wire-mesh-core 2.0.1 → 2.1.0

package/dist/domain/advert-extension-policy.cjs

@@ -0,0 +1,20 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_gossip_extensions = require("../gossip-extensions-BBYgMZ2N.cjs");
+//#region src/domain/advert-extension-policy.ts
+/** The extension keys wire-mesh-core itself writes on every self-advert, which a policy never has to list. */
+const CORE_EXTENSION_KEYS = /* @__PURE__ */ new Set([require_gossip_extensions.TOPOLOGY_PEERS_GOSSIP_KEY, require_gossip_extensions.CORE_VERSION_GOSSIP_KEY]);
+/**
+* Checks every extension entry of an advert against a policy. Refuses on the first entry that is not allowed and names its key, so the host can say why.
+*/
+function checkAdvertExtensions(advert, policy) {
+	for (const [key, value] of Object.entries(advert)) {
+		if (require_gossip_extensions.RESERVED_PEER_ADVERT_KEYS.has(key) || CORE_EXTENSION_KEYS.has(key)) continue;
+		if ((Object.hasOwn(policy.allowed, key) ? policy.allowed[key] : void 0)?.(value) !== true) return {
+			ok: false,
+			key
+		};
+	}
+	return { ok: true };
+}
+//#endregion
+exports.checkAdvertExtensions = checkAdvertExtensions;

package/dist/domain/advert-extension-policy.d.cts

@@ -0,0 +1,21 @@
+import { et as PeerAdvert } from "../protocol-Bi2fzBCc.cjs";
+//#region src/domain/advert-extension-policy.d.ts
+/** Whether one extension entry's value is one the hub will carry. Must be strict: a value with a field the validator did not expect is refused, since the point is that nothing unexpected is published. */
+export type ExtensionValidator = (value: unknown) => boolean;
+export interface AdvertExtensionPolicy {
+  /**
+   * The application extensions the hub carries, each with the validator its value must pass. An advert holding any extension key not listed here, or a listed key whose value fails its validator, is refused whole. wire-mesh-core's own extensions (topology and version) are always carried and need no entry.
+   */
+  readonly allowed: Readonly<Record<string, ExtensionValidator>>;
+}
+export type AdvertExtensionVerdict = {
+  readonly ok: true;
+} | {
+  readonly ok: false;
+  readonly key: string;
+};
+/**
+ * Checks every extension entry of an advert against a policy. Refuses on the first entry that is not allowed and names its key, so the host can say why.
+ */
+export declare function checkAdvertExtensions(advert: Readonly<PeerAdvert>, policy: Readonly<AdvertExtensionPolicy>): AdvertExtensionVerdict;
+//#endregion

package/dist/domain/advert-extension-policy.d.mts

@@ -0,0 +1,21 @@
+import { et as PeerAdvert } from "../protocol-Bi2fzBCc.mjs";
+//#region src/domain/advert-extension-policy.d.ts
+/** Whether one extension entry's value is one the hub will carry. Must be strict: a value with a field the validator did not expect is refused, since the point is that nothing unexpected is published. */
+export type ExtensionValidator = (value: unknown) => boolean;
+export interface AdvertExtensionPolicy {
+  /**
+   * The application extensions the hub carries, each with the validator its value must pass. An advert holding any extension key not listed here, or a listed key whose value fails its validator, is refused whole. wire-mesh-core's own extensions (topology and version) are always carried and need no entry.
+   */
+  readonly allowed: Readonly<Record<string, ExtensionValidator>>;
+}
+export type AdvertExtensionVerdict = {
+  readonly ok: true;
+} | {
+  readonly ok: false;
+  readonly key: string;
+};
+/**
+ * Checks every extension entry of an advert against a policy. Refuses on the first entry that is not allowed and names its key, so the host can say why.
+ */
+export declare function checkAdvertExtensions(advert: Readonly<PeerAdvert>, policy: Readonly<AdvertExtensionPolicy>): AdvertExtensionVerdict;
+//#endregion

