dsh-deepmoyu 2.3.0 → 2.4.2

package/lib/asr.py

@@ -18,33 +18,42 @@ import argparse
 import os
 import re
 import sys
-import tempfile
-
-# ⭐ Windows 上 Python 默认按 GBK 编/解码标准输出 —— 中文或 emoji 打进管道会直接炸
-#    （有用户反馈装依赖 / 跑转写时报 UnicodeDecodeError 或乱码）⇒ 这里钉死 UTF-8
-try:
-    sys.stdout.reconfigure(encoding='utf-8', errors='replace')
-    sys.stderr.reconfigure(encoding='utf-8', errors='replace')
-except Exception:
-    pass
+import uuid
 
 # ⚠️ 临时目录必须待在家目录里：值班那一轮跑在沙箱里（只允许写工作区/cwd），
 #    yt-dlp 默认往 %TEMP% 写、会被直接拒掉（2026-10-14 在主人机器上实证：
 #    yt_dlp DownloadError: unable to open for writing: [Errno 13] Permission denied）
 _HOME = os.path.dirname(os.path.abspath(__file__))
 _TMP = os.path.join(_HOME, 'tmp', 'asr')
-try:
-    os.makedirs(_TMP, exist_ok=True)
-    tempfile.tempdir = _TMP
-except Exception:
-    pass
 
-# ⭐ 必须在 import faster_whisper **之前**设好，否则它已经去连 HuggingFace 了
-os.environ.setdefault('HF_ENDPOINT', 'https://hf-mirror.com')
-# 模型缓存放本脚本所在目录（= 插件家）：默认的 ~/.cache 在本机拒绝写入
-os.environ.setdefault('HF_HOME', os.path.join(os.path.dirname(os.path.abspath(__file__)), '.hf-cache'))
-# HuggingFace 新版存储（Xet）国内镜像不代理 ⇒ 关掉它，走老 CDN 通道（否则 401）
-os.environ.setdefault('HF_HUB_DISABLE_XET', '1')
+def prepare_runtime() -> None:
+    """仅在执行命令时初始化环境，导入模块不改变进程的缓存或临时目录。"""
+    try:
+        sys.stdout.reconfigure(encoding='utf-8', errors='replace')
+        sys.stderr.reconfigure(encoding='utf-8', errors='replace')
+    except Exception:
+        pass
+    # 必须在 import faster_whisper 前设置；保留用户明确指定的端点与缓存。
+    os.environ.setdefault('HF_ENDPOINT', 'https://hf-mirror.com')
+    os.environ.setdefault('HF_HOME', os.path.join(_HOME, '.hf-cache'))
+    os.environ.setdefault('HF_HUB_DISABLE_XET', '1')
+
+
+def cleanup_download(tmp: str, tag: str) -> None:
+    """只回收本次下载的独占文件前缀，也处理失败时留下的分片。"""
+    try:
+        with os.scandir(tmp) as entries:
+            for entry in entries:
+                if not entry.name.startswith(tag + '.'):
+                    continue
+                try:
+                    # 不递归进入目录；即使出现符号链接也只删除链接本身。
+                    if entry.is_file(follow_symlinks=False) or entry.is_symlink():
+                        os.remove(entry.path)
+                except OSError:
+                    pass
+    except OSError:
+        pass
 
 
 def to_url(target: str) -> str:
@@ -59,7 +68,7 @@ def fetch_audio(url: str, tmp: str, tag: str) -> str:
     from yt_dlp import YoutubeDL
     opts = {
         'format': 'bestaudio/best',
-        'outtmpl': os.path.join(tmp, tag + '.%(ext)s'),   # ⭐ 用 BV 号当文件名：固定名会和别的轮次撞车（踩过）
+        'outtmpl': os.path.join(tmp, tag + '.%(ext)s'),   # 每次调用的独占标签，允许同视频并行下载。
         'paths': {'home': tmp, 'temp': tmp},   # 别让 yt-dlp 往 %TEMP% 写（沙箱会拒）
         'cachedir': False,                      # 顺手别去动用户目录里的缓存
         # ⭐ nopart：不写 .part 再改名，直接落最终文件。
@@ -89,17 +98,22 @@ def main() -> int:
                     help='Whisper 模型大小：tiny / base / small / medium（默认 small）')
     ap.add_argument('--lang', default='zh', help='语言（默认 zh；不给就自动判断请传 auto）')
     args = ap.parse_args()
+    prepare_runtime()
 
