@totemsdk/omnia-host 0.9.0 → 0.11.0

package/dist/chain/totem-node-adapter.js

@@ -38,7 +38,7 @@ function createTotemNodeAdapter(options) {
         getTokensByCreator: (address) => provider.getTokensByCreator(address),
         broadcastTxPoW: (txpowHex) => provider.broadcastTxPoW(txpowHex),
         getMinTxPowWork: () => provider.getMinTxPowWork ? provider.getMinTxPowWork() : Promise.resolve(null),
-        ...(provider.submitTransaction
+        ...(provider.submitTransaction && process.env.OMNIA_CHAIN_NO_TXNMINE !== '1'
             ? { submitTransaction: provider.submitTransaction.bind(provider) }
             : {}),
         async getMode() {

package/dist/cli.js

@@ -1,10 +1,74 @@
 #!/usr/bin/env node
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_path_1 = __importDefault(require("node:path"));
 const index_js_1 = require("./index.js");
+const pairing_js_1 = require("./pairing.js");
 const signing_js_1 = require("./signing.js");
 const identity_js_1 = require("./identity.js");
+const signer_port_js_1 = require("./signer-port.js");
+async function runPair() {
+    const config = (0, index_js_1.loadConfigFromEnv)();
+    const port = Number(process.env.OMNIA_PAIR_PORT ?? 7789);
+    const host = process.env.OMNIA_PAIR_HOST ?? '127.0.0.1';
+    const origins = (process.env.OMNIA_PAIR_ORIGINS ?? '')
+        .split(',')
+        .map((value) => value.trim())
+        .filter(Boolean);
+    const capabilities = {
+        chain: { rpcUrl: config.chainRpcUrl, network: 'minima' },
+        lease: { modes: ['local', 'hybrid'] },
+        ...(config.p2pHubPort
+            ? {
+                p2p: {
+                    hubUrl: `ws://${config.p2pHubHost ?? '127.0.0.1'}:${config.p2pHubPort}`,
+                    scopes: ['p2p.pubsub'],
+                    ...(config.p2pHubTopics ? { topicPrefixes: config.p2pHubTopics } : {}),
+                },
+            }
+            : {}),
+    };
+    const service = (0, pairing_js_1.createPairingService)({
+        storePath: node_path_1.default.join(node_path_1.default.dirname(config.dbPath), 'pairing.json'),
+        endpoint: `http://${host}:${port}`,
+        network: 'minima',
+        capabilities,
+        ...(origins.length ? { allowedOrigins: origins } : {}),
+    });
+    const server = (0, pairing_js_1.createPairingHttpServer)(service, { host, port });
+    const address = await server.listen();
+    const invitation = service.createInvitation();
+    if (process.argv.includes('--json')) {
+        console.log(JSON.stringify({ ...invitation, endpoint: `http://${address.host}:${address.port}` }, null, 2));
+    }
+    else {
+        console.log('');
+        console.log('Pair this node with your Totem extension');
+        console.log('');
+        console.log(`Node:        ${service.nodeId}`);
+        console.log(`Network:     ${service.network}`);
+        console.log(`Fingerprint: ${service.fingerprint}`);
+        console.log(`Endpoint:    http://${address.host}:${address.port}`);
+        console.log(`Expires:     ${new Date(invitation.expiresAt).toISOString()}`);
+        console.log('');
+        console.log(`Code: ${invitation.code}`);
+        console.log('');
+        console.log('Open Totem → Settings → Pair Node and paste the endpoint + code.');
+    }
+    await new Promise((resolve) => {
+        process.once('SIGINT', resolve);
+        process.once('SIGTERM', resolve);
+    });
+    await server.close();
+}
 async function main() {
+    if (process.argv[2] === 'pair') {
+        await runPair();
+        return;
+    }
     const config = (0, index_js_1.loadConfigFromEnv)();
     const signing = config.readOnly || !(0, signing_js_1.hasSigningMaterial)(config)
         ? undefined
@@ -16,6 +80,9 @@ async function main() {
         ? {
             signer: signing.signer,
             leaseProvider: signing.leaseProvider,
+            signerPort: (0, signer_port_js_1.createLocalSignerPort)(signing),
+            transportKeyPair: signing.transportKeyPair,
+            transportPubkey: signing.transportPubkey,
             identity: identityAndManifest?.identity
                 ? {
                     address: signing.address,

