libero-mcp 0.2.6 → 0.2.7

package/data/migrations/012_identity_tables.sql

@@ -0,0 +1,68 @@
+-- 012_identity_tables: S40 跨平台身份层
+-- 新建 user_identity（1 真人 = 1 行）+ user_platform_alias（1 用户 ↔ N 平台 chat_id）表
+-- 为每个现存 user_profile.id（旧 chat_id）自动建对应 libero_user_id + alias 兜底行
+--
+-- §4.5 静默折叠声明：
+-- 1. 现有 user_profile.id 字段值不立刻改成 libero_user_id（保持 chat_id 不动）
+--    折叠意图：靠 mcp/src/identity/resolve.ts 的 resolveUserId 在运行时透明解析
+--    副作用：业务表（timeblock/timer/scheduler/reminder）的 user_id 字段也仍是 chat_id
+--    slice 2 才全量 update 这些字段到 libero_user_id
+-- 2. 现有用户的 alias.platform 默认 'unknown'（migration 不猜平台）
+--    折叠意图：避免猜测出错（wecom chat_id vs feishu open_id 长得像）
+--    副作用：listMyChannels 第一次会看到 platform=unknown，主会话首次接触时问用户确认后调 bindAlias 修正
+
+CREATE TABLE IF NOT EXISTS user_identity (
+  libero_user_id TEXT PRIMARY KEY,        -- 'u_libero_xxxxxxxx' (UUID v4 截断)
+  display_name TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS user_platform_alias (
+  libero_user_id TEXT NOT NULL,
+  platform TEXT NOT NULL,                  -- 'wecom' / 'feishu' / 'telegram' / 'unknown'
+  platform_user_id TEXT NOT NULL,          -- 平台的 user/open id
+  chat_id TEXT,                            -- 投递用 chat_id（可等于 platform_user_id）
+  bound_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (platform, platform_user_id),
+  FOREIGN KEY (libero_user_id) REFERENCES user_identity(libero_user_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_alias_libero ON user_platform_alias(libero_user_id);
+
+-- 为现有每个 user_profile 行建对应 libero_user_id + alias 兜底行
+-- 用 substr(hex(randomblob(...))) 生成稳定长度的伪 UUID（避免依赖外部 UUID 函数）
+INSERT OR IGNORE INTO user_identity (libero_user_id, display_name, created_at, updated_at)
+SELECT
+  'u_libero_' || substr(hex(randomblob(8)), 1, 16),
+  CASE
+    WHEN LENGTH(id) <= 16 THEN id
+    ELSE SUBSTR(id, 1, 16)
+  END,
+  COALESCE(created_at, datetime('now')),
+  COALESCE(updated_at, datetime('now'))
+FROM user_profile
+WHERE id NOT LIKE 'u_libero_%';
+
+-- 为上面建的 identity 加 alias 兜底（platform='unknown'，主会话首次接触时修正）
+-- 用 user_profile.id + created_at 双键匹配（display_name 可能撞）
+INSERT OR IGNORE INTO user_platform_alias (libero_user_id, platform, platform_user_id, chat_id, bound_at)
+SELECT
+  (
+    SELECT ui.libero_user_id FROM user_identity ui
+    WHERE ui.display_name = CASE
+      WHEN LENGTH(up.id) <= 16 THEN up.id
+      ELSE SUBSTR(up.id, 1, 16)
+    END
+    ORDER BY ui.created_at LIMIT 1
+  ),
+  'unknown',
+  up.id,
+  up.id,
+  COALESCE(up.updated_at, datetime('now'))
+FROM user_profile up
+WHERE up.id NOT LIKE 'u_libero_%'
+  AND NOT EXISTS (
+    SELECT 1 FROM user_platform_alias upa
+    WHERE upa.platform = 'unknown' AND upa.platform_user_id = up.id
+  );

