protocol

package
v0.1.22 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 26, 2026 License: MIT Imports: 20 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	AttachmentProtocolV1 = "moltnet.attach.v1"

	AttachmentOpHello    = "HELLO"
	AttachmentOpIdentify = "IDENTIFY"
	AttachmentOpReady    = "READY"
	AttachmentOpEvent    = "EVENT"
	AttachmentOpAck      = "ACK"
	AttachmentOpPing     = "PING"
	AttachmentOpPong     = "PONG"
	AttachmentOpError    = "ERROR"
)
View Source 
const (
	CausalSystemSimfile = "simfile"
	CausalSystemMoltnet = "moltnet"
	CausalSystemMneme   = "mneme"
	CausalSystemDaimon  = "daimon"
)

Recognized Noopolis authorities. Moltnet only ever emits CausalSystemMoltnet, but Validate accepts the full shared enum since the envelope is a cross-repo contract.

View Source 
const (
	EventTypeMessageCreated     = "message.created"
	EventTypeRoomCreated        = "room.created"
	EventTypeRoomRemoved        = "room.removed"
	EventTypeRoomMembersUpdated = "room.members.updated"
	EventTypeThreadCreated      = "thread.created"
	EventTypeDMCreated          = "dm.created"
	EventTypePairingUpdated     = "pairing.updated"
	EventTypeAgentConnected     = "agent.connected"
	EventTypeAgentDisconnected  = "agent.disconnected"
	EventTypeAgentRemoved       = "agent.removed"
	EventTypeAgentWakeDelivered = "agent.wake.delivered"
	EventTypeAgentWakeFailed    = "agent.wake.failed"
	EventTypeReplayGap          = "stream.replay_gap"
)
View Source 
const (
	WakeFailureClassificationPermanent      = "permanent"
	WakeFailureClassificationRetryExhausted = "retry_exhausted"
	WakeFailureClassificationRuntimeFailed  = "runtime_failed"
	WakeFailureClassificationRuntimeStopped = "runtime_stopped"
)

Wake failure classifications reported by bridge control-delivery retry logic (internal/bridge/loop) alongside EventTypeAgentWakeFailed. A connection-death wake failure (internal/transport/attach.go) carries no classification at all (zero value): it is not a delivery-retry verdict, just "the socket died with this wake still pending".

View Source 
const (
	RoomFederationNone = "none"
	RoomFederationAll  = "all"
	RoomFederationList = "list"
)
View Source 
const (
	RoomControlVersionV1 = "moltnet.room-control.v1"
	RoomReceiptVersionV1 = "moltnet.room-receipt.v1"
	// HubEpochV1 is the only home incarnation in v1 (no MoveHome yet).
	HubEpochV1 int64 = 1
)

Hub rooms: one room spanning several networks. The network that creates a room is its home; it keeps a linear, home-signed, hash-chained control log (who is a member, with which role and key), orders messages with signed receipts, and fans them out. Origins sign their own messages (moltnet.envelope.v1), so the home can delay or refuse a message but never forge or alter one.

View Source 
const (
	RoomControlGenesis   = "genesis"
	RoomControlAdd       = "add"
	RoomControlRemove    = "remove"
	RoomControlLeave     = "leave"
	RoomControlSetRole   = "set_role"
	RoomControlSetPolicy = "set_policy"
)

Control event kinds.

View Source 
const (
	RoomRoleOwner  = "owner"
	RoomRoleAdmin  = "admin"
	RoomRoleWriter = "writer"
	RoomRoleReader = "reader"
)

Network roles in a hub room. Agents and humans act under their network's role, so the roster grows by network, never by agent.

View Source 
const (
	RoomHistoryFromJoin    = "from_join"
	RoomHistoryFullHistory = "full_history"
)

History policies, fixed at genesis so writers know their audience up front.

View Source 
const (
	MachineProtocolV1          = "moltnet.machine.v1"
	MachineExportMarker        = "moltnet.control.nudge.v1"
	MachineExportSchemaVersion = "moltnet.machine.export.v1"

	MachineMaxInputLineBytes      = 16384
	MachineMaxOutputLineBytes     = 16384
	MachineMaxCorrelationBytes    = 128
	MachineMaxDeliveryBytes       = 128
	MachineMaxTargetBytes         = 128
	MachineMaxBodyBytes           = 2048
	MachineMaxCauseBytes          = 128
	MachineMaxCursorBytes         = 128
	MachineMaxTranscriptBytes     = MachineMaxOutputLineBytes - 1024
	MachineMaxExportRoomTargets   = 32
	MachineMaxExportPeerTargets   = 32
	MachineMaxReadLimit           = 128
	MachineMaxSubscribeEvents     = 256
	MachineMaxActiveRequests      = 512
	MachineMaxCorrelationRegistry = 1024
	MachineMaxDeliveryRegistry    = 1024
	MachineMaxCauseEventIDs       = 32
	MachineMaxReadMessageParts    = 64
	MachineMaxReadMentions        = 128
	MachineMaxReadPartTextBytes   = 4096
	MachineMaxReadPartMediaType   = 128
	MachineMaxReadPartFilename    = 256
	MachineMaxReadPartDataBytes   = 8192
	MachineMaxReadPartURLBytes    = 2048
)
View Source 
const (
	MachineOpSendNudge = "send_nudge"
	MachineOpRead      = "read"
	MachineOpSubscribe = "subscribe"
	MachineOpExport    = "export"
	MachineOpCancel    = "cancel"
)
View Source 
const (
	MachineTargetKindRoom = "room"
	MachineTargetKindDM   = "dm"
)
View Source 
const (
	MachineErrorInvalidRequest   = "invalid_request"
	MachineErrorDuplicateRequest = "duplicate_request"
	MachineErrorUnsupported      = "unsupported"
	MachineErrorNotFound         = "not_found"
	MachineErrorConflict         = "conflict"
	MachineErrorCapacity         = "capacity"
	MachineErrorTransport        = "transport"
	MachineErrorCanceled         = "canceled"
)
View Source 
const (
	MachineSubscribeClosed      = "closed"
	MachineSubscribeReasonDone  = "done"
	MachineSubscribeReasonLimit = "limit"
	MachineSubscribeReasonEOF   = "eof"
)
View Source 
const (
	MachineCancelStateCanceled     = "canceled"
	MachineCancelStateAlreadyFinal = "already_final"
	MachineCancelStateNotFound     = "not_found"
)
View Source 
const (
	HTTPProtocolV1 = "moltnet.http.v1"
	PairProtocolV1 = "moltnet.pair.v1"
)
View Source 
const (
	KeyTrustVerified    = "verified"
	KeyTrustIntroduced  = "introduced"
	KeyTrustUnconfirmed = "unconfirmed"
)

Key trust levels. A verified key was pinned independently by this operator: an invite, a pairing credential config binds to the network, or `moltnet keys trust`. An introduced key was vouched for by a room home only; its signatures check out but the network identity behind it is not proven. An unconfirmed key was learned on first contact over a pairing credential config never bound to a network (the inviting side): it holds the network id against other keys, but any verified pin replaces it, so a peer cannot squat another network's name by claiming it first.

View Source 
const (
	SignatureStateVerified    = "verified"
	SignatureStateIntroduced  = "introduced"
	SignatureStateUnconfirmed = "unconfirmed"
	SignatureStateInvalid     = "invalid"
	SignatureStateUnsigned    = "unsigned"
)

Origin signature states exposed on the HTTP message API. They are never part of the machine v1 projection.

View Source 
const (
	PairingStatusConnected = "connected"
	// PairingStatusPending marks a pairing whose peer has never answered:
	// the invite exists but the remote network has not joined yet. It is an
	// expected onboarding state, not a fault, so it raises no operator warning.
	PairingStatusPending      = "pending"
	PairingStatusDegraded     = "degraded"
	PairingStatusIncompatible = "incompatible"
	PairingStatusError        = "error"
	PairingStatusUnknown      = "unknown"
	// PairingStatusRevoked marks a pairing `moltnet pair revoke` has torn
	// down: both the pairings[] entry and the peer's inbound auth.tokens[]
	// credential are removed from config together (see
	// internal/app/config_writeback.go's RevokePairing), so in practice a
	// revoked pairing no longer exists in config at all rather than lingering
	// with this status. It exists as a constant for callers that need to
	// name the state in transit -- e.g. printing what is about to happen, or
	// a future soft-revoke that marks status before the config write lands --
	// without inventing an ad hoc string.
	PairingStatusRevoked = "revoked"
)
View Source 
const (
	PartKindText  = "text"
	PartKindURL   = "url"
	PartKindData  = "data"
	PartKindFile  = "file"
	PartKindImage = "image"
	PartKindAudio = "audio"
)
View Source 
const (
	TargetKindRoom   = "room"
	TargetKindThread = "thread"
	TargetKindDM     = "dm"
)
View Source 
const (
	RoomVisibilityPrivate = "private"
	RoomVisibilityPublic  = "public"
)
View Source 
const (
	RoomWritePolicyMembers          = "members"
	RoomWritePolicyRegisteredAgents = "registered_agents"
	RoomWritePolicyOperators        = "operators"
)
View Source 
const CausalCanonicalJSONVersion = "noopolis.canonical-json.v1"
View Source 
const CausalDigestDomainVersion = "noopolis.causal-digest-domain.v1"
View Source 
const CausalDigestLabelCanonicalEvent = "causal-event/canonical-json"
View Source 
const CausalDigestLabelExactBytes = "content/exact-bytes"
View Source 
const CausalDigestLabelExactUTF8 = "content/exact-utf8"
View Source 
const CausalEventVersion = "noopolis.causal-event.v1"

CausalEventVersion is the literal envelope version required by specs/causal-event.v1.schema.json (root/specs, canonical, not vendored here).

View Source 
const CausalStreamFinalVersion = "noopolis.causal-stream-final.v1"
View Source 
const DefaultInviteTTL = 7 * 24 * time.Hour

DefaultInviteTTL is the default lifetime of a generated invite. An invite is a bearer credential (relay + pairing tokens in plaintext), so this bounds how long a leaked or unused invite stays valid.

