fuli-context 0.7.9 → 0.7.10-beta.7

package/dist/web/index.html

@@ -9,16 +9,22 @@
     />
     <link rel="icon" type="image/png" href="/assets/fuli-logo-ER1wQ8Kk.png" />
     <title>复利 · Context Graph</title>
-    <script type="module" crossorigin src="/assets/index-DRd-2Tii.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/i18n-DQH9D35M.js">
-    <link rel="modulepreload" crossorigin href="/assets/console-B7dWYAoU.js">
-    <link rel="modulepreload" crossorigin href="/assets/useApi-CROJJdhE-CElDxEZI.js">
-    <link rel="modulepreload" crossorigin href="/assets/vue-router-F7MnkVlW.js">
-    <link rel="modulepreload" crossorigin href="/assets/fuli-logo-Bu9WBuQe.js">
+    <script type="module" crossorigin src="/assets/index-Dioqmmvf.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/i18n-BkJjUsz_.js">
+    <link rel="modulepreload" crossorigin href="/assets/client-v8XKgQji.js">
+    <link rel="modulepreload" crossorigin href="/assets/console-C9HS-zbd.js">
     <link rel="modulepreload" crossorigin href="/assets/_plugin-vue_export-helper-BDNMzG2s.js">
-    <link rel="modulepreload" crossorigin href="/assets/avatars-LvVKbDF7.js">
+    <link rel="modulepreload" crossorigin href="/assets/GrowthLoading-CCYPgE2f.js">
+    <link rel="modulepreload" crossorigin href="/assets/useApi-CROJJdhE-BBUO_YEu.js">
+    <link rel="modulepreload" crossorigin href="/assets/vue-router-Cw4QZxM1.js">
+    <link rel="modulepreload" crossorigin href="/assets/fuli-logo-Bu9WBuQe.js">
+    <link rel="modulepreload" crossorigin href="/assets/AgentHand-D5pOgVjJ.js">
+    <link rel="modulepreload" crossorigin href="/assets/useModalDialog-DrLhqtjR.js">
     <link rel="modulepreload" crossorigin href="/assets/paths-CDREouhi.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-Ch1jmkyO.css">
+    <link rel="stylesheet" crossorigin href="/assets/GrowthLoading-B_Hh0CRS.css">
+    <link rel="stylesheet" crossorigin href="/assets/AgentHand-DvdNtJ3_.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-CwjxeHGk.css">
+    <link rel="stylesheet" crossorigin href="/assets/employee-dialog-Bh5ccIbK.css">
   </head>
   <body>
     <div id="app"></div>

