@vtechcom/hexcore 2.0.0-beta.1

package/dist/settings.js

@@ -0,0 +1,243 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECRET_KEYS = exports.SETTINGS_KEYS = void 0;
+exports.hexcoreHome = hexcoreHome;
+exports.settingsPath = settingsPath;
+exports.defaultStateDir = defaultStateDir;
+exports.expandHome = expandHome;
+exports.absolute = absolute;
+exports.readSettings = readSettings;
+exports.writeSettings = writeSettings;
+exports.clearSettings = clearSettings;
+exports.installId = installId;
+exports.ensureSetupToken = ensureSetupToken;
+exports.readSetupToken = readSetupToken;
+exports.clearSetupToken = clearSetupToken;
+exports.mergeLayers = mergeLayers;
+exports.sourceOf = sourceOf;
+/**
+ * Persisted settings, and where Hexcore keeps its things.
+ *
+ * `config.ts` answers "what is the running configuration". This answers the
+ * question underneath it: **where does that configuration come from when nobody
+ * has written a `.env`.** Standing Hexcore up used to mean editing 123 lines of
+ * `.env` by hand, which is where a non-technical operator stopped — and which a
+ * globally installed CLI cannot use at all, since `.env` is read from the
+ * current directory and `hexcore` is run from wherever you happen to be.
+ *
+ * ## Layering
+ *
+ * Four sources, highest first. Every one of them is reported by
+ * `describeProvenance`, because the failure mode of layered configuration is
+ * not a wrong value, it is a value nobody can explain.
+ *
+ *  1. **A real environment variable.** Containers and CI set these, and they
+ *     must beat anything on disk.
+ *  2. **`.env` in the current directory**, loaded by dotenv, which does not
+ *     overwrite an existing environment variable — so (1) still wins.
+ *  3. **`<home>/config.json`**, written by the setup wizard or `hexcore init`.
+ *  4. The schema defaults in `config.ts`.
+ *
+ * The settings file holds env-style keys deliberately: it IS an env layer that
+ * lives somewhere stable, and describing it as anything else would invite a
+ * second name for every setting.
+ *
+ * ## Where "here" is
+ *
+ * The home is `HEXCORE_HOME`, else `~/.hexcore`. The STATE_DIR default is more
+ * careful than that, because getting it wrong orphans key material that
+ * controls funded addresses — see `defaultStateDir`.
+ */
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_crypto_1 = require("node:crypto");
+/** Env keys the settings file is allowed to carry. Nothing else is written. */
+exports.SETTINGS_KEYS = [
+    'CARDANO_NETWORK',
+    'CHAIN_BACKEND',
+    'BLOCKFROST_PROJECT_ID',
+    'CARDANO_NODE_SOCKET',
+    'HYDRA_NODE_IMAGE',
+    'ADMIN_USERNAME',
+];
+/** Keys whose value is never returned by an API or printed by the CLI. */
+exports.SECRET_KEYS = new Set(['BLOCKFROST_PROJECT_ID', 'JWT_SECRET', 'ADMIN_PASSWORD']);
+const EMPTY = { version: 1, env: {} };
+function hexcoreHome(env = process.env) {
+    const configured = env.HEXCORE_HOME?.trim();
+    if (configured)
+        return expandHome(configured);
+    return (0, node_path_1.resolve)((0, node_os_1.homedir)(), '.hexcore');
+}
+function settingsPath(env = process.env) {
+    return (0, node_path_1.resolve)(hexcoreHome(env), 'config.json');
+}
+/**
+ * Where mutable state lives when nothing names it.
+ *
+ * The obvious answer — always `<home>/.hexcore` — would have moved an existing
+ * installation's state dir out from under it. Before this file existed the
+ * default was `./.hexcore`, resolved against the current directory, so anyone
+ * running the control-plane from its package directory has a populated
+ * `apps/control-plane/.hexcore` holding the Cardano signing keys for every head
+ * they have created. Those keys control addresses that may hold real funds and
+ * exist nowhere else. Silently pointing at a new empty directory would present
+ * as "all my heads are gone".
