dsh-deepmoyu 2.3.0 → 2.4.1

package/lib/reply.mjs

@@ -28,7 +28,7 @@
  * 与 `lib/dup.mjs` 的 `DUP_LEDGER_MAX` 取同一个数：两边写的是**同一个对象**，
  * 上限不一致会出现"这边刚裁完那边又超"的来回抖动。
  */
-import { replyTargetId } from './ids.mjs'
+import { normalizeId, replyTargetId } from './ids.mjs'
 
 export const REPLY_LEDGER_MAX = 2000
 
@@ -91,8 +91,15 @@ export const replySkipReason = (it, was) => {
  */
 export const replyRemember = (ledger, key, rec) => {
   const next = { ...(ledger && typeof ledger === 'object' && !Array.isArray(ledger) ? ledger : {}) }
-  const k = String(key ?? '').trim()
-  if (!k || k === '0') return next
+  let k
+  try {
+    if (typeof key === 'number') k = normalizeId(key, { allowZero: false })
+    else if (typeof key === 'string') {
+      const match = /^(video:)?([0-9]+)$/.exec(key.trim())
+      if (!match) return next
+      k = (match[1] || '') + normalizeId(match[2], { allowZero: false })
+    } else return next
+  } catch { return next }
   next[k] = rec
   const keys = Object.keys(next)
   if (keys.length > REPLY_LEDGER_MAX) {

package/lib/run-settings.mjs

@@ -2,6 +2,7 @@
 export const RUN_DEFAULTS = Object.freeze({
   sessionModelId: '', sessionTokenBudget: 0, sessionMaxRounds: 64, sessionMinutes: 0,
   backgroundModelId: '', backgroundTokenBudget: 0, backgroundMinutes: 45,
+  backgroundWindowStart: '', backgroundWindowEnd: '',
 })
 export const RUN_LIMITS = Object.freeze({
   sessionTokenBudget: [0, 5_000_000], sessionMaxRounds: [1, 1000], sessionMinutes: [0, 1440],
@@ -29,6 +30,11 @@ export function migrateRunSettings(source = {}, legacy = {}) {
 
 export function clampRunSettings(patch = {}) {
   const out = { ...patch }
+  for (const key of ['backgroundWindowStart', 'backgroundWindowEnd']) if (own(out, key)) {
+    const value = typeof out[key] === 'string' ? out[key].trim() : ''
+    const parsed = parseHM(value)
+    out[key] = parsed ? `${String(parsed.h).padStart(2, '0')}:${String(parsed.m).padStart(2, '0')}` : ''
+  }
   for (const key of ['sessionModelId', 'backgroundModelId']) if (own(out, key)) out[key] = model(out[key])
   for (const [key, [lo, hi]] of Object.entries(RUN_LIMITS)) {
     if (own(out, key)) out[key] = number(out[key], RUN_DEFAULTS[key], lo, hi)

package/lib/sticker-automation.mjs

@@ -7,7 +7,7 @@ import { withFileLockSync, readJsonFileSync, atomicWriteFileSync } from './recor
 
