@7h3/protocol 0.5.4 → 0.5.6

package/index.js

@@ -107,7 +107,7 @@ async function b(e, t) {
 async function x(e, t, n) {
 	return ue(e, t, n);
 }
-async function me(e, t, n = "local-dev-key") {
+async function S(e, t, n = "local-dev-key") {
 	let r = await se(_(e), t);
 	return {
 		...e,
@@ -118,13 +118,13 @@ async function me(e, t, n = "local-dev-key") {
 		}
 	};
 }
-async function S(e, t) {
+async function C(e, t) {
 	return !e.signature || e.signature.alg !== "HS256" ? !1 : ce(_({
 		header: e.header,
 		body: e.body
 	}), e.signature.value, t);
 }
-async function C(e, t, n = "local-ed25519-key") {
+async function w(e, t, n = "local-ed25519-key") {
 	let r = await le(_(e), t);
 	return {
 		...e,
@@ -135,21 +135,21 @@ async function C(e, t, n = "local-ed25519-key") {
 		}
 	};
 }
-async function w(e, t) {
+async function T(e, t) {
 	return !e.signature || e.signature.alg !== "ED25519" ? !1 : ue(_({
 		header: e.header,
 		body: e.body
 	}), e.signature.value, t);
 }
-async function he(e, t) {
-	return !e.signature || e.signature.alg !== t.alg ? !1 : t.alg === "HS256" ? S(e, t.secret) : w(e, t.publicKey);
+async function me(e, t) {
+	return !e.signature || e.signature.alg !== t.alg ? !1 : t.alg === "HS256" ? C(e, t.secret) : T(e, t.publicKey);
 }
-async function ge(e, t, n) {
+async function he(e, t, n) {
 	return !t || t.alg !== n.alg ? !1 : n.alg === "HS256" ? fe(e, t.value, n.secret) : x(e, t.value, n.publicKey);
 }
-var _e = 864e5;
-function T(e, t = Date.now()) {
-	let n = [], r = e.header ?? {}, i = e.body ?? {}, a = typeof r.version == "string" ? r.version : "", o = typeof r.messageId == "string" ? r.messageId : "", s = typeof r.sender == "string" ? r.sender : "", c = typeof r.nonce == "string" ? r.nonce : "", l = typeof r.timestampMs == "number" ? r.timestampMs : 0, u = typeof r.ttlMs == "number" ? r.ttlMs : 0, d = typeof i.content == "string" ? i.content : "";
+var ge = 864e5;
+function E(e, t = Date.now()) {
+	let n = [], r = e.header ?? {}, i = e.body ?? {}, a = typeof r.version == "string" ? r.version : "", o = typeof r.messageId == "string" ? r.messageId : "", s = typeof r.sender == "string" ? r.sender : "", c = typeof r.nonce == "string" ? r.nonce : "", l = typeof r.timestampMs == "number" && Number.isFinite(r.timestampMs) ? r.timestampMs : NaN, u = typeof r.ttlMs == "number" && Number.isFinite(r.ttlMs) ? r.ttlMs : NaN, d = typeof i.content == "string" ? i.content : "";
 	return a !== "7h3/0.1" && n.push({
 		level: "error",
 		message: `Unsupported protocol version '${a}'`
@@ -162,13 +162,19 @@ function T(e, t = Date.now()) {
 	}), c.trim() || n.push({
 		level: "error",
 		message: "Missing nonce — replay protection requires a unique nonce per message"
-	}), u <= 0 && n.push({
+	}), Number.isFinite(l) || n.push({
+		level: "error",
+		message: "timestampMs must be a finite number"
+	}), Number.isFinite(u) ? (u <= 0 && n.push({
 		level: "error",
 		message: "ttlMs must be greater than zero"
 	}), u > 864e5 && n.push({
 		level: "error",
-		message: `ttlMs exceeds maximum allowed ${_e} ms`
-	}), l + u < t && n.push({
+		message: `ttlMs exceeds maximum allowed ${ge} ms`
+	})) : n.push({
+		level: "error",
+		message: "ttlMs must be a finite number"
+	}), Number.isFinite(l) && Number.isFinite(u) && l + u < t && n.push({
 		level: "error",
 		message: "Message TTL expired"
 	}), d.trim() || n.push({
@@ -176,7 +182,7 @@ function T(e, t = Date.now()) {
 		message: "Empty content payload"
 	}), n;
 }
-function E(e) {
+function D(e) {
 	let t = e.nowMs ?? Date.now();
 	return {
 		header: {
@@ -198,12 +204,12 @@ function E(e) {
 }
 //#endregion
 //#region src/protocolBinary.ts
-var ve = [
+var _e = [
 	65,
 	73,
 	80,
 	66
-], ye = Uint8Array.from(ve), be = 1, xe = 1024 * 1024, Se = 1, Ce = 2, we = 4, Te = 8, Ee = new TextEncoder(), De = new TextDecoder(), Oe = /* @__PURE__ */ new Set([
+], ve = Uint8Array.from(_e), ye = 1, be = 1024 * 1024, xe = 1, Se = 2, Ce = 4, we = 8, Te = new TextEncoder(), Ee = new TextDecoder(), De = /* @__PURE__ */ new Set([
 	"PING",
 	"PONG",
 	"CAPS",
@@ -211,25 +217,25 @@ var ve = [
 	"RESULT",
 	"ERROR"
 ]);
+function Oe(e) {
+	return Te.encode(e);
+}
 function ke(e) {
-	return Ee.encode(e);
+	return Ee.decode(e);
 }
 function Ae(e) {
-	return De.decode(e);
-}
-function je(e) {
 	return e === "ED25519" ? 2 : 1;
 }
-function Me(e) {
+function je(e) {
 	return e === 1 ? "HS256" : e === 2 ? "ED25519" : null;
 }
-function D(e) {
-	return { bytes: ke(e) };
-}
 function O(e) {
+	return { bytes: Oe(e) };
+}
+function k(e) {
 	return e ? 4 + e.bytes.byteLength : 0;
 }
-var Ne = class {
+var Me = class {
 	bytes;
 	view;
 	offset = 0;
@@ -254,7 +260,7 @@ var Ne = class {
 	finish() {
 		return this.bytes;
 	}
-}, Pe = class {
+}, Ne = class {
 	bytes;
 	offset = 0;
 	constructor(e) {
@@ -285,14 +291,14 @@ var Ne = class {
 	}
 	readString() {
 		let e = this.readU32();
-		return Ae(this.readBytes(e));
+		return ke(this.readBytes(e));
 	}
 };
-function Fe(e) {
-	let t = (e.header.recipient ? Se : 0) | (e.body.capability ? Ce : 0) | (e.body.correlationId ? we : 0) | (e.signature ? Te : 0), n = D(e.header.version), r = D(e.header.messageId), i = D(e.header.sender), a = D(e.header.nonce), o = D(e.body.intent), s = D(e.body.content), c = e.header.recipient ? D(e.header.recipient) : null, l = e.body.capability ? D(e.body.capability) : null, u = e.body.correlationId ? D(e.body.correlationId) : null, d = e.signature ? D(e.signature.keyId) : null, f = e.signature ? D(e.signature.value) : null, p = new Ne(ye.byteLength + 1 + 1 + 8 + 4 + O(n) + O(r) + O(i) + O(a) + O(o) + O(s) + O(c) + O(l) + O(u) + +!!e.signature + O(d) + O(f));
-	return p.writeBytes(ye), p.writeU8(be), p.writeU8(t), p.writeU64(e.header.timestampMs), p.writeU32(e.header.ttlMs), p.writeString(n), p.writeString(r), p.writeString(i), p.writeString(a), p.writeString(o), p.writeString(s), c && p.writeString(c), l && p.writeString(l), u && p.writeString(u), e.signature && d && f && (p.writeU8(je(e.signature.alg)), p.writeString(d), p.writeString(f)), p.finish();
+function Pe(e) {
+	let t = (e.header.recipient ? xe : 0) | (e.body.capability ? Se : 0) | (e.body.correlationId ? Ce : 0) | (e.signature ? we : 0), n = O(e.header.version), r = O(e.header.messageId), i = O(e.header.sender), a = O(e.header.nonce), o = O(e.body.intent), s = O(e.body.content), c = e.header.recipient ? O(e.header.recipient) : null, l = e.body.capability ? O(e.body.capability) : null, u = e.body.correlationId ? O(e.body.correlationId) : null, d = e.signature ? O(e.signature.keyId) : null, f = e.signature ? O(e.signature.value) : null, p = new Me(ve.byteLength + 1 + 1 + 8 + 4 + k(n) + k(r) + k(i) + k(a) + k(o) + k(s) + k(c) + k(l) + k(u) + +!!e.signature + k(d) + k(f));
+	return p.writeBytes(ve), p.writeU8(ye), p.writeU8(t), p.writeU64(e.header.timestampMs), p.writeU32(e.header.ttlMs), p.writeString(n), p.writeString(r), p.writeString(i), p.writeString(a), p.writeString(o), p.writeString(s), c && p.writeString(c), l && p.writeString(l), u && p.writeString(u), e.signature && d && f && (p.writeU8(Ae(e.signature.alg)), p.writeString(d), p.writeString(f)), p.finish();
 }
-function Ie(e, t = {}) {
+function Fe(e, t = {}) {
 	try {
 		let n = t.maxFrameBytes ?? 1048576;
 		if (e.byteLength > n) return {
@@ -303,13 +309,13 @@ function Ie(e, t = {}) {
 			}],
 			envelope: null
 		};
-		let r = new Pe(e);
+		let r = new Ne(e);
 		if ([
 			r.readU8(),
 			r.readU8(),
 			r.readU8(),
 			r.readU8()
-		].some((e, t) => e !== ve[t])) return {
+		].some((e, t) => e !== _e[t])) return {
 			ok: !1,
 			diagnostics: [{
 				level: "error",
@@ -318,7 +324,7 @@ function Ie(e, t = {}) {
 			envelope: null
 		};
 		let i = r.readU8();
-		if (i !== be) return {
+		if (i !== ye) return {
 			ok: !1,
 			diagnostics: [{
 				level: "error",
@@ -348,7 +354,7 @@ function Ie(e, t = {}) {
 			}],
 			envelope: null
 		};
-		if (!Oe.has(c.body.intent)) return {
+		if (!De.has(c.body.intent)) return {
 			ok: !1,
 			diagnostics: [{
 				level: "error",
@@ -356,8 +362,8 @@ function Ie(e, t = {}) {
 			}],
 			envelope: null
 		};
-		if (a & Se && (c.header.recipient = r.readString()), a & Ce && (c.body.capability = r.readString()), a & we && (c.body.correlationId = r.readString()), a & Te) {
-			let e = r.readU8(), t = Me(e);
+		if (a & xe && (c.header.recipient = r.readString()), a & Se && (c.body.capability = r.readString()), a & Ce && (c.body.correlationId = r.readString()), a & we) {
+			let e = r.readU8(), t = je(e);
 			if (!t) return {
 				ok: !1,
 				diagnostics: [{
@@ -397,7 +403,7 @@ function Ie(e, t = {}) {
 }
 //#endregion
 //#region src/protocolReplay.ts
-var Le = class {
+var Ie = class {
 	items = [];
 	peek() {
 		return this.items[0];
@@ -430,10 +436,10 @@ var Le = class {
 			this.items[t] = l, this.items[r] = c, t = r;
 		}
 	}
-}, k = class {
+}, A = class {
 	entries = /* @__PURE__ */ new Map();
 	maxEntries;
-	expiries = new Le();
+	expiries = new Ie();
 	constructor(e = 1e4) {
 		this.maxEntries = e;
 	}
@@ -467,21 +473,23 @@ var Le = class {
 	consume(e, t = Date.now()) {
 		this.prune(t);
 		let n = this.makeKey(e), r = this.entries.get(n);
-		if (r && r > t) return {
+		if (r !== void 0 && (!Number.isFinite(r) || r > t)) return {
 			ok: !1,
 			reason: "Replay detected for sender/messageId/nonce"
 		};
-		this.entries.size >= this.maxEntries && this.evictOne();
 		let i = e.header.timestampMs + e.header.ttlMs;
-		return this.entries.set(n, i), this.expiries.push({
+		return Number.isFinite(i) ? (this.entries.size >= this.maxEntries && this.evictOne(), this.entries.set(n, i), this.expiries.push({
 			key: n,
 			expiresAt: i
-		}), { ok: !0 };
+		}), { ok: !0 }) : {
+			ok: !1,
+			reason: "Cannot track replay protection for a non-finite timestampMs/ttlMs"
+		};
 	}
 	consumeMany(e, t = Date.now()) {
 		return e.map((e) => this.consume(e, t));
 	}
-}, Re = class {
+}, Le = class {
 	store;
 	constructor(e) {
 		this.store = e;
@@ -491,9 +499,12 @@ var Le = class {
 	}
 	async consume(e, t = Date.now()) {
 		let n = this.makeKey(e), r = e.header.timestampMs + e.header.ttlMs;
-		return await this.store.reserve(n, r, t) ? { ok: !0 } : {
+		return Number.isFinite(r) ? await this.store.reserve(n, r, t) ? { ok: !0 } : {
 			ok: !1,
 			reason: "Replay detected for sender/messageId/nonce"
+		} : {
+			ok: !1,
+			reason: "Cannot track replay protection for a non-finite timestampMs/ttlMs"
 		};
 	}
 	async consumeMany(e, t = Date.now()) {
@@ -509,7 +520,7 @@ var Le = class {
 		}
 		return Promise.all(e.map((e) => this.consume(e, t)));
 	}
-}, ze = class {
+}, Re = class {
 	entries = /* @__PURE__ */ new Map();
 	maxEntries;
 	constructor(e = 512) {
@@ -539,20 +550,20 @@ var Le = class {
 		this.entries.delete(e);
 	}
 };
-function Be(e, t) {
+function ze(e, t) {
 	return `${t}|${e.alg}|${e.keyId}`;
 }
-function Ve(e) {
+function Be(e) {
 	if (!e || typeof e != "object") return !1;
 	let t = e;
 	return !!(t.header && t.body);
 }
-function He(e) {
+function Ve(e) {
 	if (!e || typeof e != "object") return !1;
 	let t = e;
 	return t.v === "7h3/0.1" && typeof t.mid == "string" && typeof t.i == "string";
 }
-function Ue(e) {
+function He(e) {
 	return {
 		header: {
 			version: e.v,
@@ -576,7 +587,7 @@ function Ue(e) {
 		} : void 0
 	};
 }
-function We(e) {
+function Ue(e) {
 	return {
 		v: e.header.version,
 		mid: e.header.messageId,
@@ -596,15 +607,15 @@ function We(e) {
 		} : void 0
 	};
 }
-function Ge(e) {
-	if (e instanceof Uint8Array) return Ie(e);
+function We(e) {
+	if (e instanceof Uint8Array) return Fe(e);
 	try {
 		let t = JSON.parse(e);
-		return He(t) ? {
+		return Ve(t) ? {
 			ok: !0,
 			diagnostics: [],
-			envelope: Ue(t)
-		} : Ve(t) ? {
+			envelope: He(t)
+		} : Be(t) ? {
 			ok: !0,
 			diagnostics: [],
 			envelope: t
@@ -627,20 +638,20 @@ function Ge(e) {
 		};
 	}
 }
-function Ke(e, t = "json") {
-	return t === "binary" ? Fe(e) : JSON.stringify(t === "compact" ? We(e) : e);
+function j(e, t = "json") {
+	return t === "binary" ? Pe(e) : JSON.stringify(t === "compact" ? Ue(e) : e);
 }
-function qe(e, t = "compact") {
-	return JSON.stringify(t === "compact" ? e.map(We) : e);
+function Ge(e, t = "compact") {
+	return JSON.stringify(t === "compact" ? e.map(Ue) : e);
 }
-function Je(e) {
+function Ke(e) {
 	try {
 		let t = JSON.parse(e);
