@bolloon/bolloon-agent 0.4.28 → 0.4.30

package/dist/electron-build/agents/contacts/types.js

@@ -0,0 +1,166 @@
+"use strict";
+/**
+ * contacts/types.ts — 社交身份模型 (2026-09-19, Phase 0/1)
+ *
+ * 核心定义 (leo 冻结):
+ *   Bolloon 的社交身份 = **DID 主身份 + 已验证联系方式 + 联系能力 Skill + 调用权限 + 可恢复任务证据**,
+ *   不是"公开手机号/邮箱"。外部只看到四类状态: 已验证 / 可联系 / 不可联系 / 需要重新授权。
+ *
+ * 硬规则 (贯穿本目录所有文件):
+ *   1. 明文手机号/邮箱**不进**普通 Run step、不进 prompt、不进 Git; 只有 displayValue(脱敏) 可以。
+ *   2. 密钥 (API key / OAuth refresh / SMTP 密码) 只存 Secret Store, 记录里只留 secretRef。
+ *   3. Goal/Run 只保存 contactId / provider / 动作 / 状态 / 证据引用。
+ *   4. 未验证的联系方式**任何情况下**不能被用于真实发送。
+ *   5. 撤销后历史证据保留, 但后续调用一律拒绝。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.newEventId = exports.newThreadToken = exports.newRequestId = exports.newIdentityId = exports.newContactId = exports.DEFAULT_LIMITS = void 0;
+exports.normalizePhone = normalizePhone;
+exports.normalizeEmail = normalizeEmail;
+exports.maskPhone = maskPhone;
+exports.maskEmail = maskEmail;
+exports.displayFor = displayFor;
+exports.externalStatusOf = externalStatusOf;
+exports.scanSensitive = scanSensitive;
+exports.scanForbidden = scanForbidden;
+exports.redactForEvidence = redactForEvidence;
+exports.DEFAULT_LIMITS = { dailyMax: 5, perTaskMax: 3, requireApprovalEachTime: false };
+// ── 规范化 ──────────────────────────────────────────────────────────────────
+const CC = {
+    CN: '86', US: '1', CA: '1', JP: '81', GB: '44', DE: '49', FR: '33', IN: '91', AU: '61', SG: '65', KR: '82', RU: '7',
+};
+function normalizePhone(input, defaultRegion = '') {
+    const raw = String(input || '').trim();
+    if (!raw)
+        return { ok: false, error: 'empty' };
+    const plus = raw.startsWith('+');
+    const digits = raw.replace(/[^\d]/g, '');
+    if (digits.length < 4)
+        return { ok: false, error: 'too_short' };
+    let e164;
+    if (plus) {
+        e164 = `+${digits}`;
+    }
+    else {
+        const cc = CC[(defaultRegion || '').toUpperCase()];
+        if (!cc)
+            return { ok: false, error: 'region_required' };
+        const local = digits.replace(/^0+/, '');
+        e164 = `+${cc}${local}`;
+    }
+    const numDigits = e164.length - 1;
+    if (numDigits < 8 || numDigits > 15)
+        return { ok: false, error: 'invalid_length' };
+    return { ok: true, value: e164 };
+}
+function normalizeEmail(input) {
+    const raw = String(input || '').trim().toLowerCase();
+    if (!raw)
+        return { ok: false, error: 'empty' };
+    if (/\s/.test(raw))
+        return { ok: false, error: 'contains_space' };
+    const m = raw.match(/^([^@]+)@([^@]+\.[^@.]+)$/);
+    if (!m)
+        return { ok: false, error: 'invalid_format' };
+    if (m[1].length > 64)
+        return { ok: false, error: 'local_part_too_long' };
+    return { ok: true, value: `${m[1]}@${m[2]}` };
+}
+/** 脱敏展示值 —— 唯一允许出现在 prompt / evidence / Web UI 的形态 */
+function maskPhone(e164) {
+    const digits = e164.replace(/[^\d]/g, '');
+    if (digits.length <= 6)
+        return `+${'*'.repeat(Math.max(0, digits.length - 2))}${digits.slice(-2)}`;
+    return `+${digits.slice(0, 2)}******${digits.slice(-4)}`;
+}
+function maskEmail(email) {
+    const [local, domain] = String(email).split('@');
+    if (!domain)
+        return '***';
+    const head = local.slice(0, 1);
+    return `${head}${'*'.repeat(Math.max(1, Math.min(6, local.length - 1)))}@${domain}`;
+}
+function displayFor(kind, normalized) {
+    return kind === 'phone' ? maskPhone(normalized) : maskEmail(normalized);
+}
