@origintrail-official/dkg-core 0.0.1-dev.1773506972.23bf9c0

package/dist/protocol-router.js

@@ -0,0 +1,127 @@
+/** Default max bytes readAll will buffer before aborting (10 MB). */
+export const DEFAULT_MAX_READ_BYTES = 10 * 1024 * 1024;
+/** Default timeout for send() (ms). Sync over relay may need longer; callers can pass a higher value. */
+export const DEFAULT_SEND_TIMEOUT_MS = 20_000;
+/**
+ * Returns true if the error is recoverable (retry with backoff).
+ * Exported for tests.
+ */
+export function isRecoverableSendError(err) {
+    const msg = err instanceof Error ? err.message.toLowerCase() : String(err).toLowerCase();
+    return (msg.includes('closed') ||
+        msg.includes('reset') ||
+        msg.includes('stream returned in closed state') ||
+        msg.includes('econnreset') ||
+        msg.includes('etimedout') ||
+        msg.includes('econnrefused') ||
+        msg.includes('epipe') ||
+        msg.includes('aborted') ||
+        msg.includes('no valid addresses') ||
+        msg.includes('protocol selection failed') ||
+        msg.includes('could not negotiate'));
+}
+export class ProtocolRouter {
+    node;
+    handlers = new Map();
+    maxReadBytes;
+    constructor(node, options) {
+        this.node = node;
+        this.maxReadBytes = options?.maxReadBytes ?? DEFAULT_MAX_READ_BYTES;
+    }
+    register(protocolId, handler) {
+        this.handlers.set(protocolId, handler);
+        const libp2p = this.node.libp2p;
+        const limit = this.maxReadBytes;
+        libp2p.handle(protocolId, async (stream, connection) => {
+            try {
+                const requestData = await readAll(stream, limit);
+                const peerId = {
+                    toString: () => connection.remotePeer.toString(),
+                    toBytes: () => connection.remotePeer.toMultihash().bytes,
+                };
+                const responseData = await handler(requestData, peerId);
+                stream.send(responseData);
+                await stream.close();
+            }
+            catch (err) {
+                console.error(`[ProtocolRouter] handler error on ${protocolId} from ${connection.remotePeer.toString().slice(-8)}:`, err instanceof Error ? err.message : err);
+                try {
+                    stream.abort(new Error('handler error'));
+                }
+                catch {
+                    // stream already closed
+                }
+            }
+        }, { runOnLimitedConnection: true });
+    }
+    unregister(protocolId) {
+        this.handlers.delete(protocolId);
+        this.node.libp2p.unhandle(protocolId);
+    }
+    async send(peerIdStr, protocolId, data, timeoutMs = DEFAULT_SEND_TIMEOUT_MS) {
+        const libp2p = this.node.libp2p;
+        const { peerIdFromString } = await import('@libp2p/peer-id');
+        const peerId = peerIdFromString(peerIdStr);
+        const signal = AbortSignal.timeout(timeoutMs);
+        // libp2p internally upgrades relay connections to direct during
+        // dialProtocol/newStream (peerStore.merge triggers the connection manager
+        // to dial the peer directly, closing the relay and any in-flight streams).
+        // We retry up to 3 times with back-off so the direct connection can
+        // stabilise before the next attempt.
+        let lastErr;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                const stream = await libp2p.dialProtocol(peerId, protocolId, {
+                    runOnLimitedConnection: true,
+                    signal,
+                });
+                if (stream.writeStatus === 'closed' || stream.writeStatus === 'closing') {
+                    stream.abort(new Error('stream closed before send'));
+                    throw new Error('stream returned in closed state');
+                }
+                stream.send(data);
+                await stream.close({ signal });
+                return await readAll(stream, this.maxReadBytes);
+            }
+            catch (err) {
+                lastErr = err;
+                if (!isRecoverableSendError(err) || attempt >= 2)
+                    throw err;
+                const backoff = (attempt + 1) * 500;
+                await new Promise(r => setTimeout(r, backoff));
+            }
+        }
+        throw lastErr;
+    }
+}
+async function readAll(stream, maxBytes = DEFAULT_MAX_READ_BYTES) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of stream) {
+        const buf = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk.subarray());
+        total += buf.length;
+        if (total > maxBytes) {
+            if ('abort' in stream && typeof stream.abort === 'function') {
+                stream.abort(new Error('read limit exceeded'));
+            }
+            throw new Error(`Read limit exceeded (${maxBytes} bytes)`);
+        }
+        chunks.push(buf);
+    }
+    return concat(chunks);
+}
+function concat(arrays) {
+    if (arrays.length === 0)
+        return new Uint8Array(0);
+    if (arrays.length === 1)
+        return arrays[0];
+    const total = arrays.reduce((sum, a) => sum + a.length, 0);
+    const result = new Uint8Array(total);
+    let offset = 0;
+    for (const a of arrays) {
+        result.set(a, offset);
+        offset += a.length;
+    }
+    return result;
+}
+//# sourceMappingURL=protocol-router.js.map

