@bolloon/bolloon-agent 0.4.27 → 0.4.29

package/dist/electron-build/network/agent-network.js

@@ -0,0 +1,775 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agentMessaging = exports.AgentMessaging = exports.agentRegistry = exports.AgentRegistry = void 0;
+exports.didKeyMatchesPublicKey = didKeyMatchesPublicKey;
+exports.initializeAgentNetwork = initializeAgentNetwork;
+exports.broadcastOwnAddress = broadcastOwnAddress;
+exports.findAndConnectToAgent = findAndConnectToAgent;
+exports.sendMessageToAgent = sendMessageToAgent;
+exports.sendUnverifiedMessageToAgent = sendUnverifiedMessageToAgent;
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+const multiaddr_1 = require("@multiformats/multiaddr");
+const sdk_1 = require("@diap/sdk");
+const p2p_js_1 = require("./p2p.js");
+const AGENT_REGISTRY_PATH = path.join(process.env.HOME || '/tmp', '.bolloon', 'agent-registry.json');
+const KEY_PAIR_PATH = path.join(process.env.HOME || '/tmp', '.bolloon', 'keypair.json');
+const ADDRESS_BROADCAST_INTERVAL = 5 * 60 * 1000;
+const RELAY_RETRY_INTERVAL = 30000;
+const MAX_RELAY_HOPS = 3;
+const MESSAGE_TIMESTAMP_TOLERANCE = 24 * 60 * 60 * 1000;
+const SIGNED_MESSAGE_TYPES = ['task', 'response', 'discovery', 'address_broadcast'];
+/**
+ * 2026-09-15: did:key:z6Mk… 与 Ed25519 公钥字节是否一致。
+ *
+ * DID 由公钥派生 (did:key 规范: multibase base58btc of 0xed01 || rawKey), 所以首次接触时
+ * 自携公钥**无法伪造**: 冒充者换了公钥就解码不出同一个 DID。
+ * 返回: true 一致 / false 不一致 (疑似冒充) / null 非 did:key 形态 (无法判定, 不阻断, 交给签名验证)。
+ */
+async function didKeyMatchesPublicKey(did, publicKeyHex) {
+    if (!/^did:key:z/.test(did))
+        return null;
+    try {
+        const { base58btc } = await Promise.resolve().then(() => __importStar(require('multiformats/bases/base58')));
+        const decoded = base58btc.decode(did.slice('did:key:'.length));
+        // 34 字节 = 2 字节 multicodec 前缀 (0xed01 = ed25519-pub) + 32 字节公钥
+        if (decoded.length !== 34)
+            return false;
+        if (decoded[0] !== 0xed || decoded[1] !== 0x01)
+            return false;
+        const claimed = Buffer.from(publicKeyHex, 'hex');
+        if (claimed.length !== 32)
+            return false;
+        return Buffer.compare(Buffer.from(decoded.slice(2)), claimed) === 0;
+    }
+    catch {
+        return null; // 解码失败 → 不判定 (不当成冒充, 也不放行: 签名仍要过)
+    }
+}
+class AgentRegistry {
+    agents = new Map();
+    registryPath;
+    ownEndpoint = null;
+    keyPair = null;
+    keyPairPath;
+    relayMode = false;
+    pendingRelayMessages = new Map();
+    constructor() {
+        this.registryPath = AGENT_REGISTRY_PATH;
+        this.keyPairPath = KEY_PAIR_PATH;
+    }
+    async initialize() {
+        await fs.mkdir(path.dirname(this.registryPath), { recursive: true });
+        await this.loadRegistry();
+        await this.loadOrCreateKeyPair();
+    }
+    async loadOrCreateKeyPair() {
+        try {
+            const data = await fs.readFile(this.keyPairPath, 'utf-8');
+            const keyFile = JSON.parse(data);
+            this.keyPair = {
+                privateKey: Buffer.from(keyFile.privateKey, 'hex'),
+                publicKey: Buffer.from(keyFile.publicKey, 'hex'),
+                did: keyFile.did
+            };
+            console.log(`[Registry] Loaded keypair: ${this.keyPair.did.substring(0, 20)}...`);
+        }
+        catch {
+            console.log(`[Registry] Generating new keypair...`);
+            const kp = sdk_1.KeyManager.generate();
+            this.keyPair = {
+                privateKey: kp.privateKey,
+                publicKey: kp.publicKey,
+                did: kp.did
+            };
+            await this.saveKeyPair();
+            console.log(`[Registry] New keypair created: ${this.keyPair.did.substring(0, 20)}...`);
