@twinsearth/agent-universe 2.5.7 → 2.5.9

package/README.md

@@ -273,7 +273,7 @@ npm config set @twinsearth:registry https://npm.pkg.github.com
 npm install @twinsearth/agent-universe
 ```
 
-已发布版本：1.0.0 / 2.0.0 / 2.2.0 / 2.3.0 / 2.3.1 / 2.3.4 / 2.3.5 / 2.3.6 / 2.4.0 ~ 2.5.7，详见 [Releases](https://github.com/TwinsEarth/agent-universe/releases)。
+已发布版本：1.0.0 / 2.0.0 / 2.2.0 / 2.3.0 / 2.3.1 / 2.3.4 / 2.3.5 / 2.3.6 / 2.4.0 ~ 2.5.9，详见 [Releases](https://github.com/TwinsEarth/agent-universe/releases)。
 
 ## 版本谱系
 
@@ -308,6 +308,8 @@ npm install @twinsearth/agent-universe
 | v2.5.5 | **Relay Pool** | **Relay 节点池管理 + 多通道智能切换（默认 3 条，掉线自动补）** |
 | v2.5.6 | **Regression** | **历史 Bug 回归套件：test/ 14 条 + Rust 网络回归，CI 强制全量回归，修新 bug 先加用例** |
 | v2.5.7 | **Identity** | **跨实现身份一致性：统一 DID 派生口径 + conformance 签名向量逐字节命中上游 + 客户端构建链路根治（file: 依赖）** |
+| v2.5.8 | **Ledger** | **精确整数账本 Money(i64)：守恒精确相等无容差 + 发布即托管 __escrow__ 防铸币 + 三端共享金额向量逐值一致** |
+| v2.5.9 | **Auth QA** | **认证式 BFT（固定委员集 Ed25519 签名票，替代调用方合成）+ 可失败独立审计（只信任流水独立重放）+ nonce/时间窗重放保护 + 只追加结算流水** |
 
 详见 [RELEASES.md](RELEASES.md) 和 [releases/](releases/) 目录。
 

package/js/index.js

@@ -9,7 +9,7 @@ const { AgentMarket, Bid, Reputation, MIN_STAKE } = require('./lib/market');
 const { McpHttpClient, McpError, MCP_PROTOCOL_VERSION } = require('./lib/mcp');
 const aca = require('./lib/aca');
 
-const version = '2.5.7';
+const version = '2.5.9';
 
 /**
  * AgentUniverse 门面：聚合身份、网络、市场能力

package/js/lib/aca.js

@@ -129,7 +129,7 @@ function buildManifest(identity, name, capabilities, opts = {}) {
   const manifest = {
     did: identity.did,
     name,
-    version: opts.version || '2.5.7',
+    version: opts.version || '2.5.9',
     capabilities: [...capabilities],
     endpoints: opts.endpoints || [],
     hardware: {

package/js/lib/market.js

@@ -38,14 +38,33 @@ class AgentMarket {
     this.bids = new Map();        // taskId → Bid[]
     this.balances = new Map();    // 账户 → 余额
     this.totalSlashed = 0;
+    this.totalDeposits = 0;
     this.paidTasks = new Set();   // 已结算任务（防重复支付）
+    this.records = [];            // 只追加结算流水（独立审计的唯一信任源）
+    this._seenNonces = new Set(); // 已用投票 nonce（防重放）
+  }
+
+  /** 追加一条结算流水（与 Rust SettlementRecord 对齐） */
+  _record(from, to, amount, reason) {
+    this.records.push({ from, to, amount, reason });
+  }
+
+  /** 金额必须是安全整数（与 Rust Money(i64) 对齐，杜绝浮点导致的跨语言守恒失效） */
+  _assertMoney(v, label) {
+    if (typeof v !== 'number' || !Number.isInteger(v) || !Number.isSafeInteger(v)) {
+      throw new Error(`${label || '金额'}必须是整数`);
+    }
+    return v;
   }
 
   /** 充值 / 质押金进入账户 */
   deposit(account, amount) {
+    this._assertMoney(amount, '金额');
     if (amount < 0) throw new Error('金额不能为负');
     const cur = this.balances.get(account) || 0;
     this.balances.set(account, cur + amount);
+    this.totalDeposits += amount;
+    this._record('', account, amount, 'Deposited');
   }
 
   balance(account) {
@@ -57,11 +76,17 @@ class AgentMarket {
     return `__stake__:${agentId}`;
   }
 
+  /** 任务预算托管账户（发布即锁定，结算时从此支付 / 退款），与 Rust 命名一致 */
+  _escrowAccount(taskId) {
+    return `__escrow__:${taskId}`;
+  }
+
   /** 注册 Agent（需质押 ≥ MIN_STAKE） */
   registerAgent(card, stake) {
     if (!card || !card.did) throw new Error('agent_id 不能为空');
