wowok 2.1.10 → 2.1.13

package/dist/esm/w/messenger/messenger-api.js

@@ -1,669 +1,819 @@
+// Copyright (c) Wowok.
+// SPDX-License-Identifier: Apache-2.0
 import { MessengerManager } from "./messenger-manager.js";
 import { Account } from "../local/account.js";
 import { W_ERROR, WErrors } from "../exception.js";
 import { isValidWowAddress } from "../../utils/sui-types.js";
 import { LocalMark } from "../local/local.js";
 import { MessageStorage } from "./storage.js";
-import {
-  MessengerError,
-  MessengerErrorCode,
-  CHAIN_PROOF_TYPE
-} from "./types.js";
+import { MessengerError, MessengerErrorCode, CHAIN_PROOF_TYPE, } from "./types.js";
 import { createHash } from "crypto";
 import * as fs from "fs";
 import * as path from "path";
 import { isValidU64 } from "../common.js";
-import {
-  verifySingleMerkleRoot,
-  hashPlaintext,
-  verifyEd25519Signature
-} from "./crypto.js";
+import { verifySingleMerkleRoot, hashPlaintext, verifyEd25519Signature, } from "./crypto.js";
 import { canonicalizeJson } from "./utils.js";
-import {
-  GetAccountOrMark_Address,
-  GetManyAccountOrMark_Address
-} from "../local/index.js";
+import { GetAccountOrMark_Address, GetManyAccountOrMark_Address, } from "../local/index.js";
 import { query_objects } from "../query/object.js";
 import { Messenger } from "./messenger.js";
 let managerInstance = null;
 let isInitialized = false;
 let backgroundTimer = null;
+/**
+ * 自动检查并注册所有设置了 messenger name 的账号
+ * 如果账号已注册（identity 已存在），则跳过
+ */
 async function autoRegisterMessengerAccounts() {
-  const accounts = await Account.Instance().list_messenger_accounts();
-  for (const account of accounts) {
-    if (!account.address || !account.m) {
-      continue;
+    const accounts = await Account.Instance().list_messenger_accounts();
+    for (const account of accounts) {
+        if (!account.address || !account.m) {
+            continue;
+        }
+        const messenger = new Messenger(account.address);
+        await messenger.initialize();
     }
-    const messenger = new Messenger(account.address);
-    await messenger.initialize();
-  }
 }
-function getMessengerManager() {
-  if (!managerInstance) {
-    managerInstance = new MessengerManager();
-  }
-  if (!isInitialized) {
-    isInitialized = true;
-    autoRegisterMessengerAccounts().catch((err) => {
-      console.error("Failed to auto-register messenger accounts:", err);
-    });
-    managerInstance.start().catch((err) => {
-      console.error("Failed to auto-start messenger manager:", err);
-    });
-  }
-  return managerInstance;
+/**
+ * 获取 MessengerManager 实例（单例）
+ * 首次调用时会自动启动后台服务
+ */
+export function getMessengerManager() {
+    if (!managerInstance) {
+        managerInstance = new MessengerManager();
+    }
+    if (!isInitialized) {
+        isInitialized = true;
+        // 启动时先自动检查并注册账号
+        autoRegisterMessengerAccounts().catch((err) => {
+            console.error("Failed to auto-register messenger accounts:", err);
+        });
+        managerInstance.start().catch((err) => {
+            console.error("Failed to auto-start messenger manager:", err);
+        });
+    }
+    return managerInstance;
 }
+/**
+ * 后台检查任务：1 分钟执行一次
+ * 1. 检查 SSE 连接状态，未连接则尝试连接
+ * 2. SSE 失败时回退到轮询
+ * 3. 检查并注册所有设置了 messenger name 的账号
+ */
 async function backgroundCheck() {
-  try {
-    const manager = getMessengerManager();
-    await manager.start();
-  } catch (err) {
-    console.error("Background check failed:", err);
-  }
-  await autoRegisterMessengerAccounts();
+    try {
+        const manager = getMessengerManager();
+        await manager.start();
+    }
+    catch (err) {
+        console.error("Background check failed:", err);
+    }
+    // 每次后台检查时也检查并注册账号
+    await autoRegisterMessengerAccounts();
 }
+/**
+ * 启动后台定时器（1 分钟执行一次）
+ */
 function startBackgroundTimer() {
-  if (backgroundTimer) {
-    clearInterval(backgroundTimer);
-  }
-  backgroundTimer = setInterval(() => {
-    backgroundCheck().catch(() => {
-    });
-  }, 60 * 1e3);
-  backgroundCheck().catch(() => {
-  });
-}
-function registerCleanupHandler() {
-  const cleanup = () => {
     if (backgroundTimer) {
-      clearInterval(backgroundTimer);
-      backgroundTimer = null;
+        clearInterval(backgroundTimer);
     }
-    if (managerInstance) {
-      managerInstance.stop();
-    }
-  };
-  process.on("exit", cleanup);
-  process.on("SIGINT", () => {
-    cleanup();
-    process.exit();
-  });
-  process.on("SIGTERM", () => {
-    cleanup();
-    process.exit();
-  });
+    backgroundTimer = setInterval(() => {
+        backgroundCheck().catch(() => { });
+    }, 60 * 1000);
+    backgroundCheck().catch(() => { });
+}
+/**
+ * 进程退出时自动清理
+ */
+function registerCleanupHandler() {
+    const cleanup = () => {
+        if (backgroundTimer) {
+            clearInterval(backgroundTimer);
+            backgroundTimer = null;
+        }
+        if (managerInstance) {
+            managerInstance.stop();
+        }
+    };
+    process.on("exit", cleanup);
+    process.on("SIGINT", () => {
+        cleanup();
+        process.exit();
+    });
+    process.on("SIGTERM", () => {
+        cleanup();
+        process.exit();
+    });
 }
 registerCleanupHandler();
 startBackgroundTimer();
-async function watch_conversations(account) {
-  const address = await Account.Instance().get_address(account);
-  if (!address) {
-    W_ERROR(
-      WErrors.AccountNotFound,
-      `watch_conversations.account ${account}`
-    );
-  }
-  const manager = getMessengerManager();
-  return manager.get_conversations(address);
+export async function watch_conversations(account) {
+    const address = await Account.Instance().get_address(account);
+    if (!address) {
+        W_ERROR(WErrors.AccountNotFound, `watch_conversations.account ${account}`);
+    }
+    const manager = getMessengerManager();
+    return manager.get_conversations(address);
 }
-async function send_message(from, to, content, options) {
-  const fromAddress = await Account.Instance().get_address(from);
-  if (!fromAddress) {
-    W_ERROR(WErrors.AccountNotFound, `send_message.from ${from}`);
-  }
-  const t = await GetAccountOrMark_Address(to);
-  if (!t) {
-    W_ERROR(
-      WErrors.AccountNotFound,
-      `send_message.to ${to} is not a valid account/address`
-    );
-  }
-  if (options?.guardAddress != null && options?.passportAddress != null) {
-    [options.guardAddress, options.passportAddress] = await LocalMark.Instance().get_many_address([
-      options.guardAddress,
-      options.passportAddress
-    ]);
-    if (!options.guardAddress || !options.passportAddress) {
-      W_ERROR(
-        WErrors.AccountNotFound,
-        `send_message.guardAddress or passportAddress not found`
-      );
+/**
+ * 发送消息
+ *
+ * @param from 发送者地址
+ * @param to 接收者地址
+ * @param content 消息内容
+ * @param options 可选配置
+ * @returns SendMessageResult
+ */
+export async function send_message(from, to, content, options) {
+    const fromAddress = await Account.Instance().get_address(from);
+    if (!fromAddress) {
+        W_ERROR(WErrors.AccountNotFound, `send_message.from ${from}`);
+    }
+    const t = await GetAccountOrMark_Address(to);
+    if (!t) {
+        W_ERROR(WErrors.AccountNotFound, `send_message.to ${to} is not a valid account/address`);
     }
-  }
-  const manager = getMessengerManager();
-  return manager.send(fromAddress, t, content, options);
+    if (options?.guardAddress != null && options?.passportAddress != null) {
+        [options.guardAddress, options.passportAddress] =
+            await LocalMark.Instance().get_many_address([
+                options.guardAddress,
+                options.passportAddress,
+            ]);
+        if (!options.guardAddress || !options.passportAddress) {
+            W_ERROR(WErrors.AccountNotFound, `send_message.guardAddress or passportAddress not found`);
+        }
+    }
+    const manager = getMessengerManager();
+    return manager.send(fromAddress, t, content, options);
 }
-async function send_file(from, to, filePath, options) {
-  const fromAddress = await Account.Instance().get_address(from);
-  if (!fromAddress) {
-    W_ERROR(WErrors.AccountNotFound, `send_file.from ${from}`);
-  }
-  const t = await GetAccountOrMark_Address(to);
-  if (!t) {
-    W_ERROR(
-      WErrors.AccountNotFound,
-      `send_file.to ${to} is not a valid account/address`
-    );
-  }
-  if (options?.guardAddress != null && options?.passportAddress != null) {
-    [options.guardAddress, options.passportAddress] = await LocalMark.Instance().get_many_address([
-      options.guardAddress,
-      options.passportAddress
-    ]);
-    if (!options.guardAddress || !options.passportAddress) {
-      W_ERROR(
-        WErrors.AccountNotFound,
-        `send_file.guardAddress or passportAddress not found`
-      );
+/**
+ * 发送文件（ZIP 格式）
+ *
+ * 支持发送本地文件，经过 ZIP 压缩后发送给对方
+ * 支持 Guard 验证，如果提供 guardAddress 和 passportAddress，消息将进入 Guard 验证流程
+ *
+ * @param from 发送者账号或地址
+ * @param to 接收者地址
+ * @param filePath 本地文件路径
+ * @param options 可选配置
+ * @returns SendMessageResult
+ */
+export async function send_file(from, to, filePath, options) {
+    const fromAddress = await Account.Instance().get_address(from);
+    if (!fromAddress) {
+        W_ERROR(WErrors.AccountNotFound, `send_file.from ${from}`);
+    }
+    const t = await GetAccountOrMark_Address(to);
+    if (!t) {
+        W_ERROR(WErrors.AccountNotFound, `send_file.to ${to} is not a valid account/address`);
+    }
+    if (options?.guardAddress != null && options?.passportAddress != null) {
+        [options.guardAddress, options.passportAddress] =
+            await LocalMark.Instance().get_many_address([
+                options.guardAddress,
+                options.passportAddress,
+            ]);
+        if (!options.guardAddress || !options.passportAddress) {
+            W_ERROR(WErrors.AccountNotFound, `send_file.guardAddress or passportAddress not found`);
+        }
     }
-  }
-  const manager = getMessengerManager();
-  return manager.send_file(fromAddress, t, filePath, options);
+    const manager = getMessengerManager();
+    return manager.send_file(fromAddress, t, filePath, options);
 }
-async function watch_messages(filter) {
-  if (filter?.account) {
-    filter.account = await Account.Instance().get_address(filter.account);
-  }
-  if (filter?.customListFilter?.includeAddresses != null) {
-    filter.customListFilter.includeAddresses = (await Account.Instance().get_many_address(
-      filter.customListFilter.includeAddresses
-    )).filter((v) => v != null);
-  }
-  if (filter?.customListFilter?.excludeAddresses != null) {
-    filter.customListFilter.excludeAddresses = (await Account.Instance().get_many_address(
-      filter.customListFilter.excludeAddresses
-    )).filter((v) => v != null);
-  }
-  const manager = getMessengerManager();
-  return manager.watch(filter);
