@matter/thread-br-client 0.0.1

package/dist/esm/dtls/channel/NobleDtlsChannel.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/dtls/channel/NobleDtlsChannel.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA;AAAA,EACI;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIG;AACP,SAAS,YAAY;AACrB,SAAS,kBAAyC;AAClD,SAAS,mBAAmB;AAE5B,SAAS,iBAAiB,YAAY,uBAAuB;AAC7D,SAA2B,iBAAiB;AAE5C,SAAS,2BAA2B;AAEpC,MAAM,SAAS,OAAO,IAAI,kBAAkB;AAE5C,MAAM,6BAA6B,QAAQ,CAAC;AAC5C,MAAM,yBAAyB,QAAQ,CAAC;AACxC,MAAM,0BAA0B;AAChC,MAAM,0BAA0B,QAAQ,EAAE;AAC1C,MAAM,cAAc;AAQpB,MAAM,oBAAoB;AAE1B,MAAM,IAAI,KAAK,MAAM,GAAG;AAExB,MAAM,sBAAsB;AAC5B,MAAM,0BAA0B;AAEhC,SAAS,aAAa,SAAiB,MAAyC;AAC5E,MAAI,SAAS,QAAW;AACpB,WAAO;AAAA,EACX;AACA,SAAO,QAAQ,SAAS,GAAG,IAAI,SAAS;AAC5C;AAEA,SAAS,cAAc,SAA8B;AACjD,SAAO,MAAM,GAAG,QAAQ,YAAY,EAAE,CAAC;AAC3C;AAEA,SAAS,cAAc,OAAiC;AACpD,QAAM,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;AACpD,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,MAAM;AACV,aAAW,KAAK,OAAO;AACnB,QAAI,IAAI,GAAG,GAAG;AACd,WAAO,EAAE;AAAA,EACb;AACA,SAAO;AACX;AAEA,SAAS,uBAAuB,SAA0B;AAGtD,MAAI,IAAI;AACR,QAAM,MAAM,MAAM,GAAG,QAAQ,YAAY,EAAE,CAAC;AAC5C,aAAW,QAAQ,KAAK;AACpB,QAAK,KAAK,KAAM,OAAO,IAAI;AAAA,EAC/B;AACA,SAAQ,KAAK,IAAI,MAAO;AAC5B;AAaO,MAAM,iBAAwC;AAAA,EACxC;AAAA,EACA;AAAA,EAET;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA,aAAa;AAAA,EACb,UAAU;AAAA,EACV;AAAA,EACA,oBAAoB;AAAA;AAAA,EAGpB;AAAA;AAAA,EAGS,gBAAgB,IAAI,MAAa;AAAA;AAAA,EAE1C;AAAA,EAOS,kBAAkB,oBAAI,IAAgB;AAAA;AAAA,EAG/C;AAAA,EAOA,YAAY,MAAuB;AAC/B,SAAK,QAAQ;AACb,SAAK,WAAW,aAAa,KAAK,SAAS,KAAK,IAAI;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UAAyB;AAC3B,QAAI,KAAK,YAAY;AACjB,YAAM,IAAI,oBAAoB,6CAA6C;AAAA,IAC/E;AACA,QAAI,KAAK,SAAS;AACd,YAAM,IAAI,oBAAoB,kCAAkC;AAAA,IACpE;AAEA,UAAM,cAAc,KAAK,MAAM;AAC/B,UAAM,UAAU,YAAY,IAAI,OAAO;AACvC,UAAM,UAAU,YAAY,IAAI,MAAM;AACtC,UAAM,MAAM,MAAM,QAAQ,gBAAgB,EAAE,MAAM,KAAK,UAAU,eAAe,EAAE,CAAC;AACnF,QAAI,KAAK,SAAS;AACd,YAAM,IAAI,MAAM;AAChB,YAAM,IAAI,oBAAoB,kCAAkC;AAAA,IACpE;AACA,SAAK,OAAO;AACZ,QAAI,OAAO,CAAC,eAAe,cAAc,WAAW,SAAS,KAAK,YAAY,MAAM,GAAG,IAAI,CAAC,CAAC;AAE7F,UAAM,oBACF,KAAK,MAAM,wBAAwB,SAC7B,OAAO,KAAK,MAAM,mBAAmB,IACrC;AACV,UAAM,gBACF,KAAK,MAAM,oBAAoB,SAAY,OAAO,KAAK,MAAM,eAAe,IAAI;AAEpF,UAAM,YAA8B;AAAA,MAChC,UAAU,KAAK,MAAM;AAAA,MACrB,QAAQ,KAAK,MAAM,WAAW,MAAM,cAAc,OAAO;AAAA,MACzD,iBAAiB,KAAK,MAAM,oBAAoB,MAAM,uBAAuB,OAAO;AAAA,MACpF,qBAAqB;AAAA,MACrB,iBAAiB;AAAA,MACjB,KAAK,KAAK,MAAM,OAAO;AAAA,IAC3B;AACA,UAAM,SAAS,IAAI,WAAW,SAAS;AACvC,SAAK,UAAU;AAEf,SAAK,cAAc,IAAI,oBAAoB;AAAA,MACvC,WAAW;AAAA,MACX,OAAO;AAAA,MACP,gBAAgB,KAAK,MAAM,kBAAkB;AAAA,MAC7C,cAAc,MAAM,KAAK,cAAc;AAAA,MACvC,UAAU,MAAM,KAAK,MAAM,IAAI,UAAU,2DAA2D,CAAC;AAAA,IACzG,CAAC;AAED,UAAM,iBAAiB,IAAI,QAAc,CAAC,SAAS,WAAW;AAC1D,WAAK,aAAa,EAAE,SAAS,OAAO;AAAA,IACxC,CAAC;AACD,UAAM,iBACF,KAAK,MAAM,qBAAqB,SAAY,OAAO,KAAK,MAAM,gBAAgB,IAAI;AACtF,SAAK,mBAAmB,KAAK;AAAA,MAAS;AAAA,MAAyB;AAAA,MAAgB,MAC3E,KAAK,MAAM,IAAI,aAAa,6CAA6C,cAAc,IAAI,CAAC;AAAA,IAChG,EAAE,MAAM;AAGR,QAAI;AACA,YAAM,OAAO,OAAO,MAAM;AAC1B,WAAK,aAAa,KAAK,OAAO;AAC9B,WAAK,YAAY,aAAa;AAAA,IAClC,SAAS,GAAG;AACR,WAAK,MAAM,aAAa,QAAQ,IAAI,IAAI,cAAc,OAAO,CAAC,CAAC,CAAC;AAAA,IACpE;AAEA,QAAI;AACA,YAAM;AAAA,IACV,UAAE;AACE,WAAK,kBAAkB,KAAK;AAC5B,WAAK,mBAAmB;AAAA,IAC5B;AAAA,EACJ;AAAA,EAEA,MAAM,KAAK,OAA6B;AACpC,QAAI,KAAK,SAAS;AACd,YAAM,IAAI,oBAAoB,+BAA+B;AAAA,IACjE;AACA,QAAI,CAAC,KAAK,YAAY;AAClB,YAAM,IAAI,oBAAoB,sCAAsC;AAAA,IACxE;AACA,UAAM,cAAc,KAAK;AACzB,UAAM,MAAM,KAAK;AACjB,QAAI,gBAAgB,UAAa,QAAQ,QAAW;AAChD,YAAM,IAAI,cAAc,0DAA0D;AAAA,IACtF;AACA,UAAM,MAAM,YAAY,aAAa;AACrC,UAAM,SAAS,WAAW;AAAA,MACtB;AAAA,QACI,MAAM,YAAY;AAAA,QAClB,OAAO,YAAY;AAAA,QACnB,gBAAgB;AAAA,QAChB,UAAU,MAAM,GAAG,KAAK;AAAA,MAC5B;AAAA,MACA;AAAA,IACJ;AACA,UAAM,KAAK,cAAc,KAAK,MAAM;AAAA,EACxC;AAAA,EAEA,CAAC,OAAO,aAAa,IAA0B;AAC3C,WAAO;AAAA,MACH,MAAM,MAAsC;AACxC,YAAI,KAAK,cAAc,SAAS,GAAG;AAC/B,iBAAO,QAAQ,QAAQ,EAAE,OAAO,KAAK,cAAc,MAAM,GAAI,MAAM,MAAM,CAAC;AAAA,QAC9E;AACA,YAAI,KAAK,aAAa,UAAa,CAAC,KAAK,mBAAmB;AACxD,eAAK,oBAAoB;AACzB,iBAAO,QAAQ,OAAO,KAAK,QAAQ;AAAA,QACvC;AACA,YAAI,KAAK,SAAS;AACd,iBAAO,QAAQ,QAAQ,EAAE,OAAO,QAAW,MAAM,KAAK,CAAC;AAAA,QAC3D;AACA,YAAI,KAAK,mBAAmB,QAAW;AACnC,iBAAO,QAAQ;AAAA,YACX,IAAI,oBAAoB,sDAAsD;AAAA,UAClF;AAAA,QACJ;AACA,eAAO,IAAI,QAA+B,CAAC,SAAS,WAAW;AAC3D,eAAK,iBAAiB,EAAE,SAAS,OAAO;AAAA,QAC5C,CAAC;AAAA,MACL;AAAA,MACA,QAAQ,YAA4C;AAChD,cAAM,KAAK,MAAM;AACjB,eAAO,EAAE,OAAO,QAAW,MAAM,KAAK;AAAA,MAC1C;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,QAAQ,UAA0C;AAC9C,SAAK,gBAAgB,IAAI,QAAQ;AACjC,WAAO;AAAA,MACH,OAAO,YAAY;AACf,aAAK,gBAAgB,OAAO,QAAQ;AAAA,MACxC;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,QAAuB;AACzB,QAAI,KAAK,SAAS;AACd;AAAA,IACJ;AACA,SAAK,UAAU;