pi-coding-master 0.2.7

package/core/individual.bio.organs/ears.listen/python_protogen/products/understanding/ast/ast_service_pb2_grpc.py

@@ -0,0 +1,97 @@
+# Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT!
+"""Client and server classes corresponding to protobuf-defined services."""
+import grpc
+import warnings
+
+from python_protogen.products.understanding.ast import ast_service_pb2 as products_dot_understanding_dot_ast_dot_ast__service__pb2
+
+GRPC_GENERATED_VERSION = '1.73.1'
+GRPC_VERSION = grpc.__version__
+_version_not_supported = False
+
+try:
+    from grpc._utilities import first_version_is_lower
+    _version_not_supported = first_version_is_lower(GRPC_VERSION, GRPC_GENERATED_VERSION)
+except ImportError:
+    _version_not_supported = True
+
+if _version_not_supported:
+    raise RuntimeError(
+        f'The grpc package installed is at version {GRPC_VERSION},'
+        + f' but the generated code in products/understanding/ast/ast_service_pb2_grpc.py depends on'
+        + f' grpcio>={GRPC_GENERATED_VERSION}.'
+        + f' Please upgrade your grpc module to grpcio>={GRPC_GENERATED_VERSION}'
+        + f' or downgrade your generated code using grpcio-tools<={GRPC_VERSION}.'
+    )
+
+
+class ASTServiceStub(object):
+    """Missing associated documentation comment in .proto file."""
+
+    def __init__(self, channel):
+        """Constructor.
+
+        Args:
+            channel: A grpc.Channel.
+        """
+        self.Translate = channel.stream_stream(
+                '/data.speech.ast.ASTService/Translate',
+                request_serializer=products_dot_understanding_dot_ast_dot_ast__service__pb2.TranslateRequest.SerializeToString,
+                response_deserializer=products_dot_understanding_dot_ast_dot_ast__service__pb2.TranslateResponse.FromString,
+                _registered_method=True)
+
+
+class ASTServiceServicer(object):
+    """Missing associated documentation comment in .proto file."""
+
+    def Translate(self, request_iterator, context):
+        """Missing associated documentation comment in .proto file."""
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+
+def add_ASTServiceServicer_to_server(servicer, server):
+    rpc_method_handlers = {
+            'Translate': grpc.stream_stream_rpc_method_handler(
+                    servicer.Translate,
+                    request_deserializer=products_dot_understanding_dot_ast_dot_ast__service__pb2.TranslateRequest.FromString,
+                    response_serializer=products_dot_understanding_dot_ast_dot_ast__service__pb2.TranslateResponse.SerializeToString,
+            ),
+    }
+    generic_handler = grpc.method_handlers_generic_handler(
+            'data.speech.ast.ASTService', rpc_method_handlers)
+    server.add_generic_rpc_handlers((generic_handler,))
+    server.add_registered_method_handlers('data.speech.ast.ASTService', rpc_method_handlers)
+
+
+ # This class is part of an EXPERIMENTAL API.
+class ASTService(object):
+    """Missing associated documentation comment in .proto file."""
+
+    @staticmethod
+    def Translate(request_iterator,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.stream_stream(
+            request_iterator,
+            target,
+            '/data.speech.ast.ASTService/Translate',
+            products_dot_understanding_dot_ast_dot_ast__service__pb2.TranslateRequest.SerializeToString,
+            products_dot_understanding_dot_ast_dot_ast__service__pb2.TranslateResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)

package/core/individual.bio.organs/ears.listen/python_protogen/products/understanding/base/au_base_pb2.py