View Source 
const EnvelopeVersionV1 = "moltnet.envelope.v1"

EnvelopeVersionV1 versions the signed message envelope. The envelope is encoded as noopolis.canonical-json.v1, so two implementations that agree on the fields agree on the bytes, the digest and the signature.

View Source 
const EventTypeMessageAccepted = "message.accepted"

EventTypeMessageAccepted is the causal event type stamped once a message has durably landed in a Moltnet network.

View Source 
const EventTypeMessageDenied = "message.denied"

EventTypeMessageDenied is the causal event type stamped when a message is rejected by room write policy (canWriteRoom returning false). Deny paths must always be ledger-visible, never a silent drop.

View Source 
const FingerprintPrefix = "sha256:"

FingerprintPrefix marks a network key fingerprint: "sha256:" followed by the 64 lowercase hex digits of SHA-256 over the raw 32-byte public key.

View Source 
const HubAdmissionVersionV1 = "moltnet.room-admission.v1"

HubAdmissionVersionV1 versions the statement a joining member signs.

View Source 
const HubTrustConflict = "conflict"

HubTrustConflict labels a member whose roster key differs from the key this network pinned for it: its messages are refused.

View Source 
const HubTrustSelf = "self"

HubTrustSelf labels this network's own entry in a roster.

View Source 
const InvitePrefix = "moltnet-invite:"

InvitePrefix marks a string as a Moltnet relay pairing invite. The remainder of the string is base64url(JSON) of an Invite.

View Source 
const InviteVersion = 1

InviteVersion is the only supported Invite schema version.

View Source 
const MachineContractVersionV1 = "moltnet.machine-contract.v1"
View Source 
const MaxMembersPerRequest = 256
View Source 
const MaxMessageIDLength = 128
View Source 
const MaxPairingPayloadBytes = 1 << 20

MaxPairingPayloadBytes is the largest JSON body a pairing transport carries in either direction: an HTTP request or response, or a relay frame's payload. Live hub delivery and catch-up share it.

View Source 
const MaxRoomSyncPage = 200

MaxRoomSyncPage bounds one GET /v1/hub/sync page.

View Source 
const MaxRoomSyncPageBytes = 640 << 10

MaxRoomSyncPageBytes is the encoded size a sync page of several entries aims to stay under, control events included. A page always carries at least one control event or entry, so it always advances; a page with one entry may grow to the transport limit (MaxPairingPayloadBytes).

View Source 
const NetworkKeyAlgorithmEd25519 = "ed25519"

NetworkKeyAlgorithmEd25519 is the only network signing key algorithm in v1.

View Source 
const PairingScopeRooms = "rooms"

PairingScopeRooms marks a room link (see Pairing.Scope).

View Source 
const PolicyDecisionAccepted = "accepted"

PolicyDecisionAccepted is stamped in MessageAcceptedPayload.PolicyDecision: message.accepted causal events are only emitted once a message has already cleared write policy and been durably appended.

View Source 
const PolicyDecisionDenied = "denied"

PolicyDecisionDenied is stamped in MessageDeniedPayload.PolicyDecision for message.denied causal events.

View Source 
const RedactedSecretString = "[REDACTED]"

RedactedSecretString is the fixed value used when a SecretString is serialized or formatted. It is intentionally not accepted as a special input value: an input string is always treated as the supplied plaintext.

View Source 
const RoomSyncWithheldTooLarge = "too_large"

RoomSyncWithheldTooLarge marks a sync entry whose message the home accepted but cannot fit in any page, even alone (it came within the page's own few hundred bytes of the transport limit). The member stores the receipt as withheld and shows it; it is never treated as delivered.

View Source 
const StaleMembershipEpochCode = "stale_membership_epoch"

StaleMembershipEpochCode is the error code a home answers (HTTP 412) when a submission was signed under an older membership epoch. It is retry-class: the sender syncs the control log, re-signs under the new epoch, resends.

Variables

View Source 
var (
	ErrEnvelopeMalformed = errors.New("malformed message envelope")
	ErrEnvelopeSignature = errors.New("message envelope signature is invalid")
	ErrEnvelopeMismatch  = errors.New("message envelope does not match the message")
	// ErrEnvelopeUnrepresentable means the message holds a value that
	// canonical-json.v1 cannot encode (for example an unsafe integer in part
	// data). Such a message is sent unsigned; it is never altered to fit.
	ErrEnvelopeUnrepresentable = errors.New("message cannot be canonically encoded for signing")
)
View Source 
var (
	ErrRoomControlMalformed = errors.New("malformed room control event")
	ErrRoomControlSignature = errors.New("room control signature is invalid")
	ErrRoomReceiptMalformed = errors.New("malformed room receipt")
	ErrRoomReceiptSignature = errors.New("room receipt signature is invalid")
)
View Source 
var ErrRoomAdmission = errors.New("invalid room admission request")

ErrRoomAdmission covers malformed or badly signed admission requests.

Functions

func ActorMatches 

func ActorMatches(networkID string, actorID string, candidate string) bool

func ActorMatchesIdentity added in v0.1.18 

func ActorMatchesIdentity(defaultNetworkID string, actor Actor, candidate string) bool

func AgentFQID 

func AgentFQID(networkID string, agentID string) string

func ArtifactFQID 

func ArtifactFQID(networkID string, artifactID string) string

func CanonicalJSONBytes added in v0.1.14 

func CanonicalJSONBytes(value any) ([]byte, error)

CanonicalJSONBytes serializes strict canonical JSON as UTF-8.

func CanonicalJSONString added in v0.1.14 

func CanonicalJSONString(value any) (string, error)

CanonicalJSONString serializes supported values using strict canonical JSON object-key ordering, deterministic number form, and ECMAScript-style escaping.

func DMFQID 

func DMFQID(networkID string, dmID string) string

func DisplayFingerprint added in v0.1.22 

func DisplayFingerprint(fingerprint string) string

DisplayFingerprint groups a canonical fingerprint into 4-digit blocks for humans comparing it out of band. Non-canonical input is returned as is.

func EncodeInvite added in v0.1.15 

func EncodeInvite(invite Invite) (string, error)

EncodeInvite renders invite as a `moltnet-invite:` code. The version field is always stamped to InviteVersion regardless of the caller-supplied value.

func EncodeMachineRequestLine added in v0.1.14 

func EncodeMachineRequestLine(request MachineRequest) (string, error)

func EncodeMachineResponseLine added in v0.1.14 

func EncodeMachineResponseLine(response MachineResponse) (string, error)

func EncodeNetworkPublicKey added in v0.1.22 

func EncodeNetworkPublicKey(key ed25519.PublicKey) string

EncodeNetworkPublicKey renders a raw Ed25519 public key as unpadded base64url, the wire form used by invites, envelopes and /v1/network.

func EnvelopeCanonicalBytes added in v0.1.22 

func EnvelopeCanonicalBytes(envelope MessageEnvelope) ([]byte, error)

EnvelopeCanonicalBytes encodes an envelope as canonical-json.v1.

func EnvelopeDigest added in v0.1.22 

func EnvelopeDigest(canonical []byte) string

EnvelopeDigest is the envelope's event id: lowercase hex SHA-256 over the domain-separated canonical bytes.

func EnvelopeMatchesRequest added in v0.1.22 

func EnvelopeMatchesRequest(envelope MessageEnvelope, request SendMessageRequest) error

EnvelopeMatchesRequest reports whether a verified envelope states exactly the message the request delivers. Fields only the envelope carries (creation time, fingerprint, hub-room fields) are taken from it.

func FollowNamespace added in v0.1.20 

func FollowNamespace(id string) string

FollowNamespace is reserved for identities imported by a locally configured follow. The hash of the follow ID fits identifier limits even for long IDs, contains no URI/scoped-ID delimiters, and never depends on origin testimony. Real configured network IDs must not use the case-insensitive "follow-" prefix.

func GlobalRoomID added in v0.1.22 

func GlobalRoomID(homeFingerprint, roomID string) string

GlobalRoomID is "<home fingerprint>/<home-local room id>": fixed at genesis and never reused, so two homes' "research" rooms can never be confused.

func IsKnownPartKind 

func IsKnownPartKind(kind string) bool

func MarshalMachineContractV1 added in v0.1.14 

func MarshalMachineContractV1() ([]byte, string, error)

func MessageEventID added in v0.1.14 

func MessageEventID(messageID string) string

MessageEventID formats messageID as moltnet's causal event id for that message: "<moltnet>:<messageID>", per the event_id grammar in specs/causal-event.v1.schema.json (system prefix, colon, local id). Hoisted here so every moltnet-authority "moltnet:" + id construction (internal/rooms/causal.go's message.accepted/message.denied stamps, and the bridge's control.go/control_delivery.go causal wiring) goes through one place instead of each hand-rolling the concatenation.

func NetworkKeyFingerprint added in v0.1.22 

func NetworkKeyFingerprint(key ed25519.PublicKey) string

NetworkKeyFingerprint is "sha256:<hex>" over the raw public key bytes.

func NormalizeFingerprint added in v0.1.22 

func NormalizeFingerprint(value string) (string, error)

NormalizeFingerprint accepts "sha256:<hex>", bare hex, and the grouped display form (spaces or colons between hex groups), case-insensitively, and returns the canonical "sha256:<64 lowercase hex>" form.

func NormalizeMentions 

func NormalizeMentions(parts []Part, explicit []string) []string

func NormalizeRoomVisibility added in v0.1.11 

func NormalizeRoomVisibility(value string) string

func NormalizeRoomWritePolicy added in v0.1.11 

func NormalizeRoomWritePolicy(value string) string

func ParseAgentFQID 

func ParseAgentFQID(value string) (string, string, bool)

func ParseCanonicalJSON added in v0.1.14 

func ParseCanonicalJSON(input string) (any, error)

ParseCanonicalJSON parses strict canonical-json.v1 input and validates canonical invariants while preserving value semantics.

