@serfab/cadre-host 1.13.0 → 1.14.0

package/src/server/routes/settings.ts

@@ -1,123 +1,115 @@
-/**
- * /api/settings — host-level settings UI surface.
- *
- * The persisted shape is `host.config.json` (managed by the installer).
- * This route is a thin passthrough plus a write-whitelist:
- *
- *   - uiPort        rejected (restart required; only edit at install time)
- *   - libp2pPort    rejected (restart required)
- *   - upnpEnabled   accepted → also propagated to NatService.putSettings
- *   - updates.autoApply  accepted → propagated to UpdateService.putSettings
- *   - updates.manifestUrl accepted → propagated to UpdateService.putSettings
- *   - anything else 400 invalid_setting
- *
- * GET returns the full `HostConfigFile` (the SPA wants the full shape so it
- * can render a read-only view of the rejected keys).
- */
-
-import type { FastifyInstance } from 'fastify';
-
-import type { NatService } from '../../nat/index.js';
-import type { UpdateService } from '../../update/index.js';
-import type { HostSettingsStore } from '../settings-store.js';
-
-const FORBIDDEN_KEYS = new Set<string>(['uiPort', 'libp2pPort', 'dataDir', 'identityPath', 'installId', 'installedAt', 'installerVersion', 'version', 'ownCadre']);
-
-const WRITABLE_TOP_KEYS = new Set<string>(['upnpEnabled', 'updates']);
-const WRITABLE_UPDATES_KEYS = new Set<string>(['autoApply', 'manifestUrl']);
-
-export interface SettingsRoutesOptions {
-  settingsStore: HostSettingsStore;
-  /**
-   * Present only when the host runs its own personal cadre. In donor-only mode
-   * an `upnpEnabled` write still persists to host.config.json but has no running
-   * NatService to propagate into.
-   */
-  nat?: NatService;
-  update?: UpdateService;
-}
-
-export function registerSettingsRoutes(app: FastifyInstance, opts: SettingsRoutesOptions): void {
-  const { settingsStore, nat, update } = opts;
-
-  app.get('/api/settings', async () => {
-    return { ok: true, data: settingsStore.read() };
-  });
-
-  app.put('/api/settings', async (request, reply) => {
-    const body = (request.body ?? {}) as Record<string, unknown>;
-    const validation = validatePatch(body);
-    if (validation.error) {
-      return reply.code(400).send({
-        ok: false,
-        error: { code: 'invalid_setting', message: validation.error },
-      });
-    }
-
-    const current = settingsStore.read();
-    const patch: { upnpEnabled?: boolean; updates?: typeof current.updates } = {};
-
-    if ('upnpEnabled' in body) {
-      patch.upnpEnabled = body.upnpEnabled as boolean;
-      // Propagate UPnP toggle into the running NatService so the change
-      // takes effect immediately. NatService persists into nat.json — that's
-      // independent of host.config.json's `upnpEnabled` (which the installer
-      // uses on first run to seed nat.json). Update both for consistency.
-      // In donor-only mode there is no NatService — the write still persists.
-      if (nat) {
-        await nat.putSettings({ upnpEnabled: body.upnpEnabled as boolean });
-      }
-    }
-    if ('updates' in body) {
-      const updates = body.updates as { autoApply?: boolean; manifestUrl?: string };
-      const nextUpdates = { ...current.updates };
-      if ('autoApply' in updates) nextUpdates.autoApply = updates.autoApply as boolean;
-      if ('manifestUrl' in updates) nextUpdates.manifestUrl = updates.manifestUrl as string;
-      patch.updates = nextUpdates;
-      if (update) {
-        const propagate: { autoApply?: boolean; manifestUrl?: string } = {};
-        if ('autoApply' in updates) propagate.autoApply = updates.autoApply as boolean;
-        if ('manifestUrl' in updates) propagate.manifestUrl = updates.manifestUrl as string;
-        await update.putSettings(propagate);
-      }
-    }
-
-    const next = settingsStore.update(patch);
-    return { ok: true, data: next };
-  });
-}
-
-function validatePatch(body: Record<string, unknown>): { error?: string } {
-  for (const key of Object.keys(body)) {
-    if (FORBIDDEN_KEYS.has(key)) {
-      return { error: `Setting "${key}" is not editable at runtime; change it in host.config.json and restart cadre-host.` };
-    }
-    if (!WRITABLE_TOP_KEYS.has(key)) {
-      return { error: `Unknown setting "${key}"` };
-    }
-  }
-  if ('upnpEnabled' in body && typeof body.upnpEnabled !== 'boolean') {
-    return { error: '"upnpEnabled" must be a boolean' };
-  }
-  if ('updates' in body) {
-    if (!body.updates || typeof body.updates !== 'object') {
-      return { error: '"updates" must be an object' };
-    }
-    const updates = body.updates as Record<string, unknown>;
-    for (const key of Object.keys(updates)) {
-      if (!WRITABLE_UPDATES_KEYS.has(key)) {
-        return { error: `Unknown setting "updates.${key}"` };
-      }
-    }
-    if ('autoApply' in updates && typeof updates.autoApply !== 'boolean') {
-      return { error: '"updates.autoApply" must be a boolean' };
