p2party 0.8.0 → 0.14.2

package/lib/store.d.ts

@@ -1,55 +1,54 @@
 export declare const store: import("@reduxjs/toolkit").EnhancedStore<{
     commonState: import("./reducers/commonSlice").CommonState;
-    keyPair: import("./reducers/keyPairSlice").KeyPair;
-    rooms: import("./reducers/roomSlice").Room[];
-    signalingServer: import("./reducers/signalingServerSlice").SignalingState;
-    signalingServerApi: import("@reduxjs/toolkit/dist/query").CombinedState<{
-        connectWebSocket: import("@reduxjs/toolkit/dist/query").MutationDefinition<string, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
-        disconnectWebSocket: import("@reduxjs/toolkit/dist/query").MutationDefinition<void, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
-        sendMessage: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/signalingServerApi").WebSocketMessage, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
-        connectWithPeer: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./utils/interfaces").WebSocketPeerConnectionParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
+    keyPair: import(".").KeyPair;
+    rooms: import(".").Room[];
+    signalingServer: import(".").SignalingState;
+    signalingServerApi: import("@reduxjs/toolkit/query").CombinedState<{
+        connectWebSocket: import("@reduxjs/toolkit/query").MutationDefinition<string, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
+        disconnectWebSocket: import("@reduxjs/toolkit/query").MutationDefinition<undefined, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
+        sendMessage: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/signalingServerApi").WebSocketMessage, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
+        connectWithPeer: import("@reduxjs/toolkit/query").MutationDefinition<import("./utils/interfaces").WebSocketPeerConnectionParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
     }, never, "signalingServerApi">;
-    webrtcApi: import("@reduxjs/toolkit/dist/query").CombinedState<{
-        connectWithPeer: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCPeerConnectionParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        setDescription: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetDescriptionParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        setCandidate: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetCandidateParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        openChannel: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCOpenChannelParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        sendMessage: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSendMessageParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        disconnect: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        disconnectFromRoom: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromRoomParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        disconnectFromAllRooms: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromAllRoomsParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        disconnectFromPeer: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        disconnectFromChannelLabel: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromChannelLabelParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-        disconnectFromPeerChannelLabel: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerChannelLabelParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
+    webrtcApi: import("@reduxjs/toolkit/query").CombinedState<{
+        connectWithPeer: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCPeerConnectionParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        setDescription: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetDescriptionParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        setCandidate: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetCandidateParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        openChannel: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCOpenChannelParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        sendMessage: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSendMessageParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, import("./handlers/handleSendMessage").SendMessageResult | undefined, "webrtcApi", undefined>;
+        disconnect: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        disconnectFromRoom: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromRoomParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        disconnectFromAllRooms: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromAllRoomsParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        disconnectFromPeer: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        disconnectFromChannelLabel: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromChannelLabelParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+        disconnectFromPeerChannelLabel: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerChannelLabelParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
     }, never, "webrtcApi">;
 }, import("redux").UnknownAction, import("@reduxjs/toolkit").Tuple<[import("redux").StoreEnhancer<{
     dispatch: import("redux-thunk").ThunkDispatch<{
         commonState: import("./reducers/commonSlice").CommonState;
-        keyPair: import("./reducers/keyPairSlice").KeyPair;
-        rooms: import("./reducers/roomSlice").Room[];
-        signalingServer: import("./reducers/signalingServerSlice").SignalingState;
-        signalingServerApi: import("@reduxjs/toolkit/dist/query").CombinedState<{
