@bolloon/bolloon-agent 0.4.23 → 0.4.24

package/dist/ios/routes-x402-info.js

@@ -0,0 +1,194 @@
+/**
+ * routes-x402-info.ts — 微支付信息服务 (x402) 的 HTTP 接口
+ *
+ *   免费可读 (用于发现/索引/比价):
+ *     GET  /api/x402/info              本机已发布的信息列表 (只有元数据)
+ *     GET  /api/x402/info/:id/meta     单条元数据
+ *   付费才给内容 (x402 标准 402 流程):
+ *     GET  /api/x402/info/:id          无 X-PAYMENT → 402 (accepts …); 付款通过 → 200 带签名信封
+ *   管理:
+ *     POST   /api/x402/info            发布 (body: title/category/content/price/source)
+ *     DELETE /api/x402/info/:id        下架
+ *   买方辅助 (电脑端及手机端代理调用):
+ *     POST /api/x402/info/buy          服务端代付并验真 (url, max_payment, allow_local_dev)
+ *     POST /api/x402/info/verify       验真一个信封 (信封 JSON 或 URL)
+ *
+ * 手机端: 通过 desktopBaseUrl 转发这四个接口即可完成"浏览 → 购买 → 验真"。
+ */
+import * as path from 'path';
+import * as os from 'os';
+import { listInfo, getStoredInfo, publishInfo, removeInfo, buildPaymentRequired, checkAndSettlePayment, buyInfo, } from '../agents/x402/paid-info-store.js';
+import { buildSignedEnvelope, verifyEnvelope, summarizeVerify } from '../agents/x402/paid-info-protocol.js';
+import { makeDidResolver } from '../agents/x402/paid-info-tools.js';
+/** 本机 DIAP 身份 (签发信封用) — 缺失时明确报错, 不静默造一个 */
+async function loadProviderKeypair() {
+    try {
+        const { KeyManager } = await import('@diap/sdk');
+        const file = path.join(os.homedir(), '.bolloon', 'identity.json');
+        return await KeyManager.fromFile(file);
+    }
+    catch {
+        return null;
+    }
+}
+export function registerX402InfoRoutes(app) {
+    // ---- 列表 / 元数据 (免费) ----
+    app.get('/api/x402/info', async (req, res) => {
+        try {
+            const cat = String(req.query?.category || '').toLowerCase();
+            const items = (await listInfo()).filter((i) => !cat || i.category === cat);
+            res.json({ count: items.length, items });
+        }
+        catch (e) {
+            res.status(500).json({ error: e?.message });
+        }
+    });
+    app.get('/api/x402/info/:id/meta', async (req, res) => {
+        const stored = await getStoredInfo(String(req.params.id));
+        if (!stored)
+            return res.status(404).json({ error: '信息不存在' });
+        res.json({ item: stored.item });
+    });
+    // ---- 发布 / 下架 ----
+    app.post('/api/x402/info', async (req, res) => {
+        try {
+            const b = req.body || {};
+            const kp = await loadProviderKeypair();
+            if (!kp?.did) {
+                return res.status(400).json({ error: '缺少本机 DIAP 身份 (~/.bolloon/identity.json) — 先 publish_did 或跑 bolloon setup' });
+            }
+            const item = await publishInfo({
+                title: String(b.title || ''),
+                category: b.category,
+                content: String(b.content ?? ''),
+                description: b.description,
+                price: {
+                    amount: String(b.price?.amount ?? '0'),
+                    currency: b.price?.currency === 'ETH' ? 'ETH' : 'USDC',
+                    network: String(b.price?.network || 'base-sepolia'),
+                    payTo: String(b.price?.payTo || ''),
+                },
+                source: {
+                    kind: b.source?.kind || 'self',
+                    refs: Array.isArray(b.source?.refs) ? b.source.refs.map(String) : [],
+                    note: b.source?.note,
+                },
+                provider: { did: kp.did, name: b.providerName || undefined, agentId: b.agentId || undefined },
+                contentCid: b.contentCid,
+            });
+            res.json({ ok: true, item });
+        }
+        catch (e) {
+            res.status(400).json({ error: e?.message });
+        }
+    });
+    app.delete('/api/x402/info/:id', async (req, res) => {
+        const ok = await removeInfo(String(req.params.id));
+        res.json({ ok });
+    });
+    // ---- 付费取内容 (x402 核心路径) ----
