wire-mesh-core 1.46.0 → 1.48.0

package/dist/{protocol-D8CU6s2_.d.mts → protocol-CNFRVx9w.d.mts}

@@ -107,6 +107,45 @@ declare const manageCommandParamsSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodUni
   "key-epoch": z.ZodNumber;
   "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
 }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.commit">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+    protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  deadline: z.ZodNumber;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.sign">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.abort">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round1">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  threshold: z.ZodNumber;
+  participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+  commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round2">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-confirm">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
   verb: z.ZodLiteral<"webrtc.offer">;
   "negotiation-id": z.ZodNumber;
   sdp: z.ZodString;
@@ -379,6 +418,45 @@ declare const frameVariantSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.Zod
       "key-epoch": z.ZodNumber;
       "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
     }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.commit">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+        protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>;
+      deadline: z.ZodNumber;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.sign">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.abort">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round1">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      threshold: z.ZodNumber;
+      participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+      commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round2">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-confirm">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
       verb: z.ZodLiteral<"webrtc.offer">;
       "negotiation-id": z.ZodNumber;
       sdp: z.ZodString;
@@ -618,6 +696,45 @@ declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.
       "key-epoch": z.ZodNumber;
       "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
     }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.commit">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+        protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>;
+      deadline: z.ZodNumber;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.sign">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.abort">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round1">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      threshold: z.ZodNumber;
+      participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+      commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round2">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-confirm">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
       verb: z.ZodLiteral<"webrtc.offer">;
       "negotiation-id": z.ZodNumber;
       sdp: z.ZodString;
@@ -828,6 +945,45 @@ declare const manageCommandSchema: z.ZodLazy<z.ZodObject<{
     "key-epoch": z.ZodNumber;
     "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
   }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.commit">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+      protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>;
+    deadline: z.ZodNumber;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.sign">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>>;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.abort">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    reason: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.keygen-round1">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    threshold: z.ZodNumber;
+    participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+    commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.keygen-round2">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    verb: z.ZodLiteral<"threshold.keygen-confirm">;
