@moltium/world-core 0.1.22 → 0.1.24

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   createLogger,
   logger,
   normalizeAgentUrl
-} from "./chunk-DWXNX5V3.js";
+} from "./chunk-Y563WZWH.js";
 
 // src/config/types.ts
 function profileFromCard(card, walletAddress) {
@@ -766,7 +766,7 @@ var BlockchainClient = class {
     return this.wallet.address;
   }
   /**
-   * Get entry fee in MON
+   * Get entry fee in MON (formatted)
    */
   async getEntryFee() {
     if (!this.membershipContract) {
@@ -780,6 +780,78 @@ var BlockchainClient = class {
       return "0";
     }
   }
+  /**
+   * Get entry fee in wei (raw BigInt string)
+   */
+  async getEntryFeeWei() {
+    if (!this.membershipContract) {
+      return "0";
+    }
+    try {
+      const fee = await this.membershipContract.entryFee();
+      return fee.toString();
+    } catch (error) {
+      logger3.error("Failed to get entry fee (wei)", { error: error.message });
+      return "0";
+    }
+  }
+  // Track used payment tx hashes to prevent replay attacks
+  usedPayments = /* @__PURE__ */ new Set();
+  /**
+   * Verify a payment transaction from an agent.
+   * Checks: tx confirmed, correct sender, correct recipient (world wallet), sufficient amount.
+   * Prevents replay attacks by tracking used tx hashes.
+   */
+  async verifyPayment(txHash, expectedSender, expectedAmountWei) {
+    const normalizedHash = txHash.toLowerCase();
+    if (this.usedPayments.has(normalizedHash)) {
+      logger3.warn("Payment verification: transaction already used", { txHash });
+      return false;
+    }
+    try {
+      const receipt = await this.provider.getTransactionReceipt(txHash);
+      if (!receipt || receipt.status !== 1) {
+        logger3.warn("Payment verification: transaction not confirmed or failed", { txHash });
+        return false;
+      }
+      const tx = await this.provider.getTransaction(txHash);
+      if (!tx) {
+        logger3.warn("Payment verification: transaction not found", { txHash });
+        return false;
+      }
+      if (tx.from.toLowerCase() !== expectedSender.toLowerCase()) {
+        logger3.warn("Payment verification: wrong sender", {
+          expected: expectedSender,
+          actual: tx.from
+        });
+        return false;
+      }
+      if (tx.to?.toLowerCase() !== this.wallet.address.toLowerCase()) {
+        logger3.warn("Payment verification: wrong recipient", {
+          expected: this.wallet.address,
+          actual: tx.to
+        });
+        return false;
+      }
+      if (tx.value < BigInt(expectedAmountWei)) {
+        logger3.warn("Payment verification: insufficient amount", {
+          expected: expectedAmountWei,
+          actual: tx.value.toString()
+        });
+        return false;
+      }
+      this.usedPayments.add(normalizedHash);
+      logger3.info("Payment verified successfully", {
+        txHash,
+        sender: tx.from,
+        amount: ethers.formatEther(tx.value)
+      });
+      return true;
+    } catch (error) {
+      logger3.error("Payment verification error", { txHash, error: error.message });
+      return false;
+    }
+  }
 };
 
 // src/a2a/WorldA2AClient.ts
@@ -1246,30 +1318,71 @@ var TickOrchestrator = class {
 
 // src/a2a/MessageRouter.ts
 var logger8 = createLogger("MessageRouter");
+var c = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  blue: "\x1B[34m",
+  green: "\x1B[32m",
+  yellow: "\x1B[33m",
+  magenta: "\x1B[35m",
+  cyan: "\x1B[36m",
+  red: "\x1B[31m",
+  gray: "\x1B[90m"
+};
 var MessageRouter = class {
   constructor(a2aClient, getAgents) {
     this.a2aClient = a2aClient;
     this.getAgents = getAgents;
   }
+  /**
+   * Extract base URL (protocol://host:port) from a full URL for comparison.
