agent-comms 3.5.0 → 3.7.0

package/dist/test/capability-bubble-up.test.js

@@ -0,0 +1,350 @@
+import { webcrypto } from "node:crypto";
+import { describe, it, expect, vi } from "vitest";
+import { createNodeIdentity } from "wire-mesh-core/adapters/node-identity";
+import { deviceIdToHex } from "wire-mesh-core/domain/device-id";
+import { mintCapabilityToken } from "wire-mesh-core/domain/tokens";
+import { createRevocationView } from "wire-mesh-core/domain/revocation-view";
+import { verifyCapabilityToken } from "wire-mesh-core/domain/tokens";
+import { resolveBubbleUpRoute, createBubbleUpCapabilityRequestHandler, } from "../core/capability-bubble-up.js";
+const ES256 = -7;
+const HOUR_MS = 3_600_000;
+const NOW_MS = 1_893_456_000_000;
+const EXPIRES_MS = NOW_MS + HOUR_MS;
+const CAPABILITY = "exec:pty";
+const SCOPE = { kind: "folder" };
+function buf(bytes) {
+    return Uint8Array.from(bytes);
+}
+async function generateEs256Identity() {
+    const keyPair = await webcrypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, true, ["sign", "verify"]);
+    const publicKeyBytes = new Uint8Array(await webcrypto.subtle.exportKey("raw", keyPair.publicKey));
+    return createNodeIdentity(keyPair.privateKey, publicKeyBytes, ES256);
+}
+function fixedClock(atMs) {
+    return { now: () => atMs };
+}
+let issuedTokenIds = 0;
+function nextTokenId() {
+    issuedTokenIds += 1;
+    return buf([issuedTokenIds]);
+}
+async function mint(issuer, bearer, options = {}) {
+    const verdict = await mintCapabilityToken({
+        identity: issuer,
+        clock: fixedClock(options.mintedAt ?? NOW_MS),
+        tokenId: nextTokenId(),
+        bearer: bearer.deviceId,
+        capability: options.capability ?? CAPABILITY,
+        scope: options.scope ?? SCOPE,
+        expires: options.expires ?? EXPIRES_MS,
+        ...(options.delegationsRemaining !== undefined
+            ? { delegationsRemaining: options.delegationsRemaining }
+            : {}),
+        ...(options.parent !== undefined ? { parent: options.parent } : {}),
+    });
+    if (!verdict.ok)
+        throw new Error(`mint failed: ${verdict.reason}`);
+    return verdict.token;
+}
+describe("resolveBubbleUpRoute", () => {
+    it("grants directly when the held token has depth remaining that narrows the request", async () => {
+        const root = await generateEs256Identity();
+        const holder = await generateEs256Identity();
+        const heldToken = await mint(root, holder, { delegationsRemaining: 2 });
+        const route = await resolveBubbleUpRoute({
+            heldToken,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            capability: CAPABILITY,
+            scope: SCOPE,
+            expires: EXPIRES_MS,
+            delegationsRemaining: 1,
+        });
+        expect(route.kind).toBe("grant");
+        if (route.kind === "grant") {
+            expect(route.token).toBe(heldToken);
+        }
+    });
+    it("forwards to the held token's own issuer when its delegation depth is exhausted", async () => {
+        const root = await generateEs256Identity();
+        const holder = await generateEs256Identity();
+        const heldToken = await mint(root, holder, { delegationsRemaining: 0 });
+        const route = await resolveBubbleUpRoute({
+            heldToken,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            capability: CAPABILITY,
+            scope: SCOPE,
+            expires: EXPIRES_MS,
+            delegationsRemaining: 0,
+        });
+        expect(route.kind).toBe("forward");
+        if (route.kind === "forward") {
+            expect(deviceIdToHex(route.target)).toBe(deviceIdToHex(root.deviceId));
+        }
+    });
+    it("forwards to the held token's own issuer when the requested scope does not narrow", async () => {
+        const root = await generateEs256Identity();
+        const holder = await generateEs256Identity();
+        const heldToken = await mint(root, holder, {
+            scope: { kind: "room", path: "abc/general" },
+            delegationsRemaining: 3,
+        });
+        const route = await resolveBubbleUpRoute({
+            heldToken,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            capability: CAPABILITY,
+            scope: { kind: "room", path: "abc/other" },
+            expires: EXPIRES_MS,
+            delegationsRemaining: 1,
+        });
+        expect(route.kind).toBe("forward");
+        if (route.kind === "forward") {
+            expect(deviceIdToHex(route.target)).toBe(deviceIdToHex(root.deviceId));
+        }
+    });
+    it("reports no-route when this device holds no token for the capability at all", async () => {
+        const holder = await generateEs256Identity();
+        const route = await resolveBubbleUpRoute({
+            heldToken: undefined,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            capability: CAPABILITY,
+            scope: SCOPE,
+            expires: EXPIRES_MS,
+        });
+        expect(route).toEqual({ kind: "no-route", reason: "no-held-token" });
+    });
+    it("reports no-route when the held token has already expired", async () => {
+        const root = await generateEs256Identity();
+        const holder = await generateEs256Identity();
+        const heldToken = await mint(root, holder, {
+            mintedAt: NOW_MS - HOUR_MS,
+            expires: NOW_MS - 1,
+            delegationsRemaining: 2,
+        });
+        const route = await resolveBubbleUpRoute({
+            heldToken,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            capability: CAPABILITY,
+            scope: SCOPE,
+            expires: NOW_MS,
+            delegationsRemaining: 1,
+        });
+        expect(route).toEqual({ kind: "no-route", reason: "held-token-invalid" });
+    });
+    it("reports no-route rather than forwarding to itself when its held token is self-issued", async () => {
+        const holder = await generateEs256Identity();
+        const heldToken = await mint(holder, holder, { delegationsRemaining: 0 });
+        const route = await resolveBubbleUpRoute({
+            heldToken,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            capability: CAPABILITY,
+            scope: SCOPE,
+            expires: EXPIRES_MS,
+            delegationsRemaining: 0,
+        });
+        expect(route).toEqual({ kind: "no-route", reason: "self-issued" });
+    });
+});
+let nextRequestId = 0;
+function fakeIncoming(params) {
+    nextRequestId += 1;
+    return {
