@continuonai/rcan-ts 0.5.0 → 0.8.0

package/dist/rcan-validate.js

@@ -2944,7 +2944,7 @@ var RobotURI = class _RobotURI {
 };
 
 // src/version.ts
-var SPEC_VERSION = "1.5";
+var SPEC_VERSION = "1.9.0";
 
 // src/message.ts
 var RCANMessageError = class extends Error {
@@ -2974,6 +2974,12 @@ var RCANMessage = class _RCANMessage {
   presenceVerified;
   proximityMeters;
   readOnly;
+  /** v1.6: GAP-14 level of assurance */
+  loa;
+  /** v1.6: GAP-17 transport encoding hint */
+  transportEncoding;
+  /** v1.6: GAP-18 multi-modal media chunks */
+  mediaChunks;
   constructor(data) {
     if (!data.cmd || data.cmd.trim() === "") {
       throw new RCANMessageError("'cmd' is required");
@@ -2999,6 +3005,9 @@ var RCANMessage = class _RCANMessage {
     this.presenceVerified = data.presenceVerified;
     this.proximityMeters = data.proximityMeters;
     this.readOnly = data.readOnly;
+    this.loa = data.loa;
+    this.transportEncoding = data.transportEncoding;
+    this.mediaChunks = data.mediaChunks;
     if (this.confidence !== void 0) {
       if (this.confidence < 0 || this.confidence > 1) {
         throw new RCANMessageError(
@@ -3037,6 +3046,9 @@ var RCANMessage = class _RCANMessage {
     if (this.presenceVerified !== void 0) obj.presenceVerified = this.presenceVerified;
     if (this.proximityMeters !== void 0) obj.proximityMeters = this.proximityMeters;
     if (this.readOnly !== void 0) obj.readOnly = this.readOnly;
+    if (this.loa !== void 0) obj.loa = this.loa;
+    if (this.transportEncoding !== void 0) obj.transportEncoding = this.transportEncoding;
+    if (this.mediaChunks !== void 0) obj.mediaChunks = this.mediaChunks;
     return obj;
   }
   /** Serialize to JSON string */
@@ -3076,7 +3088,10 @@ var RCANMessage = class _RCANMessage {
       qos: obj.qos,
       presenceVerified: obj.presenceVerified,
       proximityMeters: obj.proximityMeters,
-      readOnly: obj.readOnly
+      readOnly: obj.readOnly,
+      loa: obj.loa,
+      transportEncoding: obj.transportEncoding,
+      mediaChunks: obj.mediaChunks
     });
   }
 };

package/dist/rcan.iife.js

@@ -1,4 +1,4 @@
-"use strict";var RCAN=(()=>{var Re=Object.defineProperty;var ft=Object.getOwnPropertyDescriptor;var lt=Object.getOwnPropertyNames;var mt=Object.prototype.hasOwnProperty;var gt=(r=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(r,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):r)(function(r){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+r+'" is not supported')});var pt=(r,e)=>{for(var t in e)Re(r,t,{get:e[t],enumerable:!0})},ht=(r,e,t,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of lt(e))!mt.call(r,s)&&s!==t&&Re(r,s,{get:()=>e[s],enumerable:!(n=ft(e,s))||n.enumerable});return r};var yt=r=>ht(Re({},"__esModule",{value:!0}),r);var Pt={};pt(Pt,{AuditChain:()=>B,AuditError:()=>G,ClockDriftError:()=>L,CommitmentRecord:()=>P,ConfidenceGate:()=>J,DataCategory:()=>Ce,FaultCode:()=>Ae,GateError:()=>C,HiTLGate:()=>Y,KeyStore:()=>ue,MessageType:()=>T,NodeClient:()=>se,OfflineModeManager:()=>ge,QoSAckTimeoutError:()=>ie,QoSLevel:()=>xe,QoSManager:()=>ae,RCANAddressError:()=>W,RCANConfigAuthorizationError:()=>re,RCANDelegationChainError:()=>te,RCANError:()=>y,RCANGateError:()=>z,RCANMessage:()=>m,RCANMessageError:()=>v,RCANNodeError:()=>D,RCANNodeNotFoundError:()=>A,RCANNodeSyncError:()=>h,RCANNodeTrustError:()=>$,RCANRegistryError:()=>U,RCANReplayAttackError:()=>ee,RCANSignatureError:()=>X,RCANValidationError:()=>Q,RCANVersionIncompatibleError:()=>Z,RCAN_VERSION:()=>Dt,RegistryClient:()=>ne,ReplayCache:()=>de,RevocationCache:()=>K,RobotURI:()=>I,RobotURIError:()=>k,SAFETY_MESSAGE_TYPE:()=>we,SPEC_VERSION:()=>b,VERSION:()=>Ut,addDelegationHop:()=>Ie,assertClockSynced:()=>Be,checkClockSync:()=>Ee,checkRevocation:()=>Ze,fetchCanonicalSchema:()=>oe,isSafetyMessage:()=>Fe,makeCloudRelayMessage:()=>ke,makeConfigUpdate:()=>We,makeConsentDeny:()=>me,makeConsentGrant:()=>le,makeConsentRequest:()=>fe,makeEstopMessage:()=>Ke,makeEstopWithQoS:()=>Le,makeFaultReport:()=>ot,makeKeyRotationMessage:()=>ze,makeResumeMessage:()=>Ve,makeRevocationBroadcast:()=>et,makeStopMessage:()=>He,makeTrainingConsentDeny:()=>nt,makeTrainingConsentGrant:()=>rt,makeTrainingConsentRequest:()=>tt,makeTransparencyMessage:()=>Ye,validateConfig:()=>$e,validateConfigAgainstSchema:()=>qe,validateConfigUpdate:()=>Qe,validateConsentMessage:()=>Xe,validateDelegationChain:()=>Te,validateMessage:()=>Pe,validateNodeAgainstSchema:()=>je,validateReplay:()=>Ge,validateSafetyMessage:()=>Je,validateTrainingDataMessage:()=>st,validateURI:()=>De,validateVersionCompat:()=>Oe});var k=class extends Error{constructor(e){super(e),this.name="RobotURIError"}},I=class r{registry;manufacturer;model;version;deviceId;constructor(e){this.registry=e.registry,this.manufacturer=e.manufacturer,this.model=e.model,this.version=e.version,this.deviceId=e.deviceId}static parse(e){if(!e.startsWith("rcan://"))throw new k(`URI must start with 'rcan://' \u2014 got: ${e}`);let n=e.slice(7).split("/");if(n.length!==5)throw new k(`URI must have exactly 5 path segments (registry/manufacturer/model/version/device-id) \u2014 got ${n.length} in: ${e}`);let[s,o,i,c,d]=n;for(let[u,g]of[["registry",s],["manufacturer",o],["model",i],["version",c],["device-id",d]])if(!g||g.trim()==="")throw new k(`URI segment '${u}' must not be empty`);return new r({registry:s,manufacturer:o,model:i,version:c,deviceId:d})}static build(e){let t=e.registry??"registry.rcan.dev",{manufacturer:n,model:s,version:o,deviceId:i}=e;for(let[c,d]of[["manufacturer",n],["model",s],["version",o],["deviceId",i]])if(!d||d.trim()==="")throw new k(`'${c}' must not be empty`);return new r({registry:t,manufacturer:n,model:s,version:o,deviceId:i})}toString(){return`rcan://${this.registry}/${this.manufacturer}/${this.model}/${this.version}/${this.deviceId}`}get namespace(){return`${this.manufacturer}/${this.model}`}get registryUrl(){return`https://${this.registry}/registry/${this.manufacturer}/${this.model}/${this.version}/${this.deviceId}`}equals(e){return this.toString()===e.toString()}toJSON(){return{uri:this.toString(),registry:this.registry,manufacturer:this.manufacturer,model:this.model,version:this.version,deviceId:this.deviceId}}};var b="1.5";function Oe(r,e="1.5"){let t=o=>{let i=o.split("."),c=parseInt(i[0]??"0",10),d=parseInt(i[1]??"0",10);return[isNaN(c)?0:c,isNaN(d)?0:d]},[n]=t(r),[s]=t(e);return n===s}var T=(a=>(a[a.COMMAND=1]="COMMAND",a[a.RESPONSE=2]="RESPONSE",a[a.STATUS=3]="STATUS",a[a.HEARTBEAT=4]="HEARTBEAT",a[a.CONFIG=5]="CONFIG",a[a.SAFETY=6]="SAFETY",a[a.SENSOR_DATA=7]="SENSOR_DATA",a[a.AUDIT=8]="AUDIT",a[a.DISCOVER=9]="DISCOVER",a[a.TRAINING_DATA=10]="TRAINING_DATA",a[a.TRANSPARENCY=11]="TRANSPARENCY",a[a.FEDERATION_SYNC=12]="FEDERATION_SYNC",a[a.ALERT=13]="ALERT",a[a.TELEOP=14]="TELEOP",a[a.CHAT=15]="CHAT",a[a.ERROR=16]="ERROR",a[a.COMMAND_ACK=17]="COMMAND_ACK",a[a.COMMAND_COMMIT=18]="COMMAND_COMMIT",a[a.ROBOT_REVOCATION=19]="ROBOT_REVOCATION",a[a.CONSENT_REQUEST=20]="CONSENT_REQUEST",a[a.CONSENT_GRANT=21]="CONSENT_GRANT",a[a.CONSENT_DENY=22]="CONSENT_DENY",a[a.FLEET_COMMAND=23]="FLEET_COMMAND",a[a.SUBSCRIBE=24]="SUBSCRIBE",a[a.UNSUBSCRIBE=25]="UNSUBSCRIBE",a[a.FAULT_REPORT=26]="FAULT_REPORT",a[a.COMMAND_NACK=27]="COMMAND_NACK",a))(T||{}),v=class extends Error{constructor(e){super(e),this.name="RCANMessageError"}},m=class r{rcan;rcanVersion;cmd;target;params;confidence;modelIdentity;signature;timestamp;senderType;cloudProvider;keyId;delegationChain;groupId;qos;presenceVerified;proximityMeters;readOnly;constructor(e){if(!e.cmd||e.cmd.trim()==="")throw new v("'cmd' is required");if(!e.target)throw new v("'target' is required");if(this.rcan=e.rcan??"1.5",this.rcanVersion=e.rcanVersion??"1.5",this.cmd=e.cmd,this.target=e.target instanceof I?e.target.toString():String(e.target),this.params=e.params??{},this.confidence=e.confidence,this.modelIdentity=e.modelIdentity??e.model_identity,this.signature=e.signature,this.timestamp=e.timestamp??new Date().toISOString(),this.senderType=e.senderType,this.cloudProvider=e.cloudProvider,this.keyId=e.keyId,this.delegationChain=e.delegationChain,this.groupId=e.groupId,this.qos=e.qos,this.presenceVerified=e.presenceVerified,this.proximityMeters=e.proximityMeters,this.readOnly=e.readOnly,this.confidence!==void 0&&(this.confidence<0||this.confidence>1))throw new v(`confidence must be in [0.0, 1.0] \u2014 got ${this.confidence}`)}get isSigned(){return this.signature!==void 0&&this.signature.sig!==""}get isAiDriven(){return this.confidence!==void 0}toJSON(){let e={rcan:this.rcan,rcanVersion:this.rcanVersion,cmd:this.cmd,target:this.target,timestamp:this.timestamp};return Object.keys(this.params).length>0&&(e.params=this.params),this.confidence!==void 0&&(e.confidence=this.confidence),this.modelIdentity&&(e.model_identity=this.modelIdentity),this.signature&&(e.signature=this.signature),this.senderType!==void 0&&(e.senderType=this.senderType),this.cloudProvider!==void 0&&(e.cloudProvider=this.cloudProvider),this.keyId!==void 0&&(e.keyId=this.keyId),this.delegationChain!==void 0&&(e.delegationChain=this.delegationChain),this.groupId!==void 0&&(e.groupId=this.groupId),this.qos!==void 0&&(e.qos=this.qos),this.presenceVerified!==void 0&&(e.presenceVerified=this.presenceVerified),this.proximityMeters!==void 0&&(e.proximityMeters=this.proximityMeters),this.readOnly!==void 0&&(e.readOnly=this.readOnly),e}toJSONString(e){return JSON.stringify(this.toJSON(),null,e)}static fromJSON(e){let t;if(typeof e=="string")try{t=JSON.parse(e)}catch{throw new v("Invalid JSON string")}else t=e;if(!t.cmd)throw new v("Missing required field: 'cmd'");if(!t.target)throw new v("Missing required field: 'target'");if(!t.rcan)throw new v("Missing required field: 'rcan'");return new r({rcan:t.rcan,rcanVersion:t.rcanVersion,cmd:t.cmd,target:t.target,params:t.params??{},confidence:t.confidence,modelIdentity:t.model_identity??t.modelIdentity,signature:t.signature,timestamp:t.timestamp,senderType:t.senderType,cloudProvider:t.cloudProvider,keyId:t.keyId,delegationChain:t.delegationChain,groupId:t.groupId,qos:t.qos,presenceVerified:t.presenceVerified,proximityMeters:t.proximityMeters,readOnly:t.readOnly})}};function ke(r,e){let t=r.toJSON();return t.senderType="cloud_function",t.cloudProvider=e,new m(t)}function Ie(r,e){let t=r.delegationChain?[...r.delegationChain,e]:[e],n=r.toJSON();return n.delegationChain=t,new m(n)}function Te(r){if(r.length>4)return{valid:!1,reason:"DELEGATION_CHAIN_EXCEEDED: max depth is 4 hops"};for(let e=0;e<r.length;e++){let t=r[e];if(!t)return{valid:!1,reason:`hop ${e} is undefined`};if(!t.issuerRuri)return{valid:!1,reason:`hop ${e}: missing issuerRuri`};if(!t.humanSubject)return{valid:!1,reason:`hop ${e}: missing humanSubject`};if(!t.timestamp)return{valid:!1,reason:`hop ${e}: missing timestamp`};if(!t.scope)return{valid:!1,reason:`hop ${e}: missing scope`};if(!t.signature)return{valid:!1,reason:`hop ${e}: missing signature`}}return{valid:!0,reason:"ok"}}function F(){if(typeof globalThis.crypto<"u"&&typeof globalThis.crypto.randomUUID=="function")return globalThis.crypto.randomUUID();try{let{randomUUID:r}=gt("crypto");return r()}catch{return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,r=>{let e=Math.random()*16|0;return(r==="x"?e:e&3|8).toString(16)})}}function Se(r,e){return typeof process<"u",_t(r,e)}function _e(r){let e=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],t=1779033703,n=3144134277,s=1013904242,o=2773480762,i=1359893119,c=2600822924,d=528734635,u=1541459225,it=r.length*8,E=[...r];for(E.push(128);E.length%64!