openrtc 2.0.0-rc.3 → 2.0.0-rc.30

package/dist/runtime/index.d.ts

@@ -1,21 +1,17 @@
-import { R as RuntimeFactoryOptions, P as PlutoRuntimeAssembly, d as OpenRTCClient, e as PeerReconciliationStats } from '../OpenRTCShared-ZQPu5LqL.js';
-export { f as OPENRTC_RUNTIME_POLICY, g as RuntimeClient, h as RuntimePolicySnapshot, D as ScopedConnectionActorError, i as ScopedConnectionActorErrorKind, j as ScopedConnectionActorHandle, k as ScopedConnectionActorHandleOptions, l as ScopedConnectionActorRegistry, m as ScopedConnectionActorState, n as ScopedConnectionClose, o as ScopedConnectionDial, p as ScopedConnectionKey, q as ScopedLogicalChannelHandle, r as ScopedPreferredTransport, s as getRuntimePolicy, t as scopedConnectionKey, u as scopedConnectionKeyToString } from '../OpenRTCShared-ZQPu5LqL.js';
-import { f as OpenRTCCapabilityHandle } from '../types-DNl4KHHY.js';
-import { C as Connection, r as RuntimeConnectionTarget, v as RuntimeRawConnection } from '../types-DkgaCyqS.js';
-export { A as ChannelDescriptor, B as ConnectionEvent, D as ConnectionTarget, E as DeviceProfile, I as IncomingStream, P as PeerConnectOptions, F as PeerReadiness, G as PeerStreamOptions, H as PresenceLoopOptions, J as RawConnection, y as RuntimeApplicationPayloadReadinessOptions, K as RuntimeApplicationPayloadRouteOptions, L as RuntimeAuthContext, g as RuntimeAuthIdentity, M as RuntimeAutoConnectPolicy, R as RuntimeChannelDescriptor, a as RuntimeClientOptions, z as RuntimeConnectionEvent, c as RuntimeConnectionStateSnapshot, j as RuntimeDevice, n as RuntimeDeviceConnectOptions, N as RuntimeDevicePresenceStatus, O as RuntimeDeviceStatus, m as RuntimeDeviceStatusSnapshot, f as RuntimeIncomingStream, p as RuntimeJoinRoomOptions, h as RuntimeLocalDeviceInfo, i as RuntimeLocalDeviceProfile, Q as RuntimeLogicalChannelFraming, l as RuntimeManagedSession, S as RuntimeManagedSessionKind, k as RuntimeManagedSessionOptions, T as RuntimeManagedSessionPlatform, e as RuntimePeerConnectOptions, x as RuntimePeerHealth, U as RuntimePeerLifecycleStatus, d as RuntimePeerReadinessSnapshot, V as RuntimePeerScope, W as RuntimePeerSessionSnapshot, b as RuntimePeerState, u as RuntimePeerStreamOptions, w as RuntimePresenceLoopOptions, X as RuntimePresencePolicy, q as RuntimeRoomMember, s as RuntimeScopedChannelOptions, t as RuntimeScopedLogicalChannel, o as RuntimeSession, Y as RuntimeUiConnectionStatus, Z as ScopedChannelOptions, _ as ScopedLogicalChannel, $ as Session, a0 as SessionOptions } from '../types-DkgaCyqS.js';
+import { P as PeerReconciliationStats } from '../assembly-q0jRRpsc.js';
+export { O as OPENRTC_RUNTIME_POLICY, a as RuntimeClient, R as RuntimePolicySnapshot, D as ScopedConnectionActorError, d as ScopedConnectionActorErrorKind, e as ScopedConnectionActorHandle, f as ScopedConnectionActorHandleOptions, g as ScopedConnectionActorRegistry, h as ScopedConnectionActorState, i as ScopedConnectionClose, j as ScopedConnectionDial, k as ScopedConnectionKey, l as ScopedLogicalChannelHandle, m as ScopedPreferredTransport, n as getRuntimePolicy, o as scopedConnectionKey, p as scopedConnectionKeyToString } from '../assembly-q0jRRpsc.js';
+import { OpenRTCClient } from '../OpenRTCShared.js';
+import { f as OpenRTCCapabilityHandle } from '../types-Di034GVQ.js';
+import { C as Connection, D as RuntimeConnectionTarget, s as RuntimeRawConnection } from '../types-DVNSd5B9.js';
+export { F as ChannelDescriptor, G as ConnectionEvent, H as ConnectionTarget, J as DeviceProfile, K as IncomingStream, I as IrohBrowserProtocolStore, y as IrohDocEntry, x as IrohMutationReceipt, w as IrohNamespaceDescriptor, P as PeerConnectOptions, L as PeerReadiness, M as PeerStreamOptions, N as PresenceLoopOptions, O as RawConnection, k as RuntimeApplicationPayloadReadinessOptions, Q as RuntimeApplicationPayloadRouteOptions, S as RuntimeAuthContext, z as RuntimeAuthIdentity, T as RuntimeAutoConnectPolicy, R as RuntimeChannelDescriptor, v as RuntimeClientOptions, l as RuntimeConnectionEvent, j as RuntimeConnectionStateSnapshot, h as RuntimeDevice, p as RuntimeDeviceConnectOptions, U as RuntimeDevicePresenceStatus, V as RuntimeDeviceStatus, o as RuntimeDeviceStatusSnapshot, f as RuntimeIncomingStream, t as RuntimeJoinRoomOptions, q as RuntimeLocalDeviceInfo, r as RuntimeLocalDeviceProfile, W as RuntimeLogicalChannelFraming, n as RuntimeManagedSession, X as RuntimeManagedSessionKind, m as RuntimeManagedSessionOptions, Y as RuntimeManagedSessionPlatform, b as RuntimePeerConnectOptions, d as RuntimePeerHealth, Z as RuntimePeerLifecycleStatus, c as RuntimePeerReadinessSnapshot, _ as RuntimePeerScope, $ as RuntimePeerSessionSnapshot, a as RuntimePeerState, e as RuntimePeerStreamOptions, E as RuntimePresenceLoopOptions, a0 as RuntimePresencePolicy, u as RuntimeRoomMember, g as RuntimeScopedChannelOptions, i as RuntimeScopedLogicalChannel, B as RuntimeSession, a1 as RuntimeUiConnectionStatus, a2 as ScopedChannelOptions, a3 as ScopedLogicalChannel, a4 as Session, a5 as SessionOptions } from '../types-DVNSd5B9.js';
 import * as Draft14 from '@moq/net';
-import { a0 as SignalingOptions, q as ISignalingBackend, R as RuntimeIdentity, j as RoomMember, r as SignalingEnvelope, S as SignalingSession, D as Device, x as DesiredPeerProjection, B as BackendConnectionState, $ as AppLimits, H as GrantScope, J as JoinRoomOptions, I as IncomingStreamChannelMetadata, U as ApplicationCryptoStreamTools, a1 as RoomCreationMode, i as ClientOptions, A as ApplicationPayloadCrypto, n as DiscoveryMode, Q as ProtocolCapabilityMap, a2 as ScanningLoopOptions, a3 as ScanningLoopHandle, a4 as RuntimeBootstrapOptions, a5 as RuntimeBootstrapResult, a as ApplicationPayloadReadinessOptions, a6 as ManagedApplicationRouteOptions, d as PeerState, e as PeerScope, f as PeerHealth, g as ChannelDescriptor, a7 as JoinRequest, N as NativeConnectParams, z as NativeConnectResult, a8 as SpaceTokenProvider } from '../types-BVJr065k.js';
-import { R as RuntimeCapabilities } from '../capabilities-YSskrE8H.js';
-export { B as BROWSER_WASM_RUNTIME_CAPABILITIES, b as BrowserRuntimeCapabilityHost, N as NATIVE_IPC_RUNTIME_CAPABILITIES, c as NativeRuntimeStatusSnapshot, d as NativeRuntimeTransportFeatureStatus, e as RuntimeAdapterKind, a as RuntimeCapabilityProfile, f as cloneRuntimeCapabilities, r as runtimeCapabilitiesForBrowserHost, g as runtimeCapabilitiesFromNativeStatus, h as runtimeCapabilityProfile } from '../capabilities-YSskrE8H.js';
+import { a5 as SignalingOptions, I as ISignalingBackend, j as RuntimeIdentity, i as RoomMember, k as SignalingEnvelope, r as SignalingSession, D as Device, o as DesiredPeerProjection, t as BackendConnectionState, a4 as AppLimits, G as GrantScope, W as JoinRoomOptions, U as IncomingStreamChannelMetadata, a0 as ApplicationCryptoStreamTools, a6 as RoomCreationMode, g as ClientOptions, w as ApplicationPayloadCrypto, h as DiscoveryMode, $ as ProtocolCapabilityMap, a7 as ScanningLoopOptions, a8 as ScanningLoopHandle, a9 as RuntimeBootstrapOptions, aa as RuntimeBootstrapResult, x as ApplicationPayloadReadinessOptions, ab as ManagedApplicationRouteOptions, J as PeerState, K as PeerScope, O as PeerHealth, Q as ChannelDescriptor, ac as JoinRequest, N as NativeConnectParams, q as NativeConnectResult } from '../ITransport-WV6gGMnX.js';
+import { R as RuntimeCapabilities } from '../capabilities-BfZi4Cd7.js';
+export { B as BROWSER_WASM_RUNTIME_CAPABILITIES, b as BrowserRuntimeCapabilityHost, N as NATIVE_IPC_RUNTIME_CAPABILITIES, c as NativeRuntimeStatusSnapshot, d as NativeRuntimeTransportFeatureStatus, e as RuntimeAdapterKind, a as RuntimeCapabilityProfile, f as cloneRuntimeCapabilities, r as runtimeCapabilitiesForBrowserHost, g as runtimeCapabilitiesFromNativeStatus, h as runtimeCapabilityProfile } from '../capabilities-BfZi4Cd7.js';
 export { RuntimeDeviceActiveOptions, isRuntimeDeviceActive, isRuntimeDeviceConnectable, isRuntimeDeviceRoutable } from './device-status.js';
-import { I as IpcRuntimeAdapter } from '../tauri-Cz9n17g8.js';
-export { a as IpcRuntimeAdapterOptions, T as TauriRuntimeAdapter, b as TauriRuntimeAdapterOptions, c as createTauriIpcBridge } from '../tauri-Cz9n17g8.js';
-import { a as WasmBridge } from '../DelegatingRuntimeAdapter-DqfHkjLy.js';
-import { P as PlutoIpcBridge } from '../ipc-CflAVodw.js';
-export { N as NativeIpcFailureKind, a as PlutoIpcUnlisten, c as classifyNativeIpcFailure, i as isNativeIpcCommandUnavailable } from '../ipc-CflAVodw.js';
-export { WasmRuntimeAdapter } from './WasmRuntimeAdapter.js';
-import '../IEngineBridge-BbsT8hof.js';
-import '../ITransport-BsPcaov7.js';
+export { I as IpcRuntimeAdapter, a as IpcRuntimeAdapterOptions } from '../IpcRuntimeAdapter-CJq3dRBF.js';
+export { P as NativeBridge, N as NativeIpcFailureKind, P as PlutoIpcBridge, a as PlutoIpcUnlisten, c as classifyNativeIpcFailure, i as isNativeIpcCommandUnavailable } from '../ipc-CflAVodw.js';
+import '../DelegatingRuntimeAdapter-BFZDC604.js';
 
