wire-mesh-core 1.0.3 → 1.2.0

package/dist/domain/device-id.cjs

@@ -14,14 +14,20 @@ function bytesToHex(bytes) {
 function deviceIdToHex(device) {
 	return bytesToHex(device);
 }
+/** The arbitrary-length reverse of bytesToHex -- decodes a lowercase, byte-exact hex string back into the bytes it encodes. Throws on an odd-length string, a non-hex character, or a non-lowercase one, rather than silently truncating or normalising a malformed input, matching deviceIdFromHex's own fail-closed convention for the fixed-length case. */
+function bytesFromHex(hex) {
+	if (!/^([0-9a-f]{2})*$/.test(hex)) throw new Error(`expected an even-length, lowercase hex string, got ${JSON.stringify(hex)}`);
+	const bytes = new Uint8Array(hex.length / HEX_BYTE_WIDTH);
+	for (let i = 0; i < bytes.length; i++) bytes[i] = Number.parseInt(hex.slice(i * HEX_BYTE_WIDTH, (i + 1) * HEX_BYTE_WIDTH), HEX_RADIX);
+	return bytes;
+}
 /** Parses a lowercase, 64-character device-id-hex string back into the 32-byte DeviceId it encodes. Throws on anything that isn't exactly that shape, rather than silently truncating or zero-padding a malformed input. */
 function deviceIdFromHex(hex) {
-	if (!/^[0-9a-f]{64}$/.test(hex)) throw new Error(`expected a 64-character lowercase hex string, got ${JSON.stringify(hex)}`);
-	const bytes = new Uint8Array(DEVICE_ID_HEX_LENGTH / HEX_BYTE_WIDTH);
-	for (let i = 0; i < bytes.length; i++) bytes[i] = Number.parseInt(hex.slice(i * HEX_BYTE_WIDTH, (i + 1) * HEX_BYTE_WIDTH), HEX_RADIX);
-	return require_generated_protocol.deviceIdSchema.parse(bytes);
+	if (hex.length !== DEVICE_ID_HEX_LENGTH) throw new Error(`expected a 64-character lowercase hex string, got ${JSON.stringify(hex)}`);
+	return require_generated_protocol.deviceIdSchema.parse(bytesFromHex(hex));
 }
 //#endregion
+exports.bytesFromHex = bytesFromHex;
 exports.bytesToHex = bytesToHex;
 exports.deviceIdFromHex = deviceIdFromHex;
 exports.deviceIdToHex = deviceIdToHex;

package/dist/domain/device-id.d.cts

@@ -4,6 +4,8 @@ import { v as DeviceId } from "../protocol-B26-5VX7.cjs";
 export declare function bytesToHex(bytes: Uint8Array): string;
 /** Lowercase, byte-exact hex -- the same encoding room.cddl's device-id-hex regex and the conformance vectors' synthetic device-ids already use. */
 export declare function deviceIdToHex(device: DeviceId): string;
+/** The arbitrary-length reverse of bytesToHex -- decodes a lowercase, byte-exact hex string back into the bytes it encodes. Throws on an odd-length string, a non-hex character, or a non-lowercase one, rather than silently truncating or normalising a malformed input, matching deviceIdFromHex's own fail-closed convention for the fixed-length case. */
+export declare function bytesFromHex(hex: string): Uint8Array;
 /** Parses a lowercase, 64-character device-id-hex string back into the 32-byte DeviceId it encodes. Throws on anything that isn't exactly that shape, rather than silently truncating or zero-padding a malformed input. */
 export declare function deviceIdFromHex(hex: string): DeviceId;
 //#endregion

package/dist/domain/device-id.d.mts

@@ -4,6 +4,8 @@ import { v as DeviceId } from "../protocol-B26-5VX7.mjs";
 export declare function bytesToHex(bytes: Uint8Array): string;
 /** Lowercase, byte-exact hex -- the same encoding room.cddl's device-id-hex regex and the conformance vectors' synthetic device-ids already use. */
 export declare function deviceIdToHex(device: DeviceId): string;
+/** The arbitrary-length reverse of bytesToHex -- decodes a lowercase, byte-exact hex string back into the bytes it encodes. Throws on an odd-length string, a non-hex character, or a non-lowercase one, rather than silently truncating or normalising a malformed input, matching deviceIdFromHex's own fail-closed convention for the fixed-length case. */
+export declare function bytesFromHex(hex: string): Uint8Array;
 /** Parses a lowercase, 64-character device-id-hex string back into the 32-byte DeviceId it encodes. Throws on anything that isn't exactly that shape, rather than silently truncating or zero-padding a malformed input. */
 export declare function deviceIdFromHex(hex: string): DeviceId;
 //#endregion

