wire-mesh-core 1.58.7 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/README.md +1 -0
  2. package/dist/adapters/frame-codec.d.cts +1 -1
  3. package/dist/adapters/frame-codec.d.mts +1 -1
  4. package/dist/adapters/node-identity.d.cts +2 -2
  5. package/dist/adapters/node-identity.d.mts +2 -2
  6. package/dist/adapters/tcp-transport.d.cts +1 -1
  7. package/dist/adapters/tcp-transport.d.mts +1 -1
  8. package/dist/adapters/threshold-identity.d.cts +2 -2
  9. package/dist/adapters/threshold-identity.d.mts +2 -2
  10. package/dist/adapters/threshold-wasm.d.cts +1 -1
  11. package/dist/adapters/threshold-wasm.d.mts +1 -1
  12. package/dist/adapters/tls-transport.d.cts +1 -1
  13. package/dist/adapters/tls-transport.d.mts +1 -1
  14. package/dist/domain/bulk.d.cts +2 -2
  15. package/dist/domain/bulk.d.mts +2 -2
  16. package/dist/domain/capability-grant.d.cts +3 -3
  17. package/dist/domain/capability-grant.d.mts +3 -3
  18. package/dist/domain/capability-request.d.cts +2 -2
  19. package/dist/domain/capability-request.d.mts +2 -2
  20. package/dist/domain/data-sync.d.cts +2 -2
  21. package/dist/domain/data-sync.d.mts +2 -2
  22. package/dist/domain/device-id.d.cts +1 -1
  23. package/dist/domain/device-id.d.mts +1 -1
  24. package/dist/domain/direct-manage-request.d.cts +2 -2
  25. package/dist/domain/direct-manage-request.d.mts +2 -2
  26. package/dist/domain/gossip-expansion.d.cts +1 -1
  27. package/dist/domain/gossip-expansion.d.mts +1 -1
  28. package/dist/domain/gossip-extensions.cjs +1 -1
  29. package/dist/domain/gossip-extensions.mjs +1 -1
  30. package/dist/domain/grant-candidates.d.cts +1 -1
  31. package/dist/domain/grant-candidates.d.mts +1 -1
  32. package/dist/domain/handshake.d.cts +1 -1
  33. package/dist/domain/handshake.d.mts +1 -1
  34. package/dist/domain/mesh-session.cjs +13 -10
  35. package/dist/domain/mesh-session.d.cts +3 -3
  36. package/dist/domain/mesh-session.d.mts +3 -3
  37. package/dist/domain/mesh-session.mjs +13 -10
  38. package/dist/domain/notice-board.d.cts +3 -3
  39. package/dist/domain/notice-board.d.mts +3 -3
  40. package/dist/domain/path-trace.d.cts +1 -1
  41. package/dist/domain/path-trace.d.mts +1 -1
  42. package/dist/domain/peer-advert.cjs +61 -0
  43. package/dist/domain/peer-advert.d.cts +45 -0
  44. package/dist/domain/peer-advert.d.mts +45 -0
  45. package/dist/domain/peer-advert.mjs +55 -0
  46. package/dist/domain/relay-hub.cjs +93 -5
  47. package/dist/domain/relay-hub.d.cts +32 -3
  48. package/dist/domain/relay-hub.d.mts +32 -3
  49. package/dist/domain/relay-hub.mjs +93 -5
  50. package/dist/domain/relay-use-gate.d.cts +2 -2
  51. package/dist/domain/relay-use-gate.d.mts +2 -2
  52. package/dist/domain/revocation-view.d.cts +2 -2
  53. package/dist/domain/revocation-view.d.mts +2 -2
  54. package/dist/domain/room-rekey.d.cts +3 -3
  55. package/dist/domain/room-rekey.d.mts +3 -3
  56. package/dist/domain/room-token-verification.d.cts +1 -1
  57. package/dist/domain/room-token-verification.d.mts +1 -1
  58. package/dist/domain/room.d.cts +4 -4
  59. package/dist/domain/room.d.mts +4 -4
  60. package/dist/domain/shard-manifest.d.cts +1 -1
  61. package/dist/domain/shard-manifest.d.mts +1 -1
  62. package/dist/domain/tokens.d.cts +1 -1
  63. package/dist/domain/tokens.d.mts +1 -1
  64. package/dist/domain/topology-snapshot.d.cts +1 -1
  65. package/dist/domain/topology-snapshot.d.mts +1 -1
  66. package/dist/domain/topology.cjs +1 -1
  67. package/dist/domain/topology.d.cts +1 -1
  68. package/dist/domain/topology.d.mts +1 -1
  69. package/dist/domain/topology.mjs +1 -1
  70. package/dist/domain/webrtc-signaling.d.cts +2 -2
  71. package/dist/domain/webrtc-signaling.d.mts +2 -2
  72. package/dist/generated/protocol.cjs +3 -1
  73. package/dist/generated/protocol.d.cts +1 -1
  74. package/dist/generated/protocol.d.mts +1 -1
  75. package/dist/generated/protocol.mjs +3 -1
  76. package/dist/{gossip-extensions-Cdy5mQhY.mjs → gossip-extensions-BNiI44sU.mjs} +5 -2
  77. package/dist/{gossip-extensions-Dr_T7hk_.cjs → gossip-extensions-DRVTHKnR.cjs} +5 -2
  78. package/dist/{identity-BRlM-Krs.d.cts → identity-DImeXZcq.d.cts} +1 -1
  79. package/dist/{identity-DiuayfEd.d.mts → identity-Dc4xmwp3.d.mts} +1 -1
  80. package/dist/ports/identity.d.cts +1 -1
  81. package/dist/ports/identity.d.mts +1 -1
  82. package/dist/ports/transport.d.cts +1 -1
  83. package/dist/ports/transport.d.mts +1 -1
  84. package/dist/{protocol-BnbpCk0Z.d.cts → protocol-Bi2fzBCc.d.cts} +20 -0
  85. package/dist/{protocol-BnbpCk0Z.d.mts → protocol-Bi2fzBCc.d.mts} +20 -0
  86. package/dist/{room-token-verification-NjaqYY4k.d.mts → room-token-verification-CDXkm_Tg.d.cts} +2 -2
  87. package/dist/{room-token-verification-D9ogJTO3.d.cts → room-token-verification-CnHNaA8J.d.mts} +2 -2
  88. package/dist/{tokens-DtjdYS_a.d.mts → tokens-0r9ipK1r.d.mts} +2 -2
  89. package/dist/{tokens-BL2BzOmN.d.cts → tokens-BDVxEvl2.d.cts} +2 -2
  90. package/dist/{transport-BH8kGWXt.d.mts → transport-Cq_odHy3.d.cts} +1 -1
  91. package/dist/{transport-Ca_ZyyZe.d.cts → transport-GcJ4LYVE.d.mts} +1 -1
  92. package/package.json +5 -1
  93. package/wasm-dist/wire_mesh_threshold_wasm_bg.wasm +0 -0
@@ -1,8 +1,8 @@
1
- import { At as RoomPath, Ot as RoomNotice, kt as RoomNoticeClaims, p as CapabilityToken, q as MessageRef } from "../protocol-BnbpCk0Z.cjs";
2
- import { t as IdentityPort } from "../identity-BRlM-Krs.cjs";
1
+ import { At as RoomPath, Ot as RoomNotice, kt as RoomNoticeClaims, p as CapabilityToken, q as MessageRef } from "../protocol-Bi2fzBCc.cjs";
2
+ import { t as IdentityPort } from "../identity-DImeXZcq.cjs";
3
3
  import { t as Clock } from "../clock-DiSx-WKM.cjs";
4
- import { a as RevocationCheck } from "../tokens-BL2BzOmN.cjs";
5
- import { r as RoomTokenVerdictReason } from "../room-token-verification-D9ogJTO3.cjs";
4
+ import { a as RevocationCheck } from "../tokens-BDVxEvl2.cjs";
5
+ import { r as RoomTokenVerdictReason } from "../room-token-verification-CDXkm_Tg.cjs";
6
6
  //#region src/domain/room.d.ts
7
7
  export type RoomNoticeVerdictReason = "malformed" | "wrong_room" | "bad_signature" | "wrong_poster" | "content_expired" | "key_epoch_mismatch" | RoomTokenVerdictReason;
