@ctliz/agent-intercom-claude 0.12.0-connect.3

package/broker/client.ts

@@ -0,0 +1,1048 @@
+import { EventEmitter } from "events";
+import net from "net";
+import { randomUUID } from "crypto";
+import { POLICY_SEMANTICS_HASH, POLICY_SEMANTICS_VERSION } from "@ctliz/agent-intercom-core";
+import type { BossControlEnvelope } from "@ctliz/agent-intercom-core/boss";
+import { writeMessage, createMessageReader } from "./framing.ts";
+import { PersistentOutboundOutbox } from "../outbound-outbox.ts";
+import { loadRemoteAccessCredential, writeRemoteSessionCredential, type LoadedRemoteAccessCredential } from "./access-credential.ts";
+import {
+  getBrokerConnectTarget,
+  INTERCOM_PROTOCOL_NAME,
+  INTERCOM_PROTOCOL_VERSION,
+  type BrokerConnectTarget,
+} from "./paths.ts";
+import { intercomScopeIdFromEnvForRegistration, parseIntercomScopeIdForRegistration } from "../protocol-v4/contract.ts";
+import type {
+  AskCancellationReason,
+  BossRegistrationRequest,
+  BossSessionMetadata,
+  DeliveryFailureCode,
+  SessionInfo,
+  Message,
+  Attachment,
+  SessionRegistration,
+} from "../types.ts";
+import { DELIVERY_FAILURE_CODES } from "../types.ts";
+import {
+  assertBossRegistrationEcho,
+  assertCompatibleBossAdvertisement,
+  assertCompatibleOrdinaryAdvertisement,
+  parseBossRegistrationRequest,
+  parseBossSessionMetadata,
+  parseCorrelatedBossControl,
+} from "./boss-contracts.ts";
+import { hasExactDataKeys, isDenseArrayOf, isPlainDataRecord } from "./validation.ts";
+
+export interface IntercomClientOptions {
+  /** Exact private registration scope captured for this client lifecycle. */
+  scopeId?: string;
+  /** Environment used only when scopeId is not explicitly supplied. */
+  env?: NodeJS.ProcessEnv;
+}
+
+export interface SendOptions {
+  text: string;
+  attachments?: Attachment[];
+  replyTo?: string;
+  expectsReply?: boolean;
+  messageId?: string;
+}
+
+export interface SendResult {
+  id: string;
+  accepted: boolean;
+  delivered: boolean;
+  deliveryId?: string;
+  code?: DeliveryFailureCode;
+  reason?: string;
+}
+
+interface InternalSendOptions extends SendOptions {
+  control?: BossControlEnvelope;
+}
+
+function toError(error: unknown): Error {
+  return error instanceof Error ? error : new Error(String(error));
+}
+
+function connectToBrokerTarget(target: BrokerConnectTarget): net.Socket {
+  return typeof target === "string"
+    ? net.connect(target)
+    : net.connect({ host: target.host, port: target.port });
+}
+
+function isAttachment(value: unknown): value is Attachment {
+  if (!hasExactDataKeys(value, ["type", "name", "content"], ["language"])) {
+    return false;
+  }
+
+  const attachment = value as Record<string, unknown>;
+
+  if (
+    attachment.type !== "file"
+    && attachment.type !== "snippet"
+    && attachment.type !== "context"
+  ) {
+    return false;
+  }
+
+  if (typeof attachment.name !== "string" || typeof attachment.content !== "string") {
+    return false;
+  }
+
+  return attachment.language === undefined || typeof attachment.language === "string";
+}
+
+function isMessage(value: unknown): value is Message {
+  if (!hasExactDataKeys(value, ["id", "timestamp", "content"], ["replyTo", "expectsReply", "control"])) {
+    return false;
+  }
+
+  const message = value as Record<string, unknown>;
+
+  if (typeof message.id !== "string" || typeof message.timestamp !== "number") {
+    return false;
+  }
+
+  if (message.replyTo !== undefined && typeof message.replyTo !== "string") {
+    return false;
+  }
+
+  if (message.expectsReply !== undefined && typeof message.expectsReply !== "boolean") {
+    return false;
+  }
+
+  if (message.control !== undefined) {
+    try {
+      parseCorrelatedBossControl(message.control, message.id);
+    } catch {
+      return false;
+    }
+    if (message.replyTo !== undefined || message.expectsReply !== undefined) return false;
+  }
+
+  if (!hasExactDataKeys(message.content, ["text"], ["attachments"])) {
+    return false;
+  }
+
+  const content = message.content as Record<string, unknown>;
+  if (typeof content.text !== "string") {
+    return false;
+  }
+
+  if (message.control !== undefined && (content.text !== "" || content.attachments !== undefined)) return false;
+
+  return content.attachments === undefined
+    || isDenseArrayOf(content.attachments, isAttachment);
+}
+
+function isSessionInfo(value: unknown): value is SessionInfo {
+  if (!hasExactDataKeys(
+    value,
+    ["id", "cwd", "model", "pid", "startedAt", "lastActivity"],
+    [
+      "name", "status", "peerUid", "trustedLocal", "origin", "remoteHostId",