+    "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+    "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
     verb: z.ZodLiteral<"webrtc.offer">;
     "negotiation-id": z.ZodNumber;
     sdp: z.ZodString;
@@ -949,6 +1105,45 @@ declare const manageRequestFrameSchema: z.ZodLazy<z.ZodObject<{
       "key-epoch": z.ZodNumber;
       "wrapped-key": z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>]>;
     }, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.commit">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+      subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+        protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>;
+      deadline: z.ZodNumber;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.sign">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+        participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+        hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+        binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      }, z.core.$strip>>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.abort">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round1">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      threshold: z.ZodNumber;
+      participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+      commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+      "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-round2">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+      verb: z.ZodLiteral<"threshold.keygen-confirm">;
+      "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+      "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+      "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    }, z.core.$strip>>>]>, z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
       verb: z.ZodLiteral<"webrtc.offer">;
       "negotiation-id": z.ZodNumber;
       sdp: z.ZodString;
@@ -1154,6 +1349,76 @@ declare const streamEndFrameSchema: z.ZodLazy<z.ZodObject<{
   "exit-code": z.ZodOptional<z.ZodNumber>;
   "exit-signal": z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>>;
+declare const sessionIdSchema: z.ZodLazy<z.ZodNumber>;
+declare const thresholdSubjectSchema: z.ZodLazy<z.ZodObject<{
+  kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+  protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const thresholdCommitmentSchema: z.ZodLazy<z.ZodObject<{
+  participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const thresholdCommitSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.commit">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  subject: z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    kind: z.ZodUnion<readonly [z.ZodLiteral<"capability-token">, z.ZodLiteral<"revocation-entry">, z.ZodLiteral<"handle-record">, z.ZodLiteral<"room-notice">, z.ZodString]>;
+    protected: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    payload: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  deadline: z.ZodNumber;
+}, z.core.$strip>>;
+declare const thresholdSignSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.sign">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  commitments: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    participant: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+    hiding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+    binding: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>>;
+}, z.core.$strip>>;
+declare const thresholdShareClaimsSchema: z.ZodLazy<z.ZodObject<{
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  group: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  issuer: z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  "issuer-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+}, z.core.$strip>>;
+declare const thresholdShareEnvelopeSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodTuple<[z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  "1": z.ZodOptional<z.ZodNumber>;
+  "4": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+}, z.core.$catchall<z.ZodUnknown>>>>, z.ZodUnion<readonly [z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, z.ZodNull]>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>], null>>>>;