package/dist/domain/device-id.mjs

@@ -13,12 +13,17 @@ function bytesToHex(bytes) {
 function deviceIdToHex(device) {
 	return bytesToHex(device);
 }
+/** The arbitrary-length reverse of bytesToHex -- decodes a lowercase, byte-exact hex string back into the bytes it encodes. Throws on an odd-length string, a non-hex character, or a non-lowercase one, rather than silently truncating or normalising a malformed input, matching deviceIdFromHex's own fail-closed convention for the fixed-length case. */
+function bytesFromHex(hex) {
+	if (!/^([0-9a-f]{2})*$/.test(hex)) throw new Error(`expected an even-length, lowercase hex string, got ${JSON.stringify(hex)}`);
+	const bytes = new Uint8Array(hex.length / HEX_BYTE_WIDTH);
+	for (let i = 0; i < bytes.length; i++) bytes[i] = Number.parseInt(hex.slice(i * HEX_BYTE_WIDTH, (i + 1) * HEX_BYTE_WIDTH), HEX_RADIX);
+	return bytes;
+}
 /** Parses a lowercase, 64-character device-id-hex string back into the 32-byte DeviceId it encodes. Throws on anything that isn't exactly that shape, rather than silently truncating or zero-padding a malformed input. */
 function deviceIdFromHex(hex) {
-	if (!/^[0-9a-f]{64}$/.test(hex)) throw new Error(`expected a 64-character lowercase hex string, got ${JSON.stringify(hex)}`);
-	const bytes = new Uint8Array(DEVICE_ID_HEX_LENGTH / HEX_BYTE_WIDTH);
-	for (let i = 0; i < bytes.length; i++) bytes[i] = Number.parseInt(hex.slice(i * HEX_BYTE_WIDTH, (i + 1) * HEX_BYTE_WIDTH), HEX_RADIX);
-	return deviceIdSchema.parse(bytes);
+	if (hex.length !== DEVICE_ID_HEX_LENGTH) throw new Error(`expected a 64-character lowercase hex string, got ${JSON.stringify(hex)}`);
+	return deviceIdSchema.parse(bytesFromHex(hex));
 }
 //#endregion
-export { bytesToHex, deviceIdFromHex, deviceIdToHex };
+export { bytesFromHex, bytesToHex, deviceIdFromHex, deviceIdToHex };

package/dist/domain/mesh-session.cjs

@@ -16,7 +16,7 @@ function localHandshake(domains) {
 /**
 * Builds the connection-agnostic session state machine and its public MeshSession surface. dial is null for a session that can never (re)connect on its own -- acceptMeshSession's case, where the one connection it will ever have already exists by construction and reconnect therefore cannot apply (only the remote redialing, and being accepted again, produces a fresh connection). createMeshSession supplies dial as transport.connect so its own connect()/reconnect behaviour is unchanged from before this was factored out.
 */
-function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert) {
+function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert, addresses = []) {
 	let connection = null;
 	let state = { status: "idle" };
 	let handshake = { status: "pending" };
@@ -248,7 +248,7 @@ function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert) {
 			type: "gossip",
 			peers: [{
 				device: identity.deviceId,
-				addresses: [],
+				addresses: [...addresses],
 				"snapshot-seconds": Math.floor(clock.now() / MS_PER_SECOND)
 			}]
 		};
@@ -410,8 +410,8 @@ function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert) {
 		}
 	};
 }
-function createMeshSession(transport, identity, clock = { now: () => Date.now() }, reconnect = null) {
-	const { session } = createSessionCore(identity, clock, reconnect, async (address) => transport.connect(address));
+function createMeshSession(transport, identity, clock = { now: () => Date.now() }, reconnect = null, addresses = []) {
+	const { session } = createSessionCore(identity, clock, reconnect, async (address) => transport.connect(address), void 0, addresses);
 	return session;
 }
 /** Wires an already-accepted Connection up as a full MeshSession, mirroring exactly what createMeshSession's own dial path does once a connection exists (send handshake, send self-advert, negotiate, consume frames) -- the wire-mesh#45 prerequisite agent-comms needs, since its peers both listen and dial rather than only ever dialing the way web-console's own console UI does. Reconnect does not apply here: if this connection drops, only the remote redialing and being accepted again produces a new connection, and therefore a new session -- there is nothing on this side to retry. */
@@ -426,7 +426,7 @@ async function acceptMeshSession(connection, identity, localDomains, options = {
 		if (peerDeviceIdResolved) return;
 		peerDeviceIdResolved = true;
 		resolvePeerDeviceId?.(advert.device);
-	});
+	}, options.addresses);
 	await wireUpConnection(connection, options.label ?? "accepted", localDomains);
 	return {
 		...session,

