wire-mesh-core 1.45.2 → 1.47.0

package/dist/{protocol-gbXtNeOc.d.mts → protocol-CNFRVx9w.d.mts}

@@ -107,6 +107,45 @@ declare const manageCommandParamsSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodUni
   "key-epoch": z.ZodNumber;
   "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
 }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.commit">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+    protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  deadline: z.ZodNumber;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.sign">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.abort">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round1">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  threshold: z.ZodNumber;
+  participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+  commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round2">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-confirm">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
   verb: z.ZodLiteral<"webrtc.offer">;
   "negotiation-id": z.ZodNumber;
   sdp: z.ZodString;
@@ -123,6 +162,14 @@ declare const manageCommandParamsSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodUni
     "sdp-m-line-index": z.ZodOptional<z.ZodNumber>;
     "username-fragment": z.ZodOptional<z.ZodString>;
   }, z.core.$strip>>>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"webrtc.sfu-track-map">;
+  "negotiation-id": z.ZodNumber;
+  tracks: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    mid: z.ZodString;
+    member: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    kind: z.ZodUnion<readonly [z.ZodLiteral<"audio">, z.ZodLiteral<"video">]>;
+  }, z.core.$strip>>>>;
 }, z.core.$strip>>>]>]>>;
 declare const bulkDataFrameSchema: z.ZodLazy<z.ZodObject<{
   type: z.ZodLiteral<"bulk-data">;
@@ -371,6 +418,45 @@ declare const frameVariantSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.Zod
       "key-epoch": z.ZodNumber;
       "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
     }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.commit">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+        protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>;
+      deadline: z.ZodNumber;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.sign">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.abort">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round1">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      threshold: z.ZodNumber;
+      participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+      commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round2">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-confirm">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
       verb: z.ZodLiteral<"webrtc.offer">;
       "negotiation-id": z.ZodNumber;
       sdp: z.ZodString;
@@ -387,6 +473,14 @@ declare const frameVariantSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.Zod
         "sdp-m-line-index": z.ZodOptional<z.ZodNumber>;
         "username-fragment": z.ZodOptional<z.ZodString>;
       }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"webrtc.sfu-track-map">;
+      "negotiation-id": z.ZodNumber;
+      tracks: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        mid: z.ZodString;
+        member: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"audio">, z.ZodLiteral<"video">]>;
+      }, z.core.$strip>>>>;
     }, z.core.$strip>>>]>]>>>;
   }, z.core.$strip>>>;
   scope: z.ZodLazy<z.ZodLazy<z.ZodObject<{
@@ -602,6 +696,45 @@ declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.
       "key-epoch": z.ZodNumber;
       "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
     }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.commit">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+        protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>;
+      deadline: z.ZodNumber;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.sign">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.abort">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round1">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      threshold: z.ZodNumber;
+      participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+      commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round2">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-confirm">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
       verb: z.ZodLiteral<"webrtc.offer">;
       "negotiation-id": z.ZodNumber;
       sdp: z.ZodString;
@@ -618,6 +751,14 @@ declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.
