wire-mesh-core 1.46.0 → 1.48.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/dist/adapters/frame-codec.d.cts +1 -1
  2. package/dist/adapters/frame-codec.d.mts +1 -1
  3. package/dist/adapters/node-fs-storage.cjs +3 -24
  4. package/dist/adapters/node-identity.d.cts +2 -2
  5. package/dist/adapters/node-identity.d.mts +2 -2
  6. package/dist/adapters/tcp-transport.d.cts +1 -1
  7. package/dist/adapters/tcp-transport.d.mts +1 -1
  8. package/dist/adapters/threshold-identity.cjs +42 -0
  9. package/dist/adapters/threshold-identity.d.cts +33 -0
  10. package/dist/adapters/threshold-identity.d.mts +33 -0
  11. package/dist/adapters/threshold-identity.mjs +41 -0
  12. package/dist/adapters/threshold-wasm.cjs +197 -0
  13. package/dist/adapters/threshold-wasm.d.cts +89 -0
  14. package/dist/adapters/threshold-wasm.d.mts +89 -0
  15. package/dist/adapters/threshold-wasm.mjs +174 -0
  16. package/dist/adapters/tls-transport.d.cts +1 -1
  17. package/dist/adapters/tls-transport.d.mts +1 -1
  18. package/dist/domain/bulk.d.cts +2 -2
  19. package/dist/domain/bulk.d.mts +2 -2
  20. package/dist/domain/capability-grant.cjs +1 -1
  21. package/dist/domain/capability-grant.d.cts +3 -3
  22. package/dist/domain/capability-grant.d.mts +3 -3
  23. package/dist/domain/capability-grant.mjs +1 -1
  24. package/dist/domain/capability-request.cjs +1 -1
  25. package/dist/domain/capability-request.d.cts +2 -2
  26. package/dist/domain/capability-request.d.mts +2 -2
  27. package/dist/domain/capability-request.mjs +1 -1
  28. package/dist/domain/data-sync.d.cts +2 -2
  29. package/dist/domain/data-sync.d.mts +2 -2
  30. package/dist/domain/device-id.d.cts +1 -1
  31. package/dist/domain/device-id.d.mts +1 -1
  32. package/dist/domain/grant-candidates.d.cts +1 -1
  33. package/dist/domain/grant-candidates.d.mts +1 -1
  34. package/dist/domain/handshake.d.cts +1 -1
  35. package/dist/domain/handshake.d.mts +1 -1
  36. package/dist/domain/mesh-session.d.cts +3 -3
  37. package/dist/domain/mesh-session.d.mts +3 -3
  38. package/dist/domain/notice-board.d.cts +3 -3
  39. package/dist/domain/notice-board.d.mts +3 -3
  40. package/dist/domain/relay-hub.d.cts +2 -2
  41. package/dist/domain/relay-hub.d.mts +2 -2
  42. package/dist/domain/relay-use-gate.d.cts +2 -2
  43. package/dist/domain/relay-use-gate.d.mts +2 -2
  44. package/dist/domain/revocation-view.cjs +1 -1
  45. package/dist/domain/revocation-view.d.cts +2 -2
  46. package/dist/domain/revocation-view.d.mts +2 -2
  47. package/dist/domain/revocation-view.mjs +1 -1
  48. package/dist/domain/room-rekey.d.cts +3 -3
  49. package/dist/domain/room-rekey.d.mts +3 -3
  50. package/dist/domain/room-token-verification.cjs +1 -1
  51. package/dist/domain/room-token-verification.d.cts +1 -1
  52. package/dist/domain/room-token-verification.d.mts +1 -1
  53. package/dist/domain/room-token-verification.mjs +1 -1
  54. package/dist/domain/room.d.cts +4 -4
  55. package/dist/domain/room.d.mts +4 -4
  56. package/dist/domain/shard-manifest.d.cts +1 -1
  57. package/dist/domain/shard-manifest.d.mts +1 -1
  58. package/dist/domain/threshold-subject.cjs +35 -0
  59. package/dist/domain/threshold-subject.d.cts +33 -0
  60. package/dist/domain/threshold-subject.d.mts +33 -0
  61. package/dist/domain/threshold-subject.mjs +32 -0
  62. package/dist/domain/tokens.cjs +2 -1
  63. package/dist/domain/tokens.d.cts +2 -2
  64. package/dist/domain/tokens.d.mts +2 -2
  65. package/dist/domain/tokens.mjs +2 -2
  66. package/dist/domain/webrtc-signaling.cjs +1 -1
  67. package/dist/domain/webrtc-signaling.d.cts +2 -2
  68. package/dist/domain/webrtc-signaling.d.mts +2 -2
  69. package/dist/domain/webrtc-signaling.mjs +1 -1
  70. package/dist/generated/protocol.cjs +83 -0
  71. package/dist/generated/protocol.d.cts +2 -2
  72. package/dist/generated/protocol.d.mts +2 -2
  73. package/dist/generated/protocol.mjs +73 -1
  74. package/dist/{identity-DHf0J6IA.d.cts → identity-9TmmK7vP.d.mts} +1 -1
  75. package/dist/{identity-Oelt3uEn.d.mts → identity-CUkDHCRK.d.cts} +1 -1
  76. package/dist/ports/identity.d.cts +1 -1
  77. package/dist/ports/identity.d.mts +1 -1
  78. package/dist/ports/transport.d.cts +1 -1
  79. package/dist/ports/transport.d.mts +1 -1
  80. package/dist/{protocol-D8CU6s2_.d.cts → protocol-CNFRVx9w.d.cts} +277 -1
  81. package/dist/{protocol-D8CU6s2_.d.mts → protocol-CNFRVx9w.d.mts} +277 -1
  82. package/dist/rolldown-runtime-VH7oDXx4.cjs +28 -0
  83. package/dist/{room-token-verification-BQhqt1Rm.d.mts → room-token-verification-BdtM1rQ4.d.mts} +2 -2
  84. package/dist/{room-token-verification-DQGdYNg4.d.cts → room-token-verification-DpOfZOdl.d.cts} +2 -2
  85. package/dist/{tokens-CdQwzCyJ.mjs → tokens-B0dpTLhS.mjs} +2 -2
  86. package/dist/{tokens-Bh82oidM.d.mts → tokens-CVyPoJ6l.d.mts} +5 -3
  87. package/dist/{tokens-B1-MAIST.d.cts → tokens-Cl8sQo7o.d.cts} +5 -3
  88. package/dist/{tokens-DxGVURpB.cjs → tokens-Dh6mG6p_.cjs} +7 -1
  89. package/dist/{transport-BNeF6kDe.d.mts → transport-C7KVkhgb.d.mts} +1 -1
  90. package/dist/{transport-BbSGNRFZ.d.cts → transport-De0zHlaA.d.cts} +1 -1
  91. package/package.json +15 -2
@@ -1,8 +1,8 @@
1
- import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-D8CU6s2_.cjs";
2
- import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
1
+ import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-CNFRVx9w.cjs";
2
+ import { t as IdentityPort } from "../identity-CUkDHCRK.cjs";
3
3
  import { t as Clock } from "../clock-DiSx-WKM.cjs";
4
4
  import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.cjs";
5
- import { a as RevocationCheck } from "../tokens-B1-MAIST.cjs";
5
+ import { a as RevocationCheck } from "../tokens-Cl8sQo7o.cjs";
6
6
  //#region src/domain/room-rekey.d.ts
7
7
  /**
8
8
  * Builds a room.rekey command per room.cddl. The outer verb is room:member, the same "one resource, several inner verbs" pattern room.send/room.leave/room.members already establish -- not a new capability of its own.
