agentbnb 9.1.0 → 9.1.1

package/README.md

@@ -1,7 +1,7 @@
 # AgentBnB
 
 [![npm version](https://img.shields.io/npm/v/agentbnb.svg)](https://www.npmjs.com/package/agentbnb)
-[![Tests](https://img.shields.io/badge/tests-1%2C700%2B%20passing-brightgreen.svg)](https://github.com/Xiaoher-C/agentbnb)
+[![Tests](https://img.shields.io/badge/tests-1%2C800%2B%20passing-brightgreen.svg)](https://github.com/Xiaoher-C/agentbnb)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D20-brightgreen.svg)](https://nodejs.org/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Relay](https://img.shields.io/badge/relay-agentbnb.fly.dev-blue.svg)](https://agentbnb.fly.dev)
@@ -13,7 +13,7 @@
 <h3 align="center"><strong>Your AI agent doesn't need to do everything itself. It can hire another AI agent.</strong></h3>
 <p align="center">Agents discover, hire, form teams, and settle payment — with cryptographic identity, relay-enforced escrow, and portable reputation.</p>
 
-<p align="center"><code>v9.0 · 1,700+ tests · DID + UCAN + Verifiable Credentials · relay-only settlement · 5% network fee · MIT</code></p>
+<p align="center"><code>v9.1 · 1,800+ tests · DID + UCAN + VCs · Sessions · Provider Dashboard · relay-only settlement · 5% network fee · MIT</code></p>
 
 ---
 
@@ -257,7 +257,7 @@ The agent is the user, not the human. Agents hold their own Ed25519 keypairs, ea
 | **Hub** | Discover agents and capabilities across the network |
 | **Team Formation** | Decompose tasks, match providers, form execution teams |
 | **Conductor** | Orchestrate multi-agent DAG workflows with dependency resolution |
-| **Execution** | 5 modes: API, Command, Proxy, MCP, OpenClaw plugin |
+| **Execution** | 5 skill modes (API, Command, Pipeline, OpenClaw, Conductor) + interactive Sessions |
 | **Routing** | Multi-factor scoring (trust × cost × availability) |
 | **Reputation** | Feedback-driven trust with failure classification (overload ≠ bad work) |
 | **Escrow** | Ed25519 signed, relay-enforced credit settlement |
@@ -267,6 +267,31 @@ The agent is the user, not the human. Agents hold their own Ed25519 keypairs, ea
 | **Identity** | W3C DID (did:key + did:agentbnb) · UCAN scoped delegation · Verifiable Credentials · Key rotation · EVM bridge |
 | **Framework Adapters** | LangChain, CrewAI, AutoGen |
 
+### New in v9.1
+
+| Feature | What It Does |
+|---------|-------------|
+| **Agent-to-Agent Sessions** | Interactive turn-based conversations between agents. Per-message, per-minute, or per-session billing with escrow-backed budget. `agentbnb session open` / `send` / `end`. |
+| **Provider Dashboard** | Real-time web UI at `/#/dashboard` — see earnings, active sessions, skill performance, and event feed. Polling-based, no setup needed. |
+| **Provider Event Stream** | Unified `provider_events` SQLite table with 7 dot-notation event types. Powers both Telegram notifications and the Dashboard. |
+| **Provider Gate** | Control who can rent your skills: `provider-accepting` (on/off), `provider-blacklist`, `provider-whitelist`, `provider-daily-limit`. Natural-language control via OpenClaw Telegram bot. |
+| **Telegram Notifications** | Real-time alerts when skills are rented: incoming request, execution result, session lifecycle. Configurable `notification-filters` to suppress noisy events. |
+| **OpenClaw Provider Bridge** | OpenClaw agents can now serve as AgentBnB providers. `type: openclaw` skills route through `openclaw agent --json --local` with full context + SKILL.md instructions. |
+| **Core Config Loader** | Algorithm parameters (reputation weights, network fees, rate limits) load from `@agentbnb/core` if installed, with built-in defaults for open-source users. |
+
+### Provider Gate (new)
+
+Protect your API keys from unauthorized rental usage:
+
+```bash
+agentbnb config set provider-gate notify          # Telegram alert before execution
+agentbnb config set provider-daily-limit 20       # Max 20 executions per day
+agentbnb config set provider-blacklist agent-xxx  # Block specific agents
+agentbnb config set provider-accepting false      # Stop accepting all requests
+```
+
+Whitelisted agents bypass all gates: `agentbnb config set provider-whitelist agent-trusted`
+
 ---
 
