@pkcprotocol/pkc-js 0.0.78 → 0.0.80

package/dist/bundled/chunks/{rpc-local-community-DHhucg8-.js → rpc-local-community-Cog5rZLG.js}

@@ -1,10 +1,10 @@
 import { i as __toESM, n as __exportAll, r as __require, t as __commonJSMin } from "./chunk-2rV9d50f.js";
-import { $ as pubsubTopicToDhtKey, $n as n$9, $t as CommunityChallengeSettingSchema, A as extractNetworkErrorDetails, Ar as object, At as trackStartedCommunity, B as isIpfsCid, Cn as CommentUpdateChallengeReservedFieldNames, Ct as findUpdatingCommunity, D as deepMergeRuntimeFields, Dn as CommentUpdateSchema, Dr as custom, E as createAbortError, En as CommentUpdateReservedFields, Er as boolean, Et as listUpdatingCommunities, Fn as CommentEditChallengeRequestToEncryptSchema, Ft as untrackUpdatingCommunity, Gn as ChallengeAnswersSchema, Gt as CommentModerationPubsubMessagePublicationSchema, H as isIpns, Hn as AuthorAddressSchema, Ht as CommunityEditPubsubMessagePublicationSchema, I as getPostUpdateTimestampRange, It as require_sha256$1, Jn as CommunityAddressSchema, Jt as CommentModerationsTableRowSchema, Kn as CidPathSchema, L as hideClassPrivateProps, Ln as CommentEditPubsubMessagePublicationWithFlexibleAuthorSchema, Mn as GetPageParamSchema, Mr as string, Mt as trackUpdatingCommunity, Nn as ModQueuePageIpfsSchema, Nt as untrackStartedCommunity, O as derivePublicationFromChallengeRequest, On as CommentUpdateSignedPropertyNames, Or as literal, Ot as refreshTrackedCommunityAliases, Pn as PageIpfsSchema, Q as isStringDomain, R as ipnsNameToIpnsOverPubsubTopic, Rt as pTimeout, Sn as CommentSignedPropertyNames, Sr as require_ms$1, St as findUpdatingComment, Tn as CommentUpdateForChallengeVerificationSignedPropertyNames, Tr as array, U as isIpnsPath, Un as AuthorCommentIpfsReservedFields, Ut as CreateCommunityEditPublicationOptionsWithRefinementSchema, V as isIpfsPath, Vn as CreateCommentEditOptionsWithRefinementSchema, Vt as CommunityEditPublicationSignedPropertyNames, Wt as CommentModerationChallengeRequestToEncryptSchema, X as isRequestPubsubPublicationOfPost, Xn as CreateSignerSchema, Xt as ChallengeFileFactorySchema, Yn as CommunityAuthorChallengeReservedFieldNames, Yt as CreateCommentModerationOptionsWithRefinementSchema, Z as isRequestPubsubPublicationOfReply, Zn as n$10, Zt as ChallengeFileSchema, _ as PKCUserOptionBaseSchema, _n as CommentChallengeRequestToEncryptSchema, _r as FailedToFetchPageIpfsFromGatewaysError, _t as timestamp, an as CreateNewLocalCommunityUserOptionsSchema, ar as r$8, b as areEquivalentCommunityAddresses, br as logger_default, c as ChallengeVerificationMessageSignedPropertyNames, cn as ExportCommunityModLogsOptionsSchema, cr as r$7, ct as resolveWhenPredicateIsTrue, dn as CreateVoteUserOptionsWithRefinementSchema, dr as e$4, en as CommunityEditOptionsSchema, f as DecryptedChallengeSchema, fn as VoteChallengeRequestToEncryptSchema, fr as require_retry$1, ft as shortifyAddress, g as PKCParsedOptionsSchema, gr as FailedToFetchGenericIpfsFromGatewaysError, gt as throwIfAbortSignalAborted, h as NameResolverSerializedSchema, hn as VoteSignedPropertyNames, hr as FailedToFetchCommunityFromGatewaysError, i as ChallengeMessageSignedPropertyNames, in as CommunitySignedPropertyNames, ir as t$11, it as removeNullUndefinedEmptyObjectsValuesRecursively, j as fetchAndValidateIpnsRecordFromGateway, jn as CreateCommentOptionsWithRefinementSchema, jr as record, k as doesDomainAddressHaveCapitalLetter, kr as number, l as DecryptedChallengeAnswerSchema, lr as t$10, m as NameResolveCacheOptionsSchema, mr as FailedToFetchCommentUpdateFromGatewaysError, mt as sleepUntilTimeoutOrAbort, n as ChallengeAnswerMessageSignedPropertyNames, nn as CommunityIpfsReservedFields, nr as e$6, o as ChallengeRequestMessageSignedPropertyNames, on as CreateRemoteCommunityFunctionArgumentSchema, or as t$12, p as DecryptedChallengeVerificationSchema, pn as VotePubsubMessagePublicationSchema, pr as FailedToFetchCommentIpfsFromGatewaysError, pt as shortifyCid, qn as CidStringSchema, qt as CommentModerationSignedPropertyNames, rn as CommunityIpfsSchema, rr as e$5, sn as CreateRpcCommunityFunctionArgumentSchema, sr as n$8, tn as CommunityExportRecordsSchema, tr as t$13, tt as raceAgainstAbort, un as RpcRemoteCommunityUpdateEventResultSchema, ur as t$9, v as PKCUserOptionsSchema, vn as CommentIpfsReservedFields, vr as PKCError, vt as waitForUpdateInCommunityInstanceWithErrorAndTimeout, wr as _enum, wt as listStartedCommunities, x as calculateIpfsCidV0, xn as CommentPubsubMessageWithFlexibleAuthorRefinementSchema, xr as require_supports_color, xt as findStartedCommunity, yn as CommentIpfsSchema, yr as messages, z as isAbortError, zn as CommentEditSignedPropertyNames, zt as CommunityEditPublicationChallengeRequestToEncryptSchema } from "./schema-CH2yoI0b.js";
