@meshline/sdk 0.0.0-stage → 0.1.0-alpha.1

package/dist/models/messages.js

@@ -0,0 +1,168 @@
+import { requireLength, verifyDevice } from '../crypto/primitives.js';
+import { ProtocolError } from '../errors.js';
+import { validateIdentifier } from '../identity/identifiers.js';
+import { validateAccountId } from '../identity/neo.js';
+import { array, boolean, bytes, defineCodec, enumeration, integer, text } from '../protocol/codec.js';
+import { signingInput } from '../protocol/context.js';
+import { encodeUtf8 } from '../protocol/encoding.js';
+import { canonicalJson, parseJson, requireObject, requireSafeInteger } from '../protocol/json.js';
+import { validateCompleteObject } from '../protocol/validation.js';
+import { relayFailureCodec } from '../transport/relay-error.js';
+import { contentReferenceCodec, messageBodyCodec, validateAttachments, validateMessageBody } from './content.js';
+import { contactAuthorizationCodec, validateContactGrant, validateContactInvite } from './contacts.js';
+import { certificateId, deviceCertificateCodec, validateCertificate } from './identity.js';
+/** Complete wire business object. Unknown types may be stored but cannot authorize protocol state changes. */
+export const messagePayloadCodec = {
+    decode(value) {
+        const object = requireObject(value);
+        validateCompleteObject(object);
+        if (typeof object['$type'] !== 'string')
+            throw new ProtocolError('invalid_type', 'A message payload requires a string $type.');
+        return requireObject(parseJson(canonicalJson(object)));
+    },
+    encode(value) { return this.decode(value); },
+};
+export const encryptedPayloadCodec = defineCodec({ alg: { wire: 'alg', codec: text }, nonce: { wire: 'nonce', codec: bytes }, ciphertext: { wire: 'ciphertext', codec: bytes } });
+export function validateEncryptedPayload(value) {
+    validateCompleteObject(encryptedPayloadCodec.encode(value));
+    if (value.alg !== 'AES-256-GCM')
+        throw new ProtocolError('unsupported_algorithm', 'Message payload encryption must use AES-256-GCM.');
+    requireLength(value.nonce, 12, 'Payload nonce');
+    if (value.ciphertext.length <= 16)
+        throw new ProtocolError('invalid_ciphertext', 'Encrypted payload requires nonempty ciphertext and a GCM tag.');
+}
+export const messageEnvelopeCodec = defineCodec({ messageId: { wire: 'message_id', codec: text }, createdAt: { wire: 'created_at', codec: integer },
+    from: { wire: 'from', codec: text }, fromDeviceId: { wire: 'from_device_id', codec: text }, to: { wire: 'to', codec: text },
+    payload: { wire: 'payload', codec: encryptedPayloadCodec }, deviceSignature: { wire: 'device_signature', codec: bytes } }, 'meshline.message.envelope');
+export const messageEnvelopeInput = (value, context) => signingInput(messageEnvelopeCodec.encode(value), context, ['device_signature']);
+export function validateMessageEnvelope(value) {
+    validateCompleteObject(messageEnvelopeCodec.encode(value));
+    validateIdentifier('message', value.messageId);
+    validateIdentifier('device', value.fromDeviceId);
+    requireSafeInteger(value.createdAt, 0);
+    validateAccountId(value.from);
+    validateAccountId(value.to);
+    requireLength(value.deviceSignature, 64, 'Envelope signature');
+    validateEncryptedPayload(value.payload);
+    if (encodeUtf8(messageEnvelopeCodec.stringify(value)).length > 262144)
+        throw new ProtocolError('invalid_size', 'Message envelope exceeds 262144 canonical UTF-8 bytes.');
+}
+/** Historical signature integrity only. Current device authority is checked separately by the receiver's business workflow. */
+export function verifyMessageEnvelope(value, sender, context) {
+    validateMessageEnvelope(value);
+    validateCertificate(sender, context);
+    if (sender.account !== value.from || certificateId(sender, context) !== value.fromDeviceId)
+        throw new ProtocolError('invalid_identity', 'Envelope signing certificate belongs to another account or device.');
+    if (!verifyDevice(messageEnvelopeInput(value, context), value.deviceSignature, sender.signingPublicKey))
+        throw new ProtocolError('invalid_signature', 'Invalid message envelope signature.');
+}
+export const messageKeyBoxCodec = defineCodec({ deviceId: { wire: 'device_id', codec: text }, alg: { wire: 'alg', codec: text }, enc: { wire: 'enc', codec: bytes }, sealedKey: { wire: 'sealed_key', codec: bytes } });
+export function validateMessageKeyBox(value) {
+    validateCompleteObject(messageKeyBoxCodec.encode(value));
+    validateIdentifier('device', value.deviceId);
+    if (value.alg !== 'X25519-HKDF-SHA256-AES256GCM')
+        throw new ProtocolError('unsupported_algorithm', 'Unsupported message key box algorithm.');
+    requireLength(value.enc, 32, 'Ephemeral public key');
+    requireLength(value.sealedKey, 60, 'Sealed content key');
+}
+export function validateMessageKeyBoxes(values) {
+    if (values.length < 1 || values.length > 8)
+        throw new ProtocolError('invalid_size', 'Key box sets require between one and eight devices.');
+    const ids = new Set();
+    for (const value of values) {
+        validateMessageKeyBox(value);
+        if (ids.has(value.deviceId))
+            throw new ProtocolError('duplicate_device', 'Key box set contains a duplicate device.');
+        ids.add(value.deviceId);
+    }
+}
+export const messageSendRequestCodec = defineCodec({ envelope: { wire: 'envelope', codec: messageEnvelopeCodec }, senderBoxes: { wire: 'sender_boxes', codec: array(messageKeyBoxCodec), optional: true },
+    recipientBoxes: { wire: 'recipient_boxes', codec: array(messageKeyBoxCodec) }, authorization: { wire: 'authorization', codec: contactAuthorizationCodec, optional: true } });
+export function validateMessageSendRequest(value, now) {
+    validateCompleteObject(messageSendRequestCodec.encode(value));
+    requireSafeInteger(now, 0);
+    validateMessageEnvelope(value.envelope);
+    validateMessageKeyBoxes(value.recipientBoxes);
