@fg-lab/amadeus-qq 1.2.1 → 1.2.2

package/src/permissions.js

@@ -59,6 +59,9 @@ export const CAPABILITY_CATALOG = Object.freeze([
   Object.freeze({ id: 'qq.media.read', implemented: true }),
   Object.freeze({ id: 'qq.owner.workspace', implemented: true }),
   Object.freeze({ id: 'qq.owner.tools', implemented: true }),
+  // Explicitly grants only the session-scoped Life read tools. This is not an
+  // Owner tool grant and never exposes Life admin/intent mutation surfaces.
+  Object.freeze({ id: 'amadeus.life.read', implemented: true }),
   Object.freeze({ id: 'qq.reaction.write', implemented: true }),
   Object.freeze({ id: 'qq.poke', implemented: true }),
   Object.freeze({ id: 'qq.recall', implemented: true }),
@@ -77,6 +80,8 @@ export const CAPABILITY_CATALOG = Object.freeze([
   Object.freeze({ id: 'qq.qzone.publish', implemented: true }),
   Object.freeze({ id: 'dsh.shell', implemented: false }),
 ])
+export const LIFE_READ_CAPABILITY = 'amadeus.life.read'
+export const LIFE_READ_TOOLS = Object.freeze(['life_shared_read', 'life_health'])
 const KNOWN_CAPABILITIES = new Set(CAPABILITY_CATALOG.map(item => item.id))
 const DIRECTORY_CAPABILITIES = new Set(['qq.friends.read', 'qq.groups.read'])
 const QZONE_CAPABILITIES = new Set(['qq.qzone.use', 'qq.qzone.read', 'qq.qzone.publish'])
@@ -143,6 +148,7 @@ export class PermissionEngine {
       throw new TypeError('groupDefaultMode cannot be owner-agent: groups cannot be Owner Agent Scenes')
     }
     this.ownerPrivateIds = idSet(raw.ownerPrivateIds ?? [], 'ownerPrivateIds')
+    this.lifeReadPrivateIds = idSet(raw.lifeReadPrivateIds ?? [], 'lifeReadPrivateIds')
     this.ownerTools = stringSet(raw.ownerTools ?? [], 'ownerTools')
     this.globalDeny = stringSet(raw.globalDeny ?? [], 'globalDeny')
     this.accountGrants = raw.accountGrants ?? {}
@@ -197,6 +203,19 @@ export class PermissionEngine {
       }
       return decision(true, 'owner-agent')
     }
+    if (capability === LIFE_READ_CAPABILITY) {
+      // Life tools are session-scoped and read-only, but still require an
+      // explicit Scene grant so ordinary QQ chat cannot discover them by
+      // default. A configured private allowlist is an equivalent explicit
+      // authorization for this narrow read-only capability. The Life module
+      // performs the final binding/ACL check.
+      if (scene.kind === 'private' && this.lifeReadPrivateIds.has(scene.peerId) && override !== 'deny') {
+        return decision(true, 'configured-life-read-private')
+      }
+      return override === 'allow'
+        ? decision(true, 'scene-allow')
+        : decision(false, override === 'deny' ? 'scene-deny' : 'life-read-explicit')
+    }
     if (capability === 'qq.owner.workspace') {
       // The file surface is never implied by owner-agent mode and is never
       // reachable from Safe Chat; the Owner must explicitly allow this Scene.
@@ -248,3 +267,4 @@ export class PermissionEngine {
     return decision(MODE_TO_CAPABILITIES[mode].includes(capability), 'mode')
   }
 }
+

package/src/preset-guard.mjs

@@ -49,6 +49,10 @@ export const OWNER_NATIVE_TOOLS = Object.freeze([
  */
 export const MEMORY_READ_TOOLS = Object.freeze(['memory_search', 'memory_list', 'memory_get'])
 const MEMORY_READ_TOOL_SET = new Set(MEMORY_READ_TOOLS)
+// Session-bound Life views are safe to expose by name; the connector applies
+// the explicit Scene capability at execution time.
+export const LIFE_READ_TOOLS = Object.freeze(['life_shared_read', 'life_health'])
+const LIFE_READ_TOOL_SET = new Set(LIFE_READ_TOOLS)
 
 /**
  * Cordis service contract for the trusted-Scene read capability.
@@ -183,6 +187,8 @@ export function resolveQQPermissionPolicy(config = {}) {
   }
   const allowSearch = config.allowSearch === undefined ? false : config.allowSearch
   if (typeof allowSearch !== 'boolean') throw new TypeError('QQ preset allowSearch must be a boolean')
+  const allowLifeRead = config.allowLifeRead === undefined ? false : config.allowLifeRead
+  if (typeof allowLifeRead !== 'boolean') throw new TypeError('QQ preset allowLifeRead must be a boolean')
   const entry = QQ_PERMISSION_LEVELS[level]
   // Memory readers are intentionally not part of the static preset policy.
   // They are opened only after the live Memory service declares the trusted
@@ -191,7 +197,7 @@ export function resolveQQPermissionPolicy(config = {}) {
   const tools = allowSearch
     ? [...toolsForLevel(level), 'web_search']
     : toolsForLevel(level)
-  return Object.freeze({ level, levelId: entry.id, tools: Object.freeze(tools), allowSearch })
+  return Object.freeze({ level, levelId: entry.id, tools: Object.freeze(tools), allowSearch, allowLifeRead })
 }
 
 /**
@@ -211,7 +217,7 @@ export function apply(ctx, config = {}) {
   // policy only when the trusted-Scene contract is present.
   const OPTIONAL_TOOLS = new Set([
     'qq_send_media', 'qq_upload_file', 'qq_qzone', 'qq_account_profile', OWNER_WORKSPACE_TOOL,
-    ...MEMORY_READ_TOOLS,
+    ...MEMORY_READ_TOOLS, ...LIFE_READ_TOOLS,
   ])
   const OWNER_NATIVE = new Set(OWNER_NATIVE_TOOLS)
   // Host plugins can register tools after this preset starts. Keep the QQ
@@ -403,6 +409,11 @@ export function apply(ctx, config = {}) {
         ? undefined
         : 'QQ Memory trusted Scene ACL read contract is unavailable'
     }
+    if (LIFE_READ_TOOL_SET.has(tool)) {
+      return authorizeCapability(exec, 'amadeus.life.read')
+        ? undefined
+        : 'QQ Session Life read permission denied'
+    }
     if (allowed.has(tool)) return undefined
     if (Object.hasOwn(QQ_TOOL_CONTRACT, tool)) {
       return `QQ Session permission level ${policy.level} does not allow ${tool}`
@@ -439,6 +450,7 @@ export function apply(ctx, config = {}) {
     const fresh = schemas
       .map(schema => schema?.name)
       .filter(name => typeof name === 'string' && !MEMORY_READ_TOOL_SET.has(name) &&
+        !LIFE_READ_TOOL_SET.has(name) &&
         !allowed.has(name) &&
         !(policy.level === 4 && ownerHostTool(name)) && name !== 'run_code' && !deniedVisible.has(name))
     if (fresh.length === 0) return
@@ -479,6 +491,7 @@ export function apply(ctx, config = {}) {
     const visiblePolicy = [
       ...policy.tools,
       ...(memoryReadGranted ? MEMORY_READ_TOOLS : []),
+      ...(policy.allowLifeRead ? LIFE_READ_TOOLS : []),
       ...(policy.level === 4
         ? [OWNER_WORKSPACE_TOOL, ...[...known].filter(ownerHostTool)]
         : []),
@@ -577,3 +590,4 @@ export function apply(ctx, config = {}) {
     }))
   }
 }
+