     if (!card.name) throw new Error('name 不能为空');
     if (this.agents.has(card.did)) throw new Error('Agent 已存在');
+    this._assertMoney(stake, '质押');
     if (stake < MIN_STAKE) {
       throw new Error(`质押不足，最低 ${MIN_STAKE}`);
     }
@@ -73,6 +98,7 @@ class AgentMarket {
     const stakeAcc = this._stakeAccount(owner);
     this.balances.set(owner, this.balance(owner) - stake);
     this.balances.set(stakeAcc, this.balance(stakeAcc) + stake);
+    this._record(owner, stakeAcc, stake, 'Staked');
 
     this.agents.set(card.did, {
       card,
@@ -86,12 +112,16 @@ class AgentMarket {
   /** 发布任务 */
   publishTask(taskId, goal, budget, requester) {
     if (!goal) throw new Error('goal 不能为空');
+    this._assertMoney(budget, '预算');
     if (budget <= 0) throw new Error('预算必须为正');
     if (this.balance(requester) < budget) {
       throw new Error('需求方余额不足以覆盖预算');
     }
-    // 预算锁定
+    // 发布即托管：预算从需求方转入任务托管账户（钱仍在系统内，任意时刻守恒）
     this.balances.set(requester, this.balance(requester) - budget);
+    const escrowAcc = this._escrowAccount(taskId);
+    this.balances.set(escrowAcc, this.balance(escrowAcc) + budget);
+    this._record(requester, escrowAcc, budget, 'Escrowed');
 
     const task = new Task(taskId, goal);
     task.transition(TaskStatus.OPEN);
@@ -105,6 +135,8 @@ class AgentMarket {
   /** 提交投标 */
   submitBid(taskId, agentId, price) {
     if (!this.agents.has(agentId)) throw new Error('Agent 未注册');
+    this._assertMoney(price, '出价');
+    if (price <= 0) throw new Error('出价必须为正');
     const task = this.tasks.get(taskId);
     if (!task || task.status !== TaskStatus.OPEN) {
       throw new Error('任务不在开放状态');
@@ -166,13 +198,18 @@ class AgentMarket {
     const price = task.winnerPrice || task.budget;
     const pay = Math.min(price, task.budget);
 
-    // 从任务锁定预算中支付给执行者（账户间转账，系统总余额不变）
+    // 从托管账户支付给执行者、余款退还需求方（账户间转账，总余额不变）
+    const escrowAcc = this._escrowAccount(taskId);
     const assignee = task.assignee;
+    this.balances.set(escrowAcc, this.balance(escrowAcc) - pay);
     this.balances.set(assignee, this.balance(assignee) + pay);
+    this._record(escrowAcc, assignee, pay, 'Completed');
     // 未用完的预算退还需求方
     const refund = task.budget - pay;
     if (refund > 0) {
+      this.balances.set(escrowAcc, this.balance(escrowAcc) - refund);
       this.balances.set(task.requester, this.balance(task.requester) + refund);
+      this._record(escrowAcc, task.requester, refund, 'Refunded');
     }
 
     task.settle();
@@ -184,12 +221,15 @@ class AgentMarket {
   slash(agentId, amount, reason) {
     const entry = this.agents.get(agentId);
     if (!entry) throw new Error('Agent 不存在');
+    this._assertMoney(amount, '罚没金额');
+    if (amount <= 0) throw new Error('罚没金额必须为正');
     const actual = Math.min(amount, entry.stake);
     entry.stake -= actual;
     // 从锁定账户实际扣除（退出系统）
     const stakeAcc = this._stakeAccount(agentId);
     this.balances.set(stakeAcc, this.balance(stakeAcc) - actual);
     this.totalSlashed += actual;
+    this._record(stakeAcc, '', actual, 'Slashed');
     entry.status = entry.stake < MIN_STAKE ? 'suspended' : entry.status;
     return { slashed: actual, reason, remainingStake: entry.stake };
   }
