权限管理: - PermissionTypes: 权限行为/模式/规则/决策/选择类型系统 - PermissionSettings: 用户级/项目级/会话级权限持久化(settings.json) - PermissionRuleEngine: 多层规则引擎(deny→allow→readOnly→mode→dangerous→ASK) - DangerousPatterns: 危险shell命令检测(rm -rf, eval, exec等) - ReplSession: Y/A/N/D四选项权限确认UI - ConfigCommand: permission-mode/list/reset子命令 - AgentLoop: 集成规则引擎，PermissionChoice回调 上下文压缩: - TokenTracker: 上下文窗口监控(93%自动压缩/82%警告/98%阻塞) - MicroCompact: 微压缩，裁剪旧tool_result(无API调用) - SessionMemoryCompact: Session Memory压缩，AI摘要旧消息保留近期段 - FullCompact: 全量压缩+PTL重试(按API Round逐步丢弃) - AutoCompactManager: 压缩编排器(micro→session→full)，含熔断机制 - CompactCommand: 改造为委托FullCompact - StatusLine: token使用百分比+颜色告警(绿→黄→红→闪烁) - AppConfig: 注册PermissionSettings/RuleEngine/AutoCompactManager Bean Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>pull/1/head
liuzh
1 month ago
parent
c989d3b451
commit
730551cb3f
@ -0,0 +1,178 @@ |
||||
package com.claudecode.core.compact; |
||||
|
||||
import com.claudecode.core.TokenTracker; |
||||
import com.claudecode.core.compact.CompactionResult.CompactLayer; |
||||
import org.slf4j.Logger; |
||||
import org.slf4j.LoggerFactory; |
||||
import org.springframework.ai.chat.messages.Message; |
||||
import org.springframework.ai.chat.model.ChatModel; |
||||
|
||||
import java.util.List; |
||||
import java.util.function.Consumer; |
||||
import java.util.function.Supplier; |
||||
|
||||
/** |
||||
* 自动压缩编排器 —— 根据 token 使用量自动选择并执行压缩策略。 |
||||
* <p> |
||||
* 对应 claude-code 的自动压缩编排逻辑。在 AgentLoop 中每次 API 响应后调用。 |
||||
* 流程：检查阈值 → 微压缩 → Session Memory 压缩 → 全量压缩（兜底） |
||||
* 熔断器：连续失败 {@value MAX_CONSECUTIVE_FAILURES} 次后暂停自动压缩。 |
||||
*/ |
||||
public class AutoCompactManager { |
||||
|
||||
private static final Logger log = LoggerFactory.getLogger(AutoCompactManager.class); |
||||
|
||||
/** 连续失败阈值，超过后暂停自动压缩 */ |
||||
private static final int MAX_CONSECUTIVE_FAILURES = 3; |
||||
|
||||
private final MicroCompact microCompact; |
||||
private final SessionMemoryCompact sessionMemoryCompact; |
||||
private final FullCompact fullCompact; |
||||
private final TokenTracker tokenTracker; |
||||
|
||||
/** 连续压缩失败次数 */ |
||||
private int consecutiveFailures = 0; |
||||
|
||||
/** 是否已触发过熔断 */ |
||||
private boolean circuitBroken = false; |
||||
|
||||
/** 压缩事件回调（用于通知 UI） */ |
||||
private Consumer<CompactionResult> onCompactionEvent; |
||||
|
||||
public AutoCompactManager(ChatModel chatModel, TokenTracker tokenTracker) { |
||||
this.tokenTracker = tokenTracker; |
||||
this.microCompact = new MicroCompact(); |
||||
this.sessionMemoryCompact = new SessionMemoryCompact(chatModel); |
||||
this.fullCompact = new FullCompact(chatModel); |
||||
} |
||||
|
||||
public void setOnCompactionEvent(Consumer<CompactionResult> onCompactionEvent) { |
||||
this.onCompactionEvent = onCompactionEvent; |
||||
} |
||||
|
||||
/** |
||||
* 在每次 API 响应后调用，根据 token 使用状态自动执行压缩。 |
||||
* |
||||
* @param historySupplier 获取当前消息历史的函数 |
||||
* @param historyReplacer 替换消息历史的函数 |
||||
* @return 如果执行了压缩返回结果，否则返回 null |
||||
*/ |
||||
public CompactionResult autoCompactIfNeeded( |
||||
Supplier<List<Message>> historySupplier, |
||||
Consumer<List<Message>> historyReplacer) { |
||||
|
||||
// 熔断器检查
|
||||
if (circuitBroken) { |
||||
return null; |
||||
} |
||||
|
||||
// 检查是否需要压缩
|
||||
if (!tokenTracker.shouldAutoCompact()) { |
||||
// 即使不需要自动压缩，也执行微压缩（成本极低）
|
||||
List<Message> history = historySupplier.get(); |
||||
if (history instanceof java.util.ArrayList<Message> mutableHistory) { |
||||
microCompact.compact(mutableHistory); |
||||
} |
||||
return null; |
||||
} |
||||
|
||||
log.info("Auto-compact triggered at {}% token usage", |
||||
String.format("%.1f", tokenTracker.getUsagePercentage() * 100)); |
||||
|
||||
List<Message> history = historySupplier.get(); |
||||
|
||||
// 阶段 1：微压缩
|
||||
if (history instanceof java.util.ArrayList<Message> mutableHistory) { |
||||
CompactionResult microResult = microCompact.compact(mutableHistory); |
||||
if (microResult.success()) { |
||||
notifyEvent(microResult); |
||||
// 微压缩后重新检查是否仍需深度压缩
|
||||
if (!tokenTracker.shouldAutoCompact()) { |
||||
consecutiveFailures = 0; |
||||
return microResult; |
||||
} |
||||
} |
||||
} |
||||
|
||||
// 阶段 2：Session Memory 压缩
|
||||
try { |
||||
List<Message> compacted = sessionMemoryCompact.getCompactedHistory(history); |
||||
if (compacted != null) { |
||||
historyReplacer.accept(compacted); |
||||
CompactionResult result = CompactionResult.success( |
||||
CompactLayer.SESSION_MEMORY, |
||||
history.size(), compacted.size(), |
||||
"Auto session memory compact"); |
||||
consecutiveFailures = 0; |
||||
notifyEvent(result); |
||||
log.info("Session memory compact: {} → {} messages", history.size(), compacted.size()); |
||||
return result; |
||||
} |
||||
} catch (Exception e) { |
||||
log.warn("Session memory compact failed: {}", e.getMessage()); |
||||
} |
||||
|
||||
// 阶段 3：全量压缩（兜底）
|
||||
try { |
||||
List<Message> compacted = fullCompact.compact(history); |
||||
if (compacted != null) { |
||||
historyReplacer.accept(compacted); |
||||
CompactionResult result = CompactionResult.success( |
||||
CompactLayer.FULL, |
||||
history.size(), compacted.size(), |
||||
"Auto full compact (fallback)"); |
||||
consecutiveFailures = 0; |
||||
notifyEvent(result); |
||||
log.info("Full compact fallback: {} → {} messages", history.size(), compacted.size()); |
||||
return result; |
||||
} |
||||
} catch (Exception e) { |
||||
log.warn("Full compact failed: {}", e.getMessage()); |
||||
} |
||||
|
||||
// 所有压缩方式均失败
|
||||
consecutiveFailures++; |
||||
if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) { |
||||
circuitBroken = true; |
||||
log.error("Auto-compact circuit breaker triggered after {} consecutive failures", |
||||
consecutiveFailures); |
||||
CompactionResult result = CompactionResult.failure(CompactLayer.FULL, |
||||
"Circuit breaker: auto-compact disabled after " + consecutiveFailures + " failures"); |
||||
notifyEvent(result); |