+   * Agent cards use full URLs (e.g. http://localhost:3001/a2a/jsonrpc)
+   * while agents send base URLs (e.g. http://localhost:3001).
+   */
+  extractBaseUrl(url) {
+    try {
+      const parsed = new URL(url);
+      return `${parsed.protocol}//${parsed.host}`;
+    } catch {
+      return url;
+    }
+  }
+  /**
+   * Find an agent by URL, normalizing both sides to base URL for comparison
+   */
+  findAgent(agents, url) {
+    const baseUrl = this.extractBaseUrl(url);
+    return agents.find((a) => this.extractBaseUrl(a.url) === baseUrl);
+  }
   /**
    * Route a message from one agent to another
    */
   async route(fromAgentUrl, toAgentUrl, message) {
     const agents = this.getAgents();
-    const sender = agents.find((a) => a.url === fromAgentUrl);
+    const sender = this.findAgent(agents, fromAgentUrl);
     if (!sender) {
+      logger8.warn(`Message rejected \u2014 sender not in world: ${fromAgentUrl}`);
       return {
         success: false,
         error: `Sender not in world: ${fromAgentUrl}`
       };
     }
-    const recipient = agents.find((a) => a.url === toAgentUrl);
+    const recipient = this.findAgent(agents, toAgentUrl);
     if (!recipient) {
+      logger8.warn(`Message rejected \u2014 recipient not in world: ${toAgentUrl}`);
       return {
         success: false,
         error: `Recipient not in world: ${toAgentUrl}`
       };
     }
+    console.log(
+      `
+${c.cyan}\u2501\u2501\u2501 MESSAGE \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501${c.reset}
+${c.bold}${c.blue}${sender.name}${c.reset} ${c.dim}\u2192${c.reset} ${c.bold}${c.green}${recipient.name}${c.reset}
+${c.dim}\u2502${c.reset} ${this.truncate(message, 300)}
+${c.cyan}\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501${c.reset}`
+    );
     const wrappedMessage = JSON.stringify({
       type: "world_message",
       from: {
@@ -1279,19 +1392,33 @@ var MessageRouter = class {
       },
       message
     });
-    logger8.info(`Routing message: ${sender.name} \u2192 ${recipient.name}`);
-    return this.a2aClient.sendToAgent(toAgentUrl, wrappedMessage, {
+    const response = await this.a2aClient.sendToAgent(toAgentUrl, wrappedMessage, {
       type: "world_message",
       fromAgentUrl
     });
+    if (response.success && response.reply) {
+      console.log(
+        `
+${c.green}\u2501\u2501\u2501 REPLY \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501${c.reset}
+${c.bold}${c.green}${recipient.name}${c.reset} ${c.dim}\u2192${c.reset} ${c.bold}${c.blue}${sender.name}${c.reset}
+${c.dim}\u2502${c.reset} ${this.truncate(response.reply, 300)}
+${c.green}\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501${c.reset}`
+      );
+    } else if (!response.success) {
+      console.log(
+        `${c.red}  \u2717 ${recipient.name} failed to respond: ${response.error || "no response"}${c.reset}`
+      );
+    }
+    return response;
   }
   /**
    * Broadcast a message from one agent to all other agents in the world
    */
   async routeToAll(fromAgentUrl, message) {
     const agents = this.getAgents();
-    const sender = agents.find((a) => a.url === fromAgentUrl);
+    const sender = this.findAgent(agents, fromAgentUrl);
     if (!sender) {
+      logger8.warn(`Broadcast rejected \u2014 sender not in world: ${fromAgentUrl}`);
       const result = /* @__PURE__ */ new Map();
       result.set(fromAgentUrl, {
         success: false,
@@ -1299,6 +1426,15 @@ var MessageRouter = class {
       });
       return result;
     }
