -0
  73. package/dist/agent/tools/base.d.ts +32 -0
  74. package/dist/agent/tools/base.d.ts.map +1 -0
  75. package/dist/agent/tools/base.js +91 -0
  76. package/dist/agent/tools/base.js.map +1 -0
  77. package/dist/agent/tools/cron.d.ts +46 -0
  78. package/dist/agent/tools/cron.d.ts.map +1 -0
  79. package/dist/agent/tools/cron.js +95 -0
  80. package/dist/agent/tools/cron.js.map +1 -0
  81. package/dist/agent/tools/filesystem.d.ts +102 -0
  82. package/dist/agent/tools/filesystem.d.ts.map +1 -0
  83. package/dist/agent/tools/filesystem.js +257 -0
  84. package/dist/agent/tools/filesystem.js.map +1 -0
  85. package/dist/agent/tools/message.d.ts +40 -0
  86. package/dist/agent/tools/message.d.ts.map +1 -0
  87. package/dist/agent/tools/message.js +55 -0
  88. package/dist/agent/tools/message.js.map +1 -0
  89. package/dist/agent/tools/registry.d.ts +16 -0
  90. package/dist/agent/tools/registry.d.ts.map +1 -0
  91. package/dist/agent/tools/registry.js +47 -0
  92. package/dist/agent/tools/registry.js.map +1 -0
  93. package/dist/agent/tools/shell.d.ts +40 -0
  94. package/dist/agent/tools/shell.d.ts.map +1 -0
  95. package/dist/agent/tools/shell.js +166 -0
  96. package/dist/agent/tools/shell.js.map +1 -0
  97. package/dist/agent/tools/spawn.d.ts +30 -0
  98. package/dist/agent/tools/spawn.d.ts.map +1 -0
  99. package/dist/agent/tools/spawn.js +50 -0
  100. package/dist/agent/tools/spawn.js.map +1 -0
  101. package/dist/agent/tools/web.d.ts +59 -0
  102. package/dist/agent/tools/web.d.ts.map +1 -0
  103. package/dist/agent/tools/web.js +167 -0
  104. package/dist/agent/tools/web.js.map +1 -0
  105. package/dist/bus/events.d.ts +31 -0
  106. package/dist/bus/events.d.ts.map +1 -0
  107. package/dist/bus/events.js +28 -0
  108. package/dist/bus/events.js.map +1 -0
  109. package/dist/bus/queue.d.ts +32 -0
  110. package/dist/bus/queue.d.ts.map +1 -0
  111. package/dist/bus/queue.js +104 -0
  112. package/dist/bus/queue.js.map +1 -0
  113. package/dist/channels/base.d.ts +25 -0
  114. package/dist/channels/base.d.ts.map +1 -0
  115. package/dist/channels/base.js +54 -0
  116. package/dist/channels/base.js.map +1 -0
  117. package/dist/channels/dingtalk.d.ts +31 -0
  118. package/dist/channels/dingtalk.d.ts.map +1 -0
  119. package/dist/channels/dingtalk.js +177 -0
  120. package/dist/channels/dingtalk.js.map +1 -0
  121. package/dist/channels/discord.d.ts +30 -0
  122. package/dist/channels/discord.d.ts.map +1 -0
  123. package/dist/channels/discord.js +197 -0
  124. package/dist/channels/discord.js.map +1 -0
  125. package/dist/channels/email.d.ts +41 -0
  126. package/dist/channels/email.d.ts.map +1 -0
  127. package/dist/channels/email.js +210 -0
  128. package/dist/channels/email.js.map +1 -0
  129. package/dist/channels/feishu.d.ts +32 -0
  130. package/dist/channels/feishu.d.ts.map +1 -0
  131. package/dist/channels/feishu.js +109 -0
  132. package/dist/channels/feishu.js.map +1 -0
  133. package/dist/channels/manager.d.ts +24 -0
  134. package/dist/channels/manager.d.ts.map +1 -0
  135. package/dist/channels/manager.js +205 -0
  136. package/dist/channels/manager.js.map +1 -0
  137. package/dist/channels/mochat.d.ts +38 -0
  138. package/dist/channels/mochat.d.ts.map +1 -0
  139. package/dist/channels/mochat.js +201 -0
  140. package/dist/channels/mochat.js.map +1 -0
  141. package/dist/channels/qq.d.ts +40 -0
  142. package/dist/channels/qq.d.ts.map +1 -0
  143. package/dist/channels/qq.js +280 -0
  144. package/dist/channels/qq.js.map +1 -0
  145. package/dist/channels/slack.d.ts +27 -0
  146. package/dist/channels/slack.d.ts.map +1 -0
  147. package/dist/channels/slack.js +118 -0
  148. package/dist/channels/slack.js.map +1 -0
  149. package/dist/channels/telegram.d.ts +31 -0
  150. package/dist/channels/telegram.d.ts.map +1 -0
  151. package/dist/channels/telegram.js +218 -0
  152. package/dist/channels/telegram.js.map +1 -0
  153. package/dist/channels/whatsapp.d.ts +29 -0
  154. package/dist/channels/whatsapp.d.ts.map +1 -0
  155. package/dist/channels/whatsapp.js +117 -0
