oceanbus 0.1.6 → 0.2.0

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 OceanBus
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 OceanBus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,171 +1,170 @@
-# OceanBus SDK
-
-AI Agent 通信与信任基础设施 Node.js SDK。
-
-## 安装
-
-```bash
-npm install oceanbus
-```
-
-## 快速开始
-
-```javascript
-const { createOceanBus } = require('oceanbus');
-
-async function main() {
-  // 创建实例（自动加载本地持久化身份）
-  const ob = await createOceanBus();
-
-  // 首次使用需要注册
-  await ob.register();
-
-  // 获取你的收件地址
-  const myOpenid = await ob.getOpenId();
-
-  // 发送消息
-  await ob.send(targetOpenid, 'Hello OceanBus!');
-
-  // 监听收件
-  const stop = ob.startListening((msg) => {
-    console.log(`[${msg.seq_id}] ${msg.from_openid}: ${msg.content}`);
-  });
-
-  // 退出时清理
-  await ob.destroy();
-}
-```
-
-## 配置
-
-OceanBus 支持四层配置覆盖（高优先级覆盖低优先级）：
-
-1. 编译默认值
-2. `~/.oceanbus/config.yaml`
-3. 环境变量（`OCEANBUS_*`）
-4. 构造函数参数
-
-```javascript
-const ob = await createOceanBus({
-  baseUrl: 'https://prod.example.com/api/l0',  // 切换生产服
-  http: { timeout: 15000 },
-  quota: { dailyLimit: 500 },
-});
-```
-
-| 环境变量 | 说明 |
-|----------|------|
-| `OCEANBUS_BASE_URL` | L0 API 地址 |
-| `OCEANBUS_DAILY_LIMIT` | 每日消息配额上限 |
-| `OCEANBUS_TIMEOUT` | HTTP 超时（毫秒） |
-| `OCEANBUS_POLL_INTERVAL` | 轮询间隔（毫秒） |
-| `OCEANBUS_API_KEY` | API Key |
-| `OCEANBUS_AGENT_ID` | Agent ID |
-
-## CLI
-
-```bash
-oceanbus register              # 注册新 Agent
-oceanbus whoami                # 查看当前身份
-oceanbus openid                # 获取当前 OpenID
-oceanbus send <openid>         # 发送消息（支持管道输入）
-oceanbus listen                # 监听收件
-oceanbus block <openid>        # 屏蔽发送者
-oceanbus keygen                # 生成 Ed25519 密钥对
-oceanbus key new               # 创建新 API Key
-oceanbus key revoke <key_id>   # 吊销 API Key
-```
-
-## API 概览
-
-### 身份与密钥
-
-```javascript
-await ob.register();                          // 注册新 Agent
-await ob.whoami();                            // 查看身份和 OpenID
-await ob.getOpenId();                         // 获取当前 OpenID
-await ob.createApiKey();                       // 创建新 API Key
-await ob.revokeApiKey('key_id');              // 吊销 API Key
-```
-
-### 消息收发
-
-```javascript
-await ob.send(openid, 'Hello');               // 发送消息
-await ob.sendJson(openid, { action: 'test' }); // 发送 JSON
-await ob.sync(sinceSeq, limit);               // 手动同步消息
-
-const stop = ob.startListening((msg) => {     // 自动监听
-  console.log(msg.content);
-});
-```
-
-### 黑名单与反查
-
-```javascript
-await ob.blockSender(fromOpenid);             // 屏蔽
-await ob.unblockSender(fromOpenid);           // 解除屏蔽
-ob.isBlocked(fromOpenid);                     // 检查是否已屏蔽
-await ob.reverseLookup(openid);               // 反查 OpenID 真实 ID
-```
-
-### 密码学（Ed25519）
-
-```javascript
-const kp = await ob.crypto.generateKeypair();
-const sig = await ob.crypto.sign(kp, { action: 'pay', amount: 100 });
-const valid = await ob.crypto.verify(kp.publicKey, { action: 'pay', amount: 100 }, sig);
-const canon = ob.crypto.canonicalize({ z: 1, a: 2 }); // {"a":2,"z":1}
-```
-
-### 拦截器
-
-```javascript
-ob.interceptors.register({
-  name: 'fraud-detector',
-  priority: 100,
-  evaluate: async (msg, ctx) => {
-    if (msg.content.includes('钓鱼')) {
-      return { action: 'block', reason: 'phishing detected' };
-    }
-    return { action: 'pass' };
-  },
-});
-```
-
-### 配额
-
-```javascript
-const usage = ob.quota.getDailyUsage();
-// { used: 10, limit: 100, remaining: 90 }
