anchordb 0.2.0

package/dist/cjs/inspector/auth.js

@@ -0,0 +1,234 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InspectorAuth = void 0;
+exports.hmacSha256 = hmacSha256;
+exports.timingSafeEqual = timingSafeEqual;
+const hex_ts_1 = require("../core/hex.js");
+const random_ts_1 = require("../core/random.js");
+/**
+ * Inspector pairing and session authentication.
+ *
+ * ## The threat this addresses
+ *
+ * An inspector connection exposes the whole local database. The pairing code travels through a QR
+ * code or is read aloud, so it is the *least* protected part of the flow — which is exactly why it
+ * must never become a long-lived bearer credential.
+ *
+ * So pairing is challenge–response:
+ *
+ *   agent  -> challenge (random, single-use)
+ *   client -> HMAC(pairingCode, challenge)
+ *   agent  -> verifies, issues a session token, burns the pairing code
+ *
+ * The code itself is never transmitted. Replaying a captured proof fails because the challenge is
+ * consumed on use, and a stolen QR is useless after the short pairing window closes.
+ *
+ * ## Why HMAC-SHA256 is implemented here
+ *
+ * `crypto.subtle` is unavailable or async-only on several React Native runtimes, and this must
+ * behave identically on device, in Node and in a browser. A self-contained implementation is ~80
+ * lines and removes the platform question entirely. It is used only for pairing proofs — never for
+ * storing secrets.
+ */
+const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+function sha256(input) {
+    const h = new Uint32Array([
+        0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+    ]);
+    const bitLength = input.length * 8;
+    const paddedLength = (((input.length + 8) >> 6) + 1) << 6;
+    const buffer = new Uint8Array(paddedLength);
+    buffer.set(input);
+    buffer[input.length] = 0x80;
+    const view = new DataView(buffer.buffer);
+    view.setUint32(paddedLength - 4, bitLength >>> 0, false);
+    view.setUint32(paddedLength - 8, Math.floor(bitLength / 2 ** 32), false);
+    const w = new Uint32Array(64);
+    for (let offset = 0; offset < paddedLength; offset += 64) {
+        for (let i = 0; i < 16; i++)
+            w[i] = view.getUint32(offset + i * 4, false);
+        for (let i = 16; i < 64; i++) {
+            const a = w[i - 15];
+            const b = w[i - 2];
+            const s0 = ((a >>> 7) | (a << 25)) ^ ((a >>> 18) | (a << 14)) ^ (a >>> 3);
+            const s1 = ((b >>> 17) | (b << 15)) ^ ((b >>> 19) | (b << 13)) ^ (b >>> 10);
+            w[i] = (w[i - 16] + s0 + w[i - 7] + s1) >>> 0;
+        }
+        let [a, b, c, d, e, f, g, hh] = [h[0], h[1], h[2], h[3], h[4], h[5], h[6], h[7]];
+        for (let i = 0; i < 64; i++) {
+            const S1 = ((e >>> 6) | (e << 26)) ^ ((e >>> 11) | (e << 21)) ^ ((e >>> 25) | (e << 7));
+            const ch = (e & f) ^ (~e & g);
+            const temp1 = (hh + S1 + ch + K[i] + w[i]) >>> 0;
+            const S0 = ((a >>> 2) | (a << 30)) ^ ((a >>> 13) | (a << 19)) ^ ((a >>> 22) | (a << 10));
+            const maj = (a & b) ^ (a & c) ^ (b & c);
+            const temp2 = (S0 + maj) >>> 0;
+            hh = g;
+            g = f;
+            f = e;
+            e = (d + temp1) >>> 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (temp1 + temp2) >>> 0;
+        }
+        h[0] = (h[0] + a) >>> 0;
+        h[1] = (h[1] + b) >>> 0;
+        h[2] = (h[2] + c) >>> 0;
+        h[3] = (h[3] + d) >>> 0;
+        h[4] = (h[4] + e) >>> 0;
+        h[5] = (h[5] + f) >>> 0;
+        h[6] = (h[6] + g) >>> 0;
+        h[7] = (h[7] + hh) >>> 0;
+    }
+    const out = new Uint8Array(32);
+    const outView = new DataView(out.buffer);
+    for (let i = 0; i < 8; i++)
+        outView.setUint32(i * 4, h[i], false);
+    return out;
+}
+function utf8(text) {
+    return new TextEncoder().encode(text);
+}
+function hmacSha256(key, message) {
+    const blockSize = 64;
+    let keyBytes = utf8(key);
+    if (keyBytes.length > blockSize)
+        keyBytes = sha256(keyBytes);
+    const padded = new Uint8Array(blockSize);
+    padded.set(keyBytes);
+    const inner = new Uint8Array(blockSize);
+    const outer = new Uint8Array(blockSize);
+    for (let i = 0; i < blockSize; i++) {
+        inner[i] = padded[i] ^ 0x36;
+        outer[i] = padded[i] ^ 0x5c;
+    }
+    const messageBytes = utf8(message);
+    const innerInput = new Uint8Array(blockSize + messageBytes.length);
+    innerInput.set(inner);
+    innerInput.set(messageBytes, blockSize);
+    const innerHash = sha256(innerInput);
+    const outerInput = new Uint8Array(blockSize + innerHash.length);
+    outerInput.set(outer);
+    outerInput.set(innerHash, blockSize);
+    return (0, hex_ts_1.bytesToHex)(sha256(outerInput));
+}
+/** Constant-time comparison — a length-independent early return would leak the proof by timing. */
+function timingSafeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    return diff === 0;
+}
+class InspectorAuth {
+    constructor(options = {}) {
+        this.pairing = null;
+        this.sessions = new Map();
+        this.opts = {
+            pairingTtlMs: options.pairingTtlMs ?? 5 * 60_000,
+            sessionTtlMs: options.sessionTtlMs ?? 60 * 60_000,
+            disabled: options.disabled ?? false,
+            now: options.now ?? (() => Date.now()),
+        };
+    }
+    get isDisabled() {
+        return this.opts.disabled;
+    }
+    /** Begin a pairing window. Any previous unused code is invalidated. */
+    startPairing() {
+        const code = formatCode((0, random_ts_1.randomBytes)(4));
+        const challenge = (0, hex_ts_1.bytesToHex)((0, random_ts_1.randomBytes)(16));
+        this.pairing = {
+            code,
+            challenge,
+            expiresAt: new Date(this.opts.now() + this.opts.pairingTtlMs).toISOString(),
+        };
+        return this.pairing;
+    }
+    /** The challenge a client must sign. Null when no pairing window is open. */
+    currentChallenge() {
+        if (!this.pairing)
+            return null;
+        if (Date.parse(this.pairing.expiresAt) <= this.opts.now()) {
+            this.pairing = null;
+            return null;
+        }
+        return this.pairing.challenge;
+    }
+    /** What a client computes from the code it scanned. */
+    static proofFor(pairingCode, challenge) {
+        return hmacSha256(pairingCode, challenge);
+    }
+    /**
+     * Verify a proof and issue a session.
+     *
+     * The pairing code is consumed whether or not the proof was correct, so a captured challenge
+     * cannot be brute-forced by replaying against the same window.
+     */
+    authenticate(proof, clientName = "Anchor Lens") {
+        if (this.opts.disabled)
+            return this.issueSession(clientName);
+        const pairing = this.pairing;
+        if (!pairing || Date.parse(pairing.expiresAt) <= this.opts.now()) {
+            this.pairing = null;
+            return null;
+        }
+        this.pairing = null; // single use, success or failure
+        const expected = hmacSha256(pairing.code, pairing.challenge);
+        if (!timingSafeEqual(expected, proof))
+            return null;
+        return this.issueSession(clientName);
+    }
+    issueSession(clientName) {
+        const session = {
+            token: (0, hex_ts_1.bytesToHex)((0, random_ts_1.randomBytes)(24)),
+            clientName,
+            createdAt: new Date(this.opts.now()).toISOString(),
+            expiresAt: new Date(this.opts.now() + this.opts.sessionTtlMs).toISOString(),
+        };
+        this.sessions.set(session.token, session);
+        return session;
+    }
+    verify(token) {
+        if (this.opts.disabled)
+            return { token: "disabled", clientName: "in-process", createdAt: "", expiresAt: "" };
+        if (!token)
+            return null;
+        const session = this.sessions.get(token);
+        if (!session)
+            return null;
+        if (Date.parse(session.expiresAt) <= this.opts.now()) {
+            this.sessions.delete(token);
+            return null;
+        }
+        return session;
+    }
+    revoke(token) {
+        this.sessions.delete(token);
+    }
+    activeSessions() {
+        const now = this.opts.now();
+        for (const [token, session] of this.sessions) {
+            if (Date.parse(session.expiresAt) <= now)
+                this.sessions.delete(token);
+        }
+        return [...this.sessions.values()];
+    }
+}
+exports.InspectorAuth = InspectorAuth;
+/** `A3F9-2B71` — short enough to read aloud, 32 bits of entropy inside a 5-minute window. */
+function formatCode(bytes) {
+    const hex = (0, hex_ts_1.bytesToHex)(bytes).toUpperCase();
+    return `${hex.slice(0, 4)}-${hex.slice(4, 8)}`;
+}
+//# sourceMappingURL=auth.js.map

package/dist/cjs/inspector/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/inspector/auth.ts"],"names":[],"mappings":";;;AAyGA,gCAyBC;AAGD,0CAKC;AA1ID,2CAA4C;AAC5C,iDAAgD;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/F,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,KAAiB;IAC/B,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;QACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;KAC/F,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAEzE,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACpB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAEzF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACzF,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAE/B,EAAE,GAAG,CAAC,CAAC;YACP,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,UAAU,CAAC,GAAW,EAAE,OAAe;IACrD,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS;QAAE,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAErB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC;QAC7B,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,UAAU,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACrC,OAAO,IAAA,mBAAU,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,mGAAmG;AACnG,SAAgB,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AA0BD,MAAa,aAAa;IAKxB,YAAY,UAAgC,EAAE;QAJtC,YAAO,GAAuB,IAAI,CAAC;QAC1B,aAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;QAIrD,IAAI,CAAC,IAAI,GAAG;YACV,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,GAAG,MAAM;YAChD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,GAAG,MAAM;YACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;YACnC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAED,uEAAuE;IACvE,YAAY;QACV,MAAM,IAAI,GAAG,UAAU,CAAC,IAAA,uBAAW,EAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,IAAA,uBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG;YACb,IAAI;YACJ,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;SAC5E,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,6EAA6E;IAC7E,gBAAgB;QACd,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IAChC,CAAC;IAED,uDAAuD;IACvD,MAAM,CAAC,QAAQ,CAAC,WAAmB,EAAE,SAAiB;QACpD,OAAO,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,KAAa,EAAE,UAAU,GAAG,aAAa;QACpD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,iCAAiC;QAEtD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEnD,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,MAAM,OAAO,GAAY;YACvB,KAAK,EAAE,IAAA,mBAAU,EAAC,IAAA,uBAAW,EAAC,EAAE,CAAC,CAAC;YAClC,UAAU;YACV,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAClD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;SAC5E,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAyB;QAC9B,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC7G,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,cAAc;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;CACF;AAtGD,sCAsGC;AAED,6FAA6F;AAC7F,SAAS,UAAU,CAAC,KAAiB;IACnC,MAAM,GAAG,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC"}

package/dist/cjs/inspector/bridge.d.ts

@@ -0,0 +1,141 @@
+import type { WebSocketLike } from "./transports/websocket.js";
+/**
+ * The MongoDB bridge protocol — moving collections between a device and a real MongoDB.
+ *
+ * ## Why this exists as a separate channel
+ *
+ * Anchor Lens cannot talk to MongoDB. The driver needs raw TCP and TLS sockets; React Native has
+ * neither without a native module, which is the same reason the inspector needs a relay at all.
+ * Lens's own source guard bans importing `mongodb` for exactly this reason.
