aimeat 1.2.0

package/dist/src/services/extension-runtime.js

@@ -0,0 +1,282 @@
+/**
+ * @file extension-runtime.ts
+ * @description QuickJS WASM Sandbox Runtime for AIMEAT Extension Actions.
+ *   Executes user-provided extension scripts in a sandboxed QuickJS engine
+ *   compiled to WASM via `quickjs-emscripten`. The sandbox has NO access to
+ *   Node.js globals (process, require, Buffer, etc.) -- only a controlled
+ *   `ctx` API proxy.
+ * @version-history
+ *   v1.0.0 -- 2026-03-01 -- Initial V8 sandbox implementation (isolated-vm)
+ *   v1.1.0 -- 2026-03-15 -- Add memory access tracking (MemoryAccessLog + trackMemoryAccess)
+ *   v2.0.0 -- 2026-04-29 -- Replace isolated-vm with quickjs-emscripten (pure WASM, no C++ build tools)
+ */
+import { getQuickJS, shouldInterruptAfterDeadline } from 'quickjs-emscripten';
+// ── Internal helpers ─────────────────────────────────────────
+function setStringGlobal(vm, name, value) {
+    if (value === null) {
+        vm.setProp(vm.global, name, vm.null);
+        return;
+    }
+    const handle = vm.newString(value);
+    vm.setProp(vm.global, name, handle);
+    handle.dispose();
+}
+function registerAsyncHostFn(vm, name, fn, counter, maxApiCalls) {
+    if (fn === null) {
+        vm.setProp(vm.global, name, vm.null);
+        return;
+    }
+    const fnHandle = vm.newFunction(name, (...argHandles) => {
+        const args = argHandles.map(h => vm.getString(h));
+        const promise = vm.newPromise();
+        counter.count++;
+        if (counter.count > maxApiCalls) {
+            promise.reject(vm.newString('API call limit exceeded'));
+            promise.settled.then(vm.runtime.executePendingJobs);
+            return promise.handle;
+        }
+        fn(...args)
+            .then(result => {
+            if (vm.alive) {
+                const jsonStr = JSON.stringify(result ?? null);
+                promise.resolve(vm.newString(jsonStr));
+            }
+        })
+            .catch((err) => {
+            if (vm.alive) {
+                const msg = err instanceof Error ? err.message : String(err);
+                promise.reject(vm.newString(msg));
+            }
+        })
+            .finally(() => {
+            promise.settled.then(vm.runtime.executePendingJobs);
+        });
+        return promise.handle;
+    });
+    vm.setProp(vm.global, name, fnHandle);
+    fnHandle.dispose();
+}
+function registerLogFn(vm, name, fn) {
+    const fnHandle = vm.newFunction(name, (...argHandles) => {
+        const msg = vm.getString(argHandles[0]);
+        let data;
+        if (argHandles.length > 1) {
+            const raw = vm.dump(argHandles[1]);
+            if (raw !== undefined && raw !== null) {
+                const dataJson = typeof raw === 'string' ? raw : JSON.stringify(raw);
+                data = JSON.parse(dataJson);
+            }
+        }
+        fn(msg, data);
+    });
+    vm.setProp(vm.global, name, fnHandle);
+    fnHandle.dispose();
+}
+function transformScript(scriptContent) {
+    const body = scriptContent.replace(/export\s+default\s+/, '').trim();
+    return `const __userFn = ${body};`;
+}
+function buildSandboxScript(userFnDecl) {
+    return `
+${userFnDecl}
+
+(async () => {
+    async function __call(fn, args) {
+        const raw = await fn(...args);
+        return JSON.parse(raw);
+    }
+
+    const ctx = {
+        memory: {
+            get:       async (key)            => __call(__memory_get, [key]),
+            set:       async (key, value)     => __call(__memory_set, [key, JSON.stringify(value)]),
+            search:    async (prefix, opts)   => __call(__memory_search, [prefix, opts ? JSON.stringify(opts) : '{}']),
+            delete:    async (key)            => __call(__memory_delete, [key]),
+            getPublic: async (namespace, key) => __call(__memory_getPublic, [namespace, key]),
+        },
+        fetch: async (url, opts) => __call(__fetch, [url, opts ? JSON.stringify(opts) : '{}']),
+        wallet: {
+            consume:    __wallet_consume    ? (async (amount, reason) => __call(__wallet_consume, [String(amount), reason]))  : undefined,