AAEf,UAAM,cAAc,KAAK;AACzB,UAAM,MAAM,KAAK;AACjB,QAAI,KAAK,cAAc,gBAAgB,UAAa,QAAQ,QAAW;AACnE,UAAI;AACA,cAAM,MAAM,YAAY,aAAa;AACrC,cAAM,cAAc,WAAW;AAAA,UAC3B;AAAA,YACI,MAAM,YAAY;AAAA,YAClB,OAAO,YAAY;AAAA,YACnB,gBAAgB;AAAA,YAChB,UAAU,WAAW,GAAG,qBAAqB,uBAAuB;AAAA,UACxE;AAAA,UACA;AAAA,QACJ;AACA,cAAM,KAAK,cAAc,KAAK,WAAW,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAC7D,QAAQ;AAAA,MAER;AAAA,IACJ;AACA,QAAI,KAAK,gBAAgB,QAAW;AAChC,WAAK,YAAY,OAAO;AAAA,IAC5B;AACA,QAAI,QAAQ,QAAW;AACnB,YAAM,IAAI,MAAM,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACpC;AAEA,UAAM,SAAS,KAAK;AACpB,SAAK,iBAAiB;AACtB,QAAI,WAAW,QAAW;AACtB,UAAI,KAAK,aAAa,UAAa,CAAC,KAAK,mBAAmB;AACxD,aAAK,oBAAoB;AACzB,eAAO,OAAO,KAAK,QAAQ;AAAA,MAC/B,OAAO;AACH,eAAO,QAAQ,EAAE,OAAO,QAAW,MAAM,KAAK,CAAC;AAAA,MACnD;AAAA,IACJ;AACA,eAAW,YAAY,KAAK,iBAAiB;AACzC,eAAS;AAAA,IACb;AACA,QAAI,KAAK,eAAe,UAAa,CAAC,KAAK,YAAY;AACnD,YAAM,YAAY,KAAK;AACvB,WAAK,aAAa;AAClB,gBAAU,OAAO,KAAK,YAAY,IAAI,UAAU,0BAA0B,CAAC;AAAA,IAC/E;AAAA,EACJ;AAAA;AAAA,EAGA,cAAuB;AACnB,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA,EAKA,YAAY,OAAyB;AACjC,QAAI,KAAK,SAAS;AACd;AAAA,IACJ;AACA,QAAI;AACA,UAAI,KAAK,YAAY;AACjB,aAAK,mBAAmB,KAAK;AAAA,MACjC,OAAO;AACH,aAAK,yBAAyB,KAAK;AAAA,MACvC;AAAA,IACJ,SAAS,GAAG;AACR,WAAK,MAAM,aAAa,QAAQ,IAAI,IAAI,cAAc,OAAO,CAAC,CAAC,CAAC;AAAA,IACpE;AAAA,EACJ;AAAA,EAEA,yBAAyB,OAAyB;AAC9C,UAAM,SAAS,KAAK;AACpB,UAAM,aAAa,KAAK;AACxB,QAAI,WAAW,UAAa,eAAe,QAAW;AAClD,YAAM,IAAI,cAAc,sEAAsE;AAAA,IAClG;AACA,UAAM,OAAO,OAAO,WAAW,KAAK;AAEpC,eAAW,OAAO;AAClB,QAAI,KAAK,QAAQ,SAAS,GAAG;AACzB,WAAK,aAAa,KAAK,OAAO;AAAA,IAClC;AACA,QAAI,OAAO,cAAc,GAAG;AACxB,WAAK,eAAe,OAAO,YAAY;AACvC,WAAK,aAAa;AAClB,YAAM,YAAY,KAAK;AACvB,WAAK,aAAa;AAClB,UAAI,cAAc,QAAW;AACzB,kBAAU,QAAQ;AAAA,MACtB;AAAA,IACJ,WAAW,KAAK,QAAQ,SAAS,GAAG;AAChC,iBAAW,aAAa;AAAA,IAC5B;AAAA,EACJ;AAAA,EAEA,mBAAmB,OAAyB;AACxC,UAAM,cAAc,KAAK;AACzB,QAAI,gBAAgB,QAAW;AAC3B,YAAM,IAAI,cAAc,gEAAgE;AAAA,IAC5F;AACA,QAAI,IAAI;AACR,WAAO,IAAI,MAAM,QAAQ;AACrB,UAAI,MAAM,SAAS,IAAI,iBAAiB;AACpC,cAAM,IAAI,UAAU,4CAA4C;AAAA,MACpE;AACA,YAAM,SAAU,MAAM,IAAI,EAAE,KAAK,IAAK,MAAM,IAAI,EAAE;AAClD,YAAM,YAAY,IAAI,kBAAkB;AACxC,UAAI,YAAY,MAAM,QAAQ;AAC1B,cAAM,IAAI,UAAU,wDAAwD;AAAA,MAChF;AACA,YAAM,QAAQ,MAAM,SAAS,GAAG,SAAS;AACzC,UAAI;AACJ,UAAI;AACA,SAAC,EAAE,OAAO,IAAI,WAAW,OAAO,OAAO,WAAW;AAAA,MACtD,SAAS,GAAG;AAIR,YAAI,aAAa,iBAAiB;AAC9B,iBAAO,MAAM,uCAAuC,EAAE,KAAK,QAAQ,EAAE,cAAc,EAAE;AACrF,cAAI;AACJ;AAAA,QACJ;AACA,cAAM;AAAA,MACV;AACA,UAAI,OAAO,SAAS,YAAY,kBAAkB;AAC9C,aAAK,kBAAkB,OAAO,QAAQ;AAAA,MAC1C,WAAW,OAAO,SAAS,YAAY,OAAO;AAE1C,YAAI,OAAO,SAAS,UAAU,KAAK,OAAO,SAAS,CAAC,MAAM,yBAAyB;AAC/E,eAAK,MAAM,IAAI,UAAU,0CAA0C,CAAC;AACpE;AAAA,QACJ;AACA,aAAK;AAAA,UACD,IAAI;AAAA,YACA,sCAAsC,OAAO,SAAS,CAAC,KAAK,EAAE,SAAS,OAAO,SAAS,CAAC,KAAK,EAAE;AAAA,UACnG;AAAA,QACJ;AACA;AAAA,MACJ;AAGA,UAAI;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,kBAAkB,WAA6B;AAC3C,UAAM,SAAS,KAAK;AACpB,QAAI,WAAW,QAAW;AACtB,WAAK,iBAAiB;AACtB,aAAO,QAAQ,EAAE,OAAO,WAAW,MAAM,MAAM,CAAC;AAChD;AAAA,IACJ;AACA,SAAK,cAAc,KAAK,SAAS;AACjC,QAAI,KAAK,cAAc,SAAS,mBAAmB;AAC/C,WAAK,MAAM,IAAI,UAAU,oEAA+D,CAAC;AAAA,IAC7F;AAAA,EACJ;AAAA,EAEA,gBAAsB;AAClB,UAAM,SAAS,KAAK;AACpB,QAAI,WAAW,UAAa,KAAK,cAAc,KAAK,SAAS;AACzD;AAAA,IACJ;AACA,QAAI;AACA,YAAM,OAAO,OAAO,aAAa;AACjC,WAAK,aAAa,KAAK,OAAO;AAAA,IAClC,SAAS,GAAG;AACR,WAAK,MAAM,aAAa,QAAQ,IAAI,IAAI,cAAc,OAAO,CAAC,CAAC,CAAC;AAAA,IACpE;AAAA,EACJ;AAAA,EAEA,aAAa,SAA6B;AACtC,UAAM,MAAM,KAAK;AACjB,QAAI,QAAQ,QAAW;AACnB,YAAM,IAAI,cAAc,oCAAoC;AAAA,IAChE;AACA,QAAI,QAAQ,WAAW,GAAG;AACtB;AAAA,IACJ;AAIA,UAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAM,YAAY,IAAI,MAAkB;AACxC,QAAI,MAAM,IAAI,MAAkB;AAChC,QAAI,SAAS;AACb,eAAW,UAAU,SAAS;AAC1B,UAAI,SAAS,KAAK,SAAS,OAAO,SAAS,KAAK;AAC5C,kBAAU,KAAK,cAAc,GAAG,CAAC;AACjC,cAAM,CAAC;AACP,iBAAS;AAAA,MACb;AACA,UAAI,KAAK,MAAM;AACf,gBAAU,OAAO;AAAA,IACrB;AACA,QAAI,IAAI,SAAS,GAAG;AAChB,gBAAU,KAAK,cAAc,GAAG,CAAC;AAAA,IACrC;AACA,eAAW,MAAM,WAAW;AACxB,WAAK,KAAK,cAAc,KAAK,EAAE,EAAE;AAAA,QAAM,OACnC,KAAK,MAAM,aAAa,QAAQ,IAAI,IAAI,cAAc,OAAO,CAAC,CAAC,CAAC;AAAA,MACpE;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,cAAc,KAAgB,OAAkC;AAClE,UAAM,IAAI,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,KAAK;AAAA,EAC7D;AAAA,EAEA,MAAM,OAAoB;AACtB,QAAI,KAAK,SAAS;AACd;AAAA,IACJ;AACA,QAAI,KAAK,aAAa,QAAW;AAC7B,WAAK,WAAW;AAAA,IACpB;AACA,QAAI,KAAK,gBAAgB,QAAW;AAChC,WAAK,YAAY,OAAO;AAAA,IAC5B;AACA,UAAM,YAAY,KAAK;AACvB,SAAK,aAAa;AAClB,QAAI,cAAc,UAAa,CAAC,KAAK,YAAY;AAC7C,gBAAU,OAAO,KAAK;AAAA,IAC1B;AACA,UAAM,SAAS,KAAK;AACpB,SAAK,iBAAiB;AACtB,QAAI,WAAW,QAAW;AACtB,WAAK,oBAAoB;AACzB,aAAO,OAAO,KAAK;AAAA,IACvB;AAEA,SAAK,KAAK,MAAM,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACpC;AACJ;",
+  "names": []
+}

