oh-my-agent-web 0.2.0 → 0.4.0

package/dist/server/providers/validate.js

@@ -0,0 +1,241 @@
+/**
+ * provider / 模型配置的校验（ADR-0025 §3）——纯函数，全部可单测。
+ *
+ * 这一层的存在理由：这些值会被写进 `~/.pi/agent/models-store.json` 与 `auth.json`，
+ * 一旦写坏，下次 pi 启动可能整个模型表都读不出来。所以「用户能填什么」必须先收窄。
+ */
+import { validateSchedule } from "../util/pricing.js";
+/** 支持的上游 API 形态（与 pi 的 ModelDefinition.api 对齐） */
+export const API_KINDS = [
+    "openai-completions",
+    "openai-responses",
+    "openai-codex-responses",
+    "anthropic-messages",
+    "typesafe-system-one",
+];
+export const DEFAULT_API_KIND = "openai-completions";
+export const MAX_PROVIDER_ID_CHARS = 32;
+export const MAX_MODELS_PER_PROVIDER = 50;
+export const MAX_API_KEY_CHARS = 512;
+export const MIN_API_KEY_CHARS = 8;
+export const MAX_HEADERS = 32;
+export const MAX_HEADER_CHARS = 256;
+const PROVIDER_RE = /^[a-z0-9][a-z0-9-]{1,30}$/;
+const MODEL_ID_RE = /^[A-Za-z0-9._:/-]{1,120}$/;
+/** 纯函数：baseUrl 只允许 http(s)，且禁止 user:pass@ 这种把凭证塞进地址的形态 */
+export function validateBaseUrl(raw) {
+    if (typeof raw !== "string")
+        return { ok: false, error: "baseUrl 必须是字符串" };
+    const value = raw.trim();
+    if (value === "")
+        return { ok: false, error: "baseUrl 不能为空" };
+    if (/^(file|javascript|data|vbscript):/i.test(value))
+        return { ok: false, error: "baseUrl 只允许 http(s)" };
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return { ok: false, error: "baseUrl 不是合法 URL" };
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+        return { ok: false, error: "baseUrl 只允许 http(s)" };
+    if (url.username !== "" || url.password !== "")
+        return { ok: false, error: "baseUrl 里不能带用户名密码" };
+    return { ok: true, value: value.replace(/\/+$/, "") };
+}
+/** 纯函数：api key 只做形态校验（长度 / 不许换行），不验真伪 */
+export function validateHeaders(raw) {
+    if (raw === undefined || raw === null || raw === "")
+        return { ok: true, value: undefined };
+    if (typeof raw !== "object" || Array.isArray(raw))
+        return { ok: false, error: "headers 必须是 JSON 对象" };
+    const headers = {};
+    for (const [rawName, rawValue] of Object.entries(raw)) {
+        const name = rawName.trim();
+        const value = typeof rawValue === "string" ? rawValue.trim() : "";
+        if (name === "" || value === "")
+            continue;
+        if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name))
+            return { ok: false, error: `header 名称不合法：${name}` };
+        if (name.length > MAX_HEADER_CHARS || value.length > MAX_HEADER_CHARS)
+            return { ok: false, error: "header 名称和值不能超过 256 个字符" };
+        if (/[\r\n]/.test(value))
+            return { ok: false, error: `header 值不能包含换行：${name}` };
+        headers[name] = value;
+        if (Object.keys(headers).length > MAX_HEADERS)
+            return { ok: false, error: `最多配置 ${MAX_HEADERS} 个 header` };
+    }
+    return { ok: true, value: Object.keys(headers).length > 0 ? headers : undefined };
+}
+export function validateApiKey(raw) {
+    if (raw === undefined || raw === null || raw === "")
+        return { ok: true, value: undefined };
+    if (typeof raw !== "string")
+        return { ok: false, error: "apiKey 必须是字符串" };
+    const value = raw.trim();
+    if (value === "")
+        return { ok: true, value: undefined };
+    if (value.length < MIN_API_KEY_CHARS)
+        return { ok: false, error: `apiKey 太短（至少 ${MIN_API_KEY_CHARS} 位）` };
+    if (value.length > MAX_API_KEY_CHARS)
+        return { ok: false, error: `apiKey 太长（最多 ${MAX_API_KEY_CHARS} 位）` };
+    if (/[\r\n]/.test(value))
+        return { ok: false, error: "apiKey 不能包含换行" };