package/dist/domain/advert-extension-policy.mjs

@@ -0,0 +1,19 @@
+import { i as CORE_VERSION_GOSSIP_KEY, n as TOPOLOGY_PEERS_GOSSIP_KEY, t as RESERVED_PEER_ADVERT_KEYS } from "../gossip-extensions-B6WJjkAr.mjs";
+//#region src/domain/advert-extension-policy.ts
+/** The extension keys wire-mesh-core itself writes on every self-advert, which a policy never has to list. */
+const CORE_EXTENSION_KEYS = /* @__PURE__ */ new Set([TOPOLOGY_PEERS_GOSSIP_KEY, CORE_VERSION_GOSSIP_KEY]);
+/**
+* Checks every extension entry of an advert against a policy. Refuses on the first entry that is not allowed and names its key, so the host can say why.
+*/
+function checkAdvertExtensions(advert, policy) {
+	for (const [key, value] of Object.entries(advert)) {
+		if (RESERVED_PEER_ADVERT_KEYS.has(key) || CORE_EXTENSION_KEYS.has(key)) continue;
+		if ((Object.hasOwn(policy.allowed, key) ? policy.allowed[key] : void 0)?.(value) !== true) return {
+			ok: false,
+			key
+		};
+	}
+	return { ok: true };
+}
+//#endregion
+export { checkAdvertExtensions };

package/dist/domain/capability-request.cjs

@@ -13,6 +13,10 @@ function randomTokenId() {
 	crypto.getRandomValues(bytes);
 	return bytes;
 }
+/** Stops a pending timer from keeping the process alive, where the runtime has that notion. Node's setTimeout returns an object with unref(); a browser's or a Worker's returns a number, which has nothing to unref and must not be called as if it did. */
+function unrefIfSupported(handle) {
+	if (typeof handle === "object" && handle !== null && "unref" in handle && typeof handle.unref === "function") Reflect.apply(handle.unref, handle, []);
+}
 /**
 * Builds a capability-request command per management.cddl. The outer `manage-command.verb` is the capability string itself -- the same value as this map's own `params.capability` field -- never a generic literal: capability-verb's own CDDL grammar is a closed alternation of colon-delimited `domain:noun` regexes (spec/tokens.cddl), so a bare literal like "capability" could never satisfy it, and routing by capability (the same way room.send/room.join already share the ROOM_MEMBER_CAPABILITY outer verb) is how a receiver's own per-capability handler knows which grant this ask is even for. `params.verb` is the fixed "capability.request" marker that distinguishes this ask from any other verb sharing the same outer capability (mirroring room.send/room.join's own inner `params.verb` split under one shared outer verb). `valid-until`, when given, bounds how long this ask is worth granting (wire-mesh#82) -- a receiver refuses outright once its own clock has passed it, rather than presenting a stale ask to a human for approval.
 */
@@ -69,7 +73,7 @@ function createCapabilityRequestHandler(options) {
 				message: "no decision within the capability-request timeout"
 			}).catch(() => void 0);
 		}, options.timeoutMs);
-		timeoutHandle.unref();
+		unrefIfSupported(timeoutHandle);
 		options.onRequest({
 			scope: incoming.scope,
 			requesterDevice: options.bearerDevice,

package/dist/domain/capability-request.mjs

@@ -12,6 +12,10 @@ function randomTokenId() {
 	crypto.getRandomValues(bytes);
 	return bytes;
 }
+/** Stops a pending timer from keeping the process alive, where the runtime has that notion. Node's setTimeout returns an object with unref(); a browser's or a Worker's returns a number, which has nothing to unref and must not be called as if it did. */
+function unrefIfSupported(handle) {
+	if (typeof handle === "object" && handle !== null && "unref" in handle && typeof handle.unref === "function") Reflect.apply(handle.unref, handle, []);
+}
 /**
 * Builds a capability-request command per management.cddl. The outer `manage-command.verb` is the capability string itself -- the same value as this map's own `params.capability` field -- never a generic literal: capability-verb's own CDDL grammar is a closed alternation of colon-delimited `domain:noun` regexes (spec/tokens.cddl), so a bare literal like "capability" could never satisfy it, and routing by capability (the same way room.send/room.join already share the ROOM_MEMBER_CAPABILITY outer verb) is how a receiver's own per-capability handler knows which grant this ask is even for. `params.verb` is the fixed "capability.request" marker that distinguishes this ask from any other verb sharing the same outer capability (mirroring room.send/room.join's own inner `params.verb` split under one shared outer verb). `valid-until`, when given, bounds how long this ask is worth granting (wire-mesh#82) -- a receiver refuses outright once its own clock has passed it, rather than presenting a stale ask to a human for approval.
 */
@@ -68,7 +72,7 @@ function createCapabilityRequestHandler(options) {
 				message: "no decision within the capability-request timeout"
 			}).catch(() => void 0);
 		}, options.timeoutMs);
-		timeoutHandle.unref();
+		unrefIfSupported(timeoutHandle);
 		options.onRequest({
 			scope: incoming.scope,
 			requesterDevice: options.bearerDevice,