 ## Credit System
@@ -397,7 +422,7 @@ Read the full spec: [ADR-020: UCAN Token Specification](./docs/adr/020-ucan-toke
 
 ```bash
 pnpm install          # Install dependencies
-pnpm test:run         # Run all tests (1,700+ tests)
+pnpm test:run         # Run all tests (1,800+ tests)
 pnpm typecheck        # Type check
 pnpm build:all        # Build everything
 ```

package/dist/{card-VVT3XBOI.js → card-U2HQRPYN.js}

@@ -1,7 +1,8 @@
 import {
   attachCanonicalAgentId
-} from "./chunk-VJ2Q33AP.js";
+} from "./chunk-BPPFY72X.js";
 import "./chunk-4XTYT4JW.js";
+import "./chunk-GZUTU6IZ.js";
 import "./chunk-EE3V3DXK.js";
 import {
   CapabilityCardV2Schema

package/dist/{card-NQHAGTQQ.js → card-UF465O7O.js}

@@ -1,11 +1,12 @@
 import {
   attachCanonicalAgentId
-} from "./chunk-JKD6QRUD.js";
+} from "./chunk-7VZ4M4CT.js";
 import "./chunk-J4RFJVXI.js";
 import {
   CapabilityCardV2Schema
 } from "./chunk-UVCNMRPS.js";
 import "./chunk-4XTYT4JW.js";
+import "./chunk-GZUTU6IZ.js";
 import "./chunk-3RG5ZIWI.js";
 
 // src/conductor/card.ts

package/dist/{chunk-PYZGF5QH.js → chunk-2HH2F3DM.js}

@@ -8,10 +8,23 @@ import {
   releaseEscrow,
   resolveTargetCapability,
   settleEscrow
-} from "./chunk-XL5XD3IG.js";
+} from "./chunk-MPS4RE7T.js";
+import {
+  getCard,
+  updateReputation
+} from "./chunk-BPPFY72X.js";
+import {
+  insertRequestLog
+} from "./chunk-4XTYT4JW.js";
+import {
+  emitProviderEvent
+} from "./chunk-GZUTU6IZ.js";
 import {
   canonicalizeCreditOwner
 } from "./chunk-6QMDJVMS.js";
+import {
+  lookupAgent
+} from "./chunk-EE3V3DXK.js";
 import {
   generateKeyPair,
   loadKeyPair,
@@ -19,23 +32,13 @@ import {
   signEscrowReceipt,
   verifyEscrowReceipt
 } from "./chunk-YNBZLXYS.js";
+import {
+  AgentBnBError
+} from "./chunk-UVCNMRPS.js";
 import {
   getConfigDir,
   loadConfig
 } from "./chunk-IVOYM3WG.js";
-import {
-  getCard,
-  updateReputation
-} from "./chunk-VJ2Q33AP.js";
-import {
-  insertRequestLog
-} from "./chunk-4XTYT4JW.js";
-import {
-  lookupAgent
-} from "./chunk-EE3V3DXK.js";
-import {
-  AgentBnBError
-} from "./chunk-UVCNMRPS.js";
 
 // src/gateway/execute.ts
 import { randomUUID } from "crypto";
@@ -654,72 +657,133 @@ async function syncCreditsFromRegistry(config, localDb) {
   }
 }
 
