@bolloon/bolloon-agent 0.6.3 → 0.6.5

package/README.md

@@ -1,11 +1,13 @@
 # Bolloon
 
-**一万个智能体，为你工作。**
+**一万个智能体的世界，走进你的世界。**
 
-Bolloon 是一台跑在你自己设备上的智能体。它有自己的身份（DID）、自己的记忆、自己的技能库，
-并且能在点对点网络里**找到别的智能体、把自己的活委派出去、按结果结算**。
+Bolloon 是一个多终端的 Agent 分发网络。它带来的不是一个更大更听话的助手，而是一万个智能体
+所在的世界——每个智能体都有自己的身份（DID）、自己的记忆、自己的技能库，并且能在点对点
+网络里**找到别的智能体、把自己的活委派出去、按结果结算**。
 
-不是「又一个聊天框」，而是**一个可以互相接手工作的智能体网络**。
+不是「又一个聊天框」，而是**一个可以互相接手工作的智能体世界，在不同设备上以不同方式分发**：
+PC 上创建、手机上发现、生活中相遇。
 
 > 官网 · https://bolloon.cn　｜　安装 · `npm i -g @bolloon/bolloon-agent`（[npm 上的最新版](https://www.npmjs.com/package/@bolloon/bolloon-agent)）
 
@@ -19,9 +21,10 @@ Bolloon 是一台跑在你自己设备上的智能体。它有自己的身份（
 Bolloon 把这件事变成网络问题：**每个智能体都有身份、技能和账本**，于是它可以被别的智能体
 发现、被委派、被结算——你只需要说清目标。
 
-这也是我们的方向：让 C 端用户在自己的电脑上，拥有一条**由很多智能体组成的生产线**，
-而不只是一个对话框。我自己每天用它做的事是**可控核聚变的研究**——线圈设计、仿真、验证、
-论文形式化，由不同智能体分头接手，我只看结论。
+这也是我们的方向：不是给你更多个对话框，而是让**一万个智能体所在的世界，走进你的世界**——
+你在自己的电脑上拥有一条由很多智能体组成的生产线，它跟着你用，而不是你跟着它学。
+我自己每天用它做的事是**可控核聚变的研究**——线圈设计、仿真、验证、论文形式化，
+由不同智能体分头接手，我只看结论。
 
 ---
 
@@ -89,7 +92,7 @@ docker run -d --name bolloon -p 127.0.0.1:54188:54188 \
 **已经稳定**：CLI 交互 · 技能库与提炼 · 工具调用与类型门 · 后台进程与服务管理 · 链上任务与结算 · P2P 发现与委派。
 