8
8
  export type RoomNoticeVerdict = {
@@ -1,8 +1,8 @@
1
- import { At as RoomPath, Ot as RoomNotice, kt as RoomNoticeClaims, p as CapabilityToken, q as MessageRef } from "../protocol-BnbpCk0Z.mjs";
2
- import { t as IdentityPort } from "../identity-DiuayfEd.mjs";
1
+ import { At as RoomPath, Ot as RoomNotice, kt as RoomNoticeClaims, p as CapabilityToken, q as MessageRef } from "../protocol-Bi2fzBCc.mjs";
2
+ import { t as IdentityPort } from "../identity-Dc4xmwp3.mjs";
3
3
  import { t as Clock } from "../clock-DiSx-WKM.mjs";
4
- import { a as RevocationCheck } from "../tokens-DtjdYS_a.mjs";
5
- import { r as RoomTokenVerdictReason } from "../room-token-verification-NjaqYY4k.mjs";
4
+ import { a as RevocationCheck } from "../tokens-0r9ipK1r.mjs";
5
+ import { r as RoomTokenVerdictReason } from "../room-token-verification-CnHNaA8J.mjs";
6
6
  //#region src/domain/room.d.ts
7
7
  export type RoomNoticeVerdictReason = "malformed" | "wrong_room" | "bad_signature" | "wrong_poster" | "content_expired" | "key_epoch_mismatch" | RoomTokenVerdictReason;
8
8
  export type RoomNoticeVerdict = {
@@ -1,4 +1,4 @@
1
- import { D as DeviceId } from "../protocol-BnbpCk0Z.cjs";
1
+ import { D as DeviceId } from "../protocol-Bi2fzBCc.cjs";
2
2
  import { PresentedShard, ShardConfig } from "./erasure-coding.cjs";
3
3
  //#region src/domain/shard-manifest.d.ts
4
4
  /** The content-type a core/data entry carrying a shard manifest declares. */
@@ -1,4 +1,4 @@
1
- import { D as DeviceId } from "../protocol-BnbpCk0Z.mjs";
1
+ import { D as DeviceId } from "../protocol-Bi2fzBCc.mjs";
2
2
  import { PresentedShard, ShardConfig } from "./erasure-coding.mjs";
3
3
  //#region src/domain/shard-manifest.d.ts
4
4
  /** The content-type a core/data entry carrying a shard manifest declares. */
@@ -1,2 +1,2 @@
1
- import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-BL2BzOmN.cjs";
1
+ import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-BDVxEvl2.cjs";
2
2
  export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, sig1ToBeSigned, verifyCapabilityToken, verifyRevocationEntry };
@@ -1,2 +1,2 @@
1
- import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-DtjdYS_a.mjs";
1
+ import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-0r9ipK1r.mjs";
2
2
  export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, sig1ToBeSigned, verifyCapabilityToken, verifyRevocationEntry };
@@ -1,4 +1,4 @@
1
- import { D as DeviceId, en as TopologyPeers } from "../protocol-BnbpCk0Z.cjs";
1
+ import { D as DeviceId, en as TopologyPeers } from "../protocol-Bi2fzBCc.cjs";
2
2
  //#region src/domain/topology-snapshot.d.ts
3
3
  export interface TopologyPeersInputs {
4
4
  /** connection?.peerDeviceId -- the transport-authenticated direct peer, when the adapter gives one. Takes priority over firstAdvertisedPeer below. */
@@ -1,4 +1,4 @@
1
- import { D as DeviceId, en as TopologyPeers } from "../protocol-BnbpCk0Z.mjs";
1
+ import { D as DeviceId, en as TopologyPeers } from "../protocol-Bi2fzBCc.mjs";
2
2
  //#region src/domain/topology-snapshot.d.ts
3
3
  export interface TopologyPeersInputs {
4
4
  /** connection?.peerDeviceId -- the transport-authenticated direct peer, when the adapter gives one. Takes priority over firstAdvertisedPeer below. */
@@ -1,6 +1,6 @@
1
1
  Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
2
  const require_generated_protocol = require("../generated/protocol.cjs");
3
- const require_gossip_extensions = require("../gossip-extensions-Dr_T7hk_.cjs");
3
+ const require_gossip_extensions = require("../gossip-extensions-DRVTHKnR.cjs");
4
4
  //#region src/domain/topology.ts
5
5
  /**
6
6
  * Topology introspection (wire-mesh#180): assembling a connection graph out of every device's own self-reported `topology/peers` gossip extension (mesh-session.ts's buildSelfAdvert computes and injects it automatically -- nothing here writes to it), and answering the on-demand `topology.get` manage-command for a live, cache-bust read instead of a possibly-stale gossiped one. `topology:get` is deliberately ungated, per management.cddl's own comment on `topology-get` and this registry entry -- no token/scope check anywhere in this module, mirroring how core/room's room.join/room.invite are ungated in room-client.ts.
@@ -1,4 +1,4 @@
1
- import { D as DeviceId, V as ManageCommand, en as TopologyPeers, et as PeerAdvert } from "../protocol-BnbpCk0Z.cjs";
1
+ import { D as DeviceId, V as ManageCommand, en as TopologyPeers, et as PeerAdvert } from "../protocol-Bi2fzBCc.cjs";
2
2
  import { DirectoryEntry, IncomingManageRequest, MeshSession } from "./mesh-session.cjs";
3
3
  //#region src/domain/topology.d.ts
4
4
  export declare const TOPOLOGY_GET_CAPABILITY = "topology:get";
@@ -1,4 +1,4 @@
1
- import { D as DeviceId, V as ManageCommand, en as TopologyPeers, et as PeerAdvert } from "../protocol-BnbpCk0Z.mjs";
1
+ import { D as DeviceId, V as ManageCommand, en as TopologyPeers, et as PeerAdvert } from "../protocol-Bi2fzBCc.mjs";
2
2
  import { DirectoryEntry, IncomingManageRequest, MeshSession } from "./mesh-session.mjs";
3
3
  //#region src/domain/topology.d.ts
4
4
  export declare const TOPOLOGY_GET_CAPABILITY = "topology:get";
@@ -1,5 +1,5 @@
1
1
  import { topologyGetSchema, topologyPeersSchema } from "../generated/protocol.mjs";
2
- import { t as TOPOLOGY_PEERS_GOSSIP_KEY } from "../gossip-extensions-Cdy5mQhY.mjs";
2
+ import { t as TOPOLOGY_PEERS_GOSSIP_KEY } from "../gossip-extensions-BNiI44sU.mjs";
3
3
  //#region src/domain/topology.ts
4
4
  /**
5
5
  * Topology introspection (wire-mesh#180): assembling a connection graph out of every device's own self-reported `topology/peers` gossip extension (mesh-session.ts's buildSelfAdvert computes and injects it automatically -- nothing here writes to it), and answering the on-demand `topology.get` manage-command for a live, cache-bust read instead of a possibly-stale gossiped one. `topology:get` is deliberately ungated, per management.cddl's own comment on `topology-get` and this registry entry -- no token/scope check anywhere in this module, mirroring how core/room's room.join/room.invite are ungated in room-client.ts.
