@procedures/peer 0.0.0-stage → 0.1.0

package/dist/manifest/typescript.js

@@ -0,0 +1,123 @@
+/**
+ * TypeScript Declaration Generator
+ *
+ * Generates .d.ts files from procedure definitions
+ * for static type checking on clients.
+ */
+/**
+ * Generate TypeScript declaration file content
+ */
+export function generateTypeScript(procedures) {
+    const lines = [
+        "/**",
+        " * Auto-generated procedure type declarations",
+        ` * Generated at: ${new Date().toISOString()}`,
+        " */",
+        "",
+    ];
+    // Group procedures by namespace (first path segment)
+    const namespaces = new Map();
+    for (const proc of procedures) {
+        const namespace = proc.path[0] ?? "root";
+        const existing = namespaces.get(namespace) ?? [];
+        existing.push(proc);
+        namespaces.set(namespace, existing);
+    }
+    // Generate interface for each namespace
+    for (const [namespace, procs] of namespaces) {
+        lines.push(`export interface ${pascalCase(namespace)}Procedures {`);
+        for (const proc of procs) {
+            const path = proc.path.slice(1);
+            const methodName = path.join("_") || namespace;
+            if (proc.description) {
+                lines.push(`  /** ${proc.description} */`);
+            }
+            // The types come from the JSON Schemas; a procedure without one has `unknown`
+            lines.push(`  ${camelCase(methodName)}: {`);
+            lines.push(`    path: ${JSON.stringify(proc.path)};`);
+            lines.push(`    input: ${jsonSchemaToTs(proc.inputSchema, "    ")};`);
+            lines.push(`    output: ${jsonSchemaToTs(proc.outputSchema, "    ")};`);
+            lines.push(`  };`);
+        }
+        lines.push(`}`);
+        lines.push("");
+    }
+    // Generate combined type
+    lines.push("export interface RemoteProcedures {");
+    for (const namespace of namespaces.keys()) {
+        lines.push(`  ${camelCase(namespace)}: ${pascalCase(namespace)}Procedures;`);
+    }
+    lines.push("}");
+    lines.push("");
+    return lines.join("\n");
+}
+/** A property name as TypeScript writes it: quoted when it is not an identifier. */
+function propertyName(name) {
+    return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
+}
+/**
+ * The TypeScript type of a JSON Schema: objects, arrays, records, enums, constants and unions.
+ * A schema that it cannot read is `unknown`.
+ */
+export function jsonSchemaToTs(schema, indent = "") {
+    if (!schema || typeof schema !== "object")
+        return "unknown";
+    const node = schema;
+    const union = node.anyOf ?? node.oneOf;
+    if (union?.length)
+        return union.map((member) => jsonSchemaToTs(member, indent)).join(" | ");
+    if (node.allOf?.length)
+        return node.allOf.map((member) => jsonSchemaToTs(member, indent)).join(" & ");
+    if (Array.isArray(node.enum))
+        return node.enum.map((value) => JSON.stringify(value)).join(" | ") || "never";
+    if (node.const !== undefined)
+        return JSON.stringify(node.const);
+    const types = Array.isArray(node.type) ? node.type : node.type ? [node.type] : [];
+    if (types.length > 1)
+        return types.map((type) => jsonSchemaToTs({ ...node, type }, indent)).join(" | ");
+    switch (types[0]) {
+        case "string":
+            return "string";
+        case "number":
+        case "integer":
+            return "number";
+        case "boolean":
+            return "boolean";
+        case "null":
+            return "null";
+        case "array":
+            return Array.isArray(node.items)
+                ? `[${node.items.map((part) => jsonSchemaToTs(part, indent)).join(", ")}]`
+                : `Array<${jsonSchemaToTs(node.items, indent)}>`;
+        case "object": {
+            const properties = Object.entries(node.properties ?? {});
+            const extra = node.additionalProperties;
+            if (properties.length === 0) {
+                return extra && typeof extra === "object" ? `Record<string, ${jsonSchemaToTs(extra, indent)}>` : "Record<string, unknown>";
+            }
+            const required = new Set(node.required ?? []);
+            const inner = `${indent}  `;
+            const members = properties.map(([name, value]) => `${inner}${propertyName(name)}${required.has(name) ? "" : "?"}: ${jsonSchemaToTs(value, inner)};`);
+            return `{\n${members.join("\n")}\n${indent}}`;
+        }
+        default:
+            return "unknown";
+    }
+}
+/**
+ * Convert string to PascalCase
+ */
+function pascalCase(str) {
+    return str
+        .split(/[-_\s]+/)
+        .map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase())
+        .join("");
+}
+/**
+ * Convert string to camelCase
+ */
+function camelCase(str) {
+    const pascal = pascalCase(str);
+    return pascal.charAt(0).toLowerCase() + pascal.slice(1);
+}
+//# sourceMappingURL=typescript.js.map

