@bolloon/bolloon-agent 0.5.5 → 0.6.1

package/dist/electron-build/kernel/run-lifecycle.js

@@ -0,0 +1,146 @@
+"use strict";
+/**
+ * run-lifecycle.ts — K10 ①: **运行生命周期写口** (与 `control.ts` 分开: 语义不同)
+ *
+ *   `control.ts`  = **命令式控制面**: 「谁命令我停 / 继续 / 恢复」—— web · cli · supervisor 发起, 带 origin 审计。
+ *   本文件        = **回合事实写口**: 「我这一轮发生了什么」—— start-run · record-step · finish-run · save-checkpoint。
+ *
+ * 为什么必须分开 (K10 ① 的下一刀定形时复核过):
+ *   混进同一个 `kind` 空间之后, K10 ②③④ 那些批次就无法区分「这条写入是外部命令还是回合事实」,
+ *   两者的**失败语义也不同** —— 控制面被拒要给 409 (调用方改主意), 而事实写不进是**响亮失败**
+ *   (run-store 是 strict 的: 写不进 = 这次运行在事实层面不存在, 不许静默继续)。
+ *
+ * 形状照抄 `control.ts` (同一个仓库里只该有一种端口写法):
+ *   端口注入 · **未注入即拒** (不静默降级) · 一律**返回结果对象不抛** · 端口用 `{ok:false}` 表达拒绝要被归一化 · 审计流水可读。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUN_LIFECYCLE_NEEDS_RUN_ID = exports.RUN_LIFECYCLE_OPS = void 0;
+exports.runLifecycleAudit = runLifecycleAudit;
+exports.resetRunLifecycleAudit = resetRunLifecycleAudit;
+exports.submitRunLifecycle = submitRunLifecycle;
+exports.assertLifecycleOk = assertLifecycleOk;
+exports.RUN_LIFECYCLE_OPS = [
+    'start-run',
+    'record-step',
+    'finish-run',
+    'save-checkpoint',
+];
+/** 哪些操作必须有 runId (start-run 例外: 它的 runId 是**结果**, 不是入参) */
+exports.RUN_LIFECYCLE_NEEDS_RUN_ID = {
+    'start-run': false,
+    'record-step': true,
+    'finish-run': true,
+    'save-checkpoint': true,
+};
+/**
+ * 端口**不抛异常但明确拒绝** (`{ ok: false, reason }`) 的归一化 —— 与 `control.ts` 同口径。
+ *   为什么必须有: store 类原语用返回值表达拒绝 (例如状态迁移不合法), 只看"有没有抛"会把**被拒当成成功**。
+ */
+function portRefusal(res) {
+    if (res && typeof res === 'object' && 'ok' in res) {
+        const r = res;
+        if (r.ok === false)
+            return `端口拒绝: ${String(r.reason ?? '(未给原因)')}`;
+    }
+    return null;
+}
+const audit = [];
+const AUDIT_MAX = 200;
+/** 审计流水 (最近 N 条; 测试与运维可读) */
+function runLifecycleAudit() {
+    return audit;
+}
+function resetRunLifecycleAudit() {
+    audit.length = 0;
+}
+/**
+ * 提交一条生命周期写入。**唯一入口** —— 校验 (op 合法 / origin 非空 / 需要的定位字段齐) → 派发到 port → 记审计。
+ * 一律**返回结果对象**, 不抛 (调用方不该用 try/catch 表达"没落盘"); 要不要把 `ok=false` 变成异常由
+ * `assertLifecycleOk` 决定 —— 生命周期写入**一律**要 (见该函数注释)。
+ */
+async function submitRunLifecycle(req, ports) {
+    const op = req?.op;
+    const finish = (ok, detail, port, result) => {
+        audit.push({
+            at: Date.now(),
+            op,
+            origin: req?.origin ?? '(anonymous)',
+            target: String(req?.runId ?? '(new)'),
+            ok,
+            detail,
+        });
+        if (audit.length > AUDIT_MAX)
+            audit.splice(0, audit.length - AUDIT_MAX);
+        return { ok, op, via: 'kernel-run-lifecycle', detail, port, result };
+    };
+    if (!exports.RUN_LIFECYCLE_OPS.includes(op))
+        return finish(false, `未知写入类型: ${String(req?.op)}`);
+    if (!req.origin)
+        return finish(false, '缺少 origin (审计要求: 不许匿名写入)');
+    if (exports.RUN_LIFECYCLE_NEEDS_RUN_ID[op] && !req.runId)
+        return finish(false, `${op} 缺少 runId`);
+    const payload = req.payload ?? {};
+    if (op === 'start-run') {
+        if (typeof ports.startRun !== 'function')
+            return finish(false, 'port 未注入: startRun');
+        try {
+            const res = await ports.startRun(payload);
+            const refusal = portRefusal(res);
+            return refusal ? finish(false, refusal, 'startRun', res) : finish(true, undefined, 'startRun', res);
+        }
+        catch (err) {
+            return finish(false, `startRun 失败: ${String(err?.message ?? err).slice(0, 160)}`);
+        }
+    }
+    if (op === 'record-step') {
+        if (typeof ports.recordStep !== 'function')
+            return finish(false, 'port 未注入: recordStep');
+        try {
+            const res = await ports.recordStep(req.runId, payload);
+            const refusal = portRefusal(res);
+            return refusal ? finish(false, refusal, 'recordStep', res) : finish(true, undefined, 'recordStep', res);
+        }
+        catch (err) {
+            return finish(false, `recordStep 失败: ${String(err?.message ?? err).slice(0, 160)}`);
+        }
+    }
+    if (op === 'finish-run') {
+        if (typeof ports.finishRun !== 'function')
+            return finish(false, 'port 未注入: finishRun');
+        try {
+            const res = await ports.finishRun(req.runId, payload);