+        }
+    }
+    async saveKeyPair() {
+        if (!this.keyPair)
+            return;
+        const keyFile = {
+            privateKey: Buffer.from(this.keyPair.privateKey).toString('hex'),
+            publicKey: Buffer.from(this.keyPair.publicKey).toString('hex'),
+            did: this.keyPair.did,
+            createdAt: new Date().toISOString()
+        };
+        await fs.writeFile(this.keyPairPath, JSON.stringify(keyFile, null, 2));
+    }
+    getKeyPair() {
+        return this.keyPair;
+    }
+    async loadRegistry() {
+        try {
+            const data = await fs.readFile(this.registryPath, 'utf-8');
+            const entries = JSON.parse(data);
+            for (const entry of entries) {
+                this.agents.set(entry.did, entry);
+            }
+            console.log(`[Registry] Loaded ${entries.length} known agents`);
+        }
+        catch {
+            console.log(`[Registry] No existing registry found`);
+        }
+    }
+    async saveRegistry() {
+        try {
+            const entries = Array.from(this.agents.values());
+            await fs.writeFile(this.registryPath, JSON.stringify(entries, null, 2));
+        }
+        catch (e) {
+            console.warn(`[Registry] Failed to save:`, e);
+        }
+    }
+    setOwnEndpoint(endpoint) {
+        this.ownEndpoint = endpoint;
+        if (this.keyPair) {
+            endpoint.did = this.keyPair.did;
+            endpoint.publicKey = Buffer.from(this.keyPair.publicKey).toString('hex');
+        }
+        this.registerAgent(endpoint);
+    }
+    getOwnEndpoint() {
+        return this.ownEndpoint;
+    }
+    async signMessage(data) {
+        if (!this.keyPair) {
+            console.warn(`[Registry] No keypair available for signing`);
+            return null;
+        }
+        try {
+            const signature = await sdk_1.KeyManager.sign(this.keyPair, new TextEncoder().encode(data));
+            return signature;
+        }
+        catch (e) {
+            console.warn(`[Registry] Signing failed:`, e);
+            return null;
+        }
+    }
+    async verifySignature(did, data, signature) {
+        try {
+            const agent = this.agents.get(did);
+            if (!agent || !agent.publicKey) {
+                console.warn(`[Registry] Unknown agent or missing public key: ${did.substring(0, 20)}`);
+                return false;
+            }
+            const publicKey = Buffer.from(agent.publicKey, 'hex');
+            const keyPair = { privateKey: new Uint8Array(32), publicKey, did };
+            const isValid = await sdk_1.KeyManager.verify(keyPair, new TextEncoder().encode(data), signature);
+            if (!isValid) {
+                console.warn(`[Registry] Invalid signature from ${did.substring(0, 20)}`);
+            }
+            return isValid;
+        }
+        catch (e) {
+            console.warn(`[Registry] Verification failed:`, e);
+            return false;
+        }
+    }
+    registerAgent(endpoint) {
+        const entry = {
+            did: endpoint.did,
+            name: endpoint.name,
+            peerId: endpoint.peerId,
+            multiaddrs: endpoint.multiaddrs,
+            registeredAt: Date.now(),
+            lastSeen: Date.now(),
+            lastBroadcast: 0,
+            publicKey: endpoint.publicKey || ''
+        };
+        const existing = this.agents.get(endpoint.did);
+        if (existing) {
+            entry.registeredAt = existing.registeredAt;
+            entry.lastBroadcast = existing.lastBroadcast;
+            if (endpoint.publicKey && !existing.publicKey) {
+                entry.publicKey = endpoint.publicKey;
+            }
+        }
