@aria-cli/tools 1.0.19 → 1.0.31

package/dist-cjs/network-runtime/pair-route-contract.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RelayPendingResponseSchema = exports.RelayPendingRequestSchema = exports.RelayPendingQueryJsonSchema = exports.RelayPendingQuerySchema = exports.PairRelayRouteBodyJsonSchema = exports.PairRelayRouteBodySchema = exports.AcceptInviteRequestBodyJsonSchema = exports.AcceptInviteRequestSchema = exports.PairRequestRouteBodyJsonSchema = exports.PairRequestRouteBodySchema = void 0;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+const protocol_schemas_js_1 = require("./protocol-schemas.js");
+const NonEmptyStringSchema = zod_1.z.string().trim().min(1);
+function toFastifyBodyJsonSchema(schema) {
+    const jsonSchema = zod_1.z.toJSONSchema(schema);
+    delete jsonSchema.$schema;
+    return jsonSchema;
+}
+exports.PairRequestRouteBodySchema = zod_1.z
+    .object({
+    displayNameSnapshot: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+    ephemeralPublicKey: zod_1.z.string().max(512),
+    ephemeralKeySignature: zod_1.z.string().max(512),
+    caCert: zod_1.z.string().max(4096).optional(),
+    protocolVersion: zod_1.z.number().min(1).max(100).optional(),
+    wait: zod_1.z.boolean().optional(),
+})
+    .strict();
+exports.PairRequestRouteBodyJsonSchema = toFastifyBodyJsonSchema(exports.PairRequestRouteBodySchema);
+exports.AcceptInviteRequestSchema = zod_1.z
+    .object({
+    inviteToken: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    controlEndpoint: address_types_js_1.ControlEndpointAdvertisementSchema,
+    continuity: protocol_schemas_js_1.SignedContinuityBindSchema.optional(),
+})
+    .strict();
+exports.AcceptInviteRequestBodyJsonSchema = toFastifyBodyJsonSchema(exports.AcceptInviteRequestSchema);
+exports.PairRelayRouteBodySchema = zod_1.z
+    .object({
+    targetNodeId: address_types_js_1.NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+    ephemeralPublicKey: zod_1.z.string().max(512),
+    ephemeralKeySignature: zod_1.z.string().max(512),
+    caCert: zod_1.z.string().max(4096).optional(),
+})
+    .strict();
+exports.PairRelayRouteBodyJsonSchema = toFastifyBodyJsonSchema(exports.PairRelayRouteBodySchema);
+exports.RelayPendingQuerySchema = zod_1.z
+    .object({
+    targetNodeId: address_types_js_1.NodeIdSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    signature: NonEmptyStringSchema.max(512),
+    timestamp: NonEmptyStringSchema.max(20),
+})
+    .strict();
+exports.RelayPendingQueryJsonSchema = toFastifyBodyJsonSchema(exports.RelayPendingQuerySchema);
+exports.RelayPendingRequestSchema = zod_1.z
+    .object({
+    id: NonEmptyStringSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+    ingressHost: NonEmptyStringSchema,
+    responderControlHostHint: NonEmptyStringSchema.optional(),
+    ephemeralPublicKey: zod_1.z.string().max(512).optional(),
+    ephemeralKeySignature: zod_1.z.string().max(512).optional(),
+    caCert: zod_1.z.string().max(4096).optional(),
+    expiresAt: zod_1.z.number().int().nonnegative(),
+})
+    .strict();
+exports.RelayPendingResponseSchema = zod_1.z
+    .object({
+    requests: exports.RelayPendingRequestSchema.array(),
+})
+    .strict();
+//# sourceMappingURL=pair-route-contract.js.map

package/dist-cjs/network-runtime/peer-capabilities.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canRecordPendingPair = canRecordPendingPair;
+exports.canCommitVerifiedPair = canCommitVerifiedPair;
+exports.canRefreshEndpoint = canRefreshEndpoint;
+exports.canHeartbeat = canHeartbeat;
+exports.canAttemptBestEffortTransport = canAttemptBestEffortTransport;
+exports.canAttemptDurableDelivery = canAttemptDurableDelivery;
+exports.canMutateTrustedState = canMutateTrustedState;
+function canRecordPendingPair(identityState) {
+    return identityState === "invited" || identityState === "joining";
+}
+function canCommitVerifiedPair(identityState, proof) {
+    return identityState === "paired_unverified" && proof.proofValid;
+}
+function canRefreshEndpoint(identityState) {
+    return (identityState === "joining" ||
+        identityState === "paired_unverified" ||
+        identityState === "verified");
