@bolloon/bolloon-agent 0.4.28 → 0.4.29

package/dist/electron-build/agents/decision-store.js

@@ -0,0 +1,292 @@
+"use strict";
+/**
+ * decision-store.ts — 决策协议 (Context OS §7, 2026-08-03)
+ *
+ * Context OS 原则: 重要决策不允许只写结论, 至少要留下可回滚的推理链.
+ * 9 要素:
+ *   1. 问题到底是什么            → problem
+ *   2. 有哪些选项, 包括"不做"     → options[].label (includeDoNothing)
+ *   3. 每个选项的时间/金钱/精力/机会成本 → options[].costs
+ *   4. 每个选项的短期/长期收益和战略价值 → options[].benefits
+ *   5. 风险、概率、影响、是否可恢复       → options[].risks
+ *   6. 当前的信息缺口             → infoGaps
+ *   7. 推荐方案                  → recommendation
+ *   8. 为什么是现在               → timing
+ *   9. 失败时的触发条件和回滚动作   → rollback
+ *
+ * 防止三类错误: 把一时情绪当判断 / 因一条新信息推翻整个项目 / 把不能回滚的重投入当"勇敢".
+ * 原则: 新信息只修改它真正证伪的那个假设; 其他部分默认不动.
+ *
+ * 设计 (减法, 同 plan-store):
+ *   - 不建数据库. 落盘 = ~/.bolloon/decisions/<decisionId>.json
+ *   - 工具入口在 pi-sdk-tools.ts 注册, 复用现有 LLM 调度.
+ *   - 任何 IO 失败静默返回 error 对象, 不阻塞主对话.
+ *   - 决策确认 (decideDecision) 后自动 reflect 到 judgeness:
+ *     HumanJudgment (storeHumanJudgment, source=trajectory) + JudgenessDescription
+ *     (reflectAfterJudgment, openState=locked → Context OS 阶段0 临时价值点).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDecisionsDir = getDecisionsDir;
+exports.getDecisionPath = getDecisionPath;
+exports.sanitizeDecisionId = sanitizeDecisionId;
+exports.createDecision = createDecision;
+exports.loadDecision = loadDecision;
+exports.updateDecisionStatus = updateDecisionStatus;
+exports.listDecisions = listDecisions;
+exports.decisionToContext = decisionToContext;
+exports.reflectDecisionToJudgeness = reflectDecisionToJudgeness;
+const fs = __importStar(require("fs/promises"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+// ============================================================
+// 落盘路径
+// ============================================================
+function getDecisionsDir(home = os.homedir()) {
+    return path.join(home, '.bolloon', 'decisions');
+}
+function getDecisionPath(decisionId, home = os.homedir()) {
+    return path.join(getDecisionsDir(home), `${decisionId.replace(/[^a-zA-Z0-9_-]/g, '_')}.json`);
+}
+function sanitizeDecisionId(id) {
+    return id.replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 64);
+}
+async function createDecision(input, home) {
+    const problem = String(input.problem || '').trim();
+    if (!problem)
+        return { ok: false, error: 'problem 必填 (问题到底是什么)' };
+    const options = Array.isArray(input.options)
+        ? input.options
+            .map((o) => ({
+            label: String(o.label || '').trim(),
+            includeDoNothing: !!o.includeDoNothing,
+            costs: String(o.costs || ''),
+            benefits: String(o.benefits || ''),
+            risks: String(o.risks || ''),
+        }))
+            .filter((o) => o.label)
+        : [];
+    if (options.length === 0)
+        return { ok: false, error: 'options 至少 1 个选项 (含"不做")' };
+    const now = new Date().toISOString();
+    const decisionId = `dec_${Date.now()}_${crypto.randomBytes(3).toString('hex')}`;
+    const decision = {
+        decisionId,
+        problem,
+        options,
+        infoGaps: String(input.infoGaps || ''),
+        recommendation: String(input.recommendation || ''),
+        timing: String(input.timing || ''),
+        rollback: String(input.rollback || ''),
+        context: {
+            domain: String(input.domain || '通用'),
+            stakes: input.stakes || 'medium',
+            by: input.by || 'agent',
+            originChannel: String(input.originChannel || ''),
+        },
+        status: 'draft',
+        createdAt: now,
+        updatedAt: now,
+    };
+    try {
+        const dir = getDecisionsDir(home);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(getDecisionPath(decisionId, home), JSON.stringify(decision, null, 2), 'utf-8');
+        return { ok: true, decision };
+    }
+    catch (e) {
+        return { ok: false, error: `写入失败: ${e?.message || String(e)}` };
+    }
+}
+async function loadDecision(decisionId, home) {
+    try {
+        const raw = await fs.readFile(getDecisionPath(decisionId, home), 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+async function saveDecision(decision, home) {
+    decision.updatedAt = new Date().toISOString();
+    await fs.writeFile(getDecisionPath(decision.decisionId, home), JSON.stringify(decision, null, 2), 'utf-8');
+}
