@private.me/xbind 3.0.2 → 3.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (221) hide show
  1. package/README.md +2366 -204
  2. package/README.md.backup +2121 -0
  3. package/dist-standalone/_deps/mldsa-wasm/dist/mldsa.js +1 -1920
  4. package/dist-standalone/_deps/shared/cjs/errors.js +1 -729
  5. package/dist-standalone/_deps/shared/cjs/index.js +1 -463
  6. package/dist-standalone/_deps/shared/cjs/types.js +1 -315
  7. package/dist-standalone/_deps/shared/errors.js +1 -244
  8. package/dist-standalone/_deps/shared/index.js +1 -72
  9. package/dist-standalone/_deps/shared/types.js +1 -86
  10. package/dist-standalone/_deps/ux-helpers/cjs/errors.js +1 -1
  11. package/dist-standalone/_deps/ux-helpers/cjs/index.js +1 -1
  12. package/dist-standalone/_deps/ux-helpers/cjs/pagination.js +1 -1
  13. package/dist-standalone/_deps/ux-helpers/cjs/progress.js +1 -1
  14. package/dist-standalone/_deps/ux-helpers/cjs/search.js +1 -1
  15. package/dist-standalone/_deps/ux-helpers/cjs/types.js +1 -1
  16. package/dist-standalone/_deps/ux-helpers/errors.js +1 -1
  17. package/dist-standalone/_deps/ux-helpers/index.js +1 -1
  18. package/dist-standalone/_deps/ux-helpers/pagination.js +1 -1
  19. package/dist-standalone/_deps/ux-helpers/progress.js +1 -1
  20. package/dist-standalone/_deps/ux-helpers/search.js +1 -1
  21. package/dist-standalone/_deps/xchange/auto-accept.js +1 -1
  22. package/dist-standalone/_deps/xchange/cjs/auto-accept.js +1 -1
  23. package/dist-standalone/_deps/xchange/cjs/errors.js +1 -1
  24. package/dist-standalone/_deps/xchange/cjs/index.js +1 -1
  25. package/dist-standalone/_deps/xchange/cjs/invite-client.js +1 -1
  26. package/dist-standalone/_deps/xchange/cjs/lazy-init.js +1 -1
  27. package/dist-standalone/_deps/xchange/cjs/trust-integration.js +1 -1
  28. package/dist-standalone/_deps/xchange/cjs/xchange.js +1 -1
  29. package/dist-standalone/_deps/xchange/errors.js +1 -1
  30. package/dist-standalone/_deps/xchange/index.js +1 -1
  31. package/dist-standalone/_deps/xchange/invite-client.js +1 -1
  32. package/dist-standalone/_deps/xchange/lazy-init.js +1 -1
  33. package/dist-standalone/_deps/xchange/trust-integration.js +1 -1
  34. package/dist-standalone/_deps/xchange/xchange.js +1 -1
  35. package/dist-standalone/_deps/xregistry/cjs/discovery.js +1 -1
  36. package/dist-standalone/_deps/xregistry/cjs/errors.js +1 -1
  37. package/dist-standalone/_deps/xregistry/cjs/index.js +1 -1
  38. package/dist-standalone/_deps/xregistry/cjs/registry.js +1 -1
  39. package/dist-standalone/_deps/xregistry/cjs/schema.js +1 -1
  40. package/dist-standalone/_deps/xregistry/cjs/types.js +1 -1
  41. package/dist-standalone/_deps/xregistry/discovery.js +1 -1
  42. package/dist-standalone/_deps/xregistry/errors.js +1 -1
  43. package/dist-standalone/_deps/xregistry/index.js +1 -1
  44. package/dist-standalone/_deps/xregistry/registry.js +1 -1
  45. package/dist-standalone/_deps/xregistry/schema.js +1 -1
  46. package/dist-standalone/_deps/xregistry/types.js +1 -1
  47. package/dist-standalone/agent-call.d.ts +2 -2
  48. package/dist-standalone/agent-call.js +1 -659
  49. package/dist-standalone/agent-sdk.js +1 -328
  50. package/dist-standalone/agent.d.ts +2 -0
  51. package/dist-standalone/agent.js +1 -1800
  52. package/dist-standalone/approval.js +1 -193
  53. package/dist-standalone/async-iterators.d.ts +3 -3
  54. package/dist-standalone/async-iterators.js +1 -382
  55. package/dist-standalone/auth.js +1 -219
  56. package/dist-standalone/auto-accept.js +1 -229
  57. package/dist-standalone/backup-config.js +1 -201
  58. package/dist-standalone/backup.js +1 -326
  59. package/dist-standalone/batch-operations.js +1 -388
  60. package/dist-standalone/cancellation.js +1 -477
  61. package/dist-standalone/checkpoint.js +1 -186
  62. package/dist-standalone/circuit-breaker.js +1 -468
  63. package/dist-standalone/cjs/agent-call.js +1 -701
  64. package/dist-standalone/cjs/agent-sdk.js +1 -332
  65. package/dist-standalone/cjs/agent.js +1 -1837
  66. package/dist-standalone/cjs/approval.js +1 -199
  67. package/dist-standalone/cjs/async-iterators.js +1 -392
  68. package/dist-standalone/cjs/auth.js +1 -225
  69. package/dist-standalone/cjs/auto-accept.js +1 -233
  70. package/dist-standalone/cjs/backup-config.js +1 -207