+/**
+ * 查询消息
+ *
+ * @param filter 过滤条件
+ * @returns Message 数组
+ */
+export async function watch_messages(filter) {
+    if (filter?.account) {
+        filter.account = await Account.Instance().get_address(filter.account);
+    }
+    if (filter?.customListFilter?.includeAddresses != null) {
+        filter.customListFilter.includeAddresses = (await Account.Instance().get_many_address(filter.customListFilter.includeAddresses)).filter((v) => v != null);
+    }
+    if (filter?.customListFilter?.excludeAddresses != null) {
+        filter.customListFilter.excludeAddresses = (await Account.Instance().get_many_address(filter.customListFilter.excludeAddresses)).filter((v) => v != null);
+    }
+    const manager = getMessengerManager();
+    return manager.watch(filter);
 }
+/**
+ * 解压 ZIP 消息到指定目录
+ *
+ * @param message 包含 ZIP 数据的消息对象
+ * @param outputDir 输出目录路径
+ * @returns 解压后的文件路径
+ */
 async function extract_zip_message(message, outputDir) {
-  if (!message.zipMetadata) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_MESSAGE_TYPE,
-      "Message is not a ZIP archive"
-    );
-  }
-  if (!message.plaintext) {
-    throw new MessengerError(
-      MessengerErrorCode.MESSAGE_NOT_DECRYPTED,
-      "Message plaintext not available"
-    );
-  }
-  const zipBase64 = message.plaintext;
-  const zipData = Buffer.from(zipBase64, "base64");
-  if (message.zipMetadata?.fileHash) {
-    const actualHash = createHash("sha256").update(zipData).digest("hex");
-    const expectedHash = message.zipMetadata.fileHash.replace("0x", "");
-    if (actualHash !== expectedHash) {
-      throw new MessengerError(
-        MessengerErrorCode.HASH_MISMATCH,
-        `ZIP file hash mismatch: expected ${expectedHash}, got ${actualHash}`
-      );
+    if (!message.zipMetadata) {
+        throw new MessengerError(MessengerErrorCode.INVALID_MESSAGE_TYPE, "Message is not a ZIP archive");
     }
-  }
-  const JSZip = (await import("jszip")).default;
-  const zip = await JSZip.loadAsync(zipData);
-  if (!fs.existsSync(outputDir)) {
-    fs.mkdirSync(outputDir, { recursive: true });
-  }
-  const savedPaths = [];
-  for (const [fileName, file] of Object.entries(zip.files)) {
-    const zipFile = file;
-    if (!zipFile.dir) {
-      const content = await zipFile.async("nodebuffer");
-      const outputPath = path.join(outputDir, fileName);
-      fs.writeFileSync(outputPath, content);
-      savedPaths.push(outputPath);
+    if (!message.plaintext) {
+        throw new MessengerError(MessengerErrorCode.MESSAGE_NOT_DECRYPTED, "Message plaintext not available");
     }
-  }
-  if (savedPaths.length > 0 && message.zipMetadata) {
-    const updatedMetadata = {
-      fileName: message.zipMetadata.fileName,
-      fileSize: message.zipMetadata.fileSize,
-      fileHash: message.zipMetadata.fileHash,
-      contentType: message.zipMetadata.contentType,
-      localCachePath: savedPaths[0],
-      downloadedAt: Date.now()
-    };
-    message.zipMetadata = updatedMetadata;
-    const userAddress = message.direction === "sent" ? message.fromAddress : message.toAddress;
-    const messageStorage = new MessageStorage(userAddress);
-    messageStorage.saveMessage(message);
-  }
-  return savedPaths[0] || "";
-}
-async function extract_zip_messages(account, messages, outputDir) {
-  const results = [];
-  const userAddress = await Account.Instance().get_address(account);
-  if (!userAddress) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_INPUT,
-      "account is required when extracting by message IDs"
-    );
-  }
-  const isMessageIds = messages.length > 0 && typeof messages[0] === "string";
-  for (const item of messages) {
-    try {
-      let message;
-      if (isMessageIds) {
-        const messageId = item;
+    // 1. 解码 base64 ZIP 数据
+    const zipBase64 = message.plaintext;
+    const zipData = Buffer.from(zipBase64, "base64");
+    // 2. 验证文件哈希
+    if (message.zipMetadata?.fileHash) {
+        const actualHash = createHash("sha256").update(zipData).digest("hex");
+        const expectedHash = message.zipMetadata.fileHash.replace("0x", "");
+        if (actualHash !== expectedHash) {
+            throw new MessengerError(MessengerErrorCode.HASH_MISMATCH, `ZIP file hash mismatch: expected ${expectedHash}, got ${actualHash}`);
+        }
+    }
+    // 3. 解压 ZIP 文件
+    const JSZip = (await import("jszip")).default;
+    const zip = await JSZip.loadAsync(zipData);
+    // 4. 确保输出目录存在
+    if (!fs.existsSync(outputDir)) {
+        fs.mkdirSync(outputDir, { recursive: true });
+    }
+    // 5. 保存文件
+    const savedPaths = [];
+    for (const [fileName, file] of Object.entries(zip.files)) {
+        const zipFile = file;
+        if (!zipFile.dir) {
+            const content = await zipFile.async("nodebuffer");
+            const outputPath = path.join(outputDir, fileName);
+            fs.writeFileSync(outputPath, content);
+            savedPaths.push(outputPath);
+        }
+    }
+    // 6. 更新消息元数据
+    if (savedPaths.length > 0 && message.zipMetadata) {
+        const updatedMetadata = {
+            fileName: message.zipMetadata.fileName,
+            fileSize: message.zipMetadata.fileSize,
+            fileHash: message.zipMetadata.fileHash,
+            contentType: message.zipMetadata.contentType,
+            localCachePath: savedPaths[0],
+            downloadedAt: Date.now(),
+        };
+        message.zipMetadata = updatedMetadata;
+        // 根据消息方向确定用户地址
+        const userAddress = message.direction === "sent"
+            ? message.fromAddress
+            : message.toAddress;
         const messageStorage = new MessageStorage(userAddress);
-        const storedMessage = messageStorage.getMessageById(messageId);
-        if (!storedMessage) {
-          console.error(`Message not found: ${messageId}`);
-          continue;
+        messageStorage.saveMessage(message);
+    }
+    return savedPaths[0] || "";
+}
+/**
+ * 批量解压多个 ZIP 消息到指定目录
+ *
+ * @param messages 包含 ZIP 数据的消息数组，或消息 ID 数组
+ * @param outputDir 输出目录路径
+ * @param userAddress 用户地址（当传入消息ID数组时需要）
+ * @returns 解压后的文件路径数组
+ */
+export async function extract_zip_messages(account, messages, outputDir) {
+    const results = [];
+    const userAddress = await Account.Instance().get_address(account);
+    if (!userAddress) {
+        throw new MessengerError(MessengerErrorCode.INVALID_INPUT, "account is required when extracting by message IDs");
+    }
+    // 判断是 Message 数组还是 messageId 数组
+    const isMessageIds = messages.length > 0 && typeof messages[0] === "string";
+    for (const item of messages) {
+        try {
+            let message;
+            if (isMessageIds) {
+                const messageId = item;
+                const messageStorage = new MessageStorage(userAddress);
+                const storedMessage = messageStorage.getMessageById(messageId);
+                if (!storedMessage) {
+                    console.error(`Message not found: ${messageId}`);
+                    continue;
+                }
+                message = storedMessage;
+            }
+            else {
+                message = item;
+            }
+            // 检查是否为 ZIP 消息
+            if (!message.zipMetadata) {
+                console.error(`Message ${message.messageId} is not a ZIP archive`);
+                continue;
+            }
+            const filePath = await extract_zip_message(message, outputDir);
+            results.push(filePath);
+        }
+        catch (e) {
+            const id = isMessageIds
+                ? item
+                : item.messageId;
+            console.error(`Failed to extract message ${id}:`, e);
         }
-        message = storedMessage;
-      } else {
-        message = item;
-      }
-      if (!message.zipMetadata) {
-        console.error(
-          `Message ${message.messageId} is not a ZIP archive`
-        );
-        continue;
-      }
-      const filePath = await extract_zip_message(message, outputDir);
-      results.push(filePath);
-    } catch (e) {
-      const id = isMessageIds ? item : item.messageId;
-      console.error(`Failed to extract message ${id}:`, e);
     }
-  }
-  return results;
+    return results;
 }
-async function generate_wts(params) {
-  const myAddress = await Account.Instance().get_address(params.myAccount);
-  if (!myAddress) {
-    W_ERROR(
-      WErrors.AccountNotFound,
-      `generate_wts.myAccount ${params.myAccount}`
-    );
-  }
-  if (!isValidWowAddress(params.peerAccount)) {
-    const t = await Account.Instance().get_address(params.peerAccount);
-    if (!t) {
-      W_ERROR(
-        WErrors.AccountNotFound,
-        `generate_wts.peerAccount ${params.peerAccount}`
-      );
+export async function generate_wts(params) {
+    const myAddress = await Account.Instance().get_address(params.myAccount);
+    if (!myAddress) {
+        W_ERROR(WErrors.AccountNotFound, `generate_wts.myAccount ${params.myAccount}`);
     }
-    params.peerAccount = t;
-  }
-  return getMessengerManager().generate_wts(params);
+    if (!isValidWowAddress(params.peerAccount)) {
+        const t = await Account.Instance().get_address(params.peerAccount);
+        if (!t) {
+            W_ERROR(WErrors.AccountNotFound, `generate_wts.peerAccount ${params.peerAccount}`);
+        }
+        params.peerAccount = t;
+    }
+    return getMessengerManager().generate_wts(params);
 }
+/**
+ * 加载 WTS 文件
+ *
+ * @param filePath WTS 文件路径
+ * @returns WtsFile 对象
+ */
 function load_wts(filePath) {
-  const content = fs.readFileSync(filePath, "utf-8");
-  return JSON.parse(content);
+    const content = fs.readFileSync(filePath, "utf-8");
+    return JSON.parse(content);
 }
+/**
+ * 保存 WTS 文件
+ *
+ * @param wtsFile WTS 文件对象
+ * @param filePath 保存路径
+ */
 function save_wts(wtsFile, filePath) {
-  const dir = path.dirname(filePath);
-  if (!fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
-  }
-  fs.writeFileSync(filePath, JSON.stringify(wtsFile, null, 2), "utf-8");
-}
-async function verify_wts(wtsFilePath) {
-  try {
-    const wtsFile = load_wts(wtsFilePath);
-    if (!wtsFile.wts || !wtsFile.payload || !wtsFile.meta) {
-      return { valid: false, error: "Invalid WTS file structure" };
-    }
-    if (wtsFile.meta.type !== "wts") {
-      return {
-        valid: false,
-        error: `Invalid meta.type: ${wtsFile.meta.type}`
-      };
-    }
-    const { payload, meta } = wtsFile;
-    for (const msg of payload.messages) {
-      const result = verifySingleMerkleRoot(
-        msg.prevRoot,
-        msg.merkleRoot,
-        msg.plaintextHash,
-        msg.timestamp,
-        msg.leafIndex
-      );
-      if (!result.valid) {
-        return {
-          valid: false,
-          error: `${result.error} at leafIndex ${msg.leafIndex}`
-        };
-      }
+    const dir = path.dirname(filePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