+ *
+ * So: adopt a `.hexcore` that is already in the current directory, and only
+ * fall back to the home when there is nothing to adopt. A fresh install has
+ * nothing to adopt and lands in `~/.hexcore`, which is what a CLI needs.
+ */
+function defaultStateDir(cwd = process.cwd(), env = process.env) {
+    const legacy = (0, node_path_1.resolve)(cwd, '.hexcore');
+    if ((0, node_fs_1.existsSync)(legacy))
+        return legacy;
+    return hexcoreHome(env);
+}
+function expandHome(p) {
+    return p.startsWith('~') ? (0, node_path_1.resolve)((0, node_os_1.homedir)(), p.slice(1).replace(/^\/+/, '')) : p;
+}
+function absolute(p, cwd = process.cwd()) {
+    const expanded = expandHome(p);
+    return (0, node_path_1.isAbsolute)(expanded) ? expanded : (0, node_path_1.resolve)(cwd, expanded);
+}
+/**
+ * Read the settings file, or an empty one.
+ *
+ * A file that cannot be parsed returns empty rather than throwing. Refusing to
+ * boot over a corrupt settings file would leave an operator with a process that
+ * will not start and no UI to fix it in — the wizard is the repair path, so it
+ * has to be reachable.
+ */
+function readSettings(env = process.env) {
+    const path = settingsPath(env);
+    if (!(0, node_fs_1.existsSync)(path))
+        return { ...EMPTY, env: {} };
+    try {
+        const parsed = JSON.parse((0, node_fs_1.readFileSync)(path, 'utf8'));
+        const values = {};
+        for (const key of exports.SETTINGS_KEYS) {
+            const value = parsed.env?.[key];
+            if (typeof value === 'string' && value !== '')
+                values[key] = value;
+        }
+        return { version: 1, setupCompletedAt: parsed.setupCompletedAt, env: values };
+    }
+    catch {
+        return { ...EMPTY, env: {} };
+    }
+}
+/**
+ * Write the settings file, 0600.
+ *
+ * It carries a Blockfrost project id, which is a credential — the same one
+ * `.env` has always held in plaintext, kept next to `secrets.json` under the
+ * same permissions rather than given a weaker home.
+ */
+function writeSettings(settings, env = process.env) {
+    const path = settingsPath(env);
+    (0, node_fs_1.mkdirSync)(hexcoreHome(env), { recursive: true });
+    (0, node_fs_1.writeFileSync)(path, `${JSON.stringify(settings, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    // writeFileSync only applies `mode` when it creates the file, so an
+    // existing world-readable one would keep its permissions forever.
+    (0, node_fs_1.chmodSync)(path, 0o600);
+}
+function clearSettings(env = process.env) {
+    (0, node_fs_1.rmSync)(settingsPath(env), { force: true });
+    clearSetupToken(env);
+}
+// ---------------------------------------------------------- installation id
+const INSTALL_FILE = 'install-id';
+/**
+ * A stable id for THIS state directory.
+ *
+ * Stamped onto every container as `LABEL_INSTALL` so bulk operations can tell
+ * one installation's containers from another's. More than one installation on a
+ * machine is normal — a checkout being developed on and a globally installed
+ * `hexcore` share a Docker daemon — and the label that existed before this,
+ * `LABEL_MANAGED`, is true of both. Matching on it alone is what let a `clean`
+ * in one installation remove a running head belonging to the other.
+ *
+ * Tied to the state dir rather than the host or the user, because the state dir
+ * is what actually owns the heads: move it and the containers move with it.
+ */
+function installId(stateDir) {
+    const path = (0, node_path_1.resolve)(stateDir, INSTALL_FILE);
+    if ((0, node_fs_1.existsSync)(path)) {
+        const existing = (0, node_fs_1.readFileSync)(path, 'utf8').trim();
+        if (existing)
+            return existing;
+    }
+    const id = (0, node_crypto_1.randomBytes)(8).toString('hex');
+    (0, node_fs_1.mkdirSync)(stateDir, { recursive: true });
+    (0, node_fs_1.writeFileSync)(path, `${id}\n`, 'utf8');
+    return id;
+}
+// ------------------------------------------------------------- setup token
+const TOKEN_FILE = 'setup-token';
+/**
+ * A secret that proves the caller can see the terminal Hexcore was started in.