         "sdp-m-line-index": z.ZodOptional<z.ZodNumber>;
         "username-fragment": z.ZodOptional<z.ZodString>;
       }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"webrtc.sfu-track-map">;
+      "negotiation-id": z.ZodNumber;
+      tracks: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        mid: z.ZodString;
+        member: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"audio">, z.ZodLiteral<"video">]>;
+      }, z.core.$strip>>>>;
     }, z.core.$strip>>>]>]>>>;
   }, z.core.$strip>>>;
   scope: z.ZodLazy<z.ZodLazy<z.ZodObject<{
@@ -804,6 +945,45 @@ declare const manageCommandSchema: z.ZodLazy<z.ZodObject<{
     "key-epoch": z.ZodNumber;
     "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
   }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.commit">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+      protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>;
+    deadline: z.ZodNumber;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.sign">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>>;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.abort">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    reason: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.keygen-round1">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    threshold: z.ZodNumber;
+    participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+    commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.keygen-round2">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.keygen-confirm">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
     verb: z.ZodLiteral<"webrtc.offer">;
     "negotiation-id": z.ZodNumber;
     sdp: z.ZodString;
@@ -820,6 +1000,14 @@ declare const manageCommandSchema: z.ZodLazy<z.ZodObject<{
       "sdp-m-line-index": z.ZodOptional<z.ZodNumber>;
       "username-fragment": z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"webrtc.sfu-track-map">;
+    "negotiation-id": z.ZodNumber;
+    tracks: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      mid: z.ZodString;
+      member: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      kind: z.ZodUnion<readonly [z.ZodLiteral<"audio">, z.ZodLiteral<"video">]>;
+    }, z.core.$strip>>>>;
   }, z.core.$strip>>>]>]>>>;
 }, z.core.$strip>>;
 declare const manageRequestFrameSchema: z.ZodLazy<z.ZodObject<{
@@ -917,6 +1105,45 @@ declare const manageRequestFrameSchema: z.ZodLazy<z.ZodObject<{
       "key-epoch": z.ZodNumber;
       "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
     }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.commit">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+        protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>;
+      deadline: z.ZodNumber;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.sign">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.abort">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round1">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      threshold: z.ZodNumber;
+      participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+      commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round2">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-confirm">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
       verb: z.ZodLiteral<"webrtc.offer">;
       "negotiation-id": z.ZodNumber;
       sdp: z.ZodString;
@@ -933,6 +1160,14 @@ declare const manageRequestFrameSchema: z.ZodLazy<z.ZodObject<{
         "sdp-m-line-index": z.ZodOptional<z.ZodNumber>;
         "username-fragment": z.ZodOptional<z.ZodString>;
       }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"webrtc.sfu-track-map">;
+      "negotiation-id": z.ZodNumber;
+      tracks: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        mid: z.ZodString;
+        member: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"audio">, z.ZodLiteral<"video">]>;
