@bolloon/bolloon-agent 0.5.2 → 0.5.4

package/dist/cli/identity-command.js

@@ -17,10 +17,13 @@
  */
 import * as fs from 'fs/promises';
 import * as os from 'os';
+import * as path from 'path';
 import * as crypto from 'crypto';
-import { okEnvelope, failEnvelope, line, title, hint, plain, has, } from './protocol-envelope.js';
+import { okEnvelope, failEnvelope, line, title, hint, plain, has, opt, } from './protocol-envelope.js';
 import { getLocalIdentityFile, initLocalIdentity } from './setup-wizard.js';
 import { AUDIT_FORBIDDEN_KEYS } from '../agents/task-contract.js';
+import { KeyManager } from '@diap/sdk';
+import { ADDRESS_BINDING_PROTOCOL, BINDING_INDEX_FILENAME, DEFAULT_BINDING_CHAIN_ID, BINDING_ADDRESS_RE, bindingsDir, bindingIndexPath, newBindingNonce, createAddressBinding, verifyAddressBinding, payerIdentityOf, writeBindingRecord, readBindingRecord, readBindingIndex, rebuildBindingIndex, loadPayerIdentityIndex, buildPublicBindingProjection, didShort, } from '../agents/identity/address-binding.js';
 export const IDENTITY_USAGE = `
 ${title('bolloon identity')}
   bolloon identity init [--force] [--json]
@@ -31,6 +34,25 @@ ${title('bolloon identity')}
       **绝不打印私钥** (输出只有 did / 文件路径 / 文件权限)
   bolloon identity show [--json]
       看本机身份: did · 公钥指纹(sha256 前 16 位) · 文件权限 · 创建时间 (不含私钥)
+  bolloon identity bind-address --address 0x…全小写 --address-key-file <path> [--label <名>]
+                              [--did-key-file <path>] [--chain-id 8453] [--expires-at <ISO8601>]
+                              [--bindings-dir <dir>] [--json]
+      登记「地址 ↔ DID」绑定 (**链下登记, 可离线验签**): 同一份声明正文被**两侧**签名 ——
+        · sig_did  = DID 私钥 (Ed25519, ~/.bolloon/identity.json) 对 canonical 正文签名
+        · sig_addr = 该以太地址私钥 (EIP-191 personal_sign) 对**同一份**正文签名
+      验证 = 两侧都过才算数 (少一侧 = 拒, 不降级)。落盘前**自验不通过就整条失败** (不留半成品)。
+      红线: **没有默认钱包路径** (--address-key-file 必填, 以免手滑拿主钱包签); 私钥不进任何输出。
+      名字短写: --label 会被清洗成 [A-Za-z0-9._-] + 中日文 (≤24 字符), 另有一枚 label_sig 覆盖它。
+  bolloon identity bindings list   [--bindings-dir <dir>] [--json]
+      列本机绑定库 (~/.bolloon/bindings): id · 名字短写 · DID 短写 · 地址(仅本机) · 链 · 签发时间
+      **重验**: 每条都当场验一遍, 不通过的如实列出 (它们不会进快照)
+  bolloon identity bindings show   <file> [--json]
+      看一条绑定的正文/签名/判据 (地址与 DID 全文只在本机命令里出; 页面上只出短写)
+  bolloon identity bindings verify <file> [--bindings-dir <dir>] [--json]
+      离线复验一条绑定: 逐条列判据 (双侧签名 · 正文 canonical · did↔公钥自洽 · 时效 · nonce 一次性);
+      **不过 = 非零退出码**
+  bolloon identity bindings publish --out <path> [--bindings-dir <dir>] [--json]
+      写出**对外投影** (显式路径): 只有短写 (name_short / did_short) + 地址哈希; 地址与完整 DID 不出
 
 选项: --json · --quiet · --force (只对 init 有效)
 说明: 只建 identity.json; 供应商/API key 仍走 bolloon setup (或 bolloon setup --provider … --api-key …);
@@ -170,8 +192,311 @@ export async function identityCommand(flags) {
         return identityInit(flags);
     if (sub === 'show' || sub === 'status')
         return identityShow(flags);
+    if (sub === 'bind-address')
+        return identityBindAddress(flags);
+    if (sub === 'bindings')
+        return identityBindings(flags);
     return {
-        envelope: failEnvelope('INVALID_ARGUMENT', sub ? `未知 identity 子命令: ${sub}` : '缺少 identity 子命令 (init | show)', { usage: plain(IDENTITY_USAGE.trim()), accepted: ['bolloon identity init', 'bolloon identity show'] }, [], 'needs_human'),
+        envelope: failEnvelope('INVALID_ARGUMENT', sub ? `未知 identity 子命令: ${sub}` : '缺少 identity 子命令 (init | show | bind-address | bindings)', { usage: plain(IDENTITY_USAGE.trim()), accepted: ['bolloon identity init', 'bolloon identity show', 'bolloon identity bind-address --address 0x… --address-key-file <path>', 'bolloon identity bindings list|show|verify|publish'] }, [], 'needs_human'),
         human: IDENTITY_USAGE,
     };
 }
+// ═══════════════════════════════════════════════════════════════════════════
+// 地址 ↔ DID 绑定登记 (`diap-address-binding/1`) —— 2026-09-29
+//   让网关能把链上付款行里的**付款方地址**翻成**智能体身份**。
+//   红线 (逐条都在这段代码里落实):