||||
return result; |
||||
} |
||||
|
||||
return CompactionResult.failure(CompactLayer.SESSION_MEMORY, |
||||
"All compression strategies failed"); |
||||
} |
||||
|
||||
/** 手动重置熔断器 */ |
||||
public void resetCircuitBreaker() { |
||||
circuitBroken = false; |
||||
consecutiveFailures = 0; |
||||
log.info("Auto-compact circuit breaker reset"); |
||||
} |
||||
|
||||
public boolean isCircuitBroken() { |
||||
return circuitBroken; |
||||
} |
||||
|
||||
public int getConsecutiveFailures() { |
||||
return consecutiveFailures; |
||||
} |
||||
|
||||
/** 获取 FullCompact 实例（供 CompactCommand 委托使用） */ |
||||
public FullCompact getFullCompact() { |
||||
return fullCompact; |
||||
} |
||||
|
||||
private void notifyEvent(CompactionResult result) { |
||||
if (onCompactionEvent != null) { |
||||
try { |
||||
onCompactionEvent.accept(result); |
||||
} catch (Exception e) { |
||||
log.debug("Compaction event notification failed", e); |
||||
} |
||||
} |
||||
} |
||||
} |
||||
@ -0,0 +1,46 @@ |
||||
package com.claudecode.core.compact; |
||||
|
||||
/** |
||||
* 压缩操作的结果数据。 |
||||
* |
||||
* @param success 是否成功 |
||||
* @param layer 执行的压缩层级 |
||||
* @param messagesBefore 压缩前消息数 |
||||
* @param messagesAfter 压缩后消息数 |
||||
* @param summary AI 生成的摘要（可能为 null） |
||||
* @param reason 结果原因/描述 |
||||
*/ |
||||
public record CompactionResult( |
||||
boolean success, |
||||
CompactLayer layer, |
||||
int messagesBefore, |
||||
int messagesAfter, |
||||
String summary, |
||||
String reason |
||||
) { |
||||
|
||||
/** 压缩层级 */ |
||||
public enum CompactLayer { |
||||
/** 微压缩：裁剪旧 tool_result 内容 */ |
||||
MICRO, |
||||
/** Session Memory：AI 摘要旧消息，保留近期段 */ |
||||
SESSION_MEMORY, |
||||
/** 全量压缩：AI 摘要全部，PTL 重试 */ |
||||
FULL, |
||||
/** 用户手动触发的全量压缩 */ |
||||
MANUAL |
||||
} |
||||
|
||||
public static CompactionResult success(CompactLayer layer, int before, int after, String summary) { |
||||
return new CompactionResult(true, layer, before, after, summary, |
||||
"Compacted from " + before + " to " + after + " messages"); |
||||
} |
||||
|
||||
public static CompactionResult noAction(CompactLayer layer, String reason) { |
||||
return new CompactionResult(false, layer, 0, 0, null, reason); |
||||
} |
||||
|
||||
public static CompactionResult failure(CompactLayer layer, String reason) { |
||||
return new CompactionResult(false, layer, 0, 0, null, reason); |
||||
} |
||||
} |
||||
@ -0,0 +1,175 @@ |
||||
package com.claudecode.core.compact; |
||||
|
||||
import com.claudecode.core.compact.CompactionResult.CompactLayer; |
||||
import org.slf4j.Logger; |
||||
import org.slf4j.LoggerFactory; |
||||
import org.springframework.ai.chat.messages.*; |
||||
import org.springframework.ai.chat.model.ChatModel; |
||||
import org.springframework.ai.chat.model.ChatResponse; |
||||
import org.springframework.ai.chat.prompt.Prompt; |
||||
|
||||
import java.util.ArrayList; |
||||
import java.util.List; |
||||
|
||||
/** |
||||
* 全量压缩 —— AI 摘要全部对话历史，带 PTL（Prompt Too Long）重试。 |
||||
* <p> |
||||
* 对应 claude-code 的 fullCompact。当 SessionMemoryCompact 无法有效压缩时作为兜底。 |
||||
* PTL 重试策略：按 API Round（user→assistant→tool_result 为一组）逐步丢弃最旧的组。 |
||||
*/ |
||||
public class FullCompact { |
||||
|
||||
private static final Logger log = LoggerFactory.getLogger(FullCompact.class); |
||||
|
||||
/** PTL 重试最大次数 */ |
||||
private static final int MAX_PTL_RETRIES = 5; |
||||
|
||||
/** 保留最近 N 条消息（不压缩） */ |
||||
private static final int KEEP_RECENT_MESSAGES = 2; |
||||
|
||||
private static final String FULL_COMPACT_PROMPT = """ |
||||
Please compress the following conversation history into a thorough summary. Requirements: |
||||
1. Preserve ALL key decisions, code changes, and technical details |
||||
2. Keep file paths, function names, class names, and specific identifiers |
||||
3. Preserve user preferences, requirements, and constraints |
||||
4. Record the current state of work: what was completed, what remains, what's blocked |
||||
5. Note any errors encountered and their resolutions |
||||
6. Keep important context about the project structure and architecture |
||||
7. Output within 1000 words, using structured bullet points |
||||
|
||||
Conversation history: |
||||
"""; |
||||
|
||||
private final ChatModel chatModel; |
||||
|
||||
public FullCompact(ChatModel chatModel) { |
||||
this.chatModel = chatModel; |
||||
} |
||||
|
||||
/** |
||||
* 执行全量压缩。 |
||||
* |
||||
* @param history 当前消息历史 |
||||
* @return 压缩后的新历史；如果失败返回 null |
||||
*/ |
||||
public List<Message> compact(List<Message> history) { |
||||
if (history.size() <= KEEP_RECENT_MESSAGES + 2) { |
||||
return null; |
||||
} |
||||
|
||||
int before = history.size(); |
||||
Message systemMsg = history.getFirst(); |
||||
|
||||
// 按 API Round 分组
|
||||
List<ApiRound> rounds = groupByRounds(history); |
||||
|
||||
// PTL 重试循环：逐步丢弃最旧的 round
|
||||
int dropCount = 0; |
||||
while (dropCount < rounds.size() - 1 && dropCount < MAX_PTL_RETRIES) { |
||||
List<ApiRound> remaining = rounds.subList(dropCount, rounds.size()); |
||||
|
||||
try { |
||||
String summary = generateFullSummary(remaining); |
||||
if (summary != null && !summary.isBlank()) { |
||||
// 构建新历史
|
||||
List<Message> newHistory = new ArrayList<>(); |
||||
newHistory.add(systemMsg); |
||||
newHistory.add(new SystemMessage("[Conversation Summary]\n" + summary)); |
||||
|
||||
// 保留最后几条消息
|
||||
for (int i = Math.max(1, before - KEEP_RECENT_MESSAGES); i < before; i++) { |
||||
newHistory.add(history.get(i)); |
||||
} |
||||
|
||||
log.info("Full compact succeeded: {} → {} messages (dropped {} rounds)", |
||||
before, newHistory.size(), dropCount); |
||||
return newHistory; |
||||
} |
||||
} catch (Exception e) { |
||||
log.warn("Full compact attempt failed (drop={}): {}", dropCount, e.getMessage()); |
||||
// PTL error — drop oldest round and retry
|
||||
} |
||||
|
||||
dropCount++; |
||||
} |
||||
|
||||
log.error("Full compact failed after {} PTL retries", dropCount); |