package/dist/manifest/typescript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.js","sourceRoot":"","sources":["../../src/manifest/typescript.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA2B;IAC5D,MAAM,KAAK,GAAa;QACtB,KAAK;QACL,+CAA+C;QAC/C,oBAAoB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;QAC9C,KAAK;QACL,EAAE;KACH,CAAC;IAEF,qDAAqD;IACrD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,wCAAwC;IACxC,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,oBAAoB,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;YAE/C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,KAAK,CAAC,CAAC;YAC7C,CAAC;YAED,8EAA8E;YAC9E,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,cAAc,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,eAAe,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAClD,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC/E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAgBD,oFAAoF;AACpF,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,MAAM,GAAG,EAAE;IACzD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAkB,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IACvC,IAAI,KAAK,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;IAC5G,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxG,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC9B,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC1E,CAAC,CAAC,SAAS,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;QACrD,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC;YACxC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC7H,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,CAAC;YAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAC5B,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CACrH,CAAC;YACF,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,GAAG,CAAC;QAChD,CAAC;QACD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SACzE,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/module.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Module (no side effects): the procedures of this package as data, for `createRegistry()`.
+ *
+ * Procedure Registration
+ *
+ * Registers server procedures with the client system.
+ * This file is referenced by package.json's client.procedures field.
+ */
+import { type AnyProcedure, type ProcedureModule } from "@procedures/client";
+/**
+ * All server procedures
+ */
+export declare const procedures: readonly AnyProcedure[];
+/**
+ * The module of this package, for `createRegistry()`: its procedures as data. Importing this
+ * file registers nothing. (`register.ts` registers the same procedures in the global registry.)
+ */
+export declare const serverModule: ProcedureModule;
+export default serverModule;
+//# sourceMappingURL=module.d.ts.map

package/dist/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAgB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAc3F;;GAEG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,YAAY,EAW7C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,eAAmE,CAAC;eAEhF,YAAY"}

package/dist/module.js

@@ -0,0 +1,42 @@
+/**
+ * Module (no side effects): the procedures of this package as data, for `createRegistry()`.
+ *
+ * Procedure Registration
+ *
+ * Registers server procedures with the client system.
+ * This file is referenced by package.json's client.procedures field.
+ */
+import { defineModule } from "@procedures/client";
+// Import all procedures
+import { serverCreateProcedure } from "./procedures/server.create.js";
+import { serverConnectProcedure } from "./procedures/server.connect.js";
+import { serverDisconnectProcedure } from "./procedures/server.disconnect.js";
+import { manifestGenerateProcedure } from "./procedures/manifest.generate.js";
+import { discoveryAnnounceProcedure } from "./discovery/index.js";
+import { serverStartProcedure } from "./procedures/server.start.js";
+import { serverStopProcedure } from "./procedures/server.stop.js";
+import { serverStatusProcedure } from "./procedures/server.status.js";
+import { serverCallProcedure } from "./procedures/server.call.js";
+import { serverConnectionsProcedure } from "./procedures/server.connections.js";
+/**
+ * All server procedures
+ */
+export const procedures = [
+    serverCreateProcedure,
+    serverConnectProcedure,
+    serverDisconnectProcedure,
+    manifestGenerateProcedure,
+    discoveryAnnounceProcedure,
+    serverStartProcedure,
+    serverStopProcedure,
+    serverStatusProcedure,
+    serverCallProcedure,
+    serverConnectionsProcedure,
+];
+/**
+ * The module of this package, for `createRegistry()`: its procedures as data. Importing this
+ * file registers nothing. (`register.ts` registers the same procedures in the global registry.)
+ */
+export const serverModule = defineModule("@procedures/peer", [...procedures]);
+export default serverModule;
+//# sourceMappingURL=module.js.map

