@forgefabrik/ff-ztn 0.3.0

package/dist/zero-token/discovery/control-types.d.ts

@@ -0,0 +1,39 @@
+export type CandidateDecision = "new" | "account-required" | "approved" | "account-ready" | "rejected";
+export interface DiscoveryControlConfig {
+    enabled: boolean;
+    runOnStart: boolean;
+    intervalMinutes: number;
+    minScore: number;
+    inspectHomepages: boolean;
+    notifyOnAccountRequired: boolean;
+    sources: string[];
+}
+export interface CandidateReview {
+    providerId: string;
+    label: string;
+    homepage?: string;
+    kind: "web" | "api" | "local";
+    models: string[];
+    source?: string;
+    score: number;
+    valuable: boolean;
+    accountRequired: boolean;
+    homepageReachable: boolean;
+    streamPotential: boolean;
+    apiPotential: boolean;
+    decision: CandidateDecision;
+    reasons: string[];
+    firstSeenAt: string;
+    lastCheckedAt: string;
+    decidedAt?: string;
+    note?: string;
+}
+export interface DiscoveryControlState {
+    config: DiscoveryControlConfig;
+    reviews: CandidateReview[];
+    running: boolean;
+    lastRunAt?: string;
+    nextRunAt?: string;
+    lastError?: string;
+}
+//# sourceMappingURL=control-types.d.ts.map

package/dist/zero-token/discovery/control-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-types.d.ts","sourceRoot":"","sources":["../../../src/zero-token/discovery/control-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,KAAK,GACL,kBAAkB,GAClB,UAAU,GACV,eAAe,GACf,UAAU,CAAC;AAEf,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,uBAAuB,EAAE,OAAO,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/zero-token/discovery/control-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=control-types.js.map

package/dist/zero-token/discovery/control-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-types.js","sourceRoot":"","sources":["../../../src/zero-token/discovery/control-types.ts"],"names":[],"mappings":""}

package/dist/zero-token/discovery/discovery-routes.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from "hono";
+export declare function createDiscoveryRoutes(): Hono;
+//# sourceMappingURL=discovery-routes.d.ts.map

package/dist/zero-token/discovery/discovery-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-routes.d.ts","sourceRoot":"","sources":["../../../src/zero-token/discovery/discovery-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAsD5B,wBAAgB,qBAAqB,IAAI,IAAI,CAiI5C"}

