@nervur-org/dock 0.4.1 → 0.6.0

package/beings/envoy.ts

@@ -1,218 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The envoy base: what every envoy is and no envoy has alone. An envoy is
-// a being of the org's standing in for a ward she does not run, an account
-// at a thing that speaks no Quo, and the trunk's envoy chapter says the
-// seven things she is. This is those seven as one class an author extends,
-// so that a vendor's envoy is her asks out, her signature and her decoding,
-// and nothing else.
-//
-// Two gates, one credential, one way out, one way in, one memory, one way
-// back. `credential` and `forget` are the owner's; `deliver`, for an envoy
-// that is called in, is the owner's too, and the daemon asks it with the
-// vendor's raw bytes and headers. What an occupant may ask is the class's
-// asks out, gated by `occupant` or by her own reading of the notes.
-//
-// Nothing here knows a vendor's name. The signature is `verify`, the
-// vocabulary is `decode`, and what a delivery wakes is `wake`, each a
-// method the class fills; the base keeps the discipline around them: the
-// bytes checked before anything is parsed, the id kept bounded so a retry
-// lands once, `{ ok }` answered before the wake goes out, a wake that meets
-// silence written down and never retried.
-import { Being, isSilence, isWord, wordOf } from 'nervur';
-import type { Asker, AskSpec, JsonObject, OccupantRecord } from 'nervur';
-
-// The two gates. The owner is the ward's ask pointer, `{ id: 'OWNER' }`,
-// which is how the daemon asks `deliver` and how the root places a
-// credential; an occupant is anyone holding a standing at her.
-export const owner = (_rec: OccupantRecord | undefined, asker: Asker): boolean => asker.id === 'OWNER';
-export const occupant = (rec: OccupantRecord | undefined): boolean => rec !== undefined;
-
-// The third gate: who may place what the vendor gave this account. WORLDS
-// has placing an envoy as an ask on home, shown by the gate to the org's
-// presences and to its model, with the box never logged into for it, so
-// this cannot be the owner alone. It is the owner or an occupant whose
-// note says she may, placed with her standing the way every other note is,
-// and it is never a default: an org that marked nobody has the root's
-// shell and nothing else, which is where this began.
-export const places = (rec: OccupantRecord | undefined, asker: Asker): boolean => asker.id === 'OWNER' || rec?.notes.credential === true;
-
-// A credential as a form, for a class that wants one. `at` is never among
-// the fields and cannot be: it is where this box sends the org's key, so a
-// form that set it would be a form that points the box at anywhere and
-// makes it fetch there with the account's own secret. Where a vendor
-// answers is the class's, since the class is the thing that speaks that
-// vendor, and only the owner may name another.
-export const CREDENTIAL = (properties: Record<string, JsonObject>, required: string[]): AskSpec => ({
-  description: 'what the vendor gave this account: kept in her cells, and never shown again',
-  input: { type: 'object', properties, required },
-  for: places,
-});
-
-// One delivery, decoded by the class into what the base needs: the
-// vendor's id for it, its kind in the vendor's words, which vendor id it
-// is about, and the values the class read off it.
-export type Delivery = { id: string; kind: string; about: string | null; data: JsonObject };
-// What a delivery wakes: one ask on the way back to whoever the vendor id
-// was remembered for, or nothing.
-export type Wake = { method: string; args: JsonObject };
-// What a way out heard: the status, and the body as an object, `{}` when
-// there was none or it was not JSON.
-export type Heard = { ok: boolean; status: number; body: JsonObject };
-
-const SEEN = 200;
-const FRESH = 5 * 60_000;
-
-export class Envoy extends Being {
-  static override cells: JsonObject = { credential: null, about: {}, seen: [], unwoken: [] };
-  static override asks: Record<string, AskSpec> = {
-    credential: { description: 'what the vendor gave the account: kept in her cells, never shown', input: { type: 'object' }, for: places },
-    forget: { description: 'forget the credential', input: { type: 'object' }, for: places },
-  };
-  // The one ask in, for an envoy the vendor calls: a class that is called
-  // in spreads it into her asks, `{ ...Envoy.asks, ...Envoy.IN, ...hers }`,
-  // and a one-way envoy shows no deliver at all.