package/dist/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAqB,YAAY,EAAwB,MAAM,oBAAoB,CAAC;AAE3F,wBAAwB;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAA4B;IACjD,qBAAqB;IACrB,sBAAsB;IACtB,yBAAyB;IACzB,yBAAyB;IACzB,0BAA0B;IAC1B,oBAAoB;IACpB,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,0BAA0B;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB,YAAY,CAAC,kBAAkB,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;AAE/F,eAAe,YAAY,CAAC"}

package/dist/output-schemas.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The output schemas of the server.* and manifest.* procedures (roadmap 2.1).
+ *
+ * Loose objects: a field that a schema does not name stays in the result (a strict schema would
+ * remove it when the output is validated). Each schema is a `z.ZodType` of its output type, so
+ * the compiler checks it against the type.
+ */
+import { z } from "zod";
+import type { ManifestGenerateOutput, ServerConnectOutput, ServerCreateOutput, ServerDisconnectOutput, ServerStartOutput, ServerStatusOutput, ServerStopOutput } from "./types.js";
+import type { ServerCallOutput } from "./procedures/server.call.js";
+import type { ServerConnectionsOutput } from "./procedures/server.connections.js";
+export declare const ServerCreateOutputSchema: z.ZodType<ServerCreateOutput>;
+export declare const ServerConnectOutputSchema: z.ZodType<ServerConnectOutput>;
+export declare const ServerDisconnectOutputSchema: z.ZodType<ServerDisconnectOutput>;
+export declare const ManifestGenerateOutputSchema: z.ZodType<ManifestGenerateOutput>;
+export declare const ServerStartOutputSchema: z.ZodType<ServerStartOutput>;
+export declare const ServerStopOutputSchema: z.ZodType<ServerStopOutput>;
+export declare const ServerStatusOutputSchema: z.ZodType<ServerStatusOutput>;
+export declare const ServerCallOutputSchema: z.ZodType<ServerCallOutput>;
+export declare const ServerConnectionsOutputSchema: z.ZodType<ServerConnectionsOutput>;
+//# sourceMappingURL=output-schemas.d.ts.map

package/dist/output-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schemas.d.ts","sourceRoot":"","sources":["../src/output-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AASlF,eAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAWjE,CAAC;AAEH,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAInE,CAAC;AAEH,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAEzE,CAAC;AAEH,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAWzE,CAAC;AAEH,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAO/D,CAAC;AAEH,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAG7D,CAAC;AAEH,eAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAUjE,CAAC;AAEH,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAI7D,CAAC;AAEH,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAa3E,CAAC"}