+/** 内部状态 → 外部四类状态 (Phase 0: 外部只看到这四个) */
+function externalStatusOf(c) {
+    if (c.revokedAt || c.verificationStatus === 'revoked')
+        return 'reauth_required';
+    if (c.verificationStatus === 'blocked' || c.verificationStatus === 'expired')
+        return 'not_contactable';
+    if (c.verificationStatus === 'verified') {
+        return c.capabilities.includes('send') && c.policy !== 'draft_only' ? 'contactable' : 'verified';
+    }
+    return 'not_contactable';
+}
+function scanSensitive(text) {
+    const out = [];
+    const s = String(text || '');
+    const push = (kind, hint) => {
+        if (!out.some((f) => f.kind === kind && f.hint === hint))
+            out.push({ kind, hint });
+    };
+    // 卡号: 13-19 位连续数字 (允许空格/横线分隔)
+    for (const m of s.matchAll(/\b(?:\d[ -]?){13,19}\b/g)) {
+        const digits = m[0].replace(/[^\d]/g, '');
+        if (digits.length >= 13 && digits.length <= 19)
+            push('card_number', `${digits.slice(0, 4)}…${digits.slice(-4)}`);
+    }
+    // 中国大陆身份证: 17 位 + 数字/X
+    for (const m of s.matchAll(/\b\d{17}[\dXx]\b/g))
+        push('id_number_cn', `${m[0].slice(0, 4)}…${m[0].slice(-2)}`);
+    // API key / token
+    for (const m of s.matchAll(/\b(sk-[A-Za-z0-9]{12,}|AKIA[0-9A-Z]{12,}|ghp_[A-Za-z0-9]{20,}|npm_[A-Za-z0-9]{20,})\b/g)) {
+        push('api_key', `${m[0].slice(0, 6)}…`);
+    }
+    if (/(密码|password|passwd|pwd)\s*[:：=]\s*\S+/i.test(s))
+        push('password', '疑似密码明文');
+    // 一次性验证码: 只在出现"验证码/otp/code"上下文时才算
+    if (/(验证码|动态码|one[-\s]?time|otp)\D{0,8}\d{4,8}/i.test(s))
+        push('otp_code', '疑似一次性验证码');
+    // 银行账号: 10-17 位且上下文含"账号/account"
+    if (/(账号|账户|account|iban)\D{0,6}\d{10,17}/i.test(s))
+        push('bank_account', '疑似银行账号');
+    return out;
+}
+/**
+ * 永不由联系方式授权放行的内容类别 (2026-09-19, Phase 6):
+ *   凭证 / 资金指令 / 合同承诺 —— 即使 full_contact_access 也拒绝, 它们属于另一类高风险能力。
+ */
+function scanForbidden(text) {
+    const s = String(text || '');
+    const out = new Set();
+    if (/\b(sk-[A-Za-z0-9]{12,}|AKIA[0-9A-Z]{12,}|ghp_[A-Za-z0-9]{20,}|npm_[A-Za-z0-9]{20,})\b/.test(s))
+        out.add('api_key');
+    if (/(密码|password|passwd|pwd)\s*[:：=]\s*\S+/i.test(s))
+        out.add('password');
+    if (/(账号|账户|account|iban)\D{0,6}\d{10,17}/i.test(s))
+        out.add('bank_account');
+    if (/(转账|打款|汇款|付款指令|支付授权|remit|wire transfer|pay\s+to|send\s+funds)/i.test(s))
+        out.add('payment_instruction');
+    if (/(签署合同|签订合同|签合同|同意采购|承诺下单|sign\s+(the\s+)?(contract|agreement)|binding\s+commitment)/i.test(s))
+        out.add('contract_commitment');
+    return [...out];
+}
+/** 发送前把正文里明显的口令类内容打码 (预览与证据都走这个) */
+function redactForEvidence(text) {
+    let s = String(text || '');
+    s = s.replace(/\b\d[ -]?(?:\d[ -]?){12,18}\d\b/g, (m) => `${m.replace(/[^\d]/g, '').slice(0, 4)}…<卡号已打码>`);
+    s = s.replace(/\b(sk-|AKIA|ghp_|npm_)[A-Za-z0-9_-]{8,}\b/g, '<密钥已打码>');
+    s = s.replace(/\b\d{17}[\dXx]\b/g, '<身份证已打码>');
+    return s;
+}
+// ── id 生成 ─────────────────────────────────────────────────────────────────
+const rid = (n = 8) => Math.random().toString(36).slice(2, 2 + n);
+const newContactId = (kind) => `ct-${kind}-${Date.now().toString(36)}-${rid(4)}`;
+exports.newContactId = newContactId;
+const newIdentityId = () => `sid-${Date.now().toString(36)}-${rid(4)}`;
+exports.newIdentityId = newIdentityId;
+const newRequestId = () => `creq-${Date.now().toString(36)}-${rid(6)}`;
+exports.newRequestId = newRequestId;
+const newThreadToken = () => `thr-${rid(20)}`;
+exports.newThreadToken = newThreadToken;