+    if (value.senderBoxes)
+        validateMessageKeyBoxes(value.senderBoxes);
+    if (value.envelope.from === value.envelope.to && (value.senderBoxes !== undefined || value.authorization !== undefined))
+        throw new ProtocolError('invalid_self_delivery', 'Self messages must omit sender boxes and contact authorization.');
+    if (value.authorization) {
+        if ('grantor' in value.authorization) {
+            validateContactGrant(value.authorization, now);
+            if (value.authorization.grantor !== value.envelope.to || value.authorization.grantee !== value.envelope.from)
+                throw new ProtocolError('invalid_authorization', 'Message grant has inconsistent account bindings.');
+        }
+        else {
+            validateContactInvite(value.authorization, now);
+            if (value.authorization.inviter !== value.envelope.to)
+                throw new ProtocolError('invalid_authorization', 'Message invitation belongs to another recipient.');
+        }
+    }
+}
+export const directMessageReferenceCodec = defineCodec({ from: { wire: 'from', codec: text }, messageId: { wire: 'message_id', codec: text } });
+export const directMessageCodec = defineCodec({ body: { wire: 'body', codec: messageBodyCodec, optional: true }, attachments: { wire: 'attachments', codec: array(contentReferenceCodec), optional: true },
+    replyTo: { wire: 'reply_to', codec: directMessageReferenceCodec, optional: true } }, 'meshline.message.direct');
+export function validateDirectMessage(value) {
+    validateCompleteObject(directMessageCodec.encode(value));
+    if (value.body)
+        validateMessageBody(value.body);
+    if (value.attachments)
+        validateAttachments(value.attachments);
+    if (!value.body && !value.attachments?.length)
+        throw new ProtocolError('invalid_message', 'A direct message requires a body or at least one attachment.');
+    if (value.replyTo) {
+        validateAccountId(value.replyTo.from);
+        validateIdentifier('message', value.replyTo.messageId);
+    }
+}
+export const messageTimelineEntryCodec = defineCodec({ sequence: { wire: 'sequence', codec: integer }, envelope: { wire: 'envelope', codec: messageEnvelopeCodec }, keyBox: { wire: 'key_box', codec: messageKeyBoxCodec }, acceptedAt: { wire: 'accepted_at', codec: integer } });
+export const messageTimelinePageCodec = defineCodec({ items: { wire: 'items', codec: array(messageTimelineEntryCodec) }, certificates: { wire: 'certificates', codec: array(deviceCertificateCodec) },
+    hasMore: { wire: 'has_more', codec: boolean }, hasRetentionGap: { wire: 'has_retention_gap', codec: boolean, optional: true } });
+/** Checks page ordering and certificate availability. Each entry still requires decryption and business validation before cursor commit. */
+export function validateMessageTimelinePage(value, context, after = -1) {
+    requireSafeInteger(after, -1);
+    validateCompleteObject(messageTimelinePageCodec.encode(value));
+    if (value.hasMore && !value.items.length)
+        throw new ProtocolError('invalid_pagination', 'An empty timeline page cannot have more items.');
+    const ids = new Map();
+    for (const certificate of value.certificates) {
+        validateCertificate(certificate, context);
+        const id = certificateId(certificate, context);
+        if (ids.has(id))
+            throw new ProtocolError('duplicate_device', 'Timeline page has duplicate signing certificates.');
+        ids.set(id, certificate.account);
+    }
+    for (const item of value.items) {
+        requireSafeInteger(item.sequence, 0);
+        requireSafeInteger(item.acceptedAt, 0);
+        if (item.sequence <= after)
+            throw new ProtocolError('invalid_sequence', 'Timeline sequences must increase strictly after the requested cursor.');
+        if (!ids.has(item.envelope.fromDeviceId))
+            throw new ProtocolError('missing_certificate', 'Timeline message has no signing certificate.');
+        if (ids.get(item.envelope.fromDeviceId) !== item.envelope.from)
+            throw new ProtocolError('invalid_identity', 'Timeline signing certificate belongs to another account.');
+        after = item.sequence;
+    }
+}
+export const messageTimelineQueryCodec = defineCodec({ after: { wire: 'after', codec: integer, optional: true }, limit: { wire: 'limit', codec: integer, optional: true } });
+export function validateMessageTimelineQuery(value) {
+    validateCompleteObject(messageTimelineQueryCodec.encode(value));
+    if (value.after !== undefined)
+        requireSafeInteger(value.after, -1);
+    if (value.limit !== undefined)
+        requireSafeInteger(value.limit, 1);
+}
+export const messageDeliveryQueryCodec = defineCodec({ messageId: { wire: 'message_id', codec: text } });
+export const messageDeliveryStatusCodec = defineCodec({ status: { wire: 'status', codec: enumeration('delivering', 'target_accepted', 'failed') }, error: { wire: 'error', codec: relayFailureCodec, optional: true }, acceptedAt: { wire: 'accepted_at', codec: integer } });
+export function validateMessageDeliveryStatus(value) {
+    validateCompleteObject(messageDeliveryStatusCodec.encode(value));
+    requireSafeInteger(value.acceptedAt, 0);
+    if ((value.status === 'failed') !== (value.error !== undefined))
+        throw new ProtocolError('invalid_delivery', 'Only failed delivery results must contain an error.');
+}
+export const deviceStateChangedCodec = defineCodec({ revision: { wire: 'revision', codec: integer } }, 'meshline.device.state.changed');
+export function validateDeviceStateChanged(value) { validateCompleteObject(deviceStateChangedCodec.encode(value)); requireSafeInteger(value.revision, 0); }
+export const messageTimelineChangedCodec = defineCodec({ head: { wire: 'head', codec: integer } });
+export function validateMessageTimelineChanged(value) { validateCompleteObject(messageTimelineChangedCodec.encode(value)); requireSafeInteger(value.head, 0); }
+//# sourceMappingURL=messages.js.map

