@izagood/avcs 0.1.0

package/dist/core/identity.js

@@ -0,0 +1,62 @@
+// Phase 3: cryptographic identity.
+//
+// Until now "this evidence came from ci_bot" and "a human made this decision" were
+// self-reported strings an agent could forge. Identity makes them checkable: an
+// actor holds an ed25519 keypair, signs the content-address (oid) of objects it
+// produces, and the reducer's trust gate only honors evidence/decisions whose
+// signature verifies against a registered public key for the claimed actor.
+//
+// ed25519 via node:crypto — no external dependency.
+import { generateKeyPairSync, sign as nodeSign, verify as nodeVerify } from "node:crypto";
+import { Buffer } from "node:buffer";
+export function generateKeypair() {
+    const { publicKey, privateKey } = generateKeyPairSync("ed25519", {
+        publicKeyEncoding: { type: "spki", format: "pem" },
+        privateKeyEncoding: { type: "pkcs8", format: "pem" },
+    });
+    return { publicKey: publicKey, privateKey: privateKey };
+}
+export function signMessage(privateKeyPem, message) {
+    // ed25519 is a one-shot signature: algorithm arg is null.
+    return nodeSign(null, Buffer.from(message, "utf8"), privateKeyPem).toString("base64");
+}
+export function verifyMessage(publicKeyPem, message, sigB64) {
+    try {
+        return nodeVerify(null, Buffer.from(message, "utf8"), publicKeyPem, Buffer.from(sigB64, "base64"));
+    }
+    catch {
+        return false;
+    }
+}
+/** A registry of trusted public keys, keyed by keyId. */
+export class Keyring {
+    #keys = new Map();
+    register(rec) {
+        this.#keys.set(rec.keyId, rec);
+    }
+    get(keyId) {
+        return this.#keys.get(keyId);
+    }
+    has(keyId) {
+        return this.#keys.has(keyId);
+    }
+    get size() {
+        return this.#keys.size;
+    }
+    /**
+     * Verify a signature over `oid`, claimed to come from `claimedActorId`.
+     * Returns true only if the signing key is registered AND its registered actor
+     * matches the claim — i.e. you cannot sign as ci_bot with ai_agent's key.
+     */
+    verifyFor(claimedActorId, oid, sig) {
+        if (!sig)
+            return false;
+        const rec = this.#keys.get(sig.keyId);
+        if (!rec)
+            return false;
+        if (rec.actorId !== claimedActorId)
+            return false;
+        return verifyMessage(rec.publicKey, oid, sig.sig);
+    }
+}
+//# sourceMappingURL=identity.js.map

package/dist/core/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/core/identity.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,mFAAmF;AACnF,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,oDAAoD;AAEpD,OAAO,EAAE,mBAAmB,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAcrC,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,EAAE;QAC/D,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACrD,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,SAAmB,EAAE,UAAU,EAAE,UAAoB,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,aAAqB,EAAE,OAAe;IAChE,0DAA0D;IAC1D,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,OAAe,EAAE,MAAc;IACjF,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AASD,yDAAyD;AACzD,MAAM,OAAO,OAAO;IAClB,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAErC,QAAQ,CAAC,GAAc;QACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,cAAsB,EAAE,GAAW,EAAE,GAA0B;QACvE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,IAAI,GAAG,CAAC,OAAO,KAAK,cAAc;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/hub/hubClient.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Push objects the hub lacks: diff our local oids against GET /have and POST the
+ * missing ones. Private (stash) ops are local-only and never gossiped — same rule as
+ * Repo.pull. Returns how many objects were pushed.
+ */
+export declare function pushToHub(localRepoDir: string, hubUrl: string): Promise<{
+    pushed: number;
+    rejected: number;
+}>;
+/**
+ * Pull objects the local store lacks: GET /have, then GET each missing /objects/:oid
+ * and put it locally (idempotent, content-addressed). Returns how many were pulled.
+ */
+export declare function pullFromHub(localRepoDir: string, hubUrl: string): Promise<{
+    pulled: number;
+}>;
+/**
+ * Request a finalize (= PR merge) on the hub (E6): POST /finalize with the view, the new
+ * checkpoint, the parent head being compare-and-swapped, and the finalizer. The hub runs
+ * the authoritative CAS+lock+gates. When `signWith` is given the request is signed so a
+ * gated hub can authenticate the finalizer. Returns the HTTP status + the hub's verdict.
+ */
+export declare function finalizeOnHub(hubUrl: string, args: {
+    view: string;
+    newCheckpoint: string;
+    parentHead: string | null;
+    by: string;
+    signWith?: {
+        keyId: string;
+        privateKey: string;
+    };
+}): Promise<{
+    status: number;
+    finalized: boolean;
+    head?: string;
+    reason?: string;
+}>;
+//# sourceMappingURL=hubClient.d.ts.map

package/dist/hub/hubClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hubClient.d.ts","sourceRoot":"","sources":["../../src/hub/hubClient.ts"],"names":[],"mappings":"AAsDA;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBnH;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsCnG;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACrI,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAWjF"}

