@bolloon/bolloon-agent 0.1.34 → 0.1.36

package/src/agents/pre-tool-validator.ts

@@ -0,0 +1,213 @@
+/**
+ * Pre-Tool Validator — 4 步链式校验
+ *
+ * 严格对齐 Claude Code 论文 PreToolUse 4 步:
+ *   1. modeGate(tool, mode)         — bypassPermissions → 直接放行(除 shell)
+ *   2. blacklistGate(tool, args)    — 6 模式黑名单 (recursive rm, force push, dd 等)
+ *   3. shellGuardGate(tool, args)   — **完整** shell-guard (checkCommand + checkWritePath), 永远生效
+ *   4. schemaGate(tool, args)       — 第一版 stub: always allow (后续接入 tool-gate.ts)
+ *
+ * 每步独立 try/catch, 失败 = 跳过该步, 不阻塞 (与现有 lifecycle-hooks 风格一致)
+ *
+ * 失败静默: 任何 step 异常 → console.warn + 继续下一 step, 不抛错
+ */
+
+import { shouldRunBlacklist, isShellTool, type PermissionMode } from './permission-mode.js';
+import { checkCommand, checkWritePath } from './shell-guard.js';
+
+export interface PreToolResult {
+  allowed: boolean;
+  reason?: string;
+  /** 哪一步拒绝的 (供 audit log) */
+  rejectedBy?: 'mode' | 'blacklist' | 'shell-guard' | 'schema';
+  mode: PermissionMode;
+  /** bypassPermissions 时记录, 区分 "完全放行" vs "shell-guard 仍生效" */
+  shellGuardRetained?: boolean;
+}
+
+const DANGEROUS_PATTERNS: Array<{ re: RegExp; reason: string }> = [
+  { re: /\brm\s+(-[a-z]*f[a-z]*\s+)?-[a-z]*r[a-z]*\s+\//, reason: '禁止递归删除根目录' },
+  { re: /\bgit\s+push\s+.*--force\b/, reason: '禁止 force push' },
+  { re: /\brm\s+-rf\s+~\//, reason: '禁止递归删除 home' },
+  { re: /\bdd\s+if=.*\s+of=\/dev\//, reason: '禁止 dd 覆盖块设备' },
+  { re: /\bcurl\s+.*\|\s*(ba)?sh\b/, reason: '禁止 curl|sh 直执行' },
+  { re: />\s*\/dev\/sd[a-z]/, reason: '禁止写裸设备' },
+];
+
+/**
+ * Step 1: modeGate
+ * - bypassPermissions + 非 shell → 直接放行 (但保留 shellGuardRetained 标记)
+ * - 其他 → 继续
+ */
+function modeGate(tool: string, mode: PermissionMode): PreToolResult | null {
+  try {
+    if (mode === 'bypassPermissions' && !isShellTool(tool)) {
+      return { allowed: true, mode, rejectedBy: undefined, shellGuardRetained: false };
+    }
+    return null;  // 不在这一步决定
+  } catch (err) {
+    console.warn('[pre-tool] modeGate failed (silent):', err);
+    return null;
+  }
+}
+
+/**
+ * Step 2: blacklistGate
+ * 6 模式黑名单 (现有 lifecycle-hooks.ts 行为)
+ */
+function blacklistGate(tool: string, args: Record<string, unknown>, mode: PermissionMode): PreToolResult | null {
+  try {
+    if (!isShellTool(tool)) return null;
+    const cmd = String(args.command || args.cmd || '');
+    if (!cmd) return null;
+    for (const { re, reason } of DANGEROUS_PATTERNS) {
+      if (re.test(cmd)) {
+        return { allowed: false, reason, rejectedBy: 'blacklist', mode };
+      }
+    }
+    return null;
+  } catch (err) {
+    console.warn('[pre-tool] blacklistGate failed (silent):', err);
+    return null;
+  }
+}
+
+/**
+ * Step 3: shellGuardGate
+ * 永远跑 (绕过 mode), 是 bolloon 自身的安全底线
+ *
+ * 接完整 shell-guard.ts (checkCommand + checkWritePath):
+ *   - checkCommand 走命令白名单 + 参数黑名单 (允许列表默认 git/node/npm/npx/tsx/tsc/vitest 等)
+ *   - checkWritePath 走路径黑名单 (硬编码: pi-sdk.ts, shell-guard.ts, .env, .git/, .bolloon/, package.json, dist/ 等)
+ *
+ * 失败静默: 任何异常 → 跳过这步, 不阻塞
+ */
+function shellGuardGate(tool: string, args: Record<string, unknown>, mode: PermissionMode): PreToolResult | null {
+  try {
+    if (!isShellTool(tool)) return null;
+
+    // 1. 命令检查 (含白名单 + arg 黑名单)
+    const cmd = String(args.command || args.cmd || '');
+    let bin = '';
+    if (cmd) {
+      // shell-guard 期望 (cmd, args[]) 形式
+      // 简单 split: 第一个 token 是 cmd, 之后是 args
+      const parts = cmd.split(/\s+/).filter(Boolean);
+      bin = parts[0] || '';
+      const rest = parts.slice(1);
+      if (bin) {
+        const cmdResult = checkCommand(bin, rest);
