ai-fly 0.0.0 → 0.1.1

package/README.md

@@ -0,0 +1,105 @@
+# ai-fly
+
+Peer-to-peer network bridge with AI-ready presets, built on [OpenDWeb](https://github.com/jixoai/opendweb).
+
+Share any HTTP/WebSocket upstream (ollama / vllm / LM Studio, an internal gateway, or a keyed third-party API) with friends over an invite-based fabric. Consumers get plain endpoints on `127.0.0.1` — point agents' base URLs (or any WS client) at them. No root certificates, no system-level interception, no proxy.
+
+```
+Consumer machine                         Provider machine
+Agent ──► http://127.0.0.1:11434/…       ollama :11434 (or any HTTP/WS upstream)
+       ──► ws://127.0.0.1:11434/…            ▲   provider engine
+           consumer engine                   │   match set + rewrite ($env keys)
+               │  AUTH keyring / catalog     │   quotas (per key)
+               └────── OpenDWeb fabric ──────┘   (identity / invites / QUIC + relay)
+```
+
+- **Two-layer credentials.** `dweb1.` invite tokens admit *devices* (fabric layer);
+  `sk-aifly-` keys grant *group* access (app layer). Keys are device-independent —
+  revoke a key to cut every holder, revoke a token to eject one device. Share links
+  bundle one of each for first-time onboarding.
+- **Groups & services.** Providers define services (upstream + rewrite + display
+  domains), group them, and issue multiple keys per group. Same-named services in
+  different groups stay distinct (routing is always by serviceId).
+- **Streaming-first.** SSE relays chunk-by-chunk; WebSocket upgrades pass through as
+  a bidirectional byte channel (OpenAI Responses API WS works).
+- **Credentials never cross the wire** in either direction: provider keys live in
+  `$env` indirection; consumer-side auth headers are stripped at the protocol layer.
+- **Full-disclosure, minus secrets.** Consumers see each service's complete rule
+  (upstream, rewrites, domains) on expand; injected credential values render as `●`.
+
+**Status: M1 + M2 (engine + product).** The headless engine landed with the
+`net-fly-core` change; `m2-productize` added the OpenTray desktop shell
+(tray + window + one-time token UI), the Web UI (Dashboard / share wizard /
+connect wizard / advanced), the AI preset library (curated providers +
+models.dev long tail), and agent config writers (codex / claude-code /
+cursor / cline / continue). Proxy mode is permanently out of scope (TLS makes
+credential injection impossible without MITM).
+
+```bash
+# Provider
+ai-fly serve   --upstream http://127.0.0.1:11434   # run + manage services/groups
+ai-fly key     issue --group friends                # sk-aifly-… keys
+ai-fly share   --group friends --ttl 30m            # aifly1.… link (token + key)
+
+# Consumer
+ai-fly import  <link> --run                        # join + keyring + start gateway
+ai-fly key     add <sk-aifly-…> --provider <id>    # bare key into an existing ring
+ai-fly status  --verbose                            # ports, providers, service details
+```
+
+## Development
+
+```bash
+pnpm install
+pnpm test        # vitest (unit) + node --test (integration/e2e)
+pnpm typecheck   # tsc --noEmit (strict)
+pnpm build       # tsdown -> dist/ai-fly.js
+pnpm dev         # tsx src/bin.ts
+```
+
+Node >= 20. License: MIT OR Apache-2.0. The fabric dependency
+`@jixo/opendweb-client-sdk` ships native binaries for darwin-arm64 and win32-x64
+(no Linux yet).
+
+## Manual regression checklist
+
+Desktop-shell behaviors that automated suites do not cover. Run before any
+release build. Dev form takes **two terminals**: `pnpm webui:dev` (vite on
+127.0.0.1:5190, proxying `/ws` and the token gate to the UI daemon) AND
+`pnpm app:dev` (tray + window; the window loads the vite entry). Packaged
+form: `pnpm app:build` + `pnpm app:start`. Each line is pass/fail; English
+strings below are exactly what the UI shows.
+
+1. **Tray & window** — app starts with a tray icon; the tray menu's primary
+   item toggles the window (Open/Hide); `Quit ai-fly` exits cleanly (tray icon
+   disappears, ports released).
