npm - @bolloon/bolloon-agent - Versions diffs - 0.3.50 → 0.3.52 - Mend

@bolloon/bolloon-agent 0.3.50 → 0.3.52

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/agents/deny-pipeline.js +6 -6
package/dist/agents/pi-sdk-tools.js +36 -0
package/dist/agents/shell-guard.js +38 -0
package/dist/web/client.js +54 -0
package/package.json +4 -1

package/dist/agents/deny-pipeline.js CHANGED Viewed

@@ -79,17 +79,17 @@ export class DenyPipeline {
     }
     /**
      * 构建 permission-mode checker.
-     * default 模式: 禁用 shell_exec / git_commit / git_push 等危险工具
+     * default 模式: 禁用 git 写操作 (commit/push/branch — "不搞乱")
      * bypassPermissions: 放行所有
      *
-     * 2026-08-10: write_file/edit_file/delete_file 移出 default 禁列表 — 它们已有
-     *   checkWritePath 写入白名单兜底 (self-improve-policy.json), 正常任务 (如写 HTML 发布
-     *   IPFS 网站) 不该被 permission 层拦截; 实测日志: "write_file 被权限拦了" → LLM 只能
-     *   绕道, 任务无法推进.
+     * 2026-08-10: shell_exec / write_file / edit_file / delete_file / terminal 移出 default
+     *   禁列表 — 它们已有各自护栏 (shell_exec 命令白名单 / terminal denylist-only /
+     *   write_file checkWritePath), 用户明确"灵活一点, 少围栏, 核心的东西不碰不搞乱就行";
+     *   实测日志 "write_file 被权限拦了" → LLM 只能绕道, 任务无法推进.
      */
     static permissionChecker() {
         const DEFAULT_DENY_TOOLS = new Set([
-            'shell_exec', 'git_commit', 'git_push', 'git_branch',
+            'git_commit', 'git_push', 'git_branch',
         ]);
         return (ctx) => {
             if (ctx.permissionMode === 'bypassPermissions') {

package/dist/agents/pi-sdk-tools.js CHANGED Viewed

@@ -649,6 +649,42 @@ export function registerBuiltinTools(ctx) {
             return { success: true, output: result.output };
         }
     });
+    // 2026-08-10: terminal — 灵活终端写命令 (用户要求: bolloon 自己写命令进 terminal, 少围栏).
+    //   与 shell_exec 的区别: 接受**完整 shell 命令字符串** (管道/重定向/写文件都行),
+    //   护栏只挡高危破坏模式 (checkTerminalCommand: 提权/格式化/删根/.bolloon 数据), 其余放行.
+    ctx.tools.set('terminal', {
+        name: 'terminal',
+        description: '执行完整 shell 命令 (支持管道/重定向/写文件/跑脚本). 护栏只挡高危破坏操作 (sudo/格式化/rm -rf 根目录/写 ~/.bolloon 数据), 其余灵活放行. 适合: 写 HTML 文件、跑 python/node 脚本、查系统状态、装依赖.',
+        parameters: { command: '完整 shell 命令 (必填, 如: echo "<html>" > /tmp/site/index.html && ls /tmp/site)', timeoutMs: '超时毫秒, 默认 30000' },
+        execute: async (args) => {
+            const raw = String(args.command || '').trim();
+            if (!raw)
+                return { success: false, error: 'command 必填' };
+            const { checkTerminalCommand } = await import('./shell-guard.js');
+            const guard = checkTerminalCommand(raw);
+            if (!guard.allowed) {
+                return { success: false, error: `[terminal-guard] ${guard.reason}`, deniedByGuard: true };
+            }
+            const { exec } = await import('child_process');
+            const timeoutMs = Number(args.timeoutMs) || 30000;
+            return new Promise((resolve) => {
+                exec(raw, {
+                    cwd: process.cwd(),
+                    timeout: timeoutMs,
+                    maxBuffer: 8 * 1024 * 1024,
+                    env: { ...process.env, GIT_TERMINAL_PROMPT: '0' },
+                }, (err, stdout, stderr) => {
+                    const output = ((stdout || '') + (stderr ? `\n[stderr]\n${stderr}` : '')).trim().slice(0, 8000);
+                    if (err) {
+                        resolve({ success: false, error: `exit ${err.code ?? '?'}: ${String(err.message || '').slice(0, 200)}`, output: output || undefined });
+                    }
+                    else {
+                        resolve({ success: true, output: output || '(无输出)' });
+                    }
+                });
+            });
+        }
+    });
     // self_improve
     ctx.tools.set('self_improve', {
         name: 'self_improve',