+      "parentSessionId", "rootSessionId", "generation", "canDelegate", "depth",
+      "maxDepth", "maxChildren", "boss",
+    ],
+  )) {
+    return false;
+  }
+
+  const session = value as Record<string, unknown>;
+
+  if (
+    typeof session.id !== "string"
+    || typeof session.cwd !== "string"
+    || typeof session.model !== "string"
+    || typeof session.pid !== "number"
+    || typeof session.startedAt !== "number"
+    || typeof session.lastActivity !== "number"
+  ) {
+    return false;
+  }
+
+  if (session.name !== undefined && typeof session.name !== "string") {
+    return false;
+  }
+
+  if (session.status !== undefined && typeof session.status !== "string") {
+    return false;
+  }
+
+  if (session.peerUid !== undefined && typeof session.peerUid !== "number") {
+    return false;
+  }
+
+  if (session.trustedLocal !== undefined && typeof session.trustedLocal !== "boolean") return false;
+  if (session.origin !== undefined && session.origin !== "local" && session.origin !== "remote") return false;
+  if (session.remoteHostId !== undefined && typeof session.remoteHostId !== "string") return false;
+  if (session.parentSessionId !== undefined && typeof session.parentSessionId !== "string") return false;
+  if (session.rootSessionId !== undefined && typeof session.rootSessionId !== "string") return false;
+  if (session.generation !== undefined && (typeof session.generation !== "number" || !Number.isSafeInteger(session.generation))) return false;
+  if (session.canDelegate !== undefined && typeof session.canDelegate !== "boolean") return false;
+  for (const field of ["depth", "maxDepth", "maxChildren"] as const) {
+    if (session[field] !== undefined && (typeof session[field] !== "number" || !Number.isSafeInteger(session[field]))) return false;
+  }
+  if (session.boss !== undefined) {
+    try {
+      parseBossSessionMetadata(session.boss, session.id);
+    } catch {
+      return false;
+    }
+  }
+  return true;
+}
+
+function isRemoteAccessMetadata(value: unknown): value is import("../types.ts").RemoteAccessMetadata {
+  if (!hasExactDataKeys(
+    value,
+    ["origin", "remoteHostId", "parentSessionId", "rootSessionId", "generation", "canDelegate", "depth", "maxDepth", "maxChildren"],
+    ["sessionCredential"],
+  )) return false;
+  const access = value as Record<string, unknown>;
+  return access.origin === "remote"
+    && typeof access.remoteHostId === "string"
+    && typeof access.parentSessionId === "string"
+    && typeof access.rootSessionId === "string"
+    && typeof access.generation === "number"
+    && Number.isSafeInteger(access.generation)
+    && access.generation > 0
+    && typeof access.canDelegate === "boolean"
+    && typeof access.depth === "number"
+    && Number.isSafeInteger(access.depth)
+    && typeof access.maxDepth === "number"
+    && Number.isSafeInteger(access.maxDepth)
+    && typeof access.maxChildren === "number"
+    && Number.isSafeInteger(access.maxChildren)
+    && (access.sessionCredential === undefined || typeof access.sessionCredential === "string");
+}
+
+function isDeliveryFailureCode(value: unknown): value is DeliveryFailureCode {
+  return typeof value === "string" && (DELIVERY_FAILURE_CODES as readonly string[]).includes(value);
+}
+
+export class IntercomClient extends EventEmitter {
+  private socket: net.Socket | null = null;
+  private readonly scopeId: string | undefined;
+  private _sessionId: string | null = null;
+  private pendingSends = new Map<string, {
+    accepted: boolean;
+    deliveryId?: string;
+    resolve: (r: SendResult) => void;
+    reject: (e: Error) => void;
+  }>();
+  private lateDeliveryAcceptances = new Map<string, string>();
+  private pendingLists = new Map<string, { resolve: (sessions: SessionInfo[]) => void; reject: (e: Error) => void }>();
+  private pendingAskControls = new Map<string, { resolve: (applied: boolean) => void; timeout: NodeJS.Timeout }>();
+  private outbox: PersistentOutboundOutbox | null = null;
+  private remoteAccessCredential: LoadedRemoteAccessCredential | undefined;
+  private requestedBossRegistration: BossRegistrationRequest | undefined;
+  private bossSessionMetadata: BossSessionMetadata | undefined;
+  private disconnecting = false;
+  private disconnectError: Error | null = null;
+
+  constructor(private readonly options: IntercomClientOptions = {}) {
+    super();
+    this.scopeId = options.scopeId === undefined
+      ? intercomScopeIdFromEnvForRegistration(options.env ?? process.env)
+      : parseIntercomScopeIdForRegistration(options.scopeId);
+  }
+
