@bolloon/bolloon-agent 0.1.35 → 0.1.36

package/src/bootstrap/context-collector.ts

@@ -29,6 +29,18 @@ export interface BolloonContext {
   projectRoot: string;
   projectName: string;
   bolloonMd: string | null;
+  // 1b. Bolloon.md 4 级层次 (Claude Code 论文对齐, 严格 1:1)
+  // managed: /etc/bolloon/Bolloon.md (企业 IT 部署)
+  // user:    ~/.bolloon/Bolloon.md
+  // project: <cwd>/Bolloon.md (Bolloon.md 兼容)
+  // local:   <cwd>/CLAUDE.local.md
+  hierarchy: {
+    managed: string | null;
+    user: string | null;
+    project: string | null;
+    local: string | null;
+    merged: string;  // 已按优先级合并的 markdown 片段
+  };
   // 2. git 层
   git: {
     branch: string;
@@ -106,6 +118,21 @@ async function collectProject(cwd: string, bolloonMdMaxBytes: number) {
   return { projectName, bolloonMd };
 }
 
+async function collectHierarchy(cwd: string): Promise<BolloonContext['hierarchy']> {
+  // 动态 import 避免循环依赖
+  const { collectHierarchyLayers, mergeHierarchyLayers } = await import('./context-hierarchy.js');
+  try {
+    const layers = await collectHierarchyLayers({ cwd });
+    const merged = mergeHierarchyLayers(layers, { maxChars: DEFAULT_HIERARCHY_MERGED_MAX });
+    return { ...layers, merged };
+  } catch (err) {
+    console.warn('[context-collector] collectHierarchy failed (silent):', err);
+    return { managed: null, user: null, project: null, local: null, merged: '' };
+  }
+}
+
+const DEFAULT_HIERARCHY_MERGED_MAX = 2000;  // 4000 → 2000 (P-Action 4), 跟 context-hierarchy.ts DEFAULT_MERGE_MAX_CHARS 对齐
+
 async function collectGit(cwd: string, limit: number): Promise<BolloonContext['git']> {
   const branchOut = await safeExecFile('git', ['rev-parse', '--abbrev-ref', 'HEAD'], cwd);
   if (!branchOut) return null;
@@ -296,13 +323,14 @@ export async function collectBolloonContext(opts: CollectOptions): Promise<Bollo
     topValuesLimit = 10,
   } = opts;
   // 并行收集 (除 judgments 因为要动态 import + 依赖其它)
-  const [project, git, persona, skills, env, pending] = await Promise.all([
+  const [project, git, persona, skills, env, pending, hierarchy] = await Promise.all([
     collectProject(cwd, bolloonMdMaxBytes),
     collectGit(cwd, gitCommitLimit),
     collectPersona(),
     collectSkills(),
     Promise.resolve(collectEnv()),
     collectPending(opts),
+    collectHierarchy(cwd),
   ]);
   // judgments 单独调 (内部 import)
   const judgmentsSummary = await collectJudgmentsSummary(topValuesLimit);
@@ -311,6 +339,7 @@ export async function collectBolloonContext(opts: CollectOptions): Promise<Bollo
     projectRoot: cwd,
     projectName: project.projectName,
     bolloonMd: project.bolloonMd,
+    hierarchy,
     git,
     persona,
     judgmentsSummary,