@@ -229,12 +269,170 @@ class AgentMarket {
     for (const v of this.balances.values()) balanceSum += v;
     const expected = totalDeposits - this.totalSlashed;
     return {
-      conserved: Math.abs(balanceSum - expected) < 1e-9,
+      conserved: balanceSum === expected,
       balanceSum,
       totalSlashed: this.totalSlashed,
       expected,
     };
   }
+
+  /**
+   * 认证式 QA 验证（v2.5.9，与 Rust verify_result_authenticated 对齐）
+   * members: [{did, public_key(hex32)}] 固定委员集
+   * signedVotes: [SignedQaVote]，vote 为 Stop/Continue
+   */
+  verifyResultAuthenticated(
+    taskId,
+    members,
+    signedVotes,
+    round = 0,
+    now = Math.floor(Date.now() / 1000),
+  ) {
+    if (!Array.isArray(members) || members.length === 0) {
+      throw new Error('members 必须为非空固定委员集');
+    }
+    const n = members.length;
+    const f = Math.floor((n - 1) / 3);
+    const pubkeys = new Map();
+    for (const m of members) {
+      const pk = m.public_key || m.publicKey;
+      if (!m.did || !pk) throw new Error('委员需含 did 与 public_key');
+      if (!/^[0-9a-fA-F]{64}$/.test(pk)) throw new Error('委员公钥须为 32 字节 hex');
+      pubkeys.set(m.did, pk.toLowerCase());
+    }
+
+    // 逐票校验；voterVotes 记录每个委员最终立场（equivocated 票作废）
+    const voterVotes = new Map();
+    for (const sv of signedVotes || []) {
+      const pk = pubkeys.get(sv.voter);
+      if (!pk) throw new Error(`投票者 ${sv.voter} 不在固定委员集`);
+      if (sv.task_id !== taskId) throw new Error('投票任务不匹配');
+      if (Number(sv.round) !== round) throw new Error('投票轮次不匹配');
+      const issued = Number(sv.issued_at);
+      const expires = Number(sv.expires_at);
+      if (!(expires > issued) || now < issued || now > expires) {
+        throw new Error(`投票 ${sv.nonce} 不在有效时间窗`);
+      }
+      const voteTag = String(sv.vote).toLowerCase();
+      if (voteTag === 'silent') throw new Error('Silent 票不计入');
+      // 先验签，避免无效票污染 nonce
+      if (!AgentMarket._verifyEd25519(pk, AgentMarket._voteSigningBytes(sv), sv.signature)) {
+        throw new Error(`投票 ${sv.nonce} 签名无效`);
+      }
+      if (!sv.nonce) throw new Error('nonce 不能为空');
+      if (this._seenNonces.has(sv.nonce)) throw new Error(`投票 ${sv.nonce} 重放`);
+      this._seenNonces.add(sv.nonce);
+      const prev = voterVotes.get(sv.voter);
+      if (prev && prev !== voteTag) voterVotes.set(sv.voter, 'equivocated');
+      else if (!prev) voterVotes.set(sv.voter, voteTag);
+    }
+
+    let stops = 0;
+    let continues = 0;
+    for (const v of voterVotes.values()) {
+      if (v === 'stop') stops += 1;
+      else if (v === 'continue') continues += 1;
+    }
+    const quorum = 2 * f + 1;
+    let decision;
+    if (stops >= quorum) decision = 'stop';
+    else if (continues >= quorum) decision = 'continue';
+    else decision = 'no_quorum';
+    const accepted = decision === 'stop';
+    const task = this.tasks.get(taskId);
+    if (task && decision === 'stop') task.verify(true);
+    return { decision, accepted, stops, continues, quorum, n, f };
+  }
+
+  /**
+   * 独立审计（v2.5.9，与 Rust independent_audit 对齐）
+   * 只信任 records，逐笔重放出期望余额，再与当前 balances 逐户比对；
+   * 能发现守恒检查无法察觉的账实不符（如拆账、幽灵账户）。
+   */
+  independentAudit() {
+    const expected = new Map();
+    const add = (acct, delta) => {