+  private failPending(error: Error): void {
+    for (const pending of this.pendingSends.values()) {
+      pending.reject(error);
+    }
+    this.pendingSends.clear();
+    for (const pending of this.pendingLists.values()) {
+      pending.reject(error);
+    }
+    this.pendingLists.clear();
+    for (const pending of this.pendingAskControls.values()) {
+      clearTimeout(pending.timeout);
+      pending.resolve(false);
+    }
+    this.pendingAskControls.clear();
+    this.lateDeliveryAcceptances.clear();
+  }
+
+  private hasQueuedOutboundMessage(messageId: string): boolean {
+    return this.outbox?.list().some((entry) => entry.message.id === messageId) ?? false;
+  }
+
+  get sessionId(): string | null {
+    return this._sessionId;
+  }
+
+  get outboxSize(): number {
+    return this.outbox?.list().length ?? 0;
+  }
+
+  isConnected(): boolean {
+    const socket = this.socket;
+    return Boolean(socket && this._sessionId && !this.disconnecting && !socket.destroyed && !socket.writableEnded && socket.writable);
+  }
+
+  private requireActiveSocket(): net.Socket {
+    if (this.disconnecting) {
+      throw new Error("Client disconnecting");
+    }
+
+    const socket = this.socket;
+    if (!socket || !this._sessionId) {
+      throw new Error("Not connected");
+    }
+
+    if (socket.destroyed || socket.writableEnded || !socket.writable) {
+      throw new Error("Client disconnected");
+    }
+
+    return socket;
+  }
+
+  connect(session: SessionRegistration, sessionId?: string): Promise<void> {
+    if (this.socket) {
+      return Promise.reject(new Error("Already connected"));
+    }
+
+    return new Promise((resolve, reject) => {
+      let socket: net.Socket;
+      let target: BrokerConnectTarget;
+      try {
+        this.requestedBossRegistration = session.boss === undefined
+          ? undefined
+          : parseBossRegistrationRequest(session.boss);
+        target = getBrokerConnectTarget();
+        this.remoteAccessCredential = loadRemoteAccessCredential();
+        socket = connectToBrokerTarget(target);
+      } catch (error) {
+        this.requestedBossRegistration = undefined;
+        reject(toError(error));
+        return;
+      }
+      this.socket = socket;
+      this.disconnectError = null;
+      let settled = false;
+      const timeout = setTimeout(() => {
+        if (!this._sessionId) {
+          cleanupConnectionAttempt();
+          cleanupSocketListeners();
+          if (this.socket === socket) {
+            this.socket = null;
+          }
+          this.requestedBossRegistration = undefined;
+          socket.destroy();
+          reject(new Error("Connection timeout"));
+        }
+      }, 10000);
+      
+      let connectionEstablished = false;
+      
+      const onRegistered = () => {
+        settled = true;
+        connectionEstablished = true;
+        cleanupConnectionAttempt();
+        resolve();
+      };
+      
+      const onError = (err: Error) => {
+        settled = true;
+        cleanupConnectionAttempt();
+        cleanupSocketListeners();
+        if (this.socket === socket) {
+          this.socket = null;
+        }
+        this.requestedBossRegistration = undefined;
+        socket.destroy();
+        reject(err);
+      };
+      
+      const onClose = () => {
+        const wasConnecting = !settled && !this._sessionId;
+        const wasDisconnecting = this.disconnecting;
+        const disconnectError = this.disconnectError ?? new Error("Client disconnected");
+        this.disconnecting = false;
+        cleanupConnectionAttempt();
+        cleanupSocketListeners();
+        this.failPending(disconnectError);
+        if (this.socket === socket) {
+          this.socket = null;
+        }
+        this._sessionId = null;
+        this.requestedBossRegistration = undefined;
+        this.bossSessionMetadata = undefined;
+        this.disconnectError = null;
+        if (connectionEstablished && !wasDisconnecting) {
+          this.emit("disconnected", disconnectError);
+        }
+        if (wasConnecting) {
+          reject(new Error("Connection closed before registration"));
+        }
+      };
+
+      const onSocketError = (err: Error) => {
+        if (connectionEstablished) {
+          this.disconnectError = err;
+          this.emit("error", err);
+        }
+      };
+
+      const onReaderError = (error: Error) => {
+        const protocolError = new Error(`Intercom protocol error: ${error.message}`, { cause: error });
+        if (!connectionEstablished) {
+          onError(protocolError);
+          return;
