@ours.network/cli 2.0.4 → 2.1.0

package/README.md

@@ -102,11 +102,15 @@ and secret fields already in the file.
 ours config setup --port 3070 --state-dir /srv/ours-a \
   --broker-url wss://broker1.ours.network --api-visibility owner
 ours config setup --gc-interval-ms 3600000
+ours config setup --history-max-bytes 104857600
 ours config setup --port 3070 --dry-run --json
 ```
 
-Supported setup fields are `brokerUrl`, `port`, `stateDir`, `gcIntervalMs`, and
-`apiVisibility`. Supply credentials through an operator-owned
+Supported setup fields are `brokerUrl`, `port`, `stateDir`, `gcIntervalMs`,
+`historyMaxBytes`, and `apiVisibility`. `historyMaxBytes` is one daemon-wide
+physical cap across every identity's history DB/WAL/SHM and history blob tree;
+it defaults to 104857600 bytes (100 MiB), and `0` disables rotation/unlimits
+history. Supply credentials through an operator-owned
 secret mechanism or the existing SDK configuration, not CLI arguments.
 
 ## Operator commands

package/dist/{boot-HNJ7ZR5L.js → boot-QLA3LXVX.js}

@@ -1,8 +1,8 @@
 import {
   bootWrapper,
   wrapperBooted
-} from "./chunk-TSYICL3I.js";
-import "./chunk-FXKFSNKS.js";
+} from "./chunk-YPDZQ4XD.js";
+import "./chunk-DTWZF3ZG.js";
 export {
   bootWrapper,
   wrapperBooted

package/dist/{chunk-DRQEV4SN.js → chunk-3C5WAQAT.js}

@@ -7,7 +7,14 @@ import {
 // src/config-command.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
-var SAFE_KEYS = /* @__PURE__ */ new Set(["brokerUrl", "port", "stateDir", "gcIntervalMs", "apiVisibility"]);
+var SAFE_KEYS = /* @__PURE__ */ new Set([
+  "brokerUrl",
+  "port",
+  "stateDir",
+  "gcIntervalMs",
+  "historyMaxBytes",
+  "apiVisibility"
+]);
 async function showConfig(selection) {
   const resolved = await resolveSelection(selection);
   let stored = {};

package/dist/{chunk-FXKFSNKS.js → chunk-DTWZF3ZG.js}

@@ -4,11 +4,13 @@ import { randomBytes } from "node:crypto";
 import { homedir } from "node:os";
 import { resolve, join, dirname, basename } from "node:path";
 var API_VISIBILITIES = ["owner", "shared", "open"];
+var DEFAULT_HISTORY_MAX_BYTES = 100 * 1024 * 1024;
 var DEFAULT_CONFIG = {
   brokerUrl: "wss://broker1.ours.network",
   port: 3050,
   stateDir: resolve(homedir(), ".ours"),
   gcIntervalMs: 36e5,
+  historyMaxBytes: DEFAULT_HISTORY_MAX_BYTES,
   apiVisibility: "owner"
 };
 function configPath() {
@@ -34,6 +36,9 @@ function readFileConfig() {
   if (typeof parsed.gcIntervalMs === "number" && Number.isFinite(parsed.gcIntervalMs)) {
     out.gcIntervalMs = parsed.gcIntervalMs;
   }
+  if (Object.prototype.hasOwnProperty.call(parsed, "historyMaxBytes")) {
+    out.historyMaxBytes = validatedHistoryMaxBytes(parsed.historyMaxBytes, "config historyMaxBytes");
+  }
   if (typeof parsed.apiVisibility === "string" && API_VISIBILITIES.includes(parsed.apiVisibility)) {
     out.apiVisibility = parsed.apiVisibility;
   }
@@ -63,6 +68,20 @@ function envInt(name) {
   const n = parseInt(v, 10);
   return Number.isNaN(n) ? void 0 : n;
 }
+function validatedHistoryMaxBytes(value, source) {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+    throw new Error(`${source} must be a non-negative safe integer (0 disables history rotation)`);
+  }
+  return value;
+}
+function envHistoryMaxBytes() {
+  const raw = process.env.OURS_HISTORY_MAX_BYTES;
+  if (raw === void 0) return void 0;
+  if (!/^[0-9]+$/.test(raw)) {
+    throw new Error("OURS_HISTORY_MAX_BYTES must be a non-negative safe integer (0 disables history rotation)");
+  }
+  return validatedHistoryMaxBytes(Number(raw), "OURS_HISTORY_MAX_BYTES");
