agentbnb 9.2.0 → 9.2.2

package/dist/skills/agentbnb/bootstrap.js

@@ -16,7 +16,7 @@ import {
   requestViaTemporaryRelay,
   resolvePendingRequest,
   verifyUCAN
-} from "../../chunk-MQIT2F5V.js";
+} from "../../chunk-OTAZIF65.js";
 import {
   createLedger,
   deriveAgentId,
@@ -28,7 +28,7 @@ import {
   notifyProviderEvent,
   syncCreditsFromRegistry,
   tryVerifyIdentity
-} from "../../chunk-CMGJ52SX.js";
+} from "../../chunk-NLGLGR2K.js";
 import {
   NETWORK_FEE_RATE,
   bootstrapAgent,
@@ -38,6 +38,7 @@ import {
   fetchRemoteCards,
   filterCards,
   getBalance,
+  getEscrowStatus,
   getTransactions,
   holdEscrow,
   markEscrowAbandoned,
@@ -49,7 +50,7 @@ import {
   releaseEscrow,
   searchCards,
   settleEscrow
-} from "../../chunk-MPS4RE7T.js";
+} from "../../chunk-DT2IEL5U.js";
 import {
   attachCanonicalAgentId,
   getCard,
@@ -1505,7 +1506,7 @@ var AgentRuntime = class {
     }
     const modes = /* @__PURE__ */ new Map();
     if (this.conductorEnabled) {
-      const { ConductorMode } = await import("../../conductor-mode-66IITI4I.js");
+      const { ConductorMode } = await import("../../conductor-mode-HJHU4XLT.js");
       const { registerConductorCard, CONDUCTOR_OWNER } = await import("../../card-U2HQRPYN.js");
       const { loadPeers: loadPeers2 } = await import("../../peers-IOVCBWAI.js");
       registerConductorCard(this.registryDb);
@@ -3943,6 +3944,39 @@ async function creditRoutesPlugin(fastify, options) {
     const transactions = getTransactions(creditDb, owner, { limit, after: since });
     return reply.send({ owner, transactions, limit });
   });
+  fastify.get("/api/credits/escrow/:id", {
+    schema: {
+      tags: ["credits"],
+      summary: "Get escrow status by ID (public, no auth required)",
+      params: {
+        type: "object",
+        properties: { id: { type: "string" } },
+        required: ["id"]
+      },
+      response: {
+        200: {
+          type: "object",
+          properties: {
+            id: { type: "string" },
+            owner: { type: "string" },
+            amount: { type: "number" },
+            card_id: { type: "string" },
+            status: { type: "string" },
+            created_at: { type: "string" },
+            settled_at: { type: ["string", "null"] }
+          }
+        },
+        404: { type: "object", properties: { error: { type: "string" } } }
+      }
+    }
+  }, async (request, reply) => {
+    const { id } = request.params;
+    const escrow = getEscrowStatus(creditDb, id);
+    if (!escrow) {
+      return reply.code(404).send({ error: "Escrow record not found" });
+    }
+    return reply.send(escrow);
+  });
   await fastify.register(async (scope) => {
     identityAuthPlugin(scope, { agentDb: creditDb });
     scope.post("/api/credits/hold", {
@@ -6965,6 +6999,56 @@ import { existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
 import { join as join4 } from "path";
 import { randomUUID as randomUUID9 } from "crypto";
 import { Cron as Cron2 } from "croner";
+
+// src/utils/runtime-mode.ts
+function isTestMode() {
+  return process.env["AGENTBNB_TEST_MODE"] === "1" || process.env["NODE_ENV"] === "test" || process.env["VITEST"] === "true";
+}
+function isOfflineMode() {
+  return process.env["AGENTBNB_OFFLINE"] === "1";
+}
+function shouldSkipNetwork() {
+  return isTestMode() || isOfflineMode();
+}
+
+// src/utils/network-probe.ts
+var PROBE_TIMEOUT_MS = 2e3;
+async function probeRegistry(registryUrl, timeoutMs = PROBE_TIMEOUT_MS) {
+  if (shouldSkipNetwork()) return false;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const url = `${registryUrl.replace(/\/$/, "")}/health`;
+    const res = await fetch(url, { method: "GET", signal: controller.signal });
+    return res.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+// src/utils/with-timeout.ts
+var TimeoutError = class extends Error {
+  constructor(timeoutMs) {
+    super(`Operation timed out after ${timeoutMs}ms`);
+    this.name = "TimeoutError";
+  }
+};
+async function withTimeout(promise, timeoutMs) {
+  let timer;
+  const timeoutPromise = new Promise((_, reject) => {
+    timer = setTimeout(() => reject(new TimeoutError(timeoutMs)), timeoutMs);
+  });
+  try {
+    return await Promise.race([promise, timeoutPromise]);
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+
+// src/runtime/service-coordinator.ts
+var STARTUP_SYNC_BUDGET_MS = 3e3;
 function buildFallbackRelayCard(owner) {
   return {
     id: randomUUID9(),
@@ -7168,11 +7252,28 @@ var ServiceCoordinator = class {
     this.runtime.registerJob(idleJob);
     console.log("IdleMonitor started (60s poll interval, 70% idle threshold)");
     if (this.config.registry) {
-      const startupSync = await syncCreditsFromRegistry(this.config, this.runtime.creditDb);
-      if (startupSync.synced) {
-        console.log(`[agentbnb] credits synced: ${startupSync.remoteBalance} (was ${startupSync.localWas})`);
+      if (shouldSkipNetwork()) {
+        console.warn("[agentbnb] credit sync skipped: test/offline mode");
       } else {
-        console.warn(`[agentbnb] credit sync skipped: ${startupSync.error}`);
+        const reachable = await probeRegistry(this.config.registry);
+        if (!reachable) {
+          console.warn("[agentbnb] credit sync skipped: registry unreachable (will retry every 5m)");
+        } else {
+          try {
+            const startupSync = await withTimeout(
+              syncCreditsFromRegistry(this.config, this.runtime.creditDb),
+              STARTUP_SYNC_BUDGET_MS
+            );
+            if (startupSync.synced) {
+              console.log(`[agentbnb] credits synced: ${startupSync.remoteBalance} (was ${startupSync.localWas})`);
+            } else {
+              console.warn(`[agentbnb] credit sync skipped: ${startupSync.error}`);
+            }
+          } catch (err) {
+            const reason = err instanceof TimeoutError ? `timeout after ${STARTUP_SYNC_BUDGET_MS}ms` : err.message;
+            console.warn(`[agentbnb] credit sync skipped: ${reason} (will retry every 5m)`);
+          }
+        }
       }
       this.creditSyncJob = new Cron2("*/5 * * * *", async () => {
         const result = await syncCreditsFromRegistry(this.config, this.runtime.creditDb);
@@ -7213,7 +7314,7 @@ var ServiceCoordinator = class {
     }
     if (opts.registryUrl && opts.relay) {
       const { RelayClient: RelayClient2 } = await import("../../websocket-client-RT4KLJL4.js");
-      const { executeCapabilityRequest: executeCapabilityRequest2 } = await import("../../execute-YBNCDAOX.js");
+      const { executeCapabilityRequest: executeCapabilityRequest2 } = await import("../../execute-YMPHTJPN.js");
       const localCards = listCards(this.runtime.registryDb, this.config.owner);
       const { primaryCard, additionalCards } = buildRelayRegistrationCards(this.config.owner, localCards);
       if (this.config.conductor?.public) {
@@ -7959,6 +8060,56 @@ async function handleDiscover(args, ctx) {
 
