@compforge/harness-toolbox 0.4.8 → 0.5.1

package/dist/mysql/client.d.ts

@@ -1,8 +1,8 @@
 import type { Client } from "../client";
 import type { Connection, ConnectionOptions } from "mysql2/promise";
 import type { Database, DatabaseTarget, DatabaseRow, DatabaseQueryLimits, DatabaseQueryResult, SqlStatement } from "./types";
-import type { ConnectionSource, ClientLifecycle } from "../datasource";
-import { type Transport } from "../transport";
+import type { ClientLifecycle } from "../datasource";
+import { Transport, type TransportPath } from "../transport";
 export interface MysqlDatabaseOptions extends ClientLifecycle {
     /** Per-route mapping and handshake budget. */
     connectTimeoutMs: number;
@@ -18,10 +18,9 @@ type ConnectionFactory = (options: ConnectionOptions, signal?: AbortSignal) => P
  */
 export declare class MysqlDatabase implements Database {
     #private;
-    private readonly transports;
     private readonly options;
     private readonly connect;
-    constructor(transports: readonly Transport[], options: MysqlDatabaseOptions, connect?: ConnectionFactory);
+    constructor(transport: Transport | readonly TransportPath[], options: MysqlDatabaseOptions, connect?: ConnectionFactory);
     query(target: DatabaseTarget, sql: string, values: readonly unknown[]): Promise<DatabaseRow[]>;
     /**
      * Independent statements in submission order, one session: a Pod transport pays the exec
@@ -38,14 +37,15 @@ export declare class MysqlDatabase implements Database {
 /** A datasource-bound MySQL client; the protocol adapter still supports explicit multi-target diagnostics. */
 export declare class MysqlClient<Target extends DatabaseTarget = DatabaseTarget> implements Client {
     #private;
-    private readonly source;
+    private readonly configuration;
+    private readonly transport;
     private readonly options;
     readonly signal: AbortSignal;
-    constructor(source: ConnectionSource<Target>, options: MysqlDatabaseOptions);
+    constructor(configuration: Target | (() => Promise<Target>), transport: Transport, options: MysqlDatabaseOptions);
     initialize(): Promise<void>;
     get database(): MysqlDatabase;
     get target(): Target;
     dispose(): Promise<void>;
 }
-export declare function openMysql<Target extends DatabaseTarget>(source: ConnectionSource<Target>, options: MysqlDatabaseOptions): Promise<MysqlClient<Target>>;
+export declare function openMysql<Target extends DatabaseTarget>(configuration: Target | (() => Promise<Target>), transport: Transport, options: MysqlDatabaseOptions): Promise<MysqlClient<Target>>;
 export {};

package/dist/mysql/client.js

@@ -2,19 +2,24 @@ import {
   MysqlClient,
   MysqlDatabase,
   openMysql
-} from "../chunk-t4hrnaj0.js";
+} from "../chunk-ex429qjt.js";
 import"../chunk-m91t44jh.js";
 import"../chunk-db4an9td.js";
 import"../chunk-835fssgz.js";
-import"../chunk-gm4swndx.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
 import"../chunk-v3hxvnrc.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   openMysql,
   MysqlDatabase,

package/dist/mysql/index.js

@@ -1,12 +1,8 @@
-import"../chunk-pfar9cm3.js";
-import {
-  withReadScope
-} from "../chunk-4sqvppz7.js";
 import {
   MysqlClient,
   MysqlDatabase,
   openMysql
-} from "../chunk-t4hrnaj0.js";
+} from "../chunk-ex429qjt.js";
 import"../chunk-m91t44jh.js";
 import"../chunk-db4an9td.js";
 import {
@@ -18,15 +14,24 @@ import {
   queryLimited
 } from "../chunk-1gyshqd9.js";
 import"../chunk-835fssgz.js";
-import"../chunk-gm4swndx.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-pfar9cm3.js";
+import {
+  withReadScope
+} from "../chunk-4sqvppz7.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
 import"../chunk-v3hxvnrc.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   withReadScope,
   queryLimited,

