{"id":100467,"date":"2026-09-04T19:04:07","date_gmt":"2026-09-04T11:04:07","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/100467.html"},"modified":"2026-09-04T19:04:07","modified_gmt":"2026-09-04T11:04:07","slug":"7%e5%a4%a7%e5%bc%80%e6%ba%90agent%e6%ba%90%e7%a0%81%e5%af%b9%e6%af%94%e8%a7%a3%e8%af%bb-%e5%ae%89%e5%85%a8%e4%b8%8e%e6%9d%83%e9%99%90%e6%8e%a7%e5%88%b6","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/100467.html","title":{"rendered":"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236"},"content":{"rendered":"

7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236<\/h2>\n

\u672c\u6587\u662f\u300c7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u300d\u7cfb\u5217\u7b2c 10 \u7bc7，\u4e5f\u662f\u672c\u7cfb\u5217\u7684\u6536\u5c3e\u7bc7\u3002\u8bc4\u4f30\u5bf9\u8c61：codex\u3001gemini-cli\u3001qwen-code\u3001opencode\u3001kimi-code\u3001deepseek-harness（\u4e0b\u79f0 dsh）\u3001oh-my-pi（\u4e0b\u79f0 omp）\u3002<\/p>\n\n\u7bc7\u6587\u7ae0\u5185\u5bb9\u901f\u89c8<\/tr>\n\n\n\n\n\n\n\n\n\n\n\n\n
\u603b\u8ff0<\/td>\n\u62c6\u4e86\u4e03\u5927\u5f00\u6e90 Agent \u7684\u6e90\u7801，\u6700\u9ad8\u5206\u7adf\u7136\u4e0d\u662f Codex<\/td>\n\u603b\u4f53\u7ed3\u8bba\u3001\u8bc4\u4f30\u65b9\u6cd5\u4e0e\u8bc4\u5206\u5361<\/td>\n<\/tr>\n
01<\/td>\n\u67b6\u6784\u5bf9\u6bd4<\/td>\n\u56db\u79cd\u6d41\u6d3e\u4e0e\u5206\u5316\u6839\u6e90\u3001\u4e3b\u5faa\u73af\u4e0e\u4e8b\u4ef6\u673a\u5236\u3001\u63d2\u4ef6\u5316\u4e0e\u8026\u5408\u98ce\u9669<\/td>\n<\/tr>\n
02<\/td>\n\u4e0a\u4e0b\u6587\u7ba1\u7406<\/td>\n\u538b\u7f29\u89e6\u53d1\u9608\u503c\u3001\u6458\u8981\u65b9\u5f0f\u3001token \u8ba1\u6570\u53e3\u5f84\u3001\u8de8\u4f1a\u8bdd\u8bb0\u5fc6<\/td>\n<\/tr>\n
03<\/td>\n\u4f1a\u8bdd\u7ba1\u7406<\/td>\n\u6301\u4e45\u5316\u6a21\u578b\u4e09\u5c42\u6b21\u3001\u5e76\u53d1\u63a7\u5236\u3001\u5d29\u6e83\u6062\u590d\u4e0e resume \/ fork<\/td>\n<\/tr>\n
04<\/td>\n\u5de5\u5177\u8c03\u7528<\/td>\n\u6ce8\u518c\u4e0e\u53ef\u89c1\u6027\u3001\u5e76\u884c\u8c03\u5ea6\u56db\u79cd\u8bed\u4e49\u3001\u5ba1\u6279\u95e8\u63a7\u3001\u9519\u8bef\u5904\u7406<\/td>\n<\/tr>\n
05<\/td>\n\u91cd\u8fde\u4e0e\u5bb9\u9519<\/td>\n\u91cd\u8bd5\u9884\u7b97\u3001\u6d41\u4e2d\u65ad\u5904\u7406\u3001\u964d\u7ea7\u94fe\u3001\u526f\u4f5c\u7528\u5b89\u5168<\/td>\n<\/tr>\n
06<\/td>\n\u7cfb\u7edf\u63d0\u793a\u8bcd\u4e0e\u6307\u4ee4\u9075\u5faa<\/td>\n\u56db\u79cd\u7ec4\u88c5\u8303\u5f0f\u3001\u52a8\u6001\u6ce8\u5165\u3001\u6ce8\u5165\u9632\u5fa1\u4e09\u5c42\u4e0e\u5171\u540c\u655e\u53e3<\/td>\n<\/tr>\n
07<\/td>\n\u601d\u7ef4\u94fe\u4e0e\u5de5\u4f5c\u6d41\u7f16\u6392<\/td>\n\u601d\u7ef4\u94fe\u63a5\u5165\u3001plan \u6a21\u5f0f\u8bed\u4e49\u3001\u5b50\u4ee3\u7406\u6cbb\u7406\u3001\u5de5\u4f5c\u6d41\u5f15\u64ce<\/td>\n<\/tr>\n
08<\/td>\n\u6027\u80fd\u8bbe\u8ba1<\/td>\n\u524d\u7f00\u7f13\u5b58\u4e09\u6863\u5206\u5316\u3001\u542f\u52a8\u4f18\u5316\u3001\u6210\u672c\u6838\u7b97<\/td>\n<\/tr>\n
09<\/td>\n\u53ef\u6269\u5c55\u6027<\/td>\nMCP \u63a5\u5165\u3001\u81ea\u5b9a\u4e49\u5de5\u5177\u3001\u591a provider\u3001SDK \u4e0e API<\/td>\n<\/tr>\n
10<\/td>\n\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236<\/td>\n\u6c99\u7bb1\u4e24\u79cd\u8bed\u4e49\u3001\u5ba1\u6279\u9ed8\u8ba4\u59ff\u6001\u3001\u4f01\u4e1a\u7ba1\u63a7\u3001\u654f\u611f\u6570\u636e\u4fdd\u62a4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u4e03\u4e2a\u9879\u76ee\u7684\u5b89\u5168\u5c42\u6b21\u4e24\u6781\u5206\u5316：codex \u548c gemini-cli \u6784\u6210\u7b2c\u4e00\u68af\u961f，\u524d\u8005\u6709\u4e09\u5e73\u53f0\u539f\u751f\u6c99\u7bb1\u52a0\u7f51\u7edc\u4ee3\u7406\u52a0\u5b8c\u6574\u4f01\u4e1a\u7ba1\u63a7\u94fe，\u540e\u8005\u6709\u516d\u7ea7\u7b56\u7565\u5f15\u64ce\u52a0\u516d\u79cd\u6c99\u7bb1\u540e\u7aef；\u53e6\u4e00\u7aef，opencode \u5728 SECURITY.md \u91cc\u660e\u786e\u58f0\u660e\u4e0d\u63d0\u4f9b\u6c99\u7bb1，omp \u51fa\u5382\u9ed8\u8ba4\u5168\u81ea\u52a8\u6279\u51c6\u3002\u8bfb\u5b89\u5168\u8bbe\u8ba1\u4e4b\u524d，\u5148\u8981\u6f84\u6e05\u300c\u6c99\u7bb1\u300d\u8fd9\u4e2a\u8bcd\u7684\u4e24\u79cd\u8bed\u4e49\u3002<\/p>\n

