@bolloon/bolloon-agent 0.4.28 → 0.4.30

package/dist/web/mobile-contacts.js

@@ -0,0 +1,329 @@
+/**
+ * mobile-contacts.ts — 手机端「联系方式与授权」能力 (2026-09-19, Phase 5/10)
+ *
+ * 手机端负责 (leo 冻结的分工): 输入手机号/邮箱 · OTP 确认 · 生物识别/系统授权 · 展示待发内容 ·
+ *   批准高风险联系 · **用设备私钥签名长期授权** · 保存本地能力副本 (只 capability, 不含明文)。
+ * 桌面端负责: 长期 Goal/Run · Supervisor · 执行与恢复 · 持久化 · 证据。
+ *
+ * 实现要点 (为什么这样写):
+ *   - **浏览器安全**: 本文件不 import 任何 node: 模块, 只用 WebCrypto / fetch / storage。
+ *   - **签名规范共用**: 载荷用 `contacts/grant-payload.ts` 的规范函数 (与桌面 Node 侧同一份 → 签名一定对得上)。
+ *   - **不支持 Ed25519 就明说**: 老 WebView 没 Ed25519 时返回 device_signing_unavailable,
+ *     **绝不用"不签名"糊过去** (桌面本来就拒收未签名授权)。
+ *   - **桌面离线不假装成功**: 授权存本地队列, capability 副本落手机, 明确告知"待桌面在线时同步"。
+ */
+import { canonicalGrantPayload, canonicalRevocationPayload, presetForChoice, } from '../agents/contacts/grant-payload.js';
+const K_DEVICE = 'bolloon.contacts.device.v1';
+const K_QUEUE = 'bolloon.contacts.queue.v1';
+const K_CAPS = 'bolloon.contacts.capabilities.v1';
+const cryptoOf = (c) => (c || globalThis.crypto || null);
+/** WebCrypto Ed25519 是否可用 (老 WebView 可能没有 —— 要如实告知, 不能糊过去) */
+export function ed25519Available(c) {
+    const cobj = cryptoOf(c);
+    if (!cobj?.subtle)
+        return false;
+    try {
+        const alg = { name: 'Ed25519' };
+        return typeof cobj.subtle.importKey === 'function' && !!alg;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * UTF-8 字节 —— 显式拷进 ArrayBuffer: 新版 lib.dom 的 BufferSource 不接受 ArrayBufferLike,
+ * 而 WebCrypto (sign/digest) 在浏览器与 Node 都要求真正的 ArrayBuffer。
+ */
+function bytesOf(s) {
+    const src = new TextEncoder().encode(s);
+    const out = new Uint8Array(new ArrayBuffer(src.byteLength));
+    out.set(src);
+    return out;
+}
+function b64(buf) {
+    const arr = new Uint8Array(buf);
+    let out = '';
+    for (let i = 0; i < arr.length; i++)
+        out += String.fromCharCode(arr[i]);
+    return btoa(out);
+}
+function pemFromSpki(spki) {
+    const b = b64(spki).replace(/(.{64})/g, '$1\n').trim();
+    return `-----BEGIN PUBLIC KEY-----\n${b}\n-----END PUBLIC KEY-----\n`;
+}
+async function sha256Hex(c, text) {
+    const d = await c.subtle.digest('SHA-256', bytesOf(text));
+    return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, '0')).join('');
+}
+/** 取/建设备密钥 (私钥只以 JWK 存在本机 storage; 永不上传) */
+export async function loadOrCreateDeviceKey(storage, c) {
+    const cobj = cryptoOf(c);
+    if (!cobj?.subtle)
+        throw new Error('device_signing_unavailable: 本机没有 WebCrypto');
+    const raw = storage.getItem(K_DEVICE);
+    if (raw) {
+        try {
+            const parsed = JSON.parse(raw);
+            if (parsed?.privateKeyJwk && parsed?.publicKeyPem && parsed?.deviceId)
+                return parsed;
+        }
+        catch { /* 坏了就重建 (旧私钥丢失 → 之前签的授权在桌面仍有效, 只是不能再签新的) */ }
+    }
+    let pair;
+    try {
+        pair = (await cobj.subtle.generateKey({ name: 'Ed25519' }, true, ['sign', 'verify']));
+    }
+    catch (err) {
+        throw new Error(`device_signing_unavailable: ${String(err?.message || err)}`);
+    }
+    const publicKeyPem = pemFromSpki(await cobj.subtle.exportKey('spki', pair.publicKey));
+    const privateKeyJwk = (await cobj.subtle.exportKey('jwk', pair.privateKey));
+    const deviceId = `dev-${(await sha256Hex(cobj, publicKeyPem)).slice(0, 12)}`;
+    const material = { deviceId, publicKeyPem, privateKeyJwk };
+    storage.setItem(K_DEVICE, JSON.stringify(material));
+    return material;
+}
+async function importPrivate(storage, c) {
+    const k = await loadOrCreateDeviceKey(storage, c);
+    return c.subtle.importKey('jwk', k.privateKeyJwk, { name: 'Ed25519' }, false, ['sign']);
+}
+/** 用设备私钥签一条 Grant (核心: 手机确认 → 桌面才认) */
+export async function signGrantOnDevice(grant, storage, c) {
+    const cobj = cryptoOf(c);
