@aria-cli/tools 1.0.0

package/dist/network-runtime/protocol-schemas.d.ts

@@ -0,0 +1,329 @@
+import { z } from "zod";
+export { RuntimeEventKindSchema, RuntimeEventSchema, type RuntimeEventKind, type RuntimeEvent, } from "./node-store-contract.js";
+export declare const NETWORK_RUNTIME_PROTOCOL_VERSION: 1;
+export declare const NetworkRuntimeProtocolVersionSchema: z.ZodLiteral<1>;
+export type NetworkRuntimeProtocolVersion = z.infer<typeof NetworkRuntimeProtocolVersionSchema>;
+export declare function isSupportedNetworkRuntimeProtocolVersion(version: number | undefined): version is NetworkRuntimeProtocolVersion;
+export declare function assertSupportedNetworkRuntimeProtocolVersion(version: number | undefined, context?: string): NetworkRuntimeProtocolVersion;
+/**
+ * Shared delivery-ack wire contract.
+ * Durable settlement is keyed by stable peer identity, not display-name strings.
+ */
+export declare const DeliveryAckSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    messageId: z.ZodString;
+    senderNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    recipientNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    storedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type DeliveryAck = z.infer<typeof DeliveryAckSchema>;
+export declare const TransportInviteTokenSchema: z.ZodObject<{
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    audienceNodeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "NodeId", "out">>;
+    publicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    leaderDisplayNameSnapshot: z.ZodOptional<z.ZodString>;
+    host: z.ZodString;
+    port: z.ZodNumber;
+    controlEndpoint: z.ZodOptional<z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        protocolVersion: z.ZodNumber;
+        endpointRevision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    psk: z.ZodString;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    signingPublicKey: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">>;
+    caCert: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodNumber;
+    expiresAt: z.ZodNumber;
+    tokenNonce: z.ZodString;
+    coordinationUrl: z.ZodOptional<z.ZodString>;
+    networkId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type TransportInviteToken = z.infer<typeof TransportInviteTokenSchema>;
+export declare const JoinRequestSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    peerPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    transportEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strip>;
+    controlEndpoint: z.ZodOptional<z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        protocolVersion: z.ZodNumber;
+        endpointRevision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    inviteTokenNonce: z.ZodString;
+}, z.core.$strict>;
+export type JoinRequest = z.infer<typeof JoinRequestSchema>;
+export declare const JoinRouteBodySchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    peerPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    transportEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strip>;
+    controlEndpoint: z.ZodOptional<z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        protocolVersion: z.ZodNumber;
+        endpointRevision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    inviteTokenNonce: z.ZodString;
+    proofOfWork: z.ZodString;
+}, z.core.$strict>;
+export type JoinRouteBody = z.infer<typeof JoinRouteBodySchema>;
+export declare const JoinRouteBodyJsonSchema: Record<string, unknown>;
+export declare const RuntimeIngressEnvelopeSchema: z.ZodUnion<readonly [z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    deliveryAck: z.ZodObject<{
+        protocolVersion: z.ZodLiteral<1>;
+        messageId: z.ZodString;
+        senderNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        recipientNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        storedAt: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    ariaMessage: z.ZodUnknown;
+}, z.core.$strict>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    joinRequest: z.ZodObject<{
+        protocolVersion: z.ZodLiteral<1>;
+        nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        peerPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+        signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+        transportEndpoint: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strip>;
+        controlEndpoint: z.ZodOptional<z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodNumber;
+            tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+            tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+            protocolVersion: z.ZodNumber;
+            endpointRevision: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        displayNameSnapshot: z.ZodOptional<z.ZodString>;
+        inviteTokenNonce: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>]>;
+export type RuntimeIngressEnvelope = z.infer<typeof RuntimeIngressEnvelopeSchema>;
+export declare const RuntimeNodeAdvertisementSchema: z.ZodObject<{
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    controlEndpoint: z.ZodOptional<z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        protocolVersion: z.ZodNumber;
+        endpointRevision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    protocolVersion: z.ZodLiteral<1>;
+    publicationRevision: z.ZodNumber;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    transportEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strip>;
+    advertisedHosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export type RuntimeNodeAdvertisement = z.infer<typeof RuntimeNodeAdvertisementSchema>;
+export declare const RuntimeDiscoveryAdvertisementSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    displayNameSnapshot: z.ZodString;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    controlPort: z.ZodNumber;
+    advertisedHosts: z.ZodArray<z.ZodString>;
+    tlsCaFingerprint: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type RuntimeDiscoveryAdvertisement = z.infer<typeof RuntimeDiscoveryAdvertisementSchema>;
+export declare const RuntimeRegisterRequestSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    endpointRevision: z.ZodNumber;
+    controlEndpoint: z.ZodOptional<z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        protocolVersion: z.ZodNumber;
+        endpointRevision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type RuntimeRegisterRequest = z.infer<typeof RuntimeRegisterRequestSchema>;
+export declare const PairProposalSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<1>;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    controlEndpoint: z.ZodOptional<z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        protocolVersion: z.ZodNumber;
+        endpointRevision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    presharedKey: z.ZodString;
+}, z.core.$strict>;
+export type PairProposal = z.infer<typeof PairProposalSchema>;
+/**
+ * Canonical statement of a continuity bind transition.