+declare const thresholdAbortSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.abort">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
+declare const thresholdKeygenRound1Schema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round1">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  threshold: z.ZodNumber;
+  participants: z.ZodArray<z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>>;
+  commitment: z.ZodArray<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "proof-of-knowledge": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+  "existing-group-key": z.ZodOptional<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>;
+}, z.core.$strip>>;
+declare const thresholdKeygenRound2Schema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-round2">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  share: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const thresholdKeygenConfirmSchema: z.ZodLazy<z.ZodObject<{
+  verb: z.ZodLiteral<"threshold.keygen-confirm">;
+  "session-id": z.ZodLazy<z.ZodLazy<z.ZodNumber>>;
+  "transcript-digest": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "group-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
 declare const capabilityVerbSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodString>>, z.ZodLazy<z.ZodLazy<z.ZodString>>, z.ZodLazy<z.ZodLazy<z.ZodString>>]>>;
 declare const coreCapabilitySchema: z.ZodLazy<z.ZodString>;
 declare const namespacedCapabilitySchema: z.ZodLazy<z.ZodString>;
@@ -1369,6 +1634,17 @@ type StreamSession = z.infer<typeof streamSessionSchema>;
 type StreamDataFrame = z.infer<typeof streamDataFrameSchema>;
 type StreamAckFrame = z.infer<typeof streamAckFrameSchema>;
 type StreamEndFrame = z.infer<typeof streamEndFrameSchema>;
+type SessionId = z.infer<typeof sessionIdSchema>;
+type ThresholdSubject = z.infer<typeof thresholdSubjectSchema>;
+type ThresholdCommitment = z.infer<typeof thresholdCommitmentSchema>;
+type ThresholdCommit = z.infer<typeof thresholdCommitSchema>;
+type ThresholdSign = z.infer<typeof thresholdSignSchema>;
+type ThresholdShareClaims = z.infer<typeof thresholdShareClaimsSchema>;
+type ThresholdShareEnvelope = z.infer<typeof thresholdShareEnvelopeSchema>;
+type ThresholdAbort = z.infer<typeof thresholdAbortSchema>;
+type ThresholdKeygenRound1 = z.infer<typeof thresholdKeygenRound1Schema>;
+type ThresholdKeygenRound2 = z.infer<typeof thresholdKeygenRound2Schema>;
+type ThresholdKeygenConfirm = z.infer<typeof thresholdKeygenConfirmSchema>;
 type CapabilityVerb = z.infer<typeof capabilityVerbSchema>;
 type CoreCapability = z.infer<typeof coreCapabilitySchema>;
 type NamespacedCapability = z.infer<typeof namespacedCapabilitySchema>;
@@ -1402,4 +1678,4 @@ type WebrtcAnswer = z.infer<typeof webrtcAnswerSchema>;
 type WebrtcIceCandidate = z.infer<typeof webrtcIceCandidateSchema>;
 type IceCandidateInit = z.infer<typeof iceCandidateInitSchema>;
 //#endregion
-export { PeerIdentity as $, ptyWriteSchema as $n, capabilityGrantSchema as $t, DomainId as A, manageCommandParamsSchema as An, webrtcIceCandidateSchema as Ar, RoomSend as At, IdentityKey as B, ownerNamedRoomPathSchema as Bn, WebrtcAnswer as Bt, CoseTokenHeaders as C, frameVariantSchema as Cn, streamDataFrameSchema as Cr, RoomMembers as Ct, DeviceId as D, handshakeFrameSchema as Dn, tokenClaimsSchema as Dr, RoomPath as Dt, DataRequestFrame as E, handleRecordSchema as En, syncPunchFrameSchema as Er, RoomNoticeClaims as Et, GossipFrame as F, manageResponseFrameSchema as Fn, StreamEndFrame as Ft, ManageRequestFrame as G, privateUseDomainIdSchema as Gn, bulkCancelSchema as Gt, ManageCommandParams as H, peerIdentitySchema as Hn, WebrtcOffer as Ht, HandleClaims as I, messageRefSchema as In, StreamSession as It, NamespacedCapability as J, procSpawnSchema as Jn, bulkOpenSchema as Jt, ManageResponseFrame as K, procKillSchema as Kn, bulkDataFrameSchema as Kt, HandleRecord as L, namespacedCapabilitySchema as Ln, SyncPunchFrame as Lt, ExecSessionInfo as M, manageErrorSchema as Mn, wireCandidateSchema as Mr, SfuTrackMap as Mt, Frame as N, manageOkSchema as Nn, StreamAckFrame as Nt, DeviceIdHex as O, iceCandidateInitSchema as On, transferIdSchema as Or, RoomRead as Ot, FrameVariant as P, manageRequestFrameSchema