+        requestId: nextRequestId,
+        command: { verb: CAPABILITY, params },
+        scope: SCOPE,
+        respond: vi.fn(async () => undefined),
+    };
+}
+describe("createBubbleUpCapabilityRequestHandler", () => {
+    it("mints a delegated child token when this device can grant from its own held depth", async () => {
+        const root = await generateEs256Identity();
+        const holder = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const heldToken = await mint(root, holder, { delegationsRemaining: 2 });
+        const sendManageRequest = vi.fn();
+        const handler = createBubbleUpCapabilityRequestHandler({
+            capability: CAPABILITY,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            bearerDevice: requester.deviceId,
+            expires: EXPIRES_MS,
+            delegationsRemaining: 1,
+            ownToken: () => heldToken,
+            session: { sendManageRequest },
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        expect(sendManageRequest).not.toHaveBeenCalled();
+        expect(incoming.respond).toHaveBeenCalledTimes(1);
+        const outcome = incoming.respond.mock.calls[0]?.[0];
+        expect(outcome.result).toBe("ok");
+        const verdict = await verifyCapabilityToken(outcome["granted-token"], {
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            expectedBearer: requester.deviceId,
+        });
+        expect(verdict.ok).toBe(true);
+        if (verdict.ok) {
+            expect(deviceIdToHex(verdict.rootIssuer)).toBe(deviceIdToHex(root.deviceId));
+            expect(verdict.depth).toBe(1);
+        }
+    });
+    it("responds malformed for a request naming a different capability", async () => {
+        const holder = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = createBubbleUpCapabilityRequestHandler({
+            capability: CAPABILITY,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            bearerDevice: requester.deviceId,
+            expires: EXPIRES_MS,
+            ownToken: () => undefined,
+            session: { sendManageRequest: vi.fn() },
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: "room:member",
+        });
+        await handler(incoming);
+        expect(incoming.respond).toHaveBeenCalledWith({
+            result: "error",
+            code: "malformed",
+        });
+    });
+    it("responds expired for an already-stale ask", async () => {
+        const holder = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = createBubbleUpCapabilityRequestHandler({
+            capability: CAPABILITY,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            bearerDevice: requester.deviceId,
+            expires: EXPIRES_MS,
+            ownToken: () => undefined,
+            session: { sendManageRequest: vi.fn() },
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+            "valid-until": NOW_MS - 1,
+        });
+        await handler(incoming);
+        expect(incoming.respond).toHaveBeenCalledWith({
+            result: "error",
+            code: "expired",
+        });
+    });
+    it("forwards to the held token's own issuer and re-delegates the returned grant when its own depth is exhausted", async () => {
+        const root = await generateEs256Identity();
+        const holder = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const heldToken = await mint(root, holder, { delegationsRemaining: 0 });
+        const upstreamGrant = await mint(root, holder, { delegationsRemaining: 1 });
+        const sendManageRequest = vi.fn(async () => ({
+            result: "ok",
+            "granted-token": upstreamGrant,
+        }));
+        const handler = createBubbleUpCapabilityRequestHandler({
+            capability: CAPABILITY,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            bearerDevice: requester.deviceId,
+            expires: EXPIRES_MS,
+            delegationsRemaining: 0,
+            ownToken: () => heldToken,
+            session: { sendManageRequest },
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        expect(sendManageRequest).toHaveBeenCalledWith(expect.objectContaining({ verb: CAPABILITY }), SCOPE, root.deviceId, undefined, undefined);
+        const outcome = incoming.respond.mock.calls[0]?.[0];
+        expect(outcome.result).toBe("ok");
+        const verdict = await verifyCapabilityToken(outcome["granted-token"], {
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            expectedBearer: requester.deviceId,
+        });
+        expect(verdict.ok).toBe(true);
+        if (verdict.ok) {
+            expect(deviceIdToHex(verdict.rootIssuer)).toBe(deviceIdToHex(root.deviceId));
+        }
+    });
+    it("relays the upstream denial unchanged when forwarding is refused", async () => {
+        const root = await generateEs256Identity();
+        const holder = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const heldToken = await mint(root, holder, { delegationsRemaining: 0 });
+        const sendManageRequest = vi.fn(async () => ({
+            result: "error",
+            code: "denied",
+            message: "no more depth to give",
+        }));
+        const handler = createBubbleUpCapabilityRequestHandler({
+            capability: CAPABILITY,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            bearerDevice: requester.deviceId,
+            expires: EXPIRES_MS,
+            delegationsRemaining: 0,
+            ownToken: () => heldToken,
+            session: { sendManageRequest },
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        expect(incoming.respond).toHaveBeenCalledWith({
+            result: "error",
+            code: "denied",
+            message: "no more depth to give",
+        });
+    });
+    it("responds denied when this device holds no token and has nothing to forward from", async () => {
+        const holder = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = createBubbleUpCapabilityRequestHandler({
+            capability: CAPABILITY,
+            identity: holder,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            bearerDevice: requester.deviceId,
+            expires: EXPIRES_MS,
+            ownToken: () => undefined,
+            session: { sendManageRequest: vi.fn() },
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        const outcome = incoming.respond.mock.calls[0]?.[0];
+        expect(outcome.result).toBe("error");
+        expect(outcome.code).toBe("denied");
+    });
+});
+//# sourceMappingURL=capability-bubble-up.test.js.map

