@moqtap/codec 0.9.0 → 0.10.0

package/dist/{types-CWCQwuvy.d.cts → types-CY-QWxd-.d.cts}

@@ -11,7 +11,7 @@ interface AuthorizationToken {
 }
 interface Draft20SetupOptions {
     path?: string;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     max_filter_ranges?: bigint;
@@ -80,14 +80,14 @@ interface Draft20FillParameters {
     subscriber_priority?: bigint;
     location_filter?: LocationFilter;
     group_order?: bigint;
-    subgroup_filter?: RangeFilter;
-    objectid_filter?: RangeFilter;
-    priority_filter?: RangeFilter;
-    object_property_filter?: RangeFilter;
+    subgroup_filter?: readonly RangeFilter[];
+    objectid_filter?: readonly RangeFilter[];
+    priority_filter?: readonly RangeFilter[];
+    object_property_filter?: readonly RangeFilter[];
 }
 interface Draft20Params {
     object_delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     rendezvous_timeout?: bigint;
     subgroup_delivery_timeout?: bigint;
     expires?: bigint;
@@ -98,11 +98,11 @@ interface Draft20Params {
     location_filter?: LocationFilter;
     group_order?: bigint;
     fill_parameters?: Draft20FillParameters;
-    subgroup_filter?: RangeFilter;
-    objectid_filter?: RangeFilter;
-    priority_filter?: RangeFilter;
-    object_property_filter?: RangeFilter;
-    track_property_filter?: RangeFilter;
+    subgroup_filter?: readonly RangeFilter[];
+    objectid_filter?: readonly RangeFilter[];
+    priority_filter?: readonly RangeFilter[];
+    object_property_filter?: readonly RangeFilter[];
+    track_property_filter?: readonly RangeFilter[];
     new_group_request?: bigint;
     track_namespace_prefix?: string[];
     include_properties?: bigint;

package/dist/{types-CWCQwuvy.d.ts → types-CY-QWxd-.d.ts}

@@ -11,7 +11,7 @@ interface AuthorizationToken {
 }
 interface Draft20SetupOptions {
     path?: string;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     max_filter_ranges?: bigint;
@@ -80,14 +80,14 @@ interface Draft20FillParameters {
     subscriber_priority?: bigint;
     location_filter?: LocationFilter;
     group_order?: bigint;
-    subgroup_filter?: RangeFilter;
-    objectid_filter?: RangeFilter;
-    priority_filter?: RangeFilter;
-    object_property_filter?: RangeFilter;
+    subgroup_filter?: readonly RangeFilter[];
+    objectid_filter?: readonly RangeFilter[];
+    priority_filter?: readonly RangeFilter[];
+    object_property_filter?: readonly RangeFilter[];
 }
 interface Draft20Params {
     object_delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     rendezvous_timeout?: bigint;
     subgroup_delivery_timeout?: bigint;
     expires?: bigint;
@@ -98,11 +98,11 @@ interface Draft20Params {
     location_filter?: LocationFilter;
     group_order?: bigint;
     fill_parameters?: Draft20FillParameters;
-    subgroup_filter?: RangeFilter;
-    objectid_filter?: RangeFilter;
-    priority_filter?: RangeFilter;
-    object_property_filter?: RangeFilter;
-    track_property_filter?: RangeFilter;
+    subgroup_filter?: readonly RangeFilter[];
+    objectid_filter?: readonly RangeFilter[];
+    priority_filter?: readonly RangeFilter[];
+    object_property_filter?: readonly RangeFilter[];
+    track_property_filter?: readonly RangeFilter[];
     new_group_request?: bigint;
     track_namespace_prefix?: string[];
     include_properties?: bigint;

package/dist/{types-Cm9fjeYC.d.cts → types-CZTzbIzQ.d.cts}

@@ -12,7 +12,7 @@ interface AuthorizationToken {
 interface Draft16SetupParams {
     path?: string;
     max_request_id?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     moqt_implementation?: string;
@@ -36,7 +36,7 @@ interface Draft16TrackExtensions {
 }
 interface Draft16Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     expires?: bigint;
     largest_object?: LargestObject;

