wire-mesh-core 3.0.0 → 3.1.0

package/dist/adapters/memory-storage.d.cts

@@ -1,4 +1,4 @@
-import { KeyValueStorage } from "../ports/storage.cjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.cjs";
 //#region src/adapters/memory-storage.d.ts
 /** An in-process KeyValueStorage backed by a Map -- for tests and single-process nodes; a real deployment substitutes a persistent adapter behind the same contract without touching anything that depends on the port. Not declared `async`: every operation is genuinely synchronous under the hood, so the contract's Promise return is satisfied directly via Promise.resolve() rather than an async function with no await in its body. */
 export declare function createMemoryStorage(): KeyValueStorage;

package/dist/adapters/memory-storage.d.mts

@@ -1,4 +1,4 @@
-import { KeyValueStorage } from "../ports/storage.mjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.mjs";
 //#region src/adapters/memory-storage.d.ts
 /** An in-process KeyValueStorage backed by a Map -- for tests and single-process nodes; a real deployment substitutes a persistent adapter behind the same contract without touching anything that depends on the port. Not declared `async`: every operation is genuinely synchronous under the hood, so the contract's Promise return is satisfied directly via Promise.resolve() rather than an async function with no await in its body. */
 export declare function createMemoryStorage(): KeyValueStorage;

package/dist/adapters/node-fs-storage.d.cts

@@ -1,4 +1,4 @@
-import { KeyValueStorage } from "../ports/storage.cjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.cjs";
 //#region src/adapters/node-fs-storage.d.ts
 export interface NodeFsStorageOptions {
   /** Directory to store entries under. Created on first write if it doesn't already exist. */

package/dist/adapters/node-fs-storage.d.mts

@@ -1,4 +1,4 @@
-import { KeyValueStorage } from "../ports/storage.mjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.mjs";
 //#region src/adapters/node-fs-storage.d.ts
 export interface NodeFsStorageOptions {
   /** Directory to store entries under. Created on first write if it doesn't already exist. */

package/dist/domain/bulk.d.cts

@@ -1,5 +1,5 @@
 import { D as DeviceId, N as Frame, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-DCDae3z4.cjs";
-import { KeyValueStorage } from "../ports/storage.cjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.cjs";
 import { t as Connection } from "../transport-CfW7fsGK.cjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.cjs";
 //#region src/domain/bulk.d.ts

package/dist/domain/bulk.d.mts

@@ -1,5 +1,5 @@
 import { D as DeviceId, N as Frame, V as ManageCommand, f as CapabilityScope, p as CapabilityToken } from "../protocol-DCDae3z4.mjs";
-import { KeyValueStorage } from "../ports/storage.mjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.mjs";
 import { t as Connection } from "../transport-iLBxIkRS.mjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.mjs";
 //#region src/domain/bulk.d.ts

package/dist/domain/capability-grant.d.cts

@@ -13,7 +13,7 @@ export declare function buildCapabilityGrantCommand(capability: string, grantedT
  *
  * scope and targetDevice forward directly to MeshSession.sendManageRequest's own identically-named parameters (the request's own top-level scope obligation 4 checks the token against, and relay routing respectively).
  */
-export declare function sendCapabilityGrant(session: Readonly<MeshSession>, capability: string, grantedToken: CapabilityToken, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId): Promise<ManageOutcome>;
+export declare function sendCapabilityGrant(session: Readonly<Pick<MeshSession, "sendManageRequest">>, capability: string, grantedToken: CapabilityToken, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId): Promise<ManageOutcome>;
 /** One incoming, fully-verified capability-grant, surfaced for the domain to react to (store the token, notify a human, etc.) -- there is no decide() here because management.cddl specifies no protocol-level approval round trip for this primitive; by the time onGrant fires, the wire response has already been sent. */
 export interface CapabilityGrantEvent {
   /** The capability granted -- equals both the outer manage-command.verb and the verified token's own capability claim (obligation 2 already enforced this before onGrant fires). */