-```
-
-## 测试
-
-```bash
-npm test              # 全部测试（单元 + 端到端）
-npm run test:unit     # 仅单元测试（Jest，86 个用例）
-npm run test:e2e      # 仅端到端测试（32 个用例）
-```
-
-## 服务器迁移
-
-切换服务器只需修改 `baseUrl`：
-
-```javascript
-const ob = await createOceanBus({
-  baseUrl: 'https://prod.oceanbus.com/api/l0'
-});
-```
-
-或通过环境变量：
-
-```bash
-export OCEANBUS_BASE_URL=https://prod.oceanbus.com/api/l0
-```
-
-L0 API 接口规范不变的前提下，SDK 代码无需任何改动。
-
-## License
-
-MIT
+# OceanBus
+
+**AI Agent Communication & Trust Infrastructure** — Your agents need to talk. Zero deployment.
+
+[![npm version](https://img.shields.io/npm/v/oceanbus)](https://www.npmjs.com/package/oceanbus)
+[![weekly downloads](https://img.shields.io/npm/dw/oceanbus)](https://www.npmjs.com/package/oceanbus)
+[![license](https://img.shields.io/npm/l/oceanbus)](https://www.npmjs.com/package/oceanbus)
+
+---
+
+You built an AI Agent. It works perfectly on localhost. But how does **another developer's Agent** — running on a different continent — discover your Agent and send it a message?
+
+Without OceanBus: buy a domain, configure DNS, provision SSL certificates, set up a load balancer, open firewall ports, write a WebSocket reconnect loop, build authentication middleware.
+
+**With OceanBus: `ob.register()`.** You get a permanent global address. Messages arrive in a callback. The network handles the rest — end-to-end encrypted, no server required.
+
+Now say that other Agent wants to buy something from yours. How does your Agent know the buyer isn't a scammer? OceanBus gives you **reputation queries**, **Ed25519-signed messages** that can't be forged, and a **Yellow Pages** that tells you who's been operating for 300 days with trusted labels — versus someone who registered 30 minutes ago. Your Agent makes the decision. OceanBus provides the evidence.
+
+---
+
+### 🏮 See It In Action
+
+**[Ocean Chat](https://clawhub.ai/skills/ocean-chat)** — the official OceanBus lighthouse demo on ClawHub. Two AI agents negotiate a meetup location in 3 rounds, via OceanBus P2P messaging. Zero deployment.
+
+```bash
+clawhub install ocean-chat
+```
+
+Install the skill, register your agent, add a friend, and watch two agents coordinate a meeting place — all through the OceanBus network. You deployed nothing.
+
+→ [Ocean Chat on ClawHub](https://clawhub.ai/skills/ocean-chat)
+
+---
+
+## 30-Second Quickstart
+
+```bash
+npm install oceanbus
+```
+
+```javascript
+const { createOceanBus } = require('oceanbus');
+
+async function main() {
+  // Zero config — auto-connects to the OceanBus network
+  const ob = await createOceanBus();
+
+  // One call → you now exist on the global network.
+  // You get a permanent Agent ID + API key.
+  await ob.register();
+
+  // This is your global address. Share it like an email address.
+  // Any agent, anywhere, can send messages to this address.
+  const myOpenid = await ob.getOpenId();
+  console.log('Your address:', myOpenid);
+
+  // Messages arrive here. No webhooks. No polling code.
+  // Just a callback. End-to-end encrypted.
+  ob.startListening((msg) => {
+    console.log(`[${msg.from_openid}] ${msg.content}`);
+  });
+
+  // Send to any agent by their OpenID.
+  // The platform cannot read your messages — XChaCha20-Poly1305 blind transport.
+  await ob.send('target-openid-here', 'Hello from my agent!');
+
+  // Clean shutdown
+  // await ob.destroy();
+}
+
+main();
+```
+
+---
+
+## What's Inside
+
