yuangs 2.38.0 → 2.40.0

package/dist/Capabilities.js

@@ -0,0 +1,39 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Capabilities = void 0;
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const promises_1 = __importDefault(require("fs/promises"));
+const execAsync = (0, util_1.promisify)(child_process_1.exec);
+/**
+ * [Action 2] 硬限制：手指数得过来的 Capability
+ */
+class Capabilities {
+    static async execute(proposal) {
+        const { type, payload } = proposal;
+        switch (type) {
+            case 'SHELL':
+                const { stdout, stderr } = await execAsync(payload.cmd);
+                return stdout || stderr;
+            case 'FILESYSTEM':
+                if (payload.content) {
+                    await promises_1.default.writeFile(payload.path, payload.content);
+                    return `Saved ${payload.path}`;
+                }
+                return await promises_1.default.readFile(payload.path, 'utf-8');
+            case 'PROJECT':
+                // 专项支持 NPM 项目逻辑
+                const { stdout: npmOut } = await execAsync(payload.cmd);
+                return npmOut;
+            case 'KNOWLEDGE':
+                return `Simulation: Answer found for ${payload.query}`;
+            default:
+                throw new Error(`Unknown capability: ${type}`);
+        }
+    }
+}
+exports.Capabilities = Capabilities;
+//# sourceMappingURL=Capabilities.js.map

package/dist/Governance.d.ts

@@ -0,0 +1,9 @@
+/**
+ * [Action 4] Governance 作为一个黑箱函数
+ */
+export declare class Governance {
+    static evaluate(proposal: any): Promise<{
+        approved: boolean;
+        reason?: string;
+    }>;
+}

package/dist/Governance.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Governance = void 0;
+/**
+ * [Action 4] Governance 作为一个黑箱函数
+ */
+class Governance {
+    static async evaluate(proposal) {
+        const dangerousCommands = ['rm -rf /', ':(){ :|:& };:', 'mv / /dev/null'];
+        // 硬检查逻辑
+        if (proposal.type === 'SHELL') {
+            const cmd = proposal.payload.cmd.toLowerCase();
+            if (dangerousCommands.some(c => cmd.includes(c))) {
+                return { approved: false, reason: 'CRITICAL RISK: Dangerous command detected.' };
+            }
+        }
+        if (proposal.type === 'PROJECT' && proposal.payload.cmd.includes('publish')) {
+            // 示例：禁止在没有明确授权时发布
+            return { approved: false, reason: 'POLICY: Human approval required for npm publish.' };
+        }
+        return { approved: true };
+    }
+}
+exports.Governance = Governance;
+//# sourceMappingURL=Governance.js.map

package/dist/Kernel.d.ts

@@ -0,0 +1,13 @@
+/**
+ * [Action 1] 唯一的上帝视角 Loop
+ * 整合了原来的 Loop, Agent, Executor, Context
+ */
+export declare class Kernel {
+    private state;
+    /**
+     * 核心循环：想 -> 评 -> 行
+     */
+    step(intent: string): Promise<void>;
+    private think;
+    private logAudit;
+}

