@fkn/lib 0.9.26 → 0.9.28

package/{api-CesI0aMl.d.ts → api-CKoF03Me.d.ts}

@@ -1,5 +1,5 @@
 import { o as TcpSocketOption, v as UdpSocketOption } from "./wire-Gbo-D74t.js";
-import { A as ProxyFetchInit, C as PackageQuery, D as PickOptions, K as WriteData, O as Placement, P as Resolvers, S as OverlayState, T as PackagesErrorCode, U as UdpDatagram, V as TcpSocketOptions, W as UdpSocketOptions, _ as InstallOptions, a as ConflictChoice, c as ConnectAvailability, i as AdoptState, j as ProxyFetchInput, l as ConnectOptions, m as FrameConsentRequest, o as ConflictRequest, r as AdoptRequest, y as IpFamily, z as TcpSocketListenerOptions } from "./contract-D6ksmIm6.js";
+import { $ as TcpSocketOptions, A as ProxyFetchInit, B as RoomJoinOptions, C as PackageQuery, D as PickOptions, F as RoomCreateOptions, G as RoomsErrorCode, O as Placement, P as Resolvers, R as RoomEvent, S as OverlayState, T as PackagesErrorCode, U as RoomPermission, Z as TcpSocketListenerOptions, _ as InstallOptions, a as ConflictChoice, c as ConnectAvailability, i as AdoptState, it as WriteData, j as ProxyFetchInput, l as ConnectOptions, m as FrameConsentRequest, nt as UdpSocketOptions, o as ConflictRequest, r as AdoptRequest, tt as UdpDatagram, y as IpFamily } from "./contract-BzdjfQge.js";
 import { Remote } from "osra";
 //#region src/api-epochs.d.ts
 type EpochListener<T> = (remote: T, epoch: number) => void;
@@ -84,6 +84,10 @@ declare const onApiEpoch: (listener: EpochListener<{
         maxObjects: number;
       }>;
       readFile: (path: string) => Promise<Uint8Array<ArrayBufferLike>>;
+      readFileSealed: (path: string) => Promise<{
+        bytes: Uint8Array;
+        sealedAt: number | null;
+      }>;
       writeFile: (path: string, data: WriteData, contentType: string | null) => Promise<void>;
       remove: (path: string) => Promise<void>;
       encryption: () => Promise<{
@@ -271,6 +275,165 @@ declare const onApiEpoch: (listener: EpochListener<{
       ok: true;
     }>;
   };
+  rooms: {
+    available: () => Promise<boolean>;
+    create: (options?: RoomCreateOptions | undefined) => Promise<{
+      id: string;
+      key: string;
+      invite: string;
+      self: {
+        id: string;
+        permissions: {
+          readonly block: boolean;
+          readonly receive: boolean;
+          readonly remove: boolean;
+          readonly send: boolean;
+        };
+      };
+      owner: string;
+      defaults: () => Promise<{
+        readonly send: boolean;
+        readonly receive: boolean;
+      }>;
+      members: () => Promise<{
+        id: string;
+        permissions: {
+          readonly block: boolean;
+          readonly receive: boolean;
+          readonly remove: boolean;
+          readonly send: boolean;
+        };
+      }[]>;
+      send: (text: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      setDefault: (permission: "receive" | "send", value: boolean) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      grant: (id: string, permission: RoomPermission) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      revoke: (id: string, permission: RoomPermission) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      remove: (id: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      block: (id: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      unblock: (id: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      on: (listener: (event: RoomEvent) => void) => Promise<() => Promise<void>>;
+      leave: () => Promise<void>;
+      closed: Promise<{
+        reason: 'left' | 'removed' | 'blocked' | 'ended' | 'unavailable';
+      }>;
+    } | {
+      error: RoomsErrorCode;
+      message: string;
+    }>;
+    join: (invite: string, options?: RoomJoinOptions | undefined) => Promise<{
+      id: string;
+      key: string;
+      invite: string;
+      self: {
+        id: string;
+        permissions: {
+          readonly block: boolean;
+          readonly receive: boolean;
+          readonly remove: boolean;
+          readonly send: boolean;
+        };
+      };
+      owner: string;
+      defaults: () => Promise<{
+        readonly send: boolean;
+        readonly receive: boolean;
+      }>;
+      members: () => Promise<{
+        id: string;
+        permissions: {
+          readonly block: boolean;
+          readonly receive: boolean;
+          readonly remove: boolean;
+          readonly send: boolean;
+        };
+      }[]>;
+      send: (text: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      setDefault: (permission: "receive" | "send", value: boolean) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      grant: (id: string, permission: RoomPermission) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      revoke: (id: string, permission: RoomPermission) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      remove: (id: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      block: (id: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      unblock: (id: string) => Promise<{
