@anhlp/alp-client 0.0.0-stage → 0.0.1-beta.4

package/src/rpc/client.js

@@ -0,0 +1,296 @@
+import { AlpRpcError, MAX_FRAME } from '@anhlp/alp-protocol';
+import { AlpClientError } from './errors.js';
+import { utf8Length } from './framing.js';
+import { timerDelay } from './timers.js';
+
+/**
+ * The transport-independent JSON-RPC 2.0 engine of an ALP client (plans/reference/ALPD.md §3):
+ * request correlation, the daemon's `event` and other notifications, requests the daemon sends
+ * the client (extension.register), local timeouts and aborts, and cleanup when the connection
+ * ends. It runs unchanged in Node, browsers and React Native; a transport moves whole frames.
+ *
+ * A transport carries one complete JSON-RPC message per frame, as text. Framing (newlines on a
+ * socket, one WebSocket message per frame), byte decoding, connection setup and authentication
+ * belong to the transport and whoever creates it, never to this engine.
+ */
+
+/**
+ * @typedef {'open' | 'closed'} TransportState
+ * @typedef {{ error?: Error, code?: number, reason?: string }} TransportClose
+ *   Why a transport closed: `error` when it failed, `code`/`reason` when the peer said so.
+ * @typedef {{
+ *   readonly state: TransportState,
+ *   send(frame: string): void,
+ *   onMessage(listener: (frame: string) => void): () => void,
+ *   onClose(listener: (close: TransportClose) => void): () => void,
+ *   close(): void,
+ * }} AlpTransport
+ *   Contract (docs/alp/client-sdk.md): `send` delivers or throws, synchronously, and a throw means
+ *   the frame did not leave; `onMessage` delivers frames in arrival order; `onClose` fires at most
+ *   once, also after `close()`; nothing is delivered after it; `close` is idempotent.
+ * @typedef {{
+ *   readonly aborted: boolean,
+ *   readonly reason?: unknown,
+ *   addEventListener(type: 'abort', listener: () => void, options?: { once?: boolean }): void,
+ *   removeEventListener(type: 'abort', listener: () => void): void,
+ * }} AbortSignalLike
+ * @typedef {{ signal?: AbortSignalLike, timeoutMs?: number }} RequestOptions
+ *   Both end only this client's wait; neither tells the daemon to stop. A timeout of Infinity, or
+ *   longer than a timer can wait (2^31-1 ms), means none.
+ * @typedef {{
+ *   maxPending?: number,
+ *   maxFrame?: number,
+ *   timeoutMs?: number,
+ *   onListenerError?: (error: unknown) => void,
+ * }} AlpRpcClientOptions
+ */
+
+const CLOSED = 'ALP daemon connection closed';
+/** Requests waiting for an answer at once; beyond it a request fails as `overloaded` and is not sent. */
+export const DEFAULT_MAX_PENDING = 4096;
+
+/** A listener's exception must not break dispatch to the others; it surfaces like an uncaught error. @param {unknown} error */
+const rethrow = error => { setTimeout(() => { throw error; }, 0); };
+
+/** @param {AlpTransport} transport */
+function assertTransport(transport) {
+  for (const name of ['send', 'onMessage', 'onClose', 'close']) {
+    if (typeof /** @type {any} */ (transport)?.[name] !== 'function') throw new TypeError(`ALP transport must implement ${name}()`);
+  }
+}
+
+/** @param {AbortSignalLike} signal */
+const abortError = signal => new AlpClientError('ALP request aborted', { reason: 'aborted', cause: signal.reason });
+
+/** @param {object} value @param {string} key */
+const own = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+
+export class AlpRpcClient {
+  /** @type {AlpTransport} */ #transport;
+  #sequence = 0;
+  /** @type {Map<number, { resolve(value: unknown): void, reject(error: unknown): void, cleanup(): void }>} */
+  #pending = new Map();
+  /** @type {Set<(envelope: any) => void>} */ #events = new Set();
+  /** @type {Set<(method: string, params: any) => void>} */ #notifications = new Set();
+  /** @type {Set<(error: Error) => void>} */ #closes = new Set();
+  /** @type {Set<(method: string, params: any) => unknown>} */ #requestHandlers = new Set();
