@tribe-nest/media-protocol 1.0.0

package/build/mp-build/token.d.ts

@@ -0,0 +1,66 @@
+import { type MediaControlClaims, type MediaJoinClaims, type VerifyResult } from "./claims";
+/**
+ * Ed25519-signed join and control tokens.
+ *
+ * ## Why asymmetric, when LiveKit uses a shared secret
+ *
+ * LiveKit signs with an API key + secret, which is HMAC: every party that can
+ * verify can also mint. Media nodes are public-facing, accept connections from
+ * anyone, and there are many of them. Under a shared secret, compromising ONE
+ * node yields the ability to mint a token for any room in the system -
+ * including a Mandantengespräch.
+ *
+ * So the backend holds a PRIVATE key and signs; nodes hold only PUBLIC keys and
+ * verify. A compromised node can verify and nothing else. The cost is a keypair
+ * instead of a string.
+ *
+ * ## Why this file is Node-only, and the package root is not
+ *
+ * Signing and verifying need `node:crypto`. The client SDK imports the wire
+ * frames and grant TYPES and never verifies anything - it only carries a token
+ * it was handed - so those live at the package root and stay isomorphic. This
+ * module is a separate entry point (`@tribe-nest/media-protocol/token`) so
+ * importing a frame type cannot drag `crypto` into a browser bundle.
+ *
+ * ## Why verification is PURE
+ *
+ * No I/O, no clock unless you pass one, no Redis. Replay defence needs state
+ * and therefore lives in the media server (`auth/replayGuard`), composed
+ * around this. Keeping the crypto and claim checks free of state is what lets
+ * the golden vectors pin exactly one code path on both sides of the wire.
+ */
+export type PublicKeyring = Record<string, string>;
+export type PrivateKeyring = Record<string, string>;
+/** Default ceiling on `exp - iat`. A join ticket, not a session. */
+export declare const MAX_TOKEN_TTL_SECONDS: number;
+export declare function signJoinToken(privateKeyPem: string, kid: string, claims: MediaJoinClaims): string;
+export declare function signControlToken(privateKeyPem: string, kid: string, claims: MediaControlClaims): string;
+type VerifyArgs = {
+    token: string;
+    keys: PublicKeyring;
+    issuer: string;
+    maxTtlSeconds?: number;
+    /** Seconds since epoch. Injected so vectors are deterministic. */
+    nowSeconds?: number;
+    skewSeconds?: number;
+    /** When given, the token's room must match. */
+    expectedRoom?: string;
+};
+export declare function verifyJoinToken(args: VerifyArgs): VerifyResult<MediaJoinClaims>;
+export declare function verifyControlToken(args: VerifyArgs): VerifyResult<MediaControlClaims>;
+/**
+ * Boot guard for a media node.
+ *
+ * A node must hold verification keys ONLY. If a private key reaches a node's
+ * keyring - a copy-paste, a shared secrets bundle - that node can mint, and the
+ * whole reason for the asymmetric split is gone silently. This makes it a
+ * refusal to start rather than a latent capability.
+ */
+export declare function assertPublicKeyringIsPublicOnly(keys: PublicKeyring): void;
+/** Convenience for tooling and tests; not used at runtime. */
+export declare function generateKeypair(): {
+    publicKey: string;
+    privateKey: string;
+};
+export {};
+//# sourceMappingURL=token.d.ts.map

package/build/mp-build/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAGlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAMpD,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,QAAU,CAAC;AAe7C,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,MAAM,CAgBjG;AAED,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAIvG;AAED,KAAK,UAAU,GAAG;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAuEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,CAqB/E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAWrF;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAazE;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,IAAI;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAM3E"}

