promptfigure 0.2.0

package/src/render.mjs

@@ -0,0 +1,247 @@
+// render.mjs — 调我们服务器出图（唯一外呼：promptfigure.top）
+//
+// 链路：POST /api/v1/generate（额度通道）→ 402 quota_exhausted → 自动改走
+// /api/v1/generate/balance（余额通道，官网已写明此规则）→ b64_json 存本地。
+// 🔴 polish:false —— 本地 AI 写的提示词直接出图，服务端不润色
+// 🔴 premium 代码级门禁 —— 未 approved 的图禁止出 premium（不靠提示词自觉）
+// 🔴 计费通道切换必须留痕（事件流 billing.fallback）
+import { loadConfig, maskKey } from "./config.mjs";
+import { readMeta, writeMeta, saveFigureFile, resolveDoc, readAnchors, readReview } from "./store.mjs";
+import { appendEvent } from "./events.mjs";
+import { resolveRef } from "./doc/para.mjs";
+import { isApproved } from "./review.mjs";
+import { setAnchor } from "./anchor.mjs";
+import { pngDims, ratioMismatch } from "./ratio.mjs";
+import { trimWhitespace, pngStats } from "./png-trim.mjs";
+
+const BASE = "https://promptfigure.top";
+const GEN_URL = `${BASE}/api/v1/generate`;
+const GEN_BALANCE_URL = `${BASE}/api/v1/generate/balance`;
+
+async function callGenerate(url, key, body) {
+  const resp = await fetch(url, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${key}`,
+      "Content-Type": "application/json",
+      // 🔴 不带 UA 会被边缘 WAF 当脚本质询（返回 HTML 200，JSON 解析就炸了）
+      "User-Agent": "promptfigure-local-plugin/0.1",
+      Accept: "application/json",
+    },
+    body: JSON.stringify(body),
+  });
+  let data = null;
+  let rawText = "";
+  try {
+    rawText = await resp.text();
+    data = JSON.parse(rawText);
+  } catch {
+    // 非 JSON（WAF 质询页 / 网关错误页）→ 给出可诊断的短摘要
+    return { status: resp.status, data: { error: "non_json_response", detail: rawText.slice(0, 160).replace(/<[^>]+>/g, " ").trim() } };
+  }
+  return { status: resp.status, ok: resp.ok, data };
+}
+
+export async function renderFigure({ docId, prompt, model = "standard", at, side = "after", ratio, force = false, forceReason = null, sidecar = null }) {
+  const cfg = loadConfig();
+  if (!cfg.key) {
+    throw new Error("还没有配置 pf_ API key。先运行 pf login（控制台创建 key 后：pf login pf_xxxxx）");
+  }
+  if (!prompt || !prompt.trim()) throw new Error("提示词不能为空（--prompt 或 --prompt-file）");
+  if (!at) throw new Error("必须显式声明锚点位置 --at \"§3.2 ¶2\" —— 插件不猜位置");
+  if (!["standard", "premium"].includes(model)) throw new Error(`未知档位 ${model}（standard | premium）`);
+
+  const dir = resolveDoc(docId);
+  docId = dir.split(/[\\/]/).pop();
+  const meta = readMeta(docId);
+  resolveRef(meta.blocks, at); // 校验位置存在
+
+  const anchors = readAnchors(docId);
+  let anchor = anchors.find((a) => a.placement.at === at && a.placement.side === side);
+  if (!anchor) {
+    // 🔴 自愈建锚（2026-09-21 实测）：render 只找不建时，新位置出图 = 无锚孤儿图，
+    // GUI 永远不显示、无高亮、无内联卡片 —— AI 照 help 走 craft→render 必踩。
+    const { anchor: created } = setAnchor(docId, { at, side });
+    anchor = created;
+    anchors.push(anchor);
+  }
+
+  // ---- 红线 1：standard 草稿数量上限 ----
+  const limits = cfg.limits || {};
+  const perDoc = limits.perDocStandard ?? 60;
+  const figCount = Object.keys(meta.figures || {}).length;
+  if (model === "standard" && figCount >= perDoc) {
+    throw new Error(`已达本文 standard 出图上限（${perDoc} 张，可用 pf config limits.perDocStandard 调整）。先整理图库再继续`);
+  }
+
+  // ---- 红线 2：premium 门禁（代码级，不靠提示词） ----
+  // --force 豁免（2026-09-21 定规）：多轮精修循环会死锁——修正轮要真实渲染视觉缺陷，
+  // 但缺陷只有 premium 渲得出（standard 渲文字必乱码），而门禁要求先审批通过、审批要求零缺陷。
+  // force = 显式声明"这轮是已授权的修正迭代"，事件留痕 figure.gate_bypass 可审计，默认仍锁死。