     }
-    for (let i = 0; i < payload.messages.length; i++) {
-      const msg = payload.messages[i];
-      const isNonTextMsg = !!msg.zipMetadata;
-      if (!isNonTextMsg) {
-        if (!msg.plaintextHash.startsWith("0x") || msg.plaintextHash.length !== 66) {
-          return {
-            valid: false,
-            error: `Message ${i}: Invalid plaintextHash format`
-          };
+    fs.writeFileSync(filePath, JSON.stringify(wtsFile, null, 2), "utf-8");
+}
+/**
+ * 验证 WTS 文件
+ *
+ * 验证内容包括：
+ * 1. 文件结构完整性
+ * 2. Merkle 链连续性
+ * 3. 消息哈希格式
+ * 4. Payload 哈希匹配
+ * 5. 数字签名（如果存在）
+ *
+ * @param wtsFilePath WTS 文件路径（本地或网络文件）
+ * @returns 验证结果
+ */
+export async function verify_wts(wtsFilePath) {
+    try {
+        // 1. 加载 WTS 文件
+        const wtsFile = load_wts(wtsFilePath);
+        // 2. 验证基本结构
+        if (!wtsFile.wts || !wtsFile.payload || !wtsFile.meta) {
+            return { valid: false, error: "Invalid WTS file structure" };
         }
-        if (msg.plaintext) {
-          const computedHash2 = hashPlaintext(
-            msg.plaintext,
-            msg.clientTimestamp,
-            msg.guardAddress,
-            msg.passportAddress,
-            msg.lastReceivedLeafIndex
-          );
-          if (computedHash2.toLowerCase() !== msg.plaintextHash.toLowerCase()) {
+        if (wtsFile.meta.type !== "wts") {
             return {
-              valid: false,
-              error: `Message ${i}: Plaintext hash mismatch`
+                valid: false,
+                error: `Invalid meta.type: ${wtsFile.meta.type}`,
             };
-          }
         }
-      }
-      if (msg.serverSignature && msg.serverPublicKey) {
-        if (!msg.timestamp) {
-          return {
-            valid: false,
-            error: `Message ${i}: Missing timestamp for signature verification`
-          };
-        }
-        if (!msg.merkleRoot) {
-          return {
-            valid: false,
-            error: `Message ${i}: Missing merkleRoot for signature verification`
-          };
+        const { payload, meta } = wtsFile;
+        // 2. 验证每个消息的 Merkle Root 计算（不验证跨消息链连续性）
+        // 因为消息可能来自不同的 Merkle Tree（不同会话方向）
+        for (const msg of payload.messages) {
+            const result = verifySingleMerkleRoot(msg.prevRoot, msg.merkleRoot, msg.plaintextHash, msg.timestamp, msg.leafIndex);
+            if (!result.valid) {
+                return {
+                    valid: false,
+                    error: `${result.error} at leafIndex ${msg.leafIndex}`,
+                };
+            }
         }
-        if (!msg.prevRoot) {
-          return {
-            valid: false,
-            error: `Message ${i}: Missing prevRoot for signature verification`
-          };
+        // 3. 验证每个消息的 plaintextHash 和服务器签名（如果提供了明文）
+        for (let i = 0; i < payload.messages.length; i++) {
+            const msg = payload.messages[i];
+            // 判断是否为非文本消息（ZIP/WTS/WIP）
+            const isNonTextMsg = !!msg.zipMetadata;
+            // 对于非文本消息，跳过 plaintextHash 格式验证（它们使用不同的哈希格式）
+            if (!isNonTextMsg) {
+                // 验证普通消息的 plaintextHash 格式
+                if (!msg.plaintextHash.startsWith("0x") ||
+                    msg.plaintextHash.length !== 66) {
+                    return {
+                        valid: false,
+                        error: `Message ${i}: Invalid plaintextHash format`,
+                    };
+                }
+                // 如果提供了明文，验证 plaintextHash
+                if (msg.plaintext) {
+                    const computedHash = hashPlaintext(msg.plaintext, msg.clientTimestamp, msg.guardAddress, msg.passportAddress, msg.lastReceivedLeafIndex);
+                    if (computedHash.toLowerCase() !==
+                        msg.plaintextHash.toLowerCase()) {
+                        return {
+                            valid: false,
+                            error: `Message ${i}: Plaintext hash mismatch`,
+                        };
+                    }
+                }
+            }
+            // 验证服务器签名（如果提供了签名和公钥）
+            if (msg.serverSignature && msg.serverPublicKey) {
+                // 检查必需的字段
+                if (!msg.timestamp) {
+                    return {
+                        valid: false,
+                        error: `Message ${i}: Missing timestamp for signature verification`,
+                    };
+                }
+                if (!msg.merkleRoot) {
+                    return {
+                        valid: false,
+                        error: `Message ${i}: Missing merkleRoot for signature verification`,
+                    };
+                }
+                if (!msg.prevRoot) {
+                    return {
+                        valid: false,
+                        error: `Message ${i}: Missing prevRoot for signature verification`,
+                    };
+                }
+                const signData = `${msg.prevRoot}:${msg.merkleRoot}:${msg.timestamp}:${msg.serverPublicKey}`;
+                const signatureValid = verifyEd25519Signature(msg.serverPublicKey, signData, msg.serverSignature);
+                if (!signatureValid) {
+                    return {
+                        valid: false,
+                        error: `Message ${i}: Server signature verification failed`,
+                    };
+                }
+            }
         }
-        const signData = `${msg.prevRoot}:${msg.merkleRoot}:${msg.timestamp}:${msg.serverPublicKey}`;
-        const signatureValid2 = verifyEd25519Signature(
-          msg.serverPublicKey,
-          signData,
-          msg.serverSignature
+        // 4. 验证 payload 哈希
+        const { sha256 } = await import("@noble/hashes/sha256");
+        const { bytesToHex } = await import("@noble/hashes/utils");
+        const canonicalPayload = canonicalizeJson(payload);
+        const computedHash = "sha256:" +
+            bytesToHex(sha256(new TextEncoder().encode(canonicalPayload)));
+        // DEBUG: 打印调试信息
+        /*console.log("=== WTS Hash Verification Debug ===");
+        console.log("Stored hash:", meta.hash);
+        console.log("Computed hash:", computedHash);
+        console.log(
+            "Canonical payload:",
+            canonicalPayload.substring(0, 500) + "...",
         );
-        if (!signatureValid2) {
-          return {
-            valid: false,
-            error: `Message ${i}: Server signature verification failed`
-          };
+        console.log("Payload keys:", Object.keys(payload));
+        console.log("Messages count:", payload.messages.length);
+        if (payload.messages.length > 0) {
+            console.log(
+                "First message keys:",
+                Object.keys(payload.messages[0]),
+            );
+            console.log(
+                "First message:",
+                JSON.stringify(payload.messages[0], null, 2).substring(0, 500),
+            );
+        }*/
+        if (computedHash !== meta.hash) {
+            return {
+                valid: false,
+                error: "Hash mismatch - content has been tampered",
+                hashValid: false,
+                hasSignature: !!meta.signature,
+            };
         }
-      }
-    }
-    const { sha256 } = await import("@noble/hashes/sha256");
-    const { bytesToHex } = await import("@noble/hashes/utils");
-    const canonicalPayload = canonicalizeJson(payload);
-    const computedHash = "sha256:" + bytesToHex(sha256(new TextEncoder().encode(canonicalPayload)));
-    if (computedHash !== meta.hash) {
-      return {
-        valid: false,
-        error: "Hash mismatch - content has been tampered",
-        hashValid: false,
-        hasSignature: !!meta.signature
-      };
-    }
-    const signatures = [];
-    let signatureValid;
-    if (meta.signature) {
-      const { Ed25519PublicKey } = await import("../../keypairs/ed25519/publickey.js");
-      const sigArray = Array.isArray(meta.signature) ? meta.signature : [meta.signature];
-      let allValid = true;
-      for (const sig of sigArray) {
-        let pkToUse;
-        const pk = sig.publicKey;
-        if (pk.startsWith("0x")) {
-          const buffer = Buffer.from(pk.slice(2), "hex");
-          if (buffer.length === 33) {
-            pkToUse = buffer.slice(1).toString("base64");
-          } else if (buffer.length === 32) {
-            pkToUse = buffer.toString("base64");
-          } else {
-            let address;
-            try {
-              const pubKey = new Ed25519PublicKey(pk.slice(2));
-              address = pubKey.toWAddress();
-            } catch {
+        // 5. 验证数字签名（如果存在）
+        const signatures = [];
+        let signatureValid;
+        if (meta.signature) {
+            const { Ed25519PublicKey } = await import("../../keypairs/ed25519/publickey.js");
+            // 支持多签名验证
+            const sigArray = Array.isArray(meta.signature)
+                ? meta.signature
+                : [meta.signature];
+            let allValid = true;
+            for (const sig of sigArray) {
+                let pkToUse;
+                const pk = sig.publicKey;
+                if (pk.startsWith("0x")) {
+                    // 16进制格式，转换为base64
+                    const buffer = Buffer.from(pk.slice(2), "hex");
+                    if (buffer.length === 33) {
+                        pkToUse = buffer.slice(1).toString("base64");
+                    }
+                    else if (buffer.length === 32) {
+                        pkToUse = buffer.toString("base64");
+                    }
+                    else {
+                        // 尝试推导地址
+                        let address;
+                        try {
+                            const pubKey = new Ed25519PublicKey(pk.slice(2));
+                            address = pubKey.toWAddress();
+                        }
+                        catch {
+                            // 推导失败不影响
+                        }
+                        signatures.push({
+                            publicKey: pk,
+                            address,
+                            valid: false,
+                        });
+                        allValid = false;
+                        continue;
+                    }
+                }
+                else {
+                    // 假设是base64格式，但需要确保是32字节
+                    try {
+                        const buffer = Buffer.from(pk, "base64");
+                        if (buffer.length === 33) {
+                            pkToUse = buffer.slice(1).toString("base64");
+                        }
+                        else if (buffer.length === 32) {
+                            pkToUse = buffer.toString("base64");
+                        }
+                        else {
+                            // 尝试推导地址
+                            let address;
+                            try {
