@twinsearth/agent-universe 2.3.6 → 2.5.7

package/js/test/test.js

@@ -0,0 +1,224 @@
+// test/test.js
+// Agent Universe JS SDK 测试（12 项）
+
+const assert = require('node:assert');
+const {
+  version,
+  AgentUniverse,
+  Keypair,
+  AgentCard,
+  Task,
+  TaskStatus,
+  MemoryDHT,
+  ShardedIndex,
+  shardOf,
+  AgentMarket,
+  MIN_STAKE,
+  AipIdentity,
+  buildManifest,
+  buildEnvelope,
+  proposalMessage,
+  buildReceipt,
+  verifyManifest,
+  verifyMessage,
+  verifyReceipt,
+  verifyReceiptResult,
+} = require('../index');
+
+let passed = 0;
+function test(name, fn) {
+  try {
+    fn();
+    passed++;
+    console.log(`  ✓ ${name}`);
+  } catch (e) {
+    console.error(`  ✗ ${name}`);
+    console.error(`    ${e.message}`);
+    process.exitCode = 1;
+  }
+}
+
+console.log('Agent Universe JS SDK 测试\n');
+
+// 1. 版本号
+test('版本号为 2.5.7', () => {
+  assert.strictEqual(version, '2.5.7');
+});
+
+// 2. 密钥对 + DID + 签名验证
+test('Keypair 生成 DID 且签名可验证', () => {
+  const kp = Keypair.generate();
+  assert.ok(kp.did.startsWith('did:nau:'), 'DID 前缀');
+  assert.strictEqual(kp.did.length, 'did:nau:'.length + 16);
+  const msg = 'hello agent universe';
+  const sig = kp.sign(msg);
+  assert.ok(kp.verify(msg, sig), '签名验证通过');
+  assert.ok(!kp.verify('tampered', sig), '篡改消息验证失败');
+});
+
+// 3. AgentCard
+test('AgentCard 能力与技能', () => {
+  const card = AgentCard.new({ did: 'did:au:abc', name: 'writer' })
+    .withCapability('writing')
+    .withSkill('translation');
+  assert.ok(card.hasCapability('writing'));
+  assert.deepStrictEqual(card.toJSON().skills, ['translation']);
+});
+
+// 4. Task 状态机
+test('Task 状态机合法流转且拒绝非法转移', () => {
+  const t = new Task('t1', 'write doc');
+  t.transition(TaskStatus.OPEN);
+  t.assign('did:au:worker');
+  t.start();
+  t.complete();
+  t.verify(true);
+  t.settle();
+  assert.strictEqual(t.status, TaskStatus.SETTLED);
+  assert.ok(t.isTerminal);
+
+  const t2 = new Task('t2', 'bad');
+  assert.throws(() => t2.start(), /非法状态转移/);
+});
+
+// 5. MemoryDHT
+test('MemoryDHT 存取与前缀查找', () => {
+  const dht = new MemoryDHT();
+  dht.put('/aip/agent/1', { name: 'a' });
+  dht.put('/aip/agent/2', { name: 'b' });
+  assert.strictEqual(dht.size, 2);
+  assert.strictEqual(dht.get('/aip/agent/1').name, 'a');
+  assert.strictEqual(dht.findByPrefix('/aip/agent').length, 2);
+});
+
+// 6. ShardedIndex 分片
+test('ShardedIndex 分片落盘且分片号合法', () => {
+  const idx = new ShardedIndex(16);
+  for (let i = 0; i < 100; i++) {
+    const s = idx.put(`key-${i}`, i);
+    assert.ok(s >= 0 && s < 16);
+  }
+  assert.strictEqual(idx.size, 100);
+  assert.strictEqual(shardOf('key-0', 16), shardOf('key-0', 16));
+  // 分布：100 key 到 16 片，不应有大片为空（概率性，至少覆盖 8 片）
+  const nonEmpty = idx.distribution().filter((n) => n > 0).length;
+  assert.ok(nonEmpty >= 8, `非空分片 ${nonEmpty} >= 8`);
+});
+
+// 7. AgentMarket 端到端 + 守恒
+test('AgentMarket 端到端：注册→发布→投标→匹配→完成→结算→守恒', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:owner';
+  const requester = 'did:au:requester';
+
+  // 充值（owner 质押 100，requester 预算 50）
+  market.deposit(owner, 100);
+  market.deposit(requester, 50);
