@vtechcom/hexcore 2.0.0-beta.1

package/node_modules/@hexcore/shared/dist/cjs/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAqC,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAGlF;;;;;GAKG;AACH;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,aAMjC,CAAC;AAEN;;;GAGG;AACH,eAAO,MAAM,mBAAmB;IAC5B;;;;OAIG;;IAMH;;;;;OAKG;;IAEH;;;;OAIG;;IAEH;;;;;OAKG;;;;;;;;;;;;EAEL,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB;IAC1B,4BAA4B;;IAE5B,iDAAiD;;IAEjD,iCAAiC;;;;;;;;;;EAEnC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AA0FjE,eAAO,MAAM,gBAAgB;;;IA5EzB,8DAA8D;;;;;;;IAO9D;;;;;;OAMG;;IAEH,gDAAgD;;QAvEhD;;;;WAIG;;QAMH;;;;;WAKG;;QAEH;;;;WAIG;;QAEH;;;;;WAKG;;;;;;;;;;;;;;QAOH,4BAA4B;;QAE5B,iDAAiD;;QAEjD,iCAAiC;;;;;;;;;;;IAmCjC;;;;OAIG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;;;;OAUG;;QAKa,+DAA+D;;QAE/D,uDAAuD;;;;;;;;;IAQvE;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwFL,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,eAAO,MAAM,gBAAgB;;QArNzB;;;;WAIG;;QAMH;;;;;WAKG;;QAEH;;;;WAIG;;QAEH;;;;;WAKG;;;;;;;;;;;;;;;;;;;;;QAOH,4BAA4B;;QAE5B,iDAAiD;;QAEjD,iCAAiC;;;;;;;;;;;;;;QAkEjB,+DAA+D;;QAE/D,uDAAuD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6Gd,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;IAE/B,qEAAqE;;IAErE,0EAA0E;;IAE1E;;;;OAIG;;;;;;;;;;;;EAEL,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,MAAM,WAAW,sBAAsB;IACnC,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;IACxB,0DAA0D;IAC1D,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,0DAA0D;IAC1D,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;IAEtC,gEAAgE;;IAEhE,mEAAmE;;;;;;;;;;EAErE,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,MAAM,WAAW,wBAAwB;IACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,sFAAsF;IACtF,MAAM,EAAE,YAAY,GAAG,UAAU,CAAC;IAClC,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,oBAAoB;;;;;;EAE/B,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,eAAe;IACxB,uEAAuE;;;;;;EAEzE,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;;;;;;EAGtB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAIrD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,cAAc;;;IAGvB;;;;OAIG;;;IAGH,4EAA4E;;;;;;;;;;;;;;;;;EAG9E,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;IArB5B;;;;OAIG;;;IAGH,4EAA4E;;;;IAe5E;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;EAGL,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,iFAAiF;AACjF,MAAM,WAAW,WAAW;IACxB,2DAA2D;IAC3D,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,EAAE,aAAa,CAAC;IACxB,0DAA0D;IAC1D,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,CAAC;AAErF,MAAM,WAAW,iBAAiB;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,8CAA4C,CAAC;AAC1E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW;;IAEpB,qEAAqE;;;;;;;;EAEvE,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAErD,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,aAAa,EAAE,OAAO,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,KAAK,CAAC,CAAC;IACpB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACX;AACD,MAAM,WAAW,MAAM;IACnB,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;CACL;AACD,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC"}

package/node_modules/@hexcore/shared/dist/cjs/api.js

@@ -0,0 +1,358 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cleanSchema = exports.cleanScopeSchema = exports.completeSetupSchema = exports.settingsSchema = exports.loginSchema = exports.resetHeadSchema = exports.listHeadsQuerySchema = exports.protocolParametersQuerySchema = exports.verifyCardanoKeySchema = exports.updateHeadSchema = exports.createHeadSchema = exports.headLoggingSchema = exports.offlineConfigSchema = exports.blockfrostProjectIdSchema = void 0;
+/**
+ * Request/response contracts. Imported by the control-plane (validation) AND the
+ * web UI (typed fetch) so the two can never drift.