+      }, z.core.$strip>>>>;
     }, z.core.$strip>>>]>]>>>;
   }, z.core.$strip>>>;
   scope: z.ZodLazy<z.ZodLazy<z.ZodObject<{
@@ -1114,6 +1349,76 @@ declare const streamEndFrameSchema: z.ZodLazy<z.ZodObject<{
   "exit-code": z.ZodOptional<z.ZodNumber>;
   "exit-signal": z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>>;
+declare const sessionIdSchema: z.ZodLazy<z.ZodNumber>;
+declare const thresholdSubjectSchema: z.ZodLazy<z.ZodObject<{
+  kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+  protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const thresholdCommitmentSchema: z.ZodLazy<z.ZodObject<{
+  participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const thresholdCommitSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.commit">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+    protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  deadline: z.ZodNumber;
+}, z.core.$strip>>;
+declare const thresholdSignSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.sign">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>>;
+}, z.core.$strip>>;
+declare const thresholdShareClaimsSchema: z.ZodLazy<z.ZodObject<{
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  issuer: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  "issuer-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+}, z.core.$strip>>;
+declare const thresholdShareEnvelopeSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodTuple<[z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  "1": z.ZodOptional<z.ZodNumber>;
+  "4": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+}, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodNull]>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>], null>>>>;
+declare const thresholdAbortSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.abort">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
+declare const thresholdKeygenRound1Schema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round1">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  threshold: z.ZodNumber;
+  participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+  commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+}, z.core.$strip>>;
+declare const thresholdKeygenRound2Schema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round2">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const thresholdKeygenConfirmSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-confirm">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
 declare const capabilityVerbSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodString>>, z.ZodLazy<z.ZodLazy<z.ZodString>>, z.ZodLazy<z.ZodLazy<z.ZodString>>]>>;
 declare const coreCapabilitySchema: z.ZodLazy<z.ZodString>;
 declare const namespacedCapabilitySchema: z.ZodLazy<z.ZodString>;
@@ -1224,6 +1529,20 @@ declare const coordinatorFrameSchema: z.ZodLazy<z.ZodObject<{
   coordinator: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
   "capacity-hint": z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>>;
+declare const sfuTrackMapSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"webrtc.sfu-track-map">;
+  "negotiation-id": z.ZodNumber;
+  tracks: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    mid: z.ZodString;
+    member: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    kind: z.ZodUnion<readonly [z.ZodLiteral<"audio">, z.ZodLiteral<"video">]>;
+  }, z.core.$strip>>>>;
+}, z.core.$strip>>;
+declare const sfuTrackEntrySchema: z.ZodLazy<z.ZodObject<{
+  mid: z.ZodString;
+  member: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  kind: z.ZodUnion<readonly [z.ZodLiteral<"audio">, z.ZodLiteral<"video">]>;
+}, z.core.$strip>>;
 declare const webrtcOfferSchema: z.ZodLazy<z.ZodObject<{
   verb: z.ZodLiteral<"webrtc.offer">;
   "negotiation-id": z.ZodNumber;
@@ -1315,6 +1634,17 @@ type StreamSession = z.infer<typeof streamSessionSchema>;
