@bolloon/bolloon-agent 0.2.9 → 0.2.11

package/dist/web/components/p2p/p2p-tools.js

@@ -1,248 +0,0 @@
-/**
- * P2P 工具调用模块
- * 支持文件和本地信息的 P2P 传递
- */
-// 工具类型枚举
-export var P2PToolType;
-(function (P2PToolType) {
-    P2PToolType["FILE_TRANSFER"] = "file_transfer";
-    P2PToolType["LOCAL_INFO"] = "local_info";
-    P2PToolType["SYSTEM_INFO"] = "system_info";
-    P2PToolType["FILE_LIST"] = "file_list";
-})(P2PToolType || (P2PToolType = {}));
-// 文件传输
-export async function transferFile(targetDid, fileInfo, messageId) {
-    try {
-        const payload = {
-            type: 'file',
-            tool: P2PToolType.FILE_TRANSFER,
-            data: {
-                name: fileInfo.name,
-                size: fileInfo.size,
-                mimeType: fileInfo.mimeType,
-                content: fileInfo.content
-            }
-        };
-        const res = await fetch('/api/message-p2p', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                targetDid,
-                content: JSON.stringify(payload),
-                type: 'file'
-            })
-        });
-        if (res.ok) {
-            const data = await res.json();
-            return {
-                success: true,
-                messageId: data.messageId || messageId
-            };
-        }
-        else {
-            return { success: false, error: '文件传输失败' };
-        }
-    }
-    catch (e) {
-        return { success: false, error: e.message };
-    }
-}
-// 本地信息查询
-export async function queryLocalInfo(targetDid, query) {
-    try {
-        const payload = {
-            type: 'info_query',
-            tool: P2PToolType.LOCAL_INFO,
-            query: query
-        };
-        const res = await fetch('/api/message-p2p', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                targetDid,
-                content: JSON.stringify(payload),
-                type: 'ai-dialogue'
-            })
-        });
-        if (res.ok) {
-            const data = await res.json();
-            return {
-                success: true,
-                data: data.response,
-                messageId: data.messageId
-            };
-        }
-        else {
-            return { success: false, error: '信息查询失败' };
-        }
-    }
-    catch (e) {
-        return { success: false, error: e.message };
-    }
-}
-// 系统信息请求
-export async function getSystemInfo(targetDid) {
-    try {
-        const payload = {
-            type: 'system_info_request',
-            tool: P2PToolType.SYSTEM_INFO
-        };
-        const res = await fetch('/api/message-p2p', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                targetDid,
-                content: JSON.stringify(payload),
-                type: 'ai-dialogue'
-            })
-        });
-        if (res.ok) {
-            const data = await res.json();
-            return {
-                success: true,
-                data: data.response,
-                messageId: data.messageId
-            };
-        }
-        else {
-            return { success: false, error: '系统信息获取失败' };
-        }
-    }
-    catch (e) {
-        return { success: false, error: e.message };
-    }
-}
-// 文件列表请求
-export async function listFiles(targetDid, path = '/') {
-    try {
-        const payload = {
-            type: 'file_list_request',
-            tool: P2PToolType.FILE_LIST,
-            path: path
-        };
-        const res = await fetch('/api/message-p2p', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                targetDid,