@@ -1,8 +1,8 @@
1
- import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-D8CU6s2_.mjs";
2
- import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
1
+ import { D as DeviceId, V as ManageCommand, p as CapabilityToken } from "../protocol-CNFRVx9w.mjs";
2
+ import { t as IdentityPort } from "../identity-9TmmK7vP.mjs";
3
3
  import { t as Clock } from "../clock-DiSx-WKM.mjs";
4
4
  import { IncomingManageRequest, ManageOutcome, MeshSession } from "./mesh-session.mjs";
5
- import { a as RevocationCheck } from "../tokens-Bh82oidM.mjs";
5
+ import { a as RevocationCheck } from "../tokens-CVyPoJ6l.mjs";
6
6
  //#region src/domain/room-rekey.d.ts
7
7
  /**
8
8
  * Builds a room.rekey command per room.cddl. The outer verb is room:member, the same "one resource, several inner verbs" pattern room.send/room.leave/room.members already establish -- not a new capability of its own.
@@ -1,6 +1,6 @@
1
1
  Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
2
  const require_domain_device_id = require("./device-id.cjs");
3
- const require_tokens = require("../tokens-DxGVURpB.cjs");
3
+ const require_tokens = require("../tokens-Dh6mG6p_.cjs");
4
4
  const require_domain_room_path = require("./room-path.cjs");
5
5
  //#region src/domain/room-token-verification.ts
6
6
  /**
@@ -1,2 +1,2 @@
1
- import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-DQGdYNg4.cjs";
1
+ import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-DpOfZOdl.cjs";
2
2
  export { ROOM_MEMBER_CAPABILITY, RoomTokenVerdict, RoomTokenVerdictReason, VerifyRoomTokenOptions, verifyRoomToken };
@@ -1,2 +1,2 @@
1
- import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-BQhqt1Rm.mjs";
1
+ import { a as verifyRoomToken, i as VerifyRoomTokenOptions, n as RoomTokenVerdict, r as RoomTokenVerdictReason, t as ROOM_MEMBER_CAPABILITY } from "../room-token-verification-BdtM1rQ4.mjs";
2
2
  export { ROOM_MEMBER_CAPABILITY, RoomTokenVerdict, RoomTokenVerdictReason, VerifyRoomTokenOptions, verifyRoomToken };
@@ -1,5 +1,5 @@
1
1
  import { deviceIdToHex } from "./device-id.mjs";
2
- import { i as verifyCapabilityToken } from "../tokens-CdQwzCyJ.mjs";
2
+ import { a as verifyCapabilityToken } from "../tokens-B0dpTLhS.mjs";
3
3
  import { parseRoomPath } from "./room-path.mjs";
4
4
  //#region src/domain/room-token-verification.ts
5
5
  /**
@@ -1,8 +1,8 @@
1
- import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-D8CU6s2_.cjs";
2
- import { t as IdentityPort } from "../identity-DHf0J6IA.cjs";
1
+ import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-CNFRVx9w.cjs";
2
+ import { t as IdentityPort } from "../identity-CUkDHCRK.cjs";
3
3
  import { t as Clock } from "../clock-DiSx-WKM.cjs";
4
- import { a as RevocationCheck } from "../tokens-B1-MAIST.cjs";
5
- import { r as RoomTokenVerdictReason } from "../room-token-verification-DQGdYNg4.cjs";
4
+ import { a as RevocationCheck } from "../tokens-Cl8sQo7o.cjs";
5
+ import { r as RoomTokenVerdictReason } from "../room-token-verification-DpOfZOdl.cjs";
6
6
  //#region src/domain/room.d.ts
7
7
  export type RoomNoticeVerdictReason = "malformed" | "wrong_room" | "bad_signature" | "wrong_poster" | "content_expired" | "key_epoch_mismatch" | RoomTokenVerdictReason;
8
8
  export type RoomNoticeVerdict = {
@@ -1,8 +1,8 @@
1
- import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-D8CU6s2_.mjs";
2
- import { t as IdentityPort } from "../identity-Oelt3uEn.mjs";
1
+ import { Dt as RoomPath, Et as RoomNoticeClaims, Tt as RoomNotice, p as CapabilityToken, q as MessageRef } from "../protocol-CNFRVx9w.mjs";
2
+ import { t as IdentityPort } from "../identity-9TmmK7vP.mjs";
3
3
  import { t as Clock } from "../clock-DiSx-WKM.mjs";
4
- import { a as RevocationCheck } from "../tokens-Bh82oidM.mjs";
5
- import { r as RoomTokenVerdictReason } from "../room-token-verification-BQhqt1Rm.mjs";
4
+ import { a as RevocationCheck } from "../tokens-CVyPoJ6l.mjs";
5
+ import { r as RoomTokenVerdictReason } from "../room-token-verification-BdtM1rQ4.mjs";
6
6
  //#region src/domain/room.d.ts
7
7
  export type RoomNoticeVerdictReason = "malformed" | "wrong_room" | "bad_signature" | "wrong_poster" | "content_expired" | "key_epoch_mismatch" | RoomTokenVerdictReason;
8
8
  export type RoomNoticeVerdict = {
@@ -1,4 +1,4 @@
1
- import { D as DeviceId } from "../protocol-D8CU6s2_.cjs";
1
+ import { D as DeviceId } from "../protocol-CNFRVx9w.cjs";
2
2
  import { PresentedShard, ShardConfig } from "./erasure-coding.cjs";
3
3
  //#region src/domain/shard-manifest.d.ts
4
4
  /** The content-type a core/data entry carrying a shard manifest declares. */
@@ -1,4 +1,4 @@
1
- import { D as DeviceId } from "../protocol-D8CU6s2_.mjs";
1
+ import { D as DeviceId } from "../protocol-CNFRVx9w.mjs";
2
2
  import { PresentedShard, ShardConfig } from "./erasure-coding.mjs";
3
3
  //#region src/domain/shard-manifest.d.ts
4
4
  /** The content-type a core/data entry carrying a shard manifest declares. */
@@ -0,0 +1,35 @@
1
+ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
+ const require_tokens = require("../tokens-Dh6mG6p_.cjs");
3
+ //#region src/domain/threshold-subject.ts
4
+ /**
5
+ * `threshold-subject` -- what a signing session actually asks a group to sign, and the single most important design decision in the whole protocol: it carries the FULL decoded content, never a bare hash. A participant that commits to an opaque digest is a blind signer, and the entire security value of T-of-N is that each participant independently reviews and authorises the content -- returning a round-1 commitment IS that act of authorisation. This module builds exactly the bytes a participant signs its round-1 commitment over: the RFC 9052 §4.4 `Sig_structure`, reusing `tokens.ts`'s own `sig1ToBeSigned` rather than a second hand-rolled construction, and NEVER accepting a pre-assembled to-be-signed blob from a coordinator. Mirrors `wire_mesh_threshold::subject` on the Rust side exactly.
6
+ */
7
+ /**
8
+ * The kinds this participant recognises out of the box -- `capability-token`, `revocation-entry`, `handle-record`, and `room-notice` are the self-certifying payload shapes this codebase already defines. A caller extending recognised kinds (e.g. an application-defined one) supplies its own recogniser rather than this module growing a closed list.
9
+ */
10
+ const KNOWN_KINDS = [
11
+ "capability-token",
12
+ "revocation-entry",
13
+ "handle-record",
14
+ "room-notice"
15
+ ];
16
+ /**
17
+ * The verifier obligation `spec/threshold.cddl` states directly: an unrecognised `kind` MUST be refused, never signed blindly. This is the fail-closed default every content policy is checked against BEFORE any kind-specific review runs; a caller's own policy closure only ever gets a chance to run for a kind it (or `KNOWN_KINDS`) actually recognises.
18
+ */
19
+ function refuseUnrecognisedKind(subject, known = KNOWN_KINDS) {
20
+ if (known.includes(subject.kind)) return;
21
+ return {
22
+ authorise: false,
23
+ reason: `unrecognised threshold-subject.kind ${JSON.stringify(subject.kind)} -- refusing to sign`
24
+ };
25
+ }
26
+ /**
27
+ * Reconstructs the exact bytes this participant signs its round-1 commitment (and, transitively, its round-2 share) over -- the Sig_structure built from THIS participant's own decoding of `protected`/`payload`, never a coordinator-supplied to-be-signed blob.