@@ -0,0 +1,80 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: products/understanding/base/au_base.proto
+# Protobuf Python Version: 6.31.0
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    6,
+    31,
+    0,
+    '',
+    'products/understanding/base/au_base.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n)products/understanding/base/au_base.proto\x12\x19\x64\x61ta.speech.understanding\"y\n\x04Word\x12\x0c\n\x04text\x18\x01 \x01(\t\x12\x12\n\nstart_time\x18\x02 \x01(\x05\x12\x10\n\x08\x65nd_time\x18\x03 \x01(\x05\x12\x16\n\x0e\x62lank_duration\x18\x04 \x01(\x05\x12\x11\n\tpronounce\x18\x05 \x01(\t\x12\x12\n\nconfidence\x18\x06 \x01(\x01\"\x13\n\x11UtteranceAddition\"\x10\n\x0eResultAddition\"\xd8\x02\n\tUtterance\x12\x0c\n\x04text\x18\x01 \x01(\t\x12\x12\n\nstart_time\x18\x02 \x01(\x05\x12\x10\n\x08\x65nd_time\x18\x03 \x01(\x05\x12\x15\n\x08\x64\x65\x66inite\x18\x04 \x01(\x08H\x00\x88\x01\x01\x12.\n\x05words\x18\x05 \x03(\x0b\x32\x1f.data.speech.understanding.Word\x12\x10\n\x08language\x18\x06 \x01(\t\x12\x12\n\nconfidence\x18\x07 \x01(\x01\x12\x0f\n\x07speaker\x18\x08 \x01(\x05\x12\x12\n\nchannel_id\x18\t \x01(\x05\x12\x46\n\tadditions\x18\x64 \x03(\x0b\x32\x33.data.speech.understanding.Utterance.AdditionsEntry\x1a\x30\n\x0e\x41\x64\x64itionsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42\x0b\n\t_definite\"\x1e\n\x0eLanguageDetail\x12\x0c\n\x04prob\x18\x01 \x01(\x01\"\xd7\x04\n\x06Result\x12\x0c\n\x04text\x18\x01 \x01(\t\x12\x38\n\nutterances\x18\x02 \x03(\x0b\x32$.data.speech.understanding.Utterance\x12\x12\n\nconfidence\x18\x03 \x01(\x01\x12\x19\n\x11global_confidence\x18\x04 \x01(\x01\x12\x10\n\x08language\x18\x05 \x01(\t\x12P\n\x10language_details\x18\x06 \x03(\x0b\x32\x36.data.speech.understanding.Result.LanguageDetailsEntry\x12\x18\n\x0btermination\x18\x07 \x01(\x08H\x00\x88\x01\x01\x12\x0e\n\x06volume\x18\x08 \x01(\x01\x12\x13\n\x0bspeech_rate\x18\t \x01(\x01\x12\x13\n\x0bresult_type\x18\n \x01(\t\x12\x10\n\x08ori_text\x18\x0b \x01(\t\x12\x15\n\x08prefetch\x18\x0c \x01(\x08H\x01\x88\x01\x01\x12\x43\n\tadditions\x18\x64 \x03(\x0b\x32\x30.data.speech.understanding.Result.AdditionsEntry\x1a\x61\n\x14LanguageDetailsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x38\n\x05value\x18\x02 \x01(\x0b\x32).data.speech.understanding.LanguageDetail:\x02\x38\x01\x1a\x30\n\x0e\x41\x64\x64itionsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42\x0e\n\x0c_terminationB\x0b\n\t_prefetch\"2\n\tAudioInfo\x12\x10\n\x08\x64uration\x18\x01 \x01(\x03\x12\x13\n\x0bspeech_rate\x18\x02 \x01(\x01\"\x1d\n\x03\x41pp\x12\x16\n\x0ework_flow_name\x18\x01 \x01(\t\"\\\n\x04User\x12\x0b\n\x03uid\x18\x01 \x01(\t\x12\x0b\n\x03\x64id\x18\x02 \x01(\t\x12\x10\n\x08platform\x18\x03 \x01(\t\x12\x13\n\x0bsdk_version\x18\x04 \x01(\t\x12\x13\n\x0b\x61pp_version\x18\x05 \x01(\t\"\xff\x01\n\x05\x41udio\x12\x0c\n\x04\x64\x61ta\x18\x01 \x01(\t\x12\x0b\n\x03url\x18\x02 \x01(\t\x12\x10\n\x08url_type\x18\x03 \x01(\t\x12\x0e\n\x06\x66ormat\x18\x04 \x01(\t\x12\r\n\x05\x63odec\x18\x05 \x01(\t\x12\x10\n\x08language\x18\x06 \x01(\t\x12\x0c\n\x04rate\x18\x07 \x01(\x05\x12\x0c\n\x04\x62its\x18\x08 \x01(\x05\x12\x0f\n\x07\x63hannel\x18\t \x01(\x05\x12\x12\n\ntos_bucket\x18\n \x01(\t\x12\x16\n\x0etos_access_key\x18\x0b \x01(\t\x12\x18\n\x10\x61udio_tos_object\x18\x0c \x01(\t\x12\x10\n\x08role_trn\x18\r \x01(\t\x12\x13\n\x0b\x62inary_data\x18\x0e \x01(\x0c\"`\n\x0f\x41srNotification\x12<\n\x04\x63ode\x18\x01 \x01(\x0e\x32..data.speech.understanding.AsrNotificationCode\x12\x0f\n\x07message\x18\x02 \x01(\t\"\xd1\x0c\n\tReqParams\x12\x12\n\nmodel_name\x18\x01 \x01(\t\x12\x13\n\x0b\x63onfig_name\x18\x02 \x01(\t\x12\x17\n\nenable_vad\x18\x03 \x01(\x08H\x00\x88\x01\x01\x12\x18\n\x0b\x65nable_punc\x18\x04 \x01(\x08H\x01\x88\x01\x01\x12\x17\n\nenable_itn\x18\x05 \x01(\x08H\x02\x88\x01\x01\x12\x17\n\nenable_ddc\x18\x06 \x01(\x08H\x03\x88\x01\x01\x12\x1c\n\x0f\x65nable_resample\x18\x07 \x01(\x08H\x04\x88\x01\x01\x12\x17\n\nvad_signal\x18\x08 \x01(\x08H\x05\x88\x01\x01\x12\x1d\n\x10\x65nable_translate\x18\t \x01(\x08H\x06\x88\x01\x01\x12\x1d\n\x10\x64isable_end_punc\x18\n \x01(\x08H\x07\x88\x01\x01\x12 \n\x13\x65nable_speaker_info\x18\x0b \x01(\x08H\x08\x88\x01\x01\x12!\n\x14\x65nable_channel_split\x18\x0c \x01(\x08H\t\x88\x01\x01\x12\x10\n\x08\x61pp_lang\x18\r \x01(\t\x12\x0f\n\x07\x63ountry\x18\x0e \x01(\t\x12\x12\n\naudio_type\x18\x0f \x01(\t\x12\x17\n\nenable_lid\x18\x10 \x01(\x08H\n\x88\x01\x01\x12\x18\n\x10reco2act_num_spk\x18\x11 \x01(\x05\x12\x18\n\x10reco2max_num_spk\x18\x12 \x01(\x05\x12\x1d\n\x10\x65nable_interrupt\x18\x13 \x01(\x08H\x0b\x88\x01\x01\x12\x18\n\x0bvad_segment\x18\x14 \x01(\x08H\x0c\x88\x01\x01\x12\x1c\n\x0f\x65nable_ori_text\x18\x15 \x01(\x08H\r\x88\x01\x01\x12\x1d\n\x10\x65nable_nonstream\x18\x16 \x01(\x08H\x0e\x88\x01\x01\x12\x1c\n\x0fshow_utterances\x18\x1f \x01(\x08H\x0f\x88\x01\x01\x12\x17\n\nshow_words\x18  \x01(\x08H\x10\x88\x01\x01\x12\x1a\n\rshow_duration\x18! \x01(\x08H\x11\x88\x01\x01\x12\x1a\n\rshow_language\x18\" \x01(\x08H\x12\x88\x01\x01\x12\x18\n\x0bshow_volume\x18# \x01(\x08H\x13\x88\x01\x01\x12\x1b\n\rshow_volume_v\x18\xea\x02 \x01(\x08H\x14\x88\x01\x01\x12\x1d\n\x10show_speech_rate\x18% \x01(\x08H\x15\x88\x01\x01\x12\x1a\n\rshow_prefetch\x18& \x01(\x08H\x16\x88\x01\x01\x12\x13\n\x0bresult_type\x18\' \x01(\t\x12\x1a\n\x12start_silence_time\x18= \x01(\x05\x12\x18\n\x10\x65nd_silence_time\x18> \x01(\x05\x12\x18\n\x10vad_silence_time\x18? \x01(\x05\x12\x18\n\x10min_silence_time\x18@ \x01(\x05\x12\x10\n\x08vad_mode\x18\x41 \x01(\t\x12\x1c\n\x14vad_segment_duration\x18\x42 \x01(\x05\x12\x17\n\x0f\x65nd_window_size\x18\x43 \x01(\x05\x12\x1c\n\x14\x66orce_to_speech_time\x18\x44 \x01(\x05\x12\x31\n\x06\x63orpus\x18\x64 \x01(\x0b\x32!.data.speech.understanding.Corpus\x12@\n\x0cnotification\x18\x65 \x01(\x0b\x32*.data.speech.understanding.AsrNotification\x12\x1e\n\x16sensitive_words_filter\x18\x66 \x01(\tB\r\n\x0b_enable_vadB\x0e\n\x0c_enable_puncB\r\n\x0b_enable_itnB\r\n\x0b_enable_ddcB\x12\n\x10_enable_resampleB\r\n\x0b_vad_signalB\x13\n\x11_enable_translateB\x13\n\x11_disable_end_puncB\x16\n\x14_enable_speaker_infoB\x17\n\x15_enable_channel_splitB\r\n\x0b_enable_lidB\x13\n\x11_enable_interruptB\x0e\n\x0c_vad_segmentB\x12\n\x10_enable_ori_textB\x13\n\x11_enable_nonstreamB\x12\n\x10_show_utterancesB\r\n\x0b_show_wordsB\x10\n\x0e_show_durationB\x10\n\x0e_show_languageB\x0e\n\x0c_show_volumeB\x10\n\x0e_show_volume_vB\x13\n\x11_show_speech_rateB\x10\n\x0e_show_prefetch\"\xa2\x04\n\x06\x43orpus\x12\x0f\n\x07\x63ontext\x18\x01 \x01(\t\x12\x19\n\x11\x62oosting_table_id\x18\x02 \x01(\t\x12\x1b\n\x13\x62oosting_table_name\x18\x03 \x01(\t\x12\x13\n\x0b\x62oosting_id\x18\x04 \x01(\t\x12\x0f\n\x07nnlm_id\x18\x05 \x01(\t\x12\x18\n\x10\x63orrect_table_id\x18\x06 \x01(\t\x12\x1a\n\x12\x63orrect_table_name\x18\x07 \x01(\t\x12\x16\n\x0epunc_hot_words\x18\x08 \x01(\t\x12\x16\n\x0ehot_words_list\x18\t \x03(\t\x12J\n\rglossary_list\x18\n \x03(\x0b\x32\x33.data.speech.understanding.Corpus.GlossaryListEntry\x12!\n\x14show_match_hot_words\x18= \x01(\x08H\x00\x88\x01\x01\x12%\n\x18show_all_match_hot_words\x18> \x01(\x08H\x01\x88\x01\x01\x12%\n\x18show_effective_hot_words\x18? \x01(\x08H\x02\x88\x01\x01\x1a\x33\n\x11GlossaryListEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42\x17\n\x15_show_match_hot_wordsB\x1b\n\x19_show_all_match_hot_wordsB\x1b\n\x19_show_effective_hot_words*\x8b\x03\n\x04\x43ode\x12\x15\n\x11\x45RROR_UNSPECIFIED\x10\x00\x12\r\n\x07SUCCESS\x10\x88\xa4\x01\x12\x14\n\x0fINVALID_REQUEST\x10\xdcV\x12\x16\n\x11PERMISSION_DENIED\x10\xc0W\x12\x0e\n\tLIMIT_QPS\x10\xa5X\x12\x10\n\x0bLIMIT_COUNT\x10\xa6X\x12\x10\n\x0bSERVER_BUSY\x10\xa7X\x12\x11\n\x0bINTERRUPTED\x10\xb4\xa6\x01\x12\x11\n\x0c\x45RROR_PARAMS\x10\xecY\x12\x0f\n\nLONG_AUDIO\x10\xddV\x12\x11\n\x0cLARGE_PACKET\x10\xdeV\x12\x13\n\x0eINVALID_FORMAT\x10\xdfV\x12\x11\n\x0cSILENT_AUDIO\x10\xe0V\x12\x10\n\x0b\x45MPTY_AUDIO\x10\xe1V\x12\x19\n\x13\x41UDIO_DOWNLOAD_FAIL\x10\xc5\xa9\x01\x12\x15\n\x0fTIMEOUT_WAITING\x10\xd0\xa5\x01\x12\x18\n\x12TIMEOUT_PROCESSING\x10\xd1\xa5\x01\x12\x16\n\x10\x45RROR_PROCESSING\x10\xec\xa4\x01\x12\x13\n\rERROR_UNKNOWN\x10\xcc\xe9\x01*D\n\x13\x41srNotificationCode\x12\x1c\n\x18NOTIFICATION_UNSPECIFIED\x10\x00\x12\x0f\n\nDISCONNECT\x10\xe8\x07\x62\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'products.understanding.base.au_base_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  DESCRIPTOR._loaded_options = None