+        if (!cmdResult.allowed) {
+          return {
+            allowed: false,
+            reason: cmdResult.reason,
+            rejectedBy: 'shell-guard',
+            mode,
+            shellGuardRetained: true,
+          };
+        }
+      }
+    }
+
+    // 2. 写路径检查 — 从 2 个来源抽:
+    //    a) 结构化字段 (args.path / args.target / args.file)
+    //    b) 命令字符串里的 token (老测试传 args.command='cat pi-sdk.ts' 时也能拦)
+    const pathCandidates: string[] = [];
+    const structured = String(
+      args.path || args.target || args.file || args.targetPath || args.destination || ''
+    );
+    if (structured) pathCandidates.push(structured);
+    if (cmd) {
+      // 简单 tokenize: 按空白切, 取不含 shell 元字符的 token
+      const tokens = cmd.split(/\s+/).filter((t) => t && !/^[|>;&`$()<]/.test(t));
+      for (const t of tokens) {
+        if (t !== bin) pathCandidates.push(t);  // 跳过命令本身
+      }
+    }
+    // 纯文件名 denylist (兜底 — checkWritePath 的 regex 要求 /src/xxx/ 锚定, 纯文件名拦不到)
+    // 只对**写/删/改**类命令生效 (rm, cp, mv, sed -i, echo >); 读类命令 (cat, head, tail, ls) 跳过
+    const READ_BINS = new Set(['cat', 'head', 'tail', 'wc', 'ls', 'echo', 'pwd', 'date', 'mkdir', 'touch', 'find', 'grep', 'git', 'node', 'npm', 'npx', 'tsx', 'tsc', 'vitest']);
+    const FILENAME_DENYLIST = [
+      'pi-sdk.ts', 'shell-guard.ts', 'shell-tool.ts',
+      '.env', 'package.json', 'tsconfig.json',
+    ];
+    const isReadOperation = READ_BINS.has(bin);
+    for (const candidate of pathCandidates) {
+      // 2a. checkWritePath 只对写操作调用 (读类命令绕开, 避免 cat pi-sdk.ts 误拦)
+      if (!isReadOperation) {
+        const pathResult = checkWritePath(candidate);
+        if (!pathResult.allowed) {
+          return {
+            allowed: false,
+            reason: pathResult.reason,
+            rejectedBy: 'shell-guard',
+            mode,
+            shellGuardRetained: true,
+          };
+        }
+      }
+      // 2b. 纯文件名兜底 — 只对写操作生效
+      if (!isReadOperation) {
+        const baseName = candidate.split('/').pop() || '';
+        if (FILENAME_DENYLIST.includes(baseName)) {
+          return {
+            allowed: false,
+            reason: `shell-guard: 禁止 ${bin} 操作 ${candidate} (命中文件名硬编码黑名单)`,
+            rejectedBy: 'shell-guard',
+            mode,
+            shellGuardRetained: true,
+          };
+        }
+      }
+    }
+
+    return null;  // 通过
+  } catch (err) {
+    console.warn('[pre-tool] shellGuardGate failed (silent):', err);
+    return null;
+  }
+}
+
+/**
+ * Step 4: schemaGate
+ * 第一版 stub: always allow
+ */
+function schemaGate(_tool: string, _args: Record<string, unknown>, mode: PermissionMode): PreToolResult | null {
+  return null;  // 不在这一步决定
+}
+
+/**
+ * 主入口: 4 步链式, 任何一步拒绝 → 返回, 否则最终放行
+ */
+export function validatePreToolUse(
+  tool: string,
+  args: Record<string, unknown>,
+  mode: PermissionMode
+): PreToolResult {
+  const steps = [
+    () => modeGate(tool, mode),
+    () => blacklistGate(tool, args, mode),
+    () => shellGuardGate(tool, args, mode),
+    () => schemaGate(tool, args, mode),
+  ];
+  for (const step of steps) {
+    const result = step();
+    if (result && !result.allowed) return result;
+  }
+  // 全部通过 → 放行
+  // bypassPermissions + shell 走到这里 = shellGuardGate 已经放过, 但要标记 shellGuardRetained
+  return {
+    allowed: true,
+    mode,
+    rejectedBy: undefined,
+    shellGuardRetained: isShellTool(tool),
+  };
+}
+
+// ============================================================
+// 测试钩子
+// ============================================================
+
+export function _resetValidatorForTest(): void {
+  // validator 是 pure, 保留 API 一致
+}

