wire-mesh-core 1.17.0 → 1.19.0

package/dist/adapters/frame-codec.d.cts

@@ -1,4 +1,4 @@
-import { D as Frame } from "../protocol-Dhswk7YD.cjs";
+import { D as Frame } from "../protocol-B3U828E7.cjs";
 //#region src/adapters/frame-codec.d.ts
 export declare function messageFromFrame(frame: Frame): Uint8Array<ArrayBuffer>;
 /** A frame that fails schema validation, caught separately from a decode failure so it can be dropped without disconnecting. */

package/dist/adapters/frame-codec.d.mts

@@ -1,4 +1,4 @@
-import { D as Frame } from "../protocol-Dhswk7YD.mjs";
+import { D as Frame } from "../protocol-B3U828E7.mjs";
 //#region src/adapters/frame-codec.d.ts
 export declare function messageFromFrame(frame: Frame): Uint8Array<ArrayBuffer>;
 /** A frame that fails schema validation, caught separately from a decode failure so it can be dropped without disconnecting. */

package/dist/adapters/node-identity.d.cts

@@ -1,5 +1,5 @@
-import { P as IdentityKey, x as DeviceId } from "../protocol-Dhswk7YD.cjs";
-import { t as IdentityPort } from "../identity-BldV8xFj.cjs";
+import { P as IdentityKey, x as DeviceId } from "../protocol-B3U828E7.cjs";
+import { t as IdentityPort } from "../identity-COdFfaW8.cjs";
 import { webcrypto } from "node:crypto";
 //#region src/adapters/node-identity.d.ts
 export declare function deriveDeviceId(publicKey: Uint8Array): Promise<DeviceId>;

package/dist/adapters/node-identity.d.mts

@@ -1,5 +1,5 @@
-import { P as IdentityKey, x as DeviceId } from "../protocol-Dhswk7YD.mjs";
-import { t as IdentityPort } from "../identity-B1hBV3YA.mjs";
+import { P as IdentityKey, x as DeviceId } from "../protocol-B3U828E7.mjs";
+import { t as IdentityPort } from "../identity-B7YMBhMf.mjs";
 import { webcrypto } from "node:crypto";
 //#region src/adapters/node-identity.d.ts
 export declare function deriveDeviceId(publicKey: Uint8Array): Promise<DeviceId>;

package/dist/adapters/tcp-transport.d.cts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-hEUxrdhT.cjs";
+import { r as Transport } from "../transport-BrAqN6I5.cjs";
 //#region src/adapters/tcp-transport.d.ts
 /** A Node net.Socket-based Transport: length-prefixed, CBOR-encoded frames over plain TCP -- matching Cascade's own transport shape, since interop with Cascade nodes is wire-mesh's stated goal. Framing (not TLS) is this adapter's own concern; a TLS-terminated variant is a separate adapter behind the same Transport contract. */
 export declare function createTcpTransport(): Transport;

package/dist/adapters/tcp-transport.d.mts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-BNNdUBq-.mjs";
+import { r as Transport } from "../transport-B_diuPHT.mjs";
 //#region src/adapters/tcp-transport.d.ts
 /** A Node net.Socket-based Transport: length-prefixed, CBOR-encoded frames over plain TCP -- matching Cascade's own transport shape, since interop with Cascade nodes is wire-mesh's stated goal. Framing (not TLS) is this adapter's own concern; a TLS-terminated variant is a separate adapter behind the same Transport contract. */
 export declare function createTcpTransport(): Transport;

package/dist/adapters/tls-transport.d.cts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-hEUxrdhT.cjs";
+import { r as Transport } from "../transport-BrAqN6I5.cjs";
 //#region src/adapters/tls-transport.d.ts
 export interface TlsIdentity {
   certificatePem: string;

package/dist/adapters/tls-transport.d.mts

@@ -1,4 +1,4 @@
-import { r as Transport } from "../transport-BNNdUBq-.mjs";
+import { r as Transport } from "../transport-B_diuPHT.mjs";
 //#region src/adapters/tls-transport.d.ts
 export interface TlsIdentity {
   certificatePem: string;

