@drakkar.software/octobot-client 0.4.0

package/dist/transport/rendezvous.d.ts

@@ -0,0 +1,116 @@
+import { StarfishClient } from '@drakkar.software/starfish-client';
+/** Storage path for a device-code pairing exchange — must match the
+ *  `joinsessions` collection's `storagePath` template
+ *  (`_pairing/session/{code}`, defined in
+ *  `Infra/sync/server/drakkar_sync/apps/dk_spaces/collections.py`). ONE
+ *  address serves BOTH phases of the exchange: the website's discovery
+ *  "request" doc, and the phone's delivery "grant" doc that later overwrites
+ *  it — keyed throughout by the same short human-typeable `code` (see
+ *  `client/pairing/pairingRequest.ts` and `pairingGrantExchange.ts` for how
+ *  the two phases are told apart on the wire). Replaces the retired
+ *  two-collection, two-address design (`pairingrequests`/`pairingsnapshots`,
+ *  a low-entropy code address plus a separate high-entropy session
+ *  address) — that split bought no real confidentiality the grant's own
+ *  sealing didn't already provide, only lifecycle bookkeeping this merge no
+ *  longer needs. */
+export declare function joinSessionPath(code: string): string;
+export interface RendezvousDoc {
+    data: Record<string, unknown>;
+    hash: string;
+}
+/** A cap-less `StarfishClient` against a public rendezvous collection — a
+ *  different namespace/host from the node client `createSyncClient` builds
+ *  (the rendezvous lives on the shared Drakkar sync server, not the user's
+ *  own node), and deliberately carries no `capProvider`: every request is
+ *  anonymous, matching the deployed `joinsessions` collection's `public`
+ *  read/write roles. */
+export declare function createRendezvousClient(opts: {
+    baseUrl: string;
+    namespace: string;
+    fetch?: typeof fetch;
+    timeoutMs?: number;
+}): StarfishClient;
+/** Pull a rendezvous document. Returns `null` when nothing has been
+ *  published to this slot yet — an unwritten collection document pulls with
+ *  `data` as the STRING `"null"` (an observed real node's behavior for the
+ *  standard collection pull path; this rendezvous server is a different,
+ *  not-yet-deployed deployment, so a raw `null` or an empty `{}` are handled
+ *  too rather than assumed away), not a 404 — so a nullish/empty `data` is
+ *  the actual not-found signal here, not a thrown error. */
+export declare function pullRendezvousDoc(client: StarfishClient, path: string): Promise<RendezvousDoc | null>;
+/** Push a rendezvous document against an EXPLICIT `baseHash` — the caller's
+ *  OWN remembered hash from its last successful write to this path, or
+ *  `null` for a genuinely fresh slot nothing has been published to yet.
+ *  Reimplements what `starfish-identities`' `pushPairingBundle` does
+ *  internally, because that helper is hard-typed to a `PairingBundle` shape
+ *  (`{capCert, rootEdPub, wrappedCEKs}`) this package's rendezvous documents
+ *  don't have, and its sibling `fetchPairingBundle` returns `null` for
+ *  anything without a top-level `capCert` — a document shaped like ours
+ *  would never be recognized by it.
+ *
+ *  Deliberately does NOT re-pull and adopt whatever's currently at `path` on
+ *  a conflict (the previous version of this function did exactly that,
+ *  retrying against the server's current hash) — that behavior is what let
+ *  a hostile overwrite of this slot go undetected forever, including by the
+ *  original publisher's own next write, which would silently treat the
+ *  attacker's content as the new legitimate baseline. A `ConflictError` here
+ *  means the document changed since THIS CALLER last wrote it, which the
+ *  caller should treat as "this slot may have been tampered with", not
+ *  retry past. Returns the resulting hash so the caller can remember it for
+ *  its next write.
+ *
+ *  This is still inherently last-write-wins at the slot level, not
+ *  first-writer-wins — a concurrent anonymous writer who wins the race for
+ *  a GENUINELY fresh slot (`baseHash: null`) is indistinguishable from the
+ *  legitimate first writer. The defense against that is the human-typeable
+ *  `code`'s entropy plus the collection's per-IP rate limit, which bound how
+ *  fast an unknown code can be guessed — NOT address secrecy (this
+ *  collection is public-read, so anyone who knows or guesses a code can
+ *  read whatever is currently published there regardless of write history).
+ *  What THIS change adds is detecting tampering on every write AFTER the
+ *  first, which the previous blind-retry behavior could never do because it
+ *  always treated "conflict" as "let me just adopt whatever's there now".
+ *  It does NOT stop a writer who first PULLS the slot (learning its current
+ *  hash, which is public information) and then pushes with that hash as
+ *  `baseHash` — that is a legitimate-looking, non-blind overwrite as far as
+ *  this primitive is concerned; the real protection against that shape of
+ *  attack is `code`-bound `popSig` verification (see
+ *  `identity/pairingRequest.ts`) rejecting any replacement request that
+ *  isn't signed by keys the ORIGINAL requester controls, and the grant
+ *  phase's own `baseHash` CAS against the exact request hash it read. */
+export declare function pushRendezvousDoc(client: StarfishClient, path: string, data: Record<string, unknown>, baseHash: string | null): Promise<{
+    hash: string;
+}>;
+/** Overwrite a slot with an empty document, regardless of its current
+ *  content — the one place blind-overwrite-and-retry semantics are still
+ *  correct: unpair/cleanup must succeed even without a remembered hash
+ *  (e.g. in-memory state was lost across a page reload), and "did someone
+ *  else already overwrite this" isn't a meaningful question when the
+ *  caller's whole intent is "nothing should be published here anymore".
+ *  The deployed `joinsessions` collection's `ttl_ms` is an outer backstop,
+ *  not a substitute for actually clearing on unpair — see the Infra
+ *  collection's doc comment. Because request and grant now share one
+ *  address, clearing this slot clears BOTH the original request and any
+ *  published grant together — there's no way to clear one but keep the
+ *  other.
+ *
+ *  Deliberately pulls the RAW `client.pull()` result here, not
+ *  `pullRendezvousDoc` — that function collapses an existing-but-empty doc
+ *  (`{}`, which is exactly what THIS function itself writes) down to `null`,
+ *  discarding its real hash. Deriving `baseHash` from that collapsed `null`
+ *  would push `baseHash: null` against a slot that DOES have a hash — a
+ *  guaranteed conflict, identically, on every one of the retries below.
+ *  That made clearing an already-cleared slot (a benign double-unpair, or
+ *  the very recovery path this package documents: unpair then re-approve)
+ *  permanently fail. The raw hash exists whether or not the data is
+ *  "empty", so blind-overwrite-and-retry works correctly in every case.
+ *
+ *  Returns the resulting hash — same shape as `pushRendezvousDoc` — so a
+ *  caller that legitimately needs to publish again right after clearing
+ *  (e.g. re-approving the same session) can use it as its next `baseHash`
+ *  instead of `null`, which would otherwise conflict against the very
+ *  document this call just wrote. */
+export declare function clearRendezvousDoc(client: StarfishClient, path: string): Promise<{
+    hash: string;
+}>;
+//# sourceMappingURL=rendezvous.d.ts.map