package/src/agents/workflow-pivot-loop.ts

@@ -298,33 +298,64 @@ export class WorkflowPivotLoop {
         
         for (const toolCall of pendingTools) {
           this.state.toolCallsCount++;
-          
+
           const tool = this.tools.get(toolCall.name);
           if (!tool) {
             this.emit({
               type: 'error',
               content: `❌ 未知工具: ${toolCall.name}`
             });
+            // 2026-06-15: step-timeline — 未知工具也开/关一个 step 节点
+            this.emit({
+              type: 'step_start',
+              content: `未知工具 ${toolCall.name}`,
+              tool: toolCall.name,
+              args: toolCall.args || {},
+            });
+            this.emit({
+              type: 'step_error',
+              content: `未知工具 ${toolCall.name}`,
+              tool: toolCall.name,
+              error: 'Unknown tool',
+            });
             this.messageHistory.push({
               role: 'tool',
               content: JSON.stringify({ success: false, error: `Unknown tool: ${toolCall.name}` })
             });
             continue;
           }
-          
+
           this.emit({
             type: 'tool',
             content: `🔧 执行: ${toolCall.name}`,
             tool: toolCall.name
           });
-          
+          // 2026-06-15: step-timeline — 开节点
+          this.emit({
+            type: 'step_start',
+            content: `调用 ${toolCall.name}`,
+            tool: toolCall.name,
+            args: toolCall.args || {},
+          });
+
           try {
             const result = await tool.execute(toolCall.args ?? {});
-            
+
+            // 2026-06-15: step-timeline — 关闭节点 (success / error)
+            this.emit({
+              type: result.success ? 'step_done' : 'step_error',
+              content: result.success
+                ? `${toolCall.name} 成功`
+                : `${toolCall.name} 失败: ${result.error}`,
+              tool: toolCall.name,
+              success: result.success,
+              output: result.output,
+              error: result.error,
+            });
             this.emit({
               type: result.success ? 'status' : 'error',
-              content: result.success 
-                ? `✅ ${toolCall.name} 成功` 
+              content: result.success
+                ? `✅ ${toolCall.name} 成功`
                 : `❌ ${toolCall.name} 失败: ${result.error}`
             });
             
@@ -420,9 +451,49 @@ export class WorkflowPivotLoop {
   private extractPendingToolUses(content: string): ToolDefinition[] {
     const pending: ToolDefinition[] = [];
 