+      const cur = expected.get(acct) || 0;
+      const v = cur + delta;
+      if (!Number.isSafeInteger(v)) throw new Error('重放溢出');
+      expected.set(acct, v);
+    };
+    let replayedDeposits = 0;
+    let replayedSlashed = 0;
+    for (const r of this.records) {
+      switch (r.reason) {
+        case 'Deposited':
+          add(r.to, r.amount);
+          replayedDeposits += r.amount;
+          break;
+        case 'Slashed':
+          add(r.from, -r.amount);
+          replayedSlashed += r.amount;
+          break;
+        default:
+          if (r.amount > 0) {
+            add(r.from, -r.amount);
+            add(r.to, r.amount);
+          }
+      }
+    }
+
+    const accounts = new Set([...expected.keys(), ...this.balances.keys()]);
+    const mismatches = [];
+    for (const a of accounts) {
+      const exp = expected.get(a) || 0;
+      const act = this.balances.get(a) || 0;
+      if (exp !== act) mismatches.push({ account: a, expected: exp, actual: act });
+    }
+    let balanceSum = 0;
+    for (const v of this.balances.values()) balanceSum += v;
+    const aggregateMatches =
+      replayedDeposits === this.totalDeposits &&
+      replayedSlashed === this.totalSlashed;
+    const expectedTotal = replayedDeposits - replayedSlashed;
+    return {
+      passed:
+        mismatches.length === 0 &&
+        aggregateMatches &&
+        expectedTotal === balanceSum,
+      replayedRecords: this.records.length,
+      replayedDeposits,
+      replayedSlashed,
+      expectedTotal,
+      actualTotal: balanceSum,
+      aggregateMatches,
+      mismatches,
+    };
+  }
+
+  /** 投票待签名规范字节（与 Rust SignedQaVote::signing_bytes 逐字一致） */
+  static _voteSigningBytes(sv) {
+    const tag = String(sv.vote).toUpperCase();
+    return (
+      `AU-QA-VOTE\ntask_id=${sv.task_id}\nround=${sv.round}\nvoter=${sv.voter}` +
+      `\nvote=${tag}\nnonce=${sv.nonce}\nissued_at=${sv.issued_at}` +
+      `\nexpires_at=${sv.expires_at}`
+    );
+  }
+
+  /** Ed25519 验签；无 crypto 的环境（WKWebView）抛明确错误而非静默通过 */
+  static _verifyEd25519(pubkeyHex, message, signatureHex) {
+    let crypto;
+    try {
+      crypto = require('crypto');
+    } catch (e) {
+      throw new Error('当前环境无 Ed25519 验签能力；签名验证须在 Node/Rust 侧进行');
+    }
+    const SPKI = '302a300506032b6570032100';
+    const der = Buffer.from(SPKI + pubkeyHex, 'hex');
+    const key = crypto.createPublicKey({ key: der, format: 'der', type: 'spki' });
+    return crypto.verify(
+      null,
+      Buffer.from(message, 'utf8'),
+      key,
+      Buffer.from(signatureHex, 'hex'),
+    );
+  }
 }
 
 module.exports = { AgentMarket, Bid, Reputation, MIN_STAKE };

package/js/lib/mcp.js

@@ -60,7 +60,7 @@ class McpHttpClient {
       method: 'initialize',
       params: {
         protocolVersion: MCP_PROTOCOL_VERSION,
-        clientInfo: { name: 'agent-universe-js', version: '2.5.7' },
+        clientInfo: { name: 'agent-universe-js', version: '2.5.9' },
         capabilities: {},
       },
     });

package/js/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@twinsearth/agent-universe",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@twinsearth/agent-universe",
-      "version": "2.5.7",
+      "version": "2.5.9",