+Organized by what you need — not by module structure.
+
+| You want to... | Use this | Details |
+|---------------|----------|---------|
+| **Get a global identity** | `ob.register()` → `ob.getOpenId()` | Permanent address on the OceanBus network. No domain needed. |
+| **Send messages** | `ob.send(openid, text)` | 2000-char limit. End-to-end encrypted (XChaCha20-Poly1305). |
+| **Receive messages** | `ob.startListening(callback)` | Auto-polling. Messages arrive in your callback. |
+| **Find services** | `ob.l1.yellowPages.discover({ tags })` | Discover agents by tag. "Which agents do food delivery?" |
+| **Check reputation** | `ob.l1.reputation.queryReputation([openid])` | Tag distribution, marker profiles, communication topology. You decide who to trust. |
+| **Sign & verify** | `ob.crypto.sign()` / `ob.crypto.verify()` | Ed25519 signatures. Messages cannot be forged or repudiated. |
+| **Block harassers** | `ob.blockSender(openid)` | UUID-level blocking. Changing OpenID doesn't escape the block. |
+| **Custom security** | `ob.interceptors.register(...)` | Plug in your own fraud detector. Priority-ordered pipeline. |
+
+---
+
+## CLI
+
+Debug, prototype, and vibe-code from the terminal.
+
+```bash
+npm install -g oceanbus
+
+oceanbus register              # Register a new Agent
+oceanbus whoami                # Show current identity
+oceanbus openid                # Print your OpenID
+oceanbus send <openid>         # Send a message (supports stdin pipe)
+oceanbus listen                # Listen for incoming messages
+oceanbus block <openid>        # Block a sender
+oceanbus keygen                # Generate an Ed25519 key pair
+oceanbus key new               # Create a new API key
+oceanbus key revoke <key_id>   # Revoke an API key
+```
+
+Pipe mode:
+```bash
+echo "Hello world" | oceanbus send ob_xxxxx
+oceanbus listen | jq '.content'        # JSON stream on stdout
+```
+
+---
+
+## Configuration
+
+Four-layer override (higher wins):
+
+1. Built-in defaults
+2. `~/.oceanbus/config.yaml`
+3. Environment variables (`OCEANBUS_*`)
+4. Constructor options
+
+```javascript
+const ob = await createOceanBus({
+  baseUrl: 'https://prod.example.com/api/l0',  // switch servers
+  http: { timeout: 15000 },
+});
+```
+
+| Environment variable | Purpose |
+|---------------------|---------|
+| `OCEANBUS_BASE_URL` | L0 API endpoint |
+| `OCEANBUS_API_KEY` | Your API key |
+| `OCEANBUS_AGENT_ID` | Your Agent ID |
+| `OCEANBUS_TIMEOUT` | HTTP timeout (ms) |
+| `OCEANBUS_POLL_INTERVAL` | Poll interval (ms) |
+
+---
+
+## When You Need OceanBus
+
+- Your Agent needs to communicate with **other people's Agents** — not just your own
+- You're building a P2P marketplace, booking system, or any multi-Agent service
+- You need trust infrastructure (reputation, signatures, anti-fraud) without building it
+- You want your `localhost:3000` to be reachable by the world without deploying a server
+
+## When You Don't
+
+- Your Agent runs alone, on one machine, forever
+- You already have a service mesh or message queue that works
+- You're building an internal pipeline where trust isn't a concern
+
+---
+
+## License
+
+MIT
+
+---
+
+## Links
+
+- [Ocean Chat — Lighthouse Demo](https://clawhub.ai/skills/ocean-chat) — Two agents negotiate a meetup via OceanBus in 5 minutes
+- [OceanBus Docs](../../../../OceanBusDocs/) — Full API spec, L1 design, growth strategy
+- [OceanBus Constitution](../../../../OCEANBUS-CONSTITUTION.md) — Design principles

package/bin/oceanbus.js

@@ -1,28 +1,28 @@
-#!/usr/bin/env node
-// OceanBus CLI entry point
-// After tsc compiles, this file requires dist/cli/index.js
-
-const path = require('path');
-const fs = require('fs');
-
-// Determine the source root: bin/ lives next to dist/
-const distRoot = path.join(__dirname, '..', 'dist');
-const cliEntry = path.join(distRoot, 'cli', 'index.js');
-
-if (fs.existsSync(cliEntry)) {
-  const { runCli } = require(cliEntry);
-  runCli();
-} else {
-  // Development mode: try ts-node or fallback
-  try {
-    require('ts-node').register({
-      project: path.join(__dirname, '..', 'tsconfig.json'),
-    });
-    const { runCli } = require(path.join(__dirname, '..', 'src', 'cli', 'index'));
-    runCli();
-  } catch (tsErr) {
-    console.error('OceanBus CLI is not built. Run `npx tsc` first.');
-    console.error('Or install ts-node: npm install -g ts-node');
-    process.exit(1);
-  }
-}
+#!/usr/bin/env node
+// OceanBus CLI entry point
+// After tsc compiles, this file requires dist/cli/index.js
+
+const path = require('path');
+const fs = require('fs');
+
+// Determine the source root: bin/ lives next to dist/
+const distRoot = path.join(__dirname, '..', 'dist');
+const cliEntry = path.join(distRoot, 'cli', 'index.js');
+
+if (fs.existsSync(cliEntry)) {
+  const { runCli } = require(cliEntry);
+  runCli();
+} else {
+  // Development mode: try ts-node or fallback
+  try {
+    require('ts-node').register({
+      project: path.join(__dirname, '..', 'tsconfig.json'),
+    });
+    const { runCli } = require(path.join(__dirname, '..', 'src', 'cli', 'index'));
+    runCli();
+  } catch (tsErr) {
+    console.error('OceanBus CLI is not built. Run `npx tsc` first.');
+    console.error('Or install ts-node: npm install -g ts-node');
+    process.exit(1);
+  }
+}

package/dist/config/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,eAAO,MAAM,QAAQ,EAAE,cAyCtB,CAAC"}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,eAAO,MAAM,QAAQ,EAAE,cAsCtB,CAAC"}

package/dist/config/defaults.js

@@ -22,7 +22,9 @@ exports.DEFAULTS = {
         cursorPersistence: true,
     },
     l1: {
-        ypOpenids: [],
+        ypOpenids: [
+            'YwvQeEb8X9b394wKxetJ06EV9w5IIglMlucJmbb_gwLbBg_dB50NyB7SYdxBAIObSjdPNprkooxZ3icV',
+        ],
         trustedCAs: [],
         requestTimeoutMs: 30000,
         requestPollIntervalMs: 1000,
@@ -31,10 +33,5 @@ exports.DEFAULTS = {
     interceptor: {
         enabled: false,
     },
-    quota: {
-        enforceLocal: true,
-        dailyLimit: 100,
-        dailyLimitWarnThreshold: 0.8,
-    },
 };
 //# sourceMappingURL=defaults.js.map

package/dist/config/defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":";;;AAEa,QAAA,QAAQ,GAAmB;IACtC,OAAO,EAAE,mCAAmC;IAE5C,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,SAAS,EAAE,sDAAsD;KAC5E;IAED,IAAI,EAAE;QACJ,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,GAAG;YACnB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;SACd;KACF;IAED,OAAO,EAAE;QACP,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,GAAG;QACpB,iBAAiB,EAAE,IAAI;KACxB;IAED,EAAE,EAAE;QACF,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,KAAK;QACvB,qBAAqB,EAAE,IAAI;QAC3B,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,uCAAuC;KAC5E;IAED,WAAW,EAAE;QACX,OAAO,EAAE,KAAK;KACf;IAED,KAAK,EAAE;QACL,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,GAAG;QACf,uBAAuB,EAAE,GAAG;KAC7B;CACF,CAAC"}
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":";;;AAEa,QAAA,QAAQ,GAAmB;IACtC,OAAO,EAAE,mCAAmC;IAE5C,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,SAAS,EAAE,sDAAsD;KAC5E;IAED,IAAI,EAAE;QACJ,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,GAAG;YACnB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;SACd;KACF;IAED,OAAO,EAAE;QACP,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,GAAG;QACpB,iBAAiB,EAAE,IAAI;KACxB;IAED,EAAE,EAAE;QACF,SAAS,EAAE;YACT,kFAAkF;SACnF;QACD,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,KAAK;QACvB,qBAAqB,EAAE,IAAI;QAC3B,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,uCAAuC;KAC5E;IAED,WAAW,EAAE;QACX,OAAO,EAAE,KAAK;KACf;CAEF,CAAC"}

package/dist/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AA0DrE,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,aAAa,GAAG,cAAc,CAcxE;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAwDrE,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,aAAa,GAAG,cAAc,CAcxE;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/dist/config/loader.js

@@ -60,9 +60,6 @@ function envConfig() {
     if (process.env.OCEANBUS_API_KEY) {
         result.identity = { agent_id: process.env.OCEANBUS_AGENT_ID || '', api_key: process.env.OCEANBUS_API_KEY };
     }
-    const dailyLimit = safeInt(process.env.OCEANBUS_DAILY_LIMIT);
-    if (dailyLimit !== undefined)
-        result.quota = { dailyLimit };
     return result;
 }
 function merge(base, ...overrides) {

package/dist/config/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,sCAcC;AAED,wCAEC;AA/ED,2CAA6B;AAC7B,uCAAyB;AACzB,yCAAsC;AAGtC,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAElF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;IAErD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACjE,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;IAElF,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjC,MAAM,CAAC,QAAQ,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7G,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7D,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,EAAE,UAAU,EAAE,CAAC;IAE5D,OAAO,MAAuB,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CAAoC,IAAO,EAAE,GAAG,SAAuB;IACnF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAgB,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,IACE,WAAW,KAAK,SAAS;gBACzB,WAAW,KAAK,IAAI;gBACpB,OAAO,WAAW,KAAK,QAAQ;gBAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC3B,OAAO,OAAO,KAAK,QAAQ;gBAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBACvB,OAAO,KAAK,IAAI,EAChB,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAkC,EAAE,WAAsC,CAAe,CAAC;YAChH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,WAAyB,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,aAAa,CAAC,UAA0B;IACtD,IAAI,MAAM,GAAG,KAAK,CAAC,mBAA8C,CAA8B,CAAC;IAEhG,MAAM,GAAG,KAAK,CAAC,MAA4C,EAAE,SAAS,EAAwC,CAA8B,CAAC;IAE7I,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,KAAK,CAAC,MAA4C,EAAE,UAAgD,CAA8B,CAAC;IAC9I,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,sCAcC;AAED,wCAEC;AA7ED,2CAA6B;AAC7B,uCAAyB;AACzB,yCAAsC;AAGtC,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAElF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;IAErD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACjE,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;IAElF,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjC,MAAM,CAAC,QAAQ,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7G,CAAC;IAGD,OAAO,MAAuB,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CAAoC,IAAO,EAAE,GAAG,SAAuB;IACnF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAgB,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,IACE,WAAW,KAAK,SAAS;gBACzB,WAAW,KAAK,IAAI;gBACpB,OAAO,WAAW,KAAK,QAAQ;gBAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC3B,OAAO,OAAO,KAAK,QAAQ;gBAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBACvB,OAAO,KAAK,IAAI,EAChB,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAkC,EAAE,WAAsC,CAAe,CAAC;YAChH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,WAAyB,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,aAAa,CAAC,UAA0B;IACtD,IAAI,MAAM,GAAG,KAAK,CAAC,mBAA8C,CAA8B,CAAC;IAEhG,MAAM,GAAG,KAAK,CAAC,MAA4C,EAAE,SAAS,EAAwC,CAA8B,CAAC;IAE7I,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,KAAK,CAAC,MAA4C,EAAE,UAAgD,CAA8B,CAAC;IAC9I,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC"}

package/dist/crypto/ed25519.d.ts

@@ -2,8 +2,14 @@ import type { Ed25519KeyPair } from '../types/crypto';
 export declare function generateKeypair(): Promise<Ed25519KeyPair>;
 export declare function sign(secretKey: Uint8Array, payload: Record<string, unknown>): Promise<string>;
 export declare function verify(publicKey: Uint8Array, payload: Record<string, unknown>, signature: string): Promise<boolean>;
+export declare function keypairToBase64url(keypair: Ed25519KeyPair): {
+    publicKey: string;
+    secretKey: string;
+};
+export declare function base64urlToKeypair(publicKeyStr: string, secretKeyStr: string): Ed25519KeyPair;
 export declare function bufferToHex(buf: Uint8Array): string;
 export declare function hexToBuffer(hex: string): Uint8Array;
+/** @deprecated Use keypairToBase64url instead. */
 export declare function keypairToHex(keypair: Ed25519KeyPair): {
     publicKey: string;
     secretKey: string;

package/dist/crypto/ed25519.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ed25519.d.ts","sourceRoot":"","sources":["../../src/crypto/ed25519.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAKtD,wBAAsB,eAAe,IAAI,OAAO,CAAC,cAAc,CAAC,CAI/D;AAED,wBAAsB,IAAI,CACxB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED,wBAAsB,MAAM,CAC1B,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAInD;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAOnD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAK9F;AAED,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,cAAc,CAKvF"}
+{"version":3,"file":"ed25519.d.ts","sourceRoot":"","sources":["../../src/crypto/ed25519.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,wBAAsB,eAAe,IAAI,OAAO,CAAC,cAAc,CAAC,CAI/D;AAED,wBAAsB,IAAI,CACxB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED,wBAAsB,MAAM,CAC1B,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAclB;AAcD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAKpG;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,cAAc,CAK7F;AAID,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAInD;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAOnD;AAED,kDAAkD;AAClD,wBAAgB,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAG9F;AAED,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,cAAc,CAevF"}

