@onlyne/node-host 3.1.0 → 3.2.0

package/dist/acquire.d.ts

@@ -0,0 +1,62 @@
+/** RFC 0018 §2: how far a peer may be acquired without a human confirming first. */
+export type AcquirePolicy = "all" | "segment" | "none";
+/** RFC 0018 §5: host-side acquisition settings. The library never reads them. */
+export interface AcquisitionPolicy {
+    policy: AcquirePolicy;
+    /** CIDR blocks and host names; only read when `policy` is `segment`. */
+    allow: string[];
+}
+/**
+ * The default delegation: loopback only. Discovery excludes loopback by default, so the two
+ * defaults together mean a remote peer is neither discovered nor approved (RFC 0018 §5.1).
+ */
+export declare const DEFAULT_ACQUISITION: AcquisitionPolicy;
+/** Turns a host name into the addresses it names; an empty list means it names none. */
+export type Resolver = (host: string) => Promise<string[]>;
+/** The configured policy, or the documented default when the config carries none. */
+export declare function acquisitionOf(config: {
+    acquisition?: AcquisitionPolicy;
+}): AcquisitionPolicy;
+export type AcquireReason = "policy_all" | "policy_segment" | "policy_denied_none" | "policy_unobserved" | "policy_denied_observed" | "policy_denied_declared" | "policy_denied_recorded";
+/** RFC 0018 §2.1–2.2: what the host observed, what the peer declared, what discovery recorded. */
+export interface AcquireInput {
+    /** The address this statement's connection arrived from; absent when it was not observed. */
+    observed?: string;
+    /** The `base_url` the peer wrote into its own statement. */
+    declared?: string;
+    /** The discovery addresses recorded for this node id when the statement arrived. */
+    recorded?: readonly string[];
+}
+export interface AcquireVerdict {
+    allowed: boolean;
+    reason: AcquireReason;
+    /** The allow entry the observed address matched, when one did. */
+    matched?: string;
+}
+interface Block {
+    network: string;
+    prefix: number;
+    type: "ipv4" | "ipv6";
+}
+/** One `[acquisition] allow` entry: `network/prefix`, or a host name to accept as written. */
+export declare function parseAllowBlock(value: string): Block | {
+    name: string;
+} | undefined;
+/**
+ * The allow entry a value matches, or undefined. A literal address is judged as itself. A host
+ * name matches an allow entry of the same name; otherwise it is resolved and every address it
+ * names must fall inside the allow set (RFC 0018 §2.1) — a name that resolves to nothing, or to
+ * one address outside the set, matches nothing.
+ */
+export declare function allowMatch(value: string, allow: readonly string[], resolve?: Resolver): Promise<string | undefined>;
+/**
+ * RFC 0018 §2: decide whether this peer may be approved without a human confirming first.
+ *
+ * The declared address is checked because the trust row stores it and `peerBase` falls back to
+ * it when discovery has no record. The recorded addresses are checked because
+ * `discovery.resolve()` re-probes every one of them before it connects, so a record outside the
+ * allow set is an outbound request the policy never authorized.
+ */
+export declare function evaluateAcquisition(policy: AcquisitionPolicy, input: AcquireInput, resolve?: Resolver): Promise<AcquireVerdict>;
+export {};
+//# sourceMappingURL=acquire.d.ts.map

package/dist/acquire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acquire.d.ts","sourceRoot":"","sources":["../src/acquire.ts"],"names":[],"mappings":"AAGA,oFAAoF;AACpF,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,CAAC;AAEvD,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,wEAAwE;IACxE,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,iBAGjC,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAI3D,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE;IAAE,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAAG,iBAAiB,CAE5F;AAED,MAAM,MAAM,aAAa,GACtB,YAAY,GACZ,gBAAgB,GAChB,oBAAoB,GACpB,mBAAmB,GACnB,wBAAwB,GACxB,wBAAwB,GACxB,wBAAwB,CAAC;AAE5B,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC5B,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,KAAK;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACtB;AAID,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAgBnF;AA2CD;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,QAAsB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoBtI;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,QAAsB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAezB"}

