wire-mesh-core 1.45.1 → 1.46.0

package/dist/adapters/frame-codec.d.cts

@@ -1,4 +1,4 @@
-import { N as Frame } from "../protocol-gbXtNeOc.cjs";
+import { N as Frame } from "../protocol-D8CU6s2_.cjs";
 //#region src/adapters/frame-codec.d.ts
 export declare function messageFromFrame(frame: Frame): Uint8Array<ArrayBuffer>;
 /** A frame that fails schema validation, caught separately from a decode failure so it can be dropped without disconnecting. */

package/dist/adapters/frame-codec.d.mts

@@ -1,4 +1,4 @@
-import { N as Frame } from "../protocol-gbXtNeOc.mjs";
+import { N as Frame } from "../protocol-D8CU6s2_.mjs";
 //#region src/adapters/frame-codec.d.ts
 export declare function messageFromFrame(frame: Frame): Uint8Array<ArrayBuffer>;
 /** A frame that fails schema validation, caught separately from a decode failure so it can be dropped without disconnecting. */

package/dist/adapters/node-identity.d.cts

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId } from "../protocol-gbXtNeOc.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { B as IdentityKey, D as DeviceId } from "../protocol-D8CU6s2_.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 import { webcrypto } from "node:crypto";
 //#region src/adapters/node-identity.d.ts
 export declare function deriveDeviceId(publicKey: Uint8Array): Promise<DeviceId>;

package/dist/adapters/node-identity.d.mts

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId } from "../protocol-gbXtNeOc.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { B as IdentityKey, D as DeviceId } from "../protocol-D8CU6s2_.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 import { webcrypto } from "node:crypto";
 //#region src/adapters/node-identity.d.ts
 export declare function deriveDeviceId(publicKey: Uint8Array): Promise<DeviceId>;

package/dist/adapters/tcp-transport.d.cts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-DAsFqDDS.cjs";
+import { r as Transport } from "../transport-BbSGNRFZ.cjs";
 //#region src/adapters/tcp-transport.d.ts
 /** A Node net.Socket-based Transport: length-prefixed, CBOR-encoded frames over plain TCP -- matching Cascade's own transport shape, since interop with Cascade nodes is wire-mesh's stated goal. Framing (not TLS) is this adapter's own concern; a TLS-terminated variant is a separate adapter behind the same Transport contract. */
 export declare function createTcpTransport(): Transport;

package/dist/adapters/tcp-transport.d.mts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-Dy4h2eNY.mjs";
+import { r as Transport } from "../transport-BNeF6kDe.mjs";
 //#region src/adapters/tcp-transport.d.ts
 /** A Node net.Socket-based Transport: length-prefixed, CBOR-encoded frames over plain TCP -- matching Cascade's own transport shape, since interop with Cascade nodes is wire-mesh's stated goal. Framing (not TLS) is this adapter's own concern; a TLS-terminated variant is a separate adapter behind the same Transport contract. */
 export declare function createTcpTransport(): Transport;

package/dist/adapters/tls-transport.d.cts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-DAsFqDDS.cjs";
+import { r as Transport } from "../transport-BbSGNRFZ.cjs";
 //#region src/adapters/tls-transport.d.ts
 export interface TlsIdentity {
   certificatePem: string;

package/dist/adapters/tls-transport.d.mts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-Dy4h2eNY.mjs";
+import { r as Transport } from "../transport-BNeF6kDe.mjs";
 //#region src/adapters/tls-transport.d.ts
 export interface TlsIdentity {
   certificatePem: string;