+ *
+ * The setup endpoint cannot require a login — it is where the login is created
+ * — so without this, on any interface but loopback, whoever reaches the port
+ * first chooses the admin password. That is a takeover on a shared network, and
+ * "bind to localhost" is not an answer for the person running this on a server
+ * to use from a laptop.
+ *
+ * The cost is one paste, and not even that: the CLI prints the URL with the
+ * token already in it.
+ */
+function ensureSetupToken(env = process.env) {
+    const path = (0, node_path_1.resolve)(hexcoreHome(env), TOKEN_FILE);
+    if ((0, node_fs_1.existsSync)(path)) {
+        const existing = (0, node_fs_1.readFileSync)(path, 'utf8').trim();
+        if (existing)
+            return existing;
+    }
+    const token = (0, node_crypto_1.randomBytes)(24).toString('base64url');
+    (0, node_fs_1.mkdirSync)(hexcoreHome(env), { recursive: true });
+    (0, node_fs_1.writeFileSync)(path, `${token}\n`, { encoding: 'utf8', mode: 0o600 });
+    (0, node_fs_1.chmodSync)(path, 0o600);
+    return token;
+}
+function readSetupToken(env = process.env) {
+    const path = (0, node_path_1.resolve)(hexcoreHome(env), TOKEN_FILE);
+    if (!(0, node_fs_1.existsSync)(path))
+        return null;
+    return (0, node_fs_1.readFileSync)(path, 'utf8').trim() || null;
+}
+function clearSetupToken(env = process.env) {
+    (0, node_fs_1.rmSync)((0, node_path_1.resolve)(hexcoreHome(env), TOKEN_FILE), { force: true });
+}
+/**
+ * Flatten the layers into the object the zod schema parses.
+ *
+ * Empty strings are dropped from the higher layers on the way through. An
+ * exported-but-empty `BLOCKFROST_PROJECT_ID` — which is what `export VAR=` and
+ * several process managers produce — would otherwise beat a real saved value
+ * with nothing, and present as a credential that vanished on restart.
+ */
+function mergeLayers(layers) {
+    const merged = { ...layers.file };
+    for (const [key, value] of Object.entries(layers.dotenv)) {
+        if (value !== '')
+            merged[key] = value;
+    }
+    for (const [key, value] of Object.entries(layers.environment)) {
+        if (value !== undefined && value !== '')
+            merged[key] = value;
+    }
+    return merged;
+}
+/** Which layer a given key's value actually came from. */
+function sourceOf(key, layers) {
+    if (layers.environment[key] !== undefined && layers.environment[key] !== '')
+        return 'environment';
+    if (layers.dotenv[key] !== undefined && layers.dotenv[key] !== '')
+        return 'env-file';
+    if (layers.file[key] !== undefined)
+        return 'settings-file';
+    return 'default';
+}
+//# sourceMappingURL=settings.js.map

package/dist/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":";;;AA8DA,kCAIC;AAED,oCAEC;AAkBD,0CAIC;AAED,gCAEC;AAED,4BAGC;AAUD,oCAcC;AASD,sCAOC;AAED,sCAGC;AAmBD,8BAUC;AAkBD,4CAWC;AAED,wCAIC;AAED,0CAEC;AAqBD,kCASC;AAGD,4BAKC;AA5PD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qCAAgG;AAChG,qCAAkC;AAClC,yCAAgD;AAChD,6CAA0C;AAE1C,+EAA+E;AAClE,QAAA,aAAa,GAAG;IACzB,iBAAiB;IACjB,eAAe;IACf,uBAAuB;IACvB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;CACV,CAAC;AAIX,0EAA0E;AAC7D,QAAA,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,uBAAuB,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAStG,MAAM,KAAK,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AAEtD,SAAgB,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5D,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,OAAO,IAAA,mBAAO,EAAC,WAAW,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,eAAe,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACxC,IAAI,IAAA,oBAAU,EAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAgB,UAAU,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAgB,QAAQ,CAAC,CAAS,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,IAAA,sBAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACpD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;QACjF,MAAM,MAAM,GAAyC,EAAE,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,qBAAa,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,QAAwB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACxF,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAA,mBAAS,EAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjG,oEAAoE;IACpE,kEAAkE;IAClE,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,IAAA,gBAAM,EAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,eAAe,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,6EAA6E;AAE7E,MAAM,YAAY,GAAG,YAAY,CAAC;AAElC;;;;;;;;;;;;GAYG;AACH,SAAgB,SAAS,CAAC,QAAgB;IACtC,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7C,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAClC,CAAC;IACD,MAAM,EAAE,GAAG,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAA,mBAAS,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,EAAE,CAAC;AACd,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,GAAG,aAAa,CAAC;AAEjC;;;;;;;;;;;GAWG;AACH,SAAgB,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,WAAW,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,IAAA,mBAAS,EAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,WAAW,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;AACrD,CAAC;AAED,SAAgB,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,IAAA,gBAAM,EAAC,IAAA,mBAAO,EAAC,WAAW,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAaD;;;;;;;GAOG;AACH,SAAgB,WAAW,CAAC,MAAiB;IACzC,MAAM,MAAM,GAAsB,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,0DAA0D;AAC1D,SAAgB,QAAQ,CAAC,GAAW,EAAE,MAAiB;IACnD,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IAClG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC;IACrF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAkB,CAAC,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IAC1E,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/dist/setup.service.js

@@ -0,0 +1,257 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SetupService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SetupService = exports.SetupForbiddenError = exports.SettingsValidationError = void 0;
+exports.wipeEverything = wipeEverything;
+/**
+ * First-run setup, settings changes, and wiping.
+ *
+ * The problem this exists for: until now the only way to configure Hexcore was
+ * to edit a 123-line `.env`. That works for whoever wrote it and stops everyone
+ * else — and it cannot work at all for a globally installed `hexcore`, since
+ * `.env` is read from the current directory.
+ *
+ * Setup is reachable without a login, because it is where the login is created.
+ * That makes the guard rails here load-bearing rather than defensive:
+ *
+ *  - `complete()` refuses once setup is done. Without that, anyone who can
+ *    reach the port could re-run setup and choose a new admin password.
+ *  - It requires the setup token, which is only readable from the terminal
+ *    Hexcore was started in (or the file system it runs on).
+ *  - The admin password passes through and is never written to the settings
+ *    file — it goes to `AuthService`, which hashes it into `secrets.json`.
+ */
+const common_1 = require("@nestjs/common");
+const node_os_1 = require("node:os");
+const promises_1 = require("node:fs/promises");
+const node_crypto_1 = require("node:crypto");
+const node_crypto_2 = require("node:crypto");
+const config_module_1 = require("./config.module");
+const config_1 = require("./config");
+const settings_1 = require("./settings");
+const auth_1 = require("./auth");
+const head_service_1 = require("./hydra/head.service");
+/** A setting that is well-formed on its own but cannot work with the others. */
+class SettingsValidationError extends Error {
+    field;
+    constructor(field, message) {
+        super(message);
+        this.field = field;
+        this.name = 'SettingsValidationError';
+    }
+}
+exports.SettingsValidationError = SettingsValidationError;
+/** Setup attempted with the wrong token, or after it was already done. */
+class SetupForbiddenError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SetupForbiddenError';
+    }
+}
+exports.SetupForbiddenError = SetupForbiddenError;
+let SetupService = SetupService_1 = class SetupService {
+    config;
+    auth;
+    heads;
+    logger = new common_1.Logger(SetupService_1.name);
+    constructor(config, auth, heads) {
+        this.config = config;
+        this.auth = auth;
+        this.heads = heads;
+    }
+    /**
+     * Whether this installation still needs configuring.