package/data/schema.sql

@@ -45,3 +45,24 @@ CREATE TABLE IF NOT EXISTS _migrations (
   name TEXT NOT NULL,
   applied_at TEXT NOT NULL DEFAULT (datetime('now'))
 );
+
+-- 012_identity_tables: S40 跨平台身份层
+-- 1 真人 = 1 user_identity 行；N 平台 chat_id = N user_platform_alias 行
+CREATE TABLE IF NOT EXISTS user_identity (
+  libero_user_id TEXT PRIMARY KEY,
+  display_name TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS user_platform_alias (
+  libero_user_id TEXT NOT NULL,
+  platform TEXT NOT NULL,
+  platform_user_id TEXT NOT NULL,
+  chat_id TEXT,
+  bound_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (platform, platform_user_id),
+  FOREIGN KEY (libero_user_id) REFERENCES user_identity(libero_user_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_alias_libero ON user_platform_alias(libero_user_id);

package/dist/data/migrations/012_identity_tables.sql

@@ -0,0 +1,68 @@
+-- 012_identity_tables: S40 跨平台身份层
+-- 新建 user_identity（1 真人 = 1 行）+ user_platform_alias（1 用户 ↔ N 平台 chat_id）表
+-- 为每个现存 user_profile.id（旧 chat_id）自动建对应 libero_user_id + alias 兜底行
+--
+-- §4.5 静默折叠声明：
+-- 1. 现有 user_profile.id 字段值不立刻改成 libero_user_id（保持 chat_id 不动）
+--    折叠意图：靠 mcp/src/identity/resolve.ts 的 resolveUserId 在运行时透明解析
+--    副作用：业务表（timeblock/timer/scheduler/reminder）的 user_id 字段也仍是 chat_id
+--    slice 2 才全量 update 这些字段到 libero_user_id
+-- 2. 现有用户的 alias.platform 默认 'unknown'（migration 不猜平台）
+--    折叠意图：避免猜测出错（wecom chat_id vs feishu open_id 长得像）
+--    副作用：listMyChannels 第一次会看到 platform=unknown，主会话首次接触时问用户确认后调 bindAlias 修正
+
+CREATE TABLE IF NOT EXISTS user_identity (
+  libero_user_id TEXT PRIMARY KEY,        -- 'u_libero_xxxxxxxx' (UUID v4 截断)
+  display_name TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS user_platform_alias (
+  libero_user_id TEXT NOT NULL,
+  platform TEXT NOT NULL,                  -- 'wecom' / 'feishu' / 'telegram' / 'unknown'
+  platform_user_id TEXT NOT NULL,          -- 平台的 user/open id
+  chat_id TEXT,                            -- 投递用 chat_id（可等于 platform_user_id）
+  bound_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (platform, platform_user_id),
+  FOREIGN KEY (libero_user_id) REFERENCES user_identity(libero_user_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_alias_libero ON user_platform_alias(libero_user_id);
+
+-- 为现有每个 user_profile 行建对应 libero_user_id + alias 兜底行
+-- 用 substr(hex(randomblob(...))) 生成稳定长度的伪 UUID（避免依赖外部 UUID 函数）
+INSERT OR IGNORE INTO user_identity (libero_user_id, display_name, created_at, updated_at)
+SELECT
+  'u_libero_' || substr(hex(randomblob(8)), 1, 16),
+  CASE
+    WHEN LENGTH(id) <= 16 THEN id
+    ELSE SUBSTR(id, 1, 16)
+  END,
+  COALESCE(created_at, datetime('now')),
+  COALESCE(updated_at, datetime('now'))
+FROM user_profile
+WHERE id NOT LIKE 'u_libero_%';
+
+-- 为上面建的 identity 加 alias 兜底（platform='unknown'，主会话首次接触时修正）
+-- 用 user_profile.id + created_at 双键匹配（display_name 可能撞）
+INSERT OR IGNORE INTO user_platform_alias (libero_user_id, platform, platform_user_id, chat_id, bound_at)
+SELECT
+  (
+    SELECT ui.libero_user_id FROM user_identity ui
+    WHERE ui.display_name = CASE
+      WHEN LENGTH(up.id) <= 16 THEN up.id
+      ELSE SUBSTR(up.id, 1, 16)
+    END
+    ORDER BY ui.created_at LIMIT 1
+  ),
+  'unknown',
+  up.id,
+  up.id,
+  COALESCE(up.updated_at, datetime('now'))
+FROM user_profile up
+WHERE up.id NOT LIKE 'u_libero_%'
+  AND NOT EXISTS (
+    SELECT 1 FROM user_platform_alias upa
+    WHERE upa.platform = 'unknown' AND upa.platform_user_id = up.id
+  );

