@aria-cli/tools 1.0.10 → 1.0.12

package/dist-cjs/network-runtime/node-store-contract.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RuntimeEventSchema = exports.RuntimeEventKindSchema = exports.RuntimeOwnerRecordSchema = void 0;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+const NonEmptyStringSchema = zod_1.z.string().trim().min(1);
+const RecordSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());
+var address_types_js_2 = require("./address-types.js");
+Object.defineProperty(exports, "RuntimeOwnerRecordSchema", { enumerable: true, get: function () { return address_types_js_2.RuntimeOwnerRecordSchema; } });
+exports.RuntimeEventKindSchema = zod_1.z.enum([
+    "client_attached",
+    "client_detached",
+    "runtime_started",
+    "runtime_stopped",
+    "runtime_stale",
+    "runtime_restarted",
+    "pair_proposed",
+    "proof_committed",
+    "continuity_bound",
+    "revocation_committed",
+    "ingress_accepted",
+    "ingress_rejected",
+    "durable_send_queued",
+    "durable_send_dispatching",
+    "durable_send_acked",
+    "durable_send_expired",
+]);
+exports.RuntimeEventSchema = zod_1.z
+    .object({
+    eventId: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    runtimeId: address_types_js_1.RuntimeIdSchema,
+    kind: exports.RuntimeEventKindSchema,
+    revision: zod_1.z.number().int().nonnegative().optional(),
+    recordedAt: NonEmptyStringSchema,
+    payload: RecordSchema,
+})
+    .strict();

package/dist-cjs/network-runtime/pair-route-contract.d.ts

@@ -0,0 +1,100 @@
+import { z } from "zod";
+export declare const PairRequestRouteBodySchema: z.ZodObject<{
+    displayNameSnapshot: z.ZodString;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    port: z.ZodNumber;
+    ephemeralPublicKey: z.ZodString;
+    ephemeralKeySignature: z.ZodString;
+    caCert: z.ZodOptional<z.ZodString>;
+    protocolVersion: z.ZodOptional<z.ZodNumber>;
+    wait: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type PairRequestRouteBody = z.infer<typeof PairRequestRouteBodySchema>;
+export declare const PairRequestRouteBodyJsonSchema: Record<string, unknown>;
+export declare const AcceptInviteRequestSchema: z.ZodObject<{
+    inviteToken: z.ZodString;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    transportEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strip>;
+    controlEndpoint: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        tlsCaFingerprint: z.core.$ZodBranded<z.ZodString, "TlsCaFingerprint", "out">;
+        tlsServerIdentity: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        protocolVersion: z.ZodNumber;
+        endpointRevision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    continuity: z.ZodOptional<z.ZodObject<{
+        statement: z.ZodObject<{
+            nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+            previousPrincipalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+            newPrincipalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+            newTransportPublicKey: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">>;
+            bindingGeneration: z.ZodNumber;
+            revocationGeneration: z.ZodOptional<z.ZodNumber>;
+            createdAt: z.ZodString;
+        }, z.core.$strict>;
+        delegationSignature: z.ZodString;
+        acceptanceSignature: z.ZodString;
+        previousPublicKey: z.ZodString;
+        newPublicKey: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type AcceptInviteRequest = z.infer<typeof AcceptInviteRequestSchema>;
+export declare const AcceptInviteRequestBodyJsonSchema: Record<string, unknown>;
+export declare const PairRelayRouteBodySchema: z.ZodObject<{
+    targetNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    displayNameSnapshot: z.ZodString;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    port: z.ZodNumber;
+    ephemeralPublicKey: z.ZodString;
+    ephemeralKeySignature: z.ZodString;
+    caCert: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type PairRelayRouteBody = z.infer<typeof PairRelayRouteBodySchema>;
+export declare const PairRelayRouteBodyJsonSchema: Record<string, unknown>;
+export declare const RelayPendingQuerySchema: z.ZodObject<{
+    targetNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    signature: z.ZodString;
+    timestamp: z.ZodString;
+}, z.core.$strict>;
+export type RelayPendingQuery = z.infer<typeof RelayPendingQuerySchema>;
+export declare const RelayPendingQueryJsonSchema: Record<string, unknown>;
+export declare const RelayPendingRequestSchema: z.ZodObject<{
+    id: z.ZodString;
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+    port: z.ZodNumber;
+    ingressHost: z.ZodString;
+    responderControlHostHint: z.ZodOptional<z.ZodString>;
+    ephemeralPublicKey: z.ZodOptional<z.ZodString>;
+    ephemeralKeySignature: z.ZodOptional<z.ZodString>;
+    caCert: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodNumber;
+}, z.core.$strict>;
+export type RelayPendingRequest = z.infer<typeof RelayPendingRequestSchema>;
+export declare const RelayPendingResponseSchema: z.ZodObject<{
+    requests: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        displayNameSnapshot: z.ZodOptional<z.ZodString>;
+        principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+        signingPublicKey: z.core.$ZodBranded<z.ZodString, "SigningPublicKey", "out">;
+        port: z.ZodNumber;
+        ingressHost: z.ZodString;
+        responderControlHostHint: z.ZodOptional<z.ZodString>;
+        ephemeralPublicKey: z.ZodOptional<z.ZodString>;
+        ephemeralKeySignature: z.ZodOptional<z.ZodString>;
+        caCert: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RelayPendingResponse = z.infer<typeof RelayPendingResponseSchema>;