 // src/mcp/tools/request.ts
 import { z as z9 } from "zod";
+
+// src/autonomy/consumer-autonomy.ts
+var DEFAULT_CONSUMER_AUTONOMY = {
+  session_budget: 50,
+  single_request_max: 20,
+  multi_skill_policy: "notify"
+};
+function createSessionState() {
+  return { totalSpent: 0, paidCallCount: 0 };
+}
+function checkConsumerBudget(config, session, estimatedCost) {
+  if (estimatedCost <= 0) {
+    return { allowed: true };
+  }
+  if (estimatedCost > config.single_request_max) {
+    return {
+      allowed: false,
+      error: `Request cost (${estimatedCost} credits) exceeds single_request_max (${config.single_request_max}). Adjust consumer_autonomy.single_request_max in config to allow higher-cost requests.`
+    };
+  }
+  if (session.totalSpent + estimatedCost > config.session_budget) {
+    return {
+      allowed: false,
+      error: `Session budget exceeded: spent ${session.totalSpent} + requested ${estimatedCost} = ${session.totalSpent + estimatedCost} credits, but session_budget is ${config.session_budget}. This session has already made ${session.paidCallCount} paid call(s).`
+    };
+  }
+  if (session.paidCallCount > 0) {
+    if (config.multi_skill_policy === "block") {
+      return {
+        allowed: false,
+        error: `Multi-skill block: this would be paid call #${session.paidCallCount + 1} in this session (total spent: ${session.totalSpent}, this request: ${estimatedCost} credits). consumer_autonomy.multi_skill_policy is "block". Only one paid skill call is allowed per session unless policy is changed.`
+      };
+    }
+    if (config.multi_skill_policy === "notify") {
+      return {
+        allowed: true,
+        warning: `This is paid call #${session.paidCallCount + 1} in this session. Cumulative spend: ${session.totalSpent} + ${estimatedCost} = ${session.totalSpent + estimatedCost} credits (session budget: ${config.session_budget}).`
+      };
+    }
+  }
+  return { allowed: true };
+}
+function recordConsumerSpend(session, creditsSpent) {
+  if (creditsSpent > 0) {
+    session.totalSpent += creditsSpent;
+    session.paidCallCount += 1;
+  }
+}
+
+// src/mcp/tools/request.ts
 var requestInputSchema = {
   query: z9.string().optional().describe("Search query to find a matching capability (auto-request mode)"),
   card_id: z9.string().optional().describe("Direct card ID to request (skips search)"),
@@ -7996,7 +8147,17 @@ function deriveTimeoutHintFromCard(remoteCard, skillId) {
 async function handleRequest(args, ctx) {
   try {
     const maxCost = args.max_cost ?? 50;
+    const consumerConfig = ctx.config.consumer_autonomy ?? DEFAULT_CONSUMER_AUTONOMY;
+    if (!ctx.consumerSession) {
+      ctx.consumerSession = createSessionState();
+    }
     if (args.query) {
+      const budgetCheck = checkConsumerBudget(consumerConfig, ctx.consumerSession, maxCost);
+      if (!budgetCheck.allowed) {
+        return {
+          content: [{ type: "text", text: JSON.stringify({ success: false, error: budgetCheck.error, budget_exceeded: true }) }]
+        };
+      }
       const registryDb = openDatabase(ctx.config.db_path);
       const creditDb = openCreditDb(ctx.config.credit_db_path);
       registryDb.pragma("busy_timeout = 5000");
@@ -8020,8 +8181,12 @@ async function handleRequest(args, ctx) {
           maxCostCredits: maxCost,
           params: args.params
         });
+        const creditsUsed = typeof result?.creditsSpent === "number" ? result.creditsSpent : 0;
+        recordConsumerSpend(ctx.consumerSession, creditsUsed);
+        const response = { success: true, ...result };
+        if (budgetCheck.warning) response.spend_warning = budgetCheck.warning;
         return {
-          content: [{ type: "text", text: JSON.stringify({ success: true, ...result }, null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(response, null, 2) }]
         };
       } finally {
         registryDb.close();
@@ -8088,17 +8253,23 @@ async function handleRequest(args, ctx) {
       const targetAgentId = typeof remoteCard["agent_id"] === "string" ? remoteCard["agent_id"] : void 0;
       const gatewayUrl = remoteCard["gateway_url"];