 **还在早期**：多智能体之间的**经济闭环**（谁付钱、怎么分账、争议怎么裁）只有最基础的一层；
-「一万个智能体」是方向，不是今天打开就能看到的数量。
+「一个装着上万智能体的世界走进你生活」是方向，不是今天打开就能看到的世界大小。
 
 **我们不说的话**：不承诺「全自动无需照看」；链上记录不可撤销；模型能力是上限，
 智能体不会超过它用的模型。
@@ -117,7 +120,7 @@ npm run build:all
 npm start
 ```
 
-跑测试：`npx vitest run`（当前 304 个文件 / 4609 个用例）。
+跑测试：`npx vitest run`（当前 342 个文件 / 4752 个用例）。
 改了 TypeScript 后：`npx tsc --noEmit`。
 
 ---
@@ -132,13 +135,15 @@ MIT。见 [LICENSE](./LICENSE)。
 
 # Bolloon (English)
 
-**Ten thousand agents, working for you.**
+**A world of ten thousand agents, stepping into yours.**
 
-Bolloon is an agent that runs on your own machine. It has its own identity (DID), its own memory and
-its own library of skills, and it can **find other agents on a peer-to-peer network, hand work over,
-and settle by result**.
+Bolloon is a multi-device agent distribution network. It brings not a bigger, more obedient assistant,
+but a world where ten thousand agents live — each with its own identity (DID), its own memory and its
+own library of skills, able to **find other agents on a peer-to-peer network, hand work over, and
+settle by result**.
 
-Not "yet another chat box" — **a network of agents that can take over each other's work.**
+Not "yet another chat box" — **a world of agents that can take over each other's work, distributed
+differently on each device**: created on PC, discovered on phone, met in life.
 
 > Website · https://bolloon.cn　｜　Install · `npm i -g @bolloon/bolloon-agent`（[latest on npm](https://www.npmjs.com/package/@bolloon/bolloon-agent)）
 
@@ -150,8 +155,9 @@ roles: someone researches, someone writes, someone verifies, someone makes sure
 Bolloon turns that into a network problem. Every agent has an identity, skills and a ledger, so it can
 be discovered, delegated to and paid. You only have to state the goal.
 
-That is the direction: a **production line made of many agents**, running on a consumer machine —
-not a single dialogue box. I use it every day for **controlled nuclear fusion** research.
+That is the direction: not more chat boxes, but **a world of ten thousand agents stepping into yours**
+— a production line made of many agents, running on a consumer machine, following you rather than
+you following it. I use it every day for **controlled nuclear fusion** research.
 
 ## What works today
 
@@ -182,7 +188,8 @@ Node.js ≥ 18. First run walks you through picking a model provider.
 
 **Stable**: CLI · skills · tool calling · background services · on-chain tasks · P2P discovery and
 delegation.　**Early**: the economics between agents (who pays, how it splits, how disputes resolve).
-"Ten thousand agents" is a direction, not a number you will see on day one.
+"A world of ten thousand agents entering your life" is a direction, not the world-size you will see
+on day one.
 
 **What we will not claim**: fully unattended operation; reversible on-chain records; capability beyond
 the model you plug in.

package/dist/agents/intent-store.js

@@ -0,0 +1,193 @@
+/**
+ * intent-store.ts — Intent Store (2026-10-05, leo 四端 Intent Network 设计 P0)
+ *
+ * Intent = Goal 的**前身**: 一句话「我正在做 X」+ 标签/预算/期限, 未到可执行程度。
+ * 它与 goal-flywheel 的 Goal 不冲突 (Goal 是意图的可执行投影):
+ *   · intent 是轻量声明 (world/intents/ 一意图一文件)
+ *   · 升级成可执行意图时 → 转 Goal (goal-flywheel)
+ * 接口层不重叠, 本模块不碰 goal-store。
+ *
+ * 存储布局 (leo: 「intents 专门设计一个文件夹」「world 也是设计文件夹更好」):
+ *   ~/.bolloon/world/               ← World 根 (六元组本体的实体根)
+ *     ├── intents/                  ← Intent 实体目录 (一意图一文件, 原子写)
+ *     │   └── int_<id>.json
+ *     ├── opportunities/            ← (P1) Opportunity 实体目录
+ *     ├── actions/                  ← (后续) Action 实体目录
+ *     └── memory/                   ← (后续) Memory 实体目录
+ * 每个实体独立文件 ⇒ 原子写 / 并发安全 / 可扩展, 与 task-board 的 announcement 文件模式同源。
+ */
+import * as fs from 'fs/promises';
+import * as os from 'os';
+import * as path from 'path';
+import * as crypto from 'crypto';
+const homeOf = (home) => home || process.env.HOME || os.homedir();
+/** World 根目录 (~/.bolloon/world/) */
+export const worldDir = (home) => path.join(homeOf(home), '.bolloon', 'world');