+        this.agents.set(endpoint.did, entry);
+        this.saveRegistry();
+        console.log(`[Registry] Registered agent: ${endpoint.name} (${endpoint.did.substring(0, 20)}...)`);
+    }
+    getAgent(did) {
+        return this.agents.get(did);
+    }
+    getAgentByPeerId(peerId) {
+        for (const agent of this.agents.values()) {
+            if (agent.peerId === peerId) {
+                return agent;
+            }
+        }
+        return undefined;
+    }
+    getAllAgents() {
+        return Array.from(this.agents.values());
+    }
+    getOnlineAgents(timeoutMs = 10 * 60 * 1000) {
+        const now = Date.now();
+        return Array.from(this.agents.values()).filter(a => now - a.lastSeen < timeoutMs);
+    }
+    updateLastSeen(did) {
+        const agent = this.agents.get(did);
+        if (agent) {
+            agent.lastSeen = Date.now();
+            this.saveRegistry();
+        }
+    }
+    removeAgent(did) {
+        this.agents.delete(did);
+        this.saveRegistry();
+    }
+    async createSignedBroadcast() {
+        if (!this.ownEndpoint || !this.keyPair)
+            return null;
+        const now = Date.now();
+        const entry = this.agents.get(this.ownEndpoint.did);
+        if (entry && now - entry.lastBroadcast < ADDRESS_BROADCAST_INTERVAL) {
+            return null;
+        }
+        const relayAddr = p2p_js_1.p2pNetwork.getRelayAddress?.() || null;
+        const ownPublicKeyHex = Buffer.from(this.keyPair.publicKey).toString('hex');
+        const broadcastData = JSON.stringify({
+            type: 'address_broadcast',
+            from: this.keyPair.did,
+            name: this.ownEndpoint.name,
+            peerId: this.ownEndpoint.peerId,
+            multiaddrs: this.ownEndpoint.multiaddrs,
+            relayAddr: relayAddr || undefined,
+            canRelay: relayAddr ? true : false,
+            publicKey: ownPublicKeyHex,
+            timestamp: now
+        });
+        const signature = await this.signMessage(broadcastData);
+        if (!signature)
+            return null;
+        const broadcast = {
+            type: 'address_broadcast',
+            from: this.keyPair.did,
+            name: this.ownEndpoint.name,
+            peerId: this.ownEndpoint.peerId,
+            multiaddrs: this.ownEndpoint.multiaddrs,
+            relayAddr: relayAddr || undefined,
+            canRelay: relayAddr ? true : false,
+            publicKey: ownPublicKeyHex,
+            timestamp: now,
+            signature: Buffer.from(signature).toString('hex')
+        };
+        if (entry) {
+            entry.lastBroadcast = now;
+        }
+        return broadcast;
+    }
+    async handleAddressBroadcast(broadcast) {
+        if (!this.keyPair || broadcast.from === this.keyPair.did) {
+            return false;
+        }
+        if (Math.abs(broadcast.timestamp - Date.now()) > MESSAGE_TIMESTAMP_TOLERANCE) {
+            console.log(`[Registry] Stale broadcast from ${broadcast.from.substring(0, 20)}`);
+            return false;
+        }
+        const broadcastData = JSON.stringify({
+            type: 'address_broadcast',
+            from: broadcast.from,
+            name: broadcast.name,
+            peerId: broadcast.peerId,
+            multiaddrs: broadcast.multiaddrs,
+            relayAddr: broadcast.relayAddr,
+            canRelay: broadcast.canRelay,
+            publicKey: broadcast.publicKey,
+            timestamp: broadcast.timestamp
+        });
+        const signature = Buffer.from(broadcast.signature, 'hex');
+        const known = this.agents.get(broadcast.from);
+        // 2026-09-15: 首次接触 (全球化去中心网络里全是陌生人) —— 原来只认「registry 里已有的公钥」,
+        //   陌生人第一次广播必然验签失败 → 广播被丢弃 → 陌生人永远发现不了彼此 (入网文档 §7 的链路实际不通).