 export const STICKER_DEFAULTS = Object.freeze({
   stickerAutoCollect: false, stickerCollectProbability: 35, stickerCollectCooldown: 60,
-  stickerAutoSend: false, stickerSendProbability: 30, stickerSendCooldown: 180, stickerCapacity: 60,
+  stickerAutoSend: false, stickerSendProbability: 30, stickerSendCooldown: 180, stickerCapacity: 60, stickerReview: false,
 })
 export const STICKER_LIMITS = Object.freeze({
   stickerCollectProbability: [0, 100], stickerCollectCooldown: [0, 86400],
@@ -15,7 +15,7 @@ export const STICKER_LIMITS = Object.freeze({
 })
 export function clampStickerSettings(patch = {}) {
   const out = { ...patch }
-  for (const key of ['stickerAutoCollect', 'stickerAutoSend']) if (key in out) out[key] = out[key] === true
+  for (const key of ['stickerAutoCollect', 'stickerAutoSend', 'stickerReview']) if (key in out) out[key] = out[key] === true
   for (const [key, [lo, hi]] of Object.entries(STICKER_LIMITS)) if (key in out) {
     const n = Number(out[key])
     out[key] = Math.max(lo, Math.min(hi, Math.trunc(Number.isFinite(n) ? n : STICKER_DEFAULTS[key])))
@@ -97,10 +97,11 @@ export function createStickerAutomation({ stateDir, getConfig, now = Date.now, r
         try {
           controller.signal.throwIfAborted()
           const result = await collect(stateDir, { ...candidate, capacity: cfg.stickerCapacity, autoName: true, signal: controller.signal,
+            get stickerReview() { return config().stickerReview },
             shouldCommit: () => !disposed && !sourceSignal?.aborted && config().stickerAutoCollect && config().stickerCollectProbability > 0 })
           if (result.ok && !controller.signal.aborted) {
             mutate(saved => { saved.lastCollectedAt = now(); return { write: true } })
-            emit('collected', { name: result.name, bvid: candidate.bvid })
+            emit('collected', { name: result.name, bvid: candidate.bvid, status: result.status })
           } else if (!result.duplicate) emit('collect-skipped', { error: String(result.error || '').slice(0, 160) })
         } catch (error) { if (!disposed && !controller.signal.aborted) emit('collect-skipped', { error: String(error?.message || error).slice(0, 160) }) }
         finally { sourceSignal?.removeEventListener('abort', abort); controllers.delete(controller) }
@@ -132,7 +133,7 @@ export function createStickerAutomation({ stateDir, getConfig, now = Date.now, r
       const cfg = config(), at = now()
       if (disposed || !cfg.stickerAutoSend || !chance(cfg.stickerSendProbability)) return null
       try {
-        const all = list(stateDir)
+        const all = list(stateDir, { status: 'approved' }).filter(item => item && (item.status === undefined || item.status === 'approved'))
         if (!all.length) return null
         let choice
         const token = randomUUID()

package/lib/sticker.mjs

@@ -1,6 +1,7 @@
 /** Local sticker library: read-only builtins and bounded, provenance-preserving collected images. */
-import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, lstatSync, realpathSync, unlinkSync, writeFileSync, openSync, closeSync, readSync } from 'node:fs'
+import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, lstatSync, realpathSync, unlinkSync, writeFileSync, openSync, closeSync, readSync, mkdtempSync, rmSync } from 'node:fs'
 import { join, dirname, resolve, relative, isAbsolute, basename } from 'node:path'
+import { tmpdir } from 'node:os'
 import { fileURLToPath } from 'node:url'
 import { createHash } from 'node:crypto'
 import { withFileLockSync, atomicWriteFileSync, readJsonFileSync } from './record-storage.mjs'
@@ -44,6 +45,8 @@ export const stickerTags = value => (Array.isArray(value) ? value : String(value
 const sha256 = bytes => createHash('sha256').update(bytes).digest('hex')
 const withinDir = (path, dir) => { const rel = relative(dir, path); return Boolean(rel) && !isAbsolute(rel) && rel !== '..' && !rel.startsWith('..\\') && !rel.startsWith('../') }
 const validFileName = name => typeof name === 'string' && name === basename(name) && !/[\\/\x00-\x1f:]/.test(name) && !/^\./.test(name)
+const nameKey = name => process.platform === 'win32' ? name.toLowerCase() : name
+const pathKey = file => nameKey(resolve(file))
 
 function readState(stateDir) {
   let state
@@ -80,57 +83,123 @@ function safeLibraryFile(dir, fileName) {
   } catch { return null }
 }
 