package/dist/opensearch/client.d.ts

@@ -1,6 +1,9 @@
 import type { Client as ManagedClient } from "../client";
-import type { ConnectionSource, ClientLifecycle } from "../datasource";
+import type { ClientLifecycle } from "../datasource";
+import { Transport } from "../transport";
 import type { SearchEngine, SearchQuery, SearchResult } from "./types";
+/** IP targets retain their address identity but never send an IP literal as TLS SNI. */
+export declare function openSearchServername(host?: string): string | undefined;
 export interface OpenSearchAuth {
     username?: string;
     password?: string;
@@ -17,6 +20,10 @@ export interface OpenSearchOptions {
     acquireTimeoutMs?: number;
     /** Original TLS identity when a transport maps the socket to localhost. */
     servername?: string;
+    /** Only endpoints without an explicit scheme permit HTTP/HTTPS discovery. */
+    preferredScheme?: "http" | "https";
+    /** Original HTTP authority when dialing a forwarded address. */
+    authority?: string;
 }
 export interface OpenSearchClientApi {
     count(params: Record<string, unknown>): Promise<{
@@ -55,6 +62,7 @@ export interface OpenSearchReadApi extends SearchEngine {
 export declare function isOpenSearchReadApi(search: SearchEngine): search is OpenSearchReadApi;
 /** Official OpenSearch client behind the engine-neutral SearchEngine contract. */
 export declare class OpenSearchEngine implements OpenSearchReadApi {
+    #private;
     private readonly options;
     private readonly client;
     constructor(options: OpenSearchOptions, client?: OpenSearchClientApi);
@@ -72,10 +80,12 @@ export declare class OpenSearchEngine implements OpenSearchReadApi {
  */
 export declare class OpenSearchClient implements ManagedClient, OpenSearchReadApi {
     #private;
-    private readonly source;
+    private readonly configuration;
+    private readonly transport;
     private readonly lifecycle;
     readonly signal: AbortSignal;
-    constructor(source: ConnectionSource<OpenSearchOptions>, lifecycle?: OpenSearchLifecycle);
+    get node(): string | undefined;
+    constructor(configuration: OpenSearchOptions | (() => Promise<OpenSearchOptions>), transport: Transport, lifecycle?: OpenSearchLifecycle);
     initialize(): Promise<void>;
     count(index: string, query: SearchQuery): Promise<number>;
     search(index: string, body: SearchQuery): Promise<SearchResult>;
@@ -84,4 +94,4 @@ export declare class OpenSearchClient implements ManagedClient, OpenSearchReadAp
     close(): Promise<void>;
     dispose(): Promise<void>;
 }
-export declare function openOpenSearch(source: ConnectionSource<OpenSearchOptions>, lifecycle?: OpenSearchLifecycle): Promise<OpenSearchClient>;
+export declare function openOpenSearch(configuration: OpenSearchOptions | (() => Promise<OpenSearchOptions>), transport: Transport, lifecycle?: OpenSearchLifecycle): Promise<OpenSearchClient>;

package/dist/opensearch/client.js

@@ -3,17 +3,24 @@ import {
   OpenSearchEngine,
   describeOpenSearchError,
   isOpenSearchReadApi,
-  openOpenSearch
-} from "../chunk-vymm4g9h.js";
-import"../chunk-gm4swndx.js";
-import"../chunk-rkt41za2.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+  openOpenSearch,
+  openSearchServername
+} from "../chunk-kxpecgy7.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
+  openSearchServername,
   openOpenSearch,
   isOpenSearchReadApi,
   describeOpenSearchError,

package/dist/opensearch/index.js

@@ -10,19 +10,26 @@ import {
   OpenSearchEngine,
   describeOpenSearchError,
   isOpenSearchReadApi,
-  openOpenSearch
-} from "../chunk-vymm4g9h.js";
-import"../chunk-gm4swndx.js";
-import"../chunk-rkt41za2.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+  openOpenSearch,
+  openSearchServername
+} from "../chunk-kxpecgy7.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   searchAfterPages,
   parseOpenSearchEndpoint,
+  openSearchServername,
   openOpenSearch,
   isOpenSearchReadApi,
   describeOpenSearchError,