package/build/mp-build/token.js

@@ -0,0 +1,208 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_TOKEN_TTL_SECONDS = void 0;
+exports.signJoinToken = signJoinToken;
+exports.signControlToken = signControlToken;
+exports.verifyJoinToken = verifyJoinToken;
+exports.verifyControlToken = verifyControlToken;
+exports.assertPublicKeyringIsPublicOnly = assertPublicKeyringIsPublicOnly;
+exports.generateKeypair = generateKeypair;
+const crypto = __importStar(require("crypto"));
+const claims_1 = require("./claims");
+const grants_1 = require("./grants");
+const ALG = "EdDSA";
+const b64u = (b) => b.toString("base64url");
+const fromB64u = (s) => Buffer.from(s, "base64url");
+/** Default ceiling on `exp - iat`. A join ticket, not a session. */
+exports.MAX_TOKEN_TTL_SECONDS = 15 * 60;
+function encodeSegment(value) {
+    return b64u(Buffer.from(JSON.stringify(value), "utf8"));
+}
+function signCompact(privateKeyPem, kid, payload) {
+    const header = encodeSegment({ alg: ALG, typ: "JWT", kid });
+    const body = encodeSegment(payload);
+    const signingInput = `${header}.${body}`;
+    // For Ed25519 the digest algorithm is null: the curve prescribes it.
+    const signature = crypto.sign(null, Buffer.from(signingInput, "utf8"), privateKeyPem);
+    return `${signingInput}.${b64u(signature)}`;
+}
+function signJoinToken(privateKeyPem, kid, claims) {
+    const parsed = claims_1.mediaJoinClaimsSchema.parse(claims);
+    // Mint-time refusals. A token that should never exist is better stopped here
+    // than relied upon to be refused by every future verifier.
+    const grantCheck = (0, grants_1.grantsAreValidForKind)(parsed.grants, parsed.kind);
+    if (grantCheck !== true)
+        throw new Error(`refusing to mint: ${grantCheck}`);
+    if (parsed.exp <= parsed.iat)
+        throw new Error("refusing to mint: exp is not after iat");
+    if (parsed.exp - parsed.iat > exports.MAX_TOKEN_TTL_SECONDS) {
+        throw new Error(`refusing to mint: ttl exceeds ${exports.MAX_TOKEN_TTL_SECONDS}s`);
+    }
+    if (parsed.transport !== "webrtc" && parsed.kind === "human") {
+        throw new Error("refusing to mint: a human participant may only use a webrtc transport");
+    }
+    return signCompact(privateKeyPem, kid, parsed);
+}
+function signControlToken(privateKeyPem, kid, claims) {
+    const parsed = claims_1.mediaControlClaimsSchema.parse(claims);
+    if (parsed.exp <= parsed.iat)
+        throw new Error("refusing to mint: exp is not after iat");
+    return signCompact(privateKeyPem, kid, parsed);
+}
+function verifyCompact(args, audience) {
+    const parts = args.token.split(".");
+    if (parts.length !== 3)
+        return { ok: false, reason: "malformed" };
+    const [headerSeg, bodySeg, sigSeg] = parts;
+    let header;
+    try {
+        header = JSON.parse(fromB64u(headerSeg).toString("utf8"));
+    }
+    catch {
+        return { ok: false, reason: "malformed" };
+    }
+    // Only ever EdDSA. Accepting whatever the token names is the classic JWT
+    // algorithm-confusion hole, and `none` is the worst case of it.
+    if (header.alg !== ALG)
+        return { ok: false, reason: "malformed" };
+    if (typeof header.kid !== "string" || !header.kid)
+        return { ok: false, reason: "malformed" };
+    const publicKeyPem = args.keys[header.kid];
+    if (!publicKeyPem)
+        return { ok: false, reason: "unknown_kid" };
+    // Signature BEFORE claims: never parse a payload that has not been shown to
+    // come from us.
+    let signatureValid = false;
+    try {
+        signatureValid = crypto.verify(null, Buffer.from(`${headerSeg}.${bodySeg}`, "utf8"), publicKeyPem, fromB64u(sigSeg));
+    }
+    catch {
+        return { ok: false, reason: "bad_signature" };
+    }
+    if (!signatureValid)
+        return { ok: false, reason: "bad_signature" };
+    let payload;
+    try {
+        payload = JSON.parse(fromB64u(bodySeg).toString("utf8"));
+    }
+    catch {
+        return { ok: false, reason: "malformed" };
+    }
+    const asRecord = payload;
+    if (asRecord?.aud !== audience)
+        return { ok: false, reason: "wrong_audience" };
+    if (asRecord?.iss !== args.issuer)
+        return { ok: false, reason: "wrong_issuer" };
+    return { ok: true, payload, kid: header.kid };
+}
+function checkTiming(claims, args) {
+    const now = args.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const skew = args.skewSeconds ?? 30;
+    const maxTtl = args.maxTtlSeconds ?? exports.MAX_TOKEN_TTL_SECONDS;
+    if (claims.exp + skew <= now)
+        return "expired";
+    if (claims.nbf !== undefined && claims.nbf - skew > now)
+        return "not_yet_valid";
+    // A long-lived token is a stolen credential with a long life, so the ceiling
+    // is enforced at VERIFY too - not only at mint, which a compromised minter
+    // would simply skip.
+    if (claims.exp - claims.iat > maxTtl)
+        return "ttl_too_long";
+    return null;
+}
+function verifyJoinToken(args) {
+    const base = verifyCompact(args, "media");
+    if (!base.ok)
+        return base;
+    const parsed = claims_1.mediaJoinClaimsSchema.safeParse(base.payload);
+    // `.strict()` fires here. A token carrying `subscribeOnly` instead of
+    // `subscribe` is rejected outright rather than read as "no rule, so
+    // everyone" - which is how an information barrier fails open.
+    if (!parsed.success)
+        return { ok: false, reason: "bad_claims" };
+    const timing = checkTiming(parsed.data, args);
+    if (timing)
+        return { ok: false, reason: timing };
+    if (args.expectedRoom !== undefined && parsed.data.room !== args.expectedRoom) {
+        return { ok: false, reason: "wrong_room" };
+    }
+    if ((0, grants_1.grantsAreValidForKind)(parsed.data.grants, parsed.data.kind) !== true) {
+        return { ok: false, reason: "bad_claims" };
+    }
+    return { ok: true, claims: parsed.data, kid: base.kid };
+}
+function verifyControlToken(args) {
+    const base = verifyCompact(args, "control");
+    if (!base.ok)
+        return base;
+    const parsed = claims_1.mediaControlClaimsSchema.safeParse(base.payload);
+    if (!parsed.success)
+        return { ok: false, reason: "bad_claims" };
+    const timing = checkTiming(parsed.data, args);
+    if (timing)
+        return { ok: false, reason: timing };
+    return { ok: true, claims: parsed.data, kid: base.kid };
+}
+/**
+ * Boot guard for a media node.
+ *
+ * A node must hold verification keys ONLY. If a private key reaches a node's
+ * keyring - a copy-paste, a shared secrets bundle - that node can mint, and the
+ * whole reason for the asymmetric split is gone silently. This makes it a
+ * refusal to start rather than a latent capability.
+ */
+function assertPublicKeyringIsPublicOnly(keys) {
+    for (const [kid, pem] of Object.entries(keys)) {
+        if (/PRIVATE KEY/.test(pem)) {
+            throw new Error(`media token keyring "${kid}" contains a PRIVATE key. Nodes verify and must never be able to mint.`);
+        }
+        try {
+            crypto.createPublicKey(pem);
+        }
+        catch {
+            throw new Error(`media token keyring "${kid}" is not a readable public key`);
+        }
+    }
+}
+/** Convenience for tooling and tests; not used at runtime. */
+function generateKeypair() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
+    return {
+        publicKey: publicKey.export({ type: "spki", format: "pem" }).toString(),
+        privateKey: privateKey.export({ type: "pkcs8", format: "pem" }).toString(),
+    };
+}
+//# sourceMappingURL=token.js.map

