sema-core 2.1.0 → 2.1.2

package/dist/util/commands.js

@@ -11,6 +11,9 @@ const commands_1 = require("../prompt/commands");
 const SQ_PLACEHOLDER = '__SQ_PLACEHOLDER__';
 const DQ_PLACEHOLDER = '__DQ_PLACEHOLDER__';
 const BS_PLACEHOLDER = '__BS_PLACEHOLDER__';
+// 转义分号 \;（find -exec 的结束符写法）：若只把 \ 换成占位符，shell-quote 仍会把后面的 ; 当命令
+// 分隔符吃掉，find 段被截断、结束符丢失。先整体换成不含操作符字符的占位符，分词后原样还原。
+const BS_SEMI_PLACEHOLDER = '__BS_SEMI_PLACEHOLDER__';
 // 命令注入特征：反引号 / $( / 换行 / && / || / ;。
 // 但必须区分引号内外——引号里的换行/分号是字面数据（如 echo "多行文本"），不是命令分隔：
 //  - 单引号内：全部字面，shell 不做任何解释 → 一律忽略
@@ -134,6 +137,7 @@ function splitCommand(command) {
     const parts = [];
     // 1. 合并相邻的字符串
     for (const part of (0, shell_quote_1.parse)(command
+        .replaceAll('\\;', BS_SEMI_PLACEHOLDER)
         .replaceAll('\\', BS_PLACEHOLDER)
         .replaceAll('"', `"${DQ_PLACEHOLDER}`)
         .replaceAll("'", `'${SQ_PLACEHOLDER}`), varName => `$${varName}`)) {
@@ -168,7 +172,8 @@ function splitCommand(command) {
         return part
             .replaceAll(`${SQ_PLACEHOLDER}`, "'")
             .replaceAll(`${DQ_PLACEHOLDER}`, '"')
-            .replaceAll(`${BS_PLACEHOLDER}`, '\\');
+            .replaceAll(`${BS_PLACEHOLDER}`, '\\')
+            .replaceAll(`${BS_SEMI_PLACEHOLDER}`, '\\;');
     });
     // 4. 过滤掉分隔符
     const commandParts = [];

