@bolloon/bolloon-agent 0.3.21 → 0.3.23

package/dist/utils/auto-update.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * npm 自动更新检查器
  *
@@ -13,11 +14,48 @@
  *   开发态下若 cwd 的 package.json 就是本包则回退到 cwd，不受任意工作目录影响。
  * - 检查频率受节流缓存约束（默认 24h 一次），不会每次启动都打 npm。
  */
-import { execSync } from 'child_process';
-import * as fs from 'fs';
-import * as path from 'path';
-import * as https from 'https';
-import * as http from 'http';
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkAndUpdate = checkAndUpdate;
+exports.checkForUpdates = checkForUpdates;
+exports.performUpdate = performUpdate;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const https = __importStar(require("https"));
+const http = __importStar(require("http"));
 // ANSI 颜色
 const RESET = '\x1b[0m';
 const BOLD = '\x1b[1m';
@@ -75,7 +113,7 @@ function getGlobalBolloonDir() {
     const candidates = [];
     // 1. npm root -g（最可靠）
     try {
-        const npmRoot = execSync('npm root -g', { encoding: 'utf-8', timeout: 8000 }).trim();
+        const npmRoot = (0, child_process_1.execSync)('npm root -g', { encoding: 'utf-8', timeout: 8000 }).trim();
         if (npmRoot)
             candidates.push(path.join(npmRoot, '@bolloon', 'bolloon-agent'));
     }
@@ -84,7 +122,7 @@ function getGlobalBolloonDir() {
     }
     // 2. npm prefix -g
     try {
-        const npmPrefix = execSync('npm prefix -g', { encoding: 'utf-8', timeout: 8000 }).trim();
+        const npmPrefix = (0, child_process_1.execSync)('npm prefix -g', { encoding: 'utf-8', timeout: 8000 }).trim();
         if (npmPrefix)
             candidates.push(path.join(npmPrefix, 'lib', 'node_modules', '@bolloon', 'bolloon-agent'));
     }
@@ -242,7 +280,7 @@ async function checkBolloonUpdates() {
  */
 function checkNpmOutdated() {
     try {
-        const output = execSync('npm outdated --json', {
+        const output = (0, child_process_1.execSync)('npm outdated --json', {
             encoding: 'utf-8',
             timeout: 30000,
             maxBuffer: 10 * 1024 * 1024,
@@ -306,7 +344,7 @@ async function updatePackagesWithVersion(packagesWithVersion) {
     const args = ['npm', 'install', '-g', ...packagesWithVersion];
     notify(`\n${CYAN}📦 正在更新包...${RESET}\n`, RESET);
     try {
-        execSync(args.join(' '), {
+        (0, child_process_1.execSync)(args.join(' '), {
             encoding: 'utf-8',
             timeout: 300000,
             stdio: 'inherit',
@@ -424,7 +462,7 @@ function resolveAutoUpdatePolicy() {
  *                       例如 Electron 用 app.relaunch()，Node 用 detached 重新 spawn）。
  *                       若未提供或 autoRestart=false，则仅提示用户手动重启。
  */
-export async function checkAndUpdate(opts = {}) {
+async function checkAndUpdate(opts = {}) {
     const policy = resolveAutoUpdatePolicy();
     if (policy.blocked) {
         return { hasUpdate: false, info: null, updated: false, message: '跳过更新检查（已显式禁用）' };
@@ -528,13 +566,13 @@ export async function checkAndUpdate(opts = {}) {
 /**
  * 仅检查更新，不自动安装
  */
-export async function checkForUpdates() {
+async function checkForUpdates() {
     return await checkBolloonUpdates();
 }
 /**
  * 手动触发更新
  */
-export async function performUpdate(packages) {
+async function performUpdate(packages) {
     return await updatePackages(packages);
 }
 // CLI 入口
@@ -557,3 +595,4 @@ if (process.argv[1]?.includes('auto-update')) {
         }
     })();
 }
+//# sourceMappingURL=auto-update.js.map

