agent-comms 1.13.0 → 1.15.0

package/dist/core/federation.js

@@ -0,0 +1,411 @@
+/**
+ * FederationManager — manages TLS links between mesh coordinators.
+ *
+ * Federation links are persistent TLS connections between coordinators on
+ * different machines. They forward agent presence, room memberships, and
+ * messages for rooms marked as federated. Non-federated rooms never leave
+ * the local mesh.
+ *
+ * Each link uses certificate pinning (the same trust model as TlsTransport).
+ * The wire protocol runs over the same newline-delimited JSON framing as the
+ * local mesh, but with `fed_*` method types.
+ */
+import * as tls from "node:tls";
+import { encode, isMeshMessage, MessageBuffer } from "./wire-protocol.js";
+import { nanoid } from "./nanoid.js";
+import { generateIdentity } from "./identity.js";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const FED_PING_INTERVAL_MS = 30_000;
+const FED_PING_TIMEOUT_MS = 10_000;
+const FED_VERSION = "1.0.0";
+// ---------------------------------------------------------------------------
+// FederationManager
+// ---------------------------------------------------------------------------
+export class FederationManager {
+    links = new Map();
+    identity;
+    meshId;
+    meshName;
+    callbacks;
+    pingTimers = new Map();
+    shutDown = false;
+    pendingPongs = new Map();
+    constructor(meshId, meshName, callbacks) {
+        this.meshId = meshId;
+        this.meshName = meshName;
+        this.callbacks = callbacks;
+        this.identity = generateIdentity();
+    }
+    /** The TLS identity used for federation connections. */
+    get tlsIdentity() {
+        return this.identity;
+    }
+    // -----------------------------------------------------------------------
+    // Outbound links
+    // -----------------------------------------------------------------------
+    /**
+     * Establish an outbound federation link to a remote coordinator.
+     * Returns the local link ID once the handshake completes.
+     */
+    async connect(host, port, name) {
+        if (this.shutDown)
+            throw new Error("FederationManager is shut down");
+        const linkId = nanoid(8);
+        const socket = await this.tlsConnect(host, port);
+        const link = {
+            id: linkId,
+            remoteMeshId: "",
+            remoteName: name ?? `${host}:${String(port)}`,
+            socket,
+            ready: false,
+            direction: "outbound",
+        };
+        this.links.set(linkId, link);
+        // Send handshake
+        const handshake = {
+            method: "fed_handshake",
+            meshId: this.meshId,
+            name: this.meshName,
+            version: FED_VERSION,
+        };
+        await this.writeToSocket(socket, handshake);
+        // Wire up incoming message handling
+        this.wireSocket(linkId, socket);
+        // Wait for fed_ack (with timeout)
+        await this.waitForHandshake(linkId, 5000);
+        return linkId;
+    }
+    // -----------------------------------------------------------------------
+    // Inbound links (server)
+    // -----------------------------------------------------------------------
+    /**
+     * Handle an incoming TLS connection that sent a fed_handshake.
+     * Called by the transport layer when a federation connection arrives.