+  /** @type {Array<() => void>} */ #detach = [];
+  /** @type {AlpClientError | undefined} */ #closeError;
+  #maxPending;
+  #maxFrame;
+  #timeoutMs;
+  #onListenerError;
+
+  /**
+   * @param {AlpTransport} transport an open transport; the client owns it from now on
+   * @param {AlpRpcClientOptions} [options]
+   */
+  constructor(transport, { maxPending = DEFAULT_MAX_PENDING, maxFrame = MAX_FRAME, timeoutMs, onListenerError = rethrow } = {}) {
+    assertTransport(transport);
+    this.#transport = transport;
+    this.#maxPending = maxPending;
+    this.#maxFrame = maxFrame;
+    timerDelay(timeoutMs);
+    this.#timeoutMs = timeoutMs;
+    this.#onListenerError = onListenerError;
+    this.#detach.push(transport.onMessage(frame => this.#receive(frame)));
+    this.#detach.push(transport.onClose(close => this.#finish(this.#disconnected(close))));
+    if (transport.state === 'closed') this.#finish(new AlpClientError(CLOSED, { reason: 'disconnected' }));
+  }
+
+  /** True once the connection is gone, for whatever reason. */
+  get closed() { return this.#closeError !== undefined; }
+  /** Requests sent and still waiting for an answer. */
+  get pendingCount() { return this.#pending.size; }
+
+  /**
+   * Sends one request and resolves with its result, or rejects with AlpRpcError (the daemon
+   * answered with an error) or AlpClientError (the client gave up: see CLIENT_ERROR). Requests are
+   * never resent, also not after a reconnect.
+   * @template [T=any]
+   * @param {string} method
+   * @param {unknown} [params]
+   * @param {RequestOptions} [options]
+   * @returns {Promise<T>}
+   */
+  request(method, params = {}, { signal, timeoutMs = this.#timeoutMs } = {}) {
+    if (this.#closeError) return Promise.reject(new AlpClientError(CLOSED, { reason: this.#closeError.reason === 'closed' ? 'closed' : 'disconnected', cause: this.#closeError }));
+    if (signal?.aborted) return Promise.reject(abortError(signal));
+    if (this.#pending.size >= this.#maxPending) return Promise.reject(new AlpClientError(`Too many ALP requests waiting for an answer (${this.#maxPending})`, { reason: 'overloaded' }));
+    /** @type {number | undefined} */
+    let delay;
+    try { delay = timerDelay(timeoutMs); } catch (error) { return Promise.reject(error); }
+    const id = ++this.#sequence;
+    let frame;
+    try { frame = JSON.stringify({ jsonrpc: '2.0', id, method, params }); } catch (error) { return Promise.reject(error); }
+    // The limit counts the newline a stream transport adds, as alpd counts it.
+    if (utf8Length(frame) >= this.#maxFrame) return Promise.reject(new AlpClientError(`ALP request ${method} exceeds the ${this.#maxFrame}-byte frame limit`, { reason: 'send_failed' }));
+    return new Promise((resolve, reject) => {
+      /** @type {ReturnType<typeof setTimeout> | undefined} */
+      let timer;
+      const onAbort = () => { if (this.#pending.delete(id)) { cleanup(); reject(abortError(/** @type {AbortSignalLike} */ (signal))); } };
+      const cleanup = () => {
+        if (timer !== undefined) clearTimeout(timer);
+        signal?.removeEventListener('abort', onAbort);
+      };
+      this.#pending.set(id, { resolve, reject, cleanup });
+      if (delay !== undefined) {
+        timer = setTimeout(() => {
+          if (!this.#pending.delete(id)) return;
+          cleanup();
+          reject(new AlpClientError(`ALP request ${method} timed out after ${timeoutMs} ms`, { reason: 'timeout' }));
+        }, delay);
+      }
+      signal?.addEventListener('abort', onAbort, { once: true });
+      try {
+        this.#transport.send(frame);
+      } catch (error) {
+        // A transport that is already gone (a socket half-closed by alpd, a WebSocket closing) ends
+        // the connection now, so `closed` is true when this request rejects, as it was before the
+        // transport reported its close. A transport still open refused only this frame.