+  const figures = meta.figures || {};
+  const prevFig = anchor?.figure ? figures[anchor.figure] : null;
+  if (model === "premium" && !force) {
+    if (!prevFig) throw new Error(`premium 门禁拒绝：位置 ${at} 还没有 standard 草稿。下一步: pf craft … --out p.txt 然后 pf render --at "${at}" --model standard --prompt-file p.txt（修正迭代轮可用 --force "理由" 豁免，事件留痕）`);
+    if (!isApproved(docId, prevFig.figureId)) {
+      throw new Error(`premium 门禁拒绝：图 ${prevFig.figureId} 尚未审批通过。下一步: pf review ai ${prevFig.figureId}（AI 核验）→ pf review resolve ${prevFig.figureId} --approve；或在 GUI 审批队列点「通过」（修正迭代轮可用 --force "理由" 豁免，事件留痕）`);
+    }
+  }
+  if (model === "premium" && force && prevFig) {
+    appendEvent(docId, "figure.gate_bypass", {
+      figure: prevFig.figureId, version: (prevFig.versions?.length || 0) + 1,
+      reason: forceReason || "(无理由)",
+      reviewStatus: (readReview(docId)[prevFig.figureId] || {}).status || "unknown", at: new Date().toISOString(),
+    });
+  } else if (force && !(model === "premium" && prevFig)) {
+    // 非 premium 门的 force（如字节预算绕门）同样留痕——凡是绕门都要能在 pf audit 里查到
+    appendEvent(docId, "render.forced", { at, model, reason: forceReason || "(无理由)", ts: new Date().toISOString() });
+  }
+
+  // ---- 出图（402 自动换余额通道） ----
+  const body = { prompt: prompt.trim(), model, polish: false };
+  if (ratio) body.ratio = ratio;
+  let channel = "quota";
+  let resp = await callGenerate(GEN_URL, cfg.key, body);
+  if (resp.status === 402 && resp.data?.error === "quota_exhausted") {
+    channel = "balance";
+    appendEvent(docId, "billing.fallback", { from: "quota", to: "balance", model });
+    resp = await callGenerate(GEN_BALANCE_URL, cfg.key, body);
+  }
+  if (resp.status === 429) throw new Error(`触发 RPM 限流（${resp.data?.limit ?? "?"}/分钟），稍等一分钟再试`);
+  if (!resp.ok || !resp.data?.b64_json) {
+    let detail = resp.data?.detail || resp.data?.error || `HTTP ${resp.status}`;
+    const refunded = resp.data?.refunded ? "（已自动退款/还原额度）" : "";
+    // 弱模型实测（weak-agent-sim 2026-09-20）：invalid_api_key 时弱 AI 卡死在这，不知道下一步
+    if (/invalid[_ ]api[_ ]key/i.test(String(detail))) {
+      detail += " —— pf_ key 无效或已被覆盖。让用户执行 pf login <pf_key> 重新配置（控制台 promptfigure.top 可建 key）";
+    }
+    throw new Error(`出图失败：${detail}${refunded}`);
+  }
+
+  // ---- 落盘：同锚点追加版本，否则新图 ----
+  const now = new Date();
+  const stamp = now.toISOString().replace(/[-:T]/g, "").slice(0, 14);
+  let figureId;
+  if (prevFig) {
+    figureId = prevFig.figureId;
+  } else {
+    figureId = `fig_${stamp}_${Math.random().toString(36).slice(2, 6)}`;
+  }
+  const verNo = prevFig ? prevFig.versions.length + 1 : 1;
+  const file = `v${verNo}.png`;
+  let imgBuf = Buffer.from(resp.data.b64_json, "base64");
+  // ---- 画布比核验（2026-09-21 V10 事故补的闭环）：对**裁剪前**像素算 —— 白边裁剪是预期行为，
+  // 裁后比例对不上请求比不是事故（V14 后：2560x685 vs 16:9 是正常产出）----
+  const preTrimDims = pngDims(imgBuf);
+  const ratioIssue = body.ratio ? ratioMismatch(body.ratio, preTrimDims) : null;
+  // ---- 自动体检（2026-09-21 定规：核验数字由插件算，AI 只做语义判断）----
+  // 对**裁前**图统计：留白占比（模型原始行为，对账用）/ 边缘白度 / 彩色像素占比
+  const autoChecks = pngStats(imgBuf);
+  // ---- 白边自动裁剪（2026-09-21 V14 复盘：画布句"撑满高度"模型不听——上下空白 >50%）----
+  // 措辞路线到头了，留白改由确定性后处理保证：留白面积 >30% 就裁到内容包围盒+窄边距。
+  // 任何异常 png-trim 内部吞掉返回 null（保留原图，宁可多留白不可损坏图）。
+  const trimmed = trimWhitespace(imgBuf);
+  let trimInfo = null;
+  if (trimmed) {
+    imgBuf = trimmed.buf;