package/dist/util/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/util/commands.ts"],"names":[],"mappings":";;AAsBA,kDAkCC;AAmBD,4CAsDC;AAKD,oCA+GC;AAED,4CA2DC;AAlTD,6CAAqE;AACrE,uDAAqD;AACrD,uCAA0C;AAC1C,iDAA6F;AAE7F,MAAM,cAAc,GAAG,oBAAoB,CAAA;AAC3C,MAAM,cAAc,GAAG,oBAAoB,CAAA;AAC3C,MAAM,cAAc,GAAG,oBAAoB,CAAA;AAS3C,sCAAsC;AACtC,mDAAmD;AACnD,mCAAmC;AACnC,wDAAwD;AACxD,4CAA4C;AAC5C,uDAAuD;AACvD,SAAgB,mBAAmB,CAAC,OAAe;IACjD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAE3B,IAAI,QAAQ,EAAE,CAAC;YACb,iBAAiB;YACjB,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAA;YAC/B,SAAQ;QACV,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,yBAAyB;YACzB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAA;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAA;YAC1C,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAA;YAC/B,SAAQ;QACV,CAAC;QAED,MAAM;QACN,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC1C,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACzD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sCAAsC;AACtC,yDAAyD;AACzD,MAAM,gBAAgB,GAAG,2CAA2C,CAAA;AAEpE;;;;;;;;;;;;GAYG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC,GAAG,CAAC,CAAA;IAET,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAEpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,4BAA4B;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAA;QAEtC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;QACrB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;QAEnB,4BAA4B;QAC5B,6DAA6D;QAC7D,iDAAiD;QACjD,6CAA6C;QAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;YAC1B,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC9B,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAK;YACP,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrB,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAA;QAE7B,iCAAiC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAA;QACvE,CAAC;QAED,uBAAuB;QACvB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACX,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAiB,EAAE,CAAA;IAE9B,cAAc;IACd,KAAK,MAAM,IAAI,IAAI,IAAA,mBAAK,EACtB,OAAO;SACJ,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC;SAChC,UAAU,CAAC,GAAG,EAAE,IAAI,cAAc,EAAE,CAAC;SACrC,UAAU,CAAC,GAAG,EAAE,IAAI,cAAc,EAAE,CAAC,EACxC,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CACzB,EAAE,CAAC;QACF,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAA;gBACrC,SAAQ;YACV,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAED,eAAe;IACf,MAAM,WAAW,GAAG,KAAK;SACtB,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACtB,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,OAAO,CAAA;QACrB,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,EAAE,CAAA;QAChB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;IAEvD,gBAAgB;IAChB,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACzC,OAAO,IAAI;aACR,UAAU,CAAC,GAAG,cAAc,EAAE,EAAE,GAAG,CAAC;aACpC,UAAU,CAAC,GAAG,cAAc,EAAE,EAAE,GAAG,CAAC;aACpC,UAAU,CAAC,GAAG,cAAc,EAAE,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,YAAY;IACZ,MAAM,YAAY,GAAa,EAAE,CAAA;IACjC,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,wBAAwB,GAAG,CAAC,CAAA;IAEhC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE;QAClC,cAAc,GAAG,cAAc;YAC7B,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAC5B,CAAC,CAAC,GAAG,cAAc,GAAG,IAAI,EAAE;gBAC5B,CAAC,CAAC,GAAG,cAAc,IAAI,IAAI,EAAE;YAC/B,CAAC,CAAC,IAAI,CAAA;IACV,CAAC,CAAA;IAED,MAAM,mBAAmB,GAAG,GAAG,EAAE;QAC/B,IAAI,CAAC,cAAc;YAAE,OAAM;QAC3B,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACjC,cAAc,GAAG,IAAI,CAAA;IACvB,CAAC,CAAA;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAE,CAAA;QAEhC,IAAI,IAAI,KAAK,GAAG,IAAI,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,cAAc,IAAI,IAAI,CAAA;YACtB,wBAAwB,EAAE,CAAA;YAC1B,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,wBAAwB,GAAG,CAAC,EAAE,CAAC;YACjD,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACnE,wBAAwB,EAAE,CAAA;YAC1B,SAAQ;QACV,CAAC;QAED,IAAK,qBAAqC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,mBAAmB,EAAE,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,IAAK,wBAAwC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,mBAAmB,EAAE,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACvC,IACE,QAAQ;gBACR,CAAE,wBAAwC,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACxD,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAChC,CAAC;gBACD,cAAc,GAAG,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;gBAClE,KAAK,EAAE,CAAA;YACT,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,iBAAiB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;YAC1D,CAAC;YACD,SAAQ;QACV,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAED,mBAAmB,EAAE,CAAA;IACrB,OAAO,YAAY,CAAA;AACrB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,WAAwB,EACxB,SAAkB;IAElB,IAAI,QAAQ,CAAA;IACZ,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAA,qBAAU,EAAC;YAC1B,YAAY,EAAE;gBACZ;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,uCAA4B;iBACnC;aACF;YACD,UAAU,EAAE,IAAA,qCAA0B,EAAC,OAAO,CAAC;YAC/C,MAAM,EAAE,WAAW;YACnB,cAAc,EAAE,KAAK;YACrB,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,MAAM,GAAG,CACb,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;QAC1C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO;QAC1B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI;gBAC5D,MAAM,CAAC;YACT,CAAC,CAAC,MAAM,CACb,CAAC,IAAI,EAAE,CAAA;IAER,IAAI,MAAM,CAAC,UAAU,CAAC,wBAAc,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,MAAM,KAAK,4BAA4B,EAAE,CAAC;QAC5C,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAA;IAC3C,CAAC;IAED,0CAA0C;IAC1C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,wBAAwB,EAAE,KAAK;SAChC,CAAA;IACH,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,wBAAwB,EAAE,KAAK;SAChC,CAAA;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,MAAM;QACrB,wBAAwB,EAAE,KAAK;KAChC,CAAA;AACH,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAkB;IACrD,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,GAAG;IACH,GAAG;IACH,IAAI;CACL,CAAC,CAAA;AAEF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS;IAC/C,GAAG,qBAAqB;IACxB,GAAG;IACH,GAAG;CACJ,CAAC,CAAA;AAEF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS;IAC/C,GAAG;IACH,GAAG;CACJ,CAAC,CAAA;AAEF,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAS;IAClD,GAAG;IACH,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;CACN,CAAC,CAAA;AAEF,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAe;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IACnE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,WAAW,EAAE,CAAA;AACnF,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/util/commands.ts"],"names":[],"mappings":";;AAyBA,kDAkCC;AAmBD,4CAsDC;AAKD,oCAiHC;AAED,4CA2DC;AAvTD,6CAAqE;AACrE,uDAAqD;AACrD,uCAA0C;AAC1C,iDAA6F;AAE7F,MAAM,cAAc,GAAG,oBAAoB,CAAA;AAC3C,MAAM,cAAc,GAAG,oBAAoB,CAAA;AAC3C,MAAM,cAAc,GAAG,oBAAoB,CAAA;AAC3C,kEAAkE;AAClE,kDAAkD;AAClD,MAAM,mBAAmB,GAAG,yBAAyB,CAAA;AASrD,sCAAsC;AACtC,mDAAmD;AACnD,mCAAmC;AACnC,wDAAwD;AACxD,4CAA4C;AAC5C,uDAAuD;AACvD,SAAgB,mBAAmB,CAAC,OAAe;IACjD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAE3B,IAAI,QAAQ,EAAE,CAAC;YACb,iBAAiB;YACjB,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAA;YAC/B,SAAQ;QACV,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,yBAAyB;YACzB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAA;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAA;YAC1C,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAA;YAC/B,SAAQ;QACV,CAAC;QAED,MAAM;QACN,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC1C,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACzD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sCAAsC;AACtC,yDAAyD;AACzD,MAAM,gBAAgB,GAAG,2CAA2C,CAAA;AAEpE;;;;;;;;;;;;GAYG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC,GAAG,CAAC,CAAA;IAET,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAEpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,4BAA4B;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAA;QAEtC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;QACrB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;QAEnB,4BAA4B;QAC5B,6DAA6D;QAC7D,iDAAiD;QACjD,6CAA6C;QAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;YAC1B,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC9B,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAK;YACP,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrB,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAA;QAE7B,iCAAiC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAA;QACvE,CAAC;QAED,uBAAuB;QACvB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACX,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAiB,EAAE,CAAA;IAE9B,cAAc;IACd,KAAK,MAAM,IAAI,IAAI,IAAA,mBAAK,EACtB,OAAO;SACJ,UAAU,CAAC,KAAK,EAAE,mBAAmB,CAAC;SACtC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC;SAChC,UAAU,CAAC,GAAG,EAAE,IAAI,cAAc,EAAE,CAAC;SACrC,UAAU,CAAC,GAAG,EAAE,IAAI,cAAc,EAAE,CAAC,EACxC,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CACzB,EAAE,CAAC;QACF,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAA;gBACrC,SAAQ;YACV,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAED,eAAe;IACf,MAAM,WAAW,GAAG,KAAK;SACtB,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACtB,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,OAAO,CAAA;QACrB,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,EAAE,CAAA;QAChB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;IAEvD,gBAAgB;IAChB,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACzC,OAAO,IAAI;aACR,UAAU,CAAC,GAAG,cAAc,EAAE,EAAE,GAAG,CAAC;aACpC,UAAU,CAAC,GAAG,cAAc,EAAE,EAAE,GAAG,CAAC;aACpC,UAAU,CAAC,GAAG,cAAc,EAAE,EAAE,IAAI,CAAC;aACrC,UAAU,CAAC,GAAG,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,YAAY;IACZ,MAAM,YAAY,GAAa,EAAE,CAAA;IACjC,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,wBAAwB,GAAG,CAAC,CAAA;IAEhC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE;QAClC,cAAc,GAAG,cAAc;YAC7B,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAC5B,CAAC,CAAC,GAAG,cAAc,GAAG,IAAI,EAAE;gBAC5B,CAAC,CAAC,GAAG,cAAc,IAAI,IAAI,EAAE;YAC/B,CAAC,CAAC,IAAI,CAAA;IACV,CAAC,CAAA;IAED,MAAM,mBAAmB,GAAG,GAAG,EAAE;QAC/B,IAAI,CAAC,cAAc;YAAE,OAAM;QAC3B,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACjC,cAAc,GAAG,IAAI,CAAA;IACvB,CAAC,CAAA;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAE,CAAA;QAEhC,IAAI,IAAI,KAAK,GAAG,IAAI,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,cAAc,IAAI,IAAI,CAAA;YACtB,wBAAwB,EAAE,CAAA;YAC1B,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,wBAAwB,GAAG,CAAC,EAAE,CAAC;YACjD,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACnE,wBAAwB,EAAE,CAAA;YAC1B,SAAQ;QACV,CAAC;QAED,IAAK,qBAAqC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,mBAAmB,EAAE,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,IAAK,wBAAwC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,mBAAmB,EAAE,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACvC,IACE,QAAQ;gBACR,CAAE,wBAAwC,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACxD,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAChC,CAAC;gBACD,cAAc,GAAG,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;gBAClE,KAAK,EAAE,CAAA;YACT,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,iBAAiB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;YAC1D,CAAC;YACD,SAAQ;QACV,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAED,mBAAmB,EAAE,CAAA;IACrB,OAAO,YAAY,CAAA;AACrB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,WAAwB,EACxB,SAAkB;IAElB,IAAI,QAAQ,CAAA;IACZ,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAA,qBAAU,EAAC;YAC1B,YAAY,EAAE;gBACZ;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,uCAA4B;iBACnC;aACF;YACD,UAAU,EAAE,IAAA,qCAA0B,EAAC,OAAO,CAAC;YAC/C,MAAM,EAAE,WAAW;YACnB,cAAc,EAAE,KAAK;YACrB,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,MAAM,GAAG,CACb,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;QAC1C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO;QAC1B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI;gBAC5D,MAAM,CAAC;YACT,CAAC,CAAC,MAAM,CACb,CAAC,IAAI,EAAE,CAAA;IAER,IAAI,MAAM,CAAC,UAAU,CAAC,wBAAc,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,MAAM,KAAK,4BAA4B,EAAE,CAAC;QAC5C,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAA;IAC3C,CAAC;IAED,0CAA0C;IAC1C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,wBAAwB,EAAE,KAAK;SAChC,CAAA;IACH,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,wBAAwB,EAAE,KAAK;SAChC,CAAA;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,MAAM;QACrB,wBAAwB,EAAE,KAAK;KAChC,CAAA;AACH,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAkB;IACrD,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,GAAG;IACH,GAAG;IACH,IAAI;CACL,CAAC,CAAA;AAEF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS;IAC/C,GAAG,qBAAqB;IACxB,GAAG;IACH,GAAG;CACJ,CAAC,CAAA;AAEF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS;IAC/C,GAAG;IACH,GAAG;CACJ,CAAC,CAAA;AAEF,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAS;IAClD,GAAG;IACH,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;CACN,CAAC,CAAA;AAEF,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAe;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IACnE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,WAAW,EAAE,CAAA;AACnF,CAAC"}

