@ljwei-stak/dsh-model-route-bot 0.66.3 → 0.67.0

package/apps/integration-client/binding-model.mjs

@@ -0,0 +1,262 @@
+/**
+ * Pure state for the Bot binding editor.
+ *
+ * The Host's committed catalog is the only source of providers, models, machines,
+ * capabilities, official tools and funding scopes: nothing here invents a route,
+ * a workspace, a capability or an execution mode the Host never offered. A blank
+ * number stays blank (null), never 0, so "0 表示禁止付费" keeps its meaning and an
+ * unfinished field is never silently completed with a default.
+ *
+ * No React and no DOM, so the integration specs exercise the same rules the
+ * component renders.
+ */
+
+export const BOT_BINDING_SCHEMA = 1
+
+/** Execution modes the stored schema accepts, least privileged first. */
+export const EXECUTION_MODES = Object.freeze(['read-only', 'workspace-write', 'cli-native'])
+export const MODE_LABEL = Object.freeze({
+  'read-only': '只读执行',
+  'workspace-write': '可写工作区',
+  'cli-native': 'CLI 自身权限',
+})
+export const MODE_HELP = Object.freeze({
+  'read-only': 'CLI 只能读取已授权内容，不写工作区。',
+  'workspace-write': 'CLI 可写入此 Bot 已授权的工作区。',
+  'cli-native': '沿用 CLI 自己的权限设置，宿主不再额外收紧。',
+})
+
+export const FUNDING_MODES = Object.freeze([
+  { value: 'api', label: 'API（按金额）', help: '按 Token 计价，需要单价、请求上界与每日/每月预算。' },
+  { value: 'subscription', label: '订阅（按次数）', help: '按调用次数计数，不会自动回退到 API。' },
+])
+export const ROUTING_PRESETS = Object.freeze([
+  { value: '', label: '沿用全局预设' },
+  { value: 'economy', label: '省钱优先' },
+  { value: 'balanced', label: '均衡' },
+  { value: 'quality', label: '效果优先' },
+])
+
+export const routeOf = model => (model && model.provider && model.model ? `${model.provider}/${model.model}` : '')
+
+export const splitRoute = route => {
+  const text = typeof route === 'string' ? route : ''
+  const at = text.indexOf('/')
+  return at < 0 ? { provider: '', model: '' } : { provider: text.slice(0, at), model: text.slice(at + 1) }
+}
+
+export const findModel = (catalog, route) => (catalog?.models ?? []).find(item => routeOf(item) === route) ?? null
+
+/** Providers with their exact routes, in the order the Host listed them. */
+export function providerGroups(catalog) {
+  const groups = new Map()
+  for (const item of catalog?.models ?? []) {
+    if (!item?.provider) continue
+    if (!groups.has(item.provider)) groups.set(item.provider, { provider: item.provider, models: [] })
+    groups.get(item.provider).models.push({
+      route: routeOf(item), model: item.model, label: item.label ?? item.model,
+      cliModels: [...(item.cliModels ?? [])],
+    })
+  }
+  return [...groups.values()]
+    .map(group => ({ ...group, models: group.models.sort((left, right) => left.route.localeCompare(right.route)) }))
+    .sort((left, right) => left.provider.localeCompare(right.provider))
+}
+
+/** A stored blank stays blank; a stored 0 stays "0". */
+export const textOf = value => (value === null || value === undefined ? '' : String(value))
+
+export const numberOrNull = text => {
+  if (text === null || text === undefined) return null
+  const raw = String(text).trim()
+  if (raw === '') return null
+  const value = Number(raw)
+  return Number.isFinite(value) ? value : null
+}
+
+export function workspaceOptions(catalog) {
+  return (catalog?.machines ?? []).map(machine => ({
+    machineId: machine.machineId, label: machine.label ?? machine.machineId,
+    location: machine.location, status: machine.status ?? 'unknown',
+    roots: (machine.roots ?? []).map(root => ({ rootId: root.rootId, label: root.label ?? root.rootId, modes: [...(root.modes ?? [])] })),
+  }))
+}
+
+export const workspaceKey = (machineId, rootId) => `${machineId ?? ''}/${rootId ?? ''}`
+
+export const accountFor = (accounts, provider) => (accounts?.items ?? []).find(item => item.provider === provider) ?? null
+
+/** A funding scope only covers the modes and routes the Host published for it. */
+export function scopeAllows(scope, mode, route) {
+  if (!scope) return false
+  if (Array.isArray(scope.modes) && scope.modes.length > 0 && !scope.modes.includes(mode)) return false
+  if (Array.isArray(scope.models) && scope.models.length > 0 && route && !scope.models.some(item => routeOf(item) === route)) return false
+  return true
+}
+
+/**
+ * One card per official tool the Host offers. `identities` are the CLI models the
+ * Host verified for the currently selected API model; a grant whose cliModel is
+ * not in that list is stale and the Host would refuse it, so it is shown instead
+ * of being dropped or quietly re-pointed at another model.