-    }
-    if (
-      'manifestUrl' in updates &&
-      typeof updates.manifestUrl !== 'string'
-    ) {
-      return { error: '"updates.manifestUrl" must be a string' };
-    }
-  }
-  return {};
-}
+/**
+ * /api/settings — host-level settings UI surface.
+ *
+ * The persisted shape is `host.config.json` (managed by the installer).
+ * This route is a thin passthrough plus a write-whitelist:
+ *
+ *   - uiPort        rejected (restart required; only edit at install time)
+ *   - upnpEnabled   accepted → also propagated to NatService.putSettings
+ *   - updates.autoApply  accepted → propagated to UpdateService.putSettings
+ *   - updates.manifestUrl accepted → propagated to UpdateService.putSettings
+ *   - anything else 400 invalid_setting
+ *
+ * GET returns the full `HostConfigFile` (the SPA wants the full shape so it
+ * can render a read-only view of the rejected keys).
+ */
+
+import type { FastifyInstance } from 'fastify';
+
+import type { NatService } from '../../nat/index.js';
+import type { UpdateService } from '../../update/index.js';
+import type { HostSettingsStore } from '../settings-store.js';
+
+const FORBIDDEN_KEYS = new Set<string>(['uiPort', 'dataDir', 'installId', 'installedAt', 'installerVersion', 'version']);
+
+const WRITABLE_TOP_KEYS = new Set<string>(['upnpEnabled', 'updates']);
+const WRITABLE_UPDATES_KEYS = new Set<string>(['autoApply', 'manifestUrl']);
+
+export interface SettingsRoutesOptions {
+  settingsStore: HostSettingsStore;
+  /** An `upnpEnabled` write takes effect on it at once. */
+  nat: NatService;
+  update?: UpdateService;
+}
+
+export function registerSettingsRoutes(app: FastifyInstance, opts: SettingsRoutesOptions): void {
+  const { settingsStore, nat, update } = opts;
+
+  app.get('/api/settings', async () => {
+    return { ok: true, data: settingsStore.read() };
+  });
+
+  app.put('/api/settings', async (request, reply) => {
+    const body = (request.body ?? {}) as Record<string, unknown>;
+    const validation = validatePatch(body);
+    if (validation.error) {
+      return reply.code(400).send({
+        ok: false,
+        error: { code: 'invalid_setting', message: validation.error },
+      });
+    }
+
+    const current = settingsStore.read();
+    const patch: { upnpEnabled?: boolean; updates?: typeof current.updates } = {};
+
+    if ('upnpEnabled' in body) {
+      patch.upnpEnabled = body.upnpEnabled as boolean;
+      // Propagate the UPnP toggle into the running NatService so the change
+      // takes effect immediately. NatService persists into nat.json — that's
+      // independent of host.config.json's `upnpEnabled` (which the installer
+      // uses on first run to seed nat.json). Update both for consistency.
+      await nat.putSettings({ upnpEnabled: body.upnpEnabled as boolean });
+    }
+    if ('updates' in body) {
+      const updates = body.updates as { autoApply?: boolean; manifestUrl?: string };
+      const nextUpdates = { ...current.updates };
+      if ('autoApply' in updates) nextUpdates.autoApply = updates.autoApply as boolean;
+      if ('manifestUrl' in updates) nextUpdates.manifestUrl = updates.manifestUrl as string;
+      patch.updates = nextUpdates;
+      if (update) {
+        const propagate: { autoApply?: boolean; manifestUrl?: string } = {};
+        if ('autoApply' in updates) propagate.autoApply = updates.autoApply as boolean;
+        if ('manifestUrl' in updates) propagate.manifestUrl = updates.manifestUrl as string;
+        await update.putSettings(propagate);
+      }
+    }
+
+    const next = settingsStore.update(patch);
+    return { ok: true, data: next };
+  });
+}
+
+function validatePatch(body: Record<string, unknown>): { error?: string } {
+  for (const key of Object.keys(body)) {
+    if (FORBIDDEN_KEYS.has(key)) {
+      return { error: `Setting "${key}" is not editable at runtime; change it in host.config.json and restart cadre-host.` };
+    }
+    if (!WRITABLE_TOP_KEYS.has(key)) {
+      return { error: `Unknown setting "${key}"` };
+    }
+  }
+  if ('upnpEnabled' in body && typeof body.upnpEnabled !== 'boolean') {
+    return { error: '"upnpEnabled" must be a boolean' };
+  }
+  if ('updates' in body) {
+    if (!body.updates || typeof body.updates !== 'object') {
+      return { error: '"updates" must be an object' };
+    }
+    const updates = body.updates as Record<string, unknown>;
+    for (const key of Object.keys(updates)) {
+      if (!WRITABLE_UPDATES_KEYS.has(key)) {
+        return { error: `Unknown setting "updates.${key}"` };
+      }
+    }
+    if ('autoApply' in updates && typeof updates.autoApply !== 'boolean') {
+      return { error: '"updates.autoApply" must be a boolean' };
+    }
+    if (
+      'manifestUrl' in updates &&
+      typeof updates.manifestUrl !== 'string'
+    ) {
+      return { error: '"updates.manifestUrl" must be a string' };
+    }
+  }
+  return {};
+}