-                content: JSON.stringify(payload),
-                type: 'ai-dialogue'
-            })
-        });
-        if (res.ok) {
-            const data = await res.json();
-            return {
-                success: true,
-                data: data.response,
-                messageId: data.messageId
-            };
-        }
-        else {
-            return { success: false, error: '文件列表获取失败' };
-        }
-    }
-    catch (e) {
-        return { success: false, error: e.message };
-    }
-}
-// 工具调用入口
-export async function executeP2PTool(request) {
-    const { toolName, payload, targetDid } = request;
-    if (!targetDid) {
-        return { success: false, error: '未指定目标节点' };
-    }
-    switch (toolName) {
-        case P2PToolType.FILE_TRANSFER:
-            return transferFile(targetDid, payload.data);
-        case P2PToolType.LOCAL_INFO:
-            return queryLocalInfo(targetDid, payload.data);
-        case P2PToolType.SYSTEM_INFO:
-            return getSystemInfo(targetDid);
-        case P2PToolType.FILE_LIST:
-            return listFiles(targetDid, payload.data?.path || '/');
-        default:
-            return { success: false, error: `未知工具: ${toolName}` };
-    }
-}
-// 本地系统信息获取 (用于响应来自远程的请求)
-export function getLocalSystemInfo() {
-    const memUsage = process.memoryUsage();
-    const cpuCores = require('os').cpus();
-    return {
-        platform: process.platform,
-        arch: process.arch,
-        nodeVersion: process.version,
-        memory: {
-            total: memUsage.heapTotal,
-            free: memUsage.heapTotal - memUsage.heapUsed,
-            used: memUsage.heapUsed
-        },
-        cpu: {
-            cores: cpuCores.length,
-            model: cpuCores[0]?.model || 'Unknown'
-        },
-        uptime: process.uptime()
-    };
-}
-// 本地文件列表 (用于响应来自远程的请求)
-export function getLocalFileList(dirPath) {
-    try {
-        // Dynamic import for ESM compatibility
-        const pathModule = require('path');
-        const fs = require('fs');
-        const fullPath = pathModule.resolve(dirPath);
-        const files = fs.readdirSync(fullPath);
-        const fileList = files.map((name) => {
-            const fullFilePath = pathModule.join(fullPath, name);
-            let stat;
-            try {
-                stat = fs.statSync(fullFilePath);
-            }
-            catch {
-                return null;
-            }
-            return {
-                name: name,
-                size: stat.size,
-                isDirectory: stat.isDirectory(),
-                modified: stat.mtime.toISOString()
-            };
-        }).filter(Boolean);
-        return {
-            success: true,
-            path: fullPath,
-            files: fileList
-        };
-    }
-    catch (e) {
-        return {
-            success: false,
-            path: dirPath,
-            error: e.message
-        };
-    }
-}
-// 导出工具名称列表
-export const P2P_TOOLS = [
-    {
-        name: P2PToolType.FILE_TRANSFER,
-        description: '传输文件到远程节点',
-        parameters: ['targetDid', 'fileInfo']
-    },
-    {
-        name: P2PToolType.LOCAL_INFO,
-        description: '查询远程节点本地信息',
-        parameters: ['targetDid', 'query']
-    },
-    {
-        name: P2PToolType.SYSTEM_INFO,
-        description: '获取远程节点系统信息',
-        parameters: ['targetDid']
-    },
-    {
-        name: P2PToolType.FILE_LIST,
-        description: '列出远程节点目录文件',
-        parameters: ['targetDid', 'path']
-    }
-];
-console.log('[P2P Tools] 工具模块已加载');

