wireweave 0.3.20 → 0.3.22

package/README.md

@@ -27,10 +27,26 @@ ww.auth.loadFromStorage() || ww.auth.generateKey();
 ww.servers.init();
 ```
 
-`ww` exposes: `pool`, `auth`, `fsm`, `message`, `bans`, `roles`, `settings`, `pages`, `media`, `channels`, `servers`, `chat`, `voice` (lazy via `ensureVoice()`), `setCurrentChannel()`.
+`ww` exposes: `pool`, `auth`, `fsm`, `message`, `bans`, `roles`, `settings`, `pages`, `media`, `channels`, `servers`, `chat`, `voice` (lazy via `ensureVoice()`), `dm` (lazy via `ensureDM()`), `setCurrentChannel()`, `currentChannelId`, `currentServerId`.
 
 every submodule is an `EventTarget`. subscribe with `addEventListener('event', ...)`.
 
+`message` is a standalone in-memory `MessageBus` (bounded ring + typed handler dispatch). It is provided for apps that want a local message store; no other wireweave module depends on it, so ignore it if you don't need it.
+
+### node / non-browser environments
+
+`createWireweave` and `NostrAuth`/`Servers` need a `storage` adapter outside the browser — pass `{ getItem, setItem, removeItem }`. Without it `createWireweave` throws `wireweave: storage required` up front (in the browser it defaults to `localStorage`). On-relay `d`-tags use a frozen `zellous-` prefix and storage keys use `zn_*`; these are published wire/storage contracts kept stable across the rename to wireweave — do not change them without a migration path.
+
+## direct messages (encrypted)
+
+```js
+const dm = ww.ensureDM();              // lazy: needs nostr-tools built with nip44
+dm.subscribe(({ peer, plaintext }) => console.log(peer, plaintext));
+await dm.send(peerPubkey, 'hello');
+```
+
+**Caveat:** nip44 encryption derives a conversation key from your **private key**, so DM requires a privkey-backed signer (`generateKey`/`importKey`). It does **not** work with extension signing (NIP-07), which never exposes the privkey — `dm.send` throws `DM: privkey required` in that case.
+
 ## modules
 
 ```js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wireweave",
-  "version": "0.3.20",
+  "version": "0.3.22",
   "description": "nostr + webrtc voice + data SDK. networking layer for 247420 projects.",
   "type": "module",
   "main": "./src/index.js",

package/src/bans.js

@@ -6,10 +6,11 @@ export class Bans extends EventTarget {
     if (!relayPool) throw new Error('Bans: relayPool required');
     this.pool = relayPool; this.auth = auth; this.roles = roles;
     this.store = new Map();
-    this.sub = null;
+    this.subs = new Map();
   }
 
   isBanned(serverId, pubkey) { return !!(this.store.get(serverId)?.banned || []).includes(pubkey); }
+  isKicked(serverId, pubkey) { return !!(this.store.get(serverId)?.kicked || []).includes(pubkey); }
 
   isTimedOut(serverId, pubkey) {
     const t = this.store.get(serverId)?.timeouts?.[pubkey];
@@ -51,12 +52,13 @@ export class Bans extends EventTarget {
   }
 
   subscribe(serverId) {
-    if (this.sub) { this.pool.unsubscribe(this.sub); this.sub = null; }
+    if (this.subs.has(serverId)) return;
     if (!serverId) return;
     const creator = serverId.split(':')[0];
     if (!creator) return;
-    this.sub = 'bans-' + serverId;
-    this.pool.subscribe(this.sub,
+    const subId = 'bans-' + serverId;
+    this.subs.set(serverId, subId);
+    this.pool.subscribe(subId,
       [{ kinds: [30078], authors: [creator], '#server': [serverId] }],
       (event) => {
         if (event.pubkey !== creator) return;
@@ -64,13 +66,16 @@ export class Bans extends EventTarget {
           const dTag = event.tags.find(t => t[0] === 'd');
           if (!dTag?.[1]) return;
           const parsed = parseDtag(dTag[1]);
-          if (!parsed || (parsed.ns !== 'ban' && parsed.ns !== 'timeout')) return;
+          if (!parsed || !['ban', 'timeout', 'kick'].includes(parsed.ns)) return;
           const pubkey = parsed.parts[parsed.parts.length - 1];
-          const data = this.store.get(serverId) || { banned: [], timeouts: {} };
+          const data = this.store.get(serverId) || { banned: [], timeouts: {}, kicked: [] };
           if (parsed.ns === 'ban' && pubkey && !data.banned.includes(pubkey)) data.banned.push(pubkey);
-          else if (parsed.ns === 'timeout' && pubkey) {
-            const parsed = JSON.parse(event.content);
-            if (parsed.expiry > Math.floor(Date.now() / 1000)) (data.timeouts = data.timeouts || {})[pubkey] = { expiry: parsed.expiry };
+          else if (parsed.ns === 'kick' && pubkey) {
+            data.kicked = data.kicked || [];
+            if (!data.kicked.includes(pubkey)) data.kicked.push(pubkey);
+          } else if (parsed.ns === 'timeout' && pubkey) {
+            const body = JSON.parse(event.content);
+            if (body.expiry > Math.floor(Date.now() / 1000)) (data.timeouts = data.timeouts || {})[pubkey] = { expiry: body.expiry };
             else if (data.timeouts?.[pubkey]) delete data.timeouts[pubkey];
           }
           this.store.set(serverId, data);
@@ -78,6 +83,11 @@ export class Bans extends EventTarget {
         } catch {}
       });
   }
+
+  unsubscribe(serverId) {
+    const subId = this.subs.get(serverId);
+    if (subId) { this.pool.unsubscribe(subId); this.subs.delete(serverId); }
+  }
 }
 
