openrtc 2.4.0 → 2.5.2

package/dist/{types-BArEthJr.d.ts → types-Cyc-mPjk.d.ts}

@@ -1,5 +1,5 @@
 import { PeerNamespace, ChannelNamespace, DiagnosticsNamespace, DeviceNamespace } from './coreClient.js';
-import { C as ChannelDescriptor, P as PlutoIrohConfiguration, a as PlutoRTCConfiguration, b as PlutoMoQConfiguration, R as RouteOptimization, c as ProtocolName } from './Connection-DZ5eP5hL.js';
+import { R as RoomArchitectureMode, b as RoomArchitectureSnapshot, c as RoomAuthorityAssignment, C as ChannelDescriptor, P as PlutoIrohConfiguration, d as PlutoRTCConfiguration, e as PlutoMoQConfiguration, f as RouteOptimization, g as ProtocolName } from './Connection-CTpuImO-.js';
 
 interface AuthProvider {
     /** Registered provider ID from the developer app capability manifest. */
@@ -317,6 +317,10 @@ interface Connection {
 interface Channel<T> {
     send(message: T): Promise<void>;
     sendTo(peerId: string, message: T): Promise<void>;
+    /**
+     * The event peerId is the authenticated device ID for sparse broadcasts;
+     * direct channels retain the connection peer ID.
+     */
     onMessage(callback: (event: {
         peerId: string;
         message: T;
@@ -362,6 +366,14 @@ interface Space extends Avenue {
 interface Room extends Avenue {
     readonly kind: 'room';
     readonly membership: 'ephemeral' | 'durable';
+    /** Current room-wide architecture chosen by the gateway policy owner. */
+    architecture(): RoomArchitectureSnapshot;
+    /** Emits the current snapshot immediately, then later committed changes. */
+    onArchitectureChanged(callback: (snapshot: RoomArchitectureSnapshot) => void): () => void;
+    /** Current signed application-interest assignment, if authority mode has assigned this client. */
+    authorityAssignment(): RoomAuthorityAssignment | null;
+    /** Emits the current assignment immediately, then later admitted revisions. */
+    onAuthorityAssignmentChanged(callback: (assignment: RoomAuthorityAssignment | null) => void): () => void;
     leave(): Promise<void>;
 }
 interface Ticket extends Avenue {
@@ -378,6 +390,12 @@ interface Ticket extends Avenue {
 interface DeviceOptions {
     auth?: AuthProvider;
     autoConnect?: 'none' | 'online';
+    /**
+     * Durable device IDs that automatic discovery must not connect to.
+     * Load persisted exclusions before calling `devices.start()` so the Rust
+     * owner and the first coordination presence share one atomic policy.
+     */
+    autoConnectExcludedDeviceIds?: readonly string[];
     /** Optional local profile; it does not alter the durable device identity. */
     profile?: DeviceProfile;
     maxPeers?: number;
@@ -400,9 +418,20 @@ interface RoomOptions {
     identity?: 'session';
     auth?: AuthProvider;
     maxPeers?: number;
+    /**
+     * Declares the room's delivery semantics for architecture selection.
+     * Reliable is the safe default. Sparse rooms require latest-state data.
+     */
+    payload?: Delivery;
+    /**
+     * Defaults to auto. A fixed mode is room-wide and may still fail safety or
+     * budget gates. Managed is reserved but unavailable in 2.5.
+     */
+    architecture?: RoomArchitectureMode;
     /**
      * Requires the app manifest's reviewed advanced-fanout opt-in. Rooms then
      * use a four-neighbor sparse overlay with bounded named-channel gossip.
+     * @deprecated Use `architecture: 'sparse'`. Removed in the next major.
      */
     advancedFanout?: boolean;
 }
@@ -425,9 +454,133 @@ interface Usage {
         creditsUsd: number;
         estimated: true;
     };
+    estimateRoom(input: RoomUsageEstimateInput): RoomUsageEstimate;
     readonly sessionCreditsUsd: number;
 }
+interface RoomUsageEstimateInput {
+    /** Managed quotes are unavailable in 2.5 and fail with `room-architecture-unavailable`. */
+    architecture?: RoomArchitectureMode;
+    maxMembers: number;
+    durationSeconds: number;
+    delivery: Delivery;
+    maxPayloadBytes: number;
+    maxMessagesPerSecond: number;
+}
+interface RoomUsageEstimate {
+    architecture: RoomArchitectureMode;
+    effectiveArchitecture: Exclude<RoomArchitectureMode, 'auto'>;
+    creditsUsd: number;
+    estimated: true;
+    expiresAtMs: number;
+    assumptions: readonly string[];
+}
+type OfflineAssurance = 'software' | 'hardware-backed' | 'manufacturer' | 'gateway';
+interface OfflineRuntimeSupport {
+    provisioning: boolean;
+    localMesh: boolean;
+    cloudRequired: false;
+    reason?: string;
+}
+interface OfflineEnrollmentRequest {
+    body: {
+        protocol: 'openrtc-offline-device/1';
+        trustDomain: string;
+        deviceId: string;
+        endpointId: string;
+        proofPublicKey: string;
+        enrollmentNonce: string;
+        requestedRoles: string[];
+        /** Informational request metadata; the fleet issuer certifies the credential assurance. */
+        requestedAssurance: OfflineAssurance;
+        createdAtMs: number;
+    };
+    proofSignature: string;
+}
+interface Offline {
+    support(): Promise<OfflineRuntimeSupport>;
+    /** Native Rust signs this request; private key bytes never enter JavaScript. */
+    createEnrollmentRequest(options: {
+        trustDomain: string;