  71. package/dist-standalone/cjs/backup.js +1 -330
  72. package/dist-standalone/cjs/batch-operations.js +1 -397
  73. package/dist-standalone/cjs/cancellation.js +1 -490
  74. package/dist-standalone/cjs/checkpoint.js +1 -193
  75. package/dist-standalone/cjs/circuit-breaker.js +1 -476
  76. package/dist-standalone/cjs/cli/init.js +1 -492
  77. package/dist-standalone/cjs/config-validation.js +1 -522
  78. package/dist-standalone/cjs/connect.js +1 -312
  79. package/dist-standalone/cjs/connection-pool.js +1 -506
  80. package/dist-standalone/cjs/correlation-id.js +1 -339
  81. package/dist-standalone/cjs/crypto-utils.js +1 -176
  82. package/dist-standalone/cjs/debug-mode.js +1 -534
  83. package/dist-standalone/cjs/did-document.js +1 -101
  84. package/dist-standalone/cjs/did-privateme.js +1 -130
  85. package/dist-standalone/cjs/did-web.js +1 -201
  86. package/dist-standalone/cjs/discovery.js +1 -462
  87. package/dist-standalone/cjs/dual-mode.js +1 -251
  88. package/dist-standalone/cjs/email-templates.js +1 -313
  89. package/dist-standalone/cjs/email-transport.js +1 -239
  90. package/dist-standalone/cjs/envelope.js +1 -538
  91. package/dist-standalone/cjs/errors.js +1 -913
  92. package/dist-standalone/cjs/event-emitter.js +1 -461
  93. package/dist-standalone/cjs/gateway-state.js +1 -55
  94. package/dist-standalone/cjs/gateway-transport.js +1 -120
  95. package/dist-standalone/cjs/graceful-degradation.js +1 -403
  96. package/dist-standalone/cjs/guardrails.js +1 -223
  97. package/dist-standalone/cjs/health-check.js +1 -336
  98. package/dist-standalone/cjs/http-compat.js +1 -272
  99. package/dist-standalone/cjs/http-status-map.js +1 -571
  100. package/dist-standalone/cjs/identity.js +1 -645
  101. package/dist-standalone/cjs/index.js +1 -406
  102. package/dist-standalone/cjs/invitation.js +1 -421
  103. package/dist-standalone/cjs/invite.js +1 -328
  104. package/dist-standalone/cjs/key-agreement.js +1 -335
  105. package/dist-standalone/cjs/lazy-init.js +1 -300
  106. package/dist-standalone/cjs/logger.js +1 -291
  107. package/dist-standalone/cjs/loopback-transport.js +1 -0
  108. package/dist-standalone/cjs/mdns-discovery.js +1 -202
  109. package/dist-standalone/cjs/nonce-store.js +1 -80
  110. package/dist-standalone/cjs/pairing-manager.js +1 -223
  111. package/dist-standalone/cjs/plugin-system.js +1 -264
  112. package/dist-standalone/cjs/plugins/logging.js +1 -168
  113. package/dist-standalone/cjs/plugins/metrics.js +1 -181
  114. package/dist-standalone/cjs/plugins/validation.js +1 -302
  115. package/dist-standalone/cjs/policy.js +1 -320
  116. package/dist-standalone/cjs/progress-callbacks.js +1 -583
  117. package/dist-standalone/cjs/redis-nonce-store.js +1 -76
  118. package/dist-standalone/cjs/registry-middleware.js +1 -50
  119. package/dist-standalone/cjs/retry-strategies.js +1 -544
  120. package/dist-standalone/cjs/retry-transport.js +1 -102
  121. package/dist-standalone/cjs/runtime/browser.js +1 -533
  122. package/dist-standalone/cjs/runtime/edge.js +1 -526
  123. package/dist-standalone/cjs/runtime/react-native.js +1 -394
  124. package/dist-standalone/cjs/security-policy.js +1 -245
  125. package/dist-standalone/cjs/serialization.js +1 -1040
  126. package/dist-standalone/cjs/split-channel.js +1 -225
  127. package/dist-standalone/cjs/subscription-proof.js +1 -230
  128. package/dist-standalone/cjs/succession.js +1 -148
  129. package/dist-standalone/cjs/timeouts.js +1 -412
  130. package/dist-standalone/cjs/trace-context.js +1 -424
  131. package/dist-standalone/cjs/trace-spans.js +1 -495
  132. package/dist-standalone/cjs/transport.js +1 -63
  133. package/dist-standalone/cjs/trust-registry.js +1 -991
  134. package/dist-standalone/cjs/types/error-response.js +1 -56
  135. package/dist-standalone/cjs/vault-auth.js +1 -178
  136. package/dist-standalone/cjs/vault-store-loader.js +1 -194
  137. package/dist-standalone/cjs/verify.js +1 -25
  138. package/dist-standalone/cjs/version-info.js +1 -543
  139. package/dist-standalone/cjs/xfetch.js +1 -340
  140. package/dist-standalone/cli/init.js +1 -455
  141. package/dist-standalone/cli/setup.js +1 -514
  142. package/dist-standalone/cli/types.js +1 -27
  143. package/dist-standalone/cli/xbind.js +1 -148
  144. package/dist-standalone/config-validation.js +1 -513