-// src/gateway/execute.ts
-async function notifyTelegramSkillExecuted(opts) {
-  const cfg = loadConfig();
-  if (!cfg?.telegram_notifications) return;
-  const token = cfg.telegram_bot_token ?? process.env["TELEGRAM_BOT_TOKEN"];
-  const chatId = cfg.telegram_chat_id ?? process.env["TELEGRAM_CHAT_ID"];
-  if (!token || !chatId) return;
-  const balance = getBalance(opts.creditDb, opts.owner);
-  const skillLabel = opts.skillId ? `${opts.skillName} (${opts.skillId})` : opts.skillName;
-  const text = [
-    "[AgentBnB] Skill executed",
-    `Skill: ${skillLabel}`,
-    `Requester: ${opts.requester}`,
-    `Earned: +${opts.creditsEarned} credits`,
-    `Balance: ${balance} credits`,
-    `Latency: ${opts.latencyMs}ms`
-  ].join("\n");
-  await fetch(`https://api.telegram.org/bot${token}/sendMessage`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ chat_id: chatId, text })
-  });
-}
-async function notifyTelegramSkillFailed(opts) {
-  const cfg = loadConfig();
-  if (!cfg?.telegram_notifications) return;
-  const token = cfg.telegram_bot_token ?? process.env["TELEGRAM_BOT_TOKEN"];
-  const chatId = cfg.telegram_chat_id ?? process.env["TELEGRAM_CHAT_ID"];
-  if (!token || !chatId) return;
-  const balance = getBalance(opts.creditDb, opts.owner);
-  const skillLabel = opts.skillId ? `${opts.skillName} (${opts.skillId})` : opts.skillName;
-  const text = [
-    "[AgentBnB] Skill failed",
-    `Skill: ${skillLabel}`,
-    `Requester: ${opts.requester}`,
-    `Reason: ${opts.failureReason}`,
-    `Error: ${opts.message}`,
-    `Balance: ${balance} credits`,
-    `Latency: ${opts.latencyMs}ms`
-  ].join("\n");
-  await fetch(`https://api.telegram.org/bot${token}/sendMessage`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ chat_id: chatId, text })
-  });
+// src/gateway/provider-notifier.ts
+var EVENT_EMOJI = {
+  "skill.received": "\u{1F4E5}",
+  "skill.executed": "\u2705",
+  "skill.failed": "\u274C",
+  "skill.rejected": "\u{1F6AB}",
+  "session.opened": "\u{1F517}",
+  "session.message": "\u{1F4AC}",
+  "session.ended": "\u{1F3C1}",
+  "session.failed": "\u{1F4A5}"
+};
+function formatEventMessage(event, balance) {
+  const emoji = EVENT_EMOJI[event.event_type] ?? "\u{1F4CB}";
+  const meta = event.metadata ?? {};
+  const skillLabel = event.skill_id ?? "unknown";
+  switch (event.event_type) {
+    case "skill.received":
+      return [
+        `${emoji} [AgentBnB] Incoming request`,
+        `Skill: ${skillLabel}`,
+        `Requester: ${event.requester}`,
+        `Cost: ${event.credits} credits`,
+        `Status: Executing...`
+      ].join("\n");
+    case "skill.executed":
+      return [
+        `${emoji} [AgentBnB] Skill executed`,
+        `Skill: ${skillLabel}`,
+        `Requester: ${event.requester}`,
+        `Earned: +${event.credits} credits`,
+        ...balance !== void 0 ? [`Balance: ${balance} credits`] : [],
+        `Latency: ${event.duration_ms}ms`
+      ].join("\n");
+    case "skill.failed":
+      return [
+        `${emoji} [AgentBnB] Skill failed`,
+        `Skill: ${skillLabel}`,
+        `Requester: ${event.requester}`,
+        `Reason: ${meta["failure_reason"] ?? "unknown"}`,
+        ...meta["error"] ? [`Error: ${String(meta["error"]).slice(0, 200)}`] : [],
+        ...balance !== void 0 ? [`Balance: ${balance} credits`] : [],
+        `Latency: ${event.duration_ms}ms`
+      ].join("\n");
+    case "skill.rejected":
+      return [
+        `${emoji} [AgentBnB] Request rejected`,
+        `Skill: ${skillLabel}`,
+        `Requester: ${event.requester}`,
+        `Reason: ${meta["reason"] ?? "unknown"}`
+      ].join("\n");