+        requestedRoles: string[];
+    }): Promise<OfflineEnrollmentRequest>;
+}
+/** Opaque, short-lived, installation-bound broadcast authority. */
+type BroadcastGrant = string & {
+    readonly __openrtcBroadcastGrant: unique symbol;
+};
+/** Single-use bearer invitation. Send it only to the intended recipient. */
+type BroadcastInvite = string & {
+    readonly __openrtcBroadcastInvite: unique symbol;
+};
+type BroadcastRole = 'owner' | 'publisher' | 'subscriber' | 'processor';
+type BroadcastState = 'opening' | 'live' | 'retrying' | 'closed' | 'failed';
+interface BroadcastSource {
+    /** Anonymous slot such as `host-a`; never a device, endpoint, or provider ID. */
+    readonly id: string;
+    readonly alias?: string;
+}
+interface BroadcastTrackEvent extends MediaTrackEvent {
+    readonly source: BroadcastSource;
+}
+interface BroadcastMedia {
+    addTrack(track: MediaStreamTrack, options?: MediaTrackOptions): Promise<MediaSender>;
+    removeTrack(sender: MediaSender): Promise<void>;
+    onTrack(callback: (event: BroadcastTrackEvent) => void): () => void;
+    senders(): readonly MediaSender[];
+    receivers(): readonly MediaReceiver[];
+}
+interface BroadcastStats {
+    queuedMediaBytes: number;
+    droppedMediaObjects: number;
+    publishedBytes: number;
+    deliveredBytes: number;
+    retries: number;
+}
+/** Non-peer relay publication/subscription. It never exposes a carrier or provider handle. */
+interface BroadcastSession {
+    readonly id: string;
+    readonly role: BroadcastRole;
+    readonly state: BroadcastState;
+    readonly media: BroadcastMedia;
+    getStats(): Promise<BroadcastStats>;
+    close(): Promise<void>;
+}
+/**
+ * Runtime-owned publisher identity. Only its public verification key is
+ * exportable; the sign-only private key remains inside native Rust or WASM.
+ */
+interface BroadcastPublisher {
+    readonly verificationKey: Uint8Array;
+    open(grant: BroadcastGrant): Promise<BroadcastSession>;
+    close(): Promise<void>;
+}
+interface BroadcastCreateOptions {
+    /** Rust/WASM/native signer whose public key is bound into the owner grant. */
+    publisher: BroadcastPublisher;
+    auth?: AuthProvider;
+    sourceSlot?: string;
+    maxPublishers: number;
+    maxSubscribers: number;
+    maxBitrateBps: number;
+    maxDurationSeconds: number;
+    maxEgressBytes: number;
+    /** Actual initial owner publication reservation, not the broadcast ceiling. */
+    publisherBitrateBps: number;
+    /** Actual initial owner/viewer egress reservation, not the broadcast ceiling. */
+    reservedEgressBytes: number;
+}
+interface BroadcastInviteOptions {
+    role: 'publisher' | 'subscriber';
+    /** Required for publishers; obtained from that co-host's prepared signer. */
+    publicationVerificationKey?: Uint8Array;
+    /** Required and unique for publishers; omitted for subscribers. */
+    sourceSlot?: string;
+    bitrateBps: number;
+    durationSeconds: number;
+    reservedEgressBytes: number;
+}
 interface Client {
+    readonly offline: Offline;
     readonly devices: {
         /**
          * Returns this installation's durable, app-scoped device ID without
@@ -455,9 +608,43 @@ interface Client {
     readonly tickets: {
         issue(id: string, options?: TicketOptions): Promise<Ticket>;
     };
+    readonly broadcasts: {
+        /** Reserve hard limits and mint a device/key-bound owner grant. */
+        create(options: BroadcastCreateOptions): Promise<BroadcastGrant>;
+        /** The signed grant decides the role; options cannot promote the caller. */
+        open(grant: BroadcastGrant): Promise<BroadcastSession>;
+        /** Familiar viewer alias for `open`; the grant still decides the role. */
+        subscribe(grant: BroadcastGrant): Promise<BroadcastSession>;
+        /** Prepare a runtime-owned signer before requesting a publisher grant. */
+        preparePublisher(): Promise<BroadcastPublisher>;
+        /** Renewal advances the grant generation; it never mutates in place. */
+        renew(grant: BroadcastGrant, options?: {
+            auth?: AuthProvider;
+        }): Promise<BroadcastGrant>;
+        /** Create a single-use role invitation; capacity is reserved on accept. */
+        invite(ownerGrant: BroadcastGrant, options: BroadcastInviteOptions & {
+            auth?: AuthProvider;
+        }): Promise<BroadcastInvite>;
+        /** Bind an invitation to this installation and mint its role grant. */
+        accept(invite: BroadcastInvite, options?: {
+            auth?: AuthProvider;
+        }): Promise<BroadcastGrant>;
+        /** Owner-only targeted revoke; the accepted invitation identifies one role/source. */
+        revoke(ownerGrant: BroadcastGrant, options: {
+            invite: BroadcastInvite;
+            auth?: AuthProvider;
+        }): Promise<void>;
+        /** Retire this installation's own role grant. */
+        leave(grant: BroadcastGrant, options?: {
+            auth?: AuthProvider;
+        }): Promise<void>;
+        close(grant: BroadcastGrant, options?: {
+            auth?: AuthProvider;
+        }): Promise<void>;
+    };
     readonly channels: Channels;
     readonly usage: Usage;
     close(): Promise<void>;
 }
 