+    const senderBaseUrl = this.extractBaseUrl(fromAgentUrl);
+    const recipients = agents.filter((a) => this.extractBaseUrl(a.url) !== senderBaseUrl);
+    console.log(
+      `
+${c.yellow}\u2501\u2501\u2501 BROADCAST \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501${c.reset}
+${c.bold}${c.blue}${sender.name}${c.reset} ${c.dim}\u2192${c.reset} ${c.bold}${c.yellow}ALL (${recipients.length} agents)${c.reset}
+${c.dim}\u2502${c.reset} ${this.truncate(message, 300)}
+${c.yellow}\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501${c.reset}`
+    );
     const wrappedMessage = JSON.stringify({
       type: "world_broadcast",
       from: {
@@ -1309,7 +1445,6 @@ var MessageRouter = class {
       message
     });
     const results = /* @__PURE__ */ new Map();
-    const recipients = agents.filter((a) => a.url !== fromAgentUrl);
     const promises = recipients.map(async (recipient) => {
       const response = await this.a2aClient.sendToAgent(
         recipient.url,
@@ -1317,11 +1452,32 @@ var MessageRouter = class {
         { type: "world_broadcast", fromAgentUrl }
       );
       results.set(recipient.url, response);
+      if (response.success && response.reply) {
+        console.log(
+          `${c.green}  \u21A9 ${c.bold}${recipient.name}${c.reset}${c.green} replied:${c.reset} ${this.truncate(response.reply, 200)}`
+        );
+      } else if (!response.success) {
+        console.log(
+          `${c.red}  \u2717 ${recipient.name} failed: ${response.error || "no response"}${c.reset}`
+        );
+      }
     });
     await Promise.allSettled(promises);
-    logger8.info(`Broadcast from ${sender.name} to ${recipients.length} agents`);
+    const succeeded = Array.from(results.values()).filter((r) => r.success).length;
+    const failed = Array.from(results.values()).filter((r) => !r.success).length;
+    console.log(
+      `${c.dim}  Broadcast complete: ${c.green}${succeeded} replied${c.reset}${c.dim}${failed > 0 ? `, ${c.red}${failed} failed${c.reset}` : ""}${c.reset}
+`
+    );
     return results;
   }
+  /**
+   * Truncate long messages for logging
+   */
+  truncate(text, maxLen) {
+    if (text.length <= maxLen) return text;
+    return text.slice(0, maxLen) + "...";
+  }
 };
 
 // src/engine/World.ts
@@ -1476,10 +1632,20 @@ var World = class {
     });
     logger9.info("World stopped");
   }
+  /**
+   * Get the blockchain client (for server endpoints)
+   */
+  getBlockchainClient() {
+    return this.blockchainClient;
+  }
   /**
    * Admit an agent to the world
    */
-  async admitAgent(card, walletAddress) {
+  async admitAgent(card, walletAddress, paymentTxHash) {
+    if (this.agents.has(card.url)) {
+      logger9.info(`Agent already in world, skipping re-admission: ${card.name}`);
+      return;
+    }
     const decision = await this.evaluator.evaluate(card, this.agents.size, walletAddress);
     if (!decision.admitted) {
       throw new Error(`Agent admission denied: ${decision.reason}`);
@@ -1491,9 +1657,36 @@ var World = class {
       }
       logger9.info(`Agent validated on-chain: ${card.name}`);
     }
-    if (this.blockchainClient && this.config.blockchain?.requireMembership && walletAddress) {
+    if (this.blockchainClient && this.config.blockchain?.requireMembership) {
+      if (!walletAddress) {
+        throw new Error(
+          "This world requires blockchain membership. Provide a walletAddress when joining. Set AGENT_WALLET_PRIVATE_KEY in your .env file to auto-derive a wallet address."
