dsh-mobile-plugin 0.5.27 → 0.5.29

package/lib/mobile/model-badges.js

@@ -0,0 +1,77 @@
+'use strict';
+
+/**
+ * 模型清单里那枚「徽标」的归一化：上游 `LlmModelBadge` → 手机端能直接画的 `{text, tone}`。
+ *
+ * 为什么单独成文件：`session-models.js` 有 220 行的拆分上限（见 `test/module-split.test.cjs`），
+ * 而这段是「一个字段怎么裁」的纯函数，搬出来既让那份模块守住上限，也方便单独测。
+ *
+ * 上游形状（`packages/llm/llm/src/types.ts` 的 `LlmModelBadge`）：
+ *   `{ text: '1017' | { en: '1017', 'zh-hans': '1017' }, tone: 'neutral' | 'info' | 'success' | 'warning' }`
+ * 手机端拿到的是**已经拍平的字符串**，App 不需要再决定用哪门语言。
+ */
+
+/** 徽标文案下发上限：选择器里那枚标签是单行小字，官方 `1017` 这类顶多几个字。 */
+const MODEL_BADGE_TEXT_MAX = 32;
+/** 上游 `LlmModelBadgeTone` 只有这四个值；不认识的当没给。 */
+const MODEL_BADGE_TONES = ['neutral', 'info', 'success', 'warning'];
+
+/**
+ * 徽标文案：字面量字符串直接用；本地化对象优先取当前语言、退英文（英文必填），
+ * 都取不到就退回表里第一条能用的字符串 —— 绝不让标签空着。
+ *
+ * 语言标签做一次宽松匹配：先精确（全小写），再按主语言子标签（`zh-cn` 的 `zh`
+ * 能对上键 `zh-hans`），最后英文。上游清单的键是「小写语言 id」。
+ */
+function badgeText(value, language) {
+  if (typeof value === 'string') return value.slice(0, MODEL_BADGE_TEXT_MAX);
+  if (!value || typeof value !== 'object') return '';
+  const want = String(language || 'en').toLowerCase();
+  const keys = Object.keys(value);
+  const ordered = [want, want.split('-')[0], 'en'];
+  for (const key of ordered) {
+    if (!key) continue;
+    const match = keys.find((k) => k.toLowerCase() === key)
+      || keys.find((k) => k.toLowerCase().split('-')[0] === key);
+    const text = match ? value[match] : undefined;
+    if (typeof text === 'string' && text) return text.slice(0, MODEL_BADGE_TEXT_MAX);
+  }
+  for (const key of keys) {
+    if (typeof value[key] === 'string' && value[key]) return value[key].slice(0, MODEL_BADGE_TEXT_MAX);
+  }
+  return '';
+}
+
+/** 徽标强调档：只认那四个值，其余原样丢掉。 */
+function badgeTone(value) {
+  return typeof value === 'string' && MODEL_BADGE_TONES.includes(value) ? value : '';
+}
+
+/**
+ * 一个模型条目的徽标：没有、或文案裁完是空的，就返回空对象（**不挂这个键**，
+ * 老宿主的目录形状不变）。有 tone 才带 tone。
+ *
+ * @param model 宿主清单里的一个模型条目
+ * @param language 请求方语言（缺省英文）
+ */
+function modelBadgeOf(model, language) {
+  const badge = model && typeof model === 'object' ? model.badge : null;
+  if (!badge || typeof badge !== 'object') return {};
+  const text = badgeText(badge.text, language);
+  if (!text) return {};
+  const tone = badgeTone(badge.tone);
+  return { badge: { text, ...(tone ? { tone } : {}) } };
+}
+
+/**
+ * 请求方语言标签（`Accept-Language` 第一段，如 `zh-CN`），用来挑本地化徽标文案；
+ * 读不到退回 `en`。
+ */
+function requestLanguage(headers) {
+  const raw = headers && (headers['accept-language'] || headers['Accept-Language']);
+  if (typeof raw !== 'string') return 'en';
+  const first = raw.split(',')[0].trim().toLowerCase();
+  return first || 'en';
+}
+
+module.exports = { modelBadgeOf, badgeText, badgeTone, requestLanguage, MODEL_BADGE_TEXT_MAX, MODEL_BADGE_TONES };