+     */
+    async handleInbound(socket) {
+        if (this.shutDown) {
+            socket.destroy();
+            throw new Error("FederationManager is shut down");
+        }
+        const linkId = nanoid(8);
+        const link = {
+            id: linkId,
+            remoteMeshId: "",
+            remoteName: "unknown",
+            socket,
+            ready: false,
+            direction: "inbound",
+        };
+        this.links.set(linkId, link);
+        this.wireSocket(linkId, socket);
+        // Wait for the remote side's handshake
+        await this.waitForHandshake(linkId, 5000);
+        return linkId;
+    }
+    // -----------------------------------------------------------------------
+    // Link management
+    // -----------------------------------------------------------------------
+    /** Disconnect a specific federation link. */
+    async disconnect(linkId) {
+        const link = this.links.get(linkId);
+        if (!link)
+            return;
+        this.clearLinkTimers(linkId);
+        link.ready = false;
+        link.socket.unref();
+        link.socket.destroy();
+        this.links.delete(linkId);
+    }
+    /** List all active federation links. */
+    listLinks() {
+        return [...this.links.values()].filter((l) => l.ready);
+    }
+    // -----------------------------------------------------------------------
+    // Broadcasting to federated links
+    // -----------------------------------------------------------------------
+    /** Broadcast an agent visibility event to all ready links. */
+    async broadcastAgentVisible(agent) {
+        const msg = { method: "fed_agent_visible", agent };
+        await this.broadcastToReady(msg);
+    }
+    /** Broadcast an agent gone event to all ready links. */
+    async broadcastAgentGone(agentId) {
+        const msg = { method: "fed_agent_gone", agentId };
+        await this.broadcastToReady(msg);
+    }
+    /** Forward a room message to all ready links (federated rooms only). */
+    async forwardRoomMessage(roomId, message) {
+        const msg = { method: "fed_room_message", roomId, message };
+        await this.broadcastToReady(msg);
+    }
+    /** Broadcast a room join to all ready links. */
+    async broadcastRoomJoin(roomId, agentId, agentName) {
+        const msg = {
+            method: "fed_room_join",
+            roomId,
+            agentId,
+            agentName,
+        };
+        await this.broadcastToReady(msg);
+    }
+    /** Broadcast a room leave to all ready links. */
+    async broadcastRoomLeave(roomId, agentId) {
+        const msg = { method: "fed_room_leave", roomId, agentId };
+        await this.broadcastToReady(msg);
+    }
+    // -----------------------------------------------------------------------
+    // Shutdown
+    // -----------------------------------------------------------------------
+    async shutdown() {
+        this.shutDown = true;
+        for (const linkId of [...this.links.keys()]) {
+            await this.disconnect(linkId);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Internal — TLS connection
+    // -----------------------------------------------------------------------
+    tlsConnect(host, port) {
+        return new Promise((resolve, reject) => {
+            const socket = tls.connect({
+                key: this.identity.privateKey,
+                cert: this.identity.certificate,
+                host,
+                port,
+                rejectUnauthorized: false,
+                requestCert: true,
+            }, () => {
+                resolve(socket);
+            });
+            const timer = setTimeout(() => {
+                socket.destroy();
+                reject(new Error(`Federation connection timeout to ${host}:${String(port)}`));
+            }, 5000);
+            socket.on("error", (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    }
+    // -----------------------------------------------------------------------
+    // Internal — socket wiring
+    // -----------------------------------------------------------------------
+    wireSocket(linkId, socket) {
+        const buffer = new MessageBuffer();
+        socket.on("data", (data) => {
+            const items = buffer.append(data.toString());
+            for (const item of items) {
+                if (isMeshMessage(item)) {
+                    void this.handleMessage(linkId, item);
+                }
+            }
+        });
+        socket.on("error", () => {
+            void this.disconnect(linkId);
+        });
+        socket.on("close", () => {
+            void this.disconnect(linkId);
+        });
+    }
+    // -----------------------------------------------------------------------
+    // Internal — message handling
+    // -----------------------------------------------------------------------
+    async handleMessage(linkId, msg) {
+        const link = this.links.get(linkId);
+        if (!link || this.shutDown)
+            return;
+        switch (msg.method) {
+            case "fed_handshake": {
+                // Inbound connection sending its handshake
+                link.remoteMeshId = msg.meshId;
+                link.remoteName = msg.name;