@@ -1,6 +1,6 @@
1
- import { Ft as SfuTrackEntry, H as ManageCommandParams, It as SfuTrackMap, V as ManageCommand, an as WebrtcOffer, f as CapabilityScope, in as WebrtcIceCandidate, rn as WebrtcAnswer, z as IceCandidateInit } from "../protocol-BnbpCk0Z.cjs";
1
+ import { Ft as SfuTrackEntry, H as ManageCommandParams, It as SfuTrackMap, V as ManageCommand, an as WebrtcOffer, f as CapabilityScope, in as WebrtcIceCandidate, rn as WebrtcAnswer, z as IceCandidateInit } from "../protocol-Bi2fzBCc.cjs";
2
2
  import { IncomingManageRequest } from "./mesh-session.cjs";
3
- import { u as VerifyCapabilityTokenOptions } from "../tokens-BL2BzOmN.cjs";
3
+ import { u as VerifyCapabilityTokenOptions } from "../tokens-BDVxEvl2.cjs";
4
4
  //#region src/domain/webrtc-signaling.d.ts
5
5
  /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
6
6
  export declare const WEBRTC_SIGNAL_VERB = "webrtc:signal";
@@ -1,6 +1,6 @@
1
- import { Ft as SfuTrackEntry, H as ManageCommandParams, It as SfuTrackMap, V as ManageCommand, an as WebrtcOffer, f as CapabilityScope, in as WebrtcIceCandidate, rn as WebrtcAnswer, z as IceCandidateInit } from "../protocol-BnbpCk0Z.mjs";
1
+ import { Ft as SfuTrackEntry, H as ManageCommandParams, It as SfuTrackMap, V as ManageCommand, an as WebrtcOffer, f as CapabilityScope, in as WebrtcIceCandidate, rn as WebrtcAnswer, z as IceCandidateInit } from "../protocol-Bi2fzBCc.mjs";
2
2
  import { IncomingManageRequest } from "./mesh-session.mjs";
3
- import { u as VerifyCapabilityTokenOptions } from "../tokens-DtjdYS_a.mjs";
3
+ import { u as VerifyCapabilityTokenOptions } from "../tokens-0r9ipK1r.mjs";
4
4
  //#region src/domain/webrtc-signaling.d.ts
5
5
  /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
6
6
  export declare const WEBRTC_SIGNAL_VERB = "webrtc:signal";
@@ -467,7 +467,9 @@ const closeFrameSchema = zod.z.lazy(() => zod.z.object({
467
467
  const peerAdvertSchema = zod.z.lazy(() => zod.z.object({
468
468
  "device": zod.z.lazy(() => deviceIdSchema),
469
469
  "addresses": zod.z.array(zod.z.string()),
470
- "snapshot-seconds": zod.z.number().int()
470
+ "snapshot-seconds": zod.z.number().int(),
471
+ "identity-key": zod.z.lazy(() => identityKeySchema),
472
+ "signature": zod.z.instanceof(Uint8Array)
471
473
  }).catchall(zod.z.unknown()));
472
474
  const gossipFrameSchema = zod.z.lazy(() => zod.z.object({
473
475
  "type": zod.z.literal("gossip"),
@@ -1,2 +1,2 @@
1
- import { $ as PathTraceOk, $n as messageRefSchema, $r as thresholdKeygenRound2Schema, $t as TopologyGet, A as DomainId, An as dataEntriesFrameSchema, Ar as roomLeaveSchema, At as RoomPath, B as IdentityKey, Bn as frameVariantSchema, Br as sessionIdSchema, Bt as StreamSession, C as CoseTokenHeaders, Cn as coreCapabilitySchema, Cr as relayOfferFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderLabelSchema, Dr as roomInviteSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coseHeaderKidSchema, Er as revocationEntrySchema, Et as RoomMembers, F as GossipFrame, Fn as dmRoomPathSchema, Fr as roomNoticeSchema, Ft as SfuTrackEntry, G as ManageRequestFrame, Gn as iceCandidateInitSchema, Gr as streamEndFrameSchema, Gt as ThresholdKeygenConfirm, H as ManageCommandParams, Hn as handleClaimsSchema, Hr as sfuTrackMapSchema, Ht as ThresholdAbort, I as HandleClaims, In as domainIdSchema, Ir as roomPathSchema, It as SfuTrackMap, J as NamespacedCapability, Jn as manageCommandSchema, Jr as thresholdAbortSchema, Jt as ThresholdShareClaims, K as ManageResponseFrame, Kn as identityKeySchema, Kr as streamSessionSchema, Kt as ThresholdKeygenRound1, L as HandleRecord, Ln as execListSchema, Lr as roomReadSchema, Lt as StreamAckFrame, M as ExecSessionInfo, Mn as dataRequestFrameSchema, Mr as roomMembersOkSchema, Mt as RoomRekey, N as Frame, Nn as deviceIdHexSchema, Nr as roomMembersSchema, Nt as RoomSend, O as DeviceIdHex, On as coseSign1Schema, Or as roomJoinOkSchema, Ot as RoomNotice, P as FrameVariant, Pn as deviceIdSchema, Pr as roomNoticeClaimsSchema, Pt as SessionId, Q as PathTrace, Qn as manageResponseFrameSchema, Qr as thresholdKeygenRound1Schema, Qt as TokenClaims, R as HandshakeFrame, Rn as execSessionInfoSchema, Rr as roomRekeySchema, Rt as StreamDataFrame, S as CoseSign1, Sn as coordinatorFrameSchema, Sr as relayInboundFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coseHeaderAlgSchema, Tr as revocationClaimsSchema, Tt as RoomMember, U as ManageError, Un as handleRecordSchema, Ur as streamAckFrameSchema, Ut as ThresholdCommit, V as ManageCommand, Vn as gossipFrameSchema, Vr as sfuTrackEntrySchema, Vt as SyncPunchFrame, W as ManageOk, Wn as handshakeFrameSchema, Wr as streamDataFrameSchema, Wt as ThresholdCommitment, X as ObservedAddressFrame, Xn as manageOkSchema, Xr as thresholdCommitmentSchema, Xt as ThresholdSign, Y as NamespacedDomainId, Yn as manageErrorSchema, Yr as thresholdCommitSchema, Yt as ThresholdShareEnvelope, Z as OwnerNamedRoomPath, Zn as manageRequestFrameSchema, Zr as thresholdKeygenConfirmSchema, Zt as ThresholdSubject, _ as CoreCapability, _n as capabilityRequestSchema, _r as ptyResizeSchema, _t as RelayOfferFrame, a as BulkOpen, ai as topologyGetSchema, an as WebrtcOffer, ar as pathTraceSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityVerbSchema, br as relayConnectFrameSchema, bt as RevocationEntry, c as CandidatesFrame, ci as versionGetSchema, cn as bulkCancelSchema, cr as pingFrameSchema, ct as ProcSpawn, d as CapabilityRequest, di as webrtcOfferSchema, dn as bulkOpenSchema, dr as privateUseDomainIdSchema, dt as PtyResize, ei as thresholdShareClaimsSchema, en as TopologyPeers, er as namespacedCapabilitySchema, et as PeerAdvert, f as CapabilityScope, fi as wireCandidateSchema, fn as bulkResumeSchema, fr as procKillSchema, ft as PtySpawn, g as CoordinatorFrame, gn as capabilityGrantSchema, gr as ptyKillSchema, gt as RelayInboundFrame, h as CloseFrame, hn as capabilityGrantOkSchema, hr as protocolVersionSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as tokenClaimsSchema, in as WebrtcIceCandidate, ir as pathTraceOkSchema, it as PrivateUseCapability, j as ExecList, jn as dataHaveFrameSchema, jr as roomMemberSchema, jt as RoomRead, k as DmRoomPath, kn as coseTokenHeadersSchema, kr as roomJoinSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as