@moretea-labs/forge 1.6.0 → 1.7.1

package/src/runtime/assistant/action-proposals.ts

@@ -1,279 +0,0 @@
-import { randomUUID } from 'crypto';
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'fs';
-import { dirname, join } from 'path';
-import type { RepositoryRecord } from '../../cli/repositories/types';
-import { withControllerLock, withControllerLockAsync } from '../../cli/repositories/locks';
-import { findExecutionJob } from '../execution/jobs/store';
-import { appendRuntimeEvent } from '../evidence/event-ledger';
-import { getAssistantPluginManifest, submitAssistantPluginAction } from '../plugins/store';
-
-export type AssistantActionProposalStatus =
-  | 'proposed'
-  | 'approved'
-  | 'rejected'
-  | 'executed'
-  | 'failed'
-  | 'expired';
-
-export interface AssistantActionProposal {
-  schemaVersion: 1;
-  proposalId: string;
-  routineId: string;
-  runId: string;
-  pluginId: string;
-  actionId: string;
-  arguments: Record<string, unknown>;
-  evidenceMessageIds: string[];
-  context?: { sender?: string; subject?: string; protected?: boolean };
-  reason: string;
-  confidence: number;
-  risk: 'remote_write' | 'destructive';
-  executable: boolean;
-  status: AssistantActionProposalStatus;
-  expiresAt: string;
-  executionJobId?: string;
-  standingGrantId?: string;
-  rejectionReason?: string;
-  error?: string;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface AssistantActionProposalInput {
-  pluginId: string;
-  actionId: string;
-  arguments?: Record<string, unknown>;
-  evidenceMessageIds: string[];
-  context?: { sender?: string; subject?: string; protected?: boolean };
-  reason: string;
-  confidence?: number;
-  risk?: 'remote_write' | 'destructive';
-  executable?: boolean;
-  expiresInHours?: number;
-}
-
-interface ProposalStore {
-  schemaVersion: 1;
-  updatedAt: string;
-  proposals: AssistantActionProposal[];
-}
-
-function now(): string { return new Date().toISOString(); }
-function proposalsPath(repoRoot: string): string { return join(repoRoot, '.forge', 'assistant', 'action-proposals.json'); }
-
-function readStore(repoRoot: string): ProposalStore {
-  const path = proposalsPath(repoRoot);
-  if (!existsSync(path)) return { schemaVersion: 1, updatedAt: now(), proposals: [] };
-  try {
-    const parsed = JSON.parse(readFileSync(path, 'utf-8')) as Partial<ProposalStore>;
-    return {
-      schemaVersion: 1,
-      updatedAt: typeof parsed.updatedAt === 'string' ? parsed.updatedAt : now(),
-      proposals: Array.isArray(parsed.proposals) ? parsed.proposals as AssistantActionProposal[] : [],
-    };
-  } catch {
-    return { schemaVersion: 1, updatedAt: now(), proposals: [] };
-  }
-}
-
-function writeStore(repoRoot: string, store: ProposalStore): void {
-  const path = proposalsPath(repoRoot);
-  mkdirSync(dirname(path), { recursive: true });
-  const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
-  writeFileSync(tmp, `${JSON.stringify({ ...store, schemaVersion: 1, updatedAt: now() }, null, 2)}\n`, 'utf-8');
-  renameSync(tmp, path);
-}
-
-function refreshStatus(controllerHome: string, proposal: AssistantActionProposal): AssistantActionProposal {
-  if (!proposal.executionJobId || !['approved', 'proposed'].includes(proposal.status)) return proposal;
-  const job = findExecutionJob(controllerHome, proposal.executionJobId);
-  if (!job) return proposal;
-  if (job.status === 'succeeded') return { ...proposal, status: 'executed', updatedAt: now() };
-  if (['failed', 'timed_out', 'cancelled', 'orphaned', 'stale', 'human_attention_required'].includes(job.status)) {
-    return { ...proposal, status: 'failed', error: job.error?.message ?? `Execution Job ended as ${job.status}`, updatedAt: now() };
-  }