+ * This is the byte-exact payload that both parties sign.
+ */
+export declare const ContinuityStatementSchema: z.ZodObject<{
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    previousPrincipalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    newPrincipalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    newTransportPublicKey: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">>;
+    bindingGeneration: z.ZodNumber;
+    revocationGeneration: z.ZodOptional<z.ZodNumber>;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+export type ContinuityStatement = z.infer<typeof ContinuityStatementSchema>;
+/**
+ * Dual-signed continuity bind: delegation (previous principal) + acceptance
+ * (new principal). Both public keys are included for independent verification.
+ */
+export declare const SignedContinuityBindSchema: z.ZodObject<{
+    statement: z.ZodObject<{
+        nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        previousPrincipalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        newPrincipalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        newTransportPublicKey: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">>;
+        bindingGeneration: z.ZodNumber;
+        revocationGeneration: z.ZodOptional<z.ZodNumber>;
+        createdAt: z.ZodString;
+    }, z.core.$strict>;
+    delegationSignature: z.ZodString;
+    acceptanceSignature: z.ZodString;
+    previousPublicKey: z.ZodString;
+    newPublicKey: z.ZodString;
+}, z.core.$strict>;
+export type SignedContinuityBind = z.infer<typeof SignedContinuityBindSchema>;
+export declare const MutationOperationSchema: z.ZodEnum<{
+    "network.register": "network.register";
+    "network.revoke": "network.revoke";
+    "network.list_peers": "network.list_peers";
+    "pair.direct": "pair.direct";
+    "pair.relay": "pair.relay";
+    "pair.relay_response": "pair.relay_response";
+    "peer.update_capabilities": "peer.update_capabilities";
+    "peer.update_trust_tier": "peer.update_trust_tier";
+}>;
+export type MutationOperation = z.infer<typeof MutationOperationSchema>;
+export declare const MutationEnvelopeSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    id: z.ZodString;
+    operation: z.ZodEnum<{
+        "network.register": "network.register";
+        "network.revoke": "network.revoke";
+        "network.list_peers": "network.list_peers";
+        "pair.direct": "pair.direct";
+        "pair.relay": "pair.relay";
+        "pair.relay_response": "pair.relay_response";
+        "peer.update_capabilities": "peer.update_capabilities";
+        "peer.update_trust_tier": "peer.update_trust_tier";
+    }>;
+    principal: z.ZodObject<{
+        nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+        bindingGeneration: z.ZodNumber;
+        displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    target: z.ZodObject<{
+        nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+        bindingGeneration: z.ZodNumber;
+        displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    namespace: z.ZodString;
+    policyEpoch: z.ZodNumber;
+    nonce: z.ZodString;
+    timestamp: z.ZodNumber;
+    ttl: z.ZodNumber;
+    contextHash: z.ZodString;
+    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    signature: z.ZodString;
+    method: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    reason: z.ZodOptional<z.ZodString>;
+    parentEnvelopeId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type MutationEnvelope = z.infer<typeof MutationEnvelopeSchema>;
+export declare const NetworkRouteRevokeRequestSchema: z.ZodObject<{
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    envelope: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        id: z.ZodString;
+        operation: z.ZodEnum<{
+            "network.register": "network.register";
+            "network.revoke": "network.revoke";
+            "network.list_peers": "network.list_peers";
+            "pair.direct": "pair.direct";
+            "pair.relay": "pair.relay";
+            "pair.relay_response": "pair.relay_response";
+            "peer.update_capabilities": "peer.update_capabilities";
+            "peer.update_trust_tier": "peer.update_trust_tier";
+        }>;
+        principal: z.ZodObject<{
+            nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+            principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+            transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+            bindingGeneration: z.ZodNumber;
