@tenphi/akno 0.2.0 → 0.4.0

package/dist/commands/service-systemd.js

@@ -0,0 +1,221 @@
+import fs from 'node:fs';
+import net from 'node:net';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { once } from 'node:events';
+import { Hello, PROTOCOL_VERSION } from '@tenphi/akno-protocol';
+function writePrivateFileAtomic(filePath, contents) {
+    const temporaryPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.${randomUUID()}.tmp`);
+    let descriptor;
+    let created = false;
+    try {
+        descriptor = fs.openSync(temporaryPath, 'wx', 0o600);
+        created = true;
+        fs.fchmodSync(descriptor, 0o600);
+        fs.writeFileSync(descriptor, contents);
+        const descriptorToClose = descriptor;
+        descriptor = undefined;
+        fs.closeSync(descriptorToClose);
+        fs.renameSync(temporaryPath, filePath);
+    }
+    catch (error) {
+        if (descriptor !== undefined) {
+            try {
+                fs.closeSync(descriptor);
+            }
+            catch { }
+        }
+        if (created)
+            fs.rmSync(temporaryPath, { force: true });
+        throw error;
+    }
+}
+export function systemdPaths(label, configHome = process.env.XDG_CONFIG_HOME) {
+    const directory = path.join(configHome || path.join(process.env.HOME ?? '', '.config'), 'systemd', 'user');
+    return {
+        directory,
+        service: path.join(directory, `${label}.service`),
+        dreamService: path.join(directory, `${label}.dream.service`),
+        dreamTimer: path.join(directory, `${label}.dream.timer`),
+        healthService: path.join(directory, `${label}.dream-health.service`),
+        healthTimer: path.join(directory, `${label}.dream-health.timer`),
+        target: path.join(directory, `${label}.target.json`),
+    };
+}
+export function systemdUnit(definition, oneshot = false) {
+    const command = [definition.node, definition.script, ...definition.args]
+        .map((value) => systemdQuote(value))
+        .join(' ');
+    const environment = Object.entries(definition.environment ?? {})
+        .map(([name, value]) => `Environment=${systemdQuote(`${name}=${value}`, false)}\n`)
+        .join('');
+    return `[Unit]\nDescription=Akno ${definition.label}\n\n[Service]\nType=${oneshot ? 'oneshot' : 'simple'}\n${environment}ExecStart=${command}\n${oneshot ? '' : 'Restart=always\nRestartSec=1\n'}${oneshot ? '' : '\n[Install]\nWantedBy=default.target\n'}`;
+}
+export function systemdTimer(label, hour, minute) {
+    const time = `${String(hour).padStart(2, '0')}:${String(minute).padStart(2, '0')}:00`;
+    return `[Unit]\nDescription=Schedule ${label}\n\n[Timer]\nOnCalendar=*-*-* ${time}\nPersistent=true\nUnit=${label}.service\n\n[Install]\nWantedBy=timers.target\n`;
+}
+function systemdQuote(value, escapeDollar = true) {
+    if (/[^\t\x20-\x7e]/.test(value))
+        throw new Error('systemd arguments must not contain a control character');
+    // `%` is a systemd specifier. `$` triggers environment expansion only in command lines;
+    // Environment= values preserve it literally, so doubling there would change the selector.