-            connectWebSocket: import("@reduxjs/toolkit/dist/query").MutationDefinition<string, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
-            disconnectWebSocket: import("@reduxjs/toolkit/dist/query").MutationDefinition<void, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
-            sendMessage: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/signalingServerApi").WebSocketMessage, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
-            connectWithPeer: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./utils/interfaces").WebSocketPeerConnectionParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, void, "signalingServerApi", undefined>;
+        keyPair: import(".").KeyPair;
+        rooms: import(".").Room[];
+        signalingServer: import(".").SignalingState;
+        signalingServerApi: import("@reduxjs/toolkit/query").CombinedState<{
+            connectWebSocket: import("@reduxjs/toolkit/query").MutationDefinition<string, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
+            disconnectWebSocket: import("@reduxjs/toolkit/query").MutationDefinition<undefined, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
+            sendMessage: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/signalingServerApi").WebSocketMessage, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
+            connectWithPeer: import("@reduxjs/toolkit/query").MutationDefinition<import("./utils/interfaces").WebSocketPeerConnectionParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/signalingServerApi").WebSocketParams, undefined>, never, undefined, "signalingServerApi", undefined>;
         }, never, "signalingServerApi">;
-        webrtcApi: import("@reduxjs/toolkit/dist/query").CombinedState<{
-            connectWithPeer: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCPeerConnectionParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            setDescription: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetDescriptionParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            setCandidate: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetCandidateParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            openChannel: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCOpenChannelParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            sendMessage: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSendMessageParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            disconnect: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            disconnectFromRoom: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromRoomParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            disconnectFromAllRooms: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromAllRoomsParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            disconnectFromPeer: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            disconnectFromChannelLabel: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromChannelLabelParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
-            disconnectFromPeerChannelLabel: import("@reduxjs/toolkit/dist/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerChannelLabelParams, import("@reduxjs/toolkit/dist/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, void, unknown>, never, void, "webrtcApi", void>;
+        webrtcApi: import("@reduxjs/toolkit/query").CombinedState<{
+            connectWithPeer: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCPeerConnectionParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            setDescription: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetDescriptionParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            setCandidate: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSetCandidateParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            openChannel: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCOpenChannelParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            sendMessage: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCSendMessageParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, import("./handlers/handleSendMessage").SendMessageResult | undefined, "webrtcApi", undefined>;
+            disconnect: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            disconnectFromRoom: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromRoomParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            disconnectFromAllRooms: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromAllRoomsParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            disconnectFromPeer: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            disconnectFromChannelLabel: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromChannelLabelParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
+            disconnectFromPeerChannelLabel: import("@reduxjs/toolkit/query").MutationDefinition<import("./api/webrtc/interfaces").RTCDisconnectFromPeerChannelLabelParams, import("@reduxjs/toolkit/query").BaseQueryFn<import("./api/webrtc/baseQuery").RTCPeerConnectionParamsExtend, undefined>, never, undefined, "webrtcApi", undefined>;
         }, never, "webrtcApi">;
     }, undefined, import("redux").UnknownAction> & ((action: import("redux").Action<"listenerMiddleware/add">) => import("@reduxjs/toolkit").UnsubscribeListener);
 }>, import("redux").StoreEnhancer]>>;
 export type AppDispatch = typeof store.dispatch;
 export type State = ReturnType<typeof store.getState>;
 export declare const dispatch: AppDispatch;
-//# sourceMappingURL=store.d.ts.map