package/dist/util/fetchSafety.d.ts

@@ -1,11 +1,18 @@
 /**
- * fetch_url 的确定性 SSRF 兜底：命中环回 / 链路本地（含云元数据 169.254.169.254）/
- * 内网 / 未指定地址 / 本地主机名，一律按危险处理，不交给模型。URL 解析失败同样按危险处理。
+ * fetch_url 目标主机分级，供 PermissionManager 裁决：
+ *  blocked  → 链路本地（含云元数据 169.254.169.254）/ 已知元数据主机名 / 未指定地址 / URL 解析失败：
+ *             确定性转人工，不交模型，不提供「永久允许该域名」
+ *  private  → 内网段（10/8、172.16/12、192.168/16、CGNAT、ULA）：转人工，但允许保存域名授权——
+ *             公司内网 API 是合法高频目标，不给 allow 会让同一域名每次都问
+ *  loopback → 环回（localhost、127/8、::1）：用户自己机器上的服务，与 run_shell 里 curl localhost 对齐，
+ *             AutoRun 交模型按请求内容判断；不提供永久授权（「记住 localhost」范围过宽）
+ *  public   → 其余，走正常流程
  *
  * 说明：new URL() (WHATWG) 已把 十进制/十六进制/八进制/短写 IPv4（如 2130706433、0x7f000001、
  * 127.1）规范化为点分十进制，故无需额外处理；这里额外补：
  *  - IPv4-mapped IPv6（::ffff:7f00:1 等）
  *  - 末尾点 FQDN（localhost. 等）
  */
-export declare function isBlockedFetchHost(url: string): boolean;
+export type FetchHostClass = 'public' | 'loopback' | 'private' | 'blocked';
+export declare function classifyFetchHost(url: string): FetchHostClass;
 //# sourceMappingURL=fetchSafety.d.ts.map

package/dist/util/fetchSafety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetchSafety.d.ts","sourceRoot":"","sources":["../../src/util/fetchSafety.ts"],"names":[],"mappings":"AAoBA;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA2CvD"}
+{"version":3,"file":"fetchSafety.d.ts","sourceRoot":"","sources":["../../src/util/fetchSafety.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;AAE1E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CA4C7D"}

package/dist/util/fetchSafety.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isBlockedFetchHost = isBlockedFetchHost;
+exports.classifyFetchHost = classifyFetchHost;
 /**
  * IPv4-mapped IPv6 → 内嵌 IPv4 点分形式。
  * Node 的 URL 会把 ::ffff:127.0.0.1 规范化为 ::ffff:7f00:1，两种写法都要还原。
@@ -22,30 +22,21 @@ function extractMappedIpv4(host) {
     }
     return null;
 }
-/**
- * fetch_url 的确定性 SSRF 兜底：命中环回 / 链路本地（含云元数据 169.254.169.254）/
- * 内网 / 未指定地址 / 本地主机名，一律按危险处理，不交给模型。URL 解析失败同样按危险处理。
- *
- * 说明：new URL() (WHATWG) 已把 十进制/十六进制/八进制/短写 IPv4（如 2130706433、0x7f000001、
- * 127.1）规范化为点分十进制，故无需额外处理；这里额外补：
- *  - IPv4-mapped IPv6（::ffff:7f00:1 等）
- *  - 末尾点 FQDN（localhost. 等）
- */
-function isBlockedFetchHost(url) {
+function classifyFetchHost(url) {
     let hostname;
     try {
         hostname = new URL(url).hostname.toLowerCase();
     }
     catch {
-        return true;
+        return 'blocked';
     }
     // 去掉 IPv6 字面量方括号，并去掉末尾点（FQDN 绝对形式，如 localhost.）
     let host = hostname.replace(/^\[|\]$/g, '').replace(/\.$/, '');
     // 本地主机名 / 已知云元数据主机名
     if (host === 'localhost' || host.endsWith('.localhost'))
-        return true;
+        return 'loopback';
     if (host === 'metadata.google.internal')
-        return true;
+        return 'blocked';
     // IPv4-mapped IPv6 → 取出内嵌 IPv4，按下方 IPv4 规则判定
     const mapped = extractMappedIpv4(host);
     if (mapped)
@@ -56,31 +47,33 @@ function isBlockedFetchHost(url) {
         const a = Number(ipv4[1]);
         const b = Number(ipv4[2]);
         if (a === 0)
-            return true; // 0.0.0.0/8 未指定
-        if (a === 10)
-            return true; // 10.0.0.0/8 私网
+            return 'blocked'; // 0.0.0.0/8 未指定
         if (a === 127)
-            return true; // 127.0.0.0/8 环回
+            return 'loopback'; // 127.0.0.0/8 环回
         if (a === 169 && b === 254)
-            return true; // 169.254.0.0/16 链路本地（含元数据）
+            return 'blocked'; // 169.254.0.0/16 链路本地（含元数据）
+        if (a === 10)
+            return 'private'; // 10.0.0.0/8 私网
         if (a === 172 && b >= 16 && b <= 31)
-            return true; // 172.16.0.0/12 私网
+            return 'private'; // 172.16.0.0/12 私网
         if (a === 192 && b === 168)
-            return true; // 192.168.0.0/16 私网
+            return 'private'; // 192.168.0.0/16 私网
         if (a === 100 && b >= 64 && b <= 127)
-            return true; // 100.64.0.0/10 CGNAT
-        return false;
+            return 'private'; // 100.64.0.0/10 CGNAT
+        return 'public';
     }
     // IPv6 字面量：环回 / 未指定 / ULA(fc00::/7) / 链路本地(fe80::/10)
     if (host.includes(':')) {
-        if (host === '::1' || host === '::')
-            return true;
+        if (host === '::1')
+            return 'loopback';
+        if (host === '::')
+            return 'blocked';
         if (/^f[cd]/.test(host))
-            return true; // fc00::/7
+            return 'private'; // fc00::/7
         if (/^fe[89ab]/.test(host))
-            return true; // fe80::/10
-        return false;
+            return 'blocked'; // fe80::/10
+        return 'public';
     }
-    return false;
+    return 'public';
 }
 //# sourceMappingURL=fetchSafety.js.map

package/dist/util/fetchSafety.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchSafety.js","sourceRoot":"","sources":["../../src/util/fetchSafety.ts"],"names":[],"mappings":";;AA6BA,gDA2CC;AAxED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACtC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IAClB,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC5D,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;QAChC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;QAChC,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,CAAA;IACxE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAE9D,oBAAoB;IACpB,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,IAAI,IAAI,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAA;IAEpD,6CAA6C;IAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACtC,IAAI,MAAM;QAAE,IAAI,GAAG,MAAM,CAAA;IAEzB,WAAW;IACX,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACvE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA,CAA0B,gBAAgB;QAClE,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAA,CAAyB,gBAAgB;QAClE,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAwB,iBAAiB;QACnE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAW,4BAA4B;QAC9E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA,CAAE,mBAAmB;QACrE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAW,oBAAoB;QACtE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,sBAAsB;QACxE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,sDAAsD;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA,CAAG,WAAW;QAClD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,YAAY;QACpD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC"}
+{"version":3,"file":"fetchSafety.js","sourceRoot":"","sources":["../../src/util/fetchSafety.ts"],"names":[],"mappings":";;AAqCA,8CA4CC;AAjFD;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACtC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IAClB,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC5D,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;QAChC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;QAChC,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,EAAE,CAAA;IACxE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAmBD,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAE9D,oBAAoB;IACpB,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAA;IAC1E,IAAI,IAAI,KAAK,0BAA0B;QAAE,OAAO,SAAS,CAAA;IAEzD,6CAA6C;IAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACtC,IAAI,MAAM;QAAE,IAAI,GAAG,MAAM,CAAA;IAEzB,WAAW;IACX,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACvE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA,CAA0B,gBAAgB;QACvE,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,UAAU,CAAA,CAAuB,iBAAiB;QACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,SAAS,CAAA,CAAW,4BAA4B;QACnF,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,SAAS,CAAA,CAAyB,gBAAgB;QACvE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAA,CAAE,mBAAmB;QAC1E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,SAAS,CAAA,CAAW,oBAAoB;QAC3E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,SAAS,CAAA,CAAC,sBAAsB;QAC7E,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,sDAAsD;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,UAAU,CAAA;QACrC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA,CAAE,WAAW;QACtD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA,CAAC,YAAY;QACzD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/util/imageCompress.d.ts