package/dist/protocol-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-router.js","sourceRoot":"","sources":["../src/protocol-router.ts"],"names":[],"mappings":"AAIA,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvD,yGAAyG;AACzG,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACzF,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACzC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAc;IACR,IAAI,CAAU;IACvB,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9C,YAAY,CAAS;IAE9B,YAAY,IAAa,EAAE,OAAmC;QAC5D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,sBAAsB,CAAC;IACtE,CAAC;IAED,QAAQ,CAAC,UAAkB,EAAE,OAAyB;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAEhC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAc,EAAE,UAAU,EAAE,EAAE;YAC7D,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG;oBACb,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE;oBAChD,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK;iBACzD,CAAC;gBACF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC1B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,UAAU,SAAS,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/J,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,SAAiB,EACjB,UAAkB,EAClB,IAAgB,EAChB,SAAS,GAAG,uBAAuB;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE9C,gEAAgE;QAChE,0EAA0E;QAC1E,2EAA2E;QAC3E,oEAAoE;QACpE,qCAAqC;QACrC,IAAI,OAAgB,CAAC;QACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE;oBAC3D,sBAAsB,EAAE,IAAI;oBAC5B,MAAM;iBACP,CAAC,CAAC;gBAEH,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBACxE,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAE/B,OAAO,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,OAAO,GAAG,GAAG,CAAC;gBACd,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAC5D,MAAM,OAAO,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;gBACpC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC;IAChB,CAAC;CACF;AAED,KAAK,UAAU,OAAO,CACpB,MAA0C,EAC1C,QAAQ,GAAG,sBAAsB;IAEjC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnF,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;QACpB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,IAAI,OAAO,IAAI,MAAM,IAAI,OAAQ,MAAiB,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACvE,MAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,SAAS,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,MAAM,CAAC,MAAoB;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/rate-limiter.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Sliding-window rate limiter for per-peer / per-topic / per-protocol throttling.
+ *
+ * Uses a token-bucket approach with automatic stale-entry cleanup.
+ */
+export interface RateLimitConfig {
+    /** Maximum number of events allowed within the window. */
+    maxPerWindow: number;
+    /** Window size in milliseconds. */
+    windowMs: number;
+}
+export declare class RateLimiter {
+    private readonly config;
+    private readonly buckets;
+    private cleanupTimer;
+    constructor(config: RateLimitConfig);
+    /**
+     * Returns true if the request is allowed, false if rate-limited.
+     * Automatically records the event if allowed.
+     */
+    allow(key: string): boolean;
+    /** Check without recording — peek at whether next request would be allowed. */
+    wouldAllow(key: string): boolean;
+    /** Number of requests remaining in the current window for this key. */
+    remaining(key: string): number;
+    /** Remove stale entries that have no timestamps in the current window. */
+    private cleanup;
+    /** Stop the cleanup timer (call on shutdown). */
+    destroy(): void;
+    /** Current number of tracked keys. */
+    get size(): number;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,YAAY,CAA+C;gBAEvD,MAAM,EAAE,eAAe;IAMnC;;;OAGG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAuB3B,+EAA+E;IAC/E,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAShC,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAS9B,0EAA0E;IAC1E,OAAO,CAAC,OAAO;IAUf,iDAAiD;IACjD,OAAO,IAAI,IAAI;IAQf,sCAAsC;IACtC,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/rate-limiter.js