 declare class Signaling {
     private readonly appTag;
@@ -34,6 +30,10 @@ declare class Signaling {
     signInWithPluto(): Promise<void>;
     signOut(): Promise<void>;
     stopAuthScopedActivity(): Promise<void>;
+    setCoordinationHostAvailability(input: {
+        available: boolean;
+        reason: string;
+    }): void;
     getRuntimeCapabilities(): RuntimeCapabilities | undefined;
     getTurnCredentials(): Promise<any>;
     updatePresence(localNodeId: string, ticketStr: string, isOnline?: boolean, ttlMs?: number, metadata?: string): Promise<void>;
@@ -63,18 +63,6 @@ declare class Signaling {
     setWasmClient(client: any): void;
 }
 
-/**
- * @deprecated Legacy assembly helper. Use `OpenRTC()` for app code.
- * Removal target: OpenRTC 0.2.0.
- */
-declare function createWasmClient(options: RuntimeFactoryOptions): Promise<PlutoRuntimeAssembly<WasmBridge>>;
-/**
- * @deprecated Legacy assembly helper. Native applications should use
- * `createNativeOpenRTC` from `openrtc/native`.
- * Removal target: OpenRTC 0.2.0.
- */
-declare function createIpcClient(options: RuntimeFactoryOptions, bridge: PlutoIpcBridge): PlutoRuntimeAssembly<IpcRuntimeAdapter>;
-
 type OpenRTCCapabilityRuntime = OpenRTCClient;
 /**
  * Low-level escape hatch used only by `openrtc/runtime`. Product code should
@@ -124,6 +112,12 @@ interface TransportInterface {
 interface MoQSessionOptions {
     onSubscriptionTerminated?: (namespace: string, name: string, error: unknown) => void;
 }
+interface MoQDatagramDuplex {
+    readonly maxDatagramSize?: number;
+    readonly readable: ReadableStream<Uint8Array>;
+    readonly writable: WritableStream<Uint8Array>;
+    close(): void;
+}
 /**
  * Draft-14 MoQT adapter. The OpenRTC controller owns reconnect and lifecycle;
  * this class owns only one negotiated relay session and its protocol handles.
@@ -142,6 +136,12 @@ declare class MoQSession {
     private readonly setupPromise;
     constructor(transport: TransportInterface, onObject?: (ns: string, name: string, obj: Uint8Array, meta: unknown) => void, role?: number, relayUrl?: URL, options?: MoQSessionOptions);
     requireConnection(): Draft14.Connection.Established;
+    /**
+     * Open the patched Draft 14 object-datagram surface used only by the Iroh
+     * packet carrier. Existing application-data publishing remains on subgroup
+     * streams and never shares readiness with this duplex.
+     */
+    openDatagramDuplex(publishNamespace: string, subscribeNamespace: string, trackName: string): Promise<MoQDatagramDuplex>;
     init(): Promise<void>;
     waitForSetup(): Promise<void>;
     onClose(callback: (reason?: unknown) => void): () => void;
@@ -383,7 +383,7 @@ declare class Client {
     buildCompoundTicketWithToken(irohTicket: string, grantScope: GrantScope, maxConnections?: number): string;
     setManagedPresenceTicket(ticket: string | null): void;
     clearManagedPresenceTicket(): void;
-    registerSessionToken(token: string, grantScope: GrantScope, maxConnections: number): void;
+    registerSessionToken(token: string, grantScope: GrantScope, maxConnections: number, expiresAtMs?: number): void;
     revokeSessionToken(token: string): void;
     revokeTokensByScope(grantScope: GrantScope): Promise<string[]>;
     clearSessionTokens(): Promise<void>;
@@ -540,52 +540,4 @@ declare function createRuntimeJsonFrameDecoder<T = unknown>(onValue: RuntimeJson
 declare function concatRuntimeBytes(a: ByteArrayLike, b: ByteArrayLike): ByteArray;
 declare function readRuntimeU32BE(bytes: ByteArrayLike, offset: number): number;
 