package/dist/domain/gossip-extensions.cjs

@@ -1,4 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_gossip_extensions = require("../gossip-extensions-DRVTHKnR.cjs");
+const require_gossip_extensions = require("../gossip-extensions-BBYgMZ2N.cjs");
+exports.RESERVED_PEER_ADVERT_KEYS = require_gossip_extensions.RESERVED_PEER_ADVERT_KEYS;
 exports.TOPOLOGY_PEERS_GOSSIP_KEY = require_gossip_extensions.TOPOLOGY_PEERS_GOSSIP_KEY;
 exports.validateGossipExtensions = require_gossip_extensions.validateGossipExtensions;

package/dist/domain/gossip-extensions.d.cts

@@ -1,4 +1,6 @@
 //#region src/domain/gossip-extensions.d.ts
+/** peer-advert's own typed fields, reserved so a `sendGossipUpdate` caller can never override the session's own device-id, address list, freshness timestamp, self-certifying key, or signature by supplying an extension of the same name. The last two matter most: an extension able to shadow them would let a caller replace the very fields wire-mesh#225's authentication rests on. */
+export declare const RESERVED_PEER_ADVERT_KEYS: ReadonlySet<string>;
 /** The gossip extension key topology self-advertisement (wire-mesh#180) is carried under -- session-managed, computed fresh from this session's own connection/relayPairings state on every self-advert, never a caller-supplied fact. */
 export declare const TOPOLOGY_PEERS_GOSSIP_KEY = "topology/peers";
 /** Rejects a `sendGossipUpdate` extension bag that would shadow one of peer-advert's own mandatory fields, shadow topology/peers (a field the session itself already computes and injects automatically, wire-mesh#180), use the key wire-mesh-core itself reserves for its own self-reported version (wire-mesh#179), or use a bare, non-domain-qualified key -- all are caller bugs that must fail loudly at the call site, not silently corrupt or ambiguously merge into the wire frame. */

package/dist/domain/gossip-extensions.d.mts

@@ -1,4 +1,6 @@
 //#region src/domain/gossip-extensions.d.ts
+/** peer-advert's own typed fields, reserved so a `sendGossipUpdate` caller can never override the session's own device-id, address list, freshness timestamp, self-certifying key, or signature by supplying an extension of the same name. The last two matter most: an extension able to shadow them would let a caller replace the very fields wire-mesh#225's authentication rests on. */
+export declare const RESERVED_PEER_ADVERT_KEYS: ReadonlySet<string>;
 /** The gossip extension key topology self-advertisement (wire-mesh#180) is carried under -- session-managed, computed fresh from this session's own connection/relayPairings state on every self-advert, never a caller-supplied fact. */
 export declare const TOPOLOGY_PEERS_GOSSIP_KEY = "topology/peers";
 /** Rejects a `sendGossipUpdate` extension bag that would shadow one of peer-advert's own mandatory fields, shadow topology/peers (a field the session itself already computes and injects automatically, wire-mesh#180), use the key wire-mesh-core itself reserves for its own self-reported version (wire-mesh#179), or use a bare, non-domain-qualified key -- all are caller bugs that must fail loudly at the call site, not silently corrupt or ambiguously merge into the wire frame. */

package/dist/domain/gossip-extensions.mjs

@@ -1,2 +1,2 @@
-import { n as validateGossipExtensions, t as TOPOLOGY_PEERS_GOSSIP_KEY } from "../gossip-extensions-BNiI44sU.mjs";
-export { TOPOLOGY_PEERS_GOSSIP_KEY, validateGossipExtensions };
+import { n as TOPOLOGY_PEERS_GOSSIP_KEY, r as validateGossipExtensions, t as RESERVED_PEER_ADVERT_KEYS } from "../gossip-extensions-B6WJjkAr.mjs";
+export { RESERVED_PEER_ADVERT_KEYS, TOPOLOGY_PEERS_GOSSIP_KEY, validateGossipExtensions };