+    return { ok: true, value };
+}
+/** 纯函数：把 key 变成「尾 4 位」提示（前端只能看到这个） */
+export function maskKey(key) {
+    if (!key)
+        return null;
+    const tail = key.slice(-4);
+    return `…${tail}`;
+}
+/** 纯函数：整张表单的校验（一次收集所有错误，别让用户挤牙膏式试错） */
+export function validateProviderInput(input) {
+    if (typeof input !== "object" || input === null)
+        return { ok: false, errors: ["入参不是对象"] };
+    const record = input;
+    const errors = [];
+    const provider = typeof record.provider === "string" ? record.provider.trim().toLowerCase() : "";
+    if (!PROVIDER_RE.test(provider))
+        errors.push("provider 只能是小写字母/数字/短横线（2–32 位）");
+    const baseUrlResult = validateBaseUrl(record.baseUrl);
+    if (!baseUrlResult.ok)
+        errors.push(baseUrlResult.error);
+    const api = typeof record.api === "string" && record.api.trim() !== "" ? record.api.trim() : DEFAULT_API_KIND;
+    if (!API_KINDS.includes(api))
+        errors.push(`api 必须是：${API_KINDS.join(" / ")}`);
+    const keyResult = validateApiKey(record.apiKey);
+    if (!keyResult.ok)
+        errors.push(keyResult.error);
+    const headersResult = validateHeaders(record.headers);
+    if (!headersResult.ok)
+        errors.push(headersResult.error);
+    const models = [];
+    const rawModels = Array.isArray(record.models) ? record.models : [];
+    const seen = new Set();
+    for (const item of rawModels) {
+        const id = typeof item === "string"
+            ? item.trim()
+            : typeof item === "object" && item !== null
+                ? String(item.id ?? "").trim()
+                : "";
+        if (id === "")
+            continue;
+        if (!MODEL_ID_RE.test(id)) {
+            errors.push(`模型 id 含非法字符：${id}`);
+            continue;
+        }
+        if (seen.has(id))
+            continue;
+        seen.add(id);
+        const name = typeof item === "object" && item !== null ? item.name : undefined;
+        const contextWindow = typeof item === "object" && item !== null ? item.contextWindow : undefined;
+        models.push({
+            id,
+            ...(typeof name === "string" && name.trim() !== "" ? { name: name.trim().slice(0, 80) } : {}),
+            ...(typeof contextWindow === "number" && Number.isFinite(contextWindow) && contextWindow > 0
+                ? { contextWindow: Math.floor(contextWindow) }
+                : {}),
+        });
+    }
+    if (models.length === 0)
+        errors.push("至少填一个模型 id");
+    if (models.length > MAX_MODELS_PER_PROVIDER)
+        errors.push(`最多 ${MAX_MODELS_PER_PROVIDER} 个模型`);
+    if (errors.length > 0)
+        return { ok: false, errors };
+    const previousRaw = typeof record.previousProvider === "string" ? record.previousProvider.trim().toLowerCase() : "";
+    const previousProvider = previousRaw !== "" && previousRaw !== provider ? previousRaw : undefined;
+    return {
+        ok: true,
+        value: {
+            provider,
+            ...(previousProvider ? { previousProvider } : {}),
+            baseUrl: baseUrlResult.ok ? baseUrlResult.value : "",
+            api,
+            ...(keyResult.ok && keyResult.value ? { apiKey: keyResult.value } : {}),
+            ...(headersResult.ok && headersResult.value ? { headers: headersResult.value } : {}),
+            models,
+        },
+    };
+}
+export const MAX_CONTEXT_WINDOW = 100_000_000;
+export const MAX_MAX_TOKENS = 10_000_000;
+/** 纯函数：正整数（可空）；空串/null/undefined 都算"未提供" */
+function positiveInteger(raw, limit, label) {
+    if (raw === undefined || raw === null || raw === "")
+        return { ok: true, value: null };