\u5148\u6f84\u6e05：\u4e24\u79cd\u6b63\u4ea4\u7684\u9694\u79bb<\/h3>\n

\u4e03\u5bb6\u8bf4\u7684\u300c\u6c99\u7bb1\u300d\u5176\u5b9e\u6307\u4e24\u79cd\u5b8c\u5168\u4e0d\u540c\u7684\u9694\u79bb，\u9009\u578b\u65f6\u5fc5\u987b\u5206\u6e05：<\/p>\n

\u7cfb\u7edf\u8c03\u7528\u4e0e\u8fdb\u7a0b\u9694\u79bb（codex\u3001gemini-cli\u3001qwen-code\u3001dsh）：\u7528 OS \u539f\u751f\u673a\u5236\u7ea6\u675f\u5b50\u8fdb\u7a0b\u80fd\u505a\u4ec0\u4e48，\u80fd\u8c03\u54ea\u4e9b\u7cfb\u7edf\u8c03\u7528\u3001\u80fd\u8bbf\u95ee\u54ea\u4e9b\u8def\u5f84\u3001\u80fd\u8fde\u54ea\u4e9b\u7f51\u7edc\u3002\u9632\u7684\u662f\u300cagent \u9003\u9038\u5230\u7cfb\u7edf\u300d\u3002<\/p>\n

\u5de5\u4f5c\u533a\u6587\u4ef6\u7cfb\u7edf\u89c6\u56fe\u9694\u79bb（omp \u7684 pi-iso）：\u7ed9\u5b50\u4ee3\u7406\u4e00\u4e2a\u5de5\u4f5c\u533a\u7684\u5199\u65f6\u590d\u5236\u526f\u672c\u5e72\u6d3b，\u4ea7\u7269 diff \u56de\u4e3b\u5de5\u4f5c\u533a\u3002\u7ea6\u675f\u7684\u662f\u300c\u6539\u52a8\u843d\u5728\u54ea\u300d，\u4e0d\u7ea6\u675f\u7cfb\u7edf\u8c03\u7528\u3002\u5b50\u4ee3\u7406\u5728\u526f\u672c\u91cc\u4ecd\u80fd\u4efb\u610f\u6267\u884c\u547d\u4ee4，\u53ea\u662f\u6539\u4e0d\u574f\u7528\u6237\u4ed3\u5e93\u3002\u9632\u7684\u662f\u300cagent \u6539\u574f\u4ed3\u5e93\u300d\u3002<\/p>\n

\u4e24\u8005\u6b63\u4ea4，\u7406\u60f3\u65b9\u6848\u662f\u53e0\u52a0\u3002\u6bd4\u5982 omp \u82e5\u8865\u4e00\u5c42 Landlock，\u9694\u79bb\u5c31\u5b8c\u6574\u4e86\u3002<\/p>\n

#mermaid-svg-rs9poj4AeGfdDLPp{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-rs9poj4AeGfdDLPp .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-rs9poj4AeGfdDLPp .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-rs9poj4AeGfdDLPp .error-icon{fill:#552222;}#mermaid-svg-rs9poj4AeGfdDLPp .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-rs9poj4AeGfdDLPp .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-rs9poj4AeGfdDLPp .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-rs9poj4AeGfdDLPp .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-rs9poj4AeGfdDLPp .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-rs9poj4AeGfdDLPp .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-rs9poj4AeGfdDLPp .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-rs9poj4AeGfdDLPp .marker{fill:#333333;stroke:#333333;}#mermaid-svg-rs9poj4AeGfdDLPp .marker.cross{stroke:#333333;}#mermaid-svg-rs9poj4AeGfdDLPp svg{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-rs9poj4AeGfdDLPp p{margin:0;}#mermaid-svg-rs9poj4AeGfdDLPp .label{font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;color:#333;}#mermaid-svg-rs9poj4AeGfdDLPp .cluster-label text{fill:#333;}#mermaid-svg-rs9poj4AeGfdDLPp .cluster-label span{color:#333;}#mermaid-svg-rs9poj4AeGfdDLPp .cluster-label span p{background-color:transparent;}#mermaid-svg-rs9poj4AeGfdDLPp .label text,#mermaid-svg-rs9poj4AeGfdDLPp span{fill:#333;color:#333;}#mermaid-svg-rs9poj4AeGfdDLPp .node rect,#mermaid-svg-rs9poj4AeGfdDLPp .node circle,#mermaid-svg-rs9poj4AeGfdDLPp .node ellipse,#mermaid-svg-rs9poj4AeGfdDLPp .node polygon,#mermaid-svg-rs9poj4AeGfdDLPp .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-rs9poj4AeGfdDLPp .rough-node .label text,#mermaid-svg-rs9poj4AeGfdDLPp .node .label text,#mermaid-svg-rs9poj4AeGfdDLPp .image-shape .label,#mermaid-svg-rs9poj4AeGfdDLPp .icon-shape .label{text-anchor:middle;}#mermaid-svg-rs9poj4AeGfdDLPp .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-rs9poj4AeGfdDLPp .rough-node .label,#mermaid-svg-rs9poj4AeGfdDLPp .node .label,#mermaid-svg-rs9poj4AeGfdDLPp .image-shape .label,#mermaid-svg-rs9poj4AeGfdDLPp .icon-shape .label{text-align:center;}#mermaid-svg-rs9poj4AeGfdDLPp .node.clickable{cursor:pointer;}#mermaid-svg-rs9poj4AeGfdDLPp .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-rs9poj4AeGfdDLPp .arrowheadPath{fill:#333333;}#mermaid-svg-rs9poj4AeGfdDLPp .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-rs9poj4AeGfdDLPp .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-rs9poj4AeGfdDLPp .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-rs9poj4AeGfdDLPp .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-rs9poj4AeGfdDLPp .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-rs9poj4AeGfdDLPp .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-rs9poj4AeGfdDLPp .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-rs9poj4AeGfdDLPp .cluster text{fill:#333;}#mermaid-svg-rs9poj4AeGfdDLPp .cluster span{color:#333;}#mermaid-svg-rs9poj4AeGfdDLPp div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-rs9poj4AeGfdDLPp .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-rs9poj4AeGfdDLPp rect.text{fill:none;stroke-width:0;}#mermaid-svg-rs9poj4AeGfdDLPp .icon-shape,#mermaid-svg-rs9poj4AeGfdDLPp .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-rs9poj4AeGfdDLPp .icon-shape p,#mermaid-svg-rs9poj4AeGfdDLPp .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-rs9poj4AeGfdDLPp .icon-shape .label rect,#mermaid-svg-rs9poj4AeGfdDLPp .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-rs9poj4AeGfdDLPp .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-rs9poj4AeGfdDLPp .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-rs9poj4AeGfdDLPp :root{–mermaid-font-family:\\”trebuchet ms\\”,verdana,arial,sans-serif;}<\/p>\n