+ *
+ * So the driver lives in the relay — an ordinary Node process, already running on the developer's
+ * machine, already bound to localhost — and Lens orchestrates the two ends it *can* reach:
+ *
+ * ```
+ *   pull:  relay reads MongoDB  ──Extended JSON──►  agent.importCollection()
+ *   push:  agent.exportCollection()  ──Extended JSON──►  relay writes MongoDB
+ * ```
+ *
+ * The payload is Extended JSON in both directions, so this reuses the interchange format that is
+ * already cross-validated against the official `bson` package. Anchor's codec encodes on the Anchor
+ * side, MongoDB's own codec decodes on the MongoDB side, and the two are tested to agree — no third
+ * interpretation of an ObjectId or a Date is introduced anywhere.
+ *
+ * This is a **development tool**. The bridge is off unless the relay is started with
+ * `--mongo-bridge`, and a connection string is held only for the life of a socket.
+ */
+export declare const BRIDGE_PROTOCOL_VERSION = 1;
+export type BridgeOp = "connect" | "read" | "write" | "disconnect";
+/** How an existing document in the target collection is treated. Mirrors `ImportOptions.mode`. */
+export type BridgeWriteMode = "insert" | "upsert" | "replace";
+export interface BridgeRequest {
+    v: number;
+    id: string;
+    op: BridgeOp;
+    /** Present on `connect`. Never logged, never persisted. */
+    uri?: string;
+    database?: string;
+    /** The relay room, used as the bridge's access token. */
+    room?: string;
+    collection?: string;
+    data?: string;
+    mode?: BridgeWriteMode;
+}
+export interface BridgeResponse {
+    v: number;
+    id: string;
+    ok: boolean;
+    error?: {
+        code: BridgeErrorCode;
+        message: string;
+    };
+    result?: unknown;
+    /** `read` streams its body: a chunk of newline-delimited Extended JSON. */
+    chunk?: string;
+    done?: boolean;
+    /** Documents sent so far, for progress. */
+    sent?: number;
+}
+export type BridgeErrorCode = "disabled" | "unauthorized" | "driver_missing" | "not_connected" | "connect_failed" | "bad_request" | "failed";
+export interface MongoCollectionInfo {
+    name: string;
+    /** Estimated, from collection metadata — instant, but may lag by a few documents. */
+    count: number;
+}
+export interface BridgeConnectResult {
+    database: string;
+    serverVersion: string;
+    collections: MongoCollectionInfo[];
+}
+export interface BridgeWriteResult {
+    collection: string;
+    inserted: number;
+    updated: number;
+    skipped: number;
+}
+export interface BridgeReadResult {
+    collection: string;
+    /** Newline-delimited Extended JSON, ready to hand straight to `importCollection`. */
+    data: string;
+    count: number;
+}
+export declare class BridgeError extends Error {
+    readonly code: BridgeErrorCode;
+    constructor(error: {
+        code: BridgeErrorCode;
+        message: string;
+    });
+}
+/**
+ * Hide the password in a connection string.
+ *
+ * One implementation, used by the relay's logs, the relay's error messages and Lens's display, so a
+ * credential cannot leak through the one place that forgot to redact. Anything that is not
+ * recognisably a URI is replaced wholesale rather than echoed back — a malformed string is far more
+ * likely to be a secret typed into the wrong box than something safe to print.
+ */
+export declare function redactMongoUri(uri: string): string;
+export interface MongoBridgeClientOptions {
+    socket: WebSocketLike;
+    /** Requests fail rather than hang if the relay stops answering. */
+    timeoutMs?: number;
+}
+/**
+ * The Lens half of the bridge.
+ *
+ * Lives here rather than in the relay package because the relay is a Node program — it imports
+ * `node:http` and `ws`, neither of which exists in React Native. Keeping both halves compiled from
+ * one definition of the protocol is the same reason `InspectorClient` lives beside `InspectorAgent`.