+            getBalance: __wallet_balance    ? (async ()               => __call(__wallet_balance, []))                         : undefined,
+        },
+        consent: {
+            check:   __consent_check   ? (async (gaii, scope) => __call(__consent_check, [gaii, scope]))   : undefined,
+            require: __consent_require ? (async (gaii, scope) => __call(__consent_require, [gaii, scope])) : undefined,
+        },
+        trust: {
+            getScore: __trust_getScore ? (async (gaii) => __call(__trust_getScore, [gaii])) : undefined,
+        },
+        caller: JSON.parse(__callerJson),
+        config: JSON.parse(__configJson),
+        instance: __instanceJson ? JSON.parse(__instanceJson) : undefined,
+        log: {
+            info:  (msg, data) => __log_info(msg, data !== undefined ? JSON.stringify(data) : undefined),
+            warn:  (msg, data) => __log_warn(msg, data !== undefined ? JSON.stringify(data) : undefined),
+            error: (msg, data) => __log_error(msg, data !== undefined ? JSON.stringify(data) : undefined),
+        },
+        notify: __notify ? (async (message, opts) => __call(__notify, [message, opts ? JSON.stringify(opts) : '{}'])) : undefined,
+        email:  __email  ? (async (to, subject, body) => __call(__email, [to, subject, body]))                        : undefined,
+    };
+
+    const input = JSON.parse(__inputJson);
+    const result = await __userFn(ctx, input);
+    return JSON.stringify(result ?? {});
+})()
+`;
+}
+export function trackMemoryAccess(ctx) {
+    const accessLog = { reads: [], writes: [] };
+    const origMemory = ctx.memory;
+    const trackedMemory = {
+        get: async (key) => {
+            accessLog.reads.push(key);
+            return origMemory.get(key);
+        },
+        set: async (key, value) => {
+            accessLog.writes.push(key);
+            return origMemory.set(key, value);
+        },
+        search: async (prefix, opts) => {
+            accessLog.reads.push(`${prefix}*`);
+            return origMemory.search(prefix, opts);
+        },
+        delete: async (key) => {
+            accessLog.writes.push(`-${key}`);
+            return origMemory.delete(key);
+        },
+        getPublic: async (namespace, key) => {
+            accessLog.reads.push(`${namespace}:${key}`);
+            return origMemory.getPublic(namespace, key);
+        },
+    };
+    return {
+        ctx: { ...ctx, memory: trackedMemory },
+        accessLog,
+    };
+}
+// ── Main entry point ─────────────────────────────────────────
+let quickJSPromise = null;
+function getQuickJSSingleton() {
+    if (!quickJSPromise)
+        quickJSPromise = getQuickJS();
+    return quickJSPromise;
+}
+export async function executeExtensionAction(scriptContent, ctx, input, limits) {
+    const QuickJS = await getQuickJSSingleton();
+    const runtime = QuickJS.newRuntime();
+    runtime.setMemoryLimit(limits.memoryMb * 1024 * 1024);
+    runtime.setMaxStackSize(1024 * 1024);
+    runtime.setInterruptHandler(shouldInterruptAfterDeadline(Date.now() + limits.timeoutMs));
+    const vm = runtime.newContext();
+    try {
+        const counter = { count: 0 };
+        // ── Serialized data ──────────────────────────────────
+        setStringGlobal(vm, '__inputJson', JSON.stringify(input));
+        setStringGlobal(vm, '__callerJson', JSON.stringify(ctx.caller));
+        setStringGlobal(vm, '__configJson', JSON.stringify(ctx.config));
+        setStringGlobal(vm, '__instanceJson', ctx.instance ? JSON.stringify(ctx.instance) : null);
+        // ── Memory API ────────────────────────────────────────
+        registerAsyncHostFn(vm, '__memory_get', async (key) => ctx.memory.get(key), counter, limits.maxApiCalls);
+        registerAsyncHostFn(vm, '__memory_set', async (key, valueJson) => { const value = JSON.parse(valueJson); await ctx.memory.set(key, value); }, counter, limits.maxApiCalls);
+        registerAsyncHostFn(vm, '__memory_search', async (prefix, optsJson) => {
+            const opts = JSON.parse(optsJson || '{}');
+            return ctx.memory.search(prefix, opts);
+        }, counter, limits.maxApiCalls);