package/dist/domain/mesh-session.cjs

@@ -1,11 +1,11 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_gossip_extensions = require("../gossip-extensions-BBYgMZ2N.cjs");
+const require_domain_peer_advert = require("./peer-advert.cjs");
 const require_domain_device_id = require("./device-id.cjs");
 const require_domain_handshake = require("./handshake.cjs");
 const require_domain_async_queue = require("./async-queue.cjs");
 const require_domain_ping_round_trips = require("./ping-round-trips.cjs");
 const require_domain_topology_snapshot = require("./topology-snapshot.cjs");
-const require_gossip_extensions = require("../gossip-extensions-DRVTHKnR.cjs");
-const require_domain_peer_advert = require("./peer-advert.cjs");
 const require_adapters_frame_codec = require("../adapters/frame-codec.cjs");
 //#region src/domain/relay-pairing.ts
 function createRelayPairings() {

package/dist/domain/mesh-session.mjs

@@ -1,10 +1,10 @@
+import { a as OWN_VERSION, i as CORE_VERSION_GOSSIP_KEY, n as TOPOLOGY_PEERS_GOSSIP_KEY, o as isVersionGetCommand, r as validateGossipExtensions, s as versionGetOutcome } from "../gossip-extensions-B6WJjkAr.mjs";
+import { signPeerAdvert, verifyPeerAdvert } from "./peer-advert.mjs";
 import { deviceIdToHex } from "./device-id.mjs";
 import { negotiate } from "./handshake.mjs";
 import { createAsyncQueue } from "./async-queue.mjs";
 import { createPingRoundTrips } from "./ping-round-trips.mjs";
 import { createTopologySnapshotTracker } from "./topology-snapshot.mjs";
-import { a as isVersionGetCommand, i as OWN_VERSION, n as validateGossipExtensions, o as versionGetOutcome, r as CORE_VERSION_GOSSIP_KEY, t as TOPOLOGY_PEERS_GOSSIP_KEY } from "../gossip-extensions-BNiI44sU.mjs";
-import { signPeerAdvert, verifyPeerAdvert } from "./peer-advert.mjs";
 import { tryDecodeFrame, wrapRelayData } from "../adapters/frame-codec.mjs";
 //#region src/domain/relay-pairing.ts
 function createRelayPairings() {

package/dist/domain/relay-hub.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_domain_peer_advert = require("./peer-advert.cjs");
+const require_domain_advert_extension_policy = require("./advert-extension-policy.cjs");
 //#region src/domain/relay-hub.ts
 const HEX_RADIX = 16;
 const HEX_DIGITS_PER_BYTE = 2;
@@ -115,6 +116,16 @@ function createRelayHub(options) {
 			const accepted = [];
 			for (const advert of frame.peers) {
 				if (!await require_domain_peer_advert.verifyPeerAdvert(options.identity, advert)) continue;
+				if (options.extensionPolicy !== void 0) {
+					const verdict = require_domain_advert_extension_policy.checkAdvertExtensions(advert, options.extensionPolicy);
+					if (!verdict.ok) {
+						options.onAdvertRefused?.({
+							device: advert.device,
+							key: verdict.key
+						});
+						continue;
+					}
+				}
 				const key = deviceKey(advert.device);
 				const previous = devices.get(key);
 				if (previous !== void 0 && !supersedes(previous, advert, connection)) continue;