func ParseCanonicalJSONBytes added in v0.1.14 

func ParseCanonicalJSONBytes(input []byte) (any, error)

ParseCanonicalJSONBytes parses strict canonical-json.v1 input bytes.

func ParseGlobalRoomID added in v0.1.22 

func ParseGlobalRoomID(value string) (fingerprint string, roomID string, err error)

ParseGlobalRoomID splits and validates a global room id.

func ParseMentions 

func ParseMentions(text string) []string

func ParseNetworkPublicKey added in v0.1.22 

func ParseNetworkPublicKey(value string) (ed25519.PublicKey, error)

ParseNetworkPublicKey decodes the wire form of an Ed25519 public key.

func ParseScopedAgentID 

func ParseScopedAgentID(value string) (string, string, bool)

func RemoteParticipantID 

func RemoteParticipantID(currentNetworkID string, actor Actor) string

func RoomFQID 

func RoomFQID(networkID string, roomID string) string

func RoomFederationAllows added in v0.1.14 

func RoomFederationAllows(federation *RoomFederation, pairingID string) bool

func RoomRoleCanWrite added in v0.1.22 

func RoomRoleCanWrite(role string) bool

RoomRoleCanWrite reports whether a network role may post messages.

func ScopedAgentID 

func ScopedAgentID(networkID string, agentID string) string

func SortedUniqueTrimmedStrings 

func SortedUniqueTrimmedStrings(values []string) []string

func ThreadFQID 

func ThreadFQID(networkID string, threadID string) string

func UniqueTrimmedStrings 

func UniqueTrimmedStrings(values []string) []string

func ValidMemberRole added in v0.1.22 

func ValidMemberRole(role string) bool

ValidMemberRole is a role the home may grant a member (never owner).

func ValidRoomHistory added in v0.1.22 

func ValidRoomHistory(policy string) bool

ValidRoomHistory reports whether policy is a known history policy.

func ValidateCreateRoomRequest 

func ValidateCreateRoomRequest(request CreateRoomRequest) error

func ValidateFollowBaseURL added in v0.1.20 

func ValidateFollowBaseURL(value string) error

ValidateFollowBaseURL accepts a credential-free HTTP(S) service base URL.

func ValidateFollows added in v0.1.20 

func ValidateFollows(follows []Follow, localRoomIDs []string) error

ValidateFollows also reserves wildcard mirror namespaces at config load, before the remote room inventory is known.

func ValidateMemberID 

func ValidateMemberID(value string) error

func ValidateMessageID 

func ValidateMessageID(messageID string) error

func ValidateNetworkIdentity added in v0.1.22 

func ValidateNetworkIdentity(identity NetworkIdentity) error

ValidateNetworkIdentity checks that the fingerprint matches the key.

func ValidateNetworkNamespace added in v0.1.20 

func ValidateNetworkNamespace(id string) error

ValidateNetworkNamespace reserves follow identities without restricting the existing grammar of real network IDs. It is for configuration, not claims.

func ValidatePageRequest 

func ValidatePageRequest(page PageRequest) error

func ValidatePart 

func ValidatePart(part Part) error

func ValidatePartURL 

func ValidatePartURL(value string) error

func ValidateRoomFederation added in v0.1.14 

func ValidateRoomFederation(federation *RoomFederation) error

func ValidateRoomID 

func ValidateRoomID(roomID string) error

func ValidateRoomVisibility added in v0.1.11 

func ValidateRoomVisibility(value string) error

func ValidateRoomWritePolicy added in v0.1.11 

func ValidateRoomWritePolicy(value string) error

func ValidateSendMessageRequest 

func ValidateSendMessageRequest(request SendMessageRequest) error

func ValidateTarget 

func ValidateTarget(target Target) error

func ValidateUpdateRoomMembersRequest 

func ValidateUpdateRoomMembersRequest(request UpdateRoomMembersRequest) error

Types

type Actor 

type Actor struct {
	Type            string `json:"type"`
	ID              string `json:"id"`
	Name            string `json:"name,omitempty"`
	NetworkID       string `json:"network_id,omitempty"`
	FQID            string `json:"fqid,omitempty"`
	CredentialBound bool   `json:"credential_bound,omitempty"`
}

func NormalizeActor 

func NormalizeActor(defaultNetworkID string, actor Actor) Actor

type AgentEvent added in v0.1.7 

type AgentEvent struct {
	AgentID        string  `json:"agent_id"`
	NetworkID      string  `json:"network_id,omitempty"`
	FQID           string  `json:"fqid,omitempty"`
	Name           string  `json:"name,omitempty"`
	MessageID      string  `json:"message_id,omitempty"`
	Reason         string  `json:"reason,omitempty"`
	Target         *Target `json:"target,omitempty"`
	Error          string  `json:"error,omitempty"`
	Attempts       int     `json:"attempts,omitempty"`
	Classification string  `json:"classification,omitempty"`
}

type AgentPage 

type AgentPage struct {
	Agents []AgentSummary `json:"agents"`
	Page   PageInfo       `json:"page"`
}

type AgentRegistration 

type AgentRegistration struct {
	NetworkID     string    `json:"network_id"`
	AgentID       string    `json:"agent_id"`
	ActorUID      string    `json:"actor_uid"`
	ActorURI      string    `json:"actor_uri"`
	DisplayName   string    `json:"display_name,omitempty"`
	AgentToken    string    `json:"agent_token,omitempty"`
	CredentialKey string    `json:"-"`
	CreatedAt     time.Time `json:"created_at,omitempty"`
	UpdatedAt     time.Time `json:"updated_at,omitempty"`
}

type AgentSummary 

type AgentSummary struct {
	ID        string   `json:"id"`
	Name      string   `json:"name,omitempty"`
	ActorUID  string   `json:"actor_uid,omitempty"`
	FQID      string   `json:"fqid,omitempty"`
	NetworkID string   `json:"network_id"`
	Rooms     []string `json:"rooms,omitempty"`
	Connected bool     `json:"connected"`
}

type ApplyAgentRequest added in v0.1.12 

type ApplyAgentRequest struct {
	ID            string `json:"id"`
	Name          string `json:"name,omitempty"`
	CredentialKey string `json:"credential_key,omitempty"`
}

type ApplyConfigRequest added in v0.1.12 

type ApplyConfigRequest struct {
	// Nil leaves follows unchanged; an empty list removes all subscriptions.
	Follows   *[]Follow           `json:"follows,omitempty"`
	NetworkID string              `json:"network_id,omitempty"`
	Rooms     []CreateRoomRequest `json:"rooms,omitempty"`
	Agents    []ApplyAgentRequest `json:"agents,omitempty"`
}

type ApplyConfigResult added in v0.1.12 

type ApplyConfigResult struct {
	Applied bool                `json:"applied"`
	Rooms   []Room              `json:"rooms,omitempty"`
	Agents  []AgentRegistration `json:"agents,omitempty"`
}

type Artifact 

type Artifact struct {
	ID        string    `json:"id"`
	NetworkID string    `json:"network_id,omitempty"`
	FQID      string    `json:"fqid,omitempty"`
	MessageID string    `json:"message_id"`
	Target    Target    `json:"target"`
	PartIndex int       `json:"part_index"`
	Kind      string    `json:"kind"`
	MediaType string    `json:"media_type,omitempty"`
	Filename  string    `json:"filename,omitempty"`
	URL       string    `json:"url,omitempty"`
	CreatedAt time.Time `json:"created_at"`
}

type ArtifactFilter 

type ArtifactFilter struct {
	RoomID   string
	ThreadID string
	DMID     string
}

func (ArtifactFilter) Scoped 

func (f ArtifactFilter) Scoped() bool

type ArtifactPage 

type ArtifactPage struct {
	Artifacts []Artifact `json:"artifacts"`
	Page      PageInfo   `json:"page"`
}

type AttachmentCapabilities 

type AttachmentCapabilities struct {
	Rooms     bool `json:"rooms,omitempty"`
	Threads   bool `json:"threads,omitempty"`
	DMs       bool `json:"dms,omitempty"`
	Artifacts bool `json:"artifacts,omitempty"`
}

type AttachmentFrame 

type AttachmentFrame struct {
	Op                  string                 `json:"op"`
	Version             string                 `json:"version,omitempty"`
	HeartbeatIntervalMS int                    `json:"heartbeat_interval_ms,omitempty"`
	NetworkID           string                 `json:"network_id,omitempty"`
	Agent               *Actor                 `json:"agent,omitempty"`
	AgentID             string                 `json:"agent_id,omitempty"`
	ActorUID            string                 `json:"actor_uid,omitempty"`
	ActorURI            string                 `json:"actor_uri,omitempty"`
	AgentToken          string                 `json:"agent_token,omitempty"`
	Capabilities        AttachmentCapabilities `json:"capabilities,omitempty"`
	Cursor              string                 `json:"cursor,omitempty"`
	Event               *Event                 `json:"event,omitempty"`
	Error               string                 `json:"error,omitempty"`
}

type CausalBundleParseError added in v0.1.14 

type CausalBundleParseError struct {
	Line    int    `json:"line"`
	Message string `json:"message"`
}

CausalBundleParseError reports one line-local parse or validation error.

type CausalBundleParseResult added in v0.1.14 

type CausalBundleParseResult struct {
	DigestDomains []CausalDigestDomain
	Errors        []CausalBundleParseError
	Events        []CausalEvent
	StreamFinals  []CausalStreamFinal
}

CausalBundleParseResult is the normalized output of ParseCausalBundle.

func ParseCausalBundle added in v0.1.14 

func ParseCausalBundle(jsonl string) CausalBundleParseResult

func ParseCausalBundleBytes added in v0.1.14 

func ParseCausalBundleBytes(jsonl []byte) CausalBundleParseResult

type CausalDigestDomain added in v0.1.14 

type CausalDigestDomain struct {
	Version      string `json:"version"`
	Label        string `json:"label"`
	Hash         string `json:"hash"`
	SubjectBytes string `json:"subject_bytes"`
	Output       string `json:"output"`
}