+ */
+export function toolCards({ catalog, model, grants }) {
+  const verified = model?.cliModels ?? []
+  return (catalog?.tools ?? []).map(tool => {
+    const identities = verified.filter(item => item.toolId === tool.toolId)
+    const grant = (grants ?? []).find(item => item.toolId === tool.toolId) ?? null
+    const modes = (tool.modes ?? []).filter(mode => EXECUTION_MODES.includes(mode))
+    return {
+      toolId: tool.toolId, label: tool.label ?? tool.toolId, vendor: tool.vendor ?? '', source: tool.source ?? '',
+      modes, grantTools: [...(tool.grantTools ?? [])], identities, grant,
+      stale: Boolean(grant) && !identities.some(item => item.model === grant.cliModel),
+    }
+  }).sort((left, right) => left.toolId.localeCompare(right.toolId))
+}
+
+/** The least privileged mode the Host offers for a tool: a grant never starts wide. */
+export function defaultMode(modes) {
+  const offered = (modes ?? []).filter(mode => EXECUTION_MODES.includes(mode))
+  return offered.includes('read-only') ? 'read-only' : offered[0] ?? 'read-only'
+}
+
+export function seedForm(record, accounts) {
+  const settings = record?.settings ?? {}, catalog = record?.catalog ?? {}
+  const groups = providerGroups(catalog)
+  const fundingAccount = accountFor(accounts, settings.model?.provider)
+  const grants = settings.machineGrants ?? []
+  const workspaceRef = settings.workspaceRef ?? grants[0] ?? null
+  const machineId = workspaceRef?.machineId ?? '', rootId = workspaceRef?.rootId ?? ''
+  const grant = grants.find(item => item.machineId === machineId && item.rootId === rootId) ?? null
+  return {
+    provider: settings.model?.provider ?? (groups.length === 1 ? groups[0].provider : ''),
+    model: routeOf(settings.model),    enabled: settings.enabled === true,
+    workspace: machineId && rootId ? workspaceKey(machineId, rootId) : '',
+    workspaceMode: grant?.mode ?? 'read-only',
+    capabilities: [...(settings.capabilities ?? [])],
+    officialTools: (settings.officialTools ?? []).map(tool => ({ ...tool })),
+    fundingMode: settings.funding?.mode ?? 'api',
+    input: textOf(settings.funding?.pricing?.input), output: textOf(settings.funding?.pricing?.output),
+    ...(settings.mainRoutes ? { mainRoutes: structuredClone(settings.mainRoutes) } : {}),
+    maxInputTokens: textOf(settings.funding?.request?.maxInputTokens), maxOutputTokens: textOf(settings.funding?.request?.maxOutputTokens),
+    daily: textOf(settings.funding?.dailyBudgetUsd), monthly: textOf(settings.funding?.monthlyBudgetUsd),
+    dailyCalls: textOf(settings.funding?.subscription?.dailyCalls), monthlyCalls: textOf(settings.funding?.subscription?.monthlyCalls),
+    maxConcurrentTasks: textOf(settings.maxConcurrentTasks),
+    // The funding scope's own limits, not an invented default.
+    accountDaily: textOf(fundingAccount?.dailyLimitUsd), accountMonthly: textOf(fundingAccount?.monthlyLimitUsd),
+    routing: {
+      preset: settings.routing?.preset ?? '',
+      dailyBudgetUsd: textOf(settings.routing?.dailyBudgetUsd),
+      monthlyBudgetUsd: textOf(settings.routing?.monthlyBudgetUsd),
+    },
+  }
+}
+
+/**
+ * Build the stored payload. A blank numeric field is sent as null, never 0, and a
+ * half-filled group is sent as null rather than as an object holding nulls the
+ * stored schema would reject.
+ */
+export function buildBinding({ form, model, account, machine, root }) {
+  const funding = { mode: form.fundingMode, scopeId: account?.enabled ? account.id : null,
+    pricing: null, request: null, dailyBudgetUsd: null, monthlyBudgetUsd: null, subscription: null }
+  if (form.fundingMode === 'api') {
+    const input = numberOrNull(form.input), output = numberOrNull(form.output)
+    funding.pricing = input === null || output === null ? null : { input, output }
+    const maxInputTokens = numberOrNull(form.maxInputTokens), maxOutputTokens = numberOrNull(form.maxOutputTokens)
+    funding.request = maxInputTokens === null || maxOutputTokens === null ? null : { maxInputTokens, maxOutputTokens }
+    funding.dailyBudgetUsd = numberOrNull(form.daily)
+    funding.monthlyBudgetUsd = numberOrNull(form.monthly)
+  } else {
+    const dailyCalls = numberOrNull(form.dailyCalls), monthlyCalls = numberOrNull(form.monthlyCalls)
+    funding.subscription = dailyCalls === null || monthlyCalls === null ? null : { dailyCalls, monthlyCalls }
+  }
+  const routing = {
+    preset: form.routing.preset === '' ? null : form.routing.preset,
+    dailyBudgetUsd: numberOrNull(form.routing.dailyBudgetUsd),
+    monthlyBudgetUsd: numberOrNull(form.routing.monthlyBudgetUsd),
+  }
+  return {
+    schemaVersion: BOT_BINDING_SCHEMA,
+    enabled: form.enabled === true,
+    model: model ? { provider: model.provider, model: model.model } : null,
+    officialTools: (form.officialTools ?? []).map(tool => ({ toolId: tool.toolId, cliModel: tool.cliModel, mode: tool.mode }))
+      .sort((left, right) => left.toolId.localeCompare(right.toolId)),
+    machineGrants: machine && root ? [{ machineId: machine.machineId, rootId: root.rootId, mode: form.workspaceMode, capabilities: [] }] : [],
+    capabilities: [...(form.capabilities ?? [])].sort(),
+    workspaceRef: machine && root ? { kind: machine.location ?? 'local', machineId: machine.machineId, rootId: root.rootId } : null,
+    funding,
+    maxConcurrentTasks: numberOrNull(form.maxConcurrentTasks),
+    routing: routing.preset === null && routing.dailyBudgetUsd === null && routing.monthlyBudgetUsd === null ? null : routing,
+  }
+}
+
+const apiFields = [
+  ['input', '输入价格（USD / 百万 Token）'], ['output', '输出价格（USD / 百万 Token）'],
+  ['maxInputTokens', '最大输入 Token'], ['maxOutputTokens', '最大输出 Token'],
+  ['daily', 'Bot 每日预算（USD）'], ['monthly', 'Bot 每月预算（USD）'],
+]
+const subscriptionFields = [['dailyCalls', '每日订阅调用次数'], ['monthlyCalls', '每月订阅调用次数']]
+
+/**
+ * What this window can already see as missing, mirrored from the Host's own
+ * admission rules. The Host still validates every save; this only refuses a call
+ * that could not succeed, and never widens what is sent.