package/dist/config.d.ts

@@ -1,3 +1,4 @@
+import type { CustodyMode } from '@totemsdk/omnia';
 export interface OmniaHostConfig {
     port: number;
     host: string;
@@ -5,6 +6,14 @@ export interface OmniaHostConfig {
     chainRpcUrl: string;
     chainRpcPassword?: string;
     analyticsDbPath?: string;
+    /** Durable observation journal DB (default: alongside dbPath). */
+    observeDbPath?: string;
+    /** Observation network id (multi-network deployments). */
+    networkId?: string;
+    /** Stable observation source id (default: localPartyId or "omnia-host"). */
+    sourceNodeId?: string;
+    /** Disable the observation feed entirely (OMNIA_OBSERVE=0). */
+    observeDisabled?: boolean;
     relay?: string;
     localPubkey?: string;
     localPartyId?: string;
@@ -28,6 +37,11 @@ export interface OmniaHostConfig {
     deviceId?: string;
     /** "1" forces read-only mode even with keys present. */
     readOnly: boolean;
+    /**
+     * Deployment custody mode (RFC-058). Defaults to self-custody; hosted custody
+     * is explicit and policy-controlled. This does not change on-chain custody.
+     */
+    custodyMode?: CustodyMode;
     /** Identity file containing a delegated identity claim (operator root → service delegate). */
     identityFile?: string;
     /** EdgeServiceManifest serviceType (default "omnia-router"). */
@@ -42,6 +56,12 @@ export interface OmniaHostConfig {
      * Undefined disables token auth.
      */
     controlToken?: string;
+    /** RFC-062 local P2P hub (optional). One Hyperswarm shared by dapps. */
+    p2pHubPort?: number;
+    p2pHubHost?: string;
+    p2pHubToken?: string;
+    p2pHubOrigins?: string[];
+    p2pHubTopics?: string[];
 }
 /** Load the daemon configuration from the documented OMNIA_* environment. */
 export declare function loadConfigFromEnv(env?: NodeJS.ProcessEnv): OmniaHostConfig;

package/dist/config.js

@@ -35,6 +35,27 @@ function parseOrigins(value) {
         .filter((part) => part.length > 0);
     return parts && parts.length > 0 ? parts : undefined;
 }
+function parseOptionalPort(value, name) {
+    const trimmed = value?.trim();
+    if (!trimmed)
+        return undefined;
+    const port = Number(trimmed);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error(`${name} must be an integer between 1 and 65535; received ${value}`);
+    }
+    return port;
+}
+function parseList(value) {
+    const parts = value?.split(',').map((part) => part.trim()).filter(Boolean);
+    return parts && parts.length > 0 ? parts : undefined;
+}
+function parseCustodyMode(value) {
+    const mode = optional(value) ?? 'self';
+    if (mode !== 'self' && mode !== 'trust-minimised' && mode !== 'hosted') {
+        throw new Error(`OMNIA_CUSTODY must be self, trust-minimised or hosted; received ${value}`);
+    }
+    return mode;
+}
 function parseSeed(value) {
     const seed = optional(value);
     if (!seed)
@@ -62,13 +83,18 @@ function loadConfigFromEnv(env = process.env) {
     if (seed && keyfile) {
         throw new Error('OMNIA_HOST_SEED and OMNIA_HOST_KEYFILE are mutually exclusive — set exactly one of them');
     }
+    const dbPath = env.OMNIA_HOST_DB?.trim() || node_path_1.default.join(dataRoot, 'omnia.sqlite');
     return {
         port: parsePort(env.OMNIA_HOST_PORT),
         host: env.OMNIA_HOST_BIND?.trim() || '127.0.0.1',
-        dbPath: env.OMNIA_HOST_DB?.trim() || node_path_1.default.join(dataRoot, 'omnia.sqlite'),
+        dbPath,
         chainRpcUrl: env.OMNIA_CHAIN_RPC?.trim() || 'http://127.0.0.1:9005',
         chainRpcPassword: optional(env.OMNIA_CHAIN_RPC_PASSWORD),
         analyticsDbPath: optional(env.OMNIA_ANALYTICS_DB),
+        observeDbPath: optional(env.OMNIA_OBSERVE_DB) ?? node_path_1.default.join(node_path_1.default.dirname(dbPath), 'observe.sqlite'),
+        networkId: optional(env.OMNIA_NETWORK_ID),
+        sourceNodeId: optional(env.OMNIA_SOURCE_NODE_ID),
+        observeDisabled: env.OMNIA_OBSERVE?.trim() === '0' || env.OMNIA_OBSERVE?.trim().toLowerCase() === 'false',
         relay: optional(env.OMNIA_RELAY),
         localPubkey: optional(env.OMNIA_LOCAL_PUBKEY),
         localPartyId: optional(env.OMNIA_LOCAL_PARTY_ID),
@@ -82,9 +108,15 @@ function loadConfigFromEnv(env = process.env) {
         keyfilePassphrase: optional(env.OMNIA_HOST_KEYFILE_PASSPHRASE),
         deviceId: optional(env.OMNIA_HOST_DEVICE_ID),
         readOnly: env.OMNIA_HOST_READ_ONLY?.trim() === '1',
+        custodyMode: parseCustodyMode(env.OMNIA_CUSTODY),
         identityFile: optional(env.OMNIA_HOST_IDENTITY_FILE),
         serviceType: optional(env.OMNIA_HOST_SERVICE_TYPE) ?? 'omnia-router',
         allowedOrigins: parseOrigins(env.OMNIA_ALLOWED_ORIGINS),
+        p2pHubPort: parseOptionalPort(env.OMNIA_P2P_HUB_PORT, 'OMNIA_P2P_HUB_PORT'),
+        p2pHubHost: optional(env.OMNIA_P2P_HUB_HOST),
+        p2pHubToken: optional(env.OMNIA_P2P_HUB_TOKEN),
+        p2pHubOrigins: parseOrigins(env.OMNIA_P2P_HUB_ORIGINS),
+        p2pHubTopics: parseList(env.OMNIA_P2P_HUB_TOPICS),
         controlToken: optional(env.OMNIA_CONTROL_TOKEN),
     };
 }

