@bolloon/bolloon-agent 0.6.6 → 0.6.7

package/dist/ios/mobile.js

@@ -69,7 +69,7 @@
     });
   } catch (e) {}
 
-  const TITLES = { main: '首页', friends: '好友', tasks: '任务', me: '我' };
+  const TITLES = { main: '首页', friends: '通讯录', tasks: '任务', me: '我' };
   let currentTab = 'main';
   function switchTab(tab) {
     currentTab = tab;
@@ -166,7 +166,7 @@
         if (!list) return;
         list.innerHTML = '';
         if (!Array.isArray(peers) || peers.length === 0) {
-          list.innerHTML = '<div style="padding:20px;text-align:center;color:var(--text-muted)">暂无好友</div>';
+          list.innerHTML = '<div style="padding:20px;text-align:center;color:var(--text-muted)">暂无联系人</div>';
           const idx = $('#contacts-index'); if (idx) idx.innerHTML = '';
           return;
         }
@@ -453,15 +453,15 @@
     try {
       const s = await api.get('/api/auth/status');
       $('#me-name').textContent = s.loggedIn ? (s.name || '未登录') : '未登录';
-      $('#me-did').textContent = s.did ? ('DID: ' + (s.didShort || s.did)) : '';
+      $('#me-did').textContent = s.did ? ('身份证明: ' + (s.didShort || s.did)) : '';
       if (avatarEl && !av) avatarEl.textContent = (s.loggedIn && s.name ? s.name : 'U').charAt(0);
       $('#login-label').textContent = s.loggedIn ? '已登录' : '登录';
     } catch (e) { /* 默认 */ }
-    // P2P ID = 通信ID, 与 DID 不同 (libp2p nodeId)
+    // 身份证明 (连接标识)
     try {
       const net = await api.get('/api/network/status');
       const p2p = net && net.nodeId;
-      $('#me-p2p').textContent = p2p ? ('P2P: ' + p2p.slice(0, 14) + '…') : '';
+      $('#me-p2p').textContent = p2p ? ('连接标识: ' + p2p.slice(0, 14) + '…') : '';
     } catch (e) { /* 未连接 */ }
   }
 
@@ -488,10 +488,10 @@
           <div class="avatar" id="identity-avatar" style="width:72px;height:72px"></div>
           <div><div class="profile-name">${escapeHtml(name)}</div><div style="font-size:12px;color:var(--text-muted)">人类认证身份</div></div>
         </div>
-        <div class="identity-row"><div class="k">DID 身份 (全局唯一)</div><div class="v">${escapeHtml(did || '未生成')}</div></div>
-        <div class="identity-row"><div class="k">P2P ID (通信 ID)</div><div class="v">${escapeHtml(p2p || '未连接')}</div></div>
+        <div class="identity-row"><div class="k">身份证明 (全局唯一)</div><div class="v">${escapeHtml(did || '未生成')}</div></div>
+        <div class="identity-row"><div class="k">连接标识</div><div class="v">${escapeHtml(p2p || '未连接')}</div></div>
         <div class="identity-row"><div class="k">创建时间</div><div class="v">${escapeHtml(created || '未知')}</div></div>
-        <div class="identity-row"><div class="k">说明</div><div class="v">DID 是全局唯一的人类认证身份; P2P ID 只是本机 libp2p 通信节点号, 两者不同。</div></div>`;
+        <div class="identity-row"><div class="k">说明</div><div class="v">身份证明是全局唯一的人类认证身份; 连接标识是本机的通信编号, 两者不同。</div></div>`;
       const av = localStorage.getItem('bolloon_avatar');
       const ia = body.querySelector('#identity-avatar');
       if (ia) { if (av) { ia.style.backgroundImage = 'url(' + av + ')'; ia.style.backgroundSize = 'cover'; ia.textContent = ''; } else ia.textContent = (name || 'U').charAt(0); }
@@ -592,9 +592,9 @@
     const cards = $('#world-feed-cards');
     if (!feed || !cards) return;
     try {
-      // 2026-10-05 (leo: 手机端 ↔ 电脑端互联): 走 api 层 → BolloonCore.resolve
-      //   转发电脑端 desktopUrl (不再裸 fetch 相对路径 — 手机上相对路径连手机自己, 永远空)
-      const data = await api.get('/api/opportunities?min-score=0.2&limit=10');
+      // 2026-10-16 (leo: 首页卡片按「附近 + 通讯录」动态传送): 三源聚合 (桌面机会流 + 通讯录卡 + 附近卡)
+      //   不再只拉桌面机会流; 来源不上屏 (leo: 主动推送不贴元解释文案)
+      const data = await api.get('/api/world/cards');
       const opps = ((data && data.opportunities) || []).slice(0, 6);
       if (!opps.length) { feed.hidden = true; return; }
       feed.hidden = false;
@@ -748,8 +748,8 @@
           allAgentCards.push({
             id: p.id || p.publicKey?.slice(0, 12) || `peer-${Date.now()}`,
             agentId: p.id || p.publicKey?.slice(0, 12),
-            name: p.name || '未知好友',
-            desc: 'P2P 好友智能体',
+            name: p.name || '未知联系人',
+            desc: '通讯录智能体',
             avatar: null,
             peer: { name: p.name || '好友', online: p.online || false },
             status: p.online ? 'online' : 'offline',
@@ -1102,7 +1102,7 @@
         <div style="flex:1;font-weight:600">搜索</div>
       </div>
       <div style="padding:12px;display:flex;flex-direction:column;gap:10px;flex:1;min-height:0">
-        <input id="search-input" type="search" autocomplete="off" placeholder="搜智能体 / 好友：名称、DID、节点 ID"
+        <input id="search-input" type="search" autocomplete="off" placeholder="搜智能体 / 通讯录：名称、身份证明、编号"
           style="padding:10px 12px;border:1px solid var(--border);border-radius:10px;background:var(--bg-hover);color:var(--text);font-size:14px">
         <div id="search-hint" style="font-size:12px;color:var(--text-muted)">正在建立索引…</div>
         <div id="search-results" style="flex:1;overflow:auto;-webkit-overflow-scrolling:touch"></div>
@@ -1122,10 +1122,10 @@
         act: () => { page.remove(); openChat(c); },
       })),
       ...peers.map((p) => ({
-        tag: '好友', name: p.name || String(p.publicKey || p.id || '好友').slice(0, 12),
+        tag: '通讯录', name: p.name || String(p.publicKey || p.id || '联系人').slice(0, 12),
         sub: String(p.publicKey || p.id || p.address || '').slice(0, 28),
         hay: [p.name, p.publicKey, p.id, p.address, p.did].filter(Boolean).join(' '),
-        act: () => alert(`好友信息\n名称: ${p.name || '(未命名)'}\n节点ID: ${p.publicKey || p.id || '—'}\n地址: ${p.address || '—'}`),
+        act: () => alert(`联系人信息\n名称: ${p.name || '(未命名)'}\n编号: ${p.publicKey || p.id || '—'}\n地址: ${p.address || '—'}`),
       })),
       ...services.map((s) => ({
         tag: '全局智能体',
@@ -1142,10 +1142,10 @@
     const render = (q) => {
       const k = String(q || '').trim().toLowerCase();
       const hits = rows.filter((r) => !k || r.hay.includes(k) || r.name.toLowerCase().includes(k));
-      if (hint) hint.innerHTML = `本机智能体 ${channels.length} · 好友 ${peers.length} · 全局智能体 ${services.length}` + (k ? ` · 命中 ${hits.length}` : '');
+      if (hint) hint.innerHTML = `本机智能体 ${channels.length} · 通讯录 ${peers.length} · 全局智能体 ${services.length}` + (k ? ` · 命中 ${hits.length}` : '');
       if (!box) return;
       if (!hits.length) {
-        box.innerHTML = `<div style="padding:24px;text-align:center;color:var(--text-muted);font-size:13px">没有匹配「${escapeHtml(String(q))}」的智能体或好友</div>`;
+        box.innerHTML = `<div style="padding:24px;text-align:center;color:var(--text-muted);font-size:13px">没有匹配「${escapeHtml(String(q))}」的智能体或联系人</div>`;
         return;
       }
       let html = '';
@@ -2135,11 +2135,12 @@
     $('#settings-persona').addEventListener('click', () => void openPersonaPage());
   }
 