@@ -1,3 +1,19 @@
+import type { InputImageAttachment } from '../types/message';
+/**
+ * 规范化用户输入的图片附件：过滤非法 media_type，单张超限则压缩
+ * 返回干净可直接转 image content block 的附件数组；
+ * 正常轮次（SemaEngine.processQuery）与轮内注入（Conversation 注入路径）共用同一套规则
+ */
+export declare function normalizeImageAttachments(attachments?: InputImageAttachment[]): Promise<InputImageAttachment[]>;
+/** 图片附件转 API image content block（正常轮次与注入路径共用） */
+export declare function toImageContentBlocks(attachments?: InputImageAttachment[]): Array<{
+    type: 'image';
+    source: {
+        type: 'base64';
+        media_type: InputImageAttachment['media_type'];
+        data: string;
+    };
+}>;
 /**
  * 压缩图片至目标大小以内，尽可能保留质量
  *

package/dist/util/imageCompress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"imageCompress.d.ts","sourceRoot":"","sources":["../../src/util/imageCompress.ts"],"names":[],"mappings":"AAOA;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,EAClE,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,CAAA;CAAE,CAAC,CA6HhG"}
+{"version":3,"file":"imageCompress.d.ts","sourceRoot":"","sources":["../../src/util/imageCompress.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAW5D;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,WAAW,CAAC,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAgCrH;AAED,iDAAiD;AACjD,wBAAgB,oBAAoB,CAAC,WAAW,CAAC,EAAE,oBAAoB,EAAE,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAK7L;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,EAClE,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,CAAA;CAAE,CAAC,CA6HhG"}

package/dist/util/imageCompress.js

@@ -3,12 +3,65 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeImageAttachments = normalizeImageAttachments;
+exports.toImageContentBlocks = toImageContentBlocks;
 exports.compressImage = compressImage;
 const log_1 = require("./log");
 const jimp_1 = __importDefault(require("jimp"));
 const MIN_QUALITY = 20;
 const MIN_DIMENSION = 100;
 const MAX_DIMENSION_HARD_LIMIT = 4096;
+// 粘贴图片单张体积上限，超出则压缩（与 ViewFile 的 MAX_OUTPUT_BYTES 保持一致）
+const MAX_IMAGE_BYTES = 2 * 1024 * 1024;
+// 支持的图片 media_type 白名单
+const SUPPORTED_IMAGE_MEDIA_TYPES = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
+/**
+ * 规范化用户输入的图片附件：过滤非法 media_type，单张超限则压缩
+ * 返回干净可直接转 image content block 的附件数组；
+ * 正常轮次（SemaEngine.processQuery）与轮内注入（Conversation 注入路径）共用同一套规则
+ */
+async function normalizeImageAttachments(attachments) {
+    if (!attachments || attachments.length === 0)
+        return [];
+    const result = [];
+    for (const att of attachments) {
+        if (!SUPPORTED_IMAGE_MEDIA_TYPES.includes(att.media_type)) {
+            (0, log_1.logWarn)(`忽略不支持的图片类型: ${att.media_type}`);
+            continue;
+        }
+        try {
+            const buffer = Buffer.from(att.data, 'base64');
+            if (buffer.length > MAX_IMAGE_BYTES) {
+                if (att.media_type === 'image/gif') {
+                    (0, log_1.logWarn)(`忽略超出上限且不支持压缩的 GIF 附件: ${Math.round(buffer.length / 1024)}KB`);
+                    continue;
+                }
+                (0, log_1.logInfo)(`图片附件 ${Math.round(buffer.length / 1024)}KB 超过上限 ${Math.round(MAX_IMAGE_BYTES / 1024)}KB，压缩中...`);
+                const compressed = await compressImage(buffer, att.media_type, MAX_IMAGE_BYTES);
+                const compressedBytes = Math.ceil(compressed.data.length * 3 / 4);
+                if (compressedBytes > MAX_IMAGE_BYTES) {
+                    (0, log_1.logWarn)(`忽略压缩后仍超出上限的图片附件: ${Math.round(compressedBytes / 1024)}KB`);
+                    continue;
+                }
+                result.push({ type: 'image', data: compressed.data, media_type: compressed.media_type });
+            }
+            else {
+                result.push(att);
+            }
+        }
+        catch (e) {
+            (0, log_1.logWarn)(`处理图片附件失败，已忽略: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    }
+    return result;
+}
+/** 图片附件转 API image content block（正常轮次与注入路径共用） */
+function toImageContentBlocks(attachments) {
+    return (attachments ?? []).map(a => ({
+        type: 'image',
+        source: { type: 'base64', media_type: a.media_type, data: a.data },
+    }));
+}
 /**
  * 压缩图片至目标大小以内，尽可能保留质量
  *