package/dist/Kernel.js

@@ -0,0 +1,53 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Kernel = void 0;
+const Governance_1 = require("./Governance");
+const Capabilities_1 = require("./Capabilities");
+const chalk_1 = __importDefault(require("chalk"));
+/**
+ * [Action 1] 唯一的上帝视角 Loop
+ * 整合了原来的 Loop, Agent, Executor, Context
+ */
+class Kernel {
+    state = { turns: 0, lastResult: null };
+    /**
+     * 核心循环：想 -> 评 -> 行
+     */
+    async step(intent) {
+        this.state.turns++;
+        // 1. 理性建议 (AI Thinking)
+        const proposal = await this.think(intent);
+        // 2. 硬核治理 (Action 4: Governance 黑箱)
+        const decision = await Governance_1.Governance.evaluate(proposal);
+        if (!decision.approved) {
+            console.log(chalk_1.default.red(`[REJECTED] ${decision.reason}`));
+            return;
+        }
+        // 3. 能力执行 (Action 2: 严格 Capability 限制)
+        try {
+            const result = await Capabilities_1.Capabilities.execute(proposal);
+            this.state.lastResult = result;
+            console.log(chalk_1.default.green(`[SUCCESS] Turn ${this.state.turns} completed.`));
+        }
+        catch (e) {
+            // Action 5: 治理靠记录，不靠防御性代码
+            this.logAudit(proposal, e.message);
+        }
+    }
+    async think(intent) {
+        // 逻辑简化：根据意图路由到具体 Capability
+        if (intent.includes('npm'))
+            return { type: 'PROJECT', payload: { cmd: intent }, rationale: 'NPM management' };
+        if (intent.includes('git') || intent.includes('ls'))
+            return { type: 'SHELL', payload: { cmd: intent }, rationale: 'System operation' };
+        return { type: 'KNOWLEDGE', payload: { query: intent }, rationale: 'Information retrieval' };
+    }
+    logAudit(proposal, error) {
+        console.error(chalk_1.default.gray(`[AUDIT] Action ${proposal.type} failed: ${error}`));
+    }
+}
+exports.Kernel = Kernel;
+//# sourceMappingURL=Kernel.js.map

package/dist/agent/AgentRuntime.d.ts

@@ -0,0 +1,6 @@
+export declare class AgentRuntime {
+    private context;
+    private executionId;
+    constructor(initialContext: any);
+    run(userInput: string, mode?: 'chat' | 'command'): Promise<void>;
+}

package/dist/agent/AgentRuntime.js

@@ -0,0 +1,78 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentRuntime = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const crypto_1 = require("crypto");
+const llmAdapter_1 = require("./llmAdapter");
+const governance_1 = require("./governance");
+const executor_1 = require("./executor");
+const contextManager_1 = require("./contextManager");
+const core_1 = require("./governance/core");
+class AgentRuntime {
+    context;
+    executionId;
+    constructor(initialContext) {
+        this.context = new contextManager_1.ContextManager(initialContext);
+        this.executionId = (0, crypto_1.randomUUID)();
+    }
+    async run(userInput, mode = 'chat') {
+        let turnCount = 0;
+        const maxTurns = 10;
+        console.log(chalk_1.default.cyan(`\n🚀 Agent Runtime v2.0 Starting (Execution ID: ${this.executionId})`));
+        this.context.addMessage('user', userInput);
+        while (turnCount < maxTurns) {
+            console.log(chalk_1.default.blue(`\n--- Turn ${++turnCount} ---`));
+            const model = 'Assistant';
+            // 处理类型不兼容：将 tool role 映射为 system
+            const messages = this.context.getMessages().map(msg => ({
+                role: (msg.role === 'tool' ? 'system' : msg.role),
+                content: msg.content
+            }));
+            const thought = await llmAdapter_1.LLMAdapter.think(messages, mode, undefined, governance_1.GovernanceService.getPolicyManual());
+            if (thought.isDone) {
+                console.log(chalk_1.default.green('\n✅ Goal satisfied.'));
+                break;
+            }
+            const action = {
+                id: (0, crypto_1.randomUUID)(),
+                type: thought.type || 'answer',
+                payload: thought.payload || { text: thought.raw },
+                riskLevel: 'low',
+                reasoning: thought.reasoning || ''
+            };
+            // === 预检 (Pre-flight) ===
+            const preCheck = (0, core_1.evaluateProposal)(action, governance_1.GovernanceService.getRules(), governance_1.GovernanceService.getLedgerSnapshot());
+            if (preCheck.effect === 'deny') {
+                console.log(chalk_1.default.red(`[PRE-FLIGHT] 🛡️ Policy Blocked: ${preCheck.reason}`));
+                this.context.addMessage('system', `POLICY DENIED: ${preCheck.reason}. Find a different way.`);
+                continue;
+            }
+            // === 正式治理 (WASM + 人工/自动) ===
+            const decision = await governance_1.GovernanceService.adjudicate(action);
+            if (decision.status === 'rejected') {
+                console.log(chalk_1.default.red(`[GOVERNANCE] ❌ Rejected: ${decision.reason}`));
+                this.context.addMessage('system', `Rejected by Governance: ${decision.reason}`);
+                continue;
+            }
+            // === 执行 ===
+            console.log(chalk_1.default.yellow(`[EXECUTING] ⚙️ ${action.type}...`));
+            const result = await executor_1.ToolExecutor.execute(action);
+            if (result.success) {
+                this.context.addToolResult(action.type, result.output);
+                console.log(chalk_1.default.green(`[SUCCESS] Result: ${result.output.substring(0, 50)}...`));
+            }
+            else {
+                this.context.addToolResult(action.type, `Error: ${result.error}`);
+                console.log(chalk_1.default.red(`[ERROR] ${result.error}`));
+            }
+        }
+        if (turnCount >= maxTurns) {
+            console.log(chalk_1.default.red(`\n⚠️ Max turns (${maxTurns}) reached.`));
+        }
+    }
+}
+exports.AgentRuntime = AgentRuntime;
+//# sourceMappingURL=AgentRuntime.js.map