+    app.get('/api/x402/info/:id', async (req, res) => {
+        try {
+            const id = String(req.params.id);
+            const stored = await getStoredInfo(id);
+            if (!stored)
+                return res.status(404).json({ error: '信息不存在' });
+            const baseUrl = `${req.protocol || 'http'}://${req.headers?.host || `127.0.0.1:${process.env.PORT || 54188}`}`;
+            const resourceUrl = `${baseUrl}/api/x402/info/${id}`;
+            const requirements = buildPaymentRequired(stored.item, resourceUrl);
+            const paymentHeader = req.headers?.['x-payment'] || req.headers?.['X-PAYMENT'];
+            // 未付款 → 标准 402
+            if (!paymentHeader) {
+                return res.status(402)
+                    .set('X-PAYMENT-REQUIRED', JSON.stringify(requirements.accepts))
+                    .json({ ...requirements, error: '需要 x402 微支付' });
+            }
+            // 付款校验 + 结算
+            const pay = await checkAndSettlePayment({
+                paymentHeader: String(paymentHeader),
+                requirements,
+            });
+            if (!pay.ok) {
+                return res.status(402).json({ ...requirements, error: pay.error });
+            }
+            // 签发信封 (内容 + DIAP Ed25519 签名 + 支付凭据绑定)
+            const kp = await loadProviderKeypair();
+            if (!kp) {
+                return res.status(500).json({ error: '缺少本机 DIAP 身份, 无法签发信封 (已收到的付款请人工处理)' });
+            }
+            const envelope = await buildSignedEnvelope({
+                item: stored.item,
+                content: stored.content,
+                keypair: kp,
+                payment: {
+                    mode: pay.mode === 'facilitator' ? 'facilitator' : 'local-dev',
+                    receipt: String(pay.receipt || ''),
+                    txHash: pay.txHash,
+                    network: pay.network || stored.item.price.network,
+                    amount: stored.item.price.amount,
+                    currency: stored.item.price.currency,
+                    payer: pay.payer,
+                    settledAt: new Date().toISOString(),
+                },
+            });
+            res.set('X-PAYMENT-RESPONSE', pay.receipt || '');
+            res.json(envelope);
+        }
+        catch (e) {
+            res.status(500).json({ error: e?.message });
+        }
+    });
+    // ---- 买方辅助: 代付 + 验真 ----
+    app.post('/api/x402/info/buy', async (req, res) => {
+        try {
+            const b = req.body || {};
+            const url = String(b.url || '');
+            if (!url)
+                return res.status(400).json({ error: 'url 必填' });
+            const privateKey = String(b.walletPrivateKey || process.env.X402_PRIVATE_KEY || '');
+            const r = await buyInfo({
+                url,
+                privateKey: privateKey || undefined,
+                maxPaymentAmount: b.maxPayment ? String(b.maxPayment) : undefined,
+                network: b.network ? String(b.network) : undefined,
+                allowLocalDev: b.allowLocalDev === true || process.env.BOLLOON_X402_LOCAL_VERIFY === '1',
+                resolveDid: makeDidResolver(),
+                expectItemId: b.itemId ? String(b.itemId) : undefined,
+            });
+            if (!r.ok)
+                return res.status(400).json({ error: r.error, status: r.status });
+            res.json({
+                ok: true,
+                item: r.envelope?.item,
+                content: r.envelope?.content,
+                envelope: r.envelope,
+                verify: r.verify,
+                verifySummary: r.verify ? summarizeVerify(r.verify) : null,
+                payment: r.payment,
+            });
+        }
+        catch (e) {
+            res.status(500).json({ error: e?.message });
+        }
+    });
+    app.post('/api/x402/info/verify', async (req, res) => {
+        try {
+            const b = req.body || {};
+            let env = b.envelope;