webrtcAnswerSchema, ln as bulkDataFrameSchema, lr as pongFrameSchema, lt as ProtocolVersion, m as CapabilityVerb, mn as candidatesFrameSchema, mr as procSpawnSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdSignSchema, nn as VersionGet, nr as observedAddressFrameSchema, nt as PingFrame, o as BulkResume, oi as topologyPeersSchema, on as WireCandidate, or as peerAdvertSchema, ot as ProcKill, p as CapabilityToken, pn as candidateKindSchema, pr as procSignalSchema, pt as PtyWrite, q as MessageRef, qn as manageCommandParamsSchema, qr as syncPunchFrameSchema, qt as ThresholdKeygenRound2, r as BulkDataFrame, ri as thresholdSubjectSchema, rn as WebrtcAnswer, rr as ownerNamedRoomPathSchema, rt as PongFrame, s as CandidateKind, si as transferIdSchema, sn as bulkAckFrameSchema, sr as peerIdentitySchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdShareEnvelopeSchema, tn as TransferId, tr as namespacedDomainIdSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as webrtcIceCandidateSchema, un as bulkEndFrameSchema, ur as privateUseCapabilitySchema, ut as PtyKill, v as CoreDomainName, vn as capabilityScopeSchema, vr as ptySpawnSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coreDomainNameSchema, wr as revocationAnnounceFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as closeFrameSchema, xr as relayDataFrameSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityTokenSchema, yr as ptyWriteSchema, yt as RevocationClaims, z as IceCandidateInit, zn as frameSchema, zr as roomSendSchema, zt as StreamEndFrame } from "../protocol-BnbpCk0Z.cjs";
1
+ import { $ as PathTraceOk, $n as messageRefSchema, $r as thresholdKeygenRound2Schema, $t as TopologyGet, A as DomainId, An as dataEntriesFrameSchema, Ar as roomLeaveSchema, At as RoomPath, B as IdentityKey, Bn as frameVariantSchema, Br as sessionIdSchema, Bt as StreamSession, C as CoseTokenHeaders, Cn as coreCapabilitySchema, Cr as relayOfferFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderLabelSchema, Dr as roomInviteSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coseHeaderKidSchema, Er as revocationEntrySchema, Et as RoomMembers, F as GossipFrame, Fn as dmRoomPathSchema, Fr as roomNoticeSchema, Ft as SfuTrackEntry, G as ManageRequestFrame, Gn as iceCandidateInitSchema, Gr as streamEndFrameSchema, Gt as ThresholdKeygenConfirm, H as ManageCommandParams, Hn as handleClaimsSchema, Hr as sfuTrackMapSchema, Ht as ThresholdAbort, I as HandleClaims, In as domainIdSchema, Ir as roomPathSchema, It as SfuTrackMap, J as NamespacedCapability, Jn as manageCommandSchema, Jr as thresholdAbortSchema, Jt as ThresholdShareClaims, K as ManageResponseFrame, Kn as identityKeySchema, Kr as streamSessionSchema, Kt as ThresholdKeygenRound1, L as HandleRecord, Ln as execListSchema, Lr as roomReadSchema, Lt as StreamAckFrame, M as ExecSessionInfo, Mn as dataRequestFrameSchema, Mr as roomMembersOkSchema, Mt as RoomRekey, N as Frame, Nn as deviceIdHexSchema, Nr as roomMembersSchema, Nt as RoomSend, O as DeviceIdHex, On as coseSign1Schema, Or as roomJoinOkSchema, Ot as RoomNotice, P as FrameVariant, Pn as deviceIdSchema, Pr as roomNoticeClaimsSchema, Pt as SessionId, Q as PathTrace, Qn as manageResponseFrameSchema, Qr as thresholdKeygenRound1Schema, Qt as TokenClaims, R as HandshakeFrame, Rn as execSessionInfoSchema, Rr as roomRekeySchema, Rt as StreamDataFrame, S as CoseSign1, Sn as coordinatorFrameSchema, Sr as relayInboundFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coseHeaderAlgSchema, Tr as revocationClaimsSchema, Tt as RoomMember, U as ManageError, Un as handleRecordSchema, Ur as streamAckFrameSchema, Ut as ThresholdCommit, V as ManageCommand, Vn as gossipFrameSchema, Vr as sfuTrackEntrySchema, Vt as SyncPunchFrame, W as ManageOk, Wn as handshakeFrameSchema, Wr as streamDataFrameSchema, Wt as ThresholdCommitment, X as ObservedAddressFrame, Xn as manageOkSchema, Xr as thresholdCommitmentSchema, Xt as ThresholdSign, Y as NamespacedDomainId, Yn as manageErrorSchema, Yr as thresholdCommitSchema, Yt as ThresholdShareEnvelope, Z as OwnerNamedRoomPath, Zn as manageRequestFrameSchema, Zr as thresholdKeygenConfirmSchema, Zt as ThresholdSubject, _ as CoreCapability, _n as capabilityRequestSchema, _r as ptyResizeSchema, _t as RelayOfferFrame, a as BulkOpen, ai as topologyGetSchema, an as WebrtcOffer, ar as pathTraceSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityVerbSchema, br as relayConnectFrameSchema, bt as RevocationEntry, c as CandidatesFrame, ci as versionGetSchema, cn as bulkCancelSchema, cr as pingFrameSchema, ct as ProcSpawn, d as CapabilityRequest, di as webrtcOfferSchema, dn as bulkOpenSchema, dr as privateUseDomainIdSchema, dt as PtyResize, ei as thresholdShareClaimsSchema, en as TopologyPeers, er as namespacedCapabilitySchema, et as PeerAdvert, f as CapabilityScope, fi as wireCandidateSchema, fn as bulkResumeSchema, fr as procKillSchema, ft as PtySpawn, g as CoordinatorFrame, gn as capabilityGrantSchema, gr as ptyKillSchema, gt as RelayInboundFrame, h as CloseFrame, hn as capabilityGrantOkSchema, hr as protocolVersionSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as tokenClaimsSchema, in as WebrtcIceCandidate, ir as pathTraceOkSchema, it as PrivateUseCapability, j as ExecList, jn as dataHaveFrameSchema, jr as roomMemberSchema, jt as RoomRead, k as DmRoomPath, kn as coseTokenHeadersSchema, kr as roomJoinSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as webrtcAnswerSchema, ln as bulkDataFrameSchema, lr as pongFrameSchema, lt as ProtocolVersion, m as CapabilityVerb, mn as candidatesFrameSchema, mr as procSpawnSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdSignSchema, nn as VersionGet, nr as observedAddressFrameSchema, nt as PingFrame, o as BulkResume, oi as topologyPeersSchema, on as WireCandidate, or as peerAdvertSchema, ot as ProcKill, p as CapabilityToken, pn as candidateKindSchema, pr as procSignalSchema, pt as PtyWrite, q as MessageRef, qn as manageCommandParamsSchema, qr as syncPunchFrameSchema, qt as ThresholdKeygenRound2, r as BulkDataFrame, ri as thresholdSubjectSchema, rn as WebrtcAnswer, rr as ownerNamedRoomPathSchema, rt as PongFrame, s as CandidateKind, si as transferIdSchema, sn as bulkAckFrameSchema, sr as peerIdentitySchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdShareEnvelopeSchema, tn as TransferId, tr as namespacedDomainIdSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as webrtcIceCandidateSchema, un as bulkEndFrameSchema, ur as privateUseCapabilitySchema, ut as PtyKill, v as CoreDomainName, vn as capabilityScopeSchema, vr as ptySpawnSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coreDomainNameSchema, wr as revocationAnnounceFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as closeFrameSchema, xr as relayDataFrameSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityTokenSchema, yr as ptyWriteSchema, yt as RevocationClaims, z as IceCandidateInit, zn as frameSchema, zr as roomSendSchema, zt as StreamEndFrame } from "../protocol-Bi2fzBCc.cjs";
