@fairfox/polly 0.70.0 → 0.72.0

package/dist/src/polly-ui/styles.css

@@ -66,6 +66,16 @@
     line-height: var(--polly-line-height-tight);
   }
 
+  /* Monospace baseline for inline code, keyboard, and sample text so a
+   * bare <code> reads correctly without a consumer class. The <Code>
+   * component layers the tinted-pill treatment on top; this rule only
+   * guarantees the font. :where() keeps specificity at zero so any
+   * class or id wins. */
+  :where(code, kbd, samp, pre) {
+    font-family: var(--polly-font-mono);
+    font-size: var(--polly-text-sm);
+  }
+
   /* Text overflow utilities. Both are opt-in: any element receives the
    * behaviour by carrying the data attribute. They stay compatible with
    * Layout (a grid) because the utilities change the element's OWN display,
@@ -210,6 +220,191 @@
   }
 }
 
+/* src/polly-ui/Dropdown.module.css */
+@layer polly-components {
+  .dropdown_HX48zA {
+    position: relative;
+    display: inline-block;
+  }
+
+  .trigger_HX48zA {
+    display: inline-block;
+  }
+
+  .menu_HX48zA {
+    position: absolute;
+    inset: unset;
+    z-index: var(--polly-z-raised);
+    margin: var(--polly-space-xs) 0 0;
+    padding: var(--polly-space-xs) 0;
+    border: var(--polly-border-width-default) solid var(--polly-border);
+    border-radius: var(--polly-radius-md);
+    background-color: var(--polly-surface);
+    box-shadow: var(--polly-shadow-md);
+    box-sizing: border-box;
+    overflow-y: auto;
+    min-width: 160px;
+    max-height: 280px;
+    top: 100%;
+    left: 0;
+  }
+
+  .alignRight_HX48zA {
+    left: auto;
+    right: 0;
+  }
+}
+
+/* src/polly-ui/Layout.module.css */
+@layer polly-components {
+  .layout_QgwWPg {
+    --l-cols: none;
+    --l-rows: none;
+    --l-gap: 0;
+    --l-p: 0;
+    --l-h: auto;
+    --l-mh: auto;
+    --l-mis: none;
+    --l-ji: stretch;
+    --l-ai: start;
+    --l-jc: normal;
+    --l-ac: normal;
+    --l-js: auto;
+    --l-as: auto;
+    --l-flow: row;
+    --l-arows: auto;
+    --l-acols: auto;
+    --l-col: auto;
+    display: grid;
+    box-sizing: border-box;
+    max-inline-size: var(--l-mis);
+    grid-template-columns: var(--l-cols);
+    grid-template-rows: var(--l-rows);
+    gap: var(--l-gap);
+    padding: var(--l-p);
+    height: var(--l-h);
+    min-height: var(--l-mh);
+    justify-items: var(--l-ji);
+    align-items: var(--l-ai);
+    justify-content: var(--l-jc);
+    align-content: var(--l-ac);
+    justify-self: var(--l-js);
+    align-self: var(--l-as);
+    grid-auto-flow: var(--l-flow);
+    grid-auto-rows: var(--l-arows);
+    grid-auto-columns: var(--l-acols);
+    grid-column: var(--l-col);
+    inline-size: 100%;
+    margin-inline-start: auto;
+    margin-inline-end: auto;
+  }
+
+  .inline_QgwWPg {
+    display: inline-grid;
+    inline-size: auto;
+  }
+
+  @media (max-width: 640px) {
+    .stackOnMobile_QgwWPg {
+      grid-template-columns: 1fr;
+      grid-auto-flow: row;
+      grid-column: auto;
+    }
+  }
+}
+
+/* src/polly-ui/Select.module.css */
+@layer polly-components {
+  .select_daofbw {
+    display: inline-block;
+  }
+
+  .label_daofbw {
+    display: block;
+    margin-bottom: var(--polly-space-xs);
+    font-size: var(--polly-text-sm);
+    font-weight: var(--polly-weight-medium);
+    color: var(--polly-text-muted);
+  }
+
+  .trigger_daofbw {
+    display: inline-block;
+    padding: var(--polly-space-sm) var(--polly-space-md);
+    border: var(--polly-border-width-default) solid var(--polly-border);
+    border-radius: var(--polly-radius-sm);
+    background-color: var(--polly-surface);
+    font-family: inherit;
+    font-size: var(--polly-text-md);
+    color: var(--polly-text);
+    text-align: left;
+    cursor: pointer;
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    min-width: 140px;
+  }
+
+  .trigger_daofbw:disabled {
+    opacity: var(--polly-opacity-disabled);
+    cursor: not-allowed;
+  }
+
+  .placeholder_daofbw {
+    color: var(--polly-text-muted);
+  }
+
+  .actions_daofbw {
+    padding: var(--polly-space-xs) var(--polly-space-sm);
+    border-bottom: var(--polly-border-width-default) solid var(--polly-border);
+  }
+
+  .actionBtn_daofbw {
+    display: inline-block;
+    padding: var(--polly-space-xs) var(--polly-space-sm);
+    border-radius: var(--polly-radius-sm);
+    font-family: inherit;
+    font-size: var(--polly-text-xs);
+    color: var(--polly-accent);
+    cursor: pointer;
+    text-align: center;
+    background: none;
+    border: none;
+    width: 100%;
+  }
+
+  .actionBtn_daofbw:hover {
+    background-color: var(--polly-surface-sunken);
+  }
+
+  .option_daofbw {
+    display: block;
+    padding: var(--polly-space-sm) var(--polly-space-md);
+    font-family: inherit;
+    font-size: var(--polly-text-sm);
+    color: var(--polly-text);
+    text-align: left;
+    cursor: pointer;
+    background: none;
+    border: none;
+    width: 100%;
+  }
+
+  .option_daofbw:hover {
+    background-color: var(--polly-surface-sunken);
+  }
+
+  .optionSelected_daofbw {
+    background-color: color-mix(in srgb, var(--polly-accent) 8%, var(--polly-surface));
+  }
+
+  .optionCheck_daofbw {
+    accent-color: var(--polly-accent);
+    margin-right: var(--polly-space-sm);
+    vertical-align: middle;
+    pointer-events: none;
+  }
+}
+
 /* src/polly-ui/Badge.module.css */
 @layer polly-components {
   .badge_cZd0Aw {
@@ -358,64 +553,6 @@
   }
 }
 