+async function updateDecisionStatus(decisionId, input, opts = {}) {
+    const decision = await loadDecision(decisionId, opts.home);
+    if (!decision)
+        return { ok: false, error: `decision '${decisionId}' 不存在` };
+    const now = new Date().toISOString();
+    if (input.decide) {
+        if (input.recommendation && input.recommendation.trim()) {
+            decision.recommendation = String(input.recommendation).trim();
+        }
+        if (!decision.recommendation)
+            return { ok: false, error: 'recommendation 必填 (推荐方案)' };
+        decision.status = 'decided';
+        decision.decidedAt = now;
+        // 决策确认 → 自动 reflect 到 judgeness (Context OS 阶段0 入账)
+        const refl = await reflectDecisionToJudgeness(decision, opts.byAgentId);
+        if (!refl.ok) {
+            return { ok: false, error: `决策确认失败 (judgeness 入库): ${refl.error}` };
+        }
+        decision.reflection = refl.reflection;
+    }
+    else if (input.implemented) {
+        if (decision.status !== 'decided' && decision.status !== 'implemented') {
+            return { ok: false, error: '只能把 decided 的决策标记为 implemented' };
+        }
+        decision.status = 'implemented';
+    }
+    else if (input.rollback || input.abandon) {
+        decision.status = input.rollback ? 'rolled-back' : 'abandoned';
+        // 回滚/放弃 → 教训入库 (reject 语义, 防重复踩坑)
+        const reason = String(input.reason || '');
+        if (reason && input.rollback) {
+            await reflectRollbackLesson(decision, reason, opts.byAgentId).catch(() => { });
+        }
+    }
+    else {
+        return { ok: false, error: '必须指定 decide / implemented / rollback / abandon 之一' };
+    }
+    await saveDecision(decision, opts.home);
+    return { ok: true, decision };
+}
+async function listDecisions(status, home) {
+    try {
+        const dir = getDecisionsDir(home);
+        const files = await fs.readdir(dir);
+        const out = [];
+        for (const f of files) {
+            if (!f.endsWith('.json'))
+                continue;
+            try {
+                const raw = await fs.readFile(path.join(dir, f), 'utf-8');
+                const d = JSON.parse(raw);
+                if (status && d.status !== status)
+                    continue;
+                out.push(d);
+            }
+            catch { /* 单文件损坏跳过 */ }
+        }
+        out.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+/** 决策摘要 → 上下文注入 (9 要素完整可追溯, 上下文只给精简版) */
+function decisionToContext(d) {
+    const lines = [`📌 ${d.problem} [${d.status}] (id=${d.decisionId})`];
+    for (const o of d.options) {
+        const tag = o.includeDoNothing ? ' [不做]' : '';
+        lines.push(`  - 选项${tag}: ${o.label}`);
+    }
+    if (d.recommendation)
+        lines.push(`  推荐: ${d.recommendation}`);
+    if (d.infoGaps)
+        lines.push(`  信息缺口: ${d.infoGaps}`);
+    if (d.rollback)
+        lines.push(`  回滚条件: ${d.rollback}`);
+    if (d.reflection)
+        lines.push(`  ✅ 已入库 judgeness: hv=${d.reflection.hvId}${d.reflection.jdId ? ` jd=${d.reflection.jdId}` : ''}`);
+    return lines.join('\n');
+}
+/** 决策确认后入库: HumanJudgment (source=trajectory) + reflectAfterJudgment (openState=locked) */
+async function reflectDecisionToJudgeness(decision, byAgentId) {
+    try {
+        const { storeHumanJudgment } = await Promise.resolve().then(() => __importStar(require('../pi-ecosystem-judgment/human-value-store.js')));
+        const { reflectAfterJudgment } = await Promise.resolve().then(() => __importStar(require('../judgeness/reflect.js')));
+        const decisionText = `${decision.recommendation} (问题: ${decision.problem})`;
+        const judgment = await storeHumanJudgment({
+            decision: decisionText.slice(0, 300),
+            decision_type: 'approve',
+            reasons: [
+                `选项: ${decision.options.map((o) => o.label).join(' / ')}`,
+                `风险: ${decision.options.map((o) => o.risks || '无').join('; ')}`,
+                `回滚: ${decision.rollback || '无'}`,
+            ].filter(Boolean),
+            values_derived: [],
+            context: {
+                domain: decision.context.domain,
+                complexity: decision.context.stakes === 'critical' ? 'profound' : decision.context.stakes === 'high' ? 'complex' : decision.context.stakes === 'medium' ? 'moderate' : 'simple',
+                stakes: decision.context.stakes,