+//     · **不默认任何钱包路径** —— `--address-key-file` 必填, 免得手滑拿主钱包签名;
+//     · 私钥只在进程内用一次, **不进 stdout / 不进绑定文件 / 不进日志** (只打印地址);
+//     · 绑定库的 `nonce` 一次性: 生成时先查索引, 撞了就换;
+//     · 落盘前必须**自验通过**(双侧签名), 否则整条命令失败, 不留半成品。
+// ═══════════════════════════════════════════════════════════════════════════
+/** 读一个"以太地址私钥"文件: 认 JSON 的 `privateKey` 字段, 也认纯文本 (0x + 64 hex) */
+async function readAddressKeyFile(file) {
+    const raw = (await fs.readFile(file, 'utf-8')).trim();
+    let pk = '';
+    if (raw.startsWith('{')) {
+        const j = JSON.parse(raw);
+        pk = String(j?.privateKey ?? j?.private_key ?? j?.key ?? '');
+    }
+    else {
+        pk = raw.split(/\s+/)[0];
+    }
+    pk = pk.trim();
+    if (!/^(0x)?[0-9a-fA-F]{64}$/.test(pk)) {
+        throw new Error(`地址私钥文件里没找到 32 字节私钥 (JSON 的 privateKey 字段或纯文本 0x+64 hex): ${file}`);
+    }
+    return pk.startsWith('0x') ? pk : `0x${pk}`;
+}
+/** `bolloon identity bind-address --address 0x… --address-key-file <path> [--label …]` */
+async function identityBindAddress(flags) {
+    const head = 'bolloon identity bind-address';
+    const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
+    const address = String(opt(flags, '--address') || '').trim().toLowerCase();
+    const keyFile = opt(flags, '--address-key-file');
+    const didFile = opt(flags, '--did-key-file') || getLocalIdentityFile(home);
+    const dir = opt(flags, '--bindings-dir') || bindingsDir(home);
+    const label = opt(flags, '--label');
+    const chainIdRaw = opt(flags, '--chain-id');
+    const expiresAt = opt(flags, '--expires-at') || null;
+    const bad = (code, msg, data = {}) => ({
+        envelope: failEnvelope(code, msg, { ...data, keyMaterialInOutput: false }, [], 'needs_human'),
+        human: `${title(head)}\n  原因: ${msg}\n\n${hint(IDENTITY_USAGE.trim())}`,
+    });
+    if (!address || !BINDING_ADDRESS_RE.test(address)) {
+        return bad('INVALID_ARGUMENT', `--address 必须是**全小写** 0x + 40 位十六进制 (实得 ${JSON.stringify(opt(flags, '--address') ?? '')})`, { address: address || null });
+    }
+    if (!keyFile) {
+        return bad('INVALID_ARGUMENT', '必须显式给 --address-key-file <path> —— 本命令**没有默认钱包**: 不替你在任何目录里找一个私钥来签 (以免拿主钱包误签)', { address, needs: '--address-key-file' });
+    }
+    const chainId = chainIdRaw ? Number(chainIdRaw) : DEFAULT_BINDING_CHAIN_ID;
+    if (!Number.isInteger(chainId) || chainId <= 0)
+        return bad('INVALID_ARGUMENT', `--chain-id 必须是正整数 (实得 ${JSON.stringify(chainIdRaw)})`, { chainId: chainIdRaw ?? null });
+    if (expiresAt && !Number.isFinite(Date.parse(expiresAt)))
+        return bad('INVALID_ARGUMENT', `--expires-at 必须是 ISO8601 时间串 (实得 ${expiresAt})`, { expiresAt });
+    // 地址私钥 (只读一次, 不进任何输出)
+    let addressKey = '';
+    try {
+        addressKey = await readAddressKeyFile(keyFile);
+    }
+    catch (e) {
+        return bad('NOT_FOUND', `读地址私钥失败: ${String(e?.message || e).slice(0, 160)}`, { addressKeyFile: keyFile });
+    }
+    // DID 身份 (与 `agent-identity.ts` / 卖方签名同源: KeyManager)
+    let did = '';
+    let didPrivateKeyHex = '';
+    let didPublicKeyHex = '';
+    try {
+        const kp = await KeyManager.fromFile(didFile);
+        did = String(kp?.did || '');
+        didPrivateKeyHex = Buffer.from(kp.privateKey).toString('hex');
+        didPublicKeyHex = Buffer.from(kp.publicKey).toString('hex');
+    }
+    catch (e) {
+        return bad('NOT_FOUND', `读本机 DID 身份失败 (${didFile}): ${String(e?.message || e).slice(0, 160)} —— 没有身份先跑 bolloon identity init`, { didKeyFile: didFile });
+    }
+    // nonce 一次性: 生成前先看本机索引里有没有撞 (撞了就换一枚)
+    let index = readBindingIndex({ dir });
+    if (!index) {
+        try {
+            index = await rebuildBindingIndex({ dir });
+        }
+        catch {
+            index = null;
+        }
+    }
+    const used = new Set(Object.keys(index?.nonces || {}));
+    let nonce = newBindingNonce();
+    for (let i = 0; i < 8 && used.has(nonce); i++)
+        nonce = newBindingNonce();
+    let rec;
+    try {