+ */
+export declare class MongoBridgeClient {
+    private readonly socket;
+    private readonly timeoutMs;
+    private readonly pending;
+    /** Frames written before the socket opened, flushed on open rather than lost to the race. */
+    private queued;
+    private opened;
+    constructor(options: MongoBridgeClientOptions);
+    private receive;
+    private call;
+    /** Open a MongoDB connection on the relay and list what is there. */
+    connect(uri: string, database: string, room: string): Promise<BridgeConnectResult>;
+    /** Read a whole collection as newline-delimited Extended JSON. */
+    read(collection: string, onProgress?: (sent: number) => void): Promise<BridgeReadResult>;
+    /** Write Extended JSON into a MongoDB collection. */
+    write(collection: string, data: string, mode: BridgeWriteMode): Promise<BridgeWriteResult>;
+    disconnect(): Promise<{
+        closed: boolean;
+    }>;
+    close(): void;
+}
+/** The URL Lens dials for the bridge, given the relay it is already talking to. */
+export declare function bridgeUrl(host: string, port: number, room: string): string;
+/**
+ * The bridge URL for a relay Lens is already connected to.
+ *
+ * Lens holds the relay address from the QR link, in whatever form it was written — with or without
+ * a path, with or without query parameters. Rewriting it here keeps that parsing in one place
+ * instead of in the screen.
+ */
+export declare function bridgeUrlFromRelay(relayUrl: string, room: string): string;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/cjs/inspector/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/inspector/bridge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;AAEnE,kGAAkG;AAClG,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,QAAQ,CAAC;IACb,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,cAAc,GACd,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,aAAa,GACb,QAAQ,CAAC;AAEb,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;gBACnB,KAAK,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAK9D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQlD;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,aAAa,CAAC;IACtB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAUD;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,6FAA6F;IAC7F,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAU;gBAEZ,OAAO,EAAE,wBAAwB;IA8B7C,OAAO,CAAC,OAAO;IAkCf,OAAO,CAAC,IAAI;IAuBZ,qEAAqE;IACrE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIlF,kEAAkE;IAClE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIxF,qDAAqD;IACrD,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI1F,UAAU,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAI1C,KAAK,IAAI,IAAI;CAKd;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKzE"}

package/dist/cjs/inspector/bridge.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoBridgeClient = exports.BridgeError = exports.BRIDGE_PROTOCOL_VERSION = void 0;
+exports.redactMongoUri = redactMongoUri;
+exports.bridgeUrl = bridgeUrl;
+exports.bridgeUrlFromRelay = bridgeUrlFromRelay;
+const uuid_ts_1 = require("../core/uuid.js");
+/**
+ * The MongoDB bridge protocol — moving collections between a device and a real MongoDB.
+ *
+ * ## Why this exists as a separate channel
+ *
+ * Anchor Lens cannot talk to MongoDB. The driver needs raw TCP and TLS sockets; React Native has
+ * neither without a native module, which is the same reason the inspector needs a relay at all.
+ * Lens's own source guard bans importing `mongodb` for exactly this reason.
+ *
+ * So the driver lives in the relay — an ordinary Node process, already running on the developer's
+ * machine, already bound to localhost — and Lens orchestrates the two ends it *can* reach:
+ *
+ * ```
+ *   pull:  relay reads MongoDB  ──Extended JSON──►  agent.importCollection()
+ *   push:  agent.exportCollection()  ──Extended JSON──►  relay writes MongoDB
+ * ```
+ *
+ * The payload is Extended JSON in both directions, so this reuses the interchange format that is
+ * already cross-validated against the official `bson` package. Anchor's codec encodes on the Anchor
+ * side, MongoDB's own codec decodes on the MongoDB side, and the two are tested to agree — no third
+ * interpretation of an ObjectId or a Date is introduced anywhere.
+ *
+ * This is a **development tool**. The bridge is off unless the relay is started with
+ * `--mongo-bridge`, and a connection string is held only for the life of a socket.
+ */
+exports.BRIDGE_PROTOCOL_VERSION = 1;
+class BridgeError extends Error {
+    constructor(error) {
+        super(error.message);
+        this.code = error.code;
+        this.name = "BridgeError";
+    }
+}
+exports.BridgeError = BridgeError;
+/**
+ * Hide the password in a connection string.