-type MintSpaceTokenRequest = {
-    spaceKey: string;
-    memberId?: string;
-    ttl?: number;
-    sandboxAppId?: string;
-};
-type MintSpaceTokenResponse = {
-    token: string;
-    expiresAt: number;
-    tokenLifetimeSeconds: number;
-    namespaceId: string;
-    spaceAppTag: string;
-};
-/**
- * Mint a namespace-scoped Firebase custom token from your backend using the
- * OpenRTC `POST /v1/spaces/tokens` endpoint. Never call this from browser code
- * with a secret key — proxy through your server.
- */
-type EnableSpaceAuthResponse = {
-    success: true;
-    space: {
-        namespaceId: string;
-        requireScopedAuth: boolean;
-        status: 'active' | 'revoked';
-    };
-};
-/**
- * Opt a provisioned space into scoped-auth mode (required for all spaces).
- * Call from your backend with sk_live_... only.
- */
-declare function enableSpaceAuth(endpointUrl: string, secretKey: string, namespaceId: string): Promise<EnableSpaceAuthResponse>;
-declare function mintSpaceToken(endpointUrl: string, secretKey: string, request: MintSpaceTokenRequest): Promise<MintSpaceTokenResponse>;
-/**
- * Browser-safe space auth for static sites. Calls the rate-limited
- * `v1SpacePublicTokens` endpoint (pk_live_ + spaceKey only).
- */
-declare function createPublicSpaceTokenProvider(options: {
-    apiKey: string;
-    space?: string;
-    spaceKey?: string;
-    endpointUrl?: string;
-    memberIdStorageKey?: string;
-    sandboxAppId?: string;
-}): SpaceTokenProvider;
-declare function sandboxSpaceKey(spaceKey: string, sandboxAppId?: string): string;
-declare const spaceToken: typeof createPublicSpaceTokenProvider;
-declare const createSpaceTokenProvider: typeof createPublicSpaceTokenProvider;
-
-export { Connection, type CorrelationFields, type EnableSpaceAuthResponse, IpcRuntimeAdapter, type MintSpaceTokenRequest, type MintSpaceTokenResponse, PlutoIpcBridge as NativeBridge, type OpenRTCCapabilityRuntime, PlutoIpcBridge, PlutoRuntimeAssembly, RuntimeCapabilities, RuntimeConnectionController, RuntimeConnectionTarget, RuntimeFactoryOptions, type RuntimeJsonFrameDecoderOptions, type RuntimeJsonFrameHandler, RuntimeRawConnection, type RuntimeU32BEFrameHandler, clog, concatRuntimeBytes, correlationForDriveGrantScope, createIpcClient, createPublicSpaceTokenProvider, createRuntimeJsonFrameDecoder, createRuntimeU32BEFrameDecoder, createSpaceTokenProvider, createWasmClient, decodeRuntimeJsonPayload, enableSpaceAuth, encodeRuntimeJsonFrame, encodeRuntimeJsonPayload, encodeRuntimeU32BEFrame, logOpenRtcTeardownTrace, mintSpaceToken, openRtcDebug, openRtcDebugEnabled, openRtcDebugInfo, openRtcDebugLog, readRuntimeU32BE, renderCorrelationFields, runtimeForCapability as runtimeFromCapability, sandboxSpaceKey, spaceToken };
+export { Connection, type CorrelationFields, type OpenRTCCapabilityRuntime, RuntimeCapabilities, RuntimeConnectionController, RuntimeConnectionTarget, type RuntimeJsonFrameDecoderOptions, type RuntimeJsonFrameHandler, RuntimeRawConnection, type RuntimeU32BEFrameHandler, clog, concatRuntimeBytes, correlationForDriveGrantScope, createRuntimeJsonFrameDecoder, createRuntimeU32BEFrameDecoder, decodeRuntimeJsonPayload, encodeRuntimeJsonFrame, encodeRuntimeJsonPayload, encodeRuntimeU32BEFrame, logOpenRtcTeardownTrace, openRtcDebug, openRtcDebugEnabled, openRtcDebugInfo, openRtcDebugLog, readRuntimeU32BE, renderCorrelationFields, runtimeForCapability as runtimeFromCapability };

package/dist/runtime/index.js

@@ -1,2 +1 @@
-export{a as WasmRuntimeAdapter}from'../chunk-GW7P3D54.js';export{b as TauriRuntimeAdapter,a as createTauriIpcBridge}from'../chunk-5LRLWIT5.js';export{b as runtimeFromCapability}from'../chunk-PODAMIL6.js';export{b as createIpcClient,a as createWasmClient}from'../chunk-PRVFZI2T.js';export{b as Connection,t as RuntimeClient,c as RuntimeConnectionController,g as ScopedConnectionActorError,j as ScopedConnectionActorHandle,k as ScopedConnectionActorRegistry,f as clog,r as concatRuntimeBytes,e as correlationForDriveGrantScope,q as createRuntimeJsonFrameDecoder,m as createRuntimeU32BEFrameDecoder,o as decodeRuntimeJsonPayload,p as encodeRuntimeJsonFrame,n as encodeRuntimeJsonPayload,l as encodeRuntimeU32BEFrame,s as readRuntimeU32BE,d as renderCorrelationFields,h as scopedConnectionKey,i as scopedConnectionKeyToString}from'../chunk-3USHQ7QW.js';export{f as IpcRuntimeAdapter}from'../chunk-F2XGNLXL.js';import'../chunk-A3IAG6EL.js';import'../chunk-7Z6N46RB.js';export{q as BROWSER_WASM_RUNTIME_CAPABILITIES,r as NATIVE_IPC_RUNTIME_CAPABILITIES,o as OPENRTC_RUNTIME_POLICY,s as cloneRuntimeCapabilities,p as getRuntimePolicy,g as logOpenRtcTeardownTrace,t as runtimeCapabilitiesForBrowserHost,u as runtimeCapabilitiesFromNativeStatus,v as runtimeCapabilityProfile}from'../chunk-YBXGNKM7.js';export{b as openRtcDebug,a as openRtcDebugEnabled,c as openRtcDebugInfo,d as openRtcDebugLog}from'../chunk-VK6KX433.js';import'../chunk-NT5YHZQH.js';export{a as classifyNativeIpcFailure,b as isNativeIpcCommandUnavailable}from'../chunk-K37WVIZL.js';import'../chunk-BXFXPIXO.js';import {b}from'../chunk-N26S7V4N.js';import'../chunk-NB4H5TP3.js';import'../chunk-RD3JEGGF.js';import'../chunk-C7YN5MSV.js';export{a as isRuntimeDeviceActive,c as isRuntimeDeviceConnectable,b as isRuntimeDeviceRoutable}from'../chunk-CK6WQV7J.js';var j="https://api.openrtc.app";function c(e){if(typeof globalThis.crypto?.randomUUID!="function")throw new Error(`Secure request identity is unavailable for ${e}.`);return `${e}:${globalThis.crypto.randomUUID()}`}async function z(e,t,n){let o=e.replace(/\/$/,""),r=await fetch(`${o}/v1/spaces/${encodeURIComponent(n)}/scoped-auth`,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json","X-OpenRTC-Idempotency-Key":c("enable-space-auth")},body:"{}"}),a=await r.json().catch(()=>({}));if(!r.ok){let s=typeof a?.error=="string"?a.error:`enableSpaceAuth failed (${r.status})`;throw new Error(s)}return a}async function q(e,t,n){let o=await fetch(e,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json","X-OpenRTC-Idempotency-Key":c("mint-space-token")},body:JSON.stringify(n)}),r=await o.json().catch(()=>({}));if(!o.ok){let a=typeof r?.error=="string"?r.error:`mintSpaceToken failed (${o.status})`;throw new Error(a)}if(typeof r?.token!="string"||!r.token.trim())throw new Error("mintSpaceToken response missing token");return r}function d(e){let t=e.apiKey.trim(),n=(e.spaceKey??e.space??"").trim(),o=g(e.sandboxAppId),r=(e.endpointUrl??j).replace(/\/$/,""),a=e.memberIdStorageKey??`openrtc:space-member:${n}${o?`:sandbox:${o}`:""}`;return async()=>{if(!t||!n)throw new Error("spaceToken requires apiKey and space");let s=null;typeof sessionStorage<"u"?(s=sessionStorage.getItem(a),s||(s=globalThis.crypto?.randomUUID?.()??`member-${Date.now()}`,sessionStorage.setItem(a,s))):s=`member-${Date.now()}`;let m=await b().getAppCheckToken(),i=await fetch(`${r}/v1SpacePublicTokens`,{method:"POST",headers:{"Content-Type":"application/json","X-OpenRTC-Idempotency-Key":c("mint-public-space-token"),...m?{"X-Firebase-AppCheck":m}:{}},body:JSON.stringify({apiKey:t,spaceKey:n,memberId:s,...o?{sandboxAppId:o}:{}})}),{text:u,payload:p}=await B(i);if(!i.ok){let f=typeof p?.error=="string"?p.error:u.trim()?u.trim().slice(0,240):`public space token mint failed (${i.status})`;throw new Error(f)}let l=typeof p?.token=="string"?p.token.trim():"";if(!l)throw new Error("public space token response missing token");return {customToken:l}}}function M(e){if(!e.trim())return {};try{let t=JSON.parse(e);return t&&typeof t=="object"?t:{}}catch{return {}}}async function B(e){let t=e.text;if(typeof t=="function"){let o=await t.call(e).catch(()=>"");return {text:o,payload:M(o)}}let n=await e.json().catch(()=>({}));return {text:JSON.stringify(n),payload:n&&typeof n=="object"?n:{}}}function g(e){let t=e?.trim().toLowerCase()??"";if(!t)return "";if(!/^[a-z0-9][a-z0-9-]{0,47}$/.test(t))throw new Error("sandboxAppId must be 1-48 lowercase letters, numbers, or dashes.");return t}function J(e,t){let n=e.trim(),o=g(t);return o?`${n}::sandbox::${o}`:n}var L=d,H=d;
-export{d as createPublicSpaceTokenProvider,H as createSpaceTokenProvider,z as enableSpaceAuth,q as mintSpaceToken,J as sandboxSpaceKey,L as spaceToken};
+export{a as runtimeFromCapability}from'../chunk-OEVPKC3W.js';import'../chunk-XPL7PUBW.js';export{a as isRuntimeDeviceActive,c as isRuntimeDeviceConnectable,b as isRuntimeDeviceRoutable}from'../chunk-CK6WQV7J.js';export{b as Connection,u as IpcRuntimeAdapter,t as RuntimeClient,c as RuntimeConnectionController,g as ScopedConnectionActorError,j as ScopedConnectionActorHandle,k as ScopedConnectionActorRegistry,f as clog,r as concatRuntimeBytes,e as correlationForDriveGrantScope,q as createRuntimeJsonFrameDecoder,m as createRuntimeU32BEFrameDecoder,o as decodeRuntimeJsonPayload,p as encodeRuntimeJsonFrame,n as encodeRuntimeJsonPayload,l as encodeRuntimeU32BEFrame,s as readRuntimeU32BE,d as renderCorrelationFields,h as scopedConnectionKey,i as scopedConnectionKeyToString}from'../chunk-H5R5ZXXN.js';import'../chunk-LRT5GEGH.js';export{a as classifyNativeIpcFailure,b as isNativeIpcCommandUnavailable}from'../chunk-Z2WVSXPW.js';import'../chunk-DUY34MGT.js';import'../chunk-D2OJN5S5.js';export{s as BROWSER_WASM_RUNTIME_CAPABILITIES,t as NATIVE_IPC_RUNTIME_CAPABILITIES,q as OPENRTC_RUNTIME_POLICY,u as cloneRuntimeCapabilities,r as getRuntimePolicy,i as logOpenRtcTeardownTrace,v as runtimeCapabilitiesForBrowserHost,w as runtimeCapabilitiesFromNativeStatus,x as runtimeCapabilityProfile}from'../chunk-VOCOZ57Q.js';export{b as openRtcDebug,a as openRtcDebugEnabled,c as openRtcDebugInfo,d as openRtcDebugLog}from'../chunk-AG2F6MOB.js';import'../chunk-CWGKLGJZ.js';import'../chunk-KJTJLLJE.js';import'../chunk-45WBH7E3.js';import'../chunk-NRXEG5GQ.js';