package/dist/domain/capability-grant.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_generated_protocol = require("../generated/protocol.cjs");
-const require_domain_tokens = require("./tokens.cjs");
+const require_tokens = require("../tokens-BxTxBmXt.cjs");
 //#region src/domain/capability-grant.ts
 /**
 * The generic, capability-agnostic capability-grant primitive (wire-mesh#117, spec/management.cddl) -- the unsolicited push counterpart to capability-request.ts's own ask/response primitive. Where capability-request lifts core/room's room.join shape (a pull: the requester asks, the owner mints and returns a grant on the same response) out of that one domain, capability-grant lifts room.invite's own shape (a push: the owner mints unprompted and delivers the grant in the request itself, since there is no approval round-trip to carry it back) the same way. core/room's own room-client.ts is the reference consumer: it builds sendRoomInvite as a thin wrapper over sendCapabilityGrant below, and wires createRoomRouter's dispatch onto createCapabilityGrantHandler for the receiving side.
@@ -48,7 +48,7 @@ function createCapabilityGrantHandler(options) {
 			return;
 		}
 		const grantedToken = parsed.data["granted-token"];
-		const verdict = await require_domain_tokens.verifyCapabilityToken(grantedToken, {
+		const verdict = await require_tokens.verifyCapabilityToken(grantedToken, {
 			identity: options.identity,
 			clock: options.clock,
 			revocation: options.revocation,
@@ -68,7 +68,7 @@ function createCapabilityGrantHandler(options) {
 			});
 			return;
 		}
-		if (!require_domain_tokens.scopeNarrows(verdict.claims.scope, incoming.scope)) {
+		if (!require_tokens.scopeNarrows(verdict.claims.scope, incoming.scope)) {
 			await incoming.respond({
 				result: "error",
 				code: "scope_mismatch"

package/dist/domain/capability-grant.d.cts

@@ -1,8 +1,8 @@
-import { F as ManageCommand, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-Dhswk7YD.cjs";
-import { t as IdentityPort } from "../identity-BldV8xFj.cjs";
+import { F as ManageCommand, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-B3U828E7.cjs";
+import { t as IdentityPort } from "../identity-COdFfaW8.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
 import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.cjs";
-import { RevocationCheck } from "./tokens.cjs";
+import { a as RevocationCheck } from "../tokens-D2aFwPcZ.cjs";
 //#region src/domain/capability-grant.d.ts
 /**
  * Builds a capability-grant command per management.cddl. The outer `manage-command.verb` is the capability string itself, the identical convention capability-request.ts's own buildCapabilityRequestCommand already establishes -- a receiver's per-capability handler is how it knows which grant this push is even for. `params.verb` is the fixed "capability.grant" marker. No scope or invitee field: manage-request-frame's own top-level scope already carries the former, and the request's own destination already carries the latter -- naming either a second time inside params could only ever disagree with the fact it duplicates.

package/dist/domain/capability-grant.d.mts

@@ -1,8 +1,8 @@
-import { F as ManageCommand, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-Dhswk7YD.mjs";
-import { t as IdentityPort } from "../identity-B1hBV3YA.mjs";
+import { F as ManageCommand, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-B3U828E7.mjs";
+import { t as IdentityPort } from "../identity-B7YMBhMf.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
 import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.mjs";
-import { RevocationCheck } from "./tokens.mjs";
+import { a as RevocationCheck } from "../tokens-DSwixfDl.mjs";
 //#region src/domain/capability-grant.d.ts
 /**
  * Builds a capability-grant command per management.cddl. The outer `manage-command.verb` is the capability string itself, the identical convention capability-request.ts's own buildCapabilityRequestCommand already establishes -- a receiver's per-capability handler is how it knows which grant this push is even for. `params.verb` is the fixed "capability.grant" marker. No scope or invitee field: manage-request-frame's own top-level scope already carries the former, and the request's own destination already carries the latter -- naming either a second time inside params could only ever disagree with the fact it duplicates.

