@matter/node 0.17.4 → 0.17.5-alpha.0-20260702-a2cd6f764

package/dist/cjs/behaviors/groupcast/GroupcastServer.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { AccessControlServer } from "#behaviors/access-control";
+import { GroupMessageEventInfo } from "@matter/protocol";
+import { Groupcast } from "@matter/types/clusters/groupcast";
+import { GroupcastBehavior } from "./GroupcastBehavior.js";
+/**
+ * This is the default server implementation of {@link GroupcastBehavior}.
+ *
+ * The Groupcast cluster is node-scoped and must be placed on the root endpoint.
+ * Use {@link GroupcastServer.with} to enable the desired features (e.g. "Listener", "Sender").
+ *
+ * Key behaviors:
+ * - Manages per-fabric group membership (persistent).
+ * - Drives {@link FabricGroups} with group-to-key-set mappings and multicast address policy.
+ * - Registers an {@link AccessControlServer.AuxAclObservable} to supply synthetic ACL entries for groups
+ *   with `hasAuxiliaryAcl=true`. AccessControlServer calls back to collect entries when needed.
+ * - On first use by a fabric, marks the fabric as "GroupcastAdopted" in GKM, making GroupKeyMap read-only.
+ * - Migrates legacy group data from the Groups cluster on startup.
+ */
+export declare class GroupcastServer extends GroupcastBehavior {
+    #private;
+    internal: GroupcastServer.Internal;
+    initialize(): void;
+    joinGroup(request: Groupcast.JoinGroupRequest): Promise<void>;
+    leaveGroup(request: Groupcast.LeaveGroupRequest): Groupcast.LeaveGroupResponse;
+    updateGroupKey(request: Groupcast.UpdateGroupKeyRequest): Promise<void>;
+    configureAuxiliaryAcl(request: Groupcast.ConfigureAuxiliaryAclRequest): void;
+    groupcastTesting(request: Groupcast.GroupcastTestingRequest): void;
+    [Symbol.asyncDispose](): Promise<void>;
+}
+export declare namespace GroupcastServer {
+    /** Non-persistent internal state for GroupcastServer. */
+    class Internal {
+        /**
+         * Observable that holds all auxiliary ACL entries supplied by this cluster.
+         * AccessControlServer subscribes to this and rebuilds its ACL cache whenever it emits.
+         */
+        auxAcl: AccessControlServer.AuxAclObservable;
+        /** Active subscription handler on SessionManager.groupMessage while fabricUnderTest is set. */
+        groupMessageHandler?: (info: GroupMessageEventInfo) => void;
+    }
+    /** Default state overrides for GroupcastServer. */
+    class State extends GroupcastBehavior.State {
+        /**
+         * Implementation-defined maximum membership count (min 10 per spec).
+         * Set to 2 * GKM.maxGroupsPerFabric (44) so per-fabric quota floor(44/2)=22 aligns exactly
+         * with GKM's per-fabric cap. Even number avoids spillover semantics.
+         */
+        maxMembershipCount: number;
+        /** Implementation-defined maximum multicast address count (min 1 per spec). */
+        maxMcastAddrCount: number;
+    }
+}
+//# sourceMappingURL=GroupcastServer.d.ts.map

package/dist/cjs/behaviors/groupcast/GroupcastServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupcastServer.d.ts","sourceRoot":"","sources":["../../../../src/behaviors/groupcast/GroupcastServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAKhE,OAAO,EAKH,qBAAqB,EAExB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAU3D;;;;;;;;;;;;;GAaG;AACH,qBAAa,eAAgB,SAAQ,iBAAiB;;IAC1C,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;IAKlC,UAAU,SAUlB;IA8Dc,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,gBAAgB,iBAyG3D;IAEQ,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,GAAG,SAAS,CAAC,kBAAkB,CAyDtF;IAEc,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,qBAAqB,iBAsBrE;IAED,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,4BAA4B,QAepE;IAEQ,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,uBAAuB,QA4BnE;IAiRc,CAAC,MAAM,CAAC,YAAY,CAAC,kBAKnC;CACJ;AAED,yBAAiB,eAAe,CAAC,CAAC;IAC9B,yDAAyD;IACzD,MAAa,QAAQ;QACjB;;;WAGG;QACH,MAAM,EAAE,mBAAmB,CAAC,gBAAgB,CAAuB;QAEnE,+FAA+F;QAC/F,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,IAAI,CAAC;KAC/D;IAED,mDAAmD;IACnD,MAAa,KAAM,SAAQ,iBAAiB,CAAC,KAAK;QAC9C;;;;WAIG;QACM,kBAAkB,SAAM;QACjC,+EAA+E;QACtE,iBAAiB,SAAM;KACnC;CACJ"}

package/dist/cjs/behaviors/groupcast/GroupcastServer.js

@@ -0,0 +1,510 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var GroupcastServer_exports = {};
+__export(GroupcastServer_exports, {
+  GroupcastServer: () => GroupcastServer
+});
+module.exports = __toCommonJS(GroupcastServer_exports);
+var import_access_control = require("#behaviors/access-control");
+var import_group_key_management = require("#behaviors/group-key-management");
+var import_general = require("@matter/general");
+var import_model = require("@matter/model");
+var import_protocol = require("@matter/protocol");
+var import_types = require("@matter/types");
+var import_access_control2 = require("@matter/types/clusters/access-control");
+var import_groupcast = require("@matter/types/clusters/groupcast");
+var import_GroupcastBehavior = require("./GroupcastBehavior.js");
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const logger = import_general.Logger.get("GroupcastServer");
+const UNMAPPED_KEYSET_ID = 65535;
+const GROUPCAST_IS_PROVISIONAL = true;
+class GroupcastServer extends import_GroupcastBehavior.GroupcastBehavior {
+  /** Timer for GroupcastTesting auto-disable. */
+  #testingTimer;
+  initialize() {
+    if (GROUPCAST_IS_PROVISIONAL) {
+      throw new import_general.ImplementationError(
+        "The Groupcast cluster is provisional in Matter 1.6. Do not add it to a node."
+      );
+    }
+    const lifecycle = this.endpoint.lifecycle;
+    this.reactTo(lifecycle.online, this.#online);
+  }
+  async #online() {
+    this.agent.get(import_access_control.AccessControlServer).registerAuxAclProvider(this.internal.auxAcl);
+    const fabrics = this.env.get(import_protocol.FabricManager);
+    for (const fabric of fabrics) {
+      this.#syncFabricGroups(fabric);
+    }
+    await this.#migrate();
+    this.#reconcileUnmappedKeys();
+    this.#updateUsedMcastAddrCount();
+    this.#emitAuxAcl();
+    this.reactTo(fabrics.events.added, this.#handleFabricAdded);
+    this.reactTo(fabrics.events.deleted, this.#handleFabricDeleted);
+    const gkmEvents = this.endpoint.eventsOf(import_group_key_management.GroupKeyManagementServer);
+    this.reactTo(gkmEvents.groupKeyMap$Changed, this.#reconcileUnmappedKeys);
+    this.reactTo(this.events.fabricUnderTest$Changed, this.#handleFabricUnderTestChanged);
+    if (this.state.fabricUnderTest !== import_types.FabricIndex.NO_FABRIC) {
+      this.#attachGroupMessageListener();
+    }
+  }
+  /**
+   * Check whether the current session has Admin privileges for this cluster/endpoint.
+   * Key and useAuxiliaryACL fields in Manage-access commands require Admin
+   * privilege to prevent privilege escalation.
