xitto-kernel 0.2.0 → 0.3.2

package/src/packs/devops/index.js

@@ -0,0 +1,30 @@
+// devops/SRE pack — 維運自動化 agent。shell 為主 + 後台服務 + 設定檔 + 日誌搜尋 + 健康檢查。
+// 工具全由共用模組組成（fs-tools / code-nav / web-tools / bg）。
+import { createFsTools } from '../shared/fs-tools.js';
+import { createGrepTool, createGlobTool } from '../shared/code-nav.js';
+import { createHttpTool } from '../shared/web-tools.js';
+import { createBackgroundTools } from '../../kernel/bg.js';
+
+const SYSTEM_PROMPT = [
+  '你是 DevOps/SRE agent，做系統維運與自動化。準則：',
+  '- 改動前先看現況（read 設定、bash 查狀態、grep 日誌），不要盲改。',
+  '- 操作盡量「冪等」（重跑不會壞）；寫腳本記得處理錯誤與權限。',
+  '- 長時間/常駐服務（dev server、watch、daemon）用 bash_bg，再用 bash_output 看輸出。',
+  '- 部署/操作後用 http 或命令做健康檢查，確認真的好了。',
+  '- 對正式環境的破壞性操作（刪資料、重啟服務）先確認。',
+].join('\n');
+
+export function createDevopsPack({ cwd = process.cwd() } = {}) {
+  const fs = createFsTools(cwd);
+  const bg = createBackgroundTools(cwd);
+  return {
+    name: 'devops',
+    tools: () => [fs.read, fs.ls, createGlobTool(cwd), createGrepTool(cwd), fs.write, fs.edit, fs.bash, ...bg.tools, createHttpTool()],
+    systemPrompt: SYSTEM_PROMPT,
+    contextFiles: ['RUNBOOK.md', 'AGENTS.md'],
+    preToolPolicy: { check: fs.readBeforeEdit },
+    permissionPolicy: { defaultMode: 'default' },
+  };
+}
+
+export const devopsPack = createDevopsPack();

package/src/packs/general/index.js

@@ -1,16 +1,22 @@
 // general pack — 通用自主 agent。廣的 system prompt + 檔案/shell/web 工具。
 // 搭配 kernel 的 runGoal（目標循環）+ 子 agent + MCP，即為「給目標、自己做到完成」的通用 agent。
 import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'node:fs';
-import { isAbsolute, join } from 'node:path';
-import { execSync } from 'node:child_process';
+import { isAbsolute, join, extname } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { createGrepTool, createGlobTool } from '../shared/code-nav.js';
+import { createWebFetchTool, createWebSearchTool, createHttpTool } from '../shared/web-tools.js';
+
+const MIME = { '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.gif': 'image/gif', '.webp': 'image/webp' };
 
 const txt = (s) => ({ content: [{ type: 'text', text: typeof s === 'string' ? s : JSON.stringify(s) }] });
 
