@onlyne/lib 3.0.0 → 3.2.0

package/dist/domains.js

@@ -0,0 +1,267 @@
+import { fail, key, OnlyneError, page, requireValue } from "./core.js";
+import { serviceBase } from "./transport.js";
+/** A first description probe may hydrate the cache for this long; later probes do not touch storage. */
+const DECLARE_HYDRATE_MS = 1_000;
+export function validateDomainId(value) {
+    if (typeof value !== 'string' || !/^[A-Za-z][A-Za-z0-9+.-]*:[^\s]+$/.test(value)) {
+        fail('invalid_request', 'A domain_id must be an absolute URI.');
+    }
+    return value;
+}
+/**
+ * Shape check for a membership as published on the wire. `null` is a valid declaration of no
+ * membership; `undefined` means the value is not a membership at all.
+ */
+export function membershipRecord(value) {
+    if (value === null)
+        return null;
+    if (typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    if (!('domain_id' in value) || !('node_id' in value) || !('state' in value) || !('revision' in value))
+        return undefined;
+    const { domain_id, node_id, state, revision } = value;
+    if (typeof domain_id !== 'string' || !/^[A-Za-z][A-Za-z0-9+.-]*:[^\s]+$/.test(domain_id))
+        return undefined;
+    if (typeof node_id !== 'string' || node_id.length === 0)
+        return undefined;
+    if (state !== 'active' && state !== 'left')
+        return undefined;
+    if (typeof revision !== 'string' || revision.length === 0)
+        return undefined;
+    return { domain_id, node_id, state, revision };
+}
+/**
+ * A service description is valid evidence only when it speaks this protocol, names the node that
+ * answered, and publishes a membership record for that same node.
+ */
+function declared(value, node) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    if (!('protocol' in value) || !('node_id' in value) || !('membership' in value))
+        return undefined;
+    if (value.protocol !== 'onlyne/3' || value.node_id !== node)
+        return undefined;
+    const membership = membershipRecord(value.membership);
+    if (membership === undefined || (membership !== null && membership.node_id !== node))
+        return undefined;
+    return { membership };
+}
+async function activeRows(tx, node) {
+    return (await tx.scan(key('domain') + '/'))
+        .map(row => row.value)
+        .filter(row => row.node_id === node && row.state === 'active');
+}
+/**
+ * The one active membership a node may hold, read inside the caller's transaction.
+ * Storage written by another revision can hold several; that state is refused instead of
+ * silently choosing one, so the single-membership rule stays visible to the host.
+ */
+async function activeMembership(tx, node) {
+    const rows = await activeRows(tx, node);
+    if (rows.length > 1)
+        fail('conflict', 'This node holds more than one active domain membership; resolve it before continuing.');
+    return rows[0];
+}
+export class DomainService {
+    #ctx;
+    #fetcher;
+    #declared;
+    constructor(ctx, fetcher = fetch) {
+        this.#ctx = ctx;
+        this.#fetcher = fetcher;
+    }
+    /**
+     * The node's one declared membership, kept in memory for the public description probe. Once
+     * it is known, this answers without entering the transaction queue; the first read hydrates
+     * it under a tight bound, and an unhydratable read fails instead of inventing a membership.