+        rec = await createAddressBinding({ did, didPrivateKeyHex, didPublicKeyHex, addressPrivateKeyHex: addressKey, address, chainId, expiresAt, nonce, label, createdBy: 'bolloon identity bind-address' });
+    }
+    catch (e) {
+        return bad('POLICY_DENIED', `造绑定失败 (未落盘): ${String(e?.message || e).slice(0, 200)}`, { address, chainId, didShort: didShort(did) });
+    }
+    finally {
+        addressKey = ''; // 用完即弃 (不留到后面任何一行)
+    }
+    let file = '';
+    try {
+        const w = await writeBindingRecord(rec, { dir });
+        file = w.file;
+    }
+    catch (e) {
+        return bad('DUPLICATE_REQUEST', `绑定落盘失败: ${String(e?.message || e).slice(0, 160)}`, { id: rec.id, dir });
+    }
+    const ident = payerIdentityOf(rec);
+    const payload = {
+        action: 'bound',
+        id: rec.id,
+        protocol: ADDRESS_BINDING_PROTOCOL,
+        address,
+        did,
+        didShort: ident.did_short,
+        nameShort: ident.name_short,
+        label: rec.label ?? null,
+        chainId: rec.statement.chainId,
+        issuedAt: rec.statement.issuedAt,
+        expiresAt: rec.statement.expiresAt,
+        nonce: rec.statement.nonce,
+        statementJson: rec.statement_json,
+        sigDidAlg: 'ed25519',
+        sigAddrAlg: 'eip-191-personal-sign',
+        verified: true,
+        verifiedChecks: rec.verified_checks ?? [],
+        file,
+        bindingsDir: dir,
+        didKeyFile: didFile,
+        addressKeyFile: keyFile,
+        keyMaterialInOutput: false,
+        semantics: '链下登记(可离线验签) —— 不是链上事实',
+    };
+    return {
+        envelope: okEnvelope('OK', `已登记地址↔DID 绑定 (${rec.id} · 双侧签名自验通过)`, payload, [
+            `off-chain signed statement: ${rec.statement_json}`,
+        ], null),
+        human: [
+            title(head),
+            line('绑定 id', rec.id),
+            line('协议', ADDRESS_BINDING_PROTOCOL),
+            line('地址', address),
+            line('DID', did),
+            line('DID 短写', ident.did_short),
+            line('智能体名', ident.name_short),
+            line('chainId', rec.statement.chainId),
+            line('issuedAt', rec.statement.issuedAt),
+            line('expiresAt', rec.statement.expiresAt ?? '(不过期)'),
+            line('绑定文件', file),
+            line('自验判据', (rec.verified_checks || []).join(' · ')),
+            '',
+            `  ${hint('口径: 「链下登记(可离线验签)」—— 这是签名声明, 不是链上事实')}`,
+            '  私钥没进任何输出; 地址私钥只在本进程内用了一瞬',
+            `  复核: bolloon identity bindings verify ${file}`,
+        ].join('\n'),
+    };
+}
+/** `bolloon identity bindings list|show|verify|publish` */
+async function identityBindings(flags) {
+    const head = 'bolloon identity bindings';
+    const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
+    const dir = opt(flags, '--bindings-dir') || bindingsDir(home);
+    const sub = String(flags.positionals[1] ?? '').trim().toLowerCase();
+    const rest = flags.positionals.slice(2).filter((p) => p && p !== 'true');
+    const fail = (code, msg, data = {}) => ({
+        envelope: failEnvelope(code, msg, { ...data, bindingsDir: dir, keyMaterialInOutput: false }, [], 'needs_human'),
+        human: `${title(head)}\n  原因: ${msg}\n\n${hint('用法: bindings list [--bindings-dir <dir>] · bindings show <file> · bindings verify <file> [--bindings-dir <dir>] · bindings publish --out <path>')}`,
+    });
+    if (sub === 'list' || sub === '') {
+        let index = readBindingIndex({ dir });
+        let rebuilt = false;
+        if (!index) {
+            index = await rebuildBindingIndex({ dir });
+            rebuilt = true;
+        }
+        const rows = index.bindings.map((b) => ({
+            id: b.id, address: b.address, name_short: b.name_short, did_short: b.did_short,
+            chainId: b.chainId, issuedAt: b.issuedAt, expiresAt: b.expiresAt, verified_at: b.verified_at, file: b.file,
+        }));
+        const loaded = await loadPayerIdentityIndex({ dir, now: Date.now() });
+        return {