package/docs/agent-interface-architecture.md

@@ -0,0 +1,97 @@
+# Agent interface architecture
+
+FULI exposes product data operations through structured Agent tools so an AI Agent does not need browser automation to act on the user's behalf. The console and the Agent interface are peer clients of the same application services; neither client owns a second copy of the business rules.
+
+## Contract
+
+`list_agent_interfaces` returns the versioned `agent-interface-parity-v1` catalog. Every console data mutation is classified as one of:
+
+- `agent`: the catalog names the structured Agent tool or tools that perform the same business operation.
+- `local_user_only`: the catalog records why the operation requires local human presence.
+
+The parity catalog is executable product metadata, not just documentation. Tests verify that every `agent` entry names a registered tool and that sensitive local-only routes remain explicit. A route with multiple actions, such as ignoring or resetting routing-learning evidence, lists every matching tool.
+
+## Request path
+
+```text
+Console UI ───────┐
+                  ├─> application service ─> scoped Provider / local store
+Agent tool / MCP ─┘
+```
+
+Agent handlers delegate to existing application-service methods. They do not call the console over HTTP, render pages, write browser state, or bypass scope checks. Existing Host/Origin protection remains relevant to the console; Agent access is independently guarded by the Agent-access policy before any tool handler runs.
+
+## Required operating sequence
+
+### Agent names and human attention
+
+Agent identity (`agentId`) and role (`profile.name`, `responsibility`) remain stable.
+`profile.displayName` is the editable person-like nickname. Legacy role-style names
+receive a deterministic nickname derived from their Agent ID; existing custom names
+and explicit display names are preserved. These are product nicknames, not real people.
+Reading a legacy profile does not rewrite its stored history.
+
+Use `request_agent_attention` only for an explicit human action, with the exact space,
+project and Agent, optional task ID, request kind, context and `requestedAction`.
+The same idempotency key and payload returns the same request, including after closure;
+reusing a key with another payload is a conflict. Running, waiting in a queue and
+recoverable retries do not create attention requests automatically.
+
+`list_agent_attention` supports project/Agent/status filters and pagination. Counts
+cover the whole filtered set. Agents can withdraw obsolete requests with
+`cancel_agent_attention`, using `expectedRevision` and a reason. Only the local-user
+`POST /api/agent-attention/respond` workflow records a human reply. A reply closes the
+attention item but does not itself grant permission, accept a task or run a command.
+Agents read resolved replies and continue within the existing authority boundaries.
+Original context, response, actor and timestamps remain in the private graph.
+
+The console uses one shared attention store and dialog for the sidebar and personnel
+views. Failed reads remain visible as errors, not a false empty state. Replies use
+revision checks and preserve the user's draft on failure. Public reports never query
+or expose this private attention queue.
+
+An Agent should:
+
+1. call `list_agent_interfaces`;
+2. resolve exact space, project, item and version identifiers with read tools;
+3. inspect the selected tool's current schema;
+4. read current state before a write;
+5. execute the narrowest scoped mutation with available compare-and-swap or idempotency fields;
+6. verify through a structured read.
+
+The bundled `operating-fuli` Skill teaches this sequence and is installed by `fuli setup` for supported Agents. Browser automation is permitted only as optional visual verification after a structured operation, never as a data-mutation fallback.
+
+## Human-only boundaries
+
+The following operations intentionally remain local-user-only:
+
+- enabling or disabling Agent access;
+- device-level runtime settings;
+- completing a preference conflict as a human decision;
+- confirming preference visibility scope;
+- batch confirmation of knowledge.
+- Jefa task completion that records explicit human acceptance (other task updates remain available through the employee tools).
+
+These are trust boundaries, not missing interfaces. An Agent may explain where the user can perform the action, but must not substitute direct HTTP, storage, shell, or browser scripting.
+
+## External knowledge
+
+Connector discovery, binding creation, readiness checks, target updates, scoped synchronization, live retrieval, conflict policy and deletion have dedicated tools. Connector secrets are referenced by environment-variable name; tool results and catalog listings must not expose secret values.
+
+Moving a connection between projects updates the binding targets. Deleting and recreating a binding is not the default because it breaks audit continuity and can discard connector state.
+
+Target updates require the Agent's last-read `targetsVersion`. Registry mutations take a cross-process SQLite reservation, so sync/check/delete cannot overwrite a concurrent scope update. Busy or stale writes fail with a controlled conflict and must be re-read, not blindly retried. The legacy HTTP contract still accepts callers without a version for compatibility; current console and Agent clients supply one.
+
+## Adding a feature
+
+When a console feature adds a data mutation:
+
+1. implement the business operation in an application service;
+2. have the console route call that service;
+3. add or reuse a typed Agent definition and a handler that calls the same service;
+4. annotate read/write, destructive and open-world behavior for MCP clients;
+5. add the route-to-tool mapping to `src/agent-tools/interface-catalog.js`, or document a narrowly justified `local_user_only` boundary;
+6. add contract tests covering dispatch, scope, error behavior and the parity mapping;
+7. update the `operating-fuli` workflow reference if the operation needs a non-obvious sequence.
+
+A missing Agent interface must remain visible as a parity defect. Do not silently ship a browser-only write path.

package/docs/employee-agents.md

@@ -1,6 +1,6 @@
 # Specialist Agents
 
-An employee template is a reusable role with an optional FULI-hosted workbench. Recruitment reuses the existing durable Project Agent identity and assignment model. The first built-in template is **Jefa, project manager**; adding another employee does not require a host-side special case.
+An employee template is a reusable role with an optional FULI-hosted or native workbench. Recruitment reuses the existing durable Project Agent identity and assignment model. The built-in specialists are **Jefa**, the project manager, and **Bole**, the fixed system HR Agent. Bole is created with every personal space, cannot be archived or replaced by another `hr` identity, and does not require a separate runtime package.
 
