@moqtap/codec 0.9.0 → 0.10.0

package/CHANGELOG.md

@@ -7,6 +7,32 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 This file starts at 0.9.0. Earlier releases are in the git history.
 
+## [0.10.0] - 2026-09-03
+
+### Changed
+
+- **Breaking.** `authorization_token` is `readonly AuthorizationToken[]` on
+  drafts 11 through 20, on message parameters and on setup options. A single
+  token is a one-element array.
+
+  Section 10.2.2 and its equivalents: "The AUTHORIZATION TOKEN parameter MAY be
+  repeated within a message as long as the combination of Token Type and Token
+  Value are unique after resolving any aliases."
+
+- **Breaking.** `subgroup_filter`, `objectid_filter`, `priority_filter`,
+  `object_property_filter` and `track_property_filter` are
+  `readonly RangeFilter[]` on drafts 19 and 20, on message parameters and on
+  draft-20's `FILL_PARAMETERS`. A single filter is a one-element array.
+
+  Section 5.1.3 on draft-19 and 5.1.4 on draft-20: "All other filter parameters
+  MAY appear multiple times in a FETCH, SUBSCRIBE, SUBSCRIBE_TRACKS, or
+  REQUEST_UPDATE". One filter parameter carries one SetID and the sets are ORed,
+  so two alternatives over the same field need two parameters.
+
+- `@moqtap/test-vectors` raised to `^0.15.0`, where a `decoded` message spells
+  each Key-Value-Pair block as a list of entries in wire order rather than as a
+  map keyed by parameter name.
+
 ## [0.9.0] - 2026-09-03
 
 Draft-20 support, and a fix to draft-19 that changes which state machine a

package/dist/{chunk-KCH4BQXK.cjs → chunk-AQ445VV7.cjs}

@@ -1,4 +1,4 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
 
@@ -411,7 +411,7 @@ function encodeSetupParams(params, w) {
   let count = 0;
   if (params.path !== void 0) count++;
   if (params.max_request_id !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += _nullishCoalesce(_optionalChain([params, 'access', _2 => _2.authorization_token, 'optionalAccess', _3 => _3.length]), () => ( 0));
   if (params.max_auth_token_cache_size !== void 0) count++;
   if (params.unknown) count += params.unknown.length;
   w.writeVarInt(count);
@@ -425,9 +425,9 @@ function encodeSetupParams(params, w) {
     w.writeVarInt(SETUP_PARAM_MAX_REQUEST_ID);
     w.writeVarInt(params.max_request_id);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of _nullishCoalesce(params.authorization_token, () => ( []))) {
     w.writeVarInt(SETUP_PARAM_AUTHORIZATION_TOKEN);
-    encodeAuthorizationToken(params.authorization_token, w);
+    encodeAuthorizationToken(token, w);
   }
   if (params.max_auth_token_cache_size !== void 0) {
     w.writeVarInt(SETUP_PARAM_MAX_AUTH_TOKEN_CACHE_SIZE);
@@ -477,7 +477,10 @@ function decodeSetupParams(r) {
         const bytes = r.readBytes(length);
         result.path = textDecoder.decode(bytes);
       } else if (paramType === SETUP_PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length);
+        result.authorization_token = [
+          ..._nullishCoalesce(result.authorization_token, () => ( [])),
+          decodeAuthorizationToken(r, length)
+        ];
       } else {
         const bytes = r.readBytes(length);
         unknown.push({
@@ -494,16 +497,16 @@ function decodeSetupParams(r) {
 function encodeParams(params, w) {
   let count = params.unknown ? params.unknown.length : 0;
   if (params.delivery_timeout !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += _nullishCoalesce(_optionalChain([params, 'access', _4 => _4.authorization_token, 'optionalAccess', _5 => _5.length]), () => ( 0));
   if (params.max_cache_duration !== void 0) count++;
   w.writeVarInt(count);
   if (params.delivery_timeout !== void 0) {
     w.writeVarInt(PARAM_DELIVERY_TIMEOUT);
     w.writeVarInt(params.delivery_timeout);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of _nullishCoalesce(params.authorization_token, () => ( []))) {
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN);
-    encodeAuthorizationToken(params.authorization_token, w);
+    encodeAuthorizationToken(token, w);
   }
   if (params.max_cache_duration !== void 0) {
     w.writeVarInt(PARAM_MAX_CACHE_DURATION);
@@ -550,7 +553,10 @@ function decodeParams(r) {
     } else {
       const length = Number(r.readVarInt());
       if (paramType === PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length);
+        result.authorization_token = [
+          ..._nullishCoalesce(result.authorization_token, () => ( [])),
+          decodeAuthorizationToken(r, length)
+        ];
       } else {
         const bytes = r.readBytes(length);
         unknown.push({