package/dist/output-schemas.js

@@ -0,0 +1,85 @@
+/**
+ * The output schemas of the server.* and manifest.* procedures (roadmap 2.1).
+ *
+ * Loose objects: a field that a schema does not name stays in the result (a strict schema would
+ * remove it when the output is validated). Each schema is a `z.ZodType` of its output type, so
+ * the compiler checks it against the type.
+ */
+import { z } from "zod";
+const procedureInfo = z.looseObject({
+    path: z.array(z.string()).describe("The procedure path"),
+    description: z.string().optional().describe("The description of the procedure"),
+    inputSchema: z.record(z.string(), z.unknown()).optional().describe("The JSON Schema of the input"),
+    outputSchema: z.record(z.string(), z.unknown()).optional().describe("The JSON Schema of the output"),
+});
+export const ServerCreateOutputSchema = z.looseObject({
+    serverId: z.string().describe("The id of the server: server.stop takes it"),
+    endpoints: z
+        .array(z.looseObject({
+        type: z.enum(["http", "websocket", "local"]).describe("The transport"),
+        address: z.string().describe("The address of the endpoint"),
+    }))
+        .describe("The endpoints of the server"),
+    procedureCount: z.number().describe("The number of procedures that the server serves"),
+});
+export const ServerConnectOutputSchema = z.looseObject({
+    connectionId: z.string().describe("The id of the connection: server.call and server.disconnect take it"),
+    remotePeerId: z.string().describe("The id of the remote peer"),
+    remoteProcedures: z.array(procedureInfo).describe("The procedures of the remote peer"),
+});
+export const ServerDisconnectOutputSchema = z.looseObject({
+    success: z.boolean().describe("True when the connection closed"),
+});
+export const ManifestGenerateOutputSchema = z.looseObject({
+    json: z
+        .looseObject({
+        procedures: z.array(procedureInfo).describe("The procedures with their JSON Schemas"),
+        generatedAt: z.string().describe("The time of the manifest (ISO 8601)"),
+        version: z.string().describe("The version of the manifest format"),
+    })
+        .optional()
+        .describe("The JSON manifest, for the json format"),
+    typescript: z.string().optional().describe("The TypeScript declarations, for the typescript format"),
+    filesWritten: z.array(z.string()).optional().describe("The files that the call wrote, with outputDir"),
+});
+export const ServerStartOutputSchema = z.looseObject({
+    success: z.boolean().describe("True when the server started"),
+    pid: z.number().optional().describe("The process id of the server"),
+    port: z.number().optional().describe("The port of the server"),
+    endpoint: z.string().optional().describe("The URL of the server"),
+    logFile: z.string().optional().describe("The log file of the server"),
+    message: z.string().describe("A message about the result"),
+});
+export const ServerStopOutputSchema = z.looseObject({
+    success: z.boolean().describe("True when the server stopped"),
+    message: z.string().describe("A message about the result"),
+});
+export const ServerStatusOutputSchema = z.looseObject({
+    running: z.boolean().describe("True when a server runs"),
+    pid: z.number().optional().describe("The process id of the server"),
+    port: z.number().optional().describe("The port of the server"),
+    endpoint: z.string().optional().describe("The URL of the server"),
+    transport: z.string().optional().describe("The transport of the server"),
+    startedAt: z.string().optional().describe("The start time (ISO 8601)"),
+    uptime: z.string().optional().describe("The time since the start, as text"),
+    logFile: z.string().optional().describe("The log file of the server"),
+    message: z.string().describe("A message about the result"),
+});
+export const ServerCallOutputSchema = z.looseObject({
+    result: z.unknown().describe("The result of the remote procedure"),
+    connectionId: z.string().describe("The connection that the call used"),
+    path: z.array(z.string()).describe("The path of the remote procedure"),
+});
+export const ServerConnectionsOutputSchema = z.looseObject({
+    connections: z
+        .array(z.looseObject({
+        connectionId: z.string().describe("The id of the connection"),
+        remotePeerId: z.string().describe("The id of the remote peer"),
+        transport: z.string().describe("The transport of the connection"),
+        state: z.string().describe("The state: connecting, connected, disconnected or error"),
+        remoteProcedureCount: z.number().describe("The number of procedures of the remote peer"),
+        connectedAt: z.string().optional().describe("The time of the connection (ISO 8601)"),
+    }))
+        .describe("The open connections"),
+});
+//# sourceMappingURL=output-schemas.js.map

