@agentunion/fastaun-browser 0.4.8 → 0.4.9

package/dist/bundle.js

@@ -454,7 +454,7 @@ var init_indexeddb_store = __esm({
 });
 
 // src/version.ts
-var VERSION = "0.4.8";
+var VERSION = "0.4.9";
 
 // src/types.ts
 var ConnectionState = /* @__PURE__ */ ((ConnectionState2) => {
@@ -3421,10 +3421,255 @@ var SeqTracker = class {
 };
 
 // src/client/runtime.ts
+var RuntimeSection = class {
+  constructor(runtime) {
+    __publicField(this, "runtime");
+    this.runtime = runtime;
+  }
+  get client() {
+    return this.runtime.client;
+  }
+};
+var RuntimeIdentityState = class extends RuntimeSection {
+  get aid() {
+    return this.client._aid ?? null;
+  }
+  get currentAid() {
+    return this.client._currentAid ?? null;
+  }
+  get identity() {
+    return this.client._identity ?? null;
+  }
+  get deviceId() {
+    return String(this.client._deviceId ?? "");
+  }
+  get slotId() {
+    return String(this.client._slotId ?? "");
+  }
+  setLoadedIdentity(aid, identity) {
+    this.client._currentAid = aid;
+    this.client._aid = aid.aid;
+    this.client._identity = identity;
+    this.client._auth?.setIdentity?.(identity);
+  }
+  setIdentity(identity) {
+    this.client._identity = identity;
+  }
+  setAid(aid) {
+    this.client._aid = aid;
+  }
+  setInstanceContext(deviceId, slotId) {
+    this.client._deviceId = deviceId;
+    this.client._slotId = slotId;
+    this.client._auth?.setInstanceContext?.(deviceId, slotId);
+  }
+  clear() {
+    this.client._currentAid = null;
+    this.client._aid = null;
+    this.client._identity = null;
+  }
+};
+var RuntimeLifecycleState = class extends RuntimeSection {
+  get state() {
+    return String(this.client._state ?? "");
+  }
+  setState(state) {
+    this.client._state = state;
+  }
+  setClosing(closing) {
+    this.client._closing = closing;
+  }
+  setGatewayUrl(gatewayUrl) {
+    this.client._gatewayUrl = gatewayUrl;
+  }
+  setSession(params, options) {
+    this.client._sessionParams = params;
+    if (options !== void 0) this.client._sessionOptions = options;
+  }
+  clearRetryState() {
+    this.client._nextRetryAt = null;
+    this.client._retryAttempt = 0;
+    this.client._lastError = null;
+    this.client._lastErrorCode = null;
+  }
+  setNextRetryAt(nextRetryAt) {
+    this.client._nextRetryAt = nextRetryAt;
+  }
+  setRetryAttempt(attempt) {
+    this.client._retryAttempt = attempt;
+  }
+  setError(error, code) {
+    this.client._lastError = error;
+    this.client._lastErrorCode = code;
+  }
+  clearReconnectState() {
+    this.client._reconnectAbort = null;
+    this.client._reconnectActive = false;
+  }
+  resetForDisconnect(nextState) {
+    this.client._state = nextState;
+    this.client._nextRetryAt = null;
+    this.client._retryAttempt = 0;
+    this.client._lastError = null;
+    this.client._lastErrorCode = null;
+  }
+  resetForClose() {
+    this.client._state = "closed";
+    this.client._currentAid = null;
+    this.client._aid = null;
+    this.client._identity = null;
+    this.client._gatewayUrl = null;
+    this.client._sessionParams = null;
+    this.clearRetryState();
+  }
+};
+var RuntimeRpcState = class extends RuntimeSection {
+  get protectedHeaders() {
+    return this.client._instanceProtectedHeaders ?? null;
+  }
+  set protectedHeaders(value) {
+    this.client._instanceProtectedHeaders = value;
+  }
+  get pullGates() {
+    if (!this.client._pullGates) {
+      this.client._pullGates = /* @__PURE__ */ new Map();
+    }
+    return this.client._pullGates;
+  }
+};
+var RuntimeDeliveryState = class extends RuntimeSection {
+  get seqTracker() {
+    return this.client._seqTracker;
+  }
+  set seqTracker(value) {
+    this.client._seqTracker = value;
+  }
+  setGapFillActive(active) {
+    this.client._gapFillActive = active;
+  }
+  setOnlineUnreadHintTimer(timer) {
+    this.client._onlineUnreadHintTimer = timer;
+  }
+  setOnlineUnreadHintDrainActive(active) {
+    this.client._onlineUnreadHintDrainActive = active;
+  }
+  setV2PullPending(pending) {
+    this.client._v2PullPending = pending;
+  }
+  setV2PullInflight(inflight) {
+    this.client._v2PullInflight = inflight;
+  }
+};
+var RuntimeV2State = class extends RuntimeSection {
+  get session() {
+    return this.client._v2Session;
+  }
+  set session(value) {
+    this.client._v2Session = value;
+  }
+  get bootstrapCache() {
+    if (!this.client._v2BootstrapCache) {
+      this.client._v2BootstrapCache = /* @__PURE__ */ new Map();
+    }
+    return this.client._v2BootstrapCache;
+  }
+  setBootstrapCache(cache) {
+    this.client._v2BootstrapCache = cache;
+  }
+  setSessionState(keyStore, session) {
+    this.client._v2KeyStore = keyStore;
+    this.client._v2Session = session;
+  }
+  resetForIdentity() {
+    this.client._v2Session = void 0;
+    this.client._v2KeyStore = void 0;
+    this.client._v2SessionInitInFlight = null;
+    this.client._v2BootstrapCache = /* @__PURE__ */ new Map();
+    this.client._v2SigCache = /* @__PURE__ */ new Map();
+    this.client._v2SenderIKPending = /* @__PURE__ */ new Map();
+    this.client._v2SenderIKFetching = /* @__PURE__ */ new Set();
+  }
+  get groupSpkRegistrationInflight() {
+    if (!this.client._groupSpkRegistrationInflight) {
+      this.client._groupSpkRegistrationInflight = /* @__PURE__ */ new Set();
+    }
+    return this.client._groupSpkRegistrationInflight;
+  }
+  get groupSpkRotationInflight() {
+    if (!this.client._groupSpkRotationInflight) {
+      this.client._groupSpkRotationInflight = /* @__PURE__ */ new Set();
+    }
+    return this.client._groupSpkRotationInflight;
+  }
+  get groupSpkPeerFallbackRegistered() {
+    if (!this.client._groupSpkPeerFallbackRegistered) {
+      this.client._groupSpkPeerFallbackRegistered = /* @__PURE__ */ new Set();
+    }
+    return this.client._groupSpkPeerFallbackRegistered;
+  }
+};
+var RuntimeGroupState = class extends RuntimeSection {
+  get chains() {
+    if (!this.client._v2StateChains) this.client._v2StateChains = /* @__PURE__ */ new Map();
+    return this.client._v2StateChains;
+  }
+  get securityLevels() {
+    if (!this.client._v2GroupSecurityLevels) this.client._v2GroupSecurityLevels = /* @__PURE__ */ new Map();
+    return this.client._v2GroupSecurityLevels;
+  }
+  get sigCache() {
+    if (!this.client._v2SigCache) this.client._v2SigCache = /* @__PURE__ */ new Map();
+    return this.client._v2SigCache;
+  }
+  get lazyProposeTriggered() {
+    if (!this.client._v2LazyProposeTriggered) this.client._v2LazyProposeTriggered = /* @__PURE__ */ new Map();
+    return this.client._v2LazyProposeTriggered;
+  }
+};
+var RuntimeServices = class extends RuntimeSection {
+  get logger() {
+    return this.client._logger;
+  }
+  get clientLog() {
+    return this.client._clientLog;
+  }
+  get dispatcher() {
+    return this.client._dispatcher;
+  }
+  get tokenStore() {
+    return this.client._tokenStore;
+  }
+  get auth() {
+    return this.client._auth;
+  }
+  get transport() {
+    return this.client._transport;
+  }
+  get discovery() {
+    return this.client._discovery;
+  }
+  get agentMdManager() {
+    return this.client._agentMdManager;
+  }
+};
 var ClientRuntime = class {
   constructor(client) {
     __publicField(this, "client");
+    __publicField(this, "identity");
+    __publicField(this, "lifecycle");
+    __publicField(this, "rpc");
+    __publicField(this, "delivery");
+    __publicField(this, "v2");
+    __publicField(this, "groupState");
+    __publicField(this, "services");
     this.client = client;
+    this.identity = new RuntimeIdentityState(this);
+    this.lifecycle = new RuntimeLifecycleState(this);
+    this.rpc = new RuntimeRpcState(this);
+    this.delivery = new RuntimeDeliveryState(this);
+    this.v2 = new RuntimeV2State(this);
+    this.groupState = new RuntimeGroupState(this);
+    this.services = new RuntimeServices(this);
   }
 };
 
@@ -3774,7 +4019,7 @@ var MessageDeliveryEngine = class {
     const dedupKey = `p2p_pull:${ns}`;
     if (client._gapFillDone.has(dedupKey)) return;
     client._gapFillDone.add(dedupKey);
-    client._gapFillActive = true;
+    this.runtime.delivery.setGapFillActive(true);
     let filled = 0;
     try {
       const messages = await client._pullV2(afterSeq, 50);
@@ -3784,7 +4029,7 @@ var MessageDeliveryEngine = class {
       client._clientLog.warn(`P2P message gap-fill failed:${String(formatDeliveryError(exc))}`);
     } finally {
       client._gapFillDone.delete(dedupKey);
-      client._gapFillActive = false;
+      this.runtime.delivery.setGapFillActive(false);
       if (filled > 0 && client._seqTracker.getContiguousSeq(ns) > afterSeq) {
         client._safeAsync(this.fillP2pGap());
       }
@@ -3800,7 +4045,7 @@ var MessageDeliveryEngine = class {
     const dedupKey = `group_pull:${ns}`;
     if (client._gapFillDone.has(dedupKey)) return;
     client._gapFillDone.add(dedupKey);
-    client._gapFillActive = true;
+    this.runtime.delivery.setGapFillActive(true);
     let filled = 0;
     try {
       const messages = await client._pullGroupV2(groupId, afterSeq, 50);
@@ -3810,7 +4055,7 @@ var MessageDeliveryEngine = class {
       client._clientLog.warn(`group message gap-fill failed:${String(exc)}`);
     } finally {
       client._gapFillDone.delete(dedupKey);
-      client._gapFillActive = false;
+      this.runtime.delivery.setGapFillActive(false);
       if (filled > 0 && client._seqTracker.getContiguousSeq(ns) > afterSeq) {
         client._safeAsync(this.fillGroupGap(groupId));
       }
@@ -3824,7 +4069,7 @@ var MessageDeliveryEngine = class {
     const dedupKey = `group_event_pull:${ns}`;
     if (client._gapFillDone.has(dedupKey)) return;
     client._gapFillDone.add(dedupKey);
-    client._gapFillActive = true;
+    this.runtime.delivery.setGapFillActive(true);
     try {
       let nextAfterSeq = afterSeq;
       const maxPages = 100;
@@ -3897,7 +4142,7 @@ var MessageDeliveryEngine = class {
       client._clientLog.warn(`group event gap-fill failed:${String(exc)}`);
     } finally {
       client._gapFillDone.delete(dedupKey);
-      client._gapFillActive = false;
+      this.runtime.delivery.setGapFillActive(false);
     }
   }
   handleGroupChangedEventSeq(data, groupId) {
@@ -3921,15 +4166,15 @@ var MessageDeliveryEngine = class {
     client._onlineUnreadHintQueue.set(groupId, { ...data });
     if (client._onlineUnreadHintTimer || client._onlineUnreadHintDrainActive) return;
     const delayMs = Math.max(0, Number(client._onlineUnreadHintInitialDelayMs ?? 750) || 0);
-    client._onlineUnreadHintTimer = setTimeout(() => {
-      client._onlineUnreadHintTimer = null;
+    this.runtime.delivery.setOnlineUnreadHintTimer(setTimeout(() => {
+      this.runtime.delivery.setOnlineUnreadHintTimer(null);
       client._safeAsync(this.drainOnlineUnreadHints());
-    }, delayMs);
+    }, delayMs));
   }
   async drainOnlineUnreadHints() {
     const client = this.runtime.client;
     if (client._onlineUnreadHintDrainActive) return;
-    client._onlineUnreadHintDrainActive = true;
+    this.runtime.delivery.setOnlineUnreadHintDrainActive(true);
     try {
       while (client._onlineUnreadHintQueue.size > 0) {
         if (client.state !== "ready") return;
@@ -3948,7 +4193,7 @@ var MessageDeliveryEngine = class {
     } catch (exc) {
       client._clientLog.debug(`online unread hint drain failed: ${formatDeliveryError(exc)}`);
     } finally {
-      client._onlineUnreadHintDrainActive = false;
+      this.runtime.delivery.setOnlineUnreadHintDrainActive(false);
     }
   }
   async onRawGroupV2MessageCreated(data) {
@@ -4079,15 +4324,15 @@ var MessageDeliveryEngine = class {
       );
     }
     if (client._v2PullInflight) {
-      client._v2PullPending = true;
+      this.runtime.delivery.setV2PullPending(true);
       return;
     }
-    client._v2PullInflight = true;
+    this.runtime.delivery.setV2PullInflight(true);
     const dedupKey = `p2p_pull:${ns}`;
     client._gapFillDone.add(dedupKey);
     try {
       do {
-        client._v2PullPending = false;
+        this.runtime.delivery.setV2PullPending(false);
         await client._pullV2();
         const newContig = ns ? client._seqTracker.getContiguousSeq(ns) : -1;
         client._clientLog.debug(
@@ -4100,7 +4345,7 @@ var MessageDeliveryEngine = class {
         `V2 push auto-pull failed: contiguous_seq=${contigBefore}->${newContig} err=${exc}`
       );
     } finally {
-      client._v2PullInflight = false;
+      this.runtime.delivery.setV2PullInflight(false);
       client._gapFillDone.delete(dedupKey);
     }
   }
@@ -4399,21 +4644,15 @@ var IdentityRuntimeManager = class {
       throw new StateError(`loadIdentity not allowed in state ${publicState}`);
     }
     client._applyAidRuntimeContext(aid);
-    client._currentAid = aid;
-    client._aid = aid.aid;
-    client._identity = {
+    this.runtime.identity.setLoadedIdentity(aid, {
       aid: aid.aid,
       private_key_pem: aid.privateKeyPem,
       public_key_der_b64: aid.publicKey,
       cert: aid.certPem
-    };
-    client._auth.setIdentity(client._identity);
-    client._state = "standby";
-    client._closing = false;
-    client._lastError = null;
-    client._lastErrorCode = null;
-    client._retryAttempt = 0;
-    client._nextRetryAt = null;
+    });
+    this.runtime.lifecycle.setState("standby");
+    this.runtime.lifecycle.setClosing(false);
+    this.runtime.lifecycle.clearRetryState();
   }
 };
 
@@ -4421,6 +4660,7 @@ var IdentityRuntimeManager = class {
 var PUBLIC_CONNECTION_OPTION_KEYS = /* @__PURE__ */ new Set([
   "auto_reconnect",
   "connect_timeout",
+  "retry",
   "retry_initial_delay",
   "retry_max_delay",
   "retry_max_attempts",
@@ -4494,27 +4734,25 @@ var LifecycleController = class {
     if ("aid" in options || "access_token" in options || "token" in options || "kite_token" in options) {
       throw new ValidationError("authenticate options must not include aid or token fields; load an AID object first");
     }
-    client._state = "connecting";
+    this.runtime.lifecycle.setState("connecting");
     try {
       const gateway = String(client._gatewayUrl ?? await client._resolveGatewayForAid(target)).trim();
       const result = await client._auth.authenticate(gateway, target);
-      client._gatewayUrl = gatewayFromAuthResult(result, gateway);
+      this.runtime.lifecycle.setGatewayUrl(gatewayFromAuthResult(result, gateway));
       let loadedIdentity = null;
       try {
         loadedIdentity = await client._auth.loadIdentityOrNone(target);
       } catch (exc) {
         client._clientLog.debug(`authenticate identity reload skipped: ${exc instanceof Error ? exc.message : String(exc)}`);
       }
-      client._identity = loadedIdentity ?? identityFromAuthResult(client, result, target);
-      client._state = "authenticated";
-      client._lastError = null;
-      client._lastErrorCode = null;
+      this.runtime.identity.setIdentity(loadedIdentity ?? identityFromAuthResult(client, result, target));
+      this.runtime.lifecycle.setState("authenticated");
+      this.runtime.lifecycle.setError(null, null);
       client._clientLog.debug(`authenticate exit: elapsed=${Date.now() - tStart}ms aid=${target}`);
       return result;
     } catch (err) {
-      client._state = "standby";
-      client._lastError = err instanceof Error ? err : new Error(String(err));
-      client._lastErrorCode = "AUTHENTICATE_FAILED";
+      this.runtime.lifecycle.setState("standby");
+      this.runtime.lifecycle.setError(err instanceof Error ? err : new Error(String(err)), "AUTHENTICATE_FAILED");
       client._clientLog.debug(`authenticate exit (error): elapsed=${Date.now() - tStart}ms err=${err instanceof Error ? err.message : String(err)}`);
       throw err;
     }
@@ -4542,11 +4780,14 @@ var LifecycleController = class {
         ...opts.call_timeout !== void 0 ? { call: opts.call_timeout } : {}
       };
     }
+    if (opts?.retry !== void 0) options.retry = opts.retry;
     if (opts?.retry_initial_delay !== void 0 || opts?.retry_max_delay !== void 0 || opts?.retry_max_attempts !== void 0) {
+      const baseRetry = isRecord(options.retry) ? { ...options.retry } : { initial_delay: 1, max_delay: 64, max_attempts: 0 };
       options.retry = {
-        initial_delay: opts.retry_initial_delay ?? 1,
-        max_delay: opts.retry_max_delay ?? 64,
-        max_attempts: opts.retry_max_attempts ?? 0
+        ...baseRetry,
+        ...opts.retry_initial_delay !== void 0 ? { initial_delay: opts.retry_initial_delay } : {},
+        ...opts.retry_max_delay !== void 0 ? { max_delay: opts.retry_max_delay } : {},
+        ...opts.retry_max_attempts !== void 0 ? { max_attempts: opts.retry_max_attempts } : {}
       };
     }
     if (opts?.connection_kind !== void 0) options.connection_kind = opts.connection_kind;
@@ -4568,28 +4809,25 @@ var LifecycleController = class {
     }
     if (publicState === "retry_backoff" /* RETRY_BACKOFF */ && client._reconnectAbort) {
       client._reconnectAbort.abort();
-      client._reconnectAbort = null;
-      client._reconnectActive = false;
+      this.runtime.lifecycle.clearReconnectState();
     }
     if (publicState === "connection_failed" /* CONNECTION_FAILED */) {
-      client._retryAttempt = 0;
-      client._lastError = null;
-      client._lastErrorCode = null;
+      this.runtime.lifecycle.setRetryAttempt(0);
+      this.runtime.lifecycle.setError(null, null);
     }
-    client._nextRetryAt = null;
+    this.runtime.lifecycle.setNextRetryAt(null);
     let authResult = null;
     if (!client._gatewayUrl) {
       authResult = await client.authenticate();
     }
-    client._state = "connecting";
+    this.runtime.lifecycle.setState("connecting");
     const gateway = String(client._gatewayUrl ?? "").trim();
     const accessToken = accessTokenFromAuthResult(authResult) || cachedAccessToken(client);
     const params = { ...options, gateway, ...accessToken ? { access_token: accessToken } : {} };
     const normalized = client._normalizeConnectParams(params);
-    client._sessionParams = normalized;
-    client._sessionOptions = client._buildSessionOptions(normalized);
+    this.runtime.lifecycle.setSession(normalized, client._buildSessionOptions(normalized));
     client._transport.setTimeout(client._sessionOptions.timeouts.call);
-    client._closing = false;
+    this.runtime.lifecycle.setClosing(false);
     const gateways = client._resolveGateways(normalized);
     let lastErr = null;
     for (const gw of gateways) {
@@ -4604,18 +4842,74 @@ var LifecycleController = class {
           client._clientLog.warn(`connect: gateway ${gw} failed, trying next: ${err instanceof Error ? err.message : String(err)}`);
         }
         if (client._state === "connecting" || client._state === "authenticating") {
-          client._state = "connecting";
+          this.runtime.lifecycle.setState("connecting");
         }
       }
     }
     if (client._state === "connecting" || client._state === "authenticating") {
-      client._state = client._currentAid || client._aid ? "standby" : "idle";
+      this.runtime.lifecycle.setState(client._currentAid || client._aid ? "standby" : "idle");
     }
-    client._lastError = lastErr instanceof Error ? lastErr : new Error(String(lastErr));
-    client._lastErrorCode = "CONNECT_FAILED";
+    this.runtime.lifecycle.setError(lastErr instanceof Error ? lastErr : new Error(String(lastErr)), "CONNECT_FAILED");
     client._clientLog.debug(`connect exit (error): elapsed=${Date.now() - tStart}ms err=${lastErr instanceof Error ? lastErr.message : String(lastErr)}`);
     throw lastErr;
   }
+  async disconnect() {
+    const client = this.runtime.client;
+    const tStart = Date.now();
+    client._clientLog.debug(`disconnect enter: state=${client._state}`);
+    if (client._closing) {
+      client._clientLog.debug(`disconnect exit: elapsed=${Date.now() - tStart}ms reason=closing`);
+      return;
+    }
+    if (![
+      "authenticated" /* AUTHENTICATED */,
+      "connecting" /* CONNECTING */,
+      "ready" /* READY */,
+      "retry_backoff" /* RETRY_BACKOFF */,
+      "reconnecting" /* RECONNECTING */,
+      "connection_failed" /* CONNECTION_FAILED */
+    ].includes(client.state)) {
+      client._clientLog.debug(`disconnect exit: elapsed=${Date.now() - tStart}ms reason=not_connected`);
+      return;
+    }
+    client._saveSeqTrackerState();
+    client._stopBackgroundTasks();
+    if (client._reconnectAbort) {
+      client._reconnectAbort.abort();
+      this.runtime.lifecycle.clearReconnectState();
+    }
+    await client._transport.close();
+    this.runtime.lifecycle.resetForDisconnect("standby");
+    await client._dispatcher.publish("state_change", { state: client._publicState(client._state) });
+    client._clientLog.debug(`disconnect exit: elapsed=${Date.now() - tStart}ms`);
+  }
+  async close() {
+    const client = this.runtime.client;
+    const tStart = Date.now();
+    client._clientLog.debug(`close enter: state=${client._state}`);
+    this.runtime.lifecycle.setClosing(true);
+    client._saveSeqTrackerState();
+    client._stopBackgroundTasks();
+    if (client._reconnectAbort) {
+      client._reconnectAbort.abort();
+      this.runtime.lifecycle.clearReconnectState();
+    }
+    if (client._state === "idle" || client._state === "closed") {
+      this.runtime.lifecycle.setState("closed");
+      client._resetSeqTrackingState();
+      client._clientLog.debug(`close exit: elapsed=${Date.now() - tStart}ms reason=already_idle`);
+      return;
+    }
+    try {
+      await client._transport.call("auth.logout", {});
+    } catch {
+    }
+    await client._transport.close();
+    this.runtime.lifecycle.setState("closed");
+    await client._dispatcher.publish("state_change", { state: client._publicState(client._state) });
+    client._resetSeqTrackingState();
+    client._clientLog.debug(`close exit: elapsed=${Date.now() - tStart}ms`);
+  }
 };
 
 // src/client/peers.ts
@@ -4720,11 +5014,169 @@ var SIGNED_METHODS = /* @__PURE__ */ new Set([
   "group.resume"
 ]);
 var PULL_GATE_STALE_MS = 3e4;
+var NON_IDEMPOTENT_TIMEOUT = 35;
+var NON_IDEMPOTENT_METHODS = /* @__PURE__ */ new Set([
+  "message.send",
+  "group.send",
+  "group.create",
+  "group.invite",
+  "group.kick",
+  "group.remove_member",
+  "group.leave",
+  "group.dissolve",
+  "group.update_name",
+  "group.update_avatar",
+  "group.update_announcement",
+  "group.update_settings",
+  "storage.upload",
+  "storage.complete_upload",
+  "storage.delete",
+  "auth.create_aid",
+  "auth.renew_cert",
+  "auth.rekey",
+  "message.thought.put",
+  "group.thought.put",
+  "group.add_member"
+]);
 var RpcPipeline = class {
   constructor(runtime) {
     __publicField(this, "runtime");
     this.runtime = runtime;
   }
+  async call(method, params) {
+    const client = this.runtime.client;
+    const tStart = Date.now();
+    client._clientLog.debug(`call enter: method=${method}`);
+    try {
+      const result = await this.callImpl(method, params);
+      client._clientLog.debug(`call exit: elapsed=${Date.now() - tStart}ms method=${method}`);
+      return result;
+    } catch (err) {
+      client._clientLog.debug(`call exit (error): elapsed=${Date.now() - tStart}ms method=${method} err=${err instanceof Error ? err.message : String(err)}`);
+      throw err;
+    }
+  }
+  async callImpl(method, params) {
+    const client = this.runtime.client;
+    const p = this.preflight(method, params).params;
+    if (method === "message.send") {
+      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
+      delete p.encrypt;
+      if (encrypt) {
+        await client._ensureV2SessionReady(
+          "message.send",
+          "V2 session not initialized; encrypted message.send requires V2 (V1 E2EE removed)"
+        );
+        client._clientLog.debug("call route: message.send -> V2 encrypted send");
+        return await client._sendV2(String(p.to ?? ""), p.payload ?? {}, {
+          messageId: String(p.message_id ?? "") || void 0,
+          timestamp: p.timestamp,
+          protectedHeaders: client._protectedHeadersFromParams(p),
+          context: isJsonObject(p.context) ? p.context : void 0
+        });
+      }
+      client._maybeAppendEchoTraceSend(p);
+    }
+    if (method === "group.send") {
+      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
+      delete p.encrypt;
+      if (encrypt) {
+        await client._ensureV2SessionReady(
+          "group.send",
+          "V2 session not initialized; encrypted group.send requires V2 (V1 E2EE removed)"
+        );
+        client._clientLog.debug("call route: group.send -> V2 encrypted send");
+        return await client._sendGroupV2(String(p.group_id ?? ""), p.payload ?? {}, {
+          messageId: String(p.message_id ?? "") || void 0,
+          timestamp: p.timestamp,
+          protectedHeaders: client._protectedHeadersFromParams(p),
+          context: isJsonObject(p.context) ? p.context : void 0
+        });
+      }
+      client._maybeAppendEchoTraceSend(p);
+    }
+    if (method === "group.thought.put") {
+      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
+      delete p.encrypt;
+      if (encrypt) {
+        await client._ensureV2SessionReady(
+          "group.thought.put",
+          "V2 session not initialized; encrypted group.thought.put requires V2 (V1 E2EE removed)"
+        );
+        client._clientLog.debug("call route: group.thought.put -> V2 encrypted put");
+        return await client._putGroupThoughtEncryptedV2(p);
+      }
+    }
+    if (method === "message.thought.put") {
+      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
+      delete p.encrypt;
+      if (encrypt) {
+        await client._ensureV2SessionReady(
+          "message.thought.put",
+          "V2 session not initialized; encrypted message.thought.put requires V2 (V1 E2EE removed)"
+        );
+        client._clientLog.debug("call route: message.thought.put -> V2 encrypted put");
+        return await client._putMessageThoughtEncryptedV2(p);
+      }
+    }
+    const pullGateKey = this.pullGateKeyForCall(method, p);
+    if (pullGateKey) {
+      return await this.runPullSerialized(pullGateKey, async () => {
+        return await this.callImplInner(method, p);
+      });
+    }
+    return await this.callImplInner(method, p);
+  }
+  async callImplInner(method, p) {
+    const client = this.runtime.client;
+    if (method === "message.pull") {
+      await client._ensureV2SessionReady("message.pull");
+      client._clientLog.debug("call route: message.pull -> V2 pull");
+      const messages = await client._pullV2(Number(p.after_seq ?? 0) || 0, Number(p.limit ?? 50) || 50, { force: p.force === true });
+      return { messages };
+    }
+    if (method === "message.ack") {
+      await client._ensureV2SessionReady("message.ack");
+      client._clientLog.debug("call route: message.ack -> V2 ack");
+      return await client._ackV2(Number(p.seq ?? p.up_to_seq ?? 0) || void 0);
+    }
+    if (method === "group.pull" && p.group_id) {
+      await client._ensureV2SessionReady("group.pull");
+      client._clientLog.debug("call route: group.pull -> V2 pull");
+      const hasExplicitAfterSeq = "after_seq" in p || "after_message_seq" in p;
+      const cursorParams = client._explicitGroupCursorParams(p);
+      const ownsCursor = Object.keys(cursorParams).length === 0 || client._groupCursorTargetsCurrentInstance(cursorParams);
+      const pullOpts = {};
+      if (hasExplicitAfterSeq) pullOpts.explicitAfterSeq = true;
+      if (Object.keys(cursorParams).length > 0) pullOpts.cursorParams = cursorParams;
+      if (!ownsCursor) pullOpts.ownsCursor = false;
+      const messages = await client._pullGroupV2(
+        String(p.group_id),
+        Number(p.after_seq ?? p.after_message_seq ?? 0) || 0,
+        Number(p.limit ?? 50) || 50,
+        Object.keys(pullOpts).length > 0 ? pullOpts : void 0
+      );
+      return { messages };
+    }
+    if (method === "group.ack_messages" && p.group_id) {
+      await client._ensureV2SessionReady("group.ack_messages");
+      client._clientLog.debug("call route: group.ack_messages -> V2 ack");
+      const cursorParams = client._explicitGroupCursorParams(p);
+      const ownsCursor = Object.keys(cursorParams).length === 0 || client._groupCursorTargetsCurrentInstance(cursorParams);
+      if (!ownsCursor) {
+        return await client._rawGroupAckMessages(p);
+      }
+      return await client._ackGroupV2(
+        String(p.group_id),
+        Number(p.seq ?? p.msg_seq ?? p.up_to_seq ?? 0) || void 0
+      );
+    }
+    await this.applyClientSignature(method, p);
+    const callTimeout = NON_IDEMPOTENT_METHODS.has(method) ? NON_IDEMPOTENT_TIMEOUT : void 0;
+    let result = callTimeout ? await client._transport.call(method, p, callTimeout) : await client._transport.call(method, p);
+    result = await this.postprocessResult(method, p, result);
+    return result;
+  }
   preflight(method, params) {
     const client = this.runtime.client;
     if (client._state !== "connected") {
@@ -9478,7 +9930,7 @@ var V2E2EECoordinator = class {
   get bootstrapCache() {
     const client = this.client;
     if (!(client._v2BootstrapCache instanceof Map)) {
-      client._v2BootstrapCache = /* @__PURE__ */ new Map();
+      this.runtime.v2.setBootstrapCache(/* @__PURE__ */ new Map());
     }
     return client._v2BootstrapCache;
   }
@@ -9581,18 +10033,14 @@ var V2E2EECoordinator = class {
       if (openedKeyStore) keyStore.close();
       return;
     }
-    client._v2KeyStore = keyStore;
-    client._v2Session = session;
+    this.runtime.v2.setSessionState(keyStore, session);
     client._clientLog.debug(`V2 session initialized aid=${aidAtStart} device=${deviceIdAtStart}`);
   }
   scheduleGroupSpkRegistration(groupId, opts) {
     const client = this.client;
     const gid = String(groupId ?? "").trim();
     if (!gid || !client._v2Session) return;
-    if (!(client._groupSpkRegistrationInflight instanceof Set)) {
-      client._groupSpkRegistrationInflight = /* @__PURE__ */ new Set();
-    }
-    const inflight = client._groupSpkRegistrationInflight;
+    const inflight = this.runtime.v2.groupSpkRegistrationInflight;
     if (inflight.has(gid)) return;
     inflight.add(gid);
     client._safeAsync((async () => {
@@ -9610,10 +10058,7 @@ var V2E2EECoordinator = class {
     const client = this.client;
     const gid = String(groupId ?? "").trim();
     if (!gid || !client._v2Session) return;
-    if (!(client._groupSpkRotationInflight instanceof Set)) {
-      client._groupSpkRotationInflight = /* @__PURE__ */ new Set();
-    }
-    const inflight = client._groupSpkRotationInflight;
+    const inflight = this.runtime.v2.groupSpkRotationInflight;
     if (inflight.has(gid)) return;
     inflight.add(gid);
     client._safeAsync((async () => {
@@ -9631,10 +10076,7 @@ var V2E2EECoordinator = class {
     const client = this.client;
     const gid = String(groupId ?? "").trim();
     if (!gid) return;
-    if (!(client._groupSpkPeerFallbackRegistered instanceof Set)) {
-      client._groupSpkPeerFallbackRegistered = /* @__PURE__ */ new Set();
-    }
-    const registered = client._groupSpkPeerFallbackRegistered;
+    const registered = this.runtime.v2.groupSpkPeerFallbackRegistered;
     if (registered.has(gid)) return;
     registered.add(gid);
     this.scheduleGroupSpkRegistration(gid, { reason: "peer_device_prekey_fallback" });
@@ -9830,6 +10272,7 @@ var V2E2EECoordinator = class {
               payload: legacyPayload,
               encrypted: false
             };
+            attachGatewayProximity(v1Msg, msg);
             const appEvent = client._delivery.p2pAppEventForMessage(v1Msg);
             if (ns) await client._publishPulledMessage(appEvent.event, ns, seq, appEvent.payload);
             else await client._publishAppEvent(appEvent.event, appEvent.payload);
@@ -10021,6 +10464,7 @@ var V2E2EECoordinator = class {
                 payload,
                 encrypted: false
               };
+              attachGatewayProximity(v1Msg, msg);
               await client._publishPulledMessage("group.message_created", ns, seq, v1Msg);
               decrypted.push(v1Msg);
               continue;
@@ -10036,6 +10480,7 @@ var V2E2EECoordinator = class {
               payload,
               encrypted: false
             };
+            attachGatewayProximity(v1Msg, msg);
             await client._publishPulledMessage("group.message_created", ns, seq, v1Msg);
             decrypted.push(v1Msg);
             continue;
@@ -11023,12 +11468,10 @@ var GroupStateCoordinator = class {
     const gid = normalizedGroupId(groupId);
     if (!gid) return;
     const level = String(bootstrap.e2ee_security_level ?? "").trim() || "end_to_end";
-    if (!(client._v2GroupSecurityLevels instanceof Map)) {
-      client._v2GroupSecurityLevels = /* @__PURE__ */ new Map();
-    }
-    const previous = client._v2GroupSecurityLevels.get(gid);
+    const securityLevels = this.runtime.groupState.securityLevels;
+    const previous = securityLevels.get(gid);
     if (previous === level) return;
-    client._v2GroupSecurityLevels.set(gid, level);
+    securityLevels.set(gid, level);
     await client._dispatcher.publish("group.v2.security_level", {
       group_id: gid,
       level,
@@ -11068,11 +11511,9 @@ var GroupStateCoordinator = class {
       );
       const cacheHash = new Uint8Array(await crypto.subtle.digest("SHA-256", cacheInput));
       const cacheKey = bytesToHex6(cacheHash);
-      if (!(client._v2SigCache instanceof Map)) {
-        client._v2SigCache = /* @__PURE__ */ new Map();
-      }
+      const sigCache = this.runtime.groupState.sigCache;
       const now = Date.now();
-      const cachedExp = client._v2SigCache.get(cacheKey);
+      const cachedExp = sigCache.get(cacheKey);
       if (cachedExp !== void 0 && cachedExp > now) {
         client._clientLog.debug(`V2 state signature cache hit: group=${gid} sv=${stateVersion}`);
       } else {
@@ -11087,7 +11528,7 @@ var GroupStateCoordinator = class {
           client._clientLog.warn(`V2 state signature verification FAILED: group=${gid} sv=${stateVersion} actor=${actorAid}`);
           throw new E2EEError("V2 state signature verification failed");
         }
-        client._v2SigCache.set(cacheKey, now + V2_SIG_CACHE_TTL_MS);
+        sigCache.set(cacheKey, now + V2_SIG_CACHE_TTL_MS);
         this.pruneSigCache(now);
         client._clientLog.debug(`V2 state signature verified: group=${gid} sv=${stateVersion} actor=${actorAid}`);
       }
@@ -11103,12 +11544,10 @@ var GroupStateCoordinator = class {
     const gid = normalizedGroupId(groupId);
     if (!gid || !serverChain) return;
     try {
-      if (!(client._v2StateChains instanceof Map)) {
-        client._v2StateChains = /* @__PURE__ */ new Map();
-      }
-      const local = client._v2StateChains.get(gid);
+      const stateChains = this.runtime.groupState.chains;
+      const local = stateChains.get(gid);
       if (local === void 0) {
-        client._v2StateChains.set(gid, [0, serverChain]);
+        stateChains.set(gid, [0, serverChain]);
         return;
       }
       const [localSv, localChain] = local;
@@ -11118,7 +11557,7 @@ var GroupStateCoordinator = class {
         if (stateResp) {
           const serverSv = Number(stateResp.state_version ?? 0);
           if (serverSv > localSv) {
-            client._v2StateChains.set(gid, [serverSv, serverChain]);
+            stateChains.set(gid, [serverSv, serverChain]);
             return;
           }
           if (serverSv < localSv) {
@@ -11141,13 +11580,11 @@ var GroupStateCoordinator = class {
     const client = this.client;
     const gid = normalizedGroupId(groupId);
     if (!gid) return;
-    if (!(client._v2LazyProposeTriggered instanceof Map)) {
-      client._v2LazyProposeTriggered = /* @__PURE__ */ new Map();
-    }
+    const lazyProposeTriggered = this.runtime.groupState.lazyProposeTriggered;
     const now = Date.now();
-    const last = client._v2LazyProposeTriggered.get(gid) ?? 0;
+    const last = lazyProposeTriggered.get(gid) ?? 0;
     if (now - last < 1e4) return;
-    client._v2LazyProposeTriggered.set(gid, now);
+    lazyProposeTriggered.set(gid, now);
     client._safeAsync(client._v2AutoProposeState(gid, { leaderDelay: true }));
   }
   async onGroupStateCommitted(data) {
@@ -14230,30 +14667,6 @@ function clampHeartbeatInterval(value) {
   if (n > HEARTBEAT_MAX_INTERVAL_SECONDS) return HEARTBEAT_MAX_INTERVAL_SECONDS;
   return n;
 }
-var NON_IDEMPOTENT_TIMEOUT = 35;
-var NON_IDEMPOTENT_METHODS = /* @__PURE__ */ new Set([
-  "message.send",
-  "group.send",
-  "group.create",
-  "group.invite",
-  "group.kick",
-  "group.remove_member",
-  "group.leave",
-  "group.dissolve",
-  "group.update_name",
-  "group.update_avatar",
-  "group.update_announcement",
-  "group.update_settings",
-  "storage.upload",
-  "storage.complete_upload",
-  "storage.delete",
-  "auth.create_aid",
-  "auth.renew_cert",
-  "auth.rekey",
-  "message.thought.put",
-  "group.thought.put",
-  "group.add_member"
-]);
 function clampReconnectDelaySeconds(value, fallback, upper = RECONNECT_MAX_BASE_DELAY_SECONDS) {
   const parsed = Number(value);
   const seconds = Number.isFinite(parsed) ? parsed : fallback;
@@ -15002,62 +15415,11 @@ var _AUNClient = class _AUNClient {
   }
   /** 断开连接但保留本地状态，可再次 connect */
   async disconnect() {
-    const tStart = Date.now();
-    this._clientLog.debug(`disconnect enter: state=${this._state}`);
-    if (this._closing) {
-      this._clientLog.debug(`disconnect exit: elapsed=${Date.now() - tStart}ms reason=closing`);
-      return;
-    }
-    if (![
-      "authenticated" /* AUTHENTICATED */,
-      "connecting" /* CONNECTING */,
-      "ready" /* READY */,
-      "retry_backoff" /* RETRY_BACKOFF */,
-      "reconnecting" /* RECONNECTING */,
-      "connection_failed" /* CONNECTION_FAILED */
-    ].includes(this.state)) {
-      this._clientLog.debug(`disconnect exit: elapsed=${Date.now() - tStart}ms reason=not_connected`);
-      return;
-    }
-    this._saveSeqTrackerState();
-    this._stopBackgroundTasks();
-    if (this._reconnectAbort) {
-      this._reconnectAbort.abort();
-      this._reconnectAbort = null;
-      this._reconnectActive = false;
-    }
-    await this._transport.close();
-    this._state = "standby";
-    await this._dispatcher.publish("state_change", { state: this._publicState(this._state) });
-    this._clientLog.debug(`disconnect exit: elapsed=${Date.now() - tStart}ms`);
+    return this._lifecycle.disconnect();
   }
   /** 关闭连接 */
   async close() {
-    const tStart = Date.now();
-    this._clientLog.debug(`close enter: state=${this._state}`);
-    this._closing = true;
-    this._saveSeqTrackerState();
-    this._stopBackgroundTasks();
-    if (this._reconnectAbort) {
-      this._reconnectAbort.abort();
-      this._reconnectAbort = null;
-      this._reconnectActive = false;
-    }
-    if (this._state === "idle" || this._state === "closed") {
-      this._state = "closed";
-      this._resetSeqTrackingState();
-      this._clientLog.debug(`close exit: elapsed=${Date.now() - tStart}ms reason=already_idle`);
-      return;
-    }
-    try {
-      await this._transport.call("auth.logout", {});
-    } catch {
-    }
-    await this._transport.close();
-    this._state = "closed";
-    await this._dispatcher.publish("state_change", { state: this._publicState(this._state) });
-    this._resetSeqTrackingState();
-    this._clientLog.debug(`close exit: elapsed=${Date.now() - tStart}ms`);
+    return this._lifecycle.close();
   }
   // ── RPC ───────────────────────────────────────────
   /**
@@ -15067,139 +15429,7 @@ var _AUNClient = class _AUNClient {
    * 自动解密 message.pull/group.pull、Group E2EE 生命周期编排。
    */
   async call(method, params) {
-    const tStart = Date.now();
-    this._clientLog.debug(`call enter: method=${method}`);
-    try {
-      const result = await this._callImpl(method, params);
-      this._clientLog.debug(`call exit: elapsed=${Date.now() - tStart}ms method=${method}`);
-      return result;
-    } catch (err) {
-      this._clientLog.debug(`call exit (error): elapsed=${Date.now() - tStart}ms method=${method} err=${err instanceof Error ? err.message : String(err)}`);
-      throw err;
-    }
-  }
-  async _callImpl(method, params) {
-    const p = this._rpcPipeline.preflight(method, params).params;
-    if (method === "message.send") {
-      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
-      delete p.encrypt;
-      if (encrypt) {
-        await this._ensureV2SessionReady(
-          "message.send",
-          "V2 session not initialized; encrypted message.send requires V2 (V1 E2EE removed)"
-        );
-        this._clientLog.debug("call route: message.send \u2192 V2 encrypted send");
-        return await this._sendV2(String(p.to ?? ""), p.payload ?? {}, {
-          messageId: String(p.message_id ?? "") || void 0,
-          timestamp: p.timestamp,
-          protectedHeaders: this._protectedHeadersFromParams(p),
-          context: isJsonObject(p.context) ? p.context : void 0
-        });
-      }
-      this._maybeAppendEchoTraceSend(p);
-    }
-    if (method === "group.send") {
-      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
-      delete p.encrypt;
-      if (encrypt) {
-        await this._ensureV2SessionReady(
-          "group.send",
-          "V2 session not initialized; encrypted group.send requires V2 (V1 E2EE removed)"
-        );
-        this._clientLog.debug("call route: group.send \u2192 V2 encrypted send");
-        return await this._sendGroupV2(String(p.group_id ?? ""), p.payload ?? {}, {
-          messageId: String(p.message_id ?? "") || void 0,
-          timestamp: p.timestamp,
-          protectedHeaders: this._protectedHeadersFromParams(p),
-          context: isJsonObject(p.context) ? p.context : void 0
-        });
-      }
-      this._maybeAppendEchoTraceSend(p);
-    }
-    if (method === "group.thought.put") {
-      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
-      delete p.encrypt;
-      if (encrypt) {
-        await this._ensureV2SessionReady(
-          "group.thought.put",
-          "V2 session not initialized; encrypted group.thought.put requires V2 (V1 E2EE removed)"
-        );
-        this._clientLog.debug("call route: group.thought.put \u2192 V2 encrypted put");
-        return this._putGroupThoughtEncryptedV2(p);
-      }
-    }
-    if (method === "message.thought.put") {
-      const encrypt = p.encrypt !== void 0 ? p.encrypt : true;
-      delete p.encrypt;
-      if (encrypt) {
-        await this._ensureV2SessionReady(
-          "message.thought.put",
-          "V2 session not initialized; encrypted message.thought.put requires V2 (V1 E2EE removed)"
-        );
-        this._clientLog.debug("call route: message.thought.put \u2192 V2 encrypted put");
-        return this._putMessageThoughtEncryptedV2(p);
-      }
-    }
-    const pullGateKey = this._pullGateKeyForCall(method, p);
-    if (pullGateKey) {
-      return await this._runPullSerialized(pullGateKey, async () => {
-        return await this._callImplInner(method, p);
-      });
-    }
-    return await this._callImplInner(method, p);
-  }
-  /**
-   * _callImpl 的内层：pull gate 之后的实际 RPC 分发逻辑。
-   * 拆分出来以便 pull gate 包裹整个操作。
-   */
-  async _callImplInner(method, p) {
-    if (method === "message.pull") {
-      await this._ensureV2SessionReady("message.pull");
-      this._clientLog.debug("call route: message.pull \u2192 V2 pull");
-      const messages = await this._pullV2(Number(p.after_seq ?? 0) || 0, Number(p.limit ?? 50) || 50, { force: p.force === true });
-      return { messages };
-    }
-    if (method === "message.ack") {
-      await this._ensureV2SessionReady("message.ack");
-      this._clientLog.debug("call route: message.ack \u2192 V2 ack");
-      return await this._ackV2(Number(p.seq ?? p.up_to_seq ?? 0) || void 0);
-    }
-    if (method === "group.pull" && p.group_id) {
-      await this._ensureV2SessionReady("group.pull");
-      this._clientLog.debug("call route: group.pull \u2192 V2 pull");
-      const hasExplicitAfterSeq = "after_seq" in p || "after_message_seq" in p;
-      const cursorParams = this._explicitGroupCursorParams(p);
-      const ownsCursor = Object.keys(cursorParams).length === 0 || this._groupCursorTargetsCurrentInstance(cursorParams);
-      const pullOpts = {};
-      if (hasExplicitAfterSeq) pullOpts.explicitAfterSeq = true;
-      if (Object.keys(cursorParams).length > 0) pullOpts.cursorParams = cursorParams;
-      if (!ownsCursor) pullOpts.ownsCursor = false;
-      const messages = await this._pullGroupV2(
-        String(p.group_id),
-        Number(p.after_seq ?? p.after_message_seq ?? 0) || 0,
-        Number(p.limit ?? 50) || 50,
-        Object.keys(pullOpts).length > 0 ? pullOpts : void 0
-      );
-      return { messages };
-    }
-    if (method === "group.ack_messages" && p.group_id) {
-      await this._ensureV2SessionReady("group.ack_messages");
-      this._clientLog.debug("call route: group.ack_messages \u2192 V2 ack");
-      const cursorParams = this._explicitGroupCursorParams(p);
-      const ownsCursor = Object.keys(cursorParams).length === 0 || this._groupCursorTargetsCurrentInstance(cursorParams);
-      if (!ownsCursor) {
-        return await this._rawGroupAckMessages(p);
-      }
-      return await this._ackGroupV2(
-        String(p.group_id),
-        Number(p.seq ?? p.msg_seq ?? p.up_to_seq ?? 0) || void 0
-      );
-    }
-    await this._rpcPipeline.applyClientSignature(method, p);
-    const callTimeout = NON_IDEMPOTENT_METHODS.has(method) ? NON_IDEMPOTENT_TIMEOUT : void 0;
-    let result = callTimeout ? await this._transport.call(method, p, callTimeout) : await this._transport.call(method, p);
-    result = await this._rpcPipeline.postprocessResult(method, p, result);
-    return result;
+    return await this._rpcPipeline.call(method, params);
   }
   async _callRawV2Rpc(method, params) {
     const p = { ...params ?? {} };
@@ -15243,10 +15473,6 @@ var _AUNClient = class _AUNClient {
   _onRawMessageReceived(data) {
     this._delivery.onRawMessageReceived(data);
   }
-  /** 实际处理推送消息的异步任务（V2-only：明文消息直接透传，V2 加密消息走 _onV2PushNotification） */
-  async _processAndPublishMessage(data) {
-    return this._delivery.processAndPublishMessage(data);
-  }
   /** 处理群组消息推送：re-publish（V2 加密消息走 V2 push 路径） */
   _onRawGroupMessageCreated(data) {
     return this._delivery.onRawGroupMessageCreated(data);
@@ -15255,43 +15481,19 @@ var _AUNClient = class _AUNClient {
   async _onRawGroupV2MessageCreated(data) {
     return this._delivery.onRawGroupV2MessageCreated(data);
   }
-  /**
-   * 处理群组推送消息的异步任务（V2-only：明文消息直接透传）。
-   *
-   * 带 payload 的事件（消息推送）：直接 re-publish。
-   * 不带 payload 的事件（通知）：自动 pull 最新消息。
-   */
-  async _processAndPublishGroupMessage(data) {
-    return this._delivery.processAndPublishGroupMessage(data);
-  }
   async _publishEncryptedPushMessage(normalEvent, undecryptableEvent, ns, seq, msg, group) {
     return await this._v2E2EE.publishEncryptedPushMessage(normalEvent, undecryptableEvent, ns, seq, msg, group);
   }
   async _decryptV2PushMessage(data) {
     return await this._v2E2EE.decryptV2PushMessage(data);
   }
-  /** 后台补齐群消息空洞 */
-  async _fillGroupGap(groupId) {
-    return this._delivery.fillGroupGap(groupId);
-  }
-  /** 后台补齐群事件空洞 */
-  async _fillGroupEventGap(groupId) {
-    return this._delivery.fillGroupEventGap(groupId);
-  }
   /** 后台补齐 P2P 消息空洞 */
   async _fillP2pGap() {
     return this._delivery.fillP2pGap();
   }
-  /** 只按硬上限裁剪 published guard，不能按 contiguousSeq 清理。 */
-  _prunePushedSeqs(ns) {
-    this._delivery.prunePushedSeqs(ns);
-  }
   _markPublishedSeq(ns, seq) {
     this._delivery.markPublishedSeq(ns, seq);
   }
-  _attachCurrentInstanceContext(payload) {
-    return this._delivery.attachCurrentInstanceContext(payload);
-  }
   async _publishAppEvent(event, payload) {
     await this._delivery.publishAppEvent(event, payload);
   }
@@ -15328,9 +15530,6 @@ var _AUNClient = class _AUNClient {
     const trace = `${this._echoTimestamp()} [AUN-SDK.receive] aid=${this._aid ?? "-"} conn_uptime=${uptime}s`;
     msg.payload = { ...payload, text: payload.text + "\n" + trace };
   }
-  _messageTargetsCurrentInstance(message) {
-    return this._delivery.messageTargetsCurrentInstance(message);
-  }
   async _drainOrderedMessages(ns, beforeSeq) {
     await this._delivery.drainOrderedMessages(ns, beforeSeq);
   }
@@ -15474,59 +15673,6 @@ var _AUNClient = class _AUNClient {
     const digest = await crypto.subtle.digest("SHA-256", certBytes);
     return "sha256:" + Array.from(new Uint8Array(digest)).map((b) => b.toString(16).padStart(2, "0")).join("");
   }
-  /**
-   * 从 X.509 DER 证书中提取 SubjectPublicKeyInfo 并计算其 SHA-256 指纹。
-   * 返回 "sha256:<hex>"，提取失败返回空串。
-   * 用于 H7 指纹校验（DER 证书指纹 OR SPKI 指纹任一匹配）。
-   */
-  async _spkiFingerprint(certPem) {
-    try {
-      const der = new Uint8Array(pemToArrayBuffer(certPem));
-      const readLen = (buf, pos) => {
-        const first = buf[pos];
-        if (first < 128) return { len: first, next: pos + 1 };
-        const n = first & 127;
-        let len = 0;
-        for (let i = 0; i < n; i++) len = len << 8 | buf[pos + 1 + i];
-        return { len, next: pos + 1 + n };
-      };
-      if (der[0] !== 48) return "";
-      const outer = readLen(der, 1);
-      const tbsStart = outer.next;
-      if (der[tbsStart] !== 48) return "";
-      const tbsLen = readLen(der, tbsStart + 1);
-      let p = tbsLen.next;
-      const tbsEnd = tbsLen.next + tbsLen.len;
-      if (der[p] === 160) {
-        const lv2 = readLen(der, p + 1);
-        p = lv2.next + lv2.len;
-      }
-      if (der[p] !== 2) return "";
-      let lv = readLen(der, p + 1);
-      p = lv.next + lv.len;
-      if (der[p] !== 48) return "";
-      lv = readLen(der, p + 1);
-      p = lv.next + lv.len;
-      if (der[p] !== 48) return "";
-      lv = readLen(der, p + 1);
-      p = lv.next + lv.len;
-      if (der[p] !== 48) return "";
-      lv = readLen(der, p + 1);
-      p = lv.next + lv.len;
-      if (der[p] !== 48) return "";
-      lv = readLen(der, p + 1);
-      p = lv.next + lv.len;
-      if (der[p] !== 48 || p >= tbsEnd) return "";
-      const spkiStart = p;
-      const spkiLV = readLen(der, p + 1);
-      const spkiEnd = spkiLV.next + spkiLV.len;
-      const spkiDer = der.subarray(spkiStart, spkiEnd);
-      const digest = await crypto.subtle.digest("SHA-256", spkiDer);
-      return "sha256:" + Array.from(new Uint8Array(digest)).map((b) => b.toString(16).padStart(2, "0")).join("");
-    } catch {
-      return "";
-    }
-  }
   async _decryptGroupThoughts(result) {
     return await this._v2E2EE.decryptGroupThoughts(result);
   }
@@ -16030,12 +16176,6 @@ var _AUNClient = class _AUNClient {
   _validateMessageRecipient(toAid) {
     this._rpcPipeline.validateMessageRecipient(toAid);
   }
-  _validateOutboundCall(method, params) {
-    this._rpcPipeline.validateOutboundCall(method, params);
-  }
-  _injectMessageCursorContext(method, params) {
-    this._rpcPipeline.injectMessageCursorContext(method, params);
-  }
   /** 处理服务端主动断开通知 event/gateway.disconnect
    *
    * 服务端可能附带结构化 detail 字段（如配额超限时含 aid/device_id/slot_id/quota_kind/evicted_by）。
@@ -16414,9 +16554,6 @@ var _AUNClient = class _AUNClient {
   _scheduleV2SenderIKPending(args) {
     return this._v2E2EE.scheduleSenderIKPending(args);
   }
-  async _resolveV2SenderIKPending(fromAid, senderDeviceId, groupId, fetchKey) {
-    return await this._v2E2EE.resolveSenderIKPending(fromAid, senderDeviceId, groupId, fetchKey);
-  }
   /**
    * V2 P2P 加密发送（推测性：用缓存 bootstrap 直接发，失败刷新重试一次）。
    *
@@ -16769,9 +16906,6 @@ var _AUNClient = class _AUNClient {
     return (!deviceId || deviceId === (this._deviceId ?? "")) && (!slotId || slotId === (this._slotId ?? ""));
   }
   // ── Pull Gate（序列化同一 key 的并发 pull）──────────────────
-  _pullGateKeyForCall(method, params) {
-    return this._rpcPipeline.pullGateKeyForCall(method, params);
-  }
   async _runPullSerialized(key, operation) {
     return await this._rpcPipeline.runPullSerialized(key, operation);
   }