 const SYSTEM_PROMPT = [
   '你是通用自主 agent。給你一個目標，你用工具反覆推進直到完成：',
-  '- 可讀寫檔案、跑 shell 命令、搜尋網路（web_search）、抓網頁（web_fetch）、派子 agent 做聚焦調查。',
+  '- 可讀寫檔案、grep/glob 找東西、跑 shell、搜尋網路(web_search)、抓網頁(web_fetch)、',
+  '  串接 API(http)、讀圖(read_image)、派子 agent、用待辦(todo_write)規劃多步任務。',
   '- 先想清楚步驟再動手；每步簡述你在做什麼。',
-  '- 需要外部資料：先 web_search 找來源，再 web_fetch 讀全文，不要憑空編造。',
+  '- 需要外部資料：先 web_search 找來源，再 web_fetch 讀全文；串 API 用 http。不要憑空編造。',
+  '- 還缺的能力（瀏覽器點擊、特定服務）可由使用者掛 MCP server 補上。',
   '- 編輯既有檔案前先 read；破壞性/對外操作前確認。',
   '- 完成後明確說「已完成」並總結結果與如何驗證。',
 ].join('\n');
@@ -40,48 +46,42 @@ export function createGeneralPack({ cwd = process.cwd() } = {}) {
     execute: async (_id, { path, oldText, newText }) => { const p = abs(path); if (!existsSync(p)) return txt({ error: '檔案不存在', path }); const b = readFileSync(p, 'utf8'); if (!b.includes(oldText)) return txt({ error: 'oldText 未找到', path }); writeFileSync(p, b.replace(oldText, newText), 'utf8'); return txt({ edited: path }); },
   };
   const bash = {
-    name: 'bash', label: 'bash', description: '執行 shell 命令', mutating: true, sandboxable: true,
-    parameters: { type: 'object', properties: { command: { type: 'string' } }, required: ['command'] },
-    execute: async (_id, { command }) => { try { return txt(execSync(command, { cwd, encoding: 'utf8', timeout: 120000 }) || '(no output)'); } catch (e) { return txt({ error: e.message, stdout: e.stdout, stderr: e.stderr }); } },
-  };
-  const UA = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36';
-  const stripTags = (s) => String(s).replace(/<[^>]+>/g, '').replace(/&[a-z#0-9]+;/gi, ' ').replace(/\s+/g, ' ').trim();
-
-  const webFetch = {
-    name: 'web_fetch', label: '抓網頁', description: '抓取一個 URL 的內容並回傳純文字（HTML 去標籤、截斷）。讀某頁全文用。', readOnly: true,
-    parameters: { type: 'object', properties: { url: { type: 'string' } }, required: ['url'] },
-    execute: async (_id, { url }) => {
-      try {
-        const res = await fetch(url, { headers: { 'user-agent': UA }, signal: AbortSignal.timeout(20000) });
-        const html = await res.text();
-        const text = html
-          .replace(/<script[\s\S]*?<\/script>/gi, ' ').replace(/<style[\s\S]*?<\/style>/gi, ' ')
-          .replace(/<[^>]+>/g, ' ').replace(/&[a-z#0-9]+;/gi, ' ').replace(/\s+/g, ' ').trim().slice(0, 8000);
-        return txt({ url, status: res.status, text: text || '(空)' });
-      } catch (e) { return txt({ error: e?.message || String(e), url }); }
+    name: 'bash', label: 'bash', description: '執行 shell 命令（可選 timeout 秒數，預設 120）', mutating: true, sandboxable: true,
+    parameters: { type: 'object', properties: { command: { type: 'string' }, timeout: { type: 'number' } }, required: ['command'] },
+    execute: async (_id, { command, timeout }) => {
+      const ms = Math.min(600, Math.max(1, timeout || 120)) * 1000;
+      const r = spawnSync(command, { shell: true, cwd, encoding: 'utf8', timeout: ms, maxBuffer: 16 * 1024 * 1024 });
+      const output = ((r.stdout || '') + (r.stderr || '')).trim();
+      if (r.error) return txt({ error: r.error.message, output });
+      if (r.status !== 0) return txt({ error: `命令結束碼 ${r.status}`, output: output || '(no output)' });
+      return txt(output || '(no output)');
     },
   };
+  const webFetch = createWebFetchTool();
+  const webSearch = createWebSearchTool();
+  const http = createHttpTool();
 