package/dist/domain/bulk.cjs

@@ -247,6 +247,31 @@ function decodeUint(bytes) {
 	return Number(new TextDecoder().decode(bytes));
 }
 /**
+* Builds a CreateBulkSenderOptions.source reading back a transfer this same storage already durably received as a BulkReceiver -- the read-back half of the mailbox/holder re-serving role (wire-mesh#161): a holder that accepted a shard once via createBulkReceiver's own createOpenHandler can re-serve the identical bytes to a fresh requester by constructing an ordinary createBulkSender over this source, reusing the exact chunk/ack-seq storage keys createBulkReceiver already wrote for the same transfer-id. Chunks past whatever ack-seq this storage currently holds durably are simply not yielded yet -- calling this before the original receipt has finished durably persisting every chunk is a caller error the resulting short read surfaces downstream as a digest mismatch on the receiving end, not something this function detects itself. Satisfies source's own re-readability contract (callable more than once, from any previously-reached seq, identical bytes each time) by construction: every call re-reads storage fresh rather than caching anything.
+*/
+function storedTransferSource(options) {
+	const { storage, transferId } = options;
+	const idHex = transferIdHex(transferId);
+	return (fromSeq) => ({ [Symbol.asyncIterator]() {
+		let seq = fromSeq;
+		return { async next() {
+			const ackedBytes = await storage.get(ackSeqKey(idHex));
+			const ackedCount = ackedBytes === void 0 ? 0 : decodeUint(ackedBytes);
+			if (seq >= ackedCount) return {
+				value: void 0,
+				done: true
+			};
+			const chunk = await storage.get(chunkKey(idHex, seq));
+			if (chunk === void 0) throw new Error(`stored transfer ${idHex} is missing chunk ${String(seq)} though ack-seq claims ${String(ackedCount)} durable`);
+			seq += 1;
+			return {
+				value: chunk,
+				done: false
+			};
+		} };
+	} });
+}
+/**
 * Builds a receiver coordinator over one KeyValueStorage. Constructed once and shared across every connection this side accepts -- durable per-transfer state (which chunks are persisted, who opened it) and the in-memory registry of which connection currently owns each transfer must both outlive any one connection for resumption to mean anything at all.
 */
 function createBulkReceiver(options) {
@@ -398,3 +423,4 @@ exports.buildBulkOpenCommand = buildBulkOpenCommand;
 exports.buildBulkResumeCommand = buildBulkResumeCommand;
 exports.createBulkReceiver = createBulkReceiver;
 exports.createBulkSender = createBulkSender;
+exports.storedTransferSource = storedTransferSource;

package/dist/domain/bulk.d.cts

@@ -1,6 +1,6 @@
-import { D as DeviceId, N as Frame, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-gbXtNeOc.cjs";
+import { D as DeviceId, N as Frame, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-D8CU6s2_.cjs";
 import { KeyValueStorage } from "../ports/storage.cjs";
-import { t as Connection } from "../transport-DAsFqDDS.cjs";
+import { t as Connection } from "../transport-BbSGNRFZ.cjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.cjs";
 //#region src/domain/bulk.d.ts
 /** The two capabilities matching the direction each manage-command actually flows (spec/bulk.cddl): the sender proves write authority to open a transfer, the receiver proves read authority to ask for one to continue. */
@@ -90,6 +90,14 @@ export interface BulkReceiver {
 export interface CreateBulkReceiverOptions {
   storage: KeyValueStorage;
 }
+export interface StoredTransferSourceOptions {
+  storage: KeyValueStorage;
+  transferId: Uint8Array<ArrayBuffer>;
+}
+/**
+ * Builds a CreateBulkSenderOptions.source reading back a transfer this same storage already durably received as a BulkReceiver -- the read-back half of the mailbox/holder re-serving role (wire-mesh#161): a holder that accepted a shard once via createBulkReceiver's own createOpenHandler can re-serve the identical bytes to a fresh requester by constructing an ordinary createBulkSender over this source, reusing the exact chunk/ack-seq storage keys createBulkReceiver already wrote for the same transfer-id. Chunks past whatever ack-seq this storage currently holds durably are simply not yielded yet -- calling this before the original receipt has finished durably persisting every chunk is a caller error the resulting short read surfaces downstream as a digest mismatch on the receiving end, not something this function detects itself. Satisfies source's own re-readability contract (callable more than once, from any previously-reached seq, identical bytes each time) by construction: every call re-reads storage fresh rather than caching anything.
+ */
+export declare function storedTransferSource(options: Readonly<StoredTransferSourceOptions>): (fromSeq: number) => AsyncIterable<Uint8Array<ArrayBuffer>>;
 /**
  * Builds a receiver coordinator over one KeyValueStorage. Constructed once and shared across every connection this side accepts -- durable per-transfer state (which chunks are persisted, who opened it) and the in-memory registry of which connection currently owns each transfer must both outlive any one connection for resumption to mean anything at all.
  */