package/dist/domain/relay-hub.d.cts

@@ -1,5 +1,6 @@
 import { D as DeviceId, N as Frame, et as PeerAdvert } from "../protocol-Bi2fzBCc.cjs";
 import { t as Connection } from "../transport-Cq_odHy3.cjs";
+import { AdvertExtensionPolicy } from "./advert-extension-policy.cjs";
 import { PeerAdvertVerifier } from "./peer-advert.cjs";
 //#region src/domain/relay-hub.d.ts
 /**
@@ -20,9 +21,21 @@ export interface RelayConnectionRestore {
   readonly connection: Readonly<Connection>;
   readonly state: RelayConnectionState;
 }
+/** An advert the hub refused to carry because of what its extension tail holds. */
+export interface AdvertRefusal {
+  readonly device: DeviceId;
+  /** The extension key that was not allowed, or whose value failed its validator. */
+  readonly key: string;
+}
 export interface RelayHubOptions {
   /** The crypto primitives this hub verifies every gossiped advert with (wire-mesh#225). Narrowed to verify/deriveDeviceId rather than a full IdentityPort because an advert is self-certifying: a hub checks one against the key the advert itself carries, and never needs a signing identity of its own to do it. */
   readonly identity: Readonly<PeerAdvertVerifier>;
+  /**
+   * Which extension entries of an advert this hub will carry. Absent, every extension is carried, which is right for a hub whose every client belongs to one mesh. A hub open to anyone should set it: an advert is forwarded whole to every client, so this is the only control the hub has over what an application publishes to strangers.
+   */
+  readonly extensionPolicy?: AdvertExtensionPolicy;
+  /** Called with each advert refused by extensionPolicy, so the host can report it; the advert's sender is given no reply, since the transport spec defines none. */
+  readonly onAdvertRefused?: (refusal: Readonly<AdvertRefusal>) => void;
   /** Called whenever the value exportConnection returns for a connection changes: it gossiped an advert, gained or lost a pairing, or had one of its adverts taken over by another connection. A host whose own instance can be torn down while its connections stay open (the Cloudflare hub's hibernating Durable Object) reads the new value back with exportConnection, persists it against the connection, and hands it to a later instance through restoreConnections. */
   readonly onConnectionStateChanged?: (connection: Readonly<Connection>) => void;
 }

package/dist/domain/relay-hub.d.mts

@@ -1,5 +1,6 @@
 import { D as DeviceId, N as Frame, et as PeerAdvert } from "../protocol-Bi2fzBCc.mjs";
 import { t as Connection } from "../transport-GcJ4LYVE.mjs";
+import { AdvertExtensionPolicy } from "./advert-extension-policy.mjs";
 import { PeerAdvertVerifier } from "./peer-advert.mjs";
 //#region src/domain/relay-hub.d.ts
 /**
@@ -20,9 +21,21 @@ export interface RelayConnectionRestore {
   readonly connection: Readonly<Connection>;
   readonly state: RelayConnectionState;
 }
+/** An advert the hub refused to carry because of what its extension tail holds. */
+export interface AdvertRefusal {
+  readonly device: DeviceId;
+  /** The extension key that was not allowed, or whose value failed its validator. */
+  readonly key: string;
+}
 export interface RelayHubOptions {
   /** The crypto primitives this hub verifies every gossiped advert with (wire-mesh#225). Narrowed to verify/deriveDeviceId rather than a full IdentityPort because an advert is self-certifying: a hub checks one against the key the advert itself carries, and never needs a signing identity of its own to do it. */
   readonly identity: Readonly<PeerAdvertVerifier>;
+  /**
+   * Which extension entries of an advert this hub will carry. Absent, every extension is carried, which is right for a hub whose every client belongs to one mesh. A hub open to anyone should set it: an advert is forwarded whole to every client, so this is the only control the hub has over what an application publishes to strangers.
+   */
+  readonly extensionPolicy?: AdvertExtensionPolicy;
+  /** Called with each advert refused by extensionPolicy, so the host can report it; the advert's sender is given no reply, since the transport spec defines none. */
+  readonly onAdvertRefused?: (refusal: Readonly<AdvertRefusal>) => void;
   /** Called whenever the value exportConnection returns for a connection changes: it gossiped an advert, gained or lost a pairing, or had one of its adverts taken over by another connection. A host whose own instance can be torn down while its connections stay open (the Cloudflare hub's hibernating Durable Object) reads the new value back with exportConnection, persists it against the connection, and hands it to a later instance through restoreConnections. */
   readonly onConnectionStateChanged?: (connection: Readonly<Connection>) => void;
 }

package/dist/domain/relay-hub.mjs

@@ -1,4 +1,5 @@
 import { verifyPeerAdvert } from "./peer-advert.mjs";
+import { checkAdvertExtensions } from "./advert-extension-policy.mjs";
 //#region src/domain/relay-hub.ts
 const HEX_RADIX = 16;
 const HEX_DIGITS_PER_BYTE = 2;
@@ -114,6 +115,16 @@ function createRelayHub(options) {
 			const accepted = [];
 			for (const advert of frame.peers) {
 				if (!await verifyPeerAdvert(options.identity, advert)) continue;
+				if (options.extensionPolicy !== void 0) {
+					const verdict = checkAdvertExtensions(advert, options.extensionPolicy);
+					if (!verdict.ok) {
+						options.onAdvertRefused?.({
+							device: advert.device,
+							key: verdict.key
+						});
+						continue;
+					}
+				}
 				const key = deviceKey(advert.device);
 				const previous = devices.get(key);
 				if (previous !== void 0 && !supersedes(previous, advert, connection)) continue;