+    // Pattern 0: <tool_use>{...JSON...}</tool_use> (Anthropic 风格 + minimax 也用)
+    // 这次 LLM 输出: <tool_use>\n{"name": "read_document", "arguments": {"path": "/Users/.../README.md"}}\n</tool_use>
+    const toolUseRe = /<tool_use>\s*(\{[\s\S]*?\})\s*<\/tool_use>/g;
+    let match;
+    while ((match = toolUseRe.exec(content)) !== null) {
+      try {
+        const obj = JSON.parse(match[1]);
+        if (obj && obj.name && this.tools.has(obj.name)) {
+          const args = this.normalizeArgs(obj.arguments || {});
+          pending.push({ name: obj.name, args, description: '', parameters: {} });
+        }
+      } catch (e) {
+        // JSON 解析失败, 继续下一 match
+      }
+    }
+
+    // Pattern 0b: <function_calls><invoke name="X"><parameter name="k">v</parameter>...</invoke></function_calls>
+    //   这次 minimax LLM 用这种 Anthropic 风格 XML
+    const fnCallsRe = /<function_calls>([\s\S]*?)<\/function_calls>/g;
+    while ((match = fnCallsRe.exec(content)) !== null) {
+      const block = match[1];
+      // 抓 <invoke name="X">...</invoke>
+      const invokeRe = /<invoke\s+name="(\w+)"\s*>([\s\S]*?)<\/invoke>/g;
+      let im;
+      while ((im = invokeRe.exec(block)) !== null) {
+        const name = im[1];
+        if (!this.tools.has(name)) continue;
+        // 抓 <parameter name="k">v</parameter> 列表
+        const args: Record<string, string> = {};
+        const paramRe = /<parameter\s+name="(\w+)"\s*>([\s\S]*?)<\/parameter>/g;
+        let pm;
+        while ((pm = paramRe.exec(im[2])) !== null) {
+          args[pm[1]] = pm[2].trim().replace(/^["']|['"]$/g, '');
+        }
+        // 避免重复添加
+        if (!pending.some(p => p.name === name)) {
+          pending.push({ name, args, description: '', parameters: {} });
+        }
+      }
+    }
+
     // Pattern 1: Chinese format "调用工具: tool_name(args)"
     const pattern1 = /调用工具[：:]\s*(\w+)\s*\(([^)]*)\)/g;
-    let match;
     while ((match = pattern1.exec(content)) !== null) {
       const name = match[1];
       const argsStr = match[2];
@@ -471,25 +542,45 @@ export class WorkflowPivotLoop {
   private parseArgs(argsStr: string): Record<string, string> {
     const args: Record<string, string> = {};
     if (!argsStr || !argsStr.trim()) return args;
-    
+
     const pairs = argsStr.split(',').map(s => s.trim()).filter(Boolean);
     for (const pair of pairs) {
-      const colonIdx = pair.indexOf(':');
-      if (colonIdx > 0) {
-        const key = pair.substring(0, colonIdx).trim();
-        const value = pair.substring(colonIdx + 1).trim().replace(/^['"]|['"]$/g, '');
-        args[key] = value;
-      } else {
-        // No colon, try to parse as positional
-        const parts = pair.split(/\s+/);
-        if (parts.length >= 2) {
-          args[parts[0]] = parts.slice(1).join(' ');
-        }
+      // 2026-06-15: LLM 实际输出 3 种格式 — 全支持
+      //   1) JSON 风格: {"key":"value"}     (服务器日志显示, 但 LLM 不会真输出完整 JSON)
+      //   2) key="value" 含双引号         (本次 read_document(path="/Users/..."))
+      //   3) key='value' 含单引号
+      //   4) key:value                    (老 Chinese 格式)
+      //   5) key value                    (positional 兜底)
+      let m = pair.match(/^["']?([\w-]+)["']?\s*=\s*["']([^"']*)["']$/);
+      if (m) { args[m[1]] = m[2]; continue; }
+      m = pair.match(/^["']?([\w-]+)["']?\s*[:=]\s*([^,]+)$/);
+      if (m) { args[m[1]] = m[2].trim().replace(/^['"]|['"]$/g, ''); continue; }
+      m = pair.match(/^["']?([\w-]+)["']?\s*[:]\s*["']?([^"']*)["']?$/);
+      if (m) { args[m[1]] = m[2].trim(); continue; }
+      // positional 兜底
+      const parts = pair.split(/\s+/);
+      if (parts.length >= 2) {
+        args[parts[0]] = parts.slice(1).join(' ');
       }
     }
     return args;
   }
   