as Pn, StreamDataFrame as Pt, PeerAdvert as Q, ptySpawnSchema as Qn, capabilityGrantOkSchema as Qt, HandshakeFrame as R, namespacedDomainIdSchema as Rn, TokenClaims as Rt, CoseSign1 as S, frameSchema as Sn, streamAckFrameSchema as Sr, RoomMember as St, DataHaveFrame as T, handleClaimsSchema as Tn, streamSessionSchema as Tr, RoomNotice as Tt, ManageError as U, pingFrameSchema as Un, WireCandidate as Ut, ManageCommand as V, peerAdvertSchema as Vn, WebrtcIceCandidate as Vt, ManageOk as W, privateUseCapabilitySchema as Wn, bulkAckFrameSchema as Wt, ObservedAddressFrame as X, ptyKillSchema as Xn, candidateKindSchema as Xt, NamespacedDomainId as Y, protocolVersionSchema as Yn, bulkResumeSchema as Yt, OwnerNamedRoomPath as Z, ptyResizeSchema as Zn, candidatesFrameSchema as Zt, CoreCapability as _, deviceIdSchema as _n, roomReadSchema as _r, RevocationEntry as _t, BulkOpen as a, coordinatorFrameSchema as an, revocationClaimsSchema as ar, ProcSpawn as at, CoseHeaderKid as b, execListSchema as bn, sfuTrackEntrySchema as br, RoomJoinOk as bt, CandidatesFrame as c, coseHeaderAlgSchema as cn, roomJoinOkSchema as cr, PtyResize as ct, CapabilityRequest as d, coseSign1Schema as dn, roomMemberSchema as dr, RelayConnectFrame as dt, capabilityRequestSchema as en, relayConnectFrameSchema as er, PingFrame as et, CapabilityScope as f, coseTokenHeadersSchema as fn, roomMembersOkSchema as fr, RelayDataFrame as ft, CoordinatorFrame as g, deviceIdHexSchema as gn, roomPathSchema as gr, RevocationClaims as gt, CloseFrame as h, dataRequestFrameSchema as hn, roomNoticeSchema as hr, RevocationAnnounceFrame as ht, BulkEndFrame as i, closeFrameSchema as in, revocationAnnounceFrameSchema as ir, ProcSignal as it, ExecList as j, manageCommandSchema as jn, webrtcOfferSchema as jr, SfuTrackEntry as jt, DmRoomPath as k, identityKeySchema as kn, webrtcAnswerSchema as kr, RoomRekey as kt, CapabilityGrant as l, coseHeaderKidSchema as ln, roomJoinSchema as lr, PtySpawn as lt, CapabilityVerb as m, dataHaveFrameSchema as mn, roomNoticeClaimsSchema as mr, RelayOfferFrame as mt, BulkCancel as n, capabilityTokenSchema as nn, relayInboundFrameSchema as nr, PrivateUseDomainId as nt, BulkResume as o, coreCapabilitySchema as on, revocationEntrySchema as or, ProtocolVersion as ot, CapabilityToken as p, dataEntriesFrameSchema as pn, roomMembersSchema as pr, RelayInboundFrame as pt, MessageRef as q, procSignalSchema as qn, bulkEndFrameSchema as qt, BulkDataFrame as r, capabilityVerbSchema as rn, relayOfferFrameSchema as rr, ProcKill as rt, CandidateKind as s, coreDomainNameSchema as sn, roomInviteSchema as sr, PtyKill as st, BulkAckFrame as t, capabilityScopeSchema as tn, relayDataFrameSchema as tr, PrivateUseCapability as tt, CapabilityGrantOk as u, coseHeaderLabelSchema as un, roomLeaveSchema as ur, PtyWrite as ut, CoreDomainName as v, dmRoomPathSchema as vn, roomRekeySchema as vr, RoomInvite as vt, DataEntriesFrame as w, gossipFrameSchema as wn, streamEndFrameSchema as wr, RoomMembersOk as wt, CoseHeaderLabel as x, execSessionInfoSchema as xn, sfuTrackMapSchema as xr, RoomLeave as xt, CoseHeaderAlg as y, domainIdSchema as yn, roomSendSchema as yr, RoomJoin as yt, IceCandidateInit as z, observedAddressFrameSchema as zn, TransferId as zt };
+export { PeerIdentity as $, peerIdentitySchema as $n, webrtcOfferSchema as $r, WebrtcOffer as $t, DomainId as A, domainIdSchema as An, roomSendSchema as Ar, RoomSend as At, IdentityKey as B, identityKeySchema as Bn, thresholdCommitSchema as Br, ThresholdCommit as Bt, CoseTokenHeaders as C, coseTokenHeadersSchema as Cn, roomMembersOkSchema as Cr, RoomMembers as Ct, DeviceId as D, deviceIdHexSchema as Dn, roomPathSchema as Dr, RoomPath as Dt, DataRequestFrame as E, dataRequestFrameSchema as En, roomNoticeSchema as Er, RoomNoticeClaims as Et, GossipFrame as F, gossipFrameSchema as Fn, streamDataFrameSchema as Fr, StreamDataFrame as Ft, ManageRequestFrame as G, manageRequestFrameSchema as Gn, thresholdShareClaimsSchema as Gr, ThresholdShareClaims as Gt, ManageCommandParams as H, manageCommandSchema as Hn, thresholdKeygenConfirmSchema as Hr, ThresholdKeygenConfirm as Ht, HandleClaims as I, handleClaimsSchema as In, streamEndFrameSchema as Ir, StreamEndFrame as