-  static IN: Record<string, AskSpec> = {
-    deliver: { description: 'the vendor delivers: its raw bytes and headers, from the daemon as the owner', input: { type: 'object', properties: { body: { type: 'string' }, headers: { type: 'object' } }, required: ['body', 'headers'] }, for: owner },
-  };
-
-  // 1. Her credential is in her cells, and she gets it herself. The owner
-  // places what the vendor gave, values only; `check` is the class's word
-  // on what it must hold, a reason or null.
-  protected check(c: JsonObject): string | null {
-    for (const [k, v] of Object.entries(c)) if (typeof v !== 'string' || v === '') return `${k} is a non-empty string`;
-    return Object.keys(c).length ? null : 'a credential has at least one field';
-  }
-  // Where the vendor answers, as the class that speaks that vendor knows
-  // it. A class that leaves it null has an owner who must name one once.
-  static at: string | null = null;
-
-  credential(args: JsonObject, asker: Asker): JsonObject {
-    // `at` is the one field a form may not carry. From anyone but the
-    // owner it is dropped rather than refused, since a human pasting a key
-    // has said nothing about it either way, and what stands is the one
-    // already placed or the class's own.
-    const { at: named, ...rest } = args;
-    const at = asker.id === 'OWNER' && typeof named === 'string' ? named : ((this.held?.at as string | undefined) ?? (this.constructor as typeof Envoy).at);
-    const c: JsonObject = { ...rest, ...(typeof at === 'string' ? { at } : {}) };
-    const why = this.check(c);
-    if (why) return { error: why };
-    this.cells.credential = c;
-    return { kept: true };
-  }
-  forget(): JsonObject {
-    this.cells.credential = null;
-    return { kept: false };
-  }
-  protected get held(): JsonObject | null {
-    return (this.cells.credential as JsonObject | null) ?? null;
-  }
-
-  // 2. Her asks out are the vendor's surface, narrowed: one fetch, from
-  // `at` in her credential with `key` as the bearer, the answer as values.
-  // The class reshapes what it heard and passes nothing through raw.
-  protected async out(path: string, init: { method?: string; body?: JsonObject; headers?: Record<string, string> } = {}): Promise<Heard> {
-    const c = this.held;
-    if (!c || typeof c.at !== 'string') return { ok: false, status: 0, body: { error: 'no credential: the owner has not placed one' } };
-    let r: Response;
-    try {
-      r = await fetch(`${c.at}${path}`, {
-        method: init.method ?? (init.body ? 'POST' : 'GET'),
-        headers: { ...(typeof c.key === 'string' ? { authorization: `Bearer ${c.key}` } : {}), ...(init.body ? { 'content-type': 'application/json' } : {}), ...(init.headers ?? {}) },
-        ...(init.body ? { body: JSON.stringify(init.body) } : {}),
-      });
-    } catch {
-      return { ok: false, status: 0, body: { error: 'the vendor is unreachable' } };
-    }
-    const v = (await r.json().catch(() => ({}))) as unknown;
-    const body = v !== null && typeof v === 'object' && !Array.isArray(v) ? (v as JsonObject) : {};
-    return { ok: r.ok, status: r.status, body };
-  }
-  // The vendor's no, as an error object in her own words.
-  protected refused(h: Heard): JsonObject {
-    return h.status === 0 ? h.body : { error: `the vendor refused: ${h.status}${typeof h.body.message === 'string' ? ` ${h.body.message}` : ''}` };
-  }
-
-  // 4. Her cells are what the vendor told her: the map from the vendor's id
-  // to whom it is about, written when she asked out, read when called in.