+import { $ as pubsubTopicToDhtKey, $n as n$9, $t as CommunityChallengeSettingSchema, A as extractNetworkErrorDetails, Ar as object, At as trackStartedCommunity, B as isIpfsCid, Cn as CommentUpdateChallengeReservedFieldNames, Ct as findUpdatingCommunity, D as deepMergeRuntimeFields, Dn as CommentUpdateSchema, Dr as custom, E as createAbortError, En as CommentUpdateReservedFields, Er as boolean, Et as listUpdatingCommunities, Fn as CommentEditChallengeRequestToEncryptSchema, Ft as untrackUpdatingCommunity, Gn as ChallengeAnswersSchema, Gt as CommentModerationPubsubMessagePublicationSchema, H as isIpns, Hn as AuthorAddressSchema, Ht as CommunityEditPubsubMessagePublicationSchema, I as getPostUpdateTimestampRange, It as require_sha256$1, Jn as CommunityAddressSchema, Jt as CommentModerationsTableRowSchema, Kn as CidPathSchema, L as hideClassPrivateProps, Ln as CommentEditPubsubMessagePublicationWithFlexibleAuthorSchema, Mn as GetPageParamSchema, Mr as string, Mt as trackUpdatingCommunity, Nn as ModQueuePageIpfsSchema, Nt as untrackStartedCommunity, O as derivePublicationFromChallengeRequest, On as CommentUpdateSignedPropertyNames, Or as literal, Ot as refreshTrackedCommunityAliases, Pn as PageIpfsSchema, Q as isStringDomain, R as ipnsNameToIpnsOverPubsubTopic, Rt as pTimeout, Sn as CommentSignedPropertyNames, Sr as require_ms$1, St as findUpdatingComment, Tn as CommentUpdateForChallengeVerificationSignedPropertyNames, Tr as array, U as isIpnsPath, Un as AuthorCommentIpfsReservedFields, Ut as CreateCommunityEditPublicationOptionsWithRefinementSchema, V as isIpfsPath, Vn as CreateCommentEditOptionsWithRefinementSchema, Vt as CommunityEditPublicationSignedPropertyNames, Wt as CommentModerationChallengeRequestToEncryptSchema, X as isRequestPubsubPublicationOfPost, Xn as CreateSignerSchema, Xt as ChallengeFileFactorySchema, Yn as CommunityAuthorChallengeReservedFieldNames, Yt as CreateCommentModerationOptionsWithRefinementSchema, Z as isRequestPubsubPublicationOfReply, Zn as n$10, Zt as ChallengeFileSchema, _ as PKCUserOptionBaseSchema, _n as CommentChallengeRequestToEncryptSchema, _r as FailedToFetchPageIpfsFromGatewaysError, _t as timestamp, an as CreateNewLocalCommunityUserOptionsSchema, ar as r$8, b as areEquivalentCommunityAddresses, br as logger_default, c as ChallengeVerificationMessageSignedPropertyNames, cn as ExportCommunityModLogsOptionsSchema, cr as r$7, ct as resolveWhenPredicateIsTrue, dn as CreateVoteUserOptionsWithRefinementSchema, dr as e$4, en as CommunityEditOptionsSchema, f as DecryptedChallengeSchema, fn as VoteChallengeRequestToEncryptSchema, fr as require_retry$1, ft as shortifyAddress, g as PKCParsedOptionsSchema, gr as FailedToFetchGenericIpfsFromGatewaysError, gt as throwIfAbortSignalAborted, h as NameResolverSerializedSchema, hn as VoteSignedPropertyNames, hr as FailedToFetchCommunityFromGatewaysError, i as ChallengeMessageSignedPropertyNames, in as CommunitySignedPropertyNames, ir as t$11, it as removeNullUndefinedEmptyObjectsValuesRecursively, j as fetchAndValidateIpnsRecordFromGateway, jn as CreateCommentOptionsWithRefinementSchema, jr as record, k as doesDomainAddressHaveCapitalLetter, kr as number, l as DecryptedChallengeAnswerSchema, lr as t$10, m as NameResolveCacheOptionsSchema, mr as FailedToFetchCommentUpdateFromGatewaysError, mt as sleepUntilTimeoutOrAbort, n as ChallengeAnswerMessageSignedPropertyNames, nn as CommunityIpfsReservedFields, nr as e$6, o as ChallengeRequestMessageSignedPropertyNames, on as CreateRemoteCommunityFunctionArgumentSchema, or as t$12, p as DecryptedChallengeVerificationSchema, pn as VotePubsubMessagePublicationSchema, pr as FailedToFetchCommentIpfsFromGatewaysError, pt as shortifyCid, qn as CidStringSchema, qt as CommentModerationSignedPropertyNames, rn as CommunityIpfsSchema, rr as e$5, sn as CreateRpcCommunityFunctionArgumentSchema, sr as n$8, tn as CommunityExportRecordsSchema, tr as t$13, tt as raceAgainstAbort, un as RpcRemoteCommunityUpdateEventResultSchema, ur as t$9, v as PKCUserOptionsSchema, vn as CommentIpfsReservedFields, vr as PKCError, vt as waitForUpdateInCommunityInstanceWithErrorAndTimeout, wr as _enum, wt as listStartedCommunities, x as calculateIpfsCidV0, xn as CommentPubsubMessageWithFlexibleAuthorRefinementSchema, xr as require_supports_color, xt as findStartedCommunity, yn as CommentIpfsSchema, yr as messages, z as isAbortError, zn as CommentEditSignedPropertyNames, zt as CommunityEditPublicationChallengeRequestToEncryptSchema } from "./schema-Iavj-cRD.js";
 import { t as all } from "./src-CYIMjhjK.js";
 import http from "node:http";
 import { createHash } from "node:crypto";