+  _globals['_UTTERANCE_ADDITIONSENTRY']._loaded_options = None
+  _globals['_UTTERANCE_ADDITIONSENTRY']._serialized_options = b'8\001'
+  _globals['_RESULT_LANGUAGEDETAILSENTRY']._loaded_options = None
+  _globals['_RESULT_LANGUAGEDETAILSENTRY']._serialized_options = b'8\001'
+  _globals['_RESULT_ADDITIONSENTRY']._loaded_options = None
+  _globals['_RESULT_ADDITIONSENTRY']._serialized_options = b'8\001'
+  _globals['_CORPUS_GLOSSARYLISTENTRY']._loaded_options = None
+  _globals['_CORPUS_GLOSSARYLISTENTRY']._serialized_options = b'8\001'
+  _globals['_CODE']._serialized_start=3918
+  _globals['_CODE']._serialized_end=4313
+  _globals['_ASRNOTIFICATIONCODE']._serialized_start=4315
+  _globals['_ASRNOTIFICATIONCODE']._serialized_end=4383
+  _globals['_WORD']._serialized_start=72
+  _globals['_WORD']._serialized_end=193
+  _globals['_UTTERANCEADDITION']._serialized_start=195
+  _globals['_UTTERANCEADDITION']._serialized_end=214
+  _globals['_RESULTADDITION']._serialized_start=216
+  _globals['_RESULTADDITION']._serialized_end=232
+  _globals['_UTTERANCE']._serialized_start=235
+  _globals['_UTTERANCE']._serialized_end=579
+  _globals['_UTTERANCE_ADDITIONSENTRY']._serialized_start=518
+  _globals['_UTTERANCE_ADDITIONSENTRY']._serialized_end=566
+  _globals['_LANGUAGEDETAIL']._serialized_start=581
+  _globals['_LANGUAGEDETAIL']._serialized_end=611
+  _globals['_RESULT']._serialized_start=614
+  _globals['_RESULT']._serialized_end=1213
+  _globals['_RESULT_LANGUAGEDETAILSENTRY']._serialized_start=1037
+  _globals['_RESULT_LANGUAGEDETAILSENTRY']._serialized_end=1134
+  _globals['_RESULT_ADDITIONSENTRY']._serialized_start=518
+  _globals['_RESULT_ADDITIONSENTRY']._serialized_end=566
+  _globals['_AUDIOINFO']._serialized_start=1215
+  _globals['_AUDIOINFO']._serialized_end=1265
+  _globals['_APP']._serialized_start=1267
+  _globals['_APP']._serialized_end=1296
+  _globals['_USER']._serialized_start=1298
+  _globals['_USER']._serialized_end=1390
+  _globals['_AUDIO']._serialized_start=1393
+  _globals['_AUDIO']._serialized_end=1648
+  _globals['_ASRNOTIFICATION']._serialized_start=1650
+  _globals['_ASRNOTIFICATION']._serialized_end=1746
+  _globals['_REQPARAMS']._serialized_start=1749
+  _globals['_REQPARAMS']._serialized_end=3366
+  _globals['_CORPUS']._serialized_start=3369
+  _globals['_CORPUS']._serialized_end=3915
+  _globals['_CORPUS_GLOSSARYLISTENTRY']._serialized_start=3781
+  _globals['_CORPUS_GLOSSARYLISTENTRY']._serialized_end=3832
+# @@protoc_insertion_point(module_scope)