-  const webSearch = {
-    name: 'web_search', label: '網路搜尋', readOnly: true,
-    description: '用關鍵字搜尋網路，回傳前幾筆結果（標題 + URL + 摘要）。先 search 找來源，再用 web_fetch 讀全文。',
-    parameters: { type: 'object', properties: { query: { type: 'string' } }, required: ['query'] },
-    execute: async (_id, { query }) => {
-      try {
-        const res = await fetch('https://html.duckduckgo.com/html/?q=' + encodeURIComponent(query), { headers: { 'user-agent': UA }, signal: AbortSignal.timeout(20000) });
-        const html = await res.text();
-        const links = [...html.matchAll(/<a[^>]*class="result__a"[^>]*href="([^"]+)"[^>]*>([\s\S]*?)<\/a>/g)];
-        const snippets = [...html.matchAll(/class="result__snippet"[^>]*>([\s\S]*?)<\/a>/g)].map((m) => stripTags(m[1]));
-        const decode = (href) => { const u = /uddg=([^&]+)/.exec(href); return u ? decodeURIComponent(u[1]) : href; };
-        const results = links.slice(0, 6).map((m, i) => ({ title: stripTags(m[2]), url: decode(m[1]), snippet: snippets[i] || '' }));
-        return txt({ query, count: results.length, results });
-      } catch (e) { return txt({ error: e?.message || String(e), query }); }
+  // 多模態：讀圖交給模型「看」（需模型支援影像輸入）
+  const readImage = {
+    name: 'read_image', label: '讀圖', readOnly: true,
+    description: '讀取一張圖片（png/jpg/gif/webp）交給模型分析（截圖/設計稿/圖表）。需模型支援影像輸入。',
+    parameters: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] },
+    execute: async (_id, { path }) => {
+      const p = abs(path);
+      if (!existsSync(p)) return txt({ error: '檔案不存在', path });
+      const mimeType = MIME[extname(p).toLowerCase()];
+      if (!mimeType) return txt({ error: '不支援的格式（png/jpg/gif/webp）', path });
+      try { return { content: [{ type: 'image', data: readFileSync(p).toString('base64'), mimeType }] }; }
+      catch (e) { return txt({ error: e.message }); }
     },
   };
 
+  const grepTool = createGrepTool(cwd);
+  const globTool = createGlobTool(cwd);
+
   return {
     name: 'general',
-    tools: () => [read, ls, write, edit, bash, webFetch, webSearch],
+    tools: () => [read, ls, globTool, grepTool, write, edit, bash, webSearch, webFetch, http, readImage],
     systemPrompt: SYSTEM_PROMPT,
     contextFiles: ['AGENTS.md', 'GENERAL.md'],
     preToolPolicy: {