+                time_pressure: 'medium',
+            },
+            outcome: { approved: true },
+            metadata: { source: 'trajectory', confidence: 0.8, revisable: true },
+            status: 'active',
+            appliesTo: [],
+        });
+        const jd = await reflectAfterJudgment(judgment, 'agent', byAgentId).catch(() => null);
+        return {
+            ok: true,
+            reflection: { hvId: judgment.id, jdId: jd?.descriptionId, at: new Date().toISOString() },
+        };
+    }
+    catch (e) {
+        return { ok: false, error: e?.message || String(e) };
+    }
+}
+/** 回滚教训入库: HumanJudgment (reject 语义) — Context OS "失败时的触发条件和回滚动作" */
+async function reflectRollbackLesson(decision, reason, byAgentId) {
+    try {
+        const { storeHumanJudgment } = await Promise.resolve().then(() => __importStar(require('../pi-ecosystem-judgment/human-value-store.js')));
+        const { reflectAfterJudgment } = await Promise.resolve().then(() => __importStar(require('../judgeness/reflect.js')));
+        const judgment = await storeHumanJudgment({
+            decision: `回滚决策: ${decision.problem} — 失败原因: ${reason.slice(0, 200)}`,
+            decision_type: 'reject',
+            reasons: [decision.rollback || '', reason].filter(Boolean),
+            values_derived: [],
+            context: {
+                domain: decision.context.domain,
+                complexity: 'moderate',
+                stakes: decision.context.stakes,
+                time_pressure: 'medium',
+            },
+            outcome: { approved: false, feedback: reason.slice(0, 200) },
+            metadata: { source: 'trajectory', confidence: 0.7, revisable: false },
+            status: 'active',
+            appliesTo: [],
+        });
+        const jd = await reflectAfterJudgment(judgment, 'agent', byAgentId).catch(() => null);
+        return { ok: true, reflection: { hvId: judgment.id, jdId: jd?.descriptionId, at: new Date().toISOString() } };
+    }
+    catch (e) {
+        return { ok: false, error: e?.message || String(e) };
+    }
+}
+//# sourceMappingURL=decision-store.js.map

package/dist/electron-build/agents/decision-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-store.js","sourceRoot":"","sources":["../../../src/agents/decision-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,wCAAoB;AAClC,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,MAAY,MAAM,mCAAe;AAuDjC,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAE/D,yBAAgC,IAAI,GAAW,EAAE,CAAC,OAAO,EAAE;IACzD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,yBAAgC,UAAkB,EAAE,IAAI,GAAW,EAAE,CAAC,OAAO,EAAE;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AAChG,CAAC;AAED,4BAAmC,EAAU;IAC3C,OAAO,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAyBM,KAAK,yBACV,KAA0B,EAC1B,IAAa;IAEb,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1C,CAAC,CAAC,KAAK,CAAC,OAAO;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACnC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB;YACtC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;SAC7B,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3B,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAElF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAa;QACzB,UAAU;QACV,OAAO;QACP,OAAO;QACP,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;QAClD,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ;YAChC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;SACjD;QACD,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAEM,KAAK,uBAAuB,UAAkB,EAAE,IAAa;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,IAAa;IAC3D,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7G,CAAC;AAeM,KAAK,+BACV,UAAkB,EAClB,KAAgC,EAChC,IAAI,GAA0C,EAAE;IAEhD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,UAAU,OAAO,EAAE,CAAC;IAE3E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;YACxD,QAAQ,CAAC,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,cAAc;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QACtF,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAC5B,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;QACzB,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACtE,CAAC;QACD,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACxC,CAAC;SAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QAChE,CAAC;QACD,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAC;IAClC,