package/dist/acquire.js

@@ -0,0 +1,146 @@
+import { lookup } from "node:dns/promises";
+import { BlockList, isIP } from "node:net";
+/**
+ * The default delegation: loopback only. Discovery excludes loopback by default, so the two
+ * defaults together mean a remote peer is neither discovered nor approved (RFC 0018 §5.1).
+ */
+export const DEFAULT_ACQUISITION = {
+    policy: "segment",
+    allow: ["127.0.0.0/8", "::1/128"],
+};
+const dnsResolver = async (host) => (await lookup(host, { all: true })).map(row => row.address);
+/** The configured policy, or the documented default when the config carries none. */
+export function acquisitionOf(config) {
+    return config.acquisition ?? DEFAULT_ACQUISITION;
+}
+const HOST_NAME = /^[A-Za-z0-9]([A-Za-z0-9.-]*[A-Za-z0-9])?$/;
+/** One `[acquisition] allow` entry: `network/prefix`, or a host name to accept as written. */
+export function parseAllowBlock(value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    const slash = trimmed.lastIndexOf("/");
+    if (slash <= 0) {
+        // A name is matched by its own spelling, so listing it involves no resolution. A bare
+        // address is not a block: it needs a prefix to say what it covers.
+        if (isIP(trimmed) !== 0 || !HOST_NAME.test(trimmed))
+            return undefined;
+        return { name: trimmed.toLowerCase() };
+    }
+    const prefix = Number(trimmed.slice(slash + 1));
+    if (!Number.isInteger(prefix) || prefix < 0)
+        return undefined;
+    const network = literalAddress(trimmed.slice(0, slash));
+    if (network === undefined)
+        return undefined;
+    if (prefix > (network.type === "ipv4" ? 32 : 128))
+        return undefined;
+    return { network: network.address, prefix, type: network.type };
+}
+/** The host a value names: a URL's hostname, or the value itself when it is already a host. */
+function hostOf(value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    if (!trimmed.includes("://"))
+        return trimmed.replace(/^\[(.*)\]$/, "$1");
+    try {
+        const host = new URL(trimmed).hostname;
+        return host.replace(/^\[(.*)\]$/, "$1");
+    }
+    catch {
+        return undefined;
+    }
+}
+/** A host that is already a literal address, with IPv4-mapped IPv6 read as IPv4. */
+function literalAddress(host) {
+    const bare = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+    const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(bare);
+    if (mapped !== null)
+        return { address: mapped[1], type: "ipv4" };
+    const family = isIP(bare);
+    if (family === 4)
+        return { address: bare, type: "ipv4" };
+    if (family === 6)
+        return { address: bare, type: "ipv6" };
+    return undefined;
+}
+function blockHolds(address, block) {
+    if (block.type !== address.type)
+        return false;
+    const blocks = new BlockList();
+    blocks.addSubnet(block.network, block.prefix, block.type);
+    return blocks.check(address.address, block.type);
+}
+/** The allow entry an address falls in, or undefined. */
+function entryFor(address, allow) {
+    for (const entry of allow) {
+        const block = parseAllowBlock(entry);
+        if (block === undefined || "name" in block)
+            continue;
+        if (blockHolds(address, block))
+            return entry.trim();
+    }
+    return undefined;
+}
+/**
+ * The allow entry a value matches, or undefined. A literal address is judged as itself. A host
+ * name matches an allow entry of the same name; otherwise it is resolved and every address it
+ * names must fall inside the allow set (RFC 0018 §2.1) — a name that resolves to nothing, or to
+ * one address outside the set, matches nothing.
+ */
+export async function allowMatch(value, allow, resolve = dnsResolver) {
+    const host = hostOf(value);
+    if (host === undefined)
+        return undefined;
+    const literal = literalAddress(host);
+    if (literal !== undefined)
+        return entryFor(literal, allow);
+    const named = allow.find(entry => {
+        const block = parseAllowBlock(entry);
+        return block !== undefined && "name" in block && block.name === host.toLowerCase();
+    });
+    if (named !== undefined)
+        return named.trim();
+    const resolved = await resolve(host).catch(() => []);
+    let matched;
+    for (const address of resolved) {
+        const target = literalAddress(address);
+        if (target === undefined)
+            return undefined;
+        const entry = entryFor(target, allow);
+        if (entry === undefined)
+            return undefined;
+        matched ??= entry;
+    }
+    return matched;
+}
+/**
+ * RFC 0018 §2: decide whether this peer may be approved without a human confirming first.
+ *
+ * The declared address is checked because the trust row stores it and `peerBase` falls back to
+ * it when discovery has no record. The recorded addresses are checked because
+ * `discovery.resolve()` re-probes every one of them before it connects, so a record outside the
+ * allow set is an outbound request the policy never authorized.
+ */
+export async function evaluateAcquisition(policy, input, resolve = dnsResolver) {
+    if (policy.policy === "none")
+        return { allowed: false, reason: "policy_denied_none" };
+    if (policy.policy === "all")
+        return { allowed: true, reason: "policy_all" };
+    if (input.observed === undefined)
+        return { allowed: false, reason: "policy_unobserved" };
+    const observed = await allowMatch(input.observed, policy.allow, resolve);
+    if (observed === undefined)
+        return { allowed: false, reason: "policy_denied_observed" };
+    if (input.declared !== undefined && await allowMatch(input.declared, policy.allow, resolve) === undefined) {
+        return { allowed: false, reason: "policy_denied_declared", matched: observed };
+    }
+    for (const address of input.recorded ?? []) {
+        if (await allowMatch(address, policy.allow, resolve) === undefined) {
+            return { allowed: false, reason: "policy_denied_recorded", matched: observed };
+        }
+    }
+    return { allowed: true, reason: "policy_segment", matched: observed };
+}
+//# sourceMappingURL=acquire.js.map

