Observed since 20 Oct, 17:56 UTC
No superseded metadata states collected. Unchanged observations do not create new revisions.
1-z-2
1-z-2 relay SDK — one file, zero dependencies, browsers and Node 22+. Published as an integrity mirror: at matching versions client.js is byte-identical to GET /sdk.js on any 1-z-2 relay.
The SDK for the 1-z-2 relay network — one file, zero dependencies, runs in browsers and Node 22+.
You don't normally install this. A 1-z-2 app vendors the SDK straight from its relay:
curl -fsSL https://YOUR-RELAY/sdk.js -o relay-client.js
This package is the integrity mirror: at matching versions, its
client.js is byte-identical to what any 1-z-2 relay serves at GET /sdk.js.
Because npm is a registry neither you nor the relay operator controls, a
vendored copy can be checked against it.
V=$(grep -m1 SDK_VERSION relay-client.js | cut -d'"' -f2)
npm pack 1-z-2@$V
tar -xOf 1-z-2-$V.tgz package/client.js | diff - relay-client.js
No output means the bytes match.
import { RelayClient } from "./relay-client.js";
const relay = await RelayClient.connect({
handle: "you",
relayUrl: "https://YOUR-RELAY",
});
await relay.publish({
name: "recipe",
direction: "send",
description: "a cooking recipe with ingredients and steps",
example: { title: "Pancakes", ingredients: ["2 cups flour"], steps: ["Mix", "Fry"] },
});
const result = await relay.send("jane", "recipe", payload);
relay.onReceive((msg) => {
// msg.payload arrives already translated into YOUR shape
});
The full integration guide is served by every relay at GET /integrate.md.
An app that is not JavaScript needs no SDK at all: GET /integrate-http.md
gives the same steps as plain, signed web requests. The operator's claims —
each paired with a way to check it — are at
1-z-2.com/trust.
client.d.ts ships in this package and declares the whole public surface of
client.js. Every relay also serves it beside the SDK, so a vendored copy can
have types without npm:
curl -fsSL https://YOUR-RELAY/sdk.d.ts -o relay-client.d.ts
Saved next to relay-client.js, TypeScript picks it up by name.
In one sentence: use this file and embed it in your own application, free of charge and without asking, as long as you do not modify it or republish it as a separate work. This package is the one stated exception to "no republishing", because it exists to verify vendored copies. Full terms in LICENSE. © 2026 Zugaba Limited.
Download counts and popularity will appear here as the collector receives them.
Declarations describe requirements; they are not a resolved dependency graph.
Source distribution
{
"shasum": "8575a565e35a72cd0d71dfecd95543f8d7bbcf37",
"tarball": "https://registry.npmjs.org/1-z-2/-/1-z-2-1.3.0.tgz",
"fileCount": 4,
"integrity": "sha512-h2cPZsds8PiDzbDVHpVQ2VCMsm3ruHRU9X4Pikq9VNKnFcEI1mtRyeOJ1aemtQi5erA9GXKRpYhPHAJWMtz1iw==",
"signatures": [
{
"sig": "MEYCIQC/wu5CD/DRORqTmwGl/D5bag4C81GwVn3LGgRd6soAUAIhAIzl14imCZnL0vT6tHnkAr4Nl4rgTW244jpsZCZk3p5g",
"keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"
}
],
"unpackedSize": 52524
}Observed since 20 Oct, 17:56 UTC
No superseded metadata states collected. Unchanged observations do not create new revisions.
package_version:256c5220596ac6646bd7c72e8ae96fbe9a63def8fdd2c0adbba8cf543285ce0d