+ */
+export function bindingProblems({ form, model, account, machine, root, catalog, scope, mainRoutes = false }) {
+  const problems = []
+  // The stored schema needs a usable concurrency even for a disabled binding.
+  const concurrency = numberOrNull(form.maxConcurrentTasks)
+  if (concurrency === null || !Number.isInteger(concurrency) || concurrency < 1 || concurrency > 32) problems.push('最大并发任务数必须是 1 至 32 的整数。')
+  if (form.enabled !== true) return problems
+  if (!model) problems.push('请选择目录中的准确模型；留空表示此绑定保持停用。')
+  if (!mainRoutes && model?.fundingModes && !model.fundingModes.includes(form.fundingMode)) problems.push('此模型不支持所选资金渠道，请选择宿主列出的渠道。')
+  if (!machine || !root) problems.push('请选择已登记的工作区（机器与根目录）。')
+  else if (!root.modes.includes(form.workspaceMode)) problems.push(`所选根目录不再支持${form.workspaceMode === 'read-only' ? '只读' : '写入'}模式，请重新选择。`)
+  if (!mainRoutes) {
+    if (!account) problems.push('宿主目录里没有这个提供商的资金范围，请刷新或改选模型。')
+    else if (!account.enabled) problems.push(`${account.provider} 资金范围尚未启用；它不是厂商余额，需要本地预算上限。`)
+    else if (!scopeAllows(scope, form.fundingMode, routeOf(model))) problems.push('资金范围不支持所选渠道或准确模型，请重新选择。')
+    for (const [key, label] of form.fundingMode === 'api' ? apiFields : subscriptionFields) {
+      if (numberOrNull(form[key]) === null) problems.push(`${label}尚未填写；0 表示禁止付费/调用，空值表示未配置。`)
+    }
+  }
+  for (const id of form.capabilities ?? []) {
+    if (!(catalog?.capabilities ?? []).some(item => item.id === id)) problems.push(`能力 ${id} 已不在宿主目录，请取消勾选。`)
+  }
+  for (const tool of form.officialTools ?? []) {
+    if (!(catalog?.tools ?? []).some(item => item.toolId === tool.toolId && (item.modes ?? []).includes(tool.mode))) {
+      problems.push(`${tool.toolId} 尚未获准使用该执行模式，请移除或改选宿主提供的模式。`)
+    } else if (!(model?.cliModels ?? []).some(item => item.toolId === tool.toolId && item.model === tool.cliModel)) {
+      problems.push(`${tool.toolId} / ${tool.cliModel} 与当前模型的 CLI 身份尚未核验，请移除后重新授予。`)
+    }
+  }
+  return problems
+}
+
+const FAILURES = {
+  BOT_SETTINGS_CONFLICT: '绑定已在另一窗口修改。请刷新后按最新配置重新提交。',
+  MAIN_ROUTES_RELOAD_REQUIRED: 'Main 路线配置已更新。请载入宿主最新设置后再保存。',
+  MAIN_ROUTE_FUNDING_UNAVAILABLE: '宿主无法核验这条路线的模型、资金范围或限额。请重新检查路线配置。',
+  BOT_SETTINGS_SCOPE_DENIED: '宿主拒绝了这次授权：所选模型、工具、模式或工作区已不在有效目录内。',
+  BOT_SETTINGS_INCOMPLETE: '宿主认为绑定还不完整：模型、工作区、资金范围或预算缺失。',
+  BOT_SETTINGS_UNKNOWN_TOOL: '官方工具必须来自宿主固定注册表。',
+  BOT_SETTINGS_RETIRED: '此 Bot 已退休，身份不能重新授予。',
+  BOT_SETTINGS_UNKNOWN_BOT: '此 Bot 不在已提交的宿主目录，请刷新。',
+  REMOTE_OWNER_REQUIRED: '请以已认证的宿主拥有者身份保存 Bot 绑定。',
+  BOT_SETTINGS_PUBLISH_FAILED: '绑定已提交，但宿主授权同步失败；此 Bot 已暂停，请刷新。',
+}
+
+/** Host failures are shown as the Host words them, never as a success. */
+export const failureText = error => {
+  const code = error?.code
+  const message = error?.message ? String(error.message) : ''
+  // A mapped code keeps the Host's own sentence: it names the exact route, tool or
+  // mode that was refused, which a generic sentence would hide.