package/dist/transport/rendezvous.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rendezvous.d.ts","sourceRoot":"","sources":["../../src/transport/rendezvous.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAiB,MAAM,mCAAmC,CAAA;AAOjF;;;;;;;;;;;;;oBAaoB;AACpB,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;wBAKwB;AACxB,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,cAAc,CAMjB;AAED;;;;;;4DAM4D;AAC5D,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAM3G;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yEAuCyE;AACzE,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA4BqC;AACrC,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAYxG"}

package/dist/transport/rendezvous.js

@@ -0,0 +1,139 @@
+import { StarfishClient, ConflictError } from '@drakkar.software/starfish-client';
+import { createTimeoutFetch } from './syncClient.js';
+import { pullPath, pushPath } from '../collections/paths.js';
+import { SYNC_FETCH_TIMEOUT_MS } from '../crypto/wireConstants.js';
+const MAX_PUSH_RETRIES = 3;
+/** Storage path for a device-code pairing exchange — must match the
+ *  `joinsessions` collection's `storagePath` template
+ *  (`_pairing/session/{code}`, defined in
+ *  `Infra/sync/server/drakkar_sync/apps/dk_spaces/collections.py`). ONE
+ *  address serves BOTH phases of the exchange: the website's discovery
+ *  "request" doc, and the phone's delivery "grant" doc that later overwrites
+ *  it — keyed throughout by the same short human-typeable `code` (see
+ *  `client/pairing/pairingRequest.ts` and `pairingGrantExchange.ts` for how
+ *  the two phases are told apart on the wire). Replaces the retired
+ *  two-collection, two-address design (`pairingrequests`/`pairingsnapshots`,
+ *  a low-entropy code address plus a separate high-entropy session
+ *  address) — that split bought no real confidentiality the grant's own
+ *  sealing didn't already provide, only lifecycle bookkeeping this merge no
+ *  longer needs. */
+export function joinSessionPath(code) {
+    return `_pairing/session/${encodeURIComponent(code)}`;
+}
+/** A cap-less `StarfishClient` against a public rendezvous collection — a
+ *  different namespace/host from the node client `createSyncClient` builds
+ *  (the rendezvous lives on the shared Drakkar sync server, not the user's
+ *  own node), and deliberately carries no `capProvider`: every request is
+ *  anonymous, matching the deployed `joinsessions` collection's `public`
+ *  read/write roles. */
+export function createRendezvousClient(opts) {
+    return new StarfishClient({
+        baseUrl: opts.baseUrl,
+        namespace: opts.namespace,
+        fetch: createTimeoutFetch(opts.timeoutMs ?? SYNC_FETCH_TIMEOUT_MS, opts.fetch ?? globalThis.fetch),
+    });
+}
+/** Pull a rendezvous document. Returns `null` when nothing has been
+ *  published to this slot yet — an unwritten collection document pulls with
+ *  `data` as the STRING `"null"` (an observed real node's behavior for the
+ *  standard collection pull path; this rendezvous server is a different,
+ *  not-yet-deployed deployment, so a raw `null` or an empty `{}` are handled
+ *  too rather than assumed away), not a 404 — so a nullish/empty `data` is
+ *  the actual not-found signal here, not a thrown error. */
+export async function pullRendezvousDoc(client, path) {
+    const result = await client.pull(pullPath(path, {}));
+    const parsed = typeof result.data === 'string' ? JSON.parse(result.data) : result.data;
+    if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed))
+        return null;
+    if (Object.keys(parsed).length === 0)
+        return null;
+    return { data: parsed, hash: result.hash };
+}
+/** Push a rendezvous document against an EXPLICIT `baseHash` — the caller's
+ *  OWN remembered hash from its last successful write to this path, or
+ *  `null` for a genuinely fresh slot nothing has been published to yet.
+ *  Reimplements what `starfish-identities`' `pushPairingBundle` does
+ *  internally, because that helper is hard-typed to a `PairingBundle` shape
+ *  (`{capCert, rootEdPub, wrappedCEKs}`) this package's rendezvous documents
+ *  don't have, and its sibling `fetchPairingBundle` returns `null` for
+ *  anything without a top-level `capCert` — a document shaped like ours
+ *  would never be recognized by it.
+ *
+ *  Deliberately does NOT re-pull and adopt whatever's currently at `path` on
+ *  a conflict (the previous version of this function did exactly that,
+ *  retrying against the server's current hash) — that behavior is what let