+ */
+const zod_1 = require("zod");
+const domain_1 = require("./domain");
+const offline_1 = require("./offline");
+/**
+ * Creating a head in v2 only needs a name and a node count — the control-plane
+ * generates every Hydra/Cardano key itself. In v1 the caller had to supply
+ * pre-generated key material for every node, which was the single biggest
+ * source of setup friction.
+ */
+/**
+ * A Blockfrost project id carries the network in its prefix. Checking the shape
+ * here turns a typo into a field error on the create form instead of a head
+ * that boots and then never observes its own init transaction.
+ */
+exports.blockfrostProjectIdSchema = zod_1.z
+    .string()
+    .trim()
+    .regex(/^(preprod|preview|mainnet)[A-Za-z0-9]+$/, 'A Blockfrost project id starts with the network name, e.g. preprodXXXXXXXX');
+/**
+ * Offline-mode settings. Only read when `chainBackend` is `offline`; the flags
+ * they produce are mutually exclusive with every online one (see offline.ts).
+ */
+exports.offlineConfigSchema = zod_1.z.object({
+    /**
+     * `--offline-head-seed`. Left out, it is derived from the head id, which is
+     * both unique per head and stable across restarts — two heads sharing a
+     * seed would derive the same head id.
+     */
+    headSeed: zod_1.z
+        .string()
+        .trim()
+        .regex(offline_1.offlineHeadSeedPattern, 'The head seed is 64 hex characters (32 bytes)')
+        .optional(),
+    /**
+     * The L2 ledger's entire starting state, verbatim, as hydra-node's
+     * `--initial-utxo` file. Left out, each node's own address is seeded with
+     * `seedLovelace` — so the operator holds the keys to everything in the head
+     * without having to write this by hand.
+     */
+    initialUtxo: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+    /**
+     * Bounded well below Number.MAX_SAFE_INTEGER: the value ends up in a JSON
+     * file read as JSON, and a seed large enough to round is a typo, not a
+     * requirement.
+     */
+    seedLovelace: zod_1.z.number().int().min(0).max(1_000_000_000_000_000).default(offline_1.DEFAULT_OFFLINE_SEED_LOVELACE),
+    /**
+     * Shelley genesis for `--ledger-genesis`, which gives the simulated L1 its
+     * slot/time arithmetic. Genuinely optional — hydra-node's own default is
+     * "no genesis file" — so it is omitted rather than invented when absent: a
+     * hand-built partial genesis fails to decode and kills the node at startup.
+     */
+    ledgerGenesis: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+});
+/** Per-head logging. See HeadLoggingView for why hydra-node and Docker knobs sit together. */
+exports.headLoggingSchema = zod_1.z.object({
+    /** hydra-node `--quiet`. */
+    quiet: zod_1.z.boolean().default(false),
+    /** Docker json-file max-size per file, in MB. */
+    maxSizeMb: zod_1.z.number().int().min(1).max(1024).default(10),
+    /** Docker json-file max-file. */
+    maxFiles: zod_1.z.number().int().min(1).max(50).default(3),
+});
+/**
+ * Kept as a plain object so `updateHeadSchema` can still `.partial()` it —
+ * the cross-field rules live in `createHeadSchema` below, and a ZodEffects
+ * cannot be partialled.
+ */
+const createHeadObject = zod_1.z.object({
+    name: zod_1.z
+        .string()
+        .min(1, 'name is required')
+        .max(48)
+        .regex(/^[a-zA-Z0-9][a-zA-Z0-9 _-]*$/, 'name may only contain letters, digits, space, dash and underscore'),
+    description: zod_1.z.string().max(280).optional(),
+    /** 1 = solo head (useful for smoke tests), up to 10 peers. */
+    nodeCount: zod_1.z.number().int().min(1).max(10).default(1),
+    network: domain_1.networkSchema.optional(),
+    chainBackend: domain_1.chainBackendSchema.optional(),
+    contestationPeriod: zod_1.z.number().int().min(1).max(86400).default(120),
+    depositPeriod: zod_1.z.number().int().min(1).max(86400).default(720),
+    persistenceRotateAfter: zod_1.z.number().int().min(100).default(15000),
+    /**
+     * Overrides merged on top of whatever protocol parameters are fetched at
+     * start. TOP-LEVEL keys only: the merge is a shallow spread, so a partial
+     * nested object replaces its whole key and drops the siblings. The create
+     * form builds these with `diffProtocolParameters`, which is what keeps them
+     * whole — see protocol-params.ts.