 ## User flow
 
@@ -16,7 +16,7 @@ The directory's **Filter projects** control supports multi-selection and inversi
 
 Repeat recruitment is idempotent. Customized profile preferences and executor/model policies are preserved. One employee identity can have multiple project assignments. Reactivating an inactive identity is an explicit action; a conflicting unrelated identity is never overwritten. Recruitment does not start an executor or constitute model usage.
 
-The catalog shows whether a workbench package is actually installed. Identity-only templates need no runtime and remain valid employees without a sidebar workbench.
+The catalog shows whether a workbench package is actually installed. Identity-only templates need no runtime and remain valid employees without a sidebar workbench. A trusted built-in template may declare `workbench: { "kind": "native", "view": "people" }`; Bole uses this native panel to summarize Agent distribution, current tasks, and timestamped recruitment reasons from the same Project Agent APIs used elsewhere in the console.
 
 ## Local installation
 
@@ -71,8 +71,12 @@ Context includes `personalSpaceId`, `project`, `agentId`, and `basePath`; HTTP a
 
 Optional manifest fields `defaultProjectScope: "all" | "selected"` and `taskEntry: { "boardTool": "read_board", "titleTool": "prepare_session_title" }` declare defaults and task-entry participation without a template-specific host branch. Context also carries the trusted `management` policy and native `session` identity when available. Task-entry board tools must declare `board.read`; the host returns bounded data and guidance, not an automatically started worker. A failed employee runtime degrades manager context without breaking collaboration preferences.
 
+The optional built-in-only native workbench declaration is `workbench: { "kind": "native", "view": "people" }`. It renders host-owned read models and does not load third-party code. Installable employee packages continue to use the runtime contract above.
+
 The reserved identity is `employee.<template-id>`, recognized by the generic `fuli.employee:<template-id>` capability. Preserve this marker when customizing employee profiles. The actual role, history, memory and project assignments remain in FULI's existing Agent model.
 
+`employee.bole` is additionally reserved as the only system HR identity. Its Provider type is `hr`; other identities cannot claim that type. Recruitment history records the coordinating and HR Agent IDs, time, reason, proposed identity and final recruited identity, which powers Bole's people panel without inventing activity.
+
 ## HTTP and MCP
 
 The host serves `/api/employee-templates`, recruitment/workspace/tool endpoints below it, and `/employee-workspaces/<template-id>/<project-id>/…`. Existing Host/Origin, JSON-body and LAN authorization checks apply. All workbench requests require an active matching identity and authorized responsibility policy, including assets and Agent discovery. Selected mode additionally requires an active assignment; all mode includes future active projects but enforces explicit exclusions and ended assignments before reaching the runtime.
@@ -87,6 +91,42 @@ Jefa supplies eight workbench tools for board/task reading, task creation, optim
 