package/dist/{chunk-UZO5Z2XT.cjs → chunk-BIBMDTU5.cjs}

@@ -935,12 +935,12 @@ function encodeSetupOptions(opts, writer) {
       }
     });
   }
-  if (opts.authorization_token !== void 0) {
+  for (const token of _nullishCoalesce(opts.authorization_token, () => ( []))) {
     entries.push({
       type: SETUP_OPT_AUTHORIZATION_TOKEN,
       encode: (w) => {
         const tmpW = new (0, _chunk4XLYCT5Qcjs.MoqtBufferWriter)(64);
-        encodeAuthorizationToken(opts.authorization_token, tmpW);
+        encodeAuthorizationToken(token, tmpW);
         const raw = tmpW.finish();
         w.writeVarInt(BigInt(raw.byteLength));
         w.writeBytes(raw);
@@ -1028,7 +1028,10 @@ function decodeSetupOptions(reader, payloadEnd) {
       if (optType === SETUP_OPT_PATH) {
         result.path = textDecoder.decode(bytes);
       } else if (optType === SETUP_OPT_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(new (0, _chunk4XLYCT5Qcjs.MoqtBufferReader)(bytes));
+        result.authorization_token = [
+          ..._nullishCoalesce(result.authorization_token, () => ( [])),
+          decodeAuthorizationToken(new (0, _chunk4XLYCT5Qcjs.MoqtBufferReader)(bytes))
+        ];
       } else if (optType === SETUP_OPT_AUTHORITY) {
         result.authority = textDecoder.decode(bytes);
       } else if (optType === SETUP_OPT_MOQT_IMPLEMENTATION) {
@@ -1138,12 +1141,12 @@ function encodeParams(params, writer) {
       encode: (w) => w.writeVarInt(params.object_delivery_timeout)
     });
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of _nullishCoalesce(params.authorization_token, () => ( []))) {
     entries.push({
       type: PARAM_AUTHORIZATION_TOKEN,
       encode: (w) => {
         const tmpW = new (0, _chunk4XLYCT5Qcjs.MoqtBufferWriter)(64);
-        encodeAuthorizationToken(params.authorization_token, tmpW);
+        encodeAuthorizationToken(token, tmpW);
         const raw = tmpW.finish();
         w.writeVarInt(BigInt(raw.byteLength));
         w.writeBytes(raw);
@@ -1283,7 +1286,10 @@ function decodeParams(reader, messageType) {
     } else if (paramType === PARAM_AUTHORIZATION_TOKEN) {
       const length = Number(reader.readVarInt());
       const bytes = reader.readBytes(length);
-      result.authorization_token = decodeAuthorizationToken(new (0, _chunk4XLYCT5Qcjs.MoqtBufferReader)(bytes));
+      result.authorization_token = [
+        ..._nullishCoalesce(result.authorization_token, () => ( [])),
+        decodeAuthorizationToken(new (0, _chunk4XLYCT5Qcjs.MoqtBufferReader)(bytes))
+      ];
     } else if (paramType === PARAM_RENDEZVOUS_TIMEOUT) {
       result.rendezvous_timeout = reader.readVarInt();
     } else if (paramType === PARAM_SUBGROUP_DELIVERY_TIMEOUT) {