package/dist/{types-Cm9fjeYC.d.ts → types-CZTzbIzQ.d.ts}

@@ -12,7 +12,7 @@ interface AuthorizationToken {
 interface Draft16SetupParams {
     path?: string;
     max_request_id?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     moqt_implementation?: string;
@@ -36,7 +36,7 @@ interface Draft16TrackExtensions {
 }
 interface Draft16Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     expires?: bigint;
     largest_object?: LargestObject;

package/dist/{types-HI_bbXka.d.cts → types-CmqT0jUf.d.cts}

@@ -36,7 +36,7 @@ interface Draft14Params {
     max_auth_token_cache_size?: bigint;
     moqt_implementation?: string;
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     unknown?: UnknownParam[];
 }

package/dist/{types-HI_bbXka.d.ts → types-CmqT0jUf.d.ts}

@@ -36,7 +36,7 @@ interface Draft14Params {
     max_auth_token_cache_size?: bigint;
     moqt_implementation?: string;
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     unknown?: UnknownParam[];
 }

package/dist/{types-Ck45Ex5S.d.cts → types-D0kTgUuL.d.cts}

@@ -14,7 +14,7 @@ interface Draft11SetupParams {
     unknown?: UnknownParam[];
 }
 interface Draft11Params {
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     delivery_timeout?: bigint;
     max_cache_duration?: bigint;
     unknown?: UnknownParam[];

package/dist/{types-Ck45Ex5S.d.ts → types-D0kTgUuL.d.ts}

@@ -14,7 +14,7 @@ interface Draft11SetupParams {
     unknown?: UnknownParam[];
 }
 interface Draft11Params {
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     delivery_timeout?: bigint;
     max_cache_duration?: bigint;
     unknown?: UnknownParam[];

package/dist/{types-D9eiB_9A.d.cts → types-D4bmW8rY.d.cts}

@@ -11,7 +11,7 @@ interface AuthorizationToken {
 }
 interface Draft17SetupOptions {
     path?: string;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     moqt_implementation?: string;
@@ -29,7 +29,7 @@ interface LargestObject {
 }
 interface Draft17Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     rendezvous_timeout?: bigint;
     expires?: bigint;
     largest_object?: LargestObject;

package/dist/{types-D9eiB_9A.d.ts → types-D4bmW8rY.d.ts}

@@ -11,7 +11,7 @@ interface AuthorizationToken {
 }
 interface Draft17SetupOptions {
     path?: string;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     moqt_implementation?: string;
@@ -29,7 +29,7 @@ interface LargestObject {
 }
 interface Draft17Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     rendezvous_timeout?: bigint;
     expires?: bigint;
     largest_object?: LargestObject;

package/dist/{types-CXlSn0I9.d.cts → types-DjxexghA.d.cts}

@@ -12,13 +12,13 @@ interface AuthorizationToken {
 interface Draft13SetupParams {
     path?: string;
     max_request_id?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     unknown?: UnknownParam[];
 }
 interface Draft13Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     unknown?: UnknownParam[];
 }

package/dist/{types-CXlSn0I9.d.ts → types-DjxexghA.d.ts}

@@ -12,13 +12,13 @@ interface AuthorizationToken {
 interface Draft13SetupParams {
     path?: string;
     max_request_id?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     unknown?: UnknownParam[];
 }
 interface Draft13Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     unknown?: UnknownParam[];
 }

package/dist/{types-CPaYBsMG.d.cts → types-pShrs3fN.d.cts}

@@ -12,7 +12,7 @@ interface AuthorizationToken {
 interface Draft15SetupParams {
     path?: string;
     max_request_id?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     moqt_implementation?: string;
@@ -30,7 +30,7 @@ interface LargestObject {
 }
 interface Draft15Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     expires?: bigint;
     largest_object?: LargestObject;

