@weaveprotocol/core 0.1.0

package/dist/network/network-manager.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @fileoverview Peers over a transport that dials on its own — a socket to an
+ * always-on node, a local link, an in-memory fake in tests. Such a transport
+ * authenticates, or is trusted, by itself; relays and WebRTC are the mesh's
+ * (`mesh.ts`), which hands each space the same {@link NetworkManager}.
+ */
+import type { PeerInfo, NetworkMessage } from '../types.js';
+import type { PeerTransport } from './transport.js';
+export interface NetworkManagerConfig {
+    readonly did: string;
+    readonly createTransport: () => PeerTransport;
+}
+export type NetworkEvents = {
+    message: (message: NetworkMessage) => void;
+    'peer-connected': (info: PeerInfo) => void;
+    'peer-disconnected': (info: PeerInfo) => void;
+    error: (error: Error) => void;
+};
+/** One space's peers, whatever carries them */
+export interface NetworkManager {
+    readonly connect: () => Promise<void>;
+    readonly disconnect: () => void;
+    readonly send: (peerId: string, message: NetworkMessage) => void;
+    readonly broadcast: (message: NetworkMessage) => void;
+    readonly getPeers: () => ReadonlyArray<PeerInfo>;
+    readonly on: <K extends keyof NetworkEvents>(event: K, callback: NetworkEvents[K]) => void;
+    readonly off: <K extends keyof NetworkEvents>(event: K, callback: NetworkEvents[K]) => void;
+    readonly isConnected: () => boolean;
+}
+/**
+ * Creates a network manager over a transport that dials on its own.
+ *
+ * @param config - Who this is, and the transport to use.
+ * @returns The network manager instance.
+ */
+export declare function createNetworkManager(config: NetworkManagerConfig): NetworkManager;
+//# sourceMappingURL=network-manager.d.ts.map

package/dist/network/network-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-manager.d.ts","sourceRoot":"","sources":["../../src/network/network-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,MAAM,aAAa,CAAC;CAC/C;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC3C,gBAAgB,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C,mBAAmB,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC9C,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAC/B,CAAC;AAEF,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IACjE,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,MAAM,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC3F,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,MAAM,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC5F,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAkDjF"}

package/dist/network/network-manager.js

@@ -0,0 +1,64 @@
+/**
+ * @fileoverview Peers over a transport that dials on its own — a socket to an
+ * always-on node, a local link, an in-memory fake in tests. Such a transport
+ * authenticates, or is trusted, by itself; relays and WebRTC are the mesh's
+ * (`mesh.ts`), which hands each space the same {@link NetworkManager}.
+ */
+import { utf8Encode, utf8Decode } from '../utils/encoding.js';
+import { createEmitter } from '../utils/events.js';
+/**
+ * Creates a network manager over a transport that dials on its own.
+ *
+ * @param config - Who this is, and the transport to use.
+ * @returns The network manager instance.
+ */
+export function createNetworkManager(config) {
+    const transport = config.createTransport();
+    const peers = new Map();
+    const { on, off, emit } = createEmitter();
+    transport.on('connected', (peerId) => {
+        const info = { did: peerId, connectionId: peerId, connectedAt: new Date().toISOString() };
+        peers.set(peerId, info);
+        emit('peer-connected', info);
+    });
+    transport.on('disconnected', (peerId) => {
+        const info = peers.get(peerId);
+        if (info && peers.delete(peerId))
+            emit('peer-disconnected', info);
+    });
+    transport.on('data', (peerId, data) => {
+        try {
+            const message = JSON.parse(utf8Decode(data));
+            // The sender is the connection it arrived on, not whatever the message claims.
+            emit('message', { ...message, from: peerId });
+        }
+        catch {
+            emit('error', new Error('Failed to parse incoming message'));
+        }
+    });
+    transport.on('error', (peerId, error) => emit('error', new Error(`Transport error with peer ${peerId}: ${error.message}`)));
+    const send = (peerId, message) => {
+        try {
+            transport.send(peerId, utf8Encode(JSON.stringify(message)));
+        }
+        catch (err) {
+            emit('error', err instanceof Error ? err : new Error('Failed to send message'));
+        }
+    };
+    return Object.freeze({
+        connect: async () => {
+            await transport.connect?.();
+        },
+        disconnect: () => transport.closeAll(),
+        send,
+        broadcast: (message) => {
+            for (const peerId of peers.keys())
+                send(peerId, message);
+        },
+        getPeers: () => [...peers.values()],
+        on,
+        off,
+        isConnected: () => peers.size > 0,
+    });
+}
+//# sourceMappingURL=network-manager.js.map