+            envelope: okEnvelope('OK', `${rows.length} 条绑定 (重验通过 ${loaded.verified}${loaded.rejected.length ? ` · 拒 ${loaded.rejected.length}` : ''})`, {
+                action: 'list', bindingsDir: dir, indexFile: bindingIndexPath(home) === path.join(dir, BINDING_INDEX_FILENAME) ? bindingIndexPath(home) : path.join(dir, BINDING_INDEX_FILENAME),
+                rebuilt, count: rows.length, verified: loaded.verified, rejected: loaded.rejected, reason: loaded.reason,
+                bindings: rows, keyMaterialInOutput: false,
+                semantics: '链下登记(可离线验签) —— 每行是签名声明, 不是链上事实; address 只在本机索引里',
+            }, [], null),
+            human: [
+                title(head + ' list'),
+                line('绑定库', dir),
+                line('条数', rows.length),
+                line('重验', loaded.reason),
+                ...(rows.length
+                    ? ['', ...rows.map((r) => `  ${r.id}  ${r.name_short.padEnd(20)} ${r.did_short}  ${r.address}  chain=${r.chainId}  ${r.issuedAt}`)]
+                    : ['', '  (空 —— 还没有地址↔DID 登记; 地址不出公开面, 名字来自链下签名声明)']),
+                ...(loaded.rejected.length ? ['', `  ⚠ 有 ${loaded.rejected.length} 条重验不过 (不进快照): ${loaded.rejected.map((r) => `${r.id}:${r.reasons.join(',')}`).join(' | ').slice(0, 200)}`] : []),
+            ].join('\n'),
+        };
+    }
+    if (sub === 'show' || sub === 'verify') {
+        const file = rest[0] ? path.resolve(rest[0]) : '';
+        if (!file)
+            return fail('INVALID_ARGUMENT', `bindings ${sub} 需要文件路径: <file>`);
+        let rec;
+        try {
+            rec = readBindingRecord(file);
+        }
+        catch (e) {
+            return fail('NOT_FOUND', `读绑定文件失败: ${String(e?.message || e).slice(0, 160)}`, { file });
+        }
+        const index = readBindingIndex({ dir });
+        const verdict = await verifyAddressBinding(rec, { now: Date.now(), ...(index ? { nonces: index.nonces } : {}) });
+        if (sub === 'show') {
+            const ident = verdict.ok ? payerIdentityOf(rec) : null;
+            return {
+                envelope: okEnvelope('OK', `绑定 ${rec.id} (验签 ${verdict.ok ? '通过' : '不通过'})`, {
+                    action: 'show', file, id: rec.id, protocol: rec.protocol,
+                    statement: rec.statement, statementJson: rec.statement_json,
+                    didPublicKey: rec.did_public_key, label: rec.label ?? null, labelCovered: verdict.label_covered,
+                    sigDid: rec.sig_did, sigAddr: rec.sig_addr,
+                    verified: verdict.ok, verifyReasons: verdict.reasons, checks: verdict.checks,
+                    nameShort: ident ? ident.name_short : null, didShort: ident ? ident.did_short : null,
+                    verified_at: rec.verified_at ?? null, created_by: rec.created_by ?? null,
+                    keyMaterialInOutput: false,
+                    semantics: '链下登记(可离线验签) —— 不是链上事实',
+                }, [], null),
+                human: [
+                    title(head + ' show'),
+                    line('文件', file),
+                    line('id', rec.id),
+                    line('正文 (canonical)', rec.statement_json),
+                    line('DID', rec.statement.did),
+                    line('地址', rec.statement.address),
+                    line('chainId', rec.statement.chainId),
+                    line('label', rec.label ?? '(无)'),
+                    line('名字覆盖', verdict.label_covered === null ? '(无 label)' : (verdict.label_covered ? 'label_sig 有效' : 'label_sig 无效')),
+                    line('sig_did', `${String(rec.sig_did || '').slice(0, 24)}… (ed25519, ${verdict.sig_did_ok ? '通过' : '不通过'})`),
+                    line('sig_addr', `${String(rec.sig_addr || '').slice(0, 20)}… (eip-191, ${verdict.sig_addr_ok ? '通过' : '不通过'})`),
+                    line('验签结论', verdict.ok ? '✅ 通过 (两侧)' : `❌ 拒: ${verdict.reasons.join(' | ')}`),
+                    '',
+                    `  ${hint('名字与短写只在**验签通过**时才算数; 未通过一律不出名字/不出 DID')}`,
+                ].join('\n'),
+            };
