@bolloon/bolloon-agent 0.4.12 → 0.4.14

package/dist/agents/gateway-network.js

@@ -0,0 +1,278 @@
+/**
+ * gateway-network.ts — Agent 网络加入 (2026-08-14 v2)
+ *
+ * joinNetwork(link): 通过链接自动加入共享 Agent 网络.
+ * 链接形式 (三选一):
+ *   - orbitdb://<storeAddress>   共享 registry store (主链路, OrbitDB 复制)
+ *   - ipns://<name>              IPNS 标识 (registry 静态快照)
+ *   - https://.../registry       HTTP 端点 (远程 registry JSON)
+ *
+ * v2 新增:
+ *   - orbitdb:// 真实可开 (CIDDatabase.openStoreByAddress, replica 只读)
+ *   - 成员身份持久化 ~/.bolloon/gateway-networks.json (重启后仍是家庭成员)
+ *   - detectGatewayLink / maybeAutoJoinGateway — 消息里收到链接自动加入 (入口要小)
+ *   - shareNetworkLink — 生成本机可分享的网络链接 (把 registry 发出去)
+ */
+import * as os from 'os';
+import * as path from 'path';
+import { getAgentRegistry, warmAgentRegistry } from './agent-registry.js';
+/** 解析链接字符串 → ParsedLink (剥离 ?name= query) */
+export function parseNetworkLink(link) {
+    const l = String(link || '').trim();
+    if (!l)
+        return null;
+    const [base, query] = l.split('?');
+    let networkName;
+    try {
+        networkName = query ? (new URLSearchParams(query).get('name') || undefined) : undefined;
+    }
+    catch { /* 忽略坏 query */ }
+    if (base.startsWith('ipns://'))
+        return { kind: 'ipns', name: base.slice('ipns://'.length), networkName };
+    if (base.startsWith('orbitdb://')) {
+        // orbitdb:///orbitdb/<addr> 或 orbitdb://orbitdb/<addr> → /orbitdb/<addr>
+        let address = base.slice('orbitdb://'.length);
+        if (!address.startsWith('/'))
+            address = `/${address}`;
+        return { kind: 'orbitdb', address, networkName };
+    }
+    if (base.startsWith('http://') || base.startsWith('https://'))
+        return { kind: 'http', url: base, networkName };
+    return null;
+}
+/** 从消息文本里检测 gateway 链接 (自动加入触发器用) */
+export function detectGatewayLink(text) {
+    const t = String(text || '');
+    // orbitdb:// 地址含 '/' 必须贪婪匹配到空白/引号; https 允许 /registry 后带 ?query
+    const re = /(orbitdb:\/\/\/?orbitdb\/[^\s)'"<>，。；]+|ipns:\/\/[^\s)'"<>，。；]+|https?:\/\/[^\s)'"<>，。；]*\/registry(?:\?[^\s)'"<>，。；]*)?)/;
+    const m = re.exec(t);
+    return m ? m[1].trim() : null;
+}
+// ============ 远端拉取 ============
+/** 从 HTTP 端点拉取远端 registry */
+async function fetchRemoteRegistry(url) {
+    try {
+        const r = await fetch(url, { signal: AbortSignal.timeout(15000) });
+        if (!r.ok)
+            return null;
+        const data = await r.json();
+        // 兼容: {services:[...]} 或 [...]