package/build/mp-build/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEA,sCAgBC;AAED,4CAIC;AAmFD,0CAqBC;AAED,gDAWC;AAUD,0EAaC;AAGD,0CAMC;AA5OD,+CAAiC;AACjC,qCAOkB;AAClB,qCAAiD;AAoCjD,MAAM,GAAG,GAAG,OAAO,CAAC;AACpB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AAE5D,oEAAoE;AACvD,QAAA,qBAAqB,GAAG,EAAE,GAAG,EAAE,CAAC;AAE7C,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,aAAqB,EAAE,GAAW,EAAE,OAAgB;IACvE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;IACzC,qEAAqE;IACrE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IACtF,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAgB,aAAa,CAAC,aAAqB,EAAE,GAAW,EAAE,MAAuB;IACvF,MAAM,MAAM,GAAG,8BAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEnD,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,UAAU,GAAG,IAAA,8BAAqB,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxF,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,6BAAqB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,6BAAqB,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,gBAAgB,CAAC,aAAqB,EAAE,GAAW,EAAE,MAA0B;IAC7F,MAAM,MAAM,GAAG,iCAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxF,OAAO,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAcD,SAAS,aAAa,CACpB,IAAgB,EAChB,QAA6B;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAC;IAEvE,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAE7F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE/D,4EAA4E;IAC5E,gBAAgB;IAChB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,CAAC,MAAM,CAC5B,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,EAC9C,YAAY,EACZ,QAAQ,CAAC,MAAM,CAAC,CACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAEnE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,OAAkC,CAAC;IACpD,IAAI,QAAQ,EAAE,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/E,IAAI,QAAQ,EAAE,GAAG,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAEhF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAClB,MAAkD,EAClD,IAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,6BAAqB,CAAC;IAE3D,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,GAAG;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG;QAAE,OAAO,eAAe,CAAC;IAChF,6EAA6E;IAC7E,2EAA2E;IAC3E,qBAAqB;IACrB,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM;QAAE,OAAO,cAAc,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,eAAe,CAAC,IAAgB;IAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,8BAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,sEAAsE;IACtE,oEAAoE;IACpE,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEhE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,IAAA,8BAAqB,EAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1D,CAAC;AAED,SAAgB,kBAAkB,CAAC,IAAgB;IACjD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,iCAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEhE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,+BAA+B,CAAC,IAAmB;IACjE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,wEAAwE,CACpG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,gCAAgC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,SAAgB,eAAe;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;AACJ,CAAC"}

