@whyshu/argent 0.1.27 → 0.2.0

package/mcp/gateway.mjs

@@ -0,0 +1,336 @@
+#!/usr/bin/env node
+/**
+ * gateway.mjs —— Argent MCP 网关（v0.9.0 第一版，stdio）
+ *
+ * 为什么要有它（2026-11-03 决策）：
+ *   客户机 profile 里现在挂着 2 条 MCP（`mcp-argent-engine` + `mcp-argent-ml`），ERP 那套 15 个
+ *   officeTools 还困在服务端 —— 工具面散在 3 处。网关把它们收成**一个 endpoint**，
+ *   并在同一个进程里做：路由 / 审计 / 计量 / 脱敏钩子 / 上游降级。
+ *
+ * 设计要点：
+ *   · **不重写工具**：每个上游仍是独立进程（engine 用 core/mcp/server.mjs，ERP 用 erp-server.mjs），
+ *     网关只做 JSON-RPC 转发 + 命名空间前缀（`engine.*` / `erp.*` / `ml.*`）。
+ *   · **上游挂了不拖垮网关**：某个上游起不来 ⇒ 它的工具不出现在 tools/list，调用返回结构化错误。
+ *   · **审计/计量只记事件**：`<dataDir>/gateway/audit.jsonl`（工具/耗时/ok）与
+ *     `events.jsonl`（可计费动作）。⛔ 不记参数与结果正文。
+ *   · stdio 传输（dsh-mcp-client 已支持）；HTTP 常驻版本下一步在 core/mcp/http.mjs 的基础上加。
+ *
+ * 用法（dsh profile insert 时指向本文件即可）：
+ *   command: <node> args: [<repo>/core/mcp/gateway.mjs]
+ * 环境变量：
+ *   ARGENT_DATA_DIR          审计/计量落盘根（默认 ~/.dsh/argent）
+ *   ARGENT_GATEWAY_ML=1      额外挂 ml 上游（需要 python + tools/agentic/mcp_server.py）
+ *   ARGENT_GATEWAY_NOPREFIX=1 不加上游前缀（调试用）
+ */
+import { spawn } from 'node:child_process'
+import { appendEvent, loadIdemSet } from './meter.mjs'
+import { loadVault, saveVault, tokenizeEntities } from './vault.mjs'
+import { appendFileSync, existsSync, mkdirSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const PKG_ROOT = resolve(HERE, '..')
+const DATA_DIR = process.env.ARGENT_DATA_DIR || join(homedir(), '.dsh', 'argent')
+const GATEWAY_DIR = join(DATA_DIR, 'gateway')
+const NO_PREFIX = process.env.ARGENT_GATEWAY_NOPREFIX === '1'
+const SERVER_INFO = { name: 'argent-gateway', version: '0.9.0' }
+
+/**
+ * 结果脱敏（代号化）：把实体名换成 `[客户A]` 之类再交给模型。
+ * 只在 `ARGENT_GATEWAY_VAULT=1` 时启用；映射表落本机 vault.json（0600），⛔ 不上报。
+ * @returns {{text:string, tokens:number}}
+ */
+export function applyVaultToText(vault, text) {
+  try {
+    const j = JSON.parse(text)
+    const before = Object.keys(vault.byToken).length
+    const out = tokenizeEntities(vault, j)
+    const tokens = Object.keys(vault.byToken).length - before
+    if (tokens > 0) saveVault(vault)
+    return { text: JSON.stringify(out), tokens }
+  } catch {
+    return { text, tokens: 0 }
+  }
+}
+
+/** 结果是否算"成功"：MCP isError 之外，还要看工具自己返回的 `{"ok":false,...}`（如写开关未开） */
+export function resultOk(res) {
+  if (!res || res.isError) return false
+  try {
+    const text = res.content && res.content[0] && res.content[0].text
+    if (typeof text === 'string') {
+      const j = JSON.parse(text)
+      if (j && j.ok === false) return false
+    }
+  } catch { /* 非 JSON 结果照常算成功 */ }
+  return true
+}
+
+/** 只读工具名（不计费）——按语义后缀判，不维护第二份清单 */
+export function isReadOnlyTool(name) {
+  return /(^|[._])(search|list|detail|status|info|snapshot|dashboard|version|license|ledger|sop|doctor|report|failures|preflight|audit|tenant_info|prepare_action)(_|$)/.test(String(name || ''))
+}
+
+export class Upstream {
+  constructor(id, cmd, args, env = {}) {
+    this.id = id
+    this.pending = new Map()
+    this.nextId = 1
+    this.buf = ''
+    this.tools = []
+    this.alive = false
+    this.child = spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'], env: { ...process.env, ...env } })