package/dist/domain/bulk.d.mts

@@ -1,6 +1,6 @@
-import { D as DeviceId, N as Frame, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-gbXtNeOc.mjs";
+import { D as DeviceId, N as Frame, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-D8CU6s2_.mjs";
 import { KeyValueStorage } from "../ports/storage.mjs";
-import { t as Connection } from "../transport-Dy4h2eNY.mjs";
+import { t as Connection } from "../transport-BNeF6kDe.mjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.mjs";
 //#region src/domain/bulk.d.ts
 /** The two capabilities matching the direction each manage-command actually flows (spec/bulk.cddl): the sender proves write authority to open a transfer, the receiver proves read authority to ask for one to continue. */
@@ -90,6 +90,14 @@ export interface BulkReceiver {
 export interface CreateBulkReceiverOptions {
   storage: KeyValueStorage;
 }
+export interface StoredTransferSourceOptions {
+  storage: KeyValueStorage;
+  transferId: Uint8Array<ArrayBuffer>;
+}
+/**
+ * Builds a CreateBulkSenderOptions.source reading back a transfer this same storage already durably received as a BulkReceiver -- the read-back half of the mailbox/holder re-serving role (wire-mesh#161): a holder that accepted a shard once via createBulkReceiver's own createOpenHandler can re-serve the identical bytes to a fresh requester by constructing an ordinary createBulkSender over this source, reusing the exact chunk/ack-seq storage keys createBulkReceiver already wrote for the same transfer-id. Chunks past whatever ack-seq this storage currently holds durably are simply not yielded yet -- calling this before the original receipt has finished durably persisting every chunk is a caller error the resulting short read surfaces downstream as a digest mismatch on the receiving end, not something this function detects itself. Satisfies source's own re-readability contract (callable more than once, from any previously-reached seq, identical bytes each time) by construction: every call re-reads storage fresh rather than caching anything.
+ */
+export declare function storedTransferSource(options: Readonly<StoredTransferSourceOptions>): (fromSeq: number) => AsyncIterable<Uint8Array<ArrayBuffer>>;
 /**
  * Builds a receiver coordinator over one KeyValueStorage. Constructed once and shared across every connection this side accepts -- durable per-transfer state (which chunks are persisted, who opened it) and the in-memory registry of which connection currently owns each transfer must both outlive any one connection for resumption to mean anything at all.
  */

package/dist/domain/bulk.mjs

@@ -246,6 +246,31 @@ function decodeUint(bytes) {
 	return Number(new TextDecoder().decode(bytes));
 }
 /**
+* Builds a CreateBulkSenderOptions.source reading back a transfer this same storage already durably received as a BulkReceiver -- the read-back half of the mailbox/holder re-serving role (wire-mesh#161): a holder that accepted a shard once via createBulkReceiver's own createOpenHandler can re-serve the identical bytes to a fresh requester by constructing an ordinary createBulkSender over this source, reusing the exact chunk/ack-seq storage keys createBulkReceiver already wrote for the same transfer-id. Chunks past whatever ack-seq this storage currently holds durably are simply not yielded yet -- calling this before the original receipt has finished durably persisting every chunk is a caller error the resulting short read surfaces downstream as a digest mismatch on the receiving end, not something this function detects itself. Satisfies source's own re-readability contract (callable more than once, from any previously-reached seq, identical bytes each time) by construction: every call re-reads storage fresh rather than caching anything.
+*/
+function storedTransferSource(options) {
+	const { storage, transferId } = options;
+	const idHex = transferIdHex(transferId);
+	return (fromSeq) => ({ [Symbol.asyncIterator]() {
+		let seq = fromSeq;
+		return { async next() {
+			const ackedBytes = await storage.get(ackSeqKey(idHex));
+			const ackedCount = ackedBytes === void 0 ? 0 : decodeUint(ackedBytes);
+			if (seq >= ackedCount) return {
+				value: void 0,
+				done: true
+			};
+			const chunk = await storage.get(chunkKey(idHex, seq));
+			if (chunk === void 0) throw new Error(`stored transfer ${idHex} is missing chunk ${String(seq)} though ack-seq claims ${String(ackedCount)} durable`);
+			seq += 1;
+			return {
+				value: chunk,
+				done: false
+			};
+		} };
+	} });
+}
+/**
 * Builds a receiver coordinator over one KeyValueStorage. Constructed once and shared across every connection this side accepts -- durable per-transfer state (which chunks are persisted, who opened it) and the in-memory registry of which connection currently owns each transfer must both outlive any one connection for resumption to mean anything at all.
 */
 function createBulkReceiver(options) {
@@ -390,4 +415,4 @@ function createBulkReceiver(options) {
 	};
 }
 //#endregion
-export { BULK_READ_CAPABILITY, BULK_WRITE_CAPABILITY, buildBulkCancelCommand, buildBulkOpenCommand, buildBulkResumeCommand, createBulkReceiver, createBulkSender };
+export { BULK_READ_CAPABILITY, BULK_WRITE_CAPABILITY, buildBulkCancelCommand, buildBulkOpenCommand, buildBulkResumeCommand, createBulkReceiver, createBulkSender, storedTransferSource };