package/dist/hub/hubClient.js

@@ -0,0 +1,157 @@
+// Network object-gossip client against an AVCS hub (see hubServer.ts).
+//
+// Content-addressed union semantics, mirroring Repo.pull: only transfer what's missing,
+// never mutate an existing object. push = send objects the hub lacks; pull = fetch
+// objects we lack. Uses the global fetch available in Node 22.
+import { existsSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { ObjectStore } from "../store/objectStore.js";
+import { keysOf } from "../reducer/reducer.js";
+/** GET /have → the set of oids the hub holds. */
+async function hubHave(hubUrl) {
+    const res = await fetch(`${hubUrl.replace(/\/$/, "")}/have`);
+    if (!res.ok)
+        throw new Error(`GET /have failed: ${res.status} ${res.statusText}`);
+    const oids = (await res.json());
+    return new Set(oids);
+}
+/** Per-hub sync cursors persisted under .avcs/sync-cursors.json (E5). */
+async function readCursors(root) {
+    const p = join(root, "sync-cursors.json");
+    if (!existsSync(p))
+        return {};
+    try {
+        return JSON.parse(await readFile(p, "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Discover the oids to consider pulling. Tries the incremental `GET /sync?since=N`
+ * endpoint (E5): only the oids appended since the client's last cursor, plus the new
+ * cursor. Falls back to the full `GET /have` against an older hub (cursor stays null).
+ * Correctness never depends on the cursor — a wrong/stale one at worst transfers more.
+ */
+async function discover(base, since) {
+    try {
+        const res = await fetch(`${base}/sync?since=${since}`);
+        if (res.ok) {
+            const j = (await res.json());
+            return { oids: j.oids, cursor: j.cursor };
+        }
+    }
+    catch {
+        // fall through to /have
+    }
+    return { oids: [...(await hubHave(base))], cursor: null };
+}
+/** Mirror Repo.pull's import side-effect: maintain the entity index for imported ops. */
+async function indexIfOperation(store, obj, oid) {
+    if (obj.type === "operation") {
+        for (const k of keysOf(obj))
+            await store.appendEntityIndex(k, oid);
+    }
+}
+/**
+ * Push objects the hub lacks: diff our local oids against GET /have and POST the
+ * missing ones. Private (stash) ops are local-only and never gossiped — same rule as
+ * Repo.pull. Returns how many objects were pushed.
+ */
+export async function pushToHub(localRepoDir, hubUrl) {
+    const base = hubUrl.replace(/\/$/, "");
+    const store = new ObjectStore(localRepoDir);
+    const have = await hubHave(base);
+    let pushed = 0;
+    let rejected = 0;
+    for await (const obj of store.list()) {
+        const oid = obj.oid;
+        if (have.has(oid))
+            continue;
+        if (obj.type === "operation" && obj.private)
+            continue; // stash stays local
+        const res = await fetch(`${base}/objects`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(obj),
+        });
+        if (res.status === 403) {
+            rejected++; // gated hub refused an unauthorized op
+            continue;
+        }
+        if (!res.ok)
+            throw new Error(`POST /objects failed for ${oid}: ${res.status} ${res.statusText}`);
+        pushed++;
+    }
+    return { pushed, rejected };
+}
+/**
+ * Pull objects the local store lacks: GET /have, then GET each missing /objects/:oid
+ * and put it locally (idempotent, content-addressed). Returns how many were pulled.
+ */
+export async function pullFromHub(localRepoDir, hubUrl) {
+    const base = hubUrl.replace(/\/$/, "");
+    const store = new ObjectStore(localRepoDir);
+    await store.init(); // tolerate a fresh local repo dir
+    // Incremental discovery (E5): only consider oids the hub added since our last pull.
+    const cursors = await readCursors(store.root);
+    const since = cursors[base] ?? 0;
+    const { oids, cursor } = await discover(base, since);
+    let pulled = 0;
+    for (const oid of oids) {
+        if (await store.has(oid))
+            continue;
+        const res = await fetch(`${base}/objects/${encodeURIComponent(oid)}`);
+        if (res.status === 404)
+            continue; // raced eviction; skip
+        if (!res.ok)
+            throw new Error(`GET /objects/${oid} failed: ${res.status} ${res.statusText}`);
+        const obj = (await res.json());
+        await store.put(obj);
+        await indexIfOperation(store, obj, oid);
+        pulled++;
+    }
+    // Advance the cursor only after the loop completed (a throw aborts before this, so a
+    // failed pull retries from the same cursor next time — never a permanent miss).
+    if (cursor !== null) {
+        cursors[base] = cursor;
+        await store.writeAux("sync-cursors.json", JSON.stringify(cursors));
+    }
+    // Governance distribution: adopt the hub's authoritative governance refs (policy,
+    // membership, protection, protected heads). The objects they point to were just
+    // pulled above, so the refs resolve. Working refs (view:*/checkpoint:*) stay local.
+    const refsRes = await fetch(`${base}/refs`);
+    if (refsRes.ok) {
+        const { refs } = (await refsRes.json());
+        for (const [name, refOid] of Object.entries(refs)) {
+            if (!/^(policy$|member:|protection:|head:)/.test(name))
+                continue;
+            if (await store.has(refOid))
+                await store.setRef(name, refOid);
+        }
+    }
+    // Propagate redactions: evict plaintext for blobs redacted after we pulled them.
+    const { applyRedactions } = await import("./../store/applyRedactions.js");
+    await applyRedactions(store);
+    return { pulled };
+}
+/**
+ * Request a finalize (= PR merge) on the hub (E6): POST /finalize with the view, the new
+ * checkpoint, the parent head being compare-and-swapped, and the finalizer. The hub runs
+ * the authoritative CAS+lock+gates. When `signWith` is given the request is signed so a
+ * gated hub can authenticate the finalizer. Returns the HTTP status + the hub's verdict.
+ */
+export async function finalizeOnHub(hubUrl, args) {
+    const base = hubUrl.replace(/\/$/, "");
+    const body = { view: args.view, newCheckpoint: args.newCheckpoint, parentHead: args.parentHead, by: args.by };
+    if (args.signWith) {
+        const { signMessage } = await import("../core/identity.js");
+        const msg = `finalize:${args.view}:${args.newCheckpoint}:${args.parentHead ?? ""}`;
+        body.sig = { keyId: args.signWith.keyId, alg: "ed25519", sig: signMessage(args.signWith.privateKey, msg) };
+    }
+    const res = await fetch(`${base}/finalize`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(body) });
+    const j = (await res.json().catch(() => ({})));
+    return { status: res.status, finalized: j.finalized ?? false, head: j.head, reason: j.reason };
+}
+//# sourceMappingURL=hubClient.js.map