  145. package/dist-standalone/connect.js +1 -274
  146. package/dist-standalone/connection-pool.js +1 -500
  147. package/dist-standalone/correlation-id.js +1 -326
  148. package/dist-standalone/crypto-utils.d.ts +2 -7
  149. package/dist-standalone/crypto-utils.js +1 -157
  150. package/dist-standalone/debug-mode.js +1 -510
  151. package/dist-standalone/did-document.js +1 -96
  152. package/dist-standalone/did-privateme.js +1 -121
  153. package/dist-standalone/did-web.js +1 -196
  154. package/dist-standalone/discovery.js +1 -458
  155. package/dist-standalone/dual-mode.js +1 -247
  156. package/dist-standalone/email-templates.js +1 -309
  157. package/dist-standalone/email-transport.d.ts +2 -2
  158. package/dist-standalone/email-transport.js +1 -232
  159. package/dist-standalone/envelope.js +1 -525
  160. package/dist-standalone/errors.d.ts +13 -3
  161. package/dist-standalone/errors.js +1 -896
  162. package/dist-standalone/event-emitter.js +1 -456
  163. package/dist-standalone/gateway-state.d.ts +1 -1
  164. package/dist-standalone/gateway-state.js +1 -51
  165. package/dist-standalone/gateway-transport.js +1 -116
  166. package/dist-standalone/graceful-degradation.js +1 -396
  167. package/dist-standalone/guardrails.js +1 -216
  168. package/dist-standalone/health-check.d.ts +5 -1
  169. package/dist-standalone/health-check.js +1 -332
  170. package/dist-standalone/http-compat.d.ts +1 -1
  171. package/dist-standalone/http-compat.js +1 -267
  172. package/dist-standalone/http-status-map.js +1 -561
  173. package/dist-standalone/identity.js +1 -619
  174. package/dist-standalone/index.d.ts +15 -4
  175. package/dist-standalone/index.js +1 -78
  176. package/dist-standalone/invitation.js +1 -415
  177. package/dist-standalone/invite.js +1 -324
  178. package/dist-standalone/key-agreement.js +1 -325
  179. package/dist-standalone/lazy-init.d.ts +11 -6
  180. package/dist-standalone/lazy-init.js +1 -295
  181. package/dist-standalone/logger.js +1 -285
  182. package/dist-standalone/loopback-transport.d.ts +87 -0
  183. package/dist-standalone/loopback-transport.js +1 -0
  184. package/dist-standalone/mdns-discovery.js +1 -195
  185. package/dist-standalone/nonce-store.js +1 -76
  186. package/dist-standalone/pairing-manager.js +1 -219
  187. package/dist-standalone/plugin-system.js +1 -257
  188. package/dist-standalone/plugins/logging.js +1 -163
  189. package/dist-standalone/plugins/metrics.d.ts +4 -4
  190. package/dist-standalone/plugins/metrics.js +1 -176
  191. package/dist-standalone/plugins/validation.js +1 -297
  192. package/dist-standalone/policy.js +1 -315
  193. package/dist-standalone/progress-callbacks.js +1 -576
  194. package/dist-standalone/redis-nonce-store.js +1 -72
  195. package/dist-standalone/registry-middleware.js +1 -47
  196. package/dist-standalone/retry-strategies.js +1 -534
  197. package/dist-standalone/retry-transport.js +1 -98
  198. package/dist-standalone/runtime/browser.js +1 -516
  199. package/dist-standalone/runtime/edge.js +1 -511
  200. package/dist-standalone/runtime/react-native.d.ts +1 -1
  201. package/dist-standalone/runtime/react-native.js +1 -383
  202. package/dist-standalone/security-policy.js +1 -239
  203. package/dist-standalone/serialization.js +1 -1031
  204. package/dist-standalone/split-channel.js +1 -219
  205. package/dist-standalone/subscription-proof.js +1 -224
  206. package/dist-standalone/succession.js +1 -142
  207. package/dist-standalone/timeouts.js +1 -398
  208. package/dist-standalone/trace-context.js +1 -414
  209. package/dist-standalone/trace-spans.js +1 -488
  210. package/dist-standalone/transport.js +1 -59
  211. package/dist-standalone/trust-registry.d.ts +3 -3
  212. package/dist-standalone/trust-registry.js +1 -950
  213. package/dist-standalone/types/error-response.js +1 -52
  214. package/dist-standalone/vault-auth.js +1 -174
  215. package/dist-standalone/vault-store-loader.d.ts +9 -0
  216. package/dist-standalone/vault-store-loader.js +1 -187
  217. package/dist-standalone/verify.js +1 -16
  218. package/dist-standalone/version-info.js +1 -530
  219. package/dist-standalone/xfetch.js +1 -335
  220. package/package.json +1 -1
  221. package/share1.dat +0 -0
@@ -1,462 +1 @@
1
- "use strict";
2
- /**
3
- * @module discovery
4
- * Service discovery for zero-config XBind connections.
