@bolloon/bolloon-agent 0.4.4 → 0.4.5

package/dist/web/components/wallet-viem.mjs

@@ -1,118 +1,118 @@
-// Real-wallet helpers (viem-backed), exposed as window.WalletViem for client.js.
-// 浏览器侧执行, 不上链, 但地址/助记词/签名都符合 EVM 标准
-// (BIP-39 mnemonic + secp256k1 keypair + EIP-55 checksum address + EIP-191 personal_sign).
-
-import {
-  generateMnemonic,
-  mnemonicToAccount,
-  privateKeyToAccount,
-  english,
-} from 'https://esm.sh/viem@2.52.0/accounts';
-
-/**
- * 生成一个全新的 EVM 钱包: 12 词助记词 + 派生账户 (BIP-44, m/44'/60'/0'/0/0)
- * 返回: { mnemonic, address, privateKey }
- *  - mnemonic: 12 词英文助记词
- *  - address:  EIP-55 checksum 后的 0x 开头地址
- *  - privateKey: 0x 开头的 32 字节私钥
- */
-export function generateEVMWallet() {
-  const mnemonic = generateMnemonic(english, 128); // 128 bits = 12 words
-  const account = mnemonicToAccount(mnemonic, { accountIndex: 0 });
-  return {
-    mnemonic,
-    address: account.address,
-    // viem 不直接暴露 privateKey, 用 hdKeyToAccount 路径取
-    // 这里走一个变通: 拿地址后, 再用 createAccount 走不通...
-    // 实际: account.source 包含 HDKey, 我们让它返回 privateKey 字段
-    // 简化: 直接调一个 helper
-  };
-}
-
-/**
- * 通过私钥恢复账户: 用于"导入已有钱包"流程
- */
-export function importEVMWallet(privateKeyHex) {
-  const normalized = privateKeyHex.startsWith('0x') ? privateKeyHex : `0x${privateKeyHex}`;
-  const account = privateKeyToAccount(normalized);
-  return {
-    address: account.address,
-    privateKey: normalized,
-  };
-}
-
-/**
- * 通过助记词恢复账户
- */
-export function importEVMMnemonic(mnemonic) {
-  const account = mnemonicToAccount(mnemonic.trim(), { accountIndex: 0 });
-  return {
-    mnemonic: mnemonic.trim(),
-    address: account.address,
-    privateKey: extractPrivateKey(account),
-  };
-}
-
-/**
- * 真实生成路径: 先生成助记词, 再恢复出账户, 顺带取出 privateKey
- */
-export function generateRealWallet() {
-  const mnemonic = generateMnemonic(english, 128);
-  const account = mnemonicToAccount(mnemonic, { accountIndex: 0 });
-  return {
-    mnemonic,
-    address: account.address,
-    privateKey: extractPrivateKey(account),
-  };
-}
-
-/**
- * 对 channel DID 进行 EIP-191 personal_sign 签名, 证明钱包所有权
- * 返回 { address, signature, message, did }
- *   - message:  实际签名的原文, 服务端需用 recoverMessage 校验
- *   - signature: 0x 开头 65 字节签名 (r||s||v)
- */
-export async function signDIDChallenge(privateKeyHex, did, channelId) {
-  const normalized = privateKeyHex.startsWith('0x') ? privateKeyHex : `0x${privateKeyHex}`;
-  const account = privateKeyToAccount(normalized);
-  const message = buildChallengeMessage(did, channelId);
-  const signature = await account.signMessage({ message });
-  return {
-    address: account.address,
-    signature,
-    message,
-    did,
-  };
-}
-
-export function buildChallengeMessage(did, channelId) {
-  return [
-    'Bolloon Agent Wallet Binding',
-    `Channel ID: ${channelId}`,
-    `Agent DID: ${did}`,
-    `Issued At: ${new Date().toISOString()}`,
-  ].join('\n');
-}
-
-// 从 viem HDKey 账户里取出 privateKey (Uint8Array) 转成 0x 开头 hex
-function extractPrivateKey(account) {
-  const hdKey = account.getHdKey ? account.getHdKey() : null;
-  if (!hdKey || !hdKey.privateKey) {
-    throw new Error('无法从助记词派生私钥');
-  }
-  return '0x' + Array.from(hdKey.privateKey, (b) => b.toString(16).padStart(2, '0')).join('');
-}
-
-const api = {
-  generateRealWallet,
-  importEVMWallet,
-  importEVMMnemonic,
-  signDIDChallenge,
-  buildChallengeMessage,
-};
-
-if (typeof window !== 'undefined') {
-  window.WalletViem = api;
-}
-
-export default api;
+// Real-wallet helpers (viem-backed), exposed as window.WalletViem for client.js.