+/** Intent 实体目录 (~/.bolloon/world/intents/) */
+export const intentsDir = (home) => path.join(worldDir(home), 'intents');
+/** Opportunity 实体目录 (~/.bolloon/world/opportunities/, P1) */
+export const opportunitiesDir = (home) => path.join(worldDir(home), 'opportunities');
+/** 只允许 int_ 开头的 id 当文件名 (防路径穿越); 非法 → null */
+function safeId(id) {
+    const s = String(id || '').trim();
+    return /^int_[A-Za-z0-9]{6,32}$/.test(s) ? s : null;
+}
+/** 意图文件路径 (非法 id → null) */
+export function intentFile(id, home) {
+    const safe = safeId(id);
+    return safe ? path.join(intentsDir(home), `${safe}.json`) : null;
+}
+async function ensure(dir) {
+    try {
+        await fs.mkdir(dir, { recursive: true });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function writeJson(file, value) {
+    try {
+        await ensure(path.dirname(file));
+        await fs.writeFile(file, JSON.stringify(value, null, 2) + '\n', { mode: 0o600 });
+        return { ok: true };
+    }
+    catch (e) {
+        return { ok: false, error: String(e?.message || e).slice(0, 200) };
+    }
+}
+async function readJson(file) {
+    try {
+        const raw = await fs.readFile(file, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object')
+            return { ok: false, error: `${path.basename(file)} 不是对象` };
+        return { ok: true, value: parsed };
+    }
+    catch (e) {
+        if (e?.code === 'ENOENT')
+            return { ok: false, error: 'ENOENT' };
+        return { ok: false, error: `读 ${path.basename(file)} 失败: ${String(e?.message || e).slice(0, 120)}` };
+    }
+}
+/** 标签: 从意图正文提取简单标签 (英文词 + 中文 2 字以上词元) + 手工标签去重 */
+export function extractTags(text, manual = []) {
+    const src = String(text || '').toLowerCase();
+    const words = src.match(/[a-z][a-z0-9_-]{1,}/g) || [];
+    const cjk = src.match(/[\u4e00-\u9fff]{2,}/g) || [];
+    const all = [...words, ...cjk, ...manual.map((t) => t.toLowerCase().trim()).filter(Boolean)];
+    return Array.from(new Set(all)).slice(0, 24);
+}
+/** 扫描 intents 目录, 列出全部意图 (按创建时间倒序) */
+export async function listIntents(home, status) {
+    const dir = intentsDir(home);
+    let entries;
+    try {
+        entries = await fs.readdir(dir);
+    }
+    catch (e) {
+        if (e?.code === 'ENOENT')
+            return { ok: true, intents: [] };
+        return { ok: false, intents: [], error: `读 ${dir} 失败: ${String(e?.message || e).slice(0, 120)}` };
+    }
+    const intents = [];
+    for (const name of entries.filter((n) => n.startsWith('int_') && n.endsWith('.json'))) {
+        const r = await readJson(path.join(dir, name));
+        if (!r.ok || !r.value || !r.value.id)
+            continue; // 坏文件跳过, 不崩
+        intents.push(r.value);
+    }
+    intents.sort((a, b) => b.createdAt - a.createdAt);
+    return { ok: true, intents: status ? intents.filter((i) => i.status === status) : intents };
+}
+/** 单条意图按 id 读 (不存在 → ok:true 无 intent) */
+export async function getIntent(id, home) {
+    const file = intentFile(id, home);
+    if (!file)
+        return { ok: false, error: `非法意图 id: ${String(id).slice(0, 32)}` };
+    const r = await readJson(file);
+    if (!r.ok)
+        return r.error === 'ENOENT' ? { ok: true } : r;
+    return { ok: true, intent: r.value };
+}
+/** 声明意图 (幂等: 同 text 已存在 → 更新 tags/priority, 不重复建文件) */
+export async function setIntent(input) {
+    const text = String(input.text || '').trim();
+    if (!text)
+        return { ok: false, created: false, error: '意图不能为空' };
+    const priority = input.priority ?? 3;
+    if (!Number.isInteger(priority) || priority < 1 || priority > 5)
+        return { ok: false, created: false, error: `priority 必须 1-5 整数, 实得 ${String(priority)}` };
+    const loaded = await listIntents(input.home);
+    if (!loaded.ok)
+        return { ok: false, created: false, error: loaded.error };
+    const now = Date.now();
+    const existing = loaded.intents.find((i) => i.text === text && i.status === 'active');
+    if (existing) {
+        const merged = {
+            ...existing,