package/dist/models/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/models/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAyC,MAAM,sBAAsB,CAAC;AAC7I,OAAO,EAAE,YAAY,EAAuB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACnH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAqB,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAA2C,MAAM,cAAc,CAAC;AAC1J,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,qBAAqB,EAA6B,MAAM,eAAe,CAAC;AAClI,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,mBAAmB,EAA0B,MAAM,eAAe,CAAC;AAEnH,8GAA8G;AAC9G,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IACvD,MAAM,CAAC,KAAK;QACR,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAC;QAC/H,OAAO,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CAC/C,CAAC;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAmB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACpM,MAAM,UAAU,wBAAwB,CAAC,KAAuB;IAC5D,sBAAsB,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,CAAC;IACtI,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,+DAA+D,CAAC,CAAC;AACtJ,CAAC;AAKD,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAkB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE;IAChK,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;IAC3H,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,2BAA2B,CAAC,CAAC;AAC5J,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAsB,EAAE,OAAuB,EAAc,EAAE,CAAC,YAAY,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACrL,MAAM,UAAU,uBAAuB,CAAC,KAAsB;IAC1D,sBAAsB,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACzI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpK,IAAI,UAAU,CAAC,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,wDAAwD,CAAC,CAAC;AAC7K,CAAC;AACD,+HAA+H;AAC/H,MAAM,UAAU,qBAAqB,CAAC,KAAsB,EAAE,MAAyB,EAAE,OAAuB;IAC5G,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC,YAAY;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,oEAAoE,CAAC,CAAC;IAC9M,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,qCAAqC,CAAC,CAAC;AACjM,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAgB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACvO,MAAM,UAAU,qBAAqB,CAAC,KAAoB;IACtD,sBAAsB,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,wCAAwC,CAAC,CAAC;IAC7I,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;AACnH,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,qDAAqD,CAAC,CAAC;IAC3I,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;AAChN,CAAC;AAID,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAqB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzN,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACjL,MAAM,UAAU,0BAA0B,CAAC,KAAyB,EAAE,GAAW;IAC7E,sBAAsB,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1F,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,WAAW;QAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC;QACnH,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,iEAAiE,CAAC,CAAC;IACxH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACtB,IAAI,SAAS,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACnC,oBAAoB,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,CAAC;QACvN,CAAC;aAAM,CAAC;YACJ,qBAAqB,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,CAAC;QAChK,CAAC;IACL,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAyB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAExK,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAgB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;IACrN,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;AACpH,MAAM,UAAU,qBAAqB,CAAC,KAAoB;IACtD,sBAAsB,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,IAAI;QAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,WAAW;QAAE,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,8DAA8D,CAAC,CAAC;IAC1J,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;AACzH,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAuB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAEzS,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAsB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,yBAAyB,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,sBAAsB,CAAC,EAAE;IACtN,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACrI,4IAA4I;AAC5I,MAAM,UAAU,2BAA2B,CAAC,KAA0B,EAAE,OAAuB,EAAE,KAAK,GAAG,CAAC,CAAC;IACvG,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAAC,sBAAsB,CAAC,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,gDAAgD,CAAC,CAAC;IAC1I,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,EAAE,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtI,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC1J,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7B,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,uEAAuE,CAAC,CAAC;QACjJ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;QACzI,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0DAA0D,CAAC,CAAC;QACxK,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1B,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAuB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACnM,MAAM,UAAU,4BAA4B,CAAC,KAA2B;IACpE,sBAAsB,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAuB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAG/H,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CAAwB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,YAAY,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACrS,MAAM,UAAU,6BAA6B,CAAC,KAA4B;IACtE,sBAAsB,CAAC,0BAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,qDAAqD,CAAC,CAAC;AACxK,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAqB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAC;AAC5J,MAAM,UAAU,0BAA0B,CAAC,KAAyB,IAAU,sBAAsB,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAErL,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAqC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACvI,MAAM,UAAU,8BAA8B,CAAC,KAAyC,IAAU,sBAAsB,CAAC,2BAA2B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/models/profile.d.ts

