Keep malformed provider objects out of chat bubbles

The AI response normalizer handled valid fenced JSON but still displayed malformed object-shaped provider output such as {content:"..."}. Treat malformed brace-prefixed machine output as invalid while preserving human bracket-prefixed chat text.

Constraint: Chat bubbles render generated content directly after server normalization.

Rejected: Try to recover text from malformed object syntax | that risks inventing parser behavior for invalid machine output; safe fallback is preferable.

Confidence: high

Scope-risk: narrow

Directive: Provider output that looks like a machine container must normalize to plain text or be rejected before generated=true.

Tested: python3 -m py_compile scripts/check_repository.py; python3 scripts/check_repository.py; npm run verify; npm audit --omit=dev; git diff --check

Not-tested: Live DeepSeek malformed object output frequency.

Author: worldwonderer

lib/ai/deepseek.js

@@ -132,7 +132,7 @@ function unwrapJsonContent(content) {
       }
     }
   } catch {
-    return content;
+    return content.startsWith("{") ? "" : content;
   }
 
   return "";

scripts/check_repository.py

@@ -188,6 +188,8 @@
     raise SystemExit('AI response normalization must unwrap JSON-shaped provider replies before display')
 if 'Bracket-prefixed chat text should not be rejected as JSON' not in ai_verify_source or 'content.startsWith("[")' not in deepseek_source:
     raise SystemExit('AI response normalization must distinguish bracket-prefixed chat text from parseable JSON arrays')
+if 'Malformed object-shaped AI replies should be rejected instead of displayed' not in ai_verify_source or 'content.startsWith("{") ? "" : content' not in deepseek_source:
+    raise SystemExit('AI response normalization must reject malformed object-shaped provider replies')
 if "process.env.DEEPSEEK_MODEL = '   '" not in ai_verify_source or 'whitespace-only DEEPSEEK_MODEL must fall back' not in ai_verify_source:
     raise SystemExit('AI integration verifier must assert whitespace-only DEEPSEEK_MODEL falls back to the default')
 if "thinkingType !== 'disabled'" not in ai_verify_source:

scripts/verify_ai_integration.mjs

@@ -202,6 +202,14 @@ if (jsonArrayResponse.status !== 502 || jsonArrayData.error !== 'empty_ai_conten
   throw new Error(`Parseable JSON arrays should be rejected instead of displayed: ${JSON.stringify({ status: jsonArrayResponse.status, jsonArrayData })}`);
 }
 
+nextMockContent = '{content:"别想太多啦。"}';
+const malformedObjectResponse = await POST(buildRequest(validPayload));
+const malformedObjectData = await malformedObjectResponse.json();
+
+if (malformedObjectResponse.status !== 502 || malformedObjectData.error !== 'empty_ai_content') {
+  throw new Error(`Malformed object-shaped AI replies should be rejected instead of displayed: ${JSON.stringify({ status: malformedObjectResponse.status, malformedObjectData })}`);
+}
+
 nextMockContent = '{"debug":true}';
 const invalidJsonShapedResponse = await POST(buildRequest(validPayload));
 const invalidJsonShapedData = await invalidJsonShapedResponse.json();
@@ -371,6 +379,7 @@ console.log(JSON.stringify({
   oversized_error: oversizedData.error,
   json_shaped_content: jsonShapedData.content,
   bracket_prefixed_content: bracketPrefixedData.content,
+  malformed_object_error: malformedObjectData.error,
   overlong_error: overlongData.error,
   max_tokens: captured.maxTokens,
   inherited_time_label: clientAiPayload.scene.timeLabel,