openrtc 2.0.0 → 2.1.0

package/dist/{IpcRuntimeAdapter-CJq3dRBF.d.ts → IpcRuntimeAdapter-DDKeQ6UC.d.ts}

@@ -1,6 +1,6 @@
-import { g as ClientOptions } from './ITransport-WV6gGMnX.js';
-import { a as WasmBridgeOptions, D as DelegatingRuntimeAdapter } from './DelegatingRuntimeAdapter-BFZDC604.js';
-import { P as PlutoIpcBridge } from './ipc-CflAVodw.js';
+import { h as ClientOptions } from './ITransport-yaruAmx3.js';
+import { a as WasmBridgeOptions, D as DelegatingRuntimeAdapter } from './DelegatingRuntimeAdapter-BkLR3TNN.js';
+import { P as PlutoIpcBridge } from './ipc-CPnNwv6f.js';
 
 interface NativeIpcBridgeOptions extends WasmBridgeOptions {
     allowWasmFallback?: boolean;
@@ -9,11 +9,11 @@ interface NativeIpcBridgeOptions extends WasmBridgeOptions {
     strictMode?: boolean;
 }
 
-interface IpcRuntimeAdapterOptions extends NativeIpcBridgeOptions {
+interface IpcAdapterOptions extends NativeIpcBridgeOptions {
     bridge: PlutoIpcBridge;
 }
 declare class IpcRuntimeAdapter extends DelegatingRuntimeAdapter {
-    constructor(options: IpcRuntimeAdapterOptions);
+    constructor(options: IpcAdapterOptions);
 }
 
-export { IpcRuntimeAdapter as I, type IpcRuntimeAdapterOptions as a };
+export { IpcRuntimeAdapter as I, type IpcAdapterOptions as a };

package/dist/WasmBridge-DVQ2YPRB.js

@@ -0,0 +1 @@
+export{z as WasmBridge}from'./chunk-OUFHVLDQ.js';import'./chunk-AJQVMVYW.js';import'./chunk-NXM5ZGHD.js';import'./chunk-NRXEG5GQ.js';import'./chunk-SUWCBTBQ.js';import'./chunk-LN4ALFT6.js';

package/dist/{assembly-q0jRRpsc.d.ts → assembly-BTzwQuwI.d.ts}

@@ -1,6 +1,6 @@
-import { a as RuntimePeerState, j as RuntimeConnectionStateSnapshot, c as RuntimePeerReadinessSnapshot, b as RuntimePeerConnectOptions, C as Connection, f as RuntimeIncomingStream, v as RuntimeClientOptions, z as RuntimeAuthIdentity, A as AuthContext, q as RuntimeLocalDeviceInfo, r as RuntimeLocalDeviceProfile, I as IrohBrowserProtocolStore, w as IrohNamespaceDescriptor, x as IrohMutationReceipt, y as IrohDocEntry, h as RuntimeDevice, m as RuntimeManagedSessionOptions, n as RuntimeManagedSession, o as RuntimeDeviceStatusSnapshot, p as RuntimeDeviceConnectOptions, B as RuntimeSession, t as RuntimeJoinRoomOptions, u as RuntimeRoomMember, D as RuntimeConnectionTarget, g as RuntimeScopedChannelOptions, i as RuntimeScopedLogicalChannel, e as RuntimePeerStreamOptions, s as RuntimeRawConnection, R as RuntimeChannelDescriptor, E as RuntimePresenceLoopOptions, d as RuntimePeerHealth, k as RuntimeApplicationPayloadReadinessOptions, l as RuntimeConnectionEvent } from './types-DVNSd5B9.js';
-import { G as GrantScope, I as ISignalingBackend, e as ConnectDeviceHooks, f as ConnectDeviceOptions, C as ConnectDeviceResult, M as ManagedConnectionRecord, d as PeerSessionSnapshot, R as ResolvedPeerIdentity, a4 as AppLimits, N as NativeConnectParams, q as NativeConnectResult, E as ExplicitFileDataSendParams } from './ITransport-WV6gGMnX.js';
-import { R as RuntimeCapabilities, a as RuntimeCapabilityProfile } from './capabilities-BfZi4Cd7.js';
+import { R as RuntimePeerState, g as ConnectionState, b as PeerReadiness, P as PeerConnectOptions, a as Connection, I as IncomingStream, o as RuntimeClientOptions, r as RuntimeAuthIdentity, A as AuthContext, L as LocalDeviceInfo, l as DeviceProfile, B as BrowserProtocolStore, N as NamespaceDescriptor, p as IrohMutationReceipt, q as IrohDocEntry, e as RuntimeDevice, M as ManagedOptions, j as ManagedSession, D as DeviceStatus, k as DeviceConnectOptions, s as RuntimeSession, J as JoinRoomOptions, n as RuntimeRoomMember, t as ConnectionTarget, S as ScopedChannelOptions, f as ScopedLogicalChannel, d as PeerStreamOptions, m as RawConnection, C as ChannelDescriptor, u as PresenceLoopOptions, c as RuntimePeerHealth, h as ReadinessOptions, i as ConnectionEvent } from './types-D67HlF0p.js';
+import { G as GrantScope, I as ISignalingBackend, f as ConnectDeviceHooks, g as ConnectDeviceOptions, C as ConnectDeviceResult, M as ManagedConnectionRecord, d as PeerSessionSnapshot, e as ResolvedPeerIdentity, a6 as AppLimits, N as NativeConnectParams, t as NativeConnectResult, E as ExplicitFileDataSendParams } from './ITransport-yaruAmx3.js';
+import { R as RuntimeCapabilities, C as CapabilityProfile } from './capabilities-BwzPe51I.js';
 
 /**
  * Coalesced peer reconciliation scheduler and full reconcile orchestration.
@@ -26,7 +26,7 @@ interface SessionOptions {
      */
     scope: string;
     /**
-     * When true, watchPeerStates / onConnectionStateChange deliver events for
+     * When true, watchPeerStates / onStateChange deliver events for
      * ALL peers, not just those scoped to this session. Useful for the default
      * 'user-device' session that legitimately needs the full peer picture.
      * Default: false.
@@ -54,23 +54,23 @@ interface Session {
      * Subscribe to connection-state events filtered to this session's scope.
      * Returns the unsubscribe function (may be async for WASM bridge compat).
      */
-    onConnectionStateChange(callback: (state: RuntimeConnectionStateSnapshot) => void): (() => void) | Promise<() => void>;
+    onStateChange(callback: (state: ConnectionState) => void): (() => void) | Promise<() => void>;
     /** Async snapshot of peers matching this session's scope. */
     listConnectedPeers(): RuntimePeerState[];
     /** Peer readiness for a specific peer ID (scope-filtered). */
-    getPeerReadiness(peerId: string): Promise<RuntimePeerReadinessSnapshot>;
+    getPeerReadiness(peerId: string): Promise<PeerReadiness>;
     /**
      * Connect to a peer via ticket or device ID, tagging the connection with
      * this session's scope.
      */
-    connectPeer(options: RuntimePeerConnectOptions): Promise<Connection>;
+    connectPeer(options: PeerConnectOptions): Promise<Connection>;
     /** Disconnect a peer within this session's scope only. */
     disconnectPeer(peerId: string): Promise<void>;
     /**
      * Subscribe to incoming streams from peers whose scope matches this
      * session. Streams from other scopes are not delivered.
      */
-    onIncomingStream(callback: (stream: RuntimeIncomingStream) => void): () => void;
+    onIncomingStream(callback: (stream: IncomingStream) => void): () => void;
     /** Tear down all subscriptions and disconnect scope-tagged connections. */
     dispose(): void;
 }
@@ -80,7 +80,7 @@ interface Session {
  * (`docs/plans/openrtc-auth-connection-remediation-plan.md`).
  *
  * `DriveGrantActorHandle` is the historical implementation behind the public
- * `ScopedConnectionActorHandle` alias. It is a TypeScript observer-side dial
+ * `ConnectionActor` alias. It is a TypeScript observer-side dial
  * coalescer for scoped protocol routes such as drive-grant guests and
  * trusted-device drive-view. It mirrors the intended Rust actor shape but is
  * not backed by the Rust actor today. With one handle per `(scope, peerNodeId)`
@@ -95,7 +95,7 @@ interface Session {
  * end-to-end. What it does today:
  *
  *   - `DriveGrantConnectionPipeline` and trusted-device drive-view acquisition call
- *     `runtimeClient.getScopedConnectionActor(scope, peerNodeId).ensureReady()`,
+ *     `runtimeClient.connectionActor(scope, peerNodeId).ensureReady()`,
  *     then perform their existing `connectPeer` call inside the handle-owned
  *     `dial` function. Multiple concurrent observers for the same key thus
  *     coalesce to one `connectPeer` call.
@@ -197,12 +197,6 @@ declare class DriveGrantActorHandle {
      * QUIC stream layer.
      */
     openLogicalChannel(label: string): Promise<DriveGrantLogicalChannelHandle>;
-    /**
-     * Test/Phase-4 helper: returns the label without invoking the
-     * unimplemented wire format, so observers can prove their request
-     * shape round-trips today.
-     */
-    openLogicalChannelTestStub(label: string): Promise<DriveGrantLogicalChannelHandle>;
     /**
      * Idempotent shutdown. Subsequent `ensureReady()` rejects with
      * `shutdown`; subsequent `shutdown()` is a no-op.
@@ -224,7 +218,7 @@ declare class DriveGrantActorRegistry {
     size(): number;
 }
 