+        error: RoomsErrorCode;
+        message: string;
+      } | {
+        ok: true;
+      }>;
+      on: (listener: (event: RoomEvent) => void) => Promise<() => Promise<void>>;
+      leave: () => Promise<void>;
+      closed: Promise<{
+        reason: 'left' | 'removed' | 'blocked' | 'ended' | 'unavailable';
+      }>;
+    } | {
+      error: RoomsErrorCode;
+      message: string;
+    }>;
+  };
   account: {
     info: () => Promise<{
       name: string;
@@ -397,6 +560,10 @@ declare const currentApiEpoch: () => {
           maxObjects: number;
         }>;
         readFile: (path: string) => Promise<Uint8Array<ArrayBufferLike>>;
+        readFileSealed: (path: string) => Promise<{
+          bytes: Uint8Array;
+          sealedAt: number | null;
+        }>;
         writeFile: (path: string, data: WriteData, contentType: string | null) => Promise<void>;
         remove: (path: string) => Promise<void>;
         encryption: () => Promise<{
@@ -584,6 +751,165 @@ declare const currentApiEpoch: () => {
         ok: true;
       }>;
     };
+    rooms: {
+      available: () => Promise<boolean>;
+      create: (options?: RoomCreateOptions | undefined) => Promise<{
+        id: string;
+        key: string;
+        invite: string;
+        self: {
+          id: string;
+          permissions: {
+            readonly block: boolean;
+            readonly receive: boolean;
+            readonly remove: boolean;
+            readonly send: boolean;
+          };
+        };
+        owner: string;
+        defaults: () => Promise<{
+          readonly send: boolean;
+          readonly receive: boolean;
+        }>;
+        members: () => Promise<{
+          id: string;
+          permissions: {
+            readonly block: boolean;
+            readonly receive: boolean;
+            readonly remove: boolean;
+            readonly send: boolean;
+          };
+        }[]>;
+        send: (text: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        setDefault: (permission: "receive" | "send", value: boolean) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        grant: (id: string, permission: RoomPermission) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        revoke: (id: string, permission: RoomPermission) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        remove: (id: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        block: (id: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        unblock: (id: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        on: (listener: (event: RoomEvent) => void) => Promise<() => Promise<void>>;
+        leave: () => Promise<void>;
+        closed: Promise<{
+          reason: 'left' | 'removed' | 'blocked' | 'ended' | 'unavailable';
+        }>;
+      } | {
+        error: RoomsErrorCode;
+        message: string;
+      }>;
+      join: (invite: string, options?: RoomJoinOptions | undefined) => Promise<{
+        id: string;
+        key: string;
+        invite: string;
+        self: {
+          id: string;
+          permissions: {
+            readonly block: boolean;
+            readonly receive: boolean;
+            readonly remove: boolean;
+            readonly send: boolean;
+          };
+        };
+        owner: string;
+        defaults: () => Promise<{
+          readonly send: boolean;
+          readonly receive: boolean;
+        }>;
+        members: () => Promise<{
+          id: string;
+          permissions: {
+            readonly block: boolean;
+            readonly receive: boolean;
+            readonly remove: boolean;
+            readonly send: boolean;
+          };
+        }[]>;
+        send: (text: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        setDefault: (permission: "receive" | "send", value: boolean) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        grant: (id: string, permission: RoomPermission) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        revoke: (id: string, permission: RoomPermission) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        remove: (id: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        block: (id: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        unblock: (id: string) => Promise<{
+          error: RoomsErrorCode;
+          message: string;
+        } | {
+          ok: true;
+        }>;
+        on: (listener: (event: RoomEvent) => void) => Promise<() => Promise<void>>;
+        leave: () => Promise<void>;
+        closed: Promise<{
+          reason: 'left' | 'removed' | 'blocked' | 'ended' | 'unavailable';
+        }>;
+      } | {
+        error: RoomsErrorCode;
+        message: string;
+      }>;
+    };
     account: {
       info: () => Promise<{
         name: string;