+2. **Token gate** — the UI only loads from the app window. Opening the daemon
+   URL directly shows the guidance page; a reused link token reports
+   "The link token is invalid or was already used."
+3. **Theme toggle** — dark/light switch persists across a window close/reopen.
+4. **Share wizard (3 steps)** — pick a preset (provider logos render, search
+   filters; local presets first), name & group, generate link. The final card
+   shows the `aifly1.` link with a copy field and the raw key once.
+5. **Connect wizard (3 steps)** — paste the link from another machine (or the
+   same one with a fresh data dir), confirm ports, pick an agent writer; the
+   preview diff matches the written file.
+6. **Key revoke while connected** — revoke the key on the provider (Advanced >
+   keys); the consumer's dashboard flips its provider row to an error state and
+   requests start failing with `key_revoked` within seconds.
+7. **Restart recovery** — quit and relaunch on both sides: services, groups,
+   keys, imported providers and custom ports all come back; the gateway
+   resumes and serves traffic without re-importing.
+8. **Overlay safe area & drag** (macOS overlay window) — the traffic lights
+   never overlap the brand block or content; dragging the strip at the very
+   top of the window moves the window; resize keeps the offset correct. In a
+   plain browser tab the layout must look identical (zero inset fallback).
+9. **Secrets panel** — Advanced > secrets: add a key-value pair, pick it in
+   the share wizard's "api key" selector, generate a service; the saved
+   rewrite shows `authorization: $secret:<name>`; values never re-display
+   after saving; removing a secret referenced by a service is allowed but the
+   service then fails with `secret_missing` until re-added.
+10. **Connectivity test** — in the share wizard (with a secret picked) or a
+    service row in Advanced, press `test`: the cheapest priced chat model is
+    picked by default, the dropdown lists models sorted by price, and the
+    result line shows `ok · <ms> · <model>` or the upstream error (an
+    upstream 401 with an invalid key is a PASS — the network is proven).

package/dist/ai-fly.d.ts

@@ -0,0 +1 @@
+export {}

package/dist/ai-fly.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { match } from "ts-pattern";
+//#region src/bin.ts
+const USAGE = `ai-fly — peer-to-peer HTTP/WebSocket bridge with AI-ready presets (OpenDWeb fabric)
+
+Provider:
+  ai-fly serve    [--data <dir>] [--relay <url>]...        run the provider daemon
+  ai-fly service  add|list|remove ...                      manage services
+  ai-fly group    add|set-services|list ...                  manage groups
+  ai-fly key      issue|list|revoke --group <name>         manage group keys
+  ai-fly share    --group <name> [--ttl <dur>]             mint a share link (token + key)
+  ai-fly revoke   <endpointId>                             eject a device (fabric-level)
+  ai-fly status   [provider|consumer] [--verbose]          snapshot (auto: both if present)
+
+Consumer:
+  ai-fly join     <dweb1-token> [--data <dir>]             admit this device (fabric layer)
+  ai-fly key      add <sk-aifly-key> --provider <id>       bare key into an existing ring
+  ai-fly import   <aifly1-link> [--run] [--preview]        bundle link: join + keyring
+  ai-fly run      [--data <dir>] [--strict-ports]          run the local gateway
+  ai-fly ports    [--data <dir>] [<serviceId> --port <n>]  view/override mapped ports