-		return Array.isArray(t) ? t.map((e) => He(e) ? {
+		return Array.isArray(t) ? t.map((e) => Ve(e) ? {
 			ok: !0,
 			diagnostics: [],
-			envelope: Ue(e)
-		} : Ve(e) ? {
+			envelope: He(e)
+		} : Be(e) ? {
 			ok: !0,
 			diagnostics: [],
 			envelope: e
@@ -670,7 +681,7 @@ function Je(e) {
 		}];
 	}
 }
-async function A(e, t = {}) {
+async function M(e, t = {}) {
 	let n = t.nowMs ?? Date.now(), r = t.requireSignature ?? !0, i = t.maxClockSkewMs ?? 3e4;
 	async function a(e) {
 		t.telemetry && await t.telemetry({
@@ -678,7 +689,7 @@ async function A(e, t = {}) {
 			...e
 		});
 	}
-	let o = typeof e == "string" || e instanceof Uint8Array ? Ge(e) : {
+	let o = typeof e == "string" || e instanceof Uint8Array ? We(e) : {
 		ok: !0,
 		diagnostics: [],
 		envelope: e
@@ -688,7 +699,7 @@ async function A(e, t = {}) {
 		phase: "decoded",
 		sender: o.envelope.header.sender,
 		messageId: o.envelope.header.messageId
-	}), o.envelope.header.timestampMs > n + i) {
+	}), !Number.isFinite(o.envelope.header.timestampMs) || o.envelope.header.timestampMs > n + i) {
 		let e = "Message timestamp exceeds allowed clock skew", t = [{
 			level: "error",
 			message: e
@@ -704,7 +715,7 @@ async function A(e, t = {}) {
 			envelope: o.envelope
 		};
 	}
-	let s = [...T(o.envelope, n)];
+	let s = [...E(o.envelope, n)];
 	if (s.some((e) => e.level === "error")) return await a({
 		phase: "rejected_validation",
 		sender: o.envelope.header.sender,
@@ -736,7 +747,7 @@ async function A(e, t = {}) {
 		diagnostics: s,
 		envelope: o.envelope
 	});
-	let c, l = o.envelope.signature, u = Be(l, o.envelope.header.sender);
+	let c, l = o.envelope.signature, u = ze(l, o.envelope.header.sender);
 	if (t.verificationMaterialCache && (c = t.verificationMaterialCache.get(u, n)), t.signatureResolver && (c ??= await t.signatureResolver(l, o.envelope.header.sender)), !c && l.alg === "HS256" && t.secretResolver) {
 		let e = await t.secretResolver(l.keyId, o.envelope.header.sender);
 		e && (c = {
@@ -761,7 +772,7 @@ async function A(e, t = {}) {
 		diagnostics: s,
 		envelope: o.envelope
 	};
-	if (!await ge(_({
+	if (!await he(_({
 		header: o.envelope.header,
 		body: o.envelope.body
 	}), o.envelope.signature, c)) return s.push({
@@ -803,7 +814,7 @@ async function A(e, t = {}) {
 		envelope: o.envelope
 	};
 }
-async function Ye(e, t = {}) {
+async function qe(e, t = {}) {
 	let n = Math.max(1, Math.floor(t.batchConcurrency ?? Infinity));
 	return (async (e) => {
 		let r = Array(e.length), i = 0, a = Number.isFinite(n) ? Math.min(n, e.length) : e.length;
@@ -812,48 +823,48 @@ async function Ye(e, t = {}) {
 				let n = i;
 				i += 1;
 				let a = e[n];
-				a && typeof a == "object" && "ok" in a && "diagnostics" in a && "envelope" in a ? r[n] = a : r[n] = await A(a, t);
+				a && typeof a == "object" && "ok" in a && "diagnostics" in a && "envelope" in a ? r[n] = a : r[n] = await M(a, t);
 			}
 		})), await t.telemetry?.({
 			phase: "batch_summary",
 			nowMs: t.nowMs ?? Date.now(),
 			reason: `items=${e.length};accepted=${r.filter((e) => e?.ok).length}`
 		}), r;
-	})(typeof e == "string" ? Je(e).map((e) => e.ok && e.envelope ? e.envelope : e) : e);
+	})(typeof e == "string" ? Ke(e).map((e) => e.ok && e.envelope ? e.envelope : e) : e);
 }
-var Xe = class {
+var Je = class {
 	options;
 	constructor(e = {}) {
 		this.options = {
 			...e,
-			replayCache: e.replayCache ?? new k(),
-			verificationMaterialCache: e.verificationMaterialCache ?? new ze()
+			replayCache: e.replayCache ?? new A(),
+			verificationMaterialCache: e.verificationMaterialCache ?? new Re()
 		};
 	}
 	receive(e, t = Date.now()) {
-		return A(e, {
+		return M(e, {
 			...this.options,
 			nowMs: t
 		});
 	}
 	receiveBatch(e, t = Date.now()) {
-		return Ye(e, {
+		return qe(e, {
 			...this.options,
 			nowMs: t
 		});
 	}
 };
-async function Ze(e) {
-	return me(E(e), e.secret, e.keyId);
+async function Ye(e) {
+	return S(D(e), e.secret, e.keyId);
 }
 //#endregion
 //#region src/protocolCapabilities.ts
-var Qe = [
+var Xe = [
 	"binary",
 	"compact",
 	"json"
-], $e = ["fast", "receipt"];
-function et(e) {
+], Ze = ["fast", "receipt"];
+function Qe(e) {
 	return {
 		agent: e.agent,
 		capabilities: e.capabilities ?? [],
@@ -862,10 +873,10 @@ function et(e) {
 		ackModes: e.ackModes ?? ["receipt"]
 	};
 }
-function tt(e) {
+function $e(e) {
 	return JSON.stringify(e);
 }
-function nt(e) {
+function et(e) {
 	try {
 		let t = JSON.parse(e);
 		return typeof t.agent != "string" || !Array.isArray(t.capabilities) || !Array.isArray(t.wireFormats) || !Array.isArray(t.ackModes) || typeof t.batchMax != "number" || t.batchMax < 1 ? null : {
@@ -879,8 +890,8 @@ function nt(e) {
 		return null;
 	}
 }
-function rt(e, t) {
-	let n = Qe.find((n) => e.wireFormats.includes(n) && t.wireFormats.includes(n)) ?? "compact", r = $e.find((n) => e.ackModes.includes(n) && t.ackModes.includes(n)) ?? "receipt";
+function tt(e, t) {
+	let n = Xe.find((n) => e.wireFormats.includes(n) && t.wireFormats.includes(n)) ?? "compact", r = Ze.find((n) => e.ackModes.includes(n) && t.ackModes.includes(n)) ?? "receipt";
 	return {
 		wireFormat: n,
 		batchMax: Math.max(1, Math.min(e.batchMax, t.batchMax)),
@@ -889,7 +900,7 @@ function rt(e, t) {
 }
 //#endregion
 //#region src/keyRotation.ts
-var it = class {
+var nt = class {
 	records;
 	constructor(e = []) {
 		this.records = [...e];
@@ -908,12 +919,12 @@ var it = class {
 		return this.records.filter((r) => r.sender === t && r.keyId === e.keyId && r.alg === e.alg && r.status !== "revoked" && r.notBeforeMs <= n && n < r.notAfterMs).sort((e, t) => t.notBeforeMs - e.notBeforeMs)[0]?.material;
 	}
 };
-function at(e, t = () => Date.now()) {
+function rt(e, t = () => Date.now()) {
 	return async (n, r) => e.resolveVerificationMaterial(n, r, t());
 }
 //#endregion
 //#region src/protocolAgent.ts
-var ot = class {
+var it = class {
 	agentId;
 	outboundSecret;
 	keyId;
@@ -927,13 +938,13 @@ var ot = class {
 	resolveInboundSecret;
 	onTask;
 	constructor(e) {
-		this.agentId = e.agentId, this.outboundSecret = e.outboundSecret, this.keyId = e.keyId ?? `${e.agentId}-k1`, this.capabilities = e.capabilities ?? [], this.supportedWireFormats = e.supportedWireFormats ?? ["compact", "json"], this.maxBatchSize = e.maxBatchSize ?? 1, this.ackModes = e.ackModes ?? ["receipt"], this.requireSignature = e.requireSignature ?? !0, this.replayCache = e.replayCache ?? new k(), this.sharedSecrets = e.sharedSecrets ?? {}, this.resolveInboundSecret = e.resolveInboundSecret, this.onTask = e.onTask;
+		this.agentId = e.agentId, this.outboundSecret = e.outboundSecret, this.keyId = e.keyId ?? `${e.agentId}-k1`, this.capabilities = e.capabilities ?? [], this.supportedWireFormats = e.supportedWireFormats ?? ["compact", "json"], this.maxBatchSize = e.maxBatchSize ?? 1, this.ackModes = e.ackModes ?? ["receipt"], this.requireSignature = e.requireSignature ?? !0, this.replayCache = e.replayCache ?? new A(), this.sharedSecrets = e.sharedSecrets ?? {}, this.resolveInboundSecret = e.resolveInboundSecret, this.onTask = e.onTask;
 	}
 	async inboundSecretResolver(e, t) {
 		return this.resolveInboundSecret ? this.resolveInboundSecret(e, t) : this.sharedSecrets[t];
 	}
 	async createSignedIntent(e) {
-		return me(E({
+		return S(D({
 			sender: this.agentId,
 			recipient: e.recipient,
 			intent: e.intent,
@@ -947,7 +958,7 @@ var ot = class {
 		}), this.outboundSecret, this.keyId);
 	}
 	async receiveAndRespond(e, t = Date.now()) {
-		let n = await A(e, {
+		let n = await M(e, {
 			nowMs: t,
 			requireSignature: this.requireSignature,
 			replayCache: this.replayCache,
@@ -978,7 +989,7 @@ var ot = class {
 		if (e.body.intent === "CAPS") return this.createSignedIntent({
 			recipient: e.header.sender,
 			intent: "RESULT",
-			content: tt(et({
+			content: $e(Qe({
 				agent: this.agentId,
 				capabilities: this.capabilities,
 				wireFormats: this.supportedWireFormats,
@@ -1006,14 +1017,14 @@ var ot = class {
 		}
 		return null;
 	}
-}, st = class {
+}, at = class {
 	session;
 	wireFormat;
 	constructor(e) {
-		this.session = new ot(e), this.wireFormat = e.wireFormat ?? "compact";
+		this.session = new it(e), this.wireFormat = e.wireFormat ?? "compact";
 	}
 	toRaw(e) {
-		return Ke(e, this.wireFormat);
+		return j(e, this.wireFormat);
 	}
 	async createRawIntent(e) {
 		let t = await this.session.createSignedIntent(e);
@@ -1027,12 +1038,12 @@ var ot = class {
 		return r.response && await t(this.toRaw(r.response), r.response), r;
 	}
 };
-function ct(e) {
-	return new st(e);
+function ot(e) {
+	return new at(e);
 }
 //#endregion
 //#region src/frameworkAdapters.ts
-async function lt(e, t, n = {}) {
+async function st(e, t, n = {}) {
 	return e.createRawIntent({
 		recipient: n.recipient,
 		intent: "TASK",
@@ -1041,7 +1052,7 @@ async function lt(e, t, n = {}) {
 		correlationId: n.correlationId
 	});
 }
-function ut(e) {
+function ct(e) {
 	return {
 		content: e.body.content,
 		name: e.body.intent,
@@ -1055,7 +1066,7 @@ function ut(e) {
 		}
 	};
 }
-async function dt(e, t, n = {}) {
+async function lt(e, t, n = {}) {
 	return e.createRawIntent({
 		recipient: n.recipient,
 		intent: "TASK",
@@ -1064,7 +1075,7 @@ async function dt(e, t, n = {}) {
 		correlationId: n.correlationId
 	});
 }
-function ft(e) {
+function ut(e) {
 	return {
 		role: e.body.intent === "TASK" ? "user" : "assistant",
 		content: e.body.content,
@@ -1077,15 +1088,15 @@ function ft(e) {
 		}
 	};
 }
-function pt(e) {
+function dt(e) {
 	return `mcp.${e}`;
 }
-async function mt(e, t, n = {}) {
+async function ft(e, t, n = {}) {
 	async function r(e) {
 		n.onPolicyEvent && await n.onPolicyEvent(e);
 	}
 	if (n.allowedMethods && !n.allowedMethods.includes(t.method)) {
-		let e = n.methodToCapability ? n.methodToCapability(t.method) : pt(t.method), i = {
+		let e = n.methodToCapability ? n.methodToCapability(t.method) : dt(t.method), i = {
 			intent: "TASK",
 			recipient: n.recipient,
 			capability: e,
@@ -1100,7 +1111,7 @@ async function mt(e, t, n = {}) {
 			reason: "method_not_allowed"
 		}), Error(`JSON-RPC method '${t.method}' is not allowed`);
 	}
-	let i = n.methodToCapability ? n.methodToCapability(t.method) : pt(t.method), a = {
+	let i = n.methodToCapability ? n.methodToCapability(t.method) : dt(t.method), a = {
 		intent: "TASK",
 		recipient: n.recipient,
 		capability: i,
@@ -1154,7 +1165,7 @@ async function mt(e, t, n = {}) {
 		})
 	});
 }
-function ht(e, t, n = {}) {
+function pt(e, t, n = {}) {
 	if (e.body.intent === "ERROR") return {
 		jsonrpc: "2.0",
 		id: t,
@@ -1181,16 +1192,16 @@ function ht(e, t, n = {}) {
 }
 //#endregion
 //#region src/runtimePolicy.ts
-function gt(e) {
+function mt(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
-function _t(e, t) {
+function ht(e, t) {
 	if (typeof e != "string" || e.trim().length === 0) throw Error(`Invalid runtime policy: '${t}' must be a non-empty string`);
 	return e;
 }
-function vt(e) {
-	if (!gt(e)) throw Error("Invalid runtime policy: root must be an object");
-	let t = _t(e.version, "version"), n = _t(e.name, "name"), r = _t(e.status, "status");
+function gt(e) {
+	if (!mt(e)) throw Error("Invalid runtime policy: root must be an object");
+	let t = ht(e.version, "version"), n = ht(e.name, "name"), r = ht(e.status, "status");
 	return {
 		...e,
 		version: t,
@@ -1198,7 +1209,7 @@ function vt(e) {
 		status: r
 	};
 }
-function yt(e) {
+function _t(e) {
 	let t;
 	try {
 		t = JSON.parse(e);
@@ -1206,9 +1217,9 @@ function yt(e) {
 		let t = e instanceof Error ? e.message : String(e);
 		throw Error(`Invalid runtime policy JSON: ${t}`, { cause: e });
 	}
-	return vt(t);
+	return gt(t);
 }
-async function bt(e) {
+async function vt(e) {
 	if (typeof fetch == "function") {
 		let t = await fetch(e);
 		if (!t.ok) throw Error(`Failed to fetch runtime policy at '${e}': ${t.status} ${t.statusText}`);
@@ -1216,26 +1227,26 @@ async function bt(e) {
 	}
 	throw Error("No default runtime file reader available in this environment. Provide 'readTextFile' in loadRuntimePolicy(options).");
 }
-async function xt(e = {}) {
+async function yt(e = {}) {
 	let t = e.path ?? "AI_RUNTIME_POLICY.json";
-	return yt(await (e.readTextFile ?? bt)(t));
+	return _t(await (e.readTextFile ?? vt)(t));
 }
 //#endregion
 //#region src/policyEnforcer.ts
-function St(e, t) {
+function bt(e, t) {