+    const key = await importPrivate(storage, cobj);
+    const payload = canonicalGrantPayload(grant);
+    const sig = await cobj.subtle.sign({ name: 'Ed25519' }, key, bytesOf(payload));
+    const dev = await loadOrCreateDeviceKey(storage, cobj);
+    return { deviceId: dev.deviceId, alg: 'ed25519', payloadHash: await sha256Hex(cobj, payload), sig: b64(sig) };
+}
+/** 撤销也要签名 (桌面拒收未登记设备的撤销) */
+export async function signRevocationOnDevice(rev, storage, c) {
+    const cobj = cryptoOf(c);
+    const key = await importPrivate(storage, cobj);
+    const payload = canonicalRevocationPayload(rev);
+    const sig = await cobj.subtle.sign({ name: 'Ed25519' }, key, bytesOf(payload));
+    const dev = await loadOrCreateDeviceKey(storage, cobj);
+    return { deviceId: dev.deviceId, alg: 'ed25519', payloadHash: await sha256Hex(cobj, payload), sig: b64(sig) };
+}
+async function post(base, path, body, f) {
+    const res = await f(`${String(base).replace(/\/+$/, '')}${path}`, {
+        method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body ?? {}),
+    });
+    let json = null;
+    try {
+        json = await res.json();
+    }
+    catch { /* 空响应 */ }
+    return { status: res.status, json };
+}
+async function get(base, path, f) {
+    const res = await f(`${String(base).replace(/\/+$/, '')}${path}`);
+    let json = null;
+    try {
+        json = await res.json();
+    }
+    catch { /* 空响应 */ }
+    return { status: res.status, json };
+}
+/** 桌面登记手机公钥 (配对阶段; 之后桌面只接受这台设备签的授权) */
+export async function registerDeviceOnDesktop(base, storage, opts = {}) {
+    const f = opts.fetchImpl || fetch;
+    const dev = await loadOrCreateDeviceKey(storage, opts.cryptoObj);
+    const r = await post(base, '/api/contacts/devices', { deviceId: dev.deviceId, publicKeyPem: dev.publicKeyPem, label: opts.label || '手机' }, f);
+    if (r.status !== 200 || !r.json?.ok)
+        return { ok: false, error: `桌面未接受设备登记: ${r.json?.error || r.status}`, data: dev };
+    return { ok: true, data: dev };
+}
+export function saveCapabilityCopy(storage, items) {
+    const clean = (items || []).map((c) => ({
+        contactId: String(c.contactId || ''), kind: c.kind, displayValue: String(c.displayValue || ''),
+        verificationStatus: String(c.verificationStatus || ''), capabilities: [...(c.capabilities || [])],
+        provider: c.provider ? String(c.provider) : undefined, state: c.state ? String(c.state) : undefined,
+    }));
+    storage.setItem(K_CAPS, JSON.stringify(clean));
+}
+export function loadCapabilityCopy(storage) {
+    try {
+        const v = JSON.parse(storage.getItem(K_CAPS) || '[]');
+        return Array.isArray(v) ? v : [];
+    }
+    catch {
+        return [];
+    }
+}
+export function pendingQueue(storage) {
+    try {
+        const v = JSON.parse(storage.getItem(K_QUEUE) || '[]');
+        return Array.isArray(v) ? v : [];
+    }
+    catch {
+        return [];
+    }
+}
+function setQueue(storage, q) { storage.setItem(K_QUEUE, JSON.stringify(q.slice(-20))); }
+/** 桌面在线时把排队中的授权补同步上去 */
+export async function flushQueuedGrants(base, storage, opts = {}) {
+    const f = opts.fetchImpl || fetch;
+    const q = pendingQueue(storage);
+    const keep = [];
+    const results = [];
+    let sent = 0, failed = 0;
+    for (const item of q) {
+        try {
+            const r = await post(base, '/api/contacts/grants/sync', { grant: { ...item.grant, signature: item.signature } }, f);
+            if (r.status === 200 && r.json?.ok) {
+                sent++;
+                results.push({ grantId: item.grant.grantId, ok: true });
+                continue;
+            }
+            failed++;
+            keep.push(item);
+            results.push({ grantId: item.grant.grantId, ok: false, error: r.json?.code || r.status });
+        }
+        catch {
+            failed++;