==56;)E.push(0);for(let S=7;S>=0;S--)E.push(it/Math.pow(2,S*8)&255);for(let S=0;S<E.length;S+=64){let R=[];for(let f=0;f<16;f++)R[f]=E[S+f*4]<<24|E[S+f*4+1]<<16|E[S+f*4+2]<<8|E[S+f*4+3];for(let f=16;f<64;f++){let ye=x(R[f-15],7)^x(R[f-15],18)^R[f-15]>>>3,a=x(R[f-2],17)^x(R[f-2],19)^R[f-2]>>>10;R[f]=R[f-16]+ye+R[f-7]+a>>>0}let[N,q,j,pe,O,H,V,he]=[t,n,s,o,i,c,d,u];for(let f=0;f<64;f++){let ye=x(O,6)^x(O,11)^x(O,25),a=O&H^~O&V,Ne=he+ye+a+e[f]+R[f]>>>0,ct=x(N,2)^x(N,13)^x(N,22),dt=N&q^N&j^q&j,ut=ct+dt>>>0;[he,V,H,O,pe,j,q,N]=[V,H,O,pe+Ne>>>0,j,q,N,Ne+ut>>>0]}t=t+N>>>0,n=n+q>>>0,s=s+j>>>0,o=o+pe>>>0,i=i+O>>>0,c=c+H>>>0,d=d+V>>>0,u=u+he>>>0}let p=new Uint8Array(32),at=new DataView(p.buffer);return[t,n,s,o,i,c,d,u].forEach((S,R)=>at.setUint32(R*4,S)),p}function x(r,e){return r>>>e|r<<32-e}function Me(r){if(typeof TextEncoder<"u")return new TextEncoder().encode(r);let e=new Uint8Array(r.length);for(let t=0;t<r.length;t++)e[t]=r.charCodeAt(t)&255;return e}function Rt(r){return Array.from(r).map(e=>e.toString(16).padStart(2,"0")).join("")}function _t(r,e){let n=Me(r);n.length>64&&(n=_e(n));let s=new Uint8Array(64),o=new Uint8Array(64);for(let g=0;g<64;g++)s[g]=(n[g]??0)^54,o[g]=(n[g]??0)^92;let i=Me(e),c=new Uint8Array(64+i.length);c.set(s),c.set(i,64);let d=_e(c),u=new Uint8Array(96);return u.set(o),u.set(d,64),Rt(_e(u))}var C=class extends Error{constructor(e){super(e),this.name="GateError"}},J=class{threshold;constructor(e=.8){if(e<0||e>1)throw new C(`threshold must be in [0.0, 1.0] \u2014 got ${e}`);this.threshold=e}allows(e){return e>=this.threshold}margin(e){return e-this.threshold}assert(e,t){if(!this.allows(e)){let n=t?` for action '${t}'`:"";throw new C(`Confidence ${e}${n} is below threshold ${this.threshold}`)}}},Y=class{_pending=new Map;request(e,t={}){let n=F();return this._pending.set(n,{token:n,action:e,context:t,createdAt:new Date().toISOString(),status:"pending"}),n}approve(e){let t=this._pending.get(e);if(!t)throw new C(`Unknown token: ${e}`);t.status="approved"}deny(e,t){let n=this._pending.get(e);if(!n)throw new C(`Unknown token: ${e}`);n.status="denied",t&&(n.reason=t)}check(e){let t=this._pending.get(e);if(!t)throw new C(`Unknown token: ${e}`);return t.status}get pendingApprovals(){return Array.from(this._pending.values()).filter(e=>e.status==="pending")}getApproval(e){return this._pending.get(e)}clearResolved(){for(let[e,t]of this._pending.entries())t.status!=="pending"&&this._pending.delete(e)}};var G=class extends Error{constructor(e){super(e),this.name="AuditError"}};function St(r,e,t,n,s){let o=JSON.stringify({recordId:r,action:e,robotUri:t,timestamp:n,params:s},Object.keys({recordId:r,action:e,robotUri:t,timestamp:n,params:s}).sort());return Se("rcan-content-hash",o)}function Ue(r,e){let{hmac:t,...n}=e,s=JSON.stringify(n,Object.keys(n).sort());return Se(r,s)}var P=class r{recordId;action;robotUri;confidence;modelIdentity;params;safetyApproved;timestamp;contentHash;previousHash;hmac;constructor(e){this.recordId=e.recordId,this.action=e.action,this.robotUri=e.robotUri,this.confidence=e.confidence,this.modelIdentity=e.modelIdentity,this.params=e.params,this.safetyApproved=e.safetyApproved,this.timestamp=e.timestamp,this.contentHash=e.contentHash,this.previousHash=e.previousHash,this.hmac=e.hmac}static create(e,t,n=null){let s=F(),o=new Date().toISOString(),i=e.params??{},c=e.robotUri??"",d=St(s,e.action,c,o,i),u={recordId:s,action:e.action,robotUri:c,confidence:e.confidence,modelIdentity:e.modelIdentity,params:i,safetyApproved:e.safetyApproved??!0,timestamp:o,contentHash:d,previousHash:n,hmac:""};return u.hmac=Ue(t,u),new r(u)}verify(e){return Ue(e,this.toJSON())===this.hmac}toJSON(){return{recordId:this.recordId,action:this.action,robotUri:this.robotUri,confidence:this.confidence,modelIdentity:this.modelIdentity,params:this.params,safetyApproved:this.safetyApproved,timestamp:this.timestamp,contentHash:this.contentHash,previousHash:this.previousHash,hmac:this.hmac}}static fromJSON(e){return new r(e)}},B=class r{_records=[];_secret;constructor(e){this._secret=e}get records(){return this._records}append(e){let n=this._records[this._records.length-1]?.contentHash??null,s=P.create(e,this._secret,n);return this._records.push(s),s}verifyAll(){let e=[],t=null;for(let n of this._records)n.verify(this._secret)||e.push(`HMAC invalid for record ${n.recordId.slice(0,8)}`),t!==null&&n.previousHash!==t&&e.push(`Chain broken at ${n.recordId.slice(0,8)}: expected prev=${t.slice(0,12)}`),t=n.contentHash;return{valid:e.length===0,count:this._records.length,errors:e}}toJSONL(){return this._records.map(e=>JSON.stringify(e.toJSON())).join(`
+"use strict";var RCAN=(()=>{var rn=Object.create;var z=Object.defineProperty;var sn=Object.getOwnPropertyDescriptor;var on=Object.getOwnPropertyNames;var an=Object.getPrototypeOf,cn=Object.prototype.hasOwnProperty;var Q=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>(typeof require<"u"?require:e)[n]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var dn=(t,e)=>{for(var n in e)z(t,n,{get:e[n],enumerable:!0})},Ze=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of on(e))!cn.call(t,s)&&s!==n&&z(t,s,{get:()=>e[s],enumerable:!(r=sn(e,s))||r.enumerable});return t};var et=(t,e,n)=>(n=t!=null?rn(an(t)):{},Ze(e||!t||!t.__esModule?z(n,"default",{value:t,enumerable:!0}):n,t)),un=t=>Ze(z({},"__esModule",{value:!0}),t);var Pn={};dn(Pn,{AuditChain:()=>ne,AuditError:()=>te,CONTRIBUTE_SCOPE_LEVEL:()=>Qe,ClockDriftError:()=>H,CommitmentRecord:()=>$,ConfidenceGate:()=>Z,DEFAULT_LOA_POLICY:()=>je,DataCategory:()=>Le,FaultCode:()=>$e,FederationSyncType:()=>Be,GateError:()=>O,HiTLGate:()=>ee,KeyStore:()=>Re,LevelOfAssurance:()=>Ae,MediaEncoding:()=>Je,MessageType:()=>x,NodeClient:()=>le,OfflineModeManager:()=>Ce,PRODUCTION_LOA_POLICY:()=>Ut,QoSAckTimeoutError:()=>ge,QoSLevel:()=>Me,QoSManager:()=>pe,RCANAddressError:()=>re,RCANConfigAuthorizationError:()=>ue,RCANDelegationChainError:()=>de,RCANError:()=>_,RCANGateError:()=>oe,RCANMessage:()=>l,RCANMessageError:()=>A,RCANNodeError:()=>L,RCANNodeNotFoundError:()=>k,RCANNodeSyncError:()=>R,RCANNodeTrustError:()=>j,RCANRegistryError:()=>D,RCANReplayAttackError:()=>ce,RCANSignatureError:()=>ie,RCANValidationError:()=>se,RCANVersionIncompatibleError:()=>ae,RCAN_VERSION:()=>Mn,RegistryClient:()=>fe,RegistryTier:()=>qe,ReplayCache:()=>ye,RevocationCache:()=>K,RobotURI:()=>M,RobotURIError:()=>U,SAFETY_MESSAGE_TYPE:()=>Pe,SDK_VERSION:()=>tt,SPEC_VERSION:()=>h,TransportEncoding:()=>Ke,TransportError:()=>E,TrustAnchorCache:()=>xe,VERSION:()=>Un,addDelegationHop:()=>st,addMediaInline:()=>ze,addMediaRef:()=>Vt,assertClockSynced:()=>bt,checkClockSync:()=>De,checkRevocation:()=>wt,decodeBleFrames:()=>Ft,decodeCompact:()=>Ye,decodeMinimal:()=>qt,encodeBleFrames:()=>Bt,encodeCompact:()=>Ve,encodeMinimal:()=>jt,extractLoaFromJwt:()=>Ee,fetchCanonicalSchema:()=>me,isPreemptedBy:()=>Zt,isSafetyMessage:()=>yt,makeCloudRelayMessage:()=>rt,makeConfigUpdate:()=>Ct,makeConsentDeny:()=>be,makeConsentGrant:()=>Se,makeConsentRequest:()=>_e,makeContributeCancel:()=>Qt,makeContributeRequest:()=>Wt,makeContributeResult:()=>zt,makeEstopMessage:()=>gt,makeEstopWithQoS:()=>mt,makeFaultReport:()=>It,makeFederationSync:()=>Pt,makeKeyRotationMessage:()=>Et,makeResumeMessage:()=>ht,makeRevocationBroadcast:()=>vt,makeStopMessage:()=>pt,makeStreamChunk:()=>Gt,makeTrainingConsentDeny:()=>kt,makeTrainingConsentGrant:()=>Ot,makeTrainingConsentRequest:()=>Nt,makeTrainingDataMessage:()=>Jt,makeTransparencyMessage:()=>_t,selectTransport:()=>Ht,validateConfig:()=>ut,validateConfigAgainstSchema:()=>ft,validateConfigUpdate:()=>At,validateConsentMessage:()=>xt,validateContributeScope:()=>Xt,validateCrossRegistryCommand:()=>Dt,validateDelegationChain:()=>ot,validateLoaForScope:()=>Mt,validateMediaChunks:()=>Yt,validateMessage:()=>dt,validateNodeAgainstSchema:()=>lt,validateReplay:()=>St,validateSafetyMessage:()=>Rt,validateTrainingDataMessage:()=>Tt,validateURI:()=>ct,validateVersionCompat:()=>nt});var U=class extends Error{constructor(e){super(e),this.name="RobotURIError"}},M=class t{registry;manufacturer;model;version;deviceId;constructor(e){this.registry=e.registry,this.manufacturer=e.manufacturer,this.model=e.model,this.version=e.version,this.deviceId=e.deviceId}static parse(e){if(!e.startsWith("rcan://"))throw new U(`URI must start with 'rcan://' \u2014 got: ${e}`);let r=e.slice(7).split("/");if(r.length!==5)throw new U(`URI must have exactly 5 path segments (registry/manufacturer/model/version/device-id) \u2014 got ${r.length} in: ${e}`);let[s,o,i,a,d]=r;for(let[u,f]of[["registry",s],["manufacturer",o],["model",i],["version",a],["device-id",d]])if(!f||f.trim()==="")throw new U(`URI segment '${u}' must not be empty`);return new t({registry:s,manufacturer:o,model:i,version:a,deviceId:d})}static build(e){let n=e.registry??"registry.rcan.dev",{manufacturer:r,model:s,version:o,deviceId:i}=e;for(let[a,d]of[["manufacturer",r],["model",s],["version",o],["deviceId",i]])if(!d||d.trim()==="")throw new U(`'${a}' must not be empty`);return new t({registry:n,manufacturer:r,model:s,version:o,deviceId:i})}toString(){return`rcan://${this.registry}/${this.manufacturer}/${this.model}/${this.version}/${this.deviceId}`}get namespace(){return`${this.manufacturer}/${this.model}`}get registryUrl(){return`https://${this.registry}/registry/${this.manufacturer}/${this.model}/${this.version}/${this.deviceId}`}equals(e){return this.toString()===e.toString()}toJSON(){return{uri:this.toString(),registry:this.registry,manufacturer:this.manufacturer,model:this.model,version:this.version,deviceId:this.deviceId}}};var h="1.9.0",tt="0.8.0";function nt(t,e=h){let n=o=>{let i=o.split("."),a=parseInt(i[0]??"0",10),d=parseInt(i[1]??"0",10);return[isNaN(a)?0:a,isNaN(d)?0:d]},[r]=n(t),[s]=n(e);return r===s}var x=(c=>(c[c.COMMAND=1]="COMMAND",c[c.RESPONSE=2]="RESPONSE",c[c.STATUS=3]="STATUS",c[c.HEARTBEAT=4]="HEARTBEAT",c[c.CONFIG=5]="CONFIG",c[c.SAFETY=6]="SAFETY",c[c.AUTH=7]="AUTH",c[c.ERROR=8]="ERROR",c[c.DISCOVER=9]="DISCOVER",c[c.PENDING_AUTH=10]="PENDING_AUTH",c[c.INVOKE=11]="INVOKE",c[c.INVOKE_RESULT=12]="INVOKE_RESULT",c[c.INVOKE_CANCEL=13]="INVOKE_CANCEL",c[c.REGISTRY_REGISTER=14]="REGISTRY_REGISTER",c[c.REGISTRY_RESOLVE=15]="REGISTRY_RESOLVE",c[c.TRANSPARENCY=16]="TRANSPARENCY",c[c.COMMAND_ACK=17]="COMMAND_ACK",c[c.COMMAND_NACK=18]="COMMAND_NACK",c[c.ROBOT_REVOCATION=19]="ROBOT_REVOCATION",c[c.CONSENT_REQUEST=20]="CONSENT_REQUEST",c[c.CONSENT_GRANT=21]="CONSENT_GRANT",c[c.CONSENT_DENY=22]="CONSENT_DENY",c[c.FLEET_COMMAND=23]="FLEET_COMMAND",c[c.SUBSCRIBE=24]="SUBSCRIBE",c[c.UNSUBSCRIBE=25]="UNSUBSCRIBE",c[c.FAULT_REPORT=26]="FAULT_REPORT",c[c.KEY_ROTATION=27]="KEY_ROTATION",c[c.COMMAND_COMMIT=28]="COMMAND_COMMIT",c[c.SENSOR_DATA=29]="SENSOR_DATA",c[c.TRAINING_CONSENT_REQUEST=30]="TRAINING_CONSENT_REQUEST",c[c.TRAINING_CONSENT_GRANT=31]="TRAINING_CONSENT_GRANT",c[c.TRAINING_CONSENT_DENY=32]="TRAINING_CONSENT_DENY",c[c.CONTRIBUTE_REQUEST=33]="CONTRIBUTE_REQUEST",c[c.CONTRIBUTE_RESULT=34]="CONTRIBUTE_RESULT",c[c.CONTRIBUTE_CANCEL=35]="CONTRIBUTE_CANCEL",c[c.TRAINING_DATA=36]="TRAINING_DATA",c[c.FEDERATION_SYNC=23]="FEDERATION_SYNC",c[c.ALERT=26]="ALERT",c[c.AUDIT=16]="AUDIT",c))(x||{}),A=class extends Error{constructor(e){super(e),this.name="RCANMessageError"}},l=class t{rcan;rcanVersion;cmd;target;params;confidence;modelIdentity;signature;timestamp;senderType;cloudProvider;keyId;delegationChain;groupId;qos;presenceVerified;proximityMeters;readOnly;loa;transportEncoding;mediaChunks;constructor(e){if(!e.cmd||e.cmd.trim()==="")throw new A("'cmd' is required");if(!e.target)throw new A("'target' is required");if(this.rcan=e.rcan??h,this.rcanVersion=e.rcanVersion??h,this.cmd=e.cmd,this.target=e.target instanceof M?e.target.toString():String(e.target),this.params=e.params??