@antseed/node 0.2.128 → 0.2.130

package/dist/node.js

@@ -7,6 +7,7 @@ import { TrustSignalsClient } from './payments/evm/trust-signals-client.js';
 import { loadOrCreateIdentity } from "./p2p/identity.js";
 import { peerIdToAddress } from "./types/peer.js";
 import { MeteringStorage } from "./metering/storage.js";
+import { ResourceOwnershipStore } from "./resources/resource-ownership-store.js";
 import { ReceiptGenerator } from "./metering/receipt-generator.js";
 import { SellerSessionTracker, } from "./metering/seller-session-tracker.js";
 import { ConnectionState } from "./types/connection.js";
@@ -30,6 +31,7 @@ import { FrameDecoder, encodeFrame } from "./p2p/message-protocol.js";
 import { KeepaliveManager, buildPongPayload } from "./p2p/keepalive.js";
 import { MessageType } from "./types/protocol.js";
 import { NatTraversal } from "./p2p/nat-traversal.js";
+import { getOrOpenOutboundConnection } from "./p2p/outbound-connection.js";
 import { signUtf8 } from "./p2p/identity.js";
 import { BalanceManager, DepositsClient, ChannelsClient, FreeUsageClient, BuyerFreeUsageManager, SellerFreeUsageManager, SellerFreeTierLimiter, StakingClient, ChannelStore, CHANNEL_KIND, CHANNEL_ROLE, CHANNEL_STATUS, } from "./payments/index.js";
 import { debugLog, debugWarn } from "./utils/debug.js";
@@ -46,6 +48,7 @@ import { SellerRequestHandler } from "./seller-request-handler.js";
 import { BuyerRequestHandler, } from "./buyer-request-handler.js";
 import { buildSybilContext, computeOnChainSybilRisk, } from "./reputation/sybil-risk.js";
 import { buyerFault } from "./errors.js";
+import { BuyerIdentityContext, DEFAULT_BUYER_IDENTITY, isValidBuyerIdentityName, } from "./buyer-identity-context.js";
 /** Store the trust score on the peer; leaves the fields untouched when the peer is unscored. */
 function applyTrust(peer) {
     const trust = computeTrustScore(peer);
@@ -92,6 +95,7 @@ export class AntseedNode extends EventEmitter {
     _keepalives = new Map();
     _nat = null;
     _metering = null;
+    _resourceOwnership = null;
     _receiptGenerator = null;
     _balanceManager = null;
     _depositsClient = null;
@@ -109,6 +113,8 @@ export class AntseedNode extends EventEmitter {
     _verificationMuxes = new Map();
     _sweepMuxes = new Map();
     _peerCapabilities = new Map();
+    /** Buyer identities beyond the default one, by name. */
+    _buyerIdentities = new Map();
     /** Seller-side deposit-sweep relayer (initialized when configured + enabled). */
     _depositRelayer = null;
     /** Seller-side request handler (provider matching, execution, load tracking). */
@@ -293,6 +299,11 @@ export class AntseedNode extends EventEmitter {
         if (!this._started) {
             return;
         }
+        const extraIdentities = [...this._buyerIdentities.values()];
+        this._buyerIdentities.clear();
+        await Promise.all(extraIdentities.map((context) => context.stop().catch((err) => {
+            debugWarn(`[Node] Failed to stop buyer identity "${context.name}": ${err instanceof Error ? err.message : err}`);
+        })));
         // Give in-transit NeedAuth messages time to arrive on the DataChannel,
         // then wait for their handlers to finish. This ensures the seller has a
         // valid SpendingAuth for settlement before we close the connection.
@@ -371,6 +382,15 @@ export class AntseedNode extends EventEmitter {
             }
             this._metering = null;
         }
+        if (this._resourceOwnership) {
+            try {
+                this._resourceOwnership.close();
+            }
+            catch {
+                // ignore close errors
+            }
+            this._resourceOwnership = null;
+        }
         if (this._verificationStorage) {
             try {
                 this._verificationStorage.close();
@@ -798,7 +818,12 @@ export class AntseedNode extends EventEmitter {
      * Eagerly open a connection to a peer and wire up the mux.
      * Subsequent sendRequest / sendRequestStream calls will reuse this connection.