package/lib/mobile/pet-tools.js

@@ -18,6 +18,9 @@
  *
  * 只碰这个库：id 形状卡死、图片只认单层 `.gif` / `.png`、单张与整包都有上限。**没有删除** ——
  * 删是人的动作（设置页那边有个按钮），不该由模型顺手做掉。
+ *
+ * `pack` 整份透传给 `writePack`，不在工具这一层做字段白名单：包格式以后加可选字段（彩蛋 /
+ * 时序 / 待机池 / 点按反应 / 命中框…）时，工具这边不用跟着改一遍。判据只有一处，在 pets.js。
  */
 
 const { defineTool } = require('@deepseek-ai/dsh-tools');
@@ -112,7 +115,7 @@ function mountTools(scoped) {
 
   scoped.tools.register(defineTool({
     name: 'pet_pack_write',
-    description: 'Create or replace a desktop-pet package on this computer, so it shows up on the user\'s phone under Settings → floating pet. Use this whenever the user wants to change their pet, make a new one, or drop in their own artwork. A pack is one directory with a pack.json plus the images it references. States are idle / working / attention / done / error / sleeping, and idle is required; a state you leave out falls back to idle. Pictures are GIF (animated) or PNG (static). Give each picture the PATH of the file on this computer — the host reads it — rather than its bytes; base64 is only for when you already hold the bytes. Existing packs with the same id are replaced wholesale, including a built-in one (warn the user before doing that). You cannot delete packs; that is the user\'s job in Settings.',
+    description: 'Create or replace a desktop-pet package on this computer, so it shows up on the user\'s phone under Settings → floating pet. Use this whenever the user wants to change their pet, make a new one, or drop in their own artwork. A pack is one directory with a pack.json plus the images it references. States are idle / working / attention / done / error / sleeping (plus optional thinking / juggling / sweeping / carrying / waking / notification), and idle is required; a state you leave out falls back to idle. Pictures are GIF (animated) or PNG (static). Give each picture the PATH of the file on this computer — the host reads it — rather than its bytes; base64 is only for when you already hold the bytes. Optional richer fields: bonus (an Easter egg per state), timings (minDisplay / autoReturn), idlePool (random idle extras), reactions (tap / tickle / drag art), hitBoxes (with wideAnims / sleepingAnims), roam ({anim, faces}), sleep ({afterMs}), tiers.juggling, pixelArt, scale, contentBox, source. Existing packs with the same id are replaced wholesale, including a built-in one (warn the user before doing that). You cannot delete packs; that is the user\'s job in Settings.',
     parameters: {
       id: {
         type: 'string',
@@ -121,23 +124,66 @@ function mountTools(scoped) {
       pack: {
         type: 'object',
         additionalProperties: true,
-        description: 'The whole pack.json as an object. Required keys: name and states (with at least idle). Optional: author, license, canvas {w,h}, anchor {x,baseline}, tiers.working [{min,file}] (largest min wins), loop [], sleepAfterMs. Every file named here must be one you pass in files[].',
+        description: 'The whole pack.json as an object. Required keys: name and states (with at least idle). Optional: author, license, source, pixelArt, scale, canvas {w,h}, anchor {x,baseline}, contentBox {x,y,w,h}, tiers.working / tiers.juggling [{min,file}] (largest min wins), loop [], sleepAfterMs (or the nested sleep.afterMs), bonus {state:{anims:[file],chance}}, timings {minDisplay:{state:ms},autoReturn:{state:ms}}, idlePool {everyMs:{mean,min,max},anims:[{file,ms,weight}]}, reactions {tapLeft,tapRight,tickle,drag}, hitBoxes {default,wide,sleeping,byAnim:{anim:{x,y,w,h}},wideAnims:[...],sleepingAnims:[...]}, roam {anim,faces:left|right|front}. Every file named here must be one you pass in files[].',
         properties: {
           name: { type: 'string', description: 'Shown in the picker on the phone.' },
           author: { type: 'string', description: 'Credited in the picker footer. Fill it in whenever the artwork is not yours.' },
           license: { type: 'string', description: 'License note, shown next to the author.' },
+          source: { type: 'string', description: 'Where the artwork came from, shown in the picker footer.' },
+          pixelArt: { type: 'boolean', description: 'Nearest-neighbour scaling. Default true.' },
+          scale: { type: 'number', description: 'Sheet pixels per art pixel, e.g. 5 for a 5x export.' },
+          contentBox: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'The idle body in art pixels {x,y,w,h}: the hit box and where bubbles sit.',
+          },
           states: {
             type: 'object',
             additionalProperties: true,
-            description: 'State name → { file }. Recognised: idle, working, attention, done, error, sleeping. At least idle is required.',
+            description: 'State name → { file }. Recognised: idle, working, attention, done, error, sleeping, plus the optional thinking / juggling / sweeping / carrying / waking / notification. At least idle is required.',
           },
           tiers: {
             type: 'object',
             additionalProperties: true,
-            description: 'Optional. tiers.working is [{min, file}]: pick the image by how many conversations are running.',
+            description: 'Optional. tiers.working / tiers.juggling are [{min, file}]: pick the image by how many conversations (or sub-agents) are running.',
           },
           loop: { type: 'array', items: { type: 'string' }, description: 'States that loop. Defaults to idle, working, attention.' },
           sleepAfterMs: { type: 'number', description: 'Idle time before switching to sleeping. Only meaningful when the sleeping state exists.' },
+          bonus: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Optional Easter egg: state → { anims: [file], chance: 0..1 }. An extra animation played instead of the state main art when the dice hit.',
+          },
+          timings: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Optional { minDisplay: {state: ms}, autoReturn: {state: ms} }: how long a one-off state stays up and when it folds back.',
+          },
+          idlePool: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Optional { everyMs: {mean,min,max}, anims: [{file,ms,weight}] }: random small idle animations while nothing is happening.',
+          },
+          reactions: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Optional { tapLeft, tapRight, tickle, drag }: the animation played for each touch gesture, each a file in this pack.',
+          },
+          hitBoxes: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Optional { default, wide, sleeping, byAnim: { anim: {x,y,w,h} }, wideAnims: [anim], sleepingAnims: [anim] } in art pixels: where the window takes touches. The host picks byAnim → sleepingAnims → wideAnims → default.',
+          },
+          roam: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Optional { anim, faces }: the walking animation and which way it looks (left / right / front). anim must be a file in this pack.',
+          },
+          sleep: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Optional { afterMs }: idle time before sleeping. The top-level sleepAfterMs is the older spelling; both are accepted.',
+          },
         },
       },
       files: {