package/dist/{types-CPaYBsMG.d.ts → types-pShrs3fN.d.ts}

@@ -12,7 +12,7 @@ interface AuthorizationToken {
 interface Draft15SetupParams {
     path?: string;
     max_request_id?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_auth_token_cache_size?: bigint;
     authority?: string;
     moqt_implementation?: string;
@@ -30,7 +30,7 @@ interface LargestObject {
 }
 interface Draft15Params {
     delivery_timeout?: bigint;
-    authorization_token?: AuthorizationToken;
+    authorization_token?: readonly AuthorizationToken[];
     max_cache_duration?: bigint;
     expires?: bigint;
     largest_object?: LargestObject;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moqtap/codec",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "MoQT wire-format codec and session state machine — multi-draft, zero dependencies",
   "type": "module",
   "license": "MIT",
@@ -221,7 +221,7 @@
     "test": "vitest run"
   },
   "devDependencies": {
-    "@moqtap/test-vectors": "^0.13.0",
+    "@moqtap/test-vectors": "^0.15.0",
     "tsup": "^8.0.0",
     "typescript": "^5.5.0",
     "vitest": "^3.0.0"

package/src/drafts/draft11/codec.ts

@@ -146,15 +146,15 @@ function decodeSetupParams(r: BufferReader): Draft11SetupParams {
 
 function encodeParams(params: Draft11Params, w: BufferWriter): void {
   let count = params.unknown ? params.unknown.length : 0
-  if (params.authorization_token !== undefined) count++
+  count += params.authorization_token?.length ?? 0
   if (params.delivery_timeout !== undefined) count++
   if (params.max_cache_duration !== undefined) count++
   w.writeVarInt(count)
 
-  if (params.authorization_token !== undefined) {
+  for (const token of params.authorization_token ?? []) {
     // AUTHORIZATION_TOKEN = 0x01 (odd → length-prefixed)
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN)
-    const at = params.authorization_token
+    const at = token
     const tmpW = new BufferWriter(64)
     tmpW.writeVarInt(at.alias_type)
     tmpW.writeVarInt(at.token_type)
@@ -227,11 +227,14 @@ function decodeParams(r: BufferReader): Draft11Params {
         const token_type = r.readVarInt()
         const tokenBytesLen = length - (r.offset - startOff)
         const tokenBytes = r.readBytes(tokenBytesLen)
-        result.authorization_token = {
-          alias_type,
-          token_type,
-          token_value: tokenBytes,
-        }
+        result.authorization_token = [
+          ...(result.authorization_token ?? []),
+          {
+            alias_type,
+            token_type,
+            token_value: tokenBytes,
+          },
+        ]
       } else {
         const bytes = r.readBytes(length)
         unknown.push({

package/src/drafts/draft11/types.ts

@@ -24,7 +24,7 @@ export interface Draft11SetupParams {
 
 // Version-specific parameters — even/odd convention
 export interface Draft11Params {
-  authorization_token?: AuthorizationToken // 0x01 odd
+  authorization_token?: readonly AuthorizationToken[] // 0x01 odd
   delivery_timeout?: bigint // 0x02 even
   max_cache_duration?: bigint // 0x04 even
   unknown?: UnknownParam[]

package/src/drafts/draft12/codec.ts

@@ -73,7 +73,7 @@ function encodeSetupParams(params: Draft12SetupParams, w: BufferWriter): void {
   let count = 0
   if (params.path !== undefined) count++
   if (params.max_request_id !== undefined) count++
-  if (params.authorization_token !== undefined) count++
+  count += params.authorization_token?.length ?? 0
   if (params.unknown) count += params.unknown.length
 