 type StreamDataFrame = z.infer<typeof streamDataFrameSchema>;
 type StreamAckFrame = z.infer<typeof streamAckFrameSchema>;
 type StreamEndFrame = z.infer<typeof streamEndFrameSchema>;
+type SessionId = z.infer<typeof sessionIdSchema>;
+type ThresholdSubject = z.infer<typeof thresholdSubjectSchema>;
+type ThresholdCommitment = z.infer<typeof thresholdCommitmentSchema>;
+type ThresholdCommit = z.infer<typeof thresholdCommitSchema>;
+type ThresholdSign = z.infer<typeof thresholdSignSchema>;
+type ThresholdShareClaims = z.infer<typeof thresholdShareClaimsSchema>;
+type ThresholdShareEnvelope = z.infer<typeof thresholdShareEnvelopeSchema>;
+type ThresholdAbort = z.infer<typeof thresholdAbortSchema>;
+type ThresholdKeygenRound1 = z.infer<typeof thresholdKeygenRound1Schema>;
+type ThresholdKeygenRound2 = z.infer<typeof thresholdKeygenRound2Schema>;
+type ThresholdKeygenConfirm = z.infer<typeof thresholdKeygenConfirmSchema>;
 type CapabilityVerb = z.infer<typeof capabilityVerbSchema>;
 type CoreCapability = z.infer<typeof coreCapabilitySchema>;
 type NamespacedCapability = z.infer<typeof namespacedCapabilitySchema>;
@@ -1341,9 +1671,11 @@ type RelayConnectFrame = z.infer<typeof relayConnectFrameSchema>;
 type RelayDataFrame = z.infer<typeof relayDataFrameSchema>;
 type RelayInboundFrame = z.infer<typeof relayInboundFrameSchema>;
 type CoordinatorFrame = z.infer<typeof coordinatorFrameSchema>;
+type SfuTrackMap = z.infer<typeof sfuTrackMapSchema>;
+type SfuTrackEntry = z.infer<typeof sfuTrackEntrySchema>;
 type WebrtcOffer = z.infer<typeof webrtcOfferSchema>;
 type WebrtcAnswer = z.infer<typeof webrtcAnswerSchema>;
 type WebrtcIceCandidate = z.infer<typeof webrtcIceCandidateSchema>;
 type IceCandidateInit = z.infer<typeof iceCandidateInitSchema>;
 //#endregion
-export { PeerIdentity as $, relayDataFrameSchema as $n, capabilityScopeSchema as $t, DomainId as A, manageErrorSchema as An, RoomSend as At, IdentityKey as B, peerIdentitySchema as Bn, WebrtcOffer as Bt, CoseTokenHeaders as C, handleClaimsSchema as Cn, tokenClaimsSchema as Cr, RoomMembers as Ct, DeviceId as D, identityKeySchema as Dn, webrtcOfferSchema as Dr, RoomPath as Dt, DataRequestFrame as E, iceCandidateInitSchema as En, webrtcIceCandidateSchema as Er, RoomNoticeClaims as Et, GossipFrame as F, namespacedCapabilitySchema as Fn, SyncPunchFrame as Ft, ManageRequestFrame as G, procSignalSchema as Gn, bulkEndFrameSchema as Gt, ManageCommandParams as H, privateUseCapabilitySchema as Hn, bulkAckFrameSchema as Ht, HandleClaims as I, namespacedDomainIdSchema as In, TokenClaims as It, NamespacedCapability as J, ptyKillSchema as Jn, candidateKindSchema as Jt, ManageResponseFrame as K, procSpawnSchema as Kn, bulkOpenSchema as Kt, HandleRecord as L, observedAddressFrameSchema as Ln, TransferId as Lt, ExecSessionInfo as M, manageRequestFrameSchema as Mn, StreamDataFrame as Mt, Frame as N, manageResponseFrameSchema as Nn, StreamEndFrame as Nt, DeviceIdHex as O, manageCommandParamsSchema as On, wireCandidateSchema as Or, RoomRead as Ot, FrameVariant as P, messageRefSchema as Pn, StreamSession as Pt, PeerAdvert as Q, relayConnectFrameSchema as Qn, capabilityRequestSchema as Qt, HandshakeFrame as R, ownerNamedRoomPathSchema as Rn, WebrtcAnswer as Rt, CoseSign1 as S, gossipFrameSchema as Sn, syncPunchFrameSchema as Sr, RoomMember as St, DataHaveFrame as T, handshakeFrameSchema as Tn, webrtcAnswerSchema as Tr, RoomNotice as Tt, ManageError as U, privateUseDomainIdSchema as Un, bulkCancelSchema as Ut, ManageCommand as V, pingFrameSchema as Vn, WireCandidate as Vt, ManageOk as W, procKillSchema as Wn, bulkDataFrameSchema as Wt, ObservedAddressFrame as X, ptySpawnSchema as Xn, capabilityGrantOkSchema as Xt, NamespacedDomainId as Y, ptyResizeSchema as Yn, candidatesFrameSchema as Yt, OwnerNamedRoomPath as Z, ptyWriteSchema as Zn, capabilityGrantSchema as Zt, CoreCapability as _, domainIdSchema as _n, roomSendSchema as _r, RevocationEntry