package/dist/util/imageCompress.js.map

@@ -1 +1 @@
-{"version":3,"file":"imageCompress.js","sourceRoot":"","sources":["../../src/util/imageCompress.ts"],"names":[],"mappings":";;;;;AAgBA,sCAiIC;AAjJD,+BAAyC;AACzC,gDAAuB;AAEvB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,aAAa,GAAG,GAAG,CAAA;AACzB,MAAM,wBAAwB,GAAG,IAAI,CAAA;AAErC;;;;;;;;GAQG;AACI,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,SAAkE,EAClE,YAAoB;IAEpB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAA;IAClC,IAAA,cAAQ,EAAC,2BAA2B,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;IAEpH,mBAAmB;IACnB,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAA,aAAO,EAAC,kEAAkE,CAAC,CAAA;QAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IACnE,CAAC;IAED,qBAAqB;IACrB,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;QACjC,IAAA,cAAQ,EAAC,yDAAyD,CAAC,CAAA;QACnE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,cAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;IACtC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;IACxC,MAAM,eAAe,GAAG,YAAY,CAAA;IAEpC,kCAAkC;IAClC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAS,EAAE,CAAS,EAAE,CAAS,EAAmB,EAAE,CAC1E,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,cAAI,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,cAAI,CAAC,SAAS,CAAC,CAAA;IAE5F,yDAAyD;IACzD,gCAAgC;IAChC,6CAA6C;IAC7C,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAClC,wBAAwB,EACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAChD,CAAA;IAED,IAAI,SAAS,GAAG,aAAa,CAAA;IAC7B,IAAI,UAAU,GAAG,cAAc,CAAA;IAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;IACvD,IAAI,OAAO,GAAG,mBAAmB,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,mBAAmB,GAAG,OAAO,CAAA;QAC9C,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAA;QAChD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,QAAQ,CAAC,CAAA;QAClD,IAAA,cAAQ,EACN,4BAA4B,aAAa,IAAI,cAAc,MAAM,SAAS,IAAI,UAAU,WAAW,mBAAmB,KAAK,CAC5H,CAAA;IACH,CAAC;IAED,kDAAkD;IAClD,wBAAwB;IACxB,MAAM,SAAS,GAAG,EAAE,CAAA;IACpB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;IACjE,IAAI,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;QACpC,IAAA,cAAQ,EAAC,0BAA0B,SAAS,aAAa,CAAC,CAAA;QAC1D,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;IAC3E,CAAC;IAED,IAAI,EAAE,GAAG,WAAW,CAAA;IACpB,IAAI,EAAE,GAAG,SAAS,GAAG,CAAC,CAAA,CAAC,qCAAqC;IAC5D,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,WAAW,GAAG,EAAE,CAAA;IAEpB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;QACtD,IAAA,cAAQ,EAAC,qCAAqC,GAAG,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;QAE7F,IAAI,GAAG,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YAC/B,cAAc,GAAG,GAAG,CAAA;YACpB,WAAW,GAAG,GAAG,CAAA;YACjB,EAAE,GAAG,GAAG,GAAG,CAAC,CAAA,CAAC,cAAc;QAC7B,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,GAAG,GAAG,CAAC,CAAA,CAAC,UAAU;QACzB,CAAC;IACH,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAA;QAC1E,IAAA,cAAQ,EACN,+BAA+B,WAAW,UAAU,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAC9G,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;IACjF,CAAC;IAED,oDAAoD;IACpD,IAAA,cAAQ,EAAC,6DAA6D,CAAC,CAAA;IAEvE,sDAAsD;IACtD,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,IAAI,YAAY,GAAkB,IAAI,CAAA;IACtC,IAAI,SAAS,GAAG,OAAO,CAAA;IAEvB,gCAAgC;IAChC,OAAO,OAAO,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAA;QACpE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;QAC7C,IAAA,cAAQ,EACN,wCAAwC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAClH,CAAA;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YAC/B,YAAY,GAAG,GAAG,CAAA;YAClB,SAAS,GAAG,QAAQ,CAAA;YACpB,OAAO,GAAG,QAAQ,CAAA,CAAC,cAAc;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,QAAQ,CAAA,CAAC,UAAU;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAA;QACxE,IAAA,cAAQ,EACN,6BAA6B,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CACnH,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;IAC/E,CAAC;IAED,4CAA4C;IAC5C,IAAA,aAAO,EAAC,sEAAsE,CAAC,CAAA;IAC/E,MAAM,OAAO,GAAG,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IACtD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AAC3E,CAAC"}
+{"version":3,"file":"imageCompress.js","sourceRoot":"","sources":["../../src/util/imageCompress.ts"],"names":[],"mappings":";;;;;AAkBA,8DAgCC;AAGD,oDAKC;AAWD,sCAiIC;AAtMD,+BAAkD;AAClD,gDAAuB;AAGvB,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,aAAa,GAAG,GAAG,CAAA;AACzB,MAAM,wBAAwB,GAAG,IAAI,CAAA;AAErC,uDAAuD;AACvD,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACvC,uBAAuB;AACvB,MAAM,2BAA2B,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAU,CAAA;AAEnG;;;;GAIG;AACI,KAAK,UAAU,yBAAyB,CAAC,WAAoC;IAClF,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEvD,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAwD,CAAC,EAAE,CAAC;YACxG,IAAA,aAAO,EAAC,eAAe,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;YACxC,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBACpC,IAAI,GAAG,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;oBACnC,IAAA,aAAO,EAAC,yBAAyB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;oBACtE,SAAQ;gBACV,CAAC;gBACD,IAAA,aAAO,EAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,CAAA;gBACzG,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;gBAC/E,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;gBACjE,IAAI,eAAe,GAAG,eAAe,EAAE,CAAC;oBACtC,IAAA,aAAO,EAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;oBACnE,SAAQ;gBACV,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;YAC1F,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAA,aAAO,EAAC,iBAAiB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,iDAAiD;AACjD,SAAgB,oBAAoB,CAAC,WAAoC;IACvE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,EAAE,OAAgB;QACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KAC5E,CAAC,CAAC,CAAA;AACL,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,SAAkE,EAClE,YAAoB;IAEpB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAA;IAClC,IAAA,cAAQ,EAAC,2BAA2B,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;IAEpH,mBAAmB;IACnB,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAA,aAAO,EAAC,kEAAkE,CAAC,CAAA;QAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IACnE,CAAC;IAED,qBAAqB;IACrB,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;QACjC,IAAA,cAAQ,EAAC,yDAAyD,CAAC,CAAA;QACnE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,cAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;IACtC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;IACxC,MAAM,eAAe,GAAG,YAAY,CAAA;IAEpC,kCAAkC;IAClC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAS,EAAE,CAAS,EAAE,CAAS,EAAmB,EAAE,CAC1E,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,cAAI,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,cAAI,CAAC,SAAS,CAAC,CAAA;IAE5F,yDAAyD;IACzD,gCAAgC;IAChC,6CAA6C;IAC7C,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAClC,wBAAwB,EACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAChD,CAAA;IAED,IAAI,SAAS,GAAG,aAAa,CAAA;IAC7B,IAAI,UAAU,GAAG,cAAc,CAAA;IAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;IACvD,IAAI,OAAO,GAAG,mBAAmB,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,mBAAmB,GAAG,OAAO,CAAA;QAC9C,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAA;QAChD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,QAAQ,CAAC,CAAA;QAClD,IAAA,cAAQ,EACN,4BAA4B,aAAa,IAAI,cAAc,MAAM,SAAS,IAAI,UAAU,WAAW,mBAAmB,KAAK,CAC5H,CAAA;IACH,CAAC;IAED,kDAAkD;IAClD,wBAAwB;IACxB,MAAM,SAAS,GAAG,EAAE,CAAA;IACpB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;IACjE,IAAI,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;QACpC,IAAA,cAAQ,EAAC,0BAA0B,SAAS,aAAa,CAAC,CAAA;QAC1D,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;IAC3E,CAAC;IAED,IAAI,EAAE,GAAG,WAAW,CAAA;IACpB,IAAI,EAAE,GAAG,SAAS,GAAG,CAAC,CAAA,CAAC,qCAAqC;IAC5D,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,WAAW,GAAG,EAAE,CAAA;IAEpB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;QACtD,IAAA,cAAQ,EAAC,qCAAqC,GAAG,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;QAE7F,IAAI,GAAG,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YAC/B,cAAc,GAAG,GAAG,CAAA;YACpB,WAAW,GAAG,GAAG,CAAA;YACjB,EAAE,GAAG,GAAG,GAAG,CAAC,CAAA,CAAC,cAAc;QAC7B,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,GAAG,GAAG,CAAC,CAAA,CAAC,UAAU;QACzB,CAAC;IACH,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAA;QAC1E,IAAA,cAAQ,EACN,+BAA+B,WAAW,UAAU,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAC9G,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;IACjF,CAAC;IAED,oDAAoD;IACpD,IAAA,cAAQ,EAAC,6DAA6D,CAAC,CAAA;IAEvE,sDAAsD;IACtD,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,IAAI,YAAY,GAAkB,IAAI,CAAA;IACtC,IAAI,SAAS,GAAG,OAAO,CAAA;IAEvB,gCAAgC;IAChC,OAAO,OAAO,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAA;QACpE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;QAC7C,IAAA,cAAQ,EACN,wCAAwC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAClH,CAAA;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YAC/B,YAAY,GAAG,GAAG,CAAA;YAClB,SAAS,GAAG,QAAQ,CAAA;YACpB,OAAO,GAAG,QAAQ,CAAA,CAAC,cAAc;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,QAAQ,CAAA,CAAC,UAAU;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAA;QACxE,IAAA,cAAQ,EACN,6BAA6B,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CACnH,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;IAC/E,CAAC;IAED,4CAA4C;IAC5C,IAAA,aAAO,EAAC,sEAAsE,CAAC,CAAA;IAC/E,MAAM,OAAO,GAAG,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IACtD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AAC3E,CAAC"}