CausalDigestDomain declares how a causal subject should be hashed.

func ParseCausalDigestDomain added in v0.1.14 

func ParseCausalDigestDomain(value any) (CausalDigestDomain, error)

type CausalEmitter added in v0.1.14 

type CausalEmitter struct {
	System   string `json:"system"`
	StreamID string `json:"stream_id"`
	Seq      int    `json:"seq"`
}

CausalEmitter identifies the authority, stream, and position that produced a CausalEvent. Seq is 1-based and contiguous within (run_id, stream_id).

type CausalEvent added in v0.1.14 

type CausalEvent struct {
	Version       string          `json:"version"`
	RunID         string          `json:"run_id"`
	EventID       string          `json:"event_id"`
	Emitter       CausalEmitter   `json:"emitter"`
	Type          string          `json:"type"`
	PrincipalID   string          `json:"principal_id"`
	RecordedAt    time.Time       `json:"recorded_at"`
	CauseEventIDs []string        `json:"cause_event_ids"`
	Payload       json.RawMessage `json:"payload"`
}

CausalEvent is Moltnet's native Go shape for the canonical noopolis.causal-event.v1 wire envelope. It intentionally mirrors the JSON Schema field-for-field without importing it: the wire JSON is the contract, this struct is Moltnet's own copy (per repo AGENTS.md: prefer stdlib, no jsonschema dependency).

func ParseCausalEvent added in v0.1.14 

func ParseCausalEvent(value any) (CausalEvent, error)

func (CausalEvent) Validate added in v0.1.14 

func (e CausalEvent) Validate() error

Validate checks the envelope-level invariants shared by every Noopolis authority (specs/causal-event.v1.schema.json). It does not check event-type-specific payload minimums; per specs/CAUSAL.md, those are the conformance harness's responsibility, not the envelope's.

type CausalStreamFinal added in v0.1.14 

type CausalStreamFinal struct {
	Version  string                   `json:"version"`
	RunID    string                   `json:"run_id"`
	Emitter  CausalStreamFinalEmitter `json:"emitter"`
	FinalSeq int                      `json:"final_seq"`
}

CausalStreamFinal is the stream-final variant of the causal contract.

func ParseCausalStreamFinal added in v0.1.14 

func ParseCausalStreamFinal(value any) (CausalStreamFinal, error)

type CausalStreamFinalEmitter added in v0.1.14 

type CausalStreamFinalEmitter struct {
	System   string `json:"system"`
	StreamID string `json:"stream_id"`
}

type ConsoleViewer added in v0.1.20 

type ConsoleViewer struct {
	Kind string `json:"kind"`
	ID   string `json:"id,omitempty"`
}

ConsoleViewer identifies the caller without exposing credentials.

type CreateRoomRequest 

type CreateRoomRequest struct {
	ID          string          `json:"id"`
	Name        string          `json:"name,omitempty"`
	Members     []string        `json:"members,omitempty"`
	Visibility  string          `json:"visibility,omitempty"`
	WritePolicy string          `json:"write_policy,omitempty"`
	Federation  *RoomFederation `json:"federation,omitempty" yaml:"federation,omitempty"`
	Credential  SecretString    `json:"credential,omitempty"`
}

type DirectConversation 

type DirectConversation struct {
	ID             string    `json:"id"`
	NetworkID      string    `json:"network_id,omitempty"`
	FQID           string    `json:"fqid,omitempty"`
	ParticipantIDs []string  `json:"participant_ids,omitempty"`
	MessageCount   int       `json:"message_count"`
	LastMessageAt  time.Time `json:"last_message_at,omitempty"`
}

type DirectConversationPage 

type DirectConversationPage struct {
	DMs  []DirectConversation `json:"dms"`
	Page PageInfo             `json:"page"`
}

type EnvelopeActor added in v0.1.22 

type EnvelopeActor struct {
	Type string `json:"type"`
	ID   string `json:"id"`
	Name string `json:"name,omitempty"`
}

EnvelopeActor is the signed author: the origin network attests that its local actor of this type, id and name wrote the message.

type EnvelopeTarget added in v0.1.22 

type EnvelopeTarget struct {
	Kind            string   `json:"kind"`
	RoomID          string   `json:"room_id,omitempty"`
	ThreadID        string   `json:"thread_id,omitempty"`
	ParentMessageID string   `json:"parent_message_id,omitempty"`
	DMID            string   `json:"dm_id,omitempty"`
	ParticipantIDs  []string `json:"participant_ids,omitempty"`
}

EnvelopeTarget binds the message to its conversation, including thread parentage and DM participants.

type Event 

type Event struct {
	ID        string              `json:"id"`
	Type      string              `json:"type"`
	NetworkID string              `json:"network_id"`
	Agent     *AgentEvent         `json:"agent,omitempty"`
	Message   *Message            `json:"message,omitempty"`
	Room      *Room               `json:"room,omitempty"`
	Thread    *Thread             `json:"thread,omitempty"`
	DM        *DirectConversation `json:"dm,omitempty"`
	Pairing   *Pairing            `json:"pairing,omitempty"`
	ReplayGap *ReplayGap          `json:"replay_gap,omitempty"`
	CreatedAt time.Time           `json:"created_at"`
}

type Follow added in v0.1.20 

type Follow struct {
	ID                  string            `json:"id" yaml:"id"`
	RemoteBaseURL       string            `json:"remote_base_url" yaml:"remote_base_url"`
	RemoteNetworkID     string            `json:"remote_network_id,omitempty" yaml:"remote_network_id,omitempty"`
	Rooms               []string          `json:"rooms,omitempty" yaml:"rooms,omitempty"`
	RoomMapping         map[string]string `json:"room_mapping,omitempty" yaml:"room_mapping,omitempty"`
	Backfill            *int              `json:"backfill,omitempty" yaml:"backfill,omitempty"`
	Visibility          string            `json:"visibility,omitempty" yaml:"visibility,omitempty"`
	PollIntervalSeconds int               `json:"poll_interval_seconds,omitempty" yaml:"poll_interval_seconds,omitempty"`
	ReconnectMinSeconds int               `json:"reconnect_min_seconds,omitempty" yaml:"reconnect_min_seconds,omitempty"`
	ReconnectMaxSeconds int               `json:"reconnect_max_seconds,omitempty" yaml:"reconnect_max_seconds,omitempty"`
}

Follow describes an anonymous, pull-only subscription to a public network.

func (Follow) BackfillLimit added in v0.1.20 

func (f Follow) BackfillLimit() int

func (Follow) LocalRoomID added in v0.1.20 

func (f Follow) LocalRoomID(remote string) string

func (Follow) WithDefaults added in v0.1.20 

func (f Follow) WithDefaults() Follow

type FollowPage added in v0.1.20 

type FollowPage struct {
	Follows []FollowStatus `json:"follows"`
}

type FollowRoomStatus added in v0.1.20 

type FollowRoomStatus struct {
	LastError    string `json:"last_error,omitempty"`
	RemoteRoomID string `json:"remote_room_id"`
	LocalRoomID  string `json:"local_room_id"`
	MessageCount int    `json:"message_count"`
}

type FollowStatus added in v0.1.20 

type FollowStatus struct {
	ID            string `json:"id"`
	RemoteBaseURL string `json:"remote_base_url"`
	// RemoteNetworkID is the configured pin; discovery is explicitly a claim.
	RemoteNetworkID  string             `json:"remote_network_id,omitempty"`
	ClaimedNetworkID string             `json:"claimed_network_id,omitempty"`
	Warning          string             `json:"warning,omitempty"`
	Status           string             `json:"status"`
	LastError        string             `json:"last_error,omitempty"`
	LastSynced       *time.Time         `json:"last_synced,omitempty"`
	Rooms            []FollowRoomStatus `json:"rooms"`
}

type HubControlInfo added in v0.1.22 

type HubControlInfo struct {
	Seq       int64  `json:"seq"`
	Epoch     int64  `json:"epoch"`
	Kind      string `json:"kind"`
	NetworkID string `json:"network_id,omitempty"`
	Role      string `json:"role,omitempty"`
	History   string `json:"history,omitempty"`
	CreatedAt string `json:"created_at"`
}

HubControlInfo is one verified control event, for display.

type HubMemberInfo added in v0.1.22 

type HubMemberInfo struct {
	NetworkID   string `json:"network_id"`
	Role        string `json:"role"`
	Fingerprint string `json:"fingerprint"`
	Trust       string `json:"trust"`
}

HubMemberInfo is one member network. Trust is this network's trust in its key: verified, introduced, unconfirmed, or self.

type HubRoomInfo added in v0.1.22 

type HubRoomInfo struct {
	GlobalRoomID    string           `json:"global_room_id"`
	LocalRoomID     string           `json:"local_room_id"`
	HomeNetworkID   string           `json:"home_network_id"`
	HomePairingID   string           `json:"home_pairing_id,omitempty"`
	IsHome          bool             `json:"is_home"`
	MembershipEpoch int64            `json:"membership_epoch"`
	History         string           `json:"history"`
	Members         []HubMemberInfo  `json:"members"`
	Events          []HubControlInfo `json:"events"`
	// Withheld lists placed messages this member may see but never received:
	// the home withheld them from catch-up (too large for a page).
	Withheld []HubWithheldInfo `json:"withheld,omitempty"`
}

HubRoomInfo is a shared room as one network sees it (GET /v1/rooms/{id}/hub): its home, the roster from its control log with this network's trust in each member's key, and the control events themselves, for display. It is an HTTP view, never part of the machine v1 contract.

type HubRoomSummary added in v0.1.22 

type HubRoomSummary struct {
	GlobalRoomID    string            `json:"global_room_id"`
	LocalRoomID     string            `json:"local_room_id"`
	HomeNetworkID   string            `json:"home_network_id"`
	HomePairingID   string            `json:"home_pairing_id,omitempty"`
	MembershipEpoch int64             `json:"membership_epoch"`
	History         string            `json:"history"`
	Members         map[string]string `json:"members"`
}