||||
return null; |
||||
} |
||||
|
||||
/** |
||||
* 执行全量压缩并返回 CompactionResult。 |
||||
*/ |
||||
public CompactionResult compactWithResult(List<Message> history) { |
||||
int before = history.size(); |
||||
List<Message> result = compact(history); |
||||
if (result == null) { |
||||
return CompactionResult.failure(CompactLayer.FULL, "Full compact failed"); |
||||
} |
||||
return CompactionResult.success(CompactLayer.FULL, before, result.size(), null); |
||||
} |
||||
|
||||
// ── 内部方法 ──
|
||||
|
||||
/** 按 API Round 分组：一个 round = [UserMessage] + [AssistantMessage + ToolResponseMessages...] */ |
||||
private List<ApiRound> groupByRounds(List<Message> history) { |
||||
List<ApiRound> rounds = new ArrayList<>(); |
||||
List<Message> currentRound = new ArrayList<>(); |
||||
|
||||
for (int i = 1; i < history.size(); i++) { // 跳过系统消息
|
||||
Message msg = history.get(i); |
||||
if (msg instanceof UserMessage && !currentRound.isEmpty()) { |
||||
rounds.add(new ApiRound(List.copyOf(currentRound))); |
||||
currentRound.clear(); |
||||
} |
||||
currentRound.add(msg); |
||||
} |
||||
|
||||
if (!currentRound.isEmpty()) { |
||||
rounds.add(new ApiRound(List.copyOf(currentRound))); |
||||
} |
||||
|
||||
return rounds; |
||||
} |
||||
|
||||
/** 生成全量摘要 */ |
||||
private String generateFullSummary(List<ApiRound> rounds) { |
||||
StringBuilder dialogText = new StringBuilder(); |
||||
|
||||
for (ApiRound round : rounds) { |
||||
for (Message msg : round.messages()) { |
||||
switch (msg) { |
||||
case UserMessage um -> dialogText.append("[User] ").append(um.getText()).append("\n"); |
||||
case AssistantMessage am -> { |
||||
if (am.getText() != null && !am.getText().isBlank()) { |
||||
String text = am.getText(); |
||||
if (text.length() > 600) text = text.substring(0, 600) + "..."; |
||||
dialogText.append("[Assistant] ").append(text).append("\n"); |
||||
} |
||||
if (am.hasToolCalls()) { |
||||
for (var tc : am.getToolCalls()) { |
||||
dialogText.append("[Tool Call] ").append(tc.name()).append("\n"); |
||||
} |
||||
} |
||||
} |
||||
case ToolResponseMessage trm -> { |
||||
for (var resp : trm.getResponses()) { |
||||
dialogText.append("[Tool Result: ").append(resp.name()).append("]\n"); |
||||
} |
||||
} |
||||
default -> {} |
||||
} |
||||
} |
||||
dialogText.append("---\n"); |
||||
} |
||||
|
||||
if (dialogText.isEmpty()) return null; |
||||
|
||||
Prompt prompt = new Prompt(List.of(new UserMessage(FULL_COMPACT_PROMPT + dialogText))); |
||||
ChatResponse response = chatModel.call(prompt); |
||||
return response.getResult().getOutput().getText(); |
||||
} |
||||
|
||||
/** API Round：一个用户请求 + AI 响应 + 工具调用的完整回合 */ |
||||
private record ApiRound(List<Message> messages) {} |
||||
} |
||||
@ -0,0 +1,91 @@ |
||||
package com.claudecode.core.compact; |
||||
|
||||
import com.claudecode.core.compact.CompactionResult.CompactLayer; |
||||
import org.springframework.ai.chat.messages.*; |
||||
|
||||
import java.util.List; |
||||
|
||||
/** |
||||
* 微压缩 —— 在每次 API 调用后执行，裁剪旧的 tool_result 内容。 |
||||
* <p> |
||||
* 对应 claude-code 的 microCompact。不需要额外 API 调用，纯本地操作。 |
||||
* 策略：保留最近 N 轮的 tool 结果，更早的只保留摘要行 "[Tool result truncated]"。 |
||||
*/ |
||||
public class MicroCompact { |
||||
|
||||
/** 保留最近 N 条 ToolResponseMessage 的完整内容 */ |
||||
private static final int KEEP_RECENT_TOOL_RESULTS = 6; |
||||
|
||||
/** 截断阈值：超过此长度的旧 tool result 才会被截断 */ |
||||
private static final int TRUNCATE_THRESHOLD = 200; |
||||
|
||||
/** 截断后的占位文本 */ |
||||
private static final String TRUNCATED_MARKER = "[Tool result truncated — %d chars omitted]"; |
||||
|
||||
/** |
||||
* 对消息历史执行微压缩。 |
||||
* 直接在原始列表上原地修改以提升性能。 |
||||
* |
||||
* @param history 消息列表（直接修改） |
||||
* @return 压缩结果 |
||||
*/ |
||||
public CompactionResult compact(List<Message> history) { |
||||
int totalToolResponses = 0; |
||||
int truncated = 0; |
||||
|
||||
// 倒序扫描，找到所有 ToolResponseMessage 的位置
|
||||
int recentCount = 0; |
||||
for (int i = history.size() - 1; i >= 0; i--) { |
||||
if (history.get(i) instanceof ToolResponseMessage) { |
||||
totalToolResponses++; |
||||
recentCount++; |
||||
if (recentCount > KEEP_RECENT_TOOL_RESULTS) { |
||||
// 需要截断
|
||||
ToolResponseMessage trm = (ToolResponseMessage) history.get(i); |
||||
if (shouldTruncate(trm)) { |
||||
history.set(i, truncateToolResponse(trm)); |
||||
truncated++; |
||||
} |
||||
} |
||||
} |
||||
} |
||||
|
||||
if (truncated == 0) { |
||||
return CompactionResult.noAction(CompactLayer.MICRO, "No tool results to truncate"); |
||||
} |
||||
|
||||
return CompactionResult.success(CompactLayer.MICRO, totalToolResponses, |
||||
totalToolResponses - truncated, null); |
||||
} |
||||
|
||||
/** 判断 ToolResponseMessage 是否需要截断 */ |
||||
private boolean shouldTruncate(ToolResponseMessage trm) { |
||||
var responses = trm.getResponses(); |
||||
if (responses == null || responses.isEmpty()) return false; |
||||
for (var resp : responses) { |
||||
if (resp.responseData() != null && resp.responseData().toString().length() > TRUNCATE_THRESHOLD) { |
||||
return true; |
||||
} |
||||
} |
||||
return false; |
||||
} |
||||
|
||||
/** 创建截断后的 ToolResponseMessage */ |
||||
private ToolResponseMessage truncateToolResponse(ToolResponseMessage original) { |
||||
var responses = original.getResponses(); |
||||
if (responses == null || responses.isEmpty()) return original; |
||||
|
||||
var truncatedResponses = responses.stream().map(resp -> { |
||||
String data = resp.responseData() != null ? resp.responseData().toString() : ""; |
||||
if (data.length() > TRUNCATE_THRESHOLD) { |
||||
String marker = String.format(TRUNCATED_MARKER, data.length()); |
||||
return new ToolResponseMessage.ToolResponse(resp.id(), resp.name(), marker); |
||||
} |
||||
return resp; |
||||
}).toList(); |
||||
|
||||
return ToolResponseMessage.builder() |
||||
.responses(truncatedResponses) |
||||
.build(); |
||||
} |
||||
} |
||||
@ -0,0 +1,297 @@ |
||||
package com.claudecode.core.compact; |