   w.writeVarInt(count)
@@ -88,9 +88,9 @@ function encodeSetupParams(params: Draft12SetupParams, w: BufferWriter): void {
     w.writeVarInt(SETUP_PARAM_MAX_REQUEST_ID)
     w.writeVarInt(params.max_request_id)
   }
-  if (params.authorization_token !== undefined) {
+  for (const token of params.authorization_token ?? []) {
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN)
-    const at = params.authorization_token
+    const at = token
     const tmpW = new BufferWriter(64)
     tmpW.writeVarInt(at.alias_type)
     tmpW.writeVarInt(at.token_type)
@@ -148,11 +148,14 @@ function decodeSetupParams(r: BufferReader): Draft12SetupParams {
         const token_type = r.readVarInt()
         const tokenBytesLen = length - (r.offset - startOff)
         const tokenBytes = r.readBytes(tokenBytesLen)
-        result.authorization_token = {
-          alias_type,
-          token_type,
-          token_value: tokenBytes,
-        }
+        result.authorization_token = [
+          ...(result.authorization_token ?? []),
+          {
+            alias_type,
+            token_type,
+            token_value: tokenBytes,
+          },
+        ]
       } else {
         const bytes = r.readBytes(length)
         unknown.push({
@@ -174,7 +177,7 @@ function decodeSetupParams(r: BufferReader): Draft12SetupParams {
 function encodeParams(params: Draft12Params, w: BufferWriter): void {
   let count = params.unknown ? params.unknown.length : 0
   if (params.delivery_timeout !== undefined) count++
-  if (params.authorization_token !== undefined) count++
+  count += params.authorization_token?.length ?? 0
   if (params.max_cache_duration !== undefined) count++
   w.writeVarInt(count)
 
@@ -183,10 +186,10 @@ function encodeParams(params: Draft12Params, w: BufferWriter): void {
     w.writeVarInt(PARAM_DELIVERY_TIMEOUT)
     w.writeVarInt(params.delivery_timeout)
   }
-  if (params.authorization_token !== undefined) {
+  for (const token of params.authorization_token ?? []) {
     // AUTHORIZATION_TOKEN = 0x03 (odd → length-prefixed)
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN)
-    const at = params.authorization_token
+    const at = token
     const tmpW = new BufferWriter(64)
     tmpW.writeVarInt(at.alias_type)
     tmpW.writeVarInt(at.token_type)
@@ -254,11 +257,14 @@ function decodeParams(r: BufferReader): Draft12Params {
         const token_type = r.readVarInt()
         const tokenBytesLen = length - (r.offset - startOff)
         const tokenBytes = r.readBytes(tokenBytesLen)
-        result.authorization_token = {
-          alias_type,
-          token_type,
-          token_value: tokenBytes,
-        }
+        result.authorization_token = [
+          ...(result.authorization_token ?? []),
+          {
+            alias_type,
+            token_type,
+            token_value: tokenBytes,
+          },
+        ]
       } else {
         const bytes = r.readBytes(length)
         unknown.push({

package/src/drafts/draft12/types.ts

@@ -19,14 +19,14 @@ export interface AuthorizationToken {
 export interface Draft12SetupParams {
   path?: string // 0x01 odd
   max_request_id?: bigint // 0x02 even
-  authorization_token?: AuthorizationToken // 0x03 odd
+  authorization_token?: readonly AuthorizationToken[] // 0x03 odd
   unknown?: UnknownParam[]
 }
 
 // Version-specific parameters — even/odd convention
 export interface Draft12Params {
   delivery_timeout?: bigint // 0x02 even
-  authorization_token?: AuthorizationToken // 0x03 odd
+  authorization_token?: readonly AuthorizationToken[] // 0x03 odd
   max_cache_duration?: bigint // 0x04 even
   unknown?: UnknownParam[]
 }

package/src/drafts/draft13/codec.ts

@@ -115,7 +115,7 @@ function encodeSetupParams(params: Draft13SetupParams, w: BufferWriter): void {
   let count = 0
   if (params.path !== undefined) count++
   if (params.max_request_id !== undefined) count++
-  if (params.authorization_token !== undefined) count++
+  count += params.authorization_token?.length ?? 0
   if (params.max_auth_token_cache_size !== undefined) count++
   if (params.unknown) count += params.unknown.length
 