package/src/packs/shared/fs-tools.js

@@ -0,0 +1,82 @@
+// 共用檔案/shell 工具（read/ls/write/edit/bash）+ read-before-edit 守衛。
+// 多個 pack（coding/devops…）共用；read 附行號、edit 唯一性檢查、bash 用 spawnSync 捕捉 stderr。
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+
+const txt = (s) => ({ content: [{ type: 'text', text: typeof s === 'string' ? s : JSON.stringify(s) }] });
+
+/**
+ * @param {string} cwd
+ * @returns {{ read, ls, write, edit, bash, readBeforeEdit }}
+ */
+export function createFsTools(cwd) {
+  const readFiles = new Set();
+  const abs = (p) => (isAbsolute(p) ? p : join(cwd, p));
+
+  const read = {
+    name: 'read', label: '讀檔', readOnly: true,
+    description: '讀取檔案內容（每行附行號）。大檔可用 offset(起始行,1-based)+limit(行數)。',
+    parameters: { type: 'object', properties: { path: { type: 'string' }, offset: { type: 'number' }, limit: { type: 'number' } }, required: ['path'] },
+    execute: async (_id, { path, offset, limit }) => {
+      const p = abs(path);
+      if (!existsSync(p)) return txt({ error: '檔案不存在', path });
+      readFiles.add(p);
+      const lines = readFileSync(p, 'utf8').split('\n');
+      const start = Math.max(0, (offset || 1) - 1);
+      const count = limit && limit > 0 ? limit : 2000;
+      const numbered = lines.slice(start, start + count).map((l, i) => `${String(start + i + 1).padStart(6)}\t${l}`).join('\n');
+      const remain = lines.length - (start + count);
+      return txt(numbered + (remain > 0 ? `\n… 還有 ${remain} 行（offset=${start + count + 1}）` : ''));
+    },
+  };
+  const ls = {
+    name: 'ls', label: '列目錄', readOnly: true, description: '列出目錄內容',
+    parameters: { type: 'object', properties: { path: { type: 'string' } } },
+    execute: async (_id, { path = '.' }) => { const p = abs(path); if (!existsSync(p)) return txt({ error: '目錄不存在', path }); return txt(readdirSync(p).map((n) => n + (statSync(join(p, n)).isDirectory() ? '/' : '')).join('\n')); },
+  };
+  const write = {
+    name: 'write', label: '寫檔', mutating: true, description: '建立或覆寫檔案',
+    parameters: { type: 'object', properties: { path: { type: 'string' }, content: { type: 'string' } }, required: ['path', 'content'] },
+    execute: async (_id, { path, content }) => { const p = abs(path); writeFileSync(p, content ?? '', 'utf8'); readFiles.add(p); return txt({ written: path, bytes: Buffer.byteLength(content ?? '') }); },
+  };
+  const edit = {
+    name: 'edit', label: '編輯', mutating: true,
+    description: '把 oldText 換成 newText。oldText 須唯一（多次出現需 replaceAll）。',
+    parameters: { type: 'object', properties: { path: { type: 'string' }, oldText: { type: 'string' }, newText: { type: 'string' }, replaceAll: { type: 'boolean' } }, required: ['path', 'oldText', 'newText'] },
+    execute: async (_id, { path, oldText, newText, replaceAll }) => {
+      const p = abs(path);
+      if (!existsSync(p)) return txt({ error: '檔案不存在', path });
+      const before = readFileSync(p, 'utf8');
+      const n = before.split(oldText).length - 1;
+      if (n === 0) return txt({ error: 'oldText 未找到（先 read 確認）', path });
+      if (n > 1 && !replaceAll) return txt({ error: `oldText 出現 ${n} 次，請更精確或設 replaceAll`, path });
+      writeFileSync(p, replaceAll ? before.split(oldText).join(newText) : before.replace(oldText, newText), 'utf8');
+      return txt({ edited: path, replaced: replaceAll ? n : 1 });
+    },
+  };
+  const bash = {
+    name: 'bash', label: 'bash', mutating: true, sandboxable: true,
+    description: '執行 shell 命令（可選 timeout 秒數，預設 120）。長時間/常駐用 bash_bg。',
+    parameters: { type: 'object', properties: { command: { type: 'string' }, timeout: { type: 'number' } }, required: ['command'] },
+    execute: async (_id, { command, timeout }) => {
+      const ms = Math.min(600, Math.max(1, timeout || 120)) * 1000;
+      const r = spawnSync(command, { shell: true, cwd, encoding: 'utf8', timeout: ms, maxBuffer: 16 * 1024 * 1024 });
+      const output = ((r.stdout || '') + (r.stderr || '')).trim();
+      if (r.error) return txt({ error: r.error.message, output });
+      if (r.status !== 0) return txt({ error: `命令結束碼 ${r.status}`, output: output || '(no output)' });
+      return txt(output || '(no output)');
+    },
+  };
+
+  // read-before-edit 守衛（給 pack 的 preToolPolicy 用）
+  const readBeforeEdit = (ctx) => {
+    if ((ctx.name === 'edit' || ctx.name === 'write') && ctx.args?.path) {
+      const p = abs(ctx.args.path);
+      if (existsSync(p) && !readFiles.has(p)) return { block: true, reason: `請先 read ${ctx.args.path} 再編輯。` };
+    }
+    return undefined;
+  };
+
+  return { read, ls, write, edit, bash, readBeforeEdit };
+}