package/dist/web/input-validator.js

@@ -1,103 +0,0 @@
-/**
- * input-validator — web 接口输入验证 (v0.2.5)
- *
- * 2026-07-01: 抽到独立模块, claude code / 前端都能 import 验证.
- *   - 后端用: POST /api/validate-input 调 validate()
- *   - 前端用: 实时 UI 反馈 (发送前预校验, 不阻塞)
- *
- * 验证规则 (bolloon web 当前业务):
- *   - text 非空 (trim 后)
- *   - text 长度 <= MAX_TEXT_LENGTH
- *   - text 不包含 NUL / 不可打印控制字符
- *   - channelId 非空
- *   - channelName (新建频道) 长度 <= MAX_NAME_LENGTH
- *   - 不含 SQL/XSS payload 触发 (sanitize-only: 不是阻止, 是 warn)
- *
- * 设计: 纯函数 + 返回结构化 ValidationResult.
- *   { ok: true, reason?, severity? }
- *   严重等级: 'info' | 'warn' | 'block'
- */
-export const MAX_TEXT_LENGTH = 16_000; // 大约 4K tokens, 单条 user 消息够用
-export const MAX_NAME_LENGTH = 200; // channel name 上限
-export const MAX_AGENT_ID_LENGTH = 200;
-/** 校验单条 /message 请求 (text + channelId) */
-export function validateMessageInput(input) {
-    // 1. channelId
-    if (typeof input.channelId !== 'string' || input.channelId.trim() === '') {
-        return { ok: false, severity: 'block', reason: 'channelId 必填' };
-    }
-    if (input.channelId.length > 256) {
-        return { ok: false, severity: 'block', reason: `channelId 长度超过 256 字符 (${input.channelId.length})` };
-    }
-    // 2. text
-    if (typeof input.text !== 'string') {
-        return { ok: false, severity: 'block', reason: 'text 必填且必须是字符串' };
-    }
-    const trimmed = input.text.trim();
-    if (trimmed === '') {
-        return { ok: false, severity: 'block', reason: 'text 不能为空 (trim 后)' };
-    }
-    if (trimmed.length > MAX_TEXT_LENGTH) {
-        return {
-            ok: false,
-            severity: 'block',
-            reason: `text 长度 ${trimmed.length} 超过最大 ${MAX_TEXT_LENGTH} 字符`,
-        };
-    }
-    // 3. 控制字符检测 — 拒绝 NUL + 不可打印 char (< 0x20 除了 \n \r \t)
-    // eslint-disable-next-line no-control-regex
-    const controlCharRe = /[\x00-\x08\x0B-\x0C\x0E-\x1F]/g;
-    const controlMatches = trimmed.match(controlCharRe);
-    if (controlMatches && controlMatches.length > 0) {
-        return {
-            ok: false,
-            severity: 'block',
-            reason: `text 含 ${controlMatches.length} 个不可打印控制字符`,
-        };
-    }
-    // 4. 通用安全 check — 大段 HTML/JS 注入 (sanitize 是另一层, 这里只 warn)
-    const htmlRe = /<\/?[a-z][\s\S]*>/i;
-    if (htmlRe.test(trimmed) && trimmed.length > 500) {
-        return {
-            ok: true,
-            severity: 'warn',
-            reason: 'text 包含 HTML 标签 (>500 字符), 确认发送前预览',
-            cleaned: trimmed,
-        };
-    }
-    return { ok: true, severity: 'info', cleaned: trimmed };
-}
-/** 校验 channel 创建输入 */
-export function validateChannelInput(input) {
-    if (typeof input.name !== 'string' || input.name.trim() === '') {
-        return { ok: false, severity: 'block', reason: 'name 必填' };
-    }
-    const trimmedName = input.name.trim();
-    if (trimmedName.length > MAX_NAME_LENGTH) {
-        return {
-            ok: false,
-            severity: 'block',
-            reason: `name 长度 ${trimmedName.length} 超过最大 ${MAX_NAME_LENGTH}`,
-        };
-    }
-    if (typeof input.agentId === 'string' && input.agentId.length > MAX_AGENT_ID_LENGTH) {
-        return {
-            ok: false,
-            severity: 'block',
-            reason: `agentId 长度 ${input.agentId.length} 超过最大 ${MAX_AGENT_ID_LENGTH}`,
-        };
-    }
-    return { ok: true, severity: 'info', cleaned: trimmedName };
-}
-const BOOT_TIME = Date.now();
-export function healthCheck(version) {
-    return {
-        ok: true,
-        version,
-        uptime_sec: Math.floor((Date.now() - BOOT_TIME) / 1000),
-        validators_loaded: [
-            'validateMessageInput',
-            'validateChannelInput',
-        ],
-    };
-}

package/dist/web/util/safe-name.js

@@ -1,32 +0,0 @@
-/**
- * 通用名兜底. fallback 默认 '(未命名)'. 中文场景.
- */
-export function safeChannelName(input, fallback) {
-    return safeNameInternal(input, fallback ?? '(未命名)', ['undefined', 'null', 'NaN']);
-}
-/**
- * 英文场景兜底, 默认 'Unknown'.
- */
-export function safePeerName(input, fallback) {
-    return safeNameInternal(input, fallback ?? 'Unknown', ['undefined', 'null', 'NaN']);
-}
-/**
- * 兜底任意字段, 由 caller 指定默认 + 无效字面量集合.
- */
-export function safeName(input, fallback, invalidLiterals = ['undefined', 'null', 'NaN']) {
-    return safeNameInternal(input, fallback, invalidLiterals);
-}
-function safeNameInternal(input, fallback, invalidLiterals) {
-    if (input === undefined || input === null)
-        return fallback;
-    if (typeof input === 'number' && Number.isNaN(input))
-        return fallback;
-    const s = String(input).trim();
-    if (!s)
-        return fallback;
-    for (const lit of invalidLiterals) {
-        if (s === lit)
-            return fallback;
-    }
-    return s;
-}