package/dist/agent/AgentRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentRuntime.js","sourceRoot":"","sources":["../../src/agent/AgentRuntime.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAC1B,mCAAoC;AACpC,6CAA0C;AAC1C,6CAAiD;AACjD,yCAA0C;AAC1C,qDAAkD;AAClD,4CAAqD;AAGrD,MAAa,YAAY;IACb,OAAO,CAAiB;IACxB,WAAW,CAAS;IAE5B,YAAY,cAAmB;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,+BAAc,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,IAAA,mBAAU,GAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,OAA2B,MAAM;QAC1D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAG,EAAE,CAAC;QAEpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,mDAAmD,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAE3C,OAAO,SAAS,GAAG,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,MAAM,CAAC,CAAC,CAAC;YAEzD,MAAM,KAAK,GAAG,WAAW,CAAC;YAE1B,iCAAiC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpD,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAoC;gBACpF,OAAO,EAAE,GAAG,CAAC,OAAO;aACvB,CAAC,CAAC,CAAC;YAEJ,MAAM,OAAO,GAAG,MAAM,uBAAU,CAAC,KAAK,CAClC,QAAQ,EACR,IAAW,EACX,SAAS,EACT,8BAAiB,CAAC,eAAe,EAAE,CACtC,CAAC;YAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAChD,MAAM;YACV,CAAC;YAED,MAAM,MAAM,GAAmB;gBAC3B,EAAE,EAAE,IAAA,mBAAU,GAAE;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAW,IAAI,QAAQ;gBACrC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;gBACjD,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;aACrC,CAAC;YAEF,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,IAAA,uBAAgB,EAAC,MAAM,EAAE,8BAAiB,CAAC,QAAQ,EAAE,EAAE,8BAAiB,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC/G,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC9E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,kBAAkB,QAAQ,CAAC,MAAM,yBAAyB,CAAC,CAAC;gBAC9F,SAAS;YACb,CAAC;YAED,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,MAAM,8BAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,4BAA4B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,2BAA2B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChF,SAAS;YACb,CAAC;YAED,aAAa;YACb,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,kBAAkB,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,uBAAY,CAAC,OAAO,CAAC,MAAa,CAAC,CAAC;YAEzD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,qBAAqB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;QACL,CAAC;QAED,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,mBAAmB,QAAQ,YAAY,CAAC,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;CACJ;AAhFD,oCAgFC"}

package/dist/agent/governance/bridge.d.ts

@@ -0,0 +1,5 @@
+export declare class WasmGovernanceBridge {
+    private static instance;
+    static init(): Promise<boolean>;
+    static evaluate(proposal: any, rules: any, ledger: any): any;
+}