package/dist/domain/capability-grant.d.mts

@@ -13,7 +13,7 @@ export declare function buildCapabilityGrantCommand(capability: string, grantedT
  *
  * scope and targetDevice forward directly to MeshSession.sendManageRequest's own identically-named parameters (the request's own top-level scope obligation 4 checks the token against, and relay routing respectively).
  */
-export declare function sendCapabilityGrant(session: Readonly<MeshSession>, capability: string, grantedToken: CapabilityToken, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId): Promise<ManageOutcome>;
+export declare function sendCapabilityGrant(session: Readonly<Pick<MeshSession, "sendManageRequest">>, capability: string, grantedToken: CapabilityToken, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId): Promise<ManageOutcome>;
 /** One incoming, fully-verified capability-grant, surfaced for the domain to react to (store the token, notify a human, etc.) -- there is no decide() here because management.cddl specifies no protocol-level approval round trip for this primitive; by the time onGrant fires, the wire response has already been sent. */
 export interface CapabilityGrantEvent {
   /** The capability granted -- equals both the outer manage-command.verb and the verified token's own capability claim (obligation 2 already enforced this before onGrant fires). */

package/dist/domain/capability-request.d.cts

@@ -12,7 +12,7 @@ export declare function buildCapabilityRequestCommand(capability: string, validU
  *
  * targetDevice and timeoutMs forward directly to MeshSession.sendManageRequest's own identically-named parameters (relay routing and a requester-side give-up bound respectively -- wire-mesh#80 is already implemented there, not duplicated here). validUntil, when given, is attached to the request itself (wire-mesh#82) so a slow-to-answer receiver -- or a relay/facilitator forwarding this request on the caller's behalf -- can refuse or drop a now-stale ask outright rather than holding or forwarding it.
  */
-export declare function requestCapability(session: Readonly<MeshSession>, capability: string, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId, timeoutMs?: number, validUntil?: number): Promise<CapabilityGrantOk>;
+export declare function requestCapability(session: Readonly<Pick<MeshSession, "sendManageRequest">>, capability: string, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId, timeoutMs?: number, validUntil?: number): Promise<CapabilityGrantOk>;
 /**
  * A receiver's decision on one incoming capability-request, mirroring room-client.ts's own (now capability-specific) RoomJoinDecision, generalized to any capability: "accept" mints and returns a fresh token; "reject" sends an ordinary manage-error carrying an optional human-readable reason.
  */

package/dist/domain/capability-request.d.mts

@@ -12,7 +12,7 @@ export declare function buildCapabilityRequestCommand(capability: string, validU
  *
  * targetDevice and timeoutMs forward directly to MeshSession.sendManageRequest's own identically-named parameters (relay routing and a requester-side give-up bound respectively -- wire-mesh#80 is already implemented there, not duplicated here). validUntil, when given, is attached to the request itself (wire-mesh#82) so a slow-to-answer receiver -- or a relay/facilitator forwarding this request on the caller's behalf -- can refuse or drop a now-stale ask outright rather than holding or forwarding it.
  */
-export declare function requestCapability(session: Readonly<MeshSession>, capability: string, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId, timeoutMs?: number, validUntil?: number): Promise<CapabilityGrantOk>;
+export declare function requestCapability(session: Readonly<Pick<MeshSession, "sendManageRequest">>, capability: string, scope: Readonly<CapabilityScope>, targetDevice?: DeviceId, timeoutMs?: number, validUntil?: number): Promise<CapabilityGrantOk>;
 /**
  * A receiver's decision on one incoming capability-request, mirroring room-client.ts's own (now capability-specific) RoomJoinDecision, generalized to any capability: "accept" mints and returns a fresh token; "reject" sends an ordinary manage-error carrying an optional human-readable reason.
  */

package/dist/domain/data-sync.d.cts

@@ -1,5 +1,5 @@
 import { D as DeviceId, E as DataRequestFrame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-DCDae3z4.cjs";
-import { KeyValueStorage } from "../ports/storage.cjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.cjs";
 import { t as IdentityPort } from "../identity-DVCNuFLG.cjs";
 //#region src/domain/data-sync.d.ts
 export interface DataSyncOptions {

package/dist/domain/data-sync.d.mts

@@ -1,5 +1,5 @@
 import { D as DeviceId, E as DataRequestFrame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-DCDae3z4.mjs";
-import { KeyValueStorage } from "../ports/storage.mjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.mjs";
 import { t as IdentityPort } from "../identity-DcaYgjXT.mjs";
 //#region src/domain/data-sync.d.ts
 export interface DataSyncOptions {