-  return proposal;
-}
-
-function expire(proposal: AssistantActionProposal): AssistantActionProposal {
-  if (proposal.status === 'proposed' && Date.parse(proposal.expiresAt) <= Date.now()) {
-    return { ...proposal, status: 'expired', updatedAt: now() };
-  }
-  return proposal;
-}
-
-export function createAssistantActionProposals(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  input: { routineId: string; runId: string; proposals: AssistantActionProposalInput[] },
-): AssistantActionProposal[] {
-  return withControllerLock(controllerHome, { scope: 'repository', repoId: repository.repoId }, `assistant-proposals:${input.runId}`, () => {
-    const store = readStore(repository.canonicalRoot);
-    const existing = store.proposals.filter((entry) => entry.runId === input.runId);
-    if (existing.length > 0) return existing;
-    const at = now();
-    const proposals = input.proposals.slice(0, 100).map((proposal) => ({
-      schemaVersion: 1 as const,
-      proposalId: `proposal-${Date.now()}-${randomUUID().slice(0, 8)}`,
-      routineId: input.routineId,
-      runId: input.runId,
-      pluginId: proposal.pluginId,
-      actionId: proposal.actionId,
-      arguments: proposal.arguments ?? {},
-      evidenceMessageIds: [...new Set(proposal.evidenceMessageIds)].slice(0, 50),
-      context: proposal.context ? {
-        sender: typeof proposal.context.sender === 'string' ? proposal.context.sender.slice(0, 500) : undefined,
-        subject: typeof proposal.context.subject === 'string' ? proposal.context.subject.slice(0, 1_000) : undefined,
-        protected: proposal.context.protected === true,
-      } : undefined,
-      reason: proposal.reason,
-      confidence: Math.max(0, Math.min(1, proposal.confidence ?? 0.5)),
-      risk: proposal.risk ?? 'remote_write',
-      executable: proposal.executable !== false,
-      status: 'proposed' as const,
-      expiresAt: new Date(Date.now() + Math.max(1, Math.min(24 * 30, proposal.expiresInHours ?? 72)) * 60 * 60_000).toISOString(),
-      createdAt: at,
-      updatedAt: at,
-    }));
-    store.proposals = [...proposals, ...store.proposals].slice(0, 2_000);
-    writeStore(repository.canonicalRoot, store);
-    for (const proposal of proposals) {
-      appendRuntimeEvent(controllerHome, {
-        repoId: repository.repoId,
-        entityType: 'assistant-action-proposal',
-        entityId: proposal.proposalId,
-        eventType: 'assistant_action_proposed',
-        requestId: proposal.runId,
-        revision: 1,
-        data: { pluginId: proposal.pluginId, actionId: proposal.actionId, risk: proposal.risk, executable: proposal.executable },
-      });
-    }
-    return proposals;
-  }, 10_000);
-}
-
-export function listAssistantActionProposals(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  input: { status?: AssistantActionProposalStatus; limit?: number } = {},
-): { proposals: AssistantActionProposal[] } {
-  const store = readStore(repository.canonicalRoot);
-  let changed = false;
-  store.proposals = store.proposals.map((proposal) => {
-    const next = refreshStatus(controllerHome, expire(proposal));
-    if (next.status !== proposal.status || next.updatedAt !== proposal.updatedAt) changed = true;
-    return next;
-  });
-  if (changed) writeStore(repository.canonicalRoot, store);
-  const limit = Math.max(1, Math.min(500, Math.trunc(input.limit ?? 100)));
-  return {
-    proposals: store.proposals
-      .filter((proposal) => !input.status || proposal.status === input.status)
-      .sort((left, right) => right.createdAt.localeCompare(left.createdAt))
-      .slice(0, limit),
-  };
-}
-
-export function getAssistantActionProposal(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  proposalId: string,