@@ -0,0 +1,24 @@
+import { type ExtensibleModel } from '../protocol/codec.js';
+import { type NetworkContext } from '../protocol/context.js';
+import { type ContentReference } from './content.js';
+import { type DeviceCertificate } from './identity.js';
+export interface AccountProfile extends ExtensibleModel {
+    readonly account: string;
+    readonly nickname?: string;
+    readonly avatar?: ContentReference;
+    readonly bio?: string;
+    readonly publicDiscovery: boolean;
+    readonly updatedAt: number;
+    readonly deviceSignature: Uint8Array;
+}
+export declare const accountProfileCodec: import("../protocol/codec.js").ProtocolCodec<AccountProfile>;
+export declare const profileInput: (value: AccountProfile, context: NetworkContext) => Uint8Array;
+export declare function validateProfile(value: AccountProfile): void;
+export interface ProfileResolveResult extends ExtensibleModel {
+    readonly profile: AccountProfile;
+    readonly signerCertificate: DeviceCertificate;
+}
+export declare const profileResolveResultCodec: import("../protocol/codec.js").ProtocolCodec<ProfileResolveResult>;
+/** The certificate is evidence at publication acceptance, not a claim of current device authorization. */
+export declare function validateProfileResult(value: ProfileResolveResult, context: NetworkContext, account?: string): void;
+//# sourceMappingURL=profile.d.ts.map

package/dist/models/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../src/models/profile.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8C,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAI3E,OAAO,EAA0E,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC7H,OAAO,EAA+C,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEpG,MAAM,WAAW,cAAe,SAAQ,eAAe;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAChH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;CACvG;AACD,eAAO,MAAM,mBAAmB,8DAIV,CAAC;AACvB,eAAO,MAAM,YAAY,UAAW,cAAc,WAAW,cAAc,KAAG,UAA4F,CAAC;AAC3K,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAY3D;AACD,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAAG,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAA;CAAE;AACjJ,eAAO,MAAM,yBAAyB,oEAEpC,CAAC;AACH,0GAA0G;AAC1G,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,SAAwB,GAAG,IAAI,CAMjI"}

package/dist/models/profile.js

@@ -0,0 +1,47 @@
+import { requireLength, verifyDevice } from '../crypto/primitives.js';
+import { ProtocolError } from '../errors.js';
+import { validateAccountId } from '../identity/neo.js';
+import { boolean, bytes, defineCodec, integer, text } from '../protocol/codec.js';
+import { signingInput } from '../protocol/context.js';
+import { encodeUtf8 } from '../protocol/encoding.js';
+import { requireSafeInteger } from '../protocol/json.js';
+import { validateCompleteObject } from '../protocol/validation.js';
+import { containsNonWhitespace, contentReferenceCodec, validateContentReference } from './content.js';
+import { deviceCertificateCodec, validateCertificate } from './identity.js';
+export const accountProfileCodec = defineCodec({
+    account: { wire: 'account', codec: text }, nickname: { wire: 'nickname', codec: text, optional: true },
+    avatar: { wire: 'avatar', codec: contentReferenceCodec, optional: true }, bio: { wire: 'bio', codec: text, optional: true },
+    publicDiscovery: { wire: 'public_discovery', codec: boolean }, updatedAt: { wire: 'updated_at', codec: integer }, deviceSignature: { wire: 'device_signature', codec: bytes },
+}, 'meshline.profile');
+export const profileInput = (value, context) => signingInput(accountProfileCodec.encode(value), context, ['device_signature']);
+export function validateProfile(value) {
+    validateCompleteObject(accountProfileCodec.encode(value));
+    validateAccountId(value.account);
+    requireSafeInteger(value.updatedAt, 0);
+    requireLength(value.deviceSignature, 64, 'Profile signature');
+    for (const [field, limit] of [[value.nickname, 256], [value.bio, 2048]]) {
+        if (field !== undefined && field !== '' && (!containsNonWhitespace(field) || encodeUtf8(field).length > limit))
+            throw new ProtocolError('invalid_profile_text', `Nonempty profile text must contain non-whitespace characters and fit ${limit} UTF-8 bytes.`);
+    }
+    if (value.avatar) {
+        validateContentReference(value.avatar);
+        if (!value.avatar.contentType.toLowerCase().startsWith('image/'))
+            throw new ProtocolError('invalid_avatar', 'An avatar requires an image media type.');
+    }
+    if (encodeUtf8(accountProfileCodec.stringify(value)).length > 8192)
+        throw new ProtocolError('invalid_size', 'Profile exceeds 8192 canonical JSON bytes.');
+}
+export const profileResolveResultCodec = defineCodec({
+    profile: { wire: 'profile', codec: accountProfileCodec }, signerCertificate: { wire: 'signer_certificate', codec: deviceCertificateCodec },
+});
+/** The certificate is evidence at publication acceptance, not a claim of current device authorization. */
+export function validateProfileResult(value, context, account = value.profile.account) {
+    validateCompleteObject(profileResolveResultCodec.encode(value));
+    validateProfile(value.profile);
+    validateCertificate(value.signerCertificate, context);
+    if (value.profile.account !== account || value.signerCertificate.account !== account)
+        throw new ProtocolError('invalid_identity', 'Profile or signer certificate belongs to another account.');
+    if (!verifyDevice(profileInput(value.profile, context), value.profile.deviceSignature, value.signerCertificate.signingPublicKey))
+        throw new ProtocolError('invalid_signature', 'Invalid profile device signature.');
+}
+//# sourceMappingURL=profile.js.map