+            if (!env && b.url) {
+                const r = await fetch(String(b.url));
+                env = await r.json();
+            }
+            if (!env)
+                return res.status(400).json({ error: '需要 envelope 或 url' });
+            const report = await verifyEnvelope(env, {
+                resolveDid: makeDidResolver(),
+                expectItemId: b.itemId ? String(b.itemId) : undefined,
+            });
+            res.json({ ok: report.ok, report, summary: summarizeVerify(report) });
+        }
+        catch (e) {
+            res.status(500).json({ error: e?.message });
+        }
+    });
+}

package/dist/ios/server.js

@@ -13,6 +13,8 @@ import { registerJudgmentsRoutes } from './routes-judgments.js';
 import { registerLlmConfigRoutes } from './routes-llm-config.js';
 import { registerExternalEngineRoutes } from './routes-external-engines.js';
 import { registerTaskRoutes } from './routes-tasks.js';
+// 2026-09-13: 微支付信息服务 (x402) 路由
+import { registerX402InfoRoutes } from './routes-x402-info.js';
 import { loadPeerTier, recordInteraction, tierLabel } from '../social/dunbar-tier.js';
 import { registerHearthRoutes } from './routes-hearth.js';
 import { loadOrCreateAgentIdentity } from '../agents/agent-identity.js';
@@ -2406,6 +2408,41 @@ export async function createWebServer(port = 3000, options = {}) {
             catch (hbErr) {
                 console.warn('[heartbeat] 启动失败 (non-fatal):', hbErr?.message);
             }
+            // 2026-09-13: 定时任务调度器 (clock) — 带 tick 锁 + 执行记录 + 看门狗 + 勿扰闸门.
+            //   勿扰: 主任务 (人类这条消息跑 agent) 期间 tick 会被 resolveDnd 挡下并记 deferred,
+            //   主任务结束后下一个 tick 补跑, 不抢前台、不刷屏 (事件只走 monitor.log / SSE)。
+            try {
+                const { startCronScheduler, setCronLogSink, enterMainTask, exitMainTask } = await import('../cron/index.js');
+                setCronLogSink((evt) => {
+                    try {
+                        broadcast({ type: 'cron', ...evt });
+                    }
+                    catch { /* 广播失败不致命 */ }
+                });
+                const cronHandle = await startCronScheduler({
+                    intervalMs: Number(process.env.BOLLOON_CRON_HEARTBEAT_MS) || 60_000,
+                    exec: async (job) => {
+                        const channels = await loadChannels();
+                        const target = channels.find((c) => c.currentSessionId) || channels[0];
+                        if (!target)
+                            throw new Error('无可用 channel, 跳过定时任务');
+                        const agent = await getAgentForChannel(target.id);
+                        if (!agent || typeof agent.promptStream !== 'function') {
+                            throw new Error('无可用 agent, 跳过定时任务');
+                        }
+                        // 前缀 [cron] 标记后台执行来源 (供审计/日志区分人类消息与定时任务)
+                        await agent.promptStream(`[cron] ${job.name}: ${job.prompt}`, () => { }, undefined, target.id);
+                    },
+                });
+                global.cronScheduler = cronHandle;
+                if (!cronHandle.disabled)
+                    console.log(`[cron] 调度器已启动 (每 ${Math.round((Number(process.env.BOLLOON_CRON_HEARTBEAT_MS) || 60_000) / 1000)}s 一轮, tick 带锁 + DND)`);
+                // 暴露给 /message 使用 (主任务闸门)
+                global.__bolloonMainTask = { enterMainTask, exitMainTask };
+            }
+            catch (cronErr) {
+                console.warn('[cron] 调度器启动失败 (non-fatal):', cronErr?.message);
+            }
             // 社交决策: 让本地 agent (用第一个本地 channel 的身份) 判断是否主动联络某 peer
             // 目标感知: ctx.goal 是当前要达成的目标, 决策应服务于它, 达成后可声明 goalAchieved 进入 RESTING
             async function llmSocialDecide(ctx) {
@@ -2821,6 +2858,180 @@ ${goalDesc}
             res.status(500).json({ error: e?.message });
         }
     });
+    // 2026-09-08: 手机端数据同步 — 一次拉取电脑端全部数据 (登录后手机端同步用; CORS 已在中间件开启)
+    app.get('/api/mobile/snapshot', async (_req, res) => {