-): AssistantActionProposal {
-  const proposal = listAssistantActionProposals(controllerHome, repository, { limit: 500 }).proposals
-    .find((entry) => entry.proposalId === proposalId);
-  if (!proposal) throw new Error(`ASSISTANT_ACTION_PROPOSAL_NOT_FOUND: ${proposalId}`);
-  return proposal;
-}
-
-export function rejectAssistantActionProposal(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  proposalId: string,
-  reason?: string,
-): AssistantActionProposal {
-  return withControllerLock(controllerHome, { scope: 'repository', repoId: repository.repoId }, `assistant-proposal-reject:${proposalId}`, () => {
-    const store = readStore(repository.canonicalRoot);
-    const proposal = store.proposals.find((entry) => entry.proposalId === proposalId);
-    if (!proposal) throw new Error(`ASSISTANT_ACTION_PROPOSAL_NOT_FOUND: ${proposalId}`);
-    if (proposal.executionJobId) throw new Error('ASSISTANT_ACTION_PROPOSAL_ALREADY_SUBMITTED');
-    if (proposal.status === 'rejected') return proposal;
-    if (proposal.status !== 'proposed') throw new Error(`ASSISTANT_ACTION_PROPOSAL_NOT_REJECTABLE: ${proposal.status}`);
-    proposal.status = 'rejected';
-    proposal.rejectionReason = reason?.trim() || 'Rejected by user.';
-    proposal.updatedAt = now();
-    writeStore(repository.canonicalRoot, store);
-    appendRuntimeEvent(controllerHome, {
-      repoId: repository.repoId,
-      entityType: 'assistant-action-proposal',
-      entityId: proposal.proposalId,
-      eventType: 'assistant_action_rejected',
-      requestId: proposal.runId,
-      revision: 1,
-      data: { reason: proposal.rejectionReason },
-    });
-    return proposal;
-  }, 10_000);
-}
-
-export async function approveAssistantActionProposal(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  input: {
-    proposalId: string;
-    requestId: string;
-    confirmationText?: string;
-    origin?: { surface: 'mcp' | 'local-ui' | 'standing-grant'; actor: string };
-    standingGrantId?: string;
-  },
-): Promise<AssistantActionProposal> {
-  return withControllerLockAsync(controllerHome, { scope: 'repository', repoId: repository.repoId }, `assistant-proposal-approve:${input.proposalId}`, async () => {
-    const store = readStore(repository.canonicalRoot);
-    const proposal = store.proposals.find((entry) => entry.proposalId === input.proposalId);
-    if (!proposal) throw new Error(`ASSISTANT_ACTION_PROPOSAL_NOT_FOUND: ${input.proposalId}`);
-    const refreshed = expire(proposal);
-    Object.assign(proposal, refreshed);
-    if (proposal.executionJobId) return refreshStatus(controllerHome, proposal);
-    if (proposal.status !== 'proposed') throw new Error(`ASSISTANT_ACTION_PROPOSAL_NOT_APPROVABLE: ${proposal.status}`);
-    if (!proposal.executable) throw new Error('ASSISTANT_ACTION_PROPOSAL_NOT_EXECUTABLE');
-    const manifest = getAssistantPluginManifest(controllerHome, repository, proposal.pluginId);
-    const action = manifest.actions.find((entry) => entry.actionId === proposal.actionId);
-    if (!action) throw new Error(`PLUGIN_ACTION_NOT_FOUND: ${proposal.pluginId}/${proposal.actionId}`);
-    if (action.confirmation === 'strong_confirmation' && input.confirmationText !== action.requiredConfirmationText) {
-      throw new Error(`ASSISTANT_ACTION_STRONG_CONFIRMATION_REQUIRED: ${action.requiredConfirmationText}`);
-    }
-    const submitted = await submitAssistantPluginAction(controllerHome, repository, {
-      pluginId: proposal.pluginId,
-      actionId: proposal.actionId,
-      requestId: input.requestId.trim() || `assistant-proposal:${proposal.proposalId}`,
-      args: proposal.arguments,
-      confirmAuthorization: true,