package/dist-cjs/network-runtime/pair-route-contract.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RelayPendingResponseSchema = exports.RelayPendingRequestSchema = exports.RelayPendingQueryJsonSchema = exports.RelayPendingQuerySchema = exports.PairRelayRouteBodyJsonSchema = exports.PairRelayRouteBodySchema = exports.AcceptInviteRequestBodyJsonSchema = exports.AcceptInviteRequestSchema = exports.PairRequestRouteBodyJsonSchema = exports.PairRequestRouteBodySchema = void 0;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+const protocol_schemas_js_1 = require("./protocol-schemas.js");
+const NonEmptyStringSchema = zod_1.z.string().trim().min(1);
+function toFastifyBodyJsonSchema(schema) {
+    const jsonSchema = zod_1.z.toJSONSchema(schema);
+    delete jsonSchema.$schema;
+    return jsonSchema;
+}
+exports.PairRequestRouteBodySchema = zod_1.z
+    .object({
+    displayNameSnapshot: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+    ephemeralPublicKey: zod_1.z.string().max(512),
+    ephemeralKeySignature: zod_1.z.string().max(512),
+    caCert: zod_1.z.string().max(4096).optional(),
+    protocolVersion: zod_1.z.number().min(1).max(100).optional(),
+    wait: zod_1.z.boolean().optional(),
+})
+    .strict();
+exports.PairRequestRouteBodyJsonSchema = toFastifyBodyJsonSchema(exports.PairRequestRouteBodySchema);
+exports.AcceptInviteRequestSchema = zod_1.z
+    .object({
+    inviteToken: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    controlEndpoint: address_types_js_1.ControlEndpointAdvertisementSchema,
+    continuity: protocol_schemas_js_1.SignedContinuityBindSchema.optional(),
+})
+    .strict();
+exports.AcceptInviteRequestBodyJsonSchema = toFastifyBodyJsonSchema(exports.AcceptInviteRequestSchema);
+exports.PairRelayRouteBodySchema = zod_1.z
+    .object({
+    targetNodeId: address_types_js_1.NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+    ephemeralPublicKey: zod_1.z.string().max(512),
+    ephemeralKeySignature: zod_1.z.string().max(512),
+    caCert: zod_1.z.string().max(4096).optional(),
+})
+    .strict();
+exports.PairRelayRouteBodyJsonSchema = toFastifyBodyJsonSchema(exports.PairRelayRouteBodySchema);
+exports.RelayPendingQuerySchema = zod_1.z
+    .object({
+    targetNodeId: address_types_js_1.NodeIdSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    signature: NonEmptyStringSchema.max(512),
+    timestamp: NonEmptyStringSchema.max(20),
+})
+    .strict();
+exports.RelayPendingQueryJsonSchema = toFastifyBodyJsonSchema(exports.RelayPendingQuerySchema);
+exports.RelayPendingRequestSchema = zod_1.z
+    .object({
+    id: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+    ingressHost: NonEmptyStringSchema,
+    responderControlHostHint: NonEmptyStringSchema.optional(),
+    ephemeralPublicKey: zod_1.z.string().max(512).optional(),
+    ephemeralKeySignature: zod_1.z.string().max(512).optional(),
+    caCert: zod_1.z.string().max(4096).optional(),
+    expiresAt: zod_1.z.number().int().nonnegative(),
+})
+    .strict();
+exports.RelayPendingResponseSchema = zod_1.z
+    .object({
+    requests: exports.RelayPendingRequestSchema.array(),
+})
+    .strict();