+        }
+        this.disconnectError = protocolError;
+        this.emit("error", protocolError);
+        socket.destroy();
+      };
+
+      const reader = createMessageReader((msg) => {
+        this.handleBrokerMessage(msg);
+      }, onReaderError);
+      
+      const cleanupConnectionAttempt = () => {
+        this.off("_registered", onRegistered);
+        socket.off("error", onError);
+        clearTimeout(timeout);
+      };
+
+      const cleanupSocketListeners = () => {
+        socket.off("data", reader);
+        socket.off("error", onSocketError);
+        socket.off("close", onClose);
+      };
+      
+      socket.on("data", reader);
+      socket.on("error", onError);
+      socket.on("close", onClose);
+      
+      socket.on("error", onSocketError);
+      this.once("_registered", onRegistered);
+      
+      try {
+        writeMessage(socket, {
+          type: "register",
+          protocol: INTERCOM_PROTOCOL_NAME,
+          version: INTERCOM_PROTOCOL_VERSION,
+          session,
+          ...(!this.remoteAccessCredential && sessionId ? { sessionId } : {}),
+          ...(this.remoteAccessCredential ? { access: this.remoteAccessCredential.access } : {}),
+          ...(this.scopeId ? { scopeId: this.scopeId } : {}),
+          ...(typeof target === "string" ? {} : { stateId: target.stateId }),
+        });
+      } catch (error) {
+        cleanupConnectionAttempt();
+        cleanupSocketListeners();
+        if (this.socket === socket) {
+          this.socket = null;
+        }
+        this.requestedBossRegistration = undefined;
+        socket.destroy();
+        reject(toError(error));
+      }
+    });
+  }
+
+  private handleBrokerMessage(msg: unknown): void {
+    if (!isPlainDataRecord(msg) || typeof msg.type !== "string") {
+      throw new Error("Invalid broker message");
+    }
+
+    const brokerMessage = msg as { type: string } & Record<string, unknown>;
+
+    if (this._sessionId === null && brokerMessage.type !== "registered" && brokerMessage.type !== "error") {
+      throw new Error(`Received ${brokerMessage.type} before registered`);
+    }
+
+    switch (brokerMessage.type) {
+      case "registered": {
+        const baseKeys = ["type", "sessionId", "protocol", "version"];
+        if (
+          this.requestedBossRegistration !== undefined
+          && (brokerMessage.capabilities === undefined || brokerMessage.boss === undefined)
+        ) {
+          throw new Error("Boss registration was downgraded to an ordinary session");
+        }
+        const exactKeys = this.requestedBossRegistration !== undefined
+          ? [...baseKeys, "capabilities", "boss"]
+          : this.remoteAccessCredential
+            ? [...baseKeys, "remoteAccess", "access"]
+            : baseKeys;
+        const optionalKeys = this.requestedBossRegistration === undefined ? ["capabilities"] : [];
+        if (
+          !hasExactDataKeys(brokerMessage, exactKeys, optionalKeys)
+          || typeof brokerMessage.sessionId !== "string"
+          || brokerMessage.protocol !== INTERCOM_PROTOCOL_NAME
+          || brokerMessage.version !== INTERCOM_PROTOCOL_VERSION
+        ) {
+          throw new Error("Invalid registered message");
+        }
+
+        if (this._sessionId !== null) {
+          throw new Error("Received duplicate registered message");
+        }
+
+        if (this.requestedBossRegistration !== undefined) {
+          assertCompatibleBossAdvertisement(brokerMessage.capabilities);
+          this.bossSessionMetadata = assertBossRegistrationEcho(
+            this.requestedBossRegistration,
+            brokerMessage.boss,
+            brokerMessage.sessionId,
+          );
+          this.requestedBossRegistration = undefined;
+        } else {
+          if (brokerMessage.boss !== undefined) {
+            throw new Error("Ordinary registration received unsolicited Boss authority metadata");
+          }
+          if (brokerMessage.capabilities !== undefined) {
+            assertCompatibleOrdinaryAdvertisement(brokerMessage.capabilities);
+          }
+          this.bossSessionMetadata = undefined;
+        }
+
+        if (this.remoteAccessCredential) {
+          const contract = brokerMessage.remoteAccess;
+          const contractFields = hasExactDataKeys(
+            contract,
+            ["feature", "policySemanticsVersion", "policySemanticsHash"],
+          ) ? contract : undefined;
+          if (
+            !contractFields
+            || contractFields.feature !== "remote-access-v1"
+            || contractFields.policySemanticsVersion !== POLICY_SEMANTICS_VERSION