       const timeoutHint = deriveTimeoutHintFromCard(remoteCard, args.skill_id);
+      let remoteCost = 0;
+      const remoteSkills = remoteCard["skills"];
+      if (Array.isArray(remoteSkills)) {
+        const matchedSkill = args.skill_id ? remoteSkills.find((s) => s.id === args.skill_id) : remoteSkills[0];
+        remoteCost = matchedSkill?.pricing?.credits_per_call ?? 0;
+      } else {
+        const remotePricing = remoteCard["pricing"];
+        remoteCost = remotePricing?.credits_per_call ?? 0;
+      }
       if (gatewayUrl) {
-        let remoteCost = 0;
-        const remoteSkills = remoteCard["skills"];
-        if (Array.isArray(remoteSkills)) {
-          const matchedSkill = args.skill_id ? remoteSkills.find((s) => s.id === args.skill_id) : remoteSkills[0];
-          remoteCost = matchedSkill?.pricing?.credits_per_call ?? 0;
-        } else {
-          const remotePricing = remoteCard["pricing"];
-          remoteCost = remotePricing?.credits_per_call ?? 0;
-        }
         if (remoteCost > 0) {
+          const budgetCheck = checkConsumerBudget(consumerConfig, ctx.consumerSession, remoteCost);
+          if (!budgetCheck.allowed) {
+            return {
+              content: [{ type: "text", text: JSON.stringify({ success: false, error: budgetCheck.error, budget_exceeded: true }) }]
+            };
+          }
           if (!targetOwner) {
             return {
               content: [{ type: "text", text: JSON.stringify({ success: false, error: "Paid remote request requires a target owner for relay routing" }) }]
@@ -8115,8 +8286,11 @@ async function handleRequest(args, ctx) {
             params: { ...args.params ?? {}, ...args.skill_id ? { skill_id: args.skill_id } : {}, requester: ctx.config.owner },
             timeoutMs: args.timeout_ms
           });
+          recordConsumerSpend(ctx.consumerSession, remoteCost);
+          const response = { success: true, result, creditsSpent: remoteCost };
+          if (budgetCheck.warning) response.spend_warning = budgetCheck.warning;
           return {
-            content: [{ type: "text", text: JSON.stringify({ success: true, result }, null, 2) }]
+            content: [{ type: "text", text: JSON.stringify(response, null, 2) }]
           };
         } else {
           const result = await requestCapability({
@@ -8134,6 +8308,14 @@ async function handleRequest(args, ctx) {
         }
       }
       if (targetOwner) {
+        if (remoteCost > 0) {
+          const budgetCheck = checkConsumerBudget(consumerConfig, ctx.consumerSession, remoteCost);
+          if (!budgetCheck.allowed) {
+            return {
+              content: [{ type: "text", text: JSON.stringify({ success: false, error: budgetCheck.error, budget_exceeded: true }) }]
+            };
+          }
+        }
         const result = await requestViaTemporaryRelay({
           registryUrl: ctx.config.registry,
           owner: ctx.config.owner,
@@ -8145,8 +8327,13 @@ async function handleRequest(args, ctx) {
           params: { ...args.params ?? {}, ...args.skill_id ? { skill_id: args.skill_id } : {} },
           timeoutMs: args.timeout_ms
         });
+        if (remoteCost > 0) {
+          recordConsumerSpend(ctx.consumerSession, remoteCost);
+        }
+        const response = { success: true, result };
+        if (remoteCost > 0) response.creditsSpent = remoteCost;
         return {
-          content: [{ type: "text", text: JSON.stringify({ success: true, result }, null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(response, null, 2) }]
         };
       }
       return {
@@ -8257,7 +8444,7 @@ async function conductAction(task, opts) {
     );
   };
   let relay;
-  if (config.registry) {
+  if (config.registry && !shouldSkipNetwork()) {
     relay = new RelayClient({
       registryUrl: config.registry,
       owner: config.owner,
@@ -8267,8 +8454,10 @@ async function conductAction(task, opts) {
       silent: true
     });
     try {
-      await relay.connect();
-    } catch {
+      await withTimeout(relay.connect(), 1e4);
+    } catch (err) {
+      if (err instanceof TimeoutError) {
+      }
       relay = void 0;
     }
   }

