@onlyne/node-host 3.0.0 → 3.2.0

package/dist/keys.js

@@ -0,0 +1,144 @@
+import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { chmodSync, existsSync, mkdirSync, readFileSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { basename, join } from "node:path";
+import { execFile } from "node:child_process";
+import { generateKeyMaterial } from "@onlyne/lib";
+/** RFC 0017 §2: the private key rides in its own file as base64 DER; the public half is derived on load. */
+const PRIVATE_NAME = "priv.pem";
+const PUBLIC_NAME = "pub.key";
+function projectKeysRoot(cwd) {
+    return join(cwd, ".onlyne", "keys");
+}
+function globalKeysRoot() {
+    return join(homedir(), ".config", "onlyne", "keys");
+}
+function encodePrivate(material) {
+    return Buffer.from(material.private_key).toString("base64");
+}
+function decodePrivate(text) {
+    return new Uint8Array(Buffer.from(text, "base64"));
+}
+/** Refuses group/world-readable private keys and symlinked or foreign-owned files. */
+function assertPrivatePermissions(path) {
+    const stats = statSync(path, { throwIfNoEntry: false });
+    if (stats === undefined)
+        return;
+    if (stats.isSymbolicLink())
+        throw new Error(`The node key must not be a symlink: ${path}`);
+    if ((stats.mode & 0o077) !== 0) {
+        throw new Error(`The node key is readable beyond its owner. Fix it with: chmod 600 ${path}`);
+    }
+}
+async function assertDirectoryPermissions(path) {
+    const stats = await statSync(path, { throwIfNoEntry: false });
+    if (stats === undefined || (stats.mode & 0o077) !== 0) {
+        throw new Error(`The key directory is readable beyond its owner. Fix it with: chmod 700 ${path}`);
+    }
+}
+/** The node id names a subdirectory; a traversal-looking id is a configuration error. */
+function keyDirectory(root, nodeId) {
+    if (nodeId.includes("/") || nodeId.includes("\\") || nodeId.includes("..")) {
+        throw new Error(`The node id cannot name a key directory: ${nodeId}`);
+    }
+    return join(root, encodeURIComponent(nodeId));
+}
+/**
+ * The git check is `git check-ignore --quiet`, the real semantics: an ancestor ignore,
+ * a negation rule, or a .git/info/exclude all read the same way the user's git does.
+ */
+function ignoredByGit(root, target) {
+    return new Promise(resolve => {
+        // `cwd` is the project root: the key directory does not exist yet on a first run.
+        execFile("git", ["check-ignore", "--quiet", "--", target], { cwd: root }, error => {
+            // Exit 0 = ignored, exit 1 = tracked-or-untracked but not ignored, other = outside a work tree.
+            resolve(error === null || (typeof error.code === "number" && error.code === 0));
+        });
+    });
+}
+async function insideGitWorkTree(path) {
+    return new Promise(resolve => {
+        execFile("git", ["rev-parse", "--is-inside-work-tree"], { cwd: path }, (error, stdout) => {
+            resolve(error === null && stdout.trim() === "true");
+        });
+    });
+}
+/**
+ * Resolves the key directory for a node (RFC 0017 §2). A project key inside a git work
+ * tree whose ignore rules do not cover `.onlyne/keys` is refused, with both escapes named.
+ */
+export async function ensureKeyDir(cwd, nodeId, scope) {
+    // The global directory holds the node's identity by default; a project directory is an
+    // override for this working tree, read first when both exist.