+                link.ready = true;
+                // Respond with ack
+                const ack = {
+                    method: "fed_ack",
+                    meshId: this.meshId,
+                    name: this.meshName,
+                    version: FED_VERSION,
+                };
+                await this.writeToSocket(link.socket, ack);
+                // Sync local state to the new link
+                await this.syncStateToLink(linkId);
+                // Start ping for this link
+                this.startPing(linkId);
+                break;
+            }
+            case "fed_ack": {
+                link.remoteMeshId = msg.meshId;
+                link.remoteName = msg.name;
+                link.ready = true;
+                // Sync local state to the new link
+                await this.syncStateToLink(linkId);
+                // Start ping for this link
+                this.startPing(linkId);
+                break;
+            }
+            case "fed_agent_visible": {
+                await this.callbacks.onAgentVisible(msg.agent);
+                break;
+            }
+            case "fed_agent_gone": {
+                await this.callbacks.onAgentGone(msg.agentId);
+                break;
+            }
+            case "fed_room_message": {
+                await this.callbacks.onRoomMessage(msg.roomId, msg.message);
+                break;
+            }
+            case "fed_room_join": {
+                await this.callbacks.onRoomJoin(msg.roomId, msg.agentId, msg.agentName);
+                break;
+            }
+            case "fed_room_leave": {
+                await this.callbacks.onRoomLeave(msg.roomId, msg.agentId);
+                break;
+            }
+            case "fed_ping": {
+                const pong = { method: "fed_pong" };
+                await this.writeToSocket(link.socket, pong);
+                break;
+            }
+            case "fed_pong": {
+                const pending = this.pendingPongs.get(linkId);
+                if (pending) {
+                    clearTimeout(pending);
+                    this.pendingPongs.delete(linkId);
+                }
+                break;
+            }
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Internal — state sync
+    // -----------------------------------------------------------------------
+    /**
+     * After handshake, push our visible agents and federated room memberships
+     * to the newly connected link.
+     */
+    async syncStateToLink(linkId) {
+        const link = this.links.get(linkId);
+        if (!link?.ready)
+            return;
+        // Sync visible agents
+        const agents = this.callbacks.getVisibleAgents();
+        for (const agent of agents) {
+            const msg = { method: "fed_agent_visible", agent };
+            await this.writeToSocket(link.socket, msg);
+        }
+        // Sync federated room memberships
+        const rooms = this.callbacks.getFederatedRoomMemberships();
+        for (const [roomId, memberIds] of rooms) {
+            for (const memberId of memberIds) {
+                const agent = this.callbacks
+                    .getVisibleAgents()
+                    .find((a) => a.id === memberId);
+                const agentName = agent?.name ?? memberId;
+                const msg = {
+                    method: "fed_room_join",
+                    roomId,
+                    agentId: memberId,
+                    agentName,
+                };
+                await this.writeToSocket(link.socket, msg);
+            }
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Internal — handshake waiting
+    // -----------------------------------------------------------------------
+    waitForHandshake(linkId, timeoutMs) {
+        return new Promise((resolve, reject) => {
+            const startTime = Date.now();
+            const check = () => {
+                const link = this.links.get(linkId);
+                if (link?.ready) {
+                    resolve();
+                    return;
+                }
+                if (Date.now() - startTime > timeoutMs) {
+                    void this.disconnect(linkId);
+                    reject(new Error(`Federation handshake timeout for link ${linkId}`));
+                    return;
+                }
+                setTimeout(check, 50);
+            };
+            check();
+        });
+    }
+    // -----------------------------------------------------------------------
+    // Internal — ping/pong health monitoring
+    // -----------------------------------------------------------------------
+    startPing(linkId) {
+        if (this.pingTimers.has(linkId))
+            return;
+        const timer = setInterval(() => {
+            void this.sendPing(linkId);
+        }, FED_PING_INTERVAL_MS);
+        this.pingTimers.set(linkId, timer);
+    }
+    async sendPing(linkId) {
+        const link = this.links.get(linkId);
+        if (!link?.ready)
+            return;
+        const msg = { method: "fed_ping" };
+        await this.writeToSocket(link.socket, msg);
+        // Set pong timeout
+        const timer = setTimeout(() => {