+    trimInfo = trimmed;
+  }
+  const rel = saveFigureFile(docId, figureId, file, imgBuf);
+  const dims = pngDims(imgBuf);
+
+  if (trimInfo) {
+    appendEvent(docId, "figure.trimmed", {
+      figure: figureId, version: verNo,
+      from: `${trimInfo.from.w}x${trimInfo.from.h}`,
+      to: `${trimInfo.to.w}x${trimInfo.to.h}`,
+      savedPct: trimInfo.savedPct, at: now.toISOString(),
+    });
+  }
+
+  const version = {
+    file: rel,
+    model,
+    status: model === "premium" ? "final" : "draft",
+    channel,
+    promptSha: Buffer.from(prompt).toString("base64").slice(0, 24),
+    prompt,
+    // 🔴 画布比留痕（V10 事故：之前 ratio 参数完全不落盘，出了压缩图无从对账）
+    ratio: body.ratio || null,
+    pixels: dims ? `${dims.w}x${dims.h}` : null,
+    // 白边裁剪留痕（V14 事故）：裁剪前的原始像素，便于对账
+    trimmedFrom: trimInfo ? `${trimInfo.from.w}x${trimInfo.from.h}` : null,
+    // 🔴 自动体检结果（2026-09-21）：裁前量化数字，AI 核验以此为底数，不许凭感觉
+    autoChecks,
+    // craft 伴随 JSON 路径（pf refine 重拼下一轮命令的依据）
+    sidecar: sidecar || null,
+    at: now.toISOString(),
+  };
+  meta.figures = meta.figures || {};
+  if (prevFig) {
+    prevFig.versions.push(version);
+    // 🔴 新版本 = 送审对象变了（2026-09-21 "别放水"定规）：
+    // ① 旧 QA 核验记录作废（审批门禁按最新版对账，不清会把旧版 PASS 错套在新版上）；
+    // ② 审批状态重置回 pending —— premium 定稿也要重新核验，不许"标准版过了定稿自动过"；
+    // ③ activeFixes 清空（2026-09-21 子智能体实测：全插件没人清它 → pf next 永久死锁在
+    //    refine，连真实渲染后也出不去）。新版本就是修复尝试的产物，缺陷是否真修好由
+    //    QA 重新核验裁决：pass 收工 / fail 会把缺陷重新写回状态机，闭环不丢。
+    delete prevFig.qa;
+    prevFig.activeFixes = [];
+  } else {
+    meta.figures[figureId] = { figureId, at, side, anchorId: anchor?.id || null, versions: [version] };
+    if (anchor) anchor.figure = figureId;
+  }
+  writeMeta(docId, meta);
+  // 新版本审批状态重置（pending）：写回要在 writeMeta 之后，setStatus 自己读写 review.json 不冲突
+  if (prevFig) {
+    const { setStatus } = await import("./review.mjs");
+    try {
+      const prevStatus = readReview(docId)[figureId]?.status;
+      if (prevStatus && prevStatus !== "pending") {
+        setStatus(docId, figureId, "pending", `v${verNo} 新版本落盘，旧核验作废，重新送审`, "system");
+      }
+    } catch { /* 审批状态重置失败不阻塞出图 */ }
+  }
+  if (anchor) {
+    const idx = anchors.findIndex((a) => a.id === anchor.id);
+    anchors[idx] = anchor;
+    // 写回 anchors.json
+    const { writeAnchors } = await import("./store.mjs");
+    writeAnchors(docId, anchors);
+  }
+
+  appendEvent(docId, "figure.created", {
+    figure: figureId, version: verNo, model, at, side, channel,
+    ratio: body.ratio || null, pixels: version.pixels,
+    quota: resp.data.quota, balance: resp.data.balance,
+  });
+  if (ratioIssue) {
+    appendEvent(docId, "figure.ratio_mismatch", {
+      figure: figureId, version: verNo, requested: body.ratio, ...ratioIssue,
+    });
+  }
+
+  const notes = [];
+  if (model === "standard") notes.push("草稿已入库，等用户在 GUI 审批；通过后才可出 premium 定稿");
+  else notes.push("定稿已生成，高亮会转为绿色");
+  if (ratioIssue) {
+    notes.push(`⚠️ 画布比不符：请求 ${body.ratio}，实测 ${version.pixels}（偏差 ${ratioIssue.dev}%）—— 宽幅内容可能被压缩/裁切，读图核验后决定是否重出`);
+  }
+
+  return {
+    figureId, version: verNo, file: rel, model, channel,
+    ratio: body.ratio || null, pixels: version.pixels, ratioIssue,
+    quota: resp.data.quota, balance: resp.data.balance,
+    keyMasked: maskKey(cfg.key),
+    note: notes.join("；"),
+  };
+}
+
+export function listFigures({ docId, at }) {