It, NamespacedCapability as J, namespacedCapabilitySchema as Jn, thresholdSubjectSchema as Jr, ThresholdSubject as Jt, ManageResponseFrame as K, manageResponseFrameSchema as Kn, thresholdShareEnvelopeSchema as Kr, ThresholdShareEnvelope as Kt, HandleRecord as L, handleRecordSchema as Ln, streamSessionSchema as Lr, StreamSession as Lt, ExecSessionInfo as M, execSessionInfoSchema as Mn, sfuTrackEntrySchema as Mr, SfuTrackEntry as Mt, Frame as N, frameSchema as Nn, sfuTrackMapSchema as Nr, SfuTrackMap as Nt, DeviceIdHex as O, deviceIdSchema as On, roomReadSchema as Or, RoomRead as Ot, FrameVariant as P, frameVariantSchema as Pn, streamAckFrameSchema as Pr, StreamAckFrame as Pt, PeerAdvert as Q, peerAdvertSchema as Qn, webrtcIceCandidateSchema as Qr, WebrtcIceCandidate as Qt, HandshakeFrame as R, handshakeFrameSchema as Rn, syncPunchFrameSchema as Rr, SyncPunchFrame as Rt, CoseSign1 as S, coseSign1Schema as Sn, roomMemberSchema as Sr, RoomMember as St, DataHaveFrame as T, dataHaveFrameSchema as Tn, roomNoticeClaimsSchema as Tr, RoomNotice as Tt, ManageError as U, manageErrorSchema as Un, thresholdKeygenRound1Schema as Ur, ThresholdKeygenRound1 as Ut, ManageCommand as V, manageCommandParamsSchema as Vn, thresholdCommitmentSchema as Vr, ThresholdCommitment as Vt, ManageOk as W, manageOkSchema as Wn, thresholdKeygenRound2Schema as Wr, ThresholdKeygenRound2 as Wt, ObservedAddressFrame as X, observedAddressFrameSchema as Xn, transferIdSchema as Xr, TransferId as Xt, NamespacedDomainId as Y, namespacedDomainIdSchema as Yn, tokenClaimsSchema as Yr, TokenClaims as Yt, OwnerNamedRoomPath as Z, ownerNamedRoomPathSchema as Zn, webrtcAnswerSchema as Zr, WebrtcAnswer as Zt, CoreCapability as _, coreCapabilitySchema as _n, revocationEntrySchema as _r, RevocationEntry as _t, BulkOpen as a, bulkOpenSchema as an, procSpawnSchema as ar, ProcSpawn as at, CoseHeaderKid as b, coseHeaderKidSchema as bn, roomJoinSchema as br, RoomJoinOk as bt, CandidatesFrame as c, candidatesFrameSchema as cn, ptyResizeSchema as cr, PtyResize as ct, CapabilityRequest as d, capabilityRequestSchema as dn, relayConnectFrameSchema as dr, RelayConnectFrame as dt, wireCandidateSchema as ei, WireCandidate as en, pingFrameSchema as er, PingFrame as et, CapabilityScope as f, capabilityScopeSchema as fn, relayDataFrameSchema as fr, RelayDataFrame as ft, CoordinatorFrame as g, coordinatorFrameSchema as gn, revocationClaimsSchema as gr, RevocationClaims as gt, CloseFrame as h, closeFrameSchema as hn, revocationAnnounceFrameSchema as hr, RevocationAnnounceFrame as ht, BulkEndFrame as i, bulkEndFrameSchema as in, procSignalSchema as ir, ProcSignal as it, ExecList as j, execListSchema as jn, sessionIdSchema as jr, SessionId as jt, DmRoomPath as k, dmRoomPathSchema as kn, roomRekeySchema as kr, RoomRekey as kt, CapabilityGrant as l, capabilityGrantOkSchema as ln, ptySpawnSchema as lr, PtySpawn as lt, CapabilityVerb as m, capabilityVerbSchema as mn, relayOfferFrameSchema as mr, RelayOfferFrame as mt, BulkCancel as n, bulkCancelSchema as nn, privateUseDomainIdSchema as nr, PrivateUseDomainId as nt, BulkResume as o, bulkResumeSchema as on, protocolVersionSchema as or, ProtocolVersion as ot, CapabilityToken as p, capabilityTokenSchema as pn, relayInboundFrameSchema as pr, RelayInboundFrame as pt, MessageRef as q, messageRefSchema as qn, thresholdSignSchema as qr, ThresholdSign as qt, BulkDataFrame as r, bulkDataFrameSchema as rn, procKillSchema as rr, ProcKill as rt, CandidateKind as s, candidateKindSchema as sn, ptyKillSchema as sr, PtyKill as st, BulkAckFrame as t, bulkAckFrameSchema as tn, privateUseCapabilitySchema as tr, PrivateUseCapability as tt, CapabilityGrantOk as u, capabilityGrantSchema as un, ptyWriteSchema as ur, PtyWrite as ut, CoreDomainName as v, coreDomainNameSchema as vn, roomInviteSchema as vr, RoomInvite as vt, DataEntriesFrame as w, dataEntriesFrameSchema as wn, roomMembersSchema as wr, RoomMembersOk as wt, CoseHeaderLabel as x, coseHeaderLabelSchema as xn, roomLeaveSchema as xr, RoomLeave as xt, CoseHeaderAlg as y, coseHeaderAlgSchema as yn, roomJoinOkSchema as yr, RoomJoin as yt, IceCandidateInit as z, iceCandidateInitSchema as zn, thresholdAbortSchema as zr, ThresholdAbort as zt };

