wire-mesh-core 2.1.0 → 3.0.1

package/dist/domain/tokens.d.cts

@@ -1,2 +1,2 @@
-import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-BDVxEvl2.cjs";
+import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-DqFu7iMX.cjs";
 export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, sig1ToBeSigned, verifyCapabilityToken, verifyRevocationEntry };

package/dist/domain/tokens.d.mts

@@ -1,2 +1,2 @@
-import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-0r9ipK1r.mjs";
+import { _ as verifyRevocationEntry, a as RevocationCheck, c as TokenVerdict, d as VerifyRevocationEntryOptions, f as canGrant, g as verifyCapabilityToken, h as sig1ToBeSigned, i as MintVerdict, l as TokenVerdictReason, m as mintRevocationEntry, n as MintRefusalReason, o as RevocationEntryVerdict, p as mintCapabilityToken, r as MintRevocationEntryOptions, s as RevocationEntryVerdictReason, t as MintCapabilityTokenOptions, u as VerifyCapabilityTokenOptions } from "../tokens-CBiSYuzp.mjs";
 export { MintCapabilityTokenOptions, MintRefusalReason, MintRevocationEntryOptions, MintVerdict, RevocationCheck, RevocationEntryVerdict, RevocationEntryVerdictReason, TokenVerdict, TokenVerdictReason, VerifyCapabilityTokenOptions, VerifyRevocationEntryOptions, canGrant, mintCapabilityToken, mintRevocationEntry, sig1ToBeSigned, verifyCapabilityToken, verifyRevocationEntry };

package/dist/domain/topology-snapshot.d.cts

@@ -1,4 +1,4 @@
-import { D as DeviceId, en as TopologyPeers } from "../protocol-Bi2fzBCc.cjs";
+import { D as DeviceId, nn as TopologyPeers } from "../protocol-DCDae3z4.cjs";
 //#region src/domain/topology-snapshot.d.ts
 export interface TopologyPeersInputs {
   /** connection?.peerDeviceId -- the transport-authenticated direct peer, when the adapter gives one. Takes priority over firstAdvertisedPeer below. */

package/dist/domain/topology-snapshot.d.mts

@@ -1,4 +1,4 @@
-import { D as DeviceId, en as TopologyPeers } from "../protocol-Bi2fzBCc.mjs";
+import { D as DeviceId, nn as TopologyPeers } from "../protocol-DCDae3z4.mjs";
 //#region src/domain/topology-snapshot.d.ts
 export interface TopologyPeersInputs {
   /** connection?.peerDeviceId -- the transport-authenticated direct peer, when the adapter gives one. Takes priority over firstAdvertisedPeer below. */

package/dist/domain/topology.d.cts

@@ -1,4 +1,4 @@
-import { D as DeviceId, V as ManageCommand, en as TopologyPeers, et as PeerAdvert } from "../protocol-Bi2fzBCc.cjs";
+import { D as DeviceId, V as ManageCommand, et as PeerAdvert, nn as TopologyPeers } from "../protocol-DCDae3z4.cjs";
 import { DirectoryEntry, IncomingManageRequest, MeshSession } from "./mesh-session.cjs";
 //#region src/domain/topology.d.ts
 export declare const TOPOLOGY_GET_CAPABILITY = "topology:get";

package/dist/domain/topology.d.mts

@@ -1,4 +1,4 @@
-import { D as DeviceId, V as ManageCommand, en as TopologyPeers, et as PeerAdvert } from "../protocol-Bi2fzBCc.mjs";
+import { D as DeviceId, V as ManageCommand, et as PeerAdvert, nn as TopologyPeers } from "../protocol-DCDae3z4.mjs";
 import { DirectoryEntry, IncomingManageRequest, MeshSession } from "./mesh-session.mjs";
 //#region src/domain/topology.d.ts
 export declare const TOPOLOGY_GET_CAPABILITY = "topology:get";

package/dist/domain/webrtc-signaling.d.cts

@@ -1,6 +1,6 @@
-import { Ft as SfuTrackEntry, H as ManageCommandParams, It as SfuTrackMap, V as ManageCommand, an as WebrtcOffer, f as CapabilityScope, in as WebrtcIceCandidate, rn as WebrtcAnswer, z as IceCandidateInit } from "../protocol-Bi2fzBCc.cjs";
+import { H as ManageCommandParams, Lt as SfuTrackEntry, Rt as SfuTrackMap, V as ManageCommand, an as WebrtcAnswer, f as CapabilityScope, on as WebrtcIceCandidate, sn as WebrtcOffer, z as IceCandidateInit } from "../protocol-DCDae3z4.cjs";
 import { IncomingManageRequest } from "./mesh-session.cjs";
-import { u as VerifyCapabilityTokenOptions } from "../tokens-BDVxEvl2.cjs";
+import { u as VerifyCapabilityTokenOptions } from "../tokens-DqFu7iMX.cjs";
 //#region src/domain/webrtc-signaling.d.ts
 /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
 export declare const WEBRTC_SIGNAL_VERB = "webrtc:signal";

package/dist/domain/webrtc-signaling.d.mts

@@ -1,6 +1,6 @@
-import { Ft as SfuTrackEntry, H as ManageCommandParams, It as SfuTrackMap, V as ManageCommand, an as WebrtcOffer, f as CapabilityScope, in as WebrtcIceCandidate, rn as WebrtcAnswer, z as IceCandidateInit } from "../protocol-Bi2fzBCc.mjs";
+import { H as ManageCommandParams, Lt as SfuTrackEntry, Rt as SfuTrackMap, V as ManageCommand, an as WebrtcAnswer, f as CapabilityScope, on as WebrtcIceCandidate, sn as WebrtcOffer, z as IceCandidateInit } from "../protocol-DCDae3z4.mjs";
 import { IncomingManageRequest } from "./mesh-session.mjs";
-import { u as VerifyCapabilityTokenOptions } from "../tokens-0r9ipK1r.mjs";
+import { u as VerifyCapabilityTokenOptions } from "../tokens-CBiSYuzp.mjs";
 //#region src/domain/webrtc-signaling.d.ts
 /** The one capability verb gating every core/webrtc message shape: an authority over this node's own signaling as a whole, not three separate resources, mirroring how core/exec's exec:pty gates all of its own inner verbs. webrtc.sfu-track-map is gated by this same verb (see spec/webrtc.cddl's own comment): an SFU able to shape a negotiation can already misreport whose media is on which mid, so a separate capability over the track-map itself would guard nothing a client doesn't already have to trust the SFU for. */
 export declare const WEBRTC_SIGNAL_VERB = "webrtc:signal";

package/dist/generated/protocol.cjs

@@ -180,7 +180,9 @@ const frameVariantSchema = zod.z.lazy(() => zod.z.union([
 	zod.z.lazy(() => dataEntriesFrameSchema),
 	zod.z.lazy(() => bulkDataFrameSchema),
 	zod.z.lazy(() => bulkAckFrameSchema),
-	zod.z.lazy(() => bulkEndFrameSchema)
+	zod.z.lazy(() => bulkEndFrameSchema),
+	zod.z.lazy(() => secureHelloFrameSchema),
+	zod.z.lazy(() => secureDataFrameSchema)
 ]));
 const frameSchema = zod.z.lazy(() => zod.z.lazy(() => frameVariantSchema));
 const protocolVersionSchema = zod.z.lazy(() => zod.z.number().int().nonnegative());
@@ -336,6 +338,19 @@ const roomNoticeClaimsSchema = zod.z.lazy(() => zod.z.object({
 	"valid-until": zod.z.number().int().nonnegative().optional(),
 	"key-epoch": zod.z.number().int().nonnegative().optional()
 }).catchall(zod.z.unknown()));
+const secureHelloFrameSchema = zod.z.lazy(() => zod.z.object({
+	"type": zod.z.literal("secure-hello"),
+	"ephemeral-key": zod.z.instanceof(Uint8Array).refine((v) => v.length === 65, { message: "expected exactly 65 bytes" }),
+	"nonce": zod.z.instanceof(Uint8Array).refine((v) => v.length === 16, { message: "expected exactly 16 bytes" }),
+	"identity-key": zod.z.lazy(() => identityKeySchema),
+	"to-device": zod.z.lazy(() => deviceIdSchema),
+	"signature": zod.z.instanceof(Uint8Array)
+}));
+const secureDataFrameSchema = zod.z.lazy(() => zod.z.object({
+	"type": zod.z.literal("secure-data"),
+	"counter": zod.z.number().int().nonnegative(),
+	"ciphertext": zod.z.instanceof(Uint8Array)
+}));
 const streamSessionSchema = zod.z.lazy(() => zod.z.number().int().nonnegative());
 const streamDataFrameSchema = zod.z.lazy(() => zod.z.object({
 	"type": zod.z.literal("stream-data"),
@@ -642,6 +657,8 @@ exports.roomPathSchema = roomPathSchema;
 exports.roomReadSchema = roomReadSchema;
 exports.roomRekeySchema = roomRekeySchema;
 exports.roomSendSchema = roomSendSchema;
+exports.secureDataFrameSchema = secureDataFrameSchema;
+exports.secureHelloFrameSchema = secureHelloFrameSchema;
 exports.sessionIdSchema = sessionIdSchema;
 exports.sfuTrackEntrySchema = sfuTrackEntrySchema;
 exports.sfuTrackMapSchema = sfuTrackMapSchema;