 import { pathToFileURL } from "node:url";
-import fsp from "node:fs/promises";
+import fs from "node:fs/promises";
 import path from "node:path";
 import dns from "node:dns";
 import os from "os";
@@ -88345,7 +88345,7 @@ var require_package$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region node_modules/needle/lib/needle.js
 var require_needle = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var fs = __require("fs"), http$2 = __require("http"), https$1 = __require("https"), url = __require("url"), stream = __require("stream"), debug$2 = require_src()("needle"), stringify$1 = require_querystring().build, multipart = require_multipart(), auth = require_auth(), cookies = require_cookies(), parsers = require_parsers(), decoder = require_decoder();
+	var fs$1 = __require("fs"), http$2 = __require("http"), https$1 = __require("https"), url = __require("url"), stream = __require("stream"), debug$2 = require_src()("needle"), stringify$1 = require_querystring().build, multipart = require_multipart(), auth = require_auth(), cookies = require_cookies(), parsers = require_parsers(), decoder = require_decoder();
 	var version = require_package$1().version;
 	var user_agent = "Needle/" + version;
 	user_agent += " (Node.js " + process.version + "; " + process.platform + " " + process.arch + ")";
@@ -88437,7 +88437,7 @@ var require_needle = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function get_stream_length(stream, given_length, cb) {
 		if (given_length > 0) return cb(given_length);
 		if (stream.end !== void 0 && stream.end !== Infinity && stream.start !== void 0) return cb(stream.end + 1 - (stream.start || 0));
-		fs.stat(stream.path, function(err, stat) {
+		fs$1.stat(stream.path, function(err, stat) {
 			cb(stat ? stat.size - (stream.start || 0) : null);
 		});
 	}
@@ -88700,7 +88700,7 @@ var require_needle = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				if (err && err.message == "write after end") request.destroy();
 			});
 			if (config.output && resp.statusCode == 200) {
-				var file = fs.createWriteStream(config.output);
+				var file = fs$1.createWriteStream(config.output);
 				file.on("error", had_error);
 				out.on("end", function() {
 					if (file.writable) file.end();
@@ -97817,7 +97817,7 @@ function _allFieldsOfRecordInSignedPropertyNames(record) {
 async function verifyCommunity({ community, communityIpnsHops, resolveAuthorNames, clientsManager, validatePages, cacheIfValid, abortSignal }) {
 	const log = logger_default("pkc-js:signatures:verifyCommunity");
 	if (!Array.isArray(communityIpnsHops) || communityIpnsHops.length === 0) throw Error("verifyCommunity needs a non-empty communityIpnsHops to verify a community record against");
-	const communityIdentityIpnsName = communityIpnsHops[0];
+	const communityIdentityIpnsName = community.anchor?.publicKey ?? communityIpnsHops[0];
 	const terminalIpnsName = communityIpnsHops[communityIpnsHops.length - 1];
 	if (!_allFieldsOfRecordInSignedPropertyNames(community)) return {
 		valid: false,
@@ -97827,6 +97827,10 @@ async function verifyCommunity({ community, communityIpnsHops, resolveAuthorName
 		valid: false,
 		reason: messages.ERR_COMMUNITY_RECORD_INCLUDES_RESERVED_FIELD
 	};
+	if (communityIpnsHops.length > 1 && community.anchor?.publicKey !== communityIpnsHops[0]) return {
+		valid: false,
+		reason: messages.ERR_COMMUNITY_RECORD_ANCHOR_CLAIM_DOES_NOT_MATCH_CHAIN_ANCHOR
+	};
 	if (!await _verifyJsonSignature(community)) return {
 		valid: false,
 		reason: messages.ERR_COMMUNITY_SIGNATURE_IS_INVALID
@@ -97838,7 +97842,8 @@ async function verifyCommunity({ community, communityIpnsHops, resolveAuthorName
 	const communityForPages = {
 		publicKey: communityIdentityIpnsName,
 		name: community.name,
-		signature: community.signature
+		signature: community.signature,
+		anchor: community.anchor
 	};
 	if (community.posts?.pages && validatePages) for (const preloadedPageSortName of t$13(community.posts.pages)) {
 		const pageCid = community.posts.pageCids?.[preloadedPageSortName];
@@ -98053,6 +98058,13 @@ async function verifyPageComment({ pageComment, community, parentComment, resolv
 		};
 	}
 	const commentRecord = pageComment.comment;
+	if (community.anchor?.publicKey) {
+		const communityPublicKeyFromRecord = getCommunityPublicKeyFromWire(commentRecord);
+		if (communityPublicKeyFromRecord && !areEquivalentCommunityAddresses(communityPublicKeyFromRecord, community.anchor.publicKey)) return {
+			valid: false,
+			reason: messages.ERR_COMMENT_IN_PAGE_BELONG_TO_DIFFERENT_COMMUNITY
+		};
+	}
 	if (community.name) {
 		const communityNameFromRecord = getCommunityNameFromWire$1(commentRecord);