+        try {
+            const HOME = process.env.HOME || '/tmp';
+            const out = { ok: true, ts: Date.now(), source: 'desktop' };
+            // 活跃身份 / 会话 (channels.json 是唯一持久化点)
+            try {
+                out.active = JSON.parse(await fs.readFile(`${HOME}/.bolloon/active-channel.json`, 'utf-8'));
+            }
+            catch {
+                out.active = null;
+            }
+            try {
+                const chs = JSON.parse(await fs.readFile(`${HOME}/.bolloon/sessions/channels.json`, 'utf-8'));
+                out.channels = Array.isArray(chs) ? chs : [];
+            }
+            catch {
+                out.channels = [];
+            }
+            // 判断力库
+            try {
+                const j = await import('../pi-ecosystem-judgment/index.js');
+                out.judgments = await j.getAllJudgments();
+            }
+            catch (e) {
+                out.judgments = [];
+                out.judgmentsError = e?.message;
+            }
+            // 本机 skills (~/.bolloon/skills/) — 手机端「智能体控制 (MCP / Skills)」页读取
+            try {
+                const { loadSkillsFromPaths, defaultSkillPaths } = await import('../agents/skill-loader.js');
+                const list = await loadSkillsFromPaths(defaultSkillPaths());
+                out.skills = list.map((k) => ({ name: String(k.name || ''), description: String(k.description || '').slice(0, 200) }));
+            }
+            catch (e) {
+                out.skills = [];
+                out.skillsError = e?.message;
+            }
+            // Agent 服务 Registry (发现层)
+            try {
+                const { getAgentRegistry } = await import('../agents/agent-registry.js');
+                out.services = await getAgentRegistry().list();
+            }
+            catch {
+                out.services = [];
+            }
+            // 数字资源
+            try {
+                const rs = await import('../agents/resource-store.js');
+                out.resources = await rs.listResources({});
+            }
+            catch {
+                out.resources = [];
+            }
+            // 已加入网络
+            try {
+                const { listJoinedNetworks } = await import('../agents/gateway-network.js');
+                out.networks = await listJoinedNetworks();
+            }
+            catch {
+                out.networks = [];
+            }
+            out.counts = {
+                channels: (out.channels || []).length,
+                judgments: (out.judgments || []).length,
+                services: (out.services || []).length,
+                resources: (out.resources || []).length,
+                networks: (out.networks || []).length,
+            };
+            res.json(out);
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e?.message });
+        }
+    });
+    // 2026-09-08: 手机端 P2P 拨入信息 — 手机(WebView)不能 listen, 只能主动拨桌面的 /ws 地址
+    app.get('/api/p2p/mobile-connect', async (_req, res) => {
+        try {
+            const { p2pNetwork } = await import('../network/p2p.js');
+            const wsAddrs = p2pNetwork.getWsMultiaddrs();
+            // 2026-09-11: 中继语义 — 这些 /ws 地址同时是 circuit relay v2 中继地址。
+            // 手机 dial 它之后即可预约, 拿到 <relay>/p2p-circuit/p2p/<手机PeerId> 这个「可拨入地址」。
+            const relay = p2pNetwork.getRelayServiceInfo();
+            const relayAddrs = relay.enabled ? p2pNetwork.getRelayAddrs() : [];
+            res.json({
+                ok: true,
+                peerId: p2pNetwork.getNodePeerId(),
+                wsAddrs,
+                // 单独字段: 明确「这是中继, 不是普通对端」(手机端看到 relayAddrs 就该去预约, 而不是只当 bootstrap)
+                isRelay: relay.enabled,
+                relayAddrs,
+                relayProtocol: relay.protocol,
+                relayReservations: relay.reservations,
+                relayMaxReservations: relay.maxReservations,
+                hint: wsAddrs.length