@@ -131,9 +131,9 @@ function encodeSetupParams(params: Draft13SetupParams, w: BufferWriter): void {
     w.writeVarInt(SETUP_PARAM_MAX_REQUEST_ID)
     w.writeVarInt(params.max_request_id)
   }
-  if (params.authorization_token !== undefined) {
+  for (const token of params.authorization_token ?? []) {
     w.writeVarInt(SETUP_PARAM_AUTHORIZATION_TOKEN)
-    encodeAuthorizationToken(params.authorization_token, w)
+    encodeAuthorizationToken(token, w)
   }
   if (params.max_auth_token_cache_size !== undefined) {
     w.writeVarInt(SETUP_PARAM_MAX_AUTH_TOKEN_CACHE_SIZE)
@@ -185,7 +185,10 @@ function decodeSetupParams(r: BufferReader): Draft13SetupParams {
         const bytes = r.readBytes(length)
         result.path = textDecoder.decode(bytes)
       } else if (paramType === SETUP_PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length)
+        result.authorization_token = [
+          ...(result.authorization_token ?? []),
+          decodeAuthorizationToken(r, length),
+        ]
       } else {
         const bytes = r.readBytes(length)
         unknown.push({
@@ -207,7 +210,7 @@ function decodeSetupParams(r: BufferReader): Draft13SetupParams {
 function encodeParams(params: Draft13Params, w: BufferWriter): void {
   let count = params.unknown ? params.unknown.length : 0
   if (params.delivery_timeout !== undefined) count++
-  if (params.authorization_token !== undefined) count++
+  count += params.authorization_token?.length ?? 0
   if (params.max_cache_duration !== undefined) count++
   w.writeVarInt(count)
 
@@ -216,10 +219,10 @@ function encodeParams(params: Draft13Params, w: BufferWriter): void {
     w.writeVarInt(PARAM_DELIVERY_TIMEOUT)
     w.writeVarInt(params.delivery_timeout)
   }
-  if (params.authorization_token !== undefined) {
+  for (const token of params.authorization_token ?? []) {
     // AUTHORIZATION_TOKEN = 0x03 (odd → length-prefixed)
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN)
-    encodeAuthorizationToken(params.authorization_token, w)
+    encodeAuthorizationToken(token, w)
   }
   if (params.max_cache_duration !== undefined) {
     // MAX_CACHE_DURATION = 0x04 (even → bare varint)
@@ -275,7 +278,10 @@ function decodeParams(r: BufferReader): Draft13Params {
       const length = Number(r.readVarInt())
 
       if (paramType === PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length)
+        result.authorization_token = [
+          ...(result.authorization_token ?? []),
+          decodeAuthorizationToken(r, length),
+        ]
       } else {
         const bytes = r.readBytes(length)
         unknown.push({

package/src/drafts/draft13/types.ts

@@ -21,7 +21,7 @@ export interface AuthorizationToken {
 export interface Draft13SetupParams {
   path?: string // 0x01 odd
   max_request_id?: bigint // 0x02 even
-  authorization_token?: AuthorizationToken // 0x03 odd
+  authorization_token?: readonly AuthorizationToken[] // 0x03 odd
   max_auth_token_cache_size?: bigint // 0x04 even
   unknown?: UnknownParam[]
 }
@@ -29,7 +29,7 @@ export interface Draft13SetupParams {
 // Version-specific parameters — even/odd convention
 export interface Draft13Params {
   delivery_timeout?: bigint // 0x02 even
-  authorization_token?: AuthorizationToken // 0x03 odd
+  authorization_token?: readonly AuthorizationToken[] // 0x03 odd
   max_cache_duration?: bigint // 0x04 even
   unknown?: UnknownParam[]
 }