 	if (!Array.isArray(e) || e.length !== 2) throw Error(`Invalid policy tuning range '${t}': expected [min,max]`);
 	let n = Number(e[0]), r = Number(e[1]);
 	if (!Number.isFinite(n) || !Number.isFinite(r) || n <= 0 || r < n) throw Error(`Invalid policy tuning range '${t}': expected positive ascending numbers`);
 	return [Math.floor(n), Math.floor(r)];
 }
-function Ct(e) {
+function xt(e) {
 	return e === "http" || e === "ws" || e === "http-binary" || e === "http-batch" || e === "http-binary-batch" || e === "ws-batch" || e === "ws-binary" || e === "ws-binary-batch";
 }
-function wt(e) {
+function St(e) {
 	let t = Number((e.slo_defaults ?? {}).drop_pct_max ?? .1), n = Number((e.slo_defaults ?? {}).p99_ms_max ?? 20), r = Number((e.tuning ?? {}).max_retry_attempts ?? 3), i = Array.isArray((e.tuning ?? {}).retriable_status_codes) ? (e.tuning ?? {}).retriable_status_codes.map((e) => Number(e)).filter((e) => Number.isFinite(e)) : [503], a = e.tuning ?? {}, o = a.batch_size, s = a.inflight_cap, c = a.retry_backoff_ms, l = (e) => ({
-		batchSizeRange: St(o?.[`${e}_traffic`], `batch_size.${e}_traffic`),
-		inflightCapRange: St(s?.[`${e}_traffic`], `inflight_cap.${e}_traffic`),
-		retryBackoffMsRange: St(c?.[`${e}_traffic`], `retry_backoff_ms.${e}_traffic`)
+		batchSizeRange: bt(o?.[`${e}_traffic`], `batch_size.${e}_traffic`),
+		inflightCapRange: bt(s?.[`${e}_traffic`], `inflight_cap.${e}_traffic`),
+		retryBackoffMsRange: bt(c?.[`${e}_traffic`], `retry_backoff_ms.${e}_traffic`)
 	});
 	function u(e) {
 		return e.concurrency >= 100 ? "http-binary-batch" : e.latencySensitive ? "ws-batch" : e.compatibilityFirst ? "http" : "ws-batch";
@@ -1272,28 +1283,28 @@ function wt(e) {
 		}
 	};
 }
-async function j(e = {}) {
-	let t = await xt(e);
+async function N(e = {}) {
+	let t = await yt(e);
 	return {
 		policy: t,
-		enforcer: wt(t)
+		enforcer: St(t)
 	};
 }
-function Tt(e) {
-	return Ct(e);
+function Ct(e) {
+	return xt(e);
 }
 //#endregion
 //#region src/mcpGateway.ts
-var Et = [
+var wt = [
 	"tools/call",
 	"resources/read",
 	"prompts/get"
 ];
-function Dt(e) {
+function Tt(e) {
 	return JSON.stringify(e);
 }
-function M(e, t, n) {
-	return Dt({
+function Et(e, t, n) {
+	return Tt({
 		jsonrpc: "2.0",
 		id: e,
 		error: {
@@ -1302,7 +1313,7 @@ function M(e, t, n) {
 		}
 	});
 }
-function Ot(e) {
+function Dt(e) {
 	let t = JSON.parse(e);
 	return t.jsonrpc !== "2.0" || typeof t.method != "string" || t.method.length === 0 || typeof t.id != "string" && typeof t.id != "number" ? null : {
 		jsonrpc: "2.0",
@@ -1311,30 +1322,30 @@ function Ot(e) {
 		params: t.params
 	};
 }
-function kt(e) {
+function Ot(e) {
 	return e.includes("not allowed") ? -32601 : e.includes("not authorized") ? -32001 : e.includes("rate-limited") ? -32002 : -32603;
 }
-function At(e) {
-	let t = e.gatewayAgentId ?? "agent.gateway", n = e.workerAgentId ?? "agent.worker", r = e.allowedMethods ?? Et, i = e.workerCapabilityPrefix ?? "mcp.", a = e.gatewayWireFormat ?? "compact", o = e.workerWireFormat ?? "compact";
+function kt(e) {
+	let t = e.gatewayAgentId ?? "agent.gateway", n = e.workerAgentId ?? "agent.worker", r = e.allowedMethods ?? wt, i = e.workerCapabilityPrefix ?? "mcp.", a = e.gatewayWireFormat ?? "compact", o = e.workerWireFormat ?? "compact";
 	async function s(t) {
 		e.onAuditEvent && await e.onAuditEvent({
 			...t,
 			timestampMs: Date.now()
 		});
 	}
-	let c = ct({
+	let c = ot({
 		agentId: t,
 		outboundSecret: e.sharedSecret,
 		sharedSecrets: { [n]: e.sharedSecret },
 		wireFormat: a
-	}), l = ct({
+	}), l = ot({
 		agentId: n,
 		outboundSecret: e.sharedSecret,
 		sharedSecrets: { [t]: e.sharedSecret },
 		wireFormat: o,
 		onTask: async (e) => ({
 			intent: "RESULT",
-			content: Dt({
+			content: Tt({
 				ok: !0,
 				capability: e.body.capability,
 				content: e.body.content
@@ -1347,12 +1358,12 @@ function At(e) {
 		if (!i) return null;
 		let a = null;
 		try {
-			let t = Ot(i);
+			let t = Dt(i);
 			if (!t) return await s({
 				phase: "request_error",
 				code: -32600,
 				message: "Invalid Request"
-			}), M(null, -32600, "Invalid Request");
+			}), Et(null, -32600, "Invalid Request");
 			a = t.id, await s({
 				phase: "request_received",
 				id: t.id,
@@ -1373,7 +1384,7 @@ function At(e) {
 						policy: e
 					});
 				}
-			}, u = await mt(c, t, o), d = null;
+			}, u = await ft(c, t, o), d = null;
 			if (await l.handleRaw(u, async (e) => {
 				d = e;
 			}), !d) return await s({
@@ -1382,7 +1393,7 @@ function At(e) {
 				method: t.method,
 				code: -32603,
 				message: "AIP worker did not produce a response"
-			}), M(a, -32603, "AIP worker did not produce a response");
+			}), Et(a, -32603, "AIP worker did not produce a response");
 			let f = await c.receiveRaw(d);
 			return !f.ok || !f.received ? (await s({
 				phase: "verification_failed",
@@ -1390,25 +1401,25 @@ function At(e) {
 				method: t.method,
 				code: -32603,
 				message: "AIP verification failed"
-			}), M(a, -32603, "AIP verification failed")) : (await s({
+			}), Et(a, -32603, "AIP verification failed")) : (await s({
 				phase: "request_success",
 				id: t.id,
 				method: t.method
-			}), Dt(ht(f.received, t.id)));
+			}), Tt(pt(f.received, t.id)));
 		} catch (e) {
-			let t = e instanceof Error ? e.message : "Internal error", n = kt(t);
+			let t = e instanceof Error ? e.message : "Internal error", n = Ot(t);
 			return await s({
 				phase: "request_error",
 				id: a,
 				code: n,
 				message: t
-			}), M(a, n, t);
+			}), Et(a, n, t);
 		}
 	} };
 }
-async function jt(e) {
-	if (!e.runtimePolicy?.enabled) return At(e);
-	let { enforcer: t } = await j(e.runtimePolicy.options);
+async function At(e) {
+	if (!e.runtimePolicy?.enabled) return kt(e);
+	let { enforcer: t } = await N(e.runtimePolicy.options);
 	t.assertInvariant({
 		signatureVerification: !0,
 		canonicalization: !0,
@@ -1420,7 +1431,7 @@ async function jt(e) {
 		latencySensitive: e.runtimePolicy.latencySensitive,
 		compatibilityFirst: e.runtimePolicy.compatibilityFirst
 	}), r = n.includes("binary") ? "binary" : "compact";
-	return At({
+	return kt({
 		...e,
 		gatewayWireFormat: r,
 		workerWireFormat: r,
@@ -1436,14 +1447,14 @@ async function jt(e) {
 }
 //#endregion
 //#region src/runtimePolicyManager.ts
-var Mt = class {
+var jt = class {
 	snapshot = null;
 	options;
 	constructor(e = {}) {
 		this.options = e;
 	}
 	async loadInitial() {
-		let e = await j(this.options);
+		let e = await N(this.options);
 		return this.snapshot = {
 			...e,
 			loadedAtMs: Date.now()
@@ -1456,7 +1467,7 @@ var Mt = class {
 	async refresh() {
 		let e = this.snapshot;
 		try {
-			let e = await j(this.options);
+			let e = await N(this.options);
 			return this.snapshot = {
 				...e,
 				loadedAtMs: Date.now()
@@ -1466,7 +1477,7 @@ var Mt = class {
 			throw t;
 		}
 	}
-}, Nt = {
+}, Mt = {
 	dev: {
 		environment: "dev",
 		mode: "ws-batch",
@@ -1492,12 +1503,12 @@ var Mt = class {
 		retryMaxAttempts: 3
 	}
 };
-function Pt(e) {
-	return Nt[e];
+function Nt(e) {
+	return Mt[e];
 }
 //#endregion
 //#region src/policyTelemetryFeedback.ts
-function Ft(e) {
+function Pt(e) {
 	let t = [], n = "normal";
 	return e.dropPct > .1 && (t.push("reduce inflight cap"), t.push("reduce batch size"), t.push("increase retry backoff"), e.mode === "http" && e.concurrency >= 100 && t.push("switch to http-binary-batch"), n = e.dropPct > 2 ? "critical" : "warn"), e.p99Ms > 20 && (t.push("reduce batch size"), t.push("run adaptive benchmark and re-baseline"), n === "normal" && (n = "warn"), e.p99Ms > 100 && (n = "critical")), {
 		severity: n,
@@ -1506,7 +1517,7 @@ function Ft(e) {
 }
 //#endregion
 //#region src/redisClient.ts
-var It = class {
+var Ft = class {
 	entries = /* @__PURE__ */ new Map();
 	now;
 	constructor(e = {}) {
@@ -1552,13 +1563,13 @@ var It = class {
 		};
 		return t;
 	}
-}, Lt = class {
+}, It = class {
 	keyPrefix;
 	client;
 	constructor(e = {}) {
 		if (this.keyPrefix = e.keyPrefix ?? "7h3:nonce:", e.client) this.client = e.client;
 		else {
-			let e = new It();
+			let e = new Ft();
 			this.client = {
 				set: (t, n, r) => e.set(t, n, {
 					nx: r?.nx,
@@ -1577,7 +1588,7 @@ var It = class {
 			px: Math.max(1, t)
 		}) === null;
 	}
-}, Rt = class {
+}, Lt = class {
 	nodes;
 	constructor(e) {
 		this.nodes = e;
@@ -1586,17 +1597,17 @@ var It = class {
 		return (await Promise.all(this.nodes.map((n) => n.check(e, t)))).some((e) => e);
 	}
 };
-function zt(e, t = {}) {
-	return Bt(e) ? Ht(e, t) : new Lt(e);
+function Rt(e, t = {}) {
+	return zt(e) ? Vt(e, t) : new It(e);
 }
-function Bt(e) {
+function zt(e) {
 	return typeof e == "object" && !!e && typeof e.set == "function" && (typeof e.pipeline == "function" || !("quit" in e));
 }
-function Vt(e) {
-	return new Rt(e.map((e) => new Lt({ redisUrl: e })));
+function Bt(e) {
+	return new Lt(e.map((e) => new It({ redisUrl: e })));
 }
-function Ht(e, t = {}) {
-	let n = t.keyPrefix ?? "aip:replay:", r = t.errorBehavior ?? "fallback", i = t.onDegraded, a = t.fallback ?? (r === "fallback" ? Ht(new It(), {
+function Vt(e, t = {}) {
+	let n = t.keyPrefix ?? "aip:replay:", r = t.errorBehavior ?? "fallback", i = t.onDegraded, a = t.fallback ?? (r === "fallback" ? Vt(new Ft(), {
 		keyPrefix: n,
 		errorBehavior: "reject"
 	}) : void 0);
@@ -1636,7 +1647,7 @@ function Ht(e, t = {}) {
 }
 //#endregion
 //#region src/revocation.ts
-var Ut = class {
+var Ht = class {
 	revoked = /* @__PURE__ */ new Map();
 	now;
 	constructor(e = {}) {
@@ -1653,7 +1664,7 @@ var Ut = class {
 		this.revoked.set(this.makeKey(e, t), n.untilMs ?? Infinity);
 	}
 };
-function Wt(e, t = {}) {
+function Ut(e, t = {}) {
 	let n = t.keyPrefix ?? "aip:revoked:", r = t.errorBehavior ?? "reject", i = t.cacheTtlMs ?? 5e3, a = t.onDegraded, o = t.now ?? (() => Date.now()), s = /* @__PURE__ */ new Map();
 	function c(e, t) {
 		return `${n}${e}${t}`;
@@ -1685,7 +1696,7 @@ function Wt(e, t = {}) {
 		}
 	};
 }
-function Gt(e, t, n = {}) {
+function Wt(e, t, n = {}) {
 	let r = n.nowMsProvider ?? (() => Date.now());
 	return async (n, i) => {
 		if (!await t.isRevoked(i, n.keyId, r())) return e(n, i);
@@ -1693,7 +1704,7 @@ function Gt(e, t, n = {}) {
 }
 //#endregion
 //#region src/mcpWrapper.ts
-function N(e, t, n) {
+function Gt(e, t, n) {
 	return {
 		jsonrpc: "2.0",
 		id: e,
@@ -1705,18 +1716,18 @@ function N(e, t, n) {
 }
 function Kt(e, t) {
 	return {
-		requireSignature: !0,
 		...e.receive,
+		requireSignature: !0,
 		replayCache: t
 	};
 }
 function qt(e, t) {
-	let n = t.wireFormat ?? "compact", r = t.ttlMs ?? 6e4, i = Kt(t, t.receive?.replayCache ?? new k());
+	let n = t.wireFormat ?? "compact", r = t.ttlMs ?? 6e4, i = Kt(t, t.receive?.replayCache ?? new A());
 	async function a(e) {
-		return Ke(await t.sign(e), n);
+		return j(await t.sign(e), n);
 	}
 	function o(e, n, i, o) {
-		return a(E({
+		return a(D({
 			sender: t.selfAgentId,
 			recipient: e,
 			intent: n,
@@ -1726,29 +1737,29 @@ function qt(e, t) {
 		}));
 	}
 	return async (n) => {
-		let r = await A(n, i), a = r.envelope?.header.sender, s = r.envelope?.header.messageId;
-		if (!r.ok || !r.envelope) return o(a, "ERROR", N(null, -32600, r.diagnostics.find((e) => e.level === "error")?.message ?? "AIP verification failed"), s);
-		if (r.envelope.header.recipient !== t.selfAgentId) return o(a, "ERROR", N(null, -32600, "Recipient mismatch: envelope not addressed to this agent"), s);
+		let r = await M(n, i), a = r.envelope?.header.sender, s = r.envelope?.header.messageId;
+		if (!r.ok || !r.envelope) return o(a, "ERROR", Gt(null, -32600, r.diagnostics.find((e) => e.level === "error")?.message ?? "AIP verification failed"), s);
+		if (r.envelope.header.recipient !== t.selfAgentId) return o(a, "ERROR", Gt(null, -32600, "Recipient mismatch: envelope not addressed to this agent"), s);
 		let c;
 		try {
 			c = JSON.parse(r.envelope.body.content);
 		} catch {
-			return o(a, "ERROR", N(null, -32700, "Parse error: envelope body is not JSON-RPC"), s);
+			return o(a, "ERROR", Gt(null, -32700, "Parse error: envelope body is not JSON-RPC"), s);
 		}
 		let l;
 		try {
 			l = await e(c);
 		} catch (e) {
-			l = N(c.id ?? null, -32603, e instanceof Error ? e.message : "Internal error");
+			l = Gt(c.id ?? null, -32603, e instanceof Error ? e.message : "Internal error");
 		}
 		return o(r.envelope.header.sender, "RESULT", l, s);