package/dist/zero-token/discovery/discovery-routes.js

@@ -0,0 +1,130 @@
+import { Hono } from "hono";
+import { configureDiscoveryControl, decideDiscoveryCandidate, getDiscoveryControlState, runControlledDiscovery, startDiscoveryControl, } from "./control-service.js";
+import { getDiscoveredModelCandidates, getDiscoverySnapshot, runProviderDiscovery, } from "./discovery-service.js";
+import { getCandidateProbeJob, listCandidateProbeJobs, startCandidateProbeJob, stopCandidateProbeJob, } from "./candidate-probe-runtime.js";
+import { getProviderLoginJob, listProviderLoginJobs, startProviderLoginJob, } from "../providers/provider-login-jobs.js";
+const DECISIONS = [
+    "new",
+    "account-required",
+    "approved",
+    "account-ready",
+    "rejected",
+];
+function remoteLoginSettings() {
+    const cdpUrl = process.env.NOVA_CDP_URL?.trim();
+    const viewUrl = process.env.NOVA_REMOTE_LOGIN_VIEW_URL?.trim();
+    if (!cdpUrl || !viewUrl) {
+        throw new Error("Server-Login nicht konfiguriert: NOVA_CDP_URL und NOVA_REMOTE_LOGIN_VIEW_URL fehlen.");
+    }
+    const parsed = new URL(viewUrl);
+    const local = ["localhost", "127.0.0.1", "[::1]"].includes(parsed.hostname);
+    if (parsed.protocol !== "https:" && !local) {
+        throw new Error("NOVA_REMOTE_LOGIN_VIEW_URL muss HTTPS verwenden.");
+    }
+    return { cdpUrl, viewUrl: parsed.toString() };
+}
+export function createDiscoveryRoutes() {
+    const routes = new Hono();
+    void startDiscoveryControl();
+    routes.get("/", async (c) => c.json(await getDiscoverySnapshot()));
+    routes.get("/models", async (c) => {
+        const models = await getDiscoveredModelCandidates();
+        return c.json({ count: models.length, models });
+    });
+    routes.post("/scan", async (c) => {
+        const snapshot = await runProviderDiscovery();
+        return c.json(snapshot);
+    });
+    routes.get("/control", async (c) => c.json(await getDiscoveryControlState()));
+    routes.put("/control/config", async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        try {
+            return c.json(await configureDiscoveryControl(body));
+        }
+        catch (error) {
+            return c.json({ error: error instanceof Error ? error.message : "Konfiguration ist ungültig" }, 400);
+        }
+    });
+    routes.post("/control/run", async (c) => {
+        return c.json(await runControlledDiscovery());
+    });
+    routes.post("/control/candidates/:id/decision", async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        if (!body.decision || !DECISIONS.includes(body.decision)) {
+            return c.json({ error: "Ungültige Kandidatenentscheidung" }, 400);
+        }
+        try {
+            return c.json(await decideDiscoveryCandidate(c.req.param("id"), body.decision, body.note));
+        }
+        catch (error) {
+            return c.json({ error: error instanceof Error ? error.message : "Kandidat nicht gefunden" }, 404);
+        }
+    });
+    routes.get("/probes", (c) => c.json({ jobs: listCandidateProbeJobs() }));
+    routes.get("/probes/:id", (c) => {
+        const job = getCandidateProbeJob(c.req.param("id"));
+        return job ? c.json(job) : c.json({ error: "Probe-Job nicht gefunden" }, 404);
+    });
+    routes.post("/probes", async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        if (!body.providerId)
+            return c.json({ error: "providerId ist erforderlich" }, 400);
+        try {
+            return c.json(await startCandidateProbeJob(body.providerId), 202);
+        }
+        catch (error) {
+            return c.json({ error: error instanceof Error ? error.message : "Probe konnte nicht gestartet werden" }, 400);
+        }
+    });
+    routes.post("/probes/:id/stop", async (c) => {
+        try {
+            return c.json(await stopCandidateProbeJob(c.req.param("id")));
+        }
+        catch (error) {
+            return c.json({ error: error instanceof Error ? error.message : "Probe konnte nicht beendet werden" }, 404);
+        }
+    });
+    routes.get("/logins", (c) => {
+        try {
+            const { viewUrl } = remoteLoginSettings();
+            return c.json({
+                jobs: listProviderLoginJobs().map((job) => ({ ...job, viewUrl })),
+                configured: true,
+            });
+        }
+        catch (error) {
+            return c.json({
+                jobs: [],
+                configured: false,
+                error: error instanceof Error ? error.message : "Server-Login nicht konfiguriert",
+            });
+        }
+    });
+    routes.get("/logins/:id", (c) => {
+        const job = getProviderLoginJob(c.req.param("id"));
+        if (!job)
+            return c.json({ error: "Login-Job nicht gefunden" }, 404);
+        try {
+            const { viewUrl } = remoteLoginSettings();
+            return c.json({ ...job, viewUrl });
+        }
+        catch {
+            return c.json(job);
+        }
+    });
+    routes.post("/logins", async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        if (!body.providerId)
+            return c.json({ error: "providerId ist erforderlich" }, 400);
+        try {
+            const { cdpUrl, viewUrl } = remoteLoginSettings();
+            const job = startProviderLoginJob(body.providerId, { cdpUrl });
+            return c.json({ ...job, viewUrl }, 202);
+        }
+        catch (error) {
+            return c.json({ error: error instanceof Error ? error.message : "Login konnte nicht gestartet werden" }, 400);
+        }
+    });
+    return routes;
+}
+//# sourceMappingURL=discovery-routes.js.map