package/dist/{chunk-23KRITJ6.js → chunk-BX2N7TZM.js}

@@ -411,7 +411,7 @@ function encodeSetupParams(params, w) {
   let count = 0;
   if (params.path !== void 0) count++;
   if (params.max_request_id !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.max_auth_token_cache_size !== void 0) count++;
   if (params.unknown) count += params.unknown.length;
   w.writeVarInt(count);
@@ -425,9 +425,9 @@ function encodeSetupParams(params, w) {
     w.writeVarInt(SETUP_PARAM_MAX_REQUEST_ID);
     w.writeVarInt(params.max_request_id);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     w.writeVarInt(SETUP_PARAM_AUTHORIZATION_TOKEN);
-    encodeAuthorizationToken(params.authorization_token, w);
+    encodeAuthorizationToken(token, w);
   }
   if (params.max_auth_token_cache_size !== void 0) {
     w.writeVarInt(SETUP_PARAM_MAX_AUTH_TOKEN_CACHE_SIZE);
@@ -477,7 +477,10 @@ function decodeSetupParams(r) {
         const bytes = r.readBytes(length);
         result.path = textDecoder.decode(bytes);
       } else if (paramType === SETUP_PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length);
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          decodeAuthorizationToken(r, length)
+        ];
       } else {
         const bytes = r.readBytes(length);
         unknown.push({
@@ -494,16 +497,16 @@ function decodeSetupParams(r) {
 function encodeParams(params, w) {
   let count = params.unknown ? params.unknown.length : 0;
   if (params.delivery_timeout !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.max_cache_duration !== void 0) count++;
   w.writeVarInt(count);
   if (params.delivery_timeout !== void 0) {
     w.writeVarInt(PARAM_DELIVERY_TIMEOUT);
     w.writeVarInt(params.delivery_timeout);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN);
-    encodeAuthorizationToken(params.authorization_token, w);
+    encodeAuthorizationToken(token, w);
   }
   if (params.max_cache_duration !== void 0) {
     w.writeVarInt(PARAM_MAX_CACHE_DURATION);
@@ -550,7 +553,10 @@ function decodeParams(r) {
     } else {
       const length = Number(r.readVarInt());
       if (paramType === PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length);
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          decodeAuthorizationToken(r, length)
+        ];
       } else {
         const bytes = r.readBytes(length);
         unknown.push({

package/dist/{chunk-XQGEOFGE.js → chunk-CF5DDD3Q.js}

@@ -801,7 +801,7 @@ function encodeSetupParams(params, writer) {
   if (params.role !== void 0) count++;
   if (params.path !== void 0) count++;
   if (params.max_request_id !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.authority !== void 0) count++;
   if (params.max_auth_token_cache_size !== void 0) count++;
   if (params.moqt_implementation !== void 0) count++;
@@ -821,9 +821,9 @@ function encodeSetupParams(params, writer) {
     writer.writeVarInt(PARAM_MAX_REQUEST_ID);
     writer.writeVarInt(params.max_request_id);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     writer.writeVarInt(PARAM_AUTHORIZATION_TOKEN);
-    const tok = params.authorization_token;
+    const tok = token;
     const tmpWriter = new BufferWriter(64);
     tmpWriter.writeVarInt(tok.alias_type);
     if (tok.token_type !== void 0) {
@@ -905,7 +905,10 @@ function decodeSetupParams(reader) {
             tok.token_value = new Uint8Array(tokenValue);
           }
         }
-        result.authorization_token = tok;
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          tok
+        ];
       } else if (paramType === PARAM_AUTHORITY) {
         result.authority = textDecoder.decode(bytes);
       } else if (paramType === PARAM_MOQT_IMPLEMENTATION) {
@@ -925,7 +928,7 @@ function decodeSetupParams(reader) {
 function encodeMessageParams(params, writer) {
   let count = 0;
   if (params.delivery_timeout !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.max_cache_duration !== void 0) count++;
   if (params.unknown) count += params.unknown.length;
   writer.writeVarInt(count);
@@ -933,9 +936,9 @@ function encodeMessageParams(params, writer) {
     writer.writeVarInt(PARAM_DELIVERY_TIMEOUT);
     writer.writeVarInt(params.delivery_timeout);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     writer.writeVarInt(PARAM_AUTHORIZATION_TOKEN);
-    const tok = params.authorization_token;
+    const tok = token;
     const tmpWriter = new BufferWriter(64);
     tmpWriter.writeVarInt(tok.alias_type);
     if (tok.token_type !== void 0) {
@@ -1001,7 +1004,10 @@ function decodeMessageParams(reader) {
             tok.token_value = new Uint8Array(tokenValue);
           }
         }
-        result.authorization_token = tok;
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          tok
+        ];
       } else {
         unknown.push({
           id: `0x${paramType.toString(16)}`,