 	};
 }
 function Jt(e) {
-	let t = e.wireFormat ?? "compact", n = e.ttlMs ?? 6e4, r = Kt(e, e.receive?.replayCache ?? new k());
+	let t = e.wireFormat ?? "compact", n = e.ttlMs ?? 6e4, r = Kt(e, e.receive?.replayCache ?? new A());
 	return {
 		async encodeRequest(r) {
-			let i = E({
+			let i = D({
 				sender: e.selfAgentId,
 				recipient: e.peerAgentId,
 				intent: "TASK",
@@ -1756,12 +1767,12 @@ function Jt(e) {
 				ttlMs: n
 			});
 			return {
-				raw: Ke(await e.sign(i), t),
+				raw: j(await e.sign(i), t),
 				messageId: i.header.messageId
 			};
 		},
 		async decodeResponse(t, n = {}) {
-			let i = await A(t, r);
+			let i = await M(t, r);
 			if (!i.ok || !i.envelope) {
 				let e = i.diagnostics.find((e) => e.level === "error")?.message ?? "unknown";
 				throw Error(`AIP response verification failed: ${e}`);
@@ -2074,7 +2085,7 @@ var P = new TextEncoder(), an = new TextDecoder(), F = 0, on = 1, sn = 2, I = 3,
 				return t;
 			}
 			case ln: {
-				let e = this._decodeUint(n), t = {};
+				let e = this._decodeUint(n), t = Object.create(null);
 				for (let n = 0; n < e; n++) {
 					let e = this._decode();
 					t[String(e)] = this._decode();
@@ -2143,7 +2154,18 @@ function wn(e) {
 	}
 	return xn(r);
 }
-function Tn(e) {
+function L(e, t) {
+	if (typeof e != "string") throw Error(`decodeEnvelopeCbor: ${t} must be a string`);
+	return e;
+}
+function Tn(e, t) {
+	if (e !== void 0) return L(e, t);
+}
+function En(e, t) {
+	if (typeof e != "number" || !Number.isFinite(e)) throw Error(`decodeEnvelopeCbor: ${t} must be a finite number`);
+	return e;
+}
+function Dn(e) {
 	let t = Sn(e);
 	if (!t || typeof t != "object" || Array.isArray(t)) throw Error("decodeEnvelopeCbor: expected a map at top level");
 	let n = t, r = n[1];
@@ -2152,38 +2174,42 @@ function Tn(e) {
 	if (!a || typeof a != "object" || Array.isArray(a)) throw Error("decodeEnvelopeCbor: missing body map (key 2)");
 	let o = a, s = {
 		header: {
-			version: i[1],
-			messageId: i[2],
-			timestampMs: i[3],
-			ttlMs: i[4],
-			sender: i[5],
-			nonce: i[7]
+			version: L(i[1], "header.version"),
+			messageId: L(i[2], "header.messageId"),
+			timestampMs: En(i[3], "header.timestampMs"),
+			ttlMs: En(i[4], "header.ttlMs"),
+			sender: L(i[5], "header.sender"),
+			nonce: L(i[7], "header.nonce")
 		},
 		body: {
-			intent: o[1],
-			content: o[2]
-		}
-	};
-	i[6] !== void 0 && (s.header.recipient = i[6]), o[3] !== void 0 && (s.body.capability = o[3]), o[4] !== void 0 && (s.body.correlationId = o[4]);
-	let c = n[3];
-	if (c != null) {
-		if (typeof c != "object" || Array.isArray(c)) throw Error("decodeEnvelopeCbor: expected signature map at key 3");
-		let e = c;
+			intent: L(o[1], "body.intent"),
+			content: L(o[2], "body.content")
+		}
+	}, c = Tn(i[6], "header.recipient");
+	c !== void 0 && (s.header.recipient = c);
+	let l = Tn(o[3], "body.capability");
+	l !== void 0 && (s.body.capability = l);
+	let u = Tn(o[4], "body.correlationId");
+	u !== void 0 && (s.body.correlationId = u);
+	let d = n[3];
+	if (d != null) {
+		if (typeof d != "object" || Array.isArray(d)) throw Error("decodeEnvelopeCbor: expected signature map at key 3");
+		let e = d;
 		s.signature = {
-			alg: e[1],
-			keyId: e[2],
-			value: e[3]
+			alg: L(e[1], "signature.alg"),
+			keyId: L(e[2], "signature.keyId"),
+			value: L(e[3], "signature.value")
 		};
 	}
 	return s;
 }
 //#endregion
 //#region src/httpBinding.ts
-var En = "x-7h3-envelope";
-async function Dn(e, t, n) {
+var On = "x-7h3-envelope";
+async function kn(e, t, n) {
 	let r = t.headerName ?? "x-7h3-envelope", i = (Array.isArray(e["content-type"]) ? e["content-type"][0] : e["content-type"]) ?? "", a;
 	if (i.includes("7h3-cbor") && n instanceof Uint8Array) try {
-		a = Tn(n);
+		a = Dn(n);
 	} catch (e) {
 		return {
 			ok: !1,
@@ -2213,7 +2239,7 @@ async function Dn(e, t, n) {
 		detail: "missing required fields"
 	};
 	if (t.strictTtl ?? !0) {
-		let e = T(a).filter((e) => e.level === "error");
+		let e = E(a).filter((e) => e.level === "error");
 		if (e.length > 0) return {
 			ok: !1,
 			reason: "ttl-expired",
@@ -2228,7 +2254,7 @@ async function Dn(e, t, n) {
 			reason: "unknown-sender",
 			detail: o
 		};
-		if (!await w(a, e)) return {
+		if (!await T(a, e)) return {
 			ok: !1,
 			reason: "invalid-signature"
 		};
@@ -2239,7 +2265,7 @@ async function Dn(e, t, n) {
 			reason: "unknown-sender",
 			detail: a.signature.keyId
 		};
-		if (!await S(a, e)) return {
+		if (!await C(a, e)) return {
 			ok: !1,
 			reason: "invalid-signature"
 		};
@@ -2253,8 +2279,8 @@ async function Dn(e, t, n) {
 		envelope: a
 	};
 }
-async function On(e, t, n) {
-	let r = await C(e, t);
+async function An(e, t, n) {
+	let r = await w(e, t);
 	if (n?.format === "cbor") {
 		let e = wn(r);
 		return {
@@ -2264,13 +2290,13 @@ async function On(e, t, n) {
 	}
 	return { headers: { [n?.headerName ?? "x-7h3-envelope"]: JSON.stringify(r) } };
 }
-async function kn(e, t, n, r) {
-	let i = await me(e, t, n);
+async function jn(e, t, n, r) {
+	let i = await S(e, t, n);
 	return { headers: { [r?.headerName ?? "x-7h3-envelope"]: JSON.stringify(i) } };
 }
-function An(e) {
+function Mn(e) {
 	return async function(t, n, r) {
-		let i = await Dn(t.headers, e);
+		let i = await kn(t.headers, e);
 		if (!i.ok) {
 			n.status(401).json({
 				error: "7h3: request verification failed",
@@ -2282,13 +2308,13 @@ function An(e) {
 		t["7h3Envelope"] = i.envelope, r();
 	};
 }
-async function jn(e, t, n, r) {
-	let { headers: i } = await On(t, n, r), a = new Headers(e.headers);
+async function Nn(e, t, n, r) {
+	let { headers: i } = await An(t, n, r), a = new Headers(e.headers);
 	for (let [e, t] of Object.entries(i)) a.set(e, t);
 	return new Request(e, { headers: a });
 }
-async function Mn(e, t) {
-	return jn(e, E({
+async function Pn(e, t) {
+	return Nn(e, D({
 		sender: t.sender,
 		recipient: t.recipient,
 		ttlMs: t.ttlMs ?? 6e4,
@@ -2298,49 +2324,68 @@ async function Mn(e, t) {
 }
 //#endregion
 //#region src/webhookBinding.ts
-var L = "x-7h3-sig", R = "x-7h3-ts", Nn = 3e5;
-function Pn(e, t) {
+var R = "x-7h3-sig", z = "x-7h3-ts", Fn = 3e5, In = class {
+	seen = /* @__PURE__ */ new Map();
+	maxEntries;
+	constructor(e = 1e4) {
+		this.maxEntries = e;
+	}
+	prune(e) {
+		for (let [t, n] of this.seen) n <= e && this.seen.delete(t);
+	}
+	consume(e, t, n) {
+		this.prune(n);
+		let r = this.seen.get(e);
+		if (r !== void 0 && r > n) return !1;
+		if (this.seen.size >= this.maxEntries) {
+			let e = this.seen.keys().next().value;
+			e !== void 0 && this.seen.delete(e);
+		}
+		return this.seen.set(e, t), !0;
+	}
+};
+function B(e, t) {
 	return `${e}.${t}`;
 }
-async function Fn(e, t) {
-	let n = typeof e == "string" ? e : new TextDecoder().decode(e), r = Date.now(), i = await b(Pn(r, n), t.privateKey);
+async function Ln(e, t) {
+	let n = typeof e == "string" ? e : new TextDecoder().decode(e), r = Date.now(), i = await b(B(r, n), t.privateKey);
 	return {
-		[L]: i,
-		[R]: String(r)
+		[R]: i,
+		[z]: String(r)
 	};
 }
-async function In(e, t) {
-	let n = typeof e == "string" ? e : new TextDecoder().decode(e), r = Date.now(), i = await de(Pn(r, n), t.secret);
+async function Rn(e, t) {
+	let n = typeof e == "string" ? e : new TextDecoder().decode(e), r = Date.now(), i = await de(B(r, n), t.secret);
 	return {
-		[L]: i,
-		[R]: String(r)
+		[R]: i,
+		[z]: String(r)
 	};
 }
-async function Ln(e, t, n) {
-	let r = typeof e == "string" ? e : new TextDecoder().decode(e), i = t[L], a = t[R];
+async function zn(e, t, n) {
+	let r = typeof e == "string" ? e : new TextDecoder().decode(e), i = t[R], a = t[z];
 	if (!i || !a) return !1;
 	let o = Number(a);
 	if (!Number.isFinite(o)) return !1;
-	let s = n.maxAgeMs ?? 3e5;
-	return Date.now() - o > s ? !1 : x(Pn(o, r), i, n.publicKey);
+	let s = n.maxAgeMs ?? 3e5, c = Date.now();
+	return !(c - o > s || !await x(B(o, r), i, n.publicKey) || n.replayCache && !await n.replayCache.consume(i, o + s, c));
 }
-async function Rn(e, t, n) {
-	let r = typeof e == "string" ? e : new TextDecoder().decode(e), i = t[L], a = t[R];
+async function Bn(e, t, n) {
+	let r = typeof e == "string" ? e : new TextDecoder().decode(e), i = t[R], a = t[z];
 	if (!i || !a) return !1;
 	let o = Number(a);
 	if (!Number.isFinite(o)) return !1;
-	let s = n.maxAgeMs ?? 3e5;
-	return Date.now() - o > s ? !1 : fe(Pn(o, r), i, n.secret);
+	let s = n.maxAgeMs ?? 3e5, c = Date.now();
+	return !(c - o > s || !await fe(B(o, r), i, n.secret) || n.replayCache && !await n.replayCache.consume(i, o + s, c));
 }
-async function zn(e, t, n) {
-	if (!await Ln(e, t, n)) throw Error("7h3: webhook signature verification failed");
+async function Vn(e, t, n) {
+	if (!await zn(e, t, n)) throw Error("7h3: webhook signature verification failed");
 	return JSON.parse(e);
 }
 //#endregion
 //#region src/queueBinding.ts
-async function Bn(e, t) {
+async function Hn(e, t) {
 	let n = t.ttlMs ?? 36e5, r = typeof e == "string" ? e : JSON.stringify(e), i = {
-		envelope: await C(E({
+		envelope: await w(D({
 			sender: t.sender,
 			recipient: t.recipient,
 			intent: "TASK",
@@ -2351,7 +2396,7 @@ async function Bn(e, t) {
 	};
 	return JSON.stringify(i);
 }
-async function Vn(e, t) {
+async function Un(e, t) {
 	let n;
 	try {
 		n = JSON.parse(e);
@@ -2361,10 +2406,10 @@ async function Vn(e, t) {
 	if (!n.envelope || typeof n.envelope != "object") throw Error("Queue message missing envelope");
 	let r = t.nowMs ?? Date.now();
 	if (t.strictTtl ?? !0) {
-		let e = T(n.envelope, r).filter((e) => e.level === "error");
+		let e = E(n.envelope, r).filter((e) => e.level === "error");
 		if (e.length > 0) throw Error(`Queue message failed validation: ${e.map((e) => e.message).join("; ")}`);
 	}
-	if (!await w(n.envelope, t.publicKey)) throw Error("Queue message signature verification failed");
+	if (!await T(n.envelope, t.publicKey)) throw Error("Queue message signature verification failed");
 	if (t.replayCache) {
 		let e = await t.replayCache.consume(n.envelope, r);
 		if (!e.ok) throw Error(e.reason ?? "Queue message replay detected");
@@ -2374,10 +2419,10 @@ async function Vn(e, t) {
 		envelope: n.envelope
 	};
 }
-async function Hn(e, t) {
+async function Wn(e, t) {
 	return Promise.all(e.map(async (e) => {
 		try {
-			let { payload: n, envelope: r } = await Vn(e, t);
+			let { payload: n, envelope: r } = await Un(e, t);
 			return {
 				ok: !0,
 				payload: n,
@@ -2394,87 +2439,87 @@ async function Hn(e, t) {
 }
 //#endregion
 //#region src/stream.ts
-var Un = "x-7h3-stream", z = new TextEncoder();
-function B() {
+var Gn = "x-7h3-stream", V = new TextEncoder();
+function H() {
 	if (typeof crypto > "u" || !crypto.subtle) throw Error("Web Crypto API is not available in this runtime");
 	return crypto.subtle;
 }
-function Wn() {
+function Kn() {
 	return globalThis.Buffer;
 }
-function V(e) {
-	let t = Wn();
+function U(e) {
+	let t = Kn();
 	return (t ? t.from(e).toString("base64") : btoa(String.fromCharCode(...e))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
 }
-function H(e) {
-	let t = e.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(e.length / 4) * 4, "="), n = Wn();
+function W(e) {
+	let t = e.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(e.length / 4) * 4, "="), n = Kn();
 	if (n) return new Uint8Array(n.from(t, "base64"));
 	let r = atob(t), i = new Uint8Array(r.length);
 	for (let e = 0; e < r.length; e++) i[e] = r.charCodeAt(e);
 	return i;
 }
-function U(e) {
+function G(e) {
 	return e.buffer.slice(e.byteOffset, e.byteOffset + e.byteLength);
 }
-function Gn() {
+function qn() {
 	let e = /* @__PURE__ */ new Uint8Array(16);
-	return crypto.getRandomValues(e), V(e);
+	return crypto.getRandomValues(e), U(e);
 }
-var W = /* @__PURE__ */ new Map(), Kn = 128;
-function qn(e, t) {
-	let n = `${e}:${t}`, r = W.get(n);
+var K = /* @__PURE__ */ new Map(), Jn = 128;
+function Yn(e, t) {
+	let n = `${e}:${t}`, r = K.get(n);
 	if (r) return r;
-	W.size >= Kn && W.clear();
-	let i = B(), a = H(e), o = (async () => {
-		let e = await i.importKey("raw", U(a), "HKDF", !1, ["deriveBits"]), n = await i.deriveBits({
+	K.size >= Jn && K.clear();
+	let i = H(), a = W(e), o = (async () => {
+		let e = await i.importKey("raw", G(a), "HKDF", !1, ["deriveBits"]), n = await i.deriveBits({
 			name: "HKDF",
 			hash: "SHA-256",