-      confirmationText: input.confirmationText,
-      origin: {
-        surface: input.origin?.surface ?? 'local-ui',
-        actor: input.origin?.actor ?? 'assistant-action-approval',
-        correlationId: proposal.proposalId,
-      },
-    });
-    proposal.status = 'approved';
-    proposal.executionJobId = submitted.job.jobId;
-    proposal.standingGrantId = input.standingGrantId;
-    proposal.updatedAt = now();
-    writeStore(repository.canonicalRoot, store);
-    appendRuntimeEvent(controllerHome, {
-      repoId: repository.repoId,
-      entityType: 'assistant-action-proposal',
-      entityId: proposal.proposalId,
-      eventType: 'assistant_action_approved',
-      requestId: input.requestId,
-      revision: 1,
-      data: {
-        executionJobId: proposal.executionJobId,
-        pluginId: proposal.pluginId,
-        actionId: proposal.actionId,
-        standingGrantId: proposal.standingGrantId,
-        surface: input.origin?.surface ?? 'local-ui',
-      },
-    });
-    return proposal;
-  }, 10_000);
-}

package/src/runtime/assistant/intent.ts

@@ -1,395 +0,0 @@
-import { createHash, randomUUID } from 'crypto';
-import type { RepositoryRecord } from '../../cli/repositories/types';
-import { getAssistantPluginManifest, submitAssistantPluginAction } from '../plugins/store';
-import { bindAssistantRoutineSchedule } from './schedule-binding';
-import type { AssistantIntentResult, AssistantIntentInput, AssistantIntentMode, AssistantIntentSource, AssistantPlanStepInput, AssistantPlanStepResult, AssistantRoutine, AssistantRoutineDraft } from './types';
-import { addAssistantInboxItem, createAssistantRoutine, getAssistantRoutine, touchAssistantRoutineRun } from './store';
-import { defaultRoutineAllowedActions, defaultRoutineForbiddenActions, evaluateAssistantActionPolicy } from './policy';
-
-function now(): string { return new Date().toISOString(); }
-
-function stringValue(value: unknown): string | undefined {
-  return typeof value === 'string' && value.trim() ? value.trim() : undefined;
-}
-
-function normalizeMode(value: unknown): AssistantIntentMode {
-  return value === 'plan_only' || value === 'execute' || value === 'plan_then_execute' ? value : 'plan_then_execute';
-}
-
-function normalizeSource(value: unknown): AssistantIntentSource {
-  return value === 'mcp' || value === 'local-ui' || value === 'mobile' || value === 'system' ? value : 'chatgpt';
-}
-
-function requestId(input: AssistantIntentInput): string {
-  const explicit = stringValue(input.requestId);
-  if (explicit) return explicit;
-  const text = stringValue(input.utterance) ?? JSON.stringify(input.plan ?? input.routine ?? {});
-  const digest = createHash('sha256').update(`${text}:${Date.now()}:${randomUUID()}`).digest('hex').slice(0, 16);
-  return `assistant-intent-${digest}`;
-}
-
-function sourceToSurface(source: AssistantIntentSource): 'chatgpt-action' | 'mcp' | 'local-ui' | 'mobile-intent' | 'system' {
-  if (source === 'mcp') return 'mcp';
-  if (source === 'local-ui') return 'local-ui';
-  if (source === 'mobile') return 'mobile-intent';
-  if (source === 'system') return 'system';
-  return 'chatgpt-action';
-}
-
-function planStepId(index: number, step: AssistantPlanStepInput): string {
-  return step.stepId?.trim() || `step-${index + 1}`;
-}
-
-function objectValue(value: unknown): Record<string, unknown> {
-  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {};
-}
-
-function containsAny(text: string, words: string[]): boolean {
-  const lower = text.toLowerCase();
-  return words.some((word) => lower.includes(word.toLowerCase()));
-}
-
-function firstString(...values: unknown[]): string | undefined {
-  for (const value of values) {