  156. package/dist/channels/whatsapp.js.map +1 -0
  157. package/dist/cli/commands.d.ts +8 -0
  158. package/dist/cli/commands.d.ts.map +1 -0
  159. package/dist/cli/commands.js +537 -0
  160. package/dist/cli/commands.js.map +1 -0
  161. package/dist/config/loader.d.ts +24 -0
  162. package/dist/config/loader.d.ts.map +1 -0
  163. package/dist/config/loader.js +182 -0
  164. package/dist/config/loader.js.map +1 -0
  165. package/dist/config/schema.d.ts +2921 -0
  166. package/dist/config/schema.d.ts.map +1 -0
  167. package/dist/config/schema.js +257 -0
  168. package/dist/config/schema.js.map +1 -0
  169. package/dist/cron/service.d.ts +38 -0
  170. package/dist/cron/service.d.ts.map +1 -0
  171. package/dist/cron/service.js +336 -0
  172. package/dist/cron/service.js.map +1 -0
  173. package/dist/cron/types.d.ts +46 -0
  174. package/dist/cron/types.d.ts.map +1 -0
  175. package/dist/cron/types.js +6 -0
  176. package/dist/cron/types.js.map +1 -0
  177. package/dist/heartbeat/service.d.ts +26 -0
  178. package/dist/heartbeat/service.d.ts.map +1 -0
  179. package/dist/heartbeat/service.js +142 -0
  180. package/dist/heartbeat/service.js.map +1 -0
  181. package/dist/index.d.ts +7 -0
  182. package/dist/index.d.ts.map +1 -0
  183. package/dist/index.js +14 -0
  184. package/dist/index.js.map +1 -0
  185. package/dist/providers/base.d.ts +38 -0
  186. package/dist/providers/base.d.ts.map +1 -0
  187. package/dist/providers/base.js +21 -0
  188. package/dist/providers/base.js.map +1 -0
  189. package/dist/providers/litellm_provider.d.ts +35 -0
  190. package/dist/providers/litellm_provider.d.ts.map +1 -0
  191. package/dist/providers/litellm_provider.js +205 -0
  192. package/dist/providers/litellm_provider.js.map +1 -0
  193. package/dist/providers/registry.d.ts +44 -0
  194. package/dist/providers/registry.d.ts.map +1 -0
  195. package/dist/providers/registry.js +252 -0
  196. package/dist/providers/registry.js.map +1 -0
  197. package/dist/providers/transcription.d.ts +10 -0
  198. package/dist/providers/transcription.d.ts.map +1 -0
  199. package/dist/providers/transcription.js +83 -0
  200. package/dist/providers/transcription.js.map +1 -0
  201. package/dist/session/manager.d.ts +35 -0
  202. package/dist/session/manager.d.ts.map +1 -0
  203. package/dist/session/manager.js +193 -0
  204. package/dist/session/manager.js.map +1 -0
  205. package/dist/utils/helpers.d.ts +15 -0
  206. package/dist/utils/helpers.d.ts.map +1 -0
  207. package/dist/utils/helpers.js +100 -0
  208. package/dist/utils/helpers.js.map +1 -0
  209. package/dist/utils/logger.d.ts +7 -0
  210. package/dist/utils/logger.d.ts.map +1 -0
  211. package/dist/utils/logger.js +25 -0
  212. package/dist/utils/logger.js.map +1 -0
  213. package/package.json +58 -0
  214. package/templates/AGENTS.md +51 -0
  215. package/templates/HEARTBEAT.md +16 -0
  216. package/templates/SOUL.md +36 -0
  217. package/templates/TOOLS.md +150 -0
  218. package/templates/USER.md +17 -0
  219. package/templates/memory/MEMORY.md +23 -0
@@ -0,0 +1,450 @@
1
+ "use strict";
2
+ /**
3
+ * Snapshot backend factory
4
+ */
5
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
6
+ if (k2 === undefined) k2 = k;
7
+ var desc = Object.getOwnPropertyDescriptor(m, k);
8
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
9
+ desc = { enumerable: true, get: function() { return m[k]; } };
10
+ }
11
+ Object.defineProperty(o, k2, desc);
12
+ }) : (function(o, m, k, k2) {
13
+ if (k2 === undefined) k2 = k;
14
+ o[k2] = m[k];
15
+ }));
16
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
17
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
18
+ }) : function(o, v) {
19
+ o["default"] = v;
20
+ });
21
+ var __importStar = (this && this.__importStar) || (function () {
22
+ var ownKeys = function(o) {
23
+ ownKeys = Object.getOwnPropertyNames || function (o) {
24
+ var ar = [];
25
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
26
+ return ar;
27
+ };
28
+ return ownKeys(o);
29
+ };
30
+ return function (mod) {