package/dist/esm/dtls/channel/connectDtls.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { DtlsChannel } from "./DtlsChannel.js";
+import type { DtlsConnectOpts } from "./DtlsConnectOpts.js";
+/**
+ * Open a DTLS 1.2 + EC-JPAKE channel to the peer: construct a
+ * {@link NobleDtlsChannel}, run its handshake, and resolve with the connected
+ * channel. If the handshake fails the transport is torn down before rethrowing
+ * so the UDP socket never leaks.
+ */
+export declare function connectDtls(opts: DtlsConnectOpts): Promise<DtlsChannel>;
+//# sourceMappingURL=connectDtls.d.ts.map

package/dist/esm/dtls/channel/connectDtls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectDtls.d.ts","sourceRoot":"","sources":["../../../../src/dtls/channel/connectDtls.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAS7E"}

package/dist/esm/dtls/channel/connectDtls.js

@@ -0,0 +1,21 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { NobleDtlsChannel } from "./NobleDtlsChannel.js";
+async function connectDtls(opts) {
+  const channel = new NobleDtlsChannel(opts);
+  try {
+    await channel.connect();
+  } catch (e) {
+    await channel.close().catch(() => {
+    });
+    throw e;
+  }
+  return channel;
+}
+export {
+  connectDtls
+};
+//# sourceMappingURL=connectDtls.js.map

package/dist/esm/dtls/channel/connectDtls.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/dtls/channel/connectDtls.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,SAAS,wBAAwB;AAQjC,eAAsB,YAAY,MAA6C;AAC3E,QAAM,UAAU,IAAI,iBAAiB,IAAI;AACzC,MAAI;AACA,UAAM,QAAQ,QAAQ;AAAA,EAC1B,SAAS,GAAG;AACR,UAAM,QAAQ,MAAM,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACpC,UAAM;AAAA,EACV;AACA,SAAO;AACX;",
+  "names": []
+}

package/dist/esm/dtls/channel/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * DTLS 1.2 + EC-JPAKE channel layer — the only surface that escapes from `dtls/`
+ * to the package public API. Handshake/record/PRF/EC-JPAKE internals stay
+ * package-private.
+ */
+export { connectDtls } from "./connectDtls.js";
+export { DtlsError, type DtlsChannel } from "./DtlsChannel.js";
+export type { DtlsConnectOpts } from "./DtlsConnectOpts.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/dtls/channel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/dtls/channel/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/esm/dtls/channel/index.js