package/api.d.ts

@@ -1,3 +1,3 @@
-import { P as Resolvers } from "./contract-D6ksmIm6.js";
-import { a as apiPromise, c as hasTransport, i as apiLastCall, l as onApiEpoch, n as BrokerUnreachableError, o as apiWithin, r as apiInFlight, s as currentApiEpoch, t as API_DEADLINE_MS } from "./api-CesI0aMl.js";
+import { P as Resolvers } from "./contract-BzdjfQge.js";
+import { a as apiPromise, c as hasTransport, i as apiLastCall, l as onApiEpoch, n as BrokerUnreachableError, o as apiWithin, r as apiInFlight, s as currentApiEpoch, t as API_DEADLINE_MS } from "./api-CKoF03Me.js";
 export { API_DEADLINE_MS, BrokerUnreachableError, type Resolvers, apiInFlight, apiLastCall, apiPromise, apiWithin, currentApiEpoch, hasTransport, onApiEpoch };

package/cloud/dns.d.ts

@@ -1,3 +1,3 @@
-import { n as AddressLookupResult } from "../contract-D6ksmIm6.js";
+import { n as AddressLookupResult } from "../contract-BzdjfQge.js";
 import { lookup } from "../dns.js";
 export { type AddressLookupResult, lookup };

package/cloud/fetch.d.ts

@@ -1,2 +1,2 @@
-import { t as cloudFetch } from "../proxy-BubvP9sg.js";
+import { t as cloudFetch } from "../proxy-DahCiavd.js";
 export { cloudFetch as fetch };

package/cloud/fs/promises.d.ts

@@ -1,5 +1,5 @@
 import { a as WriteData, i as Stats, n as MakeOptions, o as WriteOptions, r as ReadOptions } from "../../index-BQgZVQl7.js";
-import "../../fs-DlGE0ZNu.js";
+import "../../fs-CBVaShOR.js";
 //#region src/cloud/fs-promises.d.ts
 declare const readFile: (path: import("node:fs").PathLike, options?: ReadOptions) => Promise<Buffer | string>, writeFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>, unlink: (path: import("node:fs").PathLike) => Promise<void>, rename: (from: import("node:fs").PathLike, to: import("node:fs").PathLike) => Promise<void>, readdir: (path: import("node:fs").PathLike) => Promise<string[]>, mkdir: (_path?: import("node:fs").PathLike, _options?: MakeOptions) => Promise<void>, rm: (path: import("node:fs").PathLike, options?: {
   recursive?: boolean;

package/cloud/fs.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../rolldown-runtime-BIInC43l.cjs"),t=require("../node-fs-DZPGCYWg.cjs"),n=require("../messages.cjs"),r=require("../storage-DLB4ciMf.cjs");var i=e.t({STORAGE_NOT_FOUND:()=>n.STORAGE_NOT_FOUND,StorageLockedError:()=>r.t,StorageNotFoundError:()=>r.n,available:()=>a,encryption:()=>r.i,isNotFound:()=>r.a,mkdir:()=>d,promises:()=>m,quota:()=>r.s,readFile:()=>o,readdir:()=>u,rename:()=>l,rm:()=>f,stat:()=>p,unlink:()=>c,unlock:()=>r.d,writeFile:()=>s}),{available:a,readFile:o,writeFile:s,unlink:c,rename:l,readdir:u,mkdir:d,rm:f,stat:p,promises:m}=t.t(r.u,{memfs:!1});exports.STORAGE_NOT_FOUND=n.STORAGE_NOT_FOUND,exports.StorageLockedError=r.t,exports.StorageNotFoundError=r.n,exports.available=a,exports.encryption=r.i,exports.isNotFound=r.a,exports.mkdir=d,exports.promises=m,exports.quota=r.s,exports.readFile=o,exports.readdir=u,exports.rename=l,exports.rm=f,exports.stat=p,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return i}}),exports.unlink=c,exports.unlock=r.d,exports.writeFile=s;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../rolldown-runtime-BIInC43l.cjs"),t=require("../node-fs-DZPGCYWg.cjs"),n=require("../messages.cjs"),r=require("../storage-Dr5F1jil.cjs");var i=e.t({STORAGE_NOT_FOUND:()=>n.STORAGE_NOT_FOUND,StorageLockedError:()=>r.t,StorageNotFoundError:()=>r.n,available:()=>a,encryption:()=>r.i,isNotFound:()=>r.a,mkdir:()=>d,promises:()=>m,quota:()=>r.s,readFile:()=>o,readFileSealed:()=>r.l,readdir:()=>u,rename:()=>l,rm:()=>f,stat:()=>p,unlink:()=>c,unlock:()=>r.f,writeFile:()=>s}),{available:a,readFile:o,writeFile:s,unlink:c,rename:l,readdir:u,mkdir:d,rm:f,stat:p,promises:m}=t.t(r.d,{memfs:!1});exports.STORAGE_NOT_FOUND=n.STORAGE_NOT_FOUND,exports.StorageLockedError=r.t,exports.StorageNotFoundError=r.n,exports.available=a,exports.encryption=r.i,exports.isNotFound=r.a,exports.mkdir=d,exports.promises=m,exports.quota=r.s,exports.readFile=o,exports.readFileSealed=r.l,exports.readdir=u,exports.rename=l,exports.rm=f,exports.stat=p,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return i}}),exports.unlink=c,exports.unlock=r.f,exports.writeFile=s;