31
+ if (mod && mod.__esModule) return mod;
32
+ var result = {};
33
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
34
+ __setModuleDefault(result, mod);
35
+ return result;
36
+ };
37
+ })();
38
+ var __importDefault = (this && this.__importDefault) || function (mod) {
39
+ return (mod && mod.__esModule) ? mod : { "default": mod };
40
+ };
41
+ Object.defineProperty(exports, "__esModule", { value: true });
42
+ exports.HostSnapshotBackend = void 0;
43
+ exports.getBackend = getBackend;
44
+ const base_1 = require("./base");
45
+ Object.defineProperty(exports, "HostSnapshotBackend", { enumerable: true, get: function () { return base_1.HostSnapshotBackend; } });
46
+ const fs = __importStar(require("fs"));
47
+ const path = __importStar(require("path"));
48
+ const os = __importStar(require("os"));
49
+ const child_process_1 = require("child_process");
50
+ const logger_1 = __importDefault(require("../../../utils/logger"));
51
+ const SNAPSHOT_BASE = path.join(os.homedir(), ".seclaw", "snapshots");
52
+ const SNAPSHOT_META_FILE = "meta.json";
53
+ function makeSnapshotId() {
54
+ const now = new Date();
55
+ const pad = (value) => String(value).padStart(2, "0");
56
+ return `${now.getFullYear()}${pad(now.getMonth() + 1)}${pad(now.getDate())}_${pad(now.getHours())}${pad(now.getMinutes())}${pad(now.getSeconds())}`;
57
+ }
58
+ function commandExists(cmd) {
59
+ const result = (0, child_process_1.spawnSync)("which", [cmd], { encoding: "utf-8" });
60
+ return result.status === 0;
61
+ }
62
+ function normalizeDirs(dirs) {
63
+ const resolved = dirs.map((dir) => path.resolve(dir));
64
+ return Array.from(new Set(resolved));
65
+ }
66
+ function markerDir(snapId) {
67
+ return path.join(SNAPSHOT_BASE, snapId);
68
+ }
69
+ function markerMetaPath(snapId) {
70
+ return path.join(markerDir(snapId), SNAPSHOT_META_FILE);
71
+ }
72
+ function writeMarkerMeta(snapId, meta) {
73
+ const dir = markerDir(snapId);
74
+ fs.mkdirSync(dir, { recursive: true });
75
+ fs.writeFileSync(markerMetaPath(snapId), JSON.stringify(meta, null, 2), "utf-8");
76
+ }
77
+ function readMarkerMeta(snapId) {
78
+ const filePath = markerMetaPath(snapId);
79
+ if (!fs.existsSync(filePath))
80
+ return null;
81
+ try {
82
+ return JSON.parse(fs.readFileSync(filePath, "utf-8"));
83
+ }
84
+ catch (e) {
85
+ logger_1.default.warn(`Failed to parse snapshot marker meta for '${snapId}': ${e}`);
86
+ return null;
87
+ }
88
+ }
89
+ function removeMarker(snapId) {
90
+ const dir = markerDir(snapId);
91
+ if (fs.existsSync(dir)) {
92
+ fs.rmSync(dir, { recursive: true, force: true });
93
+ }
94
+ }
95
+ class RsyncBackend extends base_1.HostSnapshotBackend {
96
+ snapshotBase;
97
+ constructor() {
98
+ super();
99
+ this.snapshotBase = SNAPSHOT_BASE;
100
+ }
101
+ isAvailable() {
102
+ return commandExists("rsync");
103
+ }
104
+ takeSnapshot(dirs) {
105
+ const snapId = makeSnapshotId();
106
+ const snapDir = path.join(this.snapshotBase, snapId);
107
+ fs.mkdirSync(snapDir, { recursive: true });
108
+ for (const dir of normalizeDirs(dirs)) {
109
+ const dest = path.join(snapDir, path.basename(dir));
110
+ const result = (0, child_process_1.spawnSync)("rsync", ["-a", "--delete", `${dir}/`, `${dest}/`], {
111
+ encoding: "utf-8",
112
+ });
113
+ if (result.status !== 0) {
114
+ logger_1.default.warn(`rsync snapshot failed for ${dir}: ${result.stderr}`);
115
+ return null;
116
+ }
117
+ }
118
+ logger_1.default.info(`Rsync snapshot created: ${snapId}`);
119
+ return snapId;
120
+ }
121
+ restoreSnapshot(snapId, dirs) {
122
+ const snapDir = path.join(this.snapshotBase, snapId);
123
+ if (!fs.existsSync(snapDir))
124
+ return false;
125
+ for (const dir of normalizeDirs(dirs)) {
126
+ const src = path.join(snapDir, path.basename(dir));
127
+ if (!fs.existsSync(src))
128
+ continue;
129
+ const result = (0, child_process_1.spawnSync)("rsync", ["-a", "--delete", `${src}/`, `${dir}/`], {
130
+ encoding: "utf-8",
131
+ });
132
+ if (result.status !== 0) {
133
+ logger_1.default.warn(`rsync restore failed for ${dir}: ${result.stderr}`);