5
- *
6
- * Enables: `xbind connect payments-service`
7
- *
8
- * Four-tier discovery:
9
- * 1. Public registry (xbind.registry.io)
10
- * 2. Well-known URL (https://service.com/.well-known/xbind)
11
- * 3. DNS TXT record (_xbind.service.com)
12
- * 4. Direct URL/QR code
13
- */
14
- Object.defineProperty(exports, "__esModule", { value: true });
15
- exports.ServiceDiscovery = exports.DiscoveryErrorCode = void 0;
16
- const shared_1 = require("../_deps/shared/index.js");
17
- const dns_1 = require("dns");
18
- /**
19
- * Discovery error codes.
20
- */
21
- var DiscoveryErrorCode;
22
- (function (DiscoveryErrorCode) {
23
- DiscoveryErrorCode["SERVICE_NOT_FOUND"] = "DISCOVERY_SERVICE_NOT_FOUND";
24
- DiscoveryErrorCode["REGISTRY_UNREACHABLE"] = "DISCOVERY_REGISTRY_UNREACHABLE";
25
- DiscoveryErrorCode["INVALID_RESPONSE"] = "DISCOVERY_INVALID_RESPONSE";
26
- DiscoveryErrorCode["NETWORK_ERROR"] = "DISCOVERY_NETWORK_ERROR";
27
- DiscoveryErrorCode["INVALID_SERVICE_NAME"] = "DISCOVERY_INVALID_SERVICE_NAME";
28
- DiscoveryErrorCode["DNS_ERROR"] = "DISCOVERY_DNS_ERROR";
29
- DiscoveryErrorCode["INVALID_EMAIL"] = "DISCOVERY_INVALID_EMAIL";
30
- DiscoveryErrorCode["PERSONAL_EMAIL_DOMAIN"] = "DISCOVERY_PERSONAL_EMAIL_DOMAIN";
31
- })(DiscoveryErrorCode || (exports.DiscoveryErrorCode = DiscoveryErrorCode = {}));
32
- /**
33
- * Personal email domains that are blacklisted from discovery.
34
- * Corporate services should use their own domain, not personal email.
35
- */
36
- const PERSONAL_EMAIL_DOMAINS = new Set([
37
- 'gmail.com',
38
- 'googlemail.com',
39
- 'outlook.com',
40
- 'hotmail.com',
41
- 'live.com',
42
- 'yahoo.com',
43
- 'ymail.com',
44
- 'icloud.com',
45
- 'me.com',
46
- 'secure-email-provider-1.com',
47
- 'secure-email-provider-2.com',
48
- 'aol.com',
49
- 'mail.com',
50
- 'zoho.com',
51
- 'gmx.com',
52
- 'tutanota.com',
53
- 'fastmail.com',
54
- ]);
55
- /**
56
- * Discovery client for finding services.
57
- */
58
- class ServiceDiscovery {
59
- registryUrl;
60
- dnsCache;
61
- /**
62
- * Create a discovery client.
63
- *
64
- * @param options - Configuration options
65
- * @param options.registryUrl - Registry URL (default: https://xbind.registry.io)
66
- */
67
- constructor(options = {}) {
68
- this.registryUrl = options.registryUrl || 'https://xbind.registry.io';
69
- this.dnsCache = new Map();
70
- }
71
- /**
72
- * Discover a service by name.
73
- *
74
- * Tries:
75
- * 1. Email-based discovery (extracts domain from email)
76
- * 2. Public registry lookup
77
- * 3. Well-known URL if name is a domain
78
- * 4. DNS TXT record (_xbind.domain)
79
- * 5. Direct URL if name is a full URL
80
- *
81
- * @param nameOrUrl - Service name, email, domain, or URL
82
- * @returns Service info or error
83
- *
84
- * @example
85
- * ```ts
86
- * const discovery = new ServiceDiscovery();
87
- *
88
- * // By name (registry lookup):
89
- * const result = await discovery.discover('payments-service');
90
- *
91
- * // By email (domain extraction):
92
- * const result = await discovery.discover('alice@company.com');
93
- *
94
- * // By domain (well-known):
95
- * const result = await discovery.discover('payments.example.com');
96
- *
97
- * // By URL (direct):
98
- * const result = await discovery.discover('https://api.payments.com/xbind');
99
- * ```
100
- */
101
- async discover(nameOrUrl) {
102
- // Validate input
103
- if (!nameOrUrl || nameOrUrl.trim().length === 0) {
104
- return (0, shared_1.err)({
105
- code: DiscoveryErrorCode.INVALID_SERVICE_NAME,
106
- message: 'Service name cannot be empty',
107
- hint: 'Provide a service name, domain, email, or URL',
108
- });
109
- }
110
- nameOrUrl = nameOrUrl.trim();
111
- // If full URL, try direct
112
- if (nameOrUrl.startsWith('http://') || nameOrUrl.startsWith('https://')) {
113
- return this.discoverDirect(nameOrUrl);
114
- }
115
- // If email address, extract domain and discover
116
- if (nameOrUrl.includes('@') && !nameOrUrl.includes('/')) {
117
- return this.discoverEmail(nameOrUrl);
118
- }
119
- // If looks like domain, try well-known first, then DNS TXT
120
- if (nameOrUrl.includes('.') && !nameOrUrl.includes('/')) {
121
- const wellKnownResult = await this.discoverWellKnown(nameOrUrl);
122
- if (wellKnownResult.ok) {
123
- return wellKnownResult;
124
- }
125
- // Try DNS TXT as fallback
126
- const dnsTxtResult = await this.discoverDnsTxt(nameOrUrl);
127
- if (dnsTxtResult.ok) {
128
- return dnsTxtResult;
129
- }
130
- // Fall through to registry if both fail
131
- }
132
- // Try registry lookup
133
- return this.discoverRegistry(nameOrUrl);
134
- }
135
- /**
136
- * Look up service in public registry.