+        //   现在: 未知 DID 时用广播自带 publicKey 自证 (TOFU: 首次接触信任自携公钥);
+        //   did:key 额外做 DID↔公钥 派生一致性检查 (DID 本身就是公钥, 自携公钥无法伪造).
+        let verifyKeyHex = known?.publicKey || undefined;
+        if (!verifyKeyHex) {
+            const claimed = String(broadcast.publicKey || '');
+            if (!claimed) {
+                console.warn(`[Registry] Unknown agent ${broadcast.from.substring(0, 20)}… 且广播未携带 publicKey → 无法验证, 拒收`);
+                return false;
+            }
+            const binding = await didKeyMatchesPublicKey(broadcast.from, claimed);
+            if (binding === false) {
+                console.warn(`[Registry] did:key 与自带公钥不匹配 (疑似冒充) from=${broadcast.from.substring(0, 24)}… → 拒收`);
+                return false;
+            }
+            verifyKeyHex = claimed;
+        }
+        else if (broadcast.publicKey && broadcast.publicKey !== verifyKeyHex) {
+            // 已认识这个 DID, 却报出另一把公钥 → 身份接管尝试, 拒收 (不覆盖已存公钥)
+            console.warn(`[Registry] ${broadcast.from.substring(0, 20)}… 广播的公钥与已知公钥不一致 → 拒收 (不覆盖)`);
+            return false;
+        }
+        const isValid = await this.verifySignatureWithKey(broadcast.from, verifyKeyHex, broadcastData, signature);
+        if (!isValid) {
+            console.warn(`[Registry] Invalid broadcast signature from ${broadcast.from.substring(0, 20)}`);
+            return false;
+        }
+        const entry = {
+            did: broadcast.from,
+            name: broadcast.name,
+            peerId: broadcast.peerId,
+            multiaddrs: broadcast.multiaddrs,
+            registeredAt: Date.now(),
+            lastSeen: broadcast.timestamp,
+            lastBroadcast: 0,
+            // 2026-09-15 修复: 原来写的是**自己**的公钥 (this.keyPair.publicKey) →
+            //   对端后续任何签名消息都验不过 (拿我方公钥去验对方签名), 属于把对端身份写坏.
+            publicKey: verifyKeyHex,
+            relayAddr: broadcast.relayAddr,
+            canRelay: broadcast.canRelay
+        };
+        const existing = this.agents.get(broadcast.from);
+        if (existing) {
+            entry.registeredAt = existing.registeredAt;
+            entry.lastBroadcast = existing.lastBroadcast;
+            if (existing.publicKey)
+                entry.publicKey = existing.publicKey; // 已有公钥永不覆盖
+        }
+        this.agents.set(broadcast.from, entry);
+        this.saveRegistry();
+        console.log(`[Registry] Verified broadcast from: ${broadcast.name} (${broadcast.from.substring(0, 20)}...) ${broadcast.canRelay ? '[Relay Capable]' : ''}${known ? '' : ' [首次接触 TOFU]'}`);
+        return true;
+    }
+    /** 用给定公钥 (hex) 验签 — 首次接触路径用 (未知 DID 时 registry 里没公钥) */
+    async verifySignatureWithKey(did, publicKeyHex, data, signature) {
+        try {
+            const publicKey = Buffer.from(publicKeyHex, 'hex');
+            if (publicKey.length !== 32) {
+                console.warn(`[Registry] publicKey 长度非法 (${publicKey.length} 字节, 期望 32): ${did.substring(0, 20)}…`);
+                return false;
+            }
+            const keyPair = { privateKey: new Uint8Array(32), publicKey, did };
+            return await sdk_1.KeyManager.verify(keyPair, new TextEncoder().encode(data), signature);
+        }
+        catch (e) {
+            console.warn(`[Registry] Verification with provided key failed:`, e);
+            return false;
+        }
+    }
+    async createSignedMessage(type, payload) {
+        if (!this.keyPair || !this.ownEndpoint)
+            return null;
+        const messageData = JSON.stringify({
+            type,
+            from: this.keyPair.did,
+            name: this.ownEndpoint.name,
+            payload,
+            timestamp: Date.now()
+        });
+        const signature = await this.signMessage(messageData);
+        if (!signature)
+            return null;
+        return {
+            type,
+            from: this.keyPair.did,