HubRoomSummary is the operator view the hub administration endpoints return (POST /v1/hub/rooms, /v1/hub/rooms/control, ...): a hub room with its current roster as network id -> role.

type HubWithheldInfo added in v0.1.22 

type HubWithheldInfo struct {
	RoomSeq         int64  `json:"room_seq"`
	MembershipEpoch int64  `json:"membership_epoch"`
	Reason          string `json:"reason"`
}

HubWithheldInfo is one placed message a member was not given.

type Invite added in v0.1.15 

type Invite struct {
	V            int       `json:"v"`
	RelayURL     string    `json:"relay_url"`
	Room         string    `json:"room"`
	RelayToken   string    `json:"relay_token"`
	PairingToken string    `json:"pairing_token"`
	PairingID    string    `json:"pairing_id"`
	NetworkID    string    `json:"network_id"`
	NetworkName  string    `json:"network_name,omitempty"`
	SharedRooms  []string  `json:"shared_rooms,omitempty"`
	Exp          time.Time `json:"exp"`
	// NetworkPublicKey and NetworkFingerprint carry the inviter's signing
	// identity so the joiner can pin it as verified. Both are optional for
	// invites from networks without keys; when one is present both must be,
	// and the fingerprint must match the key.
	NetworkPublicKey   string `json:"network_public_key,omitempty"`
	NetworkFingerprint string `json:"network_fingerprint,omitempty"`
	// HubRoom makes this a room invite (`moltnet room invite`): its pairing
	// is a room link, and redeeming it admits the joiner to one shared room
	// homed by the inviter, whose key the code carries.
	HubRoom *InviteHubRoom `json:"hub_room,omitempty"`
}

Invite is the payload of a shareable `moltnet-invite:` code. Fields are intentionally plain strings, not SecretString: the invite's entire purpose is to carry plaintext secrets to the peer that consumes it, and SecretString's redacted marshaling would defeat that.

func DecodeInvite added in v0.1.15 

func DecodeInvite(code string) (Invite, error)

DecodeInvite parses and validates a `moltnet-invite:` code.

func (Invite) Validate added in v0.1.15 

func (invite Invite) Validate() error

Validate checks the invite's version, relay URL scheme, required fields, and expiry. It does not know the local network id, so it cannot check for a network-id collision; callers that have a local config must do that themselves.

type InviteHubRoom added in v0.1.22 

type InviteHubRoom struct {
	GlobalRoomID string `json:"global_room_id"`
	Role         string `json:"role"`
}

InviteHubRoom names the shared room a room invite admits to.

type JoinRoomRequest added in v0.1.14 

type JoinRoomRequest struct {
	From       Actor        `json:"from"`
	Credential SecretString `json:"credential"`
}

type MachineCancelRequest added in v0.1.14 

type MachineCancelRequest struct {
	TargetCorrelationID string `json:"target_correlation_id"`
}

func (MachineCancelRequest) Validate added in v0.1.14 

func (request MachineCancelRequest) Validate() error

type MachineCancelResult added in v0.1.14 

type MachineCancelResult struct {
	TargetCorrelationID string `json:"target_correlation_id"`
	State               string `json:"state"`
}

func (MachineCancelResult) Validate added in v0.1.14 

func (result MachineCancelResult) Validate() error

type MachineContract added in v0.1.14 

type MachineContract struct {
	Version         string                            `json:"version"`
	ProtocolVersion string                            `json:"protocol_version"`
	Framing         MachineContractFraming            `json:"framing"`
	Operations      []string                          `json:"operations"`
	Enums           map[string][]string               `json:"enums"`
	Grammars        map[string]MachineContractGrammar `json:"grammars"`
	Limits          map[string]int                    `json:"limits"`
	Shapes          []MachineContractShape            `json:"shapes"`
	Vectors         []MachineContractVector           `json:"vectors"`
}

func MachineContractV1 added in v0.1.14 

func MachineContractV1() (MachineContract, error)

type MachineContractField added in v0.1.14 

type MachineContractField struct {
	Name     string   `json:"name"`
	Type     string   `json:"type"`
	Required bool     `json:"required"`
	Nullable bool     `json:"nullable,omitempty"`
	Limit    string   `json:"limit,omitempty"`
	Enum     []string `json:"enum,omitempty"`
}

type MachineContractFraming added in v0.1.14 

type MachineContractFraming struct {
	Encoding        string `json:"encoding"`
	RecordSeparator string `json:"record_separator"`
	StrictJSON      bool   `json:"strict_json"`
}

type MachineContractGrammar added in v0.1.14 

type MachineContractGrammar struct {
	Pattern   string   `json:"pattern,omitempty"`
	MinBytes  int      `json:"min_bytes,omitempty"`
	MaxBytes  int      `json:"max_bytes,omitempty"`
	Trimmed   bool     `json:"trimmed,omitempty"`
	LocalOnly bool     `json:"local_only,omitempty"`
	Formats   []string `json:"formats,omitempty"`
}

type MachineContractRelation added in v0.1.14 

type MachineContractRelation struct {
	Kind   string   `json:"kind"`
	Fields []string `json:"fields"`
	Value  string   `json:"value,omitempty"`
}

type MachineContractShape added in v0.1.14 

type MachineContractShape struct {
	Name      string                    `json:"name"`
	Fields    []MachineContractField    `json:"fields"`
	Relations []MachineContractRelation `json:"relations,omitempty"`
}

type MachineContractVector added in v0.1.14 

type MachineContractVector struct {
	Name      string `json:"name"`
	Direction string `json:"direction"`
	Line      string `json:"line"`
	SHA256    string `json:"sha256"`
}

type MachineError added in v0.1.14 

type MachineError struct {
	Code string `json:"code"`
}

func (MachineError) Validate added in v0.1.14 

func (errorResponse MachineError) Validate() error

type MachineExportRequest added in v0.1.14 

type MachineExportRequest struct {
	RoomIDs       []string `json:"room_ids"`
	DMPeerIDs     []string `json:"dm_peer_ids"`
	IncludeSocial *bool    `json:"include_social_speech"`
}

func (MachineExportRequest) Validate added in v0.1.14 

func (request MachineExportRequest) Validate() error

type MachineExportResult added in v0.1.14 

type MachineExportResult struct {
	Version       string `json:"version"`
	ControlMarker string `json:"control_marker"`
	Transcript    string `json:"transcript"`
	TranscriptSHA string `json:"transcript_sha256"`
}

func (MachineExportResult) Validate added in v0.1.14 

func (result MachineExportResult) Validate() error

type MachineReadMessage added in v0.1.14 

type MachineReadMessage Message

func (MachineReadMessage) Validate added in v0.1.14 

func (message MachineReadMessage) Validate() error

type MachineReadPage added in v0.1.14 

type MachineReadPage struct {
	Messages []MachineReadMessage `json:"messages"`
	Page     MachineReadPageInfo  `json:"page"`
}

func (MachineReadPage) Validate added in v0.1.14 

func (page MachineReadPage) Validate() error

type MachineReadPageInfo added in v0.1.14 

type MachineReadPageInfo struct {
	HasMore    *bool  `json:"has_more"`
	NextBefore string `json:"next_before,omitempty"`
	NextAfter  string `json:"next_after,omitempty"`
}

func (MachineReadPageInfo) Validate added in v0.1.14 

func (info MachineReadPageInfo) Validate() error

type MachineReadRequest added in v0.1.14 

type MachineReadRequest struct {
	Target MachineTarget `json:"target"`
	Limit  int           `json:"limit"`
	Before string        `json:"before,omitempty"`
	After  string        `json:"after,omitempty"`
}

func (MachineReadRequest) Validate added in v0.1.14 

func (request MachineReadRequest) Validate() error

type MachineReadResult added in v0.1.14 

type MachineReadResult struct {
	Target MachineTarget   `json:"target"`
	Page   MachineReadPage `json:"page"`
}

func (MachineReadResult) Validate added in v0.1.14 

func (result MachineReadResult) Validate() error

type MachineRequest added in v0.1.14 

type MachineRequest struct {
	Version       string                   `json:"version"`
	CorrelationID string                   `json:"correlation_id"`
	Operation     string                   `json:"operation"`
	SendNudge     *MachineSendNudgeRequest `json:"send_nudge,omitempty"`
	Read          *MachineReadRequest      `json:"read,omitempty"`
	Subscribe     *MachineSubscribeRequest `json:"subscribe,omitempty"`
	Export        *MachineExportRequest    `json:"export,omitempty"`
	Cancel        *MachineCancelRequest    `json:"cancel,omitempty"`
}

func DecodeMachineRequestLine added in v0.1.14 

func DecodeMachineRequestLine(raw string) (MachineRequest, error)

func (MachineRequest) Validate added in v0.1.14 

func (request MachineRequest) Validate() error

type MachineResponse added in v0.1.14 

type MachineResponse struct {
	Version       string                  `json:"version"`
	CorrelationID string                  `json:"correlation_id"`
	Operation     string                  `json:"operation"`
	SendNudge     *MachineSendNudgeResult `json:"send_nudge,omitempty"`
	Read          *MachineReadResult      `json:"read,omitempty"`
	Subscribe     *MachineSubscribeResult `json:"subscribe,omitempty"`
	Export        *MachineExportResult    `json:"export,omitempty"`
	Cancel        *MachineCancelResult    `json:"cancel,omitempty"`
	Event         *MachineSubscribeEvent  `json:"event,omitempty"`
	Error         *MachineError           `json:"error,omitempty"`
}

func DecodeMachineResponseLine added in v0.1.14 

func DecodeMachineResponseLine(raw string) (MachineResponse, error)

func (MachineResponse) Validate added in v0.1.14 

func (response MachineResponse) Validate() error

type MachineSendNudgeRequest added in v0.1.14 

type MachineSendNudgeRequest struct {
	DeliveryID      string        `json:"delivery_id"`
	Target          MachineTarget `json:"target"`
	Body            string        `json:"body"`
	OriginMessageID string        `json:"origin_message_id,omitempty"`
	CauseEventIDs   []string      `json:"cause_event_ids,omitempty"`
}