 		if (communityNameFromRecord && !areEquivalentCommunityAddresses(communityNameFromRecord, community.name)) return {
@@ -124882,9 +124894,12 @@ var CommunityClientsManager = class extends PKCClientsManager {
 				newUpdatingState: "failed"
 			});
 		} else if (communityLoadingRes?.community && (this._community.raw.communityIpfs?.updatedAt || 0) < communityLoadingRes.community.updatedAt) {
+			const publicKeyBeforeApply = this._community.publicKey;
 			this._community.initCommunityIpfsPropsNoMerge(communityLoadingRes.community);
 			this._community.updateCid = communityLoadingRes.cid;
+			if (publicKeyBeforeApply && this._community.publicKey !== publicKeyBeforeApply) this._community.nameResolved = void 0;
 			if (!isStringDomain(this._community.address) && this._community.name && this._community.publicKey && typeof this._community.nameResolved !== "boolean") this._resolveNameInBackground(this._community.name);
+			else if (isStringDomain(this._community.address) && this._community.publicKey && typeof this._community.nameResolved !== "boolean") this._resolveNameInBackground(this._community.address);
 			log(`Remote Community`, this._community.address, `received a new update. Will emit an update event with updatedAt`, this._community.updatedAt, "that's", timestamp() - this._community.updatedAt, "seconds old");
 			this._community._changeStateEmitEventEmitStateChangeEvent({
 				event: {
@@ -124927,6 +124942,14 @@ var CommunityClientsManager = class extends PKCClientsManager {
 			this._suppressUpdatingStateForNameResolution--;
 		}
 	}
+	_nonAnchorHopsOfLoadedChain() {
+		const loadedRecord = this._community.raw.communityIpfs;
+		if (!loadedRecord) return void 0;
+		const chainKeys = new Set(this._community.ipnsHops ?? []);
+		chainKeys.add(getPKCAddressFromPublicKeySync(loadedRecord.signature.publicKey));
+		if (this._community.publicKey) chainKeys.delete(this._community.publicKey);
+		return [...chainKeys];
+	}
 	_resolveNameInBackground(name) {
 		const log = logger_default("pkc-js:community-client-manager:_resolveNameInBackground");
 		const setNameResolvedAndEmitUpdate = (newNameResolved) => {
@@ -124940,6 +124963,11 @@ var CommunityClientsManager = class extends PKCClientsManager {
 			cache: { maxAge: 3600 }
 		}).then((resolved) => {
 			if (resolved && resolved !== this._community.publicKey) {
+				if (this._nonAnchorHopsOfLoadedChain()?.includes(resolved)) {
+					log(`Community name ${name} resolves to ${resolved}, a non-anchor hop of the community's own chain, instead of its identity ${this._community.publicKey}. Marking nameResolved false`);
+					setNameResolvedAndEmitUpdate(false);
+					return;
+				}
 				log("Key migration detected for", name, "old:", this._community.publicKey, "new:", resolved);
 				const previousPublicKey = this._community.publicKey;
 				const error = new PKCError("ERR_COMMUNITY_NAME_RESOLVES_TO_DIFFERENT_PUBLIC_KEY", {
@@ -124989,7 +125017,8 @@ var CommunityClientsManager = class extends PKCClientsManager {
 		return this._withInflightCommunityFetch(communityAddress, async () => {
 			let ipnsName;
 			const isDomain = isStringDomain(communityAddress);
-			if (this._community.publicKey && (isDomain || !isDomain && this._community.name && this._community.nameResolved === true)) {
+			const hasAnchorClaim = Boolean(this._community.anchor);
+			if (this._community.publicKey && (isDomain || hasAnchorClaim || !isDomain && this._community.name && this._community.nameResolved === true)) {
 				ipnsName = this._community.publicKey;
 				if (isDomain) this._resolveNameInBackground(communityAddress);
 			} else ipnsName = await this.resolveCommunityNameIfNeeded({
@@ -125027,12 +125056,13 @@ var CommunityClientsManager = class extends PKCClientsManager {
 				}
 			} else subRes = await this._fetchCommunityFromGateways(ipnsName);
 			if (subRes?.community) {
-				const anchorIdentityAddress = subRes.community.name || ipnsName;
+				const identityPublicKey = subRes.community.anchor?.publicKey ?? ipnsName;
+				const anchorIdentityAddress = subRes.community.name || identityPublicKey;
 				this._pkc._memCaches.communityForPublishing.set(anchorIdentityAddress, {
 					encryption: subRes.community.encryption,
 					pubsubTopic: subRes.community.pubsubTopic,
 					address: anchorIdentityAddress,
-					publicKey: ipnsName,
+					publicKey: identityPublicKey,
 					name: subRes.community.name
 				});
 			}
@@ -125080,9 +125110,18 @@ var CommunityClientsManager = class extends PKCClientsManager {
 		this._updateCidsAlreadyLoaded.add(latestCommunityCid);
 		try {
 			const communityIpfs = parseCommunityIpfsSchemaPassthroughWithPKCErrorIfItFails(parseJsonWithPKCErrorIfFails(rawCommunityJsonString));
+			const provenIpnsHops = await this._proveAnchorClaimIfUnwalked({