134
+ return false;
135
+ }
136
+ }
137
+ return true;
138
+ }
139
+ deleteSnapshot(snapId) {
140
+ const snapDir = path.join(this.snapshotBase, snapId);
141
+ if (fs.existsSync(snapDir)) {
142
+ fs.rmSync(snapDir, { recursive: true, force: true });
143
+ return true;
144
+ }
145
+ return false;
146
+ }
147
+ }
148
+ class ApfsBackend extends base_1.HostSnapshotBackend {
149
+ snapshotBase;
150
+ constructor() {
151
+ super();
152
+ this.snapshotBase = SNAPSHOT_BASE;
153
+ }
154
+ isAvailable() {
155
+ if (process.platform !== "darwin")
156
+ return false;
157
+ if (!commandExists("tmutil") || !commandExists("rsync"))
158
+ return false;
159
+ if (!fs.existsSync("/sbin/mount_apfs"))
160
+ return false;
161
+ return this.fileSystemType(os.homedir()) === "apfs";
162
+ }
163
+ takeSnapshot(dirs) {
164
+ const watchedDirs = normalizeDirs(dirs);
165
+ for (const dir of watchedDirs) {
166
+ if (this.fileSystemType(dir) !== "apfs") {
167
+ logger_1.default.warn(`APFS snapshot requires APFS filesystem: ${dir}`);
168
+ return null;
169
+ }
170
+ }
171
+ const result = (0, child_process_1.spawnSync)("tmutil", ["localsnapshot"], {
172
+ encoding: "utf-8",
173
+ timeout: 30000,
174
+ });
175
+ if (result.status !== 0) {
176
+ logger_1.default.warn(`tmutil localsnapshot failed: ${result.stderr}`);
177
+ return null;
178
+ }
179
+ const snapId = this.parseSnapshotId(`${result.stdout}\n${result.stderr}`);
180
+ if (!snapId) {
181
+ logger_1.default.warn(`Failed to parse APFS snapshot id from tmutil output: ${result.stdout}`);
182
+ return null;
183
+ }
184
+ writeMarkerMeta(snapId, {
185
+ backend: "apfs",
186
+ dirs: watchedDirs,
187
+ createdAt: new Date().toISOString(),
188
+ });
189
+ logger_1.default.info(`APFS snapshot created: ${snapId}`);
190
+ return snapId;
191
+ }
192
+ restoreSnapshot(snapId, dirs) {
193
+ const watchedDirs = normalizeDirs(dirs);
194
+ if (watchedDirs.length === 0)
195
+ return false;
196
+ const snapshotName = `com.apple.TimeMachine.${snapId}.local`;
197
+ let ok = true;
198
+ for (const dir of watchedDirs) {
199
+ const vol = this.volumeInfo(dir);
200
+ if (!vol) {
201
+ logger_1.default.warn(`APFS restore failed: cannot resolve volume info for ${dir}`);
202
+ ok = false;
203
+ continue;
204
+ }
205
+ const mountRoot = fs.mkdtempSync(path.join(os.tmpdir(), "seclaw_apfs_"));
206
+ let mounted = false;
207
+ try {
208
+ mounted = this.mountSnapshot(snapshotName, vol.device, mountRoot);
209
+ if (!mounted) {
210
+ ok = false;
211
+ continue;
212
+ }
213
+ const relativePath = path.relative(vol.mountPoint, dir);
214
+ if (relativePath.startsWith("..")) {
215
+ logger_1.default.warn(`APFS restore failed: path '${dir}' is outside mount '${vol.mountPoint}'`);
216
+ ok = false;
217
+ continue;
218
+ }
219
+ const snapshotDir = relativePath === "" ? mountRoot : path.join(mountRoot, relativePath);
220
+ if (!fs.existsSync(snapshotDir)) {
221
+ logger_1.default.warn(`APFS restore failed: '${snapshotDir}' not found in mounted snapshot`);
222
+ ok = false;
223
+ continue;
224
+ }
225
+ fs.mkdirSync(dir, { recursive: true });
226
+ const rsyncResult = (0, child_process_1.spawnSync)("rsync", ["-a", "--delete", `${snapshotDir}/`, `${dir}/`], {
227
+ encoding: "utf-8",
228
+ timeout: 120000,
229
+ });
230
+ if (rsyncResult.status !== 0) {
231
+ logger_1.default.warn(`APFS restore rsync failed for ${dir}: ${rsyncResult.stderr}`);
232
+ ok = false;
233
+ }
234
+ }
235
+ finally {
236
+ if (mounted)
237
+ this.unmountSnapshot(mountRoot);
238
+ fs.rmSync(mountRoot, { recursive: true, force: true });
239
+ }
240
+ }
241
+ return ok;
242
+ }
243
+ deleteSnapshot(snapId) {
244
+ const result = (0, child_process_1.spawnSync)("tmutil", ["deletelocalsnapshots", snapId], {
245
+ encoding: "utf-8",
246
+ timeout: 30000,
247
+ });
248
+ if (result.status !== 0) {
249
+ logger_1.default.warn(`tmutil deletelocalsnapshots failed for '${snapId}': ${result.stderr}`);
250
+ removeMarker(snapId);
251
+ return false;
252
+ }
253
+ removeMarker(snapId);
254