+            || contractFields.policySemanticsHash !== POLICY_SEMANTICS_HASH
+          ) {
+            throw new Error("Remote Intercom policy contract is absent or incompatible");
+          }
+          if (!isRemoteAccessMetadata(brokerMessage.access)) {
+            throw new Error("Remote Intercom registration omitted broker-owned provenance");
+          }
+          if (this.remoteAccessCredential.enrollment) {
+            writeRemoteSessionCredential(this.remoteAccessCredential.path, brokerMessage.sessionId, brokerMessage.access);
+          } else {
+            const reconnect = this.remoteAccessCredential.access;
+            if (
+              !isPlainDataRecord(reconnect)
+              || reconnect.sessionId !== brokerMessage.sessionId
+              || reconnect.generation !== brokerMessage.access.generation
+            ) {
+              throw new Error("Remote Intercom reconnect identity or generation changed unexpectedly");
+            }
+          }
+        }
+
+        this._sessionId = brokerMessage.sessionId;
+        this.outbox = new PersistentOutboundOutbox(brokerMessage.sessionId);
+        this.lateDeliveryAcceptances.clear();
+        this.replayOutbox();
+        this.emit("_registered", { type: "registered", sessionId: brokerMessage.sessionId });
+        break;
+      }
+
+      case "sessions": {
+        const { requestId, sessions } = brokerMessage;
+        if (
+          !hasExactDataKeys(brokerMessage, ["type", "requestId", "sessions"])
+          || typeof requestId !== "string"
+          || !isDenseArrayOf(sessions, isSessionInfo)
+        ) {
+          throw new Error("Invalid sessions message");
+        }
+
+        const pending = this.pendingLists.get(requestId);
+        if (!pending) {
+          // Late list responses can still arrive after the caller has already timed out.
+          return;
+        }
+
+        this.pendingLists.delete(requestId);
+        pending.resolve(sessions);
+        break;
+      }
+
+      case "message": {
+        const { deliveryId, from, message } = brokerMessage;
+        if (
+          !hasExactDataKeys(brokerMessage, ["type", "deliveryId", "from", "message"])
+          || typeof deliveryId !== "string"
+          || !isSessionInfo(from)
+          || !isMessage(message)
+        ) {
+          throw new Error("Invalid message event");
+        }
+
+        if (message.control !== undefined) {
+          if (this.bossSessionMetadata === undefined) {
+            throw new Error("Ordinary session received unavailable Boss control traffic");
+          }
+          this.emit("control", from, message.control, deliveryId);
+        } else {
+          this.emit("message", from, message, deliveryId);
+        }
+        break;
+      }
+
+      case "delivery_accepted": {
+        const { deliveryId, messageId } = brokerMessage;
+        if (
+          !hasExactDataKeys(brokerMessage, ["type", "messageId", "deliveryId"])
+          || typeof deliveryId !== "string"
+          || typeof messageId !== "string"
+        ) {
+          throw new Error("Invalid delivery_accepted message");
+        }
+
+        const pending = this.pendingSends.get(messageId);
+        if (pending) {
+          if (pending.accepted) {
+            throw new Error("Duplicate delivery_accepted message");
+          }
+          pending.accepted = true;
+          pending.deliveryId = deliveryId;
+          this.emit("delivery_accepted", messageId, deliveryId);
+          break;
+        }
+        if (!this.hasQueuedOutboundMessage(messageId)) {
+          throw new Error("Unexpected delivery_accepted message without a pending send or queued outbox message");
+        }
+        if (this.lateDeliveryAcceptances.has(messageId)) {
+          throw new Error("Duplicate delivery_accepted message");
+        }
+        this.lateDeliveryAcceptances.set(messageId, deliveryId);
+        this.emit("delivery_accepted", messageId, deliveryId);
+        break;
+      }
+
+      case "delivered": {
+        const { deliveryId, messageId } = brokerMessage;
+        if (
+          !hasExactDataKeys(brokerMessage, ["type", "messageId", "deliveryId"])
+          || typeof deliveryId !== "string"
+          || typeof messageId !== "string"
+        ) {
+          throw new Error("Invalid delivered message");
+        }
+
+        const pending = this.pendingSends.get(messageId);
+        if (pending) {
+          if (!pending.accepted) {
+            throw new Error("Delivered message arrived before delivery acceptance");
+          }