+                                const pubKey = new Ed25519PublicKey(pk);
+                                address = pubKey.toWAddress();
+                            }
+                            catch {
+                                // 推导失败不影响
+                            }
+                            signatures.push({
+                                publicKey: pk,
+                                address,
+                                valid: false,
+                            });
+                            allValid = false;
+                            continue;
+                        }
+                    }
+                    catch {
+                        // 如果解码失败，直接使用原始值
+                        pkToUse = pk;
+                    }
+                }
+                try {
+                    const pubKey = new Ed25519PublicKey(pkToUse);
+                    const signatureBytes = Uint8Array.from(Buffer.from(sig.value, "base64"));
+                    const signValid = await pubKey.verify(new TextEncoder().encode(meta.hash), signatureBytes);
+                    // 通过公钥推导地址
+                    let address;
+                    try {
+                        address = pubKey.toWAddress();
+                    }
+                    catch {
+                        // 推导失败不影响验证
+                    }
+                    signatures.push({
+                        publicKey: pk,
+                        address,
+                        valid: signValid,
+                    });
+                    if (!signValid) {
+                        allValid = false;
+                    }
+                }
+                catch {
+                    // 尝试推导地址
+                    let address;
+                    try {
+                        const pubKey = new Ed25519PublicKey(pkToUse);
+                        address = pubKey.toWAddress();
+                    }
+                    catch {
+                        // 推导失败不影响
+                    }
+                    signatures.push({ publicKey: pk, address, valid: false });
+                    allValid = false;
+                }
             }
-            signatures.push({
-              publicKey: pk,
-              address,
-              valid: false
-            });
-            allValid = false;
-            continue;
-          }
-        } else {
-          try {
-            const buffer = Buffer.from(pk, "base64");
-            if (buffer.length === 33) {
-              pkToUse = buffer.slice(1).toString("base64");
-            } else if (buffer.length === 32) {
-              pkToUse = buffer.toString("base64");
-            } else {
-              let address;
-              try {
-                const pubKey = new Ed25519PublicKey(pk);
-                address = pubKey.toWAddress();
-              } catch {
-              }
-              signatures.push({
-                publicKey: pk,
-                address,
-                valid: false
-              });
-              allValid = false;
-              continue;
+            signatureValid = allValid;
+            if (!signatureValid) {
+                // 收集失败的地址
+                const failedAddresses = signatures
+                    .filter((s) => !s.valid && s.address)
+                    .map((s) => s.address);
+                return {
+                    valid: false,
+                    error: `Signatures from the following addresses are invalid: ${failedAddresses.join(", ")}`,
+                    hashValid: true,
+                    hasSignature: true,
+                    signatureValid: false,
+                    signatures,
+                };
             }
-          } catch {
-            pkToUse = pk;
-          }
-        }
-        try {
-          const pubKey = new Ed25519PublicKey(pkToUse);
-          const signatureBytes = Uint8Array.from(
-            Buffer.from(sig.value, "base64")
-          );
-          const signValid = await pubKey.verify(
-            new TextEncoder().encode(meta.hash),
-            signatureBytes
-          );
-          let address;
-          try {
-            address = pubKey.toWAddress();
-          } catch {
-          }
-          signatures.push({
-            publicKey: pk,
-            address,
-            valid: signValid
-          });
-          if (!signValid) {
-            allValid = false;
-          }
-        } catch {
-          let address;
-          try {
-            const pubKey = new Ed25519PublicKey(pkToUse);
-            address = pubKey.toWAddress();
-          } catch {
-          }
-          signatures.push({ publicKey: pk, address, valid: false });
-          allValid = false;
         }
-      }
-      signatureValid = allValid;
-      if (!signatureValid) {
-        const failedAddresses = signatures.filter((s) => !s.valid && s.address).map((s) => s.address);
         return {
-          valid: false,
-          error: `Signatures from the following addresses are invalid: ${failedAddresses.join(", ")}`,
-          hashValid: true,
-          hasSignature: true,
-          signatureValid: false,
-          signatures
+            valid: true,
+            hashValid: true,
+            hasSignature: !!meta.signature,
+            signatureValid,
+            signatures: signatures.length > 0 ? signatures : undefined,
+        };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            error: `Verification error: ${error}`,
+            hashValid: false,
+            hasSignature: false,
         };
-      }
     }
-    return {
-      valid: true,
-      hashValid: true,
-      hasSignature: !!meta.signature,
-      signatureValid,
-      signatures: signatures.length > 0 ? signatures : void 0
-    };
-  } catch (error) {
-    return {
-      valid: false,
-      error: `Verification error: ${error}`,
-      hashValid: false,
-      hasSignature: false
-    };
-  }
 }
-async function sign_wts(wtsFilePath, account, outputPath) {
-  const verifyResult = await verify_wts(wtsFilePath);
-  if (!verifyResult.valid) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_INPUT,
-      `WTS file verification failed: ${verifyResult.error}`
-    );
-  }
-  const wtsFile = load_wts(wtsFilePath);
-  const address = await Account.Instance().get_address(account);
-  if (!address) {
-    W_ERROR(WErrors.AccountNotFound, `sign_wts.account ${account}`);
-  }
-  const signResult = await Account.Instance().signData(
-    address,
-    wtsFile.meta.hash
-  );
-  let publicKeyBase64;
-  const pk = signResult.publicKey;
-  if (pk.startsWith("0x")) {
-    const buffer = Buffer.from(pk.slice(2), "hex");
-    if (buffer.length === 33) {
-      publicKeyBase64 = buffer.slice(1).toString("base64");
-    } else if (buffer.length === 32) {
-      publicKeyBase64 = buffer.toString("base64");
-    } else {
-      throw new MessengerError(
-        MessengerErrorCode.INVALID_INPUT,
-        `Invalid public key length: ${buffer.length}, expected 32 or 33 bytes`
-      );
+/**
+ * 使用账号签名 WTS 文件
+ *
+ * 此函数会自动加载 WTS 文件、验证格式、签名并保存。
+ *
+ * @param wtsFilePath WTS 文件路径（本地或网络文件）
+ * @param account 签名账号
+ * @param outputPath 输出文件路径（可选，默认覆盖原文件）
+ * @returns 签名后的 WTS 文件路径
+ */
+export async function sign_wts(wtsFilePath, account, outputPath) {
+    // 1. 验证 WTS 文件格式（内部会加载文件）
+    const verifyResult = await verify_wts(wtsFilePath);
+    if (!verifyResult.valid) {
+        throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `WTS file verification failed: ${verifyResult.error}`);
     }
-  } else {
-    publicKeyBase64 = pk;
-  }
-  const newSignature = {
-    value: Buffer.from(signResult.signature.slice(2), "hex").toString(
-      "base64"
-    ),
-    publicKey: publicKeyBase64,
-    algorithm: "Ed25519",
-    address: signResult.address
-  };
-  let signatures;
-  if (wtsFile.meta.signature) {
-    const existingSigs = Array.isArray(wtsFile.meta.signature) ? [...wtsFile.meta.signature] : [wtsFile.meta.signature];
-    const existingIndex = existingSigs.findIndex(
-      (sig) => sig.publicKey === publicKeyBase64
-    );
-    if (existingIndex >= 0) {
-      existingSigs[existingIndex] = newSignature;
-      signatures = existingSigs;
-    } else {
-      signatures = [...existingSigs, newSignature];
+    // 2. 加载 WTS 文件
+    const wtsFile = load_wts(wtsFilePath);
+    // 3. 获取签名者地址
+    const address = await Account.Instance().get_address(account);
+    if (!address) {
+        W_ERROR(WErrors.AccountNotFound, `sign_wts.account ${account}`);
     }
-  } else {
-    signatures = [newSignature];
-  }
-  const signedWtsFile = {
-    ...wtsFile,
-    meta: {
-      ...wtsFile.meta,
-      signature: signatures
+    // 4. 使用 Account 签名（同时获取公钥）
+    const signResult = await Account.Instance().signData(address, wtsFile.meta.hash);
+    // 6. 转换公钥格式为 base64 (32字节)
+    let publicKeyBase64;
+    const pk = signResult.publicKey;
+    if (pk.startsWith("0x")) {
+        const buffer = Buffer.from(pk.slice(2), "hex");
+        if (buffer.length === 33) {
+            // 去掉第一个字节（通常是压缩标志）
+            publicKeyBase64 = buffer.slice(1).toString("base64");
+        }
+        else if (buffer.length === 32) {
+            publicKeyBase64 = buffer.toString("base64");
+        }
+        else {
+            throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `Invalid public key length: ${buffer.length}, expected 32 or 33 bytes`);
+        }
     }
-  };
-  let savePath;
-  if (outputPath) {
-    savePath = outputPath;
-  } else {
-    const dir = path.dirname(wtsFilePath);
-    const ext = path.extname(wtsFilePath);
-    const baseName = path.basename(wtsFilePath, ext);
-    savePath = path.join(dir, `signed_${baseName}${ext}`);
-  }
-  save_wts(signedWtsFile, savePath);
-  return savePath;
-}
-async function wts2html(wtsPath, options = {}) {
-  const fs2 = await import("fs");
-  const path2 = await import("path");
-  const stats = fs2.statSync(wtsPath);
-  if (stats.isDirectory()) {
-    const files = fs2.readdirSync(wtsPath);
-    const wtsFiles = files.filter((f) => f.endsWith(".wts"));
-    if (wtsFiles.length === 0) {
-      throw new MessengerError(
-        MessengerErrorCode.INVALID_INPUT,
-        `No .wts files found in directory: ${wtsPath}`
-      );
+    else {
+        // 假设已经是 base64 格式
+        publicKeyBase64 = pk;
     }
-    const results = [];
-    for (const file of wtsFiles) {
-      const filePath = path2.join(wtsPath, file);
-      const html = await convertWtsToHtml(filePath, options);
-      const outputFileName = file.replace(".wts", ".html");
-      const outputFilePath = options.outputPath ? path2.join(options.outputPath, outputFileName) : path2.join(wtsPath, outputFileName);
-      const outputDir = path2.dirname(outputFilePath);
-      if (!fs2.existsSync(outputDir)) {
-        fs2.mkdirSync(outputDir, { recursive: true });
-      }