     src = args.target
     # ⚠️ 不用 mkdtemp：沙箱只允许写"子进程启动前就存在"的目录，新建的会被拒 ✗
-    #    这个目录由宿主（插件）预先建好；文件名固定，跑完自己清掉
+    #    这个目录由宿主（插件）预先建好；使用唯一前缀而不是新建子目录。
     tmp = _TMP
-    # ⭐ 每个视频用**自己的**文件名：以前写死 audio.m4a ⇒ 两轮同时跑会互相覆盖，
-    #    上一轮转出来的其实是另一个视频的内容（2026-10-14 值班那轮亲踩 ✗）
+    # 同一个视频也可能同时转写；清理权只属于本次远程下载，不属于本地输入。
     tag = os.path.basename(src).rsplit('.', 1)[0] or 'clip'
     tag = re.sub(r'[^0-9A-Za-z_-]', '_', tag)[:40] or 'clip'
+    tag += '-' + uuid.uuid4().hex
+    downloaded = False
     try:
-        if src.lower().startswith('http') or src.upper().startswith('BV'):
+        # 已存在的本地文件优先，即使文件名恰好以 BV/http 开头。
+        if not os.path.exists(src) and (src.lower().startswith('http') or src.upper().startswith('BV')):
+            os.makedirs(tmp, exist_ok=True)
+            downloaded = True
             print('[asr] 先下音频…', file=sys.stderr)
             src = fetch_audio(to_url(src), tmp, tag)
         if not os.path.exists(src):
@@ -117,16 +131,8 @@ def main() -> int:
         )
         text = ''.join(seg.text for seg in segments).strip()
     finally:
-        # 临时音频不留在磁盘上
-        try:
-            import glob
-            for f in glob.glob(os.path.join(tmp, tag + '.*')):
-                try:
-                    os.remove(f)
-                except Exception:
-                    pass
-        except Exception:
-            pass
+        if downloaded:
+            cleanup_download(tmp, tag)
 
     if args.out:
         with open(args.out, 'w', encoding='utf-8') as f:

package/lib/background-output.mjs

@@ -1,48 +1,95 @@
 /** Bounded background diagnostics. Never copy raw tool arguments, private inboxes or reasoning into the pet log. */
 import { StringDecoder } from 'node:string_decoder'
-import { redactRecordText } from './record-privacy.mjs'
 