+     */
+    async declared(auth) {
+        this.authenticate(auth);
+        if (this.#declared !== undefined)
+            return this.#declared;
+        const read = this.#ctx.storage.transaction(tx => activeMembership(tx, this.#ctx.node));
+        read.then(current => { this.#declared = current ?? null; }).catch(() => undefined);
+        const current = await Promise.race([
+            read,
+            new Promise((_resolve, reject) => {
+                setTimeout(() => reject(new OnlyneError('unavailable', 'The declared membership is unavailable.')), DECLARE_HYDRATE_MS);
+            }),
+        ]);
+        this.#declared = current ?? null;
+        return this.#declared;
+    }
+    async #rememberDeclared() {
+        try {
+            this.#declared = (await this.#ctx.storage.transaction(tx => activeMembership(tx, this.#ctx.node))) ?? null;
+        }
+        catch {
+            this.#declared = undefined;
+        }
+    }
+    authenticate(auth) {
+        if (!auth.actor)
+            fail('unauthenticated', 'Authentication is required.');
+    }
+    self(auth) {
+        this.authenticate(auth);
+        if (auth.actor !== this.#ctx.node)
+            fail('forbidden', 'A node may only change its own domain membership.');
+    }
+    async create(auth, mutation) {
+        this.self(auth);
+        const record = await this.#ctx.mutate(auth, 'domain.create', mutation, {}, async (tx) => {
+            if (await activeMembership(tx, this.#ctx.node)) {
+                fail('conflict', 'This node already belongs to a domain; leave it before creating another.');
+            }
+            const domain_id = validateDomainId(`urn:onlyne:region:${this.#ctx.id()}`);
+            const slot = key('domain', domain_id);
+            if (await tx.get(slot))
+                fail('id_conflict', 'The domain identifier is already recorded here.');
+            const record = { domain_id, node_id: this.#ctx.node, state: 'active', revision: this.#ctx.id() };
+            await tx.put(slot, record);
+            return record;
+        });
+        await this.#rememberDeclared();
+        return record;
+    }
+    async join(auth, id, mutation) {
+        return this.change(auth, id, 'active', mutation);
+    }
+    async leave(auth, id, mutation) {
+        return this.change(auth, id, 'left', mutation);
+    }
+    async change(auth, id, state, mutation) {
+        this.self(auth);
+        validateDomainId(id);
+        const record = await this.#ctx.mutate(auth, `domain.${state}/${id}`, mutation, { expected_revision: mutation.expected_revision ?? null }, async (tx) => {
+            const slot = key('domain', id);
+            const current = await tx.get(slot);
+            if (!current && state === 'left')
+                fail('not_found', 'No membership is recorded for this domain.');
+            // A node belongs to one domain. Cross-domain reach is a property of threads and ingress, not of membership.
+            const active = await activeMembership(tx, this.#ctx.node);
+            if (state === 'active' && active !== undefined && active.domain_id !== id) {
+                fail('conflict', 'This node already belongs to another domain; leave it first.');
+            }
+            if (current?.revision !== mutation.expected_revision) {
+                fail('revision_conflict', 'The local domain membership changed.', current ? { current_revision: current.revision } : undefined);
+            }
+            if (current?.state === state)
+                return current;
+            const revision = this.#ctx.id();
+            if (revision === current?.revision)
+                fail('internal', 'The revision source reused the current membership revision.');
+            const record = { domain_id: id, node_id: this.#ctx.node, state, revision };
+            await tx.put(slot, record);
+            return record;
+        });
+        await this.#rememberDeclared();
+        return record;
+    }
+    async list(auth, options = {}) {
+        this.authenticate(auth);
+        return this.#ctx.storage.transaction(async (tx) => {
+            const current = await activeMembership(tx, this.#ctx.node);
+            const records = current === undefined ? [] : [current];
+            records.sort((a, b) => a.domain_id < b.domain_id ? -1 : a.domain_id > b.domain_id ? 1 : 0);
+            return page(records, options, { kind: 'domains', node: this.#ctx.node, actor: auth.actor }, row => row.domain_id);
+        });
+    }
+    async describe(auth, id) {
+        this.authenticate(auth);
+        validateDomainId(id);
+        return this.#ctx.storage.transaction(async (tx) => requireValue(await tx.get(key('domain', id))));
+    }
+    async discover(auth, id, signal) {
+        this.authenticate(auth);
+        validateDomainId(id);
+        if ((await this.describe(auth, id)).state !== 'active')
+            fail('not_a_member', 'This node has left the domain.');
+        const candidates = this.#ctx.options.plugins.domainCandidates;
+        if (!candidates)
+            fail('unsupported_delivery', 'The host provides no domain discovery source.');
+        signal?.throwIfAborted();
+        const nodes = [...new Set([this.#ctx.node, ...await candidates(id)])].sort();
+        const members = [];
+        const unavailable = [];
+        for (const node of nodes) {
+            signal?.throwIfAborted();
+            if (typeof node !== 'string' || node.length === 0)
+                fail('invalid_request', 'Domain candidates must be node identities.');
+            if (node === this.#ctx.node) {
+                const current = await this.describe(auth, id);
+                if (current.state === 'active')
+                    members.push(current);
+                continue;
+            }
+            try {
+                // Only the candidate's own description is evidence: protocol and identity must agree, and
+                // a node that declares another region (or none) is excluded rather than called unreachable.