package/dist/testing.d.ts

@@ -1,11 +1,10 @@
-import { d as OpenRTCClient } from './OpenRTCShared-ZQPu5LqL.js';
 import { P as PlutoIpcBridge } from './ipc-CflAVodw.js';
-import { a as RuntimeClientOptions } from './types-DkgaCyqS.js';
-import { O as OpenRTCOptions, a as OpenRTCClient$1 } from './types-DNl4KHHY.js';
-import './types-BVJr065k.js';
-import './IEngineBridge-BbsT8hof.js';
-import './capabilities-YSskrE8H.js';
-import './ITransport-BsPcaov7.js';
+import { O as OpenRTCOptions, a as OpenRTCClient } from './types-Di034GVQ.js';
+import './OpenRTCShared.js';
+import './assembly-q0jRRpsc.js';
+import './types-DVNSd5B9.js';
+import './ITransport-WV6gGMnX.js';
+import './capabilities-BfZi4Cd7.js';
 
 interface OpenRTCV2Endpoints {
     controlPlane: string;
@@ -15,16 +14,8 @@ interface OpenRTCV2Endpoints {
 declare function createTestingOpenRTC(options: OpenRTCOptions, endpoints: OpenRTCV2Endpoints, testing?: {
     deviceId?: string;
     irohTestRelayUrl?: string;
-}): OpenRTCClient$1;
+}): OpenRTCClient;
 /** Native equivalent for emulator and harness lanes; never import in product code. */
-declare function createTestingNativeOpenRTC(options: OpenRTCOptions, endpoints: OpenRTCV2Endpoints, bridge: PlutoIpcBridge): OpenRTCClient$1;
-/**
- * Rollback-harness constructor. This is intentionally confined to the
- * `openrtc/testing` export because it enables plaintext loopback coordination
- * for local emulators and also carries the time-bounded v1 runtime.
- */
-declare const createTestingLegacyOpenRTC: ((options: RuntimeClientOptions) => Promise<OpenRTCClient>) & {
-    native: (options: RuntimeClientOptions, bridge?: PlutoIpcBridge) => OpenRTCClient;
-};
+declare function createTestingNativeOpenRTC(options: OpenRTCOptions, endpoints: OpenRTCV2Endpoints, bridge: PlutoIpcBridge): OpenRTCClient;
 
-export { createTestingLegacyOpenRTC, createTestingNativeOpenRTC, createTestingOpenRTC };
+export { createTestingNativeOpenRTC, createTestingOpenRTC };

package/dist/testing.js

@@ -1 +1 @@
-import {a as a$1}from'./chunk-UEYM6WTT.js';import {c}from'./chunk-PODAMIL6.js';import {a}from'./chunk-7H2JPCBN.js';import'./chunk-2QHDEGVX.js';import'./chunk-6TAVJ46R.js';import'./chunk-N4SX7C3W.js';import'./chunk-PRVFZI2T.js';import'./chunk-3USHQ7QW.js';import'./chunk-F2XGNLXL.js';import'./chunk-A3IAG6EL.js';import'./chunk-7Z6N46RB.js';import'./chunk-YBXGNKM7.js';import'./chunk-VK6KX433.js';import'./chunk-NT5YHZQH.js';import'./chunk-K37WVIZL.js';import'./chunk-BXFXPIXO.js';import'./chunk-N26S7V4N.js';import'./chunk-NB4H5TP3.js';import'./chunk-RD3JEGGF.js';import'./chunk-C7YN5MSV.js';function m(e,t,n={}){return c(e,{endpoints:t,testingAllowInsecureLoopback:true,platform:"web",...n.deviceId?{deviceIdProvider:async()=>n.deviceId}:{},...n.irohTestRelayUrl?{irohTestRelayUrl:n.irohTestRelayUrl}:{},runtimeFactory:async i=>{let{createWasmClient:o}=await import('./factories-LI53SFLH.js');return o(i)}})}function d(e,t,n){return c(e,{endpoints:t,testingAllowInsecureLoopback:true,platform:"native",deviceKeyProvider:a$1(n),deviceIdProvider:async()=>{let i=await n.invoke("get_rtc_local_device_info");return String(i?.deviceId??"")},runtimeFactory:async i=>{let{createIpcClient:o}=await import('./ipcFactory-QY44OIKA.js');return o(i,n)}})}function p(e){let t=e.coordinationGateway;return {...e,...t?{coordinationGateway:{...t,testingAllowInsecureLoopback:true}}:{}}}var C=Object.assign(e=>a(p(e)),{native:(e,t)=>a.native(p(e),t)});export{C as createTestingLegacyOpenRTC,d as createTestingNativeOpenRTC,m as createTestingOpenRTC};
+import {a}from'./chunk-7FPG3MFF.js';import'./chunk-VBUDERMM.js';import {b}from'./chunk-OEVPKC3W.js';import'./chunk-XPL7PUBW.js';import'./chunk-DUY34MGT.js';import'./chunk-NRXEG5GQ.js';function l(r,n,e={}){return b(r,{endpoints:n,testingAllowInsecureLoopback:true,platform:"web",...e.deviceId?{deviceIdProvider:async()=>e.deviceId}:{},...e.irohTestRelayUrl?{irohTestRelayUrl:e.irohTestRelayUrl}:{},runtimeFactory:async t=>{let{createWasmClient:i}=await import('./runtime/factories.js');return i(t)}})}function s(r,n,e){return b(r,{endpoints:n,testingAllowInsecureLoopback:true,platform:"native",deviceKeyProvider:a(e),deviceIdProvider:async()=>{let t=await e.invoke("get_rtc_local_device_info");return String(t?.deviceId??"")},runtimeFactory:async t=>{let{createIpcClient:i}=await import('./ipcFactory-B6HBECSU.js');return i(t,e)}})}export{s as createTestingNativeOpenRTC,l as createTestingOpenRTC};