137
- *
138
- * GET https://xbind.registry.io/lookup/:name
139
- */
140
- async discoverRegistry(name) {
141
- try {
142
- const url = `${this.registryUrl}/lookup/${encodeURIComponent(name)}`;
143
- const response = await fetch(url, {
144
- headers: {
145
- 'Accept': 'application/json',
146
- },
147
- });
148
- if (response.status === 404) {
149
- return (0, shared_1.err)({
150
- code: DiscoveryErrorCode.SERVICE_NOT_FOUND,
151
- message: `Service "${name}" not found in registry`,
152
- hint: 'Check service name or register at xbind.registry.io',
153
- });
154
- }
155
- if (!response.ok) {
156
- return (0, shared_1.err)({
157
- code: DiscoveryErrorCode.REGISTRY_UNREACHABLE,
158
- message: `Registry returned ${response.status}`,
159
- hint: 'Try again later or use direct URL',
160
- });
161
- }
162
- const data = await response.json();
163
- return (0, shared_1.ok)(data);
164
- }
165
- catch (error) {
166
- return (0, shared_1.err)({
167
- code: DiscoveryErrorCode.NETWORK_ERROR,
168
- message: error instanceof Error ? error.message : 'Network error',
169
- hint: 'Check internet connection',
170
- });
171
- }
172
- }
173
- /**
174
- * Discover via .well-known/xbind.
175
- *
176
- * GET https://domain/.well-known/xbind
177
- */
178
- async discoverWellKnown(domain) {
179
- try {
180
- const url = `https://${domain}/.well-known/xbind`;
181
- const response = await fetch(url, {
182
- headers: {
183
- 'Accept': 'application/json',
184
- },
185
- });
186
- if (!response.ok) {
187
- return (0, shared_1.err)({
188
- code: DiscoveryErrorCode.SERVICE_NOT_FOUND,
189
- message: `No .well-known/xbind found at ${domain}`,
190
- });
191
- }
192
- const data = await response.json();
193
- return (0, shared_1.ok)(data);
194
- }
195
- catch (error) {
196
- return (0, shared_1.err)({
197
- code: DiscoveryErrorCode.NETWORK_ERROR,
198
- message: error instanceof Error ? error.message : 'Network error',
199
- });
200
- }
201
- }
202
- /**
203
- * Discover via direct URL.
204
- */
205
- async discoverDirect(url) {
206
- try {
207
- const response = await fetch(url, {
208
- headers: {
209
- 'Accept': 'application/json',
210
- },
211
- });
212
- if (!response.ok) {
213
- return (0, shared_1.err)({
214
- code: DiscoveryErrorCode.SERVICE_NOT_FOUND,
215
- message: `Service not found at ${url}`,
216
- });
217
- }
218
- const data = await response.json();
219
- return (0, shared_1.ok)(data);
220
- }
221
- catch (error) {
222
- return (0, shared_1.err)({
223
- code: DiscoveryErrorCode.NETWORK_ERROR,
224
- message: error instanceof Error ? error.message : 'Network error',
225
- });
226
- }
227
- }
228
- /**
229
- * Discover via DNS TXT record.
230
- *
231
- * Looks up TXT record at _xbind.domain
232
- *
233
- * Supports two formats:
234
- * 1. Full record: "xbind-endpoint=https://...;did=did:web:...;publicKey=..." (all fields in DNS)
235
- * 2. Simple redirect: "xbind=https://api.example.com/xbind" (fetch from endpoint)
236
- *
237
- * Includes 5-minute caching to reduce DNS queries.