package/core/individual.bio.organs/ears.listen/python_protogen/products/understanding/base/au_base_pb2_grpc.py

@@ -0,0 +1,24 @@
+# Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT!
+"""Client and server classes corresponding to protobuf-defined services."""
+import grpc
+import warnings
+
+
+GRPC_GENERATED_VERSION = '1.73.1'
+GRPC_VERSION = grpc.__version__
+_version_not_supported = False
+
+try:
+    from grpc._utilities import first_version_is_lower
+    _version_not_supported = first_version_is_lower(GRPC_VERSION, GRPC_GENERATED_VERSION)
+except ImportError:
+    _version_not_supported = True
+
+if _version_not_supported:
+    raise RuntimeError(
+        f'The grpc package installed is at version {GRPC_VERSION},'
+        + f' but the generated code in products/understanding/base/au_base_pb2_grpc.py depends on'
+        + f' grpcio>={GRPC_GENERATED_VERSION}.'
+        + f' Please upgrade your grpc module to grpcio>={GRPC_GENERATED_VERSION}'
+        + f' or downgrade your generated code using grpcio-tools<={GRPC_VERSION}.'
+    )

package/core/individual.bio.organs/hands.fileactions/authorize.TRUST

@@ -0,0 +1 @@
+{"workDir": "/Users/zhangkezhen/smart-pi/pi-alive.DEV", "trusted": []}

package/core/individual.bio.organs/hands.fileactions/authorize.ts

@@ -0,0 +1,70 @@
+import { access, readFile, writeFile, mkdir } from "node:fs/promises";
+import { resolve, dirname } from "node:path";
+
+const TRUST_FILE = resolve(dirname(new URL(import.meta.url).pathname), "authorize.TRUST");
+
+interface TrustEntry { path: string; until?: number }
+let trusted: TrustEntry[] = [];
+let workDir = "";
+
+export async function loadTrust() {
+  try {
+    const raw = await readFile(TRUST_FILE, "utf8");
+    const data = JSON.parse(raw);
+    trusted = data.trusted ?? [];
+    workDir = data.workDir ?? "";
+    // 清理过期
+    const now = Date.now();
+    trusted = trusted.filter(e => !e.until || e.until > now);
+  } catch {
+    trusted = [];
+    workDir = "";
+  }
+}
+
+async function saveTrust() {
+  await mkdir(dirname(new URL(import.meta.url).pathname), { recursive: true }).catch(() => {});
+  await writeFile(TRUST_FILE, JSON.stringify({ workDir, trusted }, null, 2), "utf8");
+}
+
+export function getWorkDir() { return workDir; }
+export function getTrusted() { return [...trusted]; }
+
+export async function setWorkDir(dir: string) {
+  workDir = resolve(dir);
+  await saveTrust();
+}
+
+export async function addTrust(dir: string, minutes?: number) {
+  const path = resolve(dir);
+  // 去重
+  trusted = trusted.filter(e => e.path !== path);
+  trusted.push({ path, until: minutes ? Date.now() + minutes * 60000 : undefined });
+  await saveTrust();
+}
+
+export async function removeTrust(dir: string) {
+  const path = resolve(dir);
+  trusted = trusted.filter(e => e.path !== path);
+  await saveTrust();
+}
+
+// 检查操作是否需要授权。返回 null=允许，返回 string=需要授权的理由
+export function checkAuth(targetPath: string): string | null {
+  if (!targetPath) return null;
+  const abs = resolve(targetPath);
+  
+  // 未设置 workDir：拒绝一切写入（安全默认）
+  if (!workDir) {
+    return `[SAFE DEFAULT] 工作目录未设置。拒绝写入 ${targetPath}。请先用 pi workdir set <目录> 设置工作区。`;
+  }
+  
+  // workDir 及其子目录，允许
+  if (abs === workDir || abs.startsWith(workDir + "/")) return null;
+
+  for (const t of trusted) {
+    if (abs === t.path || abs.startsWith(t.path + "/")) return null;
+  }
+  
+  return `目录 ${targetPath} 不在工作目录(${workDir})或信任目录中。用户需授权。`;
+}

package/core/individual.bio.organs/hands.fileactions/authorize.ts.CHANGELOG

@@ -0,0 +1 @@
+[2026-06-16 05:38] created

package/core/individual.bio.organs/hands.fileactions/authorize.ts.SPEC

@@ -0,0 +1,3 @@
+source: authorize.ts @ 33135d65
+
+文件操作授权子模块。管理 workDir、信任目录列表、限时授权(分钟)。写/改/bash操作前检查目标目录是否在授权范围内。