+     *
+     * Three ways to be already configured, and the last two matter as much as
+     * the first: a `.env` in the working directory is the shape every existing
+     * deployment uses, and a container started with `-e CHAIN_BACKEND=…` was
+     * configured by whoever wrote the compose file. Nagging either with a
+     * wizard would be Hexcore failing to recognise its own configuration.
+     */
+    status() {
+        const stored = (0, settings_1.readSettings)();
+        const via = this.completedVia(stored);
+        return {
+            required: via === undefined,
+            completedVia: via,
+            completedAt: stored.setupCompletedAt,
+            defaults: {
+                network: this.config.network,
+                chainBackend: this.config.chainBackend,
+                blockfrostProjectId: '',
+                cardanoNodeSocket: this.config.cardanoNodeSocket || '',
+                hydraNodeImage: this.config.hydraNodeImage,
+                adminUsername: this.config.adminUsername,
+            },
+            loopbackOnly: this.config.host === '127.0.0.1' || this.config.host === 'localhost',
+        };
+    }
+    completedVia(stored) {
+        if (stored.setupCompletedAt)
+            return 'wizard';
+        if (config_1.dotenvFound)
+            return 'env-file';
+        /**
+         * Any one of these in the real environment means somebody configured
+         * this deliberately — a compose file, a CI job, a systemd unit.
+         * Checking the merged view instead would count our own defaults.
+         */
+        const env = (0, config_1.currentLayers)().environment;
+        const configured = ['CHAIN_BACKEND', 'BLOCKFROST_PROJECT_ID', 'CARDANO_NODE_SOCKET', 'ADMIN_PASSWORD'];
+        if (configured.some(key => env[key]))
+            return 'environment';
+        return undefined;
+    }
+    /** The token the wizard must present, minted on demand while setup is due. */
+    setupToken() {
+        return this.status().required ? (0, settings_1.ensureSetupToken)() : null;
+    }
+    /**
+     * Finish setup.
+     *
+     * Returns a generated password when the caller did not choose one, so
+     * `hexcore init` can print it. That is safe to return here and nowhere
+     * else: the caller has already proved it holds the setup token.
+     */
+    complete(input) {
+        if (!this.status().required) {
+            throw new SetupForbiddenError('Hexcore is already configured. Change settings from the Settings screen, or run ' +
+                '`hexcore reset` to start over.');
+        }
+        const expected = (0, settings_1.readSetupToken)();
+        if (!expected || !constantTimeEquals(input.setupToken, expected)) {
+            throw new SetupForbiddenError('That setup link is not valid. Use the URL printed in the terminal where Hexcore was started.');
+        }
+        this.applySettings(input, { setupCompletedAt: new Date().toISOString() });
+        const password = input.adminPassword || (0, node_crypto_2.randomBytes)(9).toString('base64url');
+        this.auth.setCredentials(input.adminUsername ?? this.config.adminUsername, password);
+        (0, settings_1.clearSetupToken)();
+        this.logger.log(`setup completed — network=${this.config.network} backend=${this.config.chainBackend}`);
+        return input.adminPassword ? {} : { generatedPassword: password };
+    }
+    /** Change settings after setup. Authenticated; no token, no password. */
+    saveSettings(input) {
+        const stored = (0, settings_1.readSettings)();
+        this.applySettings(input, { setupCompletedAt: stored.setupCompletedAt ?? new Date().toISOString() });
+        this.logger.log(`settings updated — network=${this.config.network} backend=${this.config.chainBackend}`);
+    }
+    /**
+     * Validate, write, and make the running process agree.
+     *
+     * The reload mutates the injected config object rather than replacing it,
+     * so every service that captured a reference sees the change. Settings that
+     * cannot survive that — a port already bound, a Docker client already built
+     * — are not offered by the schema at all.