+            const refusal = portRefusal(res);
+            return refusal ? finish(false, refusal, 'finishRun', res) : finish(true, undefined, 'finishRun', res);
+        }
+        catch (err) {
+            return finish(false, `finishRun 失败: ${String(err?.message ?? err).slice(0, 160)}`);
+        }
+    }
+    if (op === 'save-checkpoint') {
+        if (typeof ports.saveCheckpoint !== 'function')
+            return finish(false, 'port 未注入: saveCheckpoint');
+        try {
+            const res = await ports.saveCheckpoint(req.runId, payload);
+            const refusal = portRefusal(res);
+            return refusal ? finish(false, refusal, 'saveCheckpoint', res) : finish(true, undefined, 'saveCheckpoint', res);
+        }
+        catch (err) {
+            return finish(false, `saveCheckpoint 失败: ${String(err?.message ?? err).slice(0, 160)}`);
+        }
+    }
+    return finish(false, `未处理的写入类型: ${String(op)}`);
+}
+/**
+ * 生命周期写入**必须**落盘 —— 拿不到 `ok` 就抛。
+ *
+ * 依据: `run-store` 的持久化是 **strict** (写不进 = 这次运行在事实层面不存在),
+ * 所以「写失败但继续跑」= 制造"agent 跑了但没记录"的老毛病。要降级只有一种合法姿势:
+ * 由调用方显式换持久化等级 (环境开关), 不许在这里静默吞。
+ */
+function assertLifecycleOk(out) {
+    if (!out.ok) {
+        throw new Error(`[kernel-run-lifecycle] ${out.op} 未落盘: ${out.detail ?? '未知原因'}`
+            + ' (run-store 是 strict: 写不进 = 这次运行在事实层面不存在, 不许静默继续)');
+    }
+}
+//# sourceMappingURL=run-lifecycle.js.map

package/dist/electron-build/kernel/run-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-lifecycle.js","sourceRoot":"","sources":["../../../src/kernel/run-lifecycle.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;AAIU,QAAA,iBAAiB,GAA8B;IAC1D,WAAW;IACX,aAAa;IACb,YAAY;IACZ,iBAAiB;CAClB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,0BAA0B,GAA8C;IACnF,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,IAAI;CACxB,CAAC;AA8BF;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,IAAK,GAA+B,EAAE,CAAC;QAC/E,MAAM,CAAC,GAAG,GAAyC,CAAC;QACpD,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,SAAS,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,KAAK,GAAiB,EAAE,CAAC;AAC/B,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,6BAA6B;AAC7B;IACE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;IACE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACI,KAAK,6BACV,GAAwB,EACxB,KAAwB;IAExB,MAAM,EAAE,GAAG,GAAG,EAAE,EAAoB,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,MAAe,EAAE,IAAa,EAAE,MAAgB,EAAuB,EAAE;QACpG,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,EAAE;YACF,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,aAAa;YACpC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,OAAO,CAAC;YACrC,EAAE;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvE,CAAC,CAAC;IAEF,IAAI,CAAC,QAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,WAAW,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAClE,IAAI,QAAA,0BAA0B,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAEzF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAElC,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QACrF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QACtG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,KAAK,EAAE,gBAAgB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QACzF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAe,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAC1G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,KAAK,EAAE,kBAAkB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,IAAI,EAAE,KAAK,YAAY,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,KAAe,EAAE,OAAO,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,KAAK,EAAE,iBAAiB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,IAAI,EAAE,KAAK,iBAAiB,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QACjG,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAe,EAAE,OAAO,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,KAAK,EAAE,sBAAsB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,EAAE,aAAa,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,2BAAkC,GAAwB;IACxD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,0BAA0B,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE;cAC3D,mDAAmD,CACxD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/electron-build/kernel/transport.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * transport.ts — K10 ④: **通信入口端口** (与 `control.ts` / `run-lifecycle.ts` 同一套端口写法)