+ *  a hostile overwrite of this slot go undetected forever, including by the
+ *  original publisher's own next write, which would silently treat the
+ *  attacker's content as the new legitimate baseline. A `ConflictError` here
+ *  means the document changed since THIS CALLER last wrote it, which the
+ *  caller should treat as "this slot may have been tampered with", not
+ *  retry past. Returns the resulting hash so the caller can remember it for
+ *  its next write.
+ *
+ *  This is still inherently last-write-wins at the slot level, not
+ *  first-writer-wins — a concurrent anonymous writer who wins the race for
+ *  a GENUINELY fresh slot (`baseHash: null`) is indistinguishable from the
+ *  legitimate first writer. The defense against that is the human-typeable
+ *  `code`'s entropy plus the collection's per-IP rate limit, which bound how
+ *  fast an unknown code can be guessed — NOT address secrecy (this
+ *  collection is public-read, so anyone who knows or guesses a code can
+ *  read whatever is currently published there regardless of write history).
+ *  What THIS change adds is detecting tampering on every write AFTER the
+ *  first, which the previous blind-retry behavior could never do because it
+ *  always treated "conflict" as "let me just adopt whatever's there now".
+ *  It does NOT stop a writer who first PULLS the slot (learning its current
+ *  hash, which is public information) and then pushes with that hash as
+ *  `baseHash` — that is a legitimate-looking, non-blind overwrite as far as
+ *  this primitive is concerned; the real protection against that shape of
+ *  attack is `code`-bound `popSig` verification (see
+ *  `identity/pairingRequest.ts`) rejecting any replacement request that
+ *  isn't signed by keys the ORIGINAL requester controls, and the grant
+ *  phase's own `baseHash` CAS against the exact request hash it read. */
+export async function pushRendezvousDoc(client, path, data, baseHash) {
+    return client.push(pushPath(path, {}), data, baseHash);
+}
+/** Overwrite a slot with an empty document, regardless of its current
+ *  content — the one place blind-overwrite-and-retry semantics are still
+ *  correct: unpair/cleanup must succeed even without a remembered hash
+ *  (e.g. in-memory state was lost across a page reload), and "did someone
+ *  else already overwrite this" isn't a meaningful question when the
+ *  caller's whole intent is "nothing should be published here anymore".
+ *  The deployed `joinsessions` collection's `ttl_ms` is an outer backstop,
+ *  not a substitute for actually clearing on unpair — see the Infra
+ *  collection's doc comment. Because request and grant now share one
+ *  address, clearing this slot clears BOTH the original request and any
+ *  published grant together — there's no way to clear one but keep the
+ *  other.
+ *
+ *  Deliberately pulls the RAW `client.pull()` result here, not
+ *  `pullRendezvousDoc` — that function collapses an existing-but-empty doc
+ *  (`{}`, which is exactly what THIS function itself writes) down to `null`,
+ *  discarding its real hash. Deriving `baseHash` from that collapsed `null`
+ *  would push `baseHash: null` against a slot that DOES have a hash — a
+ *  guaranteed conflict, identically, on every one of the retries below.
+ *  That made clearing an already-cleared slot (a benign double-unpair, or
+ *  the very recovery path this package documents: unpair then re-approve)
+ *  permanently fail. The raw hash exists whether or not the data is
+ *  "empty", so blind-overwrite-and-retry works correctly in every case.
+ *
+ *  Returns the resulting hash — same shape as `pushRendezvousDoc` — so a
+ *  caller that legitimately needs to publish again right after clearing
+ *  (e.g. re-approving the same session) can use it as its next `baseHash`
+ *  instead of `null`, which would otherwise conflict against the very
+ *  document this call just wrote. */
+export async function clearRendezvousDoc(client, path) {
+    let lastConflict;
+    for (let attempt = 0; attempt < MAX_PUSH_RETRIES; attempt++) {
+        const current = await client.pull(pullPath(path, {}));
+        try {
+            return await client.push(pushPath(path, {}), {}, current.hash);
+        }
+        catch (err) {
+            if (!(err instanceof ConflictError))
+                throw err;
+            lastConflict = err;
+        }
+    }
+    throw new Error(`clearRendezvousDoc: too many baseHash conflicts at ${path}`, { cause: lastConflict });
+}
+//# sourceMappingURL=rendezvous.js.map