2
2
  export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PathTrace, PathTraceOk, PeerAdvert, PeerIdentity, PingFrame, PongFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TopologyGet, TopologyPeers, TransferId, VersionGet, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
@@ -1,2 +1,2 @@
1
- import { $ as PathTraceOk, $n as messageRefSchema, $r as thresholdKeygenRound2Schema, $t as TopologyGet, A as DomainId, An as dataEntriesFrameSchema, Ar as roomLeaveSchema, At as RoomPath, B as IdentityKey, Bn as frameVariantSchema, Br as sessionIdSchema, Bt as StreamSession, C as CoseTokenHeaders, Cn as coreCapabilitySchema, Cr as relayOfferFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderLabelSchema, Dr as roomInviteSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coseHeaderKidSchema, Er as revocationEntrySchema, Et as RoomMembers, F as GossipFrame, Fn as dmRoomPathSchema, Fr as roomNoticeSchema, Ft as SfuTrackEntry, G as ManageRequestFrame, Gn as iceCandidateInitSchema, Gr as streamEndFrameSchema, Gt as ThresholdKeygenConfirm, H as ManageCommandParams, Hn as handleClaimsSchema, Hr as sfuTrackMapSchema, Ht as ThresholdAbort, I as HandleClaims, In as domainIdSchema, Ir as roomPathSchema, It as SfuTrackMap, J as NamespacedCapability, Jn as manageCommandSchema, Jr as thresholdAbortSchema, Jt as ThresholdShareClaims, K as ManageResponseFrame, Kn as identityKeySchema, Kr as streamSessionSchema, Kt as ThresholdKeygenRound1, L as HandleRecord, Ln as execListSchema, Lr as roomReadSchema, Lt as StreamAckFrame, M as ExecSessionInfo, Mn as dataRequestFrameSchema, Mr as roomMembersOkSchema, Mt as RoomRekey, N as Frame, Nn as deviceIdHexSchema, Nr as roomMembersSchema, Nt as RoomSend, O as DeviceIdHex, On as coseSign1Schema, Or as roomJoinOkSchema, Ot as RoomNotice, P as FrameVariant, Pn as deviceIdSchema, Pr as roomNoticeClaimsSchema, Pt as SessionId, Q as PathTrace, Qn as manageResponseFrameSchema, Qr as thresholdKeygenRound1Schema, Qt as TokenClaims, R as HandshakeFrame, Rn as execSessionInfoSchema, Rr as roomRekeySchema, Rt as StreamDataFrame, S as CoseSign1, Sn as coordinatorFrameSchema, Sr as relayInboundFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coseHeaderAlgSchema, Tr as revocationClaimsSchema, Tt as RoomMember, U as ManageError, Un as handleRecordSchema, Ur as streamAckFrameSchema, Ut as ThresholdCommit, V as ManageCommand, Vn as gossipFrameSchema, Vr as sfuTrackEntrySchema, Vt as SyncPunchFrame, W as ManageOk, Wn as handshakeFrameSchema, Wr as streamDataFrameSchema, Wt as ThresholdCommitment, X as ObservedAddressFrame, Xn as manageOkSchema, Xr as thresholdCommitmentSchema, Xt as ThresholdSign, Y as NamespacedDomainId, Yn as manageErrorSchema, Yr as thresholdCommitSchema, Yt as ThresholdShareEnvelope, Z as OwnerNamedRoomPath, Zn as manageRequestFrameSchema, Zr as thresholdKeygenConfirmSchema, Zt as ThresholdSubject, _ as CoreCapability, _n as capabilityRequestSchema, _r as ptyResizeSchema, _t as RelayOfferFrame, a as BulkOpen, ai as topologyGetSchema, an as WebrtcOffer, ar as pathTraceSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityVerbSchema, br as relayConnectFrameSchema, bt as RevocationEntry, c as CandidatesFrame, ci as versionGetSchema, cn as bulkCancelSchema, cr as pingFrameSchema, ct as ProcSpawn, d as CapabilityRequest, di as webrtcOfferSchema, dn as bulkOpenSchema, dr as privateUseDomainIdSchema, dt as PtyResize, ei as thresholdShareClaimsSchema, en as TopologyPeers, er as namespacedCapabilitySchema, et as PeerAdvert, f as CapabilityScope, fi as wireCandidateSchema, fn as bulkResumeSchema, fr as procKillSchema, ft as PtySpawn, g as CoordinatorFrame, gn as capabilityGrantSchema, gr as ptyKillSchema, gt as RelayInboundFrame, h as CloseFrame, hn as capabilityGrantOkSchema, hr as protocolVersionSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as tokenClaimsSchema, in as WebrtcIceCandidate, ir as pathTraceOkSchema, it as PrivateUseCapability, j as ExecList, jn as dataHaveFrameSchema, jr as roomMemberSchema, jt as RoomRead, k as DmRoomPath, kn as coseTokenHeadersSchema, kr as roomJoinSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as webrtcAnswerSchema, ln as bulkDataFrameSchema, lr as pongFrameSchema, lt as ProtocolVersion, m as CapabilityVerb, mn as candidatesFrameSchema, mr as procSpawnSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdSignSchema, nn as VersionGet, nr as observedAddressFrameSchema, nt as PingFrame, o as BulkResume, oi as topologyPeersSchema, on as WireCandidate, or as peerAdvertSchema, ot as ProcKill, p as CapabilityToken, pn as candidateKindSchema, pr as procSignalSchema, pt as PtyWrite, q as MessageRef, qn as manageCommandParamsSchema, qr as syncPunchFrameSchema, qt as ThresholdKeygenRound2, r as BulkDataFrame, ri as thresholdSubjectSchema, rn as WebrtcAnswer, rr as ownerNamedRoomPathSchema, rt as PongFrame, s as CandidateKind, si as transferIdSchema, sn as bulkAckFrameSchema, sr as peerIdentitySchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdShareEnvelopeSchema, tn as TransferId, tr as namespacedDomainIdSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as webrtcIceCandidateSchema, un as bulkEndFrameSchema, ur as privateUseCapabilitySchema, ut as PtyKill, v as CoreDomainName, vn as capabilityScopeSchema, vr as ptySpawnSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coreDomainNameSchema, wr as revocationAnnounceFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as closeFrameSchema, xr as relayDataFrameSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityTokenSchema, yr as ptyWriteSchema, yt as RevocationClaims, z as IceCandidateInit, zn as frameSchema, zr as roomSendSchema, zt as StreamEndFrame } from "../protocol-BnbpCk0Z.mjs";
