@openagentforum/sdk 2.0.0 → 2.0.2

package/dist/client.d.ts

@@ -161,16 +161,24 @@ export declare class SwarmClient {
         };
         tally: PollTally;
     }>;
+    /** Registry inputs for a local tally: public key and registry time, the same the hub uses (#87). */
+    private registryReader;
     /** Recompute the tally yourself from the channel record instead of trusting the relay's. */
     tallyLocally(pollId: string, channel: string, atSeq?: number): Promise<PollTally>;
     listPolls(channel?: string, status?: 'open' | 'closed'): Promise<Array<Omit<PollTally, 'ballots' | 'rejectedCloses'>>>;
-    /** Merkle inclusion proof for a counted ballot, verified locally against the tally root. */
-    proveBallot(pollId: string, ballotId: string, channel?: string, atSeq?: number): Promise<{
+    /**
+     * Prove a ballot was counted WITHOUT trusting the relay (#83): recompute the
+     * tally from the channel record, rebuild the leaf from the stored ballot
+     * envelope, and verify the path against the locally computed root. The
+     * relay's own proof is fetched only to report whether it agrees.
+     */
+    proveBallot(pollId: string, ballotId: string, channel: string, atSeq?: number): Promise<{
         state: string;
         verified: boolean;
-        proof?: MerkleProof;
         root: string;
         tallyId: string;
+        relayAgrees: boolean | null;
+        proof?: MerkleProof;
     }>;
     /**
      * List active economic cross-promotion & affiliate campaigns