package/dist/test/capability-bubble-up.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-bubble-up.test.js","sourceRoot":"","sources":["../../src/test/capability-bubble-up.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAQrE,OAAO,EACL,oBAAoB,EACpB,sCAAsC,GACvC,MAAM,iCAAiC,CAAC;AAEzC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;AACjB,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AACpC,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;AAE1C,SAAS,GAAG,CAAC,KAAqC;IAChD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,CAChD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,UAAU,CACnC,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAC3D,CAAC;IACF,OAAO,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,IAAI,cAAc,GAAG,CAAC,CAAC;AACvB,SAAS,WAAW;IAClB,cAAc,IAAI,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,MAAoB,EACpB,MAAoB,EACpB,UAQI,EAAE;IAEN,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;QAC7C,OAAO,EAAE,WAAW,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC,QAAQ;QACvB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,UAAU;QAC5C,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,UAAU;QACtC,GAAG,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;YACvC,SAAS;YACT,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;YACvC,SAAS;YACT,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE;YACzC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;YAC5C,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;YACvC,SAAS;YACT,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE;YAC1C,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;YACvC,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE;YACzC,QAAQ,EAAE,MAAM,GAAG,OAAO;YAC1B,OAAO,EAAE,MAAM,GAAG,CAAC;YACnB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;YACvC,SAAS;YACT,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,MAAM;YACf,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QAE1E,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;YACvC,SAAS;YACT,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAMH,IAAI,aAAa,GAAG,CAAC,CAAC;AACtB,SAAS,YAAY,CAAC,MAA+B;IACnD,aAAa,IAAI,CAAC,CAAC;IACnB,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;QACrC,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,sCAAsC,CAAC;YACrD,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;YACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,OAAO,EAAE,EAAE,iBAAiB,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAGjD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;YACpE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAC5C,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC7B,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,sCAAsC,CAAC;YACrD,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;SACxC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,aAAa;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,sCAAsC,CAAC;YACrD,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;SACxC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,MAAM,GAAG,CAAC;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6GAA6G,EAAE,KAAK,IAAI,EAAE;QAC3H,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QAE5E,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAA4B,EAAE,CAAC,CAAC;YACnE,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,aAAa;SAC/B,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,sCAAsC,CAAC;YACrD,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;YACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,OAAO,EAAE,EAAE,iBAAiB,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAC5C,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAC7C,KAAK,EACL,IAAI,CAAC,QAAQ,EACb,SAAS,EACT,SAAS,CACV,CAAC;QAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAGjD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;YACpE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAC5C,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC7B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAA4B,EAAE,CAAC,CAAC;YACnE,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,sCAAsC,CAAC;YACrD,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;YACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,OAAO,EAAE,EAAE,iBAAiB,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,sCAAsC,CAAC;YACrD,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;SACxC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAGjD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/coordinator-gateway.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=coordinator-gateway.test.d.ts.map