+ return true;
255
+ }
256
+ parseSnapshotId(output) {
257
+ const match = output.match(/\d{4}-\d{2}-\d{2}-\d{6}/);
258
+ return match ? match[0] : null;
259
+ }
260
+ fileSystemType(targetPath) {
261
+ const result = (0, child_process_1.spawnSync)("stat", ["-f", "%T", targetPath], { encoding: "utf-8" });
262
+ if (result.status !== 0)
263
+ return null;
264
+ return result.stdout.trim().toLowerCase();
265
+ }
266
+ volumeInfo(targetPath) {
267
+ const result = (0, child_process_1.spawnSync)("df", ["-P", targetPath], { encoding: "utf-8" });
268
+ if (result.status !== 0)
269
+ return null;
270
+ const lines = result.stdout.trim().split(/\r?\n/);
271
+ if (lines.length < 2)
272
+ return null;
273
+ const cols = lines[1].trim().split(/\s+/);
274
+ if (cols.length < 6)
275
+ return null;
276
+ const device = cols[0];
277
+ const mountPoint = cols[cols.length - 1];
278
+ return { device, mountPoint };
279
+ }
280
+ mountSnapshot(snapshotName, device, mountPoint) {
281
+ const args = ["-s", snapshotName, "-o", "ro", device, mountPoint];
282
+ const direct = (0, child_process_1.spawnSync)("/sbin/mount_apfs", args, { encoding: "utf-8", timeout: 30000 });
283
+ if (direct.status === 0)
284
+ return true;
285
+ const sudo = (0, child_process_1.spawnSync)("sudo", ["-n", "/sbin/mount_apfs", ...args], {
286
+ encoding: "utf-8",
287
+ timeout: 30000,
288
+ });
289
+ if (sudo.status === 0)
290
+ return true;
291
+ logger_1.default.warn(`APFS mount failed (${snapshotName} on ${device}): ${String(direct.stderr || "").trim()} ${String(sudo.stderr || "").trim()}`);
292
+ return false;
293
+ }
294
+ unmountSnapshot(mountPoint) {
295
+ const umount = (0, child_process_1.spawnSync)("umount", [mountPoint], { encoding: "utf-8", timeout: 30000 });
296
+ if (umount.status === 0)
297
+ return;
298
+ (0, child_process_1.spawnSync)("diskutil", ["unmount", "force", mountPoint], {
299
+ encoding: "utf-8",
300
+ timeout: 30000,
301
+ });
302
+ }
303
+ }
304
+ class BtrfsBackend extends base_1.HostSnapshotBackend {
305
+ snapshotBase;
306
+ constructor() {
307
+ super();
308
+ this.snapshotBase = SNAPSHOT_BASE;
309
+ }
310
+ isAvailable() {
311
+ if (process.platform !== "linux")
312
+ return false;
313
+ if (!commandExists("btrfs") || !commandExists("rsync"))
314
+ return false;
315
+ return this.fileSystemType(os.homedir()) === "btrfs";
316
+ }
317
+ takeSnapshot(dirs) {
318
+ const watchedDirs = normalizeDirs(dirs);
319
+ const snapId = makeSnapshotId();
320
+ let ok = true;
321
+ for (const dir of watchedDirs) {
322
+ if (this.fileSystemType(dir) !== "btrfs") {
323
+ logger_1.default.warn(`btrfs snapshot requires btrfs filesystem: ${dir}`);
324
+ ok = false;
325
+ continue;
326
+ }
327
+ const snapDir = this.snapshotPath(dir, snapId);
328
+ fs.mkdirSync(path.dirname(snapDir), { recursive: true });
329
+ const result = (0, child_process_1.spawnSync)("btrfs", ["subvolume", "snapshot", "-r", dir, snapDir], {
330
+ encoding: "utf-8",
331
+ timeout: 60000,
332
+ });
333
+ if (result.status !== 0) {
334
+ logger_1.default.warn(`btrfs snapshot failed for ${dir}: ${result.stderr}`);
335
+ ok = false;
336
+ }
337
+ }
338
+ if (!ok) {
339
+ this.deleteSnapshot(snapId, watchedDirs);
340
+ return null;
341
+ }
342
+ writeMarkerMeta(snapId, {
343
+ backend: "btrfs",
344
+ dirs: watchedDirs,
345
+ createdAt: new Date().toISOString(),
346
+ });
347
+ logger_1.default.info(`Btrfs snapshot created: ${snapId}`);
348
+ return snapId;
349
+ }
350
+ restoreSnapshot(snapId, dirs) {
351
+ const watchedDirs = normalizeDirs(dirs);
352
+ if (watchedDirs.length === 0)
353
+ return false;
354
+ let ok = true;
355
+ for (const dir of watchedDirs) {
356
+ const snapDir = this.snapshotPath(dir, snapId);
357
+ if (!fs.existsSync(snapDir)) {
358
+ logger_1.default.warn(`btrfs snapshot path not found for restore: ${snapDir}`);
359
+ ok = false;
360
+ continue;
361
+ }
362
+ fs.mkdirSync(dir, { recursive: true });
363
+ const result = (0, child_process_1.spawnSync)("rsync", ["-a", "--delete", `${snapDir}/`, `${dir}/`], {
364