package/dist/domain/capability-grant.mjs

@@ -1,5 +1,5 @@
 import { capabilityGrantSchema } from "../generated/protocol.mjs";
-import { scopeNarrows, verifyCapabilityToken } from "./tokens.mjs";
+import { i as verifyCapabilityToken, o as scopeNarrows } from "../tokens-D9I1Pn14.mjs";
 //#region src/domain/capability-grant.ts
 /**
 * The generic, capability-agnostic capability-grant primitive (wire-mesh#117, spec/management.cddl) -- the unsolicited push counterpart to capability-request.ts's own ask/response primitive. Where capability-request lifts core/room's room.join shape (a pull: the requester asks, the owner mints and returns a grant on the same response) out of that one domain, capability-grant lifts room.invite's own shape (a push: the owner mints unprompted and delivers the grant in the request itself, since there is no approval round-trip to carry it back) the same way. core/room's own room-client.ts is the reference consumer: it builds sendRoomInvite as a thin wrapper over sendCapabilityGrant below, and wires createRoomRouter's dispatch onto createCapabilityGrantHandler for the receiving side.

package/dist/domain/capability-request.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_generated_protocol = require("../generated/protocol.cjs");
-const require_domain_tokens = require("./tokens.cjs");
+const require_tokens = require("../tokens-BxTxBmXt.cjs");
 //#region src/domain/capability-request.ts
 /**
 * The generic, capability-agnostic capability-request / capability-grant-ok primitive (wire-mesh#78, spec/management.cddl). Lifts core/room's own room.join shape -- an ungated ask, held open, a human (or any other domain-supplied decision) accepts or refuses, acceptance mints and returns a token on the same response -- out of that one domain so any capability can reuse it, not just room:member. core/room's own room-client.ts is the reference consumer: it rewires requestToJoin/createRoomRouter's room.join handling onto requestCapability/createCapabilityRequestHandler below, supplying room-specific extension fields (its member list) through this module's own extensions mechanism rather than this module knowing anything about rooms.
@@ -85,7 +85,7 @@ function createCapabilityRequestHandler(options) {
 					});
 					return;
 				}
-				const verdict = await require_domain_tokens.mintCapabilityToken({
+				const verdict = await require_tokens.mintCapabilityToken({
 					identity: options.identity,
 					clock: options.clock,
 					tokenId: randomTokenId(),

package/dist/domain/capability-request.d.cts

@@ -1,5 +1,5 @@
-import { F as ManageCommand, i as CapabilityGrantOk, o as CapabilityScope, x as DeviceId } from "../protocol-Dhswk7YD.cjs";
-import { t as IdentityPort } from "../identity-BldV8xFj.cjs";
+import { F as ManageCommand, i as CapabilityGrantOk, o as CapabilityScope, x as DeviceId } from "../protocol-B3U828E7.cjs";
+import { t as IdentityPort } from "../identity-COdFfaW8.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.cjs";
 //#region src/domain/capability-request.d.ts

package/dist/domain/capability-request.d.mts

@@ -1,5 +1,5 @@
-import { F as ManageCommand, i as CapabilityGrantOk, o as CapabilityScope, x as DeviceId } from "../protocol-Dhswk7YD.mjs";
-import { t as IdentityPort } from "../identity-B1hBV3YA.mjs";
+import { F as ManageCommand, i as CapabilityGrantOk, o as CapabilityScope, x as DeviceId } from "../protocol-B3U828E7.mjs";
+import { t as IdentityPort } from "../identity-B7YMBhMf.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
 import { IncomingManageRequest, MeshSession } from "./mesh-session.mjs";
 //#region src/domain/capability-request.d.ts

package/dist/domain/capability-request.mjs

@@ -1,5 +1,5 @@
 import { capabilityGrantOkSchema, capabilityRequestSchema } from "../generated/protocol.mjs";
-import { mintCapabilityToken } from "./tokens.mjs";
+import { n as mintCapabilityToken } from "../tokens-D9I1Pn14.mjs";
 //#region src/domain/capability-request.ts
 /**
 * The generic, capability-agnostic capability-request / capability-grant-ok primitive (wire-mesh#78, spec/management.cddl). Lifts core/room's own room.join shape -- an ungated ask, held open, a human (or any other domain-supplied decision) accepts or refuses, acceptance mints and returns a token on the same response -- out of that one domain so any capability can reuse it, not just room:member. core/room's own room-client.ts is the reference consumer: it rewires requestToJoin/createRoomRouter's room.join handling onto requestCapability/createCapabilityRequestHandler below, supplying room-specific extension fields (its member list) through this module's own extensions mechanism rather than this module knowing anything about rooms.