-interface RuntimePolicySnapshot {
+interface PolicySnapshot {
     managedSession: {
         nativeStartRetryWindowMs: number;
         nativeStartRetryMinDelayMs: number;
@@ -251,8 +245,8 @@ interface RuntimePolicySnapshot {
         ephemeralDeviceIdTtlMs: number;
     };
 }
-declare const OPENRTC_RUNTIME_POLICY: RuntimePolicySnapshot;
-declare function getRuntimePolicy(): RuntimePolicySnapshot;
+declare const RUNTIME_POLICY: PolicySnapshot;
+declare function getRuntimePolicy(): PolicySnapshot;
 
 /**
  * RuntimeClient is the primary application-facing API.
@@ -287,7 +281,7 @@ declare class RuntimeClient {
     private readonly deviceManager;
     private readonly peerManager;
     private readonly connectionController;
-    private readonly nativeApplicationStreamConsumer;
+    private readonly nativeStreamConsumer;
     private managedSessionKey;
     private managedSessionUserId;
     private managedSessionOptions;
@@ -324,7 +318,7 @@ declare class RuntimeClient {
     private scheduleManagedReconciliationFollowups;
     private stopManagedReconciliation;
     private notifyManagedReconciliation;
-    reconcileNativeManagedSession(reason?: string): Promise<void>;
+    syncNativeSession(reason?: string): Promise<void>;
     notifyNetworkChange(reason?: string): Promise<void>;
     private connectionStateSnapshotKey;
     private runNativeStartLoop;
@@ -341,10 +335,10 @@ declare class RuntimeClient {
         localNodeId?: string;
         userId?: string;
     }>;
-    getPeerReconciliationStats(): Readonly<PeerReconciliationStats>;
-    getRuntimePolicy(): RuntimePolicySnapshot;
-    getRuntimeCapabilities(): RuntimeCapabilities;
-    getCapabilityProfile(): RuntimeCapabilityProfile;
+    reconciliationStats(): Readonly<PeerReconciliationStats>;
+    getRuntimePolicy(): PolicySnapshot;
+    capabilities(): RuntimeCapabilities;
+    getCapabilityProfile(): CapabilityProfile;
     start(options?: {
         clearSessionTokens?: boolean;
     }): Promise<void>;
@@ -352,14 +346,14 @@ declare class RuntimeClient {
     getNodeId(): Promise<string>;
     getNodeIdFromTicket(ticket: string): Promise<string | null>;
     getLocalDeviceId(): Promise<string | null>;
-    getLocalDeviceInfo(): Promise<RuntimeLocalDeviceInfo | null>;
-    getLocalDeviceProfile(options?: {
+    getLocalDeviceInfo(): Promise<LocalDeviceInfo | null>;
+    localDeviceProfile(options?: {
         deviceName?: string;
         localDeviceId?: string | null;
         platform?: 'native' | 'web';
         userId?: string | null;
-    }): Promise<RuntimeLocalDeviceProfile>;
-    updateLocalDeviceName(deviceName: string): Promise<RuntimeLocalDeviceInfo | null>;
+    }): Promise<DeviceProfile>;
+    updateDeviceName(deviceName: string): Promise<LocalDeviceInfo | null>;
     getManagedNodeId(options?: {
         initializeIfMissing?: boolean;
     }): Promise<string | null>;
@@ -368,11 +362,11 @@ declare class RuntimeClient {
      * browser endpoint. The host store supplies durable IndexedDB operations;
      * no second endpoint, router, presence loop, or reconnect owner is created.
      */
-    initializeIrohProtocols(store: IrohBrowserProtocolStore): Promise<void>;
+    initIrohProtocols(store: BrowserProtocolStore): Promise<void>;
     createIrohNamespace(options?: {
         generation?: number;
         shareRevision?: number;
-    }): Promise<IrohNamespaceDescriptor>;
+    }): Promise<NamespaceDescriptor>;
     importIrohTicket(ticket: string, options?: {
         generation?: number;
         shareRevision?: number;
@@ -392,7 +386,7 @@ declare class RuntimeClient {
     }>;
     queryIrohNamespace(namespaceId: string, keyPrefix?: Uint8Array<ArrayBuffer>): Promise<IrohDocEntry[]>;
     hydrateIrohBlob(contentHash: string): Promise<void>;
-    acknowledgeIrohOutbox(operationId: string): Promise<void>;
+    acknowledgeOutbox(operationId: string): Promise<void>;
     flushIrohProtocols(): Promise<void>;
     private persistentIrohProtocolBackend;
     private assertProtocolCounter;
@@ -414,7 +408,7 @@ declare class RuntimeClient {
      * remains the sole owner of the native/WASM admission registry. Restricted
      * grants should always include their server-issued expiry.
      */
-    registerAdmissionToken(input: {
+    registerToken(input: {
         token: string;
         scope: GrantScope;
         maxConnections?: number;
@@ -454,14 +448,14 @@ declare class RuntimeClient {
      */
     updateFriendTicket(friendTicket: string | null): Promise<void>;
     getEndpointTicket(): Promise<string>;
-    startManagedSession(options: RuntimeManagedSessionOptions): Promise<RuntimeManagedSession>;
+    startManagedSession(options: ManagedOptions): Promise<ManagedSession>;
     stopManagedSession(options?: {
         preserveBackendSession?: boolean;
     }): Promise<void>;
     private stopManagedSessionInternal;
     private rotateManagedUserDeviceGrant;
     listDevices(): Promise<RuntimeDevice[]>;
-    listDevicesWithStatus(): Promise<RuntimeDeviceStatusSnapshot[]>;
+    listDeviceStatus(): Promise<DeviceStatus[]>;
     updateDevice(deviceId: string, updates: {
         deviceName?: string;
         capabilities?: RuntimeDevice['capabilities'];
@@ -469,8 +463,8 @@ declare class RuntimeClient {
     }): Promise<void>;
     deleteDevice(deviceId: string): Promise<void>;
     watchDevices(callback: (devices: RuntimeDevice[]) => void): () => void;
-    watchDevicesWithStatus(callback: (devices: RuntimeDeviceStatusSnapshot[]) => void): () => void;
-    connectDeviceWithRetry(device: RuntimeDevice, hooks: ConnectDeviceHooks, options: ConnectDeviceOptions): Promise<ConnectDeviceResult>;
+    watchDeviceStatus(callback: (devices: DeviceStatus[]) => void): () => void;
+    connectWithRetry(device: RuntimeDevice, hooks: ConnectDeviceHooks, options: ConnectDeviceOptions): Promise<ConnectDeviceResult>;
     /**
      * Runtime-owned device connect flow used by product code.
      * Rust owns the actual managed dial policy. This wrapper only:
@@ -478,17 +472,17 @@ declare class RuntimeClient {
      * - forwards the request to the active runtime adapter
      * - refreshes peer state and invokes optional app callbacks
      */
-    connectDevice(device: RuntimeDevice, options: RuntimeDeviceConnectOptions): Promise<ConnectDeviceResult>;
+    connectDevice(device: RuntimeDevice, options: DeviceConnectOptions): Promise<ConnectDeviceResult>;
     watchPeerStates(callback: (peers: RuntimePeerState[]) => void): () => void;
     watchPeerLifecycle(callback: (peers: RuntimePeerState[]) => void): () => void;
     getPeerState(id: string): RuntimePeerState | undefined;
-    resolvePeerConnectionRecords(id: string): Promise<ManagedConnectionRecord[]>;
+    resolvePeerRecords(id: string): Promise<ManagedConnectionRecord[]>;
     getPeerSession(id: string): Promise<PeerSessionSnapshot | null>;
     listPeerSessions(): Promise<PeerSessionSnapshot[]>;
     waitForConnectedPeer(id: string, timeoutMs?: number): Promise<PeerSessionSnapshot | null>;
-    getPeerReadiness(id: string, timeoutMs?: number): Promise<RuntimePeerReadinessSnapshot>;
+    getPeerReadiness(id: string, timeoutMs?: number): Promise<PeerReadiness>;
     resolvePeerIdentity(id: string): Promise<ResolvedPeerIdentity>;
-    resolveIncomingStreamPeer(remoteNodeId: string): Promise<ResolvedPeerIdentity>;
+    resolveStreamPeer(remoteNodeId: string): Promise<ResolvedPeerIdentity>;
     listConnectedPeers(): RuntimePeerState[];
     addPeerScope(id: string, scope?: string): RuntimePeerState | undefined;
     releasePeerScope(id: string, scope?: string): RuntimePeerState | undefined;
@@ -498,14 +492,14 @@ declare class RuntimeClient {
     subscribeSessions(localDeviceId: string, callback: (session: RuntimeSession) => void | Promise<void>): Promise<() => void>;
     getAppLimits(): AppLimits;
     createRoom(roomId?: string): Promise<string>;
-    joinRoom(roomId: string, options?: RuntimeJoinRoomOptions): Promise<Connection[]>;
+    joinRoom(roomId: string, options?: JoinRoomOptions): Promise<Connection[]>;
     leaveRoom(roomId: string): Promise<void>;
     getRoomMembers(roomId: string): Promise<RuntimeRoomMember[]>;
     watchRoom(roomId: string, callback: (members: RuntimeRoomMember[]) => void): () => void;
     /** @deprecated Use connect() (no-arg) for lifecycle, or connectTo() for peer connections */
-    connectByTicket(target: RuntimeConnectionTarget): Promise<Connection>;
-    connectPeer(options: RuntimePeerConnectOptions): Promise<Connection>;
-    connectScopedChannel(options: RuntimeScopedChannelOptions): Promise<RuntimeScopedLogicalChannel>;
+    connectByTicket(target: ConnectionTarget): Promise<Connection>;
+    connectPeer(options: PeerConnectOptions): Promise<Connection>;
+    connectScopedChannel(options: ScopedChannelOptions): Promise<ScopedLogicalChannel>;
     /**
      * Returns the per-`{scope, peerNodeId}` observer-side coalescer that
      * participating scoped guest callers (such as DriveViewClient) use. The
@@ -522,7 +516,7 @@ declare class RuntimeClient {
      * only with a narrow `dial` callback that delegates back through