+    let escaped = value.replaceAll('\\', '\\\\').replaceAll('"', '\\"').replaceAll('%', '%%');
+    if (escapeDollar)
+        escaped = escaped.replaceAll('$', () => '$$');
+    return `"${escaped}"`;
+}
+export function systemdInstallPlan(label, dream) {
+    const schedules = [`${label}.dream.timer`, `${label}.dream-health.timer`];
+    return [
+        ...(!dream ? [['disable', '--now', ...schedules]] : []),
+        ['daemon-reload'],
+        ['enable', `${label}.service`],
+        ['restart', `${label}.service`],
+        ...(dream ? [['enable', '--now', ...schedules]] : []),
+    ];
+}
+export async function installSystemdService(options) {
+    const paths = systemdPaths(options.label, options.configHome);
+    const systemctl = options.systemctl ?? defaultSystemctl;
+    fs.mkdirSync(paths.directory, { recursive: true });
+    writePrivateFileAtomic(paths.target, `${JSON.stringify(options.target, null, 2)}\n`);
+    const environment = options.target.configPath ? { AKNO_CONFIG: options.target.configPath } : undefined;
+    fs.writeFileSync(paths.service, systemdUnit({
+        label: options.label,
+        node: options.node,
+        script: options.script,
+        args: options.serviceArgs,
+        environment,
+    }));
+    if (options.dream) {
+        fs.writeFileSync(paths.dreamService, systemdUnit({
+            label: `${options.label}.dream`,
+            node: options.node,
+            script: options.script,
+            args: options.dreamArgs,
+            environment,
+        }, true));
+        fs.writeFileSync(paths.dreamTimer, systemdTimer(`${options.label}.dream`, options.dreamHour, 0));
+        const healthHour = (options.dreamHour + 2) % 24;
+        fs.writeFileSync(paths.healthService, systemdUnit({
+            label: `${options.label}.dream-health`,
+            node: options.node,
+            script: options.script,
+            args: options.healthArgs,
+            environment,
+        }, true));
+        fs.writeFileSync(paths.healthTimer, systemdTimer(`${options.label}.dream-health`, healthHour, 5));
+    }
+    else {
+        disableUnits([
+            [paths.dreamTimer, `${options.label}.dream.timer`],
+            [paths.healthTimer, `${options.label}.dream-health.timer`],
+        ], systemctl);
+        for (const target of [paths.dreamService, paths.dreamTimer, paths.healthService, paths.healthTimer]) {
+            fs.rmSync(target, { force: true });
+        }
+    }
+    const plan = systemdInstallPlan(options.label, options.dream).filter((args) => options.dream || args[0] !== 'disable');
+    const schedule = options.dream ? plan.pop() : undefined;
+    for (const args of plan) {
+        const result = systemctl(args);
+        if (result.status !== 0 && args[0] !== 'disable')
+            throw systemctlError(args, result);
+    }
+    const ready = await (options.waitForReady ?? waitForSocket)(options.socketPath, 30_000);
+    if (!ready)
+        throw new Error(`systemd restarted ${options.label}, but ${options.socketPath} is not ready`);
+    if (schedule) {
+        const result = systemctl(schedule);
+        if (result.status !== 0)
+            throw systemctlError(schedule, result);
+    }
+    return paths;
+}
+export function readSystemdInstallTarget(label, configHome) {
+    try {
+        return JSON.parse(fs.readFileSync(systemdPaths(label, configHome).target, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+export function uninstallSystemdService(label, configHome, systemctl = defaultSystemctl) {
+    const paths = systemdPaths(label, configHome);
+    disableUnits([
+        [paths.service, `${label}.service`],
+        [paths.dreamTimer, `${label}.dream.timer`],
+        [paths.healthTimer, `${label}.dream-health.timer`],
+    ], systemctl);
+    for (const unitPath of Object.values(paths).filter((candidate) => candidate !== paths.directory)) {
+        fs.rmSync(unitPath, { force: true });
+    }
+    const reloaded = systemctl(['daemon-reload']);
+    if (reloaded.status !== 0)
+        throw systemctlError(['daemon-reload'], reloaded);
+    const failed = [`${label}.service`, `${label}.dream.service`, `${label}.dream-health.service`].filter((unit) => systemctl(['is-failed', '--quiet', unit]).status === 0);
+    if (failed.length > 0) {
+        const args = ['reset-failed', ...failed];
+        const result = systemctl(args);
+        if (result.status !== 0)
+            throw systemctlError(args, result);
+    }
+    return paths;
+}
+export function systemdUnitIsActive(unit, systemctl = defaultSystemctl) {
+    return systemctl(['is-active', '--quiet', unit]).status === 0;
+}
+function disableUnits(units, systemctl) {
+    const selected = units
+        .filter(([unitPath, unit]) => fs.existsSync(unitPath) || systemctl(['is-active', '--quiet', unit]).status === 0)
+        .map(([, unit]) => unit);
+    if (selected.length === 0)
+        return;
+    const args = ['disable', '--now', ...selected];