package/dist/rolldown-runtime-VH7oDXx4.cjs

@@ -0,0 +1,28 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});

package/dist/{room-token-verification-BQhqt1Rm.d.mts → room-token-verification-BdtM1rQ4.d.mts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Rt as TokenClaims, p as CapabilityToken } from "./protocol-D8CU6s2_.mjs";
-import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-Bh82oidM.mjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.mjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-CVyPoJ6l.mjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/{room-token-verification-DQGdYNg4.d.cts → room-token-verification-DpOfZOdl.d.cts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Rt as TokenClaims, p as CapabilityToken } from "./protocol-D8CU6s2_.cjs";
-import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-B1-MAIST.cjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.cjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-Cl8sQo7o.cjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/{tokens-CdQwzCyJ.mjs → tokens-B0dpTLhS.mjs}

@@ -134,7 +134,7 @@ async function evaluateConditions(nodes, claims, clock, extraHandlers = {}) {
 }
 //#endregion
 //#region src/domain/tokens.ts
-/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. */
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
 function sig1ToBeSigned(protectedHeader, payload) {
 	return encode([
 		"Signature1",
@@ -456,4 +456,4 @@ async function mintRevocationEntry(options) {
 	];
 }
 //#endregion
-export { verifyRevocationEntry as a, verifyCapabilityToken as i, mintCapabilityToken as n, mintRevocationEntry as r, canGrant as t };
+export { verifyCapabilityToken as a, sig1ToBeSigned as i, mintCapabilityToken as n, verifyRevocationEntry as o, mintRevocationEntry as r, canGrant as t };

package/dist/{tokens-Bh82oidM.d.mts → tokens-CVyPoJ6l.d.mts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Rt as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-D8CU6s2_.mjs";
-import { t as IdentityPort } from "./identity-Oelt3uEn.mjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.mjs";
+import { t as IdentityPort } from "./identity-9TmmK7vP.mjs";
 import { t as Clock } from "./clock-DiSx-WKM.mjs";
 import { z } from "zod";
 import { JsonValue, PredicateNode, Resolution } from "trilean";
@@ -53,6 +53,8 @@ interface VerifyCapabilityTokenOptions {
   /** Registers domain-specific delegate systems a presented token's own `conditions` entries may name, beyond the five mandatory narrowing ops (which are never reachable from `conditions` -- see evaluateConditions's own doc comment). None are registered by wire-mesh-core itself; a domain (a message TTL, #84's future revoke-authorization check) supplies its own here. A `conditions` entry naming a system absent from this map is indeterminate, and therefore fails the whole token -- fail-closed, not a silent no-op. */
   extraPredicateResolvers?: Readonly<Record<string, TokenDelegateHandler<ConditionsContext>>>;
 }
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
+declare function sig1ToBeSigned(protectedHeader: Uint8Array, payload: Uint8Array): Uint8Array;
 /**
  * Verifies one capability token per tokens.cddl's own documented rules: the token is a well-formed COSE_Sign1 whose signature actually verifies against its own embedded issuer-key, that issuer-key is self-certifying (sha256(issuer-key.public-key) equals the claimed issuer device-id -- no shared secret needed to check this), the token is currently valid (not expired, not before not-before, not revoked by its own issuer), and -- recursively -- any parent delegation narrows rather than widens across all three axes of authority: the parent's bearer must be this token's issuer (the delegation chain is unbroken), this token's expiry must not exceed its parent's, and this token's scope must narrow its parent's (same kind; equal-or-descendant path when the parent carries one) with an identical capability verb (the capability-verb grammar has no sub-verb relation, so a different verb is a different authority, not a narrower one). Undecodable payload bytes return "malformed" and undecodable parent bytes return "parent_invalid" -- hostile input produces a verdict, never a throw.