 const ansi = /\x1b\[[0-?]*[ -/]*[@-~]/g
+const MAX_LINE = 16384
+const TOOL_NAMES = new Set(('bili_search bili_video_info bili_subtitle bili_comments bili_reply bili_reply_opus bili_received_replies '
+  + 'bili_dm_inbox bili_dm_list bili_dm_thread bili_dm_reply bili_send_message bili_send_dynamic bili_send_opus bili_moment '
+  + 'bili_my_dynamics bili_my_notices bili_my_video_comments bili_user_info bili_user_videos bili_hot_videos bili_weekly_hot bili_rank '
+  + 'bili_danmaku bili_login bili_login_poll bili_login_start bili_check_credential bili_whoami bili_config bili_duty_status '
+  + 'bili_feiyu bili_guard_status bili_learn bili_pace bili_pv bili_records bili_run bili_say bili_seen bili_setup bili_soul bili_status bili_sticker bili_taste').split(' '))
+const CODES = new Set(('NO_ADAPTER ENOENT EACCES EPERM ECONNREFUSED ECONNRESET ETIMEDOUT ERR_MODULE_NOT_FOUND MODULE_NOT_FOUND '
+  + 'ACCOUNT_SIGN_IN_REQUIRED INVALID_ARGUMENT INVALID_ROLE INVALID_MODEL_ROUTE RELAY_ERROR RELAY_INVALID_URL RELAY_NO_CAPABILITY '
+  + 'RELAY_ROUTE_MISMATCH RELAY_INVALID_MODEL_INFO RELAY_FRAME_LIMIT RELAY_STREAM_CLOSED RELAY_INVALID_ROLE RELAY_FORBIDDEN '
+  + 'RELAY_EXPIRED RELAY_BODY_LIMIT RELAY_INVALID_JSON RELAY_BUSY RELAY_NO_LLM RELAY_INVALID_REQUEST RELAY_NOT_READY').split(' '))
+
+/** Exception messages may echo arbitrary model/tool input. Emit allowlisted metadata only. */
+function diagnosticSummary(text, isWarning, truncated) {
+  const codes = [...new Set(text.match(/\b[A-Z][A-Z0-9_]+\b/g) || [])].filter(code => CODES.has(code)).slice(0, 6)
+  let summary = isWarning ? '后台运行时警告' : '后台进程报告错误'
+  if (/Cannot find module|ERR_MODULE_NOT_FOUND|MODULE_NOT_FOUND|failed to import/i.test(text)) summary = '后台依赖加载失败'
+  else if (/NO_ADAPTER|RELAY_NO_LLM|RELAY_NOT_READY/.test(text)) summary = '后台模型适配器不可用'
+  else if (/ACCOUNT_SIGN_IN_REQUIRED/.test(text)) summary = '后台账号需要重新登录'
+  else if (/ECONNREFUSED|ECONNRESET|ETIMEDOUT|连接失败/.test(text)) summary = '后台连接失败或超时'
+  else if (/启动失败/.test(text)) summary = '后台任务启动失败'
+  else if (/Ignoring extra certs/i.test(text)) summary = '后台证书配置警告'
+  else if (/ExperimentalWarning/i.test(text)) summary = '后台运行时实验性能力警告'
+  return { codes, text: summary + (codes.length ? `（${codes.join('、')}）` : '') + (truncated ? '；长行已截断' : '') + '；原始输出已省略' }
+}
+
+/** Shared by structured relay errors, which can echo the same private input as stderr. */
+export function summarizeBackgroundDiagnostic(value) {
+  const text = typeof value === 'string' ? value : `${String(value?.code || '')} ${String(value?.message || value || '')}`
+  return diagnosticSummary(text.slice(0, MAX_LINE), false, text.length > MAX_LINE)
+}
+
 export function createBackgroundOutput({ onDiagnostic, onProgress } = {}) {
   const decoders = { stdout: new StringDecoder('utf8'), stderr: new StringDecoder('utf8') }
   const pending = { stdout: '', stderr: '' }
+  const discarding = { stdout: false, stderr: false }
   let lastError = '', lastProgress = '', ended = false
-  const notify = (fn, value) => { try { fn?.(value) } catch { /* diagnostic failures cannot kill the host */ } }
-  const line = (value, channel) => {
-    const text = redactRecordText(String(value).replace(ansi, '').trim(), { maxLength: 1200 })
+  const notify = (fn, value) => {
+    try { Promise.resolve(fn?.(value)).catch(() => {}) } catch { /* diagnostic failures cannot kill the host */ }
+  }
+  const line = (value, channel, truncated = false) => {
+    const text = String(value).replace(ansi, '').trim()
     if (!text) return
     // Print only task/diagnostic metadata; a tool invocation may contain somebody's private message.
-    const tools = [...new Set(text.match(/\bbili_[a-z_]+\b/g) || [])]
+    const tools = [...new Set(text.match(/\bbili_[a-z_]+\b/g) || [])].filter(name => TOOL_NAMES.has(name))
     if (tools.length) {
       const message = '工具：' + tools.slice(0, 8).join('、')
       if (message !== lastProgress) { lastProgress = message; notify(onProgress, { stage: 'tool', text: message }) }
     }
-    const isError = /NO_ADAPTER|\b(?:Error|ERROR|ENOENT|ECONNREFUSED|ETIMEDOUT|ACCOUNT_SIGN_IN_REQUIRED|INVALID_[A-Z_]+|RELAY_[A-Z_]+)\b|dsh:|failed to import|启动失败|连接失败/i.test(text)
+    const isError = /NO_ADAPTER|\b(?:Error|ERROR|ENOENT|EACCES|EPERM|ECONNREFUSED|ECONNRESET|ETIMEDOUT|ERR_MODULE_NOT_FOUND|MODULE_NOT_FOUND|ACCOUNT_SIGN_IN_REQUIRED|INVALID_[A-Z_]+|RELAY_[A-Z_]+)\b|dsh:|failed to import|启动失败|连接失败/i.test(text)
     const isWarning = /^(?:\(node:\d+\)\s*)?(?:Warning:|warning:)|Ignoring extra certs|ExperimentalWarning/i.test(text)
     if ((channel === 'stderr' && (isError || isWarning || /^\s*at\s/.test(text))) || isError) {
-      const clean = text.replace(/((?:request|response|messages?|body|arguments|prompt)\s*[:=]).*/i, '$1[内容省略]')
-      if (isError && !isWarning) lastError = clean
-      notify(onDiagnostic, { channel, text: clean, error: isError && !isWarning })
+      const summary = diagnosticSummary(text, isWarning, truncated)
+      if (isError && !isWarning) lastError = summary.text
+      notify(onDiagnostic, { channel, ...summary, error: isError && !isWarning })
     }
   }
-  const feed = (text, channel, flush = false) => {
-    pending[channel] += text
-    let newline
-    while ((newline = pending[channel].indexOf('\n')) >= 0) {
-      line(pending[channel].slice(0, newline), channel)
-      pending[channel] = pending[channel].slice(newline + 1)
+  const feed = (text, channel) => {
+    let offset = 0
+    while (offset < text.length) {
+      const newline = text.indexOf('\n', offset), end = newline < 0 ? text.length : newline
+      if (!discarding[channel]) {
+        const room = MAX_LINE - pending[channel].length
+        pending[channel] += text.slice(offset, Math.min(end, offset + room))
+        if (end - offset > room) {
+          line(pending[channel], channel, true)
+          pending[channel] = ''; discarding[channel] = true
+        }
+      }
+      if (newline < 0) break
+      if (!discarding[channel]) line(pending[channel], channel)
+      pending[channel] = ''; discarding[channel] = false
+      offset = newline + 1
     }
-    if (pending[channel].length > 16384 || flush) { line(pending[channel], channel); pending[channel] = '' }
   }
   return {
     push(value, channel = 'stdout') {
       if (ended) return
+      if (channel !== 'stdout' && channel !== 'stderr') return
       try { feed(decoders[channel].write(Buffer.isBuffer(value) ? value : Buffer.from(String(value))), channel) } catch { /* invalid console bytes */ }
     },
     flush() {
       if (ended) return
       ended = true
-      for (const channel of ['stdout', 'stderr']) feed(decoders[channel].end(), channel, true)
+      for (const channel of ['stdout', 'stderr']) {
+        feed(decoders[channel].end(), channel)
+        if (!discarding[channel]) line(pending[channel], channel)
+        pending[channel] = ''; discarding[channel] = false
+      }
     },
     get lastError() { return lastError },
   }

