@cero-base/cero 1.0.1 → 1.1.1

package/README.md

@@ -49,6 +49,7 @@ Ships with TypeScript declarations (`.d.ts`) generated from JSDoc.
 | Opt                 | Meaning                                                                                                                                                                                                                                                |
 | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | `bootstrap`         | Hyperswarm bootstrap nodes.                                                                                                                                                                                                                            |
+| `channel`           | Optional network-isolation label. Peers connect only to peers on the **same** channel (it salts every swarm topic); omit it for the global network. A storage remembers its channel and refuses to reopen under a different one. Any string works.     |
 | `name` / `isMobile` | Stamped on the device's `add-writer` event.                                                                                                                                                                                                            |
 | `seed` / `phrase`   | Restore from explicit 16-/32-byte entropy or a BIP-39 mnemonic. Without either, a stored identity is loaded if present, else a fresh one is generated.                                                                                                 |
 | `key`               | Open against an existing bee key (multi-device flow).                                                                                                                                                                                                  |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cero-base/cero",
-  "version": "1.0.1",
+  "version": "1.1.1",
   "description": "The ideal p2p API — everything is a handle, handles contain refs, refs contain rows.",
   "type": "module",
   "sideEffects": false,
@@ -83,7 +83,7 @@
     "test": "ls test/*.test.js | xargs -P1 -n1 brittle-node"
   },
   "dependencies": {
-    "@cero-base/core": "^1.0.1",
+    "@cero-base/core": "^1.1.1",
     "b4a": "^1.8.1",
     "bare-abort-controller": "^1.1.2",
     "bare-crypto": "^1.15.3",

package/src/build/CLAUDE.md

@@ -0,0 +1,3 @@
+<claude-mem-context>
+
+</claude-mem-context>

package/src/build/builtins.js

@@ -19,7 +19,8 @@ export const refs = {
   local: {
     master: { type: 'master', kind: 'single' },
     keypair: { type: 'keypair', kind: 'single' },
-    'handle-keypairs': { type: 'handle-keypair' }
+    'handle-keypairs': { type: 'handle-keypair' },
+    environment: { type: 'environment', kind: 'single' }
   }
 }
 

package/src/build/schemas.js

@@ -87,6 +87,9 @@ export const local = {
     publicKey: required(bytes),
     secretKey: required(bytes),
     encryptionKey: bytes
+  },
+  environment: {
+    channel: required(string)
   }
 }
 

package/src/handle/CLAUDE.md

@@ -0,0 +1,3 @@
+<claude-mem-context>
+
+</claude-mem-context>

package/src/index.js

@@ -59,12 +59,13 @@ export { t, schema } from './lib/spec.js'
  * @property {string | null} [name]                    Friendly device name persisted on the identity claim.
  * @property {boolean} [isMobile]                      Marks this device as mobile.
  * @property {Array<{ host: string, port: number }>} [bootstrap]  Custom DHT bootstrap nodes.
+ * @property {string} [channel]                        Optional network-isolation label; only same-channel peers connect.
  * @property {Uint8Array} [key]                        Pre-existing database key (skip bootstrap).
  * @property {Uint8Array} [encryptionKey]              Pre-existing encryption key.
  * @property {Record<string, Function>} [routes]       Custom RPC routes for the database dispatcher.
  * @property {(err: any) => void} [onerror]            Background-task error handler.
  * @property {boolean} [recovery]                      Recovery flow — wipe local state and re-claim a writer slot.
- * @property {number} [recoveryTimeout]                Max wait for writer capability during recovery.
+ * @property {number} [recoveryTimeout]                Max wait for peer data + writer capability during recovery.
  */
 
 /**
@@ -103,7 +104,16 @@ export async function cero(dir, spec, opts = {}) {
     const identity = await resolveIdentity(opts, local)
     const writer = local ? (await local.store.get('keypair')).data : null
 
