@matter/protocol 0.17.0-alpha.0-20260507-059f7763b → 0.17.0-alpha.0-20260508-29ff5ae9e

package/dist/esm/securechannel/SecureChannelMessenger.js

@@ -1,190 +0,0 @@
-/**
- * @license
- * Copyright 2022-2026 Matter.js Authors
- * SPDX-License-Identifier: Apache-2.0
- */
-import { TransientPeerCommunicationError } from "#peer/PeerCommunicationError.js";
-import {
-  DataReader,
-  DataWriter,
-  Diagnostic,
-  Endian,
-  Millis,
-  Seconds,
-  UnexpectedDataError
-} from "@matter/general";
-import { GeneralStatusCode, SecureChannelStatusCode, SecureMessageType } from "@matter/types";
-import { SecureChannelStatusMessage } from "./SecureChannelStatusMessageSchema.js";
-class ChannelStatusResponseError extends TransientPeerCommunicationError {
-  constructor(message, generalStatusCode, protocolStatusCode, vendorId, protocolData) {
-    super(
-      `(${GeneralStatusCode[generalStatusCode]} (${generalStatusCode}) / ${SecureChannelStatusCode[protocolStatusCode]} (${protocolStatusCode})) ${message}`
-    );
-    this.generalStatusCode = generalStatusCode;
-    this.protocolStatusCode = protocolStatusCode;
-    this.vendorId = vendorId;
-    this.protocolData = protocolData;
-    if (generalStatusCode === GeneralStatusCode.Busy && protocolStatusCode === SecureChannelStatusCode.Busy && protocolData?.byteLength === 2) {
-      this.busyDelay = Millis(new DataReader(protocolData, Endian.Little).readUInt16());
-    }
-  }
-  generalStatusCode;
-  protocolStatusCode;
-  vendorId;
-  protocolData;
-  busyDelay;
-}
-const EXPECTED_CRYPTO_PROCESSING_TIME = Seconds(35);
-const DEFAULT_NORMAL_PROCESSING_TIME = Seconds(2);
-class SecureChannelMessenger {
-  constructor(exchange, defaultExpectedProcessingTime = EXPECTED_CRYPTO_PROCESSING_TIME) {
-    this.exchange = exchange;
-    this.#defaultExpectedProcessingTime = defaultExpectedProcessingTime;
-  }
-  exchange;
-  #defaultExpectedProcessingTime;
-  get channel() {
-    return this.exchange.channel;
-  }
-  get via() {
-    return this.exchange.via;
-  }
-  /**
-   * Waits for the next message and returns it.
-   *
-   * {@link expectedProcessingTime} defaults to {@link EXPECTED_CRYPTO_PROCESSING_TIME}.
-   */
-  async nextMessage({
-    type,
-    expectedProcessingTime = this.#defaultExpectedProcessingTime,
-    description,
-    abort
-  } = {}) {
-    const message = await this.exchange.nextMessage({ expectedProcessingTime, abort });
-    const messageType = message.payloadHeader.messageType;
-    if (type !== void 0 && description === void 0) {
-      description = SecureMessageType[type];
-    }
-    this.throwIfErrorStatusReport(message, description);
-    if (type !== void 0 && messageType !== type)
-      throw new UnexpectedDataError(
-        `Received unexpected message type: ${messageType}, expected: ${type} (${description})`
-      );
-    return message;
-  }
-  /**
-   * Waits for the next message and decodes it.
-   *
-   * When no expectedProcessingTimeMs is provided, the default value of EXPECTED_CRYPTO_PROCESSING_TIME is used.
-   */
-  async nextMessageDecoded(schema, options) {
-    return schema.decode((await this.nextMessage(options)).payload);
-  }
-  /**
-   * Waits for the next message and returns it.
-   *
-   * When no expectedProcessingTimeMs is provided, the default value of EXPECTED_CRYPTO_PROCESSING_TIME is used.
-   */
-  async waitForSuccess(options) {
-    await this.nextMessage({
-      ...options,
-      type: SecureMessageType.StatusReport
-    });
-  }
-  /**
-   * Sends a message of the given type with the given payload.
-   *
-   * If no ExchangeSendOptions are provided, the expectedProcessingTimeMs will be set to
-   * EXPECTED_CRYPTO_PROCESSING_TIME.
-   */
-  async send(message, type, schema, options) {
-    options = {
-      ...options,
-      expectedProcessingTime: options?.expectedProcessingTime ?? this.#defaultExpectedProcessingTime
-    };
-    const payload = schema.encode(message);
-    await this.exchange.send(type, payload, options);
-    return payload;
-  }
-  sendError(code, abort) {
-    return this.#sendStatusReport(GeneralStatusCode.Failure, code, abort);
-  }
-  sendSuccess(abort) {
-    return this.#sendStatusReport(GeneralStatusCode.Success, SecureChannelStatusCode.Success, abort);
-  }
-  sendBusy(minimumRetryInterval, abort) {
-    if (minimumRetryInterval <= 0) {
-      throw new Error("Busy minimum retry interval must be greater than 0ms");
-    }
-    const writer = new DataWriter(Endian.Little);
-    writer.writeUInt16(Math.min(minimumRetryInterval, 65535));
-    return this.#sendStatusReport(
-      GeneralStatusCode.Busy,
-      SecureChannelStatusCode.Busy,
-      abort,
-      void 0,
-      writer.toByteArray()
-    );
-  }
-  sendCloseSession(abort) {
-    return this.#sendStatusReport(GeneralStatusCode.Success, SecureChannelStatusCode.CloseSession, abort, false);
-  }
-  get channelName() {
-    return this.exchange.channel.transportChannel.name;
-  }
-  [Symbol.asyncDispose]() {
-    return this.close();
-  }
-  async close() {
-    await this.exchange.close();
-  }
-  async #sendStatusReport(generalStatus, protocolStatus, abort, requiresAck, protocolData) {
-    await this.exchange.send(
-      SecureMessageType.StatusReport,
-      SecureChannelStatusMessage.encode({
-        generalStatus,
-        protocolStatus,
-        protocolData
-      }),
-      {
-        requiresAck,
-        logContext: {
-          generalStatus: GeneralStatusCode[generalStatus] ?? Diagnostic.hex(generalStatus),
-          protocolStatus: SecureChannelStatusCode[protocolStatus] ?? Diagnostic.hex(protocolStatus)
-        },
-        abort
-      }
-    );
-  }
-  throwIfErrorStatusReport(message, logHint) {
-    const {
-      payloadHeader: { messageType },
-      payload
-    } = message;
-    if (messageType !== SecureMessageType.StatusReport) return;
-    const { generalStatus, protocolId, protocolStatus, vendorId, protocolData } = SecureChannelStatusMessage.decode(payload);
-    if (generalStatus !== GeneralStatusCode.Success) {
-      throw new ChannelStatusResponseError(
-        `Received general error status for protocol ${protocolId}${logHint ? ` (${logHint})` : ""}`,
-        generalStatus,
-        protocolStatus,
-        vendorId,
-        protocolData
-      );
-    }
-    if (protocolStatus !== SecureChannelStatusCode.Success) {
-      throw new ChannelStatusResponseError(
-        `Received general success status, but protocol status is not Success${logHint ? ` (${logHint})` : ""}`,
-        generalStatus,
-        protocolStatus
-      );
-    }
-  }
-}
-export {
-  ChannelStatusResponseError,
-  DEFAULT_NORMAL_PROCESSING_TIME,
-  EXPECTED_CRYPTO_PROCESSING_TIME,
-  SecureChannelMessenger
-};
-//# sourceMappingURL=SecureChannelMessenger.js.map