package/dist/agent/governance/bridge.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WasmGovernanceBridge = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+class WasmGovernanceBridge {
+    static instance = null;
+    static async init() {
+        try {
+            const loader = require('@assemblyscript/loader');
+            const wasmPath = path_1.default.join(process.cwd(), 'build', 'release.wasm');
+            if (!fs_1.default.existsSync(wasmPath)) {
+                return false;
+            }
+            const wasmModule = await loader.instantiate(fs_1.default.readFileSync(wasmPath));
+            this.instance = wasmModule.exports;
+            return true;
+        }
+        catch (e) {
+            return false;
+        }
+    }
+    static evaluate(proposal, rules, ledger) {
+        if (!this.instance)
+            return { effect: 'error', reason: 'WASM not initialized' };
+        const { __newString, __getString, evaluate } = this.instance;
+        const pPtr = __newString(JSON.stringify(proposal));
+        const rPtr = __newString(JSON.stringify(rules));
+        const lPtr = __newString(JSON.stringify(ledger));
+        const resultPtr = evaluate(pPtr, rPtr, lPtr);
+        return JSON.parse(__getString(resultPtr));
+    }
+}
+exports.WasmGovernanceBridge = WasmGovernanceBridge;
+//# sourceMappingURL=bridge.js.map

package/dist/agent/governance/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/agent/governance/bridge.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AAExB,MAAa,oBAAoB;IACrB,MAAM,CAAC,QAAQ,GAAQ,IAAI,CAAC;IAEpC,MAAM,CAAC,KAAK,CAAC,IAAI;QACb,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;YAEnE,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;YACnC,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,QAAa,EAAE,KAAU,EAAE,MAAW;QAClD,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAE/E,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE7D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAEjD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,CAAC;;AA/BL,oDAgCC"}

package/dist/agent/governance/core.d.ts

@@ -0,0 +1,19 @@
+import { ProposedAction } from '../state';
+export interface PolicyRule {
+    id: string;
+    when: {
+        type?: string;
+        pattern?: string;
+        max_per_minute?: number;
+    };
+    effect: 'allow' | 'deny' | 'require_approval';
+    reason?: string;
+}
+export interface RiskEntry {
+    ts: number;
+    actionType: string;
+}
+export declare function evaluateProposal(action: ProposedAction, rules: PolicyRule[], ledger: RiskEntry[]): {
+    effect: string;
+    reason?: string;
+};

package/dist/agent/governance/core.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateProposal = evaluateProposal;
+function evaluateProposal(action, rules, ledger) {
+    const now = Date.now();
+    for (const rule of rules) {
+        const typeMatch = !rule.when.type || rule.when.type === action.type;
+        const payloadStr = JSON.stringify(action.payload);
+        const patternMatch = !rule.when.pattern || new RegExp(rule.when.pattern, 'i').test(payloadStr);
+        if (typeMatch && patternMatch) {
+            if (rule.when.max_per_minute) {
+                const count = ledger.filter(e => e.ts > now - 60000 && e.actionType === action.type).length;
+                if (count >= rule.when.max_per_minute)
+                    return { effect: 'deny', reason: `Rate limit: ${rule.id}` };
+            }
+            return { effect: rule.effect, reason: rule.reason };
+        }
+    }
+    return { effect: 'require_approval', reason: 'Default human review required' };
+}
+//# sourceMappingURL=core.js.map

package/dist/agent/governance/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../src/agent/governance/core.ts"],"names":[],"mappings":";;AAcA,4CAoBC;AApBD,SAAgB,gBAAgB,CAC5B,MAAsB,EACtB,KAAmB,EACnB,MAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE/F,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAC5F,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc;oBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;YACvG,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACxD,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;AACnF,CAAC"}

package/dist/agent/governance/ledger.d.ts

@@ -0,0 +1,7 @@
+import { RiskEntry } from './core';
+export declare class RiskLedger {
+    private entries;
+    record(actionType: string): void;
+    getSnapshot(): RiskEntry[];
+    private cleanup;
+}