 export const createBans = (opts) => new Bans(opts);

package/src/channels.js

@@ -19,9 +19,10 @@ export class Channels extends EventTarget {
     this.serverId = ''; this.channels = []; this.categories = [];
   }
 
-  isOwner() { return this.auth.pubkey && this.serverId && this.auth.pubkey === this.serverId.split(':')[0]; }
+  isOwner() { return !!(this.auth.pubkey && this.serverId && this.auth.pubkey === this.serverId.split(':')[0]); }
 
   load(serverId, onReady) {
+    if (this.serverId) this.pool.unsubscribe('channels-' + this.serverId);
     this.serverId = serverId;
     this.channels = []; this.categories = [];
     const ownerPubkey = serverId.split(':')[0];
@@ -62,43 +63,60 @@ export class Channels extends EventTarget {
   }
 
   async create(name, type = 'text', categoryId = 'general') {
-    this.channels = [...this.channels, { id: 'ch-' + Date.now(), name, type, categoryId, position: this.channels.length }];
+    if (!this.isOwner()) throw new Error('owner only');
+    this.channels = [...this.channels, { id: 'ch-' + Date.now().toString(36) + Math.random().toString(36).slice(2, 6), name, type, categoryId, position: this.channels.length }];
     await this._publish();
     this._emit('updated', { channels: this.channels, categories: this.categories });
   }
 
   async rename(id, name) {
+    if (!this.isOwner()) throw new Error('owner only');
     this.channels = this.channels.map(c => c.id === id ? { ...c, name } : c);
     await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
   }
 
+  // Per-channel metadata patch — used for topic, voiceMode, and any future
+  // server-published channel-scoped configuration. Owner-only.
+  async update(id, patch) {
+    if (!this.isOwner()) throw new Error('owner only');
+    if (!patch || typeof patch !== 'object') return;
+    this.channels = this.channels.map(c => c.id === id ? { ...c, ...patch } : c);
+    await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
+  }
+
   async remove(id) {
+    if (!this.isOwner()) throw new Error('owner only');
     this.channels = this.channels.filter(c => c.id !== id);
     await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
   }
 
   async createCategory(name) {
-    this.categories = [...this.categories, { id: 'cat-' + Date.now(), name, position: this.categories.length }];
+    if (!this.isOwner()) throw new Error('owner only');
+    this.categories = [...this.categories, { id: 'cat-' + Date.now().toString(36) + Math.random().toString(36).slice(2, 6), name, position: this.categories.length }];
     await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
   }
 
   async renameCategory(id, name) {
+    if (!this.isOwner()) throw new Error('owner only');
     this.categories = this.categories.map(c => c.id === id ? { ...c, name } : c);
     await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
   }
 
   async deleteCategory(id) {
+    if (!this.isOwner()) throw new Error('owner only');
     this.categories = this.categories.filter(c => c.id !== id);
     this.channels = this.channels.map(c => c.categoryId === id ? { ...c, categoryId: null } : c);
     await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
   }
 
   async reorder(catId, ids) {
+    if (!this.isOwner()) throw new Error('owner only');
     ids.forEach((chId, idx) => { this.channels = this.channels.map(c => c.id === chId ? { ...c, position: idx, categoryId: catId } : c); });
     await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
   }
 