+        const services = Array.isArray(data) ? data : (data.services ?? null);
+        return Array.isArray(services) ? services : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** 从 IPNS 拉取 registry (需本地 Kubo + 8080 gateway) */
+async function fetchIpnsRegistry(name) {
+    try {
+        const r = await fetch(`http://127.0.0.1:8080/ipns/${name}/registry.json`, { signal: AbortSignal.timeout(15000) });
+        if (!r.ok)
+            return null;
+        const data = await r.json();
+        return Array.isArray(data) ? data : (data.services ?? null);
+    }
+    catch {
+        return null;
+    }
+}
+/** 从 OrbitDB 打开共享 registry store (replica 只读) */
+async function fetchOrbitdbRegistry(address) {
+    try {
+        const { getCIDDatabase } = await import('../orbitdb/cid-database.js');
+        const db = getCIDDatabase();
+        const store = await db.openStoreByAddress(address, 'keyvalue');
+        if (!store)
+            return null;
+        // 先立即读 (同节点 store 已有数据); 没有再等复制 (owner 在线时 pubsub 复制通常 <1s)
+        const first = await store.get('services').catch(() => null);
+        if (Array.isArray(first))
+            return first;
+        await new Promise((resolve) => {
+            let done = false;
+            const finish = () => { if (!done) {
+                done = true;
+                try {
+                    off();
+                }
+                catch { }
+                resolve();
+            } };
+            const off = store.onChange(finish);
+            setTimeout(finish, 4000);
+        });
+        // 单键 'services' (registry 的 OrbitDB 布局: 整个列表存单键)
+        const v = await store.get('services').catch(() => null);
+        if (Array.isArray(v))
+            return v;
+        // 兼容: 遍历 entries 找数组值
+        const all = await store.all().catch(() => null);
+        if (Array.isArray(all)) {
+            for (const entry of all) {
+                if (Array.isArray(entry.value))
+                    return entry.value;
+                const val = entry.value;
+                if (val?.services && Array.isArray(val.services))
+                    return val.services;
+            }
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+const networksFile = () => path.join(os.homedir() || '/tmp', '.bolloon', 'gateway-networks.json');
+async function loadNetworks() {
+    try {
+        const { readFile } = await import('fs/promises');
+        const parsed = JSON.parse(await readFile(networksFile(), 'utf-8'));
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+async function saveNetworks(list) {
+    try {
+        const { mkdir, writeFile } = await import('fs/promises');
+        await mkdir(path.dirname(networksFile()), { recursive: true });
+        await writeFile(networksFile(), JSON.stringify(list, null, 2), 'utf-8');
+    }
+    catch { /* 持久化失败静默 */ }
+}
+/** 列出已加入的网络 */
+export async function listJoinedNetworks() {
+    return loadNetworks();
+}
+/**
+ * 通过链接加入共享网络: 拉取远端服务列表 → 合并到本地 registry (按 agentId+service 去重).
+ * 幂等: 已加入的网络直接返回 already=true.
+ * deps.registry 可注入 (测试用), 默认单例.
+ */
+export async function joinNetwork(link, deps) {
+    const parsed = parseNetworkLink(link);
+    if (!parsed) {
+        return { ok: false, joined: 0, total: 0, error: '无法解析链接 (支持 orbitdb:// / ipns:// / https://)' };
+    }
+    // 幂等: 已加入 (按解析后的网络身份 key 去重, 忽略 ?name 差异)
+    const existing = await loadNetworks();
+    const norm = String(link).trim();
+    const identityKey = parsed.kind === 'orbitdb' ? `orbitdb:${parsed.address}`
+        : parsed.kind === 'ipns' ? `ipns:${parsed.name}`
+            : `http:${parsed.url}`;
+    if (existing.some((n) => n.linkKey === identityKey || n.link === norm)) {
+        return { ok: true, joined: 0, total: 0, already: true, linkKind: parsed.kind, networkName: parsed.networkName };
+    }
+    // 拉取远端服务
+    let remote = null;
+    if (parsed.kind === 'http') {
+        remote = await fetchRemoteRegistry(parsed.url);
+    }
+    else if (parsed.kind === 'ipns') {
+        remote = await fetchIpnsRegistry(parsed.name);
+    }
+    else if (parsed.kind === 'orbitdb') {
+        remote = await fetchOrbitdbRegistry(parsed.address);
+    }
+    if (!remote || remote.length === 0) {