+  /**
+   * 把 tool_use JSON 里的 arguments (已经是对象) 转成 Record<string, string>
+   *   JSON parser 直接给对象, 但 tool.execute 期望 Record<string, string>
+   *   非字符串值 JSON.stringify 一下
+   */
+  private normalizeArgs(args: Record<string, unknown>): Record<string, string> {
+    const out: Record<string, string> = {};
+    for (const [k, v] of Object.entries(args || {})) {
+      if (v == null) continue;
+      if (typeof v === 'string') out[k] = v;
+      else out[k] = JSON.stringify(v);
+    }
+    return out;
+  }
+
   /**
    * Build context from message history
    */

package/src/bollharness/CLAUDE.md

@@ -1,4 +1,4 @@
-# CLAUDE.md — bollharness
+# Bolloon.md — bollharness
 
 bollharness 是一个 **AI Agent Session 治理框架**——通过 Claude Code hooks、guards、上下文路由和安装器，给任意项目加装结构化的 agent 行为约束。
 

package/src/bollharness/README.md

@@ -22,7 +22,7 @@ You end up supervising more than you saved in development time. The 80% it does
 ## The Insight
 
 ```
-CLAUDE.md instruction compliance:  ~20%
+Bolloon.md instruction compliance:  ~20%
 PreToolUse hook enforcement:       100%
 ```
 
@@ -103,7 +103,7 @@ your-project/
 ├── scripts/
 │   ├── hooks/           # 16 lifecycle hooks
 │   └── checks/          # 15 automated validators
-└── CLAUDE.md            # Governance guide (generated, yours to edit)
+└── Bolloon.md            # Governance guide (generated, yours to edit)
 ```
 
 The installer is idempotent — run it twice, get the same result.

package/src/bollharness/README.zh-CN.md

@@ -22,7 +22,7 @@ Claude Code 能力很强。但不加约束时，它有结构性偏见：
 ## 核心洞察
 
 ```
-CLAUDE.md 指令遵从率:     ~20%
+Bolloon.md 指令遵从率:     ~20%
 PreToolUse hook 执行率:   100%
 ```
 
@@ -101,7 +101,7 @@ your-project/
 ├── scripts/
 │   ├── hooks/           # 16 个生命周期 hook
 │   └── checks/          # 15 个自动化验证器
-└── CLAUDE.md            # 治理指南（自动生成，你可以自由编辑）
+└── Bolloon.md            # 治理指南（自动生成，你可以自由编辑）
 ```
 
 安装器是幂等的——跑两次，结果一样。

package/src/bollharness/reference/boll-reference/scripts/hooks/find-boll-root.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 # Walks up from $PWD to find the boll repo root.
-# Identifies it by presence of BOTH CLAUDE.md and scripts/guard-feedback.py.
+# Identifies it by presence of BOTH Bolloon.md and scripts/guard-feedback.py.
 # This handles nested git repos (e.g. boll-progress/) that would confuse
 # `git rev-parse --show-toplevel`.
 #
@@ -8,7 +8,7 @@
 set -e
 d="${PWD}"
 while [ "$d" != "/" ] && [ -n "$d" ]; do
-  if [ -f "$d/CLAUDE.md" ] && [ -f "$d/scripts/guard-feedback.py" ]; then
+  if [ -f "$d/Bolloon.md" ] && [ -f "$d/scripts/guard-feedback.py" ]; then
     echo "$d"
     exit 0
   fi

package/src/bollharness/scripts/context-fragments/truth-source-hierarchy.md

@@ -7,9 +7,9 @@
 | 1 | 运行中的代码 | 实际行为是最终真相 |
 | 2 | 数据库 schema + 测试 | 可执行的约束 |
 | 3 | ADR / TECH / PLAN 文档 | 设计决策记录 |
-| 4 | CLAUDE.md | 开发指导（派生自上层） |
+| 4 | Bolloon.md | 开发指导（派生自上层） |
 | 5 | MEMORY.md | 会话间记忆（最易过期） |
 
 **行为约束**: 当不同层级的信息冲突时，必须以高优先级来源为准并修正低优先级来源。
-CLAUDE.md 中的信息必须可以从代码或 ADR 中验证——不得包含无法溯源的断言。
+Bolloon.md 中的信息必须可以从代码或 ADR 中验证——不得包含无法溯源的断言。
 修改真相源文件时，必须检查下游是否需要同步更新。

package/src/bollharness/scripts/context-fragments/version-sources.md

@@ -4,7 +4,7 @@
 
 | 版本号 | 权威来源 | 必须同步的位置 |
 |--------|----------|----------------|
-| MCP Python | `mcp-server/pyproject.toml` | CLAUDE.md 引用 |
+| MCP Python | `mcp-server/pyproject.toml` | Bolloon.md 引用 |
 | MCP Node | `mcp-server-node/package.json` | 必须与 Python 版本一致 |
 | 后端 API | `backend/product/protocol/service.py` | /protocol 元数据返回 |
 | 前端 | `website/package.json` | 部署产物 BUILD_ID |