package/dist/transport/rendezvous.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rendezvous.js","sourceRoot":"","sources":["../../src/transport/rendezvous.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAElE,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAE1B;;;;;;;;;;;;;oBAaoB;AACpB,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;AACvD,CAAC;AAOD;;;;;wBAKwB;AACxB,MAAM,UAAU,sBAAsB,CAAC,IAKtC;IACC,OAAO,IAAI,cAAc,CAAC;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,IAAI,qBAAqB,EAAE,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;KACnG,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;4DAM4D;AAC5D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAsB,EAAE,IAAY;IAC1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IACpD,MAAM,MAAM,GAAY,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA;IAC/F,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACtF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACjD,OAAO,EAAE,IAAI,EAAE,MAAiC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yEAuCyE;AACzE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAsB,EACtB,IAAY,EACZ,IAA6B,EAC7B,QAAuB;IAEvB,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA4BqC;AACrC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAsB,EAAE,IAAY;IAC3E,IAAI,YAAuC,CAAA;IAC3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC;gBAAE,MAAM,GAAG,CAAA;YAC9C,YAAY,GAAG,GAAG,CAAA;QACpB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;AACxG,CAAC"}

package/dist/transport/rest.d.ts

@@ -0,0 +1,35 @@
+import { type NodeEndpoint } from './urls.js';
+/** A node answered, but with a non-2xx status. Carries the status so callers
+ *  can branch on it (e.g. 501 = the node can't fetch volumes for this
+ *  exchange) instead of parsing the message. */
+export declare class NodeHttpError extends Error {
+    readonly status: number;
+    constructor(status: number);
+}
+/** HTTP Basic credentials for a node's REST API: the EVM address is the
+ *  username (see the node's `CurrentUser` dependency). Only a node paired by an
+ *  older QR has these — a current pairing code carries the wallet instead of a
+ *  password, so nothing authenticates on its behalf. */
+export type NodeCredentials = {
+    address: string;
+    password: string;
+};
+/** Unauthenticated `GET` against a node endpoint, combining an internal
+ *  timeout with an optional caller `AbortSignal`. Throws `NodeHttpError` on a
+ *  non-2xx answer. */
+export declare function nodeRequest<T>(node: NodeEndpoint, path: string, options?: {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}): Promise<T>;
+/** Authenticated call against a node endpoint (`path` is relative to
+ *  `/api/v1`). Same internal timeout + caller-abort plumbing as `nodeRequest`,
+ *  and the same `NodeHttpError` on a non-2xx answer. */
+export declare function nodeAuthRequest<T>(node: NodeEndpoint, credentials: NodeCredentials, path: string, options?: {
+    method?: string;
+    body?: unknown;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}): Promise<T>;
+//# sourceMappingURL=rest.d.ts.map

package/dist/transport/rest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../src/transport/rest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,WAAW,CAAA;AAG1D;;gDAEgD;AAChD,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBACX,MAAM,EAAE,MAAM;CAK3B;AAED;;;wDAGwD;AACxD,MAAM,MAAM,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AA8BnE;;sBAEsB;AACtB,wBAAsB,WAAW,CAAC,CAAC,EACjC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAC/E,OAAO,CAAC,CAAC,CAAC,CAEZ;AAED;;wDAEwD;AACxD,wBAAsB,eAAe,CAAC,CAAC,EACrC,IAAI,EAAE,YAAY,EAClB,WAAW,EAAE,eAAe,EAC5B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAChH,OAAO,CAAC,CAAC,CAAC,CAcZ"}