package/dist/acquire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acquire.js","sourceRoot":"","sources":["../src/acquire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAY3C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACrD,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC;CACjC,CAAC;AAKF,MAAM,WAAW,GAAa,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAExG,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,MAA2C;IACxE,OAAO,MAAM,CAAC,WAAW,IAAI,mBAAmB,CAAC;AAClD,CAAC;AAkCD,MAAM,SAAS,GAAG,2CAA2C,CAAC;AAE9D,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,KAAa;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAChB,sFAAsF;QACtF,mEAAmE;QACnE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACtE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,+FAA+F;AAC/F,SAAS,MAAM,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,OAAmD,EAAE,KAAY;IACpF,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,yDAAyD;AACzD,SAAS,QAAQ,CAAC,OAAmD,EAAE,KAAwB;IAC9F,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,IAAI,KAAK;YAAE,SAAS;QACrD,IAAI,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,KAAwB,EAAE,UAAoB,WAAW;IACxG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QAChC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;IACjE,IAAI,OAA2B,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,KAAK,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAyB,EACzB,KAAmB,EACnB,UAAoB,WAAW;IAE/B,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACtF,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC5E,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACxF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3G,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAChF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvE,CAAC"}

package/dist/host-text.d.ts

@@ -0,0 +1,2 @@
+export declare const hostText: (key: "regionEmpty" | "nodeIdEmpty" | "addressEmpty" | "addressUrl" | "addressScheme" | "addressShape" | "configMissing" | "configParse" | "languageInvalid" | "keyScopeInvalid" | "publicUrlEmpty" | "bindEmpty" | "bindShape" | "pageSizeRange" | "retiredEndpoint" | "portRange" | "retiredPeers" | "retiredOmp" | "retiredAttention" | "tableExpected" | "stringExpected" | "integerExpected" | "stringArrayExpected" | "trustArray" | "trustEntry" | "acquirePolicy" | "acquireAllow" | "acquireDenied" | "addressUnavailable" | "keyProvider" | "loopbackBind" | "managementIdentity" | "mentionNotFound" | "guideContacts" | "guidePending" | "guideAccept" | "guideDiscover" | "guideRequestExchange" | "resourcePageSize" | "resourceOwner" | "resourceRef" | "resourceSince" | "resourceOp" | "contextNotRegistered" | "mainSummary" | "storeClosed" | "storeNested" | "storeBusy", vars?: Record<string, string | number>) => string;
+//# sourceMappingURL=host-text.d.ts.map

package/dist/host-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-text.d.ts","sourceRoot":"","sources":["../src/host-text.ts"],"names":[],"mappings":"AAqGA,eAAO,MAAM,QAAQ,i5BAAwC,CAAC"}