+    const root = scope === "project" ? projectKeysRoot(cwd) : globalKeysRoot();
+    const dir = keyDirectory(root, nodeId);
+    if (scope === "global") {
+        await mkdir(dir, { recursive: true });
+        await chmod(dir, 0o700);
+        return dir;
+    }
+    if (await insideGitWorkTree(cwd) && !(await ignoredByGit(cwd, dir)) && !(await ignoredByGit(cwd, projectKeysRoot(cwd)))) {
+        throw new Error("Refusing to create a node key inside a git work tree: .onlyne/keys is not ignored. "
+            + "Add '.onlyne/keys' to .gitignore, or set node.key_scope = \"global\" in the config.");
+    }
+    await mkdir(dir, { recursive: true });
+    await chmod(dir, 0o700);
+    return dir;
+}
+/** Loads the node's identity key, generating it on first use. */
+export async function loadOrCreateKey(dir, nodeId) {
+    await assertDirectoryPermissions(dir);
+    const privatePath = join(dir, PRIVATE_NAME);
+    if (!existsSync(privatePath)) {
+        const material = generateKeyMaterial();
+        await writeKeyMaterial(dir, material);
+        return material;
+    }
+    assertPrivatePermissions(privatePath);
+    const base = {
+        private_key: decodePrivate((await readFile(privatePath, "utf8")).trim()),
+        public_key: new Uint8Array(),
+    };
+    // The public half always comes from the private key: the file is a cache, never a source.
+    const { createPrivateKey, createPublicKey } = await import("node:crypto");
+    const pair = createPrivateKey({ key: Buffer.from(base.private_key), format: "der", type: "pkcs8" });
+    const jwk = createPublicKey(pair).export({ format: "jwk" });
+    return { private_key: base.private_key, public_key: new Uint8Array(Buffer.from(String(jwk.x), "base64url")) };
+}
+/**
+ * Writes the key pair atomically. `replace` is the `plugins.keys.replace` path — the only
+ * caller allowed to overwrite an existing private key, because `trust.rotate` has already
+ * committed the rotation window and must complete the swap.
+ */
+export async function writeKeyMaterial(dir, material, options = {}) {
+    const privatePath = join(dir, PRIVATE_NAME);
+    if (existsSync(privatePath) && options.replace !== true)
+        throw new Error(`A node key already exists at ${privatePath}; use trust rotation instead of overwriting it.`);
+    const publicPath = join(dir, PUBLIC_NAME);
+    const stagingPrivate = join(dir, `.${basename(PRIVATE_NAME)}.${process.pid}.tmp`);
+    const stagingPublic = join(dir, `.${basename(PUBLIC_NAME)}.${process.pid}.tmp`);
+    // Every fallible step runs before the private key is renamed: a replace that throws must
+    // leave the old key usable, or the rotation proof for peers pinning it is gone for good.
+    await writeFile(stagingPrivate, encodePrivate(material), { mode: 0o600 });
+    await chmod(stagingPrivate, 0o600);
+    await writeFile(stagingPublic, Buffer.from(material.public_key).toString("base64"), { mode: 0o644 });
+    await chmod(stagingPublic, 0o644);
+    // The public file is a cache derived from the private key, so it may be replaced first.
