libero3 0.3.0

package/dist/mcp/src/timeblock/index.js

@@ -0,0 +1,206 @@
+import { effectiveUserId, lookupTargetUserLabel, resolveTargetUserLabel, } from "../profile-helpers.js";
+import { needsConfirmIfMissing, } from "../profile-confirm.js";
+function labelFor(db, userId) {
+    if (db)
+        return lookupTargetUserLabel(db, userId);
+    return resolveTargetUserLabel(userId);
+}
+export function createTimeBlockTools(repo, db) {
+    return {
+        async create(input) {
+            if (!input.title || input.title.trim() === "") {
+                throw new Error("事件名不能为空");
+            }
+            if (input.rating !== undefined && (input.rating < 1 || input.rating > 5)) {
+                throw new Error("评分必须在 1-5 之间");
+            }
+            if (input.status !== undefined && !["planned", "unverified", "completed"].includes(input.status)) {
+                throw new Error("status 只能为 planned / unverified / completed（MV-COACH-3 Slice 4 用户主权模型）");
+            }
+            if (input.start_time > input.end_time) {
+                throw new Error("开始时间不能晚于结束时间");
+            }
+            const userId = effectiveUserId(input);
+            const userExists = await repo.userExists(userId);
+            const gate = needsConfirmIfMissing(userExists, userId);
+            if (gate)
+                return gate;
+            const status = input.status ?? "completed";
+            const existing = await repo.findExactWindow({
+                user_id: userId,
+                title: input.title,
+                start: input.start_time,
+                end: input.end_time,
+                status,
+            });
+            if (existing) {
+                return { ...existing, target_user_label: labelFor(db, userId) };
+            }
+            const row = await repo.create({ ...input, user_id: userId, status });
+            return { ...row, target_user_label: labelFor(db, userId) };
+        },
+        async getById(id, userId) {
+            const row = await repo.getById(id);
+            // S41 multi-user isolation: 如果调用方传了 user_id，校验 ownership。
+            // 没传 user_id = 旧行为（单用户 / 兼容路径），不阻塞。
+            if (row && userId && row.user_id !== userId) {
+                return null;
+            }
+            return row;
+        },
+        async list(filters) {
+            if (!filters.user_id) {
+                throw new Error("user_id 为必填参数");
+            }
+            const userId = effectiveUserId(filters);
+            return repo.list({ ...filters, user_id: userId });
+        },
+        async update(id, input) {
+            const existing = await repo.getById(id);
+            if (!existing) {
+                throw new Error("时间块不存在");
+            }
+            const checkUserId = input.target_user_id ?? existing.user_id;
+            const profileOk = await repo.userExists(checkUserId);
+            const gate = needsConfirmIfMissing(profileOk, checkUserId);
+            if (gate)
+                return gate;
+            if (input.rating !== undefined && (input.rating < 1 || input.rating > 5)) {
+                throw new Error("评分必须在 1-5 之间");
+            }
+            if (input.status !== undefined && !["planned", "unverified", "completed"].includes(input.status)) {
+                throw new Error("status 只能为 planned / unverified / completed（MV-COACH-3 Slice 4 用户主权模型）");
+            }
+            // Bug 1 修复（2026-07-31，MV-COACH-3 Slice 4 v6）：
+            // 禁止 completed → unverified。实测证据：追问 cron-session LLM 在 7/30 14:15 把
+            // 已 completed 的 schedule（id 5097e1b9）改回了 unverified，破坏状态机可信度。
+            // 用户主权铁律：completed 是用户确认的终态，cron/LLM 不许往回改。
+            // 允许 completed → planned（用户主动改期/取消是合法的，保留旧测试通过）。
+            if (existing.status === "completed" &&
+                input.status === "unverified") {
+                throw new Error("不可从 completed 改回 unverified（用户主权终态保护·Bug 1）。" +
+                    "completed 是用户已确认执行的状态，只有用户主动改期/撤回才能改 status。");
+            }
+            const newStart = input.start_time ?? existing.start_time;
+            const newEnd = input.end_time ?? existing.end_time;
+            if (newStart > newEnd) {
+                throw new Error("开始时间不能晚于结束时间");
+            }
+            const { target_user_id: _t, ...patch } = input;
+            void _t;
+            const row = await repo.update(id, patch);
+            return {
+                ...row,
+                target_user_label: labelFor(db, checkUserId),
+            };
+        },
+        async remove(id, opts) {
+            if (opts?.target_user_id) {