package/src/bollharness/scripts/hooks/find-project-root.sh

@@ -3,7 +3,7 @@
 #
 # Anchor priority:
 #   1. .bollharness/MANIFEST.yaml  (primary — declared by installer)
-#   2. CLAUDE.md                   (fallback — older projects or pre-install)
+#   2. Bolloon.md                   (fallback — older projects or pre-install)
 #
 # Why not scripts/guard-feedback.ts like the old boll-specific script?
 # Because that created a circular dependency: guard-feedback.ts was both
@@ -23,10 +23,10 @@ while [ "$d" != "/" ] && [ -n "$d" ]; do
   d="$(dirname "$d")"
 done
 
-# Fallback 1: walk up again looking for CLAUDE.md alone
+# Fallback 1: walk up again looking for Bolloon.md alone
 d="${PWD}"
 while [ "$d" != "/" ] && [ -n "$d" ]; do
-  if [ -f "$d/CLAUDE.md" ]; then
+  if [ -f "$d/Bolloon.md" ]; then
     echo "$d"
     exit 0
   fi
@@ -35,7 +35,7 @@ done
 
 # Fallback 2: CLAUDE_PROJECT_DIR env var set by Claude Code
 if [ -n "${CLAUDE_PROJECT_DIR:-}" ]; then
-  if [ -f "${CLAUDE_PROJECT_DIR}/.bollharness/MANIFEST.yaml" ] || [ -f "${CLAUDE_PROJECT_DIR}/CLAUDE.md" ]; then
+  if [ -f "${CLAUDE_PROJECT_DIR}/.bollharness/MANIFEST.yaml" ] || [ -f "${CLAUDE_PROJECT_DIR}/Bolloon.md" ]; then
     echo "${CLAUDE_PROJECT_DIR}"
     exit 0
   fi

package/src/bollharness/src/scripts/checks/check_doc_freshness.ts

@@ -75,7 +75,7 @@ export function run(repoRoot: string, mode: string = "full"): Finding[] {
 
   const actualRoutes = countRouteDecorators(repoRoot);
   const routesDoc = path.join(repoRoot, ".boll", "rules", "backend-routes.md");
-  const claudeMd = path.join(repoRoot, "CLAUDE.md");
+  const claudeMd = path.join(repoRoot, "Bolloon.md");
 
   if (fs.existsSync(routesDoc)) {
     const routesContent = fs.readFileSync(routesDoc, "utf-8");

package/src/bollharness/src/scripts/checks/check_doc_links.ts

@@ -5,7 +5,7 @@ import { Finding } from "./finding";
 export function run(repoRoot: string, mode: string = "full"): Finding[] {
   const findings: Finding[] = [];
 
-  const docFiles = ["CLAUDE.md", "docs/ROADMAP.md", "README.md"];
+  const docFiles = ["Bolloon.md", "docs/ROADMAP.md", "README.md"];
   const maxAgeDays = 7;
 
   for (const docFile of docFiles) {

package/src/bollharness/src/scripts/context_router.ts

@@ -20,7 +20,7 @@ export const CONTEXT_MAP: Record<string, string[]> = {
   "scenes/": ["scene-fidelity", "two-language"],
   "website/app/[scene]/": ["scene-fidelity", "two-language"],
   "website/components/scene/": ["scene-fidelity", "two-language"],
-  "CLAUDE.md": ["truth-source-hierarchy"],
+  "Bolloon.md": ["truth-source-hierarchy"],
   "MEMORY.md": ["truth-source-hierarchy"],
   "docs/INDEX.md": ["truth-source-hierarchy"],
   "mcp-server/pyproject.toml": ["version-sources"],

package/src/bollharness/src/scripts/deploy-guard.ts

@@ -134,7 +134,7 @@ function block(reason: string, host: string | null = null): void {
   Demo 正式: bash scripts/deploy-demo.sh <name> --channel prod --yes
   Demo 内测: bash scripts/deploy-demo.sh <name> --channel preview --yes
   Edge/Nginx: bash scripts/deploy-edge.sh --yes
-详见 CLAUDE.md Development Commands。`;
+详见 Bolloon.md Development Commands。`;
   } else if (BRIDGE_VPS_HOSTS.includes(host ?? "")) {
     guidance = `Bridge VPS 必须走 git pull 更新路径：
   ssh root@${host} 'sudo -u boll git -C /opt/boll pull --ff-only'