package/dist/zero-token/discovery/discovery-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-routes.js","sourceRoot":"","sources":["../../../src/zero-token/discovery/discovery-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,qCAAqC,CAAC;AAE7C,MAAM,SAAS,GAAwB;IACrC,KAAK;IACL,kBAAkB;IAClB,UAAU;IACV,eAAe;IACf,UAAU;CACX,CAAC;AAMF,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,KAAK,qBAAqB,EAAE,CAAC;IAE7B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,wBAAwB,EAAE,CAAC,CAAC,CAAC;IAE9E,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAmC,CAAC,KAAK,CACpE,GAAG,EAAE,CAAC,CAAC,EAAsC,CAAA,CAC9C,CAAC;QACF,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAChF,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAmB,CAAA,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAC7E,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC,CAAC;IAEzE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAgB,CAAA,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,GAAG,CAAC,CAAC;QACnF,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC,EAAE,EACzF,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,EAAE,EACvF,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjE,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,EAAE;gBACR,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC;aAClF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAgB,CAAA,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,GAAG,CAAC,CAAC;QAEnF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC,EAAE,EACzF,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/zero-token/discovery/discovery-service.d.ts

@@ -0,0 +1,18 @@
+import { type DiscoveryProvider } from "./builtin-catalog.js";
+export interface DiscoverySnapshot {
+    scannedAt: string;
+    sources: string[];
+    providers: DiscoveryProvider[];
+    errors: Array<{
+        source: string;
+        message: string;
+    }>;
+}
+export declare function runProviderDiscovery(explicitSources?: string[]): Promise<DiscoverySnapshot>;
+export declare function getDiscoverySnapshot(): Promise<DiscoverySnapshot>;
+export declare function getDiscoveredModelCandidates(): Promise<Array<{
+    id: string;
+    provider: string;
+    label: string;
+}>>;
+//# sourceMappingURL=discovery-service.d.ts.map

package/dist/zero-token/discovery/discovery-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-service.d.ts","sourceRoot":"","sources":["../../../src/zero-token/discovery/discovery-service.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAM9B,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAoCD,wBAAsB,oBAAoB,CACxC,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAsC5B;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAEvE;AAED,wBAAsB,4BAA4B,IAAI,OAAO,CAC3D,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CACvD,CAKA"}

package/dist/zero-token/discovery/discovery-service.js

@@ -0,0 +1,81 @@
+import { join } from "node:path";
+import { novaHome } from "../config/paths.js";
+import logger from "../logger.js";
+import { readStored, writeStored } from "../storage/atomic-json-store.js";
+import { BUILTIN_DISCOVERY_PROVIDERS, } from "./builtin-catalog.js";
+import { parseDiscoveryManifest, validateManifestSource, } from "./manifest.js";
+const MAX_MANIFEST_BYTES = 1_000_000;
+function cachePath() {
+    return join(novaHome(), "discovery-cache.json");
+}
+function configuredSources(explicit) {
+    const values = explicit?.length
+        ? explicit
+        : (process.env.NOVA_DISCOVERY_SOURCES ?? "")
+            .split(/[\n,]/)
+            .map((value) => value.trim())
+            .filter(Boolean);
+    return [...new Set(values)];
+}
+async function loadSource(source) {
+    const url = validateManifestSource(source);
+    const response = await fetch(url, {
+        headers: { Accept: "application/json", "User-Agent": "Nova-Discovery/1" },
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!response.ok)
+        throw new Error(`HTTP ${response.status}`);
+    const declaredLength = Number(response.headers.get("content-length") ?? 0);
+    if (declaredLength > MAX_MANIFEST_BYTES)
+        throw new Error("Manifest ist zu groß.");
+    const raw = await response.text();
+    if (Buffer.byteLength(raw, "utf8") > MAX_MANIFEST_BYTES) {
+        throw new Error("Manifest ist zu groß.");
+    }
+    return parseDiscoveryManifest(raw, source);
+}
+export async function runProviderDiscovery(explicitSources) {
+    const sources = configuredSources(explicitSources);
+    const providers = new Map(BUILTIN_DISCOVERY_PROVIDERS.map((provider) => [provider.id, { ...provider }]));
+    const errors = [];
+    for (const source of sources) {
+        try {
+            const discovered = await loadSource(source);
+            for (const candidate of discovered) {
+                const existing = providers.get(candidate.id);
+                if (existing?.status === "supported") {
+                    providers.set(candidate.id, {
+                        ...existing,
+                        models: [...new Set([...existing.models, ...candidate.models])],
+                        source,
+                    });
+                }
+                else {
+                    providers.set(candidate.id, candidate);
+                }
+            }
+            logger.info({ source, providers: discovered.length }, "Discovery-Manifest geladen");
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            errors.push({ source, message });
+            logger.warn({ source, error: message }, "Discovery-Quelle konnte nicht geladen werden");
+        }
+    }
+    const snapshot = {
+        scannedAt: new Date().toISOString(),
+        sources,
+        providers: [...providers.values()].sort((a, b) => a.label.localeCompare(b.label)),
+        errors,
+    };
+    await writeStored(cachePath(), snapshot);
+    return snapshot;
+}
+export async function getDiscoverySnapshot() {
+    return (await readStored(cachePath())) ?? runProviderDiscovery([]);
+}
+export async function getDiscoveredModelCandidates() {
+    const snapshot = await getDiscoverySnapshot();
+    return snapshot.providers.flatMap((provider) => provider.models.map((id) => ({ id, provider: provider.id, label: provider.label })));
+}
+//# sourceMappingURL=discovery-service.js.map