+                const declaration = declared(await this.query(node, signal), node);
+                if (declaration === undefined)
+                    unavailable.push(node);
+                else if (declaration.membership !== null && declaration.membership.domain_id === id && declaration.membership.state === 'active')
+                    members.push(declaration.membership);
+            }
+            catch {
+                signal?.throwIfAborted();
+                unavailable.push(node);
+            }
+        }
+        return { domain_id: id, members, unavailable };
+    }
+    async query(node, signal) {
+        // A candidate's service description is public: it is read before any key exchange, so
+        // it never goes through the signing transport (RFC 0011 §5, RFC 0017 §4).
+        const target = await this.#ctx.options.plugins.resolve(node);
+        if (target.node_id !== node)
+            fail('unavailable', 'The resolver returned a target for another identity.');
+        const base = serviceBase(target.base_url);
+        const url = new URL('./description', base.href.endsWith('/') ? base.href : `${base.href}/`);
+        const controller = new AbortController();
+        let timer;
+        const onAbort = () => controller.abort(signal?.reason);
+        signal?.addEventListener('abort', onAbort, { once: true });
+        if (signal?.aborted)
+            controller.abort(signal.reason);
+        const aborted = new Promise((_, reject) => {
+            controller.signal.addEventListener('abort', () => reject(controller.signal.reason), { once: true });
+            if (controller.signal.aborted)
+                reject(controller.signal.reason);
+        });
+        timer = setTimeout(() => controller.abort(new OnlyneError('unavailable', 'Service description lookup timed out.')), this.#ctx.options.wait_ms ?? 30_000);
+        try {
+            const response = await Promise.race([
+                this.#fetcher(url, { method: 'GET', headers: { accept: 'application/json' }, signal: controller.signal }),
+                aborted,
+            ]);
+            const text = await response.text().catch(() => '');
+            let parsed;
+            try {
+                parsed = text === '' ? undefined : JSON.parse(text);
+            }
+            catch {
+                parsed = undefined;
+            }
+            if (!response.ok) {
+                const record = parsed !== null && typeof parsed === 'object' && 'error' in parsed ? parsed.error : parsed;
+                if (record !== null && typeof record === 'object' && 'code' in record && 'message' in record) {
+                    const failure = record;
+                    const rejection = new OnlyneError(failure.code, failure.message);
+                    if (typeof failure.retryable === 'boolean')
+                        rejection.error.retryable = failure.retryable;
+                    throw rejection;
+                }
+                fail('unavailable', `The candidate answered HTTP ${response.status} without a service description.`);
+            }
+            if (parsed === undefined)
+                fail('unavailable', 'The candidate returned no service description.');
+            return parsed;
+        }
+        finally {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', onAbort);
+        }
+    }
+}
+//# sourceMappingURL=domains.js.map

package/dist/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../src/domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAgB,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,wGAAwG;AACxG,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxH,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACtD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3G,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClG,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9E,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvG,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAe,EAAE,IAAY;IACrD,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAmB,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;SAC1D,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;SACrB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,EAAe,EAAE,IAAY;IAC3D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,UAAU,EAAE,uFAAuF,CAAC,CAAC;IAC/H,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,aAAa;IACf,IAAI,CAAU;IACd,QAAQ,CAA2E;IAC5F,SAAS,CAAsC;IAE/C,YAAY,GAAY,EAAE,UAAoF,KAAK;QACjH,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAU;QACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACjC,IAAI;YACJ,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC1H,CAAC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,OAAO,IAAI,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC7G,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAU;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;IAC1E,CAAC;IAEO,IAAI,CAAC,IAAU;QACrB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,WAAW,EAAE,mDAAmD,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAU,EAAE,QAAkB;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAC,EAAE,EAAC,EAAE;YACpF,IAAI,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,UAAU,EAAE,0EAA0E,CAAC,CAAC;YAC/F,CAAC;YACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACtC,IAAI,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,aAAa,EAAE,iDAAiD,CAAC,CAAC;YAC/F,MAAM,MAAM,GAAqB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;YACnH,