@@ -0,0 +1,12 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { connectDtls } from "./connectDtls.js";
+import { DtlsError } from "./DtlsChannel.js";
+export {
+  DtlsError,
+  connectDtls
+};
+//# sourceMappingURL=index.js.map

package/dist/esm/dtls/channel/index.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/dtls/channel/index.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAYA,SAAS,mBAAmB;AAC5B,SAAS,iBAAmC;",
+  "names": []
+}

package/dist/esm/dtls/ecjpake/EcJpakePms.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * EC-JPAKE premaster-secret derivation, mirroring mbedTLS v3.6.6
+ * `mbedtls_ecjpake_derive_secret` and its helper `mbedtls_ecjpake_derive_k`.
+ *
+ * Given the agreed pieces from a completed round-2 exchange:
+ *
+ * ```
+ * K   = ( Xp - Xp2 * (xm2 * s mod n) ) * xm2
+ * PMS = SHA-256( K.X as 32-byte BE )
+ * ```
+ *
+ * - `Xp` is the peer's round-2 public point (parsed from `parseRound2`).
+ * - `Xp2` is the peer's *second* round-1 public point.
+ * - `xm2` is our second round-1 private scalar.
+ * - `s` is the EC-JPAKE password as the big-endian integer of its bytes,
+ *   matching `mbedtls_mpi_read_binary` in `mbedtls_ecjpake_setup`.
+ *
+ * The PMS is exactly the SHA-256 hash of the field-element-sized big-endian
+ * encoding of `K.X` — no IDs, no transcript, no nonces. From here the standard
+ * TLS 1.2 PRF takes over (Phase 0c.5 / DTLS layer).
+ */
+export declare const EcJpakePms: {
+    derive(args: {
+        Xp: Uint8Array;
+        Xp2: Uint8Array;
+        xm2: bigint;
+        s: bigint;
+    }): Uint8Array;
+};
+//# sourceMappingURL=EcJpakePms.d.ts.map

package/dist/esm/dtls/ecjpake/EcJpakePms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EcJpakePms.d.ts","sourceRoot":"","sources":["../../../../src/dtls/ecjpake/EcJpakePms.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,UAAU;IACnB,MAAM,OAAO;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,UAAU;CA2B/E,CAAC"}

package/dist/esm/dtls/ecjpake/EcJpakePms.js

@@ -0,0 +1,41 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { InternalError } from "@matter/general";
+import { p256 } from "@noble/curves/nist.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { DtlsError } from "../channel/DtlsChannel.js";
+const Point = p256.Point;
+const N = Point.Fn.ORDER;
+const COORDINATE_BYTES = 32;
+const EcJpakePms = {
+  derive(args) {
+    const { Xp, Xp2, xm2, s } = args;
+    if (xm2 <= 0n || xm2 >= N) {
+      throw new InternalError("xm2 must be in [1, n-1]");
+    }
+    if (s <= 0n) {
+      throw new InternalError("s (password as integer) must be positive");
+    }
+    const Xp_pt = Point.fromBytes(Xp);
+    const Xp2_pt = Point.fromBytes(Xp2);
+    if (Xp_pt.is0() || Xp2_pt.is0()) {
+      throw new DtlsError("peer points must not be the point at infinity");
+    }
+    const xm2sNeg = (N - xm2 * s % N) % N;
+    const K1 = Xp_pt.add(Xp2_pt.multiply(xm2sNeg));
+    const K = K1.multiply(xm2);
+    if (K.is0()) {
+      throw new DtlsError("derived K is the point at infinity");
+    }
+    const sec1 = K.toBytes(false);
+    const xBytes = sec1.subarray(1, 1 + COORDINATE_BYTES);
+    return sha256(xBytes);
+  }
+};
+export {
+  EcJpakePms
+};
+//# sourceMappingURL=EcJpakePms.js.map

package/dist/esm/dtls/ecjpake/EcJpakePms.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/dtls/ecjpake/EcJpakePms.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,iBAAiB;AAE1B,MAAM,QAAQ,KAAK;AACnB,MAAM,IAAI,MAAM,GAAG;AACnB,MAAM,mBAAmB;AAuBlB,MAAM,aAAa;AAAA,EACtB,OAAO,MAA+E;AAClF,UAAM,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI;AAC5B,QAAI,OAAO,MAAM,OAAO,GAAG;AACvB,YAAM,IAAI,cAAc,yBAAyB;AAAA,IACrD;AACA,QAAI,KAAK,IAAI;AACT,YAAM,IAAI,cAAc,0CAA0C;AAAA,IACtE;AACA,UAAM,QAAQ,MAAM,UAAU,EAAE;AAChC,UAAM,SAAS,MAAM,UAAU,GAAG;AAClC,QAAI,MAAM,IAAI,KAAK,OAAO,IAAI,GAAG;AAC7B,YAAM,IAAI,UAAU,+CAA+C;AAAA,IACvE;AACA,UAAM,WAAW,IAAM,MAAM,IAAK,KAAM;AAExC,UAAM,KAAK,MAAM,IAAI,OAAO,SAAS,OAAO,CAAC;AAC7C,UAAM,IAAI,GAAG,SAAS,GAAG;AACzB,QAAI,EAAE,IAAI,GAAG;AACT,YAAM,IAAI,UAAU,oCAAoC;AAAA,IAC5D;AAIA,UAAM,OAAO,EAAE,QAAQ,KAAK;AAC5B,UAAM,SAAS,KAAK,SAAS,GAAG,IAAI,gBAAgB;AACpD,WAAO,OAAO,MAAM;AAAA,EACxB;AACJ;",
+  "names": []
+}

