@bolloon/bolloon-agent 0.3.36 → 0.3.38

package/dist/electron-preload.js

@@ -1,32 +1,29 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
 /**
  * Electron Preload 脚本
  * 在渲染进程和主进程之间建立安全的通信桥梁
  * contextIsolation: true, nodeIntegration: false — 只能通过这里暴露的 API 触达主进程
  */
-const electron_1 = require("electron");
-electron_1.contextBridge.exposeInMainWorld('electronAPI', {
+import { contextBridge, ipcRenderer } from 'electron';
+contextBridge.exposeInMainWorld('electronAPI', {
     // === 原有 (保留) ===
-    getVersion: () => electron_1.ipcRenderer.invoke('get-version'),
-    getUserDataPath: () => electron_1.ipcRenderer.invoke('get-user-data-path'),
-    openExternal: (url) => electron_1.ipcRenderer.invoke('open-external', url),
+    getVersion: () => ipcRenderer.invoke('get-version'),
+    getUserDataPath: () => ipcRenderer.invoke('get-user-data-path'),
+    openExternal: (url) => ipcRenderer.invoke('open-external', url),
     // === 新增: 数据目录 ===
-    getDataPath: () => electron_1.ipcRenderer.invoke('get-data-path'),
+    getDataPath: () => ipcRenderer.invoke('get-data-path'),
     // === 新增: 文件 dialog ===
-    openFile: (opts) => electron_1.ipcRenderer.invoke('dialog:open-file', opts),
-    saveFile: (opts) => electron_1.ipcRenderer.invoke('dialog:save-file', opts),
-    openDirectory: (opts) => electron_1.ipcRenderer.invoke('dialog:open-directory', opts),
+    openFile: (opts) => ipcRenderer.invoke('dialog:open-file', opts),
+    saveFile: (opts) => ipcRenderer.invoke('dialog:save-file', opts),
+    openDirectory: (opts) => ipcRenderer.invoke('dialog:open-directory', opts),
     // === 新增: 文件系统 (限大小, 主进程守卫) ===
-    readTextFile: (opts) => electron_1.ipcRenderer.invoke('fs:read-text-file', opts),
-    writeTextFile: (opts) => electron_1.ipcRenderer.invoke('fs:write-text-file', opts),
-    pathExists: (opts) => electron_1.ipcRenderer.invoke('fs:path-exists', opts),
+    readTextFile: (opts) => ipcRenderer.invoke('fs:read-text-file', opts),
+    writeTextFile: (opts) => ipcRenderer.invoke('fs:write-text-file', opts),
+    pathExists: (opts) => ipcRenderer.invoke('fs:path-exists', opts),
     // === 新增: 首启引导 ===
-    getFirstRunSeen: () => electron_1.ipcRenderer.invoke('first-run:seen'),
-    markFirstRunSeen: () => electron_1.ipcRenderer.invoke('first-run:mark-seen'),
-    getDataPathSync: () => electron_1.ipcRenderer.invoke('first-run:data-dir'),
-    getLogsPathSync: () => electron_1.ipcRenderer.invoke('first-run:logs-dir'),
+    getFirstRunSeen: () => ipcRenderer.invoke('first-run:seen'),
+    markFirstRunSeen: () => ipcRenderer.invoke('first-run:mark-seen'),
+    getDataPathSync: () => ipcRenderer.invoke('first-run:data-dir'),
+    getLogsPathSync: () => ipcRenderer.invoke('first-run:logs-dir'),
     // === 元数据 ===
     platform: process.platform,
 });
-//# sourceMappingURL=electron-preload.js.map

package/dist/electron.js

@@ -1,8 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
 /**
  * Electron 入口 shim — 真正逻辑在 src/electron/main.ts
  * (保留 src/electron.ts 平铺入口, 不动 package.json 的 dist/electron.js 解析)
  */
-require("./electron/main");
-//# sourceMappingURL=electron.js.map
+import './electron/main';

package/dist/index.js

@@ -15,7 +15,7 @@ import { createSubAgentManager } from './agents/subagent-manager.js';
 import { getGlobalSharedContext } from './social/global-shared-context.js';
 import { createBollharnessIntegration } from './bollharness-integration/index.js';