-/* src/polly-ui/Layout.module.css */
-@layer polly-components {
-  .layout_QgwWPg {
-    --l-cols: none;
-    --l-rows: none;
-    --l-gap: 0;
-    --l-p: 0;
-    --l-h: auto;
-    --l-mh: auto;
-    --l-mis: none;
-    --l-ji: stretch;
-    --l-ai: start;
-    --l-jc: normal;
-    --l-ac: normal;
-    --l-js: auto;
-    --l-as: auto;
-    --l-flow: row;
-    --l-arows: auto;
-    --l-acols: auto;
-    --l-col: auto;
-    display: grid;
-    box-sizing: border-box;
-    max-inline-size: var(--l-mis);
-    grid-template-columns: var(--l-cols);
-    grid-template-rows: var(--l-rows);
-    gap: var(--l-gap);
-    padding: var(--l-p);
-    height: var(--l-h);
-    min-height: var(--l-mh);
-    justify-items: var(--l-ji);
-    align-items: var(--l-ai);
-    justify-content: var(--l-jc);
-    align-content: var(--l-ac);
-    justify-self: var(--l-js);
-    align-self: var(--l-as);
-    grid-auto-flow: var(--l-flow);
-    grid-auto-rows: var(--l-arows);
-    grid-auto-columns: var(--l-acols);
-    grid-column: var(--l-col);
-    inline-size: 100%;
-    margin-inline-start: auto;
-    margin-inline-end: auto;
-  }
-
-  .inline_QgwWPg {
-    display: inline-grid;
-    inline-size: auto;
-  }
-
-  @media (max-width: 640px) {
-    .stackOnMobile_QgwWPg {
-      grid-template-columns: 1fr;
-      grid-auto-flow: row;
-      grid-column: auto;
-    }
-  }
-}
-
 /* src/polly-ui/Surface.module.css */
 @layer polly-components {
   .surface_pQCFqA {
@@ -516,6 +653,55 @@
   }
 }
 