package/lib/background-tools.mjs

@@ -5,6 +5,7 @@ export function backgroundToolNames(cfg = {}) {
   if (cfg.replyToComments) names.push('bili_received_replies')
   if (cfg.autoMoment) names.push('bili_moment')
   if (cfg.autoReplyDm) names.push('bili_dm_inbox', 'bili_dm_thread', 'bili_dm_reply')
+  if (['only', 'both'].includes(cfg.dmMode) && cfg.dmUid) names.push('bili_deliver')
   return names
 }
 export function toolInputSchema(parameters = {}) {

package/lib/companion.mjs

@@ -0,0 +1,43 @@
+/** Presentation preferences never change browsing, account permissions or send gates. */
+export const COMPANION_DEFAULTS = Object.freeze({
+  idleChatter: true,
+  chatterFrequency: 'normal', notificationLevel: 'normal', focusMode: false,
+  quietHoursEnabled: false, quietHoursStart: '23:00', quietHoursEnd: '08:00', petReducedMotion: false,
+})
+const choices = { chatterFrequency: ['rare', 'normal', 'lively'], notificationLevel: ['minimal', 'normal', 'all'] }
+const clock = value => typeof value === 'string' && /^([01]\d|2[0-3]):[0-5]\d$/.test(value)
+export function clampCompanionSettings(patch = {}) {
+  const out = { ...patch }
+  for (const [key, list] of Object.entries(choices)) if (Object.hasOwn(out, key) && !list.includes(out[key])) out[key] = COMPANION_DEFAULTS[key]
+  for (const key of ['idleChatter', 'focusMode', 'quietHoursEnabled', 'petReducedMotion']) if (Object.hasOwn(out, key) && typeof out[key] !== 'boolean') out[key] = COMPANION_DEFAULTS[key]
+  for (const key of ['quietHoursStart', 'quietHoursEnd']) if (Object.hasOwn(out, key) && !clock(out[key])) out[key] = COMPANION_DEFAULTS[key]
+  return out
+}
+export function companionPolicy(config = {}, now = new Date()) {
+  const cfg = { ...COMPANION_DEFAULTS, ...clampCompanionSettings(config) }
+  const minutes = text => Number(text.slice(0, 2)) * 60 + Number(text.slice(3))
+  const start = minutes(cfg.quietHoursStart), end = minutes(cfg.quietHoursEnd)
+  const at = now.getHours() * 60 + now.getMinutes()
+  const quiet = cfg.quietHoursEnabled && start !== end && (start < end ? at >= start && at < end : at >= start || at < end)
+  const focus = cfg.focusMode === true
+  const ranges = { rare: [240, 360], normal: [132, 210], lively: [45, 90] }
+  const range = ranges[cfg.chatterFrequency]
+  return {
+    quiet, focus, silenced: quiet || focus, reason: focus ? '专注模式' : quiet ? '夜间安静时段' : '',
+    chatterAllowed: cfg.idleChatter !== false && !quiet && !focus,
+    notificationLevel: cfg.notificationLevel, reducedMotion: cfg.petReducedMotion,
+    chatterMinMinutes: range[0], chatterMaxMinutes: range[1],
+    label: focus ? '专注陪伴' : quiet ? '夜间安静' : cfg.idleChatter === false ? '闲聊已关闭' : '自然陪伴',
+  }
+}
+export function nextChatterAt(config = {}, now = Date.now(), random = Math.random()) {
+  const policy = companionPolicy(config, new Date(now))
+  const fraction = Number.isFinite(random) ? Math.max(0, Math.min(1, random)) : 0.5
+  return now + (policy.chatterMinMinutes + fraction * (policy.chatterMaxMinutes - policy.chatterMinMinutes)) * 60_000
+}
+export function companionPrompt(config = {}, now = new Date()) {
+  const policy = companionPolicy(config, now)
+  return policy.silenced
+    ? `【陪伴节奏】目前是${policy.reason}，少闲聊、少追问，完成结果和需要本人决定的事情仍要清楚反馈。运行任务、发送权限与原有安全闸照旧。`
+    : '【陪伴节奏】只在有具体发现或需要接话时自然开口，不为显示在线编造观看、发言或心情经历。'
+}