+            displayNameSnapshot: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        target: z.ZodObject<{
+            nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+            principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+            transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+            bindingGeneration: z.ZodNumber;
+            displayNameSnapshot: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        namespace: z.ZodString;
+        policyEpoch: z.ZodNumber;
+        nonce: z.ZodString;
+        timestamp: z.ZodNumber;
+        ttl: z.ZodNumber;
+        contextHash: z.ZodString;
+        payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        signature: z.ZodString;
+        method: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        reason: z.ZodOptional<z.ZodString>;
+        parentEnvelopeId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type NetworkRouteRevokeRequest = z.infer<typeof NetworkRouteRevokeRequestSchema>;
+export declare const NetworkRouteRevokeRequestJsonSchema: Record<string, unknown>;
+//# sourceMappingURL=protocol-schemas.d.ts.map

package/dist/network-runtime/protocol-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-schemas.d.ts","sourceRoot":"","sources":["../../src/network-runtime/protocol-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,0BAA0B,CAAC;AAkBlC,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAC3D,eAAO,MAAM,mCAAmC,iBAA8C,CAAC;AAC/F,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,IAAI,6BAA6B,CAE1C;AAED,wBAAgB,4CAA4C,CAC1D,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,SAAoB,GAC1B,6BAA6B,CAO/B;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;kBAQnB,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;kBAmB5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;kBAYnB,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;kBAErB,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,eAAO,MAAM,uBAAuB,yBAA+C,CAAC;AAEpF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAmBvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;kBAMhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,mCAAmC;;;;;;;;kBAUrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;kBAU9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;kBAUpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;kBAU3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;kBAQ5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,uBAAuB;;;;;;;;;EASlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqBxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,eAAO,MAAM,mCAAmC,yBAE/C,CAAC"}

package/dist/network-runtime/protocol-schemas.js

@@ -0,0 +1,206 @@
+import { z } from "zod";
+import { BindingGenerationSchema, ControlEndpointAdvertisementSchema, EndpointRevisionSchema, NodeAdvertisementSchema, NodeIdSchema, PeerTransportIdSchema, PublicationRevisionSchema, PrincipalFingerprintSchema, RevocationGenerationSchema, SigningPublicKeySchema, TransportEndpointAdvertisementSchema, } from "./address-types.js";
+export { RuntimeEventKindSchema, RuntimeEventSchema, } from "./node-store-contract.js";
+import { NodePrincipalBindingRefSchema } from "./peer-principal-ref.js";
+const NonEmptyStringSchema = z.string().trim().min(1);
+// Signed transport invite tokens must preserve PEM bytes verbatim; trimming
+// a trailing newline changes the signed payload and breaks verification.
+const NonBlankVerbatimStringSchema = z
+    .string()
+    .min(1)
+    .refine((value) => value.trim().length > 0);
+const RecordSchema = z.record(z.string(), z.unknown());
+function toFastifyBodyJsonSchema(schema) {
+    const jsonSchema = z.toJSONSchema(schema);
+    delete jsonSchema.$schema;
+    return jsonSchema;
+}
+export const NETWORK_RUNTIME_PROTOCOL_VERSION = 1;
+export const NetworkRuntimeProtocolVersionSchema = z.literal(NETWORK_RUNTIME_PROTOCOL_VERSION);
+export function isSupportedNetworkRuntimeProtocolVersion(version) {
+    return version === NETWORK_RUNTIME_PROTOCOL_VERSION;
+}
+export function assertSupportedNetworkRuntimeProtocolVersion(version, context = "network runtime") {
+    if (!isSupportedNetworkRuntimeProtocolVersion(version)) {
+        throw new Error(`Unsupported ${context} protocol version ${String(version)}. Supported: ${NETWORK_RUNTIME_PROTOCOL_VERSION}`);
+    }
+    return version;
+}
+/**
+ * Shared delivery-ack wire contract.