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAU,EAAE,EAAU,EAAE,QAAwB;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAU,EAAE,EAAU,EAAE,QAAwB;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAU,EAAE,EAAU,EAAE,KAAgC,EAAE,QAAwB;QACrG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,IAAI,EAAE,EAAE,KAAK,EAAC,EAAE,EAAC,EAAE;YACnJ,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,GAAG,CAAmB,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,IAAI,KAAK,KAAK,MAAM;gBAAE,IAAI,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;YAClG,4GAA4G;YAC5G,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,KAAK,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;gBAC1E,IAAI,CAAC,UAAU,EAAE,8DAA8D,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBACrD,IAAI,CAAC,mBAAmB,EAAE,sCAAsC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAClI,CAAC;YACD,IAAI,OAAO,EAAE,KAAK,KAAK,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAChC,IAAI,QAAQ,KAAK,OAAO,EAAE,QAAQ;gBAAE,IAAI,CAAC,UAAU,EAAE,6DAA6D,CAAC,CAAC;YACpH,MAAM,MAAM,GAAqB,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAC7F,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAU,EAAE,UAAuB,EAAE;QAC9C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YAC9C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAU,EAAE,EAAU;QACnC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxB,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,CAAmB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAU,EAAE,EAAU,EAAE,MAAoB;QACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxB,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;QAC/G,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC9D,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,CAAC;QAC/F,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;YACzH,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,0FAA0F;gBAC1F,4FAA4F;gBAC5F,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAI,WAAW,KAAK,SAAS;oBAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACjD,IAAI,WAAW,CAAC,UAAU,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,KAAK,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACzK,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,EAAE,cAAc,EAAE,CAAC;gBACzB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,MAAoB;QACpD,sFAAsF;QACtF,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;QACzG,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,KAAgD,CAAC;QACrD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/C,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpG,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;QACzJ,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;gBACzG,OAAO;aACR,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,SAAS,CAAC;YAAC,CAAC;YAC1F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,CAAC,CAAC,CAAE,MAA6B,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClI,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;oBAC7F,MAAM,OAAO,GAAG,MAAgE,CAAC;oBACjF,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,IAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC1E,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS;wBAAE,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;oBAC1F,MAAM,SAAS,CAAC;gBAClB,CAAC;gBACD,IAAI,CAAC,aAAa,EAAE,+BAA+B,QAAQ,CAAC,MAAM,iCAAiC,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAC;YAChG,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}

package/dist/history.d.ts

@@ -0,0 +1,13 @@
+import type { Auth, Conversation, HistoryMessage, HistoryQuery, MessageRef, Page } from './types.ts';
+import { type Context } from './core.ts';
+/** A read-only projection of the records this node already holds. It performs no remote reads. */
+export declare class HistoryService {
+    #private;
+    constructor(ctx: Context);
+    list(auth: Auth, query?: HistoryQuery): Promise<Page<Conversation>>;
+    conversation(auth: Auth, message: MessageRef): Promise<Conversation>;
+    message(auth: Auth, message: MessageRef): Promise<HistoryMessage>;
+    private authorize;
+    private collect;
+}
+//# sourceMappingURL=history.d.ts.map

package/dist/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../src/history.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAuB,IAAI,EAAE,YAAY,EAAS,cAAc,EAAE,YAAY,EAAkB,UAAU,EAAY,IAAI,EAA0B,MAAM,YAAY,CAAC;AACnL,OAAO,EAAyB,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAKhE,kGAAkG;AAClG,qBAAa,cAAc;;gBAGb,GAAG,EAAE,OAAO;IAIlB,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAYvE,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;IASpE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC;IAOvE,OAAO,CAAC,SAAS;YAIH,OAAO;CA4FtB"}

package/dist/history.js

@@ -0,0 +1,143 @@
+import { fail, key, page, same } from "./core.js";
+const identity = (ref) => key(ref.sender, ref.id);
+const threadIdentity = (ref) => key(ref.owner, ref.id);
+/** A read-only projection of the records this node already holds. It performs no remote reads. */
+export class HistoryService {
+    #ctx;
+    constructor(ctx) {
+        this.#ctx = ctx;
+    }
+    async list(auth, query = {}) {
+        this.authorize(auth);
+        return this.#ctx.storage.transaction(async (tx) => {
+            const conversations = await this.collect(tx);
+            const selected = conversations.filter(conversation => (query.thread === undefined || conversation.thread_refs.some(ref => same(ref, query.thread)))
+                && (query.message === undefined || conversation.messages.some(row => same(row.message_ref, query.message)) || same(conversation.id, query.message)));