+     */
+    protocolParameters: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+    /** Only read when chainBackend is `offline`. */
+    offline: exports.offlineConfigSchema.optional(),
+    logging: exports.headLoggingSchema.optional(),
+    /**
+     * Blockfrost key for every node of this head, unless a node overrides it
+     * below. Optional: left out, nodes fall back to the server-wide key, and
+     * the control-plane refuses the head if there isn't one.
+     */
+    blockfrostProjectId: exports.blockfrostProjectIdSchema.optional(),
+    /**
+     * Per-node keys, one per node in index order.
+     *
+     * Blockfrost meters per project id, so a head whose nodes all share one key
+     * spends a single rate limit budget N ways — fine for a smoke test, not for
+     * N independent participants. Sharing stays the default (this is left out,
+     * or filled with the same value); giving each node its own is a matter of
+     * filling the array.
+     */
+    nodeBlockfrostProjectIds: zod_1.z.array(exports.blockfrostProjectIdSchema).min(1).max(10).optional(),
+    /**
+     * Cardano payment keys to reuse instead of generating, one entry per node
+     * in index order; null for a node that should get a fresh pair.
+     *
+     * The point is funds: a generated node starts at a brand-new address that
+     * has to be filled from the faucet before the head can commit anything.
+     * Supplying a key that already holds test ADA skips that entirely.
+     *
+     * Hydra keys are never imported — they only sign Head protocol messages,
+     * so there is no state attached to carrying one over.
+     */
+    nodeCardanoKeys: zod_1.z
+        .array(zod_1.z
+        .object({
+        /** A .skey file, its cborHex, 64 hex chars, or ed25519_sk1… */
+        signingKey: zod_1.z.string().trim().min(1),
+        /** Optional .vkey, checked against the signing key. */
+        verificationKey: zod_1.z.string().trim().min(1).optional(),
+    })
+        .nullable())
+        .min(1)
+        .max(10)
+        .optional(),
+    /**
+     * Optional per-head hydra-node image; falls back to HYDRA_NODE_IMAGE.
+     *
+     * Any reference is accepted, not just the ones in HYDRA_VERSION_PROFILES —
+     * a tag with no profile is probed instead of refused, so a fork or a release
+     * newer than this build still boots. What the tag cannot be is empty or
+     * whitespace-bearing, which would reach Docker as an unparseable ref.
+     */
+    hydraNodeImage: zod_1.z
+        .string()
+        .trim()
+        .min(1)
+        .max(200)
+        .regex(/^\S+$/, 'hydraNodeImage must be a Docker image reference')
+        .optional(),
+});
+exports.createHeadSchema = createHeadObject.superRefine((v, ctx) => {
+    /**
+     * Offline heads are multi-party, but capped lower than online ones: every
+     * node runs on this one machine, each with an embedded etcd, and there is
+     * no L1 to spread the load over. See MAX_OFFLINE_NODES.
+     */
+    if (v.chainBackend === 'offline' && v.nodeCount > offline_1.MAX_OFFLINE_NODES) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['nodeCount'],
+            message: `An offline head runs at most ${offline_1.MAX_OFFLINE_NODES} nodes — they all share this machine, with no layer 1 to spread the load over.`,
+        });
+    }
+    /**
+     * Keys the head would store and never read. An offline node makes no HTTP
+     * calls at all, so accepting a project id here would leave a credential on
+     * disk for nothing.
+     */
+    if (v.chainBackend === 'offline' && (v.blockfrostProjectId || v.nodeBlockfrostProjectIds)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['blockfrostProjectId'],
+            message: 'An offline head never contacts Blockfrost — remove the project id.',
+        });
+    }
+    // Settings that would be stored and silently ignored. Saying so is better
+    // than letting someone tune a seed UTxO that no node will ever read.
+    if (v.offline && v.chainBackend && v.chainBackend !== 'offline') {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['offline'],
+            message: `Offline settings only apply to an offline head, not a ${v.chainBackend} one.`,
+        });
+    }
+    // One key per node, in index order — a short array would silently leave the
+    // tail of the head on a different key than the operator intended.