package/dist/esm/dtls/ecjpake/EcJpakeRound.d.ts

@@ -0,0 +1,119 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { SchnorrZkp, type SchnorrZkpGenerator } from "./SchnorrZkp.js";
+/**
+ * One half of an EC-JPAKE round-1 message: an ephemeral public key plus a Schnorr
+ * proof of knowledge of its private scalar against the curve generator.
+ *
+ * Wire (mbedTLS v3.6.6 `ecjpake_kkp_write`):
+ * ```
+ * uint8 X_len; uint8 X[X_len];          // X_len = 65 for P-256 uncompressed
+ * uint8 V_len; uint8 V[V_len];          // V_len = 65 for P-256 uncompressed
+ * uint8 r_len; uint8 r[r_len];          // r_len is minimal, leading zeros stripped
+ * ```
+ */
+export interface EcJpakeKeyKP {
+    /** SEC1-uncompressed public key `X = x*G`. */
+    X: Uint8Array;
+    /** Schnorr ZKP proving knowledge of `x`. */
+    zkp: SchnorrZkp;
+}
+/**
+ * EC-JPAKE participant identifiers used in the ZKP challenge hash. These are the literal
+ * byte strings from mbedTLS `ecjpake_id[]` (mbedtls v3.6.6 `library/ecjpake.c`); the wire
+ * value is a hash input on both sides, so the strings must match between client and server.
+ */
+export declare const ECJPAKE_ID_CLIENT = "client";
+export declare const ECJPAKE_ID_SERVER = "server";
+/**
+ * EC-JPAKE round 1 codec on top of the wire format that mbedTLS calls
+ * `ECJPAKEKeyKPPairList`: two `ECJPAKEKeyKP` structures back-to-back, no separator,
+ * no outer length (the carrying TLS extension layer adds the 2-byte length on the wire).
+ *
+ * Mirrors mbedTLS `ecjpake_kkpp_write` / `ecjpake_kkpp_read`.
+ */
+export declare const EcJpakeRound: {
+    /**
+     * Build a round-1 message for one role from two private scalars and two ephemeral
+     * scalars (one ephemeral per ZKP). Caller-supplied ephemerals make the output
+     * deterministic for testing — production callers must source them from a CSPRNG.
+     *
+     * `id` is `ECJPAKE_ID_CLIENT` for the joiner and `ECJPAKE_ID_SERVER` for the commissioner.
+     */
+    buildRound1(args: {
+        x1: bigint;
+        x2: bigint;
+        v1: bigint;
+        v2: bigint;
+        id: string;
+    }): {
+        kp1: EcJpakeKeyKP;
+        kp2: EcJpakeKeyKP;
+    };
+    serializeRound1(kp1: EcJpakeKeyKP, kp2: EcJpakeKeyKP): Uint8Array;
+    parseRound1(bytes: Uint8Array): {
+        kp1: EcJpakeKeyKP;
+        kp2: EcJpakeKeyKP;
+    };
+    /**
+     * Compute the round-2 composite generator `G' = Xp1 + Xp2 + Xm1` (mbedTLS
+     * `ecjpake_kkpp_write_round_two` / `ecjpake_kkpp_read_round_two`).
+     * Both sides use the same formula by symmetry — for the client `Xp1 = X3`,
+     * `Xp2 = X4`, `Xm1 = X1`; for the server `Xp1 = X1`, `Xp2 = X2`, `Xm1 = X3`.
+     */
+    composeRound2Generator(args: {
+        Xp1: Uint8Array;
+        Xp2: Uint8Array;
+        Xm1: Uint8Array;
+    }): SchnorrZkpGenerator;
+    /**
+     * Build round 2 from the second private scalar `xm2`, the password (as the
+     * mbedTLS-style big-endian integer `s`), the composite generator `G'`, and a
+     * deterministic ephemeral `v`. Returns `Xm = (xm2 * s) * G'` plus a Schnorr
+     * ZKP proving knowledge of `xm = xm2 * s mod n` against `G'`.
+     *
+     * Caller-supplied `v` makes output deterministic for testing; production
+     * callers must source `v` from a CSPRNG.
+     */
+    buildRound2(args: {
+        xm2: bigint;
+        s: bigint;
+        v: bigint;
+        id: string;
+        generator: SchnorrZkpGenerator;
+    }): EcJpakeKeyKP;
+    /**
+     * Serialise a round-2 message. When `prependEcParameters` is true the 3-byte
+     * `ECParameters{ named_curve, secp256r1 }` header is emitted before the
+     * `ECJPAKEKeyKP`. mbedTLS writes it inside `mbedtls_ecjpake_write_round_two`
+     * when role=SERVER (consumed by `ssl_write_server_key_exchange`).
+     * Server-side messages (ServerKeyExchange) use `true`; client-side
+     * (ClientKeyExchange) uses `false`.
+     */
+    serializeRound2(kp: EcJpakeKeyKP, options: {
+        prependEcParameters: boolean;
+    }): Uint8Array;
+    /**
+     * Parse a round-2 message. `expectEcParameters` must be `true` when the parser
+     * is the client reading ServerKeyExchange, and `false` when the parser is the
+     * server reading ClientKeyExchange.
+     */
+    parseRound2(bytes: Uint8Array, options: {
+        expectEcParameters: boolean;
+    }): EcJpakeKeyKP;
+    /**
+     * Verify the embedded round-2 ZKP under the supplied composite generator
+     * and the peer's `id` ("client" or "server"). Returns `false` (does not throw)
+     * on any verification failure — including malformed bytes — to mirror the
+     * round-1 `SchnorrZkp.verify` contract.
+     */
+    verifyRound2Zkp(args: {
+        kp: EcJpakeKeyKP;
+        generator: SchnorrZkpGenerator;
+        peerId: string;
+    }): boolean;
+};
+//# sourceMappingURL=EcJpakeRound.d.ts.map

package/dist/esm/dtls/ecjpake/EcJpakeRound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EcJpakeRound.d.ts","sourceRoot":"","sources":["../../../../src/dtls/ecjpake/EcJpakeRound.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,UAAU,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEvE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IACzB,8CAA8C;IAC9C,CAAC,EAAE,UAAU,CAAC;IACd,4CAA4C;IAC5C,GAAG,EAAE,UAAU,CAAC;CACnB;AAMD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAC1C,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAqF1C;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;IACrB;;;;;;OAMG;IACH,WAAW,OAAO;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG;QAC/E,GAAG,EAAE,YAAY,CAAC;QAClB,GAAG,EAAE,YAAY,CAAC;KACrB;IAYD,eAAe,MAAM,YAAY,OAAO,YAAY,GAAG,UAAU;IASjE,WAAW,QAAQ,UAAU,GAAG;QAAE,GAAG,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,YAAY,CAAA;KAAE;IASxE;;;;;OAKG;IACH,sBAAsB,OAAO;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,GAAG,mBAAmB;IAQxG;;;;;;;;OAQG;IACH,WAAW,OAAO;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAA;KAAE,GAAG,YAAY;IAwBlH;;;;;;;OAOG;IACH,eAAe,KAAK,YAAY,WAAW;QAAE,mBAAmB,EAAE,OAAO,CAAA;KAAE,GAAG,UAAU;IAcxF;;;;OAIG;IACH,WAAW,QAAQ,UAAU,WAAW;QAAE,kBAAkB,EAAE,OAAO,CAAA;KAAE,GAAG,YAAY;IAsBtF;;;;;OAKG;IACH,eAAe,OAAO;QAAE,EAAE,EAAE,YAAY,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO;CAI9F,CAAC"}