 import * as readline from 'readline';
-import { printBanner, renderDialog, renderUserMessage, renderAgentMessage, renderToolCallListItem, termWidth } from './cli/loading-tui.js';
+import { printBanner, renderDialog, renderUserMessage, renderAgentMessage, renderMessageBox, renderToolCallListItem, termWidth } from './cli/loading-tui.js';
 import { startInk, stopInk, inkAppendLine as appendLine, inkSetStatus, inkSetThinking } from './cli/ink-app.js';
 // 启动自动检查更新：后台、节流、检测到新版本自动安装（可被 --no-update / BOLLOON_SKIP_UPDATE 关闭）
 import { createRequire } from 'module';
@@ -230,6 +230,13 @@ async function bootstrapP2P(verifier) {
 // ---------------------------------------------------------------------------
 // iroh/Hybrid P2P 初始化
 // ---------------------------------------------------------------------------
+/** 启动路径网络操作超时门: 超时 reject (由调用方 catch 降级) — 防止弱网下 CLI 卡死在启动 (2026-08-07) */
+function withTimeout(p, ms, label) {
+    return Promise.race([
+        p,
+        new Promise((_, reject) => setTimeout(() => reject(new Error(`${label} 超时 (${ms}ms)`)), ms)),
+    ]);
+}
 async function bootstrapIroh(keypair, name) {
     s.step(4, 5, '启动 iroh P2P', 'loading');
     try {
@@ -371,10 +378,14 @@ function fmtDuration(ms) {
     return `${h}h ${m % 60}m`;
 }
 /** 2026-08-06: 从 ContextManager 读上下文用量 (CLI 状态栏数据源, 失败退化 0/1M) */
+// 2026-08-07: 不能用 require 加载 ESM 模块 (ERR_REQUIRE_ESM) → startCLI 里 await import 一次缓存引用,
+//   同步函数 getCliCtxUsage/getStatus 复用 — 之前裸 require 与 _require 都抛错被 catch → 状态栏恒 0/1M
+let _ctxManagerRef = null;
 function getCliCtxUsage() {
     try {
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const cm = require('./bootstrap/context-manager.js').getContextManager();
+        const cm = _ctxManagerRef?.getContextManager();
+        if (!cm)
+            return { pct: 0, usedTokens: 0, maxTokens: 1_000_000, stage: 'normal' };
         const u = cm.getUsage();
         return {
             // 保留浮点 (0-100), 由 buildContextBar 格式化 — round 会让 <0.5% 全变 0, 状态栏像死代码
@@ -438,7 +449,8 @@ async function startCLI(comm) {
         peerCount = comm.getConnections().length;
     }
     catch { /* */ }
-    // 读取 LLM 模型名
+    // 读取 LLM 模型名 — 优先 bolloon-config.json (activeProvider), 再退 env (2026-08-07:
+    //   之前只读 env → 用户配了配置文件但状态栏显示"未配置")
     const providerNames = [
         ['OPENAI_API_KEY', 'OpenAI'],
         ['ANTHROPIC_API_KEY', 'Anthropic'],
@@ -449,8 +461,23 @@ async function startCLI(comm) {
         ['XAI_API_KEY', 'xAI'],
         ['TOGETHER_API_KEY', 'Together'],
     ];
-    const foundProvider = providerNames.find(([k]) => process.env[k]);
+    let foundProvider = providerNames.find(([k]) => process.env[k]);
     cliModelName = foundProvider ? foundProvider[1] : '未配置';
+    // bolloon-config.json activeProvider 优先 (用户真实配置来源)
+    try {
+        const { llmConfigStore } = await import('./llm/config-store.js');
+        await llmConfigStore.initialize();
+        const active = await llmConfigStore.getActiveProvider();
+        if (active) {
+            const label = String(active).trim();
+            cliModelName = label || cliModelName;
+            const cfg = await llmConfigStore.getActiveProviderConfig().catch(() => null);
+            const model = cfg?.model;
+            if (model)
+                cliModelName = `${label} · ${model}`;
+        }
+    }
+    catch { /* config-store 失败静默, 用 env 结果 */ }