+}
 function loadConfig() {
   const file = readFileConfig();
   return {
@@ -70,6 +89,7 @@ function loadConfig() {
     port: envInt("OURS_PORT") ?? file.port ?? DEFAULT_CONFIG.port,
     stateDir: resolve(process.env.OURS_STATE_DIR ?? file.stateDir ?? DEFAULT_CONFIG.stateDir),
     gcIntervalMs: envInt("OURS_GC_INTERVAL_MS") ?? file.gcIntervalMs ?? DEFAULT_CONFIG.gcIntervalMs,
+    historyMaxBytes: envHistoryMaxBytes() ?? file.historyMaxBytes ?? DEFAULT_CONFIG.historyMaxBytes,
     apiVisibility: envVisibility() ?? file.apiVisibility ?? DEFAULT_CONFIG.apiVisibility,
     apiToken: process.env.OURS_API_TOKEN?.trim() || file.apiToken,
     stt: sttFromEnv(file.stt)
@@ -141,7 +161,14 @@ function writeIdentityFile(target, opts, overwrite = false) {
 }
 
 // ../../src/runtime/config-drift.ts
-var FROZEN_ENV = ["OURS_STATE_DIR", "OURS_BROKER_URL", "OURS_PORT", "OURS_API_VISIBILITY", "OURS_CONFIG"];
+var FROZEN_ENV = [
+  "OURS_STATE_DIR",
+  "OURS_BROKER_URL",
+  "OURS_PORT",
+  "OURS_API_VISIBILITY",
+  "OURS_HISTORY_MAX_BYTES",
+  "OURS_CONFIG"
+];
 var envAtLoad = Object.fromEntries(
   FROZEN_ENV.map((k) => [k, process.env[k]])
 );

package/dist/{chunk-QKDH6CJR.js → chunk-GQHDQR6I.js}

@@ -74,7 +74,7 @@ var COMMAND_GROUPS = {
         handler: "setup",
         summary: "Write one or more safe daemon settings noninteractively.",
         effects: "Writes a mode-0600 JSON config unless --dry-run is used. Unknown and secret fields already present are preserved and never printed.",
-        example: "ours config setup --port 3070 --state-dir /srv/ours-a --api-visibility owner"
+        example: "ours config setup --port 3070 --state-dir /srv/ours-a --history-max-bytes 104857600 --api-visibility owner"
       }
     }
   },

package/dist/{chunk-NNHFXFLS.js → chunk-H7DX6EHZ.js}

@@ -13,7 +13,7 @@ import {
   IDENTITY_PREBIND_EXCEPTIONS,
   commandSpec,
   isCommandGroup
-} from "./chunk-QKDH6CJR.js";
+} from "./chunk-GQHDQR6I.js";
 
 // src/help.ts
 var pad = (value, width = 32) => value.length >= width ? `${value} ` : value.padEnd(width);
@@ -127,6 +127,7 @@ function nativeConfigOptions(action) {
     ["--identity NAME", "Compatibility-only/ignored by config commands."],
     ["--broker-url URL", show ? "Compatibility-only/ignored by config show." : "Set the broker WebSocket URL."],
     ["--gc-interval-ms N", show ? "Compatibility-only/ignored by config show." : "Set a positive garbage-collection interval in milliseconds."],
+    ["--history-max-bytes N", show ? "Compatibility-only/ignored by config show." : "Set the daemon-wide physical history cap (default 104857600; 0 disables rotation)."],
     ["--api-visibility MODE", show ? "Compatibility-only/ignored by config show." : "Set owner, shared, or open API visibility."],
     ["--dry-run", show ? "Compatibility-only/ignored by config show." : "Return the merged redacted result without writing the file."],
     ["--json", "Write one JSON value to stdout."],

package/dist/{chunk-DZH2YEXT.js → chunk-UHYUIHM2.js}

@@ -99,7 +99,7 @@ function childEnvironment(selection) {
 async function serveDaemon(selection, managed = false) {
   if (selection.endpoint !== void 0) throw new Error("--endpoint selects a running daemon and cannot be used with daemon serve");
   Object.assign(process.env, childEnvironment(selection));
-  const { startDaemon } = await import("./daemon-LTJHJDWZ.js");
+  const { startDaemon } = await import("./daemon-5UZIR37V.js");
   const handle = await startDaemon();
   if (managed) {
     const response = await fetch(`http://127.0.0.1:${handle.port}/state-dir`);