+/* src/polly-ui/Cluster.module.css */
+@layer polly-components {
+  .cluster_pNLz5g {
+    --c-gap: 0;
+    --c-p: 0;
+    --c-jc: flex-start;
+    --c-ai: center;
+    display: flex;
+    box-sizing: border-box;
+    gap: var(--c-gap);
+    padding: var(--c-p);
+    justify-content: var(--c-jc);
+    align-items: var(--c-ai);
+    flex-wrap: wrap;
+  }
+
+  .inline_pNLz5g {
+    display: inline-flex;
+  }
+}
+
+/* src/polly-ui/Code.module.css */
+@layer polly-components {
+  .code_Vc8yiw {
+    font-family: var(--polly-font-mono);
+    font-size: var(--polly-text-sm);
+    padding: .1em var(--polly-space-xs);
+    border-radius: var(--polly-radius-sm);
+    background-color: var(--polly-surface-sunken);
+    color: var(--polly-text);
+    word-break: break-word;
+  }
+
+  .block_Vc8yiw {
+    padding: var(--polly-space-md);
+    border-radius: var(--polly-radius-md);
+    background-color: var(--polly-surface-sunken);
+    overflow-x: auto;
+    margin: 0;
+  }
+
+  .block_Vc8yiw code {
+    font-family: var(--polly-font-mono);
+    font-size: var(--polly-text-sm);
+    color: var(--polly-text);
+    white-space: pre;
+  }
+}
+
 /* src/polly-ui/Collapsible.module.css */
 @layer polly-components {
   .collapsible_sEhnPw {
@@ -685,133 +871,6 @@
   }
 }
 
-/* src/polly-ui/Dropdown.module.css */
-@layer polly-components {
-  .dropdown_HX48zA {
-    position: relative;
-    display: inline-block;
-  }
-
-  .trigger_HX48zA {
-    display: inline-block;
-  }
-
-  .menu_HX48zA {
-    position: absolute;
-    inset: unset;
-    z-index: var(--polly-z-raised);
-    margin: var(--polly-space-xs) 0 0;
-    padding: var(--polly-space-xs) 0;
-    border: var(--polly-border-width-default) solid var(--polly-border);
-    border-radius: var(--polly-radius-md);
-    background-color: var(--polly-surface);
-    box-shadow: var(--polly-shadow-md);
-    box-sizing: border-box;
-    overflow-y: auto;
-    min-width: 160px;
-    max-height: 280px;
-    top: 100%;
-    left: 0;
-  }
-
-  .alignRight_HX48zA {
-    left: auto;
-    right: 0;
-  }
-}
-
-/* src/polly-ui/Select.module.css */
-@layer polly-components {
-  .select_daofbw {
-    display: inline-block;
-  }
-
-  .label_daofbw {
-    display: block;
-    margin-bottom: var(--polly-space-xs);
-    font-size: var(--polly-text-sm);
-    font-weight: var(--polly-weight-medium);
-    color: var(--polly-text-muted);
-  }
-
-  .trigger_daofbw {
-    display: inline-block;
-    padding: var(--polly-space-sm) var(--polly-space-md);
-    border: var(--polly-border-width-default) solid var(--polly-border);
-    border-radius: var(--polly-radius-sm);
-    background-color: var(--polly-surface);
-    font-family: inherit;
-    font-size: var(--polly-text-md);
-    color: var(--polly-text);
-    text-align: left;
-    cursor: pointer;
-    white-space: nowrap;
-    overflow: hidden;
-    text-overflow: ellipsis;
-    min-width: 140px;
-  }
-
-  .trigger_daofbw:disabled {
-    opacity: var(--polly-opacity-disabled);
-    cursor: not-allowed;
-  }
-
-  .placeholder_daofbw {
-    color: var(--polly-text-muted);
-  }
-
-  .actions_daofbw {
-    padding: var(--polly-space-xs) var(--polly-space-sm);
-    border-bottom: var(--polly-border-width-default) solid var(--polly-border);
-  }
-
-  .actionBtn_daofbw {
-    display: inline-block;
-    padding: var(--polly-space-xs) var(--polly-space-sm);
-    border-radius: var(--polly-radius-sm);
-    font-family: inherit;
-    font-size: var(--polly-text-xs);
-    color: var(--polly-accent);
-    cursor: pointer;
-    text-align: center;
-    background: none;
-    border: none;
-    width: 100%;
-  }
-
-  .actionBtn_daofbw:hover {
-    background-color: var(--polly-surface-sunken);
-  }
-
-  .option_daofbw {
-    display: block;
-    padding: var(--polly-space-sm) var(--polly-space-md);
-    font-family: inherit;
-    font-size: var(--polly-text-sm);
-    color: var(--polly-text);
-    text-align: left;
-    cursor: pointer;
-    background: none;
-    border: none;
-    width: 100%;
-  }
-
-  .option_daofbw:hover {
-    background-color: var(--polly-surface-sunken);
-  }
-
-  .optionSelected_daofbw {
-    background-color: color-mix(in srgb, var(--polly-accent) 8%, var(--polly-surface));
-  }
-
-  .optionCheck_daofbw {
-    accent-color: var(--polly-accent);
-    margin-right: var(--polly-space-sm);
-    vertical-align: middle;
-    pointer-events: none;
-  }
-}
-
 /* src/polly-ui/Skeleton.module.css */
 @layer polly-components {
   @keyframes pollyShimmer_gpBHJA {
@@ -891,6 +950,50 @@
   }
 }
 