+ * Durable settlement is keyed by stable peer identity, not display-name strings.
+ */
+export const DeliveryAckSchema = z
+    .object({
+    protocolVersion: NetworkRuntimeProtocolVersionSchema,
+    messageId: NonEmptyStringSchema,
+    senderNodeId: NodeIdSchema,
+    recipientNodeId: NodeIdSchema,
+    storedAt: z.number().int().nonnegative(),
+})
+    .strict();
+export const TransportInviteTokenSchema = z
+    .object({
+    nodeId: NodeIdSchema,
+    audienceNodeId: NodeIdSchema.optional(),
+    publicKey: PeerTransportIdSchema,
+    leaderDisplayNameSnapshot: NonEmptyStringSchema.optional(),
+    host: NonEmptyStringSchema,
+    port: z.number().int().min(1).max(65535),
+    controlEndpoint: ControlEndpointAdvertisementSchema.optional(),
+    psk: NonEmptyStringSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    signingPublicKey: SigningPublicKeySchema.optional(),
+    caCert: NonBlankVerbatimStringSchema.optional(),
+    createdAt: z.number().int().nonnegative(),
+    expiresAt: z.number().int().nonnegative(),
+    tokenNonce: NonEmptyStringSchema,
+    coordinationUrl: NonEmptyStringSchema.optional(),
+    networkId: NonEmptyStringSchema.optional(),
+})
+    .strict();
+export const JoinRequestSchema = z
+    .object({
+    protocolVersion: NetworkRuntimeProtocolVersionSchema,
+    nodeId: NodeIdSchema,
+    principalFingerprint: PrincipalFingerprintSchema,
+    peerPublicKey: PeerTransportIdSchema,
+    signingPublicKey: SigningPublicKeySchema,
+    transportEndpoint: TransportEndpointAdvertisementSchema,
+    controlEndpoint: ControlEndpointAdvertisementSchema.optional(),
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    inviteTokenNonce: NonEmptyStringSchema,
+})
+    .strict();
+export const JoinRouteBodySchema = JoinRequestSchema.extend({
+    proofOfWork: NonEmptyStringSchema,
+}).strict();
+export const JoinRouteBodyJsonSchema = toFastifyBodyJsonSchema(JoinRouteBodySchema);
+export const RuntimeIngressEnvelopeSchema = z.union([
+    z
+        .object({
+        protocolVersion: NetworkRuntimeProtocolVersionSchema,
+        deliveryAck: DeliveryAckSchema,
+    })
+        .strict(),
+    z
+        .object({
+        protocolVersion: NetworkRuntimeProtocolVersionSchema,
+        ariaMessage: z.unknown(),
+    })
+        .strict(),
+    z
+        .object({
+        protocolVersion: NetworkRuntimeProtocolVersionSchema,
+        joinRequest: JoinRequestSchema,
+    })
+        .strict(),
+]);
+export const RuntimeNodeAdvertisementSchema = NodeAdvertisementSchema.extend({
+    protocolVersion: NetworkRuntimeProtocolVersionSchema,
+    publicationRevision: PublicationRevisionSchema,
+    signingPublicKey: SigningPublicKeySchema,
+    transportEndpoint: TransportEndpointAdvertisementSchema,
+    advertisedHosts: z.array(NonEmptyStringSchema).min(1).optional(),
+}).strict();
+export const RuntimeDiscoveryAdvertisementSchema = z
+    .object({
+    protocolVersion: NetworkRuntimeProtocolVersionSchema,
+    nodeId: NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema,
+    principalFingerprint: PrincipalFingerprintSchema,
+    controlPort: z.number().int().min(1).max(65535),
+    advertisedHosts: z.array(NonEmptyStringSchema).min(1),
+    tlsCaFingerprint: z.string().trim().min(1).optional(),
+})
+    .strict();
+export const RuntimeRegisterRequestSchema = z
+    .object({
+    protocolVersion: NetworkRuntimeProtocolVersionSchema,
+    nodeId: NodeIdSchema,
+    transportPublicKey: PeerTransportIdSchema,
+    principalFingerprint: PrincipalFingerprintSchema,
+    endpointRevision: EndpointRevisionSchema,
+    controlEndpoint: ControlEndpointAdvertisementSchema.optional(),
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+})
+    .strict();
+export const PairProposalSchema = z
+    .object({
+    protocolVersion: NetworkRuntimeProtocolVersionSchema,
+    nodeId: NodeIdSchema,
+    principalFingerprint: PrincipalFingerprintSchema,
+    transportPublicKey: PeerTransportIdSchema,
+    controlEndpoint: ControlEndpointAdvertisementSchema.optional(),
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    presharedKey: NonEmptyStringSchema,
+})
+    .strict();
+/**
+ * Canonical statement of a continuity bind transition.