package/dist/hub/hubClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hubClient.js","sourceRoot":"","sources":["../../src/hub/hubClient.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,wFAAwF;AACxF,mFAAmF;AACnF,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAG/C,iDAAiD;AACjD,KAAK,UAAU,OAAO,CAAC,MAAc;IACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAa,CAAC;IAC5C,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACtG,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuC,CAAC;YACnE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,gBAAgB,CAAC,KAAkB,EAAE,GAAc,EAAE,GAAW;IAC7E,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,GAAgB,CAAC;YAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,YAAoB,EAAE,MAAc;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAa,CAAC;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAK,GAAiB,CAAC,OAAO;YAAE,SAAS,CAAC,oBAAoB;QAC1F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,QAAQ,EAAE,CAAC,CAAC,uCAAuC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACjG,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,YAAoB,EAAE,MAAc;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,kCAAkC;IACtD,oFAAoF;IACpF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,SAAS,CAAC,uBAAuB;QACzD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;QAC5C,MAAM,KAAK,CAAC,GAAG,CAAC,GAAY,CAAC,CAAC;QAC9B,MAAM,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,qFAAqF;IACrF,gFAAgF;IAChF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAAC,CAAC;IAEpH,kFAAkF;IAClF,gFAAgF;IAChF,oFAAoF;IACpF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAqC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjE,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,iFAAiF;IACjF,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAC1E,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAsI;IAEtI,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACvI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,YAAY,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACnF,IAAI,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7I,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4D,CAAC;IAC1G,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACjG,CAAC"}

package/dist/hub/hubServer.d.ts

@@ -0,0 +1,28 @@
+import { type Logger } from "../observe/logger.ts";
+import { Metrics } from "../observe/metrics.ts";
+/** Wire-protocol version the hub speaks (have/objects/refs gossip). Bumped on breaking changes. */
+export declare const HUB_PROTOCOL_VERSION = 1;
+export interface HubHandle {
+    url: string;
+    port: number;
+    metrics: Metrics;
+    close(): Promise<void>;
+}
+/**
+ * Start an HTTP hub backed by `new ObjectStore(opts.repoDir)`. The store is init()'d
+ * so an empty repo dir works. Pass `port: 0` (or omit) to get an OS-assigned port,
+ * read back from the returned handle.
+ */
+export declare function startHub(opts: {
+    repoDir: string;
+    port?: number;
+    gated?: boolean;
+    logger?: Logger;
+    metrics?: Metrics;
+    /** App-layer per-actor push quota (E7). Omit to disable. */
+    rateLimit?: {
+        maxPerWindow: number;
+        windowMs?: number;
+    };
+}): Promise<HubHandle>;
+//# sourceMappingURL=hubServer.d.ts.map

package/dist/hub/hubServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hubServer.d.ts","sourceRoot":"","sources":["../../src/hub/hubServer.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAOhD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAgFD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IACnC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IACpF,4DAA4D;IAC5D,SAAS,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD,GAAG,OAAO,CAAC,SAAS,CAAC,CAiErB"}