-      fs2.writeFileSync(outputFilePath, html, "utf-8");
-      results.push(outputFilePath);
+    // 7. 构建新签名
+    const newSignature = {
+        value: Buffer.from(signResult.signature.slice(2), "hex").toString("base64"),
+        publicKey: publicKeyBase64,
+        algorithm: "Ed25519",
+        address: signResult.address,
+    };
+    // 8. 处理多签名：相同公钥只能有一个签名（替换已有签名）
+    let signatures;
+    if (wtsFile.meta.signature) {
+        // 将已有签名转换为数组
+        const existingSigs = Array.isArray(wtsFile.meta.signature)
+            ? [...wtsFile.meta.signature]
+            : [wtsFile.meta.signature];
+        // 检查是否已存在相同公钥的签名
+        const existingIndex = existingSigs.findIndex((sig) => sig.publicKey === publicKeyBase64);
+        if (existingIndex >= 0) {
+            // 替换已有签名
+            existingSigs[existingIndex] = newSignature;
+            signatures = existingSigs;
+        }
+        else {
+            // 追加新签名
+            signatures = [...existingSigs, newSignature];
+        }
     }
-    return results;
-  }
-  return convertWtsToHtml(wtsPath, options);
+    else {
+        signatures = [newSignature];
+    }
+    // 9. 添加签名到 meta
+    const signedWtsFile = {
+        ...wtsFile,
+        meta: {
+            ...wtsFile.meta,
+            signature: signatures,
+        },
+    };
+    // 8. 确定保存路径
+    let savePath;
+    if (outputPath) {
+        savePath = outputPath;
+    }
+    else {
+        // 在原文件名前添加 signed_ 前缀
+        const dir = path.dirname(wtsFilePath);
+        const ext = path.extname(wtsFilePath);
+        const baseName = path.basename(wtsFilePath, ext);
+        savePath = path.join(dir, `signed_${baseName}${ext}`);
+    }
+    save_wts(signedWtsFile, savePath);
+    return savePath;
 }
-async function convertWtsToHtml(wtsFilePath, options = {}) {
-  const fs2 = await import("fs");
-  const path2 = await import("path");
-  const { title = "WTS Document", theme = "light" } = options;
-  const verifyResult = await verify_wts(wtsFilePath);
-  const wtsFile = load_wts(wtsFilePath);
-  const { payload, meta } = wtsFile;
-  const bgColor = theme === "dark" ? "#1a1a1a" : "#ffffff";
-  const textColor = theme === "dark" ? "#e0e0e0" : "#333333";
-  const borderColor = theme === "dark" ? "#444444" : "#e0e0e0";
-  const escapeHtml = (text) => {
-    return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
-  };
-  const isNonTextMessage = (msg) => {
-    return !!msg.zipMetadata;
-  };
-  const getFileTypeLabel = (msg) => {
-    if (msg.zipMetadata?.contentType) {
-      return msg.zipMetadata.contentType.toUpperCase();
+export async function wts2html(wtsPath, options = {}) {
+    const fs = await import("fs");
+    const path = await import("path");
+    // 检查是文件还是文件夹
+    const stats = fs.statSync(wtsPath);
+    if (stats.isDirectory()) {
+        // 处理文件夹中的所有 .wts 文件
+        const files = fs.readdirSync(wtsPath);
+        const wtsFiles = files.filter((f) => f.endsWith(".wts"));
+        if (wtsFiles.length === 0) {
+            throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `No .wts files found in directory: ${wtsPath}`);
+        }
+        const results = [];
+        for (const file of wtsFiles) {
+            const filePath = path.join(wtsPath, file);
+            const html = await convertWtsToHtml(filePath, options);
+            // 生成输出文件名
+            const outputFileName = file.replace(".wts", ".html");
+            const outputFilePath = options.outputPath
+                ? path.join(options.outputPath, outputFileName)
+                : path.join(wtsPath, outputFileName);
+            // 确保输出目录存在
+            const outputDir = path.dirname(outputFilePath);
+            if (!fs.existsSync(outputDir)) {
+                fs.mkdirSync(outputDir, { recursive: true });
+            }
+            fs.writeFileSync(outputFilePath, html, "utf-8");
+            results.push(outputFilePath);
+        }
+        return results;
     }
-    const fileName = msg.zipMetadata?.fileName || "";
-    if (fileName.endsWith(".wts")) return "WTS";
-    if (fileName.endsWith(".wip")) return "WIP";
-    if (fileName.endsWith(".zip")) return "ZIP";
-    if (fileName.endsWith(".json")) return "JSON";
-    if (fileName.endsWith(".txt")) return "TXT";
-    if (msg.zipMetadata) return "ZIP";
-    return "FILE";
-  };
-  const generateSaveButton = (msg, index) => {
-    const fileType = getFileTypeLabel(msg);
-    const fileName = msg.zipMetadata?.fileName || `message_${index}.${fileType.toLowerCase()}`;
-    const fileData = msg.plaintext || "";
-    return `
+    // 处理单个文件
+    return convertWtsToHtml(wtsPath, options);
+}
+/**
+ * 将单个 WTS 文件转换为 HTML
+ */
+async function convertWtsToHtml(wtsFilePath, options = {}) {
+    const fs = await import("fs");
+    const path = await import("path");
+    const { title = "WTS Document", theme = "light" } = options;
+    // 1. 验证文件
+    const verifyResult = await verify_wts(wtsFilePath);
+    // 2. 加载 WTS 文件
+    const wtsFile = load_wts(wtsFilePath);
+    const { payload, meta } = wtsFile;
+    const bgColor = theme === "dark" ? "#1a1a1a" : "#ffffff";
+    const textColor = theme === "dark" ? "#e0e0e0" : "#333333";
+    const borderColor = theme === "dark" ? "#444444" : "#e0e0e0";
+    const escapeHtml = (text) => {
+        return text
+            .replace(/&/g, "&amp;")
+            .replace(/</g, "&lt;")
+            .replace(/>/g, "&gt;")
+            .replace(/"/g, "&quot;")
+            .replace(/'/g, "&#039;");
+    };
+    // 判断是否为非文本消息（ZIP/WTS/WIP）
+    const isNonTextMessage = (msg) => {
+        return !!msg.zipMetadata;
+    };
+    // 获取文件类型标签
+    const getFileTypeLabel = (msg) => {
+        // 首先检查 contentType
+        if (msg.zipMetadata?.contentType) {
+            return msg.zipMetadata.contentType.toUpperCase();
+        }
+        // 根据文件名推断类型
+        const fileName = msg.zipMetadata?.fileName || "";
+        if (fileName.endsWith(".wts"))
+            return "WTS";
+        if (fileName.endsWith(".wip"))
+            return "WIP";
+        if (fileName.endsWith(".zip"))
+            return "ZIP";
+        if (fileName.endsWith(".json"))
+            return "JSON";
+        if (fileName.endsWith(".txt"))
+            return "TXT";
+        // 根据 zipMetadata 推断
+        if (msg.zipMetadata)
+            return "ZIP";
+        return "FILE";
+    };
+    // 生成保存按钮的 HTML
+    const generateSaveButton = (msg, index) => {
+        const fileType = getFileTypeLabel(msg);
+        const fileName = msg.zipMetadata?.fileName ||
+            `message_${index}.${fileType.toLowerCase()}`;
+        // 对于非文本消息，plaintext 是 base64 编码的文件内容
+        const fileData = msg.plaintext || "";
+        return `
 			<div style="margin: 12px 0; padding: 16px; background: ${theme === "dark" ? "#2a3f2a" : "#e8f5e9"}; border: 1px solid ${theme === "dark" ? "#4caf50" : "#81c784"}; border-radius: 8px; text-align: center;">
 				<div style="font-size: 14px; color: ${theme === "dark" ? "#81c784" : "#2e7d32"}; margin-bottom: 8px;">
-					\u{1F4CE} ${fileType} File
+					📎 ${fileType} File
 					${msg.zipMetadata ? `<span style="font-size: 12px; color: #666;">(${formatFileSize(msg.zipMetadata.fileSize)})</span>` : ""}
 				</div>
 				<button 
@@ -672,13 +822,13 @@ async function convertWtsToHtml(wtsFilePath, options = {}) {
 					onmouseover="this.style.background='#45a049'"
 					onmouseout="this.style.background='#4caf50'"
 				>
-					\u{1F4BE} Save ${escapeHtml(fileName)}
+					💾 Save ${escapeHtml(fileName)}
 				</button>
 			</div>
 			<script>
 				function saveFile${index}() {
 					try {
-						// Base64 \u89E3\u7801
+						// Base64 解码
 						const base64Data = "${escapeHtml(fileData)}";
 						const byteCharacters = atob(base64Data);
 						const byteNumbers = new Array(byteCharacters.length);
@@ -687,7 +837,7 @@ async function convertWtsToHtml(wtsFilePath, options = {}) {
 						}
 						const byteArray = new Uint8Array(byteNumbers);
 						
-						// \u6839\u636E\u6587\u4EF6\u7C7B\u578B\u8BBE\u7F6E MIME \u7C7B\u578B
+						// 根据文件类型设置 MIME 类型
 						let mimeType = "application/octet-stream";
 						const fileName = "${escapeHtml(fileName)}";
 						if (fileName.endsWith('.json')) mimeType = "application/json";
@@ -704,26 +854,34 @@ async function convertWtsToHtml(wtsFilePath, options = {}) {
 						document.body.removeChild(a);
 						URL.revokeObjectURL(url);
 					} catch (e) {
-						alert('\u4FDD\u5B58\u6587\u4EF6\u5931\u8D25: ' + e.message);
+						alert('保存文件失败: ' + e.message);
 					}
 				}
-			<\/script>
+			</script>
 		`;
-  };
-  const formatFileSize = (bytes) => {
-    if (bytes < 1024) return bytes + " B";
-    if (bytes < 1024 * 1024) return (bytes / 1024).toFixed(1) + " KB";
-    return (bytes / (1024 * 1024)).toFixed(1) + " MB";
-  };
-  const messagesHtml = payload.messages.map((msg, index) => {
-    const isNonText = isNonTextMessage(msg);
-    return `
+    };
+    // 格式化文件大小
+    const formatFileSize = (bytes) => {
+        if (bytes < 1024)
+            return bytes + " B";
+        if (bytes < 1024 * 1024)
+            return (bytes / 1024).toFixed(1) + " KB";
+        return (bytes / (1024 * 1024)).toFixed(1) + " MB";
+    };
+    const messagesHtml = payload.messages
+        .map((msg, index) => {
+        const isNonText = isNonTextMessage(msg);
+        return `
 			<div style="margin: 16px 0; padding: 16px; border: 1px solid ${borderColor}; border-radius: 8px; background: ${theme === "dark" ? "#2a2a2a" : "#f9f9f9"};">
 				<div style="display: flex; justify-content: space-between; margin-bottom: 8px; font-size: 12px; color: #666;">
 					<span>From: ${escapeHtml(msg.from.slice(0, 20))}... To: ${escapeHtml(msg.to.slice(0, 20))}...</span>
 					<span>${new Date(msg.timestamp).toLocaleString()}</span>
 				</div>
-				${isNonText ? generateSaveButton(msg, index) : msg.plaintext ? `<div style="margin: 12px 0; padding: 12px; background: ${theme === "dark" ? "#333333" : "#ffffff"}; border: 1px solid ${borderColor}; border-radius: 4px; font-size: 14px; line-height: 1.6; max-height: calc(1.6em * 6); overflow-y: auto; white-space: pre-wrap; word-break: break-word;">${escapeHtml(msg.plaintext)}</div>` : ""}
+				${isNonText
+            ? generateSaveButton(msg, index)
+            : msg.plaintext
+                ? `<div style="margin: 12px 0; padding: 12px; background: ${theme === "dark" ? "#333333" : "#ffffff"}; border: 1px solid ${borderColor}; border-radius: 4px; font-size: 14px; line-height: 1.6; max-height: calc(1.6em * 6); overflow-y: auto; white-space: pre-wrap; word-break: break-word;">${escapeHtml(msg.plaintext)}</div>`
+                : ""}
 				<div style="margin: 8px 0; font-size: 11px; color: #666;">
 					<div>Plaintext Hash: ${escapeHtml(msg.plaintextHash)}</div>
 					${msg.arkConfirmed ? `<div>ARK Confirmed: ${escapeHtml(msg.arkConfirmed.recipient)} at ${new Date(msg.arkConfirmed.timestamp).toLocaleString()}</div>` : ""}