+const newEventId = () => `cev-${Date.now().toString(36)}-${rid(6)}`;
+exports.newEventId = newEventId;
+//# sourceMappingURL=types.js.map

package/dist/electron-build/agents/contacts/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/agents/contacts/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;AAkCU,QAAA,cAAc,GAAkB,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;AAmI5G,4EAA4E;AAE5E,MAAM,EAAE,GAA2B;IACjC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG;CACpH,CAAC;AAEF,wBAA+B,KAAa,EAAE,aAAa,GAAG,EAAE;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChE,IAAI,IAAY,CAAC;IACjB,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,wBAA+B,KAAa;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC/C,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAClE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,sDAAsD;AACtD,mBAA0B,IAAY;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,mBAA0B,KAAa;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;AACtF,CAAC;AAED,oBAA2B,IAAiB,EAAE,UAAkB;IAC9D,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED,wCAAwC;AACxC,0BAAiC,CAAwF;IACvH,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IAChF,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACvG,IAAI,CAAC,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;QACxC,OAAO,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;IACnG,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AASD,uBAA8B,IAAY;IACxC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,IAA8B,EAAE,IAAY,EAAE,EAAE;QAC5D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC;IACF,8BAA8B;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;YAAE,IAAI,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,uBAAuB;IACvB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/G,kBAAkB;IAClB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,wFAAwF,CAAC,EAAE,CAAC;QACrH,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClF,mCAAmC;IACnC,IAAI,4CAA4C,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACvF,iCAAiC;IACjC,IAAI,uCAAuC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,uBAA8B,IAAY;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,uFAAuF,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxH,IAAI,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,uCAAuC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7E,IAAI,iEAAiE,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC9G,IAAI,sFAAsF,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,oCAAoC;AACpC,2BAAkC,IAAY;IAC5C,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3B,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3G,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,4CAA4C,EAAE,SAAS,CAAC,CAAC;IACvE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6EAA6E;AAE7E,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAE3D,MAAM,YAAY,GAAG,CAAC,IAAiB,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAAxF,QAAA,YAAY,GAAZ,YAAY,CAA4E;AAC9F,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAAjE,QAAA,aAAa,GAAb,aAAa,CAAoD;AACvE,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAAjE,QAAA,YAAY,GAAZ,YAAY,CAAqD;AACvE,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;AAAxC,QAAA,cAAc,GAAd,cAAc,CAA0B;AAC9C,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAA9D,QAAA,UAAU,GAAV,UAAU,CAAoD"}

package/dist/electron-build/agents/decision-store.js

@@ -0,0 +1,292 @@
+"use strict";
+/**
+ * decision-store.ts — 决策协议 (Context OS §7, 2026-08-03)
+ *
+ * Context OS 原则: 重要决策不允许只写结论, 至少要留下可回滚的推理链.