package/src/bootstrap/context-hierarchy.ts

@@ -0,0 +1,283 @@
+/**
+ * Context Hierarchy — 4 级 Bolloon.md 查找 + 合并优先级
+ *
+ * 设计: 严格对齐 Claude Code 论文 4 级层次
+ *   1. Managed  — /etc/bolloon/Bolloon.md        (企业 IT 部署, 系统级)
+ *   2. User     — ~/.bolloon/Bolloon.md          (用户级, 跨项目)
+ *   3. Project  — <cwd>/Bolloon.md 或 .claude/rules/*.md
+ *   4. Local    — <cwd>/CLAUDE.local.md         (个人覆盖, .gitignore)
+ *
+ * 注入约定 (论文):
+ * - 拼到 system prompt 顶部 (作为 user context, 概率性遵守)
+ * - 不混入 user 消息 (避免 prompt injection)
+ * - 截断时反向砍 local → project → user → managed (优先保 managed, 因为是 bolloon 自身约束)
+ *
+ * 兼容:
+ * - 同时识别 Bolloon.md 和 Bolloon.md (论文用前者, bolloon 历史用后者)
+ * - 文件名按优先级: Bolloon.md > Bolloon.md
+ *
+ * 失败静默: 任何 IO 错误 → 返回 null, 不阻塞主流程.
+ */
+
+import * as fs from 'fs/promises';
+import * as os from 'os';
+import * as path from 'path';
+
+// ============================================================
+// 4 级路径配置
+// ============================================================
+
+export interface HierarchyPaths {
+  managed: string;  // /etc/bolloon/Bolloon.md
+  user: string;     // ~/.bolloon/Bolloon.md
+  project: string;  // <cwd>/Bolloon.md
+  projectRulesDir: string;  // <cwd>/.claude/rules/
+  local: string;    // <cwd>/CLAUDE.local.md
+}
+
+export interface HierarchyChars {
+  managed: number;
+  user: number;
+  project: number;
+  local: number;
+}
+
+export interface HierarchyLimits {
+  paths?: Partial<HierarchyPaths>;
+  maxChars?: Partial<HierarchyChars>;
+}
+
+export const DEFAULT_PATHS: HierarchyPaths = {
+  managed: '/etc/bolloon/Bolloon.md',
+  user: '',  // 用 resolveUserPath 填
+  project: '',  // 用 resolveProjectPaths 填
+  projectRulesDir: '',
+  local: '',
+};
+
+/**
+ * 单层字符上限 (P-Action 4 收紧, 阶段 0 把 4 级层次控制在 ≤ 2KB).
+ * 反向截断策略保证 managed 优先, 单层超限由 truncate() 截断.
+ */
+export const DEFAULT_MAX_CHARS: HierarchyChars = {
+  managed: 700,   // 1500 → 700, 保 bolloon 自身约束
+  user: 500,      // 1500 → 500, 跨项目偏好
+  project: 500,   // 2500 → 500, 项目规则
+  local: 300,     // 1500 → 300, 个人覆盖
+};
+
+// ============================================================
+// 路径解析
+// ============================================================
+
+export function resolveUserPath(home?: string): string {
+  const h = home ?? process.env.HOME ?? os.homedir() ?? '/tmp';
+  return path.join(h, '.bolloon', 'Bolloon.md');
+}
+
+export function resolveProjectPaths(cwd: string): { project: string; projectRulesDir: string; local: string } {
+  return {
+    project: path.join(cwd, 'Bolloon.md'),
+    projectRulesDir: path.join(cwd, '.claude', 'rules'),
+    local: path.join(cwd, 'CLAUDE.local.md'),
+  };
+}
+
+// ============================================================
+// 单层读取 (优先 Bolloon.md, fallback Bolloon.md)
+// ============================================================
+
+/**
+ * 读 1 个文件路径, 失败/缺失返回 null.
+ * 字符上限由调用方截断 (这里只负责读全文).
+ */
+async function readRuleFile(filePath: string): Promise<string | null> {
+  try {
+    const content = await fs.readFile(filePath, 'utf-8');
+    return content.length > 0 ? content : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * 读 project 层: 优先 Bolloon.md, fallback Bolloon.md, 最后尝试 .claude/rules/*.md
+ */