package/dist/domain/hub-mailbox.cjs

@@ -0,0 +1,81 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_domain_device_id = require("./device-id.cjs");
+const require_domain_data_sync = require("./data-sync.cjs");
+//#region src/domain/hub-mailbox.ts
+/** The data frames a mailbox answers. */
+function isDataFrame(frame) {
+	return frame.type === "data-have" || frame.type === "data-request" || frame.type === "data-entries";
+}
+const LOG_COUNT_KEY = "mailbox/log-count";
+function logBytesKey(peer) {
+	return `mailbox/${require_domain_device_id.deviceIdToHex(peer)}/bytes`;
+}
+function encodeCount(value) {
+	return new TextEncoder().encode(String(value));
+}
+async function readCount(storage, key) {
+	const raw = await storage.get(key);
+	return raw === void 0 ? 0 : Number(new TextDecoder().decode(raw));
+}
+function sameDevice(a, b) {
+	return require_domain_device_id.deviceIdToHex(a) === require_domain_device_id.deviceIdToHex(b);
+}
+function createMailbox(options) {
+	const { storage, limits } = options;
+	async function handleHave(sender, frame, refuse) {
+		if (!sameDevice(sender, frame.peer)) {
+			refuse("not-the-owner");
+			return null;
+		}
+		if (await require_domain_data_sync.headSeqFor(storage, frame.peer) === 0) {
+			if (await readCount(storage, LOG_COUNT_KEY) >= limits.maxLogs) {
+				refuse("log-limit");
+				return null;
+			}
+		}
+		return require_domain_data_sync.handleDataHave(storage, frame);
+	}
+	async function handleEntries(sender, frame, refuse) {
+		if (!sameDevice(sender, frame.peer)) {
+			refuse("not-the-owner");
+			return null;
+		}
+		if (frame.entries.some((entry) => entry.length > limits.maxEntryBytes)) {
+			refuse("size-limit");
+			return null;
+		}
+		const held = await readCount(storage, logBytesKey(frame.peer));
+		const added = frame.entries.reduce((sum, entry) => sum + entry.length, 0);
+		if (held + added > limits.maxLogBytes) {
+			refuse("entry-limit");
+			return null;
+		}
+		const isNewLog = await require_domain_data_sync.headSeqFor(storage, frame.peer) === 0;
+		if (isNewLog && await readCount(storage, LOG_COUNT_KEY) >= limits.maxLogs) {
+			refuse("log-limit");
+			return null;
+		}
+		if (!(await require_domain_data_sync.handleDataEntries(storage, frame)).ok) {
+			refuse("gap");
+			return null;
+		}
+		await storage.set(logBytesKey(frame.peer), encodeCount(held + added));
+		if (isNewLog && frame.entries.length > 0) await storage.set(LOG_COUNT_KEY, encodeCount(await readCount(storage, LOG_COUNT_KEY) + 1));
+		return null;
+	}
+	return { async handle(sender, frame, onRefused) {
+		const refuse = (reason) => {
+			onRefused?.(reason);
+		};
+		if (sender === void 0) {
+			refuse("unregistered-sender");
+			return null;
+		}
+		if (frame.type === "data-have") return handleHave(sender, frame, refuse);
+		if (frame.type === "data-entries") return handleEntries(sender, frame, refuse);
+		return require_domain_data_sync.handleDataRequest(storage, frame, limits.readBatch);
+	} };
+}
+//#endregion
+exports.createMailbox = createMailbox;
+exports.isDataFrame = isDataFrame;