-			salt: z.encode(t),
-			info: z.encode("7h3-stream/1")
+			salt: V.encode(t),
+			info: V.encode("7h3-stream/1")
 		}, e, 256);
 		return i.importKey("raw", n, {
 			name: "HMAC",
 			hash: "SHA-256"
 		}, !1, ["sign"]);
 	})();
-	return o.catch(() => W.delete(n)), W.set(n, o), o;
+	return o.catch(() => K.delete(n)), K.set(n, o), o;
 }
-var G = /* @__PURE__ */ new Map(), Jn = 64;
-function Yn(e) {
-	let t = G.get(e);
+var q = /* @__PURE__ */ new Map(), Xn = 64;
+function Zn(e) {
+	let t = q.get(e);
 	if (t) return t;
-	G.size >= Jn && G.clear();
-	let n = B().importKey("pkcs8", U(H(e)), { name: "Ed25519" }, !1, ["sign"]).catch((t) => {
-		throw G.delete(e), t;
+	q.size >= Xn && q.clear();
+	let n = H().importKey("pkcs8", G(W(e)), { name: "Ed25519" }, !1, ["sign"]).catch((t) => {
+		throw q.delete(e), t;
 	});
-	return G.set(e, n), n;
+	return q.set(e, n), n;
 }
-var K = /* @__PURE__ */ new Map(), Xn = 64;
-function Zn(e) {
-	let t = K.get(e);
+var J = /* @__PURE__ */ new Map(), Qn = 64;
+function $n(e) {
+	let t = J.get(e);
 	if (t) return t;
-	K.size >= Xn && K.clear();
-	let n = B().importKey("spki", U(H(e)), { name: "Ed25519" }, !1, ["verify"]).catch((t) => {
-		throw K.delete(e), t;
+	J.size >= Qn && J.clear();
+	let n = H().importKey("spki", G(W(e)), { name: "Ed25519" }, !1, ["verify"]).catch((t) => {
+		throw J.delete(e), t;
 	});
-	return K.set(e, n), n;
+	return J.set(e, n), n;
 }
-function Qn(e) {
+function er(e) {
 	let t = e.map((e) => `${e.i}:${e.d}`);
-	return z.encode(t.join("\n"));
+	return V.encode(t.join("\n"));
 }
-async function $n(e) {
-	let t = await B().digest("SHA-256", U(e));
+async function tr(e) {
+	let t = await H().digest("SHA-256", G(e));
 	return new Uint8Array(t);
 }
-var q = class {
+var nr = class {
 	opts;
 	seq = 0;
 	accum = [];
 	hmacKeyPromise = null;
 	constructor(e) {
 		this.opts = {
-			nonce: e.nonce ?? Gn(),
+			nonce: e.nonce ?? qn(),
 			keyId: e.keyId ?? "stream-key",
 			...e
 		};
@@ -2483,11 +2528,11 @@ var q = class {
 		return this.opts.nonce;
 	}
 	getHmacKey() {
-		return this.hmacKeyPromise ||= qn(this.opts.privateKey, this.opts.nonce), this.hmacKeyPromise;
+		return this.hmacKeyPromise ||= Yn(this.opts.privateKey, this.opts.nonce), this.hmacKeyPromise;
 	}
 	async computeChunkHmac(e, t) {
-		let n = B(), r = await this.getHmacKey(), i = `${this.opts.nonce}:${e}:${t}`, a = await n.sign("HMAC", r, z.encode(i));
-		return V(new Uint8Array(a));
+		let n = H(), r = await this.getHmacKey(), i = `${this.opts.nonce}:${e}:${t}`, a = await n.sign("HMAC", r, V.encode(i));
+		return U(new Uint8Array(a));
 	}
 	async writeChunk(e) {
 		let t = this.seq++, n = await this.computeChunkHmac(t, e);
@@ -2502,17 +2547,17 @@ var q = class {
 		};
 	}
 	async finalize() {
-		let e = B(), t = await Yn(this.opts.privateKey), n = await $n(Qn(this.accum)), r = await e.sign("Ed25519", t, U(n)), i = V(new Uint8Array(r)), a = this.seq;
+		let e = H(), t = await Zn(this.opts.privateKey), n = await tr(er(this.accum)), r = await e.sign("Ed25519", t, G(n)), i = U(new Uint8Array(r)), a = this.seq;
 		return {
 			i: a,
 			d: "",
-			h: await this.computeChunkHmac(a, V(n)),
+			h: await this.computeChunkHmac(a, U(n)),
 			f: !0,
 			sig: i,
 			kid: this.opts.keyId
 		};
 	}
-}, er = class {
+}, rr = class {
 	opts;
 	expectedSeq = 0;
 	accum = [];
@@ -2533,7 +2578,7 @@ var q = class {
 		} : e.i === this.expectedSeq ? (this.expectedSeq++, this.accum.push({
 			i: e.i,
 			d: e.d
-		}), this.totalBytes += z.encode(e.d).length, { ok: !0 }) : {
+		}), this.totalBytes += V.encode(e.d).length, { ok: !0 }) : {
 			ok: !1,
 			reason: `sequence error: expected ${this.expectedSeq}, got ${e.i}`
 		};
@@ -2547,17 +2592,17 @@ var q = class {
 			ok: !1,
 			reason: "missing signature on final chunk"
 		};
-		let t = B(), n;
+		let t = H(), n;
 		try {
-			n = await Zn(this.opts.publicKey);
+			n = await $n(this.opts.publicKey);
 		} catch {
 			return {
 				ok: !1,
 				reason: "invalid public key"
 			};
 		}
-		let r = await $n(Qn(this.accum)), i = H(e.sig);
-		return await t.verify("Ed25519", n, U(i), U(r)) ? {
+		let r = await tr(er(this.accum)), i = W(e.sig);
+		return await t.verify("Ed25519", n, G(i), G(r)) ? {
 			ok: !0,
 			totalBytes: this.totalBytes,
 			chunkCount: this.accum.length
@@ -2567,20 +2612,20 @@ var q = class {
 		};
 	}
 };
-function tr(e) {
-	return new q(e);
+function ir(e) {
+	return new nr(e);
 }
-function nr(e) {
-	return new er(e);
+function ar(e) {
+	return new rr(e);
 }
-async function rr(e, t) {
-	let n = new q(t), r = [];
+async function or(e, t) {
+	let n = new nr(t), r = [];
 	if (Array.isArray(e)) for (let t of e) r.push(await n.writeChunk(t));
 	else for await (let t of e) r.push(await n.writeChunk(t));
 	return r.push(await n.finalize()), r;
 }
-async function ir(e, t) {
-	let n = new er(t), r = e.slice(0, -1), i = e[e.length - 1];
+async function sr(e, t) {
+	let n = new rr(t), r = e.slice(0, -1), i = e[e.length - 1];
 	if (e.length === 0) return {
 		ok: !1,
 		reason: "empty chunk array — missing final frame"
@@ -2606,10 +2651,10 @@ async function ir(e, t) {
 	}
 	return n.finalize(i);
 }
-function ar(e) {
+function cr(e) {
 	return JSON.stringify(e);
 }
-function or(e) {
+function lr(e) {
 	let t;
 	try {
 		t = JSON.parse(e);
@@ -2636,7 +2681,7 @@ function or(e) {
 }
 //#endregion
 //#region src/wsBinding.ts
-function sr(e, t) {
+function ur(e, t) {
 	let n = 0, r = [], i = [];
 	function a(e, n) {
 		t.onVerifyFail?.(e, n);
@@ -2660,15 +2705,22 @@ function sr(e, t) {
 			a(/* @__PURE__ */ Error(`unknown sender: ${o}`), n);
 			return;
 		}
-		if (!await w(i, s).catch(() => !1)) {
+		if (!await T(i, s).catch(() => !1)) {
 			a(/* @__PURE__ */ Error("invalid signature"), n);
 			return;
 		}
-		let c = T(i);
+		let c = E(i);
 		if (c.some((e) => e.level === "error")) {
 			a(/* @__PURE__ */ Error(`envelope invalid: ${c.map((e) => e.message).join("; ")}`), n);
 			return;
 		}
+		if (t.replayCache) {
+			let e = await t.replayCache.consume(i);
+			if (!e.ok) {
+				a(Error(e.reason ?? "replay detected"), n);
+				return;
+			}
+		}
 		let l = i.body.content;
 		try {
 			l = JSON.parse(i.body.content);
@@ -2682,7 +2734,7 @@ function sr(e, t) {
 			return n;
 		},
 		async send(r) {
-			let i = typeof r == "string" ? r : JSON.stringify(r), a = await C(E({
+			let i = typeof r == "string" ? r : JSON.stringify(r), a = await w(D({
 				sender: t.sender,
 				recipient: t.recipient,
 				ttlMs: t.ttlMs ?? 3e4,
@@ -2700,28 +2752,28 @@ function sr(e, t) {
 		}
 	};
 }
-function cr(e, t) {
-	let n = new q(t), r = async (t) => {
+function dr(e, t) {
+	let n = new nr(t), r = async (t) => {
 		let r = typeof t.data == "string" ? t.data : t.data.toString("utf8"), i = await n.writeChunk(r);
-		e.send(ar(i));
+		e.send(cr(i));
 	}, i = async () => {
 		e.removeEventListener("message", r), e.removeEventListener("close", i);
 		let t = await n.finalize();
-		e.send(ar(t));
+		e.send(cr(t));
 	};
 	return e.addEventListener("message", r), e.addEventListener("close", i), n;
 }
-function lr(e, t) {
+function fr(e, t) {
 	return new Promise((n, r) => {
 		let i = [], a = async (e) => {
 			let a = typeof e.data == "string" ? e.data : e.data.toString("utf8"), o;
 			try {
-				o = or(a);
+				o = lr(a);
 			} catch (e) {
 				s(), r(e);
 				return;
 			}
-			i.push(o), o.f && (s(), n(await ir(i, t)));
+			i.push(o), o.f && (s(), n(await sr(i, t)));
 		}, o = () => {
 			s(), n({
 				ok: !1,
@@ -2736,9 +2788,9 @@ function lr(e, t) {
 }
 //#endregion
 //#region src/grpcBinding.ts
-var ur = "7h3-envelope-bin";
-async function dr(e) {
-	let t = await C(E({
+var pr = "7h3-envelope-bin";
+async function mr(e) {
+	let t = await w(D({
 		sender: e.sender,
 		recipient: e.recipient,
 		ttlMs: e.ttlMs ?? 6e4,
@@ -2747,7 +2799,7 @@ async function dr(e) {
 	}), e.privateKey);
 	return { [e.metadataKey ?? "7h3-envelope-bin"]: JSON.stringify(t) };
 }
-async function fr(e, t) {
+async function hr(e, t) {
 	let n = e[t.metadataKey ?? "7h3-envelope-bin"], r = Array.isArray(n) ? n[0] : n instanceof Uint8Array ? new TextDecoder().decode(n) : n;
 	if (!r) return {
 		ok: !1,
@@ -2764,7 +2816,7 @@ async function fr(e, t) {
 			message: "7h3: malformed envelope metadata"
 		};
 	}
-	if (t.strictTtl !== !1 && T(i).some((e) => e.level === "error")) return {
+	if (t.strictTtl !== !1 && E(i).some((e) => e.level === "error")) return {
 		ok: !1,
 		code: 4,
 		message: "7h3: envelope expired or invalid"
@@ -2782,7 +2834,7 @@ async function fr(e, t) {
 			code: 16,
 			message: `7h3: unknown sender ${a}`
 		};
-		if (!await w(i, e)) return {
+		if (!await T(i, e)) return {
 			ok: !1,
 			code: 16,
 			message: "7h3: invalid signature"
@@ -2794,7 +2846,7 @@ async function fr(e, t) {
 			code: 16,
 			message: "7h3: unknown key"
 		};
-		if (!await S(i, e)) return {
+		if (!await C(i, e)) return {
 			ok: !1,
 			code: 16,
 			message: "7h3: invalid signature"
@@ -2809,39 +2861,39 @@ async function fr(e, t) {
 		envelope: i
 	};
 }
-function pr(e, t) {
+function gr(e, t) {
 	return async (n) => {
-		let r = await fr(n.metadata, t);
+		let r = await hr(n.metadata, t);
 		if (!r.ok) throw Object.assign(Error(r.message), { code: r.code });
 		return n["7h3Envelope"] = r.envelope, e(n);
 	};
 }
 //#endregion
 //#region src/keyInfra.ts
-function mr(e) {
+function _r(e) {
 	return JSON.stringify(e);
 }
-function hr(e) {
+function vr(e) {
 	let t = JSON.parse(e);
 	if (t.version !== "7h3/0.1") throw Error(`unsupported version: ${t.version}`);
 	return t;
 }
-async function gr(e, t) {
+async function yr(e, t) {
 	let n = e.replace(/\/$/, "") + "/.well-known/7h3-keys", r = new AbortController(), i = t?.timeout ? setTimeout(() => r.abort(), t.timeout) : void 0;
 	try {
 		let e = await fetch(n, { signal: r.signal });
 		if (!e.ok) throw Error(`HTTP ${e.status} from ${n}`);
-		return hr(await e.text());
+		return vr(await e.text());
 	} finally {
 		i !== void 0 && clearTimeout(i);
 	}
 }
-function _r(e) {
+function br(e) {
 	let t = /* @__PURE__ */ new Map(), n = e?.cacheMs ?? 6e4, r = e?.timeout ?? 5e3;
 	async function i(e) {
 		let i = Date.now(), a = t.get(e);
 		if (a && a.expiresAt > i) return a.doc;
-		let o = await gr(e, { timeout: r });
+		let o = await yr(e, { timeout: r });
 		return t.set(e, {
 			doc: o,
 			expiresAt: i + n
@@ -2858,7 +2910,7 @@ function _r(e) {
 		}
 	} };
 }
-var vr = class {
+var xr = class {
 	maxAgeMs;
 	overlapMs;
 	keys = [];
@@ -2905,10 +2957,10 @@ var vr = class {
 	toKeyRegistry() {
 		return { getPublicKey: async (e) => {
 			let t = Date.now();
-			return this.keys.find((n) => n.id === e && (!n.expiresAt || n.expiresAt > t))?.publicKey ?? this.getCurrentKey()?.publicKey ?? null;
+			return this.keys.find((n) => n.id === e && (!n.expiresAt || n.expiresAt > t))?.publicKey ?? null;
 		} };
 	}
-}, yr = class {
+}, Sr = class {
 	revoked = /* @__PURE__ */ new Map();
 	revoke(e, t) {
 		this.revoked.set(e, {
@@ -2933,11 +2985,15 @@ var vr = class {
 	wrapRegistry(e) {
 		return {
 			getPublicKey: async (t) => this.isRevoked(t) ? null : e.getPublicKey(t),
-			getSharedSecret: e.getSharedSecret?.bind(e)
+			getSharedSecret: e.getSharedSecret ? async (t, n) => this.isRevoked(t) || this.isRevoked(n) ? null : e.getSharedSecret(t, n) : void 0
 		};
 	}
-}, br = class {
+}, Cr = class {
 	windows = /* @__PURE__ */ new Map();
+	maxKeys;
+	constructor(e = {}) {
+		this.maxKeys = e.maxKeys ?? 5e4;
+	}
 	check(e, t, n = Date.now()) {
 		let r = n - t.windowMs, i = (this.windows.get(e) ?? []).filter((e) => e > r), a = i.length, o = a < t.requests;
 		return {
@@ -2948,7 +3004,13 @@ var vr = class {
 	}
 	consume(e, t, n = Date.now()) {
 		let r = n - t.windowMs, i = (this.windows.get(e) ?? []).filter((e) => e > r), a = i.length < t.requests;
-		return a && (i.push(n), this.windows.set(e, i)), {
+		if (a && i.push(n), i.length > 0) for (this.windows.delete(e), this.windows.set(e, i); this.windows.size > this.maxKeys;) {
+			let e = this.windows.keys().next().value;
+			if (e === void 0) break;
+			this.windows.delete(e);
+		}
+		else this.windows.delete(e);
+		return {
 			allowed: a,
 			remaining: Math.max(0, t.requests - i.length),
 			resetMs: i.length > 0 ? Math.max(0, i[0] + t.windowMs - n) : 0
@@ -2960,10 +3022,10 @@ var vr = class {
 	clear() {
 		this.windows.clear();
 	}
-}, xr = new br();