@@ -0,0 +1,80 @@
+/**
+ * Sliding-window rate limiter for per-peer / per-topic / per-protocol throttling.
+ *
+ * Uses a token-bucket approach with automatic stale-entry cleanup.
+ */
+export class RateLimiter {
+    config;
+    buckets = new Map();
+    cleanupTimer = null;
+    constructor(config) {
+        this.config = config;
+        this.cleanupTimer = setInterval(() => this.cleanup(), Math.max(config.windowMs * 2, 60_000));
+        this.cleanupTimer.unref?.();
+    }
+    /**
+     * Returns true if the request is allowed, false if rate-limited.
+     * Automatically records the event if allowed.
+     */
+    allow(key) {
+        const now = Date.now();
+        const cutoff = now - this.config.windowMs;
+        let entry = this.buckets.get(key);
+        if (!entry) {
+            entry = { timestamps: [now], blocked: false };
+            this.buckets.set(key, entry);
+            return true;
+        }
+        entry.timestamps = entry.timestamps.filter(t => t > cutoff);
+        if (entry.timestamps.length >= this.config.maxPerWindow) {
+            entry.blocked = true;
+            return false;
+        }
+        entry.timestamps.push(now);
+        entry.blocked = false;
+        return true;
+    }
+    /** Check without recording — peek at whether next request would be allowed. */
+    wouldAllow(key) {
+        const now = Date.now();
+        const cutoff = now - this.config.windowMs;
+        const entry = this.buckets.get(key);
+        if (!entry)
+            return true;
+        const active = entry.timestamps.filter(t => t > cutoff);
+        return active.length < this.config.maxPerWindow;
+    }
+    /** Number of requests remaining in the current window for this key. */
+    remaining(key) {
+        const now = Date.now();
+        const cutoff = now - this.config.windowMs;
+        const entry = this.buckets.get(key);
+        if (!entry)
+            return this.config.maxPerWindow;
+        const active = entry.timestamps.filter(t => t > cutoff);
+        return Math.max(0, this.config.maxPerWindow - active.length);
+    }
+    /** Remove stale entries that have no timestamps in the current window. */
+    cleanup() {
+        const cutoff = Date.now() - this.config.windowMs;
+        for (const [key, entry] of this.buckets) {
+            entry.timestamps = entry.timestamps.filter(t => t > cutoff);
+            if (entry.timestamps.length === 0) {
+                this.buckets.delete(key);
+            }
+        }
+    }
+    /** Stop the cleanup timer (call on shutdown). */
+    destroy() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+        this.buckets.clear();
+    }
+    /** Current number of tracked keys. */
+    get size() {
+        return this.buckets.size;
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,MAAM,OAAO,WAAW;IACL,MAAM,CAAkB;IACxB,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,YAAY,GAA0C,IAAI,CAAC;IAEnE,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAE5D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACxD,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,UAAU,CAAC,GAAW;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;IAClD,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,GAAW;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,0EAA0E;IAClE,OAAO;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YAC5D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,sCAAsC;IACtC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/retry.d.ts