+  if (code && FAILURES[code]) return message ? `${FAILURES[code]}（宿主：${message}）` : FAILURES[code]
+  return message || '保存失败，宿主没有返回原因。'
+}
+
+export const workspaceLabel = (machine, root) => `${machine?.label ?? machine?.machineId ?? '未选择'} / ${root?.label ?? root?.rootId ?? '未选择'}`
+
+export const toolSourceLabel = source => source || '厂商官方 CLI'

package/apps/integration-client/binding.css

@@ -0,0 +1,144 @@
+/* Bot binding editor: a Bot-centred, stepped model picker plus one independent
+   official-tools module. Tokens come from the product stylesheet, so light and
+   dark themes and the 375px layout follow the rest of the workspace. */
+
+/* The shared muted token sits at 4.39:1 on the light page background, just under AA
+   for 12px text; this local token keeps the same grey family above it. */
+.bb-root { --bb-muted: #6b6b73; display: flex; flex-direction: column; gap: 18px; min-width: 0; }
+html body[data-bp-appearance="dark"] .bb-root,
+html body[data-ds-dark-theme]:not([data-bp-appearance="light"]) .bb-root { --bb-muted: #a8a8b0; }
+.bb-head { display: flex; flex-direction: column; gap: 5px; min-width: 0; }
+.bb-eyebrow { margin: 0; color: var(--bb-muted, #6b6b73); font-size: 11px; font-weight: 500; letter-spacing: .04em; }
+.bb-title { margin: 0; font-size: 15px; font-weight: 600; letter-spacing: -.01em; color: var(--bp-ink, #242427); }
+.bb-sub { margin: 0; color: var(--bb-muted, #6b6b73); font-size: 12px; line-height: 1.6; }
+.bb-summary { display: flex; flex-wrap: wrap; gap: 6px 18px; margin: 10px 0 0; padding: 10px 12px; border: 1px solid var(--bp-border, #e6e6e9); border-radius: 9px; background: var(--bp-subtle, #f6f6f7); }
+.bb-summary div { display: flex; align-items: baseline; gap: 6px; min-width: 0; font-size: 12px; }
+.bb-summary dt { color: var(--bb-muted, #6b6b73); font-size: 11px; white-space: nowrap; }
+.bb-summary dd { margin: 0; color: var(--bp-ink, #242427); overflow-wrap: anywhere; }
+
+.bb-steps { display: flex; flex-direction: column; gap: 12px; margin: 0; padding: 0; list-style: none; counter-reset: none; }
+.bb-step { border: 1px solid var(--bp-border, #e6e6e9); border-radius: 11px; background: var(--bp-surface, #fff); min-width: 0; }
+.bb-step[data-state=done] { border-color: color-mix(in srgb, var(--bp-focus, #617b9f) 42%, var(--bp-border, #e6e6e9)); }
+.bb-step[data-state=blocked] { border-color: color-mix(in srgb, var(--bp-warning, #8b6526) 45%, var(--bp-border, #e6e6e9)); }
+.bb-step-head { display: flex; align-items: flex-start; gap: 11px; padding: 13px 15px 0; }
+.bb-step-index { display: inline-flex; align-items: center; justify-content: center; width: 22px; height: 22px; flex: none; margin-top: 1px; border: 1px solid var(--bp-border, #e6e6e9); border-radius: 7px; background: var(--bp-subtle, #f6f6f7); color: var(--bb-muted, #6b6b73); font-size: 11px; font-weight: 550; }
+.bb-step[data-state=done] .bb-step-index { color: var(--bp-on-solid, #fff); background: var(--bp-solid, #242427); border-color: var(--bp-solid, #242427); }
+.bb-step-head strong { display: block; font-size: 13px; font-weight: 550; color: var(--bp-ink, #242427); }
+.bb-step-head p { margin: 3px 0 0; color: var(--bb-muted, #6b6b73); font-size: 12px; line-height: 1.55; }
+.bb-step-state { margin-left: auto; flex: none; }
+.bb-step-body { display: flex; flex-direction: column; gap: 10px; padding: 12px 15px 15px; }
+
+.bb-search { display: flex; align-items: center; gap: 8px; min-height: 33px; padding: 0 10px; border: 1px solid var(--bp-border, #e6e6e9); border-radius: 8px; background: var(--bp-subtle, #f6f6f7); color: var(--bb-muted, #6b6b73); }
+.bb-search:focus-within { border-color: var(--bp-focus, #617b9f); }
+.bb-search input { flex: 1; min-width: 0; border: 0; background: none; color: var(--bp-ink, #242427); font-size: 13px; outline: none; }
+.bb-search .bb-icon { display: inline-flex; flex: none; }
+
+.bb-list { display: flex; flex-direction: column; gap: 6px; margin: 0; padding: 0; list-style: none; }
+.bb-list-scroll { max-height: 268px; overflow-y: auto; overscroll-behavior: contain; padding-right: 2px; }
+.bb-option { display: flex; align-items: center; gap: 10px; width: 100%; padding: 8px 11px; border: 1px solid var(--bp-border, #e6e6e9); border-radius: 9px; background: var(--bp-surface, #fff); color: var(--bp-ink, #242427); font-size: 13px; text-align: left; cursor: pointer; transition: background-color .14s, border-color .14s; }
+.bb-option:hover { background: var(--bp-subtle, #f6f6f7); border-color: var(--bp-quiet, #a1a1a9); }
+.bb-option[aria-pressed=true] { border-color: var(--bp-solid, #242427); background: var(--bp-hover, #ededf0); font-weight: 500; }
+.bb-option:disabled { opacity: .5; cursor: default; }
+.bb-option-inline { width: auto; flex: none; }
+.bb-option-text { display: flex; flex-direction: column; gap: 2px; min-width: 0; flex: 1; }
+.bb-option-text strong { font-size: 13px; font-weight: 500; overflow-wrap: anywhere; }
+.bb-option-text small { color: var(--bb-muted, #6b6b73); font-size: 11px; }
+.bb-option-mark { display: inline-flex; align-items: center; gap: 5px; flex: none; color: var(--bb-muted, #6b6b73); font-size: 11px; }
+
+.bb-pill { display: inline-flex; align-items: center; gap: 5px; padding: 2px 8px; border: 1px solid var(--bp-border, #e6e6e9); border-radius: 999px; background: var(--bp-subtle, #f6f6f7); color: var(--bb-muted, #6b6b73); font-size: 11px; line-height: 1.5; white-space: nowrap; }
+.bb-pill[data-tone=ok] { color: #3f7a54; border-color: color-mix(in srgb, #3f7a54 30%, transparent); background: color-mix(in srgb, #3f7a54 10%, transparent); }