package/dist/transport/rest.js

@@ -0,0 +1,58 @@
+import { nodeBaseUrl } from './urls.js';
+import { EXCHANGES_TIMEOUT_MS } from './constants.js';
+/** A node answered, but with a non-2xx status. Carries the status so callers
+ *  can branch on it (e.g. 501 = the node can't fetch volumes for this
+ *  exchange) instead of parsing the message. */
+export class NodeHttpError extends Error {
+    status;
+    constructor(status) {
+        super(`Node request failed: HTTP ${status}`);
+        this.name = 'NodeHttpError';
+        this.status = status;
+    }
+}
+function basicAuthHeader({ address, password }) {
+    return `Basic ${btoa(`${address}:${password}`)}`;
+}
+/** Shared timeout/abort plumbing for `nodeRequest`/`nodeAuthRequest`: combines
+ *  an internal timeout with an optional caller `AbortSignal` into one signal,
+ *  fetches, and throws `NodeHttpError` on a non-2xx answer. */
+async function fetchNodeJson(node, path, init, options) {
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    const internalController = new AbortController();
+    const timer = setTimeout(() => internalController.abort(), options.timeoutMs ?? EXCHANGES_TIMEOUT_MS);
+    const onCallerAbort = () => internalController.abort();
+    if (options.signal)
+        options.signal.addEventListener('abort', onCallerAbort);
+    try {
+        const res = await fetchImpl(`${nodeBaseUrl(node)}${path}`, { ...init, signal: internalController.signal });
+        if (!res.ok)
+            throw new NodeHttpError(res.status);
+        return (await res.json());
+    }
+    finally {
+        clearTimeout(timer);
+        if (options.signal)
+            options.signal.removeEventListener('abort', onCallerAbort);
+    }
+}
+/** Unauthenticated `GET` against a node endpoint, combining an internal
+ *  timeout with an optional caller `AbortSignal`. Throws `NodeHttpError` on a
+ *  non-2xx answer. */
+export async function nodeRequest(node, path, options = {}) {
+    return fetchNodeJson(node, path, { method: 'GET' }, options);
+}
+/** Authenticated call against a node endpoint (`path` is relative to
+ *  `/api/v1`). Same internal timeout + caller-abort plumbing as `nodeRequest`,
+ *  and the same `NodeHttpError` on a non-2xx answer. */
+export async function nodeAuthRequest(node, credentials, path, options = {}) {
+    return fetchNodeJson(node, path, {
+        method: options.method ?? 'GET',
+        headers: {
+            Authorization: basicAuthHeader(credentials),
+            ...(options.body === undefined ? {} : { 'Content-Type': 'application/json' }),
+        },
+        body: options.body === undefined ? undefined : JSON.stringify(options.body),
+    }, options);
+}
+//# sourceMappingURL=rest.js.map

package/dist/transport/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../src/transport/rest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAqB,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErD;;gDAEgD;AAChD,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAQ;IACvB,YAAY,MAAc;QACxB,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAQD,SAAS,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAmB;IAC7D,OAAO,SAAS,IAAI,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,EAAE,CAAA;AAClD,CAAC;AAED;;+DAE+D;AAC/D,KAAK,UAAU,aAAa,CAC1B,IAAkB,EAClB,IAAY,EACZ,IAAiB,EACjB,OAA2E;IAE3E,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACnD,MAAM,kBAAkB,GAAG,IAAI,eAAe,EAAE,CAAA;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,oBAAoB,CAAC,CAAA;IACrG,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAA;IACtD,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC3E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAA;QAC1G,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAChD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAA;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAChF,CAAC;AACH,CAAC;AAED;;sBAEsB;AACtB,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAkB,EAClB,IAAY,EACZ,UAA8E,EAAE;IAEhF,OAAO,aAAa,CAAI,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;AACjE,CAAC;AAED;;wDAEwD;AACxD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAkB,EAClB,WAA4B,EAC5B,IAAY,EACZ,UAA+G,EAAE;IAEjH,OAAO,aAAa,CAClB,IAAI,EACJ,IAAI,EACJ;QACE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO,EAAE;YACP,aAAa,EAAE,eAAe,CAAC,WAAW,CAAC;YAC3C,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;SAC9E;QACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;KAC5E,EACD,OAAO,CACR,CAAA;AACH,CAAC"}