+   */
+  #requireAdmin() {
+    const session = this.context;
+    const location = {
+      path: import_model.DataModelPath.none,
+      endpoint: this.endpoint.number,
+      cluster: import_GroupcastBehavior.GroupcastBehavior.cluster.id,
+      owningFabric: session.fabric
+    };
+    if (session.authorityAt(import_model.AccessLevel.Administer, location) !== import_protocol.AccessControl.Authority.Granted) {
+      throw new import_types.StatusResponseError(
+        "Admin privilege required for key or ACL operations",
+        import_types.Status.UnsupportedAccess
+      );
+    }
+  }
+  async joinGroup(request) {
+    (0, import_protocol.assertRemoteActor)(this.context);
+    const fabricIndex = this.context.session.associatedFabric.fabricIndex;
+    const { groupId, endpoints, keySetId, key, useAuxiliaryAcl, replaceEndpoints, mcastAddrPolicy } = request;
+    if (groupId < 1 || groupId > 65527) {
+      throw new import_types.StatusResponseError("Invalid group ID", import_types.Status.ConstraintError);
+    }
+    if (key !== void 0 || useAuxiliaryAcl !== void 0) {
+      this.#requireAdmin();
+    }
+    for (const ep of endpoints) {
+      if (ep === 0 || ep > 65534) {
+        throw new import_types.StatusResponseError(`Endpoint ${ep} is invalid`, import_types.Status.UnsupportedEndpoint);
+      }
+    }
+    if (!this.features.sender && endpoints.length === 0) {
+      throw new import_types.StatusResponseError("Empty endpoint list requires Sender feature", import_types.Status.ConstraintError);
+    }
+    const policy = mcastAddrPolicy ?? import_groupcast.Groupcast.MulticastAddrPolicy.IanaAddr;
+    if (policy === import_groupcast.Groupcast.MulticastAddrPolicy.PerGroup && !this.features.perGroup) {
+      throw new import_types.StatusResponseError(
+        "PerGroup multicast policy requires PerGroupAddr feature",
+        import_types.Status.ConstraintError
+      );
+    }
+    await this.#applyKeySet(fabricIndex, keySetId, key);
+    const membership = (0, import_general.deepCopy)(this.state.membership);
+    const existingIdx = membership.findIndex((m) => m.groupId === groupId && m.fabricIndex === fabricIndex);
+    if (existingIdx >= 0) {
+      const existing = membership[existingIdx];
+      const lnFields = this.features.listener ? {
+        endpoints: replaceEndpoints ? endpoints : [.../* @__PURE__ */ new Set([...existing.endpoints ?? [], ...endpoints])],
+        hasAuxiliaryAcl: useAuxiliaryAcl ?? existing.hasAuxiliaryAcl
+      } : {};
+      membership[existingIdx] = {
+        ...existing,
+        ...lnFields,
+        keySetId,
+        mcastAddrPolicy: policy
+      };
+    } else {
+      const fabricMemberships = membership.filter((m) => m.fabricIndex === fabricIndex);
+      const perFabricLimit = Math.floor(this.state.maxMembershipCount / 2);
+      if (fabricMemberships.length >= perFabricLimit) {
+        throw new import_types.StatusResponseError("Per-fabric membership limit reached", import_types.Status.ResourceExhausted);
+      }
+      if (membership.length >= this.state.maxMembershipCount) {
+        throw new import_types.StatusResponseError("Total membership limit reached", import_types.Status.ResourceExhausted);
+      }
+      if (policy === import_groupcast.Groupcast.MulticastAddrPolicy.PerGroup) {
+        const currentUsed = this.#computeUsedMcastAddrCount(membership);
+        if (currentUsed >= this.state.maxMcastAddrCount) {
+          throw new import_types.StatusResponseError("MaxMcastAddrCount limit reached", import_types.Status.ResourceExhausted);
+        }
+      } else if (policy === import_groupcast.Groupcast.MulticastAddrPolicy.IanaAddr) {
+        const hasIanaAddr = membership.some((m) => m.mcastAddrPolicy === import_groupcast.Groupcast.MulticastAddrPolicy.IanaAddr);
+        if (!hasIanaAddr) {
+          const currentUsed = this.#computeUsedMcastAddrCount(membership);
+          if (currentUsed >= this.state.maxMcastAddrCount) {
+            throw new import_types.StatusResponseError("MaxMcastAddrCount limit reached", import_types.Status.ResourceExhausted);
+          }
+        }
+      }
+      const lnFields = this.features.listener ? { endpoints, hasAuxiliaryAcl: useAuxiliaryAcl ?? false } : {};
+      membership.push({
+        groupId,
+        ...lnFields,
+        keySetId,
+        mcastAddrPolicy: policy,
+        fabricIndex
+      });
+    }
+    this.state.membership = membership;
+    this.#updateUsedMcastAddrCount();
+    this.#syncFabricGroups(this.env.get(import_protocol.FabricManager).for(fabricIndex));
+    this.#emitAuxAcl();
+  }
+  leaveGroup(request) {
+    (0, import_protocol.assertRemoteActor)(this.context);
+    const fabricIndex = this.context.session.associatedFabric.fabricIndex;
+    const { groupId, endpoints: requestedEndpoints } = request;
+    if (groupId === import_types.GroupId.NO_GROUP_ID) {
+      const fabricMemberships = this.state.membership.filter((m) => m.fabricIndex === fabricIndex);
+      if (fabricMemberships.length === 0) {
+        throw new import_types.StatusResponseError("No groups to leave", import_types.Status.NotFound);
+      }
+      this.state.membership = this.state.membership.filter((m) => m.fabricIndex !== fabricIndex);
+      this.#updateUsedMcastAddrCount();
+      this.#syncFabricGroups(this.env.get(import_protocol.FabricManager).for(fabricIndex));
+      this.#emitAuxAcl();
+      return { groupId: import_types.GroupId.NO_GROUP_ID, endpoints: [] };
+    }
+    const membership = (0, import_general.deepCopy)(this.state.membership);
+    const entryIdx = membership.findIndex((m) => m.groupId === groupId && m.fabricIndex === fabricIndex);
+    if (entryIdx < 0) {
+      throw new import_types.StatusResponseError(`Group ${groupId} not found`, import_types.Status.NotFound);
+    }
+    const entry = membership[entryIdx];
+    let removedEndpoints;
+    if (!requestedEndpoints || requestedEndpoints.length === 0) {
+      removedEndpoints = entry.endpoints ?? [];
+      membership.splice(entryIdx, 1);
+    } else {
+      const currentEndpoints = entry.endpoints ?? [];
+      removedEndpoints = requestedEndpoints.filter((ep) => currentEndpoints.includes(ep));
+      const remainingEndpoints = currentEndpoints.filter((ep) => !requestedEndpoints.includes(ep));
+      if (remainingEndpoints.length === 0) {
+        if (this.features.sender) {
+          const { endpoints: _omit, ...entryWithoutEndpoints } = entry;
+          membership[entryIdx] = this.features.listener ? { ...entry, endpoints: [] } : entryWithoutEndpoints;
+        } else {
+          membership.splice(entryIdx, 1);
+        }
+      } else {
+        membership[entryIdx] = { ...entry, endpoints: remainingEndpoints };
+      }
+    }
+    this.state.membership = membership;
+    this.#updateUsedMcastAddrCount();
+    this.#syncFabricGroups(this.env.get(import_protocol.FabricManager).for(fabricIndex));
+    this.#emitAuxAcl();
+    return { groupId, endpoints: removedEndpoints };
+  }
+  async updateGroupKey(request) {