      */
-    async connectToPeer(peer) {
+    async connectToPeer(peer, buyerIdentity) {
+        const context = this._buyerContext(buyerIdentity);
+        if (context) {
+            await context.connect(peer);
+            return;
+        }
         const conn = await this._getOrCreateConnection(peer);
         this._getOrCreateMux(peer.peerId, conn);
         const negotiator = this._buyerNegotiator;
@@ -821,7 +846,9 @@ export class AntseedNode extends EventEmitter {
      * whichever cumulative is higher.
      */
     async requestChannelClose(sellerPeerId, opts = {}) {
-        const negotiator = this._buyerNegotiator;
+        const { buyerIdentity, ...closeOptions } = opts;
+        const context = this._buyerContext(buyerIdentity);
+        const negotiator = context ? context.negotiator : this._buyerNegotiator;
         if (!negotiator) {
             throw new Error('Buyer payments are not configured on this node');
         }
@@ -829,19 +856,7 @@ export class AntseedNode extends EventEmitter {
             throw new Error('Node not started');
         }
         const peerId = sellerPeerId;
-        let conn = this._connectionManager.getConnection(peerId);
-        if (!conn || (conn.state !== ConnectionState.Open && conn.state !== ConnectionState.Authenticated)) {
-            const peer = await this.findPeer(sellerPeerId);
-            if (!peer) {
-                throw new Error(`Seller ${sellerPeerId.slice(0, 12)}... is not connected and could not be found on the network. ` +
-                    `A cooperative close needs the seller online — otherwise use the on-chain request-close flow.`);
-            }
-            await this.connectToPeer(peer);
-            conn = this._connectionManager.getConnection(peer.peerId);
-            if (!conn) {
-                throw new Error(`Failed to establish a connection to seller ${sellerPeerId.slice(0, 12)}...`);
-            }
-        }
+        const conn = await this._sellerConnectionForClose(peerId, context);
         // A seller that predates this feature drops the 0x59 frame silently, so
         // without this the buyer would wait out the full 60s response timeout and
         // get a vague "did not answer". Note the capability must come from the
@@ -856,15 +871,41 @@ export class AntseedNode extends EventEmitter {
                 `(missing ${CONNECTION_CAPABILITY_COOPERATIVE_CLOSE_V1}). ` +
                 `Use the on-chain request-close flow instead.`);
         }
-        return negotiator.requestChannelClose(peerId, conn, opts);
+        return negotiator.requestChannelClose(peerId, conn, closeOptions);
+    }
+    /** The paying identity's open connection to a seller, reconnecting when needed. */
+    async _sellerConnectionForClose(peerId, context) {
+        if (context) {
+            const live = context.liveConnection(peerId);
+            if (live)
+                return live;
+        }
+        else {
+            const live = this._connectionManager.getConnection(peerId);
+            if (live && (live.state === ConnectionState.Open || live.state === ConnectionState.Authenticated))
+                return live;
+        }
+        const peer = await this.findPeer(peerId);
+        if (!peer) {
+            throw new Error(`Seller ${peerId.slice(0, 12)}... is not connected and could not be found on the network. ` +
+                `A cooperative close needs the seller online — otherwise use the on-chain request-close flow.`);
+        }
+        if (context)
+            return context.connect(peer);
+        await this.connectToPeer(peer);
+        const conn = this._connectionManager.getConnection(peer.peerId);
+        if (!conn) {
+            throw new Error(`Failed to establish a connection to seller ${peerId.slice(0, 12)}...`);
+        }
+        return conn;
     }
     /**
      * Query session stats for a specific seller peer.
      * Combines channel store data (authoritative payment/session info) with
      * metering events when available.