+  const totalDeposits = 150;
+
+  const card = AgentCard.new({ did: owner, name: 'worker' })
+    .withSkill('writing');
+  market.registerAgent(card, MIN_STAKE);
+
+  market.publishTask('task-1', 'write an article', 50, requester);
+  market.submitBid('task-1', owner, 40);
+  const winner = market.matchTask('task-1');
+  assert.strictEqual(winner.agentId, owner);
+
+  market.completeTask('task-1', true);
+  const result = market.settle('task-1');
+  assert.strictEqual(result.paid, 40);
+
+  // 重复结算短路
+  const again = market.settle('task-1');
+  assert.strictEqual(again.reason, 'already_paid');
+
+  // 守恒：无罚没，总余额 = 总充值
+  const check = market.conservationCheck(totalDeposits);
+  assert.ok(check.conserved, `守恒: ${JSON.stringify(check)}`);
+});
+
+// 8. 罚没守恒
+test('罚没后守恒：总余额 = 总充值 − 罚没', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:bad';
+  market.deposit(owner, 200);
+  const card = AgentCard.new({ did: owner, name: 'bad' });
+  market.registerAgent(card, MIN_STAKE); // 质押 100
+
+  const slashResult = market.slash(owner, 60, 'fraud');
+  assert.strictEqual(slashResult.slashed, 60);
+
+  const check = market.conservationCheck(200);
+  assert.ok(check.conserved, `罚没守恒: ${JSON.stringify(check)}`);
+  assert.strictEqual(check.balanceSum, 140);
+});
+
+// 9. AipIdentity DID 与签名往返
+test('AipIdentity 生成 did:aip 且签名可验证', () => {
+  const id = AipIdentity.generate();
+  assert.ok(id.did.startsWith('did:aip:'), 'DID 前缀');
+  assert.strictEqual(id.publicKey.length, 32, '原始公钥 32 字节');
+  const obj = { did: id.did, name: 't' };
+  id.signInto(obj);
+  assert.ok(AipIdentity.verifyObject(obj, id.publicKey), '验签通过');
+  const tampered = { ...obj, name: 'x' };
+  assert.ok(!AipIdentity.verifyObject(tampered, id.publicKey), '篡改拒绝');
+});
+
+// 10. 跨语言基准（与 Rust/Python 固定种子一致）
+test('AipIdentity.fromSeed 复算 Rust/Python 基准', () => {
+  const id = AipIdentity.fromSeed(Buffer.alloc(32, 1));
+  assert.strictEqual(
+    id.publicKey.toString('hex'),
+    '8a88e3dd7409f195fd52db2d3cba5d72ca6709bf1d94121bf3748801b40f6f5c'
+  );
+  assert.strictEqual(id.did, 'did:aip:34750f98bd59fcfc');
+  const obj = {
+    did: id.did,
+    name: 'CrossLang',
+    capabilities: ['text-generation', 'mcp'],
+    stake: 100,
+  };
+  const sig = id.signObject(obj);
+  assert.strictEqual(
+    sig,
+    'e14d3f9e8204ea185ea4ba32a8117f262095ab9dac1352e1a7964ce36d3355c288dd6804ffa7daeb5f6eba9f30428f52702a75fd3efbb6a62555a7f24665da0e'
+  );
+});
+
+// 11. ACA manifest/message 构造与验签
+test('ACA manifest 与 proposal message 可验签、篡改拒绝', () => {
+  const owner = AipIdentity.generate();
+  const peer = AipIdentity.generate();
+  const manifest = buildManifest(owner, 'Agent1', ['text-generation'], {
+    stake: 100,
+    mcpToolCount: 3,
+  });
+  assert.ok(verifyManifest(manifest, owner.publicKey));
+  assert.ok(!verifyManifest({ ...manifest, name: 'Fake' }, owner.publicKey));
+
+  const envelope = buildEnvelope(owner.did, 'text-generation', 'out', {
+    budget: 10,
+  });
+  const message = proposalMessage(owner, peer.did, envelope);
+  assert.ok(verifyMessage(message, owner.publicKey));