+}
+function canHeartbeat(identityState) {
+    return identityState === "paired_unverified" || identityState === "verified";
+}
+function canAttemptBestEffortTransport(identityState, transportState) {
+    if (identityState === "revoked")
+        return false;
+    return (transportState === "endpoint_known" ||
+        transportState === "connecting" ||
+        transportState === "connected" ||
+        transportState === "degraded");
+}
+function canAttemptDurableDelivery(identityState, transportState) {
+    return identityState === "verified" && transportState === "connected";
+}
+function canMutateTrustedState(identityState) {
+    return identityState === "verified";
+}
+//# sourceMappingURL=peer-capabilities.js.map

package/dist-cjs/network-runtime/peer-principal-ref.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodePrincipalBindingRefSchema = void 0;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+const NonEmptyStringSchema = zod_1.z.string().trim().min(1);
+exports.NodePrincipalBindingRefSchema = zod_1.z
+    .object({
+    nodeId: address_types_js_1.NodeIdSchema,
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    bindingGeneration: address_types_js_1.BindingGenerationSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=peer-principal-ref.js.map

package/dist-cjs/network-runtime/peer-state-machine.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PeerStateSnapshotSchema = exports.LegacyPeerRuntimeShapeSchema = exports.PeerMutationKindSchema = exports.PeerTransportStateSchema = exports.PeerIdentityStateSchema = exports.LegacyPeerRegistryStatusSchema = void 0;
+exports.isValidPeerStateCombination = isValidPeerStateCombination;
+exports.derivePeerStateFromLegacyStatus = derivePeerStateFromLegacyStatus;
+exports.isValidPeerIdentityTransition = isValidPeerIdentityTransition;
+exports.isValidPeerTransportTransition = isValidPeerTransportTransition;
+exports.comparePeerMutationPrecedence = comparePeerMutationPrecedence;
+const zod_1 = require("zod");
+exports.LegacyPeerRegistryStatusSchema = zod_1.z.enum([
+    "active",
+    "pending",
+    "pending_tunnel",
+    "pending_verification",
+    "revoked",
+]);
+exports.PeerIdentityStateSchema = zod_1.z.enum([
+    "invited",
+    "joining",
+    "paired_unverified",
+    "verified",
+    "revoked",
+]);
+exports.PeerTransportStateSchema = zod_1.z.enum([
+    "unknown",
+    "endpoint_known",
+    "connecting",
+    "connected",
+    "degraded",
+    "disconnected",
+]);
+exports.PeerMutationKindSchema = zod_1.z.enum(["repair", "continuity", "revocation"]);
+exports.LegacyPeerRuntimeShapeSchema = zod_1.z.object({
+    status: exports.LegacyPeerRegistryStatusSchema,
+    endpointHost: zod_1.z.string().nullable().optional(),
+    endpointPort: zod_1.z.number().int().nullable().optional(),
+    lastHandshake: zod_1.z.number().int().nullable().optional(),
+});
+const VALID_TRANSPORT_BY_IDENTITY = {
+    invited: ["unknown", "endpoint_known"],
+    joining: ["unknown", "endpoint_known", "connecting"],
+    paired_unverified: [
+        "unknown",
+        "endpoint_known",
+        "connecting",
+        "connected",
+        "degraded",
+        "disconnected",
+    ],
+    verified: ["unknown", "endpoint_known", "connecting", "connected", "degraded", "disconnected"],
+    revoked: ["unknown", "disconnected"],
+};
+function isValidPeerStateCombination(identityState, transportState) {
+    return VALID_TRANSPORT_BY_IDENTITY[identityState].includes(transportState);
+}
+exports.PeerStateSnapshotSchema = zod_1.z
+    .object({
+    identityState: exports.PeerIdentityStateSchema,
+    transportState: exports.PeerTransportStateSchema,
+})
+    .superRefine((value, ctx) => {
+    if (!isValidPeerStateCombination(value.identityState, value.transportState)) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: `invalid peer state combination: ${value.identityState}/${value.transportState}`,
+        });
+    }
+});
+function derivePeerStateFromLegacyStatus(input) {
+    const legacy = exports.LegacyPeerRuntimeShapeSchema.parse(input);
+    const hasEndpoint = Boolean(legacy.endpointHost && legacy.endpointPort);
+    const hasHandshake = typeof legacy.lastHandshake === "number" &&