+ * 9 要素:
+ *   1. 问题到底是什么            → problem
+ *   2. 有哪些选项, 包括"不做"     → options[].label (includeDoNothing)
+ *   3. 每个选项的时间/金钱/精力/机会成本 → options[].costs
+ *   4. 每个选项的短期/长期收益和战略价值 → options[].benefits
+ *   5. 风险、概率、影响、是否可恢复       → options[].risks
+ *   6. 当前的信息缺口             → infoGaps
+ *   7. 推荐方案                  → recommendation
+ *   8. 为什么是现在               → timing
+ *   9. 失败时的触发条件和回滚动作   → rollback
+ *
+ * 防止三类错误: 把一时情绪当判断 / 因一条新信息推翻整个项目 / 把不能回滚的重投入当"勇敢".
+ * 原则: 新信息只修改它真正证伪的那个假设; 其他部分默认不动.
+ *
+ * 设计 (减法, 同 plan-store):
+ *   - 不建数据库. 落盘 = ~/.bolloon/decisions/<decisionId>.json
+ *   - 工具入口在 pi-sdk-tools.ts 注册, 复用现有 LLM 调度.
+ *   - 任何 IO 失败静默返回 error 对象, 不阻塞主对话.
+ *   - 决策确认 (decideDecision) 后自动 reflect 到 judgeness:
+ *     HumanJudgment (storeHumanJudgment, source=trajectory) + JudgenessDescription
+ *     (reflectAfterJudgment, openState=locked → Context OS 阶段0 临时价值点).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDecisionsDir = getDecisionsDir;
+exports.getDecisionPath = getDecisionPath;
+exports.sanitizeDecisionId = sanitizeDecisionId;
+exports.createDecision = createDecision;
+exports.loadDecision = loadDecision;
+exports.updateDecisionStatus = updateDecisionStatus;
+exports.listDecisions = listDecisions;
+exports.decisionToContext = decisionToContext;
+exports.reflectDecisionToJudgeness = reflectDecisionToJudgeness;
+const fs = __importStar(require("fs/promises"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+// ============================================================
+// 落盘路径
+// ============================================================
+function getDecisionsDir(home = os.homedir()) {
+    return path.join(home, '.bolloon', 'decisions');
+}
+function getDecisionPath(decisionId, home = os.homedir()) {
+    return path.join(getDecisionsDir(home), `${decisionId.replace(/[^a-zA-Z0-9_-]/g, '_')}.json`);
+}
+function sanitizeDecisionId(id) {
+    return id.replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 64);
+}
+async function createDecision(input, home) {
+    const problem = String(input.problem || '').trim();
+    if (!problem)
+        return { ok: false, error: 'problem 必填 (问题到底是什么)' };
+    const options = Array.isArray(input.options)
+        ? input.options
+            .map((o) => ({
+            label: String(o.label || '').trim(),
+            includeDoNothing: !!o.includeDoNothing,
+            costs: String(o.costs || ''),
+            benefits: String(o.benefits || ''),
+            risks: String(o.risks || ''),
+        }))
+            .filter((o) => o.label)
+        : [];
+    if (options.length === 0)
+        return { ok: false, error: 'options 至少 1 个选项 (含"不做")' };
+    const now = new Date().toISOString();
+    const decisionId = `dec_${Date.now()}_${crypto.randomBytes(3).toString('hex')}`;
+    const decision = {
+        decisionId,
+        problem,
+        options,
+        infoGaps: String(input.infoGaps || ''),
+        recommendation: String(input.recommendation || ''),
+        timing: String(input.timing || ''),
+        rollback: String(input.rollback || ''),
+        context: {
+            domain: String(input.domain || '通用'),
+            stakes: input.stakes || 'medium',
+            by: input.by || 'agent',
+            originChannel: String(input.originChannel || ''),
+        },
+        status: 'draft',
+        createdAt: now,
+        updatedAt: now,
+    };
+    try {
+        const dir = getDecisionsDir(home);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(getDecisionPath(decisionId, home), JSON.stringify(decision, null, 2), 'utf-8');
+        return { ok: true, decision };
+    }
+    catch (e) {
+        return { ok: false, error: `写入失败: ${e?.message || String(e)}` };
+    }
+}
+async function loadDecision(decisionId, home) {
+    try {
+        const raw = await fs.readFile(getDecisionPath(decisionId, home), 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+async function saveDecision(decision, home) {
+    decision.updatedAt = new Date().toISOString();
+    await fs.writeFile(getDecisionPath(decision.decisionId, home), JSON.stringify(decision, null, 2), 'utf-8');
+}
+async function updateDecisionStatus(decisionId, input, opts = {}) {
+    const decision = await loadDecision(decisionId, opts.home);
+    if (!decision)
+        return { ok: false, error: `decision '${decisionId}' 不存在` };
+    const now = new Date().toISOString();
+    if (input.decide) {