package/dist/transport/index.d.ts

@@ -1,6 +1,5 @@
-import { P as ProtocolName, K as RouteDescriptor, O as ProtocolCapability, Q as ProtocolCapabilityMap, A as ApplicationPayloadCrypto, U as ApplicationCryptoStreamTools } from '../types-BVJr065k.js';
-export { V as ApplicationCryptoBiStream, W as RouteFamily, X as RouteImplementationKind } from '../types-BVJr065k.js';
-import { I as ITransport } from '../ITransport-BsPcaov7.js';
+import { c as ProtocolName, Z as RouteDescriptor, F as ITransport, _ as ProtocolCapability, $ as ProtocolCapabilityMap, w as ApplicationPayloadCrypto, a0 as ApplicationCryptoStreamTools } from '../ITransport-WV6gGMnX.js';
+export { a1 as ApplicationCryptoBiStream, a2 as RouteFamily, a3 as RouteImplementationKind } from '../ITransport-WV6gGMnX.js';
 
 declare const TRANSPORT_LABELS: readonly ProtocolName[];
 declare function normalizeTransportLabel(value: unknown): ProtocolName | undefined;

package/dist/transport/index.js

@@ -1 +1 @@
-export{e as KEY_AGREEMENT_ALGORITHM,d as KEY_AGREEMENT_PUBLIC_KEY_BYTES,g as deriveApplicationCryptoKey,i as encodeApplicationKeyAgreementPayload,f as generateEphemeralKeyAgreement,c as getPreferredProtocolOrder}from'../chunk-7Z6N46RB.js';export{e as TRANSPORT_LABELS,o as createApplicationCryptoStreamTools,n as createSharedSecretApplicationCrypto,m as isApplicationEncryptedPayload,h as isDirectIrohTransportLabel,l as isIndependentTransportLabel,g as isIrohBaseTransportLabel,i as isOptionalTransportLabel,j as isWebRtcTransportLabel,f as normalizeTransportLabel}from'../chunk-VK6KX433.js';import'../chunk-NB4H5TP3.js';export{a as ROUTE_DESCRIPTORS,e as getRouteDescriptor,f as listRouteDescriptors}from'../chunk-C7YN5MSV.js';
+export{e as KEY_AGREEMENT_ALGORITHM,d as KEY_AGREEMENT_PUBLIC_KEY_BYTES,g as deriveApplicationCryptoKey,i as encodeApplicationKeyAgreementPayload,f as generateEphemeralKeyAgreement,c as getPreferredProtocolOrder}from'../chunk-LRT5GEGH.js';export{o as TRANSPORT_LABELS,z as createApplicationCryptoStreamTools,y as createSharedSecretApplicationCrypto,x as isApplicationEncryptedPayload,r as isDirectIrohTransportLabel,w as isIndependentTransportLabel,q as isIrohBaseTransportLabel,s as isOptionalTransportLabel,t as isWebRtcTransportLabel,p as normalizeTransportLabel}from'../chunk-AG2F6MOB.js';export{a as ROUTE_DESCRIPTORS,e as getRouteDescriptor,f as listRouteDescriptors}from'../chunk-45WBH7E3.js';

package/dist/{types-DkgaCyqS.d.ts → types-DVNSd5B9.d.ts}

@@ -1,6 +1,4 @@
-import { A as AuthContext } from './IEngineBridge-BbsT8hof.js';
-import { C as ConnectionOptions, A as ApplicationPayloadCrypto, a as ApplicationPayloadReadinessOptions, b as ApplicationPayloadRouteOptions, P as ProtocolName, c as ApplicationPayloadSendOptions, T as TransportLatencySnapshot, d as PeerState, e as PeerScope, f as PeerHealth, g as ChannelDescriptor$1, I as IncomingStreamChannelMetadata, D as Device, B as BackendConnectionState, L as LocalDeviceInfo, h as DeviceStatusSnapshot, M as ManagedDeviceConnectOptions, i as ClientOptions, S as SignalingSession, R as RuntimeIdentity, J as JoinRoomOptions, j as RoomMember, k as DevicePresenceStatus, l as PeerLifecycleStatus, m as PeerSessionSnapshot } from './types-BVJr065k.js';
-import { I as ITransport } from './ITransport-BsPcaov7.js';
+import { v as ConnectionOptions, w as ApplicationPayloadCrypto, x as ApplicationPayloadReadinessOptions, y as ApplicationPayloadRouteOptions, c as ProtocolName, z as ApplicationPayloadSendOptions, F as ITransport, H as TransportLatencySnapshot, J as PeerState, K as PeerScope, O as PeerHealth, Q as ChannelDescriptor$1, U as IncomingStreamChannelMetadata, D as Device, t as BackendConnectionState, L as LocalDeviceInfo, l as DeviceStatusSnapshot, V as ManagedDeviceConnectOptions, g as ClientOptions, r as SignalingSession, j as RuntimeIdentity, W as JoinRoomOptions, i as RoomMember, X as DevicePresenceStatus, Y as PeerLifecycleStatus, d as PeerSessionSnapshot } from './ITransport-WV6gGMnX.js';
 
 type ConnectionHealth = 'unknown' | 'healthy' | 'suspect' | 'stale';
 
@@ -401,6 +399,22 @@ declare class Connection {
     private normalizeNegotiationId;
 }
 