package/dist/models/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/models/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAwB,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,YAAY,EAAuB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,wBAAwB,EAAyB,MAAM,cAAc,CAAC;AAC7H,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAA0B,MAAM,eAAe,CAAC;AAMpG,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAiB;IAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtG,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3H,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE;CAChL,EAAE,kBAAkB,CAAC,CAAC;AACvB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAqB,EAAE,OAAuB,EAAc,EAAE,CAAC,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC3K,MAAM,UAAU,eAAe,CAAC,KAAqB;IACjD,sBAAsB,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACxI,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAU,EAAE,CAAC;QAC/E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC;YAC1G,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,wEAAwE,KAAK,eAAe,CAAC,CAAC;IACtJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;IAC3J,CAAC;IACD,IAAI,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAC;AAC9J,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAuB;IACvE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,sBAAsB,EAAE;CAC7I,CAAC,CAAC;AACH,0GAA0G;AAC1G,MAAM,UAAU,qBAAqB,CAAC,KAA2B,EAAE,OAAuB,EAAE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO;IACvH,sBAAsB,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,iBAAiB,CAAC,OAAO,KAAK,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,2DAA2D,CAAC,CAAC;IAC/L,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QAC5H,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/models/relay.d.ts

@@ -0,0 +1,39 @@
+import { type ExtensibleModel } from '../protocol/codec.js';
+import { NetworkContext } from '../protocol/context.js';
+export interface RelayDescriptor extends ExtensibleModel {
+    readonly relayId: string;
+    readonly publicKey: Uint8Array;
+    readonly endpoints: readonly string[];
+    readonly capabilities?: readonly string[];
+    readonly expiresAt: number;
+    readonly relaySignature: Uint8Array;
+}
+export declare const relayDescriptorCodec: import("../protocol/codec.js").ProtocolCodec<RelayDescriptor>;
+export declare function relayDescriptorInput(descriptor: RelayDescriptor, context: NetworkContext): Uint8Array;
+export type RelayEndpoint = {
+    readonly kind: 'https' | 'wss' | 'unknown';
+} | {
+    readonly kind: 'libp2p-tcp';
+    readonly peerId: string;
+};
+export declare function validateRelayEndpoint(endpoint: string): RelayEndpoint;
+export declare function validateRelayDescriptor(descriptor: RelayDescriptor, context: NetworkContext, now: number): void;
+export interface RelayLimits extends ExtensibleModel {
+    readonly messageRetention: number;
+    readonly channelTimelineRetention?: number;
+    readonly maxChannelSubscriptions?: number;
+    readonly groupMessageRetention?: number;
+    readonly maxGroupMembers?: number;
+    readonly maxGroupSubscriptions?: number;
+    readonly maxGroupInviteTtl?: number;
+}
+export declare const relayLimitsCodec: import("../protocol/codec.js").ProtocolCodec<RelayLimits>;
+export interface RelayInfo extends ExtensibleModel {
+    readonly relayId: string;
+    readonly name: string;
+    readonly serverTime: number;
+    readonly limits: RelayLimits;
+}
+export declare const relayInfoCodec: import("../protocol/codec.js").ProtocolCodec<RelayInfo>;
+export declare function validateRelayInfo(info: RelayInfo, descriptor?: RelayDescriptor): void;
+//# sourceMappingURL=relay.d.ts.map

package/dist/models/relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.d.ts","sourceRoot":"","sources":["../../src/models/relay.ts"],"names":[],"mappings":"AAOA,OAAO,EAA4C,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAgB,MAAM,wBAAwB,CAAC;AAKtE,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;CACvC;AACD,eAAO,MAAM,oBAAoB,+DAIF,CAAC;AAEhC,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAErG;AAoBD,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACtI,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CA4BrE;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CA2B/G;AAED,MAAM,WAAW,WAAY,SAAQ,eAAe;IAChD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACvC;AACD,eAAO,MAAM,gBAAgB,2DAQ3B,CAAC;AACH,MAAM,WAAW,SAAU,SAAQ,eAAe;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE;AACjK,eAAO,MAAM,cAAc,yDAEzB,CAAC;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI,CAiBrF"}

