@bolloon/bolloon-agent 0.4.24 → 0.4.26

package/dist/ios/mobile.css

@@ -688,3 +688,18 @@ body {
   color: var(--bg);
   font-weight: 600;
 }
+
+/* —— 隐私政策 (2026-09-16) —— */
+.privacy-link {
+  display: block; margin: 6px 0 2px; text-align: center;
+  color: var(--accent); font-size: 13px; text-decoration: none;
+}
+.privacy-link:active { opacity: .7; }
+.policy-body {
+  flex: 1; overflow-y: auto; -webkit-overflow-scrolling: touch;
+  padding: 14px 16px calc(40px + env(safe-area-inset-bottom));
+}
+.policy-body h3 { font-size: 14px; font-weight: 600; color: var(--text); margin: 18px 0 6px; }
+.policy-body p { font-size: 13px; line-height: 1.75; color: var(--text-secondary); margin: 0 0 10px; }
+.policy-body a { color: var(--accent); word-break: break-all; }
+.policy-meta { font-size: 12px; color: var(--text-muted); }

package/dist/ios/mobile.html

@@ -43,7 +43,7 @@
   </header>
 
   <!-- 主页面: 双频滑动卡片 -->
-  <main class="page-container" id="page-main" data-tab="main">
+  <main class="page-container" id="page-main" data-tab="main" hidden>
     <!-- 水平滑动卡片轨道 -->
     <div class="card-carousel" id="card-carousel">
       <div class="card-track" id="card-track">
@@ -139,6 +139,26 @@
 <button class="create-session-btn" id="btn-create-session" hidden>＋ 创建新会话</button>
 
 <!-- 创建智能体: 底部滑入加载 sheet -->
+<!-- 2026-09-16: 首启隐私同意门 — 上架要求: 用户同意前不读取本机数据 / 不连网 / 不申请任何权限 -->
+<div class="sheet" id="privacy-gate" hidden>
+  <div class="sheet-inner">
+    <div class="sheet-title" id="privacy-gate-title">隐私政策与权限说明</div>
+    <div class="sheet-text" id="privacy-gate-body"></div>
+    <a class="privacy-link" href="#" id="privacy-gate-link">阅读完整隐私政策 ›</a>
+    <button class="sheet-choice" id="privacy-agree">同意并继续</button>
+    <button class="sheet-choice sheet-cancel" id="privacy-decline">不同意</button>
+  </div>
+</div>
+
+<!-- 2026-09-16: 应用内隐私政策 (全屏, 离线可用; 权威版 = bolloon.cn/privacy.html) -->
+<div class="chat-page" id="policy-page" hidden>
+  <div class="chat-topbar">
+    <button class="icon-btn" id="policy-back">←</button>
+    <div style="flex:1;font-weight:600">隐私政策</div>
+  </div>
+  <div class="policy-body" id="policy-body"></div>
+</div>
+
 <div class="sheet" id="create-sheet" hidden>
   <div class="sheet-inner">
     <div class="spinner"></div>