+.bb-pill[data-tone=warn] { color: var(--bp-warning, #8b6526); border-color: color-mix(in srgb, var(--bp-warning, #8b6526) 32%, transparent); background: var(--bp-warning-bg, #fbf8f0); }
+.bb-pill[data-tone=current] { color: var(--bp-on-solid, #fff); background: var(--bp-solid, #242427); border-color: var(--bp-solid, #242427); }
+
+.bb-note { margin: 0; color: var(--bb-muted, #6b6b73); font-size: 12px; line-height: 1.6; }
+.bb-note strong { color: var(--bp-ink, #242427); font-weight: 550; }
+.bb-warn { margin: 0; padding: 10px 12px; border: 1px solid color-mix(in srgb, var(--bp-warning, #8b6526) 22%, transparent); border-radius: 9px; background: var(--bp-warning-bg, #fbf8f0); color: var(--bp-warning, #8b6526); font-size: 12px; line-height: 1.6; }
+.bb-warn ul { margin: 6px 0 0; padding-left: 18px; }
+.bb-danger { margin: 0; padding: 10px 12px; border: 1px solid color-mix(in srgb, var(--bp-danger, #b33c42) 24%, transparent); border-radius: 9px; background: var(--bp-danger-bg, #fcf2f2); color: var(--bp-danger, #b33c42); font-size: 12px; line-height: 1.6; }
+.bb-danger ul { margin: 6px 0 0; padding-left: 18px; }
+
+.bb-fields { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px 14px; }
+/* The editor keeps the parent form's `bp-form` class, so field and check rows are
+   scoped with `.bb-root` to win over the generic `.bp-form label` grid rule. */
+.bb-root .bb-field { display: grid; gap: 5px; min-width: 0; font-size: 12px; color: var(--bb-muted, #6b6b73); }
+.bb-field > span { overflow-wrap: anywhere; }
+.bb-field :is(input, select) { width: 100%; min-width: 0; }
+.bb-field-wide { grid-column: 1 / -1; }
+.bb-root .bb-check { display: flex; align-items: flex-start; gap: 8px; font-size: 12px; color: var(--bp-ink, #242427); }
+.bb-check input { margin: 3px 0 0; flex: none; }
+.bb-check small { display: block; margin-top: 2px; color: var(--bb-muted, #6b6b73); font-size: 11px; }
+.bb-row { display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
+.bb-row-end { justify-content: flex-end; }
+.bb-link { padding: 3px 7px; min-height: 27px; border-color: transparent; background: none; color: var(--bb-muted, #6b6b73); font-size: 11px; }
+.bb-link:hover { background: var(--bp-subtle, #f6f6f7); border-color: var(--bp-border, #e6e6e9); color: var(--bp-ink, #242427); }
+
+.bb-fold { border: 1px solid var(--bp-border, #e6e6e9); border-radius: 11px; background: var(--bp-surface, #fff); min-width: 0; }
+.bb-fold > summary { display: flex; align-items: center; gap: 9px; padding: 11px 14px; list-style: none; cursor: pointer; font-size: 13px; font-weight: 550; color: var(--bp-ink, #242427); }
+.bb-fold > summary::-webkit-details-marker { display: none; }
+.bb-fold > summary::after { content: '+'; margin-left: auto; color: var(--bb-muted, #6b6b73); font-size: 15px; font-weight: 300; }
+.bb-fold[open] > summary::after { content: '−'; }
+.bb-fold > summary small { color: var(--bb-muted, #6b6b73); font-size: 11px; font-weight: 400; min-width: 0; flex: 1 1 130px; overflow-wrap: anywhere; }
+.bb-fold-body { display: flex; flex-direction: column; gap: 12px; padding: 0 14px 14px; }
+
+/* The official tools module is deliberately its own region: it grants an extra
+   execution path, it is not the Bot's chat engine and not a model picker. */
+.bb-tools { border: 1px solid var(--bp-border, #e6e6e9); border-radius: 12px; background: var(--bp-subtle, #f6f6f7); padding: 15px; min-width: 0; }
+.bb-tools-head { display: flex; flex-direction: column; gap: 4px; }
+.bb-tools-head strong { font-size: 13px; font-weight: 600; color: var(--bp-ink, #242427); }
+.bb-tools-head p { margin: 0; color: var(--bb-muted, #6b6b73); font-size: 12px; line-height: 1.6; }
+.bb-tool-list { display: flex; flex-direction: column; gap: 10px; margin: 12px 0 0; padding: 0; list-style: none; }
+.bb-tool { border: 1px solid var(--bp-border, #e6e6e9); border-radius: 10px; background: var(--bp-surface, #fff); padding: 12px 13px; }
+.bb-tool[data-granted=true] { border-color: color-mix(in srgb, var(--bp-solid, #242427) 40%, var(--bp-border, #e6e6e9)); }
+.bb-tool[data-stale=true] { border-color: color-mix(in srgb, var(--bp-warning, #8b6526) 46%, var(--bp-border, #e6e6e9)); }
+.bb-tool-head { display: flex; align-items: flex-start; gap: 10px; }
+.bb-tool-head strong { font-size: 13px; font-weight: 550; color: var(--bp-ink, #242427); }
+.bb-tool-head p { margin: 2px 0 0; color: var(--bb-muted, #6b6b73); font-size: 11px; line-height: 1.55; }
+.bb-tool-body { display: flex; flex-direction: column; gap: 9px; margin-top: 10px; }
+.bb-tool-title { min-width: 0; flex: 1; }
+.bb-tool-empty { margin: 0; color: var(--bb-muted, #6b6b73); font-size: 12px; line-height: 1.6; }
+.bb-tools-foot { margin: 12px 0 0; color: var(--bb-muted, #6b6b73); font-size: 11px; line-height: 1.6; }
+.bb-fieldset { display: flex; flex-direction: column; gap: 10px; min-width: 0; margin: 0; padding: 0; border: 0; }
+.bb-fieldset > legend { padding: 0; }
+.bb-route-editor { display: grid; gap: 12px; padding: 14px; min-width: 0; border: 1px solid var(--bp-border); border-radius: 12px; }
+.bb-route-heading { display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 6px 12px; }
+.bb-route-heading strong { display: inline-flex; align-items: center; gap: 8px; font-size: 14px; }
+.bb-route-heading p { flex-basis: 100%; }
+.bb-route { min-width: 0; border: 1px solid var(--bp-border); border-radius: 10px; background: var(--bp-surface); }
+.bb-route > summary { display: flex; align-items: center; justify-content: space-between; gap: 10px; padding: 11px 13px; cursor: pointer; }
+.bb-route > summary > span:first-child { min-width: 0; display: grid; gap: 2px; overflow-wrap: anywhere; }
+.bb-route > summary strong { font-size: 13px; }