+        registerAsyncHostFn(vm, '__memory_delete', async (key) => ctx.memory.delete(key), counter, limits.maxApiCalls);
+        registerAsyncHostFn(vm, '__memory_getPublic', async (namespace, key) => ctx.memory.getPublic(namespace, key), counter, limits.maxApiCalls);
+        // ── Fetch API ─────────────────────────────────────────
+        registerAsyncHostFn(vm, '__fetch', async (url, optsJson) => {
+            const opts = JSON.parse(optsJson || '{}');
+            const resp = await fetch(url, {
+                method: opts.method || 'GET',
+                headers: opts.headers,
+                body: opts.body,
+                signal: AbortSignal.timeout(Math.min(limits.timeoutMs, 30_000)),
+            });
+            const buf = await resp.arrayBuffer();
+            const ct = resp.headers.get('content-type') || '';
+            const ctCharsetMatch = /charset=([^\s;]+)/i.exec(ct);
+            let charset = ctCharsetMatch ? ctCharsetMatch[1].toLowerCase() : '';
+            if (!charset) {
+                const peek = new TextDecoder('ascii').decode(buf.slice(0, 512));
+                const xmlMatch = /encoding=['"]([^'"]+)['"]/i.exec(peek);
+                const metaMatch = /<meta[^>]+charset=["']?([^\s"';>]+)/i.exec(peek);
+                charset = (xmlMatch?.[1] || metaMatch?.[1] || 'utf-8').toLowerCase();
+            }
+            if (charset && charset !== 'utf-8' && charset !== 'utf8') {
+                const bytes = new Uint8Array(buf);
+                let hasMultibyte = false;
+                for (let i = 0; i < bytes.length - 1; i++) {
+                    if (bytes[i] >= 0xC2 && bytes[i] <= 0xDF && (bytes[i + 1] & 0xC0) === 0x80) {
+                        hasMultibyte = true;
+                        break;
+                    }
+                    if (bytes[i] >= 0xE0 && bytes[i] <= 0xEF && i + 2 < bytes.length &&
+                        (bytes[i + 1] & 0xC0) === 0x80 && (bytes[i + 2] & 0xC0) === 0x80) {
+                        hasMultibyte = true;
+                        break;
+                    }
+                }
+                if (hasMultibyte)
+                    charset = 'utf-8';
+            }
+            const decoder = new TextDecoder(charset === 'utf8' ? 'utf-8' : charset);
+            const text = decoder.decode(buf);
+            const headers = {};
+            resp.headers.forEach((v, k) => { headers[k] = v; });
+            return { status: resp.status, ok: resp.ok, text, headers };
+        }, counter, limits.maxApiCalls);
+        // ── Wallet API ────────────────────────────────────────
+        registerAsyncHostFn(vm, '__wallet_consume', ctx.wallet.consume
+            ? async (amountStr, reason) => ctx.wallet.consume(Number(amountStr), reason)
+            : null, counter, limits.maxApiCalls);
+        registerAsyncHostFn(vm, '__wallet_balance', ctx.wallet.getBalance
+            ? async () => ctx.wallet.getBalance()
+            : null, counter, limits.maxApiCalls);
+        // ── Consent API ───────────────────────────────────────
+        registerAsyncHostFn(vm, '__consent_check', ctx.consent.check
+            ? async (gaii, scope) => ctx.consent.check(gaii, scope)
+            : null, counter, limits.maxApiCalls);
+        registerAsyncHostFn(vm, '__consent_require', ctx.consent.require
+            ? async (gaii, scope) => ctx.consent.require(gaii, scope)
+            : null, counter, limits.maxApiCalls);
+        // ── Trust API ─────────────────────────────────────────
+        registerAsyncHostFn(vm, '__trust_getScore', ctx.trust.getScore
+            ? async (gaii) => ctx.trust.getScore(gaii)
+            : null, counter, limits.maxApiCalls);
+        // ── Log functions (no API count) ──────────────────────
+        registerLogFn(vm, '__log_info', ctx.log.info);
+        registerLogFn(vm, '__log_warn', ctx.log.warn);
+        registerLogFn(vm, '__log_error', ctx.log.error);
+        // ── Notify & Email ────────────────────────────────────
+        registerAsyncHostFn(vm, '__notify', ctx.notify
+            ? async (message, optsJson) => ctx.notify(message, optsJson ? JSON.parse(optsJson) : undefined)
+            : null, counter, limits.maxApiCalls);