package/dist/redis/client.d.ts

@@ -1,6 +1,6 @@
 import type { Client } from "../client";
-import type { ConnectionSource, ClientLifecycle } from "../datasource";
-import { type TcpTransport } from "../transport";
+import type { ClientLifecycle } from "../datasource";
+import { Transport, type TcpTransport } from "../transport";
 import { type RedisTopologyConfig, type RedisTopology } from "./topology";
 import { createClient, type RedisClientType } from "@redis/client";
 export interface RedisEndpoint {
@@ -86,7 +86,7 @@ export declare class RedisAccess implements RedisAccessApi {
     private readonly baseConfig;
     private readonly connectionFactory;
     private readonly lifecycle;
-    constructor(transports: TcpTransport | readonly TcpTransport[], baseConfig: Omit<RedisConnectionConfig, "database">, connectionFactory?: RedisConnectionFactory, lifecycle?: ClientLifecycle);
+    constructor(transports: Transport | TcpTransport | readonly TcpTransport[], baseConfig: Omit<RedisConnectionConfig, "database">, connectionFactory?: RedisConnectionFactory, lifecycle?: ClientLifecycle);
     connection(endpoint: RedisEndpoint, database: number, credentials?: RedisCredentials): Promise<RedisManagedConnection>;
     close(): Promise<void>;
 }
@@ -94,10 +94,11 @@ export declare class RedisAccess implements RedisAccessApi {
 export type RedisDataSourceTarget = RedisConnectionConfig & RedisTopologyConfig;
 export declare class RedisClient implements Client {
     #private;
-    private readonly source;
+    private readonly configuration;
+    private readonly transport;
     private readonly lifecycle;
     readonly signal: AbortSignal;
-    constructor(source: ConnectionSource<RedisDataSourceTarget>, lifecycle?: ClientLifecycle);
+    constructor(configuration: RedisDataSourceTarget | (() => Promise<RedisDataSourceTarget>), transport: Transport, lifecycle?: ClientLifecycle);
     initialize(): Promise<void>;
     get access(): RedisAccess;
     /** Refresh topology for this observation, while retaining reusable node connections. */
@@ -105,5 +106,5 @@ export declare class RedisClient implements Client {
     get target(): RedisDataSourceTarget;
     dispose(): Promise<void>;
 }
-export declare function openRedis(source: ConnectionSource<RedisDataSourceTarget>, lifecycle?: ClientLifecycle): Promise<RedisClient>;
+export declare function openRedis(configuration: RedisDataSourceTarget | (() => Promise<RedisDataSourceTarget>), transport: Transport, lifecycle?: ClientLifecycle): Promise<RedisClient>;
 export {};

package/dist/redis/client.js

@@ -4,16 +4,21 @@ import {
   RedisConnection,
   openRedis,
   parseRedisInfo
-} from "../chunk-f98qrpx1.js";
-import"../chunk-gm4swndx.js";
+} from "../chunk-njs48b51.js";
 import"../chunk-5tbzf9wd.js";
-import"../chunk-rkt41za2.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   parseRedisInfo,
   openRedis,

package/dist/redis/index.js

@@ -1,25 +1,30 @@
+import {
+  collectRedisKeyStats,
+  redisGroupedSampleSizes
+} from "../chunk-jr9y0ghr.js";
 import {
   RedisAccess,
   RedisClient,
   RedisConnection,
   openRedis,
   parseRedisInfo
-} from "../chunk-f98qrpx1.js";
-import"../chunk-gm4swndx.js";
-import {
-  collectRedisKeyStats,
-  redisGroupedSampleSizes
-} from "../chunk-jr9y0ghr.js";
+} from "../chunk-njs48b51.js";
 import {
   discoverRedisTopology
 } from "../chunk-5tbzf9wd.js";
-import"../chunk-rkt41za2.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   redisGroupedSampleSizes,
   parseRedisInfo,