+ encoding: "utf-8",
365
+ timeout: 120000,
366
+ });
367
+ if (result.status !== 0) {
368
+ logger_1.default.warn(`btrfs restore failed for ${dir}: ${result.stderr}`);
369
+ ok = false;
370
+ }
371
+ }
372
+ return ok;
373
+ }
374
+ deleteSnapshot(snapId, dirs) {
375
+ const watchedDirs = dirs && dirs.length > 0
376
+ ? normalizeDirs(dirs)
377
+ : normalizeDirs(readMarkerMeta(snapId)?.dirs ?? []);
378
+ if (watchedDirs.length === 0) {
379
+ removeMarker(snapId);
380
+ return false;
381
+ }
382
+ let ok = true;
383
+ for (const dir of watchedDirs) {
384
+ const snapDir = this.snapshotPath(dir, snapId);
385
+ if (!fs.existsSync(snapDir))
386
+ continue;
387
+ const result = (0, child_process_1.spawnSync)("btrfs", ["subvolume", "delete", snapDir], {
388
+ encoding: "utf-8",
389
+ timeout: 30000,
390
+ });
391
+ if (result.status !== 0) {
392
+ logger_1.default.warn(`btrfs snapshot delete failed for ${snapDir}: ${result.stderr}`);
393
+ ok = false;
394
+ continue;
395
+ }
396
+ this.cleanupSnapshotTree(dir, snapId);
397
+ }
398
+ removeMarker(snapId);
399
+ return ok;
400
+ }
401
+ fileSystemType(targetPath) {
402
+ const result = (0, child_process_1.spawnSync)("stat", ["-f", "-c", "%T", targetPath], { encoding: "utf-8" });
403
+ if (result.status !== 0)
404
+ return null;
405
+ return result.stdout.trim().toLowerCase();
406
+ }
407
+ snapshotPath(liveDir, snapId) {
408
+ const resolved = path.resolve(liveDir);
409
+ const name = path.basename(resolved) || "_root";
410
+ return path.join(path.dirname(resolved), ".seclaw_snaps", snapId, name);
411
+ }
412
+ cleanupSnapshotTree(liveDir, snapId) {
413
+ const resolved = path.resolve(liveDir);
414
+ const snapIdDir = path.join(path.dirname(resolved), ".seclaw_snaps", snapId);
415
+ const snapshotRoot = path.join(path.dirname(resolved), ".seclaw_snaps");
416
+ try {
417
+ if (fs.existsSync(snapIdDir) && fs.readdirSync(snapIdDir).length === 0) {
418
+ fs.rmdirSync(snapIdDir);
419
+ }
420
+ }
421
+ catch {
422
+ // ignore cleanup failure
423
+ }
424
+ try {
425
+ if (fs.existsSync(snapshotRoot) && fs.readdirSync(snapshotRoot).length === 0) {
426
+ fs.rmdirSync(snapshotRoot);
427
+ }
428
+ }
429
+ catch {
430
+ // ignore cleanup failure
431
+ }
432
+ }
433
+ }
434
+ function getBackend() {
435
+ if (process.platform === "darwin") {
436
+ const apfs = new ApfsBackend();
437
+ if (apfs.isAvailable())
438
+ return apfs;
439
+ logger_1.default.warn("APFS backend unavailable; falling back to rsync backend");
440
+ }
441
+ else if (process.platform === "linux") {
442
+ const btrfs = new BtrfsBackend();
443
+ if (btrfs.isAvailable())
444
+ return btrfs;
445
+ logger_1.default.warn("Btrfs backend unavailable; falling back to rsync backend");
446
+ }
447
+ const rsync = new RsyncBackend();
448
+ return rsync.isAvailable() ? rsync : null;
449
+ }
450
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/agent/security/snapshot_and_rollback/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAocH,gCAaC;AA/cD,iCAA6C;AAidpC,oGAjdA,0BAAmB,OAidA;AAhd5B,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,iDAA0C;AAC1C,mEAA2C;AAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACtE,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAQvC,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AACtJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,IAAkB;IACzD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAiB,CAAC;IACxE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,gBAAM,CAAC,IAAI,CAAC,6CAA6C,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,YAAa,SAAQ,0BAAmB;IACpC,YAAY,CAAS;IAE7B;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC;IACpC,CAAC;IAED,WAAW;QACT,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,YAAY,CAAC,IAAc;QACzB,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3C,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,EAAE;gBAC3E,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,gBAAM,CAAC,IAAI,CAAC,6BAA6B,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,gBAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