||||
|
||||
import com.claudecode.core.compact.CompactionResult.CompactLayer; |
||||
import org.slf4j.Logger; |
||||
import org.slf4j.LoggerFactory; |
||||
import org.springframework.ai.chat.messages.*; |
||||
import org.springframework.ai.chat.model.ChatModel; |
||||
import org.springframework.ai.chat.model.ChatResponse; |
||||
import org.springframework.ai.chat.prompt.Prompt; |
||||
|
||||
import java.util.ArrayList; |
||||
import java.util.List; |
||||
|
||||
/** |
||||
* Session Memory 压缩 —— 保留近期消息段，用 AI 摘要旧消息。 |
||||
* <p> |
||||
* 对应 claude-code 的 sessionMemoryCompact。这是主要的自动压缩方式。 |
||||
* 算法： |
||||
* <ol> |
||||
* <li>找到上次压缩的边界（通过检测 [Conversation Summary] 标记）</li> |
||||
* <li>计算需要保留的近期消息段（至少保留 MIN_KEEP_TOKENS token 估算量 + MIN_KEEP_TEXT_MSGS 条文本消息）</li> |
||||
* <li>将边界之后、保留段之前的消息通过 AI 生成摘要</li> |
||||
* <li>用 [系统提示] + [历史摘要] + [新摘要] + [保留段] 替换历史</li> |
||||
* </ol> |
||||
*/ |
||||
public class SessionMemoryCompact { |
||||
|
||||
private static final Logger log = LoggerFactory.getLogger(SessionMemoryCompact.class); |
||||
|
||||
/** 最少保留的文本消息数（用户 + 助手） */ |
||||
private static final int MIN_KEEP_TEXT_MSGS = 5; |
||||
|
||||
/** 估算最少保留的 token 数 */ |
||||
private static final int MIN_KEEP_TOKENS = 10_000; |
||||
|
||||
/** 估算最多保留的 token 数 */ |
||||
private static final int MAX_KEEP_TOKENS = 40_000; |
||||
|
||||
/** 每字符估算的 token 数（粗略近似） */ |
||||
private static final double CHARS_PER_TOKEN = 4.0; |
||||
|
||||
private static final String SUMMARY_PROMPT = """ |
||||
Summarize the following conversation segment concisely but thoroughly. |
||||
Preserve: |
||||
- All key technical decisions and their rationale |
||||
- File paths, function names, class names, and specific code identifiers |
||||
- User requirements and preferences |
||||
- Current state of work (what was done, what remains) |
||||
- Any errors encountered and their resolutions |
||||
|
||||
Keep the summary under 800 words. Use bullet points for clarity. |
||||
|
||||
Conversation segment to summarize: |
||||
"""; |
||||
|
||||
private final ChatModel chatModel; |
||||
|
||||
public SessionMemoryCompact(ChatModel chatModel) { |
||||
this.chatModel = chatModel; |
||||
} |
||||
|
||||
/** |
||||
* 执行 Session Memory 压缩。 |
||||
* |
||||
* @param history 当前消息历史（不直接修改，返回新列表） |
||||
* @return 压缩结果；如果无法压缩返回 noAction |
||||
*/ |
||||
public CompactionResult compact(List<Message> history) { |
||||
if (history.size() <= MIN_KEEP_TEXT_MSGS + 2) { |
||||
return CompactionResult.noAction(CompactLayer.SESSION_MEMORY, |
||||
"Too few messages to compact"); |
||||
} |
||||
|
||||
int before = history.size(); |
||||
|
||||
// 找到系统提示词（第一条）
|
||||
Message systemMsg = history.getFirst(); |
||||
|
||||
// 找到上一次摘要的位置（如果有的话）
|
||||
int lastSummaryIndex = findLastSummaryIndex(history); |
||||
|
||||
// 从摘要之后开始计算可压缩区域
|
||||
int compressibleStart = lastSummaryIndex + 1; |
||||
|
||||
// 从末尾向前找保留段的起始位置
|
||||
int keepStart = findKeepStart(history, compressibleStart); |
||||
|
||||
// 如果可压缩区域太小，不值得压缩
|
||||
if (keepStart - compressibleStart < 4) { |
||||
return CompactionResult.noAction(CompactLayer.SESSION_MEMORY, |
||||
"Not enough messages to compress (only " + (keepStart - compressibleStart) + " in range)"); |
||||
} |
||||
|
||||
// 提取需要压缩的消息段
|
||||
List<Message> toCompress = history.subList(compressibleStart, keepStart); |
||||
|
||||
// 生成摘要
|
||||
String summary; |
||||
try { |
||||
summary = generateSummary(toCompress); |
||||
} catch (Exception e) { |
||||
log.warn("Session memory compression failed: {}", e.getMessage()); |
||||
return CompactionResult.failure(CompactLayer.SESSION_MEMORY, |
||||
"Summary generation failed: " + e.getMessage()); |
||||
} |
||||
|
||||
if (summary == null || summary.isBlank()) { |
||||
return CompactionResult.failure(CompactLayer.SESSION_MEMORY, |
||||
"Empty summary generated"); |
||||
} |
||||
|
||||
// 构建新历史
|
||||
List<Message> newHistory = new ArrayList<>(); |
||||
newHistory.add(systemMsg); |
||||
|
||||
// 保留旧的摘要（如果有的话，合并到新摘要中）
|
||||
String previousSummary = extractPreviousSummary(history, lastSummaryIndex); |
||||
if (previousSummary != null) { |
||||
summary = "=== Earlier Context ===\n" + previousSummary + "\n\n=== Recent Activity ===\n" + summary; |
||||
} |
||||
|
||||
// 添加新的摘要消息
|
||||
newHistory.add(new SystemMessage("[Conversation Summary]\n" + summary)); |
||||
|
||||
// 添加保留段
|
||||
for (int i = keepStart; i < history.size(); i++) { |
||||
newHistory.add(history.get(i)); |
||||
} |
||||
|
||||
int after = newHistory.size(); |
||||
return new CompactionResult(true, CompactLayer.SESSION_MEMORY, before, after, summary, |
||||
"Session memory compacted: " + before + " → " + after + " messages"); |
||||
} |
||||
|
||||
/** |
||||
* 获取压缩后的新历史。调用方需要先调用 compact() 确认成功，然后调用此方法获取结果。 |
||||
* 为避免重复逻辑，此方法重新执行压缩并返回新历史。 |
||||
*/ |
||||
public List<Message> getCompactedHistory(List<Message> history) { |
||||
if (history.size() <= MIN_KEEP_TEXT_MSGS + 2) return null; |
||||
|
||||
Message systemMsg = history.getFirst(); |
||||
int lastSummaryIndex = findLastSummaryIndex(history); |
||||
int compressibleStart = lastSummaryIndex + 1; |
||||
int keepStart = findKeepStart(history, compressibleStart); |
||||
|
||||
if (keepStart - compressibleStart < 4) return null; |
||||
|
||||
List<Message> toCompress = history.subList(compressibleStart, keepStart); |
||||
String summary; |
||||
try { |
||||
summary = generateSummary(toCompress); |
||||
} catch (Exception e) { |
||||
return null; |
||||
} |
||||
if (summary == null || summary.isBlank()) return null; |
||||
|
||||
List<Message> newHistory = new ArrayList<>(); |
||||
newHistory.add(systemMsg); |
||||
|
||||
String previousSummary = extractPreviousSummary(history, lastSummaryIndex); |
||||
if (previousSummary != null) { |
||||
summary = "=== Earlier Context ===\n" + previousSummary + "\n\n=== Recent Activity ===\n" + summary; |
||||
} |
||||
|
||||