package/lib/config-policy.mjs

@@ -0,0 +1,20 @@
+/** Model-authored arguments are preferences, never evidence of human authorization. */
+export const MODEL_CONFIG_KEYS = Object.freeze([
+  'persona', 'focus', 'keywords', 'reportLevel', 'perDay', 'momentStyle', 'interactionStyle',
+  'idleChatter', 'chatterFrequency', 'notificationLevel', 'focusMode',
+  'quietHoursEnabled', 'quietHoursStart', 'quietHoursEnd', 'petReducedMotion', 'petShow',
+])
+const permitted = new Set(MODEL_CONFIG_KEYS)
+export function modelConfigDecision(patch) {
+  const keys = Object.keys(patch || {})
+  if (keys.includes('sendReview')) return { ok: false, code: 'SEND_REVIEW_MANUAL_ONLY', error: '发送预览开关只能由本人在工作台 → 互动与投递中修改。' }
+  if (keys.includes('stickerReview')) return { ok: false, code: 'STICKER_REVIEW_MANUAL_ONLY', error: '表情人工审核开关只能由本人在工作台 → 记忆与素材中修改。' }
+  const blockedKeys = keys.filter(key => !permitted.has(key))
+  return blockedKeys.length ? { ok: false, code: 'AUTHORIZATION_MANUAL_ONLY', blockedKeys,
+    error: '发送授权、收件人、防护、预算、自动任务和执行环境配置只能由本人在工作台修改；模型只能调整内容与陪伴偏好。' } : { ok: true }
+}
+export function modelForceDecision(args) {
+  return args && Object.hasOwn(args, 'force') && args.force !== false
+    ? { ok: false, blocked: true, code: 'FORCE_NOT_AUTHORIZATION', error: '模型提供的 force 参数不是本人授权，不能绕过发送开关、审核、判重或节奏。请在工作台启用发送预览并由本人逐条批准，或手动调整发送权限。' }
+    : null
+}

package/lib/favops.py

@@ -8,6 +8,7 @@
 import asyncio
 import json
 import os
+import re
 import sys
 
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
@@ -49,6 +50,10 @@ async def folders():
 
 
 async def add(bvid, fid):
+    if not isinstance(bvid, str) or not re.fullmatch(r'BV[0-9A-Za-z]{10}', bvid):
+        raise ValueError('视频 BV 号格式无效')
+    if isinstance(fid, bool) or not isinstance(fid, int) or fid <= 0:
+        raise ValueError('收藏夹 ID 必须为正整数')
     # 2026-10-26：删掉了原来那句 `FavoriteList(aid, credential=cred).get_info()` ——
     # 它把**视频 aid** 当收藏夹 media_id 传进去，查的是"编号恰好等于这个 aid 的收藏夹"，
     # 几乎必然不存在/报错；结果没被使用，却会把整个 add() 拖崩（真正的收藏动作到不了）。
@@ -73,9 +78,11 @@ def main():
     if not args:
         out({'ok': False, 'error': '没有子命令（folders / add）'})
     try:
-        if args[0] == 'folders':
+        if args[0] == 'folders' and len(args) == 1:
             asyncio.run(folders())
-        elif args[0] == 'add' and len(args) >= 3:
+        elif args[0] == 'add' and len(args) == 3:
+            if not re.fullmatch(r'[0-9]+', args[2]):
+                raise ValueError('收藏夹 ID 必须为正整数')
             asyncio.run(add(args[1], int(args[2])))
         else:
             out({'ok': False, 'error': '子命令不认识：' + ' '.join(args)})

package/lib/ids.mjs

@@ -33,3 +33,44 @@ export const replyTargetId = (primary, fallback) => {
   const first = optionalId(primary)
   return first !== '0' ? first : optionalId(fallback)
 }
+
+/** Parse JSON without rounding decimal integer tokens. Strings/escapes are scanned, never rewritten.
+ * Ordinary JSON syntax validation remains JSON.parse's job; invalid leading zeros stay invalid.
+ * Safe integers, decimal fractions and exponent notation retain their standard JSON number types.
+ */
+export function parseJsonExactIntegers(source) {
+  if (typeof source !== 'string') throw new TypeError('JSON source must be a string')
+  // Validate original grammar first: quoting an illegal numeric object key must not repair it.
+  // Rounded values from this syntax pass are discarded whenever an unsafe token is present.
+  const ordinary = JSON.parse(source)
+  const parts = []
+  let cursor = 0, untouched = 0
+  const digit = index => source.charCodeAt(index) >= 48 && source.charCodeAt(index) <= 57
+  while (cursor < source.length) {
+    if (source[cursor] === '"') {
+      cursor++
+      while (cursor < source.length) {
+        if (source[cursor] === '\\') { cursor += 2; continue }
+        if (source[cursor++] === '"') break
+      }
+      continue
+    }
+    if (source[cursor] !== '-' && !digit(cursor)) { cursor++; continue }
+    const start = cursor
+    if (source[cursor] === '-') cursor++
+    while (digit(cursor)) cursor++
+    let integer = true
+    if (source[cursor] === '.') { integer = false; cursor++; while (digit(cursor)) cursor++ }
+    if (source[cursor] === 'e' || source[cursor] === 'E') {
+      integer = false; cursor++
+      if (source[cursor] === '+' || source[cursor] === '-') cursor++
+      while (digit(cursor)) cursor++
+    }
+    const token = source.slice(start, cursor)
+    if (integer && /^-?(?:0|[1-9]\d*)$/.test(token) && !Number.isSafeInteger(Number(token))) {
+      parts.push(source.slice(untouched, start), JSON.stringify(token))
+      untouched = cursor
+    }
+  }
+  return parts.length ? JSON.parse(parts.join('') + source.slice(untouched)) : ordinary
+}