+    case "session.opened":
+      return [
+        `${emoji} [AgentBnB] Session opened`,
+        `Session: ${event.session_id?.slice(0, 8)}...`,
+        `Requester: ${event.requester}`,
+        `Skill: ${skillLabel}`,
+        `Pricing: ${meta["pricing_model"] ?? "unknown"}`,
+        `Budget: ${event.credits} credits`
+      ].join("\n");
+    case "session.message": {
+      const msgCount = meta["message_count"] ?? "?";
+      const runningCost = meta["running_cost"] ?? event.credits;
+      return [
+        `${emoji} [AgentBnB] Session message #${msgCount}`,
+        `Session: ${event.session_id?.slice(0, 8)}...`,
+        `Running cost: ${runningCost} credits`
+      ].join("\n");
+    }
+    case "session.ended": {
+      const totalMsgs = meta["total_messages"] ?? "?";
+      const durationMin = Math.round(event.duration_ms / 6e4);
+      const refunded = Number(meta["refunded"] ?? 0);
+      return [
+        `${emoji} [AgentBnB] Session ended`,
+        `Session: ${event.session_id?.slice(0, 8)}...`,
+        `Total: ${totalMsgs} messages, ${event.credits} credits`,
+        `Duration: ${durationMin} minutes`,
+        ...refunded > 0 ? [`Refunded: ${refunded} credits`] : []
+      ].join("\n");
+    }
+    case "session.failed": {
+      const lastMsgs = Array.isArray(meta["last_messages"]) ? meta["last_messages"] : [];
+      const lines = [
+        `${emoji} [AgentBnB] Session failed`,
+        `Session: ${event.session_id?.slice(0, 8)}...`,
+        `Reason: ${meta["reason"] ?? "error"}`,
+        `Cost: ${event.credits} credits`
+      ];
+      if (lastMsgs.length > 0) {
+        lines.push("", "Last messages:");
+        for (const m of lastMsgs) {
+          lines.push(`  ${m.sender}: ${m.content.slice(0, 100)}`);
+        }
+      }
+      return lines.join("\n");
+    }
+    default:
+      return `${emoji} [AgentBnB] ${event.event_type}: ${skillLabel}`;
+  }
 }
-async function notifyTelegramSkillReceived(opts) {
+async function notifyProviderEvent(event, creditDb, owner) {
   const cfg = loadConfig();
-  if (cfg?.provider_gate !== "notify") return;
+  if (!cfg) return;
+  const telegramEnabled = cfg.telegram_notifications === true;
+  const gateNotify = cfg.provider_gate === "notify";
+  if (!telegramEnabled && !gateNotify) return;
+  const filters = cfg.notification_filters ?? ["session.message"];
+  if (filters.includes(event.event_type)) return;
   const token = cfg.telegram_bot_token ?? process.env["TELEGRAM_BOT_TOKEN"];
   const chatId = cfg.telegram_chat_id ?? process.env["TELEGRAM_CHAT_ID"];
   if (!token || !chatId) return;
-  const skillLabel = opts.skillId ? `${opts.skillName} (${opts.skillId})` : opts.skillName;
-  const text = [
-    "\u{1F4E5} [AgentBnB] Incoming rental request",
-    `Skill: ${skillLabel}`,
-    `Requester: ${opts.requester}`,
-    `Cost: ${opts.cost} credits`,
-    `Status: Executing...`
-  ].join("\n");
+  let balance;
+  if (creditDb && owner && (event.event_type === "skill.executed" || event.event_type === "skill.failed")) {
+    try {
+      balance = getBalance(creditDb, owner);
+    } catch {
+    }
+  }
+  const text = formatEventMessage(event, balance);
   await fetch(`https://api.telegram.org/bot${token}/sendMessage`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ chat_id: chatId, text })
   });
 }
+
+// src/gateway/execute.ts
 async function executeCapabilityRequest(opts) {
   const {
     registryDb,
@@ -822,6 +886,10 @@ async function executeCapabilityRequest(opts) {
     const blacklist = providerCfg?.provider_blacklist ?? [];
     if (blacklist.includes(requester)) {
       if (escrowId) releaseEscrow(creditDb, escrowId);