 ## Verification and release boundary
 
+Jefa uses one native `EmployeeTaskBoard` for every project scope. `/employees/jefa` and
+`?project=all` show the current managed projects; legacy `__all__` is normalized. A single
+project query or repeated `project` query parameters filter the same board, without changing
+assignments. Task details and creation use the existing `get_task`, `create_tasks`, and
+version-checked `update_tasks` interfaces. Explicit human confirmation of `done` continues
+through the existing human HTTP endpoint. Other employee packages retain their generic iframe
+workspaces; Jefa no longer switches to the package board when a card is opened.
+
+The external-report action beside Jefa's identity has an independent project selection,
+including all, one, several, and inverted selection. Generating a link explicitly enables
+sharing for selected projects through `PATCH /employee-workspaces/jefa/<project>/api/projects/<project>/sharing`
+with `{ publicShareEnabled: true, acceptsPublicRequests: false }`. Merely opening or filtering
+the dialog performs no writes. Sharing status comes from the existing scoped snapshot API;
+disabling uses the same endpoint with both flags false and invalidates that project's old slug.
+
+One `/reports/jefa` link aggregates the selected project capabilities in its URL fragment,
+keeping them out of HTTP access logs and referrer query strings. The report loads only
+`GET /employee-workspaces/jefa/<project>/api/public/<slug>` and uses the same board in read-only
+mode. It never loads the console shell or private board/task endpoints. The existing public
+projection controls visibility: private tasks, details, evidence, and unrelated projects are
+not included. Partial enablement is reported without claiming a complete link, and selection
+changes clear the previously generated link. “All” is the current selection, not consent to
+publish future projects automatically.
+
+Before presenting a report link, the dialog verifies the selected public projections and
+shows their task count. A zero-task selection is not presented as a successful report;
+existing empty links explain that no tasks have been approved for public viewing. This
+never changes task privacy or substitutes private board data for a public projection.
+Refreshing the preview preserves the selected projects.
+
+These structured HTTP operations remain subject to the host's existing scope, Origin and LAN
+authentication checks. The link is not a separate authorization layer for the entire console.
+Loopback links work only on the same computer; this UI does not enable LAN access, tunnels,
+production hosting, or new public task visibility. Do not expose the local management service
+as a public multi-user report server.
+
 Run FULI's normal Node/web tests and typecheck. For an actual Jefa build:
 
 ```sh
@@ -97,3 +137,19 @@ node scripts/employee-package-smoke.js <built-package-directory> --serve
 The smoke fixture uses a synthetic FULI directory but the real installed employee bundle, SQLite and MCP transport. The UI mode does not query a personal provider or external model. It deletes its temporary test data on shutdown.
 
 Signing, remote catalog distribution, a runtime sandbox, database migration/uninstall UX, and production multi-user authorization remain separate release work. This feature does not authorize or publish a Feishu application.
+
+### Bole identity upgrades
+
+Local startup calls the idempotent system-HR endpoint for both fresh and existing installs.
+It consolidates the reserved legacy `fuli-project-hr` identity into `employee.bole` in one
+transaction. Names never identify merge targets. The legacy node remains an audit alias;
+assignments, recruitment references, attention and task history follow the canonical Bole.
+Old profile links resolve to Bole, and the obsolete ID cannot be recreated as another role.
+Working-memory heads and immutable checkpoint JSON/hashes are retained; equivalent old/new-ID
+memory retries address the same checkpoint. Knowledge visibility metadata is migrated only
+inside the owning space, without changing historical evidence UUIDs.
+
+Conflicting memory heads, locked executor policies, relationship properties or overlapping
+learning buckets abort the complete migration. Nothing is silently selected or overwritten.
+The Neo4j acceptance tests require an explicitly disposable loopback database; they never
+clear or seed an existing user's graph.

package/graph-provider/fuli_graph/collaboration_context.py

@@ -42,7 +42,7 @@ async def read_collaboration_context(
                 status_code=422,
                 detail='project Agent preferences require a personal project',