+  const dir = resolveDoc(docId);
+  docId = dir.split(/[\\/]/).pop();
+  const meta = readMeta(docId);
+  let figs = Object.values(meta.figures || {});
+  if (at) figs = figs.filter((f) => f.at === at);
+  return figs;
+}

package/src/review.mjs

@@ -0,0 +1,48 @@
+// review.mjs — 审批状态机：pending → approved | rejected
+// 两个入口写同一份状态：GUI（会话令牌）/ CLI（pf review resolve）
+// AI 每轮开工先 pf review status —— 写进 skill 的硬规矩
+import { readReview, writeReview, readMeta } from "./store.mjs";
+import { appendEvent, readEvents } from "./events.mjs";
+
+export function latestVersion(fig) {
+  return fig.versions[fig.versions.length - 1];
+}
+
+export function setStatus(docId, figureId, status, note, by) {
+  const meta = readMeta(docId);
+  if (!meta || !meta.figures?.[figureId]) throw new Error(`图 ${figureId} 不存在`);
+  if (!["approved", "rejected", "pending"].includes(status)) throw new Error(`非法状态 ${status}`);
+  const review = readReview(docId);
+  const prev = review[figureId];
+  review[figureId] = { status, note: note || "", by, at: new Date().toISOString(), prevStatus: prev?.status || null };
+  writeReview(docId, review);
+  appendEvent(docId, "review." + (status === "approved" ? "approved" : status === "rejected" ? "rejected" : "reset"), {
+    figure: figureId, status, note, by,
+  });
+  return review[figureId];
+}
+
+export function reviewStatus(docId) {
+  const meta = readMeta(docId);
+  if (!meta) throw new Error(`项目 ${docId} 不存在`);
+  const review = readReview(docId);
+  const figures = meta.figures || {};
+  const items = Object.entries(figures).map(([figureId, fig]) => ({
+    figureId,
+    at: fig.at,
+    side: fig.side,
+    versions: fig.versions,
+    review: review[figureId] || { status: "pending", note: "", by: null },
+  }));
+  return {
+    pending: items.filter((x) => x.review.status === "pending"),
+    approved: items.filter((x) => x.review.status === "approved"),
+    rejected: items.filter((x) => x.review.status === "rejected"),
+    history: readEvents(docId, 500).filter((e) => e.type.startsWith("review.")),
+  };
+}
+
+// premium 门禁：该图最近一版必须已 approved
+export function isApproved(docId, figureId) {
+  return readReview(docId)?.[figureId]?.status === "approved";
+}

package/src/server.mjs

@@ -0,0 +1,218 @@
+// server.mjs — 本地服务：唯一状态源
+// 🔴 只绑 127.0.0.1，绝不 0.0.0.0
+// 🔴 写操作双令牌：GUI 走会话令牌（开窗口时注入 URL），CLI 走 daemon.json 里的 cliToken
+// 🔴 唯一外呼是出图（render.mjs 里）；本服务自己不向任何外部地址发数据
+import http from "node:http";
+import fs from "node:fs";
+import path from "node:path";
+import crypto from "node:crypto";
+import url from "node:url";
+import { fileURLToPath } from "node:url";
+
+import { readDaemon, writeDaemon, clearDaemon, ensureDirs } from "./config.mjs";
+import { projectByDocId, readMeta, resolveDoc, readReview } from "./store.mjs";
+import { sseHandler, appendEvent, readEvents } from "./events.mjs";
+import { setAnchor, listAnchors } from "./anchor.mjs";
+import { renderFigure, listFigures } from "./render.mjs";
+import { reviewStatus, setStatus } from "./review.mjs";
+import { resolveRef } from "./doc/para.mjs";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const PKG_ROOT = path.resolve(__dirname, "..");
+const WEB_DIR = path.join(PKG_ROOT, "web");
+const VENDOR = {
+  "/vendor/jszip.min.js": "jszip/dist/jszip.min.js",
+  "/vendor/docx-preview.min.js": "docx-preview/dist/docx-preview.min.js",