+    if (v.nodeBlockfrostProjectIds && v.nodeBlockfrostProjectIds.length !== v.nodeCount) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['nodeBlockfrostProjectIds'],
+            message: `Expected one Blockfrost key per node (${v.nodeCount}), got ${v.nodeBlockfrostProjectIds.length}`,
+        });
+    }
+    if (v.nodeCardanoKeys && v.nodeCardanoKeys.length !== v.nodeCount) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['nodeCardanoKeys'],
+            message: `Expected one entry per node (${v.nodeCount}), got ${v.nodeCardanoKeys.length}. Use null for nodes that should get a generated key.`,
+        });
+    }
+    /**
+     * A key's prefix is its network. Mismatches are worth catching here because
+     * hydra-node does not fail on them — it starts, watches the wrong chain,
+     * and simply never sees the head's own init transaction.
+     */
+    if (!v.network)
+        return;
+    const wrong = (id) => !id.startsWith(v.network);
+    if (v.blockfrostProjectId && wrong(v.blockfrostProjectId)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['blockfrostProjectId'],
+            message: `This key is not for ${v.network} — a ${v.network} project id starts with "${v.network}"`,
+        });
+    }
+    v.nodeBlockfrostProjectIds?.forEach((id, i) => {
+        if (wrong(id)) {
+            ctx.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['nodeBlockfrostProjectIds', i],
+                message: `This key is not for ${v.network} — a ${v.network} project id starts with "${v.network}"`,
+            });
+        }
+    });
+});
+exports.updateHeadSchema = createHeadObject
+    .partial()
+    .omit({ nodeCount: true })
+    .extend({ name: createHeadObject.shape.name.optional() });
+/**
+ * Check a Cardano key before it is committed to a head.
+ *
+ * Pasting a key is the one step of head creation with no feedback: the address
+ * it produces is not visible until the head exists, and by then a wrong key
+ * means deleting and starting over. This answers "what address is this, and
+ * does it hold anything" while the form is still open.
+ */
+exports.verifyCardanoKeySchema = zod_1.z.object({
+    signingKey: zod_1.z.string().trim().min(1),
+    /** Optional, and only ever cross-checked against the signing key. */
+    verificationKey: zod_1.z.string().trim().min(1).optional(),
+    /** Defaults to the server's network — the address differs per network. */
+    network: domain_1.networkSchema.optional(),
+    /**
+     * Key to look the balance up with, for a head that will carry its own.
+     * Falls back to the server-wide one; without either, the address still
+     * comes back and the balance does not.
+     */
+    blockfrostProjectId: exports.blockfrostProjectIdSchema.optional(),
+});
+/**
+ * The protocol parameters a head created right now would boot with.
+ *
+ * The create form needs the effective baseline before it can offer to edit it:
+ * overrides merge at the top level, so a field can only be changed safely by
+ * starting from the whole current value and diffing. Asking the server also
+ * keeps the browser out of the business of holding a Blockfrost key.
+ */
+exports.protocolParametersQuerySchema = zod_1.z.object({
+    network: domain_1.networkSchema.optional(),
+    /** For a head that will carry its own key, before it exists. */
+    blockfrostProjectId: exports.blockfrostProjectIdSchema.optional(),
+    /** Set false to see real L1 fees instead of the zeroed L2 ones. */
+    zeroFees: zod_1.z.boolean().optional(),
+});
+exports.listHeadsQuerySchema = zod_1.z.object({
+    status: zod_1.z.string().optional(),
+});
+/** Wipe persistence dirs so the head can restart from a clean slate. */
+exports.resetHeadSchema = zod_1.z.object({
+    /** Also delete generated key material (forces brand-new addresses). */
+    includeKeys: zod_1.z.boolean().default(false),
+});
+exports.loginSchema = zod_1.z.object({
+    username: zod_1.z.string().min(1),
+    password: zod_1.z.string().min(1),
+});
+// ---------------------------------------------------------------------- setup
+/**
+ * First-run setup.
+ *
+ * Until this exists, standing up Hexcore meant editing a 123-line `.env` by
+ * hand — which assumes the reader already knows what a Blockfrost project id is
+ * and which of thirty keys matter. docs/PRODUCT.md names non-technical
+ * operators as a first-class audience, and that file is where they stopped.
