@forgezero/providers 0.1.36 → 0.1.38

package/dist/billing.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/billing.ts
 var PAYMENT_PROVIDER_KEYS = ["stripe:v1", "paypal:v1", "razorpay:v1"];

package/dist/database.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/database.ts
 var pools = new Map;

package/dist/email.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/email.ts
 var recipients = (to) => Array.isArray(to) ? [...to] : [to];

package/dist/git.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/git.ts
 var githubAppConfigSchema = {

package/dist/http.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/http.ts
 class BudgetExhausted extends ProviderError {

package/dist/index.d.ts

@@ -303,5 +303,5 @@ export interface EmailBatchResult {
     };
     results: readonly EmailBatchItemResult[];
 }
-export declare const VERSION = "0.1.36";
+export declare const VERSION = "0.1.38";
 export {};

package/dist/index.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 export {
   staticConfig,
   serviceMethod,

package/dist/pool.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/http.ts
 class BudgetExhausted extends ProviderError {

package/dist/realtime.d.ts

@@ -1,10 +1,11 @@
-import { type RealtimeBatch } from '@forgezero/runtime/realtime';
+import { type RealtimeBatch, type RealtimePublishResponse } from '@forgezero/runtime/realtime';
 import { type NodeKeyPair } from '@forgezero/runtime/identity';
 export interface RealtimeProviderOptions {
     endpoint: string;
-    /** Legacy v2 compatibility credential. Removed after every edge reports v3. */
-    secret?: string;
-    identity?: Readonly<{
+    /** Worker inbound credential. Required in addition to the hybrid proof. */
+    secret: string;
+    /** Ed25519 + ML-DSA producer identity. Both signatures are mandatory. */
+    identity: Readonly<{
         nodeKey: string;
         keys: NodeKeyPair;
     }>;
@@ -18,8 +19,5 @@ export declare class RealtimeProviderError extends Error {
 }
 /** One external request per batch; Worker/DO bindings own the internal fan-out. */
 export declare function cloudflareRealtime(options: RealtimeProviderOptions): {
-    publish(input: RealtimeBatch): Promise<{
-        delivered: number;
-        shards: number;
-    }>;
+    publish(input: RealtimeBatch): Promise<RealtimePublishResponse>;
 };

package/dist/realtime.js

@@ -1,5 +1,11 @@
 // src/realtime.ts
-import { realtimeBatchBytes, realtimeHmac, validateRealtimeBatch } from "@forgezero/runtime/realtime";
+import {
+  realtimeBatchBytes,
+  realtimeHmac,
+  realtimePublishMessage,
+  validateRealtimeBatch,
+  validateRealtimePublishResponse
+} from "@forgezero/runtime/realtime";
 import { encodeSignatureHeader, signRequest } from "@forgezero/runtime/identity";
 
 class RealtimeProviderError extends Error {
@@ -13,7 +19,7 @@ class RealtimeProviderError extends Error {
 var producerPattern = /^[A-Za-z0-9][A-Za-z0-9_.:@/-]{0,127}$/;
 function cloudflareRealtime(options) {
   const endpoint = new URL(options.endpoint);
-  if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.search || endpoint.hash || !producerPattern.test(options.producer) || !options.identity && new TextEncoder().encode(options.secret ?? "").byteLength < 32 || options.identity && options.identity.nodeKey !== options.producer) {
+  if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.search || endpoint.hash || !producerPattern.test(options.producer) || new TextEncoder().encode(options.secret).byteLength < 32 || options.identity.nodeKey !== options.producer) {
     throw new RealtimeProviderError("INVALID_CONFIG", "Realtime endpoint, producer, or secret is invalid.");
   }
   endpoint.pathname = "/__fz/realtime/publish";
@@ -27,10 +33,8 @@ function cloudflareRealtime(options) {
       const batch = validateRealtimeBatch(input);
       const body = realtimeBatchBytes(batch);
       const timestamp = Math.floor(Date.now() / 1000).toString();
-      const signature = options.identity ? encodeSignatureHeader(signRequest(options.identity.keys, options.identity.nodeKey, { method: "POST", path: endpoint.pathname, query: "", body })) : await realtimeHmac(options.secret, `publish
-${options.producer}
-${timestamp}
-${body}`);
+      const proof = encodeSignatureHeader(signRequest(options.identity.keys, options.identity.nodeKey, { method: "POST", path: endpoint.pathname, query: "", body }));
+      const signature = await realtimeHmac(options.secret, realtimePublishMessage(options.producer, timestamp, body));
       let response;
       try {
         response = await fetcher(endpoint, {
@@ -43,7 +47,8 @@ ${body}`);
             "x-fz-realtime-producer": options.producer,
             "x-fz-realtime-timestamp": timestamp,
             "x-fz-realtime-signature": signature,
-            ...options.identity ? { "x-fz-node-key": options.identity.nodeKey } : {},
+            "x-fz-realtime-proof": proof,
+            "x-fz-node-key": options.identity.nodeKey,
             "idempotency-key": batch.batchId
           }
         });
@@ -54,11 +59,11 @@ ${body}`);
         await response.body?.cancel();
         throw new RealtimeProviderError(response.status >= 500 ? "UNAVAILABLE" : "REFUSED", `Realtime edge returned HTTP ${response.status}.`);
       }
-      const result = await response.json();
-      if (!Number.isSafeInteger(result.delivered) || !Number.isSafeInteger(result.shards)) {
+      try {
+        return validateRealtimePublishResponse(await response.json());
+      } catch {
         throw new RealtimeProviderError("UNAVAILABLE", "Realtime edge returned malformed evidence.");
       }
-      return { delivered: result.delivered, shards: result.shards };
     }
   };
 }

package/dist/storage.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/storage.ts
 var encoder = new TextEncoder;

package/dist/translation.js

@@ -336,7 +336,7 @@ function createService(definition, methods, options = {}) {
     }
   };
 }
-var VERSION = "0.1.36";
+var VERSION = "0.1.38";
 
 // src/translation.ts
 var GOOGLE_ENDPOINT = "https://generativelanguage.googleapis.com/v1beta/models";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/providers",
-  "version": "0.1.36",
+  "version": "0.1.38",
   "type": "module",
   "publishConfig": {
     "access": "public",
@@ -85,7 +85,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@forgezero/runtime": "^0.1.27",
+    "@forgezero/runtime": "^0.1.29",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
     "@noble/post-quantum": "0.6.1"