+        Number.isFinite(legacy.lastHandshake) &&
+        legacy.lastHandshake > 0;
+    const identityState = legacy.status === "pending"
+        ? "invited"
+        : legacy.status === "revoked"
+            ? "revoked"
+            : legacy.status === "active"
+                ? "verified"
+                : "paired_unverified";
+    const transportState = (() => {
+        switch (legacy.status) {
+            case "active":
+                return hasHandshake ? "connected" : hasEndpoint ? "endpoint_known" : "disconnected";
+            case "pending_tunnel":
+                return hasHandshake ? "connected" : hasEndpoint ? "connecting" : "unknown";
+            case "pending_verification":
+                return hasHandshake ? "connected" : hasEndpoint ? "endpoint_known" : "unknown";
+            case "pending":
+                return hasEndpoint ? "endpoint_known" : "unknown";
+            case "revoked":
+                return hasEndpoint ? "disconnected" : "unknown";
+        }
+    })();
+    return exports.PeerStateSnapshotSchema.parse({ identityState, transportState });
+}
+const IDENTITY_TRANSITIONS = {
+    invited: ["invited", "joining", "revoked"],
+    joining: ["joining", "paired_unverified", "revoked"],
+    paired_unverified: ["paired_unverified", "verified", "revoked"],
+    verified: ["verified", "revoked"],
+    revoked: ["revoked"],
+};
+function isValidPeerIdentityTransition(from, to, options = {}) {
+    if (from === "verified" && to === "paired_unverified") {
+        return options.viaContinuity === true;
+    }
+    return IDENTITY_TRANSITIONS[from].includes(to);
+}
+const TRANSPORT_TRANSITIONS = {
+    unknown: ["unknown", "endpoint_known"],
+    endpoint_known: ["endpoint_known", "connecting", "disconnected"],
+    connecting: ["connecting", "connected", "endpoint_known", "disconnected"],
+    connected: ["connected", "degraded", "disconnected"],
+    degraded: ["degraded", "connected", "disconnected"],
+    disconnected: ["disconnected", "endpoint_known"],
+};
+function isValidPeerTransportTransition(from, to) {
+    return TRANSPORT_TRANSITIONS[from].includes(to);
+}
+const MUTATION_PRECEDENCE = {
+    repair: 0,
+    continuity: 1,
+    revocation: 2,
+};
+function comparePeerMutationPrecedence(left, right) {
+    return MUTATION_PRECEDENCE[left] - MUTATION_PRECEDENCE[right];
+}
+//# sourceMappingURL=peer-state-machine.js.map

package/dist-cjs/network-runtime/protocol-schemas.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NetworkRouteRevokeRequestJsonSchema = exports.NetworkRouteRevokeRequestSchema = exports.MutationEnvelopeSchema = exports.MutationOperationSchema = exports.SignedContinuityBindSchema = exports.ContinuityStatementSchema = exports.PairProposalSchema = exports.RuntimeRegisterRequestSchema = exports.RuntimeDiscoveryAdvertisementSchema = exports.RuntimeNodeAdvertisementSchema = exports.RuntimeIngressEnvelopeSchema = exports.JoinRouteBodyJsonSchema = exports.JoinRouteBodySchema = exports.JoinRequestSchema = exports.TransportInviteTokenSchema = exports.DeliveryAckSchema = exports.NetworkRuntimeProtocolVersionSchema = exports.NETWORK_RUNTIME_PROTOCOL_VERSION = exports.RuntimeEventSchema = exports.RuntimeEventKindSchema = void 0;
+exports.isSupportedNetworkRuntimeProtocolVersion = isSupportedNetworkRuntimeProtocolVersion;
+exports.assertSupportedNetworkRuntimeProtocolVersion = assertSupportedNetworkRuntimeProtocolVersion;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+var node_store_contract_js_1 = require("./node-store-contract.js");
+Object.defineProperty(exports, "RuntimeEventKindSchema", { enumerable: true, get: function () { return node_store_contract_js_1.RuntimeEventKindSchema; } });
+Object.defineProperty(exports, "RuntimeEventSchema", { enumerable: true, get: function () { return node_store_contract_js_1.RuntimeEventSchema; } });
+const peer_principal_ref_js_1 = require("./peer-principal-ref.js");
+const NonEmptyStringSchema = zod_1.z.string().trim().min(1);
+// Signed transport invite tokens must preserve PEM bytes verbatim; trimming
+// a trailing newline changes the signed payload and breaks verification.