package/dist/network/network-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-manager.js","sourceRoot":"","sources":["../../src/network/network-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA2BnD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAiB,CAAC;IAEzD,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;QACnC,MAAM,IAAI,GAAa,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACpG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAmB,CAAC;YAC/D,+EAA+E;YAC/E,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,6BAA6B,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5H,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,OAAuB,EAAQ,EAAE;QAC7D,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9B,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE;QACtC,IAAI;QACJ,SAAS,EAAE,CAAC,OAAuB,EAAE,EAAE;YACrC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACnC,EAAE;QACF,GAAG;QACH,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;KAClC,CAAC,CAAC;AACL,CAAC"}

package/dist/network/peer-auth.d.ts

@@ -0,0 +1,98 @@
+/**
+ * @module peer-auth
+ * Proving, over a connection, who you are — and that you may read a space.
+ *
+ * An always-on node serves a space to whoever connects. For a public space that
+ * is fine — anyone may read it anyway. For a private one, serving the
+ * ciphertext to anyone who knows the id hands out the space's whole shape and
+ * history. And in either, a peer that could claim any name could knock the
+ * real owner of that name off the node and take its place. So before a byte
+ * of the space moves:
+ *
+ * ```
+ * node   → client   challenge { nonce: Nₛ, did: node }
+ * client → node     hello     { did: client, nonce: N꜀, sig: client key signs H, read?: read key signs H }
+ * node   → client   welcome   { did: node, sig: node key signs (server | space | node did | N꜀) }
+ *
+ * H = client | space | client did | node did | Nₛ
+ * ```
+ *
+ * The client signs with **the key its DID names**, proving the name, and in a
+ * private space with the space's **read key** too, derived from the space key
+ * (`space/space-access.ts`). The node checks the read signature against the
+ * public half, which is part of the space — so a node needs no secret to do
+ * it, and a host that cannot read the space checks readers exactly as a
+ * member's own node does.
+ *
+ * The node signs with **its own key**, the one its DID names. That proves the
+ * welcome comes from the node that sent the challenge; which node to trust is
+ * the client's choice of URL. Naming the node in the client's signature keeps
+ * a hello from being replayed to a different node.
+ */
+import type { CryptoProvider } from '../types.js';
+/** What a client sends to prove itself: its own signature, and in a private space the read key's */
+export interface HelloProof {
+    readonly sig: string;
+    readonly read?: string;
+}
+/** The connecting side: proves who it is and that it may read, and checks the node's welcome. */
+export interface ClientAuth {
+    hello(clientDid: string, nodeDid: string, nodeNonce: string): Promise<HelloProof>;
+    checkWelcome(nodeDid: string, clientNonce: string, sig: unknown): Promise<boolean>;
+}
+/** The serving side: checks a peer's hello, and signs its welcome. */
+export interface ServerAuth {
+    checkHello(clientDid: string, nodeDid: string, nodeNonce: string, proof: unknown): Promise<boolean>;
+    welcome(nodeDid: string, clientNonce: string): Promise<string>;
+}
+/** A fresh random nonce, as a string. */
+export declare function peerNonce(): string;
+/**
+ * The client side.
+ * @param spaceId The space — bound into every signature, so a proof for one space is useless in another
+ * @param session This side's DID and the key it names
+ * @param readKey In a private space, the space's read key (`deriveReadKey`); null in a public one
+ */
+export declare function createClientAuth(spaceId: string, session: {
+    readonly did: string;
+    readonly key: CryptoKey;
+}, readKey: {
+    readonly privateKey: CryptoKey;
+} | null, provider: CryptoProvider): ClientAuth;
+/**
+ * The node side. Holds no secret of the space's.
+ * @param readKey In a private space, its public read key, from the space itself; null in a public one
+ * @param nodeKey The private key of the DID the node introduces itself as
+ */
+export declare function createServerAuth(spaceId: string, readKey: string | null, nodeKey: CryptoKey, provider: CryptoProvider): ServerAuth;
+/** The fingerprints of one connection's two ends, as this side sees them */
+export interface ChannelBinding {
+    readonly local: string;
+    readonly remote: string;
+}
+/** What one side sends to prove itself */
+export interface MeshProof {
+    readonly sig: string;
+    readonly read?: string;
+}
+/** Proving who you are to a peer — and, in a private space, that you may read it. */
+export interface MeshAuth {
+    prove(peerDid: string, peerNonce: string, binding: ChannelBinding | null): Promise<MeshProof>;
+    check(peerDid: string, ourNonce: string, binding: ChannelBinding | null, proof: unknown): Promise<boolean>;
+}
+/**
+ * One side of the handshake between peers.
+ * @param spaceId The space — bound into every proof
+ * @param session This side's DID and the key it names
+ * @param read In a private space: the read key to prove with, and the public half the space names to check others against
+ */
+export declare function createMeshAuth(spaceId: string, session: {
+    readonly did: string;
+    readonly key: CryptoKey;
+}, read: {
+    readonly key: {
+        readonly privateKey: CryptoKey;
+    } | null;
+    readonly publicDid: string;
+} | null, provider: CryptoProvider): MeshAuth;
+//# sourceMappingURL=peer-auth.d.ts.map