@@ -0,0 +1,21 @@
+export interface RetryOptions {
+    /** Maximum number of attempts (default: 3). */
+    maxAttempts?: number;
+    /** Initial delay in ms before the first retry (default: 500). */
+    baseDelayMs?: number;
+    /** Maximum delay cap in ms (default: 30_000). */
+    maxDelayMs?: number;
+    /** Jitter factor 0–1 added to each delay to avoid thundering herd (default: 0.2). */
+    jitter?: number;
+    /** Optional predicate to decide if an error is retryable. Defaults to all errors. */
+    isRetryable?: (err: unknown) => boolean;
+    /** Called on each retry with attempt number and delay (for logging). */
+    onRetry?: (attempt: number, delayMs: number, err: unknown) => void;
+}
+/**
+ * Execute an async function with exponential backoff retry.
+ *
+ * delay = min(baseDelay * 2^attempt + jitter, maxDelay)
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, opts?: RetryOptions): Promise<T>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;IACxC,wEAAwE;IACxE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CACpE;AASD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,CAAC,CAAC,CA6BZ"}

package/dist/retry.js

@@ -0,0 +1,42 @@
+const DEFAULTS = {
+    maxAttempts: 3,
+    baseDelayMs: 500,
+    maxDelayMs: 30_000,
+    jitter: 0.2,
+};
+/**
+ * Execute an async function with exponential backoff retry.
+ *
+ * delay = min(baseDelay * 2^attempt + jitter, maxDelay)
+ */
+export async function withRetry(fn, opts = {}) {
+    const maxAttempts = opts.maxAttempts ?? DEFAULTS.maxAttempts;
+    const baseDelayMs = opts.baseDelayMs ?? DEFAULTS.baseDelayMs;
+    const maxDelayMs = opts.maxDelayMs ?? DEFAULTS.maxDelayMs;
+    const jitterFactor = opts.jitter ?? DEFAULTS.jitter;
+    const isRetryable = opts.isRetryable;
+    const onRetry = opts.onRetry;
+    let lastErr;
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            lastErr = err;
+            if (isRetryable && !isRetryable(err))
+                throw err;
+            if (attempt >= maxAttempts - 1)
+                throw err;
+            const exponentialDelay = baseDelayMs * Math.pow(2, attempt);
+            const jitter = exponentialDelay * jitterFactor * Math.random();
+            const delay = Math.min(exponentialDelay + jitter, maxDelayMs);
+            onRetry?.(attempt + 1, delay, err);
+            await sleep(delay);
+        }
+    }
+    throw lastErr;
+}
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=retry.js.map

package/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAeA,MAAM,QAAQ,GAA4D;IACxE,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,GAAG;CACZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,OAAqB,EAAE;IAEvB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE7B,IAAI,OAAgB,CAAC;IAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YAEd,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAChD,IAAI,OAAO,IAAI,WAAW,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAE1C,MAAM,gBAAgB,GAAG,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,gBAAgB,GAAG,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,EAAE,UAAU,CAAC,CAAC;YAE9D,OAAO,EAAE,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/sparql-safe.d.ts

@@ -0,0 +1,59 @@
+/**
+ * SPARQL injection prevention utilities.
+ *
+ * Two complementary strategies:
+ *
+ * - **IRIs**: validate-and-reject. An IRI is either syntactically safe or
+ *   it isn't — silently percent-encoding characters would change its meaning.
+ *   Use `assertSafeIri` / `isSafeIri` / `sparqlIri`.
+ *
+ * - **String literals**: escape. The raw value is preserved but special
+ *   characters are backslash-escaped per the SPARQL grammar.
+ *   Use `escapeSparqlLiteral` / `sparqlString`.
+ *
+ * - **Integers**: validate type and optional bounds.
+ *   Use `sparqlInt`.
+ */
+/**
+ * Throws if `value` contains characters that would break a SPARQL IRI (`<...>`).
+ * Returns the value unchanged when safe, for ergonomic inline use:
+ *
+ *     `<${assertSafeIri(uri)}>`
+ */
+export declare function assertSafeIri(value: string): string;
+/**
+ * Returns true when the string is a syntactically safe IRI with a scheme
+ * prefix (e.g. `did:dkg:...`, `http://...`, `urn:...`).
+ */
+export declare function isSafeIri(value: string): boolean;
+/**
+ * Returns `<value>` after validating the IRI is safe for SPARQL interpolation.
+ * Throws on unsafe input.
+ */
+export declare function sparqlIri(value: string): string;
+/**
+ * Escapes a raw string for use inside a SPARQL `"..."` literal.
+ * Handles all characters that the SPARQL grammar requires escaping
+ * in short string literals (production rule [157] STRING_LITERAL2).
+ */
+export declare function escapeSparqlLiteral(value: string): string;
+/**
+ * Returns `"escaped"` ready for SPARQL interpolation.
+ */
+export declare function sparqlString(value: string): string;
+/**
+ * Validates a complete SPARQL RDF term — either a quoted literal
+ * (with optional language tag or datatype) or an IRI in angle brackets.
+ * Throws on anything that could break SPARQL syntax.
+ *
+ *     assertSafeRdfTerm('"hello"')           // ok
+ *     assertSafeRdfTerm('"42"^^<xsd:int>')   // ok
+ *     assertSafeRdfTerm('<http://ex.org/>')   // ok
+ *     assertSafeRdfTerm('" } DROP ALL #')     // throws
+ */
+export declare function assertSafeRdfTerm(value: string): void;
+export declare function sparqlInt(value: number | bigint, opts?: {
+    min?: number;
+    max?: number;
+}): string;
+//# sourceMappingURL=sparql-safe.d.ts.map