             )
-        await authorize_project_agent(
+        agent = await authorize_project_agent(
             store,
             actor,
             space,
@@ -50,6 +50,7 @@ async def read_collaboration_context(
             project_agent_id,
             require_memory=True,
         )
+        project_agent_id = agent['agent_id']
     project_scopes = await _project_scopes(
         store,
         space,

package/graph-provider/fuli_graph/graph_models.py

@@ -17,7 +17,7 @@ from .models import (
     KnowledgeItemKind,
     KnowledgeRevisionRecord,
     PersonalProfileAspect,
-    PreferenceScope,
+    ScopedPreferenceScope,
     StrictModel,
 )
 from .project_action_models import (
@@ -44,8 +44,9 @@ class GraphNode(StrictModel):
     confirmation_basis: ConfirmationBasis | None = None
     reasoning_summary: str | None = None
     profile_aspect: PersonalProfileAspect | None = None
-    preference_scope: PreferenceScope | None = None
+    preference_scope: ScopedPreferenceScope | None = None
     preference_project_id: str | None = None
+    preference_agent_id: str | None = None
     inheritance_mode: KnowledgeInheritanceMode = 'local_only'
     inherited_project_ids: list[str] = Field(default_factory=list, max_length=32)
     human_edited: bool = False
@@ -97,8 +98,9 @@ class GraphEdge(StrictModel):
     confirmation_basis: ConfirmationBasis | None = None
     reasoning_summary: str | None = None
     profile_aspect: PersonalProfileAspect | None = None
-    preference_scope: PreferenceScope | None = None
+    preference_scope: ScopedPreferenceScope | None = None
     preference_project_id: str | None = None
+    preference_agent_id: str | None = None
     inheritance_mode: KnowledgeInheritanceMode = 'local_only'
     inherited_project_ids: list[str] = Field(default_factory=list, max_length=32)
     human_edited: bool = False

package/graph-provider/fuli_graph/graph_query.py

@@ -216,6 +216,7 @@ def _node_query(project_scoped: bool, paginated: bool = False) -> str:
                     ELSE coalesce(node.fuli_preference_scope, 'global') END
                     AS preference_scope,
                node.fuli_preference_project_id AS preference_project_id,
+               node.fuli_preference_agent_id AS preference_agent_id,
                coalesce(node.fuli_inheritance_mode, 'local_only')
                  AS inheritance_mode,
                coalesce(node.fuli_inherited_project_ids, [])
@@ -331,6 +332,7 @@ def _edge_query(project_scoped: bool, paginated: bool = False) -> str:
                     ELSE coalesce(edge.fuli_preference_scope, 'global') END
                     AS preference_scope,
                edge.fuli_preference_project_id AS preference_project_id,
+               edge.fuli_preference_agent_id AS preference_agent_id,
                coalesce(edge.fuli_inheritance_mode, 'local_only')
                  AS inheritance_mode,
                coalesce(edge.fuli_inherited_project_ids, [])
@@ -499,6 +501,7 @@ def _graph_node(
         profile_aspect=record.get('profile_aspect'),
         preference_scope=record.get('preference_scope'),
         preference_project_id=record.get('preference_project_id'),
+        preference_agent_id=record.get('preference_agent_id'),
         inheritance_mode=record.get('inheritance_mode') or 'local_only',
         inherited_project_ids=record.get('inherited_project_ids') or [],
         human_edited=record.get('human_edited') is True,
@@ -580,6 +583,7 @@ def _graph_edge(
         profile_aspect=record.get('profile_aspect'),
         preference_scope=record.get('preference_scope'),
         preference_project_id=record.get('preference_project_id'),
+        preference_agent_id=record.get('preference_agent_id'),
         inheritance_mode=record.get('inheritance_mode') or 'local_only',
         inherited_project_ids=record.get('inherited_project_ids') or [],
         human_edited=record.get('human_edited') is True,

package/graph-provider/fuli_graph/knowledge_search.py

@@ -317,7 +317,7 @@ async def _personal_search_space(store, actor, spaces, request):
     for project_id in request.personal_project_ids:
         await authorize_personal_project(store, actor, space, project_id)
     if request.project_agent_id:
-        await authorize_project_agent(
+        agent = await authorize_project_agent(
             store,
             actor,
             space,
@@ -326,6 +326,7 @@ async def _personal_search_space(store, actor, spaces, request):
             require_active=True,
             require_memory=True,
         )
+        request.project_agent_id = agent['agent_id']
     return space
 
 