+				communityJson: communityIpfs,
+				ipnsHops,
+				resolveChainOfClaimedAnchor: async (claimedAnchor) => (await this.resolveIpnsToCidP2P(claimedAnchor, {
+					timeoutMs: this._pkc._timeouts["community-ipns"],
+					abortSignal: this._community._getStopAbortSignal()
+				})).ipnsHops
+			});
+			this._community.ipnsHops = provenIpnsHops;
 			const errInRecord = await this._findErrorInCommunityRecord({
 				communityJson: communityIpfs,
-				communityIpnsHops: ipnsHops,
+				communityIpnsHops: provenIpnsHops,
 				cidOfCommunityIpns: latestCommunityCid
 			});
 			if (errInRecord) throw errInRecord;
@@ -125157,6 +125196,11 @@ var CommunityClientsManager = class extends PKCClientsManager {
 						gatewayUrl
 					});
 				}
+				ipnsHops = await this._proveAnchorClaimIfUnwalked({
+					communityJson: communityIpfs,
+					ipnsHops,
+					resolveChainOfClaimedAnchor: async (claimedAnchor) => (await this._resolveIpnsChainViaGateway(gatewayUrl, claimedAnchor, abortController.signal)).ipnsHops
+				});
 				gatewayFetches[gatewayUrl].ipnsHops = ipnsHops;
 				const errorWithinRecord = await this._findErrorInCommunityRecord({
 					communityJson: communityIpfs,
@@ -125266,7 +125310,27 @@ var CommunityClientsManager = class extends PKCClientsManager {
 			cleanUp();
 			throwIfAbortSignalAborted(stopSignal);
 			const gatewayToError = t$4(gatewayFetches, (gatewayFetch) => gatewayFetch.error);
-			if (Object.keys(gatewayFetches).map((gatewayUrl) => gatewayFetches[gatewayUrl].error).some((err) => err.details?.status === 304 || err.code === "ERR_GATEWAY_ABORTING_LOADING_COMMUNITY_BECAUSE_WE_ALREADY_LOADED_THIS_RECORD")) return void 0;
+			if (Object.keys(gatewayFetches).map((gatewayUrl) => gatewayFetches[gatewayUrl].error).some((err) => err.details?.status === 304 || err.code === "ERR_GATEWAY_ABORTING_LOADING_COMMUNITY_BECAUSE_WE_ALREADY_LOADED_THIS_RECORD")) {
+				if (this._community.anchor && this._community.ipnsHops?.[0] !== ipnsName) {
+					const confirmingGatewayUrl = Object.keys(gatewayFetches).find((gatewayUrl) => gatewayFetches[gatewayUrl].error?.details?.status === 304 || gatewayFetches[gatewayUrl].error?.code === "ERR_GATEWAY_ABORTING_LOADING_COMMUNITY_BECAUSE_WE_ALREADY_LOADED_THIS_RECORD");
+					if (confirmingGatewayUrl) {
+						const chainWalkAbortController = new AbortController();
+						const chainWalkTimeoutId = setTimeout(() => chainWalkAbortController.abort("Aborting delegated chain upgrade because it timed out after " + timeoutMs + "ms"), timeoutMs);
+						const onStopAbortChainWalk = () => chainWalkAbortController.abort(stopSignal?.reason);
+						stopSignal?.addEventListener("abort", onStopAbortChainWalk, { once: true });
+						try {
+							const chain = await this._resolveIpnsChainViaGateway(confirmingGatewayUrl, ipnsName, chainWalkAbortController.signal);
+							if (this._community.updateCid && chain.terminalCidV0 === this._community.updateCid) this._community.ipnsHops = chain.ipnsHops;
+						} catch (chainWalkError) {
+							log.trace(`Failed to upgrade the delegated chain of ${ipnsName} after a confirmed consumed record, will retry next poll`, chainWalkError);
+						} finally {
+							clearTimeout(chainWalkTimeoutId);
+							stopSignal?.removeEventListener("abort", onStopAbortChainWalk);
+						}
+					}
+				}
+				return;
+			}
 			const combinedError = new FailedToFetchCommunityFromGatewaysError({
 				ipnsName,
 				gatewayToError,
@@ -125330,6 +125394,26 @@ var CommunityClientsManager = class extends PKCClientsManager {
 			});
 		}
 	}
+	async _proveAnchorClaimIfUnwalked({ communityJson, ipnsHops, resolveChainOfClaimedAnchor }) {
+		const log = logger_default("pkc-js:community-client-manager:_proveAnchorClaimIfUnwalked");
+		if (ipnsHops.length > 1) return ipnsHops;
+		const claimedAnchor = communityJson.anchor?.publicKey;
+		if (!claimedAnchor) return ipnsHops;
+		const loadedName = ipnsHops[0];
+		if (this._areEquivalentCommunityAddresses(claimedAnchor, loadedName)) return ipnsHops;
+		const provenHops = await resolveChainOfClaimedAnchor(claimedAnchor);
+		const anchorDelegatesTo = provenHops[provenHops.length - 1];
+		if (!this._areEquivalentCommunityAddresses(anchorDelegatesTo, loadedName)) throw new PKCError("ERR_COMMUNITY_RECORD_ANCHOR_CLAIM_IS_NOT_ENDORSED", {
+			claimedAnchor,
+			recordIpnsName: loadedName,
+			anchorDelegatesTo,
+			claimedAnchorHops: provenHops,
+			communityAddress: this._getCommunityAddressFromInstance(),
+			recordSignerAddress: getPKCAddressFromPublicKeySync(communityJson.signature.publicKey)
+		});
+		log.trace(`Anchor claim of ${loadedName} proven: ${claimedAnchor} delegates to it. Adopting the chain`, provenHops);
+		return provenHops;
+	}
