@cero-base/cero 1.0.1 → 1.1.0

package/README.md

@@ -49,6 +49,7 @@ Ships with TypeScript declarations (`.d.ts`) generated from JSDoc.
 | Opt                 | Meaning                                                                                                                                                                                                                                                |
 | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | `bootstrap`         | Hyperswarm bootstrap nodes.                                                                                                                                                                                                                            |
+| `channel`           | Optional network-isolation label. Peers connect only to peers on the **same** channel (it salts every swarm topic); omit it for the global network. A storage remembers its channel and refuses to reopen under a different one. Any string works.     |
 | `name` / `isMobile` | Stamped on the device's `add-writer` event.                                                                                                                                                                                                            |
 | `seed` / `phrase`   | Restore from explicit 16-/32-byte entropy or a BIP-39 mnemonic. Without either, a stored identity is loaded if present, else a fresh one is generated.                                                                                                 |
 | `key`               | Open against an existing bee key (multi-device flow).                                                                                                                                                                                                  |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cero-base/cero",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "The ideal p2p API — everything is a handle, handles contain refs, refs contain rows.",
   "type": "module",
   "sideEffects": false,
@@ -83,7 +83,7 @@
     "test": "ls test/*.test.js | xargs -P1 -n1 brittle-node"
   },
   "dependencies": {
-    "@cero-base/core": "^1.0.1",
+    "@cero-base/core": "^1.1.0",
     "b4a": "^1.8.1",
     "bare-abort-controller": "^1.1.2",
     "bare-crypto": "^1.15.3",

package/src/build/builtins.js

@@ -19,7 +19,8 @@ export const refs = {
   local: {
     master: { type: 'master', kind: 'single' },
     keypair: { type: 'keypair', kind: 'single' },
-    'handle-keypairs': { type: 'handle-keypair' }
+    'handle-keypairs': { type: 'handle-keypair' },
+    environment: { type: 'environment', kind: 'single' }
   }
 }
 

package/src/build/schemas.js

@@ -87,6 +87,9 @@ export const local = {
     publicKey: required(bytes),
     secretKey: required(bytes),
     encryptionKey: bytes
+  },
+  environment: {
+    channel: required(string)
   }
 }
 

package/src/index.js

@@ -59,6 +59,7 @@ export { t, schema } from './lib/spec.js'
  * @property {string | null} [name]                    Friendly device name persisted on the identity claim.
  * @property {boolean} [isMobile]                      Marks this device as mobile.
  * @property {Array<{ host: string, port: number }>} [bootstrap]  Custom DHT bootstrap nodes.
+ * @property {string} [channel]                        Optional network-isolation label; only same-channel peers connect.
  * @property {Uint8Array} [key]                        Pre-existing database key (skip bootstrap).
  * @property {Uint8Array} [encryptionKey]              Pre-existing encryption key.
  * @property {Record<string, Function>} [routes]       Custom RPC routes for the database dispatcher.
@@ -103,7 +104,16 @@ export async function cero(dir, spec, opts = {}) {
     const identity = await resolveIdentity(opts, local)
     const writer = local ? (await local.store.get('keypair')).data : null
 
-    network = new Network({ bootstrap: opts.bootstrap })
+    // Channel stamp: a storage remembers its channel; reopening it under a different channel is a
+    // misconfiguration that could leak data across networks, so reject it. Only when a channel is
+    // set (no channel = global, no stamp, unchanged).
+    if (local && opts.channel) {
+      const stored = (await local.store.get('environment')).data?.channel
+      if (stored == null) await local.store.set('environment', { channel: opts.channel })
+      else if (stored !== opts.channel) throw CeroError.CHANNEL_MISMATCH()
+    }
+
+    network = new Network({ bootstrap: opts.bootstrap, channel: opts.channel })
     await network.ready()
     discovery = network.join(identity.topic)
     await Promise.race([discovery.flush(), new Promise((r) => setTimeout(r, FLUSH))])

package/types/build/builtins.d.ts

@@ -32,6 +32,10 @@ export namespace refs {
         'handle-keypairs': {
             type: string;
         };
+        environment: {
+            type: string;
+            kind: string;
+        };
     };
 }
 export function getHyperdbType(prim: any): any;

package/types/build/schemas.d.ts

@@ -80,6 +80,9 @@ export const local: {
         secretKey: import("@cero-base/core").Prim;
         encryptionKey: import("@cero-base/core").Prim;
     };
+    environment: {
+        channel: import("@cero-base/core").Prim;
+    };
 };
 export const rpc: {
     'req-empty': {

package/types/index.d.ts

@@ -10,6 +10,7 @@
  * @property {string | null} [name]                    Friendly device name persisted on the identity claim.
  * @property {boolean} [isMobile]                      Marks this device as mobile.
  * @property {Array<{ host: string, port: number }>} [bootstrap]  Custom DHT bootstrap nodes.
+ * @property {string} [channel]                        Optional network-isolation label; only same-channel peers connect.
  * @property {Uint8Array} [key]                        Pre-existing database key (skip bootstrap).
  * @property {Uint8Array} [encryptionKey]              Pre-existing encryption key.
  * @property {Record<string, Function>} [routes]       Custom RPC routes for the database dispatcher.
@@ -92,6 +93,10 @@ export type CeroOpts = {
         host: string;
         port: number;
     }>;
+    /**
+     * Optional network-isolation label; only same-channel peers connect.
+     */
+    channel?: string;
     /**
      * Pre-existing database key (skip bootstrap).
      */