-  // === 身份页 (DID / 公钥 / 签名测试 / 邮箱 / 手机号) ===
+  // === 身份页 (身份证明 / 签名 / 邮箱 / 手机号) ===
   // 2026-10-07: 完整身份系统 — DIAP did:key (与桌面同构) + 附带条件 (邮箱/手机号/备注)
+  // 2026-10-16 (leo: 显示端降低认知负担): 不外露 DID/Ed25519 术语 — 「身份证明」「身份密钥」「签名能力」
   async function openIdentityPage() {
     if ($('#identity-page')) return;
-    const page = mkOverlayPage('identity-page', 'DID 与身份', '<div style="font-size:12px;color:var(--text-muted)">读取中…</div>');
+    const page = mkOverlayPage('identity-page', '身份与证明', '<div style="font-size:12px;color:var(--text-muted)">读取中…</div>');
     const body = page.querySelector('#identity-page-body');
     try {
       const core = window.BolloonCore || (await import('./mobile-core.js')).core;
@@ -2147,8 +2148,8 @@
       const st = await ag.identityStatus();
       body.innerHTML = `
         <div class="list">
-          <div class="list-item"><span class="list-icon">${ICONS.idcard}</span><span style="flex:1"><span style="display:block">DID</span><span class="conv-preview" style="display:block;word-break:break-all">${escapeHtml(st.did || '未生成')}</span></span></div>
-          <div class="list-item"><span class="list-icon">${ICONS.chip}</span><span style="flex:1"><span style="display:block">公钥 (Ed25519)</span><span class="conv-preview" style="display:block;word-break:break-all">${st.publicKey ? escapeHtml(st.publicKey.slice(0, 32) + '…') : '（老设备哈希身份，无签名）'}</span></span></div>
+          <div class="list-item"><span class="list-icon">${ICONS.idcard}</span><span style="flex:1"><span style="display:block">身份证明</span><span class="conv-preview" style="display:block;word-break:break-all">${escapeHtml(st.did || '未生成')}</span></span></div>
+          <div class="list-item"><span class="list-icon">${ICONS.chip}</span><span style="flex:1"><span style="display:block">身份密钥</span><span class="conv-preview" style="display:block;word-break:break-all">${st.publicKey ? escapeHtml(st.publicKey.slice(0, 32) + '…') : '（老设备哈希身份，无签名）'}</span></span></div>
           <div class="list-item"><span class="list-icon">${ICONS.chip}</span><span style="flex:1"><span style="display:block">名字</span><span class="conv-preview" style="display:block">${escapeHtml(st.name || '未登录')}</span></span></div>
         </div>
         <div class="section-label">附带身份条件（仅存本机）</div>
@@ -2158,7 +2159,7 @@
           <div class="list-item"><span class="list-icon">📝</span><span style="flex:1"><span style="display:block">备注</span><span class="conv-preview" id="id-note" style="display:block">${escapeHtml(st.note || '未设置')}</span></span></div>
           <button class="sheet-choice" id="id-edit" style="width:100%;margin-top:8px">编辑邮箱 / 手机号 / 备注</button>
         </div>
-        <div class="section-label">签名能力（DIAP Ed25519）</div>
+        <div class="section-label">签名能力</div>
         <div class="list">
           <button class="sheet-choice" id="id-sign-test" style="width:100%">测试签名（本地签 + 验，证明身份可签名）</button>
         </div>`;
@@ -2733,6 +2734,52 @@
     inp.click();
   }
 