+ * This is the byte-exact payload that both parties sign.
+ */
+export const ContinuityStatementSchema = z
+    .object({
+    nodeId: NodeIdSchema,
+    previousPrincipalFingerprint: PrincipalFingerprintSchema,
+    newPrincipalFingerprint: PrincipalFingerprintSchema,
+    newTransportPublicKey: PeerTransportIdSchema.optional(),
+    bindingGeneration: BindingGenerationSchema,
+    revocationGeneration: RevocationGenerationSchema.optional(),
+    createdAt: NonEmptyStringSchema,
+})
+    .strict();
+/**
+ * Dual-signed continuity bind: delegation (previous principal) + acceptance
+ * (new principal). Both public keys are included for independent verification.
+ */
+export const SignedContinuityBindSchema = z
+    .object({
+    statement: ContinuityStatementSchema,
+    delegationSignature: NonEmptyStringSchema,
+    acceptanceSignature: NonEmptyStringSchema,
+    previousPublicKey: NonEmptyStringSchema,
+    newPublicKey: NonEmptyStringSchema,
+})
+    .strict();
+export const MutationOperationSchema = z.enum([
+    "network.register",
+    "network.revoke",
+    "network.list_peers",
+    "pair.direct",
+    "pair.relay",
+    "pair.relay_response",
+    "peer.update_capabilities",
+    "peer.update_trust_tier",
+]);
+export const MutationEnvelopeSchema = z
+    .object({
+    version: NetworkRuntimeProtocolVersionSchema,
+    id: NonEmptyStringSchema,
+    operation: MutationOperationSchema,
+    principal: NodePrincipalBindingRefSchema,
+    target: NodePrincipalBindingRefSchema,
+    namespace: NonEmptyStringSchema,
+    policyEpoch: z.number().int().nonnegative(),
+    nonce: NonEmptyStringSchema,
+    timestamp: z.number().int().nonnegative(),
+    ttl: z.number().int().positive(),
+    contextHash: NonEmptyStringSchema,
+    payload: RecordSchema,
+    signature: NonEmptyStringSchema,
+    method: NonEmptyStringSchema.optional(),
+    path: NonEmptyStringSchema.optional(),
+    metadata: RecordSchema.optional(),
+    reason: NonEmptyStringSchema.optional(),
+    parentEnvelopeId: NonEmptyStringSchema.optional(),
+})
+    .strict();
+export const NetworkRouteRevokeRequestSchema = z
+    .object({
+    nodeId: NodeIdSchema,
+    envelope: MutationEnvelopeSchema,
+})
+    .strict();
+export const NetworkRouteRevokeRequestJsonSchema = toFastifyBodyJsonSchema(NetworkRouteRevokeRequestSchema);
+//# sourceMappingURL=protocol-schemas.js.map

package/dist/network-runtime/protocol-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-schemas.js","sourceRoot":"","sources":["../../src/network-runtime/protocol-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,kCAAkC,EAClC,sBAAsB,EACtB,uBAAuB,EACvB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,kBAAkB,GAGnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAExE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACtD,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC9C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEvD,SAAS,uBAAuB,CAAC,MAAoB;IACnD,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAA4B,CAAC;IACrE,OAAO,UAAU,CAAC,OAAO,CAAC;IAC1B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAC3D,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;AAG/F,MAAM,UAAU,wCAAwC,CACtD,OAA2B;IAE3B,OAAO,OAAO,KAAK,gCAAgC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC1D,OAA2B,EAC3B,OAAO,GAAG,iBAAiB;IAE3B,IAAI,CAAC,wCAAwC,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,eAAe,OAAO,qBAAqB,MAAM,CAAC,OAAO,CAAC,gBAAgB,gCAAgC,EAAE,CAC7G,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,eAAe,EAAE,mCAAmC;IACpD,SAAS,EAAE,oBAAoB;IAC/B,YAAY,EAAE,YAAY;IAC1B,eAAe,EAAE,YAAY;