package/dist/models/relay.js

@@ -0,0 +1,160 @@
+import { multiaddr } from '@multiformats/multiaddr';
+import { bases } from 'multiformats/basics';
+import { base58btc } from 'multiformats/bases/base58';
+import { create as createDigest, decode as decodeDigest } from 'multiformats/hashes/digest';
+import { requireLength } from '../crypto/primitives.js';
+import { ProtocolError } from '../errors.js';
+import { validateRelayId, verifyRelay } from '../identity/neo.js';
+import { array, bytes, defineCodec, integer, text } from '../protocol/codec.js';
+import { NetworkContext, signingInput } from '../protocol/context.js';
+import { encodeUtf8, equalBytes } from '../protocol/encoding.js';
+import { requireSafeInteger } from '../protocol/json.js';
+import { webEndpoint } from '../transport/endpoint.js';
+export const relayDescriptorCodec = defineCodec({
+    relayId: { wire: 'relay_id', codec: text }, publicKey: { wire: 'public_key', codec: bytes },
+    endpoints: { wire: 'endpoints', codec: array(text) }, capabilities: { wire: 'capabilities', codec: array(text), optional: true },
+    expiresAt: { wire: 'expires_at', codec: integer }, relaySignature: { wire: 'relay_signature', codec: bytes },
+}, 'meshline.relay.descriptor');
+export function relayDescriptorInput(descriptor, context) {
+    return signingInput(relayDescriptorCodec.encode(descriptor), context, ['relay_signature']);
+}
+/** Normalized multihash identity, independent of a peer ID's allowed base/CID spelling. */
+function peerIdentity(value) {
+    let hashBytes;
+    if (value.startsWith('Qm') || value.startsWith('1'))
+        hashBytes = base58btc.decode('z' + value);
+    else {
+        const base = Object.values(bases).find(base => value.startsWith(base.prefix));
+        if (!base)
+            throw new ProtocolError('invalid_peer', 'Unknown peer ID multibase.');
+        const cid = base.decode(value);
+        if (cid[0] !== 1 || cid[1] !== 0x72)
+            throw new ProtocolError('invalid_peer', 'Peer IDs require CIDv1 libp2p-key.');
+        hashBytes = cid.subarray(2);
+    }
+    const digest = decodeDigest(hashBytes);
+    if (!(digest.code === 0x12 && digest.size === 32 || digest.code === 0 && digest.size > 0 && digest.size <= 42)
+        || !equalBytes(hashBytes, createDigest(digest.code, digest.digest).bytes))
+        throw new ProtocolError('invalid_peer', 'Invalid or noncanonical peer multihash.');
+    return base58btc.encode(hashBytes).slice(1);
+}
+export function validateRelayEndpoint(endpoint) {
+    if (typeof endpoint !== 'string' || endpoint.length === 0)
+        throw new ProtocolError('invalid_endpoint', 'Relay endpoints must be nonempty strings.');
+    const candidate = endpoint.trimStart();
+    if (/^(https|wss):/i.test(candidate)) {
+        const url = webEndpoint(endpoint);
+        return { kind: url.protocol === 'https:' ? 'https' : 'wss' };
+    }
+    if (!candidate.startsWith('/') || !candidate.includes('/tcp/') && !candidate.endsWith('/tcp'))
+        return { kind: 'unknown' };
+    if (!endpoint.startsWith('/') || endpoint.endsWith('/') || endpoint.includes('//') || /[\s\p{Cc}]/u.test(endpoint))
+        throw new ProtocolError('invalid_endpoint', 'Malformed libp2p TCP endpoint.');
+    try {
+        const parts = endpoint.split('/');
+        if (parts.at(-2) !== 'p2p')
+            throw new Error('Endpoint must end with a peer ID.');
+        const peerId = peerIdentity(parts.at(-1));
+        for (let i = 0; i < parts.length; i++)
+            if (parts[i] === 'tcp' && !/^[0-9]+$/.test(parts[i + 1] ?? ''))
+                throw new Error('Invalid TCP port.');
+        const address = multiaddr(endpoint.slice(0, endpoint.lastIndexOf('/p2p/')) + '/p2p/' + peerId);
+        // Parsing textual components alone is lazy; encoding validates IP and port values.
+        void address.bytes;
+        const components = address.getComponents();
+        if (components.length < 3 || components[1].name !== 'tcp' || Number(components[1].value) <= 0
+            || components.filter(item => item.name === 'tcp').length !== 1 || components.filter(item => item.name === 'p2p').length !== 1
+            || components.at(-1).name !== 'p2p')
+            throw new Error('Expected host/TCP/.../peer endpoint.');
+        const host = components[0];
+        if (!['ip4', 'ip6', 'dns', 'dns4', 'dns6'].includes(host.name))
+            throw new Error('Invalid multiaddr host type.');
+        if (host.name.startsWith('dns')) {
+            const hostname = parseAbsoluteUrl(`https://${host.value}`).hostname;
+            if (hostname.startsWith('[') || /^[0-9.]+$/.test(hostname) || hostname.length > 255
+                || !hostname.replace(/\.$/, '').split('.').every(label => /^[a-z0-9_][a-z0-9_-]{0,62}$/i.test(label)))
+                throw new Error('Invalid DNS host.');
+        }
+        return { kind: 'libp2p-tcp', peerId };
+    }
+    catch (cause) {
+        throw new ProtocolError('invalid_endpoint', 'Invalid libp2p TCP relay endpoint.', { cause });
+    }
+}
+export function validateRelayDescriptor(descriptor, context, now) {
+    validateCompleteObject(relayDescriptorCodec.encode(descriptor));
+    requireSafeInteger(now, 0);
+    requireSafeInteger(descriptor.expiresAt, 0);
+    validateRelayId(descriptor.relayId);
+    requireLength(descriptor.publicKey, 33, 'Relay public key');
+    requireLength(descriptor.relaySignature, 64, 'Relay signature');
+    if (descriptor.expiresAt <= now)
+        throw new ProtocolError('expired_descriptor', 'The relay descriptor has expired.');
+    if (!Array.isArray(descriptor.endpoints) || descriptor.endpoints.length === 0)
+        throw new ProtocolError('invalid_endpoint', 'Relay endpoints must be a nonempty array.');
+    const endpoints = new Set();
+    let hasHttps = false;
+    let peer;
+    for (const endpoint of descriptor.endpoints) {
+        if (endpoints.has(endpoint))
+            throw new ProtocolError('duplicate_endpoint', 'Relay endpoints cannot contain duplicates.');
+        endpoints.add(endpoint);
+        const validated = validateRelayEndpoint(endpoint);
+        if (validated.kind === 'https')
+            hasHttps = true;
+        if (validated.kind === 'libp2p-tcp') {
+            if (peer !== undefined && peer !== validated.peerId)
+                throw new ProtocolError('invalid_peer', 'All libp2p TCP endpoints must identify the same peer.');
+            peer = validated.peerId;
+        }
+    }
+    if (!hasHttps || peer === undefined)
+        throw new ProtocolError('missing_endpoint', 'A relay must advertise HTTPS and libp2p TCP endpoints.');
+    const capabilities = descriptor.capabilities ?? [];
+    if (!Array.isArray(capabilities) || capabilities.length > 64 || new Set(capabilities).size !== capabilities.length)
+        throw new ProtocolError('invalid_capabilities', 'Capabilities must be distinct and contain at most 64 entries.');
+    for (const value of capabilities)
+        if (value.length === 0 || encodeUtf8(value).length > 128)
+            throw new ProtocolError('invalid_capabilities', 'Capabilities must contain 1 to 128 UTF-8 bytes.');
+    if (!verifyRelay(descriptor.relayId, descriptor.publicKey, relayDescriptorInput(descriptor, context), descriptor.relaySignature))
+        throw new ProtocolError('invalid_signature', 'The descriptor signature does not identify this relay.');
+}
+export const relayLimitsCodec = defineCodec({
+    messageRetention: { wire: 'message_retention', codec: integer },
+    channelTimelineRetention: { wire: 'channel_timeline_retention', codec: integer, optional: true },
+    maxChannelSubscriptions: { wire: 'max_channel_subscriptions', codec: integer, optional: true },
+    groupMessageRetention: { wire: 'group_message_retention', codec: integer, optional: true },
+    maxGroupMembers: { wire: 'max_group_members', codec: integer, optional: true },
+    maxGroupSubscriptions: { wire: 'max_group_subscriptions', codec: integer, optional: true },
+    maxGroupInviteTtl: { wire: 'max_group_invite_ttl', codec: integer, optional: true },
+});
+export const relayInfoCodec = defineCodec({
+    relayId: { wire: 'relay_id', codec: text }, name: { wire: 'name', codec: text }, serverTime: { wire: 'server_time', codec: integer }, limits: { wire: 'limits', codec: relayLimitsCodec },
+});
+export function validateRelayInfo(info, descriptor) {
+    validateCompleteObject(relayInfoCodec.encode(info));
+    validateRelayId(info.relayId);
+    requireSafeInteger(info.serverTime, 0);
+    if (info.name.trim().length === 0 || encodeUtf8(info.name).length > 256)
+        throw new ProtocolError('invalid_name', 'Relay name must be nonblank and at most 256 UTF-8 bytes.');
+    requireSafeInteger(info.limits.messageRetention, 1);
+    for (const value of [info.limits.channelTimelineRetention, info.limits.groupMessageRetention, info.limits.maxGroupMembers, info.limits.maxGroupInviteTtl])
+        if (value !== undefined)
+            requireSafeInteger(value, 1);
+    for (const value of [info.limits.maxChannelSubscriptions, info.limits.maxGroupSubscriptions])
+        if (value !== undefined)
+            requireSafeInteger(value, 0);
+    if (descriptor) {
+        if (info.relayId !== descriptor.relayId)
+            throw new ProtocolError('invalid_identity', 'Relay info belongs to a different relay.');
+        const sockets = descriptor.endpoints.some(endpoint => endpoint.startsWith('wss://'));
+        const limits = info.limits;
+        if (descriptor.capabilities?.includes('channel.host.v1') && (limits.channelTimelineRetention === undefined || sockets && limits.maxChannelSubscriptions === undefined)
+            || descriptor.capabilities?.includes('group.host.v1') && (limits.groupMessageRetention === undefined || limits.maxGroupMembers === undefined
+                || limits.maxGroupInviteTtl === undefined || sockets && limits.maxGroupSubscriptions === undefined))
+            throw new ProtocolError('missing_limits', 'Relay info omits limits required by its advertised capabilities.');
+    }
+}
+import { validateCompleteObject } from '../protocol/validation.js';
+import { parseAbsoluteUrl } from '../runtime/url.js';
+//# sourceMappingURL=relay.js.map