   async reorderCategories(ids) {
+    if (!this.isOwner()) throw new Error('owner only');
     ids.forEach((catId, idx) => { this.categories = this.categories.map(c => c.id === catId ? { ...c, position: idx } : c); });
     await this._publish(); this._emit('updated', { channels: this.channels, categories: this.categories });
   }

package/src/chat.js

@@ -52,6 +52,11 @@ export class Chat extends EventTarget {
   }
 
   async deleteMessage(id) {
+    const msg = this.messages.find(m => m.id === id);
+    if (!msg) return;
+    const { serverId } = this.getChannelContext();
+    const isAuthor = msg.userId === this.auth.pubkey;
+    if (!isAuthor && !this.isAdmin(serverId)) throw new Error('Cannot delete: not author or admin');
     const signed = await this.auth.sign({ kind: 5, created_at: Math.floor(Date.now() / 1000), tags: [['e', id]], content: 'deleted' });
     this.pool.publish(signed);
     this.messages = this.messages.filter(m => m.id !== id);

package/src/data.js

@@ -34,7 +34,8 @@ export class DataSession extends EventTarget {
   }
 
   _initActor() {
-    const machine = this.fsm.dataMachine || this.fsm.voiceMachine;
+    const machine = this.fsm.dataMachine;
+    if (!machine) throw new Error('DataSession: fsm.dataMachine missing');
     this.actor = this.xstate.createActor(machine);
     this.actor.subscribe((snap) => this.dispatchEvent(new CustomEvent('state', { detail: { value: snap.value } })));
     this.actor.start();
@@ -72,6 +73,7 @@ export class DataSession extends EventTarget {
     this._stopHeartbeat();
     for (const pk of Array.from(this.peers.keys())) this._closePeer(pk);
     this.peers.clear();
+    for (const pk of Object.keys(this.retrySchedule)) this._cancelReconnect(pk);
     if (this.roomId) {
       this.pool.unsubscribe('data-presence-' + this.roomId);
       this.pool.unsubscribe('data-signals-' + this.roomId);

package/src/dtag.js

@@ -1,13 +1,19 @@
 const NAMESPACES = new Set(['ban', 'timeout', 'kick', 'page', 'channels', 'roles', 'settings']);
 
+// Frozen on-relay wire prefix. The brand is now wireweave but deployed events
+// carry 'zellous-' d-tags, so this is a published-contract constant — do not
+// rename it without a migration path. parseDtag derives its slice offset from
+// PREFIX.length so the literal and the offset can never drift apart.
+const PREFIX = 'zellous-';
+
 export const dtag = (ns, ...parts) => {
   if (!NAMESPACES.has(ns)) throw new Error('dtag: unknown namespace ' + ns);
-  return ['zellous-' + ns, ...parts].join(':');
+  return [PREFIX + ns, ...parts].join(':');
 };
 
 export const parseDtag = (s) => {
-  if (typeof s !== 'string' || !s.startsWith('zellous-')) return null;
-  const parts = s.slice(8).split(':');
+  if (typeof s !== 'string' || !s.startsWith(PREFIX)) return null;
+  const parts = s.slice(PREFIX.length).split(':');
   const ns = parts.shift();
   if (!NAMESPACES.has(ns)) return null;
   return { ns, parts };

package/src/message.js

@@ -10,7 +10,7 @@ export class MessageBus extends EventTarget {
   register(type, fn) { this.handlers[type] = fn; }
 
   add(text, { audioData = null, userId = null, username = null } = {}) {
-    const msg = { id: Date.now() + Math.random(), text, time: Date.now(), userId, username, audioData };
+    const msg = { id: Date.now().toString(36) + Math.random().toString(36).slice(2), text, time: Date.now(), userId, username, audioData };
     this.messages = [...this.messages, msg];
     if (this.messages.length > this.max) this.messages = this.messages.slice(-this.max);
     this.dispatchEvent(new CustomEvent('message', { detail: msg }));

package/src/roles.js

@@ -6,7 +6,7 @@ export class Roles extends EventTarget {
     if (!relayPool || !auth) throw new Error('Roles: deps required');
     this.pool = relayPool; this.auth = auth;
     this.store = new Map();
-    this.sub = null;
+    this.subs = new Map();
   }
 