-    const text = stringValue(value);
-    if (text) return text;
-  }
-  return undefined;
-}
-
-function inferRoutineDraft(input: AssistantIntentInput): AssistantRoutineDraft | undefined {
-  const text = stringValue(input.utterance) ?? stringValue(input.routine?.naturalLanguageGoal) ?? '';
-  const lower = text.toLowerCase();
-  const wantsRoutine = containsAny(lower, ['每天', '每日', '每周', '以后', '定期', 'daily', 'every day', 'weekly', 'routine']);
-  if (!wantsRoutine && !input.routine) return undefined;
-  const mentionsMail = containsAny(lower, ['邮件', '邮箱', 'gmail', 'email', 'mail']);
-  const mentionsWork = containsAny(lower, ['工作', 'jira', 'pr', 'api', 'ba', 'uat', 'sit', 'kafka']);
-  const goal = firstString(input.routine?.naturalLanguageGoal, input.utterance) ?? '按自然语言目标执行个人助理 routine。';
-  const scheduleText = firstString(input.routine?.scheduleText, input.context?.scheduleText, input.context?.schedule) ?? (containsAny(lower, ['每周', 'weekly']) ? '每周' : '每天 09:00');
-  const dataSources = Array.isArray(input.routine?.dataSources) && input.routine.dataSources.length > 0
-    ? input.routine.dataSources.map(String)
-    : mentionsMail
-      ? ['gmail', ...(mentionsWork ? ['calendar', 'tasks'] : [])]
-      : ['gmail', 'calendar', 'tasks'];
-  const name = firstString(input.routine?.name) ?? (mentionsMail ? '每日邮件整理' : '个人助理 Routine');
-  return {
-    name,
-    naturalLanguageGoal: goal,
-    scheduleText,
-    timezone: firstString(input.routine?.timezone, input.timezone),
-    dataSources: [...new Set(dataSources)],
-    output: input.routine?.output === 'gmail_draft' || input.routine?.output === 'none' ? input.routine.output : 'assistant_inbox',
-    allowedActions: Array.isArray(input.routine?.allowedActions) && input.routine.allowedActions.length > 0
-      ? input.routine.allowedActions.map(String)
-      : defaultRoutineAllowedActions(),
-    forbiddenActions: Array.isArray(input.routine?.forbiddenActions) && input.routine.forbiddenActions.length > 0
-      ? input.routine.forbiddenActions.map(String)
-      : defaultRoutineForbiddenActions(),
-  };
-}
-
-function dueFromContext(input: AssistantIntentInput): string | undefined {
-  const explicit = firstString(input.context?.due, input.context?.dueAt, input.context?.datetime, input.context?.time);
-  if (explicit) return explicit;
-  const utterance = stringValue(input.utterance) ?? '';
-  const nowDate = new Date();
-  const tomorrow = /明天|tomorrow/i.test(utterance);
-  const hourMatch = utterance.match(/(?:上午|早上|morning|at)?\s*(\d{1,2})\s*(?:点|:00|am|pm)?/i);
-  if (!tomorrow && !hourMatch) return undefined;
-  const due = new Date(nowDate);
-  if (tomorrow) due.setDate(due.getDate() + 1);
-  if (hourMatch) {
-    let hour = Number(hourMatch[1]);
-    if (/下午|晚上|pm/i.test(utterance) && hour < 12) hour += 12;
-    due.setHours(hour, 0, 0, 0);
-  }
-  return due.toISOString();
-}
-
-function reminderTitle(input: AssistantIntentInput): string | undefined {
-  const explicit = firstString(input.context?.title, input.context?.taskTitle, input.context?.reminderTitle);
-  if (explicit) return explicit;
-  const utterance = stringValue(input.utterance) ?? '';
-  if (!containsAny(utterance, ['提醒', 'remind', 'task', 'todo'])) return undefined;
-  return utterance
-    .replace(/^(请|帮我|麻烦)?/g, '')
-    .replace(/(明天|今天|后天|上午|下午|晚上|早上|中午|tomorrow|today|at|am|pm|\d{1,2}\s*点|\d{1,2}:\d{2})/ig, '')
-    .replace(/(提醒我|提醒|remind me to|remind me|create a reminder to|create reminder)/ig, '')
-    .replace(/[，。,.;；]+/g, ' ')
-    .trim()
-    .slice(0, 120) || undefined;
-}
-
-function inferReminderStep(input: AssistantIntentInput): AssistantPlanStepInput | undefined {
-  const title = reminderTitle(input);