package/src/bollharness/src/scripts/guard_router.ts

@@ -10,7 +10,7 @@ export const GUARD_MAP: Record<string, string[]> = {
   "docs/issues/": ["check_issue_closure"],
   "backend/product/routes/": ["check_doc_freshness"],
   "docs/ROADMAP.md": ["check_doc_freshness"],
-  "CLAUDE.md": ["check_doc_freshness"],
+  "Bolloon.md": ["check_doc_freshness"],
   "docs/magic/": ["check_doc_freshness"],
   ".boll/rules/backend-routes.md": ["check_doc_freshness"],
   ".boll/settings.json": ["check_hook_installed"],

package/src/bollharness/src/scripts/hooks/_hook_output.ts

@@ -5,7 +5,7 @@ import * as fs from "fs";
 process.stdout.write(
   `\n\n## Bollharness Context\n\n` +
   `bollharness is an AI Agent Session Governance Framework.\n\n` +
-  `For more information, see CLAUDE.md in the project root.\n`
+  `For more information, see Bolloon.md in the project root.\n`
 );
 
 process.exit(0);

package/src/bollharness/src/scripts/hooks/risk-tracker.ts

@@ -9,7 +9,7 @@ const RISK_ORDER: Record<string, number> = { R0: 0, R1: 1, R2: 2, R3: 3, R4: 4 }
 const RISK_ELEVATORS: [string, string][] = [
   ["scripts/deploy", "R4"],
   ["backend/product/db/migration", "R4"],
-  ["CLAUDE.md", "R3"],
+  ["Bolloon.md", "R3"],
   [".boll/settings.json", "R3"],
   [".boll/skills/", "R3"],
   [".boll/rules/", "R3"],

package/src/bollharness/templates/scaffold/.gitignore.append

@@ -13,4 +13,4 @@
 .claude/
 !.claude/settings.json
 !.claude/settings.json.template
-!.claude/CLAUDE.md.template
+!.claude/Bolloon.md.template

package/src/bollharness/templates/scaffold/CLAUDE.md

@@ -1,9 +1,9 @@
-# CLAUDE.md
+# Bolloon.md
 
 <!--
   Auto-generated by bollharness installer.
   This file is the primary instruction source for Claude Code sessions.
-  Edit freely — the installer will NOT overwrite an existing CLAUDE.md.
+  Edit freely — the installer will NOT overwrite an existing Bolloon.md.
 -->
 
 ## Project Overview

package/src/bollharness-integration/context-router.ts

@@ -28,7 +28,7 @@ export const CONTEXT_MAP: Record<string, string[]> = {
   'src/bollharness-integration/': ['truth-source-hierarchy', 'artifact-linkage'],
   'docs/': ['truth-source-hierarchy', 'two-language'],
   'docs/decisions/': ['truth-source-hierarchy', 'artifact-linkage'],
-  'CLAUDE.md': ['truth-source-hierarchy', 'bridge-constitution'],
+  'Bolloon.md': ['truth-source-hierarchy', 'bridge-constitution'],
   'README.md': ['truth-source-hierarchy', 'general-dev-principles'],
 };
 
@@ -357,7 +357,7 @@ export const CONTEXT_FRAGMENTS = {
   'project-governance': `# Project Governance
 
 ## Truth Sources
-- CLAUDE.md: Project overview and norms
+- Bolloon.md: Project overview and norms
 - docs/: Architecture and decisions
 - code/: Implementation
 - issues/: Tracking and discussions

package/src/bollharness-integration/guard-checker.ts

@@ -90,7 +90,7 @@ export const GUARD_MAP: Record<string, string[]> = {
   'src/constraints/': ['check_api_types', 'check_versions'],
   'src/social/': ['check_api_types', 'check_versions'],
   'docs/': ['check_doc_freshness', 'check_doc_links'],
-  'CLAUDE.md': ['check_doc_freshness', 'check_artifact_link'],
+  'Bolloon.md': ['check_doc_freshness', 'check_artifact_link'],
   'README.md': ['check_doc_freshness'],
   'docs/decisions/': ['check_artifact_link', 'check_versions'],
   '.boll/': ['check_hook_installed'],