package/dist/domain/device-id.d.cts

@@ -1,4 +1,4 @@
-import { x as DeviceId } from "../protocol-Dhswk7YD.cjs";
+import { x as DeviceId } from "../protocol-B3U828E7.cjs";
 //#region src/domain/device-id.d.ts
 /** Lowercase, byte-exact hex for an arbitrary-length byte string -- the same encoding convention deviceIdToHex uses for the fixed-length device-id case, extracted so any other byte string needing a stable, displayable, map-keyable text form (e.g. a token-id, which tokens.cddl defines as an arbitrary-length bstr rather than a 32-byte device-id) can use the identical convention without going through a device-id-shaped function. */
 export declare function bytesToHex(bytes: Uint8Array): string;

package/dist/domain/device-id.d.mts

@@ -1,4 +1,4 @@
-import { x as DeviceId } from "../protocol-Dhswk7YD.mjs";
+import { x as DeviceId } from "../protocol-B3U828E7.mjs";
 //#region src/domain/device-id.d.ts
 /** Lowercase, byte-exact hex for an arbitrary-length byte string -- the same encoding convention deviceIdToHex uses for the fixed-length device-id case, extracted so any other byte string needing a stable, displayable, map-keyable text form (e.g. a token-id, which tokens.cddl defines as an arbitrary-length bstr rather than a 32-byte device-id) can use the identical convention without going through a device-id-shaped function. */
 export declare function bytesToHex(bytes: Uint8Array): string;

package/dist/domain/handshake.d.cts

@@ -1,4 +1,4 @@
-import { M as HandshakeFrame, et as ProtocolVersion, w as DomainId } from "../protocol-Dhswk7YD.cjs";
+import { M as HandshakeFrame, et as ProtocolVersion, w as DomainId } from "../protocol-B3U828E7.cjs";
 //#region src/domain/handshake.d.ts
 /** The highest protocol version this build of core understands. */
 export declare const SUPPORTED_PROTOCOL_VERSION: ProtocolVersion;

package/dist/domain/handshake.d.mts

@@ -1,4 +1,4 @@
-import { M as HandshakeFrame, et as ProtocolVersion, w as DomainId } from "../protocol-Dhswk7YD.mjs";
+import { M as HandshakeFrame, et as ProtocolVersion, w as DomainId } from "../protocol-B3U828E7.mjs";
 //#region src/domain/handshake.d.ts
 /** The highest protocol version this build of core understands. */
 export declare const SUPPORTED_PROTOCOL_VERSION: ProtocolVersion;

package/dist/domain/mesh-session.d.cts

@@ -1,7 +1,7 @@
-import { D as Frame, F as ManageCommand, K as PeerAdvert, L as ManageError, R as ManageOk, dt as RevocationEntry, et as ProtocolVersion, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-Dhswk7YD.cjs";
-import { t as IdentityPort } from "../identity-BldV8xFj.cjs";
+import { D as Frame, F as ManageCommand, K as PeerAdvert, L as ManageError, R as ManageOk, dt as RevocationEntry, et as ProtocolVersion, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-B3U828E7.cjs";
+import { t as IdentityPort } from "../identity-COdFfaW8.cjs";
 import { t as Clock } from "../clock-DiSx-WKM.cjs";
-import { r as Transport, t as Connection } from "../transport-hEUxrdhT.cjs";
+import { r as Transport, t as Connection } from "../transport-BrAqN6I5.cjs";
 //#region src/domain/mesh-session.d.ts
 /** How long to wait for the node's handshake before calling it unanswered. A relay-only node never sends one; that is a state to display, not an error. */
 export declare const HANDSHAKE_TIMEOUT_MS = 3000;