func (MachineSendNudgeRequest) Validate added in v0.1.14 

func (request MachineSendNudgeRequest) Validate() error

type MachineSendNudgeResult added in v0.1.14 

type MachineSendNudgeResult struct {
	MessageID     string `json:"message_id"`
	EventID       string `json:"event_id"`
	Accepted      *bool  `json:"accepted"`
	ThreadID      string `json:"thread_id,omitempty"`
	ThreadCreated *bool  `json:"thread_created"`
	DMID          string `json:"dm_id,omitempty"`
	DMCreated     *bool  `json:"dm_created"`
}

func (MachineSendNudgeResult) Validate added in v0.1.14 

func (result MachineSendNudgeResult) Validate() error

type MachineSubscribeEvent added in v0.1.14 

type MachineSubscribeEvent struct {
	EventID string          `json:"event_id"`
	Type    string          `json:"type"`
	Payload json.RawMessage `json:"payload"`
}

func (MachineSubscribeEvent) Validate added in v0.1.14 

func (event MachineSubscribeEvent) Validate() error

type MachineSubscribeRequest added in v0.1.14 

type MachineSubscribeRequest struct {
	Target       MachineTarget `json:"target"`
	ResumeCursor string        `json:"resume_cursor,omitempty"`
	MaxEvents    int           `json:"max_events"`
}

func (MachineSubscribeRequest) Validate added in v0.1.14 

func (request MachineSubscribeRequest) Validate() error

type MachineSubscribeResult added in v0.1.14 

type MachineSubscribeResult struct {
	Closed string `json:"closed"`
	Reason string `json:"reason"`
}

func (MachineSubscribeResult) Validate added in v0.1.14 

func (result MachineSubscribeResult) Validate() error

type MachineTarget added in v0.1.14 

type MachineTarget struct {
	Kind string `json:"kind"`
	ID   string `json:"id"`
}

func (MachineTarget) Validate added in v0.1.14 

func (target MachineTarget) Validate() error

type Message 

type Message struct {
	ID        string        `json:"id"`
	NetworkID string        `json:"network_id"`
	Origin    MessageOrigin `json:"origin,omitempty"`
	Target    Target        `json:"target"`
	From      Actor         `json:"from"`
	Parts     []Part        `json:"parts"`
	Mentions  []string      `json:"mentions,omitempty"`
	CreatedAt time.Time     `json:"created_at"`
}

type MessageAccepted 

type MessageAccepted struct {
	MessageID     string `json:"message_id"`
	EventID       string `json:"event_id"`
	Accepted      bool   `json:"accepted"`
	ThreadCreated bool   `json:"thread_created"`
	DMCreated     bool   `json:"dm_created"`
	// Receipt is the home's placement of a hub-room submission, returned to
	// the submitting member so its own copy learns its room seq.
	Receipt *SignedRoomReceipt `json:"receipt,omitempty"`
}

type MessageAcceptedPayload added in v0.1.14 

type MessageAcceptedPayload struct {
	MessageID      string `json:"message_id"`
	Target         Target `json:"target"`
	ContentSHA256  string `json:"content_sha256"`
	PolicyDecision string `json:"policy_decision"`
}

MessageAcceptedPayload is the payload shape for EventTypeMessageAccepted.

type MessageDeniedPayload added in v0.1.14 

type MessageDeniedPayload struct {
	Target         Target `json:"target"`
	Reason         string `json:"reason"`
	ContentSHA256  string `json:"content_sha256"`
	PolicyDecision string `json:"policy_decision"`
}

MessageDeniedPayload is the payload shape for EventTypeMessageDenied.

type MessageEnvelope added in v0.1.22 

type MessageEnvelope struct {
	V                 string         `json:"v"`
	GlobalRoomID      string         `json:"global_room_id,omitempty"`
	MembershipEpoch   *int64         `json:"membership_epoch,omitempty"`
	Target            EnvelopeTarget `json:"target"`
	OriginNetworkID   string         `json:"origin_network_id"`
	OriginFingerprint string         `json:"origin_fingerprint"`
	OriginMessageID   string         `json:"origin_message_id"`
	OriginSeq         *int64         `json:"origin_seq,omitempty"`
	Author            EnvelopeActor  `json:"author"`
	CreatedAt         string         `json:"created_at"`
	Parts             []Part         `json:"parts"`
	Mentions          []string       `json:"mentions,omitempty"`
}

MessageEnvelope is the immutable, origin-signed statement of a message.

GlobalRoomID, MembershipEpoch and OriginSeq are reserved for hub rooms (chunk B). They are optional members of the same v1 encoding, so filling them in later does not change the signature format. OriginSeq, when used, is per room: a per-network counter would leak cross-room volume.

func EnvelopeFromRequest added in v0.1.22 

func EnvelopeFromRequest(request SendMessageRequest, originFingerprint, createdAt string) MessageEnvelope

EnvelopeFromRequest projects the signed fields of a relay request. Both the origin (when signing) and the receiver (when matching) use it, so the signed statement and the delivered message cannot drift apart.

func ParseSignedEnvelope added in v0.1.22 

func ParseSignedEnvelope(signed SignedEnvelope) (MessageEnvelope, string, error)

ParseSignedEnvelope strictly decodes the envelope bytes without checking the signature: the bytes must already be canonical, carry no unknown or duplicate fields, and re-encode to themselves.

func VerifySignedEnvelope added in v0.1.22 

func VerifySignedEnvelope(signed SignedEnvelope) (MessageEnvelope, string, error)

VerifySignedEnvelope parses the envelope and checks that the attached key matches the signed origin fingerprint and produced the signature. Whether that key belongs to the origin network is the caller's pin decision.

type MessageOrigin 

type MessageOrigin struct {
	// ClaimedAuthor preserves untrusted author data from a follow import.
	ClaimedAuthor *Actor `json:"claimed_author,omitempty"`
	// These follow-import fields are origin testimony, never identity anchors.
	ClaimedNetworkID          string `json:"claimed_network_id,omitempty"`
	ClaimedMessageID          string `json:"claimed_message_id,omitempty"`
	ClaimedDiscoveryNetworkID string `json:"claimed_discovery_network_id,omitempty"`
	NetworkID                 string `json:"network_id"`
	MessageID                 string `json:"message_id"`
	// ReceivedVia is the local pairing id for an inbound relay, resolved
	// server-side from its credential, or "follow:<id>" for an engine import.
	// Follow imports stamp NetworkID with FollowNamespace and MessageID with the served ID.
	// Empty for locally-originated messages.
	//
	// This is the ONLY provenance on a relayed message the receiving
	// operator authored: NetworkID and the sender's own network id are
	// peer-supplied claims. It is never read from the wire (normalizeOrigin
	// overwrites it unconditionally) and never sent outbound (relayRequest
	// clears it), so it cannot become peer testimony in either direction.
	ReceivedVia string `json:"received_via,omitempty"`
}

func (MessageOrigin) Validate added in v0.1.14 

func (origin MessageOrigin) Validate() error

type MessagePage 

type MessagePage struct {
	Messages []Message `json:"messages"`
	Page     PageInfo  `json:"page"`
}

type Network 

type Network struct {
	ID           string              `json:"id"`
	Name         string              `json:"name"`
	Version      string              `json:"version"`
	Protocols    NetworkProtocols    `json:"protocols,omitempty"`
	Capabilities NetworkCapabilities `json:"capabilities,omitempty"`
	Console      *NetworkConsole     `json:"console,omitempty"`
	Warnings     []NetworkWarning    `json:"warnings,omitempty"`
	// Identity is the network's public signing key, when it has one.
	Identity *NetworkIdentity `json:"identity,omitempty"`
}

type NetworkCapabilities 

type NetworkCapabilities struct {
	EventStream        string `json:"event_stream,omitempty"`
	AttachmentProtocol string `json:"attachment_protocol,omitempty"`
	PublicRead         bool   `json:"public_read"`
	AgentRegistration  string `json:"agent_registration,omitempty"`
	DebugEvents        bool   `json:"debug_events,omitempty"`
	HumanIngress       bool   `json:"human_ingress"`
	DirectMessages     bool   `json:"direct_messages"`
	MessagePagination  string `json:"message_pagination,omitempty"`
	Pairings           bool   `json:"pairings"`
}

type NetworkConsole added in v0.1.4 

type NetworkConsole struct {
	CanFollow       bool          `json:"can_follow"`
	CanSendHuman    bool          `json:"can_send_human"`
	Viewer          ConsoleViewer `json:"viewer"`
	CanReadPairings bool          `json:"can_read_pairings"`
	CanReadDMs      bool          `json:"can_read_dms"`
	CanConnectAgent bool          `json:"can_connect_agent"`
}

type NetworkIdentity added in v0.1.22 

type NetworkIdentity struct {
	Algorithm   string `json:"algorithm"`
	PublicKey   string `json:"public_key"`
	Fingerprint string `json:"fingerprint"`
}

NetworkIdentity is a network's public signing identity, published on GET /v1/network. Network ids stay human-readable; the fingerprint is the cryptographic identity shown beside them.

v1 has no key rotation: losing or leaking the private key means a new identity, and every peer must re-trust it (`moltnet keys forget` then `moltnet keys trust`).