+            keep.push(item);
+            results.push({ grantId: item.grant.grantId, ok: false, error: 'network' });
+        }
+    }
+    setQueue(storage, keep);
+    return { sent, failed, results };
+}
+/**
+ * 手机确认授权 → 设备签名 → 送桌面验签。
+ * 桌面离线时: 授权进本地队列 + 返回 queued=true (明确告诉用户"等桌面在线时同步", 不假装已生效)。
+ */
+export async function authorizeFromPhone(input) {
+    const c = cryptoOf(input.cryptoObj);
+    if (!ed25519Available(c || undefined)) {
+        return { ok: false, error: 'device_signing_unavailable: 本机 WebView 不支持 Ed25519 设备签名 —— 请在桌面端授权 (或升级系统 WebView)' };
+    }
+    const dev = await loadOrCreateDeviceKey(input.storage, c);
+    const preset = presetForChoice(input.choice);
+    const grant = {
+        grantId: `gr-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`,
+        identityId: input.identityId || `sid-phone-${dev.deviceId.slice(-6)}`,
+        ownerDid: input.ownerDid,
+        ...preset,
+        grantedAt: new Date().toISOString(),
+        grantedBy: input.grantedBy || 'leo',
+        grantedVia: 'mobile',
+        deviceIds: [dev.deviceId],
+        status: 'active',
+        grantVersion: 1,
+    };
+    const signature = await signGrantOnDevice(grant, input.storage, c);
+    const f = input.fetchImpl || fetch;
+    // 先登记设备 (幂等), 再送授权
+    const reg = await registerDeviceOnDesktop(input.base, input.storage, { fetchImpl: f, cryptoObj: c }).catch(() => ({ ok: false }));
+    if (!reg.ok) {
+        const q = pendingQueue(input.storage);
+        q.push({ grant, signature, queuedAt: new Date().toISOString() });
+        setQueue(input.storage, q);
+        return { ok: false, queued: true, error: `桌面暂不可达 → 授权已存在手机, 待桌面在线时自动同步 (${reg.error || 'offline'})`,
+            data: { grantId: grant.grantId, level: grant.level, signature },
+            note: '桌面不在线时不假装已生效: 授权在本地队列里, 桌面一上线就补同步' };
+    }
+    const r = await post(input.base, '/api/contacts/grants/sync', { grant: { ...grant, signature } }, f);
+    if (r.status === 200 && r.json?.ok) {
+        return { ok: true, data: { grantId: grant.grantId, level: grant.level, signature }, note: '桌面已验签接受' };
+    }
+    const q = pendingQueue(input.storage);
+    q.push({ grant, signature, queuedAt: new Date().toISOString() });
+    setQueue(input.storage, q);
+    return { ok: false, queued: true, error: `桌面拒绝/未接受: ${r.json?.code || r.json?.reason || r.status}`,
+        data: { grantId: grant.grantId, level: grant.level, signature },
+        note: '已保存在手机本地队列 (不会因为失败就当成已授权)' };
+}
+export async function revokeFromPhone(opts) {
+    const c = cryptoOf(opts.cryptoObj);
+    if (!ed25519Available(c || undefined))
+        return { ok: false, error: 'device_signing_unavailable: 本机不支持设备签名, 撤销需在桌面端进行' };
+    const revokedAt = new Date().toISOString();
+    const payload = { grantId: opts.grantId, grantVersion: opts.version || 1, revokedAt, by: 'mobile' };
+    const signature = await signRevocationOnDevice(payload, opts.storage, c);
+    const f = opts.fetchImpl || fetch;
+    const r = await post(opts.base, '/api/contacts/grants/revoke-sync', { grantId: opts.grantId, by: 'mobile', reason: opts.reason, version: payload.grantVersion, revokedAt, signature }, f);
+    if (r.status === 200 && r.json?.ok)
+        return { ok: true, data: { grantId: opts.grantId }, note: '桌面已验签并立即失效' };
+    return { ok: false, error: `撤销未送达: ${r.json?.code || r.json?.error || r.status}`, note: '桌面不在线时撤销**不会**被当作已完成 —— 请在桌面在线后重试 (或桌面端撤销)' };
+}
+/** 从桌面读联系方式/授权/待批准 (桌面离线 → 退回手机本地 capability 副本, 明确标注) */
+export async function loadFromDesktop(base, storage, opts = {}) {
+    const f = opts.fetchImpl || fetch;
+    if (!base) {
+        const caps = loadCapabilityCopy(storage);
+        return { ok: false, error: 'desktop_offline', data: { contacts: caps, grants: [], effective: '桌面不在线 (显示手机本地副本)', approvals: [], waiting: [] },