+    const result = systemctl(args);
+    if (result.status !== 0)
+        throw systemctlError(args, result);
+}
+function defaultSystemctl(args) {
+    return spawnSync('systemctl', ['--user', ...args], { encoding: 'utf8' });
+}
+function systemctlError(args, result) {
+    const detail = (result.stderr || result.error?.message || '').trim();
+    return new Error(`systemctl --user ${args.join(' ')} failed (exit ${result.status ?? 'unknown'})${detail ? `: ${detail}` : ''}`);
+}
+export function isCompatibleAknoHello(line) {
+    try {
+        const hello = Hello.safeParse(JSON.parse(line.trim()));
+        return hello.success && hello.data.protocol === PROTOCOL_VERSION;
+    }
+    catch {
+        return false;
+    }
+}
+export async function aknoSocketIsReady(socketPath) {
+    const socket = net.createConnection(socketPath);
+    socket.setEncoding('utf8');
+    try {
+        await once(socket, 'connect', { signal: AbortSignal.timeout(500) });
+        const [chunk] = (await once(socket, 'data', { signal: AbortSignal.timeout(500) }));
+        return isCompatibleAknoHello(chunk.split('\n')[0] ?? '');
+    }
+    catch {
+        return false;
+    }
+    finally {
+        socket.destroy();
+    }
+}
+async function waitForSocket(socketPath, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (await aknoSocketIsReady(socketPath))
+            return true;
+        await new Promise((resolve) => setTimeout(resolve, 200));
+    }
+    return false;
+}
+//# sourceMappingURL=service-systemd.js.map

package/dist/commands/service-systemd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-systemd.js","sourceRoot":"","sources":["../../src/commands/service-systemd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAyB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AA6BhE,SAAS,sBAAsB,CAAC,QAAgB,EAAE,QAAgB;IAChE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3G,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,GAAG,IAAI,CAAC;QACf,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvC,MAAM,iBAAiB,GAAG,UAAU,CAAC;QACrC,UAAU,GAAG,SAAS,CAAC;QACvB,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,IAAI,OAAO;YAAE,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3G,OAAO;QACL,SAAS;QACT,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,CAAC;QACjD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,gBAAgB,CAAC;QAC5D,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,cAAc,CAAC;QACxD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,uBAAuB,CAAC;QACpE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,qBAAqB,CAAC;QAChE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,cAAc,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAoC,EAAE,OAAO,GAAG,KAAK;IAC/E,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC;SACrE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;SACnC,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,eAAe,YAAY,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;SAClF,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,4BAA4B,UAAU,CAAC,KAAK,uBAAuB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,aAAa,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,EAAE,CAAC;AAC/P,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY,EAAE,MAAc;IACtE,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;IACtF,OAAO,gCAAgC,KAAK,iCAAiC,IAAI,2BAA2B,KAAK,iDAAiD,CAAC;AACrK,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,YAAY,GAAG,IAAI;IACtD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5G,wFAAwF;IACxF,0FAA0F;IAC1F,IAAI,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1F,IAAI,YAAY;QAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,IAAI,OAAO,GAAG,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAc;IAC9D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,cAAc,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC,eAAe,CAAC;QACjB,CAAC,QAAQ,EAAE,GAAG,KAAK,UAAU,CAAC;QAC9B,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA8B;IACxE,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,EAAE,CAAC,aAAa,CACd,KAAK,CAAC,OAAO,EACb,WAAW,CAAC;QACV,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,WAAW;QACzB,WAAW;KACZ,CAAC,CACH,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,EAAE,CAAC,aAAa,CACd,KAAK,CAAC,YAAY,EAClB,WAAW,CACT;YACE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,QAAQ;YAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,SAAS;YACvB,WAAW;SACZ,EACD,IAAI,CACL,CACF,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAChD,EAAE,CAAC,aAAa,CACd,KAAK,CAAC,aAAa,EACnB,WAAW,CACT;YACE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,eAAe;YACtC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,UAAU;YACxB,WAAW;SACZ,EACD,IAAI,CACL,CACF,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,KAAK,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,YAAY,CACV;YACE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,cAAc,CAAC;YAClD,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,qBAAqB,CAAC;SAC3D,EACD,SAAS,CACV,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACpG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAClE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CACjD,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACxF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,UAAU,eAAe,CAAC,CAAC;IAC1G,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,UAAmB;IACzE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CACxC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,UAAmB,EACnB,YAAuB,gBAAgB;IAEvC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9C,YAAY,CACV;QACE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC;QACnC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,cAAc,CAAC;QAC1C,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,qBAAqB,CAAC;KACnD,EACD,SAAS,CACV,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACjG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,cAAc,CAAC,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,GAAG,KAAK,gBAAgB,EAAE,GAAG,KAAK,uBAAuB,CAAC,CAAC,MAAM,CACnG,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CACjE,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,YAAuB,gBAAgB;IACvF,OAAO,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,KAA6C,EAAE,SAAoB;IACvF,MAAM,QAAQ,GAAG,KAAK;SACnB,MAAM,CACL,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CACxG;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClC,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAc;IACtC,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,MAAgC;IACtE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,IAAI,KAAK,CACd,oBAAoB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,MAAM,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,gBAAgB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAa,CAAC;QAC/F,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,SAAiB;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,iBAAiB,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/ops-handle.d.ts

@@ -1,5 +1,5 @@
 import { type Akno, type MaintenanceStatus } from '@tenphi/akno-core';
-import type { CommandName, AknoOps, OpInput, OpName, OpResult } from '@tenphi/akno-protocol';
+import type { CommandName, AknoOps, Hello, OpInput, OpName, OpResult } from '@tenphi/akno-protocol';
 export interface OpsHandle {
     /**
      * The named ops, plus the dynamic `call` both sides implement — a door that dispatches by
@@ -12,6 +12,8 @@ export interface OpsHandle {
     /** Set when the ops run in-process, for commands that need more than the ops. */
     akno: Akno | null;
     via: 'socket' | 'in-process';
+    /** Service handshake, including door policy. Null for an in-process handle. */
+    hello: Hello | null;
     close(): Promise<void>;
 }
 export interface MaintenanceWaitUpdate {

package/dist/ops-handle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops-handle.d.ts","sourceRoot":"","sources":["../src/ops-handle.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+B,KAAK,IAAI,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAG7F,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,GAAG,EAAE,OAAO,GAAG;QAAE,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;IAC1F,iFAAiF;IACjF,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,GAAG,EAAE,QAAQ,GAAG,YAAY,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,QAAQ,GAAG,YAAY,CAAC;IAC7B,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EAC7C,WAAW,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACrD,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;CAAO,GACnE,OAAO,CAAC,SAAS,CAAC,CA2CpB;AAmED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EAC7C,WAAW,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACrD,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EACrC,OAAO,GAAE;IACP,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;CACjB,GACL,OAAO,CAAC,CAAC,CAAC,CA+CZ"}
+{"version":3,"file":"ops-handle.d.ts","sourceRoot":"","sources":["../src/ops-handle.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+B,KAAK,IAAI,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAGpG,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,GAAG,EAAE,OAAO,GAAG;QAAE,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;IAC1F,iFAAiF;IACjF,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,GAAG,EAAE,QAAQ,GAAG,YAAY,CAAC;IAC7B,+EAA+E;IAC/E,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,QAAQ,GAAG,YAAY,CAAC;IAC7B,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EAC7C,WAAW,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACrD,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;CAAO,GACnE,OAAO,CAAC,SAAS,CAAC,CA6CpB;AAmED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EAC7C,WAAW,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACrD,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EACrC,OAAO,GAAE;IACP,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;CACjB,GACL,OAAO,CAAC,CAAC,CAAC,CA+CZ"}

package/dist/ops-handle.js

@@ -31,6 +31,7 @@ export async function resolveOps(values, openOptions, options = {}) {