+    this.child.stdout.setEncoding('utf8')
+    this.child.stdout.on('data', (c) => this._onData(c))
+    this.child.stderr.on('data', (c) => process.stderr.write(`[${id}] ${c}`))
+    this.child.on('exit', (code) => { this.alive = false; for (const p of this.pending.values()) p.reject(new Error(`${id} upstream exited (${code})`)); this.pending.clear() })
+    this.alive = true
+  }
+
+  _onData(chunk) {
+    this.buf += chunk
+    let i
+    while ((i = this.buf.indexOf('\n')) >= 0) {
+      const line = this.buf.slice(0, i).trim(); this.buf = this.buf.slice(i + 1)
+      if (!line) continue
+      let msg; try { msg = JSON.parse(line) } catch { continue }
+      const p = this.pending.get(msg.id)
+      if (!p) continue
+      this.pending.delete(msg.id)
+      if (msg.error) p.reject(new Error(msg.error.message || 'upstream error'))
+      else p.resolve(msg.result)
+    }
+  }
+
+  rpc(method, params, timeoutMs = 60000) {
+    const id = this.nextId++
+    return new Promise((res, rej) => {
+      const t = setTimeout(() => { this.pending.delete(id); rej(new Error(`${this.id} timeout after ${timeoutMs}ms`)) }, timeoutMs)
+      t.unref?.()
+      this.pending.set(id, {
+        resolve: (v) => { clearTimeout(t); res(v) },
+        reject: (e) => { clearTimeout(t); rej(e) },
+      })
+      this.child.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', id, method, params })}\n`)
+    })
+  }
+
+  async init() {
+    await this.rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: SERVER_INFO })
+    this.child.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' })}\n`)
+    const t = await this.rpc('tools/list', {})
+    this.tools = (t && t.tools) || []
+    return this.tools
+  }
+
+  call(name, args) { return this.rpc('tools/call', { name, arguments: args }, 180000) }
+  close() { try { this.child.kill('SIGTERM') } catch { /* noop */ } }
+}
+
+function audit(row) {
+  try {
+    mkdirSync(GATEWAY_DIR, { recursive: true })
+    appendFileSync(join(GATEWAY_DIR, 'audit.jsonl'), JSON.stringify({ at: new Date().toISOString(), ...row }) + '\n')
+  } catch { /* 审计写失败不影响调用 */ }
+}
+
+export class Gateway {
+  constructor({ upstreams } = {}) {
+    this.upstreams = upstreams || Gateway.defaultUpstreams()
+    this.routes = new Map()      // 对外工具名 → {up, name}
+    this.ready = false
+    this.idemSet = loadIdemSet(DATA_DIR)
+    this.vault = process.env.ARGENT_GATEWAY_VAULT === '1' ? loadVault(DATA_DIR) : null
+  }
+
+  static defaultUpstreams() {
+    // 引擎上游可选：插件独立安装（没有 engine 包）时只挂 erp.*，不因缺引擎而整个网关启动失败
+    const engineDir = process.env.ARGENT_ENGINE_DIR || ''
+    const engineServer = engineDir ? join(engineDir, 'core', 'mcp', 'server.mjs') : ''
+    const ups = []
+    if (engineServer && existsSync(engineServer)) ups.push(new Upstream('engine', process.execPath, [engineServer]))
+    ups.push(new Upstream('erp', process.execPath, [join(HERE, 'erp-server.mjs')]))
+    if (process.env.ARGENT_GATEWAY_ML === '1') {
+      const py = process.env.ARGENT_ENGINE_PY || join(DATA_DIR, 'venv', 'bin', 'python3')
+      const srv = join(REPO, 'tools', 'agentic', 'mcp_server.py')