package/lib/utils/channelLabel.d.ts

@@ -7,4 +7,3 @@ export declare const decompileChannelMessageLabel: (channelMessageLabel: string)
     merkleRootHex: string;
     merkleRoot: Uint8Array;
 }>;
-//# sourceMappingURL=channelLabel.d.ts.map

package/lib/utils/chunkBounds.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Whether a sender-declared real-data range is safe to slice out of a decrypted
+ * chunk and store. The indices come from attacker-controllable metadata, so they
+ * must be validated before use: `chunk.slice()` is memory-safe but out-of-range
+ * or inverted indices would silently store the wrong bytes and corrupt reassembly
+ * (savedSize accounting). Decoy chunks are detected separately (their
+ * end - start exceeds totalSize) and never reach this check.
+ */
+export declare const isStorableChunkRange: (chunkStartIndex: number, chunkEndIndex: number, chunkLength: number) => boolean;

package/lib/utils/constants.d.ts

@@ -1,13 +1,57 @@
 export declare const MESSAGE_LEN: number;
+export declare const MAX_MESSAGE_SIZE: number;
 export declare const MAX_BUFFERED_AMOUNT: number;
 export declare const NAME_LEN = 256;
 export declare const METADATA_LEN: number;
 export declare const PROOF_LEN: number;
-export declare const MESSAGE_START: number;
 export declare const CHUNK_START: number;
-export declare const MESSAGE_DATA_BEFORE_START_INDEX: number;
-export declare const IMPORTANT_DATA_LEN: number;
+export declare const CHUNK_PLAINTEXT_LEN = 65405;
 export declare const CHUNK_LEN: number;
-export declare const DECRYPTED_LEN: number;
-export declare const ENCRYPTED_LEN: number;
-//# sourceMappingURL=constants.d.ts.map
+export declare const CHUNK_SIZE_FLOOR: number;
+export declare const DECRYPTED_LEN = 65405;
+export declare const PROTOCOL_VERSION = 4;
+export declare const FRAME_TYPE_LEN = 1;
+export declare const FRAME_TYPE_HANDSHAKE = 1;
+export declare const FRAME_TYPE_CHUNK = 2;
+export declare const FRAME_TYPE_RECEIPT = 3;
+export declare const FRAME_TYPE_COVER = 4;
+export declare const FRAME_TYPE_PQ_CONTROL = 5;
+export declare const RECEIPT_TOKEN_LEN: number;
+export declare const WIRE_RECEIPT_FRAME_LEN: number;
+export declare const PQ_TAG_LEN = 1;
+export declare const PQ_TAG: Uint8Array<ArrayBuffer>;
+export declare const RATCHET_DHPUB_LEN = 32;
+export declare const RATCHET_N_LEN = 8;
+export declare const RATCHET_PN_LEN = 8;
+export declare const PQ_EPOCH_LEN = 8;
+export declare const RATCHET_NONCE_LEN = 12;
+export declare const CHUNK_AAD_HEADER_LEN: number;
+export declare const CHUNK_HEADER_LEN: number;
+export declare const MESSAGE_START: number;
+export declare const WIRE_CHUNK_FRAME_LEN: number;
+export declare const IDENTITY_CROSS_SIGN_DOMAIN_BYTES: Uint8Array<ArrayBuffer>;
+export declare const CPACE_RISTRETTO255_DSI = "CPaceRistretto255";
+export declare const CPACE_RISTRETTO255_ISK_DSI = "CPaceRistretto255_ISK";
+export declare const RATCHET_ROOT_SUITE_MLKEM512: "hybrid-3dh-mlkem512-cpace21-v4";
+export declare const RATCHET_ROOT_SUITE_MLKEM768: "hybrid-3dh-mlkem768-cpace21-v4";
+export declare const RATCHET_ROOT_SUITE_MLKEM1024: "hybrid-3dh-mlkem1024-cpace21-v4";
+export declare const RATCHET_ROOT_SUITES: readonly ["hybrid-3dh-mlkem512-cpace21-v4", "hybrid-3dh-mlkem768-cpace21-v4", "hybrid-3dh-mlkem1024-cpace21-v4"];
+export type RatchetRootSuite = (typeof RATCHET_ROOT_SUITES)[number];
+/** Backward source alias for the 0.10 default suite. */
+export declare const RATCHET_ROOT_SUITE: "hybrid-3dh-mlkem768-cpace21-v4";
+export declare const isRatchetRootSuite: (value: unknown) => value is RatchetRootSuite;
+export declare const KDF_RK_LABEL = "p2party-rk-v1";
+export declare const KDF_CK_LABEL = "p2party-ck-v1";
+export declare const KDF_MK_LABEL = "p2party-mk-v1";
+export declare const MAX_SKIP = 512;
+export declare const MAX_SKIP_SESSION = 2000;
+export declare const MAX_RETRANSMITS = 5;
+export declare const RETRANSMIT_TIMEOUT_MS = 2000;
+export declare const CHANNEL_OPEN_TIMEOUT_MS = 3000;
+export declare const CHANNEL_OPEN_POLL_MS = 25;
+export declare const RECONNECT_RESUME_TIMEOUT_MS = 30000;
+export declare const RECONNECT_RESUME_POLL_MS = 500;
+export declare const MAX_RESUME_ATTEMPTS = 3;
+export declare const HASH_WINDOW_BYTES: number;
+export declare const HASH_WASM_CHUNK_BYTES: number;
+export declare const OPFS_REASSEMBLE_DIR = "p2party-reassembled";