package/dist/transport/syncClient.d.ts

@@ -0,0 +1,14 @@
+import { StarfishClient, type StarfishCapProvider } from '@drakkar.software/starfish-client';
+/** Bound every sync request with a timeout: without one, a pull to an
+ *  offline node hangs for the OS TCP timeout (60s+). */
+export declare function createTimeoutFetch(timeoutMs: number, baseFetch?: typeof fetch): typeof fetch;
+/** A bare `StarfishClient` factory — no cache, no lifecycle. Callers that
+ *  need per-node client caching (e.g. an offline sync engine juggling
+ *  several nodes) own that themselves; this just builds one client. */
+export declare function createSyncClient(opts: {
+    origin: string;
+    capProvider: StarfishCapProvider;
+    fetch?: typeof fetch;
+    timeoutMs?: number;
+}): StarfishClient;
+//# sourceMappingURL=syncClient.d.ts.map

package/dist/transport/syncClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncClient.d.ts","sourceRoot":"","sources":["../../src/transport/syncClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAO5F;wDACwD;AACxD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,GAAE,OAAO,KAAwB,GAAG,OAAO,KAAK,CAU9G;AAED;;uEAEuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,mBAAmB,CAAA;IAChC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,cAAc,CAQjB"}

package/dist/transport/syncClient.js

@@ -0,0 +1,30 @@
+import { StarfishClient } from '@drakkar.software/starfish-client';
+import { SYNC_MOUNT_PATH, SYNC_NAMESPACE, SYNC_FETCH_TIMEOUT_MS } from '../crypto/wireConstants.js';
+function buildSyncBaseUrl(origin) {
+    return `${origin.replace(/\/$/, '')}/${SYNC_MOUNT_PATH}`;
+}
+/** Bound every sync request with a timeout: without one, a pull to an
+ *  offline node hangs for the OS TCP timeout (60s+). */
+export function createTimeoutFetch(timeoutMs, baseFetch = globalThis.fetch) {
+    return (input, init) => {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        const callerSignal = init?.signal;
+        if (callerSignal)
+            callerSignal.addEventListener('abort', () => controller.abort());
+        return baseFetch(input, { ...init, signal: controller.signal }).finally(() => clearTimeout(timer));
+    };
+}
+/** A bare `StarfishClient` factory — no cache, no lifecycle. Callers that
+ *  need per-node client caching (e.g. an offline sync engine juggling
+ *  several nodes) own that themselves; this just builds one client. */
+export function createSyncClient(opts) {
+    const baseFetch = opts.fetch ?? globalThis.fetch;
+    return new StarfishClient({
+        baseUrl: buildSyncBaseUrl(opts.origin),
+        namespace: SYNC_NAMESPACE,
+        capProvider: opts.capProvider,
+        fetch: createTimeoutFetch(opts.timeoutMs ?? SYNC_FETCH_TIMEOUT_MS, baseFetch),
+    });
+}
+//# sourceMappingURL=syncClient.js.map

package/dist/transport/syncClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncClient.js","sourceRoot":"","sources":["../../src/transport/syncClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA4B,MAAM,mCAAmC,CAAA;AAC5F,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAEnG,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,eAAe,EAAE,CAAA;AAC1D,CAAC;AAED;wDACwD;AACxD,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,YAA0B,UAAU,CAAC,KAAK;IAC9F,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAC7D,MAAM,YAAY,GAAI,IAAgC,EAAE,MAAM,CAAA;QAC9D,IAAI,YAAY;YAAE,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA;QAClF,OAAO,SAAS,CAAC,KAAK,EAAE,EAAE,GAAI,IAAoB,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAC5F,YAAY,CAAC,KAAK,CAAC,CACpB,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IAChD,OAAO,IAAI,cAAc,CAAC;QACxB,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QACtC,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,IAAI,qBAAqB,EAAE,SAAS,CAAC;KAC9E,CAAC,CAAA;AACJ,CAAC"}