+  ai-fly status   [provider|consumer] [--verbose]          snapshot (auto: both if present)
+  ai-fly forget   <endpointId|8-char-prefix>               drop an imported provider
+
+Options:
+  --data <dir>    storage location (tilde expanded; role-specific default)
+  --relay <url>   relay entry URL (repeatable; flag > AIFLY_RELAY env > ~/.aifly/config.json)
+  --help, -h      show this help`;
+async function dispatch(command, rest) {
+	const providerDirExists = () => existsSync(join(homedir(), ".aifly", "provider"));
+	const consumersRootExists = () => {
+		try {
+			return existsSync(join(homedir(), ".aifly", "consumers"));
+		} catch {
+			return false;
+		}
+	};
+	const lazy = (load) => {
+		return (argv, ctx) => load().then((m) => m.run([...argv], ctx));
+	};
+	return match(command).with("serve", () => lazy(() => import("./serve-R03mDBwd.mjs"))(rest)).with("service", () => lazy(() => import("./service-Cd4R47n4.mjs"))(rest)).with("group", () => lazy(() => import("./group-Csy9VmFb.mjs"))(rest)).with("share", () => lazy(() => import("./share-DGM2TOft.mjs"))(rest)).with("revoke", () => lazy(() => import("./revoke-CyrOzc8t.mjs"))(rest)).with("join", () => lazy(() => import("./join-E1_-Rt-7.mjs"))(rest)).with("import", () => lazy(() => import("./import-BVAFw5Tx.mjs"))(rest)).with("run", () => lazy(() => import("./run-Be8H-IRf.mjs"))(rest)).with("ports", () => lazy(() => import("./ports-BQukx7wS.mjs"))(rest)).with("forget", () => lazy(() => import("./forget-BEbNwPip.mjs"))(rest)).with("key", () => {
+		if (rest[0] === "add") return lazy(() => import("./key-Bt4EWiuO.mjs"))(rest);
+		return lazy(() => import("./key-CK77IYXp.mjs"))(rest);
+	}).with("status", async () => {
+		const [scope, ...tail] = rest;
+		const wantProvider = scope === "provider" || scope !== "consumer" && providerDirExists();
+		const wantConsumer = scope === "consumer" || scope !== "provider" && consumersRootExists();
+		const argv = scope === "provider" || scope === "consumer" ? tail : rest;
+		let code = 0;
+		if (wantProvider) code = Math.max(code, await lazy(() => import("./status-W2OS7WB6.mjs"))(argv));
+		if (wantConsumer) code = Math.max(code, await lazy(() => import("./status-DRaKNvqz.mjs"))(argv));
+		if (!wantProvider && !wantConsumer) process.stdout.write("nothing to report: no provider storage and no imported consumers\n");
+		return code;
+	}).otherwise(() => {
+		throw new UsageError(`error: unknown command '${command}' (see ai-fly --help)`);
+	});
+}
+async function main(argv) {
+	const first = argv[0];
+	if (first === void 0 || first === "--help" || first === "-h") {
+		process.stdout.write(`${USAGE}\n`);
+		return first === void 0 ? 2 : 0;
+	}
+	return dispatch(first, argv.slice(1));
+}
+try {
+	const code = await main(process.argv.slice(2));
+	process.exitCode = code;
+} catch (err) {
+	process.exitCode = reportCliError(err);
+}
+//#endregion
+export {};

package/dist/common-4VeA_3wo.mjs

@@ -0,0 +1,347 @@
+import { t as CliError } from "./errors-BGtxPkM7.mjs";
+import { i as randomZ32, n as resolveRelayUrls, t as loadConfig } from "./config-CO3WyW2H.mjs";
+import { t as loadSdk, u as SERVICE_ENTRY_SCHEMA } from "./sdk-C6xDRbzg.mjs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { z } from "zod";
+//#region src/consumer/store.ts
+const DIR_MODE = 448;
+const FILE_MODE = 384;
+const KEYRING_SCHEMA = z.object({
+	alias: z.string().min(1).max(256),
+	endpointId: z.string().min(8).max(128),