   _creatorOf(serverId) { return serverId ? serverId.split(':')[0] : null; }
@@ -39,12 +39,13 @@ export class Roles extends EventTarget {
   }
 
   subscribe(serverId) {
-    if (this.sub) { this.pool.unsubscribe(this.sub); this.sub = null; }
+    if (this.subs.has(serverId)) return;
     if (!serverId) return;
     const creator = this._creatorOf(serverId);
     if (!creator) return;
-    this.sub = 'roles-' + serverId;
-    this.pool.subscribe(this.sub,
+    const subId = 'roles-' + serverId;
+    this.subs.set(serverId, subId);
+    this.pool.subscribe(subId,
       [{ kinds: [30078], authors: [creator], '#d': [dtag('roles', serverId)] }],
       (event) => {
         if (event.pubkey !== creator) return;
@@ -55,6 +56,11 @@ export class Roles extends EventTarget {
         } catch {}
       });
   }
+
+  unsubscribe(serverId) {
+    const subId = this.subs.get(serverId);
+    if (subId) { this.pool.unsubscribe(subId); this.subs.delete(serverId); }
+  }
 }
 
 export const createRoles = (opts) => new Roles(opts);

package/src/settings.js

@@ -9,7 +9,7 @@ export class Settings extends EventTarget {
     if (!relayPool || !auth || !roles) throw new Error('Settings: deps required');
     this.pool = relayPool; this.auth = auth; this.roles = roles;
     this.store = new Map();
-    this.sub = null;
+    this.subs = new Map();
   }
 
   getBitrate(serverId) { return this.store.get(serverId)?.opusBitrate || 24000; }
@@ -57,18 +57,24 @@ export class Settings extends EventTarget {
   }
 
   subscribe(serverId) {
-    if (this.sub) { this.pool.unsubscribe(this.sub); this.sub = null; }
+    if (this.subs.has(serverId)) return;
     if (!serverId) return;
     const creator = serverId.split(':')[0];
     if (!creator) return;
-    this.sub = 'settings-' + serverId;
-    this.pool.subscribe(this.sub,
+    const subId = 'settings-' + serverId;
+    this.subs.set(serverId, subId);
+    this.pool.subscribe(subId,
       [{ kinds: [30078], authors: [creator], '#d': [dtag('settings', serverId)] }],
       (event) => {
         if (event.pubkey !== creator) return;
         try { this.store.set(serverId, JSON.parse(event.content)); this.dispatchEvent(new CustomEvent('updated', { detail: { serverId, next: this.store.get(serverId) } })); } catch {}
       });
   }
+
+  unsubscribe(serverId) {
+    const subId = this.subs.get(serverId);
+    if (subId) { this.pool.unsubscribe(subId); this.subs.delete(serverId); }
+  }
 }
 
 export const createSettings = (opts) => new Settings(opts);

package/src/voice.js

@@ -103,6 +103,7 @@ export class VoiceSession extends EventTarget {
     this._sfuStop();
     for (const pk of Array.from(this.peers.keys())) this._closePeer(pk);
     this.peers.clear();
+    for (const pk of Object.keys(this.retrySchedule)) this._cancelReconnect(pk);
     if (this._activityTimer) { clearInterval(this._activityTimer); this._activityTimer = null; }
     if (this._activeAnalyzers) { for (const k of Array.from(this._activeAnalyzers.keys())) this._detachAnalyzer(k); }
     if (this._outboundRec) { try { this._outboundRec.rec.stop(); } catch {} this._outboundRec = null; }

package/src/wireweave.js

@@ -11,6 +11,7 @@ import { createRoles } from './roles.js';
 import { createSettings } from './settings.js';
 import { createMedia } from './media.js';
 import { createPages } from './pages.js';
+import { createDM } from './dm.js';
 import { register } from './debug.js';
 
 export const createWireweave = ({
@@ -76,10 +77,21 @@ export const createWireweave = ({
 
   const setCurrentChannel = (id) => { currentChannelId = id; if (id) chat.loadHistory(id); };
 
+  // DM is lazy: nip44 encryption requires a privkey-backed signer (not extension)
+  // and nostr-tools built with nip44. Constructing it eagerly would throw for
+  // builds without nip44, so we defer to first use — mirrors ensureVoice.
+  let dm = null;
+  const ensureDM = () => {
+    if (!dm) dm = createDM({ relayPool: pool, auth, nostrTools });
+    return dm;
+  };
+
   const api = {
     pool, auth, fsm, message, bans, roles, settings, pages, media, channels, servers, chat,
     get voice() { return voice; },
     ensureVoice,
+    get dm() { return dm; },
+    ensureDM,
     setCurrentChannel,
     get currentChannelId() { return currentChannelId; },
     get currentServerId() { return servers.currentServerId; }