28
+ */
29
+ function toBeSigned(subject) {
30
+ return Uint8Array.from(require_tokens.sig1ToBeSigned(subject.protected, subject.payload));
31
+ }
32
+ //#endregion
33
+ exports.KNOWN_KINDS = KNOWN_KINDS;
34
+ exports.refuseUnrecognisedKind = refuseUnrecognisedKind;
35
+ exports.toBeSigned = toBeSigned;
@@ -0,0 +1,33 @@
1
+ //#region src/domain/threshold-subject.d.ts
2
+ /**
3
+ * The `kind` discriminator on `threshold-subject` -- an open `tstr` per `spec/CONVENTIONS.md`'s own open-tstr-over-closed-enum convention, since future content a group signs is not limited to what wire-mesh itself already defines self-certifying payloads for.
4
+ */
5
+ export interface ThresholdSubject {
6
+ kind: string;
7
+ /** `bstr .cbor cose-token-headers` -- the protected header the aggregate signature will carry. */
8
+ protected: Uint8Array;
9
+ /** `bstr .cbor` of the claims structure `kind` names. */
10
+ payload: Uint8Array;
11
+ }
12
+ /**
13
+ * The kinds this participant recognises out of the box -- `capability-token`, `revocation-entry`, `handle-record`, and `room-notice` are the self-certifying payload shapes this codebase already defines. A caller extending recognised kinds (e.g. an application-defined one) supplies its own recogniser rather than this module growing a closed list.
14
+ */
15
+ export declare const KNOWN_KINDS: readonly string[];
16
+ /**
17
+ * A participant's decision on whether to authorise a `threshold-subject`. Deliberately not a bare `boolean`: a refusal MUST carry a reason so the coordinator (and, ideally, a human reviewing a denied session) can understand why, matching this spec's own fail-closed-with-a-reason idiom elsewhere (`manage-error.message`, `threshold-abort.reason`).
18
+ */
19
+ export type SubjectDecision = {
20
+ authorise: true;
21
+ } | {
22
+ authorise: false;
23
+ reason: string;
24
+ };
25
+ /**
26
+ * The verifier obligation `spec/threshold.cddl` states directly: an unrecognised `kind` MUST be refused, never signed blindly. This is the fail-closed default every content policy is checked against BEFORE any kind-specific review runs; a caller's own policy closure only ever gets a chance to run for a kind it (or `KNOWN_KINDS`) actually recognises.
27
+ */
28
+ export declare function refuseUnrecognisedKind(subject: ThresholdSubject, known?: readonly string[]): SubjectDecision | undefined;
29
+ /**
30
+ * Reconstructs the exact bytes this participant signs its round-1 commitment (and, transitively, its round-2 share) over -- the Sig_structure built from THIS participant's own decoding of `protected`/`payload`, never a coordinator-supplied to-be-signed blob.
31
+ */
32
+ export declare function toBeSigned(subject: ThresholdSubject): Uint8Array<ArrayBuffer>;
33
+ //#endregion
@@ -0,0 +1,33 @@
1
+ //#region src/domain/threshold-subject.d.ts
2
+ /**
3
+ * The `kind` discriminator on `threshold-subject` -- an open `tstr` per `spec/CONVENTIONS.md`'s own open-tstr-over-closed-enum convention, since future content a group signs is not limited to what wire-mesh itself already defines self-certifying payloads for.
4
+ */
5
+ export interface ThresholdSubject {
6
+ kind: string;
7
+ /** `bstr .cbor cose-token-headers` -- the protected header the aggregate signature will carry. */
8
+ protected: Uint8Array;
9
+ /** `bstr .cbor` of the claims structure `kind` names. */
10
+ payload: Uint8Array;
11
+ }
12
+ /**
13
+ * The kinds this participant recognises out of the box -- `capability-token`, `revocation-entry`, `handle-record`, and `room-notice` are the self-certifying payload shapes this codebase already defines. A caller extending recognised kinds (e.g. an application-defined one) supplies its own recogniser rather than this module growing a closed list.
14
+ */
15
+ export declare const KNOWN_KINDS: readonly string[];
16
+ /**
17
+ * A participant's decision on whether to authorise a `threshold-subject`. Deliberately not a bare `boolean`: a refusal MUST carry a reason so the coordinator (and, ideally, a human reviewing a denied session) can understand why, matching this spec's own fail-closed-with-a-reason idiom elsewhere (`manage-error.message`, `threshold-abort.reason`).
18
+ */
19
+ export type SubjectDecision = {
20
+ authorise: true;
21
+ } | {
22
+ authorise: false;
23
+ reason: string;
24
+ };
25
+ /**
26
+ * The verifier obligation `spec/threshold.cddl` states directly: an unrecognised `kind` MUST be refused, never signed blindly. This is the fail-closed default every content policy is checked against BEFORE any kind-specific review runs; a caller's own policy closure only ever gets a chance to run for a kind it (or `KNOWN_KINDS`) actually recognises.
27
+ */
28
+ export declare function refuseUnrecognisedKind(subject: ThresholdSubject, known?: readonly string[]): SubjectDecision | undefined;
29
+ /**
30
+ * Reconstructs the exact bytes this participant signs its round-1 commitment (and, transitively, its round-2 share) over -- the Sig_structure built from THIS participant's own decoding of `protected`/`payload`, never a coordinator-supplied to-be-signed blob.
31
+ */
32
+ export declare function toBeSigned(subject: ThresholdSubject): Uint8Array<ArrayBuffer>;
33
+ //#endregion
@@ -0,0 +1,32 @@
1
+ import { i as sig1ToBeSigned } from "../tokens-B0dpTLhS.mjs";
2
+ //#region src/domain/threshold-subject.ts
3
+ /**
4
+ * `threshold-subject` -- what a signing session actually asks a group to sign, and the single most important design decision in the whole protocol: it carries the FULL decoded content, never a bare hash. A participant that commits to an opaque digest is a blind signer, and the entire security value of T-of-N is that each participant independently reviews and authorises the content -- returning a round-1 commitment IS that act of authorisation. This module builds exactly the bytes a participant signs its round-1 commitment over: the RFC 9052 §4.4 `Sig_structure`, reusing `tokens.ts`'s own `sig1ToBeSigned` rather than a second hand-rolled construction, and NEVER accepting a pre-assembled to-be-signed blob from a coordinator. Mirrors `wire_mesh_threshold::subject` on the Rust side exactly.
5
+ */
6
+ /**
7
+ * The kinds this participant recognises out of the box -- `capability-token`, `revocation-entry`, `handle-record`, and `room-notice` are the self-certifying payload shapes this codebase already defines. A caller extending recognised kinds (e.g. an application-defined one) supplies its own recogniser rather than this module growing a closed list.
8
+ */
9
+ const KNOWN_KINDS = [
10
+ "capability-token",
11
+ "revocation-entry",
12
+ "handle-record",
13
+ "room-notice"
14
+ ];
15
+ /**
16
+ * The verifier obligation `spec/threshold.cddl` states directly: an unrecognised `kind` MUST be refused, never signed blindly. This is the fail-closed default every content policy is checked against BEFORE any kind-specific review runs; a caller's own policy closure only ever gets a chance to run for a kind it (or `KNOWN_KINDS`) actually recognises.
17
+ */
18
+ function refuseUnrecognisedKind(subject, known = KNOWN_KINDS) {
19
+ if (known.includes(subject.kind)) return;
20
+ return {
21
+ authorise: false,
22
+ reason: `unrecognised threshold-subject.kind ${JSON.stringify(subject.kind)} -- refusing to sign`
23
+ };
24
+ }
25
+ /**
26
+ * Reconstructs the exact bytes this participant signs its round-1 commitment (and, transitively, its round-2 share) over -- the Sig_structure built from THIS participant's own decoding of `protected`/`payload`, never a coordinator-supplied to-be-signed blob.