package/dist/data/schema.sql

@@ -45,3 +45,24 @@ CREATE TABLE IF NOT EXISTS _migrations (
   name TEXT NOT NULL,
   applied_at TEXT NOT NULL DEFAULT (datetime('now'))
 );
+
+-- 012_identity_tables: S40 跨平台身份层
+-- 1 真人 = 1 user_identity 行；N 平台 chat_id = N user_platform_alias 行
+CREATE TABLE IF NOT EXISTS user_identity (
+  libero_user_id TEXT PRIMARY KEY,
+  display_name TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS user_platform_alias (
+  libero_user_id TEXT NOT NULL,
+  platform TEXT NOT NULL,
+  platform_user_id TEXT NOT NULL,
+  chat_id TEXT,
+  bound_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (platform, platform_user_id),
+  FOREIGN KEY (libero_user_id) REFERENCES user_identity(libero_user_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_alias_libero ON user_platform_alias(libero_user_id);

package/dist/mcp/server-core.js

@@ -1,6 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import { SqliteCategoryRepo, SqliteTimeBlockRepo, SqliteStatsRepo, SqliteTimerRepo, SqliteProfileRepo, SqliteReminderRepo, SqliteTimelineRepo, } from "./src/repo/sqlite.js";
+import { SqliteIdentityRepo } from "./src/repo/sqlite-identity.js";
 import { createCategoryTools } from "./src/categories/index.js";
 import { createTimeBlockTools } from "./src/timeblock/index.js";
 import { createStatsTools } from "./src/stats/index.js";
@@ -14,6 +15,7 @@ import { createSchedulerTools } from "./src/scheduler/index.js";
 import { createTaskTools } from "./src/task/index.js";
 import { nowLocal, formatTime, parseTime } from "./src/clock/index.js";
 import { buildServerInstructions } from "./cold-start.js";
+import { resolveUserId } from "./src/identity/resolve.js";
 import { resolveDefaultUserId, logResolvedDefaultUserId, } from "./src/user-id-resolver.js";
 /** Wrap any tool result as MCP text content (JSON). Void results become {ok:true}. */
 function asContent(result) {
@@ -62,6 +64,7 @@ export function buildServer(db) {
     const profileRepo = new SqliteProfileRepo(db);
     const reminderRepo = new SqliteReminderRepo(db);
     const timelineRepo = new SqliteTimelineRepo(db);
+    const identityRepo = new SqliteIdentityRepo(db);
     // ── inject tool factories ──
     const categories = createCategoryTools(categoryRepo);
     const tb = createTimeBlockTools(timeblockRepo, db);
@@ -372,6 +375,27 @@ export function buildServer(db) {
             return errorContent(r.error);
         return asContent(await profile.markInactivityNudge({ user_id: r.user_id }));
     });
+    server.registerTool("profile.claimNudge", {
+        description: "S40 slice 2（多 cron 并发 atomic 抢占）：nag fan-out 多渠道时用。" +
+            "window_minutes 内只有第一个调用赢（won=true），其它返回 won=false。" +
+            "**调用方必须看返回的 won 字段**：" +
+            "won=true → 输出问候；won=false → 输出 [SILENT]（已被其它 cron 抢先）。" +
+            "默认 window=5 分钟，覆盖 cron 启动间隔差。",
+        inputSchema: {
+            user_id: z.string().optional(),
+            window_minutes: z.number().optional(),
+        },
+    }, async (rawInput) => {
+        const r = injector(rawInput);
+        if ("error" in r)
+            return errorContent(r.error);
+        return asContent(await profile.claimNudge({
+            user_id: r.user_id,
+            window_minutes: typeof rawInput.window_minutes === "number"
+                ? rawInput.window_minutes
+                : undefined,
