@moqtap/codec 0.10.0 → 0.12.0

package/dist/{chunk-KLPWJU6W.js → chunk-YRZQVNZO.js}

@@ -1,3 +1,49 @@
+// src/core/auth-redaction.ts
+var REDACTION_FILL = 0;
+var spans = null;
+function recordAuthValueSpan(start, length) {
+  if (spans === null || length <= 0) return;
+  spans.push(start, length);
+}
+function withoutAuthValueSpans(decode) {
+  const saved = spans;
+  spans = null;
+  try {
+    return decode();
+  } finally {
+    spans = saved;
+  }
+}
+function redactWith(frame, payloadStart, decode) {
+  const outer = spans;
+  spans = [];
+  let captured;
+  let decoded = false;
+  try {
+    decoded = decode();
+  } catch {
+  } finally {
+    captured = spans;
+    spans = outer;
+  }
+  if (captured.length === 0) return { bytes: frame, redacted: 0, incomplete: false, decoded };
+  let out = null;
+  let redacted = 0;
+  let incomplete = false;
+  for (let i = 0; i < captured.length; i += 2) {
+    const start = payloadStart + captured[i];
+    const length = captured[i + 1];
+    if (payloadStart < 0 || start < 0 || start + length > frame.length) {
+      incomplete = true;
+      continue;
+    }
+    if (out === null) out = frame.slice();
+    out.fill(REDACTION_FILL, start, start + length);
+    redacted++;
+  }
+  return { bytes: out ?? frame, redacted, incomplete, decoded };
+}
+
 // src/core/types.ts
 var DecodeError = class extends Error {
   code;
@@ -318,6 +364,10 @@ function hexToBytes(hex) {
 }
 
 export {
+  REDACTION_FILL,
+  recordAuthValueSpan,
+  withoutAuthValueSpans,
+  redactWith,
   DecodeError,
   BufferReader,
   MoqtBufferReader,

package/dist/{codec-DOmAmFkI.d.ts → codec-B-oUU-cp.d.ts}

@@ -1,4 +1,5 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.js';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
 import { D as Draft13Message, S as SubgroupStream, c as DatagramObject, F as FetchStream, b as Draft13DataStream } from './types-DjxexghA.js';
 
 /**
@@ -25,5 +26,23 @@ interface Draft13Codec extends BaseCodec<Draft13Message> {
     createStreamDecoder(): TransformStream<Uint8Array, Draft13Message>;
 }
 declare function createDraft13Codec(): Draft13Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-13 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft13Codec as D, createStreamDecoder as a, createDraft13Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft13Codec as D, createStreamDecoder as a, createDraft13Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-DNmiG2e0.d.cts → codec-B3RpCI9k.d.cts}

@@ -1,4 +1,5 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.cjs';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.cjs';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.cjs';
 import { D as Draft13Message, S as SubgroupStream, c as DatagramObject, F as FetchStream, b as Draft13DataStream } from './types-DjxexghA.cjs';
 
 /**
@@ -25,5 +26,23 @@ interface Draft13Codec extends BaseCodec<Draft13Message> {
     createStreamDecoder(): TransformStream<Uint8Array, Draft13Message>;
 }
 declare function createDraft13Codec(): Draft13Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-13 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft13Codec as D, createStreamDecoder as a, createDraft13Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft13Codec as D, createStreamDecoder as a, createDraft13Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/codec-B5pcOS3m.d.cts