+ *
+ * 目标形态 (设计页): `transport → router → channel mailbox` —— 也就是说:
+ *   **上层只对"通信端口"说话, 不直接对某条传输 (hyperswarm / iroh / p2pNetwork) 说话**。
+ *   Pi 现在自己持有 3 个薄包装 (`getPeers` / `sendMessage` / `broadcast` → `p2pNetwork`),
+ *   那正是"Pi 内部通信发送逻辑"还没迁完的形状 (K10 ④)。
+ *
+ * 为什么用端口而不是直接调传输:
+ *   - 传输是可替换的 (hyperswarm / iroh / 以后的东西) ⇒ 上层不该 import 具体实现;
+ *   - 发送是**有副作用**的动作 ⇒ 要能审计 (谁发的 / 发给谁 / 成没成), 且**未注入即拒** (不静默丢弃消息);
+ *   - 与 `control.ts` / `run-lifecycle.ts` 保持同一种形状, 免得仓里出现第三种端口写法。
+ *
+ * 注: 本模块只做"入口收口", **不搬传输实现** (传输仍在 `src/network/**`); 判据见 `src/test/k10-transport-port.test.ts`。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRANSPORT_NEEDS_TARGET = exports.TRANSPORT_OPS = void 0;
+exports.transportPeersSync = transportPeersSync;
+exports.transportAudit = transportAudit;
+exports.resetTransportAudit = resetTransportAudit;
+exports.submitTransport = submitTransport;
+exports.TRANSPORT_OPS = ['send', 'broadcast', 'peers'];
+/** 哪些操作必须有目标 (send 要 peerId; broadcast / peers 不需要) */
+exports.TRANSPORT_NEEDS_TARGET = {
+    send: true,
+    broadcast: false,
+    peers: false,
+};
+/**
+ * 同步读对端 (K10 ④ 后半) —— 与 `submitTransport` 分开是因为**签名**而不是因为语义:
+ *   传输层是异步的, 但上层有同步调用点 (sync 签名不能凭空变 async)。
+ *   返回 `null` = 端口未注入 (调用方必须自己决定降级, 不许假装"没有对端" —— 那是两回事)。
+ */
+function transportPeersSync(ports) {
+    if (typeof ports?.peersSync !== 'function')
+        return null;
+    return ports.peersSync();
+}
+/** 端口用 `{ok:false}` 表达拒绝的归一化 (与另外两个端口同口径) */
+function portRefusal(res) {
+    if (res && typeof res === 'object' && 'ok' in res) {
+        const r = res;
+        if (r.ok === false)
+            return `端口拒绝: ${String(r.reason ?? '(未给原因)')}`;
+    }
+    return null;
+}
+const audit = [];
+const AUDIT_MAX = 200;
+/** 审计流水 (最近 N 条; 测试与运维可读) */
+function transportAudit() {
+    return audit;
+}
+function resetTransportAudit() {
+    audit.length = 0;
+}
+/** 提交一次通信动作。**唯一入口** —— 校验 → 派发到 port → 记审计; 一律返回结果对象, 不抛。 */
+async function submitTransport(req, ports) {
+    const op = req?.op;
+    const finish = (ok, detail, port, result) => {
+        audit.push({
+            at: Date.now(),
+            op,
+            origin: req?.origin ?? '(anonymous)',
+            target: String(req?.peerId ?? '(all)'),
+            ok,
+            detail,
+        });
+        if (audit.length > AUDIT_MAX)
+            audit.splice(0, audit.length - AUDIT_MAX);
+        return { ok, op, via: 'kernel-transport', detail, port, result };
+    };
+    if (!exports.TRANSPORT_OPS.includes(op))
+        return finish(false, `未知通信动作: ${String(req?.op)}`);
+    if (!req.origin)
+        return finish(false, '缺少 origin (审计要求: 不许匿名发送)');
+    if (exports.TRANSPORT_NEEDS_TARGET[op] && !req.peerId)
+        return finish(false, `${op} 缺少 peerId`);
+    const kind = req.kind ?? 'message';
+    const payload = req.payload ?? '';
+    if (op === 'send') {
+        if (typeof ports.send !== 'function')
+            return finish(false, 'port 未注入: send');
+        try {
+            const res = await ports.send(req.peerId, kind, payload);
+            const refusal = portRefusal(res);
+            return refusal ? finish(false, refusal, 'send', res) : finish(true, undefined, 'send', res);
+        }
+        catch (err) {
+            return finish(false, `send 失败: ${String(err?.message ?? err).slice(0, 160)}`);
+        }
+    }
+    if (op === 'broadcast') {
+        if (typeof ports.broadcast !== 'function')
+            return finish(false, 'port 未注入: broadcast');
+        try {
+            const res = await ports.broadcast(kind, payload);
+            const refusal = portRefusal(res);
+            return refusal ? finish(false, refusal, 'broadcast', res) : finish(true, undefined, 'broadcast', res);
+        }
+        catch (err) {
+            return finish(false, `broadcast 失败: ${String(err?.message ?? err).slice(0, 160)}`);
+        }
+    }
+    if (op === 'peers') {
+        if (typeof ports.peers !== 'function')
+            return finish(false, 'port 未注入: peers');
+        try {
+            const res = await ports.peers();
+            return finish(true, undefined, 'peers', res);
+        }
+        catch (err) {
+            return finish(false, `peers 失败: ${String(err?.message ?? err).slice(0, 160)}`);