+        if (input.recommendation && input.recommendation.trim()) {
+            decision.recommendation = String(input.recommendation).trim();
+        }
+        if (!decision.recommendation)
+            return { ok: false, error: 'recommendation 必填 (推荐方案)' };
+        decision.status = 'decided';
+        decision.decidedAt = now;
+        // 决策确认 → 自动 reflect 到 judgeness (Context OS 阶段0 入账)
+        const refl = await reflectDecisionToJudgeness(decision, opts.byAgentId);
+        if (!refl.ok) {
+            return { ok: false, error: `决策确认失败 (judgeness 入库): ${refl.error}` };
+        }
+        decision.reflection = refl.reflection;
+    }
+    else if (input.implemented) {
+        if (decision.status !== 'decided' && decision.status !== 'implemented') {
+            return { ok: false, error: '只能把 decided 的决策标记为 implemented' };
+        }
+        decision.status = 'implemented';
+    }
+    else if (input.rollback || input.abandon) {
+        decision.status = input.rollback ? 'rolled-back' : 'abandoned';
+        // 回滚/放弃 → 教训入库 (reject 语义, 防重复踩坑)
+        const reason = String(input.reason || '');
+        if (reason && input.rollback) {
+            await reflectRollbackLesson(decision, reason, opts.byAgentId).catch(() => { });
+        }
+    }
+    else {
+        return { ok: false, error: '必须指定 decide / implemented / rollback / abandon 之一' };
+    }
+    await saveDecision(decision, opts.home);
+    return { ok: true, decision };
+}
+async function listDecisions(status, home) {
+    try {
+        const dir = getDecisionsDir(home);
+        const files = await fs.readdir(dir);
+        const out = [];
+        for (const f of files) {
+            if (!f.endsWith('.json'))
+                continue;
+            try {
+                const raw = await fs.readFile(path.join(dir, f), 'utf-8');
+                const d = JSON.parse(raw);
+                if (status && d.status !== status)
+                    continue;
+                out.push(d);
+            }
+            catch { /* 单文件损坏跳过 */ }
+        }
+        out.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+/** 决策摘要 → 上下文注入 (9 要素完整可追溯, 上下文只给精简版) */
+function decisionToContext(d) {
+    const lines = [`📌 ${d.problem} [${d.status}] (id=${d.decisionId})`];
+    for (const o of d.options) {
+        const tag = o.includeDoNothing ? ' [不做]' : '';
+        lines.push(`  - 选项${tag}: ${o.label}`);
+    }
+    if (d.recommendation)
+        lines.push(`  推荐: ${d.recommendation}`);
+    if (d.infoGaps)
+        lines.push(`  信息缺口: ${d.infoGaps}`);
+    if (d.rollback)
+        lines.push(`  回滚条件: ${d.rollback}`);
+    if (d.reflection)
+        lines.push(`  ✅ 已入库 judgeness: hv=${d.reflection.hvId}${d.reflection.jdId ? ` jd=${d.reflection.jdId}` : ''}`);
+    return lines.join('\n');
+}
+/** 决策确认后入库: HumanJudgment (source=trajectory) + reflectAfterJudgment (openState=locked) */
+async function reflectDecisionToJudgeness(decision, byAgentId) {
+    try {
+        const { storeHumanJudgment } = await Promise.resolve().then(() => __importStar(require('../pi-ecosystem-judgment/human-value-store.js')));
+        const { reflectAfterJudgment } = await Promise.resolve().then(() => __importStar(require('../judgeness/reflect.js')));
+        const decisionText = `${decision.recommendation} (问题: ${decision.problem})`;
+        const judgment = await storeHumanJudgment({
+            decision: decisionText.slice(0, 300),
+            decision_type: 'approve',
+            reasons: [
+                `选项: ${decision.options.map((o) => o.label).join(' / ')}`,
+                `风险: ${decision.options.map((o) => o.risks || '无').join('; ')}`,
+                `回滚: ${decision.rollback || '无'}`,
+            ].filter(Boolean),
+            values_derived: [],
+            context: {
+                domain: decision.context.domain,
+                complexity: decision.context.stakes === 'critical' ? 'profound' : decision.context.stakes === 'high' ? 'complex' : decision.context.stakes === 'medium' ? 'moderate' : 'simple',
+                stakes: decision.context.stakes,
+                time_pressure: 'medium',
+            },
+            outcome: { approved: true },
+            metadata: { source: 'trajectory', confidence: 0.8, revisable: true },
+            status: 'active',
+            appliesTo: [],
+        });
+        const jd = await reflectAfterJudgment(judgment, 'agent', byAgentId).catch(() => null);