package/dist/esm/dtls/ecjpake/EcJpakeRound.js

@@ -0,0 +1,228 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { InternalError } from "@matter/general";
+import { p256 } from "@noble/curves/nist.js";
+import { DtlsError } from "../channel/DtlsChannel.js";
+import { SchnorrZkp } from "./SchnorrZkp.js";
+const Point = p256.Point;
+const N = Point.Fn.ORDER;
+const POINT_LEN = 65;
+const ECJPAKE_ID_CLIENT = "client";
+const ECJPAKE_ID_SERVER = "server";
+function readU8(bytes, offset) {
+  if (offset >= bytes.length) {
+    throw new DtlsError(`unexpected end of buffer at offset ${offset}`);
+  }
+  return bytes[offset];
+}
+function readSlice(bytes, offset, length) {
+  if (offset + length > bytes.length) {
+    throw new DtlsError(
+      `buffer too short: need ${length} bytes at offset ${offset}, have ${bytes.length - offset}`
+    );
+  }
+  return bytes.slice(offset, offset + length);
+}
+function validateKeyKP(keyKP) {
+  if (keyKP.X.length !== POINT_LEN || keyKP.X[0] !== 4) {
+    throw new InternalError("X must be SEC1-uncompressed P-256 (65 bytes, 0x04 prefix)");
+  }
+  if (keyKP.zkp.V.length !== POINT_LEN || keyKP.zkp.V[0] !== 4) {
+    throw new InternalError("ZKP.V must be SEC1-uncompressed P-256 (65 bytes, 0x04 prefix)");
+  }
+  if (keyKP.zkp.r.length === 0 || keyKP.zkp.r.length > 255) {
+    throw new InternalError(`ZKP.r length must be 1..255, got ${keyKP.zkp.r.length}`);
+  }
+  if (keyKP.zkp.r[0] === 0) {
+    throw new InternalError("ZKP.r must be minimal big-endian (no leading zero)");
+  }
+}
+function keyKpEncodedLength(keyKP) {
+  return 1 + POINT_LEN + 1 + POINT_LEN + 1 + keyKP.zkp.r.length;
+}
+function writeKeyKP(keyKP, out, offset) {
+  let p = offset;
+  out[p++] = POINT_LEN;
+  out.set(keyKP.X, p);
+  p += POINT_LEN;
+  out[p++] = POINT_LEN;
+  out.set(keyKP.zkp.V, p);
+  p += POINT_LEN;
+  out[p++] = keyKP.zkp.r.length;
+  out.set(keyKP.zkp.r, p);
+  p += keyKP.zkp.r.length;
+  return p;
+}
+function readKeyKP(bytes, offset) {
+  let p = offset;
+  const xLen = readU8(bytes, p);
+  p += 1;
+  if (xLen !== POINT_LEN) {
+    throw new DtlsError(`expected P-256 point length ${POINT_LEN}, got ${xLen}`);
+  }
+  const X = readSlice(bytes, p, xLen);
+  p += xLen;
+  const vLen = readU8(bytes, p);
+  p += 1;
+  if (vLen !== POINT_LEN) {
+    throw new DtlsError(`expected P-256 ZKP.V length ${POINT_LEN}, got ${vLen}`);
+  }
+  const V = readSlice(bytes, p, vLen);
+  p += vLen;
+  const rLen = readU8(bytes, p);
+  p += 1;
+  if (rLen === 0) {
+    throw new DtlsError("ZKP.r length must be > 0");
+  }
+  const r = readSlice(bytes, p, rLen);
+  p += rLen;
+  return {
+    kp: { X, zkp: { V, r } },
+    nextOffset: p
+  };
+}
+const EcJpakeRound = {
+  /**
+   * Build a round-1 message for one role from two private scalars and two ephemeral
+   * scalars (one ephemeral per ZKP). Caller-supplied ephemerals make the output
+   * deterministic for testing — production callers must source them from a CSPRNG.
+   *
+   * `id` is `ECJPAKE_ID_CLIENT` for the joiner and `ECJPAKE_ID_SERVER` for the commissioner.
+   */
+  buildRound1(args) {
+    const { x1, x2, v1, v2, id } = args;
+    const X1 = Point.BASE.multiply(x1).toBytes(false);
+    const X2 = Point.BASE.multiply(x2).toBytes(false);
+    const zkp1 = SchnorrZkp.generate({ privateKey: x1, publicKey: X1, ephemeral: v1, id });
+    const zkp2 = SchnorrZkp.generate({ privateKey: x2, publicKey: X2, ephemeral: v2, id });
+    return {
+      kp1: { X: X1, zkp: zkp1 },
+      kp2: { X: X2, zkp: zkp2 }
+    };
+  },
+  serializeRound1(kp1, kp2) {
+    validateKeyKP(kp1);
+    validateKeyKP(kp2);
+    const out = new Uint8Array(keyKpEncodedLength(kp1) + keyKpEncodedLength(kp2));
+    const after1 = writeKeyKP(kp1, out, 0);
+    writeKeyKP(kp2, out, after1);
+    return out;
+  },
+  parseRound1(bytes) {
+    const first = readKeyKP(bytes, 0);
+    const second = readKeyKP(bytes, first.nextOffset);
+    if (second.nextOffset !== bytes.length) {
+      throw new DtlsError(`trailing bytes after round-1 pair: ${bytes.length - second.nextOffset} extra`);
+    }
+    return { kp1: first.kp, kp2: second.kp };
+  },
+  /**
+   * Compute the round-2 composite generator `G' = Xp1 + Xp2 + Xm1` (mbedTLS
+   * `ecjpake_kkpp_write_round_two` / `ecjpake_kkpp_read_round_two`).
+   * Both sides use the same formula by symmetry — for the client `Xp1 = X3`,
+   * `Xp2 = X4`, `Xm1 = X1`; for the server `Xp1 = X1`, `Xp2 = X2`, `Xm1 = X3`.
+   */
+  composeRound2Generator(args) {
+    const point = Point.fromBytes(args.Xp1).add(Point.fromBytes(args.Xp2)).add(Point.fromBytes(args.Xm1));
+    if (point.is0()) {
+      throw new DtlsError("round-2 generator G' must not be the point at infinity");
+    }
+    return { point, bytes: point.toBytes(false) };
+  },
+  /**
+   * Build round 2 from the second private scalar `xm2`, the password (as the
+   * mbedTLS-style big-endian integer `s`), the composite generator `G'`, and a
+   * deterministic ephemeral `v`. Returns `Xm = (xm2 * s) * G'` plus a Schnorr
+   * ZKP proving knowledge of `xm = xm2 * s mod n` against `G'`.
+   *
+   * Caller-supplied `v` makes output deterministic for testing; production
+   * callers must source `v` from a CSPRNG.
+   */
+  buildRound2(args) {
+    const { xm2, s, v, id, generator } = args;
+    if (xm2 <= 0n || xm2 >= N) {
+      throw new InternalError("xm2 must be in [1, n-1]");
+    }
+    if (s <= 0n) {
+      throw new InternalError("s (password as integer) must be positive");
+    }
+    const xm = xm2 * s % N;
+    if (xm === 0n) {
+      throw new InternalError("xm = xm2*s mod n must be non-zero");
+    }
+    const Xm = generator.point.multiply(xm);
+    const XmBytes = Xm.toBytes(false);
+    const zkp = SchnorrZkp.generate({
+      privateKey: xm,
+      publicKey: XmBytes,
+      ephemeral: v,
+      id,
+      generator
+    });
+    return { X: XmBytes, zkp };
+  },
+  /**
+   * Serialise a round-2 message. When `prependEcParameters` is true the 3-byte
+   * `ECParameters{ named_curve, secp256r1 }` header is emitted before the
+   * `ECJPAKEKeyKP`. mbedTLS writes it inside `mbedtls_ecjpake_write_round_two`
+   * when role=SERVER (consumed by `ssl_write_server_key_exchange`).
+   * Server-side messages (ServerKeyExchange) use `true`; client-side
+   * (ClientKeyExchange) uses `false`.
+   */
+  serializeRound2(kp, options) {
+    validateKeyKP(kp);
+    const headerLen = options.prependEcParameters ? 3 : 0;
+    const out = new Uint8Array(headerLen + keyKpEncodedLength(kp));
+    let p = 0;
+    if (options.prependEcParameters) {
+      out[p++] = 3;
+      out[p++] = 0;
+      out[p++] = 23;
+    }
+    writeKeyKP(kp, out, p);
+    return out;
+  },
+  /**
+   * Parse a round-2 message. `expectEcParameters` must be `true` when the parser
+   * is the client reading ServerKeyExchange, and `false` when the parser is the
+   * server reading ClientKeyExchange.
+   */
+  parseRound2(bytes, options) {
+    let p = 0;
+    if (options.expectEcParameters) {
+      if (bytes.length < 3) {
+        throw new DtlsError("round-2 message too short for ECParameters header");
+      }
+      if (bytes[0] !== 3 || bytes[1] !== 0 || bytes[2] !== 23) {
+        throw new DtlsError(
+          `expected ECParameters{named_curve, secp256r1} (03 00 17), got ${Array.from(bytes.subarray(0, 3)).map((b) => b.toString(16).padStart(2, "0")).join(" ")}`
+        );
+      }
+      p = 3;
+    }
+    const { kp, nextOffset } = readKeyKP(bytes, p);
+    if (nextOffset !== bytes.length) {
+      throw new DtlsError(`trailing bytes after round-2 message: ${bytes.length - nextOffset} extra`);
+    }
+    return kp;
+  },
+  /**
+   * Verify the embedded round-2 ZKP under the supplied composite generator
+   * and the peer's `id` ("client" or "server"). Returns `false` (does not throw)
+   * on any verification failure — including malformed bytes — to mirror the
+   * round-1 `SchnorrZkp.verify` contract.
+   */
+  verifyRound2Zkp(args) {
+    const { kp, generator, peerId } = args;
+    return SchnorrZkp.verify({ zkp: kp.zkp, publicKey: kp.X, id: peerId, generator });
+  }
+};
+export {
+  ECJPAKE_ID_CLIENT,
+  ECJPAKE_ID_SERVER,
+  EcJpakeRound
+};
+//# sourceMappingURL=EcJpakeRound.js.map