<\/p>\n

\u6b63\u4ea4，\u7406\u60f3\u662f\u53e0\u52a0<\/p>\n

<\/span><\/p>\n

<\/p>\n

\u65e0 OS \u6c99\u7bb1<\/p>\n

<\/span><\/p>\n

<\/p>\n

kimi-code：\u9760\u5de5\u5177\u5c42\u654f\u611f\u6587\u4ef6\u8fc7\u6ee4\u515c\u5e95<\/p>\n

<\/span><\/p>\n

<\/p>\n

opencode：SECURITY.md \u660e\u793a\u4e0d\u63d0\u4f9b\u9694\u79bb<\/p>\n

<\/span><\/p>\n

<\/p>\n

\u5de5\u4f5c\u533a\u89c6\u56fe\u9694\u79bb \u2014\u2014 \u9632\u300cagent \u6539\u574f\u4ed3\u5e93\u300d<\/p>\n

<\/span><\/p>\n

<\/p>\n

omp pi-iso：\u5de5\u4f5c\u533a CoW \u526f\u672c，\u4ea7\u7269 diff \u56de\u4e3b\u533a，APFS \/ overlayfs \/ btrfs \/ zfs \/ ProjFS \u7b49 8 \u79cd\u540e\u7aef<\/p>\n

<\/span><\/p>\n

<\/p>\n

\u7cfb\u7edf\u8c03\u7528 \/ \u8fdb\u7a0b\u9694\u79bb \u2014\u2014 \u9632\u300cagent \u9003\u9038\u5230\u7cfb\u7edf\u300d<\/p>\n

<\/span><\/p>\n

<\/p>\n

codex：Seatbelt \/ Landlock+seccomp \/ Win \u53d7\u9650\u4ee4\u724c，\u53e6\u6709 MITM \u7f51\u7edc\u4ee3\u7406<\/p>\n

<\/span><\/p>\n

<\/p>\n

gemini-cli：docker \/ podman \/ sandbox-exec \/ runsc \/ lxc \/ win-native<\/p>\n

<\/span><\/p>\n

<\/p>\n

qwen-code：Docker \u955c\u50cf + 6 \u5957 macOS Seatbelt profile<\/p>\n

<\/span><\/p>\n

<\/p>\n

dsh：bwrap \/ Landlock \/ Seatbelt \/ Win ACL，\u4ec5\u6587\u4ef6\u6548\u679c，\u4e0d\u542b\u7f51\u7edc<\/p>\n

<\/span><\/p>\n

OS \u6c99\u7bb1\u5bf9\u6bd4<\/h3>\n\n\u9879\u76ee\u6c99\u7bb1\u65b9\u6848<\/tr>\n\n\n\n\n\n\n\n\n
codex<\/td>\nSeatbelt \/ Landlock+seccomp \/ Win \u53d7\u9650\u4ee4\u724c，\u4e09\u5e73\u53f0\u539f\u751f<\/td>\n<\/tr>\n
gemini-cli<\/td>\n6 \u4e2a\u6c99\u7bb1\u547d\u4ee4：docker\u3001podman\u3001sandbox-exec\u3001runsc\u3001lxc\u3001windows-native<\/td>\n<\/tr>\n
qwen-code<\/td>\nDocker \u955c\u50cf + macOS 6 \u5957 Seatbelt profile（2 \u7b56\u7565 \u00d7 3 \u7f51\u7edc\u6a21\u5f0f）<\/td>\n<\/tr>\n
opencode<\/td>\n\u65e0，SECURITY.md \u660e\u793a<\/td>\n<\/tr>\n
kimi-code<\/td>\n\u65e0 OS \u6c99\u7bb1<\/td>\n<\/tr>\n
dsh<\/td>\nbwrap\u3001Landlock\u3001Seatbelt\u3001Win ACL，\u4ec5\u6587\u4ef6\u6548\u679c<\/td>\n<\/tr>\n
omp<\/td>\npi-iso \u5de5\u4f5c\u533a\u9694\u79bb，8 \u79cd\u540e\u7aef（APFS\u3001overlayfs\u3001btrfs\u3001zfs\u3001ProjFS \u7b49）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u51e0\u4e2a\u503c\u5f97\u5c55\u5f00\u7684\u5b9e\u73b0：<\/p>\n

codex \u7684\u4e09\u5e73\u53f0\u539f\u751f\u6307\u4e09\u4e2a\u5e73\u53f0\u5404\u7528\u4e00\u5957\u539f\u751f\u673a\u5236，\u4e0d\u8d70\u5bb9\u5668\u5316：macOS Seatbelt\u3001Linux Landlock \u52a0 seccomp\u3001Windows \u53d7\u9650\u4ee4\u724c（sandboxing\/src\/manager.rs:36-76）\u3002<\/p>\n

gemini-cli \u7684\u81ea\u52a8\u63a2\u6d4b：getSandboxCommand() \u6309\u5e73\u53f0\u81ea\u52a8\u9009\u540e\u7aef，macOS \u4f18\u5148 sandbox-exec，\u5426\u5219 docker \u6216 podman（sandboxConfig.ts:43-109）\u3002\u516d\u79cd\u547d\u4ee4\u8986\u76d6\u4e86\u4ece\u5bb9\u5668\u5230 gVisor \u518d\u5230\u539f\u751f\u4ee4\u724c\u7684\u5f3a\u5ea6\u68af\u5ea6\u3002<\/p>\n

dsh \u7684\u80fd\u529b\u6536\u7a84\u662f\u6709\u610f\u58f0\u660e：\u6c99\u7bb1\u8bcd\u6c47\u8868\u53ea\u7ba1\u6587\u4ef6\u8bfb\u5199\u6548\u679c，\u7f51\u7edc\u8bbf\u95ee\u548c\u8fdb\u7a0b\u53ef\u89c1\u6027\u660e\u786e\u5199\u5728\u300c\u4e0d\u5728\u8bcd\u6c47\u8868\u5185\u300d（sandbox\/src\/index.ts:27）\u3002\u58f0\u660e\u8fb9\u754c\u6bd4\u542b\u7cca\u8986\u76d6\u66f4\u8bda\u5b9e，\u4f46\u7f51\u7edc\u4e0d\u7ba1\u786e\u5b9e\u662f\u77ed\u677f\u3002<\/p>\n