package/dist/domain/mesh-session.d.mts

@@ -1,7 +1,7 @@
-import { D as Frame, F as ManageCommand, K as PeerAdvert, L as ManageError, R as ManageOk, dt as RevocationEntry, et as ProtocolVersion, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-Dhswk7YD.mjs";
-import { t as IdentityPort } from "../identity-B1hBV3YA.mjs";
+import { D as Frame, F as ManageCommand, K as PeerAdvert, L as ManageError, R as ManageOk, dt as RevocationEntry, et as ProtocolVersion, o as CapabilityScope, s as CapabilityToken, x as DeviceId } from "../protocol-B3U828E7.mjs";
+import { t as IdentityPort } from "../identity-B7YMBhMf.mjs";
 import { t as Clock } from "../clock-DiSx-WKM.mjs";
-import { r as Transport, t as Connection } from "../transport-BNNdUBq-.mjs";
+import { r as Transport, t as Connection } from "../transport-B_diuPHT.mjs";
 //#region src/domain/mesh-session.d.ts
 /** How long to wait for the node's handshake before calling it unanswered. A relay-only node never sends one; that is a state to display, not an error. */
 export declare const HANDSHAKE_TIMEOUT_MS = 3000;

package/dist/domain/relay-hub.d.cts

@@ -1,4 +1,4 @@
-import { t as Connection } from "../transport-hEUxrdhT.cjs";
+import { t as Connection } from "../transport-BrAqN6I5.cjs";
 //#region src/domain/relay-hub.d.ts
 export interface RelayHub {
   /** Drives one accepted connection until it closes: registers gossip-advertised devices, re-broadcasts each gossip frame to every other connected client and replies to the gossiping connection with a catch-up frame of every other already-known device, answers relay-connect by pairing and notifying the target, and forwards relay-data within established pairings. Resolves when the connection's frame stream ends. */

package/dist/domain/relay-hub.d.mts

@@ -1,4 +1,4 @@
-import { t as Connection } from "../transport-BNNdUBq-.mjs";
+import { t as Connection } from "../transport-B_diuPHT.mjs";
 //#region src/domain/relay-hub.d.ts
 export interface RelayHub {
   /** Drives one accepted connection until it closes: registers gossip-advertised devices, re-broadcasts each gossip frame to every other connected client and replies to the gossiping connection with a catch-up frame of every other already-known device, answers relay-connect by pairing and notifying the target, and forwards relay-data within established pairings. Resolves when the connection's frame stream ends. */

package/dist/domain/revocation-view.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_domain_tokens = require("./tokens.cjs");
+const require_tokens = require("../tokens-BxTxBmXt.cjs");
 const require_domain_device_id = require("./device-id.cjs");
 //#region src/domain/revocation-view.ts
 function revocationKey(tokenId, issuer) {
@@ -12,7 +12,7 @@ function createRevocationView() {
 			return Promise.resolve(revoked.has(revocationKey(tokenId, issuer)));
 		},
 		async record(entry, options) {
-			const verdict = await require_domain_tokens.verifyRevocationEntry(entry, options);
+			const verdict = await require_tokens.verifyRevocationEntry(entry, options);
 			if (verdict.ok) revoked.add(revocationKey(verdict.claims["token-id"], verdict.claims.issuer));
 			return verdict;
 		}

package/dist/domain/revocation-view.d.cts

@@ -1,5 +1,5 @@
-import { dt as RevocationEntry } from "../protocol-Dhswk7YD.cjs";
-import { RevocationCheck, RevocationEntryVerdict, VerifyRevocationEntryOptions } from "./tokens.cjs";
+import { dt as RevocationEntry } from "../protocol-B3U828E7.cjs";
+import { a as RevocationCheck, d as VerifyRevocationEntryOptions, o as RevocationEntryVerdict } from "../tokens-D2aFwPcZ.cjs";
 //#region src/domain/revocation-view.d.ts
 /**
  * An in-memory RevocationCheck fed by ingested revocation-announce frames. Keyed by (token-id, issuer) per management.cddl's contract: an entry counts against a token only when both match, so a third party's entry for someone else's token-id is stored (it is a well-formed, self-certifying entry) but never matches a lookup for the token it does not actually govern.