@@ -0,0 +1,38 @@
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.cjs';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.cjs';
+import { D as Draft07Message, S as SubgroupStream, b as DatagramObject, F as FetchStream } from './types-Dl4IaAHR.cjs';
+
+interface Draft07Codec extends BaseCodec<Draft07Message> {
+    readonly draft: '07';
+    encodeVarInt(value: number | bigint): Uint8Array;
+    decodeVarInt(bytes: Uint8Array, offset?: number): DecodeResult<bigint>;
+    encodeSubgroupStream(stream: SubgroupStream): Uint8Array;
+    decodeSubgroupStream(bytes: Uint8Array): DecodeResult<SubgroupStream>;
+    encodeDatagram(dg: DatagramObject): Uint8Array;
+    decodeDatagram(bytes: Uint8Array): DecodeResult<DatagramObject>;
+    encodeFetchStream(stream: FetchStream): Uint8Array;
+    decodeFetchStream(bytes: Uint8Array): DecodeResult<FetchStream>;
+    createStreamDecoder(): TransformStream<Uint8Array, Draft07Message>;
+}
+declare function createDraft07Codec(): Draft07Codec;
+
+/**
+ * Overwrite every AUTHORIZATION_INFO value in a draft-07 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
+
+export { type Draft07Codec as D, createDraft07Codec as c, redactAuthTokens as r };

package/dist/{codec-BNy5syCU.d.ts → codec-BLjxwK2f.d.ts}

@@ -1,4 +1,5 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.js';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
 import { D as Draft09Message, S as SubgroupStream, c as DatagramObject, d as DatagramStatusObject, F as FetchStream, b as Draft09DataStream } from './types-B3g5G9KP.js';
 
 declare function encodeMessage(message: Draft09Message): Uint8Array;
@@ -19,5 +20,23 @@ interface Draft09Codec extends BaseCodec<Draft09Message> {
     createStreamDecoder(): TransformStream<Uint8Array, Draft09Message>;
 }
 declare function createDraft09Codec(): Draft09Codec;
+/**
+ * Overwrite every AUTHORIZATION_INFO value in a draft-09 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft09Codec as D, createStreamDecoder as a, createDraft09Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft09Codec as D, createStreamDecoder as a, createDraft09Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-alVA27Uc.d.ts → codec-BV3CL_3m.d.ts}

@@ -1,4 +1,5 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.js';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
 import { D as Draft11Message, S as SubgroupStream, c as DatagramObject, F as FetchStream, b as Draft11DataStream } from './types-D0kTgUuL.js';
 
 /**
@@ -23,5 +24,23 @@ interface Draft11Codec extends BaseCodec<Draft11Message> {
     createStreamDecoder(): TransformStream<Uint8Array, Draft11Message>;
 }
 declare function createDraft11Codec(): Draft11Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-11 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft11Codec as D, createStreamDecoder as a, createDraft11Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft11Codec as D, createStreamDecoder as a, createDraft11Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-Czejcmxr.d.cts → codec-BYCDWgED.d.ts}

@@ -1,5 +1,6 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.cjs';
-import { D as Draft17Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft17DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-D4bmW8rY.cjs';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
+import { D as Draft17Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft17DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-DAnalt5K.js';
 
 /**
  * Encode a draft-17 control message with type(varint) + length(uint16 BE) + payload.
@@ -26,5 +27,23 @@ interface Draft17Codec extends BaseCodec<Draft17Message> {
     createDataStreamDecoder(): TransformStream<Uint8Array, DataStreamEvent>;
 }
 declare function createDraft17Codec(): Draft17Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-17 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft17Codec as D, createStreamDecoder as a, createDraft17Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft17Codec as D, createStreamDecoder as a, createDraft17Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-DaXjRrOV.d.ts → codec-Bwqq7ZQT.d.ts}

@@ -1,5 +1,6 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.js';
-import { D as Draft18Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft18DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-Bg86GGVZ.js';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
+import { D as Draft18Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft18DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-DxXNP32l.js';
 
 /**
  * Encode a draft-18 control message with type(varint) + length(uint16 BE) + payload.
@@ -26,5 +27,23 @@ interface Draft18Codec extends BaseCodec<Draft18Message> {
     createDataStreamDecoder(): TransformStream<Uint8Array, DataStreamEvent>;
 }
 declare function createDraft18Codec(): Draft18Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-18 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft18Codec as D, createStreamDecoder as a, createDraft18Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft18Codec as D, createStreamDecoder as a, createDraft18Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-CFWu5KVT.d.cts → codec-BzWxOFby.d.cts}