+  "/vendor/pdf.min.js": "pdfjs-dist/legacy/build/pdf.min.js",
+  "/vendor/pdf.worker.min.js": "pdfjs-dist/legacy/build/pdf.worker.min.js",
+};
+
+const MIME = {
+  ".html": "text/html; charset=utf-8", ".js": "text/javascript", ".css": "text/css",
+  ".png": "image/png", ".json": "application/json", ".map": "application/json",
+  ".pdf": "application/pdf",
+};
+
+function json(res, code, data) {
+  res.writeHead(code, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store" });
+  res.end(JSON.stringify(data));
+}
+
+function sendFile(res, file) {
+  try {
+    const buf = fs.readFileSync(file);
+    res.writeHead(200, { "Content-Type": MIME[path.extname(file)] || "application/octet-stream", "Cache-Control": "no-store" });
+    res.end(buf);
+  } catch {
+    res.writeHead(404); res.end("not found");
+  }
+}
+
+export function startServer({ port, registerDaemon = true }) {
+  ensureDirs();
+  const guiToken = crypto.randomBytes(16).toString("hex");
+  const cliToken = crypto.randomBytes(16).toString("hex");
+
+  const server = http.createServer(async (req, res) => {
+    const u = new URL(req.url, "http://127.0.0.1");
+    const p = u.pathname;
+
+    try {
+      // ---- 静态 ----
+      if (p === "/" || p === "/index.html") return sendFile(res, path.join(WEB_DIR, "index.html"));
+      if (p === "/app.js") return sendFile(res, path.join(WEB_DIR, "app.js"));
+      if (p === "/style.css") return sendFile(res, path.join(WEB_DIR, "style.css"));
+      if (p === "/probe.html" && fs.existsSync(path.join(WEB_DIR, "probe.html"))) {
+        return sendFile(res, path.join(WEB_DIR, "probe.html"));
+      }
+      if (VENDOR[p]) {
+        const file = path.join(PKG_ROOT, "node_modules", VENDOR[p]);
+        return sendFile(res, file);
+      }
+
+      // ---- 图文件（figures/<figureId>/<v>.png）----
+      const figM = /^\/fig\/([\w-]+)\/([\w.-]+)$/.exec(p);
+      if (figM) {
+        const doc = u.searchParams.get("doc");
+        const dir = projectByDocId(doc);
+        return sendFile(res, path.join(dir, "figures", figM[1], figM[2]));
+      }
+
+      // ---- 原始文档（给浏览器渲染 docx/pdf 用；只读）----
+      // tex 文档：若编译成功，返回编译产物 PDF（GUI 渲染排版结果而非源码文本）
+      if (p === "/api/file") {
+        const doc = u.searchParams.get("doc");
+        const meta = readMeta(doc);
+        if (!meta) return json(res, 404, { error: "doc not found" });
+        if (meta.kind === "tex") {
+          const pdf = path.join(projectByDocId(doc), path.basename(meta.source).replace(/\.tex$/i, "") + ".pdf");
+          if (fs.existsSync(pdf)) return sendFile(res, pdf, "application/pdf");
+          return json(res, 404, { error: "pdf not compiled（pf doc compile 可重编译）" });
+        }
+        return sendFile(res, meta.source);
+      }
+
+      // ---- SSE ----
+      if (p === "/api/events") {
+        const doc = u.searchParams.get("doc");
+        return sseHandler(doc, req, res);
+      }
+
+      // ---- 全量状态 ----
+      if (p === "/api/state") {
+        const doc = u.searchParams.get("doc");
+        const meta = readMeta(doc);
+        if (!meta) return json(res, 404, { error: "doc not found" });
+        return json(res, 200, {
+          meta: {
+            docId: doc, fileName: meta.fileName, kind: meta.kind,
+            outline: meta.outline || [], blocks: meta.blocks || [],
+            pdfReady: !!meta.pdfReady, pdfEngine: meta.pdfEngine, pdfFailReason: meta.pdfFailReason,