+type AuthContext = {
+    userId: string;
+    token?: string | null;
+    refreshToken?: string | null;
+    customToken?: string | null;
+    tokenProvider?: (forceRefresh?: boolean) => Promise<string | null>;
+    /**
+     * Supplies the platform attestation token required by the configured
+     * control plane. Firebase-backed hosted deployments use App Check today;
+     * keeping acquisition on the auth context prevents coordination code from
+     * owning a second Firebase app or assuming one global project.
+     */
+    appCheckTokenProvider?: (forceRefresh?: boolean) => Promise<string | null>;
+    expiresAtMs?: number | null;
+};
+
 /**
  * App-facing options intentionally hide transport node identifiers from callbacks.
  */
@@ -439,6 +453,59 @@ interface RuntimeConnectionTarget {
     ticket: string;
     timeoutMs?: number;
 }
+/**
+ * Durable browser storage used by the optional upstream Iroh docs, blobs, and
+ * gossip protocols. Implementations normally map these atomic operations to
+ * IndexedDB; OpenRTC deliberately does not own a second browser database.
+ */
+interface IrohBrowserProtocolStore {
+    loadIdentity(): Promise<{
+        defaultAuthor: Uint8Array;
+    } | null>;
+    exportSnapshot(): Promise<{
+        authors: unknown[];
+        namespaces: unknown[];
+        entries: unknown[];
+    }>;
+    importAuthor(authorId: string, author: Uint8Array): Promise<void>;
+    importNamespace(capability: unknown): Promise<void>;
+    deleteNamespace(namespaceId: string): Promise<void>;
+    applyEntryTransaction(mutation: unknown): Promise<void>;
+    acknowledgeOutbox(operationId: string): Promise<void>;
+    listBlobManifests(): Promise<unknown[]>;
+    getBlobResumeState(contentHash: string): Promise<unknown | null>;
+    readBlobRange(contentHash: string, offset: number, length: number): Promise<Uint8Array | null>;
+    writeBlobRange(contentHash: string, size: number, chunkBytes: number, offset: number, bytes: Uint8Array): Promise<void>;
+    finalizeBlobIfComplete(contentHash: string): Promise<boolean>;
+    readBlobOutboardNode(contentHash: string, nodeId: string): Promise<Uint8Array | null>;
+    writeBlobOutboardNode(contentHash: string, nodeId: string, pair: Uint8Array): Promise<void>;
+    markBlobBaoReady(contentHash: string): Promise<void>;
+    writeBlobStagingChunk(sessionId: string, chunkIndex: number, bytes: Uint8Array): Promise<void>;
+    finalizeBlobStaging(sessionId: string, contentHash: string, size: number, chunkBytes: number): Promise<void>;
+    abortBlobStaging(sessionId: string): Promise<void>;
+    deleteBlob(contentHash: string, force: boolean): Promise<boolean>;
+    beginBlobImport(contentHash: string, size: number, chunkBytes: number): Promise<void>;
+    writeBlobChunk(contentHash: string, size: number, chunkBytes: number, chunkIndex: number, bytes: Uint8Array): Promise<void>;
+    finalizeBlobImport(contentHash: string, size: number, chunkBytes: number): Promise<void>;
+    flush(): Promise<void>;
+}
+interface IrohNamespaceDescriptor {
+    namespaceId: string;
+    capabilityKind: 'read' | 'write';
+    capability: Uint8Array;
+}
+interface IrohMutationReceipt {
+    contentHash: string;
+    operationId: string;
+}
+interface IrohDocEntry {
+    namespaceId: string;
+    authorId: string;
+    key: Uint8Array;
+    timestamp: number;
+    contentHash: string;
+    contentLength: number;
+}
 interface RuntimePeerConnectOptions {
     deviceId?: string;
     ticket?: string;
@@ -595,4 +662,4 @@ type SessionOptions = RuntimeManagedSessionOptions;
 type Session = RuntimeManagedSession;
 type ChannelDescriptor = RuntimeChannelDescriptor;
 
-export { type Session as $, type ChannelDescriptor as A, type ConnectionEvent as B, Connection as C, type ConnectionTarget as D, type DeviceProfile as E, type PeerReadiness as F, type PeerStreamOptions as G, type PresenceLoopOptions as H, type IncomingStream as I, type RawConnection as J, type RuntimeApplicationPayloadRouteOptions as K, type RuntimeAuthContext as L, type RuntimeAutoConnectPolicy as M, type RuntimeDevicePresenceStatus as N, type RuntimeDeviceStatus as O, type PeerConnectOptions as P, type RuntimeLogicalChannelFraming as Q, type RuntimeChannelDescriptor as R, type RuntimeManagedSessionKind as S, type RuntimeManagedSessionPlatform as T, type RuntimePeerLifecycleStatus as U, type RuntimePeerScope as V, type RuntimePeerSessionSnapshot as W, type RuntimePresencePolicy as X, type RuntimeUiConnectionStatus as Y, type ScopedChannelOptions as Z, type ScopedLogicalChannel as _, type RuntimeClientOptions as a, type SessionOptions as a0, type RuntimePeerState as b, type RuntimeConnectionStateSnapshot as c, type RuntimePeerReadinessSnapshot as d, type RuntimePeerConnectOptions as e, type RuntimeIncomingStream as f, type RuntimeAuthIdentity as g, type RuntimeLocalDeviceInfo as h, type RuntimeLocalDeviceProfile as i, type RuntimeDevice as j, type RuntimeManagedSessionOptions as k, type RuntimeManagedSession as l, type RuntimeDeviceStatusSnapshot as m, type RuntimeDeviceConnectOptions as n, type RuntimeSession as o, type RuntimeJoinRoomOptions as p, type RuntimeRoomMember as q, type RuntimeConnectionTarget as r, type RuntimeScopedChannelOptions as s, type RuntimeScopedLogicalChannel as t, type RuntimePeerStreamOptions as u, type RuntimeRawConnection as v, type RuntimePresenceLoopOptions as w, type RuntimePeerHealth as x, type RuntimeApplicationPayloadReadinessOptions as y, type RuntimeConnectionEvent as z };
+export { type RuntimePeerSessionSnapshot as $, type AuthContext as A, type RuntimeSession as B, Connection as C, type RuntimeConnectionTarget as D, type RuntimePresenceLoopOptions as E, type ChannelDescriptor as F, type ConnectionEvent as G, type ConnectionTarget as H, type IrohBrowserProtocolStore as I, type DeviceProfile as J, type IncomingStream as K, type PeerReadiness as L, type PeerStreamOptions as M, type PresenceLoopOptions as N, type RawConnection as O, type PeerConnectOptions as P, type RuntimeApplicationPayloadRouteOptions as Q, type RuntimeChannelDescriptor as R, type RuntimeAuthContext as S, type RuntimeAutoConnectPolicy as T, type RuntimeDevicePresenceStatus as U, type RuntimeDeviceStatus as V, type RuntimeLogicalChannelFraming as W, type RuntimeManagedSessionKind as X, type RuntimeManagedSessionPlatform as Y, type RuntimePeerLifecycleStatus as Z, type RuntimePeerScope as _, type RuntimePeerState as a, type RuntimePresencePolicy as a0, type RuntimeUiConnectionStatus as a1, type ScopedChannelOptions as a2, type ScopedLogicalChannel as a3, type Session as a4, type SessionOptions as a5, type RuntimePeerConnectOptions as b, type RuntimePeerReadinessSnapshot as c, type RuntimePeerHealth as d, type RuntimePeerStreamOptions as e, type RuntimeIncomingStream as f, type RuntimeScopedChannelOptions as g, type RuntimeDevice as h, type RuntimeScopedLogicalChannel as i, type RuntimeConnectionStateSnapshot as j, type RuntimeApplicationPayloadReadinessOptions as k, type RuntimeConnectionEvent as l, type RuntimeManagedSessionOptions as m, type RuntimeManagedSession as n, type RuntimeDeviceStatusSnapshot as o, type RuntimeDeviceConnectOptions as p, type RuntimeLocalDeviceInfo as q, type RuntimeLocalDeviceProfile as r, type RuntimeRawConnection as s, type RuntimeJoinRoomOptions as t, type RuntimeRoomMember as u, type RuntimeClientOptions as v, type IrohNamespaceDescriptor as w, type IrohMutationReceipt as x, type IrohDocEntry as y, type RuntimeAuthIdentity as z };

package/dist/{types-DNl4KHHY.d.ts → types-Di034GVQ.d.ts}

@@ -1,12 +1,38 @@
-import { O as OpenRTCPeerNamespace, a as OpenRTCChannelNamespace, b as OpenRTCDiagnosticsNamespace, c as OpenRTCDeviceNamespace } from './OpenRTCShared-ZQPu5LqL.js';
-import { R as RuntimeChannelDescriptor } from './types-DkgaCyqS.js';
+import { OpenRTCPeerNamespace, OpenRTCChannelNamespace, OpenRTCDiagnosticsNamespace, OpenRTCDeviceNamespace } from './OpenRTCShared.js';
+import { R as RuntimeChannelDescriptor } from './types-DVNSd5B9.js';
+import { P as PlutoIrohConfiguration, a as PlutoRTCConfiguration, b as PlutoMoQConfiguration, T as TransportOptimization, c as ProtocolName } from './ITransport-WV6gGMnX.js';
 
