@antseed/cli 0.1.179 → 0.1.180

package/dist/gateway/bundle.d.ts

@@ -0,0 +1,127 @@
+import { type BuyerAddressBook } from './services/wallet-address.js';
+import { type ConsoleLocation } from './console-location.js';
+/**
+ * A password-encrypted copy of a gateway's state, for moving it to another
+ * machine (`antseed gateway export` / `import`).
+ *
+ * File layout:
+ *   "ANTSEED-GATEWAY-BUNDLE 1\n"  header JSON + "\n"  ciphertext  16-byte GCM tag
+ * The header (KDF parameters, salt, IV) is authenticated as AAD. The key is
+ * scrypt(password, salt). The plaintext is a gzipped sequence of entries,
+ * each `u32 header length | header JSON {path, size, sha256} | bytes`, and
+ * every entry's SHA-256 is checked again on import.
+ */
+export declare const BUNDLE_MAGIC = "ANTSEED-GATEWAY-BUNDLE 1\n";
+export declare const MIN_PASSWORD_LENGTH = 10;
+export interface BundleManifest {
+    format: 'antseed-gateway-bundle';
+    version: 1;
+    createdAt: string;
+    cliVersion: string;
+    /** The console location the source gateway saved; tells import whether passkeys can keep working. */
+    consoleLocation: ConsoleLocation | null;
+    files: string[];
+}
+export interface BundleSummary {
+    workspaces: Array<{
+        id: string;
+        name: string;
+        wallet: string;
+        address: string | null;
+    }>;
+    activeKeys: number;
+    members: Array<{
+        label: string;
+        email: string | null;
+        orgRole: string;
+        status: string;
+    }>;
+    wallets: Array<{
+        name: string;
+        address: string | null;
+        note?: string;
+    }>;
+    passkeys: number;
+}
+/** A consistent copy of a live SQLite database (other processes may keep writing). */
+export declare function snapshotSqlite(source: string, target: string): void;
+/** True when something accepts TCP connections on 127.0.0.1:port. */
+export declare function portInUse(port: number, timeoutMs?: number): Promise<boolean>;
+/** The buyer port a config file sets (8377 by default). */
+export declare function configuredBuyerPort(configPath: string): number;
+/** Only these paths may come out of a bundle; anything else is refused. */
+export declare function allowedBundlePath(path: string): boolean;
+export interface ExportOptions {
+    dataDir: string;
+    configPath: string;
+    outFile: string;
+    password: string;
+    /** Replace an existing file at outFile. */
+    force?: boolean;
+    cliVersion: string;
+    now?: () => number;
+    /** KDF cost override, for tests only. */
+    scryptParams?: {
+        N: number;
+        r: number;
+        p: number;
+    };
+    /**
+     * The running buyer's identity → address. A wallet key that is not the one
+     * the buyer pays from is refused rather than exported.
+     */
+    buyerAddresses?: BuyerAddressBook;
+}
+export interface ExportResult {
+    outFile: string;
+    bytes: number;
+    files: string[];
+    warnings: string[];
+    summary: BundleSummary;
+}
+/**
+ * Writes the encrypted bundle. Databases are copied with `VACUUM INTO`, a
+ * consistent snapshot even while the gateway and buyer keep writing.
+ */
+export declare function exportGatewayBundle(options: ExportOptions): Promise<ExportResult>;
+export interface ImportOptions {
+    bundleFile: string;
+    dataDir: string;
+    configPath: string;
+    password: string;
+    /** Back up and replace an existing data dir. */
+    force?: boolean;
+    /** Origin the console will be reached at on this machine; null for localhost only. */
+    publicUrl?: string | null;
+    /** Gateway port on this machine (default: what the bundle had, else 8379). */
+    port?: number;
+    now?: () => number;
+}
+export interface ImportResult {
+    manifest: BundleManifest;
+    /** Where a replaced data dir (with --force) and config were moved. */
+    backups: string[];
+    summary: BundleSummary;
+    sessionsCleared: number;
+    /** Passkeys were created for another domain and will not work here. */
+    passkeysStranded: boolean;
+    previousOrigin: string | null;
+    newOrigin: string;
+}
+export declare class BundleError extends Error {
+}
+/** The data dir already holds a gateway or a wallet, which an import would replace. */
+export declare function dataDirInUse(dataDir: string): string[];
+export declare function importGatewayBundle(options: ImportOptions): Promise<ImportResult>;
+/**
+ * Workspaces, keys, members and wallet addresses of a data dir; never a
+ * secret. `identitySource` reads wallet keys from another dir: the live one
+ * during export, whose `keyFrom` wallets resolve there and whose default
+ * wallet is the buyer's (ANTSEED_IDENTITY_HEX first, as the bundle carries
+ * it). Without it, the default wallet is the dir's own identity.key, not a
+ * key this process took from its environment.
+ */
+export declare function summarizeDataDir(dataDir: string, options?: {
+    identitySource?: string;
+}): Promise<BundleSummary>;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/gateway/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/gateway/bundle.ts"],"names":[],"mappings":"AAaA,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACjF,OAAO,EAAiD,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAI3G;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,+BAA+B,CAAA;AAIxD,eAAO,MAAM,mBAAmB,KAAK,CAAA;AAqBrC,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,wBAAwB,CAAA;IAChC,OAAO,EAAE,CAAC,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,qGAAqG;IACrG,eAAe,EAAE,eAAe,GAAG,IAAI,CAAA;IACvC,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IACvF,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvE,QAAQ,EAAE,MAAM,CAAA;CACjB;AA2BD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAUnE;AAED,qEAAqE;AACrE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQzE;AAWD,2DAA2D;AAC3D,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI9D;AAoBD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKvD;AAID,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,yCAAyC;IACzC,YAAY,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD;;;OAGG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAA;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,OAAO,EAAE,aAAa,CAAA;CACvB;AAqBD;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAiHvF;AA6BD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,sFAAsF;IACtF,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAA;IACxB,sEAAsE;IACtE,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,aAAa,CAAA;IACtB,eAAe,EAAE,MAAM,CAAA;IACvB,uEAAuE;IACvE,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAuGzC,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAKtD;AAwCD,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAuFvF;AAQD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CA2BzH"}