      * `connectPeer`; the runtime `Client` remains the peer lifecycle owner.
      */
-    getScopedConnectionActor(key: DriveGrantConnectionKey | {
+    connectionActor(key: DriveGrantConnectionKey | {
         scope: string;
         peerNodeId: string;
     }, options?: {
@@ -540,7 +534,7 @@ declare class RuntimeClient {
          * router/disconnect handler to the connection object) can
          * supply their own `dial` here. The actor's coalescer still
          * ensures only one `dial(key)` runs even with N concurrent
-         * `getScopedConnectionActor(...).ensureReady()` callers — this just
+         * `connectionActor(...).ensureReady()` callers — this just
          * lets the caller decide what "dial" means.
          */
         dial?: (key: DriveGrantConnectionKey) => Promise<void>;
@@ -549,40 +543,40 @@ declare class RuntimeClient {
     private scopedDialCandidateIds;
     private hasManualDisconnectSuppression;
     /** Shuts down every scoped observer handle during managed-session teardown. */
-    shutdownScopedConnectionActors(): Promise<void>;
-    openPeerBi(id: string, options?: RuntimePeerStreamOptions): Promise<{
+    shutdownActors(): Promise<void>;
+    openPeerBi(id: string, options?: PeerStreamOptions): Promise<{
         connection: Connection;
         readable: ReadableStream<Uint8Array>;
         writable: WritableStream<Uint8Array>;
     }>;
-    openPeerNativeBi(id: string, label: string, options?: RuntimePeerStreamOptions): Promise<{
+    openPeerNativeBi(id: string, label: string, options?: PeerStreamOptions): Promise<{
         connection: Connection;
         readable: ReadableStream<Uint8Array>;
         writable: WritableStream<Uint8Array>;
     }>;
     /** Like openPeerBi but skips the settled_ready requirement — usable for latency probes. */
-    openPeerBiTransportOnly(id: string, options?: RuntimePeerStreamOptions): Promise<{
+    openPeerBiRaw(id: string, options?: PeerStreamOptions): Promise<{
         connection: Connection;
         readable: ReadableStream<Uint8Array>;
         writable: WritableStream<Uint8Array>;
     }>;
-    openPeerUni(id: string, options?: RuntimePeerStreamOptions): Promise<{
+    openPeerUni(id: string, options?: PeerStreamOptions): Promise<{
         connection: Connection;
         writable: WritableStream<Uint8Array>;
     }>;
     private waitForBrowserApplicationCrypto;
     connectToDevice(params: NativeConnectParams): Promise<NativeConnectResult>;
-    connectRaw(target: RuntimeConnectionTarget): Promise<RuntimeRawConnection>;
+    connectRaw(target: ConnectionTarget): Promise<RawConnection>;
     openBi(nodeId: string): Promise<{
         readable: ReadableStream<Uint8Array>;
         writable: WritableStream<Uint8Array>;
     }>;
     openUni(nodeId: string): Promise<WritableStream<Uint8Array>>;
-    onIncomingStream(callback: (stream: RuntimeIncomingStream) => boolean | void): () => void;
-    registerChannel(descriptor: RuntimeChannelDescriptor): void;
+    onIncomingStream(callback: (stream: IncomingStream) => boolean | void): () => void;
+    registerChannel(descriptor: ChannelDescriptor): void;
     unregisterChannel(channelId: string): void;
-    listChannels(): RuntimeChannelDescriptor[];
-    onIncomingChannelStream(channelId: string, callback: (stream: RuntimeIncomingStream) => boolean | void): () => void;
+    listChannels(): ChannelDescriptor[];
+    onChannelStream(channelId: string, callback: (stream: IncomingStream) => boolean | void): () => void;
     /** @deprecated Use named channels or the optional `openrtc-file-transfer` package. */
     sendExplicitFilePath(connectionId: string, filePath: string, transferId?: string): Promise<string>;
     /** @deprecated Use named channels or the optional `openrtc-file-transfer` package. */
@@ -591,7 +585,7 @@ declare class RuntimeClient {
     getTransferHistory(limit?: number): Promise<Array<[string, unknown]>>;
     /** @deprecated Transfer history belongs to the consumer application. */
     deleteTransferJob(jobId: string): Promise<void>;
-    startPresenceLoop(options?: RuntimePresenceLoopOptions): Promise<void>;
+    startPresenceLoop(options?: PresenceLoopOptions): Promise<void>;
     updatePresence(options?: {
         isOnline?: boolean;
         ttlMs?: number;
@@ -608,20 +602,20 @@ declare class RuntimeClient {
     isConnected(nodeId: string): Promise<boolean>;
     disconnectNode(nodeId: string): Promise<void>;
     disconnectDevice(deviceId: string): Promise<void>;
-    setAutoConnectExcluded(deviceId: string, excluded: boolean): Promise<void>;
+    excludeAutoConnect(deviceId: string, excluded: boolean): Promise<void>;
     disconnectPeer(id: string, scope?: string): Promise<void>;
     forceDisconnectPeer(id: string): Promise<void>;
     getPeerHealth(id: string): Promise<RuntimePeerHealth>;
-    getConnectionStates(): Promise<RuntimeConnectionStateSnapshot[]>;
+    getConnectionStates(): Promise<ConnectionState[]>;
     /**
      * Subscribe to raw backend connection diagnostics.
      *
      * This compatibility surface intentionally does not drive peer lifecycle or
      * UI readiness; use watchPeerStates() for the reducer-owned lifecycle view.
      */
-    onConnectionStateChange(callback: (state: RuntimeConnectionStateSnapshot) => void): Promise<() => void> | (() => void);
+    onStateChange(callback: (state: ConnectionState) => void): Promise<() => void> | (() => void);
     getConnections(): Connection[];
-    getApplicationReadyConnections(options?: RuntimeApplicationPayloadReadinessOptions): Connection[];
+    readyConnections(options?: ReadinessOptions): Connection[];
     onConnection(callback: (connection: Connection) => void): () => void;
     onDisconnection(callback: (connection: Connection) => void): () => void;
     /**
@@ -630,8 +624,8 @@ declare class RuntimeClient {
      * so Iroh, WebRTC, and MoQ share one intake path.
      */
     onMessage(callback: (connection: Connection, message: unknown) => void): () => void;
-    onConnectionEvent(callback: (event: RuntimeConnectionEvent) => void): () => void;
-    forceReconnectSnapshot(): void;
+    onConnectionEvent(callback: (event: ConnectionEvent) => void): () => void;
+    forceReconnect(): void;
     /** Single-call lifecycle: combines initialize() + start() */
     connect(): Promise<void>;
     /** Disconnect from the runtime (alias for stop()) */
@@ -665,24 +659,24 @@ declare class RuntimeClient {
     getDevices(): Promise<RuntimeDevice[]>;
     /** Device subscription with optional status enrichment */
     onDevices(callback: (devices: RuntimeDevice[]) => void): () => void;
-    onDevices(callback: (devices: RuntimeDeviceStatusSnapshot[]) => void, options: {
+    onDevices(callback: (devices: DeviceStatus[]) => void, options: {
         status: true;
     }): () => void;
     /** Alias for getTicket — returns an invite/ticket string */
     getInvite(): Promise<string>;
     /** Connect to a peer by device ID or options */
-    connectTo(options: RuntimePeerConnectOptions): Promise<Connection>;
+    connectTo(options: PeerConnectOptions): Promise<Connection>;
     /** Alias for waitForConnectedPeer */
     waitFor(id: string, timeoutMs?: number): Promise<PeerSessionSnapshot | null>;
     /** Open a stream to a peer (default: bidirectional) */
-    openStream(id: string, options?: RuntimePeerStreamOptions & {
+    openStream(id: string, options?: PeerStreamOptions & {
         direction?: 'bi' | 'send';
     }): Promise<{
         connection: Connection;
         readable?: ReadableStream<Uint8Array>;
         writable: WritableStream<Uint8Array>;
     }>;
-    openChannelStream(channelId: string, id: string, options?: RuntimePeerStreamOptions & {
+    openChannelStream(channelId: string, id: string, options?: PeerStreamOptions & {
         direction?: 'bi' | 'send';
     }): Promise<{
         connection: Connection;
@@ -690,8 +684,7 @@ declare class RuntimeClient {
         writable: WritableStream<Uint8Array>;
     }>;
     /** Alias for onIncomingStream */
-    onStream(callback: (stream: RuntimeIncomingStream) => boolean | void): () => void;
-    onChannelStream(channelId: string, callback: (stream: RuntimeIncomingStream) => boolean | void): () => void;
+    onStream(callback: (stream: IncomingStream) => boolean | void): () => void;
     /** Alias for watchRoom */
     onRoomChange(roomId: string, callback: (members: RuntimeRoomMember[]) => void): () => void;
     /**
@@ -736,10 +729,10 @@ interface PlutoRuntimeAssembly<TBackend extends RuntimeAdapterWithAuth = Runtime
         initializeIfMissing?: boolean;
     }): Promise<string | null>;
     getRuntimeStatus(): Promise<any>;
-    listDevicesWithStatus(): Promise<any>;
-    watchDevicesWithStatus(callback: (devices: any[]) => void): () => void;
+    listDeviceStatus(): Promise<any>;
+    watchDeviceStatus(callback: (devices: any[]) => void): () => void;
     connectDevice(device: any, options: any): Promise<any>;
-    setAutoConnectExcluded(deviceId: string, excluded: boolean): Promise<void>;
+    excludeAutoConnect(deviceId: string, excluded: boolean): Promise<void>;
 }
 
-export { DriveGrantActorError as D, OPENRTC_RUNTIME_POLICY as O, type PeerReconciliationStats as P, type RuntimePolicySnapshot as R, RuntimeClient as a, type PlutoRuntimeAssembly as b, type RuntimeFactoryOptions as c, type DriveGrantActorErrorKind as d, DriveGrantActorHandle as e, type DriveGrantActorHandleOptions as f, DriveGrantActorRegistry as g, type DriveGrantActorState as h, type DriveGrantClose as i, type DriveGrantDial as j, type DriveGrantConnectionKey as k, type DriveGrantLogicalChannelHandle as l, type DriveGrantPreferredTransport as m, getRuntimePolicy as n, driveGrantConnectionKey as o, driveGrantConnectionKeyToString as p };
+export { DriveGrantActorHandle as D, type PolicySnapshot as P, RuntimeClient as R, type PeerReconciliationStats as a, type PlutoRuntimeAssembly as b, type RuntimeFactoryOptions as c, DriveGrantActorError as d, type DriveGrantActorErrorKind as e, type DriveGrantConnectionKey as f, type DriveGrantActorHandleOptions as g, type DriveGrantActorState as h, DriveGrantActorRegistry as i, type DriveGrantClose as j, type DriveGrantDial as k, type DriveGrantLogicalChannelHandle as l, type DriveGrantPreferredTransport as m, RUNTIME_POLICY as n, driveGrantConnectionKey as o, driveGrantConnectionKeyToString as p, getRuntimePolicy as q };

package/dist/{capabilities-BfZi4Cd7.d.ts → capabilities-BwzPe51I.d.ts}

@@ -1,4 +1,4 @@
-import { c as ProtocolName, T as TransportOptimization } from './ITransport-WV6gGMnX.js';
+import { c as ProtocolName, R as RouteOptimization } from './ITransport-yaruAmx3.js';
 
 type RuntimeAdapterKind = 'browser-wasm' | 'native-ipc' | 'tauri-ipc' | 'unknown';
 interface RuntimeCapabilities {
@@ -40,7 +40,7 @@ interface RuntimeCapabilities {
         wasm: boolean;
     };
 }
-interface RuntimeCapabilityProfile {
+interface CapabilityProfile {
     environment: 'web' | 'native' | 'unknown';
     transports: {
         quic: boolean;
@@ -58,39 +58,39 @@ interface RuntimeCapabilityProfile {
     };
     nativeProtocols: RuntimeCapabilities['nativeProtocols'];
 }
-interface NativeRuntimeTransportFeatureStatus {
+interface TransportStatus {
     compiled?: boolean;
     enabled?: boolean;
 }
-interface NativeRuntimeStatusSnapshot {
+interface NativeRuntimeStatus {
     ready?: boolean;
     nodeId?: string | null;
     node_id?: string | null;
     transport?: {
-        irohQuic?: NativeRuntimeTransportFeatureStatus;
-        irohLan?: NativeRuntimeTransportFeatureStatus;
-        webRtc?: NativeRuntimeTransportFeatureStatus;
-        webRtcLan?: NativeRuntimeTransportFeatureStatus;
-        moq?: NativeRuntimeTransportFeatureStatus;
-        ble?: NativeRuntimeTransportFeatureStatus;
+        irohQuic?: TransportStatus;
+        irohLan?: TransportStatus;
+        webRtc?: TransportStatus;
+        webRtcLan?: TransportStatus;
+        moq?: TransportStatus;
+        ble?: TransportStatus;
         irohRelayOnly?: boolean;
         irohRelayTransportPolicy?: string | null;
         routePriority?: ProtocolName[];
-        optimizeFor?: TransportOptimization;
+        optimizeFor?: RouteOptimization;
     };
 }
-declare const BROWSER_WASM_RUNTIME_CAPABILITIES: RuntimeCapabilities;
+declare const BROWSER_CAPABILITIES: RuntimeCapabilities;
 /**
  * The small host surface that browser WebRTC capability reporting needs.
  *
  * This is deliberately a feature check only: capability reporting must not
  * create a peer connection, probe ICE, or influence route ownership.
  */
-interface BrowserRuntimeCapabilityHost {
+interface CapabilityHost {
     RTCPeerConnection?: unknown;
 }
-declare const NATIVE_IPC_RUNTIME_CAPABILITIES: RuntimeCapabilities;
-declare function cloneRuntimeCapabilities(capabilities: RuntimeCapabilities): RuntimeCapabilities;
+declare const NATIVE_CAPABILITIES: RuntimeCapabilities;
+declare function cloneCapabilities(capabilities: RuntimeCapabilities): RuntimeCapabilities;
 /**
  * Returns browser/WASM capabilities for a concrete JavaScript host.
  *
@@ -98,8 +98,8 @@ declare function cloneRuntimeCapabilities(capabilities: RuntimeCapabilities): Ru
  * requires the browser primitive to exist at runtime. Passing the host keeps
  * the resolver deterministic in SSR and test environments.
  */
-declare function runtimeCapabilitiesForBrowserHost(host?: BrowserRuntimeCapabilityHost | null | undefined): RuntimeCapabilities;
-declare function runtimeCapabilitiesFromNativeStatus(status: NativeRuntimeStatusSnapshot | null | undefined, allowWasmFallback?: boolean): RuntimeCapabilities;
-declare function runtimeCapabilityProfile(capabilities: RuntimeCapabilities): RuntimeCapabilityProfile;
+declare function browserCapabilities(host?: CapabilityHost | null | undefined): RuntimeCapabilities;
+declare function statusCapabilities(status: NativeRuntimeStatus | null | undefined, allowWasmFallback?: boolean): RuntimeCapabilities;
+declare function capabilityProfile(capabilities: RuntimeCapabilities): CapabilityProfile;
 
-export { BROWSER_WASM_RUNTIME_CAPABILITIES as B, NATIVE_IPC_RUNTIME_CAPABILITIES as N, type RuntimeCapabilities as R, type RuntimeCapabilityProfile as a, type BrowserRuntimeCapabilityHost as b, type NativeRuntimeStatusSnapshot as c, type NativeRuntimeTransportFeatureStatus as d, type RuntimeAdapterKind as e, cloneRuntimeCapabilities as f, runtimeCapabilitiesFromNativeStatus as g, runtimeCapabilityProfile as h, runtimeCapabilitiesForBrowserHost as r };
+export { BROWSER_CAPABILITIES as B, type CapabilityProfile as C, NATIVE_CAPABILITIES as N, type RuntimeCapabilities as R, type TransportStatus as T, type CapabilityHost as a, type NativeRuntimeStatus as b, type RuntimeAdapterKind as c, browserCapabilities as d, capabilityProfile as e, cloneCapabilities as f, statusCapabilities as s };