-  protected remember(vendorId: string, by: string, more: JsonObject = {}): void {
-    (this.cells.about as Record<string, JsonObject>)[vendorId] = { by, ...more };
-  }
-  protected recall(vendorId: string): (JsonObject & { by: string }) | undefined {
-    const m = this.cells.about as Record<string, JsonObject>;
-    return Object.hasOwn(m, vendorId) ? (m[vendorId] as JsonObject & { by: string }) : undefined;
-  }
-
-  // 3. `deliver` is her one ask in. The daemon asks it as the owner with
-  // the raw body and the headers; an empty body is a redirect landing,
-  // the query in the headers under `:query`. The signature is checked
-  // before anything is parsed; a delivery she has seen is `{ ok }` at once
-  // and wakes nobody twice; and 6, `{ ok }` goes back before the wake.
-  async deliver(args: JsonObject): Promise<JsonObject> {
-    const body = typeof args.body === 'string' ? args.body : '';
-    const headers = (args.headers && typeof args.headers === 'object' && !Array.isArray(args.headers) ? args.headers : {}) as Record<string, string>;
-    if (body === '') return this.landed(headers[':query'] ?? '', headers);
-    if (!(await this.verify(body, headers))) return { error: 'bad signature' };
-    const d = this.decode(body, headers);
-    if ('error' in d) return d as JsonObject;
-    const seen = this.cells.seen as string[];
-    const mark = `${d.kind}:${d.id}`;
-    if (seen.includes(mark)) return { ok: true };
-    seen.push(mark);
-    while (seen.length > SEEN) seen.shift();
-    void this.#wake(d);
-    return { ok: true };
-  }
-  // The class's word on the vendor's signature, over the bytes as sent.
-  protected verify(_body: string, _headers: Record<string, string>): Promise<boolean> | boolean {
-    return false;
-  }
-  // The class's reading of the vendor's vocabulary.
-  protected decode(_body: string, _headers: Record<string, string>): Delivery | { error: string } {
-    return { error: 'not called in' };
-  }
-  // Where a redirect lands: an OAuth code in the query, for a class that
-  // begins its account that way. The base takes nothing from it.
-  protected landed(_query: string, _headers: Record<string, string>): JsonObject | Promise<JsonObject> {
-    return { ok: true };
-  }
-  // A signature over text with a shared secret, hex, the shape most
-  // vendors sign in: here once so a class writes the vendor's framing only.
-  protected async hmac(secret: string, text: string): Promise<string> {
-    const key = await crypto.subtle.importKey('raw', new TextEncoder().encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
-    return [...new Uint8Array(await crypto.subtle.sign('HMAC', key, new TextEncoder().encode(text)))].map((x) => x.toString(16).padStart(2, '0')).join('');
-  }
-  // Whether a vendor's timestamp is within five minutes of now, in seconds
-  // or in milliseconds, since vendors sign in either and a class should
-  // not have to know which.
-  protected fresh(ts: string | number): boolean {
-    const t = Number(ts);
-    if (!Number.isFinite(t)) return false;
-    const ms = t < 1e11 ? t * 1000 : t;
-    return Math.abs(Date.now() - ms) <= FRESH;
-  }
-
-  // 5. Her way back is a standing placed like any other, `to:<id>` for the
-  // occupant a vendor id was remembered for, handed to her at the knock.
-  // A delivery is one ask on it, in her own words, said by `wake`; the
-  // being woken cannot tell it from a clock.