,IAAc;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAE1C,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,EAAE;gBAC1E,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,gBAAM,CAAC,IAAI,CAAC,4BAA4B,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,WAAY,SAAQ,0BAAmB;IACnC,YAAY,CAAS;IAE7B;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC;IACpC,CAAC;IAED,WAAW;QACT,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,MAAM,CAAC;IACtD,CAAC;IAED,YAAY,CAAC,IAAc;QACzB,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;gBACxC,gBAAM,CAAC,IAAI,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;gBAC9D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE;YACpD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,gBAAM,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gBAAM,CAAC,IAAI,CAAC,wDAAwD,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,eAAe,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QAEH,gBAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,IAAc;QAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE3C,MAAM,YAAY,GAAG,yBAAyB,MAAM,QAAQ,CAAC;QAC7D,IAAI,EAAE,GAAG,IAAI,CAAC;QAEd,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,gBAAM,CAAC,IAAI,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAC;gBAC1E,EAAE,GAAG,KAAK,CAAC;gBACX,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;YACzE,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAClE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,EAAE,GAAG,KAAK,CAAC;oBACX,SAAS;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBACxD,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClC,gBAAM,CAAC,IAAI,CAAC,8BAA8B,GAAG,uBAAuB,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;oBACvF,EAAE,GAAG,KAAK,CAAC;oBACX,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBACzF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAChC,gBAAM,CAAC,IAAI,CAAC,yBAAyB,WAAW,iCAAiC,CAAC,CAAC;oBACnF,EAAE,GAAG,KAAK,CAAC;oBACX,SAAS;gBACX,CAAC;gBAED,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM,WAAW,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,EAAE;oBACvF,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;gBACH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,gBAAM,CAAC,IAAI,CAAC,iCAAiC,GAAG,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC3E,EAAE,GAAG,KAAK,CAAC;gBACb,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,OAAO;oBAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;gBAC7C,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,QAAQ,EAAE,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE;YACnE,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,gBAAM,CAAC,IAAI,CAAC,2CAA2C,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,eAAe,CAAC,MAAc;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAEO,cAAc,CAAC,UAAkB;QACvC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC;IAEO,UAAU,CAAC,UAAkB;QACnC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAErC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;IAEO,aAAa,CAAC,YAAoB,EAAE,MAAc,EAAE,UAAkB;QAC5E,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAErC,MAAM,IAAI,GAAG,IAAA,yBAAS,EAAC,MAAM,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,EAAE;YAClE,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEnC,gBAAM,CAAC,IAAI,CACT,sBAAsB,YAAY,OAAO,MAAM,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAC/F,IAAI,CAAC,MAAM,IAAI,EAAE,CAClB,CAAC,IAAI,EAAE,EAAE,CACX,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CAAC,UAAkB;QACxC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEhC,IAAA,yBAAS,EAAC,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE;YACtD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,YAAa,SAAQ,0BAAmB;IACpC,YAAY,CAAS;IAE7B;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC;IACpC,CAAC;IAED,WAAW;QACT,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACrE,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC;IACvD,CAAC;IAED,YAAY,CAAC,IAAc;QACzB,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,IAAI,EAAE,GAAG,IAAI,CAAC;QAEd,