omp \u7684 pi-iso \u662f\u8de8\u5e73\u53f0\u62bd\u8c61\u5c42：\u6bcf\u4e2a\u540e\u7aef\u7ed9\u51fa\u300c\u53ea\u8bfb\u4e0b\u5c42\u6811\u7684\u53ef\u5199\u5408\u5e76\u89c6\u56fe\u300d，\u4e0d\u505a\u6df1\u62f7\u8d1d\u3002macOS \u7528 APFS clonefile，Linux \u7528 overlayfs（fallback \u5230 fuse-overlayfs）\u3001btrfs \u5feb\u7167\u3001zfs\u3001reflink，Windows \u7528 ProjFS \u548c\u5757\u514b\u9686，\u90fd\u4e0d\u652f\u6301\u5c31\u8d70 git worktree \u6216\u9012\u5f52\u62f7\u8d1d（pi-iso\/src\/lib.rs:47-66）\u3002diff \u6a21\u5757\u5728 merged \u89c6\u56fe\u662f git \u4ed3\u5e93\u65f6\u59d4\u6258 git diff \u4ea7\u51fa\u5b57\u8282\u7ea7\u8865\u4e01\u3002<\/p>\n

\u7f51\u7edc\u7ba1\u63a7<\/h3>\n

\u53ea\u6709 codex \u505a\u4e86\u5b8c\u6574\u7684\u7f51\u7edc\u5c42：\u72ec\u7acb\u7684\u7f51\u7edc\u4ee3\u7406 crate \u5728\u6c99\u7bb1\u5185\u62e6\u622a\u5b50\u8fdb\u7a0b\u7684 HTTPS \u6d41\u91cf（MITM），\u6309\u57df\u540d\u767d\u9ed1\u540d\u5355\u653e\u884c\u6216\u963b\u65ad；\u51ed\u636e\u4ee3\u7406\u5728\u8f6c\u53d1\u65f6\u6ce8\u5165\u8ba4\u8bc1（\u5185\u7f6e GitHub \u548c OpenAI \u4e24\u4e2a provider），\u5b50\u8fdb\u7a0b\u65e2\u4e0d\u76f4\u63a5\u6301\u6709\u5bc6\u94a5，\u4e5f\u4e0d\u80fd\u968f\u610f\u8054\u7f51（network-proxy\/src\/）\u3002\u57df\u540d\u7b56\u7565\u540c\u65f6\u8fdb\u63d0\u793a\u8bcd，\u6a21\u578b\u80fd\u770b\u5230 <network> \u6807\u7b7e\u4e0b\u7684\u5141\u8bb8\u4e0e\u62d2\u7edd\u5217\u8868\u3002<\/p>\n

\u5176\u4f59\u9879\u76ee\u7684\u7f51\u7edc\u7ba1\u63a7\u57fa\u672c\u7a7a\u767d：qwen \u7684 macOS profile \u6709\u4e09\u6863\u7f51\u7edc\u6a21\u5f0f，kimi \u7684 kap-server \u6709\u56de\u73af\u7ed1\u5b9a\u52a0 bearer token，\u90fd\u662f\u5c40\u90e8\u63aa\u65bd\u3002<\/p>\n

\u5ba1\u6279\u9ed8\u8ba4\u59ff\u6001\u8c31\u7cfb<\/h3>\n

\u4ece\u7d27\u5230\u677e\u6392\u5217：<\/p>\n\n\u9879\u76ee\u9ed8\u8ba4\u59ff\u6001\u7f3a\u7701\u884c\u4e3a<\/tr>\n\n\n\n\n\n\n\n\n
dsh<\/td>\nask<\/td>\nfail-closed：\u5ba1\u6279\u652f\u6301\u7f3a\u5e2d\u65f6，ask \u8f6c deny<\/td>\n<\/tr>\n
codex<\/td>\nOnRequest<\/td>\n\u672a\u53d7\u4fe1\u9879\u76ee\u7528 UnlessTrusted，\u8981\u6c42\u5ba1\u6279<\/td>\n<\/tr>\n
opencode<\/td>\nask<\/td>\n\u65e0\u5339\u914d\u89c4\u5219\u5373\u5f39\u7a97\u8be2\u95ee<\/td>\n<\/tr>\n
gemini-cli<\/td>\ndefault<\/td>\n\u7b56\u7565\u5f15\u64ce\u88c1\u51b3，\u7f3a\u7701\u8be2\u95ee<\/td>\n<\/tr>\n
qwen-code<\/td>\nAUTO<\/td>\nLLM \u5206\u7c7b\u5668\u52a8\u6001\u88c1\u51b3<\/td>\n<\/tr>\n
kimi-code<\/td>\nmanual<\/td>\nhooks \u8d85\u65f6\u653e\u884c（fail-open）<\/td>\n<\/tr>\n
omp<\/td>\nyolo<\/td>\n\u5168\u81ea\u52a8\u6279\u51c6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u7ed9\u975e\u4e13\u5bb6\u7528\u6237\u505a\u4ea7\u54c1\u7684\u9879\u76ee\u5fc5\u987b\u6539\u9ed8\u8ba4\u503c\u3002omp \u548c kimi \u7684\u59ff\u6001\u9002\u5408\u5f00\u53d1\u8005\u81ea\u7528，\u653e\u8fdb\u6258\u7ba1\u670d\u52a1\u5c31\u662f\u4e8b\u6545\u3002<\/p>\n

\u9010\u5bb6\u5b89\u5168\u7279\u8272<\/h3>\n

codex：\u5b8c\u6574\u7684\u4f01\u4e1a\u7ba1\u63a7\u94fe<\/h4>\n

\u914d\u7f6e\u6808\u6709 9 \u5c42 ConfigLayerSource，\u6309\u4f18\u5148\u7ea7\u4ece\u6253\u5305\u9ed8\u8ba4\u3001MDM \u4e0b\u53d1\u3001\u7cfb\u7edf\u7ea7\u3001\u4f01\u4e1a\u6258\u7ba1\u3001\u7528\u6237\u3001\u9879\u76ee\u5230\u4f1a\u8bdd flag（config_layer_source.rs:6-49），\u518d\u53e0\u52a0\u540c\u5e8f\u7684 requirements \u5c42\u3002requirements.toml \u627f\u8f7d\u4f01\u4e1a\u9700\u6c42（\u6743\u9650\u3001\u6587\u4ef6\u7cfb\u7edf），MDM \u6709\u4e24\u4e2a\u63a5\u5165\u53d8\u4f53\u3002\u8fd9\u662f\u4e03\u5bb6\u4e2d\u552f\u4e00\u80fd\u5bf9\u63a5\u4f01\u4e1a\u8bbe\u5907\u7ba1\u7406\u7684\u5b8c\u6574\u94fe\u6761\u3002<\/p>\n