package/dist/host-text.js

@@ -0,0 +1,103 @@
+import { createTranslator } from "./i18n.js";
+const en = {
+    regionEmpty: "region must not be empty.",
+    nodeIdEmpty: "node.id must not be empty.",
+    addressEmpty: "A node address must not be empty.",
+    addressUrl: "A node address must be an absolute URL, got {value}.",
+    addressScheme: "A node address must use http or https, got {value}.",
+    addressShape: "A node address is an origin (http://host:7801) or a service URL (http://host:7801{service}), got {value}.",
+    configMissing: "No Onlyne configuration at {path}. Run /onlyne init to create it.",
+    configParse: "{path}: {error}",
+    languageInvalid: "language must be en or zh-CN.",
+    keyScopeInvalid: "node.key_scope must be project, global or none, got {value}.",
+    publicUrlEmpty: "server.public_url must not be empty.",
+    bindEmpty: "server.bind must not be empty.",
+    bindShape: "server.bind must be a hostname or IP address, got {value}.",
+    pageSizeRange: "threads.page_size must be an integer from 1 to 100, got {value}.",
+    retiredEndpoint: "node.endpoint is not supported; the endpoint comes from server.bind and the listening port.",
+    portRange: "server.port must be an integer from 0 to 65535, got {value}.",
+    retiredPeers: "peers is not supported; peers are discovered over the network and kept in the project SQLite.",
+    retiredOmp: "omp is not supported; delivery and spawning are decided by the OMP judge.",
+    retiredAttention: "threads.default_attention is not supported; reads default to the attention list.",
+    tableExpected: "{path}: {key} must be a table.",
+    stringExpected: "{field} must be a string.",
+    integerExpected: "{field} must be an integer.",
+    stringArrayExpected: "{field} must be an array of non-empty strings.",
+    trustArray: "{path}: trust must be an array of tables.",
+    trustEntry: "{path}: a trust entry needs node_id and a 16-character fingerprint.",
+    acquirePolicy: "acquisition.policy must be all, segment or none, got {value}.",
+    acquireAllow: "acquisition.allow entries must be network/prefix blocks, got {value}.",
+    acquireDenied: "The acquisition policy {policy} refused this approval: {reason}.",
+    addressUnavailable: "No concrete network address is available for this bind host.",
+    keyProvider: "External credential references need a host key provider.",
+    loopbackBind: "The unauthenticated development binding requires a loopback bind host. Create a node key to serve a remote address.",
+    managementIdentity: "HTTP callers cannot claim this node's management identity.",
+    mentionNotFound: "No unique discovered node is named {name}.",
+    guideContacts: "Contacts",
+    guidePending: "Pending",
+    guideAccept: "Accept",
+    guideDiscover: "Discover",
+    guideRequestExchange: "Request key exchange",
+    resourcePageSize: "page_size must be from 1 to 100.",
+    resourceOwner: "Resource owner must be a non-empty node id.",
+    resourceRef: "Resource reads need meta.resource {owner,id}.",