+            selected.sort((left, right) => identity(left.id).localeCompare(identity(right.id)));
+            return page(selected, query, { kind: 'history', actor: auth.actor, thread: query.thread, message: query.message }, row => identity(row.id));
+        });
+    }
+    async conversation(auth, message) {
+        this.authorize(auth);
+        return this.#ctx.storage.transaction(async (tx) => {
+            const found = (await this.collect(tx)).find(row => same(row.id, message) || row.messages.some(item => same(item.message_ref, message)));
+            if (found === undefined)
+                fail('not_found', 'This node holds no conversation for that message.');
+            return found;
+        });
+    }
+    async message(auth, message) {
+        const conversation = await this.conversation(auth, message);
+        const found = conversation.messages.find(row => same(row.message_ref, message));
+        if (found === undefined)
+            fail('not_found', 'This node holds the reply reference, but no body for that message.');
+        return found;
+    }
+    authorize(auth) {
+        if (auth.actor !== this.#ctx.node)
+            fail('forbidden', 'Conversation history belongs to this node.');
+    }
+    async collect(tx) {
+        const messages = new Map();
+        const addEntry = (entry, injected, settlement) => {
+            const message_ref = { sender: entry.message.sender, id: entry.message.id };
+            const id = identity(message_ref);
+            const previous = messages.get(id);
+            const closed = previous?.settlement ?? settlement;
+            messages.set(id, {
+                message_ref, message: entry.message, direction: entry.message.sender === this.#ctx.node ? 'out' : 'in',
+                thread_ref: entry.thread_ref, seq: entry.seq, at: entry.at, delivery: previous?.delivery ?? 'received',
+                ...(previous?.guarantee === undefined ? {} : { guarantee: previous.guarantee }),
+                // A settlement closes the row without asserting a read, so it carries no consumption.
+                ...(closed !== undefined ? { settlement: closed }
+                    : injected === undefined ? previous?.consumption === undefined ? {} : { consumption: previous.consumption }
+                        : { consumption: injected || previous?.consumption === 'consumed' ? 'consumed' : 'pending' }),
+            });
+        };
+        for (const { value } of await tx.scan('entry-ref/'))
+            addEntry(value);
+        for (const { value } of await tx.scan('inbox/')) {
+            if (value.attention.entry !== undefined && value.attention.disposition !== 'expired') {
+                addEntry(value.attention.entry, value.injected, value.settlement);
+            }
+        }
+        const confirmed = new Set();
+        for (const { value } of await tx.scan('consumed/')) {
+            if (value.confirmed)
+                confirmed.add(key(value.thread_ref.owner, value.thread_ref.id, value.seq));
+        }
+        for (const { value } of await tx.scan('outbound/')) {
+            const message = value.request.message;
+            const message_ref = { sender: message.sender, id: message.id };
+            const previous = messages.get(identity(message_ref));
+            messages.set(identity(message_ref), {
+                message_ref, message, direction: 'out', at: value.created_at ?? previous?.at ?? null,
+                delivery: value.state,
+                ...(value.receipt === undefined ? {} : { thread_ref: value.receipt.thread_ref, seq: value.receipt.seq, guarantee: value.receipt.guarantee }),
+                ...(value.error === undefined ? {} : { error: value.error }),
+                ...(previous?.settlement === undefined ? {} : { settlement: previous.settlement }),
+            });
+        }
+        for (const row of messages.values()) {
+            if (row.direction === 'in' && row.thread_ref !== undefined && row.seq !== undefined
+                && confirmed.has(key(row.thread_ref.owner, row.thread_ref.id, row.seq)))
+                row.consumption = 'consumed';
+        }
+        const parents = new Map();
+        const refs = new Map();
+        const root = (id) => {
+            const parent = parents.get(id);
+            if (parent === undefined || parent === id)
+                return id;
+            const found = root(parent);
+            parents.set(id, found);
+            return found;
+        };
+        for (const row of messages.values()) {
+            const id = identity(row.message_ref);
+            refs.set(id, row.message_ref);
+            const original = row.message.meta?.in_reply_to;
+            if (original === undefined)
+                continue;
+            const source = identity(original);
+            refs.set(source, original);
+            const left = root(id);
+            const right = root(source);
+            if (left !== right)
+                parents.set(left, right);
+        }
+        const grouped = new Map();
+        for (const [id, message] of messages) {
+            const group = root(id);
+            const rows = grouped.get(group) ?? [];
+            rows.push(message);
+            grouped.set(group, rows);
+        }
+        return [...grouped].map(([id, rows]) => {
+            // Parent-before-child ordering also works when one legacy outbound has no timestamp.