+.bb-route > summary small { color: var(--bb-muted, var(--bp-muted)); font-size: 11px; }
+.bb-route > summary .bb-pill { flex: none; }
+.bb-route[open] > summary { margin-bottom: 9px; border-bottom: 1px solid var(--bp-border); }
+.bb-route-account { display: grid; gap: 8px; }
+.bb-route-account > button { justify-self: start; }
+
+.bb-save { display: flex; flex-direction: column; gap: 10px; padding-top: 4px; border-top: 1px solid var(--bp-border, #e6e6e9); }
+.bb-save-row { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; }
+.bb-save-row .bp-button-primary { margin-left: auto; }
+.bb-feedback { margin: 0; font-size: 12px; line-height: 1.6; }
+.bb-feedback[data-kind=saving] { color: var(--bb-muted, #6b6b73); }
+.bb-feedback[data-kind=saved] { color: #3f7a54; }
+.bb-feedback[data-kind=error] { color: var(--bp-danger, #b33c42); }
+.bb-feedback[data-kind=notice] { color: var(--bp-warning, #8b6526); }
+
+@container (max-width: 560px) {
+  .bb-fields { grid-template-columns: 1fr; }
+  .bb-step-head { flex-wrap: wrap; }
+  .bb-step-state { margin-left: 33px; }
+  .bb-summary { gap: 4px 12px; }
+  .bb-summary div { flex-basis: 100%; }
+  .bb-list-scroll { max-height: none; }
+  .bb-save-row .bp-button-primary { margin-left: 0; width: 100%; }
+}
+html body[data-bot-product-ui] .bb-root .bb-model-card { padding: 18px; border: 1px solid var(--bb-line, var(--bp-border)); border-radius: 12px; background: var(--bb-surface, var(--bp-surface)); }
+html body[data-bot-product-ui] .bb-root .bb-budget-config { border: 1px solid var(--bb-line, var(--bp-border)); border-radius: 10px; }
+html body[data-bot-product-ui] .bb-root .bb-budget-config > summary { display: flex; align-items: center; gap: 9px; padding: 13px 15px; cursor: pointer; color: var(--bb-ink, var(--bp-ink)); font-size: 13px; }
+html body[data-bot-product-ui] .bb-root .bb-budget-config > summary .bb-pill { margin-left: auto; }
+html body[data-bot-product-ui] .bb-root .bb-budget-config .bb-step { border: 0; }
+html body[data-bot-product-ui] .bb-root .bb-tools-head { display: flex; flex-direction: row; flex-wrap: wrap; align-items: center; gap: 8px; }
+html body[data-bot-product-ui] .bb-root .bb-tools-head > p { flex-basis: 100%; margin-top: 0; }
+html body[data-bot-product-ui] .bb-root .bb-tools-head > button { margin-left: auto; }
+html body[data-bot-product-ui] .bb-root .bb-overview > summary { display: flex; align-items: center; justify-content: space-between; padding: 8px 0; cursor: pointer; font-size: 12px; color: var(--bb-muted); }
+html body[data-bot-product-ui] .bb-root .bb-overview > summary span { font-size: 11px; }
+html body[data-bot-product-ui] .bb-root .bb-model-applied { margin: 10px 0 0; color: var(--bb-muted); font-size: 12px; line-height: 1.5; overflow-wrap: anywhere; }

package/apps/integration-client/bot-model-status.mjs

@@ -0,0 +1,18 @@
+const ref = value => typeof value === 'string' && value.length > 0 && value.length <= 512 && !/[\r\n\0]/.test(value) ? value : null
+const entryRef = value => value?.ref ?? (typeof value?.provider === 'string' && typeof value?.model === 'string' ? `${value.provider}/${value.model}` : null)
+
+/** Applied is the Host's last saved selection, not proof of this turn's actual response model. */
+export function botModelStatus(bot, catalog = []) {
+  const selected = ref(bot?.model), applied = ref(bot?.appliedModel)
+  const label = value => {
+    const entry = Array.isArray(catalog) ? catalog.find(item => entryRef(item) === value) : undefined
+    return typeof entry?.name === 'string' && entry.name ? entry.name : typeof entry?.label === 'string' && entry.label ? entry.label : value
+  }
+  const selectedLabel = selected ? label(selected) : null, appliedLabel = applied ? label(applied) : null
+  const different = Boolean(selected && applied && selected !== applied)
+  const title = [selected ? `宿主已选：${selected}` : '宿主未指定单独模型',
+    applied ? `最近应用：${applied}` : '宿主尚未报告应用记录'].join('；')
+  return { selected, applied, selectedLabel, appliedLabel, different, title,
+    label: selectedLabel ?? appliedLabel ?? '选择模型',
+    appliedText: applied ? `最近应用：${appliedLabel}${different ? ' · 与宿主已选模型不同' : ''}` : '宿主尚未报告应用记录' }
+}

package/apps/integration-client/bot-profile-identity.jsx

@@ -0,0 +1,197 @@
+import React, { useEffect, useMemo, useRef, useState } from 'react'
+import { UiIcon } from './ui-icons.jsx'
+import css from './bot-profile.css'
+import {
+  BOT_PROFILE_FIELDS, BOT_PROFILE_FIELD_META, BOT_PROFILE_GROUPS, botProfileDirty, botProfileDraft, botProfileFailure,
+  botProfilePatch, botProfileProblems, botProfileSavedText, botProfileSearch,
+} from './bot-profile.mjs'
+
+/**
+ * Identity and personality, inside the Bot settings side window.
+ *
+ * It writes only what the Host persists — name, role, instructions — through the
+ * owner product actions `botProfile.inspect` / `botProfile.save`, so the same
+ * window that picks the model and the official tools also decides who this Bot
+ * is. Three rules shape the panel:
+ *
+ *   - the Host's committed record is the baseline, never the draft: a save sends
+ *     the changed fields plus the values they were read at, so an edit made in
+ *     another window is refused instead of overwritten, and an unrelated save
+ *     never blocks this one;
+ *   - a response that arrives late — a slow save, a switched Bot, a re-read —
+ *     updates the baseline, never the draft, so a keystroke made while a save was
+ *     in flight is never lost;
+ *   - composing text is never a submit: an IMEEnter and a form submit during
+ *     composition are both dropped, and nothing resets the draft underneath the
+ *     composition.