package/dist/models/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../src/models/relay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAwB,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAUvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAkB;IAC7D,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE;IAC3F,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;IAChI,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE;CAC/G,EAAE,2BAA2B,CAAC,CAAC;AAEhC,MAAM,UAAU,oBAAoB,CAAC,UAA2B,EAAE,OAAuB;IACrF,OAAO,YAAY,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,2FAA2F;AAC3F,SAAS,YAAY,CAAC,KAAa;IAC/B,IAAI,SAAqB,CAAC;IAC1B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;SAC1F,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAC;QACnH,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;WACvG,CAAC,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;QACzE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;IACvF,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAGD,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;IACpJ,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACvC,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC1I,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1H,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9G,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,CAAC;IAClF,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5I,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC;QAC/F,mFAAmF;QACnF,KAAK,OAAO,CAAC,KAAK,CAAC;QACnB,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC;eACxF,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;eAC1H,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC;YACpE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;mBAC5E,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACpJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,oCAAoC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAA2B,EAAE,OAAuB,EAAE,GAAW;IACrG,sBAAsB,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACxE,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,aAAa,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAAC,aAAa,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC7H,IAAI,UAAU,CAAC,SAAS,IAAI,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;IACpH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;IACxK,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,4CAA4C,CAAC,CAAC;QACzH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;YAAE,QAAQ,GAAG,IAAI,CAAC;QAChD,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,CAAC,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,uDAAuD,CAAC,CAAC;YACtJ,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,wDAAwD,CAAC,CAAC;IAC3I,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM;QAC9G,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,+DAA+D,CAAC,CAAC;IACrH,KAAK,MAAM,KAAK,IAAI,YAAY;QAAE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,iDAAiD,CAAC,CAAC;IAC/L,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,cAAc,CAAC;QAC5H,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,wDAAwD,CAAC,CAAC;AAC/G,CAAC;AAWD,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAc;IACrD,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE;IAC/D,wBAAwB,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAChG,uBAAuB,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9F,qBAAqB,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC1F,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9E,qBAAqB,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC1F,iBAAiB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;CACtF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAY;IACjD,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE;CAC5L,CAAC,CAAC;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAe,EAAE,UAA4B;IAC3E,sBAAsB,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,0DAA0D,CAAC,CAAC;IAC7K,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACrJ,IAAI,KAAK,KAAK,SAAS;YAAE,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAAE,IAAI,KAAK,KAAK,SAAS;YAAE,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpJ,IAAI,UAAU,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;QACjI,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,KAAK,SAAS,IAAI,OAAO,IAAI,MAAM,CAAC,uBAAuB,KAAK,SAAS,CAAC;eAC/J,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;mBACrI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,CAAC;YACvG,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;IACtH,CAAC;AACL,CAAC;AACD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/protocol/codec.d.ts