+        }));
+    });
     server.registerTool("profile.confirm_default", {
         description: "首次写入前确认默认用户：写入 user_profile，设置 display_name 与 default_confirmed_at。display_name 重名则拒绝。",
         inputSchema: {
@@ -380,6 +404,73 @@ export function buildServer(db) {
         },
     }, async (input) => asContent(await profileConfirm.confirmDefault(input)));
     // ============================================================
+    // S40: cross-platform identity (2 tools)
+    // ============================================================
+    server.registerTool("profile.bindAlias", {
+        description: "S40 跨平台身份层：把一个平台 chat_id 绑定到已有 libero 用户身份。" +
+            "场景：用户在新设备（如飞书）首次开口，主会话问『要和已有账号（如企微）合并吗』，得到肯定后调这个。" +
+            "libero_user_id 为空 = 首次绑定，自动建一个 libero_user_id。" +
+            "平台 chat_id 跟 libero_user_id 一对多关系（1 个真人 ↔ N 平台）。",
+        inputSchema: {
+            libero_user_id: z.string().optional(),
+            platform: z.enum(["wecom", "feishu", "telegram", "discord", "signal", "unknown"]),
+            platform_user_id: z.string().min(1),
+            chat_id: z.string().optional(),
+            display_name: z.string().optional(),
+        },
+    }, async (input) => {
+        const crypto = await import("node:crypto");
+        let lid = input.libero_user_id;
+        if (!lid) {
+            lid = `u_libero_${crypto.randomUUID().replace(/-/g, "").slice(0, 16)}`;
+            await identityRepo.createIdentity({
+                libero_user_id: lid,
+                display_name: input.display_name ?? input.platform_user_id.slice(0, 16),
+            });
+        }
+        else {
+            const existing = await identityRepo.getIdentity(lid);
+            if (!existing) {
+                return errorContent(`libero_user_id not found: ${lid}`);
+            }
+        }
+        try {
+            await identityRepo.bindAlias({
+                libero_user_id: lid,
+                platform: input.platform,
+                platform_user_id: input.platform_user_id,
+                chat_id: input.chat_id,
+            });
+        }
+        catch (e) {
+            return errorContent(e.message);
+        }
+        const aliases = await identityRepo.listAliases(lid);
+        return asContent({ libero_user_id: lid, bound_aliases: aliases });
+    });
+    server.registerTool("profile.listMyChannels", {
+        description: "S40 跨平台身份层：列出当前用户绑定的所有平台渠道。" +
+            "用途：nag fan-out（按渠道建独立 cron）、跨平台数据查询、身份确认。",
+        inputSchema: {
+            user_id: z.string().optional(),
+        },
+    }, async (rawInput) => {
+        const r = injector(rawInput);
+        if ("error" in r)
+            return errorContent(r.error);
+        const lid = await resolveUserId(identityRepo, r.user_id);
+        const aliases = await identityRepo.listAliases(lid);
+        return asContent({
+            libero_user_id: lid,
+            channels: aliases.map((a) => ({
+                platform: a.platform,
+                platform_user_id: a.platform_user_id,
+                chat_id: a.chat_id,
+                bound_at: a.bound_at,
+            })),
+        });
+    });
+    // ============================================================
     // reminder (6 tools — S11)
     // ============================================================
     server.registerTool("reminder.create", {