+      if (existsSync(py) && existsSync(srv)) ups.push(new Upstream('ml', py, [srv], { PYTHONPATH: join(REPO, 'scripts') }))
+    }
+    return ups
+  }
+
+  async start() {
+    for (const up of this.upstreams) {
+      try {
+        const tools = await up.init()
+        for (const t of tools) {
+          const exposed = NO_PREFIX ? t.name : `${up.id}.${t.name}`
+          this.routes.set(exposed, { up, name: t.name, tool: t })
+        }
+      } catch (e) {
+        process.stderr.write(`[gateway] 上游 ${up.id} 不可用（跳过）：${String(e.message).slice(0, 160)}\n`)
+      }
+    }
+    this.ready = true
+    return this.listTools()
+  }
+
+  listTools() {
+    const out = []
+    for (const [exposed, r] of this.routes) {
+      out.push({
+        name: exposed,
+        description: r.tool.description || '',
+        inputSchema: r.tool.inputSchema || { type: 'object', properties: {} },
+        annotations: r.tool.annotations || (isReadOnlyTool(exposed) ? { readOnlyHint: true } : { readOnlyHint: false, destructiveHint: true }),
+      })
+    }
+    return out
+  }
+
+  async call(exposed, args = {}) {
+    const r = this.routes.get(exposed)
+    const started = Date.now()
+    if (!r) {
+      audit({ event: 'unknown_tool', tool: exposed })
+      return { isError: true, content: [{ type: 'text', text: JSON.stringify({ ok: false, code: 'unknown_tool', tool: exposed }) }] }
+    }
+    if (!isReadOnlyTool(exposed)) {
+      const lic = await this.licenseState()
+      if (lic.ok === false) {
+        audit({ event: 'license_blocked', tool: exposed, reason: lic.reason })
+        return { isError: true, content: [{ type: 'text', text: JSON.stringify({ ok: false, code: 'license_required', reason: lic.reason, hint: '本机许可无效/过期 ⇒ 写操作被网关拦下（只读不受影响）' }) }] }
+      }
+    }
+    if (!r.up.alive) {
+      audit({ event: 'upstream_down', tool: exposed, upstream: r.up.id })
+      return { isError: true, content: [{ type: 'text', text: JSON.stringify({ ok: false, code: 'upstream_unavailable', upstream: r.up.id, hint: '该上游进程已退出（参数错误/依赖缺失）；重开网关或修上游' }) }] }
+    }
+    try {
+      const res = await r.up.call(r.name, args)
+      const ms = Date.now() - started
+      const ok = resultOk(res)
+      let out = res
+      if (this.vault && ok && exposed.startsWith('erp.') && res && res.content && res.content[0]) {
+        const r = applyVaultToText(this.vault, res.content[0].text)
+        if (r.tokens > 0) {
+          out = { ...res, content: [{ ...res.content[0], text: r.text }, ...res.content.slice(1)] }
+          audit({ event: 'vault', tool: exposed, tokens: r.tokens })
+        }
+      }
+      audit({ event: 'call', tool: exposed, upstream: r.up.id, ms, ok })
+      if (!isReadOnlyTool(exposed)) {
+        const idem = String(args.idempotencyKey || args.idem || '')
+        // 2026-11-06（场景一 P4）：MCP 工具调用**不单独收费**，只做调用统计/审计；points 恒 0 仅为台账字段兼容
+        const m = appendEvent(DATA_DIR, { action: exposed, idem, points: 0, tenant: process.env.ARGENT_TENANT || '', ok, idemSet: this.idemSet })
+        if (m.duplicate) audit({ event: 'meter_duplicate', tool: exposed, idem })
+      }
+      return out
+    } catch (e) {
+      const ms = Date.now() - started