+const NonBlankVerbatimStringSchema = zod_1.z
+    .string()
+    .min(1)
+    .refine((value) => value.trim().length > 0);
+const RecordSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());
+function toFastifyBodyJsonSchema(schema) {
+    const jsonSchema = zod_1.z.toJSONSchema(schema);
+    delete jsonSchema.$schema;
+    return jsonSchema;
+}
+exports.NETWORK_RUNTIME_PROTOCOL_VERSION = 1;
+exports.NetworkRuntimeProtocolVersionSchema = zod_1.z.literal(exports.NETWORK_RUNTIME_PROTOCOL_VERSION);
+function isSupportedNetworkRuntimeProtocolVersion(version) {
+    return version === exports.NETWORK_RUNTIME_PROTOCOL_VERSION;
+}
+function assertSupportedNetworkRuntimeProtocolVersion(version, context = "network runtime") {
+    if (!isSupportedNetworkRuntimeProtocolVersion(version)) {
+        throw new Error(`Unsupported ${context} protocol version ${String(version)}. Supported: ${exports.NETWORK_RUNTIME_PROTOCOL_VERSION}`);
+    }
+    return version;
+}
+/**
+ * Shared delivery-ack wire contract.
+ * Durable settlement is keyed by stable peer identity, not display-name strings.
+ */
+exports.DeliveryAckSchema = zod_1.z
+    .object({
+    protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+    messageId: NonEmptyStringSchema,
+    senderNodeId: address_types_js_1.NodeIdSchema,
+    recipientNodeId: address_types_js_1.NodeIdSchema,
+    storedAt: zod_1.z.number().int().nonnegative(),
+})
+    .strict();
+exports.TransportInviteTokenSchema = zod_1.z
+    .object({
+    nodeId: address_types_js_1.NodeIdSchema,
+    audienceNodeId: address_types_js_1.NodeIdSchema.optional(),
+    publicKey: address_types_js_1.PeerTransportIdSchema,
+    leaderDisplayNameSnapshot: NonEmptyStringSchema.optional(),
+    host: NonEmptyStringSchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+    controlEndpoint: address_types_js_1.ControlEndpointAdvertisementSchema.optional(),
+    psk: NonEmptyStringSchema,
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema.optional(),
+    caCert: NonBlankVerbatimStringSchema.optional(),
+    createdAt: zod_1.z.number().int().nonnegative(),
+    expiresAt: zod_1.z.number().int().nonnegative(),
+    tokenNonce: NonEmptyStringSchema,
+    coordinationUrl: NonEmptyStringSchema.optional(),
+    networkId: NonEmptyStringSchema.optional(),
+})
+    .strict();
+exports.JoinRequestSchema = zod_1.z
+    .object({
+    protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    peerPublicKey: address_types_js_1.PeerTransportIdSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    controlEndpoint: address_types_js_1.ControlEndpointAdvertisementSchema.optional(),
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    inviteTokenNonce: NonEmptyStringSchema,
+})
+    .strict();
+exports.JoinRouteBodySchema = exports.JoinRequestSchema.extend({
+    proofOfWork: NonEmptyStringSchema,
+}).strict();