package/dist/domain/hub-mailbox.d.cts

@@ -0,0 +1,29 @@
+import { D as DeviceId, E as DataRequestFrame, N as Frame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-DCDae3z4.cjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.cjs";
+//#region src/domain/hub-mailbox.d.ts
+export interface MailboxLimits {
+  /** How many devices' logs the mailbox will hold at once. */
+  readonly maxLogs: number;
+  /** How many bytes of entries one log may hold in total. */
+  readonly maxLogBytes: number;
+  /** How large one entry may be. */
+  readonly maxEntryBytes: number;
+  /** How many entries one reply carries at most; a longer log takes more rounds. */
+  readonly readBatch: number;
+}
+export interface MailboxOptions {
+  readonly storage: KeyValueStorage;
+  readonly limits: Readonly<MailboxLimits>;
+}
+/** Called for a data frame the mailbox refuses, so the host can report why; the sender is given no reply, since data-domain.cddl defines no error frame. */
+export type MailboxRefusalReason = "not-the-owner" | "unregistered-sender" | "log-limit" | "size-limit" | "entry-limit" | "gap";
+export interface Mailbox {
+  /**
+   * Handles one data frame from a connection. `sender` is the device the hub has verified that connection to be, or undefined when it has not gossiped one. Returns the frame to send back, or null for none. `onRefused` is told when the frame was refused and why.
+   */
+  handle: (sender: DeviceId | undefined, frame: Readonly<DataHaveFrame | DataRequestFrame | DataEntriesFrame>, onRefused?: (reason: MailboxRefusalReason) => void) => Promise<Frame | null>;
+}
+/** The data frames a mailbox answers. */
+export declare function isDataFrame(frame: Readonly<Frame>): frame is DataHaveFrame | DataRequestFrame | DataEntriesFrame;
+export declare function createMailbox(options: Readonly<MailboxOptions>): Mailbox;
+//#endregion

package/dist/domain/hub-mailbox.d.mts

@@ -0,0 +1,29 @@
+import { D as DeviceId, E as DataRequestFrame, N as Frame, T as DataHaveFrame, w as DataEntriesFrame } from "../protocol-DCDae3z4.mjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.mjs";
+//#region src/domain/hub-mailbox.d.ts
+export interface MailboxLimits {
+  /** How many devices' logs the mailbox will hold at once. */
+  readonly maxLogs: number;
+  /** How many bytes of entries one log may hold in total. */
+  readonly maxLogBytes: number;
+  /** How large one entry may be. */
+  readonly maxEntryBytes: number;
+  /** How many entries one reply carries at most; a longer log takes more rounds. */
+  readonly readBatch: number;
+}
+export interface MailboxOptions {
+  readonly storage: KeyValueStorage;
+  readonly limits: Readonly<MailboxLimits>;
+}
+/** Called for a data frame the mailbox refuses, so the host can report why; the sender is given no reply, since data-domain.cddl defines no error frame. */
+export type MailboxRefusalReason = "not-the-owner" | "unregistered-sender" | "log-limit" | "size-limit" | "entry-limit" | "gap";
+export interface Mailbox {
+  /**
+   * Handles one data frame from a connection. `sender` is the device the hub has verified that connection to be, or undefined when it has not gossiped one. Returns the frame to send back, or null for none. `onRefused` is told when the frame was refused and why.
+   */
+  handle: (sender: DeviceId | undefined, frame: Readonly<DataHaveFrame | DataRequestFrame | DataEntriesFrame>, onRefused?: (reason: MailboxRefusalReason) => void) => Promise<Frame | null>;
+}
+/** The data frames a mailbox answers. */
+export declare function isDataFrame(frame: Readonly<Frame>): frame is DataHaveFrame | DataRequestFrame | DataEntriesFrame;
+export declare function createMailbox(options: Readonly<MailboxOptions>): Mailbox;
+//#endregion