package/src/server/routes/status.ts

@@ -1,134 +1,102 @@
-/**
- * GET /api/status — aggregated health snapshot used by the SPA's dashboard.
- *
- * All inputs are in-memory subsystem state — no disk reads on each call.
- * The response budget is < 5 ms; favour `getStatus()` over `testReachability()`.
- */
-
-import { readFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import type { FastifyInstance } from 'fastify';
-
-import type { HostProcessOrchestrator } from '../../orchestrator/index.js';
-import type { ManagedNodeInfo } from '../../orchestrator/types.js';
-import type { TrustCircleService } from '../../auth/index.js';
-import type { NatService } from '../../nat/index.js';
-import type { NatStatusSnapshot } from '../../nat/types.js';
-import type { UpdateService } from '../../update/index.js';
-
-const PROCESS_STARTED_AT = process.hrtime.bigint();
-
-/**
- * Which role the running process is in: `'founder'` also runs the host's own
- * cadre (`ownCadre.enabled` at start), `'donor'` only donates nodes.
- */
-export type HostRole = 'founder' | 'donor';
-
-export interface StatusRouteOptions {
-  orchestrator: HostProcessOrchestrator;
-  role: HostRole;
-  /** Present only when the host runs its own personal cadre (`ownCadre.enabled`). */
-  trustCircle?: TrustCircleService;
-  /** Present only when the host runs its own personal cadre (`ownCadre.enabled`). */
-  nat?: NatService;
-  update?: UpdateService;
-}
-
-export interface StatusResponse {
-  service: { name: 'cadre-host'; version: string; uptimeSeconds: number };
-  /**
-   * Decided at start from `ownCadre.enabled` — the running process, not the file
-   * on disk, which may have been edited since without a restart.
-   */
-  role: HostRole;
-  nodes: Array<{
-    id: string;
-    partyId: string;
-    status: ManagedNodeInfo['status'];
-    profile: ManagedNodeInfo['profile'];
-    /** Present (true) only on the host's own owner node; every other node is donated. */
-    owner?: true;
-  }>;
-  /** Omitted in donor-only mode (no host-own trust circle). */
-  trustCircle?: { members: number; pending: number };
-  /** Omitted in donor-only mode (no NAT service). */
-  connectivity?: NatStatusSnapshot;
-  update?: { available?: string; lastChecked?: string };
-}
-
-export function registerStatusRoute(app: FastifyInstance, opts: StatusRouteOptions): void {
-  const version = readPackageVersion();
-
-  app.get('/api/status', async (): Promise<StatusResponse> => {
-    const nodes = opts.orchestrator.listNodes().map((n) => ({
-      id: n.id,
-      partyId: n.partyId,
-      status: n.status,
-      profile: n.profile,
-      ...(n.owner ? { owner: true as const } : {}),
-    }));
-
-    const response: StatusResponse = {
-      service: {
-        name: 'cadre-host',
-        version,
-        uptimeSeconds: secondsSince(PROCESS_STARTED_AT),
-      },
-      role: opts.role,
-      nodes,
-    };
-
-    // Trust-circle + connectivity exist only when the host runs its own
-    // personal cadre; donor-only mode omits both.
-    if (opts.trustCircle) {
-      const tc = await opts.trustCircle.list();
-      response.trustCircle = { members: tc.members.length, pending: tc.pending.length };
-    }
-    if (opts.nat) {
-      response.connectivity = opts.nat.getStatus();
-    }
-
-    if (opts.update) {
-      const state = await opts.update.getState();
-      const update: { available?: string; lastChecked?: string } = {};
-      if (state.available?.version) update.available = state.available.version;
-      if (state.lastChecked) update.lastChecked = state.lastChecked;
-      response.update = update;
-    }
-
-    return response;
-  });
-}
-
-function secondsSince(start: bigint): number {
-  const now = process.hrtime.bigint();
-  const elapsedNs = now - start;
-  return Number(elapsedNs / 1_000_000_000n);
-}
-
-let cachedVersion: string | null = null;
-function readPackageVersion(): string {
-  if (cachedVersion) return cachedVersion;