package/dist/esm/securechannel/SecureChannelMessenger.js.map

@@ -1,6 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/securechannel/SecureChannelMessenger.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,uCAAuC;AAChD;AAAA,EAEI;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,mBAAmB,yBAAyB,yBAA8C;AAGnG,SAAS,kCAAkC;AAGpC,MAAM,mCAAmC,gCAAgC;AAAA,EAErE,YACH,SACgB,mBACA,oBACA,UACA,cAClB;AACE;AAAA,MACI,IAAI,kBAAkB,iBAAiB,CAAC,KAAK,iBAAiB,OAAO,wBAAwB,kBAAkB,CAAC,KAAK,kBAAkB,MAAM,OAAO;AAAA,IACxJ;AAPgB;AACA;AACA;AACA;AAKhB,QACI,sBAAsB,kBAAkB,QACxC,uBAAuB,wBAAwB,QAC/C,cAAc,eAAe,GAC/B;AACE,WAAK,YAAY,OAAO,IAAI,WAAW,cAAc,OAAO,MAAM,EAAE,WAAW,CAAC;AAAA,IACpF;AAAA,EACJ;AAAA,EAfoB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EANb;AAmBX;AAGO,MAAM,kCAAkC,QAAQ,EAAE;AAGlD,MAAM,iCAAiC,QAAQ,CAAC;AAEhD,MAAM,uBAAuB;AAAA,EAGhC,YACa,UACT,gCAAgC,iCAClC;AAFW;AAGT,SAAK,iCAAiC;AAAA,EAC1C;AAAA,EAJa;AAAA,EAHb;AAAA,EASA,IAAI,UAAU;AACV,WAAO,KAAK,SAAS;AAAA,EACzB;AAAA,EAEA,IAAI,MAAM;AACN,WAAO,KAAK,SAAS;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY;AAAA,IACd;AAAA,IACA,yBAAyB,KAAK;AAAA,IAC9B;AAAA,IACA;AAAA,EACJ,IAAwC,CAAC,GAAG;AACxC,UAAM,UAAU,MAAM,KAAK,SAAS,YAAY,EAAE,wBAAwB,MAAM,CAAC;AACjF,UAAM,cAAc,QAAQ,cAAc;AAC1C,QAAI,SAAS,UAAa,gBAAgB,QAAW;AACjD,oBAAc,kBAAkB,IAAI;AAAA,IACxC;AACA,SAAK,yBAAyB,SAAS,WAAW;AAClD,QAAI,SAAS,UAAa,gBAAgB;AACtC,YAAM,IAAI;AAAA,QACN,qCAAqC,WAAW,eAAe,IAAI,KAAK,WAAW;AAAA,MACvF;AACJ,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,mBAAsB,QAAsB,SAA8C;AAC5F,WAAO,OAAO,QAAQ,MAAM,KAAK,YAAY,OAAO,GAAG,OAAO;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAAe,SAA4D;AAE7E,UAAM,KAAK,YAAY;AAAA,MACnB,GAAG;AAAA,MACH,MAAM,kBAAkB;AAAA,IAC5B,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAQ,SAAY,MAAc,QAAsB,SAA+B;AACzF,cAAU;AAAA,MACN,GAAG;AAAA,MACH,wBAAwB,SAAS,0BAA0B,KAAK;AAAA,IACpE;AACA,UAAM,UAAU,OAAO,OAAO,OAAO;AACrC,UAAM,KAAK,SAAS,KAAK,MAAM,SAAS,OAAO;AAC/C,WAAO;AAAA,EACX;AAAA,EAEA,UAAU,MAA+B,OAAqB;AAC1D,WAAO,KAAK,kBAAkB,kBAAkB,SAAS,MAAM,KAAK;AAAA,EACxE;AAAA,EAEA,YAAY,OAAqB;AAC7B,WAAO,KAAK,kBAAkB,kBAAkB,SAAS,wBAAwB,SAAS,KAAK;AAAA,EACnG;AAAA,EAEA,SAAS,sBAAgC,OAAqB;AAC1D,QAAI,wBAAwB,GAAG;AAC3B,YAAM,IAAI,MAAM,sDAAsD;AAAA,IAC1E;AACA,UAAM,SAAS,IAAI,WAAW,OAAO,MAAM;AAC3C,WAAO,YAAY,KAAK,IAAI,sBAAsB,KAAM,CAAC;AACzD,WAAO,KAAK;AAAA,MACR,kBAAkB;AAAA,MAClB,wBAAwB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,OAAO,YAAY;AAAA,IACvB;AAAA,EACJ;AAAA,EAEA,iBAAiB,OAAqB;AAClC,WAAO,KAAK,kBAAkB,kBAAkB,SAAS,wBAAwB,cAAc,OAAO,KAAK;AAAA,EAC/G;AAAA,EAEA,IAAI,cAAc;AACd,WAAO,KAAK,SAAS,QAAQ,iBAAiB;AAAA,EAClD;AAAA,EAEA,CAAC,OAAO,YAAY,IAAI;AACpB,WAAO,KAAK,MAAM;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ;AACV,UAAM,KAAK,SAAS,MAAM;AAAA,EAC9B;AAAA,EAEA,MAAM,kBACF,eACA,gBACA,OACA,aACA,cACF;AACE,UAAM,KAAK,SAAS;AAAA,MAChB,kBAAkB;AAAA,MAClB,2BAA2B,OAAO;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,MACJ,CAAC;AAAA,MACD;AAAA,QACI;AAAA,QACA,YAAY;AAAA,UACR,eAAe,kBAAkB,aAAa,KAAK,WAAW,IAAI,aAAa;AAAA,UAC/E,gBAAgB,wBAAwB,cAAc,KAAK,WAAW,IAAI,cAAc;AAAA,QAC5F;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAAA,EAEU,yBAAyB,SAAkB,SAAkB;AACnE,UAAM;AAAA,MACF,eAAe,EAAE,YAAY;AAAA,MAC7B;AAAA,IACJ,IAAI;AACJ,QAAI,gBAAgB,kBAAkB,aAAc;AAEpD,UAAM,EAAE,eAAe,YAAY,gBAAgB,UAAU,aAAa,IACtE,2BAA2B,OAAO,OAAO;AAC7C,QAAI,kBAAkB,kBAAkB,SAAS;AAC7C,YAAM,IAAI;AAAA,QACN,8CAA8C,UAAU,GAAG,UAAU,KAAK,OAAO,MAAM,EAAE;AAAA,QACzF;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AACA,QAAI,mBAAmB,wBAAwB,SAAS;AACpD,YAAM,IAAI;AAAA,QACN,sEAAsE,UAAU,KAAK,OAAO,MAAM,EAAE;AAAA,QACpG;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AACJ;",
-  "names": []
-}