package/dist/ios/mobile.js

@@ -1717,6 +1717,9 @@
         <div class="conv-item" id="settings-helia"><span class="list-icon">${ICONS.globe}</span><span>本机 IPFS 节点</span><span class="list-arrow">›</span></div>
         <div class="conv-item" id="settings-selfcard"><span class="list-icon">${ICONS.chip}</span><span id="selfcard-text">显示本机卡片: 开</span></div>
         <div class="conv-item" id="settings-did"><span class="list-icon">${ICONS.idcard}</span><span>DID</span></div>
+        <div class="conv-item" id="settings-privacy"><span class="list-icon">${ICONS.chip}</span><span>隐私政策与个人信息</span><span class="list-arrow">›</span></div>
+        <div class="conv-item" id="settings-wipe"><span class="list-icon">${ICONS.trash}</span><span style="flex:1;min-width:0"><span style="display:block">清除本机数据（注销）</span><span class="conv-preview" style="display:block">删除本机身份、智能体、会话与钱包</span></span><span class="list-arrow">›</span></div>
+        <div class="conv-item" id="settings-filing"><span class="list-icon">${ICONS.idcard}</span><span id="filing-text">APP 备案号：备案办理中</span></div>
       </div>`;
     document.body.appendChild(page);
     applyTheme(resolveThemePref(), false);
@@ -1757,6 +1760,20 @@
       });
     }
     $('#settings-desktop').addEventListener('click', openDesktopSync);
+    // 隐私政策 (双入口之一: 设置页; 另一个是首启同意门)
+    const privacyRow = $('#settings-privacy');
+    if (privacyRow) privacyRow.addEventListener('click', openPrivacyPolicy);
+    // 注销: 清除本机数据
+    const wipeRow = $('#settings-wipe');
+    if (wipeRow) wipeRow.addEventListener('click', () => { void wipeLocalDataFlow(); });
+    // 备案号展示 (未备案时如实显示"备案办理中", 不伪造编号)
+    const filingRow = $('#settings-filing');
+    if (filingRow) {
+      const ft = $('#filing-text');
+      const ptxt = privacyCore() && privacyCore().filingText ? privacyCore().filingText() : '';
+      if (ft && ptxt) ft.textContent = ptxt;
+      filingRow.addEventListener('click', () => { const pp = privacyCore(); alert((pp && pp.filingText ? pp.filingText() : 'APP 备案号：备案办理中') + '\n\n备案信息以工信部备案系统公示为准。'); });
+    }
     // 本机卡片显示开关 (移除后从这里恢复)
     const drawSelfCardToggle = () => {
       const on = (() => { try { return localStorage.getItem(SELF_CARD_HIDDEN_KEY) !== '1'; } catch { return true; } })();
@@ -2842,7 +2859,133 @@
     });
   }
 