+    resourceSince: "since must be a decimal event id.",
+    resourceOp: "Resource reads use list, describe, log, event with event_id, operations, or status with operation_id.",
+    contextNotRegistered: "No execution context is registered as {alias}.",
+    mainSummary: "Main OMP session",
+    storeClosed: "The Onlyne store is closed.",
+    storeNested: "The Onlyne store already holds a transaction in this call.",
+    storeBusy: "The Onlyne store is busy and this transaction could not start.",
+};
+const zh = {
+    regionEmpty: "region 不能为空。",
+    nodeIdEmpty: "node.id 不能为空。",
+    addressEmpty: "节点地址不能为空。",
+    addressUrl: "节点地址必须是绝对 URL，收到的是 {value}。",
+    addressScheme: "节点地址必须使用 http 或 https，收到的是 {value}。",
+    addressShape: "节点地址应写成源站（http://host:7801）或服务 URL（http://host:7801{service}），收到的是 {value}。",
+    configMissing: "在 {path} 没有 Onlyne 配置。运行 /onlyne init 创建。",
+    configParse: "{path}: {error}",
+    languageInvalid: "language 必须是 en 或 zh-CN。",
+    keyScopeInvalid: "node.key_scope 必须是 project、global 或 none，收到的是 {value}。",
+    publicUrlEmpty: "server.public_url 不能为空。",
+    bindEmpty: "server.bind 不能为空。",
+    bindShape: "server.bind 必须是主机名或 IP 地址，收到的是 {value}。",
+    pageSizeRange: "threads.page_size 必须是 1 到 100 之间的整数，收到的是 {value}。",
+    retiredEndpoint: "不支持 node.endpoint；端点由 server.bind 和监听端口决定。",
+    portRange: "server.port 必须是 0 到 65535 之间的整数，收到的是 {value}。",
+    retiredPeers: "不支持 peers；对端通过网络发现，并保存在项目 SQLite 中。",
+    retiredOmp: "不支持 omp；投送与派生由 OMP judge 决定。",
+    retiredAttention: "不支持 threads.default_attention；读取默认使用关注列表。",
+    tableExpected: "{path}: {key} 必须是表。",
+    stringExpected: "{field} 必须是字符串。",
+    integerExpected: "{field} 必须是整数。",
+    stringArrayExpected: "{field} 必须是非空字符串数组。",
+    trustArray: "{path}: trust 必须是表数组。",
+    trustEntry: "{path}: 每条 trust 记录需要 node_id 和 16 个字符的指纹。",
+    acquirePolicy: "acquisition.policy 必须是 all、segment 或 none，收到的是 {value}。",
+    acquireAllow: "acquisition.allow 的条目必须是 network/prefix 形式，收到的是 {value}。",
+    acquireDenied: "获取策略 {policy} 拒绝了这次批准：{reason}。",
+    addressUnavailable: "这个绑定主机没有可用的具体网络地址。",
+    keyProvider: "外部凭据引用需要主机密钥提供者。",
+    loopbackBind: "未认证的开发绑定需要回环绑定主机。要对外提供服务，请创建节点密钥。",
+    managementIdentity: "HTTP 调用方不能冒用本节点的管理身份。",
+    mentionNotFound: "没有唯一发现到的节点名为 {name}。",
+    guideContacts: "联系人",
+    guidePending: "待确认",
+    guideAccept: "同意",
+    guideDiscover: "发现",
+    guideRequestExchange: "请求交换密钥",
+    resourcePageSize: "page_size 必须是 1 到 100。",
+    resourceOwner: "资源 owner 必须是非空节点 id。",
+    resourceRef: "读取资源需要 meta.resource {owner,id}。",
+    resourceSince: "since 必须是十进制事件 id。",
+    resourceOp: "读取资源可用 list、describe、log、带 event_id 的 event、operations，或带 operation_id 的 status。",
+    contextNotRegistered: "没有注册名为 {alias} 的执行上下文。",
+    mainSummary: "OMP 主会话",
+    storeClosed: "Onlyne 存储已关闭。",
+    storeNested: "Onlyne 存储已经在当前调用中持有一个事务。",
+    storeBusy: "Onlyne 存储正忙，此事务无法开始。",
+};
+export const hostText = createTranslator({ en, "zh-CN": zh });
+//# sourceMappingURL=host-text.js.map