package/dist/sparql-safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sparql-safe.d.ts","sourceRoot":"","sources":["../src/sparql-safe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAkBD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIrD;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC,MAAM,CAoBR"}

package/dist/sparql-safe.js

@@ -0,0 +1,118 @@
+/**
+ * SPARQL injection prevention utilities.
+ *
+ * Two complementary strategies:
+ *
+ * - **IRIs**: validate-and-reject. An IRI is either syntactically safe or
+ *   it isn't — silently percent-encoding characters would change its meaning.
+ *   Use `assertSafeIri` / `isSafeIri` / `sparqlIri`.
+ *
+ * - **String literals**: escape. The raw value is preserved but special
+ *   characters are backslash-escaped per the SPARQL grammar.
+ *   Use `escapeSparqlLiteral` / `sparqlString`.
+ *
+ * - **Integers**: validate type and optional bounds.
+ *   Use `sparqlInt`.
+ */
+const UNSAFE_IRI_CHARS = /[<>"{}|\\^`\x00-\x20]/;
+const IRI_SCHEME_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:[^\s<>"{}|\\^`\x00-\x20]+$/;
+/**
+ * Throws if `value` contains characters that would break a SPARQL IRI (`<...>`).
+ * Returns the value unchanged when safe, for ergonomic inline use:
+ *
+ *     `<${assertSafeIri(uri)}>`
+ */
+export function assertSafeIri(value) {
+    if (!value || UNSAFE_IRI_CHARS.test(value)) {
+        throw new Error(`Unsafe or empty IRI value: ${value}`);
+    }
+    return value;
+}
+/**
+ * Returns true when the string is a syntactically safe IRI with a scheme
+ * prefix (e.g. `did:dkg:...`, `http://...`, `urn:...`).
+ */
+export function isSafeIri(value) {
+    if (!value)
+        return false;
+    return IRI_SCHEME_RE.test(value);
+}
+/**
+ * Returns `<value>` after validating the IRI is safe for SPARQL interpolation.
+ * Throws on unsafe input.
+ */
+export function sparqlIri(value) {
+    assertSafeIri(value);
+    return `<${value}>`;
+}
+/**
+ * Escapes a raw string for use inside a SPARQL `"..."` literal.
+ * Handles all characters that the SPARQL grammar requires escaping
+ * in short string literals (production rule [157] STRING_LITERAL2).
+ */
+export function escapeSparqlLiteral(value) {
+    return value
+        .replace(/\\/g, '\\\\')
+        .replace(/"/g, '\\"')
+        .replace(/\n/g, '\\n')
+        .replace(/\r/g, '\\r')
+        .replace(/\t/g, '\\t');
+}
+/**
+ * Returns `"escaped"` ready for SPARQL interpolation.
+ */