+async function readProjectLayer(projectPath: string, projectRulesDir: string, maxChars: number): Promise<string | null> {
+  // 1. Bolloon.md
+  let content = await readRuleFile(projectPath);
+  if (content) return truncate(content, maxChars);
+
+  // 2. Bolloon.md (向后兼容)
+  const bolloonMdPath = path.join(path.dirname(projectPath), 'Bolloon.md');
+  content = await readRuleFile(bolloonMdPath);
+  if (content) return truncate(content, maxChars);
+
+  // 3. .claude/rules/*.md (合并所有)
+  try {
+    const entries = await fs.readdir(projectRulesDir, { withFileTypes: true });
+    const ruleFiles = entries
+      .filter((e) => e.isFile() && e.name.endsWith('.md'))
+      .map((e) => path.join(projectRulesDir, e.name))
+      .sort();
+    if (ruleFiles.length > 0) {
+      const parts: string[] = [];
+      let total = 0;
+      for (const f of ruleFiles) {
+        const c = await readRuleFile(f);
+        if (c) {
+          parts.push(`### ${path.basename(f, '.md')}\n${c}`);
+          total += c.length;
+          if (total >= maxChars) break;
+        }
+      }
+      if (parts.length > 0) return truncate(parts.join('\n\n'), maxChars);
+    }
+  } catch { /* dir 不存在 */ }
+
+  return null;
+}
+
+// ============================================================
+// 4 层收集
+// ============================================================
+
+export interface HierarchyLayers {
+  managed: string | null;  // /etc/bolloon/Bolloon.md
+  user: string | null;     // ~/.bolloon/Bolloon.md
+  project: string | null;  // <cwd>/Bolloon.md
+  local: string | null;    // <cwd>/CLAUDE.local.md
+}
+
+export interface CollectHierarchyOptions {
+  cwd: string;
+  limits?: HierarchyLimits;
+  /** 覆盖 HOME (测试用) */
+  home?: string;
+}
+
+/**
+ * 并行读 4 层, 任何一层失败 = null (不阻塞其他).
+ */
+export async function collectHierarchyLayers(opts: CollectHierarchyOptions): Promise<HierarchyLayers> {
+  const limits: HierarchyLimits['maxChars'] = { ...DEFAULT_MAX_CHARS, ...(opts.limits?.maxChars ?? {}) };
+
+  const home = opts.home ?? process.env.HOME ?? os.homedir() ?? '/tmp';
+  const managedPath = opts.limits?.paths?.managed ?? DEFAULT_PATHS.managed;
+  const userPath = opts.limits?.paths?.user ?? resolveUserPath(home);
+  const projectPath = opts.limits?.paths?.project ?? path.join(opts.cwd, 'Bolloon.md');
+  const projectRulesDir = opts.limits?.paths?.projectRulesDir ?? path.join(opts.cwd, '.claude', 'rules');
+  const localPath = opts.limits?.paths?.local ?? path.join(opts.cwd, 'CLAUDE.local.md');
+
+  const [managed, user, project, local] = await Promise.all([
+    readRuleFile(managedPath).then((c) => c ? truncate(c, limits.managed!) : null),
+    readRuleFile(userPath).then((c) => c ? truncate(c, limits.user!) : null),
+    readProjectLayer(projectPath, projectRulesDir, limits.project!),
+    readRuleFile(localPath).then((c) => c ? truncate(c, limits.local!) : null),
+  ]);
+
+  return { managed, user, project, local };
+}
+
+// ============================================================
+// 合并 + 截断
+// ============================================================
+
+export interface MergeOptions {
+  /** 总字符上限 (默认 8000, 之前 project-context.ts 用 4000) */
+  maxChars?: number;
+}