-function listFromBook(stateDir, book, { source, shadow = true } = {}) {
-  const out = [], seen = new Set()
-  if (source !== 'builtin') for (const [name, meta] of Object.entries(book).slice(0, STICKER_MAX * 4)) {
+// Entries installed before review existed remain usable. Unknown explicit states fail closed.
+const statusOf = meta => !Object.hasOwn(meta, 'status') || meta.status === 'approved' ? 'approved' : 'pending'
+
+function listFromBook(stateDir, book, { source, shadow = true, status = 'approved' } = {}) {
+  if (!['approved', 'pending', 'all'].includes(status)) return []
+  const out = [], seen = new Set(), pendingNames = new Set(), pendingFiles = new Set()
+  const entries = Object.entries(book)
+  // A pending alias must never expose the same path through an approved alias or builtin fallback.
+  for (const [name, meta] of entries) if (meta && typeof meta === 'object' && statusOf(meta) === 'pending') {
+    pendingNames.add(nameKey(name))
+    if (validFileName(meta.file)) pendingFiles.add(pathKey(resolve(collectedDirOf(stateDir), meta.file)))
+  }
+  if (source !== 'builtin') for (const [name, meta] of entries.slice(0, STICKER_MAX * 4)) {
     if (!meta || typeof meta !== 'object' || !safeName(name) || safeName(name) !== name) continue
     const info = safeLibraryFile(collectedDirOf(stateDir), meta.file)
     if (!info) continue
     seen.add(name)
-    out.push({ name, source: 'collected', ...info, addedAt: textOf(meta.addedAt, 40), from: textOf(meta.from, 2048),
+    const itemStatus = statusOf(meta)
+    if (status !== 'all' && status !== itemStatus) continue
+    out.push({ name, source: 'collected', status: itemStatus, ...info, addedAt: textOf(meta.addedAt, 40), from: textOf(meta.from, 2048),
       sourceUrl: textOf(meta.sourceUrl || (/^https?:\/\//i.test(meta.from || '') ? meta.from : ''), 2048),
-      bvid: textOf(meta.bvid, 32), rpid: textOf(meta.rpid, 32), description: textOf(meta.description), tags: stickerTags(meta.tags), hash: textOf(meta.hash, 64) })
+      bvid: textOf(meta.bvid, 32), rpid: textOf(meta.rpid, 32), description: textOf(meta.description), tags: stickerTags(meta.tags), hash: textOf(meta.hash, 64),
+      reviewedAt: textOf(meta.reviewedAt, 40) })
   }
-  if (source !== 'collected') {
-    let entries = []
-    try { entries = readdirSync(BUILTIN_DIR).slice(0, 500) } catch { /* no builtins */ }
-    for (const entry of entries) {
+  if (source !== 'collected' && status !== 'pending') {
+    let builtins = []
+    try { builtins = readdirSync(BUILTIN_DIR).slice(0, 500) } catch { /* no builtins */ }
+    for (const entry of builtins) {
       const info = safeLibraryFile(BUILTIN_DIR, entry)
       const name = entry.replace(/\.[^.]+$/, '')
       if (!info || !safeName(name) || (shadow && seen.has(name))) continue
-      out.push({ name, source: 'builtin', ...info, addedAt: '', from: '使用者的表情文件夹', sourceUrl: '', bvid: '', rpid: '', description: '', tags: [], hash: '' })
+      out.push({ name, source: 'builtin', status: 'approved', ...info, addedAt: '', from: '使用者的表情文件夹', sourceUrl: '', bvid: '', rpid: '', description: '', tags: [], hash: '', reviewedAt: '' })
     }
   }
-  return out
+  return status === 'approved' ? out.filter(item => !pendingNames.has(nameKey(item.name)) && !pendingFiles.has(pathKey(item.file))) : out
 }
+
+/** Sendable by default. Management/preview callers must explicitly request status:'pending' or 'all'. */
 export function listStickers(stateDir, options = {}) { return listFromBook(stateDir, readStickerBook(stateDir), options) }
 
-/** Explicit paths qualify only if they are already enumerated; never resolve an arbitrary in-directory path. */
+/** Explicit paths qualify only if already approved and enumerated. Listing options cannot bypass review. */
 export function resolveSticker(stateDir, input, options = {}) {
   const raw = String(input || '').trim()
   if (!raw) return ''
-  const all = listStickers(stateDir, options)
+  const all = listStickers(stateDir, { ...options, status: 'approved' })
   const found = all.find(item => item.name === raw || item.file === raw)
     || (!/[\\/]/.test(raw) ? all.find(item => safeName(raw) === item.name) : null)
   return found?.file || ''
 }
 