newHistory.add(new SystemMessage("[Conversation Summary]\n" + summary)); |
||||
for (int i = keepStart; i < history.size(); i++) { |
||||
newHistory.add(history.get(i)); |
||||
} |
||||
|
||||
return newHistory; |
||||
} |
||||
|
||||
// ── 内部方法 ──
|
||||
|
||||
/** 找到历史中最后一个 [Conversation Summary] 系统消息的索引 */ |
||||
private int findLastSummaryIndex(List<Message> history) { |
||||
for (int i = history.size() - 1; i >= 1; i--) { |
||||
if (history.get(i) instanceof SystemMessage sm |
||||
&& sm.getText() != null |
||||
&& sm.getText().startsWith("[Conversation Summary]")) { |
||||
return i; |
||||
} |
||||
} |
||||
return 0; // 没有摘要，从系统提示之后开始
|
||||
} |
||||
|
||||
/** 从末尾向前找保留段的起始位置 */ |
||||
private int findKeepStart(List<Message> history, int minStart) { |
||||
int textMsgCount = 0; |
||||
long estimatedTokens = 0; |
||||
|
||||
for (int i = history.size() - 1; i >= minStart; i--) { |
||||
Message msg = history.get(i); |
||||
|
||||
// 估算 token 量
|
||||
long msgTokens = estimateTokens(msg); |
||||
estimatedTokens += msgTokens; |
||||
|
||||
if (msg instanceof UserMessage || msg instanceof AssistantMessage) { |
||||
textMsgCount++; |
||||
} |
||||
|
||||
// 确保不会拆分 tool_use / tool_result 对
|
||||
// 如果当前是 ToolResponseMessage，它的 AssistantMessage（含 tool_calls）应在前面
|
||||
if (msg instanceof ToolResponseMessage && i > minStart) { |
||||
continue; // 继续往前包含对应的 AssistantMessage
|
||||
} |
||||
|
||||
// 满足最小保留条件，且已达到上限则停止
|
||||
if (textMsgCount >= MIN_KEEP_TEXT_MSGS && estimatedTokens >= MIN_KEEP_TOKENS) { |
||||
// 检查是否达到 token 上限
|
||||
if (estimatedTokens >= MAX_KEEP_TOKENS) { |
||||
return i; |
||||
} |
||||
} |
||||
} |
||||
|
||||
// 如果从 minStart 开始全部都在保留范围内，返回 minStart
|
||||
// 说明消息不够多，不需要压缩
|
||||
return minStart; |
||||
} |
||||
|
||||
/** 估算消息的 token 数 */ |
||||
private long estimateTokens(Message msg) { |
||||
String text = switch (msg) { |
||||
case UserMessage um -> um.getText(); |
||||
case AssistantMessage am -> am.getText(); |
||||
case SystemMessage sm -> sm.getText(); |
||||
case ToolResponseMessage trm -> { |
||||
StringBuilder sb = new StringBuilder(); |
||||
for (var resp : trm.getResponses()) { |
||||
if (resp.responseData() != null) { |
||||
sb.append(resp.responseData().toString()); |
||||
} |
||||
} |
||||
yield sb.toString(); |
||||
} |
||||
default -> ""; |
||||
}; |
||||
if (text == null || text.isEmpty()) return 10; // 最小估算
|
||||
return (long) (text.length() / CHARS_PER_TOKEN); |
||||
} |
||||
|
||||
/** 提取上一次的摘要文本 */ |
||||
private String extractPreviousSummary(List<Message> history, int summaryIndex) { |
||||
if (summaryIndex <= 0) return null; |
||||
Message msg = history.get(summaryIndex); |
||||
if (msg instanceof SystemMessage sm && sm.getText() != null) { |
||||
String text = sm.getText(); |
||||
if (text.startsWith("[Conversation Summary]\n")) { |
||||
return text.substring("[Conversation Summary]\n".length()); |
||||
} |
||||
if (text.startsWith("[Conversation Summary] ")) { |
||||
return text.substring("[Conversation Summary] ".length()); |
||||
} |
||||
} |
||||
return null; |
||||
} |
||||
|
||||
/** 调用 AI 生成对话段摘要 */ |
||||
private String generateSummary(List<Message> segment) { |
||||
StringBuilder dialogText = new StringBuilder(); |
||||
for (Message msg : segment) { |
||||
switch (msg) { |
||||
case UserMessage um -> dialogText.append("[User] ").append(um.getText()).append("\n"); |
||||
case AssistantMessage am -> { |
||||
if (am.getText() != null && !am.getText().isBlank()) { |
||||
String text = am.getText(); |
||||
if (text.length() > 800) text = text.substring(0, 800) + "..."; |
||||
dialogText.append("[Assistant] ").append(text).append("\n"); |
||||
} |
||||
if (am.hasToolCalls()) { |
||||
for (var tc : am.getToolCalls()) { |
||||
dialogText.append("[Tool Call] ").append(tc.name()).append("\n"); |
||||
} |
||||
} |
||||
} |
||||
case ToolResponseMessage trm -> { |
||||
for (var resp : trm.getResponses()) { |
||||
String data = resp.responseData() != null ? resp.responseData().toString() : ""; |
||||
if (data.length() > 200) data = data.substring(0, 200) + "..."; |
||||
dialogText.append("[Tool Result: ").append(resp.name()).append("] ") |
||||
.append(data).append("\n"); |
||||
} |
||||
} |
||||
default -> {} |
||||
} |
||||
} |
||||
|
||||
if (dialogText.isEmpty()) return null; |
||||
|
||||
Prompt prompt = new Prompt(List.of(new UserMessage(SUMMARY_PROMPT + dialogText))); |
||||
ChatResponse response = chatModel.call(prompt); |
||||
return response.getResult().getOutput().getText(); |
||||
} |
||||
} |
||||
@ -0,0 +1,105 @@ |
||||
package com.claudecode.permission; |
||||
|
||||
import java.util.List; |
||||
import java.util.Set; |
||||
|
||||
/** |
||||
* 危险命令模式检测 —— 识别可能有害的 shell 命令。 |
||||
* <p> |
||||
* 即使在 BYPASS 模式下也会对这些命令发出警告。 |
||||
*/ |
||||
public final class DangerousPatterns { |
||||
|
||||
private DangerousPatterns() {} |
||||
|
||||
/** 危险 shell 命令前缀（不区分大小写匹配） */ |
||||
private static final List<String> DANGEROUS_BASH_PREFIXES = List.of( |
||||
"rm -rf /", |
||||
"rm -rf ~", |
||||
"rm -rf .", |
||||
"rm -r /", |
||||
"rmdir /s", |
||||
"del /f /s /q", |
||||
"format ", |
||||
"mkfs.", |
||||
"dd if=", |
||||
"> /dev/sda", |
||||
"chmod -R 777 /", |
||||
"chown -R", |
||||
":(){:|:&};:" // fork bomb
|
||||
); |
||||
|
||||
/** 危险代码执行模式 */ |
||||
private static final List<String> CODE_EXECUTION_PATTERNS = List.of( |
||||
"eval ", |
||||
"exec ", |
||||
"python -c", |
||||
"python3 -c", |
||||
"node -e", |
||||
"ruby -e", |
||||
"perl -e", |
||||
"| sh", |
||||
"| bash", |
||||
"| zsh", |
||||
"| powershell", |
||||
"| pwsh", |
||||
"curl | sh", |
||||
"wget | sh", |
||||
"Invoke-Expression", |
||||
"iex ", |
||||
"Start-Process", |
||||
"Add-Type" |
||||
); |
||||
|
||||
/** 在规则匹配中应自动拒绝的工具级通配符 */ |
||||
private static final Set<String> DANGEROUS_TOOL_WILDCARDS = Set.of( |
||||
"Bash", // 不应允许所有 bash 命令
|
||||
"Bash(*)", |
||||
"PowerShell", |
||||
"PowerShell(*)" |
||||
); |
||||
|
||||
/** |