package/dist/host-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-text.js","sourceRoot":"","sources":["../src/host-text.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,MAAM,EAAE,GAAG;IACT,WAAW,EAAE,2BAA2B;IACxC,WAAW,EAAE,4BAA4B;IACzC,YAAY,EAAE,mCAAmC;IACjD,UAAU,EAAE,sDAAsD;IAClE,aAAa,EAAE,qDAAqD;IACpE,YAAY,EAAE,2GAA2G;IACzH,aAAa,EAAE,mEAAmE;IAClF,WAAW,EAAE,iBAAiB;IAC9B,eAAe,EAAE,+BAA+B;IAChD,eAAe,EAAE,8DAA8D;IAC/E,cAAc,EAAE,sCAAsC;IACtD,SAAS,EAAE,gCAAgC;IAC3C,SAAS,EAAE,4DAA4D;IACvE,aAAa,EAAE,kEAAkE;IACjF,eAAe,EAAE,6FAA6F;IAC9G,SAAS,EAAE,8DAA8D;IACzE,YAAY,EAAE,+FAA+F;IAC7G,UAAU,EAAE,2EAA2E;IACvF,gBAAgB,EAAE,kFAAkF;IACpG,aAAa,EAAE,gCAAgC;IAC/C,cAAc,EAAE,2BAA2B;IAC3C,eAAe,EAAE,6BAA6B;IAC9C,mBAAmB,EAAE,gDAAgD;IACrE,UAAU,EAAE,2CAA2C;IACvD,UAAU,EAAE,qEAAqE;IACjF,aAAa,EAAE,+DAA+D;IAC9E,YAAY,EAAE,uEAAuE;IACrF,aAAa,EAAE,kEAAkE;IACjF,kBAAkB,EAAE,8DAA8D;IAClF,WAAW,EAAE,0DAA0D;IACvE,YAAY,EAAE,qHAAqH;IACnI,kBAAkB,EAAE,4DAA4D;IAChF,eAAe,EAAE,4CAA4C;IAC7D,aAAa,EAAE,UAAU;IACzB,YAAY,EAAE,SAAS;IACvB,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,UAAU;IACzB,oBAAoB,EAAE,sBAAsB;IAC5C,gBAAgB,EAAE,kCAAkC;IACpD,aAAa,EAAE,6CAA6C;IAC5D,WAAW,EAAE,+CAA+C;IAC5D,aAAa,EAAE,mCAAmC;IAClD,UAAU,EAAE,uGAAuG;IACnH,oBAAoB,EAAE,gDAAgD;IACtE,WAAW,EAAE,kBAAkB;IAC/B,WAAW,EAAE,6BAA6B;IAC1C,WAAW,EAAE,4DAA4D;IACzE,SAAS,EAAE,gEAAgE;CAC5E,CAAC;AACF,MAAM,EAAE,GAAoC;IAC1C,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,eAAe;IAC5B,YAAY,EAAE,WAAW;IACzB,UAAU,EAAE,6BAA6B;IACzC,aAAa,EAAE,qCAAqC;IACpD,YAAY,EAAE,6EAA6E;IAC3F,aAAa,EAAE,2CAA2C;IAC1D,WAAW,EAAE,iBAAiB;IAC9B,eAAe,EAAE,0BAA0B;IAC3C,eAAe,EAAE,wDAAwD;IACzE,cAAc,EAAE,yBAAyB;IACzC,SAAS,EAAE,mBAAmB;IAC9B,SAAS,EAAE,yCAAyC;IACpD,aAAa,EAAE,mDAAmD;IAClE,eAAe,EAAE,4CAA4C;IAC7D,SAAS,EAAE,+CAA+C;IAC1D,YAAY,EAAE,qCAAqC;IACnD,UAAU,EAAE,8BAA8B;IAC1C,gBAAgB,EAAE,2CAA2C;IAC7D,aAAa,EAAE,qBAAqB;IACpC,cAAc,EAAE,iBAAiB;IACjC,eAAe,EAAE,gBAAgB;IACjC,mBAAmB,EAAE,qBAAqB;IAC1C,UAAU,EAAE,uBAAuB;IACnC,UAAU,EAAE,4CAA4C;IACxD,aAAa,EAAE,yDAAyD;IACxE,YAAY,EAAE,0DAA0D;IACxE,aAAa,EAAE,iCAAiC;IAChD,kBAAkB,EAAE,oBAAoB;IACxC,WAAW,EAAE,kBAAkB;IAC/B,YAAY,EAAE,mCAAmC;IACjD,kBAAkB,EAAE,uBAAuB;IAC3C,eAAe,EAAE,sBAAsB;IACvC,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,oBAAoB,EAAE,QAAQ;IAC9B,gBAAgB,EAAE,wBAAwB;IAC1C,aAAa,EAAE,sBAAsB;IACrC,WAAW,EAAE,kCAAkC;IAC/C,aAAa,EAAE,oBAAoB;IACnC,UAAU,EAAE,kFAAkF;IAC9F,oBAAoB,EAAE,wBAAwB;IAC9C,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE,0BAA0B;IACvC,SAAS,EAAE,sBAAsB;CAClC,CAAC;AACF,MAAM,CAAC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC"}