package/src/packs/shared/web-tools.js

@@ -0,0 +1,57 @@
+// 共用 web 工具（web_search / web_fetch / http）— general 與 deep-research pack 共用。
+const txt = (s) => ({ content: [{ type: 'text', text: typeof s === 'string' ? s : JSON.stringify(s) }] });
+const UA = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36';
+const stripTags = (s) => String(s).replace(/<[^>]+>/g, '').replace(/&[a-z#0-9]+;/gi, ' ').replace(/\s+/g, ' ').trim();
+
+export function createWebFetchTool() {
+  return {
+    name: 'web_fetch', label: '抓網頁', readOnly: true,
+    description: '抓取一個 URL 的內容並回傳純文字（HTML 去標籤、截斷）。讀某頁全文用。',
+    parameters: { type: 'object', properties: { url: { type: 'string' } }, required: ['url'] },
+    execute: async (_id, { url }) => {
+      try {
+        const res = await fetch(url, { headers: { 'user-agent': UA }, signal: AbortSignal.timeout(20000) });
+        const html = await res.text();
+        const text = html
+          .replace(/<script[\s\S]*?<\/script>/gi, ' ').replace(/<style[\s\S]*?<\/style>/gi, ' ')
+          .replace(/<[^>]+>/g, ' ').replace(/&[a-z#0-9]+;/gi, ' ').replace(/\s+/g, ' ').trim().slice(0, 8000);
+        return txt({ url, status: res.status, text: text || '(空)' });
+      } catch (e) { return txt({ error: e?.message || String(e), url }); }
+    },
+  };
+}
+
+export function createWebSearchTool() {
+  return {
+    name: 'web_search', label: '網路搜尋', readOnly: true,
+    description: '用關鍵字搜尋網路，回傳前幾筆結果（標題 + URL + 摘要）。先 search 找來源，再用 web_fetch 讀全文。',
+    parameters: { type: 'object', properties: { query: { type: 'string' } }, required: ['query'] },
+    execute: async (_id, { query }) => {
+      try {
+        const res = await fetch('https://html.duckduckgo.com/html/?q=' + encodeURIComponent(query), { headers: { 'user-agent': UA }, signal: AbortSignal.timeout(20000) });
+        const html = await res.text();
+        const links = [...html.matchAll(/<a[^>]*class="result__a"[^>]*href="([^"]+)"[^>]*>([\s\S]*?)<\/a>/g)];
+        const snippets = [...html.matchAll(/class="result__snippet"[^>]*>([\s\S]*?)<\/a>/g)].map((m) => stripTags(m[1]));
+        const decode = (href) => { const u = /uddg=([^&]+)/.exec(href); return u ? decodeURIComponent(u[1]) : href; };
+        const results = links.slice(0, 6).map((m, i) => ({ title: stripTags(m[2]), url: decode(m[1]), snippet: snippets[i] || '' }));
+        return txt({ query, count: results.length, results });
+      } catch (e) { return txt({ error: e?.message || String(e), query }); }
+    },
+  };
+}
+
+export function createHttpTool() {
+  return {
+    name: 'http', label: 'HTTP 請求',
+    description: '發 HTTP 請求串接 API：method（預設 GET）、headers、body。回 status + headers + body（截斷）。',
+    parameters: { type: 'object', properties: { url: { type: 'string' }, method: { type: 'string' }, headers: { type: 'object' }, body: { type: 'string' } }, required: ['url'] },
+    execute: async (_id, { url, method = 'GET', headers, body }) => {
+      try {
+        const m = String(method).toUpperCase();
+        const res = await fetch(url, { method: m, headers: headers || {}, body: (m === 'GET' || m === 'HEAD') ? undefined : body, signal: AbortSignal.timeout(20000) });
+        const text = (await res.text()).slice(0, 8000);
+        return txt({ url, method: m, status: res.status, headers: Object.fromEntries(res.headers), body: text });
+      } catch (e) { return txt({ error: e?.message || String(e), url }); }
+    },
+  };
+}