package/dist/zero-token/discovery/discovery-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-service.js","sourceRoot":"","sources":["../../../src/zero-token/discovery/discovery-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,MAAM,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EACL,2BAA2B,GAE5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AASvB,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAmB;IAC5C,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM;QAC7B,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;aACvC,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,kBAAkB,EAAE;QACzE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7D,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,cAAc,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAElF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,eAA0B;IAE1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,2BAA2B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,MAAM,GAAgC,EAAE,CAAC;IAE/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC7C,IAAI,QAAQ,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;oBACrC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE;wBAC1B,GAAG,QAAQ;wBACX,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;wBAC/D,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,8CAA8C,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAsB;QAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;QACP,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM;KACP,CAAC;IACF,MAAM,WAAW,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,OAAO,CAAC,MAAM,UAAU,CAAoB,SAAS,EAAE,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B;IAGhD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC9C,OAAO,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7C,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CACpF,CAAC;AACJ,CAAC"}

package/dist/zero-token/discovery/manifest.d.ts

@@ -0,0 +1,14 @@
+import type { DiscoveryProvider, DiscoveryProviderKind } from "./builtin-catalog.js";
+export interface DiscoveryManifest {
+    version: 1;
+    providers: Array<{
+        id: string;
+        label: string;
+        kind?: DiscoveryProviderKind;
+        homepage?: string;
+        models?: string[];
+    }>;
+}
+export declare function validateManifestSource(value: string): URL;
+export declare function parseDiscoveryManifest(raw: string, source: string): DiscoveryProvider[];
+//# sourceMappingURL=manifest.d.ts.map

package/dist/zero-token/discovery/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/zero-token/discovery/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,qBAAqB,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC,CAAC;CACJ;AAKD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAMzD;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAiCvF"}