package/lib/utils/debug.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Opt-in diagnostic logging.
+ *
+ * The library previously called console.log directly in 36 places across the
+ * signaling, WebRTC and middleware paths. That is useful while debugging a
+ * connection and unacceptable in a dependency: an application embedding this
+ * had its console filled with `[roomListenerMiddleware] setRoom: {...}` on
+ * every room change, with no way to turn it off.
+ *
+ * Diagnostics are kept — they are genuinely hard to reconstruct after the fact
+ * — but silent unless asked for. Errors and warnings still go out
+ * unconditionally through console.error/console.warn; those are for the
+ * application, not for us.
+ *
+ * Enable at runtime:
+ *   p2party.setDebugLogging(true)
+ *
+ * or persistently, before the library loads:
+ *   localStorage.setItem("p2party:debug", "1")
+ */
+/** Turn diagnostic logging on or off for the rest of the session. */
+export declare const setDebugLogging: (value: boolean) => void;
+export declare const isDebugLogging: () => boolean;
+/** console.log, but only when diagnostics are switched on. */
+export declare const debugLog: (...args: unknown[]) => void;

package/lib/utils/drainAndClose.d.ts

@@ -0,0 +1,5 @@
+export declare const drainAndClose: (dc: {
+    readyState: string;
+    bufferedAmount: number;
+    close: () => void;
+}, timeoutMs?: number, pollMs?: number) => Promise<void>;

package/lib/utils/identityRole.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Deterministic role for one stable Ed25519 identity edge.
+ *
+ * Lexical ordering is safe only for the one canonical wire representation:
+ * exactly 32 bytes encoded as 64 lowercase hexadecimal characters. Rejecting
+ * uppercase/invalid encodings is part of role agreement, not cosmetic input
+ * cleanup — otherwise two peers can compare different strings for the same key
+ * and both (or neither) decide to open the persistent `main` channel.
+ */
+export declare const CANONICAL_ED25519_IDENTITY_RE: RegExp;
+export declare const isCanonicalEd25519Identity: (publicKey: unknown) => publicKey is string;
+export declare const assertCanonicalEd25519Identity: (publicKey: string, label?: string) => void;
+export declare const isIdentityInitiator: (selfPublicKey: string, peerPublicKey: string) => boolean;
+/**
+ * Only the non-opener may accept a remotely-created `main` DataChannel. The
+ * designated opener receives `main`; accepting another inbound copy on that
+ * side would allow duplicate handshakes to race for one room/peer edge.
+ */
+export declare const shouldAcceptIncomingMain: (selfPublicKey: string, peerPublicKey: string) => boolean;

