@ghostlytools/cli 1.3.6 → 1.3.8

package/dist/assets/{host-DFzlKU3P.js → host-Mz74S9cM.js}

@@ -1,10 +1,10 @@
-import { $o as extractParamsFromSdp, Ai as isPublicAddress, Jo as RTC_CONFIG, Qo as callSignalHeardAt, Xo as buildSdpFromSignal, Yo as answersOffer, Zo as callRtcConfig, es as parseCallSignal, oi as checkPushEndpoint, qo as CALL_SIGNAL_MAX_AGE_MS, tl as setLinkTraceSink, ts as signalHasVideo, xl as fromBase64Url } from "./src-XhjSWnp-.js";
-import { a as fedimintSdkOn, r as irohRelayProblem } from "./irohWeb-DZDCyL9b.js";
+import { $o as extractParamsFromSdp, Ai as isPublicAddress, Jo as RTC_CONFIG, Qo as callSignalHeardAt, Xo as buildSdpFromSignal, Yo as answersOffer, Zo as callRtcConfig, es as parseCallSignal, oi as checkPushEndpoint, qo as CALL_SIGNAL_MAX_AGE_MS, tl as setLinkTraceSink, ts as signalHasVideo, xl as fromBase64Url } from "./src-CVYir6mP.js";
+import { a as fedimintSdkOn, r as irohRelayProblem } from "./irohWeb-C8iKFl8d.js";
 import { r as asCliError, t as CliError } from "./errors-B-zMxbcd.js";
-import { a as findChat } from "./apiKit-lX3Xx_hY.js";
-import { _ as flushCardUpdates, c as paymentJson, d as nodeLocalFetch, f as chatJson, g as resumeHolds, h as groupMessageJson, l as reportAppFrames, m as groupJson, p as chatMessageJson, r as callApi, u as servedApps } from "./api-z9mlywrn.js";
+import { a as findChat } from "./apiKit-C9lLXQwt.js";
+import { _ as flushCardUpdates, c as paymentJson, d as nodeLocalFetch, f as chatJson, g as resumeHolds, h as groupMessageJson, l as reportAppFrames, m as groupJson, p as chatMessageJson, r as callApi, u as servedApps } from "./api-Q6QZ0oIy.js";
 import { n as RESTORED_MARK, r as acquireLock } from "./profiles-gPCjLOQq.js";
-import { r as privateFolder, t as ownFolder } from "./privateFolder-Bk9C9oFv.js";
+import { i as proof, l as privateFolder, n as newDaemonSecret, s as ownFolder } from "./daemonProof-B53VnZ1Z.js";
 import { createRequire } from "node:module";
 import { appendFileSync, chmodSync, closeSync, existsSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, rmSync, statSync, writeFileSync, writeSync } from "node:fs";
 import { readFile } from "node:fs/promises";
@@ -1877,10 +1877,30 @@ var EventHub = class {
 		} catch (error) {
 			process.stderr.write(`ghostly: event journal error: ${error instanceof Error ? error.message : String(error)}\n`);
 		}
+		this.tell(event);
+		return event;
+	}
+	/**
+	* An event for the listeners only, never the journal: a contact's app frames, live only (WISP 1200), which at the
+	* receiver's rate would push every other chat's events out of it in seconds. It takes no seq of its own but the last
+	* event's (as an `agent.turn` takes its source's): a cursor that handled it resumes after that event, a replay never
+	* gives it, and a restart never numbers an event again.
+	*/
+	emitLive(type, id, fields = {}) {
+		const event = {
+			seq: this.seq,
+			id,
+			type,
+			at: this.now(),
+			...fields
+		};
+		this.tell(event);
+		return event;
+	}
+	tell(event) {
 		for (const listener of this.listeners) try {
 			listener(event);
 		} catch {}
-		return event;
 	}
 	/** Keeps the last `JOURNAL_KEEP` events, and of them no more than `JOURNAL_KEEP_BYTES`. */
 	trimJournal() {
@@ -4581,14 +4601,14 @@ async function startRuntime(paths, options = {}) {
 	(await import("./ghostly_iroh_web-BsAEFIjl.js")).initSync({ module: irohWasmBytes() });
 	const [{ registerFileBytes }, { NodeFileBytes }] = await Promise.all([import("./fileBytes-CgbibpbV.js"), import("./fileBytes-CfSXjTFa.js")]);
 	registerFileBytes("native", async () => new NodeFileBytes(paths.files), true);
-	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./server-D6FSznK5.js"), import("./endpoint-BOTFMpfS.js")]);
+	const [{ EngineServer }, { createHyperEndpoint }] = await Promise.all([import("./server-CaDVxJKy.js"), import("./endpoint-BOTFMpfS.js")]);
 	const network = hyperdhtNetwork();
 	const dht = mainlineNetwork();
-	const mainline = dht.off ? null : new (await (import("./mainline-BHE5-R3A.js"))).Mainline({
+	const mainline = dht.off ? null : new (await (import("./mainline-CbrPHUrZ.js"))).Mainline({
 		bootstrap: dht.bootstrap,
 		host: dht.host
 	});
-	const transport = mainline || pinned ? new (await (import("./mainline-BHE5-R3A.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
+	const transport = mainline || pinned ? new (await (import("./mainline-CbrPHUrZ.js"))).RelaysAndDht(mainline, pinned ? { relays: pinned } : {}, !!pinned) : null;
 	const apps = servedApps(paths.dir).length > 0;
 	const server = new EngineServer({
 		...transport ? { transport } : {},
@@ -4734,11 +4754,12 @@ async function serve(host) {
 		else ownFolder(ctx.runtime.paths.dir, "the daemon will not put its socket there");
 	}
 	if (existsSync(path)) rmSync(path, { force: true });
+	const secret = newDaemonSecret(ctx.runtime.paths.dir);
 	const sockets = /* @__PURE__ */ new Set();
 	const server = createServer((socket) => {
 		sockets.add(socket);
 		socket.on("close", () => sockets.delete(socket));
-		connection(ctx, socket);
+		connection(ctx, socket, secret);
 	});
 	await new Promise((resolve, reject) => {
 		server.once("error", reject);
@@ -4802,7 +4823,9 @@ function ownerOnlyUmask() {
 		return null;
 	}
 }
-function connection(ctx, socket) {
+/** A client's nonce: 16 to 64 bytes as lowercase hex, so the proof is over nothing but a nonce. */
+var NONCE = /^(?:[0-9a-f]{2}){16,64}$/;
+function connection(ctx, socket, secret) {
 	const unsubscribes = [];
 	let limit = MAX_UNREAD;
 	const unsubscribe = () => {
@@ -4852,6 +4875,21 @@ function connection(ctx, socket) {
 			});
 			return;
 		}
+		if (request.method === "daemon.hello") {
+			const nonce = request.params?.nonce;
+			if (typeof nonce !== "string" || !NONCE.test(nonce)) {
+				write({
+					id,
+					error: new CliError("bad_request", "daemon.hello takes a nonce: 16 to 64 bytes as lowercase hex").toJSON()
+				});
+				return;
+			}
+			write({
+				id,
+				result: { proof: proof(secret, "daemon", nonce) }
+			});
+			return;
+		}
 		if (request.method === "events.subscribe") {
 			if (unsubscribes.length) {
 				write({
@@ -4907,4 +4945,4 @@ function connection(ctx, socket) {
 //#endregion
 export { BASELINE_NEWEST, MAX_LINE, MAX_UNREAD, keepServing, openHost, serve };
 
-//# sourceMappingURL=host-DFzlKU3P.js.map
+//# sourceMappingURL=host-Mz74S9cM.js.map