+                    ? (relay.enabled
+                        ? '拨 relayAddrs 里的任意地址 → 手机会自动预约中继并拿到 /p2p-circuit 可拨入地址'
+                        : '桌面 P2P 在跑, 但中继服务未启用 (中继地址暂不可用; 手机只连不预约)')
+                    : '桌面 P2P 未启动或未监听 ws',
+            });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e?.message });
+        }
+    });
+    // 2026-09-08: 手机端 OrbitDB 库级复制 — 列可复制 store / 读全量条目 / 合并写回
+    app.get('/api/orbitdb/stores', async (_req, res) => {
+        try {
+            const out = [{ name: 'bolloon-cid-store', type: 'keyvalue' }];
+            try {
+                const { getAgentRegistry } = await import('../agents/agent-registry.js');
+                const reg = getAgentRegistry();
+                if (reg && typeof reg.warm === 'function')
+                    await reg.warm();
+                if (reg?.storeName)
+                    out.push({ name: String(reg.storeName), type: 'keyvalue', address: reg.storeAddress || undefined });
+            }
+            catch { /* registry 未就绪 → 只给 cid store */ }
+            res.json({ ok: true, stores: out });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e?.message });
+        }
+    });
+    app.get('/api/orbitdb/entries', async (req, res) => {
+        try {
+            const name = String(req.query?.name || '').trim();
+            if (!name)
+                return res.status(400).json({ ok: false, error: 'name 必填' });
+            const { getCIDDatabase } = await import('../orbitdb/cid-database.js');
+            const store = await getCIDDatabase().openStore(name, 'keyvalue');
+            const all = await store.all();
+            res.json({ ok: true, name, address: store.address, entries: all, count: all.length });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e?.message });
+        }
+    });
+    app.post('/api/orbitdb/merge', async (req, res) => {
+        try {
+            const name = String(req.body?.name || '').trim();
+            const entries = Array.isArray(req.body?.entries) ? req.body.entries : [];
+            if (!name)
+                return res.status(400).json({ ok: false, error: 'name 必填' });
+            const { getCIDDatabase } = await import('../orbitdb/cid-database.js');
+            const store = await getCIDDatabase().openStore(name, 'keyvalue');
+            let written = 0;
+            for (const e of entries) {
+                if (!e || typeof e.key !== 'string')
+                    continue;
+                await store.put(e.key, e.value);
+                written++;
+            }
+            res.json({ ok: true, name, address: store.address, written });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e?.message });
+        }
+    });
+    // 2026-09-15: agent-delegate (manifest 协议 + agent_delegate) **启动即挂载**
+    //   文档 bolloon-gateway-join.md 第 3 节要求 POST /api/agent/register 可用;
+    //   之前只在 iroh 懒初始化 (/api/iroh/info 首次访问) 的收尾挂上 → 没触发时恒 404。
+    let agentDelegateMounted = false;
+    try {
+        const delegateTransport = createIrohDelegateTransport({ verbose: true });
+        // 注意: createAgentDelegateApp 内部声明的是绝对路径 (/api/agent/...),
+        // 所以挂载时**不能**再带 '/api/agent' 前缀 (否则变成 /api/agent/api/agent/... 恒 404)
+        app.use(createAgentDelegateApp(delegateTransport));
+        agentDelegateMounted = true;
+        console.log('[agent-delegate] 已挂载到 /api/agent (启动即用: local-manifest / register / pick / delegate)');
+    }
+    catch (e) {
+        console.warn('[agent-delegate] 挂载失败 (非致命):', e?.message);
+    }
     // 2026-08-14: Agent Gateway — 网络加入 / 分享链接 / 成员 / 状态 (入口要小: 一条链接)
     app.post('/api/gateway/join', async (req, res) => {
         try {
@@ -2857,6 +3068,36 @@ ${goalDesc}
             res.status(500).json({ error: e?.message });
         }
     });
+    // 2026-09-15: 文档驱动「加入全球智能体网络」— 人类/手机只给一句 read <doc>, 这里做落地执行.
+    //   GET: 查入网态 (joined/url/did/networkLink); POST: 真执行 (可指定 url/name/capabilities/force).