-  try {
-    // dist/server/routes/status.js -> ../../../package.json
-    // src/server/routes/status.ts  -> ../../../package.json (vitest)
-    const here = dirname(fileURLToPath(import.meta.url));
-    const candidates = [
-      resolve(here, '..', '..', '..', 'package.json'),
-      resolve(here, '..', '..', 'package.json'),
-    ];
-    for (const p of candidates) {
-      try {
-        const parsed = JSON.parse(readFileSync(p, 'utf8')) as { version?: string };
-        if (parsed.version) {
-          cachedVersion = parsed.version;
-          return cachedVersion;
-        }
-      } catch { /* try next */ }
-    }
-  } catch { /* ignore */ }
-  cachedVersion = '0.0.0-unknown';
-  return cachedVersion;
-}
+/**
+ * GET /api/status — aggregated health snapshot used by the SPA's dashboard.
+ *
+ * All inputs are in-memory subsystem state — no disk reads on each call.
+ * The response budget is < 5 ms; favour `getStatus()` over `testReachability()`.
+ */
+
+import { readFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import type { FastifyInstance } from 'fastify';
+
+import type { HostProcessOrchestrator } from '../../orchestrator/index.js';
+import type { ManagedNodeInfo } from '../../orchestrator/types.js';
+import type { NatService } from '../../nat/index.js';
+import type { NatStatusSnapshot } from '../../nat/types.js';
+import type { UpdateService } from '../../update/index.js';
+
+const PROCESS_STARTED_AT = process.hrtime.bigint();
+
+export interface StatusRouteOptions {
+  orchestrator: HostProcessOrchestrator;
+  nat: NatService;
+  update?: UpdateService;
+}
+
+export interface StatusResponse {
+  service: { name: 'cadre-host'; version: string; uptimeSeconds: number };
+  nodes: Array<{
+    id: string;
+    partyId: string;
+    status: ManagedNodeInfo['status'];
+    profile: ManagedNodeInfo['profile'];
+  }>;
+  connectivity: NatStatusSnapshot;
+  update?: { available?: string; lastChecked?: string };
+}
+
+export function registerStatusRoute(app: FastifyInstance, opts: StatusRouteOptions): void {
+  const version = readPackageVersion();
+
+  app.get('/api/status', async (): Promise<StatusResponse> => {
+    const nodes = opts.orchestrator.listNodes().map((n) => ({
+      id: n.id,
+      partyId: n.partyId,
+      status: n.status,
+      profile: n.profile,
+    }));
+
+    const response: StatusResponse = {
+      service: {
+        name: 'cadre-host',
+        version,
+        uptimeSeconds: secondsSince(PROCESS_STARTED_AT),
+      },
+      nodes,
+      connectivity: opts.nat.getStatus(),
+    };
+
+    if (opts.update) {
+      const state = await opts.update.getState();
+      const update: { available?: string; lastChecked?: string } = {};
+      if (state.available?.version) update.available = state.available.version;
+      if (state.lastChecked) update.lastChecked = state.lastChecked;
+      response.update = update;
+    }
+
+    return response;
+  });
+}
+
+function secondsSince(start: bigint): number {
+  const now = process.hrtime.bigint();
+  const elapsedNs = now - start;
+  return Number(elapsedNs / 1_000_000_000n);
+}
+
+let cachedVersion: string | null = null;
+function readPackageVersion(): string {
+  if (cachedVersion) return cachedVersion;
+  try {
+    // dist/server/routes/status.js -> ../../../package.json
+    // src/server/routes/status.ts  -> ../../../package.json (vitest)
+    const here = dirname(fileURLToPath(import.meta.url));
+    const candidates = [
+      resolve(here, '..', '..', '..', 'package.json'),
+      resolve(here, '..', '..', 'package.json'),
+    ];
+    for (const p of candidates) {
+      try {
+        const parsed = JSON.parse(readFileSync(p, 'utf8')) as { version?: string };
+        if (parsed.version) {
+          cachedVersion = parsed.version;
+          return cachedVersion;
+        }
+      } catch { /* try next */ }
+    }
+  } catch { /* ignore */ }
+  cachedVersion = '0.0.0-unknown';
+  return cachedVersion;
+}