+// 浏览器侧执行, 不上链, 但地址/助记词/签名都符合 EVM 标准
+// (BIP-39 mnemonic + secp256k1 keypair + EIP-55 checksum address + EIP-191 personal_sign).
+
+import {
+  generateMnemonic,
+  mnemonicToAccount,
+  privateKeyToAccount,
+  english,
+} from 'https://esm.sh/viem@2.52.0/accounts';
+
+/**
+ * 生成一个全新的 EVM 钱包: 12 词助记词 + 派生账户 (BIP-44, m/44'/60'/0'/0/0)
+ * 返回: { mnemonic, address, privateKey }
+ *  - mnemonic: 12 词英文助记词
+ *  - address:  EIP-55 checksum 后的 0x 开头地址
+ *  - privateKey: 0x 开头的 32 字节私钥
+ */
+export function generateEVMWallet() {
+  const mnemonic = generateMnemonic(english, 128); // 128 bits = 12 words
+  const account = mnemonicToAccount(mnemonic, { accountIndex: 0 });
+  return {
+    mnemonic,
+    address: account.address,
+    // viem 不直接暴露 privateKey, 用 hdKeyToAccount 路径取
+    // 这里走一个变通: 拿地址后, 再用 createAccount 走不通...
+    // 实际: account.source 包含 HDKey, 我们让它返回 privateKey 字段
+    // 简化: 直接调一个 helper
+  };
+}
+
+/**
+ * 通过私钥恢复账户: 用于"导入已有钱包"流程
+ */
+export function importEVMWallet(privateKeyHex) {
+  const normalized = privateKeyHex.startsWith('0x') ? privateKeyHex : `0x${privateKeyHex}`;
+  const account = privateKeyToAccount(normalized);
+  return {
+    address: account.address,
+    privateKey: normalized,
+  };
+}
+
+/**
+ * 通过助记词恢复账户
+ */
+export function importEVMMnemonic(mnemonic) {
+  const account = mnemonicToAccount(mnemonic.trim(), { accountIndex: 0 });
+  return {
+    mnemonic: mnemonic.trim(),
+    address: account.address,
+    privateKey: extractPrivateKey(account),
+  };
+}
+
+/**
+ * 真实生成路径: 先生成助记词, 再恢复出账户, 顺带取出 privateKey
+ */
+export function generateRealWallet() {
+  const mnemonic = generateMnemonic(english, 128);
+  const account = mnemonicToAccount(mnemonic, { accountIndex: 0 });
+  return {
+    mnemonic,
+    address: account.address,
+    privateKey: extractPrivateKey(account),
+  };
+}
+
+/**
+ * 对 channel DID 进行 EIP-191 personal_sign 签名, 证明钱包所有权
+ * 返回 { address, signature, message, did }
+ *   - message:  实际签名的原文, 服务端需用 recoverMessage 校验
+ *   - signature: 0x 开头 65 字节签名 (r||s||v)
+ */
+export async function signDIDChallenge(privateKeyHex, did, channelId) {
+  const normalized = privateKeyHex.startsWith('0x') ? privateKeyHex : `0x${privateKeyHex}`;
+  const account = privateKeyToAccount(normalized);
+  const message = buildChallengeMessage(did, channelId);
+  const signature = await account.signMessage({ message });
+  return {
+    address: account.address,
+    signature,
+    message,
+    did,
+  };
+}
+
+export function buildChallengeMessage(did, channelId) {
+  return [
+    'Bolloon Agent Wallet Binding',
+    `Channel ID: ${channelId}`,
+    `Agent DID: ${did}`,
+    `Issued At: ${new Date().toISOString()}`,
+  ].join('\n');
+}
+
+// 从 viem HDKey 账户里取出 privateKey (Uint8Array) 转成 0x 开头 hex
+function extractPrivateKey(account) {
+  const hdKey = account.getHdKey ? account.getHdKey() : null;
+  if (!hdKey || !hdKey.privateKey) {
+    throw new Error('无法从助记词派生私钥');
+  }
+  return '0x' + Array.from(hdKey.privateKey, (b) => b.toString(16).padStart(2, '0')).join('');
+}
+
+const api = {
+  generateRealWallet,
+  importEVMWallet,
+  importEVMMnemonic,
+  signDIDChallenge,
+  buildChallengeMessage,
+};
+
+if (typeof window !== 'undefined') {
+  window.WalletViem = api;
+}
+
+export default api;

package/dist/web/edge-auth-client.js

@@ -0,0 +1,120 @@
+// 边缘认证客户端 — 把 WebUI 登录配置托管到 Cloudflare 边缘 (Workers + KV)
+// 2026-08-12: 优先请求边缘 Worker, worker 不可达时降级到本地 accounts.json fallback.
