@bolloon/bolloon-agent 0.3.8 → 0.3.10

package/dist/external-engines/delegate.js

@@ -0,0 +1,148 @@
+/**
+ * external-engines/delegate.ts — 把编码任务委派给本机已安装的外部编码智能体 CLI
+ *
+ * 与 discovery 配合: discovery 找到 CLI 路径 + 规格, 这里真正 spawn 起来跑任务.
+ *
+ * 安全边界 (参照 shell-tool.ts 的护栏思路):
+ *   - 只委派给"已发现且 installed"的引擎 (cliPath 来自 command -v, 不由用户输入)
+ *   - prompt 作为单一 argv 传入, shell: false, 杜绝命令注入
+ *   - 默认 120s 超时 (BOLLOON_ENGINE_DELEGATE_TIMEOUT_MS 可配), 超时杀进程
+ *   - experiment 引擎是 API 供应商不是 CLI, 不支持委派 (提示改用 import)
+ */
+import { spawn } from 'child_process';
+import { discoverEngines, buildDelegateArgs } from './discovery.js';
+function delegateTimeoutMs() {
+    const env = Number(process.env.BOLLOON_ENGINE_DELEGATE_TIMEOUT_MS);
+    return Number.isFinite(env) && env > 0 ? env : 120_000;
+}
+/**
+ * 把任务派发给指定引擎的 CLI 执行.
+ * @param id 引擎 id: codex / claude-code / opencode / openclaw / hermes
+ * @param prompt 任务描述 (作为单参数传给 CLI)
+ */
+export async function delegateToEngine(id, prompt, opts = {}) {
+    const trimmedId = String(id || '').trim();
+    const trimmedPrompt = String(prompt || '').trim();
+    if (!trimmedId)
+        return { success: false, error: 'engine id 必填', unavailable: true };
+    if (!trimmedPrompt)
+        return { success: false, error: 'prompt 必填', unavailable: false };
+    // 实验引擎是 API 供应商, 不是 CLI, 不能委派
+    if (trimmedId.startsWith('experiment:')) {
+        return {
+            success: false,
+            unavailable: true,
+            error: `引擎 ${trimmedId} 是实验 API 供应商 (无 CLI), 不能委派执行. 请先用 /api/external-engines/import 把它注册为 LLM provider 后由 Bolloon 直接调用.`,
+        };
+    }
+    // 发现引擎, 拿到 cliPath + argv 模板
+    const engines = await discoverEngines();
+    const engine = engines.find((e) => e.id === trimmedId);
+    if (!engine) {
+        return { success: false, unavailable: true, error: `未发现的引擎: ${trimmedId}` };
+    }
+    if (!engine.installed || !engine.cliPath) {
+        return {
+            success: false,
+            unavailable: true,
+            error: `引擎 ${trimmedId} 未安装 (CLI 不在 PATH 上), 无法委派. 可用 /api/external-engines 查看已安装列表.`,
+        };
+    }
+    const argv = buildDelegateArgs(trimmedId, trimmedPrompt, opts.model);
+    if (!argv) {
+        return { success: false, unavailable: true, error: `引擎 ${trimmedId} 没有配置委派参数模板` };
+    }
+    const cwd = opts.cwd || process.cwd();
+    const timeoutMs = opts.timeoutMs || delegateTimeoutMs();
+    return new Promise((resolve) => {
+        let stdout = '';
+        let stderr = '';
+        let settled = false;
+        // 注意: 不要用 detached:true — 实测会让 opencode 不退出 (探针: detached=true 时 90s 仍不 exit,
+        //   detached=false 时 ~11s 正常 exit+close). opencode run --format json 退出干净, 无残留孙进程.
+        // 监听 'exit' 而非 'close': exit 在进程退出时即触发, 更稳 (close 也正常, 两者都可用).