1
+ import { $ as PathTraceOk, $n as messageRefSchema, $r as thresholdKeygenRound2Schema, $t as TopologyGet, A as DomainId, An as dataEntriesFrameSchema, Ar as roomLeaveSchema, At as RoomPath, B as IdentityKey, Bn as frameVariantSchema, Br as sessionIdSchema, Bt as StreamSession, C as CoseTokenHeaders, Cn as coreCapabilitySchema, Cr as relayOfferFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderLabelSchema, Dr as roomInviteSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coseHeaderKidSchema, Er as revocationEntrySchema, Et as RoomMembers, F as GossipFrame, Fn as dmRoomPathSchema, Fr as roomNoticeSchema, Ft as SfuTrackEntry, G as ManageRequestFrame, Gn as iceCandidateInitSchema, Gr as streamEndFrameSchema, Gt as ThresholdKeygenConfirm, H as ManageCommandParams, Hn as handleClaimsSchema, Hr as sfuTrackMapSchema, Ht as ThresholdAbort, I as HandleClaims, In as domainIdSchema, Ir as roomPathSchema, It as SfuTrackMap, J as NamespacedCapability, Jn as manageCommandSchema, Jr as thresholdAbortSchema, Jt as ThresholdShareClaims, K as ManageResponseFrame, Kn as identityKeySchema, Kr as streamSessionSchema, Kt as ThresholdKeygenRound1, L as HandleRecord, Ln as execListSchema, Lr as roomReadSchema, Lt as StreamAckFrame, M as ExecSessionInfo, Mn as dataRequestFrameSchema, Mr as roomMembersOkSchema, Mt as RoomRekey, N as Frame, Nn as deviceIdHexSchema, Nr as roomMembersSchema, Nt as RoomSend, O as DeviceIdHex, On as coseSign1Schema, Or as roomJoinOkSchema, Ot as RoomNotice, P as FrameVariant, Pn as deviceIdSchema, Pr as roomNoticeClaimsSchema, Pt as SessionId, Q as PathTrace, Qn as manageResponseFrameSchema, Qr as thresholdKeygenRound1Schema, Qt as TokenClaims, R as HandshakeFrame, Rn as execSessionInfoSchema, Rr as roomRekeySchema, Rt as StreamDataFrame, S as CoseSign1, Sn as coordinatorFrameSchema, Sr as relayInboundFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coseHeaderAlgSchema, Tr as revocationClaimsSchema, Tt as RoomMember, U as ManageError, Un as handleRecordSchema, Ur as streamAckFrameSchema, Ut as ThresholdCommit, V as ManageCommand, Vn as gossipFrameSchema, Vr as sfuTrackEntrySchema, Vt as SyncPunchFrame, W as ManageOk, Wn as handshakeFrameSchema, Wr as streamDataFrameSchema, Wt as ThresholdCommitment, X as ObservedAddressFrame, Xn as manageOkSchema, Xr as thresholdCommitmentSchema, Xt as ThresholdSign, Y as NamespacedDomainId, Yn as manageErrorSchema, Yr as thresholdCommitSchema, Yt as ThresholdShareEnvelope, Z as OwnerNamedRoomPath, Zn as manageRequestFrameSchema, Zr as thresholdKeygenConfirmSchema, Zt as ThresholdSubject, _ as CoreCapability, _n as capabilityRequestSchema, _r as ptyResizeSchema, _t as RelayOfferFrame, a as BulkOpen, ai as topologyGetSchema, an as WebrtcOffer, ar as pathTraceSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityVerbSchema, br as relayConnectFrameSchema, bt as RevocationEntry, c as CandidatesFrame, ci as versionGetSchema, cn as bulkCancelSchema, cr as pingFrameSchema, ct as ProcSpawn, d as CapabilityRequest, di as webrtcOfferSchema, dn as bulkOpenSchema, dr as privateUseDomainIdSchema, dt as PtyResize, ei as thresholdShareClaimsSchema, en as TopologyPeers, er as namespacedCapabilitySchema, et as PeerAdvert, f as CapabilityScope, fi as wireCandidateSchema, fn as bulkResumeSchema, fr as procKillSchema, ft as PtySpawn, g as CoordinatorFrame, gn as capabilityGrantSchema, gr as ptyKillSchema, gt as RelayInboundFrame, h as CloseFrame, hn as capabilityGrantOkSchema, hr as protocolVersionSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as tokenClaimsSchema, in as WebrtcIceCandidate, ir as pathTraceOkSchema, it as PrivateUseCapability, j as ExecList, jn as dataHaveFrameSchema, jr as roomMemberSchema, jt as RoomRead, k as DmRoomPath, kn as coseTokenHeadersSchema, kr as roomJoinSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as webrtcAnswerSchema, ln as bulkDataFrameSchema, lr as pongFrameSchema, lt as ProtocolVersion, m as CapabilityVerb, mn as candidatesFrameSchema, mr as procSpawnSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdSignSchema, nn as VersionGet, nr as observedAddressFrameSchema, nt as PingFrame, o as BulkResume, oi as topologyPeersSchema, on as WireCandidate, or as peerAdvertSchema, ot as ProcKill, p as CapabilityToken, pn as candidateKindSchema, pr as procSignalSchema, pt as PtyWrite, q as MessageRef, qn as manageCommandParamsSchema, qr as syncPunchFrameSchema, qt as ThresholdKeygenRound2, r as BulkDataFrame, ri as thresholdSubjectSchema, rn as WebrtcAnswer, rr as ownerNamedRoomPathSchema, rt as PongFrame, s as CandidateKind, si as transferIdSchema, sn as bulkAckFrameSchema, sr as peerIdentitySchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdShareEnvelopeSchema, tn as TransferId, tr as namespacedDomainIdSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as webrtcIceCandidateSchema, un as bulkEndFrameSchema, ur as privateUseCapabilitySchema, ut as PtyKill, v as CoreDomainName, vn as capabilityScopeSchema, vr as ptySpawnSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coreDomainNameSchema, wr as revocationAnnounceFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as closeFrameSchema, xr as relayDataFrameSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityTokenSchema, yr as ptyWriteSchema, yt as RevocationClaims, z as IceCandidateInit, zn as frameSchema, zr as roomSendSchema, zt as StreamEndFrame } from "../protocol-Bi2fzBCc.mjs";
2
2
  export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PathTrace, PathTraceOk, PeerAdvert, PeerIdentity, PingFrame, PongFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TopologyGet, TopologyPeers, TransferId, VersionGet, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
@@ -466,7 +466,9 @@ const closeFrameSchema = z.lazy(() => z.object({
466
466
  const peerAdvertSchema = z.lazy(() => z.object({
467
467
  "device": z.lazy(() => deviceIdSchema),
468
468
  "addresses": z.array(z.string()),
469
- "snapshot-seconds": z.number().int()
469
+ "snapshot-seconds": z.number().int(),
470
+ "identity-key": z.lazy(() => identityKeySchema),