+      audit({ event: 'error', tool: exposed, upstream: r.up.id, ms, error: String(e.message).slice(0, 160) })
+      return { isError: true, content: [{ type: 'text', text: JSON.stringify({ ok: false, code: 'upstream_error', tool: exposed, message: String(e.message).slice(0, 300) }) }] }
+    }
+  }
+
+  /** 许可状态（5 分钟缓存；引擎不可达 ⇒ 放行但 audit 记 unknown，避免"网关把系统锁死"） */
+  async licenseState() {
+    // 默认**关**（开发机通常没有许可文件；客户机应设 PARENT=1 打开）
+    if (process.env.ARGENT_GATEWAY_LICENSE_GATE !== '1') return { ok: true, reason: 'gate_disabled' }
+    const now = Date.now()
+    if (this._lic && now - this._lic.at < 5 * 60 * 1000) return this._lic.value
+    const route = this.routes.get('engine.argent_license')
+    let value = { ok: true, reason: 'unknown_allowed' }
+    if (route && route.up.alive) {
+      try {
+        const res = await route.up.call(route.name, {})
+        const j = JSON.parse((res.content && res.content[0] && res.content[0].text) || '{}')
+        const state = j.state || j.status || ''
+        if (state === 'denied' || j.ok === false) value = { ok: false, reason: String(state || 'denied') }
+        else value = { ok: true, reason: String(state || 'valid') }
+      } catch { /* 引擎异常 ⇒ 放行 */ }
+    }
+    this._lic = { at: now, value }
+    return value
+  }
+
+  close() { for (const u of this.upstreams) u.close() }
+}
+
+/* ── 前端：stdio（默认） / HTTP（常驻，多窗口共享一份 vault 与计量） ─────── */
+const send = (msg) => process.stdout.write(`${JSON.stringify(msg)}\n`)
+
+/** 与传输无关的 JSON-RPC 处理（stdio 与 HTTP 共用，⛔ 不写两份） */
+export function rpcHandler(gw) {
+  return async (msg) => {
+    const { id, method, params } = msg || {}
+    if (method === 'initialize') return { jsonrpc: '2.0', id, result: { protocolVersion: '2024-11-05', capabilities: { tools: {} }, serverInfo: SERVER_INFO } }
+    if (method === 'notifications/initialized') return null
+    if (method === 'ping') return { jsonrpc: '2.0', id, result: {} }
+    if (method === 'tools/list') return { jsonrpc: '2.0', id, result: { tools: gw.listTools() } }
+    if (method === 'tools/call') return { jsonrpc: '2.0', id, result: await gw.call(params && params.name, (params && params.arguments) || {}) }
+    return { jsonrpc: '2.0', id, error: { code: -32601, message: `method not found: ${method}` } }
+  }
+}
+
+function startStdio(gw) {
+  const handle = rpcHandler(gw)
+  process.stdin.setEncoding('utf8')
+  let buf = ''
+  process.stdin.on('data', async (chunk) => {
+    buf += chunk
+    let i
+    while ((i = buf.indexOf('\n')) >= 0) {
+      const line = buf.slice(0, i).trim(); buf = buf.slice(i + 1)
+      if (!line) continue
+      let msg; try { msg = JSON.parse(line) } catch { continue }
+      const out = await handle(msg)
+      if (out) send(out)
+    }
+  })
+}
+
+async function startHttp(gw, port, bind) {
+  const { createServer } = await import('node:http')
+  const handle = rpcHandler(gw)
+  const server = createServer(async (req, res) => {
+    const j = (code, body) => { res.writeHead(code, { 'Content-Type': 'application/json; charset=utf-8', 'Cache-Control': 'no-store' }); res.end(JSON.stringify(body)) }
+    if (req.method === 'GET' && (req.url === '/health' || req.url === '/mcp/health')) {