package/dist/chunk-4N6UDVZR.js

@@ -0,0 +1 @@
+import {a,b as b$2}from'./chunk-ZA44REGI.js';import {a as a$1}from'./chunk-DUY34MGT.js';import {b as b$1}from'./chunk-NRXEG5GQ.js';var L={"identity.assertion.exchange":25692e-8,"identity.monthly-active-principal":110352e-9,"capability.issue":212346e-9,"device.enroll":218946e-9,"gateway.grant.issue":202146e-9,"gateway.grant.refresh":200346e-9,"security.attestation.verify":29694e-8,"room.create":388056e-9,"room.join":209946e-9,"room.leave":200346e-9,"coordination.connection.open":299532e-9,"coordination.credential.refresh":259662e-9,"coordination.presence.offline":253638e-9,"coordination.signal.send":259638e-9,"coordination.session.put":259638e-9,"coordination.session.delete":253638e-9,"coordination.usage.ingest":197088e-9};var P=new WeakMap;function B(o){let e=P.get(o);if(!e)throw new Error("[OpenRTC] Capability runtime is unavailable or already closed.");return e}function K(o){let e=o?.trim()??"";if(!/^pk_(?:live|test)_[0-9a-f]{40}$/.test(e))throw new Error("[OpenRTC] apiKey must be a public pk_live_ or pk_test_ key.");return e}function f(o){let e=o?.trim()??"";if(!e||e.length>160||!/^[A-Za-z0-9_.:@-]+$/.test(e))throw new Error("[OpenRTC] Capability id is invalid.");return e}var N=/^[A-Za-z0-9_.:@-]{1,160}$/,$=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;function j(o){let e=typeof o=="string"?o.trim():"";if(!N.test(e))return null;let t=e.startsWith("device_")?e.slice(7):"";return $.test(t)?t:e}function W(o){let e=`openrtc:v2:device-id:${o}`,t,i=(()=>{try{return t=globalThis.localStorage,j(t?.getItem(e))||crypto.randomUUID()}catch{return crypto.randomUUID()}})();try{t?.setItem(e,i);}catch{}return i}function U(o){let e=typeof o=="string"?o.trim():"";if(!N.test(e))throw new Error("[OpenRTC] The native host returned an invalid durable device ID.");return e}function D(o){let e=b$2(o.token),t=typeof e.deviceKeyThumbprint=="string"?e.deviceKeyThumbprint.trim():"";if(!/^[A-Za-z0-9_-]{43}$/.test(t))throw new Error("[OpenRTC] Anonymous capability is missing its device-key binding.");return `anon_${t.slice(0,32)}`}var R=class{constructor(){this.descriptors=new Map;this.targets=new Map;}register(e){if(!e?.id?.trim())throw new Error("[OpenRTC] Channel id is required.");this.descriptors.set(e.id,{...e});for(let[t,i]of this.targets)t.channels.register({...e,delivery:e.delivery??i});return ()=>{this.descriptors.delete(e.id);for(let t of this.targets.keys())t.channels.unregister(e.id);}}list(){return [...this.descriptors.values()].map(e=>({...e}))}attach(e,t){this.targets.set(e,t);for(let i of this.descriptors.values())e.channels.register({...i,delivery:i.delivery??t});}detach(e){this.targets.delete(e);}},T=class{constructor(e){this.options=e;this.total=0;this.warned=false;}get sessionCreditsUsd(){return this.total}estimate(e){let t=Math.max(0,Math.floor(e.units??1));return {creditsUsd:(L[e.operation]??0)*t,estimated:true}}assertCanSpend(e,t=1){let i=this.options?.maxSessionCreditsUsd;if(i===void 0||this.total+this.estimate({operation:e,units:t}).creditsUsd<=i)return;let s={sessionCreditsUsd:this.total,operation:e,estimated:true,thresholdCreditsUsd:i,kind:"session-limit"};throw this.options?.onWarning?.(s),new Error("[OpenRTC] The client-side session credit limit was reached.")}record(e,t=1){let i=this.estimate({operation:e,units:t}).creditsUsd;this.total+=i;let n={sessionCreditsUsd:this.total,operation:e,estimated:true};this.options?.onUsage?.(n);let s=this.options?.warnAtSessionCreditsUsd;!this.warned&&s!==void 0&&this.total>=s&&(this.warned=true,this.options?.onWarning?.({...n,thresholdCreditsUsd:s,kind:"warning"}));}},G=32,q=4096;function _(o){let e=o?.trim()??"";if(!e||e.length>80||!/^[A-Za-z0-9_.:@-]+$/.test(e))throw new Error("[OpenRTC] Message name is invalid.");return e}function b(o,e,t,i){let n=JSON.stringify({__openrtc:2,kind:o,name:e,value:t,...i?{gossip:i}:{}});if(n===void 0||!n.includes('"value":'))throw new Error("[OpenRTC] Messages must be JSON-serializable values.");return new TextEncoder().encode(n)}function z(o){if(!o||typeof o!="object"||o instanceof Uint8Array)return null;let e=o,t=e.__openrtc===2&&(e.kind==="channel"||e.kind==="state")&&typeof e.name=="string"&&e.name.length>0&&e.name.length<=80&&/^[A-Za-z0-9_.:@-]+$/.test(e.name)&&Object.prototype.hasOwnProperty.call(e,"value")?e:null;if(!t?.gossip)return t;let{gossip:i}=t;return typeof i.id=="string"&&i.id.length>0&&i.id.length<=384&&typeof i.originPeerId=="string"&&i.originPeerId.length>0&&i.originPeerId.length<=256&&(i.targetPeerId===void 0||typeof i.targetPeerId=="string"&&i.targetPeerId.length>0&&i.targetPeerId.length<=256)&&Number.isSafeInteger(i.hops)&&i.hops>=0&&i.hops<=G?t:null}var k=class{constructor(e,t=false){this.client=e;this.gossipFanout=t;this.connections=new Map;this.connectionListeners=new Set;this.rawListeners=new Map;this.closeListeners=new Map;this.channelListeners=new Map;this.stateListeners=new Map;this.remoteState=new Map;this.localState=new Map;this.stateSenders=new Map;this.seenGossipMessages=new Set;this.seenGossipOrder=[];this.stopMessage=e.onMessage((i,n)=>this.receive(i,n)),this.stopConnection=e.onConnection(i=>this.add(i)),this.stopDisconnection=e.onDisconnection(i=>this.remove(i)),e.getConnections().forEach(i=>this.add(i));}state(e){if(this.gossipFanout)throw new Error("[OpenRTC] state() is not available in sparse gossip rooms; use a named channel with application-owned latest-state revisions.");let t=_(e);return {set:i=>{let n=b("state",t,i);this.localState.set(t,n);for(let{raw:s}of this.connections.values())this.sendState(s,t,n);},watch:i=>{let n=this.stateListeners.get(t);n||this.stateListeners.set(t,n=new Set);let s=(r,a)=>i({peerId:r,value:a});n.add(s);for(let[r,a]of this.remoteState)a.has(t)&&i({peerId:r,value:a.get(t)});return ()=>n?.delete(s)}}}channel(e){let t=_(e),i=n=>b("channel",t,n);return {send:async n=>{let s=i(n);if(!this.gossipFanout){await Promise.all([...this.connections.values()].map(({raw:r})=>r.send(s)));return}await this.sendGossip("channel",t,n);},sendTo:async(n,s)=>{let r=[...this.connections.values()].find(a=>a.view.peerId===n);if(r){await r.raw.send(i(s));return}if(!this.gossipFanout)throw new Error(`[OpenRTC] Peer '${n}' is not connected.`);await this.sendGossip("channel",t,s,n);},onMessage:n=>{let s=this.channelListeners.get(t);s||this.channelListeners.set(t,s=new Set);let r=(a,c)=>n({peerId:a,message:c});return s.add(r),()=>s?.delete(r)}}}onConnection(e){this.connectionListeners.add(e);for(let{view:t}of this.connections.values())e(t);return ()=>this.connectionListeners.delete(e)}close(){this.stopMessage(),this.stopConnection(),this.stopDisconnection();for(let e of this.stateSenders.values())for(let t of e.values())t.close();for(let e of [...this.connections.values()])this.remove(e.raw);this.connectionListeners.clear(),this.channelListeners.clear(),this.stateListeners.clear(),this.localState.clear(),this.seenGossipMessages.clear(),this.seenGossipOrder.splice(0,this.seenGossipOrder.length);}add(e){if(this.connections.has(e.id))return;let t=e.remoteNodeId||e.id,i={id:e.id,peerId:t,send:n=>e.send(n),onMessage:n=>{let s=this.rawListeners.get(e.id);s||this.rawListeners.set(e.id,s=new Set);let r=n;return s.add(r),()=>s?.delete(r)},onClose:n=>{let s=this.closeListeners.get(e.id);return s||this.closeListeners.set(e.id,s=new Set),s.add(n),()=>s?.delete(n)}};this.connections.set(e.id,{raw:e,view:i});for(let n of this.connectionListeners)n(i);for(let[n,s]of this.localState)this.sendState(e,n,s);}remove(e){let t=this.connections.get(e.id);if(!t)return;this.connections.delete(e.id);let i=this.stateSenders.get(e);if(i){for(let s of i.values())s.close();this.stateSenders.delete(e);}for(let s of this.closeListeners.get(e.id)??