package/dist/agent/governance/ledger.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RiskLedger = void 0;
+class RiskLedger {
+    entries = [];
+    record(actionType) {
+        this.entries.push({
+            ts: Date.now(),
+            actionType
+        });
+        this.cleanup();
+    }
+    getSnapshot() {
+        return [...this.entries];
+    }
+    cleanup() {
+        const oneHourAgo = Date.now() - 3600000;
+        this.entries = this.entries.filter(e => e.ts > oneHourAgo);
+    }
+}
+exports.RiskLedger = RiskLedger;
+//# sourceMappingURL=ledger.js.map

package/dist/agent/governance/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../src/agent/governance/ledger.ts"],"names":[],"mappings":";;;AAEA,MAAa,UAAU;IACX,OAAO,GAAgB,EAAE,CAAC;IAElC,MAAM,CAAC,UAAkB;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACd,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,UAAU;SACb,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,WAAW;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAEO,OAAO;QACX,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;IAC/D,CAAC;CACJ;AAnBD,gCAmBC"}

package/dist/agent/governance/sandbox/core.as.d.ts

@@ -0,0 +1,11 @@
+/**
+ * yuangs Governance WASM Sandbox
+ * 这里的代码在执行时与 Node.js 内存完全隔离
+ */
+/**
+ * 核心裁决导出函数
+ * @param proposal 提案字符串
+ * @param rules 规则字符串（YAML 转换后的 JSON）
+ * @param ledger 账本字符串
+ */
+export declare function evaluate(proposal: string, rules: string, ledger: string): string;

package/dist/agent/governance/sandbox/core.as.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * yuangs Governance WASM Sandbox
+ * 这里的代码在执行时与 Node.js 内存完全隔离
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluate = evaluate;
+// 简单的辅助函数：检查字符串包含（WASM 内部实现）
+function includes(source, target) {
+    return source.indexOf(target) != -1;
+}
+/**
+ * 核心裁决导出函数
+ * @param proposal 提案字符串
+ * @param rules 规则字符串（YAML 转换后的 JSON）
+ * @param ledger 账本字符串
+ */
+function evaluate(proposal, rules, ledger) {
+    // 1. 暴力阻断：最底层的物理防线（即便外部逻辑被污染，这里也是死的）
+    if (proposal.includes("rm -rf /") || proposal.includes("sudo rm")) {
+        return '{"effect": "deny", "reason": "WASM_SANDBOX: 检测到毁灭性命令，强制阻断"}';
+    }
+    // 2. 检查速率（基于账本长度）
+    // 假设我们不想让 AI 在短时间内连续提议超过 50 次
+    if (ledger.length > 5000) { // 简单通过字符串长度模拟异常账本
+        return '{"effect": "deny", "reason": "WASM_SANDBOX: 账本异常膨胀，可能遭受拒绝服务攻击"}';
+    }
+    // 3. 逻辑透传
+    // 在实际生产中，我们会在这里解析 JSON rules。
+    // 目前版本我们先确保物理链路打通。
+    return '{"effect": "allow", "reason": "WASM_SANDBOX: 物理隔离层验证通过"}';
+}
+//# sourceMappingURL=core.as.js.map

package/dist/agent/governance/sandbox/core.as.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.as.js","sourceRoot":"","sources":["../../../../src/agent/governance/sandbox/core.as.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAaH,4BAgBC;AA3BD,6BAA6B;AAC7B,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc;IAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,QAAQ,CAAC,QAAgB,EAAE,KAAa,EAAE,MAAc;IACpE,qCAAqC;IACrC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,OAAO,6DAA6D,CAAC;IACzE,CAAC;IAED,kBAAkB;IAClB,8BAA8B;IAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,kBAAkB;QAC1C,OAAO,iEAAiE,CAAC;IAC7E,CAAC;IAED,UAAU;IACV,8BAA8B;IAC9B,mBAAmB;IACnB,OAAO,0DAA0D,CAAC;AACtE,CAAC"}