+        return {
+            ok: true,
+            reflection: { hvId: judgment.id, jdId: jd?.descriptionId, at: new Date().toISOString() },
+        };
+    }
+    catch (e) {
+        return { ok: false, error: e?.message || String(e) };
+    }
+}
+/** 回滚教训入库: HumanJudgment (reject 语义) — Context OS "失败时的触发条件和回滚动作" */
+async function reflectRollbackLesson(decision, reason, byAgentId) {
+    try {
+        const { storeHumanJudgment } = await Promise.resolve().then(() => __importStar(require('../pi-ecosystem-judgment/human-value-store.js')));
+        const { reflectAfterJudgment } = await Promise.resolve().then(() => __importStar(require('../judgeness/reflect.js')));
+        const judgment = await storeHumanJudgment({
+            decision: `回滚决策: ${decision.problem} — 失败原因: ${reason.slice(0, 200)}`,
+            decision_type: 'reject',
+            reasons: [decision.rollback || '', reason].filter(Boolean),
+            values_derived: [],
+            context: {
+                domain: decision.context.domain,
+                complexity: 'moderate',
+                stakes: decision.context.stakes,
+                time_pressure: 'medium',
+            },
+            outcome: { approved: false, feedback: reason.slice(0, 200) },
+            metadata: { source: 'trajectory', confidence: 0.7, revisable: false },
+            status: 'active',
+            appliesTo: [],
+        });
+        const jd = await reflectAfterJudgment(judgment, 'agent', byAgentId).catch(() => null);
+        return { ok: true, reflection: { hvId: judgment.id, jdId: jd?.descriptionId, at: new Date().toISOString() } };
+    }
+    catch (e) {
+        return { ok: false, error: e?.message || String(e) };
+    }
+}
+//# sourceMappingURL=decision-store.js.map

package/dist/electron-build/agents/decision-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-store.js","sourceRoot":"","sources":["../../../src/agents/decision-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,wCAAoB;AAClC,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,MAAY,MAAM,mCAAe;AAuDjC,+DAA+D;AAC/D,OAAO;AACP,+DAA+D;AAE/D,yBAAgC,IAAI,GAAW,EAAE,CAAC,OAAO,EAAE;IACzD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,yBAAgC,UAAkB,EAAE,IAAI,GAAW,EAAE,CAAC,OAAO,EAAE;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AAChG,CAAC;AAED,4BAAmC,EAAU;IAC3C,OAAO,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAyBM,KAAK,yBACV,KAA0B,EAC1B,IAAa;IAEb,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1C,CAAC,CAAC,KAAK,CAAC,OAAO;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACnC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB;YACtC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;SAC7B,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3B,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAElF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAa;QACzB,UAAU;QACV,OAAO;QACP,OAAO;QACP,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;QAClD,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ;YAChC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;SACjD;QACD,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAEM,KAAK,uBAAuB,UAAkB,EAAE,IAAa;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,IAAa;IAC3D,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7G,CAAC;AAeM,KAAK,+BACV,UAAkB,EAClB,KAAgC,EAChC,IAAI,GAA0C,EAAE;IAEhD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,UAAU,OAAO,EAAE,CAAC;IAE3E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;YACxD,QAAQ,CAAC,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,cAAc;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QACtF,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAC5B,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;QACzB,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACtE,CAAC;QACD,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACxC,CAAC;SAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QAChE,CAAC;QACD,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAC;IAClC,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3C,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/D,kCAAkC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAY,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAEM,KAAK,wBAAwB,MAAuB,EAAE,IAAa;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;gBACtC,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