+	relayUrls: z.array(z.string().min(1).max(2048)),
+	keys: z.array(z.strictObject({
+		keyId: z.string().max(128),
+		key: z.string().min(8).max(256),
+		group: z.string().max(256)
+	})),
+	services: z.array(SERVICE_ENTRY_SCHEMA),
+	ports: z.record(z.string(), z.number().int().min(0).max(65535))
+});
+/** 消费侧数据根：默认 ~/.aifly/consumers；--data <dir> 时以 <dir> 为根（CLI 语义）。 */
+function consumersRoot(dataDir, base = homedir()) {
+	if (dataDir !== void 0 && dataDir !== "") return dataDir;
+	return join(base, ".aifly", "consumers");
+}
+/** 提供者钥环目录：<root>/<endpointId 前 8 字符>。 */
+function keyringDir(root, endpointId) {
+	return join(root, endpointId.slice(0, 8));
+}
+/** 该提供者的 Fabric dataDir（SDK 自管；本层只负责路径形状）。 */
+function fabricDir(root, endpointId) {
+	return join(keyringDir(root, endpointId), "fabric");
+}
+/** 本机是否已有该提供者的 fabric 身份目录（import 老设备判定）。 */
+function hasFabricIdentity(root, endpointId) {
+	return existsSync(fabricDir(root, endpointId));
+}
+function ensureDirMode(dir) {
+	mkdirSync(dir, {
+		recursive: true,
+		mode: DIR_MODE
+	});
+	try {
+		chmodSync(dir, DIR_MODE);
+	} catch {}
+}
+/** 原子写 keyring.json：同目录 tmp 落盘 → chmod 0600 → rename 覆盖。 */
+function saveKeyring(root, ring) {
+	const dir = keyringDir(root, ring.endpointId);
+	ensureDirMode(root);
+	ensureDirMode(dir);
+	const finalPath = join(dir, "keyring.json");
+	const tmpPath = join(dir, `.keyring.json.tmp-${randomZ32(4)}`);
+	writeFileSync(tmpPath, `${JSON.stringify(ring, null, 2)}\n`, { mode: FILE_MODE });
+	try {
+		chmodSync(tmpPath, FILE_MODE);
+	} catch {}
+	renameSync(tmpPath, finalPath);
+	return finalPath;
+}
+function readRingAt(dir) {
+	const p = join(dir, "keyring.json");
+	if (!existsSync(p)) return void 0;
+	const raw = readFileSync(p, "utf8");
+	const parsed = JSON.parse(raw);
+	const result = KEYRING_SCHEMA.safeParse(parsed);
+	if (!result.success) throw new CliError(`error: keyring ${p} failed validation: ${result.error.message}`);
+	return result.data;
+}
+/** 严格加载单个钥环（按 endpointId 或 ≥8 字符前缀或别名定位）；不存在返回 undefined。 */
+function loadKeyring(root, ref) {
+	const found = findKeyringDir(root, ref);
+	if (found === void 0) return void 0;
+	return readRingAt(found);
+}
+/** 列出全部钥环；无 keyring.json 的目录静默跳过，损坏/非法的计入 warnings。 */
+function listKeyrings(root) {
+	const rings = [];
+	const warnings = [];
+	if (!existsSync(root)) return {
+		rings,
+		warnings
+	};
+	for (const ent of readdirSync(root, { withFileTypes: true })) {
+		if (!ent.isDirectory() || ent.name.startsWith(".")) continue;
+		let ring;
+		try {
+			ring = readRingAt(join(root, ent.name));
+		} catch (err) {
+			warnings.push(err.message);
+			continue;
+		}
+		if (ring === void 0) continue;
+		rings.push(ring);
+	}
+	rings.sort((a, b) => a.alias.localeCompare(b.alias));
+	return {
+		rings,
+		warnings
+	};
+}
+/**
+* 定位钥环目录：完整 endpointId 精确匹配 → 目录名（endpointId 前 8 字符）前缀匹配
+* （≥8 字符，歧义报错）→ 别名精确匹配。未命中返回 undefined。
+*/
+function findKeyringDir(root, ref) {
+	if (!existsSync(root)) return void 0;
+	const dirs = readdirSync(root, { withFileTypes: true }).filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => e.name);
+	for (const name of dirs) {
+		const dir = join(root, name);
+		if (ref.startsWith(name)) try {
+			const ring = readRingAt(dir);
+			if (ring !== void 0 && ring.endpointId === ref) return dir;
+		} catch {}
+	}
+	if (ref.length >= 8) {
+		const hasRing = (name) => {
+			try {
+				return readRingAt(join(root, name)) !== void 0;
+			} catch {
+				return false;
+			}