package/src/server/server.ts

@@ -124,14 +124,14 @@ export function buildFastify(): FastifyInstance {
  * request with no body (`request.body === undefined`), instead of Fastify's
  * default `400 FST_ERR_CTP_EMPTY_JSON_BODY`.
  *
- * `/grants` is served to other people's clients, and sending the JSON content
- * type on every request, body or not, is a common client habit — the phone app
- * did it, and the refused body-less `DELETE /grants/:id` left the loan and its
- * node running. Every route that reads a body already reads `request.body ?? {}`,
- * so a route that needs a field still answers its own `invalid_request` naming it.
- * A non-empty body goes to Fastify's own parser, so malformed JSON is still a 400
- * and the prototype-poisoning checks are unchanged (`'error'` is Fastify's default
- * for both).
+ * Sending the JSON content type on every request, body or not, is a common
+ * client habit (`POST /api/hosted-nodes` takes no body today, and a body-less
+ * `DELETE` is the norm), and a refused request here is a node left running.
+ * Every route that reads a body already reads `request.body ?? {}`, so a route
+ * that needs a field still answers its own `invalid_request` naming it. A
+ * non-empty body goes to Fastify's own parser, so malformed JSON is still a 400
+ * and the prototype-poisoning checks are unchanged (`'error'` is Fastify's
+ * default for both).
  */
 function acceptEmptyJsonBodies(app: FastifyInstance): void {
   // NOTE: 'error', 'error' mirrors Fastify's defaults for proto/constructor poisoning; if

package/src/server/settings-store.ts

@@ -2,7 +2,7 @@
  * Settings store — read-write facade around `host.config.json` for the
  * /api/settings route.
  *
- * The installer (`6.4.1`) owns the schema (`HostConfigFile` v2). This module
+ * The installer (`6.4.1`) owns the schema (`HostConfigFile` v3). This module
  * just delegates load/persist to that file's helpers; it exists so route
  * handlers can read/write without each one re-resolving `configPath(dataDir)`.
  *
@@ -29,7 +29,7 @@ export class HostSettingsStore {
   // /api/settings answers 500 code "internal" with the read message passed through.
   // Fine while the UI just surfaces the text; if it ever needs to tell "your config
   // file is unreadable" apart from a genuine server bug, give this a typed error.
-  /** Read the current host.config.json. Throws if absent, malformed, or not version 2. */
+  /** Read the current host.config.json. Throws if absent, malformed, or not version 3. */
   read(): HostConfigFile {
     return readHostConfig(this.configPath);
   }

package/src/server/static.ts

@@ -65,7 +65,6 @@ export function registerStaticMount(app: FastifyInstance, opts: StaticMountOptio
     // Don't try to serve API paths as static.
     if (
       request.url.startsWith('/api') ||
-      request.url.startsWith('/auth') ||
       request.url.startsWith('/nat') ||
       request.url.startsWith('/update')
     ) {
@@ -198,7 +197,7 @@ function placeholderHtml(): string {
       <li><span class="endpoint">GET /api/nodes</span></li>
       <li><span class="endpoint">GET /api/settings</span></li>
       <li><span class="endpoint">GET /api/events</span> (Server-Sent Events)</li>
-      <li><span class="endpoint">/auth/*</span>, <span class="endpoint">/nat/*</span>, <span class="endpoint">/update/*</span></li>
+      <li><span class="endpoint">/nat/*</span>, <span class="endpoint">/update/*</span></li>
     </ul>
     <p>See <a href="https://github.com/gotchoices/sereus/blob/master/docs/cadre-host.md">docs/cadre-host.md</a>.</p>
   </body>