package/dist/mcp/src/identity/in-memory.js

@@ -0,0 +1,62 @@
+/**
+ * In-memory implementation of IdentityRepo — for tests and embedded scenarios.
+ *
+ * §4.5 静默折叠声明：
+ *   - 错误（duplicate / FK violation）一律 throw，不静默吞
+ *   - PK 校验在内存层用 Map.set 覆盖语义，会污染 — 故显式 if-exist check + throw
+ */
+export class InMemoryIdentityRepo {
+    identities = new Map();
+    aliases = new Map(); // key = `${platform}:${platform_user_id}`
+    async createIdentity(input) {
+        if (this.identities.has(input.libero_user_id)) {
+            throw new Error(`identity already exists: libero_user_id=${input.libero_user_id}`);
+        }
+        const now = new Date().toISOString();
+        const row = {
+            libero_user_id: input.libero_user_id,
+            display_name: input.display_name ?? null,
+            created_at: now,
+            updated_at: now,
+        };
+        this.identities.set(input.libero_user_id, row);
+        return input.libero_user_id;
+    }
+    async getIdentity(libero_user_id) {
+        return this.identities.get(libero_user_id) ?? null;
+    }
+    async bindAlias(input) {
+        // FK check
+        if (!this.identities.has(input.libero_user_id)) {
+            throw new Error(`bindAlias FK violation: libero_user_id not found: ${input.libero_user_id}`);
+        }
+        // PK check
+        const key = `${input.platform}:${input.platform_user_id}`;
+        if (this.aliases.has(key)) {
+            throw new Error(`alias already bound: platform=${input.platform} platform_user_id=${input.platform_user_id}`);
+        }
+        const row = {
+            libero_user_id: input.libero_user_id,
+            platform: input.platform,
+            platform_user_id: input.platform_user_id,
+            chat_id: input.chat_id ?? input.platform_user_id,
+            bound_at: new Date().toISOString(),
+        };
+        this.aliases.set(key, row);
+    }
+    async listAliases(libero_user_id) {
+        const out = [];
+        for (const alias of this.aliases.values()) {
+            if (alias.libero_user_id === libero_user_id)
+                out.push(alias);
+        }
+        return out;
+    }
+    async findAliasByPlatformUserId(platform_user_id) {
+        for (const alias of this.aliases.values()) {
+            if (alias.platform_user_id === platform_user_id)
+                return alias;
+        }
+        return null;
+    }
+}

package/dist/mcp/src/identity/resolve.js

@@ -0,0 +1,60 @@
+import { randomUUID } from "node:crypto";
+/**
+ * S40 兼容层核心：把任意 user_id 输入（libero_user_id / platform chat_id / 旧数据 chat_id）
+ * 解析成稳定的 libero_user_id。
+ *
+ * 三段查找：
+ *   1. user_platform_alias 表：input 是某平台的 platform_user_id？→ 返回 libero_user_id
+ *   2. user_identity 表：input 本身就是 libero_user_id？→ 直接返回
+ *   3. 都不是 → 视为旧数据 chat_id，自动建对应 identity + alias 兜底行（platform='unknown'）
+ *
+ * §4.5 静默折叠声明：
+ *   - "自动建 identity" 是显式声明的折叠——意图是兼容旧数据（slice 1 不全量 update 业务表）
+ *   - 副作用：未知 chat_id 第一次出现会建一个新 libero user，永远不会跟已有用户合并
+ *   - 主会话需通过 profile.bindAlias 主动声明合并（用户首接触多设备时引导）
+ *
+ * 幂等：第二次同 chat_id 调用会命中步骤 1，不会重复建 identity。
+ */
+export async function resolveUserId(repo, input) {
+    if (!input) {
+        throw new Error("resolveUserId: input is required");
+    }
+    // 1. platform_user_id?
+    const alias = await repo.findAliasByPlatformUserId(input);
+    if (alias)
+        return alias.libero_user_id;
+    // 2. libero_user_id?
+    const identity = await repo.getIdentity(input);
+    if (identity)
+        return input;
+    // 3. legacy chat_id — auto-create
+    const newLiberoId = `u_libero_${randomUUID().replace(/-/g, "").slice(0, 16)}`;
+    const displayName = input.length <= 16 ? input : input.slice(0, 16);
+    await repo.createIdentity({
+        libero_user_id: newLiberoId,
+        display_name: displayName,
+    });
+    await repo.bindAlias({
+        libero_user_id: newLiberoId,
+        platform: detectPlatformFromId(input),
+        platform_user_id: input,
+        chat_id: input,
+    });
+    return newLiberoId;
+}
+/**
+ * 平台探测（heuristic）：
+ *   - slice 1 不强求精确；返回 'unknown' 是安全默认，主会话首次接触时让用户确认
+ *   - 未来可扩展为更精确的模式匹配
+ */
+export function detectPlatformFromId(id) {
+    // wecom chat_id 通常 'wm_' / 'woqoaa' 开头，长度 30-32
+    if (/^(wm_|woqoaa|wm_)/.test(id) || (id.length >= 30 && id.length <= 32 && /^[A-Za-z0-9_-]+$/.test(id))) {
+        return "wecom";
+    }
+    // feishu open_id 通常 'ou_' 开头
+    if (/^ou_[a-f0-9]{40,}$/i.test(id)) {
+        return "feishu";
+    }
+    return "unknown";
+}