+      return j(200, { ok: true, tools: gw.routes.size, upstreams: [...new Set([...gw.routes.values()].map((r) => r.up.id))] })
+    }
+    if (!(req.method === 'POST' && (req.url === '/mcp' || req.url === '/mcp/'))) return j(404, { error: 'not_found' })
+    let raw = ''
+    for await (const c of req) raw += c
+    let body
+    try { body = JSON.parse(raw || '{}') } catch { return j(400, { error: 'bad_json' }) }
+    const out = await handle(body)
+    if (!out) return j(202, { ok: true })
+    return j(200, out)
+  })
+  await new Promise((resolve) => server.listen(port, bind, resolve))
+  process.stderr.write(`[gateway] HTTP 就绪：http://${bind}:${port}/mcp（tools ${gw.routes.size}）\n`)
+  return server
+}
+
+async function main() {
+  const gw = new Gateway()
+  await gw.start()
+  process.stderr.write(`[gateway] 就绪：${gw.routes.size} 个工具（${[...new Set([...gw.routes.values()].map((r) => r.up.id))].join(' / ')}）\n`)
+
+  const httpMode = process.env.ARGENT_GATEWAY_HTTP === '1'
+  let server = null
+  if (httpMode) {
+    const port = Number(process.env.ARGENT_GATEWAY_PORT || 8791)
+    const bind = process.env.ARGENT_GATEWAY_BIND || '127.0.0.1'
+    server = await startHttp(gw, port, bind)
+  } else {
+    startStdio(gw)
+  }
+
+  const shutdown = () => { try { server && server.close() } catch { /* noop */ } gw.close(); process.exit(0) }
+  process.on('SIGTERM', shutdown)
+  process.on('SIGINT', shutdown)
+}
+
+if (process.argv[1] && /gateway\.mjs$/.test(process.argv[1])) main()

package/mcp/meter.mjs

@@ -0,0 +1,101 @@
+/**
+ * meter.mjs —— 计费事件的**本地台账 + 签名批次**（v0.9.0）
+ *
+ * 为什么需要签名：客户机是"可被改动"的环境，事件必须能证明"没被事后篡改"，
+ * 否则服务端对账时无法判断是漏报还是改过。
+ *
+ * 落盘（全部在 `<dataDir>/gateway/`，0600）：
+ *   events.jsonl       追加式事件（一行一条；含 idem 幂等键）
+ *   events.signed.jsonl  签名批次（每批 {batchId, fromSeq, toSeq, count, hmac}）
+ *   billing.key          HMAC 密钥（首次自动生成，0600；⛔ 不进仓库、不上报）
+ *   signoff.json         已签到的最大 seq（避免重复签）
+ *
+ * 口径（与 configs/billing-actions.json 一致）：
+ *   · 只在**动作成功**时记；读/提议/失败不计；
+ *   · 同一 `idem` 只记一次（重试/重放不重复计费）；
+ *   · ⛔ 不记录参数与结果正文（只 action / points / tenant / user / ts）。
+ */
+import { appendFileSync, chmodSync, existsSync, mkdirSync, openSync, closeSync, readFileSync, writeSync } from 'node:fs'
+import { createHmac, randomUUID } from 'node:crypto'
+import { join } from 'node:path'
+
+const KEYS = ['at', 'action', 'idem', 'points', 'tenant', 'user', 'ok']
+
+function dirOf(dataDir) {
+  const d = join(dataDir, 'gateway')
+  mkdirSync(d, { recursive: true })
+  return d
+}
+
+/** 读密钥；不存在则生成（0600） */
+export function loadOrCreateKey(dataDir) {
+  const f = join(dirOf(dataDir), 'billing.key')
+  if (existsSync(f)) return readFileSync(f, 'utf8').trim()
+  const key = randomUUID().replace(/-/g, '') + randomUUID().replace(/-/g, '')
+  const fd = openSync(f, 'w', 0o600)
+  writeSync(fd, key)
+  closeSync(fd)
+  try { chmodSync(f, 0o600) } catch { /* noop */ }
+  return key
+}
+
+function readLines(file) {
+  if (!existsSync(file)) return []
+  return readFileSync(file, 'utf8').split('\n').filter(Boolean)
+}
+
+/** 已存在的幂等键集合（启动时读一次；之后内存维护） */
+export function loadIdemSet(dataDir) {
+  const set = new Set()