package/dist/domain/capability-grant.d.cts

@@ -1,8 +1,8 @@
-import { D as DeviceId, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-gbXtNeOc.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { D as DeviceId, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-D8CU6s2_.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
 import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.cjs";
-import { a as RevocationCheck } from "../tokens-C9Kwy0Gk.cjs";
+import { a as RevocationCheck } from "../tokens-B1-MAIST.cjs";
 //#region src/domain/capability-grant.d.ts
 /**
  * Builds a capability-grant command per management.cddl. The outer `manage-command.verb` is the capability string itself, the identical convention capability-request.ts's own buildCapabilityRequestCommand already establishes -- a receiver's per-capability handler is how it knows which grant this push is even for. `params.verb` is the fixed "capability.grant" marker. No scope or invitee field: manage-request-frame's own top-level scope already carries the former, and the request's own destination already carries the latter -- naming either a second time inside params could only ever disagree with the fact it duplicates.

package/dist/domain/capability-grant.d.mts

@@ -1,8 +1,8 @@
-import { D as DeviceId, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-gbXtNeOc.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { D as DeviceId, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-D8CU6s2_.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
 import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.mjs";
-import { a as RevocationCheck } from "../tokens-k172l0Iy.mjs";
+import { a as RevocationCheck } from "../tokens-Bh82oidM.mjs";
 //#region src/domain/capability-grant.d.ts
 /**
  * Builds a capability-grant command per management.cddl. The outer `manage-command.verb` is the capability string itself, the identical convention capability-request.ts's own buildCapabilityRequestCommand already establishes -- a receiver's per-capability handler is how it knows which grant this push is even for. `params.verb` is the fixed "capability.grant" marker. No scope or invitee field: manage-request-frame's own top-level scope already carries the former, and the request's own destination already carries the latter -- naming either a second time inside params could only ever disagree with the fact it duplicates.

package/dist/domain/capability-request.d.cts

@@ -1,5 +1,5 @@
-import { D as DeviceId, V as ManageCommand, f as CapabilityScope, u as CapabilityGrantOk } from "../protocol-gbXtNeOc.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { D as DeviceId, V as ManageCommand, f as CapabilityScope, u as CapabilityGrantOk } from "../protocol-D8CU6s2_.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.cjs";
 //#region src/domain/capability-request.d.ts

package/dist/domain/capability-request.d.mts

@@ -1,5 +1,5 @@
-import { D as DeviceId, V as ManageCommand, f as CapabilityScope, u as CapabilityGrantOk } from "../protocol-gbXtNeOc.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { D as DeviceId, V as ManageCommand, f as CapabilityScope, u as CapabilityGrantOk } from "../protocol-D8CU6s2_.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.mjs";
 //#region src/domain/capability-request.d.ts

package/dist/domain/data-sync.d.cts

@@ -1,6 +1,6 @@
-import { D as DeviceId, E as DataRequestFrame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-gbXtNeOc.cjs";
+import { D as DeviceId, E as DataRequestFrame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-D8CU6s2_.cjs";
 import { KeyValueStorage } from "../ports/storage.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 //#region src/domain/data-sync.d.ts
 export interface DataSyncOptions {
   identity: IdentityPort;

package/dist/domain/data-sync.d.mts

@@ -1,6 +1,6 @@
-import { D as DeviceId, E as DataRequestFrame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-gbXtNeOc.mjs";
+import { D as DeviceId, E as DataRequestFrame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-D8CU6s2_.mjs";
 import { KeyValueStorage } from "../ports/storage.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 //#region src/domain/data-sync.d.ts
 export interface DataSyncOptions {
   identity: IdentityPort;

package/dist/domain/device-id.d.cts

@@ -1,4 +1,4 @@
-import { D as DeviceId } from "../protocol-gbXtNeOc.cjs";
+import { D as DeviceId } from "../protocol-D8CU6s2_.cjs";
 //#region src/domain/device-id.d.ts
 /** Lowercase, byte-exact hex for an arbitrary-length byte string -- the same encoding convention deviceIdToHex uses for the fixed-length device-id case, extracted so any other byte string needing a stable, displayable, map-keyable text form (e.g. a token-id, which tokens.cddl defines as an arbitrary-length bstr rather than a 32-byte device-id) can use the identical convention without going through a device-id-shaped function. */
 export declare function bytesToHex(bytes: Uint8Array): string;