{},this.confidence=e.confidence,this.modelIdentity=e.modelIdentity??e.model_identity,this.signature=e.signature,this.timestamp=e.timestamp??new Date().toISOString(),this.senderType=e.senderType,this.cloudProvider=e.cloudProvider,this.keyId=e.keyId,this.delegationChain=e.delegationChain,this.groupId=e.groupId,this.qos=e.qos,this.presenceVerified=e.presenceVerified,this.proximityMeters=e.proximityMeters,this.readOnly=e.readOnly,this.loa=e.loa,this.transportEncoding=e.transportEncoding,this.mediaChunks=e.mediaChunks,this.confidence!==void 0&&(this.confidence<0||this.confidence>1))throw new A(`confidence must be in [0.0, 1.0] \u2014 got ${this.confidence}`)}get isSigned(){return this.signature!==void 0&&this.signature.sig!==""}get isAiDriven(){return this.confidence!==void 0}toJSON(){let e={rcan:this.rcan,rcanVersion:this.rcanVersion,cmd:this.cmd,target:this.target,timestamp:this.timestamp};return Object.keys(this.params).length>0&&(e.params=this.params),this.confidence!==void 0&&(e.confidence=this.confidence),this.modelIdentity&&(e.model_identity=this.modelIdentity),this.signature&&(e.signature=this.signature),this.senderType!==void 0&&(e.senderType=this.senderType),this.cloudProvider!==void 0&&(e.cloudProvider=this.cloudProvider),this.keyId!==void 0&&(e.keyId=this.keyId),this.delegationChain!==void 0&&(e.delegationChain=this.delegationChain),this.groupId!==void 0&&(e.groupId=this.groupId),this.qos!==void 0&&(e.qos=this.qos),this.presenceVerified!==void 0&&(e.presenceVerified=this.presenceVerified),this.proximityMeters!==void 0&&(e.proximityMeters=this.proximityMeters),this.readOnly!==void 0&&(e.readOnly=this.readOnly),this.loa!==void 0&&(e.loa=this.loa),this.transportEncoding!==void 0&&(e.transportEncoding=this.transportEncoding),this.mediaChunks!==void 0&&(e.mediaChunks=this.mediaChunks),e}toJSONString(e){return JSON.stringify(this.toJSON(),null,e)}static fromJSON(e){let n;if(typeof e=="string")try{n=JSON.parse(e)}catch{throw new A("Invalid JSON string")}else n=e;if(!n.cmd)throw new A("Missing required field: 'cmd'");if(!n.target)throw new A("Missing required field: 'target'");if(!n.rcan)throw new A("Missing required field: 'rcan'");return new t({rcan:n.rcan,rcanVersion:n.rcanVersion,cmd:n.cmd,target:n.target,params:n.params??{},confidence:n.confidence,modelIdentity:n.model_identity??n.modelIdentity,signature:n.signature,timestamp:n.timestamp,senderType:n.senderType,cloudProvider:n.cloudProvider,keyId:n.keyId,delegationChain:n.delegationChain,groupId:n.groupId,qos:n.qos,presenceVerified:n.presenceVerified,proximityMeters:n.proximityMeters,readOnly:n.readOnly,loa:n.loa,transportEncoding:n.transportEncoding,mediaChunks:n.mediaChunks})}};function rt(t,e){let n=t.toJSON();return n.senderType="cloud_function",n.cloudProvider=e,new l(n)}function st(t,e){let n=t.delegationChain?[...t.delegationChain,e]:[e],r=t.toJSON();return r.delegationChain=n,new l(r)}function ot(t){if(t.length>4)return{valid:!1,reason:"DELEGATION_CHAIN_EXCEEDED: max depth is 4 hops"};for(let e=0;e<t.length;e++){let n=t[e];if(!n)return{valid:!1,reason:`hop ${e} is undefined`};if(!n.issuerRuri)return{valid:!1,reason:`hop ${e}: missing issuerRuri`};if(!n.humanSubject)return{valid:!1,reason:`hop ${e}: missing humanSubject`};if(!n.timestamp)return{valid:!1,reason:`hop ${e}: missing timestamp`};if(!n.scope)return{valid:!1,reason:`hop ${e}: missing scope`};if(!n.signature)return{valid:!1,reason:`hop ${e}: missing signature`}}return{valid:!0,reason:"ok"}}function X(){if(typeof globalThis.crypto<"u"&&typeof globalThis.crypto.randomUUID=="function")return globalThis.crypto.randomUUID();try{let{randomUUID:t}=Q("crypto");return t()}catch{return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,t=>{let e=Math.random()*16|0;return(t==="x"?e:e&3|8).toString(16)})}}function Te(t,e){return typeof process<"u",ln(t,e)}function ke(t){let e=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],n=1779033703,r=3144134277,s=1013904242,o=2773480762,i=1359893119,a=2600822924,d=528734635,u=1541459225,q=t.length*8,C=[...t];for(C.push(128);C.length%64!==56;)C.push(0);for(let y=7;y>=0;y--)C.push(q/Math.pow(2,y*8)&255);for(let y=0;y<C.length;y+=64){let S=[];for(let g=0;g<16;g++)S[g]=C[y+g*4]<<24|C[y+g*4+1]<<16|C[y+g*4+2]<<8|C[y+g*4+3];for(let g=16;g<64;g++){let Ne=w(S[g-15],7)^w(S[g-15],18)^S[g-15]>>>3,Oe=w(S[g-2],17)^w(S[g-2],19)^S[g-2]>>>10;S[g]=S[g-16]+Ne+S[g-7]+Oe>>>0}let[T,B,F,we,I,G,W,ve]=[n,r,s,o,i,a,d,u];for(let g=0;g<64;g++){let Ne=w(I,6)^w(I,11)^w(I,25),Oe=I&G^~I&W,Xe=ve+Ne+Oe+e[g]+S[g]>>>0,en=w(T,2)^w(T,13)^w(T,22),tn=T&B^T&F^B&F,nn=en+tn>>>0;[ve,W,G,I,we,F,B,T]=[W,G,I,we+Xe>>>0,F,B,T,Xe+nn>>>0]}n=n+T>>>0,r=r+B>>>0,s=s+F>>>0,o=o+we>>>0,i=i+I>>>0,a=a+G>>>0,d=d+W>>>0,u=u+ve>>>0}let p=new Uint8Array(32),N=new DataView(p.buffer);return[n,r,s,o,i,a,d,u].forEach((y,S)=>N.setUint32(S*4,y)),p}function w(t,e){return t>>>e|t<<32-e}function it(t){if(typeof TextEncoder<"u")return new TextEncoder().encode(t);let e=new Uint8Array(t.length);for(let n=0;n<t.length;n++)e[n]=t.charCodeAt(n)&255;return e}function fn(t){return Array.from(t).map(e=>e.toString(16).padStart(2,"0")).join("")}function ln(t,e){let r=it(t);r.length>64&&(r=ke(r));let s=new Uint8Array(64),o=new Uint8Array(64);for(let f=0;f<64;f++)s[f]=(r[f]??0)^54,o[f]=(r[f]??0)^92;let i=it(e),a=new Uint8Array(64+i.length);a.set(s),a.set(i,64);let d=ke(a),u=new Uint8Array(96);return u.set(o),u.set(d,64),fn(ke(u))}var O=class extends Error{constructor(e){super(e),this.name="GateError"}},Z=class{threshold;constructor(e=.8){if(e<0||e>1)throw new O(`threshold must be in [0.0, 1.0] \u2014 got ${e}`);this.threshold=e}allows(e){return e>=this.threshold}margin(e){return e-this.threshold}assert(e,n){if(!this.allows(e)){let r=n?` for action '${n}'`:"";throw new O(`Confidence ${e}${r} is below threshold ${this.threshold}`)}}},ee=class{_pending=new Map;request(e,n={}){let r=X();return this._pending.set(r,{token:r,action:e,context:n,createdAt:new Date().toISOString(),status:"pending"}),r}approve(e){let n=this._pending.get(e);if(!n)throw new O(`Unknown token: ${e}`);n.status="approved"}deny(e,n){let r=this._pending.get(e);if(!r)throw new O(`Unknown token: ${e}`);r.status="denied",n&&(r.reason=n)}check(e){let n=this._pending.get(e);if(!n)throw new O(`Unknown token: ${e}`);return n.status}get pendingApprovals(){return Array.from(this._pending.values()).filter(e=>e.status==="pending")}getApproval(e){return this._pending.get(e)}clearResolved(){for(let[e,n]of this._pending.entries())n.status!=="pending"&&this._pending.delete(e)}};var te=class extends Error{constructor(e){super(e),this.name="AuditError"}};function mn(t,e,n,r,s){let o=JSON.stringify({recordId:t,action:e,robotUri:n,timestamp:r,params:s},Object.keys({recordId:t,action:e,robotUri:n,timestamp:r,params:s}).sort());return Te("rcan-content-hash",o)}function at(t,e){let{hmac:n,...r}=e,s=JSON.stringify(r,Object.keys(r).sort());return Te(t,s)}var $=class t{recordId;action;robotUri;confidence;modelIdentity;params;safetyApproved;timestamp;contentHash;previousHash;hmac;constructor(e){this.recordId=e.recordId,this.action=e.action,this.robotUri=e.robotUri,this.confidence=e.confidence,this.modelIdentity=e.modelIdentity,this.params=e.params,this.safetyApproved=e.safetyApproved,this.timestamp=e.timestamp,this.contentHash=e.contentHash,this.previousHash=e.previousHash,this.hmac=e.hmac}static create(e,n,r=null){let s=X(),o=new Date().toISOString(),i=e.params??{},a=e.robotUri??"",d=mn(s,e.action,a,o,i),u={recordId:s,action:e.action,robotUri:a,confidence:e.confidence,modelIdentity:e.modelIdentity,params:i,safetyApproved:e.safetyApproved??!0,timestamp:o,contentHash:d,previousHash:r,hmac:""};return u.hmac=at(n,u),new t(u)}verify(e){return at(e,this.toJSON())===this.hmac}toJSON(){return{recordId:this.recordId,action:this.action,robotUri:this.robotUri,confidence:this.confidence,modelIdentity:this.modelIdentity,params:this.params,safetyApproved:this.safetyApproved,timestamp:this.timestamp,contentHash:this.contentHash,previousHash:this.previousHash,hmac:this.hmac}}static fromJSON(e){return new t(e)}},ne=class t{_records=[];_secret;constructor(e){this._secret=e}get records(){return this._records}append(e){let r=this._records[this._records.length-1]?.contentHash??null,s=$.create(e,this._secret,r);return this._records.push(s),s}verifyAll(){let e=[],n=null;for(let r of this._records)r.verify(this._secret)||e.push(`HMAC invalid for record ${r.recordId.slice(0,8)}`),n!==null&&r.previousHash!==n&&e.push(`Chain broken at ${r.recordId.slice(0,8)}: expected prev=${n.slice(0,12)}`),n=r.contentHash;return{valid:e.length===0,count:this._records.length,errors:e}}toJSONL(){return this._records.map(e=>JSON.stringify(e.toJSON())).join(`
 `)+`
-`}static fromJSONL(e,t){let n=new r(t),s=e.trim().split(`
-`).filter(o=>o.trim()!=="");for(let o of s){let i=JSON.parse(o);n._records.push(P.fromJSON(i))}return n}};function be(){return{ok:!0,issues:[],warnings:[],info:[]}}function w(r,e){r.ok=!1,r.issues.push(e)}function M(r,e){r.warnings.push(e)}function _(r,e){r.info.push(e)}function De(r){let e=be();try{let t=I.parse(r);_(e,"\u2705 Valid RCAN URI"),_(e,`   Registry:     ${t.registry}`),_(e,`   Manufacturer: ${t.manufacturer}`),_(e,`   Model:        ${t.model}`),_(e,`   Version:      ${t.version}`),_(e,`   Device ID:    ${t.deviceId}`)}catch(t){w(e,`Invalid RCAN URI: ${t instanceof Error?t.message:t}`)}return e}function Pe(r){let e=be(),t;if(typeof r=="string")try{t=JSON.parse(r)}catch{return w(e,"Invalid JSON string"),e}else if(typeof r=="object"&&r!==null)t=r;else return w(e,"Expected object or JSON string"),e;for(let n of["rcan","cmd","target"])(!(n in t)||!t[n])&&w(e,`Missing required field: '${n}'`);if(!e.ok)return e;try{let n=m.fromJSON(t);_(e,`\u2705 RCAN message valid (v${n.rcan})`),_(e,`   cmd:    ${n.cmd}`),_(e,`   target: ${n.target}`),n.confidence!==void 0?_(e,`   confidence: ${n.confidence}`):M(e,"No confidence score \u2014 add for RCAN \xA716 AI accountability"),n.isSigned?_(e,`   signature: alg=${n.signature?.alg}, kid=${n.signature?.kid}`):M(e,"Message is unsigned (recommended for production)")}catch(n){w(e,`Message validation failed: ${n instanceof Error?n.message:n}`)}return e}function $e(r){let e=be(),t=r.metadata??{},n=r.agent??{},s=r.rcan_protocol??{};for(let i of["rcan_version","metadata","agent"])(!(i in r)||r[i]===void 0||r[i]===null)&&w(e,`Missing required key: '${i}'`);let o=r.rcan_version;if(o&&(/^\d+\.\d+$/.test(o)||w(e,`rcan_version '${o}' must match pattern N.N (e.g. '1.2')`)),t.manufacturer||w(e,"L1: metadata.manufacturer is required (\xA72)"),t.model||w(e,"L1: metadata.model is required (\xA72)"),!t.device_id&&!t.robot_name&&w(e,"L1: metadata.device_id (or robot_name) is required (\xA72)"),s.jwt_auth?.enabled||M(e,"L2: jwt_auth not enabled (required for L2 conformance, \xA78)"),(!n.confidence_gates||n.confidence_gates.length===0)&&M(e,"L2: confidence_gates not configured (\xA716)"),(!n.hitl_gates||n.hitl_gates.length===0)&&M(e,"L3: hitl_gates not configured (\xA716)"),n.commitment_chain?.enabled||M(e,"L3: commitment_chain not enabled (\xA716)"),t.rrn?