+  // === 手机号搜索添加好友 (2026-10-15, 手机原生手机号功能) ===
+  // 目录数据在电脑端 (human-directory.json), 手机端只转发; 电脑端不可达 → 明确报错不假装。
+  function openPhoneSearch() {
+    hideSheet('#addfriend-sheet');
+    showSheet('#phone-search-sheet');
+    const inp = $('#phone-search-input');
+    if (inp) { inp.value = ''; inp.focus(); }
+    const result = $('#phone-search-result');
+    if (result) { result.style.display = 'none'; result.innerHTML = ''; }
+  }
+  async function doPhoneSearch() {
+    const inp = $('#phone-search-input');
+    const result = $('#phone-search-result');
+    if (!inp || !result) return;
+    const phone = (inp.value || '').replace(/[^\d+]/g, '');
+    if (!/^\+?\d{8,15}$/.test(phone)) { result.style.display = 'block'; result.innerHTML = '<div style="color:var(--danger,#e05555);font-size:13px">请输入正确的手机号 (8-15 位数字)</div>'; return; }
+    result.style.display = 'block';
+    result.innerHTML = '<div style="color:var(--text-secondary);font-size:13px">搜索中…</div>';
+    try {
+      const r = await api.post('/api/phone/directory/lookup', { phone });
+      if (r && r.found) {
+        const name = r.displayName || String(r.did || '').slice(0, 12);
+        result.innerHTML = `<div style="font-size:14px;margin-bottom:6px">✅ 找到账号: <b>${escapeHtml(name)}</b></div>
+          <div style="font-size:12px;color:var(--text-secondary);margin-bottom:10px">身份证明: ${escapeHtml(String(r.did || ''))}</div>
+          <button class="sheet-choice" id="phone-add-btn" style="width:100%">发送好友申请</button>`;
+        const btn = $('#phone-add-btn');
+        if (btn) btn.addEventListener('click', async () => {
+          btn.disabled = true; btn.textContent = '发送中…';
+          const a = await api.post('/api/phone/directory/add-friend', { phone });
+          btn.disabled = false;
+          if (a && a.ok !== false) {
+            btn.textContent = '✅ 已发送 (对方同意后建立好友)';
+            if (a.friend && a.friend.requestId) result.innerHTML += `<div style="font-size:12px;color:var(--text-secondary);margin-top:6px">申请号: ${escapeHtml(String(a.friend.requestId).slice(0, 12))}… 可到「待处理申请」查看</div>`;
+          } else {
+            btn.textContent = '重试发送';
+            result.innerHTML += `<div style="color:var(--danger,#e05555);font-size:12px;margin-top:6px">发送失败: ${escapeHtml((a && a.error) || '未知原因')}</div>`;
+          }
+        });
+      } else {
+        result.innerHTML = '<div style="color:var(--text-secondary);font-size:13px">未找到该手机号的账号 (对方未发布目录或已撤销)。</div>';
+      }
+    } catch (e) {
+      result.innerHTML = `<div style="color:var(--danger,#e05555);font-size:13px">查询失败: ${escapeHtml((e && e.message) || e || '未知错误')}</div>`;
+    }
+  }
+
   // === 复制 (助记词/私钥/地址 快捷复制; 全局委托 [data-copy]) ===
   async function copyText(t) {
     const txt = String(t || '');
@@ -2755,7 +2802,9 @@
     setTimeout(() => { b.textContent = old; }, 1200);
   });
 