                 ops: client,
                 akno: null,
                 via: 'socket',
+                hello: client.hello,
                 close: () => client.close(),
             };
         }
@@ -57,6 +58,7 @@ export async function resolveOps(values, openOptions, options = {}) {
         ops: akno,
         akno,
         via: 'in-process',
+        hello: null,
         close: () => akno.close(),
     };
 }

package/dist/ops-handle.js.map

@@ -1 +1 @@
-{"version":3,"file":"ops-handle.js","sourceRoot":"","sources":["../src/ops-handle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAqC,MAAM,mBAAmB,CAAC;AAEnG,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAqBpC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAA6C,EAC7C,WAAqD,EACrD,UAAkE,EAAE;IAEpE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAErC,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE;gBAC3C,wFAAwF;gBACxF,qFAAqF;gBACrF,0DAA0D;gBAC1D,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,EAAE,MAAM;gBACX,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,MAAM,KAAK,CAAC;YAChE,mEAAmE;YACnE,uCAAuC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,kCAAkC,CAAC,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,4FAA4F;IAC5F,wBAAwB;IACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;QACtB,GAAG,WAAW;QACd,QAAQ,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;QAChC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;IACH,OAAO;QACL,GAAG,EAAE,IAAI;QACT,IAAI;QACJ,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;KAC1B,CAAC;AACJ,CAAC;AAOD,SAAS,aAAa,CACpB,MAA6B,EAC7B,WAAqD;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2FAA2F;QAC3F,4FAA4F;QAC5F,6FAA6F;QAC7F,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,WAAqD;IACpF,OAAO,OAAO,CACZ,WAAW,CAAC,QAAQ;QACpB,WAAW,CAAC,QAAQ;QACpB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,SAAS;QACrB,OAAO,CAAC,GAAG,CAAC,cAAc,CAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAqB,EACrB,UAAiD,EAAE;IAEnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,IACE,MAAM,CAAC,gBAAgB;YACvB,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAC9E,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,UAAU,EACV,kBAAkB,MAAM,CAAC,UAAU,WAAW,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ;gBAC1E,GAAG,MAAM,CAAC,gBAAgB,+DAA+D,EAC3F,EAAE,MAAM,EAAE,yBAAyB,EAAE,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAoB,EACpB,KAA8B,EAC9B,MAA6C,EAC7C,WAAqD,EACrD,SAAqC,EACrC,UAKI,EAAE;IAEN,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAErC,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,UAAU,IAAI,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,MAAM,eAAe,CAC1B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAe,EAC5C,QAAQ,EACR,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAsB,EACrF,OAAO,CACR,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,wFAAwF;YACxF,yFAAyF;YACzF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,MAAM,KAAK,CAAC;YAC9C,sFAAsF;YACtF,4DAA4D;YAC5D,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,KAAK,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,wBAAwB,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IAED,8GAA8G;IAC9G,8DAA8D;IAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAC1B,SAAS,CAAC,IAAI,CAAC,EACf,YAAY,EACZ,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EACpC,OAAO,CACR,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAgB,EAChB,GAAiC,EACjC,UAA4C,EAC5C,OAGC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,OAAO,IAAI,OAAO;YAAE,OAAO;QAC/B,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,MAAM,GAA6B,IAAI,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACtF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}
+{"version":3,"file":"ops-handle.js","sourceRoot":"","sources":["../src/ops-handle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAqC,MAAM,mBAAmB,CAAC;AAEnG,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAuBpC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAA6C,EAC7C,WAAqD,EACrD,UAAkE,EAAE;IAEpE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAErC,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE;gBAC3C,wFAAwF;gBACxF,qFAAqF;gBACrF,0DAA0D;gBAC1D,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,EAAE,MAAM;gBACX,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,MAAM,KAAK,CAAC;YAChE,mEAAmE;YACnE,uCAAuC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,kCAAkC,CAAC,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,4FAA4F;IAC5F,wBAAwB;IACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;QACtB,GAAG,WAAW;QACd,QAAQ,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;QAChC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;IACH,OAAO;QACL,GAAG,EAAE,IAAI;QACT,IAAI;QACJ,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;KAC1B,CAAC;AACJ,CAAC;AAOD,SAAS,aAAa,CACpB,MAA6B,EAC7B,WAAqD;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2FAA2F;QAC3F,4FAA4F;QAC5F,6FAA6F;QAC7F,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,WAAqD;IACpF,OAAO,OAAO,CACZ,WAAW,CAAC,QAAQ;QACpB,WAAW,CAAC,QAAQ;QACpB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,SAAS;QACrB,OAAO,CAAC,GAAG,CAAC,cAAc,CAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAqB,EACrB,UAAiD,EAAE;IAEnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,IACE,MAAM,CAAC,gBAAgB;YACvB,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAC9E,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,UAAU,EACV,kBAAkB,MAAM,CAAC,UAAU,WAAW,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ;gBAC1E,GAAG,MAAM,CAAC,gBAAgB,+DAA+D,EAC3F,EAAE,MAAM,EAAE,yBAAyB,EAAE,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAoB,EACpB,KAA8B,EAC9B,MAA6C,EAC7C,WAAqD,EACrD,SAAqC,EACrC,UAKI,EAAE;IAEN,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAErC,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,UAAU,IAAI,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,MAAM,eAAe,CAC1B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAe,EAC5C,QAAQ,EACR,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAsB,EACrF,OAAO,CACR,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,wFAAwF;YACxF,yFAAyF;YACzF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,MAAM,KAAK,CAAC;YAC9C,sFAAsF;YACtF,4DAA4D;YAC5D,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,KAAK,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,wBAAwB,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IAED,8GAA8G;IAC9G,8DAA8D;IAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAC1B,SAAS,CAAC,IAAI,CAAC,EACf,YAAY,EACZ,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EACpC,OAAO,CACR,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAgB,EAChB,GAAiC,EACjC,UAA4C,EAC5C,OAGC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,OAAO,IAAI,OAAO;YAAE,OAAO;QAC/B,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,MAAM,GAA6B,IAAI,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACtF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/serve/http.d.ts

@@ -1,19 +1,28 @@
 import type { Akno } from '@tenphi/akno-core';
 export interface HttpServer {
     readonly address: string;
+    readonly loopback: boolean;
     close(): Promise<void>;
 }
-/**
- * For agents in containers or on another host: Akno runs on the host and
- * the agent reaches it over the network, so the knowledge base and the index never
- * need to be mounted into a sandbox — which also keeps the single-writer property
- * that makes WAL concurrency safe.
- *
- * Binds loopback unless told otherwise, and says so loudly if not: this door has
- * no authentication of its own and is meant to sit behind one.
- */
-export declare function serveHttp(akno: Akno, address: string, options?: {
+interface HttpIdentity {
+    name: string;
+    token: string;
+    actor: 'user' | 'agent' | 'akno';
+    allow: string[];
+}
+export interface HttpServerOptions {
+    /** Final door restriction; every public or authenticated policy is intersected with it. */
     allow?: string[];
+    /** Unauthenticated loopback policy. Defaults to registry read operations. */
+    publicAllow?: string[];
+    identities?: HttpIdentity[];
     log?: (message: string) => void;
-}): Promise<HttpServer>;
+}
+/**
+ * HTTP is the network-facing door. Loopback callers get a read-only public policy;
+ * authenticated callers get the actor and operation set owned by their credential.
+ * A request header can never promote either one.
+ */
+export declare function serveHttp(akno: Akno, address: string, options?: HttpServerOptions): Promise<HttpServer>;
+export {};
 //# sourceMappingURL=http.d.ts.map

package/dist/serve/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/serve/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAG9C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAClE,OAAO,CAAC,UAAU,CAAC,CAyBrB"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/serve/http.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAG9C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAQD;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,UAAU,CAAC,CA0DrB"}

package/dist/serve/http.js

@@ -1,23 +1,38 @@
+import { createHash, timingSafeEqual } from 'node:crypto';
 import http from 'node:http';
+import { isIP } from 'node:net';
 import { AknoError, OPS, PROTOCOL_VERSION, isOpName } from '@tenphi/akno-protocol';
 import { AKNO_VERSION } from "../version.js";
 /**
- * For agents in containers or on another host: Akno runs on the host and
- * the agent reaches it over the network, so the knowledge base and the index never
- * need to be mounted into a sandbox — which also keeps the single-writer property
- * that makes WAL concurrency safe.
- *
- * Binds loopback unless told otherwise, and says so loudly if not: this door has
- * no authentication of its own and is meant to sit behind one.
+ * HTTP is the network-facing door. Loopback callers get a read-only public policy;
+ * authenticated callers get the actor and operation set owned by their credential.
+ * A request header can never promote either one.