+            tags: extractTags(text, [...(input.tags ?? []), ...existing.tags]),
+            priority,
+            budget: input.budget !== undefined ? input.budget : existing.budget,
+            deadline: input.deadline !== undefined ? input.deadline : existing.deadline,
+            updatedAt: now,
+        };
+        const file = intentFile(existing.id, input.home);
+        if (!file)
+            return { ok: false, created: false, error: '非法 id' };
+        const saved = await writeJson(file, merged);
+        if (!saved.ok)
+            return { ok: false, created: false, error: saved.error };
+        return { ok: true, intent: merged, created: false };
+    }
+    const record = {
+        id: `int_${crypto.randomBytes(6).toString('hex')}`,
+        text, tags: extractTags(text, input.tags ?? []), priority,
+        budget: input.budget ?? null, deadline: input.deadline ?? null,
+        status: 'active', createdAt: now, updatedAt: now, matchedCount: 0,
+    };
+    const file = intentFile(record.id, input.home);
+    if (!file)
+        return { ok: false, created: false, error: '非法 id' };
+    const saved = await writeJson(file, record);
+    if (!saved.ok)
+        return { ok: false, created: false, error: saved.error };
+    return { ok: true, intent: record, created: true };
+}
+/** 删意图 (或标记 done) */
+export async function removeIntent(id, markDone = false, home) {
+    const file = intentFile(id, home);
+    if (!file)
+        return { ok: false, error: `非法意图 id: ${String(id).slice(0, 32)}` };
+    if (markDone) {
+        const r = await getIntent(id, home);
+        if (!r.ok)
+            return { ok: false, error: r.error };
+        if (!r.intent)
+            return { ok: false, error: `没有意图 ${id} (看 bolloon intent list)` };
+        const updated = { ...r.intent, status: 'done', updatedAt: Date.now() };
+        const saved = await writeJson(file, updated);
+        if (!saved.ok)
+            return { ok: false, error: saved.error };
+        return { ok: true, removed: id };
+    }
+    try {
+        await fs.unlink(file);
+        return { ok: true, removed: id };
+    }
+    catch (e) {
+        if (e?.code === 'ENOENT')
+            return { ok: false, error: `没有意图 ${id} (看 bolloon intent list)` };
+        return { ok: false, error: `删 ${file} 失败: ${String(e?.message || e).slice(0, 120)}` };
+    }
+}
+/** 意图匹配数 +1 (扫描后被上层调用, 诚实计数) */
+export async function bumpMatchedCount(id, home) {
+    const r = await getIntent(id, home);
+    if (!r.ok || !r.intent)
+        return;
+    const updated = { ...r.intent, matchedCount: r.intent.matchedCount + 1, updatedAt: Date.now() };
+    const file = intentFile(id, home);
+    if (file)
+        await writeJson(file, updated);
+}

package/dist/agents/opportunity-inbox.js

@@ -0,0 +1,147 @@
+/**
+ * opportunity-inbox.ts — 机会信箱 (2026-10-05, leo: 别人主动投来的机会)
+ *
+ * 设计: 外部 agent 用 DIAP Ed25519 身份签名投递机会声明到本机信箱,
+ *   验签通过才入库 (~/.bolloon/world/inbox/<id>.json) 并进入世界流。
+ *   来源可验: 每条机会带 provider DID + 验签状态, 不再是「本机自产」的虚拟感。
+ *
+ * 协议: bolloon-opportunity-inbox/1
+ *   POST payload = { title, summary, refs[], provider: {did}, issuedAt }
+ *   signature  = ed25519Sign(privateKey, canonicalize(payload))
+ *   验证 = ed25519Verify(providerPublicKey, canonicalize(payload), signature)
+ *
+ * 未来: 群复制 (OrbitDB 公共群 announce) 是信箱的另一条投递通道, 需要第二节点 (诚实边界)。
+ */
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import * as crypto from 'node:crypto';
+import { worldDir } from './intent-store.js';
+import { canonicalize, ed25519Verify } from './x402/paid-info-protocol.js';
+export const INBOX_PROTOCOL = 'bolloon-opportunity-inbox/1';
+const inboxDir = () => path.join(worldDir(), 'inbox');
+function safeId(s) {
+    return s.replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 64);
+}
+/** 把投递载荷按签名标准序列化 (必须与签名时完全一致) */
+export function canonicalPayload(p) {
+    return canonicalize({
+        protocol: p.protocol,
+        title: p.title,
+        summary: p.summary,
+        refs: p.refs,
+        provider: p.provider,