package/lib/mobile/pets.js

@@ -17,6 +17,14 @@
  * 少一个目录、pack.json 读不出、schema 不是 1、id 不合规矩、图片超限、没有能用的 idle，
  * 一律当作「这个包不存在」，不抛、不让整张列表变红。取文件那条才逐个回错误码。
  *
+ * ## 可选的表现字段
+ *
+ * `bonus` / `timings` / `idlePool` / `reactions` / `hitBoxes` / `roam` / `sleep` /
+ * `tiers.juggling` / `pixelArt` / `scale` / `contentBox` / `source` 全部可选（形状见
+ * docs/pet-overlay.md §1.1 与 pet-align/CONTRACT.md §5）：认得的收下来、引用的图得真在
+ * 包里，其余坏值逐项丢掉——一个字段写坏了不该让整只宠物消失。老包里没有这些键，照旧能跑。
+ * 睡觉时长有新旧两种写法：顶层 `sleepAfterMs`（老包）与 `sleep.afterMs`，两个都透传。
+ *
  * ## 能力面
  *
  * 只认包目录内**单层**的 `.gif` / `.png`：id 与文件名都卡成不含斜杠的形状，取文件时再按
@@ -34,6 +42,15 @@ const { dshHome } = require('../shared/paths.js');
 const ID_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
 /** 认得的状态键。表外的键原样忽略，以后加状态时老 App 还能用这份包。 */
 const KNOWN_STATES = Object.freeze(['idle', 'working', 'attention', 'done', 'error', 'sleeping']);
+/**
+ * 与 dsh-go 对齐的那几个扩展态（`thinking` 等，见 pet-align/CONTRACT.md §2）。
+ *
+ * 它们能进 `states` / `loop` / `timings` / `bonus`，但**不进** `KNOWN_STATES`：那六个是
+ * 「一只包该有的基本状态」的清单，扩展态是「有素材就上」的增量，缺了不算包的毛病。
+ */
+const EXTRA_STATES = Object.freeze(['thinking', 'juggling', 'sweeping', 'carrying', 'waking', 'notification']);
+/** 包能表达的全部状态键。 */
+const PACK_STATES = Object.freeze([...KNOWN_STATES, ...EXTRA_STATES]);
 /** 默认循环播的那几档（与 §1.1 一致）。 */
 const DEFAULT_LOOP = Object.freeze(['idle', 'working', 'attention']);
 /** 单张图上限：一张 GIF 一般几十到几百 KB，四 MB 是「明显不对劲」的那条线。 */
@@ -114,6 +131,164 @@ function pairOf(value, keys) {
   return out;
 }
 