238
- */
239
- async discoverDnsTxt(domain) {
240
- // Check cache first (5 minute TTL)
241
- const cached = this.dnsCache.get(domain);
242
- if (cached && cached.expiry > Date.now()) {
243
- return (0, shared_1.ok)(cached.info);
244
- }
245
- try {
246
- const txtRecords = await dns_1.promises.resolveTxt(`_xbind.${domain}`);
247
- // Find xbind record
248
- for (const record of txtRecords) {
249
- const txt = record.join('');
250
- // Format 1: Full record with all fields
251
- if (txt.includes('xbind-endpoint=')) {
252
- const parsed = this.parseDnsTxtRecord(txt, domain);
253
- if (parsed.ok) {
254
- // Cache for 5 minutes
255
- this.dnsCache.set(domain, {
256
- info: parsed.value,
257
- expiry: Date.now() + 5 * 60 * 1000,
258
- });
259
- return parsed;
260
- }
261
- }
262
- // Format 2: Simple redirect to endpoint
263
- if (txt.startsWith('xbind=')) {
264
- const endpoint = txt.substring(6);
265
- // Fetch service info from endpoint
266
- const result = await this.discoverDirect(endpoint);
267
- if (result.ok) {
268
- // Cache for 5 minutes
269
- this.dnsCache.set(domain, {
270
- info: result.value,
271
- expiry: Date.now() + 5 * 60 * 1000,
272
- });
273
- }
274
- return result;
275
- }
276
- }
277
- return (0, shared_1.err)({
278
- code: DiscoveryErrorCode.SERVICE_NOT_FOUND,
279
- message: `No _xbind TXT record found for ${domain}`,
280
- hint: 'Add DNS TXT record: _xbind.example.com IN TXT "xbind-endpoint=https://...;did=did:web:...;publicKey=..."',
281
- });
282
- }
283
- catch (error) {
284
- // Handle DNS-specific errors
285
- if (error && typeof error === 'object' && 'code' in error) {
286
- const dnsError = error;
287
- if (dnsError.code === 'ENOTFOUND' || dnsError.code === 'ENODATA') {
288
- return (0, shared_1.err)({
289
- code: DiscoveryErrorCode.SERVICE_NOT_FOUND,
290
- message: `No DNS TXT record found for _xbind.${domain}`,
291
- });
292
- }
293
- if (dnsError.code === 'ETIMEOUT') {
294
- return (0, shared_1.err)({
295
- code: DiscoveryErrorCode.DNS_ERROR,
296
- message: 'DNS query timeout',
297
- hint: 'Check network connection or try again',
298
- });
299
- }
300
- }
301
- return (0, shared_1.err)({
302
- code: DiscoveryErrorCode.DNS_ERROR,
303
- message: error instanceof Error ? error.message : 'DNS lookup failed',
304
- hint: 'Check domain name and DNS configuration',
305
- });
306
- }
307
- }
308
- /**
309
- * Parse DNS TXT record into ServiceInfo.
310
- *
311
- * Expected format:
312
- * xbind-endpoint=https://...;did=did:web:...;publicKey=...;version=1.0
313
- *
314
- * Optional fields:
315
- * x25519PublicKey=...;mlKemPublicKey=...;description=...;logo=...;docs=...
316
- */
317
- parseDnsTxtRecord(txtRecord, domain) {
318
- try {
319
- const fields = new Map();
320
- // Split by semicolon and parse key=value pairs
321
- const parts = txtRecord.split(';').map(p => p.trim()).filter(p => p.length > 0);
322
- for (const part of parts) {
323
- const eqIndex = part.indexOf('=');
324
- if (eqIndex === -1)
325
- continue;
326
- const key = part.substring(0, eqIndex).trim();
327
- const value = part.substring(eqIndex + 1).trim();
328
- fields.set(key, value);
329
- }
330
- // Validate required fields
331
- const endpoint = fields.get('xbind-endpoint');
332
- const did = fields.get('did');
333
- const publicKey = fields.get('publicKey');
334
- if (!endpoint || !did || !publicKey) {
335
- return (0, shared_1.err)({
336
- code: DiscoveryErrorCode.INVALID_RESPONSE,
337
- message: 'DNS TXT record missing required fields',
338
- hint: 'Required: xbind-endpoint, did, publicKey',
339
- });
340
- }
341
- // Build ServiceInfo
342
- const info = {
343
- name: domain,
344
- endpoint,
345
- did,
346
- publicKey,
347
- };
348
- // Add optional fields
349
- if (fields.has('x25519PublicKey')) {
350
- info.x25519PublicKey = fields.get('x25519PublicKey');
351
- }
352
- if (fields.has('mlKemPublicKey')) {
353
- info.mlKemPublicKey = fields.get('mlKemPublicKey');
354
- }
355
- if (fields.has('description')) {
356
- info.description = fields.get('description');
357
- }
358
- if (fields.has('logo')) {
359
- info.logo = fields.get('logo');
360
- }
361
- if (fields.has('docs')) {
362
- info.docs = fields.get('docs');
363
- }
364
- return (0, shared_1.ok)(info);
365
- }
366
- catch (error) {
367
- return (0, shared_1.err)({
368
- code: DiscoveryErrorCode.INVALID_RESPONSE,
369
- message: error instanceof Error ? error.message : 'Failed to parse DNS TXT record',
370
- });
371
- }
372
- }
373
- /**
374
- * Discover service via email address.
375
- *
376
- * Extracts domain from email and performs discovery.
377
- * Personal email domains (gmail.com, outlook.com, etc.) are rejected.
378
- *
379
- * @param email - Email address (e.g., "alice@company.com")
380
- * @returns Service info or error
381
- *
382
- * @example
383
- * ```ts
384
- * const discovery = new ServiceDiscovery();
385
- * const result = await discovery.discoverEmail('alice@company.com');
386
- * // Discovers service at company.com
387
- * ```
388
- */
389
- async discoverEmail(email) {
390
- // Validate email format
391
- const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
392
- if (!emailRegex.test(email)) {
393
- return (0, shared_1.err)({
394
- code: DiscoveryErrorCode.INVALID_EMAIL,
395
- message: `Invalid email format: ${email}`,
396
- hint: 'Provide a valid email address (e.g., alice@company.com)',
397
- });
398
- }
399
- // Extract domain (everything after @)
400
- const domain = this.extractDomain(email);
401
- if (!domain) {
402
- return (0, shared_1.err)({
403
- code: DiscoveryErrorCode.INVALID_EMAIL,
404
- message: `Could not extract domain from email: ${email}`,
405
- hint: 'Check email format',
406
- });
407
- }
408
- // Check for personal email domains
409
- if (PERSONAL_EMAIL_DOMAINS.has(domain.toLowerCase())) {
410
- return (0, shared_1.err)({
411
- code: DiscoveryErrorCode.PERSONAL_EMAIL_DOMAIN,
412
- message: `Personal email domains not supported for discovery: ${domain}`,
413
- hint: 'Use a corporate email address or provide the company domain directly',
414
- });
415
- }
416
- // Discover using the extracted domain
417
- // Try well-known first, then DNS TXT, then registry
418
- const wellKnownResult = await this.discoverWellKnown(domain);
419
- if (wellKnownResult.ok) {
420
- return wellKnownResult;
421
- }
422
- const dnsTxtResult = await this.discoverDnsTxt(domain);
423
- if (dnsTxtResult.ok) {
424
- return dnsTxtResult;
425
- }
426
- // Try registry with domain
427
- return this.discoverRegistry(domain);
428
- }
429
- /**
430
- * Extract domain from email address.