package/dist/domain/topology.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_generated_protocol = require("../generated/protocol.cjs");
-const require_gossip_extensions = require("../gossip-extensions-DRVTHKnR.cjs");
+const require_gossip_extensions = require("../gossip-extensions-BBYgMZ2N.cjs");
 //#region src/domain/topology.ts
 /**
 * Topology introspection (wire-mesh#180): assembling a connection graph out of every device's own self-reported `topology/peers` gossip extension (mesh-session.ts's buildSelfAdvert computes and injects it automatically -- nothing here writes to it), and answering the on-demand `topology.get` manage-command for a live, cache-bust read instead of a possibly-stale gossiped one. `topology:get` is deliberately ungated, per management.cddl's own comment on `topology-get` and this registry entry -- no token/scope check anywhere in this module, mirroring how core/room's room.join/room.invite are ungated in room-client.ts.

package/dist/domain/topology.mjs

@@ -1,5 +1,5 @@
 import { topologyGetSchema, topologyPeersSchema } from "../generated/protocol.mjs";
-import { t as TOPOLOGY_PEERS_GOSSIP_KEY } from "../gossip-extensions-BNiI44sU.mjs";
+import { n as TOPOLOGY_PEERS_GOSSIP_KEY } from "../gossip-extensions-B6WJjkAr.mjs";
 //#region src/domain/topology.ts
 /**
 * Topology introspection (wire-mesh#180): assembling a connection graph out of every device's own self-reported `topology/peers` gossip extension (mesh-session.ts's buildSelfAdvert computes and injects it automatically -- nothing here writes to it), and answering the on-demand `topology.get` manage-command for a live, cache-bust read instead of a possibly-stale gossiped one. `topology:get` is deliberately ungated, per management.cddl's own comment on `topology-get` and this registry entry -- no token/scope check anywhere in this module, mirroring how core/room's room.join/room.invite are ungated in room-client.ts.

package/dist/{gossip-extensions-BNiI44sU.mjs → gossip-extensions-B6WJjkAr.mjs}

@@ -41,4 +41,4 @@ function validateGossipExtensions(extensions) {
 	}
 }
 //#endregion
-export { isVersionGetCommand as a, OWN_VERSION as i, validateGossipExtensions as n, versionGetOutcome as o, CORE_VERSION_GOSSIP_KEY as r, TOPOLOGY_PEERS_GOSSIP_KEY as t };
+export { OWN_VERSION as a, CORE_VERSION_GOSSIP_KEY as i, TOPOLOGY_PEERS_GOSSIP_KEY as n, isVersionGetCommand as o, validateGossipExtensions as r, versionGetOutcome as s, RESERVED_PEER_ADVERT_KEYS as t };

package/dist/{gossip-extensions-DRVTHKnR.cjs → gossip-extensions-BBYgMZ2N.cjs}

@@ -55,6 +55,12 @@ Object.defineProperty(exports, "OWN_VERSION", {
 		return OWN_VERSION;
 	}
 });
+Object.defineProperty(exports, "RESERVED_PEER_ADVERT_KEYS", {
+	enumerable: true,
+	get: function() {
+		return RESERVED_PEER_ADVERT_KEYS;
+	}
+});
 Object.defineProperty(exports, "TOPOLOGY_PEERS_GOSSIP_KEY", {
 	enumerable: true,
 	get: function() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wire-mesh-core",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "dependencies": {
     "cbor2": "2.3.0",
     "cddl.js": "1.0.1",
@@ -62,6 +62,10 @@
       "import": "./dist/adapters/tls-transport.mjs",
       "require": "./dist/adapters/tls-transport.cjs"
     },
+    "./domain/advert-extension-policy": {
+      "import": "./dist/domain/advert-extension-policy.mjs",
+      "require": "./dist/domain/advert-extension-policy.cjs"
+    },
     "./domain/async-queue": {
       "import": "./dist/domain/async-queue.mjs",
       "require": "./dist/domain/async-queue.cjs"