     cliAgentName = agentIdentity?.name || 'bolloon';
     cliStartTime = Date.now();
     // 恢复上次 active channel (session 恢复: CLI 与 Web 共用 active-channel.json)
@@ -469,6 +496,11 @@ async function startCLI(comm) {
     }
     // 进入 Ink TUI 输入循环
     // 2026-08-06: 初始状态栏也带上下文显示 (0/1M │ [░░░░░░░░░░] 0%)
+    // 2026-08-07: 缓存 ContextManager 引用 (require 加载 ESM 抛 ERR_REQUIRE_ESM, 状态栏恒 0 根因)
+    try {
+        _ctxManagerRef = await import('./bootstrap/context-manager.js');
+    }
+    catch { /* 降级: getCliCtxUsage 返回 0/1M */ }
     const initialStatus = `${C_ACCENT}${cliModelName}${RESET}${C_DIM}  │${RESET} ${cliAgentName} ${C_DIM}│${RESET} ⏱ 0s${C_DIM} │${RESET} ${buildContextBar(getCliCtxUsage())}`;
     startInk((text) => { processInput(text, comm); }, initialStatus, getStatus);
     // Wait on a promise that resolves on Ctrl+C / 双击 Esc
@@ -1095,7 +1127,38 @@ async function processInput(input, comm) {
         // 工具调用显示由 tui-shell 的 onStream handler 处理
         const response = await a.prompt(trimmed, {
             onStream: (e) => {
-                if (e.type === 'step_start') {
+                // 2026-08-07: 中间思考/状态显示 — 之前只显示工具步骤, LLM 的思考过程
+                //   (thinking / status / phase / Reflection) 全被丢弃 → 用户只能看到输入和最终输出
+                // 用户偏好 (2026-08-07): 思考过程 = 圆角框渲染 (和回复同路径 renderMessageBox),
+                //   颜文字动画 (inkSetThinking) 只表示"正在运行", 不承载思考内容
+                if (e.type === 'thinking' && e.content) {
+                    // thinking 事件只有 "🤔 开始思考..." 占位 → 不 appendLine, 运行过程由动画表示;
+                    //   真正思考内容在 status 的 Reflection/💡 事件 → 下方框渲染
+                }
+                else if (e.phase && !e.type) {
+                    const ph = String(e.phase);
+                    const detail = e.detail ? ` (${String(e.detail).slice(0, 60)})` : '';
+                    const phLabel = {
+                        intent_classified: '意图识别',
+                        tool_selected: '工具选择',
+                        reflection: '反思',
+                        planning: '规划',
+                    };
+                    appendLine(`${C_WARN}◈ ${phLabel[ph] || ph}${detail}${RESET}`);
+                }
+                else if (e.type === 'status' && e.content) {
+                    const content = String(e.content);
+                    // Reflection / 反思 / 💡 → 圆角思考框 (和回复一样走 renderMessageBox, 白字+亮边框)
+                    if (content.includes('Reflection') || content.includes('反思') || content.includes('💡')) {
+                        const body = content.replace(/^💡\s*/, '').slice(0, 1500);
+                        if (body.trim())
+                            appendLine(renderMessageBox({ title: '💡 反思', body, color: C_WARN }));
+                    }
+                    else if (!content.includes('🔄 循环') && !content.includes('📋 参数')) {
+                        appendLine(`${C_DIM}${content}${RESET}`);
+                    }
+                }
+                else if (e.type === 'step_start') {
                     tuiToolCounter++;
                     tuiToolCalls.push({ tool: e.tool || '?', args: e.args, _t: Date.now() });
                 }
@@ -1139,21 +1202,26 @@ async function processInput(input, comm) {
         }
         // 更新状态栏: 上下文进度 (2026-08-06: 每轮按当前 messageHistory 重算并写回 ContextManager,
         //   保证状态栏按需更新 — 不依赖 pi-sdk loop 内部上报, 1s 定时器读到的一定是最新值)
+        // 2026-08-07 修复: pi-sdk loop 每轮已用 estimateHistoryTokens() 上报 ContextManager (pi-sdk.ts:1223),