-  protected wake(_d: Delivery, _about: (JsonObject & { by: string }) | undefined): Wake | null {
-    return null;
-  }
-  async #wake(d: Delivery): Promise<void> {
-    const about = d.about === null ? undefined : this.recall(d.about);
-    const w = this.wake(d, about);
-    if (!w) return;
-    const unwoken = this.cells.unwoken as JsonObject[];
-    // a wake the class shaped wrong is written down, never dropped on the floor
-    if (typeof w.method !== 'string' || !w.method || w.args === null || typeof w.args !== 'object') return void unwoken.push({ id: d.id, kind: d.kind, why: 'a wake is { method, args }' });
-    const back = about ? this.standings[`to:${about.by}`] : undefined;
-    if (!back) return void unwoken.push({ id: d.id, kind: d.kind, why: about ? `no way back to ${about.by}` : 'about nobody she remembers' });
-    const out = await back.ask(w.method, w.args);
-    if (isSilence(out) || out === undefined) unwoken.push({ id: d.id, kind: d.kind, why: 'silence' });
-    else if (isWord(out)) unwoken.push({ id: d.id, kind: d.kind, why: wordOf(out) });
-  }
-  // What she could not wake, for the device's own code and a suite.
-  get unwoken(): JsonObject[] {
-    return this.cells.unwoken as JsonObject[];
-  }
-}

package/dist/beings/envoy.d.ts

@@ -1,54 +0,0 @@
-import { Being } from 'nervur';
-import type { Asker, AskSpec, JsonObject, OccupantRecord } from 'nervur';
-export declare const owner: (_rec: OccupantRecord | undefined, asker: Asker) => boolean;
-export declare const occupant: (rec: OccupantRecord | undefined) => boolean;
-export declare const places: (rec: OccupantRecord | undefined, asker: Asker) => boolean;
-export declare const CREDENTIAL: (properties: Record<string, JsonObject>, required: string[]) => AskSpec;
-export type Delivery = {
-    id: string;
-    kind: string;
-    about: string | null;
-    data: JsonObject;
-};
-export type Wake = {
-    method: string;
-    args: JsonObject;
-};
-export type Heard = {
-    ok: boolean;
-    status: number;
-    body: JsonObject;
-};
-export declare class Envoy extends Being {
-    #private;
-    static cells: JsonObject;
-    static asks: Record<string, AskSpec>;
-    static IN: Record<string, AskSpec>;
-    protected check(c: JsonObject): string | null;
-    static at: string | null;
-    credential(args: JsonObject, asker: Asker): JsonObject;
-    forget(): JsonObject;
-    protected get held(): JsonObject | null;
-    protected out(path: string, init?: {
-        method?: string;
-        body?: JsonObject;
-        headers?: Record<string, string>;
-    }): Promise<Heard>;
-    protected refused(h: Heard): JsonObject;
-    protected remember(vendorId: string, by: string, more?: JsonObject): void;
-    protected recall(vendorId: string): (JsonObject & {
-        by: string;
-    }) | undefined;
-    deliver(args: JsonObject): Promise<JsonObject>;
-    protected verify(_body: string, _headers: Record<string, string>): Promise<boolean> | boolean;
-    protected decode(_body: string, _headers: Record<string, string>): Delivery | {
-        error: string;
-    };
-    protected landed(_query: string, _headers: Record<string, string>): JsonObject | Promise<JsonObject>;
-    protected hmac(secret: string, text: string): Promise<string>;
-    protected fresh(ts: string | number): boolean;
-    protected wake(_d: Delivery, _about: (JsonObject & {
-        by: string;
-    }) | undefined): Wake | null;
-    get unwoken(): JsonObject[];
-}

package/dist/beings/envoy.js

@@ -1,211 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The envoy base: what every envoy is and no envoy has alone. An envoy is
-// a being of the org's standing in for a ward she does not run, an account
-// at a thing that speaks no Quo, and the trunk's envoy chapter says the
-// seven things she is. This is those seven as one class an author extends,
-// so that a vendor's envoy is her asks out, her signature and her decoding,
-// and nothing else.
-//
-// Two gates, one credential, one way out, one way in, one memory, one way
-// back. `credential` and `forget` are the owner's; `deliver`, for an envoy
-// that is called in, is the owner's too, and the daemon asks it with the
-// vendor's raw bytes and headers. What an occupant may ask is the class's
-// asks out, gated by `occupant` or by her own reading of the notes.