+  for (const line of readLines(join(dirOf(dataDir), 'events.jsonl'))) {
+    try { const e = JSON.parse(line); if (e.idem) set.add(e.idem) } catch { /* 跳过坏行 */ }
+  }
+  return set
+}
+
+/**
+ * 追加一条事件。
+ * @returns {{ok:boolean, duplicate?:boolean, seq?:number}}
+ */
+export function appendEvent(dataDir, { action, idem = '', points = 0, tenant = '', user = '', ok = true, idemSet } = {}) {
+  if (!ok) return { ok: false, reason: 'not_successful' }
+  if (idem && idemSet && idemSet.has(idem)) return { ok: true, duplicate: true }
+  const dir = dirOf(dataDir)
+  const file = join(dir, 'events.jsonl')
+  const seq = readLines(file).length + 1
+  const ev = { at: new Date().toISOString(), seq, action, idem, points, tenant, user }
+  appendFileSync(file, JSON.stringify(ev) + '\n')
+  if (idem && idemSet) idemSet.add(idem)
+  return { ok: true, seq }
+}
+
+/** 把 events.jsonl 里尚未签名的事件打包签名（幂等：靠 signoff.json 的 toSeq） */
+export function signPending(dataDir, { key } = {}) {
+  const dir = dirOf(dataDir)
+  const events = readLines(join(dir, 'events.jsonl')).map((l) => JSON.parse(l))
+  const signoffFile = join(dir, 'signoff.json')
+  let signedTo = 0
+  try { signedTo = JSON.parse(readFileSync(signoffFile, 'utf8')).toSeq || 0 } catch { /* first run */ }
+  const pending = events.filter((e) => (e.seq || 0) > signedTo)
+  if (!pending.length) return { ok: true, signed: 0, toSeq: signedTo }
+  const hm = createHmac('sha256', key || loadOrCreateKey(dataDir))
+  // 规范化：字段顺序固定，避免签名依赖 JSON 键序
+  const canonical = pending.map((e) => KEYS.map((k) => (k === 'at' || k === 'action' || k === 'idem' ? (e[k] || '') : e[k] === undefined ? '' : String(e[k]))).join('\u0001')).join('\n')
+  const hmac = hm.update(canonical).digest('hex')
+  const batch = { batchId: randomUUID(), fromSeq: pending[0].seq, toSeq: pending[pending.length - 1].seq, count: pending.length, hmac, at: new Date().toISOString() }
+  appendFileSync(join(dir, 'events.signed.jsonl'), JSON.stringify(batch) + '\n')
+  const fd = openSync(signoffFile, 'w', 0o600)
+  writeSync(fd, JSON.stringify({ toSeq: batch.toSeq, batchId: batch.batchId }))
+  closeSync(fd)
+  return { ok: true, signed: batch.count, toSeq: batch.toSeq, batchId: batch.batchId }
+}
+
+/** 校验一个批次（测试/服务端对账可用同一实现） */
+export function verifyBatch(events, batch, key) {
+  const canonical = events
+    .filter((e) => e.seq >= batch.fromSeq && e.seq <= batch.toSeq)
+    .map((e) => KEYS.map((k) => (k === 'at' || k === 'action' || k === 'idem' ? (e[k] || '') : e[k] === undefined ? '' : String(e[k]))).join('\u0001'))
+    .join('\n')
+  const expect = createHmac('sha256', key).update(canonical).digest('hex')
+  return expect === batch.hmac
+}

package/mcp/vault.mjs

@@ -0,0 +1,78 @@
+/**
+ * vault.mjs —— 代号 ↔ 真名（脱敏用，**只存本机**）
+ *
+ * 为什么要它：把"六禾园"这类实体名换成 `[客户A]` 再进模型，模型推理正常但看不到真名；
+ * 需要展示真名时在**本地**回填（rehydrate）。映射表落 `<dataDir>/gateway/vault.json`（0600）。
+ *
+ * 红线：
+ *   · ⛔ 只落本机，绝不进事件/审计/上报（审计只记"脱敏了几个实体"）；
+ *   · token 形状固定 `[<kind>字母]`，同值同 token（稳定，便于模型在上下文中指代）；
+ *   · kind 各自独立计数（客户A / 店铺A 不串号）。
+ */
+import { existsSync, mkdirSync, readFileSync, chmodSync, openSync, closeSync, writeSync } from 'node:fs'
+import { join } from 'node:path'
+