package/dist/output-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schemas.js","sourceRoot":"","sources":["../src/output-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAClG,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CACrG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAkC,CAAC,CAAC,WAAW,CAAC;IACnF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAC3E,SAAS,EAAE,CAAC;SACT,KAAK,CACJ,CAAC,CAAC,WAAW,CAAC;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;QACtE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KAC5D,CAAC,CACH;SACA,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CACvF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAmC,CAAC,CAAC,WAAW,CAAC;IACrF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IACxG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC9D,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CACvF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAsC,CAAC,CAAC,WAAW,CAAC;IAC3F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAsC,CAAC,CAAC,WAAW,CAAC;IAC3F,IAAI,EAAE,CAAC;SACJ,WAAW,CAAC;QACX,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QACvE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KACnE,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,wCAAwC,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACpG,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CACvG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAiC,CAAC,CAAC,WAAW,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC7D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACnE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACjE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAgC,CAAC,CAAC,WAAW,CAAC;IAC/E,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAkC,CAAC,CAAC,WAAW,CAAC;IACnF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACxD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACnE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAgC,CAAC,CAAC,WAAW,CAAC;IAC/E,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAuC,CAAC,CAAC,WAAW,CAAC;IAC7F,WAAW,EAAE,CAAC;SACX,KAAK,CACJ,CAAC,CAAC,WAAW,CAAC;QACZ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC9D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACjE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;QACrF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;QACxF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;KACrF,CAAC,CACH;SACA,QAAQ,CAAC,sBAAsB,CAAC;CACpC,CAAC,CAAC"}

package/dist/peer/index.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Peer Module
+ *
+ * Transport-agnostic peer implementation for bidirectional RPC.
+ */
+import { ProcedureServer, type ProcedureRegistry, type HostPolicy } from "@procedures/client";
+import type { ProcedurePath } from "@procedures/client";
+import type { TransportConfig, TransportType } from "../types.js";
+export interface PeerOptions {
+    /** Unique peer ID */
+    id: string;
+    /** Transports to enable */
+    transports: TransportConfig[];
+    /** Auto-register procedures from registry */
+    autoRegister?: boolean;
+    /** Procedure registry to use */
+    registry?: ProcedureRegistry;
+    /** The procedures that the peer serves (see `exposeRule`). Without it, the peer serves every procedure. */
+    expose?: ((path: ProcedurePath) => boolean) | undefined;
+    /**
+     * The policy of the host (`hostPolicy()` of the core, roadmap 2.3): the expose rule, the call
+     * rule, the interceptors (a time limit), the token of each network transport that has none of
+     * its own, and the browser checks. `expose` above, when given, wins over the policy's.
+     */
+    policy?: HostPolicy | undefined;
+}
+export interface PeerEndpoint {
+    type: TransportType;
+    address: string;
+}
+export interface Peer {
+    /** Peer ID */
+    id: string;
+    /** Start all transports */
+    start(): Promise<void>;
+    /** Stop all transports */
+    stop(): Promise<void>;
+    /** Get active endpoints */
+    getEndpoints(): PeerEndpoint[];
+    /** Get underlying server */
+    getServer(): ProcedureServer;
+}
+/**
+ * Create a new peer instance
+ */
+export declare function createPeer(options: PeerOptions): Promise<Peer>;
+//# sourceMappingURL=index.d.ts.map

package/dist/peer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/peer/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EAGf,KAAK,iBAAiB,EAOtB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAuB,eAAe,EAAE,aAAa,EAA4B,MAAM,aAAa,CAAC;AA0BjH,MAAM,WAAW,WAAW;IAC1B,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,6CAA6C;IAC7C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,2GAA2G;IAC3G,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,IAAI;IACnB,cAAc;IACd,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,0BAA0B;IAC1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,2BAA2B;IAC3B,YAAY,IAAI,YAAY,EAAE,CAAC;IAC/B,4BAA4B;IAC5B,SAAS,IAAI,eAAe,CAAC;CAC9B;AA4OD;;GAEG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpE"}