+
+/**
+ * 4 级合并总字符上限 (P-Action 4 收紧, ≤ 2KB ≈ 500 tokens).
+ * 反向截断 (local → project → user → managed) 保证 managed 不丢.
+ */
+export const DEFAULT_MERGE_MAX_CHARS = 2000;
+
+/**
+ * 按 4 级顺序 (managed → user → project → local) 拼接为 markdown 片段.
+ *
+ * 截断策略: 反向砍 (local → project → user → managed), 优先保 managed.
+ * - 总长 < maxChars: 不截断
+ * - 总长 ≥ maxChars: 按 (local, project, user) 顺序逐步砍到 firstParagraphs=1
+ * - 最后只保 managed (bolloon 自身约束不能丢)
+ */
+export function mergeHierarchyLayers(layers: HierarchyLayers, opts: MergeOptions = {}): string {
+  const maxChars = opts.maxChars ?? DEFAULT_MERGE_MAX_CHARS;
+  const parts: string[] = [];
+  const labels: Array<[keyof HierarchyLayers, string]> = [
+    ['managed', '管理规则 (Managed)'],
+    ['user', '用户规则 (User)'],
+    ['project', '项目规则 (Project)'],
+    ['local', '本地规则 (Local)'],
+  ];
+
+  for (const [key, label] of labels) {
+    const content = layers[key];
+    if (content) {
+      parts.push(`## ${label}\n\n${content}`);
+    }
+  }
+
+  if (parts.length === 0) return '';
+  let result = parts.join('\n\n---\n\n');
+  if (result.length <= maxChars) return result;
+
+  // 超限: 反向砍 (local → project → user), 二级回退到 firstParagraphs=1
+  return truncateMerged(layers, maxChars);
+}
+
+function truncateMerged(layers: HierarchyLayers, maxChars: number): string {
+  const order: Array<[keyof HierarchyLayers, string]> = [
+    ['local', '本地规则 (Local)'],
+    ['project', '项目规则 (Project)'],
+    ['user', '用户规则 (User)'],
+    ['managed', '管理规则 (Managed)'],
+  ];
+  const capped: HierarchyLayers = { ...layers };
+  // 反复压缩, 直到总长 ≤ maxChars
+  let depth = 0;  // 0=原始, 1=firstParagraphs=1, 2=砍半
+  while (depth < 3) {
+    const parts: string[] = [];
+    for (const [key, label] of order) {
+      const c = capped[key];
+      if (!c) continue;
+      let text = c;
+      if (depth === 1) text = firstParagraphs(c, 1);
+      if (depth === 2) text = firstParagraphs(c, 1, Math.floor(maxChars / 4));
+      parts.push(`## ${label}\n\n${text}`);
+    }
+    const joined = parts.reverse().join('\n\n---\n\n');  // 恢复 managed → user → project → local
+    if (joined.length <= maxChars) return joined;
+    depth++;
+  }
+  // 最后保 managed 一行
+  return `## 管理规则 (Managed)\n\n${firstParagraphs(layers.managed ?? '(无)', 1, maxChars - 50)}`;
+}
+
+// ============================================================
+// 工具
+// ============================================================
+
+function truncate(s: string, maxChars: number): string {
+  if (s.length <= maxChars) return s;
+  return s.substring(0, maxChars) + '\n... (truncated)';
+}
+
+function firstParagraphs(text: string, count: number, maxLen?: number): string {
+  const paragraphs = text.split(/\n\s*\n/).filter((p) => p.trim().length > 0);
+  let result = paragraphs.slice(0, count).join('\n\n');
+  if (maxLen && result.length > maxLen) {
+    result = result.substring(0, maxLen) + '...';
+  }
+  return result;
+}
+
+// ============================================================
+// 测试钩子
+// ============================================================
+
+/** 重置模块级状态 (供测试). 当前无状态, 保留为占位. */
+export function _resetHierarchyForTest(): void {
+  // no-op (collect 是纯函数, 但保留 API 一致)
+}