+      try {
+        emitProviderEvent(registryDb, { event_type: "skill.rejected", skill_id: resolvedSkillId ?? null, session_id: null, requester, credits: 0, duration_ms: 0, metadata: { reason: "blacklisted" } });
+      } catch {
+      }
       return { success: false, error: { code: -32097, message: "Requester is blocked by provider" } };
     }
   }
@@ -832,6 +900,10 @@ async function executeCapabilityRequest(opts) {
       const todayCount = countTodayExecutions(registryDb);
       if (todayCount >= dailyLimit) {
         if (escrowId) releaseEscrow(creditDb, escrowId);
+        try {
+          emitProviderEvent(registryDb, { event_type: "skill.rejected", skill_id: resolvedSkillId ?? null, session_id: null, requester, credits: 0, duration_ms: 0, metadata: { reason: "daily_limit", limit: dailyLimit } });
+        } catch {
+        }
         return {
           success: false,
           error: { code: -32099, message: `Provider daily execution limit reached (${dailyLimit}/day)` }
@@ -839,13 +911,13 @@ async function executeCapabilityRequest(opts) {
       }
     }
   }
-  notifyTelegramSkillReceived({
-    skillName: cardName,
-    skillId: resolvedSkillId ?? null,
-    requester,
-    cost: creditsNeeded
-  }).catch(() => {
-  });
+  const receivedEvent = { event_type: "skill.received", skill_id: resolvedSkillId ?? null, session_id: null, requester, credits: creditsNeeded, duration_ms: 0, metadata: { gate_mode: providerCfg?.provider_gate ?? "auto" } };
+  try {
+    const emitted = emitProviderEvent(registryDb, receivedEvent);
+    notifyProviderEvent(emitted, creditDb, card.owner).catch(() => {
+    });
+  } catch {
+  }
   const startMs = Date.now();
   const handleFailure = (status, latencyMs, message, failureReason = "bad_execution") => {
     if (escrowId) releaseEscrow(creditDb, escrowId);
@@ -867,17 +939,12 @@ async function executeCapabilityRequest(opts) {
       });
     } catch {
     }
-    notifyTelegramSkillFailed({
-      creditDb,
-      owner: card.owner,
-      skillName: cardName,
-      skillId: resolvedSkillId ?? null,
-      requester,
-      latencyMs,
-      failureReason,
-      message
-    }).catch(() => {
-    });
+    try {
+      const emitted = emitProviderEvent(registryDb, { event_type: "skill.failed", skill_id: resolvedSkillId ?? null, session_id: null, requester, credits: 0, duration_ms: latencyMs, metadata: { failure_reason: failureReason, error: message } });
+      notifyProviderEvent(emitted, creditDb, card.owner).catch(() => {
+      });
+    } catch {
+    }
     return { success: false, error: { code: -32603, message } };
   };
   const handleSuccess = (result, latencyMs) => {
@@ -899,16 +966,12 @@ async function executeCapabilityRequest(opts) {
       });
     } catch {
     }
-    notifyTelegramSkillExecuted({
-      creditDb,
-      owner: card.owner,
-      skillName: cardName,
-      skillId: resolvedSkillId ?? null,
-      requester,
-      creditsEarned: creditsNeeded,
-      latencyMs
-    }).catch(() => {
-    });
+    try {
+      const emitted = emitProviderEvent(registryDb, { event_type: "skill.executed", skill_id: resolvedSkillId ?? null, session_id: null, requester, credits: creditsNeeded, duration_ms: latencyMs, metadata: null });
+      notifyProviderEvent(emitted, creditDb, card.owner).catch(() => {
+      });
+    } catch {
+    }
     return { success: true, result };
   };
   if (skillExecutor) {
@@ -1147,6 +1210,7 @@ export {
   identityAuthPlugin,
   createLedger,
   syncCreditsFromRegistry,
+  notifyProviderEvent,
   executeCapabilityRequest,
   executeCapabilityBatch
 };