package/graph-provider/fuli_graph/project_agent_access.py

@@ -1,6 +1,7 @@
 from fastapi import HTTPException
 
 from .personal_project_access import authorize_personal_project
+from .system_hr_identity import resolve_hr_alias
 
 
 async def authorize_project_agent(
@@ -20,6 +21,7 @@ async def authorize_project_agent(
             detail='project Agent access requires a personal project',
         )
     await authorize_personal_project(store, actor, space, project_id)
+    agent_id = await resolve_hr_alias(store, space['id'], agent_id)
     records, _, _ = await store.runtime.driver.execute_query(
         '''
         MATCH (space:FuliSpace {id: $space_id, kind: 'personal'})-

package/graph-provider/fuli_graph/project_agent_attention_models.py

@@ -0,0 +1,64 @@
+from datetime import datetime
+from typing import Literal
+
+from pydantic import Field, model_validator
+
+from .model_base import StrictModel
+from .model_validation import reject_credentials
+
+
+AttentionStatus = Literal['open', 'resolved', 'cancelled']
+
+
+class AgentAttentionCreate(StrictModel):
+    personal_space_id: str = Field(min_length=1, max_length=128)
+    personal_project_id: str = Field(min_length=1, max_length=128)
+    agent_id: str = Field(min_length=1, max_length=128)
+    task_id: str | None = Field(default=None, min_length=1, max_length=128)
+    idempotency_key: str = Field(min_length=8, max_length=256)
+    kind: Literal['question', 'approval', 'review', 'permission', 'blocked']
+    title: str = Field(min_length=1, max_length=160)
+    detail: str = Field(min_length=1, max_length=4096)
+    requested_action: str = Field(min_length=1, max_length=2048)
+
+    @model_validator(mode='after')
+    def reject_sensitive_values(self):
+        reject_credentials(self, 'Agent attention request')
+        return self
+
+
+class AgentAttentionDecision(StrictModel):
+    personal_space_id: str = Field(min_length=1, max_length=128)
+    personal_project_id: str = Field(min_length=1, max_length=128)
+    request_id: str = Field(min_length=1, max_length=128)
+    expected_revision: int = Field(ge=0)
+    response: str = Field(min_length=1, max_length=4096)
+
+    @model_validator(mode='after')
+    def reject_sensitive_values(self):
+        reject_credentials(self, 'Agent attention response')
+        return self
+
+
+class AgentAttentionRecord(StrictModel):
+    request_id: str
+    personal_space_id: str
+    personal_project_id: str
+    agent_id: str
+    task_id: str | None = None
+    kind: str
+    title: str
+    detail: str
+    requested_action: str
+    status: AttentionStatus = 'open'
+    revision: int = 0
+    response: str | None = None
+    responded_by: Literal['human', 'agent'] | None = None
+    created_at: datetime
+    updated_at: datetime
+
+
+class AgentAttentionList(StrictModel):
+    items: list[AgentAttentionRecord]
+    total: int
+    counts: dict[str, int]

package/graph-provider/fuli_graph/project_agent_attention_routes.py

@@ -0,0 +1,38 @@
+from typing import Annotated, Any
+
+from fastapi import Query
+
+from .project_agent_attention_models import (
+    AgentAttentionCreate, AgentAttentionDecision, AgentAttentionList,
+    AgentAttentionRecord, AttentionStatus,
+)
+
+
+def register_project_agent_attention_routes(application, store, Actor: Any):
+    @application.post('/v1/agent-attention', response_model=AgentAttentionRecord)
+    async def create(request: AgentAttentionCreate, actor: Actor):
+        return await store.create_agent_attention(actor, request)
+
+    @application.get('/v1/agent-attention', response_model=AgentAttentionList)
+    async def list_requests(
+        actor: Actor,
+        personal_space_id: Annotated[str, Query(min_length=1, max_length=128)],
+        personal_project_id: Annotated[str | None, Query(min_length=1, max_length=128)] = None,
+        agent_id: Annotated[str | None, Query(min_length=1, max_length=128)] = None,
+        status: AttentionStatus | None = 'open',
+        limit: Annotated[int, Query(ge=1, le=200)] = 100,
+        offset: Annotated[int, Query(ge=0)] = 0,
+    ):
+        return await store.list_agent_attention(
+            actor, personal_space_id, personal_project_id, agent_id, status, limit, offset,
+        )
+
+    @application.post('/v1/agent-attention/cancel', response_model=AgentAttentionRecord)
+    async def cancel(request: AgentAttentionDecision, actor: Actor):
+        return await store.decide_agent_attention(actor, request, human=False)
+
+    @application.post('/v1/agent-attention/respond', response_model=AgentAttentionRecord)
+    async def respond(request: AgentAttentionDecision, actor: Actor):