+    await rename(stagingPublic, publicPath);
+    await rename(stagingPrivate, privatePath);
+}
+/** Synchronous guard for the startup path: the existing key must already be private. */
+export function assertKeyPermissions(dir) {
+    assertPrivatePermissions(join(dir, PRIVATE_NAME));
+    void chmod;
+    void chmodSync;
+    void mkdirSync;
+    void readFileSync;
+}
+export async function createNodeKey(nodeId) {
+    const dir = await ensureKeyDir(process.cwd(), nodeId, "global");
+    return Object.assign(() => loadOrCreateKey(dir, nodeId), {
+        replace: (material) => writeKeyMaterial(dir, material, { replace: true }),
+    });
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,4GAA4G;AAC5G,MAAM,YAAY,GAAG,UAAU,CAAC;AAChC,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B,SAAS,eAAe,CAAC,GAAW;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc;IACtB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,QAAqB;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,sFAAsF;AACtF,SAAS,wBAAwB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,KAAK,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,qEAAqE,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;AACF,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,0EAA0E,IAAI,EAAE,CAAC,CAAC;IACnG,CAAC;AACF,CAAC;AAED,yFAAyF;AACzF,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IACjD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC5B,kFAAkF;QAClF,QAAQ,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE;YACjF,gGAAgG;YAChG,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAQ,KAA2B,CAAC,IAAI,KAAK,QAAQ,IAAK,KAA2B,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/H,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC5B,QAAQ,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxF,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAAc,EAAE,KAA2B;IAC1F,uFAAuF;IACvF,8DAA8D;IAC9D,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IAC3E,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,KAAK,CACd,qFAAqF;cACnF,qFAAqF,CACvF,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,MAAc;IAChE,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,IAAI,GAAwD;QACjE,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,UAAU,EAAE,IAAI,UAAU,EAAE;KAC5B,CAAC;IACF,0FAA0F;IAC1F,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACpG,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,QAAqB,EAAE,UAAiC,EAAE;IAC7G,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,iDAAiD,CAAC,CAAC;IACvK,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IAChF,yFAAyF;IACzF,yFAAyF;IACzF,MAAM,SAAS,CAAC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrG,MAAM,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAClC,wFAAwF;IACxF,MAAM,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC/C,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAClD,KAAK,KAAK,CAAC;IACX,KAAK,SAAS,CAAC;IACf,KAAK,SAAS,CAAC;IACf,KAAK,YAAY,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc;IACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE;QACxD,OAAO,EAAE,CAAC,QAAqB,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KACtF,CAAC,CAAC;AACJ,CAAC"}

package/dist/log.d.ts

@@ -0,0 +1,43 @@
+/** A bounded tail of the gateway's own log lines, so the TUI can show them. */
+export interface LogRing {
+    push(key: string, line: string): void;
+    tail(count: number): string[];
+}
+/** The four levels of the convention: `debug` loops, `info` milestones, `warn` degradation, `error` loss. */
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+/** One JSON line about to be written. */
+export type LogLine = (message: string, fields?: Record<string, unknown>) => void;
+/**
+ * A host's log sink. Calling it writes `info`, the level every existing call site uses; a sink
+ * that also carries `debug`/`warn`/`error` records those levels where the host put them.
+ */
+export type LogSink = LogLine & {
+    readonly debug?: LogLine;
+    readonly warn?: LogLine;
+    readonly error?: LogLine;
+};
+export type LeveledLog = LogLine & {
+    log: LogLine;
+    debug: LogLine;
+    warn: LogLine;
+    error: LogLine;
+};
+export type GatewayLogger = LeveledLog & {
+    readonly level: LogLevel;
+    readonly ring: LogRing;
+};
+/** `ONLYNE_LOG_LEVEL` selects a level; anything unrecognised (and unset) keeps `info`. */
+export declare function resolveLogLevel(value: string | undefined): LogLevel;
+/**
+ * Normalizes a sink to the four entry points. A sink without level methods records every line
+ * it is handed: it cannot filter, so the host's own store decides what the level means.
+ */
+export declare function leveled(sink?: LogSink): LeveledLog;
+/**
+ * The gateway logs JSON lines. Under the TUI those lines would corrupt the alternate
+ * screen, so they go to a ring the TUI renders instead; without a TTY they stay on stdout.
+ * The returned function is the `info` line — `logger.log` is the same entry point — and
+ * `debug`, `warn`, `error` are the other levels of the same convention.