+            name: this.ownEndpoint.name,
+            payload,
+            timestamp: Date.now(),
+            signature: Buffer.from(signature).toString('hex')
+        };
+    }
+    async verifySignedMessage(msg) {
+        if (!this.keyPair || msg.from === this.keyPair.did) {
+            return false;
+        }
+        if (Math.abs(msg.timestamp - Date.now()) > MESSAGE_TIMESTAMP_TOLERANCE) {
+            console.log(`[Registry] Stale message from ${msg.from.substring(0, 20)}`);
+            return false;
+        }
+        const messageData = JSON.stringify({
+            type: msg.type,
+            from: msg.from,
+            name: msg.name,
+            payload: msg.payload,
+            timestamp: msg.timestamp
+        });
+        const signature = Buffer.from(msg.signature, 'hex');
+        return this.verifySignature(msg.from, messageData, signature);
+    }
+    async connectToAgent(did) {
+        const agent = this.agents.get(did);
+        if (!agent) {
+            console.log(`[Registry] Unknown agent: ${did}`);
+            return false;
+        }
+        if (!agent.multiaddrs || agent.multiaddrs.length === 0) {
+            console.log(`[Registry] No addresses for agent: ${agent.name}`);
+            if (!agent.relayAddr) {
+                return false;
+            }
+            console.log(`[Registry] Agent has relay address, will try relay connection`);
+        }
+        let connected = false;
+        if (agent.multiaddrs && agent.multiaddrs.length > 0) {
+            for (const addr of agent.multiaddrs) {
+                try {
+                    const ma = (0, multiaddr_1.multiaddr)(addr);
+                    const node = p2p_js_1.p2pNetwork.node;
+                    if (node) {
+                        await node.dial(ma);
+                        connected = true;
+                        console.log(`[Registry] Direct connection to ${agent.name} at ${addr}`);
+                        break;
+                    }
+                }
+                catch (e) {
+                    console.warn(`[Registry] Failed to connect directly to ${addr}:`, e);
+                }
+            }
+        }
+        if (!connected && agent.relayAddr) {
+            console.log(`[Registry] Trying relay connection to ${agent.name} via ${agent.relayAddr}`);
+            try {
+                const node = p2p_js_1.p2pNetwork.node;
+                if (node) {
+                    const ma = (0, multiaddr_1.multiaddr)(`${agent.relayAddr}/p2p/${agent.peerId}`);
+                    await node.dial(ma);
+                    connected = true;
+                    console.log(`[Registry] Relay connection to ${agent.name} established`);
+                }
+            }
+            catch (e) {
+                console.warn(`[Registry] Failed to connect via relay:`, e);
+            }
+        }
+        if (!connected && agent.canRelay) {
+            const relayPeers = this.findRelayPeers();
+            for (const relay of relayPeers) {
+                if (relay.peerId === agent.peerId)
+                    continue;
+                try {
+                    console.log(`[Registry] Trying to relay via ${relay.name} (${relay.peerId.substring(0, 12)}...)`);
+                    const relayAddr = relay.relayAddr || relay.multiaddrs?.[0];
+                    if (relayAddr) {
+                        const node = p2p_js_1.p2pNetwork.node;
+                        if (node) {
+                            const ma = (0, multiaddr_1.multiaddr)(`${relayAddr}/p2p/${agent.peerId}`);
+                            await node.dial(ma);
+                            connected = true;
+                            console.log(`[Registry] Connection to ${agent.name} via relay ${relay.name}`);
+                            break;
+                        }
+                    }