+        return { ok: false, joined: 0, total: 0, error: '远端网络无服务或不可达 (store owner 需在线)', linkKind: parsed.kind };
+    }
+    // 合并到本地 registry (按 agentId + service.name 去重)
+    const registry = deps?.registry ?? getAgentRegistry();
+    const local = await registry.list();
+    let joined = 0;
+    for (const svc of remote) {
+        if (!svc?.agentId || !svc?.service?.name)
+            continue;
+        const exists = local.some((l) => l.agentId === svc.agentId && l.service?.name === svc.service?.name);
+        if (!exists) {
+            await registry.register(svc).catch(() => { });
+            joined++;
+        }
+    }
+    // 记录成员身份 (持久化 → 重启后自动恢复)
+    await saveNetworks([
+        ...existing,
+        {
+            link: norm,
+            linkKey: identityKey,
+            kind: parsed.kind,
+            name: parsed.networkName,
+            joinedAt: new Date().toISOString(),
+            serviceCount: remote.length,
+            lastSyncAt: new Date().toISOString(),
+        },
+    ]);
+    return { ok: true, joined, total: remote.length, linkKind: parsed.kind, networkName: parsed.networkName };
+}
+/** 启动恢复: 重拉所有已加入网络 (失败静默, 保留记录). 返回恢复统计. */
+export async function restoreJoinedNetworks() {
+    const nets = await loadNetworks();
+    if (nets.length === 0)
+        return { restored: 0, failed: 0, total: 0 };
+    let restored = 0;
+    let failed = 0;
+    for (const n of nets) {
+        const r = await joinNetwork(n.link).catch(() => null);
+        if (r?.ok)
+            restored++;
+        else
+            failed++;
+        // 更新 lastSyncAt
+        if (r?.ok) {
+            const updated = (await loadNetworks()).map((m) => m.link === n.link ? { ...m, lastSyncAt: new Date().toISOString(), serviceCount: r.total || m.serviceCount } : m);
+            await saveNetworks(updated);
+        }
+    }
+    return { restored, failed, total: nets.length };
+}
+// ============ 分享链接 ============
+/**
+ * 生成本机可分享的网络链接: orbitdb://<registry storeAddress>?name=<网络名>.
+ * 对方收到链接 → 自动 joinNetwork → 拉取本机注册的服务.
+ * opts.registry 可注入 (测试用), 默认单例.
+ */
+export async function shareNetworkLink(opts) {
+    try {
+        let registry = opts?.registry;
+        if (!registry) {
+            await warmAgentRegistry();
+            registry = getAgentRegistry();
+        }
+        if (!registry.ready || !registry.storeAddress) {
+            return { ok: false, error: 'OrbitDB registry 未就绪 (离线模式). 备选: 把 registry 列表发布成 https://.../registry 端点分享' };
+        }
+        const name = encodeURIComponent(String(opts?.name || registry.storeName || 'bolloon-network'));
+        return { ok: true, link: `orbitdb://${registry.storeAddress}?name=${name}` };
+    }
+    catch (e) {
+        return { ok: false, error: `生成分享链接失败: ${String(e?.message || e).slice(0, 160)}` };
+    }
+}
+// ============ 自动加入 (消息触发) ============
+/**
+ * 自动加入入口: 文本里检测到 gateway 链接 → 幂等 joinNetwork.
+ * 返回给 agent 的通知字符串 (无链接 / 已在网络 → null, 静默).
+ * 设计: 加入是自由的 (只拉服务列表, 不花钱), 支付仍走 payment-gate 安全链.
+ * deps.registry 可注入 (测试用), 默认单例.
+ */
+export async function maybeAutoJoinGateway(text, deps) {
+    const link = detectGatewayLink(text);
+    if (!link)
+        return null;
+    try {
+        const r = await joinNetwork(link, deps);
+        if (r.ok && r.already)
+            return null; // 已在网络, 静默
+        if (r.ok) {
+            const netName = r.networkName ? `「${r.networkName}」` : ''; // URLSearchParams 已 decode
+            return `🆕 已自动加入 Agent 网络${netName} (${r.linkKind}): 拉取 ${r.total} 个服务, 新增 ${r.joined} 个。用 gateway_status 查看, gateway_call 调用网络里的服务。`;
+        }
+        return `⚠️ 检测到 Agent 网络链接 (${r.linkKind || 'unknown'}) 但加入失败: ${r.error}`;
+    }
+    catch (e) {
+        return `⚠️ 自动加入 Agent 网络失败: ${String(e?.message || e).slice(0, 160)}`;
+    }
+}

package/dist/agents/payment-approval.js

@@ -0,0 +1,142 @@
+/**
+ * payment-approval.ts — 人工支付审批 (2026-08-13)
+ *
+ * YAML 支付验证门 (payment-gate) 判定 confirm 的支付请求 → 进入人工审批流程:
+ *   - createApproval: 创建 pending 审批请求 (持久化)
+ *   - approve(id): 人工批准 → 自动重试支付 (executor)
+ *   - reject(id): 人工拒绝
+ *   - list/pending: 查询
+ *
+ * 持久化: ~/.bolloon/payment-approvals.json
+ * 审批后执行: 注入 executor (serviceCall 重试 / 链上支付), 由调用方提供.