package/dist/s3/client.d.ts

@@ -1,5 +1,6 @@
 import type { Client } from "../client";
-import type { ClientLifecycle, ConnectionSource } from "../datasource";
+import type { ClientLifecycle } from "../datasource";
+import { Transport } from "../transport";
 import type { S3Target, S3Limits, S3RequestOptions, S3ObjectMetadata, S3ObjectPage, S3BucketPage, S3ObjectRead } from "./types";
 /**
  * @spec Read-only S3 operations share a bounded pool; no failed protocol operation is replayed.
@@ -8,11 +9,12 @@ import type { S3Target, S3Limits, S3RequestOptions, S3ObjectMetadata, S3ObjectPa
  */
 export declare class S3Client implements Client {
     #private;
-    private readonly source;
+    private readonly configuration;
+    private readonly transport;
     private readonly limits;
     private readonly lifecycle;
     readonly signal: AbortSignal;
-    constructor(source: ConnectionSource<S3Target>, limits: S3Limits, lifecycle?: ClientLifecycle);
+    constructor(configuration: S3Target | (() => Promise<S3Target>), transport: Transport, limits: S3Limits, lifecycle?: ClientLifecycle);
     initialize(): Promise<void>;
     /** A failed HEAD remains an error, not a misleading exists=false. */
     headBucket(bucket: string, options?: S3RequestOptions): Promise<void>;

package/dist/s3/client.js

@@ -1,8 +1,22 @@
 import {
   S3Client
-} from "../chunk-zp1s833x.js";
+} from "../chunk-7m95c7pn.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
 import"../chunk-v3hxvnrc.js";
-import"../chunk-x4ntb898.js";
+import"../chunk-z8e1ckkq.js";
+import"../chunk-c2b2jwm4.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
+import"../chunk-rq5fc007.js";
+import"../chunk-9shz0bw1.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   S3Client
 };

package/dist/s3/datasource.js

@@ -1,17 +1,24 @@
 import {
   S3DataSource
-} from "../chunk-35cjec9z.js";
+} from "../chunk-3b877a0y.js";
 import"../chunk-z5pm2emz.js";
-import"../chunk-rkt41za2.js";
-import"../chunk-zp1s833x.js";
+import"../chunk-7m95c7pn.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
 import"../chunk-v3hxvnrc.js";
-import"../chunk-x4ntb898.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+import"../chunk-z8e1ckkq.js";
+import"../chunk-c2b2jwm4.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   S3DataSource
 };

package/dist/s3/handler.d.ts

@@ -1,10 +1,9 @@
-import { NodeHttpHandler } from "@smithy/node-http-handler";
 import type { Endpoint } from "../transport";
 import type { S3Limits, S3Target } from "./types";
-/** Routing changes only the socket destination, never the signed HTTP Host or TLS identity. */
+/** Signing precedes the HTTP handler; routing must preserve the signed Host and TLS identity. */
 export declare function s3Handler(target: S3Target, route: Endpoint, limits: S3Limits): {
     handler: {
-        handle(request: Parameters<NodeHttpHandler["handle"]>[0], options: Parameters<NodeHttpHandler["handle"]>[1]): Promise<{
+        handle(request: Parameters<import("@smithy/node-http-handler").NodeHttpHandler["handle"]>[0], options: Parameters<import("@smithy/node-http-handler").NodeHttpHandler["handle"]>[1]): Promise<{
             response: import("@smithy/core/transport").HttpResponse;
         }>;
         destroy(): void;

package/dist/s3/handler.js

@@ -1,6 +1,7 @@
 import {
   s3Handler
-} from "../chunk-x4ntb898.js";
+} from "../chunk-z8e1ckkq.js";
+import"../chunk-c2b2jwm4.js";
 export {
   s3Handler
 };