-export function readStickerImage(stateDir, name, source) {
+/** Manual gallery previews may opt into pending; sending must always use resolveSticker. */
+export function readStickerImage(stateDir, name, source, options = {}) {
   if (source && !['builtin', 'collected'].includes(source)) return null
-  const item = listStickers(stateDir, { source }).find(item => item.name === String(name || ''))
+  const item = listStickers(stateDir, { ...options, source }).find(item => item.name === String(name || ''))
   if (!item) return null
   const bytes = readFileSync(item.file)
   if (bytes.length > STICKER_BYTES_MAX || !sniffImageFormat(bytes)) return null
   return { ...item, bytes, etag: '"' + sha256(bytes) + '"' }
 }
 
-/** Both remote collection and uploads commit under the same state transaction. */
-function commitStickerBytes(stateDir, bytes, options, { clean, capacity, fmt, sourceUrl = '', from = '', allowCopy = false, autoName = false }) {
+/**
+ * Bind a send to the exact approved bytes, not to a reusable library path.
+ * The returned temp file is private and removed by cleanup(); a forget + same-name
+ * pending upload during the send can no longer swap the image under the MCP call.
+ */
+export function snapshotStickerForSend(stateDir, input) {
+  const raw = String(input || '').trim()
+  if (!raw) return null
+  try {
+    return withFileLockSync(join(stateDir, 'state.json'), () => {
+      const book = readStickerBook(stateDir)
+      const entries = Object.entries(book)
+      let found = entries.find(([name, meta]) => meta && typeof meta === 'object' && statusOf(meta) === 'approved'
+        && (name === raw || (validFileName(meta.file) && resolve(collectedDirOf(stateDir), meta.file) === raw)))
+      if (!found && !/[\\/]/.test(raw)) {
+        const clean = safeName(raw)
+        found = entries.find(([name, meta]) => name === clean && meta && typeof meta === 'object' && statusOf(meta) === 'approved')
+      }
+      if (found) {
+        const [name, meta] = found
+        const info = safeLibraryFile(collectedDirOf(stateDir), meta.file)
+        if (!info) return null
+        const bytes = readFileSync(info.file)
+        const hash = sha256(bytes)
+        // A stale ledger hash fails closed; never send bytes that changed after review.
+        if (meta.hash && meta.hash !== hash) return null
+        return { name, source: 'collected', bytes: bytes.length, hash, ...makeSendSnapshot(bytes, info.fmt) }
+      }
+      // Builtins are read-only and always approved.
+      const clean = safeName(raw)
+      if (!clean) return null
+      let builtinName = ''
+      try {
+        builtinName = readdirSync(BUILTIN_DIR, { withFileTypes: true })
+          .find(entry => entry.isFile() && entry.name.replace(/\.[^.]+$/, '') === clean)?.name || ''
+      } catch { return null }
+      const info = safeLibraryFile(BUILTIN_DIR, builtinName)
+      if (!info) return null
+      const bytes = readFileSync(info.file)
+      return { name: clean, source: 'builtin', bytes: bytes.length, hash: '', ...makeSendSnapshot(bytes, info.fmt) }
+    })
+  } catch { return null }
+}
+
+function makeSendSnapshot(bytes, fmt) {
+  const dir = mkdtempSync(join(tmpdir(), 'deepmoyu-sticker-'))
+  const file = join(dir, 'image.' + (fmt || sniffImageFormat(bytes) || 'png'))
+  writeFileSync(file, bytes, { flag: 'wx', mode: 0o600 })
+  return { file, cleanup() { try { rmSync(dir, { recursive: true, force: true }) } catch { /* best effort */ } } }
+}
+
+/** Both remote collection and uploads commit under the same state transaction. */function commitStickerBytes(stateDir, bytes, options, { clean, capacity, fmt, sourceUrl = '', from = '', allowCopy = false, autoName = false }) {
   const hash = sha256(bytes), dir = collectedDirOf(stateDir), stateFile = join(stateDir, 'state.json')
   return withFileLockSync(stateFile, () => {
     options.signal?.throwIfAborted()
     if (options.shouldCommit && !options.shouldCommit()) return { ok: false, code: 'STICKER_CANCELED', error: '自动收集已关闭或停止' }
-    const state = readState(stateDir), book = { ...bookOf(state) }, all = listFromBook(stateDir, book, { shadow: false })