package/dist/i18n.d.ts

@@ -0,0 +1,9 @@
+export type Locale = 'en' | 'zh-CN';
+export declare const LOCALES: readonly Locale[];
+export declare function parseLocale(value: string | null | undefined): Locale | undefined;
+export declare function resolveLocale(explicit?: string | null, env?: Record<string, string | undefined>): Locale;
+export declare function getLocale(): Locale;
+export declare function setLocale(value: Locale): void;
+export type Catalog<K extends string> = Record<Locale, Record<K, string>>;
+export declare function createTranslator<K extends string>(catalog: Catalog<K>): (key: K, vars?: Record<string, string | number>) => string;
+//# sourceMappingURL=i18n.d.ts.map

package/dist/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;AACpC,eAAO,MAAM,OAAO,EAAE,SAAS,MAAM,EAAoB,CAAC;AAE1D,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKhF;AAED,wBAAgB,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAErH;AAGD,wBAAgB,SAAS,IAAI,MAAM,CAAmB;AACtD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAoB;AAClE,MAAM,MAAM,OAAO,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAE1E,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAElI"}

package/dist/i18n.js

@@ -0,0 +1,19 @@
+export const LOCALES = ['en', 'zh-CN'];
+export function parseLocale(value) {
+    const language = value?.trim().toLowerCase().replace(/_/g, '-');
+    if (language === 'en' || language?.startsWith('en-') || language?.startsWith('en.'))
+        return 'en';
+    if (language === 'zh' || language?.startsWith('zh-') || language?.startsWith('zh.'))
+        return 'zh-CN';
+    return undefined;
+}
+export function resolveLocale(explicit, env = process.env) {
+    return parseLocale(explicit) ?? parseLocale(env.ONLYNE_LANG) ?? parseLocale(env.LC_ALL || env.LANG) ?? 'en';
+}
+let locale = resolveLocale();
+export function getLocale() { return locale; }
+export function setLocale(value) { locale = value; }
+export function createTranslator(catalog) {
+    return (key, vars) => catalog[getLocale()][key].replace(/\{(\w+)\}/g, (match, name) => vars?.[name] === undefined ? match : String(vars[name]));
+}
+//# sourceMappingURL=i18n.js.map

package/dist/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,OAAO,GAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAE1D,MAAM,UAAU,WAAW,CAAC,KAAgC;IAC1D,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACpG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,MAA0C,OAAO,CAAC,GAAG;IAC3G,OAAO,WAAW,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC9G,CAAC;AAED,IAAI,MAAM,GAAW,aAAa,EAAE,CAAC;AACrC,MAAM,UAAU,SAAS,KAAa,OAAO,MAAM,CAAC,CAAC,CAAC;AACtD,MAAM,UAAU,SAAS,CAAC,KAAa,IAAU,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;AAGlE,MAAM,UAAU,gBAAgB,CAAmB,OAAmB;IACpE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1J,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,29 @@
+import type { OnlyneNode } from '@onlyne/lib';
+import type { LogRing } from './log.ts';
+export { createNodeKey } from './keys.ts';
+export { NetworkDiscovery } from './network.ts';
+export { createLogger, leveled, resolveLogLevel } from './log.ts';
+export type { GatewayLogger, LeveledLog, LogLevel, LogLine, LogRing, LogSink } from './log.ts';
+export { GatewayTui } from './tui.ts';
+export interface NodeHostOptions {
+    node: OnlyneNode;
+    endpoint: string;
+    bind: string;
+    seeds?: string[];
+    /** The log ring the TUI renders; the host's logger owns it. */
+    ring?: LogRing;
+    /** Defaults to the terminal surface when both ends of the process are a TTY. */
+    interactive?: boolean;
+    /** Gateway-specific state rendered with the trust terminal. */
+    status?: () => Promise<string[]>;
+    log(message: string, fields?: Record<string, unknown>): void;
+}
+/**
+ * The host half every gateway shares: publish the bound endpoint over DNS-SD, browse for
+ * peers, re-observe the catalog, and — on a terminal — hand the operator the trust surface.
+ * Discovery only adds candidates; a key exchange still needs both fingerprints confirmed.
+ */
+export declare function startNodeHost(options: NodeHostOptions): Promise<{
+    close(): Promise<void>;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AAElE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAGxC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gFAAgF;IAChF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC;IAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAmDjG"}