+    app.get('/api/gateway/join-global', async (_req, res) => {
+        try {
+            const { getGatewayJoinState, DEFAULT_GATEWAY_JOIN_DOC } = await import('../agents/gateway-join.js');
+            const state = await getGatewayJoinState();
+            res.json({ ok: true, joined: !!state, docUrl: DEFAULT_GATEWAY_JOIN_DOC, state });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e?.message });
+        }
+    });
+    app.post('/api/gateway/join-global', async (req, res) => {
+        try {
+            const { joinGlobalGateway } = await import('../agents/gateway-join.js');
+            const identity = await loadOrCreateUserIdentity();
+            const caps = String(req.body?.capabilities || '').split(',').map((s) => s.trim()).filter(Boolean);
+            const r = await joinGlobalGateway({
+                url: String(req.body?.url || '').trim() || undefined,
+                did: identity?.did || undefined,
+                name: String(req.body?.name || '').trim() || identity?.name || undefined,
+                capabilities: caps.length ? caps : undefined,
+                force: req.body?.force === true,
+            });
+            res.status(r.ok ? 200 : 400).json(r);
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: e?.message });
+        }
+    });
     app.get('/api/gateway/status', async (_req, res) => {
         try {
             const { gatewayStatus } = await import('../agents/agent-gateway.js');
@@ -2956,6 +3197,41 @@ ${goalDesc}
             res.status(500).json({ error: e?.message });
         }
     });
+    // 2026-09-13: 人机问答通道 (clarify) — 智能体提问, 人类在 Web/手机点选项或输入回答
+    //   智能体侧 clarify 工具 ask() → 这里广播 agent-question → 前端渲染选项按钮
+    void import('../agents/user-questions.js').then(({ userQuestions }) => {
+        userQuestions.onQuestion((q) => {
+            try {
+                broadcast({ type: 'agent-question', question: q });
+            }
+            catch { /* 广播失败不影响提问 (CLI 侧仍能看到) */ }
+        });
+    }).catch(() => { });
+    app.get('/api/questions', async (_req, res) => {
+        try {
+            const { userQuestions } = await import('../agents/user-questions.js');
+            res.json({ pending: await userQuestions.pending() });
+        }
+        catch (e) {
+            res.status(500).json({ error: e?.message });
+        }
+    });
+    // POST /api/questions/answer { id?, text } — 回答 (id 省略则回答最早的一个待处理问题)
+    app.post('/api/questions/answer', async (req, res) => {
+        try {
+            const { id, text } = req.body || {};
+            const { userQuestions } = await import('../agents/user-questions.js');
+            const r = await userQuestions.answer(id ? String(id) : null, String(text ?? ''));
+            if (!r.ok)
+                return res.status(400).json({ error: r.error });
+            // 人类回答后清掉前端提示 + 让 agent 侧的 await 立即返回
+            broadcast({ type: 'agent-question-answered', id: r.question?.id, answer: r.question?.answer });
+            res.json({ ok: true, question: r.question });
+        }
+        catch (e) {
+            res.status(500).json({ error: e?.message });
+        }
+    });
     // 2026-08-13: 人工支付审批 API — YAML 验证门 confirm 的支付请求
     app.get('/api/payments/pending', async (_req, res) => {
         try {
@@ -3571,6 +3847,19 @@ ${goalDesc}
         if (!text) {
             return res.status(400).json({ error: 'No text provided' });
         }
+        // 2026-09-13: 主任务闸门 — 人类这条消息跑 agent 期间, 后台定时任务进入勿扰 (DND).
+        //   用 res 'close' 释放 (正常结束/中断都覆盖), 不需要改动本 handler 内部的分支.
+        const mainTask = global.__bolloonMainTask;
+        if (mainTask?.enterMainTask) {
+            try {
+                mainTask.enterMainTask('web-message');
+            }
+            catch { /* 闸门失败不阻塞对话 */ }
+            res.on('close', () => { try {
+                mainTask.exitMainTask();
+            }
+            catch { /* 忽略 */ } });
+        }
         // 2026-08-02: / 斜杠命令路由 — 用户输入 /plan /todo /task 等快捷命令时,
         //   直接把命令转成结构化指令注入 contextHint, 引导 LLM 调用对应工具.
         //   前端 / 菜单插入的是 "/plan 目标; 步骤" 这类文本, 这里解析成提示.