+    const value = typeof raw === "number" ? raw : Number(String(raw).trim());
+    if (!Number.isFinite(value) || value <= 0)
+        return { ok: false, error: `${label} 必须是正整数` };
+    const rounded = Math.floor(value);
+    if (rounded > limit)
+        return { ok: false, error: `${label} 不能超过 ${limit}` };
+    return { ok: true, value: rounded };
+}
+/** 纯函数：非负价格（可空） */
+function price(raw, label) {
+    if (raw === undefined || raw === null || raw === "")
+        return { ok: true, value: 0 };
+    const value = typeof raw === "number" ? raw : Number(String(raw).trim());
+    if (!Number.isFinite(value) || value < 0)
+        return { ok: false, error: `${label} 必须是非负数` };
+    return { ok: true, value };
+}
+/** 纯函数：整张模型表单的校验（一次收集全部错误） */
+export function validateModelSpec(input) {
+    if (typeof input !== "object" || input === null)
+        return { ok: false, errors: ["入参不是对象"] };
+    const record = input;
+    const errors = [];
+    const id = typeof record.id === "string" ? record.id.trim() : "";
+    if (!MODEL_ID_RE.test(id))
+        errors.push("模型 id 只能包含字母数字与 . _ : / -（1–120 位）");
+    const contextWindow = positiveInteger(record.contextWindow, MAX_CONTEXT_WINDOW, "上下文窗口");
+    if (!contextWindow.ok)
+        errors.push(contextWindow.error);
+    const maxTokens = positiveInteger(record.maxTokens, MAX_MAX_TOKENS, "最大输出 tokens");
+    if (!maxTokens.ok)
+        errors.push(maxTokens.error);
+    const costInput = record.cost;
+    const cost = {
+        input: price(costInput?.input, "输入价格"),
+        output: price(costInput?.output, "输出价格"),
+        cacheRead: price(costInput?.cacheRead, "缓存读价格"),
+        cacheWrite: price(costInput?.cacheWrite, "缓存写价格"),
+    };
+    for (const item of Object.values(cost))
+        if (!item.ok)
+            errors.push(item.error);
+    const costProvided = costInput !== undefined &&
+        Object.values(costInput).some((value) => value !== "" && value !== null && value !== undefined);
+    // 分时价格：起始时间 / 价格格式一次列全（写法坏了的时段表会让算账静默变错，必须挡住）
+    const schedule = validateSchedule(record.costSchedule);
+    if (!schedule.ok)
+        for (const error of schedule.errors)
+            errors.push(error);
+    if (errors.length > 0)
+        return { ok: false, errors };
+    return {
+        ok: true,
+        value: {
+            id,
+            name: typeof record.name === "string" && record.name.trim() !== "" ? record.name.trim().slice(0, 80) : id,
+            reasoning: record.reasoning === true,
+            imageInput: record.imageInput === true,
+            contextWindow: contextWindow.ok ? contextWindow.value : null,
+            maxTokens: maxTokens.ok ? maxTokens.value : null,
+            cost: costProvided
+                ? {
+                    input: cost.input.ok ? cost.input.value : 0,
+                    output: cost.output.ok ? cost.output.value : 0,
+                    cacheRead: cost.cacheRead.ok ? cost.cacheRead.value : 0,
+                    cacheWrite: cost.cacheWrite.ok ? cost.cacheWrite.value : 0,
+                }
+                : null,
+            costSchedule: schedule.ok ? schedule.value : null,
+        },
+    };
+}

package/dist/server/push/push-routes.js

@@ -0,0 +1,114 @@
+import { VAPID_PUBLIC_KEY } from "./push.js";
+import { BRAND_NAME } from "../brand.js";
+/** 没有别名的老订阅：按推送网关猜一个（Apple / Chrome-FCM），总比一串域名好认 */
+function defaultName(host) {
+    if (host.includes("push.apple.com"))
+        return "Apple 设备（Safari）";
+    if (host.includes("googleapis.com") || host.includes("fcm"))
+        return "Chrome 设备";
+    return host;
+}
+export function registerPushRoutes(app, options) {