+		};
+		const hits = dirs.filter((name) => name.length <= ref.length && ref.startsWith(name) && hasRing(name));
+		if (hits.length > 1) throw new CliError(`error: ambiguous provider prefix '${ref}' (matches: ${hits.join(", ")})`);
+		if (hits.length === 1) return join(root, hits[0]);
+	}
+	for (const name of dirs) try {
+		const ring = readRingAt(join(root, name));
+		if (ring !== void 0 && ring.alias === ref) return join(root, name);
+	} catch {}
+}
+/**
+* 密钥入环（幂等）：
+* - keyId 非空：按 keyId 定位，命中则原位更新（key/group 覆盖）；
+* - keyId 空（裸密钥）：按 key 原文定位，命中则仅在环内元数据为空时回填；
+* - 未命中：追加。
+*/
+function upsertKey(ring, entry) {
+	const keys = [...ring.keys];
+	let idx = -1;
+	if (entry.keyId !== "") idx = keys.findIndex((k) => k.keyId === entry.keyId);
+	if (idx < 0) idx = keys.findIndex((k) => k.key === entry.key);
+	if (idx >= 0) {
+		const prev = keys[idx];
+		keys[idx] = {
+			keyId: entry.keyId !== "" ? entry.keyId : prev.keyId,
+			key: entry.key,
+			group: entry.group !== "" ? entry.group : prev.group
+		};
+		return {
+			ring: {
+				...ring,
+				keys
+			},
+			added: false
+		};
+	}
+	keys.push(entry);
+	return {
+		ring: {
+			...ring,
+			keys
+		},
+		added: true
+	};
+}
+/**
+* import 链接视图并入：alias/relayUrls 以链接为准（更新元数据），services 按
+* serviceId 并入（链接版本胜出，保留环内其它分组服务），key 走 upsertKey。
+*/
+function mergeImportView(base, payload, key) {
+	const ring = base ?? {
+		alias: payload.alias,
+		endpointId: payload.endpointId,
+		relayUrls: [],
+		keys: [],
+		services: [],
+		ports: {}
+	};
+	const merged = new Map(ring.services.map((s) => [s.serviceId, s]));
+	for (const s of payload.services) merged.set(s.serviceId, s);
+	const { ring: withKey, added } = upsertKey({
+		...ring,
+		alias: payload.alias,
+		relayUrls: [...payload.relayUrls],
+		services: [...merged.values()]
+	}, key);
+	return {
+		ring: withKey,
+		keyAdded: added
+	};
+}
+/**
+* 目录全量替换（AUTH_OK 初次/refresh 同构）：services、relayUrls 整体替换，
+* alias 可选更新；ports 修剪到存活服务（被删服务的端口记录一并移除）。
+*/
+function applyCatalog(ring, patch) {
+	const alive = new Set(patch.services.map((s) => s.serviceId));
+	const ports = {};
+	for (const [serviceId, port] of Object.entries(ring.ports)) if (alive.has(serviceId)) ports[serviceId] = port;
+	const next = {
+		...ring,
+		relayUrls: [...patch.relayUrls],
+		services: [...patch.services],
+		ports
+	};
+	if (patch.alias !== void 0 && patch.alias !== "") next.alias = patch.alias;
+	return next;
+}
+/** AUTH_OK 回填：groups[].{keyId,group} 对位到环内密钥（含裸密钥占位回填）。 */
+function reconcileKeyMetadata(ring, groups) {
+	const known = new Set(ring.keys.filter((k) => k.keyId !== "").map((k) => k.keyId));
+	const unmatched = groups.filter((g) => !known.has(g.keyId));
+	const empties = ring.keys.filter((k) => k.keyId === "");
+	if (unmatched.length === 0 || unmatched.length !== empties.length) return ring;
+	let i = 0;
+	const keys = ring.keys.map((k) => {
+		if (k.keyId !== "") return k;
+		const g = unmatched[i++];
+		return {
+			keyId: g.keyId,
+			key: k.key,
+			group: g.group
+		};
+	});
+	return {
+		...ring,
+		keys
+	};
+}
+/** 记录服务端口偏好（ports 命令写路径）。 */
+function setPort(root, endpointId, serviceId, port) {
+	const existing = loadKeyring(root, endpointId);
+	if (existing === void 0) throw new CliError(`error: provider '${endpointId}' not found`);
+	if (!existing.services.some((s) => s.serviceId === serviceId)) throw new CliError(`error: unknown service '${serviceId}' for provider '${existing.alias}'`);
+	const next = {
+		...existing,
+		ports: {