package/dist/esm/dtls/ecjpake/EcJpakeRound.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/dtls/ecjpake/EcJpakeRound.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,kBAA4C;AAoBrD,MAAM,QAAQ,KAAK;AACnB,MAAM,IAAI,MAAM,GAAG;AACnB,MAAM,YAAY;AAOX,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAEjC,SAAS,OAAO,OAAmB,QAAwB;AACvD,MAAI,UAAU,MAAM,QAAQ;AACxB,UAAM,IAAI,UAAU,sCAAsC,MAAM,EAAE;AAAA,EACtE;AACA,SAAO,MAAM,MAAM;AACvB;AAEA,SAAS,UAAU,OAAmB,QAAgB,QAA4B;AAC9E,MAAI,SAAS,SAAS,MAAM,QAAQ;AAChC,UAAM,IAAI;AAAA,MACN,0BAA0B,MAAM,oBAAoB,MAAM,UAAU,MAAM,SAAS,MAAM;AAAA,IAC7F;AAAA,EACJ;AAEA,SAAO,MAAM,MAAM,QAAQ,SAAS,MAAM;AAC9C;AAEA,SAAS,cAAc,OAA2B;AAC9C,MAAI,MAAM,EAAE,WAAW,aAAa,MAAM,EAAE,CAAC,MAAM,GAAM;AACrD,UAAM,IAAI,cAAc,2DAA2D;AAAA,EACvF;AACA,MAAI,MAAM,IAAI,EAAE,WAAW,aAAa,MAAM,IAAI,EAAE,CAAC,MAAM,GAAM;AAC7D,UAAM,IAAI,cAAc,+DAA+D;AAAA,EAC3F;AACA,MAAI,MAAM,IAAI,EAAE,WAAW,KAAK,MAAM,IAAI,EAAE,SAAS,KAAK;AACtD,UAAM,IAAI,cAAc,oCAAoC,MAAM,IAAI,EAAE,MAAM,EAAE;AAAA,EACpF;AAIA,MAAI,MAAM,IAAI,EAAE,CAAC,MAAM,GAAM;AACzB,UAAM,IAAI,cAAc,oDAAoD;AAAA,EAChF;AACJ;AAEA,SAAS,mBAAmB,OAA6B;AACrD,SAAO,IAAI,YAAY,IAAI,YAAY,IAAI,MAAM,IAAI,EAAE;AAC3D;AAEA,SAAS,WAAW,OAAqB,KAAiB,QAAwB;AAC9E,MAAI,IAAI;AACR,MAAI,GAAG,IAAI;AACX,MAAI,IAAI,MAAM,GAAG,CAAC;AAClB,OAAK;AACL,MAAI,GAAG,IAAI;AACX,MAAI,IAAI,MAAM,IAAI,GAAG,CAAC;AACtB,OAAK;AACL,MAAI,GAAG,IAAI,MAAM,IAAI,EAAE;AACvB,MAAI,IAAI,MAAM,IAAI,GAAG,CAAC;AACtB,OAAK,MAAM,IAAI,EAAE;AACjB,SAAO;AACX;AAEA,SAAS,UAAU,OAAmB,QAA0D;AAC5F,MAAI,IAAI;AACR,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,WAAW;AACpB,UAAM,IAAI,UAAU,+BAA+B,SAAS,SAAS,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AACL,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,WAAW;AACpB,UAAM,IAAI,UAAU,+BAA+B,SAAS,SAAS,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AACL,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,GAAG;AACZ,UAAM,IAAI,UAAU,0BAA0B;AAAA,EAClD;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AAEL,SAAO;AAAA,IACH,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;AAAA,IACvB,YAAY;AAAA,EAChB;AACJ;AASO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQxB,YAAY,MAGV;AACE,UAAM,EAAE,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI;AAC/B,UAAM,KAAK,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ,KAAK;AAChD,UAAM,KAAK,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ,KAAK;AAChD,UAAM,OAAO,WAAW,SAAS,EAAE,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC;AACrF,UAAM,OAAO,WAAW,SAAS,EAAE,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC;AACrF,WAAO;AAAA,MACH,KAAK,EAAE,GAAG,IAAI,KAAK,KAAK;AAAA,MACxB,KAAK,EAAE,GAAG,IAAI,KAAK,KAAK;AAAA,IAC5B;AAAA,EACJ;AAAA,EAEA,gBAAgB,KAAmB,KAA+B;AAC9D,kBAAc,GAAG;AACjB,kBAAc,GAAG;AACjB,UAAM,MAAM,IAAI,WAAW,mBAAmB,GAAG,IAAI,mBAAmB,GAAG,CAAC;AAC5E,UAAM,SAAS,WAAW,KAAK,KAAK,CAAC;AACrC,eAAW,KAAK,KAAK,MAAM;AAC3B,WAAO;AAAA,EACX;AAAA,EAEA,YAAY,OAA6D;AACrE,UAAM,QAAQ,UAAU,OAAO,CAAC;AAChC,UAAM,SAAS,UAAU,OAAO,MAAM,UAAU;AAChD,QAAI,OAAO,eAAe,MAAM,QAAQ;AACpC,YAAM,IAAI,UAAU,sCAAsC,MAAM,SAAS,OAAO,UAAU,QAAQ;AAAA,IACtG;AACA,WAAO,EAAE,KAAK,MAAM,IAAI,KAAK,OAAO,GAAG;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,uBAAuB,MAAkF;AACrG,UAAM,QAAQ,MAAM,UAAU,KAAK,GAAG,EAAE,IAAI,MAAM,UAAU,KAAK,GAAG,CAAC,EAAE,IAAI,MAAM,UAAU,KAAK,GAAG,CAAC;AACpG,QAAI,MAAM,IAAI,GAAG;AACb,YAAM,IAAI,UAAU,wDAAwD;AAAA,IAChF;AACA,WAAO,EAAE,OAAO,OAAO,MAAM,QAAQ,KAAK,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,YAAY,MAAuG;AAC/G,UAAM,EAAE,KAAK,GAAG,GAAG,IAAI,UAAU,IAAI;AACrC,QAAI,OAAO,MAAM,OAAO,GAAG;AACvB,YAAM,IAAI,cAAc,yBAAyB;AAAA,IACrD;AACA,QAAI,KAAK,IAAI;AACT,YAAM,IAAI,cAAc,0CAA0C;AAAA,IACtE;AACA,UAAM,KAAM,MAAM,IAAK;AACvB,QAAI,OAAO,IAAI;AACX,YAAM,IAAI,cAAc,mCAAmC;AAAA,IAC/D;AACA,UAAM,KAAK,UAAU,MAAM,SAAS,EAAE;AACtC,UAAM,UAAU,GAAG,QAAQ,KAAK;AAChC,UAAM,MAAM,WAAW,SAAS;AAAA,MAC5B,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IACJ,CAAC;AACD,WAAO,EAAE,GAAG,SAAS,IAAI;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,gBAAgB,IAAkB,SAAuD;AACrF,kBAAc,EAAE;AAChB,UAAM,YAAY,QAAQ,sBAAsB,IAAI;AACpD,UAAM,MAAM,IAAI,WAAW,YAAY,mBAAmB,EAAE,CAAC;AAC7D,QAAI,IAAI;AACR,QAAI,QAAQ,qBAAqB;AAC7B,UAAI,GAAG,IAAI;AACX,UAAI,GAAG,IAAI;AACX,UAAI,GAAG,IAAI;AAAA,IACf;AACA,eAAW,IAAI,KAAK,CAAC;AACrB,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAY,OAAmB,SAAwD;AACnF,QAAI,IAAI;AACR,QAAI,QAAQ,oBAAoB;AAC5B,UAAI,MAAM,SAAS,GAAG;AAClB,cAAM,IAAI,UAAU,mDAAmD;AAAA,MAC3E;AACA,UAAI,MAAM,CAAC,MAAM,KAAQ,MAAM,CAAC,MAAM,KAAQ,MAAM,CAAC,MAAM,IAAM;AAC7D,cAAM,IAAI;AAAA,UACN,iEAAiE,MAAM,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,EAC3F,IAAI,OAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EACxC,KAAK,GAAG,CAAC;AAAA,QAClB;AAAA,MACJ;AACA,UAAI;AAAA,IACR;AACA,UAAM,EAAE,IAAI,WAAW,IAAI,UAAU,OAAO,CAAC;AAC7C,QAAI,eAAe,MAAM,QAAQ;AAC7B,YAAM,IAAI,UAAU,yCAAyC,MAAM,SAAS,UAAU,QAAQ;AAAA,IAClG;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,MAAqF;AACjG,UAAM,EAAE,IAAI,WAAW,OAAO,IAAI;AAClC,WAAO,WAAW,OAAO,EAAE,KAAK,GAAG,KAAK,WAAW,GAAG,GAAG,IAAI,QAAQ,UAAU,CAAC;AAAA,EACpF;AACJ;",
+  "names": []
+}

