@changan-su/tangu-agent
BMCP server package @forsion/tangu-agent
Install
agr install @changan-su/tangu-agent --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@forsion/tangu-agent", "version": "2.7.4", "license": "SEE LICENSE IN LICENSE", "description": "Tangu Agent — 与宿主无关的服务端 agent runtime;可作为 Forsion 微后端插件,也可独立运行(云端大脑客户端)。", "type": "module", "main": "./dist/index.js", "types": "./dist/index.d.ts", "exports": { ".": { "types": "./dist/index.d.ts", "default": "./dist/index.js" } }, "bin": { "tangu": "./dist/tui/main.js", "tangu-server": "./dist/standalone/main.js" }, "files": [ "dist", "src", "skills", "agent-skills" ], "scripts": { "build": "tsc", "typecheck": "tsc --noEmit && node scripts/sync-plugin-api.mjs --check && node scripts/sync-command-catalog.mjs --check", "sync:plugin-api": "node scripts/sync-plugin-api.mjs", "test": "vitest run", "test:watch": "vitest", "e2e:direct": "node scripts/direct-offline.e2e.mjs", "tui": "node dist/tui/main.js", "worker": "node dist/tui/main.js worker", "server": "node dist/standalone/main.js", "standalone": "node dist/standalone/main.js", "clean": "rm -rf dist", "build:plugins": "tsc -p plugins/stickers/tsconfig.json && tsc -p plugins/reply-segment/tsconfig.json && tsc -p plugins/voice-message/tsconfig.json", "desktop:install": "cd ../desktop && npm install", "desktop:dev": "cd ../desktop && npm run dev", "desktop:build": "npm run build && cd ../desktop && npm run build", "sync:commands": "node scripts/sync-command-catalog.mjs" }, "dependencies": { "@agentclientprotocol/sdk": "^0.14.1", "@electric-sql/pglite": "^0.5.1", "@llamaindex/liteparse": "^2.2.1", "@modelcontextprotocol/sdk": "^1.29.0", "better-sqlite3": "^12.11.1", "express": "^4.18.2", "ink": "^5.1.0", "marked": "^12.0.2", "marked-terminal": "^7.1.0", "node-diff3": "^3.2.1", "pg": "^8.18.0", "react": "^18.3.1", "smol-toml": "^1.3.1", "uuid": "^9.0.1", "ws": "^8.21.0" }, "devDependencies": { "@types/better-sqlite3": "^7.6.11", "@types/express": "^4.17.21", "@types/node": "^20.10.0", "@types/pg": "^8.11.0", "@types/react": "^18.3.12", "@types/uuid": "^9.0.7", "@types/ws": "^8.18.1", "typescript": "^5.3.3", "vitest": "^3.2.4" } }
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-f687c8ab92972026-08-06