+ *
+ * Instructions are text, not a grant: the panel says so where the field is, and
+ * it never offers a model, a tool, a permission or a working directory.
+ */
+export function BotProfileIdentity({ productApi, botId, busy = false, onSaved }) {
+  const [view, setView] = useState(null), [draft, setDraft] = useState(null), [query, setQuery] = useState('')
+  const [open, setOpen] = useState(() => new Set(BOT_PROFILE_GROUPS.map(group => group.id)))
+  const [loading, setLoading] = useState(true), [saving, setSaving] = useState(false), [error, setError] = useState('')
+  const [feedback, setFeedback] = useState(null)
+  const session = useRef({ live: false, epoch: 0, saving: false, requests: new Set() })
+  const saveToken = useRef(0)
+  const composing = useRef(false)
+
+  useEffect(() => {
+    // The stylesheet ships with this panel so the parent needs one import and one
+    // render; a parent that concatenates it into the dialog's own style must not
+    // do both at once.
+    const style = document.createElement('style')
+    style.dataset.botProfileIdentity = '1'
+    style.textContent = css
+    document.head.append(style)
+    return () => { style.remove() }
+  }, [])
+
+  const call = async (action, payload, signal) => {
+    const controller = new AbortController()
+    const abort = () => controller.abort()
+    if (signal?.aborted) abort()
+    else signal?.addEventListener('abort', abort, { once: true })
+    session.current.requests.add(controller)
+    let rejectAborted
+    const deadline = new Promise((_resolve, reject) => { rejectAborted = () => reject(Object.assign(new Error('REQUEST_ABORTED'), { code: 'REQUEST_ABORTED' })); controller.signal.addEventListener('abort', rejectAborted, { once: true }) })
+    const timer = setTimeout(abort, 10000)
+    if (controller.signal.aborted) rejectAborted()
+    try { return await Promise.race([Promise.resolve().then(() => productApi.dispatch(action, payload, controller.signal)), deadline]) }
+    finally { clearTimeout(timer); signal?.removeEventListener('abort', abort); controller.signal.removeEventListener('abort', rejectAborted); session.current.requests.delete(controller) }
+  }
+
+  const read = async () => {
+    const current = session.current, epoch = ++current.epoch
+    setLoading(true)
+    try {
+      const value = await call('botProfile.inspect', { botId })
+      if (!current.live || epoch !== current.epoch) return
+      if (value?.schemaVersion !== 1 || value.bot?.id !== botId || !Number.isSafeInteger(value.revision) || value.revision < 0
+        || !BOT_PROFILE_FIELDS.every(field => typeof value.bot[field] === 'string')) throw Object.assign(new Error('WRONG_PROFILE_OWNER'), { code: 'WRONG_PROFILE_OWNER' })
+      setView(value); setDraft(botProfileDraft(value)); setError('')
+      setFeedback(currentFeedback => (currentFeedback?.kind === 'saved' ? currentFeedback : null))
+    } catch (cause) {
+      if (!current.live || epoch !== current.epoch) return
+      if (cause?.code === 'REQUEST_ABORTED') { setError('读取结果尚未确认，请重新读取后核对。'); return }
+      setError(['PRODUCT_ACTION_UNAVAILABLE', 'INVALID_PRODUCT_ACTION'].includes(cause?.code) ? '当前连接尚不支持身份与个性设置，请更新完整插件。' : '暂时无法读取这个 Bot 的身份，请重试。')
+    } finally { if (current.live && epoch === current.epoch) setLoading(false) }
+  }
+
+  useEffect(() => {
+    const current = session.current
+    current.live = true
+    // A Bot switch invalidates the previous Bot's read and its in-flight save,
+    // and drops its values from the panel: no other Bot's identity is ever
+    // shown as this one's.
+    current.epoch += 1; saveToken.current += 1; current.saving = false; setSaving(false)
+    for (const controller of current.requests) controller.abort()
+    setView(null); setDraft(null); setFeedback(null)
+    void read()
+    return () => {
+      current.live = false; current.epoch += 1; saveToken.current += 1
+      for (const controller of current.requests) controller.abort()
+    }
+  }, [productApi, botId])
+
+  const edit = (field, value) => { setDraft(current => (current ? { ...current, [field]: value } : current)); setFeedback(null) }
+  const reload = () => { void read() }
+
+  const dirty = view && draft ? botProfileDirty(draft, view) : false
+  const problems = useMemo(() => (draft ? botProfileProblems(draft) : []), [draft])
+  const search = useMemo(() => botProfileSearch(query), [query])
+  const groupOpen = id => (search ? search.groups[id] : open.has(id))
+  const toggle = id => setOpen(current => { const next = new Set(current); next.has(id) ? next.delete(id) : next.add(id); return next })
+  // The committed record belongs to one Bot: until this Bot's own read lands,
+  // nothing of another Bot's identity is shown or offered for saving, not even
+  // for the frame between the switch and its read.
+  const owned = view && draft && view.bot.id === botId ? view : null
+
+  const save = async event => {
+    if (event) event.preventDefault()
+    const current = session.current
+    // An IME composition is never a submit, and a second click in the same batch
+    // must not send the same revision twice.
