@moqtap/codec 0.9.0 → 0.11.0

package/dist/{chunk-7RE6KSIY.cjs → chunk-Q5JQGHWY.cjs}

@@ -368,7 +368,6 @@ var Draft16SessionFSM = (_class = class {
     });
     return { ok: true, phase: this._phase, sideEffects };
   }
-  // Renamed from handleSubscribeUpdate in draft-15
   handleRequestUpdate(message, sideEffects) {
     const err = this.requireReady(message.type);
     if (err) return { ok: false, violation: err };

package/dist/{chunk-23KRITJ6.js → chunk-SQTUQY5E.js}

@@ -3,8 +3,10 @@ import {
   BufferWriter,
   DecodeError,
   bytesToHex,
-  hexToBytes
-} from "./chunk-KLPWJU6W.js";
+  hexToBytes,
+  recordAuthValueSpan,
+  redactWith
+} from "./chunk-YRZQVNZO.js";
 
 // src/drafts/draft13/data-streams.ts
 var FETCH_STREAM_TYPE = 0x05n;
@@ -411,7 +413,7 @@ function encodeSetupParams(params, w) {
   let count = 0;
   if (params.path !== void 0) count++;
   if (params.max_request_id !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.max_auth_token_cache_size !== void 0) count++;
   if (params.unknown) count += params.unknown.length;
   w.writeVarInt(count);
@@ -425,9 +427,9 @@ function encodeSetupParams(params, w) {
     w.writeVarInt(SETUP_PARAM_MAX_REQUEST_ID);
     w.writeVarInt(params.max_request_id);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     w.writeVarInt(SETUP_PARAM_AUTHORIZATION_TOKEN);
-    encodeAuthorizationToken(params.authorization_token, w);
+    encodeAuthorizationToken(token, w);
   }
   if (params.max_auth_token_cache_size !== void 0) {
     w.writeVarInt(SETUP_PARAM_MAX_AUTH_TOKEN_CACHE_SIZE);
@@ -477,7 +479,10 @@ function decodeSetupParams(r) {
         const bytes = r.readBytes(length);
         result.path = textDecoder.decode(bytes);
       } else if (paramType === SETUP_PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length);
+        const valueStart = r.offset;
+        const token = decodeAuthorizationToken(r, length);
+        noteAuthTokenValue(valueStart, length, token.token_value);
+        result.authorization_token = [...result.authorization_token ?? [], token];
       } else {
         const bytes = r.readBytes(length);
         unknown.push({
@@ -494,16 +499,16 @@ function decodeSetupParams(r) {
 function encodeParams(params, w) {
   let count = params.unknown ? params.unknown.length : 0;
   if (params.delivery_timeout !== void 0) count++;
-  if (params.authorization_token !== void 0) count++;
+  count += params.authorization_token?.length ?? 0;
   if (params.max_cache_duration !== void 0) count++;
   w.writeVarInt(count);
   if (params.delivery_timeout !== void 0) {
     w.writeVarInt(PARAM_DELIVERY_TIMEOUT);
     w.writeVarInt(params.delivery_timeout);
   }
-  if (params.authorization_token !== void 0) {
+  for (const token of params.authorization_token ?? []) {
     w.writeVarInt(PARAM_AUTHORIZATION_TOKEN);
-    encodeAuthorizationToken(params.authorization_token, w);
+    encodeAuthorizationToken(token, w);
   }
   if (params.max_cache_duration !== void 0) {
     w.writeVarInt(PARAM_MAX_CACHE_DURATION);
@@ -550,7 +555,10 @@ function decodeParams(r) {
     } else {
       const length = Number(r.readVarInt());
       if (paramType === PARAM_AUTHORIZATION_TOKEN) {
-        result.authorization_token = decodeAuthorizationToken(r, length);
+        const valueStart = r.offset;
+        const token = decodeAuthorizationToken(r, length);
+        noteAuthTokenValue(valueStart, length, token.token_value);
+        result.authorization_token = [...result.authorization_token ?? [], token];
       } else {
         const bytes = r.readBytes(length);
         unknown.push({
@@ -1360,6 +1368,23 @@ function createDraft13Codec() {
     createStreamDecoder
   };
 }
+function noteAuthTokenValue(valueStart, valueLength, value) {
+  if (value === void 0 || value.byteLength === 0) return;
+  recordAuthValueSpan(valueStart + valueLength - value.byteLength, value.byteLength);
+}
+function redactAuthTokens(bytes) {
+  let payloadStart;
+  try {
+    const probe = new BufferReader(bytes);
+    probe.readVarInt();
+    probe.readUint8();
+    probe.readUint8();
+    payloadStart = probe.offset;
+  } catch {
+    return { bytes, redacted: 0, incomplete: false, decoded: false };
+  }
+  return redactWith(bytes, payloadStart, () => decodeMessage(bytes).ok);
+}
 
 export {
   encodeSubgroupStream,
@@ -1409,5 +1434,6 @@ export {
   encodeMessage,
   decodeMessage,
   createStreamDecoder,
-  createDraft13Codec
+  createDraft13Codec,
+  redactAuthTokens
 };