-  // === 登录页 (设置本机身份昵称) ===
+  // === 登录页 (手机号验证码登录 + 昵称兜底) ===
+  // 2026-10-15: 手机原生手机号登录 — 输手机号 → 发验证码 → 验证通过 → 身份绑定手机号。
+  //   验证码链路转发电脑端 /api/contacts/bind + verify (与桌面同一 OTP 通道)。
   function openLoginPage() {
     const page = document.createElement('div');
     page.className = 'chat-page';
@@ -2766,13 +2815,61 @@
         <div style="flex:1;font-weight:600">登录</div>
       </div>
       <div style="padding:12px;display:flex;flex-direction:column;gap:12px">
-        <div style="font-size:13px;color:var(--text-secondary)">登录 = 在本机创建/启用身份并设置昵称。DID 由本机生成, 不上传服务器。</div>
+        <div style="font-size:13px;color:var(--text-secondary)">手机号登录: 输手机号 → 收验证码 → 登录。身份仍由本机 DID 承载, 手机号只是登录/查找凭证。</div>
+        <input id="login-phone" type="tel" inputmode="numeric" placeholder="手机号 (如 13812345678)" style="${_walletInput}">
+        <div style="display:flex;gap:8px">
+          <input id="login-code" inputmode="numeric" placeholder="验证码" style="${_walletInput};flex:1" disabled>
+          <button id="login-sendcode" style="${_walletBtn};width:110px;flex:none">发送验证码</button>
+        </div>
+        <button id="login-submit" style="${_walletBtn}">手机号登录</button>
+        <div style="border-top:1px solid var(--border);margin-top:4px;padding-top:12px;font-size:12px;color:var(--text-secondary)">或者用昵称登录 (本机身份, 不上传):</div>
         <input id="login-name" placeholder="昵称 (如 觉者)" style="${_walletInput}">
-        <button id="login-submit" style="${_walletBtn}">登录</button>
+        <button id="login-name-submit" style="${_walletBtn}">昵称登录</button>
       </div>`;
     document.body.appendChild(page);
     $('#login-back').addEventListener('click', () => page.remove());
-    $('#login-submit').addEventListener('click', async () => {
+
+    // 手机号登录: 登录成功后把手机号写进身份 profile (手机号即凭证)
+    const phoneInput = $('#login-phone');
+    const codeInput = $('#login-code');
+    const sendBtn = $('#login-sendcode');
+    const submitBtn = $('#login-submit');
+    let _pending = { contactId: '', challengeId: '' };
+    sendBtn.addEventListener('click', async () => {
+      const phone = (phoneInput.value || '').replace(/[^\d+]/g, '');
+      if (!/^\+?\d{8,15}$/.test(phone)) { alert('请输入正确的手机号 (8-15 位数字)'); return; }
+      sendBtn.disabled = true; sendBtn.textContent = '发送中…';
+      try {
+        const r = await api.post('/api/phone/auth/bind', { phone });
+        if (!r || r.ok === false) { alert((r && r.error) || '发送失败'); sendBtn.disabled = false; sendBtn.textContent = '发送验证码'; return; }
+        _pending = { contactId: String(r.contactId || ''), challengeId: String(r.challengeId || '') };
+        codeInput.disabled = false; codeInput.focus();
+        sendBtn.textContent = '已发送 ✓';
+        // 本地落盘通道会回显验证码 (方便无短信设备的调试; 真 SMS 通道不回显)
+        if (r.otpForLocalSink) { showToast ? showToast('验证码: ' + String(r.otpForLocalSink)) : alert('验证码: ' + String(r.otpForLocalSink)); }
+        setTimeout(() => { sendBtn.disabled = false; sendBtn.textContent = '重新发送'; }, 30000);
+      } catch (e) { alert('发送失败: ' + (e.message || e)); sendBtn.disabled = false; sendBtn.textContent = '发送验证码'; }
+    });
+    submitBtn.addEventListener('click', async () => {
+      const code = (codeInput.value || '').trim();
+      if (!_pending.contactId || !code) { alert('先发送验证码并输入验证码'); return; }
+      submitBtn.disabled = true; submitBtn.textContent = '验证中…';
+      try {
+        const v = await api.post('/api/phone/auth/verify', { contactId: _pending.contactId, challengeId: _pending.challengeId, code });
+        if (!v || v.ok === false) { alert((v && v.error) || '验证失败'); submitBtn.disabled = false; submitBtn.textContent = '手机号登录'; return; }
+        // 验证通过 → 昵称默认取手机号, 登录本机身份, 手机号写进 profile
+        const phone = (phoneInput.value || '').replace(/[^\d+]/g, '');
+        await api.post('/api/auth/login', { name: '用户' + phone.slice(-4) });