package/dist/agent/governance.d.ts

@@ -1,10 +1,13 @@
-import { ProposedAction, GovernanceDecision, RiskLevel } from './state';
+import { ProposedAction, GovernanceDecision } from './state';
+import { PolicyRule, RiskEntry } from './governance/core';
 export declare class GovernanceService {
-    static adjudicate(action: ProposedAction, config?: {
-        autoApproveLowRisk: boolean;
-    }): Promise<GovernanceDecision>;
-    private static askHuman;
-    private static printActionDetails;
-    static evaluateRisk(action: ProposedAction): RiskLevel;
-    private static containsDangerousCommand;
+    private static rules;
+    private static ledger;
+    private static initialized;
+    static init(): Promise<void>;
+    private static loadPolicy;
+    static getRules(): PolicyRule[];
+    static getLedgerSnapshot(): RiskEntry[];
+    static getPolicyManual(): string;
+    static adjudicate(action: ProposedAction): Promise<GovernanceDecision>;
 }

package/dist/agent/governance.js

@@ -4,150 +4,63 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GovernanceService = void 0;
-const readline_1 = __importDefault(require("readline"));
-const chalk_1 = __importDefault(require("chalk"));
-const ora_1 = __importDefault(require("ora"));
+const core_1 = require("./governance/core");
+const ledger_1 = require("./governance/ledger");
+const bridge_1 = require("./governance/bridge");
+const js_yaml_1 = __importDefault(require("js-yaml"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
 class GovernanceService {
-    static async adjudicate(action, config = { autoApproveLowRisk: true }) {
-        const { autoApproveLowRisk } = config;
-        if (autoApproveLowRisk && action.riskLevel === 'low') {
-            console.log(chalk_1.default.gray(`[Auto-approved] ${action.type}: low risk action`));
-            return {
-                status: 'approved',
-                by: 'policy',
-                timestamp: Date.now()
-            };
-        }
-        const spinner = (0, ora_1.default)(chalk_1.default.yellow('⏸️  Waiting for approval...')).start();
-        const answer = await this.askHuman(action);
-        spinner.stop();
-        if (answer.approve) {
-            return {
-                status: 'approved',
-                by: 'human',
-                timestamp: Date.now()
-            };
-        }
-        else if (answer.modify) {
-            return {
-                status: 'modified',
-                by: 'human',
-                originalActionId: action.id,
-                modifiedAction: answer.modifiedAction,
-                modificationReason: answer.reason || 'User modified',
-                timestamp: Date.now()
-            };
+    static rules = [];
+    static ledger = new ledger_1.RiskLedger();
+    static initialized = false;
+    static async init() {
+        if (this.initialized)
+            return;
+        this.loadPolicy();
+        await bridge_1.WasmGovernanceBridge.init();
+        this.initialized = true;
+    }
+    static loadPolicy() {
+        try {
+            const policyPath = path_1.default.join(process.cwd(), 'policy.yaml');
+            if (fs_1.default.existsSync(policyPath)) {
+                const content = fs_1.default.readFileSync(policyPath, 'utf8');
+                const config = js_yaml_1.default.load(content);
+                this.rules = config.rules || [];
+            }
         }
-        else {
-            return {
-                status: 'rejected',
-                by: 'human',
-                reason: answer.reason || 'User rejected',
-                timestamp: Date.now()
-            };
+        catch (e) {
+            this.rules = [];
         }
     }
-    static askHuman(action) {
-        const rl = readline_1.default.createInterface({
-            input: process.stdin,
-            output: process.stdout
-        });
-        return new Promise((resolve) => {
-            this.printActionDetails(action);
-            const prompt = `
-${chalk_1.default.bold.yellow('Proceed?')} (y/n/s) 
-${chalk_1.default.gray('y = yes, n = no, s = skip/modify')}: `;
-            rl.question(prompt, (answer) => {
-                const lower = answer.trim().toLowerCase();
-                if (lower === 'y' || lower === 'yes') {
-                    rl.close();
-                    resolve({ approve: true, modify: false });
-                }