-  if (!title) return undefined;
-  return {
-    pluginId: 'google_tasks',
-    actionId: 'create_task',
-    arguments: {
-      title,
-      ...(firstString(input.context?.notes) ? { notes: firstString(input.context?.notes) } : {}),
-      ...(dueFromContext(input) ? { due: dueFromContext(input) } : {}),
-    },
-  };
-}
-
-function inferMailSummaryStep(input: AssistantIntentInput): AssistantPlanStepInput | undefined {
-  const utterance = stringValue(input.utterance) ?? '';
-  if (!containsAny(utterance, ['整理邮件', '总结邮件', '邮件摘要', 'email summary', 'summarize email', 'summarize mail'])) return undefined;
-  if (containsAny(utterance, ['每天', '每日', '以后', 'daily', 'every day', 'routine'])) return undefined;
-  return {
-    pluginId: 'gmail',
-    actionId: 'list_messages',
-    arguments: {
-      query: firstString(input.context?.query) ?? 'newer_than:1d',
-      max_results: typeof input.context?.max_results === 'number' ? input.context.max_results : 20,
-    },
-  };
-}
-
-function inferGmailReadStep(input: AssistantIntentInput): AssistantPlanStepInput | undefined {
-  const utterance = stringValue(input.utterance) ?? '';
-  if (!containsAny(utterance, ['gmail', '邮件', '邮箱', 'email', 'mail'])) return undefined;
-  if (containsAny(utterance, ['每天', '每日', '以后', 'daily', 'every day', 'routine'])) return undefined;
-  if (!containsAny(utterance, ['读取', '查看', '搜索', '测试', '模拟', 'list', 'read', 'search', 'test', 'simulate', '整理', '总结'])) return undefined;
-  return {
-    pluginId: 'gmail',
-    actionId: 'list_messages',
-    arguments: {
-      query: firstString(input.context?.query) ?? (containsAny(utterance, ['最近一周', '7天', '7 天', 'week']) ? 'newer_than:7d' : 'newer_than:1d'),
-      max_results: typeof input.context?.max_results === 'number' ? input.context.max_results : 10,
-    },
-  };
-}
-
-function intentNameForStep(step: AssistantPlanStepInput | undefined): string {
-  if (!step) return 'execute_plan';
-  if (step.pluginId === 'google_tasks' && step.actionId === 'create_task') return 'create_reminder';
-  if (step.pluginId === 'gmail' && step.actionId === 'list_messages') return 'read_gmail';
-  return `${step.pluginId}.${step.actionId}`;
-}
-
-function initialResult(input: AssistantIntentInput, source: AssistantIntentSource, mode: AssistantIntentMode, id: string): AssistantIntentResult {
-  return {
-    schemaVersion: 1,
-    accepted: false,
-    mode,
-    source,
-    requestId: id,
-    understoodIntent: 'unknown',
-    displayTitle: '需要更多信息',
-    displayText: '我还没有足够信息把这句话转换成安全的本地动作。',
-    requiresConfirmation: false,
-    plan: [],
-    clarifyingQuestions: stringValue(input.utterance) ? [] : ['请提供自然语言请求 utterance，或直接提供结构化 plan。'],
-  };
-}
-
-async function submitPlanSteps(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  input: AssistantIntentInput,
-  steps: AssistantPlanStepInput[],
-  source: AssistantIntentSource,
-  id: string,
-  options: { automatedRoutine?: boolean } = {},
-): Promise<AssistantPlanStepResult[]> {
-  const results: AssistantPlanStepResult[] = [];
-  for (const [index, step] of steps.entries()) {
-    const stepId = planStepId(index, step);
-    try {
-      const manifest = getAssistantPluginManifest(controllerHome, repository, step.pluginId);
-      const action = manifest.actions.find((entry) => entry.actionId === step.actionId);
-      if (!action) throw new Error(`PLUGIN_ACTION_NOT_FOUND: ${step.pluginId}/${step.actionId}`);
-      const args = objectValue(step.arguments);
-      const policy = evaluateAssistantActionPolicy(step.pluginId, action, args, options);
-      if (policy.decision !== 'allow') {
-        results.push({
-          stepId,
-          pluginId: step.pluginId,
-          actionId: step.actionId,