+     */
+    applySettings(input, meta) {
+        this.validate(input);
+        const env = {
+            CARDANO_NETWORK: input.network,
+            CHAIN_BACKEND: input.chainBackend,
+        };
+        if (input.blockfrostProjectId)
+            env.BLOCKFROST_PROJECT_ID = input.blockfrostProjectId;
+        if (input.cardanoNodeSocket)
+            env.CARDANO_NODE_SOCKET = input.cardanoNodeSocket;
+        if (input.hydraNodeImage)
+            env.HYDRA_NODE_IMAGE = input.hydraNodeImage;
+        if (input.adminUsername)
+            env.ADMIN_USERNAME = input.adminUsername;
+        (0, settings_1.writeSettings)({ version: 1, setupCompletedAt: meta.setupCompletedAt, env });
+        (0, config_1.reloadConfigInto)(this.config);
+    }
+    /**
+     * The cross-field rules a per-field schema cannot express.
+     *
+     * Both are the difference between a setting that is merely wrong and one
+     * that produces a head which boots and then never observes its own init
+     * transaction — a failure that surfaces minutes later, somewhere else.
+     */
+    validate(input) {
+        if (input.chainBackend === 'blockfrost') {
+            const key = input.blockfrostProjectId?.trim();
+            if (!key) {
+                throw new SettingsValidationError('blockfrostProjectId', 'The Blockfrost backend needs a project id. Get a free one at blockfrost.io, or choose ' +
+                    'the offline backend, which needs no credential at all.');
+            }
+            if (!key.startsWith(input.network)) {
+                throw new SettingsValidationError('blockfrostProjectId', `This project id is for a different network — it must start with "${input.network}". ` +
+                    'A mismatched key does not fail loudly; the head boots and never sees its own ' +
+                    'transactions.');
+            }
+        }
+        if (input.chainBackend === 'cardano-node' && !input.cardanoNodeSocket?.trim()) {
+            throw new SettingsValidationError('cardanoNodeSocket', 'The cardano-node backend needs the path to a running node socket.');
+        }
+    }
+    /** What the operator must type to confirm a wipe. Their own machine's name. */
+    confirmationPhrase() {
+        return (0, node_os_1.hostname)();
+    }
+    /**
+     * Wipe, as far as the scope says.
+     *
+     * `everything` is not reachable here on purpose — it deletes the signing
+     * keys behind funded addresses and the database this request is being
+     * served from. `hexcore clean --all` does it with the process stopped.
+     */
+    async clean(scope, confirm) {
+        if (confirm.trim() !== this.confirmationPhrase()) {
+            throw new SettingsValidationError('confirm', `Type "${this.confirmationPhrase()}" to confirm. Nothing has been deleted.`);
+        }
+        let headsRemoved = 0;
+        let containersRemoved = 0;
+        if (scope === 'heads') {
+            for (const head of await this.heads.list()) {
+                containersRemoved += head.nodes.length;
+                await this.heads.delete(head.id);
+                headsRemoved += 1;
+            }
+        }
+        if (scope === 'config') {
+            (0, settings_1.clearSettings)();
+            (0, config_1.reloadConfigInto)(this.config);
+        }
+        this.logger.warn(`clean(${scope}) removed ${headsRemoved} head(s)`);
+        return { scope, headsRemoved, containersRemoved, setupRequired: this.status().required };
+    }
+};
+exports.SetupService = SetupService;
+exports.SetupService = SetupService = SetupService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(config_module_1.APP_CONFIG)),
+    __metadata("design:paramtypes", [Object, auth_1.AuthService,
+        head_service_1.HeadService])
+], SetupService);
+/**
+ * Compare without leaking the answer through timing.
+ *
+ * `timingSafeEqual` throws on a length mismatch, which would leak the length,
+ * so the lengths are compared first and the result folded in — a wrong-length
+ * token takes the same path as a wrong-value one.