+ *
+ * One implementation, used by the relay's logs, the relay's error messages and Lens's display, so a
+ * credential cannot leak through the one place that forgot to redact. Anything that is not
+ * recognisably a URI is replaced wholesale rather than echoed back — a malformed string is far more
+ * likely to be a secret typed into the wrong box than something safe to print.
+ */
+function redactMongoUri(uri) {
+    const match = /^(mongodb(?:\+srv)?:\/\/)(?:[^@/]*@)?([^/?]*)(.*)$/.exec(uri.trim());
+    if (!match)
+        return "<redacted>";
+    const [, scheme, hostPart, rest] = match;
+    const hadCredentials = /^mongodb(?:\+srv)?:\/\/[^@/]*@/.test(uri.trim());
+    const path = (rest ?? "").split("?")[0] ?? "";
+    return `${scheme}${hadCredentials ? "***:***@" : ""}${hostPart}${path}`;
+}
+/**
+ * The Lens half of the bridge.
+ *
+ * Lives here rather than in the relay package because the relay is a Node program — it imports
+ * `node:http` and `ws`, neither of which exists in React Native. Keeping both halves compiled from
+ * one definition of the protocol is the same reason `InspectorClient` lives beside `InspectorAgent`.
+ */
+class MongoBridgeClient {
+    constructor(options) {
+        this.pending = new Map();
+        /** Frames written before the socket opened, flushed on open rather than lost to the race. */
+        this.queued = [];
+        this.socket = options.socket;
+        this.timeoutMs = options.timeoutMs ?? 60_000;
+        this.opened = options.socket.readyState === 1;
+        this.socket.addEventListener("open", () => {
+            this.opened = true;
+            for (const frame of this.queued)
+                this.socket.send(frame);
+            this.queued = [];
+        });
+        this.socket.addEventListener("message", (event) => {
+            let parsed;
+            try {
+                parsed = JSON.parse(String(event.data));
+            }
+            catch {
+                return; // not ours; a malformed frame must not take the socket down
+            }
+            this.receive(parsed);
+        });
+        this.socket.addEventListener("close", () => {
+            for (const [, entry] of this.pending) {
+                clearTimeout(entry.timer);
+                entry.reject(new BridgeError({ code: "failed", message: "The relay connection closed." }));
+            }
+            this.pending.clear();
+        });
+    }
+    receive(response) {
+        const entry = this.pending.get(response.id);
+        if (!entry)
+            return;
+        if (!response.ok) {
+            clearTimeout(entry.timer);
+            this.pending.delete(response.id);
+            entry.reject(new BridgeError(response.error ?? { code: "failed", message: "The bridge reported a failure." }));
+            return;
+        }
+        // A streamed read arrives as many frames; only the last one settles the promise.
+        if (response.chunk !== undefined) {
+            if (response.chunk !== "")
+                entry.chunks.push(response.chunk);
+            if (!response.done) {
+                // Progress only while there is more to come. The terminal frame repeats the final count,
+                // and reporting it again would emit the same number twice.
+                if (response.sent !== undefined)
+                    entry.onProgress?.(response.sent);
+                return;
+            }
+            clearTimeout(entry.timer);
+            this.pending.delete(response.id);
+            entry.resolve({ ...response.result, data: entry.chunks.join("\n") });
+            return;
+        }
+        clearTimeout(entry.timer);
+        this.pending.delete(response.id);
+        entry.resolve(response.result);
+    }
+    call(request, onProgress) {
+        const id = (0, uuid_ts_1.uuidv7)();
+        const frame = { v: exports.BRIDGE_PROTOCOL_VERSION, id, ...request };
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new BridgeError({ code: "failed", message: `The bridge did not answer "${request.op}" in time.` }));
+            }, this.timeoutMs);
+            this.pending.set(id, {
+                resolve: resolve,
+                reject,
+                timer,
+                chunks: [],
+                ...(onProgress ? { onProgress } : {}),
+            });
+            const encoded = JSON.stringify(frame);
+            if (this.opened)
+                this.socket.send(encoded);
+            else
+                this.queued.push(encoded);
+        });
+    }
+    /** Open a MongoDB connection on the relay and list what is there. */
+    connect(uri, database, room) {
+        return this.call({ op: "connect", uri, database, room });
+    }
+    /** Read a whole collection as newline-delimited Extended JSON. */
+    read(collection, onProgress) {
+        return this.call({ op: "read", collection }, onProgress);
+    }
+    /** Write Extended JSON into a MongoDB collection. */
+    write(collection, data, mode) {
+        return this.call({ op: "write", collection, data, mode });
+    }
+    disconnect() {
+        return this.call({ op: "disconnect" });
+    }
+    close() {
+        for (const [, entry] of this.pending)
+            clearTimeout(entry.timer);
+        this.pending.clear();
+        this.socket.close();
+    }
+}
+exports.MongoBridgeClient = MongoBridgeClient;
+/** The URL Lens dials for the bridge, given the relay it is already talking to. */
+function bridgeUrl(host, port, room) {
+    return `ws://${host}:${port}/bridge?room=${encodeURIComponent(room)}`;
+}
+/**
+ * The bridge URL for a relay Lens is already connected to.