      */
-    getMeteringStatsByPeer(sellerPeerId) {
-        const buyerAddress = this._identity?.wallet.address ?? null;
+    getMeteringStatsByPeer(sellerPeerId, buyerIdentity) {
+        const { address: buyerAddress, paymentManager } = this._buyerAccount(buyerIdentity);
         const channel = (buyerAddress != null)
             ? (this._channelStore?.getActiveChannelByPeerAndBuyer(sellerPeerId, CHANNEL_ROLE.BUYER, buyerAddress)
                 ?? this._channelStore?.getLatestChannelByPeerAndBuyer(sellerPeerId, CHANNEL_ROLE.BUYER, buyerAddress))
@@ -875,7 +916,7 @@ export class AntseedNode extends EventEmitter {
             ? this._channelStore?.getTotalsByPeerAndBuyer(sellerPeerId, CHANNEL_ROLE.BUYER, buyerAddress)
             : this._channelStore?.getTotalsByPeer(sellerPeerId, CHANNEL_ROLE.BUYER)
                 ?? null;
-        const liveTotals = this._buyerPaymentManager?.getResponseTokenTotals(sellerPeerId);
+        const liveTotals = paymentManager?.getResponseTokenTotals(sellerPeerId);
         const inputTokens = (liveTotals != null) ? liveTotals.input
             : (channel != null) ? Number(channel.tokensDelivered || '0')
                 : 0;
@@ -887,7 +928,7 @@ export class AntseedNode extends EventEmitter {
             inputTokens,
             outputTokens,
             totalTokens: inputTokens + outputTokens,
-            reservedUsdc: this._buyerPaymentManager?.getReserveCeiling(sellerPeerId)?.toString() ?? null,
+            reservedUsdc: paymentManager?.getReserveCeiling(sellerPeerId)?.toString() ?? null,
             consumedUsdc: channel?.authMax ?? null,
             channelStatus: channel?.status ?? null,
             reservedAt: channel?.reservedAt ?? null,
@@ -906,17 +947,20 @@ export class AntseedNode extends EventEmitter {
      * Combines the persistent ChannelStore (session metadata + cumulative signed
      * amount) with the in-memory reserve ceiling tracked by BuyerPaymentManager.
      *
-     * The ReserveAuth ceiling lives only in the payment manager. When it is not
-     * available, return null rather than substituting the unrelated cumulative
-     * SpendingAuth amount stored in authMax.
+     * One-off channels use their own persisted confirmed reserve, never the
+     * seller's session reserve. Unavailable reserves are null rather than the
+     * unrelated cumulative SpendingAuth amount stored in authMax.
      */
-    getActiveBuyerChannels() {
-        const buyerAddress = this._identity?.wallet.address ?? null;
+    getActiveBuyerChannels(buyerIdentity) {
+        const { address: buyerAddress, paymentManager } = this._buyerAccount(buyerIdentity);
         if (!buyerAddress || !this._channelStore)
             return [];
-        const stored = this._channelStore.getActiveChannelsByBuyer(CHANNEL_ROLE.BUYER, buyerAddress);
+        const stored = this._channelStore.getBuyerPaymentChannels(buyerAddress)
+            .filter((channel) => channel.status === CHANNEL_STATUS.ACTIVE);
         return stored.map((c) => {
-            const liveReserve = this._buyerPaymentManager?.getReserveCeiling(c.peerId);
+            const liveReserve = c.channelKind === CHANNEL_KIND.ONE_OFF
+                ? BigInt(c.confirmedReserveAmount ?? '0')
+                : paymentManager?.getReserveCeiling(c.peerId);
             return {
                 channelId: c.sessionId,
                 peerId: c.peerId,
@@ -938,14 +982,16 @@ export class AntseedNode extends EventEmitter {
         });
     }
     /** All buyer channels (any local status), used for history views. */
-    getAllBuyerChannels() {
-        const buyerAddress = this._identity?.wallet.address ?? null;
+    getAllBuyerChannels(buyerIdentity) {
+        const { address: buyerAddress, paymentManager } = this._buyerAccount(buyerIdentity);
         if (!buyerAddress || !this._channelStore)
             return [];
-        const stored = this._channelStore.getAllChannelsByBuyer('buyer', buyerAddress);
+        const stored = this._channelStore.getBuyerPaymentChannels(buyerAddress);
         return stored.map((c) => {
             const liveReserve = c.status === CHANNEL_STATUS.ACTIVE
-                ? this._buyerPaymentManager?.getReserveCeiling(c.peerId)
+                ? c.channelKind === CHANNEL_KIND.ONE_OFF
+                    ? BigInt(c.confirmedReserveAmount ?? '0')
+                    : paymentManager?.getReserveCeiling(c.peerId)
                 : null;
             return {
                 channelId: c.sessionId,
@@ -973,8 +1019,8 @@ export class AntseedNode extends EventEmitter {
      * columns are semantically overloaded vs seller rows. Set in
      * buyer-payment-manager.recordAndPersistTokens.