+          },
+          anchors: listAnchors(doc),
+          figures: meta.figures || {},
+          review: readReview(doc),
+          events: readEvents(doc, 100),
+        });
+      }
+
+      // ---- GUI 审批（唯一写操作，需会话令牌）----
+      if (p === "/api/review" && req.method === "POST") {
+        const body = await readBody(req);
+        if (body.token !== guiToken) return json(res, 403, { error: "bad session token" });
+        const doc = u.searchParams.get("doc");
+        const r = setStatus(doc, body.figureId, body.status, body.note, "user");
+        return json(res, 200, { ok: true, review: r });
+      }
+
+      // ---- CLI 通道 ----
+      if (p === "/api/cli" && req.method === "POST") {
+        if (req.headers["x-pf-cli-token"] !== cliToken) return json(res, 403, { error: "bad cli token" });
+        const body = await readBody(req);
+        const doc = body.doc || u.searchParams.get("doc");
+        const out = await cliAction(doc, body.action, body.params || {});
+        return json(res, 200, { ok: true, result: out });
+      }
+
+      res.writeHead(404); res.end("not found");
+    } catch (err) {
+      json(res, 400, { error: String(err.message || err) });
+    }
+  });
+
+  return new Promise((resolve, reject) => {
+    server.on("error", (e) => {
+      if (e.code === "EADDRINUSE") reject(new Error(`端口 ${port} 已被占用`));
+      else reject(e);
+    });
+    server.listen(port, "127.0.0.1", () => {
+      // registerDaemon:false 供测试用 —— 测试 daemon 不写 daemon.json，
+      // 否则会把真实托盘守护的服务记录顶掉（2026-09-21 实测反复污染）
+      if (registerDaemon) {
+        writeDaemon({ port, guiToken, cliToken, pid: process.pid, startedAt: new Date().toISOString() });
+      }
+      resolve({ server, port, guiToken, cliToken });
+    });
+  });
+}
+
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    let raw = "";
+    req.on("data", (c) => (raw += c));
+    req.on("end", () => {
+      try { resolve(raw ? JSON.parse(raw) : {}); } catch (e) { reject(new Error("bad json body")); }
+    });
+  });
+}
+
+async function cliAction(doc, action, params) {
+  switch (action) {
+    case "anchor.set": {
+      const r = setAnchor(doc, params);
+      appendEvent(doc, "anchor.set", { at: params.at, side: params.side, reused: r.reused, quoteOk: r.quoteOk });
+      // 🔴 2026-09-21 红队实测：只返回 r.anchor 会丢 reused/quoteOk——CLI 的复用标记与
+      // 编造引文警告全部哑火（锚点 state 落了 changed 但用户/AI 看不到任何警告）。
+      return { ...r.anchor, reused: r.reused, quoteOk: r.quoteOk };
+    }
+    case "anchor.list":
+      return listAnchors(doc, { changedOnly: !!params.changed });
+    case "render":
+      return renderFigure({ docId: doc, ...params });
+    case "render.list":
+      return listFigures({ docId: doc, at: params.at });
+    case "review.status":
+      return reviewStatus(doc);
+    case "review.resolve": {
+      const status = params.approve ? "approved" : "rejected";
+      return setStatus(doc, params.figureId, status, params.note, "ai");
+    }
+    case "doc.read": {
+      const meta = readMeta(doc);
+      const target = resolveRef(meta.blocks, params.at);
+      return target;
+    }
+    case "doc.context": {
+      // 上下文蒸馏原料：整节段落文本（实体/结构/图种三清单由 AI 自己产出 —— skill 教）
+      const meta = readMeta(doc);
+      const { parseRef } = await import("./doc/para.mjs");
+      const { secPath } = parseRef(params.at);