  */
@@ -121,4 +123,4 @@ interface MintRevocationEntryOptions {
 /** Mints one revocation-entry (management.cddl): a COSE_Sign1 over revocation-claims, signed the same way mintCapabilityToken signs a token. No narrowing chain to check -- a revocation entry has no parent and cannot fail to be issuable the way a delegated token can, so this returns the entry directly rather than a verdict. */
 declare function mintRevocationEntry(options: MintRevocationEntryOptions): Promise<RevocationEntry>;
 //#endregion
-export { RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyRevocationEntry as g, verifyCapabilityToken as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };
+export { verifyRevocationEntry as _, RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyCapabilityToken as g, sig1ToBeSigned as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };

package/dist/{tokens-B1-MAIST.d.cts → tokens-Cl8sQo7o.d.cts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Rt as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-D8CU6s2_.cjs";
-import { t as IdentityPort } from "./identity-DHf0J6IA.cjs";
+import { B as IdentityKey, D as DeviceId, Yt as TokenClaims, _t as RevocationEntry, gt as RevocationClaims, p as CapabilityToken } from "./protocol-CNFRVx9w.cjs";
+import { t as IdentityPort } from "./identity-CUkDHCRK.cjs";
 import { t as Clock } from "./clock-DiSx-WKM.cjs";
 import { z } from "zod";
 import { JsonValue, PredicateNode, Resolution } from "trilean";
@@ -53,6 +53,8 @@ interface VerifyCapabilityTokenOptions {
   /** Registers domain-specific delegate systems a presented token's own `conditions` entries may name, beyond the five mandatory narrowing ops (which are never reachable from `conditions` -- see evaluateConditions's own doc comment). None are registered by wire-mesh-core itself; a domain (a message TTL, #84's future revoke-authorization check) supplies its own here. A `conditions` entry naming a system absent from this map is indeterminate, and therefore fails the whole token -- fail-closed, not a silent no-op. */
   extraPredicateResolvers?: Readonly<Record<string, TokenDelegateHandler<ConditionsContext>>>;
 }
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
+declare function sig1ToBeSigned(protectedHeader: Uint8Array, payload: Uint8Array): Uint8Array;
 /**
  * Verifies one capability token per tokens.cddl's own documented rules: the token is a well-formed COSE_Sign1 whose signature actually verifies against its own embedded issuer-key, that issuer-key is self-certifying (sha256(issuer-key.public-key) equals the claimed issuer device-id -- no shared secret needed to check this), the token is currently valid (not expired, not before not-before, not revoked by its own issuer), and -- recursively -- any parent delegation narrows rather than widens across all three axes of authority: the parent's bearer must be this token's issuer (the delegation chain is unbroken), this token's expiry must not exceed its parent's, and this token's scope must narrow its parent's (same kind; equal-or-descendant path when the parent carries one) with an identical capability verb (the capability-verb grammar has no sub-verb relation, so a different verb is a different authority, not a narrower one). Undecodable payload bytes return "malformed" and undecodable parent bytes return "parent_invalid" -- hostile input produces a verdict, never a throw.