27
+ */
28
+ function toBeSigned(subject) {
29
+ return Uint8Array.from(sig1ToBeSigned(subject.protected, subject.payload));
30
+ }
31
+ //#endregion
32
+ export { KNOWN_KINDS, refuseUnrecognisedKind, toBeSigned };
@@ -1,7 +1,8 @@
1
1
  Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
- const require_tokens = require("../tokens-DxGVURpB.cjs");
2
+ const require_tokens = require("../tokens-Dh6mG6p_.cjs");
3
3
  exports.canGrant = require_tokens.canGrant;
4
4
  exports.mintCapabilityToken = require_tokens.mintCapabilityToken;
5
5
  exports.mintRevocationEntry = require_tokens.mintRevocationEntry;
6
+ exports.sig1ToBeSigned = require_tokens.sig1ToBeSigned;
6
7
  exports.verifyCapabilityToken = require_tokens.verifyCapabilityToken;
7
8
  exports.verifyRevocationEntry = require_tokens.verifyRevocationEntry;
@@ -1,2 +1,2 @@
1
- import { a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyRevocationEntry, h as verifyCapabilityToken, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-B1-MAIST.cjs";
2
- export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, verifyCapabilityToken, verifyRevocationEntry };
1
+ import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-Cl8sQo7o.cjs";
2
+ export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, sig1ToBeSigned, verifyCapabilityToken, verifyRevocationEntry };
@@ -1,2 +1,2 @@
1
- import { a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyRevocationEntry, h as verifyCapabilityToken, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-Bh82oidM.mjs";
2
- export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, verifyCapabilityToken, verifyRevocationEntry };
1
+ import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-CVyPoJ6l.mjs";
2
+ export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, sig1ToBeSigned, verifyCapabilityToken, verifyRevocationEntry };
@@ -1,2 +1,2 @@
1
- import { a as verifyRevocationEntry, i as verifyCapabilityToken, n as mintCapabilityToken, r as mintRevocationEntry, t as canGrant } from "../tokens-CdQwzCyJ.mjs";
2
- export { canGrant, mintCapabilityToken, mintRevocationEntry, verifyCapabilityToken, verifyRevocationEntry };
1
+ import { a as verifyCapabilityToken, i as sig1ToBeSigned, n as mintCapabilityToken, o as verifyRevocationEntry, r as mintRevocationEntry, t as canGrant } from "../tokens-B0dpTLhS.mjs";
2
+ export { canGrant, mintCapabilityToken, mintRevocationEntry, sig1ToBeSigned, verifyCapabilityToken, verifyRevocationEntry };
@@ -1,5 +1,5 @@
1
1
  Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
- const require_tokens = require("../tokens-DxGVURpB.cjs");
2
+ const require_tokens = require("../tokens-Dh6mG6p_.cjs");
3
3
  //#region src/domain/webrtc-signaling.ts
4
4
  /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
5
5
  const WEBRTC_SIGNAL_VERB = "webrtc:signal";
@@ -1,6 +1,6 @@
1
- import { Bt as WebrtcAnswer, H as ManageCommandParams, Ht as WebrtcOffer, Mt as SfuTrackMap, V as ManageCommand, Vt as WebrtcIceCandidate, f as CapabilityScope, jt as SfuTrackEntry, z as IceCandidateInit } from "../protocol-D8CU6s2_.cjs";
1
+ import { $t as WebrtcOffer, H as ManageCommandParams, Mt as SfuTrackEntry, Nt as SfuTrackMap, Qt as WebrtcIceCandidate, V as ManageCommand, Zt as WebrtcAnswer, f as CapabilityScope, z as IceCandidateInit } from "../protocol-CNFRVx9w.cjs";
2
2
  import { IncomingManageRequest } from "./mesh-session.cjs";
3
- import { u as VerifyCapabilityTokenOptions } from "../tokens-B1-MAIST.cjs";
3
+ import { u as VerifyCapabilityTokenOptions } from "../tokens-Cl8sQo7o.cjs";
4
4
  //#region src/domain/webrtc-signaling.d.ts
5
5
  /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
6
6
  export declare const WEBRTC_SIGNAL_VERB = "webrtc:signal";
@@ -1,6 +1,6 @@
1
- import { Bt as WebrtcAnswer, H as ManageCommandParams, Ht as WebrtcOffer, Mt as SfuTrackMap, V as ManageCommand, Vt as WebrtcIceCandidate, f as CapabilityScope, jt as SfuTrackEntry, z as IceCandidateInit } from "../protocol-D8CU6s2_.mjs";
1
+ import { $t as WebrtcOffer, H as ManageCommandParams, Mt as SfuTrackEntry, Nt as SfuTrackMap, Qt as WebrtcIceCandidate, V as ManageCommand, Zt as WebrtcAnswer, f as CapabilityScope, z as IceCandidateInit } from "../protocol-CNFRVx9w.mjs";
2
2
  import { IncomingManageRequest } from "./mesh-session.mjs";
3
- import { u as VerifyCapabilityTokenOptions } from "../tokens-Bh82oidM.mjs";
3
+ import { u as VerifyCapabilityTokenOptions } from "../tokens-CVyPoJ6l.mjs";
4
4
  //#region src/domain/webrtc-signaling.d.ts
5
5
  /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
6
6
  export declare const WEBRTC_SIGNAL_VERB = "webrtc:signal";
@@ -1,4 +1,4 @@
1
- import { i as verifyCapabilityToken } from "../tokens-CdQwzCyJ.mjs";
1
+ import { a as verifyCapabilityToken } from "../tokens-B0dpTLhS.mjs";
2
2
  //#region src/domain/webrtc-signaling.ts
3
3
  /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
4
4
  const WEBRTC_SIGNAL_VERB = "webrtc:signal";
@@ -45,6 +45,16 @@ const manageCommandParamsSchema = zod.z.lazy(() => zod.z.union([
45
45
  ]),
46
46
  zod.z.union([zod.z.lazy(() => roomJoinSchema), zod.z.lazy(() => roomInviteSchema)]),
47
47
  zod.z.lazy(() => roomRekeySchema),
48
+ zod.z.union([
49
+ zod.z.lazy(() => thresholdCommitSchema),
50
+ zod.z.lazy(() => thresholdSignSchema),
51
+ zod.z.lazy(() => thresholdAbortSchema)
52
+ ]),
53
+ zod.z.union([
54
+ zod.z.lazy(() => thresholdKeygenRound1Schema),
55
+ zod.z.lazy(() => thresholdKeygenRound2Schema),
56
+ zod.z.lazy(() => thresholdKeygenConfirmSchema)
57
+ ]),
48
58
  zod.z.union([
49
59
  zod.z.lazy(() => webrtcOfferSchema),
50
60
  zod.z.lazy(() => webrtcAnswerSchema),
@@ -327,6 +337,68 @@ const streamEndFrameSchema = zod.z.lazy(() => zod.z.object({
327
337
  "exit-code": zod.z.number().int().optional(),
328
338
  "exit-signal": zod.z.number().int().optional()
329
339
  }));
340
+ const sessionIdSchema = zod.z.lazy(() => zod.z.number().int().nonnegative());
341
+ const thresholdSubjectSchema = zod.z.lazy(() => zod.z.object({
342
+ "kind": zod.z.union([
343
+ zod.z.literal("capability-token"),
344
+ zod.z.literal("revocation-entry"),
345
+ zod.z.literal("handle-record"),
346
+ zod.z.literal("room-notice"),
347
+ zod.z.string()
348
+ ]),
349
+ "protected": zod.z.instanceof(Uint8Array),
350
+ "payload": zod.z.instanceof(Uint8Array)