-export type { AccessMode as A, BotVerificationProvider as B, Client as C, Delivery as D, EnrolledDevice as E, State as F, TicketOptions as G, Transports as H, IncomingPeerBidirectionalStream as I, UsageUpdate as J, UsageWarning as K, MediaConnection as M, Options as O, PeerBidirectionalStream as P, Room as R, Space as S, Ticket as T, Usage as U, AttestationProvider as a, AuthProvider as b, Avenue as c, Channel as d, Channels as e, Connection as f, DeviceOptions as g, DeviceProfile as h, Devices as i, IncomingPeerUnidirectionalStream as j, MediaIncomingDemuxStats as k, MediaKind as l, MediaLatencySummary as m, MediaReceiver as n, MediaReceiverStats as o, MediaSender as p, MediaSenderStats as q, MediaStats as r, MediaTrackEvent as s, MediaTrackOptions as t, PeerDatagramDuplexStream as u, PeerDatagramStats as v, PeerStreamOptions as w, PeerStreamTransport as x, RoomOptions as y, SpaceOptions as z };
+export type { Space as $, AccessMode as A, BotVerificationProvider as B, Client as C, Delivery as D, EnrolledDevice as E, MediaReceiverStats as F, MediaSender as G, MediaSenderStats as H, IncomingPeerBidirectionalStream as I, MediaStats as J, MediaTrackEvent as K, MediaTrackOptions as L, MediaConnection as M, Offline as N, Options as O, OfflineAssurance as P, OfflineEnrollmentRequest as Q, OfflineRuntimeSupport as R, PeerBidirectionalStream as S, PeerDatagramDuplexStream as T, PeerDatagramStats as U, PeerStreamOptions as V, PeerStreamTransport as W, Room as X, RoomOptions as Y, RoomUsageEstimate as Z, RoomUsageEstimateInput as _, AttestationProvider as a, SpaceOptions as a0, State as a1, Ticket as a2, TicketOptions as a3, Transports as a4, Usage as a5, UsageUpdate as a6, UsageWarning as a7, AuthProvider as b, Avenue as c, BroadcastCreateOptions as d, BroadcastGrant as e, BroadcastInvite as f, BroadcastInviteOptions as g, BroadcastMedia as h, BroadcastPublisher as i, BroadcastRole as j, BroadcastSession as k, BroadcastSource as l, BroadcastState as m, BroadcastStats as n, BroadcastTrackEvent as o, Channel as p, Channels as q, Connection as r, DeviceOptions as s, DeviceProfile as t, Devices as u, IncomingPeerUnidirectionalStream as v, MediaIncomingDemuxStats as w, MediaKind as x, MediaLatencySummary as y, MediaReceiver as z };