package/cloud/fs.d.ts

@@ -1,4 +1,5 @@
 import { i as Stats } from "../index-BQgZVQl7.js";
-import { _ as encryption, a as readFile, b as unlock, c as rm, d as writeFile, f as EncryptionStatus, g as StorageQuota, h as StorageNotFoundError, i as promises, l as stat, m as StorageLockedError, o as readdir, p as FileEntry, r as mkdir, s as rename, t as available, u as unlink, v as isNotFound, y as quota } from "../fs-DlGE0ZNu.js";
+import { a as StorageNotFoundError, c as isNotFound, d as unlock, i as StorageLockedError, l as quota, n as FileEntry, o as StorageQuota, r as SealedRead, s as encryption, t as EncryptionStatus, u as readFileSealed } from "../storage-WZEvw3KN.js";
 import { i as STORAGE_NOT_FOUND } from "../messages-DvpKMTsY.js";
-export { type EncryptionStatus, type FileEntry, STORAGE_NOT_FOUND, type Stats, StorageLockedError, StorageNotFoundError, type StorageQuota, available, encryption, isNotFound, mkdir, promises, quota, readFile, readdir, rename, rm, stat, unlink, unlock, writeFile };
+import { a as readFile, c as rm, d as writeFile, i as promises, l as stat, o as readdir, r as mkdir, s as rename, t as available, u as unlink } from "../fs-CBVaShOR.js";
+export { type EncryptionStatus, type FileEntry, STORAGE_NOT_FOUND, type SealedRead, type Stats, StorageLockedError, StorageNotFoundError, type StorageQuota, available, encryption, isNotFound, mkdir, promises, quota, readFile, readFileSealed, readdir, rename, rm, stat, unlink, unlock, writeFile };

package/cloud/fs.js

@@ -1,26 +1,27 @@
 import { t as e } from "../rolldown-runtime-Dy4uBu1J.js";
 import { t } from "../node-fs-C9ECR_9H.js";
 import { STORAGE_NOT_FOUND as n } from "../messages.js";
-import { a as r, d as i, i as a, n as o, s, t as c, u as l } from "../storage-BjGr_vC4.js";
+import { a as r, d as i, f as a, i as o, l as s, n as c, s as l, t as u } from "../storage-BL8vxHlW.js";
 //#region src/cloud/fs.ts
-var u = /* @__PURE__ */ e({
+var d = /* @__PURE__ */ e({
 	STORAGE_NOT_FOUND: () => n,
-	StorageLockedError: () => c,
-	StorageNotFoundError: () => o,
-	available: () => d,
-	encryption: () => a,
+	StorageLockedError: () => u,
+	StorageNotFoundError: () => c,
+	available: () => f,
+	encryption: () => o,
 	isNotFound: () => r,
-	mkdir: () => _,
-	promises: () => b,
-	quota: () => s,
-	readFile: () => f,
-	readdir: () => g,
-	rename: () => h,
-	rm: () => v,
-	stat: () => y,
-	unlink: () => m,
-	unlock: () => i,
-	writeFile: () => p
-}), { available: d, readFile: f, writeFile: p, unlink: m, rename: h, readdir: g, mkdir: _, rm: v, stat: y, promises: b } = t(l, { memfs: !1 });
+	mkdir: () => v,
+	promises: () => x,
+	quota: () => l,
+	readFile: () => p,
+	readFileSealed: () => s,
+	readdir: () => _,
+	rename: () => g,
+	rm: () => y,
+	stat: () => b,
+	unlink: () => h,
+	unlock: () => a,
+	writeFile: () => m
+}), { available: f, readFile: p, writeFile: m, unlink: h, rename: g, readdir: _, mkdir: v, rm: y, stat: b, promises: x } = t(i, { memfs: !1 });
 //#endregion
-export { n as STORAGE_NOT_FOUND, c as StorageLockedError, o as StorageNotFoundError, d as available, a as encryption, r as isNotFound, _ as mkdir, b as promises, s as quota, f as readFile, g as readdir, h as rename, v as rm, y as stat, u as t, m as unlink, i as unlock, p as writeFile };
+export { n as STORAGE_NOT_FOUND, u as StorageLockedError, c as StorageNotFoundError, f as available, o as encryption, r as isNotFound, v as mkdir, x as promises, l as quota, p as readFile, s as readFileSealed, _ as readdir, g as rename, y as rm, b as stat, d as t, h as unlink, a as unlock, m as writeFile };