+        }
+    }
+    return finish(false, `未处理的通信动作: ${String(op)}`);
+}
+//# sourceMappingURL=transport.js.map

package/dist/electron-build/kernel/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../src/kernel/transport.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;AAIU,QAAA,aAAa,GAA2B,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAEpF,uDAAuD;AAC1C,QAAA,sBAAsB,GAA2C;IAC5E,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,KAAK;IAChB,KAAK,EAAE,KAAK;CACb,CAAC;AA0BF;;;;GAIG;AACH,4BAAmC,KAAqB;IACtD,IAAI,OAAO,KAAK,EAAE,SAAS,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;AAC3B,CAAC;AAYD,6CAA6C;AAC7C,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,IAAK,GAA+B,EAAE,CAAC;QAC/E,MAAM,CAAC,GAAG,GAAyC,CAAC;QACpD,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,SAAS,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,KAAK,GAAiB,EAAE,CAAC;AAC/B,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,6BAA6B;AAC7B;IACE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;IACE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,8DAA8D;AACvD,KAAK,0BACV,GAAqB,EACrB,KAAqB;IAErB,MAAM,EAAE,GAAG,GAAG,EAAE,EAAiB,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,MAAe,EAAE,IAAa,EAAE,MAAgB,EAAoB,EAAE;QACjG,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,EAAE;YACF,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,aAAa;YACpC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,OAAO,CAAC;YACtC,EAAE;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC,CAAC;IAEF,IAAI,CAAC,QAAA,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,WAAW,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAClE,IAAI,QAAA,sBAAsB,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IAEvF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAElC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QAClB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,KAAK,EAAE,YAAY,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,KAAK,EAAE,iBAAiB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,KAAK,EAAE,aAAa,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,EAAE,aAAa,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/electron-build/llm/native-adapter.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createNativeAdapter = createNativeAdapter;
+exports.nativeAdapterFromEnv = nativeAdapterFromEnv;
+const tool_name_js_1 = require("./tool-name.js");
+/** 可被 abort 打断的 sleep (退避用) */
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const t = setTimeout(() => { signal?.removeEventListener?.('abort', onAbort); resolve(); }, ms);
+        const onAbort = () => { clearTimeout(t); reject(new Error('aborted during backoff')); };
+        if (signal?.aborted)
+            onAbort();
+        else
+            signal?.addEventListener?.('abort', onAbort, { once: true });
+    });
+}
+function createNativeAdapter(cfg) {
+    const timeoutMs = cfg.timeoutMs ?? 120_000;
+    const maxRetries = cfg.maxRetries ?? 3;
+    const url = `${String(cfg.baseUrl || '').replace(/\/+$/, '')}/chat/completions`;
+    let calls = 0; // 观测: 真发出去几次 (重试也算)
+    let retries = 0;
+    const adapter = {
+        providerId: cfg.providerId ?? 'native',
+        stats: () => ({ calls, retries }),
+        async chat(context, systemPrompt, signal, tools, purpose) {
+            const messages = [
+                { role: 'system', content: String(systemPrompt ?? '') },
+                { role: 'user', content: String(context ?? '') },
+            ];
+            let attempt = 0;
+            let lastErr;
+            while (attempt <= maxRetries) {
+                const ac = new AbortController();
+                const onAbort = () => ac.abort();
+                if (signal?.aborted)
+                    ac.abort();
+                else
+                    signal?.addEventListener?.('abort', onAbort, { once: true });
+                const timer = setTimeout(() => ac.abort(), timeoutMs);
+                try {
+                    calls += 1;
+                    // ⚠️ 出程必须**净化工具名** —— 端点只接受 `^[a-zA-Z0-9_-]{1,64}$` (实测: 原样转发 183 个工具
+                    //   里第 124 个不合规 ⇒ HTTP 400, 整轮空回复)。净化会把映射登记进**全局路由表**,
+                    //   回程由 pivot 的 `resolveApiToolName` 还原 ⇒ 上下层协议不变 (这正是"适配器边界"的一部分)。
+                    const wireTools = Array.isArray(tools) && tools.length > 0 ? (0, tool_name_js_1.sanitizeToolsForApi)(tools) : undefined;