+    const state = readState(stateDir), book = { ...bookOf(state) }, all = listFromBook(stateDir, book, { shadow: false, status: 'all' })
     const prior = all.find(item => (item.hash || sha256(readFileSync(item.file))) === hash)
     if (prior && !allowCopy) return { ok: false, code: 'STICKER_DUPLICATE', duplicate: true, name: prior.name, error: `这张图已经在库里了（${prior.name}）` }
     if (all.filter(item => item.source === 'collected').length >= capacity || Object.keys(book).length >= STICKER_MAX) {
@@ -140,6 +209,8 @@ function commitStickerBytes(stateDir, bytes, options, { clean, capacity, fmt, so
       const base = clean
       for (let n = 2; all.some(item => item.name === clean) || Object.hasOwn(book, clean); n++) clean = base.slice(0, NAME_MAX - String(n).length - 1) + '-' + n
     } else if (all.some(item => item.name === clean) || Object.hasOwn(book, clean)) return { ok: false, code: 'STICKER_NAME_EXISTS', error: `「${clean}」已经在库里了，想换图先 forget（内置区只读）` }
+    // Read the gate inside the transaction; automation may expose a getter for live config.
+    const status = options.stickerReview === true ? 'pending' : 'approved'
     mkdirSync(dir, { recursive: true })
     if (lstatSync(dir).isSymbolicLink()) throw new Error('收集目录不能是符号链接')
     const fileName = `${clean}.${fmt}`, file = join(dir, fileName)
@@ -147,6 +218,7 @@ function commitStickerBytes(stateDir, bytes, options, { clean, capacity, fmt, so
     writeFileSync(file, bytes, { flag: 'wx', mode: 0o600 })
     const meta = { file: fileName, from: textOf(options.from || from, 2048), sourceUrl: textOf(sourceUrl, 2048),
       addedAt: new Date().toISOString(), bytes: bytes.length, mime: STICKER_MIME[fmt], hash,
+      status,
       bvid: textOf(options.bvid, 32), rpid: textOf(options.rpid, 32), description: textOf(options.description), tags: stickerTags(options.tags), automatic: Boolean(options.automatic) }
     book[clean] = meta; state.stickers = book
     try { atomicWriteFileSync(stateFile, JSON.stringify(state, null, 2)) } catch (error) { try { unlinkSync(file) } catch { /* original error */ }; throw error }
@@ -161,10 +233,10 @@ export async function collectSticker(stateDir, options = {}) {
   if (!clean || /[\\/]/.test(String(name || ''))) return { ok: false, error: 'name 必须是普通文件名字符（别带路径、扩展名或怪符号）' }
   const capacity = Math.max(1, Math.min(STICKER_MAX, Math.trunc(Number(options.capacity) || STICKER_MAX)))
   try {
-    const initial = listStickers(stateDir, { shadow: false })
+    const initial = listStickers(stateDir, { shadow: false, status: 'all' })
     if (!autoName && initial.some(item => item.name === clean)) return { ok: false, error: `「${clean}」已经在库里了，想换图先 forget（内置区只读）` }
     if (initial.filter(item => item.source === 'collected').length >= capacity) return { ok: false, error: `收集区满了（上限 ${capacity} 张）——先 forget 一张再收` }
-    let bytes, sourceUrl = '', from = ''
+    let bytes, sourceUrl = '', from = '', allowCopy = false
     if (url) {
       // URL equality avoids a repeat download; content equality below covers changed URLs.
       const prior = initial.find(item => item.sourceUrl === String(url))
@@ -174,13 +246,13 @@ export async function collectSticker(stateDir, options = {}) {
     } else if (path) {
       const file = resolveSticker(stateDir, path)
       if (!file) return { ok: false, error: 'path 必须是库内已有的图（内置区或收集区），不接受任意路径' }
-      bytes = readFileSync(file); from = 'library copy'
+      bytes = readFileSync(file); from = 'library copy'; allowCopy = true
     } else return { ok: false, error: 'collect 要给 url 或 path 之一' }
     signal?.throwIfAborted()
     if (bytes.length > STICKER_BYTES_MAX) return { ok: false, error: '图片超过 5MB，太大了' }
     const fmt = sniffImageFormat(bytes)
     if (!fmt) return { ok: false, error: '内容不是认识的图片格式（jpg/png/gif/webp）' }
-    return commitStickerBytes(stateDir, bytes, options, { clean, capacity, fmt, sourceUrl, from, allowCopy: Boolean(path), autoName })
+    return commitStickerBytes(stateDir, bytes, options, { clean, capacity, fmt, sourceUrl, from, allowCopy, autoName })
   } catch (error) { return { ok: false, error: String(error?.message || error) } }
 }
 