package/lib/login-session.mjs

@@ -0,0 +1,34 @@
+/** One explicit login generation owns credential writes; late polls cannot replace a newer account. */
+export function createLoginSession({ start, poll, save, now = Date.now, ttlMs = 180_000 }) {
+  let generation = 0, active = null, disposed = false
+  const expired = () => ({ state: 'expired', message: '登录请求已失效，请使用最新二维码重新登录。' })
+  const current = attempt => !disposed && active === attempt && now() < attempt.expiresAt
+  return {
+    async start() {
+      if (disposed) throw new Error('登录服务已关闭')
+      const id = ++generation; active = null
+      const result = await start()
+      if (disposed || generation !== id) throw new Error('登录请求已被新的二维码替代')
+      if (typeof result?.key !== 'string' || !result.key || result.key.length > 512) throw new Error('二维码登录响应缺少有效 key')
+      active = Object.freeze({ ...result, generation: id, expiresAt: now() + ttlMs })
+      return active
+    },
+    current,
+    async poll(key) {
+      const attempt = active
+      if (typeof key !== 'string' || !key || key.length > 512 || !attempt || key !== attempt.key || !current(attempt)) return expired()
+      const result = await poll(key)
+      if (!current(attempt)) return expired()
+      if (result?.state === 'ok') {
+        const credential = result.credential
+        if (!credential || typeof credential.sessdata !== 'string' || !credential.sessdata || typeof credential.bili_jct !== 'string' || !credential.bili_jct) return { state: 'unknown', message: '登录凭证不完整，未替换本机账号。' }
+        const file = save(credential)
+        active = null
+        return { state: 'ok', file }
+      }
+      if (result?.state === 'expired') active = null
+      return { state: result?.state || 'unknown', code: result?.code, message: result?.message || '' }
+    },
+    dispose() { disposed = true; generation++; active = null },
+  }
+}

package/lib/login.mjs

@@ -18,6 +18,7 @@ import { spawn } from 'node:child_process'
 import { existsSync, mkdirSync } from 'node:fs'
 import { join } from 'node:path'
 import { atomicWriteFileSync } from './record-storage.mjs'
+import { randomUUID } from 'node:crypto'
 
 const UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36'
 const GEN = 'https://passport.bilibili.com/x/passport-login/web/qrcode/generate?source=main-fe-header'
@@ -43,7 +44,7 @@ function pickCookies(list) {
 async function ensureBuvid3(jar) {
   if (jar.buvid3) return jar
   try {
-    const r = await fetch(SPI, { headers: { 'User-Agent': UA } })
+    const r = await fetch(SPI, { headers: { 'User-Agent': UA }, signal: AbortSignal.timeout(15_000) })
     const j = await r.json()
     const v = j?.data?.b_3
     if (v) jar.buvid3 = v
@@ -52,7 +53,7 @@ async function ensureBuvid3(jar) {
 }
 
 export async function loginStart() {
-  const r = await fetch(GEN, { headers: { 'User-Agent': UA } })
+  const r = await fetch(GEN, { headers: { 'User-Agent': UA }, signal: AbortSignal.timeout(20_000) })
   const j = await r.json()
   const data = j?.data
   if (!data?.qrcode_key || !data?.url) throw new Error(`生成二维码失败：${j?.message || '返回里没有 qrcode_key'}`)
@@ -61,7 +62,7 @@ export async function loginStart() {
 
 /** 轮询一次。state: waiting / scanned / ok / expired / unknown */
 export async function loginPoll(key) {
-  const res = await fetch(pollUrl(key), { headers: { 'User-Agent': UA }, redirect: 'manual' })
+  const res = await fetch(pollUrl(key), { headers: { 'User-Agent': UA }, redirect: 'manual', signal: AbortSignal.timeout(20_000) })
   const setCookies = typeof res.headers.getSetCookie === 'function' ? res.headers.getSetCookie() : []
   let body = {}
   try { body = await res.json() } catch { /* poll 有时返回空体 */ }
@@ -95,7 +96,7 @@ export function saveCredential(stateDir, credential) {
  *    `/login/start` 那个 HTTP 请求就永远挂着（probeCmd 那批同型问题修过，这里漏了）。 */
 export function renderQrPng(pythonPath, stateDir, url, { timeoutMs = 20_000 } = {}) {
   return new Promise((resolve) => {
-    const png = join(stateDir, `qrcode_login.${process.pid}.png`)
+    const png = join(stateDir, `qrcode_login.${process.pid}.${randomUUID()}.png`)
     const code = 'import sys, qrcode; qrcode.make(sys.argv[1]).save(sys.argv[2])'
     let child
     let settled = false

package/lib/mcp.mjs

@@ -11,6 +11,7 @@
  */
 import { spawn } from 'node:child_process'
 import { readFileSync } from 'node:fs'
+import { parseJsonExactIntegers } from './ids.mjs'
 