+        //   这里直接读现值 — 之前用 (a as any).messageHistory 重算, 私有字段拿不到恒为 [] → 0,
+        //   还把 pi-sdk 上报的真实值覆盖成 0 (状态栏永远 0.00% 的根因)
         try {
             const { getContextManager } = await import('./bootstrap/context-manager.js');
             const cm = getContextManager();
-            // 用 context-compaction 的估算器 (与 pi-sdk estimateHistoryTokens 同源: 4 字符 ≈ 1 token)
-            const history = a.messageHistory ?? [];
-            let usedTokens = 0;
-            try {
-                const { estimateTokens } = require('./context-compaction/index.js');
-                usedTokens = estimateTokens(history);
-            }
-            catch {
-                usedTokens = Math.max(0, Math.round(JSON.stringify(history).length / 4));
+            let usage = cm.getUsage();
+            if (!usage || usage.usedTokens <= 0) {
+                // fallback: 非交互/异常路径 pi-sdk 未上报时兜底估算 (4 字符 ≈ 1 token)
+                const hist = a?.agent?.messageHistory ?? a?.piAgent?.messageHistory ?? [];
+                let t = 0;
+                try {
+                    const { estimateTokens } = _require('./context-compaction/index.js');
+                    t = estimateTokens(hist);
+                }
+                catch {
+                    t = Math.max(0, Math.round(JSON.stringify(hist).length / 4));
+                }
+                usage = cm.updateUsage(Math.max(t, usage?.usedTokens ?? 0));
             }
-            // 写回数据源 — 状态栏/Web/任何订阅方都拿到新鲜值
-            const usage = cm.updateUsage(usedTokens);
             const usageView = {
                 // 保留浮点 (0-100), buildContextBar 内部格式化
                 pct: Math.min(100, (usage.usedTokens / Math.max(1, usage.maxTokens)) * 100),
@@ -2599,7 +2667,16 @@ async function main() {
         if (isCLIInteractive) {
             console.log = () => { };
             console.info = () => { };
-            process.stdout.write = () => true;
+            // 2026-08-07: 只吞 SDK 结构化日志 (2026-...T 前缀直接写 stdout 的), 其余 (Ink ANSI 渲染) 走原始 write
+            //   不能整体 no-op — Ink 渲染依赖 write callback, 且 pty/管道缓冲满时 no-op 会掩盖真实写状态
+            process.stdout.write = ((chunk, ...rest) => {
+                const s = String(chunk);
+                if (/^\d{4}-\d{2}-\d{2}T/.test(s))
+                    return true; // SDK 结构化日志 → 吞
+                return originalStdoutWrite(chunk, ...rest);
+            });
+            // 2026-08-07: 交互模式静音 auto-update 后台通知 (stderr), 避免 "🔍 检查更新" 污染 TUI
+            void import('./utils/auto-update.js').then(({ setNotifyQuiet }) => setNotifyQuiet(true)).catch(() => { });
         }
         if (isNonInteractive) {
             console.error = () => { };
@@ -2636,12 +2713,30 @@ async function main() {
         }
         const { keypair, did, name } = await bootstrapIdentity();
         agentIdentity = { did, name, publicKey: Buffer.from(keypair.publicKey).toString('hex') };
-        publishDID(name, keypair).then(({ cid, ipnsName }) => {
-            if (cid)
-                agentIdentity.cid = cid;
-            if (ipnsName)
-                agentIdentity.ipnsName = ipnsName;
-        }).catch(() => { });
+        // 2026-08-07: CLI 模式后台自动安装/启动本地 Kubo (web 模式 server.ts 已有, CLI 缺 → IPNS 发布后无法解析的根因)
+        //   fire-and-forget, 不阻塞启动; Kubo 就绪后才发布 DID (避免 registerAgent 在 Kubo 未启动时 30s 超时)
+        //   装好后 /ipfs /ipns /ipfs_add /ipns_publish 工具可用