as _t, BulkOpen as a, coreDomainNameSchema as an, roomInviteSchema as ar, ProcSpawn as at, CoseHeaderKid as b, frameSchema as bn, streamEndFrameSchema as br, RoomJoinOk as bt, CandidatesFrame as c, coseHeaderLabelSchema as cn, roomLeaveSchema as cr, PtyResize as ct, CapabilityRequest as d, dataEntriesFrameSchema as dn, roomMembersSchema as dr, RelayConnectFrame as dt, capabilityTokenSchema as en, relayInboundFrameSchema as er, PingFrame as et, CapabilityScope as f, dataHaveFrameSchema as fn, roomNoticeClaimsSchema as fr, RelayDataFrame as ft, CoordinatorFrame as g, dmRoomPathSchema as gn, roomRekeySchema as gr, RevocationClaims as gt, CloseFrame as h, deviceIdSchema as hn, roomReadSchema as hr, RevocationAnnounceFrame as ht, BulkEndFrame as i, coreCapabilitySchema as in, revocationEntrySchema as ir, ProcSignal as it, ExecList as j, manageOkSchema as jn, StreamAckFrame as jt, DmRoomPath as k, manageCommandSchema as kn, RoomRekey as kt, CapabilityGrant as l, coseSign1Schema as ln, roomMemberSchema as lr, PtySpawn as lt, CapabilityVerb as m, deviceIdHexSchema as mn, roomPathSchema as mr, RelayOfferFrame as mt, BulkCancel as n, closeFrameSchema as nn, revocationAnnounceFrameSchema as nr, PrivateUseDomainId as nt, BulkResume as o, coseHeaderAlgSchema as on, roomJoinOkSchema as or, ProtocolVersion as ot, CapabilityToken as p, dataRequestFrameSchema as pn, roomNoticeSchema as pr, RelayInboundFrame as pt, MessageRef as q, protocolVersionSchema as qn, bulkResumeSchema as qt, BulkDataFrame as r, coordinatorFrameSchema as rn, revocationClaimsSchema as rr, ProcKill as rt, CandidateKind as s, coseHeaderKidSchema as sn, roomJoinSchema as sr, PtyKill as st, BulkAckFrame as t, capabilityVerbSchema as tn, relayOfferFrameSchema as tr, PrivateUseCapability as tt, CapabilityGrantOk as u, coseTokenHeadersSchema as un, roomMembersOkSchema as ur, PtyWrite as ut, CoreDomainName as v, execListSchema as vn, streamAckFrameSchema as vr, RoomInvite as vt, DataEntriesFrame as w, handleRecordSchema as wn, transferIdSchema as wr, RoomMembersOk as wt, CoseHeaderLabel as x, frameVariantSchema as xn, streamSessionSchema as xr, RoomLeave as xt, CoseHeaderAlg as y, execSessionInfoSchema as yn, streamDataFrameSchema as yr, RoomJoin as yt, IceCandidateInit as z, peerAdvertSchema as zn, WebrtcIceCandidate as zt };
+export { PeerIdentity as $, peerIdentitySchema as $n, webrtcOfferSchema as $r, WebrtcOffer as $t, DomainId as A, domainIdSchema as An, roomSendSchema as Ar, RoomSend as At, IdentityKey as B, identityKeySchema as Bn, thresholdCommitSchema as Br, ThresholdCommit as Bt, CoseTokenHeaders as C, coseTokenHeadersSchema as Cn, roomMembersOkSchema as Cr, RoomMembers as Ct, DeviceId as D, deviceIdHexSchema as Dn, roomPathSchema as Dr, RoomPath as Dt, DataRequestFrame as E, dataRequestFrameSchema as En, roomNoticeSchema as Er, RoomNoticeClaims as Et, GossipFrame as F, gossipFrameSchema as Fn, streamDataFrameSchema as Fr, StreamDataFrame as Ft, ManageRequestFrame as G, manageRequestFrameSchema as Gn, thresholdShareClaimsSchema as Gr, ThresholdShareClaims as Gt, ManageCommandParams as H, manageCommandSchema as Hn, thresholdKeygenConfirmSchema as Hr, ThresholdKeygenConfirm as Ht, HandleClaims as I, handleClaimsSchema as In, streamEndFrameSchema as Ir, StreamEndFrame as It, NamespacedCapability as J, namespacedCapabilitySchema as Jn, thresholdSubjectSchema as Jr, ThresholdSubject as Jt, ManageResponseFrame as K, manageResponseFrameSchema as Kn, thresholdShareEnvelopeSchema as Kr, ThresholdShareEnvelope as Kt, HandleRecord as L, handleRecordSchema as Ln, streamSessionSchema as Lr, StreamSession as Lt, ExecSessionInfo as M, execSessionInfoSchema as Mn, sfuTrackEntrySchema as Mr, SfuTrackEntry as Mt, Frame as N, frameSchema as Nn, sfuTrackMapSchema as Nr, SfuTrackMap as Nt, DeviceIdHex as O, deviceIdSchema as On, roomReadSchema as Or, RoomRead as Ot, FrameVariant as P, frameVariantSchema