 interface OpenRTCAuthProvider {
     /** Registered provider ID from the developer app capability manifest. */
     readonly providerId?: string;
+    /**
+     * Stable, non-secret, local-only identifier for the currently signed-in
+     * principal. It changes on login, logout, or account switch, but never for
+     * an ordinary access-token refresh. OpenRTC hashes this value together
+     * with the app and installation-key thumbprint before persisting a lookup.
+     *
+     * Optional during the 2.0 RC compatibility window. Providers that omit it
+     * use the assertion-first flow and remain correct, but cannot skip the
+     * assertion exchange on a cold process start.
+     */
+    getSessionKey?(): Promise<string | null>;
     getAssertion(input: {
         audience: 'https://api.openrtc.app/v2/assertions/exchange';
         forceRefresh: boolean;
+        /**
+         * Stable OpenRTC installation ID being enrolled. Consumer backends
+         * may bind product admission (for example a paid device allowance) to
+         * this value in the signed assertion. It is supplied only for an
+         * enrollment/renewal assertion, never for hourly gateway refreshes.
+         */
+        deviceId: string;
+        /**
+         * Present only after OpenRTC receives the exact structured response
+         * indicating that this installation ID is enrolled with another
+         * public key. Consumer backends should require recent interactive
+         * authentication before authorizing the replacement.
+         */
+        recoveryReason?: 'device-key-rotation';
     }): Promise<string | null>;
     /**
      * Optional identity-epoch observer. Notify only when the signed-in
@@ -14,7 +40,31 @@ interface OpenRTCAuthProvider {
      * revocation). Do not notify for ordinary OAuth/Firebase access-token
      * refreshes: OpenRTC refreshes its own avenue grant in place.
      */
-    subscribe?(listener: () => void): () => void;
+    subscribe?(listener: (event: {
+        type: 'principal-changed';
+        sessionKey: string | null;
+    }) => void): () => void;
+}
+interface OpenRTCEnrolledDevice {
+    deviceId: string;
+    name?: string;
+    platform?: string;
+    enrolledAtMs: number | null;
+    lastGrantAtMs: number | null;
+    current: boolean;
+}
+/**
+ * Public, non-secret presentation metadata for one enrolled installation.
+ * OpenRTC derives a useful browser default when these fields are omitted;
+ * native hosts should pass the OS/device information reported by their host.
+ */
+interface OpenRTCDeviceProfile {
+    /** Human-readable label such as `Bryant's iPhone` or `Chrome on Android`. */
+    name?: string;
+    /** Raw OS/runtime label such as `ios`, `android`, `macos`, or `web`. */
+    platform?: string;
+    /** Optional application-owned public presence metadata, bounded to 4 KiB. */
+    metadata?: string;
 }
 interface OpenRTCAttestationProvider {
     readonly kind: 'firebase-app-check' | 'apple-app-attest' | 'play-integrity' | `custom:${string}`;
@@ -54,10 +104,10 @@ interface OpenRTCUsageWarning extends OpenRTCUsageUpdate {
     kind: 'warning' | 'session-limit';
 }
 interface OpenRTCTransportPreferences {
-    iroh?: boolean;
-    webrtc?: boolean;
+    iroh?: boolean | PlutoIrohConfiguration;
+    webrtc?: boolean | PlutoRTCConfiguration;
     relay?: boolean;
-    moq?: boolean;
+    moq?: boolean | PlutoMoQConfiguration;
     ble?: boolean;
     /**
      * Advanced privacy mode. `relay-only` suppresses direct Iroh addresses,
@@ -65,13 +115,16 @@ interface OpenRTCTransportPreferences {
      * developer manifest's relay opt-in.
      */
     privacy?: 'direct' | 'relay-only';
+    /** Optimize eligible routes for stability/cost or measured latency. */
+    optimizeFor?: TransportOptimization;
     /**
      * Advanced native integration for hosts whose Rust process owns the
      * application protocol registry (for example, a Tauri file-transfer host).
      * Normal SDK consumers should leave this disabled.
      */
     nativeHostProtocols?: boolean;
-    priority?: readonly ('iroh' | 'webrtc' | 'moq' | 'ble')[];
+    /** Exact route order. Unsupported routes are skipped, never treated as failures. */
+    priority?: readonly ProtocolName[];
 }
 interface OpenRTCOptions {
     apiKey: string;
@@ -90,6 +143,30 @@ interface OpenRTCOptions {
 }
 type OpenRTCAccessMode = 'capability' | 'authenticated';
 type OpenRTCLatestStateMode = 'reliable' | 'latest-state';
+interface OpenRTCConnection {
+    readonly id: string;
+    readonly peerId: string;
+    send(message: unknown): Promise<void>;
+    onMessage<T = unknown>(callback: (message: T) => void): () => void;
+    onClose(callback: () => void): () => void;
+}
+interface OpenRTCChannel<T> {
+    send(message: T): Promise<void>;
+    sendTo(peerId: string, message: T): Promise<void>;
+    onMessage(callback: (event: {
+        peerId: string;
+        message: T;
+    }) => void): () => void;
+}
+interface OpenRTCState<T> {
+    /** Replace the locally published value. Delivery is best-effort and coalesced. */
+    set(value: T): void;
+    /** A null value means the peer disconnected. */
+    watch(callback: (event: {
+        peerId: string;
+        value: T | null;
+    }) => void): () => void;
+}
 interface OpenRTCCapabilityHandle {
     readonly kind: 'devices' | 'space' | 'room' | 'ticket';
     readonly id: string;
@@ -97,6 +174,10 @@ interface OpenRTCCapabilityHandle {
     readonly channels: OpenRTCChannelNamespace;
     readonly diagnostics: OpenRTCDiagnosticsNamespace;
     readonly closed: boolean;
+    state<T>(name: string): OpenRTCState<T>;
+    channel<T>(name: string): OpenRTCChannel<T>;
+    /** Observe current and future connections without taking lifecycle ownership. */
+    onConnection(callback: (connection: OpenRTCConnection) => void): () => void;
     close(): Promise<void>;
 }
 interface OpenRTCDevicesHandle extends OpenRTCCapabilityHandle {
@@ -121,20 +202,20 @@ interface OpenRTCRoomHandle extends OpenRTCCapabilityHandle {
 }
 interface OpenRTCTicketHandle extends OpenRTCCapabilityHandle {
     readonly kind: 'ticket';
+    /**
+     * Opaque, install-bound OpenRTC capability credential. This is not a
+     * transferable invitation or recipient redemption token. Do not display,
+     * log, persist, or send it to another installation.
+     * @deprecated This credential exposure is retained only for RC source
+     * compatibility and will not be part of the stable invitation workflow.
+     */
     readonly token: string;
 }
 interface OpenRTCDevicesStartOptions {
     auth?: OpenRTCAuthProvider;
     autoConnect?: 'none' | 'online';
     /** Optional local profile; it does not alter the durable device identity. */
-    profile?: {
-        name?: string;
-        /**
-         * Optional application-owned public presence metadata. It is bounded
-         * to 4 KiB and folded into the initial connection/presence operation.
-         */
-        metadata?: string;
-    };
+    profile?: OpenRTCDeviceProfile;
     maxPeers?: number;
     /** Requires the app manifest's advanced-fanout opt-in. */
     advancedFanout?: boolean;
@@ -176,7 +257,22 @@ interface OpenRTCUsageNamespace {
 }
 interface OpenRTCClient {
     readonly devices: {
+        /**
+         * Returns this installation's durable, app-scoped device ID without
+         * starting a capability or performing network work.
+         */
+        localId(): Promise<string>;
         start(options?: OpenRTCDevicesStartOptions): Promise<OpenRTCDevicesHandle>;
+        listEnrolled(options?: {
+            auth?: OpenRTCAuthProvider;
+        }): Promise<OpenRTCEnrolledDevice[]>;
+        revoke(deviceId: string, options?: {
+            auth?: OpenRTCAuthProvider;
+        }): Promise<void>;
+        revokeAll(options?: {
+            auth?: OpenRTCAuthProvider;
+            exceptCurrent?: boolean;
+        }): Promise<void>;
     };
     readonly spaces: {
         join(id: string, options?: OpenRTCSpaceJoinOptions): Promise<OpenRTCSpaceHandle>;
@@ -192,4 +288,4 @@ interface OpenRTCClient {
     close(): Promise<void>;
 }
 