package/dist/esm/securechannel/SecureChannelProtocol.js

@@ -1,134 +0,0 @@
-/**
- * @license
- * Copyright 2022-2026 Matter.js Authors
- * SPDX-License-Identifier: Apache-2.0
- */
-import { FabricManager } from "#fabric/FabricManager.js";
-import { ExchangeManager } from "#protocol/ExchangeManager.js";
-import { NodeSession } from "#session/NodeSession.js";
-import { SessionManager } from "#session/SessionManager.js";
-import { AsyncObservable, Environmental, Logger, MatterFlowError } from "@matter/general";
-import {
-  GeneralStatusCode,
-  SECURE_CHANNEL_PROTOCOL_ID,
-  SecureChannelStatusCode,
-  SecureMessageType,
-  StatusCode,
-  StatusResponseError
-} from "@matter/types";
-import { CaseServer } from "../session/case/CaseServer.js";
-import { MaximumPasePairingErrorsReachedError } from "../session/pase/PaseServer.js";
-import { ChannelStatusResponseError, SecureChannelMessenger } from "./SecureChannelMessenger.js";
-import { SecureChannelStatusMessage } from "./SecureChannelStatusMessageSchema.js";
-const logger = Logger.get("SecureChannelProtocol");
-class StatusReportOnlySecureChannelProtocol {
-  id = SECURE_CHANNEL_PROTOCOL_ID;
-  // We need to check the message details to decide if ok or not, so we take them all
-  requiresSecureSession = void 0;
-  async onNewExchange(exchange, message) {
-    const messageType = message.payloadHeader.messageType;
-    switch (messageType) {
-      case SecureMessageType.StatusReport:
-        await this.handleInitialStatusReport(exchange, message);
-        break;
-      default:
-        if (messageType !== SecureMessageType.StandaloneAck) {
-          throw new StatusResponseError(
-            `Unexpected initial message on secure channel protocol: ${messageType.toString(16)}`,
-            StatusCode.InvalidAction
-          );
-        }
-    }
-  }
-  async handleInitialStatusReport(exchange, message) {
-    const {
-      payloadHeader: { messageType },
-      payload
-    } = message;
-    if (messageType !== SecureMessageType.StatusReport) {
-      throw new MatterFlowError(
-        `Unexpected message type on secure channel protocol, expected StatusReport: ${messageType.toString(
-          16
-        )}`
-      );
-    }
-    const { generalStatus, protocolId, protocolStatus } = SecureChannelStatusMessage.decode(payload);
-    if (generalStatus !== GeneralStatusCode.Success) {
-      throw new ChannelStatusResponseError(
-        `Received general error status (${protocolId})`,
-        generalStatus,
-        protocolStatus
-      );
-    }
-    if (protocolStatus !== SecureChannelStatusCode.CloseSession) {
-      throw new ChannelStatusResponseError(
-        `Received general success status, but protocol status is not CloseSession`,
-        generalStatus,
-        protocolStatus
-      );
-    }
-    const { session } = exchange;
-    NodeSession.assert(session);
-    logger.debug(exchange.via, "Closed by peer");
-    await session.handlePeerClose(exchange);
-  }
-  async close() {
-  }
-}
-class SecureChannelProtocol extends StatusReportOnlySecureChannelProtocol {
-  #paseCommissioner;
-  #caseCommissioner;
-  #tooManyPaseErrors = AsyncObservable();
-  constructor(sessions, fabrics) {
-    super();
-    this.#caseCommissioner = new CaseServer(sessions, fabrics);
-  }
-  static [Environmental.create](env) {
-    const instance = new SecureChannelProtocol(env.get(SessionManager), env.get(FabricManager));
-    env.get(ExchangeManager).addProtocolHandler(instance);
-    env.set(SecureChannelProtocol, instance);
-    return instance;
-  }
-  /**
-   * Emitted when the active PASE session hits the maximum error threshold.
-   */
-  get tooManyPaseErrors() {
-    return this.#tooManyPaseErrors;
-  }
-  setPaseCommissioner(paseServer) {
-    this.#paseCommissioner = paseServer;
-  }
-  async removePaseCommissioner() {
-    await this.#paseCommissioner?.close();
-    this.#paseCommissioner = void 0;
-  }
-  async onNewExchange(exchange, message) {
-    const messageType = message.payloadHeader.messageType;
-    switch (messageType) {
-      case SecureMessageType.PbkdfParamRequest:
-        if (this.#paseCommissioner === void 0) {
-          const messenger = new SecureChannelMessenger(exchange);
-          await messenger.sendError(SecureChannelStatusCode.InvalidParam);
-          await messenger.close();
-          return;
-        }
-        try {
-          await this.#paseCommissioner.onNewExchange(exchange);
-        } catch (error) {
-          MaximumPasePairingErrorsReachedError.accept(error);
-          await this.#tooManyPaseErrors.emit();
-        }
-        break;
-      case SecureMessageType.Sigma1:
-        await this.#caseCommissioner.onNewExchange(exchange);
-        break;
-      default:
-        await super.onNewExchange(exchange, message);
-    }
-  }
-}
-export {
-  SecureChannelProtocol,
-  StatusReportOnlySecureChannelProtocol
-};
-//# sourceMappingURL=SecureChannelProtocol.js.map