package/src/bootstrap/lifecycle-hooks.ts

@@ -121,49 +121,45 @@ function sanitizeChannelId(id: string): string {
 }
 
 // ============================================================
-// PreToolUse (接口预留, 当前仅实现白名单 + 危险命令拦截)
+// PreToolUse (P2: 4 步链式 validator + permission mode)
 // ============================================================
 
+import { resolvePermissionMode, type PermissionMode } from '../agents/permission-mode.js';
+import { validatePreToolUse } from '../agents/pre-tool-validator.js';
+
 export interface PreToolUseOptions {
   tool: string;
   args: Record<string, unknown>;
+  /** 可选, 不传则用 env BOLLOON_PERM_MODE 或 default */
+  permissionMode?: PermissionMode;
 }
 
 export interface PreToolUseResult {
   allowed: boolean;
   reason?: string;
+  /** P2: 哪一步拒绝的, 供 audit log */
+  rejectedBy?: 'mode' | 'blacklist' | 'shell-guard' | 'schema';
+  mode: PermissionMode;
+  shellGuardRetained?: boolean;
 }
 
-// 黑名单: 高危 shell 命令模式
-const DANGEROUS_PATTERNS: Array<{ re: RegExp; reason: string }> = [
-  { re: /\brm\s+(-[a-z]*f[a-z]*\s+)?-[a-z]*r[a-z]*\s+\//, reason: '禁止递归删除根目录' },
-  { re: /\bgit\s+push\s+.*--force\b/, reason: '禁止 force push' },
-  { re: /\brm\s+-rf\s+~\//, reason: '禁止递归删除 home' },
-  { re: /\bdd\s+if=.*\s+of=\/dev\//, reason: '禁止 dd 覆盖块设备' },
-  { re: /\bcurl\s+.*\|\s*(ba)?sh\b/, reason: '禁止 curl|sh 直执行' },
-  { re: />\s*\/dev\/sd[a-z]/, reason: '禁止写裸设备' },
-];
-
 /**
- * PreToolUse: 当前实现"危险命令拦截" (黑名单)
- * 白名单机制未启用 (默认放行所有非黑名单)
- * PreToolUse hook 接入 pi-sdk.ts 的 ReAct 循环是下个迭代
+ * PreToolUse: 4 步链式 validator
+ *   1. modeGate         (bypassPermissions + 非 shell 直接放行)
+ *   2. blacklistGate    (6 模式危险命令)
+ *   3. shellGuardGate   (路径黑名单, 绕过 mode 永远生效)
+ *   4. schemaGate       (第一版 stub: always allow)
+ *
+ * 向后兼容: 不传 permissionMode → 默认 'default' (env BOLLOON_PERM_MODE 仍生效)
+ * 失败静默: 任何异常 → allowed: true (与原行为一致)
  */
 export async function onPreToolUse(opts: PreToolUseOptions): Promise<PreToolUseResult> {
   try {
-    // 仅检查 shell 类工具的命令字符串
-    if (opts.tool === 'shell' || opts.tool === 'shell_exec' || opts.tool === 'bash') {
-      const cmd = String(opts.args.command || opts.args.cmd || '');
-      for (const { re, reason } of DANGEROUS_PATTERNS) {
-        if (re.test(cmd)) {
-          return { allowed: false, reason };
-        }
-      }
-    }
-    return { allowed: true };
+    const mode = resolvePermissionMode({ permissionMode: opts.permissionMode });
+    return validatePreToolUse(opts.tool, opts.args || {}, mode);
   } catch (err) {
-    console.warn('[lifecycle-hooks] onPreToolUse failed (silent):', err);
-    return { allowed: true };  // 失败放行 (不阻塞)
+    console.warn('[lifecycle-hooks] onPreToolUse failed (silent, allowing):', err);
+    return { allowed: true, mode: 'default' };  // 失败放行 (不阻塞)
   }
 }
 