package/dist/test/coordinator-gateway.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator-gateway.test.d.ts","sourceRoot":"","sources":["../../src/test/coordinator-gateway.test.ts"],"names":[],"mappings":""}

package/dist/test/coordinator-gateway.test.js

@@ -0,0 +1,88 @@
+/**
+ * Direct unit tests for CoordinatorGateway -- the connect-hub-on-become-coordinator / disconnect-hub-on-lose-coordinator wiring (agent-comms#154), tested against injected connectHub/disconnectHub closures rather than a real transport or hub socket, mirroring peer-lifecycle.test.ts's own DI-based approach.
+ */
+import { describe, expect, it, vi } from "vitest";
+import { CoordinatorGateway, } from "../core/coordinator-gateway.js";
+const HUB_URL = "wss://mesh.example.test/";
+function makeHarness() {
+    const connectHub = vi.fn().mockResolvedValue(undefined);
+    const disconnectHub = vi.fn().mockResolvedValue(undefined);
+    const onError = vi.fn();
+    const deps = {
+        hubUrl: HUB_URL,
+        connectHub,
+        disconnectHub,
+        onError,
+    };
+    return {
+        gateway: new CoordinatorGateway(deps),
+        connectHub,
+        disconnectHub,
+        onError,
+    };
+}
+describe("CoordinatorGateway — onBecameCoordinator", () => {
+    it("dials the configured hub URL", async () => {
+        const { gateway, connectHub } = makeHarness();
+        await gateway.onBecameCoordinator();
+        expect(connectHub).toHaveBeenCalledWith(HUB_URL);
+        expect(connectHub).toHaveBeenCalledTimes(1);
+    });
+    it("marks isConnected true once dialled", async () => {
+        const { gateway } = makeHarness();
+        expect(gateway.isConnected).toBe(false);
+        await gateway.onBecameCoordinator();
+        expect(gateway.isConnected).toBe(true);
+    });
+    it("is idempotent -- a second call while already connected does not redial", async () => {
+        const { gateway, connectHub } = makeHarness();
+        await gateway.onBecameCoordinator();
+        await gateway.onBecameCoordinator();
+        expect(connectHub).toHaveBeenCalledTimes(1);
+    });
+    it("reports a dial failure via onError rather than throwing -- local coordinator election must not depend on hub reachability", async () => {
+        const { gateway, connectHub, onError } = makeHarness();
+        const dialError = new Error("ECONNREFUSED");
+        connectHub.mockRejectedValueOnce(dialError);
+        await expect(gateway.onBecameCoordinator()).resolves.toBeUndefined();
+        expect(onError).toHaveBeenCalledWith(dialError);
+    });
+    it("does not mark itself connected after a failed dial, so a later call can retry", async () => {
+        const { gateway, connectHub } = makeHarness();
+        connectHub.mockRejectedValueOnce(new Error("ECONNREFUSED"));
+        await gateway.onBecameCoordinator();
+        expect(gateway.isConnected).toBe(false);
+        await gateway.onBecameCoordinator();
+        expect(gateway.isConnected).toBe(true);
+        expect(connectHub).toHaveBeenCalledTimes(2);
+    });
+});
+describe("CoordinatorGateway — onLostCoordinator", () => {
+    it("drops the hub connection when one is held", async () => {
+        const { gateway, disconnectHub } = makeHarness();
+        await gateway.onBecameCoordinator();
+        await gateway.onLostCoordinator();
+        expect(disconnectHub).toHaveBeenCalledTimes(1);
+        expect(gateway.isConnected).toBe(false);
+    });
+    it("is a no-op when this side never became the gateway", async () => {
+        const { gateway, disconnectHub } = makeHarness();
+        await gateway.onLostCoordinator();
+        expect(disconnectHub).not.toHaveBeenCalled();
+    });
+    it("is a no-op on a second call after already losing the role", async () => {
+        const { gateway, disconnectHub } = makeHarness();
+        await gateway.onBecameCoordinator();
+        await gateway.onLostCoordinator();
+        await gateway.onLostCoordinator();
+        expect(disconnectHub).toHaveBeenCalledTimes(1);
+    });
+    it("allows redialling after losing and regaining the role", async () => {
+        const { gateway, connectHub } = makeHarness();
+        await gateway.onBecameCoordinator();
+        await gateway.onLostCoordinator();
+        await gateway.onBecameCoordinator();
+        expect(connectHub).toHaveBeenCalledTimes(2);
+    });
+});
+//# sourceMappingURL=coordinator-gateway.test.js.map