+/** 一个形状合规矩的名字：命中框的分组键、动画别名都用这个判据。 */
+function isNameToken(name) {
+  return typeof name === 'string' && /^[a-z0-9][a-z0-9-]{0,63}$/i.test(name);
+}
+
+/** `{x,y,w,h}` 一类的矩形：四个数齐、宽高为正才收。 */
+function rectOf(value) {
+  const rect = pairOf(value, ['x', 'y', 'w', 'h']);
+  if (!rect || rect.w <= 0 || rect.h <= 0) return undefined;
+  return rect;
+}
+
+/** 状态 → 毫秒的小表（`timings.minDisplay` 这一类）：正的有限数才收，其余键忽略。 */
+function msMapOf(value) {
+  if (!isRecord(value)) return undefined;
+  const out = {};
+  for (const [key, raw] of Object.entries(value)) {
+    if (!PACK_STATES.includes(key)) continue;
+    const ms = finiteOf(raw);
+    if (ms === null || ms <= 0) continue;
+    out[key] = Math.round(ms);
+  }
+  return Object.keys(out).length > 0 ? out : undefined;
+}
+
+/** 一张小表：只留 `keys` 里点名的格，值得是包里真有的图。 */
+function fileMapOf(value, present, keys) {
+  if (!isRecord(value)) return undefined;
+  const out = {};
+  for (const key of keys) {
+    const file = textOf(value[key], 120);
+    if (!isImageName(file) || !present.has(file)) continue;
+    out[key] = file;
+  }
+  return Object.keys(out).length > 0 ? out : undefined;
+}
+
+/** 彩蛋：`{ 状态: { anims: [图…], chance } }`，chance 夹到 0..1，空表不算错。 */
+function bonusOf(value, present) {
+  if (!isRecord(value)) return undefined;
+  const out = {};
+  for (const [key, raw] of Object.entries(value)) {
+    if (!PACK_STATES.includes(key) || !isRecord(raw)) continue;
+    const anims = [];
+    for (const item of Array.isArray(raw.anims) ? raw.anims : []) {
+      const file = textOf(item, 120);
+      if (!isImageName(file) || !present.has(file) || anims.includes(file)) continue;
+      anims.push(file);
+    }
+    const chance = finiteOf(raw.chance);
+    if (anims.length === 0 || chance === null || chance <= 0) continue;
+    out[key] = { anims, chance: Math.min(1, chance) };
+  }
+  return Object.keys(out).length > 0 ? out : undefined;
+}
+
+/** 待机池：`{ everyMs: {mean,min,max}, anims: [{file,ms,weight}] }`，两项各自可选。 */
+function idlePoolOf(value, present) {
+  if (!isRecord(value)) return undefined;
+  const anims = [];
+  for (const item of Array.isArray(value.anims) ? value.anims : []) {
+    if (!isRecord(item)) continue;
+    const file = textOf(item.file, 120);
+    if (!isImageName(file) || !present.has(file)) continue;
+    const ms = finiteOf(item.ms);
+    const weight = finiteOf(item.weight);
+    anims.push({
+      file,
+      ...(ms !== null && ms > 0 ? { ms: Math.round(ms) } : {}),
+      ...(weight !== null && weight > 0 ? { weight } : {}),
+    });
+  }
+  const every = pairOf(value.everyMs, ['mean', 'min', 'max']);
+  const everyMs = every && every.mean > 0 && every.min >= 0 && every.max >= every.min ? every : undefined;
+  if (anims.length === 0 && !everyMs) return undefined;
+  return {
+    ...(everyMs ? { everyMs } : {}),
+    ...(anims.length > 0 ? { anims } : {}),
+  };
+}
+
+/** 一串动画名：名字形状合规矩、去重；空表不收。 */
+function nameListOf(value) {
+  if (!Array.isArray(value)) return undefined;
+  const names = [];