+}, wr = new Cr();
 //#endregion
 //#region src/routePolicy.ts
-function J(e, t) {
+function Tr(e, t) {
 	let n = "^", r = 0;
 	for (; r < e.length;) {
 		let t = e[r];
@@ -2971,18 +3033,18 @@ function J(e, t) {
 	}
 	return n += "$", new RegExp(n).test(t);
 }
-function Sr(e, t) {
-	for (let n of e) if (J(n.path, t)) return n;
+function Er(e, t) {
+	for (let n of e) if (Tr(n.path, t)) return n;
 	return null;
 }
-function Cr(e, t) {
+function Dr(e, t) {
 	return !e.allowedSenders || e.allowedSenders.length === 0 || e.allowedSenders.includes(t);
 }
 //#endregion
 //#region src/signedResponse.ts
-var wr = "x-7h3-response";
-async function Tr(e, t) {
-	let n = await C(E({
+var Or = "x-7h3-response";
+async function kr(e, t) {
+	let n = await w(D({
 		sender: t.sender,
 		recipient: t.recipient,
 		intent: "RESULT",
@@ -2990,10 +3052,10 @@ async function Tr(e, t) {
 		correlationId: t.correlationId,
 		ttlMs: t.ttlMs ?? 6e4
 	}), t.privateKey);
-	return { headers: { [wr]: JSON.stringify(n) } };
+	return { headers: { [Or]: JSON.stringify(n) } };
 }
-async function Er(e, t, n) {
-	let r = t[wr], i = Array.isArray(r) ? r[0] : r;
+async function Ar(e, t, n) {
+	let r = t[Or], i = Array.isArray(r) ? r[0] : r;
 	if (!i) return {
 		ok: !1,
 		reason: "missing-header"
@@ -3012,7 +3074,7 @@ async function Er(e, t, n) {
 		ok: !1,
 		reason: "ttl-expired",
 		envelope: a
-	} : await w(a, n.publicKey) ? a.body.content === e ? {
+	} : await T(a, n.publicKey) ? a.body.content === e ? {
 		ok: !0,
 		envelope: a
 	} : {
@@ -3027,21 +3089,21 @@ async function Er(e, t, n) {
 }
 //#endregion
 //#region src/telemetry.ts
-function Y(e) {
+function jr(e) {
 	return !e || Object.keys(e).length === 0 ? "__default__" : Object.entries(e).sort(([e], [t]) => e.localeCompare(t)).map(([e, t]) => `${e}=${t}`).join(",");
 }
-function Dr(e) {
+function Mr(e) {
 	return !e || Object.keys(e).length === 0 ? "" : `{${Object.entries(e).sort(([e], [t]) => e.localeCompare(t)).map(([e, t]) => `${e}="${t}"`).join(",")}}`;
 }
-var X = class {
+var Y = class {
 	counts = /* @__PURE__ */ new Map();
 	labelSets = /* @__PURE__ */ new Map();
 	increment(e) {
-		let t = Y(e);
+		let t = jr(e);
 		this.counts.set(t, (this.counts.get(t) ?? 0) + 1), this.labelSets.has(t) || this.labelSets.set(t, e);
 	}
 	value(e) {
-		return this.counts.get(Y(e)) ?? 0;
+		return this.counts.get(jr(e)) ?? 0;
 	}
 	entries() {
 		let e = [];
@@ -3051,7 +3113,7 @@ var X = class {
 		});
 		return e;
 	}
-}, Or = class {
+}, Nr = class {
 	bucketBounds;
 	states = /* @__PURE__ */ new Map();
 	labelSets = /* @__PURE__ */ new Map();
@@ -3071,7 +3133,7 @@ var X = class {
 		this.bucketBounds = [...e].sort((e, t) => e - t);
 	}
 	observe(e, t) {
-		let n = Y(t);
+		let n = jr(t);
 		this.states.has(n) || (this.states.set(n, {
 			count: 0,
 			sum: 0,
@@ -3081,7 +3143,7 @@ var X = class {
 		r.count++, r.sum += e, r.observations.push(e);
 	}
 	snapshot(e) {
-		let t = Y(e), n = this.states.get(t) ?? {
+		let t = jr(e), n = this.states.get(t) ?? {
 			count: 0,
 			sum: 0,
 			observations: []
@@ -3107,9 +3169,9 @@ var X = class {
 	getBounds() {
 		return [...this.bucketBounds];
 	}
-}, kr = class {
-	verifications_total = new X();
-	verification_duration_ms = new Or([
+}, Pr = class {
+	verifications_total = new Y();
+	verification_duration_ms = new Nr([
 		.1,
 		.5,
 		1,
@@ -3118,20 +3180,20 @@ var X = class {
 		50,
 		100
 	]);
-	rate_limit_hits_total = new X();
-	sender_denials_total = new X();
-	replay_detections_total = new X();
-	audit_entries_total = new X();
-	active_connections = new X();
-}, Z = new kr();
-function Ar(e, t = "7h3") {
+	rate_limit_hits_total = new Y();
+	sender_denials_total = new Y();
+	replay_detections_total = new Y();
+	audit_entries_total = new Y();
+	active_connections = new Y();
+}, X = new Pr();
+function Fr(e, t = "7h3") {
 	let n = [];
 	function r(e, r, i) {
 		let a = `${t}_${e}`;
 		n.push(`# HELP ${a} ${r}`), n.push(`# TYPE ${a} counter`);
 		let o = i.entries();
 		if (o.length === 0) n.push(`${a} 0`);
-		else for (let { labels: e, value: t } of o) e && Object.keys(e).length > 0 ? n.push(`${a}${Dr(e)} ${t}`) : n.push(`${a} ${t}`);
+		else for (let { labels: e, value: t } of o) e && Object.keys(e).length > 0 ? n.push(`${a}${Mr(e)} ${t}`) : n.push(`${a} ${t}`);
 	}
 	function i(e, r, i) {
 		let a = `${t}_${e}`;
@@ -3141,7 +3203,7 @@ function Ar(e, t = "7h3") {
 			for (let e of i.getBounds()) n.push(`${a}_bucket{le="${e}"} 0`);
 			n.push(`${a}_bucket{le="+Inf"} 0`), n.push(`${a}_sum 0`), n.push(`${a}_count 0`);
 		} else for (let { labels: e, snapshot: t } of o) {
-			let r = e && Object.keys(e).length > 0 ? Dr(e) : "";
+			let r = e && Object.keys(e).length > 0 ? Mr(e) : "";
 			for (let [e, i] of Object.entries(t.buckets)) {
 				if (e === "+Inf") continue;
 				let t = r ? r.slice(0, -1) + `,le="${e}"}` : `{le="${e}"}`;
@@ -3153,28 +3215,28 @@ function Ar(e, t = "7h3") {
 	}
 	return r("verifications_total", "Total number of AIP envelope verifications, by result, algorithm, and transport", e.verifications_total), i("verification_duration_ms", "Verification latency in milliseconds", e.verification_duration_ms), r("rate_limit_hits_total", "Total number of rate-limit rejections, by sender and path", e.rate_limit_hits_total), r("sender_denials_total", "Total number of sender-denied (403) rejections, by sender and path", e.sender_denials_total), r("replay_detections_total", "Total number of replay-detected events, by transport", e.replay_detections_total), r("audit_entries_total", "Total number of audit log entries written, by type", e.audit_entries_total), r("active_connections", "Current active connections, by transport (WS/gRPC)", e.active_connections), n.join("\n") + "\n";
 }
-function jr(e = "/metrics", t = Z, n = "7h3") {
+function Ir(e = "/metrics", t = X, n = "7h3") {
 	return (r, i, a) => {
 		if (r.url === e && (r.method === "GET" || r.method === void 0)) {
-			let e = Ar(t, n);
+			let e = Fr(t, n);
 			i.writeHead(200, { "content-type": "text/plain; version=0.0.4; charset=utf-8" }), i.end(e);
 		} else a();
 	};
 }
 //#endregion
 //#region src/capability.ts
-var Mr = "x-7h3-capability";
-function Nr(e) {
+var Lr = "x-7h3-capability";
+function Rr(e) {
 	let t = [];
 	return e.maxDelegations !== void 0 && t.push(`"maxDelegations":${e.maxDelegations}`), e.methods !== void 0 && t.push(`"methods":${JSON.stringify(e.methods)}`), t.push(`"pathGlob":${JSON.stringify(e.pathGlob)}`), `{${t.join(",")}}`;
 }
-function Q(e) {
+function Z(e) {
 	let t = [];
 	t.push(`"delegationDepth":${e.delegationDepth}`), t.push(`"expiresAt":${e.expiresAt}`), t.push(`"id":${JSON.stringify(e.id)}`), t.push(`"issuedAt":${e.issuedAt}`), t.push(`"issuer":${JSON.stringify(e.issuer)}`), t.push(`"keyId":${JSON.stringify(e.keyId)}`), e.maxDelegations !== void 0 && t.push(`"maxDelegations":${e.maxDelegations}`), e.parentTokenId !== void 0 && t.push(`"parentTokenId":${JSON.stringify(e.parentTokenId)}`);
-	let n = `[${e.scopes.map(Nr).join(",")}]`;
+	let n = `[${e.scopes.map(Rr).join(",")}]`;
 	return t.push(`"scopes":${n}`), t.push(`"subject":${JSON.stringify(e.subject)}`), t.push(`"version":${JSON.stringify(e.version)}`), `{${t.join(",")}}`;
 }
-async function Pr(e) {
+async function zr(e) {
 	let t = Date.now(), n = `cap-${t}-${y(6)}`, r = e.keyId ?? `${e.issuerId}-key`, i = e.maxDelegations ?? 0, a = {
 		id: n,
 		version: "7h3-cap/1",
@@ -3186,32 +3248,46 @@ async function Pr(e) {
 		delegationDepth: 0,
 		maxDelegations: i,
 		keyId: r
-	}, o = await b(Q(a), e.issuerPrivateKey);
+	}, o = await b(Z(a), e.issuerPrivateKey);
 	return {
 		...a,
 		signature: o
 	};
 }
-function Fr(e, t) {
-	if (!J(t.pathGlob, e.pathGlob)) return !1;
+function Br(e, t) {
+	return e === t || t === "*" && e !== "**";
+}
+function Vr(e, t) {
+	let n = e.split("/"), r = t.split("/"), i = 0;
+	for (let e of r) {
+		if (e === "**") return !0;
+		if (i >= n.length) return !1;
+		let t = n[i];
+		if (t === "**" || !Br(t, e)) return !1;
+		i += 1;
+	}
+	return i === n.length;
+}
+function Hr(e, t) {
+	if (!Vr(e.pathGlob, t.pathGlob)) return !1;
 	if (t.methods !== void 0) {
 		if (e.methods === void 0) return !1;
 		for (let n of e.methods) if (!t.methods.includes(n)) return !1;
 	}
 	return !0;
 }
-function Ir(e, t) {
-	for (let n of e) if (!t.some((e) => Fr(n, e))) return !1;
+function Ur(e, t) {
+	for (let n of e) if (!t.some((e) => Hr(n, e))) return !1;
 	return !0;
 }
-async function Lr(e) {
+async function Wr(e) {
 	let { parentToken: t, delegatorId: n, newSubject: r } = e;
 	if (n !== t.subject) throw Error(`delegatorId '${n}' does not match parentToken.subject '${t.subject}'`);
 	let i = Date.now();
 	if (i >= t.expiresAt) throw Error("Parent token is expired");
 	if (t.maxDelegations !== void 0 && t.maxDelegations <= 0) throw Error("Parent token does not allow further delegation (maxDelegations=0)");
 	let a = e.scopes ?? t.scopes;
-	if (!Ir(a, t.scopes)) throw Error("Delegated scopes exceed parent token scopes");
+	if (!Ur(a, t.scopes)) throw Error("Delegated scopes exceed parent token scopes");
 	let o = t.expiresAt - i;
 	if (e.ttlMs > o) throw Error(`Delegated ttlMs (${e.ttlMs}) exceeds parent token remaining TTL (${o})`);
 	let s = `cap-${i}-${y(6)}`, c = e.keyId ?? `${n}-key`, l = t.maxDelegations === void 0 ? void 0 : t.maxDelegations - 1, u = {
@@ -3226,18 +3302,18 @@ async function Lr(e) {
 		parentTokenId: t.id,
 		maxDelegations: l,
 		keyId: c
-	}, d = await b(Q(u), e.delegatorPrivateKey);
+	}, d = await b(Z(u), e.delegatorPrivateKey);
 	return {
 		...u,
 		signature: d
 	};
 }
-async function Rr(e, t, n) {
+async function Gr(e, t, n) {
 	if ((n?.now ?? Date.now()) >= e.expiresAt) return !1;
 	let { signature: r, ...i } = e;
-	return x(Q(i), r, t);
+	return x(Z(i), r, t);
 }
-async function zr(e, t, n) {
+async function Kr(e, t, n) {
 	if (e.length === 0) return {
 		ok: !1,
 		reason: "empty-chain"
@@ -3263,6 +3339,18 @@ async function zr(e, t, n) {
 				ok: !1,
 				reason: `chain-broken: token[${n}].delegationDepth ${i.delegationDepth} !== ${t.delegationDepth + 1}`
 			};
+			if (t.maxDelegations !== void 0 && t.maxDelegations <= 0) return {
+				ok: !1,
+				reason: `chain-broken: token[${n - 1}] does not permit further delegation (maxDelegations=0)`
+			};
+			if (i.expiresAt > t.expiresAt) return {
+				ok: !1,
+				reason: `chain-broken: token[${n}].expiresAt exceeds token[${n - 1}].expiresAt`
+			};
+			if (!Ur(i.scopes, t.scopes)) return {
+				ok: !1,
+				reason: `chain-broken: token[${n}].scopes exceed token[${n - 1}].scopes`
+			};
 		}
 		if (r >= i.expiresAt) return {
 			ok: !1,
@@ -3274,13 +3362,13 @@ async function zr(e, t, n) {
 			reason: `no-public-key-for-issuer:${i.issuer}`
 		};
 		let { signature: o, ...s } = i;
-		if (!await x(Q(s), o, a)) return {
+		if (!await x(Z(s), o, a)) return {
 			ok: !1,
 			reason: `invalid-signature-at-index:${n}`
 		};
 	}
 	let i = e[e.length - 1];
-	return n?.requiredPathGlob !== void 0 && !Br(i, n.requiredPathGlob, n.requiredMethod) ? {
+	return n?.requiredPathGlob !== void 0 && !qr(i, n.requiredPathGlob, n.requiredMethod) ? {
 		ok: !1,
 		reason: "leaf-token-does-not-cover-required-scope"
 	} : {
@@ -3289,85 +3377,151 @@ async function zr(e, t, n) {
 		chain: e
 	};
 }
-function Br(e, t, n) {
-	for (let r of e.scopes) if (J(r.pathGlob, t) && (r.methods === void 0 || n === void 0 || r.methods.includes(n.toUpperCase()))) return !0;
+function qr(e, t, n) {
+	for (let r of e.scopes) if (Tr(r.pathGlob, t) && (r.methods === void 0 || n !== void 0 && r.methods.includes(n.toUpperCase()))) return !0;
 	return !1;
 }
-function Vr(e) {
+function Jr(e) {
 	return JSON.stringify(e);
 }
-function Hr(e) {
+function Yr(e) {
 	return JSON.parse(e);
 }
 //#endregion
 //#region src/gateway.ts
-var Ur = class {
+function Xr(e) {
+	if (!e.startsWith("/")) return null;
+	let t = e;
+	for (let e = 0; e < 5; e++) {
+		let e;
+		try {
+			e = decodeURIComponent(t);
+		} catch {
+			return null;
+		}
+		if (e === t) break;
+		t = e;
+	}
+	if (/%[0-9a-fA-F]{2}/.test(t) || /[\x00-\x1f]/.test(t)) return null;
+	let n = t.split("/"), r = [];
+	for (let e of n) if (!(e === "" || e === ".")) {
+		if (e === "..") {
+			if (r.length === 0) return null;
+			r.pop();
+			continue;
+		}
+		r.push(e);
+	}
+	return "/" + r.join("/");
+}
+var Zr = class {
 	config;
 	rateLimiter;