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;gBACzC,gBAAM,CAAC,IAAI,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;gBAChE,EAAE,GAAG,KAAK,CAAC;gBACX,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;gBAC/E,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,gBAAM,CAAC,IAAI,CAAC,6BAA6B,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,EAAE,GAAG,KAAK,CAAC;YACb,CAAC;QACH,CAAC;QAED,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,eAAe,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QAEH,gBAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,IAAc;QAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE3C,IAAI,EAAE,GAAG,IAAI,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,gBAAM,CAAC,IAAI,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;gBACrE,EAAE,GAAG,KAAK,CAAC;gBACX,SAAS;YACX,CAAC;YAED,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,EAAE;gBAC9E,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,gBAAM,CAAC,IAAI,CAAC,4BAA4B,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjE,EAAE,GAAG,KAAK,CAAC;YACb,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,cAAc,CAAC,MAAc,EAAE,IAAe;QAC5C,MAAM,WAAW,GACf,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;YACrB,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAExD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,EAAE,GAAG,IAAI,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS;YAEtC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;gBAClE,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,gBAAM,CAAC,IAAI,CAAC,oCAAoC,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7E,EAAE,GAAG,KAAK,CAAC;gBACX,SAAS;YACX,CAAC;YAED,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,cAAc,CAAC,UAAkB;QACvC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACxF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC;IAEO,YAAY,CAAC,OAAe,EAAE,MAAc;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAEO,mBAAmB,CAAC,OAAe,EAAE,MAAc;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7E,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;CACF;AAED,SAAgB,UAAU;IACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;QACpC,gBAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QACtC,gBAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC"}
@@ -0,0 +1,35 @@
1
+ /**
2
+ * Skills loader
3
+ */
4
+ export interface SkillInfo {
5
+ name: string;
6
+ path: string;
7
+ source: "workspace" | "builtin";
8
+ }
9
+ export declare class SkillsLoader {
10
+ workspace: string;
11
+ workspaceSkills: string;
12
+ builtinSkills: string;
13
+ containerWorkspace?: string;
14
+ private pathTranslator?;
15
+ constructor(opts: {
16
+ workspace: string;
17
+ builtinSkillsDir?: string;
18
+ containerWorkspace?: string;
19
+ pathTranslator?: (p: string) => string;
20
+ });
21
+ private toContainerPath;
22
+ listSkills(filterUnavailable?: boolean): SkillInfo[];
23
+ loadSkill(name: string): string | null;
24
+ loadSkillsForContext(skillNames: string[]): string;
25
+ buildSkillsSummary(): string;
26
+ getAlwaysSkills(): string[];
27
+ getSkillMetadata(name: string): Record<string, string> | null;
28
+ private getSkillMeta;
29
+ private parseNanobotMetadata;
30
+ private checkRequirements;
31
+ private getMissingRequirements;
32
+ private getSkillDescription;
33
+ private stripFrontmatter;
34
+ }
35
+ //# sourceMappingURL=skills.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/agent/skills.ts"],"names":[],"mappings":"AAAA;;GAEG;AAsBH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;CACjC;AAED,qBAAa,YAAY;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAwB;gBAEnC,IAAI,EAAE;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;KACxC;IAQD,OAAO,CAAC,eAAe;IAUvB,UAAU,CAAC,iBAAiB,UAAO,GAAG,SAAS,EAAE;IAiCjD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAUtC,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM;IAYlD,kBAAkB,IAAI,MAAM;IAuB5B,eAAe,IAAI,MAAM,EAAE;IAU3B,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAmB7D,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,gBAAgB;CAOzB"}