_(e,`\u2705 RRN registered: ${t.rrn}`):M(e,"Robot not registered \u2014 visit rcan.dev/registry/register"),e.ok&&e.issues.length===0){let i=!e.warnings.some(g=>g.startsWith("L1")),c=i&&!e.warnings.some(g=>g.startsWith("L2")),u=c&&!e.warnings.some(g=>g.startsWith("L3"))?"L3":c?"L2":i?"L1":"FAIL";_(e,`\u2705 Config valid \u2014 conformance level: ${u}`)}return e}var y=class extends Error{constructor(e){super(e),this.name="RCANError",Object.setPrototypeOf(this,new.target.prototype)}},W=class extends y{constructor(e){super(e),this.name="RCANAddressError",Object.setPrototypeOf(this,new.target.prototype)}},Q=class extends y{constructor(e){super(e),this.name="RCANValidationError",Object.setPrototypeOf(this,new.target.prototype)}},z=class extends y{constructor(t,n,s,o){super(t);this.gateType=n;this.value=s;this.threshold=o;this.name="RCANGateError",Object.setPrototypeOf(this,new.target.prototype)}},X=class extends y{constructor(e){super(e),this.name="RCANSignatureError",Object.setPrototypeOf(this,new.target.prototype)}},U=class extends y{constructor(e){super(e),this.name="RCANRegistryError",Object.setPrototypeOf(this,new.target.prototype)}},D=class r extends y{constructor(t,n){super(t);this.nodeUrl=n;this.name="RCANNodeError",Object.setPrototypeOf(this,r.prototype)}},A=class r extends D{constructor(t,n){super(`RRN not found in federation: ${t}`,n);this.rrn=t;this.name="RCANNodeNotFoundError",Object.setPrototypeOf(this,r.prototype)}},h=class r extends D{constructor(t,n,s){super(t,n);this.cause=s;this.name="RCANNodeSyncError",Object.setPrototypeOf(this,r.prototype)}},$=class r extends D{reason;constructor(e,t){super(`Node trust verification failed: ${e}`,t),this.name="RCANNodeTrustError",this.reason=e,Object.setPrototypeOf(this,r.prototype)}},Z=class r extends y{constructor(e,t){super(`VERSION_INCOMPATIBLE: incoming=${e}, local=${t}`),this.name="RCANVersionIncompatibleError",Object.setPrototypeOf(this,r.prototype)}},ee=class r extends y{constructor(e){super(`REPLAY_DETECTED: ${e}`),this.name="RCANReplayAttackError",Object.setPrototypeOf(this,r.prototype)}},te=class r extends y{constructor(e){super(`DELEGATION_CHAIN_ERROR: ${e}`),this.name="RCANDelegationChainError",Object.setPrototypeOf(this,r.prototype)}},re=class r extends y{constructor(e){super(`CONFIG_AUTH_ERROR: ${e}`),this.name="RCANConfigAuthorizationError",Object.setPrototypeOf(this,r.prototype)}};var bt="https://rcan-spec.pages.dev",ne=class{baseUrl;apiKey;timeout;constructor(e){this.baseUrl=(e?.baseUrl??bt).replace(/\/$/,""),this.apiKey=e?.apiKey,this.timeout=e?.timeout??1e4}async _fetch(e,t={}){let n=`${this.baseUrl}${e}`,s=new AbortController,o=setTimeout(()=>s.abort(),this.timeout);try{return await fetch(n,{...t,signal:s.signal,headers:{"Content-Type":"application/json",...t.headers??{}}})}finally{clearTimeout(o)}}_authHeaders(){if(!this.apiKey)throw new U("API key required for write operations. Pass apiKey to RegistryClient.");return{Authorization:`Bearer ${this.apiKey}`}}async _checkResponse(e){if(!e.ok){let t=`Registry API error: ${e.status}`;try{let n=await e.json();n?.error&&(t=n.error)}catch{}throw new U(t)}return await e.json()}async register(e){let t=await this._fetch("/api/v1/robots",{method:"POST",body:JSON.stringify(e)});return this._checkResponse(t)}async get(e){let t=await this._fetch(`/api/v1/robots/${encodeURIComponent(e)}`);return this._checkResponse(t)}async list(e){let t=new URLSearchParams;e?.limit!==void 0&&t.set("limit",String(e.limit)),e?.offset!==void 0&&t.set("offset",String(e.offset)),e?.tier&&t.set("tier",e.tier);let n=t.toString()?`?${t}`:"",s=await this._fetch(`/api/v1/robots${n}`);return this._checkResponse(s)}async patch(e,t){let n=await this._fetch(`/api/v1/robots/${encodeURIComponent(e)}`,{method:"PATCH",headers:this._authHeaders(),body:JSON.stringify(t)});return this._checkResponse(n)}async delete(e){let t=await this._fetch(`/api/v1/robots/${encodeURIComponent(e)}`,{method:"DELETE",headers:this._authHeaders()});t.ok||await this._checkResponse(t)}async search(e){let t=new URLSearchParams;e.q&&t.set("q",e.q),e.manufacturer&&t.set("manufacturer",e.manufacturer),e.model&&t.set("model",e.model),e.tier&&t.set("tier",e.tier);let n=t.toString()?`?${t}`:"",s=await this._fetch(`/api/v1/robots/search${n}`);if(!s.ok){let i=await this._fetch(`/api/v1/robots${n}`),c=await this._checkResponse(i);return"robots"in c?c.robots:"results"in c&&c.results?c.results:[]}let o=await s.json();return Array.isArray(o)?o:"results"in o&&o.results?o.results:"robots"in o?o.robots:[]}};var vt="https://rcan.dev",xt="/.well-known/rcan-node.json",wt=new Set(["root","authoritative","resolver","cache"]);function Et(r){let e=r.match(/^RRN-([A-Z0-9]{2,8})-(\d{8,16})$/);if(e)return{type:"delegated",prefix:e[1],serial:e[2]};let t=r.match(/^RRN-(\d{8,16})$/);return t?{type:"root",serial:t[1]}:null}var se=class{rootUrl;timeoutMs;constructor(e=vt,t=1e4){this.rootUrl=e.replace(/\/$/,""),this.timeoutMs=t}async _fetch(e){let t=new AbortController,n=setTimeout(()=>t.abort(),this.timeoutMs);try{return await globalThis.fetch(e,{signal:t.signal})}catch(s){throw s instanceof Error&&s.name==="AbortError"?new h(`Request timed out: ${e}`,e,s):new h(`Network error fetching ${e}: ${s.message}`,e,s instanceof Error?s:void 0)}finally{clearTimeout(n)}}async getNodeManifest(e){let t=`${e.replace(/\/$/,"")}${xt}`,n=await this._fetch(t);if(!n.ok)throw n.status===404?new A(t,e):new h(`Failed to fetch node manifest from ${e}: HTTP ${n.status}`,e);let s;try{s=await n.json()}catch(o){throw new h(`Invalid JSON in node manifest from ${e}`,e,o instanceof Error?o:void 0)}if(!this.verifyNode(s))throw new $("missing_pubkey",e);return s}async listNodes(e){let t=e?`?prefix=${encodeURIComponent(e)}`:"",n=`${this.rootUrl}/api/v1/nodes${t}`,s=await this._fetch(n);if(!s.ok)throw new h(`Failed to list nodes from ${n}: HTTP ${s.status}`,n);let o;try{o=await s.json()}catch(i){throw new h(`Invalid JSON in nodes list from ${n}`,n,i instanceof Error?i:void 0)}return Array.isArray(o)?o:o&&typeof o=="object"&&"nodes"in o?o.nodes:[]}async discover(e){let t=Et(e);if(!t)throw new A(e,this.rootUrl);if(t.type==="root")return this.getNodeManifest(this.rootUrl);let n=await this.listNodes(t.prefix);if(n.length===0)throw new A(e,this.rootUrl);return n[0]}async resolve(e){let t=`${this.rootUrl}/api/v1/resolve/${encodeURIComponent(e)}`,n;try{n=await this._fetch(t)}catch(c){throw c}if(n.ok)try{return await n.json()}catch(c){throw new h(`Invalid JSON in resolve response for ${e}`,this.rootUrl,c instanceof Error?c:void 0)}if(n.status!==404)throw new h(`Unexpected HTTP ${n.status} resolving ${e}`,this.rootUrl);let s=await this.discover(e),o=`${s.api_base.replace(/\/$/,"")}/robots/${encodeURIComponent(e)}`,i=await this._fetch(o);if(!i.ok)throw i.status===404?new A(e,s.api_base):new h(`HTTP ${i.status} from authoritative node for ${e}`,s.api_base);try{return await i.json()}catch(c){throw new h(`Invalid JSON in fallback resolve response for ${e}`,s.api_base,c instanceof Error?c:void 0)}}verifyNode(e){if(!e||typeof e!="object")return!1;let t=e;return!(typeof t.rcan_node_version!="string"||!t.rcan_node_version||typeof t.node_type!="string"||!wt.has(t.node_type)||typeof t.operator!="string"||!t.operator||typeof t.namespace_prefix!="string"||!t.namespace_prefix||typeof t.public_key!="string"||!t.public_key.startsWith("ed25519:")||typeof t.api_base!="string"||!t.api_base.startsWith("https://"))}};var Ct="https://rcan.dev/schemas",ve=new Map;async function oe(r){if(ve.has(r))return ve.get(r);try{let e=new AbortController,t=setTimeout(()=>e.abort(),5e3),n=await fetch(`${Ct}/${r}`,{signal:e.signal});if(clearTimeout(t),!n.ok)return null;let s=await n.json();return ve.set(r,s),s}catch{return null}}async function qe(r){let e=await oe("rcan-config.schema.json");if(!e)return{valid:!0,skipped:!0};let t=[];if(typeof r!="object"||r===null)return{valid:!1,errors:["Config must be an object"]};let n=r,s=e.required??[];for(let o of s)o in n||t.push(`Missing required field: ${o}`);return t.length===0?{valid:!0}:{valid:!1,errors:t}}async function je(r){let e=await oe("rcan-node.schema.json");if(!e)return{valid:!0,skipped:!0};let t=[];if(typeof r!="object"||r===null)return{valid:!1,errors:["Manifest must be an object"]};let n=r,s=e.required??[];for(let o of s)o in n||t.push(`Missing required field: ${o}`);return t.length===0?{valid:!0}:{valid:!1,errors:t}}var xe=(n=>(n[n.FIRE_AND_FORGET=0]="FIRE_AND_FORGET",n[n.ACKNOWLEDGED=1]="ACKNOWLEDGED",n[n.EXACTLY_ONCE=2]="EXACTLY_ONCE",n))(xe||{}),ie=class r extends Error{constructor(e){super(`ACK timeout for message ${e} \u2014 safety halt required`),this.name="QoSAckTimeoutError",Object.setPrototypeOf(this,r.prototype)}},ae=class{_send;_waitForAck;constructor(e,t){this._send=e,this._waitForAck=t}async sendWithQoS(e,t={}){let n=t.qos??0,s=t.maxRetries??3,o=t.initialBackoffMs??100,i=t.ackTimeoutMs??500;if(n===0)return await this._send(e),{delivered:!0,attempts:1,reason:"fire-and-forget"};let c=e.message_id??e.msg_id??"unknown",d=0,u=o;for(;d<=s;){if(await this._send(e),d++,await this._waitForAck(c,i))return{delivered:!0,attempts:d,reason:n===2?"exactly-once":"acknowledged"};if(d>s)break;await Nt(u),u=Math.min(u*2,5e3)}return{delivered:!1,attempts:d,reason:`ACK not received after ${s} retries`}}};function Le(r,e){return{message_type:6,ruri:r,safety_event:"ESTOP",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:At(),qos:2}}function At(){if(typeof crypto<"u"&&typeof crypto.randomUUID=="function")return crypto.randomUUID();let r=Array.from({length:16},()=>Math.floor(Math.random()*256));r[6]=r[6]&15|64,r[8]=r[8]&63|128;let e=r.map(t=>t.toString(16).padStart(2,"0"));return`${e.slice(0,4).join("")}-${e.slice(4,6).join("")}-${e.slice(6,8).join("")}-${e.slice(8,10).join("")}-${e.slice(10).join("")}`}function Nt(r){return new Promise(e=>setTimeout(e,r))}var we=6;function ce(){if(typeof crypto<"u"&&typeof crypto.randomUUID=="function")return crypto.randomUUID();let r=Array.from({length:16},()=>Math.floor(Math.random()*256));r[6]=r[6]&15|64,r[8]=r[8]&63|128;let e=r.map(t=>t.toString(16).padStart(2,"0"));return`${e.slice(0,4).join("")}-${e.slice(4,6).join("")}-${e.slice(6,8).join("")}-${e.slice(8,10).join("")}-${e.slice(10).join("")}`}function Ke(r,e){return{message_type:6,ruri:r,safety_event:"ESTOP",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:ce(),qos:2}}function He(r,e){return{message_type:6,ruri:r,safety_event:"STOP",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:ce()}}function Ve(r,e){return{message_type:6,ruri:r,safety_event:"RESUME",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:ce()}}function Fe(r){return typeof r=="object"&&r!==null&&r.message_type===we}function Je(r){let e=[];return r.message_type!==6&&e.push("message_type must be 6"),r.ruri||e.push("ruri is required"),["ESTOP","STOP","RESUME"].includes(r.safety_event??"")