+            note: '以下是你手机上保存的能力副本 (不是桌面实时状态)' };
+    }
+    try {
+        const a = await get(base, '/api/contacts', f);
+        const b = await get(base, '/api/contacts/grants', f);
+        if (a.status !== 200 && b.status !== 200)
+            return { ok: false, error: `desktop_http_${a.status || b.status}` };
+        const view = {
+            contacts: a.json?.contacts || [], grants: b.json?.grants || [], effective: b.json?.effective || '',
+            approvals: a.json?.approvals || [], waiting: a.json?.waiting || [],
+        };
+        saveCapabilityCopy(storage, (view.contacts || []).filter((c) => c.capabilities?.includes('send')).map((c) => ({
+            contactId: c.contactId, kind: c.kind, displayValue: c.displayValue, verificationStatus: c.status,
+            capabilities: c.capabilities, provider: c.provider, state: c.status,
+        })));
+        return { ok: true, data: view };
+    }
+    catch (err) {
+        const caps = loadCapabilityCopy(storage);
+        return { ok: false, error: 'desktop_offline', data: { contacts: caps, grants: [], effective: '桌面不在线 (显示手机本地副本)', approvals: [], waiting: [] },
+            note: `连不上桌面 (${String(err?.message || err).slice(0, 60)}) —— 显示本地副本` };
+    }
+}
+/** 绑定/验证 (手机上输入, 桌面执行 —— 明文只走这一条 HTTPS/局域网请求, 不落手机存储) */
+export async function bindFromPhone(base, opts, storage, f) {
+    const impl = f || fetch;
+    if (!base)
+        return { ok: false, error: 'desktop_offline: 绑定需要桌面端在线 (桌面负责落盘与验证码通道)' };
+    const r = await post(base, '/api/contacts/bind', { kind: opts.kind, value: opts.value, region: opts.region }, impl);
+    if (r.status === 200 && r.json?.ok)
+        return { ok: true, data: r.json };
+    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+}
+export async function verifyFromPhone(base, opts, storage, f) {
+    const impl = f || fetch;
+    if (!base)
+        return { ok: false, error: 'desktop_offline: 验证需要桌面端在线' };
+    const r = await post(base, '/api/contacts/verify', { contactId: opts.contactId, challengeId: opts.challengeId, code: opts.code }, impl);
+    if (r.status === 200 && r.json?.ok)
+        return { ok: true, data: r.json };
+    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+}
+/** 手机上批准高风险联系 (展示待发内容 → 批准/拒绝) */
+export async function decideApprovalFromPhone(base, opts, f) {
+    const impl = f || fetch;
+    if (!base)
+        return { ok: false, error: 'desktop_offline: 批准需要桌面端在线 (手机不在线时不会假装已批准)' };
+    const r = await post(base, `/api/contacts/approvals/${encodeURIComponent(opts.consentId)}/${opts.action}`, { by: 'leo', via: 'mobile', body: opts.body, reason: opts.reason }, impl);
+    if (r.status === 200 && r.json?.ok)
+        return { ok: true, data: r.json };
+    return { ok: false, error: r.json?.error || `HTTP ${r.status}` };
+}
+export function buildPhoneCard(view, opts) {
+    return {
+        title: '让 Bolloon 代表你联系外部的人',
+        effective: view?.effective || opts.offline || '未知',
+        contacts: (view?.contacts || []).map((c) => ({
+            displayValue: c.displayValue || '', kind: c.kind || '', state: c.status || c.verificationStatus || '',
+            label: c.capabilities?.includes('send') ? '可联系' : '不可联系',
+        })),
+        approvals: (view?.approvals || []).map((a) => ({
+            consentId: a.consentId, contactName: a.contactName, channel: a.channel, subject: a.subject,
+            bodyPreview: a.bodyPreview || '', reason: a.reason, reallySent: !!a.reallySent,
+        })),
+        choices: [
+            { id: 'task_once', label: '仅本次任务' },
+            { id: 'persistent', label: '长期使用 (推荐)' },
+            { id: 'full_contact_access', label: '完全授权联系方式能力' },
+        ],
+        willNotGet: ['读取全部邮箱', '读取通讯录', '群发消息', '自动支付/转账', '代表你签署合同', '拿到手机号/邮箱明文'],
+        deviceSigning: opts.deviceSigning,
+    };
+}