+            const ordered = [];
+            const seen = new Set();
+            const byId = new Map(rows.map(row => [identity(row.message_ref), row]));
+            const visit = (row) => {
+                const key = identity(row.message_ref);
+                if (seen.has(key))
+                    return;
+                seen.add(key);
+                const source = row.message.meta?.in_reply_to;
+                const parent = source === undefined ? undefined : byId.get(identity(source));
+                if (parent !== undefined)
+                    visit(parent);
+                ordered.push(row);
+            };
+            rows.sort((a, b) => (a.at ?? '').localeCompare(b.at ?? '') || identity(a.message_ref).localeCompare(identity(b.message_ref)));
+            rows.forEach(visit);
+            const threads = new Map();
+            for (const row of ordered)
+                if (row.thread_ref !== undefined)
+                    threads.set(threadIdentity(row.thread_ref), row.thread_ref);
+            const subject = ordered[0].message.delivery_kind.replace(/\s+/g, ' ').trim();
+            return { id: refs.get(id), title: subject || ordered[0].message.msg.split(/\r?\n/, 1)[0], thread_refs: [...threads.values()], messages: ordered, last_at: rows.filter(row => row.at !== null).at(-1)?.at ?? null };
+        });
+    }
+}
+//# sourceMappingURL=history.js.map

package/dist/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../src/history.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAgB,MAAM,WAAW,CAAC;AAEhE,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAU,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACtE,MAAM,cAAc,GAAG,CAAC,GAAc,EAAU,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAE1E,kGAAkG;AAClG,MAAM,OAAO,cAAc;IAChB,IAAI,CAAU;IAEvB,YAAY,GAAY;QACtB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAU,EAAE,QAAsB,EAAE;QAC7C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YAC9C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CACnD,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;mBAC1F,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACvJ,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9I,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAU,EAAE,OAAmB;QAChD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YAC9C,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACxI,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,EAAE,mDAAmD,CAAC,CAAC;YAChG,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAU,EAAE,OAAmB;QAC3C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,EAAE,oEAAoE,CAAC,CAAC;QACjH,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,IAAU;QAC1B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;IACrG,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,EAAe;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;QACnD,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAE,QAAkB,EAAE,UAAgC,EAAQ,EAAE;YAC5F,MAAM,WAAW,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAC3E,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,QAAQ,EAAE,UAAU,IAAI,UAAU,CAAC;YAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE;gBACf,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACtG,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,UAAU;gBACtG,GAAG,CAAC,QAAQ,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC/E,sFAAsF;gBACtF,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE;oBAC/C,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE;wBAC3G,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,IAAI,QAAQ,EAAE,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;aAChG,CAAC,CAAC;QACL,CAAC,CAAC;QACF,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC,IAAI,CAAQ,YAAY,CAAC;YAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5E,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC,IAAI,CAAiB,QAAQ,CAAC,EAAE,CAAC;YAChE,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACrF,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC,IAAI,CAA6D,WAAW,CAAC,EAAE,CAAC;YAC/G,IAAI,KAAK,CAAC,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC,IAAI,CAAW,WAAW,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtC,MAAM,WAAW,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;gBAClC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,EAAE,IAAI,IAAI;gBACpF,QAAQ,EAAE,KAAK,CAAC,KAAK;gBACrB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5I,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5D,GAAG,CAAC,QAAQ,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;aACnF,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;mBAC9E,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAE,GAAG,CAAC,WAAW,GAAG,UAAU,CAAC;QAC1G,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,EAAU,EAAU,EAAE;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;gBAAE,OAAO,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;YAC/C,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;QACpD,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;YACrC,qFAAqF;YACrF,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,CAAC,GAAmB,EAAQ,EAAE;gBAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;gBAC7C,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7E,IAAI,MAAM,KAAK,SAAS;oBAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC9H,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,OAAO;gBAAE,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;oBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;YACzH,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,EAAE,KAAK,EAAE,OAAO,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;QACxN,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/http.d.ts

@@ -0,0 +1,20 @@
+import type { Context } from './core.ts';
+import type { ThreadService } from './threads.ts';
+import type { MessageService } from './messages.ts';
+import type { ResourceService } from './resources.ts';
+import type { DomainService } from './domains.ts';
+import type { DiscoveryService } from './discovery.ts';
+import type { KeyService, TrustService } from './keys.ts';
+export interface HttpServices {
+    ctx: Context;
+    threads: ThreadService;
+    messages: MessageService;
+    resources: ResourceService;
+    domains: DomainService;
+    discovery?: DiscoveryService;
+    keys?: KeyService;
+    trust?: TrustService;
+}
+/** Maps `/onlyne/v3` HTTP requests onto the services. The caller owns the server lifecycle. */
+export declare function createHttpHandler(services: HttpServices): (request: Request) => Promise<Response>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAY1D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAOD,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAmEjG"}

package/dist/http.js

@@ -0,0 +1,88 @@
+import { OnlyneError, fail } from "./core.js";
+import { SIGNATURE_HEADER, bodyDigest } from "./keys.js";
+import { DEFAULT_BYTES, respond } from "./routes/shared.js";
+import { publicRoutes } from "./routes/public.js";
+import { trustRoutes } from "./routes/trust.js";
+import { threadRoutes } from "./routes/threads.js";
+import { grantRoutes } from "./routes/grants.js";
+import { domainRoutes } from "./routes/domains.js";
+import { resourceRoutes } from "./routes/resources.js";
+const PREFIX = '/onlyne/v3';
+function failure(error) {
+    const onlyne = error instanceof OnlyneError ? error : new OnlyneError('internal', 'The node failed to complete the request.');
+    return respond({ error: onlyne.error }, onlyne.status);
+}
+/** Maps `/onlyne/v3` HTTP requests onto the services. The caller owns the server lifecycle. */
+export function createHttpHandler(services) {
+    const { ctx, threads, messages, resources, domains, discovery, keys, trust } = services;
+    const limit = ctx.options.request_bytes ?? DEFAULT_BYTES;
+    /**
+     * RFC 0017: an `Onlyne-Sig` header is verified against the peer's stored key before the
+     * host plugin sees the request; a verified signature names the actor directly. The
+     * signature covers the body, so it is checked against the raw bytes actually received.
+     */
+    async function authenticate(request, rawBody) {
+        // A keyed node never falls back to an unauthenticated actor: the signature is the credential.
+        if (trust !== undefined && keys?.enabled === true)
+            return trust.authenticate(request, bodyDigest(rawBody));
+        const auth = await ctx.options.plugins.authenticate(request);
+        if (auth === null || typeof auth.actor !== 'string' || auth.actor.length === 0)
+            fail('unauthenticated', 'Authentication is required.');
+        return auth;
+    }
+    /** RFC 0017: an authenticated answer to a signed request carries the responder's signature. */
+    async function signed(request, response) {
+        if (trust === undefined || keys?.enabled !== true || request.headers.get(SIGNATURE_HEADER) === null)
+            return response;
+        await trust.signResponse(request, response, await response.clone().text());
+        return response;
+    }
+    async function handle(request) {
+        try {
+            const url = new URL(request.url);
+            // A shared listener mounts each node under its own path prefix (`/nodes/<id>/onlyne/v3`),
+            // so the prefix is located inside the path rather than assumed at its start. Only the
+            // route segments are sliced; `request.url` stays untouched, because the signature covers
+            // exactly the `pathname + search` the sender signed (RFC 0017).