351
+ }));
352
+ const thresholdCommitmentSchema = zod.z.lazy(() => zod.z.object({
353
+ "participant": zod.z.lazy(() => deviceIdSchema),
354
+ "hiding": zod.z.instanceof(Uint8Array),
355
+ "binding": zod.z.instanceof(Uint8Array)
356
+ }));
357
+ const thresholdCommitSchema = zod.z.lazy(() => zod.z.object({
358
+ "verb": zod.z.literal("threshold.commit"),
359
+ "session-id": zod.z.lazy(() => sessionIdSchema),
360
+ "group": zod.z.lazy(() => deviceIdSchema),
361
+ "subject": zod.z.lazy(() => thresholdSubjectSchema),
362
+ "deadline": zod.z.number().int().nonnegative()
363
+ }));
364
+ const thresholdSignSchema = zod.z.lazy(() => zod.z.object({
365
+ "verb": zod.z.literal("threshold.sign"),
366
+ "session-id": zod.z.lazy(() => sessionIdSchema),
367
+ "commitments": zod.z.array(zod.z.lazy(() => thresholdCommitmentSchema))
368
+ }));
369
+ const thresholdShareClaimsSchema = zod.z.lazy(() => zod.z.object({
370
+ "session-id": zod.z.lazy(() => sessionIdSchema),
371
+ "group": zod.z.lazy(() => deviceIdSchema),
372
+ "share": zod.z.instanceof(Uint8Array),
373
+ "issuer": zod.z.lazy(() => deviceIdSchema),
374
+ "issuer-key": zod.z.lazy(() => identityKeySchema)
375
+ }));
376
+ const thresholdShareEnvelopeSchema = zod.z.lazy(() => zod.z.lazy(() => coseSign1Schema));
377
+ const thresholdAbortSchema = zod.z.lazy(() => zod.z.object({
378
+ "verb": zod.z.literal("threshold.abort"),
379
+ "session-id": zod.z.lazy(() => sessionIdSchema),
380
+ "reason": zod.z.string().optional()
381
+ }));
382
+ const thresholdKeygenRound1Schema = zod.z.lazy(() => zod.z.object({
383
+ "verb": zod.z.literal("threshold.keygen-round1"),
384
+ "session-id": zod.z.lazy(() => sessionIdSchema),
385
+ "threshold": zod.z.number().int().nonnegative(),
386
+ "participants": zod.z.array(zod.z.lazy(() => deviceIdSchema)),
387
+ "commitment": zod.z.array(zod.z.instanceof(Uint8Array)),
388
+ "proof-of-knowledge": zod.z.instanceof(Uint8Array).optional(),
389
+ "existing-group-key": zod.z.instanceof(Uint8Array).optional()
390
+ }));
391
+ const thresholdKeygenRound2Schema = zod.z.lazy(() => zod.z.object({
392
+ "verb": zod.z.literal("threshold.keygen-round2"),
393
+ "session-id": zod.z.lazy(() => sessionIdSchema),
394
+ "share": zod.z.instanceof(Uint8Array)
395
+ }));
396
+ const thresholdKeygenConfirmSchema = zod.z.lazy(() => zod.z.object({
397
+ "verb": zod.z.literal("threshold.keygen-confirm"),
398
+ "session-id": zod.z.lazy(() => sessionIdSchema),
399
+ "transcript-digest": zod.z.instanceof(Uint8Array),
400
+ "group-key": zod.z.instanceof(Uint8Array)
401
+ }));
330
402
  const capabilityVerbSchema = zod.z.lazy(() => zod.z.union([
331
403
  zod.z.lazy(() => coreCapabilitySchema),
332
404
  zod.z.lazy(() => namespacedCapabilitySchema),
@@ -544,6 +616,7 @@ exports.roomPathSchema = roomPathSchema;
544
616
  exports.roomReadSchema = roomReadSchema;
545
617
  exports.roomRekeySchema = roomRekeySchema;
546
618
  exports.roomSendSchema = roomSendSchema;
619
+ exports.sessionIdSchema = sessionIdSchema;
547
620
  exports.sfuTrackEntrySchema = sfuTrackEntrySchema;
548
621
  exports.sfuTrackMapSchema = sfuTrackMapSchema;
549
622
  exports.streamAckFrameSchema = streamAckFrameSchema;
@@ -551,6 +624,16 @@ exports.streamDataFrameSchema = streamDataFrameSchema;
551
624
  exports.streamEndFrameSchema = streamEndFrameSchema;
552
625
  exports.streamSessionSchema = streamSessionSchema;
553
626
  exports.syncPunchFrameSchema = syncPunchFrameSchema;
627
+ exports.thresholdAbortSchema = thresholdAbortSchema;
628
+ exports.thresholdCommitSchema = thresholdCommitSchema;
629
+ exports.thresholdCommitmentSchema = thresholdCommitmentSchema;
630
+ exports.thresholdKeygenConfirmSchema = thresholdKeygenConfirmSchema;
631
+ exports.thresholdKeygenRound1Schema = thresholdKeygenRound1Schema;
632
+ exports.thresholdKeygenRound2Schema = thresholdKeygenRound2Schema;
633
+ exports.thresholdShareClaimsSchema = thresholdShareClaimsSchema;
634
+ exports.thresholdShareEnvelopeSchema = thresholdShareEnvelopeSchema;
635
+ exports.thresholdSignSchema = thresholdSignSchema;
636
+ exports.thresholdSubjectSchema = thresholdSubjectSchema;
554
637
  exports.tokenClaimsSchema = tokenClaimsSchema;
555
638
  exports.transferIdSchema = transferIdSchema;
556
639
  exports.webrtcAnswerSchema = webrtcAnswerSchema;
@@ -1,2 +1,2 @@
1
- import { $ as PeerIdentity, $n as ptyWriteSchema, $t as capabilityGrantSchema, A as DomainId, An as manageCommandParamsSchema, Ar as webrtcIceCandidateSchema, At as RoomSend, B as IdentityKey, Bn as ownerNamedRoomPathSchema, Bt as WebrtcAnswer, C as CoseTokenHeaders, Cn as frameVariantSchema, Cr as streamDataFrameSchema, Ct as RoomMembers, D as DeviceId, Dn as handshakeFrameSchema, Dr as tokenClaimsSchema, Dt as RoomPath, E as DataRequestFrame, En as handleRecordSchema, Er as syncPunchFrameSchema, Et as RoomNoticeClaims, F as GossipFrame, Fn as manageResponseFrameSchema, Ft as StreamEndFrame, G as ManageRequestFrame, Gn as privateUseDomainIdSchema, Gt as bulkCancelSchema, H as ManageCommandParams, Hn as peerIdentitySchema, Ht as WebrtcOffer, I as HandleClaims, In as messageRefSchema, It as StreamSession, J as NamespacedCapability, Jn as procSpawnSchema, Jt as bulkOpenSchema, K as ManageResponseFrame, Kn as procKillSchema, Kt as bulkDataFrameSchema, L as HandleRecord, Ln as namespacedCapabilitySchema, Lt as SyncPunchFrame, M as ExecSessionInfo, Mn as manageErrorSchema, Mr as wireCandidateSchema, Mt as SfuTrackMap, N as Frame, Nn as manageOkSchema, Nt as StreamAckFrame, O as DeviceIdHex, On as iceCandidateInitSchema, Or as transferIdSchema, Ot as RoomRead, P as FrameVariant, Pn as manageRequestFrameSchema, Pt as StreamDataFrame, Q as PeerAdvert, Qn as ptySpawnSchema, Qt as capabilityGrantOkSchema, R as HandshakeFrame, Rn as namespacedDomainIdSchema, Rt as TokenClaims, S as CoseSign1, Sn as frameSchema, Sr as streamAckFrameSchema, St as RoomMember, T as DataHaveFrame, Tn as handleClaimsSchema, Tr as streamSessionSchema, Tt as RoomNotice, U as ManageError, Un as pingFrameSchema, Ut as WireCandidate, V as ManageCommand, Vn as peerAdvertSchema, Vt as WebrtcIceCandidate, W as ManageOk, Wn as privateUseCapabilitySchema, Wt as bulkAckFrameSchema, X as ObservedAddressFrame, Xn as ptyKillSchema, Xt as candidateKindSchema, Y as NamespacedDomainId, Yn