package/dist/s3/index.js

@@ -1,19 +1,26 @@
 import {
   S3DataSource
-} from "../chunk-35cjec9z.js";
+} from "../chunk-3b877a0y.js";
 import"../chunk-z5pm2emz.js";
-import"../chunk-rkt41za2.js";
 import {
   S3Client
-} from "../chunk-zp1s833x.js";
+} from "../chunk-7m95c7pn.js";
+import"../chunk-18gcp0ck.js";
+import"../chunk-kap6ka3n.js";
 import"../chunk-v3hxvnrc.js";
-import"../chunk-x4ntb898.js";
-import"../chunk-h8fwx0k7.js";
-import"../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+import"../chunk-z8e1ckkq.js";
+import"../chunk-c2b2jwm4.js";
+import"../chunk-ssj93brx.js";
+import"../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import"../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   S3DataSource,
   S3Client

package/dist/transport/index.d.ts

@@ -1,3 +1,7 @@
+import { Transport } from "./lifecycle";
+import type { ConnectionAttempt } from "../connection/acquire";
+export { Transport } from "./lifecycle";
+/** Dial address only. Protocol identity remains with the client, never inferred from a forwarded address. */
 export interface Endpoint {
     host: string;
     port: number;
@@ -6,20 +10,24 @@ export interface Endpoint {
 export interface TcpTransport {
     readonly kind: "tcp";
     readonly name: string;
-    connect(endpoint: Endpoint): Promise<Endpoint>;
+    connect(endpoint: Endpoint, attempt?: ConnectionAttempt): Promise<Endpoint>;
 }
-export declare class DirectTransport implements TcpTransport {
+export declare class DirectTransport extends Transport implements TcpTransport {
     readonly kind = "tcp";
     readonly name = "direct";
-    connect(endpoint: Endpoint): Promise<Endpoint>;
+    protected paths(): readonly TransportPath[];
+    connect(endpoint: Endpoint, attempt?: ConnectionAttempt): Promise<Endpoint>;
 }
 /** The supplied forwarder owns port allocation and cleanup; external endpoints may stay direct. */
-export declare class PortForwardTransport implements TcpTransport {
+export declare class PortForwardTransport extends Transport implements TcpTransport {
     private readonly forward;
+    private readonly release?;
     readonly kind = "tcp";
     readonly name = "port-forward";
-    constructor(forward: (endpoint: Endpoint) => Promise<Endpoint>);
-    connect(endpoint: Endpoint): Promise<Endpoint>;
+    constructor(forward: (endpoint: Endpoint, attempt?: ConnectionAttempt) => Promise<Endpoint>, release?: (() => void | Promise<void>) | undefined, signal?: AbortSignal);
+    protected paths(): readonly TransportPath[];
+    connect(endpoint: Endpoint, attempt?: ConnectionAttempt): Promise<Endpoint>;
+    protected close(): Promise<void>;
 }
 export interface PodRunOptions {
     stdin: string;
@@ -27,15 +35,17 @@ export interface PodRunOptions {
 }
 export type PodRunner = (command: readonly string[], options: PodRunOptions) => Promise<string>;
 /** A Python-capable Pod path. Protocol code supplies the script; the host enforces access. */
-export declare class PodPythonTransport {
+export declare class PodPythonTransport extends Transport {
     private readonly exec;
     private readonly python;
     readonly kind = "python";
     readonly name = "pod-python";
     constructor(exec: PodRunner, python?: string);
+    protected paths(): readonly TransportPath[];
     run(script: string, input: unknown, timeoutMs: number): Promise<string>;
 }
-export type Transport = TcpTransport | PodPythonTransport;
+export type TransportPath = TcpTransport | PodPythonTransport;
 /** Only failure to establish a connection permits a route change; never replay protocol operations. */
 export declare function isConnectionNetworkError(error: unknown): boolean;
 export { PodRelayTransport, type PodRelayOptions } from "./pod-relay";
+export { ServicePortForwardTransport } from "./service-port-forward";