||||
* 检测命令是否包含危险模式 |
||||
* |
||||
* @param command shell 命令文本 |
||||
* @return 如果危险返回原因描述，否则返回 null |
||||
*/ |
||||
public static String detectDangerous(String command) { |
||||
if (command == null || command.isBlank()) return null; |
||||
String lower = command.toLowerCase().trim(); |
||||
|
||||
for (String prefix : DANGEROUS_BASH_PREFIXES) { |
||||
if (lower.startsWith(prefix.toLowerCase()) || lower.contains(prefix.toLowerCase())) { |
||||
return "Dangerous command detected: " + prefix.trim(); |
||||
} |
||||
} |
||||
|
||||
for (String pattern : CODE_EXECUTION_PATTERNS) { |
||||
if (lower.contains(pattern.toLowerCase())) { |
||||
return "Code execution pattern detected: " + pattern.trim(); |
||||
} |
||||
} |
||||
|
||||
return null; |
||||
} |
||||
|
||||
/** |
||||
* 检测是否为危险的工具级通配符规则 |
||||
* <p> |
||||
* 用于防止用户添加过于宽泛的 "always allow" 规则。 |
||||
*/ |
||||
public static boolean isDangerousWildcard(String ruleStr) { |
||||
return DANGEROUS_TOOL_WILDCARDS.contains(ruleStr); |
||||
} |
||||
|
||||
/** |
||||
* 获取危险原因的简短描述 |
||||
*/ |
||||
public static String getDangerLevel(String command) { |
||||
String reason = detectDangerous(command); |
||||
if (reason == null) return "LOW"; |
||||
if (reason.contains("Dangerous command")) return "HIGH"; |
||||
return "MEDIUM"; |
||||
} |
||||
} |
||||
@ -0,0 +1,173 @@ |
||||
package com.claudecode.permission; |
||||
|
||||
import com.claudecode.permission.PermissionTypes.*; |
||||
|
||||
import java.util.List; |
||||
import java.util.Map; |
||||
import java.util.Set; |
||||
|
||||
/** |
||||
* 权限规则引擎 —— 根据规则、模式和工具属性做出权限决策。 |
||||
* <p> |
||||
* 决策流程： |
||||
* <ol> |
||||
* <li>检查全局模式（BYPASS → 全部允许，DONT_ASK → 拒绝需确认的）</li> |
||||
* <li>检查 alwaysDeny 规则 → 匹配则 DENY</li> |
||||
* <li>检查 alwaysAllow 规则 → 匹配则 ALLOW</li> |
||||
* <li>只读工具 → ALLOW</li> |
||||
* <li>ACCEPT_EDITS 模式下文件操作 → ALLOW</li> |
||||
* <li>检查危险命令 → 强制 ASK</li> |
||||
* <li>默认 → ASK</li> |
||||
* </ol> |
||||
*/ |
||||
public class PermissionRuleEngine { |
||||
|
||||
private static final Set<String> FILE_EDIT_TOOLS = Set.of("Write", "Edit", "NotebookEdit"); |
||||
private static final Set<String> READ_ONLY_TOOLS = Set.of( |
||||
"Read", "Glob", "Grep", "ListFiles", "WebFetch", "WebSearch", |
||||
"TodoRead", "TaskGet", "TaskList", "AskUserQuestion" |
||||
); |
||||
|
||||
private final PermissionSettings settings; |
||||
|
||||
public PermissionRuleEngine(PermissionSettings settings) { |
||||
this.settings = settings; |
||||
} |
||||
|
||||
/** |
||||
* 评估工具调用的权限 |
||||
* |
||||
* @param toolName 工具名称 |
||||
* @param input 工具参数 |
||||
* @param isReadOnly 工具是否为只读 |
||||
* @return 权限决策 |
||||
*/ |
||||
public PermissionDecision evaluate(String toolName, Map<String, Object> input, boolean isReadOnly) { |
||||
PermissionMode mode = settings.getCurrentMode(); |
||||
|
||||
// BYPASS 模式：全部允许
|
||||
if (mode == PermissionMode.BYPASS) { |
||||
return PermissionDecision.allow("Bypass mode enabled"); |
||||
} |
||||
|
||||
// 获取命令内容（用于 Bash/PowerShell 的命令匹配）
|
||||
String command = extractCommand(toolName, input); |
||||
|
||||
// 检查所有持久化规则
|
||||
List<PermissionRule> rules = settings.getAllRules(); |
||||
|
||||
// 1. 检查 alwaysDeny 规则
|
||||
for (var rule : rules) { |
||||
if (rule.behavior() == PermissionBehavior.DENY && matchesRule(rule, toolName, command)) { |
||||
return PermissionDecision.deny("Denied by rule: " + PermissionSettings.formatRule(rule)); |
||||
} |
||||
} |
||||
|
||||
// 2. 检查 alwaysAllow 规则
|
||||
for (var rule : rules) { |
||||
if (rule.behavior() == PermissionBehavior.ALLOW && matchesRule(rule, toolName, command)) { |
||||
return PermissionDecision.allow("Allowed by rule: " + PermissionSettings.formatRule(rule)); |
||||
} |
||||
} |
||||
|
||||
// 3. 只读工具直接放行
|
||||
if (isReadOnly || READ_ONLY_TOOLS.contains(toolName)) { |
||||
return PermissionDecision.allow("Read-only tool"); |
||||
} |
||||
|
||||
// 4. ACCEPT_EDITS 模式：文件操作工具自动允许
|
||||
if (mode == PermissionMode.ACCEPT_EDITS && FILE_EDIT_TOOLS.contains(toolName)) { |
||||
return PermissionDecision.allow("File edits auto-allowed in accept-edits mode"); |
||||
} |
||||
|
||||
// 5. DONT_ASK 模式：自动拒绝
|
||||
if (mode == PermissionMode.DONT_ASK) { |
||||
return PermissionDecision.deny("Auto-denied in dont-ask mode"); |
||||
} |
||||
|
||||
// 6. 检查危险命令（强制 ASK，附带警告）
|
||||
if (command != null) { |
||||
String danger = DangerousPatterns.detectDangerous(command); |
||||
if (danger != null) { |
||||
String prefix = extractCommandPrefix(command); |
||||
return new PermissionDecision( |
||||
PermissionBehavior.ASK, |
||||
"⚠ DANGEROUS: " + danger, |
||||
toolName, prefix, List.of() |
||||
); |
||||
} |
||||
} |
||||
|
||||
// 7. 默认：需要用户确认
|
||||
String prefix = extractCommandPrefix(command); |
||||
return PermissionDecision.ask(toolName, prefix); |
||||
} |
||||
|
||||
/** |
||||
* 根据用户选择应用权限变更 |
||||
*/ |
||||
public void applyChoice(PermissionChoice choice, String toolName, String command) { |
||||
String prefix = extractCommandPrefix(command); |
||||
switch (choice) { |
||||
case ALWAYS_ALLOW -> { |
||||
var rule = prefix != null |
||||
? PermissionRule.forCommand(toolName, prefix, PermissionBehavior.ALLOW) |
||||
: PermissionRule.forTool(toolName, PermissionBehavior.ALLOW); |
||||
// 检查是否为危险通配符
|
||||
String ruleStr = PermissionSettings.formatRule(rule); |
||||
if (!DangerousPatterns.isDangerousWildcard(ruleStr)) { |
||||
settings.addUserRule(rule); |
||||
} |
||||
} |
||||
case ALWAYS_DENY -> { |
||||
var rule = prefix != null |
||||
? PermissionRule.forCommand(toolName, prefix, PermissionBehavior.DENY) |
||||
: PermissionRule.forTool(toolName, PermissionBehavior.DENY); |
||||
settings.addUserRule(rule); |
||||
} |
||||
case ALLOW_ONCE, DENY_ONCE -> { |
||||
// 单次操作，不持久化
|
||||
} |
||||
} |
||||
} |
||||
|
||||
// ── 内部匹配方法 ──
|
||||
|
||||
/** 检查规则是否匹配当前工具和命令 */ |
||||
boolean matchesRule(PermissionRule rule, String toolName, String command) { |
||||