@@ -737,9 +895,11 @@ async function convertWtsToHtml(wtsFilePath, options = {}) {
 				</div>
 			</div>
 		`;
-  }).join("");
-  const signatureHtml = "";
-  const html = `<!DOCTYPE html>
+    })
+        .join("");
+    // 签名信息不再在 HTML 中显示（根据安全设计）
+    const signatureHtml = "";
+    const html = `<!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8">
@@ -783,25 +943,29 @@ async function convertWtsToHtml(wtsFilePath, options = {}) {
         </div>
         <div style="font-size: 14px; color: #666; margin-top: 4px;">
             ${new Date(meta.startTime).toLocaleDateString()} - ${new Date(meta.endTime).toLocaleDateString()}
-            ${verifyResult.valid ? `<span style="color: #4caf50; margin-left: 8px;">\u2713 The accuracy, sequentiality, and integrity of the messages are verified without tampering</span>` : `<span style="color: #ff9800; margin-left: 8px;">\u26A0 ${verifyResult.error || "Hash mismatch - content has been tampered"}</span>`}
+            ${verifyResult.valid
+        ? `<span style="color: #4caf50; margin-left: 8px;">✓ The accuracy, sequentiality, and integrity of the messages are verified without tampering</span>`
+        : `<span style="color: #ff9800; margin-left: 8px;">⚠ ${verifyResult.error || "Hash mismatch - content has been tampered"}</span>`}
         </div>
         <div class="meta">
             <div>Session: ${escapeHtml(payload.session.id)}</div>
             <div>Participants: ${payload.session.participants.map((p) => escapeHtml(p.slice(0, 20)) + "...").join(", ")}</div>
             <div>Messages: ${meta.messageCount} | Time: ${new Date(meta.startTime).toLocaleString()} - ${new Date(meta.endTime).toLocaleString()}</div>
             <div style="word-break: break-all;">Merkle Root: ${escapeHtml(meta.merkleRoot)}</div>
-            ${verifyResult.signatures && verifyResult.signatures.length > 0 ? `
+            ${verifyResult.signatures && verifyResult.signatures.length > 0
+        ? `
             <div style="margin-top: 8px; padding: 8px; background: ${theme === "dark" ? "#2a3f2a" : "#e8f5e9"}; border-radius: 4px;">
-                <div style="font-size: 11px; color: ${theme === "dark" ? "#81c784" : "#2e7d32"}; margin-bottom: 4px;">\u2713 Signature Verification (${verifyResult.signatures.length} signature${verifyResult.signatures.length > 1 ? "s" : ""})</div>
-                ${verifyResult.signatures.map(
-    (s, idx) => `
+                <div style="font-size: 11px; color: ${theme === "dark" ? "#81c784" : "#2e7d32"}; margin-bottom: 4px;">✓ Signature Verification (${verifyResult.signatures.length} signature${verifyResult.signatures.length > 1 ? "s" : ""})</div>
+                ${verifyResult.signatures
+            .map((s, idx) => `
                     <div style="font-size: 10px; color: ${textColor}; margin-left: 8px;">
-                        ${idx + 1}. ${s.address ? escapeHtml(s.address.slice(0, 20)) + "..." : "Unknown"}: ${s.valid ? '<span style="color: #4caf50;">\u2713 Valid</span>' : '<span style="color: #f44336;">\u2717 Invalid</span>'}
+                        ${idx + 1}. ${s.address ? escapeHtml(s.address.slice(0, 20)) + "..." : "Unknown"}: ${s.valid ? '<span style="color: #4caf50;">✓ Valid</span>' : '<span style="color: #f44336;">✗ Invalid</span>'}
                     </div>
-                `
-  ).join("")}
+                `)
+            .join("")}
             </div>
-            ` : ""}
+            `
+        : ""}
         </div>
     </div>
     <div class="messages">
@@ -810,419 +974,349 @@ async function convertWtsToHtml(wtsFilePath, options = {}) {
     ${signatureHtml}
 </body>
 </html>`;
-  if (options.outputPath) {
-    const dir = path2.dirname(options.outputPath);
-    if (!fs2.existsSync(dir)) {
-      fs2.mkdirSync(dir, { recursive: true });
-    }
-    fs2.writeFileSync(options.outputPath, html, "utf-8");
-    return options.outputPath;
-  }
-  return html;
-}
-async function proof_message(account, messageId, network) {
-  const address = await Account.Instance().get_address(account);
-  if (!address) {
-    W_ERROR(WErrors.AccountNotFound, `proof_message.account ${account}`);
-  }
-  const messageStorage = new MessageStorage(address);
-  const message = messageStorage.getMessageById(messageId);
-  if (!message) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_INPUT,
-      `Message not found: ${messageId}`
-    );
-  }
-  if (message.fromAddress.toLowerCase() !== address.toLowerCase() && message.toAddress.toLowerCase() !== address.toLowerCase()) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_INPUT,
-      `Message does not belong to account ${address}`
-    );
-  }
-  if (!message.serverSignature) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_PROOF,
-      `Message does not have server signature`
-    );
-  }
-  if (!message.serverPublicKey) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_PROOF,
-      `Message does not have server public key`
-    );
-  }
-  if (!message.plaintext) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_PROOF,
-      `Message does not have plaintext`
-    );
-  }
-  const { verifyMessage } = await import("./crypto.js");
-  const verifyParams = {
-    messageId: message.messageId,
-    plaintext: message.plaintext,
-    plaintextHash: message.plaintextHash,
-    createdAt: message.createdAt,
-    guardAddress: message.guardAddress,
-    passportAddress: message.passportAddress,
-    serverSignature: message.serverSignature,
-    serverPublicKey: message.serverPublicKey
-  };
-  if (message.newRoot && message.leafIndex !== void 0) {
-    if (!message.serverTimestamp) {
-      throw new MessengerError(
-        MessengerErrorCode.INVALID_PROOF,
-        `Message ${message.messageId} missing server timestamp for verification`
-      );
+    // 如果指定了输出路径，保存到文件
+    if (options.outputPath) {
+        const dir = path.dirname(options.outputPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        fs.writeFileSync(options.outputPath, html, "utf-8");
+        return options.outputPath;
     }
-    verifyParams.merkleMetadata = {
-      newRoot: message.newRoot,
-      prevRoot: message.prevRoot,
-      leafIndex: message.leafIndex,
-      serverTimestamp: message.serverTimestamp
-      // 必须使用服务器时间戳
-      // 注意：proofSiblings 和 proofIndices 从服务器拉取时不提供
-      // verifyMessage 会跳过 Merkle Proof 验证，只验证 Root 计算
-    };
-  }
-  const verifyResult = verifyMessage(verifyParams);
-  if (!verifyResult.valid) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_PROOF,
-      `Message verification failed: ${verifyResult.error}`
-    );
-  }
-  if (!message.serverPublicKey) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_PROOF,
-      `Message does not have server public key`
-    );
-  }
-  const { CallProof } = await import("../call/proof.js");
-  const callProof = new CallProof({
-    proof: message.newRoot,
-    // 证明root存在
-    server_pubkey: message.serverPublicKey,
-    server_signature: message.serverSignature,
-    proof_type: CHAIN_PROOF_TYPE,
-    // 消息证明类型
-    description: `Message proof for ${messageId}`,
-    item_count: message.leafIndex ?? 1,
-    about_address: message.fromAddress.toLowerCase() === address.toLowerCase() ? message.toAddress : message.fromAddress
-  });
-  const env = {
-    network,
-    account: address
-  };
-  const result = await callProof.call(env);
-  const { ResponseData: extractResponseData } = await import("../call/base.js");
-  const responseData = extractResponseData(result);
-  const proofResult = responseData.find((item) => item.type === "Proof");
-  if (!proofResult || !proofResult.object) {
-    throw new MessengerError(
-      MessengerErrorCode.INVALID_PROOF,
-      `Failed to get proof address from transaction result`
-    );
-  }
-  message.proof = proofResult.object;
-  messageStorage.saveMessage(message);
-  return { proofAddress: proofResult.object };
+    return html;
 }
-const MIN_PASSPORT_VALIDITY = 10;
-const MAX_PASSPORT_VALIDITY = 10 * 365 * 24 * 60 * 60;
-const MAX_BLACKLIST_SIZE_ONCE = 100;
-const MAX_FRIENDS_SIZE_ONCE = 100;
-const MAX_GUARDS_SIZE_ONCE = 10;
-async function blacklist(request) {
-  const acc = await Account.Instance().get_address(request.account);
-  if (!acc) {
-    W_ERROR(
-      WErrors.AccountNotFound,
-      `blacklist.account ${request.account}`
-    );
-  }
-  const manager = getMessengerManager();
-  switch (request.op) {
-    case "add": {
-      let addresses = await GetManyAccountOrMark_Address(request.users);
-      if (addresses.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `blacklist.add.users ${request.users} have not valid addresses`
-        );
-      }
-      addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
-      if (addresses.length > MAX_BLACKLIST_SIZE_ONCE) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `blacklist.add.users ${request.users} have too many addresses, max ${MAX_BLACKLIST_SIZE_ONCE}`
-        );
-      }
-      const result = await manager.addToBlacklist(acc, addresses);
-      return { op: "add", result };
+/**
+ * 提交消息链上证明
+ *
+ * 将消息的 Merkle 证明提交到链上，创建不可篡改的证明记录。
+ * 此函数会先验证消息的完整性和合法性。
+ *
+ * @param account 账号名称或地址
+ * @param messageId 消息ID
+ * @param env 调用环境（包含网络、签名账号等）
+ * @returns 证明对象地址
+ */
+export async function proof_message(account, messageId, network) {
+    // 1. 解析账号地址
+    const address = await Account.Instance().get_address(account);
+    if (!address) {
+        W_ERROR(WErrors.AccountNotFound, `proof_message.account ${account}`);
     }
-    case "remove": {
-      let addresses = await GetManyAccountOrMark_Address(request.users);
-      if (addresses.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `blacklist.remove.users ${request.users} have not valid addresses`
-        );
-      }
-      addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
-      if (addresses.length > MAX_BLACKLIST_SIZE_ONCE) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `blacklist.remove.users ${request.users} have too many addresses, max ${MAX_BLACKLIST_SIZE_ONCE}`
-        );
-      }
-      const result = await manager.removeFromBlacklist(acc, addresses);
-      return { op: "remove", result };
+    // 2. 获取消息
+    const messageStorage = new MessageStorage(address);
+    const message = messageStorage.getMessageById(messageId);
+    if (!message) {
+        throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `Message not found: ${messageId}`);
     }
-    case "clear": {
-      const result = await manager.clearBlacklist(acc);
-      return { op: "clear", result };
+    // 3. 验证消息属于该账号
+    if (message.fromAddress.toLowerCase() !== address.toLowerCase() &&
+        message.toAddress.toLowerCase() !== address.toLowerCase()) {
+        throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `Message does not belong to account ${address}`);
     }