+    (0, import_protocol.assertRemoteActor)(this.context);
+    const fabricIndex = this.context.session.associatedFabric.fabricIndex;
+    const { groupId, keySetId, key } = request;
+    if (key !== void 0) {
+      this.#requireAdmin();
+    }
+    const membership = (0, import_general.deepCopy)(this.state.membership);
+    const entryIdx = membership.findIndex((m) => m.groupId === groupId && m.fabricIndex === fabricIndex);
+    if (entryIdx < 0) {
+      throw new import_types.StatusResponseError(`Group ${groupId} not found`, import_types.Status.NotFound);
+    }
+    await this.#applyKeySet(fabricIndex, keySetId, key);
+    membership[entryIdx] = { ...membership[entryIdx], keySetId };
+    this.state.membership = membership;
+    this.#syncFabricGroups(this.env.get(import_protocol.FabricManager).for(fabricIndex));
+  }
+  configureAuxiliaryAcl(request) {
+    (0, import_protocol.assertRemoteActor)(this.context);
+    const fabricIndex = this.context.session.associatedFabric.fabricIndex;
+    const { groupId, useAuxiliaryAcl } = request;
+    const membership = (0, import_general.deepCopy)(this.state.membership);
+    const entryIdx = membership.findIndex((m) => m.groupId === groupId && m.fabricIndex === fabricIndex);
+    if (entryIdx < 0) {
+      throw new import_types.StatusResponseError(`Group ${groupId} not found`, import_types.Status.NotFound);
+    }
+    membership[entryIdx] = { ...membership[entryIdx], hasAuxiliaryAcl: useAuxiliaryAcl };
+    this.state.membership = membership;
+    this.#emitAuxAcl();
+  }
+  groupcastTesting(request) {
+    (0, import_protocol.assertRemoteActor)(this.context);
+    const fabricIndex = this.context.session.associatedFabric.fabricIndex;
+    const { testOperation, durationSeconds } = request;
+    if (this.#testingTimer) {
+      this.#testingTimer.stop();
+      this.#testingTimer = void 0;
+    }
+    if (testOperation === import_groupcast.Groupcast.GroupcastTesting.DisableTesting) {
+      this.state.fabricUnderTest = import_types.FabricIndex.NO_FABRIC;
+      return;
+    }
+    this.state.fabricUnderTest = fabricIndex;
+    if (durationSeconds !== void 0 && durationSeconds > 0) {
+      this.#testingTimer = import_general.Time.getTimer(
+        `groupcast-testing-${fabricIndex}`,
+        (0, import_general.Seconds)(durationSeconds),
+        this.callback(this.#testingTimerExpired)
+      );
+      this.#testingTimer.start();
+    }
+  }
+  #testingTimerExpired() {
+    this.#testingTimer = void 0;
+    this.state.fabricUnderTest = import_types.FabricIndex.NO_FABRIC;
+  }
+  #handleFabricUnderTestChanged(value) {
+    if (value !== import_types.FabricIndex.NO_FABRIC) {
+      this.#attachGroupMessageListener();
+    } else {
+      this.#detachGroupMessageListener();
+    }
+  }
+  #attachGroupMessageListener() {
+    if (this.internal.groupMessageHandler !== void 0) {
+      return;
+    }
+    const sessions = this.env.get(import_protocol.SessionManager);
+    const handler = this.callback(this.#onGroupMessage);
+    sessions.onGroupMessage.on(handler);
+    this.internal.groupMessageHandler = handler;
+  }
+  #detachGroupMessageListener() {
+    if (this.internal.groupMessageHandler === void 0) {
+      return;
+    }
+    const sessions = this.env.get(import_protocol.SessionManager);
+    sessions.onGroupMessage.off(this.internal.groupMessageHandler);
+    this.internal.groupMessageHandler = void 0;
+  }
+  #onGroupMessage(info) {
+    if (info.fabric === void 0 || info.fabric.fabricIndex !== this.state.fabricUnderTest) {
+      return;
+    }
+    this.events.groupcastTesting?.emit(
+      {
+        groupId: info.groupId,
+        endpointId: info.endpointId,
+        clusterId: info.clusterId,
+        elementId: info.elementId,
+        accessAllowed: info.accessAllowed,
+        groupcastTestResult: info.result,
+        fabricIndex: info.fabric.fabricIndex
+      },
+      this.context
+    );
+  }
+  /** Sync the FabricGroups instance for a fabric from the current Membership state. */
+  #handleFabricAdded(fabric) {
+    this.#syncFabricGroups(fabric);
+  }
+  #handleFabricDeleted(fabric) {
+    this.#cleanupFabric(fabric.fabricIndex);
+  }
+  #syncFabricGroups(fabric) {
+    const fabricIndex = fabric.fabricIndex;
+    const fabricMemberships = this.state.membership.filter((m) => m.fabricIndex === fabricIndex);
+    for (const m of fabricMemberships) {
+      const policy = m.mcastAddrPolicy === import_groupcast.Groupcast.MulticastAddrPolicy.PerGroup ? "perGroupId" : "ianaAddr";
+      fabric.groups.setGroupMulticastPolicy(m.groupId, policy);
+    }
+    const groupKeyIdMap = /* @__PURE__ */ new Map();
+    for (const m of fabricMemberships) {
+      groupKeyIdMap.set(m.groupId, m.keySetId);
+    }
+    fabric.groups.groupKeyIdMap = groupKeyIdMap;
+    const gkm = this.agent.get(import_group_key_management.GroupKeyManagementServer);
+    const otherFabricsMap = gkm.state.groupKeyMap.filter((e) => e.fabricIndex !== fabricIndex);
+    const mappings = fabricMemberships.filter((m) => m.keySetId !== UNMAPPED_KEYSET_ID).map((m) => ({ groupId: m.groupId, groupKeySetId: m.keySetId, fabricIndex }));
+    gkm.state.groupKeyMap = [...otherFabricsMap, ...mappings];
+    const otherFabricsTable = gkm.state.groupTable.filter((e) => e.fabricIndex !== fabricIndex);
+    const tableEntries = fabricMemberships.filter((m) => m.endpoints !== void 0 && m.endpoints.length > 0).map((m) => ({
+      groupId: m.groupId,
+      endpoints: [...m.endpoints],
+      groupName: "",
+      fabricIndex
+    }));
+    gkm.state.groupTable = [...otherFabricsTable, ...tableEntries];
+    const previousGroupIds = new Set(fabric.groups.endpoints.keys());
+    for (const m of fabricMemberships) {
+      const eps = m.endpoints ?? [];
+      if (eps.length > 0) {
+        fabric.groups.endpoints.set(m.groupId, [...eps]);
+      } else {
+        fabric.groups.endpoints.delete(m.groupId);
+      }
+      previousGroupIds.delete(m.groupId);
+    }
+    for (const gid of previousGroupIds) {
+      fabric.groups.endpoints.delete(gid);
+    }
+  }
+  /**
+   * Mark membership entries as unmapped (KeySetId=UNMAPPED_KEYSET_ID) when their referenced key set no longer exists in GKM.
+   * Runs at startup to reconcile state after potential GKM KeySetRemove operations.
+   */
+  #reconcileUnmappedKeys() {
+    const gkmState = this.endpoint.stateOf(import_group_key_management.GroupKeyManagementServer);
+    const membership = this.state.membership;
+    let dirty = false;
+    for (const m of membership) {
+      if (m.keySetId !== UNMAPPED_KEYSET_ID && m.keySetId !== 0) {
+        const exists = gkmState.groupKeySets.some(
+          (ks) => ks.fabricIndex === m.fabricIndex && ks.groupKeySetId === m.keySetId
+        );
+        if (!exists) {
+          m.keySetId = UNMAPPED_KEYSET_ID;
+          dirty = true;
+        }
+      }
+    }
+    if (dirty) {
+      this.state.membership = [...membership];
+    }
+  }
+  /**
+   * Validate and apply a key set for a group operation.