-//
-// Nothing here knows a vendor's name. The signature is `verify`, the
-// vocabulary is `decode`, and what a delivery wakes is `wake`, each a
-// method the class fills; the base keeps the discipline around them: the
-// bytes checked before anything is parsed, the id kept bounded so a retry
-// lands once, `{ ok }` answered before the wake goes out, a wake that meets
-// silence written down and never retried.
-import { Being, isSilence, isWord, wordOf } from 'nervur';
-// The two gates. The owner is the ward's ask pointer, `{ id: 'OWNER' }`,
-// which is how the daemon asks `deliver` and how the root places a
-// credential; an occupant is anyone holding a standing at her.
-export const owner = (_rec, asker) => asker.id === 'OWNER';
-export const occupant = (rec) => rec !== undefined;
-// The third gate: who may place what the vendor gave this account. WORLDS
-// has placing an envoy as an ask on home, shown by the gate to the org's
-// presences and to its model, with the box never logged into for it, so
-// this cannot be the owner alone. It is the owner or an occupant whose
-// note says she may, placed with her standing the way every other note is,
-// and it is never a default: an org that marked nobody has the root's
-// shell and nothing else, which is where this began.
-export const places = (rec, asker) => asker.id === 'OWNER' || rec?.notes.credential === true;
-// A credential as a form, for a class that wants one. `at` is never among
-// the fields and cannot be: it is where this box sends the org's key, so a
-// form that set it would be a form that points the box at anywhere and
-// makes it fetch there with the account's own secret. Where a vendor
-// answers is the class's, since the class is the thing that speaks that
-// vendor, and only the owner may name another.
-export const CREDENTIAL = (properties, required) => ({
-    description: 'what the vendor gave this account: kept in her cells, and never shown again',
-    input: { type: 'object', properties, required },
-    for: places,
-});
-const SEEN = 200;
-const FRESH = 5 * 60_000;
-export class Envoy extends Being {
-    static cells = { credential: null, about: {}, seen: [], unwoken: [] };
-    static asks = {
-        credential: { description: 'what the vendor gave the account: kept in her cells, never shown', input: { type: 'object' }, for: places },
-        forget: { description: 'forget the credential', input: { type: 'object' }, for: places },
-    };
-    // The one ask in, for an envoy the vendor calls: a class that is called
-    // in spreads it into her asks, `{ ...Envoy.asks, ...Envoy.IN, ...hers }`,
-    // and a one-way envoy shows no deliver at all.
-    static IN = {
-        deliver: { description: 'the vendor delivers: its raw bytes and headers, from the daemon as the owner', input: { type: 'object', properties: { body: { type: 'string' }, headers: { type: 'object' } }, required: ['body', 'headers'] }, for: owner },
-    };
-    // 1. Her credential is in her cells, and she gets it herself. The owner
-    // places what the vendor gave, values only; `check` is the class's word
-    // on what it must hold, a reason or null.
-    check(c) {
-        for (const [k, v] of Object.entries(c))
-            if (typeof v !== 'string' || v === '')
-                return `${k} is a non-empty string`;
-        return Object.keys(c).length ? null : 'a credential has at least one field';
-    }
-    // Where the vendor answers, as the class that speaks that vendor knows
-    // it. A class that leaves it null has an owner who must name one once.
-    static at = null;
-    credential(args, asker) {
-        // `at` is the one field a form may not carry. From anyone but the
-        // owner it is dropped rather than refused, since a human pasting a key
-        // has said nothing about it either way, and what stands is the one
-        // already placed or the class's own.