       "license": "MIT",
       "engines": {
         "node": ">=18"

package/js/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/agent-universe",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "description": "Agent Universe - 群众化的 AGI 路线，去中心化的智能体共享 & 开源网络。使命：让科技造福全人类！",
   "main": "index.js",
   "types": "index.d.ts",

package/js/test/test.js

@@ -1,7 +1,9 @@
 // test/test.js
-// Agent Universe JS SDK 测试（12 项）
+// Agent Universe JS SDK 测试（14 项）
 
 const assert = require('node:assert');
+const fs = require('node:fs');
+const path = require('node:path');
 const {
   version,
   AgentUniverse,
@@ -41,8 +43,8 @@ function test(name, fn) {
 console.log('Agent Universe JS SDK 测试\n');
 
 // 1. 版本号
-test('版本号为 2.5.7', () => {
-  assert.strictEqual(version, '2.5.7');
+test('版本号为 2.5.9', () => {
+  assert.strictEqual(version, '2.5.9');
 });
 
 // 2. 密钥对 + DID + 签名验证
@@ -154,6 +156,140 @@ test('罚没后守恒：总余额 = 总充值 − 罚没', () => {
   assert.strictEqual(check.balanceSum, 140);
 });
 
+// 8b. 整数账本：拒绝浮点金额与 0/负出价（与 Rust Money(i64) 对齐）
+test('整数账本：拒绝浮点金额与非正出价', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:int';
+  assert.throws(() => market.deposit(owner, 10.5), /整数/);
+  market.deposit(owner, 200);
+  const card = AgentCard.new({ did: owner, name: 'int' });
+  market.registerAgent(card, MIN_STAKE);
+  market.publishTask('t-int', 'goal', 50, owner);
+  assert.throws(() => market.submitBid('t-int', owner, 0), /正/);
+  assert.throws(() => market.submitBid('t-int', owner, -5), /正/);
+  assert.throws(() => market.submitBid('t-int', owner, 5.5), /整数/);
+});
+
+// 8c. 跨语言金额向量：逐账户余额命中 conformance/money-vectors.json（与 Rust 一致）
+test('跨语言金额向量：逐账户余额命中 conformance 向量', () => {
+  const vector = JSON.parse(
+    fs.readFileSync(path.join(__dirname, '../../conformance/money-vectors.json'), 'utf8')
+  );
+  const market = new AgentMarket();
+  market.deposit('agent-1', 100);
+  const card = AgentCard.new({ did: 'agent-1', name: 'worker' }).withSkill('writing');
+  market.registerAgent(card, MIN_STAKE);
+  market.deposit('requester-1', 50);
+  market.publishTask('task-1', 'translate', 50, 'requester-1');
+  market.submitBid('task-1', 'agent-1', 10);
+  assert.strictEqual(market.matchTask('task-1').agentId, 'agent-1');
+  market.completeTask('task-1', true);
+  const paid = market.settle('task-1');
+  assert.strictEqual(paid.paid, vector.expected_report.total_paid);
+  for (const [key, want] of Object.entries(vector.expected_balances)) {
+    assert.strictEqual(market.balance(key), want, `账户 ${key} 跨语言不一致`);
+  }
+  const report = market.conservationCheck(vector.expected_report.total_deposits);
+  assert.strictEqual(report.totalSlashed, vector.expected_report.total_slashed);
+  assert.strictEqual(report.balanceSum, vector.expected_report.balance_sum);
+  assert.strictEqual(report.conserved, vector.expected_report.conserved);
+});
+
+// 8d. 认证式 QA：固定委员集 + 签名票（v2.5.9，与 Rust 认证式 BFT 对齐）
+test('认证式 QA：固定委员签名票通过、伪造与重放拒绝', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:qa-owner';
+  const requester = 'did:au:qa-req';
+  market.deposit(owner, 100);
+  market.deposit(requester, 50);
+  const card = AgentCard.new({ did: owner, name: 'worker' }).withSkill('writing');
+  market.registerAgent(card, MIN_STAKE);