+   * If `key` is provided, validates and creates a new key set in GKM.
+   * Otherwise, validates that the key set already exists.
+   */
+  async #applyKeySet(fabricIndex, keySetId, key) {
+    const gkm = this.agent.get(import_group_key_management.GroupKeyManagementServer);
+    if (key !== void 0) {
+      if (key.byteLength !== 16) {
+        throw new import_types.StatusResponseError("Key must be exactly 16 bytes", import_types.Status.ConstraintError);
+      }
+      if (gkm.validateKeySetId(fabricIndex, keySetId)) {
+        throw new import_types.StatusResponseError(`KeySet ${keySetId} already exists for fabric`, import_types.Status.AlreadyExists);
+      }
+      await gkm.createKeySetForGroupcast(this.env.get(import_protocol.FabricManager).for(fabricIndex), keySetId, import_general.Bytes.of(key));
+    } else {
+      if (!gkm.validateKeySetId(fabricIndex, keySetId)) {
+        throw new import_types.StatusResponseError(`KeySet ${keySetId} not found for fabric`, import_types.Status.NotFound);
+      }
+    }
+  }
+  /** Recompute auxiliary ACL entries and emit them via the observable so AccessControlServer updates. */
+  #emitAuxAcl() {
+    if (!this.endpoint.behaviors.has(import_access_control.AccessControlServer)) return;
+    const entries = this.state.membership.filter((m) => m.hasAuxiliaryAcl).map((m) => ({
+      privilege: import_access_control2.AccessControl.AccessControlEntryPrivilege.Operate,
+      authMode: import_access_control2.AccessControl.AccessControlEntryAuthMode.Group,
+      subjects: [(0, import_types.NodeId)(BigInt(m.groupId))],
+      targets: m.endpoints?.map((ep) => ({
+        cluster: null,
+        endpoint: ep,
+        deviceType: null
+      })) ?? null,
+      auxiliaryType: import_access_control2.AccessControl.AccessControlAuxiliaryType.Groupcast,
+      fabricIndex: m.fabricIndex
+    }));
+    this.internal.auxAcl.emit(entries, this.context);
+  }
+  /**
+   * Compute UsedMcastAddrCount from a membership array:
+   * - Each PerGroup group contributes 1 unique address
+   * - All IanaAddr groups together share 1 address
+   */
+  #computeUsedMcastAddrCount(membership) {
+    const perGroupCount = membership.filter(
+      (m) => m.mcastAddrPolicy === import_groupcast.Groupcast.MulticastAddrPolicy.PerGroup
+    ).length;
+    const hasIanaAddr = membership.some((m) => m.mcastAddrPolicy === import_groupcast.Groupcast.MulticastAddrPolicy.IanaAddr);
+    return perGroupCount + (hasIanaAddr ? 1 : 0);
+  }
+  /** Recompute and update the UsedMcastAddrCount attribute. */
+  #updateUsedMcastAddrCount() {
+    this.state.usedMcastAddrCount = this.#computeUsedMcastAddrCount(this.state.membership);
+  }
+  /** Remove all state for a departed fabric. */
+  #cleanupFabric(fabricIndex) {
+    this.state.membership = this.state.membership.filter((m) => m.fabricIndex !== fabricIndex);
+    this.#updateUsedMcastAddrCount();
+    this.#emitAuxAcl();
+  }
+  /**
+   * Migrate legacy group data from the GKM groupTable into Groupcast Membership entries.
+   * Only migrates fabrics that have existing GKM groups but no Membership entries yet.
+   * Legacy groups are assigned PerGroup multicast policy for backwards compatibility.
+   */
+  async #migrate() {
+    const fabrics = this.env.get(import_protocol.FabricManager);
+    const gkmState = this.endpoint.stateOf(import_group_key_management.GroupKeyManagementServer);
+    let migrated = false;
+    for (const fabric of fabrics) {
+      const fi = fabric.fabricIndex;
+      const hasMembership = this.state.membership.some((m) => m.fabricIndex === fi);
+      if (hasMembership) continue;
+      const fabricGroups = gkmState.groupTable.filter((g) => g.fabricIndex === fi);
+      if (fabricGroups.length === 0) continue;
+      logger.info(`Migrating ${fabricGroups.length} legacy group(s) for fabric ${fi} to Groupcast`);
+      const newEntries = fabricGroups.map((group) => {
+        const keyMapping = gkmState.groupKeyMap.find((m) => m.fabricIndex === fi && m.groupId === group.groupId);
+        const mcastAddrPolicy = this.features.perGroup ? import_groupcast.Groupcast.MulticastAddrPolicy.PerGroup : import_groupcast.Groupcast.MulticastAddrPolicy.IanaAddr;
+        const lnFields = this.features.listener ? {
+          endpoints: group.endpoints.filter((ep) => ep !== (0, import_types.EndpointNumber)(0)),
+          hasAuxiliaryAcl: false
+        } : {};
+        return {
+          groupId: group.groupId,
+          ...lnFields,
+          keySetId: keyMapping?.groupKeySetId ?? 0,
+          mcastAddrPolicy,
+          fabricIndex: fi
+        };
+      });
+      this.state.membership = [...this.state.membership, ...newEntries];
+      this.#syncFabricGroups(fabric);
+      migrated = true;
+    }
+    if (migrated) {
+      this.#updateUsedMcastAddrCount();
+      logger.info("Groupcast migration complete");
+    }
+  }
+  async [Symbol.asyncDispose]() {
+    this.#testingTimer?.stop();
+    this.#testingTimer = void 0;
+    this.#detachGroupMessageListener();
+    await super[Symbol.asyncDispose]?.();
+  }
+}
+((GroupcastServer2) => {
+  class Internal {
+    /**
+     * Observable that holds all auxiliary ACL entries supplied by this cluster.
+     * AccessControlServer subscribes to this and rebuilds its ACL cache whenever it emits.
+     */
+    auxAcl = (0, import_general.ObservableValue)([]);
+    /** Active subscription handler on SessionManager.groupMessage while fabricUnderTest is set. */
+    groupMessageHandler;
+  }
+  GroupcastServer2.Internal = Internal;
+  class State extends import_GroupcastBehavior.GroupcastBehavior.State {
+    /**
+     * Implementation-defined maximum membership count (min 10 per spec).
+     * Set to 2 * GKM.maxGroupsPerFabric (44) so per-fabric quota floor(44/2)=22 aligns exactly
+     * with GKM's per-fabric cap. Even number avoids spillover semantics.