+    app.get("/api/push/key", (_request, response) => {
+        response.json({ publicKey: VAPID_PUBLIC_KEY });
+    });
+    app.post("/api/push/subscribe", async (request, response) => {
+        const body = request.body;
+        const endpoint = typeof body?.endpoint === "string" ? body.endpoint : "";
+        if (endpoint === "") {
+            response.status(400).json({ error: { code: "push.no_endpoint", message: "缺少 endpoint" } });
+            return;
+        }
+        const keys = body?.keys;
+        const result = await options.store.add({
+            endpoint,
+            ...(typeof keys?.p256dh === "string" && typeof keys.auth === "string"
+                ? { keys: { p256dh: keys.p256dh, auth: keys.auth } }
+                : {}),
+            ...(typeof body?.clientId === "string" ? { clientId: body.clientId } : {}),
+            ...(typeof body?.name === "string" &&
+                String(body.name).trim() !== ""
+                ? {
+                    name: String(body.name)
+                        .trim()
+                        .slice(0, 40),
+                }
+                : {}),
+            createdAt: Date.now(),
+        });
+        response.json(result);
+    });
+    app.post("/api/push/unsubscribe", async (request, response) => {
+        const body = request.body;
+        const endpoint = typeof body?.endpoint === "string" ? body.endpoint : "";
+        if (endpoint === "") {
+            response.status(400).json({ error: { code: "push.no_endpoint", message: "缺少 endpoint" } });
+            return;
+        }
+        response.json(await options.store.remove(endpoint));
+    });
+    /** 设备清单（不含 keys，端点只给 host + 尾段，界面上展示用） */
+    app.get("/api/push/subscriptions", async (_request, response) => {
+        const list = await options.store.list();
+        response.json({
+            total: list.length,
+            devices: list.map((item) => {
+                let host = "";
+                try {
+                    host = new URL(item.endpoint).host;
+                }
+                catch {
+                    host = "unknown";
+                }
+                return {
+                    endpoint: item.endpoint,
+                    host,
+                    // 老订阅没存名字：按推送服务商推一个像人话的默认名（用户可再改名）
+                    name: item.name ?? defaultName(host),
+                    createdAt: item.createdAt,
+                    lastSentAt: item.lastSentAt ?? null,
+                    lastStatus: item.lastStatus ?? null,
+                    clientId: item.clientId ?? null,
+                };
+            }),
+        });
+    });
+    app.post("/api/push/test", async (request, response) => {
+        const body = request.body;
+        const endpoints = Array.isArray(body?.endpoints)
+            ? body.endpoints.filter((item) => typeof item === "string")
+            : undefined;
+        const result = await options.store.send({
+            title: `${BRAND_NAME} 测试推送`,
+            body: "如果你看到这条，说明订阅与推送链路都通了。",
+            url: "/",
+            tag: "agent-web-test",
+        }, endpoints && endpoints.length > 0 ? endpoints : undefined);
+        response.json(result);
+    });
+    app.post("/api/push/rename", async (request, response) => {
+        const body = request.body;
+        const endpoint = typeof body?.endpoint === "string" ? body.endpoint : "";
+        const name = typeof body?.name === "string" ? body.name.trim().slice(0, 40) : "";
+        if (endpoint === "" || name === "") {
+            response.status(400).json({ error: { code: "push.bad_request", message: "缺少 endpoint 或 name" } });