package/lib/utils/interfaces.d.ts

@@ -1,24 +1,3 @@
-import type { IRTCPeerConnectionRoomId } from "../api/webrtc/interfaces";
-export interface WSPeerConnectionRoomId extends IRTCPeerConnectionRoomId {
-    queue: Uint8Array[];
-    seen: Set<string>;
-    draining: boolean;
-    ptr1: number | undefined;
-    decrypted: Uint8Array | undefined;
-    ptr2: number | undefined;
-    messageArray: Uint8Array | undefined;
-    ptr3: number | undefined;
-    merkleRootArray: Uint8Array | undefined;
-    ptr4: number | undefined;
-    senderPublicKeyArray: Uint8Array | undefined;
-    ptr5: number | undefined;
-    receiverSecretKeyArray: Uint8Array | undefined;
-}
-export interface WSPeerConnection {
-    withPeerId: string;
-    withPeerPublicKey: string;
-    rooms: WSPeerConnectionRoomId[];
-}
 export interface WebSocketMessagePingRequest {
     type: "ping";
 }
@@ -30,10 +9,7 @@ export interface WebSocketMessageChallengeRequest {
     type: "peerId";
     peerId: string;
     challenge: string;
-    signature?: string;
-    challengeId?: string;
-    username?: string;
-    credential?: string;
+    protocolVersion: number;
     message: string;
 }
 export interface WebSocketMessageChallengeResponse {
@@ -41,10 +17,12 @@ export interface WebSocketMessageChallengeResponse {
     challenge: string;
     signature: string;
     fromPeerId: string;
+    protocolVersion: number;
 }
 export interface WebSocketMessageSuccessfulChallenge {
     type: "challenge";
     challengeId: string;
+    protocolVersion: number;
     username?: string;
     credential?: string;
 }
@@ -52,11 +30,21 @@ export interface WebSocketMessageRoomIdRequest {
     type: "room";
     fromPeerId: string;
     roomUrl: string;
+    protocolVersion: number;
+}
+export interface TurnCredentials {
+    urls: string[];
+    username: string;
+    credential: string;
+    ttl: number;
 }
 export interface WebSocketMessageRoomIdResponse {
     type: "roomId";
     roomId: string;
     roomUrl: string;
+    turnCredentials?: TurnCredentials;
+    /** Optional only so missing/pre-v3 server responses fail closed at runtime. */
+    protocolVersion?: number;
 }
 export interface WebSocketMessageDescriptionSend {
     type: "description";
@@ -65,6 +53,7 @@ export interface WebSocketMessageDescriptionSend {
     fromPeerPublicKey: string;
     toPeerId: string;
     roomId: string;
+    protocolVersion: number;
 }
 export interface WebSocketMessageDescriptionReceive {
     type: "description";
@@ -72,23 +61,30 @@ export interface WebSocketMessageDescriptionReceive {
     fromPeerId: string;
     fromPeerPublicKey: string;
     roomId: string;
+    /** Optional only so missing/pre-v3 messages can be rejected at runtime. */
+    protocolVersion?: number;
 }
 export interface WebSocketMessageCandidateSend {
     type: "candidate";
-    candidate: RTCIceCandidate;
+    candidate: RTCIceCandidateInit | RTCIceCandidate;
     fromPeerId: string;
     toPeerId: string;
     roomId: string;
+    protocolVersion: number;
 }
 export interface WebSocketMessageCandidateReceive {
     type: "candidate";
-    candidate: RTCIceCandidate;
+    candidate: RTCIceCandidateInit | RTCIceCandidate;
     fromPeerId: string;
+    roomId: string;
+    /** Optional only so missing/pre-v3 messages can be rejected at runtime. */
+    protocolVersion?: number;
 }
 export interface WebSocketMessagePeersRequest {
     type: "peers";
     fromPeerId: string;
     roomId: string;
+    protocolVersion: number;
 }
 export interface RoomPeer {
     id: string;
@@ -98,17 +94,22 @@ export interface WebSocketMessagePeersResponse {
     type: "peers";
     roomId: string;
     peers: RoomPeer[];
+    /** Optional only so missing/pre-v3 server responses fail closed at runtime. */
+    protocolVersion?: number;
 }
 export interface WebSocketMessageConnectionRequest {
     type: "peerConnection";
     roomId: string;
     peer: RoomPeer;
+    /** Optional only so missing/pre-v3 messages can be rejected at runtime. */
+    protocolVersion?: number;
 }
 export interface WebSocketMessageConnectionResponse {
     type: "peerConnection";
     roomId: string;
     fromPeerId: string;
     toPeerId: string;
+    protocolVersion: number;
 }
 export interface WebSocketMessagePeerConnectionRequest {
     type: "connection";
@@ -116,6 +117,7 @@ export interface WebSocketMessagePeerConnectionRequest {
     fromPeerId: string;
     toPeerId: string;
     labels: string[];
+    protocolVersion: number;
 }
 export interface WebSocketMessagePeerConnectionResponse {
     type: "connection";
@@ -123,21 +125,8 @@ export interface WebSocketMessagePeerConnectionResponse {
     fromPeerId: string;
     fromPeerPublicKey: string;
     labels: string[];
-}
-export interface WebSocketMessageMessageSendRequest {
-    type: "message";
-    message: string;
-    roomId: string;
-    fromPeerId: string;
-    toPeerId: string;
-    label: string;
-}
-export interface WebSocketMessageMessageSendResponse {
-    type: "message";
-    message: string;
-    roomId: string;
-    fromPeerId: string;
-    label: string;
+    /** Optional only so a pre-v3/malformed server response can be rejected. */
+    protocolVersion?: number;
 }
 export interface WebSocketPeerConnectionParams {
     peerId: string;
@@ -156,4 +145,3 @@ export interface WebSocketMessageError {
         [key: string]: unknown;
     };
 }
-//# sourceMappingURL=interfaces.d.ts.map