+  for (const item of value) {
+    if (!isNameToken(item) || names.includes(item)) continue;
+    names.push(item);
+  }
+  return names.length > 0 ? names : undefined;
+}
+
+/**
+ * 命中框：`default / wide / sleeping` 三档 + 按动画名分组的 `byAnim`，外加两张点名表
+ * `wideAnims` / `sleepingAnims`（原生据此选框：byAnim → sleepingAnims → wideAnims → default）。
+ * 坏的那一档丢掉，不影响其余。
+ */
+function hitBoxesOf(value) {
+  if (!isRecord(value)) return undefined;
+  const out = {};
+  for (const key of ['default', 'wide', 'sleeping']) {
+    const rect = rectOf(value[key]);
+    if (rect) out[key] = rect;
+  }
+  if (isRecord(value.byAnim)) {
+    const byAnim = {};
+    for (const [key, raw] of Object.entries(value.byAnim)) {
+      if (!isNameToken(key)) continue;
+      const rect = rectOf(raw);
+      if (rect) byAnim[key] = rect;
+    }
+    if (Object.keys(byAnim).length > 0) out.byAnim = byAnim;
+  }
+  for (const key of ['wideAnims', 'sleepingAnims']) {
+    const names = nameListOf(value[key]);
+    if (names) out[key] = names;
+  }
+  return Object.keys(out).length > 0 ? out : undefined;
+}
+
+/** 游走：`{ anim, faces }`；anim 得是包里真有的单层图，faces 不认识就整个丢掉。 */
+const FACINGS = Object.freeze(['left', 'right', 'front']);
+function roamOf(value, present) {
+  if (!isRecord(value)) return undefined;
+  const file = textOf(value.anim, 120);
+  if (!isImageName(file) || !present.has(file)) return undefined;
+  if (!FACINGS.includes(value.faces)) return undefined;
+  return { anim: file, faces: value.faces };
+}
+
+/** 睡觉：`{ afterMs }`，正整数才收。顶层的 sleepAfterMs 是另一套老写法，两者并存。 */
+function sleepOf(value) {
+  if (!isRecord(value)) return undefined;
+  const afterMs = finiteOf(value.afterMs);
+  return afterMs !== null && afterMs > 0 ? { afterMs: Math.round(afterMs) } : undefined;
+}
+
+/** 分档：`working` 与 `juggling` 同形（`[{min, file}]`，按 min 从大到小）。 */
+function tiersOf(value, present) {
+  const out = {};
+  if (!isRecord(value)) return out;
+  for (const key of ['working', 'juggling']) {
+    if (!Array.isArray(value[key])) continue;
+    const rows = [];
+    for (const item of value[key]) {
+      if (!isRecord(item)) continue;
+      const min = finiteOf(item.min);
+      const file = textOf(item.file, 120);
+      if (min === null || min < 1) continue;
+      if (!isImageName(file) || !present.has(file)) continue;
+      rows.push({ min: Math.floor(min), file });
+    }
+    rows.sort((a, b) => b.min - a.min);
+    if (rows.length > 0) out[key] = rows;
+  }
+  return out;
+}
+
 /**
  * 扫包目录里的图片：单层、名字合规矩、不点开头；超限当场返回 null（整包拒收）。
  *
@@ -172,7 +347,7 @@ function buildPack(raw, id, entries) {
   if (!isRecord(raw.states)) {
     problems.push('states 必填，而且至少要有一个 idle。');
   } else {
-    for (const key of KNOWN_STATES) {
+    for (const key of PACK_STATES) {
       const entry = raw.states[key];
       if (!isRecord(entry)) continue;
       const file = textOf(entry.file, 120);
@@ -182,26 +357,13 @@ function buildPack(raw, id, entries) {
     if (!states.idle) problems.push('states 里至少要有一个能用的 idle（file 得是包里真有的 .gif / .png）。');
   }
 