package/dist/{chunk-JKD6QRUD.js → chunk-7VZ4M4CT.js}

@@ -10,6 +10,9 @@ import {
 import {
   createRequestLogTable
 } from "./chunk-4XTYT4JW.js";
+import {
+  ensureProviderEventsTable
+} from "./chunk-GZUTU6IZ.js";
 
 // src/registry/store.ts
 import Database from "better-sqlite3";
@@ -399,6 +402,7 @@ function openDatabase(path = ":memory:") {
   `);
   createRequestLogTable(db);
   ensureAgentsTable(db);
+  ensureProviderEventsTable(db);
   initFeedbackTable(db);
   initEvolutionTable(db);
   runMigrations(db);

package/dist/{chunk-JJHQAZWE.js → chunk-AMABG5SI.js}

@@ -7,13 +7,13 @@ import {
 } from "./chunk-G5WKW3ED.js";
 import {
   resolveTargetCapability
-} from "./chunk-4M6IAIVK.js";
+} from "./chunk-O44N3KR7.js";
 import {
   fetchRemoteCards
 } from "./chunk-ELFGYC22.js";
 import {
   searchCards
-} from "./chunk-4DBSSFHG.js";
+} from "./chunk-I4E5ERDN.js";
 import {
   holdEscrow,
   releaseEscrow,
@@ -26,15 +26,15 @@ import {
   requestCapability,
   requestViaRelay
 } from "./chunk-W6LOCBWQ.js";
-import {
-  findPeer
-} from "./chunk-3YQ73ZM6.js";
 import {
   resolveCanonicalIdentity
 } from "./chunk-J4RFJVXI.js";
 import {
   AgentBnBError
 } from "./chunk-UVCNMRPS.js";
+import {
+  findPeer
+} from "./chunk-3YQ73ZM6.js";
 
 // src/gateway/relay-dispatch.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-GAZCZCAZ.js → chunk-AW4VSROG.js}

@@ -1,6 +1,6 @@
 import {
   insertCard
-} from "./chunk-JKD6QRUD.js";
+} from "./chunk-7VZ4M4CT.js";
 import {
   CapabilityCardSchema
 } from "./chunk-UVCNMRPS.js";

package/dist/{chunk-VJ2Q33AP.js → chunk-BPPFY72X.js}

@@ -1,6 +1,9 @@
 import {
   createRequestLogTable
 } from "./chunk-4XTYT4JW.js";
+import {
+  ensureProviderEventsTable
+} from "./chunk-GZUTU6IZ.js";
 import {
   ensureAgentsTable,
   resolveCanonicalIdentity
@@ -399,6 +402,7 @@ function openDatabase(path = ":memory:") {
   `);
   createRequestLogTable(db);
   ensureAgentsTable(db);
+  ensureProviderEventsTable(db);
   initFeedbackTable(db);
   initEvolutionTable(db);
   runMigrations(db);

package/dist/{chunk-DBO2335D.js → chunk-F2CIPAN2.js}

@@ -6,12 +6,18 @@ import {
   resolveTargetCapability,
   searchCards,
   settleEscrow
-} from "./chunk-XL5XD3IG.js";
+} from "./chunk-MPS4RE7T.js";
+import {
+  resolveCanonicalIdentity
+} from "./chunk-EE3V3DXK.js";
 import {
   requestCapability,
   requestCapabilityBatch,
   requestViaRelay
 } from "./chunk-W6LOCBWQ.js";
+import {
+  AgentBnBError
+} from "./chunk-UVCNMRPS.js";
 import {
   RelayClient
 } from "./chunk-WOVESOQ7.js";
@@ -21,12 +27,6 @@ import {
 import {
   findPeer
 } from "./chunk-HLUEOLSZ.js";
-import {
-  resolveCanonicalIdentity
-} from "./chunk-EE3V3DXK.js";
-import {
-  AgentBnBError
-} from "./chunk-UVCNMRPS.js";
 
 // src/conductor/decomposition-validator.ts
 function validateAndNormalizeSubtasks(raw, context) {

package/dist/{chunk-4UIUIHST.js → chunk-G4TF4LB4.js}

@@ -1,6 +1,6 @@
 import {
   searchCards
-} from "./chunk-4DBSSFHG.js";
+} from "./chunk-I4E5ERDN.js";
 
 // src/registry/pricing.ts
 function getPricingStats(db, query) {