package/dist/generated/protocol.d.cts

@@ -1,2 +1,2 @@
-import { $ as PathTraceOk, $n as messageRefSchema, $r as thresholdKeygenRound2Schema, $t as TopologyGet, A as DomainId, An as dataEntriesFrameSchema, Ar as roomLeaveSchema, At as RoomPath, B as IdentityKey, Bn as frameVariantSchema, Br as sessionIdSchema, Bt as StreamSession, C as CoseTokenHeaders, Cn as coreCapabilitySchema, Cr as relayOfferFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderLabelSchema, Dr as roomInviteSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coseHeaderKidSchema, Er as revocationEntrySchema, Et as RoomMembers, F as GossipFrame, Fn as dmRoomPathSchema, Fr as roomNoticeSchema, Ft as SfuTrackEntry, G as ManageRequestFrame, Gn as iceCandidateInitSchema, Gr as streamEndFrameSchema, Gt as ThresholdKeygenConfirm, H as ManageCommandParams, Hn as handleClaimsSchema, Hr as sfuTrackMapSchema, Ht as ThresholdAbort, I as HandleClaims, In as domainIdSchema, Ir as roomPathSchema, It as SfuTrackMap, J as NamespacedCapability, Jn as manageCommandSchema, Jr as thresholdAbortSchema, Jt as ThresholdShareClaims, K as ManageResponseFrame, Kn as identityKeySchema, Kr as streamSessionSchema, Kt as ThresholdKeygenRound1, L as HandleRecord, Ln as execListSchema, Lr as roomReadSchema, Lt as StreamAckFrame, M as ExecSessionInfo, Mn as dataRequestFrameSchema, Mr as roomMembersOkSchema, Mt as RoomRekey, N as Frame, Nn as deviceIdHexSchema, Nr as roomMembersSchema, Nt as RoomSend, O as DeviceIdHex, On as coseSign1Schema, Or as roomJoinOkSchema, Ot as RoomNotice, P as FrameVariant, Pn as deviceIdSchema, Pr as roomNoticeClaimsSchema, Pt as SessionId, Q as PathTrace, Qn as manageResponseFrameSchema, Qr as thresholdKeygenRound1Schema, Qt as TokenClaims, R as HandshakeFrame, Rn as execSessionInfoSchema, Rr as roomRekeySchema, Rt as StreamDataFrame, S as CoseSign1, Sn as coordinatorFrameSchema, Sr as relayInboundFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coseHeaderAlgSchema, Tr as revocationClaimsSchema, Tt as RoomMember, U as ManageError, Un as handleRecordSchema, Ur as streamAckFrameSchema, Ut as ThresholdCommit, V as ManageCommand, Vn as gossipFrameSchema, Vr as sfuTrackEntrySchema, Vt as SyncPunchFrame, W as ManageOk, Wn as handshakeFrameSchema, Wr as streamDataFrameSchema, Wt as ThresholdCommitment, X as ObservedAddressFrame, Xn as manageOkSchema, Xr as thresholdCommitmentSchema, Xt as ThresholdSign, Y as NamespacedDomainId, Yn as manageErrorSchema, Yr as thresholdCommitSchema, Yt as ThresholdShareEnvelope, Z as OwnerNamedRoomPath, Zn as manageRequestFrameSchema, Zr as thresholdKeygenConfirmSchema, Zt as ThresholdSubject, _ as CoreCapability, _n as capabilityRequestSchema, _r as ptyResizeSchema, _t as RelayOfferFrame, a as BulkOpen, ai as topologyGetSchema, an as WebrtcOffer, ar as pathTraceSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityVerbSchema, br as relayConnectFrameSchema, bt as RevocationEntry, c as CandidatesFrame, ci as versionGetSchema, cn as bulkCancelSchema, cr as pingFrameSchema, ct as ProcSpawn, d as CapabilityRequest, di as webrtcOfferSchema, dn as bulkOpenSchema, dr as privateUseDomainIdSchema, dt as PtyResize, ei as thresholdShareClaimsSchema, en as TopologyPeers, er as namespacedCapabilitySchema, et as PeerAdvert, f as CapabilityScope, fi as wireCandidateSchema, fn as bulkResumeSchema, fr as procKillSchema, ft as PtySpawn, g as CoordinatorFrame, gn as capabilityGrantSchema, gr as ptyKillSchema, gt as RelayInboundFrame, h as CloseFrame, hn as capabilityGrantOkSchema, hr as protocolVersionSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as tokenClaimsSchema, in as WebrtcIceCandidate, ir as pathTraceOkSchema, it as PrivateUseCapability, j as ExecList, jn as dataHaveFrameSchema, jr as roomMemberSchema, jt as RoomRead, k as DmRoomPath, kn as coseTokenHeadersSchema, kr as roomJoinSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as webrtcAnswerSchema, ln as bulkDataFrameSchema, lr as pongFrameSchema, lt as ProtocolVersion, m as CapabilityVerb, mn as candidatesFrameSchema, mr as procSpawnSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdSignSchema, nn as VersionGet, nr as observedAddressFrameSchema, nt as PingFrame, o as BulkResume, oi as topologyPeersSchema, on as WireCandidate, or as peerAdvertSchema, ot as ProcKill, p as CapabilityToken, pn as candidateKindSchema, pr as procSignalSchema, pt as PtyWrite, q as MessageRef, qn as manageCommandParamsSchema, qr as syncPunchFrameSchema, qt as ThresholdKeygenRound2, r as BulkDataFrame, ri as thresholdSubjectSchema, rn as WebrtcAnswer, rr as ownerNamedRoomPathSchema, rt as PongFrame, s as CandidateKind, si as transferIdSchema, sn as bulkAckFrameSchema, sr as peerIdentitySchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdShareEnvelopeSchema, tn as TransferId, tr as namespacedDomainIdSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as webrtcIceCandidateSchema, un as bulkEndFrameSchema, ur as privateUseCapabilitySchema, ut as PtyKill, v as CoreDomainName, vn as capabilityScopeSchema, vr as ptySpawnSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coreDomainNameSchema, wr as revocationAnnounceFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as closeFrameSchema, xr as relayDataFrameSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityTokenSchema, yr as ptyWriteSchema, yt as RevocationClaims, z as IceCandidateInit, zn as frameSchema, zr as roomSendSchema, zt as StreamEndFrame } from "../protocol-Bi2fzBCc.cjs";
-export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PathTrace, PathTraceOk, PeerAdvert, PeerIdentity, PingFrame, PongFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TopologyGet, TopologyPeers, TransferId, VersionGet, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
+import { $ as PathTraceOk, $n as manageRequestFrameSchema, $r as thresholdCommitSchema, $t as ThresholdSubject, A as DomainId, An as coseSign1Schema, Ar as roomJoinOkSchema, At as RoomPath, B as IdentityKey, Bn as execSessionInfoSchema, Br as roomRekeySchema, Bt as StreamDataFrame, C as CoseTokenHeaders, Cn as closeFrameSchema, Cr as relayDataFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderAlgSchema, Dr as revocationClaimsSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coreDomainNameSchema, Er as revocationAnnounceFrameSchema, Et as RoomMembers, F as GossipFrame, Fn as deviceIdHexSchema, Fr as roomMembersSchema, Ft as SecureHelloFrame, G as ManageRequestFrame, Gn as handleRecordSchema, Gr as sfuTrackEntrySchema, Gt as ThresholdCommit, H as ManageCommandParams, Hn as frameVariantSchema, Hr as secureDataFrameSchema, Ht as StreamSession, I as HandleClaims, In as deviceIdSchema, Ir as roomNoticeClaimsSchema, It as SessionId, J as NamespacedCapability, Jn as identityKeySchema, Jr as streamDataFrameSchema, Jt as ThresholdKeygenRound1, K as ManageResponseFrame, Kn as handshakeFrameSchema, Kr as sfuTrackMapSchema, Kt as ThresholdCommitment, L as HandleRecord, Ln as dmRoomPathSchema, Lr as roomNoticeSchema, Lt as SfuTrackEntry, M as ExecSessionInfo, Mn as dataEntriesFrameSchema, Mr as roomLeaveSchema, Mt as RoomRekey, N as Frame, Nn as dataHaveFrameSchema, Nr as roomMemberSchema, Nt as RoomSend, O as DeviceIdHex, On as coseHeaderKidSchema, Or as revocationEntrySchema, Ot as RoomNotice, P as FrameVariant, Pn as dataRequestFrameSchema, Pr as roomMembersOkSchema, Pt as SecureDataFrame, Q as PathTrace, Qn as manageOkSchema, Qr as thresholdAbortSchema, Qt as ThresholdSign, R as HandshakeFrame, Rn as domainIdSchema, Rr as roomPathSchema, Rt as SfuTrackMap, S as CoseSign1, Sn as capabilityVerbSchema, Sr as relayConnectFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coreCapabilitySchema, Tr as relayOfferFrameSchema, Tt as RoomMember, U as ManageError, Un as gossipFrameSchema, Ur as secureHelloFrameSchema, Ut as SyncPunchFrame, V as ManageCommand, Vn as frameSchema, Vr as roomSendSchema, Vt as StreamEndFrame, W as ManageOk, Wn as handleClaimsSchema, Wr as sessionIdSchema, Wt as ThresholdAbort, X as ObservedAddressFrame, Xn as manageCommandSchema, Xr as streamSessionSchema, Xt as ThresholdShareClaims, Y as NamespacedDomainId, Yn as manageCommandParamsSchema, Yr as streamEndFrameSchema, Yt as ThresholdKeygenRound2, Z as OwnerNamedRoomPath, Zn as manageErrorSchema, Zr as syncPunchFrameSchema, Zt as ThresholdShareEnvelope, _ as CoreCapability, _n as capabilityGrantOkSchema, _r as protocolVersionSchema, _t as RelayOfferFrame, a as BulkOpen, ai as thresholdShareEnvelopeSchema, an as WebrtcAnswer, ar as ownerNamedRoomPathSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityScopeSchema, br as ptySpawnSchema, bt as RevocationEntry, c as CandidatesFrame, ci as tokenClaimsSchema, cn as WireCandidate, cr as peerAdvertSchema, ct as ProcSpawn, d as CapabilityRequest, di as transferIdSchema, dn as bulkDataFrameSchema, dr as pongFrameSchema, dt as PtyResize, ei as thresholdCommitmentSchema, en as TokenClaims, er as manageResponseFrameSchema, et as PeerAdvert, f as CapabilityScope, fi as versionGetSchema, fn as bulkEndFrameSchema, fr as privateUseCapabilitySchema, ft as PtySpawn, g as CoordinatorFrame, gi as wireCandidateSchema, gn as candidatesFrameSchema, gr as procSpawnSchema, gt as RelayInboundFrame, h as CloseFrame, hi as webrtcOfferSchema, hn as candidateKindSchema, hr as procSignalSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as thresholdShareClaimsSchema, in as VersionGet, ir as observedAddressFrameSchema, it as PrivateUseCapability, j as ExecList, jn as coseTokenHeadersSchema, jr as roomJoinSchema, jt as RoomRead, k as DmRoomPath, kn as coseHeaderLabelSchema, kr as roomInviteSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as topologyGetSchema, ln as bulkAckFrameSchema, lr as peerIdentitySchema, lt as ProtocolVersion, m as CapabilityVerb, mi as webrtcIceCandidateSchema, mn as bulkResumeSchema, mr as procKillSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdKeygenRound1Schema, nn as TopologyPeers, nr as namespacedCapabilitySchema, nt as PingFrame, o as BulkResume, oi as thresholdSignSchema, on as WebrtcIceCandidate, or as pathTraceOkSchema, ot as ProcKill, p as CapabilityToken, pi as webrtcAnswerSchema, pn as bulkOpenSchema, pr as privateUseDomainIdSchema, pt as PtyWrite, q as MessageRef, qn as iceCandidateInitSchema, qr as streamAckFrameSchema, qt as ThresholdKeygenConfirm, r as BulkDataFrame, ri as thresholdKeygenRound2Schema, rn as TransferId, rr as namespacedDomainIdSchema, rt as PongFrame, s as CandidateKind, si as thresholdSubjectSchema, sn as WebrtcOffer, sr as pathTraceSchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdKeygenConfirmSchema, tn as TopologyGet, tr as messageRefSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as topologyPeersSchema, un as bulkCancelSchema, ur as pingFrameSchema, ut as PtyKill, v as CoreDomainName, vn as capabilityGrantSchema, vr as ptyKillSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coordinatorFrameSchema, wr as relayInboundFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as capabilityTokenSchema, xr as ptyWriteSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityRequestSchema, yr as ptyResizeSchema, yt as RevocationClaims, z as IceCandidateInit, zn as execListSchema, zr as roomReadSchema, zt as StreamAckFrame } from "../protocol-DCDae3z4.cjs";
+export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PathTrace, PathTraceOk, PeerAdvert, PeerIdentity, PingFrame, PongFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SecureDataFrame, SecureHelloFrame, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TopologyGet, TopologyPeers, TransferId, VersionGet, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, secureDataFrameSchema, secureHelloFrameSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };

package/dist/generated/protocol.d.mts

@@ -1,2 +1,2 @@
-import { $ as PathTraceOk, $n as messageRefSchema, $r as thresholdKeygenRound2Schema, $t as TopologyGet, A as DomainId, An as dataEntriesFrameSchema, Ar as roomLeaveSchema, At as RoomPath, B as IdentityKey, Bn as frameVariantSchema, Br as sessionIdSchema, Bt as StreamSession, C as CoseTokenHeaders, Cn as coreCapabilitySchema, Cr as relayOfferFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderLabelSchema, Dr as roomInviteSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coseHeaderKidSchema, Er as revocationEntrySchema, Et as RoomMembers, F as GossipFrame, Fn as dmRoomPathSchema, Fr as roomNoticeSchema, Ft as SfuTrackEntry, G as ManageRequestFrame, Gn as iceCandidateInitSchema, Gr as streamEndFrameSchema, Gt as ThresholdKeygenConfirm, H as ManageCommandParams, Hn as handleClaimsSchema, Hr as sfuTrackMapSchema, Ht as ThresholdAbort, I as HandleClaims, In as domainIdSchema, Ir as roomPathSchema, It as SfuTrackMap, J as NamespacedCapability, Jn as manageCommandSchema, Jr as thresholdAbortSchema, Jt as ThresholdShareClaims, K as ManageResponseFrame, Kn as identityKeySchema, Kr as streamSessionSchema, Kt as ThresholdKeygenRound1, L as HandleRecord, Ln as execListSchema, Lr as roomReadSchema, Lt as StreamAckFrame, M as ExecSessionInfo, Mn as dataRequestFrameSchema, Mr as roomMembersOkSchema, Mt as RoomRekey, N as Frame, Nn as deviceIdHexSchema, Nr as roomMembersSchema, Nt as RoomSend, O as DeviceIdHex, On as coseSign1Schema, Or as roomJoinOkSchema, Ot as RoomNotice, P as FrameVariant, Pn as deviceIdSchema, Pr as roomNoticeClaimsSchema, Pt as SessionId, Q as PathTrace, Qn as manageResponseFrameSchema, Qr as thresholdKeygenRound1Schema, Qt as TokenClaims, R as HandshakeFrame, Rn as execSessionInfoSchema, Rr as roomRekeySchema, Rt as StreamDataFrame, S as CoseSign1, Sn as coordinatorFrameSchema, Sr as relayInboundFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coseHeaderAlgSchema, Tr as revocationClaimsSchema, Tt as RoomMember, U as ManageError, Un as handleRecordSchema, Ur as streamAckFrameSchema, Ut as ThresholdCommit, V as ManageCommand, Vn as gossipFrameSchema, Vr as sfuTrackEntrySchema, Vt as SyncPunchFrame, W as ManageOk, Wn as handshakeFrameSchema, Wr as streamDataFrameSchema, Wt as ThresholdCommitment, X as ObservedAddressFrame, Xn as manageOkSchema, Xr as thresholdCommitmentSchema, Xt as ThresholdSign, Y as NamespacedDomainId, Yn as manageErrorSchema, Yr as thresholdCommitSchema, Yt as ThresholdShareEnvelope, Z as OwnerNamedRoomPath, Zn as manageRequestFrameSchema, Zr as thresholdKeygenConfirmSchema, Zt as ThresholdSubject, _ as CoreCapability, _n as capabilityRequestSchema, _r as ptyResizeSchema, _t as RelayOfferFrame, a as BulkOpen, ai as topologyGetSchema, an as WebrtcOffer, ar as pathTraceSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityVerbSchema, br as relayConnectFrameSchema, bt as RevocationEntry, c as CandidatesFrame, ci as versionGetSchema, cn as bulkCancelSchema, cr as pingFrameSchema, ct as ProcSpawn, d as CapabilityRequest, di as webrtcOfferSchema, dn as bulkOpenSchema, dr as privateUseDomainIdSchema, dt as PtyResize, ei as thresholdShareClaimsSchema, en as TopologyPeers, er as namespacedCapabilitySchema, et as PeerAdvert, f as CapabilityScope, fi as wireCandidateSchema, fn as bulkResumeSchema, fr as procKillSchema, ft as PtySpawn, g as CoordinatorFrame, gn as capabilityGrantSchema, gr as ptyKillSchema, gt as RelayInboundFrame, h as CloseFrame, hn as capabilityGrantOkSchema, hr as protocolVersionSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as tokenClaimsSchema, in as WebrtcIceCandidate, ir as pathTraceOkSchema, it as PrivateUseCapability, j as ExecList, jn as dataHaveFrameSchema, jr as roomMemberSchema, jt as RoomRead, k as DmRoomPath, kn as coseTokenHeadersSchema, kr as roomJoinSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as webrtcAnswerSchema, ln as bulkDataFrameSchema, lr as pongFrameSchema, lt as ProtocolVersion, m as CapabilityVerb, mn as candidatesFrameSchema, mr as procSpawnSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdSignSchema, nn as VersionGet, nr as observedAddressFrameSchema, nt as PingFrame, o as BulkResume, oi as topologyPeersSchema, on as WireCandidate, or as peerAdvertSchema, ot as ProcKill, p as CapabilityToken, pn as candidateKindSchema, pr as procSignalSchema, pt as PtyWrite, q as MessageRef, qn as manageCommandParamsSchema, qr as syncPunchFrameSchema, qt as ThresholdKeygenRound2, r as BulkDataFrame, ri as thresholdSubjectSchema, rn as WebrtcAnswer, rr as ownerNamedRoomPathSchema, rt as PongFrame, s as CandidateKind, si as transferIdSchema, sn as bulkAckFrameSchema, sr as peerIdentitySchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdShareEnvelopeSchema, tn as TransferId, tr as namespacedDomainIdSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as webrtcIceCandidateSchema, un as bulkEndFrameSchema, ur as privateUseCapabilitySchema, ut as PtyKill, v as CoreDomainName, vn as capabilityScopeSchema, vr as ptySpawnSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coreDomainNameSchema, wr as revocationAnnounceFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as closeFrameSchema, xr as relayDataFrameSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityTokenSchema, yr as ptyWriteSchema, yt as RevocationClaims, z as IceCandidateInit, zn as frameSchema, zr as roomSendSchema, zt as StreamEndFrame } from "../protocol-Bi2fzBCc.mjs";
-export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PathTrace, PathTraceOk, PeerAdvert, PeerIdentity, PingFrame, PongFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TopologyGet, TopologyPeers, TransferId, VersionGet, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
+import { $ as PathTraceOk, $n as manageRequestFrameSchema, $r as thresholdCommitSchema, $t as ThresholdSubject, A as DomainId, An as coseSign1Schema, Ar as roomJoinOkSchema, At as RoomPath, B as IdentityKey, Bn as execSessionInfoSchema, Br as roomRekeySchema, Bt as StreamDataFrame, C as CoseTokenHeaders, Cn as closeFrameSchema, Cr as relayDataFrameSchema, Ct as RoomJoinOk, D as DeviceId, Dn as coseHeaderAlgSchema, Dr as revocationClaimsSchema, Dt as RoomMembersOk, E as DataRequestFrame, En as coreDomainNameSchema, Er as revocationAnnounceFrameSchema, Et as RoomMembers, F as GossipFrame, Fn as deviceIdHexSchema, Fr as roomMembersSchema, Ft as SecureHelloFrame, G as ManageRequestFrame, Gn as handleRecordSchema, Gr as sfuTrackEntrySchema, Gt as ThresholdCommit, H as ManageCommandParams, Hn as frameVariantSchema, Hr as secureDataFrameSchema, Ht as StreamSession, I as HandleClaims, In as deviceIdSchema, Ir as roomNoticeClaimsSchema, It as SessionId, J as NamespacedCapability, Jn as identityKeySchema, Jr as streamDataFrameSchema, Jt as ThresholdKeygenRound1, K as ManageResponseFrame, Kn as handshakeFrameSchema, Kr as sfuTrackMapSchema, Kt as ThresholdCommitment, L as HandleRecord, Ln as dmRoomPathSchema, Lr as roomNoticeSchema, Lt as SfuTrackEntry, M as ExecSessionInfo, Mn as dataEntriesFrameSchema, Mr as roomLeaveSchema, Mt as RoomRekey, N as Frame, Nn as dataHaveFrameSchema, Nr as roomMemberSchema, Nt as RoomSend, O as DeviceIdHex, On as coseHeaderKidSchema, Or as revocationEntrySchema, Ot as RoomNotice, P as FrameVariant, Pn as dataRequestFrameSchema, Pr as roomMembersOkSchema, Pt as SecureDataFrame, Q as PathTrace, Qn as manageOkSchema, Qr as thresholdAbortSchema, Qt as ThresholdSign, R as HandshakeFrame, Rn as domainIdSchema, Rr as roomPathSchema, Rt as SfuTrackMap, S as CoseSign1, Sn as capabilityVerbSchema, Sr as relayConnectFrameSchema, St as RoomJoin, T as DataHaveFrame, Tn as coreCapabilitySchema, Tr as relayOfferFrameSchema, Tt as RoomMember, U as ManageError, Un as gossipFrameSchema, Ur as secureHelloFrameSchema, Ut as SyncPunchFrame, V as ManageCommand, Vn as frameSchema, Vr as roomSendSchema, Vt as StreamEndFrame, W as ManageOk, Wn as handleClaimsSchema, Wr as sessionIdSchema, Wt as ThresholdAbort, X as ObservedAddressFrame, Xn as manageCommandSchema, Xr as streamSessionSchema, Xt as ThresholdShareClaims, Y as NamespacedDomainId, Yn as manageCommandParamsSchema, Yr as streamEndFrameSchema, Yt as ThresholdKeygenRound2, Z as OwnerNamedRoomPath, Zn as manageErrorSchema, Zr as syncPunchFrameSchema, Zt as ThresholdShareEnvelope, _ as CoreCapability, _n as capabilityGrantOkSchema, _r as protocolVersionSchema, _t as RelayOfferFrame, a as BulkOpen, ai as thresholdShareEnvelopeSchema, an as WebrtcAnswer, ar as ownerNamedRoomPathSchema, at as PrivateUseDomainId, b as CoseHeaderKid, bn as capabilityScopeSchema, br as ptySpawnSchema, bt as RevocationEntry, c as CandidatesFrame, ci as tokenClaimsSchema, cn as WireCandidate, cr as peerAdvertSchema, ct as ProcSpawn, d as CapabilityRequest, di as transferIdSchema, dn as bulkDataFrameSchema, dr as pongFrameSchema, dt as PtyResize, ei as thresholdCommitmentSchema, en as TokenClaims, er as manageResponseFrameSchema, et as PeerAdvert, f as CapabilityScope, fi as versionGetSchema, fn as bulkEndFrameSchema, fr as privateUseCapabilitySchema, ft as PtySpawn, g as CoordinatorFrame, gi as wireCandidateSchema, gn as candidatesFrameSchema, gr as procSpawnSchema, gt as RelayInboundFrame, h as CloseFrame, hi as webrtcOfferSchema, hn as candidateKindSchema, hr as procSignalSchema, ht as RelayDataFrame, i as BulkEndFrame, ii as thresholdShareClaimsSchema, in as VersionGet, ir as observedAddressFrameSchema, it as PrivateUseCapability, j as ExecList, jn as coseTokenHeadersSchema, jr as roomJoinSchema, jt as RoomRead, k as DmRoomPath, kn as coseHeaderLabelSchema, kr as roomInviteSchema, kt as RoomNoticeClaims, l as CapabilityGrant, li as topologyGetSchema, ln as bulkAckFrameSchema, lr as peerIdentitySchema, lt as ProtocolVersion, m as CapabilityVerb, mi as webrtcIceCandidateSchema, mn as bulkResumeSchema, mr as procKillSchema, mt as RelayConnectFrame, n as BulkCancel, ni as thresholdKeygenRound1Schema, nn as TopologyPeers, nr as namespacedCapabilitySchema, nt as PingFrame, o as BulkResume, oi as thresholdSignSchema, on as WebrtcIceCandidate, or as pathTraceOkSchema, ot as ProcKill, p as CapabilityToken, pi as webrtcAnswerSchema, pn as bulkOpenSchema, pr as privateUseDomainIdSchema, pt as PtyWrite, q as MessageRef, qn as iceCandidateInitSchema, qr as streamAckFrameSchema, qt as ThresholdKeygenConfirm, r as BulkDataFrame, ri as thresholdKeygenRound2Schema, rn as TransferId, rr as namespacedDomainIdSchema, rt as PongFrame, s as CandidateKind, si as thresholdSubjectSchema, sn as WebrtcOffer, sr as pathTraceSchema, st as ProcSignal, t as BulkAckFrame, ti as thresholdKeygenConfirmSchema, tn as TopologyGet, tr as messageRefSchema, tt as PeerIdentity, u as CapabilityGrantOk, ui as topologyPeersSchema, un as bulkCancelSchema, ur as pingFrameSchema, ut as PtyKill, v as CoreDomainName, vn as capabilityGrantSchema, vr as ptyKillSchema, vt as RevocationAnnounceFrame, w as DataEntriesFrame, wn as coordinatorFrameSchema, wr as relayInboundFrameSchema, wt as RoomLeave, x as CoseHeaderLabel, xn as capabilityTokenSchema, xr as ptyWriteSchema, xt as RoomInvite, y as CoseHeaderAlg, yn as capabilityRequestSchema, yr as ptyResizeSchema, yt as RevocationClaims, z as IceCandidateInit, zn as execListSchema, zr as roomReadSchema, zt as StreamAckFrame } from "../protocol-DCDae3z4.mjs";
+export { BulkAckFrame, BulkCancel, BulkDataFrame, BulkEndFrame, BulkOpen, BulkResume, CandidateKind, CandidatesFrame, CapabilityGrant, CapabilityGrantOk, CapabilityRequest, CapabilityScope, CapabilityToken, CapabilityVerb, CloseFrame, CoordinatorFrame, CoreCapability, CoreDomainName, CoseHeaderAlg, CoseHeaderKid, CoseHeaderLabel, CoseSign1, CoseTokenHeaders, DataEntriesFrame, DataHaveFrame, DataRequestFrame, DeviceId, DeviceIdHex, DmRoomPath, DomainId, ExecList, ExecSessionInfo, Frame, FrameVariant, GossipFrame, HandleClaims, HandleRecord, HandshakeFrame, IceCandidateInit, IdentityKey, ManageCommand, ManageCommandParams, ManageError, ManageOk, ManageRequestFrame, ManageResponseFrame, MessageRef, NamespacedCapability, NamespacedDomainId, ObservedAddressFrame, OwnerNamedRoomPath, PathTrace, PathTraceOk, PeerAdvert, PeerIdentity, PingFrame, PongFrame, PrivateUseCapability, PrivateUseDomainId, ProcKill, ProcSignal, ProcSpawn, ProtocolVersion, PtyKill, PtyResize, PtySpawn, PtyWrite, RelayConnectFrame, RelayDataFrame, RelayInboundFrame, RelayOfferFrame, RevocationAnnounceFrame, RevocationClaims, RevocationEntry, RoomInvite, RoomJoin, RoomJoinOk, RoomLeave, RoomMember, RoomMembers, RoomMembersOk, RoomNotice, RoomNoticeClaims, RoomPath, RoomRead, RoomRekey, RoomSend, SecureDataFrame, SecureHelloFrame, SessionId, SfuTrackEntry, SfuTrackMap, StreamAckFrame, StreamDataFrame, StreamEndFrame, StreamSession, SyncPunchFrame, ThresholdAbort, ThresholdCommit, ThresholdCommitment, ThresholdKeygenConfirm, ThresholdKeygenRound1, ThresholdKeygenRound2, ThresholdShareClaims, ThresholdShareEnvelope, ThresholdSign, ThresholdSubject, TokenClaims, TopologyGet, TopologyPeers, TransferId, VersionGet, WebrtcAnswer, WebrtcIceCandidate, WebrtcOffer, WireCandidate, bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, secureDataFrameSchema, secureHelloFrameSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };

package/dist/generated/protocol.mjs

@@ -179,7 +179,9 @@ const frameVariantSchema = z.lazy(() => z.union([
 	z.lazy(() => dataEntriesFrameSchema),
 	z.lazy(() => bulkDataFrameSchema),
 	z.lazy(() => bulkAckFrameSchema),
-	z.lazy(() => bulkEndFrameSchema)
+	z.lazy(() => bulkEndFrameSchema),
+	z.lazy(() => secureHelloFrameSchema),
+	z.lazy(() => secureDataFrameSchema)
 ]));
 const frameSchema = z.lazy(() => z.lazy(() => frameVariantSchema));
 const protocolVersionSchema = z.lazy(() => z.number().int().nonnegative());
@@ -335,6 +337,19 @@ const roomNoticeClaimsSchema = z.lazy(() => z.object({
 	"valid-until": z.number().int().nonnegative().optional(),
 	"key-epoch": z.number().int().nonnegative().optional()
 }).catchall(z.unknown()));
+const secureHelloFrameSchema = z.lazy(() => z.object({
+	"type": z.literal("secure-hello"),
+	"ephemeral-key": z.instanceof(Uint8Array).refine((v) => v.length === 65, { message: "expected exactly 65 bytes" }),
+	"nonce": z.instanceof(Uint8Array).refine((v) => v.length === 16, { message: "expected exactly 16 bytes" }),
+	"identity-key": z.lazy(() => identityKeySchema),
+	"to-device": z.lazy(() => deviceIdSchema),
+	"signature": z.instanceof(Uint8Array)
+}));
+const secureDataFrameSchema = z.lazy(() => z.object({
+	"type": z.literal("secure-data"),
+	"counter": z.number().int().nonnegative(),
+	"ciphertext": z.instanceof(Uint8Array)
+}));
 const streamSessionSchema = z.lazy(() => z.number().int().nonnegative());
 const streamDataFrameSchema = z.lazy(() => z.object({
 	"type": z.literal("stream-data"),
@@ -554,4 +569,4 @@ const iceCandidateInitSchema = z.lazy(() => z.object({
 	"username-fragment": z.string().optional()
 }));
 //#endregion
-export { bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };
+export { bulkAckFrameSchema, bulkCancelSchema, bulkDataFrameSchema, bulkEndFrameSchema, bulkOpenSchema, bulkResumeSchema, candidateKindSchema, candidatesFrameSchema, capabilityGrantOkSchema, capabilityGrantSchema, capabilityRequestSchema, capabilityScopeSchema, capabilityTokenSchema, capabilityVerbSchema, closeFrameSchema, coordinatorFrameSchema, coreCapabilitySchema, coreDomainNameSchema, coseHeaderAlgSchema, coseHeaderKidSchema, coseHeaderLabelSchema, coseSign1Schema, coseTokenHeadersSchema, dataEntriesFrameSchema, dataHaveFrameSchema, dataRequestFrameSchema, deviceIdHexSchema, deviceIdSchema, dmRoomPathSchema, domainIdSchema, execListSchema, execSessionInfoSchema, frameSchema, frameVariantSchema, gossipFrameSchema, handleClaimsSchema, handleRecordSchema, handshakeFrameSchema, iceCandidateInitSchema, identityKeySchema, manageCommandParamsSchema, manageCommandSchema, manageErrorSchema, manageOkSchema, manageRequestFrameSchema, manageResponseFrameSchema, messageRefSchema, namespacedCapabilitySchema, namespacedDomainIdSchema, observedAddressFrameSchema, ownerNamedRoomPathSchema, pathTraceOkSchema, pathTraceSchema, peerAdvertSchema, peerIdentitySchema, pingFrameSchema, pongFrameSchema, privateUseCapabilitySchema, privateUseDomainIdSchema, procKillSchema, procSignalSchema, procSpawnSchema, protocolVersionSchema, ptyKillSchema, ptyResizeSchema, ptySpawnSchema, ptyWriteSchema, relayConnectFrameSchema, relayDataFrameSchema, relayInboundFrameSchema, relayOfferFrameSchema, revocationAnnounceFrameSchema, revocationClaimsSchema, revocationEntrySchema, roomInviteSchema, roomJoinOkSchema, roomJoinSchema, roomLeaveSchema, roomMemberSchema, roomMembersOkSchema, roomMembersSchema, roomNoticeClaimsSchema, roomNoticeSchema, roomPathSchema, roomReadSchema, roomRekeySchema, roomSendSchema, secureDataFrameSchema, secureHelloFrameSchema, sessionIdSchema, sfuTrackEntrySchema, sfuTrackMapSchema, streamAckFrameSchema, streamDataFrameSchema, streamEndFrameSchema, streamSessionSchema, syncPunchFrameSchema, thresholdAbortSchema, thresholdCommitSchema, thresholdCommitmentSchema, thresholdKeygenConfirmSchema, thresholdKeygenRound1Schema, thresholdKeygenRound2Schema, thresholdShareClaimsSchema, thresholdShareEnvelopeSchema, thresholdSignSchema, thresholdSubjectSchema, tokenClaimsSchema, topologyGetSchema, topologyPeersSchema, transferIdSchema, versionGetSchema, webrtcAnswerSchema, webrtcIceCandidateSchema, webrtcOfferSchema, wireCandidateSchema };

package/dist/{identity-DImeXZcq.d.cts → identity-DVCNuFLG.d.cts}

@@ -1,4 +1,4 @@
-import { B as IdentityKey, D as DeviceId } from "./protocol-Bi2fzBCc.cjs";
+import { B as IdentityKey, D as DeviceId } from "./protocol-DCDae3z4.cjs";
 //#region src/ports/identity.d.ts
 /**
  * Wraps the local node's own identity plus the signing/verification primitives capability-token handling needs -- never hardcoded to one crypto library's own API shape (Node's webcrypto, a WASM implementation, a hardware key, etc. can all satisfy this same contract).