package/core/individual.bio.organs/hands.fileactions/dir.README

@@ -0,0 +1,13 @@
+# fileactions 目录规则
+
+## 禁止操作
+- rm / rm -rf: 永不允许。文件只能 mv 成 .REMOVED
+- 直接 write .CHANGELOG: 用 edit 追加
+
+## 新增规则
+- 加规则改 FILE_RULES.json，不改代码
+- 新 coded 块必须在 promotor.dna 引用
+
+## 目录内文件
+- fileactions.ts: 引擎，不改具体规则
+- FILE_RULES.json: 所有规则定义

package/core/individual.bio.organs/hands.fileactions/file_rules.json

@@ -0,0 +1,23 @@
+{
+  "version": 6,
+  "rules": [
+    {"id":"spec-required","on":"write","block":"新建文件必须先写 .SPEC"},
+    {"id":"changelog-append","on":"edit","path":"*.CHANGELOG","block":"CHANGELOG 只追加不删不覆盖"},
+    {"id":"changelog-write-block","on":"write","path":"*.CHANGELOG","block":"CHANGELOG 不能直接 write，用 edit 追加"},
+    {"id":"dir-readme-ls","on":"ls","block":"目录有 dir.README 先读它"},
+    {"id":"dir-readme-read","on":"read","block":"目录有 dir.README 先读它"},
+    {"id":"dir-readme-write","on":"write","block":"目录有 dir.README 先读它"},
+    {"id":"dir-unseen-write","on":"write","block":"没 ls 过的目录不能直接写文件"},
+    {"id":"nametrace-rename","on":"bash","pattern":"mv\\s+\\S+\\s+\\S+","block":"改名写 .NAMETRACE，搬家写 .LOCATIONTRACE"},
+    {"id":"coded-needs-ref","on":"edit","path":"individual.bio.gene/dna.coded/coded.dna","block":"新增 coded 块必须在 promotor.dna 引用"},
+    {"id":"bios-new-dir","on":"write","path":"individual.bio.organs/*","block":"individual.bio.organs 下新建前读 promotor.dna/coded.dna/FUNC_SPEC.md"},
+    {"id":"github-block","on":"bash","pattern":"gh\\s+repo\\s+(create|delete)|git\\s+push.*--force","block":"GitHub 敏感操作拦截"},
+    {"id":"companion-auto","on":"write","block":"非伴随文件自动生成 .CHANGELOG"},
+    {"id":"companion-move","on":"bash","pattern":"mv\\s+\\S+\\s+\\S+","block":"mv 后自动迁移伴随文件"},
+    {"id":"no-secrets","on":"write","block":"禁止写入明文密码、token、密钥"},
+    {"id":"no-rm","on":"bash","pattern":"\\brm\\b","block":"禁止 rm！UNREGULATED 内除外。文件只能 mv 成 .REMOVED"},
+    {"id":"unregulated-quarantine","on":"bash","block":"bash 建文件无 .SPEC → 自动移入 UNREGULATED/"},
+    {"id":"unregulated-no-mv-out","on":"bash","pattern":"mv.*UNREGULATED","block":"UNREGULATED 文件不能 mv 出去"},
+    {"id":"workdir-only","on":"write","block":"只能在工作目录或信任目录内写文件"}
+  ]
+}

package/core/individual.bio.organs/hands.fileactions/fileactions.README

@@ -0,0 +1,12 @@
+替代 wise-edit.ts。文件操作全流程追踪扩展。
+
+规则：
+- write 前必须有 .SPEC
+- edit 必须写 .CHANGELOG（只增不减）
+- write 完必须有 .README
+- bash mv 同目录（rename）必须有 .NAMETRACE
+- bash mv 跨目录（move）必须有 .LOCATIONTRACE
+- rename/move 后伴生文件自动跟着
+- 伴生文件自身（.SPEC/.CHANGELOG/.NAMETRACE/.LOCATIONTRACE）豁免所有规则
+
+详细设计见 Smart Claude/pi/WISE_FILE_SPEC.md