 	constructor(e) {
-		this.config = e, this.rateLimiter = new br(), !e.replayStore && (e.policies ?? []).some((e) => e.require !== "none") && console.warn("[7h3-protocol] createGateway(): no replayStore configured with signature-requiring policies. Nonce/replay protection will not survive multiple gateway instances or restarts. See docs/GATEWAY.md#production-safety.");
+		this.config = e, this.rateLimiter = new Cr(), !e.replayStore && (e.policies ?? []).some((e) => e.require !== "none") && console.warn("[7h3-protocol] createGateway(): no replayStore configured with signature-requiring policies. Nonce/replay protection will not survive multiple gateway instances or restarts. See docs/GATEWAY.md#production-safety.");
+	}
+	async checkSenderAndRateLimit(e, t, n, r, i) {
+		if (e && !Dr(e, t)) {
+			let e = performance.now() - i;
+			return X.verifications_total.increment({
+				result: "fail",
+				alg: n,
+				transport: "http"
+			}), X.verification_duration_ms.observe(e), X.sender_denials_total.increment({
+				sender: t,
+				path: r.path
+			}), {
+				ok: !1,
+				status: 403,
+				reason: "sender-denied"
+			};
+		}
+		if (e?.rateLimit && !(this.config.rateLimitStore ? await this.config.rateLimitStore.consume(t, e.rateLimit) : this.rateLimiter.consume(t, e.rateLimit)).allowed) {
+			let e = performance.now() - i;
+			return X.verifications_total.increment({
+				result: "fail",
+				alg: n,
+				transport: "http"
+			}), X.verification_duration_ms.observe(e), X.rate_limit_hits_total.increment({
+				sender: t,
+				path: r.path
+			}), {
+				ok: !1,
+				status: 429,
+				reason: "rate-limited"
+			};
+		}
+		return null;
 	}
 	async verify(e) {
-		let t = performance.now(), n = Sr(this.config.policies ?? [], e.path);
-		if (n?.require === "none" || !n && (this.config.defaultPolicy ?? "allow") === "allow") {
+		let t = performance.now(), n = Xr(e.path);
+		if (n === null) return {
+			ok: !1,
+			status: 400,
+			reason: "invalid-path"
+		};
+		let r = Er(this.config.policies ?? [], n);
+		if (r?.require === "none" || !r && (this.config.defaultPolicy ?? "allow") === "allow") {
 			let e = performance.now() - t;
-			return Z.verifications_total.increment({
+			return X.verifications_total.increment({
 				result: "ok",
 				alg: "none",
 				transport: "http"
-			}), Z.verification_duration_ms.observe(e), {
+			}), X.verification_duration_ms.observe(e), {
 				ok: !0,
 				sender: ""
 			};
 		}
 		if (this.config.capabilityRegistry) {
-			let n = e.headers[Mr], r = Array.isArray(n) ? n[0] : n;
-			if (r) try {
-				let n = await zr(Hr(r), this.config.capabilityRegistry, {
+			let n = e.headers[Lr], i = Array.isArray(n) ? n[0] : n;
+			if (i) try {
+				let n = await Kr(Yr(i), this.config.capabilityRegistry, {
 					requiredPathGlob: e.path,
 					requiredMethod: e.method
 				});
-				if (n.ok && Br(n.token, e.path, e.method)) {
-					let e = performance.now() - t;
-					return Z.verifications_total.increment({
+				if (n.ok && qr(n.token, e.path, e.method)) {
+					let i = n.token.subject, a = await this.checkSenderAndRateLimit(r, i, "ED25519", e, t);
+					if (a) return a;
+					let o = performance.now() - t;
+					return X.verifications_total.increment({
 						result: "ok",
 						alg: "ED25519",
 						transport: "http"
-					}), Z.verification_duration_ms.observe(e), {
+					}), X.verification_duration_ms.observe(o), {
 						ok: !0,
-						sender: n.token.subject
+						sender: i
 					};
 				}
-				let i = performance.now() - t;
-				return Z.verifications_total.increment({
+				let a = performance.now() - t;
+				return X.verifications_total.increment({
 					result: "fail",
 					alg: "none",
 					transport: "http"
-				}), Z.verification_duration_ms.observe(i), {
+				}), X.verification_duration_ms.observe(a), {
 					ok: !1,
 					status: 401,
 					reason: n.ok ? "capability-scope-mismatch" : n.reason
 				};
 			} catch {
 				let e = performance.now() - t;
-				return Z.verifications_total.increment({
+				return X.verifications_total.increment({
 					result: "fail",
 					alg: "none",
 					transport: "http"
-				}), Z.verification_duration_ms.observe(e), {
+				}), X.verification_duration_ms.observe(e), {
 					ok: !1,
 					status: 401,
 					reason: "invalid-capability-chain"
 				};
 			}
 		}
-		if (!n && (this.config.defaultPolicy ?? "allow") === "deny") {
+		if (!r && (this.config.defaultPolicy ?? "allow") === "deny") {
 			let n = performance.now() - t;
-			return Z.verifications_total.increment({
+			return X.verifications_total.increment({
 				result: "fail",
 				alg: "none",
 				transport: "http"
-			}), Z.verification_duration_ms.observe(n), Z.sender_denials_total.increment({
+			}), X.verification_duration_ms.observe(n), X.sender_denials_total.increment({
 				sender: "",
 				path: e.path
 			}), {
@@ -3376,82 +3530,54 @@ var Ur = class {
 				reason: "no-matching-policy"
 			};
 		}
-		let r = await Dn(e.headers, {
+		let i = await kn(e.headers, {
 			keyRegistry: this.config.keyRegistry,
 			headerName: this.config.headerName
 		});
-		if (!r.ok) {
+		if (!i.ok) {
 			let e = performance.now() - t;
-			return Z.verifications_total.increment({
+			return X.verifications_total.increment({
 				result: "fail",
 				alg: "none",
 				transport: "http"
-			}), Z.verification_duration_ms.observe(e), {
+			}), X.verification_duration_ms.observe(e), {
 				ok: !1,
 				status: 401,
-				reason: r.reason
+				reason: i.reason
 			};
 		}
-		let i = r.envelope, a = i.header.sender, o = i.header.messageId, s = i.signature?.alg ?? "none";
-		if (this.config.replayStore && await this.config.replayStore.check(i.header.nonce, i.header.ttlMs)) return {
+		let a = i.envelope, o = a.header.sender, s = a.header.messageId, c = a.signature?.alg ?? "none";
+		if (this.config.replayStore && await this.config.replayStore.check(a.header.nonce, a.header.ttlMs)) return {
 			ok: !1,
 			status: 401,
 			reason: "replay-detected"
 		};
-		if (n && n.require !== "any") {
-			let e = i.signature?.alg, r = n.require === "ed25519" && e !== "ED25519", a = n.require === "hmac" && e !== "HS256";
-			if (r || a) {
+		if (r && r.require !== "any") {
+			let e = a.signature?.alg, n = r.require === "ed25519" && e !== "ED25519", i = r.require === "hmac" && e !== "HS256";
+			if (n || i) {
 				let e = performance.now() - t;
-				return Z.verifications_total.increment({
+				return X.verifications_total.increment({
 					result: "fail",
-					alg: s,
+					alg: c,
 					transport: "http"
-				}), Z.verification_duration_ms.observe(e), {
+				}), X.verification_duration_ms.observe(e), {
 					ok: !1,
 					status: 401,
 					reason: "invalid-signature"
 				};
 			}
 		}
-		if (n && !Cr(n, a)) {
-			let n = performance.now() - t;
-			return Z.verifications_total.increment({
-				result: "fail",
-				alg: s,
-				transport: "http"
-			}), Z.verification_duration_ms.observe(n), Z.sender_denials_total.increment({
-				sender: a,
-				path: e.path
-			}), {
-				ok: !1,
-				status: 403,
-				reason: "sender-denied"
-			};
-		}
-		if (n?.rateLimit && !(this.config.rateLimitStore ? await this.config.rateLimitStore.consume(a, n.rateLimit) : this.rateLimiter.consume(a, n.rateLimit)).allowed) {
-			let n = performance.now() - t;
-			return Z.verifications_total.increment({
-				result: "fail",
-				alg: s,
-				transport: "http"
-			}), Z.verification_duration_ms.observe(n), Z.rate_limit_hits_total.increment({
-				sender: a,
-				path: e.path
-			}), {
-				ok: !1,
-				status: 429,
-				reason: "rate-limited"
-			};
-		}
-		let c = performance.now() - t;
-		return Z.verifications_total.increment({
+		let l = await this.checkSenderAndRateLimit(r, o, c, e, t);
+		if (l) return l;
+		let u = performance.now() - t;
+		return X.verifications_total.increment({
 			result: "ok",
-			alg: s,
+			alg: c,
 			transport: "http"
-		}), Z.verification_duration_ms.observe(c), {
+		}), X.verification_duration_ms.observe(u), {
 			ok: !0,
-			sender: a,
-			envelopeId: o
+			sender: o,
+			envelopeId: s
 		};
 	}
 	async handle(e) {
@@ -3461,43 +3587,43 @@ var Ur = class {
 			headers: { "content-type": "application/json" },
 			body: JSON.stringify({ error: t.reason })
 		};
-		let n = this.config.upstream.replace(/\/$/, "") + e.path, r = {};
-		for (let [t, n] of Object.entries(e.headers)) r[t] = Array.isArray(n) ? n[0] : n;
-		t.sender && (r["x-7h3-sender"] = t.sender), r["x-7h3-verified"] = "true";
-		let i = await fetch(n, {
+		let n = Xr(e.path), r = this.config.upstream.replace(/\/$/, "") + n, i = {};
+		for (let [t, n] of Object.entries(e.headers)) i[t] = Array.isArray(n) ? n[0] : n;
+		t.sender && (i["x-7h3-sender"] = t.sender, i["x-7h3-verified"] = "true");
+		let a = await fetch(r, {
 			method: e.method,
-			headers: r,
+			headers: i,
 			body: e.body
-		}), a = await i.text(), o = { "content-type": i.headers.get("content-type") ?? "application/json" };
+		}), o = await a.text(), s = { "content-type": a.headers.get("content-type") ?? "application/json" };
 		if (this.config.privateKey !== void 0 && (this.config.signResponses ?? !0) && this.config.sender !== void 0) {
-			let e = await Tr(a, {
+			let e = await kr(o, {
 				privateKey: this.config.privateKey,
 				sender: this.config.sender,
 				recipient: t.sender || void 0
 			});
-			Object.assign(o, e.headers);
+			Object.assign(s, e.headers);
 		}
 		return {
-			status: i.status,
-			headers: o,
-			body: a
+			status: a.status,
+			headers: s,
+			body: o
 		};
 	}
 	getRateLimiter() {
 		return this.rateLimiter;
 	}
 };
-function Wr(e) {
-	return new Ur(e);
+function Qr(e) {
+	return new Zr(e);
 }
-function Gr(e) {
+function $r(e) {
 	if (e.defaultPolicy !== "deny") throw Error("createProductionGateway(): defaultPolicy must be explicitly 'deny'. Unmatched routes must never be forwarded unverified in production.");
 	if (!e.replayStore) throw Error("createProductionGateway(): replayStore is required. Use a shared store (Redis/KV/Durable Object) so nonce replay protection survives multiple instances and restarts.");
-	return new Ur(e);
+	return new Zr(e);
 }
 //#endregion
 //#region src/auditLog.ts
-function Kr(e) {
+function ei(e) {
 	let t = [
 		`"id":${JSON.stringify(e.id)}`,
 		`"timestampMs":${e.timestampMs}`,
@@ -3505,7 +3631,7 @@ function Kr(e) {
 	];
 	return e.sender !== void 0 && t.push(`"sender":${JSON.stringify(e.sender)}`), e.path !== void 0 && t.push(`"path":${JSON.stringify(e.path)}`), e.method !== void 0 && t.push(`"method":${JSON.stringify(e.method)}`), e.envelopeId !== void 0 && t.push(`"envelopeId":${JSON.stringify(e.envelopeId)}`), e.failReason !== void 0 && t.push(`"failReason":${JSON.stringify(e.failReason)}`), e.upstream !== void 0 && t.push(`"upstream":${JSON.stringify(e.upstream)}`), e.responseStatus !== void 0 && t.push(`"responseStatus":${e.responseStatus}`), `{${t.join(",")}}`;
 }
-var qr = class {
+var ti = class {
 	entries = [];
 	privateKey;
 	maxEntries;
@@ -3517,7 +3643,7 @@ var qr = class {
 			id: `audit-${Date.now()}-${y(5)}`,
 			timestampMs: Date.now(),
 			...e
-		}, n = await b(Kr(t), this.privateKey), r = {
+		}, n = await b(ei(t), this.privateKey), r = {
 			...t,
 			entrySignature: n
 		};
@@ -3528,7 +3654,7 @@ var qr = class {
 		return e?.type !== void 0 && (t = t.filter((t) => t.type === e.type)), e?.sender !== void 0 && (t = t.filter((t) => t.sender === e.sender)), e?.since !== void 0 && (t = t.filter((t) => t.timestampMs >= e.since)), e?.limit !== void 0 && (t = t.slice(-e.limit)), t;
 	}
 	async verify(e, t) {
-		return x(Kr({
+		return x(ei({
 			id: e.id,
 			timestampMs: e.timestampMs,
 			type: e.type,
@@ -3544,7 +3670,7 @@ var qr = class {
 	size() {
 		return this.entries.length;
 	}
-}, Jr = class {
+}, ni = class {
 	async log(e) {}
 	async query(e) {
 		return [];
@@ -3556,25 +3682,25 @@ var qr = class {
 		return 0;
 	}
 };
-function Yr(e, t) {
-	return new qr(e, t?.maxEntries);
+function ri(e, t) {
+	return new ti(e, t?.maxEntries);
 }
 //#endregion
 //#region src/otel.ts
-var Xr = null;
-function Zr(e) {
-	Xr = e;
+var ii = null;
+function ai(e) {
+	ii = e;
 }
-function Qr() {
-	if (Xr === null) return null;
+function oi() {
+	if (ii === null) return null;
 	try {
-		return Xr.getTracer("7h3/protocol");
+		return ii.getTracer("7h3/protocol");
 	} catch {
 		return null;
 	}
 }
-async function $r(e, t) {
-	let n = Qr();