+ *
+ * The settings a wizard may write are deliberately a SMALL subset of the env
+ * schema. Two rules decide what is in:
+ *
+ *  1. It must be answerable by someone who has not read the code. `PORT_BASE`
+ *     and `HYDRA_UNSYNCED_PERIOD` are not; they stay env-only, where whoever
+ *     needs them will find them.
+ *  2. It must be applicable without a restart. `PORT` and `STATE_DIR` are read
+ *     once while the process boots — offering them in a web form would produce
+ *     a saved setting that silently does not take effect.
+ */
+exports.settingsSchema = zod_1.z.object({
+    network: domain_1.networkSchema,
+    chainBackend: domain_1.chainBackendSchema,
+    /**
+     * Blank clears it. The wizard sends what the operator typed, and an empty
+     * box has to mean "no key" rather than "keep the old one" — the opposite
+     * rule is what makes a settings form unable to remove a value.
+     */
+    blockfrostProjectId: zod_1.z.string().trim().optional(),
+    cardanoNodeSocket: zod_1.z.string().trim().optional(),
+    /** Default image for heads that name none; a head can still pin its own. */
+    hydraNodeImage: zod_1.z.string().trim().min(1).optional(),
+    adminUsername: zod_1.z.string().trim().min(1).optional(),
+});
+/**
+ * The setup request.
+ *
+ * Carries the admin password, which is the one value that must never reach the
+ * settings file: it is handed to the auth service, hashed into `secrets.json`,
+ * and dropped. Left blank, one is generated and printed once — the same
+ * behaviour a fresh boot has always had.
+ */
+exports.completeSetupSchema = exports.settingsSchema.extend({
+    /**
+     * Proves the caller can read the terminal Hexcore was started from.
+     *
+     * Setup is necessarily reachable without a token — it is where the password
+     * is set — so on any interface but loopback the first request wins, and on
+     * a shared network that is a takeover. The CLI prints the URL with this in
+     * it, so for the person who just ran `hexcore` it costs a click.
+     */
+    setupToken: zod_1.z.string().min(1),
+    adminPassword: zod_1.z.string().min(8, 'Use at least 8 characters').optional(),
+});
+/**
+ * How far a wipe goes.
+ *
+ * Split into three because the middle one is the one people actually want and
+ * the last one destroys money. A head's Cardano keys control addresses that may
+ * hold test ADA — or, on mainnet, ADA — and Hexcore is the only place they
+ * exist. `everything` is therefore CLI-only; see the note on cleanSchema.
+ */
+exports.cleanScopeSchema = zod_1.z.enum(['config', 'heads', 'everything']);
+/**
+ * `everything` is deliberately absent from the API surface.
+ *
+ * Two reasons, and the second is not negotiable: it deletes the key material
+ * behind funded addresses, and it deletes the SQLite database the request is
+ * being served from. A server cannot honestly delete its own state mid-request
+ * and then answer. `hexcore clean --all` does it with the process stopped.
+ */
+exports.cleanSchema = zod_1.z.object({
+    scope: zod_1.z.enum(['config', 'heads']),
+    /** Must equal the machine's own name; the UI shows which to type. */
+    confirm: zod_1.z.string().min(1),
+});
+//# sourceMappingURL=api.js.map

package/node_modules/@hexcore/shared/dist/cjs/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,6BAAwB;AACxB,qCAAkF;AAClF,uCAAqG;AAErG;;;;;GAKG;AACH;;;;GAIG;AACU,QAAA,yBAAyB,GAAG,OAAC;KACrC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CACF,yCAAyC,EACzC,4EAA4E,CAC/E,CAAC;AAEN;;;GAGG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC;;;;OAIG;IACH,QAAQ,EAAE,OAAC;SACN,MAAM,EAAE;SACR,IAAI,EAAE;SACN,KAAK,CAAC,gCAAsB,EAAE,+CAA+C,CAAC;SAC9E,QAAQ,EAAE;IACf;;;;;OAKG;IACH,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD;;;;OAIG;IACH,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,uCAA6B,CAAC;IACvG;;;;;OAKG;IACH,aAAa,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAGH,8FAA8F;AACjF,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,4BAA4B;IAC5B,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjC,iDAAiD;IACjD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,iCAAiC;IACjC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACvD,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC1B,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,8BAA8B,EAAE,mEAAmE,CAAC;IAC/G,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,8DAA8D;IAC9D,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,sBAAa,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,2BAAkB,CAAC,QAAQ,EAAE;IAC3C