+            return;
+        }
+        response.json(await options.store.rename(endpoint, name));
+    });
+    app.post("/api/push/delete", async (request, response) => {
+        const body = request.body;
+        const endpoint = typeof body?.endpoint === "string" ? body.endpoint : "";
+        if (endpoint === "") {
+            response.status(400).json({ error: { code: "push.bad_request", message: "缺少 endpoint" } });
+            return;
+        }
+        response.json(await options.store.removeOne(endpoint));
+    });
+    app.post("/api/push/clear", async (_request, response) => {
+        response.json(await options.store.clear());
+    });
+    app.get("/api/push/count", async (_request, response) => {
+        response.json({ total: await options.store.count() });
+    });
+}

package/dist/server/push/push.js

@@ -0,0 +1,120 @@
+/**
+ * Web Push（VAPID）：注册订阅 + 推送。
+ *
+ * 订阅存 `<dataDir>/push-subscriptions.json`（0600，只含 endpoint / keys，没有凭证）。
+ * VAPID 密钥默认内置（可用环境变量覆盖），私钥只在服务端。
+ */
+import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import webpush from "web-push";
+import { BRAND_NAME } from "../brand.js";
+export const VAPID_PUBLIC_KEY = process.env.VAPID_PUBLIC_KEY ??
+    "BPnvp8p4QdnOh4vO6-oAhxFGouHJTqY68C_4-goxBh1sphBEb1blz2FgqyEVg5JoFMBdSJKu2tDR-VLkdUNIHrQ";
+const VAPID_PRIVATE_KEY = process.env.VAPID_PRIVATE_KEY ?? "UArGsIjinVV7Lk0g3zOdkMctvWIoTzUT8jV2vayiOyQ";
+const VAPID_SUBJECT = process.env.VAPID_SUBJECT ?? "mailto:duzhenxun@126.com";
+export function createPushStore(options) {
+    const path = join(options.dataDir, "push-subscriptions.json");
+    webpush.setVapidDetails(VAPID_SUBJECT, VAPID_PUBLIC_KEY, VAPID_PRIVATE_KEY);
+    const read = async () => {
+        try {
+            const parsed = JSON.parse(await readFile(path, "utf8"));
+            return Array.isArray(parsed) ? parsed : [];
+        }
+        catch {
+            return [];
+        }
+    };
+    const write = async (list) => {
+        await mkdir(dirname(path), { recursive: true });
+        const temporary = `${path}.tmp-${process.pid}-${Date.now()}`;
+        await writeFile(temporary, `${JSON.stringify(list, null, 2)}\n`, { mode: 0o600 });
+        await rename(temporary, path);
+        await chmod(path, 0o600);
+    };
+    return {
+        list: read,
+        async add(subscription) {
+            const list = await read();
+            // endpoint 相同视为同一订阅：更新，但**保留用户改过的名字**
+            const previous = list.find((item) => item.endpoint === subscription.endpoint);
+            const merged = { ...subscription, ...(previous?.name ? { name: previous.name } : {}) };
+            const next = [...list.filter((item) => item.endpoint !== subscription.endpoint), merged];
+            await write(next);
+            return { ok: true, total: next.length };
+        },
+        async remove(endpoint) {
+            const next = (await read()).filter((item) => item.endpoint !== endpoint);
+            await write(next);
+            return { ok: true, total: next.length };
+        },
+        async count() {
+            return (await read()).length;
+        },
+        async rename(endpoint, name) {
+            const list = await read();
+            await write(list.map((item) => (item.endpoint === endpoint ? { ...item, name } : item)));
+            return { ok: true, total: (await read()).length };
+        },
+        async removeOne(endpoint) {
+            const next = (await read()).filter((item) => item.endpoint !== endpoint);
+            await write(next);
+            return { ok: true, total: next.length };