package/build/mp-build/version.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Bumped when a frame shape changes in a way an older peer cannot parse.
+ *
+ * The client sends it on connect and a node refuses a mismatch outright, rather
+ * than negotiating: a half-understood signalling session fails later, somewhere
+ * else, and looks like a media bug.
+ */
+export declare const MEDIA_PROTOCOL_VERSION: 1;
+//# sourceMappingURL=version.d.ts.map

package/build/mp-build/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC"}

package/build/mp-build/version.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEDIA_PROTOCOL_VERSION = void 0;
+/**
+ * Bumped when a frame shape changes in a way an older peer cannot parse.
+ *
+ * The client sends it on connect and a node refuses a mismatch outright, rather
+ * than negotiating: a half-understood signalling session fails later, somewhere
+ * else, and looks like a media bug.
+ */
+exports.MEDIA_PROTOCOL_VERSION = 1;
+//# sourceMappingURL=version.js.map

package/build/mp-build/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAA;;;;;;GAMG;AACU,QAAA,sBAAsB,GAAG,CAAU,CAAC"}

package/build/token.d.ts

@@ -0,0 +1,66 @@
+import { type MediaControlClaims, type MediaJoinClaims, type VerifyResult } from "./claims";
+/**
+ * Ed25519-signed join and control tokens.
+ *
+ * ## Why asymmetric, when LiveKit uses a shared secret
+ *
+ * LiveKit signs with an API key + secret, which is HMAC: every party that can
+ * verify can also mint. Media nodes are public-facing, accept connections from
+ * anyone, and there are many of them. Under a shared secret, compromising ONE
+ * node yields the ability to mint a token for any room in the system -
+ * including a Mandantengespräch.
+ *
+ * So the backend holds a PRIVATE key and signs; nodes hold only PUBLIC keys and
+ * verify. A compromised node can verify and nothing else. The cost is a keypair
+ * instead of a string.
+ *
+ * ## Why this file is Node-only, and the package root is not
+ *
+ * Signing and verifying need `node:crypto`. The client SDK imports the wire
+ * frames and grant TYPES and never verifies anything - it only carries a token
+ * it was handed - so those live at the package root and stay isomorphic. This
+ * module is a separate entry point (`@tribe-nest/media-protocol/token`) so
+ * importing a frame type cannot drag `crypto` into a browser bundle.
+ *
+ * ## Why verification is PURE
+ *
+ * No I/O, no clock unless you pass one, no Redis. Replay defence needs state
+ * and therefore lives in the media server (`auth/replayGuard`), composed
+ * around this. Keeping the crypto and claim checks free of state is what lets
+ * the golden vectors pin exactly one code path on both sides of the wire.
+ */
+export type PublicKeyring = Record<string, string>;
+export type PrivateKeyring = Record<string, string>;
+/** Default ceiling on `exp - iat`. A join ticket, not a session. */
+export declare const MAX_TOKEN_TTL_SECONDS: number;
+export declare function signJoinToken(privateKeyPem: string, kid: string, claims: MediaJoinClaims): string;
+export declare function signControlToken(privateKeyPem: string, kid: string, claims: MediaControlClaims): string;
+type VerifyArgs = {
+    token: string;
+    keys: PublicKeyring;
+    issuer: string;
+    maxTtlSeconds?: number;
+    /** Seconds since epoch. Injected so vectors are deterministic. */
+    nowSeconds?: number;
+    skewSeconds?: number;
+    /** When given, the token's room must match. */
+    expectedRoom?: string;
+};
+export declare function verifyJoinToken(args: VerifyArgs): VerifyResult<MediaJoinClaims>;
+export declare function verifyControlToken(args: VerifyArgs): VerifyResult<MediaControlClaims>;
+/**
+ * Boot guard for a media node.
+ *
+ * A node must hold verification keys ONLY. If a private key reaches a node's
+ * keyring - a copy-paste, a shared secrets bundle - that node can mint, and the
+ * whole reason for the asymmetric split is gone silently. This makes it a
+ * refusal to start rather than a latent capability.
+ */
+export declare function assertPublicKeyringIsPublicOnly(keys: PublicKeyring): void;
+/** Convenience for tooling and tests; not used at runtime. */
+export declare function generateKeypair(): {
+    publicKey: string;
+    privateKey: string;
+};
+export {};
+//# sourceMappingURL=token.d.ts.map