+     */
+    maxMembershipCount = 44;
+    /** Implementation-defined maximum multicast address count (min 1 per spec). */
+    maxMcastAddrCount = 44;
+  }
+  GroupcastServer2.State = State;
+})(GroupcastServer || (GroupcastServer = {}));
+//# sourceMappingURL=GroupcastServer.js.map

package/dist/cjs/behaviors/groupcast/GroupcastServer.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/behaviors/groupcast/GroupcastServer.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,4BAAoC;AACpC,kCAAyC;AAEzC,qBAAoG;AACpG,mBAA2C;AAC3C,sBAOO;AACP,mBAA0F;AAC1F,IAAAA,yBAAoD;AACpD,uBAA0B;AAC1B,+BAAkC;AAtBlC;AAAA;AAAA;AAAA;AAAA;AAwBA,MAAM,SAAS,sBAAO,IAAI,iBAAiB;AAG3C,MAAM,qBAAqB;AAG3B,MAAM,2BAA2B;AAgB1B,MAAM,wBAAwB,2CAAkB;AAAA;AAAA,EAInD;AAAA,EAES,aAAa;AAElB,QAAI,0BAA0B;AAC1B,YAAM,IAAI;AAAA,QACN;AAAA,MACJ;AAAA,IACJ;AAEA,UAAM,YAAY,KAAK,SAAS;AAChC,SAAK,QAAQ,UAAU,QAAQ,KAAK,OAAO;AAAA,EAC/C;AAAA,EAEA,MAAM,UAAU;AAEZ,SAAK,MAAM,IAAI,yCAAmB,EAAE,uBAAuB,KAAK,SAAS,MAAM;AAE/E,UAAM,UAAU,KAAK,IAAI,IAAI,6BAAa;AAG1C,eAAW,UAAU,SAAS;AAC1B,WAAK,kBAAkB,MAAM;AAAA,IACjC;AAGA,UAAM,KAAK,SAAS;AAGpB,SAAK,uBAAuB;AAG5B,SAAK,0BAA0B;AAC/B,SAAK,YAAY;AAGjB,SAAK,QAAQ,QAAQ,OAAO,OAAO,KAAK,kBAAkB;AAC1D,SAAK,QAAQ,QAAQ,OAAO,SAAS,KAAK,oBAAoB;AAI9D,UAAM,YAAY,KAAK,SAAS,SAAS,oDAAwB;AACjE,SAAK,QAAQ,UAAU,qBAAqB,KAAK,sBAAsB;AAIvE,SAAK,QAAQ,KAAK,OAAO,yBAAyB,KAAK,6BAA6B;AACpF,QAAI,KAAK,MAAM,oBAAoB,yBAAY,WAAW;AACtD,WAAK,4BAA4B;AAAA,IACrC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB;AAEZ,UAAM,UAAU,KAAK;AACrB,UAAM,WAAmC;AAAA,MACrC,MAAM,2BAAc;AAAA,MACpB,UAAU,KAAK,SAAS;AAAA,MACxB,SAAS,2CAAkB,QAAQ;AAAA,MACnC,cAAc,QAAQ;AAAA,IAC1B;AACA,QAAI,QAAQ,YAAY,yBAAY,YAAY,QAAQ,MAAM,8BAAc,UAAU,SAAS;AAC3F,YAAM,IAAI;AAAA,QACN;AAAA,QACA,oBAAO;AAAA,MACX;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAe,UAAU,SAAqC;AAC1D,2CAAkB,KAAK,OAAO;AAC9B,UAAM,cAAc,KAAK,QAAQ,QAAQ,iBAAiB;AAC1D,UAAM,EAAE,SAAS,WAAW,UAAU,KAAK,iBAAiB,kBAAkB,gBAAgB,IAAI;AAGlG,QAAI,UAAU,KAAK,UAAU,OAAQ;AACjC,YAAM,IAAI,iCAAoB,oBAAoB,oBAAO,eAAe;AAAA,IAC5E;AAGA,QAAI,QAAQ,UAAa,oBAAoB,QAAW;AACpD,WAAK,cAAc;AAAA,IACvB;AAGA,eAAW,MAAM,WAAW;AACxB,UAAI,OAAO,KAAK,KAAK,OAAQ;AACzB,cAAM,IAAI,iCAAoB,YAAY,EAAE,eAAe,oBAAO,mBAAmB;AAAA,MACzF;AAAA,IACJ;AAGA,QAAI,CAAC,KAAK,SAAS,UAAU,UAAU,WAAW,GAAG;AACjD,YAAM,IAAI,iCAAoB,+CAA+C,oBAAO,eAAe;AAAA,IACvG;AAGA,UAAM,SAAS,mBAAmB,2BAAU,oBAAoB;AAChE,QAAI,WAAW,2BAAU,oBAAoB,YAAY,CAAC,KAAK,SAAS,UAAU;AAC9E,YAAM,IAAI;AAAA,QACN;AAAA,QACA,oBAAO;AAAA,MACX;AAAA,IACJ;AAEA,UAAM,KAAK,aAAa,aAAa,UAAU,GAAG;AAElD,UAAM,iBAAa,yBAAS,KAAK,MAAM,UAAU;AACjD,UAAM,cAAc,WAAW,UAAU,OAAK,EAAE,YAAY,WAAW,EAAE,gBAAgB,WAAW;AAEpG,QAAI,eAAe,GAAG;AAElB,YAAM,WAAW,WAAW,WAAW;AACvC,YAAM,WAAW,KAAK,SAAS,WACzB;AAAA,QACI,WAAW,mBACL,YACA,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAI,SAAS,aAAa,CAAC,GAAI,GAAG,SAAS,CAAC,CAAC;AAAA,QAChE,iBAAiB,mBAAmB,SAAS;AAAA,MACjD,IACA,CAAC;AACP,iBAAW,WAAW,IAAI;AAAA,QACtB,GAAG;AAAA,QACH,GAAG;AAAA,QACH;AAAA,QACA,iBAAiB;AAAA,MACrB;AAAA,IACJ,OAAO;AAEH,YAAM,oBAAoB,WAAW,OAAO,OAAK,EAAE,gBAAgB,WAAW;AAC9E,YAAM,iBAAiB,KAAK,MAAM,KAAK,MAAM,qBAAqB,CAAC;AACnE,UAAI,kBAAkB,UAAU,gBAAgB;AAC5C,cAAM,IAAI,iCAAoB,uCAAuC,oBAAO,iBAAiB;AAAA,MACjG;AACA,UAAI,WAAW,UAAU,KAAK,MAAM,oBAAoB;AACpD,cAAM,IAAI,iCAAoB,kCAAkC,oBAAO,iBAAiB;AAAA,MAC5F;AAGA,UAAI,WAAW,2BAAU,oBAAoB,UAAU;AACnD,cAAM,cAAc,KAAK,2BAA2B,UAAU;AAC9D,YAAI,eAAe,KAAK,MAAM,mBAAmB;AAC7C,gBAAM,IAAI,iCAAoB,mCAAmC,oBAAO,iBAAiB;AAAA,QAC7F;AAAA,MACJ,WAAW,WAAW,2BAAU,oBAAoB,UAAU;AAE1D,cAAM,cAAc,WAAW,KAAK,OAAK,EAAE,oBAAoB,2BAAU,oBAAoB,QAAQ;AACrG,YAAI,CAAC,aAAa;AACd,gBAAM,cAAc,KAAK,2BAA2B,UAAU;AAC9D,cAAI,eAAe,KAAK,MAAM,mBAAmB;AAC7C,kBAAM,IAAI,iCAAoB,mCAAmC,oBAAO,iBAAiB;AAAA,UAC7F;AAAA,QACJ;AAAA,MACJ;AAEA,YAAM,WAAW,KAAK,SAAS,WAAW,EAAE,WAAW,iBAAiB,mBAAmB,MAAM,IAAI,CAAC;AACtG,iBAAW,KAAK;AAAA,QACZ;AAAA,QACA,GAAG;AAAA,QACH;AAAA,QACA,iBAAiB;AAAA,QACjB;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,SAAK,MAAM,aAAa;AACxB,SAAK,