+        },
+        async clear() {
+            await write([]);
+            return { ok: true, total: 0 };
+        },
+        async send(payload, endpoints) {
+            const all = await read();
+            const list = endpoints ? all.filter((item) => endpoints.includes(item.endpoint)) : all;
+            let sent = 0;
+            let failed = 0;
+            const dead = [];
+            const status = new Map();
+            for (const subscription of list) {
+                try {
+                    await webpush.sendNotification({ endpoint: subscription.endpoint, keys: subscription.keys }, JSON.stringify(payload));
+                    sent += 1;
+                    status.set(subscription.endpoint, "成功");
+                }
+                catch (error) {
+                    failed += 1;
+                    const code = error.statusCode;
+                    // 404/410：订阅已失效，顺手清掉，避免每次白打
+                    if (code === 404 || code === 410)
+                        dead.push(subscription.endpoint);
+                    status.set(subscription.endpoint, `失败 ${code ?? ""}`.trim());
+                }
+            }
+            // 记下「上次推送」：界面要显示时间与结果
+            const stamped = all
+                .filter((item) => !dead.includes(item.endpoint))
+                .map((item) => status.has(item.endpoint)
+                ? { ...item, lastSentAt: options.now(), lastStatus: status.get(item.endpoint) }
+                : item);
+            if (stamped.length !== all.length || status.size > 0)
+                await write(stamped);
+            return { sent, failed };
+        },
+    };
+}
+/** 项目名 = 工作区路径的最后一段（拿不到就回落应用名，别把通知的抬头留空） */
+export function projectNameOf(workspace) {
+    const name = (workspace ?? "").split("/").filter(Boolean).pop();
+    return name && name !== "" ? name : BRAND_NAME;
+}
+/**
+ * 回合结束时的那条通知（index 里只留一行调用）。
+ *
+ * 排版按手机锁屏来定：**第一行（title）= 项目名，正文（body）= 会话名**。
+ * 锁屏只露两行，「哪个项目的哪个会话」一眼能认；「回合完成」这种套话不占位置
+ * （通知本身出现就代表完成了）。点开仍直达那条会话（url 带 ?session=）。
+ */
+export function notifyTurnFinished(store, info) {
+    void store.send({
+        title: projectNameOf(info.workspace),
+        body: info.title.trim() || "会话",
+        url: `/?session=${encodeURIComponent(info.conversationId)}`,
+        tag: `turn-${info.conversationId}`,
+    });
+}

package/dist/server/session/approval-bridge.js

@@ -0,0 +1,103 @@
+/**
+ * 审批桥（ADR-0006）：把「引擎里的危险操作」与「界面上的一次点击」连起来。
+ *
+ * 职责就三件，刻意从 runtime 里拆出来（否则 runtime 会越过 400 行护栏，ADR-0010）：
+ *   1. `handler`：引擎在危险操作前调它，返回 Promise 等用户决定；
+ *   2. `approve`：界面点完按钮调它，解析那个 Promise；
+ *   3. 规则：命中「总是允许这类」就直接放行（含跨重启的持久规则），并把新规则交给存储。
+ *
+ * 默认模式是 `allow`（ADR-0034：自己一个人用的工作台，默认不想被弹窗打断），
+ * 但下面这条底线不变：
+ *   - 没有 handler / 被取消 → **拒绝**（绝不因为"没接上"就放行）；
+ *   - 回合结束时若还悬着一个审批 → 按「拒绝」收尾，不留下一个永远等不到答复的 Promise。
+ */
+import { hasRule, withRule } from "../approval/rules.js";
+export function createApprovalBridge(options) {
+    let rules = [];
+    /** 本次运行内记住的（即使写盘失败也生效） */
+    const sessionRules = new Set();
+    /**
+     * 审批模式：只在内存里（不落盘），**默认 allow**（ADR-0034）。
+     * 切到 allow 时，**下一次**需要审批的操作起就直接放行；已经悬着的那个弹窗不会凭空消失
+     * （用户仍能选），避免"点了放行却看到一个闪现消失的弹窗"。
+     */
+    let approvalMode = "allow";
+    const pending = [];
+    const viewOf = (entry) => ({
+        requestId: entry.requestId,
+        toolName: entry.request.toolName,
+        argsSummary: entry.request.argsSummary,
+        riskNote: entry.request.riskNote,
+        scopeHint: entry.request.scopeHint,
+    });
+    const showHead = () => {
+        const head = pending[0];
+        options.onPending(head ? viewOf(head) : null);