+  assert.ok(!verifyMessage(message, peer.publicKey), '他人公钥拒绝');
+});
+
+// 12. Receipt 签名与结果哈希
+test('ACA receipt 签名、结果哈希正反例', () => {
+  const owner = AipIdentity.generate();
+  const result = Buffer.from('hello result');
+  const receipt = buildReceipt(owner, 'task-1', result);
+  assert.ok(verifyReceipt(receipt, owner.publicKey));
+  assert.ok(verifyReceiptResult(receipt, result));
+  assert.ok(!verifyReceiptResult(receipt, Buffer.from('other')));
+});
+
+console.log(`\n${passed} 项测试通过`);
+if (process.exitCode === 1) {
+  console.error('存在失败测试');
+} else {
+  console.log('全部通过');
+}

package/lib/aca.js

@@ -1,259 +1,3 @@
-// lib/aca.js
-// ACA（Agent Communication Architecture）：与 Rust gsn-core / Python SDK
-// 对齐的身份、规范签名与协议对象构造。零依赖，使用 node:crypto。
-//
-// 跨语言一致性：canonical 载荷为移除 signature 键后，紧凑、按 key 字典序、
-// 不转义非 ASCII 的 JSON 字节，与 Rust serde_json(BTreeMap)、Python
-// sort_keys 产出逐字节一致，因此三端可互验签名。
-
-const crypto = require('node:crypto');
-
-// Ed25519 PKCS#8 DER 固定前缀（16 字节），后接 32 字节种子
-const PKCS8_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
-
-// ── 枚举标签（与 Rust serde 变体名一致） ──
-const MODE_SELF_REPORTED = 'SelfReported';
-const LEVEL_L0 = 'L0Sample';
-const PRIVACY_PUBLIC = 'Public';
-const PRIORITY_NORMAL = 'Normal';
-const STATUS_COMPLETED = 'Completed';
-const MSG_HANDSHAKE = 'Handshake';
-const MSG_TASK_PROPOSAL = 'TaskProposal';
-const MSG_RECEIPT = 'Receipt';
-
-function nowSec() {
-  return Math.floor(Date.now() / 1000);
-}
-
-/** 稳定 JSON 序列化：紧凑、对象键按字典序、非 ASCII 原样输出 */
-function stableStringify(value) {
-  if (value === null || typeof value !== 'object') {
-    return JSON.stringify(value);
-  }
-  if (Array.isArray(value)) {
-    return '[' + value.map(stableStringify).join(',') + ']';
-  }
-  const keys = Object.keys(value).sort();
-  return (
-    '{' +
-    keys
-      .map((k) => JSON.stringify(k) + ':' + stableStringify(value[k]))
-      .join(',') +
-    '}'
-  );
-}
-
-/** 规范待签名载荷：移除 signature 键，返回 Buffer */
-function canonicalPayload(obj) {
-  const copy = { ...obj };
-  delete copy.signature;
-  return Buffer.from(stableStringify(copy), 'utf8');
-}
-
-function rawPublicFromKey(pubKey) {
-  return Buffer.from(pubKey.export({ format: 'jwk' }).x, 'base64url');
-}
-
-function pubKeyFromRaw(raw) {
-  return crypto.createPublicKey({
-    key: { kty: 'OKP', crv: 'Ed25519', x: raw.toString('base64url') },
-    format: 'jwk',
-  });
-}
-
-/**
- * 跨语言对齐的节点身份：Ed25519 + did:aip（原始 32 字节公钥指纹）
- */
-class AipIdentity {
-  constructor(privKey, rawPub) {
-    this._priv = privKey;
-    this._rawPub = rawPub;
-    const hash = crypto.createHash('sha256').update(rawPub).digest('hex');
-    this.did = 'did:aip:' + hash.slice(0, 16);
-  }
-
-  static generate() {
-    const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
-    return new AipIdentity(privateKey, rawPublicFromKey(publicKey));
-  }
-
-  static fromSeed(seed) {
-    const buf = Buffer.isBuffer(seed) ? seed : Buffer.from(seed);
-    if (buf.length !== 32) throw new Error('seed 必须为 32 字节');
-    const priv = crypto.createPrivateKey({