+        );
+      }
       const hasMembership = await this.blockchainClient.hasMembership(walletAddress);
       if (!hasMembership) {
+        const entryFeeWei = await this.blockchainClient.getEntryFeeWei();
+        if (entryFeeWei !== "0" && BigInt(entryFeeWei) > 0n) {
+          if (!paymentTxHash) {
+            throw new Error(
+              `Entry fee required: ${entryFeeWei} wei. Query GET /world/join-info for payment details, pay the fee, then include paymentTxHash in your join request.`
+            );
+          }
+          const paymentValid = await this.blockchainClient.verifyPayment(
+            paymentTxHash,
+            walletAddress,
+            entryFeeWei
+          );
+          if (!paymentValid) {
+            throw new Error(
+              `Payment verification failed for tx ${paymentTxHash}. Ensure the transaction is confirmed, sent from ${walletAddress}, to ${this.blockchainClient.getWalletAddress()}, for at least ${entryFeeWei} wei.`
+            );
+          }
+          logger9.info(`Entry fee payment verified for ${card.name}`, {
+            txHash: paymentTxHash,
+            amount: entryFeeWei
+          });
+        }
         logger9.info(`Minting membership NFT for agent: ${card.name}`);
         await this.blockchainClient.mintMembership(walletAddress);
       } else {
@@ -1677,9 +1870,40 @@ function createWorldApp(world) {
       }
     });
   });
+  app.get("/world/join-info", async (req, res) => {
+    try {
+      const blockchain = world.config.blockchain;
+      const client = world.getBlockchainClient();
+      if (!blockchain || !client) {
+        return res.json({
+          worldName: world.config.name,
+          requiresPayment: false,
+          entryFee: "0",
+          paymentAddress: null,
+          chainId: null,
+          rpcUrl: null
+        });
+      }
+      const entryFeeWei = await client.getEntryFeeWei();
+      res.json({
+        worldName: world.config.name,
+        requiresPayment: entryFeeWei !== "0" && BigInt(entryFeeWei) > 0n,
+        entryFee: entryFeeWei,
+        paymentAddress: client.getWalletAddress(),
+        chainId: blockchain.chainId || null,
+        rpcUrl: blockchain.rpcUrl
+      });
+    } catch (error) {
+      logger10.error("Failed to get join info:", error);
+      res.status(500).json({
+        success: false,
+        error: error.message || "Failed to get join info"
+      });
+    }
+  });
   app.post("/world/join", async (req, res) => {
     try {
-      const { agentUrl, walletAddress } = req.body;
+      const { agentUrl, walletAddress, paymentTxHash } = req.body;
       if (!agentUrl) {
         return res.status(400).json({
           success: false,
@@ -1687,9 +1911,10 @@ function createWorldApp(world) {
         });
       }
       logger10.info(`Agent join request from: ${agentUrl}`, {
-        wallet: walletAddress || "none"
+        wallet: walletAddress || "none",
+        paymentTx: paymentTxHash ? `${paymentTxHash.slice(0, 10)}...` : "none"
       });
-      const cardFetcher = new (await import("./CardFetcher-4ENWKI6E.js")).CardFetcher();
+      const cardFetcher = new (await import("./CardFetcher-IMUPYNEQ.js")).CardFetcher();
       const result = await cardFetcher.fetchCard(agentUrl);
       if (!result.success || !result.card) {
         return res.status(400).json({
@@ -1697,7 +1922,7 @@ function createWorldApp(world) {
           error: `Failed to fetch agent card: ${result.error}`
         });
       }
-      await world.admitAgent(result.card, walletAddress);
+      await world.admitAgent(result.card, walletAddress, paymentTxHash);
       res.json({
         success: true,
         message: "Agent admitted to world",
@@ -1855,6 +2080,7 @@ async function startWorldServer(world) {
     logger10.info("");
     logger10.info("Endpoints:");
     logger10.info(`  GET    /                    - World info`);
+    logger10.info(`  GET    /world/join-info     - Join requirements & entry fee`);
     logger10.info(`  POST   /world/join          - Agent join request`);
     logger10.info(`  GET    /world/agents        - List agents`);
     logger10.info(`  GET    /world/state         - World state`);