package/src/update/index.ts

@@ -305,8 +305,8 @@ export class UpdateService {
 }
 
 /**
- * Typed handler facade — mirrors `createTrustCircleHandlers` /
- * `createNatHandlers`. The local-UI ticket consumes these.
+ * Typed handler facade — same shape as `createNatHandlers`. The local-UI
+ * server consumes these.
  */
 export function createUpdateHandlers(service: UpdateService): UpdateHandlers {
   return {

package/src/update/store.ts

@@ -1,7 +1,7 @@
 /**
  * Atomic JSON store for `<dataDir>/update-state.json`.
  *
- * Mirrors `TrustCircleStore` / `NatStore`: load on demand, write to
+ * Mirrors `NatStore`: load on demand, write to
  * `<path>.tmp` then rename. Single-writer assumption — only one cadre-host
  * process owns a given dataDir.
  */

package/src/update/types.ts

@@ -8,7 +8,7 @@
  *   - apply.ts    — invoke `npm install -g` + rollback on failure.
  *   - index.ts    — composes the above (UpdateService).
  *
- * Mirrors the typed-handler pattern used by trust-circle and NAT (handlers
+ * Mirrors the typed-handler pattern used by NAT (handlers
  * throw `UpdateError` whose `.code` the local-UI maps to HTTP status).
  */
 

package/dist/auth/duration.d.ts

@@ -1 +0,0 @@
-export declare function parseDuration(input: string): number;

package/dist/auth/duration.js

@@ -1,32 +0,0 @@
-/**
- * Tiny duration parser for invite TTLs.
- *
- * Accepts a single value+unit token: `30s`, `5m`, `24h`, `7d`, `2w`.
- * Whitespace is allowed around it. Bare numbers are treated as milliseconds.
- *
- * Returns the duration in milliseconds. Throws on unparseable input.
- */
-const UNIT_MULTIPLIERS = {
-    ms: 1,
-    s: 1000,
-    m: 60 * 1000,
-    h: 60 * 60 * 1000,
-    d: 24 * 60 * 60 * 1000,
-    w: 7 * 24 * 60 * 60 * 1000,
-};
-const DURATION_RE = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d|w)?$/;
-export function parseDuration(input) {
-    const trimmed = input.trim();
-    const match = DURATION_RE.exec(trimmed);
-    if (!match) {
-        throw new Error(`Invalid duration: ${JSON.stringify(input)} (expected e.g. "24h", "7d", "30m")`);
-    }
-    const value = parseFloat(match[1]);
-    const unit = match[2] ?? 'ms';
-    const multiplier = UNIT_MULTIPLIERS[unit];
-    if (multiplier === undefined) {
-        throw new Error(`Unknown duration unit: ${unit}`);
-    }
-    return Math.round(value * multiplier);
-}
-//# sourceMappingURL=duration.js.map

package/dist/auth/duration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"duration.js","sourceRoot":"","sources":["../../src/auth/duration.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAA2B;IAC/C,EAAE,EAAE,CAAC;IACL,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,EAAE,GAAG,IAAI;IACZ,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACjB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACtB,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;CAC3B,CAAC;AAEF,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAE1D,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9B,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC;AACxC,CAAC"}

package/dist/auth/index.d.ts

@@ -1,11 +0,0 @@
-/**
- * Trust-circle auth for cadre-host. See ./trust-circle.ts and ./types.ts.
- */
-export { TrustCircleService, createTrustCircleHandlers, DEFAULT_INVITE_TTL_MS } from './trust-circle.js';
-export type { TrustCircleServiceOptions, CadreNodeLike } from './trust-circle.js';
-export { TrustCircleStore } from './trust-circle-store.js';
-export { ensureSelfLabel, SELF_LABEL } from './self-label.js';
-export type { EnsureSelfLabelOptions } from './self-label.js';
-export { parseDuration } from './duration.js';
-export { TrustCircleError, } from './types.js';
-export type { TrustCircleMember, PendingInvite, TrustCircleFile, TrustCircleSnapshot, TrustCircleHandlers, TrustCircleErrorCode, } from './types.js';