package/dist/agents/shell-guard.js CHANGED Viewed

@@ -335,6 +335,44 @@ export const SELF_IMPROVE_COOLDOWN_MS = 6 * 60 * 60 * 1000;
 /** @deprecated 用 getSandboxCwd() */
 export const SHELL_SANDBOX_CWD = path.resolve(process.cwd(), '.bolloon-shell-sandbox');
 // ============================================================================
+// terminal 工具宽松护栏 (2026-08-10) — denylist-only, 不碰核心即可
+// 与 checkCommand 的区别: 不查命令白名单/参数 allowlist — 完整 shell 命令字符串放行,
+//   只挡"高危破坏/碰核心数据"模式. 用户明确: 灵活一点, 少围栏, 核心的东西不碰不搞乱.
+// ============================================================================
+const TERMINAL_DENY_PATTERNS = [
+    /\bsudo\b/, // 提权
+    /\bsu\b/,
+    /\bmkfs\b/, // 格式化
+    /\bshred\b/, // 擦除
+    /\bdd\s+.*of=\/dev\//, // 写设备
+    /\brm\s+-(rf|fr)\b/, // 递归删除 (rm 单个文件允许)
+    /\bchmod\s+-R\s+777\b/, // 全权限
+    /\bcurl\b[^|]*\|\s*(sh|bash)\b/, // curl|sh 远程执行
+    /\bwget\b[^|]*\|\s*(sh|bash)\b/,
+    /\b:\(\)\s*\{[^}]*\}\s*;\s*:/, // fork bomb
+    /\b(>|>>)\s*(\/etc\/|\/usr\/|\/System\/|\/bin\/|\/sbin\/)/, // 写系统目录
+    /[\/\s]\.bolloon\b/, // Bolloon 数据 (sessions/persona/keys; 覆盖 ~/.bolloon, $HOME/.bolloon, 空格.bolloon)
+    /[\/\s]\.(diap|hermes|openclaw)\b/, // 其他 agent 数据
+    /\brm\s+-rf\s+(\/|~|\*|\.|\$HOME)\b/, // 删根/家/通配
+    /\bgit\s+push\b[^|]*\s+(-f|--force)/, // 强推
+    /\bgit\s+reset\s+--hard\b/,
+    /\bkill\s+-9\s+\d+\b/, // 杀进程 (保留给用户)
+];
+/** 检查完整 shell 命令 (terminal 工具用). denylist-only: 命中高危模式即拒, 否则放行. */
+export function checkTerminalCommand(rawCmd) {
+    const cmd = (rawCmd || '').trim();
+    if (!cmd)
+        return { allowed: false, reason: '命令为空', matchedBy: 'fallback-deny' };
+    for (const pattern of TERMINAL_DENY_PATTERNS) {
+        if (pattern.test(cmd)) {
+            auditShellCall('denied', cmd, [], `terminal 高危模式 ${pattern}`);
+            return { allowed: false, reason: `命令命中高危护栏 ${pattern} (核心不碰: 提权/格式化/删根/.bolloon 数据). 换一条安全命令.`, matchedBy: 'arg-denylist' };
+        }
+    }
+    auditShellCall('allowed', cmd, []);
+    return { allowed: true };
+}
+// ============================================================================
 // 写策略 / 审计路径 (供 API 端点用)
 // ============================================================================
 export const POLICY_AUDIT_PATH_PUBLIC = POLICY_AUDIT_PATH;