+          if (pending.deliveryId !== deliveryId) {
+            throw new Error("Delivered message used a mismatched delivery ID");
+          }
+
+          this.outbox?.remove(messageId);
+          this.pendingSends.delete(messageId);
+          this.lateDeliveryAcceptances.delete(messageId);
+          pending.resolve({ id: messageId, accepted: true, delivered: true, deliveryId });
+          break;
+        }
+        if (!this.hasQueuedOutboundMessage(messageId)) {
+          throw new Error("Unexpected delivered message without a pending send or queued outbox message");
+        }
+        const acceptedDeliveryId = this.lateDeliveryAcceptances.get(messageId);
+        if (acceptedDeliveryId === undefined) {
+          throw new Error("Delivered message arrived before delivery acceptance");
+        }
+        if (acceptedDeliveryId !== deliveryId) {
+          throw new Error("Delivered message used a mismatched delivery ID");
+        }
+
+        this.outbox?.remove(messageId);
+        this.lateDeliveryAcceptances.delete(messageId);
+        this.emit("outbox_delivered", messageId, deliveryId);
+        break;
+      }
+
+      case "delivery_failed": {
+        const { accepted, code, messageId, reason } = brokerMessage;
+        if (
+          !hasExactDataKeys(brokerMessage, ["type", "messageId", "accepted", "code", "reason"])
+          || typeof accepted !== "boolean"
+          || !isDeliveryFailureCode(code)
+          || typeof messageId !== "string"
+          || typeof reason !== "string"
+        ) {
+          throw new Error("Invalid delivery_failed message");
+        }
+
+        const pending = this.pendingSends.get(messageId);
+        if (pending) {
+          if (accepted !== pending.accepted) {
+            throw new Error("Delivery failure contradicted the accepted delivery state");
+          }
+
+          this.outbox?.remove(messageId);
+          this.pendingSends.delete(messageId);
+          this.lateDeliveryAcceptances.delete(messageId);
+          pending.resolve({
+            id: messageId,
+            accepted,
+            delivered: false,
+            code,
+            reason,
+            ...(pending.deliveryId !== undefined ? { deliveryId: pending.deliveryId } : {}),
+          });
+          break;
+        }
+        if (!this.hasQueuedOutboundMessage(messageId)) {
+          throw new Error("Unexpected delivery_failed message without a pending send or queued outbox message");
+        }
+        if (accepted !== this.lateDeliveryAcceptances.has(messageId)) {
+          throw new Error("Delivery failure contradicted the accepted delivery state");
+        }
+
+        this.outbox?.remove(messageId);
+        this.lateDeliveryAcceptances.delete(messageId);
+        this.emit("outbox_failed", messageId, code, reason);
+        break;
+      }
+
+      case "ask_deferred": {
+        const { fromSessionId, messageId } = brokerMessage;
+        if (typeof fromSessionId !== "string" || typeof messageId !== "string") {
+          throw new Error("Invalid ask_deferred message");
+        }
+        this.emit("ask_deferred", messageId, fromSessionId);
+        break;
+      }
+
+      case "ask_cancelled": {
+        const { fromSessionId, messageId, reason } = brokerMessage;
+        if (typeof fromSessionId !== "string" || typeof messageId !== "string" || typeof reason !== "string") {
+          throw new Error("Invalid ask_cancelled message");
+        }
+        this.emit("ask_cancelled", messageId, fromSessionId, reason as AskCancellationReason);
+        break;
+      }
+
+      case "ask_control_result": {
+        const { action, applied, messageId, requestId } = brokerMessage;
+        if (
+          (action !== "defer" && action !== "cancel")
+          || typeof applied !== "boolean"
+          || typeof messageId !== "string"
+          || typeof requestId !== "string"
+        ) {
+          throw new Error("Invalid ask_control_result message");
+        }
+        const pending = this.pendingAskControls.get(requestId);
+        if (!pending) return;
+        clearTimeout(pending.timeout);
+        this.pendingAskControls.delete(requestId);
+        pending.resolve(applied);
+        break;
+      }
+
+      case "session_joined": {
+        if (!isSessionInfo(brokerMessage.session)) {
+          throw new Error("Invalid session_joined message");
+        }
+
+        this.emit("session_joined", brokerMessage.session);
+        break;
+      }
+
+      case "session_left": {
+        if (typeof brokerMessage.sessionId !== "string") {