package/dist/index.js

@@ -0,0 +1,74 @@
+import { NetworkDiscovery } from "./network.js";
+import { GatewayTui } from "./tui.js";
+export { createNodeKey } from "./keys.js";
+export { NetworkDiscovery } from "./network.js";
+export { createLogger, leveled, resolveLogLevel } from "./log.js";
+export { GatewayTui } from "./tui.js";
+/**
+ * The host half every gateway shares: publish the bound endpoint over DNS-SD, browse for
+ * peers, re-observe the catalog, and — on a terminal — hand the operator the trust surface.
+ * Discovery only adds candidates; a key exchange still needs both fingerprints confirmed.
+ */
+export async function startNodeHost(options) {
+    const { node, log } = options;
+    const controller = new AbortController();
+    const response = await node.fetch(new Request(`${options.endpoint}/description`));
+    const description = await response.json();
+    const network = new NetworkDiscovery({
+        node_id: node.auth.actor, instance_id: description.instance_id, endpoint: options.endpoint, bind: options.bind,
+        onCandidate: async (url, source, expectedNode) => {
+            if (expectedNode === node.auth.actor)
+                return;
+            await node.discovery.observe(url, source, expectedNode, controller.signal);
+        },
+        onError: error => log('onlyne.discovery.failed', { error: String(error) }),
+    });
+    try {
+        await network.start();
+    }
+    catch (error) {
+        log('onlyne.discovery.unavailable', { error: String(error) });
+    }
+    for (const seed of options.seeds ?? []) {
+        try {
+            await node.discovery.observe(seed, 'bootstrap', undefined, controller.signal);
+        }
+        catch (error) {
+            log('onlyne.discovery.failed', { seed, error: String(error) });
+        }
+    }
+    let refreshing = false;
+    const timer = setInterval(() => {
+        if (refreshing)
+            return;
+        refreshing = true;
+        void node.discovery.refresh(controller.signal)
+            .catch(error => { if (!controller.signal.aborted)
+            log('onlyne.discovery.failed', { error: String(error) }); })
+            .finally(() => { refreshing = false; });
+    }, 30_000);
+    let tui;
+    // `ONLYNE_NO_TUI=1` keeps the plain JSON log on stdout, for a pipe or a screen a TUI would spoil.
+    const interactive = (options.interactive ?? true) && process.env.ONLYNE_NO_TUI !== '1';
+    if (interactive && options.ring !== undefined && process.stdin.isTTY && process.stdout.isTTY) {
+        const surface = new GatewayTui(node, options.ring, options.endpoint, undefined, options.status);
+        try {
+            log('onlyne.tui.starting');
+            await surface.start();
+            tui = surface;
+            log('onlyne.tui.ready');
+        }
+        catch (error) {
+            log('onlyne.tui.unavailable', { error: String(error) });
+        }
+    }
+    return {
+        async close() {
+            clearInterval(timer);
+            await tui?.close();
+            controller.abort();
+            await network.close();
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAgBtC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAwB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,cAAc,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI;QAC9G,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;YAC/C,IAAI,YAAY,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,OAAO;YAC7C,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,IAAI,CAAC;QAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC9B,OAAO,KAAK,EAAE,CAAC;QAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAChF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACtF,OAAO,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACnF,CAAC;IACD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,UAAU;YAAE,OAAO;QACvB,UAAU,GAAG,IAAI,CAAC;QAClB,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;aAC3C,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,GAAG,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;aAC7G,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,IAAI,GAA2B,CAAC;IAChC,kGAAkG;IAClG,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC;IACvF,IAAI,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7F,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAChG,IAAI,CAAC;YACH,GAAG,CAAC,qBAAqB,CAAC,CAAC;YAC3B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,GAAG,GAAG,OAAO,CAAC;YACd,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;YACnB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,20 @@
+import type { KeyHook, KeyMaterial } from "@onlyne/lib";
+/**
+ * Resolves the key directory for a node (RFC 0017 §2). A project key inside a git work
+ * tree whose ignore rules do not cover `.onlyne/keys` is refused, with both escapes named.
+ */
+export declare function ensureKeyDir(cwd: string, nodeId: string, scope: "project" | "global"): Promise<string>;
+/** Loads the node's identity key, generating it on first use. */
+export declare function loadOrCreateKey(dir: string, nodeId: string): Promise<KeyMaterial>;
+/**
+ * Writes the key pair atomically. `replace` is the `plugins.keys.replace` path — the only
+ * caller allowed to overwrite an existing private key, because `trust.rotate` has already
+ * committed the rotation window and must complete the swap.
+ */
+export declare function writeKeyMaterial(dir: string, material: KeyMaterial, options?: {
+    replace?: boolean;
+}): Promise<void>;
+/** Synchronous guard for the startup path: the existing key must already be private. */
+export declare function assertKeyPermissions(dir: string): void;
+export declare function createNodeKey(nodeId: string): Promise<KeyHook>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuExD;;;GAGG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB5G;AAED,iEAAiE;AACjE,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAkBvF;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAe7H;AAED,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAMtD;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKpE"}