-export type { OpenRTCOptions as O, OpenRTCClient as a, OpenRTCAccessMode as b, OpenRTCAttestationProvider as c, OpenRTCAuthProvider as d, OpenRTCBotVerificationProvider as e, OpenRTCCapabilityHandle as f, OpenRTCChannelCatalog as g, OpenRTCDevicesHandle as h, OpenRTCDevicesStartOptions as i, OpenRTCLatestStateMode as j, OpenRTCRoomHandle as k, OpenRTCRoomJoinOptions as l, OpenRTCSpaceHandle as m, OpenRTCSpaceJoinOptions as n, OpenRTCTicketHandle as o, OpenRTCTicketIssueOptions as p, OpenRTCTransportPreferences as q, OpenRTCUsageNamespace as r, OpenRTCUsageUpdate as s, OpenRTCUsageWarning as t };
+export type { OpenRTCOptions as O, OpenRTCClient as a, OpenRTCAccessMode as b, OpenRTCAttestationProvider as c, OpenRTCAuthProvider as d, OpenRTCBotVerificationProvider as e, OpenRTCCapabilityHandle as f, OpenRTCChannel as g, OpenRTCChannelCatalog as h, OpenRTCConnection as i, OpenRTCDeviceProfile as j, OpenRTCDevicesHandle as k, OpenRTCDevicesStartOptions as l, OpenRTCEnrolledDevice as m, OpenRTCLatestStateMode as n, OpenRTCRoomHandle as o, OpenRTCRoomJoinOptions as p, OpenRTCSpaceHandle as q, OpenRTCSpaceJoinOptions as r, OpenRTCState as s, OpenRTCTicketHandle as t, OpenRTCTicketIssueOptions as u, OpenRTCTransportPreferences as v, OpenRTCUsageNamespace as w, OpenRTCUsageUpdate as x, OpenRTCUsageWarning as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openrtc",
-  "version": "2.0.0-rc.3",
+  "version": "2.0.0-rc.30",
   "private": false,
   "type": "module",
   "sideEffects": false,
@@ -43,18 +43,10 @@
       "types": "./dist/testing.d.ts",
       "import": "./dist/testing.js"
     },
-    "./auth": {
-      "types": "./dist/auth/index.d.ts",
-      "import": "./dist/auth/index.js"
-    },
     "./runtime": {
       "types": "./dist/runtime/index.d.ts",
       "import": "./dist/runtime/index.js"
     },
-    "./runtime/legacy": {
-      "types": "./dist/runtime/legacy.d.ts",
-      "import": "./dist/runtime/legacy.js"
-    },
     "./runtime/device-status": {
       "types": "./dist/runtime/device-status.d.ts",
       "import": "./dist/runtime/device-status.js"
@@ -63,18 +55,10 @@
       "types": "./dist/runtime/WasmRuntimeAdapter.d.ts",
       "import": "./dist/runtime/WasmRuntimeAdapter.js"
     },
-    "./runtime/tauri": {
-      "types": "./dist/runtime/tauri.d.ts",
-      "import": "./dist/runtime/tauri.js"
-    },
     "./transport": {
       "types": "./dist/transport/index.d.ts",
       "import": "./dist/transport/index.js"
     },
-    "./auth/internal": {
-      "types": "./dist/auth/internal.d.ts",
-      "import": "./dist/auth/internal.js"
-    },
     "./package.json": "./package.json"
   },
   "scripts": {
@@ -84,8 +68,8 @@
     "build:clean": "rm -rf dist && pnpm run build",
     "release:prepare": "pnpm run build:wasm && pnpm run build:clean && pnpm run check:lightweight-entry && pnpm run check:native-bundle",
     "build:types": "tsc --noEmit",
-    "build:wasm": "cd ../../crates/openrtc && OPENRTC_REPO_ROOT=$(cd ../.. && pwd) && CARGO_REGISTRY_ROOT=${CARGO_HOME:-$HOME/.cargo} && RUSTUP_TOOLCHAIN=nightly RUSTFLAGS=\"-Zlocation-detail=none --remap-path-prefix=$HOME=/home --remap-path-prefix=$CARGO_REGISTRY_ROOT=/cargo --remap-path-prefix=$OPENRTC_REPO_ROOT=/openrtc\" wasm-pack build --target web --out-dir ../../packages/openrtc/wasm . && rm -rf ../../packages/openrtc/wasm/.gitignore",
-    "build:wasm:legacy": "cd ../../crates/openrtc && OPENRTC_REPO_ROOT=$(cd ../.. && pwd) && CARGO_REGISTRY_ROOT=${CARGO_HOME:-$HOME/.cargo} && RUSTUP_TOOLCHAIN=nightly RUSTFLAGS=\"-Zlocation-detail=none --remap-path-prefix=$HOME=/home --remap-path-prefix=$CARGO_REGISTRY_ROOT=/cargo --remap-path-prefix=$OPENRTC_REPO_ROOT=/openrtc\" wasm-pack build --target web --out-dir ../../packages/openrtc/wasm . --features legacy-v1 && rm -rf ../../packages/openrtc/wasm/.gitignore",
+    "build:wasm": "cd ../../crates/openrtc && OPENRTC_REPO_ROOT=$(cd ../.. && pwd) && CARGO_REGISTRY_ROOT=${CARGO_HOME:-$HOME/.cargo} && RUSTUP_TOOLCHAIN=nightly RUSTFLAGS=\"-Zlocation-detail=none --remap-path-prefix=$HOME=/home --remap-path-prefix=$CARGO_REGISTRY_ROOT=/cargo --remap-path-prefix=$OPENRTC_REPO_ROOT=/openrtc\" wasm-pack build --target web --out-dir ../../packages/openrtc/wasm . --features iroh-protocols-wasm,iroh-transport-webrtc,iroh-transport-moq && rm -rf ../../packages/openrtc/wasm/.gitignore",
+    "build:wasm:legacy": "cd ../../crates/openrtc && OPENRTC_REPO_ROOT=$(cd ../.. && pwd) && CARGO_REGISTRY_ROOT=${CARGO_HOME:-$HOME/.cargo} && RUSTUP_TOOLCHAIN=nightly RUSTFLAGS=\"-Zlocation-detail=none --remap-path-prefix=$HOME=/home --remap-path-prefix=$CARGO_REGISTRY_ROOT=/cargo --remap-path-prefix=$OPENRTC_REPO_ROOT=/openrtc\" wasm-pack build --target web --out-dir ../../packages/openrtc/wasm . --features legacy-v1,iroh-protocols-wasm,iroh-transport-webrtc,iroh-transport-moq && rm -rf ../../packages/openrtc/wasm/.gitignore",
     "test": "pnpm run test:deterministic && pnpm run test:emulator",
     "test:deterministic": "OPENRTC_DETERMINISTIC_TESTS=1 vitest run tests/unit tests/contract",
     "test:emulator": "node ../../tests/emulator/run-emulator-suite.mjs",
@@ -107,14 +91,6 @@
     "@noble/hashes": "^1.8.0",
     "tweetnacl": "^1.0.3"
   },
-  "peerDependencies": {
-    "firebase": "^9.0.0 || ^10.0.0 || ^11.0.0 || ^12.0.0"
-  },
-  "peerDependenciesMeta": {
-    "firebase": {
-      "optional": true
-    }
-  },
   "devDependencies": {
     "@types/node": "^20.0.0",
     "@vitest/coverage-v8": "^4.0.18",