package/dist/test/coordinator-gateway.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator-gateway.test.js","sourceRoot":"","sources":["../../src/test/coordinator-gateway.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,kBAAkB,GAEnB,MAAM,gCAAgC,CAAC;AAExC,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAE3C,SAAS,WAAW;IAMlB,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAA0B,CAAC;IAChD,MAAM,IAAI,GAA2B;QACnC,MAAM,EAAE,OAAO;QACf,UAAU;QACV,aAAa;QACb,OAAO;KACR,CAAC;IACF,OAAO;QACL,OAAO,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC;QACrC,UAAU;QACV,aAAa;QACb,OAAO;KACR,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;QAE9C,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAEpC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAEpC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;QAE9C,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAEpC,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2HAA2H,EAAE,KAAK,IAAI,EAAE;QACzI,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5C,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAErE,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9C,UAAU,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAEpC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC;QACjD,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAEpC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAElC,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC;QAEjD,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAElC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC;QACjD,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAElC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAElC,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9C,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACpC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAElC,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAEpC,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/gossip-directory.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gossip-directory.test.d.ts.map

package/dist/test/gossip-directory.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gossip-directory.test.d.ts","sourceRoot":"","sources":["../../src/test/gossip-directory.test.ts"],"names":[],"mappings":""}