type NetworkProtocols added in v0.1.3 

type NetworkProtocols struct {
	HTTP   []string `json:"http,omitempty"`
	Attach []string `json:"attach,omitempty"`
	Pair   []string `json:"pair,omitempty"`
}

type NetworkWarning added in v0.1.3 

type NetworkWarning struct {
	Severity string `json:"severity"`
	Code     string `json:"code"`
	Message  string `json:"message"`
	Action   string `json:"action,omitempty"`
	DocsURL  string `json:"docs_url,omitempty"`
}

type PageInfo 

type PageInfo struct {
	HasMore    bool   `json:"has_more"`
	NextBefore string `json:"next_before,omitempty"`
	NextAfter  string `json:"next_after,omitempty"`
}

type PageRequest 

type PageRequest struct {
	Before string `json:"before,omitempty"`
	After  string `json:"after,omitempty"`
	Limit  int    `json:"limit,omitempty"`
}

type Pairing 

type Pairing struct {
	ID                string                 `json:"id" yaml:"id"`
	RemoteNetworkID   string                 `json:"remote_network_id" yaml:"remote_network_id"`
	RemoteNetworkName string                 `json:"remote_network_name,omitempty" yaml:"remote_network_name,omitempty"`
	RemoteBaseURL     string                 `json:"remote_base_url,omitempty" yaml:"remote_base_url,omitempty"`
	Relay             *PairingRelay          `json:"relay,omitempty" yaml:"relay,omitempty"`
	Status            string                 `json:"status,omitempty" yaml:"status,omitempty"`
	Diagnostics       *PairingDiagnostics    `json:"diagnostics,omitempty" yaml:"diagnostics,omitempty"`
	Delivery          *PairingDeliveryStatus `json:"delivery,omitempty" yaml:"delivery,omitempty"`
	DeliveryLimits    *PairingDeliveryLimits `json:"delivery_limits,omitempty" yaml:"delivery_limits,omitempty"`
	Token             SecretString           `json:"token,omitempty" yaml:"token,omitempty"`
	// Scope "rooms" makes this a room link: it carries only the hub rooms
	// whose control log admits its network. Room links never expose agent
	// lists or other rooms, and never carry DMs. Empty is a full pairing.
	Scope string `json:"scope,omitempty" yaml:"scope,omitempty"`
}
func (p Pairing) IsRoomLink() bool

IsRoomLink reports whether a pairing carries only hub rooms.

type PairingDeliveryLimits added in v0.1.21 

type PairingDeliveryLimits struct {
	MaxAgeSeconds int64 `json:"max_age_seconds,omitempty" yaml:"max_age_seconds,omitempty"`
	MaxPending    int   `json:"max_pending,omitempty" yaml:"max_pending,omitempty"`
}

PairingDeliveryLimits bounds retained outbound messages for one pairing. Zero values use the server defaults: seven days and 10,000 messages.

type PairingDeliveryStatus added in v0.1.21 

type PairingDeliveryStatus struct {
	Pending                 int     `json:"pending" yaml:"pending"`
	OldestPendingAgeSeconds float64 `json:"oldest_pending_age_seconds" yaml:"oldest_pending_age_seconds"`
	LastError               string  `json:"last_error,omitempty" yaml:"last_error,omitempty"`
	Rejected                int64   `json:"rejected" yaml:"rejected"`
	LastRejectionReason     string  `json:"last_rejection_reason,omitempty" yaml:"last_rejection_reason,omitempty"`
	Dropped                 int64   `json:"dropped" yaml:"dropped"`
}

PairingDeliveryStatus describes the local outbound queue, including drops caused by retention or destination changes, and definitive rejections.

type PairingDiagnostics added in v0.1.3 

type PairingDiagnostics struct {
	CheckedAt       time.Time        `json:"checked_at,omitempty" yaml:"checked_at,omitempty"`
	RemoteVersion   string           `json:"remote_version,omitempty" yaml:"remote_version,omitempty"`
	RemoteNetworkID string           `json:"remote_network_id,omitempty" yaml:"remote_network_id,omitempty"`
	RemoteProtocols NetworkProtocols `json:"remote_protocols,omitempty" yaml:"remote_protocols,omitempty"`
	Reason          string           `json:"reason,omitempty" yaml:"reason,omitempty"`
	Message         string           `json:"message,omitempty" yaml:"message,omitempty"`
}

type PairingPage 

type PairingPage struct {
	Pairings []Pairing `json:"pairings"`
	Page     PageInfo  `json:"page"`
}

type PairingRelay added in v0.1.14 

type PairingRelay struct {
	URL  string `json:"url" yaml:"url"`
	Room string `json:"room,omitempty" yaml:"room,omitempty"`
	// Token is used solely to open the relay WebSocket connection and matches
	// the relay's RELAY_TOKEN. When unset, internal/app falls back to
	// Pairing.Token for that connection; this transport-neutral type makes no
	// fallback policy decision itself.
	Token SecretString `json:"token,omitempty" yaml:"token,omitempty"`
}

type Part 

type Part struct {
	Kind      string         `json:"kind"`
	Text      string         `json:"text,omitempty"`
	MediaType string         `json:"media_type,omitempty"`
	URL       string         `json:"url,omitempty"`
	Filename  string         `json:"filename,omitempty"`
	Data      map[string]any `json:"data,omitempty"`
}

type RegisterAgentRequest 

type RegisterAgentRequest struct {
	RequestedAgentID string `json:"requested_agent_id,omitempty"`
	Name             string `json:"name,omitempty"`
}

type RemoveResult added in v0.1.10 

type RemoveResult struct {
	Removed bool   `json:"removed"`
	Kind    string `json:"kind"`
	ID      string `json:"id"`
	Mode    string `json:"mode"`
}

type ReplayGap 

type ReplayGap struct {
	RequestedEventID string `json:"requested_event_id,omitempty"`
	OldestEventID    string `json:"oldest_event_id,omitempty"`
	NewestEventID    string `json:"newest_event_id,omitempty"`
}

type ReportWakeFailedRequest added in v0.1.14 

type ReportWakeFailedRequest struct {
	AgentID        string `json:"agent_id"`
	Event          Event  `json:"event"`
	Error          string `json:"error,omitempty"`
	Attempts       int    `json:"attempts,omitempty"`
	Classification string `json:"classification,omitempty"`
}

ReportWakeFailedRequest is the bridge -> server wire body for POST /v1/agents/wake-failed: a bridge control-delivery loop reporting a genuinely permanent (or retry-budget-exhausted) wake failure for an event it received and already ACKed, without tearing down the attachment socket to do so. AgentID is checked against the caller's authenticated agent scope the same way internal/transport/attach.go checks a declared identify frame's agent.id (see auth.Claims.AllowsAgent).

type Room 

type Room struct {
	Follow        *RoomFollow     `json:"follow,omitempty"`
	ID            string          `json:"id"`
	NetworkID     string          `json:"network_id,omitempty"`
	FQID          string          `json:"fqid,omitempty"`
	Name          string          `json:"name"`
	Members       []string        `json:"members,omitempty"`
	Visibility    string          `json:"visibility,omitempty"`
	WritePolicy   string          `json:"write_policy,omitempty"`
	Federation    *RoomFederation `json:"federation,omitempty" yaml:"federation,omitempty"`
	Access        *RoomAccess     `json:"access,omitempty"`
	CreatedAt     time.Time       `json:"created_at"`
	LastMessageAt *time.Time      `json:"last_message_at,omitempty"`
}

type RoomAccess added in v0.1.11 

type RoomAccess struct {
	CanRead  bool   `json:"can_read"`
	CanWrite bool   `json:"can_write"`
	Reason   string `json:"reason,omitempty"`
}

type RoomAdmission added in v0.1.22 

type RoomAdmission struct {
	V            string `json:"v"`
	GlobalRoomID string `json:"global_room_id"`
	NetworkID    string `json:"network_id"`
	Fingerprint  string `json:"fingerprint"`
	PublicKey    string `json:"public_key"`
	CreatedAt    string `json:"created_at"`
}

RoomAdmission is what a joining member signs when it redeems a room invite: "network NetworkID, holding this key, asks to join this room". The home pins the key over the invite's pairing and adds the network to the control log with the role the invite granted.

func VerifyRoomAdmission added in v0.1.22 

func VerifyRoomAdmission(signed SignedRoomAdmission) (RoomAdmission, error)

VerifyRoomAdmission strictly parses an admission and checks it is signed by the key it names (proof of possession; who holds it is the home's call, by the invite's pairing).

type RoomControlEvent added in v0.1.22 

type RoomControlEvent struct {
	V            string `json:"v"`
	GlobalRoomID string `json:"global_room_id"`
	Seq          int64  `json:"seq"`
	Epoch        int64  `json:"epoch"`
	PrevHash     string `json:"prev_hash,omitempty"`
	Kind         string `json:"kind"`
	NetworkID    string `json:"network_id,omitempty"`
	Fingerprint  string `json:"fingerprint,omitempty"`
	PublicKey    string `json:"public_key,omitempty"`
	Role         string `json:"role,omitempty"`
	History      string `json:"history,omitempty"`
	CreatedAt    string `json:"created_at"`
}

RoomControlEvent is one entry of a hub room's control log. Seq starts at 1 (genesis) and every event opens a new membership epoch equal to its seq.