[])s();this.closeListeners.delete(e.id),this.rawListeners.delete(e.id);let n=this.remoteState.get(t.view.peerId);if(n){for(let s of n.keys())for(let r of this.stateListeners.get(s)??[])r(t.view.peerId,null);this.remoteState.delete(t.view.peerId);}}receive(e,t){this.add(e);let i=z(t);if(!i){for(let r of this.rawListeners.get(e.id)??[])r(t);return}if(i.gossip){if(!this.rememberGossipMessage(i.gossip.id))return;let r=!i.gossip.targetPeerId||i.gossip.targetPeerId===e.localNodeId;if(i.gossip.hops<G){let a=b(i.kind,i.name,i.value,{...i.gossip,hops:i.gossip.hops+1});Promise.allSettled([...this.connections.values()].filter(({raw:c})=>c.id!==e.id).map(({raw:c})=>c.send(a)));}if(!r)return}let n=i.gossip?.originPeerId??this.connections.get(e.id)?.view.peerId??e.remoteNodeId??e.id;if(i.kind==="channel"){for(let r of this.channelListeners.get(i.name)??[])r(n,i.value);return}let s=this.remoteState.get(n);s||this.remoteState.set(n,s=new Map),s.set(i.name,i.value);for(let r of this.stateListeners.get(i.name)??[])r(n,i.value);}sendState(e,t,i){let n=this.stateSenders.get(e);n||this.stateSenders.set(e,n=new Map);let s=n.get(t);s||(s=new a$1(r=>e.send(r)),n.set(t,s)),s.send(i).catch(()=>{});}async sendGossip(e,t,i,n){let s=[...this.connections.values()];if(s.length===0)return;let r=s[0].raw.localNodeId,a=`${r}:${crypto.randomUUID()}`;this.rememberGossipMessage(a);let c=b(e,t,i,{id:a,originPeerId:r,...n?{targetPeerId:n}:{},hops:0});await Promise.all(s.map(({raw:l})=>l.send(c)));}rememberGossipMessage(e){if(this.seenGossipMessages.has(e))return  false;if(this.seenGossipMessages.add(e),this.seenGossipOrder.push(e),this.seenGossipOrder.length>q){let t=this.seenGossipOrder.shift();t&&this.seenGossipMessages.delete(t);}return  true}},w=class{constructor(e,t,i,n,s=false){this.kind=e;this.id=t;this.client=i;this.onClosed=n;this.gossipFanout=s;this.closed=false;P.set(this,i);}get peers(){return this.client.peers}get channels(){return this.client.channels}get diagnostics(){return this.client.diagnostics}state(e){return this.capabilityMessages().state(e)}channel(e){return this.capabilityMessages().channel(e)}onConnection(e){return this.capabilityMessages().onConnection(e)}async close(){if(!this.closed){this.closed=true,this.messages?.close();try{await this.client.advanced.runtime.shutdown();}finally{P.delete(this),this.onClosed();}}}capabilityMessages(){if(this.closed)throw new Error("[OpenRTC] Capability is closed.");return this.messages??(this.messages=new k(this.client,this.gossipFanout))}},g=class extends w{constructor(t,i,n,s){super("devices",t,i,n);this.roster=s;this.kind="devices";this.localId=()=>this.client.devices.localId();this.localInfo=()=>this.client.devices.localInfo();this.list=async()=>this.roster.mergeDevices(await this.client.devices.list());this.listWithStatus=async()=>this.roster.mergeStatus(await this.client.devices.listWithStatus());this.watch=t=>this.client.devices.watch(i=>t(this.roster.mergeDevices(i)));this.connect=this.client.devices.connect;this.disconnect=this.client.devices.disconnect;let r=i.devices.list,a=i.devices.listWithStatus,c=i.devices.watch,l=i.devices.watchWithStatus,d=v=>(this.roster.reconcileLiveSnapshot(v),v),h=async()=>this.roster.mergeDevices(d(await r())),p=async()=>this.roster.mergeStatus(await a()),u=v=>c(I=>v(this.roster.mergeDevices(d(I)))),y=v=>l(I=>v(this.roster.mergeStatus(I))),m=Object.create(i);Object.defineProperties(m,{listDevices:{value:h,enumerable:false},listDeviceStatus:{value:p,enumerable:false},watchDevices:{value:u,enumerable:false},watchDeviceStatus:{value:y,enumerable:false},devices:{value:{...i.devices,list:h,listWithStatus:p,watch:u,watchWithStatus:y},enumerable:true}}),P.set(this,m),this.stopRosterSync=c(d);}replaceEnrolledDevices(t){this.roster.replace(t);}removeEnrolledDevice(t){this.roster.remove(t);}retainCurrentEnrolledDevice(t){this.roster.retain(t);}async close(){this.stopRosterSync(),await super.close();}},A=class extends w{constructor(t,i,n,s){super("space",t,i,n);this.delivery=s;this.kind="space";this.leave=()=>this.close();}},S=class extends w{constructor(t,i,n,s,r,a=false){super("room",t,i,n,a);this.membership=s;this.onLeave=r;this.kind="room";this.left=false;}async leave(){this.left||(this.left=true,await this.onLeave?.()),await this.close();}},E=class extends w{constructor(t,i,n,s){super("ticket",t,i,n);this.token=s;this.kind="ticket";}},M=class{constructor(e,t){this.options=e;this.internals=t;this.channels=new R;this.handles=new Set;this.activations=new Map;this.closed=false;this.devices={localId:()=>(this.assertOpen(),this.deviceId()),start:(e={})=>{let t=e.auth??this.options.auth;return this.activateOnce("devices",JSON.stringify({autoConnect:e.autoConnect??"online",maxPeers:e.maxPeers??null,advancedFanout:e.advancedFanout===true,profile:e.profile??null}),t,()=>this.startDevices(e))},listEnrolled:async(e={})=>{this.assertOpen();let t=e.auth??this.options.auth;if(!t)throw new Error("[OpenRTC] devices.listEnrolled() requires an auth provider.");let i=await(await this.controlPlane()).listEnrolledDevices(t,await this.deviceId());for(let n of this.handles)n instanceof g&&n.replaceEnrolledDevices(i);return i},revoke:async(e,t={})=>{this.assertOpen();let i=t.auth??this.options.auth;if(!i)throw new Error("[OpenRTC] devices.revoke() requires an auth provider.");let n=U(e),s=await this.deviceId();await(await this.controlPlane()).revokeDevice(i,s,n);for(let r of this.handles)r instanceof g&&r.removeEnrolledDevice(n);n===s&&this.retireAuthCapabilities(i);},revokeAll:async(e={})=>{this.assertOpen();let t=e.auth??this.options.auth;if(!t)throw new Error("[OpenRTC] devices.revokeAll() requires an auth provider.");if(await(await this.controlPlane()).revokeAllDevices(t,await this.deviceId(),e.exceptCurrent===true),e.exceptCurrent===true){let i=await this.deviceId();for(let n of this.handles)n instanceof g&&n.retainCurrentEnrolledDevice(i);}e.exceptCurrent!==true&&this.retireAuthCapabilities(t);}};this.spaces={join:(e,t={})=>this.activateOnce(`space:${f(e)}`,JSON.stringify({payload:t.payload??"reliable",maxPeers:t.maxPeers??null,advancedFanout:t.advancedFanout===true}),void 0,()=>this.joinSpace(e,t))};this.rooms={join:(e,t={})=>{let i=t.access??"capability";return this.activateOnce(`room:${f(e)}`,JSON.stringify({access:i,membership:t.membership??"ephemeral",maxPeers:t.maxPeers??null,advancedFanout:t.advancedFanout===true}),i==="authenticated"?t.auth??this.options.auth:void 0,()=>this.joinRoom(e,t))}};this.tickets={issue:(e,t={})=>this.activateOnce(`ticket:${f(e)}`,JSON.stringify({maxPeers:t.maxPeers??null,advancedFanout:t.advancedFanout===true}),void 0,()=>this.issueTicket(e,t))};this.onClosed=e=>{this.handles.delete(e);for(let[t,i]of this.activations)i.handle===e&&this.activations.delete(t);};this.apiKey=K(e.apiKey),this.appTag=`app_${this.apiKey.slice(-16)}`,this.usage=new T(e.usage);}controlPlane(){return this.controlPlanePromise??(this.controlPlanePromise=Promise.all([import('./controlPlane-JJFURVOX.js'),this.internals.deviceKeyProvider?Promise.resolve(this.internals.deviceKeyProvider):import('./deviceKey-C6UE7QDV.js').then(({browserDeviceKeyProvider:e})=>e)]).then(([{ControlPlane:e},t])=>new e(this.apiKey,this.internals.endpoints??a,t,this.options.trust?.attestation,{beforeLogicalOperation:i=>this.usage.assertCanSpend(i),onLogicalOperation:i=>this.usage.record(i),onAuthEpochChanged:i=>this.retireAuthCapabilities(i)},this.options.trust?.botVerification)))}assertOpen(){if(this.closed)throw new Error("[OpenRTC] Client is closed.")