@@ -1,5 +1,6 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.cjs';
-import { D as Draft20Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft20DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-CY-QWxd-.cjs';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.cjs';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.cjs';
+import { D as Draft20Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft20DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-CwN7AEoL.cjs';
 
 /**
  * `PUBLISH_DONE.Stream Count` "unknown" sentinel — draft-20 Section 10.12.
@@ -45,5 +46,23 @@ interface Draft20Codec extends BaseCodec<Draft20Message> {
     createDataStreamDecoder(): TransformStream<Uint8Array, DataStreamEvent>;
 }
 declare function createDraft20Codec(): Draft20Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-20 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the tokens were so the caller never has to hold
+ * a frame that contains one. A caller that also wants the message should decode
+ * the **redacted** frame with {@link decodeMessage}, which then cannot produce a
+ * token value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft20Codec as D, UNKNOWN_STREAM_COUNT as U, createStreamDecoder as a, createDraft20Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft20Codec as D, UNKNOWN_STREAM_COUNT as U, createStreamDecoder as a, createDraft20Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/codec-C-nJhNNl.d.ts

@@ -0,0 +1,38 @@
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
+import { D as Draft07Message, S as SubgroupStream, b as DatagramObject, F as FetchStream } from './types-Dl4IaAHR.js';
+
+interface Draft07Codec extends BaseCodec<Draft07Message> {
+    readonly draft: '07';
+    encodeVarInt(value: number | bigint): Uint8Array;
+    decodeVarInt(bytes: Uint8Array, offset?: number): DecodeResult<bigint>;
+    encodeSubgroupStream(stream: SubgroupStream): Uint8Array;
+    decodeSubgroupStream(bytes: Uint8Array): DecodeResult<SubgroupStream>;
+    encodeDatagram(dg: DatagramObject): Uint8Array;
+    decodeDatagram(bytes: Uint8Array): DecodeResult<DatagramObject>;
+    encodeFetchStream(stream: FetchStream): Uint8Array;
+    decodeFetchStream(bytes: Uint8Array): DecodeResult<FetchStream>;
+    createStreamDecoder(): TransformStream<Uint8Array, Draft07Message>;
+}
+declare function createDraft07Codec(): Draft07Codec;
+
+/**
+ * Overwrite every AUTHORIZATION_INFO value in a draft-07 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
+
+export { type Draft07Codec as D, createDraft07Codec as c, redactAuthTokens as r };

package/dist/{codec-EvybrBuY.d.cts → codec-C11VEPbQ.d.cts}

@@ -1,4 +1,5 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.cjs';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.cjs';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.cjs';
 import { D as Draft11Message, S as SubgroupStream, c as DatagramObject, F as FetchStream, b as Draft11DataStream } from './types-D0kTgUuL.cjs';
 
 /**
@@ -23,5 +24,23 @@ interface Draft11Codec extends BaseCodec<Draft11Message> {
     createStreamDecoder(): TransformStream<Uint8Array, Draft11Message>;
 }
 declare function createDraft11Codec(): Draft11Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-11 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft11Codec as D, createStreamDecoder as a, createDraft11Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft11Codec as D, createStreamDecoder as a, createDraft11Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/codec-C9U0Vzy9.d.cts