-        const { at: named, ...rest } = args;
-        const at = asker.id === 'OWNER' && typeof named === 'string' ? named : (this.held?.at ?? this.constructor.at);
-        const c = { ...rest, ...(typeof at === 'string' ? { at } : {}) };
-        const why = this.check(c);
-        if (why)
-            return { error: why };
-        this.cells.credential = c;
-        return { kept: true };
-    }
-    forget() {
-        this.cells.credential = null;
-        return { kept: false };
-    }
-    get held() {
-        return this.cells.credential ?? null;
-    }
-    // 2. Her asks out are the vendor's surface, narrowed: one fetch, from
-    // `at` in her credential with `key` as the bearer, the answer as values.
-    // The class reshapes what it heard and passes nothing through raw.
-    async out(path, init = {}) {
-        const c = this.held;
-        if (!c || typeof c.at !== 'string')
-            return { ok: false, status: 0, body: { error: 'no credential: the owner has not placed one' } };
-        let r;
-        try {
-            r = await fetch(`${c.at}${path}`, {
-                method: init.method ?? (init.body ? 'POST' : 'GET'),
-                headers: { ...(typeof c.key === 'string' ? { authorization: `Bearer ${c.key}` } : {}), ...(init.body ? { 'content-type': 'application/json' } : {}), ...(init.headers ?? {}) },
-                ...(init.body ? { body: JSON.stringify(init.body) } : {}),
-            });
-        }
-        catch {
-            return { ok: false, status: 0, body: { error: 'the vendor is unreachable' } };
-        }
-        const v = (await r.json().catch(() => ({})));
-        const body = v !== null && typeof v === 'object' && !Array.isArray(v) ? v : {};
-        return { ok: r.ok, status: r.status, body };
-    }
-    // The vendor's no, as an error object in her own words.
-    refused(h) {
-        return h.status === 0 ? h.body : { error: `the vendor refused: ${h.status}${typeof h.body.message === 'string' ? ` ${h.body.message}` : ''}` };
-    }
-    // 4. Her cells are what the vendor told her: the map from the vendor's id
-    // to whom it is about, written when she asked out, read when called in.
-    remember(vendorId, by, more = {}) {
-        this.cells.about[vendorId] = { by, ...more };
-    }
-    recall(vendorId) {
-        const m = this.cells.about;
-        return Object.hasOwn(m, vendorId) ? m[vendorId] : undefined;
-    }
-    // 3. `deliver` is her one ask in. The daemon asks it as the owner with
-    // the raw body and the headers; an empty body is a redirect landing,
-    // the query in the headers under `:query`. The signature is checked
-    // before anything is parsed; a delivery she has seen is `{ ok }` at once
-    // and wakes nobody twice; and 6, `{ ok }` goes back before the wake.
-    async deliver(args) {
-        const body = typeof args.body === 'string' ? args.body : '';
-        const headers = (args.headers && typeof args.headers === 'object' && !Array.isArray(args.headers) ? args.headers : {});
-        if (body === '')
-            return this.landed(headers[':query'] ?? '', headers);
-        if (!(await this.verify(body, headers)))
-            return { error: 'bad signature' };
-        const d = this.decode(body, headers);
-        if ('error' in d)
-            return d;
-        const seen = this.cells.seen;
-        const mark = `${d.kind}:${d.id}`;
-        if (seen.includes(mark))
-            return { ok: true };
-        seen.push(mark);
-        while (seen.length > SEEN)
-            seen.shift();
-        void this.#wake(d);
-        return { ok: true };
-    }
-    // The class's word on the vendor's signature, over the bytes as sent.
-    verify(_body, _headers) {
-        return false;
-    }
-    // The class's reading of the vendor's vocabulary.
-    decode(_body, _headers) {
-        return { error: 'not called in' };
-    }
-    // Where a redirect lands: an OAuth code in the query, for a class that
-    // begins its account that way. The base takes nothing from it.
-    landed(_query, _headers) {
-        return { ok: true };
-    }
-    // A signature over text with a shared secret, hex, the shape most
-    // vendors sign in: here once so a class writes the vendor's framing only.
