@uuaid/pillar 0.2.0-alpha.16 → 0.2.0-alpha.17

package/README.md

@@ -15,7 +15,7 @@ exchanges encrypted, signed envelopes through the pillar network — a
 store-and-forward carrier mesh with a LimeWire/BitTorrent-style seed topology:
 no single carrier is the only store.
 
-**Minimal requirements:** Node.js >= 20, outbound HTTPS. That's it. Carrier
+**Minimal requirements:** Node.js >= 22, outbound HTTPS. That's it. Carrier
 mode needs no inbound ports, no daemon, no account. One identity = one
 keychain file + one SQLite mailbox.
 

package/bin/carrier.mjs

@@ -10,6 +10,7 @@
  * authenticate per-request with their own keys.  No accounts, no state
  * about who exists — pure store-and-forward.
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { CarrierServer } from "../src/net/carrier-server.mjs";
 
 function parseArgs(argv) {

package/bin/pillar-ask.mjs

@@ -10,6 +10,7 @@
  * Exits 0 on reply(status ok), 3 on reply(status error), 4 on timeout.
  * See INTERACTION-CONVENTION.md for the wire contract.
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";

package/bin/pillar-blob.mjs

@@ -10,6 +10,7 @@
  * The broker never receives a DEK. `send` prints metadata only; the secret ref
  * exists solely inside the recipient-encrypted Pillar envelope.
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/bin/pillar-directory.mjs

@@ -22,6 +22,7 @@
  * `agents.json` is passed through untouched: this process owns the seed list,
  * not the address book.
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { createServer } from "node:http";
 import { readFileSync, existsSync, mkdirSync } from "node:fs";
 import { homedir } from "node:os";

package/bin/pillar-escrow.mjs

@@ -42,6 +42,7 @@
  * (who absorbs the fee: the seller, the buyer, or 50/50) or --payout N (the
  * parties' own number; a "mutual" agreement).  No default is ever derived.
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { homedir } from "node:os";

package/bin/pillar-responder.mjs

@@ -31,6 +31,7 @@
  *     --reply-text "zz-master is away — left a message" \
  *     --forward-to uuaid:foundation:agent:… --forward-pubkey <hex>
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { existsSync, readFileSync, appendFileSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";

package/bin/pillar-seed.mjs

@@ -39,6 +39,7 @@
  * TLS-terminating proxy (nginx/Caddy) and pass the PUBLIC https:// URL as
  * --public-url — never the loopback one.
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { mkdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";

package/bin/pillar.mjs

@@ -16,6 +16,7 @@
  * All commands respect --home to point at an alternate pillar directory,
  * useful for running multiple pillars on one machine (Zestro dogfood etc.).
  */
+import "../src/node-check.mjs"; // must stay the first import: refuses Node < 22 before any dependency loads
 import { mkdirSync, existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { homedir } from "node:os";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uuaid/pillar",
-  "version": "0.2.0-alpha.16",
+  "version": "0.2.0-alpha.17",
   "description": "Pillar (Protocol for Inter-agent Linked Ledger And Relay) \u2014 the secure delivery layer of UACP, the Universal Agent Communication Protocol. UACP = UUAID (identity) + Envelope (signed, encrypted container) + Pillar (relay, mailbox, routing, store-and-forward). Reference implementation of the UACP delivery layer; includes VDA-1 (IAASO-3901, in ballot) delivery attestation and a blind escrow for the Zilligon ZGN / EVM rails.",
   "license": "Apache-2.0",
   "type": "module",
@@ -43,10 +43,13 @@
     "test": "node --test --test-reporter spec test/unit/*.test.mjs",
     "test:int": "node --test --test-reporter spec test/integration/*.test.mjs",
     "test:chaos": "node --test --test-reporter spec test/chaos/*.test.mjs",
-    "test:all": "node --test --test-reporter spec test/unit/*.test.mjs test/integration/*.test.mjs test/chaos/*.test.mjs"
+    "test:all": "node --test --test-reporter spec test/unit/*.test.mjs test/integration/*.test.mjs test/chaos/*.test.mjs",
+    "preflight": "node scripts/preflight-publish.mjs",
+    "prepublishOnly": "node scripts/preflight-publish.mjs",
+    "postpublish": "node scripts/verify-publish.mjs"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "dependencies": {
     "@chainsafe/libp2p-noise": "^17.0.0",
@@ -66,7 +69,7 @@
     "@libp2p/websockets": "^10.1.19",
     "@multiformats/multiaddr": "^13.0.3",
     "@noble/curves": "^2.3.0",
-    "better-sqlite3": "^11.10.0",
+    "better-sqlite3": "^12.11.1",
     "it-pipe": "^3.0.1",
     "it-pushable": "^3.2.4",
     "libp2p": "^3.3.8",

package/src/node-check.mjs

@@ -0,0 +1,32 @@
+/**
+ * Node.js version gate for the pillar command-line tools.
+ *
+ * Every bin imports this module FIRST, so it runs before any dependency does.
+ * Measured 2026-09-24 with the published alpha.16: on Node 20 and 21 the
+ * libp2p stack calls Promise.withResolvers (first shipped unflagged in Node
+ * 22.0.0) deep inside its peer store, so `pillar id` died with "TypeError:
+ * Promise.withResolvers is not a function" instead of saying what was wrong.
+ * package.json `engines` states the same floor, but npm only warns about
+ * engines; this turns the warning into a clear refusal.
+ */
+import { basename } from "node:path";
+
+export const MIN_NODE_MAJOR = 22;
+
+/**
+ * Returns a human-readable reason this Node.js version cannot run pillar, or
+ * null when it can. An unparseable version passes: this gate exists to explain
+ * a known failure, not to guess about builds it cannot read.
+ */
+export function nodeVersionProblem(version = process.versions.node, tool = "pillar") {
+  const major = Number.parseInt(String(version).split(".")[0], 10);
+  if (!Number.isFinite(major) || major >= MIN_NODE_MAJOR) return null;
+  return `${tool} needs Node.js ${MIN_NODE_MAJOR} or newer (found v${version}). ` +
+    `Install the current LTS from https://nodejs.org and run it again.`;
+}
+
+const problem = nodeVersionProblem(process.versions.node, basename(process.argv[1] ?? "pillar").replace(/\.mjs$/, ""));
+if (problem) {
+  process.stderr.write(`${problem}\n`);
+  process.exit(1);
+}