+          throw new Error("Invalid session_left message");
+        }
+
+        this.emit("session_left", brokerMessage.sessionId);
+        break;
+      }
+
+      case "presence_update": {
+        if (!isSessionInfo(brokerMessage.session)) {
+          throw new Error("Invalid presence_update message");
+        }
+
+        this.emit("presence_update", brokerMessage.session);
+        break;
+      }
+
+      case "error": {
+        if (typeof brokerMessage.code !== "string" || typeof brokerMessage.error !== "string") {
+          throw new Error("Invalid error message");
+        }
+
+        if (this._sessionId === null) {
+          const error = new Error(brokerMessage.error) as Error & { code?: string };
+          error.code = brokerMessage.code;
+          throw error;
+        }
+        const error = new Error(brokerMessage.error) as Error & { code?: string };
+        error.code = brokerMessage.code;
+        this.emit("error", error);
+        break;
+      }
+
+      default:
+        throw new Error(`Unknown broker message type: ${brokerMessage.type}`);
+    }
+  }
+
+  async disconnect(preserveAsks = false): Promise<void> {
+    const socket = this.socket;
+    if (!socket) {
+      return;
+    }
+
+    this.disconnecting = true;
+    this.disconnectError = null;
+    this.failPending(new Error("Client disconnected"));
+    if (!preserveAsks) this.outbox?.clear();
+
+    await new Promise<void>((resolve) => {
+      let settled = false;
+      const finish = () => {
+        if (settled) {
+          return;
+        }
+        settled = true;
+        clearTimeout(timeout);
+        socket.off("close", onClose);
+        socket.off("error", onError);
+        resolve();
+      };
+      const onClose = () => finish();
+      const onError = () => {
+        socket.destroy();
+      };
+      const timeout = setTimeout(() => {
+        socket.destroy();
+      }, 2000);
+
+      socket.once("close", onClose);
+      socket.once("error", onError);
+
+      try {
+        writeMessage(socket, { type: "unregister", ...(preserveAsks ? { preserveAsks: true } : {}) });
+        socket.end();
+      } catch {
+        // Disconnect should still finish even if the unregister write fails.
+        socket.destroy();
+      }
+    });
+  }
+
+  listSessions(): Promise<SessionInfo[]> {
+    let socket: net.Socket;
+    try {
+      socket = this.requireActiveSocket();
+    } catch (error) {
+      return Promise.reject(toError(error));
+    }
+    
+    return new Promise((resolve, reject) => {
+      const requestId = randomUUID();
+      const wrappedResolve = (sessions: SessionInfo[]) => {
+        clearTimeout(timeout);
+        resolve(sessions);
+      };
+      const wrappedReject = (error: Error) => {
+        clearTimeout(timeout);
+        reject(error);
+      };
+      const timeout = setTimeout(() => {
+        if (this.pendingLists.has(requestId)) {
+          this.pendingLists.delete(requestId);
+          wrappedReject(new Error("List sessions timeout"));
+        }
+      }, 5000);
+      this.pendingLists.set(requestId, { resolve: wrappedResolve, reject: wrappedReject });
+      try {
+        writeMessage(socket, { type: "list", requestId });
+      } catch (error) {
+        clearTimeout(timeout);
+        this.pendingLists.delete(requestId);
+        reject(toError(error));
+      }
+    });
+  }
+
+  send(to: string, options: SendOptions): Promise<SendResult> {
+    return this.sendInternal(to, options);
+  }
+
+  sendControl(to: string, controlValue: BossControlEnvelope): Promise<SendResult> {
+    const control = parseCorrelatedBossControl(controlValue);
+    return this.sendInternal(to, {
+      text: "",
+      messageId: control.messageId,
+      control,
+    });
+  }
+
+  private sendInternal(to: string, options: InternalSendOptions): Promise<SendResult> {
+    let socket: net.Socket;
+    try {
+      socket = this.requireActiveSocket();
+    } catch (error) {
+      return Promise.reject(toError(error));
+    }
+    
+    const messageId = options.messageId ?? randomUUID();
+    if (this.pendingSends.has(messageId)) {
+      return Promise.resolve({
+        id: messageId,
+        accepted: false,
+        delivered: false,
+        code: "DUPLICATE_MESSAGE_ID",
+        reason: `Message ID ${messageId} is already pending`,
+      });
+    }
+    const message: Message = {
+      id: messageId,
+      timestamp: Date.now(),
+      replyTo: options.replyTo,
+      expectsReply: options.expectsReply,
+      ...(options.control === undefined ? {} : { control: options.control }),
+      content: {