+            const mount = url.pathname.lastIndexOf(`${PREFIX}/`);
+            if (mount < 0)
+                fail('not_found', 'Unknown route.');
+            const path = url.pathname.slice(mount + PREFIX.length).split('/').filter(segment => segment.length > 0).map(segment => {
+                try {
+                    return decodeURIComponent(segment);
+                }
+                catch {
+                    return fail('invalid_request', 'The request path is not valid percent-encoding.');
+                }
+            });
+            const params = url.searchParams;
+            const base = { request, path, params, ctx, threads, messages, resources, domains, discovery, keys, trust, limit };
+            const open = await publicRoutes(base);
+            if (open !== undefined)
+                return open;
+            // Authenticated routes read the raw body first: the signature covers exactly these bytes.
+            const rawBody = await request.text();
+            const auth = await authenticate(request, rawBody);
+            const route = { ...base, auth, rawBody };
+            for (const module of [trustRoutes, threadRoutes, grantRoutes, domainRoutes, resourceRoutes]) {
+                const response = await module(route);
+                if (response !== undefined)
+                    return response;
+            }
+            fail('not_found', 'Unknown route.');
+        }
+        catch (error) {
+            return failure(error);
+        }
+    }
+    return async (request) => {
+        const response = await handle(request);
+        try {
+            return await signed(request, response);
+        }
+        catch (error) {
+            return failure(error);
+        }
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAS9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,OAAO,EAA8C,MAAM,oBAAoB,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,MAAM,GAAG,YAAY,CAAC;AAa5B,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,MAAM,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,UAAU,EAAE,0CAA0C,CAAC,CAAC;IAC9H,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,QAAsB;IACtD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IACxF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IAEzD;;;;OAIG;IACH,KAAK,UAAU,YAAY,CAAC,OAAgB,EAAE,OAAe;QAC3D,8FAA8F;QAC9F,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QACvI,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+FAA+F;IAC/F,KAAK,UAAU,MAAM,CAAC,OAAgB,EAAE,QAAkB;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC;QACrH,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,OAAgB;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,0FAA0F;YAC1F,sFAAsF;YACtF,yFAAyF;YACzF,gEAAgE;YAChE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;YACrD,IAAI,KAAK,GAAG,CAAC;gBAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpH,IAAI,CAAC;oBACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,iBAAiB,EAAE,iDAAiD,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;YAEhC,MAAM,IAAI,GAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACtI,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAEpC,0FAA0F;YAC1F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,KAAK,GAAiB,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAEvD,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC5F,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,QAAQ,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC;YAAC,OAAO,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC/C,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+export type * from './types.ts';
+export { trustPhase } from './types.ts';
+export type { WorkRef } from './types.ts';
+export { OnlyneError } from './core.ts';
+export { OnlyneNode } from './node.ts';
+export { ThreadService } from './threads.ts';
+export { MessageService } from './messages.ts';
+export { HistoryService } from './history.ts';
+export { createResourceService } from './resources.ts';
+export type { ResourceService } from './resources.ts';
+export { DomainService } from './domains.ts';
+export { DiscoveryService } from './discovery.ts';
+export { OnlyneClient } from './client.ts';
+export type { SendOutcome, SendOptions, MsgOptions } from './client.ts';
+export { FetchTransport } from './transport.ts';
+export type { SigningTransportOptions, SigningTrust, TrustFailure } from './transport.ts';
+export { KeyService, TrustService, keyFingerprint, generateKeyMaterial, SIGNATURE_HEADER, CLOCK_SKEW_MS, EXCHANGE_RETRY_MS, REFUSED_RETRY_MS } from './keys.ts';
+export { createHttpHandler } from './http.ts';
+export { MemoryStorage } from './memory.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,YAAY,EAAE,uBAAuB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAChK,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+export { trustPhase } from "./types.js";
+export { OnlyneError } from "./core.js";
+export { OnlyneNode } from "./node.js";
+export { ThreadService } from "./threads.js";
+export { MessageService } from "./messages.js";
+export { HistoryService } from "./history.js";
+export { createResourceService } from "./resources.js";
+export { DomainService } from "./domains.js";
+export { DiscoveryService } from "./discovery.js";
+export { OnlyneClient } from "./client.js";
+export { FetchTransport } from "./transport.js";
+export { KeyService, TrustService, keyFingerprint, generateKeyMaterial, SIGNATURE_HEADER, CLOCK_SKEW_MS, EXCHANGE_RETRY_MS, REFUSED_RETRY_MS } from "./keys.js";
+export { createHttpHandler } from "./http.js";
+export { MemoryStorage } from "./memory.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAChK,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}