package/cloud/net.d.ts

@@ -1,2 +1,2 @@
-import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "../net-DAOcF3Eb.js";
+import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "../net-Cy6QOTK3.js";
 export { Server, Socket, _default, _default as default, connect, createConnection, createServer, isIP, isIPv4, isIPv6 };

package/{cloud-B7pI3pp1.d.ts → cloud-BX_24NAz.d.ts}

@@ -1,8 +1,8 @@
-import { t as cloudFetch } from "./proxy-BubvP9sg.js";
-import { i as Frame, r as AttachFrameOptions } from "./index-BhO-wymH.js";
+import { t as cloudFetch } from "./proxy-DahCiavd.js";
+import { i as Frame, r as AttachFrameOptions } from "./index-DH3_12nU.js";
 import { t as dns_d_exports } from "./dns.js";
-import { n as fs_d_exports } from "./fs-DlGE0ZNu.js";
-import { s as net_d_exports } from "./net-DAOcF3Eb.js";
+import { n as fs_d_exports } from "./fs-CBVaShOR.js";
+import { s as net_d_exports } from "./net-Cy6QOTK3.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 //#region src/cloud/frame.d.ts

package/cloud.d.ts

@@ -1,8 +1,8 @@
-import { t as cloudFetch } from "./proxy-BubvP9sg.js";
-import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-B7pI3pp1.js";
+import { t as cloudFetch } from "./proxy-DahCiavd.js";
+import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-BX_24NAz.js";
 import { t as dns_d_exports } from "./dns.js";
-import { n as fs_d_exports } from "./fs-DlGE0ZNu.js";
-import { s as net_d_exports } from "./net-DAOcF3Eb.js";
+import { n as fs_d_exports } from "./fs-CBVaShOR.js";
+import { s as net_d_exports } from "./net-Cy6QOTK3.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 export { type QuotaStatus, attachFrame, available, dgram_d_exports as dgram, dns_d_exports as dns, cloudFetch as fetch, fs_d_exports as fs, http_d_exports as http, net_d_exports as net, quota };

package/{contract-D6ksmIm6.d.ts → contract-BzdjfQge.d.ts}

@@ -179,6 +179,106 @@ type MountDescriptor = {
   /** the connecting app, as the BROKER knows it */
   from: string;
 };
+type RoomPermission = 'send' | 'receive' | 'remove' | 'block';
+type RoomPermissions = Readonly<Record<RoomPermission, boolean>>;
+type RoomDefaults = Readonly<{
+  send: boolean;
+  receive: boolean;
+}>;
+/** A participant as this room sees them. The id is fresh in every room. */
+type RoomMember = {
+  id: string;
+  permissions: RoomPermissions;
+};
+type RoomMessage = {
+  seq: number;
+  from: string;
+  at: number;
+  text: string;
+};
+type RoomEvent = {
+  type: 'message';
+  message: RoomMessage;
+} | {
+  type: 'joined';
+  member: RoomMember;
+} | {
+  type: 'left';
+  id: string;
+  reason: 'left' | 'removed' | 'blocked';
+} | {
+  type: 'permissions';
+  id: string;
+  permissions: RoomPermissions;
+} | {
+  type: 'defaults';
+  defaults: RoomDefaults;
+};
+type RoomsErrorCode = 'invalid' | 'not-found' | 'bad-key' | 'full' | 'blocked' | 'denied' | 'rate-limited' | 'too-large' | 'unavailable' | 'closed';
+/** A refusal, as data. `packages` crosses the hop the same way, and for the same reason. */
+type RoomsFail = {
+  error: RoomsErrorCode;
+  message: string;
+};
+/** Why the room ended for this app. It ends once. */
+type RoomEnd = {
+  reason: 'left' | 'removed' | 'blocked' | 'ended' | 'unavailable';
+};
+type RoomCreateOptions = {
+  /** aborting it leaves the room; it never bounds the wait for the broker */
+  signal?: AbortSignal;
+  members?: number;
+  defaults?: Partial<RoomDefaults>;
+};
+type RoomJoinOptions = {
+  signal?: AbortSignal;
+};
+/**
+ * A joined room, held by the broker: it owns the socket, the room key and the derived message key,
+ * and hands the app plaintext and member ids only.
+ *
+ * Every member that can be refused answers with a `RoomsFail` rather than throwing, so a refusal
+ * survives the osra hop as data. `leave` and `on` cannot be refused.
+ */
+type RoomHandle = {
+  /** the room's uuid */
+  id: string;
+  /** the room key, base64url. The api never sees it. Anyone holding it and the id can join. */
+  key: string;
+  /** `id` and `key` as one string, the thing to put in a link */
+  invite: string;
+  self: RoomMember;
+  owner: string;
+  defaults: () => Promise<RoomDefaults>;
+  members: () => Promise<RoomMember[]>;
+  /** at most 4,096 bytes of UTF-8, sealed before it leaves the browser; never truncated */
+  send: (text: string) => Promise<RoomsFail | {
+    ok: true;
+  }>;
+  setDefault: (permission: 'send' | 'receive', value: boolean) => Promise<RoomsFail | {
+    ok: true;
+  }>;
+  grant: (id: string, permission: RoomPermission) => Promise<RoomsFail | {
+    ok: true;
+  }>;
+  revoke: (id: string, permission: RoomPermission) => Promise<RoomsFail | {
+    ok: true;
+  }>;
+  remove: (id: string) => Promise<RoomsFail | {
+    ok: true;
+  }>;
+  block: (id: string) => Promise<RoomsFail | {
+    ok: true;
+  }>;
+  unblock: (id: string) => Promise<RoomsFail | {
+    ok: true;
+  }>;
+  /** the `account.onChange` shape: one broker-side registration, unsubscribed by the returned function */
+  on: (listener: (event: RoomEvent) => void) => (() => void);
+  leave: () => Promise<void>;
+  /** settles once, when the room ends for this app. Never rejects. */
+  closed: Promise<RoomEnd>;
+};
 type IpFamily = 'IPv4' | 'IPv6';
 /** Viewport rect plus optional corner radii, as the overlay host reports them. */
 type OverlayRect = {
@@ -306,6 +406,18 @@ type Resolvers = {
       list: () => Promise<StorageEntry[]>;
       quota: () => Promise<StorageQuota>;
       readFile: (path: string) => Promise<Uint8Array>;
+      /**
+       * The same read as `readFile`, plus the seal time the envelope authenticates, in milliseconds,
+       * or null for an envelope that carries no such field.
+       *
+       * Authenticated means the server can neither forge nor alter it, because it is covered by the
+       * envelope's AAD; it is still the WRITER's own claim about when it sealed, so on its own it
+       * does not prove that this copy is the newest one.
+       */
+      readFileSealed: (path: string) => Promise<{
+        bytes: Uint8Array;
+        sealedAt: number | null;
+      }>;
       writeFile: (path: string, data: WriteData, contentType: string | null) => Promise<void>;
       remove: (path: string) => Promise<void>;
       encryption: () => Promise<EncryptionState>;
@@ -369,6 +481,11 @@ type Resolvers = {
       ok: true;
     }>;
   };
+  rooms: {
+    available: () => Promise<boolean>;
+    create: (options?: RoomCreateOptions) => Promise<RoomsFail | RoomHandle>;
+    join: (invite: string, options?: RoomJoinOptions) => Promise<RoomsFail | RoomHandle>;
+  };
   account: {
     info: () => Promise<Account | null>;
     login: (consumerOrigin: string) => Promise<boolean>;
@@ -391,4 +508,4 @@ type Resolvers = {
   hideInstallPrompt: () => void;
 };
 //#endregion
-export { ProxyFetchInit as A, TcpSocketListenerResult as B, PackageQuery as C, PickOptions as D, PackagesFail as E, SetOverlayHost as F, UdpSocketResult as G, TcpSocketResult as H, StorageEntry as I, WriteData as K, StorageQuota as L, Quota as M, Radii as N, Placement as O, Resolvers as P, SurfaceRect as R, OverlayState as S, PackagesErrorCode as T, UdpDatagram as U, TcpSocketOptions as V, UdpSocketOptions as W, InstallOptions as _, ConflictChoice as a, MountDescriptor as b, ConnectAvailability as c, DisplayLevel as d, DnsLookup as f, HiddenSurface as g, FrameFetchScope as h, AdoptState as i, ProxyFetchInput as j, ProxyFetch as k, ConnectOptions as l, FrameConsentRequest as m, AddressLookupResult as n, ConflictRequest as o, EncryptionState as p, AdoptRequest as r, ConflictSide as s, Account as t, DisplayCause as u, InstalledPackage as v, PackageResult as w, OverlayRect as x, IpFamily as y, TcpSocketListenerOptions as z };
+export { TcpSocketOptions as $, ProxyFetchInit as A, RoomJoinOptions as B, PackageQuery as C, PickOptions as D, PackagesFail as E, RoomCreateOptions as F, RoomsErrorCode as G, RoomMessage as H, RoomDefaults as I, StorageEntry as J, RoomsFail as K, RoomEnd as L, Quota as M, Radii as N, Placement as O, Resolvers as P, TcpSocketListenerResult as Q, RoomEvent as R, OverlayState as S, PackagesErrorCode as T, RoomPermission as U, RoomMember as V, RoomPermissions as W, SurfaceRect as X, StorageQuota as Y, TcpSocketListenerOptions as Z, InstallOptions as _, ConflictChoice as a, MountDescriptor as b, ConnectAvailability as c, DisplayLevel as d, TcpSocketResult as et, DnsLookup as f, HiddenSurface as g, FrameFetchScope as h, AdoptState as i, WriteData as it, ProxyFetchInput as j, ProxyFetch as k, ConnectOptions as l, FrameConsentRequest as m, AddressLookupResult as n, UdpSocketOptions as nt, ConflictRequest as o, EncryptionState as p, SetOverlayHost as q, AdoptRequest as r, UdpSocketResult as rt, ConflictSide as s, Account as t, UdpDatagram as tt, DisplayCause as u, InstalledPackage as v, PackageResult as w, OverlayRect as x, IpFamily as y, RoomHandle as z };