package/dist/zero-token/discovery/manifest.js

@@ -0,0 +1,43 @@
+const PROVIDER_ID = /^[a-z0-9][a-z0-9._-]{1,63}$/;
+const MODEL_ID = /^[A-Za-z0-9][A-Za-z0-9._:/+-]{0,159}$/;
+export function validateManifestSource(value) {
+    const url = new URL(value);
+    if (url.protocol !== "https:" || url.hostname !== "raw.githubusercontent.com") {
+        throw new Error("Discovery erlaubt ausschließlich HTTPS-Manifeste von raw.githubusercontent.com.");
+    }
+    return url;
+}
+export function parseDiscoveryManifest(raw, source) {
+    const parsed = JSON.parse(raw);
+    if (!parsed || parsed.version !== 1 || !Array.isArray(parsed.providers)) {
+        throw new Error("Ungültiges Discovery-Manifest.");
+    }
+    return parsed.providers.flatMap((value) => {
+        if (!PROVIDER_ID.test(value.id) || typeof value.label !== "string")
+            return [];
+        let homepage;
+        if (value.homepage) {
+            try {
+                const url = new URL(value.homepage);
+                if (url.protocol === "https:")
+                    homepage = url.toString();
+            }
+            catch {
+                homepage = undefined;
+            }
+        }
+        const models = [...new Set(value.models ?? [])]
+            .filter((model) => MODEL_ID.test(model))
+            .slice(0, 500);
+        return [{
+                id: value.id,
+                label: value.label.trim().slice(0, 100),
+                kind: value.kind ?? "api",
+                status: "candidate",
+                homepage,
+                models,
+                source,
+            }];
+    });
+}
+//# sourceMappingURL=manifest.js.map

package/dist/zero-token/discovery/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/zero-token/discovery/manifest.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,QAAQ,GAAG,uCAAuC,CAAC;AAEzD,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,2BAA2B,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,MAAc;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IACpD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAE9E,IAAI,QAA4B,CAAC;QACjC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;oBAAE,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,SAAS,CAAC;YACvB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;aAC5C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEjB,OAAO,CAAC;gBACN,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACvC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK;gBACzB,MAAM,EAAE,WAAoB;gBAC5B,QAAQ;gBACR,MAAM;gBACN,MAAM;aACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/zero-token/discovery/public-site-inspector.d.ts

@@ -0,0 +1,10 @@
+export declare function validatePublicSiteUrl(value: string): Promise<URL>;
+export interface PublicSiteInspection {
+    requestedUrl: string;
+    finalUrl: string;
+    status: number;
+    contentType: string;
+    html: string;
+}
+export declare function inspectPublicSite(value: string): Promise<PublicSiteInspection>;
+//# sourceMappingURL=public-site-inspector.d.ts.map

package/dist/zero-token/discovery/public-site-inspector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-site-inspector.d.ts","sourceRoot":"","sources":["../../../src/zero-token/discovery/public-site-inspector.ts"],"names":[],"mappings":"AAoCA,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CA6BvE;AA0BD,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+BpF"}