;oBAAE,SAAS;gBAC5C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QAC3B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yCAAyC;AACzC,2BAAkC,CAAW;IAC3C,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjI,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAYD,2FAA2F;AACpF,KAAK,qCACV,QAAkB,EAClB,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;QAC7F,MAAM,EAAE,oBAAoB,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,cAAc,SAAS,QAAQ,CAAC,OAAO,GAAG,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACxC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACpC,aAAa,EAAE,SAAS;YACxB,OAAO,EAAE;gBACP,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACzD,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/D,OAAO,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE;aAClC,CAAC,MAAM,CAAC,OAAO,CAAC;YACjB,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;gBAC/K,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,aAAa,EAAE,QAAQ;aACxB;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE;YACpE,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SACzF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,KAAK,UAAU,qBAAqB,CAClC,QAAkB,EAClB,MAAc,EACd,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;QAC7F,MAAM,EAAE,oBAAoB,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QAEzE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YACxC,QAAQ,EAAE,SAAS,QAAQ,CAAC,OAAO,YAAY,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACrE,aAAa,EAAE,QAAQ;YACvB,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1D,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBAC/B,aAAa,EAAE,QAAQ;aACxB;YACD,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAC5D,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE;YACrE,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;IAChH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/electron-build/agents/deny-pipeline.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * deny-pipeline.ts — Unified Deny-First Pipeline (2026-07-29)
+ *
+ * 将分散在 system 各处的拒绝逻辑统一到一条管道:
+ *   1. deny-list  (Tool pre-filter — pi-sdk.ts _deniedToolNames)
+ *   2. hooks      (HooksEngine.checkToolUse — shell/LLM)
+ *   3. permission (permission-mode.ts — static mode)
+ *   4. judgment   (injectNegativeGuard — 负向判断力)
+ *
+ * 设计: deny-first
+ *   - 任何一层拒绝, 整个工具被阻塞
+ *   - 第一层拒绝后不再检查后续 (fail-fast)
+ *
+ * Claude Code 论文 7 层防御的简化实现:
+ *   第 1 层 = deny-list  (硬拒绝, 最便宜)
+ *   第 2 层 = permission (静态规则)
+ *   第 3 层 = hooks      (可编程策略, 中等成本)
+ *   第 4 层 = judgment   (LLM 评估, 最贵)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DenyPipeline = void 0;
+/**
+ * Unified Deny Pipeline.
+ *
+ * 按顺序注册 checker, 每个 checker 返回 {denied} 表示是否拒绝该工具.
+ * 任何 checker 返回 denied=true 即中断, 不再执行后续.
+ */
+class DenyPipeline {
+    checkers = [];
+    constructor() {
+        // 默认注册: 从 null 开始, 调用方按需 addChecker
+    }
+    /** 添加一个检查器 (按添加顺序执行) */
+    addChecker(checker) {
+        this.checkers.push(checker);
+    }
+    /** 清空所有检查器 (调试/测试用) */
+    clear() {
+        this.checkers = [];
+    }
+    /**
+     * 对工具执行完整 deny 检查.
+     * 返回第一个拒绝结果, 或 {denied: false} (全部通过).
+     */
+    async check(ctx) {
+        for (const checker of this.checkers) {
+            try {
+                const result = await checker(ctx);
+                if (result.denied) {
+                    return result;
+                }
+                // 如果 check 返回了 systemAddition, 累积
+                if (result.systemAddition) {
+                    // 当前 check 通过, 但携带了注入文本
+                }
+            }
+            catch (e) {
+                // checker 异常: 按 deny-first 原则, 异常视为拒绝 (安全侧)
+                return {
+                    denied: true,
+                    reason: `Deny check 异常: ${String(e)}`,
+                    source: `checker:${this.checkers.indexOf(checker)}`,
+                };
+            }
+        }
+        return { denied: false, reason: '', source: '' };
+    }
+    // ============== 工厂方法 ==============
+    /**
+     * 构建 deny-list checker.
+     * 检查工具名是否在 deny set 中.
+     */
+    static denyListChecker(deniedNames) {
+        return (ctx) => ({
+            denied: deniedNames.has(ctx.toolName),
+            reason: deniedNames.has(ctx.toolName)
+                ? `工具 ${ctx.toolName} 在拒绝列表中, 不允许调用`
+                : '',
+            source: 'deny-list',
+        });
+    }
+    /**
+     * 构建 permission-mode checker.