+        void (async () => {
+            let kuboReady = false;
+            try {
+                const sdk = await import('@diap/sdk');
+                const checkKuboSetup = sdk.checkKuboSetup;
+                if (typeof checkKuboSetup === 'function') {
+                    const setup = await checkKuboSetup(true, true);
+                    kuboReady = !!(setup?.ready && setup?.daemonRunning);
+                    s.info(kuboReady ? 'IPFS 本地 Kubo 就绪 → IPNS 发布/解析可用' : 'Kubo 不可用, IPFS 降级本地模式');
+                }
+            }
+            catch (e) {
+                s.warn(`Kubo 自动安装失败 (非致命): ${String(e?.message || e).slice(0, 120)}`);
+            }
+            publishDID(name, keypair).then(({ cid, ipnsName }) => {
+                if (cid)
+                    agentIdentity.cid = cid;
+                if (ipnsName)
+                    agentIdentity.ipnsName = ipnsName;
+            }).catch(() => { });
+        })();
         const verifier = createVerificationManager();
         let comm = null;
         try {
@@ -2658,11 +2753,18 @@ async function main() {
                 });
             }
             else {
-                comm = await bootstrapP2P(verifier);
-                const connections = comm.getConnections();
-                if (connections.length > 0) {
-                    agentIdentity.peerId = connections[0].publicKey;
-                    agentIdentity.p2pChannel = 'bolloon-agent-harness';
+                // 2026-08-07: 弱网下 hyperswarm DHT start/joinTopic 可能无限挂起 → 20s 超时门, 超时降级无 P2P 模式
+                comm = await withTimeout(bootstrapP2P(verifier), 20_000, 'P2P 网络初始化')
+                    .catch((err) => {
+                    s.warn(`P2P 初始化超时/失败, 降级无 P2P 模式: ${err.message}`);
+                    return null;
+                });
+                if (comm) {
+                    const connections = comm.getConnections();
+                    if (connections.length > 0) {
+                        agentIdentity.peerId = connections[0].publicKey;
+                        agentIdentity.p2pChannel = 'bolloon-agent-harness';
+                    }
                 }
             }
         }
@@ -2670,13 +2772,14 @@ async function main() {
             s.warn(`P2P 初始化失败: ${err.message}`);
             s.warn('将使用无 P2P 模式运行');
         }
-        await bootstrapIroh(keypair, name);
+        await withTimeout(bootstrapIroh(keypair, name), 15_000, 'iroh P2P 初始化')
+            .catch((err) => s.warn(`iroh 初始化超时, 继续使用 Hyperswarm P2P: ${err.message}`));
         // Bolloon Bootstrap: 启动扫描 + Context 收集 + 挂定时任务
         // 失败静默 (主流程不被阻塞)
         try {
             const { bootstrapBolloon } = await import('./pi-ecosystem-judgment/human-value-pipeline.js');
             s.info('正在 bootstrap bolloon 上下文...');
-            const bs = await bootstrapBolloon({ cwd: process.cwd() });
+            const bs = await withTimeout(bootstrapBolloon({ cwd: process.cwd() }), 20_000, 'Bolloon 上下文扫描');
             s.info(`Bootstrap 完成 (${bs.durationMs}ms, ${bs.errors.length} 个非致命错误)`);
         }
         catch (err) {

package/dist/llm/config-store.js

@@ -5,7 +5,10 @@
 import * as fs from 'fs/promises';
 import * as path from 'path';
 const CONFIG_DIR = path.join(process.env.HOME || '/tmp', '.bolloon');
-const CONFIG_PATH = path.join(CONFIG_DIR, 'llm-config.json');
+// 2026-08-07: llm-config.json → bolloon-config.json (统一配置文件名, Bolloon 自己有写权限)