\u5ba1\u6279\u4fa7\u914d\u4e86\u72ec\u7acb\u7684 guardian \u8bc4\u5ba1\u5668\u548c\u5ba1\u6279\u7f13\u5b58（\u89c1\u5de5\u5177\u8c03\u7528\u7bc7）\u3002\u51ed\u636e\u7528\u7cfb\u7edf keyring \u52a0\u5bc6\u5b58\u50a8，\u8fdb\u7a0b\u52a0\u56fa\u4fdd\u8bc1\u51ed\u636e\u4e0d\u8fdb\u5b50\u8fdb\u7a0b\u73af\u5883\u3002\u6f0f\u6d1e\u62a5\u544a\u8d70 Bugcrowd\u3002<\/p>\n

gemini-cli：\u7b56\u7565\u5f15\u64ce\u4e0e Always-Allow \u6536\u7a84<\/h4>\n

\u4e94\u7ea7\u7b56\u7565\u5e26：Admin > User > Workspace > Extension > Default，\u9ad8 tier \u8986\u76d6\u4f4e tier（policy\/config.ts:66-71）\u3002<\/p>\n

Always-Allow \u7684\u6536\u7a84\u505a\u5f97\u7ec6：\u7528\u6237\u5bf9\u67d0\u4e2a exec \u547d\u4ee4\u9009\u300c\u59cb\u7ec8\u5141\u8bb8\u300d，\u53ea\u5bf9\u8be5\u547d\u4ee4\u524d\u7f00\u653e\u884c；\u5bf9\u7f16\u8f91\u64cd\u4f5c，\u53ea\u5bf9\u8be5\u6587\u4ef6\u8def\u5f84\u6a21\u5f0f\u653e\u884c；\u5bf9 MCP \u5de5\u5177，\u6536\u7a84\u5230\u8be5\u670d\u52a1\u5668\u7684\u6240\u6709\u5de5\u5177（scheduler\/policy.ts:207-273），\u6ca1\u6709\u4e00\u653e\u5168\u653e\u3002<\/p>\n

safety checker \u662f\u6b63\u5219\u578b\u5de5\u5177\u53c2\u6570\u89c4\u5219，\u4ece TOML \u52a0\u8f7d，\u7f16\u8bd1\u65f6\u505a ReDoS \u9632\u62a4\u3002\u4e00\u6761\u5b89\u5168\u8fb9\u754c：\u6269\u5c55\u4e0d\u80fd\u4e3a YOLO \u6a21\u5f0f\u8d21\u732e safety checker，\u5c1d\u8bd5\u4f1a\u88ab\u5ffd\u7565\u5e76\u8bb0\u5f55\u3002\u6f0f\u6d1e\u62a5\u544a\u8d70 Google VRP，5 \u4e2a\u5de5\u4f5c\u65e5\u54cd\u5e94\u3002<\/p>\n

\u4e00\u4e2a\u5e38\u89c1\u8bef\u89e3\u8981\u6f84\u6e05：gemini-cli \u6ca1\u6709\u786c\u7f16\u7801\u5c4f\u853d .env\u3002\u6c99\u7bb1\u7981\u7528\u8def\u5f84\u6765\u81ea\u7528\u6237\u7684 .geminiignore，.git \u662f\u6307\u4ee4\u6587\u4ef6\u904d\u5386\u7684\u8fb9\u754c\u6807\u8bb0，\u4e0e\u5b89\u5168\u5c4f\u853d\u65e0\u5173\u3002<\/p>\n

qwen-code：AUTO \u5206\u7c7b\u5668\u4e0e\u5bc6\u94a5\u9632\u5165\u5e93<\/h4>\n

AUTO \u6a21\u5f0f\u7684\u56db\u9053\u95e8\u69db（\u7f16\u8f91\u5feb\u901f\u901a\u9053\u3001\u5b89\u5168\u5de5\u5177\u767d\u540d\u5355\u3001\u7834\u574f\u6027\u547d\u4ee4\u6b63\u5219\u786c\u963b\u65ad\u3001\u4e24\u9636\u6bb5 LLM \u5206\u7c7b\u5668）\u89c1\u5de5\u5177\u8c03\u7528\u7bc7\u3002\u5b89\u5168\u4fa7\u7684\u91cd\u70b9\u5728\u8bb0\u5fc6：<\/p>\n

    \n
  • secret-scanner：gitleaks \u89c4\u5219\u5b50\u96c6\u626b\u63cf\u8bb0\u5fc6\u5185\u5bb9，\u547d\u4e2d\u9ad8\u7f6e\u4fe1\u51ed\u8bc1\u6a21\u5f0f\u5c31\u963b\u6b62\u5199\u5165\u3002<\/li>\n
  • \u56e2\u961f\u8bb0\u5fc6\u5b88\u536b：\u56e2\u961f\u8bb0\u5fc6\u76ee\u5f55\u4f1a\u63d0\u4ea4\u8fdb\u4ed3\u5e93\u5171\u4eab\u7ed9\u6240\u6709\u534f\u4f5c\u8005，\u4efb\u4f55\u5199\u5165\u524d\u5fc5\u626b\u5bc6\u94a5，\u547d\u4e2d\u65e0\u6761\u4ef6\u62d2\u7edd，\u65e5\u5fd7\u53ea\u8bb0\u89c4\u5219 ID \u4e0d\u8bb0\u5339\u914d\u5185\u5bb9，\u56e0\u4e3a\u5339\u914d\u5185\u5bb9\u672c\u8eab\u5c31\u662f\u5bc6\u94a5（team-memory-secret-guard.ts:18-33）\u3002<\/li>\n
  • trusted folders：\u672a\u53d7\u4fe1\u5de5\u4f5c\u533a\u4e0b，MCP \u548c\u6269\u5c55\u5b89\u88c5\u88ab\u95e8\u63a7\u3002<\/li>\n<\/ul>\n

    opencode：\u628a\u8fb9\u754c\u5199\u6e05\u695a<\/h4>\n

    SECURITY.md \u7684\u5a01\u80c1\u6a21\u578b\u76f4\u8bf4：\u6743\u9650\u7cfb\u7edf\u662f UX \u7279\u6027，\u5e2e\u52a9\u7528\u6237\u4e86\u89e3 agent \u5728\u505a\u4ec0\u4e48，\u4e0d\u63d0\u4f9b\u5b89\u5168\u9694\u79bb；\u9700\u8981\u771f\u6b63\u9694\u79bb\u5c31\u5728 Docker \u6216 VM \u91cc\u8dd1\u3002.env \u548c .env.* \u7684\u8bfb\u53d6\u9ed8\u8ba4\u9700\u8981\u786e\u8ba4，.env.example \u653e\u884c\u3002\u62d2\u7edd\u58f0\u660e\u6bd4\u865a\u5047\u7684\u5b89\u5168\u611f\u6709\u4ef7\u503c\u3002\u6539\u8fdb\u7a7a\u95f4\u662f\u81f3\u5c11\u63d0\u4f9b\u5b98\u65b9\u5bb9\u5668\u5316\u8fd0\u884c\u6a21\u677f\u3002<\/p>\n