-  // tiers.working：按「同时在跑几条」换图，min 从大到小匹配。
-  const tiers = {};
-  if (isRecord(raw.tiers) && Array.isArray(raw.tiers.working)) {
-    const rows = [];
-    for (const item of raw.tiers.working) {
-      if (!isRecord(item)) continue;
-      const min = finiteOf(item.min);
-      const file = textOf(item.file, 120);
-      if (min === null || min < 1) continue;
-      if (!isImageName(file) || !present.has(file)) continue;
-      rows.push({ min: Math.floor(min), file });
-    }
-    rows.sort((a, b) => b.min - a.min);
-    if (rows.length > 0) tiers.working = rows;
-  }
+  // tiers：按「同时在跑几条」换图，min 从大到小匹配；`working` 与 `juggling` 同形。
+  const tiers = tiersOf(raw.tiers, present);
 
   const loop = [];
   if (Array.isArray(raw.loop)) {
     for (const item of raw.loop) {
-      if (typeof item !== 'string' || !KNOWN_STATES.includes(item) || loop.includes(item)) continue;
+      if (typeof item !== 'string' || !PACK_STATES.includes(item) || loop.includes(item)) continue;
       loop.push(item);
     }
   }
@@ -209,18 +371,41 @@ function buildPack(raw, id, entries) {
 
   if (problems.length > 0) return { pack: null, problems };
 
+  const minDisplay = isRecord(raw.timings) ? msMapOf(raw.timings.minDisplay) : undefined;
+  const autoReturn = isRecord(raw.timings) ? msMapOf(raw.timings.autoReturn) : undefined;
+  const timings = minDisplay || autoReturn
+    ? { ...(minDisplay ? { minDisplay } : {}), ...(autoReturn ? { autoReturn } : {}) }
+    : undefined;
+  const contentBox = rectOf(raw.contentBox);
+  // 缺省值与 dsh-go 一致：像素画、1:1。三层都按这一份读，别各猜各的。
+  const pixelArt = typeof raw.pixelArt === 'boolean' ? raw.pixelArt : true;
+  const scale = Math.max(1, Math.floor(finiteOf(raw.scale) ?? 1));
+  const source = textOrNull(raw.source) || undefined;
+
   return {
     pack: {
       id,
       name,
       author: textOrNull(raw.author),
       license: textOrNull(raw.license),
+      source,
+      pixelArt,
+      scale,
       canvas: pairOf(raw.canvas, ['w', 'h']),
       anchor: pairOf(raw.anchor, ['x', 'baseline']),
+      ...(contentBox ? { contentBox } : {}),
       states,
       tiers,
       loop: loop.length > 0 ? loop : [...DEFAULT_LOOP],
       sleepAfterMs: sleepAfterMs !== null && sleepAfterMs > 0 ? sleepAfterMs : undefined,
+      // 扩展字段全部可选：老包没有这些键，App/原生按缺省处理。
+      bonus: bonusOf(raw.bonus, present),
+      idlePool: idlePoolOf(raw.idlePool, present),
+      reactions: fileMapOf(raw.reactions, present, ['tapLeft', 'tapRight', 'tickle', 'drag']),
+      hitBoxes: hitBoxesOf(raw.hitBoxes),
+      roam: roamOf(raw.roam, present),
+      sleep: sleepOf(raw.sleep),
+      timings,
       size: entries.reduce((sum, entry) => sum + entry.size, 0),
       files: entries,
     },
@@ -289,7 +474,7 @@ function dirNames(root) {
     .map((entry) => entry.name);
 }
 