package/dist/domain/device-id.d.mts

@@ -1,4 +1,4 @@
-import { D as DeviceId } from "../protocol-gbXtNeOc.mjs";
+import { D as DeviceId } from "../protocol-D8CU6s2_.mjs";
 //#region src/domain/device-id.d.ts
 /** Lowercase, byte-exact hex for an arbitrary-length byte string -- the same encoding convention deviceIdToHex uses for the fixed-length device-id case, extracted so any other byte string needing a stable, displayable, map-keyable text form (e.g. a token-id, which tokens.cddl defines as an arbitrary-length bstr rather than a 32-byte device-id) can use the identical convention without going through a device-id-shaped function. */
 export declare function bytesToHex(bytes: Uint8Array): string;

package/dist/domain/grant-candidates.d.cts

@@ -1,4 +1,4 @@
-import { D as DeviceId, f as CapabilityScope } from "../protocol-gbXtNeOc.cjs";
+import { D as DeviceId, f as CapabilityScope } from "../protocol-D8CU6s2_.cjs";
 import { DirectoryEntry, MeshSession } from "./mesh-session.cjs";
 import { z } from "zod";
 //#region src/domain/grant-candidates.d.ts

package/dist/domain/grant-candidates.d.mts

@@ -1,4 +1,4 @@
-import { D as DeviceId, f as CapabilityScope } from "../protocol-gbXtNeOc.mjs";
+import { D as DeviceId, f as CapabilityScope } from "../protocol-D8CU6s2_.mjs";
 import { DirectoryEntry, MeshSession } from "./mesh-session.mjs";
 import { z } from "zod";
 //#region src/domain/grant-candidates.d.ts

package/dist/domain/handshake.d.cts

@@ -1,4 +1,4 @@
-import { A as DomainId, R as HandshakeFrame, ot as ProtocolVersion } from "../protocol-gbXtNeOc.cjs";
+import { A as DomainId, R as HandshakeFrame, ot as ProtocolVersion } from "../protocol-D8CU6s2_.cjs";
 //#region src/domain/handshake.d.ts
 /** The highest protocol version this build of core understands. */
 export declare const SUPPORTED_PROTOCOL_VERSION: ProtocolVersion;

package/dist/domain/handshake.d.mts

@@ -1,4 +1,4 @@
-import { A as DomainId, R as HandshakeFrame, ot as ProtocolVersion } from "../protocol-gbXtNeOc.mjs";
+import { A as DomainId, R as HandshakeFrame, ot as ProtocolVersion } from "../protocol-D8CU6s2_.mjs";
 //#region src/domain/handshake.d.ts
 /** The highest protocol version this build of core understands. */
 export declare const SUPPORTED_PROTOCOL_VERSION: ProtocolVersion;

package/dist/domain/mesh-session.d.cts

@@ -1,7 +1,7 @@
-import { D as DeviceId, E as DataRequestFrame, N as Frame, Q as PeerAdvert, T as DataHaveFrame, U as ManageError, V as ManageCommand, W as ManageOk, _t as RevocationEntry, f as CapabilityScope, ot as ProtocolVersion, p as CapabilityToken, w as DataEntriesFrame } from "../protocol-gbXtNeOc.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { D as DeviceId, E as DataRequestFrame, N as Frame, Q as PeerAdvert, T as DataHaveFrame, U as ManageError, V as ManageCommand, W as ManageOk, _t as RevocationEntry, f as CapabilityScope, ot as ProtocolVersion, p as CapabilityToken, w as DataEntriesFrame } from "../protocol-D8CU6s2_.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
-import { r as Transport, t as Connection } from "../transport-DAsFqDDS.cjs";
+import { r as Transport, t as Connection } from "../transport-BbSGNRFZ.cjs";
 //#region src/domain/mesh-session.d.ts
 /** How long to wait for the node's handshake before calling it unanswered. A relay-only node never sends one; that is a state to display, not an error. */
 export declare const HANDSHAKE_TIMEOUT_MS = 3000;