+  // ============ 隐私合规 (2026-09-16): 同意门 / 政策页 / 注销 ============
+  //  上架要求: 首次启动必须先展示隐私政策; 用户同意前不得读取本机数据、不得连网、不得申请任何权限。
+  //  所以 init() 只做一件事 —— 决定"先弹门"还是"进应用"; 真正的初始化在 initApp()。
+
+  function privacyCore() {
+    return (window.BolloonCore && window.BolloonCore.privacy) || null;
+  }
+
+  function privacyNeedsConsent() {
+    const p = privacyCore();
+    if (!p || typeof p.needsConsent !== 'function') return true;   // 内核未就绪 → 按"需要同意"处理
+    try { return !!p.needsConsent(); } catch (e) { return true; }
+  }
+
+  function escHtml(v) {
+    return String(v == null ? '' : v)
+      .replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+      .replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+  }
+
+  /** 政策摘要 HTML (要素来自内核常量, 单测锁了必填项) */
+  function privacySummaryHtml() {
+    const p = privacyCore();
+    const items = (p && p.summary) || [];
+    return items.map((it) => `<h3>${escHtml(it.title)}</h3><p>${escHtml(it.body)}</p>`).join('');
+  }
+
+  function showPrivacyGate() {
+    const p = privacyCore();
+    const t = (p && p.consentText) || {};
+    const gate = $('#privacy-gate');
+    if (!gate) return;
+    const titleEl = $('#privacy-gate-title'), bodyEl = $('#privacy-gate-body');
+    if (titleEl && t.title) titleEl.textContent = t.title;
+    if (bodyEl) bodyEl.textContent = t.intro || '使用前请先阅读并同意隐私政策。';
+    const linkEl = $('#privacy-gate-link');
+    if (linkEl && t.policyLink) linkEl.textContent = t.policyLink + ' ›';
+    const agreeEl = $('#privacy-agree'), declineEl = $('#privacy-decline');
+    if (agreeEl && t.agree) agreeEl.textContent = t.agree;
+    if (declineEl && t.decline) declineEl.textContent = t.decline;
+    if (linkEl) linkEl.onclick = (e) => { e.preventDefault(); openPrivacyPolicy(); };
+    if (agreeEl) agreeEl.onclick = () => {
+      const ok = p && typeof p.grant === 'function' ? p.grant() : false;
+      if (!ok) { /* 本机写不进去(隐私模式/满盘): 不假装同意, 下次启动会再问 */ }
+      hideSheet('#privacy-gate');
+      initApp();
+    };
+    if (declineEl) declineEl.onclick = () => showPrivacyDeclined();
+    gate.hidden = false;
+  }
+
+  /** 不同意 → 停在说明页: 不初始化功能、不收集任何东西, 但也不强制退出应用 */
+  function showPrivacyDeclined() {
+    const p = privacyCore();
+    const t = (p && p.consentText) || {};
+    const gate = $('#privacy-gate');
+    if (!gate) return;
+    const titleEl = $('#privacy-gate-title'), bodyEl = $('#privacy-gate-body');
+    if (titleEl) titleEl.textContent = t.declinedTitle || '未同意';
+    if (bodyEl) bodyEl.textContent = t.declinedBody || '未同意隐私政策时应用不会收集任何信息。';
+    const linkEl = $('#privacy-gate-link');
+    if (linkEl) { linkEl.textContent = (t.declinedReread || '重新阅读') + ' ›'; linkEl.onclick = (e) => { e.preventDefault(); showPrivacyGate(); }; }
+    const agreeEl = $('#privacy-agree'), declineEl = $('#privacy-decline');
+    if (agreeEl) { agreeEl.textContent = t.agree || '同意并继续'; agreeEl.onclick = () => { const ok = p && p.grant ? p.grant() : false; if (!ok) {} hideSheet('#privacy-gate'); initApp(); }; }
+    if (declineEl) {
+      declineEl.textContent = t.declinedExit || '退出应用';
+      declineEl.onclick = () => {
+        const cap = window.Capacitor;
+        if (cap && cap.Plugins && cap.Plugins.App && cap.Plugins.App.exitApp) { try { cap.Plugins.App.exitApp(); return; } catch (e) {} }
+        alert('请手动退出应用（返回键 / 上滑关闭）。未同意隐私政策期间应用不会收集任何信息。');
+      };
+    }
+    gate.hidden = false;
+  }
+
+  /** 应用内完整政策 (全屏, 离线可用)。权威版永远是 bolloon.cn/privacy.html (商店表单填的就是它) */
+  function openPrivacyPolicy() {
+    const p = privacyCore();
+    const page = $('#policy-page');
+    const bodyEl = $('#policy-body');
+    if (!page || !bodyEl) return;
+    const t = (p && p.consentText) || {};
+    const url = (p && p.policyUrl) || 'https://bolloon.cn/privacy.html';
+    const contact = (p && p.contact) || '';
+    const filing = p && typeof p.filingText === 'function' ? p.filingText() : '';
+    bodyEl.innerHTML = `
+      <p class="policy-meta">${escHtml(t.intro || '')}</p>
+      ${privacySummaryHtml()}
+      <h3>完整政策与备案信息</h3>
+      <p>在线完整版：<a href="${escHtml(url)}" target="_blank" rel="noopener">${escHtml(url)}</a></p>
+      <p>${escHtml(filing)}</p>
+      <p class="policy-meta">联系方式：${escHtml(contact)}（承诺 7 个工作日内答复）</p>
+      <p class="policy-meta">本页内容与在线版本一致；如两者不一致，以在线版本为准。</p>`;
+    const back = $('#policy-back');
+    if (back) back.onclick = () => { page.hidden = true; };
+    page.hidden = false;
+  }
+
+  /** 注销: 清除本机全部数据 (身份 DID / 智能体 / 会话消息 / 支付 / 钱包) */
+  async function wipeLocalDataFlow() {
+    if (!confirm('确定清除本机数据（注销）？\n\n将删除本机上的：身份标识（DID）、智能体、会话与消息、钱包账本。\n已写入公开区块链的交易记录无法删除。\n\n此操作不可撤销。')) return;
+    const p = privacyCore();
+    if (!p || typeof p.wipe !== 'function') { alert('清除失败：本机内核未就绪，请重启应用后重试。'); return; }
+    showToast('正在清除本机数据…');
+    try {
+      const r = await p.wipe();
+      const failed = (r && r.failed) || [];
+      const deleted = (r && r.deletedDatabases) || [];
+      const cleared = (r && r.clearedStorageKeys) || [];
+      if (failed.length) {
+        alert(`部分数据未能清除（可重试）：\n${failed.join('\n')}\n\n已清除 ${deleted.length} 个数据库 / ${cleared.length} 个本机键。`);
+      } else {
+        alert(`${p.wipeNotice || '已清除本机数据。'}\n\n（本次删除 ${deleted.length} 个数据库、${cleared.length} 个本机键）`);
+      }
+      location.reload();   // 回到首启状态 (同意记录保留, 不再重复弹门)
+    } catch (e) {
+      alert('清除失败：' + ((e && e.message) || e));
+    }
+  }
+
   function init() {
+    // 首启/政策版本变更 → 先弹同意门, 不做任何初始化 (不读本机数据 / 不连网 / 不申请权限)
+    if (privacyNeedsConsent()) { showPrivacyGate(); return; }
+    initApp();
+  }
+
+  function initApp() {
     bindMenu();
     applyTheme(resolveThemePref(), false);
     switchTab('main');