+/* src/polly-ui/Text.module.css */
+@layer polly-components {
+  .text_75HKdQ {
+    color: var(--polly-text);
+    font-family: inherit;
+  }
+
+  .muted_75HKdQ {
+    color: var(--polly-text-muted);
+  }
+
+  .xs_75HKdQ {
+    font-size: var(--polly-text-xs);
+  }
+
+  .sm_75HKdQ {
+    font-size: var(--polly-text-sm);
+  }
+
+  .md_75HKdQ {
+    font-size: var(--polly-text-md);
+  }
+
+  .lg_75HKdQ {
+    font-size: var(--polly-text-lg);
+  }
+
+  .xl_75HKdQ {
+    font-size: var(--polly-text-xl);
+  }
+
+  .normal_75HKdQ {
+    font-weight: var(--polly-weight-normal);
+  }
+
+  .medium_75HKdQ {
+    font-weight: var(--polly-weight-medium);
+  }
+
+  .bold_75HKdQ {
+    font-weight: var(--polly-weight-bold);
+  }
+}
+
 /* src/polly-ui/TextInput.module.css */
 @layer polly-components {
   .input_ez4_Vg {

package/dist/src/shared/lib/mesh-client.d.ts

@@ -25,6 +25,7 @@ import { type MeshKeyring, MeshNetworkAdapter } from "./mesh-network-adapter";
 import { MeshSignalingClient, type MeshSignalingClientOptions } from "./mesh-signaling-client";
 import { type MeshStateLazyWrapperRecord, type MeshStateLoadedRejectionBreadcrumb, type MeshStateStorageOpenError } from "./mesh-state";
 import { MeshWebRTCAdapter, type MeshWebRTCAdapterOptions } from "./mesh-webrtc-adapter";
+import { type RevocationRecord } from "./revocation";
 /** Options for {@link createMeshClient}. */
 export interface CreateMeshClientOptions {
     /** Signalling-server configuration. `peerId` must be the same identity
@@ -479,6 +480,34 @@ export interface MeshClient {
      * over per-doc reevaluations resolves. Idempotent: if every pair is
      * already syncing this is a no-op. Polly issue #107 item 7. */
     reevaluateAllSync(): Promise<void>;
+    /**
+     * Issue a revocation against `targetPeerId` (RFC-043). The local
+     * keyring is mutated to drop the target immediately; the encoded
+     * signed record is broadcast to every currently-connected peer, who
+     * apply it through the same path on receipt. Past contributions from
+     * the revoked peer stay in any document they already merged into;
+     * future writes are dropped at every peer's adapter once they
+     * receive the revocation.
+     *
+     * Resolves once the local keyring has been mutated and the broadcast
+     * has been handed to the base adapter. Delivery to disconnected
+     * peers happens via the reconnect re-broadcast scheduled by the
+     * next RFC-043 PR.
+     */
+    revokePeer(targetPeerId: string, reason?: string): Promise<void>;
+    /**
+     * If a remote peer has issued a revocation that names the local
+     * peer as its target, this field carries the parsed
+     * {@link RevocationRecord}. Applications observe it to render a
+     * "this device has been revoked by your other device on date X"
+     * UX. The mesh continues to receive other peers' messages so the
+     * application can surface further detail (more revocations from
+     * the same issuer, etc.); only this device's outbound writes are
+     * suppressed.
+     *
+     * Undefined while no self-targeted revocation has been seen.
+     */
+    readonly selfRevocation: RevocationRecord | undefined;
     /** Close the signalling WebSocket, tear down every RTCPeerConnection,
      * and shut the Repo cleanly. Idempotent. */
     close(): Promise<void>;