package/build/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAGlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAMpD,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,QAAU,CAAC;AAe7C,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,MAAM,CAgBjG;AAED,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAIvG;AAED,KAAK,UAAU,GAAG;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAuEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,CAqB/E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAWrF;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAazE;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,IAAI;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAM3E"}

package/build/token.js

@@ -0,0 +1,208 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_TOKEN_TTL_SECONDS = void 0;
+exports.signJoinToken = signJoinToken;
+exports.signControlToken = signControlToken;
+exports.verifyJoinToken = verifyJoinToken;
+exports.verifyControlToken = verifyControlToken;
+exports.assertPublicKeyringIsPublicOnly = assertPublicKeyringIsPublicOnly;
+exports.generateKeypair = generateKeypair;
+const crypto = __importStar(require("crypto"));
+const claims_1 = require("./claims");
+const grants_1 = require("./grants");
+const ALG = "EdDSA";
+const b64u = (b) => b.toString("base64url");
+const fromB64u = (s) => Buffer.from(s, "base64url");
+/** Default ceiling on `exp - iat`. A join ticket, not a session. */
+exports.MAX_TOKEN_TTL_SECONDS = 15 * 60;
+function encodeSegment(value) {
+    return b64u(Buffer.from(JSON.stringify(value), "utf8"));
+}
+function signCompact(privateKeyPem, kid, payload) {
+    const header = encodeSegment({ alg: ALG, typ: "JWT", kid });
+    const body = encodeSegment(payload);
+    const signingInput = `${header}.${body}`;
+    // For Ed25519 the digest algorithm is null: the curve prescribes it.
+    const signature = crypto.sign(null, Buffer.from(signingInput, "utf8"), privateKeyPem);
+    return `${signingInput}.${b64u(signature)}`;
+}
+function signJoinToken(privateKeyPem, kid, claims) {
+    const parsed = claims_1.mediaJoinClaimsSchema.parse(claims);
+    // Mint-time refusals. A token that should never exist is better stopped here
+    // than relied upon to be refused by every future verifier.
+    const grantCheck = (0, grants_1.grantsAreValidForKind)(parsed.grants, parsed.kind);
+    if (grantCheck !== true)
+        throw new Error(`refusing to mint: ${grantCheck}`);
+    if (parsed.exp <= parsed.iat)
+        throw new Error("refusing to mint: exp is not after iat");
+    if (parsed.exp - parsed.iat > exports.MAX_TOKEN_TTL_SECONDS) {
+        throw new Error(`refusing to mint: ttl exceeds ${exports.MAX_TOKEN_TTL_SECONDS}s`);
+    }
+    if (parsed.transport !== "webrtc" && parsed.kind === "human") {
+        throw new Error("refusing to mint: a human participant may only use a webrtc transport");
+    }
+    return signCompact(privateKeyPem, kid, parsed);
+}
+function signControlToken(privateKeyPem, kid, claims) {
+    const parsed = claims_1.mediaControlClaimsSchema.parse(claims);
+    if (parsed.exp <= parsed.iat)
+        throw new Error("refusing to mint: exp is not after iat");
+    return signCompact(privateKeyPem, kid, parsed);
+}
+function verifyCompact(args, audience) {
+    const parts = args.token.split(".");
+    if (parts.length !== 3)
+        return { ok: false, reason: "malformed" };
+    const [headerSeg, bodySeg, sigSeg] = parts;
+    let header;
+    try {
+        header = JSON.parse(fromB64u(headerSeg).toString("utf8"));
+    }
+    catch {
+        return { ok: false, reason: "malformed" };
+    }
+    // Only ever EdDSA. Accepting whatever the token names is the classic JWT
+    // algorithm-confusion hole, and `none` is the worst case of it.
+    if (header.alg !== ALG)
+        return { ok: false, reason: "malformed" };
+    if (typeof header.kid !== "string" || !header.kid)
+        return { ok: false, reason: "malformed" };
+    const publicKeyPem = args.keys[header.kid];
+    if (!publicKeyPem)
+        return { ok: false, reason: "unknown_kid" };
+    // Signature BEFORE claims: never parse a payload that has not been shown to