  */
@@ -121,4 +123,4 @@ interface MintRevocationEntryOptions {
 /** Mints one revocation-entry (management.cddl): a COSE_Sign1 over revocation-claims, signed the same way mintCapabilityToken signs a token. No narrowing chain to check -- a revocation entry has no parent and cannot fail to be issuable the way a delegated token can, so this returns the entry directly rather than a verdict. */
 declare function mintRevocationEntry(options: MintRevocationEntryOptions): Promise<RevocationEntry>;
 //#endregion
-export { RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyRevocationEntry as g, verifyCapabilityToken as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };
+export { verifyRevocationEntry as _, RevocationCheck as a, TokenVerdict as c, VerifyRevocationEntryOptions as d, canGrant as f, verifyCapabilityToken as g, sig1ToBeSigned as h, MintVerdict as i, TokenVerdictReason as l, mintRevocationEntry as m, MintRefusalReason as n, RevocationEntryVerdict as o, mintCapabilityToken as p, MintRevocationEntryOptions as r, RevocationEntryVerdictReason as s, MintCapabilityTokenOptions as t, VerifyCapabilityTokenOptions as u };

package/dist/{tokens-DxGVURpB.cjs → tokens-Dh6mG6p_.cjs}

@@ -134,7 +134,7 @@ async function evaluateConditions(nodes, claims, clock, extraHandlers = {}) {
 }
 //#endregion
 //#region src/domain/tokens.ts
-/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. */
+/** RFC 9052 §4.4 Sig_structure for a COSE_Sign1 with no external AAD: ["Signature1", protected, external_aad, payload]. Exported (not just used internally by verifyTokenChain) so any other self-certifying COSE_Sign1 construction in this codebase -- e.g. threshold-subject.ts's own to-be-signed bytes for a FROST-signed capability-token/revocation-entry/handle-record/room-notice -- reuses this single construction rather than a second hand-rolled one. */
 function sig1ToBeSigned(protectedHeader, payload) {
 	return (0, cbor2.encode)([
 		"Signature1",
@@ -474,6 +474,12 @@ Object.defineProperty(exports, "mintRevocationEntry", {
 		return mintRevocationEntry;
 	}
 });
+Object.defineProperty(exports, "sig1ToBeSigned", {
+	enumerable: true,
+	get: function() {
+		return sig1ToBeSigned;
+	}
+});
 Object.defineProperty(exports, "verifyCapabilityToken", {
 	enumerable: true,
 	get: function() {

package/dist/{transport-BNeF6kDe.d.mts → transport-C7KVkhgb.d.mts}

@@ -1,4 +1,4 @@
-import { D as DeviceId, N as Frame } from "./protocol-D8CU6s2_.mjs";
+import { D as DeviceId, N as Frame } from "./protocol-CNFRVx9w.mjs";
 //#region src/ports/transport.d.ts
 /**
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.

package/dist/{transport-BbSGNRFZ.d.cts → transport-De0zHlaA.d.cts}

@@ -1,4 +1,4 @@
-import { D as DeviceId, N as Frame } from "./protocol-D8CU6s2_.cjs";
+import { D as DeviceId, N as Frame } from "./protocol-CNFRVx9w.cjs";
 //#region src/ports/transport.d.ts
 /**
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wire-mesh-core",
-  "version": "1.46.0",
+  "version": "1.48.0",
   "dependencies": {
     "cbor2": "2.3.0",
     "cddl.js": "1.0.1",
@@ -55,6 +55,14 @@
       "import": "./dist/adapters/tcp-transport.mjs",
       "require": "./dist/adapters/tcp-transport.cjs"
     },
+    "./adapters/threshold-identity": {
+      "import": "./dist/adapters/threshold-identity.mjs",
+      "require": "./dist/adapters/threshold-identity.cjs"
+    },
+    "./adapters/threshold-wasm": {
+      "import": "./dist/adapters/threshold-wasm.mjs",
+      "require": "./dist/adapters/threshold-wasm.cjs"
+    },
     "./adapters/tls-transport": {
       "import": "./dist/adapters/tls-transport.mjs",
       "require": "./dist/adapters/tls-transport.cjs"
@@ -135,6 +143,10 @@
       "import": "./dist/domain/shard-manifest.mjs",
       "require": "./dist/domain/shard-manifest.cjs"
     },
+    "./domain/threshold-subject": {
+      "import": "./dist/domain/threshold-subject.mjs",
+      "require": "./dist/domain/threshold-subject.cjs"
+    },
     "./domain/tokens": {
       "import": "./dist/domain/tokens.mjs",
       "require": "./dist/domain/tokens.cjs"
@@ -170,7 +182,8 @@
     "./package.json": "./package.json"
   },
   "files": [
-    "dist"
+    "dist",
+    "wasm-dist"
   ],
   "packageManager": "pnpm@12.4.1+sha512.2e81e399d73fe8390dab25e06aa788ab7a5908248d2f5a370f82b481147a6a7a367bf8048f9a6fdb6460f21a66f0542dedb8b94ca2c8723596741920b1656d4c",
   "publishConfig": {