431
- * Handles edge cases: subdomains, plus addressing, etc.
432
- *
433
- * @param email - Email address
434
- * @returns Domain or null if extraction fails
435
- *
436
- * @example
437
- * ```ts
438
- * extractDomain('alice@company.com') // 'company.com'
439
- * extractDomain('alice+label@company.com') // 'company.com'
440
- * extractDomain('alice@mail.company.com') // 'mail.company.com'
441
- * ```
442
- */
443
- extractDomain(email) {
444
- const parts = email.split('@');
445
- if (parts.length !== 2 || !parts[1]) {
446
- return null;
447
- }
448
- // Domain is everything after @
449
- const domain = parts[1].trim().toLowerCase();
450
- // Validate domain has at least one dot and valid characters
451
- if (!domain.includes('.') || domain.length < 3) {
452
- return null;
453
- }
454
- // Basic domain validation (alphanumeric, dots, hyphens)
455
- const domainRegex = /^[a-z0-9][a-z0-9-]*(\.[a-z0-9][a-z0-9-]*)+$/;
456
- if (!domainRegex.test(domain)) {
457
- return null;
458
- }
459
- return domain;
460
- }
461
- }
462
- exports.ServiceDiscovery = ServiceDiscovery;
1
+ "use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.ServiceDiscovery=exports.DiscoveryErrorCode=void 0;const shared_1=require("../_deps/shared/index.js"),dns_1=require("dns");var DiscoveryErrorCode;!function(e){e.SERVICE_NOT_FOUND="DISCOVERY_SERVICE_NOT_FOUND",e.REGISTRY_UNREACHABLE="DISCOVERY_REGISTRY_UNREACHABLE",e.INVALID_RESPONSE="DISCOVERY_INVALID_RESPONSE",e.NETWORK_ERROR="DISCOVERY_NETWORK_ERROR",e.INVALID_SERVICE_NAME="DISCOVERY_INVALID_SERVICE_NAME",e.DNS_ERROR="DISCOVERY_DNS_ERROR",e.INVALID_EMAIL="DISCOVERY_INVALID_EMAIL",e.PERSONAL_EMAIL_DOMAIN="DISCOVERY_PERSONAL_EMAIL_DOMAIN"}(DiscoveryErrorCode||(exports.DiscoveryErrorCode=DiscoveryErrorCode={}));const PERSONAL_EMAIL_DOMAINS=new Set(["gmail.com","googlemail.com","outlook.com","hotmail.com","live.com","yahoo.com","ymail.com","icloud.com","me.com","secure-email-provider-1.com","secure-email-provider-2.com","aol.com","mail.com","zoho.com","gmx.com","tutanota.com","fastmail.com"]);class ServiceDiscovery{registryUrl;dnsCache;constructor(e={}){this.registryUrl=e.registryUrl||"https://xbind.registry.io",this.dnsCache=new Map}async discover(e){if(!e||0===e.trim().length)return(0,shared_1.err)({code:DiscoveryErrorCode.INVALID_SERVICE_NAME,message:"Service name cannot be empty",hint:"Provide a service name, domain, email, or URL"});if((e=e.trim()).startsWith("http://")||e.startsWith("https://"))return this.discoverDirect(e);if(e.includes("@")&&!e.includes("/"))return this.discoverEmail(e);if(e.includes(".")&&!e.includes("/")){const r=await this.discoverWellKnown(e);if(r.ok)return r;const o=await this.discoverDnsTxt(e);if(o.ok)return o}return this.discoverRegistry(e)}async discoverRegistry(e){try{const r=`${this.registryUrl}/lookup/${encodeURIComponent(e)}`,o=await fetch(r,{headers:{Accept:"application/json"}});if(404===o.status)return(0,shared_1.err)({code:DiscoveryErrorCode.SERVICE_NOT_FOUND,message:`Service "${e}" not found in registry`,hint:"Check service name or register at xbind.registry.io"});if(!o.ok)return(0,shared_1.err)({code:DiscoveryErrorCode.REGISTRY_UNREACHABLE,message:`Registry returned ${o.status}`,hint:"Try again later or use direct URL"});const s=await o.json();return(0,shared_1.ok)(s)}catch(e){return(0,shared_1.err)({code:DiscoveryErrorCode.NETWORK_ERROR,message:e instanceof Error?e.message:"Network error",hint:"Check internet connection"})}}async discoverWellKnown(e){try{const r=`https://${e}/.well-known/xbind`,o=await fetch(r,{headers:{Accept:"application/json"}});if(!o.ok)return(0,shared_1.err)({code:DiscoveryErrorCode.SERVICE_NOT_FOUND,message:`No .well-known/xbind found at ${e}`});const s=await o.json();return(0,shared_1.ok)(s)}catch(e){return(0,shared_1.err)({code:DiscoveryErrorCode.NETWORK_ERROR,message:e