package/dist-cjs/network-runtime/peer-capabilities.d.ts

@@ -0,0 +1,10 @@
+import type { PeerIdentityState, PeerTransportState } from "./peer-state-machine.js";
+export declare function canRecordPendingPair(identityState: PeerIdentityState): boolean;
+export declare function canCommitVerifiedPair(identityState: PeerIdentityState, proof: {
+    proofValid: boolean;
+}): boolean;
+export declare function canRefreshEndpoint(identityState: PeerIdentityState): boolean;
+export declare function canHeartbeat(identityState: PeerIdentityState): boolean;
+export declare function canAttemptBestEffortTransport(identityState: PeerIdentityState, transportState: PeerTransportState): boolean;
+export declare function canAttemptDurableDelivery(identityState: PeerIdentityState, transportState: PeerTransportState): boolean;
+export declare function canMutateTrustedState(identityState: PeerIdentityState): boolean;

package/dist-cjs/network-runtime/peer-capabilities.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canRecordPendingPair = canRecordPendingPair;
+exports.canCommitVerifiedPair = canCommitVerifiedPair;
+exports.canRefreshEndpoint = canRefreshEndpoint;
+exports.canHeartbeat = canHeartbeat;
+exports.canAttemptBestEffortTransport = canAttemptBestEffortTransport;
+exports.canAttemptDurableDelivery = canAttemptDurableDelivery;
+exports.canMutateTrustedState = canMutateTrustedState;
+function canRecordPendingPair(identityState) {
+    return identityState === "invited" || identityState === "joining";
+}
+function canCommitVerifiedPair(identityState, proof) {
+    return identityState === "paired_unverified" && proof.proofValid;
+}
+function canRefreshEndpoint(identityState) {
+    return (identityState === "joining" ||
+        identityState === "paired_unverified" ||
+        identityState === "verified");
+}
+function canHeartbeat(identityState) {
+    return identityState === "paired_unverified" || identityState === "verified";
+}
+function canAttemptBestEffortTransport(identityState, transportState) {
+    if (identityState === "revoked")
+        return false;
+    return (transportState === "endpoint_known" ||
+        transportState === "connecting" ||
+        transportState === "connected" ||
+        transportState === "degraded");
+}
+function canAttemptDurableDelivery(identityState, transportState) {
+    return identityState === "verified" && transportState === "connected";
+}
+function canMutateTrustedState(identityState) {
+    return identityState === "verified";
+}

package/dist-cjs/network-runtime/peer-principal-ref.d.ts

@@ -0,0 +1,9 @@
+import { z } from "zod";
+export declare const NodePrincipalBindingRefSchema: z.ZodObject<{
+    nodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+    principalFingerprint: z.core.$ZodBranded<z.ZodString, "PrincipalFingerprint", "out">;
+    transportPublicKey: z.core.$ZodBranded<z.ZodString, "PeerTransportId", "out">;
+    bindingGeneration: z.ZodNumber;
+    displayNameSnapshot: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type NodePrincipalBindingRef = z.infer<typeof NodePrincipalBindingRefSchema>;

package/dist-cjs/network-runtime/peer-principal-ref.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodePrincipalBindingRefSchema = void 0;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+const NonEmptyStringSchema = zod_1.z.string().trim().min(1);
+exports.NodePrincipalBindingRefSchema = zod_1.z
+    .object({
+    nodeId: address_types_js_1.NodeIdSchema,
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    bindingGeneration: address_types_js_1.BindingGenerationSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+})
+    .strict();