package/lib/utils/leafHash.d.ts

@@ -0,0 +1,13 @@
+import type { LibCrypto } from "../cryptography/libcrypto";
+export declare const MERKLE_LEAF_DOMAIN = 0;
+/**
+ * Domain-separated Merkle leaf hash computed in **libsodium (C)**:
+ * `SHA-512(0x00 ‖ chunk)`, byte-identical to the WebCrypto `hashMerkleLeaf`
+ * above and to the C `receive_message_with_key` leaf (pake_ratchet.c:155-164).
+ * Synchronous — the WASM SHA-512 runs inline (init → update(0x00 ‖ chunk) →
+ * final). Used on the RECEIVE path (Merkle verification + the receipt token) so
+ * every leaf hash there is libsodium rather than browser crypto. `module` must
+ * expose `_sha512_init/update/final` + `_malloc/_free` (the main crypto module).
+ */
+export declare const hashMerkleLeafWasm: (chunk: Uint8Array, module: LibCrypto) => Uint8Array;
+export declare const hashMerkleLeaf: (chunk: Uint8Array) => Promise<Uint8Array>;

package/lib/utils/messageTypes.d.ts

@@ -85,4 +85,3 @@ export declare const getMessageType: (data: string | File) => number;
 export declare const getFileExtension: (messageType: number) => FileExtension;
 export declare const getMimeType: (messageType: number) => MimeType;
 export declare const getMessageCategory: (messageType: number) => string;
-//# sourceMappingURL=messageTypes.d.ts.map

package/lib/utils/metadata.d.ts

@@ -11,7 +11,12 @@ export interface BasicMetadata {
 export interface Metadata extends BasicMetadata {
     chunkIndex: number;
 }
+/**
+ * Validate the authenticated metadata profile before any offsets are used or
+ * storage is allocated. All numeric wire fields are uint64s; converting a
+ * value above 2^53-1 to Number loses precision, so those values fail closed.
+ */
+export declare const assertMetadataV1: (metadata: Metadata) => void;
 export declare const formatSize: (size: number) => string;
 export declare const serializeMetadata: (metadata: Metadata) => Uint8Array;
 export declare const deserializeMetadata: (buffer: Uint8Array) => Metadata;
-//# sourceMappingURL=metadata.d.ts.map