package/dist/network/peer-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-auth.d.ts","sourceRoot":"","sources":["../../src/network/peer-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD,oGAAoG;AACpG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,iGAAiG;AACjG,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClF,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpF;AAED,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAChE;AAED,yCAAyC;AACzC,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAiBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAA;CAAE,EAC1D,OAAO,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,EAClD,QAAQ,EAAE,cAAc,GACvB,UAAU,CAWZ;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,GAAG,UAAU,CAYlI;AA0BD,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qFAAqF;AACrF,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9F,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5G;AAKD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAA;CAAE,EAC1D,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAA;KAAE,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EACpG,QAAQ,EAAE,cAAc,GACvB,QAAQ,CAkBV"}

package/dist/network/peer-auth.js

@@ -0,0 +1,86 @@
+import { base64UrlDecode, base64UrlEncode, utf8Encode } from '../utils/encoding.js';
+import { didToPublicKey } from '../identity/did.js';
+/** A fresh random nonce, as a string. */
+export function peerNonce() {
+    return base64UrlEncode(globalThis.crypto.getRandomValues(new Uint8Array(16)));
+}
+const helloLabel = (spaceId, clientDid, nodeDid, nonce) => utf8Encode(`weave-peer/v3|client|${spaceId}|${clientDid}|${nodeDid}|${nonce}`);
+const welcomeLabel = (spaceId, nodeDid, nonce) => utf8Encode(`weave-peer/v3|server|${spaceId}|${nodeDid}|${nonce}`);
+async function verifyBy(provider, did, sig, data) {
+    if (typeof sig !== 'string')
+        return false;
+    try {
+        const publicKey = await provider.importPublicKey(didToPublicKey(did).publicKeyBytes);
+        return await provider.verify(publicKey, base64UrlDecode(sig), data);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The client side.
+ * @param spaceId The space — bound into every signature, so a proof for one space is useless in another
+ * @param session This side's DID and the key it names
+ * @param readKey In a private space, the space's read key (`deriveReadKey`); null in a public one
+ */
+export function createClientAuth(spaceId, session, readKey, provider) {
+    return Object.freeze({
+        async hello(clientDid, nodeDid, nodeNonce) {
+            const label = helloLabel(spaceId, clientDid, nodeDid, nodeNonce);
+            const sig = base64UrlEncode(await provider.sign(session.key, label));
+            return readKey ? { sig, read: base64UrlEncode(await provider.sign(readKey.privateKey, label)) } : { sig };
+        },
+        checkWelcome(nodeDid, clientNonce, sig) {