+ *
+ * Lens holds the relay address from the QR link, in whatever form it was written — with or without
+ * a path, with or without query parameters. Rewriting it here keeps that parsing in one place
+ * instead of in the screen.
+ */
+function bridgeUrlFromRelay(relayUrl, room) {
+    const trimmed = relayUrl.trim().replace(/\/+$/, "");
+    const withoutQuery = trimmed.split("?")[0] ?? trimmed;
+    const origin = withoutQuery.replace(/\/relay$|\/bridge$/, "");
+    return `${origin}/bridge?room=${encodeURIComponent(room)}`;
+}
+//# sourceMappingURL=bridge.js.map

package/dist/cjs/inspector/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/inspector/bridge.ts"],"names":[],"mappings":";;;AAmHA,wCAQC;AAiJD,8BAEC;AASD,gDAKC;AA5RD,6CAAyC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEU,QAAA,uBAAuB,GAAG,CAAC,CAAC;AAqEzC,MAAa,WAAY,SAAQ,KAAK;IAEpC,YAAY,KAAiD;QAC3D,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAPD,kCAOC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAEhC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IACzC,MAAM,cAAc,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,OAAO,GAAG,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAC;AAC1E,CAAC;AAgBD;;;;;;GAMG;AACH,MAAa,iBAAiB;IAQ5B,YAAY,OAAiC;QAL5B,YAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;QAC7D,6FAA6F;QACrF,WAAM,GAAa,EAAE,CAAC;QAI5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;QAE9C,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;YACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YAChD,IAAI,MAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAmB,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,4DAA4D;YACtE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YACzC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,QAAwB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CACV,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CACjG,CAAC;YACF,OAAO;QACT,CAAC;QAED,iFAAiF;QACjF,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,yFAAyF;gBACzF,2DAA2D;gBAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;oBAAE,KAAK,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAI,QAAQ,CAAC,MAAiB,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAEO,IAAI,CAAI,OAAwC,EAAE,UAAmC;QAC3F,MAAM,EAAE,GAAG,IAAA,gBAAM,GAAE,CAAC;QACpB,MAAM,KAAK,GAAkB,EAAE,CAAC,EAAE,+BAAuB,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;QAE5E,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,8BAA8B,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;YAC7G,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAEnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO,EAAE,OAAmC;gBAC5C,MAAM;gBACN,KAAK;gBACL,MAAM,EAAE,EAAE;gBACV,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;gBACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,OAAO,CAAC,GAAW,EAAE,QAAgB,EAAE,IAAY;QACjD,OAAO,IAAI,CAAC,IAAI,CAAsB,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC,UAAkB,EAAE,UAAmC;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,UAAkB,EAAE,IAAY,EAAE,IAAqB;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAoB,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,IAAI,CAAsB,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK;QACH,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAvHD,8CAuHC;AAED,mFAAmF;AACnF,SAAgB,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;IAChE,OAAO,QAAQ,IAAI,IAAI,IAAI,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,IAAY;IAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACtD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,GAAG,MAAM,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D,CAAC"}