+            // No pong received — disconnect the link
+            void this.disconnect(linkId);
+        }, FED_PING_TIMEOUT_MS);
+        this.pendingPongs.set(linkId, timer);
+    }
+    // -----------------------------------------------------------------------
+    // Internal — helpers
+    // -----------------------------------------------------------------------
+    async writeToSocket(socket, msg) {
+        if (socket.destroyed)
+            return;
+        const data = encode(msg);
+        await new Promise((resolve, reject) => {
+            socket.write(data, "utf-8", (err) => {
+                if (err)
+                    reject(err);
+                else
+                    resolve();
+            });
+        });
+    }
+    async broadcastToReady(msg) {
+        const data = encode(msg);
+        const writes = [];
+        for (const [, link] of this.links) {
+            if (!link.ready || link.socket.destroyed)
+                continue;
+            writes.push(new Promise((resolve) => {
+                link.socket.write(data, "utf-8", (err) => {
+                    if (err) {
+                        void this.disconnect(link.id);
+                    }
+                    resolve();
+                });
+            }));
+        }
+        await Promise.all(writes);
+    }
+    clearLinkTimers(linkId) {
+        const pingTimer = this.pingTimers.get(linkId);
+        if (pingTimer !== undefined) {
+            clearInterval(pingTimer);
+            this.pingTimers.delete(linkId);
+        }
+        const pongTimer = this.pendingPongs.get(linkId);
+        if (pongTimer !== undefined) {
+            clearTimeout(pongTimer);
+            this.pendingPongs.delete(linkId);
+        }
+    }
+}
+//# sourceMappingURL=federation.js.map

package/dist/core/federation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation.js","sourceRoot":"","sources":["../../src/core/federation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAyCjD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,OAAO,iBAAiB;IACpB,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACnC,QAAQ,CAAe;IACvB,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,SAAS,CAAe;IACxB,UAAU,GAAG,IAAI,GAAG,EAA0C,CAAC;IAC/D,QAAQ,GAAG,KAAK,CAAC;IACjB,YAAY,GAAG,IAAI,GAAG,EAAyC,CAAC;IAExE,YAAY,MAAc,EAAE,QAAgB,EAAE,SAAuB;QACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACrC,CAAC;IAED,wDAAwD;IACxD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,0EAA0E;IAC1E,iBAAiB;IACjB,0EAA0E;IAE1E;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,IAAa;QACrD,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAY;YACpB,EAAE,EAAE,MAAM;YACV,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,IAAI,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE;YAC7C,MAAM;YACN,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,UAAU;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE7B,iBAAiB;QACjB,MAAM,SAAS,GAAgB;YAC7B,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,OAAO,EAAE,WAAW;SACrB,CAAC;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAE5C,oCAAoC;QACpC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEhC,kCAAkC;QAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,yBAAyB;IACzB,0EAA0E;IAE1E;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,MAAqB;QACvC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,IAAI,GAAY;YACpB,EAAE,EAAE,MAAM;YACV,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,SAAS;YACrB,MAAM;YACN,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,SAAS;SACrB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEhC,uCAAuC;QACvC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAE1E,6CAA6C;IAC7C,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,wCAAwC;IACxC,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,0EAA0E;IAC1E,kCAAkC;IAClC,0EAA0E;IAE1E,8DAA8D;IAC9D,KAAK,CAAC,qBAAqB,CAAC,KAAoB;QAC9C,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;QAChE,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,kBAAkB,CAAC,OAAe;QACtC,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;QAC/D,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,OAAoB;QAEpB,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACzE,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,iBAAiB,CACrB,MAAc,EACd,OAAe,EACf,SAAiB;QAEjB,MAAM,GAAG,GAAgB;YACvB,MAAM,EAAE,eAAe;YACvB,MAAM;YACN,OAAO;YACP,SAAS;SACV,CAAC;QACF,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,OAAe;QACtD,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACvE,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,0EAA0E;IAC1E,WAAW;IACX,0EAA0E;IAE1E,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,4BAA4B;IAC5B,0EAA0E;IAElE,UAAU,CAAC,IAAY,EAAE,IAAY;QAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CACxB;gBACE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;gBAC7B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBAC/B,IAAI;gBACJ,IAAI;gBACJ,kBAAkB,EAAE,KAAK;gBACzB,WAAW,EAAE,IAAI;aAClB,EACD,GAAG,EAAE;gBACH,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CACF,CAAC;YAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CACJ,IAAI,KAAK,CAAC,oCAAoC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CACtE,CAAC;YACJ,CAAC,EAAE,IAAI,CAAC,CAAC;YAET,