@@ -203,12 +275,50 @@ export function uploadSticker(stateDir, options = {}) {
   try { validateStickerImage(bytes, fmt) } catch (error) { return failure('STICKER_IMAGE_INVALID', `无法识别或图片结构损坏：${error.message}`) }
   const capacity = Math.max(1, Math.min(STICKER_MAX, Math.trunc(Number(options.capacity) || STICKER_MAX)))
   try {
-    // Only metadata fields are forwarded. Client-supplied path/url/from/automatic cannot affect storage.
-    return commitStickerBytes(stateDir, bytes, { description, tags }, { clean: safeName(name), capacity, fmt,
+    // Trusted callers supply stickerReview from config, never from an unfiltered upload body.
+    // Client-supplied path/url/from/automatic cannot affect storage.
+    return commitStickerBytes(stateDir, bytes, { description, tags, get stickerReview() { return options.stickerReview === true } }, { clean: safeName(name), capacity, fmt,
       from: filename ? `local upload: ${textOf(filename, 255)}` : 'local upload' })
   } catch (error) { return failure('STICKER_STORAGE', String(error?.message || error)) }
 }
 
+/** Manual-only review. Re-read the entry under the shared state lock; optional hash binds the UI decision. */
+function decideSticker(stateDir, name, approved, options = {}) {
+  const failure = (code, error) => ({ ok: false, code, error })
+  const clean = safeName(name)
+  if (typeof name !== 'string' || !clean || /[\\/]/.test(name)) return failure('STICKER_INPUT', 'name 必须是普通文件名字符')
+  if (!options || typeof options !== 'object' || Array.isArray(options)) return failure('STICKER_INPUT', '审核选项必须是对象')
+  const { expectedHash } = options
+  if (expectedHash !== undefined && (typeof expectedHash !== 'string' || !/^[a-f0-9]{64}$/.test(expectedHash))) return failure('STICKER_INPUT', 'expectedHash 必须是图片的 SHA-256')
+  try {
+    return withFileLockSync(join(stateDir, 'state.json'), () => {
+      const state = readState(stateDir), book = { ...bookOf(state) }, meta = Object.hasOwn(book, clean) ? book[clean] : null
+      if (!meta || typeof meta !== 'object') return failure('STICKER_NOT_FOUND', `「${clean}」不在收集区（内置区只读）`)
+      if (statusOf(meta) !== 'pending') return failure('STICKER_NOT_PENDING', `「${clean}」不在待审核队列`)
+      const info = safeLibraryFile(collectedDirOf(stateDir), meta.file)
+      if (!info) return failure('STICKER_IMAGE_INVALID', '待审核图片不存在或不是收集区的有效图片')
+      const hash = sha256(readFileSync(info.file))
+      if ((meta.hash && meta.hash !== hash) || (expectedHash !== undefined && expectedHash !== hash)) return failure('STICKER_REVIEW_CHANGED', '待审核图片已变化，请重新查看后再决定')
+      if (approved) {
+        book[clean] = { ...meta, hash, status: 'approved', reviewedAt: new Date().toISOString() }
+      } else {
+        // A malformed alias must not delete a file still referenced by another entry.
+        if (!Object.entries(book).some(([key, value]) => key !== clean && validFileName(value?.file)
+          && pathKey(resolve(collectedDirOf(stateDir), value.file)) === pathKey(info.file))) unlinkSync(info.file)
+        delete book[clean]
+      }
+      state.stickers = book
+      atomicWriteFileSync(join(stateDir, 'state.json'), JSON.stringify(state, null, 2))
+      return approved ? { ok: true, approved: clean, status: 'approved', hash, reviewedAt: book[clean].reviewedAt }
+        : { ok: true, rejected: clean, hash }
+    })
+  } catch (error) { return failure('STICKER_STORAGE', String(error?.message || error)) }
+}
+
+/** Call from manual settings/API actions, never expose approval to automatic browsing tools. */
+export function approveSticker(stateDir, name, options = {}) { return decideSticker(stateDir, name, true, options) }
+export function rejectSticker(stateDir, name, options = {}) { return decideSticker(stateDir, name, false, options) }
+
 /** Only the collected area's validated regular file may be removed; malformed ledgers fail closed. */
 export function forgetSticker(stateDir, name) {
   const clean = safeName(name)