+        if (this.#transport.state === 'closed') this.#finish(new AlpClientError(CLOSED, { reason: 'disconnected', cause: error }));
+        else if (this.#pending.delete(id)) {
+          cleanup();
+          reject(new AlpClientError(`Could not send ALP request ${method}: ${error instanceof Error ? error.message : String(error)}`, { reason: 'send_failed', cause: error }));
+        }
+      }
+    });
+  }
+
+  /** Every `event` notification: an envelope of a session the connection attached to. Returns a remover. @param {(envelope: any) => void} listener */
+  onEvent(listener) { return this.#add(this.#events, listener); }
+
+  /** Every notification from the daemon, `event` included; for methods this client does not know yet. @param {(method: string, params: any) => void} listener */
+  onNotification(listener) { return this.#add(this.#notifications, listener); }
+
+  /**
+   * Answers requests the daemon sends this client (the extension RPC of ALPD §61). The first
+   * handler answers; its result, or its error's numeric `code`, `message` and `data`, goes back.
+   * @param {(method: string, params: any) => unknown} handler
+   */
+  onRequest(handler) { return this.#add(this.#requestHandlers, handler); }
+
+  /** Called once when the connection ends, with the error pending requests were rejected with. @param {(error: Error) => void} listener */
+  onClose(listener) { return this.#add(this.#closes, listener); }
+
+  /** Ends the connection; waiting requests reject with reason `closed`. Idempotent. */
+  close() {
+    if (this.#closeError) return;
+    this.#finish(new AlpClientError(CLOSED, { reason: 'closed' }));
+  }
+
+  /** @template F @param {Set<F>} set @param {F} listener */
+  #add(set, listener) {
+    if (typeof listener !== 'function') throw new TypeError('ALP client listener must be a function');
+    if (this.#closeError) return () => false;
+    set.add(listener);
+    return () => set.delete(listener);
+  }
+
+  /** @param {TransportClose} [close] */
+  #disconnected(close = {}) {
+    if (close.error instanceof AlpClientError) return close.error;
+    const data = close.code !== undefined || close.reason ? { code: close.code, reason: close.reason } : undefined;
+    return new AlpClientError(close.error?.message ?? CLOSED, { reason: 'disconnected', cause: close.error, data });
+  }
+
+  /** @param {string} message */
+  #violation(message) {
+    this.#finish(new AlpClientError(message, { reason: 'protocol' }));
+  }
+
+  /** @param {Function} listener @param {unknown[]} args */
+  #call(listener, ...args) {
+    try { listener(...args); } catch (error) { this.#onListenerError(error); }
+  }
+
+  /** @param {string} frame */
+  #receive(frame) {
+    if (this.#closeError) return;
+    if (typeof frame !== 'string') return this.#violation('Invalid frame from ALP daemon');
+    let message;
+    try { message = JSON.parse(frame); } catch { return this.#violation('Invalid frame from ALP daemon'); }
+    if (typeof message !== 'object' || message === null || Array.isArray(message)) return this.#violation('Invalid frame from ALP daemon');
+    const hasId = message.id !== undefined && message.id !== null;
+    if (message.method === 'event') {
+      for (const listener of [...this.#events]) this.#call(listener, message.params);
+      for (const listener of [...this.#notifications]) this.#call(listener, message.method, message.params);
+      return;
+    }
+    if (typeof message.method === 'string' && hasId && !own(message, 'result') && !own(message, 'error')) return this.#answer(message.id, message.method, message.params ?? {});
+    if (typeof message.method === 'string' && !hasId) {
+      for (const listener of [...this.#notifications]) this.#call(listener, message.method, message.params);
+      return;
+    }
+    // A response to a request this client no longer waits for (timed out, aborted) or never sent,
+    // and an error the daemon could not tie to a request (id null), have nobody to go to.