+        try { await api.post('/api/phone/profile/phone', { phone }); } catch { /* 本地 profile 更新失败不阻塞登录 */ }
+        page.remove();
+        await loadMe();
+        switchTab('me');
+        await autoSyncDesktop();
+      } catch (e) { alert('验证失败: ' + (e.message || e)); submitBtn.disabled = false; submitBtn.textContent = '手机号登录'; }
+    });
+    // 手机号 → 本机身份 profile (只存本机; 电脑端目录发布仍需用户在电脑端做)
+    // 昵称登录兜底
+    $('#login-name-submit').addEventListener('click', async () => {
       const name = (($('#login-name') || {}).value || '').trim();
       try {
         await api.post('/api/auth/login', { name });
@@ -2796,7 +2893,7 @@
     bindAvatarInput();
     $('#item-login').addEventListener('click', () => { openLoginPage(); });
     $('#item-logout').addEventListener('click', async () => {
-      if (!confirm('确定注销? 将清除本机登录态 (DID 保留, 不影响频道/P2P)。')) return;
+      if (!confirm('确定注销? 将清除本机登录态 (身份证明保留, 不影响频道/连接)。')) return;
       try { await api.post('/api/auth/logout', {}); await loadMe(); } catch (e) { alert('注销失败: ' + (e.message || e)); }
     });
     $('#btn-add').addEventListener('click', addFriend);
@@ -2813,8 +2910,8 @@
       if (first) openTradeCall(first); else openTradeHistory();
     });
     $('#item-p2p-id').addEventListener('click', async () => {
-      try { const net = await api.get('/api/network/status'); const p2p = net && net.nodeId; alert('P2P ID (通信ID, ≠ DID):\n' + (p2p || '未连接')); }
-      catch (e) { alert('P2P ID: 获取失败'); }
+      try { const net = await api.get('/api/network/status'); const p2p = net && net.nodeId; alert('连接标识 (本机通信编号):\n' + (p2p || '未连接')); }
+      catch (e) { alert('连接标识: 获取失败'); }
     });
     // #1 一键入网 (全球智能体网络): 点一下 → 默认 prompt 交给智能体执行
     const joinGlobalBtn = $('#item-join-global');
@@ -2838,16 +2935,33 @@
     // #2b 连接好友 (点按式) + 附近设备 + 待处理申请
     const addFriendBtn = $('#item-add-friend');
     if (addFriendBtn) addFriendBtn.addEventListener('click', () => showSheet('#addfriend-sheet'));
+    const cPhone = $('#choice-phone');
+    if (cPhone) cPhone.addEventListener('click', () => openPhoneSearch());
     const cNearby = $('#choice-nearby');
     if (cNearby) cNearby.addEventListener('click', () => { hideSheet('#addfriend-sheet'); openNearbySheet('friend'); });
     const cRequests = $('#choice-requests');
     if (cRequests) cRequests.addEventListener('click', () => { hideSheet('#addfriend-sheet'); openRequestsSheet(); });
+    // #2c 手机号搜索添加好友 sheet 的按键绑定
+    const psDo = $('#phone-search-do');
+    if (psDo) psDo.addEventListener('click', () => { void doPhoneSearch(); });
+    const psClose = $('#phone-search-close');
+    if (psClose) psClose.addEventListener('click', () => hideSheet('#phone-search-sheet'));
+    const psInput = $('#phone-search-input');
+    if (psInput) psInput.addEventListener('keydown', (e) => { if (e.key === 'Enter') { e.preventDefault(); void doPhoneSearch(); } });
     const nearbyBtn = $('#item-nearby');
     if (nearbyBtn) nearbyBtn.addEventListener('click', () => openNearbySheet('friend'));
     const nearbyRefresh = $('#nearby-refresh');
     if (nearbyRefresh) nearbyRefresh.addEventListener('click', () => loadNearbyList(_nearbyMode));
     const nearbyClose = $('#nearby-close');
     if (nearbyClose) nearbyClose.addEventListener('click', () => hideSheet('#nearby-sheet'));
+    // 2026-10-16 (leo: 首页卡片动态传送): P2P 收到附近卡 → 即时刷新首页 (不等 45s 轮询)
+    try {
+      window.BolloonCore && window.BolloonCore.events && window.BolloonCore.events.subscribe((m) => {
+        if (m && m.type === 'world-card') loadWorldFeed();
+      });
+    } catch (e) { /* 事件订阅失败不影响其它功能 */ }
+    // 连上对端即要一次卡 (动态传送主动触发; 无 peer 静默)
+    api.get('/api/world/cards/request').then(() => {}).catch(() => {});
     // 微信息 (x402 付费信息): 详情 → 购买并验真 / 只看元数据
     const x402Buy = $('#x402-buy');
     if (x402Buy) x402Buy.addEventListener('click', () => buyX402Info());