+                }
+                catch (e) {
+                    console.warn(`[Registry] Failed to relay via ${relay.name}:`, e);
+                }
+            }
+        }
+        if (connected) {
+            this.updateLastSeen(did);
+            p2p_js_1.p2pNetwork.addPersistentPeer({
+                peerId: agent.peerId,
+                multiaddrs: agent.multiaddrs,
+                did: agent.did,
+                name: agent.name,
+                relayAddr: agent.relayAddr,
+                canRelay: agent.canRelay
+            });
+        }
+        return connected;
+    }
+    findRelayPeers() {
+        const now = Date.now();
+        return Array.from(this.agents.values()).filter(a => a.canRelay && a.relayAddr && now - a.lastSeen < 30 * 60 * 1000);
+    }
+    async relayMessage(toDid, data, fromDid, hops = 0) {
+        if (hops >= MAX_RELAY_HOPS) {
+            console.log(`[Registry] Max relay hops reached for ${toDid}`);
+            return false;
+        }
+        const targetAgent = this.agents.get(toDid);
+        if (!targetAgent) {
+            console.log(`[Registry] Unknown relay target: ${toDid}`);
+            return false;
+        }
+        try {
+            const peerId = targetAgent.peerId;
+            const relayMsg = new TextEncoder().encode(`RELAY:${fromDid}|${hops + 1}|${new TextDecoder().decode(data)}`);
+            await p2p_js_1.p2pNetwork.sendMessage(peerId, 'relay', new TextDecoder().decode(relayMsg));
+            return true;
+        }
+        catch (e) {
+            console.warn(`[Registry] Relay failed to ${toDid}:`, e);
+            return false;
+        }
+    }
+    getConnectionInfo() {
+        if (!this.ownEndpoint)
+            return null;
+        return {
+            did: this.ownEndpoint.did,
+            name: this.ownEndpoint.name,
+            peerId: this.ownEndpoint.peerId,
+            multiaddrs: this.ownEndpoint.multiaddrs
+        };
+    }
+}
+exports.AgentRegistry = AgentRegistry;
+exports.agentRegistry = new AgentRegistry();
+class AgentMessaging {
+    registry;
+    messageHandlers = new Map();
+    constructor(registry) {
+        this.registry = registry;
+    }
+    registerHandler(type, handler) {
+        this.messageHandlers.set(type, handler);
+    }
+    async sendSignedToAgent(did, type, payload) {
+        const agent = this.registry.getAgent(did);
+        if (!agent) {
+            console.log(`[Messaging] Unknown agent: ${did}`);
+            return false;
+        }
+        const signedMsg = await this.registry.createSignedMessage(type, payload);
+        if (!signedMsg) {
+            console.warn(`[Messaging] Failed to create signed message`);
+            return false;
+        }
+        try {
+            const messageStr = JSON.stringify(signedMsg);
+            await p2p_js_1.p2pNetwork.sendMessage(agent.peerId, 'signed', messageStr);
+            return true;
+        }
+        catch (e) {
+            console.warn(`[Messaging] Failed to send to ${did}:`, e);
+            return false;
+        }
+    }
+    async sendToAgent(did, type, payload) {
+        const agent = this.registry.getAgent(did);
+        if (!agent) {
+            console.log(`[Messaging] Unknown agent: ${did}`);
+            return false;
+        }
+        const message = `${type}:${payload}`;
+        try {
+            await p2p_js_1.p2pNetwork.sendMessage(agent.peerId, type, payload);
+            return true;
+        }
+        catch (e) {
+            console.warn(`[Messaging] Failed to send to ${did}:`, e);
+            return false;
+        }
+    }
+    async broadcastToAll(type, payload) {
+        const agents = this.registry.getOnlineAgents();
+        const ownEndpoint = this.registry.getOwnEndpoint();
+        for (const agent of agents) {
+            if (agent.did === ownEndpoint?.did)