package/dist-cjs/network-runtime/peer-state-machine.d.ts

@@ -0,0 +1,70 @@
+import { z } from "zod";
+export declare const LegacyPeerRegistryStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    active: "active";
+    pending_tunnel: "pending_tunnel";
+    pending_verification: "pending_verification";
+    revoked: "revoked";
+}>;
+export type LegacyPeerRegistryStatus = z.infer<typeof LegacyPeerRegistryStatusSchema>;
+export declare const PeerIdentityStateSchema: z.ZodEnum<{
+    revoked: "revoked";
+    invited: "invited";
+    joining: "joining";
+    paired_unverified: "paired_unverified";
+    verified: "verified";
+}>;
+export type PeerIdentityState = z.infer<typeof PeerIdentityStateSchema>;
+export declare const PeerTransportStateSchema: z.ZodEnum<{
+    unknown: "unknown";
+    connected: "connected";
+    endpoint_known: "endpoint_known";
+    connecting: "connecting";
+    degraded: "degraded";
+    disconnected: "disconnected";
+}>;
+export type PeerTransportState = z.infer<typeof PeerTransportStateSchema>;
+export declare const PeerMutationKindSchema: z.ZodEnum<{
+    continuity: "continuity";
+    repair: "repair";
+    revocation: "revocation";
+}>;
+export type PeerMutationKind = z.infer<typeof PeerMutationKindSchema>;
+export declare const LegacyPeerRuntimeShapeSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        pending: "pending";
+        active: "active";
+        pending_tunnel: "pending_tunnel";
+        pending_verification: "pending_verification";
+        revoked: "revoked";
+    }>;
+    endpointHost: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    endpointPort: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    lastHandshake: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strip>;
+export type LegacyPeerRuntimeShape = z.infer<typeof LegacyPeerRuntimeShapeSchema>;
+export declare function isValidPeerStateCombination(identityState: PeerIdentityState, transportState: PeerTransportState): boolean;
+export declare const PeerStateSnapshotSchema: z.ZodObject<{
+    identityState: z.ZodEnum<{
+        revoked: "revoked";
+        invited: "invited";
+        joining: "joining";
+        paired_unverified: "paired_unverified";
+        verified: "verified";
+    }>;
+    transportState: z.ZodEnum<{
+        unknown: "unknown";
+        connected: "connected";
+        endpoint_known: "endpoint_known";
+        connecting: "connecting";
+        degraded: "degraded";
+        disconnected: "disconnected";
+    }>;
+}, z.core.$strip>;
+export type PeerStateSnapshot = z.infer<typeof PeerStateSnapshotSchema>;
+export declare function derivePeerStateFromLegacyStatus(input: LegacyPeerRuntimeShape): PeerStateSnapshot;
+export declare function isValidPeerIdentityTransition(from: PeerIdentityState, to: PeerIdentityState, options?: {
+    viaContinuity?: boolean;
+}): boolean;
+export declare function isValidPeerTransportTransition(from: PeerTransportState, to: PeerTransportState): boolean;
+export declare function comparePeerMutationPrecedence(left: PeerMutationKind, right: PeerMutationKind): number;