-    case "get": {
-      const result = await manager.getBlacklist(acc);
-      return { op: "get", result };
+    // 4. 验证服务器签名存在
+    if (!message.serverSignature) {
+        throw new MessengerError(MessengerErrorCode.INVALID_PROOF, `Message does not have server signature`);
     }
-    case "exist": {
-      let addresses = await GetManyAccountOrMark_Address(request.users);
-      if (addresses.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `blacklist.exist.users ${request.users} have not valid addresses`
-        );
-      }
-      addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
-      if (addresses.length > MAX_BLACKLIST_SIZE_ONCE) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `blacklist.exist.users ${request.users} have too many addresses, max ${MAX_BLACKLIST_SIZE_ONCE}`
-        );
-      }
-      const result = await manager.existInBlacklist(acc, addresses);
-      return { op: "exist", result };
+    if (!message.serverPublicKey) {
+        throw new MessengerError(MessengerErrorCode.INVALID_PROOF, `Message does not have server public key`);
     }
-    default:
-      throw new MessengerError(
-        MessengerErrorCode.INVALID_INPUT,
-        `blacklist.unknown op: ${request}`
-      );
-  }
-}
-async function friendslist(request) {
-  const acc = await Account.Instance().get_address(request.account);
-  if (!acc) {
-    W_ERROR(
-      WErrors.AccountNotFound,
-      `friendslist.account ${request.account}`
-    );
-  }
-  const manager = getMessengerManager();
-  switch (request.op) {
-    case "add": {
-      let addresses = await GetManyAccountOrMark_Address(request.users);
-      if (addresses.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `friendslist.add.users ${request.users} have not valid addresses`
-        );
-      }
-      addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
-      const result = await manager.addToFriendsList(acc, addresses);
-      return { op: "add", result };
+    // 5. 使用 verifyMessage 验证消息完整性（包含服务器签名验证）
+    if (!message.plaintext) {
+        throw new MessengerError(MessengerErrorCode.INVALID_PROOF, `Message does not have plaintext`);
     }
-    case "remove": {
-      let addresses = await GetManyAccountOrMark_Address(request.users);
-      if (addresses.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `friendslist.remove.users ${request.users} have not valid addresses`
-        );
-      }
-      addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
-      if (addresses.length > MAX_FRIENDS_SIZE_ONCE) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `friendslist.remove.users ${request.users} have too many addresses, max ${MAX_FRIENDS_SIZE_ONCE}`
-        );
-      }
-      const result = await manager.removeFromFriendsList(acc, addresses);
-      return { op: "remove", result };
+    const { verifyMessage } = await import("./crypto.js");
+    // 构造验证参数
+    const verifyParams = {
+        messageId: message.messageId,
+        plaintext: message.plaintext,
+        plaintextHash: message.plaintextHash,
+        createdAt: message.createdAt,
+        guardAddress: message.guardAddress,
+        passportAddress: message.passportAddress,
+        serverSignature: message.serverSignature,
+        serverPublicKey: message.serverPublicKey,
+    };
+    // 如果消息有完整的 Merkle 证明数据，则添加 merkleMetadata
+    if (message.newRoot && message.leafIndex !== undefined) {
+        // 检查服务器时间戳是否存在
+        if (!message.serverTimestamp) {
+            throw new MessengerError(MessengerErrorCode.INVALID_PROOF, `Message ${message.messageId} missing server timestamp for verification`);
+        }
+        verifyParams.merkleMetadata = {
+            newRoot: message.newRoot,
+            prevRoot: message.prevRoot,
+            leafIndex: message.leafIndex,
+            serverTimestamp: message.serverTimestamp, // 必须使用服务器时间戳
+            // 注意：proofSiblings 和 proofIndices 从服务器拉取时不提供
+            // verifyMessage 会跳过 Merkle Proof 验证，只验证 Root 计算
+        };
     }
-    case "clear": {
-      const result = await manager.clearFriendsList(acc);
-      return { op: "clear", result };
+    const verifyResult = verifyMessage(verifyParams);
+    if (!verifyResult.valid) {
+        throw new MessengerError(MessengerErrorCode.INVALID_PROOF, `Message verification failed: ${verifyResult.error}`);
     }
-    case "get": {
-      const result = await manager.getFriendsList(acc);
-      return { op: "get", result };
+    // 6. 从消息中获取服务器公钥
+    if (!message.serverPublicKey) {
+        throw new MessengerError(MessengerErrorCode.INVALID_PROOF, `Message does not have server public key`);
     }
-    case "exist": {
-      let addresses = await GetManyAccountOrMark_Address(request.users);
-      if (addresses.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `friendslist.exist.users ${request.users} have not valid addresses`
-        );
-      }
-      addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
-      if (addresses.length > MAX_FRIENDS_SIZE_ONCE) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `friendslist.exist.users ${request.users} have too many addresses, max ${MAX_FRIENDS_SIZE_ONCE}`
-        );
-      }
-      const result = await manager.existInFriendsList(acc, addresses);
-      return { op: "exist", result };
+    // 7. 创建链上证明
+    const { CallProof } = await import("../call/proof.js");
+    const callProof = new CallProof({
+        proof: message.newRoot, // 证明root存在
+        server_pubkey: message.serverPublicKey,
+        server_signature: message.serverSignature,
+        proof_type: CHAIN_PROOF_TYPE, // 消息证明类型
+        description: `Message proof for ${messageId}`,
+        item_count: message.leafIndex ?? 1,
+        about_address: message.fromAddress.toLowerCase() === address.toLowerCase()
+            ? message.toAddress
+            : message.fromAddress,
+    });
+    // 8. 构造调用环境并执行
+    const env = {
+        network,
+        account: address,
+    };
+    const result = await callProof.call(env);
+    // 9. 使用 ResponseData 提取 Proof 对象地址
+    const { ResponseData: extractResponseData } = await import("../call/base.js");
+    const responseData = extractResponseData(result);
+    // 查找 Proof 类型的对象
+    const proofResult = responseData.find((item) => item.type === "Proof");
+    if (!proofResult || !proofResult.object) {
+        throw new MessengerError(MessengerErrorCode.INVALID_PROOF, `Failed to get proof address from transaction result`);
     }
-    default:
-      throw new MessengerError(
-        MessengerErrorCode.INVALID_INPUT,
-        `friendslist.unknown op: ${request}`
-      );
-  }
+    message.proof = proofResult.object;
+    messageStorage.saveMessage(message);
+    return { proofAddress: proofResult.object };
 }
-async function guardlist(request) {
-  const acc = await Account.Instance().get_address(request.account);
-  if (!acc) {
-    W_ERROR(
-      WErrors.AccountNotFound,
-      `guardlist.account ${request.account}`
-    );
-  }
-  const manager = getMessengerManager();
-  switch (request.op) {
-    case "add": {
-      const uniqueGuardsMap = /* @__PURE__ */ new Map();
-      for (const g of request.guards) {
-        uniqueGuardsMap.set(g.guard.toLowerCase(), g);
-      }
-      const guards = Array.from(uniqueGuardsMap.values());
-      if (guards.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `guardlist.add.guards ${request.guards} have not valid guards`
-        );
-      }
-      if (guards.length > MAX_GUARDS_SIZE_ONCE) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `guardlist.add.guards ${request.guards} have too many guards, max ${MAX_GUARDS_SIZE_ONCE}`
-        );
-      }
-      for (const g of guards) {
-        if (!isValidU64(g.passportValiditySeconds) || g.passportValiditySeconds < MIN_PASSPORT_VALIDITY || g.passportValiditySeconds > MAX_PASSPORT_VALIDITY) {
-          W_ERROR(
-            WErrors.InvalidParam,
-            `Guard ${g.guard}: passport validity ${g.passportValiditySeconds} must be between ${MIN_PASSPORT_VALIDITY} and ${MAX_PASSPORT_VALIDITY} seconds`
-          );
+const MIN_PASSPORT_VALIDITY = 10; // 10 seconds
+const MAX_PASSPORT_VALIDITY = 10 * 365 * 24 * 60 * 60; // 10 years in seconds
+const MAX_BLACKLIST_SIZE_ONCE = 100;
+const MAX_FRIENDS_SIZE_ONCE = 100;
+const MAX_GUARDS_SIZE_ONCE = 10;
+/**
+ * 黑名单管理 - 统一入口
+ * @param request 操作请求
+ * @returns 操作结果
+ */
+export async function blacklist(request) {
+    const acc = await Account.Instance().get_address(request.account);
+    if (!acc) {
+        W_ERROR(WErrors.AccountNotFound, `blacklist.account ${request.account}`);
+    }
+    const manager = getMessengerManager();
+    switch (request.op) {
+        case "add": {
+            let addresses = await GetManyAccountOrMark_Address(request.users);
+            if (addresses.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `blacklist.add.users ${request.users} have not valid addresses`);
+            }
+            // 去重
+            addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
+            if (addresses.length > MAX_BLACKLIST_SIZE_ONCE) {
+                W_ERROR(WErrors.InvalidParam, `blacklist.add.users ${request.users} have too many addresses, max ${MAX_BLACKLIST_SIZE_ONCE}`);
+            }
+            const result = await manager.addToBlacklist(acc, addresses);
+            return { op: "add", result };
         }
-      }
-      const addresses = await LocalMark.Instance().get_many_address(
-        guards.map((g) => g.guard)
-      );
-      if (addresses.length !== guards.length) {
-        const foundAddresses = new Set(addresses);
-        const missingGuards = [];
-        for (const g of guards) {
-          if (!foundAddresses.has(g.guard) && !g.guard.startsWith("0x")) {
-            missingGuards.push(g.guard);
-          }
+        case "remove": {
+            let addresses = await GetManyAccountOrMark_Address(request.users);
+            if (addresses.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `blacklist.remove.users ${request.users} have not valid addresses`);
+            }
+            // 去重
+            addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
+            if (addresses.length > MAX_BLACKLIST_SIZE_ONCE) {
+                W_ERROR(WErrors.InvalidParam, `blacklist.remove.users ${request.users} have too many addresses, max ${MAX_BLACKLIST_SIZE_ONCE}`);
+            }
+            const result = await manager.removeFromBlacklist(acc, addresses);
+            return { op: "remove", result };
         }
-        W_ERROR(
-          WErrors.InvalidParam,
-          `Guard not found: ${missingGuards.join(", ")}`
-        );
-      }
-      const objs = await query_objects({
-        objects: addresses,
-        no_cache: false,
-        network: manager.getConfig().network
-      });