package/dist/domain/mesh-session.d.mts

@@ -1,7 +1,7 @@
-import { D as DeviceId, E as DataRequestFrame, N as Frame, Q as PeerAdvert, T as DataHaveFrame, U as ManageError, V as ManageCommand, W as ManageOk, _t as RevocationEntry, f as CapabilityScope, ot as ProtocolVersion, p as CapabilityToken, w as DataEntriesFrame } from "../protocol-gbXtNeOc.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { D as DeviceId, E as DataRequestFrame, N as Frame, Q as PeerAdvert, T as DataHaveFrame, U as ManageError, V as ManageCommand, W as ManageOk, _t as RevocationEntry, f as CapabilityScope, ot as ProtocolVersion, p as CapabilityToken, w as DataEntriesFrame } from "../protocol-D8CU6s2_.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
-import { r as Transport, t as Connection } from "../transport-Dy4h2eNY.mjs";
+import { r as Transport, t as Connection } from "../transport-BNeF6kDe.mjs";
 //#region src/domain/mesh-session.d.ts
 /** How long to wait for the node's handshake before calling it unanswered. A relay-only node never sends one; that is a state to display, not an error. */
 export declare const HANDSHAKE_TIMEOUT_MS = 3000;

package/dist/domain/notice-board.d.cts

@@ -1,8 +1,8 @@
-import { D as DeviceId, Et as RoomNoticeClaims, T as DataHaveFrame, Tt as RoomNotice, p as CapabilityToken } from "../protocol-gbXtNeOc.cjs";
+import { D as DeviceId, Et as RoomNoticeClaims, T as DataHaveFrame, Tt as RoomNotice, p as CapabilityToken } from "../protocol-D8CU6s2_.cjs";
 import { KeyValueStorage } from "../ports/storage.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
-import { a as RevocationCheck } from "../tokens-C9Kwy0Gk.cjs";
+import { a as RevocationCheck } from "../tokens-B1-MAIST.cjs";
 import { RoomNoticeVerdictReason } from "./room.cjs";
 //#region src/domain/notice-board.d.ts
 /**

package/dist/domain/notice-board.d.mts

@@ -1,8 +1,8 @@
-import { D as DeviceId, Et as RoomNoticeClaims, T as DataHaveFrame, Tt as RoomNotice, p as CapabilityToken } from "../protocol-gbXtNeOc.mjs";
+import { D as DeviceId, Et as RoomNoticeClaims, T as DataHaveFrame, Tt as RoomNotice, p as CapabilityToken } from "../protocol-D8CU6s2_.mjs";
 import { KeyValueStorage } from "../ports/storage.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
-import { a as RevocationCheck } from "../tokens-k172l0Iy.mjs";
+import { a as RevocationCheck } from "../tokens-Bh82oidM.mjs";
 import { RoomNoticeVerdictReason } from "./room.mjs";
 //#region src/domain/notice-board.d.ts
 /**

package/dist/domain/relay-hub.d.cts

@@ -1,5 +1,5 @@
-import { N as Frame } from "../protocol-gbXtNeOc.cjs";
-import { t as Connection } from "../transport-DAsFqDDS.cjs";
+import { N as Frame } from "../protocol-D8CU6s2_.cjs";
+import { t as Connection } from "../transport-BbSGNRFZ.cjs";
 //#region src/domain/relay-hub.d.ts
 export interface RelayHub {
   /** Drives one accepted connection until it closes: registers gossip-advertised devices, re-broadcasts each gossip frame to every other connected client and replies to the gossiping connection with a catch-up frame of every other already-known device, answers relay-connect by pairing and notifying the target, and forwards relay-data within established pairings. Resolves when the connection's frame stream ends. Internally just registerConnection followed by a loop of onFrame calls and a final onDisconnect -- kept as its own method since a dedicated hub deployment (wire-mesh-node/cloudflare-hub) has nothing else driving the connection and wants the whole lifecycle in one call. */

package/dist/domain/relay-hub.d.mts

@@ -1,5 +1,5 @@
-import { N as Frame } from "../protocol-gbXtNeOc.mjs";
-import { t as Connection } from "../transport-Dy4h2eNY.mjs";
+import { N as Frame } from "../protocol-D8CU6s2_.mjs";
+import { t as Connection } from "../transport-BNeF6kDe.mjs";
 //#region src/domain/relay-hub.d.ts
 export interface RelayHub {
   /** Drives one accepted connection until it closes: registers gossip-advertised devices, re-broadcasts each gossip frame to every other connected client and replies to the gossiping connection with a catch-up frame of every other already-known device, answers relay-connect by pairing and notifying the target, and forwards relay-data within established pairings. Resolves when the connection's frame stream ends. Internally just registerConnection followed by a loop of onFrame calls and a final onDisconnect -- kept as its own method since a dedicated hub deployment (wire-mesh-node/cloudflare-hub) has nothing else driving the connection and wants the whole lifecycle in one call. */