+ */
+function constantTimeEquals(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    if (left.length !== right.length)
+        return false;
+    return (0, node_crypto_1.timingSafeEqual)(left, right);
+}
+/** Delete every trace of Hexcore. Used by `hexcore clean --all`, never by HTTP. */
+async function wipeEverything(paths) {
+    await (0, promises_1.rm)(paths.stateDir, { recursive: true, force: true });
+    await (0, promises_1.rm)(paths.home, { recursive: true, force: true });
+}
+//# sourceMappingURL=setup.service.js.map

package/dist/setup.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.service.js","sourceRoot":"","sources":["../src/setup.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AA4QA,wCAGC;AA/QD;;;;;;;;;;;;;;;;;GAiBG;AACH,2CAA4D;AAC5D,qCAAmC;AACnC,+CAAsC;AACtC,6CAA8C;AAC9C,6CAA0C;AAE1C,mDAA6C;AAC7C,qCAAwF;AACxF,yCASoB;AACpB,iCAAqC;AACrC,uDAAmD;AAEnD,gFAAgF;AAChF,MAAa,uBAAwB,SAAQ,KAAK;IAE1B;IADpB,YACoB,KAAa,EAC7B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,UAAK,GAAL,KAAK,CAAQ;QAI7B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IAC1C,CAAC;CACJ;AARD,0DAQC;AAED,0EAA0E;AAC1E,MAAa,mBAAoB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACtC,CAAC;CACJ;AALD,kDAKC;AAGM,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAIoB;IACpB;IACA;IALJ,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAExD,YACyC,MAAiB,EACrC,IAAiB,EACjB,KAAkB;QAFE,WAAM,GAAN,MAAM,CAAW;QACrC,SAAI,GAAJ,IAAI,CAAa;QACjB,UAAK,GAAL,KAAK,CAAa;IACpC,CAAC;IAEJ;;;;;;;;OAQG;IACH,MAAM;QACF,MAAM,MAAM,GAAG,IAAA,uBAAY,GAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO;YACH,QAAQ,EAAE,GAAG,KAAK,SAAS;YAC3B,YAAY,EAAE,GAAG;YACjB,WAAW,EAAE,MAAM,CAAC,gBAAgB;YACpC,QAAQ,EAAE;gBACN,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACtC,mBAAmB,EAAE,EAAE;gBACvB,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE;gBACtD,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;gBAC1C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;aAC3C;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;SACrF,CAAC;IACN,CAAC;IAEO,YAAY,CAAC,MAAsB;QACvC,IAAI,MAAM,CAAC,gBAAgB;YAAE,OAAO,QAAQ,CAAC;QAC7C,IAAI,oBAAW;YAAE,OAAO,UAAU,CAAC;QACnC;;;;WAIG;QACH,MAAM,GAAG,GAAG,IAAA,sBAAa,GAAE,CAAC,WAAW,CAAC;QACxC,MAAM,UAAU,GAAG,CAAC,eAAe,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QACvG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,aAAa,CAAC;QAC3D,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,8EAA8E;IAC9E,UAAU;QACN,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,2BAAgB,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,KAAyB;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,mBAAmB,CACzB,kFAAkF;gBAC9E,gCAAgC,CACvC,CAAC;QACN,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,yBAAc,GAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,mBAAmB,CACzB,8FAA8F,CACjG,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,IAAI,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACrF,IAAA,0BAAe,GAAE,CAAC;QAElB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,MAAM,CAAC,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACxG,OAAO,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IACtE,CAAC;IAED,yEAAyE;IACzE,YAAY,CAAC,KAAoB;QAC7B,MAAM,MAAM,GAAG,IAAA,uBAAY,GAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,KAAoB,EAAE,IAAkC;QAC1E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErB,MAAM,GAAG,GAAyC;YAC9C,eAAe,EAAE,KAAK,CAAC,OAAO;YAC9B,aAAa,EAAE,KAAK,CAAC,YAAY;SACpC,CAAC;QACF,IAAI,KAAK,CAAC,mBAAmB;YAAE,GAAG,CAAC,qBAAqB,GAAG,KAAK,CAAC,mBAAmB,CAAC;QACrF,IAAI,KAAK,CAAC,iBAAiB;YAAE,GAAG,CAAC,mBAAmB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QAC/E,IAAI,KAAK,CAAC,cAAc;YAAE,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC,cAAc,CAAC;QACtE,IAAI,KAAK,CAAC,aAAa;YAAE,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC;QAElE,IAAA,wBAAa,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,IAAA,yBAAgB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CAAC,KAAoB;QACjC,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,KAAK,