package/dist/esm/dtls/ecjpake/SchnorrZkp.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @license
+ * Copyright 2022-2026 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Schnorr zero-knowledge proof of knowledge of `x` such that `X = x*G`,
+ * matching the EC-JPAKE wire shape used by mbedTLS v3.6.6 / draft-cragie-tls-ecjpake-01.
+ *
+ * Wire fields:
+ * - `V`: ephemeral commitment point `v*G`, SEC1 uncompressed (`0x04 || X || Y`, 65 bytes for P-256).
+ * - `r`: scalar response `v - h*x mod n`, minimal big-endian (leading zeros stripped).
+ *
+ * The `h` challenge is hashed over `len(G)||G || len(V)||V || len(X)||X || len(ID)||ID`,
+ * each `len` a 4-byte big-endian integer (mbedTLS `ecjpake_hash`, ecjpake.c v3.6.6 §190-238).
+ */
+export interface SchnorrZkp {
+    /** SEC1-uncompressed encoding of `V = v*G`. */
+    V: Uint8Array;
+    /** Minimal big-endian encoding of `r = v - h*x mod n`. */
+    r: Uint8Array;
+}
+declare const Point: import("@noble/curves/abstract/weierstrass.js").WeierstrassPointCons<bigint>;
+/**
+ * Optional generator override. When omitted the curve base point `G` is used,
+ * matching round-1 ZKPs. Round 2 passes a composite point (e.g. `X1 + X2 + X3`)
+ * and must supply both `point` (for arithmetic) and `bytes` (for the hash
+ * preimage, since mbedTLS hashes the SEC1-uncompressed encoding verbatim).
+ */
+export interface SchnorrZkpGenerator {
+    point: InstanceType<typeof Point>;
+    bytes: Uint8Array;
+}
+export declare const SchnorrZkp: {
+    /**
+     * Generate a Schnorr ZKP for `(x, X = x*G)`. `G` defaults to the curve generator;
+     * pass `generator` for the round-2 composite-generator case.
+     *
+     * The caller must supply both `x` and the SEC1 encoding of `X` to keep the call site
+     * identical to the verification path (no implicit recomputation).
+     *
+     * `ephemeral` is the per-proof scalar `v`; in production it must be sampled
+     * uniformly from `[1, n-1]`. Tests pass a fixed value so the proof is deterministic.
+     */
+    generate(args: {
+        privateKey: bigint;
+        publicKey: Uint8Array;
+        ephemeral: bigint;
+        id: string;
+        generator?: SchnorrZkpGenerator;
+    }): SchnorrZkp;
+    verify(args: {
+        zkp: SchnorrZkp;
+        publicKey: Uint8Array;
+        id: string;
+        generator?: SchnorrZkpGenerator;
+    }): boolean;
+};
+export {};
+//# sourceMappingURL=SchnorrZkp.d.ts.map

package/dist/esm/dtls/ecjpake/SchnorrZkp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SchnorrZkp.d.ts","sourceRoot":"","sources":["../../../../src/dtls/ecjpake/SchnorrZkp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACvB,+CAA+C;IAC/C,CAAC,EAAE,UAAU,CAAC;IACd,0DAA0D;IAC1D,CAAC,EAAE,UAAU,CAAC;CACjB;AAED,QAAA,MAAM,KAAK,8EAAa,CAAC;AAiFzB;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAChC,KAAK,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IAClC,KAAK,EAAE,UAAU,CAAC;CACrB;AAYD,eAAO,MAAM,UAAU;IACnB;;;;;;;;;OASG;IACH,QAAQ,OAAO;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,UAAU,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,mBAAmB,CAAC;KACnC,GAAG,UAAU;IAkBd,MAAM,OAAO;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO;CA0BxG,CAAC"}