+ */
+export declare function createLogger(toStdout: boolean, capacity?: number, file?: string, level?: LogLevel): GatewayLogger;
+//# sourceMappingURL=log.d.ts.map

package/dist/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,MAAM,WAAW,OAAO;IACtB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC/B;AAED,6GAA6G;AAC7G,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,yCAAyC;AACzC,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;AAElF;;;GAGG;AACH,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG;IACjC,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAI9F,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAEnE;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAQlD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,SAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,aAAa,CA0C9G"}

package/dist/log.js

@@ -0,0 +1,77 @@
+import { appendFileSync } from 'node:fs';
+const ORDER = { debug: 0, info: 1, warn: 2, error: 3 };
+/** `ONLYNE_LOG_LEVEL` selects a level; anything unrecognised (and unset) keeps `info`. */
+export function resolveLogLevel(value) {
+    return value === 'debug' || value === 'warn' || value === 'error' ? value : 'info';
+}
+/**
+ * Normalizes a sink to the four entry points. A sink without level methods records every line
+ * it is handed: it cannot filter, so the host's own store decides what the level means.
+ */
+export function leveled(sink) {
+    const call = (message, fields) => { if (typeof sink === 'function')
+        sink(message, fields); };
+    return Object.assign(call, {
+        log: call,
+        debug: sink?.debug ?? call,
+        warn: sink?.warn ?? call,
+        error: sink?.error ?? call,
+    });
+}
+/**
+ * The gateway logs JSON lines. Under the TUI those lines would corrupt the alternate
+ * screen, so they go to a ring the TUI renders instead; without a TTY they stay on stdout.
+ * The returned function is the `info` line — `logger.log` is the same entry point — and
+ * `debug`, `warn`, `error` are the other levels of the same convention.
+ */
+export function createLogger(toStdout, capacity = 200, file, level) {
+    const selected = level ?? resolveLogLevel(process.env.ONLYNE_LOG_LEVEL);
+    const threshold = ORDER[selected];
+    // One entry per distinct message: a gateway that retries every five seconds would otherwise
+    // fill the pane with the same line and hide everything else.
+    const lines = [];
+    const ring = {
+        push(key, line) {
+            const last = lines.at(-1);
+            if (last !== undefined && last.key === key) {
+                last.line = line;
+                last.count += 1;
+                return;
+            }
+            lines.push({ key, line, count: 1 });
+            if (lines.length > capacity)
+                lines.splice(0, lines.length - capacity);
+        },
+        tail(count) {
+            return lines.slice(Math.max(0, lines.length - count))
+                .map(entry => (entry.count === 1 ? entry.line : `${entry.line} ×${entry.count}`));
+        },
+    };
+    const emit = (at, message, fields) => {
+        if (ORDER[at] < threshold)
+            return;
+        const line = JSON.stringify({ at: new Date().toISOString(), level: at, message, ...fields });
+        if (toStdout)
+            console.log(line);
+        else
+            ring.push(`${at}|${message}|${JSON.stringify(fields ?? {})}`, line);
+        // The TUI owns the screen, so the durable record is the file; without one the line would
+        // exist only in the ring and vanish with the process.
+        if (file !== undefined) {
+            try {
+                appendFileSync(file, `${line}\n`);
+            }
+            catch { /* a full disk must not stop the gateway */ }
+        }
+    };
+    const info = (message, fields) => emit('info', message, fields);
+    return Object.assign(info, {
+        level: selected,
+        log: info,
+        debug: (message, fields) => emit('debug', message, fields),
+        warn: (message, fields) => emit('warn', message, fields),
+        error: (message, fields) => emit('error', message, fields),
+        ring,
+    });
+}
+//# sourceMappingURL=log.js.map

package/dist/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAiCzC,MAAM,KAAK,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAEjF,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,KAAyB;IACvD,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAc;IACpC,MAAM,IAAI,GAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,OAAO,IAAI,KAAK,UAAU;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI;QAC1B,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;QACxB,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAAiB,EAAE,QAAQ,GAAG,GAAG,EAAE,IAAa,EAAE,KAAgB;IAC7F,MAAM,QAAQ,GAAG,KAAK,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClC,4FAA4F;IAC5F,6DAA6D;IAC7D,MAAM,KAAK,GAAwD,EAAE,CAAC;IACtE,MAAM,IAAI,GAAY;QACpB,IAAI,CAAC,GAAW,EAAE,IAAY;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;gBAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,KAAa;YAChB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;iBAClD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;KACF,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,EAAY,EAAE,OAAe,EAAE,MAAgC,EAAQ,EAAE;QACrF,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,SAAS;YAAE,OAAO;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC7F,IAAI,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;YAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzE,yFAAyF;QACzF,sDAAsD;QACtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC;gBAAC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,CAAC,OAAe,EAAE,MAAgC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC5F,IAAI,EAAE,CAAC,OAAe,EAAE,MAAgC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1F,KAAK,EAAE,CAAC,OAAe,EAAE,MAAgC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC5F,IAAI;KACL,CAAC,CAAC;AACL,CAAC"}

package/dist/network.d.ts

@@ -0,0 +1,27 @@
+export interface NetworkDiscoveryOptions {
+    node_id: string;
+    /** Identifies this process instance in the service name and TXT record. */
+    instance_id: string;
+    /** Absolute URL the node is listening on; its port is the allocated one. */
+    endpoint: string;
+    /** Local listener address; a wildcard binding advertises a concrete interface. */
+    bind: string;
+    /** `expectedNode` is the identity the advertisement claims, not a verified fact. */
+    onCandidate(url: string, source: string, expectedNode?: string): Promise<void>;
+    onError(error: unknown): void;
+    /** A candidate that was delivered earlier is no longer advertised. */
+    onUnavailable?(url: string): void;
+}
+/**
+ * Same-link discovery over DNS-SD/mDNS: publishes `_onlyne._tcp.local` and
+ * offers every advertisement to the library, which owns identity resolution
+ * and membership. The browser keeps other regions' candidates; only the
+ * HTTP declaration decides region.
+ */
+export declare class NetworkDiscovery {
+    #private;
+    constructor(options: NetworkDiscoveryOptions);
+    start(): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=network.d.ts.map

package/dist/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAgCA,MAAM,WAAW,uBAAuB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,sEAAsE;IACtE,aAAa,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;GAKG;AACH,qBAAa,gBAAgB;;gBAahB,OAAO,EAAE,uBAAuB;IAItC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiDtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA4G5B"}

package/dist/network.js

@@ -0,0 +1,350 @@
+import { networkInterfaces } from "node:os";
+/** RFC 0011 §5.1: the one service type every HTTP binding publishes. */
+const SERVICE_TYPE = "onlyne";
+const SERVICE_PROTOCOL = "tcp";
+const WIRE_PROTOCOL = "onlyne/3";
+const SERVICE_PATH_SUFFIX = "/onlyne/v3";
+const SOURCE = "mdns";
+/**
+ * Same-link discovery over DNS-SD/mDNS: publishes `_onlyne._tcp.local` and
+ * offers every advertisement to the library, which owns identity resolution
+ * and membership. The browser keeps other regions' candidates; only the
+ * HTTP declaration decides region.
+ */
+export class NetworkDiscovery {
+    #options;
+    #bonjour;
+    #browser;
+    #service;
+    #started = false;
+    #closed;
+    #closing = false;
+    /** Deliveries in flight, keyed by URL, so repeated advertisements run once. */
+    #inflight = new Map();
+    /** Delivered URL per service fqdn; a change or a goodbye withdraws the old one. */
+    #delivered = new Map();
+    constructor(options) {
+        this.#options = options;
+    }
+    async start() {
+        if (this.#started)
+            return;
+        this.#closed = undefined;
+        this.#closing = false;
+        const publication = plan(this.#options);
+        let module;
+        try {
+            module = await import("bonjour-service");
+        }
+        catch {
+            throw new Error("DNS-SD discovery is unavailable. Check the bonjour-service installation.");
+        }
+        const Constructor = typeof module === "function" ? module : module.default;
+        if (Constructor === undefined)
+            throw new Error("bonjour-service does not export a constructor.");
+        const bonjour = new Constructor({}, (error) => this.#fail(error));
+        try {
+            const browser = bonjour.find({ type: SERVICE_TYPE, protocol: SERVICE_PROTOCOL });
+            browser.on("up", service => this.#consider(service));
+            browser.on("srv-update", service => this.#consider(service));
+            browser.on("txt-update", service => this.#consider(service));
+            browser.on("down", service => this.#withdraw(service));
+            this.#bonjour = bonjour;
+            this.#browser = browser;
+            // A probe keeps the first `records()` call asynchronous, which is what lets
+            // the loopback filter below take effect before the announcement is sent.