+        const proc = spawn(engine.cliPath, argv, {
+            cwd,
+            env: { ...process.env },
+            shell: false,
+            windowsHide: true,
+            // stdin 必须 'ignore' (/dev/null): 否则 stdin 是默认管道, opencode run 会阻塞等
+            // stdin EOF 导致永不退出. stdout/stderr 用 pipe 收集输出.
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        const killTree = () => {
+            try {
+                proc.kill('SIGKILL');
+            }
+            catch {
+                // 进程可能已退出, 忽略
+            }
+        };
+        const killTimer = setTimeout(() => {
+            if (!settled) {
+                settled = true;
+                killTree();
+                resolve({
+                    success: false,
+                    output: stdout.slice(-8000),
+                    error: `委派超时 (${timeoutMs}ms), 已终止 ${trimmedId} 进程`,
+                    exitCode: null,
+                });
+            }
+        }, timeoutMs);
+        proc.stdout?.on('data', (d) => {
+            stdout += d.toString();
+            if (stdout.length > 8_000_000) {
+                // 超过 8MB, 截断防止内存爆炸 (仍继续收集尾部不重要)
+                stdout = stdout.slice(-8_000_000);
+            }
+        });
+        proc.stderr?.on('data', (d) => {
+            stderr += d.toString();
+            if (stderr.length > 8_000_000)
+                stderr = stderr.slice(-8_000_000);
+        });
+        proc.on('error', (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(killTimer);
+            killTree();
+            resolve({ success: false, error: `启动 ${trimmedId} 失败: ${err.message}`, exitCode: null, unavailable: true });
+        });
+        // 用 'exit' 而非 'close': exit 在进程退出时即触发, 不被孙子进程持有的管道阻塞.
+        // setImmediate 给最后一批 stdout data 一个 tick 的 flush 机会, 避免截断.
+        proc.on('exit', (code, signal) => {
+            if (settled)
+                return;
+            setImmediate(() => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(killTimer);
+                // opencode run 会留一个 headless server 孙进程继承 stdout 管道, 让 Node 的
+                // 'close' 永不触发 / 事件循环不退出. destroy 掉我们这一侧的流句柄, 释放 event loop
+                // (孙进程的 fd 副本在它自己进程里, 不影响 Node 退出). 结果已在 stdout/stderr 字符串里.
+                try {
+                    proc.stdout?.destroy();
+                }
+                catch { /* noop */ }
+                try {
+                    proc.stderr?.destroy();
+                }
+                catch { /* noop */ }
+                killTree();
+                const combined = (stdout + (stderr ? `\n[stderr]\n${stderr}` : '')).trim();
+                if (code === 0) {
+                    resolve({ success: true, output: combined || '(无输出)', exitCode: code });
+                }
+                else if (signal) {
+                    resolve({ success: false, output: combined || '(无输出)', error: `${trimmedId} 被信号 ${signal} 终止`, exitCode: null });
+                }
+                else {
+                    resolve({ success: false, output: combined || '(无输出)', error: `${trimmedId} 退出码 ${code}`, exitCode: code });
+                }
+            });
+        });
+    });
+}

package/dist/external-engines/discovery.js

@@ -0,0 +1,394 @@
+/**
+ * external-engines/discovery.ts — 自动发现本机已安装的外部编码智能体
+ *
+ * 设计原则:
+ *   - 纯函数 + 可注入 deps, 便于单测 (不真实碰 fs / 不真实 spawn)
+ *   - best-effort: 不同工具版本配置文件 schema 会变, 用一个宽松的 key 提取器
+ *   - 发现 ≠ 启用: 这里只回报"装了没 / 配了没", 真正写进 provider 由 import 负责
+ *
+ * 复用现有范式: 参照 src/pi-ecosystem-mcp/index.ts 的 discoverMcpServers()
+ */
+import * as path from 'path';
+import * as fs from 'fs/promises';
+import { spawn } from 'child_process';
+/**
+ * 可筛选的模型候选列表.
+ * OpenCode / OpenClaw / Hermes 是 provider 无关 (openai 兼容 + anthropic 等),
+ * 给一份跨供应商的宽列表便于在 UI 里筛选; Codex / Claude Code 给各自供应商的列表.
+ * 实验 API 由声明文件决定, 不预置.
+ */
+const OPENAI_COMPAT_MODELS = [
+    'gpt-5.5', 'gpt-5', 'gpt-4.1', 'gpt-4o', 'gpt-4o-mini', 'gpt-4-turbo', 'gpt-3.5-turbo',
+    'deepseek-v4-flash', 'deepseek-v4-pro',
+    'qwen-plus', 'qwen-max', 'qwen-turbo',
+    'moonshot-v1-8k', 'moonshot-v1-32k', 'moonshot-v1-128k',
+    'glm-4-flash', 'glm-4', 'glm-4-plus',
+    'mimo-v2.5-pro', 'mimo-v2-pro',
+];
+const ANTHROPIC_MODELS = [
+    'claude-sonnet-4-5-20250929', 'claude-opus-4', 'claude-3-5-sonnet-20241022',
+    'claude-3-5-haiku-20241022', 'claude-3-opus-20240229',
+];
+const GEMINI_MODELS = ['gemini-3.5-flash', 'gemini-2.5-pro', 'gemini-3.1-flash-lite', 'gemini-flash-latest'];
+const OPENROUTER_MODELS = [
+    'anthropic/claude-sonnet-4.5', 'anthropic/claude-3.5-sonnet', 'openai/gpt-4.1',
+    'deepseek/deepseek-v4-flash', 'google/gemini-2.5-pro',
+];
+/** OpenCode 是 provider 无关, 合并主流供应商列表 */
+const OPENCODE_MODELS = [
+    ...OPENAI_COMPAT_MODELS,
+    ...ANTHROPIC_MODELS,
+    ...GEMINI_MODELS,
+    ...OPENROUTER_MODELS,
+];
+/** provider 别名 → Bolloon ModelProvider */
+const PROVIDER_ALIASES = {
+    openai: 'openai',
+    'openai-compatible': 'openai',
+    azure: 'openai',
+    anthropic: 'anthropic',
+    claude: 'anthropic',
+    ollama: 'ollama',
+    openrouter: 'openrouter',
+    gemini: 'gemini',
+    google: 'gemini',
+    minimax: 'minimax',
+    deepseek: 'deepseek',
+    kimi: 'kimi',
+    moonshot: 'kimi',
+    glm: 'glm',
+    zhipu: 'glm',
+    qwen: 'qwen',
+    dashscope: 'qwen',
+    mimo: 'mimo',
+    xiaomi: 'mimo',
+    local: 'local',
+};
+/** 已知引擎规格 (不含 experiment, experiment 由目录扫描动态产出) */
+const KNOWN_ENGINES = [
+    {
+        id: 'codex',
+        displayName: 'OpenAI Codex CLI',
+        binaries: ['codex'],
+        configFiles: ['.codex/config.json', '.codex/auth.json'],
+        envKeys: ['OPENAI_API_KEY', 'CODEX_API_KEY'],
+        providerHint: 'openai',
+        baseUrlHint: 'https://api.openai.com/v1',
+        modelHint: 'gpt-4.1',
+        models: OPENAI_COMPAT_MODELS,
+        modelFlag: '-m',
+        delegateArgs: (p) => ['exec', '--full-auto', p],
+    },
+    {
+        id: 'claude-code',
+        displayName: 'Claude Code (Anthropic)',
+        binaries: ['claude', 'claude-code'],
+        configFiles: ['.claude.json', '.config/claude/config.json'],
+        envKeys: ['ANTHROPIC_API_KEY', 'CLAUDE_API_KEY'],
+        providerHint: 'anthropic',
+        baseUrlHint: 'https://api.anthropic.com/v1',
+        modelHint: 'claude-sonnet-4-5-20250929',
+        models: ANTHROPIC_MODELS,
+        modelFlag: '--model',
+        delegateArgs: (p) => ['-p', p, '--print'],
+    },
+    {
+        id: 'opencode',
+        displayName: 'OpenCode',
+        binaries: ['opencode'],
+        configFiles: ['.config/opencode/opencode.json', '.opencode/opencode.json', 'opencode.json'],
+        envKeys: ['OPENCODE_API_KEY', 'OPENAI_API_KEY', 'ANTHROPIC_API_KEY', 'OPENROUTER_API_KEY'],
+        providerHint: 'openai',
+        models: OPENCODE_MODELS,
+        modelFlag: '-m',
+        // opencode run 默认进 TUI 不退出, --format json 强制 headless 输出并退出 (非交互委派必需)
+        delegateArgs: (p) => ['run', p, '--format', 'json'],
+    },
+    {
+        id: 'openclaw',
+        displayName: 'OpenClaw',
+        binaries: ['openclaw', 'open-claw'],
+        configFiles: ['.openclaw/config.json', '.config/openclaw/config.json'],
+        envKeys: ['OPENCLAW_API_KEY', 'OPENAI_API_KEY', 'ANTHROPIC_API_KEY'],
+        providerHint: 'openai',
+        models: OPENCODE_MODELS,
+        delegateArgs: (p) => ['run', p],
+    },
+    {
+        id: 'hermes',
+        displayName: 'Hermes',
+        binaries: ['hermes'],
+        configFiles: ['.hermes/config.json', '.config/hermes/config.json'],
+        envKeys: ['HERMES_API_KEY', 'OPENAI_API_KEY', 'ANTHROPIC_API_KEY'],
+        providerHint: 'openai',
+        models: OPENCODE_MODELS,
+        delegateArgs: (p) => ['prompt', p],
+    },
+];
+// ====================== 默认 deps (真实 IO) ======================
+function realWhichImpl(name) {
+    // 用 command -v 解析 PATH; JSON.stringify 防止名字里的元字符注入内层 shell
+    return new Promise((resolve) => {
+        const p = spawn('sh', ['-c', `command -v ${JSON.stringify(name)}`], {
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let out = '';
+        p.stdout?.on('data', (d) => (out += d.toString()));
+        p.on('close', () => resolve(out.trim() || undefined));
+        p.on('error', () => resolve(undefined));
+    });
+}
+function realReadFileImpl(p) {
+    return fs.readFile(p, 'utf-8').then((c) => c).catch(() => undefined);
+}
+function realReaddirImpl(dir) {
+    return fs.readdir(dir).then((c) => c).catch(() => undefined);
+}
+export function defaultDeps() {
+    return {
+        which: realWhichImpl,
+        readFile: realReadFileImpl,
+        readdir: realReaddirImpl,
+        env: process.env,
+        home: process.env.HOME || process.env.USERPROFILE || '/tmp',
+    };
+}
+// ====================== 纯工具函数 (可单测) ======================
+const APIKEY_KEYS = ['apiKey', 'api_key', 'apikey', 'key', 'token', 'access_token', 'OPENAI_API_KEY', 'ANTHROPIC_API_KEY', 'OPENROUTER_API_KEY', 'OPENCLAW_API_KEY', 'HERMES_API_KEY', 'CODEX_API_KEY', 'OPENCODE_API_KEY'];
+const BASEURL_KEYS = ['baseUrl', 'base_url', 'apiBase', 'api_base', 'endpoint', 'baseURL', 'API_BASE'];
+const MODEL_KEYS = ['model', 'modelName', 'model_name'];
+const PROVIDER_KEYS = ['provider', 'providerName', 'provider_name'];
+/** 宽松提取: 先看顶层, 再看一层嵌套 (常见的 providers.xxx / auth.xxx) */
+function pickKey(obj, keys) {
+    if (!obj || typeof obj !== 'object')
+        return undefined;
+    for (const k of keys) {
+        const v = obj[k];
+        if (typeof v === 'string' && v.trim())
+            return v.trim();
+    }
+    for (const k of Object.keys(obj)) {
+        const sub = obj[k];
+        if (sub && typeof sub === 'object') {
+            for (const kk of keys) {
+                const v = sub[kk];
+                if (typeof v === 'string' && v.trim())
+                    return v.trim();
+            }
+        }
+    }
+    return undefined;
+}
+/** 把任意 provider 字符串解析成 Bolloon ModelProvider (未知 → 兜底 hint) */
+export function resolveProvider(raw, hint) {
+    if (!raw)
+        return hint;
+    const norm = raw.trim().toLowerCase();
+    if (PROVIDER_ALIASES[norm]) {
+        return PROVIDER_ALIASES[norm];
+    }
+    // 容错: 包含关键字也识别
+    if (norm.includes('anthropic') || norm.includes('claude'))
+        return 'anthropic';
+    if (norm.includes('openai'))
+        return 'openai';
+    if (norm.includes('gemini') || norm.includes('google'))
+        return 'gemini';
+    if (norm.includes('ollama'))
+        return 'ollama';
+    if (norm.includes('deepseek'))
+        return 'deepseek';
+    if (norm.includes('minimax'))
+        return 'minimax';
+    if (norm.includes('openrouter'))
+        return 'openrouter';
+    return hint;
+}
+/** 把发现到的引擎映射成 provider 导入 patch (纯函数, 可单测) */
+export function mapEngineToProviderConfig(engine) {
+    if (!engine.provider) {
+        throw new Error(`引擎 ${engine.id} 没有可映射的 provider, 无法导入为供应商`);
+    }
+    const patch = { enabled: true };
+    if (engine.apiKey)
+        patch.apiKey = engine.apiKey;
+    if (engine.baseUrl)
+        patch.baseUrl = engine.baseUrl;
+    if (engine.model)
+        patch.model = engine.model;
+    return { provider: engine.provider, patch };
+}
+/** 解析单个实验 API 文件内容 → 一组 {name, provider, apiKey, baseUrl, model, models?} */
+export function parseExperimentFile(content) {
+    let json;
+    try {
+        json = JSON.parse(content);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    const pushOne = (obj, fallbackName) => {
+        if (!obj || typeof obj !== 'object')
+            return;
+        const provider = resolveProvider(pickKey(obj, PROVIDER_KEYS), 'openai');
+        const apiKey = pickKey(obj, APIKEY_KEYS);
+        const baseUrl = pickKey(obj, BASEURL_KEYS);
+        const model = pickKey(obj, MODEL_KEYS);
+        const models = Array.isArray(obj.models) ? obj.models.filter((m) => typeof m === 'string' && m.trim()) : undefined;
+        if (!apiKey && !baseUrl)
+            return; // 没任何连接信息, 跳过
+        out.push({
+            name: typeof obj.name === 'string' && obj.name.trim() ? obj.name.trim() : fallbackName,
+            provider,
+            apiKey,
+            baseUrl,
+            model,
+            models,
+        });
+    };
+    // 形态 1: 顶层直接是 { name, provider, apiKey, baseUrl, model }
+    if (json.name || json.provider || json.apiKey || json.baseUrl) {
+        pushOne(json, 'experiment');
+        return out;
+    }
+    // 形态 2: { providers: [...] } / { engines: [...] } / { apis: [...] }
+    for (const arrKey of ['providers', 'engines', 'apis', 'experiments']) {
+        if (Array.isArray(json[arrKey])) {
+            json[arrKey].forEach((e, i) => pushOne(e, `experiment-${arrKey}-${i}`));
+            return out;
+        }
+    }
+    return out;
+}
+// ====================== 核心发现逻辑 ======================
+async function discoverOne(spec, deps) {
+    // 1. CLI 是否安装
+    let cliPath;
+    for (const bin of spec.binaries) {
+        const found = await deps.which(bin);
+        if (found) {
+            cliPath = found;
+            break;
+        }
+    }
+    // 2. 读配置文件
+    let configObj = null;
+    let configPath;
+    for (const cf of spec.configFiles) {
+        const abs = path.isAbsolute(cf) ? cf : path.join(deps.home, cf);
+        const content = await deps.readFile(abs);
+        if (content) {
+            try {
+                configObj = JSON.parse(content);
+                configPath = abs;
+                break;
+            }
+            catch {
+                // 非 JSON, 跳过
+            }
+        }
+    }
+    // 3. 解析 apiKey: 环境变量优先, 其次配置文件
+    let apiKey;
+    let source = 'none';
+    for (const ek of spec.envKeys) {
+        const v = deps.env[ek];
+        if (v && v.trim()) {
+            apiKey = v.trim();
+            source = 'env';
+            break;
+        }
+    }
+    if (!apiKey) {
+        const fromConfig = pickKey(configObj, APIKEY_KEYS);
+        if (fromConfig) {
+            apiKey = fromConfig;
+            source = 'config';
+        }
+    }
+    // 4. baseUrl / model: 配置文件优先, 其次 hint
+    const baseUrl = pickKey(configObj, BASEURL_KEYS) || spec.baseUrlHint;
+    const model = pickKey(configObj, MODEL_KEYS) || spec.modelHint;
+    // 4.1 模型候选列表: 配置文件声明的 models 数组优先, 否则用规格预置列表
+    let models = spec.models;
+    if (configObj && Array.isArray(configObj.models) && configObj.models.length > 0) {
+        models = configObj.models.filter((m) => typeof m === 'string' && m.trim());
+    }
+    // 5. provider: 配置文件声明的 > hint
+    const provider = resolveProvider(pickKey(configObj, PROVIDER_KEYS), spec.providerHint);
+    const configured = !!apiKey || provider === 'ollama' || provider === 'local';
+    const available = !!cliPath && configured;
+    return {
+        id: spec.id,
+        displayName: spec.displayName,
+        installed: !!cliPath,
+        configured,
+        available,
+        cliPath,
+        configPath,
+        provider,
+        apiKey,
+        baseUrl,
+        model,
+        models,
+        source,
+        notes: `委派参数模板: ${spec.binaries[0]} ${spec.delegateArgs('<prompt>').join(' ')}`,
+    };
+}
+async function discoverExperimentEngines(deps) {
+    const dir = deps.env['BOLLOON_EXPERIMENT_API_DIR'] ||
+        path.join(deps.home, '.bolloon', 'experiments');
+    const files = await deps.readdir(dir);
+    if (!files || files.length === 0)
+        return [];
+    const result = [];
+    for (const f of files) {
+        if (!f.endsWith('.json'))
+            continue;
+        const content = await deps.readFile(path.join(dir, f));
+        if (!content)
+            continue;
+        const parsed = parseExperimentFile(content);
+        for (const item of parsed) {
+            const provider = item.provider || 'openai';
+            result.push({
+                id: `experiment:${item.name}`,
+                displayName: `实验 API: ${item.name}`,
+                installed: true, // 实验 API 视为"已装" (它们就是配置文件声明的)
+                configured: !!(item.apiKey || item.baseUrl),
+                available: !!(item.apiKey || item.baseUrl),
+                configPath: path.join(dir, f),
+                provider,
+                apiKey: item.apiKey,
+                baseUrl: item.baseUrl,
+                model: item.model,
+                models: item.models,
+                source: 'config',
+                notes: '来自实验目录声明的 API (BOLLOON_EXPERIMENT_API_DIR)',
+            });
+        }
+    }
+    return result;
+}
+/** 发现所有外部引擎 (已知 + 实验) */
+export async function discoverEngines(deps = defaultDeps()) {
+    const known = await Promise.all(KNOWN_ENGINES.map((spec) => discoverOne(spec, deps)));
+    const experiment = await discoverExperimentEngines(deps);
+    return [...known, ...experiment];
+}
+/** 取单个引擎规格 (委派时用) */
+export function getEngineSpec(id) {
+    return KNOWN_ENGINES.find((e) => e.id === id);
+}
+/** 取已知引擎的委派 argv (best-effort); 传 model 时追加该引擎的 modelFlag */
+export function buildDelegateArgs(id, prompt, model) {
+    const spec = getEngineSpec(id);
+    if (!spec)
+        return undefined;
+    const args = spec.delegateArgs(prompt);
+    if (model && spec.modelFlag) {
+        args.push(spec.modelFlag, model);
+    }
+    return args;
+}

package/dist/external-engines/index.js

@@ -0,0 +1,9 @@
+/**
+ * external-engines/index.ts — 外部编码智能体 模块 barrel
+ *
+ * 对外暴露: 发现 (discover) / 配置为供应商映射 (mapEngineToProviderConfig) /
+ * 委派 (delegateToEngine) / 类型.
+ */
+export * from './types.js';
+export { discoverEngines, getEngineSpec, buildDelegateArgs, mapEngineToProviderConfig, parseExperimentFile, resolveProvider, defaultDeps, } from './discovery.js';
+export { delegateToEngine } from './delegate.js';

package/dist/external-engines/types.js

@@ -0,0 +1,11 @@
+/**
+ * external-engines/types.ts — 外部编码智能体/工具 类型定义
+ *
+ * "外部引擎" = 本机已安装的其他 AI 编码工具 (codex / claude code / openclaw /
+ * hermes / opencode) 以及实验里已声明的 API. Bolloon 可以:
+ *   1. 发现 (discover): 扫描 CLI 是否安装 + 它们的配置文件/环境变量里已有的 API key
+ *   2. 配置为供应商 (import): 把发现到的 API key/baseUrl/model 写进 Bolloon 的
+ *      LLM provider 体系, 当作普通供应商启用 (用户无需重复填 key)
+ *   3. 委派 (delegate): 直接调用这些工具的 CLI, 把编码任务派发给它们当子智能体跑
+ */
+export {};

package/dist/pi-ecosystem-judgment/injection-gate.js

@@ -138,7 +138,7 @@ function formatInjection(values, mode, resolvedCount, maxChars = 1500) {
 // 使用记录 (回溯): AI 实际"用了"哪些判断力
 // ============================================================
 const USAGE_LOG = (os.homedir() || '/tmp') + '/.bolloon/human-values/usage.jsonl';
-export async function recordJudgmentUsage(usedIds, meta) {
+export async function recordJudgmentUsage(usedIds, meta = {}) {
     if (usedIds.length === 0)
         return;
     try {
@@ -147,6 +147,7 @@ export async function recordJudgmentUsage(usedIds, meta) {
             channelId: meta.channelId ?? null,
             userInputPreview: (meta.userInput ?? '').substring(0, 80),
             usedIds,
+            polarity: meta.polarity ?? 'positive',
         };
         await fs.appendFile(USAGE_LOG, JSON.stringify(entry) + '\n', 'utf-8');
     }
@@ -154,6 +155,89 @@ export async function recordJudgmentUsage(usedIds, meta) {
         console.warn('[injection-gate] recordJudgmentUsage failed:', err);
     }
 }
+// ============================================================
+// 2026-07-22 设计 B: 负向判断力回收 — "避免清单"注入 (显式, 进 prompt)
+//
+// 涡轮增压锚点: 判断力的负向是"判断力"不是"上下文废气", 可进 prompt 作为约束
+// (精准 = 正向指引 + 负向避免). 从 reject 类 + 高 stakes + 高 confidence 选 Top N,
+// 以"避免清单"语义产出 systemAddition. maxChars=300 (远小于正向 1500, 防噪音).
+// ============================================================
+export const DEFAULT_NEGATIVE_CONFIG = {
+    topN: 3,
+    mode: 'concise',
+    skip: false,
+    maxChars: 300,
+    /** 最低置信度门槛 (只注入足够可信的否决) */
+    minConfidence: 0.7,
+};
+function emptyGateResult(skipReason) {
+    return { systemAddition: '', usedIds: [], matchedCount: 0, didInject: false, skipReason };
+}
+/**
+ * 负向判断力注入门: 给定用户输入, 返回"避免清单"追加文本 + 用到的负向 judgment id.
+ *
+ * 筛选: decision_type='reject' && status='active' && stakes∈{high,critical} && confidence>=minConfidence
+ * 排序: critical 优先, 再按 confidence desc
+ * 静默: 任意步骤失败返回空字符串, 不 throw (主对话不阻塞)
+ */
+export async function injectNegativeGuard(userInput, _ctx = {}, options = {}) {
+    const cfg = { ...DEFAULT_NEGATIVE_CONFIG, ...options };
+    if (cfg.skip)
+        return emptyGateResult('skip');
+    if (!userInput || userInput.trim().length === 0)
+        return emptyGateResult('no-input');
+    try {
+        const all = await loadAllJudgments();
+        const negatives = all.filter((j) => j.decision_type === 'reject' &&
+            (j.status ?? 'active') === 'active' &&
+            (j.context?.stakes === 'high' || j.context?.stakes === 'critical') &&
+            (j.metadata?.confidence ?? 0.5) >= (cfg.minConfidence ?? 0.7));
+        if (negatives.length === 0)
+            return emptyGateResult('empty-negatives');
+        // 排序: critical > high, 再按 confidence desc
+        negatives.sort((a, b) => {
+            const sa = a.context?.stakes === 'critical' ? 2 : 1;
+            const sb = b.context?.stakes === 'critical' ? 2 : 1;
+            const ca = a.metadata?.confidence ?? 0.5;
+            const cb = b.metadata?.confidence ?? 0.5;
+            return (sb - sa) || (cb - ca);
+        });
+        const top = negatives.slice(0, cfg.topN);
+        const usedIds = top.map((j) => j.id);
+        const systemAddition = formatNegativeInjection(top, cfg.maxChars);
+        return {
+            systemAddition,
+            usedIds,
+            matchedCount: negatives.length,
+            didInject: true,
+            skipReason: null,
+        };
+    }
+    catch (err) {
+        console.warn('[injection-gate] injectNegativeGuard failed (silent fallback):', err);
+        return emptyGateResult('exception');
+    }
+}
+function formatNegativeInjection(items, maxChars) {
+    if (items.length === 0)
+        return '';
+    const SOURCE_TAG = '<!-- source: injection-gate (negative) -->';
+    const lines = items.map((j, i) => {
+        const stakes = j.context?.stakes === 'critical' ? ' [关键风险]' : ' [高风险]';
+        const decision = (j.decision || '').slice(0, 80);
+        return `${i + 1}. 避免: ${decision}${stakes}`;
+    });
+    let result = `${SOURCE_TAG}\n` +
+        `# 避免清单 (负向判断力, 自动注入)\n` +
+        `- 以下行为已被明确否决, 执行时主动规避; 如情境冲突在回复中说明\n` +
+        `${lines.join('\n')}\n`;
+    if (maxChars > 0 && result.length > maxChars) {
+        result =
+            result.substring(0, maxChars) +
+                '\n[System Note: 避免清单因长度截断, 这是背景约束, 不影响用户实际请求.]\n';
+    }
+    return result;
+}
 /**
  * 给定 channelId, 取最近 N 条 usage 记录 (UI 显示用)
  */