+            return verifyBy(provider, nodeDid, sig, welcomeLabel(spaceId, nodeDid, clientNonce));
+        },
+    });
+}
+/**
+ * The node side. Holds no secret of the space's.
+ * @param readKey In a private space, its public read key, from the space itself; null in a public one
+ * @param nodeKey The private key of the DID the node introduces itself as
+ */
+export function createServerAuth(spaceId, readKey, nodeKey, provider) {
+    return Object.freeze({
+        async checkHello(clientDid, nodeDid, nodeNonce, proof) {
+            const { sig, read } = (proof ?? {});
+            const label = helloLabel(spaceId, clientDid, nodeDid, nodeNonce);
+            if (!clientDid.startsWith('did:key:') || !(await verifyBy(provider, clientDid, sig, label)))
+                return false;
+            return readKey ? verifyBy(provider, readKey, read, label) : true;
+        },
+        async welcome(nodeDid, clientNonce) {
+            return base64UrlEncode(await provider.sign(nodeKey, welcomeLabel(spaceId, nodeDid, clientNonce)));
+        },
+    });
+}
+const meshLabel = (spaceId, prover, verifier, nonce, proverCert, verifierCert) => utf8Encode(`weave-mesh/v1|${spaceId}|${prover}|${verifier}|${nonce}|${proverCert}|${verifierCert}`);
+/**
+ * One side of the handshake between peers.
+ * @param spaceId The space — bound into every proof
+ * @param session This side's DID and the key it names
+ * @param read In a private space: the read key to prove with, and the public half the space names to check others against
+ */
+export function createMeshAuth(spaceId, session, read, provider) {
+    return Object.freeze({
+        async prove(peerDid, peerNonce, binding) {
+            const label = meshLabel(spaceId, session.did, peerDid, peerNonce, binding?.local ?? '', binding?.remote ?? '');
+            const sig = base64UrlEncode(await provider.sign(session.key, label));
+            if (!read)
+                return { sig };
+            // A node without the space's key cannot prove it may read — and should not be served.
+            if (!read.key)
+                throw new Error('This node cannot read the space, so it cannot join its peers');
+            return { sig, read: base64UrlEncode(await provider.sign(read.key.privateKey, label)) };
+        },
+        async check(peerDid, ourNonce, binding, proof) {
+            const { sig, read: readSig } = (proof ?? {});
+            // What they signed, seen from this end: their certificate is our remote one.
+            const label = meshLabel(spaceId, peerDid, session.did, ourNonce, binding?.remote ?? '', binding?.local ?? '');
+            if (!peerDid.startsWith('did:key:') || !(await verifyBy(provider, peerDid, sig, label)))
+                return false;
+            return read ? verifyBy(provider, read.publicDid, readSig, label) : true;
+        },
+    });
+}
+//# sourceMappingURL=peer-auth.js.map