package/dist/{identity-Dc4xmwp3.d.mts → identity-DcaYgjXT.d.mts}

@@ -1,4 +1,4 @@
-import { B as IdentityKey, D as DeviceId } from "./protocol-Bi2fzBCc.mjs";
+import { B as IdentityKey, D as DeviceId } from "./protocol-DCDae3z4.mjs";
 //#region src/ports/identity.d.ts
 /**
  * Wraps the local node's own identity plus the signing/verification primitives capability-token handling needs -- never hardcoded to one crypto library's own API shape (Node's webcrypto, a WASM implementation, a hardware key, etc. can all satisfy this same contract).

package/dist/ports/identity.d.cts

@@ -1,2 +1,2 @@
-import { t as IdentityPort } from "../identity-DImeXZcq.cjs";
+import { t as IdentityPort } from "../identity-DVCNuFLG.cjs";
 export { IdentityPort };

package/dist/ports/identity.d.mts

@@ -1,2 +1,2 @@
-import { t as IdentityPort } from "../identity-Dc4xmwp3.mjs";
+import { t as IdentityPort } from "../identity-DcaYgjXT.mjs";
 export { IdentityPort };

package/dist/ports/transport.d.cts

@@ -1,2 +1,2 @@
-import { n as Listener, r as Transport, t as Connection } from "../transport-Cq_odHy3.cjs";
+import { n as Listener, r as Transport, t as Connection } from "../transport-CfW7fsGK.cjs";
 export { Connection, Listener, Transport };

package/dist/ports/transport.d.mts

@@ -1,2 +1,2 @@
-import { n as Listener, r as Transport, t as Connection } from "../transport-GcJ4LYVE.mjs";
+import { n as Listener, r as Transport, t as Connection } from "../transport-iLBxIkRS.mjs";
 export { Connection, Listener, Transport };