package/dist/ios/routes-contacts.js

@@ -413,8 +413,101 @@ export function registerContactRoutes(app, opts = {}) {
             res.status(500).json({ ok: false, error: String(err?.message || err) });
         }
     });
+    // ── 手机号目录 (2026-10-11, phone-account-lookup-design 落点 A) ────────────
+    // 隐私: 请求/响应全程只过「盲化哈希」, 明文手机号只在请求体出现一次 (发布/查询),
+    //       永不出现在响应里 (与 contacts 既有红线一致)。
+    const dirHome = () => opts.home || undefined;
+    /** 发布手机号 → DID 指针 (opt-in; 用户显式调用) */
+    app.post('/api/contacts/directory/publish', async (req, res) => {
+        try {
+            const { publishEntry, isPlausiblePhone } = await import('../agents/contacts/human-directory.js');
+            const phone = String(req.body?.phone || '');
+            const did = String(req.body?.did || ownerDidFromDisk());
+            if (!isPlausiblePhone(phone))
+                return res.status(400).json({ ok: false, error: '手机号格式不正确' });
+            const e = await publishEntry(phone, did, {
+                displayName: req.body?.displayName ? String(req.body.displayName) : undefined,
+                publicKeyHex: req.body?.publicKeyHex ? String(req.body.publicKeyHex) : undefined,
+                homeDir: dirHome(),
+            });
+            res.json({ ok: true, phoneHash: e.phoneHash.slice(0, 8) + '…', did: e.did, publicKeyHex: e.publicKeyHex || null, publishedAt: e.publishedAt });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err?.message || err) });
+        }
+    });
+    /** 撤销目录条目 (软删) */
+    app.post('/api/contacts/directory/retract', async (req, res) => {
+        try {
+            const { retractEntry } = await import('../agents/contacts/human-directory.js');
+            const did = String(req.body?.did || ownerDidFromDisk());
+            const ok = await retractEntry(did, dirHome());
+            res.json({ ok, revoked: ok });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err?.message || err) });
+        }
+    });
+    /** 按手机号查账号 (在本机目录内找; 响应只回 DID/昵称, 绝不回手机号) */
+    app.post('/api/contacts/directory/lookup', async (req, res) => {
+        try {
+            const { lookupPhone, isPlausiblePhone } = await import('../agents/contacts/human-directory.js');
+            const phone = String(req.body?.phone || '');
+            if (!isPlausiblePhone(phone))
+                return res.status(400).json({ ok: false, error: '手机号格式不正确' });
+            const r = await lookupPhone(phone, dirHome());
+            if (!r.found)
+                return res.json({ ok: true, found: false, note: '未找到 (未注册或未公开)' });
+            res.json({ ok: true, found: true, did: r.did, publicKeyHex: r.publicKeyHex || null, displayName: r.displayName || null });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err?.message || err) });
+        }
+    });
+    /** 按手机号直接发好友请求 (P1, 2026-10-15): directory lookup → publicKeyHex → 既有 /api/friend-request */
+    app.post('/api/contacts/directory/add-friend', async (req, res) => {
+        try {
+            const { lookupPhone, isPlausiblePhone } = await import('../agents/contacts/human-directory.js');
+            const phone = String(req.body?.phone || '');
+            if (!isPlausiblePhone(phone))
+                return res.status(400).json({ ok: false, error: '手机号格式不正确' });
+            const r = await lookupPhone(phone, dirHome());
+            if (!r.found)
+                return res.json({ ok: true, found: false, note: '未找到 (未注册或未公开)' });
+            if (!r.publicKeyHex)
+                return res.status(422).json({ ok: false, found: true, error: `对方已注册目录但未公开 P2P 公钥 (${r.did?.slice(0, 20)}…), 无法直接加好友` });
+            // 委托给既有好友请求链路 (本机端口; 与 pi-sdk accept 工具同口径)
+            const port = process.env.PORT || '54188';
+            const fr = await fetch(`http://127.0.0.1:${port}/api/friend-request`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    targetPublicKey: r.publicKeyHex,
+                    name: req.body?.name ? String(req.body.name) : r.displayName || undefined,
+                    message: req.body?.message ? String(req.body.message) : `来自手机号目录: 想加你为好友`,
+                    note: `via-phone-directory`,
+                }),
+            });
+            const data = await fr.json();
+            res.status(fr.status).json({ ok: data.ok !== false, found: true, did: r.did, friend: data });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err?.message || err) });
+        }
+    });
+    /** 列出已发布条目 (本机审计; 只回脱敏哈希) */
+    app.get('/api/contacts/directory/list', async (_req, res) => {
+        try {
+            const { readDirectory, summarizeEntries } = await import('../agents/contacts/human-directory.js');
+            const entries = await readDirectory(dirHome());
+            res.json({ ok: true, entries: summarizeEntries(entries) });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err?.message || err) });
+        }
+    });
     // ── 隐藏守卫自检 (验收/测试直接用) ──────────────────────────────────────────
     app.get('/api/contacts/_selfcheck', (_req, res) => {
-        res.json({ ok: true, plaintextGuard: looksLikePlaintextSecret({ contacts: [{ value: '+8613812345678' }] }) });
+        res.json({ ok: true, plaintextGuard: looksLikePlaintextSecret({ contacts: [{ value: '+861****5678' }] }) });
     });
 }

package/dist/ios/routes-world.js

@@ -72,7 +72,15 @@ export function registerWorldRoutes(app) {
         const minScore = Number(minScoreRaw);
         const limitRaw = typeof req.query.limit === 'string' ? req.query.limit : '50';
         const limit = Math.max(1, Math.min(200, parseInt(limitRaw, 10) || 50));
-        const r = await scanOpportunities({ minScore: Number.isFinite(minScore) ? minScore : 0.4, limit });
+        // 2026-10-16: 通讯录卡片 — dids=<did1>,<did2> 只返回这些 provider 投递的机会 (手机号通讯录联系人)
+        const providerDids = typeof req.query.dids === 'string'
+            ? req.query.dids.split(',').map((d) => d.trim()).filter(Boolean)
+            : [];
+        const r = await scanOpportunities({
+            minScore: Number.isFinite(minScore) ? minScore : 0.4,
+            limit,
+            providerDids: providerDids.length ? providerDids : undefined,
+        });
         if (!r.ok)
             return json(res, 500, { ok: false, error: r.error });
         json(res, 200, { ok: true, count: r.results.length, minScore, opportunities: r.results });