package/native/darwin-arm64/openrtc-node-host.manifest.json

@@ -0,0 +1,20 @@
+{
+  "schema": 1,
+  "kind": "openrtc-node-host",
+  "platform": "darwin",
+  "arch": "arm64",
+  "rustTarget": "aarch64-apple-darwin",
+  "sourceCommit": "7e9df67b81fbf03ff8ea44ef1d9290ac13184d9f",
+  "sourceDigest": "aee854c5405a8e501c3f0e9f281603c2932baf7aea446c2c89b4aab842552285",
+  "binarySha256": "ad50f30cdb3ae513715305cd602e1bbec8a4680f8a243d569ea989612108da9a",
+  "protocol": {
+    "lifecycleOwner": "rust-peer-session",
+    "maxApplicationPayloadBytes": 65536,
+    "maxCommandBytes": 98304,
+    "maxConfigBytes": 24576,
+    "protocolVersion": 1
+  },
+  "signingKeySha256": "0391c617f3df12611b419e129cace36fa792e73da03271649cbed9e9f9f155ef",
+  "signatureAlgorithm": "ed25519",
+  "signature": "kuVunfgJyW3DkEwwEvuMU47xuzh5NIUdisyqaZvuplAVVaS7f5p9ZSPsXkWnHtQbXhgH3ZhuaJYqX1wXA+OBCw=="
+}

package/native/darwin-x64/openrtc-node-host.manifest.json

@@ -0,0 +1,20 @@
+{
+  "schema": 1,
+  "kind": "openrtc-node-host",
+  "platform": "darwin",
+  "arch": "x64",
+  "rustTarget": "x86_64-apple-darwin",
+  "sourceCommit": "7e9df67b81fbf03ff8ea44ef1d9290ac13184d9f",
+  "sourceDigest": "aee854c5405a8e501c3f0e9f281603c2932baf7aea446c2c89b4aab842552285",
+  "binarySha256": "81ba3b60cc6dae1423e1900b3f979d9137753c8910bf0f52a3348f665cca6ad3",
+  "protocol": {
+    "lifecycleOwner": "rust-peer-session",
+    "maxApplicationPayloadBytes": 65536,
+    "maxCommandBytes": 98304,
+    "maxConfigBytes": 24576,
+    "protocolVersion": 1
+  },
+  "signingKeySha256": "0391c617f3df12611b419e129cace36fa792e73da03271649cbed9e9f9f155ef",
+  "signatureAlgorithm": "ed25519",
+  "signature": "EjbOwXt3VTPv77rMa7/YeCPysIJ5++27/nquXRIsheUQ3zt4urwQKuSS/xvY85Ja8K2TIqdNv7DuT1RunBj/DQ=="
+}

package/native/linux-x64/openrtc-node-host.manifest.json

@@ -0,0 +1,20 @@
+{
+  "schema": 1,
+  "kind": "openrtc-node-host",
+  "platform": "linux",
+  "arch": "x64",
+  "rustTarget": "x86_64-unknown-linux-gnu",
+  "sourceCommit": "7e9df67b81fbf03ff8ea44ef1d9290ac13184d9f",
+  "sourceDigest": "aee854c5405a8e501c3f0e9f281603c2932baf7aea446c2c89b4aab842552285",
+  "binarySha256": "3f8c966edeb58ca295fc2f71718c677066ba7d1bdbdf4cdaebde478352a62450",
+  "protocol": {
+    "lifecycleOwner": "rust-peer-session",
+    "maxApplicationPayloadBytes": 65536,
+    "maxCommandBytes": 98304,
+    "maxConfigBytes": 24576,
+    "protocolVersion": 1
+  },
+  "signingKeySha256": "0391c617f3df12611b419e129cace36fa792e73da03271649cbed9e9f9f155ef",
+  "signatureAlgorithm": "ed25519",
+  "signature": "TLarVzgrLm5M479wd6mP1tycTMvCRTWc3PGQBJBt9X/SbtuQJIQpb24FHxuVNgGOhdu+X+IQcGKTKO8LPABuBQ=="
+}

package/native/openrtc-node-host-signing-public.pem

@@ -0,0 +1,3 @@
+-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAenesayXDgA9M3xDYvja7IU6RJF74haGncLNwkx3c708=
+-----END PUBLIC KEY-----