-    async hmac(secret, text) {
-        const key = await crypto.subtle.importKey('raw', new TextEncoder().encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
-        return [...new Uint8Array(await crypto.subtle.sign('HMAC', key, new TextEncoder().encode(text)))].map((x) => x.toString(16).padStart(2, '0')).join('');
-    }
-    // Whether a vendor's timestamp is within five minutes of now, in seconds
-    // or in milliseconds, since vendors sign in either and a class should
-    // not have to know which.
-    fresh(ts) {
-        const t = Number(ts);
-        if (!Number.isFinite(t))
-            return false;
-        const ms = t < 1e11 ? t * 1000 : t;
-        return Math.abs(Date.now() - ms) <= FRESH;
-    }
-    // 5. Her way back is a standing placed like any other, `to:<id>` for the
-    // occupant a vendor id was remembered for, handed to her at the knock.
-    // A delivery is one ask on it, in her own words, said by `wake`; the
-    // being woken cannot tell it from a clock.
-    wake(_d, _about) {
-        return null;
-    }
-    async #wake(d) {
-        const about = d.about === null ? undefined : this.recall(d.about);
-        const w = this.wake(d, about);
-        if (!w)
-            return;
-        const unwoken = this.cells.unwoken;
-        // a wake the class shaped wrong is written down, never dropped on the floor
-        if (typeof w.method !== 'string' || !w.method || w.args === null || typeof w.args !== 'object')
-            return void unwoken.push({ id: d.id, kind: d.kind, why: 'a wake is { method, args }' });
-        const back = about ? this.standings[`to:${about.by}`] : undefined;
-        if (!back)
-            return void unwoken.push({ id: d.id, kind: d.kind, why: about ? `no way back to ${about.by}` : 'about nobody she remembers' });
-        const out = await back.ask(w.method, w.args);
-        if (isSilence(out) || out === undefined)
-            unwoken.push({ id: d.id, kind: d.kind, why: 'silence' });
-        else if (isWord(out))
-            unwoken.push({ id: d.id, kind: d.kind, why: wordOf(out) });
-    }
-    // What she could not wake, for the device's own code and a suite.
-    get unwoken() {
-        return this.cells.unwoken;
-    }
-}

package/dist/dock/console.d.ts

@@ -1,6 +0,0 @@
-import { Carrier } from '../beings/carry.ts';
-import type { Asker, OccupantRecord } from 'nervur';
-export declare const CONSOLE = "console";
-export declare class Console extends Carrier {
-    static carries(occupant: OccupantRecord | undefined, _asker: Asker): boolean;
-}

package/dist/dock/console.js

@@ -1,20 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The box, as one being. A device has no surface of its own, so a box that
-// has joined no world has nothing to draw: the Console is that page and only
-// that. She carries the faculties her harbor stood, showing each one's asks
-// as her own, and the ordinary screen draws her exactly as it draws a
-// world's user being, through one avatar holding one standing.
-//
-// She exists because a fresh install otherwise asks for location and
-// notifications in its manifest and shows nothing that ever asks for them,
-// which is a store reviewer's first question and a human's second.
-//
-// She carries for whoever the harbor's root let in, and for nobody else: the
-// root is the box, and it invites the one avatar its own screen runs.
-import { Carrier } from '../beings/carry.js';
-export const CONSOLE = 'console';
-export class Console extends Carrier {
-    static carries(occupant, _asker) {
-        return occupant !== undefined;
-    }
-}

package/dist/dock/dialers.js

@@ -1,75 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// The box's dialers: `dialers`, one faculty of the dock ward, standing for
-// the sockets this box holds open to other harbors' `quo.` routes. A Mac
-// behind NAT, a phone on the mobile network, a droplet dialing home: each
-// is a dialer, and what it dials is a row in her cells, placed once by the
-// root with `keep` the way a schedule is placed on the clock and an agent
-// on the agents faculty, in no file.