-/** 只留列表要的形状：内部的 `dir` 不出去。 */
+/** 只留列表要的形状：内部的 `dir` 不出去。可选字段没填时是 undefined，JSON 里就不出现。 */
 function publicPack(pack) {
   return {
     id: pack.id,
@@ -297,12 +482,23 @@ function publicPack(pack) {
     builtin: pack.builtin,
     author: pack.author,
     license: pack.license,
+    source: pack.source,
+    pixelArt: pack.pixelArt,
+    scale: pack.scale,
     canvas: pack.canvas,
     anchor: pack.anchor,
+    contentBox: pack.contentBox,
     states: pack.states,
     tiers: pack.tiers,
     loop: pack.loop,
     sleepAfterMs: pack.sleepAfterMs,
+    bonus: pack.bonus,
+    timings: pack.timings,
+    idlePool: pack.idlePool,
+    reactions: pack.reactions,
+    hitBoxes: pack.hitBoxes,
+    roam: pack.roam,
+    sleep: pack.sleep,
     size: pack.size,
     files: pack.files,
   };

package/lib/mobile/phone/access.js

@@ -0,0 +1,85 @@
+'use strict';
+
+/**
+ * 逐 App 访问控制（清单 103）：用户拉黑哪些 App 不许 AI 碰、哪些只允许分享。
+ *
+ * 这里是**策略真值**（插件侧、落盘）：`blocked` 集与 `shareAllowed` 集，按包名记。
+ * 判据本身在原生 `AppAccess.kt`（执行面强制点），它每次读最新状态、不在任务开始时冻结；
+ * 插件侧这份是本机唯一真值，原生侧会在下发动作前按同一份名单判。
+ *
+ * 能力面：只是本地开关，不扩「能碰什么 App」之外的能力；不涉及 shell/任意文件写。
+ */
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+function storePath() {
+  const home = process.env.DSH_HOME || path.join(os.homedir(), '.dsh');
+  return path.join(home, 'storages', 'mobile-plugin', 'phone-app-access.json');
+}
+
+function readState() {
+  try {
+    const raw = fs.readFileSync(storePath(), 'utf8');
+    const parsed = JSON.parse(raw);
+    return {
+      blocked: Array.isArray(parsed.blocked) ? parsed.blocked.filter((x) => typeof x === 'string') : [],
+      shareAllowed: Array.isArray(parsed.shareAllowed) ? parsed.shareAllowed.filter((x) => typeof x === 'string') : [],
+    };
+  } catch {
+    return { blocked: [], shareAllowed: [] };
+  }
+}
+
+function writeState(state) {
+  const file = storePath();
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const tmp = `${file}.tmp`;
+  fs.writeFileSync(tmp, `${JSON.stringify(state, null, 2)}\n`, 'utf8');
+  fs.renameSync(tmp, file);
+}
+
+function normalizePackage(value) {
+  if (typeof value !== 'string') return '';
+  const pkg = value.trim();
+  // 包名形状：只允许点分标识符。挡住把路径/命令塞进来的调用。
+  if (!/^[A-Za-z][A-Za-z0-9_]*(\.[A-Za-z][A-Za-z0-9_]*)+$/.test(pkg)) return '';
+  return pkg;
+}
+
+/**
+ * 改一个 App 的准入。只传一个字段就只改那一个（另一个保持原样）。
+ * @returns {{ok:boolean, error?:string, state?:object}}
+ */
+function update(packageName, patch) {
+  const pkg = normalizePackage(packageName);
+  if (!pkg) return { ok: false, error: 'bad-package' };
+  const state = readState();
+  const set = (list, key) => {
+    const has = list.includes(pkg);
+    if (patch[key] === true && !has) list.push(pkg);
+    if (patch[key] === false && has) list.splice(list.indexOf(pkg), 1);
+  };
+  if (typeof patch.blocked === 'boolean') set(state.blocked, 'blocked');
+  if (typeof patch.shareAllowed === 'boolean') set(state.shareAllowed, 'shareAllowed');
+  // 拉了黑名单就不该还在分享白名单里，反之亦然。
+  if (state.blocked.includes(pkg)) state.shareAllowed = state.shareAllowed.filter((x) => x !== pkg);
+  writeState(state);
+  return { ok: true, state };
+}
+
+/** 行视图：把两个集合合成一条 App 的开关（包名去重合并）。 */
+function rows() {
+  const state = readState();
+  const seen = new Set();
+  const out = [];
+  for (const pkg of [...state.blocked, ...state.shareAllowed]) {
+    if (seen.has(pkg)) continue;
+    seen.add(pkg);
+    out.push({ packageName: pkg, blocked: state.blocked.includes(pkg), shareAllowed: state.shareAllowed.includes(pkg) });
+  }
+  return out;
+}
+
+module.exports = { readState, writeState, update, rows, normalizePackage, storePath };