package/dist/network/peer-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-auth.js","sourceRoot":"","sources":["../../src/network/peer-auth.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAoBpD,yCAAyC;AACzC,MAAM,UAAU,SAAS;IACvB,OAAO,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAe,EAAE,KAAa,EAAE,EAAE,CACxF,UAAU,CAAC,wBAAwB,OAAO,IAAI,SAAS,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;AACjF,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa,EAAE,EAAE,CACvE,UAAU,CAAC,wBAAwB,OAAO,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;AAEpE,KAAK,UAAU,QAAQ,CAAC,QAAwB,EAAE,GAAW,EAAE,GAAY,EAAE,IAAgB;IAC3F,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACrF,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,OAA0D,EAC1D,OAAkD,EAClD,QAAwB;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,OAAe,EAAE,SAAiB;YAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACrE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QAC5G,CAAC;QACD,YAAY,CAAC,OAAe,EAAE,WAAmB,EAAE,GAAY;YAC7D,OAAO,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;QACvF,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,OAAsB,EAAE,OAAkB,EAAE,QAAwB;IACpH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,OAAe,EAAE,SAAiB,EAAE,KAAc;YACpF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAsC,CAAC;YACzE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACjE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1G,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,WAAmB;YAChD,OAAO,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AA4CD,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,QAAgB,EAAE,KAAa,EAAE,UAAkB,EAAE,YAAoB,EAAE,EAAE,CAC/H,UAAU,CAAC,iBAAiB,OAAO,IAAI,MAAM,IAAI,QAAQ,IAAI,KAAK,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC,CAAC;AAEtG;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,OAA0D,EAC1D,IAAoG,EACpG,QAAwB;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,SAAiB,EAAE,OAA8B;YAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAC/G,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAC1B,sFAAsF;YACtF,IAAI,CAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAC/F,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,QAAgB,EAAE,OAA8B,EAAE,KAAc;YAC3F,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAsC,CAAC;YAClF,6EAA6E;YAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC9G,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtG,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/network/rtc-transport.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @fileoverview WebRTC data channel transport management.
+ */
+import type { PeerTransportEvents, SignalledTransport } from './transport.js';
+export interface RTCTransportConfig {
+    readonly iceServers?: ReadonlyArray<RTCIceServer>;
+}
+export type RTCTransportEvents = PeerTransportEvents;
+/** WebRTC data channels: a transport whose connections start with an offer. */
+export type RTCTransport = SignalledTransport;
+/**
+ * Creates a new WebRTC transport manager.
+ *
+ * @param config - Optional configuration for ICE servers.
+ * @returns The RTC transport instance.
+ */
+export declare function createRTCTransport(config?: RTCTransportConfig): RTCTransport;
+//# sourceMappingURL=rtc-transport.d.ts.map

package/dist/network/rtc-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rtc-transport.d.ts","sourceRoot":"","sources":["../../src/network/rtc-transport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAiB,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAG7F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CACnD;AAED,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAErD,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAkB9C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,YAAY,CAuJ5E"}