package/dist/domain/mesh-session.d.cts

@@ -85,7 +85,9 @@ export interface MeshSession {
   sendManageRequest: (command: ManageCommand, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId, token?: CapabilityToken) => Promise<ManageOutcome>;
   close: () => Promise<void>;
 }
-export declare function createMeshSession(transport: Readonly<Transport>, identity: Readonly<IdentityPort>, clock?: Readonly<Clock>, reconnect?: ReconnectPolicy | null): MeshSession;
+export declare function createMeshSession(transport: Readonly<Transport>, identity: Readonly<IdentityPort>, clock?: Readonly<Clock>, reconnect?: ReconnectPolicy | null,
+/** This node's own directly-reachable "host:port" candidates (wire-mesh#38), advertised in this session's self-advert so other peers can attempt a direct connection instead of always falling back to a relay. Omit (or pass none) for a caller with nothing to offer, e.g. a browser client. */
+addresses?: readonly string[]): MeshSession;
 /** A MeshSession built over a connection that already exists (a Transport's own listen() handed it to onConnection), extended with the one thing a dial-side session can't offer: the device-id of the specific peer at the other end. Unlike createMeshSession, which may end up talking to a relay gossiping about many devices at once, an accepted connection is the agent-comms case -- exactly two peers, directly connected -- so "the peer" is well-defined here in a way it structurally isn't for the dial side. */
 export interface AcceptedMeshSession extends MeshSession {
   /** Resolves with the device-id carried by the first peer-advert this connection's remote sends -- the same self-advertisement mechanism createMeshSession's own directory already relies on for every peer, just narrowed to "the one peer this specific connection is with" rather than accumulated into a directory of possibly many. There is no transport-level authentication behind this yet (see wire-mesh#45's own createTlsTransport item): it is only as trustworthy as the remote's own gossip, exactly the same trust level the dial-side directory already has for every entry in it. */
@@ -95,6 +97,8 @@ export interface AcceptedMeshSessionOptions {
   /** A caller-chosen label for this connection, used only for ConnectionState's own address field -- the Connection/Transport ports expose no remote-address concept an accepted connection could report on its own (see wire-mesh#45). Defaults to a fixed placeholder since most callers have nothing more specific to offer; a transport adapter that does know the remote's address should pass it here. */
   label?: string;
   clock?: Readonly<Clock>;
+  /** This node's own directly-reachable "host:port" candidates (wire-mesh#38), advertised in this session's self-advert. Omit (or pass none) for a caller with nothing to offer. */
+  addresses?: readonly string[];
 }
 /** Wires an already-accepted Connection up as a full MeshSession, mirroring exactly what createMeshSession's own dial path does once a connection exists (send handshake, send self-advert, negotiate, consume frames) -- the wire-mesh#45 prerequisite agent-comms needs, since its peers both listen and dial rather than only ever dialing the way web-console's own console UI does. Reconnect does not apply here: if this connection drops, only the remote redialing and being accepted again produces a new connection, and therefore a new session -- there is nothing on this side to retry. */
 export declare function acceptMeshSession(connection: Readonly<Connection>, identity: Readonly<IdentityPort>, localDomains: readonly string[], options?: Readonly<AcceptedMeshSessionOptions>): Promise<AcceptedMeshSession>;