+    };
+    const bridge = {
+        async handler(request) {
+            // 本会话全部放行：不问，直接 once（不记忆、不写盘，重启即恢复询问）
+            if (approvalMode === "allow")
+                return "once";
+            if (sessionRules.has(request.scopeKey) || hasRule(rules, request.scopeKey))
+                return "always";
+            const requestId = options.nextId("appr");
+            let settle = () => { };
+            const promise = new Promise((resolve) => {
+                settle = resolve;
+            });
+            pending.push({ requestId, request, scopeKey: request.scopeKey, scopeHint: request.scopeHint, settle });
+            // 已经有一条在显示时不抢镜：等队首处理完再顶上（否则界面上那条会突然被换掉）
+            if (pending.length === 1)
+                options.onPending(viewOf(pending[0]));
+            return promise;
+        },
+        approve(requestId, decision) {
+            const index = pending.findIndex((entry) => entry.requestId === requestId);
+            const current = index >= 0 ? pending.splice(index, 1)[0] : undefined;
+            if (!current) {
+                return { ok: false, error: { code: "approval.unknown_request", message: "没有待处理的审批请求" } };
+            }
+            if (decision === "always") {
+                sessionRules.add(current.scopeKey);
+                const nextRules = withRule(rules, {
+                    scopeKey: current.scopeKey,
+                    scopeHint: current.scopeHint,
+                    createdAt: options.now(),
+                });
+                rules = nextRules;
+                // 内存规则立即生效；写盘失败只影响下次启动 → 只警告，不阻塞回合
+                void options.rules.save(nextRules).catch((error) => {
+                    options.onNotice(`审批规则写盘失败：${error instanceof Error ? error.message : String(error)}`, "warn");
+                });
+                options.onNotice(`已记住：以后这类操作不再询问（${current.scopeHint}）`, "info");
+            }
+            current.settle(decision);
+            showHead(); // 队里还有下一条就顶上来，否则清空弹窗
+            return { ok: true };
+        },
+        async loadRules() {
+            rules = await options.rules.load();
+            return rules.length;
+        },
+        rulesCount() {
+            return rules.length;
+        },
+        setMode(next) {
+            approvalMode = next;
+        },
+        mode() {
+            return approvalMode;
+        },
+        cancelPending() {
+            if (pending.length === 0)
+                return;
+            const waiting = pending.splice(0);
+            options.onPending(null);
+            // 安全默认值：所有悬着的审批都按拒绝收尾（绝不默认放行）
+            for (const entry of waiting)
+                entry.settle("deny");
+        },
+    };
+    return bridge;
+}

package/dist/server/session/attachment-resolve.js

@@ -0,0 +1,21 @@
+export async function resolveAttachments(text, attachments, uploadStore) {
+    let promptText = text;
+    const images = [];
+    const missing = [];
+    for (const attachment of attachments ?? []) {
+        const found = uploadStore ? await uploadStore.read(attachment.id) : null;
+        if (!found) {
+            missing.push(attachment.name);
+            continue;
+        }
+        if (attachment.kind === "image" && found.mime.startsWith("image/")) {
+            images.push({ data: found.bytes.toString("base64"), mimeType: found.mime });
+            continue;
+        }
+        const path = uploadStore?.pathOf?.(attachment.id) ?? attachment.name;
+        promptText += `\n\n（附上文件，未注入内容：${path}）`;
+    }
+    if (promptText.trim() === "")
+        promptText = "（见附件）";
+    return { promptText, images, missing };
+}