 	async _findErrorInCommunityRecord({ communityJson, communityIpnsHops, cidOfCommunityIpns }) {
 		const anchorIpnsName = communityIpnsHops[0];
 		const terminalIpnsName = communityIpnsHops[communityIpnsHops.length - 1];
@@ -125540,13 +125624,13 @@ var RemoteCommunity = class extends import_lib$1.TypedEmitter {
 		}
 	}
 	_updateIpnsPubsubPropsIfNeeded(newProps) {
-		const anchorFromHops = this.ipnsHops?.[0];
+		const anchorFromClaimOrHops = this.anchor?.publicKey ?? this.ipnsHops?.[0];
 		if ("ipnsName" in newProps && newProps.ipnsName) {
 			this.ipnsName = newProps.ipnsName;
 			this.ipnsPubsubTopic = ipnsNameToIpnsOverPubsubTopic(this.ipnsName);
 			this.ipnsPubsubTopicRoutingCid = pubsubTopicToDhtKey(this.ipnsPubsubTopic);
-		} else if (anchorFromHops) {
-			this.ipnsName = anchorFromHops;
+		} else if (anchorFromClaimOrHops) {
+			this.ipnsName = anchorFromClaimOrHops;
 			this.ipnsPubsubTopic = ipnsNameToIpnsOverPubsubTopic(this.ipnsName);
 			this.ipnsPubsubTopicRoutingCid = pubsubTopicToDhtKey(this.ipnsPubsubTopic);
 		} else if (newProps.signature?.publicKey && this.signature?.publicKey !== newProps.signature?.publicKey) {
@@ -125563,6 +125647,8 @@ var RemoteCommunity = class extends import_lib$1.TypedEmitter {
 	initRemoteCommunityPropsNoMerge(newProps) {
 		const incomingIpnsHops = newProps.ipnsHops;
 		if (Array.isArray(incomingIpnsHops) && incomingIpnsHops.length > 0) this._ipnsHops = incomingIpnsHops;
+		if ("anchor" in newProps) this.anchor = newProps.anchor;
+		else if (newProps.signature) this.anchor = void 0;
 		this.title = newProps.title;
 		this.description = newProps.description;
 		this.lastPostCid = newProps.lastPostCid;
@@ -125583,8 +125669,10 @@ var RemoteCommunity = class extends import_lib$1.TypedEmitter {
 		this.pubsubTopic = newProps.pubsubTopic;
 		this.signature = newProps.signature;
 		const explicitPublicKey = "publicKey" in newProps ? newProps.publicKey : void 0;
+		const anchorFromClaim = this.anchor?.publicKey;
 		const anchorFromHops = this.ipnsHops?.[0];
-		if (anchorFromHops) this.publicKey = anchorFromHops;
+		if (anchorFromClaim) this.publicKey = anchorFromClaim;
+		else if (anchorFromHops) this.publicKey = anchorFromHops;
 		else if (newProps.signature?.publicKey) this.publicKey = getPKCAddressFromPublicKeySync(newProps.signature.publicKey);
 		else if (explicitPublicKey) this.publicKey = explicitPublicKey;
 		else if (!this.publicKey && "address" in newProps && typeof newProps.address === "string" && !isStringDomain(newProps.address)) this.publicKey = newProps.address;
@@ -125625,6 +125713,7 @@ var RemoteCommunity = class extends import_lib$1.TypedEmitter {
 	_clearDataForKeyMigration(newPublicKey) {
 		this.raw.communityIpfs = void 0;
 		this.updateCid = void 0;
+		this.anchor = void 0;
 		this.initRemoteCommunityPropsNoMerge({});
 		this.pubsubTopicRoutingCid = void 0;
 		this.publicKey = newPublicKey;
@@ -125725,7 +125814,7 @@ var RemoteCommunity = class extends import_lib$1.TypedEmitter {
 	}
 	_isRetriableErrorWhenLoading(err) {
 		if (!(err instanceof PKCError)) return false;
-		if (err.code === "ERR_COMMUNITY_SIGNATURE_IS_INVALID" || err.code === "ERR_INVALID_COMMUNITY_IPFS_SCHEMA" || err.code === "ERR_THE_COMMUNITY_IPNS_RECORD_POINTS_TO_DIFFERENT_ADDRESS_THAN_WE_EXPECTED" || err.code === "ERR_OVER_DOWNLOAD_LIMIT" || err.code === "ERR_INVALID_JSON" || err.code === "ERR_NO_RESOLVER_FOR_NAME" || err.code === "ERR_GATEWAY_IPNS_RECORD_CHAIN_INVALID" || err.code === "ERR_IPNS_MAX_HOPS_EXCEEDED" || err.code === "ERR_RESOLVED_IPNS_TO_UNSUPPORTED_VALUE") return false;
+		if (err.code === "ERR_COMMUNITY_SIGNATURE_IS_INVALID" || err.code === "ERR_INVALID_COMMUNITY_IPFS_SCHEMA" || err.code === "ERR_THE_COMMUNITY_IPNS_RECORD_POINTS_TO_DIFFERENT_ADDRESS_THAN_WE_EXPECTED" || err.code === "ERR_OVER_DOWNLOAD_LIMIT" || err.code === "ERR_INVALID_JSON" || err.code === "ERR_NO_RESOLVER_FOR_NAME" || err.code === "ERR_GATEWAY_IPNS_RECORD_CHAIN_INVALID" || err.code === "ERR_IPNS_MAX_HOPS_EXCEEDED" || err.code === "ERR_RESOLVED_IPNS_TO_UNSUPPORTED_VALUE" || err.code === "ERR_COMMUNITY_RECORD_ANCHOR_CLAIM_IS_NOT_ENDORSED") return false;
 		if (err instanceof FailedToFetchCommunityFromGatewaysError) {
 			for (const gatewayError of Object.values(err.details.gatewayToError)) {
 				if (gatewayError instanceof PKCError && gatewayError.code === "ERR_COMMUNITY_SIGNATURE_IS_INVALID") return true;
@@ -125905,7 +125994,7 @@ var AddressRewriterDatabase = class {
 	async initialize() {
 		try {
 			const dbDir = path.dirname(this._dbPath);
-			await fsp.mkdir(dbDir, { recursive: true });
+			await fs.mkdir(dbDir, { recursive: true });
 			this._db = new Database(this._dbPath);
 			this._db.exec(`