package/lib/utils/mutex.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A simple async mutex for serializing access to shared resources.
+ *
+ * In this codebase, shared WebAssembly.Memory objects back WASM module
+ * instances used across async operations. Because JavaScript is
+ * single-threaded, synchronous WASM calls between `await` points are
+ * atomic. However, multiple async operations (e.g. concurrent RTK Query
+ * mutations) can interleave at `await` boundaries, leading to
+ * corruption of the shared linear memory (overlapping _malloc regions,
+ * stale ArrayBuffer views after memory growth, etc.).
+ *
+ * Wrapping the critical section with this mutex ensures only one async
+ * operation accesses the shared WASM memory at a time.
+ */
+export declare class AsyncMutex {
+    private queue;
+    private locked;
+    private idleWaiters;
+    acquire(): Promise<void>;
+    release(): void;
+    isIdle(): boolean;
+    whenIdle(): Promise<void>;
+    runExclusive<T>(fn: () => Promise<T>): Promise<T>;
+}

package/lib/utils/protocolVersion.d.ts

@@ -0,0 +1,5 @@
+/**
+ * The signaling version is a fail-closed compatibility check, not a suite
+ * negotiation mechanism. Missing, malformed, older, and newer values all fail.
+ */
+export declare const isProtocolVersionCompatible: (peerProtocolVersion?: number) => boolean;

package/lib/utils/receiptToken.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Chunk receipts are deliberately not raw Merkle leaf hashes. Binding the
+ * receipt to the message root and leaf position prevents an identical leaf in
+ * another transfer from acknowledging the wrong outbound chunk.
+ */
+export declare const CHUNK_RECEIPT_DOMAIN: Uint8Array<ArrayBuffer>;
+export declare const createChunkReceiptToken: (merkleRoot: Uint8Array, chunkIndex: number, leafHash: Uint8Array) => Promise<Uint8Array>;

package/lib/utils/sendQueueKey.d.ts

@@ -0,0 +1,2 @@
+/** Scope the legacy IndexedDB send-queue key to one room without changing its schema. */
+export declare const roomSendQueueLabel: (roomId: string, label: string) => string;

package/lib/utils/signalingAuth.d.ts

@@ -0,0 +1,8 @@
+import type { WebSocketMessageChallengeRequest, WebSocketMessageSuccessfulChallenge } from "./interfaces";
+/**
+ * Exact protocol-v3 server challenge. Legacy reconnect credentials are
+ * deliberately not accepted: every WebSocket must prove possession anew.
+ */
+export declare const isFreshV3Challenge: (value: unknown) => value is WebSocketMessageChallengeRequest;
+/** Exact protocol-v3 proof-success response, with an all-or-none TURN pair. */
+export declare const isV3ChallengeSuccess: (value: unknown) => value is WebSocketMessageSuccessfulChallenge;

package/lib/utils/signalingBounds.d.ts

@@ -0,0 +1,9 @@
+export declare const MAX_SIGNALING_MESSAGE_CHARS: number;
+export declare const MAX_SDP_CHARS: number;
+export declare const MAX_ICE_CANDIDATE_CHARS = 4096;
+export declare const MAX_ICE_FIELD_CHARS = 256;
+export declare const MAX_SIGNALING_LABELS = 64;
+export declare const MAX_DATA_CHANNEL_LABEL_CHARS = 193;
+export declare const isBoundedDescription: (description: RTCSessionDescription | RTCSessionDescriptionInit) => boolean;
+export declare const isBoundedIceCandidate: (candidate: RTCIceCandidateInit | RTCIceCandidate) => boolean;
+export declare const areBoundedDataChannelLabels: (labels: unknown) => labels is string[];