@@ -174,3 +170,120 @@ export async function onPreToolUse(opts: PreToolUseOptions): Promise<PreToolUseR
 export function getStopLogPathForTest(): string {
   return STOP_LOG;
 }
+
+// ============================================================
+// PostToolUse (P+ : 工具调用后审计)
+// ============================================================
+
+export interface PostToolUseOptions {
+  tool: string;
+  args: Record<string, unknown>;
+  result: { success: boolean; output?: string; error?: string };
+  durationMs?: number;
+}
+
+export interface PostToolUseResult {
+  /** 是否允许继续 (false = abort 整个 ReAct 循环) */
+  continue: boolean;
+  reason?: string;
+}
+
+/**
+ * PostToolUse: 工具调用后审计
+ * 默认 always continue. 项目可挂 shell-guard audit log / judgment 注入门 / 监控门
+ * 失败静默: 任何异常 → continue: true (不阻塞主循环)
+ */
+export async function onPostToolUse(opts: PostToolUseOptions): Promise<PostToolUseResult> {
+  try {
+    // 审计日志: 写 ~/.bolloon/sessions/post-tool-audit.jsonl
+    const fs = await import('fs/promises');
+    const os = await import('os');
+    const path = await import('path');
+    const file = path.join(
+      process.env.HOME || os.homedir() || '/tmp',
+      '.bolloon', 'sessions', 'post-tool-audit.jsonl'
+    );
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    const entry = {
+      ts: new Date().toISOString(),
+      tool: opts.tool,
+      success: opts.result.success,
+      durationMs: opts.durationMs ?? 0,
+      // 不写 args (可能含密钥), 只写 result 的 success/error
+      error: opts.result.error?.substring(0, 200) || null,
+    };
+    await fs.appendFile(file, JSON.stringify(entry) + '\n', 'utf-8').catch(() => { /* ignore */ });
+    return { continue: true };
+  } catch (err) {
+    console.warn('[lifecycle-hooks] onPostToolUse failed (silent, allowing):', err);
+    return { continue: true };
+  }
+}
+
+// ============================================================
+// JudgmentInjected (bolloon 独有 : 注入门使用时审计)
+// ============================================================
+
+export interface JudgmentInjectedOptions {
+  judgmentIds: string[];
+  channelId?: string;
+  userInput?: string;
+}
+
+export async function onJudgmentInjected(opts: JudgmentInjectedOptions): Promise<void> {
+  try {
+    const fs = await import('fs/promises');
+    const os = await import('os');
+    const path = await import('path');
+    const file = path.join(
+      process.env.HOME || os.homedir() || '/tmp',
+      '.bolloon', 'sessions', 'judgment-injected.jsonl'
+    );
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    const entry = {
+      ts: new Date().toISOString(),
+      channelId: opts.channelId || 'unknown',
+      judgmentIds: opts.judgmentIds,
+      userInputSnippet: (opts.userInput || '').substring(0, 200),
+    };
+    await fs.appendFile(file, JSON.stringify(entry) + '\n', 'utf-8').catch(() => { /* ignore */ });
+  } catch (err) {
+    console.warn('[lifecycle-hooks] onJudgmentInjected failed (silent):', err);
+  }
+}
+
+// ============================================================
+// MonitorViolation (bolloon 独有 : 监控门审计违规)
+// ============================================================
+
+export interface MonitorViolationOptions {
+  channelId?: string;
+  judgmentId: string;
+  rule: string;
+  actualBehavior: string;
+  severity: 'low' | 'medium' | 'high';
+}
+
+export async function onMonitorViolation(opts: MonitorViolationOptions): Promise<void> {
+  try {
+    const fs = await import('fs/promises');
+    const os = await import('os');
+    const path = await import('path');
+    const file = path.join(
+      process.env.HOME || os.homedir() || '/tmp',
+      '.bolloon', 'sessions', 'monitor-violation.jsonl'
+    );
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    const entry = {
+      ts: new Date().toISOString(),
+      channelId: opts.channelId || 'unknown',
+      judgmentId: opts.judgmentId,
+      rule: opts.rule.substring(0, 200),
+      actualBehavior: opts.actualBehavior.substring(0, 200),
+      severity: opts.severity,
+    };
+    await fs.appendFile(file, JSON.stringify(entry) + '\n', 'utf-8').catch(() => { /* ignore */ });
+  } catch (err) {
+    console.warn('[lifecycle-hooks] onMonitorViolation failed (silent):', err);
+  }
+}

package/src/bootstrap/project-context.ts

@@ -9,7 +9,7 @@
 
 import type { BolloonContext } from './context-collector.js';
 
-const DEFAULT_MAX_CHARS = 4000;
+const DEFAULT_MAX_CHARS = 8000;  // 从 4000 提到 8000, 给 4 级 Bolloon.md 留空间
 const BOLLOON_MD_KEEP = 500;  // 砍到这么长
 
 export function formatContextForSystemPrompt(
@@ -21,7 +21,15 @@ export function formatContextForSystemPrompt(
   lines.push(`# 你的项目上下文 (自动 bootstrap, 时间: ${ctx.collectedAt})`);
   lines.push('');
 
-  // 1. 项目名 + Bolloon.md 摘要
+  // 1. Bolloon.md 4 级层次 (Claude Code 论文, 严格 1:1)
+  //    managed → user → project → local, 已在 collector 层 merge
+  if (ctx.hierarchy && ctx.hierarchy.merged && ctx.hierarchy.merged.length > 0) {
+    lines.push('## 规则层次 (4 级, Claude Code 论文对齐)');
+    lines.push(ctx.hierarchy.merged);
+    lines.push('');
+  }
+
+  // 1b. 项目名 + Bolloon.md 摘要 (向后兼容, Bolloon.md 也算 project 层之一)
   lines.push(`## 项目: ${ctx.projectName}`);
   lines.push(`- 路径: ${ctx.projectRoot}`);
   if (ctx.bolloonMd) {
@@ -49,7 +57,7 @@ export function formatContextForSystemPrompt(
 
   // 3. Persona
   if (ctx.persona) {
-    lines.push(`## 主人身份 (persona)`);
+    lines.push(`## 用户身份 (persona)`);
     lines.push(`- 名字: ${ctx.persona.name}`);
     if (ctx.persona.description) lines.push(`- 描述: ${ctx.persona.description}`);
     if (ctx.persona.personality) lines.push(`- 性格: ${ctx.persona.personality}`);