package/dist/domain/relay-use-gate.d.cts

@@ -1,5 +1,5 @@
-import { N as Frame } from "../protocol-gbXtNeOc.cjs";
-import { t as Connection } from "../transport-DAsFqDDS.cjs";
+import { N as Frame } from "../protocol-D8CU6s2_.cjs";
+import { t as Connection } from "../transport-BbSGNRFZ.cjs";
 //#region src/domain/relay-use-gate.d.ts
 export interface RelayUseAuthorizationTracker {
   /** True once authorize() has been called for this exact connection and revoke() has not been called since. */

package/dist/domain/relay-use-gate.d.mts

@@ -1,5 +1,5 @@
-import { N as Frame } from "../protocol-gbXtNeOc.mjs";
-import { t as Connection } from "../transport-Dy4h2eNY.mjs";
+import { N as Frame } from "../protocol-D8CU6s2_.mjs";
+import { t as Connection } from "../transport-BNeF6kDe.mjs";
 //#region src/domain/relay-use-gate.d.ts
 export interface RelayUseAuthorizationTracker {
   /** True once authorize() has been called for this exact connection and revoke() has not been called since. */

package/dist/domain/revocation-view.d.cts

@@ -1,5 +1,5 @@
-import { _t as RevocationEntry } from "../protocol-gbXtNeOc.cjs";
-import { a as RevocationCheck, d as VerifyRevocationEntryOptions, o as RevocationEntryVerdict } from "../tokens-C9Kwy0Gk.cjs";
+import { _t as RevocationEntry } from "../protocol-D8CU6s2_.cjs";
+import { a as RevocationCheck, d as VerifyRevocationEntryOptions, o as RevocationEntryVerdict } from "../tokens-B1-MAIST.cjs";
 //#region src/domain/revocation-view.d.ts
 /**
  * An in-memory RevocationCheck fed by ingested revocation-announce frames. Keyed by token-id alone, per management.cddl's contract: a token-id can legitimately carry multiple recorded entries from different issuers (the token's own issuer, and/or any number of parties holding a delegated manage:revoke authorization over it) -- entriesFor returns every one of them unfiltered, since checking which actually apply (issuer-match, or a verified authorization) is verifyTokenChain's own obligation, not this store's.

package/dist/domain/revocation-view.d.mts

@@ -1,5 +1,5 @@
-import { _t as RevocationEntry } from "../protocol-gbXtNeOc.mjs";
-import { a as RevocationCheck, d as VerifyRevocationEntryOptions, o as RevocationEntryVerdict } from "../tokens-k172l0Iy.mjs";
+import { _t as RevocationEntry } from "../protocol-D8CU6s2_.mjs";
+import { a as RevocationCheck, d as VerifyRevocationEntryOptions, o as RevocationEntryVerdict } from "../tokens-Bh82oidM.mjs";
 //#region src/domain/revocation-view.d.ts
 /**
  * An in-memory RevocationCheck fed by ingested revocation-announce frames. Keyed by token-id alone, per management.cddl's contract: a token-id can legitimately carry multiple recorded entries from different issuers (the token's own issuer, and/or any number of parties holding a delegated manage:revoke authorization over it) -- entriesFor returns every one of them unfiltered, since checking which actually apply (issuer-match, or a verified authorization) is verifyTokenChain's own obligation, not this store's.

package/dist/domain/room-rekey.d.cts

@@ -1,8 +1,8 @@
-import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-gbXtNeOc.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-D8CU6s2_.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
 import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.cjs";
-import { a as RevocationCheck } from "../tokens-C9Kwy0Gk.cjs";
+import { a as RevocationCheck } from "../tokens-B1-MAIST.cjs";
 //#region src/domain/room-rekey.d.ts
 /**
  * Builds a room.rekey command per room.cddl. The outer verb is room:member, the same "one resource, several inner verbs" pattern room.send/room.leave/room.members already establish -- not a new capability of its own.

package/dist/domain/room-rekey.d.mts

@@ -1,8 +1,8 @@
-import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-gbXtNeOc.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-D8CU6s2_.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
 import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.mjs";
-import { a as RevocationCheck } from "../tokens-k172l0Iy.mjs";
+import { a as RevocationCheck } from "../tokens-Bh82oidM.mjs";
 //#region src/domain/room-rekey.d.ts
 /**
  * Builds a room.rekey command per room.cddl. The outer verb is room:member, the same "one resource, several inner verbs" pattern room.send/room.leave/room.members already establish -- not a new capability of its own.