+                    const res = await fetch(url, {
+                        method: 'POST',
+                        headers: { 'content-type': 'application/json', authorization: `Bearer ${cfg.apiKey}` },
+                        body: JSON.stringify({
+                            model: cfg.model,
+                            messages,
+                            ...(wireTools ? { tools: wireTools } : {}),
+                            stream: false,
+                        }),
+                        signal: ac.signal,
+                    });
+                    if (!res.ok) {
+                        const text = await res.text().catch(() => '');
+                        const retryable = res.status === 429 || res.status >= 500;
+                        if (retryable && attempt < maxRetries) {
+                            lastErr = new Error(`native-adapter HTTP ${res.status}: ${text.slice(0, 160)}`);
+                            attempt += 1;
+                            retries += 1;
+                            await sleep(1000 * 2 ** (attempt - 1), signal);
+                            continue;
+                        }
+                        // 非 429 的 4xx ⇒ **不重试** (重试无意义)。这里必须打标记: 否则下面的 catch
+                        //   会把它当"网络错"再退避重试 —— 踩过 (用例⑤: 一个 400 被发了 4 次)。
+                        const fatal = new Error(`native-adapter HTTP ${res.status}: ${text.slice(0, 200)}`);
+                        fatal.noRetry = true;
+                        throw fatal;
+                    }
+                    const data = await res.json();
+                    const msg = data?.choices?.[0]?.message ?? {};
+                    const toolCalls = Array.isArray(msg.tool_calls) && msg.tool_calls.length > 0 ? msg.tool_calls : undefined;
+                    return {
+                        reply: String(msg.content ?? ''),
+                        tokens: data?.usage?.total_tokens,
+                        toolCalls,
+                        messages: messages.concat([{ role: 'assistant', content: String(msg.content ?? '') }]),
+                    };
+                }
+                catch (e) {
+                    // 调用方主动 abort ⇒ 原样抛出 (别当网络错去重试)
+                    if (signal?.aborted)
+                        throw e;
+                    if (e?.noRetry)
+                        throw e; // 非 429 的 4xx 等: 不重试
+                    lastErr = e;
+                    if (attempt >= maxRetries)
+                        throw e;
+                    attempt += 1;
+                    retries += 1;
+                    await sleep(1000 * 2 ** (attempt - 1), signal);
+                }
+                finally {
+                    clearTimeout(timer);
+                    signal?.removeEventListener?.('abort', onAbort);
+                }
+            }
+            throw lastErr ?? new Error('native-adapter: 不可达');
+        },
+    };
+    return adapter;
+}
+/**
+ * 从环境装配一个 native 适配器 (供 `BOLLOON_NATIVE_ADAPTER=1` 开关使用)。
+ * 缺 key ⇒ 返回 null (调用方回落到原适配器, 不假装可用)。
+ */
+function nativeAdapterFromEnv(env = process.env) {
+    const apiKey = env.BOLLOON_NATIVE_API_KEY || env.DEEPSEEK_API_KEY || '';
+    if (!apiKey)
+        return null;
+    return createNativeAdapter({
+        baseUrl: env.BOLLOON_NATIVE_BASE_URL || 'https://api.deepseek.com/v1',
+        apiKey,
+        model: env.BOLLOON_NATIVE_MODEL || 'deepseek-chat',
+        providerId: 'native-openai-compatible',
+    });
+}
+//# sourceMappingURL=native-adapter.js.map

package/dist/electron-build/llm/native-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-adapter.js","sourceRoot":"","sources":["../../../src/llm/native-adapter.ts"],"names":[],"mappings":";;;;AAoBA,iDAAqD;AAarD,+BAA+B;AAC/B,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;;YAC1B,MAAM,EAAE,gBAAgB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6BAAoC,GAAwB;IAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC;IAChF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAU,oBAAoB;IAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,OAAO,GAA2F;QACtG,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,QAAQ;QACtC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,YAAoB,EAAE,MAAoB,EAAE,KAAa,EAAE,OAAgB;YACrG,MAAM,QAAQ,GAA6C;gBACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE;gBACvD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;aACjD,CAAC;YACF,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,OAAY,CAAC;YACjB,OAAO,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,MAAM,EAAE,OAAO;oBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;;oBAC3B,MAAM,EAAE,gBAAgB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;gBACtD,IAAI,CAAC;oBACH,KAAK,IAAI,CAAC,CAAC;oBACX,sEAAsE;oBACtE,uDAAuD;oBACvD,oEAAoE;oBACpE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,kCAAmB,EAAC,KAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC7G,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;wBAC3B,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE;wBACtF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,QAAQ;4BACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC1C,MAAM,EAAE,KAAK;yBACd,CAAC;wBACF,MAAM,EAAE,EAAE,CAAC,MAAM;qBAClB,CAAC,CAAC;oBACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;wBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;wBAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;wBAC1D,IAAI,SAAS,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;4BACtC,OAAO,GAAG,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;4BAChF,OAAO,IAAI,CAAC,CAAC;4BAAC,OAAO,IAAI,CAAC,CAAC;4BAC3B,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;4BAC/C,SAAS;wBACX,CAAC;wBACD,qDAAqD;wBACrD,gDAAgD;wBAChD,MAAM,KAAK,GAAQ,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;wBACzF,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;wBACrB,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,MAAM,IAAI,GAAQ,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,GAAG,GAAQ,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;oBACnD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC1G,OAAO;wBACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;wBAChC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY;wBACjC,SAAS;wBACT,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;qBACvF,CAAC;gBACJ,CAAC;gBAAC,OAAO,CAAM,EAAE,CAAC;oBAChB,gCAAgC;oBAChC,IAAI,MAAM,EAAE,OAAO;wBAAE,MAAM,CAAC,CAAC;oBAC7B,IAAK,CAAS,EAAE,OAAO;wBAAE,MAAM,CAAC,CAAC,CAAM,qBAAqB;oBAC5D,OAAO,GAAG,CAAC,CAAC;oBACZ,IAAI,OAAO,IAAI,UAAU;wBAAE,MAAM,CAAC,CAAC;oBACnC,OAAO,IAAI,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAC,CAAC;oBAC3B,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBACjD,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YACD,MAAM,OAAO,IAAI,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,8BAAqC,GAAG,GAAuC,OAAO,CAAC,GAAG;IACxF,MAAM,MAAM,GAAG,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACxE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,mBAAmB,CAAC;QACzB,OAAO,EAAE,GAAG,CAAC,uBAAuB,IAAI,6BAA6B;QACrE,MAAM;QACN,KAAK,EAAE,GAAG,CAAC,oBAAoB,IAAI,eAAe;QAClD,UAAU,EAAE,0BAA0B;KACvC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.js

@@ -1,3 +1,4 @@
+import { deliverThroughActor } from './kernel/channel-actor.js';
 import { createHyperswarmCommunicator, createTopic, KeyManager, AgentAuthManager, createVerificationManager, } from '@diap/sdk';
 import { irohTransport } from './network/iroh-transport.js';
 import { getLastAiTiming, getLastAiUsage } from './llm/pi-ai.js';
@@ -781,7 +782,8 @@ async function handleSummarize(task) {
     if (!task.documentPath)
         return `ERR|${JSON.stringify({ code: 'no_path' })}`;
     const a = await getAgent();
-    const { summary, qualityScore } = await a.summarizeDocument(task.documentPath);
+    const docPath = task.documentPath; // 闭包里 TS 不保留收窄 ⇒ 先收成局部 const
+    const { summary, qualityScore } = await deliverThroughActor(a, () => a.summarizeDocument(docPath));
     writeOut(`     ✅ 质量=${(qualityScore * 10).toFixed(1)}/10`);
     return `OK|${JSON.stringify({ id: task.id, type: 'summarize', qualityScore, summary })}`;
 }
@@ -790,11 +792,14 @@ async function handleImprove(task) {
         return `ERR|${JSON.stringify({ code: 'no_path_or_req' })}`;
     }
     const a = await getAgent();
-    const res = await a.improveDocument({
-        originalPath: task.documentPath,
-        requirements: task.requirements,
+    // 闭包里 TS 不保留收窄 ⇒ 先把两个字段收成局部 const
+    const docPath = task.documentPath;
+    const reqs = task.requirements;
+    const res = await deliverThroughActor(a, () => a.improveDocument({
+        originalPath: docPath,