package/dist/{protocol-Bi2fzBCc.d.cts → protocol-DCDae3z4.d.cts}

@@ -569,6 +569,20 @@ declare const frameVariantSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.Zod
   type: z.ZodLiteral<"bulk-end">;
   "transfer-id": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
   digest: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-hello">;
+  "ephemeral-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  nonce: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  "to-device": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-data">;
+  counter: z.ZodNumber;
+  ciphertext: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
 }, z.core.$strip>>>]>>;
 declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
   type: z.ZodLiteral<"handshake">;
@@ -860,6 +874,20 @@ declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.
   type: z.ZodLiteral<"bulk-end">;
   "transfer-id": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
   digest: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-hello">;
+  "ephemeral-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  nonce: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  "to-device": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-data">;
+  counter: z.ZodNumber;
+  ciphertext: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
 }, z.core.$strip>>>]>>>>;
 declare const protocolVersionSchema: z.ZodLazy<z.ZodNumber>;
 declare const domainIdSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.ZodLiteral<"core/management">, z.ZodLiteral<"core/exec">, z.ZodLiteral<"core/data">, z.ZodLiteral<"core/federation">, z.ZodLiteral<"core/webrtc">, z.ZodLiteral<"core/room">, z.ZodLiteral<"core/bulk">, z.ZodLiteral<"core/version">]>>>, z.ZodLazy<z.ZodLazy<z.ZodString>>, z.ZodLazy<z.ZodLazy<z.ZodString>>]>>;
@@ -1391,6 +1419,22 @@ declare const roomNoticeClaimsSchema: z.ZodLazy<z.ZodObject<{
   "valid-until": z.ZodOptional<z.ZodNumber>;
   "key-epoch": z.ZodOptional<z.ZodNumber>;
 }, z.core.$catchall<z.ZodUnknown>>>;
+declare const secureHelloFrameSchema: z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-hello">;
+  "ephemeral-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  nonce: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  "to-device": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const secureDataFrameSchema: z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-data">;
+  counter: z.ZodNumber;
+  ciphertext: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
 declare const streamSessionSchema: z.ZodLazy<z.ZodNumber>;
 declare const streamDataFrameSchema: z.ZodLazy<z.ZodObject<{
   type: z.ZodLiteral<"stream-data">;
@@ -1712,6 +1756,8 @@ type RoomJoinOk = z.infer<typeof roomJoinOkSchema>;
 type RoomMembersOk = z.infer<typeof roomMembersOkSchema>;
 type RoomNotice = z.infer<typeof roomNoticeSchema>;
 type RoomNoticeClaims = z.infer<typeof roomNoticeClaimsSchema>;
+type SecureHelloFrame = z.infer<typeof secureHelloFrameSchema>;
+type SecureDataFrame = z.infer<typeof secureDataFrameSchema>;
 type StreamSession = z.infer<typeof streamSessionSchema>;
 type StreamDataFrame = z.infer<typeof streamDataFrameSchema>;
 type StreamAckFrame = z.infer<typeof streamAckFrameSchema>;
@@ -1762,4 +1808,4 @@ type WebrtcAnswer = z.infer<typeof webrtcAnswerSchema>;
 type WebrtcIceCandidate = z.infer<typeof webrtcIceCandidateSchema>;
 type IceCandidateInit = z.infer<typeof iceCandidateInitSchema>;
 //#endregion
-export { PathTraceOk as $, messageRefSchema as $n, thresholdKeygenRound2Schema as $r, TopologyGet as $t, DomainId as A, dataEntriesFrameSchema as An, roomLeaveSchema as Ar, RoomPath as At, IdentityKey as B, frameVariantSchema as Bn, sessionIdSchema as Br, StreamSession as Bt, CoseTokenHeaders as C, coreCapabilitySchema as Cn, relayOfferFrameSchema as Cr, RoomJoinOk as Ct, DeviceId as D, coseHeaderLabelSchema as Dn, roomInviteSchema as Dr, RoomMembersOk as Dt, DataRequestFrame as E, coseHeaderKidSchema as En, revocationEntrySchema as Er, RoomMembers as Et, GossipFrame as F, dmRoomPathSchema as Fn, roomNoticeSchema as Fr, SfuTrackEntry as Ft, ManageRequestFrame as G, iceCandidateInitSchema as Gn, streamEndFrameSchema as Gr, ThresholdKeygenConfirm as Gt, ManageCommandParams as H, handleClaimsSchema as Hn, sfuTrackMapSchema as Hr, ThresholdAbort as Ht, HandleClaims as I, domainIdSchema as In, roomPathSchema as Ir, SfuTrackMap as It, NamespacedCapability as J, manageCommandSchema as Jn, thresholdAbortSchema as Jr, ThresholdShareClaims as Jt, ManageResponseFrame as K, identityKeySchema as Kn, streamSessionSchema as Kr, ThresholdKeygenRound1 as Kt, HandleRecord as L, execListSchema as Ln, roomReadSchema as Lr, StreamAckFrame as Lt, ExecSessionInfo as M, dataRequestFrameSchema as Mn, roomMembersOkSchema as Mr, RoomRekey as Mt, Frame as N, deviceIdHexSchema as Nn, roomMembersSchema as Nr, RoomSend as Nt, DeviceIdHex as O, coseSign1Schema as On, roomJoinOkSchema as Or, RoomNotice as Ot, FrameVariant as P, deviceIdSchema as Pn, roomNoticeClaimsSchema as Pr, SessionId as Pt, PathTrace as Q, manageResponseFrameSchema as Qn, thresholdKeygenRound1Schema as Qr, TokenClaims as Qt, HandshakeFrame as R, execSessionInfoSchema as Rn, roomRekeySchema as Rr, StreamDataFrame as Rt, CoseSign1 as S, coordinatorFrameSchema as Sn, relayInboundFrameSchema as Sr, RoomJoin as St, DataHaveFrame as T, coseHeaderAlgSchema as Tn, revocationClaimsSchema as Tr, RoomMember as Tt, ManageError as U, handleRecordSchema as Un, streamAckFrameSchema as Ur, ThresholdCommit as Ut, ManageCommand as V, gossipFrameSchema as Vn, sfuTrackEntrySchema as Vr, SyncPunchFrame as Vt, ManageOk as W, handshakeFrameSchema as Wn, streamDataFrameSchema as Wr, ThresholdCommitment as Wt, ObservedAddressFrame as X, manageOkSchema as Xn, thresholdCommitmentSchema as Xr, ThresholdSign as Xt, NamespacedDomainId as Y, manageErrorSchema as Yn, thresholdCommitSchema as Yr, ThresholdShareEnvelope as Yt, OwnerNamedRoomPath as Z, manageRequestFrameSchema as Zn, thresholdKeygenConfirmSchema as Zr, ThresholdSubject as Zt, CoreCapability as _, capabilityRequestSchema as _n, ptyResizeSchema as _r, RelayOfferFrame as _t, BulkOpen as a, topologyGetSchema as ai, WebrtcOffer as an, pathTraceSchema as ar, PrivateUseDomainId as at, CoseHeaderKid as b, capabilityVerbSchema as bn, relayConnectFrameSchema as br, RevocationEntry as bt, CandidatesFrame as c, versionGetSchema as ci, bulkCancelSchema as cn, pingFrameSchema as cr, ProcSpawn as ct, CapabilityRequest as d, webrtcOfferSchema as di, bulkOpenSchema as dn, privateUseDomainIdSchema as dr, PtyResize as dt, thresholdShareClaimsSchema as ei, TopologyPeers as en, namespacedCapabilitySchema as er, PeerAdvert as et, CapabilityScope as f, wireCandidateSchema as fi, bulkResumeSchema as fn, procKillSchema as fr, PtySpawn as ft, CoordinatorFrame as g, capabilityGrantSchema as gn, ptyKillSchema as gr, RelayInboundFrame as gt, CloseFrame as h, capabilityGrantOkSchema as hn, protocolVersionSchema as hr, RelayDataFrame as ht, BulkEndFrame as i, tokenClaimsSchema as ii, WebrtcIceCandidate as in, pathTraceOkSchema as ir, PrivateUseCapability as it, ExecList as j, dataHaveFrameSchema as jn, roomMemberSchema as jr, RoomRead as jt, DmRoomPath as k, coseTokenHeadersSchema as kn, roomJoinSchema as kr, RoomNoticeClaims as kt, CapabilityGrant as l, webrtcAnswerSchema as li, bulkDataFrameSchema as ln, pongFrameSchema as lr, ProtocolVersion as lt, CapabilityVerb as m, candidatesFrameSchema as mn, procSpawnSchema as mr, RelayConnectFrame as mt, BulkCancel as n, thresholdSignSchema as ni, VersionGet as nn, observedAddressFrameSchema as nr, PingFrame as nt, BulkResume as o, topologyPeersSchema as oi, WireCandidate as on, peerAdvertSchema as or, ProcKill as ot, CapabilityToken as p, candidateKindSchema as pn, procSignalSchema as pr, PtyWrite as pt, MessageRef as q, manageCommandParamsSchema as qn, syncPunchFrameSchema as qr, ThresholdKeygenRound2 as qt, BulkDataFrame as r, thresholdSubjectSchema as ri, WebrtcAnswer as rn, ownerNamedRoomPathSchema as rr, PongFrame as rt, CandidateKind as s, transferIdSchema as si, bulkAckFrameSchema as sn, peerIdentitySchema as sr, ProcSignal as st, BulkAckFrame as t, thresholdShareEnvelopeSchema as ti, TransferId as tn, namespacedDomainIdSchema as tr, PeerIdentity as tt, CapabilityGrantOk as u, webrtcIceCandidateSchema as ui, bulkEndFrameSchema as un, privateUseCapabilitySchema as ur, PtyKill as ut, CoreDomainName as v, capabilityScopeSchema as vn, ptySpawnSchema as vr, RevocationAnnounceFrame as vt, DataEntriesFrame as w, coreDomainNameSchema as wn, revocationAnnounceFrameSchema as wr, RoomLeave as wt, CoseHeaderLabel as x, closeFrameSchema as xn, relayDataFrameSchema as xr, RoomInvite as xt, CoseHeaderAlg as y, capabilityTokenSchema as yn, ptyWriteSchema as yr, RevocationClaims as yt, IceCandidateInit as z, frameSchema as zn, roomSendSchema as zr, StreamEndFrame as zt };
+export { PathTraceOk as $, manageRequestFrameSchema as $n, thresholdCommitSchema as $r, ThresholdSubject as $t, DomainId as A, coseSign1Schema as An, roomJoinOkSchema as Ar, RoomPath as At, IdentityKey as B, execSessionInfoSchema as Bn, roomRekeySchema as Br, StreamDataFrame as Bt, CoseTokenHeaders as C, closeFrameSchema as Cn, relayDataFrameSchema as Cr, RoomJoinOk as Ct, DeviceId as D, coseHeaderAlgSchema as Dn, revocationClaimsSchema as Dr, RoomMembersOk as Dt, DataRequestFrame as E, coreDomainNameSchema as En, revocationAnnounceFrameSchema as Er, RoomMembers as Et, GossipFrame as F, deviceIdHexSchema as Fn, roomMembersSchema as Fr, SecureHelloFrame as Ft, ManageRequestFrame as G, handleRecordSchema as Gn, sfuTrackEntrySchema as Gr, ThresholdCommit as Gt, ManageCommandParams as H, frameVariantSchema as Hn, secureDataFrameSchema as Hr, StreamSession as Ht, HandleClaims as I, deviceIdSchema as In, roomNoticeClaimsSchema as Ir, SessionId as It, NamespacedCapability as J, identityKeySchema as Jn, streamDataFrameSchema as Jr, ThresholdKeygenRound1 as Jt, ManageResponseFrame as K, handshakeFrameSchema as Kn, sfuTrackMapSchema as Kr, ThresholdCommitment as Kt, HandleRecord as L, dmRoomPathSchema as Ln, roomNoticeSchema as Lr, SfuTrackEntry as Lt, ExecSessionInfo as M, dataEntriesFrameSchema as Mn, roomLeaveSchema as Mr, RoomRekey as Mt, Frame as N, dataHaveFrameSchema as Nn, roomMemberSchema as Nr, RoomSend as Nt, DeviceIdHex as O, coseHeaderKidSchema as On, revocationEntrySchema as Or, RoomNotice as Ot, FrameVariant as P, dataRequestFrameSchema as Pn, roomMembersOkSchema as Pr, SecureDataFrame as Pt, PathTrace as Q, manageOkSchema as Qn, thresholdAbortSchema as Qr, ThresholdSign as Qt, HandshakeFrame as R, domainIdSchema as Rn, roomPathSchema as Rr, SfuTrackMap as Rt, CoseSign1 as S, capabilityVerbSchema as Sn, relayConnectFrameSchema as Sr, RoomJoin as St, DataHaveFrame as T, coreCapabilitySchema as Tn, relayOfferFrameSchema as Tr, RoomMember as Tt, ManageError as U, gossipFrameSchema as Un, secureHelloFrameSchema as Ur, SyncPunchFrame as Ut, ManageCommand as V, frameSchema as Vn, roomSendSchema as Vr, StreamEndFrame as Vt, ManageOk as W, handleClaimsSchema as Wn, sessionIdSchema as Wr, ThresholdAbort as Wt, ObservedAddressFrame as X, manageCommandSchema as Xn, streamSessionSchema as Xr, ThresholdShareClaims as Xt, NamespacedDomainId as Y, manageCommandParamsSchema as Yn, streamEndFrameSchema as Yr, ThresholdKeygenRound2 as Yt, OwnerNamedRoomPath as Z, manageErrorSchema as Zn, syncPunchFrameSchema as Zr, ThresholdShareEnvelope as Zt, CoreCapability as _, capabilityGrantOkSchema as _n, protocolVersionSchema as _r, RelayOfferFrame as _t, BulkOpen as a, thresholdShareEnvelopeSchema as ai, WebrtcAnswer as an, ownerNamedRoomPathSchema as ar, PrivateUseDomainId as at, CoseHeaderKid as b, capabilityScopeSchema as bn, ptySpawnSchema as br, RevocationEntry as bt, CandidatesFrame as c, tokenClaimsSchema as ci, WireCandidate as cn, peerAdvertSchema as cr, ProcSpawn as ct, CapabilityRequest as d, transferIdSchema as di, bulkDataFrameSchema as dn, pongFrameSchema as dr, PtyResize as dt, thresholdCommitmentSchema as ei, TokenClaims as en, manageResponseFrameSchema as er, PeerAdvert as et, CapabilityScope as f, versionGetSchema as fi, bulkEndFrameSchema as fn, privateUseCapabilitySchema as fr, PtySpawn as ft, CoordinatorFrame as g, wireCandidateSchema as gi, candidatesFrameSchema as gn, procSpawnSchema as gr, RelayInboundFrame as gt, CloseFrame as h, webrtcOfferSchema as hi, candidateKindSchema as hn, procSignalSchema as hr, RelayDataFrame as ht, BulkEndFrame as i, thresholdShareClaimsSchema as ii, VersionGet as in, observedAddressFrameSchema as ir, PrivateUseCapability as it, ExecList as j, coseTokenHeadersSchema as jn, roomJoinSchema as jr, RoomRead as jt, DmRoomPath as k, coseHeaderLabelSchema as kn, roomInviteSchema as kr, RoomNoticeClaims as kt, CapabilityGrant as l, topologyGetSchema as li, bulkAckFrameSchema as ln, peerIdentitySchema as lr, ProtocolVersion as lt, CapabilityVerb as m, webrtcIceCandidateSchema as mi, bulkResumeSchema as mn, procKillSchema as mr, RelayConnectFrame as mt, BulkCancel as n, thresholdKeygenRound1Schema as ni, TopologyPeers as nn, namespacedCapabilitySchema as nr, PingFrame as nt, BulkResume as o, thresholdSignSchema as oi, WebrtcIceCandidate as on, pathTraceOkSchema as or, ProcKill as ot, CapabilityToken as p, webrtcAnswerSchema as pi, bulkOpenSchema as pn, privateUseDomainIdSchema as pr, PtyWrite as pt, MessageRef as q, iceCandidateInitSchema as qn, streamAckFrameSchema as qr, ThresholdKeygenConfirm as qt, BulkDataFrame as r, thresholdKeygenRound2Schema as ri, TransferId as rn, namespacedDomainIdSchema as rr, PongFrame as rt, CandidateKind as s, thresholdSubjectSchema as si, WebrtcOffer as sn, pathTraceSchema as sr, ProcSignal as st, BulkAckFrame as t, thresholdKeygenConfirmSchema as ti, TopologyGet as tn, messageRefSchema as tr, PeerIdentity as tt, CapabilityGrantOk as u, topologyPeersSchema as ui, bulkCancelSchema as un, pingFrameSchema as ur, PtyKill as ut, CoreDomainName as v, capabilityGrantSchema as vn, ptyKillSchema as vr, RevocationAnnounceFrame as vt, DataEntriesFrame as w, coordinatorFrameSchema as wn, relayInboundFrameSchema as wr, RoomLeave as wt, CoseHeaderLabel as x, capabilityTokenSchema as xn, ptyWriteSchema as xr, RoomInvite as xt, CoseHeaderAlg as y, capabilityRequestSchema as yn, ptyResizeSchema as yr, RevocationClaims as yt, IceCandidateInit as z, execListSchema as zn, roomReadSchema as zr, StreamAckFrame as zt };