package/dist/peer/index.js

@@ -0,0 +1,234 @@
+/**
+ * Peer Module
+ *
+ * Transport-agnostic peer implementation for bidirectional RPC.
+ */
+import { ProcedureServer, HttpServerTransport, WebSocketServerTransport, PROCEDURE_REGISTRY, rpcServerUrlStrategy, defaultServerUrlStrategy, defaultUrlPattern, procedureServerOptions, } from "@procedures/client";
+import { bearerToken, hostAllowed, originAllowed, tokenMatches } from "./security.js";
+/**
+ * URL strategy that matches the client's defaultUrlPattern
+ * Maps: POST /api/server/status → { service: "server", operation: "status" }
+ */
+function patternUrlStrategy(req) {
+    const basePath = "/api";
+    let path = req.path;
+    // Remove base path prefix if present
+    if (path.startsWith(basePath)) {
+        path = path.slice(basePath.length);
+    }
+    // Use the client's defaultUrlPattern parser
+    // Cast method to expected type (parser doesn't actually use it for this pattern)
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return defaultUrlPattern.parse(path, req.method.toUpperCase());
+}
+// =============================================================================
+// Implementation
+// =============================================================================
+class PeerImpl {
+    id;
+    server;
+    transports;
+    endpoints = [];
+    started = false;
+    registry;
+    startTime = Date.now();
+    /** The browser checks of the policy (an origin rule here replaces the peer's own rule). */
+    browser;
+    constructor(options) {
+        this.id = options.id;
+        const policy = options.policy;
+        // The policy's token goes to each network transport that has none of its own
+        this.transports = options.transports.map((transport) => transport.type === "local" || policy?.token === undefined || transport.token !== undefined
+            ? transport
+            : { ...transport, token: policy.token });
+        this.registry = options.registry ?? PROCEDURE_REGISTRY;
+        this.browser = policy?.browser ?? {};
+        // Create procedure server
+        this.server = new ProcedureServer({
+            ...(policy ? procedureServerOptions(policy, this.registry) : {}),
+            autoRegister: options.autoRegister ?? true,
+            registry: this.registry,
+            ...(options.expose ? { expose: options.expose } : {}),
+        });
+    }
+    async start() {
+        if (this.started)
+            return;
+        try {
+            for (const transport of this.transports) {
+                await this.startTransport(transport);
+            }
+        }
+        catch (error) {
+            // Stop the transports that started, so a failed start leaves no port open
+            await this.server.stop().catch(() => { });
+            this.endpoints = [];
+            throw error;
+        }
+        this.started = true;
+    }
+    async startTransport(config) {
+        switch (config.type) {
+            case "http":
+                await this.startHttpTransport(config);
+                break;
+            case "websocket":
+                await this.startWebSocketTransport(config);
+                break;
+            case "local":
+                // Local transport doesn't need network setup
+                this.endpoints.push({
+                    type: "local",
+                    address: "local://in-process",
+                });
+                break;
+        }
+    }
+    async startHttpTransport(config) {
+        // Dynamic import to avoid bundling express if not used
+        const express = (await import("express")).default;
+        const app = express();
+        app.use(express.json());
+        const port = config.port ?? 3000;
+        // Loopback by default so the full procedure registry (incl. shell.run / fs.write) is not
+        // served unauthenticated on all interfaces. Pass host: "0.0.0.0" to expose on the LAN
+        // deliberately. See documentation/BUGS-2026-07.md (H19).
+        const host = config.host ?? "127.0.0.1";
+        const basePath = config.basePath ?? "/api";
+        // Host, origin and token checks (deep dive TRN-1, CLI-1, CLI-2). The health endpoints need no
+        // token: a client uses them to check that a lockfile's server is alive.
+        app.use((req, res, next) => {
+            if (!hostAllowed(host, req.headers.host) || !originAllowed(req.headers.origin, config.corsOrigins)) {
+                res.status(403).json({ error: "Forbidden: the host or the origin is not allowed", code: "FORBIDDEN" });
+                return;
+            }
+            const isHealth = req.path === "/health" || req.path === `${basePath}/health`;
+            if (!isHealth && req.method !== "OPTIONS" && !tokenMatches(config.token, bearerToken(req.headers.authorization))) {
+                res.status(401).json({ error: "Unauthorized: this server requires its token", code: "UNAUTHORIZED" });
+                return;
+            }
+            next();
+        });
+        // Health endpoint for container orchestration
+        app.get(`${basePath}/health`, (_req, res) => {
+            const procedureCount = this.registry.getAll().filter((p) => p.handler).length;
+            res.json({
+                status: "ok",