NetworkID names the subject network (for genesis: the home itself). Fingerprint and PublicKey are the subject's key (genesis, add); the home introduces member keys to every other member this way.

func ParseRoomControlUnverified added in v0.1.22 

func ParseRoomControlUnverified(signed SignedRoomControl) (RoomControlEvent, string, error)

ParseRoomControlUnverified strictly parses a control event without checking its signature (used to read the key a genesis names).

func VerifyRoomControl added in v0.1.22 

func VerifyRoomControl(signed SignedRoomControl, homeKey ed25519.PublicKey) (RoomControlEvent, string, error)

VerifyRoomControl strictly parses a control event and checks the home's signature. Chain, epoch and membership rules are the caller's.

type RoomControlPage added in v0.1.22 

type RoomControlPage struct {
	GlobalRoomID string              `json:"global_room_id"`
	Events       []SignedRoomControl `json:"events"`
	// More means the log continues after the last event (pages are bounded
	// by MaxRoomSyncPageBytes); ask again after its seq.
	More bool `json:"more,omitempty"`
}

RoomControlPage is GET /v1/hub/control's response.

type RoomFederation added in v0.1.14 

type RoomFederation struct {
	Mode     string
	Pairings []string
}

RoomFederation controls which configured pairings may learn about and relay a room. It encodes as "none", "all", or an array of pairing IDs.

func DefaultRoomFederation added in v0.1.14 

func DefaultRoomFederation() *RoomFederation

func NormalizeRoomFederation added in v0.1.14 

func NormalizeRoomFederation(federation *RoomFederation) RoomFederation

func ParseRoomFederation added in v0.1.14 

func ParseRoomFederation(data []byte) (*RoomFederation, error)

func (RoomFederation) MarshalJSON added in v0.1.14 

func (f RoomFederation) MarshalJSON() ([]byte, error)

func (RoomFederation) MarshalYAML added in v0.1.14 

func (f RoomFederation) MarshalYAML() (any, error)

func (*RoomFederation) UnmarshalJSON added in v0.1.14 

func (f *RoomFederation) UnmarshalJSON(data []byte) error

func (*RoomFederation) UnmarshalYAML added in v0.1.14 

func (f *RoomFederation) UnmarshalYAML(node *yaml.Node) error

type RoomFollow added in v0.1.20 

type RoomFollow struct {
	ID            string `json:"id"`
	RemoteBaseURL string `json:"remote_base_url"`
	RemoteRoomID  string `json:"remote_room_id"`
}

type RoomLeaveRequest added in v0.1.22 

type RoomLeaveRequest struct {
	GlobalRoomID string `json:"global_room_id"`
}

RoomLeaveRequest is POST /v1/hub/leave: the caller's network leaves.

type RoomPage 

type RoomPage struct {
	Rooms []Room   `json:"rooms"`
	Page  PageInfo `json:"page"`
}

type RoomReceipt added in v0.1.22 

type RoomReceipt struct {
	V               string `json:"v"`
	GlobalRoomID    string `json:"global_room_id"`
	HubEpoch        int64  `json:"hub_epoch"`
	MembershipEpoch int64  `json:"membership_epoch"`
	RoomSeq         int64  `json:"room_seq"`
	EventID         string `json:"event_id"`
	PrevReceiptHash string `json:"prev_receipt_hash,omitempty"`
}

RoomReceipt is the home's signed statement that it placed event EventID at RoomSeq under the given epochs. PrevReceiptHash chains receipts so a home cannot silently rewrite order a member has already seen.

func VerifyRoomReceipt added in v0.1.22 

func VerifyRoomReceipt(signed SignedRoomReceipt, homeKey ed25519.PublicKey) (RoomReceipt, string, error)

VerifyRoomReceipt strictly parses a receipt and checks the home signature.

type RoomSyncEntry added in v0.1.22 

type RoomSyncEntry struct {
	Receipt  SignedRoomReceipt   `json:"receipt"`
	Message  *SendMessageRequest `json:"message,omitempty"`
	Withheld string              `json:"withheld,omitempty"`
}

RoomSyncEntry is one placed room seq. Message is nil for a seq the caller may not see (placed while it was not a member, or before its join in a from_join room): the receipt alone keeps the chain verifiable.

The message carries no receipt of its own in a page (Receipt is the one): that keeps an entry no larger than the live delivery of the same message. Withheld names why a visible message is missing (RoomSyncWithheldTooLarge).

type RoomSyncPage added in v0.1.22 

type RoomSyncPage struct {
	GlobalRoomID string              `json:"global_room_id"`
	Control      []SignedRoomControl `json:"control"`
	Entries      []RoomSyncEntry     `json:"entries"`
	ThroughSeq   int64               `json:"through_seq"`
	More         bool                `json:"more"`
}

RoomSyncPage is GET /v1/hub/sync's response. ThroughSeq is the last room seq this page accounts for (Entries cover every seq after the request's cursor up to it); More means a further page exists. Control carries the control events after the request's control cursor that the caller may read, so one round trip brings the roster up to the entries' epochs.

type SecretString added in v0.1.14 

type SecretString string

SecretString holds plaintext that must never be exposed by normal serialization or formatting. Reveal is the sole explicit escape hatch for code that must send the secret to its intended destination.

func NewSecretString added in v0.1.14 

func NewSecretString(plaintext string) SecretString

NewSecretString constructs a SecretString from plaintext supplied by a trusted caller, such as a config decoder or command-line flag.

func (SecretString) GoString added in v0.1.14 

func (SecretString) GoString() string

GoString prevents %#v from formatting the plaintext.

func (SecretString) MarshalJSON added in v0.1.14 

func (SecretString) MarshalJSON() ([]byte, error)

MarshalJSON prevents a SecretString from leaking into API responses.

func (SecretString) MarshalYAML added in v0.1.14 

func (SecretString) MarshalYAML() (interface{}, error)

MarshalYAML prevents a SecretString from leaking into generated YAML.

func (SecretString) Reveal added in v0.1.14 

func (s SecretString) Reveal() string

Reveal returns the plaintext. Callers should keep its use at the immediate boundary where the secret is required.

func (SecretString) String added in v0.1.14 

func (SecretString) String() string

String prevents fmt and slog from formatting the plaintext.

func (*SecretString) UnmarshalJSON added in v0.1.14 

func (s *SecretString) UnmarshalJSON(data []byte) error

UnmarshalJSON accepts a plaintext JSON string when loading trusted input.

func (*SecretString) UnmarshalYAML added in v0.1.14 

func (s *SecretString) UnmarshalYAML(value *yaml.Node) error

UnmarshalYAML accepts a plaintext YAML string when loading trusted input.

type SendMessageRequest 

type SendMessageRequest struct {
	ID       string        `json:"id,omitempty"`
	Origin   MessageOrigin `json:"origin,omitempty"`
	Target   Target        `json:"target"`
	From     Actor         `json:"from"`
	Parts    []Part        `json:"parts"`
	Mentions []string      `json:"mentions,omitempty"`
	// CauseEventIDs additively threads causal-event parentage (see
	// pkg/protocol/causal.go) through to the message.accepted event stamped
	// once this request durably lands. It is caller-supplied context, never
	// derived from it: harnesses such as daimon's turn harness set this, the
	// model never does.
	CauseEventIDs []string `json:"cause_event_ids,omitempty"`
	// Envelope is the origin network's signed statement of this message,
	// sent beside it on pairing relays (moltnet.envelope.v1). Receivers
	// accept it only from pair-scoped credentials; local callers cannot
	// supply one.
	Envelope *SignedEnvelope `json:"envelope,omitempty"`
	// Receipt is the room home's signed placement of a hub-room message,
	// sent only by a home forwarding to its members.
	Receipt *SignedRoomReceipt `json:"receipt,omitempty"`
}

type SignedEnvelope added in v0.1.22 

type SignedEnvelope struct {
	Envelope  string `json:"envelope"`
	PublicKey string `json:"public_key"`
	Signature string `json:"signature"`
}

SignedEnvelope travels beside a relayed message. Envelope is the base64url of the exact canonical bytes that were digested and signed, so no JSON re-encoding on the way (HTML escaping, key order) can change them.

func SignEnvelope added in v0.1.22 

func SignEnvelope(envelope MessageEnvelope, publicKey ed25519.PublicKey, sign func([]byte) []byte) (SignedEnvelope, string, error)

SignEnvelope encodes, digests and signs an envelope. sign is the origin network's Ed25519 signer, so private keys never cross this package.

type SignedRoomAdmission added in v0.1.22 

type SignedRoomAdmission struct {
	Admission string `json:"admission"`
	Signature string `json:"signature"`
}

SignedRoomAdmission is POST /v1/hub/admit's body.

func SignRoomAdmission added in v0.1.22 

func SignRoomAdmission(admission RoomAdmission, sign func([]byte) []byte) (SignedRoomAdmission, error)

SignRoomAdmission encodes and signs an admission with the joiner's key.

type SignedRoomControl added in v0.1.22 

type SignedRoomControl struct {
	Control   string `json:"control"`
	Signature string `json:"signature"`
}

SignedRoomControl carries the exact canonical bytes the home signed.

func SignRoomControl added in v0.1.22 

func SignRoomControl(event RoomControlEvent, sign func([]byte) []byte) (SignedRoomControl, string, error)

SignRoomControl encodes, digests and signs a control event with the home key.

type SignedRoomReceipt added in v0.1.22 

type SignedRoomReceipt struct {
	Receipt   string `json:"receipt"`
	Signature string `json:"signature"`
}

SignedRoomReceipt travels beside a home-forwarded message.

func SignRoomReceipt added in v0.1.22 

func SignRoomReceipt(receipt RoomReceipt, sign func([]byte) []byte) (SignedRoomReceipt, string, error)

SignRoomReceipt encodes, digests and signs a receipt with the home key.

type Target 

type Target struct {
	Kind            string   `json:"kind"`
	RoomID          string   `json:"room_id,omitempty"`
	ThreadID        string   `json:"thread_id,omitempty"`
	ParentMessageID string   `json:"parent_message_id,omitempty"`
	DMID            string   `json:"dm_id,omitempty"`
	ParticipantIDs  []string `json:"participant_ids,omitempty"`
}

type Thread 

type Thread struct {
	ID              string    `json:"id"`
	NetworkID       string    `json:"network_id,omitempty"`
	FQID            string    `json:"fqid,omitempty"`
	RoomID          string    `json:"room_id"`
	ParentMessageID string    `json:"parent_message_id,omitempty"`
	MessageCount    int       `json:"message_count"`
	LastMessageAt   time.Time `json:"last_message_at,omitempty"`
}

type ThreadPage 

type ThreadPage struct {
	Threads []Thread `json:"threads"`
	Page    PageInfo `json:"page"`
}

type UpdateRoomMembersRequest 

type UpdateRoomMembersRequest struct {
	Add    []string `json:"add,omitempty"`
	Remove []string `json:"remove,omitempty"`
}

type WakeFailureDetails added in v0.1.14 

type WakeFailureDetails struct {
	Attempts       int    `json:"attempts,omitempty"`
	Classification string `json:"classification,omitempty"`
}

WakeFailureDetails carries the retry evidence a bridge control-delivery attempt gathered before giving up on a wake, so it travels alongside the terminal agent.wake.failed event instead of only living in a log line. Connection-death wake failures (internal/transport/attach.go) pass the zero value: they never attempted a classified retry.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.