+			...existing.ports,
+			[serviceId]: port
+		}
+	};
+	saveKeyring(root, next);
+	return next;
+}
+/** forget：整环删除（钥环 + fabric 身份目录；提供方侧撤销需提供方操作）。 */
+function removeKeyring(root, ref) {
+	const dir = findKeyringDir(root, ref);
+	if (dir === void 0) throw new CliError(`error: provider '${ref}' not found`);
+	const stat = statSync(dir, { throwIfNoEntry: false });
+	if (stat === void 0 || !stat.isDirectory()) throw new CliError(`error: provider '${ref}' not found`);
+	const ring = readRingAt(dir);
+	rmSync(dir, {
+		recursive: true,
+		force: true
+	});
+	if (ring !== void 0) return {
+		dir,
+		ring
+	};
+	return {
+		dir,
+		ring: {
+			alias: ref,
+			endpointId: ref,
+			relayUrls: [],
+			keys: [],
+			services: [],
+			ports: {}
+		}
+	};
+}
+//#endregion
+//#region src/cli/commands/consumer/common.ts
+function ctxOut(ctx) {
+	return ctx.out ?? ((line) => process.stdout.write(`${line}\n`));
+}
+function ctxHomedir(ctx) {
+	return ctx.homedir ?? homedir();
+}
+/**
+* 真实 Fabric 工厂（CLI 层唯一触 SDK 的位置）：动态 import 规避 vitest worker 与
+* 原生模块的不兼容；relay 配置映射为 SDK FabricOptions.relay（custom urls），
+* 未配置时缺省走 SDK 默认（n0）。
+* 解析层级（Owner 裁决 2026-09-13：链接带来的会合点优先于环境/配置默认——
+* provider 在那个 relay 上，不拨它就永远会不了面）：逐次解析为
+* flag > ring/链接内嵌 relay（opts.relayUrls，调用侧按 ring 传入）> env > file。
+* @param linkRelayUrls aifly1. 链接内嵌 relay（import 的 join 阶段用；空 = 缺席）
+*/
+async function createSdkFabricFactory(relayFlag, ctx = {}, linkRelayUrls) {
+	const sdk = await loadSdk();
+	const toOpts = (opts) => {
+		const fabricOpts = { dataDir: opts.dataDir };
+		const link = opts.relayUrls ?? linkRelayUrls;
+		const urls = resolveRelayUrls({
+			...relayFlag !== void 0 ? { flag: relayFlag } : {},
+			...link !== void 0 ? { link } : {},
+			env: process.env.AIFLY_RELAY,
+			file: loadConfig(ctxHomedir(ctx))
+		});
+		if (urls !== void 0 && urls.length > 0) fabricOpts.relay = {
+			mode: "custom",
+			urls
+		};
+		return fabricOpts;
+	};
+	return {
+		open: async (opts) => await sdk.Fabric.open(toOpts(opts)),
+		joinWithToken: async (opts, token) => await sdk.Fabric.joinWithToken(toOpts(opts), token)
+	};
+}
+/** 等待 SIGINT/SIGTERM（run / import --run 长驻阻塞；测试不触达）。 */
+function waitForSignals() {
+	return new Promise((resolve) => {
+		let done = false;
+		const finish = () => {
+			if (done) return;
+			done = true;
+			process.off("SIGINT", finish);
+			process.off("SIGTERM", finish);
+			resolve();
+		};
+		process.on("SIGINT", finish);
+		process.on("SIGTERM", finish);
+	});
+}
+/** 打印引擎监听清单（run 启动横幅与 status 共用）。 */
+function printListeners(out, info) {
+	if (info.length === 0) {
+		out("local endpoints: (none - no authorized services yet)");
+		return;
+	}
+	out("local endpoints:");
+	for (const l of info) {
+		const note = l.autoAssigned ? `  [NOTICE: requested ${l.requested} was unavailable]` : "";
+		out(`  127.0.0.1:${l.port}  <-  ${l.alias} / ${l.name}  [${l.serviceId}]${note}`);
+	}
+}
+/** 引擎所需钥环集合加载（run/import --run/status 共用）。 */
+function ringsForRun(rings) {
+	return rings.filter((r) => r.keys.length > 0 || r.services.length > 0);
+}
+//#endregion
+export { removeKeyring as _, ringsForRun as a, upsertKey as b, consumersRoot as c, hasFabricIdentity as d, keyringDir as f, reconcileKeyMetadata as g, mergeImportView as h, printListeners as i, fabricDir as l, loadKeyring as m, ctxHomedir as n, waitForSignals as o, listKeyrings as p, ctxOut as r, applyCatalog as s, createSdkFabricFactory as t, findKeyringDir as u, saveKeyring as v, setPort as y };