package/src/drafts/draft14/codec.ts

@@ -78,7 +78,7 @@ function encodeSetupParams(params: Draft14Params, writer: BufferWriter): void {
   if (params.role !== undefined) count++
   if (params.path !== undefined) count++
   if (params.max_request_id !== undefined) count++
-  if (params.authorization_token !== undefined) count++
+  count += params.authorization_token?.length ?? 0
   if (params.authority !== undefined) count++
   if (params.max_auth_token_cache_size !== undefined) count++
   if (params.moqt_implementation !== undefined) count++
@@ -100,9 +100,9 @@ function encodeSetupParams(params: Draft14Params, writer: BufferWriter): void {
     writer.writeVarInt(PARAM_MAX_REQUEST_ID)
     writer.writeVarInt(params.max_request_id)
   }
-  if (params.authorization_token !== undefined) {
+  for (const token of params.authorization_token ?? []) {
     writer.writeVarInt(PARAM_AUTHORIZATION_TOKEN)
-    const tok = params.authorization_token
+    const tok = token
     const tmpWriter = new BufferWriter(64)
     tmpWriter.writeVarInt(tok.alias_type)
     if (tok.token_type !== undefined) {
@@ -187,7 +187,10 @@ function decodeSetupParams(reader: BufferReader): Draft14Params {
             tok.token_value = new Uint8Array(tokenValue)
           }
         }
-        result.authorization_token = tok as unknown as AuthorizationToken
+        result.authorization_token = [
+          ...(result.authorization_token ?? []),
+          tok as unknown as AuthorizationToken,
+        ]
       } else if (paramType === PARAM_AUTHORITY) {
         result.authority = textDecoder.decode(bytes)
       } else if (paramType === PARAM_MOQT_IMPLEMENTATION) {
@@ -209,7 +212,7 @@ function decodeSetupParams(reader: BufferReader): Draft14Params {
 function encodeMessageParams(params: Draft14Params, writer: BufferWriter): void {
   let count = 0
   if (params.delivery_timeout !== undefined) count++
-  if (params.authorization_token !== undefined) count++
+  count += params.authorization_token?.length ?? 0
   if (params.max_cache_duration !== undefined) count++
   if (params.unknown) count += params.unknown.length
 
@@ -219,9 +222,9 @@ function encodeMessageParams(params: Draft14Params, writer: BufferWriter): void
     writer.writeVarInt(PARAM_DELIVERY_TIMEOUT)
     writer.writeVarInt(params.delivery_timeout)
   }
-  if (params.authorization_token !== undefined) {
+  for (const token of params.authorization_token ?? []) {
     writer.writeVarInt(PARAM_AUTHORIZATION_TOKEN)
-    const tok = params.authorization_token
+    const tok = token
     const tmpWriter = new BufferWriter(64)
     tmpWriter.writeVarInt(tok.alias_type)
     if (tok.token_type !== undefined) {
@@ -290,7 +293,10 @@ function decodeMessageParams(reader: BufferReader): Draft14Params {
             tok.token_value = new Uint8Array(tokenValue)
           }
         }
-        result.authorization_token = tok as unknown as AuthorizationToken
+        result.authorization_token = [
+          ...(result.authorization_token ?? []),
+          tok as unknown as AuthorizationToken,
+        ]
       } else {
         unknown.push({
           id: `0x${paramType.toString(16)}`,

package/src/drafts/draft14/types.ts

@@ -47,7 +47,7 @@ export interface Draft14Params {
   moqt_implementation?: string // 0x07 odd, length-prefixed UTF-8
   // Message parameters (SUBSCRIBE, PUBLISH, etc.)
   delivery_timeout?: bigint
-  authorization_token?: AuthorizationToken
+  authorization_token?: readonly AuthorizationToken[]
   max_cache_duration?: bigint
   // Unknown / extension
   unknown?: UnknownParam[]