      */
-    getBuyerUsageTotals() {
-        const buyerAddress = this._identity?.wallet.address ?? null;
+    getBuyerUsageTotals(buyerIdentity) {
+        const { address: buyerAddress } = this._buyerAccount(buyerIdentity);
         if (!buyerAddress || !this._channelStore)
             return EMPTY_BUYER_USAGE;
         // Paid channels plus free-usage sessions — both carry real traffic and
@@ -1027,6 +1073,9 @@ export class AntseedNode extends EventEmitter {
             inputTokens: s.inputTokens,
             cachedInputTokens: s.cachedInputTokens,
             outputTokens: s.outputTokens,
+            outputImages: s.outputImages,
+            videoGenerations: s.videoGenerations,
+            videoSeconds: s.videoSeconds,
             requestCount: s.requestCount,
         }));
         return {
@@ -1041,14 +1090,135 @@ export class AntseedNode extends EventEmitter {
         };
     }
     async sendRequest(peer, req, options) {
-        if (!this._buyerHandler)
-            throw buyerFault("Node not started or not in buyer mode", "node-not-started");
-        return this._buyerHandler.sendRequest(peer, req, undefined, options);
+        return this._dispatchBuyerRequest(peer, req, undefined, options);
     }
     async sendRequestStream(peer, req, callbacks, options) {
+        return this._dispatchBuyerRequest(peer, req, callbacks, options);
+    }
+    _dispatchBuyerRequest(peer, req, callbacks, options) {
         if (!this._buyerHandler)
             throw buyerFault("Node not started or not in buyer mode", "node-not-started");
-        return this._buyerHandler.sendRequest(peer, req, callbacks, options);
+        const { buyerIdentity, ...executionOptions } = options ?? {};
+        const context = this._buyerContext(buyerIdentity);
+        return context
+            ? context.sendRequest(peer, req, callbacks, executionOptions)
+            : this._buyerHandler.sendRequest(peer, req, callbacks, executionOptions);
+    }
+    /** Buyer payment settings shared by every identity; null when payments are off. */
+    _buyerPaymentConfig(paymentsDir) {
+        const payments = this._config.payments;
+        if (!payments?.enabled || !payments.rpcUrl || !payments.depositsAddress || !payments.channelsAddress || !payments.usdcAddress) {
+            return null;
+        }
+        return {
+            rpcUrl: payments.rpcUrl,
+            ...(payments.fallbackRpcUrls ? { fallbackRpcUrls: payments.fallbackRpcUrls } : {}),
+            depositsContractAddress: payments.depositsAddress,
+            channelsContractAddress: payments.channelsAddress,
+            usdcAddress: payments.usdcAddress,
+            identityRegistryAddress: payments.identityRegistryAddress ?? '',
+            chainId: payments.chainId ?? 8453,
+            defaultAuthDurationSecs: payments.defaultAuthDurationSecs ?? 900, // 15 min — seller must call reserve() promptly
+            maxPerRequestUsdc: BigInt(payments.maxPerRequestUsdc ?? "500000"), // $0.50 default — covers most LLM requests
+            maxReserveAmountUsdc: BigInt(payments.maxReserveAmountUsdc ?? "1000000"), // $1.00 default per session (matches FIRST_SIGN_CAP)
+            maxVideoRequestUsdc: BigInt(payments.maxVideoRequestUsdc ?? "5000000"), // $5.00 default per video
+            disableMetadataV2Services: payments.disableMetadataV2Services ?? false,
+            dataDir: paymentsDir,
+        };
+    }
+    /**
+     * Let this buyer node also pay as another wallet. The identity reuses the
+     * node's discovery, routing and chain clients; sellers see it as its own
+     * buyer with its own connections, channels and deposits. Select it per
+     * request with `buyerIdentity`.