package/dist/util/readPathClass.d.ts

@@ -0,0 +1,16 @@
+/**
+ * 文件读取位置分类，供 PermissionManager 裁决：
+ *  - trusted：项目内、系统临时目录、SEMA_ROOT 受信内容目录 → 静默放行
+ *  - home：当前用户可自由支配或只读无风险的位置（用户目录内；POSIX 下的 /usr /opt 等公共系统目录；
+ *          Windows 下还含系统目录之外的本地盘路径）→ Ask 询问并可按父目录授权，AutoEdit / AutoRun 自动放行
+ *  - restricted：敏感凭据文件、其他用户目录、系统目录等其余位置 → 各档位均转人工，只许单次同意
+ */
+export type ReadPathClass = 'trusted' | 'home' | 'restricted';
+export declare const TEMP_BASE_PATHS: string[];
+/**
+ * SEMA_ROOT/attachments：宿主（webui）转存的粘贴文本与模型生成的可视化 html 等附件，目录由宿主退场清理。
+ * 读取归 trusted（已在 TRUSTED_SEMA_SUBDIRS），编辑也放行——PermissionManager 的文件编辑硬规则与 isTempFile 并列使用。
+ */
+export declare function isAttachmentPath(filePath: string): boolean;
+export declare function classifyReadPath(filePath: string): ReadPathClass;
+//# sourceMappingURL=readPathClass.d.ts.map

package/dist/util/readPathClass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPathClass.d.ts","sourceRoot":"","sources":["../../src/util/readPathClass.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,CAAA;AAK7D,eAAO,MAAM,eAAe,UAI3B,CAAA;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI1D;AAwED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAmBhE"}

package/dist/util/readPathClass.js

@@ -0,0 +1,121 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TEMP_BASE_PATHS = void 0;
+exports.isAttachmentPath = isAttachmentPath;
+exports.classifyReadPath = classifyReadPath;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const file_1 = require("./file");
+const cwd_1 = require("./cwd");
+const savePath_1 = require("./savePath");
+const platform_1 = require("./platform");
+// 系统临时目录：这些目录树下的文件视为临时文件。
+// tmpdir() 已涵盖 $TMPDIR/$TEMP/$TMP；/var/folders 覆盖 macOS 临时/缓存区。
+// POSIX 字面路径仅在非 Windows 生效：Windows 上 '/tmp' 会被解析成当前盘的 \tmp（如 D:\tmp）而被误信任。
+exports.TEMP_BASE_PATHS = [
+    (0, node_os_1.tmpdir)(),
+    ...(platform_1.IS_WIN ? [] : ['/tmp', '/var/tmp']),
+    ...(platform_1.IS_MAC ? ['/var/folders'] : []),
+];
+// SEMA_ROOT 下的受信内容子目录：全局 skill/命令/agent/插件/hooks 均为用户自行安装的内容，读取静默放行。
+// 注意：豁免仅覆盖读取，hooks 脚本会被执行，写入仍走文件编辑权限转人工（attachments 例外，见 isAttachmentPath）。
+const TRUSTED_SEMA_SUBDIRS = ['skills', 'commands', 'agents', 'plugins', 'hooks', 'attachments'];
+/**
+ * SEMA_ROOT/attachments：宿主（webui）转存的粘贴文本与模型生成的可视化 html 等附件，目录由宿主退场清理。
+ * 读取归 trusted（已在 TRUSTED_SEMA_SUBDIRS），编辑也放行——PermissionManager 的文件编辑硬规则与 isTempFile 并列使用。
+ */
+function isAttachmentPath(filePath) {
+    const abs = (0, file_1.canonicalizeFilePath)(filePath);
+    const dir = (0, node_path_1.join)((0, savePath_1.getSemaRootDir)(), 'attachments');
+    return isInside(abs, dir) || isInsideAnyReal(resolveRealPath(abs), [dir]);
+}
+// 敏感凭据（相对用户目录，三平台同名）：只收「内容即明文凭据」的条目，刻意保持精简。
+// _netrc 为 .netrc 的 Windows 写法。
+const SENSITIVE_HOME_ENTRIES = ['.ssh', '.aws', '.npmrc', '.netrc', '_netrc', '.git-credentials'];
+// POSIX 下只读无风险的公共系统目录：系统头文件、全局安装的包/工具源码、应用包。读这些位置是
+// 查依赖实现的高频动作，不含用户凭据，归入 home 档（Ask 按目录授权、Auto 档静默放行）。
+// 刻意不收 /etc /var /root /home /Users（配置、日志、其他用户）——仍归 restricted。
+const PUBLIC_SYSTEM_READ_DIRS = platform_1.IS_WIN ? [] : [
+    '/usr', '/opt', '/bin', '/sbin', '/lib', '/lib64', '/nix', '/snap',
+    ...(platform_1.IS_MAC ? ['/System', '/Applications', '/Library'] : []),
+];
+// 公共目录里的例外：钥匙串虽是加密二进制，仍属凭据存放位置
+const PUBLIC_SYSTEM_READ_EXCLUDES = platform_1.IS_MAC ? ['/Library/Keychains'] : [];
+function isInside(child, root) {
+    const rel = (0, node_path_1.relative)((0, platform_1.normalizeCmpPath)(root), (0, platform_1.normalizeCmpPath)(child));
+    if (!rel)
+        return true;
+    return rel !== '..' && !rel.startsWith(`..${node_path_1.sep}`) && !(0, node_path_1.isAbsolute)(rel);
+}
+/**
+ * 解析符号链接得到真实路径（macOS 的 /tmp → /private/tmp、Windows 的 8.3 短文件名等均在此归一）。
+ * 路径不存在时解析最近一层存在的上级目录，再拼回剩余部分；完全无法解析则原样返回。
+ */
+function resolveRealPath(absPath) {
+    let current = absPath;
+    const tail = [];
+    for (;;) {
+        try {
+            const real = node_fs_1.realpathSync.native(current);
+            return tail.length ? (0, node_path_1.join)(real, ...tail) : real;
+        }
+        catch {
+            const parent = (0, node_path_1.dirname)(current);
+            if (parent === current)
+                return absPath;
+            tail.unshift((0, node_path_1.basename)(current));
+            current = parent;
+        }
+    }
+}
+function isInsideAnyReal(real, roots) {
+    return roots.some(root => isInside(real, resolveRealPath(root)));
+}
+// 敏感判定同时看字面路径与真实路径，任一命中即敏感（取严）
+function isSensitivePath(abs, real) {
+    const roots = [
+        ...SENSITIVE_HOME_ENTRIES.map(entry => (0, node_path_1.join)((0, node_os_1.homedir)(), entry)),
+        (0, savePath_1.getModelConfigFilePath)(),
+        (0, node_path_1.join)((0, savePath_1.getSemaRootDir)(), '.mcp.json'),
+    ];
+    return roots.some(root => isInside(abs, root)) || isInsideAnyReal(real, roots);
+}
+// Windows 下明确不属于当前用户的位置：系统目录、其他用户目录、网络路径。
+// 目录取自环境变量而非写死盘符；其余本地盘路径（D:\work、C:\work 等）视为用户可自由支配。
+function isWindowsRestricted(real) {
+    if (/^\\\\[^?.]/.test(real))
+        return true;
+    const env = process.env;
+    const systemRoots = [
+        env.SystemRoot,
+        env.ProgramFiles,
+        env['ProgramFiles(x86)'],
+        env.ProgramW6432,
+        env.ProgramData,
+        (0, node_path_1.dirname)((0, node_os_1.homedir)()),
+    ].filter((p) => !!p);
+    return isInsideAnyReal(real, systemRoots);
+}
+function classifyReadPath(filePath) {
+    const abs = (0, file_1.canonicalizeFilePath)(filePath);
+    const real = resolveRealPath(abs);
+    // 敏感判定排最前：在用户目录下启动（项目根 = ~）或授权过 ~ 时，凭据文件也不会被放行
+    if (isSensitivePath(abs, real))
+        return 'restricted';
+    // 项目与临时目录只认真实路径：项目内指向外部的符号链接按其真实目标归类
+    if (isInsideAnyReal(real, [(0, cwd_1.readInitialCwd)(), ...exports.TEMP_BASE_PATHS]))
+        return 'trusted';
+    // 受信 SEMA 内容由用户自行安装，链接进来的 skill/插件目录同样受信，故字面与真实路径任一命中即可
+    const trustedSemaDirs = TRUSTED_SEMA_SUBDIRS.map(sub => (0, node_path_1.join)((0, savePath_1.getSemaRootDir)(), sub));
+    if (trustedSemaDirs.some(dir => isInside(abs, dir)) || isInsideAnyReal(real, trustedSemaDirs))
+        return 'trusted';
+    if (isInsideAnyReal(real, [(0, node_os_1.homedir)()]))
+        return 'home';
+    if (platform_1.IS_WIN)
+        return isWindowsRestricted(real) ? 'restricted' : 'home';
+    if (isInsideAnyReal(real, PUBLIC_SYSTEM_READ_DIRS) && !isInsideAnyReal(real, PUBLIC_SYSTEM_READ_EXCLUDES))
+        return 'home';
+    return 'restricted';
+}
+//# sourceMappingURL=readPathClass.js.map