as Pn, streamAckFrameSchema as Pr, StreamAckFrame as Pt, PeerAdvert as Q, peerAdvertSchema as Qn, webrtcIceCandidateSchema as Qr, WebrtcIceCandidate as Qt, HandshakeFrame as R, handshakeFrameSchema as Rn, syncPunchFrameSchema as Rr, SyncPunchFrame as Rt, CoseSign1 as S, coseSign1Schema as Sn, roomMemberSchema as Sr, RoomMember as St, DataHaveFrame as T, dataHaveFrameSchema as Tn, roomNoticeClaimsSchema as Tr, RoomNotice as Tt, ManageError as U, manageErrorSchema as Un, thresholdKeygenRound1Schema as Ur, ThresholdKeygenRound1 as Ut, ManageCommand as V, manageCommandParamsSchema as Vn, thresholdCommitmentSchema as Vr, ThresholdCommitment as Vt, ManageOk as W, manageOkSchema as Wn, thresholdKeygenRound2Schema as Wr, ThresholdKeygenRound2 as Wt, ObservedAddressFrame as X, observedAddressFrameSchema as Xn, transferIdSchema as Xr, TransferId as Xt, NamespacedDomainId as Y, namespacedDomainIdSchema as Yn, tokenClaimsSchema as Yr, TokenClaims as Yt, OwnerNamedRoomPath as Z, ownerNamedRoomPathSchema as Zn, webrtcAnswerSchema as Zr, WebrtcAnswer as Zt, CoreCapability as _, coreCapabilitySchema as _n, revocationEntrySchema as _r, RevocationEntry as _t, BulkOpen as a, bulkOpenSchema as an, procSpawnSchema as ar, ProcSpawn as at, CoseHeaderKid as b, coseHeaderKidSchema as bn, roomJoinSchema as br, RoomJoinOk as bt, CandidatesFrame as c, candidatesFrameSchema as cn, ptyResizeSchema as cr, PtyResize as ct, CapabilityRequest as d, capabilityRequestSchema as dn, relayConnectFrameSchema as dr, RelayConnectFrame as dt, wireCandidateSchema as ei, WireCandidate as en, pingFrameSchema as er, PingFrame as et, CapabilityScope as f, capabilityScopeSchema as fn, relayDataFrameSchema as fr, RelayDataFrame as ft, CoordinatorFrame as g, coordinatorFrameSchema as gn, revocationClaimsSchema as gr, RevocationClaims as gt, CloseFrame as h, closeFrameSchema as hn, revocationAnnounceFrameSchema as hr, RevocationAnnounceFrame as ht, BulkEndFrame as i, bulkEndFrameSchema as in, procSignalSchema as ir, ProcSignal as it, ExecList as j, execListSchema as jn, sessionIdSchema as jr, SessionId as jt, DmRoomPath as k, dmRoomPathSchema as kn, roomRekeySchema as kr, RoomRekey as kt, CapabilityGrant as l, capabilityGrantOkSchema as ln, ptySpawnSchema as lr, PtySpawn as lt, CapabilityVerb as m, capabilityVerbSchema as mn, relayOfferFrameSchema as mr, RelayOfferFrame as mt, BulkCancel as n, bulkCancelSchema as nn, privateUseDomainIdSchema as nr, PrivateUseDomainId as nt, BulkResume as o, bulkResumeSchema as on, protocolVersionSchema as or, ProtocolVersion as ot, CapabilityToken as p, capabilityTokenSchema as pn, relayInboundFrameSchema as pr, RelayInboundFrame as pt, MessageRef as q, messageRefSchema as qn, thresholdSignSchema as qr, ThresholdSign as qt, BulkDataFrame as r, bulkDataFrameSchema as rn, procKillSchema as rr, ProcKill as rt, CandidateKind as s, candidateKindSchema as sn, ptyKillSchema as sr, PtyKill as st, BulkAckFrame as t, bulkAckFrameSchema as tn, privateUseCapabilitySchema as tr, PrivateUseCapability as tt, CapabilityGrantOk as u, capabilityGrantSchema as un, ptyWriteSchema as ur, PtyWrite as ut, CoreDomainName as v, coreDomainNameSchema as vn, roomInviteSchema as vr, RoomInvite as vt, DataEntriesFrame as w, dataEntriesFrameSchema as wn, roomMembersSchema as wr, RoomMembersOk as wt, CoseHeaderLabel as x, coseHeaderLabelSchema as xn, roomLeaveSchema as xr, RoomLeave as xt, CoseHeaderAlg as y, coseHeaderAlgSchema as yn, roomJoinOkSchema as yr, RoomJoin as yt, IceCandidateInit as z, iceCandidateInitSchema as zn, thresholdAbortSchema as zr, ThresholdAbort as zt };

package/dist/rolldown-runtime-VH7oDXx4.cjs

@@ -0,0 +1,28 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});

package/dist/{room-token-verification-BggPfYr8.d.mts → room-token-verification-BdtM1rQ4.d.mts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, It as TokenClaims, p as CapabilityToken } from "./protocol-gbXtNeOc.mjs";