+     */
+    async addBuyerIdentity(name, identity) {
+        if (!this._started || !this._buyerHandler || !this._identity) {
+            throw new Error("Buyer identities can only be added to a started buyer node");
+        }
+        if (!isValidBuyerIdentityName(name) || name === DEFAULT_BUYER_IDENTITY) {
+            throw new Error(`Invalid buyer identity name "${name}"`);
+        }
+        if (this._buyerIdentities.has(name)) {
+            throw new Error(`Buyer identity "${name}" is already loaded`);
+        }
+        const address = identity.wallet.address.toLowerCase();
+        if (this.buyerIdentities().some((entry) => entry.address.toLowerCase() === address)) {
+            throw new Error(`Wallet ${identity.wallet.address} is already loaded as another buyer identity`);
+        }
+        const payments = this._config.payments;
+        const dataDir = this._config.dataDir ?? join(homedir(), ".antseed");
+        const context = await BuyerIdentityContext.create({
+            name,
+            identity,
+            paymentConfig: this._buyerPaymentConfig(join(dataDir, "payments")),
+            freeUsage: this._freeUsageClient && payments?.freeUsageAddress
+                ? {
+                    chainId: payments.chainId ?? 8453,
+                    freeUsageContractAddress: payments.freeUsageAddress,
+                    defaultAuthDurationSecs: payments.defaultAuthDurationSecs ?? 3600,
+                    disableMetadataV2Services: payments.disableMetadataV2Services ?? false,
+                }
+                : null,
+            requestHandler: {
+                requestTimeoutMs: this._config.requestTimeoutMs,
+                maxStreamBufferBytes: this._config.maxStreamBufferBytes,
+                maxStreamDurationMs: this._config.maxStreamDurationMs,
+            },
+            maxUploadBodyBytes: this._config.maxUploadBodyBytes,
+            requireSecureTransport: this._config.requireSecureTransport,
+            shared: {
+                channelStore: this._channelStore,
+                depositsClient: this._depositsClient,
+                channelsClient: this._channelsClient,
+                sellerAddressResolver: this._sellerAddressResolver,
+                verificationStorage: this._verificationStorage,
+                verificationSampler: this._verificationSampler,
+                peerCapabilities: this._peerCapabilities,
+                isChainReachable: () => this._rpcHealth?.reachable ?? true,
+                onChainReadFailure: () => this._rpcHealth?.reportFailure(),
+            },
+            emit: (event, payload) => { this.emit(event, payload); },
+        });
+        this._buyerIdentities.set(name, context);
+        debugLog(`[Node] Buyer identity "${name}" loaded (wallet=${identity.wallet.address.slice(0, 10)}...)`);
+        return { name, address: identity.wallet.address };
+    }
+    /** Close an identity's connections, letting sellers settle what they already served. */
+    async removeBuyerIdentity(name) {
+        const context = this._buyerIdentities.get(name);
+        if (!context)
+            return;
+        this._buyerIdentities.delete(name);
+        await context.stop();
+    }
+    hasBuyerIdentity(name) {
+        return name === DEFAULT_BUYER_IDENTITY ? this._identity !== null : this._buyerIdentities.has(name);
+    }
+    /** Every identity this node can pay as, the default one first. */
+    buyerIdentities() {
+        const identities = [];
+        if (this._identity)
+            identities.push({ name: DEFAULT_BUYER_IDENTITY, address: this._identity.wallet.address });
+        for (const context of this._buyerIdentities.values()) {
+            identities.push({ name: context.name, address: context.address });
+        }
+        return identities;
+    }
+    _buyerContext(name) {
+        if (name === undefined || name === DEFAULT_BUYER_IDENTITY)
+            return null;
+        const context = this._buyerIdentities.get(name);
+        if (!context)
+            throw buyerFault(`Unknown buyer identity "${name}"`, "invalid-request");
+        return context;
+    }
+    /** Wallet address and payment manager behind an identity name. */
+    _buyerAccount(name) {
+        const context = this._buyerContext(name);
+        if (context)
+            return { address: context.address, paymentManager: context.paymentManager };
+        return { address: this._identity?.wallet.address ?? null, paymentManager: this._buyerPaymentManager };
     }
     _createDHTConfig(port, bootstrapNodes) {
         return {
@@ -1135,7 +1305,10 @@ export class AntseedNode extends EventEmitter {
                 this._muxes.get(peerId)?.abortPendingUploads();
                 this._muxes.delete(peerId);
                 this._paymentMuxes.delete(peerId);
-                this._peerCapabilities.delete(peerId);
+                // Other buyer identities share this map; keep it while one is still connected.