+  market.publishTask('task-qa', 'goal', 50, requester);
+  market.submitBid('task-qa', owner, 40);
+  market.matchTask('task-qa');
+  // 执行完成，停在 COMPLETED 等待认证式验收（不走本地 verify）
+  const t = market.tasks.get('task-qa');
+  t.start();
+  t.complete();
+
+  // 固定 4 委员（n=4, f=1, quorum=3）
+  const now = Math.floor(Date.now() / 1000);
+  const kps = [];
+  const members = [];
+  for (let i = 0; i < 4; i++) {
+    const kp = Keypair.generate();
+    kps.push(kp);
+    members.push({ did: kp.did, public_key: kp.rawPublicKey().toString('hex') });
+  }
+  const makeVote = (kp, vote, nonce, round = 0) => {
+    const sv = {
+      task_id: 'task-qa', round, voter: kp.did, vote, nonce,
+      issued_at: now - 60, expires_at: now + 3600, signature: '',
+    };
+    sv.signature = kp.sign(AgentMarket._voteSigningBytes(sv));
+    return sv;
+  };
+  // 前 3 委员签 Stop
+  const votes = [
+    makeVote(kps[0], 'Stop', 'n1'),
+    makeVote(kps[1], 'Stop', 'n2'),
+    makeVote(kps[2], 'Stop', 'n3'),
+  ];
+  const r = market.verifyResultAuthenticated('task-qa', members, votes, 0, now);
+  assert.strictEqual(r.decision, 'stop');
+  assert.strictEqual(r.accepted, true);
+
+  // 伪造签名：委员3 签的票冒充委员0（round 1）→ 验签失败
+  const forged = makeVote(kps[3], 'Stop', 'nX', 1);
+  forged.voter = kps[0].did;
+  assert.throws(
+    () => market.verifyResultAuthenticated('task-qa', members, [forged], 1, now),
+    /签名无效/,
+  );
+
+  // 重放：委员3 在 round1 复用已用 nonce n1 → 拒绝
+  const replay = makeVote(kps[3], 'Stop', 'n1', 1);
+  assert.throws(
+    () => market.verifyResultAuthenticated('task-qa', members, [replay], 1, now),
+    /重放/,
+  );
+});
+
+// 8e. 独立审计：完整生命周期通过、守恒无法发现的拆账篡改被捕获（v2.5.9）
+test('独立审计：完整生命周期通过并捕获账实篡改', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:au-owner';
+  const requester = 'did:au:au-req';
+  market.deposit(owner, 100);
+  market.deposit(requester, 50);
+  const card = AgentCard.new({ did: owner, name: 'w' }).withSkill('writing');
+  market.registerAgent(card, MIN_STAKE);
+  market.publishTask('task-au', 'goal', 50, requester);
+  market.submitBid('task-au', owner, 40);
+  market.matchTask('task-au');
+  market.completeTask('task-au', true);
+  market.settle('task-au');
+
+  const good = market.independentAudit();
+  assert.ok(good.passed, `审计应通过: ${JSON.stringify(good.mismatches)}`);
+
+  // 拆账篡改：质押账户 100 → 50，另开幽灵账户 50（总额不变）
+  const stakeAcc = `__stake__:${owner}`;
+  const before = market.balance(stakeAcc);
+  market.balances.set(stakeAcc, before - 50);
+  market.balances.set('__ghost__:split', 50);
+  // 守恒检查被蒙蔽（余额总和不变）
+  const cons = market.conservationCheck(150);
+  assert.ok(cons.conserved, '拆账不改总额，守恒被蒙蔽');
+  // 独立审计捕获
+  const bad = market.independentAudit();
+  assert.ok(!bad.passed, '独立审计应发现账实不符');
+  assert.ok(
+    bad.mismatches.some((m) => m.account === '__ghost__:split'),
+    '应列出幽灵拆账账户',
+  );
+});
+
 // 9. AipIdentity DID 与签名往返
 test('AipIdentity 生成 did:aip 且签名可验证', () => {
   const id = AipIdentity.generate();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/agent-universe",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "description": "Agent Universe - 群众化的 AGI 路线，去中心化的智能体共享 & 开源网络。使命：让科技造福全人类！",
   "main": "index.js",
   "types": "index.d.ts",