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,MAAM,EAAE,YAAY;IACpB,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,qBAAqB;IAChC,yBAAyB,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC1D,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACxC,eAAe,EAAE,kCAAkC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oBAAoB;IACzB,mBAAmB,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,UAAU,EAAE,oBAAoB;IAChC,eAAe,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,eAAe,EAAE,mCAAmC;IACpD,MAAM,EAAE,YAAY;IACpB,oBAAoB,EAAE,0BAA0B;IAChD,aAAa,EAAE,qBAAqB;IACpC,gBAAgB,EAAE,sBAAsB;IACxC,iBAAiB,EAAE,oCAAoC;IACvD,eAAe,EAAE,kCAAkC,CAAC,QAAQ,EAAE;IAC9D,mBAAmB,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,oBAAoB;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC1D,WAAW,EAAE,oBAAoB;CAClC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;AAEpF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;SACE,MAAM,CAAC;QACN,eAAe,EAAE,mCAAmC;QACpD,WAAW,EAAE,iBAAiB;KAC/B,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,eAAe,EAAE,mCAAmC;QACpD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;KACzB,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,eAAe,EAAE,mCAAmC;QACpD,WAAW,EAAE,iBAAiB;KAC/B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC3E,eAAe,EAAE,mCAAmC;IACpD,mBAAmB,EAAE,yBAAyB;IAC9C,gBAAgB,EAAE,sBAAsB;IACxC,iBAAiB,EAAE,oCAAoC;IACvD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,eAAe,EAAE,mCAAmC;IACpD,MAAM,EAAE,YAAY;IACpB,mBAAmB,EAAE,oBAAoB;IACzC,oBAAoB,EAAE,0BAA0B;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC/C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,eAAe,EAAE,mCAAmC;IACpD,MAAM,EAAE,YAAY;IACpB,kBAAkB,EAAE,qBAAqB;IACzC,oBAAoB,EAAE,0BAA0B;IAChD,gBAAgB,EAAE,sBAAsB;IACxC,eAAe,EAAE,kCAAkC,CAAC,QAAQ,EAAE;IAC9D,mBAAmB,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,eAAe,EAAE,mCAAmC;IACpD,MAAM,EAAE,YAAY;IACpB,oBAAoB,EAAE,0BAA0B;IAChD,kBAAkB,EAAE,qBAAqB;IACzC,eAAe,EAAE,kCAAkC,CAAC,QAAQ,EAAE;IAC9D,mBAAmB,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACpD,YAAY,EAAE,oBAAoB;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,MAAM,EAAE,YAAY;IACpB,4BAA4B,EAAE,0BAA0B;IACxD,uBAAuB,EAAE,0BAA0B;IACnD,qBAAqB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACvD,iBAAiB,EAAE,uBAAuB;IAC1C,oBAAoB,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC3D,SAAS,EAAE,oBAAoB;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,SAAS,EAAE,yBAAyB;IACpC,mBAAmB,EAAE,oBAAoB;IACzC,mBAAmB,EAAE,oBAAoB;IACzC,iBAAiB,EAAE,oBAAoB;IACvC,YAAY,EAAE,oBAAoB;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,kBAAkB;IAClB,gBAAgB;IAChB,oBAAoB;IACpB,aAAa;IACb,YAAY;IACZ,qBAAqB;IACrB,0BAA0B;IAC1B,wBAAwB;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO,EAAE,mCAAmC;IAC5C,EAAE,EAAE,oBAAoB;IACxB,SAAS,EAAE,uBAAuB;IAClC,SAAS,EAAE,6BAA6B;IACxC,MAAM,EAAE,6BAA6B;IACrC,SAAS,EAAE,oBAAoB;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,KAAK,EAAE,oBAAoB;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,oBAAoB;IACjC,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE,oBAAoB;IAC/B,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACvC,gBAAgB,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,MAAM,EAAE,YAAY;IACpB,QAAQ,EAAE,sBAAsB;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,uBAAuB,CACxE,+BAA+B,CAChC,CAAC"}

package/dist/network-runtime/runtime-bootstrap-contract.d.ts

@@ -0,0 +1,82 @@
+import { z } from "zod";
+export declare const RuntimeBootstrapRevisionSchema: z.ZodNumber;
+export type RuntimeBootstrapRevision = z.infer<typeof RuntimeBootstrapRevisionSchema>;
+export declare const RuntimeBootstrapPhaseSchema: z.ZodEnum<{