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3C,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/D,kCAAkC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAY,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAEM,KAAK,wBAAwB,MAAuB,EAAE,IAAa;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;gBACtC,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;oBAAE,SAAS;gBAC5C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QAC3B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yCAAyC;AACzC,2BAAkC,CAAW;IAC3C,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjI,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAYD,2FAA2F;AACpF,KAAK,qCACV,QAAkB,EAClB,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;QAC7F,MAAM,EAAE,oBAAoB,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,cAAc,SAAS,QAAQ,CAAC,OAAO,GAAG,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACxC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACpC,aAAa,EAAE,SAAS;YACxB,OAAO,EAAE;gBACP,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACzD,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/D,OAAO,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE;aAClC,CAAC,MAAM,CAAC,OAAO,CAAC;YACjB,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;gBAC/K,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,aAAa,EAAE,QAAQ;aACxB;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE;YACpE,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SACzF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,KAAK,UAAU,qBAAqB,CAClC,QAAkB,EAClB,MAAc,EACd,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;QAC7F,MAAM,EAAE,oBAAoB,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QAEzE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACxC,QAAQ,EAAE,SAAS,QAAQ,CAAC,OAAO,YAAY,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACrE,aAAa,EAAE,QAAQ;YACvB,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1D,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,aAAa,EAAE,QAAQ;aACxB;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAC5D,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE;YACrE,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;IAChH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/electron-build/agents/deny-pipeline.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * deny-pipeline.ts — Unified Deny-First Pipeline (2026-07-29)
+ *
+ * 将分散在 system 各处的拒绝逻辑统一到一条管道:
+ *   1. deny-list  (Tool pre-filter — pi-sdk.ts _deniedToolNames)
+ *   2. hooks      (HooksEngine.checkToolUse — shell/LLM)
+ *   3. permission (permission-mode.ts — static mode)
+ *   4. judgment   (injectNegativeGuard — 负向判断力)
+ *
+ * 设计: deny-first
+ *   - 任何一层拒绝, 整个工具被阻塞
+ *   - 第一层拒绝后不再检查后续 (fail-fast)
+ *
+ * Claude Code 论文 7 层防御的简化实现:
+ *   第 1 层 = deny-list  (硬拒绝, 最便宜)
+ *   第 2 层 = permission (静态规则)
+ *   第 3 层 = hooks      (可编程策略, 中等成本)
+ *   第 4 层 = judgment   (LLM 评估, 最贵)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DenyPipeline = void 0;
+/**
+ * Unified Deny Pipeline.
+ *
+ * 按顺序注册 checker, 每个 checker 返回 {denied} 表示是否拒绝该工具.
+ * 任何 checker 返回 denied=true 即中断, 不再执行后续.
+ */
+class DenyPipeline {
+    checkers = [];
+    constructor() {
+        // 默认注册: 从 null 开始, 调用方按需 addChecker
+    }
+    /** 添加一个检查器 (按添加顺序执行) */
+    addChecker(checker) {
+        this.checkers.push(checker);
+    }
+    /** 清空所有检查器 (调试/测试用) */
+    clear() {
+        this.checkers = [];
+    }
+    /**
+     * 对工具执行完整 deny 检查.
+     * 返回第一个拒绝结果, 或 {denied: false} (全部通过).
+     */
+    async check(ctx) {
+        for (const checker of this.checkers) {
+            try {
+                const result = await checker(ctx);
+                if (result.denied) {
+                    return result;
+                }
+                // 如果 check 返回了 systemAddition, 累积
+                if (result.systemAddition) {
+                    // 当前 check 通过, 但携带了注入文本
+                }
+            }
+            catch (e) {
+                // checker 异常: 按 deny-first 原则, 异常视为拒绝 (安全侧)
+                return {
+                    denied: true,
+                    reason: `Deny check 异常: ${String(e)}`,
+                    source: `checker:${this.checkers.indexOf(checker)}`,
+                };
+            }
+        }
+        return { denied: false, reason: '', source: '' };
+    }
+    // ============== 工厂方法 ==============
+    /**
+     * 构建 deny-list checker.