as protocolVersionSchema, Yt as bulkResumeSchema, Z as OwnerNamedRoomPath, Zn as ptyResizeSchema, Zt as candidatesFrameSchema, _ as CoreCapability, _n as deviceIdSchema, _r as roomReadSchema, _t as RevocationEntry, a as BulkOpen, an as coordinatorFrameSchema, ar as revocationClaimsSchema, at as ProcSpawn, b as CoseHeaderKid, bn as execListSchema, br as sfuTrackEntrySchema, bt as RoomJoinOk, c as CandidatesFrame, cn as coseHeaderAlgSchema, cr as roomJoinOkSchema, ct as PtyResize, d as CapabilityRequest, dn as coseSign1Schema, dr as roomMemberSchema, dt as RelayConnectFrame, en as capabilityRequestSchema, er as relayConnectFrameSchema, et as PingFrame, f as CapabilityScope, fn as coseTokenHeadersSchema, fr as roomMembersOkSchema, ft as RelayDataFrame, g as CoordinatorFrame, gn as deviceIdHexSchema, gr as roomPathSchema, gt as RevocationClaims, h as CloseFrame, hn as dataRequestFrameSchema, hr as roomNoticeSchema, ht as RevocationAnnounceFrame, i as BulkEndFrame, in as closeFrameSchema, ir as revocationAnnounceFrameSchema, it as ProcSignal, j as ExecList, jn as manageCommandSchema, jr as webrtcOfferSchema, jt as SfuTrackEntry, k as DmRoomPath, kn as identityKeySchema, kr as webrtcAnswerSchema, kt as RoomRekey, l as CapabilityGrant, ln as coseHeaderKidSchema, lr as roomJoinSchema, lt as PtySpawn, m as CapabilityVerb, mn as dataHaveFrameSchema, mr as roomNoticeClaimsSchema, mt as RelayOfferFrame, n as BulkCancel, nn as capabilityTokenSchema, nr as relayInboundFrameSchema, nt as PrivateUseDomainId, o as BulkResume, on as coreCapabilitySchema, or as revocationEntrySchema, ot as ProtocolVersion, p as CapabilityToken, pn as dataEntriesFrameSchema, pr as roomMembersSchema, pt as RelayInboundFrame, q as MessageRef, qn as procSignalSchema, qt as bulkEndFrameSchema, r as BulkDataFrame, rn as capabilityVerbSchema, rr as relayOfferFrameSchema, rt as ProcKill, s as CandidateKind, sn as coreDomainNameSchema, sr as roomInviteSchema, st as PtyKill, t as BulkAckFrame, tn as capabilityScopeSchema, tr as relayDataFrameSchema, tt as PrivateUseCapability, u as CapabilityGrantOk, un as coseHeaderLabelSchema, ur as roomLeaveSchema, ut as PtyWrite, v as CoreDomainName, vn as dmRoomPathSchema, vr as roomRekeySchema, vt as RoomInvite, w as DataEntriesFrame, wn as gossipFrameSchema, wr as streamEndFrameSchema, wt as RoomMembersOk, x as CoseHeaderLabel, xn as execSessionInfoSchema, xr as sfuTrackMapSchema, xt as RoomLeave, y as CoseHeaderAlg, yn as domainIdSchema, yr as roomSendSchema, yt as RoomJoin, z as IceCandidateInit, zn as observedAddressFrameSchema, zt as TransferId } from "../protocol-D8CU6s2_.cjs";
2
- export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PeerAdvert, PeerIdentity, PingFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, TokenClaims, TransferId, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, tokenClaimsSchema, transferIdSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
1
+ import { $ as PeerIdentity, $n as peerIdentitySchema, $r as webrtcOfferSchema, $t as WebrtcOffer, A as DomainId, An as domainIdSchema, Ar as roomSendSchema, At as RoomSend, B as IdentityKey, Bn as identityKeySchema, Br as thresholdCommitSchema, Bt as ThresholdCommit, C as CoseTokenHeaders, Cn as coseTokenHeadersSchema, Cr as roomMembersOkSchema, Ct as RoomMembers, D as DeviceId, Dn as deviceIdHexSchema, Dr as roomPathSchema, Dt as RoomPath, E as DataRequestFrame, En as dataRequestFrameSchema, Er as roomNoticeSchema, Et as RoomNoticeClaims, F as GossipFrame, Fn as gossipFrameSchema, Fr as streamDataFrameSchema, Ft as StreamDataFrame, G as ManageRequestFrame, Gn as manageRequestFrameSchema, Gr as thresholdShareClaimsSchema, Gt as ThresholdShareClaims, H as ManageCommandParams, Hn as manageCommandSchema, Hr as thresholdKeygenConfirmSchema, Ht as ThresholdKeygenConfirm, I as HandleClaims, In as handleClaimsSchema, Ir as streamEndFrameSchema, It as StreamEndFrame, J as NamespacedCapability, Jn as namespacedCapabilitySchema, Jr as thresholdSubjectSchema, Jt as ThresholdSubject, K as ManageResponseFrame, Kn as manageResponseFrameSchema, Kr as thresholdShareEnvelopeSchema, Kt as ThresholdShareEnvelope, L as HandleRecord, Ln as handleRecordSchema, Lr as streamSessionSchema, Lt as StreamSession, M as ExecSessionInfo, Mn as execSessionInfoSchema, Mr as sfuTrackEntrySchema, Mt as SfuTrackEntry, N as Frame, Nn as frameSchema, Nr as sfuTrackMapSchema, Nt as SfuTrackMap, O as DeviceIdHex, On as deviceIdSchema, Or as roomReadSchema, Ot as RoomRead, P as FrameVariant, Pn as frameVariantSchema, Pr as streamAckFrameSchema, Pt as StreamAckFrame, Q as PeerAdvert, Qn as peerAdvertSchema, Qr as webrtcIceCandidateSchema, Qt as WebrtcIceCandidate, R as HandshakeFrame, Rn as handshakeFrameSchema, Rr as syncPunchFrameSchema, Rt as SyncPunchFrame, S as CoseSign1, Sn as coseSign1Schema, Sr as roomMemberSchema, St as RoomMember, T as DataHaveFrame, Tn as dataHaveFrameSchema, Tr as roomNoticeClaimsSchema, Tt as RoomNotice, U as ManageError, Un as manageErrorSchema, Ur as thresholdKeygenRound1Schema, Ut as ThresholdKeygenRound1, V as ManageCommand, Vn as manageCommandParamsSchema, Vr as thresholdCommitmentSchema, Vt as ThresholdCommitment, W as ManageOk, Wn as manageOkSchema, Wr as thresholdKeygenRound2Schema, Wt as ThresholdKeygenRound2, X as ObservedAddressFrame, Xn as observedAddressFrameSchema, Xr as transferIdSchema, Xt as TransferId, Y as NamespacedDomainId, Yn as namespacedDomainIdSchema, Yr as tokenClaimsSchema, Yt as TokenClaims, Z as OwnerNamedRoomPath, Zn as ownerNamedRoomPathSchema, Zr as webrtcAnswerSchema, Zt as WebrtcAnswer, _ as CoreCapability, _n as coreCapabilitySchema, _r as revocationEntrySchema, _t as RevocationEntry, a as BulkOpen, an as bulkOpenSchema, ar as procSpawnSchema, at as ProcSpawn, b as CoseHeaderKid, bn as coseHeaderKidSchema, br as roomJoinSchema, bt as RoomJoinOk, c as CandidatesFrame, cn as candidatesFrameSchema, cr as ptyResizeSchema, ct as PtyResize, d as CapabilityRequest, dn as capabilityRequestSchema, dr as relayConnectFrameSchema, dt as RelayConnectFrame, ei as wireCandidateSchema, en as WireCandidate, er as pingFrameSchema, et as PingFrame, f as CapabilityScope, fn as capabilityScopeSchema, fr as relayDataFrameSchema, ft as RelayDataFrame, g as CoordinatorFrame, gn as