feat(pinner): support pre-created Libp2p instance

[pcfreak30]

Problem

Helia v7's createHelia() calls withLibp2p(helia) without passing the libp2p option through — init.libp2p is silently ignored. This causes Helia to always invoke createLibp2p() / libp2pDefaults(), which configures WebRTC and UPnP transports that crash in environments without native addons (e.g. GitHub Actions runners).

The downstream effect: WebRTCDirectTransport.start() → loadOrCreatePrivateKey() → keychain.exportKey() → UnstorageDatastore.get() throws a plain Error instead of NotFoundError → Datastore item not found: /pkcs8/webrtc-direct-certificate-private-key crash.

Solution

When config.libp2p is provided, getHelia() bypasses createHelia() and manually composes the same pipeline:

createHeliaLight({...}) → withHTTP → withLibp2p(helia, libp2p) → withBitswap

The pre-created instance passes the isLibp2p() check in getLibp2p(), so createLibp2p() / libp2pDefaults() is skipped entirely — no WebRTC, no UPnP, no native addons loaded.

Changes

• config.ts — Add libp2p?: Libp2p to PinnerConfig
• car.ts — Add libp2p?: Libp2p to CarConfig; getHelia() uses manual composition when config.libp2p is provided, falls back to createHelia() otherwise
• manager.ts — Pass libp2p through UploadManager → configureCar()
• package.json — Add @helia/bitswap, @helia/libp2p, @ipld/dag-cbor, @ipld/dag-json, @libp2p/interface as dependencies
• pnpm-workspace.yaml — Add catalog entries for new deps

Backward Compatibility

Fully backward compatible. When libp2p is not provided, createHelia() is used as before — no behavior change for existing consumers.

---

This pull request adds support for passing a pre-created Libp2p instance into the Pinner's Helia configuration. When a Libp2p instance is provided, the Pinner bypasses Helia's internal createLibp2p() / libp2pDefaults() flow and instead manually composes a lightweight Helia pipeline (createHeliaLight → withHTTP → withLibp2p → withBitswap). This avoids loading unnecessary transports such as WebRTC and UPnP, reducing overhead and giving callers full control over the Libp2p node used by Helia.

Key changes:

• Added an optional libp2p property to both PinnerConfig and CarConfig interfaces.
• Updated the Helia initialization in the CAR upload module to use the pre-created Libp2p instance when available, falling back to the standard createHelia() otherwise.
• Threaded the libp2p config option through the UploadManager to the CAR configuration.
• Added the necessary dependencies (@helia/bitswap, @helia/libp2p, @ipld/dag-cbor, @ipld/dag-json, @libp2p/interface) and updated the lockfile and workspace catalog.

[kody-ai]

Code Review Completed! 🔥

The code review was successfully completed based on your current configurations.

Kody Guide: Usage and Configuration

Interacting with Kody

• Request a Review: Ask Kody to review your PR manually by adding a comment with the @kody start-review command at the root of your PR.

• Validate Business Logic: Ask Kody to validate your code against business rules by adding a comment with the @kody -v business-logic command.

• Provide Feedback: Help Kody learn and improve by reacting to its comments with a 👍 for helpful suggestions or a 👎 if improvements are needed.

Current Kody Configuration

Review Options

The following review options are enabled or disabled:

Options	Enabled
Bug	✅
Performance	✅
Security	✅
Business Logic	✅

Access your configuration settings here.

​