+      const paras = meta.blocks.filter((b) => b.type === "para" && b.secPath === secPath).map((b) => b.text);
+      // 🔴 红队实测（2026-09-23 fuzz）：§99 等不存在章节静默返回 0 字 = AI 拿空上下文去编素材
+      if (!paras.length) throw new Error(`章节 §${secPath} 不存在或没有正文段落（--at: ${params.at}）——用 pf doc outline 看有效章节，或 pf doc search 定位关键词`);
+      return { section: secPath, paragraphs: paras, chars: paras.join("").length };
+    }
+    default:
+      throw new Error(`未知 action: ${action}`);
+  }
+}
+
+// 独立进程入口：pf serve-daemon
+if (process.argv[1] && process.argv[1].endsWith("server.mjs")) {
+  const { loadConfig } = await import("./config.mjs");
+  const cfg = loadConfig();
+  const port = Number(process.argv[2]) || cfg.port || (await import("./config.mjs")).DEFAULT_PORT;
+  startServer({ port })
+    .then(({ port }) => console.log(`[pf] daemon on 127.0.0.1:${port}`))
+    .catch((e) => { console.error("[pf] daemon 启动失败:", e.message); process.exit(1); });
+}

package/src/store.mjs

@@ -0,0 +1,91 @@
+// store.mjs — 项目磁盘布局：~/.promptfigure/projects/<docId>/
+// meta.json(文档+图) / anchors.json / review.json / events.jsonl / figures/
+// 🔴 插件唯一允许写文件的地方就是 ~/.promptfigure/ —— 永不触碰用户文件
+import fs from "node:fs";
+import path from "node:path";
+import { PROJECTS_DIR, docIdOf, ensureDirs } from "./config.mjs";
+
+export function projectDir(docId) {
+  // 弱模型实测修复（weak-agent-sim 2026-09-20）：projectDir 与 projectByDocId 必须同一套
+  // null 回退逻辑 —— writeAnchors/appendEvent 走 projectDir，之前 null 时照样炸 "path null"
+  const dir = projectByDocId(docId);
+  fs.mkdirSync(path.join(dir, "figures"), { recursive: true });
+  return dir;
+}
+
+export function projectByDocId(docId) {
+  // 弱模型实测（scripts/weak-agent-sim.mjs 2026-09-20）修复：
+  // 之前 path.join(PROJECTS_DIR, null) 直接 TypeError "path null"——
+  // 所有不带 --doc 的调用（review status / review.resolve / doc.read / events）全部炸出不可读错误。
+  // 现在 null/undefined 回退最近打开的项目，没有项目时报人话。
+  if (!docId) {
+    const latest = latestProject();
+    if (!latest) throw new Error("还没有任何项目，先 pf open <论文路径> 打开文档");
+    return latest;
+  }
+  return path.join(PROJECTS_DIR, docId);
+}
+
+export function latestProject() {
+  ensureDirs();
+  // 🔴 显式 lastDocId 优先（pf open 时写入 config）：mtime 排序会被 e2e 测试等
+  // 新建项目污染——测试一跑，宿主 AI 不带 --doc 的命令就全落到测试文档上（2026-09-21 实测）
+  try {
+    const cfg = JSON.parse(fs.readFileSync(path.join(path.dirname(PROJECTS_DIR), "config.json"), "utf8"));
+    if (cfg.lastDocId) {
+      const dir = path.join(PROJECTS_DIR, cfg.lastDocId);
+      if (fs.existsSync(path.join(dir, "meta.json"))) return dir;
+    }
+  } catch {}
+  const dirs = fs.readdirSync(PROJECTS_DIR)
+    .map((d) => path.join(PROJECTS_DIR, d))
+    .filter((d) => fs.existsSync(path.join(d, "meta.json")))
+    .sort((a, b) => fs.statSync(path.join(b, "meta.json")).mtimeMs - fs.statSync(path.join(a, "meta.json")).mtimeMs);
+  return dirs[0] || null;
+}
+
+// 解析 --doc 参数：缺省时取最近打开的项目
+export function resolveDoc(docId) {
+  if (docId) {
+    // 弱模型实测（weak-agent-sim 2026-09-20）：AI 常把文件路径当 docId 传 --doc，给可行动的报错
+    if (/[\\/]/.test(docId) || /\.(tex|docx|pdf|doc|wps|md)$/i.test(docId)) {
+      throw new Error(`--doc 要传 docId（如 1b0d6cddb9a8），不是文件路径。先执行 pf open "${docId}" 打开文档，用返回的 docId`);
+    }
+    const dir = projectByDocId(docId);
+    if (!fs.existsSync(path.join(dir, "meta.json"))) {
+      throw new Error(`找不到项目 ${docId}（先 pf open 打开文档）`);
+    }