+                if (![...this._buyerIdentities.values()].some((context) => context.liveConnection(peerId))) {
+                    this._peerCapabilities.delete(peerId);
+                }
                 this._verificationMuxes.get(peerId)?.close();
                 this._verificationMuxes.delete(peerId);
                 this._sweepMuxes.delete(peerId);
@@ -1191,6 +1364,12 @@ export class AntseedNode extends EventEmitter {
         catch (err) {
             debugWarn(`[Node] Metering storage unavailable: ${err instanceof Error ? err.message : err}`);
         }
+        try {
+            this._resourceOwnership = new ResourceOwnershipStore(join(dataDir, "metering.db"));
+        }
+        catch (err) {
+            debugWarn(`[Node] Resource ownership storage unavailable; video services will be refused: ${err instanceof Error ? err.message : err}`);
+        }
         if (this._metering) {
             this._receiptGenerator = new ReceiptGenerator({
                 peerId: identity.peerId,
@@ -1326,6 +1505,7 @@ export class AntseedNode extends EventEmitter {
             channelsClient: this._channelsClient,
             announcer: this._announcer,
             maxUploadBodyBytes: this._config.maxUploadBodyBytes,
+            resourceOwnershipStore: this._resourceOwnership,
             ...(this._config.payments?.reserveEstimateOverdraftUsdc != null
                 ? { reserveEstimateOverdraftUsdc: BigInt(this._config.payments.reserveEstimateOverdraftUsdc) }
                 : {}),
@@ -1386,24 +1566,11 @@ export class AntseedNode extends EventEmitter {
                 }
             }
             if (this._channelStore) {
-                const buyerPaymentConfig = {
-                    rpcUrl: payments.rpcUrl,
-                    ...(payments.fallbackRpcUrls ? { fallbackRpcUrls: payments.fallbackRpcUrls } : {}),
-                    depositsContractAddress: payments.depositsAddress,
-                    channelsContractAddress: payments.channelsAddress,
-                    usdcAddress: payments.usdcAddress,
-                    identityRegistryAddress: payments.identityRegistryAddress ?? '',
-                    chainId: payments.chainId ?? 8453,
-                    defaultAuthDurationSecs: payments.defaultAuthDurationSecs ?? 900, // 15 min — seller must call reserve() promptly
-                    maxPerRequestUsdc: BigInt(payments.maxPerRequestUsdc ?? "500000"), // $0.50 default — covers most LLM requests
-                    maxReserveAmountUsdc: BigInt(payments.maxReserveAmountUsdc ?? "1000000"), // $1.00 default per session (matches FIRST_SIGN_CAP)
-                    disableMetadataV2Services: payments.disableMetadataV2Services ?? false,
-                    dataDir: paymentsDir,
-                };
+                const buyerPaymentConfig = this._buyerPaymentConfig(paymentsDir);
                 this._buyerPaymentManager = new BuyerPaymentManager(identity, buyerPaymentConfig, this._channelStore, this._sellerAddressResolver ?? undefined);
                 // Re-emit per-request spend so callers can attribute it to whatever
                 // issued the request — the node only knows the seller and requestId.
-                this._buyerPaymentManager.setSpendListener((event) => this.emit('payment:spend', event));
+                this._buyerPaymentManager.setSpendListener((event) => this.emit('payment:spend', { ...event, buyerIdentity: DEFAULT_BUYER_IDENTITY }));
                 debugLog(`[Node] Buyer payment manager initialized (wallet=${identity.wallet.address.slice(0, 10)}... chainId=${buyerPaymentConfig.chainId} deposits=${buyerPaymentConfig.depositsContractAddress.slice(0, 10)}...)`);
                 // Create negotiator that wraps the BPM with 402 handling and per-request auth
                 this._buyerNegotiator = new BuyerPaymentNegotiator(identity, this._buyerPaymentManager, this._depositsClient, this._channelsClient, this._channelStore, {
@@ -1765,81 +1932,7 @@ export class AntseedNode extends EventEmitter {
         if (!this._connectionManager || !this._identity) {
             throw buyerFault("Node not started", "node-not-started");
         }
-        const existing = this._connectionManager.getConnection(peer.peerId);
-        const peerCapabilities = new Set(peer.capabilities ?? peer.metadata?.capabilities ?? []);
-        this._peerCapabilities.set(peer.peerId, peerCapabilities);
-        let endpointChanged = false;
-        // Check if the peer's endpoint has changed (e.g. IP rotation).