    kimi-code：\u654f\u611f\u6587\u4ef6\u786c\u8fc7\u6ee4<\/h4>\n

    \u4e03\u5bb6\u4e2d\u552f\u4e00\u628a\u300c\u9632\u63d0\u793a\u6ce8\u5165\u5916\u6cc4\u51ed\u636e\u300d\u843d\u5230\u5de5\u5177\u7b56\u7565\u4ee3\u7801\u7684\u8bbe\u8ba1：.env\u3001id_rsa\u3001id_ed25519\u3001credentials\u3001.aws\/credentials \u7b49\u6a21\u5f0f\u7684\u6587\u4ef6\u88ab\u5c4f\u853d Read\/Write\/Edit，\u5e26 .bak\u3001.pem\u3001.key\u3001.old \u540e\u7f00\u7684\u53d8\u4f53\u4e5f\u8986\u76d6，.env.example \u548c .pub \u516c\u94a5\u8c41\u514d（tools\/policies\/sensitive.ts:8-53）\u3002\u6a21\u5757\u6ce8\u91ca\u5199\u660e\u76ee\u6807：\u300c\u88ab\u6ce8\u5165\u7684 prompt \u65e0\u6cd5\u901a\u8fc7\u5de5\u5177\u5916\u6cc4\u51ed\u636e\u300d\u3002\u6a21\u5f0f\u5217\u8868\u6545\u610f\u4fdd\u6301\u5c0f，\u907f\u514d\u8bef\u62a5\u3002<\/p>\n

    \u8fd9\u4e2a\u65b9\u6848\u4fbf\u5b9c\u3001\u6709\u6548\u3001\u53ef\u6284\u3002\u5176\u4f59\u9879\u76ee\u8981\u4e48\u9760\u6c99\u7bb1\u7684\u7f51\u7edc\u62d2\u7edd\u505a\u6700\u540e\u9632\u7ebf（codex），\u8981\u4e48\u6ca1\u6709\u3002<\/p>\n

    dsh：\u51ed\u636e\u5f15\u7528\u5316\u4e0e\u5c01\u95ed\u8bcd\u6c47<\/h4>\n

    \u51ed\u636e\u8bbe\u8ba1\u6709\u4e09\u6761\u89c4\u5219：\u914d\u7f6e\u6587\u4ef6\u53ea\u5b58\u73af\u5883\u53d8\u91cf\u540d（\u5f15\u7528），\u503c\u7531 provider \u6301\u6709；\u6bcf\u6b21\u64cd\u4f5c\u91cd\u65b0\u89e3\u6790\u5f15\u7528，\u4e0d\u8de8\u64cd\u4f5c\u7f13\u5b58，\u51ed\u636e\u53d8\u66f4\u7acb\u5373\u751f\u6548；\u914d\u7f6e\u754c\u9762\u53ea\u63cf\u8ff0\u5f15\u7528，\u7edd\u4e0d\u5c55\u793a\u503c（credentials\/src\/index.ts:2-68）\u3002<\/p>\n

    \u6c99\u7bb1\u5347\u7ea7\u8d70\u5c01\u95ed\u8bcd\u6c47：\u6bcf\u4e2a\u6a21\u5f0f\u5728\u6267\u884c\u671f\u68c0\u67e5（\u4e0d\u70d8\u7119\u8fdb\u5de5\u5177 schema），\u975e\u6269\u6743\u8bf7\u6c42\u6c38\u4e0d\u63d0\u793a\u4eba\u7c7b，\u7ed3\u679c\u8bcd\u6c47\u662f cancelled\u3001unavailable \u8fd9\u7c7b\u5c01\u95ed\u96c6，\u7f3a\u5931\u548c\u5f02\u5e38\u4e00\u5f8b\u5f52\u4e00\u5316\u4e3a\u4e0d\u53ef\u7528（sandbox\/src\/escalation.ts）\u3002\u5ba1\u6279\u4e8b\u4ef6\u6210\u5bf9\u8ffd\u52a0，\u6709\u63d0\u4ea4\u4e0e\u56de\u653e\u8fb9\u754c\u5305\u5939，\u53ef\u5ba1\u8ba1\u3002<\/p>\n

    \u77ed\u677f\u662f\u4ed3\u5185\u6ca1\u6709\u72ec\u7acb SECURITY.md，\u5b89\u5168\u8bf4\u660e\u6563\u5728\u6c99\u7bb1\u5b50\u7cfb\u7edf\u7684\u5b9e\u73b0\u7b14\u8bb0\u91cc\u3002<\/p>\n

    omp：\u9ed8\u8ba4\u59ff\u6001\u4e0e\u53ef\u9009\u589e\u5f3a<\/h4>\n

    \u9ed8\u8ba4 yolo \u5df2\u5728\u524d\u9762\u8bf4\u8fc7，\u7528\u6237\u914d\u7f6e\u91cc\u7684\u5de5\u5177\u7ea7 deny \u5728 yolo \u4e0b\u4ecd\u7136\u751f\u6548，\u8fd9\u662f\u552f\u4e00\u4fdd\u7559\u7684\u95f8\u95e8\u3002secrets \u6df7\u6dc6\u662f\u53ef\u9009\u589e\u5f3a：\u51ed\u636e\u5f62\u72b6\u7684 token \u5728\u51fa\u7ad9\u6d41\u91cf\u505a\u53ef\u9006\u6df7\u6dc6（\u5e26 key \u7684\u5360\u4f4d\u7b26，\u672c\u5730\u5de5\u5177\u6267\u884c\u524d\u8fd8\u539f），\u9ed8\u8ba4\u5173\u95ed\u3002\u5de5\u4f5c\u533a\u9694\u79bb\u7528 pi-iso\u3002SECURITY.md \u5728 .github\/ \u4e0b，\u8d70\u79c1\u5bc6\u62ab\u9732，best-effort \u54cd\u5e94\u3002<\/p>\n