-import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-k172l0Iy.mjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.mjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-CVyPoJ6l.mjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/{room-token-verification-CkQV0Iq7.d.cts → room-token-verification-DpOfZOdl.d.cts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, It as TokenClaims, p as CapabilityToken } from "./protocol-gbXtNeOc.cjs";
-import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-C9Kwy0Gk.cjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.cjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-Cl8sQo7o.cjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/{tokens-CdQwzCyJ.mjs → tokens-B0dpTLhS.mjs}

@@ -134,7 +134,7 @@ async function evaluateConditions(nodes, claims, clock, extraHandlers = {}) {
 }
 //#endregion
 //#region src/domain/tokens.ts
-/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. */
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
 function sig1ToBeSigned(protectedHeader, payload) {
 	return encode([
 		"Signature1",
@@ -456,4 +456,4 @@ async function mintRevocationEntry(options) {
 	];
 }
 //#endregion
-export { verifyRevocationEntry as a, verifyCapabilityToken as i, mintCapabilityToken as n, mintRevocationEntry as r, canGrant as t };
+export { verifyCapabilityToken as a, sig1ToBeSigned as i, mintCapabilityToken as n, verifyRevocationEntry as o, mintRevocationEntry as r, canGrant as t };

package/dist/{tokens-k172l0Iy.d.mts → tokens-CVyPoJ6l.d.mts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, It as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-gbXtNeOc.mjs";
-import { t as IdentityPort } from "./identity-CIb9dGkJ.mjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.mjs";
+import { t as IdentityPort } from "./identity-9TmmK7vP.mjs";
 import { t as Clock } from "./clock-DiSx-WKM.mjs";
 import { z } from "zod";
 import { JsonValue, PredicateNode, Resolution } from "trilean";
@@ -53,6 +53,8 @@ interface VerifyCapabilityTokenOptions {
   /** Registers domain-specific delegate systems a presented token's own `conditions` entries may name, beyond the five mandatory narrowing ops (which are never reachable from `conditions` -- see evaluateConditions's own doc comment). None are registered by wire-mesh-core itself; a domain (a message TTL, #84's future revoke-authorization check) supplies its own here. A `conditions` entry naming a system absent from this map is indeterminate, and therefore fails the whole token -- fail-closed, not a silent no-op. */
   extraPredicateResolvers?: Readonly<Record<string, TokenDelegateHandler<ConditionsContext>>>;
 }
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
+declare function sig1ToBeSigned(protectedHeader: Uint8Array, payload: Uint8Array): Uint8Array;
 /**
  * Verifies one capability token per tokens.cddl's own documented rules: the token is a well-formed COSE_Sign1 whose signature actually verifies against its own embedded issuer-key, that issuer-key is self-certifying (sha256(issuer-key.public-key) equals the claimed issuer device-id -- no shared secret needed to check this), the token is currently valid (not expired, not before not-before, not revoked by its own issuer), and -- recursively -- any parent delegation narrows rather than widens across all three axes of authority: the parent's bearer must be this token's issuer (the delegation chain is unbroken), this token's expiry must not exceed its parent's, and this token's scope must narrow its parent's (same kind; equal-or-descendant path when the parent carries one) with an identical capability verb (the capability-verb grammar has no sub-verb relation, so a different verb is a different authority, not a narrower one). Undecodable payload bytes return "malformed" and undecodable parent bytes return "parent_invalid" -- hostile input produces a verdict, never a throw.