+//   initialize() 会做一次迁移: 旧文件存在且新文件不存在 → 复制旧内容, 之后统一读写新文件
+const CONFIG_PATH = path.join(CONFIG_DIR, 'bolloon-config.json');
+const LEGACY_CONFIG_PATH = path.join(CONFIG_DIR, 'llm-config.json');
 export const DEFAULT_PROVIDER_CONFIGS = {
     openai: {
         enabled: false,
@@ -245,6 +248,18 @@ class LLMConfigStore {
             return;
         try {
             await fs.mkdir(CONFIG_DIR, { recursive: true });
+            // 2026-08-07: 迁移 — 旧 llm-config.json 存在且新 bolloon-config.json 不存在时复制旧内容
+            try {
+                await fs.access(CONFIG_PATH);
+            }
+            catch {
+                try {
+                    const legacy = await fs.readFile(LEGACY_CONFIG_PATH, 'utf-8');
+                    await fs.writeFile(CONFIG_PATH, legacy, { mode: 0o600 });
+                    console.log('[config-store] 已迁移 llm-config.json → bolloon-config.json');
+                }
+                catch { /* 旧文件也不存在 → 走默认配置 */ }
+            }
             const data = await fs.readFile(CONFIG_PATH, 'utf-8');
             const loadedConfig = JSON.parse(data);
             // 确保加载的配置包含所有默认供应商，缺失的用默认值补充
@@ -271,7 +286,8 @@ class LLMConfigStore {
         if (!this.config)
             return;
         this.config.updatedAt = new Date().toISOString();
-        await fs.writeFile(CONFIG_PATH, JSON.stringify(this.config, null, 2));
+        // 2026-08-07: mode 0o600 — 仅当前用户可读写 (含 API key 的敏感配置); Bolloon 自身进程可写
+        await fs.writeFile(CONFIG_PATH, JSON.stringify(this.config, null, 2), { mode: 0o600 });
     }
     async getConfig() {
         await this.initialize();

package/dist/llm/pi-ai.js

@@ -590,14 +590,30 @@ ${prompt}`;
     }
 }
 let modelInstance = null;
+/** 2026-08-07: bolloon-config.json 优先, 旧 llm-config.json 兜底 (迁移期兼容) */
+function resolveConfigPath() {
+    const home = process.env.HOME || '/tmp';
+    const base = path.join(home, '.bolloon');
+    for (const name of ['bolloon-config.json', 'llm-config.json']) {
+        const p = path.join(base, name);
+        try {
+            if (fs.existsSync(p))
+                return p;
+        }
+        catch { /* continue */ }
+    }
+    return null;
+}
 function detectProvider() {
     // 首先检查配置文件（优先级最高）
     try {
-        const configPath = path.join(process.env.HOME || '/tmp', '.bolloon', 'llm-config.json');
-        const configData = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-        if (configData.activeProvider && configData.providers[configData.activeProvider]) {
-            console.log('[PiAIModel] Detected provider from config:', configData.activeProvider);
-            return configData.activeProvider;
+        const configPath = resolveConfigPath();
+        if (configPath) {
+            const configData = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+            if (configData.activeProvider && configData.providers[configData.activeProvider]) {
+                console.log('[PiAIModel] Detected provider from config:', configData.activeProvider);
+                return configData.activeProvider;
+            }
         }
     }
     catch { }
@@ -656,12 +672,14 @@ export function initPiAI(config = {}) {
     let apiKey = config.apiKey;
     if (!apiKey) {
         try {
-            const configPath = path.join(process.env.HOME || '/tmp', '.bolloon', 'llm-config.json');