  */
 export async function serveHttp(akno, address, options = {}) {
     const [host, portText] = splitAddress(address);
     const port = Number(portText);
-    if (!Number.isInteger(port) || port <= 0) {
+    if (!/^\d+$/.test(portText) || !Number.isInteger(port) || port < 0 || port > 65_535) {
         throw new AknoError('invalid', `not a valid host:port — ${address}`);
     }
+    const identities = (options.identities ?? []).map((identity) => ({
+        ...identity,
+        digest: tokenDigest(identity.token),
+        allow: allowedOps(identity.allow, options.allow),
+    }));
+    if (!isLoopback(host) && identities.length === 0) {
+        throw new AknoError('forbidden', `HTTP cannot bind ${host} without a configured bearer identity in server.http_access`, { reason: 'http_auth_required' });
+    }
+    ensureDistinctCredentials(identities);
+    const loopbackTarget = isLoopback(host);
+    const publicOps = loopbackTarget
+        ? allowedOps(options.publicAllow ?? readOps(), options.allow).filter((name) => OPS[name].kind === 'read')
+        : [];
     const server = http.createServer((request, response) => {
-        void route(request, response, akno, options);
+        void route(request, response, akno, {
+            publicOps,
+            identities,
+            log: options.log,
+        });
     });
     await new Promise((resolve, reject) => {
         server.once('error', reject);
@@ -26,8 +41,19 @@ export async function serveHttp(akno, address, options = {}) {
             resolve();
         });
     });
+    const bound = server.address();
+    const actualHost = typeof bound === 'object' && bound ? bound.address : host;
+    const actualPort = typeof bound === 'object' && bound ? bound.port : port;
+    const loopback = isLoopback(actualHost);
+    if (loopbackTarget && !loopback) {
+        await new Promise((resolve) => server.close(() => resolve()));
+        throw new AknoError('forbidden', `HTTP loopback name ${host} resolved to non-loopback ${actualHost}`, {
+            reason: 'http_auth_required',
+        });
+    }
     return {
-        address: `${host}:${port}`,
+        address: formatAddress(actualHost, actualPort),
+        loopback,
         async close() {
             await new Promise((resolve) => server.close(() => resolve()));
         },
@@ -35,22 +61,40 @@ export async function serveHttp(akno, address, options = {}) {
 }
 async function route(request, response, akno, options) {
     const url = new URL(request.url ?? '/', 'http://localhost');
+    if (url.pathname === '/health') {
+        send(response, 200, { ok: true, writable: akno.writable });
+        return;
+    }
+    let access;
+    try {
+        if (request.headers['x-akno-actor'] !== undefined) {
+            throw new AknoError('forbidden', 'HTTP callers cannot declare an actor', {
+                reason: 'server_owned_actor',
+            });
+        }
+        access = authenticate(request, options.publicOps, options.identities);
+    }
+    catch (error) {
+        const denied = AknoError.from(error);
+        const unauthorized = denied.details?.reason === 'invalid_http_credential';
+        send(response, unauthorized ? 401 : statusFor(denied.code), {
+            ok: false,
+            error: denied.toJSON(),
+        });
+        return;
+    }
     if (url.pathname === '/hello') {
         const hello = {
             hello: 'akno',
             protocol: PROTOCOL_VERSION,
             version: AKNO_VERSION,
-            writable: akno.writable,
+            writable: akno.writable && access.ops.some((op) => OPS[op].kind === 'write'),
             akno_path: akno.config.aknoPath,
-            ops: options.allow ?? Object.keys(OPS),
+            ops: access.ops,
         };
         send(response, 200, hello);
         return;
     }
-    if (url.pathname === '/health') {
-        send(response, 200, { ok: true, writable: akno.writable });
-        return;
-    }
     const match = /^\/op\/([a-z_]+)$/.exec(url.pathname);
     if (!match || request.method !== 'POST') {
         send(response, 404, { ok: false, error: { code: 'not_found', message: 'POST /op/<name>' } });
@@ -60,26 +104,70 @@ async function route(request, response, akno, options) {
     try {
         if (!isOpName(op))
             throw new AknoError('invalid', `unknown op: ${op}`);
-        if (options.allow && !options.allow.includes(op)) {
-            throw new AknoError('forbidden', `${op} is not allowed on this door`);
+        if (!access.ops.includes(op)) {
+            throw new AknoError('forbidden', `${op} is not allowed for this HTTP identity`);
         }
         const input = await readJson(request);
-        // A header rather than a field in the body: `actor` is about the caller, not the op, and putting
-        // it in the JSON would collide the day an op wants a field of that name.