package/dist/web/client.js

@@ -318,7 +318,7 @@
   var init_step_timeline = __esm({
     "src/web/ui/step-timeline.ts"() {
       "use strict";
-      MAX_VISIBLE_NODES = 8;
+      MAX_VISIBLE_NODES = 20;
       STORAGE_PREFIX = "bolloon.stepTimeline.expanded.";
       stateMap = /* @__PURE__ */ new WeakMap();
     }

package/dist/web/server.js

@@ -9,11 +9,11 @@ import * as os from 'os';
 import * as crypto from 'crypto';
 import { validateMessageInput, validateChannelInput, healthCheck, } from './input-validator.js';
 import { segmentChatReply } from '../agents/chat-segmenter.js';
-import { listTools } from '../llm/tool-manifest/index.js';
 import { registerJudgmentsRoutes } from './routes-judgments.js';
 import { registerLlmConfigRoutes } from './routes-llm-config.js';
 import { registerExternalEngineRoutes } from './routes-external-engines.js';
 import { registerTaskRoutes } from './routes-tasks.js';
+import { loadPeerTier, recordInteraction, tierLabel } from '../social/dunbar-tier.js';
 import { registerHearthRoutes } from './routes-hearth.js';
 import { loadOrCreateAgentIdentity } from '../agents/agent-identity.js';
 // 2026-07-06: 类型抽到 ./server-types.ts (channel / session / task / sse client / iroh info / paths)
@@ -465,7 +465,19 @@ async function handleV3P2PMessage(parsed, conn, comm) {
             return;
         }
         const senderKey = fromPublicKey || peerKey;
-        console.log(`[v3] 收到 ${senderKey.substring(0, 12)}... 对 channel ${channelId} 的 chat: "${text.substring(0, 40)}..."`);
+        // 2026-07-29: Dunbar Tier 检查 — 远端 agent 不能触发禁区工具
+        const tierState = await loadPeerTier(senderKey);
+        if (tierState.tier === 'blocked') {
+            const reply = JSON.stringify({
+                v: 3, op: 'agent.chat.reply',
+                payload: { channelId, fromPublicKey: v3P2PRef?.getPublicKey() || '', error: 'blocked', text: '❌ 您已被本地系统加入通信黑名单。如需解除请联系系统管理员。' }
+            });
+            await comm.sendToConnection(conn.id, reply);
+            return;
+        }
+        // 2026-07-29: 语义分析 — 分析远端聊天内容, 隐式滑动 trustScore
+        recordInteraction(senderKey, text).catch(() => { });
+        console.log(`[v3] 收到 ${senderKey.substring(0, 12)}... (${tierLabel(tierState.tier)}) 对 channel ${channelId} 的 chat: "${text.substring(0, 40)}..."`);
         try {
             // 1. 找到 channel
             const channels = await loadChannels();
@@ -1486,6 +1498,8 @@ export async function createWebServer(port = 3000, options = {}) {
                         // 2026-07-21: 社交心跳 beacon — 远端智能体宣告存活/能力, 更新本地 liveness
                         if (parsed.op === 'agent.heartbeat') {
                             agentHeartbeat?.handleIncoming('agent.heartbeat', parsed.payload, evt.fromPublicKey);
+                            // 2026-07-29: 收到心跳也记录交互 (Dunbar 自动归类)
+                            recordInteraction(evt.fromPublicKey).catch(() => { });
                             return;
                         }
                         // v3 新增: B 端收到 A 的 thinking (开始 + 流式 token)
@@ -2218,7 +2232,7 @@ ${goalDesc}
         res.json(healthCheck(getPackageVersion()));
     });
     app.get('/api/tools', (_req, res) => {
-        res.json(listTools().map(t => t.id));
+        res.json([]); // tool-manifest 已废弃, 工具列表由 pi-sdk.ts this.tools 维护
     });
     // 2026-07-28: 用户 DID 身份端点 — 静默生成/加载, 持久化到 ~/.bolloon/identity/user.json
     let userIdentityCache = null;

package/dist/web/style.css

@@ -4793,8 +4793,8 @@ body:has(> .api-config-page) {
   border-top: 1px solid transparent;
 }
 .step-timeline:not([data-empty]) .step-timeline-body {
-  /* 内容存在时给 body 一个合理上限, 避免长任务撑爆 */
-  max-height: 320px;
+  /* 内容存在时给 body 一个合理上限, 避免长任务撑爆 — 2026-07-29: 从 320px 增大到 520px */
+  max-height: 520px;
   overflow-y: auto;
   border-top-color: var(--border);
 }