+    if (composing.current || !current.live || current.saving || busy || !owned || !dirty || problems.length > 0) return
+    const profile = botProfilePatch(draft, view)
+    if (Object.keys(profile).length === 0) return
+    const token = saveToken.current
+    const sentDraft = { ...draft }, sentView = view
+    current.saving = true; setSaving(true)
+    setFeedback({ kind: 'saving', text: '正在保存到宿主…' })
+    try {
+      const result = await call('botProfile.save', { botId, expectedRevision: view.revision ?? 0, base: botProfileDraft(view), profile })
+      if (!current.live || token !== saveToken.current) return
+      const expected = Object.keys(profile).filter(field => profile[field].trim() !== (sentView.bot[field] ?? '')).sort()
+      const valid = result?.schemaVersion === 1 && result.botId === botId && result.bot?.id === botId
+        && Number.isSafeInteger(result.revision) && result.revision >= sentView.revision
+        && BOT_PROFILE_FIELDS.every(field => typeof result.bot[field] === 'string')
+        && Array.isArray(result.saved) && result.saved.length === expected.length
+        && [...result.saved].sort().every((field, index) => field === expected[index])
+        && Object.keys(profile).every(field => result.bot[field] === profile[field].trim())
+      if (!valid) throw Object.assign(new Error('宿主尚未确认这次身份保存，请重新读取后核对。'), { code: 'BOT_PROFILE_UNCONFIRMED' })
+      // The acknowledged record becomes the new baseline. Anything typed while
+      // the save was in flight stays in the draft and simply reads as unsaved.
+      setView(currentView => (currentView ? { ...currentView, bot: result.bot, revision: result.revision } : currentView))
+      setDraft(currentDraft => currentDraft ? Object.fromEntries(BOT_PROFILE_FIELDS.map(field => [field,
+        currentDraft[field] === sentDraft[field] ? result.bot[field] : currentDraft[field]])) : currentDraft)
+      setFeedback({ kind: 'saved', text: botProfileSavedText(result) })
+      onSaved?.(result.bot)
+    } catch (cause) {
+      if (!current.live || token !== saveToken.current) return
+      setFeedback({ kind: cause?.code === 'BOT_PROFILE_CONFLICT' ? 'notice' : 'error', text: botProfileFailure(cause) })
+    } finally {
+      if (current.live && token === saveToken.current) { current.saving = false; setSaving(false) }
+    }
+  }
+
+  const scope = `${botId}`
+  return <section className="bp-profile" aria-label="身份与个性">
+    <header className="bp-profile-head">
+      <span className="bp-profile-badge" aria-hidden="true"><UiIcon name="bot" size={18}/></span>
+      <div className="bp-profile-title"><h3>身份与个性</h3><p>名称、职责与对话指令；保存只写回这个 Bot 的资料，不会代替你给它发消息。</p></div>
+      {owned && <span className="bp-profile-revision" title="宿主已提交状态的修订号">修订号 {owned.revision ?? '—'}</span>}
+    </header>
+    <div className="bp-profile-search">
+      <UiIcon name="search" size={15}/>
+      <input type="search" value={query} aria-label="搜索身份设置" placeholder="搜索名称、职责、指令…" onChange={event => setQuery(event.target.value)}/>
+      {query !== '' && <button type="button" aria-label="清除搜索" onClick={() => setQuery('')}><UiIcon name="close" size={13}/></button>}
+    </div>
+    {loading && !view && <p className="bp-muted bp-profile-status" role="status">正在读取 Bot 身份…</p>}
+    {error !== '' && <div className="bp-profile-error" role="alert"><p>{error}</p><button type="button" disabled={busy || loading} onClick={reload}>重新读取</button></div>}
+    {owned && <>
+      {search && !search.any && <p className="bp-muted bp-profile-status" role="status">没有匹配“{query}”的身份设置。</p>}
+      {BOT_PROFILE_GROUPS.map(group => <section key={group.id} className="bp-profile-group" data-group={group.id} data-open={groupOpen(group.id) ? 'true' : 'false'} aria-label={group.label}>
+        <button type="button" className="bp-profile-group-head" aria-expanded={groupOpen(group.id)} onClick={() => (search ? setQuery('') : toggle(group.id))}>
+          <UiIcon name={group.icon} size={16}/>
+          <span className="bp-profile-group-label">{group.label}</span>
+          <span className="bp-profile-group-hint">{group.hint}</span>
+          <UiIcon name="chevron" size={15}/>
+        </button>
+        {groupOpen(group.id) && <div className="bp-profile-group-body">
+          {group.fields.map(field => { const meta = BOT_PROFILE_FIELD_META[field], problem = problems.find(item => item.field === field)
+            return <label key={field} className="bp-profile-field" htmlFor={`bp-profile-${scope}-${field}`}>
+              <span className="bp-profile-field-head"><span className="bp-profile-field-label">{meta.label}</span>
+                <span className="bp-profile-field-count">{draft[field].length}/{meta.limit}</span></span>
+              {meta.control === 'input'
+                ? <input id={`bp-profile-${scope}-${field}`} type="text" value={draft[field]} maxLength={meta.limit} placeholder={meta.placeholder} disabled={busy || saving}
+                    onChange={event => edit(field, event.target.value)}
+                    onCompositionStart={() => { composing.current = true }} onCompositionEnd={() => { composing.current = false }}/>
+                : <textarea id={`bp-profile-${scope}-${field}`} value={draft[field]} maxLength={meta.limit} rows={5} placeholder={meta.placeholder} disabled={busy || saving}
+                    onChange={event => edit(field, event.target.value)}
+                    onCompositionStart={() => { composing.current = true }} onCompositionEnd={() => { composing.current = false }}/>}
+              <small className="bp-profile-field-help">{meta.help}</small>
+              {problem && <small className="bp-profile-field-problem" role="status">{problem.text}</small>}
+            </label> })}
+        </div>}
+      </section>)}
+      <form className="bp-profile-save" onSubmit={save} noValidate>
+        <span className="bp-profile-pill" data-tone={dirty ? 'warn' : 'muted'}>{dirty ? '有未保存修改' : '与宿主一致'}</span>
+        <button type="submit" className="bp-button-primary" disabled={busy || saving || !dirty || problems.length > 0}>
+          {saving ? '保存中…' : '保存身份与指令'}</button>
+      </form>
+    </>}
+    {feedback && <p className="bp-profile-feedback" data-kind={feedback.kind} role="status">{feedback.text}</p>}
+  </section>
+}