+    // come from us.
+    let signatureValid = false;
+    try {
+        signatureValid = crypto.verify(null, Buffer.from(`${headerSeg}.${bodySeg}`, "utf8"), publicKeyPem, fromB64u(sigSeg));
+    }
+    catch {
+        return { ok: false, reason: "bad_signature" };
+    }
+    if (!signatureValid)
+        return { ok: false, reason: "bad_signature" };
+    let payload;
+    try {
+        payload = JSON.parse(fromB64u(bodySeg).toString("utf8"));
+    }
+    catch {
+        return { ok: false, reason: "malformed" };
+    }
+    const asRecord = payload;
+    if (asRecord?.aud !== audience)
+        return { ok: false, reason: "wrong_audience" };
+    if (asRecord?.iss !== args.issuer)
+        return { ok: false, reason: "wrong_issuer" };
+    return { ok: true, payload, kid: header.kid };
+}
+function checkTiming(claims, args) {
+    const now = args.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const skew = args.skewSeconds ?? 30;
+    const maxTtl = args.maxTtlSeconds ?? exports.MAX_TOKEN_TTL_SECONDS;
+    if (claims.exp + skew <= now)
+        return "expired";
+    if (claims.nbf !== undefined && claims.nbf - skew > now)
+        return "not_yet_valid";
+    // A long-lived token is a stolen credential with a long life, so the ceiling
+    // is enforced at VERIFY too - not only at mint, which a compromised minter
+    // would simply skip.
+    if (claims.exp - claims.iat > maxTtl)
+        return "ttl_too_long";
+    return null;
+}
+function verifyJoinToken(args) {
+    const base = verifyCompact(args, "media");
+    if (!base.ok)
+        return base;
+    const parsed = claims_1.mediaJoinClaimsSchema.safeParse(base.payload);
+    // `.strict()` fires here. A token carrying `subscribeOnly` instead of
+    // `subscribe` is rejected outright rather than read as "no rule, so
+    // everyone" - which is how an information barrier fails open.
+    if (!parsed.success)
+        return { ok: false, reason: "bad_claims" };
+    const timing = checkTiming(parsed.data, args);
+    if (timing)
+        return { ok: false, reason: timing };
+    if (args.expectedRoom !== undefined && parsed.data.room !== args.expectedRoom) {
+        return { ok: false, reason: "wrong_room" };
+    }
+    if ((0, grants_1.grantsAreValidForKind)(parsed.data.grants, parsed.data.kind) !== true) {
+        return { ok: false, reason: "bad_claims" };
+    }
+    return { ok: true, claims: parsed.data, kid: base.kid };
+}
+function verifyControlToken(args) {
+    const base = verifyCompact(args, "control");
+    if (!base.ok)
+        return base;
+    const parsed = claims_1.mediaControlClaimsSchema.safeParse(base.payload);
+    if (!parsed.success)
+        return { ok: false, reason: "bad_claims" };
+    const timing = checkTiming(parsed.data, args);
+    if (timing)
+        return { ok: false, reason: timing };
+    return { ok: true, claims: parsed.data, kid: base.kid };
+}
+/**
+ * Boot guard for a media node.
+ *
+ * A node must hold verification keys ONLY. If a private key reaches a node's
+ * keyring - a copy-paste, a shared secrets bundle - that node can mint, and the
+ * whole reason for the asymmetric split is gone silently. This makes it a
+ * refusal to start rather than a latent capability.
+ */
+function assertPublicKeyringIsPublicOnly(keys) {
+    for (const [kid, pem] of Object.entries(keys)) {
+        if (/PRIVATE KEY/.test(pem)) {
+            throw new Error(`media token keyring "${kid}" contains a PRIVATE key. Nodes verify and must never be able to mint.`);
+        }
+        try {
+            crypto.createPublicKey(pem);
+        }
+        catch {
+            throw new Error(`media token keyring "${kid}" is not a readable public key`);
+        }
+    }
+}
+/** Convenience for tooling and tests; not used at runtime. */
+function generateKeypair() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
+    return {
+        publicKey: publicKey.export({ type: "spki", format: "pem" }).toString(),
+        privateKey: privateKey.export({ type: "pkcs8", format: "pem" }).toString(),
+    };
+}
+//# sourceMappingURL=token.js.map