+                continue;
+            try {
+                await p2p_js_1.p2pNetwork.sendMessage(agent.peerId, type, payload);
+            }
+            catch (e) {
+                console.warn(`[Messaging] Broadcast failed to ${agent.name}:`, e);
+            }
+        }
+    }
+    parseMessage(data) {
+        const messageStr = new TextDecoder().decode(data);
+        if (messageStr.startsWith('RELAY:')) {
+            const parts = messageStr.substring(6).split('|');
+            if (parts.length >= 3) {
+                const fromDid = parts[0];
+                const hops = parseInt(parts[1], 10);
+                const innerMessage = parts.slice(2).join('|');
+                return this.parseInnerMessage(innerMessage, fromDid, true, hops);
+            }
+        }
+        return this.parseInnerMessage(messageStr, undefined, false);
+    }
+    parseInnerMessage(messageStr, relayFrom, isRelay = false, relayHops = 0) {
+        if (messageStr.startsWith('DID:')) {
+            const didEndIdx = messageStr.indexOf('|');
+            if (didEndIdx > 0) {
+                const did = messageStr.substring(4, didEndIdx);
+                const afterDid = messageStr.substring(didEndIdx + 1);
+                const colonIdx = afterDid.indexOf(':');
+                if (colonIdx > 0) {
+                    return {
+                        type: afterDid.substring(0, colonIdx),
+                        payload: afterDid.substring(colonIdx + 1),
+                        did: relayFrom || did,
+                        isRelay,
+                        relayHops
+                    };
+                }
+                return { type: afterDid, payload: '', did: relayFrom || did, isRelay, relayHops };
+            }
+        }
+        const colonIdx = messageStr.indexOf(':');
+        if (colonIdx > 0) {
+            return {
+                type: messageStr.substring(0, colonIdx),
+                payload: messageStr.substring(colonIdx + 1),
+                did: relayFrom,
+                isRelay,
+                relayHops
+            };
+        }
+        return { type: messageStr, payload: '', did: relayFrom, isRelay, relayHops };
+    }
+    async dispatchSignedMessage(data, fromPeerId) {
+        try {
+            const messageStr = new TextDecoder().decode(data);
+            const signedMsg = JSON.parse(messageStr);
+            if (!signedMsg.type || !signedMsg.from || !signedMsg.signature) {
+                console.warn(`[Messaging] Invalid signed message format`);
+                return false;
+            }
+            const isValid = await this.registry.verifySignedMessage(signedMsg);
+            if (!isValid) {
+                console.warn(`[Messaging] Signature verification failed for ${signedMsg.from.substring(0, 20)}`);
+                return false;
+            }
+            // 2026-09-16 (2-C.4): 目标关联的真实外部事件 —— 签名已通过校验, 这里再按
+            //   来源 / correlation / 过期 / eventId 去重做一次严格匹配, 只唤醒"正在等这个事件"的 Goal。
+            //   **不在这里启动 agent**: 只写事实 + 唤醒, 由 Supervisor 下一轮继续。
+            try {
+                const { tryDeliverGoalEvent } = await Promise.resolve().then(() => __importStar(require('./goal-event-bridge.js')));
+                await tryDeliverGoalEvent(signedMsg, fromPeerId);
+            }
+            catch (e) {
+                console.warn(`[Messaging] goal event bridge 失败 (不影响普通消息):`, e?.message);
+            }
+            const handler = this.messageHandlers.get(signedMsg.type);
+            if (handler) {
+                handler(data, fromPeerId, signedMsg.from);
+            }
+            return true;
+        }
+        catch (e) {
+            console.warn(`[Messaging] Failed to dispatch signed message:`, e);
+            return false;
+        }
+    }
+    dispatchMessage(data, fromPeerId) {
+        const parsed = this.parseMessage(data);