// 工具名不匹配直接跳过
|
||||
if (!rule.toolName().equalsIgnoreCase(toolName)) return false; |
||||
|
||||
String content = rule.ruleContent(); |
||||
// 通配符 * 匹配所有命令
|
||||
if ("*".equals(content)) return true; |
||||
|
||||
// 前缀匹配模式：npm:* 匹配以 "npm" 开头的命令
|
||||
if (content.endsWith(":*") && command != null) { |
||||
String prefix = content.substring(0, content.length() - 2); |
||||
return command.toLowerCase().startsWith(prefix.toLowerCase()); |
||||
} |
||||
|
||||
// 精确匹配
|
||||
return content.equalsIgnoreCase(command); |
||||
} |
||||
|
||||
/** 从工具参数中提取命令文本 */ |
||||
private String extractCommand(String toolName, Map<String, Object> input) { |
||||
if (input == null) return null; |
||||
return switch (toolName) { |
||||
case "Bash" -> (String) input.get("command"); |
||||
case "Write" -> (String) input.get("file_path"); |
||||
case "Edit" -> (String) input.get("file_path"); |
||||
default -> null; |
||||
}; |
||||
} |
||||
|
||||
/** 提取命令前缀（第一个空格前的部分） */ |
||||
private String extractCommandPrefix(String command) { |
||||
if (command == null || command.isBlank()) return null; |
||||
String trimmed = command.trim(); |
||||
int space = trimmed.indexOf(' '); |
||||
return space > 0 ? trimmed.substring(0, space) : trimmed; |
||||
} |
||||
} |
||||
@ -0,0 +1,200 @@ |
||||
package com.claudecode.permission; |
||||
|
||||
import com.claudecode.permission.PermissionTypes.PermissionBehavior; |
||||
import com.claudecode.permission.PermissionTypes.PermissionRule; |
||||
import com.fasterxml.jackson.annotation.JsonIgnoreProperties; |
||||
import com.fasterxml.jackson.databind.ObjectMapper; |
||||
import com.fasterxml.jackson.databind.SerializationFeature; |
||||
|
||||
import java.io.IOException; |
||||
import java.nio.file.Files; |
||||
import java.nio.file.Path; |
||||
import java.util.ArrayList; |
||||
import java.util.List; |
||||
|
||||
/** |
||||
* 权限设置持久化 —— 管理用户级和项目级权限规则文件。 |
||||
* <p> |
||||
* 存储结构： |
||||
* <ul> |
||||
* <li>用户级: ~/.claude-code-java/settings.json</li> |
||||
* <li>项目级: .claude-code-java/settings.json</li> |
||||
* </ul> |
||||
* 加载优先级: 项目级 > 用户级 > 会话级 |
||||
*/ |
||||
public class PermissionSettings { |
||||
|
||||
private static final String SETTINGS_DIR = ".claude-code-java"; |
||||
private static final String SETTINGS_FILE = "settings.json"; |
||||
private static final ObjectMapper MAPPER = new ObjectMapper() |
||||
.enable(SerializationFeature.INDENT_OUTPUT); |
||||
|
||||
/** 内存中的合并规则（从所有来源加载后合并） */ |
||||
private final List<PermissionRule> sessionRules = new ArrayList<>(); |
||||
private PermissionTypes.PermissionMode currentMode = PermissionTypes.PermissionMode.DEFAULT; |
||||
|
||||
private final Path userSettingsPath; |
||||
private final Path projectSettingsPath; |
||||
|
||||
private SettingsData userData = new SettingsData(); |
||||
private SettingsData projectData = new SettingsData(); |
||||
|
||||
public PermissionSettings() { |
||||
this(Path.of(System.getProperty("user.home")), |
||||
Path.of(System.getProperty("user.dir"))); |
||||
} |
||||
|
||||
public PermissionSettings(Path userHome, Path projectDir) { |
||||
this.userSettingsPath = userHome.resolve(SETTINGS_DIR).resolve(SETTINGS_FILE); |
||||
this.projectSettingsPath = projectDir.resolve(SETTINGS_DIR).resolve(SETTINGS_FILE); |
||||
} |
||||
|
||||
/** 从磁盘加载所有设置 */ |
||||
public void load() { |
||||
userData = loadFromFile(userSettingsPath); |
||||
projectData = loadFromFile(projectSettingsPath); |
||||
// 项目级模式优先
|
||||
if (projectData.permissions.mode != null) { |
||||
currentMode = projectData.permissions.mode; |
||||
} else if (userData.permissions.mode != null) { |
||||
currentMode = userData.permissions.mode; |
||||
} |
||||
} |
||||
|
||||
/** 获取所有合并后的规则（项目级 > 用户级 > 会话级） */ |
||||
public List<PermissionRule> getAllRules() { |
||||
var rules = new ArrayList<PermissionRule>(); |
||||
// 项目级优先
|
||||
rules.addAll(toRules(projectData.permissions.alwaysAllow, PermissionBehavior.ALLOW)); |
||||
rules.addAll(toRules(projectData.permissions.alwaysDeny, PermissionBehavior.DENY)); |
||||
// 用户级
|
||||
rules.addAll(toRules(userData.permissions.alwaysAllow, PermissionBehavior.ALLOW)); |
||||
rules.addAll(toRules(userData.permissions.alwaysDeny, PermissionBehavior.DENY)); |
||||
// 会话级
|
||||
rules.addAll(sessionRules); |
||||
return rules; |
||||
} |
||||
|
||||
/** 添加规则并保存到用户级设置 */ |
||||
public void addUserRule(PermissionRule rule) { |
||||
if (rule.behavior() == PermissionBehavior.ALLOW) { |
||||
userData.permissions.alwaysAllow.add(formatRule(rule)); |
||||
} else if (rule.behavior() == PermissionBehavior.DENY) { |
||||
userData.permissions.alwaysDeny.add(formatRule(rule)); |
||||
} |
||||
saveToFile(userSettingsPath, userData); |
||||
} |
||||
|
||||
/** 添加规则到会话级（不持久化） */ |
||||
public void addSessionRule(PermissionRule rule) { |
||||
sessionRules.add(rule); |
||||
} |
||||
|
||||
/** 移除用户级规则 */ |
||||
public void removeUserRule(String ruleStr) { |
||||
userData.permissions.alwaysAllow.remove(ruleStr); |
||||
userData.permissions.alwaysDeny.remove(ruleStr); |
||||
saveToFile(userSettingsPath, userData); |
||||
} |
||||
|
||||
/** 清除所有规则 */ |
||||
public void clearAll() { |
||||
userData.permissions.alwaysAllow.clear(); |
||||
userData.permissions.alwaysDeny.clear(); |
||||
projectData.permissions.alwaysAllow.clear(); |
||||
projectData.permissions.alwaysDeny.clear(); |
||||
sessionRules.clear(); |
||||
saveToFile(userSettingsPath, userData); |
||||
} |
||||
|
||||
public PermissionTypes.PermissionMode getCurrentMode() { |
||||
return currentMode; |
||||
} |
||||
|
||||
public void setCurrentMode(PermissionTypes.PermissionMode mode) { |
||||
this.currentMode = mode; |
||||
userData.permissions.mode = mode; |
||||
saveToFile(userSettingsPath, userData); |
||||
} |
||||
|
||||
/** 获取所有已保存规则的可读列表 */ |
||||
public List<String> listRules() { |
||||
var result = new ArrayList<String>(); |
||||
for (var r : userData.permissions.alwaysAllow) { |
||||