package/lib/utils/splitToChunks.d.ts

@@ -1,8 +1,11 @@
 import type { BaseQueryApi } from "@reduxjs/toolkit/query";
 import type { Room } from "../reducers/roomSlice";
 import type { LibCrypto } from "../cryptography/libcrypto";
+import type { TransferAbortHandle } from "../handlers/transferAbort";
 export declare const metadataSchemaVersions: number[];
-export declare const CANCEL_SEND = "CANCEL_SEND";
+export declare const planMessageChunkCount: (totalSize: number, minChunks?: number, chunkSize?: number, percentageFilledChunk?: number) => number;
+export declare const OUTBOUND_CHUNK_RECORD_OVERHEAD = 2048;
+export declare const estimateOutboundStagingBytes: (totalSize: number, totalChunks: number, chunkSize: number) => number;
 /**
  * Splits a Uint8Array into chunks of a specified size, padding with noise if necessary.
  * Ensures a minimum number of chunks are created.
@@ -11,10 +14,11 @@ export declare const CANCEL_SEND = "CANCEL_SEND";
  * @param data - The Uint8Array to be split.
  * @param minChunks - The minimum number of chunks to produce.
  * @param chunkSize - The desired size of each chunk.
- * @param percentageFilledChunk - If = 1 then all chunk is filled with useful data. Range (0, 1].
+ * @param percentageFilledChunk - Useful-data fraction, range (0, 0.99]. The
+ * remaining RNG padding gives each send a fresh Merkle-root namespace.
  * @returns An object containing the chunks, their merkle proofs and the last valid byte index.
  */
-export declare const splitToChunks: (message: string | File, api: BaseQueryApi, label: string, room: Room, merkleModule: LibCrypto, minChunks?: number, chunkSize?: number, percentageFilledChunk?: number, metadataSchemaVersion?: number) => Promise<{
+export declare const splitToChunks: (message: string | File, api: BaseQueryApi, label: string, room: Room, merkleModule: LibCrypto, transfer: Pick<TransferAbortHandle, "transferId" | "signal" | "bindHash">, minChunks?: number, chunkSize?: number, percentageFilledChunk?: number, metadataSchemaVersion?: number) => Promise<{
     merkleRoot: Uint8Array;
     merkleRootHex: string;
     hash: Uint8Array;
@@ -24,4 +28,3 @@ export declare const splitToChunks: (message: string | File, api: BaseQueryApi,
     messageType: number;
     chunkHashes: Uint8Array;
 }>;
-//# sourceMappingURL=splitToChunks.d.ts.map

package/lib/utils/uint8array.d.ts

@@ -3,7 +3,7 @@
  */
 export declare const concatUint8Arrays: (arrays: Uint8Array[]) => Promise<Uint8Array>;
 /**
- * Compares two Uint8Arrays.
+ * Compares two Uint8Arrays in constant time to prevent timing attacks.
  */
 export declare const uint8ArraysAreEqual: (array1: Uint8Array, array2: Uint8Array) => Promise<boolean>;
 /**
@@ -14,4 +14,3 @@ export declare const uint8ArrayToHex: (array: Uint8Array) => string;
  * Converts hex string to Uint8Array.
  */
 export declare const hexToUint8Array: (hexString: string) => Uint8Array<ArrayBuffer>;
-//# sourceMappingURL=uint8array.d.ts.map

package/lib/utils/waitForOpen.d.ts

@@ -0,0 +1,3 @@
+export declare const waitForOpen: (dc: {
+    readyState: string;
+}, timeoutMs?: number, pollMs?: number, signal?: AbortSignal) => Promise<boolean>;

package/lib/utils/zeroFree.d.ts

@@ -0,0 +1,10 @@
+import type { LibCrypto } from "../cryptography/libcrypto";
+/**
+ * Wipe a secret-bearing WASM buffer before returning it to the allocator.
+ *
+ * WASM `_malloc`/`_free` does not zero memory, and the encryption/receive heaps
+ * are long-lived and reused, so freed secret key material would otherwise linger
+ * in the ArrayBuffer. This mirrors the `sodium_free` discipline used on the C
+ * side. Pass the live view over the buffer; its `byteOffset` is the pointer.
+ */
+export declare const zeroFree: (module: LibCrypto, view: Uint8Array) => void;