+async function si(e, t) {
+	let n = oi();
 	if (n === null) return e(null);
 	let r = n.startSpan("7h3.verify", t);
 	try {
@@ -3585,8 +3711,8 @@ async function $r(e, t) {
 		r.end();
 	}
 }
-async function ei(e) {
-	let t = Qr();
+async function ci(e) {
+	let t = oi();
 	if (t === null) return e(null);
 	let n = t.startSpan("7h3.audit.write");
 	try {
@@ -3599,64 +3725,64 @@ async function ei(e) {
 }
 //#endregion
 //#region src/encryption.ts
-function ti(e) {
+function Q(e) {
 	return Buffer.from(e).toString("base64url");
 }
 function $(e) {
 	return Buffer.from(e, "base64url");
 }
-var ni = Buffer.from("302e020100300506032b656e04220420", "hex"), ri = Buffer.from("302a300506032b656e032100", "hex");
-function ii(e) {
+var li = Buffer.from("302e020100300506032b656e04220420", "hex"), ui = Buffer.from("302a300506032b656e032100", "hex");
+function di(e) {
 	let t = $(e);
 	return r({
-		key: Buffer.concat([ni, t]),
+		key: Buffer.concat([li, t]),
 		format: "der",
 		type: "pkcs8"
 	});
 }
-function ai(e) {
+function fi(e) {
 	let t = $(e);
 	return i({
-		key: Buffer.concat([ri, t]),
+		key: Buffer.concat([ui, t]),
 		format: "der",
 		type: "spki"
 	});
 }
-function oi() {
+function pi() {
 	let { privateKey: e, publicKey: t } = o("x25519"), n = e.export({ format: "jwk" });
 	return {
 		publicKey: t.export({ format: "jwk" }).x,
 		privateKey: n.d
 	};
 }
-function si(e, t, n) {
+function mi(e, t, n) {
 	let r = s("sha256", a({
-		privateKey: ii(e),
-		publicKey: ai(t)
+		privateKey: di(e),
+		publicKey: fi(t)
 	}), $(n), Buffer.from("7h3-enc/1", "utf8"), 32);
 	return Buffer.from(r);
 }
-function ci(e, n) {
-	let r = oi(), i = c(12), a = ti(i), o = si(r.privateKey, n, a), s = Buffer.from(JSON.stringify(e), "utf8"), l = t("chacha20-poly1305", o, i, { authTagLength: 16 }), u = Buffer.concat([l.update(s), l.final()]), d = l.getAuthTag(), f = {
+function hi(e, n) {
+	let r = pi(), i = c(12), a = Q(i), o = mi(r.privateKey, n, a), s = Buffer.from(JSON.stringify(e), "utf8"), l = t("chacha20-poly1305", o, i, { authTagLength: 16 }), u = Buffer.concat([l.update(s), l.final()]), d = l.getAuthTag(), f = {
 		ephemeralPublic: r.publicKey,
 		nonce: a,
-		ciphertext: ti(u),
-		tag: ti(d)
+		ciphertext: Q(u),
+		tag: Q(d)
 	};
 	return {
-		encryptedContent: ti(Buffer.from(JSON.stringify(f), "utf8")),
+		encryptedContent: Q(Buffer.from(JSON.stringify(f), "utf8")),
 		ephemeralPublic: r.publicKey
 	};
 }
-function li(e, t) {
-	let r = $(e).toString("utf8"), { ephemeralPublic: i, nonce: a, ciphertext: o, tag: s } = JSON.parse(r), c = si(t, i, a), l = $(a), u = $(o), d = $(s), f = n("chacha20-poly1305", c, l, { authTagLength: 16 });
+function gi(e, t) {
+	let r = $(e).toString("utf8"), { ephemeralPublic: i, nonce: a, ciphertext: o, tag: s } = JSON.parse(r), c = mi(t, i, a), l = $(a), u = $(o), d = $(s), f = n("chacha20-poly1305", c, l, { authTagLength: 16 });
 	f.setAuthTag(d);
 	let p = Buffer.concat([f.update(u), f.final()]);
 	return JSON.parse(p.toString("utf8"));
 }
-async function ui(e, t) {
-	let { encryptedContent: n } = ci(e.body, t.recipientX25519PublicKey);
-	return C({
+async function _i(e, t) {
+	let { encryptedContent: n } = hi(e.body, t.recipientX25519PublicKey);
+	return w({
 		header: e.header,
 		body: {
 			intent: "ENCRYPTED",
@@ -3666,12 +3792,12 @@ async function ui(e, t) {
 		}
 	}, t.senderEd25519PrivateKey);
 }
-async function di(e, t) {
-	if (!await w(e, t.senderEd25519PublicKey)) throw Error("7h3/encryption: Ed25519 signature verification failed");
+async function vi(e, t) {
+	if (!await T(e, t.senderEd25519PublicKey)) throw Error("7h3/encryption: Ed25519 signature verification failed");
 	return {
 		envelope: e,
-		body: li(e.body.content, t.recipientX25519PrivateKey)
+		body: gi(e.body.content, t.recipientX25519PrivateKey)
 	};
 }
 //#endregion
-export { ot as AgentSession, st as AipAgentAdapter, Mr as CAP_HEADER, Cn as CBOR_CONTENT_TYPE, bn as CborDecoder, yn as CborEncoder, Rt as ClusterRedisReplayStore, En as DEFAULT_HEADER, xe as DEFAULT_MAX_BINARY_ENVELOPE_BYTES, Re as DistributedReplayCache, ur as GRPC_METADATA_KEY, qr as InMemoryAuditLog, It as InMemoryRedisLikeClient, k as InMemoryReplayCache, Ut as InMemoryRevocationStore, ze as InMemoryVerificationMaterialCache, vr as KeyRotationManager, _e as MAX_TTL_MS, Jr as NoopAuditLog, Ur as Protocol7h3Gateway, kr as Protocol7h3Metrics, wr as RESPONSE_HEADER, Lt as RedisReplayStore, yr as RevocationRegistry, it as RollingKeyring, Mt as RuntimePolicyManager, Un as STREAM_HEADER, Xe as SessionTransport, er as SignedStreamReader, q as SignedStreamWriter, X as SimpleCounter, Or as SimpleHistogram, br as SlidingWindowRateLimiter, Nn as WEBHOOK_DEFAULT_TTL_MS, L as WEBHOOK_SIG_HEADER, R as WEBHOOK_TS_HEADER, j as bootstrapRuntimePolicyEnforcer, Q as canonicalizeCapabilityToken, _ as canonicalizeEnvelope, zn as consumeWebhook, ct as createAipAgentAdapter, et as createAipCapabilities, At as createAipMcpGatewayRuntime, jt as createAipMcpGatewayRuntimeWithPolicy, Yr as createAuditLog, rn as createCachingKeyRegistry, Vt as createClusterReplayStore, nn as createCompositeKeyRegistry, E as createEnvelope, Wr as createGateway, _r as createHttpKeyRegistry, en as createHttpMcpClient, $t as createHttpMcpHandler, An as createHttpMiddleware, at as createKeyringSignatureResolver, Jt as createMcpClientCodec, jr as createMetricsMiddleware, wt as createPolicyEnforcer, Gr as createProductionGateway, mt as createRawTaskFromJsonRpc, lt as createRawTaskFromLangChain, dt as createRawTaskFromLlamaIndex, zt as createRedisReplayStore, Wt as createRedisRevocationStore, Mn as createSignedFetchRequest, Ze as createSignedMessage, tr as createSignedStream, cr as createSignedWebSocketStream, tn as createStaticKeyRegistry, Qt as createStdioMcpClient, nr as createStreamVerifier, Sn as decodeCbor, Ge as decodeEnvelope, Je as decodeEnvelopeBatch, Ie as decodeEnvelopeBinary, Tn as decodeEnvelopeCbor, or as decodeStreamChunk, li as decryptBody, Lr as delegateCapabilityToken, si as deriveEncryptionKey, tt as encodeAipCapabilities, xn as encodeCbor, Ke as encodeEnvelope, qe as encodeEnvelopeBatch, Fe as encodeEnvelopeBinary, wn as encodeEnvelopeCbor, ar as encodeStreamChunk, ci as encryptBody, gr as fetchWellKnownKeys, pe as generateEd25519KeypairBase64Url, oi as generateX25519KeyPair, Qr as getOtelTracer, Pt as getRuntimeTuningPreset, xr as globalRateLimiter, Cr as isAllowedSender, Tt as isRuntimeMode, Pr as issueCapabilityToken, xt as loadRuntimePolicy, J as matchGlob, Sr as matchPolicy, Z as metrics, rt as negotiateAipCapabilities, di as openEnvelope, nt as parseAipCapabilities, Hr as parseCapabilityChain, yt as parseRuntimePolicyJson, hr as parseWellKnownKeys, y as randomHex, A as receiveEnvelope, Ye as receiveEnvelopeBatch, lr as receiveSignedWebSocketStream, Ft as recommendPolicyAdjustments, Ar as renderPrometheusText, ui as sealEnvelope, Vr as serializeCapabilityChain, Zt as serveMcpOverStdio, mr as serveWellKnownKeys, Zr as setOtelProvider, b as signCanonicalPayloadEd25519, de as signCanonicalPayloadHmac, C as signEnvelopeEd25519, me as signEnvelopeHmac, jn as signFetchRequest, dr as signGrpcCall, On as signHttpRequest, kn as signHttpRequestHmac, Bn as signQueueMessage, Tr as signResponse, rr as signStream, Fn as signWebhook, In as signWebhookHmac, ht as toJsonRpcResponse, ut as toLangChainMessage, ft as toLlamaIndexMessage, Br as tokenMatchesScope, T as validateEnvelope, vt as validateRuntimePolicy, x as verifyCanonicalPayloadEd25519, fe as verifyCanonicalPayloadHmac, ge as verifyCanonicalPayloadSignature, zr as verifyCapabilityChain, Rr as verifyCapabilityToken, w as verifyEnvelopeEd25519, S as verifyEnvelopeHmac, he as verifyEnvelopeSignature, fr as verifyGrpcCall, Dn as verifyHttpEnvelope, Hn as verifyQueueBatch, Vn as verifyQueueMessage, Er as verifyResponse, ir as verifyStream, Ln as verifyWebhook, Rn as verifyWebhookHmac, ei as withAuditSpan, pr as withGrpcVerification, Gt as withRevocationCheck, $r as withVerificationSpan, Yt as wrapMcpClient, qt as wrapMcpServer, sr as wrapWebSocket };
+export { it as AgentSession, at as AipAgentAdapter, Lr as CAP_HEADER, Cn as CBOR_CONTENT_TYPE, bn as CborDecoder, yn as CborEncoder, Lt as ClusterRedisReplayStore, On as DEFAULT_HEADER, be as DEFAULT_MAX_BINARY_ENVELOPE_BYTES, Le as DistributedReplayCache, pr as GRPC_METADATA_KEY, ti as InMemoryAuditLog, Ft as InMemoryRedisLikeClient, A as InMemoryReplayCache, Ht as InMemoryRevocationStore, Re as InMemoryVerificationMaterialCache, In as InMemoryWebhookReplayCache, xr as KeyRotationManager, ge as MAX_TTL_MS, ni as NoopAuditLog, Zr as Protocol7h3Gateway, Pr as Protocol7h3Metrics, Or as RESPONSE_HEADER, It as RedisReplayStore, Sr as RevocationRegistry, nt as RollingKeyring, jt as RuntimePolicyManager, Gn as STREAM_HEADER, Je as SessionTransport, rr as SignedStreamReader, nr as SignedStreamWriter, Y as SimpleCounter, Nr as SimpleHistogram, Cr as SlidingWindowRateLimiter, Fn as WEBHOOK_DEFAULT_TTL_MS, R as WEBHOOK_SIG_HEADER, z as WEBHOOK_TS_HEADER, N as bootstrapRuntimePolicyEnforcer, Z as canonicalizeCapabilityToken, _ as canonicalizeEnvelope, Vn as consumeWebhook, ot as createAipAgentAdapter, Qe as createAipCapabilities, kt as createAipMcpGatewayRuntime, At as createAipMcpGatewayRuntimeWithPolicy, ri as createAuditLog, rn as createCachingKeyRegistry, Bt as createClusterReplayStore, nn as createCompositeKeyRegistry, D as createEnvelope, Qr as createGateway, br as createHttpKeyRegistry, en as createHttpMcpClient, $t as createHttpMcpHandler, Mn as createHttpMiddleware, rt as createKeyringSignatureResolver, Jt as createMcpClientCodec, Ir as createMetricsMiddleware, St as createPolicyEnforcer, $r as createProductionGateway, ft as createRawTaskFromJsonRpc, st as createRawTaskFromLangChain, lt as createRawTaskFromLlamaIndex, Rt as createRedisReplayStore, Ut as createRedisRevocationStore, Pn as createSignedFetchRequest, Ye as createSignedMessage, ir as createSignedStream, dr as createSignedWebSocketStream, tn as createStaticKeyRegistry, Qt as createStdioMcpClient, ar as createStreamVerifier, Sn as decodeCbor, We as decodeEnvelope, Ke as decodeEnvelopeBatch, Fe as decodeEnvelopeBinary, Dn as decodeEnvelopeCbor, lr as decodeStreamChunk, gi as decryptBody, Wr as delegateCapabilityToken, mi as deriveEncryptionKey, $e as encodeAipCapabilities, xn as encodeCbor, j as encodeEnvelope, Ge as encodeEnvelopeBatch, Pe as encodeEnvelopeBinary, wn as encodeEnvelopeCbor, cr as encodeStreamChunk, hi as encryptBody, yr as fetchWellKnownKeys, pe as generateEd25519KeypairBase64Url, pi as generateX25519KeyPair, oi as getOtelTracer, Nt as getRuntimeTuningPreset, wr as globalRateLimiter, Dr as isAllowedSender, Ct as isRuntimeMode, zr as issueCapabilityToken, yt as loadRuntimePolicy, Tr as matchGlob, Er as matchPolicy, X as metrics, tt as negotiateAipCapabilities, Xr as normalizeGatewayPath, vi as openEnvelope, et as parseAipCapabilities, Yr as parseCapabilityChain, _t as parseRuntimePolicyJson, vr as parseWellKnownKeys, y as randomHex, M as receiveEnvelope, qe as receiveEnvelopeBatch, fr as receiveSignedWebSocketStream, Pt as recommendPolicyAdjustments, Fr as renderPrometheusText, _i as sealEnvelope, Jr as serializeCapabilityChain, Zt as serveMcpOverStdio, _r as serveWellKnownKeys, ai as setOtelProvider, b as signCanonicalPayloadEd25519, de as signCanonicalPayloadHmac, w as signEnvelopeEd25519, S as signEnvelopeHmac, Nn as signFetchRequest, mr as signGrpcCall, An as signHttpRequest, jn as signHttpRequestHmac, Hn as signQueueMessage, kr as signResponse, or as signStream, Ln as signWebhook, Rn as signWebhookHmac, pt as toJsonRpcResponse, ct as toLangChainMessage, ut as toLlamaIndexMessage, qr as tokenMatchesScope, E as validateEnvelope, gt as validateRuntimePolicy, x as verifyCanonicalPayloadEd25519, fe as verifyCanonicalPayloadHmac, he as verifyCanonicalPayloadSignature, Kr as verifyCapabilityChain, Gr as verifyCapabilityToken, T as verifyEnvelopeEd25519, C as verifyEnvelopeHmac, me as verifyEnvelopeSignature, hr as verifyGrpcCall, kn as verifyHttpEnvelope, Wn as verifyQueueBatch, Un as verifyQueueMessage, Ar as verifyResponse, sr as verifyStream, zn as verifyWebhook, Bn as verifyWebhookHmac, ci as withAuditSpan, gr as withGrpcVerification, Wt as withRevocationCheck, si as withVerificationSpan, Yt as wrapMcpClient, qt as wrapMcpServer, ur as wrapWebSocket };