+        }
+        // verify: 判据逐条列出; 不过 = 非零退出码
+        const humanLines = [
+            title(head + ' verify'),
+            line('文件', file),
+            line('id', rec.id),
+            `  结论: ${verdict.ok ? '✅ 通过 (双侧签名 + 正文 canonical + 时效/nonce)' : `❌ 拒 (${verdict.reasons.join(' | ')})`}`,
+            '',
+            ...verdict.checks.map((c) => `  ${c.ok ? '✔' : '✘'} ${c.name.padEnd(24)} ${String(c.detail).slice(0, 120)}`),
+        ];
+        const payload = {
+            action: 'verify', file, id: rec.id, ok: verdict.ok, reasons: verdict.reasons,
+            checks: verdict.checks, sigDidOk: verdict.sig_did_ok, sigAddrOk: verdict.sig_addr_ok,
+            labelCovered: verdict.label_covered, address: verdict.address, did: verdict.did,
+            nonceChecked: !!index, keyMaterialInOutput: false,
+            semantics: '链下登记(可离线验签) —— 不是链上事实',
+        };
+        return verdict.ok
+            ? { envelope: okEnvelope('OK', `验签通过: ${rec.id}`, payload, [], null), human: humanLines.join('\n') }
+            : {
+                envelope: failEnvelope('SIGNATURE_INVALID', `验签不通过: ${rec.id} —— ${verdict.reasons.join(' | ')}`, payload, [], 'needs_human'),
+                human: humanLines.join('\n'),
+            };
+    }
+    if (sub === 'publish') {
+        const out = opt(flags, '--out');
+        if (!out)
+            return fail('INVALID_ARGUMENT', '缺少 --out <path> (显式路径, 不写死目录)');
+        const proj = await buildPublicBindingProjection({ dir });
+        const target = path.resolve(out);
+        try {
+            await fs.mkdir(path.dirname(target), { recursive: true });
+            await fs.writeFile(target, JSON.stringify(proj, null, 2), 'utf-8');
+        }
+        catch (e) {
+            return fail('INTERNAL_ERROR', `写投影失败 (${target}): ${String(e?.message || e).slice(0, 160)}`);
+        }
+        return {
+            envelope: okEnvelope('OK', `已写出对外投影 ${proj.count} 条 → ${target}`, {
+                action: 'publish', out: target, count: proj.count, protocol: proj.protocol, kind: proj.kind,
+                // 对外面只出短写: 地址只以 sha256 前 16 位出现
+                rows: proj.bindings.map((b) => ({ id: b.id, address_hash: b.address_hash, name_short: b.name_short, did_short: b.did_short })),
+                keyMaterialInOutput: false,
+                semantics: '链下登记(可离线验签) —— 对外只出短写; 地址不出 (只有哈希)',
+            }, [], null),
+            human: [
+                title(head + ' publish'),
+                line('写入', target),
+                line('条数', proj.count),
+                line('协议', proj.protocol),
+                ...proj.bindings.map((b) => `  ${b.id}  ${b.name_short.padEnd(20)} ${b.did_short}  ${b.address_hash}`),
+                '',
+                `  ${hint('对外面里没有完整地址、没有完整 DID —— 网关是**本机**按地址匹配的')}`,
+            ].join('\n'),
+        };
+    }
+    return fail('INVALID_ARGUMENT', `未知 bindings 子命令: ${sub || '(空)'} (list | show | verify | publish)`);
+}

package/dist/cli/ink-app.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * ink-app.tsx — Ink (React for CLI) 渲染入口
  *
@@ -8,8 +8,9 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  *   ↑/↓ 导航, Tab/Enter 选中, Esc 关闭, 弹出窗打开时 TextInput 让出焦点 (focus=false)
  */
 import React, { useState, useEffect, useCallback, useRef, useMemo } from 'react';
+import { loadInputHistory, appendInputHistory, MEMORY_CAP } from './input-history.js';
 import * as fs from 'fs';
-import { render, Box, Text, useInput, useApp, useStdout } from 'ink';
+import { Static, render, Box, Text, useInput, useApp, useStdout } from 'ink';
 import TextInput from 'ink-text-input';
 import { dispWidth, LOADING_FRAMES as KAOMOJI } from './loading-tui.js';
 import { THEME, fg } from './theme.js';
@@ -53,6 +54,19 @@ const MIN_HISTORY_LINES = 1;
 /** 弹层最多占几行 (给历史区留出至少 1 行消息, 免得弹窗把历史区吃光) */
 const POPUP_MAX_ROWS = 8;
 /** 一屏布局账本 (纯函数 —— 验收门直接喂尺寸复核) */
+/**
+ * 启动面板最多能占几行 = 消息窗口真高 (与渲染同一套预算; 面板按它裁, 免得高过窗口).
+ *   2026-09-30: 面板高过窗口时 Ink 清不掉上一帧 ⇒ 退化成"追加", 顶框被反复重画.