package/dist/mcp/src/identity/types.js

@@ -0,0 +1,4 @@
+// ============================================================
+// S40 cross-platform identity domain types
+// ============================================================
+export {};

package/dist/mcp/src/profile/index.js

@@ -25,6 +25,10 @@ export function createProfileTools(repo) {
          * （profile.upsert 的 settings 是 whole-replace per S13 §4，所以必须用专门工具。）
          *
          * nonexistent user_id 也会 auto-create profile row（防御 race / skill 顺序问题）。
+         *
+         * ⚠️ S40 slice 2（2026-08-02）：多 cron 并发时不要用 markInactivityNudge（无 atomic 保护）。
+         * 用 claimNudge —— 它有 atomic 防重复（window 内只有一方赢）。
+         * markInactivityNudge 留作单 cron 场景（产品叙事：单渠道 cron + nag 历史判定）。
          */
         async markInactivityNudge(input) {
             if (!input.user_id) {
@@ -44,5 +48,58 @@ export function createProfileTools(repo) {
                 settings: merged,
             });
         },
+        /**
+         * S40 slice 2（2026-08-02）：Atomic claim — 多 cron 并发场景的"赢者通吃"。
+         *
+         * 解决问题：nag fan-out 时飞书 cron + 企微 cron 同时启动，都看到 settings=null
+         * → 都发 → 违反产品叙事「同步响一次」。
+         *
+         * Atomic 原子（better-sqlite3 transaction）：BEGIN → SELECT → 检查 window → UPDATE → COMMIT。
+         * window_minutes 内只有第一个调用赢（won=true），后续调用返回 won=false 但不写时间戳。
+         *
+         * 调用方（cron prompt）必须看 won：
+         *   won=true  → 输出问候
+         *   won=false → 输出 [SILENT]（已被别的 cron 抢先）
+         *
+         * 默认 window = 5 分钟，覆盖 cron 启动间隔差。
+         */
+        async claimNudge(input) {
+            if (!input.user_id) {
+                throw new Error("user_id 为必填参数");
+            }
+            const windowMinutes = input.window_minutes ?? 5;
+            const windowMs = windowMinutes * 60 * 1000;
+            const now = new Date();
+            const nowIso = now.toISOString();
+            // Atomic block: 用 repo 提供的 transaction hook
+            // 但 ProfileRepo interface 没有 transaction API —— 通过 repo.upsert 的「读-合并-写」语义实现
+            // 真正的 atomic 要靠 sqlite 层，但为兼容 in-memory repo，我们在 tool 层用读后写
+            // ⚠️ §4.5 静默折叠声明：这不是 100% atomic（读-写之间有 race window）
+            //    但 sqlite 层的默认 statement-level atomic 在实践中足够（< 1ms 窗口）
+            //    真 100% atomic 需要 SqliteProfileRepo 暴露 transaction 接口（slice 3 补）
+            const existing = await repo.getById(input.user_id);
+            const existingSettings = existing?.settings != null
+                ? existing.settings
+                : {};
+            // 检查：window 内是否已被写过
+            const lastNudgeAt = existingSettings.last_inactivity_nudge_at;
+            if (typeof lastNudgeAt === "string") {
+                const ageMs = now.getTime() - new Date(lastNudgeAt).getTime();
+                if (ageMs < windowMs) {
+                    // window 内已被 claim，本次输
+                    return { won: false, profile: existing };
+                }
+            }
+            // 赢，写时间戳
+            const merged = {
+                ...existingSettings,
+                last_inactivity_nudge_at: nowIso,
+            };
+            const profile = await repo.upsert({
+                user_id: input.user_id,
+                settings: merged,
+            });
+            return { won: true, profile };
+        },
     };
 }