}activateOnce(e,t,i,n){this.assertOpen();let s=this.activations.get(e);if(s){if(s.fingerprint!==t||s.auth!==i)throw new Error(`[OpenRTC] ${e} is already active with different options.`);return s.promise}let r={fingerprint:t,auth:i},a=n().then(c=>(r.handle=c,c)).catch(c=>{throw this.activations.get(e)===r&&this.activations.delete(e),c});return r.promise=a,this.activations.set(e,r),a}retireAuthCapabilities(e){for(let t of this.activations.values())t.auth===e&&t.promise.then(i=>i.close()).catch(()=>{});}async deviceId(){let e=this.internals.deviceIdProvider?await this.internals.deviceIdProvider(this.appTag):W(this.appTag);return U(e)}runtimeOptions(e){let t=this.options.transports,i=t?.privacy==="relay-only";if(i&&t?.relay!==true)throw new Error("[OpenRTC] transports.privacy: relay-only requires transports.relay: true.");let n=i?b$1(t?.priority?[...t.priority]:void 0,true):t?.priority?[...t.priority]:void 0;return {apiKey:this.apiKey,authMode:"external",discoveryMode:e.avenue?.kind==="user"?"user-scoped":"space",space:e.avenue?.id,localDeviceId:e.deviceId,deviceIdPersistence:"persistent",endpointIdPersistence:this.internals.platform==="native"?"persistent":"ephemeral",deviceName:e.deviceName?.trim()||void 0,coordinationPlatformType:e.devicePlatform?.trim()||void 0,nativeStreamConsumer:this.internals.platform==="native"&&t?.nativeHostProtocols===true?"host":"runtime",coordinationAvenueOverride:e.avenue,coordinationRoomGossipFanout:e.roomGossipFanout===true,coordinationGateway:{endpoint:(this.internals.endpoints??a).gateway,environment:"production",grantProvider:e.grantProvider,testingAllowInsecureLoopback:this.internals.testingAllowInsecureLoopback},transports:{iroh:i?{relayOnly:true,relayTransportPolicy:"websocketRequired",localDiscovery:false,persistenceMode:this.internals.platform==="native"?"persistent":"ephemeral",...this.internals.irohTestRelayUrl?{testRelayUrl:this.internals.irohTestRelayUrl}:{}}:this.internals.irohTestRelayUrl?{testRelayUrl:this.internals.irohTestRelayUrl,persistenceMode:this.internals.platform==="native"?"persistent":"ephemeral"}:t?.iroh??true,webrtc:typeof t?.webrtc=="object"?i?{...t.webrtc,privacyMode:true,useTurn:true,useDefaultIceServers:false}:t.webrtc:t?.webrtc===true?i?{privacyMode:true,useTurn:true,useDefaultIceServers:false}:true:false,ble:t?.ble??false,moq:t?.moq??false,privacy:t?.privacy??"direct",optimizeFor:t?.optimizeFor??"balanced",priority:n},transportPriority:n}}async activate(e){let t=await this.controlPlane(),i={relay:this.options.transports?.relay===true,moq:!!this.options.transports?.moq,ble:this.options.transports?.ble===true,advancedFanout:e.advancedFanout===true,durableMembership:e.durableMembership===true},n=e.source,s=null,r=()=>({userId:e.principalId,token:n.token,tokenProvider:async()=>n.token,expiresAtMs:n.expiresAtMs}),a=this.runtimeOptions({avenue:e.source.avenue,grantProvider:t.grantProvider(e.source,{maxPeers:e.maxPeers,features:i,deviceProfile:e.deviceName&&e.devicePlatform?{name:e.deviceName,platform:e.devicePlatform}:void 0,onSourceRenewed:async d=>{n={...n,...d},await s?.setAuth(r());}}),deviceId:e.deviceId,userId:e.principalId,roomGossipFanout:e.kind==="room"&&e.advancedFanout===true,deviceName:e.deviceName,devicePlatform:e.devicePlatform}),[c,{wrapAssembly:l}]=await Promise.all([this.internals.runtimeFactory(a),import('./coreClient.js')]);s=l(c,this.internals.platform==="native"?"native":"web"),await s.setAuth(r()),this.channels.attach(s,e.defaultDelivery??"reliable");try{this.usage.assertCanSpend("coordination.connection.open"),await s.devices.startSession({sessionKind:e.kind==="devices"?"app-user-device":"scoped-guest",scope:`v2:${e.kind}:${e.id}`,userId:e.principalId,localDeviceId:e.deviceId,metadata:e.deviceMetadata,autoConnectPolicy:e.autoConnect?"enabled":"disabled",presencePolicy:"online"});}catch(d){throw this.channels.detach(s),await s.advanced.runtime.shutdown().catch(()=>{}),d}return this.usage.record("coordination.connection.open"),s}async startDevices(e={}){this.assertOpen();let t=e.auth??this.options.auth;if(!t)throw new Error("[OpenRTC] devices.start() requires an auth provider.");let i=await this.deviceId(),{resolveDeviceProfile:n}=await import('./deviceProfile-CR2C7OYR.js'),s=n(e.profile,this.internals.platform==="native"?"native":"web"),r=await this.controlPlane(),a=await r.deviceCertificate(t,i,void 0,s),c=await this.activate({kind:"devices",id:a.principalId,source:a.source,principalId:a.principalId,deviceId:i,maxPeers:e.maxPeers,autoConnect:e.autoConnect!=="none",advancedFanout:e.advancedFanout,deviceName:s.name,devicePlatform:s.platform,deviceMetadata:s.metadata}),l;try{l=await r.listEnrolledDevices(t,i);}catch(p){throw this.channels.detach(c),await c.advanced.runtime.shutdown().catch(()=>{}),p}let{AuthenticatedDeviceRoster:d}=await import('./deviceRoster-EUF6BBF5.js'),h;return h=new g(a.principalId,c,()=>{this.channels.detach(c),this.onClosed(h);},new d(l)),this.handles.add(h),h}async joinSpace(e,t={}){this.assertOpen();let i=f(e),n=await(await this.controlPlane()).capability("space",i,t.maxPeers,t.advancedFanout),s=String(b$2(n.token).principalId),r=await this.activate({kind:"space",id:i,source:n,principalId:s,deviceId:D(n),maxPeers:t.maxPeers,autoConnect:true,defaultDelivery:t.payload??"reliable",advancedFanout:t.advancedFanout}),a;return a=new A(i,r,()=>{this.channels.detach(r),this.onClosed(a);},t.payload??"reliable"),this.handles.add(a),a}async joinRoom(e,t={}){this.assertOpen();let i=f(e),n=t.membership??"ephemeral",s=t.access??"capability";if(n==="durable"&&s!=="authenticated")throw new Error("[OpenRTC] Durable room membership requires access: authenticated.");if(s==="authenticated"){let d=t.auth??this.options.auth;if(!d)throw new Error("[OpenRTC] Authenticated rooms require an auth provider.");let h=await this.deviceId(),p=await this.controlPlane(),u=await p.deviceCertificate(d,h,{kind:"room",id:i});n==="durable"&&await p.durableRoomMembership(u.source,i,"join");let y;try{y=await this.activate({kind:"room",id:i,source:u.source,principalId:u.principalId,deviceId:h,maxPeers:t.maxPeers,autoConnect:!0,durableMembership:n==="durable",advancedFanout:t.advancedFanout});}catch(v){throw n==="durable"&&await p.durableRoomMembership(u.source,i,"leave").catch(()=>{}),v}let m;return m=new S(i,y,()=>{this.channels.detach(y),this.onClosed(m);},n,n==="durable"?async()=>{await p.durableRoomMembership(u.source,i,"leave");}:void 0,t.advancedFanout===true),this.handles.add(m),m}let r=await(await this.controlPlane()).capability("room",i,t.maxPeers,t.advancedFanout),a=String(b$2(r.token).principalId),c=await this.activate({kind:"room",id:i,source:r,principalId:a,deviceId:D(r),maxPeers:t.maxPeers,autoConnect:true,advancedFanout:t.advancedFanout}),l;return l=new S(i,c,()=>{this.channels.detach(c),this.onClosed(l);},"ephemeral",void 0,t.advancedFanout===true),this.handles.add(l),l}async issueTicket(e,t={}){this.assertOpen();let i=f(e),n=await(await this.controlPlane()).capability("ticket",i,t.maxPeers,t.advancedFanout),s=String(b$2(n.token).principalId),r=await this.activate({kind:"ticket",id:i,source:n,principalId:s,deviceId:D(n),maxPeers:t.maxPeers,autoConnect:false,advancedFanout:t.advancedFanout}),a;return a=new E(i,r,()=>{this.channels.detach(r),this.onClosed(a);},n.token),this.handles.add(a),a}async close(){if(!this.closed){this.closed=true;try{await Promise.all([...this.handles].map(e=>e.close()));}finally{await this.controlPlanePromise?.then(e=>e.dispose(),()=>{}),this.activations.clear();}}}};function Q(o,e){return new M(o,e)}export{B as a,Q as b};