-      key: Buffer.concat([PKCS8_PREFIX, buf]),
-      format: 'der',
-      type: 'pkcs8',
-    });
-    const rawPub = rawPublicFromKey(crypto.createPublicKey(priv));
-    return new AipIdentity(priv, rawPub);
-  }
-
-  /** 32 字节原始公钥 */
-  get publicKey() {
-    return this._rawPub;
-  }
-
-  signObject(obj) {
-    return crypto.sign(null, canonicalPayload(obj), this._priv).toString('hex');
-  }
-
-  signInto(obj) {
-    obj.signature = this.signObject(obj);
-    return obj;
-  }
-
-  static verifyObject(obj, rawPub) {
-    const sigHex = obj && obj.signature;
-    if (!sigHex) return false;
-    let sig;
-    try {
-      sig = Buffer.from(sigHex, 'hex');
-    } catch (e) {
-      return false;
-    }
-    try {
-      return crypto.verify(
-        null,
-        canonicalPayload(obj),
-        pubKeyFromRaw(rawPub),
-        sig
-      );
-    } catch (e) {
-      return false;
-    }
-  }
-}
-
-function buildManifest(identity, name, capabilities, opts = {}) {
-  const manifest = {
-    did: identity.did,
-    name,
-    version: opts.version || '2.3.6',
-    capabilities: [...capabilities],
-    endpoints: opts.endpoints || [],
-    hardware: {
-      cpu_cores: opts.cpuCores || 0,
-      memory_mb: opts.memoryMb || 0,
-      disk_free_gb: opts.diskFreeGb || 0,
-      gpu: null,
-      bandwidth_up_mbps: 0,
-      bandwidth_down_mbps: 0,
-      platform: opts.platform || 'desktop',
-    },
-    verification_modes: opts.verificationModes || [MODE_SELF_REPORTED],
-    stake: opts.stake || 0,
-    reputation_ref: null,
-    model_hash: null,
-    mcp_tool_count: opts.mcpToolCount || 0,
-    signature: '',
-    timestamp: nowSec(),
-  };
-  return identity.signInto(manifest);
-}
-
-function buildEnvelope(requesterDid, capability, outputSpec, opts = {}) {
-  return {
-    task_id: crypto.randomUUID(),
-    requester_did: requesterDid,
-    capability,
-    input_cid: opts.inputCid || '',
-    output_spec: outputSpec,
-    verification_level: opts.verificationLevel || LEVEL_L0,
-    privacy: opts.privacy || PRIVACY_PUBLIC,
-    budget: opts.budget || 0,
-    timeout_secs: opts.timeoutSecs || 300,
-    priority: opts.priority || PRIORITY_NORMAL,
-    mcp_tool: opts.mcpTool || null,
-    created_at: nowSec(),
-  };
-}
-
-function buildMessage(identity, msgType, toDid, payload) {
-  const message = {
-    message_id: crypto.randomUUID(),
-    msg_type: msgType,
-    from_did: identity.did,
-    to_did: toDid,
-    payload,
-    timestamp: nowSec(),
-    signature: '',
-  };
-  return identity.signInto(message);
-}
-
-function handshakeMessage(identity, manifest) {
-  return buildMessage(identity, MSG_HANDSHAKE, '*', manifest);
-}
-
-function proposalMessage(identity, toDid, envelope) {
-  return buildMessage(identity, MSG_TASK_PROPOSAL, toDid, envelope);
-}
-
-function buildReceipt(identity, taskId, result, opts = {}) {
-  const hash = crypto.createHash('sha256').update(result).digest();
-  const metering = Object.assign(
-    {
-      compute_ms: 0,
-      memory_peak_mb: 0,
-      bandwidth_mb: 0,
-      storage_bytes: 0,
-      energy_joules: 0,
-    },