+ */
+export function bootPanelMaxLines(rows, cols) {
+    const b = layoutBudget({ rows: Math.max(8, Math.floor(rows || 24) - 2), cols: Math.floor(cols || 80) });
+    return Math.max(4, b.msgH);
+}
+/** 面板区高度 (窗口的 60%; 会话区永远留 >=3 行) —— 给启动面板建盒子时对齐用 */
+export function bootPanelRegionLines(rows, cols) {
+    const b = layoutBudget({ rows: Math.max(8, Math.floor(rows || 24) - 2), cols: Math.floor(cols || 80) });
+    return Math.max(4, Math.min(Math.floor(b.msgH * 0.6), b.msgH - 3));
+}
 export function layoutBudget(opts) {
     const rows = Math.max(RESERVED_LINES + MIN_HISTORY_LINES, Math.floor(opts.rows || 24));
     const cols = Math.max(20, Math.floor(opts.cols || 80));
@@ -157,6 +171,14 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
     }, []);
     // ── 输入历史 (↑/↓ 切换) ───────────────────────────────────────────────────
     const historyRef = useRef([]);
+    // 2026-09-30 (leo: 「输入历史有落盘文件夹吗，要实现一下」): 启动时把落盘历史读回内存 —— 重启后 ↑ 还能翻出来。
+    //   异步读, 读回来直接替换 ref (空文件/读失败 = 保持空, 不打扰输入)。
+    useEffect(() => {
+        let alive = true;
+        loadInputHistory().then(h => { if (alive && h.length)
+            historyRef.current = h; }).catch(() => { });
+        return () => { alive = false; };
+    }, []);
     const historyIdxRef = useRef(-1); // -1 = 正在编辑新草稿
     const draftRef = useRef('');
     // 加载当前 mention 的候选 (agent/command 缓存一次; file 每次打开重扫)
@@ -405,18 +427,48 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
         lastSubmitRef.current = { t: now, v: trimmed };
         if (!trimmed)
             return;
-        // 入历史 (去重最近一条, 上限 100)
+        // 入历史 (去重最近一条) + **落盘** (~/.bolloon/history/input-<渠道>.jsonl, 0600)
+        //   秘密形态的输入 (私钥/助记词) 由 appendInputHistory 拦下不写盘 —— 输入历史是纯文本, 写进去就是事故。
         const hist = historyRef.current;
         if (hist[hist.length - 1] !== trimmed)
             hist.push(trimmed);
-        if (hist.length > 100)
+        if (hist.length > MEMORY_CAP)
             hist.shift();
+        void appendInputHistory(trimmed);
         historyIdxRef.current = -1;
         draftRef.current = '';
         setInput('');
         // 用户消息由 processInput 统一通过 appendLine(renderUserMessage) 显示
         onPrompt(trimmed);
     }, [onPrompt]);
+    /**
+     * 输入历史: 上一/下一条。
+     *   2026-09-30 (leo: 「历史的上下切换遇到 /session 等指令就无法切换了」) —— 抽出来是因为
+     *   历史里一旦出现 `/xxx`, 恢复出来的输入会**打开命令补全弹窗**, 而弹窗把 ↑/↓ 当"移动候选"吃掉
+     *   ⇒ 历史再也切不动。现在: **空输入** 或 **已在历史态** 时 ↑/↓ 一律归历史 (见下面优先块)。
+     */
+    const histUp = useCallback(() => {
+        const hist = historyRef.current;
+        if (hist.length === 0)
+            return;
+        if (historyIdxRef.current === -1)
+            draftRef.current = inputRef.current;
+        if (historyIdxRef.current < hist.length - 1) {
+            historyIdxRef.current += 1;
+            setInput(hist[hist.length - 1 - historyIdxRef.current]);
+            setTiKey(k => k + 1);
+        }
+    }, []);
+    const histDown = useCallback(() => {
+        if (historyIdxRef.current === -1)
+            return;
+        historyIdxRef.current -= 1;
+        if (historyIdxRef.current === -1)
+            setInput(draftRef.current);
+        else
+            setInput(historyRef.current[historyRef.current.length - 1 - historyIdxRef.current]);
+        setTiKey(k => k + 1);
+    }, []);
     useInput((_input, key) => {
         // 退出请求: 通知 startCLI resolve → 走清理 → process.exit (带兜底)
         const requestExit = () => {
@@ -429,6 +481,16 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
             requestExit();
             return;
         }
+        // ── 输入历史优先 (比补全弹窗更优先) ──
+        //   规则: 空输入, 或已经在历史态 (historyIdx !== -1) ⇒ ↑/↓ 归历史, 弹窗/选择器都让路。
+        //   只有"用户自己敲了内容且不在历史态"时, 补全弹窗才拥有 ↑/↓。
+        if ((key.upArrow || key.downArrow) && (historyIdxRef.current !== -1 || !inputRef.current.trim())) {
+            if (key.upArrow)
+                histUp();
+            else
+                histDown();
+            return;
+        }