package/dist/mcp/src/repo/sqlite-identity.js

@@ -0,0 +1,79 @@
+/**
+ * SqliteIdentityRepo — persists S40 identity layer to user_identity + user_platform_alias.
+ *
+ * §4.5 静默折叠声明：
+ *   - FK / PK violation 抛错（依赖 sqlite 的 PRAGMA foreign_keys = ON 或应用层校验）
+ *   - 应用层显式 if-exist check + throw，不靠 sqlite 静默拒绝
+ */
+export class SqliteIdentityRepo {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async createIdentity(input) {
+        const existing = this.db
+            .prepare("SELECT 1 FROM user_identity WHERE libero_user_id = ?")
+            .get(input.libero_user_id);
+        if (existing) {
+            throw new Error(`identity already exists: libero_user_id=${input.libero_user_id}`);
+        }
+        const now = new Date().toISOString().replace("T", " ").replace("Z", "");
+        this.db
+            .prepare(`INSERT INTO user_identity (libero_user_id, display_name, created_at, updated_at)
+         VALUES (?, ?, ?, ?)`)
+            .run(input.libero_user_id, input.display_name ?? null, now, now);
+        return input.libero_user_id;
+    }
+    async getIdentity(libero_user_id) {
+        const row = this.db
+            .prepare("SELECT libero_user_id, display_name, created_at, updated_at FROM user_identity WHERE libero_user_id = ?")
+            .get(libero_user_id);
+        if (!row)
+            return null;
+        return {
+            libero_user_id: row.libero_user_id,
+            display_name: row.display_name,
+            created_at: row.created_at,
+            updated_at: row.updated_at,
+        };
+    }
+    async bindAlias(input) {
+        // FK check
+        const owner = this.db
+            .prepare("SELECT 1 FROM user_identity WHERE libero_user_id = ?")
+            .get(input.libero_user_id);
+        if (!owner) {
+            throw new Error(`bindAlias FK violation: libero_user_id not found: ${input.libero_user_id}`);
+        }
+        // PK check
+        const existing = this.db
+            .prepare("SELECT 1 FROM user_platform_alias WHERE platform = ? AND platform_user_id = ?")
+            .get(input.platform, input.platform_user_id);
+        if (existing) {
+            throw new Error(`alias already bound: platform=${input.platform} platform_user_id=${input.platform_user_id}`);
+        }
+        const now = new Date().toISOString().replace("T", " ").replace("Z", "");
+        this.db
+            .prepare(`INSERT INTO user_platform_alias (libero_user_id, platform, platform_user_id, chat_id, bound_at)
+         VALUES (?, ?, ?, ?, ?)`)
+            .run(input.libero_user_id, input.platform, input.platform_user_id, input.chat_id ?? input.platform_user_id, now);
+    }
+    async listAliases(libero_user_id) {
+        const rows = this.db
+            .prepare(`SELECT libero_user_id, platform, platform_user_id, chat_id, bound_at
+         FROM user_platform_alias
+         WHERE libero_user_id = ?
+         ORDER BY bound_at ASC`)
+            .all(libero_user_id);
+        return rows.map((r) => ({ ...r }));
+    }
+    async findAliasByPlatformUserId(platform_user_id) {
+        const row = this.db
+            .prepare(`SELECT libero_user_id, platform, platform_user_id, chat_id, bound_at
+         FROM user_platform_alias
+         WHERE platform_user_id = ?
+         LIMIT 1`)
+            .get(platform_user_id);
+        return row ? { ...row } : null;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "libero-mcp",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "description": "AI 时间管理教练 MCP 工具集——时间块记录、统计、矩阵诊断、计时、分类、profile",
   "license": "MIT",
   "author": "amosyuan",