-          status: 'blocked',
-          risk: action.risk,
-          decision: policy.decision,
-          reason: policy.reason,
-          requiredConfirmationText: policy.requiredConfirmationText,
-        });
-        continue;
-      }
-      const submitted = await submitAssistantPluginAction(controllerHome, repository, {
-        pluginId: step.pluginId,
-        actionId: step.actionId,
-        requestId: step.requestId?.trim() || `${id}:${stepId}`,
-        args,
-        confirmAuthorization: step.confirmAuthorization === true || policy.autoConfirmAuthorization,
-        confirmationText: step.confirmationText,
-        origin: { surface: sourceToSurface(source), actor: source, correlationId: id },
-      });
-      results.push({
-        stepId,
-        pluginId: step.pluginId,
-        actionId: step.actionId,
-        status: 'submitted',
-        risk: submitted.action.risk,
-        decision: policy.decision,
-        reason: policy.reason,
-        job: submitted.job,
-      });
-    } catch (error) {
-      results.push({
-        stepId,
-        pluginId: step.pluginId,
-        actionId: step.actionId,
-        status: 'blocked',
-        risk: 'unknown',
-        decision: 'reject',
-        reason: error instanceof Error ? error.message : String(error),
-      });
-    }
-  }
-  return results;
-}
-
-export async function submitAssistantIntent(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  input: AssistantIntentInput,
-): Promise<AssistantIntentResult> {
-  const source = normalizeSource(input.source);
-  const mode = normalizeMode(input.mode);
-  const id = requestId(input);
-  const base = initialResult(input, source, mode, id);
-  const routineDraft = inferRoutineDraft(input);
-  if (routineDraft) {
-    if (mode === 'plan_only' || input.confirmRoutine !== true) {
-      return {
-        ...base,
-        accepted: true,
-        understoodIntent: 'create_routine',
-        displayTitle: '准备创建个人助理 Routine',
-        displayText: `我理解你想保存「${routineDraft.name}」：${routineDraft.naturalLanguageGoal}`,
-        requiresConfirmation: true,
-        confirmationSummary: `保存后将按「${routineDraft.scheduleText}」触发，默认输出到 Assistant Inbox，不会自动发送或删除邮件。`,
-        routineDraft,
-      };
-    }
-    const routine = createAssistantRoutine(repository.canonicalRoot, routineDraft);
-    const binding = bindAssistantRoutineSchedule(controllerHome, repository, routine);
-    const inboxItem = addAssistantInboxItem(repository.canonicalRoot, {
-      kind: 'system_note',
-      title: `已创建 Routine：${routine.name}`,
-      summary: `${routine.scheduleText} · ${routine.naturalLanguageGoal}`,
-      source,
-      relatedRoutineId: routine.routineId,
-      relatedRequestId: id,
-      jobIds: [],
-      recommendations: ['你可以在 ChatGPT 里说“暂停这个 routine”或调用 /api/assistant/routines/:id/pause。'],
-      data: { routine, binding },
-    });
-    return {
-      ...base,
-      accepted: true,
-      understoodIntent: 'create_routine',
-      displayTitle: 'Routine 已保存',
-      displayText: `已保存「${routine.name}」，并绑定到持久化 Schedule：${binding.normalizedSchedule}。`,
-      requiresConfirmation: false,
-      routine,
-      inboxItem,
-    };
-  }
-
-  const inferredStep = inferReminderStep(input) ?? inferGmailReadStep(input) ?? inferMailSummaryStep(input);
-  const steps = input.plan && input.plan.length > 0 ? input.plan : inferredStep ? [inferredStep] : [];
-  if (steps.length === 0) return base;
-  if (mode === 'plan_only') {
-    const plan = steps.map((step, index) => ({
-      stepId: planStepId(index, step),
-      pluginId: step.pluginId,
-      actionId: step.actionId,
-      status: 'planned' as const,
-      risk: 'unknown' as const,