package/dist/transport/urls.d.ts

@@ -0,0 +1,35 @@
+/** The minimal address triple every node-facing call needs. Deliberately
+ *  structural (not the caller's own "list of paired nodes" document type) —
+ *  any `{ host, port, secure? }` works. */
+export type NodeEndpoint = {
+    host: string;
+    port: number;
+    secure?: boolean;
+};
+export declare function nodeBaseUrl(node: NodeEndpoint): string;
+export type NodeAddressSpace = 'loopback' | 'local' | 'public';
+/** Parse a user-typed host string into a canonical { host, port, secure } triple.
+ *  Accepts: `host`, `host:port`, `http://host:port`, `https://host`, `[::1]:5001`.
+ *  A scheme is kept (drives `secure` and the scheme-derived default port below);
+ *  no scheme falls back to `defaultPort` (plain HTTP), preserving legacy local-node
+ *  behavior. Returns null on empty input or an out-of-range port. */
+export declare function parseHostInput(raw: string, defaultPort?: number): {
+    host: string;
+    port: number;
+    secure: boolean;
+} | null;
+/** Inverse of {@link parseHostInput}: rebuild the editable host/port strings from a stored
+ *  { host, port, secure } triple so that re-parsing them yields the same triple. The scheme
+ *  is folded into the host field (there is no separate scheme control) and the port is left
+ *  blank when it equals the scheme's implicit default (443 for https, 80 for http). */
+export declare function formatHostInput(node: NodeEndpoint): {
+    host: string;
+    port: string;
+};
+/** Which IP address space a host belongs to, decided from the string alone — no
+ *  DNS lookup, because the browsers that care about this decide the same way and
+ *  at the same moment (before resolving). `public` therefore means "not knowable
+ *  from the hostname", not "definitely on the internet": a DNS name pointing at a
+ *  LAN box lands here, exactly as it does in Chrome. */
+export declare function classifyAddressSpace(host: string): NodeAddressSpace;
+//# sourceMappingURL=urls.d.ts.map

package/dist/transport/urls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.d.ts","sourceRoot":"","sources":["../../src/transport/urls.ts"],"names":[],"mappings":"AAEA;;2CAE2C;AAC3C,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AAE3E,wBAAgB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEtD;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAA;AAI9D;;;;qEAIqE;AACrE,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,WAAW,SAAoB,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA+CxD;AAED;;;uFAGuF;AACvF,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAQlF;AAED;;;;wDAIwD;AACxD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAoCnE"}

package/dist/transport/urls.js

@@ -0,0 +1,126 @@
+import { API_PREFIX, DEFAULT_NODE_PORT } from './constants.js';
+export function nodeBaseUrl(node) {
+    return `${node.secure ? 'https' : 'http'}://${node.host}:${node.port}${API_PREFIX}`;
+}
+const IPV4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/;
+/** Parse a user-typed host string into a canonical { host, port, secure } triple.
+ *  Accepts: `host`, `host:port`, `http://host:port`, `https://host`, `[::1]:5001`.
+ *  A scheme is kept (drives `secure` and the scheme-derived default port below);
+ *  no scheme falls back to `defaultPort` (plain HTTP), preserving legacy local-node
+ *  behavior. Returns null on empty input or an out-of-range port. */
+export function parseHostInput(raw, defaultPort = DEFAULT_NODE_PORT) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return null;
+    // Detect + strip scheme
+    const schemeMatch = trimmed.match(/^(https?):\/\//i);
+    const secure = schemeMatch ? schemeMatch[1].toLowerCase() === 'https' : false;
+    const withoutScheme = trimmed.replace(/^https?:\/\//i, '');
+    // Strip trailing slashes and path
+    const withoutPath = withoutScheme.split('/')[0];
+    // Scheme present but no explicit port → the scheme's own default port
+    // (80/443); no scheme at all → the caller's local-node default.
+    const schemeDefaultPort = schemeMatch ? (secure ? 443 : 80) : defaultPort;
+    let host;
+    let port;
+    // IPv6 with brackets: [::1] or [::1]:5001
+    const ipv6Match = withoutPath.match(/^\[([^\]]+)\](?::(\d+))?$/);
+    if (ipv6Match) {
+        host = `[${ipv6Match[1]}]`;
+        port = ipv6Match[2] ? parseInt(ipv6Match[2], 10) : schemeDefaultPort;
+    }
+    else {
+        // host or host:port
+        const lastColon = withoutPath.lastIndexOf(':');
+        if (lastColon !== -1) {
+            const maybePart = withoutPath.slice(lastColon + 1);
+            if (/^\d+$/.test(maybePart)) {
+                // Explicit port number
+                host = withoutPath.slice(0, lastColon);
+                port = parseInt(maybePart, 10);
+            }
+            else if (maybePart.length > 0) {
+                // Non-empty, non-numeric after colon → invalid port spec
+                return null;
+            }
+            else {
+                host = withoutPath;
+                port = schemeDefaultPort;
+            }
+        }
+        else {
+            host = withoutPath;
+            port = schemeDefaultPort;
+        }
+    }
+    if (!host || port < 1 || port > 65535 || isNaN(port))
+        return null;
+    return { host, port, secure };
+}
+/** Inverse of {@link parseHostInput}: rebuild the editable host/port strings from a stored
+ *  { host, port, secure } triple so that re-parsing them yields the same triple. The scheme
+ *  is folded into the host field (there is no separate scheme control) and the port is left
+ *  blank when it equals the scheme's implicit default (443 for https, 80 for http). */
+export function formatHostInput(node) {
+    const secure = !!node.secure;
+    const schemeDefault = secure ? 443 : 80;
+    const scheme = secure ? 'https://' : node.port === 80 ? 'http://' : '';
+    return {
+        host: `${scheme}${node.host}`,
+        port: node.port === schemeDefault ? '' : String(node.port),
+    };
+}
+/** Which IP address space a host belongs to, decided from the string alone — no
+ *  DNS lookup, because the browsers that care about this decide the same way and
+ *  at the same moment (before resolving). `public` therefore means "not knowable
+ *  from the hostname", not "definitely on the internet": a DNS name pointing at a
+ *  LAN box lands here, exactly as it does in Chrome. */
+export function classifyAddressSpace(host) {
+    // A trailing dot is the DNS root and does not change what the name refers to.
+    const trimmed = host.trim().toLowerCase().replace(/\.$/, '');
+    if (!trimmed)
+        return 'public';
+    // IPv6, bracketed (`[::1]`, the form parseHostInput keeps) or bare.
+    if (trimmed.startsWith('[') || trimmed.includes(':')) {
+        const v6 = trimmed.replace(/^\[/, '').replace(/\]$/, '').split('%')[0];
+        if (v6 === '::1')
+            return 'loopback';
+        // IPv4-mapped (`::ffff:127.0.0.1`) inherits the mapped address's own space.
+        const mapped = v6.match(/^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/);
+        if (mapped)
+            return classifyAddressSpace(mapped[1]);
+        if (/^f[cd][0-9a-f]{2}:/.test(v6))
+            return 'local'; // fc00::/7 unique-local
+        if (/^fe[89ab][0-9a-f]:/.test(v6))
+            return 'local'; // fe80::/10 link-local
+        return 'public';
+    }
+    const v4 = trimmed.match(IPV4);
+    if (v4) {
+        const octets = v4.slice(1, 5).map(Number);
+        // Out-of-range octets aren't an address literal at all; a browser would try
+        // to resolve the string as a name, so classify it the way a name is.
+        if (octets.some((o) => o > 255))
+            return 'public';
+        const [a, b] = octets;
+        if (a === 127)
+            return 'loopback';
+        if (a === 10)
+            return 'local';
+        if (a === 192 && b === 168)
+            return 'local';
+        if (a === 172 && b >= 16 && b <= 31)
+            return 'local';
+        if (a === 100 && b >= 64 && b <= 127)
+            return 'local'; // carrier-grade NAT
+        if (a === 169 && b === 254)
+            return 'local'; // link-local
+        return 'public';
+    }
+    if (trimmed === 'localhost' || trimmed.endsWith('.localhost'))
+        return 'loopback';
+    if (trimmed.endsWith('.local'))
+        return 'local'; // mDNS
+    return 'public';
+}
+//# sourceMappingURL=urls.js.map