package/dist/{chunk-YJGOD3Y4.js → chunk-FT3HDNIB.js}

@@ -1079,12 +1079,12 @@ function encodeSetupOptions(opts, writer) {
       }
     });
   }
-  if (opts.authorization_token !== void 0) {
+  for (const token of opts.authorization_token ?? []) {
     entries.push({
       type: SETUP_OPT_AUTHORIZATION_TOKEN,
       encode: (w) => {
         const tmpW = new MoqtBufferWriter(64);
-        encodeAuthorizationToken(opts.authorization_token, tmpW);
+        encodeAuthorizationToken(token, tmpW);
         const raw = tmpW.finish();
         w.writeVarInt(BigInt(raw.byteLength));
         w.writeBytes(raw);
@@ -1188,7 +1188,10 @@ function decodeSetupOptions(reader, payloadEnd) {
       if (optType === SETUP_OPT_PATH) {
         result.path = textDecoder.decode(bytes);
       } else if (optType === SETUP_OPT_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(new MoqtBufferReader(bytes));
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          decodeAuthorizationToken(new MoqtBufferReader(bytes))
+        ];
       } else if (optType === SETUP_OPT_AUTHORITY) {
         result.authority = textDecoder.decode(bytes);
       } else if (optType === SETUP_OPT_MOQT_IMPLEMENTATION) {
@@ -1469,12 +1472,12 @@ function encodeParams(params, writer) {
       encode: (w) => w.writeVarInt(params.object_delivery_timeout)
     });
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     entries.push({
       type: PARAM_AUTHORIZATION_TOKEN,
       encode: (w) => {
         const tmpW = new MoqtBufferWriter(64);
-        encodeAuthorizationToken(params.authorization_token, tmpW);
+        encodeAuthorizationToken(token, tmpW);
         const raw = tmpW.finish();
         w.writeVarInt(BigInt(raw.byteLength));
         w.writeBytes(raw);
@@ -1554,34 +1557,34 @@ function encodeParams(params, writer) {
       }
     });
   }
-  if (params.subgroup_filter !== void 0) {
+  for (const filter of params.subgroup_filter ?? []) {
     entries.push({
       type: PARAM_SUBGROUP_FILTER,
-      encode: (w) => encodeRangeFilter(params.subgroup_filter, false, w)
+      encode: (w) => encodeRangeFilter(filter, false, w)
     });
   }
-  if (params.objectid_filter !== void 0) {
+  for (const filter of params.objectid_filter ?? []) {
     entries.push({
       type: PARAM_OBJECTID_FILTER,
-      encode: (w) => encodeRangeFilter(params.objectid_filter, false, w)
+      encode: (w) => encodeRangeFilter(filter, false, w)
     });
   }
-  if (params.priority_filter !== void 0) {
+  for (const filter of params.priority_filter ?? []) {
     entries.push({
       type: PARAM_PRIORITY_FILTER,
-      encode: (w) => encodeRangeFilter(params.priority_filter, false, w)
+      encode: (w) => encodeRangeFilter(filter, false, w)
     });
   }
-  if (params.object_property_filter !== void 0) {
+  for (const filter of params.object_property_filter ?? []) {
     entries.push({
       type: PARAM_OBJECT_PROPERTY_FILTER,
-      encode: (w) => encodeRangeFilter(params.object_property_filter, true, w)
+      encode: (w) => encodeRangeFilter(filter, true, w)
     });
   }
-  if (params.track_property_filter !== void 0) {
+  for (const filter of params.track_property_filter ?? []) {
     entries.push({
       type: PARAM_TRACK_PROPERTY_FILTER,
-      encode: (w) => encodeRangeFilter(params.track_property_filter, true, w)
+      encode: (w) => encodeRangeFilter(filter, true, w)
     });
   }
   if (params.new_group_request !== void 0) {
@@ -1650,7 +1653,10 @@ function decodeParams(reader, messageType) {
     } else if (paramType === PARAM_AUTHORIZATION_TOKEN) {
       const length = Number(reader.readVarInt());
       const bytes = reader.readBytes(length);
-      result.authorization_token = decodeAuthorizationToken(new MoqtBufferReader(bytes));
+      result.authorization_token = [
+        ...result.authorization_token ?? [],
+        decodeAuthorizationToken(new MoqtBufferReader(bytes))
+      ];
     } else if (paramType === PARAM_RENDEZVOUS_TIMEOUT) {
       result.rendezvous_timeout = reader.readVarInt();
     } else if (paramType === PARAM_SUBGROUP_DELIVERY_TIMEOUT) {
@@ -1674,15 +1680,21 @@ function decodeParams(reader, messageType) {
     } else if (paramType === PARAM_FILL_PARAMETERS) {
       result.fill_parameters = decodeFillParameters(reader);
     } else if (paramType === PARAM_SUBGROUP_FILTER) {
-      result.subgroup_filter = decodeRangeFilter(reader, false);
+      result.subgroup_filter = [...result.subgroup_filter ?? [], decodeRangeFilter(reader, false)];
     } else if (paramType === PARAM_OBJECTID_FILTER) {
-      result.objectid_filter = decodeRangeFilter(reader, false);
+      result.objectid_filter = [...result.objectid_filter ?? [], decodeRangeFilter(reader, false)];
     } else if (paramType === PARAM_PRIORITY_FILTER) {
-      result.priority_filter = decodeRangeFilter(reader, false);
+      result.priority_filter = [...result.priority_filter ?? [], decodeRangeFilter(reader, false)];
     } else if (paramType === PARAM_OBJECT_PROPERTY_FILTER) {
-      result.object_property_filter = decodeRangeFilter(reader, true);
+      result.object_property_filter = [
+        ...result.object_property_filter ?? [],
+        decodeRangeFilter(reader, true)
+      ];
     } else if (paramType === PARAM_TRACK_PROPERTY_FILTER) {
-      result.track_property_filter = decodeRangeFilter(reader, true);
+      result.track_property_filter = [
+        ...result.track_property_filter ?? [],
+        decodeRangeFilter(reader, true)
+      ];
     } else if (paramType === PARAM_NEW_GROUP_REQUEST) {
       result.new_group_request = reader.readVarInt();
     } else if (paramType === PARAM_TRACK_NAMESPACE_PREFIX) {