+ */
+import * as fs from 'fs/promises';
+import * as os from 'os';
+import * as path from 'path';
+const home = () => process.env.HOME || os.homedir() || '/tmp';
+let _executor = null;
+/** 注入批准后执行器 (serviceCall 重试 / 链上支付) */
+export function setApprovalExecutor(fn) {
+    _executor = fn;
+}
+export class PaymentApprovalStore {
+    file;
+    approvals = [];
+    constructor(file = path.join(home(), '.bolloon', 'payment-approvals.json')) {
+        this.file = file;
+    }
+    async load() {
+        try {
+            const raw = JSON.parse(await fs.readFile(this.file, 'utf-8'));
+            if (Array.isArray(raw))
+                this.approvals = raw;
+        }
+        catch {
+            this.approvals = [];
+        }
+    }
+    async persist() {
+        try {
+            await fs.mkdir(path.dirname(this.file), { recursive: true });
+            await fs.writeFile(this.file, JSON.stringify(this.approvals, null, 2), 'utf-8');
+        }
+        catch { /* 静默 */ }
+    }
+    /** 创建审批请求 (pending) */
+    async create(req) {
+        await this.load();
+        const approval = {
+            id: `pay-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`,
+            service: req.service,
+            amount: req.amount,
+            recipient: req.recipient,
+            reason: req.reason,
+            status: 'pending',
+            createdAt: Date.now(),
+            retryPayload: req.retryPayload,
+        };
+        this.approvals.push(approval);
+        await this.persist();
+        return approval;
+    }
+    /** 待审批列表 */
+    async pending() {
+        await this.load();
+        return this.approvals.filter((a) => a.status === 'pending');
+    }
+    /** 全部 (含历史) */
+    async list() {
+        await this.load();
+        return [...this.approvals].reverse();
+    }
+    async get(id) {
+        await this.load();
+        return this.approvals.find((a) => a.id === id) ?? null;
+    }
+    /**
+     * 人工批准 → 执行支付 (executor) → executed/failed.
+     * 未注入 executor 时直接标记 approved (调用方自行处理).
+     */
+    async approve(id, approver = 'user') {
+        await this.load();
+        const a = this.approvals.find((x) => x.id === id);
+        if (!a)
+            return { ok: false, error: `审批 ${id} 不存在` };
+        if (a.status !== 'pending')
+            return { ok: false, error: `审批 ${id} 状态 ${a.status}, 不可批准` };
+        a.status = 'approved';
+        a.decidedAt = Date.now();
+        await this.persist();
+        // 批准后执行支付
+        if (_executor) {
+            const r = await _executor(a);
+            a.status = r.ok ? 'executed' : 'failed';
+            a.result = r.ok ? r.result : r.error;
+            await this.persist();
+            if (!r.ok)
+                return { ok: false, approval: a, error: r.error };
+        }
+        return { ok: true, approval: a };
+    }
+    /** 人工拒绝 */
+    async reject(id, approver = 'user') {
+        await this.load();
+        const a = this.approvals.find((x) => x.id === id);
+        if (!a)
+            return { ok: false, error: `审批 ${id} 不存在` };
+        if (a.status !== 'pending')
+            return { ok: false, error: `审批 ${id} 状态 ${a.status}, 不可拒绝` };
+        a.status = 'rejected';
+        a.decidedAt = Date.now();
+        await this.persist();
+        return { ok: true, approval: a };
+    }
+    /** 清理过期 pending (超时自动标记 rejected) */
+    async expireStale(timeoutMs = 60 * 60 * 1000) {
+        await this.load();
+        const now = Date.now();
+        let expired = 0;
+        for (const a of this.approvals) {
+            if (a.status === 'pending' && now - a.createdAt > timeoutMs) {
+                a.status = 'rejected';
+                a.decidedAt = now;
+                a.result = '审批超时自动拒绝';
+                expired++;
+            }
+        }
+        if (expired > 0)
+            await this.persist();
+        return expired;
+    }
+}
+let _store = null;
+/** 单例 */
+export function getApprovalStore() {
+    if (!_store)
+        _store = new PaymentApprovalStore();
+    return _store;
+}
+export function resetApprovalStore() {
+    _store = null;
+    _executor = null;
+}

package/dist/agents/payment-gate.js

@@ -0,0 +1,99 @@
+/**
+ * payment-gate.ts — YAML 驱动的支付验证门 (2026-08-13)
+ *
+ * 用户要求: 智能体支付不能全部交给 AI, 需要 YAML 验证流程.