         // ── 程序化选择器: 全键接管 (↑↓ 选择, Enter 确认, Esc 关闭) ──
         if (picker) {
             const itemsArg = picker.items;
@@ -533,7 +595,7 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
         }
         // ── 正常模式 ──
         // #7 输入层: 滚动键走数据化 keymap (Ctrl+U/D / PgUp/PgDn / Home-End / Alt+↑↓ / Ctrl+Home-End)
-        if (totalLines > availH) {
+        if (false && totalLines > availH) { // 无限高度: 不再有 app 内虚拟滚动 (PgUp 归终端)
             const pg = Math.max(6, availH - 2);
             const maxT = Math.max(0, totalLines - availH);
             const act = resolveNormalKey(key, { scrollable: true, input: _input });
@@ -563,27 +625,11 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
         }
         // ↑/↓ 切换输入历史 (TextInput 本身忽略 up/down, 无冲突)
         if (key.upArrow) {
-            const hist = historyRef.current;
-            if (hist.length === 0)
-                return;
-            if (historyIdxRef.current === -1)
-                draftRef.current = input;
-            if (historyIdxRef.current < hist.length - 1) {
-                historyIdxRef.current += 1;
-                setInput(hist[hist.length - 1 - historyIdxRef.current]);
-                setTiKey(k => k + 1);
-            }
+            histUp();
             return;
         }
         if (key.downArrow) {
-            if (historyIdxRef.current === -1)
-                return;
-            historyIdxRef.current -= 1;
-            if (historyIdxRef.current === -1)
-                setInput(draftRef.current);
-            else
-                setInput(historyRef.current[historyRef.current.length - 1 - historyIdxRef.current]);
-            setTiKey(k => k + 1);
+            histDown();
             return;
         }
         // 双击 Esc 退出当前进程: 第一击提示, 500ms 内第二击退出
@@ -672,7 +718,11 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
     const sticky = stickRef.current;
     const popupOpenNow = !!(popupOpen || picker);
     const budget = layoutBudget({
-        rows: termSize.h, cols: W,
+        // 2026-09-30 (leo 报「顶部重绘」+ 真机日志坐实): 帧高 = 终端行数 - 2.
+        //   整帧 == 终端高时, 每次 flush (状态栏每秒一 tick) 都把最上一行滚进 scrollback
+        //   ⇒ 面板被一遍遍重复留在屏上 (实测一次运行重画 9 次). 留 2 行余量 (终端可视行数
+        //   常比报告值矮 1~2 行) 即根治.
+        rows: Math.max(8, termSize.h - 2), cols: W,
         popupRows: popupOpenNow ? POPUP_MAX_ROWS : 0,
     });
     const msgH = budget.msgH; // 消息窗口高度 (弹层占的那几行已经扣掉)
@@ -694,8 +744,10 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
     // 严格钳制: 端界不越过 msgH, 保证 transcript 内容行数 ≤ 分区高度 (互不覆盖)
     while (end + 1 < msgs.length && cumulative[end + 1] <= top + msgH)
         end++;
-    const visible = useMemo(() => msgs.slice(start, end + 1), [msgs, start, end]);
-    const scrolledOut = maxTop > 0 && !sticky;
+    void start;
+    void end;
+    const visible = msgs; // 2026-09-30 (leo: 「我要无限高度」): 全部内容交给 <Static>, 不再切片
+    const scrolledOut = false; // 虚拟滚动退场 —— 滚动交给终端 scrollback
     // 测试/诊断探针: 把**真实用到的**布局与滚动状态写一份 JSONL (验收门按它做精确断言;
     //   不设 BOLLOON_TUI_PROBE 时零开销 —— 只在渲染后追加一行)。
     //   注: 走静态 import —— dist 是 ESM, 这里 `require()` 不存在 (踩过一次: 探针静默不写 + 树停更)。
@@ -715,7 +767,7 @@ const InkApp = ({ onPrompt, initialStatus, getStatusUpdate, terminalW, terminalH
         }
         catch { /* 探针写不进去绝不影响界面 */ }
     });
-    return (_jsxs(Box, { flexDirection: "column", height: budget.rows, width: budget.cols, overflow: "hidden", children: [_jsxs(Box, { flexDirection: "column", height: budget.history, children: [_jsxs(Box, { height: msgH, overflow: "hidden", flexDirection: hasRails ? 