+exports.JoinRouteBodyJsonSchema = toFastifyBodyJsonSchema(exports.JoinRouteBodySchema);
+exports.RuntimeIngressEnvelopeSchema = zod_1.z.union([
+    zod_1.z
+        .object({
+        protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+        deliveryAck: exports.DeliveryAckSchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+        ariaMessage: zod_1.z.unknown(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+        joinRequest: exports.JoinRequestSchema,
+    })
+        .strict(),
+]);
+exports.RuntimeNodeAdvertisementSchema = address_types_js_1.NodeAdvertisementSchema.extend({
+    protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+    publicationRevision: address_types_js_1.PublicationRevisionSchema,
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    advertisedHosts: zod_1.z.array(NonEmptyStringSchema).min(1).optional(),
+}).strict();
+exports.RuntimeDiscoveryAdvertisementSchema = zod_1.z
+    .object({
+    protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    displayNameSnapshot: NonEmptyStringSchema,
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    controlPort: zod_1.z.number().int().min(1).max(65535),
+    advertisedHosts: zod_1.z.array(NonEmptyStringSchema).min(1),
+    tlsCaFingerprint: zod_1.z.string().trim().min(1).optional(),
+})
+    .strict();
+exports.RuntimeRegisterRequestSchema = zod_1.z
+    .object({
+    protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    endpointRevision: address_types_js_1.EndpointRevisionSchema,
+    controlEndpoint: address_types_js_1.ControlEndpointAdvertisementSchema.optional(),
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+})
+    .strict();
+exports.PairProposalSchema = zod_1.z
+    .object({
+    protocolVersion: exports.NetworkRuntimeProtocolVersionSchema,
+    nodeId: address_types_js_1.NodeIdSchema,
+    principalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    controlEndpoint: address_types_js_1.ControlEndpointAdvertisementSchema.optional(),
+    displayNameSnapshot: NonEmptyStringSchema.optional(),
+    presharedKey: NonEmptyStringSchema,
+})
+    .strict();
+/**
+ * Canonical statement of a continuity bind transition.
+ * This is the byte-exact payload that both parties sign.
+ */
+exports.ContinuityStatementSchema = zod_1.z
+    .object({
+    nodeId: address_types_js_1.NodeIdSchema,
+    previousPrincipalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    newPrincipalFingerprint: address_types_js_1.PrincipalFingerprintSchema,
+    newTransportPublicKey: address_types_js_1.PeerTransportIdSchema.optional(),
+    bindingGeneration: address_types_js_1.BindingGenerationSchema,
+    revocationGeneration: address_types_js_1.RevocationGenerationSchema.optional(),
+    createdAt: NonEmptyStringSchema,
+})
+    .strict();
+/**
+ * Dual-signed continuity bind: delegation (previous principal) + acceptance
+ * (new principal). Both public keys are included for independent verification.