package/dist/esm/securechannel/SecureChannelProtocol.js.map

@@ -1,6 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/securechannel/SecureChannelProtocol.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAC5B,SAAS,sBAAsB;AAC/B,SAAS,iBAA8B,eAAe,QAAQ,uBAAuB;AACrF;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAIP,SAAS,kBAAkB;AAC3B,SAAS,4CAAwD;AACjE,SAAS,4BAA4B,8BAA8B;AACnE,SAAS,kCAAkC;AAE3C,MAAM,SAAS,OAAO,IAAI,uBAAuB;AAE1C,MAAM,sCAAiE;AAAA,EACjE,KAAK;AAAA;AAAA,EAGL,wBAAwB;AAAA,EAEjC,MAAM,cAAc,UAA2B,SAAkB;AAC7D,UAAM,cAAc,QAAQ,cAAc;AAE1C,YAAQ,aAAa;AAAA,MACjB,KAAK,kBAAkB;AACnB,cAAM,KAAK,0BAA0B,UAAU,OAAO;AACtD;AAAA,MACJ;AAEI,YAAI,gBAAgB,kBAAkB,eAAe;AACjD,gBAAM,IAAI;AAAA,YACN,0DAA0D,YAAY,SAAS,EAAE,CAAC;AAAA,YAClF,WAAW;AAAA,UACf;AAAA,QACJ;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,MAAM,0BAA0B,UAA2B,SAAkB;AACzE,UAAM;AAAA,MACF,eAAe,EAAE,YAAY;AAAA,MAC7B;AAAA,IACJ,IAAI;AACJ,QAAI,gBAAgB,kBAAkB,cAAc;AAChD,YAAM,IAAI;AAAA,QACN,8EAA8E,YAAY;AAAA,UACtF;AAAA,QACJ,CAAC;AAAA,MACL;AAAA,IACJ;AAEA,UAAM,EAAE,eAAe,YAAY,eAAe,IAAI,2BAA2B,OAAO,OAAO;AAC/F,QAAI,kBAAkB,kBAAkB,SAAS;AAC7C,YAAM,IAAI;AAAA,QACN,kCAAkC,UAAU;AAAA,QAC5C;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI,mBAAmB,wBAAwB,cAAc;AACzD,YAAM,IAAI;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AAEA,UAAM,EAAE,QAAQ,IAAI;AACpB,gBAAY,OAAO,OAAO;AAC1B,WAAO,MAAM,SAAS,KAAK,gBAAgB;AAC3C,UAAM,QAAQ,gBAAgB,QAAQ;AAAA,EAC1C;AAAA,EAEA,MAAM,QAAQ;AAAA,EAEd;AACJ;AAEO,MAAM,8BAA8B,sCAAsC;AAAA,EAC7E;AAAA,EACS;AAAA,EACA,qBAAqB,gBAAoB;AAAA,EAElD,YAAY,UAA0B,SAAwB;AAC1D,UAAM;AACN,SAAK,oBAAoB,IAAI,WAAW,UAAU,OAAO;AAAA,EAC7D;AAAA,EAEA,QAAQ,cAAc,MAAM,EAAE,KAAkB;AAC5C,UAAM,WAAW,IAAI,sBAAsB,IAAI,IAAI,cAAc,GAAG,IAAI,IAAI,aAAa,CAAC;AAC1F,QAAI,IAAI,eAAe,EAAE,mBAAmB,QAAQ;AACpD,QAAI,IAAI,uBAAuB,QAAQ;AACvC,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,oBAAoB;AACpB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,oBAAoB,YAAwB;AACxC,SAAK,oBAAoB;AAAA,EAC7B;AAAA,EAEA,MAAM,yBAAyB;AAC3B,UAAM,KAAK,mBAAmB,MAAM;AACpC,SAAK,oBAAoB;AAAA,EAC7B;AAAA,EAEA,MAAe,cAAc,UAA2B,SAAkB;AACtE,UAAM,cAAc,QAAQ,cAAc;AAE1C,YAAQ,aAAa;AAAA,MACjB,KAAK,kBAAkB;AACnB,YAAI,KAAK,sBAAsB,QAAW;AAGtC,gBAAM,YAAY,IAAI,uBAAuB,QAAQ;AACrD,gBAAM,UAAU,UAAU,wBAAwB,YAAY;AAC9D,gBAAM,UAAU,MAAM;AACtB;AAAA,QACJ;AACA,YAAI;AACA,gBAAM,KAAK,kBAAkB,cAAc,QAAQ;AAAA,QACvD,SAAS,OAAO;AACZ,+CAAqC,OAAO,KAAK;AAEjD,gBAAM,KAAK,mBAAmB,KAAK;AAAA,QACvC;AACA;AAAA,MACJ,KAAK,kBAAkB;AACnB,cAAM,KAAK,kBAAkB,cAAc,QAAQ;AACnD;AAAA,MACJ;AACI,cAAM,MAAM,cAAc,UAAU,OAAO;AAAA,IACnD;AAAA,EACJ;AACJ;",
-  "names": []
-}

package/dist/esm/securechannel/SecureChannelStatusMessageSchema.js

@@ -1,15 +0,0 @@
-/**
- * @license
- * Copyright 2022-2026 Matter.js Authors
- * SPDX-License-Identifier: Apache-2.0
- */
-import { ProtocolStatusMessageSchema } from "#protocol/ProtocolStatusMessage.js";
-import { SECURE_CHANNEL_PROTOCOL_ID } from "@matter/types";
-class SecureChannelStatusMessageSchema extends ProtocolStatusMessageSchema {
-}
-const SecureChannelStatusMessage = new SecureChannelStatusMessageSchema(SECURE_CHANNEL_PROTOCOL_ID);
-export {
-  SecureChannelStatusMessage,
-  SecureChannelStatusMessageSchema
-};
-//# sourceMappingURL=SecureChannelStatusMessageSchema.js.map

package/dist/esm/securechannel/SecureChannelStatusMessageSchema.js.map

@@ -1,6 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/securechannel/SecureChannelStatusMessageSchema.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAgC,mCAAmC;AACnE,SAAS,kCAA2D;AAI7D,MAAM,yCAAyC,4BAAiD;AAAC;AAEjG,MAAM,6BAA6B,IAAI,iCAAiC,0BAA0B;",
-  "names": []
-}

package/dist/esm/securechannel/index.js

@@ -1,9 +0,0 @@
-/**
- * @license
- * Copyright 2022-2026 Matter.js Authors
- * SPDX-License-Identifier: Apache-2.0
- */
-export * from "./SecureChannelMessenger.js";
-export * from "./SecureChannelProtocol.js";
-export * from "./SecureChannelStatusMessageSchema.js";
-//# sourceMappingURL=index.js.map

package/dist/esm/securechannel/index.js.map

@@ -1,6 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/securechannel/index.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,cAAc;AACd,cAAc;AACd,cAAc;",
-  "names": []
-}