package/dist/network/rtc-transport.js

@@ -0,0 +1,149 @@
+/**
+ * @fileoverview WebRTC data channel transport management.
+ */
+import { createEmitter } from '../utils/events.js';
+/** The DTLS certificate fingerprint a session description commits to */
+function fingerprintOf(description) {
+    const match = description?.sdp?.match(/^a=fingerprint:\s*(\S+)\s+(\S+)/im);
+    return match ? `${match[1].toLowerCase()} ${match[2].toUpperCase()}` : null;
+}
+const DEFAULT_ICE_SERVERS = [
+    { urls: 'stun:stun.l.google.com:19302' },
+    { urls: 'stun:stun1.l.google.com:19302' }
+];
+/**
+ * Creates a new WebRTC transport manager.
+ *
+ * @param config - Optional configuration for ICE servers.
+ * @returns The RTC transport instance.
+ */
+export function createRTCTransport(config) {
+    const iceServers = config?.iceServers ?? DEFAULT_ICE_SERVERS;
+    const connections = new Map();
+    const { on, off, emit } = createEmitter();
+    const setupDataChannel = (peerId, channel) => {
+        channel.binaryType = 'arraybuffer';
+        channel.onopen = () => {
+            emit('connected', peerId);
+        };
+        channel.onclose = () => {
+            emit('disconnected', peerId);
+            close(peerId);
+        };
+        channel.onerror = (ev) => {
+            const errEvent = ev;
+            emit('error', peerId, errEvent.error || new Error('Data channel error'));
+        };
+        channel.onmessage = (event) => {
+            if (event.data instanceof ArrayBuffer) {
+                emit('data', peerId, new Uint8Array(event.data));
+            }
+            else {
+                // Handle other types if necessary, though we strictly use arraybuffer
+                console.warn('Received non-ArrayBuffer data on RTC channel');
+            }
+        };
+    };
+    const createConnection = (peerId, onCandidate) => {
+        if (connections.has(peerId)) {
+            close(peerId);
+        }
+        const connection = new RTCPeerConnection({ iceServers: [...iceServers] });
+        connections.set(peerId, { connection, channel: null });
+        // Attached before any description is set, so no candidate can be missed.
+        connection.onicecandidate = (event) => {
+            if (event.candidate)
+                onCandidate(event.candidate.toJSON());
+        };
+        connection.onconnectionstatechange = () => {
+            if (connection.connectionState === 'failed' || connection.connectionState === 'closed') {
+                emit('disconnected', peerId);
+                close(peerId);
+            }
+        };
+        return connection;
+    };
+    const createOffer = async (peerId, onCandidate) => {
+        const connection = createConnection(peerId, onCandidate);
+        const channel = connection.createDataChannel('data', { ordered: true });
+        setupDataChannel(peerId, channel);
+        const peerData = connections.get(peerId);
+        if (peerData) {
+            peerData.channel = channel;
+        }
+        const offer = await connection.createOffer();
+        await connection.setLocalDescription(offer);
+        return offer;
+    };
+    const handleOffer = async (peerId, offer, onCandidate) => {
+        const connection = createConnection(peerId, onCandidate);
+        connection.ondatachannel = (event) => {
+            const channel = event.channel;
+            setupDataChannel(peerId, channel);
+            const peerData = connections.get(peerId);
+            if (peerData) {
+                peerData.channel = channel;
+            }
+        };
+        await connection.setRemoteDescription(offer);
+        const answer = await connection.createAnswer();
+        await connection.setLocalDescription(answer);
+        return answer;
+    };
+    const handleAnswer = async (peerId, answer) => {
+        const peerData = connections.get(peerId);
+        if (!peerData) {
+            throw new Error(`No connection found for peer ${peerId}`);
+        }
+        await peerData.connection.setRemoteDescription(answer);
+    };
+    const addIceCandidate = async (peerId, candidate) => {
+        const peerData = connections.get(peerId);
+        if (!peerData) {
+            throw new Error(`No connection found for peer ${peerId}`);
+        }
+        await peerData.connection.addIceCandidate(candidate);
+    };
+    const send = (peerId, data) => {
+        const peerData = connections.get(peerId);
+        if (!peerData || !peerData.channel || peerData.channel.readyState !== 'open') {
+            throw new Error(`Data channel not open for peer ${peerId}`);
+        }
+        peerData.channel.send(data.buffer);
+    };
+    const close = (peerId) => {
+        const peerData = connections.get(peerId);
+        if (peerData) {
+            if (peerData.channel) {
+                peerData.channel.close();
+            }
+            peerData.connection.close();
+            connections.delete(peerId);
+        }
+    };
+    const closeAll = () => {
+        const allPeers = Array.from(connections.keys());
+        for (const peerId of allPeers) {
+            close(peerId);
+        }
+    };
+    const binding = (peerId) => {
+        const connection = connections.get(peerId)?.connection;
+        const local = fingerprintOf(connection?.localDescription ?? null);
+        const remote = fingerprintOf(connection?.remoteDescription ?? null);
+        return local && remote ? { local, remote } : null;
+    };
+    return Object.freeze({
+        createOffer,
+        handleOffer,
+        handleAnswer,
+        addIceCandidate,
+        send,
+        close,
+        closeAll,
+        binding,
+        on,
+        off
+    });
+}
+//# sourceMappingURL=rtc-transport.js.map