0BAA0B;AAC/B,SAAK,kBAAkB,KAAK,IAAI,IAAI,6BAAa,EAAE,IAAI,WAAW,CAAC;AACnE,SAAK,YAAY;AAAA,EAMrB;AAAA,EAES,WAAW,SAAoE;AACpF,2CAAkB,KAAK,OAAO;AAC9B,UAAM,cAAc,KAAK,QAAQ,QAAQ,iBAAiB;AAC1D,UAAM,EAAE,SAAS,WAAW,mBAAmB,IAAI;AAGnD,QAAI,YAAY,qBAAQ,aAAa;AACjC,YAAM,oBAAoB,KAAK,MAAM,WAAW,OAAO,OAAK,EAAE,gBAAgB,WAAW;AACzF,UAAI,kBAAkB,WAAW,GAAG;AAChC,cAAM,IAAI,iCAAoB,sBAAsB,oBAAO,QAAQ;AAAA,MACvE;AACA,WAAK,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,OAAK,EAAE,gBAAgB,WAAW;AACvF,WAAK,0BAA0B;AAC/B,WAAK,kBAAkB,KAAK,IAAI,IAAI,6BAAa,EAAE,IAAI,WAAW,CAAC;AACnE,WAAK,YAAY;AACjB,aAAO,EAAE,SAAS,qBAAQ,aAAa,WAAW,CAAC,EAAE;AAAA,IACzD;AAEA,UAAM,iBAAa,yBAAS,KAAK,MAAM,UAAU;AACjD,UAAM,WAAW,WAAW,UAAU,OAAK,EAAE,YAAY,WAAW,EAAE,gBAAgB,WAAW;AAEjG,QAAI,WAAW,GAAG;AACd,YAAM,IAAI,iCAAoB,SAAS,OAAO,cAAc,oBAAO,QAAQ;AAAA,IAC/E;AAEA,UAAM,QAAQ,WAAW,QAAQ;AACjC,QAAI;AAEJ,QAAI,CAAC,sBAAsB,mBAAmB,WAAW,GAAG;AAExD,yBAAmB,MAAM,aAAa,CAAC;AACvC,iBAAW,OAAO,UAAU,CAAC;AAAA,IACjC,OAAO;AACH,YAAM,mBAAmB,MAAM,aAAa,CAAC;AAC7C,yBAAmB,mBAAmB,OAAO,QAAM,iBAAiB,SAAS,EAAE,CAAC;AAChF,YAAM,qBAAqB,iBAAiB,OAAO,QAAM,CAAC,mBAAmB,SAAS,EAAE,CAAC;AAEzF,UAAI,mBAAmB,WAAW,GAAG;AACjC,YAAI,KAAK,SAAS,QAAQ;AAEtB,gBAAM,EAAE,WAAW,OAAO,GAAG,sBAAsB,IAAI;AACvD,qBAAW,QAAQ,IAAI,KAAK,SAAS,WAAW,EAAE,GAAG,OAAO,WAAW,CAAC,EAAE,IAAI;AAAA,QAClF,OAAO;AAEH,qBAAW,OAAO,UAAU,CAAC;AAAA,QACjC;AAAA,MACJ,OAAO;AACH,mBAAW,QAAQ,IAAI,EAAE,GAAG,OAAO,WAAW,mBAAmB;AAAA,MACrE;AAAA,IACJ;AAEA,SAAK,MAAM,aAAa;AACxB,SAAK,0BAA0B;AAC/B,SAAK,kBAAkB,KAAK,IAAI,IAAI,6BAAa,EAAE,IAAI,WAAW,CAAC;AACnE,SAAK,YAAY;AAEjB,WAAO,EAAE,SAAS,WAAW,iBAAiB;AAAA,EAClD;AAAA,EAEA,MAAe,eAAe,SAA0C;AACpE,2CAAkB,KAAK,OAAO;AAC9B,UAAM,cAAc,KAAK,QAAQ,QAAQ,iBAAiB;AAC1D,UAAM,EAAE,SAAS,UAAU,IAAI,IAAI;AAGnC,QAAI,QAAQ,QAAW;AACnB,WAAK,cAAc;AAAA,IACvB;AAEA,UAAM,iBAAa,yBAAS,KAAK,MAAM,UAAU;AACjD,UAAM,WAAW,WAAW,UAAU,OAAK,EAAE,YAAY,WAAW,EAAE,gBAAgB,WAAW;AAEjG,QAAI,WAAW,GAAG;AACd,YAAM,IAAI,iCAAoB,SAAS,OAAO,cAAc,oBAAO,QAAQ;AAAA,IAC/E;AAEA,UAAM,KAAK,aAAa,aAAa,UAAU,GAAG;AAElD,eAAW,QAAQ,IAAI,EAAE,GAAG,WAAW,QAAQ,GAAG,SAAS;AAC3D,SAAK,MAAM,aAAa;AACxB,SAAK,kBAAkB,KAAK,IAAI,IAAI,6BAAa,EAAE,IAAI,WAAW,CAAC;AAAA,EACvE;AAAA,EAEA,sBAAsB,SAAiD;AACnE,2CAAkB,KAAK,OAAO;AAC9B,UAAM,cAAc,KAAK,QAAQ,QAAQ,iBAAiB;AAC1D,UAAM,EAAE,SAAS,gBAAgB,IAAI;AAErC,UAAM,iBAAa,yBAAS,KAAK,MAAM,UAAU;AACjD,UAAM,WAAW,WAAW,UAAU,OAAK,EAAE,YAAY,WAAW,EAAE,gBAAgB,WAAW;AAEjG,QAAI,WAAW,GAAG;AACd,YAAM,IAAI,iCAAoB,SAAS,OAAO,cAAc,oBAAO,QAAQ;AAAA,IAC/E;AAEA,eAAW,QAAQ,IAAI,EAAE,GAAG,WAAW,QAAQ,GAAG,iBAAiB,gBAAgB;AACnF,SAAK,MAAM,aAAa;AACxB,SAAK,YAAY;AAAA,EACrB;AAAA,EAES,iBAAiB,SAA4C;AAClE,2CAAkB,KAAK,OAAO;AAC9B,UAAM,cAAc,KAAK,QAAQ,QAAQ,iBAAiB;AAC1D,UAAM,EAAE,eAAe,gBAAgB,IAAI;AAG3C,QAAI,KAAK,eAAe;AACpB,WAAK,cAAc,KAAK;AACxB,WAAK,gBAAgB;AAAA,IACzB;AAEA,QAAI,kBAAkB,2BAAU,iBAAiB,gBAAgB;AAC7D,WAAK,MAAM,kBAAkB,yBAAY;AACzC;AAAA,IACJ;AAGA,SAAK,MAAM,kBAAkB;AAG7B,QAAI,oBAAoB,UAAa,kBAAkB,GAAG;AACtD,WAAK,gBAAgB,oBAAK;AAAA,QACtB,qBAAqB,WAAW;AAAA,YAChC,wBAAQ,eAAe;AAAA,QACvB,KAAK,SAAS,KAAK,oBAAoB;AAAA,MAC3C;AACA,WAAK,cAAc,MAAM;AAAA,IAC7B;AAAA,EACJ;AAAA,EAEA,uBAAuB;AACnB,SAAK,gBAAgB;AACrB,SAAK,MAAM,kBAAkB,yBAAY;AAAA,EAC7C;AAAA,EAEA,8BAA8B,OAAoB;AAC9C,QAAI,UAAU,yBAAY,WAAW;AACjC,WAAK,4BAA4B;AAAA,IACrC,OAAO;AACH,WAAK,4BAA4B;AAAA,IACrC;AAAA,EACJ;AAAA,EAEA,8BAA8B;AAC1B,QAAI,KAAK,SAAS,wBAAwB,QAAW;AACjD;AAAA,IACJ;AACA,UAAM,WAAW,KAAK,IAAI,IAAI,8BAAc;AAG5C,UAAM,UAAU,KAAK,SAAS,KAAK,eAAe;AAClD,aAAS,eAAe,GAAG,OAAO;AAClC,SAAK,SAAS,sBAAsB;AAAA,EACxC;AAAA,EAEA,8BAA8B;AAC1B,QAAI,KAAK,SAAS,wBAAwB,QAAW;AACjD;AAAA,IACJ;AACA,UAAM,WAAW,KAAK,IAAI,IAAI,8BAAc;AAC5C,aAAS,eAAe,IAAI,KAAK,SAAS,mBAAmB;AAC7D,SAAK,SAAS,sBAAsB;AAAA,EACxC;AAAA,EAEA,gBAAgB,MAA6B;AAEzC,QAAI,KAAK,WAAW,UAAa,KAAK,OAAO,gBAAgB,KAAK,MAAM,iBAAiB;AACrF;AAAA,IACJ;AACA,SAAK,OAAO,kBAAkB;AAAA,MAC1B;AAAA,QACI,SAAS,KAAK;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,WAAW,KAAK;AAAA,QAChB,WAAW,KAAK;AAAA,QAChB,eAAe,KAAK;AAAA,QACpB,qBAAqB,KAAK;AAAA,QAC1