+        requirements: reqs,
         context: `来自节点: ${task.from}`,
-    });
+    }));
     const ok = res.improved ?? false;
     writeOut(`     ✅ 改进${ok ? '成功' : '失败'}  质量=${(res.qualityScore * 10).toFixed(1)}/10  自动发送=${res.shouldAutoSend}`);
     return `OK|${JSON.stringify({
@@ -1421,7 +1426,7 @@ async function startCLI(commReady) {
                             new Promise((res) => setTimeout(() => res(null), 8000)),
                         ]);
                         if (a && typeof a.promptStream === 'function') {
-                            llm = (p) => a.promptStream(p, () => { }, undefined, cliActiveChannelId || undefined);
+                            llm = (p) => deliverThroughActor(a, () => a.promptStream(p, () => { }, undefined, cliActiveChannelId || undefined));
                         }
                     }
                     catch { /* 无 agent → 仅扫描 */ }
@@ -2001,7 +2006,7 @@ async function processInputInner(input, comm) {
                 return;
             }
             const agent = await getAgent();
-            const active = String(agent?.currentChannelId || '');
+            const active = String(agent?.actor?.state?.channelId || ''); // K5 步骤⑧: 本体在 actor (删访问器后这里曾静默变空 ⇒ 安全检查失效)
             if (rec.channelId && active && rec.channelId !== active) {
                 appendLine(`${C_ERROR}该运行属于 channel ${rec.channelId} (当前 ${active}) — 先 /channel 切过去再 /resume${RESET}`);
                 return;
@@ -2310,7 +2315,7 @@ async function processInputInner(input, comm) {
                         }
                         agent.setGoalId?.(req.goal.goalId);
                         agent.setContinuationGuards?.(req.guards || []);
-                        await agent.prompt(req.instruction);
+                        await deliverThroughActor(agent, () => agent.prompt(req.instruction));
                         return { runId: agent.getLastRunId?.() || agent.getRunId?.(), status: 'done' };
                     }
                     : undefined;
@@ -2869,7 +2874,7 @@ async function processInputInner(input, comm) {
             const a = await getAgent();
             const h = a.messageHistory ?? [];
             appendLine(`${C_ACCENT}当前会话:${RESET} ${C_DIM}${cliSessionKey || '—'}${RESET}`);
-            appendLine(`  ${C_DIM}channel:${RESET} ${a.currentChannelId || cliActiveChannelId || '—'}  ${C_DIM}agent:${RESET} ${a.currentAgentId || cliAgentId || '—'}`);
+            appendLine(`  ${C_DIM}channel:${RESET} ${a.actor?.state?.channelId || cliActiveChannelId || '—'}  ${C_DIM}agent:${RESET} ${a.currentAgentId || cliAgentId || '—'}`);
             appendLine(`  ${C_DIM}消息:${RESET} ${h.length} 条 ${h.length > 15 ? `${C_DIM}(${h.length - 15} 条已压缩)${RESET}` : ''}`);
         }
         catch (e) {
@@ -3398,7 +3403,7 @@ async function processInputInner(input, comm) {
             const a = await getAgent();
             appendLine(`${C_ACCENT}智能体:${RESET}`);
             appendLine(`  ${C_DIM}名称:${RESET} ${cliAgentName}`);
-            appendLine(`  ${C_DIM}agentId:${RESET} ${a.currentAgentId || '—'}`);
+            appendLine(`  ${C_DIM}agentId:${RESET} ${a.actor?.state?.agentId || '—'}`); // K5 步骤⑧: 本体在 actor
             appendLine(`  ${C_DIM}channel:${RESET} ${cliActiveChannelId || '—'}`);
         }
         catch { /* 静默 */ }
@@ -4111,7 +4116,7 @@ async function processInputInner(input, comm) {
         cliTurnStartedAt = Date.now();
         cliTurnReplyBytes = 0;
         cliTurnToolCount = 0;
-        const response = await a.prompt(trimmed, {
+        const response = await deliverThroughActor(a, () => a.prompt(trimmed, {
             onStream: (e) => {
                 // 2026-08-07: 中间思考/状态显示 — 之前只显示工具步骤, LLM 的思考过程
                 //   (thinking / status / phase / Reflection) 全被丢弃 → 用户只能看到输入和最终输出
@@ -4219,7 +4224,7 @@ async function processInputInner(input, comm) {
                     }
                 }
             }
-        });
+        }));
         // 智能体回复框
         appendLine(renderAgentMessage(response));
         try {
@@ -4489,7 +4494,7 @@ goalFlag) {
                     error = response;
                     break;
                 }
-                const result = await a.summarizeDocument(filePath, ctx.join(' '));
+                const result = await deliverThroughActor(a, () => a.summarizeDocument(filePath, ctx.join(' ')));