package/dist/ios/server.js

@@ -3020,14 +3020,61 @@ ${goalDesc}
     // 2026-09-15: agent-delegate (manifest 协议 + agent_delegate) **启动即挂载**
     //   文档 bolloon-gateway-join.md 第 3 节要求 POST /api/agent/register 可用;
     //   之前只在 iroh 懒初始化 (/api/iroh/info 首次访问) 的收尾挂上 → 没触发时恒 404。
+    //
+    //   2026-09-15 (二修): 同时注入**真执行器** —— 被委派的一方不再是
+    //   `resultCid: mock-<ts>` 的假签收: 真的跑本地 agent session 出结果,
+    //   并把结果存进 OrbitDB 得到真实内容寻址 CID; 无活跃 channel / 无 LLM 时如实报错。
+    const delegateExecutor = async (req) => {
+        try {
+            const channels = await loadChannels();
+            const active = (() => {
+                try {
+                    const raw = fsSync.existsSync(path.join(process.env.HOME || '/tmp', '.bolloon', 'active-channel.json'))
+                        ? fsSync.readFileSync(path.join(process.env.HOME || '/tmp', '.bolloon', 'active-channel.json'), 'utf-8') : '';
+                    return raw ? JSON.parse(raw) : null;
+                }
+                catch {
+                    return null;
+                }
+            })();
+            const ch = channels.find((c) => c.id === active?.channelId) || channels.find((c) => c.id === active?.id) || channels[0];
+            if (!ch)
+                return { ok: false, summary: 'no local channel to execute with', error: 'no-channel' };
+            const agent = await getAgentForChannel(ch.id, ch.publicKey, ch.name, ch.didDocument);
+            const task = [
+                `【被委派任务 · 能力 ${req.capability}】`,
+                req.instruction,
+                req.docPath ? `\n资料路径: ${req.docPath}` : '',
+                req.docContent ? `\n资料内容:\n${req.docContent}` : '',
+                `\n(来自 agent ${req.fromAgentId || 'unknown'})，请直接给出可交付结果。`,
+            ].join('');
+            const out = await agent.prompt(task);
+            const text = String(out || '').trim();
+            if (!text || text.startsWith('❌') || text.startsWith('[AI 服务调用失败]')) {
+                return { ok: false, summary: text.slice(0, 800) || '(空结果)', error: 'execution-failed' };
+            }
+            // 真结果 → 内容寻址存储 (CID), 失败不编造 CID, 只回摘要
+            let cid;
+            try {
+                const { getCIDDatabase } = await import('../orbitdb/cid-database.js');
+                const rec = await getCIDDatabase().save({ agentId: req.targetAgentId, type: 'context', content: text, metadata: { capability: req.capability, fromAgentId: req.fromAgentId, kind: 'delegate-result' } });
+                cid = rec?.id;
+            }
+            catch { /* 存不上就不给 CID */ }
+            return { ok: true, summary: text.slice(0, 4000), resultCid: cid };
+        }
+        catch (e) {
+            return { ok: false, summary: `delegate executor failed: ${String(e?.message || e).slice(0, 300)}`, error: 'executor-error' };
+        }
+    };
     let agentDelegateMounted = false;
     try {
         const delegateTransport = createIrohDelegateTransport({ verbose: true });
         // 注意: createAgentDelegateApp 内部声明的是绝对路径 (/api/agent/...),
         // 所以挂载时**不能**再带 '/api/agent' 前缀 (否则变成 /api/agent/api/agent/... 恒 404)
-        app.use(createAgentDelegateApp(delegateTransport));
+        app.use(createAgentDelegateApp(delegateTransport, { execute: delegateExecutor }));
         agentDelegateMounted = true;
-        console.log('[agent-delegate] 已挂载到 /api/agent (启动即用: local-manifest / register / pick / delegate)');
+        console.log('[agent-delegate] 已挂载到 /api/agent (启动即用: local-manifest / register / pick / delegate, 真执行器已注入)');
     }
     catch (e) {
         console.warn('[agent-delegate] 挂载失败 (非致命):', e?.message);
@@ -6588,10 +6635,10 @@ ${goalDesc}
             if (!agentDelegateMounted) {
                 try {
                     const delegateTransport = createIrohDelegateTransport({ verbose: true });
-                    const delegateApp = createAgentDelegateApp(delegateTransport);
+                    const delegateApp = createAgentDelegateApp(delegateTransport, { execute: delegateExecutor });
                     app.use(delegateApp);
                     agentDelegateMounted = true;
-                    console.log('[iroh API] agent-delegate app 已挂载到 /api/agent (补挂)');
+                    console.log('[iroh API] agent-delegate app 已挂载到 /api/agent (补挂, 真执行器已注入)');
                 }
                 catch (e) {
                     console.error('[iroh API] 挂载 agent-delegate app 失败:', e);