B,aAAa,KAAK,OAAO;AAAA,MAC7B;AAAA,MACA,KAAK;AAAA,IACT;AAAA,EACJ;AAAA;AAAA,EAGA,mBAAmB,QAAgB;AAC/B,SAAK,kBAAkB,MAAM;AAAA,EACjC;AAAA,EAEA,qBAAqB,QAAgB;AACjC,SAAK,eAAe,OAAO,WAAW;AAAA,EAC1C;AAAA,EAEA,kBAAkB,QAAgB;AAC9B,UAAM,cAAc,OAAO;AAC3B,UAAM,oBAAoB,KAAK,MAAM,WAAW,OAAO,OAAK,EAAE,gBAAgB,WAAW;AAKzF,eAAW,KAAK,mBAAmB;AAC/B,YAAM,SAAS,EAAE,oBAAoB,2BAAU,oBAAoB,WAAW,eAAe;AAC7F,aAAO,OAAO,wBAAwB,EAAE,SAAS,MAAM;AAAA,IAC3D;AAGA,UAAM,gBAAgB,oBAAI,IAAqB;AAC/C,eAAW,KAAK,mBAAmB;AAC/B,oBAAc,IAAI,EAAE,SAAS,EAAE,QAAQ;AAAA,IAC3C;AACA,WAAO,OAAO,gBAAgB;AAM9B,UAAM,MAAM,KAAK,MAAM,IAAI,oDAAwB;AACnD,UAAM,kBAAkB,IAAI,MAAM,YAAY,OAAO,OAAK,EAAE,gBAAgB,WAAW;AACvF,UAAM,WAAW,kBACZ,OAAO,OAAK,EAAE,aAAa,kBAAkB,EAC7C,IAAI,QAAM,EAAE,SAAS,EAAE,SAAS,eAAe,EAAE,UAAU,YAAY,EAAE;AAC9E,QAAI,MAAM,cAAc,CAAC,GAAG,iBAAiB,GAAG,QAAQ;AAIxD,UAAM,oBAAoB,IAAI,MAAM,WAAW,OAAO,OAAK,EAAE,gBAAgB,WAAW;AACxF,UAAM,eAAe,kBAChB,OAAO,OAAK,EAAE,cAAc,UAAa,EAAE,UAAU,SAAS,CAAC,EAC/D,IAAI,QAAM;AAAA,MACP,SAAS,EAAE;AAAA,MACX,WAAW,CAAC,GAAG,EAAE,SAAU;AAAA,MAC3B,WAAW;AAAA,MACX;AAAA,IACJ,EAAE;AACN,QAAI,MAAM,aAAa,CAAC,GAAG,mBAAmB,GAAG,YAAY;AAE7D,UAAM,mBAAmB,IAAI,IAAI,OAAO,OAAO,UAAU,KAAK,CAAC;AAC/D,eAAW,KAAK,mBAAmB;AAC/B,YAAM,MAAM,EAAE,aAAa,CAAC;AAC5B,UAAI,IAAI,SAAS,GAAG;AAChB,eAAO,OAAO,UAAU,IAAI,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC;AAAA,MACnD,OAAO;AACH,eAAO,OAAO,UAAU,OAAO,EAAE,OAAO;AAAA,MAC5C;AACA,uBAAiB,OAAO,EAAE,OAAO;AAAA,IACrC;AACA,eAAW,OAAO,kBAAkB;AAChC,aAAO,OAAO,UAAU,OAAO,GAAG;AAAA,IACtC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,yBAAyB;AACrB,UAAM,WAAW,KAAK,SAAS,QAAQ,oDAAwB;AAC/D,UAAM,aAAa,KAAK,MAAM;AAC9B,QAAI,QAAQ;AAEZ,eAAW,KAAK,YAAY;AACxB,UAAI,EAAE,aAAa,sBAAsB,EAAE,aAAa,GAAG;AACvD,cAAM,SAAS,SAAS,aAAa;AAAA,UACjC,QAAM,GAAG,gBAAgB,EAAE,eAAe,GAAG,kBAAkB,EAAE;AAAA,QACrE;AACA,YAAI,CAAC,QAAQ;AACT,YAAE,WAAW;AACb,kBAAQ;AAAA,QACZ;AAAA,MACJ;AAAA,IACJ;AAEA,QAAI,OAAO;AACP,WAAK,MAAM,aAAa,CAAC,GAAG,UAAU;AAAA,IAC1C;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,aAA0B,UAAkB,KAAwB;AACnF,UAAM,MAAM,KAAK,MAAM,IAAI,oDAAwB;AACnD,QAAI,QAAQ,QAAW;AACnB,UAAI,IAAI,eAAe,IAAI;AACvB,cAAM,IAAI,iCAAoB,gCAAgC,oBAAO,eAAe;AAAA,MACxF;AACA,UAAI,IAAI,iBAAiB,aAAa,QAAQ,GAAG;AAC7C,cAAM,IAAI,iCAAoB,UAAU,QAAQ,8BAA8B,oBAAO,aAAa;AAAA,MACtG;AACA,YAAM,IAAI,yBAAyB,KAAK,IAAI,IAAI,6BAAa,EAAE,IAAI,WAAW,GAAG,UAAU,qBAAM,GAAG,GAAG,CAAC;AAAA,IAC5G,OAAO;AACH,UAAI,CAAC,IAAI,iBAAiB,aAAa,QAAQ,GAAG;AAC9C,cAAM,IAAI,iCAAoB,UAAU,QAAQ,yBAAyB,oBAAO,QAAQ;AAAA,MAC5F;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA,EAGA,cAAc;AACV,QAAI,CAAC,KAAK,SAAS,UAAU,IAAI,yCAAmB,EAAG;AACvD,UAAM,UAAmD,KAAK,MAAM,WAC/D,OAAO,OAAK,EAAE,eAAe,EAC7B,IAAI,QAAM;AAAA,MACP,WAAW,uBAAAC,cAAmB,4BAA4B;AAAA,MAC1D,UAAU,uBAAAA,cAAmB,2BAA2B;AAAA,MACxD,UAAU,KAAC,qBAAO,OAAO,EAAE,OAAO,CAAC,CAAC;AAAA,MACpC,SACI,EAAE,WAAW,IAAI,SAAO;AAAA,QACpB,SAAS;AAAA,QACT,UAAU;AAAA,QACV,YAAY;AAAA,MAChB,EAAE,KAAK;AAAA,MACX,eAAe,uBAAAA,cAAmB,2BAA2B;AAAA,MAC7D,aAAa,EAAE;AAAA,IACnB,EAAE;AAEN,SAAK,SAAS,OAAO,KAAK,SAAS,KAAK,OAAO;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,2BAA2B,YAA4C;AACnE,UAAM,gBAAgB,WAAW;AAAA,MAC7B,OAAK,EAAE,oBAAoB,2BAAU,oBAAoB;AAAA,IAC7D,EAAE;AACF,UAAM,cAAc,WAAW,KAAK,OAAK,EAAE,oBAAoB,2BAAU,oBAAoB,QAAQ;AACrG,WAAO,iBAAiB,cAAc,IAAI;AAAA,EAC9C;AAAA;AAAA,EAGA,4BAA4B;AACxB,SAAK,MAAM,qBAAqB,KAAK,2BAA2B,KAAK,MAAM,UAAU;AAAA,EACzF;AAAA;AAAA,EAGA,eAAe,aAA0B;AACrC,SAAK,MAAM,aAAa,KAAK,MAAM,WAAW,OAAO,OAAK,EAAE,gBAAgB,WAAW;AACvF,SAAK,0BAA0B;AAC/B,SAAK,YAAY;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,WAAW;AACb,UAAM,UAAU,KAAK,IAAI,IAAI,6BAAa;AAC1C,UAAM,WAAW,KAAK,SAAS,QAAQ,oDAAwB;AAC/D,QAAI,WAAW;AAEf,eAAW,UAAU,SAAS;AAC1B,YAAM,KAAK,OAAO;AAClB,YAAM,gBAAgB,KAAK,MAAM,WAAW,KAAK,OAAK,EAAE,gBAAgB,EAAE;AAC1E,UAAI,cAAe;AAEnB,YAAM,eAAe,SAAS,WAAW,OAAO,OAAK,EAAE,gBAAgB,EAAE;AACzE,UAAI,aAAa,WAAW,EAAG;AAE/B,aAAO,KAAK,aAAa,aAAa,MAAM,+BAA+B,EAAE,eAAe;AAE5F,YAAM,aAAqC,aAAa,IAAI,WAAS;AACjE,cAAM,aAAa,SAAS,YAAY,