+                uptime: Date.now() - this.startTime,
+                procedures: procedureCount,
+                peerId: this.id,
+            });
+        });
+        // Also add at root /health for convenience
+        app.get("/health", (_req, res) => {
+            const procedureCount = this.registry.getAll().filter((p) => p.handler).length;
+            res.json({
+                status: "ok",
+                uptime: Date.now() - this.startTime,
+                procedures: procedureCount,
+                peerId: this.id,
+            });
+        });
+        // Select URL strategy based on config
+        // Default to patternUrlStrategy which matches the client's defaultUrlPattern
+        const urlStrategy = config.urlStrategy === "rpc"
+            ? rpcServerUrlStrategy
+            : config.urlStrategy === "rest"
+                ? defaultServerUrlStrategy
+                : patternUrlStrategy;
+        const httpTransport = new HttpServerTransport(this.server, {
+            app,
+            port,
+            host,
+            basePath,
+            // Off by default: before, every peer sent Access-Control-Allow-Origin: * (deep dive CLI-2)
+            cors: config.cors ?? false,
+            urlStrategy,
+            // The transport's browser checks follow the peer's rule: loopback origins and the listed
+            // ones (the token is required in any case). The RESTful strategy calls by GET.
+            allowedOrigins: this.browser.allowedOrigins ?? ((origin) => originAllowed(origin, config.corsOrigins)),
+            ...(this.browser.allowedHosts ? { allowedHosts: this.browser.allowedHosts } : {}),
+            allowGet: this.browser.allowGet ?? config.urlStrategy === "rest",
+        });
+        this.server.addTransport(httpTransport);
+        await httpTransport.start();
+        this.endpoints.push({
+            type: "http",
+            address: `http://${host === "0.0.0.0" ? "localhost" : host}:${port}${basePath}`,
+        });
+    }
+    async startWebSocketTransport(config) {
+        // WebSocket transport requires an HTTP server to attach to
+        // For standalone WebSocket, we create an HTTP server first
+        const { createServer } = await import("http");
+        const port = config.port ?? 3001;
+        // Loopback by default so the full procedure registry (incl. shell.run / fs.write) is not
+        // served unauthenticated on all interfaces. Pass host: "0.0.0.0" to expose on the LAN
+        // deliberately. See documentation/BUGS-2026-07.md (H19).
+        const host = config.host ?? "127.0.0.1";
+        const path = config.path ?? "/ws";
+        const httpServer = createServer();
+        // Listen first, then attach the WebSocket server. A listen error (EADDRINUSE, EACCES) rejects:
+        // before, the error had no listener, so the process ended with an unhandled 'error' event
+        // (deep dive CLI-16).
+        await new Promise((resolve, reject) => {
+            const onError = (error) => {
+                reject(new Error(`The WebSocket server cannot listen on ${host}:${port}: ${error.message}`));
+            };
+            httpServer.once("error", onError);
+            httpServer.listen(port, host, () => {
+                httpServer.off("error", onError);
+                resolve();
+            });
+        });
+        const wsTransport = new WebSocketServerTransport(this.server, {
+            server: httpServer,
+            path,
+            allowedOrigins: this.browser.allowedOrigins ?? ((origin) => originAllowed(origin, config.origins)),
+            ...(this.browser.allowedHosts ? { allowedHosts: this.browser.allowedHosts } : {}),
+            // Host, origin and token checks: before, any web page could open a connection and call
+            // procedures (cross-site WebSocket hijacking, deep dive TRN-1)
+            authenticate: (req) => {
+                const token = new URL(req.url ?? "/", "http://localhost").searchParams.get("token") ?? bearerToken(req.headers.authorization);
+                return (hostAllowed(host, req.headers.host) &&
+                    originAllowed(req.headers.origin, config.origins) &&
+                    tokenMatches(config.token, token));
+            },
+        });
+        this.server.addTransport(wsTransport);
+        try {
+            await wsTransport.start();
+        }
+        catch (error) {
+            httpServer.close();
+            throw error;
+        }
+        this.endpoints.push({
+            type: "websocket",
+            address: `ws://${host === "0.0.0.0" ? "localhost" : host}:${port}${path}`,
+        });
+    }
+    async stop() {
+        if (!this.started)
+            return;
+        await this.server.stop();
+        this.started = false;
+        this.endpoints = [];
+    }
+    getEndpoints() {
+        return [...this.endpoints];
+    }
+    getServer() {
+        return this.server;
+    }
+}
+// =============================================================================
+// Factory
+// =============================================================================
+/**
+ * Create a new peer instance
+ */
+export async function createPeer(options) {
+    return new PeerImpl(options);
+}
+//# sourceMappingURL=index.js.map