-      decision: 'allow' as const,
-      reason: 'Plan-only mode returned the proposed action without submitting an execution job.',
-    }));
-    return {
-      ...base,
-      accepted: true,
-      understoodIntent: intentNameForStep(inferredStep),
-      displayTitle: '已生成执行计划',
-      displayText: `已生成 ${plan.length} 个本地执行步骤，尚未提交。`,
-      requiresConfirmation: false,
-      plan,
-    };
-  }
-  const plan = await submitPlanSteps(controllerHome, repository, input, steps, source, id);
-  const submitted = plan.filter((step) => step.status === 'submitted');
-  const blocked = plan.filter((step) => step.status === 'blocked');
-  const inboxItem = addAssistantInboxItem(repository.canonicalRoot, {
-    kind: blocked.length > 0 ? 'approval_request' : 'intent_result',
-    title: blocked.length > 0 ? '个人助理请求需要确认' : '个人助理请求已提交',
-    summary: blocked.length > 0
-      ? `${blocked.length} 个步骤被策略拦截，需要人工确认。`
-      : `已提交 ${submitted.length} 个执行步骤。`,
-    source,
-    relatedRequestId: id,
-    jobIds: submitted.flatMap((step) => step.job?.jobId ? [step.job.jobId] : []),
-    recommendations: blocked.map((step) => `${step.pluginId}.${step.actionId}: ${step.reason}`).slice(0, 5),
-    data: { plan },
-  });
-  return {
-    ...base,
-    accepted: submitted.length > 0 && blocked.length === 0,
-    understoodIntent: inferredStep ? (inferredStep.actionId === 'create_task' ? 'create_reminder' : 'summarize_email') : 'execute_plan',
-    displayTitle: blocked.length > 0 ? '需要人工确认' : '请求已提交',
-    displayText: blocked.length > 0
-      ? `有 ${blocked.length} 个步骤需要确认；已提交 ${submitted.length} 个安全步骤。`
-      : `已提交 ${submitted.length} 个步骤到本地执行队列。`,
-    requiresConfirmation: blocked.length > 0,
-    confirmationSummary: blocked.map((step) => `${step.pluginId}.${step.actionId}: ${step.reason}`).join('\n') || undefined,
-    plan,
-    inboxItem,
-  };
-}
-
-export function runAssistantRoutineNow(
-  controllerHome: string,
-  repository: RepositoryRecord,
-  routineId: string,
-): AssistantIntentResult {
-  const routine = getAssistantRoutine(repository.canonicalRoot, routineId);
-  if (routine.status !== 'enabled') throw new Error(`ASSISTANT_ROUTINE_NOT_ENABLED: ${routineId}`);
-  const requestId = `routine-run-${routine.routineId}-${Date.now()}`;
-  const touched = touchAssistantRoutineRun(repository.canonicalRoot, routineId);
-  const inboxItem = addAssistantInboxItem(repository.canonicalRoot, {
-    kind: 'routine_result',
-    title: `Routine requires an external Controller: ${routine.name}`,
-    summary: 'The routine trigger was recorded without creating an ExecutionJob.',
-    body: routine.naturalLanguageGoal,
-    source: 'routine',
-    relatedRoutineId: routine.routineId,
-    relatedRequestId: requestId,
-    jobIds: [],
-    recommendations: ['Resume this existing Routine authority through its external Controller context. Do not create a new Work merely because the timer fired.'],
-    data: { routine: touched, externalControllerRequired: true, createWorkOnTrigger: false },
-  });
-  return {
-    schemaVersion: 1,
-    accepted: false,
-    mode: 'execute',
-    source: 'system',
-    requestId,
-    understoodIntent: 'run_routine',
-    displayTitle: `Routine requires an external Controller: ${routine.name}`,
-    displayText: 'No ExecutionJob or new Work was created. Continue the existing Routine authority from the recorded Inbox item with an explicitly claimed Controller session.',
-    requiresConfirmation: false,
-    plan: [],
-    routine: touched,
-    inboxItem,
-    clarifyingQuestions: [],
-  };
-}
-
-export function assistantRoutineDraftFromInput(input: AssistantIntentInput): AssistantRoutineDraft | undefined {
-  return inferRoutineDraft(input);
-}