result.add("[user] ALLOW " + r); |
||||
} |
||||
for (var r : userData.permissions.alwaysDeny) { |
||||
result.add("[user] DENY " + r); |
||||
} |
||||
for (var r : projectData.permissions.alwaysAllow) { |
||||
result.add("[proj] ALLOW " + r); |
||||
} |
||||
for (var r : projectData.permissions.alwaysDeny) { |
||||
result.add("[proj] DENY " + r); |
||||
} |
||||
for (var r : sessionRules) { |
||||
result.add("[sess] " + r.behavior() + " " + formatRule(r)); |
||||
} |
||||
return result; |
||||
} |
||||
|
||||
// ── 内部方法 ──
|
||||
|
||||
private SettingsData loadFromFile(Path path) { |
||||
if (!Files.exists(path)) return new SettingsData(); |
||||
try { |
||||
return MAPPER.readValue(path.toFile(), SettingsData.class); |
||||
} catch (IOException e) { |
||||
return new SettingsData(); |
||||
} |
||||
} |
||||
|
||||
private void saveToFile(Path path, SettingsData data) { |
||||
try { |
||||
Files.createDirectories(path.getParent()); |
||||
MAPPER.writeValue(path.toFile(), data); |
||||
} catch (IOException e) { |
||||
// 静默失败，不影响主流程
|
||||
} |
||||
} |
||||
|
||||
private List<PermissionRule> toRules(List<String> ruleStrings, PermissionBehavior behavior) { |
||||
return ruleStrings.stream() |
||||
.map(s -> parseRule(s, behavior)) |
||||
.toList(); |
||||
} |
||||
|
||||
/** 解析规则字符串，格式: "ToolName(pattern)" 或 "ToolName" */ |
||||
static PermissionRule parseRule(String ruleStr, PermissionBehavior behavior) { |
||||
int parenStart = ruleStr.indexOf('('); |
||||
if (parenStart > 0 && ruleStr.endsWith(")")) { |
||||
String toolName = ruleStr.substring(0, parenStart); |
||||
String content = ruleStr.substring(parenStart + 1, ruleStr.length() - 1); |
||||
return new PermissionRule(toolName, content, behavior); |
||||
} |
||||
return PermissionRule.forTool(ruleStr, behavior); |
||||
} |
||||
|
||||
/** 格式化规则为字符串 */ |
||||
static String formatRule(PermissionRule rule) { |
||||
if ("*".equals(rule.ruleContent())) { |
||||
return rule.toolName(); |
||||
} |
||||
return rule.toolName() + "(" + rule.ruleContent() + ")"; |
||||
} |
||||
|
||||
// ── JSON 数据结构 ──
|
||||
|
||||
@JsonIgnoreProperties(ignoreUnknown = true) |
||||
static class SettingsData { |
||||
public PermissionsBlock permissions = new PermissionsBlock(); |
||||
} |
||||
|
||||
@JsonIgnoreProperties(ignoreUnknown = true) |
||||
static class PermissionsBlock { |
||||
public PermissionTypes.PermissionMode mode; |
||||
public List<String> alwaysAllow = new ArrayList<>(); |
||||
public List<String> alwaysDeny = new ArrayList<>(); |
||||
public List<String> additionalDirectories = new ArrayList<>(); |
||||
} |
||||
} |
||||
@ -0,0 +1,110 @@ |
||||
package com.claudecode.permission; |
||||
|
||||
import java.util.List; |
||||
|
||||
/** |
||||
* 权限管理类型定义 —— 对应 claude-code 中的 permissions.ts。 |
||||
*/ |
||||
public final class PermissionTypes { |
||||
|
||||
private PermissionTypes() {} |
||||
|
||||
/** 权限行为 */ |
||||
public enum PermissionBehavior { |
||||
ALLOW, // 允许执行
|
||||
DENY, // 拒绝执行
|
||||
ASK // 需要用户确认
|
||||
} |
||||
|
||||
/** 权限模式 */ |
||||
public enum PermissionMode { |
||||
/** 默认模式：非只读工具需要用户确认 */ |
||||
DEFAULT, |
||||
/** 自动允许文件编辑，shell 命令仍需确认 */ |
||||
ACCEPT_EDITS, |
||||
/** 跳过所有权限检查（不安全） */ |
||||
BYPASS, |
||||
/** 自动拒绝而非询问用户（无头模式） */ |
||||
DONT_ASK |
||||
} |
||||
|
||||
/** |
||||
* 权限规则 —— 定义工具和命令模式的权限行为。 |
||||
* <p> |
||||
* 示例： |
||||
* <ul> |
||||
* <li>{@code PermissionRule("Bash", "npm:*", ALLOW)} — 允许所有 npm 命令</li> |
||||
* <li>{@code PermissionRule("Bash", "rm -rf:*", DENY)} — 拒绝 rm -rf</li> |
||||
* <li>{@code PermissionRule("Write", "*", ALLOW)} — 允许所有文件写入</li> |
||||
* </ul> |
||||
* |
||||
* @param toolName 工具名称（如 Bash, Write, Edit） |
||||
* @param ruleContent 规则内容，支持通配符 *（如 "npm:*", "git:*", "*"） |
||||
* @param behavior 权限行为 |
||||
*/ |
||||
public record PermissionRule( |
||||
String toolName, |
||||
String ruleContent, |
||||
PermissionBehavior behavior |
||||
) { |
||||
/** 匹配整个工具（无命令模式限制） */ |
||||
public static PermissionRule forTool(String toolName, PermissionBehavior behavior) { |
||||
return new PermissionRule(toolName, "*", behavior); |
||||
} |
||||
|
||||
/** 匹配工具的特定命令前缀 */ |
||||
public static PermissionRule forCommand(String toolName, String prefix, PermissionBehavior behavior) { |
||||
return new PermissionRule(toolName, prefix + ":*", behavior); |
||||
} |
||||
} |
||||
|
||||
/** 权限决策结果 */ |
||||
public record PermissionDecision( |
||||
PermissionBehavior behavior, |
||||
String reason, |
||||
String toolName, |
||||
String commandPrefix, |
||||
List<PermissionRule> suggestedRules |
||||
) { |
||||
public static PermissionDecision allow(String reason) { |
||||
return new PermissionDecision(PermissionBehavior.ALLOW, reason, null, null, List.of()); |
||||
} |
||||
|
||||
public static PermissionDecision deny(String reason) { |
||||
return new PermissionDecision(PermissionBehavior.DENY, reason, null, null, List.of()); |
||||
} |
||||
|
||||
public static PermissionDecision ask(String toolName, String commandPrefix) { |
||||
// 生成建议规则供用户选择 "always allow"
|
||||
var suggested = List.of( |
||||
PermissionRule.forCommand(toolName, commandPrefix, PermissionBehavior.ALLOW) |
||||
); |
||||
return new PermissionDecision(PermissionBehavior.ASK, "Requires user confirmation", |
||||
toolName, commandPrefix, suggested); |
||||
} |
||||
|
||||
public boolean isAllowed() { |
||||
return behavior == PermissionBehavior.ALLOW; |
||||
} |
||||
|
||||
public boolean isDenied() { |
||||
return behavior == PermissionBehavior.DENY; |
||||
} |
||||
|
||||
public boolean needsAsk() { |
||||
return behavior == PermissionBehavior.ASK; |
||||
} |
||||
} |
||||
|
||||
/** 权限确认选项（用户在 UI 中的选择） */ |
||||
public enum PermissionChoice { |
||||
/** 允许本次执行 */ |
||||
ALLOW_ONCE, |
||||
/** 始终允许此模式 */ |
||||
ALWAYS_ALLOW, |
||||
/** 拒绝本次执行 */ |
||||
DENY_ONCE, |
||||
/** 始终拒绝此模式 */ |
||||
ALWAYS_DENY |
||||
} |
||||
} |
||||
Loading…
Reference in new issue