package/dist/{chunk-TMXRYOBS.js → chunk-G53WYUXL.js}

@@ -776,7 +776,7 @@ function encodeSetupParams(params, writer) {
   let count = 0;
   if (params.path !== void 0) count++;
   if (params.max_request_id !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.max_auth_token_cache_size !== void 0) count++;
   if (params.authority !== void 0) count++;
   if (params.moqt_implementation !== void 0) count++;
@@ -792,10 +792,10 @@ function encodeSetupParams(params, writer) {
     writer.writeVarInt(SETUP_PARAM_MAX_REQUEST_ID);
     writer.writeVarInt(params.max_request_id);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     writer.writeVarInt(SETUP_PARAM_AUTHORIZATION_TOKEN);
     const tmpW = new BufferWriter(64);
-    encodeAuthorizationToken(params.authorization_token, tmpW);
+    encodeAuthorizationToken(token, tmpW);
     const raw = tmpW.finish();
     writer.writeVarInt(raw.byteLength);
     writer.writeBytes(raw);
@@ -861,7 +861,10 @@ function decodeSetupParams(reader) {
       if (paramType === SETUP_PARAM_PATH) {
         result.path = textDecoder.decode(bytes);
       } else if (paramType === SETUP_PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(new BufferReader(bytes));
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          decodeAuthorizationToken(new BufferReader(bytes))
+        ];
       } else if (paramType === SETUP_PARAM_AUTHORITY) {
         result.authority = textDecoder.decode(bytes);
       } else if (paramType === SETUP_PARAM_MOQT_IMPLEMENTATION) {
@@ -994,12 +997,12 @@ function encodeParams(params, writer) {
       encode: (w) => w.writeVarInt(params.delivery_timeout)
     });
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     entries.push({
       type: PARAM_AUTHORIZATION_TOKEN,
       encode: (w) => {
         const tmpW = new BufferWriter(64);
-        encodeAuthorizationToken(params.authorization_token, tmpW);
+        encodeAuthorizationToken(token, tmpW);
         const raw = tmpW.finish();
         w.writeVarInt(raw.byteLength);
         w.writeBytes(raw);
@@ -1121,7 +1124,10 @@ function decodeParams(reader) {
     } else if (paramType === PARAM_AUTHORIZATION_TOKEN) {
       const length = Number(reader.readVarInt());
       const tokenBytes = reader.readBytes(length);
-      result.authorization_token = decodeAuthorizationToken(new BufferReader(tokenBytes));
+      result.authorization_token = [
+        ...result.authorization_token ?? [],
+        decodeAuthorizationToken(new BufferReader(tokenBytes))
+      ];
     } else if (paramType === PARAM_MAX_CACHE_DURATION) {
       result.max_cache_duration = reader.readVarInt();
     } else if (paramType === PARAM_EXPIRES) {