+        registerAsyncHostFn(vm, '__email', ctx.email
+            ? async (to, subject, body) => ctx.email(to, subject, body)
+            : null, counter, limits.maxApiCalls);
+        // ── Build and evaluate ────────────────────────────────
+        const userFnDecl = transformScript(scriptContent);
+        const fullScript = buildSandboxScript(userFnDecl);
+        const evalResult = vm.evalCode(fullScript);
+        const promiseHandle = vm.unwrapResult(evalResult);
+        // resolvePromise registers a .then() inside the guest VM.
+        // executePendingJobs flushes the microtask queue so the callback fires.
+        // Order matters: register first, flush second, then await.
+        const resolveP = vm.resolvePromise(promiseHandle);
+        runtime.executePendingJobs();
+        const resolvedResult = await resolveP;
+        promiseHandle.dispose();
+        const resultHandle = vm.unwrapResult(resolvedResult);
+        const resultJson = vm.getString(resultHandle);
+        resultHandle.dispose();
+        return JSON.parse(resultJson);
+    }
+    finally {
+        if (vm.alive)
+            vm.dispose();
+        if (runtime.alive)
+            runtime.dispose();
+    }
+}
+//# sourceMappingURL=extension-runtime.js.map

package/dist/src/services/extension-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-runtime.js","sourceRoot":"","sources":["../../../src/services/extension-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AA8C9E,gEAAgE;AAEhE,SAAS,eAAe,CAAC,EAAkB,EAAE,IAAY,EAAE,KAAoB;IAC3E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO;IACX,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CACxB,EAAkB,EAClB,IAAY,EACZ,EAAoD,EACpD,OAA0B,EAC1B,WAAmB;IAEnB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACd,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,UAA2B,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAED,EAAE,CAAC,GAAG,IAAI,CAAC;aACN,IAAI,CAAC,MAAM,CAAC,EAAE;YACX,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,CAAC;QACL,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACpB,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;QACL,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACV,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEP,OAAO,OAAO,CAAC,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAClB,EAAkB,EAClB,IAAY,EACZ,EAAyD;IAEzD,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,UAA2B,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,IAAyC,CAAC;QAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;YAC3D,CAAC;QACL,CAAC;QACD,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,aAAqB;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,oBAAoB,IAAI,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC1C,OAAO;EACT,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CX,CAAC;AACF,CAAC;AASD,MAAM,UAAU,iBAAiB,CAAC,GAAiB;IAC/C,MAAM,SAAS,GAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;IAE9B,MAAM,aAAa,GAA2B;QAC1C,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACf,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACtB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC3B,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;YACnC,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACjC,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YAChC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5C,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;KACJ,CAAC;IAEF,OAAO;QACH,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE;QACtC,SAAS;KACZ,CAAC;AACN,CAAC;AAED,gEAAgE;AAEhE,IAAI,cAAc,GAAyC,IAAI,CAAC;AAChE,SAAS,mBAAmB;IACxB,IAAI,CAAC,cAAc;QAAE,cAAc,GAAG,UAAU,EAAE,CAAC;IACnD,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,aAAqB,EACrB,GAAiB,EACjB,KAA8B,EAC9B,MAAuB;IAEvB,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACrC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAEzF,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAEhC,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAE7B,wDAAwD;QACxD,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,eAAe,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAE1F,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAClC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAClC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAClC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EACpG,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAA4B,CAAC;YACrE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC,EACD,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EACrC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,mBAAmB,CAAC,EAAE,EAAE,oBAAoB,EACxC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,EAC9D,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAC7B,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAEvC,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;aAClE,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEpE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzE,CAAC;YAED,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;wBACzE,YAAY,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAC/B,CAAC;oBACD,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;wBAC5D,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;wBACnE,YAAY,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAC/B,CAAC;gBACL,CAAC;gBACD,IAAI,YAAY;oBAAE,OAAO,GAAG,OAAO,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC,EACD,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,MAAM,CAAC,OAAO;YACd,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAC7E,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,MAAM,CAAC,UAAU;YACjB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,UAAW,EAAE;YACtC,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,GAAG,CAAC,OAAO,CAAC,KAAK;YACb,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAM,CAAC,IAAI,EAAE,KAAK,CAAC;YACxD,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,mBAAmB,CAAC,EAAE,EAAE,mBAAmB,EACvC,GAAG,CAAC,OAAO,CAAC,OAAO;YACf,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;YAC1D,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,KAAK,CAAC,QAAQ;YACd,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAS,CAAC,IAAI,CAAC;YAC3C,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,yDAAyD;QACzD,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,aAAa,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhD,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,UAAU,EAC9B,GAAG,CAAC,MAAM;YACN,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,MAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1H,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAC7B,GAAG,CAAC,KAAK;YACL,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC;YAC5D,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjC,yDAAyD;QACzD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAElD,0DAA0D;QAC1D,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC;QACtC,aAAa,CAAC,OAAO,EAAE,CAAC;QAExB,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,YAAY,CAAC,OAAO,EAAE,CAAC;QAEvB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAC;IAC7D,CAAC;YAAS,CAAC;QACP,IAAI,EAAE,CAAC,KAAK;YAAE,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,CAAC;AACL,CAAC"}

package/dist/src/services/federation-helpers.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Federation shared helpers — keyword matching functions for cross-catalogue
+ * filtering and peer key cache with TTL for signature verification.
+ *
+ * Used by federation-peer, federation-sync, federation-genesis, and
+ * federation-settlements routers.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export declare function matchesKeyword(csm: {
+    name: string;
+    serviceType?: string;
+}, keyword: string): boolean;
+export declare function matchesActionKeyword(action: {
+    displayName: string;
+    description: string;
+    category?: string;
+    tags: string[];
+}, keyword: string): boolean;
+export declare function matchesGenesisKeyword(val: Record<string, unknown>, keyword: string): boolean;
+export declare function matchesLocation(val: Record<string, unknown>, location: string): boolean;
+export interface PeerKeyEntry {
+    publicKey: string;
+    agentKeys: Map<string, string>;
+    expiresAt: number;
+}
+export declare const peerKeyCache: Map<string, PeerKeyEntry>;
+/**
+ * Perform outbound key exchange with a peer node.