+        # Only the trusted local-user HTTP workflow exposes this operation.
+        # A reply does not execute an approval, permission change or acceptance.
+        return await store.decide_agent_attention(actor, request, human=True)

package/graph-provider/fuli_graph/project_agent_models.py

@@ -90,6 +90,7 @@ class ProjectAgentExecutorPolicy(StrictModel):
 
 class ProjectAgentProfile(StrictModel):
     name: str = Field(min_length=1, max_length=160)
+    display_name: str | None = Field(default=None, min_length=1, max_length=160)
     # Keep the visual occupation marker as first-class profile data.  It is
     # intentionally independent from ``name`` so clients can update either
     # value without rewriting the other and old profiles can omit it.
@@ -266,6 +267,7 @@ class ProjectAgentAssignmentReplaceResult(StrictModel):
 
 class ProjectAgentRecord(StrictModel):
     agent_id: str
+    legacy_agent_ids: list[str] = Field(default_factory=list)
     personal_space_id: str
     personal_project_id: str | None = None
     profile: ProjectAgentProfile

package/graph-provider/fuli_graph/project_agent_names.py

@@ -0,0 +1,33 @@
+"""Stable product nicknames, independent of identity, assignment and work status."""
+import hashlib
+import re
+
+
+FIRST_NAMES = (
+    'Milo', 'Nova', 'Arlo', 'Nora', 'Theo', 'Iris', 'Remy', 'Lena',
+    'Finn', 'Cleo', 'Ezra', 'Mira', 'Jude', 'Lyra', 'Owen', 'Cora',
+    'Alex', 'Robin', 'Jamie', 'Rowan', 'Casey', 'Avery', 'Morgan', 'Riley',
+    'Ellis', 'Quinn', 'Sage', 'Blair', 'Reese', 'Emery', 'Drew', 'Sky',
+)
+LAST_NAMES = (
+    'Reed', 'Lane', 'Vale', 'Brook', 'Wren', 'Stone', 'Park', 'Finch',
+    'Lake', 'Ash', 'Birch', 'Hill', 'West', 'Woods', 'Dale', 'Hart',
+    'Gray', 'Bell', 'Hayes', 'Blake', 'Lowe', 'Frost', 'Green', 'Page',
+    'Wells', 'Shaw', 'Fox', 'Snow', 'Field', 'North', 'Ray', 'Cole',
+)
+ROLE_NAME = re.compile(
+    r'(工程师|协调人|开发者|设计师|架构师|审计员|项目经理|负责人|专员|助手|智能体|验证员|测试员|记录员)'
+    r'|\b(agent|engineer|coordinator|specialist|developer|reviewer|tester|verifier|auditor|designer|architect|implementer)\b',
+    re.IGNORECASE,
+)
+
+
+def agent_display_name(agent_id: str, name: str, display_name: str | None = None):
+    if display_name:
+        return display_name
+    if agent_id == 'fuli-project-coordinator' and name == '项目协调人':
+        return 'Orion'
+    if not ROLE_NAME.search(name):
+        return name
+    digest = hashlib.sha256(agent_id.encode()).digest()
+    return f'{FIRST_NAMES[digest[0] % len(FIRST_NAMES)]} {LAST_NAMES[digest[1] % len(LAST_NAMES)]}'

package/graph-provider/fuli_graph/project_agent_routes.py

@@ -60,6 +60,8 @@ def register_project_agent_routes(
     """Attach Project Agent routes while keeping ``create_app`` orchestration small."""
 
     register_project_agent_memory_routes(application, store, Actor)
+    from .project_agent_attention_routes import register_project_agent_attention_routes
+    register_project_agent_attention_routes(application, store, Actor)
 
     @application.put('/v1/project-agents', response_model=ProjectAgentRecord)
     async def upsert_project_agent(
@@ -137,6 +139,16 @@ def register_project_agent_routes(
     ) -> ProjectAgentRecord:
         return await store.ensure_system_project_coordinator(actor, personal_space_id)
 
+    @application.post(
+        '/v1/project-agents/system-hr',
+        response_model=ProjectAgentRecord,
+    )
+    async def ensure_project_agent_hr(
+        actor: Actor,
+        personal_space_id: Annotated[str, Query(min_length=1, max_length=128)],
+    ) -> ProjectAgentRecord:
+        return await store.ensure_system_project_hr(actor, personal_space_id)
+
     @application.post(
         '/v1/project-agent-assignments',
         response_model=ProjectAgentAssignmentRecord,

package/graph-provider/fuli_graph/runtime.py

@@ -271,6 +271,8 @@ class GraphitiRuntime:
         for query in (
             'CREATE CONSTRAINT fuli_project_agent_id IF NOT EXISTS '
             'FOR (n:FuliProjectAgent) REQUIRE n.id IS UNIQUE',
+            'CREATE CONSTRAINT fuli_agent_attention_id IF NOT EXISTS '
+            'FOR (n:FuliAgentAttention) REQUIRE n.id IS UNIQUE',
             'CREATE CONSTRAINT fuli_project_agent_assignment_id IF NOT EXISTS '
             'FOR (n:FuliProjectAgentAssignment) REQUIRE n.id IS UNIQUE',
             'CREATE CONSTRAINT fuli_project_agent_memory_id IF NOT EXISTS '
@@ -516,7 +518,7 @@ class GraphitiRuntime:
         from .project_agent_models import ProjectAgentProfile
         from .provider_values import now_utc, stable_uuid
 
-        profile = ProjectAgentProfile(
+        coordinator_profile = ProjectAgentProfile(
             name='项目协调人',
             responsibility='评估任务、应用用户配置并路由已有 Agent。',