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,MAAM,IAAI,uBAAuB,CAC7B,qBAAqB,EACrB,wFAAwF;oBACpF,wDAAwD,CAC/D,CAAC;YACN,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,uBAAuB,CAC7B,qBAAqB,EACrB,oEAAoE,KAAK,CAAC,OAAO,KAAK;oBAClF,+EAA+E;oBAC/E,eAAe,CACtB,CAAC;YACN,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,cAAc,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5E,MAAM,IAAI,uBAAuB,CAC7B,mBAAmB,EACnB,mEAAmE,CACtE,CAAC;QACN,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;QACd,OAAO,IAAA,kBAAQ,GAAE,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,KAAwC,EAAE,OAAe;QACjE,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,uBAAuB,CAC7B,SAAS,EACT,SAAS,IAAI,CAAC,kBAAkB,EAAE,yCAAyC,CAC9E,CAAC;QACN,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAE1B,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBACvC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjC,YAAY,IAAI,CAAC,CAAC;YACtB,CAAC;QACL,CAAC;QAED,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAA,wBAAa,GAAE,CAAC;YAChB,IAAA,yBAAgB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,aAAa,YAAY,UAAU,CAAC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC7F,CAAC;CACJ,CAAA;AAhMY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAKJ,WAAA,IAAA,eAAM,EAAC,0BAAU,CAAC,CAAA;6CACI,kBAAW;QACV,0BAAW;GAN9B,YAAY,CAgMxB;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,IAAA,6BAAe,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,mFAAmF;AAC5E,KAAK,UAAU,cAAc,CAAC,KAAyC;IAC1E,MAAM,IAAA,aAAE,EAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAA,aAAE,EAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/dist/version.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERSION = void 0;
+/**
+ * The one place the running version comes from.
+ *
+ * It was written out by hand in three: the health payload, the Swagger
+ * document, and the CLI's `--version`. Two of them said `2.0.0` as a string
+ * literal, so a release bumps package.json and the Settings screen keeps
+ * reporting whatever the last person remembered to edit — a version that lies
+ * is worse than no version, because it is what someone quotes in a bug report.
+ *
+ * Read from package.json, which `npm version` and the pack script both already
+ * treat as the source of truth.
+ */
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+function read() {
+    /**
+     * Two layouts, same as the web dist: installed from npm, `dist/version.js`
+     * sits one directory below package.json; in the monorepo it is the same
+     * shape. A missing or unreadable file yields '0.0.0-unknown' rather than
+     * throwing — a bad version string must never be the reason a server will
+     * not start.
+     */
+    for (const candidate of ['../package.json', '../../package.json']) {
+        try {
+            const parsed = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.resolve)(__dirname, candidate), 'utf8'));
+            /**
+             * Matched by name so a stray package.json further up the tree
+             * cannot answer. The published name is scoped (`@vtechcom/hexcore`)
+             * and the workspace one is not, so both are accepted — and the
+             * suffix check keeps a fork's own scope working.
+             */
+            if (parsed.version && (parsed.name?.endsWith('hexcore') || parsed.name === '@hexcore/control-plane')) {
+                return parsed.version;
+            }
+        }
+        catch {
+            // Try the next candidate.
+        }
+    }
+    return '0.0.0-unknown';
+}
+exports.VERSION = read();
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACH,qCAAuC;AACvC,yCAAoC;AAEpC,SAAS,IAAI;IACT;;;;;;OAMG;IACH,KAAK,MAAM,SAAS,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAG5E,CAAC;YACF;;;;;eAKG;YACH,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAwB,CAAC,EAAE,CAAC;gBACnG,OAAO,MAAM,CAAC,OAAO,CAAC;YAC1B,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,0BAA0B;QAC9B,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC;AAC3B,CAAC;AAEY,QAAA,OAAO,GAAW,IAAI,EAAE,CAAC"}