+ * Sends this node's public key + agent keys, receives and caches the peer's keys.
+ * Reusable from peering activation (A.3) and recovery callback (A.4).
+ */
+export declare function performKeyExchange(peerUrl: string, config: AimeatConfig, storage: Storage): Promise<{
+    success: boolean;
+    error?: string;
+}>;
+//# sourceMappingURL=federation-helpers.d.ts.map

package/dist/src/services/federation-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-helpers.d.ts","sourceRoot":"","sources":["../../../src/services/federation-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAKvD,wBAAgB,cAAc,CAAC,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAIpG;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAMtJ;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAO5F;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOvF;AAKD,MAAM,WAAW,YAAY;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,YAAY,2BAAkC,CAAC;AAE5D;;;;GAIG;AACH,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsE/C"}

package/dist/src/services/federation-helpers.js

@@ -0,0 +1,100 @@
+/**
+ * Federation shared helpers — keyword matching functions for cross-catalogue
+ * filtering and peer key cache with TTL for signature verification.
+ *
+ * Used by federation-peer, federation-sync, federation-genesis, and
+ * federation-settlements routers.
+ */
+import { logger } from '../utils/logger.js';
+// ── E.4: Keyword matching helpers for cross-catalogue filtering ──
+export function matchesKeyword(csm, keyword) {
+    const lk = keyword.toLowerCase();
+    return csm.name.toLowerCase().includes(lk) ||
+        (csm.serviceType?.toLowerCase().includes(lk) ?? false);
+}
+export function matchesActionKeyword(action, keyword) {
+    const lk = keyword.toLowerCase();
+    return action.displayName.toLowerCase().includes(lk) ||
+        action.description.toLowerCase().includes(lk) ||
+        (action.category?.toLowerCase().includes(lk) ?? false) ||
+        action.tags.some(t => t.toLowerCase().includes(lk));
+}
+export function matchesGenesisKeyword(val, keyword) {
+    const lk = keyword.toLowerCase();
+    const searchFields = ['name', 'display_name', 'displayName', 'description', 'category', 'service_type', 'serviceType'];
+    return searchFields.some(f => {
+        const v = val[f];
+        return typeof v === 'string' && v.toLowerCase().includes(lk);
+    });
+}
+export function matchesLocation(val, location) {
+    const ll = location.toLowerCase();
+    const locationFields = ['location', 'city', 'region', 'country'];
+    return locationFields.some(f => {
+        const v = val[f];
+        return typeof v === 'string' && v.toLowerCase().includes(ll);
+    });
+}
+export const peerKeyCache = new Map();
+/**
+ * Perform outbound key exchange with a peer node.
+ * Sends this node's public key + agent keys, receives and caches the peer's keys.
+ * Reusable from peering activation (A.3) and recovery callback (A.4).