package/build/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEA,sCAgBC;AAED,4CAIC;AAmFD,0CAqBC;AAED,gDAWC;AAUD,0EAaC;AAGD,0CAMC;AA5OD,+CAAiC;AACjC,qCAOkB;AAClB,qCAAiD;AAoCjD,MAAM,GAAG,GAAG,OAAO,CAAC;AACpB,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AAE5D,oEAAoE;AACvD,QAAA,qBAAqB,GAAG,EAAE,GAAG,EAAE,CAAC;AAE7C,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,aAAqB,EAAE,GAAW,EAAE,OAAgB;IACvE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;IACzC,qEAAqE;IACrE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IACtF,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAgB,aAAa,CAAC,aAAqB,EAAE,GAAW,EAAE,MAAuB;IACvF,MAAM,MAAM,GAAG,8BAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEnD,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,UAAU,GAAG,IAAA,8BAAqB,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxF,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,6BAAqB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,6BAAqB,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,gBAAgB,CAAC,aAAqB,EAAE,GAAW,EAAE,MAA0B;IAC7F,MAAM,MAAM,GAAG,iCAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxF,OAAO,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAcD,SAAS,aAAa,CACpB,IAAgB,EAChB,QAA6B;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAC;IAEvE,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAE7F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE/D,4EAA4E;IAC5E,gBAAgB;IAChB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,CAAC,MAAM,CAC5B,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,EAC9C,YAAY,EACZ,QAAQ,CAAC,MAAM,CAAC,CACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAEnE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,OAAkC,CAAC;IACpD,IAAI,QAAQ,EAAE,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/E,IAAI,QAAQ,EAAE,GAAG,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAEhF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAClB,MAAkD,EAClD,IAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,6BAAqB,CAAC;IAE3D,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,GAAG;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG;QAAE,OAAO,eAAe,CAAC;IAChF,6EAA6E;IAC7E,2EAA2E;IAC3E,qBAAqB;IACrB,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM;QAAE,OAAO,cAAc,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,eAAe,CAAC,IAAgB;IAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,8BAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,sEAAsE;IACtE,oEAAoE;IACpE,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEhE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,IAAA,8BAAqB,EAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1D,CAAC;AAED,SAAgB,kBAAkB,CAAC,IAAgB;IACjD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,iCAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEhE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,+BAA+B,CAAC,IAAmB;IACjE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,wEAAwE,CACpG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,gCAAgC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,SAAgB,eAAe;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;AACJ,CAAC"}

package/build/version.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Bumped when a frame shape changes in a way an older peer cannot parse.
+ *
+ * The client sends it on connect and a node refuses a mismatch outright, rather
+ * than negotiating: a half-understood signalling session fails later, somewhere
+ * else, and looks like a media bug.
+ */
+export declare const MEDIA_PROTOCOL_VERSION: 1;
+//# sourceMappingURL=version.d.ts.map

package/build/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC"}

package/build/version.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEDIA_PROTOCOL_VERSION = void 0;
+/**
+ * Bumped when a frame shape changes in a way an older peer cannot parse.
+ *
+ * The client sends it on connect and a node refuses a mismatch outright, rather
+ * than negotiating: a half-understood signalling session fails later, somewhere
+ * else, and looks like a media bug.
+ */
+exports.MEDIA_PROTOCOL_VERSION = 1;
+//# sourceMappingURL=version.js.map

package/build/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAA;;;;;;GAMG;AACU,QAAA,sBAAsB,GAAG,CAAU,CAAC"}