+            const service = bonjour.publish({
+                name: publication.name,
+                type: SERVICE_TYPE,
+                protocol: SERVICE_PROTOCOL,
+                port: publication.port,
+                host: publication.host,
+                probe: true,
+                txt: publication.txt,
+            });
+            if (isLoopback(publication.host)) {
+                // bonjour-service attaches every interface address to the SRV target. A
+                // loopback binding is reachable only from this host, so publishing those
+                // addresses (none of them loopback) would advertise a dead endpoint.
+                const records = service.records.bind(service);
+                service.records = () => records().filter(record => record.type !== "A" && record.type !== "AAAA");
+            }
+            this.#service = service;
+            this.#started = true;
+        }
+        catch (error) {
+            bonjour.destroy(() => undefined);
+            throw error;
+        }
+    }
+    async close() {
+        if (this.#closed !== undefined)
+            return this.#closed;
+        const bonjour = this.#bonjour;
+        this.#closing = true;
+        this.#started = false;
+        this.#browser?.stop();
+        this.#browser = undefined;
+        this.#service = undefined;
+        this.#bonjour = undefined;
+        this.#inflight.clear();
+        this.#delivered.clear();
+        if (bonjour === undefined) {
+            this.#closed = Promise.resolve();
+            return this.#closed;
+        }
+        this.#closed = new Promise(resolve => {
+            bonjour.unpublishAll(() => bonjour.destroy(() => resolve()));
+        });
+        return this.#closed;
+    }
+    #consider(service) {
+        if (this.#closing)
+            return;
+        if (service.fqdn === this.#service?.fqdn)
+            return;
+        const txt = text(service);
+        const node = txt["node_id"];
+        const instance = txt["instance_id"];
+        if (node === this.#options.node_id && instance === this.#options.instance_id)
+            return;
+        const protocol = txt["protocol"];
+        if (protocol !== WIRE_PROTOCOL) {
+            this.#fail(new Error(`Service ${service.name} does not speak ${WIRE_PROTOCOL}.`));
+            return;
+        }
+        if (node === undefined || instance === undefined) {
+            this.#fail(new Error(`Service ${service.name} is missing its node_id or instance_id.`));
+            return;
+        }
+        const scheme = txt["scheme"];
+        if (scheme !== "http" && scheme !== "https") {
+            this.#fail(new Error(`Service ${service.name} advertises scheme ${scheme ?? "(missing)"}.`));
+            return;
+        }
+        const path = txt["path"];
+        if (path === undefined || !normalizePath(path).endsWith(SERVICE_PATH_SUFFIX)) {
+            this.#fail(new Error(`Service ${service.name} does not advertise a ${SERVICE_PATH_SUFFIX} path.`));
+            return;
+        }
+        if (!Number.isInteger(service.port) || service.port < 1 || service.port > 65_535) {
+            this.#fail(new Error(`Service ${service.name} advertises port ${String(service.port)}.`));
+            return;
+        }
+        const host = candidateHost(service);
+        if (host === undefined) {
+            this.#fail(new Error(`Service ${service.name} advertises no address reachable from this host.`));
+            return;
+        }
+        if (!isLoopback(host) && scheme !== "https") {
+            this.#fail(new Error(`Service ${service.name} advertises plain HTTP across hosts; Onlyne requires HTTPS there.`));
+            return;
+        }
+        const url = `${scheme}://${host.includes(":") ? `[${host}]` : host}:${String(service.port)}${normalizePath(path)}`;
+        const previous = this.#delivered.get(service.fqdn);
+        if (previous === url)
+            return;