             agent_type='coordinator',
@@ -525,26 +527,50 @@ class GraphitiRuntime:
             initial_preferences=['质量与可验收完成优先于成本和时间'],
             status='active',
         )
+        hr_profile = ProjectAgentProfile(
+            name='Bole',
+            occupation_emoji='🔎',
+            responsibility=(
+                '维护 Agent 人员分布、当前工作与可审计招募记录，'
+                '并在需要新角色时执行受策略约束的招募。'
+            ),
+            agent_type='hr',
+            work_kinds=['agent-recruitment', 'staffing-review'],
+            capabilities=[
+                'Agent 招募', '人员分布', '工作状态', '招募审计',
+                'fuli.employee:bole',
+            ],
+            initial_preferences=[
+                '每次招募保留任务、原因、触发来源与时间线。',
+                '只展示 Provider 已记录的人员状态，不推测未上报的工作。',
+            ],
+            status='active',
+        )
         updated_at = now_utc()
         for record in records:
             space_id = record['space_id']
-            node_id = stable_uuid(
-                self.settings.provider_id,
-                space_id,
-                'project-agent',
-                'fuli-project-coordinator',
-            )
-            await self.driver.execute_query(
-                '''
+            for agent_id, profile in (
+                ('fuli-project-coordinator', coordinator_profile),
+                ('employee.bole', hr_profile),
+            ):
+                node_id = stable_uuid(
+                    self.settings.provider_id,
+                    space_id,
+                    'project-agent',
+                    agent_id,
+                )
+                await self.driver.execute_query(
+                    '''
                 MATCH (space:FuliSpace {id: $space_id, kind: 'personal'})
                 MERGE (agent:FuliProjectAgent {id: $id})
-                ON CREATE SET agent.agent_id = 'fuli-project-coordinator',
+                ON CREATE SET agent.agent_id = $agent_id,
                               agent.profile_json = $profile_json,
                               agent.name = $name,
+                              agent.occupation_emoji = $occupation_emoji,
                               agent.responsibility = $responsibility,
                               agent.capabilities = $capabilities,
                               agent.work_kinds = $work_kinds,
-                              agent.agent_type = 'coordinator',
+                              agent.agent_type = $agent_type,
                               agent.memory_scope = 'reviewed_agent',
                               agent.status = 'active',
                               agent.system_managed = true,
@@ -552,15 +578,18 @@ class GraphitiRuntime:
                               agent.updated_at = $updated_at
                 MERGE (space)-[:HAS_PROJECT_AGENT_IDENTITY]->(agent)
                 ''',
-                space_id=space_id,
-                id=node_id,
-                profile_json=profile.model_dump_json(),
-                name=profile.name,
-                responsibility=profile.responsibility,
-                capabilities=profile.capabilities,
-                work_kinds=profile.work_kinds,
-                updated_at=updated_at,
-            )
+                    space_id=space_id,
+                    id=node_id,
+                    agent_id=agent_id,
+                    profile_json=profile.model_dump_json(),
+                    name=profile.name,
+                    occupation_emoji=profile.occupation_emoji,
+                    responsibility=profile.responsibility,
+                    capabilities=profile.capabilities,
+                    work_kinds=profile.work_kinds,
+                    agent_type=profile.agent_type,
+                    updated_at=updated_at,
+                )
 
     async def _migrate_personal_project_relation_review_defaults(self) -> None:
         await self.driver.execute_query(

package/graph-provider/fuli_graph/store.py

@@ -7,6 +7,7 @@ from .store_project_agent_executors import StoreProjectAgentExecutors
 from .store_project_agent_memory import StoreProjectAgentMemory
 from .store_project_agent_context import StoreProjectAgentContext
 from .store_project_agents import StoreProjectAgents
+from .store_project_agent_attention import StoreProjectAgentAttention
 from .store_project_agent_tasks import StoreProjectAgentTasks
 from .store_projects import StoreProjects
 from .store_publication import StorePublication
@@ -18,6 +19,7 @@ class GraphStore(
     StoreIdentity,
     StoreProjects,
     StoreProjectAgents,
+    StoreProjectAgentAttention,
     StoreProjectAgentMemory,
     StoreProjectAgentContext,
     StoreTaskContexts,