omp-onlyne 0.0.0-stage → 0.2.0

package/src/bridge-text.ts

@@ -0,0 +1,145 @@
+import { createTranslator } from "@onlyne/node-host/i18n";
+
+const en = {
+	noDecision: "The inbound entry has no decision.",
+	noContextNamed: "The inbound decision named no context.",
+	contextLost: "{alias} is no longer bound; it needs an explicit new decision",
+	noLiveSession: "The execution context {context} has no live session; it must be bound again before it can receive messages.",
+	noTaskTool: "This OMP session has no native task tool.",
+	noChildIdentity: "The native task tool returned no child identity.",
+	deliveryReferences: "message {message}, thread {thread} seq {seq}",
+	subagentPreamble: "Read this onlyne delivery from {author} ({references}).",
+	subagentCannotSend: "This session cannot send a message. When you have an answer, call the msg tool once to draft it and report the draft id back:",
+	subagentDraftCall: 'msg({ delivery_kind: "draft the reply", msg: <your reply body>, meta: { op: "draft", to: {to}, relation: "reply", in_reply_to: { sender: {sender}, id: {id} } } })',
+	subagentNoRetry: "That call stores a draft and sends nothing; the main session sends it. Do not retry a refused send and do not poll for the outcome.",
+	subagentSolutionSpace: "The delivery decides the work; use the message as the task.",
+	labelInbound: "inbound",
+	labelSupplement: "supplement",
+
+	draftNeedsRelation: "A reply draft needs relation reply or followup and in_reply_to.",
+	draftChildScope: "A child may draft a reply only to the source message assigned to its context.",
+	draftChildCannotSend: "Return draft_id to the main session; a child cannot send a draft.",
+	draftNotFound: "No reply draft is named {id}.",
+	draftNeedsReference: "A reply draft needs in_reply_to {sender,id} or {thread,seq}.",
+	draftSourceUnavailable: "The draft source message is unavailable.",
+
+	contextNotRegistered: "No execution context is registered as {alias}.",
+	mainSummary: "Main OMP session",
+	storeClosed: "The Onlyne store is closed.",
+
+	todoContextRequired: "A todo decision needs a non-empty context alias.",
+	todoUnknownAction: "The judge returned an unknown todo action: {action}.",
+	todoAdapterApi: "omp-todo-more is installed but does not expose the todo state adapter API this plugin drives.",
+	todoRecordTypes: "omp-todo-more uses branch record types this omp-onlyne build does not understand.",
+	todoEmptyAssociate: "The judge chose associate, but the todo list is empty.",
+	todoNoSuchItem: 'The judge chose associate, but no todo item is titled "{title}".',
+	todoAmbiguousTitle: 'More than one todo item is titled "{title}"; the decision needs a phase.',
+	todoDuplicateTitle: 'The judge chose append, but the todo list already has an item titled "{title}"; associate instead.',
+	todoPhaseRequired: "An append decision needs a non-empty phase name.",
+	todoUnexpectedAction: "Unexpected todo action: {action}",
+	todoExplanationRequired: "An append decision needs an explanation or a non-empty message body.",
+	todoEstimateInvalid: "A todo estimate must be a positive whole number of minutes.",
+	todoMissingField: "The judge chose {action} without a {field}.",
+	todoGoalRequired: "The judge chose append into an empty list without the goal's objective, measure and doneWhen.",
+	todoNoSession: "No live OMP session owns this inbound todo decision; the todo remains owed by the inbound queue.",
+	todoMultipleSessions: "More than one live main OMP session is registered; the todo target is ambiguous.",
+	todoSourceLine: "Source: {source}/{seq} from {author}",