@@ -5746,6 +6035,8 @@ ${goalDesc}
     });
     // 2026-07-06: Task Queue API 抽到 ./routes-tasks.ts
     registerTaskRoutes(app, { broadcast, getAgentForChannel });
+    // 2026-09-13: 微支付信息服务 (x402) — 发布 / 402 收款 / 买方代付 / 验真
+    registerX402InfoRoutes(app);
     // 2026-07-06: LLM/Video/Audio 配置路由抽到 ./routes-llm-config.ts
     registerLlmConfigRoutes(app);
     // 2026-07-22: 外部编码智能体 (codex/claude-code/opencode/openclaw/hermes/实验 API)
@@ -6293,15 +6584,18 @@ ${goalDesc}
             };
             irohInitialized = true;
             // 挂载 agent-delegate app (manifest 协议 + agent_delegate)
-            // 必须在 irohInitialized 之后挂, 因为适配器要监听 irohTransport.onMessage
-            try {
-                const delegateTransport = createIrohDelegateTransport({ verbose: true });
-                const delegateApp = createAgentDelegateApp(delegateTransport);
-                app.use('/api/agent', delegateApp);
-                console.log('[iroh API] agent-delegate app 已挂载到 /api/agent');
-            }
-            catch (e) {
-                console.error('[iroh API] 挂载 agent-delegate app 失败:', e);
+            // 2026-09-15: 已改为启动时提前挂载 (见 createWebServer 的 /api/agent 段), 这里不再重复挂.
+            if (!agentDelegateMounted) {
+                try {
+                    const delegateTransport = createIrohDelegateTransport({ verbose: true });
+                    const delegateApp = createAgentDelegateApp(delegateTransport);
+                    app.use(delegateApp);
+                    agentDelegateMounted = true;
+                    console.log('[iroh API] agent-delegate app 已挂载到 /api/agent (补挂)');
+                }
+                catch (e) {
+                    console.error('[iroh API] 挂载 agent-delegate app 失败:', e);
+                }
             }
             // 设置消息处理
             irohTransport.onMessage('chat', (msg) => {

package/dist/ios/sw.js

@@ -1,5 +1,12 @@
-/* Bolloon 手机端 Service Worker — app-shell 缓存, 让 iPhone 可"添加到主屏幕"独立运行 */
-const CACHE = 'bolloon-mobile-v1';
+/* Bolloon 手机端 Service Worker — app-shell 缓存, 让 iPhone 可"添加到主屏幕"独立运行
+ *
+ * 2026-09-14 修: 原来是 cache-first + 固定缓存名 (bolloon-mobile-v1) →
+ *   一旦装上, 之后每次升级 APK / 重新部署站点, WebView 里跑的仍是**旧的 mobile.js/mobile-core.js**,
+ *   表现为「改了 UI 手机上没变化」「升级后还是老界面」。
+ * 现在: 代码类资源 (html/js/css/json) 一律 **network-first** (拿不到网才回退缓存),
+ *   缓存名带版本号, activate 时清掉所有旧缓存; 图标等静态资源仍 cache-first。
+ */
+const CACHE = 'bolloon-mobile-v1.1';
 const SHELL = [
   './mobile.html',
   './mobile.css',
@@ -25,6 +32,9 @@ self.addEventListener('activate', (e) => {
   );
 });
 
+// 代码类资源: 必须联网拿最新的 (离线才回退缓存); 图标/manifest 之类可以 cache-first
+const CODE_EXT = /\.(?:html|js|mjs|css|json|webmanifest)$/i;
+
 self.addEventListener('fetch', (e) => {
   const req = e.request;
   if (req.method !== 'GET') return;
@@ -32,6 +42,20 @@ self.addEventListener('fetch', (e) => {
   try { url = new URL(req.url); } catch { return; }
   // 跨域 / API / 实时通道不缓存 (registry fetch、WebSocket 等)
   if (url.origin !== location.origin || url.pathname.includes('/api/')) return;
+
+  if (CODE_EXT.test(url.pathname) || req.mode === 'navigate') {
+    e.respondWith(
+      fetch(req).then((res) => {
+        if (res && res.ok) {
+          const copy = res.clone();
+          caches.open(CACHE).then((c) => c.put(req, copy)).catch(() => {});
+        }
+        return res;
+      }).catch(() => caches.match(req).then((hit) => hit || caches.match('./mobile.html'))),
+    );
+    return;
+  }
+
   e.respondWith(
     caches.match(req).then((hit) => hit || fetch(req).then((res) => {
       const copy = res.clone();