+        text: options.text,
+        ...(options.attachments === undefined ? {} : { attachments: options.attachments }),
+      },
+    };
+
+    try {
+      this.outbox?.enqueue(to, message);
+    } catch (error) {
+      return Promise.reject(toError(error));
+    }
+
+    return new Promise((resolve, reject) => {
+      const wrappedResolve = (result: SendResult) => {
+        clearTimeout(timeout);
+        resolve(result);
+      };
+      const wrappedReject = (error: Error) => {
+        clearTimeout(timeout);
+        reject(error);
+      };
+      const timeout = setTimeout(() => {
+        const pending = this.pendingSends.get(messageId);
+        if (pending) {
+          if (
+            pending.accepted
+            && pending.deliveryId !== undefined
+            && this.hasQueuedOutboundMessage(messageId)
+          ) {
+            this.lateDeliveryAcceptances.set(messageId, pending.deliveryId);
+          }
+          this.pendingSends.delete(messageId);
+          wrappedReject(new Error("Send timeout"));
+        }
+      }, 10000);
+      this.pendingSends.set(messageId, {
+        accepted: false,
+        resolve: wrappedResolve,
+        reject: wrappedReject,
+      });
+
+      try {
+        writeMessage(socket, { type: "send", to, message });
+      } catch (error) {
+        clearTimeout(timeout);
+        this.pendingSends.delete(messageId);
+        reject(toError(error));
+      }
+    });
+  }
+
+  acknowledgeMessage(deliveryId: string): boolean {
+    return this.writeControlMessage({ type: "message_received", deliveryId });
+  }
+
+  rejectMessage(deliveryId: string, reason: string): boolean {
+    return this.writeControlMessage({ type: "message_rejected", deliveryId, code: "CONFLICTING_MESSAGE_ID", reason });
+  }
+
+  deferAsk(messageId: string): Promise<boolean> {
+    return this.sendAskControl("defer", messageId);
+  }
+
+  cancelAsk(messageId: string): Promise<boolean> {
+    return this.sendAskControl("cancel", messageId);
+  }
+
+  private sendAskControl(action: "defer" | "cancel", messageId: string): Promise<boolean> {
+    const requestId = randomUUID();
+    return new Promise((resolve) => {
+      const timeout = setTimeout(() => {
+        this.pendingAskControls.delete(requestId);
+        resolve(false);
+      }, 2000);
+      timeout.unref?.();
+      this.pendingAskControls.set(requestId, { resolve, timeout });
+      if (!this.writeControlMessage({ type: action === "defer" ? "defer_ask" : "cancel_ask", requestId, messageId })) {
+        clearTimeout(timeout);
+        this.pendingAskControls.delete(requestId);
+        resolve(false);
+      }
+    });
+  }
+
+  private writeControlMessage(message: Record<string, unknown>): boolean {
+    if (this.disconnecting) {
+      return false;
+    }
+
+    const socket = this.socket;
+    if (!socket || !this._sessionId || socket.destroyed || socket.writableEnded || !socket.writable) {
+      return false;
+    }
+
+    try {
+      writeMessage(socket, message);
+      return true;
+    } catch {
+      // Control messages are best-effort; local cleanup must still proceed.
+      return false;
+    }
+  }
+
+  private replayOutbox(): void {
+    const socket = this.socket;
+    if (!socket || !this._sessionId || socket.destroyed || socket.writableEnded || !socket.writable) return;
+    for (const entry of this.outbox?.list() ?? []) {
+      if (this.pendingSends.has(entry.message.id)) continue;
+      this.lateDeliveryAcceptances.delete(entry.message.id);
+      this.pendingSends.set(entry.message.id, {
+        accepted: false,
+        resolve: (result) => {
+          if (result.delivered && result.deliveryId) {
+            this.emit("outbox_delivered", result.id, result.deliveryId);
+          } else {
+            this.emit("outbox_failed", result.id, result.code, result.reason);
+          }
+        },
+        reject: () => {
+          // The durable entry remains queued and a later connection replays it.
+        },
+      });
+      try {
+        writeMessage(socket, { type: "send", to: entry.to, message: entry.message });
+      } catch {
+        this.pendingSends.delete(entry.message.id);
+        return;
+      }
+    }
+  }
+
+  updatePresence(updates: { name?: string; status?: string; model?: string }): void {
+    if (this.disconnecting) {
+      return;
+    }
+
+    const socket = this.socket;
+    if (!socket || !this._sessionId || socket.destroyed || socket.writableEnded || !socket.writable) {
+      return;
+    }
+
+    writeMessage(socket, { type: "presence", ...updates });
+  }
+}