+    const waiter = this.#pending.get(message.id);
+    if (!waiter) return;
+    this.#pending.delete(message.id);
+    waiter.cleanup();
+    if (own(message, 'error') && typeof message.error === 'object' && message.error !== null) waiter.reject(new AlpRpcError(message.error));
+    else if (own(message, 'result') && !own(message, 'error')) waiter.resolve(message.result);
+    else waiter.reject(new AlpClientError('Malformed response from ALP daemon', { reason: 'protocol', data: { id: message.id } }));
+  }
+
+  /**
+   * Answers a request from alpd. Every request gets exactly one answer: a result that cannot be
+   * serialized or does not fit a frame becomes an error, and an error whose data cannot go either
+   * goes without it, so alpd's caller never waits for a reply that was silently dropped.
+   * @param {unknown} id @param {string} method @param {unknown} params
+   */
+  #answer(id, method, params) {
+    /** The frame for `body`, or undefined if it cannot be serialized or is over the limit. @param {object} body */
+    const frameOf = body => {
+      try {
+        const frame = JSON.stringify({ jsonrpc: '2.0', id, ...body });
+        return utf8Length(frame) < this.#maxFrame ? frame : undefined;
+      } catch { return undefined; }
+    };
+    /** @param {string | undefined} frame */
+    const send = frame => {
+      if (this.#closeError) return;
+      if (frame === undefined) return this.#finish(new AlpClientError('ALP reply exceeds the frame limit', { reason: 'protocol' }));
+      try { this.#transport.send(frame); } catch (cause) {
+        this.#finish(new AlpClientError('Could not send ALP reply', { reason: 'send_failed', cause }));
+      }
+    };
+    /** @param {unknown} error */
+    const failure = error => {
+      const code = (error && typeof (/** @type {any} */ (error)).code === 'number') ? /** @type {any} */ (error).code : 1000;
+      const text = error instanceof Error ? error.message : String(error);
+      const message = text.length > 2000 ? `${text.slice(0, 2000)}...` : text;
+      const data = (error && /** @type {any} */ (error).data !== undefined) ? { data: /** @type {any} */ (error).data } : {};
+      return frameOf({ error: { code, message, ...data } }) ?? frameOf({ error: { code, message } })
+        ?? frameOf({ error: { code: -32603, message: 'The reply could not be sent' } });
+    };
+    const [handler] = this.#requestHandlers;
+    if (!handler) return send(failure(Object.assign(new Error(`Unknown method '${method}'`), { code: -32601 })));
+    Promise.resolve().then(async () => {
+      try {
+        const result = await handler(method, params);
+        const frame = frameOf({ result: result === undefined ? {} : result });
+        send(frame ?? failure(new Error(`The result of ${method} cannot be serialized or exceeds the ${this.#maxFrame}-byte frame limit`)));
+      } catch (error) {
+        send(failure(error));
+      }
+    });
+  }
+
+  /** @param {AlpClientError} error */
+  #finish(error) {
+    if (this.#closeError) return;
+    this.#closeError = error;
+    for (const detach of this.#detach.splice(0)) { try { detach(); } catch {} }
+    try { this.#transport.close(); } catch {}
+    const pending = [...this.#pending.values()];
+    this.#pending.clear();
+    for (const waiter of pending) { waiter.cleanup(); waiter.reject(error); }
+    const closes = [...this.#closes];
+    this.#events.clear();
+    this.#notifications.clear();
+    this.#requestHandlers.clear();
+    this.#closes.clear();
+    for (const listener of closes) this.#call(listener, error);
+  }
+}

package/src/rpc/errors.js

@@ -0,0 +1,54 @@
+/**
+ * Errors the client raises itself, as opposed to AlpRpcError, which carries an error alpd returned.
+ * Portable: no Node built-ins, process or Buffer (plans/reference/ALPD.md §3, docs/alp/client-sdk.md).
+ */
+
+const BRAND = Symbol.for('@anhlp/alp-client/AlpClientError');
+
+/**
+ * Why a request or a connection ended on the client side.
+ * - `closed`: this client was closed locally with close().
+ * - `disconnected`: the transport closed or failed. A request that was already sent may or may not
+ *   have run on the daemon; the client never resends it.
+ * - `protocol`: the peer sent something that is not ALP JSON-RPC, so the client closed the connection.
+ * - `send_failed`: the transport refused the frame; the request never left this client.
+ * - `timeout` / `aborted`: the caller stopped waiting. Only the local wait ends; the daemon is not told.