+export function sparqlString(value) {
+    return `"${escapeSparqlLiteral(value)}"`;
+}
+/**
+ * Validates and returns a safe integer string for SPARQL LIMIT / OFFSET
+ * and similar numeric contexts. Rejects NaN, Infinity, and non-integer values.
+ *
+ * Handles `bigint` natively via `.toString()` to avoid precision loss
+ * for values beyond `Number.MAX_SAFE_INTEGER`.
+ */
+// SPARQL STRING_LITERAL2: forbid raw CR/LF, only allow valid SPARQL escapes
+// BCP47 lang tags: primary subtag alpha-only, subsequent subtags alphanumeric (e.g. de-CH-1996)
+const SAFE_IRI_CHARS = '[^<>"{}|\\\\^`\\x00-\\x20>]';
+const SAFE_RDF_LITERAL = new RegExp(`^"(?:[^"\\\\\\r\\n]|\\\\[tbnrf"'\\\\]|\\\\u[0-9a-fA-F]{4}|\\\\U[0-9a-fA-F]{8})*"` +
+    `(?:@[A-Za-z]+(?:-[A-Za-z0-9]+)*|\\^\\^<${SAFE_IRI_CHARS}+>)?$`);
+const SAFE_RDF_IRI_TERM = /^<[^<>"{}|\\^`\x00-\x20]+>$/;
+/**
+ * Validates a complete SPARQL RDF term — either a quoted literal
+ * (with optional language tag or datatype) or an IRI in angle brackets.
+ * Throws on anything that could break SPARQL syntax.
+ *
+ *     assertSafeRdfTerm('"hello"')           // ok
+ *     assertSafeRdfTerm('"42"^^<xsd:int>')   // ok
+ *     assertSafeRdfTerm('<http://ex.org/>')   // ok
+ *     assertSafeRdfTerm('" } DROP ALL #')     // throws
+ */
+export function assertSafeRdfTerm(value) {
+    if (SAFE_RDF_LITERAL.test(value))
+        return;
+    if (SAFE_RDF_IRI_TERM.test(value))
+        return;
+    throw new Error(`Unsafe RDF term for CAS condition: ${value.slice(0, 80)}`);
+}
+export function sparqlInt(value, opts) {
+    if (typeof value === 'bigint') {
+        if (opts?.min !== undefined && value < BigInt(opts.min)) {
+            throw new Error(`SPARQL integer ${value} below minimum ${opts.min}`);
+        }
+        if (opts?.max !== undefined && value > BigInt(opts.max)) {
+            throw new Error(`SPARQL integer ${value} above maximum ${opts.max}`);
+        }
+        return value.toString();
+    }
+    if (!Number.isFinite(value) || !Number.isInteger(value)) {
+        throw new Error(`Invalid SPARQL integer: ${value}`);
+    }
+    if (opts?.min !== undefined && value < opts.min) {
+        throw new Error(`SPARQL integer ${value} below minimum ${opts.min}`);
+    }
+    if (opts?.max !== undefined && value > opts.max) {
+        throw new Error(`SPARQL integer ${value} above maximum ${opts.max}`);
+    }
+    return String(value);
+}
+//# sourceMappingURL=sparql-safe.js.map