package/dist/util/readPathClass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPathClass.js","sourceRoot":"","sources":["../../src/util/readPathClass.ts"],"names":[],"mappings":";;;AAkCA,4CAIC;AAwED,4CAmBC;AAjID,qCAAsC;AACtC,qCAAyC;AACzC,yCAA8E;AAC9E,iCAA6C;AAC7C,+BAAsC;AACtC,yCAAmE;AACnE,yCAA6D;AAW7D,0BAA0B;AAC1B,gEAAgE;AAChE,2EAA2E;AAC9D,QAAA,eAAe,GAAG;IAC7B,IAAA,gBAAM,GAAE;IACR,GAAG,CAAC,iBAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,GAAG,CAAC,iBAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;CACpC,CAAA;AAED,qEAAqE;AACrE,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;AAEhG;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,IAAA,2BAAoB,EAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,IAAA,yBAAc,GAAE,EAAE,aAAa,CAAC,CAAA;IACjD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,4CAA4C;AAC5C,gCAAgC;AAChC,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAA;AAEjG,mDAAmD;AACnD,qDAAqD;AACrD,gEAAgE;AAChE,MAAM,uBAAuB,GAAG,iBAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;IAClE,GAAG,CAAC,iBAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5D,CAAA;AACD,+BAA+B;AAC/B,MAAM,2BAA2B,GAAG,iBAAM,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAExE,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,MAAM,GAAG,GAAG,IAAA,oBAAQ,EAAC,IAAA,2BAAgB,EAAC,IAAI,CAAC,EAAE,IAAA,2BAAgB,EAAC,KAAK,CAAC,CAAC,CAAA;IACrE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC,IAAI,CAAC,IAAA,sBAAU,EAAC,GAAG,CAAC,CAAA;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,GAAG,OAAO,CAAA;IACrB,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,sBAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,CAAA;YAC/B,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAA;YACtC,IAAI,CAAC,OAAO,CAAC,IAAA,oBAAQ,EAAC,OAAO,CAAC,CAAC,CAAA;YAC/B,OAAO,GAAG,MAAM,CAAA;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAe;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,+BAA+B;AAC/B,SAAS,eAAe,CAAC,GAAW,EAAE,IAAY;IAChD,MAAM,KAAK,GAAG;QACZ,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAA,iCAAsB,GAAE;QACxB,IAAA,gBAAI,EAAC,IAAA,yBAAc,GAAE,EAAE,WAAW,CAAC;KACpC,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAChF,CAAC;AAED,0CAA0C;AAC1C,sDAAsD;AACtD,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;IACvB,MAAM,WAAW,GAAG;QAClB,GAAG,CAAC,UAAU;QACd,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,mBAAmB,CAAC;QACxB,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,WAAW;QACf,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,CAAC;KACnB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjC,OAAO,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;AAC3C,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,IAAA,2BAAoB,EAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IAEjC,+CAA+C;IAC/C,IAAI,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,OAAO,YAAY,CAAA;IAEnD,qCAAqC;IACrC,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,IAAA,oBAAc,GAAE,EAAE,GAAG,uBAAe,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnF,wDAAwD;IACxD,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAA,yBAAc,GAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IACpF,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC;QAAE,OAAO,SAAS,CAAA;IAE/G,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,IAAA,iBAAO,GAAE,CAAC,CAAC;QAAE,OAAO,MAAM,CAAA;IAErD,IAAI,iBAAM;QAAE,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAA;IACpE,IAAI,eAAe,CAAC,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,2BAA2B,CAAC;QAAE,OAAO,MAAM,CAAA;IACxH,OAAO,YAAY,CAAA;AACrB,CAAC"}

package/dist/util/secureFile.d.ts

@@ -1,3 +1,7 @@
+/**
+ * 获取文件信息，仅做与权限无关的基础校验（路径长度、存在性）。
+ * 读取位置是否允许由 PermissionManager 按 classifyReadPath 裁决，这里不做位置判断。
+ */
 export declare function safeGetFileInfo(filePath: string): {
     success: boolean;
     stats?: {

package/dist/util/secureFile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secureFile.d.ts","sourceRoot":"","sources":["../../src/util/secureFile.ts"],"names":[],"mappings":"AAkEA,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG;IACjD,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,OAAO,CAAA;QACf,WAAW,EAAE,OAAO,CAAA;QACpB,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,IAAI,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;KACZ,CAAA;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAiCA"}
+{"version":3,"file":"secureFile.d.ts","sourceRoot":"","sources":["../../src/util/secureFile.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG;IACjD,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,OAAO,CAAA;QACf,WAAW,EAAE,OAAO,CAAA;QACpB,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,IAAI,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;QACX,KAAK,EAAE,IAAI,CAAA;KACZ,CAAA;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAgCA"}

package/dist/util/secureFile.js

@@ -2,70 +2,18 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.safeGetFileInfo = safeGetFileInfo;
 const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const node_os_1 = require("node:os");
 const file_1 = require("./file");
-const cwd_1 = require("./cwd");
-const log_1 = require("./log");
-const STATIC_BASE_PATHS = [(0, node_os_1.homedir)(), '/tmp', '/var/tmp', (0, node_os_1.tmpdir)()];
-const SUSPICIOUS_PATTERNS = [
-    /\.\./,
-    /~/,
-    /\$\{/,
-    /`/,
-    /\|/,
-    /;/,
-    /&/,
-    />/,
-    /</,
-];
-function validateFilePath(filePath) {
+const MAX_PATH_LENGTH = 4096;
+/**
+ * 获取文件信息，仅做与权限无关的基础校验（路径长度、存在性）。
+ * 读取位置是否允许由 PermissionManager 按 classifyReadPath 裁决，这里不做位置判断。
+ */
+function safeGetFileInfo(filePath) {
     try {
         const normalizedPath = (0, file_1.canonicalizeFilePath)(filePath);
-        if (normalizedPath.length > 4096) {
-            return { isValid: false, normalizedPath, error: 'Path too long (max 4096 characters)' };
-        }
-        for (const pattern of SUSPICIOUS_PATTERNS) {
-            if (pattern.test(normalizedPath)) {
-                return { isValid: false, normalizedPath, error: `Path contains suspicious pattern: ${pattern}` };
-            }
-        }
-        const allowedPaths = [(0, cwd_1.readInitialCwd)(), ...STATIC_BASE_PATHS];
-        const isInAllowedPath = allowedPaths.some(basePath => {
-            const base = (0, file_1.canonicalizeFilePath)(basePath);
-            const rel = (0, node_path_1.relative)(base, normalizedPath);
-            if (!rel || rel === '')
-                return true;
-            if (rel.startsWith('..')) {
-                (0, log_1.logDebug)('[SecureFileService] path escapes base, denied');
-                return false;
-            }
-            if ((0, node_path_1.isAbsolute)(rel)) {
-                (0, log_1.logDebug)('[SecureFileService] absolute relative path, denied');
-                return false;
-            }
-            return true;
-        });
-        if (!isInAllowedPath) {
-            return { isValid: false, normalizedPath, error: 'Path is outside allowed directories' };
+        if (normalizedPath.length > MAX_PATH_LENGTH) {
+            return { success: false, error: `Path too long (max ${MAX_PATH_LENGTH} characters)` };
         }
-        return { isValid: true, normalizedPath };
-    }
-    catch (error) {
-        return {
-            isValid: false,
-            normalizedPath: filePath,
-            error: `Path validation failed: ${error instanceof Error ? error.message : String(error)}`
-        };
-    }
-}
-function safeGetFileInfo(filePath) {
-    const validation = validateFilePath(filePath);
-    if (!validation.isValid) {
-        return { success: false, error: validation.error };
-    }
-    try {
-        const normalizedPath = validation.normalizedPath;
         if (!(0, node_fs_1.existsSync)(normalizedPath)) {
             return { success: false, error: `File '${normalizedPath}' does not exist` };
         }