+const KIND_PREFIX = { customer: '客户', company: '客户', store: '店铺', user: '人员', item: '商品' }
+
+export function loadVault(dataDir) {
+  const file = join(dataDir, 'gateway', 'vault.json')
+  if (existsSync(file)) {
+    try {
+      const j = JSON.parse(readFileSync(file, 'utf8'))
+      return { file, counters: j.counters || {}, byValue: j.byValue || {}, byToken: j.byToken || {} }
+    } catch { /* 坏文件 ⇒ 重建（不静默丢：下面 save 时会覆盖） */ }
+  }
+  return { file, counters: {}, byValue: {}, byToken: {} }
+}
+
+export function saveVault(vault) {
+  const { file, counters, byValue, byToken } = vault
+  mkdirSync(file.slice(0, file.lastIndexOf('/')), { recursive: true })
+  const fd = openSync(file, 'w', 0o600)
+  writeSync(fd, JSON.stringify({ counters, byValue, byToken }, null, 0))
+  closeSync(fd)
+  try { chmodSync(file, 0o600) } catch { /* noop */ }
+}
+
+/** 把实体名换成稳定代号；空值/短值不处理 */
+export function tokenize(vault, kind, value) {
+  const raw = String(value || '').trim()
+  if (!raw || raw.length < 2) return raw
+  const key = `${kind}:${raw}`
+  if (vault.byValue[key]) return vault.byValue[key]
+  const prefix = KIND_PREFIX[kind] || '实体'
+  const n = (vault.counters[kind] || 0) + 1
+  vault.counters[kind] = n
+  const letter = String.fromCharCode(64 + ((n - 1) % 26) + 1)
+  const token = `[${prefix}${letter}${n > 26 ? Math.ceil(n / 26) : ''}]`
+  vault.byValue[key] = token
+  vault.byToken[token] = raw
+  return token
+}
+
+/** 文本里出现代号就换回真名（只在本地展示时用） */
+export function rehydrate(vault, text) {
+  let out = String(text || '')
+  for (const [token, real] of Object.entries(vault.byToken)) {
+    if (out.includes(token)) out = out.split(token).join(real)
+  }
+  return out
+}
+
+/** 按字段名把对象里的实体名换成代号（浅层递归，命中即换） */
+export function tokenizeEntities(vault, obj, fields = /^(customer|company|buyer|contact|user|owner|store|shop)Name$/i) {
+  if (Array.isArray(obj)) return obj.map((v) => tokenizeEntities(vault, v, fields))
+  if (obj && typeof obj === 'object') {
+    const out = {}
+    for (const [k, v] of Object.entries(obj)) {
+      if (fields.test(k) && typeof v === 'string') {
+        const kind = /^(store|shop)Name$/i.test(k) ? 'store' : /^(contact|user|owner)Name$/i.test(k) ? 'user' : 'customer'
+        out[k] = tokenize(vault, kind, v)
+        continue
+      }
+      out[k] = tokenizeEntities(vault, v, fields)
+    }
+    return out
+  }
+  return obj
+}

package/mcp/vendor/account-token.mjs

@@ -0,0 +1,37 @@
+/**
+ * 账号 token 的唯一解析点（2026-11-03）
+ *
+ * 为什么要单独成文件：ERP MCP 适配层（core/mcp/erp-server.mjs）与 dsh 宿主插件
+ * （plugins/argent-erp-ui）都要用**同一把**问述账号 JWT，⛔ 不许各写一套"先读哪个文件"。
+ *
+ * 顺序（实测依据见 docs/Argent-0.9-ERP入口与MCP网关-规划.md）：
+ *   ① `ARGENT_ACCOUNT_TOKEN`（显式注入，测试/排障）
+ *   ② `WHYSHU_API_KEY` 环境变量（宿主 profile 注入）
+ *   ③ `~/.dsh/.credentials.yaml` 的 `refs.WHYSHU_API_KEY`（现役；只读，⛔ 绝不写）
+ *
+ * ⚠️ `~/.dsh/argent/whyshu.env` 里的 JWT **已过期**（2026-11-03 实测 401），故意不读它。
+ */
+import { readFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+
+/** 只读：从 credentials 文件里取 `WHYSHU_API_KEY: <token>`（窄正则，避免解析整份 YAML） */
+export function readTokenFromCredentials(dshHome = process.env.DSH_HOME || join(homedir(), '.dsh')) {
+  try {
+    const raw = readFileSync(join(dshHome, '.credentials.yaml'), 'utf8')