package/dist/identity.js

@@ -91,6 +91,7 @@ async function createHostManifest(config, signing, identity) {
         endpoints: [{ type: 'websocket', uri: `ws://${config.host}:${config.port}${config.wsPath}` }],
         capabilities: ['omnia:open-channel', 'omnia:update-channel', 'omnia:route', 'omnia:settle'],
         tags: ['omnia', 'payment-channel', 'daemon'],
+        transportPubkey: signing.transportPubkey,
     };
     // RFC-037: sign the manifest with the unified child TreeKey. Allocate a
     // one-time leaf via the lease so restarts never reuse a WOTS leaf.

package/dist/index.d.ts

@@ -19,3 +19,6 @@ export type { HostApiContext } from './api/methods.js';
 export type { OperationStoreLike } from './api/methods.js';
 export { DisabledAnalyticsStore, DuckDbAnalyticsStore, initializeDuckDb } from './stores/analytics.js';
 export type { AnalyticsEvent, AnalyticsStore, DuckDbConnection } from './stores/analytics.js';
+export { createLocalSignerPort, createPolicySignerPort } from './signer-port.js';
+export type { SignerPolicy } from './signer-port.js';
+export * from './observe/index.js';

package/dist/index.js

@@ -1,6 +1,20 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.initializeDuckDb = exports.DuckDbAnalyticsStore = exports.DisabledAnalyticsStore = exports.createHostMethods = exports.GoRoutingProvider = exports.InProcessRoutingProvider = exports.createTotemNodeAdapter = exports.OperationStore = exports.SqliteChannelStore = exports.loadHostIdentity = exports.createHostManifest = exports.createHostIdentityAndManifest = exports.encryptSeedForKeyfile = exports.leaseStorageDir = exports.JsonFileStorageAdapter = exports.hasSigningMaterial = exports.createHostSigning = exports.createOmniaHost = exports.loadConfigFromEnv = void 0;
+exports.createPolicySignerPort = exports.createLocalSignerPort = exports.initializeDuckDb = exports.DuckDbAnalyticsStore = exports.DisabledAnalyticsStore = exports.createHostMethods = exports.GoRoutingProvider = exports.InProcessRoutingProvider = exports.createTotemNodeAdapter = exports.OperationStore = exports.SqliteChannelStore = exports.loadHostIdentity = exports.createHostManifest = exports.createHostIdentityAndManifest = exports.encryptSeedForKeyfile = exports.leaseStorageDir = exports.JsonFileStorageAdapter = exports.hasSigningMaterial = exports.createHostSigning = exports.createOmniaHost = exports.loadConfigFromEnv = void 0;
 var config_js_1 = require("./config.js");
 Object.defineProperty(exports, "loadConfigFromEnv", { enumerable: true, get: function () { return config_js_1.loadConfigFromEnv; } });
 var lifecycle_js_1 = require("./lifecycle.js");
@@ -31,3 +45,8 @@ var analytics_js_1 = require("./stores/analytics.js");
 Object.defineProperty(exports, "DisabledAnalyticsStore", { enumerable: true, get: function () { return analytics_js_1.DisabledAnalyticsStore; } });
 Object.defineProperty(exports, "DuckDbAnalyticsStore", { enumerable: true, get: function () { return analytics_js_1.DuckDbAnalyticsStore; } });
 Object.defineProperty(exports, "initializeDuckDb", { enumerable: true, get: function () { return analytics_js_1.initializeDuckDb; } });
+var signer_port_js_1 = require("./signer-port.js");
+Object.defineProperty(exports, "createLocalSignerPort", { enumerable: true, get: function () { return signer_port_js_1.createLocalSignerPort; } });
+Object.defineProperty(exports, "createPolicySignerPort", { enumerable: true, get: function () { return signer_port_js_1.createPolicySignerPort; } });
+// Durable, replayable observation feed (RFC-0011 Amendment A).
+__exportStar(require("./observe/index.js"), exports);