package/dist/util/secureFile.js.map

@@ -1 +1 @@
-{"version":3,"file":"secureFile.js","sourceRoot":"","sources":["../../src/util/secureFile.ts"],"names":[],"mappings":";;AAkEA,0CA6CC;AA/GD,qCAA8C;AAC9C,yCAAgD;AAChD,qCAAyC;AACzC,iCAA6C;AAC7C,+BAAsC;AACtC,+BAAgC;AAEhC,MAAM,iBAAiB,GAAG,CAAC,IAAA,iBAAO,GAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,CAAC,CAAA;AAEnE,MAAM,mBAAmB,GAAG;IAC1B,MAAM;IACN,GAAG;IACH,MAAM;IACN,GAAG;IACH,IAAI;IACJ,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;CACJ,CAAA;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAA,2BAAoB,EAAC,QAAQ,CAAC,CAAA;QAErD,IAAI,cAAc,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;QACzF,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,qCAAqC,OAAO,EAAE,EAAE,CAAA;YAClG,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,IAAA,oBAAc,GAAE,EAAE,GAAG,iBAAiB,CAAC,CAAA;QAE7D,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YACnD,MAAM,IAAI,GAAG,IAAA,2BAAoB,EAAC,QAAQ,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,cAAc,CAAC,CAAA;YAC1C,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAA;YACnC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,IAAA,cAAQ,EAAC,+CAA+C,CAAC,CAAA;gBACzD,OAAO,KAAK,CAAA;YACd,CAAC;YACD,IAAI,IAAA,sBAAU,EAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAA,cAAQ,EAAC,oDAAoD,CAAC,CAAA;gBAC9D,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;QACzF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,QAAQ;YACxB,KAAK,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC3F,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,QAAgB;IAa9C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC7C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAA;IACpD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,CAAA;QAEhD,IAAI,CAAC,IAAA,oBAAU,EAAC,cAAc,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,cAAc,kBAAkB,EAAE,CAAA;QAC7E,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,cAAc,CAAC,CAAA;QAEtC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC5F,CAAA;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"secureFile.js","sourceRoot":"","sources":["../../src/util/secureFile.ts"],"names":[],"mappings":";;AASA,0CA4CC;AArDD,qCAA8C;AAC9C,iCAA6C;AAE7C,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B;;;GAGG;AACH,SAAgB,eAAe,CAAC,QAAgB;IAa9C,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAA,2BAAoB,EAAC,QAAQ,CAAC,CAAA;QAErD,IAAI,cAAc,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,eAAe,cAAc,EAAE,CAAA;QACvF,CAAC;QAED,IAAI,CAAC,IAAA,oBAAU,EAAC,cAAc,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,cAAc,kBAAkB,EAAE,CAAA;QAC7E,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,cAAc,CAAC,CAAA;QAEtC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC5F,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/util/shell.d.ts

@@ -59,6 +59,7 @@ export declare class PersistentShell {
     private sendToShell;
     pwd(): string;
     setCwd(cwd: string): Promise<void>;
+    resetCwdIfOutside(root: string): Promise<boolean>;
     close(): void;
 }
 export declare const STDOUT_HEAD_TAIL_LINES = 500;

package/dist/util/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/util/shell.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAA;AA2BlE,KAAK,eAAe,GAAG;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,OAAO,CAAA;CACrB,CAAA;AAGD,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,CAAA;IAC1B,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAMnD;AAiED,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,GAAG,KAAK,CAAA;AAEvE,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,IAAI,EAAE,SAAS,CAAA;CAChB,CAAA;AA4CD,wBAAgB,mBAAmB,IAAI,aAAa,GAAG,IAAI,CAO1D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAYlE;AAED,wBAAgB,0BAA0B,IAAI,aAAa,CAE1D;AAmMD,qBAAa,eAAe;IAC1B,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,WAAW,CAAiB;IACpC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,kBAAkB,CAAiB;IAC3C,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,iBAAiB,CAAa;IACtC,OAAO,CAAC,iBAAiB,CAAa;gBAE1B,GAAG,EAAE,MAAM;IAuFvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA+B;IAGtD,MAAM,CAAC,OAAO;IAQd,MAAM,CAAC,WAAW,IAAI,eAAe;IASrC,YAAY;YA4DE,YAAY;IA0CpB,IAAI,CACR,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,EAClD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,IAAI,GAChD,OAAO,CAAC,eAAe,CAAC;IAO3B;;;OAGG;IACH,OAAO,CAAC,WAAW;YAgCL,KAAK;YA0KL,gBAAgB;IAwG9B,OAAO,CAAC,WAAW;IAcnB,GAAG,IAAI,MAAM;IAmBP,MAAM,CAAC,GAAG,EAAE,MAAM;IAkBxB,KAAK,IAAI,IAAI;CAId;AAID,eAAO,MAAM,sBAAsB,MAAM,CAAA;AACzC,eAAO,MAAM,sBAAsB,KAAK,CAAA;AASxC,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,SAAyB,EAAE,EAAE,SAAgB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO;;;EAwBvI"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/util/shell.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAA;AA2BlE,KAAK,eAAe,GAAG;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,OAAO,CAAA;CACrB,CAAA;AAGD,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,CAAA;IAC1B,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAMnD;AAiED,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,GAAG,KAAK,CAAA;AAEvE,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,IAAI,EAAE,SAAS,CAAA;CAChB,CAAA;AAqDD,wBAAgB,mBAAmB,IAAI,aAAa,GAAG,IAAI,CAO1D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAYlE;AAED,wBAAgB,0BAA0B,IAAI,aAAa,CAE1D;AAmMD,qBAAa,eAAe;IAC1B,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,WAAW,CAAiB;IACpC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,kBAAkB,CAAiB;IAC3C,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,iBAAiB,CAAa;IACtC,OAAO,CAAC,iBAAiB,CAAa;gBAE1B,GAAG,EAAE,MAAM;IAuFvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA+B;IAGtD,MAAM,CAAC,OAAO;IAQd,MAAM,CAAC,WAAW,IAAI,eAAe;IASrC,YAAY;YA4DE,YAAY;IA0CpB,IAAI,CACR,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,EAClD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,IAAI,GAChD,OAAO,CAAC,eAAe,CAAC;IAO3B;;;OAGG;IACH,OAAO,CAAC,WAAW;YAgCL,KAAK;YA0KL,gBAAgB;IAwG9B,OAAO,CAAC,WAAW;IAcnB,GAAG,IAAI,MAAM;IAmBP,MAAM,CAAC,GAAG,EAAE,MAAM;IAmBlB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA6BvD,KAAK,IAAI,IAAI;CAId;AAID,eAAO,MAAM,sBAAsB,MAAM,CAAA;AACzC,eAAO,MAAM,sBAAsB,KAAK,CAAA;AASxC,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,SAAyB,EAAE,EAAE,SAAgB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO;;;EAwBvI"}