+ * - `overloaded`: too many requests are waiting for an answer already; nothing was sent.
+ */
+export const CLIENT_ERROR = Object.freeze({
+  closed: 'closed',
+  disconnected: 'disconnected',
+  protocol: 'protocol',
+  sendFailed: 'send_failed',
+  timeout: 'timeout',
+  aborted: 'aborted',
+  overloaded: 'overloaded',
+});
+
+export class AlpClientError extends Error {
+  /**
+   * @param {string} message
+   * @param {{ reason: 'closed' | 'disconnected' | 'protocol' | 'send_failed' | 'timeout' | 'aborted' | 'overloaded', cause?: unknown, data?: unknown }} details
+   */
+  constructor(message, { reason, cause, data }) {
+    super(message, cause === undefined ? undefined : { cause });
+    this.name = 'AlpClientError';
+    /** @type {'closed' | 'disconnected' | 'protocol' | 'send_failed' | 'timeout' | 'aborted' | 'overloaded'} */
+    this.reason = reason;
+    /** @type {unknown} */
+    this.data = data;
+    Object.defineProperty(this, BRAND, { value: true });
+  }
+}
+
+/**
+ * True for an AlpClientError, also one thrown by another copy of this module (a bundle may carry
+ * two); `reason` narrows the check.
+ * @param {unknown} error
+ * @param {string} [reason]
+ * @returns {error is AlpClientError}
+ */
+export function isAlpClientError(error, reason) {
+  return typeof error === 'object' && error !== null && /** @type {any} */ (error)[BRAND] === true
+    && (reason === undefined || /** @type {any} */ (error).reason === reason);
+}

package/src/rpc/framing.js

@@ -0,0 +1,61 @@
+/**
+ * Newline-delimited JSON framing for stream transports (a Unix socket, a named pipe, a TCP
+ * stream). Portable: strings in, strings out; the stream owner decodes bytes to text first.
+ * Message transports such as a WebSocket carry whole frames and need none of this.
+ */
+
+/** UTF-8 length of `text` without Buffer or TextEncoder; an unpaired surrogate counts as U+FFFD (3 bytes). @param {string} text */
+export function utf8Length(text) {
+  let bytes = 0;
+  for (let index = 0; index < text.length; index++) {
+    const code = text.charCodeAt(index);
+    if (code < 0x80) bytes += 1;
+    else if (code < 0x800) bytes += 2;
+    else if (code >= 0xd800 && code <= 0xdbff && index + 1 < text.length && (text.charCodeAt(index + 1) & 0xfc00) === 0xdc00) { bytes += 4; index++; }
+    else bytes += 3;
+  }
+  return bytes;
+}
+
+/**
+ * Splits decoded text chunks into frames. `push` returns the complete frames in order, blank
+ * lines skipped, and throws once a frame (complete or still arriving) exceeds `maxFrame` bytes;
+ * the decoder is unusable after that. Each character is measured once, so a frame that arrives
+ * in many chunks costs linear time.
+ * @param {{ maxFrame: number }} options
+ * @returns {{ push(chunk: string): string[], readonly buffered: number }}
+ */
+export function createLineDecoder({ maxFrame }) {
+  /** @type {string[]} */
+  let parts = [];
+  let bytes = 0;
+  let failed = false;
+  const overflow = () => { failed = true; parts = []; bytes = 0; return new RangeError(`Frame exceeds ${maxFrame} bytes`); };
+  return {
+    push(chunk) {
+      if (failed) throw new RangeError('Line decoder already failed');
+      /** @type {string[]} */
+      const frames = [];
+      let start = 0;
+      for (let index = chunk.indexOf('\n'); index >= 0; index = chunk.indexOf('\n', start)) {
+        const piece = chunk.slice(start, index);
+        bytes += utf8Length(piece);
+        if (bytes > maxFrame) throw overflow();
+        parts.push(piece);
+        const line = parts.length === 1 ? parts[0] : parts.join('');
+        parts = [];
+        bytes = 0;
+        start = index + 1;
+        if (line.trim()) frames.push(line);
+      }
+      if (start < chunk.length) {
+        const rest = chunk.slice(start);
+        bytes += utf8Length(rest);
+        if (bytes > maxFrame) throw overflow();
+        parts.push(rest);
+      }
+      return frames;
+    },
+    get buffered() { return bytes; },
+  };
+}

package/src/rpc/handshake.js

@@ -0,0 +1,16 @@
+import { PROTOCOL_VERSION } from '@anhlp/alp-protocol';
+
+/** @typedef {{ name: string, version: string }} ClientInfo */
+
+/**
+ * The version handshake every ALP connection starts with (plans/reference/ALPD.md §3): alpd
+ * answers nothing else before it. Shared by the Node `connect` and portable clients, so a change
+ * to the handshake (Task 06) lands in one place.
+ * @param {{ request(method: string, params?: unknown, options?: import('./client.js').RequestOptions): Promise<any> }} client
+ * @param {ClientInfo} [info]
+ * @param {import('./client.js').RequestOptions} [options]
+ * @returns {Promise<{ protocolVersion: number } & Record<string, unknown>>}
+ */
+export function hello(client, info = { name: 'alp', version: '0' }, options) {
+  return client.request('daemon.hello', { protocolVersion: PROTOCOL_VERSION, client: info }, options);
+}

package/src/rpc/reconnect.js

@@ -0,0 +1,226 @@
+import { AlpRpcError, ERROR } from '@anhlp/alp-protocol';
+import { AlpRpcClient } from './client.js';
+import { AlpClientError } from './errors.js';
+
+/**
+ * Keeps an ALP connection up: connects, runs the caller's `onConnect` (handshake, reattach and
+ * replay as the protocol defines them), and after a disconnect connects again with exponential
+ * backoff until stopped. A connection counts as up only once it has stayed open `stableMs`; one
+ * that drops sooner (a gateway closing right after the handshake) counts as a failed attempt, so
+ * backoff and `maxAttempts` still apply. It never resends a request: requests in flight when the connection drops
+ * reject as `disconnected`, and requests made while it is down reject at once. Whether and how to
+ * retry belongs to the caller, who knows which methods are safe to repeat.
+ */
+
+/**
+ * @typedef {import('./client.js').AlpTransport} AlpTransport
+ * @typedef {import('./client.js').AlpRpcClientOptions} AlpRpcClientOptions
+ * @typedef {import('./client.js').RequestOptions} RequestOptions
+ * @typedef {import('./client.js').AbortSignalLike} AbortSignalLike
+ * @typedef {'connecting' | 'open' | 'waiting' | 'stopped'} ReconnectState
+ * @typedef {{ initialMs?: number, maxMs?: number, factor?: number, jitter?: number }} Backoff
+ * @typedef {{
+ *   connect(context: { attempt: number, signal: AbortSignalLike }): Promise<AlpTransport>,
+ *   onConnect?(client: AlpRpcClient, context: { attempt: number, reconnect: boolean, signal: AbortSignalLike }): unknown,
+ *   onDisconnect?(error: Error, context: { reconnect: boolean }): void,
+ *   backoff?: Backoff,
+ *   maxAttempts?: number,
+ *   stableMs?: number,
+ *   shouldRetry?(error: Error): boolean,
+ *   client?: AlpRpcClientOptions,
+ *   random?: () => number,
+ * }} ReconnectOptions
+ * @typedef {{
+ *   readonly state: ReconnectState,
+ *   readonly client: AlpRpcClient | undefined,
+ *   readonly attempt: number,
+ *   ready(options?: { signal?: AbortSignalLike }): Promise<AlpRpcClient>,
+ *   request<T = any>(method: string, params?: unknown, options?: RequestOptions): Promise<T>,
+ *   onEvent(listener: (envelope: any) => void): () => boolean,
+ *   onNotification(listener: (method: string, params: any) => void): () => boolean,
+ *   onState(listener: (state: ReconnectState, error?: Error) => void): () => boolean,
+ *   stop(): void,
+ * }} ReconnectingClient
+ */
+
+/** The delay before attempt `attempt` (1-based), with ±jitter. @param {number} attempt @param {Backoff} backoff @param {() => number} random */
+export function backoffDelay(attempt, { initialMs = 250, maxMs = 10_000, factor = 2, jitter = 0.2 } = {}, random = Math.random) {
+  const base = Math.min(maxMs, initialMs * factor ** Math.max(0, attempt - 1));
+  return Math.max(0, Math.round(base * (1 + jitter * (2 * random() - 1))));
+}
+
+/**
+ * Whether a failed connect or onConnect is worth another attempt: everything but alpd refusing the
+ * handshake (ERROR.protocol, an unsupported protocol version), which retrying cannot fix.
+ * @param {Error} error
+ */
+export function retryable(error) {
+  return !(error instanceof AlpRpcError && error.code === ERROR.protocol);
+}
+
+/** The platform's AbortController, whose signal fetch and AbortSignal.any accept; a minimal one where there is none. */
+function controller() {
+  if (typeof globalThis.AbortController === 'function') {
+    const native = new globalThis.AbortController();
+    return { signal: /** @type {AbortSignalLike} */ (native.signal), /** @param {unknown} reason */ abort: reason => native.abort(reason) };
+  }
+  /** @type {Set<() => void>} */
+  const listeners = new Set();
+  const signal = {
+    aborted: false,
+    /** @type {unknown} */ reason: undefined,
+    /** @param {'abort'} _type @param {() => void} listener */
+    addEventListener(_type, listener) { listeners.add(listener); },
+    /** @param {'abort'} _type @param {() => void} listener */
+    removeEventListener(_type, listener) { listeners.delete(listener); },
+  };
+  return {
+    signal,
+    /** @param {unknown} reason */
+    abort(reason) {
+      if (signal.aborted) return;
+      signal.aborted = true;
+      signal.reason = reason;
+      for (const listener of [...listeners]) listener();
+      listeners.clear();
+    },
+  };
+}
+
+/**
+ * @param {ReconnectOptions} options
+ * @returns {ReconnectingClient}
+ */
+export function createReconnectingClient({ connect, onConnect, onDisconnect, backoff = {}, maxAttempts = Infinity, stableMs = 5_000, shouldRetry = retryable, client: clientOptions, random = Math.random }) {
+  if (typeof connect !== 'function') throw new TypeError('createReconnectingClient needs connect()');
+  /** @type {ReconnectState} */
+  let state = 'connecting';
+  /** @type {AlpRpcClient | undefined} */
+  let current;
+  let attempt = 0;
+  let connectedBefore = false;
+  /** @type {ReturnType<typeof setTimeout> | undefined} */
+  let timer;
+  // One run for the client's whole life: stop() is final and aborts it.
+  const run = controller();
+  /** @type {Set<(envelope: any) => void>} */
+  const events = new Set();
+  /** @type {Set<(method: string, params: any) => void>} */
+  const notifications = new Set();
+  /** @type {Set<(state: ReconnectState, error?: Error) => void>} */
+  const states = new Set();
+  /** @type {Set<{ resolve(client: AlpRpcClient): void, reject(error: Error): void }>} */
+  const waiters = new Set();
+
+  const onListenerError = clientOptions?.onListenerError ?? (error => { setTimeout(() => { throw error; }, 0); });
+  /** @param {Function} listener @param {unknown[]} args */
+  const dispatch = (listener, ...args) => { try { listener(...args); } catch (error) { onListenerError(error); } };
+
+  /** @param {ReconnectState} next @param {Error} [error] */
+  const enter = (next, error) => {
+    state = next;
+    for (const listener of [...states]) {
+      dispatch(listener, next, error);
+      // A listener that called stop() has moved the state on; later ones must not hear a stale one.
+      if (state !== next) return;
+    }
+    if (next === 'open' && current) for (const waiter of [...waiters]) { waiters.delete(waiter); waiter.resolve(current); }
+    if (next === 'stopped') for (const waiter of [...waiters]) { waiters.delete(waiter); waiter.reject(error ?? new AlpClientError('ALP connection stopped', { reason: 'closed' })); }
+  };
+
+  /** @param {Error} error */
+  const retry = error => {
+    if (state === 'stopped') return;
+    if (attempt >= maxAttempts || !shouldRetry(error)) return enter('stopped', error);
+    enter('waiting', error);
+    if (state !== 'waiting') return;
+    timer = setTimeout(() => { timer = undefined; void open(); }, backoffDelay(attempt, backoff, random));
+  };
+
+  const open = async () => {
+    if (state === 'stopped') return;
+    attempt++;
+    enter('connecting');
+    const { signal } = run;
+    if (state !== 'connecting' || signal.aborted) return;
+    /** @type {AlpRpcClient | undefined} */
+    let candidate;
+    // stop() during the handshake closes the connection being set up: its pending requests reject
+    // and nothing more is sent on it.
+    const closeCandidate = () => candidate?.close();
+    signal.addEventListener('abort', closeCandidate, { once: true });
+    try {
+      const transport = await connect({ attempt, signal });
+      if (signal.aborted) { try { transport.close(); } catch {} return; }
+      candidate = new AlpRpcClient(transport, clientOptions);
+      // Listeners go on before onConnect so a replay it requests reaches them.
+      // Each caller listener runs on its own, as on AlpRpcClient: one that throws does not stop the rest.
+      candidate.onEvent(envelope => { for (const listener of [...events]) dispatch(listener, envelope); });
+      candidate.onNotification((method, params) => { for (const listener of [...notifications]) dispatch(listener, method, params); });
+      if (onConnect) await onConnect(candidate, { attempt, reconnect: connectedBefore, signal });
+      if (signal.aborted) { candidate.close(); return; }
+      if (candidate.closed) throw new AlpClientError('ALP connection closed during onConnect', { reason: 'disconnected' });
+    } catch (error) {
+      candidate?.close();
+      if (signal.aborted) return;
+      return retry(error instanceof Error ? error : new Error(String(error)));
+    } finally {
+      signal.removeEventListener('abort', closeCandidate);
+    }
+    const connected = /** @type {AlpRpcClient} */ (candidate);
+    current = connected;
+    const reconnect = connectedBefore;
+    connectedBefore = true;
+    const openedAt = Date.now();
+    connected.onClose(error => {
+      if (current !== connected) return;
+      current = undefined;
+      // Only a connection that stayed up starts the next one from a fresh backoff.
+      if (Date.now() - openedAt >= stableMs) attempt = 0;
+      dispatch(() => onDisconnect?.(error, { reconnect }));
+      retry(error);
+    });
+    enter('open');
+  };
+
+  void open();
+
+  return {
+    get state() { return state; },
+    get client() { return current; },
+    get attempt() { return attempt; },
+    ready({ signal } = {}) {
+      if (state === 'open' && current) return Promise.resolve(current);
+      if (state === 'stopped') return Promise.reject(new AlpClientError('ALP connection stopped', { reason: 'closed' }));
+      return new Promise((resolve, reject) => {
+        const waiter = {
+          /** @param {AlpRpcClient} client */ resolve: client => { signal?.removeEventListener('abort', onAbort); resolve(client); },
+          /** @param {Error} error */ reject: error => { signal?.removeEventListener('abort', onAbort); reject(error); },
+        };
+        const onAbort = () => { waiters.delete(waiter); reject(new AlpClientError('Waiting for the ALP connection was aborted', { reason: 'aborted', cause: signal?.reason })); };
+        if (signal?.aborted) return onAbort();
+        waiters.add(waiter);
+        signal?.addEventListener('abort', onAbort, { once: true });
+      });
+    },
+    request(method, params, options) {
+      if (state !== 'open' || !current) return Promise.reject(new AlpClientError('ALP daemon connection closed', { reason: state === 'stopped' ? 'closed' : 'disconnected' }));
+      return current.request(method, params, options);
+    },
+    onEvent(listener) { events.add(listener); return () => events.delete(listener); },
+    onNotification(listener) { notifications.add(listener); return () => notifications.delete(listener); },
+    onState(listener) { states.add(listener); return () => states.delete(listener); },
+    stop() {
+      if (state === 'stopped') return;
+      if (timer !== undefined) { clearTimeout(timer); timer = undefined; }
+      run.abort(new AlpClientError('ALP connection stopped', { reason: 'closed' }));
+      const last = current;
+      current = undefined;
+      enter('stopped');
+      last?.close();
+      events.clear();
+      notifications.clear();
+      states.clear();
+    },
+  };
+}