    \u7ed9 Agent \u5f00\u53d1\u8005\u7684\u501f\u9274\u6e05\u5355<\/h3>\n
  • \u9009\u578b\u5148\u5206\u6e05\u6c99\u7bb1\u8bed\u4e49\u3002 \u9632\u9003\u9038（\u7cfb\u7edf\u8c03\u7528\u9694\u79bb）\u548c\u9632\u6539\u574f（\u5de5\u4f5c\u533a\u9694\u79bb）\u662f\u4e24\u56de\u4e8b，\u4f9b\u5e94\u5546\u5ba3\u4f20\u7684\u300c\u6c99\u7bb1\u300d\u8981\u8ffd\u95ee\u662f\u54ea\u4e00\u79cd，\u7406\u60f3\u662f\u53e0\u52a0\u3002<\/li>\n
  • \u6258\u7ba1\u90e8\u7f72\u53ea\u8003\u8651 fail-closed \u7684\u9ed8\u8ba4\u59ff\u6001\u3002 dsh \u7684\u300c\u5ba1\u6279\u7f3a\u5e2d\u5373\u62d2\u7edd\u300d\u662f\u552f\u4e00\u53ef\u4ee5\u653e\u5fc3\u6258\u7ba1\u7684\u7f3a\u7701\u8bed\u4e49\u3002<\/li>\n
  • \u654f\u611f\u6587\u4ef6\u786c\u8fc7\u6ee4\u503c\u5f97\u7acb\u5373\u6284\u3002 \u5de5\u5177\u5c42\u5c4f\u853d .env \u548c\u79c1\u94a5\u7684\u8bfb\u5199，\u662f\u9632\u63d0\u793a\u6ce8\u5165\u5916\u6cc4\u6700\u4fbf\u5b9c\u7684\u4e00\u9053\u95f8（kimi \u7684 sensitive.ts）\u3002<\/li>\n
  • \u51ed\u636e\u5b58\u5f15\u7528\u4e0d\u5b58\u503c\u3002 \u914d\u7f6e\u91cc\u53ea\u653e\u73af\u5883\u53d8\u91cf\u540d，\u6bcf\u6b21\u64cd\u4f5c\u91cd\u89e3\u6790，\u754c\u9762\u6c38\u4e0d\u5c55\u793a\u503c（dsh \u4e09\u6761\u89c4\u5219）\u3002<\/li>\n
  • Always-Allow \u5fc5\u987b\u6536\u7a84\u3002 \u6309\u547d\u4ee4\u524d\u7f00\u3001\u6587\u4ef6\u8def\u5f84\u6a21\u5f0f\u6536\u7a84，\u4e00\u6b21\u6279\u51c6\u4e0d\u7b49\u4e8e\u5168\u91cf\u653e\u884c（gemini-cli）\u3002<\/li>\n
  • \u7834\u574f\u6027\u5224\u5b9a\u7528\u786e\u5b9a\u6027\u89c4\u5219\u524d\u7f6e\u3002 \u6b63\u5219\u786c\u963b\u65ad\u653e\u5728\u4efb\u4f55\u6a21\u578b\u5224\u65ad\u4e4b\u524d（qwen \u7684\u6559\u8bad：\u5206\u7c7b\u5668\u8bef\u5224\u4e0d\u80fd\u653e\u884c\u7834\u574f\u6027\u547d\u4ee4）\u3002<\/li>\n
  • \u7f51\u7edc\u7ba1\u63a7\u914d\u51ed\u636e\u4ee3\u7406\u3002 \u6c99\u7bb1\u5185\u8fdb\u7a0b\u4e0d\u76f4\u63a5\u6301\u5bc6\u94a5，\u8f6c\u53d1\u65f6\u6ce8\u5165（codex），\u5bc6\u94a5\u6cc4\u9732\u9762\u663e\u8457\u7f29\u5c0f\u3002<\/li>\n
  • \u628a\u5b89\u5168\u8fb9\u754c\u5199\u8fdb\u6587\u6863\u3002 \u300c\u4e0d\u63d0\u4f9b\u4ec0\u4e48\u300d\u548c\u300c\u63d0\u4f9b\u4ec0\u4e48\u300d\u540c\u6837\u91cd\u8981（opencode \u7684 SECURITY.md \u662f\u8303\u672c）\u3002<\/li>\n

    \u7cfb\u5217\u5c0f\u7ed3<\/h3>\n

    \u5341\u4e2a\u677f\u5757\u8d70\u4e0b\u6765，\u4e03\u4e2a\u9879\u76ee\u5c55\u793a\u4e86 2026 \u5e74\u5f00\u6e90 Agent Harness \u7684\u4e09\u6761\u6f14\u5316\u8def\u7ebf：\u5411\u7cfb\u7edf\u8981\u6df1\u5ea6（codex\u3001omp \u7684 Rust \u5316\u4e0e\u6c99\u7bb1）\u3001\u5411\u67b6\u6784\u8981\u53ef\u5ba1\u8ba1\u6027（dsh\u3001opencode\u3001kimi v2 \u7684\u4e8b\u4ef6\u6eaf\u6e90）\u3001\u5411\u751f\u6001\u8981\u8986\u76d6\u9762（qwen\u3001kimi \u7684\u5168\u7aef\u77e9\u9635）\u3002\u6ca1\u6709\u5168\u80fd\u51a0\u519b，\u5bf9 Agent \u5f00\u53d1\u8005\u6700\u6709\u4ef7\u503c\u7684，\u662f\u8fd9\u4e9b\u9879\u76ee\u5728\u5404\u81ea\u7ea6\u675f\u4e0b\u505a\u51fa\u7684\u5177\u4f53\u8bbe\u8ba1\u3002\u5e0c\u671b\u8fd9\u4e2a\u7cfb\u5217\u80fd\u6210\u4e3a\u4e00\u4efd\u53ef\u5bf9\u7167\u6e90\u7801\u7684\u53c2\u8003\u8d44\u6599\u3002<\/p>\n