+	todoDefaultPhase: "Tasks",
+	todoBadMetadataVersion: "Onlyne todo decision entry {entry} uses an unsupported metadata version.",
+	todoNoDecisionRecord: "Onlyne todo decision entry {entry} records no decision.",
+	todoNoOrigins: "Onlyne todo metadata on entry {entry} has no origins array; the association cannot be replayed.",
+	todoNoLinks: "Onlyne todo metadata on entry {entry} has no links array; the association cannot be replayed.",
+	todoUnknownRecordedAction: "Onlyne todo decision on entry {entry} has an unknown action.",
+	todoMissingString: "Onlyne todo metadata on entry {entry} has no string {field}.",
+
+	trustHeader: "Onlyne trust · {phase} · {node}",
+	trustFingerprint: "fingerprint: {fingerprint}",
+	trustDeclared: "declared address: {declared}",
+	trustObserved: "observed address: {observed}",
+	trustUnobserved: "not observed",
+	trustPolicy: "acquisition policy: {policy}",
+	trustJudgement: "judgement: {reason} · {conclusion}",
+	trustAllowed: "allowed",
+	trustRefused: "refused",
+	trustInvited: "This peer's approval waits for yours. Decide it explicitly:",
+	trustApproved: "The acquisition policy approved this peer before any human confirmed, and the approval is committed. No action is requested.",
+	trustRequested: "Local approval is committed; the exchange completes when the peer confirms. This is a status update; no action is requested.",
+	trustExchanged: "Both sides approved. This is a status update; no action is requested.",
+	trustRevoked: "Local approval was dropped. This is a status update; no action is requested.",
+	trustAcceptAction: 'accept: msg({ delivery_kind: "accept the trust handshake", msg: "accept {node}", meta: { op: "trust_accept", node_id: "{node}", fingerprint: "{fingerprint}" } })',
+	trustRevokeAction: 'revoke: msg({ delivery_kind: "revoke the trust handshake", msg: "revoke {node}", meta: { op: "trust_revoke", node_id: "{node}" } })',
+	trustPanelOnly: "The acquisition policy is none, so this approval is the human's: only the panel can accept it. You may read and revoke.",
+};
+
+const zh: Record<keyof typeof en, string> = {
+	noDecision: "这条入站记录没有对应的决策。",
+	noContextNamed: "入站决策没有指定上下文。",
+	contextLost: "{alias} 已不再绑定；需要一次显式的新决策",
+	noLiveSession: "执行上下文 {context} 没有活动会话；必须先重新绑定才能接收消息。",
+	noTaskTool: "这个 OMP 会话没有原生 task 工具。",
+	noChildIdentity: "原生 task 工具没有返回子代理标识。",
+	deliveryReferences: "消息 {message}，线程 {thread} 序号 {seq}",
+	subagentPreamble: "阅读这条来自 {author} 的 onlyne 投递（{references}）。",
+	subagentCannotSend: "本会话不能发送消息。得出答案后，调用一次 msg 工具起草回复，并把 draft id 报告回来：",
+	subagentDraftCall: 'msg({ delivery_kind: "起草回复", msg: <你的回复正文>, meta: { op: "draft", to: {to}, relation: "reply", in_reply_to: { sender: {sender}, id: {id} } } })',
+	subagentNoRetry: "这次调用只保存草稿，不发送任何消息；由主会话负责发送。不要重试被拒绝的发送，也不要轮询结果。",
+	subagentSolutionSpace: "投递内容决定要做什么；把消息本身当作任务。",
+	labelInbound: "入站",
+	labelSupplement: "补充",
+
+	draftNeedsRelation: "回复草稿需要 relation 为 reply 或 followup，并提供 in_reply_to。",
+	draftChildScope: "子代理只能对分配给它的上下文所对应的源消息起草回复。",
+	draftChildCannotSend: "把 draft_id 交回主会话；子代理不能发送草稿。",
+	draftNotFound: "没有名为 {id} 的回复草稿。",
+	draftNeedsReference: "回复草稿需要 in_reply_to {sender,id} 或 {thread,seq}。",
+	draftSourceUnavailable: "草稿的源消息不可用。",
+
+	contextNotRegistered: "没有注册名为 {alias} 的执行上下文。",
+	mainSummary: "OMP 主会话",
+	storeClosed: "Onlyne 存储已关闭。",
+
+	todoContextRequired: "todo 决策需要非空的上下文别名。",
+	todoUnknownAction: "judge 返回了未知的 todo 动作：{action}。",
+	todoAdapterApi: "已安装 omp-todo-more，但它没有暴露本插件所使用的 todo 状态适配接口。",
+	todoRecordTypes: "omp-todo-more 使用的分支记录类型是这个 omp-onlyne 构建无法理解的。",