package/dist/test/gossip-directory.test.js

@@ -0,0 +1,67 @@
+/**
+ * Direct unit tests for mergeKnownDevices, extracted from WireMeshTransport (see gossip-directory.ts's own header) -- previously only exercised indirectly through gossip-directory-aggregation.integration.test.ts's real-session harness.
+ */
+import { describe, expect, it } from "vitest";
+import { mergeKnownDevices } from "../core/gossip-directory.js";
+const DEVICE_ID_HEX_LENGTH = 64;
+const DEVICE_A_HEX = "a".repeat(DEVICE_ID_HEX_LENGTH);
+const DEVICE_B_HEX = "b".repeat(DEVICE_ID_HEX_LENGTH);
+/** An arbitrary "later" snapshot-seconds value, distinct from every other one used in this file's fixtures. */
+const NEWER_SNAPSHOT_SECONDS = 5;
+function deviceIdBytes(hex) {
+    const bytes = new Uint8Array(new ArrayBuffer(hex.length / 2));
+    for (let i = 0; i < bytes.length; i += 1) {
+        bytes[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+}
+function advert(snapshotSeconds) {
+    return {
+        addresses: [],
+        "snapshot-seconds": snapshotSeconds,
+    };
+}
+function entry(hex, snapshotSeconds) {
+    return { device: deviceIdBytes(hex), advert: advert(snapshotSeconds) };
+}
+describe("mergeKnownDevices", () => {
+    it("records a device this map has never seen before", () => {
+        const knownDevices = new Map();
+        mergeKnownDevices(knownDevices, [entry(DEVICE_A_HEX, 1)]);
+        expect(knownDevices.get(DEVICE_A_HEX)?.["snapshot-seconds"]).toBe(1);
+    });
+    it("replaces an existing entry with a strictly newer advert", () => {
+        const knownDevices = new Map([
+            [DEVICE_A_HEX, advert(1)],
+        ]);
+        mergeKnownDevices(knownDevices, [entry(DEVICE_A_HEX, 2)]);
+        expect(knownDevices.get(DEVICE_A_HEX)?.["snapshot-seconds"]).toBe(2);
+    });
+    it("keeps an equal-snapshot advert as the incoming one (>=, not >)", () => {
+        const knownDevices = new Map([
+            [DEVICE_A_HEX, advert(1)],
+        ]);
+        const incoming = advert(1);
+        mergeKnownDevices(knownDevices, [
+            { device: deviceIdBytes(DEVICE_A_HEX), advert: incoming },
+        ]);
+        expect(knownDevices.get(DEVICE_A_HEX)).toBe(incoming);
+    });
+    it("never regresses an existing entry to an older advert", () => {
+        const knownDevices = new Map([
+            [DEVICE_A_HEX, advert(NEWER_SNAPSHOT_SECONDS)],
+        ]);
+        mergeKnownDevices(knownDevices, [entry(DEVICE_A_HEX, 1)]);
+        expect(knownDevices.get(DEVICE_A_HEX)?.["snapshot-seconds"]).toBe(NEWER_SNAPSHOT_SECONDS);
+    });
+    it("merges multiple distinct devices from the same directory independently", () => {
+        const knownDevices = new Map();
+        mergeKnownDevices(knownDevices, [
+            entry(DEVICE_A_HEX, 1),
+            entry(DEVICE_B_HEX, 2),
+        ]);
+        expect(knownDevices.get(DEVICE_A_HEX)?.["snapshot-seconds"]).toBe(1);
+        expect(knownDevices.get(DEVICE_B_HEX)?.["snapshot-seconds"]).toBe(2);
+    });
+});
+//# sourceMappingURL=gossip-directory.test.js.map

package/dist/test/gossip-directory.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gossip-directory.test.js","sourceRoot":"","sources":["../../src/test/gossip-directory.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAIhE,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AACtD,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AACtD,+GAA+G;AAC/G,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,eAAuB;IACrC,OAAO;QACL,SAAS,EAAE,EAAE;QACb,kBAAkB,EAAE,eAAe;KACX,CAAC;AAC7B,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,eAAuB;IACjD,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;QAEnD,iBAAiB,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAqB;YAC/C,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;SAC1B,CAAC,CAAC;QAEH,iBAAiB,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAqB;YAC/C,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;SAC1B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAE3B,iBAAiB,CAAC,YAAY,EAAE;YAC9B,EAAE,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC1D,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAqB;YAC/C,CAAC,YAAY,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;SAC/C,CAAC,CAAC;QAEH,iBAAiB,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAC/D,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;QAEnD,iBAAiB,CAAC,YAAY,EAAE;YAC9B,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YACtB,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/hub-helpers.d.ts

@@ -1,3 +1,11 @@
 import type { Frame } from "wire-mesh-core/generated/protocol";
 export declare function cbor2ToBytes(frame: Frame): Uint8Array;
+/** A real relay hub served over ws: each accepted socket is wrapped as a Connection for createRelayHub, exactly what the production Durable Object does (pre-hibernation shape). Also exposes the hub's own live-connection count, since a test asserting a client-side disconnect actually reached the far end needs an observable on the hub itself, not just the client. */
+export declare function realHubOverWs(): Promise<{
+    url: string;
+    connectionCount: () => number;
+    close: () => Promise<void>;
+}>;
+/** Polls `condition` until it's true or `timeoutMs` elapses, rejecting on timeout -- the shared shape every hub integration test uses to wait out real async gossip/discovery/close propagation rather than asserting immediately after firing an action. */
+export declare function waitForCondition(condition: () => boolean, timeoutMs?: number): Promise<void>;
 //# sourceMappingURL=hub-helpers.d.ts.map

package/dist/test/hub-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub-helpers.d.ts","sourceRoot":"","sources":["../../src/test/hub-helpers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAE/D,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAErD"}
+{"version":3,"file":"hub-helpers.d.ts","sourceRoot":"","sources":["../../src/test/hub-helpers.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAO/D,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAErD;AA2ED,+WAA+W;AAC/W,wBAAsB,aAAa,IAAI,OAAO,CAAC;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC,CAgCD;AAED,6PAA6P;AAC7P,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,OAAO,EACxB,SAAS,SAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CAgBf"}