@@ -0,0 +1,68 @@
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.cjs';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.cjs';
+import { D as Draft21Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft21DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-DDwidj2d.cjs';
+
+/**
+ * `PUBLISH_DONE.Stream Count` "unknown" sentinel — draft-21 Section 9.9.
+ *
+ * draft-19 used `2^62 - 1`; draft-20 raised it to `2^64 - 1`. Both are
+ * encodable because MOQT's vi64 (Section 8.1) is a leading-ones-length
+ * prefix reaching a full 64 bits in nine bytes — it is NOT the QUIC varint and
+ * has no `2^62 - 1` ceiling. On the wire this is `ff` followed by eight `ff`
+ * bytes.
+ *
+ * JS `bigint` is required: `2^64 - 1` does not fit a `number`, and comparing a
+ * `Number(stream_count)` against this sentinel would be wrong for every value
+ * above `2^53`.
+ *
+ * Note (SPEC-DELTA Section 11 Q14): unlike the old `2^62 - 1` marker, this
+ * value is also a well-formed exact count. There is no longer any headroom
+ * that separates "unknown" from "absurdly many streams"; the draft does not
+ * acknowledge the collision.
+ */
+declare const UNKNOWN_STREAM_COUNT = 18446744073709551615n;
+/**
+ * Encode a draft-21 control message: type (vi64) + length (uint16 BE) + payload.
+ */
+declare function encodeMessage(message: Draft21Message): Uint8Array;
+/**
+ * Decode a draft-21 control message from bytes (type + uint16 length + payload).
+ */
+declare function decodeMessage(bytes: Uint8Array): DecodeResult<Draft21Message>;
+
+declare function createStreamDecoder(): TransformStream<Uint8Array, Draft21Message>;
+interface Draft21Codec extends BaseCodec<Draft21Message> {
+    readonly draft: '21';
+    encodeSubgroupStream(stream: SubgroupStream): Uint8Array;
+    encodeDatagram(dg: DatagramObject): Uint8Array;
+    encodeFetchStream(stream: FetchStream): Uint8Array;
+    decodeSubgroupStream(bytes: Uint8Array): DecodeResult<SubgroupStream>;
+    decodeDatagram(bytes: Uint8Array): DecodeResult<DatagramObject>;
+    decodeFetchStream(bytes: Uint8Array): DecodeResult<FetchStream>;
+    decodeDataStream(streamType: 'subgroup' | 'datagram' | 'fetch', bytes: Uint8Array): DecodeResult<Draft21DataStream>;
+    createStreamDecoder(): TransformStream<Uint8Array, Draft21Message>;
+    createSubgroupStreamDecoder(): TransformStream<Uint8Array, SubgroupStreamHeader | ObjectPayload>;
+    createFetchStreamDecoder(): TransformStream<Uint8Array, FetchStreamHeader | ObjectPayload>;
+    createDataStreamDecoder(): TransformStream<Uint8Array, DataStreamEvent>;
+}
+declare function createDraft21Codec(): Draft21Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-21 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the tokens were so the caller never has to hold
+ * a frame that contains one. A caller that also wants the message should decode
+ * the **redacted** frame with {@link decodeMessage}, which then cannot produce a
+ * token value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
+
+export { type Draft21Codec as D, UNKNOWN_STREAM_COUNT as U, createStreamDecoder as a, createDraft21Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-Cm3D261p.d.ts → codec-CCx22jnd.d.ts}

@@ -1,4 +1,5 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.js';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
 import { D as Draft14Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft14DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-CmqT0jUf.js';
 
 /**
@@ -31,5 +32,23 @@ interface Draft14Codec extends BaseCodec<Draft14Message> {
     createDataStreamDecoder(): TransformStream<Uint8Array, DataStreamEvent>;
 }
 declare function createDraft14Codec(): Draft14Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-14 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft14Codec as D, createStreamDecoder as a, createDraft14Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft14Codec as D, createStreamDecoder as a, createDraft14Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-CwZ6OCPP.d.ts → codec-CP3zkfTv.d.ts}

@@ -1,5 +1,6 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.js';
-import { D as Draft20Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft20DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-CY-QWxd-.js';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
+import { D as Draft20Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft20DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-CwN7AEoL.js';
 