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,2BAA2B;IAC3B,0EAA0E;IAElE,UAAU,CAAC,MAAc,EAAE,MAAqB;QACtD,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAEnC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,8BAA8B;IAC9B,0EAA0E;IAElE,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,GAAgB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEnC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,2CAA2C;gBAC3C,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC/B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAElB,mBAAmB;gBACnB,MAAM,GAAG,GAAgB;oBACvB,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,OAAO,EAAE,WAAW;iBACrB,CAAC;gBACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAE3C,mCAAmC;gBACnC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBAEnC,2BAA2B;gBAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC/B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAElB,mCAAmC;gBACnC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBAEnC,2BAA2B;gBAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5D,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxE,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC1D,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBACjD,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC5C,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC9C,IAAI,OAAO,EAAE,CAAC;oBACZ,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,wBAAwB;IACxB,0EAA0E;IAE1E;;;OAGG;IACK,KAAK,CAAC,eAAe,CAAC,MAAc;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,KAAK;YAAE,OAAO;QAEzB,sBAAsB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;YAChE,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,kCAAkC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC;YACxC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS;qBACzB,gBAAgB,EAAE;qBAClB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;gBAClC,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC;gBAC1C,MAAM,GAAG,GAAgB;oBACvB,MAAM,EAAE,eAAe;oBACvB,MAAM;oBACN,OAAO,EAAE,QAAQ;oBACjB,SAAS;iBACV,CAAC;gBACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,+BAA+B;IAC/B,0EAA0E;IAElE,gBAAgB,CAAC,MAAc,EAAE,SAAiB;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,MAAM,KAAK,GAAG,GAAS,EAAE;gBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;oBACvC,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBAC7B,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,MAAM,EAAE,CAAC,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACxB,CAAC,CAAC;YAEF,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,yCAAyC;IACzC,0EAA0E;IAElE,SAAS,CAAC,MAAc;QAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QAExC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAEzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,MAAc;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,KAAK;YAAE,OAAO;QAEzB,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE3C,mBAAmB;QACnB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,yCAAyC;YACzC,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAExB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,0EAA0E;IAC1E,qBAAqB;IACrB,0EAA0E;IAElE,KAAK,CAAC,aAAa,CACzB,MAAqB,EACrB,GAAgB;QAEhB,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAClC,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAgB;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,SAAS;YACnD,MAAM,CAAC,IAAI,CACT,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvC,IAAI,GAAG,EAAE,CAAC;wBACR,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAChC,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,eAAe,CAAC,MAAc;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}

package/dist/core/identity.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Cryptographic identity generation for mesh peers.
+ *
+ * Each MeshStore instance generates an ECDSA P-256 keypair and a self-signed
+ * X.509 certificate on first run. The peer ID is derived from the SHA-256
+ * fingerprint of the certificate (DER-encoded, hex with colons), replacing
+ * the previous nanoid(8) approach.
+ *
+ * Key material stays in memory only — never written to disk.
+ */
+export interface PeerIdentity {
+    /** PEM-encoded PKCS#8 private key. */
+    privateKey: string;
+    /** PEM-encoded self-signed X.509 certificate. */
+    certificate: string;
+    /** SHA-256 fingerprint of the certificate (DER), hex-encoded with colons. */
+    fingerprint: string;
+}
+/**
+ * Generate a fresh cryptographic identity: ECDSA P-256 keypair and self-signed
+ * X.509 certificate. The fingerprint of the certificate serves as the peer ID.
+ *
+ * Key material stays in memory only — never written to disk.
+ */
+export declare function generateIdentity(): PeerIdentity;
+/**
+ * Compute the SHA-256 fingerprint of a PEM-encoded certificate.
+ * Returns hex-encoded with colon separators (standard format): "AB:CD:EF:..."
+ */
+export declare function getCertificateFingerprint(certificate: string): string;
+//# sourceMappingURL=identity.d.ts.map

package/dist/core/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/core/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;CACrB;AA6MD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAmE/C;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAMrE"}