package/dist/domain/hub-mailbox.mjs

@@ -0,0 +1,79 @@
+import { deviceIdToHex } from "./device-id.mjs";
+import { handleDataEntries, handleDataHave, handleDataRequest, headSeqFor } from "./data-sync.mjs";
+//#region src/domain/hub-mailbox.ts
+/** The data frames a mailbox answers. */
+function isDataFrame(frame) {
+	return frame.type === "data-have" || frame.type === "data-request" || frame.type === "data-entries";
+}
+const LOG_COUNT_KEY = "mailbox/log-count";
+function logBytesKey(peer) {
+	return `mailbox/${deviceIdToHex(peer)}/bytes`;
+}
+function encodeCount(value) {
+	return new TextEncoder().encode(String(value));
+}
+async function readCount(storage, key) {
+	const raw = await storage.get(key);
+	return raw === void 0 ? 0 : Number(new TextDecoder().decode(raw));
+}
+function sameDevice(a, b) {
+	return deviceIdToHex(a) === deviceIdToHex(b);
+}
+function createMailbox(options) {
+	const { storage, limits } = options;
+	async function handleHave(sender, frame, refuse) {
+		if (!sameDevice(sender, frame.peer)) {
+			refuse("not-the-owner");
+			return null;
+		}
+		if (await headSeqFor(storage, frame.peer) === 0) {
+			if (await readCount(storage, LOG_COUNT_KEY) >= limits.maxLogs) {
+				refuse("log-limit");
+				return null;
+			}
+		}
+		return handleDataHave(storage, frame);
+	}
+	async function handleEntries(sender, frame, refuse) {
+		if (!sameDevice(sender, frame.peer)) {
+			refuse("not-the-owner");
+			return null;
+		}
+		if (frame.entries.some((entry) => entry.length > limits.maxEntryBytes)) {
+			refuse("size-limit");
+			return null;
+		}
+		const held = await readCount(storage, logBytesKey(frame.peer));
+		const added = frame.entries.reduce((sum, entry) => sum + entry.length, 0);
+		if (held + added > limits.maxLogBytes) {
+			refuse("entry-limit");
+			return null;
+		}
+		const isNewLog = await headSeqFor(storage, frame.peer) === 0;
+		if (isNewLog && await readCount(storage, LOG_COUNT_KEY) >= limits.maxLogs) {
+			refuse("log-limit");
+			return null;
+		}
+		if (!(await handleDataEntries(storage, frame)).ok) {
+			refuse("gap");
+			return null;
+		}
+		await storage.set(logBytesKey(frame.peer), encodeCount(held + added));
+		if (isNewLog && frame.entries.length > 0) await storage.set(LOG_COUNT_KEY, encodeCount(await readCount(storage, LOG_COUNT_KEY) + 1));
+		return null;
+	}
+	return { async handle(sender, frame, onRefused) {
+		const refuse = (reason) => {
+			onRefused?.(reason);
+		};
+		if (sender === void 0) {
+			refuse("unregistered-sender");
+			return null;
+		}
+		if (frame.type === "data-have") return handleHave(sender, frame, refuse);
+		if (frame.type === "data-entries") return handleEntries(sender, frame, refuse);
+		return handleDataRequest(storage, frame, limits.readBatch);
+	} };
+}
+//#endregion
+export { createMailbox, isDataFrame };

package/dist/domain/notice-board.d.cts

@@ -1,5 +1,5 @@
 import { D as DeviceId, Ot as RoomNotice, T as DataHaveFrame, kt as RoomNoticeClaims, p as CapabilityToken } from "../protocol-DCDae3z4.cjs";
-import { KeyValueStorage } from "../ports/storage.cjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.cjs";
 import { t as IdentityPort } from "../identity-DVCNuFLG.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
 import { a as RevocationCheck } from "../tokens-DqFu7iMX.cjs";

package/dist/domain/notice-board.d.mts

@@ -1,5 +1,5 @@
 import { D as DeviceId, Ot as RoomNotice, T as DataHaveFrame, kt as RoomNoticeClaims, p as CapabilityToken } from "../protocol-DCDae3z4.mjs";
-import { KeyValueStorage } from "../ports/storage.mjs";
+import { t as KeyValueStorage } from "../storage-B403CRyu.mjs";
 import { t as IdentityPort } from "../identity-DcaYgjXT.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
 import { a as RevocationCheck } from "../tokens-CBiSYuzp.mjs";

package/dist/domain/relay-hub.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_domain_peer_advert = require("./peer-advert.cjs");
 const require_domain_advert_extension_policy = require("./advert-extension-policy.cjs");
+const require_domain_hub_mailbox = require("./hub-mailbox.cjs");
 //#region src/domain/relay-hub.ts
 const HEX_RADIX = 16;
 const HEX_DIGITS_PER_BYTE = 2;
@@ -192,6 +193,19 @@ function createRelayHub(options) {
 			});
 			return;
 		}
+		if (options.mailbox !== void 0 && require_domain_hub_mailbox.isDataFrame(frame)) {
+			const sender = connectionDevice.get(connection);
+			const reply = await options.mailbox.handle(sender, frame, (reason) => {
+				options.onMailboxRefused?.({
+					device: sender,
+					reason
+				});
+			});
+			if (reply !== null) try {
+				await connection.send(reply);
+			} catch {}
+			return;
+		}
 		if (frame.type === "ping") {
 			try {
 				await connection.send({ type: "pong" });