-    opts.metering || {}
-  );
-  const receipt = {
-    task_id: taskId,
-    executor_did: identity.did,
-    result_cid: 'cid:' + hash.toString('hex').slice(0, 16),
-    result_hash: [...hash],
-    status: opts.status || STATUS_COMPLETED,
-    metering,
-    tee_quote: opts.teeQuote || null,
-    zk_proof: opts.zkProof || null,
-    completed_at: nowSec(),
-    signature: '',
-  };
-  return identity.signInto(receipt);
-}
-
-function receiptMessage(identity, toDid, receipt) {
-  return buildMessage(identity, MSG_RECEIPT, toDid, receipt);
-}
-
-function verifyManifest(manifest, rawPub) {
-  return AipIdentity.verifyObject(manifest, rawPub);
-}
-function verifyMessage(message, rawPub) {
-  return AipIdentity.verifyObject(message, rawPub);
-}
-function verifyReceipt(receipt, rawPub) {
-  return AipIdentity.verifyObject(receipt, rawPub);
-}
-function verifyReceiptResult(receipt, result) {
-  const hash = crypto.createHash('sha256').update(result).digest();
-  return deepEqualArray(receipt.result_hash, [...hash]);
-}
-
-function deepEqualArray(a, b) {
-  if (!Array.isArray(a) || a.length !== b.length) return false;
-  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;
-  return true;
-}
-
-module.exports = {
-  AipIdentity,
-  canonicalPayload,
-  stableStringify,
-  buildManifest,
-  buildEnvelope,
-  buildMessage,
-  buildReceipt,
-  handshakeMessage,
-  proposalMessage,
-  receiptMessage,
-  verifyManifest,
-  verifyMessage,
-  verifyReceipt,
-  verifyReceiptResult,
-};
+// 根包 /lib 子路径入口（v2.5.7 补）：re-export js/lib，
+// 使根发布包暴露 /lib/aca.js 子路径，供浏览器端按需引入（与 js 子包发布结构对齐）。
+module.exports = require('../js/lib/aca.js');

package/lib/dht.js

@@ -1,92 +1,3 @@
-// lib/dht.js
-// MemoryDHT / ShardedIndex / shardOf（SHA-256 分片）
-
-const crypto = require('node:crypto');
-
-/** 计算 key 所属分片：SHA-256(key) 前 8 hex 转整数，对 numShards 取模 */
-function shardOf(key, numShards) {
-  const hash = crypto.createHash('sha256').update(String(key)).digest('hex');
-  const prefix = parseInt(hash.slice(0, 8), 16);
-  return prefix % numShards;
-}
-
-/** 内存 DHT（键值存储） */
-class MemoryDHT {
-  constructor() {
-    this.store = new Map();
-  }
-
-  put(key, value) {
-    this.store.set(String(key), value);
-  }
-
-  get(key) {
-    return this.store.get(String(key));
-  }
-
-  has(key) {
-    return this.store.has(String(key));
-  }
-
-  remove(key) {
-    return this.store.delete(String(key));
-  }
-
-  get size() {
-    return this.store.size;
-  }
-
-  /** 按前缀查找 */
-  findByPrefix(prefix) {
-    const result = [];
-    for (const [k, v] of this.store) {
-      if (k.startsWith(prefix)) result.push({ key: k, value: v });
-    }
-    return result;
-  }
-}
-
-/** 分片索引：把 key 均匀分布到 numShards 个分片 */
-class ShardedIndex {
-  constructor(numShards = 16) {
-    this.numShards = numShards;
-    this.shards = [];
-    for (let i = 0; i < numShards; i++) this.shards.push(new Map());
-  }
-
-  put(key, value) {
-    const s = shardOf(key, this.numShards);
-    this.shards[s].set(String(key), value);
-    return s;
-  }
-
-  get(key) {
-    const s = shardOf(key, this.numShards);
