@bolloon/bolloon-agent 0.5.4 → 0.5.5

package/dist/web/routes-mobile-tasks.js

@@ -167,7 +167,8 @@ export function registerMobileTaskRoutes(app, opts = {}) {
             if (kind === 'group_create' || kind === 'group_join' || kind === 'group_leave') {
                 const { createGroup, joinGroup, leaveGroup } = await import('../agents/gateway-group.js');
                 if (kind === 'group_create') {
-                    const r = await createGroup(String(request.groupRef || '').trim());
+                    // 手机端建群与 Web 端同一语义 (微信式群聊) ⇒ 显式声明开放写入
+                    const r = await createGroup(String(request.groupRef || '').trim(), { acl: 'open' });
                     if (!r.ok || !r.group)
                         return fail(res, 409, 'GROUP_CREATE_FAILED', `建群失败: ${r.error || '未知原因'}`);
                     return res.json({ ok: true, kind, group: { id: r.group.id, name: r.group.name }, text: `已建群「${r.group.name}」` });

package/dist/web/server-storage.js

@@ -11,6 +11,8 @@
  * Channel / Session / Task / SessionMessage / SessionSummary type 来自 ./server-types.ts.
  */
 import * as fs from 'fs/promises';
+import * as path from 'path';
+import { channelsPaths, assertTestWriteTarget } from '../agents/agent-identity-store.js';
 import { CHANNELS_PATH, SESSION_CACHE_PATH, TASK_QUEUE_PATH, THEME_PATH, } from './server-types.js';
 import { saveWindow as saveSessionWindow, loadWindow as loadSessionWindow } from '../bootstrap/session-window.js';
 import { parentsSatisfied } from './task-deps.js';
@@ -42,7 +44,7 @@ export async function updateChannels(fn) {
 }
 async function rawLoadChannels() {
     try {
-        const data = await fs.readFile(CHANNELS_PATH, 'utf-8');
+        const data = await fs.readFile(channelsPathNow(), 'utf-8');
         return JSON.parse(data);
     }
     catch (readErr) {
@@ -50,11 +52,11 @@ async function rawLoadChannels() {
         if (readErr?.code !== 'ENOENT') {
             console.warn('[loadChannels] channels.json 解析失败, 尝试从 .tmp 恢复:', readErr?.message?.slice(0, 80));
             try {
-                const tmpData = await fs.readFile(CHANNELS_PATH + '.tmp', 'utf-8');
+                const tmpData = await fs.readFile(channelsPathNow() + '.tmp', 'utf-8');
                 const recovered = JSON.parse(tmpData);
                 console.log(`[loadChannels] 从 .tmp 恢复成功: ${recovered.length} 个 channel`);
                 // 立即把恢复的内容写回主文件
-                await fs.writeFile(CHANNELS_PATH, tmpData, 'utf-8');
+                await fs.writeFile(channelsPathNow(), tmpData, 'utf-8');
                 return recovered;
             }
             catch (tmpErr) {
@@ -64,6 +66,22 @@ async function rawLoadChannels() {
         return [];
     }
 }
+/**
+ * channels.json 的路径**每次调用时**解析 (2026-10-01, 数据事故修复)。
+ *
+ * 事故: `server-types.CHANNELS_PATH` 是 import 时定死的常量 (按那一刻的 HOME 解析),
+ *   于是测试里后设的 process.env.HOME **完全不起作用** ⇒ 测试夹具把用户的真实
+ *   ~/.bolloon/sessions/channels.json 整表覆盖 (4 个智能体只剩 1 条)。
+ *   现在改成按**当前** HOME 解析 (与 CLI 侧 agent-identity-store.channelsPaths 同一口径)。
+ */
+function channelsPathNow() {
+    try {
+        return channelsPaths()[0];
+    }
+    catch {
+        return CHANNELS_PATH;
+    }
+}
 async function rawSaveChannels(channels) {
     const sanitized = channels.map(ch => {
         const { didDocument: _omit, ...rest } = ch;
@@ -75,9 +93,12 @@ async function rawSaveChannels(channels) {
     lastChannelsJson = jsonStr;
     console.log('[saveChannels] 保存频道数据, 数量:', sanitized.length);
     // 2026-07-24: 原子写入 — 先写 .tmp 再 rename, 防止崩溃导致 channels.json 损坏
-    const tmpPath = CHANNELS_PATH + '.tmp';
+    const target = channelsPathNow();
+    // 测试进程只允许写临时目录 —— 真实数据目录一律拒绝 (第二道闸)
+    assertTestWriteTarget(path.dirname(path.dirname(target)), 'channels.json');
+    const tmpPath = target + '.tmp';
     await fs.writeFile(tmpPath, jsonStr, 'utf-8');
-    await fs.rename(tmpPath, CHANNELS_PATH);
+    await fs.rename(tmpPath, target);
     lastChannelsWriteAt = Date.now();
 }
 export async function loadChannels() {

package/dist/web/server.js

@@ -4034,6 +4034,8 @@ fetchState();
             const r = await createGroup(String(req.body?.name || '').trim(), {
                 from: String(req.body?.from || '').trim() || undefined,
                 hello: req.body?.hello ? String(req.body.hello) : undefined,
+                // 微信式群聊: 拿到邀请链接的人都能发言 ⇒ 显式声明 (2026-10-01 起不再是隐式默认)
+                acl: 'open',
             });
             if (!r.ok)
                 return res.status(400).json({ error: r.error });

package/dist/web/sw.js

@@ -6,7 +6,7 @@
  * 现在: 代码类资源 (html/js/css/json) 一律 **network-first** (拿不到网才回退缓存),
  *   缓存名带版本号, activate 时清掉所有旧缓存; 图标等静态资源仍 cache-first。
  */
-const CACHE = 'bolloon-mobile-v0.5.4';
+const CACHE = 'bolloon-mobile-v0.5.5';
 const SHELL = [
   './mobile.html',
   './mobile.css',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bolloon/bolloon-agent",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "type": "module",
   "description": "P2P AI Document Agent - 全局安装后执行 `bolloon` 启动产品",
   "main": "dist/cli-entry.js",
@@ -71,6 +71,7 @@
     "@chainsafe/libp2p-noise": "^17.0.0",
     "@chainsafe/libp2p-yamux": "^8.0.1",
     "@diap/sdk": "^0.2.7",
+    "@helia/bitswap": "^4.0.20",
     "@ipld/dag-cbor": "^9.2.7",
     "@libp2p/autonat": "^3.0.28",
     "@libp2p/circuit-relay-v2": "^4.2.13",