@cero-base/core 1.0.1 → 1.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cero-base/core",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "cero p2p primitives — identity, storage, network, database, blobs, rpc, pairing.",
   "type": "module",
   "sideEffects": false,

package/src/lib/errors.js

@@ -55,6 +55,14 @@ export class CeroError extends Error {
   static CLOSED(resource) {
     return new CeroError('CLOSED', `${resource} is closed`)
   }
+  /**
+   * A channel-stamped storage was opened under a different channel. Deliberately
+   * does NOT name the stored channel — that label gates the network, so leaking it
+   * in an error would hint at a realm the caller isn't on.
+   */
+  static CHANNEL_MISMATCH() {
+    return new CeroError('CHANNEL_MISMATCH', 'storage belongs to a different channel')
+  }
   /**
    * Operation before `ready()` resolved.
    *

package/src/network/index.js

@@ -3,6 +3,7 @@ import ProtomuxWakeup from 'protomux-wakeup'
 import ReadyResource from 'ready-resource'
 import safetyCatch from 'safety-catch'
 import b4a from 'b4a'
+import { hash } from 'hypercore-crypto'
 
 import { ACTIVE, PASSIVE } from '../lib/constants.js'
 import { CeroError } from '../lib/errors.js'
@@ -14,6 +15,7 @@ import { Discovery } from './discovery.js'
  * @property {Array<{ host: string, port: number }>} [bootstrap]    Custom DHT bootstrap nodes.
  * @property {(remotePublicKey: Uint8Array, payload: any) => boolean} [firewall]  Incoming-connection filter.
  * @property {Uint8Array[]} [relayThrough]                          Relay public keys to tunnel through.
+ * @property {string} [channel]                                     Optional network-isolation label; only same-channel peers meet.
  *
  * @typedef {{ replicate: (stream: any) => any }} Replicable
  */
@@ -24,12 +26,13 @@ import { Discovery } from './discovery.js'
  */
 export class Network extends ReadyResource {
   /** @param {NetworkOpts} [opts] */
-  constructor({ identity, bootstrap, firewall, relayThrough } = {}) {
+  constructor({ identity, bootstrap, firewall, relayThrough, channel } = {}) {
     super()
     this.identity = identity || null
     this.bootstrap = bootstrap || null
     this.firewall = firewall || null
     this.relayThrough = relayThrough || null
+    this.channel = channel || null
 
     this.swarm = null
     this.wakeup = new ProtomuxWakeup()
@@ -63,6 +66,14 @@ export class Network extends ReadyResource {
 
     this.swarm = new Hyperswarm(opts)
 
+    if (this.channel) {
+      const channel = this.channel
+      const join = this.swarm.join.bind(this.swarm)
+      const leave = this.swarm.leave.bind(this.swarm)
+      this.swarm.join = (topic, opts) => join(channelTopic(topic, channel), opts)
+      this.swarm.leave = (topic) => leave(channelTopic(topic, channel))
+    }
+
     this.swarm.on('connection', (stream, info) => {
       if (this.closing || this.closed) {
         stream.destroy()
@@ -226,6 +237,12 @@ function replicateInto(core, stream) {
   }
 }
 
+// A channel re-namespaces every swarm topic so only same-channel peers meet.
+// No channel → identity (unchanged, back-compat).
+export function channelTopic(topic, channel) {
+  return channel ? hash([topic, b4a.from(channel)]) : topic
+}
+
 function isTopic(x) {
   return b4a.isBuffer(x) && x.length === 32
 }

package/types/lib/errors.d.ts

@@ -29,6 +29,12 @@ export class CeroError extends Error {
      * @param {string} resource
      */
     static CLOSED(resource: string): CeroError;
+    /**
+     * A channel-stamped storage was opened under a different channel. Deliberately
+     * does NOT name the stored channel — that label gates the network, so leaking it
+     * in an error would hint at a realm the caller isn't on.
+     */
+    static CHANNEL_MISMATCH(): CeroError;
     /**
      * Operation before `ready()` resolved.
      *

package/types/network/index.d.ts

@@ -1,9 +1,11 @@
+export function channelTopic(topic: any, channel: any): any;
 /**
  * @typedef {object} NetworkOpts
  * @property {import('../identity/index.js').Identity} [identity]  Long-lived keypair used as the swarm identity.
  * @property {Array<{ host: string, port: number }>} [bootstrap]    Custom DHT bootstrap nodes.
  * @property {(remotePublicKey: Uint8Array, payload: any) => boolean} [firewall]  Incoming-connection filter.
  * @property {Uint8Array[]} [relayThrough]                          Relay public keys to tunnel through.
+ * @property {string} [channel]                                     Optional network-isolation label; only same-channel peers meet.
  *
  * @typedef {{ replicate: (stream: any) => any }} Replicable
  */
@@ -13,7 +15,7 @@
  */
 export class Network extends ReadyResource {
     /** @param {NetworkOpts} [opts] */
-    constructor({ identity, bootstrap, firewall, relayThrough }?: NetworkOpts);
+    constructor({ identity, bootstrap, firewall, relayThrough, channel }?: NetworkOpts);
     identity: import("../index.js").Identity;
     bootstrap: {
         host: string;
@@ -21,6 +23,7 @@ export class Network extends ReadyResource {
     }[];
     firewall: (remotePublicKey: Uint8Array, payload: any) => boolean;
     relayThrough: Uint8Array<ArrayBufferLike>[];
+    channel: string;
     swarm: any;
     wakeup: any;
     _replicateables: Set<any>;
@@ -107,6 +110,10 @@ export type NetworkOpts = {
      * Relay public keys to tunnel through.
      */
     relayThrough?: Uint8Array[];
+    /**
+     * Optional network-isolation label; only same-channel peers meet.
+     */
+    channel?: string;
 };
 export type Replicable = {
     replicate: (stream: any) => any;