package/dist/llm/config-store.js

@@ -4,11 +4,19 @@
  */
 import * as fs from 'fs/promises';
 import * as path from 'path';
-const CONFIG_DIR = path.join(process.env.HOME || '/tmp', '.bolloon');
+import * as os from 'os';
+import * as fsSync from 'fs';
+/** 2026-09-16 (M1): 不再在模块加载时固定 HOME —— 独立宿主/测试注入/长驻进程都走同一个解析 */
+function configDir() {
+    const env = process.env.BOLLOON_HOME?.trim();
+    if (env)
+        return env;
+    return path.join(process.env.HOME || os.homedir() || '/tmp', '.bolloon');
+}
 // 2026-08-07: llm-config.json → bolloon-config.json (统一配置文件名, Bolloon 自己有写权限)
 //   initialize() 会做一次迁移: 旧文件存在且新文件不存在 → 复制旧内容, 之后统一读写新文件
-const CONFIG_PATH = path.join(CONFIG_DIR, 'bolloon-config.json');
-const LEGACY_CONFIG_PATH = path.join(CONFIG_DIR, 'llm-config.json');
+const CONFIG_PATH = path.join(configDir(), 'bolloon-config.json');
+const LEGACY_CONFIG_PATH = path.join(configDir(), 'llm-config.json');
 export const DEFAULT_PROVIDER_CONFIGS = {
     openai: {
         enabled: false,
@@ -231,6 +239,10 @@ function getDefaultConfig() {
 class LLMConfigStore {
     config = null;
     initialized = false;
+    /** 2026-09-16: 记住加载时用的配置目录 —— 目录变了必须丢弃缓存, 否则会把 A 目录的配置写到 B 目录 */
+    loadedDir = null;
+    /** 2026-09-16: 记住加载时的文件签名 —— 外部改了配置 (repair/agent 工具/用户手改) 必须重新读, 不能一直用旧值 */
+    loadedSig = null;
     // v0.2.15: single-flight lock around read-modify-write of `~/.bolloon/llm-config.json`.
     // Prevents concurrent save() calls from clobbering each other when the user
     // configures two providers back-to-back (e.g. saving gemini, then anthropic, in
@@ -244,10 +256,19 @@ class LLMConfigStore {
         return next;
     }
     async initialize() {
+        // 目录变了 (换 HOME / 独立宿主 / 测试注入): 内存缓存作废, 重新读盘
+        const dir = configDir();
+        const sig = this.fileSignature();
+        if (this.initialized && (this.loadedDir !== dir || this.loadedSig !== sig)) {
+            this.initialized = false;
+            this.config = null;
+        }
         if (this.initialized)
             return;
+        this.loadedDir = dir;
+        this.loadedSig = sig;
         try {
-            await fs.mkdir(CONFIG_DIR, { recursive: true });
+            await fs.mkdir(configDir(), { recursive: true });
             // 2026-08-07: 迁移 — 旧 llm-config.json 存在且新 bolloon-config.json 不存在时复制旧内容
             try {
                 await fs.access(CONFIG_PATH);
@@ -289,6 +310,16 @@ class LLMConfigStore {
         // 2026-08-07: mode 0o600 — 仅当前用户可读写 (含 API key 的敏感配置); Bolloon 自身进程可写
         await fs.writeFile(CONFIG_PATH, JSON.stringify(this.config, null, 2), { mode: 0o600 });
     }
+    /** 配置文件签名 (mtime+size); 不存在时返回 'missing' */
+    fileSignature() {
+        try {
+            const st = fsSync.statSync(configDir() + '/bolloon-config.json');
+            return `${st.mtimeMs}:${st.size}`;
+        }
+        catch {
+            return 'missing';
+        }
+    }
     async getConfig() {
         await this.initialize();
         return { ...this.config };