                 CREATE TABLE IF NOT EXISTS request_logs (

package/dist/bundled/chunks/{schema-CH2yoI0b.js → schema-Iavj-cRD.js}

@@ -5315,6 +5315,8 @@ var messages;
 	messages["ERR_COMMUNITY_EDIT_HAS_RESERVED_FIELD"] = "CommunityEdit record includes a reserved field";
 	messages["ERR_COMMUNITY_SIGNATURE_IS_INVALID"] = "Community signature is invalid";
 	messages["ERR_COMMUNITY_RECORD_INCLUDES_RESERVED_FIELD"] = "The CommunityIpfs record includes a reserved field";
+	messages["ERR_COMMUNITY_RECORD_ANCHOR_CLAIM_DOES_NOT_MATCH_CHAIN_ANCHOR"] = "The CommunityIpfs record was resolved through a delegated IPNS chain but its signed anchor claim does not match the chain's anchor";
+	messages["ERR_COMMUNITY_RECORD_ANCHOR_CLAIM_IS_NOT_ENDORSED"] = "The CommunityIpfs record claims an anchor that does not delegate to it: resolving the claimed anchor does not lead to the key that signed this record, so the claim is forged";
 	messages["ERR_FAILED_TO_RESOLVE_COMMUNITY_DOMAIN"] = "Failed to resolve the community domain address to use for verification";
 	messages["ERR_FAILED_TO_RESOLVE_AUTHOR_DOMAIN"] = "Failed to resolve the author domain address to use for verification";
 	messages["ERR_AUTHOR_DOMAIN_RESOLVES_TO_DIFFERENT_SIGNER"] = "The author domain resolved to a public key that does not match the publication signer";
@@ -5371,6 +5373,7 @@ var messages;
 	messages["ERR_PUBLICATION_USES_DEPRECATED_SUBPLEBBIT_ADDRESS"] = "Publication uses the deprecated `subplebbitAddress` field; update your client to use `communityPublicKey`";
 	messages["ERR_PUBLICATION_USES_DEPRECATED_COMMUNITY_ADDRESS"] = "Publication uses the deprecated `communityAddress` field; update your client to use `communityPublicKey`";
 	messages["ERR_PUBLICATION_INVALID_COMMUNITY_PUBLIC_KEY"] = "The communityPublicKey field of publication does not match the community's IPNS key";
+	messages["ERR_PUBLICATION_SIGNED_TO_MINTER_INSTEAD_OF_ANCHOR"] = "The communityPublicKey field of publication is this delegated community's minter key; publications must be signed to the community's anchor identity";
 	messages["ERR_PUBLICATION_INVALID_COMMUNITY_NAME"] = "The communityName field of publication does not match the community's address";
 	messages["ERR_AUTHOR_IS_BANNED"] = "Author is banned";
 	messages["ERR_PUBLICATION_HAS_NO_AUTHOR_ADDRESS"] = "Publication has no author.address";
@@ -6660,6 +6663,7 @@ const ChallengeFileFactorySchema = _function({
 	input: [object({ challengeSettings: CommunityChallengeSettingSchema })],
 	output: ChallengeFileSchema
 });
+const CommunityAnchorSchema = object({ publicKey: string().refine((arg) => isIpnsName(arg), messages.ERR_ANCHOR_PUBLIC_KEY_IS_INVALID) }).strict();
 const CommunityIpfsSchema = object({
 	posts: PostsPagesIpfsSchema.optional(),
 	modQueue: ModQueuePagesIpfsSchema.optional(),
@@ -6667,6 +6671,7 @@ const CommunityIpfsSchema = object({
 	signature: JsonSignatureSchema,
 	encryption: CommunityEncryptionSchema,
 	name: string().min(1).optional(),
+	anchor: CommunityAnchorSchema.optional(),
 	createdAt: PKCTimestampSchema,
 	updatedAt: PKCTimestampSchema,
 	pubsubTopic: PubsubTopicSchema.optional(),
@@ -6725,7 +6730,6 @@ const CommunityEditOptionsSchema = CommunityIpfsSchema.pick({
 	settings: CommunitySettingsSchema.optional(),
 	roles: CommunityRolesToEditSchema.optional()
 }).partial().strict();
-const CommunityAnchorSchema = object({ publicKey: string().refine((arg) => isIpnsName(arg), messages.ERR_ANCHOR_PUBLIC_KEY_IS_INVALID) }).strict();
 const CreateNewLocalCommunityUserOptionsSchema = CommunityEditOptionsSchema.omit({ address: true }).extend({
 	signer: CreateSignerSchema.optional(),
 	anchor: CommunityAnchorSchema.optional(),
@@ -16059,7 +16063,7 @@ function extractNetworkErrorDetails(err, depth = 0) {
 }
 //#endregion
 //#region dist/node/generated-version.js
-const version = "0.0.78";
+const version = "0.0.80";
 //#endregion
 //#region dist/node/version.js
 const protocolVersion = ProtocolVersionSchema.parse("1.0.0");

package/dist/bundled/chunks/{util-CiBeiLBn.js → util-CfSUfLkV.js}

@@ -1,4 +1,4 @@
-import { et as pubsubTopicToDhtKeyCid, vr as PKCError } from "./schema-CH2yoI0b.js";
+import { et as pubsubTopicToDhtKeyCid, vr as PKCError } from "./schema-Iavj-cRD.js";
 import { ipnsSelector } from "ipns/selector";
 import { equals } from "uint8arrays/equals";
 //#region dist/node/helia/util.js
@@ -223,8 +223,9 @@ async function connectToPubsubPeers({ helia, pubsubTopic, maxPeers, options, log
 			};
 			throw e;
 		}
+	} finally {
+		retryScheduler.onProviderStreamEnded();
 	}
-	retryScheduler.onProviderStreamEnded();
 	inflightDialPromises.push(...retryScheduler.retryTasks);
 	let graftError = null;
 	try {

package/dist/bundled/index.js