+    degraded: "degraded";
+    stopped: "stopped";
+    starting: "starting";
+    tls_bound: "tls_bound";
+    control_ready: "control_ready";
+    network_ready: "network_ready";
+    mesh_ready: "mesh_ready";
+}>;
+export type RuntimeBootstrapPhase = z.infer<typeof RuntimeBootstrapPhaseSchema>;
+export declare const RuntimeBootstrapControlEndpointSchema: z.ZodObject<{
+    host: z.ZodString;
+    port: z.ZodNumber;
+}, z.core.$strict>;
+export type RuntimeBootstrapControlEndpoint = z.infer<typeof RuntimeBootstrapControlEndpointSchema>;
+export declare const RuntimeBootstrapTlsSchema: z.ZodObject<{
+    caFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+    caCertPem: z.ZodString;
+    principalIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    loopbackIdentity: z.core.$ZodBranded<z.ZodString, "LoopbackTlsIdentity", "out">;
+}, z.core.$strict>;
+export type RuntimeBootstrapTls = z.infer<typeof RuntimeBootstrapTlsSchema>;
+export declare const RuntimeBootstrapIdentitySchema: z.ZodObject<{
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    transportEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strip>;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type RuntimeBootstrapIdentity = z.infer<typeof RuntimeBootstrapIdentitySchema>;
+export declare const RuntimeBootstrapRecordSchema: z.ZodObject<{
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    runtimeId: z.core.$ZodBranded<z.ZodString, "RuntimeId", "out">;
+    arionName: z.ZodOptional<z.ZodString>;
+    ownerGeneration: z.ZodNumber;
+    bootstrapRevision: z.ZodNumber;
+    phase: z.ZodEnum<{
+        degraded: "degraded";
+        stopped: "stopped";
+        starting: "starting";
+        tls_bound: "tls_bound";
+        control_ready: "control_ready";
+        network_ready: "network_ready";
+        mesh_ready: "mesh_ready";
+    }>;
+    protocolVersion: z.ZodLiteral<1>;
+    controlEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strict>;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    transportEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strip>;
+    tls: z.ZodObject<{
+        caFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        caCertPem: z.ZodString;
+        principalIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        loopbackIdentity: z.core.$ZodBranded<z.ZodString, "LoopbackTlsIdentity", "out">;
+    }, z.core.$strict>;
+    publishedAt: z.ZodString;
+    degradedReason: z.ZodOptional<z.ZodString>;
+    failedPhase: z.ZodOptional<z.ZodEnum<{
+        degraded: "degraded";
+        stopped: "stopped";
+        starting: "starting";
+        tls_bound: "tls_bound";
+        control_ready: "control_ready";
+        network_ready: "network_ready";
+        mesh_ready: "mesh_ready";
+    }>>;
+}, z.core.$strict>;
+export type RuntimeBootstrapRecord = z.infer<typeof RuntimeBootstrapRecordSchema>;
+//# sourceMappingURL=runtime-bootstrap-contract.d.ts.map

package/dist/network-runtime/runtime-bootstrap-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-bootstrap-contract.d.ts","sourceRoot":"","sources":["../../src/network-runtime/runtime-bootstrap-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,8BAA8B,aAAiC,CAAC;AAC7E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,2BAA2B;;;;;;;;EAQtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,qCAAqC;;;kBAKvC,CAAC;AACZ,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,eAAO,MAAM,yBAAyB;;;;;kBAO3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,8BAA8B;;;;;;;;kBAOhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmB9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}