instanceof Error?e.message:"Network error"})}}async discoverDirect(e){try{const r=await fetch(e,{headers:{Accept:"application/json"}});if(!r.ok)return(0,shared_1.err)({code:DiscoveryErrorCode.SERVICE_NOT_FOUND,message:`Service not found at ${e}`});const o=await r.json();return(0,shared_1.ok)(o)}catch(e){return(0,shared_1.err)({code:DiscoveryErrorCode.NETWORK_ERROR,message:e instanceof Error?e.message:"Network error"})}}async discoverDnsTxt(e){const r=this.dnsCache.get(e);if(r&&r.expiry>Date.now())return(0,shared_1.ok)(r.info);try{const r=await dns_1.promises.resolveTxt(`_xbind.${e}`);for(const o of r){const r=o.join("");if(r.includes("xbind-endpoint=")){const o=this.parseDnsTxtRecord(r,e);if(o.ok)return this.dnsCache.set(e,{info:o.value,expiry:Date.now()+3e5}),o}if(r.startsWith("xbind=")){const o=r.substring(6),s=await this.discoverDirect(o);return s.ok&&this.dnsCache.set(e,{info:s.value,expiry:Date.now()+3e5}),s}}return(0,shared_1.err)({code:DiscoveryErrorCode.SERVICE_NOT_FOUND,message:`No _xbind TXT record found for ${e}`,hint:'Add DNS TXT record: _xbind.example.com IN TXT "xbind-endpoint=https://...;did=did:web:...;publicKey=..."'})}catch(r){if(r&&"object"==typeof r&&"code"in r){const o=r;if("ENOTFOUND"===o.code||"ENODATA"===o.code)return(0,shared_1.err)({code:DiscoveryErrorCode.SERVICE_NOT_FOUND,message:`No DNS TXT record found for _xbind.${e}`});if("ETIMEOUT"===o.code)return(0,shared_1.err)({code:DiscoveryErrorCode.DNS_ERROR,message:"DNS query timeout",hint:"Check network connection or try again"})}return(0,shared_1.err)({code:DiscoveryErrorCode.DNS_ERROR,message:r instanceof Error?r.message:"DNS lookup failed",hint:"Check domain name and DNS configuration"})}}parseDnsTxtRecord(e,r){try{const o=new Map,s=e.split(";").map(e=>e.trim()).filter(e=>e.length>0);for(const e of s){const r=e.indexOf("=");if(-1===r)continue;const s=e.substring(0,r).trim(),t=e.substring(r+1).trim();o.set(s,t)}const t=o.get("xbind-endpoint"),i=o.get("did"),n=o.get("publicKey");if(!t||!i||!n)return(0,shared_1.err)({code:DiscoveryErrorCode.INVALID_RESPONSE,message:"DNS TXT record missing required fields",hint:"Required: xbind-endpoint, did, publicKey"});const c={name:r,endpoint:t,did:i,publicKey:n};return o.has("x25519PublicKey")&&(c.x25519PublicKey=o.get("x25519PublicKey")),o.has("mlKemPublicKey")&&(c.mlKemPublicKey=o.get("mlKemPublicKey")),o.has("description")&&(c.description=o.get("description")),o.has("logo")&&(c.logo=o.get("logo")),o.has("docs")&&(c.docs=o.get("docs")),(0,shared_1.ok)(c)}catch(e){return(0,shared_1.err)({code:DiscoveryErrorCode.INVALID_RESPONSE,message:e instanceof Error?e.message:"Failed to parse DNS TXT record"})}}async discoverEmail(e){if(!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e))return(0,shared_1.err)({code:DiscoveryErrorCode.INVALID_EMAIL,message:`Invalid email format: ${e}`,hint:"Provide a valid email address (e.g., alice@company.com)"});const r=this.extractDomain(e);if(!r)return(0,shared_1.err)({code:DiscoveryErrorCode.INVALID_EMAIL,message:`Could not extract domain from email: ${e}`,hint:"Check email format"});if(PERSONAL_EMAIL_DOMAINS.has(r.toLowerCase()))return(0,shared_1.err)({code:DiscoveryErrorCode.PERSONAL_EMAIL_DOMAIN,message:`Personal email domains not supported for discovery: ${r}`,hint:"Use a corporate email address or provide the company domain directly"});const o=await this.discoverWellKnown(r);if(o.ok)return o;const s=await this.discoverDnsTxt(r);return s.ok?s:this.discoverRegistry(r)}extractDomain(e){const r=e.split("@");if(2!==r.length||!r[1])return null;const o=r[1].trim().toLowerCase();if(!o.includes(".")||o.length<3)return null;return/^[a-z0-9][a-z0-9-]*(\.[a-z0-9][a-z0-9-]*)+$/.test(o)?o:null}}exports.ServiceDiscovery=ServiceDiscovery;