-        const declared = request.headers['x-akno-actor'];
-        const actor = declared === 'user' || declared === 'agent' || declared === 'akno' ? declared : undefined;
         const started = performance.now();
-        const result = await akno.call(op, input, actor ? { actor } : {});
-        options.log?.(`${op} ${(performance.now() - started).toFixed(1)}ms`);
+        const result = await akno.call(op, input, { actor: access.actor });
+        options.log?.(`${op} ${access.identity} ${(performance.now() - started).toFixed(1)}ms`);
         send(response, 200, { ok: true, result });
     }
-    catch (err) {
-        const error = AknoError.from(err);
-        options.log?.(`${op} ${error.code}: ${error.message}`);
-        send(response, statusFor(error.code), { ok: false, error: error.toJSON() });
+    catch (error) {
+        const failed = AknoError.from(error);
+        options.log?.(`${op} ${access.identity} ${failed.code}: ${failed.message}`);
+        send(response, statusFor(failed.code), { ok: false, error: failed.toJSON() });
     }
 }
-/** HTTP status codes chosen so a proxy or a dashboard reads them correctly. */
+function authenticate(request, publicOps, identities) {
+    const authorization = request.headers.authorization;
+    if (authorization === undefined) {
+        if (publicOps.length === 0) {
+            throw new AknoError('forbidden', 'HTTP bearer credential required', {
+                reason: 'invalid_http_credential',
+            });
+        }
+        return { actor: 'agent', ops: publicOps, identity: 'public' };
+    }
+    const match = /^Bearer ([^\s]+)$/.exec(authorization);
+    const candidate = tokenDigest(match?.[1] ?? '');
+    let selected = null;
+    // Evaluate every fixed-size digest. Authentication time does not reveal which entry matched.
+    for (const identity of identities) {
+        if (timingSafeEqual(candidate, identity.digest))
+            selected = identity;
+    }
+    if (!match || !selected) {
+        throw new AknoError('forbidden', 'HTTP bearer credential rejected', {
+            reason: 'invalid_http_credential',
+        });
+    }
+    return {
+        actor: selected.actor,
+        ops: selected.allow,
+        identity: selected.name,
+    };
+}
+function tokenDigest(value) {
+    return createHash('sha256').update(value).digest();
+}
+function ensureDistinctCredentials(identities) {
+    for (let left = 0; left < identities.length; left++) {
+        for (let right = left + 1; right < identities.length; right++) {
+            if (timingSafeEqual(identities[left].digest, identities[right].digest)) {
+                throw new AknoError('invalid', 'server.http_access contains duplicate bearer credentials');
+            }
+        }
+    }
+}
+function readOps() {
+    return Object.keys(OPS).filter((name) => OPS[name].kind === 'read');
+}
+function allowedOps(policy, door) {
+    const restriction = door ? new Set(door) : null;
+    return [...new Set(policy)].filter((name) => isOpName(name) && (!restriction || restriction.has(name)));
+}
+/** HTTP status codes chosen so a proxy or dashboard reads them correctly. */
 function statusFor(code) {
     switch (code) {
         case 'invalid':
@@ -90,6 +178,7 @@ function statusFor(code) {
             return 404;
         case 'read_only':
         case 'busy':
+        case 'conflict':
             return 409;
         case 'not_implemented':
             return 501;
@@ -112,7 +201,6 @@ async function readJson(request) {
     let bytes = 0;
     for await (const chunk of request) {
         bytes += chunk.length;
-        // A 4 MB cap: `remember` takes a transcript, not a corpus.
         if (bytes > 4 * 1024 * 1024)
             throw new AknoError('invalid', 'request body too large');
         chunks.push(chunk);
@@ -127,9 +215,26 @@ async function readJson(request) {
     }
 }
 function splitAddress(address) {
+    if (address.startsWith('[')) {
+        const bracket = address.indexOf(']');
+        if (bracket < 0 || address[bracket + 1] !== ':')
+            return [address, ''];
+        return [address.slice(1, bracket), address.slice(bracket + 2)];
+    }
     const index = address.lastIndexOf(':');
     if (index === -1)
         return ['127.0.0.1', address];
     return [address.slice(0, index) || '127.0.0.1', address.slice(index + 1)];
 }
+function isLoopback(host) {
+    const normalized = host.toLowerCase();
+    if (normalized === 'localhost' || normalized === '::1')
+        return true;
+    if (isIP(normalized) !== 4)
+        return false;
+    return normalized.split('.')[0] === '127';
+}
+function formatAddress(host, port) {
+    return isIP(host) === 6 ? `[${host}]:${port}` : `${host}:${port}`;
+}
 //# sourceMappingURL=http.js.map