    \n

    \u6587\u6863\u5730\u56fe<\/h3>\n\n\u7bc7\u6587\u7ae0\u5185\u5bb9\u901f\u89c8<\/tr>\n\n\n\n\n\n\n\n\n\n\n\n\n
    \u603b\u8ff0<\/td>\n\u62c6\u4e86\u4e03\u5927\u5f00\u6e90 Agent \u7684\u6e90\u7801，\u6700\u9ad8\u5206\u7adf\u7136\u4e0d\u662f Codex<\/td>\n\u603b\u4f53\u7ed3\u8bba\u3001\u8bc4\u4f30\u65b9\u6cd5\u4e0e\u8bc4\u5206\u5361<\/td>\n<\/tr>\n
    01<\/td>\n\u67b6\u6784\u5bf9\u6bd4<\/td>\n\u56db\u79cd\u6d41\u6d3e\u4e0e\u5206\u5316\u6839\u6e90\u3001\u4e3b\u5faa\u73af\u4e0e\u4e8b\u4ef6\u673a\u5236\u3001\u63d2\u4ef6\u5316\u4e0e\u8026\u5408\u98ce\u9669<\/td>\n<\/tr>\n
    02<\/td>\n\u4e0a\u4e0b\u6587\u7ba1\u7406<\/td>\n\u538b\u7f29\u89e6\u53d1\u9608\u503c\u3001\u6458\u8981\u65b9\u5f0f\u3001token \u8ba1\u6570\u53e3\u5f84\u3001\u8de8\u4f1a\u8bdd\u8bb0\u5fc6<\/td>\n<\/tr>\n
    03<\/td>\n\u4f1a\u8bdd\u7ba1\u7406<\/td>\n\u6301\u4e45\u5316\u6a21\u578b\u4e09\u5c42\u6b21\u3001\u5e76\u53d1\u63a7\u5236\u3001\u5d29\u6e83\u6062\u590d\u4e0e resume \/ fork<\/td>\n<\/tr>\n
    04<\/td>\n\u5de5\u5177\u8c03\u7528<\/td>\n\u6ce8\u518c\u4e0e\u53ef\u89c1\u6027\u3001\u5e76\u884c\u8c03\u5ea6\u56db\u79cd\u8bed\u4e49\u3001\u5ba1\u6279\u95e8\u63a7\u3001\u9519\u8bef\u5904\u7406<\/td>\n<\/tr>\n
    05<\/td>\n\u91cd\u8fde\u4e0e\u5bb9\u9519<\/td>\n\u91cd\u8bd5\u9884\u7b97\u3001\u6d41\u4e2d\u65ad\u5904\u7406\u3001\u964d\u7ea7\u94fe\u3001\u526f\u4f5c\u7528\u5b89\u5168<\/td>\n<\/tr>\n
    06<\/td>\n\u7cfb\u7edf\u63d0\u793a\u8bcd\u4e0e\u6307\u4ee4\u9075\u5faa<\/td>\n\u56db\u79cd\u7ec4\u88c5\u8303\u5f0f\u3001\u52a8\u6001\u6ce8\u5165\u3001\u6ce8\u5165\u9632\u5fa1\u4e09\u5c42\u4e0e\u5171\u540c\u655e\u53e3<\/td>\n<\/tr>\n
    07<\/td>\n\u601d\u7ef4\u94fe\u4e0e\u5de5\u4f5c\u6d41\u7f16\u6392<\/td>\n\u601d\u7ef4\u94fe\u63a5\u5165\u3001plan \u6a21\u5f0f\u8bed\u4e49\u3001\u5b50\u4ee3\u7406\u6cbb\u7406\u3001\u5de5\u4f5c\u6d41\u5f15\u64ce<\/td>\n<\/tr>\n
    08<\/td>\n\u6027\u80fd\u8bbe\u8ba1<\/td>\n\u524d\u7f00\u7f13\u5b58\u4e09\u6863\u5206\u5316\u3001\u542f\u52a8\u4f18\u5316\u3001\u6210\u672c\u6838\u7b97<\/td>\n<\/tr>\n
    09<\/td>\n\u53ef\u6269\u5c55\u6027<\/td>\nMCP \u63a5\u5165\u3001\u81ea\u5b9a\u4e49\u5de5\u5177\u3001\u591a provider\u3001SDK \u4e0e API<\/td>\n<\/tr>\n
    10<\/td>\n\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236<\/td>\n\u6c99\u7bb1\u4e24\u79cd\u8bed\u4e49\u3001\u5ba1\u6279\u9ed8\u8ba4\u59ff\u6001\u3001\u4f01\u4e1a\u7ba1\u63a7\u3001\u654f\u611f\u6570\u636e\u4fdd\u62a4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

    7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 \u672c\u6587\u662f\u300c7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u300d\u7cfb\u5217\u7b2c 10 \u7bc7，\u4e5f\u662f\u672c\u7cfb\u5217\u7684\u6536\u5c3e\u7bc7\u3002\u8bc4\u4f30\u5bf9\u8c61：codex\u3001gemini-cli\u3001qwen-code\u3001opencode\u3001kimi-code\u3001deepseek-harness（\u4e0b\u79f0 dsh）\u3001oh-my-pi（\u4e0b\u79f0 omp）\u3002 \u7bc7\u6587\u7ae0\u5185\u5bb9\u901f\u89c8\u603b\u8ff0\u62c6\u4e86\u4e03\u5927\u5f00\u6e90 Agent \u7684\u6e90\u7801，\u6700\u9ad8\u5206\u7adf\u7136\u4e0d\u662f<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[10848,9109,74,66,5058,227],"topic":[],"class_list":["post-100467","post","type-post","status-publish","format-standard","hentry","category-server","tag-harness","tag-9109","tag-agent","tag-ai","tag-codex","tag-227"],"yoast_head":"\n7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/100467.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 \u672c\u6587\u662f\u300c7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u300d\u7cfb\u5217\u7b2c 10 \u7bc7，\u4e5f\u662f\u672c\u7cfb\u5217\u7684\u6536\u5c3e\u7bc7\u3002\u8bc4\u4f30\u5bf9\u8c61：codex\u3001gemini-cli\u3001qwen-code\u3001opencode\u3001kimi-code\u3001deepseek-harness（\u4e0b\u79f0 dsh）\u3001oh-my-pi（\u4e0b\u79f0 omp）\u3002 \u7bc7\u6587\u7ae0\u5185\u5bb9\u901f\u89c8\u603b\u8ff0\u62c6\u4e86\u4e03\u5927\u5f00\u6e90 Agent \u7684\u6e90\u7801，\u6700\u9ad8\u5206\u7adf\u7136\u4e0d\u662f\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/100467.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-04T11:04:07+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/100467.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/100467.html\",\"name\":\"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-09-04T11:04:07+00:00\",\"dateModified\":\"2026-09-04T11:04:07+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/100467.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/100467.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/100467.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/100467.html","og_locale":"zh_CN","og_type":"article","og_title":"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 \u672c\u6587\u662f\u300c7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u300d\u7cfb\u5217\u7b2c 10 \u7bc7，\u4e5f\u662f\u672c\u7cfb\u5217\u7684\u6536\u5c3e\u7bc7\u3002\u8bc4\u4f30\u5bf9\u8c61：codex\u3001gemini-cli\u3001qwen-code\u3001opencode\u3001kimi-code\u3001deepseek-harness（\u4e0b\u79f0 dsh）\u3001oh-my-pi（\u4e0b\u79f0 omp）\u3002 \u7bc7\u6587\u7ae0\u5185\u5bb9\u901f\u89c8\u603b\u8ff0\u62c6\u4e86\u4e03\u5927\u5f00\u6e90 Agent \u7684\u6e90\u7801，\u6700\u9ad8\u5206\u7adf\u7136\u4e0d\u662f","og_url":"https:\/\/www.wsisp.com\/helps\/100467.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-09-04T11:04:07+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"6 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/100467.html","url":"https:\/\/www.wsisp.com\/helps\/100467.html","name":"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-09-04T11:04:07+00:00","dateModified":"2026-09-04T11:04:07+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/100467.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/100467.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/100467.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"7\u5927\u5f00\u6e90Agent\u6e90\u7801\u5bf9\u6bd4\u89e3\u8bfb\u2014\u2014\u5b89\u5168\u4e0e\u6743\u9650\u63a7\u5236"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/100467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=100467"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/100467\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=100467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=100467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=100467"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=100467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}