package/dist/ios/server.js

@@ -1669,6 +1669,30 @@ export async function createWebServer(port = 3000, options = {}) {
     catch (err) {
         console.warn('[runs] 对账失败 (非致命):', err?.message);
     }
+    // 2026-10-16 (leo: 双内核冗余 — 独立 kernel 守护进程): HA 双活 — 主进程以 primary 写心跳,
+    //   spawn 独立 kernel 守护进程 (standby), 主死 → daemon 接管; daemon 死 → 自动重启。
+    //   环境变量门控: BOLLOON_HA=1 启用 (默认关 — 单节点常规运行不启动额外进程)。
+    if (process.env.BOLLOON_HA === '1') {
+        try {
+            const { createHaSupervisor } = await import('../agents/ha-supervisor.js');
+            const haSup = createHaSupervisor({
+                log: (level, message) => {
+                    if (level === 'error')
+                        console.warn(message);
+                    else if (level === 'warn')
+                        console.warn(message);
+                    else if (process.env.BOLLOON_VERBOSE === '1')
+                        console.log(message);
+                },
+            });
+            await haSup.start();
+            globalThis.__bolloonHaSupervisor = haSup;
+            console.log('[ha] 双活守护已启动 (primary 心跳 + standby kernel 守护进程)');
+        }
+        catch (err) {
+            console.warn('[ha] 双活守护启动失败 (非致命):', err?.message);
+        }
+    }
     // 2026-09-16 (M2-B): ExecutionSupervisor —— 长期执行层。
     //   页面关掉、进程重启后由它把 Goal 继续下去; 跨进程排他靠 Goal lease (不是内存状态)。
     //   Harness 管"这一段能不能安全执行", Supervisor 管"这个目标还要不要继续执行"。
@@ -5167,56 +5191,38 @@ fetchState();
                 const judgmentHint = await buildJudgmentHint(channelForJudgment, channelId);
                 if (judgmentHint)
                     contextHint += judgmentHint;
-                // 2026-06-10: 注入 skills 列表 (本机 ~/.bolloon/skills/ 下所有 skills)
-                // 让 LLM 知道有哪些 skill 可用, 在回复中提示用户
+                // 2026-06-10: 注入 skills 存在性提示 (2026-10-16 按需化: 删逐条列表 —
+                //   pi-sdk buildSkillsIndex 已注入前 40 技能名+描述, 这里只保留存在提示与触发语法)
                 try {
-                    const { loadSkillsFromPaths, defaultSkillPaths, describeSkill } = await import('../agents/skill-loader.js');
+                    const { loadSkillsFromPaths, defaultSkillPaths } = await import('../agents/skill-loader.js');
                     const paths = defaultSkillPaths();
                     const skills = await loadSkillsFromPaths(paths);
                     if (skills.length > 0) {
-                        contextHint += `[系统上下文] 本机已加载的 skills (${skills.length} 个, 你可以提示用户主动调用):\n`;
-                        for (const s of skills.slice(0, 20)) { // 上限 20 避免 prompt 过长
-                            const desc = (s.description || '').slice(0, 80);
-                            contextHint += `  - /${s.name}${desc ? ' — ' + desc : ''}\n`;
-                        }
-                        contextHint += '调用语法: 用户说 "/技能名 ..." 或 你回复时建议 "/技能名 ..." 让用户主动触发.\n\n';
+                        contextHint += `[系统上下文] 本机已加载 ${skills.length} 个 skills (技能名+描述见上方技能库索引; 需要详情时用 list_skills / read_skill 按需读取). 调用语法: 用户说 "/技能名 ..." 或 你回复时建议 "/技能名 ..." 让用户主动触发.\n\n`;
                     }
                 }
                 catch (err) {
                     // 静默失败 — skills 不是核心, 加载失败不阻塞
                 }
-                // 2026-06-10: 注入 human values 摘要 (最常用的 judgment / 价值偏好)
-                // 与 judgment 不同: values 是更宏观的"用户偏好", judgment 是针对具体决策的约束
+                // 2026-06-10: human values 存在性提示 (2026-10-16 按需化: 删 8 条摘要列表 —
+                //   buildJudgmentHint 已注入绑定判断力 + 候选, 这里只保留"库里有多少"的指针)
                 try {
                     const { loadAllJudgments } = await import('../pi-ecosystem-judgment/human-value-store.js');
                     const allJudgments = await loadAllJudgments().catch(() => []);
-                    // 把所有 judgment 视作软参考 (跟 buildJudgmentHint 的 candidates 同理)
                     if (Array.isArray(allJudgments) && allJudgments.length > 0) {
-                        contextHint += `[系统上下文] 用户的核心价值倾向 (来自 ${allJudgments.length} 条历史 judgment, 软参考, 体现而非复述):\n`;
-                        for (const j of allJudgments.slice(0, 8)) {
-                            const decision = (j.decision || '').slice(0, 80);
-                            contextHint += `  - ${decision}\n`;
-                        }
-                        contextHint += '\n';
+                        contextHint += `[系统上下文] 判断力库存 ${allJudgments.length} 条历史 judgment (绑定判断力见上方; 需要更多时用读取判断力的工具按需取, 软参考体现而非复述).\n\n`;
                     }
                 }
                 catch (err) {
                     // 静默失败
                 }
-                // 2026-06-10: 注入 documents 列表 (本机 documents/ 目录的文档元数据)
-                // 让 LLM 知道有文档存在, 用户可主动要求读
+                // 2026-06-10: documents 存在性提示 (2026-10-16 按需化: 删逐条元数据 —
+                //   只留计数, 用户提到某文档时用读文档工具按需读取)
                 try {
                     const { documentStore } = await import('../documents/store.js');
                     const docs = await documentStore.getReceivedDocuments(50).catch(() => []);
                     if (Array.isArray(docs) && docs.length > 0) {
-                        contextHint += `[系统上下文] 本机 documents (${docs.length} 篇, 用户可让你读):\n`;
-                        for (const d of docs.slice(0, 10)) {