package/dist/{store-74EWU77V.js → store-GJJFFEQZ.js}

@@ -12,11 +12,11 @@ import {
   updateReputation,
   updateSkillAvailability,
   updateSkillIdleRate
-} from "./chunk-C56X7EFJ.js";
+} from "./chunk-QE42IJC4.js";
+import "./chunk-4XTYT4JW.js";
 import "./chunk-GZUTU6IZ.js";
 import "./chunk-J4RFJVXI.js";
 import "./chunk-UVCNMRPS.js";
-import "./chunk-4XTYT4JW.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   attachCanonicalAgentId,

package/dist/{vc-action-A6VBKERF.js → vc-action-72TQVMY2.js}

@@ -1,12 +1,15 @@
+import {
+  shouldSkipNetwork
+} from "./chunk-5FXLZ5FX.js";
 import {
   loadIdentity
 } from "./chunk-AA25Z6FW.js";
 import "./chunk-65GNX2KC.js";
-import "./chunk-UVCNMRPS.js";
 import {
   getConfigDir,
   loadConfig
 } from "./chunk-3XPBFF6H.js";
+import "./chunk-UVCNMRPS.js";
 import "./chunk-3RG5ZIWI.js";
 
 // src/cli/vc-action.ts
@@ -22,13 +25,20 @@ async function vcShow(opts) {
     console.error("Error: no registry configured. Run `agentbnb config set registry <url>`");
     process.exit(1);
   }
+  if (shouldSkipNetwork()) {
+    console.log("VC show: skipped (offline or test mode). Run again when online.");
+    return;
+  }
   const registryUrl = config.registry.replace(/\/$/, "");
   const agentId = identity.agent_id;
   let res;
   try {
-    res = await fetch(`${registryUrl}/api/credentials/${encodeURIComponent(agentId)}`);
+    res = await fetch(`${registryUrl}/api/credentials/${encodeURIComponent(agentId)}`, {
+      signal: AbortSignal.timeout(1e4)
+    });
   } catch (err) {
-    console.error("Error: failed to connect to registry \u2014", err.message);
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`Error: failed to connect to registry \u2014 ${msg}`);
     process.exit(1);
   }
   if (res.status === 404) {