-            const configData = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-            const providerConfig = configData.providers[provider];
-            if (providerConfig?.apiKey) {
-                apiKey = providerConfig.apiKey;
-                console.log('[PiAIModel] Loaded apiKey from config for', provider);
+            const configPath = resolveConfigPath();
+            if (configPath) {
+                const configData = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+                const providerConfig = configData.providers[provider];
+                if (providerConfig?.apiKey) {
+                    apiKey = providerConfig.apiKey;
+                    console.log('[PiAIModel] Loaded apiKey from config for', provider);
+                }
             }
         }
         catch (e) {

package/dist/security/tool-gate.js

@@ -64,6 +64,8 @@ const TOOL_WHITELIST = new Set([
     'cid_save', 'cid_load', 'cid_update', 'cid_version', 'cid_list', 'cid_share',
     'context_save_snapshot', 'context_restore',
     'ui_save_component', 'ui_load_component',
+    // 2026-08-07: Bolloon 自身配置读写 (bolloon-config.json, agent 有修改自身配置权限)
+    'bolloon_config_get', 'bolloon_config_set',
 ]);
 export const gateWhitelist = { gate: 'whitelist', allowed: true };
 /**

package/dist/utils/auto-update.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * npm 自动更新检查器
  *
@@ -14,48 +13,11 @@
  *   开发态下若 cwd 的 package.json 就是本包则回退到 cwd，不受任意工作目录影响。
  * - 检查频率受节流缓存约束（默认 24h 一次），不会每次启动都打 npm。
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkAndUpdate = checkAndUpdate;
-exports.checkForUpdates = checkForUpdates;
-exports.performUpdate = performUpdate;
-const child_process_1 = require("child_process");
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const https = __importStar(require("https"));
-const http = __importStar(require("http"));
+import { execSync } from 'child_process';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as https from 'https';
+import * as http from 'http';
 // ANSI 颜色
 const RESET = '\x1b[0m';
 const BOLD = '\x1b[1m';
@@ -66,10 +28,17 @@ const MAGENTA = '\x1b[35m';
 const PKG_NAME = '@bolloon/bolloon-agent';
 const BOLLOON_DIR = path.join(process.env.HOME || process.env.USERPROFILE || '/tmp', '.bolloon');
 const UPDATE_CACHE = path.join(BOLLOON_DIR, '.update-check.json');
+/** 2026-08-07: CLI 交互模式下静音自动更新通知 (避免后台检查污染 TUI 屏幕) */
+let notifyQuiet = false;
+export function setNotifyQuiet(v) {
+    notifyQuiet = v;
+}
 /**
  * 通知用户。使用 stderr，避免在交互式 CLI 模式下 stdout 被吞掉。
  */
 function notify(msg, color = RESET) {
+    if (notifyQuiet)
+        return;
     process.stderr.write(`${color}${msg}${RESET}`);
 }
 function httpGet(url) {
@@ -113,7 +82,7 @@ function getGlobalBolloonDir() {
     const candidates = [];
     // 1. npm root -g（最可靠）
     try {
-        const npmRoot = (0, child_process_1.execSync)('npm root -g', { encoding: 'utf-8', timeout: 8000 }).trim();
+        const npmRoot = execSync('npm root -g', { encoding: 'utf-8', timeout: 8000 }).trim();
         if (npmRoot)
             candidates.push(path.join(npmRoot, '@bolloon', 'bolloon-agent'));
     }
@@ -122,7 +91,7 @@ function getGlobalBolloonDir() {
     }
     // 2. npm prefix -g
     try {
-        const npmPrefix = (0, child_process_1.execSync)('npm prefix -g', { encoding: 'utf-8', timeout: 8000 }).trim();
+        const npmPrefix = execSync('npm prefix -g', { encoding: 'utf-8', timeout: 8000 }).trim();