471
+ "signature": z.instanceof(Uint8Array)
470
472
  }).catchall(z.unknown()));
471
473
  const gossipFrameSchema = z.lazy(() => z.object({
472
474
  "type": z.literal("gossip"),
@@ -1,3 +1,4 @@
1
+ import { PEER_ADVERT_IDENTITY_KEY_KEY, PEER_ADVERT_SIGNATURE_KEY } from "./domain/peer-advert.mjs";
1
2
  import packageJson from "../package.json" with { type: "json" };
2
3
  //#region src/domain/own-version.ts
3
4
  /** This node's own actual, currently-running wire-mesh-core version -- read once from the installed package's own package.json, never from anything gossiped or cached, so buildSelfAdvert's own self-advert extension and version.get's manage-response both always answer with the truth for this exact running process. */
@@ -18,11 +19,13 @@ function versionGetOutcome() {
18
19
  }
19
20
  //#endregion
20
21
  //#region src/domain/gossip-extensions.ts
21
- /** peer-advert's own three typed fields -- reserved so a `sendGossipUpdate` caller can never override the session's own device-id, address list, or freshness timestamp by supplying an extension of the same name. */
22
+ /** peer-advert's own typed fields, reserved so a `sendGossipUpdate` caller can never override the session's own device-id, address list, freshness timestamp, self-certifying key, or signature by supplying an extension of the same name. The last two matter most: an extension able to shadow them would let a caller replace the very fields wire-mesh#225's authentication rests on. */
22
23
  const RESERVED_PEER_ADVERT_KEYS = /* @__PURE__ */ new Set([
23
24
  "device",
24
25
  "addresses",
25
- "snapshot-seconds"
26
+ "snapshot-seconds",
27
+ PEER_ADVERT_IDENTITY_KEY_KEY,
28
+ PEER_ADVERT_SIGNATURE_KEY
26
29
  ]);
27
30
  /** The gossip extension key topology self-advertisement (wire-mesh#180) is carried under -- session-managed, computed fresh from this session's own connection/relayPairings state on every self-advert, never a caller-supplied fact. */
28
31
  const TOPOLOGY_PEERS_GOSSIP_KEY = "topology/peers";
@@ -1,4 +1,5 @@
1
1
  const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
2
+ const require_domain_peer_advert = require("./domain/peer-advert.cjs");
2
3
  let package_json = require("../package.json");
3
4
  package_json = require_rolldown_runtime.__toESM(package_json, 1);
4
5
  //#region src/domain/own-version.ts
@@ -20,11 +21,13 @@ function versionGetOutcome() {
20
21
  }
21
22
  //#endregion
22
23
  //#region src/domain/gossip-extensions.ts
23
- /** peer-advert's own three typed fields -- reserved so a `sendGossipUpdate` caller can never override the session's own device-id, address list, or freshness timestamp by supplying an extension of the same name. */
24
+ /** peer-advert's own typed fields, reserved so a `sendGossipUpdate` caller can never override the session's own device-id, address list, freshness timestamp, self-certifying key, or signature by supplying an extension of the same name. The last two matter most: an extension able to shadow them would let a caller replace the very fields wire-mesh#225's authentication rests on. */
24
25
  const RESERVED_PEER_ADVERT_KEYS = /* @__PURE__ */ new Set([
25
26
  "device",
26
27
  "addresses",
27
- "snapshot-seconds"
28
+ "snapshot-seconds",
29
+ require_domain_peer_advert.PEER_ADVERT_IDENTITY_KEY_KEY,
30
+ require_domain_peer_advert.PEER_ADVERT_SIGNATURE_KEY
28
31
  ]);
29
32
  /** The gossip extension key topology self-advertisement (wire-mesh#180) is carried under -- session-managed, computed fresh from this session's own connection/relayPairings state on every self-advert, never a caller-supplied fact. */
30
33
  const TOPOLOGY_PEERS_GOSSIP_KEY = "topology/peers";
@@ -1,4 +1,4 @@
1
- import { B as IdentityKey, D as DeviceId } from "./protocol-BnbpCk0Z.cjs";
1
+ import { B as IdentityKey, D as DeviceId } from "./protocol-Bi2fzBCc.cjs";
2
2
  //#region src/ports/identity.d.ts
3
3
  /**
4
4
  * Wraps the local node's own identity plus the signing/verification primitives capability-token handling needs -- never hardcoded to one crypto library's own API shape (Node's webcrypto, a WASM implementation, a hardware key, etc. can all satisfy this same contract).
@@ -1,4 +1,4 @@
1
- import { B as IdentityKey, D as DeviceId } from "./protocol-BnbpCk0Z.mjs";
1
+ import { B as IdentityKey, D as DeviceId } from "./protocol-Bi2fzBCc.mjs";
2
2
  //#region src/ports/identity.d.ts
3
3
  /**
4
4
  * Wraps the local node's own identity plus the signing/verification primitives capability-token handling needs -- never hardcoded to one crypto library's own API shape (Node's webcrypto, a WASM implementation, a hardware key, etc. can all satisfy this same contract).
@@ -1,2 +1,2 @@
1
- import { t as IdentityPort } from "../identity-BRlM-Krs.cjs";
1
+ import { t as IdentityPort } from "../identity-DImeXZcq.cjs";
2
2
  export { IdentityPort };
@@ -1,2 +1,2 @@
1
- import { t as IdentityPort } from "../identity-DiuayfEd.mjs";
1
+ import { t as IdentityPort } from "../identity-Dc4xmwp3.mjs";
2
2
  export { IdentityPort };
@@ -1,2 +1,2 @@
1
- import { n as Listener, r as Transport, t as Connection } from "../transport-Ca_ZyyZe.cjs";
1
+ import { n as Listener, r as Transport, t as Connection } from "../transport-Cq_odHy3.cjs";
2
2
  export { Connection, Listener, Transport };
@@ -1,2 +1,2 @@
1
- import { n as Listener, r as Transport, t as Connection } from "../transport-BH8kGWXt.mjs";
1
+ import { n as Listener, r as Transport, t as Connection } from "../transport-GcJ4LYVE.mjs";
2
2
  export { Connection, Listener, Transport };
@@ -297,6 +297,11 @@ declare const frameVariantSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.Zod
297
297
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
298
298
  addresses: z.ZodArray<z.ZodString>;
299
299
  "snapshot-seconds": z.ZodNumber;
300
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
301
+ alg: z.ZodNumber;
302
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
303
+ }, z.core.$strip>>>;
304
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
300
305
  }, z.core.$catchall<z.ZodUnknown>>>>>;
301
306
  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
302
307
  type: z.ZodLiteral<"candidates">;
@@ -583,6 +588,11 @@ declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.