+// Worker 实现见 src/web/workers/auth/.
+/**
+ * 边缘认证客户端.
+ * 每个 auth 操作先打边缘 Worker; 失败/超时自动降级到本地 accounts.json.
+ */
+export class EdgeAuthClient {
+    baseUrl;
+    timeoutMs;
+    fallbackFile;
+    log;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/+$/, '');
+        this.timeoutMs = opts.timeoutMs ?? 4000;
+        this.fallbackFile = opts.fallbackFile;
+        this.log = opts.log ?? (() => { });
+    }
+    // ---- 私有: 边缘 HTTP / 本地文件 ----
+    async edgeFetch(path, opts) {
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+        try {
+            const res = await fetch(`${this.baseUrl}/api/auth${path}`, {
+                method: opts?.method ?? 'GET',
+                headers: { 'Content-Type': 'application/json' },
+                body: opts?.body ? JSON.stringify(opts.body) : undefined,
+                signal: ctrl.signal,
+            });
+            if (!res.ok) {
+                const err = await res.text().catch(() => '');
+                throw new Error(`边缘认证 ${path} HTTP ${res.status} ${err}`);
+            }
+            return await res.json();
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async loadLocal() {
+        try {
+            const { readFile } = await import('fs/promises');
+            const parsed = JSON.parse(await readFile(this.fallbackFile, 'utf-8'));
+            return Array.isArray(parsed) ? parsed : [];
+        }
+        catch {
+            return [];
+        }
+    }
+    async saveLocal(accs) {
+        const { mkdir, writeFile } = await import('fs/promises');
+        const dir = this.fallbackFile.replace(/[\\/][^\\/]*$/, '');
+        await mkdir(dir, { recursive: true });
+        await writeFile(this.fallbackFile, JSON.stringify(accs, null, 2), { mode: 0o600 });
+    }
+    // ---- 公共 API (与 server.ts 原 loadAccounts/saveAccounts 语义一致) ----
+    /** 返回脱敏视图 (provider/identifier/loggedAt/skeleton), 供 /api/auth/status 直接用 */
+    async loadAccounts() {
+        try {
+            const data = await this.edgeFetch('/status');
+            return Array.isArray(data?.accounts) ? data.accounts : [];
+        }
+        catch (err) {
+            this.log(`[edge-auth] 边缘不可达, 降级本地: ${err?.message ?? err}`);
+            return this.loadLocal().then((accs) => accs.map((a) => ({
+                provider: a.provider,
+                identifier: a.identifier || a.email || a.username || '',
+                loggedAt: a.loggedAt,
+                skeleton: !!a.skeleton,
+            })));
+        }
+    }
+    async login(payload) {
+        try {
+            return await this.edgeFetch('/login', { method: 'POST', body: payload });
+        }
+        catch (err) {
+            this.log(`[edge-auth] 登录降级本地: ${err?.message ?? err}`);
+            const accs = await this.loadLocal();
+            const now = new Date().toISOString();
+            const exists = accs.find((a) => a.provider === payload.provider &&
+                (!payload.identifier || a.identifier === payload.identifier || a.email === payload.identifier));
+            if (exists) {
+                exists.ownerDid = payload.ownerDid;
+                exists.loggedAt = now;
+                exists.skeleton = true;
+            }
+            else {
+                const id = payload.identifier || '';
+                accs.push({
+                    provider: payload.provider,
+                    identifier: id,
+                    email: payload.provider === 'email' ? id : '',
+                    phone: payload.provider === 'phone' ? id : '',
+                    username: id || '',
+                    token: '',
+                    ownerDid: payload.ownerDid,
+                    loggedAt: now,
+                    skeleton: true,
+                });
+            }
+            await this.saveLocal(accs);
+            return { ok: true, provider: payload.provider, identifier: payload.identifier, ownerDid: payload.ownerDid, skeleton: true, degraded: true };
+        }
+    }
+    async logout(payload) {
+        try {
+            return await this.edgeFetch('/logout', { method: 'POST', body: payload });
+        }
+        catch (err) {
+            this.log(`[edge-auth] 登出降级本地: ${err?.message ?? err}`);
+            const before = await this.loadLocal();
+            const remaining = before.filter((a) => a.provider !== payload.provider);
+            if (remaining.length === before.length)
+                throw new Error(`未绑定 ${payload.provider} 账号`);
+            await this.saveLocal(remaining);
+            return { ok: true, degraded: true };
+        }
+    }
+}