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACnE,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC9D,sBAAsB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChE;;;;;;OAMG;IACH,kBAAkB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChE,gDAAgD;IAChD,OAAO,EAAE,2BAAmB,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,yBAAiB,CAAC,QAAQ,EAAE;IACrC;;;;OAIG;IACH,mBAAmB,EAAE,iCAAyB,CAAC,QAAQ,EAAE;IACzD;;;;;;;;OAQG;IACH,wBAAwB,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtF;;;;;;;;;;OAUG;IACH,eAAe,EAAE,OAAC;SACb,KAAK,CACF,OAAC;SACI,MAAM,CAAC;QACJ,+DAA+D;QAC/D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,uDAAuD;QACvD,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACvD,CAAC;SACD,QAAQ,EAAE,CAClB;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;IACf;;;;;;;OAOG;IACH,cAAc,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,OAAO,EAAE,iDAAiD,CAAC;SACjE,QAAQ,EAAE;CAClB,CAAC,CAAC;AAEU,QAAA,gBAAgB,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACpE;;;;OAIG;IACH,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,2BAAiB,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC;YACT,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,gCAAgC,2BAAiB,gFAAgF;SAC7I,CAAC,CAAC;IACP,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,QAAQ,CAAC;YACT,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;YAC7B,OAAO,EAAE,oEAAoE;SAChF,CAAC,CAAC;IACP,CAAC;IAED,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC;YACT,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,yDAAyD,CAAC,CAAC,YAAY,OAAO;SAC1F,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,CAAC,CAAC,wBAAwB,IAAI,CAAC,CAAC,wBAAwB,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAClF,GAAG,CAAC,QAAQ,CAAC;YACT,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,0BAA0B,CAAC;YAClC,OAAO,EAAE,yCAAyC,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE;SAC7G,CAAC,CAAC;IACP,CAAC;IAED,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAChE,GAAG,CAAC,QAAQ,CAAC;YACT,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,gCAAgC,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,eAAe,CAAC,MAAM,uDAAuD;SAChJ,CAAC,CAAC;IACP,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO;IACvB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,mBAAmB,IAAI,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC;YACT,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;YAC7B,OAAO,EAAE,uBAAuB,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,4BAA4B,CAAC,CAAC,OAAO,GAAG;SACrG,CAAC,CAAC;IACP,CAAC;IACD,CAAC,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1C,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACZ,GAAG,CAAC,QAAQ,CAAC;gBACT,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,0BAA0B,EAAE,CAAC,CAAC;gBACrC,OAAO,EAAE,uBAAuB,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,4BAA4B,CAAC,CAAC,OAAO,GAAG;aACrG,CAAC,CAAC;QACP,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAGU,QAAA,gBAAgB,GAAG,gBAAgB;KAC3C,OAAO,EAAE;KACT,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACzB,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAG9D;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,qEAAqE;IACrE,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,0EAA0E;IAC1E,OAAO,EAAE,sBAAa,CAAC,QAAQ,EAAE;IACjC;;;;OAIG;IACH,mBAAmB,EAAE,iCAAyB,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAeH;;;;;;;GAOG;AACU,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,sBAAa,CAAC,QAAQ,EAAE;IACjC,gEAAgE;IAChE,mBAAmB,EAAE,iCAAyB,CAAC,QAAQ,EAAE;IACzD,mEAAmE;IACnE,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAWU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,wEAAwE;AAC3D,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,uEAAuE;IACvE,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC1C,CAAC,CAAC;AAGU,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAGH,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;GAiBG;AACU,QAAA,cAAc,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,sBAAa;IACtB,YAAY,EAAE,2BAAkB;IAChC;;;;OAIG;IACH,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjD,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/C,4EAA4E;IAC5E,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGH;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,sBAAc,CAAC,MAAM,CAAC;IACrD;;;;;;;OAOG;IACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE;CAC3E,CAAC,CAAC;AA+BH;;;;;;;GAOG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAG1E;;;;;;;GAOG;AACU,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClC,qEAAqE;IACrE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC"}