-    return this.shards[s].get(String(key));
-  }
-
-  has(key) {
-    const s = shardOf(key, this.numShards);
-    return this.shards[s].has(String(key));
-  }
-
-  remove(key) {
-    const s = shardOf(key, this.numShards);
-    return this.shards[s].delete(String(key));
-  }
-
-  shardSize(i) {
-    return this.shards[i].size;
-  }
-
-  get size() {
-    return this.shards.reduce((sum, m) => sum + m.size, 0);
-  }
-
-  /** 各分片条目数（用于验证分布均匀性） */
-  distribution() {
-    return this.shards.map((m) => m.size);
-  }
-}
-
-module.exports = { MemoryDHT, ShardedIndex, shardOf };
+// 根包 /lib 子路径入口（v2.5.7 补）：re-export js/lib，
+// 使根发布包暴露 /lib/dht.js 子路径（与 js 子包发布结构对齐）。
+module.exports = require('../js/lib/dht.js');

package/lib/keychain.js

@@ -1,74 +1,3 @@
-// lib/keychain.js
-// Ed25519 密钥对 + DID 身份（零依赖，使用 node:crypto）
-
-const crypto = require('node:crypto');
-
-/**
- * 密钥对与去中心化身份
- */
-class Keypair {
-  constructor(publicKey, privateKey, did) {
-    this.publicKey = publicKey;   // hex
-    this.privateKey = privateKey; // hex（node KeyObject 可导出的形式）
-    this.did = did;               // did:au:<hash>
-  }
-
-  /** 生成新的 Ed25519 密钥对与 DID */
-  static generate() {
-    const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
-    const pubHex = publicKey.export({ format: 'der', type: 'spki' })
-      .toString('hex');
-    // DID 由公钥的 SHA-256 哈希（取前 32 字符）派生
-    const didHash = crypto.createHash('sha256')
-      .update(publicKey.export({ format: 'der', type: 'spki' }))
-      .digest('hex')
-      .slice(0, 32);
-    const did = `did:au:${didHash}`;
-
-    // 私钥以 PKCS8 DER hex 保存，便于重建 KeyObject
-    const privHex = privateKey.export({ format: 'der', type: 'pkcs8' })
-      .toString('hex');
-
-    const kp = new Keypair(pubHex, privHex, did);
-    kp._pubKeyObj = publicKey;
-    kp._privKeyObj = privateKey;
-    return kp;
-  }
-
-  /** 获取可用于签名的私钥 KeyObject */
-  _privateKeyObject() {
-    if (this._privKeyObj) return this._privKeyObj;
-    this._privKeyObj = crypto.createPrivateKey({
-      key: Buffer.from(this.privateKey, 'hex'),
-      format: 'der',
-      type: 'pkcs8',
-    });
-    return this._privKeyObj;
-  }
-
-  /** 获取公钥 KeyObject */
-  _publicKeyObject() {
-    if (this._pubKeyObj) return this._pubKeyObj;
-    this._pubKeyObj = crypto.createPublicKey({
-      key: Buffer.from(this.publicKey, 'hex'),
-      format: 'der',
-      type: 'spki',
-    });
-    return this._pubKeyObj;
-  }
-
-  /** 对消息签名，返回 hex */
-  sign(message) {
-    const data = Buffer.isBuffer(message) ? message : Buffer.from(message);
-    return crypto.sign(null, data, this._privateKeyObject()).toString('hex');
-  }
-
-  /** 验证签名（默认用本密钥对的公钥） */
-  verify(message, signatureHex) {
-    const data = Buffer.isBuffer(message) ? message : Buffer.from(message);
-    const sig = Buffer.from(signatureHex, 'hex');
-    return crypto.verify(null, data, this._publicKeyObject(), sig);
-  }
-}
-
-module.exports = { Keypair };
+// 根包 /lib 子路径入口（v2.5.7 补）：re-export js/lib，
+// 使根发布包暴露 /lib/keychain.js 子路径（依赖 node:crypto，浏览器端勿直接引）。
+module.exports = require('../js/lib/keychain.js');