-                else if (lower === 's' || lower === 'skip' || lower === 'modify') {
-                    rl.close();
-                    resolve({
-                        approve: false,
-                        modify: true,
-                        reason: 'User wants to modify',
-                        modifiedAction: { ...action }
-                    });
-                }
-                else {
-                    rl.question(chalk_1.default.red('Reason for rejection: '), (reason) => {
-                        rl.close();
-                        resolve({
-                            approve: false,
-                            modify: false,
-                            reason: reason || 'User rejected'
-                        });
-                    });
-                }
-            });
-        });
+    static getRules() {
+        return this.rules;
     }
-    static printActionDetails(action) {
-        const riskColor = {
-            low: chalk_1.default.green,
-            medium: chalk_1.default.yellow,
-            high: chalk_1.default.red
-        };
-        console.log(`
-${chalk_1.default.bold.cyan('═'.repeat(60))}
-${chalk_1.default.bold.blue('📋 Action Proposed')}
-${chalk_1.default.bold.cyan('═'.repeat(60))}
-${chalk_1.default.white('Type:')} ${chalk_1.default.bold(action.type)}
-${chalk_1.default.white('ID:')} ${action.id}
-${chalk_1.default.white('Risk:')} ${riskColor[action.riskLevel](action.riskLevel.toUpperCase())}
-
-${chalk_1.default.bold('Payload:')}
-${chalk_1.default.gray(JSON.stringify(action.payload, null, 2))}
-
-${chalk_1.default.bold('Reasoning:')}
-${chalk_1.default.gray(action.reasoning)}
-${chalk_1.default.bold.cyan('═'.repeat(60))}
-`);
+    static getLedgerSnapshot() {
+        return this.ledger.getSnapshot();
     }
-    static evaluateRisk(action) {
-        const { type, payload } = action;
-        if (type === 'tool_call') {
-            const toolName = payload.tool_name;
-            const lowRiskTools = ['read_file', 'list_files', 'web_search'];
-            if (lowRiskTools.includes(toolName)) {
-                return 'low';
-            }
-            const mediumRiskTools = ['write_file', 'shell'];
-            if (mediumRiskTools.includes(toolName)) {
-                const cmd = payload.parameters?.command || payload.command || '';
-                if (this.containsDangerousCommand(cmd)) {
-                    return 'high';
-                }
-                return 'medium';
-            }
-            return 'medium';
+    static getPolicyManual() {
+        return this.rules.map(r => `- ${r.id}: ${r.reason} (${r.effect})`).join('\n');
+    }
+    static async adjudicate(action) {
+        await this.init();
+        // 1. WASM 物理层核验
+        const wasmResult = bridge_1.WasmGovernanceBridge.evaluate(action, this.rules, this.ledger.getSnapshot());
+        if (wasmResult.effect === 'deny') {
+            return { status: 'rejected', by: 'policy', reason: wasmResult.reason || 'WASM Denied', timestamp: Date.now() };
         }
-        if (type === 'shell_cmd') {
-            const cmd = payload.command || '';
-            if (this.containsDangerousCommand(cmd)) {
-                return 'high';
-            }
-            return 'medium';
+        // 2. 逻辑层核验
+        const logicResult = (0, core_1.evaluateProposal)(action, this.rules, this.ledger.getSnapshot());
+        if (logicResult.effect === 'deny') {
+            return { status: 'rejected', by: 'policy', reason: logicResult.reason || 'Policy Denied', timestamp: Date.now() };
         }
-        if (type === 'code_diff') {
-            return 'medium';
+        if (logicResult.effect === 'allow') {
+            this.ledger.record(action.type);
+            return { status: 'approved', by: 'policy', timestamp: Date.now() };
         }
-        return 'low';
-    }
-    static containsDangerousCommand(cmd) {
-        const dangerousPatterns = [
-            /rm\s+-rf\s+\//,
-            /rm\s+-rf\s+~/,
-            />\s*\/dev\/null/,
-            /dd\s+if=/,
-            /mkfs/,
-            /format/,
-            /sudo\s+rm/
-        ];
-        return dangerousPatterns.some(pattern => pattern.test(cmd));
+        // 3. 人工干预兜底 (模拟)
+        return { status: 'approved', by: 'human', timestamp: Date.now() };
     }
 }
 exports.GovernanceService = GovernanceService;