                 response = `📝 摘要:\n${result.summary}\n\n质量评分: ${(result.qualityScore * 10).toFixed(1)}/10`;
                 metadata.qualityScore = result.qualityScore;
                 break;
@@ -4501,10 +4506,10 @@ goalFlag) {
                     error = response;
                     break;
                 }
-                const result = await a.improveDocument({
+                const result = await deliverThroughActor(a, () => a.improveDocument({
                     originalPath: filePath,
                     requirements: req.join(' ')
-                });
+                }));
                 response = result.newContent || '';
                 if (!result.improved) {
                     response = '错误: 改进失败';
@@ -4685,7 +4690,7 @@ goalFlag) {
                     error = response;
                     break;
                 }
-                response = await a.prompt(text);
+                response = await deliverThroughActor(a, () => a.prompt(text));
                 break;
             }
             case 'tools': {
@@ -4740,6 +4745,25 @@ goalFlag) {
             case 'harness-skill': {
                 if (!harness) {
                     harness = createBollharnessIntegration();
+                    // 2026-10-02 (K7): **生产活路径必须过门** —— 这条路径原先直调 registry (skill 旁路)。
+                    //   门 = PiAgentSession 的 Harness 判定 (`createSkillGuard()`, 只给判定; 执行仍在 adapter 的唯一执行点)。
+                    //   **fail-closed**: 门建不起来 ⇒ 注入 deny-all (拒绝执行), 绝不留"没门"状态 ——
+                    //   "门坏了静默等于没门"比没门更危险 (与 pivot loop / adapter 同一条纪律)。
+                    try {
+                        const gateSession = await createAgentSession({ cwd: process.cwd(), peerId: 'harness-skill' });
+                        if (typeof gateSession.createSkillGuard !== 'function') {
+                            throw new Error('该 session 实现未提供 createSkillGuard');
+                        }
+                        harness.setSkillGuard(gateSession.createSkillGuard());
+                    }
+                    catch (guardErr) {
+                        console.warn(`[K7] skill 门未能建立 ⇒ fail-closed (拒绝执行): ${String(guardErr?.message || guardErr)}`);
+                        harness.setSkillGuard(async () => ({
+                            allow: false,
+                            rejectedBy: 'harness-unavailable',
+                            reason: `skill 门未能建立: ${String(guardErr?.message || guardErr).slice(0, 120)}`,
+                        }));
+                    }
                 }
                 const [skillName, action] = args;
                 if (!skillName) {
@@ -5340,7 +5364,7 @@ async function runNonInteractive(args, comm) {
         }
         else if (prompt) {
             const a = await getAgent();
-            writeOut(await a.prompt(prompt));
+            writeOut(await deliverThroughActor(a, () => a.prompt(prompt)));
         }
         console.log = originalLog;
         await fs.writeFile(output, outputBuffer.trim(), 'utf-8');
@@ -5353,7 +5377,7 @@ async function runNonInteractive(args, comm) {
         const startTime = Date.now();
         const a = await getAgent();
         try {
-            const response = await a.prompt(prompt);
+            const response = await deliverThroughActor(a, () => a.prompt(prompt));
             const elapsed = Date.now() - startTime;
             if (json) {
                 writeOut(JSON.stringify({ success: true, response, elapsedMs: elapsed }, null, 2));
@@ -5383,7 +5407,7 @@ async function runNonInteractive(args, comm) {
         const a = await getAgent();
         let response;
         try {
-            response = await a.prompt(prompt);
+            response = await deliverThroughActor(a, () => a.prompt(prompt));
         }
         catch (e) {
             response = `错误: ${e.message}`;

package/dist/ios/bolloon-web.json

@@ -1,10 +1,10 @@
 {
   "schema": "bolloon-mobile-web/1",
-  "version": "0.5.1",
+  "version": "0.6.1",
   "channel": "stable",
   "build": "stable",
-  "commit": "40006e67bf87e892569dd0b02cf2456fddcbbfaf",
-  "builtAt": "2026-09-27T05:37:37.788Z",
+  "commit": "6e2afcdd8723004df91715d48cf7bf7d291ab7af",
+  "builtAt": "2026-10-04T08:00:57.589Z",
   "layer": "web",
   "note": "web 资源层构建戳 (手机端 OTA 的身份第 ③ 级回退; 装机后以 OTA state.json 为准)"
 }