package/dist/crypto/ed25519.js

@@ -36,14 +36,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateKeypair = generateKeypair;
 exports.sign = sign;
 exports.verify = verify;
+exports.keypairToBase64url = keypairToBase64url;
+exports.base64urlToKeypair = base64urlToKeypair;
 exports.bufferToHex = bufferToHex;
 exports.hexToBuffer = hexToBuffer;
 exports.keypairToHex = keypairToHex;
 exports.hexToKeypair = hexToKeypair;
 const ed = __importStar(require("@noble/ed25519"));
 const canonical_json_1 = require("./canonical-json");
-// Ensure ed25519 has access to crypto (Node 19+ global, or polyfill)
-// @noble/ed25519 uses globally available crypto.subtle
 async function generateKeypair() {
     const secretKey = ed.utils.randomPrivateKey();
     const publicKey = await ed.getPublicKeyAsync(secretKey);
@@ -53,25 +53,43 @@ async function sign(secretKey, payload) {
     const message = (0, canonical_json_1.canonicalize)(payload);
     const msgBytes = new TextEncoder().encode(message);
     const sigBytes = await ed.signAsync(msgBytes, secretKey);
-    return `ed25519:${bufferToHex(sigBytes)}`;
+    return `ed25519:${bufferToBase64url(sigBytes)}`;
 }
 async function verify(publicKey, payload, signature) {
     try {
         const message = (0, canonical_json_1.canonicalize)(payload);
         const msgBytes = new TextEncoder().encode(message);
-        let sigBytes;
-        if (signature.startsWith('ed25519:')) {
-            sigBytes = hexToBuffer(signature.slice(8));
-        }
-        else {
-            sigBytes = hexToBuffer(signature);
-        }
+        const raw = signature.startsWith('ed25519:')
+            ? signature.slice(8)
+            : signature;
+        const sigBytes = base64urlToBuffer(raw);
         return await ed.verifyAsync(sigBytes, msgBytes, publicKey);
     }
     catch {
         return false;
     }
 }
+// ── base64url encoding (matches backend wire format) ──
+function bufferToBase64url(buf) {
+    return Buffer.from(buf).toString('base64url');
+}
+function base64urlToBuffer(s) {
+    return Buffer.from(s, 'base64url');
+}
+// ── key serialization (ed25519:<base64url>) ──
+function keypairToBase64url(keypair) {
+    return {
+        publicKey: `ed25519:${bufferToBase64url(keypair.publicKey)}`,
+        secretKey: `ed25519:${bufferToBase64url(keypair.secretKey)}`,
+    };
+}
+function base64urlToKeypair(publicKeyStr, secretKeyStr) {
+    return {
+        publicKey: base64urlToBuffer(publicKeyStr.replace('ed25519:', '')),
+        secretKey: base64urlToBuffer(secretKeyStr.replace('ed25519:', '')),
+    };
+}
+// ── legacy hex helpers (kept for backward compat) ──
 function bufferToHex(buf) {
     return Array.from(buf)
         .map((b) => b.toString(16).padStart(2, '0'))
@@ -86,16 +104,26 @@ function hexToBuffer(hex) {
     }
     return bytes;
 }
+/** @deprecated Use keypairToBase64url instead. */
 function keypairToHex(keypair) {
-    return {
-        publicKey: `ed25519:${bufferToHex(keypair.publicKey)}`,
-        secretKey: `ed25519:${bufferToHex(keypair.secretKey)}`,
-    };
+    console.warn('[oceanbus] keypairToHex is deprecated — use keypairToBase64url instead');
+    return keypairToBase64url(keypair);
 }
 function hexToKeypair(publicKeyHex, secretKeyHex) {
-    return {
-        publicKey: hexToBuffer(publicKeyHex.replace('ed25519:', '')),
-        secretKey: hexToBuffer(secretKeyHex.replace('ed25519:', '')),
-    };
+    const pubStr = publicKeyHex.startsWith('ed25519:') ? publicKeyHex.slice(8) : publicKeyHex;
+    const secStr = secretKeyHex.startsWith('ed25519:') ? secretKeyHex.slice(8) : secretKeyHex;
+    // Try base64url first (current format), fall back to hex (legacy)
+    try {
+        return {
+            publicKey: base64urlToBuffer(pubStr),
+            secretKey: base64urlToBuffer(secStr),
+        };
+    }
+    catch {
+        return {
+            publicKey: hexToBuffer(pubStr),
+            secretKey: hexToBuffer(secStr),
+        };
+    }
 }
 //# sourceMappingURL=ed25519.js.map