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openrtc",
-  "version": "2.4.0",
+  "version": "2.5.2",
   "private": false,
   "type": "module",
   "sideEffects": false,
@@ -27,6 +27,7 @@
     "dist/**/*.js",
     "dist/**/*.d.ts",
     "dist/**/*.wasm",
+    "native/**/*",
     "LICENSE",
     "README.md"
   ],
@@ -39,6 +40,26 @@
       "types": "./dist/native.d.ts",
       "import": "./dist/native.js"
     },
+    "./node": {
+      "browser": {
+        "types": "./dist/node-browser.d.ts",
+        "import": "./dist/node-browser.js"
+      },
+      "types": "./dist/node.d.ts",
+      "import": "./dist/node.js"
+    },
+    "./server": {
+      "browser": {
+        "types": "./dist/server-browser.d.ts",
+        "import": "./dist/server-browser.js"
+      },
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js"
+    },
+    "./service-node": {
+      "types": "./dist/service-node.d.ts",
+      "import": "./dist/service-node.js"
+    },
     "./testing": {
       "types": "./dist/testing.d.ts",
       "import": "./dist/testing.js"
@@ -68,12 +89,14 @@
   "scripts": {
     "build": "tsup",
     "check:lightweight-entry": "node scripts/check-lightweight-entry.mjs",
-    "check:native-bundle": "node scripts/check-native-bundle.mjs",
+    "check:native-bundle": "node scripts/check-native-bundle.mjs && pnpm --dir ../.. verify:node-host:released",
     "check:media-ownership": "vitest run tests/contract/MediaOwnershipAudit.test.ts --no-file-parallelism --maxWorkers=1",
+    "check:entrypoints": "node scripts/check-entrypoints.mjs",
+    "check:pack-install": "node scripts/check-pack-install.mjs",
     "build:clean": "rm -rf dist && pnpm run build",
-    "release:prepare": "pnpm run build:wasm && pnpm run build:clean && pnpm run check:lightweight-entry && pnpm run check:native-bundle",
+    "release:prepare": "pnpm run build:wasm && pnpm run build:clean && pnpm run check:lightweight-entry && pnpm run check:native-bundle && pnpm run check:entrypoints && pnpm run check:pack-install",
     "build:types": "tsc --noEmit",
-    "build:wasm": "cd ../../crates/openrtc && OPENRTC_REPO_ROOT=$(cd ../.. && pwd) && CARGO_REGISTRY_ROOT=${CARGO_HOME:-$HOME/.cargo} && RUSTUP_TOOLCHAIN=nightly RUSTFLAGS=\"-Zlocation-detail=none --remap-path-prefix=$HOME=/home --remap-path-prefix=$CARGO_REGISTRY_ROOT=/cargo --remap-path-prefix=$OPENRTC_REPO_ROOT=/openrtc\" wasm-pack build --target web --out-dir ../../packages/openrtc/wasm . --features iroh-protocols-wasm,transport-webrtc,transport-moq && rm -rf ../../packages/openrtc/wasm/.gitignore",
+    "build:wasm": "node ../../scripts/build-openrtc-wasm-artifact.mjs",
     "test": "pnpm run test:deterministic && pnpm run test:emulator",
     "test:deterministic": "OPENRTC_DETERMINISTIC_TESTS=1 vitest run tests/unit tests/contract",
     "test:emulator": "node ../../tests/emulator/run-emulator-suite.mjs",
@@ -99,6 +122,7 @@
     "tsup": "^8.5.1",
     "typescript": "^5.0.0",
     "vitest": "^4.0.18",
+    "ws": "8.21.0",
     "zod": "^4.4.3"
   },
   "directories": {

package/dist/WasmBridge-3W2HHADU.js

@@ -1 +0,0 @@
-export{a as WasmBridge}from'./chunk-YYI6AY6W.js';import'./chunk-GNW63SM6.js';import'./chunk-OT7IPLZE.js';import'./chunk-AJQVMVYW.js';import'./chunk-JPBW67B3.js';import'./chunk-MI3ZMVPK.js';import'./chunk-OWKAJPOI.js';import'./chunk-2GX6GB6L.js';