-//
-// A row is one URL, the `quo.` route of the harbor dialed. She holds the
-// socket from her birth on, as every faculty holds what the box holds: one
-// line per row, announcing this harbor's wards on open, binding the far
-// side's pks, reconnecting with backoff when the line drops, and closed
-// when the row is dropped or the box goes down. The dialer itself is the
-// library's, written on the standard socket surface, so this faculty holds
-// on every terrain that has a socket; the daemon hands her the harbor to
-// dial for, as it hands the agents faculty how to run a row.
-import { OWNER } from 'nervur';
-import { dial } from 'nervur/harbor';
-import { Faculty } from './faculty.js';
-// The name the dock ward holds her under.
-export const DIALERS = 'dialers';
-// The root and nobody else: a line held open is the device's own to place.
-const root = (_occ, asker) => asker.id === OWNER;
-const URL_ = { type: 'object', properties: { url: { type: 'string' } }, required: ['url'] };
-export class Dialers extends Faculty {
-    static cells = { watched: {}, minted: 0, dialers: {} };
-    static asks = {
-        keep: { description: 'hold a socket to that quo. route, from now and from every boot, until it is dropped', input: URL_, for: root },
-        drop: { description: 'close the socket to that route and forget it', input: URL_, for: root },
-        list: { description: 'every route she dials, and whether the line is open now', input: { type: 'object' }, for: root },
-    };
-    harbor;
-    open = new Map();
-    get rows() {
-        return this.cells.dialers;
-    }
-    // Every row dialed, once the daemon has handed the harbor to dial for.
-    start(harbor) {
-        this.harbor = harbor;
-        for (const row of Object.values(this.rows))
-            this.#dial(row.url);
-    }
-    #dial(url) {
-        if (!this.harbor || this.open.has(url))
-            return;
-        this.open.set(url, dial(this.harbor, url));
-    }
-    keep(args) {
-        const url = args.url;
-        if (typeof url !== 'string' || !/^https?:\/\/\S+$/.test(url))
-            return { error: 'url is the quo. route of the harbor dialed, over http or https' };
-        const clean = url.replace(/\/$/, '');
-        this.rows[clean] = { url: clean };
-        this.#dial(clean);
-        return { kept: clean };
-    }
-    drop(args) {
-        const url = typeof args.url === 'string' ? args.url.replace(/\/$/, '') : '';
-        if (!this.rows[url])
-            return { error: 'no such route' };
-        this.open.get(url)?.close();
-        this.open.delete(url);
-        delete this.rows[url];
-        return { dropped: url };
-    }
-    list() {
-        return { dialers: Object.keys(this.rows).map((url) => ({ url, open: this.open.get(url)?.socket !== null && this.open.has(url) })) };
-    }
-    // The device puts the box down: every line closes, the rows stay.
-    close() {
-        for (const d of this.open.values())
-            d.close();
-        this.open.clear();
-    }
-}

package/dist/dock/faculty.d.ts

@@ -1,24 +0,0 @@
-import { Being } from 'nervur';
-import type { Asker, JsonObject } from 'nervur';
-export type Watched = {
-    by: string;
-    method: string;
-    args: JsonObject;
-};
-export type Woke = {
-    id: string;
-    by: string;
-    out: unknown;
-};
-export declare class Faculty extends Being {
-    static cells: JsonObject;
-    watch(args: JsonObject, asker: Asker): Promise<JsonObject>;
-    protected welcomed(_id: string): Promise<void>;
-    protected woke(round?: (w: Watched) => JsonObject, only?: string): Promise<Woke[] | null>;
-    get watching(): Record<string, Watched>;
-}
-export declare const settled: () => Promise<void>;
-export declare function join(b: Being, name: string, watch?: {
-    method: string;
-    args?: JsonObject;
-}, id?: string): Promise<string | null>;