+        if (previous !== undefined) {
+            this.#delivered.delete(service.fqdn);
+            this.#options.onUnavailable?.(previous);
+        }
+        void this.#deliver(service.fqdn, url, node);
+    }
+    #deliver(fqdn, url, expectedNode) {
+        const running = this.#inflight.get(url);
+        if (running !== undefined)
+            return running;
+        const attempt = this.#options
+            .onCandidate(url, SOURCE, expectedNode)
+            .then(() => true)
+            .catch((error) => {
+            this.#fail(error);
+            return false;
+        });
+        const tracked = attempt.finally(() => {
+            if (this.#inflight.get(url) === tracked)
+                this.#inflight.delete(url);
+        });
+        tracked.then(delivered => {
+            if (delivered && !this.#closing && !this.#delivered.has(fqdn))
+                this.#delivered.set(fqdn, url);
+        });
+        this.#inflight.set(url, tracked);
+        return tracked;
+    }
+    #withdraw(service) {
+        const url = this.#delivered.get(service.fqdn);
+        if (url === undefined)
+            return;
+        this.#delivered.delete(service.fqdn);
+        this.#options.onUnavailable?.(url);
+    }
+    #fail(error) {
+        if (this.#closing)
+            return;
+        try {
+            this.#options.onError(error);
+        }
+        catch {
+            // The error sink is the end of the chain; a throwing sink must not kill the mDNS loop.
+        }
+    }
+}
+/** Validate everything the advertisement needs before the socket exists. */
+function plan(options) {
+    if (options.node_id.length === 0)
+        throw new Error("Onlyne discovery needs a node id.");
+    if (options.instance_id.length === 0)
+        throw new Error("Onlyne discovery needs an instance id.");
+    let endpoint;
+    try {
+        endpoint = new URL(options.endpoint);
+    }
+    catch {
+        throw new Error(`The Onlyne endpoint must be an absolute URL, got ${options.endpoint}.`);
+    }
+    if (endpoint.protocol !== "http:" && endpoint.protocol !== "https:") {
+        throw new Error(`The Onlyne endpoint must use http or https, got ${endpoint.protocol}.`);
+    }
+    const scheme = endpoint.protocol.slice(0, -1);
+    const path = servicePath(endpoint.pathname);
+    const port = endpoint.port === "" ? (scheme === "https" ? 443 : 80) : Number(endpoint.port);
+    if (!Number.isInteger(port) || port < 1 || port > 65_535) {
+        throw new Error(`The Onlyne endpoint must name the listening port, got ${options.endpoint}.`);
+    }
+    const advertised = normalizeHost(endpoint.hostname);
+    if (advertised === undefined)
+        throw new Error(`The Onlyne endpoint has no host, got ${options.endpoint}.`);
+    // A wildcard binding is not a connectable address; publish the interface it
+    // listens on instead, and never the wildcard itself.
+    const host = isWildcard(advertised) ? interfaceAddress(options.bind) : advertised;
+    return {
+        name: options.instance_id,
+        host,
+        port,
+        txt: {
+            protocol: WIRE_PROTOCOL,
+            path,
+            scheme,
+            node_id: options.node_id,
+            instance_id: options.instance_id,
+        },
+    };
+}
+/** The advertised address of a wildcard binding: its bind when concrete, else a live interface. */
+function interfaceAddress(bind) {
+    const concrete = normalizeHost(bind);
+    if (concrete !== undefined && !isWildcard(concrete))
+        return concrete;
+    const ipv4 = [];
+    const ipv6 = [];
+    for (const entries of Object.values(networkInterfaces())) {
+        for (const entry of entries ?? []) {
+            if (entry.internal)
+                continue;
+            const address = normalizeAddress(entry.address);
+            if (address === undefined || address.startsWith("fe80:") || address.startsWith("169.254."))