package/dist/domain/revocation-view.d.mts

@@ -1,5 +1,5 @@
-import { dt as RevocationEntry } from "../protocol-Dhswk7YD.mjs";
-import { RevocationCheck, RevocationEntryVerdict, VerifyRevocationEntryOptions } from "./tokens.mjs";
+import { dt as RevocationEntry } from "../protocol-B3U828E7.mjs";
+import { a as RevocationCheck, d as VerifyRevocationEntryOptions, o as RevocationEntryVerdict } from "../tokens-DSwixfDl.mjs";
 //#region src/domain/revocation-view.d.ts
 /**
  * An in-memory RevocationCheck fed by ingested revocation-announce frames. Keyed by (token-id, issuer) per management.cddl's contract: an entry counts against a token only when both match, so a third party's entry for someone else's token-id is stored (it is a well-formed, self-certifying entry) but never matches a lookup for the token it does not actually govern.

package/dist/domain/revocation-view.mjs

@@ -1,4 +1,4 @@
-import { verifyRevocationEntry } from "./tokens.mjs";
+import { a as verifyRevocationEntry } from "../tokens-D9I1Pn14.mjs";
 import { bytesToHex, deviceIdToHex } from "./device-id.mjs";
 //#region src/domain/revocation-view.ts
 function revocationKey(tokenId, issuer) {

package/dist/domain/room-token-verification.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_domain_tokens = require("./tokens.cjs");
+const require_tokens = require("../tokens-BxTxBmXt.cjs");
 const require_domain_device_id = require("./device-id.cjs");
 const require_domain_room_path = require("./room-path.cjs");
 //#region src/domain/room-token-verification.ts
@@ -12,7 +12,7 @@ const ROOM_MEMBER_CAPABILITY = "room:member";
 * Verifies a `room:member` capability token against all six of core/room's verifier obligations. Delegates obligations 2/4/5 to verifyCapabilityToken directly; adds obligation 3 (scope.kind/scope.path must match the room being acted on) and obligation 1 (the chain's root must be the room's own owner for a named room, or the verifying identity itself for a DM -- never either named participant directly, since a DM token minted by anyone other than the verifier would let a sender self-issue authority to message a stranger unsolicited).
 */
 async function verifyRoomToken(token, options) {
-	const verdict = await require_domain_tokens.verifyCapabilityToken(token, {
+	const verdict = await require_tokens.verifyCapabilityToken(token, {
 		identity: options.identity,
 		clock: options.clock,
 		revocation: options.revocation,

package/dist/domain/room-token-verification.d.cts

@@ -1,5 +1,5 @@
-import { kt as TokenClaims, s as CapabilityToken, x as DeviceId } from "../protocol-Dhswk7YD.cjs";
-import { TokenVerdictReason, VerifyCapabilityTokenOptions } from "./tokens.cjs";
+import { kt as TokenClaims, s as CapabilityToken, x as DeviceId } from "../protocol-B3U828E7.cjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "../tokens-D2aFwPcZ.cjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 export declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/domain/room-token-verification.d.mts

@@ -1,5 +1,5 @@
-import { kt as TokenClaims, s as CapabilityToken, x as DeviceId } from "../protocol-Dhswk7YD.mjs";
-import { TokenVerdictReason, VerifyCapabilityTokenOptions } from "./tokens.mjs";
+import { kt as TokenClaims, s as CapabilityToken, x as DeviceId } from "../protocol-B3U828E7.mjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "../tokens-DSwixfDl.mjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 export declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/domain/room-token-verification.mjs

@@ -1,4 +1,4 @@
-import { verifyCapabilityToken } from "./tokens.mjs";
+import { i as verifyCapabilityToken } from "../tokens-D9I1Pn14.mjs";
 import { deviceIdToHex } from "./device-id.mjs";
 import { parseRoomPath } from "./room-path.mjs";
 //#region src/domain/room-token-verification.ts