-      if (!objs || !objs.objects || objs.objects.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `Guard not found: ${guards.map((g) => g.guard).join(", ")}`
-        );
-      }
-      objs.objects.forEach((obj) => {
-        if (obj.type !== "Guard") {
-          W_ERROR(
-            WErrors.InvalidParam,
-            `Guard ${obj.object} is not a Guard`
-          );
+        case "clear": {
+            const result = await manager.clearBlacklist(acc);
+            return { op: "clear", result };
         }
-      });
-      const guardListItems = guards.map((g, index) => ({
-        guardAddress: addresses[index],
-        passportValiditySeconds: g.passportValiditySeconds
-      }));
-      const result = await manager.addToGuardList(acc, guardListItems);
-      return { op: "add", result };
+        case "get": {
+            const result = await manager.getBlacklist(acc);
+            return { op: "get", result };
+        }
+        case "exist": {
+            let addresses = await GetManyAccountOrMark_Address(request.users);
+            if (addresses.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `blacklist.exist.users ${request.users} have not valid addresses`);
+            }
+            // 去重
+            addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
+            if (addresses.length > MAX_BLACKLIST_SIZE_ONCE) {
+                W_ERROR(WErrors.InvalidParam, `blacklist.exist.users ${request.users} have too many addresses, max ${MAX_BLACKLIST_SIZE_ONCE}`);
+            }
+            const result = await manager.existInBlacklist(acc, addresses);
+            return { op: "exist", result };
+        }
+        default:
+            throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `blacklist.unknown op: ${request}`);
     }
-    case "remove": {
-      const guards = [
-        ...new Set(request.guards.map((g) => g.toLowerCase()))
-      ];
-      if (guards.length === 0) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `guardlist.remove.guards ${request.guards} have not valid guards`
-        );
-      }
-      if (guards.length > MAX_GUARDS_SIZE_ONCE) {
-        W_ERROR(
-          WErrors.InvalidParam,
-          `guardlist.remove.guards ${request.guards} have too many guards, max ${MAX_GUARDS_SIZE_ONCE}`
-        );
-      }
-      const addresses = await LocalMark.Instance().get_many_address(guards);
-      if (addresses.length !== guards.length) {
-        const foundAddresses = new Set(addresses);
-        const missingGuards = [];
-        for (const g of guards) {
-          if (!foundAddresses.has(g) && !g.startsWith("0x")) {
-            missingGuards.push(g);
-          }
+}
+/**
+ * 好友列表管理 - 统一入口
+ * @param request 操作请求
+ * @returns 操作结果
+ */
+export async function friendslist(request) {
+    const acc = await Account.Instance().get_address(request.account);
+    if (!acc) {
+        W_ERROR(WErrors.AccountNotFound, `friendslist.account ${request.account}`);
+    }
+    const manager = getMessengerManager();
+    switch (request.op) {
+        case "add": {
+            let addresses = await GetManyAccountOrMark_Address(request.users);
+            if (addresses.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `friendslist.add.users ${request.users} have not valid addresses`);
+            }
+            // 去重
+            addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
+            const result = await manager.addToFriendsList(acc, addresses);
+            return { op: "add", result };
         }
-        W_ERROR(
-          WErrors.InvalidParam,
-          `Guard not found: ${missingGuards.join(", ")}`
-        );
-      }
-      const result = await manager.removeFromGuardList(
-        acc,
-        addresses
-      );
-      return { op: "remove", result };
+        case "remove": {
+            let addresses = await GetManyAccountOrMark_Address(request.users);
+            if (addresses.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `friendslist.remove.users ${request.users} have not valid addresses`);
+            }
+            // 去重
+            addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
+            if (addresses.length > MAX_FRIENDS_SIZE_ONCE) {
+                W_ERROR(WErrors.InvalidParam, `friendslist.remove.users ${request.users} have too many addresses, max ${MAX_FRIENDS_SIZE_ONCE}`);
+            }
+            const result = await manager.removeFromFriendsList(acc, addresses);
+            return { op: "remove", result };
+        }
+        case "clear": {
+            const result = await manager.clearFriendsList(acc);
+            return { op: "clear", result };
+        }
+        case "get": {
+            const result = await manager.getFriendsList(acc);
+            return { op: "get", result };
+        }
+        case "exist": {
+            let addresses = await GetManyAccountOrMark_Address(request.users);
+            if (addresses.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `friendslist.exist.users ${request.users} have not valid addresses`);
+            }
+            // 去重
+            addresses = [...new Set(addresses.map((a) => a.toLowerCase()))];
+            if (addresses.length > MAX_FRIENDS_SIZE_ONCE) {
+                W_ERROR(WErrors.InvalidParam, `friendslist.exist.users ${request.users} have too many addresses, max ${MAX_FRIENDS_SIZE_ONCE}`);
+            }
+            const result = await manager.existInFriendsList(acc, addresses);
+            return { op: "exist", result };
+        }
+        default:
+            throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `friendslist.unknown op: ${request}`);
+    }
+}
+/**
+ * Guard 列表管理 - 统一入口
+ * @param request 操作请求
+ * @returns 操作结果
+ */
+export async function guardlist(request) {
+    const acc = await Account.Instance().get_address(request.account);
+    if (!acc) {
+        W_ERROR(WErrors.AccountNotFound, `guardlist.account ${request.account}`);
     }
-    case "get": {
-      const result = await manager.getGuardList(acc);
-      return { op: "get", result };
+    const manager = getMessengerManager();
+    switch (request.op) {
+        case "add": {
+            // 按 guard 字段去重，保留最后一个
+            const uniqueGuardsMap = new Map();
+            for (const g of request.guards) {
+                uniqueGuardsMap.set(g.guard.toLowerCase(), g);
+            }
+            const guards = Array.from(uniqueGuardsMap.values());
+            if (guards.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `guardlist.add.guards ${request.guards} have not valid guards`);
+            }
+            // 去重
+            if (guards.length > MAX_GUARDS_SIZE_ONCE) {
+                W_ERROR(WErrors.InvalidParam, `guardlist.add.guards ${request.guards} have too many guards, max ${MAX_GUARDS_SIZE_ONCE}`);
+            }
+            // Validate TTL range
+            for (const g of guards) {
+                if (!isValidU64(g.passportValiditySeconds) ||
+                    g.passportValiditySeconds < MIN_PASSPORT_VALIDITY ||
+                    g.passportValiditySeconds > MAX_PASSPORT_VALIDITY) {
+                    W_ERROR(WErrors.InvalidParam, `Guard ${g.guard}: passport validity ${g.passportValiditySeconds} must be between ${MIN_PASSPORT_VALIDITY} and ${MAX_PASSPORT_VALIDITY} seconds`);
+                }
+            }
+            const addresses = await LocalMark.Instance().get_many_address(guards.map((g) => g.guard));
+            // Validate all addresses were found
+            if (addresses.length !== guards.length) {
+                const foundAddresses = new Set(addresses);
+                const missingGuards = [];
+                for (const g of guards) {
+                    if (!foundAddresses.has(g.guard) &&
+                        !g.guard.startsWith("0x")) {
+                        missingGuards.push(g.guard);
+                    }
+                }
+                W_ERROR(WErrors.InvalidParam, `Guard not found: ${missingGuards.join(", ")}`);
+            }
+            // 通过查询检查是不是guard地址
+            const objs = await query_objects({
+                objects: addresses,
+                no_cache: false,
+                network: manager.getConfig().network,
+            });
+            if (!objs || !objs.objects || objs.objects.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `Guard not found: ${guards.map((g) => g.guard).join(", ")}`);
+            }
+            objs.objects.forEach((obj) => {
+                if (obj.type !== "Guard") {
+                    W_ERROR(WErrors.InvalidParam, `Guard ${obj.object} is not a Guard`);
+                }
+            });
+            const guardListItems = guards.map((g, index) => ({
+                guardAddress: addresses[index],
+                passportValiditySeconds: g.passportValiditySeconds,
+            }));
+            const result = await manager.addToGuardList(acc, guardListItems);
+            return { op: "add", result };
+        }
+        case "remove": {
+            const guards = [
+                ...new Set(request.guards.map((g) => g.toLowerCase())),
+            ];
+            if (guards.length === 0) {
+                W_ERROR(WErrors.InvalidParam, `guardlist.remove.guards ${request.guards} have not valid guards`);
+            }
+            // 去重
+            if (guards.length > MAX_GUARDS_SIZE_ONCE) {
+                W_ERROR(WErrors.InvalidParam, `guardlist.remove.guards ${request.guards} have too many guards, max ${MAX_GUARDS_SIZE_ONCE}`);
+            }
+            const addresses = await LocalMark.Instance().get_many_address(guards);
+            if (addresses.length !== guards.length) {
+                const foundAddresses = new Set(addresses);
+                const missingGuards = [];
+                for (const g of guards) {
+                    if (!foundAddresses.has(g) && !g.startsWith("0x")) {
+                        missingGuards.push(g);
+                    }
+                }
+                W_ERROR(WErrors.InvalidParam, `Guard not found: ${missingGuards.join(", ")}`);
+            }
+            const result = await manager.removeFromGuardList(acc, addresses);
+            return { op: "remove", result };
+        }
+        case "get": {
+            const result = await manager.getGuardList(acc);
+            return { op: "get", result };
+        }
+        default:
+            throw new MessengerError(MessengerErrorCode.INVALID_INPUT, `guardlist.unknown op: ${request}`);
     }
-    default:
-      throw new MessengerError(
-        MessengerErrorCode.INVALID_INPUT,
-        `guardlist.unknown op: ${request}`
-      );
-  }
 }
-export {
-  blacklist,
-  extract_zip_messages,
-  friendslist,
-  generate_wts,
-  getMessengerManager,
-  guardlist,
-  proof_message,
-  send_file,
-  send_message,
-  sign_wts,
-  verify_wts,
-  watch_conversations,
-  watch_messages,
-  wts2html
-};
+//# sourceMappingURL=messenger-api.js.map