@@ -0,0 +1,36 @@
+import { type JsonObject, type JsonValue } from './json.js';
+/** Unknown wire fields remain distinct from the application's camelCase members. */
+export interface ExtensibleModel {
+    readonly additionalProperties?: JsonObject;
+}
+/** A model codec enforces wire representation; domain validators enforce authorization. */
+export interface ProtocolCodec<T> {
+    decode(value: JsonValue): T;
+    encode(value: T): JsonObject;
+    parse(input: string | Uint8Array): T;
+    stringify(value: T): string;
+}
+export interface ValueCodec<T> {
+    decode(value: JsonValue): T;
+    encode(value: T): JsonValue;
+}
+export declare const text: ValueCodec<string>;
+export declare const integer: ValueCodec<number>;
+export declare const boolean: ValueCodec<boolean>;
+export declare const bytes: ValueCodec<Uint8Array>;
+export declare function array<T>(item: ValueCodec<T>): ValueCodec<readonly T[]>;
+export declare function dictionary<T>(item: ValueCodec<T>): ValueCodec<Readonly<Record<string, T>>>;
+export declare function enumeration<const T extends string>(...values: T[]): ValueCodec<T>;
+export interface Field<T> {
+    readonly wire: string;
+    readonly codec: ValueCodec<T>;
+    readonly optional?: boolean;
+    readonly nullable?: boolean;
+}
+type Fields<T> = {
+    [K in Exclude<keyof T, 'additionalProperties'>]-?: Field<Exclude<T[K], null | undefined>>;
+};
+/** Creates an explicit mapping without guessing wire names or discarding signed extensions. */
+export declare function defineCodec<T extends ExtensibleModel>(fields: Fields<T>, type?: string): ProtocolCodec<T>;
+export {};
+//# sourceMappingURL=codec.d.ts.map

package/dist/protocol/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../src/protocol/codec.ts"],"names":[],"mappings":"AAEA,OAAO,EAA+D,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAEzH,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAAG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,UAAU,CAAA;CAAE;AAE/E,2FAA2F;AAC3F,MAAM,WAAW,aAAa,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC;IAC7B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC;IACrC,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IACzB,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC;CAC/B;AAED,eAAO,MAAM,IAAI,EAAE,UAAU,CAAC,MAAM,CAMnC,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,UAAU,CAAC,MAAM,CAGtC,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,UAAU,CAAC,OAAO,CAMvC,CAAC;AAEF,eAAO,MAAM,KAAK,EAAE,UAAU,CAAC,UAAU,CAMxC,CAAC;AAEF,wBAAgB,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAWtE;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAc1F;AAED,wBAAgB,WAAW,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAQjF;AAED,MAAM,WAAW,KAAK,CAAC,CAAC;IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE;AAC5I,KAAK,MAAM,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC,CAAC;CAAE,CAAC;AAE/G,+FAA+F;AAC/F,wBAAgB,WAAW,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAmDzG"}