@onlyne/lib 3.0.0 → 3.2.0

package/dist/keys.d.ts

@@ -0,0 +1,97 @@
+import type { Context } from './core.ts';
+import type { Auth, KeyIdentity, KeyMaterial, KeyExchange, NodeId, TrustEntry, TrustStatement } from './types.ts';
+export declare const SIGNATURE_HEADER = "Onlyne-Sig";
+export declare const CLOCK_SKEW_MS = 300000;
+/** How long a failed exchange send waits before the maintenance loop tries it again. */
+export declare const EXCHANGE_RETRY_MS = 60000;
+/** How long a refused statement waits before the loop tries again (unverified refusal). */
+export declare const REFUSED_RETRY_MS = 600000;
+export declare function keyFingerprint(raw: Uint8Array): Promise<string>;
+export declare function generateKeyMaterial(): KeyMaterial;
+export declare class KeyService {
+    #private;
+    constructor(ctx: Context);
+    get enabled(): boolean;
+    keyId(): NodeId;
+    freshTimestamp(): {
+        timestamp: string;
+        nonce: string;
+    };
+    material(): Promise<KeyMaterial>;
+    describe(): Promise<KeyIdentity | undefined>;
+    sign(payload: string): Promise<string>;
+    generate(auth: Auth): Promise<KeyIdentity>;
+    replace(material: KeyMaterial): Promise<void>;
+}
+export declare function requestPayload(request: Request, target: NodeId, digest: string, timestamp: string, nonce: string): string;
+export declare function bodyDigest(body: Uint8Array | string): string;
+export declare class TrustService {
+    #private;
+    constructor(ctx: Context, keys: KeyService);
+    /** @internal Called by OnlyneNode so trust commits reach the maintenance loop. */
+    bindLoop(waker: {
+        wakeLoop(): void;
+    }): void;
+    private owner;
+    list(auth: Auth): Promise<TrustEntry[]>;
+    entry(node: NodeId): Promise<TrustEntry | undefined>;
+    /**
+     * RFC 0017 §3: stage one of one exchange. Reads the peer's live `/keys`, so the
+     * fingerprint the host shows is one the peer proved. Committing is a separate
+     * explicit step on the returned session; nothing is recorded or sent here.
+     */
+    begin(auth: Auth, node: NodeId): Promise<KeyExchange>;
+    private identity;
+    private address;
+    inspect(node: NodeId): Promise<KeyIdentity>;
+    /**
+     * The peer's address. Discovery answers for every peer this node has observed; a peer that
+     * introduced itself before discovery ever saw it has no record at all, and the address its own
+     * signed statement carried is then the only one there is. Without that fallback an inbound
+     * invitation can never be accepted: the confirmation resolves the peer before it may answer,
+     * so the row would sit at `invited` forever while both holders had approved.
+     */
+    private peerBase;
+    private statement;
+    /**
+     * Sends one statement and settles the matching obligation only on a reply that proves
+     * it answered this attempt (RFC 0017 §3.5). A missing, unsigned or mismatched reply
+     * leaves the obligation owed, so the maintenance loop re-sends with a fresh nonce.
+     */
+    private send;
+    /** Clears the obligation an answered attempt created; a newer attempt keeps its own. */
+    private settle;
+    /** The rotation window closes when its last statement is gone. */
+    private closeWindow;
+    /**
+     * Rewrites or deletes one obligation only if the row is still the attempt this pass read.
+     * `rotate` can replace an approval obligation with a rotation one mid-pass; a whole-row
+     * write-back from the stale snapshot would drop the old-key proof it just stored.
+     */
+    private compareObligation;
+    private rotationWindow;
+    /** Backs off an obligation after a refusal this node cannot authenticate. */
+    private park;
+    /** The swap never completed: drop the window and every statement prepared under it. */
+    private abandonRotation;
+    request(auth: Auth, node: NodeId, fingerprint: string): Promise<TrustEntry>;
+    private notify;
+    accept(auth: Auth, node: NodeId, fingerprint: string): Promise<TrustEntry>;
+    receive(value: TrustStatement): Promise<TrustEntry>;
+    introduce(value: TrustStatement): Promise<TrustStatement>;
+    revoke(auth: Auth, node: NodeId): Promise<void>;
+    /**
+     * RFC 0017 §3.5: re-drives every owed statement whose reply has not arrived. The stage
+     * of the row is irrelevant — an `exchanged` row still owes the delivery when its reply
+     * was lost. Each attempt uses a fresh nonce, so the peer's nonce cache cannot mistake
+     * a re-send for a replay. The maintenance loop calls this; the host never does.
+     */
+    redrive(signal?: AbortSignal): Promise<void>;
+    rotate(auth: Auth): Promise<KeyIdentity>;
+    private consumeNonce;
+    signRequest(request: Request, target: NodeId, raw: Uint8Array | string): Promise<void>;
+    authenticate(request: Request, digest: string): Promise<Auth>;
+    signResponse(request: Request, response: Response, body: string): Promise<void>;
+    verifyResponse(target: NodeId, request: Request, response: Response, body: string): Promise<void>;
+}
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,IAAI,EAAa,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAe,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1I,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAC7C,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB,SAAU,CAAC;AAoBxC,wBAAsB,cAAc,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAmC;AAEzG,wBAAgB,mBAAmB,IAAI,WAAW,CAMjD;AAED,qBAAa,UAAU;;gBAIT,GAAG,EAAE,OAAO;IAGxB,IAAI,OAAO,IAAI,OAAO,CAAyD;IAC/E,KAAK,IAAI,MAAM;IACf,cAAc,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAGhD,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC;IAUhC,QAAQ,IAAI,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAK5C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAGtC,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAS1C,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAWpD;AAgED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzH;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAAuB;AAEpF,qBAAa,YAAY;;gBAIX,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU;IAM1C,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI;IAC3C,OAAO,CAAC,KAAK;IACP,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAIvC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAC1D;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAe7C,QAAQ;IAKtB,OAAO,CAAC,OAAO;IAQT,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAUjD;;;;;;OAMG;YACW,QAAQ;YAWR,SAAS;IAavB;;;;OAIG;YACW,IAAI;IAqBlB,wFAAwF;IACxF,OAAO,CAAC,MAAM;IASd,kEAAkE;YACpD,WAAW;IAIzB;;;;OAIG;YACW,iBAAiB;IAU/B,OAAO,CAAC,cAAc;IAGtB,6EAA6E;IAC7E,OAAO,CAAC,IAAI;IAOZ,uFAAuF;IACvF,OAAO,CAAC,eAAe;IAQjB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA6CjF,OAAO,CAAC,MAAM;IAIR,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAE1E,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAgDnD,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IASzD,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBrD;;;;;OAKG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAqE5C,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;YAgEhC,YAAY;IAMpB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtF,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB7D,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/E,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAKxG"}