package/dist/network/agent-network.js

@@ -619,6 +619,16 @@ export class AgentMessaging {
                 console.warn(`[Messaging] Signature verification failed for ${signedMsg.from.substring(0, 20)}`);
                 return false;
             }
+            // 2026-09-16 (2-C.4): 目标关联的真实外部事件 —— 签名已通过校验, 这里再按
+            //   来源 / correlation / 过期 / eventId 去重做一次严格匹配, 只唤醒"正在等这个事件"的 Goal。
+            //   **不在这里启动 agent**: 只写事实 + 唤醒, 由 Supervisor 下一轮继续。
+            try {
+                const { tryDeliverGoalEvent } = await import('./goal-event-bridge.js');
+                await tryDeliverGoalEvent(signedMsg, fromPeerId);
+            }
+            catch (e) {
+                console.warn(`[Messaging] goal event bridge 失败 (不影响普通消息):`, e?.message);
+            }
             const handler = this.messageHandlers.get(signedMsg.type);
             if (handler) {
                 handler(data, fromPeerId, signedMsg.from);

package/dist/network/goal-event-bridge.js

@@ -0,0 +1,57 @@
+/**
+ * goal-event-bridge.ts — 把"真实入站的签名消息"翻译成 Goal 外部事件 (批次 2-C.4)
+ *
+ * 只有签名已通过校验的消息才进到这里 (来源 = 对端 DID)。这里只做解析 + 投递,
+ * 启动执行由 Supervisor 决定 —— 事件处理器不碰 agent。
+ *
+ * 识别的两种真实来源:
+ *   · delegate 回包: type 含 `delegate` 或 payload 里有 delegateId/resultCid → source='delegate'
+ *   · P2P 协作回复: 其它带 goalId/requestId/continuationId 的消息 → source='p2p'
+ */
+import { deliverExternalEvent } from '../agents/external-events.js';
+function parsePayload(raw) {
+    if (!raw)
+        return null;
+    if (typeof raw === 'object')
+        return raw;
+    try {
+        return JSON.parse(String(raw));
+    }
+    catch {
+        return null;
+    }
+}
+/** 从 payload 里提取目标关联字段 (支持 goalEvent 包裹或平铺两种写法) */
+export function extractGoalEvent(signed, fromDid) {
+    const body = parsePayload(signed.payload);
+    if (!body || typeof body !== 'object')
+        return null;
+    const env = (body.goalEvent && typeof body.goalEvent === 'object') ? body.goalEvent : body;
+    const goalId = env.goalId || env.goal_id;
+    const requestId = env.requestId || env.request_id || env.correlationId;
+    const continuationId = env.continuationId || env.continuation_id;
+    const eventId = env.eventId || env.event_id;
+    if (!goalId && !requestId && !continuationId)
+        return null; // 与 Goal 无关 → 普通消息
+    if (!eventId)
+        return null; // 没有 eventId 无法去重 → 不当事件处理
+    const isDelegate = /delegate/i.test(String(signed.type)) || !!(env.delegateId || env.resultCid);
+    return {
+        source: isDelegate ? 'delegate' : 'p2p',
+        eventId: String(eventId),
+        requestId: requestId ? String(requestId) : undefined,
+        continuationId: continuationId ? String(continuationId) : undefined,
+        goalId: goalId ? String(goalId) : undefined,
+        fromDid: fromDid || signed.from,
+        eventName: env.event || env.eventName || env.kind,
+        payload: env.result ?? env.payload ?? body,
+    };
+}
+/** 投递 (未匹配/不合法 → 返回 matched:false, 调用方继续走普通消息处理) */
+export async function tryDeliverGoalEvent(signed, fromDid) {
+    const event = extractGoalEvent(signed, fromDid);
+    if (!event)
+        return { matched: false };
+    const res = await deliverExternalEvent(event);
+    return { matched: res.ok, reason: res.reason, goalId: res.goalId };
+}