+ * 设计 (参考 Hermes write_approval 配置驱动 + arXiv:2605.30998):
+ *   - payment-policy.yaml 声明式规则 (allow/confirm/deny)
+ *   - 支付请求按规则链逐条匹配 → decision
+ *   - deny 不可覆盖; confirm 返回 pending 等待人工审批 (不自动执行)
+ *
+ * 加载: ~/.bolloon/payment-policy.yaml (不存在则用内置默认 payment-policy.yaml)
+ */
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import * as yaml from 'js-yaml';
+const home = () => process.env.HOME || os.homedir() || '/tmp';
+/** 支付验证门: 加载 YAML 并评估 */
+export class PaymentGate {
+    policy = null;
+    policyPath;
+    constructor(policyPath = path.join(home(), '.bolloon', 'payment-policy.yaml')) {
+        this.policyPath = policyPath;
+    }
+    /** 加载 YAML (本地文件优先, 否则内置默认) */
+    load() {
+        if (this.policy)
+            return this.policy;
+        const candidates = [
+            this.policyPath,
+            path.resolve(process.cwd(), 'src/agents/payment-policy.yaml'),
+        ];
+        for (const f of candidates) {
+            try {
+                if (fs.existsSync(f)) {
+                    this.policy = yaml.load(fs.readFileSync(f, 'utf-8'));
+                    return this.policy;
+                }
+            }
+            catch { /* 下一个 */ }
+        }
+        this.policy = { default_action: 'confirm', default_reason: '未命中任何支付规则, 需要人工确认' };
+        return this.policy;
+    }
+    /**
+     * 评估支付请求 (按规则链, 顺序匹配第一条命中).
+     * 流程: 硬限制 (超限即 deny) → 规则链 (allow/confirm/deny) → 默认.
+     */
+    evaluate(intent) {
+        const p = this.load();
+        const service = String(intent.service || '').toLowerCase();
+        const recipient = String(intent.recipient || '').toLowerCase();
+        const amount = Number(intent.amount) || 0;
+        const limits = {
+            maxPerTransaction: p.limits?.max_per_transaction ?? 1,
+            maxDailyTotal: p.limits?.max_daily_total ?? 10,
+        };
+        // 0. 硬限制: 超单笔/日限 → deny (无论规则)
+        if (amount > limits.maxPerTransaction) {
+            return { decision: 'deny', reason: `单笔超限: ${amount} > ${limits.maxPerTransaction}`, requiresApproval: false, limits };
+        }
+        // 1. 规则链 (顺序匹配)
+        for (const rule of p.rules ?? []) {
+            const matchesService = !rule.services || rule.services.some((s) => s.toLowerCase() === service);
+            const matchesRecipient = !rule.recipients || rule.recipients.some((r) => r.toLowerCase() === recipient);
+            const matchesAmount = rule.max_amount === undefined || amount <= rule.max_amount;
+            if (matchesService && matchesRecipient && matchesAmount) {
+                return {
+                    decision: rule.action,
+                    reason: rule.reason || rule.description || `规则 ${rule.id} 命中`,
+                    ruleId: rule.id,
+                    requiresApproval: rule.action === 'confirm',
+                    limits,
+                };
+            }
+        }
+        // 2. 默认
+        return {
+            decision: p.default_action ?? 'confirm',
+            reason: p.default_reason || '默认: 需人工确认',
+            requiresApproval: (p.default_action ?? 'confirm') === 'confirm',
+            limits,
+        };
+    }
+    /** 快捷: 是否允许 (allow = true; confirm/deny = false 且不自动) */
+    isAllowed(intent) {
+        const v = this.evaluate(intent);
+        return { allowed: v.decision === 'allow', verdict: v };
+    }
+}
+let _gate = null;
+/** 单例 */
+export function getPaymentGate() {
+    if (!_gate)
+        _gate = new PaymentGate();
+    return _gate;
+}
+export function resetPaymentGate() {
+    _gate = null;
+}