+                const profileOk = await repo.userExists(opts.target_user_id);
+                const gate = needsConfirmIfMissing(profileOk, opts.target_user_id);
+                if (gate)
+                    return gate;
+            }
+            const existing = await repo.getById(id);
+            let labelUserId = opts?.target_user_id ?? existing?.user_id;
+            if (!opts?.target_user_id && existing) {
+                const profileOk = await repo.userExists(existing.user_id);
+                const gate = needsConfirmIfMissing(profileOk, existing.user_id);
+                if (gate)
+                    return gate;
+            }
+            const exists = await repo.exists(id);
+            if (!exists) {
+                throw new Error("时间块不存在");
+            }
+            // Soft-deleted rows: getById is null; recover user_id for label via db
+            if (!labelUserId && db) {
+                const row = db
+                    .prepare(`SELECT user_id FROM time_blocks WHERE id = ?`)
+                    .get(id);
+                labelUserId = row?.user_id;
+            }
+            await repo.remove(id);
+            return {
+                target_user_label: labelFor(db, labelUserId ?? id),
+            };
+        },
+        async restore(id) {
+            return repo.restore(id);
+        },
+        /**
+         * S43（2026-08-07）+ S48（2026-08-11）：扫描某用户过期未确认的 timeblock，分组返回。
+         *
+         * 用途：cron-session 每 30min 调一次，让 cron LLM 显式调 timeblock.update
+         * 升级状态 + 主动问。本工具**不**直接改 db（保留 brain/hand 分离 + 用户主权模型）。
+         *
+         * 判定逻辑（以 now 为基准）：
+         * - end_time + overdue_min_to_unverified (默认 30min) 仍 planned → to_unverified
+         * - end_time + overdue_min_to_ask (默认 60min) 仍 unverified/planned，**且 asked_at IS NULL**（S48：每条只问一次）→ to_ask
+         * - completed / 未过期 / 软删 / asked_at 已标记的 → 都不进 to_ask
+         *
+         * §4.5 静默折叠声明：纯查询，无副作用，无折叠。caller 发完追问后必须调 markAsked 幂等标记。
+         */
+        async sweepStale(input) {
+            if (!input.user_id) {
+                throw new Error("user_id 为必填参数");
+            }
+            const nowIso = input.now ?? new Date().toISOString();
+            const nowMs = new Date(nowIso).getTime();
+            const thresholdUnverifiedMin = input.overdue_min_to_unverified ?? 30;
+            const thresholdAskMin = input.overdue_min_to_ask ?? 60;
+            const thresholdUnverifiedMs = thresholdUnverifiedMin * 60 * 1000;
+            const thresholdAskMs = thresholdAskMin * 60 * 1000;
+            // 用 list 拿到该用户所有非软删的块（list 默认会过滤 deleted_at）
+            const blocks = await repo.list({
+                user_id: input.user_id,
+            });
+            const to_unverified = [];
+            const to_ask = [];
+            for (const b of blocks) {
+                if (b.deleted_at)
+                    continue;
+                if (b.status === "completed")
+                    continue;
+                const endMs = new Date(b.end_time).getTime();
+                if (Number.isNaN(endMs))
+                    continue;
+                const ageMs = nowMs - endMs;
+                if (ageMs <= 0)
+                    continue; // 还没到 end_time
+                const overdueUnverified = ageMs >= thresholdUnverifiedMs;
+                const overdueAsk = ageMs >= thresholdAskMs;
+                if (overdueUnverified && b.status === "planned") {
+                    to_unverified.push({
+                        id: b.id,
+                        title: b.title,
+                        start_time: b.start_time,
+                        end_time: b.end_time,
+                    });
+                }
+                // S48 幂等：asked_at 已标记的不再进 to_ask（每条只被扫描 cron 主动问一次）
+                if (overdueAsk && (b.status === "unverified" || b.status === "planned") && !b.asked_at) {
+                    to_ask.push({
+                        id: b.id,
+                        title: b.title,
+                        start_time: b.start_time,
+                        end_time: b.end_time,
+                        status: b.status,
+                    });
+                }
+            }
+            return { to_unverified, to_ask, now: nowIso };
+        },
+        /**
+         * S48（2026-08-11）：标记扫描追问已发——幂等保护。
+         * caller（cron-scan skill）发完追问后必须调用，写入 asked_at 时间戳。
+         * 返回受影响行数（用于 caller 自检）。无副作用之外的折叠（asked_at 永久保留作审计）。
+         */
+        async markAsked(ids) {
+            if (!ids || ids.length === 0)
+                return { marked: 0 };
+            const marked = await repo.markAsked(ids);
+            return { marked };
+        },
+    };
+}