package/dist/sparql-safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sparql-safe.js","sourceRoot":"","sources":["../src/sparql-safe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD,MAAM,aAAa,GAAG,qDAAqD,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,IAAI,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,4EAA4E;AAC5E,gGAAgG;AAChG,MAAM,cAAc,GAAG,6BAA6B,CAAC;AACrD,MAAM,gBAAgB,GAAG,IAAI,MAAM,CACjC,kFAAkF;IAClF,0CAA0C,cAAc,OAAO,CAChE,CAAC;AACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO;IACzC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO;IAC1C,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAAsB,EACtB,IAAqC;IAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,57 @@
+export interface PeerId {
+    toString(): string;
+    toBytes(): Uint8Array;
+}
+export interface ProtocolMessage {
+    protocolId: string;
+    data: Uint8Array;
+}
+export interface EventBus {
+    emit(event: string, data: unknown): void;
+    on(event: string, handler: (data: unknown) => void): void;
+    off(event: string, handler: (data: unknown) => void): void;
+}
+export interface DKGNodeConfig {
+    /** Multiaddr strings to listen on. Defaults to TCP + WS on random ports. */
+    listenAddresses?: string[];
+    /** Multiaddr strings to announce to the network (for nodes behind NAT/VPS with a public IP not bound to the interface). */
+    announceAddresses?: string[];
+    /** DKG bootstrap peer multiaddrs (NOT public IPFS nodes). */
+    bootstrapPeers?: string[];
+    /** Enable mDNS for local peer discovery. Default: true. */
+    enableMdns?: boolean;
+    /** GossipSub paranet topics to subscribe to at startup. */
+    paranetSubscriptions?: string[];
+    /** Ed25519 private key bytes. Generated if absent. */
+    privateKey?: Uint8Array;
+    /** Data directory for persistent state. */
+    dataDir?: string;
+    /** Multiaddrs of relay nodes to connect to for NAT traversal. */
+    relayPeers?: string[];
+    /** Enable circuit relay server on this node (for nodes with public IPs). */
+    enableRelayServer?: boolean;
+    /**
+     * Enable autoNAT service for automatic NAT status detection.
+     * Default: true, but auto-disabled when relayPeers or enableRelayServer is
+     * set (nodes that already know their NAT status don't need probing).
+     */
+    enableAutoNAT?: boolean;
+    /**
+     * Node deployment tier. Core nodes act as relays and GossipSub backbone.
+     * Edge nodes are the typical deployment for personal agents behind NATs.
+     * Default: 'edge'.
+     */
+    nodeRole?: 'core' | 'edge';
+}
+export type ConnectionTransport = 'direct' | 'relayed';
+export interface ConnectionInfo {
+    peerId: string;
+    remoteAddr: string;
+    transport: ConnectionTransport;
+    direction: 'inbound' | 'outbound';
+    openedAt: number;
+}
+export interface StreamHandler {
+    (data: Uint8Array, peerId: PeerId): Promise<Uint8Array>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,QAAQ,IAAI,MAAM,CAAC;IACnB,OAAO,IAAI,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACzC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,2HAA2H;IAC3H,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,2DAA2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2DAA2D;IAC3D,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,sDAAsD;IACtD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACzD"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@origintrail-official/dkg-core",
+  "version": "0.0.1-dev.1773506972.23bf9c0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "dependencies": {
+    "@libp2p/autonat": "^3.0.10",
+    "@libp2p/bootstrap": "^12",
+    "@libp2p/circuit-relay-v2": "^4.1.3",
+    "@libp2p/crypto": "^5.1.13",
+    "@libp2p/dcutr": "^3.0.10",
+    "@libp2p/gossipsub": "^15",
+    "@libp2p/identify": "^4",
+    "@libp2p/interface": "^3.1.0",
+    "@libp2p/kad-dht": "^16",
+    "@libp2p/mdns": "^12",
+    "@libp2p/noise": "^1",
+    "@libp2p/peer-id": "^6.0.4",
+    "@libp2p/ping": "^3.0.10",
+    "@libp2p/tcp": "^11",
+    "@libp2p/websockets": "^10",
+    "@libp2p/yamux": "^8",
+    "@multiformats/multiaddr": "^13.0.1",
+    "@noble/ed25519": "^3",
+    "@noble/hashes": "^2",
+    "it-length-prefixed": "^10.0.1",
+    "it-pipe": "^3.0.1",
+    "libp2p": "^3",
+    "protobufjs": "^8",
+    "rdf-canonize": "^5.0.0",
+    "uint8arrays": "^5"
+  },
+  "devDependencies": {
+    "vitest": "^3.2.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/OriginTrail/dkg-v9.git",
+    "directory": "packages/core"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "clean": "rm -rf dist tsconfig.tsbuildinfo"
+  }
+}