package/dist/lifecycle.d.ts

@@ -1,4 +1,6 @@
 import type { OmniaHostConfig } from './config.js';
+import { ObservationBus } from './observe/bus.js';
+import type { ObservationStore } from './observe/types.js';
 import type { OmniaSwarm, ChannelSigner, WotsLeaseProviderLike, MinimalChainProvider } from '@totemsdk/omnia';
 import { createOmniaSwarm } from '@totemsdk/omnia';
 import { OperationStore } from './stores/operations.js';
@@ -7,6 +9,7 @@ import { type ControlServer } from './api/jsonrpc.js';
 import { type TotemNodeAdapter } from './chain/totem-node-adapter.js';
 import { type RoutingProvider } from './router/routing-provider.js';
 import type { JsonRpcHandler } from './api/jsonrpc.js';
+import { type HubNetwork } from '@totemsdk/p2p-hub';
 import { type OperationStoreLike } from './api/methods.js';
 import type { ChannelFactory, WotsLeaseBundle } from '@totemsdk/omnia-factory';
 import type { SpliceAcceptance, SpliceLeaseProvider, SpliceProposal } from '@totemsdk/omnia-splice';
@@ -17,6 +20,8 @@ export interface OmniaHostDependencies {
     operationStore?: OperationStore | Pick<OperationStore, 'close'>;
     signer?: ChannelSigner;
     leaseProvider?: WotsLeaseProviderLike;
+    /** RFC-058 signer port; defaults to a local signer in CLI deployments. */
+    signerPort?: import('@totemsdk/omnia').SignerPort;
     chainProvider?: MinimalChainProvider;
     controlServer?: ControlServer;
     chainAdapter?: TotemNodeAdapter;
@@ -24,6 +29,13 @@ export interface OmniaHostDependencies {
     methods?: Map<string, JsonRpcHandler>;
     operationStoreForApi?: OperationStoreLike;
     localParticipant?: import('@totemsdk/omnia').ChannelParticipant;
+    /** Stable ed25519 native transport keypair (derived from the host seed). */
+    transportKeyPair?: {
+        publicKey: Uint8Array;
+        secretKey: Uint8Array;
+    };
+    /** `0x`-prefixed transport public key published in the signed manifest. */
+    transportPubkey?: string;
     factories?: Map<string, ChannelFactory>;
     factoryBundles?: Record<string, WotsLeaseBundle>;
     spliceProposals?: Map<string, SpliceProposal>;
@@ -38,6 +50,14 @@ export interface OmniaHostDependencies {
     };
     /** Boot-time signed EdgeServiceManifest (getManifest). */
     manifest?: unknown;
+    /** Optional P2P hub network (tests/embedding). */
+    p2pHubNetwork?: HubNetwork;
+    /** Observation feed: inject a store/bus (tests/embedding) or disable it. */
+    observationStore?: ObservationStore;
+    observationBus?: ObservationBus;
+    observe?: boolean;
+    networkId?: string;
+    sourceNodeId?: string;
 }
 export interface OmniaHost {
     readonly config: OmniaHostConfig;
@@ -46,6 +66,8 @@ export interface OmniaHost {
     isStarted(): boolean;
     readonly swarm?: OmniaSwarm;
     readonly channels?: Map<string, OmniaChannel>;
+    /** Loopback WebSocket endpoint for local dapps, when enabled (RFC-062). */
+    readonly p2pHubUrl?: string;
 }
 /**
  * Phase-1 lifecycle shell. Subsystems will be attached in later phases while