+    const m = raw.match(/WHYSHU_API_KEY\s*:\s*"?([A-Za-z0-9._-]{20,})/)
+    return m ? m[1] : ''
+  } catch {
+    return ''
+  }
+}
+
+/** @returns {{token:string, source:'env-explicit'|'env-whyshu'|'credentials'|'none'}} */
+export function resolveAccountToken({ env = process.env, dshHome } = {}) {
+  const explicit = String(env.ARGENT_ACCOUNT_TOKEN || '').trim()
+  if (explicit) return { token: explicit, source: 'env-explicit' }
+  const whyshu = String(env.WHYSHU_API_KEY || '').trim()
+  if (whyshu) return { token: whyshu, source: 'env-whyshu' }
+  const fromFile = readTokenFromCredentials(dshHome)
+  return fromFile ? { token: fromFile, source: 'credentials' } : { token: '', source: 'none' }
+}

package/mcp/vendor/redact.mjs

@@ -0,0 +1,34 @@
+/**
+ * 脱敏原语（2026-11-03，v0.9.0）
+ *
+ * 唯一实现点：ERP MCP 适配层（core/mcp/erp-server.mjs）与 dsh 宿主插件（plugins/argent-erp-ui）
+ * 都从这里取，⛔ 不许各写一套正则（两份必然漂移）。
+ *
+ * 当前规则（最小集，可扩）：
+ *   · 手机号 → 保留前3后4，中间 ****
+ *   · 键名命中 token / downloadUrl / signedUrl ⇒ **丢弃**（只留文件名类字段）
+ *   · 超长字符串（>400）截断，避免把整页 HTML 塞进模型上下文
+ *   · `tenantId`（内部 Mongo id）不返回：对用户无意义，且能关联到别处
+ */
+export function maskPhone(value) {
+  return String(value || '').replace(/(\d{3})\d{4}(\d{4})/, '$1****$2')
+}
+
+const DROP_KEYS = /(token|downloadUrl|download_url|signedUrl|signed_url|tenantId)/i
+const PHONE_KEYS = /(phone|mobile)/i
+
+export function redactDeep(value, depth = 0) {
+  if (depth > 6) return value
+  if (Array.isArray(value)) return value.map((v) => redactDeep(v, depth + 1))
+  if (value && typeof value === 'object') {
+    const out = {}
+    for (const [k, v] of Object.entries(value)) {
+      if (DROP_KEYS.test(k)) continue
+      if (PHONE_KEYS.test(k) && typeof v === 'string') { out[k] = maskPhone(v); continue }
+      out[k] = redactDeep(v, depth + 1)
+    }
+    return out
+  }
+  if (typeof value === 'string' && value.length > 400) return `${value.slice(0, 400)}…`
+  return value
+}

package/package.json

@@ -1,30 +1,40 @@
 {
   "name": "@whyshu/argent",
-  "version": "0.1.27",
-  "description": "Argent 启动器：一条命令启动「打包好的 dsh + Argent 插件/角色预设」，并管理本机 runner 常驻。",
+  "version": "0.2.0",
   "type": "module",
-  "bin": {
-    "argent": "./bin/argent.mjs"
-  },
+  "description": "Argent 单 bundle（dsh web / DSH Desktop 同一插件）：ERP 连接器 + 问述代理 + 登录/续期 + MCP 网关 + 伞伞桌宠（含积分）",
+  "main": "src/index.js",
   "exports": {
-    ".": "./lib/index.mjs",
+    ".": "./src/index.js",
+    "./client": "./dist/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json"
   },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "dependencies": {
-    "@deepseek-ai/dsh": "0.2.1-rc.2",
-    "@whyshu/argent-engine": "0.8.0-rc.11"
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cstcen/argent-dsh.git",
+    "directory": "plugins/argent"
   },
   "files": [
-    "bin/",
-    "lib/",
-    "runner/",
+    "src/",
+    "dist/",
+    "mcp/",
+    "cordis.patch.yml",
     "README.md"
   ],
-  "license": "MIT",
-  "scripts": {
-    "test": "node --test test/*.test.mjs"
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web"
+    },
+    "plugin": {
+      "displayName": "Argent（ERP + 问述代理 + 伞伞）"
+    }
   }
 }