||e.push("safety_event must be ESTOP, STOP, or RESUME"),(!r.reason||r.reason.length===0)&&e.push("reason is required"),r.message_id||e.push("message_id is required"),(!r.timestamp_ms||r.timestamp_ms<=0)&&e.push("timestamp_ms must be positive"),e}function Ye(r,e,t){return{message_type:11,ruri:r,disclosure:e,timestamp_ms:Date.now(),message_id:ce(),delegation_chain:t}}var de=class{windowSeconds;maxSize;_seen;constructor(e=30,t=1e4){this.windowSeconds=e,this.maxSize=t,this._seen=new Map}checkAndRecord(e,t,n=!1){let s=Date.now();this._evict(s);let o=n?Math.min(this.windowSeconds,10):this.windowSeconds,i=Ot(t);if(i===null)return{allowed:!1,reason:`invalid timestamp format: ${t}`};let c=s-i,d=o*1e3;if(c>d)return{allowed:!1,reason:`message too old: age=${Math.round(c/1e3)}s > window=${o}s`};if(i>s+5e3)return{allowed:!1,reason:"message timestamp is in the future"};if(this._seen.has(e))return{allowed:!1,reason:`replay detected: msg_id ${e} already seen`};if(this._seen.size>=this.maxSize){let g=this._seen.keys().next().value;this._seen.delete(g)}let u=s+d;return this._seen.set(e,u),{allowed:!0,reason:"ok"}}_evict(e){for(let[t,n]of this._seen)n<=e&&this._seen.delete(t)}get size(){return this._seen.size}};function Ge(r,e){let t=r,n=t.message_id??t.msg_id;if(!n)return{valid:!1,reason:"missing message_id / msg_id"};let s;if(typeof t.timestamp_ms=="number"?s=String(t.timestamp_ms/1e3):t.timestamp!==void 0&&(s=String(t.timestamp)),!s)return{valid:!1,reason:"missing timestamp"};let o=t.message_type===6||t.message_type===6,i=e.checkAndRecord(n,s,o);return{valid:i.allowed,reason:i.reason}}function Ot(r){if(r.includes("T")||r.includes("-")){let t=new Date(r);if(!isNaN(t.getTime()))return t.getTime()}let e=parseFloat(r);return isNaN(e)?null:e>1e12?e:e*1e3}var L=class r extends Error{offsetSeconds;constructor(e,t){super(`Clock drift too large: offset=${e.toFixed(3)}s > max=${t}s`),this.name="ClockDriftError",this.offsetSeconds=e,Object.setPrototypeOf(this,r.prototype)}};async function Ee(r){let e=r??"https://worldtimeapi.org/api/ip";try{let t=Date.now(),n=await fetch(e,{method:"HEAD",signal:AbortSignal.timeout(3e3)}),s=Date.now(),o=n.headers.get("Date")??n.headers.get("date");if(!o)return{synchronized:!0,offsetSeconds:0,source:"assumed (no Date header)"};let i=new Date(o).getTime();if(isNaN(i))return{synchronized:!0,offsetSeconds:0,source:"assumed (unparseable Date header)"};let d=((t+s)/2-i)/1e3;return{synchronized:Math.abs(d)<=5,offsetSeconds:d,source:e}}catch{return{synchronized:!0,offsetSeconds:0,source:"assumed (network unavailable)"}}}async function Be(r=5){let e=await Ee();if(!e.synchronized||Math.abs(e.offsetSeconds)>r)throw new L(e.offsetSeconds,r)}async function kt(r){let e=JSON.stringify(r,Object.keys(r).sort());if(typeof crypto<"u"&&crypto.subtle){let n=new TextEncoder().encode(e),s=await crypto.subtle.digest("SHA-256",n);return Array.from(new Uint8Array(s)).map(o=>o.toString(16).padStart(2,"0")).join("")}let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t=t*16777619>>>0;return t.toString(16).padStart(8,"0")}async function We(r,e,t,n="rcan://local/config",s=!1){let o=await kt(r);return new m({rcan:"1.5",cmd:"CONFIG_UPDATE",target:n,params:{message_type:5,diff:r,rollback:t,scope:e,config_hash:o,safety_overrides:s}})}function Qe(r){let e=r.params;return!e.diff||typeof e.diff!="object"?{valid:!1,reason:"missing required field: params.diff"}:!e.config_hash||typeof e.config_hash!="string"?{valid:!1,reason:"missing required field: params.config_hash"}:"rollback"in e?e.safety_overrides===!0&&e.scope!=="creator"?{valid:!1,reason:"safety_overrides=true requires scope=creator (owner is insufficient)"}:{valid:!0,reason:"ok"}:{valid:!1,reason:"missing required field: params.rollback"}}function It(){return typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`}var ue=class{_keys=[];addKey(e){this._keys.push(e)}getJWKS(){return{keys:[...this._keys]}}findKey(e){return this._keys.find(t=>t.kid===e)}isKeyValid(e,t){let n=this.findKey(e);if(!n)return!1;let s=(t??Date.now())/1e3;return!(n.revoked_at!==void 0&&n.revoked_at<=s||n.exp!==void 0&&n.exp<s)}expireKey(e,t){let n=this.findKey(e);n&&(n.exp=t??Math.floor(Date.now()/1e3))}revokeKey(e){let t=this.findKey(e);t&&(t.revoked_at=Math.floor(Date.now()/1e3))}validKeys(e){return this._keys.filter(t=>this.isKeyValid(t.kid,e))}};function ze(r,e,t=120,n="rcan://local/keys"){let s=It().slice(0,8);return new m({rcan:"1.5",cmd:"KEY_ROTATION",target:n,params:{message_type:5,new_public_key:r,new_kid:s,old_kid:e,overlap_seconds:t,initiated_at:new Date().toISOString()},keyId:s})}function Tt(){return typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`}function fe(r){let e=r.requestId??Tt();return new m({rcan:"1.5",cmd:"CONSENT_REQUEST",target:r.targetRuri,params:{message_type:20,requester_ruri:r.requesterRuri,requester_owner:r.requesterOwner,target_ruri:r.targetRuri,requested_scopes:r.requestedScopes,duration_hours:r.durationHours,justification:r.justification,request_id:e,consent_type:r.consentType??"cross_robot",data_categories:r.dataCategories??[]}})}function le(r){let e=r.expiresAt??new Date(Date.now()+864e5).toISOString();return new m({rcan:"1.5",cmd:"CONSENT_GRANT",target:"rcan://local/consent",params:{message_type:21,request_id:r.requestId,granted_scopes:r.grantedScopes??[],expires_at:e,reason:r.reason??"approved"}})}function me(r){return new m({rcan:"1.5",cmd:"CONSENT_DENY",target:"rcan://local/consent",params:{message_type:22,request_id:r.requestId,reason:r.reason??"denied"}})}function Xe(r){let e=r.cmd,t=r.params,n=t.message_type;return e==="CONSENT_REQUEST"?n!==20?{valid:!1,reason:"message_type must be CONSENT_REQUEST (20)"}:t.requester_ruri?t.target_ruri?!t.requested_scopes||!Array.isArray(t.requested_scopes)||t.requested_scopes.length===0?{valid:!1,reason:"requested_scopes must be a non-empty array"}:t.request_id?t.justification?{valid:!0,reason:"ok"}:{valid:!1,reason:"missing justification"}:{valid:!1,reason:"missing request_id"}:{valid:!1,reason:"missing target_ruri"}:{valid:!1,reason:"missing requester_ruri"}:e==="CONSENT_GRANT"?n!==21?{valid:!1,reason:"message_type must be CONSENT_GRANT (21)"}:t.request_id?t.expires_at?{valid:!0,reason:"ok"}:{valid:!1,reason:"missing expires_at"}:{valid:!1,reason:"missing request_id"}:e==="CONSENT_DENY"?n!==22?{valid:!1,reason:"message_type must be CONSENT_DENY (22)"}:t.request_id?{valid:!0,reason:"ok"}:{valid:!1,reason:"missing request_id"}:{valid:!1,reason:`unknown consent command: ${e}`}}var Mt=3600*1e3,K=class{_cache=new Map;get(e,t){let n=this._cache.get(e);if(!n)return;let s=t??Date.now();if(n.cachedUntil!==void 0&&n.cachedUntil<s){this._cache.delete(e);return}return n}set(e,t){let n=t??Date.now();this._cache.set(e.rrn,{...e,cachedUntil:n+Mt})}invalidate(e){this._cache.delete(e)}get size(){return this._cache.size}};async function Ze(r,e,t){let n=t??new K,s=n.get(r);if(s)return s;let o=`${e.replace(/\/$/,"")}/api/v1/robots/${encodeURIComponent(r)}/revocation-status`;try{let i=await fetch(o,{signal:AbortSignal.timeout(5e3)});if(!i.ok){let u={rrn:r,status:"active",reason:`registry returned ${i.status}`};return n.set(u),u}let c=await i.json(),d={rrn:r,status:c.status??"active",revokedAt:c.revokedAt,reason:c.reason,authority:c.authority};return n.set(d),d}catch{return{rrn:r,status:"active",reason:"network unavailable"}}}function et(r,e){return new m({rcan:"1.5",cmd:"ROBOT_REVOCATION",target:"rcan://broadcast/revocation",params:{message_type:19,rrn:r,reason:e,revoked_at:new Date().toISOString()}})}var Ce=(o=>(o.VIDEO="video",o.AUDIO="audio",o.LOCATION="location",o.BIOMETRIC="biometric",o.TELEMETRY="telemetry",o))(Ce||{});function tt(r){return fe({requesterRuri:r.requesterRuri,requesterOwner:r.requesterOwner,targetRuri:r.targetRuri,requestedScopes:["training_data"],durationHours:r.durationHours,justification:r.justification,requestId:r.requestId,consentType:"training_data",dataCategories:r.dataCategories})}function rt(r){return le(r)}function nt(r){return me(r)}function st(r){if(r.params.message_type!==10)return{valid:!1,reason:"not a TRAINING_DATA message"};let e=r.params.consent_token;return!e||typeof e!="string"||e.trim()===""?{valid:!1,reason:"TRAINING_DATA message missing consent_token (\xA717)"}:{valid:!0,reason:"ok"}}var ge=class{crossOwnerGraceS;keyTtlS;_cachedKeys=[];constructor(e=3600,t=86400){this.crossOwnerGraceS=e,this.keyTtlS=t}canAcceptCommand(e,t,n,s=!0,o=!1,i,c){if(e&&e.message_type===6&&e.safety_event==="ESTOP")return{allowed:!0,reason:"ESTOP always accepted (Protocol 66)"};if(!t)return{allowed:!0,reason:"online mode"};if(!n)return{allowed:!1,reason:"offline mode: cross-network commands blocked"};if(!s)return{allowed:!1,reason:"offline mode: only owner-role commands accepted from local network"};if(o&&i!==void 0){let u=((c??Date.now())-i)/1e3;if(u>this.crossOwnerGraceS)return{allowed:!1,reason:`offline mode: cross-owner grace period expired (${Math.round(u)}s > ${this.crossOwnerGraceS}s)`}}return{allowed:!0,reason:"offline mode: owner command on local network accepted"}}cacheKey(e,t){let n=t??Date.now();this._cachedKeys=this._cachedKeys.filter(s=>s.kid!==e.kid),this._cachedKeys.push({...e,cachedAtMs:n,ttlSeconds:this.keyTtlS})}getCachedKey(e,t){let n=t??Date.now(),s=this._cachedKeys.find(i=>i.kid===e);if(!s)return;if((n-s.cachedAtMs)/1e3>s.ttlSeconds){this._cachedKeys=this._cachedKeys.filter(i=>i.kid!==e);return}return s}getManifestFields(e,t){if(e===void 0)return{offline_mode:!1,offline_since_s:0};let n=t??Date.now();return{offline_mode:!0,offline_since_s:Math.round((n-e)/1e3)}}};var Ae=(p=>(p.SENSOR_PROXIMITY_FAILURE="SENSOR_PROXIMITY_FAILURE",p.SENSOR_CAMERA_FAILURE="SENSOR_CAMERA_FAILURE",p.SENSOR_IMU_FAILURE="SENSOR_IMU_FAILURE",p.MOTOR_OVERCURRENT="MOTOR_OVERCURRENT",p.MOTOR_OVERTEMP="MOTOR_OVERTEMP",p.MOTOR_STALL="MOTOR_STALL",p.BATTERY_CRITICAL="BATTERY_CRITICAL",p.BATTERY_LOW="BATTERY_LOW",p.NETWORK_TIMEOUT="NETWORK_TIMEOUT",p.NETWORK_REGISTRY_UNREACHABLE="NETWORK_REGISTRY_UNREACHABLE",p.SAFETY_ESTOP_STUCK="SAFETY_ESTOP_STUCK",p.SAFETY_WATCHDOG_TIMEOUT="SAFETY_WATCHDOG_TIMEOUT",p.UNKNOWN="UNKNOWN",p))(Ae||{});function ot(r){return new m({rcan:"1.5",cmd:"FAULT_REPORT",target:r.target??"rcan://local/fault",params:{message_type:26,fault_code:r.faultCode,severity:r.severity,subsystem:r.subsystem,affects_safety:r.affectsSafety,safe_to_continue:r.safeToContinue,description:r.description??"",reported_at:new Date().toISOString()}})}var Ut="0.5.0",Dt="1.5";return yt(Pt);})();
+`}static fromJSONL(e,n){let r=new t(n),s=e.trim().split(`
+`).filter(o=>o.trim()!=="");for(let o of s){let i=JSON.parse(o);r._records.push($.fromJSON(i))}return r}};function Ie(){return{ok:!0,issues:[],warnings:[],info:[]}}function v(t,e){t.ok=!1,t.issues.push(e)}function P(t,e){t.warnings.push(e)}function b(t,e){t.info.push(e)}function ct(t){let e=Ie();try{let n=M.parse(t);b(e,"\u2705 Valid RCAN URI"),b(e,`   Registry:     ${n.registry}`),b(e,`   Manufacturer: ${n.manufacturer}`),b(e,`   Model:        ${n.model}`),b(e,`   Version:      ${n.version}`),b(e,`   Device ID:    ${n.deviceId}`)}catch(n){v(e,`Invalid RCAN URI: ${n instanceof Error?n.message:n}`)}return e}function dt(t){let e=Ie(),n;if(typeof t=="string")try{n=JSON.parse(t)}catch{return v(e,"Invalid JSON string"),e}else if(typeof t=="object"&&t!==null)n=t;else return v(e,"Expected object or JSON string"),e;for(let r of["rcan","cmd","target"])(!(r in n)||!n[r])&&v(e,`Missing required field: '${r}'`);if(!e.ok)return e;try{let r=l.fromJSON(n);b(e,`\u2705 RCAN message valid (v${r.rcan})`),b(e,`   cmd:    ${r.cmd}`),b(e,`   target: ${r.target}`),r.confidence!==void 0?b(e,`   confidence: ${r.confidence}`):P(e,"No confidence score \u2014 add for RCAN \xA716 AI accountability"),r.isSigned?b(e,`   signature: alg=${r.signature?.alg}, kid=${r.signature?.kid}`):P(e,"Message is unsigned (recommended for production)")}catch(r){v(e,`Message validation failed: ${r instanceof Error?r.message:r}`)}return e}function ut(t){let e=Ie(),n=t.metadata??{},r=t.agent??{},s=t.rcan_protocol??{};for(let i of["rcan_version","metadata","agent"])(!(i in t)||t[i]===void 0||t[i]===null)&&v(e,`Missing required key: '${i}'`);let o=t.rcan_version;if(o&&(/^\d+\.\d+$/.test(o)||v(e,`rcan_version '${o}' must match pattern N.N (e.g. '1.2')`)),n.manufacturer||v(e,"L1: metadata.manufacturer is required (\xA72)"),n.model||v(e,"L1: metadata.model is required (\xA72)"),!n.device_id&&!n.robot_name&&v(e,"L1: metadata.device_id (or robot_name) is required (\xA72)"),s.jwt_auth?.enabled||P(e,"L2: jwt_auth not enabled (required for L2 conformance, \xA78)"),(!r.confidence_gates||r.confidence_gates.length===0)&&P(e,"L2: confidence_gates not configured (\xA716)"),(!r.hitl_gates||r.hitl_gates.length===0)&&P(e,"L3: hitl_gates not configured (\xA716)"),r.commitment_chain?.enabled||P(e,"L3: commitment_chain not enabled (\xA716)"),n.rrn?b(e,`\u2705 RRN registered: ${n.rrn}`):P(e,"Robot not registered \u2014 visit rcan.dev/registry/register"),e.ok&&e.issues.length===0){let i=!e.warnings.some(f=>f.startsWith("L1")),a=i&&!e.warnings.some(f=>f.startsWith("L2")),u=a&&!e.warnings.some(f=>f.startsWith("L3"))?"L3":a?"L2":i?"L1":"FAIL";b(e,`\u2705 Config valid \u2014 conformance level: ${u}`)}return e}var _=class extends Error{constructor(e){super(e),this.name="RCANError",Object.setPrototypeOf(this,new.target.prototype)}},re=class extends _{constructor(e){super(e),this.name="RCANAddressError",Object.setPrototypeOf(this,new.target.prototype)}},se=class extends _{constructor(e){super(e),this.name="RCANValidationError",Object.setPrototypeOf(this,new.target.prototype)}},oe=class extends _{constructor(n,r,s,o){super(n);this.gateType=r;this.value=s;this.threshold=o;this.name="RCANGateError",Object.setPrototypeOf(this,new.target.prototype)}},ie=class extends _{constructor(e){super(e),this.name="RCANSignatureError",Object.setPrototypeOf(this,new.target.prototype)}},D=class extends _{constructor(e){super(e),this.name="RCANRegistryError",Object.setPrototypeOf(this,new.target.prototype)}},L=class t extends _{constructor(n,r){super(n);this.nodeUrl=r;this.name="RCANNodeError",Object.setPrototypeOf(this,t.prototype)}},k=class t extends L{constructor(n,r){super(`RRN not found in federation: ${n}`,r);this.rrn=n;this.name="RCANNodeNotFoundError",Object.setPrototypeOf(this,t.prototype)}},R=class t extends L{constructor(n,r,s){super(n,r);this.cause=s;this.name="RCANNodeSyncError",Object.setPrototypeOf(this,t.prototype)}},j=class t extends L{reason;constructor(e,n){super(`Node trust verification failed: ${e}`,n),this.name="RCANNodeTrustError",this.reason=e,Object.setPrototypeOf(this,t.prototype)}},ae=class t extends _{constructor(e,n){super(`VERSION_INCOMPATIBLE: incoming=${e}, local=${n}`),this.name="RCANVersionIncompatibleError",Object.setPrototypeOf(this,t.prototype)}},ce=class t extends _{constructor(e){super(`REPLAY_DETECTED: ${e}`),this.name="RCANReplayAttackError",Object.setPrototypeOf(this,t.prototype)}},de=class t extends _{constructor(e){super(`DELEGATION_CHAIN_ERROR: ${e}`),this.name="RCANDelegationChainError",Object.setPrototypeOf(this,t.prototype)}},ue=class t extends _{constructor(e){super(`CONFIG_AUTH_ERROR: ${e}`),this.name="RCANConfigAuthorizationError",Object.setPrototypeOf(this,t.prototype)}};var gn="https://rcan-spec.pages.dev",fe=class{baseUrl;apiKey;timeout;constructor(e){this.baseUrl=(e?.baseUrl??gn).replace(/\/$/,""),this.apiKey=e?.apiKey,this.timeout=e?.timeout??1e4}async _fetch(e,n={}){let r=`${this.baseUrl}${e}`,s=new AbortController,o=setTimeout(()=>s.abort(),this.timeout);try{return await fetch(r,{...n,signal:s.signal,headers:{"Content-Type":"application/json",...n.headers??{}}})}finally{clearTimeout(o)}}_authHeaders(){if(!this.apiKey)throw new D("API key required for write operations. Pass apiKey to RegistryClient.");return{Authorization:`Bearer ${this.apiKey}`}}async _checkResponse(e){if(!e.ok){let n=`Registry API error: ${e.status}`;try{let r=await e.json();r?.error&&(n=r.error)}catch{}throw new D(n)}return await e.json()}async register(e){let n=await this._fetch("/api/v1/robots",{method:"POST",body:JSON.stringify(e)});return this._checkResponse(n)}async get(e){let n=await this._fetch(`/api/v1/robots/${encodeURIComponent(e)}`);return this._checkResponse(n)}async list(e){let n=new URLSearchParams;e?.limit!==void 0&&n.set("limit",String(e.limit)),e?.offset!==void 0&&n.set("offset",String(e.offset)),e?.tier&&n.set("tier",e.tier);let r=n.toString()?`?${n}`:"",s=await this._fetch(`/api/v1/robots${r}`);return this._checkResponse(s)}async patch(e,n){let r=await this._fetch(`/api/v1/robots/${encodeURIComponent(e)}`,{method:"PATCH",headers:this._authHeaders(),body:JSON.stringify(n)});return this._checkResponse(r)}async delete(e){let n=await this._fetch(`/api/v1/robots/${encodeURIComponent(e)}`,{method:"DELETE",headers:this._authHeaders()});n.ok||await this._checkResponse(n)}async search(e){let n=new URLSearchParams;e.q&&n.set("q",e.q),e.manufacturer&&n.set("manufacturer",e.manufacturer),e.model&&n.set("model",e.model),e.tier&&n.set("tier",e.tier);let r=n.toString()?`?${n}`:"",s=await this._fetch(`/api/v1/robots/search${r}`);if(!s.ok){let i=await this._fetch(`/api/v1/robots${r}`),a=await this._checkResponse(i);return"robots"in a?a.robots:"results"in a&&a.results?a.results:[]}let o=await s.json();return Array.isArray(o)?o:"results"in o&&o.results?o.results:"robots"in o?o.robots:[]}};var pn="https://rcan.dev",hn="/.well-known/rcan-node.json",yn=new Set(["root","authoritative","resolver","cache"]);function Rn(t){let e=t.match(/^RRN-([A-Z0-9]{2,8})-(\d{8,16})$/);if(e)return{type:"delegated",prefix:e[1],serial:e[2]};let n=t.match(/^RRN-(\d{8,16})$/);return n?{type:"root",serial:n[1]}:null}var le=class{rootUrl;timeoutMs;constructor(e=pn,n=1e4){this.rootUrl=e.replace(/\/$/,""),this.timeoutMs=n}async _fetch(e){let n=new AbortController,r=setTimeout(()=>n.abort(),this.timeoutMs);try{return await globalThis.fetch(e,{signal:n.signal})}catch(s){throw s instanceof Error&&s.name==="AbortError"?new R(`Request timed out: ${e}`,e,s):new R(`Network error fetching ${e}: ${s.message}`,e,s instanceof Error?s:void 0)}finally{clearTimeout(r)}}async getNodeManifest(e){let n=`${e.replace(/\/$/,"")}${hn}`,r=await this._fetch(n);if(!r.ok)throw r.status===404?new k(n,e):new R(`Failed to fetch node manifest from ${e}: HTTP ${r.status}`,e);let s;try{s=await r.json()}catch(o){throw new R(`Invalid JSON in node manifest from ${e}`,e,o instanceof Error?o:void 0)}if(!this.verifyNode(s))throw new j("missing_pubkey",e);return s}async listNodes(e){let n=e?`?prefix=${encodeURIComponent(e)}`:"",r=`${this.rootUrl}/api/v1/nodes${n}`,s=await this._fetch(r);if(!s.ok)throw new R(`Failed to list nodes from ${r}: HTTP ${s.status}`,r);let o;try{o=await s.json()}catch(i){throw new R(`Invalid JSON in nodes list from ${r}`,r,i instanceof Error?i:void 0)}return Array.isArray(o)?o:o&&typeof o=="object"&&"nodes"in o?o.nodes:[]}async discover(e){let n=Rn(e);if(!n)throw new k(e,this.rootUrl);if(n.type==="root")return this.getNodeManifest(this.rootUrl);let r=await this.listNodes(n.prefix);if(r.length===0)throw new k(e,this.rootUrl);return r[0]}async resolve(e){let n=`${this.rootUrl}/api/v1/resolve/${encodeURIComponent(e)}`,r;try{r=await this._fetch(n)}catch(a){throw a}if(r.ok)try{return await r.json()}catch(a){throw new R(`Invalid JSON in resolve response for ${e}`,this.rootUrl,a instanceof Error?a:void 0)}if(r.status!==404)throw new R(`Unexpected HTTP ${r.status} resolving ${e}`,this.rootUrl);let s=await this.discover(e),o=`${s.api_base.replace(/\/$/,"")}/robots/${encodeURIComponent(e)}`,i=await this._fetch(o);if(!i.ok)throw i.status===404?new k(e,s.api_base):new R(`HTTP ${i.status} from authoritative node for ${e}`,s.api_base);try{return await i.json()}catch(a){throw new R(`Invalid JSON in fallback resolve response for ${e}`,s.api_base,a instanceof Error?a:void 0)}}verifyNode(e){if(!e||typeof e!="object")return!1;let n=e;return!(typeof n.rcan_node_version!="string"||!n.rcan_node_version||typeof n.node_type!="string"||!yn.has(n.node_type)||typeof n.operator!="string"||!n.operator||typeof n.namespace_prefix!="string"||!n.namespace_prefix||typeof n.public_key!="string"||!n.public_key.startsWith("ed25519:")||typeof n.api_base!="string"||!n.api_base.startsWith("https://"))}};var _n="https://rcan.dev/schemas",Ue=new Map;async function me(t){if(Ue.has(t))return Ue.get(t);try{let e=new AbortController,n=setTimeout(()=>e.abort(),5e3);n.unref?.();let r=await fetch(`${_n}/${t}`,{signal:e.signal});if(clearTimeout(n),!r.ok)return null;let s=await r.json();return Ue.set(t,s),s}catch{return null}}async function ft(t){let e=await me("rcan-config.schema.json");if(!e)return{valid:!0,skipped:!0};let n=[];if(typeof t!="object"||t===null)return{valid:!1,errors:["Config must be an object"]};let r=t,s=e.required??[];for(let o of s)o in r||n.push(`Missing required field: ${o}`);return n.length===0?{valid:!0}:{valid:!1,errors:n}}async function lt(t){let e=await me("rcan-node.schema.json");if(!e)return{valid:!0,skipped:!0};let n=[];if(typeof t!="object"||t===null)return{valid:!1,errors:["Manifest must be an object"]};let r=t,s=e.required??[];for(let o of s)o in r||n.push(`Missing required field: ${o}`);return n.length===0?{valid:!0}:{valid:!1,errors:n}}var Me=(r=>(r[r.FIRE_AND_FORGET=0]="FIRE_AND_FORGET",r[r.ACKNOWLEDGED=1]="ACKNOWLEDGED",r[r.EXACTLY_ONCE=2]="EXACTLY_ONCE",r))(Me||{}),ge=class t extends Error{constructor(e){super(`ACK timeout for message ${e} \u2014 safety halt required`),this.name="QoSAckTimeoutError",Object.setPrototypeOf(this,t.prototype)}},pe=class{_send;_waitForAck;constructor(e,n){this._send=e,this._waitForAck=n}async sendWithQoS(e,n={}){let r=n.qos??0,s=n.maxRetries??3,o=n.initialBackoffMs??100,i=n.ackTimeoutMs??500;if(r===0)return await this._send(e),{delivered:!0,attempts:1,reason:"fire-and-forget"};let a=e.message_id??e.msg_id??"unknown",d=0,u=o;for(;d<=s;){if(await this._send(e),d++,await this._waitForAck(a,i))return{delivered:!0,attempts:d,reason:r===2?"exactly-once":"acknowledged"};if(d>s)break;await bn(u),u=Math.min(u*2,5e3)}return{delivered:!1,attempts:d,reason:`ACK not received after ${s} retries`}}};function mt(t,e){return{message_type:6,ruri:t,safety_event:"ESTOP",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:Sn(),qos:2}}function Sn(){if(typeof crypto<"u"&&typeof crypto.randomUUID=="function")return crypto.randomUUID();let t=Array.from({length:16},()=>Math.floor(Math.random()*256));t[6]=t[6]&15|64,t[8]=t[8]&63|128;let e=t.map(n=>n.toString(16).padStart(2,"0"));return`${e.slice(0,4).join("")}-${e.slice(4,6).join("")}-${e.slice(6,8).join("")}-${e.slice(8,10).join("")}-${e.slice(10).join("")}`}function bn(t){return new Promise(e=>setTimeout(e,t))}var Pe=6;function he(){if(typeof crypto<"u"&&typeof crypto.randomUUID=="function")return crypto.randomUUID();let t=Array.from({length:16},()=>Math.floor(Math.random()*256));t[6]=t[6]&15|64,t[8]=t[8]&63|128;let e=t.map(n=>n.toString(16).padStart(2,"0"));return`${e.slice(0,4).join("")}-${e.slice(4,6).join("")}-${e.slice(6,8).join("")}-${e.slice(8,10).join("")}-${e.slice(10).join("")}`}function gt(t,e){return{message_type:6,ruri:t,safety_event:"ESTOP",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:he(),qos:2}}function pt(t,e){return{message_type:6,ruri:t,safety_event:"STOP",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:he()}}function ht(t,e){return{message_type:6,ruri:t,safety_event:"RESUME",reason:e.slice(0,512),timestamp_ms:Date.now(),message_id:he()}}function yt(t){return typeof t=="object"&&t!==null&&t.message_type===Pe}function Rt(t){let e=[];return t.message_type!==6&&e.push("message_type must be 6"),t.ruri||e.push("ruri is required"),["ESTOP","STOP","RESUME"].includes(t.safety_event??"")||e.push("safety_event must be ESTOP, STOP, or RESUME"),(!t.reason||t.reason.length===0)&&e.push("reason is required"),t.message_id||e.push("message_id is required"),(!t.timestamp_ms||t.timestamp_ms<=0)&&e.push("timestamp_ms must be positive"),e}function _t(t,e,n){return{message_type:11,ruri:t,disclosure:e,timestamp_ms:Date.now(),message_id:he(),delegation_chain:n}}var ye=class{windowSeconds;maxSize;_seen;constructor(e=30,n=1e4){this.windowSeconds=e,this.maxSize=n,this._seen=new Map}checkAndRecord(e,n,r=!1){let s=Date.now();this._evict(s);let o=r?Math.min(this.windowSeconds,10):this.windowSeconds,i=Cn(n);if(i===null)return{allowed:!1,reason:`invalid timestamp format: ${n}`};let a=s-i,d=o*1e3;if(a>d)return{allowed:!1,reason:`message too old: age=${Math.round(a/1e3)}s > window=${o}s`};if(i>s+5e3)return{allowed:!1,reason:"message timestamp is in the future"};if(this._seen.has(e))return{allowed:!1,reason:`replay detected: msg_id ${e} already seen`};if(this._seen.size>=this.maxSize){let f=this._seen.keys().next().value;this._seen.delete(f)}let u=s+d;return this._seen.set(e,u),{allowed:!0,reason:"ok"}}_evict(e){for(let[n,r]of this._seen)r<=e&&this._seen.delete(n)}get size(){return this._seen.size}};function St(t,e){let n=t,r=n.message_id??n.msg_id;if(!r)return{valid:!1,reason:"missing message_id / msg_id"};let s;if(typeof n.timestamp_ms=="number"?s=String(n.timestamp_ms/1e3):n.timestamp!==void 0&&(s=String(n.timestamp)),!s)return{valid:!1,reason:"missing timestamp"};let o=n.message_type===6||n.message_type===6,i=e.checkAndRecord(r,s,o);return{valid:i.allowed,reason:i.reason}}function Cn(t){if(t.includes("T")||t.includes("-")){let n=new Date(t);if(!isNaN(n.getTime()))return n.getTime()}let e=parseFloat(t);return isNaN(e)?null:e>1e12?e:e*1e3}var H=class t extends Error{offsetSeconds;constructor(e,n){super(`Clock drift too large: offset=${e.toFixed(3)}s > max=${n}s`),this.name="ClockDriftError",this.offsetSeconds=e,Object.setPrototypeOf(this,t.prototype)}};async function De(t){let e=t??"https://worldtimeapi.org/api/ip";try{let n=Date.now(),r=await fetch(e,{method:"HEAD",signal:AbortSignal.timeout(3e3)}),s=Date.now(),o=r.headers.get("Date")??r.headers.get("date");if(!o)return{synchronized:!0,offsetSeconds:0,source:"assumed (no Date header)"};let i=new Date(o).getTime();if(isNaN(i))return{synchronized:!0,offsetSeconds:0,source:"assumed (unparseable Date header)"};let d=((n+s)/2-i)/1e3;return{synchronized:Math.abs(d)<=5,offsetSeconds:d,source:e}}catch{return{synchronized:!0,offsetSeconds:0,source:"assumed (network unavailable)"}}}async function bt(t=5){let e=await De();if(!e.synchronized||Math.abs(e.offsetSeconds)>t)throw new H(e.offsetSeconds,t)}async function An(t){let e=JSON.stringify(t,Object.keys(t).sort());if(typeof crypto<"u"&&crypto.subtle){let r=new TextEncoder().encode(e),s=await crypto.subtle.digest("SHA-256",r);return Array.from(new Uint8Array(s)).map(o=>o.toString(16).padStart(2,"0")).join("")}let n=2166136261;for(let r=0;r<e.length;r++)n^=e.charCodeAt(r),n=n*16777619>>>0;return n.toString(16).padStart(8,"0")}async function Ct(t,e,n,r="rcan://local/config",s=!1){let o=await An(t);return new l({rcan:h,cmd:"CONFIG_UPDATE",target:r,params:{message_type:5,diff:t,rollback:n,scope:e,config_hash:o,safety_overrides:s}})}function At(t){let e=t.params;return!e.diff||typeof e.diff!="object"?{valid:!1,reason:"missing required field: params.diff"}:!e.config_hash||typeof e.config_hash!="string"?{valid:!1,reason:"missing required field: params.config_hash"}:"rollback"in e?e.safety_overrides===!0&&e.scope!=="creator"?{valid:!1,reason:"safety_overrides=true requires scope=creator (owner is insufficient)"}:{valid:!0,reason:"ok"}:{valid:!1,reason:"missing required field: params.rollback"}}function En(){return typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`}var Re=class{_keys=[];addKey(e){this._keys.push(e)}getJWKS(){return{keys:[...this._keys]}}findKey(e){return this._keys.find(n=>n.kid===e)}isKeyValid(e,n){let r=this.findKey(e);if(!r)return!1;let s=(n??Date.now())/1e3;return!(r.revoked_at!==void 0&&r.revoked_at<=s||r.exp!==void 0&&r.exp<s)}expireKey(e,n){let r=this.findKey(e);r&&(r.exp=n??Math.floor(Date.now()/1e3))}revokeKey(e){let n=this.findKey(e);n&&(n.revoked_at=Math.floor(Date.now()/1e3))}validKeys(e){return this._keys.filter(n=>this.isKeyValid(n.kid,e))}};function Et(t,e,n=120,r="rcan://local/keys"){let s=En().slice(0,8);return new l({rcan:h,cmd:"KEY_ROTATION",target:r,params:{message_type:5,new_public_key:t,new_kid:s,old_kid:e,overlap_seconds:n,initiated_at:new Date().toISOString()},keyId:s})}function xn(){return typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`}function _e(t){let e=t.requestId??xn();return new l({rcan:h,cmd:"CONSENT_REQUEST",target:t.targetRuri,params:{message_type:20,requester_ruri:t.requesterRuri,requester_owner:t.requesterOwner,target_ruri:t.targetRuri,requested_scopes:t.requestedScopes,duration_hours:t.durationHours,justification:t.justification,request_id:e,consent_type:t.consentType??"cross_robot",data_categories:t.dataCategories??[]}})}function Se(t){let e=t.expiresAt??new Date(Date.now()+864e5).toISOString();return new l({rcan:h,cmd:"CONSENT_GRANT",target:"rcan://local/consent",params:{message_type:21,request_id:t.requestId,granted_scopes:t.grantedScopes??[],expires_at:e,reason:t.reason??"approved"}})}function be(t){return new l({rcan:h,cmd:"CONSENT_DENY",target:"rcan://local/consent",params:{message_type:22,request_id:t.requestId,reason:t.reason??"denied"}})}function xt(t){let e=t.cmd,n=t.params,r=n.message_type;return e==="CONSENT_REQUEST"?r!==20?{valid:!1,reason:"message_type must be CONSENT_REQUEST (20)"}:n.requester_ruri?n.target_ruri?!n.requested_scopes||!Array.isArray(n.requested_scopes)||n.requested_scopes.length===0?{valid:!1,reason:"requested_scopes must be a non-empty array"}:n.request_id?n.justification?{valid:!0,reason:"ok"}:{valid:!1,reason:"missing justification"}:{valid:!1,reason:"missing request_id"}:{valid:!1,reason:"missing target_ruri"}:{valid:!1,reason:"missing requester_ruri"}:e==="CONSENT_GRANT"?r!==21?{valid:!1,reason:"message_type must be CONSENT_GRANT (21)"}:n.request_id?n.expires_at?{valid:!0,reason:"ok"}:{valid:!1,reason:"missing expires_at"}:{valid:!1,reason:"missing request_id"}:e==="CONSENT_DENY"?r!==22?{valid:!1,reason:"message_type must be CONSENT_DENY (22)"}:n.request_id?{valid:!0,reason:"ok"}:{valid:!1,reason:"missing request_id"}:{valid:!1,reason:`unknown consent command: ${e}`}}var wn=3600*1e3,K=class{_cache=new Map;get(e,n){let r=this._cache.get(e);if(!r)return;let s=n??Date.now();if(r.cachedUntil!==void 0&&r.cachedUntil<s){this._cache.delete(e);return}return r}set(e,n){let r=n??Date.now();this._cache.set(e.rrn,{...e,cachedUntil:r+wn})}invalidate(e){this._cache.delete(e)}get size(){return this._cache.size}};async function wt(t,e,n){let r=n??new K,s=r.get(t);if(s)return s;let o=`${e.replace(/\/$/,"")}/api/v1/robots/${encodeURIComponent(t)}/revocation-status`;try{let i=await fetch(o,{signal:AbortSignal.timeout(5e3)});if(!i.ok){let u={rrn:t,status:"active",reason:`registry returned ${i.status}`};return r.set(u),u}let a=await i.json(),d={rrn:t,status:a.status??"active",revokedAt:a.revokedAt,reason:a.reason,authority:a.authority};return r.set(d),d}catch{return{rrn:t,status:"active",reason:"network unavailable"}}}function vt(t,e){return new l({rcan:h,cmd:"ROBOT_REVOCATION",target:"rcan://broadcast/revocation",params:{message_type:19,rrn:t,reason:e,revoked_at:new Date().toISOString()}})}var Le=(o=>(o.VIDEO="video",o.AUDIO="audio",o.LOCATION="location",o.BIOMETRIC="biometric",o.TELEMETRY="telemetry",o))(Le||{});function Nt(t){return _e({requesterRuri:t.requesterRuri,requesterOwner:t.requesterOwner,targetRuri:t.targetRuri,requestedScopes:["training_data"],durationHours:t.durationHours,justification:t.justification,requestId:t.requestId,consentType:"training_data",dataCategories:t.dataCategories})}function Ot(t){return Se(t)}function kt(t){return be(t)}function Tt(t){if(t.params.message_type!==36)return{valid:!1,reason:"not a TRAINING_DATA message"};let e=t.params.consent_token;return!e||typeof e!="string"||e.trim()===""?{valid:!1,reason:"TRAINING_DATA message missing consent_token (\xA717)"}:{valid:!0,reason:"ok"}}var Ce=class{crossOwnerGraceS;keyTtlS;_cachedKeys=[];constructor(e=3600,n=86400){this.crossOwnerGraceS=e,this.keyTtlS=n}canAcceptCommand(e,n,r,s=!0,o=!1,i,a){if(e&&e.message_type===6&&e.safety_event==="ESTOP")return{allowed:!0,reason:"ESTOP always accepted (Protocol 66)"};if(!n)return{allowed:!0,reason:"online mode"};if(!r)return{allowed:!1,reason:"offline mode: cross-network commands blocked"};if(!s)return{allowed:!1,reason:"offline mode: only owner-role commands accepted from local network"};if(o&&i!==void 0){let u=((a??Date.now())-i)/1e3;if(u>this.crossOwnerGraceS)return{allowed:!1,reason:`offline mode: cross-owner grace period expired (${Math.round(u)}s > ${this.crossOwnerGraceS}s)`}}return{allowed:!0,reason:"offline mode: owner command on local network accepted"}}cacheKey(e,n){let r=n??Date.now();this._cachedKeys=this._cachedKeys.filter(s=>s.kid!==e.kid),this._cachedKeys.push({...e,cachedAtMs:r,ttlSeconds:this.keyTtlS})}getCachedKey(e,n){let r=n??Date.now(),s=this._cachedKeys.find(i=>i.kid===e);if(!s)return;if((r-s.cachedAtMs)/1e3>s.ttlSeconds){this._cachedKeys=this._cachedKeys.filter(i=>i.kid!==e);return}return s}getManifestFields(e,n){if(e===void 0)return{offline_mode:!1,offline_since_s:0};let r=n??Date.now();return{offline_mode:!0,offline_since_s:Math.round((r-e)/1e3)}}};var $e=(p=>(p.SENSOR_PROXIMITY_FAILURE="SENSOR_PROXIMITY_FAILURE",p.SENSOR_CAMERA_FAILURE="SENSOR_CAMERA_FAILURE",p.SENSOR_IMU_FAILURE="SENSOR_IMU_FAILURE",p.MOTOR_OVERCURRENT="MOTOR_OVERCURRENT",p.MOTOR_OVERTEMP="MOTOR_OVERTEMP",p.MOTOR_STALL="MOTOR_STALL",p.BATTERY_CRITICAL="BATTERY_CRITICAL",p.BATTERY_LOW="BATTERY_LOW",p.NETWORK_TIMEOUT="NETWORK_TIMEOUT",p.NETWORK_REGISTRY_UNREACHABLE="NETWORK_REGISTRY_UNREACHABLE",p.SAFETY_ESTOP_STUCK="SAFETY_ESTOP_STUCK",p.SAFETY_WATCHDOG_TIMEOUT="SAFETY_WATCHDOG_TIMEOUT",p.UNKNOWN="UNKNOWN",p))($e||{});function It(t){return new l({rcan:h,cmd:"FAULT_REPORT",target:t.target??"rcan://local/fault",params:{message_type:26,fault_code:t.faultCode,severity:t.severity,subsystem:t.subsystem,affects_safety:t.affectsSafety,safe_to_continue:t.safeToContinue,description:t.description??"",reported_at:new Date().toISOString()}})}var Ae=(r=>(r[r.ANONYMOUS=1]="ANONYMOUS",r[r.EMAIL_VERIFIED=2]="EMAIL_VERIFIED",r[r.HARDWARE_TOKEN=3]="HARDWARE_TOKEN",r))(Ae||{}),je={minLoaDiscover:1,minLoaStatus:1,minLoaChat:1,minLoaControl:1,minLoaSafety:1},Ut={minLoaDiscover:1,minLoaStatus:1,minLoaChat:1,minLoaControl:2,minLoaSafety:3};function Ee(t){try{let e=t.split(".");if(e.length<2)return 1;let n=(e[1]??"").replace(/-/g,"+").replace(/_/g,"/"),r=n+"=".repeat((4-n.length%4)%4),s;typeof atob<"u"?s=atob(r):s=Buffer.from(r,"base64").toString("utf-8");let i=JSON.parse(s).loa;if(typeof i=="number"&&i>=1&&i<=3)return i}catch{}return 1}function vn(t,e){switch(t.toLowerCase()){case"discover":return e.minLoaDiscover;case"status":return e.minLoaStatus;case"chat":return e.minLoaChat;case"contribute":return e.minLoaChat;case"control":return e.minLoaControl;case"safety":return e.minLoaSafety;default:return null}}function Mt(t,e,n=je){let r=vn(e,n);return r===null?{valid:!0,reason:"unknown scope; allowed by default"}:t>=r?{valid:!0,reason:"ok"}:{valid:!1,reason:`LOA_INSUFFICIENT: scope=${e} requires LoA>=${r}, caller has LoA=${t}`}}var qe=(r=>(r.ROOT="root",r.AUTHORITATIVE="authoritative",r.COMMUNITY="community",r))(qe||{}),Be=(r=>(r.CONSENT="consent",r.REVOCATION="revocation",r.KEY="key",r))(Be||{}),Nn=1440*60*1e3,xe=class{store=new Map;set(e){this.store.set(e.registryUrl,{identity:e,expiresAt:Date.now()+Nn})}lookup(e){let n=this.store.get(e);if(n){if(Date.now()>n.expiresAt){this.store.delete(e);return}return n.identity}}async discoverViaDns(e){let n=`_rcan-registry.${e}`,r;try{r=await Q("dns").promises.resolveTxt(n)}catch{return}for(let s of r){let o=s.join("");try{let i=JSON.parse(o);if(i.registryUrl&&i.tier&&i.publicKeyPem&&i.domain){let a={registryUrl:i.registryUrl,tier:i.tier,publicKeyPem:i.publicKeyPem,domain:i.domain,verifiedAt:new Date().toISOString()};return this.set(a),a}}catch{}}}async verifyRegistryJwt(e,n){let r=this.lookup(n);if(!r)throw new Error(`REGISTRY_UNKNOWN: ${n} is not in the trust cache`);let s;try{let i=(e.split(".")[1]??"").replace(/-/g,"+").replace(/_/g,"/"),a=i+"=".repeat((4-i.length%4)%4),d;typeof atob<"u"?d=atob(a):d=Buffer.from(a,"base64").toString("utf-8");let u=JSON.parse(d);s=typeof u.iss=="string"?u.iss:void 0}catch{throw new Error("REGISTRY_JWT_MALFORMED: cannot decode token payload")}if(s!==n)throw new Error(`REGISTRY_JWT_ISS_MISMATCH: expected iss=${n}, got iss=${s??"(none)"}`);return r}};function On(){if(typeof crypto<"u"&&typeof crypto.randomUUID=="function")return crypto.randomUUID();let t=Array.from({length:16},()=>Math.floor(Math.random()*256));t[6]=(t[6]??0)&15|64,t[8]=(t[8]??0)&63|128;let e=t.map(n=>n.toString(16).padStart(2,"0"));return`${e.slice(0,4).join("")}-${e.slice(4,6).join("")}-${e.slice(6,8).join("")}-${e.slice(8,10).join("")}-${e.slice(10).join("")}`}function Pt(t,e,n,r){return new l({rcan:"1.6",rcanVersion:"1.6",cmd:"federation_sync",target:e,params:{msg_type:23,msg_id:On(),source_registry:t,target_registry:e,sync_type:n,payload:r},timestamp:new Date().toISOString()})}async function Dt(t,e,n){let r=t.params?.msg_type;if(r===6||r===6||t.cmd==="estop"||t.cmd==="ESTOP")return{valid:!0,reason:"ESTOP always permitted (P66 invariant)"};let o=t.params?.source_registry??t.params?.from_registry;if(!o||o===e)return{valid:!0,reason:"local registry; no federation check needed"};if(!n.lookup(o))return{valid:!1,reason:`REGISTRY_UNKNOWN: ${o} is not in the local trust cache`};let a=1,d=t.params?.registry_jwt;return d?a=Ee(d):typeof t.loa=="number"&&(a=t.loa),a<2?{valid:!1,reason:`LOA_INSUFFICIENT: cross-registry commands require LoA>=2 (EMAIL_VERIFIED), got LoA=${a}`}:{valid:!0,reason:"cross-registry command accepted"}}var E=class t extends Error{constructor(e){super(e),this.name="TransportError",Object.setPrototypeOf(this,t.prototype)}},Ke=(s=>(s.HTTP="http",s.COMPACT="compact",s.MINIMAL="minimal",s.BLE="ble",s))(Ke||{}),Fe={msg_type:"t",msg_id:"i",timestamp:"ts",from_rrn:"f",to_rrn:"to",scope:"s",payload:"p",signature:"sig"},Lt=Object.fromEntries(Object.entries(Fe).map(([t,e])=>[e,t]));function Ve(t){let e=t.toJSON(),n={};for(let[o,i]of Object.entries(e)){let a=Fe[o];n[a??o]=i}if(n.p&&typeof n.p=="object"){let o=n.p,i={};for(let[a,d]of Object.entries(o)){let u=Fe[a];i[u??a]=d}n.p=i}let r=JSON.stringify(n);return new TextEncoder().encode(r)}function Ye(t){let n=new TextDecoder().decode(t),r=JSON.parse(n),s={};for(let[o,i]of Object.entries(r)){let a=Lt[o];s[a??o]=i}if(s.payload&&typeof s.payload=="object"){let o=s.payload,i={};for(let[a,d]of Object.entries(o)){let u=Lt[a];i[u??a]=d}s.payload=i}return new l({rcan:s.rcan??"1.6",rcanVersion:s.rcanVersion,cmd:s.cmd,target:s.target,params:s.params??s.payload??{},timestamp:s.timestamp,confidence:s.confidence,signature:s.signature})}var Y=32,He=6;async function $t(t){let e=new TextEncoder().encode(t),n=new ArrayBuffer(e.byteLength);new Uint8Array(n).set(e);let s=await(globalThis.crypto?.subtle??(await import("crypto")).webcrypto.subtle).digest("SHA-256",n);return new Uint8Array(s)}async function jt(t){let e=t.params?.msg_type??0;if(e!==He)throw new E(`encodeMinimal only supports SAFETY (type 6) messages; got type=${e}`);let n=t.params?.from_rrn??t.target??"",r=t.params?.to_rrn??t.target??"",s=await $t(n),o=await $t(r),i=(t.signature?.sig??"").replace(/[^A-Za-z0-9+/=]/g,""),a;try{if(typeof atob<"u"){let N=atob(i.slice(0,16));a=new Uint8Array(N.length);for(let y=0;y<N.length;y++)a[y]=N.charCodeAt(y)}else a=Buffer.from(i.slice(0,16),"base64")}catch{a=new Uint8Array(8)}let u=(t.timestamp?Math.floor(new Date(t.timestamp).getTime()/1e3):Math.floor(Date.now()/1e3))>>>0,f=new Uint8Array(Y),q=new DataView(f.buffer);q.setUint16(0,He,!1),f.set(s.subarray(0,8),2),f.set(o.subarray(0,8),10),q.setUint32(18,u,!1);let C=new Uint8Array(8);C.set(a.subarray(0,Math.min(8,a.length))),f.set(C,22);let p=0;for(let N=0;N<30;N++)p^=f[N]??0;if(q.setUint16(30,p&65535,!1),f.length!==Y)throw new E(`encodeMinimal assertion failed: expected ${Y} bytes, got ${f.length}`);return f}function qt(t){if(t.length!==Y)throw new E(`decodeMinimal: expected ${Y} bytes, got ${t.length}`);let e=new DataView(t.buffer,t.byteOffset,t.byteLength),n=e.getUint16(0,!1),r=t.subarray(2,10),s=t.subarray(10,18),o=e.getUint32(18,!1),i=t.subarray(22,30),a=new Date(o*1e3).toISOString(),d=u=>Array.from(u).map(f=>f.toString(16).padStart(2,"0")).join("");return{params:{msg_type:n,from_hash:d(r),to_hash:d(s),timestamp_s:o,sig_truncated:d(i)},timestamp:a}}var kn=251,V=3;function Bt(t,e=kn){let n=Ve(t),r=e-V;if(r<=0)throw new E(`MTU ${e} is too small (need at least ${V+1})`);let s=Math.ceil(n.length/r),o=[];for(let i=0;i<s;i++){let a=n.subarray(i*r,(i+1)*r),d=new Uint8Array(V+a.length);d[0]=i,d[1]=s,d[2]=i===s-1?1:0,d.set(a,V),o.push(d)}return o}function Ft(t){if(t.length===0)throw new E("decodeBleFrames: no frames provided");let e=[...t].sort((a,d)=>(a[0]??0)-(d[0]??0)),n=e[0]?.[1]??e.length;if(e.length!==n)throw new E(`decodeBleFrames: expected ${n} frames, got ${e.length}`);let r=e.map(a=>a.subarray(V)),s=r.reduce((a,d)=>a+d.length,0),o=new Uint8Array(s),i=0;for(let a of r)o.set(a,i),i+=a.length;return Ye(o)}function Ht(t,e){let r=(e.params?.msg_type??0)===He,s=o=>t.includes(o);if(r){if(s("minimal"))return"minimal";if(s("ble"))return"ble";if(s("compact"))return"compact";if(s("http"))return"http"}else{if(s("http"))return"http";if(s("compact"))return"compact";if(s("ble"))return"ble"}throw new E(`No suitable transport available from: [${t.join(", ")}]`)}var Je=(n=>(n.BASE64="base64",n.REF="ref",n))(Je||{});function J(){if(typeof crypto<"u"&&typeof crypto.randomUUID=="function")return crypto.randomUUID();let t=Array.from({length:16},()=>Math.floor(Math.random()*256));t[6]=(t[6]??0)&15|64,t[8]=(t[8]??0)&63|128;let e=t.map(n=>n.toString(16).padStart(2,"0"));return`${e.slice(0,4).join("")}-${e.slice(4,6).join("")}-${e.slice(6,8).join("")}-${e.slice(8,10).join("")}-${e.slice(10).join("")}`}async function Ge(t){let e=globalThis.crypto?.subtle??(await import("crypto")).webcrypto.subtle,n=new ArrayBuffer(t.byteLength);new Uint8Array(n).set(t);let r=await e.digest("SHA-256",n),s=new Uint8Array(r);return Array.from(s).map(o=>o.toString(16).padStart(2,"0")).join("")}function Kt(t){if(typeof Buffer<"u")return Buffer.from(t).toString("base64");let e="";for(let n=0;n<t.length;n++)e+=String.fromCharCode(t[n]??0);return btoa(e)}function We(t,e){let n={...t.toJSON(),...e};return l.fromJSON(n)}async function ze(t,e,n){let r=await Ge(e),s=Kt(e),o={chunkId:J(),mimeType:n,encoding:"base64",hashSha256:r,dataB64:s,sizeBytes:e.length},i=t.mediaChunks??[];return We(t,{mediaChunks:[...i,o]})}function Vt(t,e,n,r,s){let o={chunkId:J(),mimeType:n,encoding:"ref",hashSha256:r,refUrl:e,sizeBytes:s},i=t.mediaChunks??[];return We(t,{mediaChunks:[...i,o]})}async function Yt(t){let e=t.mediaChunks??[];if(e.length===0)return{valid:!0,reason:"no media chunks"};for(let n=0;n<e.length;n++){let r=e[n];if(!r.chunkId)return{valid:!1,reason:`chunk[${n}]: missing chunkId`};if(!r.mimeType)return{valid:!1,reason:`chunk[${n}]: missing mimeType`};if(!r.hashSha256)return{valid:!1,reason:`chunk[${n}]: missing hashSha256`};if(r.sizeBytes<0)return{valid:!1,reason:`chunk[${n}]: sizeBytes must be >= 0`};if(r.encoding==="base64"){if(!r.dataB64)return{valid:!1,reason:`chunk[${n}]: BASE64 encoding requires dataB64`};let s;try{if(typeof Buffer<"u")s=Buffer.from(r.dataB64,"base64");else{let i=atob(r.dataB64);s=new Uint8Array(i.length);for(let a=0;a<i.length;a++)s[a]=i.charCodeAt(a)}}catch{return{valid:!1,reason:`chunk[${n}]: failed to decode base64 data`}}let o=await Ge(s);if(o!==r.hashSha256)return{valid:!1,reason:`chunk[${n}]: SHA-256 mismatch (expected ${r.hashSha256}, got ${o})`}}else if(r.encoding==="ref"){if(!r.refUrl)return{valid:!1,reason:`chunk[${n}]: REF encoding requires refUrl`}}else return{valid:!1,reason:`chunk[${n}]: unknown encoding '${r.encoding}'`}}return{valid:!0,reason:"ok"}}async function Jt(t){let e=new l({rcan:"1.6",rcanVersion:"1.6",cmd:"training_data",target:"rcan://training/data",params:{msg_type:36,msg_id:J()},timestamp:new Date().toISOString()});for(let n of t)e=await ze(e,n.data,n.mimeType);return e}async function Gt(t,e,n,r,s){let o=await Ge(e),i=Kt(e),a={chunkId:J(),mimeType:n,encoding:"base64",hashSha256:o,dataB64:i,sizeBytes:e.length},d={streamId:t,chunkIndex:r,isFinal:s,chunk:a},u=new l({rcan:"1.6",rcanVersion:"1.6",cmd:"stream_chunk",target:"rcan://streaming/chunk",params:{msg_type:29,msg_id:J(),stream_chunk:d},timestamp:new Date().toISOString()});return u=We(u,{mediaChunks:[a]}),u}var Qe=2.5,Tn=0;function In(){return`cr-${Date.now()}-${++Tn}`}function Wt(t={}){return{type:33,request_id:t.request_id??In(),project_id:t.project_id??"",project_name:t.project_name??"",work_unit_id:t.work_unit_id??"",resource_type:t.resource_type??"cpu",estimated_duration_s:t.estimated_duration_s??0,priority:t.priority??0,payload:t.payload??{},timestamp:t.timestamp??Date.now()/1e3}}function zt(t={}){let e={type:34,request_id:t.request_id??"",work_unit_id:t.work_unit_id??"",status:t.status??"completed",resource_type:t.resource_type??"cpu",duration_s:t.duration_s??0,compute_units:t.compute_units??0,result_payload:t.result_payload??{},timestamp:t.timestamp??Date.now()/1e3};return t.error_message!==void 0&&(e.error_message=t.error_message),e}function Qt(t={}){return{type:35,request_id:t.request_id??"",work_unit_id:t.work_unit_id??"",reason:t.reason??"",timestamp:t.timestamp??Date.now()/1e3}}function Xt(t,e="request"){return e==="request"||e==="result"?t>=Qe:e==="cancel"?t>=2:!1}function Zt(t){return t>=3}var Un="0.6.0",Mn="1.6";return un(Pn);})();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@continuonai/rcan-ts",
-  "version": "0.5.0",
-  "description": "Official TypeScript SDK for the RCAN v1.5 robot communication protocol",
+  "version": "0.8.0",
+  "description": "Official TypeScript SDK for the RCAN v1.6 robot communication protocol",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",
@@ -66,4 +66,4 @@
   "publishConfig": {
     "access": "public"
   }
-}
+}