package/dist/domain/relay-hub.d.cts

@@ -1,6 +1,7 @@
 import { D as DeviceId, N as Frame, et as PeerAdvert } from "../protocol-DCDae3z4.cjs";
 import { t as Connection } from "../transport-CfW7fsGK.cjs";
 import { AdvertExtensionPolicy } from "./advert-extension-policy.cjs";
+import { Mailbox, MailboxRefusalReason } from "./hub-mailbox.cjs";
 import { PeerAdvertVerifier } from "./peer-advert.cjs";
 //#region src/domain/relay-hub.d.ts
 /**
@@ -36,6 +37,15 @@ export interface RelayHubOptions {
   readonly extensionPolicy?: AdvertExtensionPolicy;
   /** Called with each advert refused by extensionPolicy, so the host can report it; the advert's sender is given no reply, since the transport spec defines none. */
   readonly onAdvertRefused?: (refusal: Readonly<AdvertRefusal>) => void;
+  /**
+   * The announcer role: a mailbox that holds other devices' `core/data` logs while they are offline (hub-mailbox.ts). Absent, data frames sent to this hub are ignored, as they always were.
+   */
+  readonly mailbox?: Mailbox;
+  /** Called with each data frame the mailbox refused and why, so the host can report it; the sender is given no reply. */
+  readonly onMailboxRefused?: (refusal: Readonly<{
+    device: DeviceId | undefined;
+    reason: MailboxRefusalReason;
+  }>) => void;
   /** Called whenever the value exportConnection returns for a connection changes: it gossiped an advert, gained or lost a pairing, or had one of its adverts taken over by another connection. A host whose own instance can be torn down while its connections stay open (the Cloudflare hub's hibernating Durable Object) reads the new value back with exportConnection, persists it against the connection, and hands it to a later instance through restoreConnections. */
   readonly onConnectionStateChanged?: (connection: Readonly<Connection>) => void;
 }

package/dist/domain/relay-hub.d.mts

@@ -1,6 +1,7 @@
 import { D as DeviceId, N as Frame, et as PeerAdvert } from "../protocol-DCDae3z4.mjs";
 import { t as Connection } from "../transport-iLBxIkRS.mjs";
 import { AdvertExtensionPolicy } from "./advert-extension-policy.mjs";
+import { Mailbox, MailboxRefusalReason } from "./hub-mailbox.mjs";
 import { PeerAdvertVerifier } from "./peer-advert.mjs";
 //#region src/domain/relay-hub.d.ts
 /**
@@ -36,6 +37,15 @@ export interface RelayHubOptions {
   readonly extensionPolicy?: AdvertExtensionPolicy;
   /** Called with each advert refused by extensionPolicy, so the host can report it; the advert's sender is given no reply, since the transport spec defines none. */
   readonly onAdvertRefused?: (refusal: Readonly<AdvertRefusal>) => void;
+  /**
+   * The announcer role: a mailbox that holds other devices' `core/data` logs while they are offline (hub-mailbox.ts). Absent, data frames sent to this hub are ignored, as they always were.
+   */
+  readonly mailbox?: Mailbox;
+  /** Called with each data frame the mailbox refused and why, so the host can report it; the sender is given no reply. */
+  readonly onMailboxRefused?: (refusal: Readonly<{
+    device: DeviceId | undefined;
+    reason: MailboxRefusalReason;
+  }>) => void;
   /** Called whenever the value exportConnection returns for a connection changes: it gossiped an advert, gained or lost a pairing, or had one of its adverts taken over by another connection. A host whose own instance can be torn down while its connections stay open (the Cloudflare hub's hibernating Durable Object) reads the new value back with exportConnection, persists it against the connection, and hands it to a later instance through restoreConnections. */
   readonly onConnectionStateChanged?: (connection: Readonly<Connection>) => void;
 }