@@ -1,2 +1,2 @@
-import { a as getShortCid, i as getShortAddress, n as challenges, o as nativeFunctions, r as createAnchorIpnsRecord, s as setNativeFunctions, t as PKC } from "./chunks/node-CcPI4aNc.js";
+import { a as getShortCid, i as getShortAddress, n as challenges, o as nativeFunctions, r as createAnchorIpnsRecord, s as setNativeFunctions, t as PKC } from "./chunks/node-4qAZNuJG.js";
 export { challenges, createAnchorIpnsRecord, PKC as default, getShortAddress, getShortCid, nativeFunctions, setNativeFunctions };

package/dist/bundled/rpc/src/index.js

@@ -1,7 +1,7 @@
-import { $n as n, L as hideClassPrivateProps, br as logger_default, st as replaceXWithY, tr as t, vr as PKCError, xt as findStartedCommunity } from "../../chunks/schema-CH2yoI0b.js";
-import { _ as parseRpcPublishAnchorRecordParam, c as parseRpcAuthorNameParam, d as parseRpcCommentRepliesPageParam, f as parseRpcCommunityIdentifierParam, g as parseRpcExportCommunityParam, h as parseRpcExportCommunityModLogsParam, l as parseRpcCancelExportParam, m as parseRpcEditCommunityParam, p as parseRpcCommunityPageParam, t as PKC, u as parseRpcCidParam, v as parseRpcPublishChallengeAnswersParam, y as parseRpcUnsubscribeParam } from "../../chunks/node-CcPI4aNc.js";
-import { $t as parseCommentEditChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, Dn as parseVoteChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, En as parseSetNewSettingsPKCWsServerSchemaWithPKCErrorIfItFails, J as buildPageRuntimeFields, Qt as parseCommentChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, Y as buildPagesRuntimeFields, Zn as t$1, at as pLimit, hn as parseCreatePKCWsServerOptionsSchemaWithPKCErrorIfItFails, ir as stringify, it as pRetry, mn as parseCreateNewLocalCommunityUserOptionsSchemaWithPKCErrorIfItFails, nn as parseCommentModerationChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, on as parseCommunityEditChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, sn as parseCommunityEditOptionsSchemaWithPKCErrorIfItFails, st as require_lib, yn as parseDecryptedChallengeAnswerWithPKCErrorIfItFails } from "../../chunks/rpc-local-community-DHhucg8-.js";
-import { t as LocalCommunity } from "../../chunks/local-community-KNlSpG2e.js";
+import { $n as n, L as hideClassPrivateProps, br as logger_default, st as replaceXWithY, tr as t, vr as PKCError, xt as findStartedCommunity } from "../../chunks/schema-Iavj-cRD.js";
+import { _ as parseRpcPublishAnchorRecordParam, c as parseRpcAuthorNameParam, d as parseRpcCommentRepliesPageParam, f as parseRpcCommunityIdentifierParam, g as parseRpcExportCommunityParam, h as parseRpcExportCommunityModLogsParam, l as parseRpcCancelExportParam, m as parseRpcEditCommunityParam, p as parseRpcCommunityPageParam, t as PKC, u as parseRpcCidParam, v as parseRpcPublishChallengeAnswersParam, y as parseRpcUnsubscribeParam } from "../../chunks/node-4qAZNuJG.js";
+import { $t as parseCommentEditChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, Dn as parseVoteChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, En as parseSetNewSettingsPKCWsServerSchemaWithPKCErrorIfItFails, J as buildPageRuntimeFields, Qt as parseCommentChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, Y as buildPagesRuntimeFields, Zn as t$1, at as pLimit, hn as parseCreatePKCWsServerOptionsSchemaWithPKCErrorIfItFails, ir as stringify, it as pRetry, mn as parseCreateNewLocalCommunityUserOptionsSchemaWithPKCErrorIfItFails, nn as parseCommentModerationChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, on as parseCommunityEditChallengeRequestToEncryptSchemaWithPKCErrorIfItFails, sn as parseCommunityEditOptionsSchemaWithPKCErrorIfItFails, st as require_lib, yn as parseDecryptedChallengeAnswerWithPKCErrorIfItFails } from "../../chunks/rpc-local-community-Cog5rZLG.js";
+import { t as LocalCommunity } from "../../chunks/local-community-CHzhypCp.js";
 import { fileURLToPath } from "node:url";
 import path from "path";
 import assert from "assert";

package/dist/node/community/community-client-manager.d.ts

@@ -52,11 +52,13 @@ export declare class CommunityClientsManager extends PKCClientsManager {
     startUpdatingLoop(): Promise<void>;
     stopUpdatingLoop(): Promise<void>;
     private _resolveCommunityNameWithoutUpdatingState;
+    private _nonAnchorHopsOfLoadedChain;
     private _resolveNameInBackground;
     _resolvePageAuthorNamesInBackground(): void;
     fetchNewUpdateForCommunity(communityAddress: string): Promise<ResultOfFetchingCommunity>;
     private _fetchCommunityIpnsP2PAndVerify;
     private _fetchCommunityFromGateways;
     private _resolveIpnsChainViaGateway;
+    private _proveAnchorClaimIfUnwalked;
     private _findErrorInCommunityRecord;
 }