+        issuedAt: p.issuedAt,
+    });
+}
+/** 投递方 DID 的 Ed25519 公钥解析 (did:key 格式 → 32 字节 hex) */
+export async function resolveDidPublicKey(did) {
+    try {
+        // did:key:z6Mk... — multibase base58btc 编码: [multicodec 0xed01(2B) + 32B 公钥] = 34 字节
+        const m = String(did || '').match(/^did:key:z([1-9A-HJ-NP-Za-km-z]+)$/);
+        if (!m)
+            return null;
+        const decoded = Buffer.from(importB58(m[1]));
+        if (decoded.length === 34 && decoded[0] === 0xed && decoded[1] === 0x01) {
+            return decoded.subarray(2).toString('hex'); // 剥 multicodec, 取 32 字节公钥
+        }
+        if (decoded.length === 32)
+            return decoded.toString('hex'); // 裸 32 字节兜底
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/** base58btc 解码 (multibase 'z' 前缀 = base58btc) — 只依赖 Node crypto 的 b58 简易实现 */
+function importB58(s) {
+    const ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+    const base = BigInt(58);
+    let num = BigInt(0);
+    for (const ch of s) {
+        const idx = ALPHABET.indexOf(ch);
+        if (idx < 0)
+            throw new Error('bad base58 char');
+        num = num * base + BigInt(idx);
+    }
+    const bytes = [];
+    while (num > 0n) {
+        bytes.unshift(Number(num & 0xffn));
+        num >>= 8n;
+    }
+    // 前导 '1' → 前导 0x00
+    let leading = 0;
+    for (const ch of s) {
+        if (ch === '1')
+            leading++;
+        else
+            break;
+    }
+    return Uint8Array.from([...new Array(leading).fill(0), ...bytes]);
+}
+/** 投递机会到信箱 (验签通过才入库) */
+export async function deliverOpportunity(payload, signatureB64) {
+    if (payload.protocol !== INBOX_PROTOCOL)
+        return { ok: false, error: `协议不匹配: ${payload.protocol}` };
+    const title = String(payload.title || '').trim();
+    if (!title)
+        return { ok: false, error: '缺 title' };
+    const did = String(payload.provider?.did || '').trim();
+    if (!did)
+        return { ok: false, error: '缺 provider.did' };
+    // 1. 验签 (能解析公钥才可能 verified)
+    const pub = await resolveDidPublicKey(did);
+    let verification;
+    if (!pub) {
+        verification = 'unverified'; // 公钥解析不了 → 不入库 (不可信来源不污染世界流)
+        return { ok: false, error: '无法解析 provider DID 公钥 (拒绝不可信来源)' };
+    }
+    const okSig = await ed25519Verify(pub, canonicalPayload(payload), signatureB64);
+    if (!okSig) {
+        verification = 'signature-invalid';
+        return { ok: false, error: '签名无效 (拒绝伪造投递)' };
+    }
+    verification = 'verified';
+    // 2. 入库 (一机会一文件)
+    const id = `inbox_${safeId(crypto.createHash('sha256').update(canonicalPayload(payload)).digest('hex').slice(0, 16))}`;
+    const opp = {
+        protocol: payload.protocol,
+        id,
+        title,
+        summary: String(payload.summary || '').trim(),
+        refs: Array.isArray(payload.refs) ? payload.refs.map(String).filter(Boolean) : [],
+        provider: { did, name: payload.provider?.name },
+        issuedAt: payload.issuedAt,
+        verification,
+        receivedAt: Date.now(),
+    };
+    try {
+        await fs.mkdir(inboxDir(), { recursive: true });
+        await fs.writeFile(path.join(inboxDir(), `${id}.json`), JSON.stringify(opp, null, 2) + '\n', { mode: 0o600 });
+    }
+    catch (err) {
+        return { ok: false, error: `入库失败: ${err instanceof Error ? err.message : err}` };
+    }
+    return { ok: true, opportunity: opp };
+}
+/** 列出信箱机会 (verified 优先, 最近在前) */
+export async function listInboxOpportunities() {
+    try {
+        const files = await fs.readdir(inboxDir());
+        const out = [];
+        for (const f of files) {
+            if (!f.endsWith('.json'))
+                continue;
+            try {
+                const raw = await fs.readFile(path.join(inboxDir(), f), 'utf-8');
+                const p = JSON.parse(raw);
+                if (p && p.id)
+                    out.push(p);
+            }
+            catch { /* 坏文件跳过 */ }
+        }
+        return out.sort((a, b) => b.receivedAt - a.receivedAt);
+    }
+    catch {
+        return [];
+    }
+}