         if (npmPrefix)
             candidates.push(path.join(npmPrefix, 'lib', 'node_modules', '@bolloon', 'bolloon-agent'));
     }
@@ -280,7 +249,7 @@ async function checkBolloonUpdates() {
  */
 function checkNpmOutdated() {
     try {
-        const output = (0, child_process_1.execSync)('npm outdated --json', {
+        const output = execSync('npm outdated --json', {
             encoding: 'utf-8',
             timeout: 30000,
             maxBuffer: 10 * 1024 * 1024,
@@ -344,7 +313,7 @@ async function updatePackagesWithVersion(packagesWithVersion) {
     const args = ['npm', 'install', '-g', ...packagesWithVersion];
     notify(`\n${CYAN}📦 正在更新包...${RESET}\n`, RESET);
     try {
-        (0, child_process_1.execSync)(args.join(' '), {
+        execSync(args.join(' '), {
             encoding: 'utf-8',
             timeout: 300000,
             stdio: 'inherit',
@@ -462,7 +431,7 @@ function resolveAutoUpdatePolicy() {
  *                       例如 Electron 用 app.relaunch()，Node 用 detached 重新 spawn）。
  *                       若未提供或 autoRestart=false，则仅提示用户手动重启。
  */
-async function checkAndUpdate(opts = {}) {
+export async function checkAndUpdate(opts = {}) {
     const policy = resolveAutoUpdatePolicy();
     if (policy.blocked) {
         return { hasUpdate: false, info: null, updated: false, message: '跳过更新检查（已显式禁用）' };
@@ -566,13 +535,13 @@ async function checkAndUpdate(opts = {}) {
 /**
  * 仅检查更新，不自动安装
  */
-async function checkForUpdates() {
+export async function checkForUpdates() {
     return await checkBolloonUpdates();
 }
 /**
  * 手动触发更新
  */
-async function performUpdate(packages) {
+export async function performUpdate(packages) {
     return await updatePackages(packages);
 }
 // CLI 入口
@@ -595,4 +564,3 @@ if (process.argv[1]?.includes('auto-update')) {
         }
     })();
 }
-//# sourceMappingURL=auto-update.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bolloon/bolloon-agent",
-  "version": "0.3.36",
+  "version": "0.3.38",
   "type": "module",
   "description": "P2P AI Document Agent - 全局安装后执行 `bolloon` 启动产品",
   "main": "dist/cli-entry.js",
@@ -35,7 +35,7 @@
     "dev": "tsx -r dotenv/config src/index.ts",
     "dev:web": "npm run build:web && tsx -r dotenv/config src/index.ts --web",
     "dev:electron": "npm run build:electron && npm run electron:start",
-    "electron:start": "NODE_ENV=development electron dist/electron.js",
+    "electron:start": "NODE_ENV=development electron dist/electron-build/electron.js",
     "electron:dev": "concurrently \"npm run dev:web\" \"npm run electron:start\"",
     "electron:build": "npm run build:electron && electron-builder",
     "electron:pack": "electron-builder --dir",
@@ -59,7 +59,7 @@
     "@capacitor/ios": "^8.4.2",
     "@chainsafe/libp2p-noise": "^17.0.0",
     "@chainsafe/libp2p-yamux": "^8.0.1",
-    "@diap/sdk": "^0.2.1",
+    "@diap/sdk": "^0.2.2",
     "@libp2p/autonat": "^3.0.25",
     "@libp2p/circuit-relay-v2": "^4.2.9",
     "@libp2p/dcutr": "^3.0.20",
@@ -133,7 +133,8 @@
     "files": [
       "dist/**/*",
       "bin/**/*",
-      "package.json"
+      "package.json",
+      "dist/electron-build/**/*"
     ],
     "npmRebuild": false,
     "buildDependenciesFromSource": false,
@@ -147,7 +148,7 @@
       }
     ],
     "extraMetadata": {
-      "main": "dist/electron.js",
+      "main": "dist/electron-build/electron.js",
       "type": "commonjs"
     },
     "win": {