package/openclaw.plugin.json

@@ -1,8 +1,8 @@
 {
   "id": "agentbnb",
   "name": "AgentBnB",
-  "description": "Where AI agents hire AI agents — join the network, hire agent specialists, earn credits, and coordinate with peers. Agents run autonomously on their own will.",
-  "version": "8.2.0",
+  "description": "P2P capability sharing protocol for AI agents. Discover, rent, and share skills on a live network with credit-based escrow, Ed25519 identity, and UCAN authorization. 1,700+ tests, MIT license.",
+  "version": "9.2.2",
   "kind": "tools",
   "configSchema": {
     "type": "object",
@@ -14,7 +14,7 @@
       },
       "registry": {
         "type": "string",
-        "default": "https://hub.agentbnb.dev",
+        "default": "https://agentbnb.fly.dev",
         "description": "Registry URL for the AgentBnB network"
       },
       "tier1Threshold": {
@@ -26,6 +26,22 @@
         "type": "number",
         "default": 50,
         "description": "Max credits per call for notify-after-action"
+      },
+      "sessionBudget": {
+        "type": "number",
+        "default": 50,
+        "description": "Max cumulative credits per MCP session (consumer autonomy guard)"
+      },
+      "singleRequestMax": {
+        "type": "number",
+        "default": 20,
+        "description": "Max credits per single request (consumer autonomy guard)"
+      },
+      "multiSkillPolicy": {
+        "type": "string",
+        "enum": ["auto", "notify", "block"],
+        "default": "notify",
+        "description": "Policy for subsequent paid skill calls: auto (allow), notify (warn), block (reject)"
       }
     }
   },
@@ -37,8 +53,8 @@
     },
     "registry": {
       "label": "Registry URL",
-      "placeholder": "https://hub.agentbnb.dev",
-      "help": "AgentBnB public registry. Change only if self-hosting."
+      "placeholder": "https://agentbnb.fly.dev",
+      "help": "AgentBnB public registry and relay. Change only if self-hosting."
     },
     "tier1Threshold": {
       "label": "Tier 1 Threshold (credits)",
@@ -49,6 +65,21 @@
       "label": "Tier 2 Threshold (credits)",
       "help": "Actions below this cost notify after completion. Above = ask before acting.",
       "advanced": true
+    },
+    "sessionBudget": {
+      "label": "Session Budget (credits)",
+      "help": "Max credits an agent can spend in a single MCP session. Prevents runaway multi-skill spending.",
+      "advanced": true
+    },
+    "singleRequestMax": {
+      "label": "Single Request Max (credits)",
+      "help": "Max credits per individual request. Requests above this are blocked.",
+      "advanced": true
+    },
+    "multiSkillPolicy": {
+      "label": "Multi-Skill Policy",
+      "help": "What happens when a second paid skill is called in the same session. 'notify' adds a spend warning.",
+      "advanced": true
     }
   }
 }

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "9.2.0",
+  "version": "9.2.2",
   "description": "P2P Agent Capability Sharing Protocol — Airbnb for AI agent pipelines",
   "type": "module",
   "main": "dist/index.js",
@@ -40,18 +40,6 @@
       "import": "./dist/identity/index.js"
     }
   },
-  "scripts": {
-    "build": "tsup",
-    "build:hub": "cd hub && pnpm install && pnpm build",
-    "build:all": "pnpm build && pnpm build:hub",
-    "dev": "tsx watch src/cli/index.ts",
-    "test": "vitest run",
-    "test:run": "vitest run",
-    "test:watch": "vitest",
-    "lint": "eslint src/",
-    "typecheck": "tsc --noEmit",
-    "prepublishOnly": "pnpm run build && pnpm run typecheck && pnpm run test:run"
-  },
   "keywords": [
     "ai",
     "agent",
@@ -104,9 +92,15 @@
   "engines": {
     "node": ">=20.0.0 <25.0.0"
   },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "better-sqlite3"
-    ]
+  "scripts": {
+    "build": "tsup",
+    "build:hub": "cd hub && pnpm install && pnpm build",
+    "build:all": "pnpm build && pnpm build:hub",
+    "dev": "tsx watch src/cli/index.ts",
+    "test": "vitest run",
+    "test:run": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
   }
-}
+}