package/dist/transport/index.js

@@ -3,16 +3,29 @@ import {
   PodPythonTransport,
   PortForwardTransport,
   isConnectionNetworkError
-} from "../chunk-h8fwx0k7.js";
+} from "../chunk-18gcp0ck.js";
 import {
   PodRelayTransport
-} from "../chunk-fqrknvr8.js";
-import"../chunk-nftzckdy.js";
+} from "../chunk-kap6ka3n.js";
+import"../chunk-ssj93brx.js";
+import {
+  ServicePortForwardTransport
+} from "../chunk-ehmx0yhp.js";
+import"../chunk-0d8vs5q8.js";
+import"../chunk-xgnz10sr.js";
+import"../chunk-6fnhzhdb.js";
+import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-ssj93brx.js";
+import {
+  Transport
+} from "../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
 export {
   isConnectionNetworkError,
+  Transport,
+  ServicePortForwardTransport,
   PortForwardTransport,
   PodRelayTransport,
   PodPythonTransport,

package/dist/transport/lifecycle.d.ts

@@ -0,0 +1,22 @@
+import type { Client } from "../client";
+import { type Acquisition } from "../connection/acquire";
+import type { TransportPath } from "./index";
+/**
+ * @spec A transport selects and prepares access paths; protocol establishment is supplied by the client.
+ * @rule Borrowed routes are never disposed by their consumers. Register resource-owning routes with ClientManager.
+ * @see {@link component://docs/toolbox.md}
+ */
+export declare class Transport implements Client {
+    #private;
+    private readonly candidates;
+    /** Root cancellation stops borrowers; only this transport's disposal tears down shared resources. */
+    protected readonly resourceSignal: AbortSignal;
+    readonly signal: AbortSignal;
+    constructor(candidates?: readonly TransportPath[], signal?: AbortSignal);
+    protected paths(): readonly TransportPath[];
+    initialize(): Promise<void>;
+    /** Internal handshake collaboration: only establishment errors can select another path. */
+    acquire<C>(options: Acquisition<TransportPath, C>): Promise<C>;
+    protected close(): Promise<void>;
+    dispose(): Promise<void>;
+}

package/dist/transport/lifecycle.js

@@ -0,0 +1,8 @@
+import {
+  Transport
+} from "../chunk-sb5qzv37.js";
+import"../chunk-43mcyrh4.js";
+import"../chunk-rkt41za2.js";
+export {
+  Transport
+};

package/dist/transport/pod-relay.d.ts

@@ -1,7 +1,9 @@
 import type { Client } from "../client";
 import { type Executor, type KubectlOptions } from "../kubernetes/executor";
 import { type StartPortForward } from "../kubernetes/port-forward";
-import type { Endpoint, TcpTransport } from "./index";
+import { Transport } from "./lifecycle";
+import type { Endpoint, TcpTransport, TransportPath } from "./index";
+import type { ConnectionAttempt } from "../connection/acquire";
 export interface PodRelayOptions extends KubectlOptions {
     namespace: string;
     /** Restrict eligible existing Pods without coupling callers to the relay runtime. */
@@ -16,7 +18,7 @@ export interface PodRelayOptions extends KubectlOptions {
 /** Execution-scoped TCP transport borrowed by all Service clients; only its root owner disposes it.
  * Python is private. Requires list pods, pods/exec and pods/portforward, never pods/create.
  */
-export declare class PodRelayTransport implements TcpTransport, Client {
+export declare class PodRelayTransport extends Transport implements TcpTransport, Client {
     #private;
     private readonly options;
     readonly kind = "tcp";
@@ -25,7 +27,8 @@ export declare class PodRelayTransport implements TcpTransport, Client {
         executor?: Executor;
         startForward?: StartPortForward;
     });
+    protected paths(): readonly TransportPath[];
     initialize(): Promise<void>;
-    connect(endpoint: Endpoint): Promise<Endpoint>;
-    dispose(): Promise<void>;
+    connect(endpoint: Endpoint, attempt?: ConnectionAttempt): Promise<Endpoint>;
+    protected close(): Promise<void>;
 }