package/dist/network/rtc-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rtc-transport.js","sourceRoot":"","sources":["../../src/network/rtc-transport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAgBnD,wEAAwE;AACxE,SAAS,aAAa,CAAC,WAAyC;IAC9D,MAAM,KAAK,GAAG,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,MAAM,mBAAmB,GAAgC;IACvD,EAAE,IAAI,EAAE,8BAA8B,EAAE;IACxC,EAAE,IAAI,EAAE,+BAA+B,EAAE;CAC1C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA2B;IAC5D,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,mBAAmB,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE1D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,EAAsB,CAAC;IAE9D,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,OAAuB,EAAE,EAAE;QACnE,OAAO,CAAC,UAAU,GAAG,aAAa,CAAC;QACnC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE;YACpB,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE;YACrB,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAC7B,KAAK,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,EAAmB,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,KAAK,CAAC,IAAI,YAAY,WAAW,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,OAAO,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,WAA0B,EAAqB,EAAE;QACzF,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC1E,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvD,yEAAyE;QACzE,UAAU,CAAC,cAAc,GAAG,CAAC,KAAK,EAAE,EAAE;YACpC,IAAI,KAAK,CAAC,SAAS;gBAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,UAAU,CAAC,uBAAuB,GAAG,GAAG,EAAE;YACxC,IAAI,UAAU,CAAC,eAAe,KAAK,QAAQ,IAAI,UAAU,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;gBACvF,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC7B,KAAK,CAAC,MAAM,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAAc,EAAE,WAA0B,EAAsC,EAAE;QAC3G,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE5C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EACvB,MAAc,EACd,KAAgC,EAChC,WAA0B,EACU,EAAE;QACtC,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAEzD,UAAU,CAAC,aAAa,GAAG,CAAC,KAAK,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,UAAU,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE7C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,MAAc,EAAE,MAAiC,EAAiB,EAAE;QAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,MAAc,EAAE,SAA8B,EAAiB,EAAE;QAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAgB,EAAQ,EAAE;QACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAqB,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,MAAc,EAAQ,EAAE;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;YACD,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC5B,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE;QACjC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;QACvD,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;QACpE,OAAO,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,WAAW;QACX,YAAY;QACZ,eAAe;QACf,IAAI;QACJ,KAAK;QACL,QAAQ;QACR,OAAO;QACP,EAAE;QACF,GAAG;KACJ,CAAC,CAAC;AACL,CAAC"}

package/dist/network/signaling.d.ts

@@ -0,0 +1,40 @@
+/** What a peer's connection offer, answer or candidate is */
+export type SignalKind = 'offer' | 'answer' | 'candidate';
+export interface SignalingMessage {
+    readonly type: SignalKind | 'join' | 'leave';
+    readonly from: string;
+    readonly to?: string;
+    readonly room?: string;
+    readonly payload?: unknown;
+}
+export type SignalingEvents = {
+    /** An offer, answer or candidate from a peer */
+    signal: (message: SignalingMessage & {
+        readonly type: SignalKind;
+    }) => void;
+    'peer-joined': (did: string, room: string) => void;
+    'peer-left': (did: string, room: string) => void;
+    connected: () => void;
+    disconnected: () => void;
+    error: (error: Error) => void;
+};
+export interface SignalingClient {
+    readonly connect: () => Promise<void>;
+    readonly disconnect: () => void;
+    /** Enters a room, now and after every reconnect, and hears who else is there. */
+    readonly join: (room: string) => void;
+    readonly leave: (room: string) => void;
+    readonly signal: (kind: SignalKind, targetDid: string, payload: unknown) => void;
+    readonly on: <K extends keyof SignalingEvents>(event: K, callback: SignalingEvents[K]) => void;
+    readonly off: <K extends keyof SignalingEvents>(event: K, callback: SignalingEvents[K]) => void;
+    readonly isConnected: () => boolean;
+}
+/**
+ * Creates a new signaling client.
+ *
+ * @param url - The relay's WebSocket URL.
+ * @param did - The decentralized identifier of this peer.
+ * @returns The signaling client instance.
+ */
+export declare function createSignalingClient(url: string, did: string): SignalingClient;
+//# sourceMappingURL=signaling.d.ts.map

package/dist/network/signaling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signaling.d.ts","sourceRoot":"","sources":["../../src/network/signaling.ts"],"names":[],"mappings":"AAQA,6DAA6D;AAC7D,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,gDAAgD;IAChD,MAAM,EAAE,CAAC,OAAO,EAAE,gBAAgB,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5E,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAC/B,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACjF,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC/F,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,MAAM,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAChG,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC;CACrC;AAID;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,CA2G/E"}