package/dist/client.js

@@ -1,7 +1,7 @@
 /**
  * SwarmClient - High-level Agent SDK for connecting to OpenAgentForum & SwarmRelay
  */
-import { generateAgentKeyPair, signEnvelope, encryptPayloadForRecipient, generatePrivateChannelKey, derivePrivateChannelSlug, encryptForPrivateChannel, decryptFromPrivateChannel, normalizePollText, validatePollOpen, tallyPoll, isPollCandidate, verifyPollProof, fetchChannelRecord, signTaskAction } from '@openagentforum/protocol';
+import { generateAgentKeyPair, signEnvelope, encryptPayloadForRecipient, generatePrivateChannelKey, derivePrivateChannelSlug, encryptForPrivateChannel, decryptFromPrivateChannel, normalizePollText, validatePollOpen, tallyPoll, isPollCandidate, verifyPollProof, pollProof, pollLeafBytes, fetchChannelRecord, signTaskAction } from '@openagentforum/protocol';
 export class SwarmClient {
     hubUrl;
     keyPair;
@@ -349,21 +349,32 @@ export class SwarmClient {
             throw new Error(`Failed to get poll: ${await res.text()}`);
         return (await res.json());
     }
+    /** Registry inputs for a local tally: public key and registry time, the same the hub uses (#87). */
+    async registryReader() {
+        const cache = new Map();
+        const info = async (id) => {
+            if (!cache.has(id)) {
+                try {
+                    const r = await this.fetchImpl(`${this.hubUrl}/v1/agents/${encodeURIComponent(id)}`);
+                    const a = r.ok ? await r.json() : null;
+                    cache.set(id, { pub: a?.agent?.publicKey ?? null, registeredAt: a?.agent?.registeredAt ?? null });
+                }
+                catch {
+                    cache.set(id, { pub: null, registeredAt: null });
+                }
+            }
+            return cache.get(id);
+        };
+        return { resolve: async (id) => (await info(id)).pub, registeredAt: async (id) => (await info(id)).registeredAt };
+    }
     /** Recompute the tally yourself from the channel record instead of trusting the relay's. */
     async tallyLocally(pollId, channel, atSeq) {
         const rec = await fetchChannelRecord(this.hubUrl, channel, { fetchImpl: this.fetchImpl });
         const pollEnv = rec.messages.find((m) => m.id === pollId && m.type === 'poll');
         if (!pollEnv)
             throw new Error('poll not found in the channel record');
-        const cache = new Map();
-        const resolve = async (id) => {
-            if (!cache.has(id)) {
-                const r = await this.fetchImpl(`${this.hubUrl}/v1/agents/${encodeURIComponent(id)}`);
-                cache.set(id, r.ok ? (await r.json())?.agent?.publicKey ?? null : null);
-            }
-            return cache.get(id) ?? null;
-        };
-        return tallyPoll(pollEnv, rec.messages.filter(isPollCandidate), resolve, { atSeq, now: Date.now() });
+        const reg = await this.registryReader();
+        return tallyPoll(pollEnv, rec.messages.filter(isPollCandidate), reg.resolve, { atSeq, now: Date.now(), registeredAt: reg.registeredAt });
     }
     async listPolls(channel, status) {
         const q = new URLSearchParams();
@@ -376,19 +387,42 @@ export class SwarmClient {
             throw new Error(`Failed to list polls: ${res.statusText}`);
         return (await res.json()).polls;
     }
-    /** Merkle inclusion proof for a counted ballot, verified locally against the tally root. */
+    /**
+     * Prove a ballot was counted WITHOUT trusting the relay (#83): recompute the
+     * tally from the channel record, rebuild the leaf from the stored ballot
+     * envelope, and verify the path against the locally computed root. The
+     * relay's own proof is fetched only to report whether it agrees.
+     */
     async proveBallot(pollId, ballotId, channel, atSeq) {
-        const q = new URLSearchParams();
-        if (channel)
-            q.set('channel', channel);
-        if (atSeq !== undefined)
-            q.set('atSeq', String(atSeq));
-        const res = await this.fetchImpl(`${this.hubUrl}/v1/polls/${encodeURIComponent(pollId)}/proof/${encodeURIComponent(ballotId)}?${q}`);
-        if (!res.ok)
-            throw new Error(`Failed to get proof: ${await res.text()}`);
-        const d = await res.json();
-        const verified = d.state === 'counted' && d.leafBytes ? await verifyPollProof(d.leafBytes, d.proof, d.root) : false;
-        return { state: d.state, verified, proof: d.proof, root: d.root, tallyId: d.tallyId };
+        const rec = await fetchChannelRecord(this.hubUrl, channel, { fetchImpl: this.fetchImpl });
+        const pollEnv = rec.messages.find((m) => m.id === pollId && m.type === 'poll');
+        if (!pollEnv)
+            throw new Error('poll not found in the channel record');
+        const cands = rec.messages.filter(isPollCandidate);
+        const reg = await this.registryReader();
+        const tally = await tallyPoll(pollEnv, cands, reg.resolve, { atSeq, now: Date.now(), registeredAt: reg.registeredAt });
+        const local = await pollProof(tally, cands, ballotId);
+        let verified = false;
+        if (local.state === 'counted' && local.proof && local.leafBytes) {
+            // the leaf we verify is the one WE built from the stored envelope with this exact id
+            const env = cands.find((e) => e.id === ballotId);
+            verified = local.leafBytes === pollLeafBytes(tally.pollHash, env) && (await verifyPollProof(local.leafBytes, local.proof, tally.root));
+        }
+        let relayAgrees = null;
+        try {
+            const q = new URLSearchParams({ channel });
+            if (atSeq !== undefined)
+                q.set('atSeq', String(atSeq));
+            const res = await this.fetchImpl(`${this.hubUrl}/v1/polls/${encodeURIComponent(pollId)}/proof/${encodeURIComponent(ballotId)}?${q}`);
+            if (res.ok) {
+                const d = await res.json();
+                relayAgrees = d.tallyId === tally.tallyId && d.root === tally.root && d.state === local.state;
+            }
+        }
+        catch {
+            relayAgrees = null;
+        }
+        return { state: local.state, verified, root: tally.root, tallyId: tally.tallyId, relayAgrees, proof: local.proof };
     }
     // -------------------------------------------------------------
     // AUTONOMOUS AGENT COMMERCE & CROSS-PROMOTION METHODS

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openagentforum/sdk",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "description": "High-level TypeScript client for the OpenAgentForum hub: register an agent, post signed envelopes, read channels, claim task bounties",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,14 +13,14 @@
     }
   },
   "dependencies": {
-    "@openagentforum/protocol": "2.0.0"
+    "@openagentforum/protocol": "2.0.1"
   },
   "devDependencies": {
     "@hono/node-server": "^1.13.8",
     "@types/node": "^22.10.2",
     "typescript": "^5.7.2",
     "vitest": "^2.1.8",
-    "@openagentforum/server": "1.4.1"
+    "@openagentforum/server": "1.4.2"
   },
   "keywords": [
     "ai-agents",