package/dist/src/shared/lib/mesh-diagnostics.d.ts

@@ -48,6 +48,37 @@ export type MeshDiagnostic = {
     senderId: string;
     documentId: string;
     reason?: string;
+} | {
+    kind: "drop:unknown-control-type";
+    senderId: string;
+    tag: number;
+} | {
+    kind: "drop:empty-control-payload";
+    senderId: string;
+} | {
+    kind: "drop:control-handler-threw";
+    senderId: string;
+    tag: number;
+    reason: string;
+} | {
+    kind: "ctrl:revocation-received";
+    senderId: string;
+} | {
+    kind: "ctrl:revocation-summary-received";
+    senderId: string;
+} | {
+    kind: "revoke:duplicate";
+    revokedPeerId: string;
+    issuerId: string;
+} | {
+    kind: "revoke:rejected";
+    senderId: string;
+    reason: string;
+} | {
+    kind: "revoke:self-targeted";
+    issuerId: string;
+    reason?: string;
+    issuedAt: number;
 } | {
     kind: "pair:invite-issued";
     peerId: string;

package/dist/src/shared/lib/mesh-network-adapter.d.ts

@@ -45,6 +45,41 @@ import { type SigningKeyPair } from "./signing";
  * encryption mode. See the file-level comment for the per-document key
  * follow-up. */
 export declare const DEFAULT_MESH_KEY_ID = "polly-mesh-default";
+/**
+ * Control-message type tags. Every mesh message carries a single tag
+ * byte at the front of its plaintext payload, after decryption and
+ * signature verification. The tag discriminates the inner contents so
+ * future control flows (RFC-043 revocation propagation, future RFCs)
+ * can share the same encrypted-signed envelope without re-versioning.
+ *
+ * 0x00 is the default Automerge sync-message channel that polly has
+ * carried since the first cut. 0x01 and 0x02 are reserved for the
+ * revocation flow designed in RFC-043; the adapter recognises them at
+ * receive time but does not yet act on the payload — that lands in
+ * the second RFC-043 PR. Tags 0x03 and above are unassigned; a
+ * receiver that sees one emits `drop:unknown-control-type` and the
+ * message is dropped.
+ *
+ * Wire format break: polly 0.70 and earlier do not prepend the tag
+ * and do not strip it on receive. Mixing 0.70 and 0.71-plus peers on
+ * the same mesh produces garbage on both sides. The break is
+ * acknowledged in RFC-043 and required for the protocol-level
+ * revocation feature; the alternative (a separate WebRTC data
+ * channel) doubles transport complexity.
+ */
+export declare const MESH_CONTROL_TYPE: {
+    /** Automerge sync message — the default channel. */
+    readonly Sync: 0;
+    /** A signed RevocationRecord (RFC-043). Receive-side dispatch is
+     *  wired in this PR; the apply-and-persist behaviour lands in the
+     *  next RFC-043 PR. */
+    readonly Revocation: 1;
+    /** A revocation-set summary exchanged on every new peer connection
+     *  to gossip revocations to peers that were offline at issue-time
+     *  (RFC-043). Same staging as Revocation. */
+    readonly RevocationSummary: 2;
+};
+export type MeshControlType = (typeof MESH_CONTROL_TYPE)[keyof typeof MESH_CONTROL_TYPE];
 /**
  * A mesh keyring holds the local peer's signing identity, the public keys
  * of every peer the local node will accept messages from, the symmetric
@@ -106,6 +141,22 @@ export interface MeshNetworkAdapterOptions {
      * messages. Defaults to true (encrypt + sign, the full $meshState
      * posture). */
     encryptionEnabled?: boolean;
+    /**
+     * Optional handler for non-Sync control messages (RFC-043). Called
+     * after signature verification and decryption with the type tag,
+     * the body bytes that followed the tag, and the verified senderId.
+     * The handler owns the apply-and-persist behaviour for whichever