+        if (!parsed)
+            return;
+        const handler = this.messageHandlers.get(parsed.type);
+        if (handler) {
+            handler(data, fromPeerId, parsed.did);
+        }
+    }
+}
+exports.AgentMessaging = AgentMessaging;
+exports.agentMessaging = new AgentMessaging(exports.agentRegistry);
+async function initializeAgentNetwork(ownDid, ownName, peerId, multiaddrs) {
+    await exports.agentRegistry.initialize();
+    const keyPair = exports.agentRegistry.getKeyPair();
+    const publicKeyHex = keyPair ? Buffer.from(keyPair.publicKey).toString('hex') : undefined;
+    exports.agentRegistry.setOwnEndpoint({
+        did: keyPair?.did || ownDid,
+        name: ownName,
+        peerId,
+        multiaddrs,
+        publicKey: publicKeyHex
+    });
+    p2p_js_1.p2pNetwork.setOwnDid(keyPair?.did || ownDid);
+    p2p_js_1.p2pNetwork.onMessage('signed', async (data, from, did) => {
+        await exports.agentMessaging.dispatchSignedMessage(data, from);
+    });
+    p2p_js_1.p2pNetwork.onMessage('address_broadcast', async (data, from, did) => {
+        try {
+            const messageStr = new TextDecoder().decode(data);
+            const broadcast = JSON.parse(messageStr);
+            if (broadcast.type === 'address_broadcast') {
+                await exports.agentRegistry.handleAddressBroadcast(broadcast);
+            }
+        }
+        catch (e) {
+            console.warn(`[AgentNetwork] Failed to handle address broadcast:`, e);
+        }
+    });
+    p2p_js_1.p2pNetwork.onMessage('relay', (data, from, did) => {
+        try {
+            const relayMsg = new TextDecoder().decode(data);
+            const relayMatch = relayMsg.match(/^RELAY:(.+?)\|(\d+)\|(.+)$/);
+            if (relayMatch) {
+                const [, targetDid, hopsStr, innerData] = relayMatch;
+                const hops = parseInt(hopsStr, 10);
+                if (hops < MAX_RELAY_HOPS) {
+                    exports.agentRegistry.relayMessage(targetDid, new TextEncoder().encode(innerData), did || from, hops);
+                }
+            }
+        }
+        catch (e) {
+            console.warn(`[AgentNetwork] Failed to handle relay:`, e);
+        }
+    });
+    p2p_js_1.p2pNetwork.onMessage('discovery', async (data, from, did) => {
+        try {
+            const messageStr = new TextDecoder().decode(data);
+            const discovery = JSON.parse(messageStr);
+            if (discovery.type === 'discovery') {
+                const isValid = await exports.agentRegistry.verifySignature(discovery.from, JSON.stringify({ ...discovery, signature: undefined }), Buffer.from(discovery.signature, 'hex'));
+                if (isValid) {
+                    console.log(`[AgentNetwork] Verified discovery from: ${discovery.name}`);
+                }
+            }
+        }
+        catch (e) {
+            console.warn(`[AgentNetwork] Failed to handle discovery:`, e);
+        }
+    });
+    console.log(`[AgentNetwork] Initialized with DID: ${keyPair?.did.substring(0, 20) || ownDid.substring(0, 20)}...`);
+}
+async function broadcastOwnAddress() {
+    const broadcast = await exports.agentRegistry.createSignedBroadcast();
+    if (broadcast) {
+        const data = JSON.stringify(broadcast);
+        await p2p_js_1.p2pNetwork.broadcast('address_broadcast', data);
+        console.log(`[AgentNetwork] Broadcast signed address to network`);
+    }
+}
+async function findAndConnectToAgent(did) {
+    return exports.agentRegistry.connectToAgent(did);
+}
+async function sendMessageToAgent(did, type, payload) {
+    return exports.agentMessaging.sendSignedToAgent(did, type, payload);
+}
+async function sendUnverifiedMessageToAgent(did, type, payload) {
+    return exports.agentMessaging.sendToAgent(did, type, payload);
+}
+//# sourceMappingURL=agent-network.js.map