+ */
+exports.SignedContinuityBindSchema = zod_1.z
+    .object({
+    statement: exports.ContinuityStatementSchema,
+    delegationSignature: NonEmptyStringSchema,
+    acceptanceSignature: NonEmptyStringSchema,
+    previousPublicKey: NonEmptyStringSchema,
+    newPublicKey: NonEmptyStringSchema,
+})
+    .strict();
+exports.MutationOperationSchema = zod_1.z.enum([
+    "network.register",
+    "network.revoke",
+    "network.list_peers",
+    "pair.direct",
+    "pair.relay",
+    "pair.relay_response",
+    "peer.update_capabilities",
+    "peer.update_trust_tier",
+]);
+exports.MutationEnvelopeSchema = zod_1.z
+    .object({
+    version: exports.NetworkRuntimeProtocolVersionSchema,
+    id: NonEmptyStringSchema,
+    operation: exports.MutationOperationSchema,
+    principal: peer_principal_ref_js_1.NodePrincipalBindingRefSchema,
+    target: peer_principal_ref_js_1.NodePrincipalBindingRefSchema,
+    namespace: NonEmptyStringSchema,
+    policyEpoch: zod_1.z.number().int().nonnegative(),
+    nonce: NonEmptyStringSchema,
+    timestamp: zod_1.z.number().int().nonnegative(),
+    ttl: zod_1.z.number().int().positive(),
+    contextHash: NonEmptyStringSchema,
+    payload: RecordSchema,
+    signature: NonEmptyStringSchema,
+    method: NonEmptyStringSchema.optional(),
+    path: NonEmptyStringSchema.optional(),
+    metadata: RecordSchema.optional(),
+    reason: NonEmptyStringSchema.optional(),
+    parentEnvelopeId: NonEmptyStringSchema.optional(),
+})
+    .strict();
+exports.NetworkRouteRevokeRequestSchema = zod_1.z
+    .object({
+    nodeId: address_types_js_1.NodeIdSchema,
+    envelope: exports.MutationEnvelopeSchema,
+})
+    .strict();
+exports.NetworkRouteRevokeRequestJsonSchema = toFastifyBodyJsonSchema(exports.NetworkRouteRevokeRequestSchema);
+//# sourceMappingURL=protocol-schemas.js.map

package/dist-cjs/network-runtime/runtime-bootstrap-contract.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RuntimeBootstrapRecordSchema = exports.RuntimeBootstrapIdentitySchema = exports.RuntimeBootstrapTlsSchema = exports.RuntimeBootstrapControlEndpointSchema = exports.RuntimeBootstrapPhaseSchema = exports.RuntimeBootstrapRevisionSchema = void 0;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+const protocol_schemas_js_1 = require("./protocol-schemas.js");
+const NonEmptyTrimmedStringSchema = zod_1.z.string().trim().min(1);
+const NonBlankVerbatimStringSchema = zod_1.z
+    .string()
+    .min(1)
+    .refine((value) => value.trim().length > 0);
+exports.RuntimeBootstrapRevisionSchema = zod_1.z.number().int().nonnegative();
+exports.RuntimeBootstrapPhaseSchema = zod_1.z.enum([
+    "starting",
+    "tls_bound",
+    "control_ready",
+    "network_ready",
+    "mesh_ready",
+    "degraded",
+    "stopped",
+]);
+exports.RuntimeBootstrapControlEndpointSchema = zod_1.z
+    .object({
+    host: NonEmptyTrimmedStringSchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+})
+    .strict();
+exports.RuntimeBootstrapTlsSchema = zod_1.z
+    .object({
+    caFingerprint: address_types_js_1.TlsCaFingerprintSchema,
+    caCertPem: NonBlankVerbatimStringSchema,
+    principalIdentity: address_types_js_1.PrincipalFingerprintSchema,
+    loopbackIdentity: address_types_js_1.LoopbackTlsIdentitySchema,
+})
+    .strict();
+exports.RuntimeBootstrapIdentitySchema = zod_1.z
+    .object({
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    displayNameSnapshot: NonEmptyTrimmedStringSchema.optional(),
+})
+    .strict();
+exports.RuntimeBootstrapRecordSchema = zod_1.z
+    .object({
+    nodeId: address_types_js_1.NodeIdSchema,
+    runtimeId: address_types_js_1.RuntimeIdSchema,
+    arionName: NonEmptyTrimmedStringSchema.optional(),
+    ownerGeneration: address_types_js_1.OwnerGenerationSchema,
+    bootstrapRevision: exports.RuntimeBootstrapRevisionSchema,
+    phase: exports.RuntimeBootstrapPhaseSchema,
+    protocolVersion: protocol_schemas_js_1.NetworkRuntimeProtocolVersionSchema,
+    controlEndpoint: exports.RuntimeBootstrapControlEndpointSchema,
+    displayNameSnapshot: NonEmptyTrimmedStringSchema.optional(),
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    tls: exports.RuntimeBootstrapTlsSchema,
+    publishedAt: NonEmptyTrimmedStringSchema,
+    degradedReason: NonEmptyTrimmedStringSchema.optional(),
+    failedPhase: exports.RuntimeBootstrapPhaseSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=runtime-bootstrap-contract.js.map