package/dist/zero-token/discovery/public-site-inspector.js

@@ -0,0 +1,111 @@
+import { lookup } from "node:dns/promises";
+import { isIP } from "node:net";
+const MAX_BYTES = 512_000;
+const MAX_REDIRECTS = 3;
+function isPrivateIpv4(address) {
+    const parts = address.split(".").map(Number);
+    if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part)))
+        return true;
+    const [a, b] = parts;
+    return (a === 0 ||
+        a === 10 ||
+        a === 127 ||
+        (a === 169 && b === 254) ||
+        (a === 172 && b >= 16 && b <= 31) ||
+        (a === 192 && b === 168) ||
+        (a === 100 && b >= 64 && b <= 127) ||
+        a >= 224);
+}
+function isPrivateIpv6(address) {
+    const normalized = address.toLowerCase();
+    return (normalized === "::" ||
+        normalized === "::1" ||
+        normalized.startsWith("fc") ||
+        normalized.startsWith("fd") ||
+        normalized.startsWith("fe8") ||
+        normalized.startsWith("fe9") ||
+        normalized.startsWith("fea") ||
+        normalized.startsWith("feb"));
+}
+export async function validatePublicSiteUrl(value) {
+    const url = new URL(value);
+    if (url.protocol !== "https:")
+        throw new Error("Nur öffentliche HTTPS-Webseiten sind erlaubt.");
+    const hostname = url.hostname.toLowerCase();
+    if (hostname === "localhost" ||
+        hostname.endsWith(".localhost") ||
+        hostname.endsWith(".local") ||
+        hostname.endsWith(".internal")) {
+        throw new Error("Lokale Hostnamen sind nicht erlaubt.");
+    }
+    const literalVersion = isIP(hostname);
+    if (literalVersion === 4 && isPrivateIpv4(hostname))
+        throw new Error("Private IP-Adresse abgelehnt.");
+    if (literalVersion === 6 && isPrivateIpv6(hostname))
+        throw new Error("Private IP-Adresse abgelehnt.");
+    const addresses = await lookup(hostname, { all: true, verbatim: true });
+    if (addresses.length === 0)
+        throw new Error("Hostname konnte nicht aufgelöst werden.");
+    for (const entry of addresses) {
+        if ((entry.family === 4 && isPrivateIpv4(entry.address)) ||
+            (entry.family === 6 && isPrivateIpv6(entry.address))) {
+            throw new Error("Hostname verweist auf eine private oder reservierte Adresse.");
+        }
+    }
+    return url;
+}
+async function readLimitedText(response) {
+    const length = Number(response.headers.get("content-length") ?? 0);
+    if (length > MAX_BYTES)
+        throw new Error("Webseite ist für Discovery zu groß.");
+    if (!response.body)
+        return "";
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let bytes = 0;
+    let output = "";
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        bytes += value.byteLength;
+        if (bytes > MAX_BYTES) {
+            await reader.cancel();
+            throw new Error("Webseite ist für Discovery zu groß.");
+        }
+        output += decoder.decode(value, { stream: true });
+    }
+    output += decoder.decode();
+    return output;
+}
+export async function inspectPublicSite(value) {
+    let current = await validatePublicSiteUrl(value);
+    for (let redirect = 0; redirect <= MAX_REDIRECTS; redirect += 1) {
+        const response = await fetch(current, {
+            redirect: "manual",
+            headers: {
+                Accept: "text/html,application/xhtml+xml;q=0.9,*/*;q=0.2",
+                "User-Agent": "Nova-Public-Discovery/1.0",
+            },
+            signal: AbortSignal.timeout(12_000),
+        });
+        if (response.status >= 300 && response.status < 400) {
+            const location = response.headers.get("location");
+            if (!location)
+                throw new Error("Weiterleitung ohne Ziel.");
+            if (redirect === MAX_REDIRECTS)
+                throw new Error("Zu viele Weiterleitungen.");
+            current = await validatePublicSiteUrl(new URL(location, current).toString());
+            continue;
+        }
+        return {
+            requestedUrl: value,
+            finalUrl: current.toString(),
+            status: response.status,
+            contentType: response.headers.get("content-type") ?? "",
+            html: await readLimitedText(response),
+        };
+    }
+    throw new Error("Webseite konnte nicht geprüft werden.");
+}
+//# sourceMappingURL=public-site-inspector.js.map

package/dist/zero-token/discovery/public-site-inspector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-site-inspector.js","sourceRoot":"","sources":["../../../src/zero-token/discovery/public-site-inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,MAAM,SAAS,GAAG,OAAO,CAAC;AAC1B,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrB,OAAO,CACL,CAAC,KAAK,CAAC;QACP,CAAC,KAAK,EAAE;QACR,CAAC,KAAK,GAAG;QACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAClC,CAAC,IAAI,GAAG,CACT,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,CACL,UAAU,KAAK,IAAI;QACnB,UAAU,KAAK,KAAK;QACpB,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC3B,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC3B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAEhG,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5C,IACE,QAAQ,KAAK,WAAW;QACxB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,cAAc,KAAK,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtG,IAAI,cAAc,KAAK,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAEtG,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACvF,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IACE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpD,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EACpD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,IAAI,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,IAAI,OAAO,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAEjD,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,aAAa,EAAE,QAAQ,IAAI,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;YACpC,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE;gBACP,MAAM,EAAE,iDAAiD;gBACzD,YAAY,EAAE,2BAA2B;aAC1C;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC3D,IAAI,QAAQ,KAAK,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC7E,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QAED,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE;YACvD,IAAI,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/zero-token/gateway/api-key-auth.d.ts

