@sofagent/rules
Advanced tools
sofagent 规则模块——从 audit 抽出，零 git 依赖，供编排模块 tool call 事前拦截；v1.3.9 起含官方 AST 规则引擎（sofagent-ruleset-ast，经临时文件驱动 TS 编译器，无仓库 fs 依赖）
sofagent 规则引擎纯函数包——从 audit 包抽出，零 fs/git 依赖，供编排模块 tool call 事前拦截。
npm install @sofagent/rules
库包（无 CLI），随编排模块引用。Node.js 18+。
RulesEngine — 规则引擎类，接受规则集 + tool call context，返回拦截裁决defaultToolRules — 默认规则集InterceptVerdict / ToolCallContext / ToolRule — 核心类型定义本包是 tool-level 触发时机的适配层，不独立维护规则正则在跨引擎共用规则定义（A1 敏感文件 / A2 密钥泄漏 / A9 注入）上，与 git-diff 审计引擎（engine/audit）共用 @sofagent/core 的同一套定义（shared/rule-definitions.ts 的身份目录 + shared/rule-patterns.ts 的检测正则）——两处 import 同一来源，而非各写一份结构相同的定义。
纪律外延：判定规则只有一个事实源。企业侧若另建判定点（自建模型网关 / 代理做流量侧 PII 过滤与敏感度分流），必须集成本引擎的同一套规则与检测器（经 v1.4.9 第八章检测器插槽嵌入组件），不得另起一套——每多一处独立实现，就是一次口径分裂风险。
v1.5.2：网络出口治理面——host 白名单声明面（默认空全拒 opt-in）+ 裁决事件契约可导出（判定底座消费源）。
FAQs
sofagent 规则模块——从 audit 抽出，零 git 依赖，供编排模块 tool call 事前拦截；v1.3.9 起含官方 AST 规则引擎（sofagent-ruleset-ast，经临时文件驱动 TS 编译器，无仓库 fs 依赖）
The npm package @sofagent/rules receives a total of 109 weekly downloads. As such, @sofagent/rules popularity was classified as not popular.
We found that @sofagent/rules demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.