package/dist/transport/urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../src/transport/urls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAO9D,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,UAAU,EAAE,CAAA;AACrF,CAAC;AAID,MAAM,IAAI,GAAG,8CAA8C,CAAA;AAE3D;;;;qEAIqE;AACrE,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,WAAW,GAAG,iBAAiB;IAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,wBAAwB;IACxB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;IAC1D,kCAAkC;IAClC,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/C,sEAAsE;IACtE,gEAAgE;IAChE,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;IAEzE,IAAI,IAAY,CAAA;IAChB,IAAI,IAAY,CAAA;IAEhB,0CAA0C;IAC1C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA;QAC1B,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACtE,CAAC;SAAM,CAAC;QACN,oBAAoB;QACpB,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;YAClD,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5B,uBAAuB;gBACvB,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;gBACtC,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;YAChC,CAAC;iBAAM,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,yDAAyD;gBACzD,OAAO,IAAI,CAAA;YACb,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,WAAW,CAAA;gBAClB,IAAI,GAAG,iBAAiB,CAAA;YAC1B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,WAAW,CAAA;YAClB,IAAI,GAAG,iBAAiB,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AAC/B,CAAC;AAED;;;uFAGuF;AACvF,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;IAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,OAAO;QACL,IAAI,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;KAC3D,CAAA;AACH,CAAC;AAED;;;;wDAIwD;AACxD,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAA;IAE7B,oEAAoE;IACpE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACtE,IAAI,EAAE,KAAK,KAAK;YAAE,OAAO,UAAU,CAAA;QACnC,4EAA4E;QAC5E,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;QACxE,IAAI,MAAM;YAAE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QAClD,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAA,CAAC,wBAAwB;QAC1E,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAA,CAAC,uBAAuB;QACzE,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAA;QAChD,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAA;QACrB,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,UAAU,CAAA;QAChC,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,OAAO,CAAA;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,OAAO,CAAA;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,OAAO,CAAA;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,OAAO,CAAA,CAAC,oBAAoB;QACzE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,OAAO,CAAA,CAAC,aAAa;QACxD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAA;IAChF,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAA,CAAC,OAAO;IACtD,OAAO,QAAQ,CAAA;AACjB,CAAC"}