@@ -0,0 +1,3 @@
+import type { MiddlewareHandler } from "hono";
+export declare function requireApiKey(): MiddlewareHandler;
+//# sourceMappingURL=api-key-auth.d.ts.map

package/dist/zero-token/gateway/api-key-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.d.ts","sourceRoot":"","sources":["../../../src/zero-token/gateway/api-key-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAqC9C,wBAAgB,aAAa,IAAI,iBAAiB,CAoCjD"}

package/dist/zero-token/gateway/api-key-auth.js

@@ -0,0 +1,59 @@
+import { timingSafeEqual } from "node:crypto";
+import { readFileSync } from "node:fs";
+let cachedKey;
+function configuredApiKey() {
+    if (cachedKey !== undefined)
+        return cachedKey || undefined;
+    const direct = process.env.NOVA_API_KEY?.trim();
+    if (direct) {
+        cachedKey = direct;
+        return cachedKey;
+    }
+    const file = process.env.NOVA_API_KEY_FILE?.trim();
+    if (file) {
+        try {
+            cachedKey = readFileSync(file, "utf8").trim();
+            return cachedKey || undefined;
+        }
+        catch {
+            cachedKey = "";
+            return undefined;
+        }
+    }
+    cachedKey = "";
+    return undefined;
+}
+function equalSecret(actual, expected) {
+    const actualBuffer = Buffer.from(actual);
+    const expectedBuffer = Buffer.from(expected);
+    return (actualBuffer.length === expectedBuffer.length &&
+        timingSafeEqual(actualBuffer, expectedBuffer));
+}
+export function requireApiKey() {
+    return async (context, next) => {
+        const expected = configuredApiKey();
+        if (!expected) {
+            return context.json({
+                error: {
+                    message: "Nova API-Key ist nicht konfiguriert.",
+                    type: "server_error",
+                    code: "api_key_not_configured",
+                },
+            }, 503);
+        }
+        const authorization = context.req.header("Authorization") ?? "";
+        const match = authorization.match(/^Bearer\s+(.+)$/i);
+        const supplied = match?.[1]?.trim() ?? "";
+        if (!supplied || !equalSecret(supplied, expected)) {
+            return context.json({
+                error: {
+                    message: "Ungültiger oder fehlender API-Key.",
+                    type: "invalid_request_error",
+                    code: "invalid_api_key",
+                },
+            }, 401, { "WWW-Authenticate": "Bearer" });
+        }
+        await next();
+    };
+}
+//# sourceMappingURL=api-key-auth.js.map

package/dist/zero-token/gateway/api-key-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.js","sourceRoot":"","sources":["../../../src/zero-token/gateway/api-key-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,IAAI,SAA6B,CAAC;AAElC,SAAS,gBAAgB;IACvB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,IAAI,SAAS,CAAC;IAE3D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,GAAG,MAAM,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,OAAO,SAAS,IAAI,SAAS,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,EAAE,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,GAAG,EAAE,CAAC;IACf,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,QAAgB;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CACL,YAAY,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC7C,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,OAAO,CAAC,IAAI,CACjB;gBACE,KAAK,EAAE;oBACL,OAAO,EAAE,sCAAsC;oBAC/C,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,wBAAwB;iBAC/B;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAE1C,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClD,OAAO,OAAO,CAAC,IAAI,CACjB;gBACE,KAAK,EAAE;oBACL,OAAO,EAAE,oCAAoC;oBAC7C,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,iBAAiB;iBACxB;aACF,EACD,GAAG,EACH,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CACjC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/zero-token/gateway/api-request-logger-quiet.d.ts

@@ -0,0 +1,3 @@
+import type { MiddlewareHandler } from "hono";
+export declare function apiRequestLoggerQuiet(): MiddlewareHandler;
+//# sourceMappingURL=api-request-logger-quiet.d.ts.map

package/dist/zero-token/gateway/api-request-logger-quiet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-request-logger-quiet.d.ts","sourceRoot":"","sources":["../../../src/zero-token/gateway/api-request-logger-quiet.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AA6B9C,wBAAgB,qBAAqB,IAAI,iBAAiB,CA+CzD"}