-        // Only applies to outbound connections where we registered the endpoint;
-        // inbound connections (peer connected to us) have no registered endpoint
-        // and are not subject to pinned-peer routing.
-        if (existing && peer.publicAddress) {
-            const currentEndpoint = ConnectionManager.resolvePeerEndpoint(peer.peerId);
-            const { host: newHost, port: newPort } = parsePeerAddress(peer.publicAddress);
-            if (currentEndpoint && (currentEndpoint.host !== newHost || currentEndpoint.port !== newPort)) {
-                debugLog(`[Node] Peer ${peer.peerId.slice(0, 12)}... endpoint changed from ${currentEndpoint.host}:${currentEndpoint.port} to ${newHost}:${newPort}, reconnecting`);
-                existing.close();
-                this._peerCapabilities.set(peer.peerId, peerCapabilities);
-                endpointChanged = true;
-            }
-        }
-        if (existing && !endpointChanged &&
-            existing.state !== ConnectionState.Closed &&
-            existing.state !== ConnectionState.Failed) {
-            debugLog(`[Node] Reusing existing connection to ${peer.peerId.slice(0, 12)}... (state=${existing.state})`);
-            // If still connecting, wait for it to reach Open or Authenticated
-            if (existing.state === ConnectionState.Connecting) {
-                debugLog(`[Node] Waiting for connection to open...`);
-                await new Promise((resolve, reject) => {
-                    const onState = (state) => {
-                        if (state === ConnectionState.Open || state === ConnectionState.Authenticated) {
-                            existing.off("stateChange", onState);
-                            resolve();
-                        }
-                        else if (state === ConnectionState.Failed || state === ConnectionState.Closed) {
-                            existing.off("stateChange", onState);
-                            reject(new Error(`Connection to ${peer.peerId} failed`));
-                        }
-                    };
-                    existing.on("stateChange", onState);
-                });
-            }
-            return existing;
-        }
-        // Register the peer endpoint so ConnectionManager can resolve it
-        if (peer.publicAddress) {
-            const { host, port } = parsePeerAddress(peer.publicAddress);
-            this._connectionManager.registerPeerEndpoint(peer.peerId, { host, port });
-            debugLog(`[Node] Connecting to ${peer.peerId.slice(0, 12)}... at ${host}:${port}`);
-        }
-        else {
-            debugWarn(`[Node] Peer ${peer.peerId.slice(0, 12)}... has no public address`);
-        }
-        const connConfig = {
-            remotePeerId: peer.peerId,
-            isInitiator: true,
-            remoteCapabilities: [...peerCapabilities],
-        };
-        const conn = this._connectionManager.createConnection(connConfig);
-        // Wait for connection to open
-        await new Promise((resolve, reject) => {
-            const onState = (state) => {
-                debugLog(`[Node] Connection state: ${state}`);
-                if (state === ConnectionState.Open || state === ConnectionState.Authenticated) {
-                    conn.off("stateChange", onState);
-                    resolve();
-                }
-                else if (state === ConnectionState.Failed || state === ConnectionState.Closed) {
-                    conn.off("stateChange", onState);
-                    reject(new Error(`Connection to ${peer.peerId} failed`));
-                }
-            };
-            conn.on("stateChange", onState);
-        });
-        debugLog(`[Node] Connected to ${peer.peerId.slice(0, 12)}... via ${conn.transportDescription}`);
-        this._peerCapabilities.set(peer.peerId, peerCapabilities);
-        this._wireConnection(conn, peer.peerId);
-        return conn;
+        return getOrOpenOutboundConnection(this._connectionManager, peer, this._peerCapabilities, (conn) => this._wireConnection(conn, peer.peerId));
     }
     _getOrCreateMux(peerId, conn) {
         const existing = this._muxes.get(peerId);
@@ -2135,10 +2228,6 @@ export class AntseedNode extends EventEmitter {
             && cachedPrice === 0;
     }
 }
-function parsePeerAddress(address) {
-    const parts = address.split(":");
-    return { host: parts[0], port: parseInt(parts[1] ?? "6882", 10) };
-}
 /**
  * Predicate used by `discoverPeers(service)` to filter the enumerated peer
  * list against an optional service hint. Matches case-insensitively against