+    return dir;
+  }
+  const dir = latestProject();
+  if (!dir) throw new Error("还没有任何项目，先 pf open <path> 打开文档");
+  return dir;
+}
+
+function readJson(file, fallback) {
+  try {
+    return JSON.parse(fs.readFileSync(file, "utf8"));
+  } catch {
+    return fallback;
+  }
+}
+
+function writeJson(file, data) {
+  const tmp = file + ".tmp";
+  fs.writeFileSync(tmp, JSON.stringify(data, null, 2));
+  fs.renameSync(tmp, file); // 原子替换，防写坏
+}
+
+export const readMeta = (docId) => readJson(path.join(projectByDocId(docId), "meta.json"), null);
+export const writeMeta = (docId, meta) => writeJson(path.join(projectDir(docId), "meta.json"), meta);
+export const readAnchors = (docId) => readJson(path.join(projectByDocId(docId), "anchors.json"), []);
+export const writeAnchors = (docId, arr) => writeJson(path.join(projectDir(docId), "anchors.json"), arr);
+export const readReview = (docId) => readJson(path.join(projectByDocId(docId), "review.json"), {});
+export const writeReview = (docId, obj) => writeJson(path.join(projectDir(docId), "review.json"), obj);
+
+export function saveFigureFile(docId, figureId, fileName, buf) {
+  const dir = path.join(projectDir(docId), "figures", figureId);
+  fs.mkdirSync(dir, { recursive: true });
+  fs.writeFileSync(path.join(dir, fileName), buf);
+  return `figures/${figureId}/${fileName}`;
+}

package/src/vectorize.mjs

@@ -0,0 +1,54 @@
+// vectorize.mjs — 🔴 SVG 矢量导出（2026-09-22 用户拍板：导出矢量必须做，方案用用户早期点名的
+// GitHub 高星项目 visioncortex/vtracer——本机 vectorize-probe 已跑过全量对比，结论见
+// skill pf-vectorize-eval：16 色量化 + polygon/cutout + optimize 是体积×保真甜点）。
+//
+// 设计约束：
+//   - 可选增强：vtracer 是 optional 依赖（没装不崩，给出跨平台安装指路）——用户环境千奇百怪，
+//     核心链路不能被一个增强依赖卡死
+//   - 转出来的是**描摹路径**：文字全部变路径，不可编辑不可搜索——输出必须带这条红线说明
+//     （skill 红线："否则是投诉源"）
+//   - 不依赖 sharp：出图管线产物本来就是 PNG，vtracer 1.0 自带 PNG 解码
+//     （probe 里转 webp 才需要 sharp 预解码）
+//
+// 两档质量（probe 实测，1280×720 AI 生成图基线）：
+//   draft: polygon/cutout，29-31KB，PSNR 22.1-22.7dB，明显偏色 5.5-6.1%（交付甜点）
+//   high : spline，~185KB，PSNR 22.8dB（渐变/细线更多时用；大 6 倍换 0.6dB，默认不给）
+
+const BASE_CFG = {
+  clustering: "color-cluster",
+  hierarchical: "cutout",
+  filterSpeckle: 8,
+  maxColors: 16,      // vtracer 内置自动量化，不用外接 image-q
+  optimize: 2,        // 量化+简化+shorthand+分组，平均再省 ~47.5%
+  pathPrecision: 3,
+};
+
+const QUALITY_CFG = {
+  draft: { ...BASE_CFG, mode: "polygon", layerDifference: 24 },
+  high: { ...BASE_CFG, mode: "spline", layerDifference: 16 },
+};
+
+// 返回 { svg, paths } 或 { error: "not-installed" }。不 throw：调用方决定怎么报。
+export async function pngToSvg(pngBuf, { quality = "draft" } = {}) {
+  let vt;
+  try {
+    vt = await import("@visioncortex/vtracer");
+  } catch {
+    return { error: "not-installed" };
+  }
+  const cfg = QUALITY_CFG[quality] || QUALITY_CFG.draft;
+  // convertBuffer 是同步的（probe 实测）；退化输入（1x1 之类）会让 WASM 崩出 undefined ——
+  // 渗透实测后包一层，把崩溃转成可读错误而不是半截异常
+  try {
+    const svg = vt.convertBuffer(Buffer.from(pngBuf), cfg);
+    const s = String(svg);
+    return { svg: s, paths: (s.match(/<path/g) || []).length, bytes: Buffer.byteLength(s, "utf8") };
+  } catch (e) {
+    return { error: "convert-failed", detail: String(e?.message || e || "unknown") };
+  }
+}
+
+// 安装指路：在插件所在目录跑（全局装了也行，import 走 node 解析链）
+export const INSTALL_HINT =
+  'npm i @visioncortex/vtracer@1.0.0-alpha.4（在本插件目录或你的项目目录执行；' +
+  '纯 WASM 无原生编译，MIT/Apache-2.0 双许可可商用）';