package/dist/esm/session/GroupSession.js

@@ -1,219 +0,0 @@
-/**
- * @license
- * Copyright 2022-2023 Project CHIP Authors
- * SPDX-License-Identifier: Apache-2.0
- */
-import { MessageCodec, SessionType } from "#codec/MessageCodec.js";
-import { Mark } from "#common/Mark.js";
-import { PairRetransmissionLimitReachedError } from "#peer/CommissioningError.js";
-import { PeerAddress } from "#peer/PeerAddress.js";
-import {
-  Bytes,
-  ChannelType,
-  CryptoDecryptError,
-  Diagnostic,
-  hex,
-  ImplementationError,
-  InternalError,
-  Logger,
-  MatterFlowError,
-  STANDARD_MATTER_PORT,
-  UnexpectedDataError
-} from "@matter/general";
-import { FabricIndex, GroupId } from "@matter/types";
-import { SecureSession } from "./SecureSession.js";
-import { Session } from "./Session.js";
-const logger = Logger.get("SecureGroupSession");
-class GroupSession extends SecureSession {
-  #id;
-  #fabric;
-  #peerNodeId;
-  #operationalGroupKey;
-  supportsMRP = false;
-  closingAfterExchangeFinished = false;
-  // Group sessions do not close after exchange finished, they are long-lived
-  keySetId;
-  constructor(config) {
-    const { manager, fabric, operationalGroupKey, id, peerNodeId, keySetId } = config;
-    super({
-      ...config,
-      setActiveTimestamp: false,
-      // We always set the active timestamp for Secure sessions TODO Check
-      messageCounter: fabric.groups.messaging.counterFor(operationalGroupKey)
-    });
-    this.#id = id;
-    this.#fabric = fabric;
-    this.#peerNodeId = peerNodeId;
-    this.keySetId = keySetId;
-    this.#operationalGroupKey = operationalGroupKey;
-    manager?.registerGroupSession(this);
-    fabric.addSession(this);
-    logger.debug(this.via, `Created secure GROUP session for fabric index ${fabric.fabricIndex}`);
-  }
-  /**
-   * Create an outbound group session.
-   */
-  static async create(options) {
-    const { manager, transports, id, fabric, keySetId, groupNodeId, operationalGroupKey } = options;
-    const groupId = GroupId.fromNodeId(groupNodeId);
-    const multicastAddress = fabric.groups.multicastAddressFor(groupId);
-    const operationalInterface = transports.interfaceFor(ChannelType.UDP, multicastAddress);
-    if (operationalInterface === void 0) {
-      throw new PairRetransmissionLimitReachedError(`IPv6 interface not initialized`);
-    }
-    const channel = await operationalInterface.openChannel({
-      ip: multicastAddress,
-      port: STANDARD_MATTER_PORT
-    });
-    return new GroupSession({
-      manager,
-      channel,
-      id,
-      fabric,
-      keySetId,
-      peerNodeId: groupNodeId,
-      operationalGroupKey
-    });
-  }
-  get type() {
-    return SessionType.Group;
-  }
-  get fabric() {
-    return this.#fabric;
-  }
-  get id() {
-    return this.#id;
-  }
-  get peerSessionId() {
-    return this.#id;
-  }
-  get via() {
-    return Diagnostic.via(`${Mark.SESSION}group#${hex.word(this.id)}`);
-  }
-  get nodeId() {
-    return this.#fabric.nodeId;
-  }
-  get peerNodeId() {
-    return this.#peerNodeId;
-  }
-  get associatedFabric() {
-    return this.#fabric;
-  }
-  /**
-   * The peer group's address.
-   */
-  get peerAddress() {
-    return PeerAddress({
-      fabricIndex: this.#fabric?.fabricIndex ?? FabricIndex.NO_FABRIC,
-      nodeId: this.#peerNodeId
-    });
-  }
-  subjectFor(message) {
-    if (message === void 0 || message.packetHeader.destGroupId === void 0) {
-      throw new ImplementationError("GroupSession requires a message with destGroupId");
-    }
-    return this.fabric.groups.subjectForGroup(GroupId(message.packetHeader.destGroupId), this.keySetId);
-  }
-  notifyActivity(_messageReceived) {
-  }