package/dist/web/ui/step-timeline.js

@@ -1,4 +1,4 @@
-const MAX_VISIBLE_NODES = 8;
+const MAX_VISIBLE_NODES = 20;
 const STORAGE_PREFIX = "bolloon.stepTimeline.expanded.";
 const stateMap = /* @__PURE__ */ new WeakMap();
 function readExpanded(channelId) {

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@bolloon/bolloon-agent",
-  "version": "0.3.21",
+  "version": "0.3.23",
   "type": "module",
   "description": "P2P AI Document Agent - 全局安装后执行 `bolloon` 启动产品",
   "main": "dist/cli-entry.js",
-  "author": "Bolloon Leo",
+  "author": "yuanjie liu",
   "repository": {
     "type": "git",
     "url": "https://github.com/logos-42/bolloon.git"
@@ -48,14 +48,14 @@
     "src/constraint-runtime"
   ],
   "dependencies": {
-    "@bolloon/bolloon-agent": "^0.3.16",
+    "@bolloon/bolloon-agent": "^0.3.22",
     "@bolloon/constraint-runtime": "0.1.0",
     "@capacitor/core": "^8.4.1",
-    "@capacitor/ios": "^8.4.1",
+    "@capacitor/ios": "^8.4.2",
     "@chainsafe/libp2p-noise": "^17.0.0",
     "@chainsafe/libp2p-yamux": "^8.0.1",
-    "@diap/sdk": "^0.2.0",
-    "@libp2p/autonat": "^3.0.20",
+    "@diap/sdk": "^0.2.1",
+    "@libp2p/autonat": "^3.0.25",
     "@libp2p/circuit-relay-v2": "^4.2.9",
     "@libp2p/dcutr": "^3.0.20",
     "@libp2p/identify": "^4.1.6",
@@ -65,24 +65,24 @@
     "@multiformats/multiaddr": "^13.0.3",
     "@noble/hashes": "^1.3.0",
     "@rayhanadev/iroh": "^0.1.1",
-    "@x402/aptos": "^2.19.0",
-    "@x402/avm": "^2.19.0",
-    "@x402/axios": "^2.19.0",
-    "@x402/core": "^2.19.0",
-    "@x402/evm": "^2.19.0",
-    "@x402/express": "^2.19.0",
-    "@x402/extensions": "^2.19.0",
-    "@x402/fastify": "^2.19.0",
-    "@x402/fetch": "^2.19.0",
-    "@x402/hedera": "^2.19.0",
-    "@x402/hono": "^2.19.0",
-    "@x402/keeta": "^2.19.0",
-    "@x402/mcp": "^2.19.0",
-    "@x402/next": "^2.19.0",
-    "@x402/paywall": "^2.19.0",
-    "@x402/stellar": "^2.19.0",
-    "@x402/svm": "^2.19.0",
-    "@x402/tvm": "^2.19.0",
+    "@x402/aptos": "^2.20.0",
+    "@x402/avm": "^2.20.0",
+    "@x402/axios": "^2.20.0",
+    "@x402/core": "^2.20.0",
+    "@x402/evm": "^2.20.0",
+    "@x402/express": "^2.20.0",
+    "@x402/extensions": "^2.20.0",
+    "@x402/fastify": "^2.20.0",
+    "@x402/fetch": "^2.20.0",
+    "@x402/hedera": "^2.20.0",
+    "@x402/hono": "^2.20.0",
+    "@x402/keeta": "^2.20.0",
+    "@x402/mcp": "^2.20.0",
+    "@x402/next": "^2.20.0",
+    "@x402/paywall": "^2.20.0",
+    "@x402/stellar": "^2.20.0",
+    "@x402/svm": "^2.20.0",
+    "@x402/tvm": "^2.20.0",
     "b4a": "^1.8.1",
     "dotenv": "^17.4.2",
     "esbuild": "^0.24.0",