-                            const name = d.fileName || d.id || '(未命名)';
-                            const size = d.fileSize ? ` (${Math.round(d.fileSize / 1024)}KB)` : '';
-                            const sender = d.fromNodeId ? ` [来自 ${d.fromNodeIdShort || d.fromNodeId.substring(0, 8)}…]` : '';
-                            contextHint += `  - ${name}${size}${sender}\n`;
-                        }
-                        contextHint += '用户提到某文档时, 你可以调用读文档工具读取并总结.\n\n';
+                        contextHint += `[系统上下文] 本机 documents ${docs.length} 篇 (用户提到某文档时, 用读文档工具按需读取并总结).\n\n`;
                     }
                 }
                 catch (err) {
@@ -5282,8 +5288,10 @@ fetchState();
                             catch { /* 无 sessions 目录 */ }
                         }
                         if (summariesToRead.length > 0) {
-                            const memBlock = summariesToRead.map(s => s.trim().slice(-1500)).join('\n\n---\n\n');
-                            contextHint += `[系统上下文] 动态状态层 · chat-worksite (上次做到哪 — 本 channel 历史记忆, 来自 memory-compressor 摘要, 引用而非复述):\n${memBlock.slice(-2500)}\n\n`;
+                            // 2026-10-16 按需化: 历史记忆只注尾部 800 chars 作为"上次做到哪"的锚,
+                            //   完整摘要按需用 read 工具取 (记忆是引用而非复述, 全量 2500 常驻浪费)
+                            const memBlock = summariesToRead.map(s => s.trim().slice(-800)).join('\n\n---\n\n');
+                            contextHint += `[系统上下文] 动态状态层 · chat-worksite (上次做到哪 — 本 channel 历史记忆尾部摘录, 来自 memory-compressor 摘要, 引用而非复述):\n${memBlock.slice(-800)}\n\n`;
                         }
                         else {
                             // 2026-08-08 (DID 目录读侧): 磁盘无摘要时, 回退读 DID 目录 memory 表 (跨设备同步来的记忆)
@@ -5294,11 +5302,11 @@ fetchState();
                                     const rows = catalogMemoryRows(cat, agentId);
                                     if (rows.length > 0) {
                                         const memBlock = rows.slice(0, 2)
-                                            .map(({ row }) => String(row.data.summary || '').slice(-1500))
+                                            .map(({ row }) => String(row.data.summary || '').slice(-800))
                                             .filter(Boolean)
                                             .join('\n\n---\n\n');
                                         if (memBlock) {
-                                            contextHint += `[系统上下文] 动态状态层 · chat-worksite (DID 目录同步记忆, 引用而非复述):\n${memBlock.slice(-2500)}\n\n`;
+                                            contextHint += `[系统上下文] 动态状态层 · chat-worksite (DID 目录同步记忆尾部摘录, 引用而非复述):\n${memBlock.slice(-800)}\n\n`;
                                         }
                                     }
                                 }
@@ -5339,24 +5347,27 @@ fetchState();
                 }
                 const linkedIds = channelForJudgment?.linkedDocumentIds;
                 if (Array.isArray(linkedIds) && linkedIds.length > 0) {
+                    // 2026-10-16 按需化: 关联文档不再每轮全文注入 (10篇×1.5KB=15KB 常驻 prompt),
+                    //   只列文件名指针, 用户提到某文档时用读文档工具按需读取。
+                    //   关联文档本身不常在单轮对话中被用到, 全量注入是浪费。
                     try {
                         const { documentStore } = await import('../documents/store.js');
-                        contextHint += `[系统上下文] 此 channel 关联了 ${linkedIds.length} 篇文档 (已自动加载内容, 你应基于它们回答):\n`;
-                        let loaded = 0;
+                        const names = [];
                         for (const docId of linkedIds.slice(0, 10)) {
                             const doc = await documentStore.readDocument(docId).catch(() => null);
                             if (!doc)
                                 continue;
                             const name = doc.metadata?.fileName || docId;
-                            const content = (doc.content || '').slice(0, 1500); // 单篇 1.5KB 上限, 总 prompt 防爆
-                            contextHint += `\n--- 文档: ${name} ---\n${content}\n--- 文档结束 ---\n`;
-                            loaded++;
+                            names.push(name);
+                            if (names.length >= 5)
+                                break; // 指针只列前 5, 其余计数
                         }
-                        if (loaded === 0) {
-                            contextHint += `(但加载失败, 文档可能已被删除)\n\n`;
+                        if (names.length > 0) {
+                            const more = linkedIds.length > names.length ? ` (共 ${linkedIds.length} 篇)` : '';
+                            contextHint += `[系统上下文] 此 channel 关联了 ${linkedIds.length} 篇文档 — ${names.join('、')}${more}. 用户提到某篇时, 用读文档工具按需读取全文再回答.\n\n`;
                         }
                         else {
-                            contextHint += '\n';
+                            contextHint += `[系统上下文] 此 channel 关联了 ${linkedIds.length} 篇文档 (内容读取失败, 用读文档工具按需读取).\n\n`;
                         }
                     }
                     catch (err) {

package/dist/ios/sw.js

@@ -6,7 +6,7 @@
  * 现在: 代码类资源 (html/js/css/json) 一律 **network-first** (拿不到网才回退缓存),
  *   缓存名带版本号, activate 时清掉所有旧缓存; 图标等静态资源仍 cache-first。
  */
-const CACHE = 'bolloon-mobile-v0.6.5';
+const CACHE = 'bolloon-mobile-v0.6.6';
 const SHELL = [
   './mobile.html',
   './mobile.css',