package/dist/domain/room-token-verification.d.cts

@@ -1,2 +1,2 @@
-import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-CkQV0Iq7.cjs";
+import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-DQGdYNg4.cjs";
 export { ROOM_MEMBER_CAPABILITY, RoomTokenVerdict, RoomTokenVerdictReason, VerifyRoomTokenOptions, verifyRoomToken };

package/dist/domain/room-token-verification.d.mts

@@ -1,2 +1,2 @@
-import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-BggPfYr8.mjs";
+import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-BQhqt1Rm.mjs";
 export { ROOM_MEMBER_CAPABILITY, RoomTokenVerdict, RoomTokenVerdictReason, VerifyRoomTokenOptions, verifyRoomToken };

package/dist/domain/room.d.cts

@@ -1,8 +1,8 @@
-import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-gbXtNeOc.cjs";
-import { t as IdentityPort } from "../identity-B4XBWkqg.cjs";
+import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-D8CU6s2_.cjs";
+import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
-import { a as RevocationCheck } from "../tokens-C9Kwy0Gk.cjs";
-import { r as RoomTokenVerdictReason } from "../room-token-verification-CkQV0Iq7.cjs";
+import { a as RevocationCheck } from "../tokens-B1-MAIST.cjs";
+import { r as RoomTokenVerdictReason } from "../room-token-verification-DQGdYNg4.cjs";
 //#region src/domain/room.d.ts
 export type RoomNoticeVerdictReason = "malformed" | "wrong_room" | "bad_signature" | "wrong_poster" | "content_expired" | "key_epoch_mismatch" | RoomTokenVerdictReason;
 export type RoomNoticeVerdict = {

package/dist/domain/room.d.mts

@@ -1,8 +1,8 @@
-import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-gbXtNeOc.mjs";
-import { t as IdentityPort } from "../identity-CIb9dGkJ.mjs";
+import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-D8CU6s2_.mjs";
+import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
-import { a as RevocationCheck } from "../tokens-k172l0Iy.mjs";
-import { r as RoomTokenVerdictReason } from "../room-token-verification-BggPfYr8.mjs";
+import { a as RevocationCheck } from "../tokens-Bh82oidM.mjs";
+import { r as RoomTokenVerdictReason } from "../room-token-verification-BQhqt1Rm.mjs";
 //#region src/domain/room.d.ts
 export type RoomNoticeVerdictReason = "malformed" | "wrong_room" | "bad_signature" | "wrong_poster" | "content_expired" | "key_epoch_mismatch" | RoomTokenVerdictReason;
 export type RoomNoticeVerdict = {

package/dist/domain/shard-manifest.d.cts

@@ -1,4 +1,4 @@
-import { D as DeviceId } from "../protocol-gbXtNeOc.cjs";
+import { D as DeviceId } from "../protocol-D8CU6s2_.cjs";
 import { PresentedShard, ShardConfig } from "./erasure-coding.cjs";
 //#region src/domain/shard-manifest.d.ts
 /** The content-type a core/data entry carrying a shard manifest declares. */

package/dist/domain/shard-manifest.d.mts

@@ -1,4 +1,4 @@
-import { D as DeviceId } from "../protocol-gbXtNeOc.mjs";
+import { D as DeviceId } from "../protocol-D8CU6s2_.mjs";
 import { PresentedShard, ShardConfig } from "./erasure-coding.mjs";
 //#region src/domain/shard-manifest.d.ts
 /** The content-type a core/data entry carrying a shard manifest declares. */

package/dist/domain/tokens.d.cts

@@ -1,2 +1,2 @@
-import { a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyRevocationEntry, h as verifyCapabilityToken, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-C9Kwy0Gk.cjs";
+import { a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyRevocationEntry, h as verifyCapabilityToken, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-B1-MAIST.cjs";
 export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, verifyCapabilityToken, verifyRevocationEntry };

package/dist/domain/tokens.d.mts

@@ -1,2 +1,2 @@
-import { a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyRevocationEntry, h as verifyCapabilityToken, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-k172l0Iy.mjs";
+import { a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyRevocationEntry, h as verifyCapabilityToken, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-Bh82oidM.mjs";
 export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, verifyCapabilityToken, verifyRevocationEntry };