package/contract.d.ts

@@ -1,3 +1,3 @@
 import { o as TcpSocketOption, v as UdpSocketOption } from "./wire-Gbo-D74t.js";
-import { A as ProxyFetchInit, B as TcpSocketListenerResult, C as PackageQuery, D as PickOptions, E as PackagesFail, F as SetOverlayHost, G as UdpSocketResult, H as TcpSocketResult, I as StorageEntry, K as WriteData, L as StorageQuota, M as Quota, N as Radii, O as Placement, P as Resolvers, R as SurfaceRect, S as OverlayState, T as PackagesErrorCode, U as UdpDatagram, V as TcpSocketOptions, W as UdpSocketOptions, _ as InstallOptions, a as ConflictChoice, b as MountDescriptor, c as ConnectAvailability, d as DisplayLevel, f as DnsLookup, g as HiddenSurface, h as FrameFetchScope, i as AdoptState, j as ProxyFetchInput, k as ProxyFetch, l as ConnectOptions, m as FrameConsentRequest, n as AddressLookupResult, o as ConflictRequest, p as EncryptionState, r as AdoptRequest, s as ConflictSide, t as Account, u as DisplayCause, v as InstalledPackage, w as PackageResult, x as OverlayRect, y as IpFamily, z as TcpSocketListenerOptions } from "./contract-D6ksmIm6.js";
-export { Account, AddressLookupResult, AdoptRequest, AdoptState, ConflictChoice, ConflictRequest, ConflictSide, ConnectAvailability, ConnectOptions, DisplayCause, DisplayLevel, DnsLookup, EncryptionState, FrameConsentRequest, FrameFetchScope, HiddenSurface, InstallOptions, InstalledPackage, IpFamily, MountDescriptor, OverlayRect, OverlayState, PackageQuery, PackageResult, PackagesErrorCode, PackagesFail, PickOptions, Placement, ProxyFetch, ProxyFetchInit, ProxyFetchInput, Quota, Radii, Resolvers, SetOverlayHost, StorageEntry, StorageQuota, SurfaceRect, TcpSocketListenerOptions, TcpSocketListenerResult, type TcpSocketOption, TcpSocketOptions, TcpSocketResult, UdpDatagram, type UdpSocketOption, UdpSocketOptions, UdpSocketResult, WriteData };
+import { $ as TcpSocketOptions, A as ProxyFetchInit, B as RoomJoinOptions, C as PackageQuery, D as PickOptions, E as PackagesFail, F as RoomCreateOptions, G as RoomsErrorCode, H as RoomMessage, I as RoomDefaults, J as StorageEntry, K as RoomsFail, L as RoomEnd, M as Quota, N as Radii, O as Placement, P as Resolvers, Q as TcpSocketListenerResult, R as RoomEvent, S as OverlayState, T as PackagesErrorCode, U as RoomPermission, V as RoomMember, W as RoomPermissions, X as SurfaceRect, Y as StorageQuota, Z as TcpSocketListenerOptions, _ as InstallOptions, a as ConflictChoice, b as MountDescriptor, c as ConnectAvailability, d as DisplayLevel, et as TcpSocketResult, f as DnsLookup, g as HiddenSurface, h as FrameFetchScope, i as AdoptState, it as WriteData, j as ProxyFetchInput, k as ProxyFetch, l as ConnectOptions, m as FrameConsentRequest, n as AddressLookupResult, nt as UdpSocketOptions, o as ConflictRequest, p as EncryptionState, q as SetOverlayHost, r as AdoptRequest, rt as UdpSocketResult, s as ConflictSide, t as Account, tt as UdpDatagram, u as DisplayCause, v as InstalledPackage, w as PackageResult, x as OverlayRect, y as IpFamily, z as RoomHandle } from "./contract-BzdjfQge.js";
+export { Account, AddressLookupResult, AdoptRequest, AdoptState, ConflictChoice, ConflictRequest, ConflictSide, ConnectAvailability, ConnectOptions, DisplayCause, DisplayLevel, DnsLookup, EncryptionState, FrameConsentRequest, FrameFetchScope, HiddenSurface, InstallOptions, InstalledPackage, IpFamily, MountDescriptor, OverlayRect, OverlayState, PackageQuery, PackageResult, PackagesErrorCode, PackagesFail, PickOptions, Placement, ProxyFetch, ProxyFetchInit, ProxyFetchInput, Quota, Radii, Resolvers, RoomCreateOptions, RoomDefaults, RoomEnd, RoomEvent, RoomHandle, RoomJoinOptions, RoomMember, RoomMessage, RoomPermission, RoomPermissions, RoomsErrorCode, RoomsFail, SetOverlayHost, StorageEntry, StorageQuota, SurfaceRect, TcpSocketListenerOptions, TcpSocketListenerResult, type TcpSocketOption, TcpSocketOptions, TcpSocketResult, UdpDatagram, type UdpSocketOption, UdpSocketOptions, UdpSocketResult, WriteData };

package/dgram.d.ts

@@ -1,6 +1,6 @@
 import { v as UdpSocketOption } from "./wire-Gbo-D74t.js";
-import { G as UdpSocketResult, P as Resolvers } from "./contract-D6ksmIm6.js";
-import "./api-CesI0aMl.js";
+import { P as Resolvers, rt as UdpSocketResult } from "./contract-BzdjfQge.js";
+import "./api-CKoF03Me.js";
 import { Buffer } from "buffer";
 import { AddressInfo } from "net";
 import { EventEmitter } from "events";

package/dns.d.ts

@@ -1,4 +1,4 @@
-import { n as AddressLookupResult } from "./contract-D6ksmIm6.js";
+import { n as AddressLookupResult } from "./contract-BzdjfQge.js";
 declare namespace dns_d_exports {
   export { AddressLookupResult, lookup };
 }