'row' : 'column', children: [_jsx(Box, { flexGrow: 1, flexDirection: "column", justifyContent: "flex-start", overflow: "hidden", children: _jsx(Messages, { msgs: visible }) }), hasRails && (_jsx(Box, { width: 36, marginLeft: 1, flexDirection: "column", justifyContent: "flex-start", children: railNames.map((n) => _jsxs(Text, { color: THEME.muted, children: [n, "\\n", widgets[n]] }, n)) }))] }), popupOpenNow && tabState && (_jsx(MentionPopup, { title: POPUP_TITLE_TAB, items: filtered, sel: safeSel, width: W, maxRows: budget.popupRows })), popupOpenNow && !tabState && mention && (_jsx(MentionPopup, { title: popupTitle, items: filtered, sel: safeSel, width: W, loading: loadingFiles, maxRows: budget.popupRows })), popupOpenNow && !tabState && !mention && picker && (_jsx(MentionPopup, { title: picker.title, items: picker.items, sel: Math.min(picker.sel, picker.items.length - 1), width: W, maxRows: budget.popupRows }))] }), _jsx(Box, { height: budget.activity, width: budget.cols, overflow: "hidden", children: scrolledOut ? (_jsxs(Text, { color: THEME.warn, children: ["\u5DF2\u6682\u505C\u8DDF\u968F \u00B7 PgDn/End \u56DE\u5230\u5E95\u90E8 (\u2191", top, " \u884C \u00B7 Ctrl+U/D \u7FFB\u9875 \u00B7 Home \u5230\u9876)"] })) : transient ? (_jsx(Text, { children: transient })) : thinking ? (_jsxs(Text, { color: "yellow", children: [KAOMOJI[thinkingIdx.current], " \u601D\u8003\u4E2D..."] })) : (_jsx(Text, { children: " " })) }), _jsx(Box, { children: _jsx(Text, { bold: true, color: THEME.accent, children: '─'.repeat(W) }) }), _jsx(Box, { height: 1, width: budget.cols, overflow: "hidden", children: _jsx(Text, { children: status }) }), _jsx(Box, { children: _jsx(Text, { bold: true, color: THEME.accent, children: '─'.repeat(W) }) }), _jsxs(Box, { width: budget.cols, height: 1, overflow: "hidden", children: [_jsx(Text, { bold: true, color: THEME.accent, children: "\u276F " }), _jsx(Box, { width: Math.max(10, budget.cols - 2), height: 1, overflow: "hidden", flexShrink: 0, children: _jsx(TextInput, { value: input, onChange: setInput, onSubmit: onSubmit, focus: !popupOpenNow, placeholder: COMPOSER_PLACEHOLDER }, tiKey) })] }), _jsx(Box, { children: _jsx(Text, { bold: true, color: THEME.accent, children: '─'.repeat(W) }) })] }));
+    return (_jsxs(_Fragment, { children: [_jsx(Static, { items: msgs, children: (m, i) => _jsx(Text, { children: m }, `m${i}`) }), _jsxs(Box, { flexDirection: "column", width: budget.cols, children: [hasRails && (_jsx(Box, { flexDirection: "column", children: railNames.map((n) => _jsx(Text, { color: THEME.muted, children: `${n}: ${String(widgets[n] ?? '').replace(/\n/g, ' ')}` }, n)) })), popupOpenNow && tabState && (_jsx(MentionPopup, { title: POPUP_TITLE_TAB, items: filtered, sel: safeSel, width: W, maxRows: budget.popupRows })), popupOpenNow && !tabState && mention && (_jsx(MentionPopup, { title: popupTitle, items: filtered, sel: safeSel, width: W, loading: loadingFiles, maxRows: budget.popupRows })), popupOpenNow && !tabState && !mention && picker && (_jsx(MentionPopup, { title: picker.title, items: picker.items, sel: Math.min(picker.sel, picker.items.length - 1), width: W, maxRows: budget.popupRows })), _jsx(Box, { height: 1, width: budget.cols, overflow: "hidden", children: transient ? (_jsx(Text, { children: transient })) : thinking ? (_jsxs(Text, { color: "yellow", children: [KAOMOJI[thinkingIdx.current], " \u601D\u8003\u4E2D..."] })) : (_jsx(Text, { color: THEME.muted, children: '· 回车发送 · ↑↓ 历史 · PgUp 回看 · Esc 双击退出' })) }), _jsx(Box, { children: _jsx(Text, { bold: true, color: THEME.accent, children: '─'.repeat(Math.max(10, W - 1)) }) }), _jsx(Box, { height: 1, width: budget.cols, overflow: "hidden", children: _jsx(Text, { children: status }) }), _jsx(Box, { children: _jsx(Text, { bold: true, color: THEME.accent, children: '─'.repeat(Math.max(10, W - 1)) }) }), _jsxs(Box, { width: budget.cols, height: 1, overflow: "hidden", children: [_jsx(Text, { bold: true, color: THEME.accent, children: "\u276F " }), _jsx(Box, { width: Math.max(10, budget.cols - 2), height: 1, overflow: "hidden", flexShrink: 0, children: _jsx(TextInput, { value: input, onChange: setInput, onSubmit: onSubmit, focus: !popupOpenNow, placeholder: COMPOSER_PLACEHOLDER }, tiKey) })] }), _jsx(Box, { children: _jsx(Text, { bold: true, color: THEME.accent, children: '─'.repeat(Math.max(10, W - 1)) }) })] })] }));
 };
 export { InkApp };
 // ─── 启动 ────────────────────────────────────────────────────────────────────