 /**
  * `PUBLISH_DONE.Stream Count` "unknown" sentinel — draft-20 Section 10.12.
@@ -45,5 +46,23 @@ interface Draft20Codec extends BaseCodec<Draft20Message> {
     createDataStreamDecoder(): TransformStream<Uint8Array, DataStreamEvent>;
 }
 declare function createDraft20Codec(): Draft20Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-20 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the tokens were so the caller never has to hold
+ * a frame that contains one. A caller that also wants the message should decode
+ * the **redacted** frame with {@link decodeMessage}, which then cannot produce a
+ * token value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft20Codec as D, UNKNOWN_STREAM_COUNT as U, createStreamDecoder as a, createDraft20Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft20Codec as D, UNKNOWN_STREAM_COUNT as U, createStreamDecoder as a, createDraft20Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-BxQTybUX.d.cts → codec-CRmOLDpt.d.ts}

@@ -1,5 +1,6 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.cjs';
-import { D as Draft15Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft15DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-pShrs3fN.cjs';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.js';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.js';
+import { D as Draft15Message, f as SubgroupStream, d as DatagramObject, e as FetchStream, c as Draft15DataStream, S as SubgroupStreamHeader, O as ObjectPayload, F as FetchStreamHeader, b as DataStreamEvent } from './types-CuibHYcf.js';
 
 /**
  * Encode a draft-15 control message with type(varint) + length(uint16 BE) + payload.
@@ -30,5 +31,23 @@ interface Draft15Codec extends BaseCodec<Draft15Message> {
     createDataStreamDecoder(): TransformStream<Uint8Array, DataStreamEvent>;
 }
 declare function createDraft15Codec(): Draft15Codec;
+/**
+ * Overwrite every Authorization Token value in a draft-15 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft15Codec as D, createStreamDecoder as a, createDraft15Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft15Codec as D, createStreamDecoder as a, createDraft15Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };

package/dist/{codec-DzkdW4kO.d.cts → codec-CUu56DDU.d.cts}

@@ -1,4 +1,5 @@
-import { B as BaseCodec, b as DecodeResult } from './types-DG5_iKuv.cjs';
+import { A as AuthRedaction } from './auth-redaction-B9JJOlIY.cjs';
+import { B as BaseCodec, b as DecodeResult } from './types-2NisMA8_.cjs';
 import { D as Draft08Message, S as SubgroupStream, c as DatagramObject, d as DatagramStatusObject, F as FetchStream, b as Draft08DataStream } from './types-jV1yDDBA.cjs';
 
 /**
@@ -27,5 +28,23 @@ interface Draft08Codec extends BaseCodec<Draft08Message> {
     createStreamDecoder(): TransformStream<Uint8Array, Draft08Message>;
 }
 declare function createDraft08Codec(): Draft08Codec;
+/**
+ * Overwrite every AUTHORIZATION_INFO value in a draft-08 control frame.
+ *
+ * One decode, whose *output is discarded*: the point is not to read the
+ * message, it is to learn where the credentials were so the caller never has to
+ * hold a frame that contains one. A caller that also wants the message should
+ * decode the **redacted** frame with {@link decodeMessage}, which then cannot
+ * produce a value because there is no longer one in the bytes.
+ *
+ * A frame that fails to decode is still redacted as far as the decode got. That
+ * is the useful direction to fail in: a value that was read is a value that was
+ * exposed, whatever went wrong after it.
+ *
+ * See {@link AuthRedaction.incomplete} for the one result a caller must not
+ * treat as clean, and {@link AuthRedaction.decoded} for the residual it cannot
+ * close.
+ */
+declare function redactAuthTokens(bytes: Uint8Array): AuthRedaction;
 
-export { type Draft08Codec as D, createStreamDecoder as a, createDraft08Codec as c, decodeMessage as d, encodeMessage as e };
+export { type Draft08Codec as D, createStreamDecoder as a, createDraft08Codec as c, decodeMessage as d, encodeMessage as e, redactAuthTokens as r };