 // 报给对端的身份：版本号**从 package.json 读**，别手写（手写的那份永远追不上发版）
 const PKG = (() => { try { return JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')) } catch { return {} } })()
@@ -96,7 +97,7 @@ export class McpClient {
     const result = await this.#request('tools/call', { name, arguments: args }, timeoutMs)
     const text = (result?.content ?? []).map((c) => c?.text ?? '').join('\n').trim()
     if (result?.isError) throw new Error(text || `MCP 工具 ${name} 报错`)
-    try { return text ? JSON.parse(text) : {} } catch { return text }
+    try { return text ? parseJsonExactIntegers(text) : {} } catch { return text }
   }
 
   #onData(chunk) {
@@ -107,7 +108,7 @@ export class McpClient {
       this.buf = this.buf.slice(idx + 1)
       if (!line) continue
       let msg
-      try { msg = JSON.parse(line) } catch { continue }   // 非 JSON 行（有些库会往 stdout 打日志）忽略
+      try { msg = parseJsonExactIntegers(line) } catch { continue }   // Ignore non-JSON log lines; protocol request IDs remain safe integers.
       if (msg.id !== undefined && this.pending.has(msg.id)) {
         const p = this.pending.get(msg.id)
         this.pending.delete(msg.id)

package/lib/memory-center.mjs

@@ -0,0 +1,74 @@
+import { createHash } from 'node:crypto'
+import { asBook, learnList } from './learn.mjs'
+import { SOUL_SECTIONS, soulSectionBody } from './persona.mjs'
+import { redactRecordText } from './record-privacy.mjs'
+
+export const MEMORY_SOURCES = ['all', 'learning', 'soul', 'voice', 'taste', 'seen', 'history']
+export const memoryFingerprint = (value) => createHash('sha256').update(typeof value === 'string' ? value : JSON.stringify(value)).digest('hex')
+const object = (value) => value && typeof value === 'object' && !Array.isArray(value) ? value : {}
+const safe = (value, maxLength = 2000) => redactRecordText(String(value ?? ''), { maxLength })
+const contentLines = (text) => {
+  const raw = String(text || '')
+  const visible = raw.replace(/<!--[\s\S]*?-->/g, (comment) => comment.replace(/[^\r\n]/g, ' ')).split(/\r?\n/)
+  return raw.split(/\r?\n/).map((line, index) => ({ line, text: visible[index] || '', index }))
+    .filter((row) => row.text.trim() && !/^\s*#/.test(row.text))
+}
+
+/** A bounded read-only projection. It never creates memories or changes their authority. */
+export function memoryCenterSnapshot(input = {}, options = {}) {
+  const source = MEMORY_SOURCES.includes(options.source) ? options.source : 'all'
+  const filter = String(options.filter || '').trim().slice(0, 160).toLocaleLowerCase()
+  const offset = Math.max(0, Math.min(10000, Math.floor(Number(options.offset) || 0)))
+  const limit = Math.max(1, Math.min(50, Math.floor(Number(options.limit) || 20)))
+  const rows = []
+  const add = (row) => {
+    const text = safe(row.text)
+    if (!text.trim()) return
+    rows.push({ ...row, text, from: safe(row.from, 300), label: safe(row.label, 80), at: String(row.at || ''), mutable: Boolean(row.mutable) })
+  }
+  const learning = []
+  for (let page = 0; page < 12; page++) {
+    const batch = learnList(asBook(input.learn), { state: 'all', limit: 100, offset: page * 100 })
+    learning.push(...batch.items)
+    if (!batch.more) break
+  }
+  for (const row of learning) add({ source: 'learning', id: String(row.id), label: row.label || row.kind || '学习',
+    state: row.state, text: row.text, from: row.from, at: row.decidedAt || row.at, example: safe(row.example, 500),
+    why: safe(row.why, 500), version: memoryFingerprint(object(asBook(input.learn).items)[row.id] || row), mutable: true,
+    actions: row.state === 'approved' ? ['revoke', 'forget'] : ['forget'] })
+  for (const section of SOUL_SECTIONS) {
+    const body = soulSectionBody(String(input.soulText || ''), section.key)
+    for (const row of contentLines(body)) add({ source: 'soul', id: `${section.key}:${row.index}`, section: section.key,
+      index: row.index, label: section.title, text: row.text, version: memoryFingerprint(row.line),
+      from: 'soul.md · 自己写下的心情', at: input.soulAt, mutable: true, actions: ['forget'] })
+  }
+  for (const row of contentLines(input.voiceText).slice(-500)) add({ source: 'voice', id: String(row.index), index: row.index,
+    label: '语气札记', text: row.text, from: 'voice.md · 自己整理的表达经验', at: input.voiceAt,
+    version: memoryFingerprint(row.line), mutable: true, actions: ['forget'] })
+  for (const [key, row] of Object.entries(object(input.taste)).slice(-300)) {
+    if (!/^\d{1,32}$/.test(key) || !row || typeof row !== 'object' || typeof row.text !== 'string') continue
+    add({ source: 'taste', id: key, label: '口味样本', text: row.text, from: row.bvid || '自己发出的评论',
+      at: row.at, likes: Number.isFinite(Number(row.likes)) ? Math.max(0, Math.floor(Number(row.likes))) : 0,
+      checked: Boolean(row.likesAt), version: memoryFingerprint(row), mutable: true, actions: ['forget'] })
+  }
+  for (const [key, value] of Object.entries(object(input.seen)).slice(-5000)) {
+    if (!/^BV[0-9A-Za-z]{10}$/.test(key)) continue
+    const row = typeof value === 'string' ? { note: value } : object(value)
+    add({ source: 'seen', id: key, label: '浏览历史', text: [key, row.title, row.note].filter(Boolean).join(' · '),
+      from: key, at: row.at, mutable: false, actions: [] })
+  }
+  for (const event of (Array.isArray(input.events) ? input.events : []).slice(0, 100)) {
+    if (!event || !['memory', 'learning'].includes(event.type)) continue
+    const data = object(event.data)
+    add({ source: 'history', id: String(event.eventId), label: event.type === 'memory' ? '记忆版本' : '审核审计',
+      text: event.type === 'memory' ? `${data.name || '记忆'} · ${data.operation || 'snapshot'}\n${data.text || ''}` : JSON.stringify(data),
+      from: event.source, at: event.at || event.recordedAt, mutable: false, actions: [] })
+  }
+  rows.sort((a, b) => String(b.at).localeCompare(String(a.at)) || a.source.localeCompare(b.source) || a.id.localeCompare(b.id))
+  const counts = Object.fromEntries(MEMORY_SOURCES.slice(1).map((key) => [key, rows.filter((row) => row.source === key).length]))
+  const matched = rows.filter((row) => (source === 'all' || row.source === source)
+    && (!filter || [row.text, row.from, row.label, row.example, row.why, row.state].join(' ').toLocaleLowerCase().includes(filter)))
+  return { ok: true, source, filter, offset, limit, total: rows.length, matched: matched.length,
+    more: matched.length > offset + limit, counts, items: matched.slice(offset, offset + limit),
+    scope: 'current-snapshots-and-latest-100-audits', historyReadOnly: true }
+}