+	todoEmptyAssociate: "judge 选择了 associate，但 todo 列表是空的。",
+	todoNoSuchItem: "judge 选择了 associate，但没有标题为“{title}”的 todo 项。",
+	todoAmbiguousTitle: "有多个 todo 项标题为“{title}”；决策需要指定阶段。",
+	todoDuplicateTitle: "judge 选择了 append，但 todo 列表已有标题为“{title}”的项；应改用 associate。",
+	todoPhaseRequired: "append 决策需要非空的阶段名。",
+	todoUnexpectedAction: "意外的 todo 动作：{action}",
+	todoExplanationRequired: "append 决策需要说明内容或非空的消息正文。",
+	todoEstimateInvalid: "todo 预估必须是正整数分钟。",
+	todoMissingField: "judge 选择了 {action}，但没有提供 {field}。",
+	todoGoalRequired: "judge 选择了向空列表 append，但没有提供目标的 objective、measure 和 doneWhen。",
+	todoNoSession: "没有活动的 OMP 会话持有这条入站 todo 决策；该 todo 仍由入站队列保留。",
+	todoMultipleSessions: "注册了多个活动的主 OMP 会话；todo 目标不明确。",
+	todoSourceLine: "来源：{source}/{seq}，来自 {author}",
+	todoDefaultPhase: "任务",
+	todoBadMetadataVersion: "条目 {entry} 上的 onlyne todo 决策使用了不支持的元数据版本。",
+	todoNoDecisionRecord: "条目 {entry} 上的 onlyne todo 决策没有记录任何决策内容。",
+	todoNoOrigins: "条目 {entry} 上的 onlyne todo 元数据没有 origins 数组；无法重放该关联。",
+	todoNoLinks: "条目 {entry} 上的 onlyne todo 元数据没有 links 数组；无法重放该关联。",
+	todoUnknownRecordedAction: "条目 {entry} 上的 onlyne todo 决策含有未知动作。",
+	todoMissingString: "条目 {entry} 上的 onlyne todo 元数据缺少字符串字段 {field}。",
+
+	trustHeader: "Onlyne 信任 · {phase} · {node}",
+	trustFingerprint: "指纹：{fingerprint}",
+	trustDeclared: "声明地址：{declared}",
+	trustObserved: "观测地址：{observed}",
+	trustUnobserved: "未观测到",
+	trustPolicy: "获取策略：{policy}",
+	trustJudgement: "判定：{reason} · {conclusion}",
+	trustAllowed: "允许",
+	trustRefused: "拒绝",
+	trustInvited: "这个对端的批准在等你。请显式决定：",
+	trustApproved: "获取策略在任何人工确认之前批准了这个对端，批准已经提交。不索取任何动作。",
+	trustRequested: "本地批准已提交；对端确认后交换完成。这是状态更新，不索取任何动作。",
+	trustExchanged: "双方都已批准。这是状态更新，不索取任何动作。",
+	trustRevoked: "本地批准已撤销。这是状态更新，不索取任何动作。",
+	trustAcceptAction: '批准：msg({ delivery_kind: "批准信任握手", msg: "批准 {node}", meta: { op: "trust_accept", node_id: "{node}", fingerprint: "{fingerprint}" } })',
+	trustRevokeAction: '撤销：msg({ delivery_kind: "撤销信任握手", msg: "撤销 {node}", meta: { op: "trust_revoke", node_id: "{node}" } })',
+	trustPanelOnly: "获取策略是 none，这次批准属于人类：只有面板能接受它。你可以读取与撤销。",
+};
+
+export const bridgeText = createTranslator({ en, "zh-CN": zh });

package/src/config.ts

@@ -0,0 +1,332 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import type { OnlyneConfig } from "./types.ts";
+import type { Locale } from "@onlyne/node-host/i18n";
+import { hostText as t } from "./host-text.ts";
+import { DEFAULT_ACQUISITION, parseAllowBlock, type AcquirePolicy, type AcquisitionPolicy } from "./acquire.ts";
+
+const CONFIG_RELATIVE_PATH = join(".onlyne", "config.toml");
+const REGION_PREFIX = "urn:onlyne:region:";
+const AGENT_PREFIX = "urn:onlyne:agent:";
+/** RFC 0011 §5.1: the one service path every HTTP binding answers on. */
+const SERVICE_PATH = "/onlyne/v3";
+const DEFAULT_BIND = "127.0.0.1";
+const DEFAULT_PAGE_SIZE = 50;
+
+/** The scheme of an absolute URI, per RFC 3986: ALPHA *( ALPHA / DIGIT / "+" / "-" / "." ) ":". */
+const ABSOLUTE_URI = /^[A-Za-z][A-Za-z0-9+.-]*:/;
+
+export class ConfigError extends Error {
+	readonly code: "missing" | "invalid";
+
+	constructor(code: "missing" | "invalid", message: string) {
+		super(message);
+		this.name = "ConfigError";
+		this.code = code;
+	}
+}
+
+/** `<cwd>/.onlyne/config.toml`; configuration is a project fact. */
+export function configPath(cwd: string): string {
+	return join(cwd, CONFIG_RELATIVE_PATH);
+}
+
+/**
+ * A region is a stable absolute URI. A short name is accepted from the user and
+ * saved as `urn:onlyne:region:<URI-encoded name>`; an absolute URI is kept as is.
+ */
+export function normalizeRegion(value: string): string {
+	const trimmed = value.trim();
+	if (trimmed.length === 0) throw new ConfigError("invalid", t("regionEmpty"));
+	return ABSOLUTE_URI.test(trimmed) && !/\s/.test(trimmed) ? trimmed : `${REGION_PREFIX}${encodeURIComponent(trimmed)}`;
+}
+
+/**
+ * A node id is a stable absolute URI. A short name is accepted from the user and
+ * saved as `urn:onlyne:agent:<URI-encoded name>`; an absolute URI is kept as is.
+ */
+export function normalizeNodeId(value: string): string {
+	const trimmed = value.trim();
+	if (trimmed.length === 0) throw new ConfigError("invalid", t("nodeIdEmpty"));
+	return ABSOLUTE_URI.test(trimmed) && !/\s/.test(trimmed) ? trimmed : `${AGENT_PREFIX}${encodeURIComponent(trimmed)}`;
+}
+
+/** The short name of an agent URN, for display in a form; a value without that prefix is returned unchanged. */
+export function shortNodeId(value: string): string {
+	if (!value.startsWith(AGENT_PREFIX)) return value;
+	const name = value.slice(AGENT_PREFIX.length);
+	try {
+		return decodeURIComponent(name);
+	} catch {
+		return name;
+	}
+}
+
+/**
+ * A node address as the rest of the plugin uses it: the absolute service URL. An origin
+ * (`http://host:7801`), a service URL, and a bare `host:port` all name the same node, and
+ * only the service URL is stored or contacted, so one address has one spelling.
+ */
+export function normalizeServiceUrl(value: string): string {
+	const raw = value.trim();
+	if (raw.length === 0) throw new ConfigError("invalid", t("addressEmpty"));
+	// A bare `host:port` reads as a scheme to `URL`; it is the common hand-typed form.
+	const candidate = /^[A-Za-z][A-Za-z0-9+.-]*:\/\//.test(raw) ? raw : `http://${raw}`;
+	let url: URL;
+	try {
+		url = new URL(candidate);
+	} catch {
+		throw new ConfigError("invalid", t("addressUrl", { value: JSON.stringify(raw) }));
+	}
+	if (url.protocol !== "http:" && url.protocol !== "https:") {
+		throw new ConfigError("invalid", t("addressScheme", { value: JSON.stringify(raw) }));
+	}
+	const path = url.pathname.replace(/\/+$/, "");
+	if (path.length === 0 || path === "/") return `${url.origin}${SERVICE_PATH}`;
+	if (path === SERVICE_PATH) return `${url.origin}${SERVICE_PATH}`;
+	throw new ConfigError(
+		"invalid",
+		t("addressShape", { service: SERVICE_PATH, value: JSON.stringify(raw) }),
+	);
+}
+
+/** Read and validate the project configuration. A missing file is an error, not defaults. */
+export async function loadConfig(cwd: string): Promise<OnlyneConfig> {
+	const path = configPath(cwd);
+	let text: string;
+	try {
+		text = await readFile(path, "utf8");
+	} catch (error) {
+		if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") {
+			throw new ConfigError("missing", t("configMissing", { path }));
+		}
+		throw error;
+	}
+	return parseConfig(text, path);
+}
+
+/**
+ * Validate, then write the project configuration atomically; the file is either
+ * the old or the new contents. Returns the configuration as written.
+ */
+export async function saveConfig(config: OnlyneConfig): Promise<OnlyneConfig> {
+	const next = validateConfig(config);
+	const text = serializeConfig(next);
+	await mkdir(dirname(next.path), { recursive: true });
+	const temporary = `${next.path}.${process.pid}.${Date.now()}.tmp`;
+	await writeFile(temporary, text, "utf8");
+	await rename(temporary, next.path);
+	return next;
+}
+
+/** Parse and validate the project configuration. Exported for tests. */
+export function parseConfig(text: string, path: string): OnlyneConfig {
+	let raw: Record<string, unknown>;
+	try {
+		raw = Bun.TOML.parse(text) as Record<string, unknown>;
+	} catch (error) {
+		throw new ConfigError("invalid", t("configParse", { path, error: error instanceof Error ? error.message : String(error) }));
+	}
+	const node = table(raw, "node", path);
+	const server = table(raw, "server", path);
+	const threads = table(raw, "threads", path);
+	const discovery = raw.discovery === undefined ? undefined : table(raw, "discovery", path);
+	rejectRetired(raw, node, server, threads);
+	const id = optionalString(node, "id", "node.id");
+	const region = optionalString(node, "region", "node.region");
+	const keyRef = optionalString(node, "key_ref", "node.key_ref");
+	const keyScope = optionalString(node, "key_scope", "node.key_scope");
+	const publicUrl = optionalString(server, "public_url", "server.public_url");
+	const port = optionalInteger(server, "port", "server.port");
+	const seeds = discovery === undefined ? undefined : stringArray(discovery, "seeds", "discovery.seeds");
+	const trust = trustSeeds(raw, path);
+	const acquisition = raw.acquisition === undefined ? undefined : table(raw, "acquisition", path);
+	const acquirePolicy = acquisition === undefined ? undefined : optionalString(acquisition, "policy", "acquisition.policy");
+	const acquireAllow = acquisition === undefined ? undefined : stringArray(acquisition, "allow", "acquisition.allow");
+	const bind = optionalString(server, "bind", "server.bind");
+	const pageSize = optionalInteger(threads, "page_size", "threads.page_size");
+	return validateConfig({
+		path,
+		...(raw.language === undefined ? {} : { language: raw.language as Locale }),
+		region: region ?? "",
+		node: { id: id ?? "", ...(keyRef === undefined ? {} : { key_ref: keyRef }), ...(keyScope === undefined ? {} : { key_scope: keyScope as "project" | "global" | "none" }) },
+		server: { bind: bind ?? DEFAULT_BIND, ...(port === undefined ? {} : { port }), ...(publicUrl === undefined ? {} : { public_url: publicUrl }) },
+		threads: { page_size: pageSize ?? DEFAULT_PAGE_SIZE },
+		acquisition: { policy: acquirePolicyOf(acquirePolicy), allow: acquireAllow ?? [...DEFAULT_ACQUISITION.allow] },
+		...(seeds === undefined && trust === undefined ? {} : { discovery: { ...(seeds === undefined ? {} : { seeds }), ...(trust === undefined ? {} : { trust }) } }),
+		...(trust === undefined ? {} : { trust }),
+	});
+}
+
+/** Serialize a validated configuration in a stable section order. */
+export function serializeConfig(config: OnlyneConfig): string {
+	const lines: string[] = [
+		"# Onlyne project configuration. Credentials stay behind key_ref references.",
+		...(config.language === undefined ? [] : [`language = ${tomlString(config.language)}`, ""]),
+		"[node]",
+		`id = ${tomlString(config.node.id)}`,
+		`region = ${tomlString(config.region)}`,
+	];
+	if (config.node.key_ref !== undefined) lines.push(`key_ref = ${tomlString(config.node.key_ref)}`);
+	if (config.node.key_scope !== undefined) lines.push(`key_scope = ${tomlString(config.node.key_scope)}`);
+	lines.push(
+		"",
+		"[server]",
+		`bind = ${tomlString(config.server.bind)}`,
+		...(config.server.port === undefined ? [] : [`port = ${String(config.server.port)}`]),
+		...(config.server.public_url === undefined ? [] : [`public_url = ${tomlString(config.server.public_url)}`]),
+		"",
+		"[threads]",
+		`page_size = ${String(config.threads.page_size)}`,
+	);
+	const acquisition = config.acquisition ?? DEFAULT_ACQUISITION;
+	lines.push("", "[acquisition]", `policy = ${tomlString(acquisition.policy)}`);
+	if (acquisition.allow.length > 0) lines.push(`allow = [${acquisition.allow.map(entry => tomlString(entry)).join(", ")}]`);
+	if (config.discovery?.seeds !== undefined || config.trust !== undefined) {
+		lines.push("", "[discovery]");
+		const seeds = config.discovery?.seeds ?? [];
+		if (seeds.length > 0) lines.push(`seeds = [${seeds.map(seed => tomlString(seed)).join(", ")}]`);
+		for (const entry of config.trust ?? []) {
+			lines.push("", "[[trust]]", `node_id = ${tomlString(entry.node_id)}`, `fingerprint = ${tomlString(entry.fingerprint)}`);
+		}
+	}
+	return `${lines.join("\n")}\n`;
+}
+
+function validateConfig(config: OnlyneConfig): OnlyneConfig {
+	if (config.language !== undefined && config.language !== "en" && config.language !== "zh-CN") {
+		throw new ConfigError("invalid", t("languageInvalid"));
+	}
+	const region = normalizeRegion(config.region);
+	const id = normalizeNodeId(config.node.id);
+	const keyRef = config.node.key_ref?.trim();
+	const bind = config.server.bind.trim();
+	const publicUrl = config.server.public_url?.trim();
+	const port = config.server.port;
+	const keyScope = config.node.key_scope;
+	if (keyScope !== undefined && keyScope !== "project" && keyScope !== "global" && keyScope !== "none") {
+		throw new ConfigError("invalid", t("keyScopeInvalid", { value: JSON.stringify(keyScope) }));
+	}
+	if (publicUrl !== undefined && publicUrl.length === 0) throw new ConfigError("invalid", t("publicUrlEmpty"));
+	if (port !== undefined && (!Number.isInteger(port) || port < 0 || port > 65535)) {
+		throw new ConfigError("invalid", t("portRange", { value: String(port) }));
+	}
+	// A seed is contacted at every start, so it is stored in the one spelling the node uses.
+	const seeds = [...new Set((config.discovery?.seeds ?? []).map(seed => seed.trim()).filter(seed => seed.length > 0).map(normalizeServiceUrl))];
+	if (bind.length === 0) throw new ConfigError("invalid", t("bindEmpty"));
+	if (/[\s/]/.test(bind)) {
+		throw new ConfigError("invalid", t("bindShape", { value: JSON.stringify(bind) }));
+	}
+	const pageSize = config.threads.page_size;
+	if (!Number.isInteger(pageSize) || pageSize < 1 || pageSize > 100) {
+		throw new ConfigError("invalid", t("pageSizeRange", { value: String(pageSize) }));
+	}
+	const policy = config.acquisition?.policy ?? DEFAULT_ACQUISITION.policy;
+	if (policy !== "all" && policy !== "segment" && policy !== "none") {
+		throw new ConfigError("invalid", t("acquirePolicy", { value: JSON.stringify(policy) }));
+	}
+	const acquisition: AcquisitionPolicy = {
+		policy,
+		allow: [...new Set((config.acquisition?.allow ?? DEFAULT_ACQUISITION.allow).map(entry => entry.trim()).filter(entry => entry.length > 0))],
+	};
+	for (const entry of acquisition.allow) {
+		if (parseAllowBlock(entry) === undefined) throw new ConfigError("invalid", t("acquireAllow", { value: JSON.stringify(entry) }));
+	}
+	return {
+		path: config.path,
+		...(config.language === undefined ? {} : { language: config.language }),
+		region,
+		node: { id, ...(keyRef === undefined || keyRef.length === 0 ? {} : { key_ref: keyRef }), ...(keyScope === undefined ? {} : { key_scope: keyScope }) },
+		server: { bind, ...(port === undefined || port === 0 ? {} : { port }), ...(publicUrl === undefined ? {} : { public_url: publicUrl }) },
+		threads: { page_size: pageSize },
+		acquisition,
+		...(seeds.length === 0 ? {} : { discovery: { seeds } }),
+		...(config.trust === undefined ? {} : { trust: config.trust }),
+	};
+}
+
+function rejectRetired(
+	raw: Record<string, unknown>,
+	node: Record<string, unknown>,
+	server: Record<string, unknown>,
+	threads: Record<string, unknown>,
+): void {
+	rejectKey(node, "endpoint", t("retiredEndpoint"));
+	rejectKey(raw, "peers", t("retiredPeers"));
+	rejectKey(raw, "omp", t("retiredOmp"));
+	rejectKey(threads, "default_attention", t("retiredAttention"));
+}
+
+function rejectKey(source: Record<string, unknown>, key: string, message: string): void {
+	if (source[key] !== undefined) throw new ConfigError("invalid", message);
+}
+
+/** `acquisition.policy`: the documented default when absent; any other word is a configuration error. */
+function acquirePolicyOf(value: string | undefined): AcquirePolicy {
+	if (value === undefined) return DEFAULT_ACQUISITION.policy;
+	if (value === "all" || value === "segment" || value === "none") return value;
+	throw new ConfigError("invalid", t("acquirePolicy", { value: JSON.stringify(value) }));
+}
+
+function table(root: Record<string, unknown>, key: string, path: string): Record<string, unknown> {
+	const value = root[key];
+	if (value === undefined) return {};
+	if (!isTable(value)) throw new ConfigError("invalid", t("tableExpected", { path, key }));
+	return value;
+}
+
+function optionalString(source: Record<string, unknown>, key: string, field: string): string | undefined {
+	const value = source[key];
+	if (value === undefined) return undefined;
+	if (typeof value !== "string") throw new ConfigError("invalid", t("stringExpected", { field }));
+	return value;
+}
+
+function optionalInteger(source: Record<string, unknown>, key: string, field: string): number | undefined {
+	const value = source[key];
+	if (value === undefined) return undefined;
+	if (typeof value !== "number" || !Number.isInteger(value)) {
+		throw new ConfigError("invalid", t("integerExpected", { field }));
+	}
+	return value;
+}
+
+/** An array of non-empty strings under `source.name`. */
+function stringArray(source: Record<string, unknown>, key: string, field: string): string[] | undefined {
+	const value = source[key];
+	if (value === undefined) return undefined;
+	if (!Array.isArray(value) || !value.every(entry => typeof entry === "string" && entry.length > 0)) {
+		throw new ConfigError("invalid", t("stringArrayExpected", { field }));
+	}
+	return value;
+}
+
+/** `[[trust]]` rows: a node id and a 16-hex-character fingerprint each. */
+function trustSeeds(raw: Record<string, unknown>, path: string): Array<{ node_id: string; fingerprint: string }> | undefined {
+	const value = raw.trust;
+	if (value === undefined) return undefined;
+	if (!Array.isArray(value)) throw new ConfigError("invalid", t("trustArray", { path }));
+	const entries: Array<{ node_id: string; fingerprint: string }> = [];
+	for (const row of value) {
+		if (row === null || typeof row !== "object" || Array.isArray(row)) {
+			throw new ConfigError("invalid", t("trustArray", { path }));
+		}
+		const record = row as Record<string, unknown>;
+		const node_id = typeof record.node_id === "string" ? record.node_id.trim() : "";
+		const fingerprint = typeof record.fingerprint === "string" ? record.fingerprint.trim() : "";
+		if (node_id.length === 0 || !/^[0-9a-f]{16}$/.test(fingerprint)) {
+			throw new ConfigError("invalid", t("trustEntry", { path }));
+		}
+		entries.push({ node_id, fingerprint });
+	}
+	return entries;
+}
+
+function isTable(value: unknown): value is Record<string, unknown> {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+function tomlString(value: string): string {
+	return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t")}"`;
+}
+