package/dist/chunk-AJQVMVYW.js

@@ -0,0 +1 @@
+var n={AUTH_NOT_READY:"auth/not-ready",AUTH_DENIED:"auth/denied",AUTH_EXPIRED:"auth/expired",AUTH_DEVICE_REENROLLMENT_REQUIRED:"auth/device-reenrollment-required",ADMISSION_DENIED:"admission/denied",ADMISSION_SCOPE_MISMATCH:"admission/scope-mismatch",BUDGET_EXCEEDED:"budget/exceeded",BUDGET_STALE:"budget/stale",BUDGET_RENEWAL_REQUIRED:"budget/renewal-required",COORDINATION_DISCONNECTED:"coordination/disconnected",COORDINATION_PROTOCOL:"coordination/protocol",COORDINATION_RATE_LIMITED:"coordination/rate-limited",COORDINATION_SERVICE_UNAVAILABLE:"coordination/service-unavailable",TRANSPORT_DIAL_EXHAUSTED:"transport/dial-exhausted",TRANSPORT_UNAVAILABLE:"transport/unavailable",TRANSPORT_TICKET_MISSING:"transport/ticket-missing",DELIVERY_NOT_READY:"delivery/not-ready",INTERNAL:"internal/error"},i=class e extends Error{constructor(r){super(r.message);this.name="RTCError";r.cause!==void 0&&(this.cause=r.cause),this.code=r.code,this.retryable=r.retryable,this.plane=r.plane,this.generation=r.generation,this.transportGeneration=r.transportGeneration,this.routeGeneration=r.routeGeneration,this.revision=r.revision;}static is(r){return r instanceof e||typeof r=="object"&&r!==null&&r.name==="RTCError"&&typeof r.code=="string"&&typeof r.retryable=="boolean"&&typeof r.plane=="string"}static shouldAppRetry(r){let t=E(r);return t.retryable?t.plane==="coordination"||t.plane==="transport"||t.plane==="auth":false}toJSON(){return {name:this.name,code:this.code,message:this.message,retryable:this.retryable,plane:this.plane,generation:this.generation??null,transportGeneration:this.transportGeneration??null,routeGeneration:this.routeGeneration??null,revision:this.revision??null}}};function b(e){let a=E(e);return {errorCode:a.code,retryable:a.retryable,errorPlane:a.plane}}function o(e,a,r){let t=c(e);return new i({code:e,message:a,retryable:r.retryable??t.retryable,plane:r.plane??t.plane,cause:r.cause,generation:r.generation,transportGeneration:r.transportGeneration,routeGeneration:r.routeGeneration,revision:r.revision})}function c(e){switch(e){case n.AUTH_NOT_READY:case n.AUTH_EXPIRED:case n.AUTH_DEVICE_REENROLLMENT_REQUIRED:return {retryable:true,plane:"auth"};case n.AUTH_DENIED:return {retryable:false,plane:"auth"};case n.ADMISSION_DENIED:case n.ADMISSION_SCOPE_MISMATCH:return {retryable:false,plane:"admission"};case n.BUDGET_EXCEEDED:return {retryable:false,plane:"budget"};case n.BUDGET_STALE:case n.BUDGET_RENEWAL_REQUIRED:return {retryable:true,plane:"budget"};case n.COORDINATION_DISCONNECTED:case n.COORDINATION_RATE_LIMITED:case n.COORDINATION_SERVICE_UNAVAILABLE:return {retryable:true,plane:"coordination"};case n.COORDINATION_PROTOCOL:return {retryable:false,plane:"coordination"};case n.TRANSPORT_DIAL_EXHAUSTED:case n.TRANSPORT_UNAVAILABLE:case n.TRANSPORT_TICKET_MISSING:return {retryable:true,plane:"transport"};case n.DELIVERY_NOT_READY:return {retryable:true,plane:"delivery"};case n.INTERNAL:default:return {retryable:false,plane:"internal"}}}function E(e){if(i.is(e))return e instanceof i?e:new i({code:e.code,message:e.message||String(e),retryable:e.retryable,plane:e.plane,cause:e,generation:e.generation,transportGeneration:e.transportGeneration,routeGeneration:e.routeGeneration,revision:e.revision});if(typeof e=="object"&&e!==null){let r=e,t=typeof r.code=="string"?r.code:"",l=typeof r.message=="string"?r.message:e instanceof Error?e.message:String(e),s=typeof r.retryable=="boolean"?r.retryable:void 0;if(t){let u=T(t,l,s);if(u)return u}if(typeof r.name=="string"&&r.name==="CoordinationConnectError")return o(n.COORDINATION_DISCONNECTED,l,{retryable:s??true,plane:"coordination",cause:e});if(typeof r.name=="string"&&r.name==="CoordinationGatewayProtocolError")return o(t||n.COORDINATION_PROTOCOL,l,{retryable:s??false,plane:d(t),cause:e})}let a=e instanceof Error?e.message:String(e??"unknown error");return p(a,e)}function T(e,a,r){let t=e.trim().toLowerCase();return t==="unauthenticated"||t==="functions/unauthenticated"||t==="auth/unauthorized"||t.includes("permission-denied")?o(n.AUTH_DENIED,a,{retryable:false,plane:"auth"}):t==="budget-renewal-required"||t==="budget/renewal-required"?o(n.BUDGET_RENEWAL_REQUIRED,a,{retryable:r??true,plane:"budget"}):t.includes("resource-exhausted")||t.includes("budget")||t==="budget-exceeded"||t==="insufficient-budget"?t.includes("stale")||/stale-budget/i.test(a)?o(n.BUDGET_STALE,a,{retryable:r??true,plane:"budget"}):o(n.BUDGET_EXCEEDED,a,{retryable:false,plane:"budget"}):t.includes("rate-limit")||t==="rate_limited"||t==="too-many-requests"?o(n.COORDINATION_RATE_LIMITED,a,{retryable:r??true,plane:"coordination"}):t.includes("admission")||t==="permission-denied"||t==="session-token-denied"?o(n.ADMISSION_DENIED,a,{retryable:false,plane:"admission"}):t.includes("scope")?o(n.ADMISSION_SCOPE_MISMATCH,a,{retryable:false,plane:"admission"}):t.includes("disconnect")||t.includes("unavailable")||t==="aborted"?o(n.COORDINATION_DISCONNECTED,a,{retryable:r??true,plane:"coordination"}):t.startsWith("coordination/")||t.includes("protocol")?o(e,a,{retryable:r??false,plane:d(e)}):null}function d(e){let a=e.trim().toLowerCase();return a.includes("budget")?"budget":a.includes("auth")?"auth":a.includes("admission")||a.includes("scope")?"admission":(a.includes("rate"),"coordination")}function p(e,a){return /auth(?:entication)?\s*(?:not ready|pending|missing)/i.test(e)||/token\s*(?:not ready|pending|missing)/i.test(e)||/awaiting[- ]auth/i.test(e)?o(n.AUTH_NOT_READY,e,{retryable:true,plane:"auth",cause:a}):/missing endpoint ticket|ticket missing/i.test(e)?o(n.TRANSPORT_TICKET_MISSING,e,{retryable:true,plane:"transport",cause:a}):/dial.*(exhaust|budget)|retry budget|connection.*did not become application-routable/i.test(e)?o(n.TRANSPORT_DIAL_EXHAUSTED,e,{retryable:true,plane:"transport",cause:a}):/stale[- ]budget/i.test(e)?o(n.BUDGET_STALE,e,{retryable:true,plane:"budget",cause:a}):/budget|credit|quota|limit\s*exceeded/i.test(e)?o(n.BUDGET_EXCEEDED,e,{retryable:false,plane:"budget",cause:a}):/admission|session[- ]token.*(deny|reject)|permission[- ]denied/i.test(e)?o(n.ADMISSION_DENIED,e,{retryable:false,plane:"admission",cause:a}):/not\s+application-routable|not[- ]ready|settledReady/i.test(e)?o(n.DELIVERY_NOT_READY,e,{retryable:true,plane:"delivery",cause:a}):/gateway|coordination|websocket|signaling/i.test(e)?o(n.COORDINATION_DISCONNECTED,e,{retryable:true,plane:"coordination",cause:a}):o(n.INTERNAL,e,{retryable:false,plane:"internal",cause:a})}export{n as a,i as b,b as c,o as d,E as e};

package/dist/{chunk-VBUDERMM.js → chunk-BYOPTGET.js}

@@ -1,2 +1,2 @@
-var i=new Map;function a(t){let r=new Uint8Array(t),e="";for(let o of r)e+=String.fromCharCode(o);return btoa(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function l(t){let r=JSON.stringify({crv:t.crv,kty:t.kty,x:t.x});return a(await crypto.subtle.digest("SHA-256",new TextEncoder().encode(r)))}function d(){return a(crypto.getRandomValues(new Uint8Array(24)).buffer)}async function c(){return typeof indexedDB>"u"?null:new Promise((t,r)=>{let e=indexedDB.open("openrtc-v2-device-keys",1);e.onupgradeneeded=()=>{e.result.objectStoreNames.contains("keys")||e.result.createObjectStore("keys");},e.onsuccess=()=>t(e.result),e.onerror=()=>r(e.error);})}async function g(t){let r=await c().catch(()=>null);if(!r)return i.get(t)??null;try{return await new Promise((e,o)=>{let n=r.transaction("keys","readonly").objectStore("keys").get(t);n.onsuccess=()=>e(n.result??null),n.onerror=()=>o(n.error);})}finally{r.close();}}async function p(t,r){let e=await c().catch(()=>null);if(!e){i.set(t,r);return}try{await new Promise((o,n)=>{let s=e.transaction("keys","readwrite").objectStore("keys").put(r,t);s.onsuccess=()=>o(),s.onerror=()=>n(s.error);});}finally{e.close();}}async function f(t){i.delete(t);let r=await c().catch(()=>null);if(r)try{await new Promise((e,o)=>{let n=r.transaction("keys","readwrite").objectStore("keys").delete(t);n.onsuccess=()=>e(),n.onerror=()=>o(n.error);});}finally{r.close();}}async function w(t){let r=await g(t);if(r)return r;let e=await crypto.subtle.generateKey({name:"Ed25519"},false,["sign","verify"]);return await p(t,e),e}var b={async getOrCreate(t){let r=await w(t),e=await crypto.subtle.exportKey("jwk",r.publicKey),o=await l(e);return {publicKeyJwk:e,thumbprint:o,async proof(n){let s=d(),y=Math.floor(Date.now()/1e3),u=await crypto.subtle.sign({name:"Ed25519"},r.privateKey,new TextEncoder().encode(n(s,y)));return {publicKeyJwk:e,signature:a(u),nonce:s,issuedAt:y}}}},delete:f};
+var i=new Map;function a(t){let r=new Uint8Array(t),e="";for(let o of r)e+=String.fromCharCode(o);return btoa(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function l(t){let r=JSON.stringify({crv:t.crv,kty:t.kty,x:t.x});return a(await crypto.subtle.digest("SHA-256",new TextEncoder().encode(r)))}function d(){return a(crypto.getRandomValues(new Uint8Array(24)).buffer)}async function c(){return typeof indexedDB>"u"?null:new Promise((t,r)=>{let e=indexedDB.open("openrtc-v2-device-keys",1);e.onupgradeneeded=()=>{e.result.objectStoreNames.contains("keys")||e.result.createObjectStore("keys");},e.onsuccess=()=>t(e.result),e.onerror=()=>r(e.error);})}async function g(t){let r=await c().catch(()=>null);if(!r)return i.get(t)??null;try{return await new Promise((e,o)=>{let n=r.transaction("keys","readonly").objectStore("keys").get(t);n.onsuccess=()=>e(n.result??null),n.onerror=()=>o(n.error);})}finally{r.close();}}async function f(t,r){let e=await c().catch(()=>null);if(!e){i.set(t,r);return}try{await new Promise((o,n)=>{let s=e.transaction("keys","readwrite").objectStore("keys").put(r,t);s.onsuccess=()=>o(),s.onerror=()=>n(s.error);});}finally{e.close();}}async function p(t){i.delete(t);let r=await c().catch(()=>null);if(r)try{await new Promise((e,o)=>{let n=r.transaction("keys","readwrite").objectStore("keys").delete(t);n.onsuccess=()=>e(),n.onerror=()=>o(n.error);});}finally{r.close();}}async function w(t){let r=await g(t);if(r)return r;let e=await crypto.subtle.generateKey({name:"Ed25519"},false,["sign","verify"]);return await f(t,e),e}var b={async getOrCreate(t){let r=await w(t),e=await crypto.subtle.exportKey("jwk",r.publicKey),o=await l(e);return {publicKeyJwk:e,thumbprint:o,async proof(n){let s=d(),y=Math.floor(Date.now()/1e3),u=await crypto.subtle.sign({name:"Ed25519"},r.privateKey,new TextEncoder().encode(n(s,y)));return {publicKeyJwk:e,signature:a(u),nonce:s,issuedAt:y}}}},delete:p};
 export{l as a,b};