package/dist/domain/relay-hub.mjs

@@ -1,5 +1,6 @@
 import { verifyPeerAdvert } from "./peer-advert.mjs";
 import { checkAdvertExtensions } from "./advert-extension-policy.mjs";
+import { isDataFrame } from "./hub-mailbox.mjs";
 //#region src/domain/relay-hub.ts
 const HEX_RADIX = 16;
 const HEX_DIGITS_PER_BYTE = 2;
@@ -191,6 +192,19 @@ function createRelayHub(options) {
 			});
 			return;
 		}
+		if (options.mailbox !== void 0 && isDataFrame(frame)) {
+			const sender = connectionDevice.get(connection);
+			const reply = await options.mailbox.handle(sender, frame, (reason) => {
+				options.onMailboxRefused?.({
+					device: sender,
+					reason
+				});
+			});
+			if (reply !== null) try {
+				await connection.send(reply);
+			} catch {}
+			return;
+		}
 		if (frame.type === "ping") {
 			try {
 				await connection.send({ type: "pong" });

package/dist/ports/storage.d.cts

@@ -1,9 +1,2 @@
-//#region src/ports/storage.d.ts
-export interface KeyValueStorage {
-  get: (key: string) => Promise<Uint8Array<ArrayBuffer> | undefined>;
-  set: (key: string, value: Uint8Array<ArrayBuffer>) => Promise<void>;
-  delete: (key: string) => Promise<void>;
-  /** Keys with the given prefix, in no particular order. */
-  keys: (prefix: string) => Promise<string[]>;
-}
-//#endregion
+import { t as KeyValueStorage } from "../storage-B403CRyu.cjs";
+export { KeyValueStorage };

package/dist/ports/storage.d.mts

@@ -1,9 +1,2 @@
-//#region src/ports/storage.d.ts
-export interface KeyValueStorage {
-  get: (key: string) => Promise<Uint8Array<ArrayBuffer> | undefined>;
-  set: (key: string, value: Uint8Array<ArrayBuffer>) => Promise<void>;
-  delete: (key: string) => Promise<void>;
-  /** Keys with the given prefix, in no particular order. */
-  keys: (prefix: string) => Promise<string[]>;
-}
-//#endregion
+import { t as KeyValueStorage } from "../storage-B403CRyu.mjs";
+export { KeyValueStorage };

package/dist/storage-B403CRyu.d.cts

@@ -0,0 +1,10 @@
+//#region src/ports/storage.d.ts
+interface KeyValueStorage {
+  get: (key: string) => Promise<Uint8Array<ArrayBuffer> | undefined>;
+  set: (key: string, value: Uint8Array<ArrayBuffer>) => Promise<void>;
+  delete: (key: string) => Promise<void>;
+  /** Keys with the given prefix, in no particular order. */
+  keys: (prefix: string) => Promise<string[]>;
+}
+//#endregion
+export { KeyValueStorage as t };

package/dist/storage-B403CRyu.d.mts

@@ -0,0 +1,10 @@
+//#region src/ports/storage.d.ts
+interface KeyValueStorage {
+  get: (key: string) => Promise<Uint8Array<ArrayBuffer> | undefined>;
+  set: (key: string, value: Uint8Array<ArrayBuffer>) => Promise<void>;
+  delete: (key: string) => Promise<void>;
+  /** Keys with the given prefix, in no particular order. */
+  keys: (prefix: string) => Promise<string[]>;
+}
+//#endregion
+export { KeyValueStorage as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wire-mesh-core",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "dependencies": {
     "cbor2": "2.3.0",
     "cddl.js": "1.0.1",
@@ -118,6 +118,10 @@
       "import": "./dist/domain/handshake.mjs",
       "require": "./dist/domain/handshake.cjs"
     },
+    "./domain/hub-mailbox": {
+      "import": "./dist/domain/hub-mailbox.mjs",
+      "require": "./dist/domain/hub-mailbox.cjs"
+    },
     "./domain/mesh-session": {
       "import": "./dist/domain/mesh-session.mjs",
       "require": "./dist/domain/mesh-session.cjs"