-    network = new Network({ bootstrap: opts.bootstrap })
+    // Channel stamp: a storage remembers its channel; reopening it under a different channel is a
+    // misconfiguration that could leak data across networks, so reject it. Only when a channel is
+    // set (no channel = global, no stamp, unchanged).
+    if (local && opts.channel) {
+      const stored = (await local.store.get('environment')).data?.channel
+      if (stored == null) await local.store.set('environment', { channel: opts.channel })
+      else if (stored !== opts.channel) throw CeroError.CHANNEL_MISMATCH()
+    }
+
+    network = new Network({ bootstrap: opts.bootstrap, channel: opts.channel })
     await network.ready()
     discovery = network.join(identity.topic)
     await Promise.race([discovery.flush(), new Promise((r) => setTimeout(r, FLUSH))])
@@ -130,7 +140,8 @@ export async function cero(dir, spec, opts = {}) {
       const result = await me.bootstrap({
         name: opts.name || null,
         isMobile: opts.isMobile === true,
-        recovering: opts.recovery === true
+        recovering: opts.recovery === true,
+        ...(opts.recoveryTimeout ? { timeout: opts.recoveryTimeout } : {})
       })
       if (local && result?.writer) {
         await local.store.set('keypair', {
@@ -192,7 +203,9 @@ export async function restore(me, phrase) {
   if (current.id === me.identity.id) return me
 
   const { _dir: dir, spec, _opts: opts } = me
-  const { name, bootstrap, isMobile, onerror, routes, recoveryTimeout } = opts
+  // channel must carry over — without it the recovered instance rejoins the
+  // global identity topic and never meets its channeled peers (recovery timeout).
+  const { name, bootstrap, isMobile, onerror, routes, recoveryTimeout, channel } = opts
 
   await me.close()
   await fs.promises.rm(`${dir}/main`, { recursive: true, force: true })
@@ -204,6 +217,7 @@ export async function restore(me, phrase) {
     onerror,
     routes,
     recoveryTimeout,
+    channel,
     phrase,
     recovery: true
   })

package/types/build/builtins.d.ts

@@ -32,6 +32,10 @@ export namespace refs {
         'handle-keypairs': {
             type: string;
         };
+        environment: {
+            type: string;
+            kind: string;
+        };
     };
 }
 export function getHyperdbType(prim: any): any;

package/types/build/schemas.d.ts

@@ -80,6 +80,9 @@ export const local: {
         secretKey: import("@cero-base/core").Prim;
         encryptionKey: import("@cero-base/core").Prim;
     };
+    environment: {
+        channel: import("@cero-base/core").Prim;
+    };
 };
 export const rpc: {
     'req-empty': {

package/types/index.d.ts

@@ -10,12 +10,13 @@
  * @property {string | null} [name]                    Friendly device name persisted on the identity claim.
  * @property {boolean} [isMobile]                      Marks this device as mobile.
  * @property {Array<{ host: string, port: number }>} [bootstrap]  Custom DHT bootstrap nodes.
+ * @property {string} [channel]                        Optional network-isolation label; only same-channel peers connect.
  * @property {Uint8Array} [key]                        Pre-existing database key (skip bootstrap).
  * @property {Uint8Array} [encryptionKey]              Pre-existing encryption key.
  * @property {Record<string, Function>} [routes]       Custom RPC routes for the database dispatcher.
  * @property {(err: any) => void} [onerror]            Background-task error handler.
  * @property {boolean} [recovery]                      Recovery flow — wipe local state and re-claim a writer slot.
- * @property {number} [recoveryTimeout]                Max wait for writer capability during recovery.
+ * @property {number} [recoveryTimeout]                Max wait for peer data + writer capability during recovery.
  */
 /**
  * Open (or create) a cero handle at `dir`. Sets up storage, network and
@@ -92,6 +93,10 @@ export type CeroOpts = {
         host: string;
         port: number;
     }>;
+    /**
+     * Optional network-isolation label; only same-channel peers connect.
+     */
+    channel?: string;
     /**
      * Pre-existing database key (skip bootstrap).
      */
@@ -113,7 +118,7 @@ export type CeroOpts = {
      */
     recovery?: boolean;
     /**
-     * Max wait for writer capability during recovery.
+     * Max wait for peer data + writer capability during recovery.
      */
     recoveryTimeout?: number;
 };