coordinatorFrameSchema, gr as revocationClaimsSchema, gt as RevocationClaims, h as CloseFrame, hn as closeFrameSchema, hr as revocationAnnounceFrameSchema, ht as RevocationAnnounceFrame, i as BulkEndFrame, in as bulkEndFrameSchema, ir as procSignalSchema, it as ProcSignal, j as ExecList, jn as execListSchema, jr as sessionIdSchema, jt as SessionId, k as DmRoomPath, kn as dmRoomPathSchema, kr as roomRekeySchema, kt as RoomRekey, l as CapabilityGrant, ln as capabilityGrantOkSchema, lr as ptySpawnSchema, lt as PtySpawn, m as CapabilityVerb, mn as capabilityVerbSchema, mr as relayOfferFrameSchema, mt as RelayOfferFrame, n as BulkCancel, nn as bulkCancelSchema, nr as privateUseDomainIdSchema, nt as PrivateUseDomainId, o as BulkResume, on as bulkResumeSchema, or as protocolVersionSchema, ot as ProtocolVersion, p as CapabilityToken, pn as capabilityTokenSchema, pr as relayInboundFrameSchema, pt as RelayInboundFrame, q as MessageRef, qn as messageRefSchema, qr as thresholdSignSchema, qt as ThresholdSign, r as BulkDataFrame, rn as bulkDataFrameSchema, rr as procKillSchema, rt as ProcKill, s as CandidateKind, sn as candidateKindSchema, sr as ptyKillSchema, st as PtyKill, t as BulkAckFrame, tn as bulkAckFrameSchema, tr as privateUseCapabilitySchema, tt as PrivateUseCapability, u as CapabilityGrantOk, un as capabilityGrantSchema, ur as ptyWriteSchema, ut as PtyWrite, v as CoreDomainName, vn as coreDomainNameSchema, vr as roomInviteSchema, vt as RoomInvite, w as DataEntriesFrame, wn as dataEntriesFrameSchema, wr as roomMembersSchema, wt as RoomMembersOk, x as CoseHeaderLabel, xn as coseHeaderLabelSchema, xr as roomLeaveSchema, xt as RoomLeave, y as CoseHeaderAlg, yn as coseHeaderAlgSchema, yr as roomJoinOkSchema, yt as RoomJoin, z as IceCandidateInit, zn as iceCandidateInitSchema, zr as thresholdAbortSchema, zt as ThresholdAbort } from "../protocol-CNFRVx9w.cjs";
2
+ export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PeerAdvert, PeerIdentity, PingFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TransferId, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, transferIdSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
@@ -1,2 +1,2 @@
1
- import { $ as PeerIdentity, $n as ptyWriteSchema, $t as capabilityGrantSchema, A as DomainId, An as manageCommandParamsSchema, Ar as webrtcIceCandidateSchema, At as RoomSend, B as IdentityKey, Bn as ownerNamedRoomPathSchema, Bt as WebrtcAnswer, C as CoseTokenHeaders, Cn as frameVariantSchema, Cr as streamDataFrameSchema, Ct as RoomMembers, D as DeviceId, Dn as handshakeFrameSchema, Dr as tokenClaimsSchema, Dt as RoomPath, E as DataRequestFrame, En as handleRecordSchema, Er as syncPunchFrameSchema, Et as RoomNoticeClaims, F as GossipFrame, Fn as manageResponseFrameSchema, Ft as StreamEndFrame, G as ManageRequestFrame, Gn as privateUseDomainIdSchema, Gt as bulkCancelSchema, H as ManageCommandParams, Hn as peerIdentitySchema, Ht as WebrtcOffer, I as HandleClaims, In as messageRefSchema, It as StreamSession, J as NamespacedCapability, Jn as procSpawnSchema, Jt as bulkOpenSchema, K as ManageResponseFrame, Kn as procKillSchema, Kt as bulkDataFrameSchema, L as HandleRecord, Ln as namespacedCapabilitySchema, Lt as SyncPunchFrame, M as ExecSessionInfo, Mn as manageErrorSchema, Mr as wireCandidateSchema, Mt as SfuTrackMap, N as Frame, Nn as manageOkSchema, Nt as StreamAckFrame, O as DeviceIdHex, On as iceCandidateInitSchema, Or as transferIdSchema, Ot as RoomRead, P as FrameVariant, Pn as manageRequestFrameSchema, Pt as StreamDataFrame, Q as PeerAdvert, Qn as ptySpawnSchema, Qt as capabilityGrantOkSchema, R as HandshakeFrame, Rn as namespacedDomainIdSchema, Rt as TokenClaims, S as CoseSign1, Sn as frameSchema, Sr as streamAckFrameSchema, St as RoomMember, T as DataHaveFrame, Tn as handleClaimsSchema, Tr as streamSessionSchema, Tt as RoomNotice, U as ManageError, Un as pingFrameSchema, Ut as WireCandidate, V as ManageCommand, Vn as peerAdvertSchema, Vt as WebrtcIceCandidate, W as ManageOk, Wn as privateUseCapabilitySchema, Wt as bulkAckFrameSchema, X as ObservedAddressFrame, Xn as ptyKillSchema, Xt as candidateKindSchema, Y as NamespacedDomainId, Yn as protocolVersionSchema, Yt as bulkResumeSchema, Z as OwnerNamedRoomPath, Zn as ptyResizeSchema, Zt as candidatesFrameSchema, _ as CoreCapability, _n as deviceIdSchema, _r as roomReadSchema, _t as RevocationEntry, a as BulkOpen, an as coordinatorFrameSchema, ar as revocationClaimsSchema, at as ProcSpawn, b as CoseHeaderKid, bn as execListSchema, br as sfuTrackEntrySchema, bt as RoomJoinOk, c as CandidatesFrame, cn as coseHeaderAlgSchema, cr as roomJoinOkSchema, ct as PtyResize, d as CapabilityRequest, dn as coseSign1Schema, dr as roomMemberSchema, dt as RelayConnectFrame, en as capabilityRequestSchema, er as relayConnectFrameSchema, et as PingFrame, f as CapabilityScope, fn as coseTokenHeadersSchema, fr as roomMembersOkSchema, ft as RelayDataFrame, g as CoordinatorFrame, gn as deviceIdHexSchema, gr as roomPathSchema, gt as RevocationClaims, h as CloseFrame, hn as dataRequestFrameSchema, hr as roomNoticeSchema, ht as RevocationAnnounceFrame, i as BulkEndFrame, in as closeFrameSchema, ir as revocationAnnounceFrameSchema, it as ProcSignal, j as ExecList, jn as manageCommandSchema, jr as webrtcOfferSchema, jt as SfuTrackEntry, k as DmRoomPath, kn as identityKeySchema, kr as webrtcAnswerSchema, kt as RoomRekey, l as CapabilityGrant, ln as coseHeaderKidSchema, lr as roomJoinSchema, lt as PtySpawn, m as CapabilityVerb, mn as dataHaveFrameSchema, mr as roomNoticeClaimsSchema, mt as RelayOfferFrame, n as BulkCancel, nn as capabilityTokenSchema, nr as relayInboundFrameSchema, nt as PrivateUseDomainId, o as BulkResume, on as coreCapabilitySchema, or as revocationEntrySchema, ot as ProtocolVersion, p as CapabilityToken, pn as dataEntriesFrameSchema, pr as roomMembersSchema, pt as RelayInboundFrame, q as MessageRef, qn as procSignalSchema, qt as bulkEndFrameSchema, r as BulkDataFrame, rn as capabilityVerbSchema, rr as relayOfferFrameSchema, rt as ProcKill, s as CandidateKind, sn as coreDomainNameSchema, sr as roomInviteSchema, st as PtyKill, t as BulkAckFrame, tn as capabilityScopeSchema, tr as relayDataFrameSchema, tt as PrivateUseCapability, u as CapabilityGrantOk, un as coseHeaderLabelSchema, ur as roomLeaveSchema, ut as PtyWrite, v as CoreDomainName, vn as dmRoomPathSchema, vr as roomRekeySchema, vt as RoomInvite, w as DataEntriesFrame, wn as gossipFrameSchema, wr as streamEndFrameSchema, wt as RoomMembersOk, x as CoseHeaderLabel, xn as execSessionInfoSchema, xr as sfuTrackMapSchema, xt as RoomLeave, y as CoseHeaderAlg, yn as domainIdSchema, yr as roomSendSchema, yt as RoomJoin, z as IceCandidateInit, zn as observedAddressFrameSchema, zt as TransferId } from "../protocol-D8CU6s2_.mjs";