package/dist/{chunk-JKMYAUGY.js → chunk-K2B3OVFK.js}

@@ -428,13 +428,13 @@ function decodeSetupParams(r) {
 }
 function encodeParams(params, w) {
   let count = params.unknown ? params.unknown.length : 0;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.delivery_timeout !== void 0) count++;
   if (params.max_cache_duration !== void 0) count++;
   w.writeVarInt(count);
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN);
-    const at = params.authorization_token;
+    const at = token;
     const tmpW = new BufferWriter(64);
     tmpW.writeVarInt(at.alias_type);
     tmpW.writeVarInt(at.token_type);
@@ -497,11 +497,14 @@ function decodeParams(r) {
         const token_type = r.readVarInt();
         const tokenBytesLen = length - (r.offset - startOff);
         const tokenBytes = r.readBytes(tokenBytesLen);
-        result.authorization_token = {
-          alias_type,
-          token_type,
-          token_value: tokenBytes
-        };
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          {
+            alias_type,
+            token_type,
+            token_value: tokenBytes
+          }
+        ];
       } else {
         const bytes = r.readBytes(length);
         unknown.push({

package/dist/{chunk-Q7NSUXXB.js → chunk-KGDVC4O6.js}

@@ -937,12 +937,12 @@ function encodeSetupOptions(opts, writer) {
       }
     });
   }
-  if (opts.authorization_token !== void 0) {
+  for (const token of opts.authorization_token ?? []) {
     entries.push({
       type: SETUP_OPT_AUTHORIZATION_TOKEN,
       encode: (w) => {
         const tmpW = new MoqtBufferWriter(64);
-        encodeAuthorizationToken(opts.authorization_token, tmpW);
+        encodeAuthorizationToken(token, tmpW);
         const raw = tmpW.finish();
         w.writeVarInt(BigInt(raw.byteLength));
         w.writeBytes(raw);
@@ -1046,7 +1046,10 @@ function decodeSetupOptions(reader, payloadEnd) {
       if (optType === SETUP_OPT_PATH) {
         result.path = textDecoder.decode(bytes);
       } else if (optType === SETUP_OPT_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(new MoqtBufferReader(bytes));
+        result.authorization_token = [
+          ...result.authorization_token ?? [],
+          decodeAuthorizationToken(new MoqtBufferReader(bytes))
+        ];
       } else if (optType === SETUP_OPT_AUTHORITY) {
         result.authority = textDecoder.decode(bytes);
       } else if (optType === SETUP_OPT_MOQT_IMPLEMENTATION) {
@@ -1213,12 +1216,12 @@ function encodeParams(params, writer) {
       encode: (w) => w.writeVarInt(params.object_delivery_timeout)
     });
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     entries.push({
       type: PARAM_AUTHORIZATION_TOKEN,
       encode: (w) => {
         const tmpW = new MoqtBufferWriter(64);
-        encodeAuthorizationToken(params.authorization_token, tmpW);
+        encodeAuthorizationToken(token, tmpW);
         const raw = tmpW.finish();
         w.writeVarInt(BigInt(raw.byteLength));
         w.writeBytes(raw);
@@ -1299,34 +1302,34 @@ function encodeParams(params, writer) {
       encode: (w) => w.writeUint8(Number(params.group_order))
     });
   }
-  if (params.subgroup_filter !== void 0) {
+  for (const filter of params.subgroup_filter ?? []) {
     entries.push({
       type: PARAM_SUBGROUP_FILTER,
-      encode: (w) => encodeRangeFilter(params.subgroup_filter, false, w)
+      encode: (w) => encodeRangeFilter(filter, false, w)
     });
   }
-  if (params.objectid_filter !== void 0) {
+  for (const filter of params.objectid_filter ?? []) {
     entries.push({
       type: PARAM_OBJECTID_FILTER,
-      encode: (w) => encodeRangeFilter(params.objectid_filter, false, w)
+      encode: (w) => encodeRangeFilter(filter, false, w)
     });
   }
-  if (params.priority_filter !== void 0) {
+  for (const filter of params.priority_filter ?? []) {
     entries.push({
       type: PARAM_PRIORITY_FILTER,
-      encode: (w) => encodeRangeFilter(params.priority_filter, false, w)
+      encode: (w) => encodeRangeFilter(filter, false, w)
     });
   }
-  if (params.object_property_filter !== void 0) {
+  for (const filter of params.object_property_filter ?? []) {
     entries.push({
       type: PARAM_OBJECT_PROPERTY_FILTER,
-      encode: (w) => encodeRangeFilter(params.object_property_filter, true, w)
+      encode: (w) => encodeRangeFilter(filter, true, w)
     });
   }
-  if (params.track_property_filter !== void 0) {
+  for (const filter of params.track_property_filter ?? []) {
     entries.push({
       type: PARAM_TRACK_PROPERTY_FILTER,
-      encode: (w) => encodeRangeFilter(params.track_property_filter, true, w)
+      encode: (w) => encodeRangeFilter(filter, true, w)
     });
   }
   if (params.new_group_request !== void 0) {
@@ -1388,7 +1391,10 @@ function decodeParams(reader, messageType) {
     } else if (paramType === PARAM_AUTHORIZATION_TOKEN) {
       const length = Number(reader.readVarInt());
       const bytes = reader.readBytes(length);
-      result.authorization_token = decodeAuthorizationToken(new MoqtBufferReader(bytes));
+      result.authorization_token = [
+        ...result.authorization_token ?? [],
+        decodeAuthorizationToken(new MoqtBufferReader(bytes))
+      ];
     } else if (paramType === PARAM_RENDEZVOUS_TIMEOUT) {
       result.rendezvous_timeout = reader.readVarInt();
     } else if (paramType === PARAM_SUBGROUP_DELIVERY_TIMEOUT) {
@@ -1423,15 +1429,21 @@ function decodeParams(reader, messageType) {
     } else if (paramType === PARAM_GROUP_ORDER) {
       result.group_order = BigInt(reader.readUint8());
     } else if (paramType === PARAM_SUBGROUP_FILTER) {
-      result.subgroup_filter = decodeRangeFilter(reader, false);
+      result.subgroup_filter = [...result.subgroup_filter ?? [], decodeRangeFilter(reader, false)];
     } else if (paramType === PARAM_OBJECTID_FILTER) {
-      result.objectid_filter = decodeRangeFilter(reader, false);
+      result.objectid_filter = [...result.objectid_filter ?? [], decodeRangeFilter(reader, false)];
     } else if (paramType === PARAM_PRIORITY_FILTER) {
-      result.priority_filter = decodeRangeFilter(reader, false);
+      result.priority_filter = [...result.priority_filter ?? [], decodeRangeFilter(reader, false)];
     } else if (paramType === PARAM_OBJECT_PROPERTY_FILTER) {
-      result.object_property_filter = decodeRangeFilter(reader, true);
+      result.object_property_filter = [
+        ...result.object_property_filter ?? [],
+        decodeRangeFilter(reader, true)
+      ];
     } else if (paramType === PARAM_TRACK_PROPERTY_FILTER) {
-      result.track_property_filter = decodeRangeFilter(reader, true);
+      result.track_property_filter = [
+        ...result.track_property_filter ?? [],
+        decodeRangeFilter(reader, true)
+      ];
     } else if (paramType === PARAM_NEW_GROUP_REQUEST) {
       result.new_group_request = reader.readVarInt();
     } else if (paramType === PARAM_TRACK_NAMESPACE_PREFIX) {