package/lib/mode.mjs

@@ -6,21 +6,21 @@ const selection = (value, source) => {
   if (value === undefined) return null
   if (value === null || value === '') return { id: '', known: true, source }
   if (typeof value === 'string') return { id: value, known: true, source }
-  return null
+  return { id: '', known: true, source, malformed: true }
 }
 
 export function resolveSessionPreset(ctx, agent) {
   if (!agent) return { id: '', known: false, source: 'none' }
   try {
     const service = ctx?.get?.('agentPresets')
-    if (typeof service?.composedPreset === 'function') {
+    if (agent.ctx && typeof service?.composedPreset === 'function') {
       const found = selection(service.composedPreset(agent.ctx), 'host')
       if (found) return found
     }
   } catch { /* Older hosts may not expose this service. */ }
   try {
     const service = ctx?.get?.('sessionProjections')
-    if (typeof service?.stateOf === 'function') {
+    if (agent.session && typeof service?.stateOf === 'function') {
       const found = selection(service.stateOf(agent.session, 'agentPreset'), 'projection')
       if (found) return found
     }
@@ -38,8 +38,6 @@ export function resolveSessionPreset(ctx, agent) {
   try {
     const fromHeader = selection(agent.session?.header?.agentPreset, 'header')
     if (fromHeader) return fromHeader
-    const fromAgent = selection(agent.agentPreset, 'agent')
-    if (fromAgent) return fromAgent
   } catch { /* Unknown context must not inherit a global mode. */ }
   return { id: '', known: false, source: 'none' }
 }
@@ -52,8 +50,9 @@ export function isFeiyuGoal(goal) {
 export function personaScope(preset, goal) {
   const selected = preset?.id === DAFEIYU_PRESET_ID
   const running = isFeiyuGoal(goal)
-  // Selecting Standard/None is an explicit opt-out, even if an old fish goal survives.
-  return { enabled: selected || (running && !preset?.known), selected, running }
+  // A goal is work, never permission to change a conversation's identity.
+  // Unknown, Standard and None all fail closed instead of adopting stale goals.
+  return { enabled: selected, selected, running }
 }
 
 /** Defaults describe motives, not mandatory words or a repeated catchphrase recipe. */