+     * control flow the tag belongs to; the adapter routes only.
+     *
+     * The handler is called *after* the corresponding `ctrl:*-received`
+     * diagnostic fires, so subscribers observing the low-level signal
+     * see the event before the handler mutates any application state.
+     * Handler exceptions are swallowed by the adapter — a buggy handler
+     * cannot tear the network path — but a diagnostic
+     * `drop:control-handler-threw` is emitted so the failure is
+     * observable.
+     */
+    onControlMessage?: (tag: number, body: Uint8Array, senderId: string) => void;
 }
 /**
  * NetworkAdapter that wraps another adapter with Polly's mesh-transport
@@ -121,6 +172,7 @@ export declare class MeshNetworkAdapter extends NetworkAdapter {
     readonly base: NetworkAdapter;
     readonly keyringSource: () => MeshKeyring;
     readonly encryptionEnabled: boolean;
+    readonly onControlMessage: ((tag: number, body: Uint8Array, senderId: string) => void) | undefined;
     /** Read-only view of the current keyring. Each access calls
      * {@link MeshNetworkAdapterOptions.keyringSource}, so the value
      * reflects whatever mutations or swaps the caller has applied since
@@ -137,7 +189,46 @@ export declare class MeshNetworkAdapter extends NetworkAdapter {
      * Wrap an outgoing Automerge message in an encrypt-then-sign envelope.
      * The wrapped payload is returned as a Message with the original sender
      * and target ids and the crypto blob in the `data` field.
+     *
+     * The serialised Automerge message is prefixed with a one-byte
+     * control-type tag (RFC-043). For outgoing Automerge sync this is
+     * always {@link MESH_CONTROL_TYPE.Sync} (0x00); the tag exists so
+     * future control flows (revocation propagation, revocation-set
+     * summaries) can share the same encrypted-signed envelope without
+     * re-versioning the wire format.
      */
     private wrap;
     private tryUnwrap;
+    /**
+     * Dispatch a verified-and-decrypted plaintext payload based on its
+     * one-byte control-type tag (RFC-043). For {@link MESH_CONTROL_TYPE.Sync}
+     * the remainder is the serialised Automerge message and is returned
+     * to the caller. For revocation tags the dispatch emits a
+     * `ctrl:*-received` diagnostic and drops the payload at this layer
+     * pending the next RFC-043 PR. Unknown tags emit
+     * `drop:unknown-control-type` and drop.
+     */
+    private dispatchTaggedPayload;
+    private invokeControlHandler;
+    /**
+     * Send a control message (RFC-043) to a list of connected peers.
+     * The body is wrapped in the same encrypt-sign envelope Automerge
+     * sync uses; the type tag goes in front so receivers route it to
+     * {@link MeshNetworkAdapterOptions.onControlMessage}.
+     *
+     * The base adapter does not surface its connected-peer set on the
+     * NetworkAdapter interface, so the caller passes the targets
+     * explicitly. The MeshClient layer maintains that list from the
+     * `peer-candidate` / `peer-disconnected` events.
+     */
+    sendControlMessage(tag: MeshControlType, body: Uint8Array, targetPeerIds: ReadonlyArray<PeerId>): void;
 }
+/**
+ * Prepend a one-byte control-type tag to a payload. The tag goes
+ * inside the encrypted-signed envelope (or directly inside the signed
+ * envelope in sign-only mode), so it is both confidential (encrypted
+ * when encryption is enabled) and authenticated (covered by the
+ * signature). Exposed so future RFC-043 issue helpers can build
+ * tagged payloads without rebuilding this primitive.
+ */
+export declare function prependControlTag(tag: MeshControlType, body: Uint8Array): Uint8Array;