package/dist/peer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/peer/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EAExB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,GAIvB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEtF;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC;IACxB,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAEpB,qCAAqC;IACrC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,4CAA4C;IAC5C,iFAAiF;IACjF,8DAA8D;IAC9D,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,EAAS,CAAC,CAAC;AACxE,CAAC;AA2CD,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,QAAQ;IACH,EAAE,CAAS;IACZ,MAAM,CAAkB;IACxB,UAAU,CAAoB;IAC9B,SAAS,GAAmB,EAAE,CAAC;IAC/B,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,CAAoB;IAC5B,SAAS,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvC,2FAA2F;IACnF,OAAO,CAAsB;IAErC,YAAY,OAAoB;QAC9B,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,6EAA6E;QAC7E,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACrD,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;YACxF,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAC1C,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QAErC,0BAA0B;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;YAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAEzB,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxC,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAuB;QAClD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,MAAM;gBACT,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACtC,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM;YACR,KAAK,OAAO;gBACV,6CAA6C;gBAC7C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,oBAAoB;iBAC9B,CAAC,CAAC;gBACH,MAAM;QACV,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,MAA2B;QAC1D,uDAAuD;QACvD,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAElD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAExB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;QACjC,yFAAyF;QACzF,sFAAsF;QACtF,yDAAyD;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;QAE3C,8FAA8F;QAC9F,wEAAwE;QACxE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACzB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,QAAQ,SAAS,CAAC;YAC7E,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;gBACjH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8CAA8C,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;gBACtG,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QAEH,8CAA8C;QAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;gBACnC,UAAU,EAAE,cAAc;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,2CAA2C;QAC3C,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC/B,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;gBACnC,UAAU,EAAE,cAAc;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,sCAAsC;QACtC,6EAA6E;QAC7E,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,KAAK;YAC9C,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,MAAM;gBAC7B,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,kBAAkB,CAAC;QAEzB,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE;YACzD,GAAG;YACH,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,2FAA2F;YAC3F,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,KAAK;YAC1B,WAAW;YACX,yFAAyF;YACzF,+EAA+E;YAC/E,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACtG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM;SACjE,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;QAE5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,UAAU,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,GAAG,QAAQ,EAAE;SAChF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,MAAgC;QACpE,2DAA2D;QAC3D,2DAA2D;QAC3D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAE9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;QACjC,yFAAyF;QACzF,sFAAsF;QACtF,yDAAyD;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC;QAElC,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;QAElC,+FAA+F;QAC/F,0FAA0F;QAC1F,sBAAsB;QACtB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE;gBACrC,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/F,CAAC,CAAC;YACF,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBACjC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE;YAC5D,MAAM,EAAE,UAAU;YAClB,IAAI;YACJ,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAClG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,uFAAuF;YACvF,+DAA+D;YAC/D,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC9H,OAAO,CACL,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;oBACnC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACjD,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAClC,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,QAAQ,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAoB;IACnD,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC"}