package/dist-cjs/network-runtime/peer-state-machine.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PeerStateSnapshotSchema = exports.LegacyPeerRuntimeShapeSchema = exports.PeerMutationKindSchema = exports.PeerTransportStateSchema = exports.PeerIdentityStateSchema = exports.LegacyPeerRegistryStatusSchema = void 0;
+exports.isValidPeerStateCombination = isValidPeerStateCombination;
+exports.derivePeerStateFromLegacyStatus = derivePeerStateFromLegacyStatus;
+exports.isValidPeerIdentityTransition = isValidPeerIdentityTransition;
+exports.isValidPeerTransportTransition = isValidPeerTransportTransition;
+exports.comparePeerMutationPrecedence = comparePeerMutationPrecedence;
+const zod_1 = require("zod");
+exports.LegacyPeerRegistryStatusSchema = zod_1.z.enum([
+    "active",
+    "pending",
+    "pending_tunnel",
+    "pending_verification",
+    "revoked",
+]);
+exports.PeerIdentityStateSchema = zod_1.z.enum([
+    "invited",
+    "joining",
+    "paired_unverified",
+    "verified",
+    "revoked",
+]);
+exports.PeerTransportStateSchema = zod_1.z.enum([
+    "unknown",
+    "endpoint_known",
+    "connecting",
+    "connected",
+    "degraded",
+    "disconnected",
+]);
+exports.PeerMutationKindSchema = zod_1.z.enum(["repair", "continuity", "revocation"]);
+exports.LegacyPeerRuntimeShapeSchema = zod_1.z.object({
+    status: exports.LegacyPeerRegistryStatusSchema,
+    endpointHost: zod_1.z.string().nullable().optional(),
+    endpointPort: zod_1.z.number().int().nullable().optional(),
+    lastHandshake: zod_1.z.number().int().nullable().optional(),
+});
+const VALID_TRANSPORT_BY_IDENTITY = {
+    invited: ["unknown", "endpoint_known"],
+    joining: ["unknown", "endpoint_known", "connecting"],
+    paired_unverified: [
+        "unknown",
+        "endpoint_known",
+        "connecting",
+        "connected",
+        "degraded",
+        "disconnected",
+    ],
+    verified: ["unknown", "endpoint_known", "connecting", "connected", "degraded", "disconnected"],
+    revoked: ["unknown", "disconnected"],
+};
+function isValidPeerStateCombination(identityState, transportState) {
+    return VALID_TRANSPORT_BY_IDENTITY[identityState].includes(transportState);
+}
+exports.PeerStateSnapshotSchema = zod_1.z
+    .object({
+    identityState: exports.PeerIdentityStateSchema,
+    transportState: exports.PeerTransportStateSchema,
+})
+    .superRefine((value, ctx) => {
+    if (!isValidPeerStateCombination(value.identityState, value.transportState)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: `invalid peer state combination: ${value.identityState}/${value.transportState}`,
+        });
+    }
+});
+function derivePeerStateFromLegacyStatus(input) {
+    const legacy = exports.LegacyPeerRuntimeShapeSchema.parse(input);
+    const hasEndpoint = Boolean(legacy.endpointHost && legacy.endpointPort);
+    const hasHandshake = typeof legacy.lastHandshake === "number" &&
+        Number.isFinite(legacy.lastHandshake) &&
+        legacy.lastHandshake > 0;
+    const identityState = legacy.status === "pending"
+        ? "invited"
+        : legacy.status === "revoked"
+            ? "revoked"
+            : legacy.status === "active"
+                ? "verified"
+                : "paired_unverified";
+    const transportState = (() => {
+        switch (legacy.status) {
+            case "active":
+                return hasHandshake ? "connected" : hasEndpoint ? "endpoint_known" : "disconnected";
+            case "pending_tunnel":
+                return hasHandshake ? "connected" : hasEndpoint ? "connecting" : "unknown";
+            case "pending_verification":
+                return hasHandshake ? "connected" : hasEndpoint ? "endpoint_known" : "unknown";
+            case "pending":
+                return hasEndpoint ? "endpoint_known" : "unknown";
+            case "revoked":
+                return hasEndpoint ? "disconnected" : "unknown";
+        }
+    })();
+    return exports.PeerStateSnapshotSchema.parse({ identityState, transportState });
+}
+const IDENTITY_TRANSITIONS = {
+    invited: ["invited", "joining", "revoked"],
+    joining: ["joining", "paired_unverified", "revoked"],
+    paired_unverified: ["paired_unverified", "verified", "revoked"],
+    verified: ["verified", "revoked"],
+    revoked: ["revoked"],
+};
+function isValidPeerIdentityTransition(from, to, options = {}) {
+    if (from === "verified" && to === "paired_unverified") {
+        return options.viaContinuity === true;
+    }
+    return IDENTITY_TRANSITIONS[from].includes(to);
+}
+const TRANSPORT_TRANSITIONS = {
+    unknown: ["unknown", "endpoint_known"],
+    endpoint_known: ["endpoint_known", "connecting", "disconnected"],
+    connecting: ["connecting", "connected", "endpoint_known", "disconnected"],
+    connected: ["connected", "degraded", "disconnected"],
+    degraded: ["degraded", "connected", "disconnected"],
+    disconnected: ["disconnected", "endpoint_known"],
+};
+function isValidPeerTransportTransition(from, to) {
+    return TRANSPORT_TRANSITIONS[from].includes(to);
+}
+const MUTATION_PRECEDENCE = {
+    repair: 0,
+    continuity: 1,
+    revocation: 2,
+};
+function comparePeerMutationPrecedence(left, right) {
+    return MUTATION_PRECEDENCE[left] - MUTATION_PRECEDENCE[right];
+}