package/dist/domain/mesh-session.d.mts

@@ -85,7 +85,9 @@ export interface MeshSession {
   sendManageRequest: (command: ManageCommand, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId, token?: CapabilityToken) => Promise<ManageOutcome>;
   close: () => Promise<void>;
 }
-export declare function createMeshSession(transport: Readonly<Transport>, identity: Readonly<IdentityPort>, clock?: Readonly<Clock>, reconnect?: ReconnectPolicy | null): MeshSession;
+export declare function createMeshSession(transport: Readonly<Transport>, identity: Readonly<IdentityPort>, clock?: Readonly<Clock>, reconnect?: ReconnectPolicy | null,
+/** This node's own directly-reachable "host:port" candidates (wire-mesh#38), advertised in this session's self-advert so other peers can attempt a direct connection instead of always falling back to a relay. Omit (or pass none) for a caller with nothing to offer, e.g. a browser client. */
+addresses?: readonly string[]): MeshSession;
 /** A MeshSession built over a connection that already exists (a Transport's own listen() handed it to onConnection), extended with the one thing a dial-side session can't offer: the device-id of the specific peer at the other end. Unlike createMeshSession, which may end up talking to a relay gossiping about many devices at once, an accepted connection is the agent-comms case -- exactly two peers, directly connected -- so "the peer" is well-defined here in a way it structurally isn't for the dial side. */
 export interface AcceptedMeshSession extends MeshSession {
   /** Resolves with the device-id carried by the first peer-advert this connection's remote sends -- the same self-advertisement mechanism createMeshSession's own directory already relies on for every peer, just narrowed to "the one peer this specific connection is with" rather than accumulated into a directory of possibly many. There is no transport-level authentication behind this yet (see wire-mesh#45's own createTlsTransport item): it is only as trustworthy as the remote's own gossip, exactly the same trust level the dial-side directory already has for every entry in it. */
@@ -95,6 +97,8 @@ export interface AcceptedMeshSessionOptions {
   /** A caller-chosen label for this connection, used only for ConnectionState's own address field -- the Connection/Transport ports expose no remote-address concept an accepted connection could report on its own (see wire-mesh#45). Defaults to a fixed placeholder since most callers have nothing more specific to offer; a transport adapter that does know the remote's address should pass it here. */
   label?: string;
   clock?: Readonly<Clock>;
+  /** This node's own directly-reachable "host:port" candidates (wire-mesh#38), advertised in this session's self-advert. Omit (or pass none) for a caller with nothing to offer. */
+  addresses?: readonly string[];
 }
 /** Wires an already-accepted Connection up as a full MeshSession, mirroring exactly what createMeshSession's own dial path does once a connection exists (send handshake, send self-advert, negotiate, consume frames) -- the wire-mesh#45 prerequisite agent-comms needs, since its peers both listen and dial rather than only ever dialing the way web-console's own console UI does. Reconnect does not apply here: if this connection drops, only the remote redialing and being accepted again produces a new connection, and therefore a new session -- there is nothing on this side to retry. */
 export declare function acceptMeshSession(connection: Readonly<Connection>, identity: Readonly<IdentityPort>, localDomains: readonly string[], options?: Readonly<AcceptedMeshSessionOptions>): Promise<AcceptedMeshSession>;

package/dist/domain/mesh-session.mjs

@@ -15,7 +15,7 @@ function localHandshake(domains) {
 /**
 * Builds the connection-agnostic session state machine and its public MeshSession surface. dial is null for a session that can never (re)connect on its own -- acceptMeshSession's case, where the one connection it will ever have already exists by construction and reconnect therefore cannot apply (only the remote redialing, and being accepted again, produces a fresh connection). createMeshSession supplies dial as transport.connect so its own connect()/reconnect behaviour is unchanged from before this was factored out.
 */
-function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert) {
+function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert, addresses = []) {
 	let connection = null;
 	let state = { status: "idle" };
 	let handshake = { status: "pending" };
@@ -247,7 +247,7 @@ function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert) {
 			type: "gossip",
 			peers: [{
 				device: identity.deviceId,
-				addresses: [],
+				addresses: [...addresses],
 				"snapshot-seconds": Math.floor(clock.now() / MS_PER_SECOND)
 			}]
 		};
@@ -409,8 +409,8 @@ function createSessionCore(identity, clock, reconnect, dial, onPeerAdvert) {
 		}
 	};
 }
-function createMeshSession(transport, identity, clock = { now: () => Date.now() }, reconnect = null) {
-	const { session } = createSessionCore(identity, clock, reconnect, async (address) => transport.connect(address));
+function createMeshSession(transport, identity, clock = { now: () => Date.now() }, reconnect = null, addresses = []) {
+	const { session } = createSessionCore(identity, clock, reconnect, async (address) => transport.connect(address), void 0, addresses);
 	return session;
 }
 /** Wires an already-accepted Connection up as a full MeshSession, mirroring exactly what createMeshSession's own dial path does once a connection exists (send handshake, send self-advert, negotiate, consume frames) -- the wire-mesh#45 prerequisite agent-comms needs, since its peers both listen and dial rather than only ever dialing the way web-console's own console UI does. Reconnect does not apply here: if this connection drops, only the remote redialing and being accepted again produces a new connection, and therefore a new session -- there is nothing on this side to retry. */
@@ -425,7 +425,7 @@ async function acceptMeshSession(connection, identity, localDomains, options = {
 		if (peerDeviceIdResolved) return;
 		peerDeviceIdResolved = true;
 		resolvePeerDeviceId?.(advert.device);
-	});
+	}, options.addresses);
 	await wireUpConnection(connection, options.label ?? "accepted", localDomains);
 	return {
 		...session,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wire-mesh-core",
-  "version": "1.0.3",
+  "version": "1.2.0",
   "type": "module",
   "packageManager": "pnpm@10.33.0",
   "repository": {