583
588
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
584
589
  addresses: z.ZodArray<z.ZodString>;
585
590
  "snapshot-seconds": z.ZodNumber;
591
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
592
+ alg: z.ZodNumber;
593
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
594
+ }, z.core.$strip>>>;
595
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
586
596
  }, z.core.$catchall<z.ZodUnknown>>>>>;
587
597
  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
588
598
  type: z.ZodLiteral<"candidates">;
@@ -1528,6 +1538,11 @@ declare const peerAdvertSchema: z.ZodLazy<z.ZodObject<{
1528
1538
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
1529
1539
  addresses: z.ZodArray<z.ZodString>;
1530
1540
  "snapshot-seconds": z.ZodNumber;
1541
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
1542
+ alg: z.ZodNumber;
1543
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1544
+ }, z.core.$strip>>>;
1545
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1531
1546
  }, z.core.$catchall<z.ZodUnknown>>>;
1532
1547
  declare const gossipFrameSchema: z.ZodLazy<z.ZodObject<{
1533
1548
  type: z.ZodLiteral<"gossip">;
@@ -1535,6 +1550,11 @@ declare const gossipFrameSchema: z.ZodLazy<z.ZodObject<{
1535
1550
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
1536
1551
  addresses: z.ZodArray<z.ZodString>;
1537
1552
  "snapshot-seconds": z.ZodNumber;
1553
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
1554
+ alg: z.ZodNumber;
1555
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1556
+ }, z.core.$strip>>>;
1557
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1538
1558
  }, z.core.$catchall<z.ZodUnknown>>>>>;
1539
1559
  }, z.core.$strip>>;
1540
1560
  declare const candidateKindSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLiteral<"host">, z.ZodLiteral<"server-reflexive">, z.ZodLiteral<"relayed">]>>;
@@ -297,6 +297,11 @@ declare const frameVariantSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.Zod
297
297
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
298
298
  addresses: z.ZodArray<z.ZodString>;
299
299
  "snapshot-seconds": z.ZodNumber;
300
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
301
+ alg: z.ZodNumber;
302
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
303
+ }, z.core.$strip>>>;
304
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
300
305
  }, z.core.$catchall<z.ZodUnknown>>>>>;
301
306
  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
302
307
  type: z.ZodLiteral<"candidates">;
@@ -583,6 +588,11 @@ declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.
583
588
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
584
589
  addresses: z.ZodArray<z.ZodString>;
585
590
  "snapshot-seconds": z.ZodNumber;
591
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
592
+ alg: z.ZodNumber;
593
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
594
+ }, z.core.$strip>>>;
595
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
586
596
  }, z.core.$catchall<z.ZodUnknown>>>>>;
587
597
  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
588
598
  type: z.ZodLiteral<"candidates">;
@@ -1528,6 +1538,11 @@ declare const peerAdvertSchema: z.ZodLazy<z.ZodObject<{
1528
1538
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
1529
1539
  addresses: z.ZodArray<z.ZodString>;
1530
1540
  "snapshot-seconds": z.ZodNumber;
1541
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
1542
+ alg: z.ZodNumber;
1543
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1544
+ }, z.core.$strip>>>;
1545
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1531
1546
  }, z.core.$catchall<z.ZodUnknown>>>;
1532
1547
  declare const gossipFrameSchema: z.ZodLazy<z.ZodObject<{
1533
1548
  type: z.ZodLiteral<"gossip">;
@@ -1535,6 +1550,11 @@ declare const gossipFrameSchema: z.ZodLazy<z.ZodObject<{
1535
1550
  device: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
1536
1551
  addresses: z.ZodArray<z.ZodString>;
1537
1552
  "snapshot-seconds": z.ZodNumber;
1553
+ "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
1554
+ alg: z.ZodNumber;
1555
+ "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1556
+ }, z.core.$strip>>>;
1557
+ signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
1538
1558
  }, z.core.$catchall<z.ZodUnknown>>>>>;
1539
1559
  }, z.core.$strip>>;
1540
1560
  declare const candidateKindSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLiteral<"host">, z.ZodLiteral<"server-reflexive">, z.ZodLiteral<"relayed">]>>;
@@ -1,5 +1,5 @@
1
- import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, p as CapabilityToken } from "./protocol-BnbpCk0Z.mjs";
2
- import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-DtjdYS_a.mjs";
1
+ import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, p as CapabilityToken } from "./protocol-Bi2fzBCc.cjs";
2
+ import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-BDVxEvl2.cjs";
3
3
  //#region src/domain/room-token-verification.d.ts
4
4
  /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
5
5
  declare const ROOM_MEMBER_CAPABILITY = "room:member";
@@ -1,5 +1,5 @@
1
- import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, p as CapabilityToken } from "./protocol-BnbpCk0Z.cjs";
2
- import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-BL2BzOmN.cjs";
1
+ import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, p as CapabilityToken } from "./protocol-Bi2fzBCc.mjs";
2
+ import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-0r9ipK1r.mjs";
3
3
  //#region src/domain/room-token-verification.d.ts
4
4
  /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
5
5
  declare const ROOM_MEMBER_CAPABILITY = "room:member";
@@ -1,5 +1,5 @@
1
- import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, bt as RevocationEntry, p as CapabilityToken, yt as RevocationClaims } from "./protocol-BnbpCk0Z.mjs";
2
- import { t as IdentityPort } from "./identity-DiuayfEd.mjs";
1
+ import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, bt as RevocationEntry, p as CapabilityToken, yt as RevocationClaims } from "./protocol-Bi2fzBCc.mjs";
2
+ import { t as IdentityPort } from "./identity-Dc4xmwp3.mjs";
3
3
  import { t as Clock } from "./clock-DiSx-WKM.mjs";
4
4
  import { z } from "zod";
5
5
  import { JsonValue, PredicateNode, Resolution } from "trilean";
@@ -1,5 +1,5 @@
1
- import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, bt as RevocationEntry, p as CapabilityToken, yt as RevocationClaims } from "./protocol-BnbpCk0Z.cjs";
2
- import { t as IdentityPort } from "./identity-BRlM-Krs.cjs";
1
+ import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, bt as RevocationEntry, p as CapabilityToken, yt as RevocationClaims } from "./protocol-Bi2fzBCc.cjs";
2
+ import { t as IdentityPort } from "./identity-DImeXZcq.cjs";
3
3
  import { t as Clock } from "./clock-DiSx-WKM.cjs";
4
4
  import { z } from "zod";
5
5
  import { JsonValue, PredicateNode, Resolution } from "trilean";
@@ -1,4 +1,4 @@
1
- import { D as DeviceId, N as Frame } from "./protocol-BnbpCk0Z.mjs";
1
+ import { D as DeviceId, N as Frame } from "./protocol-Bi2fzBCc.cjs";
2
2
  //#region src/ports/transport.d.ts
3
3
  /**
4
4
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.
@@ -1,4 +1,4 @@
1
- import { D as DeviceId, N as Frame } from "./protocol-BnbpCk0Z.cjs";
1
+ import { D as DeviceId, N as Frame } from "./protocol-Bi2fzBCc.mjs";
2
2
  //#region src/ports/transport.d.ts
3
3
  /**
4
4
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "wire-mesh-core",
3
- "version": "1.58.7",
3
+ "version": "2.0.0",
4
4
  "dependencies": {
5
5
  "cbor2": "2.3.0",
6
6
  "cddl.js": "1.0.1",
@@ -126,6 +126,10 @@
126
126
  "import": "./dist/domain/path-trace.mjs",
127
127
  "require": "./dist/domain/path-trace.cjs"
128
128
  },
129
+ "./domain/peer-advert": {
130
+ "import": "./dist/domain/peer-advert.mjs",
131
+ "require": "./dist/domain/peer-advert.cjs"
132
+ },
129
133
  "./domain/ping-round-trips": {
130
134
  "import": "./dist/domain/ping-round-trips.mjs",
131
135
  "require": "./dist/domain/ping-round-trips.cjs"