+     * default 模式: 禁用 git 写操作 (commit/push/branch — "不搞乱")
+     * bypassPermissions: 放行所有
+     *
+     * 2026-08-10: shell_exec / write_file / edit_file / delete_file / terminal 移出 default
+     *   禁列表 — 它们已有各自护栏 (shell_exec 命令白名单 / terminal denylist-only /
+     *   write_file checkWritePath), 用户明确"灵活一点, 少围栏, 核心的东西不碰不搞乱就行";
+     *   实测日志 "write_file 被权限拦了" → LLM 只能绕道, 任务无法推进.
+     */
+    static permissionChecker() {
+        const DEFAULT_DENY_TOOLS = new Set([
+            'git_commit', 'git_push', 'git_branch',
+        ]);
+        return (ctx) => {
+            if (ctx.permissionMode === 'bypassPermissions') {
+                return { denied: false, reason: '', source: 'permission' };
+            }
+            if (ctx.permissionMode === 'acceptEdits') {
+                // acceptEdits: 允许写文件, 但禁止 shell 和 git 操作
+                if (ctx.toolName === 'shell_exec' || ctx.toolName === 'git_commit' || ctx.toolName === 'git_push') {
+                    return {
+                        denied: true,
+                        reason: `当前 permission mode 为 acceptEdits, 工具 ${ctx.toolName} 受限. 如需调用请切换到 bypassPermissions.`,
+                        source: 'permission',
+                    };
+                }
+                return { denied: false, reason: '', source: 'permission' };
+            }
+            // default: 危险工具全禁
+            if (DEFAULT_DENY_TOOLS.has(ctx.toolName)) {
+                return {
+                    denied: true,
+                    reason: `当前 permission mode 为 default, 工具 ${ctx.toolName} 不允许调用. 如需调用请切换到 acceptEdits 或 bypassPermissions.`,
+                    source: 'permission',
+                };
+            }
+            return { denied: false, reason: '', source: 'permission' };
+        };
+    }
+}
+exports.DenyPipeline = DenyPipeline;
+//# sourceMappingURL=deny-pipeline.js.map

package/dist/electron-build/agents/deny-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deny-pipeline.js","sourceRoot":"","sources":["../../../src/agents/deny-pipeline.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AA+BH;;;;;GAKG;AACH;IACU,QAAQ,GAAkB,EAAE,CAAC;IAErC;QACE,oCAAoC;IACtC,CAAC;IAED,wBAAwB;IACxB,UAAU,CAAC,OAAoB;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,uBAAuB;IACvB,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,GAAgB;QAC1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,kCAAkC;gBAClC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,wBAAwB;gBAC1B,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,4CAA4C;gBAC5C,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,kBAAkB,MAAM,CAAC,CAAC,CAAC,EAAE;oBACrC,MAAM,EAAE,WAAW,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;iBACpD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,qCAAqC;IAErC;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,WAAwB;QAC7C,OAAO,CAAC,GAAgB,EAAE,EAAE,CAAC,CAAC;YAC5B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACnC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,gBAAgB;gBACpC,CAAC,CAAC,EAAE;YACN,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,iBAAiB;QACtB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS;YACzC,YAAY,EAAE,UAAU,EAAE,YAAY;SACvC,CAAC,CAAC;QACH,OAAO,CAAC,GAAgB,EAAE,EAAE;YAC1B,IAAI,GAAG,CAAC,cAAc,KAAK,mBAAmB,EAAE,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,GAAG,CAAC,cAAc,KAAK,aAAa,EAAE,CAAC;gBACzC,yCAAyC;gBACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAClG,OAAO;wBACL,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,wCAAwC,GAAG,CAAC,QAAQ,kCAAkC;wBAC9F,MAAM,EAAE,YAAY;qBACrB,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC7D,CAAC;YACD,kBAAkB;YAClB,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,oCAAoC,GAAG,CAAC,QAAQ,mDAAmD;oBAC3G,MAAM,EAAE,YAAY;iBACrB,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC7D,CAAC,CAAC;IACJ,CAAC;CACF"}