  */
@@ -121,4 +123,4 @@ interface MintRevocationEntryOptions {
 /** Mints one revocation-entry (management.cddl): a COSE_Sign1 over revocation-claims, signed the same way mintCapabilityToken signs a token. No narrowing chain to check -- a revocation entry has no parent and cannot fail to be issuable the way a delegated token can, so this returns the entry directly rather than a verdict. */
 declare function mintRevocationEntry(options: MintRevocationEntryOptions): Promise<RevocationEntry>;
 //#endregion
-export { RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyRevocationEntry as g, verifyCapabilityToken as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };
+export { verifyRevocationEntry as _, RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyCapabilityToken as g, sig1ToBeSigned as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };

package/dist/{tokens-C9Kwy0Gk.d.cts → tokens-Cl8sQo7o.d.cts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, It as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-gbXtNeOc.cjs";
-import { t as IdentityPort } from "./identity-B4XBWkqg.cjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.cjs";
+import { t as IdentityPort } from "./identity-CUkDHCRK.cjs";
 import { t as Clock } from "./clock-DiSx-WKM.cjs";
 import { z } from "zod";
 import { JsonValue, PredicateNode, Resolution } from "trilean";
@@ -53,6 +53,8 @@ interface VerifyCapabilityTokenOptions {
   /** Registers domain-specific delegate systems a presented token's own `conditions` entries may name, beyond the five mandatory narrowing ops (which are never reachable from `conditions` -- see evaluateConditions's own doc comment). None are registered by wire-mesh-core itself; a domain (a message TTL, #84's future revoke-authorization check) supplies its own here. A `conditions` entry naming a system absent from this map is indeterminate, and therefore fails the whole token -- fail-closed, not a silent no-op. */
   extraPredicateResolvers?: Readonly<Record<string, TokenDelegateHandler<ConditionsContext>>>;
 }
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
+declare function sig1ToBeSigned(protectedHeader: Uint8Array, payload: Uint8Array): Uint8Array;
 /**
  * Verifies one capability token per tokens.cddl's own documented rules: the token is a well-formed COSE_Sign1 whose signature actually verifies against its own embedded issuer-key, that issuer-key is self-certifying (sha256(issuer-key.public-key) equals the claimed issuer device-id -- no shared secret needed to check this), the token is currently valid (not expired, not before not-before, not revoked by its own issuer), and -- recursively -- any parent delegation narrows rather than widens across all three axes of authority: the parent's bearer must be this token's issuer (the delegation chain is unbroken), this token's expiry must not exceed its parent's, and this token's scope must narrow its parent's (same kind; equal-or-descendant path when the parent carries one) with an identical capability verb (the capability-verb grammar has no sub-verb relation, so a different verb is a different authority, not a narrower one). Undecodable payload bytes return "malformed" and undecodable parent bytes return "parent_invalid" -- hostile input produces a verdict, never a throw.
  */
@@ -121,4 +123,4 @@ interface MintRevocationEntryOptions {
 /** Mints one revocation-entry (management.cddl): a COSE_Sign1 over revocation-claims, signed the same way mintCapabilityToken signs a token. No narrowing chain to check -- a revocation entry has no parent and cannot fail to be issuable the way a delegated token can, so this returns the entry directly rather than a verdict. */
 declare function mintRevocationEntry(options: MintRevocationEntryOptions): Promise<RevocationEntry>;
 //#endregion
-export { RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyRevocationEntry as g, verifyCapabilityToken as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };
+export { verifyRevocationEntry as _, RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyCapabilityToken as g, sig1ToBeSigned as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };

package/dist/{tokens-DxGVURpB.cjs → tokens-Dh6mG6p_.cjs}

@@ -134,7 +134,7 @@ async function evaluateConditions(nodes, claims, clock, extraHandlers = {}) {
 }
 //#endregion
 //#region src/domain/tokens.ts
-/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. */
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
 function sig1ToBeSigned(protectedHeader, payload) {
 	return (0, cbor2.encode)([
 		"Signature1",
@@ -474,6 +474,12 @@ Object.defineProperty(exports, "mintRevocationEntry", {
 		return mintRevocationEntry;
 	}
 });
+Object.defineProperty(exports, "sig1ToBeSigned", {
+	enumerable: true,
+	get: function() {
+		return sig1ToBeSigned;
+	}
+});
 Object.defineProperty(exports, "verifyCapabilityToken", {
 	enumerable: true,
 	get: function() {

package/dist/{transport-DAsFqDDS.d.cts → transport-C7KVkhgb.d.mts}

@@ -1,4 +1,4 @@
-import { D as DeviceId, N as Frame } from "./protocol-gbXtNeOc.cjs";
+import { D as DeviceId, N as Frame } from "./protocol-CNFRVx9w.mjs";
 //#region src/ports/transport.d.ts
 /**
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.

package/dist/{transport-Dy4h2eNY.d.mts → transport-De0zHlaA.d.cts}

@@ -1,4 +1,4 @@
-import { D as DeviceId, N as Frame } from "./protocol-gbXtNeOc.mjs";
+import { D as DeviceId, N as Frame } from "./protocol-CNFRVx9w.cjs";
 //#region src/ports/transport.d.ts
 /**
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.