2
- export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PeerAdvert, PeerIdentity, PingFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, TokenClaims, TransferId, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, tokenClaimsSchema, transferIdSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
1
+ import { $ as PeerIdentity, $n as peerIdentitySchema, $r as webrtcOfferSchema, $t as WebrtcOffer, A as DomainId, An as domainIdSchema, Ar as roomSendSchema, At as RoomSend, B as IdentityKey, Bn as identityKeySchema, Br as thresholdCommitSchema, Bt as ThresholdCommit, C as CoseTokenHeaders, Cn as coseTokenHeadersSchema, Cr as roomMembersOkSchema, Ct as RoomMembers, D as DeviceId, Dn as deviceIdHexSchema, Dr as roomPathSchema, Dt as RoomPath, E as DataRequestFrame, En as dataRequestFrameSchema, Er as roomNoticeSchema, Et as RoomNoticeClaims, F as GossipFrame, Fn as gossipFrameSchema, Fr as streamDataFrameSchema, Ft as StreamDataFrame, G as ManageRequestFrame, Gn as manageRequestFrameSchema, Gr as thresholdShareClaimsSchema, Gt as ThresholdShareClaims, H as ManageCommandParams, Hn as manageCommandSchema, Hr as thresholdKeygenConfirmSchema, Ht as ThresholdKeygenConfirm, I as HandleClaims, In as handleClaimsSchema, Ir as streamEndFrameSchema, It as StreamEndFrame, J as NamespacedCapability, Jn as namespacedCapabilitySchema, Jr as thresholdSubjectSchema, Jt as ThresholdSubject, K as ManageResponseFrame, Kn as manageResponseFrameSchema, Kr as thresholdShareEnvelopeSchema, Kt as ThresholdShareEnvelope, L as HandleRecord, Ln as handleRecordSchema, Lr as streamSessionSchema, Lt as StreamSession, M as ExecSessionInfo, Mn as execSessionInfoSchema, Mr as sfuTrackEntrySchema, Mt as SfuTrackEntry, N as Frame, Nn as frameSchema, Nr as sfuTrackMapSchema, Nt as SfuTrackMap, O as DeviceIdHex, On as deviceIdSchema, Or as roomReadSchema, Ot as RoomRead, P as FrameVariant, Pn as frameVariantSchema, Pr as streamAckFrameSchema, Pt as StreamAckFrame, Q as PeerAdvert, Qn as peerAdvertSchema, Qr as webrtcIceCandidateSchema, Qt as WebrtcIceCandidate, R as HandshakeFrame, Rn as handshakeFrameSchema, Rr as syncPunchFrameSchema, Rt as SyncPunchFrame, S as CoseSign1, Sn as coseSign1Schema, Sr as roomMemberSchema, St as RoomMember, T as DataHaveFrame, Tn as dataHaveFrameSchema, Tr as roomNoticeClaimsSchema, Tt as RoomNotice, U as ManageError, Un as manageErrorSchema, Ur as thresholdKeygenRound1Schema, Ut as ThresholdKeygenRound1, V as ManageCommand, Vn as manageCommandParamsSchema, Vr as thresholdCommitmentSchema, Vt as ThresholdCommitment, W as ManageOk, Wn as manageOkSchema, Wr as thresholdKeygenRound2Schema, Wt as ThresholdKeygenRound2, X as ObservedAddressFrame, Xn as observedAddressFrameSchema, Xr as transferIdSchema, Xt as TransferId, Y as NamespacedDomainId, Yn as namespacedDomainIdSchema, Yr as tokenClaimsSchema, Yt as TokenClaims, Z as OwnerNamedRoomPath, Zn as ownerNamedRoomPathSchema, Zr as webrtcAnswerSchema, Zt as WebrtcAnswer, _ as CoreCapability, _n as coreCapabilitySchema, _r as revocationEntrySchema, _t as RevocationEntry, a as BulkOpen, an as bulkOpenSchema, ar as procSpawnSchema, at as ProcSpawn, b as CoseHeaderKid, bn as coseHeaderKidSchema, br as roomJoinSchema, bt as RoomJoinOk, c as CandidatesFrame, cn as candidatesFrameSchema, cr as ptyResizeSchema, ct as PtyResize, d as CapabilityRequest, dn as capabilityRequestSchema, dr as relayConnectFrameSchema, dt as RelayConnectFrame, ei as wireCandidateSchema, en as WireCandidate, er as pingFrameSchema, et as PingFrame, f as CapabilityScope, fn as capabilityScopeSchema, fr as relayDataFrameSchema, ft as RelayDataFrame, g as CoordinatorFrame, gn as coordinatorFrameSchema, gr as revocationClaimsSchema, gt as RevocationClaims, h as CloseFrame, hn as closeFrameSchema, hr as revocationAnnounceFrameSchema, ht as RevocationAnnounceFrame, i as BulkEndFrame, in as bulkEndFrameSchema, ir as procSignalSchema, it as ProcSignal, j as ExecList, jn as execListSchema, jr as sessionIdSchema, jt as SessionId, k as DmRoomPath, kn as dmRoomPathSchema, kr as roomRekeySchema, kt as RoomRekey, l as CapabilityGrant, ln as capabilityGrantOkSchema, lr as ptySpawnSchema, lt as PtySpawn, m as CapabilityVerb, mn as capabilityVerbSchema, mr as relayOfferFrameSchema, mt as RelayOfferFrame, n as BulkCancel, nn as bulkCancelSchema, nr as privateUseDomainIdSchema, nt as PrivateUseDomainId, o as BulkResume, on as bulkResumeSchema, or as protocolVersionSchema, ot as ProtocolVersion, p as CapabilityToken, pn as capabilityTokenSchema, pr as relayInboundFrameSchema, pt as RelayInboundFrame, q as MessageRef, qn as messageRefSchema, qr as thresholdSignSchema, qt as ThresholdSign, r as BulkDataFrame, rn as bulkDataFrameSchema, rr as procKillSchema, rt as ProcKill, s as CandidateKind, sn as candidateKindSchema, sr as ptyKillSchema, st as PtyKill, t as BulkAckFrame, tn as bulkAckFrameSchema, tr as privateUseCapabilitySchema, tt as PrivateUseCapability, u as CapabilityGrantOk, un as capabilityGrantSchema, ur as ptyWriteSchema, ut as PtyWrite, v as CoreDomainName, vn as coreDomainNameSchema, vr as roomInviteSchema, vt as RoomInvite, w as DataEntriesFrame, wn as dataEntriesFrameSchema, wr as roomMembersSchema, wt as RoomMembersOk, x as CoseHeaderLabel, xn as coseHeaderLabelSchema, xr as roomLeaveSchema, xt as RoomLeave, y as CoseHeaderAlg, yn as coseHeaderAlgSchema, yr as roomJoinOkSchema, yt as RoomJoin, z as IceCandidateInit, zn as iceCandidateInitSchema, zr as thresholdAbortSchema, zt as ThresholdAbort } from "../protocol-CNFRVx9w.mjs";
2
+ export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PeerAdvert, PeerIdentity, PingFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TransferId, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, transferIdSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };