WikiDeck/wikideck
3
0
Fork 1
Code Issues 8 Pull Requests Actions Packages Projects 2 Releases Wiki Activity

deploy

Browse Source
This commit is contained in:
eric
2026-11-01 16:43:28 -05:00
parent b427fa4217
commit b88dfb1e94
11 changed files with 121 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/launch.ts
+9 -4
View File
@@ -3,7 +3,8 @@ import { CHAIN_ID, GENESIS_HASH, GENESIS_TIME } from './testnet/consensus.ts';
export function launchManifest() {
return { profile: PROFILE, network: NETWORK, chainId: CHAIN_ID, genesis: GENESIS_HASH,
genesisTime: GENESIS_TIME, launchStatus: IS_MAINNET ? 'candidate-gated' : 'testnet', audited: false };
genesisTime: GENESIS_TIME, launchStatus: IS_MAINNET ? 'candidate-gated' : 'testnet', audited: false,
privatePeersSupported: true };
}
/** Operator risk acceptance is an accident-prevention gate, NOT evidence of external review. */
export function assertLaunchAllowed(env: NodeJS.ProcessEnv = process.env, now = Date.now()) {
@@ -14,11 +15,15 @@ export function assertLaunchAllowed(env: NodeJS.ProcessEnv = process.env, now =
if (now < GENESIS_TIME * 1000) throw new Error('Mainnet candidate genesis time has not arrived; this is not an announced launch date');
const origin = new URL(env.PUBLIC_ORIGIN ?? 'http://invalid');
if (origin.protocol !== 'https:' || origin.username || origin.password || origin.pathname !== '/' || origin.search || origin.hash) throw new Error('Mainnet requires an HTTPS PUBLIC_ORIGIN');
// Explicit operator-controlled cluster opt-in; never inferred from peer input.
// This permits private/HTTP RPC, not weaker browser HTTPS or chain/genesis gates.
const allowPrivate = env.WIKIDECK_ALLOW_PRIVATE_PEERS === '1';
const peers = (env.WIKIDECK_PEERS ?? '').split(',').map(s => s.trim()).filter(Boolean);
if (new Set(peers).size < 2) throw new Error('Mainnet launch requires at least two explicitly configured independent HTTPS peers');
if (new Set(peers).size < 2) throw new Error('Mainnet launch requires at least two explicitly configured distinct peers');
for (const text of peers) {
if (!/^https?:\/\/[^/?#\\@\s]+\/?$/i.test(text)) throw new Error('Invalid mainnet peer origin');
const peer = new URL(text);
if (peer.protocol !== 'https:' || peer.origin === origin.origin || peer.username || peer.password || peer.pathname !== '/' || peer.search || peer.hash) throw new Error('Invalid mainnet peer origin');
if ((peer.protocol !== 'https:' && !(allowPrivate && peer.protocol === 'http:')) || peer.origin === origin.origin || peer.username || peer.password || peer.pathname !== '/' || peer.search || peer.hash) throw new Error('Invalid mainnet peer origin');
}
if (new Set(peers.map(p => new URL(p).origin)).size < 2 || env.WIKIDECK_ALLOW_PRIVATE_PEERS === '1') throw new Error('Mainnet requires distinct public peer origins; private peer bypass is disabled');
if (new Set(peers.map(p => new URL(p).origin)).size < 2) throw new Error('Mainnet requires distinct peer origins');
}
server/testnet/peers.ts
+1 -1
View File
@@ -31,7 +31,7 @@ const poolSchema = z.object({ transactions: z.array(transactionSchema).max(256)
type Peer = { url: string; connected: boolean; error?: string; offset: number; busy: boolean };
/** Outbound-only fixed allowlist. HTTP routes are deliberately left to the caller.
* allowPrivate is an explicit operator permission for local/Docker networks, not peer input.
* allowPrivate is an explicit operator permission for local/Docker/cluster networks, not peer input.
*/
export class PeerNetwork {
private readonly peers: Peer[];