package/dist/web/client.js CHANGED Viewed

@@ -1544,6 +1544,57 @@
   var newChannelBtn = document.getElementById("new-channel-btn");
   var newChannelInput = document.getElementById("new-channel-input");
   var channelNameEl = document.getElementById("channel-name");
+  var rokidBridge = null;
+  var rokidBridgeStatus = "unavailable";
+  function getRokidBridge() {
+    if (typeof window === "undefined") return null;
+    return window.Capacitor?.Plugins?.RokidBridge || null;
+  }
+  function publishRokidStatus(status, detail = {}) {
+    rokidBridgeStatus = status;
+    if (typeof window !== "undefined") {
+      window.__bolloonRokidStatus = { status, ...detail };
+      window.dispatchEvent(new CustomEvent("bolloon:rokid-status", { detail: window.__bolloonRokidStatus }));
+    }
+  }
+  async function initRokidBridge() {
+    const bridge = getRokidBridge();
+    if (!bridge) {
+      publishRokidStatus("unavailable");
+      return;
+    }
+    rokidBridge = bridge;
+    try {
+      await bridge.addListener?.("rokidEvent", (event) => {
+        if (event?.type === "connected") publishRokidStatus("connected", { device: event.device });
+        else if (event?.type === "disconnected") publishRokidStatus("disconnected", { reason: event.reason });
+        else if (event?.type === "error") publishRokidStatus("error", { error: event.error || event.message });
+        window.dispatchEvent(new CustomEvent("bolloon:rokid-event", { detail: event }));
+      });
+      const result = await bridge.connect?.();
+      publishRokidStatus("connected", { deviceId: result?.deviceId, mode: result?.mode });
+    } catch (error) {
+      publishRokidStatus("error", { error: error?.message || String(error) });
+      console.warn("[Rokid] bridge unavailable:", error);
+    }
+  }
+  function sendRokidText(text, metadata = {}) {
+    if (!rokidBridge || !text) return;
+    Promise.resolve(rokidBridge.sendMessage?.({
+      text,
+      channelId: currentChannelId || void 0,
+      metadata
+    })).catch((error) => {
+      publishRokidStatus("error", { error: error?.message || String(error) });
+    });
+  }
+  if (typeof window !== "undefined") {
+    window.BolloonRokid = {
+      connect: initRokidBridge,
+      sendMessage: sendRokidText,
+      getStatus: () => ({ status: rokidBridgeStatus })
+    };
+  }
   var eventSources = /* @__PURE__ */ new Map();
   var currentChannelId = null;
   var activeChannelId = null;
@@ -2823,6 +2874,7 @@ ${data.error || "channel not found"}`, "error");
             MR_replaceStreamingText?.(data.content || "");
             MR_finalizeTimelineAsMessage(getRendererCtx());
           }
+          sendRokidText(data.content || "", { source: "ai" });
         } else if (data.type === "reply-preview") {
           const previewContent = data.content || "";
           const oldPreviews = container.querySelectorAll(".message-ai.preview");
@@ -2896,6 +2948,7 @@ ${data.error || "channel not found"}`, "error");
     setSendMode("abort");
     const container = messagesContainers.get(currentChannelId) || messagesEl;
     addMessage2(text, "user", true, container);
+    sendRokidText(text, { source: "user" });
     if (container) container.scrollTop = container.scrollHeight;
     if (currentPreviewBubble) {
       currentPreviewBubble.remove();
@@ -3983,6 +4036,7 @@ ${data.error || "channel not found"}`, "error");
     }
   }
   async function init() {
+    void initRokidBridge();
     const themeData = await loadTheme();
     currentAgentId = themeData.agentId || `agent_${generateId().substring(0, 8)}`;
     if (!themeData.agentId) {

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@bolloon/bolloon-agent",
-  "version": "0.3.50",
+  "version": "0.3.52",
   "type": "module",
   "description": "P2P AI Document Agent - 全局安装后执行 `bolloon` 启动产品",
   "main": "dist/cli-entry.js",
@@ -29,6 +29,8 @@
     "build:main": "tsc && node scripts/copy-constraint-runtime.mjs",
     "build:cli": "node scripts/build-cli.js",
     "build:web": "npx tsx scripts/build-web.ts",
+    "build:rokid-sdk": "npm --prefix ../rokid run build",
+    "test:rokid-sdk": "npm --prefix ../rokid test",
     "build:electron": "tsc -p tsconfig.electron.json",
     "build:all": "npm run build:main && npm run build:web && npm run build:electron && npm run build:cli",
     "start": "node dist/index.js",
@@ -55,6 +57,7 @@
   "dependencies": {
     "@bolloon/bolloon-agent": "^0.3.22",
     "@bolloon/constraint-runtime": "0.1.0",
+    "@capacitor/android": "^8.4.1",
     "@capacitor/core": "^8.4.1",
     "@capacitor/ios": "^8.4.2",
     "@chainsafe/libp2p-noise": "^17.0.0",