package/lib/tool-scope.mjs

@@ -0,0 +1,65 @@
+/** Bind role tools only to real agent.ctx registries. No global-schema fallback. */
+export function createToolScopeRegistry({ ctx, enabled, log = () => {} }) {
+  const definitions = new Map(), mounted = new Map()
+  const invalidContexts = new WeakSet()
+  let lastError = ''
+  const scopedRegistry = agent => {
+    try {
+      const receiver = agent?.ctx, registry = receiver?.tools
+      // A distinct ctx object does not prove isolation when an old adapter aliases the root service.
+      return receiver && receiver !== ctx && registry && registry !== ctx.tools && !invalidContexts.has(receiver)
+        && typeof registry.register === 'function' ? registry : null
+    } catch { return null }
+  }
+  const dispose = value => { try { if (typeof value === 'function') value(); else value?.dispose?.() } catch (error) { log(String(error?.message ?? error)) } }
+  const detach = agent => {
+    const record = mounted.get(agent)
+    if (!record) return
+    for (const value of record.values()) dispose(value)
+    mounted.delete(agent)
+  }
+  const refresh = agent => {
+    if (!agent || !enabled(agent)) { detach(agent); return false }
+    // Cordis resolves this service through the receiver ctx. Using ctx.tools at
+    // plugin scope would register every schema in every normal conversation.
+    const registry = scopedRegistry(agent)
+    if (!registry) {
+      lastError = '当前 DSH 未提供可确认的 agent.ctx.tools 会话作用域；已禁用对话内鲸鱼工具，未回退为全局工具。'
+      detach(agent); return false
+    }
+    let record = mounted.get(agent)
+    if (!record) { record = new Map(); mounted.set(agent, record) }
+    for (const [name, definition] of definitions) {
+      if (record.has(name)) continue
+      try {
+        const before = typeof ctx.tools?.get === 'function' ? ctx.tools.get(name) : undefined
+        const off = registry.register(definition)
+        // Old/adapted receivers must not silently route agent.ctx calls to the
+        // root layer. The installed DSH exposes get(name, undefined) for this
+        // exact global view; preserve any pre-existing foreign registration.
+        if (typeof ctx.tools?.get === 'function' && ctx.tools.get(name) !== before) {
+          dispose(off); invalidContexts.add(agent.ctx); detach(agent)
+          throw new Error('宿主会话注册落入全局工具层，已撤回且禁用；请更新 DSH。')
+        }
+        record.set(name, off)
+      }
+      catch (error) { lastError = String(error?.message ?? error); log('鲸鱼工具会话挂载失败：' + lastError); if (invalidContexts.has(agent.ctx)) return false }
+    }
+    if (record.size === definitions.size) lastError = ''
+    return record.size === definitions.size
+  }
+  const agents = () => { try { return ctx.get('agents')?.list?.() || [] } catch { return [] } }
+  const refreshAll = () => { for (const agent of agents()) refresh(agent) }
+  return {
+    register(definition) { definitions.set(definition.name, definition); refreshAll(); return definition },
+    refresh, detach, refreshAll,
+    snapshot() {
+      const live = agents()
+      const supported = live.some(agent => Boolean(scopedRegistry(agent)))
+      return { mode: 'session-scoped', supported, checked: live.length > 0, mountedSessions: mounted.size,
+        toolCount: definitions.size, globalFallback: false,
+        error: lastError || (live.length && !supported ? '当前 DSH 未提供 agent.ctx.tools；鲸鱼工具保持禁用，不会注入普通会话。' : '') }
+    },
+    dispose() { for (const agent of [...mounted.keys()]) detach(agent) },
+  }
+}