KAAK,OAAK,EAAE,gBAAgB,MAAM,EAAE,YAAY,MAAM,OAAO;AAErG,cAAM,kBAAkB,KAAK,SAAS,WAChC,2BAAU,oBAAoB,WAC9B,2BAAU,oBAAoB;AACpC,cAAM,WAAW,KAAK,SAAS,WACzB;AAAA,UACI,WAAW,MAAM,UAAU,OAAO,QAAM,WAAO,6BAAe,CAAC,CAAC;AAAA,UAChE,iBAAiB;AAAA,QACrB,IACA,CAAC;AACP,eAAO;AAAA,UACH,SAAS,MAAM;AAAA,UACf,GAAG;AAAA,UACH,UAAU,YAAY,iBAAiB;AAAA,UACvC;AAAA,UACA,aAAa;AAAA,QACjB;AAAA,MACJ,CAAC;AAED,WAAK,MAAM,aAAa,CAAC,GAAG,KAAK,MAAM,YAAY,GAAG,UAAU;AAChE,WAAK,kBAAkB,MAAM;AAK7B,iBAAW;AAAA,IACf;AAEA,QAAI,UAAU;AACV,WAAK,0BAA0B;AAC/B,aAAO,KAAK,8BAA8B;AAAA,IAC9C;AAAA,EACJ;AAAA,EAEA,OAAgB,OAAO,YAAY,IAAI;AACnC,SAAK,eAAe,KAAK;AACzB,SAAK,gBAAgB;AACrB,SAAK,4BAA4B;AACjC,UAAM,MAAM,OAAO,YAAY,IAAI;AAAA,EACvC;AACJ;AAAA,CAEO,CAAUC,qBAAV;AAAA,EAEI,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKlB,aAA+C,gCAAgB,CAAC,CAAC;AAAA;AAAA,IAGjE;AAAA,EACJ;AATO,EAAAA,iBAAM;AAAA,EAYN,MAAM,cAAc,2CAAkB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMtC,qBAAqB;AAAA;AAAA,IAErB,oBAAoB;AAAA,EACjC;AATO,EAAAA,iBAAM;AAAA,GAdA;",
+  "names": ["import_access_control", "AccessControlTypes", "GroupcastServer"]
+}

package/dist/cjs/behaviors/groupcast/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/*** THIS FILE WILL BE REGENERATED IF YOU DO NOT REMOVE THIS MESSAGE ***/
+export * from "./GroupcastBehavior.js";
+export * from "./GroupcastServer.js";
+export * from "./GroupcastClient.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/behaviors/groupcast/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/behaviors/groupcast/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,yEAAyE;AAEzE,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC"}

package/dist/cjs/behaviors/groupcast/index.js

@@ -0,0 +1,26 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var groupcast_exports = {};
+module.exports = __toCommonJS(groupcast_exports);
+__reExport(groupcast_exports, require("./GroupcastBehavior.js"), module.exports);
+__reExport(groupcast_exports, require("./GroupcastServer.js"), module.exports);
+__reExport(groupcast_exports, require("./GroupcastClient.js"), module.exports);
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+//# sourceMappingURL=index.js.map

package/dist/cjs/behaviors/groupcast/index.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/behaviors/groupcast/index.ts"],
+  "mappings": ";;;;;;;;;;;;;;;AAAA;AAAA;AAQA,8BAAc,mCARd;AASA,8BAAc,iCATd;AAUA,8BAAc,iCAVd;AAAA;AAAA;AAAA;AAAA;AAAA;",
+  "names": []
+}

package/dist/cjs/behaviors/groups/GroupsServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GroupsServer.d.ts","sourceRoot":"","sources":["../../../../src/behaviors/groups/GroupsServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAsCvD,QAAA,MAAM,UAAU;;;;yEAA2E,CAAC;AAE5F;;GAEG;AACH,qBAAa,YAAa,SAAQ,UAAU;;IAC/B,UAAU,SAElB;IAuBc,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CA4BxG;IAEQ,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,iBAAiB,CAiBjF;IAEc,kBAAkB,CAAC,EAC9B,SAAS,EACZ,EAAE,MAAM,CAAC,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAkB/E;IAEc,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAwBtG;IAEc,eAAe,kBAa7B;IAEc,qBAAqB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,4BAA4B,iBAQ/F;CACJ"}
+{"version":3,"file":"GroupsServer.d.ts","sourceRoot":"","sources":["../../../../src/behaviors/groups/GroupsServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAsCvD,QAAA,MAAM,UAAU;;;;yEAA2E,CAAC;AAE5F;;GAEG;AACH,qBAAa,YAAa,SAAQ,UAAU;;IAC/B,UAAU,SAElB;IAiCc,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAgCxG;IAEQ,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,iBAAiB,CAqBjF;IAEc,kBAAkB,CAAC,EAC9B,SAAS,EACZ,EAAE,MAAM,CAAC,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAuB/E;IAEc,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAwBtG;IAEc,eAAe,kBAa7B;IAEc,qBAAqB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,4BAA4B,iBAY/F;CACJ"}