-  updateMessageCounter(messageCounter, sourceNodeId, operationalKey) {
-    if (sourceNodeId === void 0 || operationalKey === void 0) {
-      throw new InternalError("Source Node ID is required for GroupSession updateMessageCounter.");
-    }
-    const receptionState = this.#fabric.groups.messaging.receptionStateFor(sourceNodeId, operationalKey);
-    receptionState.updateMessageCounter(messageCounter);
-  }
-  encode(message) {
-    message.packetHeader.sessionId = this.#id;
-    const { header, applicationPayload } = MessageCodec.encodePayload(message);
-    if (header.destGroupId === void 0) {
-      throw new UnexpectedDataError("Group ID is required for GroupSession encode.");
-    }
-    const headerBytes = MessageCodec.encodePacketHeader(message.packetHeader);
-    const securityFlags = headerBytes[3];
-    const nonce = Session.generateNonce(securityFlags, header.messageId, this.#fabric.nodeId);
-    return {
-      header,
-      applicationPayload: this.#fabric.crypto.encrypt(
-        this.#operationalGroupKey,
-        applicationPayload,
-        nonce,
-        headerBytes
-      )
-    };
-  }
-  decode() {
-    throw new InternalError("GroupSession does not support decode on instance.");
-  }
-  static decode(fabrics, { header, applicationPayload, messageExtension }, aad) {
-    if (header.hasMessageExtensions) {
-      logger.info(
-        `Message extensions are not supported. Ignoring ${messageExtension ? Bytes.toHex(messageExtension) : void 0}`
-      );
-    }
-    const sourceNodeId = header.sourceNodeId;
-    if (sourceNodeId === void 0) {
-      throw new UnexpectedDataError("Source Node ID is required for GroupSession decode.");
-    }
-    const nonce = Session.generateNonce(header.securityFlags, header.messageId, sourceNodeId);
-    const sessionId = header.sessionId;
-    const keys = new Array();
-    for (const fabric2 of fabrics) {
-      const sessions = fabric2.groups.sessions.get(sessionId);
-      if (sessions?.length) {
-        for (const session of sessions) {
-          keys.push({ ...session, fabric: fabric2 });
-        }
-      }
-    }
-    if (keys.length === 0) {
-      throw new MatterFlowError("No key candidate found for group session decryption.");
-    }
-    let message;
-    let key;
-    let fabric;
-    let keySetId;
-    let found = false;
-    for ({ key, keySetId, fabric } of keys) {
-      try {
-        message = MessageCodec.decodePayload({
-          header,
-          applicationPayload: fabric.crypto.decrypt(key, applicationPayload, nonce, aad)
-        });
-        found = true;
-        break;
-      } catch (error) {
-        CryptoDecryptError.accept(error);
-      }
-    }
-    if (!found || !message || !key || !keySetId || !fabric) {
-      throw new MatterFlowError("Failed to decode group message with any key candidate.");
-    }
-    if (message.payloadHeader.hasSecuredExtension) {
-      logger.info(
-        `Secured extensions are not supported. Ignoring ${message.securityExtension ? Bytes.toHex(message.securityExtension) : void 0}`
-      );
-    }
-    return { message, key, sessionId, sourceNodeId, keySetId, fabric };
-  }
-  async close() {
-    this.manager?.removeGroupSession(this);
-    await super.close();
-  }
-}
-((GroupSession2) => {
-  function assert(session, errorText) {
-    if (!is(session)) {
-      throw new MatterFlowError(errorText ?? "Unsecured session in secure context");
-    }
-  }
-  GroupSession2.assert = assert;
-  function is(session) {
-    return session?.type === SessionType.Group;
-  }
-  GroupSession2.is = is;
-})(GroupSession || (GroupSession = {}));
-export {
-  GroupSession
-};
-//# sourceMappingURL=GroupSession.js.map

package/dist/esm/session/GroupSession.js.map

@@ -1,6 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/session/GroupSession.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAiD,cAAsB,mBAAmB;AAC1F,SAAS,YAAY;AAGrB,SAAS,2CAA2C;AACpD,SAAS,mBAAmB;AAC5B;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACG;AACP,SAAS,aAAa,eAAuB;AAC7C,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AAGxB,MAAM,SAAS,OAAO,IAAI,oBAAoB;AAGvC,MAAM,qBAAqB,cAAc;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,+BAA+B;AAAA;AAAA,EAE/B;AAAA,EAET,YAAY,QAA6B;AACrC,UAAM,EAAE,SAAS,QAAQ,qBAAqB,IAAI,YAAY,SAAS,IAAI;AAC3E,UAAM;AAAA,MACF,GAAG;AAAA,MACH,oBAAoB;AAAA;AAAA,MACpB,gBAAgB,OAAO,OAAO,UAAU,WAAW,mBAAmB;AAAA,IAC1E,CAAC;AACD,SAAK,MAAM;AACX,SAAK,UAAU;AACf,SAAK,cAAc;AACnB,SAAK,WAAW;AAChB,SAAK,uBAAuB;AAE5B,aAAS,qBAAqB,IAAI;AAClC,WAAO,WAAW,IAAI;AAEtB,WAAO,MAAM,KAAK,KAAK,iDAAiD,OAAO,WAAW,EAAE;AAAA,EAChG;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,OAAO,SAQjB;AACC,UAAM,EAAE,SAAS,YAAY,IAAI,QAAQ,UAAU,aAAa,oBAAoB,IAAI;AAExF,UAAM,UAAU,QAAQ,WAAW,WAAW;AAC9C,UAAM,mBAAmB,OAAO,OAAO,oBAAoB,OAAO;AAElE,UAAM,uBAAuB,WAAW,aAAa,YAAY,KAAK,gBAAgB;AACtF,QAAI,yBAAyB,QAAW;AAEpC,YAAM,IAAI,oCAAoC,gCAAgC;AAAA,IAClF;AAEA,UAAM,UAAU,MAAM,qBAAqB,YAAY;AAAA,MACnD,IAAI;AAAA,MACJ,MAAM;AAAA,IACV,CAAC;AAED,WAAO,IAAI,aAAa;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,IAAa,OAAO;AAChB,WAAO,YAAY;AAAA,EACvB;AAAA,EAEA,IAAI,SAAiB;AACjB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,KAAK;AACL,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,gBAAwB;AACxB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,MAAM;AACN,WAAO,WAAW,IAAI,GAAG,KAAK,OAAO,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,EAAE;AAAA,EACrE;AAAA,EAEA,IAAI,SAAS;AACT,WAAO,KAAK,QAAQ;AAAA,EACxB;AAAA,EAEA,IAAI,aAAa;AACb,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,mBAA2B;AAC3B,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,cAAc;AACd,WAAO,YAAY;AAAA,MACf,aAAa,KAAK,SAAS,eAAe,YAAY;AAAA,MACtD,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL;AAAA,EAEA,WAAW,SAA4B;AACnC,QAAI,YAAY,UAAa,QAAQ,aAAa,gBAAgB,QAAW;AACzE,YAAM,IAAI,oBAAoB,kDAAkD;AAAA,IACpF;AACA,WAAO,KAAK,OAAO,OAAO,gBAAgB,QAAQ,QAAQ,aAAa,WAAW,GAAG,KAAK,QAAQ;AAAA,EACtG;AAAA,EAES,eAAe,kBAA2B;AAAA,EAEnD;AAAA,EAES,qBAAqB,gBAAwB,cAAsB,gBAAuB;AAC/F,QAAI,iBAAiB,UAAa,mBAAmB,QAAW;AAC5D,YAAM,IAAI,cAAc,mEAAmE;AAAA,IAC/F;AACA,UAAM,iBAAiB,KAAK,QAAQ,OAAO,UAAU,kBAAkB,cAAc,cAAc;AACnG,mBAAe,qBAAqB,cAAc;AAAA,EACtD;AAAA,EAEA,OAAO,SAA0B;AAC7B,YAAQ,aAAa,YAAY,KAAK;AACtC,UAAM,EAAE,QAAQ,mBAAmB,IAAI,aAAa,cAAc,OAAO;AACzE,QAAI,OAAO,gBAAgB,QAAW;AAElC,YAAM,IAAI,oBAAoB,+CAA+C;AAAA,IACjF;AAEA,UAAM,cAAc,aAAa,mBAAmB,QAAQ,YAAY;AACxE,UAAM,gBAAgB,YAAY,CAAC;AACnC,UAAM,QAAQ,QAAQ,cAAc,eAAe,OAAO,WAAW,KAAK,QAAQ,MAAM;AAExF,WAAO;AAAA,MACH;AAAA,MACA,oBAAoB,KAAK,QAAQ,OAAO;AAAA,QACpC,KAAK;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,SAAyB;AACrB,UAAM,IAAI,cAAc,mDAAmD;AAAA,EAC/E;AAAA,EAEA,OAAO,OACH,SACA,EAAE,QAAQ,oBAAoB,iBAAiB,GAC/C,KAQF;AACE,QAAI,OAAO,sBAAsB;AAC7B,aAAO;AAAA,QACH,kDAAkD,mBAAmB,MAAM,MAAM,gBAAgB,IAAI,MAAS;AAAA,MAClH;AAAA,IACJ;AACA,UAAM,eAAe,OAAO;AAC5B,QAAI,iBAAiB,QAAW;AAE5B,YAAM,IAAI,oBAAoB,qDAAqD;AAAA,IACvF;AACA,UAAM,QAAQ,QAAQ,cAAc,OAAO,eAAe,OAAO,WAAW,YAAY;AACxF,UAAM,YAAY,OAAO;AACzB,UAAM,OAAO,IAAI,MAAwD;AACzE,eAAWA,WAAU,SAAS;AAC1B,YAAM,WAAWA,QAAO,OAAO,SAAS,IAAI,SAAS;AACrD,UAAI,UAAU,QAAQ;AAClB,mBAAW,WAAW,UAAU;AAC5B,eAAK,KAAK,EAAE,GAAG,SAAS,QAAAA,QAAO,CAAC;AAAA,QACpC;AAAA,MACJ;AAAA,IACJ;AACA,QAAI,KAAK,WAAW,GAAG;AACnB,YAAM,IAAI,gBAAgB,sDAAsD;AAAA,IACpF;AACA,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI,QAAQ;AACZ,SAAK,EAAE,KAAK,UAAU,OAAO,KAAK,MAAM;AACpC,UAAI;AACA,kBAAU,aAAa,cAAc;AAAA,UACjC;AAAA,UACA,oBAAoB,OAAO,OAAO,QAAQ,KAAK,oBAAoB,OAAO,GAAG;AAAA,QACjF,CAAC;AACD,gBAAQ;AACR;AAAA,MACJ,SAAS,OAAO;AACZ,2BAAmB,OAAO,KAAK;AAAA,MACnC;AAAA,IACJ;AACA,QAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ;AACpD,YAAM,IAAI,gBAAgB,wDAAwD;AAAA,IACtF;AAEA,QAAI,QAAQ,cAAc,qBAAqB;AAC3C,aAAO;AAAA,QACH,kDAAkD,QAAQ,oBAAoB,MAAM,MAAM,QAAQ,iBAAiB,IAAI,MAAS;AAAA,MACpI;AAAA,IACJ;AAEA,WAAO,EAAE,SAAS,KAAK,WAAW,cAAc,UAAU,OAAO;AAAA,EACrE;AAAA,EAEA,MAAe,QAAQ;AACnB,SAAK,SAAS,mBAAmB,IAAI;AACrC,UAAM,MAAM,MAAM;AAAA,EACtB;AACJ;AAAA,CAEO,CAAUC,kBAAV;AASI,WAAS,OAAO,SAAmB,WAAqD;AAC3F,QAAI,CAAC,GAAG,OAAO,GAAG;AACd,YAAM,IAAI,gBAAgB,aAAa,qCAAqC;AAAA,IAChF;AAAA,EACJ;AAJO,EAAAA,cAAS;AAMT,WAAS,GAAG,SAA4C;AAC3D,WAAO,SAAS,SAAS,YAAY;AAAA,EACzC;AAFO,EAAAA,cAAS;AAAA,GAfH;",
-  "names": ["fabric", "GroupSession"]
-}