+ */
+export async function performKeyExchange(peerUrl, config, storage) {
+    try {
+        const nodeKey = await storage.getNodeKey();
+        if (!nodeKey) {
+            return { success: false, error: 'No node key available' };
+        }
+        const agents = await storage.listAgents();
+        const agentKeys = agents
+            .filter(a => a.publicKey)
+            .map(a => ({ gaii: a.gaii, public_key: a.publicKey }));
+        const payload = {
+            node_id: config.nodeId,
+            node_public_key: nodeKey.publicKey,
+            agent_keys: agentKeys,
+            timestamp: new Date().toISOString(),
+        };
+        const resp = await fetch(`${peerUrl}/v1/federation/key-exchange`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(config.federationTimeoutMs),
+        });
+        if (!resp.ok) {
+            const body = await resp.text().catch(() => '');
+            return { success: false, error: `Peer returned ${resp.status}: ${body}` };
+        }
+        const data = await resp.json();
+        const peerData = data.data;
+        if (!peerData?.node_id || !peerData?.node_public_key) {
+            return { success: false, error: 'Peer returned incomplete key exchange data' };
+        }
+        // Cache peer keys with TTL
+        const ttlMs = config.keyCacheRefreshMinutes * 60_000;
+        const agentKeyMap = new Map();
+        if (peerData.agent_keys) {
+            for (const ak of peerData.agent_keys) {
+                agentKeyMap.set(ak.gaii, ak.public_key);
+            }
+        }
+        peerKeyCache.set(peerData.node_id, {
+            publicKey: peerData.node_public_key,
+            agentKeys: agentKeyMap,
+            expiresAt: Date.now() + ttlMs,
+        });
+        logger.info(`Key exchange completed with peer ${peerData.node_id}`, {
+            agentKeysReceived: agentKeyMap.size,
+            ttlMinutes: config.keyCacheRefreshMinutes,
+        });
+        return { success: true };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : 'unknown error';
+        logger.warn(`Key exchange failed with ${peerUrl}: ${msg}`);
+        return { success: false, error: msg };
+    }
+}
+//# sourceMappingURL=federation-helpers.js.map

package/dist/src/services/federation-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-helpers.js","sourceRoot":"","sources":["../../../src/services/federation-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,oEAAoE;AAEpE,MAAM,UAAU,cAAc,CAAC,GAA2C,EAAE,OAAe;IACvF,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAuF,EAAE,OAAe;IACzI,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAA4B,EAAE,OAAe;IAC/E,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IACvH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACzB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAA4B,EAAE,QAAgB;IAC1E,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACP,CAAC;AAWD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,OAAe,EACf,MAAoB,EACpB,OAAgB;IAEhB,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,eAAe,EAAE,OAAO,CAAC,SAAS;YAClC,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,6BAA6B,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;SAC1D,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAM3B,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;YACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;QACnF,CAAC;QAED,2BAA2B;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACtB,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACnC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;QACL,CAAC;QAED,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE;YAC/B,SAAS,EAAE,QAAQ,CAAC,eAAe;YACnC,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAChC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,oCAAoC,QAAQ,CAAC,OAAO,EAAE,EAAE;YAChE,iBAAiB,EAAE,WAAW,CAAC,IAAI;YACnC,UAAU,EAAE,MAAM,CAAC,sBAAsB;SAC5C,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,4BAA4B,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC1C,CAAC;AACL,CAAC"}

package/dist/src/services/federation.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Federation service — background heartbeat, GAII resolution cache,
+ * and peer health monitoring.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export interface PeerInfo {
+    nodeId: string;
+    url: string;
+    publicKey: string;
+    status: string;
+    addedAt: string;
+    lastSeen: string;
+}
+/**
+ * Resolve which node hosts a GAII. Checks local cache first, then local storage,
+ * then falls back to asking peers.
+ */
+export declare function resolveGaii(gaii: string, config: AimeatConfig, storage: Storage, peers: Map<string, PeerInfo>): Promise<{
+    nodeId: string;
+    nodeUrl: string;
+    local: boolean;
+} | null>;
+/** Register a callback for peer recovery events (used by catalogue sync). */
+export declare function setOnPeerRecovery(cb: (peerId: string) => void): void;
+/**
+ * Start background heartbeat job. Pings all active peers with signed heartbeats
+ * containing catalogue hash and stats. Uses jittered scheduling (±25%) and
+ * per-peer stagger to prevent thundering herd.
+ */
+export declare function startHeartbeatJob(config: AimeatConfig, storage: Storage, peers: Map<string, PeerInfo>): ReturnType<typeof setInterval>;
+//# sourceMappingURL=federation.d.ts.map

package/dist/src/services/federation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation.d.ts","sourceRoot":"","sources":["../../../src/services/federation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAYvD,MAAM,WAAW,QAAQ;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAC7B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAkDrE;AAcD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAEpE;AAYD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC7B,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAC7B,UAAU,CAAC,OAAO,WAAW,CAAC,CAmHhC"}