package/dist/{protocol-Bi2fzBCc.d.mts → protocol-DCDae3z4.d.mts}

@@ -569,6 +569,20 @@ declare const frameVariantSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.Zod
   type: z.ZodLiteral<"bulk-end">;
   "transfer-id": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
   digest: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-hello">;
+  "ephemeral-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  nonce: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  "to-device": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-data">;
+  counter: z.ZodNumber;
+  ciphertext: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
 }, z.core.$strip>>>]>>;
 declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodObject<{
   type: z.ZodLiteral<"handshake">;
@@ -860,6 +874,20 @@ declare const frameSchema: z.ZodLazy<z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.
   type: z.ZodLiteral<"bulk-end">;
   "transfer-id": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
   digest: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-hello">;
+  "ephemeral-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  nonce: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  "to-device": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>>, z.ZodLazy<z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-data">;
+  counter: z.ZodNumber;
+  ciphertext: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
 }, z.core.$strip>>>]>>>>;
 declare const protocolVersionSchema: z.ZodLazy<z.ZodNumber>;
 declare const domainIdSchema: z.ZodLazy<z.ZodUnion<readonly [z.ZodLazy<z.ZodLazy<z.ZodUnion<readonly [z.ZodLiteral<"core/management">, z.ZodLiteral<"core/exec">, z.ZodLiteral<"core/data">, z.ZodLiteral<"core/federation">, z.ZodLiteral<"core/webrtc">, z.ZodLiteral<"core/room">, z.ZodLiteral<"core/bulk">, z.ZodLiteral<"core/version">]>>>, z.ZodLazy<z.ZodLazy<z.ZodString>>, z.ZodLazy<z.ZodLazy<z.ZodString>>]>>;
@@ -1391,6 +1419,22 @@ declare const roomNoticeClaimsSchema: z.ZodLazy<z.ZodObject<{
   "valid-until": z.ZodOptional<z.ZodNumber>;
   "key-epoch": z.ZodOptional<z.ZodNumber>;
 }, z.core.$catchall<z.ZodUnknown>>>;
+declare const secureHelloFrameSchema: z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-hello">;
+  "ephemeral-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  nonce: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  "identity-key": z.ZodLazy<z.ZodLazy<z.ZodObject<{
+    alg: z.ZodNumber;
+    "public-key": z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+  }, z.core.$strip>>>;
+  "to-device": z.ZodLazy<z.ZodLazy<z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>>>;
+  signature: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
+declare const secureDataFrameSchema: z.ZodLazy<z.ZodObject<{
+  type: z.ZodLiteral<"secure-data">;
+  counter: z.ZodNumber;
+  ciphertext: z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>>;
 declare const streamSessionSchema: z.ZodLazy<z.ZodNumber>;
 declare const streamDataFrameSchema: z.ZodLazy<z.ZodObject<{
   type: z.ZodLiteral<"stream-data">;
@@ -1712,6 +1756,8 @@ type RoomJoinOk = z.infer<typeof roomJoinOkSchema>;
 type RoomMembersOk = z.infer<typeof roomMembersOkSchema>;
 type RoomNotice = z.infer<typeof roomNoticeSchema>;
 type RoomNoticeClaims = z.infer<typeof roomNoticeClaimsSchema>;
+type SecureHelloFrame = z.infer<typeof secureHelloFrameSchema>;
+type SecureDataFrame = z.infer<typeof secureDataFrameSchema>;
 type StreamSession = z.infer<typeof streamSessionSchema>;
 type StreamDataFrame = z.infer<typeof streamDataFrameSchema>;
 type StreamAckFrame = z.infer<typeof streamAckFrameSchema>;
@@ -1762,4 +1808,4 @@ type WebrtcAnswer = z.infer<typeof webrtcAnswerSchema>;
 type WebrtcIceCandidate = z.infer<typeof webrtcIceCandidateSchema>;
 type IceCandidateInit = z.infer<typeof iceCandidateInitSchema>;
 //#endregion
-export { PathTraceOk as $, messageRefSchema as $n, thresholdKeygenRound2Schema as $r, TopologyGet as $t, DomainId as A, dataEntriesFrameSchema as An, roomLeaveSchema as Ar, RoomPath as At, IdentityKey as B, frameVariantSchema as Bn, sessionIdSchema as Br, StreamSession as Bt, CoseTokenHeaders as C, coreCapabilitySchema as Cn, relayOfferFrameSchema as Cr, RoomJoinOk as Ct, DeviceId as D, coseHeaderLabelSchema as Dn, roomInviteSchema as Dr, RoomMembersOk as Dt, DataRequestFrame as E, coseHeaderKidSchema as En, revocationEntrySchema as Er, RoomMembers as Et, GossipFrame as F, dmRoomPathSchema as Fn, roomNoticeSchema as Fr, SfuTrackEntry as Ft, ManageRequestFrame as G, iceCandidateInitSchema as Gn, streamEndFrameSchema as Gr, ThresholdKeygenConfirm as Gt, ManageCommandParams as H, handleClaimsSchema as Hn, sfuTrackMapSchema as Hr, ThresholdAbort as Ht, HandleClaims as I, domainIdSchema as In, roomPathSchema as Ir, SfuTrackMap as It, NamespacedCapability as J, manageCommandSchema as Jn, thresholdAbortSchema as Jr, ThresholdShareClaims as Jt, ManageResponseFrame as K, identityKeySchema as Kn, streamSessionSchema as Kr, ThresholdKeygenRound1 as Kt, HandleRecord as L, execListSchema as Ln, roomReadSchema as Lr, StreamAckFrame as Lt, ExecSessionInfo as M, dataRequestFrameSchema as Mn, roomMembersOkSchema as Mr, RoomRekey as Mt, Frame as N, deviceIdHexSchema as Nn, roomMembersSchema as Nr, RoomSend as Nt, DeviceIdHex as O, coseSign1Schema as On, roomJoinOkSchema as Or, RoomNotice as Ot, FrameVariant as P, deviceIdSchema as Pn, roomNoticeClaimsSchema as Pr, SessionId as Pt, PathTrace as Q, manageResponseFrameSchema as Qn, thresholdKeygenRound1Schema as Qr, TokenClaims as Qt, HandshakeFrame as R, execSessionInfoSchema as Rn, roomRekeySchema as Rr, StreamDataFrame as Rt, CoseSign1 as S, coordinatorFrameSchema as Sn, relayInboundFrameSchema as Sr, RoomJoin as St, DataHaveFrame as T, coseHeaderAlgSchema as Tn, revocationClaimsSchema as Tr, RoomMember as Tt, ManageError as U, handleRecordSchema as Un, streamAckFrameSchema as Ur, ThresholdCommit as Ut, ManageCommand as V, gossipFrameSchema as Vn, sfuTrackEntrySchema as Vr, SyncPunchFrame as Vt, ManageOk as W, handshakeFrameSchema as Wn, streamDataFrameSchema as Wr, ThresholdCommitment as Wt, ObservedAddressFrame as X, manageOkSchema as Xn, thresholdCommitmentSchema as Xr, ThresholdSign as Xt, NamespacedDomainId as Y, manageErrorSchema as Yn, thresholdCommitSchema as Yr, ThresholdShareEnvelope as Yt, OwnerNamedRoomPath as Z, manageRequestFrameSchema as Zn, thresholdKeygenConfirmSchema as Zr, ThresholdSubject as Zt, CoreCapability as _, capabilityRequestSchema as _n, ptyResizeSchema as _r, RelayOfferFrame as _t, BulkOpen as a, topologyGetSchema as ai, WebrtcOffer as an, pathTraceSchema as ar, PrivateUseDomainId as at, CoseHeaderKid as b, capabilityVerbSchema as bn, relayConnectFrameSchema as br, RevocationEntry as bt, CandidatesFrame as c, versionGetSchema as ci, bulkCancelSchema as cn, pingFrameSchema as cr, ProcSpawn as ct, CapabilityRequest as d, webrtcOfferSchema as di, bulkOpenSchema as dn, privateUseDomainIdSchema as dr, PtyResize as dt, thresholdShareClaimsSchema as ei, TopologyPeers as en, namespacedCapabilitySchema as er, PeerAdvert as et, CapabilityScope as f, wireCandidateSchema as fi, bulkResumeSchema as fn, procKillSchema as fr, PtySpawn as ft, CoordinatorFrame as g, capabilityGrantSchema as gn, ptyKillSchema as gr, RelayInboundFrame as gt, CloseFrame as h, capabilityGrantOkSchema as hn, protocolVersionSchema as hr, RelayDataFrame as ht, BulkEndFrame as i, tokenClaimsSchema as ii, WebrtcIceCandidate as in, pathTraceOkSchema as ir, PrivateUseCapability as it, ExecList as j, dataHaveFrameSchema as jn, roomMemberSchema as jr, RoomRead as jt, DmRoomPath as k, coseTokenHeadersSchema as kn, roomJoinSchema as kr, RoomNoticeClaims as kt, CapabilityGrant as l, webrtcAnswerSchema as li, bulkDataFrameSchema as ln, pongFrameSchema as lr, ProtocolVersion as lt, CapabilityVerb as m, candidatesFrameSchema as mn, procSpawnSchema as mr, RelayConnectFrame as mt, BulkCancel as n, thresholdSignSchema as ni, VersionGet as nn, observedAddressFrameSchema as nr, PingFrame as nt, BulkResume as o, topologyPeersSchema as oi, WireCandidate as on, peerAdvertSchema as or, ProcKill as ot, CapabilityToken as p, candidateKindSchema as pn, procSignalSchema as pr, PtyWrite as pt, MessageRef as q, manageCommandParamsSchema as qn, syncPunchFrameSchema as qr, ThresholdKeygenRound2 as qt, BulkDataFrame as r, thresholdSubjectSchema as ri, WebrtcAnswer as rn, ownerNamedRoomPathSchema as rr, PongFrame as rt, CandidateKind as s, transferIdSchema as si, bulkAckFrameSchema as sn, peerIdentitySchema as sr, ProcSignal as st, BulkAckFrame as t, thresholdShareEnvelopeSchema as ti, TransferId as tn, namespacedDomainIdSchema as tr, PeerIdentity as tt, CapabilityGrantOk as u, webrtcIceCandidateSchema as ui, bulkEndFrameSchema as un, privateUseCapabilitySchema as ur, PtyKill as ut, CoreDomainName as v, capabilityScopeSchema as vn, ptySpawnSchema as vr, RevocationAnnounceFrame as vt, DataEntriesFrame as w, coreDomainNameSchema as wn, revocationAnnounceFrameSchema as wr, RoomLeave as wt, CoseHeaderLabel as x, closeFrameSchema as xn, relayDataFrameSchema as xr, RoomInvite as xt, CoseHeaderAlg as y, capabilityTokenSchema as yn, ptyWriteSchema as yr, RevocationClaims as yt, IceCandidateInit as z, frameSchema as zn, roomSendSchema as zr, StreamEndFrame as zt };
+export { PathTraceOk as $, manageRequestFrameSchema as $n, thresholdCommitSchema as $r, ThresholdSubject as $t, DomainId as A, coseSign1Schema as An, roomJoinOkSchema as Ar, RoomPath as At, IdentityKey as B, execSessionInfoSchema as Bn, roomRekeySchema as Br, StreamDataFrame as Bt, CoseTokenHeaders as C, closeFrameSchema as Cn, relayDataFrameSchema as Cr, RoomJoinOk as Ct, DeviceId as D, coseHeaderAlgSchema as Dn, revocationClaimsSchema as Dr, RoomMembersOk as Dt, DataRequestFrame as E, coreDomainNameSchema as En, revocationAnnounceFrameSchema as Er, RoomMembers as Et, GossipFrame as F, deviceIdHexSchema as Fn, roomMembersSchema as Fr, SecureHelloFrame as Ft, ManageRequestFrame as G, handleRecordSchema as Gn, sfuTrackEntrySchema as Gr, ThresholdCommit as Gt, ManageCommandParams as H, frameVariantSchema as Hn, secureDataFrameSchema as Hr, StreamSession as Ht, HandleClaims as I, deviceIdSchema as In, roomNoticeClaimsSchema as Ir, SessionId as It, NamespacedCapability as J, identityKeySchema as Jn, streamDataFrameSchema as Jr, ThresholdKeygenRound1 as Jt, ManageResponseFrame as K, handshakeFrameSchema as Kn, sfuTrackMapSchema as Kr, ThresholdCommitment as Kt, HandleRecord as L, dmRoomPathSchema as Ln, roomNoticeSchema as Lr, SfuTrackEntry as Lt, ExecSessionInfo as M, dataEntriesFrameSchema as Mn, roomLeaveSchema as Mr, RoomRekey as Mt, Frame as N, dataHaveFrameSchema as Nn, roomMemberSchema as Nr, RoomSend as Nt, DeviceIdHex as O, coseHeaderKidSchema as On, revocationEntrySchema as Or, RoomNotice as Ot, FrameVariant as P, dataRequestFrameSchema as Pn, roomMembersOkSchema as Pr, SecureDataFrame as Pt, PathTrace as Q, manageOkSchema as Qn, thresholdAbortSchema as Qr, ThresholdSign as Qt, HandshakeFrame as R, domainIdSchema as Rn, roomPathSchema as Rr, SfuTrackMap as Rt, CoseSign1 as S, capabilityVerbSchema as Sn, relayConnectFrameSchema as Sr, RoomJoin as St, DataHaveFrame as T, coreCapabilitySchema as Tn, relayOfferFrameSchema as Tr, RoomMember as Tt, ManageError as U, gossipFrameSchema as Un, secureHelloFrameSchema as Ur, SyncPunchFrame as Ut, ManageCommand as V, frameSchema as Vn, roomSendSchema as Vr, StreamEndFrame as Vt, ManageOk as W, handleClaimsSchema as Wn, sessionIdSchema as Wr, ThresholdAbort as Wt, ObservedAddressFrame as X, manageCommandSchema as Xn, streamSessionSchema as Xr, ThresholdShareClaims as Xt, NamespacedDomainId as Y, manageCommandParamsSchema as Yn, streamEndFrameSchema as Yr, ThresholdKeygenRound2 as Yt, OwnerNamedRoomPath as Z, manageErrorSchema as Zn, syncPunchFrameSchema as Zr, ThresholdShareEnvelope as Zt, CoreCapability as _, capabilityGrantOkSchema as _n, protocolVersionSchema as _r, RelayOfferFrame as _t, BulkOpen as a, thresholdShareEnvelopeSchema as ai, WebrtcAnswer as an, ownerNamedRoomPathSchema as ar, PrivateUseDomainId as at, CoseHeaderKid as b, capabilityScopeSchema as bn, ptySpawnSchema as br, RevocationEntry as bt, CandidatesFrame as c, tokenClaimsSchema as ci, WireCandidate as cn, peerAdvertSchema as cr, ProcSpawn as ct, CapabilityRequest as d, transferIdSchema as di, bulkDataFrameSchema as dn, pongFrameSchema as dr, PtyResize as dt, thresholdCommitmentSchema as ei, TokenClaims as en, manageResponseFrameSchema as er, PeerAdvert as et, CapabilityScope as f, versionGetSchema as fi, bulkEndFrameSchema as fn, privateUseCapabilitySchema as fr, PtySpawn as ft, CoordinatorFrame as g, wireCandidateSchema as gi, candidatesFrameSchema as gn, procSpawnSchema as gr, RelayInboundFrame as gt, CloseFrame as h, webrtcOfferSchema as hi, candidateKindSchema as hn, procSignalSchema as hr, RelayDataFrame as ht, BulkEndFrame as i, thresholdShareClaimsSchema as ii, VersionGet as in, observedAddressFrameSchema as ir, PrivateUseCapability as it, ExecList as j, coseTokenHeadersSchema as jn, roomJoinSchema as jr, RoomRead as jt, DmRoomPath as k, coseHeaderLabelSchema as kn, roomInviteSchema as kr, RoomNoticeClaims as kt, CapabilityGrant as l, topologyGetSchema as li, bulkAckFrameSchema as ln, peerIdentitySchema as lr, ProtocolVersion as lt, CapabilityVerb as m, webrtcIceCandidateSchema as mi, bulkResumeSchema as mn, procKillSchema as mr, RelayConnectFrame as mt, BulkCancel as n, thresholdKeygenRound1Schema as ni, TopologyPeers as nn, namespacedCapabilitySchema as nr, PingFrame as nt, BulkResume as o, thresholdSignSchema as oi, WebrtcIceCandidate as on, pathTraceOkSchema as or, ProcKill as ot, CapabilityToken as p, webrtcAnswerSchema as pi, bulkOpenSchema as pn, privateUseDomainIdSchema as pr, PtyWrite as pt, MessageRef as q, iceCandidateInitSchema as qn, streamAckFrameSchema as qr, ThresholdKeygenConfirm as qt, BulkDataFrame as r, thresholdKeygenRound2Schema as ri, TransferId as rn, namespacedDomainIdSchema as rr, PongFrame as rt, CandidateKind as s, thresholdSubjectSchema as si, WebrtcOffer as sn, pathTraceSchema as sr, ProcSignal as st, BulkAckFrame as t, thresholdKeygenConfirmSchema as ti, TopologyGet as tn, messageRefSchema as tr, PeerIdentity as tt, CapabilityGrantOk as u, topologyPeersSchema as ui, bulkCancelSchema as un, pingFrameSchema as ur, PtyKill as ut, CoreDomainName as v, capabilityGrantSchema as vn, ptyKillSchema as vr, RevocationAnnounceFrame as vt, DataEntriesFrame as w, coordinatorFrameSchema as wn, relayInboundFrameSchema as wr, RoomLeave as wt, CoseHeaderLabel as x, capabilityTokenSchema as xn, ptyWriteSchema as xr, RoomInvite as xt, CoseHeaderAlg as y, capabilityRequestSchema as yn, ptyResizeSchema as yr, RevocationClaims as yt, IceCandidateInit as z, execListSchema as zn, roomReadSchema as zr, StreamAckFrame as zt };

package/dist/{room-token-verification-CDXkm_Tg.d.cts → room-token-verification-CkGnFuQc.d.mts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, p as CapabilityToken } from "./protocol-Bi2fzBCc.cjs";
-import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-BDVxEvl2.cjs";
+import { B as IdentityKey, D as DeviceId, en as TokenClaims, p as CapabilityToken } from "./protocol-DCDae3z4.mjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-CBiSYuzp.mjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/{room-token-verification-CnHNaA8J.d.mts → room-token-verification-PSv4eQ1x.d.cts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, p as CapabilityToken } from "./protocol-Bi2fzBCc.mjs";
-import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-0r9ipK1r.mjs";
+import { B as IdentityKey, D as DeviceId, en as TokenClaims, p as CapabilityToken } from "./protocol-DCDae3z4.cjs";
+import { l as TokenVerdictReason, u as VerifyCapabilityTokenOptions } from "./tokens-DqFu7iMX.cjs";
 //#region src/domain/room-token-verification.d.ts
 /** The one capability every core/room verb (room.send/read/leave/members) is gated by, per spec/room.cddl -- room.join/room.invite are deliberately ungated instead and need no token check at all. */
 declare const ROOM_MEMBER_CAPABILITY = "room:member";

package/dist/{tokens-0r9ipK1r.d.mts → tokens-CBiSYuzp.d.mts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, bt as RevocationEntry, p as CapabilityToken, yt as RevocationClaims } from "./protocol-Bi2fzBCc.mjs";
-import { t as IdentityPort } from "./identity-Dc4xmwp3.mjs";
+import { B as IdentityKey, D as DeviceId, bt as RevocationEntry, en as TokenClaims, p as CapabilityToken, yt as RevocationClaims } from "./protocol-DCDae3z4.mjs";
+import { t as IdentityPort } from "./identity-DcaYgjXT.mjs";
 import { t as Clock } from "./clock-DiSx-WKM.mjs";
 import { z } from "zod";
 import { JsonValue, PredicateNode, Resolution } from "trilean";

package/dist/{tokens-BDVxEvl2.d.cts → tokens-DqFu7iMX.d.cts}

@@ -1,5 +1,5 @@
-import { B as IdentityKey, D as DeviceId, Qt as TokenClaims, bt as RevocationEntry, p as CapabilityToken, yt as RevocationClaims } from "./protocol-Bi2fzBCc.cjs";
-import { t as IdentityPort } from "./identity-DImeXZcq.cjs";
+import { B as IdentityKey, D as DeviceId, bt as RevocationEntry, en as TokenClaims, p as CapabilityToken, yt as RevocationClaims } from "./protocol-DCDae3z4.cjs";
+import { t as IdentityPort } from "./identity-DVCNuFLG.cjs";
 import { t as Clock } from "./clock-DiSx-WKM.cjs";
 import { z } from "zod";
 import { JsonValue, PredicateNode, Resolution } from "trilean";

package/dist/{transport-Cq_odHy3.d.cts → transport-CfW7fsGK.d.cts}

@@ -1,4 +1,4 @@
-import { D as DeviceId, N as Frame } from "./protocol-Bi2fzBCc.cjs";
+import { D as DeviceId, N as Frame } from "./protocol-DCDae3z4.cjs";
 //#region src/ports/transport.d.ts
 /**
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.

package/dist/{transport-GcJ4LYVE.d.mts → transport-iLBxIkRS.d.mts}

@@ -1,4 +1,4 @@
-import { D as DeviceId, N as Frame } from "./protocol-Bi2fzBCc.mjs";
+import { D as DeviceId, N as Frame } from "./protocol-DCDae3z4.mjs";
 //#region src/ports/transport.d.ts
 /**
  * An async, serialisable-data contract for exchanging frame values over some connection -- deliberately without baking in any specific transport's own primitives (no raw socket types, no WebSocket-specific options), so a TCP adapter, a WebSocket adapter, or an in-memory adapter for tests can all satisfy it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wire-mesh-core",
-  "version": "2.1.0",
+  "version": "3.0.1",
   "dependencies": {
     "cbor2": "2.3.0",
     "cddl.js": "1.0.1",