+     * 检查工具名是否在 deny set 中.
+     */
+    static denyListChecker(deniedNames) {
+        return (ctx) => ({
+            denied: deniedNames.has(ctx.toolName),
+            reason: deniedNames.has(ctx.toolName)
+                ? `工具 ${ctx.toolName} 在拒绝列表中, 不允许调用`
+                : '',
+            source: 'deny-list',
+        });
+    }
+    /**
+     * 构建 permission-mode checker.
+     * default 模式: 禁用 git 写操作 (commit/push/branch — "不搞乱")
+     * bypassPermissions: 放行所有
+     *
+     * 2026-08-10: shell_exec / write_file / edit_file / delete_file / terminal 移出 default
+     *   禁列表 — 它们已有各自护栏 (shell_exec 命令白名单 / terminal denylist-only /
+     *   write_file checkWritePath), 用户明确"灵活一点, 少围栏, 核心的东西不碰不搞乱就行";
+     *   实测日志 "write_file 被权限拦了" → LLM 只能绕道, 任务无法推进.
+     */
+    static permissionChecker() {
+        const DEFAULT_DENY_TOOLS = new Set([
+            'git_commit', 'git_push', 'git_branch',
+        ]);
+        return (ctx) => {
+            if (ctx.permissionMode === 'bypassPermissions') {
+                return { denied: false, reason: '', source: 'permission' };
+            }
+            if (ctx.permissionMode === 'acceptEdits') {
+                // acceptEdits: 允许写文件, 但禁止 shell 和 git 操作
+                if (ctx.toolName === 'shell_exec' || ctx.toolName === 'git_commit' || ctx.toolName === 'git_push') {
+                    return {
+                        denied: true,
+                        reason: `当前 permission mode 为 acceptEdits, 工具 ${ctx.toolName} 受限. 如需调用请切换到 bypassPermissions.`,
+                        source: 'permission',
+                    };
+                }
+                return { denied: false, reason: '', source: 'permission' };
+            }
+            // default: 危险工具全禁
+            if (DEFAULT_DENY_TOOLS.has(ctx.toolName)) {
+                return {
+                    denied: true,
+                    reason: `当前 permission mode 为 default, 工具 ${ctx.toolName} 不允许调用. 如需调用请切换到 acceptEdits 或 bypassPermissions.`,
+                    source: 'permission',
+                };
+            }
+            return { denied: false, reason: '', source: 'permission' };
+        };
+    }
+}
+exports.DenyPipeline = DenyPipeline;
+//# sourceMappingURL=deny-pipeline.js.map

package/dist/electron-build/agents/deny-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny-pipeline.js","sourceRoot":"","sources":["../../../src/agents/deny-pipeline.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AA+BH;;;;;GAKG;AACH;IACU,QAAQ,GAAkB,EAAE,CAAC;IAErC;QACE,oCAAoC;IACtC,CAAC;IAED,wBAAwB;IACxB,UAAU,CAAC,OAAoB;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,uBAAuB;IACvB,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,GAAgB;QAC1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,kCAAkC;gBAClC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,wBAAwB;gBAC1B,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,4CAA4C;gBAC5C,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,kBAAkB,MAAM,CAAC,CAAC,CAAC,EAAE;oBACrC,MAAM,EAAE,WAAW,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;iBACpD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,qCAAqC;IAErC;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,WAAwB;QAC7C,OAAO,CAAC,GAAgB,EAAE,EAAE,CAAC,CAAC;YAC5B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACnC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,gBAAgB;gBACpC,CAAC,CAAC,EAAE;YACN,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,iBAAiB;QACtB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS;YACzC,YAAY,EAAE,UAAU,EAAE,YAAY;SACvC,CAAC,CAAC;QACH,OAAO,CAAC,GAAgB,EAAE,EAAE;YAC1B,IAAI,GAAG,CAAC,cAAc,KAAK,mBAAmB,EAAE,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,GAAG,CAAC,cAAc,KAAK,aAAa,EAAE,CAAC;gBACzC,yCAAyC;gBACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAClG,OAAO;wBACL,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,wCAAwC,GAAG,CAAC,QAAQ,kCAAkC;wBAC9F,MAAM,EAAE,YAAY;qBACrB,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC7D,CAAC;YACD,kBAAkB;YAClB,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,oCAAoC,GAAG,CAAC,QAAQ,mDAAmD;oBAC3G,MAAM,EAAE,YAAY;iBACrB,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC7D,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/electron-build/agents/economic-policy.js

@@ -0,0 +1,172 @@
+"use strict";
+/**
+ * economic-policy.ts — Policy Engine (2026-08-13, Phase E3)
+ *
+ * Agent 支付授权安全核心 (参考 arXiv:2605.30998 free-riding 防护):
+ *   LLM 只见 Payment Intent, 不见私钥; Policy Engine 是唯一签名入口.
+ *
+ * 规则:
+ *   - amount < per_transaction_limit
+ *   - recipient (payTo) in allowed
+ *   - service in allowed
+ *   - daily budget not exceeded (冻结)
+ *   - 速率限制 (rate limit)
+ *
+ * 预算持久化: ~/.bolloon/economic-policy.json (daily spend 滚动).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalEconomicPolicy = void 0;
+exports.getEconomicPolicy = getEconomicPolicy;
+exports.resetEconomicPolicy = resetEconomicPolicy;
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs/promises"));
+const home = () => process.env.HOME || os.homedir() || '/tmp';
+/** 默认策略 (保守) */
+const DEFAULT_CONFIG = {
+    perTransactionLimit: 1, // 单笔 ≤ $1
+    dailyLimit: 10, // 每日 ≤ $10
+    allowedRecipients: [],
+    allowedServices: [],
+    rateLimitPerMinute: 5,
+};
+class LocalEconomicPolicy {
+    cfg = { ...DEFAULT_CONFIG };
+    file;
+    /** 支付时间戳窗口 (速率限制) */
+    payTimestamps = [];
+    /** 今日花费 */
+    _dailySpent = 0;
+    _dayKey = '';
+    constructor(file = path.join(home(), '.bolloon', 'economic-policy.json')) {
+        this.file = file;
+    }
+    config() { return { ...this.cfg }; }
+    updateConfig(patch) {
+        this.cfg = { ...this.cfg, ...patch };
+    }
+    /** 加载持久化 (daily spend 跨重启) */
+    async load() {
+        try {
+            const raw = JSON.parse(await fs.readFile(this.file, 'utf-8'));
+            if (raw.dailySpent !== undefined)
+                this._dailySpent = Number(raw.dailySpent) || 0;
+            if (raw.dayKey)
+                this._dayKey = raw.dayKey;
+            if (raw.config)
+                this.cfg = { ...DEFAULT_CONFIG, ...raw.config };
+            await this.resetIfNewDay();
+        }
+        catch { /* 无持久化, 用默认 */ }
+    }
+    async persist() {
+        try {
+            await fs.mkdir(path.dirname(this.file), { recursive: true });
+            await fs.writeFile(this.file, JSON.stringify({
+                dailySpent: this._dailySpent,
+                dayKey: this._dayKey,
+                config: this.cfg,
+            }, null, 2), 'utf-8');
+        }
+        catch { /* 持久化失败静默 */ }
+    }
+    async dailySpent() {
+        await this.resetIfNewDay();
+        return this._dailySpent;
+    }
+    async resetIfNewDay() {
+        const today = new Date().toISOString().slice(0, 10);
+        if (this._dayKey !== today) {
+            this._dayKey = today;
+            this._dailySpent = 0;
+            this.payTimestamps = [];
+            await this.persist();
+        }
+    }
+    async check(intent) {
+        await this.resetIfNewDay();
+        const amount = Number(intent.amount) || 0;
+        const payTo = String(intent.payTo || '').toLowerCase();
+        const service = String(intent.service || '').toLowerCase();
+        // 1. 单笔上限
+        if (amount > this.cfg.perTransactionLimit) {
+            return { allowed: false, reason: `单笔超限: ${amount} > ${this.cfg.perTransactionLimit}`, dailySpent: this._dailySpent };
+        }
+        // 2. 收款方白名单
+        if (this.cfg.allowedRecipients.length > 0 &&
+            !this.cfg.allowedRecipients.some((r) => r.toLowerCase() === payTo)) {
+            return { allowed: false, reason: `收款方不在白名单: ${payTo}`, dailySpent: this._dailySpent };
+        }
+        // 3. 服务白名单
+        if (service && this.cfg.allowedServices.length > 0 &&
+            !this.cfg.allowedServices.some((s) => s.toLowerCase() === service)) {
+            return { allowed: false, reason: `服务不在白名单: ${service}`, dailySpent: this._dailySpent };
+        }
+        // 4. 每日预算
+        if (this._dailySpent + amount > this.cfg.dailyLimit) {
+            return { allowed: false, reason: `日预算超限: ${this._dailySpent} + ${amount} > ${this.cfg.dailyLimit}`, dailySpent: this._dailySpent };
+        }
+        // 5. 速率限制
+        const now = Date.now();
+        this.payTimestamps = this.payTimestamps.filter((t) => now - t < 60_000);
+        if (this.payTimestamps.length >= this.cfg.rateLimitPerMinute) {
+            return { allowed: false, reason: `速率超限 (${this.cfg.rateLimitPerMinute}/min)`, dailySpent: this._dailySpent };
+        }
+        return { allowed: true, dailySpent: this._dailySpent };
+    }
+    async recordSpend(amount) {
+        await this.resetIfNewDay();
+        this._dailySpent += Number(amount) || 0;
+        this.payTimestamps.push(Date.now());
+        await this.persist();
+    }
+}
+exports.LocalEconomicPolicy = LocalEconomicPolicy;
+let _instance = null;
+/** 获取 Policy Engine 单例 */
+function getEconomicPolicy() {
+    if (!_instance) {
+        const p = new LocalEconomicPolicy();
+        void p.load();
+        _instance = p;
+    }
+    return _instance;
+}
+/** 重置单例 (测试用) */
+function resetEconomicPolicy() {
+    _instance = null;
+}
+//# sourceMappingURL=economic-policy.js.map

package/dist/electron-build/agents/economic-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"economic-policy.js","sourceRoot":"","sources":["../../../src/agents/economic-policy.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,MAAY,EAAE,wCAAoB;AAElC,MAAM,IAAI,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC;AAoDtE,gBAAgB;AAChB,MAAM,cAAc,GAAiB;IACnC,mBAAmB,EAAE,CAAC,EAAQ,UAAU;IACxC,UAAU,EAAE,EAAE,EAAgB,WAAW;IACzC,iBAAiB,EAAE,EAAE;IACrB,eAAe,EAAE,EAAE;IACnB,kBAAkB,EAAE,CAAC;CACtB,CAAC;AAEF;IACU,GAAG,GAAiB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC1C,IAAI,CAAS;IAErB,qBAAqB;IACb,aAAa,GAAa,EAAE,CAAC;IACrC,WAAW;IACH,WAAW,GAAG,CAAC,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC;IAErB,YAAY,IAAI,GAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,sBAAsB,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,KAAmB,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAElD,YAAY,CAAC,KAA4B;QACvC,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACvC,CAAC;IAED,8BAA8B;IAC9B,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9D,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACjF,IAAI,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YAChE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3C,UAAU,EAAE,IAAI,CAAC,WAAW;gBAC5B,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,MAAM,EAAE,IAAI,CAAC,GAAG;aACjB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAqB;QAC/B,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3D,UAAU;QACV,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACvH,CAAC;QACD,YAAY;QACZ,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;YACrC,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACxF,CAAC;QACD,WAAW;QACX,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YAC9C,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACzF,CAAC;QACD,UAAU;QACV,IAAI,IAAI,CAAC,WAAW,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,WAAW,MAAM,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACrI,CAAC;QACD,UAAU;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,GAAG,CAAC,kBAAkB,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/G,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;CACF;;AAED,IAAI,SAAS,GAA0B,IAAI,CAAC;AAE5C,0BAA0B;AAC1B;IACE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACpC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACd,SAAS,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iBAAiB;AACjB;IACE,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC"}