+                continue;
+            (address.includes(":") ? ipv6 : ipv4).push(address);
+        }
+    }
+    const chosen = ipv4[0] ?? ipv6[0];
+    if (chosen === undefined) {
+        throw new Error("No interface address can be advertised; set server.bind to a concrete address.");
+    }
+    return chosen;
+}
+/**
+ * The address this host can use to reach the advertised service. Addresses that
+ * this host already owns are only applicable when the packet came from this
+ * host: a remote service cannot own them, and a remote loopback is unreachable.
+ */
+function candidateHost(service) {
+    const local = localAddresses();
+    const referer = normalizeHost(service.referer?.address);
+    const originLocal = referer !== undefined && (isLoopback(referer) || local.has(referer));
+    for (const raw of service.addresses ?? []) {
+        const address = normalizeAddress(raw);
+        if (address === undefined || isWildcard(address))
+            continue;
+        if (address.startsWith("fe80:") || address.startsWith("169.254."))
+            continue;
+        if (address.startsWith("ff") || /^(22[4-9]|23\d)\./.test(address))
+            continue;
+        if (isLoopback(address)) {
+            if (originLocal)
+                return address;
+            continue;
+        }
+        if (local.has(address) && !originLocal)
+            continue;
+        return address;
+    }
+    const target = normalizeHost(service.host);
+    if (target === undefined || isWildcard(target))
+        return undefined;
+    if (isLoopback(target))
+        return originLocal ? target : undefined;
+    return target;
+}
+function localAddresses() {
+    const hosts = new Set(["127.0.0.1", "::1", "localhost"]);
+    for (const entries of Object.values(networkInterfaces())) {
+        for (const entry of entries ?? []) {
+            const address = normalizeAddress(entry.address);
+            if (address !== undefined)
+                hosts.add(address);
+        }
+    }
+    return hosts;
+}
+function text(service) {
+    const fields = {};
+    const raw = service.txt;
+    if (raw === null || typeof raw !== "object")
+        return fields;
+    for (const [key, value] of Object.entries(raw)) {
+        if (typeof value === "string")
+            fields[key] = value;
+        else if (Array.isArray(value) && typeof value[0] === "string")
+            fields[key] = value[0];
+    }
+    return fields;
+}
+function servicePath(pathname) {
+    const path = normalizePath(pathname);
+    if (!path.endsWith(SERVICE_PATH_SUFFIX)) {
+        throw new Error(`The Onlyne endpoint path must end with ${SERVICE_PATH_SUFFIX}, got ${pathname}.`);
+    }
+    return path;
+}
+function normalizePath(pathname) {
+    const absolute = pathname.startsWith("/") ? pathname : `/${pathname}`;
+    const trimmed = absolute.replace(/\/+$/, "");
+    return trimmed === "" ? "/" : trimmed;
+}
+function normalizeAddress(value) {
+    let address = value.trim();
+    if (address.startsWith("[") && address.endsWith("]"))
+        address = address.slice(1, -1);
+    const zone = address.indexOf("%");
+    if (zone >= 0)
+        address = address.slice(0, zone);
+    return address.length === 0 ? undefined : address.toLowerCase();
+}
+function normalizeHost(value) {
+    if (value === undefined)
+        return undefined;
+    const host = normalizeAddress(value);
+    if (host === undefined)
+        return undefined;
+    return host.endsWith(".") ? host.slice(0, -1) : host;
+}
+function isLoopback(host) {
+    return host === "localhost" || host.endsWith(".localhost") || host === "::1"
+        || host === "0:0:0:0:0:0:0:1" || host.startsWith("127.");
+}
+function isWildcard(host) {
+    return host === "0.0.0.0" || host === "::" || host === "0:0:0:0:0:0:0:0";
+}
+//# sourceMappingURL=network.js.map